@gordon.gan/specflow 1.4.0-beta → 1.4.1

package/skills/database/postgresql/references/04-functions-jsonb.md

@@ -0,0 +1,117 @@
+# JSONB 函数与操作详解
+
+## 访问操作符
+
+```sql
+-- -> 返回 JSONB, ->> 返回 TEXT
+SELECT
+    config -> 'theme' AS theme_jsonb,              -- "dark"
+    config ->> 'theme' AS theme_text,              -- dark
+    config -> 'notifications' -> 'email' AS email_jsonb,
+    config #>> '{preferences, language}' AS lang
+
+FROM user_configs WHERE user_id = 1;
+
+-- #> / #>> 路径访问
+SELECT config #> '{preferences, timezone}' AS tz,
+       config #>> '{notifications, push}' AS push
+FROM user_configs WHERE user_id = 1;
+```
+
+## 包含与存在操作
+
+```sql
+-- @> — 包含（业务场景：查询包含特定配置的用户）
+SELECT user_id, config FROM user_configs
+WHERE config @> '{"notifications": {"email": true}}';
+
+-- ? — 是否存在键
+SELECT user_id FROM user_configs WHERE config ? 'trust_score';
+
+-- ?| — 存在任意键
+SELECT user_id FROM user_configs WHERE config ?| ARRAY['trust_score', 'vip_level'];
+
+-- ?& — 包含所有键
+SELECT user_id FROM user_configs WHERE config ?& ARRAY['theme', 'notifications'];
+```
+
+## 修改函数
+
+```sql
+-- || — JSONB 合并
+UPDATE user_configs SET config = config || '{"vip_level": 2}' WHERE user_id = 1;
+
+-- JSONB_SET — 设置路径值
+UPDATE user_configs SET config = JSONB_SET(config, '{notifications, email}', 'false'::JSONB)
+WHERE user_id = 1;
+
+-- JSONB_INSERT — 插入不覆盖 (PG 9.6+)
+SELECT JSONB_INSERT('{"a":1,"b":2}'::JSONB, '{c}', '3'::JSONB);
+
+-- JSONB_STRIP_NULLS — 移除 null
+SELECT JSONB_STRIP_NULLS('{"a":1,"b":null}'::JSONB);  -- {"a": 1}
+```
+
+## 构建函数
+
+```sql
+-- JSONB_BUILD_OBJECT / JSONB_BUILD_ARRAY
+SELECT JSONB_BUILD_OBJECT(
+    'id', 101, 'name', 'Alice',
+    'roles', JSONB_BUILD_ARRAY('admin', 'editor'),
+    'meta', JSONB_BUILD_OBJECT('last_login', NOW())
+);
+```
+
+## 展开函数
+
+```sql
+-- JSONB_EACH — 展开为 (key, value) 行集
+SELECT * FROM JSONB_EACH((SELECT config FROM user_configs WHERE user_id = 1));
+
+-- JSONB_EACH_TEXT — 展开为 (key, text_value)
+SELECT * FROM JSONB_EACH_TEXT((SELECT config FROM user_configs WHERE user_id = 1));
+
+-- JSONB_OBJECT_KEYS — 仅返回键
+SELECT * FROM JSONB_OBJECT_KEYS((SELECT config FROM user_configs WHERE user_id = 1));
+
+-- JSONB_EXTRACT_PATH — 提取路径
+SELECT JSONB_EXTRACT_PATH(config, 'preferences', 'language') FROM user_configs;
+```
+
+## 类型检查与格式化
+
+```sql
+-- JSONB_TYPEOF (PG 14+)
+SELECT JSONB_TYPEOF(config -> 'theme'),   -- string
+       JSONB_TYPEOF(config -> 'tags'),     -- array
+       JSONB_TYPEOF(config -> 'trust_score') -- number
+FROM user_configs WHERE user_id = 1;
+
+-- JSONB_PRETTY (PG 14+)
+SELECT JSONB_PRETTY(config) FROM user_configs WHERE user_id = 1;
+```
+
+## GIN 索引
+
+```sql
+-- 标准 GIN
