questdb 0.1.0-x86_64-linux-gnu

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 552b130661804f60d094bdbc1cdcabfd24c06e26c08c6aa740b3e9af0e32e5b1
+  data.tar.gz: 642ac1943fc3d7e280e771b3853b0ad64dfce9a27c0a94b4eb7cbc85b174dec1
+SHA512:
+  metadata.gz: 543c087ac0505a2cc2f5496152c7c53729867b09de9f4b25b0ed234204cc4047112f8cb572bbe7ea8700452774c84bae42c101c277fe02bd190f405a43a20e02
+  data.tar.gz: 88c31e5c3bdfbb0ce431fed1a22cb9a81a77bfca64053b9ee845111e53e91b3a969820db0592ef3b3178c19224b7cb0934d0de27bae576deec8b2338d95bbd73

data/CHANGELOG.md

@@ -0,0 +1,22 @@
+# Changelog
+
+## 0.1.0 (2026-10-19)
+
+Initial pre-1.0 release for early adopters. Public APIs may evolve before 1.0; delivery and acknowledgement semantics are intentional compatibility commitments and changes will be documented here.
+
+- Added a QWP/WebSocket-only deployment client backed by `c-questdb-client` 7.1.0.
+- Added one shared native pool with thread-safe sender borrowing and thread-affine pooled sender leases.
+- Added atomic typed row buffering, publish/ACK barriers, FSN tracking, structured diagnostics, native error codes, and delivery-ambiguity reporting.
+- Added native reconnect, failover, TLS/authentication, and store-and-forward connect-string pass-through.
+- Added pooled QWP readers, positional binds, streaming `QueryResult`/`ResultBatch`/`Row` APIs, cancellation, server-info snapshots, and portable little-endian v7 scalar plus DOUBLE-array decoding.
+- Preserved signed pre-epoch query timestamps, made cancellation failures drop their reader lease, and reject unprojectable LONG_ARRAY/unknown result kinds explicitly.
+- Added pooled direct columnar QWP ingestion with immutable `ColumnVector` descriptors, conservative Array inference, native-owned staging and validity maps, dictionary symbols, checked multi-batch commits, and partial-completion/in-doubt safeguards.
+- Added pool-wide connection and server-rejection handlers with immutable deep-copied values, dedicated Ruby dispatcher threads, bounded drop-oldest bridge queues, manual polling copies, safe callback-triggered close, and additive delivery/drop counters.
+- Added standalone QWP `ws`/`wss` senders with manual progress, ACK/FSN APIs, safely queued callbacks, Python-parity WebSocket auto-flush defaults, and checked close-drain.
+- Added structured sender diagnostics on raised errors, a terminal rejection subclass, pooled/standalone sender direct-ingestion convenience, and end-to-end performance regression benchmarks.
+- Reduced hot-path row and direct-ingestion allocations, removed transient direct-column copies, indexed `Row` name lookup, and added low-allocation `QueryResult#each_values` streaming.
+- Added an optional `questdb/arrow` module for native Arrow C Stream ingestion and query export across Nanoarrow, Polars, and Red Arrow without mandatory dataframe dependencies.
+- Added versioned precompiled gems for standard Linux, macOS, and Windows platforms while retaining a checksum-complete offline source gem.
+- Vendored Cargo sources for offline source-gem installation.
+- Known issue: `c-questdb-client` 7.1.0 locks rustls 0.23.41, which is affected by RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0348 and RUSTSEC-2026-0349. These advisories are temporarily ignored in `cargo audit` (`.cargo/audit.toml`); a patch release will move to rustls 0.23.46 or newer.
+- Legacy ILP transports, QWP/UDP, and transaction APIs are intentionally unsupported.

data/LICENSE.txt

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

data/README.md

@@ -0,0 +1,170 @@
+# QuestDB Ruby client
+
+`questdb` is an MRI Ruby client for QuestDB's native **QuestDB Wire Protocol (QWP)** over WebSocket. It is backed by the official `c-questdb-client` 7.1.0 C ABI and does not implement the protocol, networking, TLS, authentication, failover, or store-and-forward in Ruby.
