feature: Add maintain command for automated runway provisioning

[codybswaney]

Summary

maintain is the scheduler entry point: it discovers every partitioned table that carries a pgslice settings comment and extends them all in one run.

• Per-period horizons — --future-daily/-weekly/-monthly/-yearly (defaults 90/26/6/1 respectively). Each also reads a PGSLICE_FUTURE_* environment variable (precedence: flag > env > default) for env-based scheduled-job config.
• Per-table isolation — one table's failure is recorded without aborting the rest of the fleet; the process exits non-zero if any table failed or is replication-unsafe.
• Replica-identity guard — read-only check that every leaf has a usable replica identity for logical replication; surfaces problems, never mutates.
• Structured JSONL logging — one record per line, each stamped with a per-run jobId and the target host + database.
• Fix — AdvisoryLock.withLock no longer lets a lock-release failure in its finally mask the handler's real error.

Discovery filtering (--schema), grant inheritance, and the composite PK handling reuse the existing add_partitions machinery — maintain simply adds the fleet-wide discovery/iteration plus the logging and additional guard layers.

Test plan

• npm test (vitest against PostgreSQL 13–18): discovery + filtering, per-period extension, idempotent re-run, per-table failure isolation + non-zero exit, the replica-identity guard, the JSONL record shape (host / db / jobId, no-op vs. extended, error surfacing), and env/flag precedence.
• Validated end-to-end against ephemeral database copies via a scheduled-job runner, see this page for WorkOS internal validation against real tables.

For INFRA-5546

[greptile-apps]

Greptile Summary

This PR adds a fleet-wide maintain command for pgslice partition runway management. The main changes are:

• New maintain CLI command with per-period future horizons.
• Catalog discovery for managed partitioned tables.
• Per-table isolation with structured JSONL run logs.
• Replica-identity checks across partition leaves.
• Transaction-scoped advisory locking for command-scoped operations.

Confidence Score: 5/5

This looks safe to merge.

No blocking issues found in the changed code.

No files need attention.

T-Rex Logs

What T-Rex did

• The maintain CLI was checked out at base and an initial maintain test run was attempted, but there were no test files and the run exited with code 1.
• The maintain CLI was checked out at head and a subsequent maintain test run was attempted, but it failed because the PGSLICE_URL environment variable must be set for tests.
• The CLI help was inspected, showing the top-level pgslice maintain command and options such as --future-daily, --future-weekly, --future-monthly, --future-yearly, and --schema.
• The replica identity guard base side tests were blocked because PGSLICE_URL was not set.
• The replica identity guard head side tests were blocked because PGSLICE_URL was not set.
• The maintain API base checkout/build/import showed hasMaintain: undefined and no src/maintain.test.ts.
• The maintain API head checkout/build/import showed hasMaintain: function, but running tests failed with ECONNREFUSED to PostgreSQL.
• The advisory lock tests on the base code showed OBSERVED_ERROR_MESSAGE=CURRENT_TX_ABORTED_RELEASE_FAILURE and the preservation assertion failing.
• The advisory lock tests on the head code showed OBSERVED_ERROR_MESSAGE=TREX_REAL_HANDLER_ERROR and both targeted tests passed.
• The advisory lock repro source advisory-lock-error-repro.test.ts contains the executed test scenario and the contention check.

_{Ran code and verified through T-Rex}

Important Files Changed

Filename	Overview
src/advisory-lock.ts	withLock now uses transaction-scoped advisory locks, while long-running generator paths keep the session-scoped lock path.
src/table.ts	unsafeReplicaIdentityPartitions now checks true partition-tree leaves for CDC-unsafe replica identity settings.
src/pgslice.ts	Adds the maintain orchestration flow with discovery, per-table execution, logging, and replica-identity readiness results.
src/commands/maintain.ts	Adds the CLI wrapper for maintain, including option parsing, host metadata, JSONL output, and non-zero exits for failed tables.

_{Reviews (2): Last reviewed commit: "fix: Address advisory-lock leak and nest..." | Re-trigger Greptile}