@crvouga/mockingbird-service-postgres 1.3.1 → 1.5.0

package/CHANGELOG.md

@@ -1,6 +1,27 @@
 # Changelog — @crvouga/mockingbird-service-postgres
 
-## 1.3.1 (2026-09-30)
+## 1.5.0 (2026-10-01)
+
+### Features
+
+- record SQL timelines and serve the admin explorer ([8ced17a](https://github.com/crvouga/mockingbird/commit/8ced17ac398e386ef4e9d7e01fc7744c34b95d07))
+
+### Fixes and improvements
+
+- typecheck SQL admin timelines without a built sqlite port ([072daf4](https://github.com/crvouga/mockingbird/commit/072daf439f3967823149d7b0a8a9ce664d25097c))
+- keep admin buttons pressed until the action finishes ([0aabfcb](https://github.com/crvouga/mockingbird/commit/0aabfcb5f392aa51e193f9c3f817d5877d92bc6a))
+- size admin select fields like the text inputs beside them ([0fb3ef2](https://github.com/crvouga/mockingbird/commit/0fb3ef2ddbf43376c93a2ae6d87c6c9bf890dafc))
+- keep admin section tabs wired when boot is renamed ([4eda25e](https://github.com/crvouga/mockingbird/commit/4eda25eacd59da048d196f7cc8369d7a02b47bfc))
+
+## 1.4.0 (2026-09-29)
+
+### Features
+
+- allow unpopulated materialized views to reference each other ([3ce1d8f](https://github.com/crvouga/mockingbird/commit/3ce1d8f555ed4008dd894aed20ebf64ab0253774))
+- support CREATE EXTENSION pg_trgm ([2296ba2](https://github.com/crvouga/mockingbird/commit/2296ba2f3d1a9ea7ce8ec9f528e979034692ebf1))
+- install pgcrypto digest() ([b5f3ccf](https://github.com/crvouga/mockingbird/commit/b5f3ccf79c6fedcabab157f1ee07af18a7871057))
+
+## 1.3.1 (2026-09-29)
 
 ### Fixes and improvements
 
@@ -11,16 +32,23 @@
 ### Features
 
 - state each mock's parity and share one CSS reset ([264b06e](https://github.com/crvouga/mockingbird/commit/264b06ef15efc1d5131bbf78c89f45e2ce86b557))
+- share admin state and UI on every mock ([9194173](https://github.com/crvouga/mockingbird/commit/9194173ebeb4150a6e87e1187429a64bfc09b84c))
 
 ## 1.2.0 (2026-09-29)
 
 ### Features
 
 - share one field-guide identity across the docs site and READMEs ([024f445](https://github.com/crvouga/mockingbird/commit/024f445c143e0d2d07a4dd0a3c063bca94c59623))
+- let a scalar naming a later branch's enum value pick that branch ([30ade3a](https://github.com/crvouga/mockingbird/commit/30ade3a28a5b6b273ffbf261216b821acac8e961))
 
 ### Fixes and improvements
 
 - typecheck the postgres and sqlite README signature blocks ([cd2080b](https://github.com/crvouga/mockingbird/commit/cd2080b1af98f2746de063f289382527e28acfb2))
+- sign and retry webhooks on the injected clock ([1091bde](https://github.com/crvouga/mockingbird/commit/1091bde0df69d9cc3eba2062d8523755e6caca14))
+- stop cleared webhook deliveries from rescheduling forever ([424b78f](https://github.com/crvouga/mockingbird/commit/424b78f29317b162e3bf7d0049cc19be5b977026))
+- serialize immediate webhook attempts to fix reorder flake ([625c82b](https://github.com/crvouga/mockingbird/commit/625c82b5a8a7992c1cf93e9df68e77af08b353e3))
+- flush drains webhook retries scheduled while it runs ([c58cede](https://github.com/crvouga/mockingbird/commit/c58cede1b6ba7ae5ed3f8721ad9b7cd7bc0b1ca7))
+- treat enum [""] branches as unset markers in form coercion ([7177835](https://github.com/crvouga/mockingbird/commit/7177835cc510e14245d6648ad2821daa694bb80c))
 
 ## 1.1.0 (2026-09-25)
 
@@ -31,6 +59,8 @@
 ### Fixes and improvements
 
 - expose the wire server under ./wire, not the reserved ./server export ([12734c7](https://github.com/crvouga/mockingbird/commit/12734c7ecb39585ac3c7565d6367b3611d8c38a6))
+- take the rejected-request byte count from content-length, never by reading the body ([a0e5fb2](https://github.com/crvouga/mockingbird/commit/a0e5fb2fc80ab725c3552b612f3f091fd6c857fb))
+- reject a present body by media type, and log what a rejected request sent ([12e351a](https://github.com/crvouga/mockingbird/commit/12e351aba53cfb7b41e31a7809419455fc2902eb))
 