+
+The client provides a deployment-level connection pool, pooled row and direct columnar ingestion, streaming SQL queries, safe Ruby dispatch for lifecycle/rejection callbacks, and standalone QWP WebSocket senders. Query batches and callback values are copied into ordinary Ruby objects before borrowed native data expires. Legacy ILP transports are intentionally not part of this client.
+
+> [!NOTE]
+> `0.1.x` is the initial pre-1.0 release line. It is intended for early adopters and may make API changes before 1.0, with changes recorded in the changelog. Delivery, acknowledgement, and `in_doubt?` semantics are explicit and should not be treated as experimental shortcuts.
+
+## Installation
+
+With Bundler:
+
+```ruby
+gem "questdb", "~> 0.1.0"
+```
+
+Or directly:
+
+```sh
+gem install questdb
+```
+
+RubyGems selects a precompiled package for supported platforms. Force a source build with `gem install questdb --platform ruby`; source builds require the toolchain listed below.
+
+## Requirements
+
+- QuestDB 10.0 or newer
+- MRI Ruby 3.1–3.4
+
+Release builds provide precompiled gems for x86-64 and ARM64 Linux (glibc 2.28+ and musl), x86-64 and ARM64 macOS, and x64 Windows UCRT. Flavor-specific Linux gems require RubyGems 3.3.22+; musl users should use Bundler 2.5.6+. Source installation requires Rust 1.91.1 or newer, a C compiler, and Make. All Cargo sources are vendored in the source gem, so compilation can run offline without downloading native dependencies.
+
+## Quick start
+
+```ruby
+require "questdb"
+
+QuestDB.connect(host: "localhost") do |client|
+  client.sender do |sender|
+    sender.row("trades",
+      symbols: { symbol: "ETH-USD", side: "sell" },
+      columns: { price: 2615.54, amount: 0.00044 },
+      at: QuestDB::TimestampNanos.now)
+
+    # Explicit server-acceptance barrier. Ordinary flush is publish-only.
+    sender.flush(wait: true)
+  end
+end
+```
+
+The equivalent connection-string form is:
+
+```ruby
+QuestDB.connect("ws::addr=localhost:9000;") { |client| ... }
+```
+
+Use `wss::` for TLS. `QuestDB::Client.from_env` reads `QDB_CLIENT_CONF`.
+
+## Standalone WebSocket
+
+Use the deployment-level `Client` for pooled ingestion and queries. `QuestDB::Sender` is the connection-level API for manual WebSocket progress and explicit buffer control:
+
+```ruby
+QuestDB::Sender.from_conf("ws::addr=localhost:9000;auto_flush=off;").open do |sender|
+  sender.row("metrics", columns: { value: 1 }, at: QuestDB::TimestampNanos.now)
+  sender.flush(wait: true)
+end
+```
+
+Standalone `ws`/`wss` senders expose FSNs, ACK waits, diagnostics, `drive_once` for `qwp_ws_progress=manual`, checked close-drain, direct columnar loads, and the same safely queued `connection_listener` / `error_handler` callbacks as the pool. `QuestDB::Sender` rejects UDP and all ILP schemes. Standalone auto-flush follows the Python WebSocket client defaults: 600 rows and 1,000 ms.
+
+## Direct columnar ingestion
+
+```ruby
+QuestDB.connect("ws::addr=localhost:9000;") do |client|
+  client.ingest_columns(
+    "trades",
+    columns: {
+      price: [2615.54, 2616.10],
+      amount: QuestDB::ColumnVector.double([0.00044, nil])
+    },
+    symbols: { symbol: ["ETH-USD", "BTC-USD"] },
+    at: [QuestDB::TimestampNanos.now, QuestDB::TimestampNanos.now],
+    max_rows_per_batch: 16_384,
+    ack: :ok
+  )
+end
+```
+
+Arrays are conservatively inferred; `ColumnVector` supplies an explicit kind for all-null or narrow columns. Inputs are synchronously normalized and copied to native staging before the GVL is released. Do not mutate Arrays or strings concurrently merely because the method has started; they are safe to mutate after `ingest_columns` returns (or after a `ColumnVector` constructor has copied them). Direct chunks are pipelined and committed once at the selected `:ok` or `:durable` boundary. This path deliberately bypasses row ingestion's store-and-forward queue: it has no FSNs and no ordering relationship with row writes, even through the same `Client`. `PooledSender#ingest_columns` forwards to its client; standalone `ws`/`wss` senders open a separate poolless direct connection carrying the same auth/TLS configuration. An `in_doubt?` error after a flushed batch must not be retried wholesale without deduplication.