+CREATE INDEX idx_config_gin ON user_configs USING GIN (config);
+
+-- jsonb_path_ops（更小更快，不支持 ? 操作符）
+CREATE INDEX idx_config_path ON user_configs USING GIN (config jsonb_path_ops);
+```
+
+## 完整示例表
+
+```sql
+CREATE TABLE user_configs (
+    id      BIGSERIAL PRIMARY KEY,
+    user_id INTEGER NOT NULL,
+    config  JSONB NOT NULL DEFAULT '{}'
+);
+
+INSERT INTO user_configs (user_id, config) VALUES
+(1, '{"theme":"dark","notifications":{"email":true},"preferences":{"language":"zh-CN","timezone":"Asia/Shanghai"},"tags":["developer","premium"],"trust_score":4.5}'),
+(2, '{"theme":"light","notifications":{"email":false},"preferences":{"language":"en","timezone":"America/New_York"},"tags":["basic"]}');
+```

package/skills/database/postgresql/references/05-fulltext-search.md

@@ -0,0 +1,109 @@
+# 全文搜索详解
+
+## 基础概念
+
+PostgreSQL 全文搜索基于 **tsvector** (文本搜索向量) 和 **tsquery** (文本搜索查询)，配合 GIN 索引实现高效搜索。
+
+## 建表与索引
+
+```sql
+CREATE TABLE documents (
+    id          SERIAL PRIMARY KEY,
+    title       TEXT NOT NULL,
+    body        TEXT NOT NULL,
+    body_tsv    TSVECTOR GENERATED ALWAYS AS (to_tsvector('english', body)) STORED
+);
+
+CREATE INDEX idx_documents_body_tsv ON documents USING GIN (body_tsv);
+
+INSERT INTO documents (title, body) VALUES
+    ('PostgreSQL Full Text Search',
+     'PostgreSQL provides full-text search capabilities out of the box.'),
+    ('Indexing Strategies',
+     'Proper indexing is crucial for database performance. GIN indexes are optimized for full-text search.'),
+    ('Database Performance Tuning',
+     'Performance tuning involves many aspects including query optimization, indexing strategy, and hardware configuration.');
+```
+
+## 核心函数
+
+```sql
+-- to_tsvector — 文本转搜索向量（停用词被移除, 动词被词根化）
+SELECT to_tsvector('english', 'The quick brown fox jumps over the lazy dog');
+-- 'brown':3 'dog':9 'fox':4 'jump':5 'lazi':8 'quick':2
+
+-- to_tsquery — 文本转搜索查询
+SELECT to_tsquery('english', 'search & indexing');
+-- 'search' & 'index'
+
+-- plainto_tsquery — 简单转换（空格分隔的单词自动加 &）
+SELECT plainto_tsquery('english', 'full text search');
+-- 'full' & 'text' & 'search'
+```
+
+## 匹配查询
+
+```sql
+-- @@ — 全文搜索匹配操作符
+SELECT id, title FROM documents
+WHERE body_tsv @@ to_tsquery('english', 'search & index');
+
+-- plainto_tsquery 简化写法
+SELECT id, title FROM documents
+WHERE body_tsv @@ plainto_tsquery('english', 'full text search');
+
+-- 直接对原始列搜索（不依赖 tsvector 列）
+SELECT id, title FROM documents
+WHERE to_tsvector('english', body) @@ to_tsquery('english', 'search');
+```
+
+## 排序与高亮
+
+```sql
+-- ts_rank / ts_rank_cd — 相关性排序
+SELECT id, title, ts_rank(body_tsv, query) AS rank
+FROM documents, to_tsquery('english', 'search & indexing') AS query