 ## 1.0.0 (2026-09-24)
 
@@ -49,6 +79,8 @@
 ### Features
 
 - agent issue reporting for parity, features and new services; in-process medplum mock ([fc3a53b](https://github.com/crvouga/mockingbird/commit/fc3a53be83e2840e55aef78970326c27982311a8))
+- add vendor mocks for the full service catalog ([f870287](https://github.com/crvouga/mockingbird/commit/f8702874c807b1be4ce4ae2c5b46c8fd59a5e8eb))
+- team identity, lab-account admin, sandbox limits, fixtures and request journal ([6cb1be3](https://github.com/crvouga/mockingbird/commit/6cb1be324a048ac9fe832061632c0ee9c9d01f8b))
 
 ### Fixes and improvements
 
@@ -56,8 +88,14 @@
 
 ## 0.1.3 (2026-09-20)
 
+### Features
+
+- one service contract — health, admin, namespaces, clock, faults, metrics ([fea7dd1](https://github.com/crvouga/mockingbird/commit/fea7dd169cc16d11baebba38dced7f630f725714))
+
 ### Fixes and improvements
 
+- scope admin-injected faults to the calling namespace ([3c1d573](https://github.com/crvouga/mockingbird/commit/3c1d573ac0c404324bbd20855a5ac7a2cd50f738))
+- take the admin namespace override only on admin routes ([37836a5](https://github.com/crvouga/mockingbird/commit/37836a5b0c51d17dd24e7b01c12dd6d8049646da))
 - ship installable dependency pins and a changelog per package ([33264f2](https://github.com/crvouga/mockingbird/commit/33264f2c455c976303e07b72a3809e82ab70c803))
 
 ## 0.1.2 (2026-09-19)

package/COMPATIBILITY.md

@@ -34,7 +34,7 @@ Anything a PostgreSQL application can invoke through SQL against the PGlite **18
 1. **Snapshot format** — custom binary codec (`PGMM`), not `pg_dump` / on-disk clusters (logical state still round-trips).
 2. **Deterministic `random()` / `now()`** — seeded PRNG and fixed clock by default (injectable).
 3. **Single session** — no MVCC across connections, no isolation levels beyond one session, no `25P02` aborted-transaction state (documented divergence).
-4. **NOT APPLICABLE** rows in `compat/coverage.json` (roles, replication, VACUUM internals, LISTEN/NOTIFY, cursors, full PL/pgSQL, extensions).
+4. **NOT APPLICABLE** rows in `compat/coverage.json` (roles, replication, VACUUM internals, LISTEN/NOTIFY, cursors, full PL/pgSQL, extensions other than `pgcrypto`'s `digest()` and `pg_trgm`'s `similarity` / `<%` / `gin_trgm_ops`).
 
 The oracle exposes **2787 builtin functions** and **74 operators** in `pg_catalog`; postgres-mem implements **302 functions** and **41 operators**, and every remaining item is an explicit entry in [`compat/unsupported-register.json`](compat/unsupported-register.json) with a reason (trigger/internal plumbing, admin/monitoring, unsupported type families, …). The gate fails closed on silence.
 
@@ -62,6 +62,8 @@ The oracle exposes **2787 builtin functions** and **74 operators** in `pg_catalo
 | Triggers (row-level, LANGUAGE sql-expressible) | PARTIALLY VERIFIED | Creation-order firing, `UPDATE OF` ignored, no INSTEAD OF (documented) |
 | CREATE FUNCTION LANGUAGE sql / plpgsql-lite | PARTIALLY VERIFIED | Scalar + set-returning; plpgsql subset: DECLARE, EXCEPTION WHEN others, CASE, FOR-IN-SELECT, RETURN NEXT |
 | Text search (tsvector / tsquery / @@ / ts_rank) | PARTIALLY VERIFIED | `simple`-style config; no ispell/synonym dictionaries |
+| `CREATE EXTENSION pgcrypto` / `digest()` | PARTIALLY VERIFIED | `digest(bytea, text)` and `digest(text, text)` for md5, sha1, sha224, sha256, sha384, sha512. `crypt`, `hmac`, `gen_salt`, and PGP functions are not installed. OpenSSL-only names (sha3, blake2, ripemd160, sm3) are not available. Extensions other than `pgcrypto` and `pg_trgm` still fail loud (`0A000`) |
+| `CREATE EXTENSION pg_trgm` | PARTIALLY VERIFIED | `similarity(text, text)`, `<%` at the default word-similarity threshold 0.6, and a single-column `gin_trgm_ops` index on `text` or `varchar`. `gist_trgm_ops`, multicolumn `gin_trgm_ops`, and non-default thresholds are not installed. |
 | COPY FROM/TO (text, csv) | VERIFIED | Via `copyFrom` API hook / rows out |
 | PREPARE / EXECUTE / DEALLOCATE, SET / SHOW / RESET | VERIFIED | GUC subset |
 | Transactions / savepoints | VERIFIED | No `25P02` aborted state (documented divergence) |