+
+## Optional Arrow integration
+
+```ruby
+require "questdb/arrow"
+
+client.ingest_arrow("trades", polars_frame, at: :timestamp, symbols: ["symbol"])
+result = client.query("SELECT * FROM trades")
+frame = result.to_polars
+```
+
+The optional adapter accepts the Arrow C Stream protocol used by Nanoarrow and Polars, plus Red Arrow tables and readers. It introduces no mandatory dataframe gem dependency. Query results can be consumed through `arrow_c_stream`, `to_nanoarrow`, `to_polars`, or `to_red_arrow_table`. The c-client's Arrow implementation is compiled into official native gems so `require "questdb/arrow"` works without rebuilding; “optional” refers to the Ruby API and dataframe dependencies, not a separately downloaded native binary. See [Arrow integration](docs/arrow.md) for ownership, type overrides, and memory behavior.
+
+## Querying
+
+```ruby
+QuestDB.connect("ws::addr=localhost:9000;") do |client|
+  client.execute("CREATE TABLE IF NOT EXISTS events (ts TIMESTAMP, id LONG) TIMESTAMP(ts) WAL")
+
+  client.query("SELECT id, ts FROM events WHERE id > $1", binds: [10]) do |result|
+    result.each { |row| puts "#{row["id"]}: #{row["ts"].value}" }
+  end
+end
+```
+
+`Client#query` returns a single-use `QueryResult`. It implements `Enumerable`, streams native result batches, and eagerly copies every value before requesting the next batch. `Row` supports integer indexing and first-match name lookup while preserving duplicate names; `Row#to_h` is intentionally lossy when names repeat. `Client#reader` lends a thread-affine reader for sequential queries on one pooled connection. Fully drain, cancel, or close every result. Closing a partial result terminates its reader lease so an undrained connection is never recycled.
+
+Positional binds accept `nil`, booleans, signed 64-bit integers, floats, UTF-8 strings, `Time`, timestamps, and explicit wrappers for UUID, binary, IPv4, date, geohash, decimal, LONG256, CHAR, and typed NULL values. Result decoding covers all scalar QWP v7 kinds and ragged `DOUBLE[]` values while preserving nulls and decimal precision.
+
+## Pool and lease lifecycle
+
+A `QuestDB::Client` owns one native `questdb_db` pool. It is safe to borrow senders and readers from multiple Ruby threads. Each pooled sender, reader, and query result is a short-lived, thread-affine lease and must be used on the thread that created it. Block forms return leases exactly once:
+
+```ruby
+client = QuestDB.connect("ws::addr=node-a:9000,node-b:9000;sender_pool_max=4;")
+client.sender { |sender| sender.row("metrics", columns: { value: 1 }, at: QuestDB::SERVER_TIMESTAMP) }
+client.close
+```
+
+`Client#close` is idempotent and refuses to close while any sender or reader lease remains active. Neither clients nor leases may be reused after close or after `fork`.
+
+## Delivery semantics
+
+`PooledSender#flush` publishes the current QWP frame to the native local store-and-forward queue and returns without waiting for QuestDB. Use:
+
+- `flush(wait: true)` for an `OK` acknowledgement barrier;
+- `wait(timeout_millis: ...)` to wait for everything published by the lease;
+- `flush_and_get_fsn`, `published_fsn`, `acked_fsn`, and `await_acked_fsn` for frame-sequence tracking;
+- `ack: :durable` only with Enterprise and `request_durable_ack=on`;
+- `poll_error` for structured per-lease server diagnostics.
+
+An `OK` acknowledgement means the server accepted the frame; WAL application and query visibility remain asynchronous. QWP replay is at-least-once. `QuestDB::Error#in_doubt?` identifies failures where replaying input may duplicate rows, and `#sender_error` carries the structured WebSocket diagnostic when the native error includes one. Terminal QWP rejection errors use the `QuestDB::ServerRejectionError` subclass. Use QuestDB deduplication when retries must be safe.