+WHERE body_tsv @@ query ORDER BY rank DESC;
+
+-- ts_headline — 高亮摘要
+SELECT id, ts_headline('english', body, query,
+    'StartSel=<mark>, StopSel=</mark>, MaxWords=30, MinWords=10') AS highlighted
+FROM documents, plainto_tsquery('english', 'full text search') AS query
+WHERE body_tsv @@ query;
+```
+
+## 短语搜索
+
+```sql
+-- <-> : 相邻单词
+SELECT * FROM documents
+WHERE body_tsv @@ to_tsquery('english', 'full <-> text <-> search');
+
+-- <N> : 相隔最多 N 个词
+SELECT * FROM documents
+WHERE body_tsv @@ to_tsquery('english', 'performance <2> tuning');
+-- 匹配 "performance tuning" 或 "performance and tuning"
+```
+
+## 中文全文搜索
+
+```sql
+-- 需要 zhparser 或 jieba 扩展
+-- CREATE EXTENSION zhparser;
+-- CREATE TEXT SEARCH CONFIGURATION chinese (PARSER = zhparser);
+-- ALTER TEXT SEARCH CONFIGURATION chinese ADD MAPPING FOR n,v,a,i,e,l WITH simple;
+-- SELECT to_tsvector('chinese', '数据库性能优化技巧');
+```
+
+## 多语言与自定义配置
+
+```sql
+-- simple: 不做词干分析
+SELECT to_tsvector('simple', 'running runs ran');  -- 'running':1 'runs':2 'ran':3
+
+-- english: 词干分析
+SELECT to_tsvector('english', 'running runs ran');  -- 'run':1,2,3
+
+-- 创建自定义字典
+CREATE TEXT SEARCH DICTIONARY my_dict (TEMPLATE = pg_catalog.simple, ...);
+```

package/skills/database/postgresql/references/06-index-types.md

@@ -0,0 +1,95 @@
+# 索引类型与视图详解
+
+## 6种索引类型
+
+| 索引类型 | 适用场景 | 操作符 | 典型用途 |
+|---------|---------|--------|---------|
+| **B-Tree** (默认) | 等值/范围查询 | =, <, <=, >, >=, BETWEEN, IN, IS NULL, LIKE ('abc%') | 主键、外键、排序字段 |
+| **Hash** | 等值查询 | = | 长随机值的等值比较 (有限用途) |
+| **GiST** | 几何/全文/范围 | &&, <@, @>, <<, >>, ~= | PostGIS、范围排除约束 |
+| **GIN** | 复合值索引 | @>, <@, ?, ?|, ?&, @@ | JSONB、数组、全文搜索 |
+| **BRIN** | 大表顺序相关数据 | =, <, <=, >, >=, BETWEEN | 时间序列、日志表 (节省 95%+ 空间) |
+| **SP-GiST** | 空间分区/聚类 | 同 GiST | 四叉树、k-d 树、前缀树 |
+
+## 索引创建
+
+```sql
+-- B-Tree
+CREATE INDEX idx_users_email ON users (email);
+CREATE INDEX idx_orders_created_at ON orders (created_at DESC);
+CREATE INDEX idx_orders_user_status ON orders (user_id, status);
+
+-- 复合索引列顺序: 等值在前，范围在后，选择性高的在前
+-- ✅ WHERE user_id = 1 AND status = 'paid'  → 索引 (user_id, status) 最优
+-- ❌ WHERE status = 'paid' AND created_at > '2024-01-01' → 索引 (created_at, status) 更好
+
+-- 部分索引（仅索引活跃用户，更小更快）
+CREATE INDEX idx_users_active ON users (email) WHERE is_active = TRUE;
+
+-- 覆盖索引 / INCLUDE (PG 11+, 避免回表)
+CREATE INDEX idx_orders_covering ON orders (user_id, status) INCLUDE (total_amount, created_at);
+
+-- Hash 索引
+CREATE INDEX idx_users_email_hash ON users USING HASH (email);
+
+-- GIN 索引
+CREATE INDEX idx_articles_body_tsv ON articles USING GIN (body_tsv);
+CREATE INDEX idx_config_gin ON user_configs USING GIN (config);
+CREATE INDEX idx_articles_tags_gin ON articles USING GIN (tags);