package/README.md

@@ -164,19 +164,28 @@ in a local multi-service stack — start the frontend/backend v3 server instead
 import { serve } from "@crvouga/mockingbird-service-postgres/wire"
 
 const server = await serve({ port: 0 }) // 0 → a free port, reported as server.port
-// postgres://postgres@127.0.0.1:${server.port}/db  — no initdb, no OS user, pure TypeScript
+// server.connectionString — postgres://postgres@127.0.0.1:<port>/postgres
 await server.close()
+
+const fromUri = await serve("postgres://postgres:secret@127.0.0.1:0/app")
+// fromUri.connectionString uses the bound port. A client that asks for another
+// database name is rejected with SQLSTATE 3D000.
+await fromUri.close()
 ```
 
 Or from the command line (installs a `mockingbird-postgres` bin):
 
 ```bash
 mockingbird-postgres serve --port 55432            # trust auth
-mockingbird-postgres serve --password secret --log # SCRAM-SHA-256, log each statement
+mockingbird-postgres serve postgres://postgres:secret@0.0.0.0:55432/app --log
 ```
 
 `serve({ database })` shares an existing `Database`, and `serve({ database: snapshot })` boots every
 server from one frozen template, so a seeded stack starts from the same bytes each time.
+`createAdmin` from `@crvouga/mockingbird-service-postgres/admin` serves the same `/__admin`
+surface as every other mock, including the table explorer (`GET /sql/tables`, `POST /sql/query`).
+The wire server does not speak that HTTP API.
+
 `server.snapshot()` freezes the live state; `server.fault({ dropConnection | delayStatementMs |
 failCommit })` arms the next statement or connection for a drop, a delay, or a `40001` commit
 failure.
@@ -207,12 +216,13 @@ another binary type gets `0A000`, and can switch that parameter to text).
 | --- | --- |
 | `exec(sql)` | Runs all semicolon-separated statements; **discards** row results (`void`). Does **not** accept bind parameters. Read `db.changes` afterwards if needed (reflects the **most recent** completed DML statement). Dump-only `DO` blocks and `ALTER TABLE ... SET (` storage parameters are no-ops. |
 | `registerFunction(spec)` | Install a JavaScript scalar. Not stored in PGMM snapshots; `open()` of a live snapshot copies the implementation by reference. |
-| `query(sql, params?, { at? }?)` | **Single statement only** (trailing `;` is fine). Returns all rows. `at` queries an immutable checkpoint without changing live state. Multi-statement scripts throw `misuse`. |
+| `query(sql, params?, { at? }?)` | **Single statement only** (trailing `;` is fine). Returns all rows. `at` is a `Snapshot` or a timeline checkpoint id and queries that checkpoint without changing live state. Multi-statement scripts throw `misuse`. |
 | `prepare(sql)` | **Single statement only**. Parses immediately; the AST is reused. Pass binds as rest args to `run` / `all` / `get` / `result` / `textResult` on each call. |
 | `transaction(fn)` | If idle: `BEGIN`, `fn()`, `COMMIT`, or `ROLLBACK` + rethrow. If already in a transaction: nested savepoint. A nested SQL `BEGIN` inside is a no-op warning like PostgreSQL. `close()` inside `fn` throws `misuse`. |
 | `copyFrom(sql, data)` | Executes `COPY table [(cols)] FROM STDIN` with `data` as the copy-in payload (text or csv per the COPY options). Returns rows copied. `COPY ... TO STDOUT` output is returned as result rows by `query`. |
-| `snapshot()` | Freeze a reusable `Snapshot` template (no encode). Illegal inside a transaction (`25P01`). |
-| `checkpoint()` / `branch(at?)` | Name a COW snapshot as a checkpoint; open an isolated branch from it (or current state). |
+| `snapshot()` | Freeze a reusable `Snapshot` template (no encode) and commit it on the followed timeline branch. Illegal inside a transaction (`25P01`). |
+| `checkpoint()` / `branch(at?)` | `checkpoint` records the same timeline point as `snapshot`. `branch` opens an isolated database from a snapshot (or the current state). |
+| `record(branch?)` / `fork(name, at?)` / `checkout(id, branch?)` / `reset()` | Timeline history on this database. `record` commits the live state. `fork` adds a branch pointer and does not switch live state. `checkout` installs a checkpoint. `reset` returns to the origin checkpoint on `main`. `history` lists heads and checkpoints. |
 | `Snapshot.open()` | Copy-on-write fork from a template. The parent stays open. |
 | `Snapshot.encode()` | Lazy PGMM blob for persistence / worker boot (computed once, cached). |
 | `Snapshot.decode(bytes)` | Decode a blob once per `Uint8Array` (WeakMap); later `open()` calls are copy-on-write. |
@@ -349,8 +359,9 @@ Stable runtime exports of the main entry:
 | `Statement` | Class returned by `db.prepare(sql)` (not constructed directly): `run`, `all`, `get`, `result`, `textResult`, and `sql`. |
 | `PostgresError` | Error class thrown for SQL and API errors: `category` (`ErrorCategory`), `sqlState` / `code` (five-character SQLSTATE, e.g. `"42P01"`, `"23505"`). |
 
-Signatures (types are exported too: `DatabaseOptions`, `RegisterFunctionOptions`, `ResultSet`,
-`RunResult`, `ErrorCategory`, `BindValue`, `JsValue`, `QueryRow`):
+Signatures (types are exported too: `DatabaseOptions`, `HistoryCheckpoint`, `DatabaseHistory`,
+`RegisterFunctionOptions`, `ResultSet`, `RunResult`, `ErrorCategory`, `BindValue`, `JsValue`,
+`QueryRow`):
 