+
+Without an explicit Ruby error handler, the native client logs every pool-wide server rejection; errors are not silently discarded. Pool and lease dropped/delivered counters are exposed.
+
+## Pool callbacks
+
+```ruby
+client = QuestDB.connect(
+  host: "localhost",
+  connection_listener: ->(event) { warn("QWP #{event.kind} #{event.host}:#{event.port}") },
+  error_handler: ->(error) { warn("QWP rejected #{error.from_fsn}-#{error.to_fsn}: #{error.message}") },
+  connection_event_inbox_capacity: 64,
+  error_event_inbox_capacity: 64
+)
+```
+
+Handlers run on dedicated Ruby threads, never on c-client producer/I/O threads. Their arguments (`ConnectionEvent` and `SenderError`) are immutable deep copies. Handler exceptions are warned and dispatch continues. `poll_connection_event` and `poll_error` return nonblocking copies of callback values for deterministic diagnostic consumers. Both native and Ruby bridge inboxes are bounded, use drop-oldest overflow, and contribute to the documented delivered/dropped counters; `0` selects the default capacity of 64.
+
+Callbacks are lifecycle/diagnostic signals, not data ACK or WAL-visibility barriers. A returned pooled sender may already be closed when its pool-wide rejection arrives. A handler may call `client.close`; self-join is avoided. If a handler captures its client, close it explicitly because that reference intentionally keeps the client alive.
+
+## Values
+
+Rows support symbols (`String` or `nil`) and columns containing `nil`, booleans, signed 64-bit integers, floats, UTF-8 strings, `Time`, `TimestampMicros`, `TimestampNanos`, `BigDecimal`, and explicit `Float64Array` values. `SERVER_TIMESTAMP` requests a server-assigned designated timestamp.
+
+Direct columns support BYTE/SHORT/INT/LONG, FLOAT/DOUBLE, BOOLEAN, VARCHAR, BINARY, UUID, LONG256, IPv4, TIMESTAMP/TIMESTAMP_NANOS/DATE, CHAR, GEOHASH, DECIMAL64/128/256, DOUBLE_ARRAY, and dictionary SYMBOL columns. QuestDB BYTE, SHORT, BOOLEAN, and CHAR cannot distinguish SQL NULL from their zero value; direct vectors reject `nil` for those kinds rather than silently changing it. Nullable kinds use validity bitmaps.
+
+A row append is atomic: validation or native failure rewinds the entire row. Native error codes, messages, and delivery ambiguity are preserved.
+
+See [configuration](docs/configuration.md), [ingestion](docs/ingestion.md), [querying](docs/querying.md), [Python QWP parity](docs/python-parity.md), [design](docs/design.md), [performance](docs/performance.md), [releasing](docs/releasing.md), and [troubleshooting](docs/troubleshooting.md).

data/SECURITY.md

@@ -0,0 +1,19 @@
+# Security
+
+Report suspected vulnerabilities privately to [security@questdb.io](mailto:security@questdb.io). Do not open a public issue for an unpatched vulnerability, and never publish credentials, private keys, trust stores, or configuration strings containing secrets.
+
+## Supported versions
+
+Until the first public release, only the current `main` branch receives security fixes. After release, this document will list supported release lines and their end-of-support dates.
+
+## Release requirements
+
+A release candidate must pass security qualification on approved QuestDB release infrastructure:
+
+- Ruby dependency audit;
+- RustSec audit of the pinned c-client lockfile;
+- native lifecycle memory-access checks under Valgrind;
+- SPDX SBOM generation;
+- repository secret/path scanning and package verification performed by the release checklist.
+
+Known advisories are release blockers unless QuestDB security explicitly documents an assessment and time-bounded exception. Release artifacts include SHA-256 checksums; publishing credentials remain only in an approved publisher's protected user-level RubyGems credentials file or the organization's release secret store and are never included in source, logs, or artifacts.

data/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,242 @@
+# Third-party notices
+
+This gem statically links the pinned QuestDB C/Rust client at the revision recorded in `vendor/c-questdb-client.version`. QuestDB's `questdb-rs`, `questdb-rs-ffi`, and C interface are licensed under Apache-2.0; the upstream license is preserved at `vendor/c-questdb-client/LICENSE`.