+CREATE INDEX idx_config_path ON user_configs USING GIN (config jsonb_path_ops);
+
+-- GiST 索引
+CREATE INDEX idx_room_bookings_period ON room_bookings USING GIST (period);
+
+-- BRIN 索引（大表时序数据，极大节省空间）
+CREATE INDEX idx_orders_brin ON orders USING BRIN (created_at) WITH (pages_per_range = 32);
+
+-- CONCURRENTLY — 在线建索引（不阻塞写）
+CREATE INDEX CONCURRENTLY idx_orders_user_id ON orders (user_id);
+```
+
+## 索引维护
+
+```sql
+-- DROP INDEX CONCURRENTLY — 在线删除
+DROP INDEX CONCURRENTLY IF EXISTS idx_orders_old;
+
+-- REINDEX — 重建索引（索引膨胀时）
+REINDEX INDEX idx_orders_user_id;
+REINDEX TABLE orders;
+REINDEX DATABASE mydb;
+
+-- REINDEX CONCURRENTLY — 在线重建 (PG 12+)
+REINDEX INDEX CONCURRENTLY idx_orders_user_id;
+```
+
+## 视图 (View)
+
+```sql
+-- 普通视图 — 虚拟表
+CREATE VIEW user_order_summary AS
+SELECT u.id, u.username, COUNT(o.id) AS total_orders,
+       COALESCE(SUM(o.total_amount), 0) AS total_spent,
+       MAX(o.created_at) AS last_order_date
+FROM users u LEFT JOIN orders o ON o.user_id = u.id
+GROUP BY u.id, u.username;
+
+-- WITH CHECK OPTION — 确保更新满足视图条件
+CREATE VIEW paid_orders AS SELECT * FROM orders WHERE status = 'paid'
+WITH CHECK OPTION;
+
+-- 物化视图 — 物理存储的快照
+CREATE MATERIALIZED VIEW mv_monthly_sales AS
+SELECT DATE_TRUNC('month', o.created_at) AS month, p.category_id,
+       COUNT(DISTINCT o.id) AS order_count, SUM(oi.quantity * oi.price) AS revenue
+FROM orders o JOIN order_items oi ON oi.order_id = o.id
+JOIN products p ON p.id = oi.product_id
+GROUP BY month, p.category_id WITH DATA;
+
+-- 刷新物化视图
+REFRESH MATERIALIZED VIEW mv_monthly_sales;
+
+-- 并发刷新（需唯一索引, PG 9.4+）
+CREATE UNIQUE INDEX idx_mv_monthly_sales_unique ON mv_monthly_sales (month, category_id);
+REFRESH MATERIALIZED VIEW CONCURRENTLY mv_monthly_sales;
+```

package/skills/database/postgresql/references/07-partition-fdw.md

@@ -0,0 +1,133 @@
+# 分区表与 FDW 详解
+
+## 分区表 (PG 10+)
+
+### RANGE 分区
+
+```sql
+CREATE TABLE orders_partitioned (
+    id BIGSERIAL, user_id INTEGER NOT NULL, total_amount NUMERIC(12,2),
+    status TEXT, created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+) PARTITION BY RANGE (created_at);
+
+CREATE TABLE orders_2024_01 PARTITION OF orders_partitioned
+    FOR VALUES FROM ('2024-01-01') TO ('2024-02-01');
+CREATE TABLE orders_2024_02 PARTITION OF orders_partitioned
+    FOR VALUES FROM ('2024-02-01') TO ('2024-03-01');
+
+-- 默认分区
+CREATE TABLE orders_default PARTITION OF orders_partitioned DEFAULT;
+```
+
+### LIST 分区
+
+```sql
+CREATE TABLE customers_partitioned (
+    id BIGSERIAL, name TEXT NOT NULL, region TEXT NOT NULL
+) PARTITION BY LIST (region);
+
+CREATE TABLE customers_asia PARTITION OF customers_partitioned
+    FOR VALUES IN ('CN', 'JP', 'KR', 'SG');
