Add support for ARIES UNDO and constant time recovery

.gitignore

@@ -43,3 +43,6 @@ lib*.pc
 /Release/
 /tmp_install/
 /portlock/
+
+# local build/install prefix (never commit)
+/inst/

.local-gitignore

@@ -0,0 +1,20 @@
+# Local development ignores (not tracked in .gitignore)
+# To enable: git config core.excludesFile .local-gitignore
+.local-gitignore
+build/
+build-valgrind/
+build-asan/
+install/
+install-valgrind/
+install-asan/
+.direnv/
+.cache/
+.history
+test-db/
+log/
+results/
+regression.diffs
+regression.out
+*.core
+core.*
+CLAUDE.md

contrib/amcheck/verify_nbtree.c

@@ -210,6 +210,7 @@ static void bt_child_highkey_check(BtreeCheckState *state,
 static void bt_downlink_missing_check(BtreeCheckState *state, bool rightsplit,
 									  BlockNumber blkno, Page page);
 static void bt_tuple_present_callback(Relation index, ItemPointer tid,
+									  const RowID *rowid,
 									  Datum *values, bool *isnull,
 									  bool tupleIsAlive, void *checkstate);
 static IndexTuple bt_normalize_tuple(BtreeCheckState *state,
@@ -2779,7 +2780,8 @@ bt_downlink_missing_check(BtreeCheckState *state, bool rightsplit,
  * also allows us to detect the corruption in many cases.
  */
 static void
-bt_tuple_present_callback(Relation index, ItemPointer tid, Datum *values,
+bt_tuple_present_callback(Relation index, ItemPointer tid, const RowID *rowid,
+						  Datum *values,
 						  bool *isnull, bool tupleIsAlive, void *checkstate)
 {
 	BtreeCheckState *state = (BtreeCheckState *) checkstate;
@@ -2860,6 +2862,32 @@ bt_normalize_tuple(BtreeCheckState *state, IndexTuple itup)
 	/* Caller should only pass "logical" non-pivot tuples here */
 	Assert(!BTreeTupleIsPosting(itup) && !BTreeTupleIsPivot(itup));
 
+	/*
+	 * For a wider-than-TID identity (e.g. RECNO's (TID, gen)) the on-page
+	 * leaf tuples carry a trailing suffix (the generation) that is NOT part
+	 * of the key+TID the heapallindexed scan reconstructs.  The suffix must
+	 * be excluded from the fingerprint: an index whose key was not touched by
+	 * an unrelated in-place UPDATE keeps its original-generation entry, while
+	 * the live tuple's shared per-row generation has since advanced -- the
+	 * key+TID still match, only the (irrelevant-here) suffix differs.  Reform
+	 * from the key datums so the leaf tuple (with suffix) and the heap-derived
+	 * tuple (without) fingerprint to the identical base tuple.  index_getattr
+	 * reads only the key attributes and ignores the trailing suffix.
+	 */
+	if (RelationGetIndexRowIdWidth(state->rel) > sizeof(ItemPointerData))
+	{
+		Datum		widevals[INDEX_MAX_KEYS];
+		bool		widenull[INDEX_MAX_KEYS];
+
+		for (i = 0; i < tupleDescriptor->natts; i++)
+			widevals[i] = index_getattr(itup, TupleDescAttr(tupleDescriptor, i)->attnum,
+										tupleDescriptor, &widenull[i]);
+		reformed = index_form_tuple(tupleDescriptor, widevals, widenull);
+		reformed->t_tid = itup->t_tid;
+		/* Continue normalization on the suffix-free base tuple. */
+		itup = reformed;
+	}
+
 	/* Easy case: It's immediately clear that tuple has no varlena datums */
 	if (!IndexTupleHasVarwidths(itup))
 		return itup;

contrib/bloom/blinsert.c

@@ -72,7 +72,8 @@ initCachedPage(BloomBuildState *buildstate)
  * Per-tuple callback for table_index_build_scan.
  */
 static void
-bloomBuildCallback(Relation index, ItemPointer tid, Datum *values,
+bloomBuildCallback(Relation index, ItemPointer tid, const RowID *rowid,
+				   Datum *values,
 				   bool *isnull, bool tupleIsAlive, void *state)
 {
 	BloomBuildState *buildstate = (BloomBuildState *) state;
@@ -176,12 +177,14 @@ blinsert(Relation index, Datum *values, bool *isnull,
 		 ItemPointer ht_ctid, Relation heapRel,
 		 IndexUniqueCheck checkUnique,
 		 bool indexUnchanged,
-		 IndexInfo *indexInfo)
+		 IndexInfo *indexInfo,
+		 const RowID *rowid)
 {
 	BloomState	blstate;
 	BloomTuple *itup;
 	MemoryContext oldCtx;
 	MemoryContext insertCtx;
+
 	BloomMetaPageData *metaData;
 	Buffer		buffer,
 				metaBuffer;
@@ -191,6 +194,8 @@ blinsert(Relation index, Datum *values, bool *isnull,
 	OffsetNumber nStart;
 	GenericXLogState *state;
 
+	(void) rowid;				/* bloom stores only the heap TID */
+
 	insertCtx = AllocSetContextCreate(CurrentMemoryContext,
 									  "Bloom insert temporary context",
 									  ALLOCSET_DEFAULT_SIZES);

contrib/bloom/bloom.h

@@ -189,7 +189,8 @@ extern bool blinsert(Relation index, Datum *values, bool *isnull,
 					 ItemPointer ht_ctid, Relation heapRel,
 					 IndexUniqueCheck checkUnique,
 					 bool indexUnchanged,
-					 struct IndexInfo *indexInfo);
+					 struct IndexInfo *indexInfo,
+					 const RowID *rowid);
 extern IndexScanDesc blbeginscan(Relation r, int nkeys, int norderbys);
 extern int64 blgetbitmap(IndexScanDesc scan, TIDBitmap *tbm);
 extern void blrescan(IndexScanDesc scan, ScanKey scankey, int nscankeys,

contrib/pageinspect/Makefile

@@ -10,10 +10,12 @@ OBJS = \
 	gistfuncs.o \
 	hashfuncs.o \
 	heapfuncs.o \
-	rawpage.o
+	rawpage.o \
+	recnofuncs.o
 
 EXTENSION = pageinspect
-DATA =  pageinspect--1.12--1.13.sql \
+DATA =  pageinspect--1.13--1.14.sql \
+	pageinspect--1.12--1.13.sql \
 	pageinspect--1.11--1.12.sql pageinspect--1.10--1.11.sql \
 	pageinspect--1.9--1.10.sql pageinspect--1.8--1.9.sql \
 	pageinspect--1.7--1.8.sql pageinspect--1.6--1.7.sql \
@@ -32,7 +34,8 @@ REGRESS = \
 	gin \
 	gist \
 	hash \
-	oldextversions
+	oldextversions \
+	hot_updates
 
 ifdef USE_PGXS
 PG_CONFIG = pg_config