+
+The inventory below is the complete resolved dependency graph for the enabled `questdb-rs-ffi` features in the pinned `Cargo.lock`, including target-conditional packages. It was generated with:
+
+```sh
+cargo metadata --offline --locked --features insecure-skip-verify,arrow --format-version 1 \
+  --manifest-path vendor/c-questdb-client/questdb-rs-ffi/Cargo.toml
+```
+
+Package | Version | Declared license
+--- | --- | ---
+aes | 0.8.4 | MIT OR Apache-2.0
+ahash | 0.8.12 | MIT OR Apache-2.0
+aho-corasick | 1.1.4 | Unlicense OR MIT
+aligned-vec | 0.6.4 | MIT
+android_system_properties | 0.1.5 | MIT/Apache-2.0
+arrow | 59.0.0 | Apache-2.0
+arrow-arith | 59.0.0 | Apache-2.0
+arrow-array | 59.0.0 | Apache-2.0 AND MIT
+arrow-buffer | 59.0.0 | Apache-2.0
+arrow-cast | 59.0.0 | Apache-2.0
+arrow-data | 59.0.0 | Apache-2.0
+arrow-ord | 59.0.0 | Apache-2.0
+arrow-row | 59.0.0 | Apache-2.0
+arrow-schema | 59.0.0 | Apache-2.0
+arrow-select | 59.0.0 | Apache-2.0
+arrow-string | 59.0.0 | Apache-2.0
+asn1-rs | 0.5.2 | MIT/Apache-2.0
+asn1-rs | 0.7.2 | MIT OR Apache-2.0
+asn1-rs-derive | 0.4.0 | MIT/Apache-2.0
+asn1-rs-derive | 0.6.0 | MIT OR Apache-2.0
+asn1-rs-impl | 0.1.0 | MIT/Apache-2.0
+asn1-rs-impl | 0.2.0 | MIT/Apache-2.0
+atoi | 2.0.0 | MIT
+autocfg | 1.5.1 | Apache-2.0 OR MIT
+base64 | 0.22.1 | MIT OR Apache-2.0
+base64ct | 1.8.3 | Apache-2.0 OR MIT
+bitflags | 2.13.0 | MIT OR Apache-2.0
+block-buffer | 0.10.4 | MIT OR Apache-2.0
+block-padding | 0.3.3 | MIT OR Apache-2.0
+bumpalo | 3.20.3 | MIT OR Apache-2.0
+bytes | 1.12.0 | MIT
+cbc | 0.1.2 | MIT OR Apache-2.0
+cc | 1.2.65 | MIT OR Apache-2.0
+cfg-if | 1.0.4 | MIT OR Apache-2.0
+chacha20 | 0.10.1 | MIT OR Apache-2.0
+chrono | 0.4.45 | MIT OR Apache-2.0
+chrono-tz | 0.10.4 | MIT OR Apache-2.0
+cipher | 0.4.4 | MIT OR Apache-2.0
+cms | 0.2.3 | Apache-2.0 OR MIT
+const-oid | 0.9.6 | Apache-2.0 OR MIT
+const-random | 0.1.18 | MIT OR Apache-2.0
+const-random-macro | 0.1.16 | MIT OR Apache-2.0
+core-foundation | 0.10.1 | MIT OR Apache-2.0
+core-foundation-sys | 0.8.7 | MIT OR Apache-2.0
+cpufeatures | 0.2.17 | MIT OR Apache-2.0
+cpufeatures | 0.3.0 | MIT OR Apache-2.0
+crc32c | 0.6.8 | Apache-2.0/MIT
+crunchy | 0.2.4 | MIT
+crypto-common | 0.1.7 | MIT OR Apache-2.0
+data-encoding | 2.11.0 | MIT
+der | 0.7.10 | Apache-2.0 OR MIT
+der-parser | 10.0.0 | MIT OR Apache-2.0
+der_derive | 0.7.3 | Apache-2.0 OR MIT
+deranged | 0.5.8 | MIT OR Apache-2.0
+des | 0.8.1 | MIT OR Apache-2.0
+digest | 0.10.7 | MIT OR Apache-2.0