+CREATE TABLE customers_americas PARTITION OF customers_partitioned
+    FOR VALUES IN ('US', 'CA', 'BR', 'MX');
+```
+
+### HASH 分区
+
+```sql
+CREATE TABLE logs_partitioned (
+    id BIGSERIAL, level TEXT, message TEXT, logged_at TIMESTAMPTZ DEFAULT NOW()
+) PARTITION BY HASH (id);
+
+CREATE TABLE logs_p0 PARTITION OF logs_partitioned FOR VALUES WITH (MODULUS 4, REMAINDER 0);
+CREATE TABLE logs_p1 PARTITION OF logs_partitioned FOR VALUES WITH (MODULUS 4, REMAINDER 1);
+CREATE TABLE logs_p2 PARTITION OF logs_partitioned FOR VALUES WITH (MODULUS 4, REMAINDER 2);
+CREATE TABLE logs_p3 PARTITION OF logs_partitioned FOR VALUES WITH (MODULUS 4, REMAINDER 3);
+```
+
+### 子分区 (PG 11+)
+
+```sql
+CREATE TABLE sales (id BIGSERIAL, sale_date DATE NOT NULL, region TEXT NOT NULL, amount NUMERIC(12,2))
+PARTITION BY RANGE (sale_date);
+
+CREATE TABLE sales_2024_q1 PARTITION OF sales
+    FOR VALUES FROM ('2024-01-01') TO ('2024-04-01')
+    PARTITION BY LIST (region);
+```
+
+### 分区维护
+
+```sql
+-- 添加新分区
+CREATE TABLE orders_2024_04 PARTITION OF orders_partitioned
+    FOR VALUES FROM ('2024-04-01') TO ('2024-05-01');
+
+-- 分离分区（变成独立表）
+ALTER TABLE orders_partitioned DETACH PARTITION orders_2024_01;
+
+-- 附加分区
+ALTER TABLE orders_partitioned ATTACH PARTITION orders_2024_01
+    FOR VALUES FROM ('2024-01-01') TO ('2024-02-01');
+
+-- 分区裁剪自动生效
+EXPLAIN SELECT * FROM orders_partitioned
+WHERE created_at >= '2024-02-15' AND created_at < '2024-03-01';
+-- 只在 orders_2024_02 分区上扫描
+
+-- 分区表索引自动应用到所有分区
+CREATE INDEX ON orders_partitioned (user_id);
+CREATE INDEX ON orders_partitioned (created_at DESC);
+```
+
+### 分区最佳实践
+
+- 每个分区 1-10GB 为宜
+- 时间分区常用：日、周、月、季
+- 定期分离旧分区用于归档
+- 分区数不宜超过 1000
+- 分区键直接影响分区裁剪能力
+
+## FDW (Foreign Data Wrapper)
+
+### postgres_fdw — 跨 PG 数据库
+
+```sql
+CREATE EXTENSION postgres_fdw;
+
+CREATE SERVER remote_prod FOREIGN DATA WRAPPER postgres_fdw
+OPTIONS (host '192.168.1.100', port '5432', dbname 'prod_db');
+
+CREATE USER MAPPING FOR current_user SERVER remote_prod
+OPTIONS (user 'readonly_user', password 'secret');
+
+CREATE FOREIGN TABLE remote_orders (
+    id BIGINT, user_id INTEGER, total_amount NUMERIC(12,2), status TEXT, created_at TIMESTAMPTZ
+) SERVER remote_prod OPTIONS (schema_name 'public', table_name 'orders');
+
+-- 查询远程表
+SELECT * FROM remote_orders WHERE created_at > NOW() - INTERVAL '1 hour';
+
+-- 批量导入外部表结构
+IMPORT FOREIGN SCHEMA public FROM SERVER remote_prod INTO local_schema
+LIMIT TO (users, orders, products);
+```
+
+### file_fdw — 读取 CSV
+
+```sql
+CREATE EXTENSION file_fdw;
+CREATE SERVER file_server FOREIGN DATA WRAPPER file_fdw;
+
+CREATE FOREIGN TABLE csv_orders (
+    id BIGINT, user_id INTEGER, amount NUMERIC(10,2), order_date DATE
