[sdairs]

Part of #1157 (2 of 5: postgres). Stacked on #1168.

Summary

This splits src/cloud/postgres.rs into src/cloud/postgres/, following the pattern #1168 set. Behaviour is unchanged.

File	Lines (tests)	Contents
mod.rs	462	PERMISSIONS, run, re-exports
cli.rs	2363 (58)	clap definitions
client.rs	456	impl CloudClient wrappers (the two blocks are merged into one)
lifecycle.rs	1410 (28)	list/get/create/update/delete/reset-password/restart, certs, filter and access-rule parsers
config.rs	558 (11)	runtime config and its file loaders
query.rs	327 (6)
observability.rs	1012 (14)	logs, metrics, slow-queries, prometheus, backups
topology.rs	452 (5)	read-replica, restore, promote, switchover

Commits

1. Pure git mv to postgres/mod.rs, at 100% similarity.
2. Moves only. I checked the line multisets. The only differences are mod/use lines, visibility, three rustfmt signature rewraps, the merged impl CloudClient { line, and four section banners dropped because they no longer apply (Helpers, Option structs, Handlers, Tests).
3. .git-blame-ignore-revs entry. The SHA needs updating on rebase.
4. Docs: the add-cli-command Cloud reference now points at postgres/ and postgres/client.rs.

Notes

• list_postgres_services is now pub(in crate::cloud), because shared.rs uses it. The slow-query, logs and backup query structs and their fields are pub(super).
• The access_rule test helper is shared by three test modules through pub(in crate::cloud::postgres), so it isn't duplicated.
• A #[cfg(doc)] use keeps one intra-doc link resolving.

Tests

• Counts match before and after: 2419 passed, 7 ignored. Test names match once module paths are normalised.
• fmt, both clippy configurations, the --no-default-features check, the Python classifier tests and git diff --check all pass.
• The known local_postgres_client_input_test flake failed once and passed on rerun.

Merge with a merge commit, not a squash. The .git-blame-ignore-revs entry names this PR's move commit. A squash merge would leave it pointing at a commit that isn't on main, and git would silently ignore it.

🤖 Generated with Claude Code

---

Note

Low Risk
Pure module reorganization with unchanged test counts and no intentional logic changes; merge should use a merge commit so the blame-ignore SHA stays valid.

Overview
Refactors the monolithic cloud postgres implementation into src/cloud/postgres/, matching the layout introduced for cloud services in the same effort (#1157). Behaviour and CLI surface stay the same; this is a move/split only.

The former single file is broken out by concern: cli.rs (clap + parse tests), client.rs (merged CloudClient API wrappers), lifecycle.rs (CRUD, certs, passwords, filters/access rules), config.rs, plus query.rs, observability.rs, and topology.rs for query, metrics/logs/backups, and replica/restore/role commands. mod.rs keeps PERMISSIONS, dispatch via run(), and re-exports.

Minor visibility adjustments support the split (e.g. list_postgres_services is pub(in crate::cloud) for name resolution in shared.rs). Agent docs now reference postgres/ and convert_postgres_by_id_result in postgres/client.rs, and .git-blame-ignore-revs records the bulk-move commit for blame.

^{Reviewed by Cursor Bugbot for commit 87f409b. Bugbot is set up for automated code reviews on this repo. Configure here.}