 ```ts
 interface DatabaseOptions {
@@ -358,6 +369,21 @@ interface DatabaseOptions {
   random?: "deterministic" | "os"        // default "deterministic"; "os" is CSPRNG like PostgreSQL
   now?: Date | (() => Date) | "system"   // default 2000-01-01T00:00:00.000Z; "system" is wall clock
   int8?: "bigint" | "number" | "string"  // default "bigint"; "number" is unsafe beyond MAX_SAFE_INTEGER
+  maxCheckpoints?: number                // timeline checkpoints to retain; default 1000
+}
+
+interface HistoryCheckpoint {
+  id: string
+  branch: string
+  parent: string | null
+  at: number
+}
+
+interface DatabaseHistory {
+  readonly size: number
+  head(branch?: string): HistoryCheckpoint | undefined
+  branches(): Readonly<Record<string, string>>
+  checkpoints(): readonly HistoryCheckpoint[]
 }
 
 declare class Database {
@@ -365,12 +391,17 @@ declare class Database {
   exec(sql: string): void
   registerFunction(spec: { name: string; args: string[]; returns: string; strict?: boolean;
                            fn: (...args: JsValue[]) => JsValue }): void
-  query<T = QueryRow>(sql: string, params?: readonly BindValue[], options?: { at?: Snapshot }): T[]
+  query<T = QueryRow>(sql: string, params?: readonly BindValue[], options?: { at?: Snapshot | string }): T[]
   prepare(sql: string): Statement
   transaction<T>(fn: () => T): T
   copyFrom(sql: string, data: string): number   // COPY t FROM STDIN payload (\copy analog)
   snapshot(): Snapshot
   checkpoint(): Snapshot
+  record(branch?: string): HistoryCheckpoint
+  fork(name: string, at?: string): HistoryCheckpoint
+  checkout(id: string, branch?: string): HistoryCheckpoint
+  reset(): HistoryCheckpoint
+  readonly history: DatabaseHistory
   branch(at?: Snapshot): Database
   close(): void                                  // also [Symbol.dispose] when available
   readonly changes: number                       // rows affected by the most recent INSERT/UPDATE/DELETE

package/compat/coverage.json

@@ -399,7 +399,7 @@
       "evidence": [
         "tests/contract/views/"
       ],
-      "notes": "materialized views are eager snapshots refreshed by REFRESH MATERIALIZED VIEW"
+      "notes": "eager snapshots; WITH NO DATA sets relispopulated false and may read an unpopulated matview; REFRESH populates; CONCURRENTLY is not modelled"
     },
     "sql-createoperator": {
       "status": "UNSUPPORTED",

package/compat/sections/cat.ts

@@ -6,6 +6,7 @@ export const CAT_SECTION: CatalogSection = section("CAT", "pg_catalog and inform
   ["class-01", "user table appears in pg_class with relkind r"],
   ["class-02", "view appears in pg_class with relkind v"],
   ["class-03", "sequence appears in pg_class with relkind S"],
+  ["class-06", "materialized view appears in pg_class with relkind m"],
   ["class-04", "pg_class joined to pg_namespace resolves the schema"],
   ["class-05", "pg_class row disappears after DROP TABLE"],
   ["attr-01", "pg_attribute lists user columns in order"],

package/dist/admin.d.ts

@@ -0,0 +1,13 @@
+import type { Database, DatabaseOptions } from "./api/database.js";
+
+export interface AdminOptions {
+  database?: Database;
+  adminKey?: string;
+  databaseOptions?: DatabaseOptions;
+}
+
+export interface AdminServer {
+  fetch(request: Request): Promise<Response>;
+}
+
+export declare function createAdmin(options?: AdminOptions): AdminServer;