+) SERVER file_server OPTIONS (filename '/data/orders.csv', format 'csv', header 'true');
+
+SELECT SUM(amount) FROM csv_orders WHERE order_date >= '2024-01-01';
+```
+
+### FDW 性能考量
+
+- 适合小数据量或低频跨库查询
+- 大数据量传输建议用逻辑复制或 ETL
+- WHERE 条件尽量 push down 到远程

package/skills/database/postgresql/references/08-replication-backup.md

@@ -0,0 +1,215 @@
+# 复制/备份/权限详解
+
+## 流复制 (Streaming Replication)
+
+### 主库配置
+
+```conf
+# postgresql.conf
+wal_level = replica
+max_wal_senders = 10
+wal_keep_size = 1GB
+hot_standby = on
+```
+
+```sql
+-- pg_hba.conf
+-- host replication replicator 192.168.1.0/24 md5
+
+CREATE USER replicator WITH REPLICATION LOGIN PASSWORD 'strong_password';
+```
+
+### 从库搭建
+
+```bash
+# 清空从库数据目录
+rm -rf /var/lib/postgresql/data/*
+
+# 从主库拉取基础备份
+pg_basebackup -h 192.168.1.100 -U replicator \
+    -D /var/lib/postgresql/data -P -v --wal-method=stream
+
+# PG 12+: 创建 standby.signal
+touch /var/lib/postgresql/data/standby.signal
+
+# 配置主库连接
+echo "primary_conninfo = 'host=192.168.1.100 port=5432 user=replicator password=strong_password'" \
+    >> /var/lib/postgresql/data/postgresql.auto.conf
+
+# 启动从库
+systemctl start postgresql
+
+# 检查复制状态（主库）
+SELECT * FROM pg_stat_replication;
+# 从库
+SELECT * FROM pg_stat_wal_receiver;
+```
+
+### 同步 vs 异步
+
+```sql
+-- 同步复制：主库等待从库确认
+-- 配置: synchronous_standby_names = 'FIRST 1 (slave1, slave2)'
+-- 数据零丢失，但写入延迟增加
+
+-- 检查同步状态
+SELECT application_name, state, sync_state, write_lag, flush_lag, replay_lag
+FROM pg_stat_replication;
+-- sync: 同步, async: 异步, potential: 候选同步
+```
+
+## 逻辑复制 (PG 10+)
+
+```sql
+-- 发布端
+CREATE PUBLICATION my_pub FOR ALL TABLES;
+CREATE PUBLICATION orders_pub FOR TABLE orders, order_items;
+CREATE PUBLICATION paid_orders_pub FOR TABLE orders WHERE (status = 'paid');  -- PG 15+
+
+-- 订阅端
+CREATE SUBSCRIPTION my_sub
+CONNECTION 'host=192.168.1.100 port=5432 dbname=mydb user=replicator password=strong_password'
+PUBLICATION my_pub;
+
+-- 管理
+ALTER SUBSCRIPTION my_sub ENABLE;
+ALTER SUBSCRIPTION my_sub DISABLE;
+ALTER SUBSCRIPTION my_sub REFRESH PUBLICATION;
+DROP SUBSCRIPTION my_sub;
+
+-- 监控
+SELECT * FROM pg_stat_subscription;
+```
+
+## 备份与恢复
+
+### pg_dump — 逻辑备份
+
+```bash
+# SQL 格式
+pg_dump -h localhost -U postgres -d mydb > mydb.sql
+
+# 自定义格式（推荐）
+pg_dump -h localhost -U postgres -d mydb -Fc -f mydb.dump
+
+# 并行导出目录格式
+pg_dump -h localhost -U postgres -d mydb -Fd -j 4 -f /backup/mydb/
+
+# 只导出结构
+pg_dump -h localhost -U postgres -d mydb -s -f mydb_schema.sql
+
+# 指定表
+pg_dump -h localhost -U postgres -d mydb -t orders -t users -f mydb_tables.sql
+
+# 全局对象（角色、表空间）
+pg_dumpall -h localhost -U postgres -g -f global_objects.sql
+```
+
+### pg_restore — 恢复
