The pg-el API
The entry points in the pg-el library are documented below.
(with-pg-connection con (dbname user [password host port]) &body body)
A macro which opens a TCP network connection to database DBNAME
, executes the BODY
forms then
disconnects. See function pg-connect
for details of the connection arguments.
(with-pg-connection-local con (path dbname user [password]) &body body)
A macro which opens a connection to database DBNAME
over a local Unix socket at PATH
, executes
the BODY
forms then disconnects. See function pg-connect-local
for details of the connection
arguments.
(with-pg-transaction con &body body)
A macro which executes the BODY
forms wrapped in an SQL transaction. CON
is a connection to the
database. If an error occurs during the execution of the forms, a ROLLBACK instruction is executed.
(pg-connect dbname user [password host port tls-options]) -> con
Connect to the database DBNAME
on HOST
(defaults to localhost) at PORT
(defaults to 5432) via
TCP/IP and authenticate as USER
with PASSWORD
. This library currently supports SCRAM-SHA-256
authentication (the default method from PostgreSQL version 14 onwards), MD5 authentication and
cleartext password authentication. This function also sets the output date type to ISO
and
initializes our type parser tables.
If tls-options
is non-NIL, attempt to establish an encrypted connection to PostgreSQL by
passing tls-options
to Emacs function gnutls-negotiate
. tls-options
is a Common-Lisp style
argument list of the form
(list :priority-string "NORMAL:-MD5" :trustfiles (list "/etc/company/RootCA.crt"))
To use client certificates to authenticate the TLS connection, use a value of TLS-OPTIONS
of the
form
`(list :keylist ((,key ,cert)))
where key
is the filename of the client certificate private key and cert
is the filename of the
client certificate. These are passed to GnuTLS.
(pg-connect-local path dbname user [password]) -> con
Initiate a connection with the PostgreSQL backend over local Unix socket PATH
. Connect to the
database DBNAME
with the username USER
, providing PASSWORD
if necessary. Returns a connection
to the database (as an opaque type). PASSWORD
defaults to an empty string.
(pg-exec con &rest sql) -> pgresult
Concatenate the SQL strings and send to the PostgreSQL backend over connection CON
. Retrieve the
information returned by the database and return it in an opaque record PGRESULT. The content of the
pgresult should be accessed using the pg-result
function.
(pg-exec-prepared con query typed-arguments &key (max-rows 0)) -> pgresult
Execute SQL query QUERY
, which may include numbered parameters such as $1
, $2
and so on,
using PostgreSQL’s extended query protocol, on database connection CON
. The TYPED-ARGUMENTS
are
a list of the form
'((42 . "int4") ("42" . "text"))
This query will return at most MAX-ROWS
rows (a value of zero indicates no limit). It returns a
pgresult structure (see function pg-result
). This method is useful to reduce the risk of SQL
injection attacks.
(pg-result pgresult what &rest args) -> info
Extract information from the PGRESULT
returned by pg-exec
. The WHAT
keyword can be one of
-
:connection
: retrieve the database connection. -
:status
: a string returned by the backend to indicate the status of the command; it is something like “SELECT” for a select command, “DELETE 1” if the deletion affected a single row, etc. -
:attributes
: a list of tuples providing metadata: the first component of each tuple is the attribute’s name as a string, the second an integer representing its PostgreSQL type, and the third an integer representing the size of that type. -
:tuples
: all the data retrieved from the database, as a list of lists, each list corresponding to one row of data returned by the backend. -
:tuple
tuple-number: return a specific tuple (numbering starts at 0). -
:incomplete
: determine whether the set of tuples returned in this query set is incomplete, due to a suspended portal. If true, further tuples can be obtained by callingpg-fetch
. -
:oid
: allows you to retrieve the OID returned by the backend if the command was an insertion. The OID is a unique identifier for that row in the database (this is PostgreSQL-specific; please refer to the documentation for more details).
.
(pg-fetch con result &key (max-rows 0))
Fetch pending rows from the suspended portal in RESULT
on database connection CON
.
This query will retrieve at most MAX-ROWS
rows (default value of zero means no limit).
Returns a pgresult structure (see function pg-result
). When used in multiple fetch situations
(with the :max-rows
parameter to pg-exec-prepared
which allows you to retrieve large result sets
incrementally), the same pgresult structure (initally returned by pg-exec-prepared
) should be
passed to each successive call to pg-fetch
, because it contains column metainformation that is
required to parse the incoming data. Each successive call to pg-fetch
will return this pgresult
structure with new tuples accessible via pg-result :tuples
. When no more tuples are available,
the :incomplete
slot of the pgresult structure will be nil.
(pg-cancel con) -> nil
Ask the server to cancel the command currently being processed by the backend. The cancellation
request concerns the command requested over database connection CON
.
(pg-disconnect con) -> nil
Close the database connection CON
.
(pg-for-each con select-form callback)
Calls CALLBACK
on each tuple returned by SELECT-FORM
. Declares a cursor for SELECT-FORM
, then
fetches tuples using repeated executions of FETCH 1
, until no results are left. The cursor is then
closed. The work is performed within a transaction. When you have a large amount of data to handle,
this usage is more efficient than fetching all the tuples in one go.
If you wish to browse the results, each one in a separate buffer, you could have the callback insert
each tuple into a buffer created with (generate-new-buffer "myprefix")
, then use ibuffer’s “/ n” to
list/visit/delete all buffers whose names match myprefix.
