feat: US-025 - Add pg-prepared e2e-docker fixture for prepared statements

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: NathanFlurry

packages/secure-exec/tests/e2e-docker/pg-prepared/fixture.json

@@ -0,0 +1,5 @@
+{
+	"entry": "src/index.js",
+	"expectation": "pass",
+	"services": ["postgres"]
+}

packages/secure-exec/tests/e2e-docker/pg-prepared/package.json

@@ -0,0 +1,8 @@
+{
+	"name": "e2e-docker-pg-prepared",
+	"private": true,
+	"type": "commonjs",
+	"dependencies": {
+		"pg": "8.13.1"
+	}
+}

packages/secure-exec/tests/e2e-docker/pg-prepared/src/index.js

@@ -0,0 +1,107 @@
+const { Client } = require("pg");
+
+async function main() {
+	const client = new Client({
+		host: process.env.PG_HOST,
+		port: Number(process.env.PG_PORT),
+		user: "testuser",
+		password: "testpass",
+		database: "testdb",
+	});
+
+	await client.connect();
+
+	// Setup table
+	await client.query(
+		"CREATE TABLE IF NOT EXISTS test_prepared (id SERIAL PRIMARY KEY, value TEXT, num INTEGER)",
+	);
+
+	// Named prepared statement: insert
+	await client.query({
+		name: "insert-row",
+		text: "INSERT INTO test_prepared (value, num) VALUES ($1, $2)",
+		values: ["alpha", 1],
+	});
+
+	// Reuse same named prepared statement (exercises prepared statement cache)
+	await client.query({
+		name: "insert-row",
+		text: "INSERT INTO test_prepared (value, num) VALUES ($1, $2)",
+		values: ["beta", 2],
+	});
+
+	await client.query({
+		name: "insert-row",
+		text: "INSERT INTO test_prepared (value, num) VALUES ($1, $2)",
+		values: ["gamma", 3],
+	});
+
+	// Named prepared statement: select
+	const res1 = await client.query({
+		name: "select-by-value",
+		text: "SELECT id, value, num FROM test_prepared WHERE value = $1",
+		values: ["beta"],
+	});
+
+	// Reuse named select
+	const res2 = await client.query({
+		name: "select-by-value",
+		text: "SELECT id, value, num FROM test_prepared WHERE value = $1",
+		values: ["gamma"],
+	});
+
+	// Named prepared statement: select all ordered
+	const resAll = await client.query({
+		name: "select-all-ordered",
+		text: "SELECT value, num FROM test_prepared ORDER BY num ASC",
+		values: [],
+	});
+
+	// Named prepared statement: update
+	await client.query({
+		name: "update-num",
+		text: "UPDATE test_prepared SET num = $1 WHERE value = $2",
+		values: [99, "alpha"],
+	});
+
+	// Reuse named select to verify update
+	const resUpdated = await client.query({
+		name: "select-by-value",
+		text: "SELECT id, value, num FROM test_prepared WHERE value = $1",
+		values: ["alpha"],
+	});
+
+	// Named prepared statement: delete
+	await client.query({
+		name: "delete-by-value",
+		text: "DELETE FROM test_prepared WHERE value = $1",
+		values: ["gamma"],
+	});
+
+	// Verify deletion with reused select-all
+	const resAfterDelete = await client.query({
+		name: "select-all-ordered",
+		text: "SELECT value, num FROM test_prepared ORDER BY num ASC",
+		values: [],
+	});
+
+	// Cleanup
+	await client.query("DROP TABLE test_prepared");
+	await client.end();
+
+	console.log(
+		JSON.stringify({
+			inserted: 3,
+			selectBeta: { rowCount: res1.rowCount, value: res1.rows[0].value, num: res1.rows[0].num },
+			selectGamma: { rowCount: res2.rowCount, value: res2.rows[0].value, num: res2.rows[0].num },
+			selectAll: resAll.rows.map((r) => ({ value: r.value, num: r.num })),
+			updated: { value: resUpdated.rows[0].value, num: resUpdated.rows[0].num },
+			afterDelete: resAfterDelete.rows.map((r) => ({ value: r.value, num: r.num })),
+		}),
+	);
+}
+
+main().catch((err) => {
+	console.error(err.message);
+	process.exit(1);
+});

scripts/ralph/prd.json

@@ -448,8 +448,8 @@
         "Tests pass"
       ],
       "priority": 25,
-      "passes": false,
-      "notes": "Named prepared statements use different wire protocol messages (Parse/Bind/Execute vs SimpleQuery). The current fixture only uses unnamed parameterized queries. Prepared statement caching and reuse is a production-critical path."
+      "passes": true,
+      "notes": "Completed. Fixture pg-prepared tests named prepared statements with insert (reused 3x), select (reused 2x), update, and delete. Exercises Parse/Bind/Execute wire protocol and prepared statement cache. Host and sandbox produce identical output."
     },
     {
       "id": "US-026",