+
+```bash
+pg_restore -h localhost -U postgres -d mydb /backup/mydb.dump
+pg_restore -h localhost -U postgres -d mydb -j 4 /backup/mydb.dump  # 并行
+pg_restore -h localhost -U postgres -d mydb -t users /backup/mydb.dump  # 指定表
+
+# SQL 文件恢复
+psql -h localhost -U postgres -d mydb < mydb.sql
+```
+
+### WAL 归档与 PITR
+
+```conf
+# postgresql.conf
+archive_mode = on
+archive_command = 'cp %p /archive/%f'
+wal_keep_size = 1GB
+```
+
+```bash
+# 创建基础备份
+pg_basebackup -h localhost -U postgres -D /backup/base -P -v --wal-method=stream
+
+# PITR 恢复步骤:
+# 1. 停止 PG
+# 2. 用基础备份恢复数据目录
+# 3. 创建 recovery.signal (PG 12+)
+# 4. 配置 restore_command 和 recovery_target_time
+# 5. 启动 PG
+```
+
+### pg_basebackup — 物理备份
+
+```bash
+# 基础用法
+pg_basebackup -h localhost -U replicator -D /backup/pg_base -P -v --wal-method=stream
+
+# 压缩 tar 格式
+pg_basebackup -h localhost -U replicator -D /backup/pg_base -Ft -z -P -v
+
+# 验证备份 (PG 13+)
+pg_verifybackup /backup/pg_base
+```
+
+## 高可用工具
+
+```bash
+# Patroni (基于 etcd/consul/ZK)
+# 自动故障转移 + 自动恢复
+patroni /etc/patroni/patroni.yml
+
+# repmgr
+repmgr -f /etc/repmgr.conf primary register
+repmgr -f /etc/repmgr.conf standby clone
+repmgr -f /etc/repmgr.conf standby register
+repmgr -f /etc/repmgr.conf standby switchover
+
+# PgBouncer — 连接池
+# Pgpool-II — 连接池 + 读写分离 + 负载均衡
+```
+
+## 权限管理
+
+```sql
+-- ROLE 管理
+CREATE ROLE app_user WITH LOGIN PASSWORD 'password';
+CREATE ROLE readonly_role;
+CREATE ROLE readwrite_role;
+
+-- 角色层级
+GRANT readonly_role TO app_user;
+
+-- Schema 权限
+GRANT USAGE ON SCHEMA public TO readonly_role;
+GRANT SELECT ON ALL TABLES IN SCHEMA public TO readonly_role;
+GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA public TO readwrite_role;
+
+-- 默认权限（未来新建表自动授权）
+ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT ON TABLES TO readonly_role;
+
+-- 序列、函数
+GRANT USAGE, SELECT ON ALL SEQUENCES TO readwrite_role;
+GRANT EXECUTE ON ALL FUNCTIONS TO readwrite_role;
+
+-- RLS 行级安全（多租户隔离）
+CREATE TABLE tenant_orders (id BIGSERIAL PRIMARY KEY, tenant_id INTEGER NOT NULL, ...);
+ALTER TABLE tenant_orders ENABLE ROW LEVEL SECURITY;
+
+CREATE POLICY tenant_isolation ON tenant_orders
+    USING (tenant_id = current_setting('app.tenant_id')::INTEGER);
+
+ALTER TABLE tenant_orders FORCE ROW LEVEL SECURITY;
+SET app.tenant_id = '1001';  -- 应用层设置
+```
+
+## 扩展
+
+```sql
+-- PostGIS: CREATE EXTENSION postgis;
+-- pgvector: CREATE EXTENSION vector;
+-- pg_stat_statements: CREATE EXTENSION pg_stat_statements;
+-- uuid-ossp: CREATE EXTENSION "uuid-ossp";
+-- pgcrypto: CREATE EXTENSION pgcrypto;
+-- citext: CREATE EXTENSION citext;
+-- pg_trgm: CREATE EXTENSION pg_trgm;
+-- unaccent: CREATE EXTENSION unaccent;
+```