(pg-databases con) -> list of strings
Return a list of the databases available over PostgreSQL connection CON
. A database is a set of
tables; in a fresh PostgreSQL installation there is a single database named “template1”.
(pg-tables con) -> list of strings
Return a list of the tables present in the database to which we are currently connected over CON
.
Only include user tables: system tables are not included in this list.
(pg-columns con table) -> list of strings
Return a list of the columns (or attributes) in TABLE
, which must be a table in the database to
which we are connected over CON
. We only include the column names; if you want more detailed
information (attribute types, for example), it can be obtained from pg-result
on a SELECT
statement for that table.
(pg-hstore-setup con)
Prepare for the use of HSTORE datatypes over database connection CON
. This function must be called
before using the HSTORE extension. It loads the extension if necessary, and sets up the parsing
support for HSTORE datatypes.
(pg-vector-setup con)
Prepare for the use of VECTOR datatypes from the pgvector extension over database connection CON
.
This function must be called before using the pgvector extension. It loads the extension if
necessary, and sets up the parsing support for vector datatypes.
(pg-lo-create con . args) -> oid
Create a new large object (BLOB, or binary large object in other DBMSes parlance) in the database to
which we are connected via CON
. Returns an OID
(which is represented as an elisp integer) which
will allow you to use the large object. Optional ARGS
are a Unix-style mode string which determines
the permissions of the newly created large object, one of “r” for read-only permission, “w” for
write-only, “rw” for read+write. Default is “r”.
Large-object functions MUST be used within a transaction (see the macro with-pg-transaction
).
(pg-lo-open con oid . args) -> fd
Open a large object whose unique identifier is OID
(an elisp integer) in the database to which we
are connected via CON
. Optional ARGS
is a Unix-style mode string as for pg-lo-create
; which
defaults to “r” read-only permissions. Returns a file descriptor (an elisp integer) which can be
used in other large-object functions.
(pg-lo-close con fd)
Close the file descriptor FD
which was associated with a large object. Note that this does not
delete the large object; use pg-lo-unlink
for that.
(pg-lo-read con fd bytes) -> string
Read BYTES
from the file descriptor FD
which is associated with a large object. Return an elisp
string which should be BYTES
characters long.
(pg-lo-write con fd buf)
Write the bytes contained in the elisp string BUF
to the large object associated with the file
descriptor FD
.
(pg-lo-lseek con fd offset whence)
Do the equivalent of a lseek(2)
on the file descriptor FD
which is associated with a large
object; i.e. reposition the read/write file offset for that large object to OFFSET
(an elisp
integer). WHENCE
has the same significance as in lseek()
; it should be one of SEEK_SET
(set the
offset to the absolute position), SEEK_CUR
(set the offset relative to the current offset) or
SEEK_END
(set the offset relative to the end of the file). WHENCE
should be an elisp integer whose
values can be obtained from the header file <unistd.h>
(probably 0, 1 and 2 respectively).
(pg-lo-tell con oid) -> integer
Do the equivalent of an ftell(3)
on the file associated with the large object whose unique
identifier is OID
. Returns the current position of the file offset for the object’s associated file
descriptor, as an elisp integer.
(pg-lo-unlink con oid)
Remove the large object whose unique identifier is OID
from the system. In the current
implementation of large objects in PostgreSQL, each large object is associated with an object in the
filesystem.
(pg-lo-import con filename) -> oid
Create a new large object and initialize it to the data contained in the file whose name is
FILENAME
. Returns an OID
(as an elisp integer). Note that this operation is only syntactic sugar
around the basic large-object operations listed above.
(pg-lo-export con oid filename)
Create a new file named FILENAME
and fill it with the contents of the large object whose unique
identifier is OID
. This operation is also syntactic sugar.
Variable pg-parameter-change-functions
is a list of handlers to be called when the backend informs
us of a parameter change, for example a change to the session time zone. Each handler is called with
three arguments: the connection to the backend, the parameter name and the parameter value. It is
initially set to a function that looks out for client_encoding
messages and updates the value
recorded in the connection.
Variable pg-handle-notice-functions
is a list of handlers to be called when the backend sends us a
NOTICE
message. Each handler is called with one argument, the notice, as a pgerror struct.
Boolean variable pg-disable-type-coercion
can be set to non-nil (before initiating a connection)
to disable the library’s type coercion facility. Default is t
.
Setting up PostgreSQL to accept TCP/IP connections has security implications; please consult the documentation for details. It is possible to use the port forwarding capabilities of ssh to establish a connection to the backend over TCP/IP, which provides both a secure authentication mechanism and encryption (and optionally compression) of data passing through the tunnel. Here’s how to do it (thanks to Gene Selkov, Jr. for the description):
-
Establish a tunnel to the backend machine, like this:
ssh -L 3333:backend.dom:5432 postgres@backend.dom
The first number in the -L argument, 3333, is the port number of your end of the tunnel. The second number, 5432, is the remote end of the tunnel – the port number your backend is using. The name or the address in between the port numbers belongs to the server machine, as does the last argument to ssh that also includes the optional user name. Without the user name, ssh will try the name you are currently logged on as on the client machine. You can use any user name the server machine will accept, not necessarily those related to postgres.
-
Now that you have a running ssh session, you can point pg.el to the local host at the port number which you specified in step 1. For example,
(pg-connect "dbname" "user" "password" "localhost" 3333)
You can omit the port argument if you chose 5432 as the local end of the tunnel, since pg.el defaults to this value.