+displaydoc | 0.2.6 | MIT OR Apache-2.0
+dns-lookup | 3.0.1 | MIT/Apache-2.0
+equator | 0.4.2 | MIT
+equator-macro | 0.4.2 | MIT
+find-msvc-tools | 0.1.9 | MIT OR Apache-2.0
+flagset | 0.4.7 | Apache-2.0
+futures-core | 0.3.32 | MIT OR Apache-2.0
+futures-task | 0.3.32 | MIT OR Apache-2.0
+futures-util | 0.3.32 | MIT OR Apache-2.0
+generic-array | 0.14.7 | MIT
+getrandom | 0.2.17 | MIT OR Apache-2.0
+getrandom | 0.3.4 | MIT OR Apache-2.0
+getrandom | 0.4.3 | MIT OR Apache-2.0
+half | 2.7.1 | MIT OR Apache-2.0
+hashbrown | 0.17.1 | MIT OR Apache-2.0
+hex | 0.4.3 | MIT OR Apache-2.0
+hmac | 0.12.1 | MIT OR Apache-2.0
+http | 1.4.2 | MIT OR Apache-2.0
+httparse | 1.10.1 | MIT OR Apache-2.0
+iana-time-zone | 0.1.65 | MIT OR Apache-2.0
+iana-time-zone-haiku | 0.1.2 | MIT OR Apache-2.0
+indoc | 2.0.7 | MIT OR Apache-2.0
+inout | 0.1.4 | MIT OR Apache-2.0
+itoa | 1.0.18 | MIT OR Apache-2.0
+jks | 0.3.3 | MIT
+jobserver | 0.1.34 | MIT OR Apache-2.0
+js-sys | 0.3.103 | MIT OR Apache-2.0
+lazy_static | 1.5.0 | MIT OR Apache-2.0
+lexical-core | 1.0.6 | MIT/Apache-2.0
+lexical-parse-float | 1.0.6 | MIT/Apache-2.0
+lexical-parse-integer | 1.0.6 | MIT/Apache-2.0
+lexical-util | 1.0.7 | MIT/Apache-2.0
+lexical-write-float | 1.0.6 | MIT/Apache-2.0
+lexical-write-integer | 1.0.6 | MIT/Apache-2.0
+libc | 0.2.186 | MIT OR Apache-2.0
+libm | 0.2.16 | MIT
+log | 0.4.33 | MIT OR Apache-2.0
+memchr | 2.8.2 | Unlicense OR MIT
+memmap2 | 0.9.11 | MIT OR Apache-2.0
+minimal-lexical | 0.2.1 | MIT/Apache-2.0
+nom | 7.1.3 | MIT
+num-bigint | 0.4.6 | MIT OR Apache-2.0
+num-complex | 0.4.6 | MIT OR Apache-2.0
+num-conv | 0.2.2 | MIT OR Apache-2.0
+num-integer | 0.1.46 | MIT OR Apache-2.0
+num-traits | 0.2.19 | MIT OR Apache-2.0
+oid-registry | 0.8.1 | MIT OR Apache-2.0
+once_cell | 1.21.4 | MIT OR Apache-2.0
+openssl-probe | 0.2.1 | MIT OR Apache-2.0
+p12-keystore | 0.2.1 | MIT/Apache-2.0
+pbkdf2 | 0.12.2 | MIT OR Apache-2.0
+pem-rfc7468 | 0.7.0 | Apache-2.0 OR MIT
+percent-encoding | 2.3.2 | MIT OR Apache-2.0
+phf | 0.12.1 | MIT
+phf_shared | 0.12.1 | MIT
+pin-project-lite | 0.2.17 | Apache-2.0 OR MIT
+pkcs12 | 0.1.0 | Apache-2.0 OR MIT
+pkcs5 | 0.7.1 | Apache-2.0 OR MIT
+pkg-config | 0.3.33 | MIT OR Apache-2.0
+powerfmt | 0.2.0 | MIT OR Apache-2.0
+ppv-lite86 | 0.2.21 | MIT OR Apache-2.0
+proc-macro2 | 1.0.106 | MIT OR Apache-2.0
+questdb-confstr | 0.1.1 | Apache-2.0
+questdb-rs | 7.1.0 | Apache-2.0
+questdb-rs-ffi | 7.1.0 | Apache-2.0 (upstream workspace license)
+quote | 1.0.46 | MIT OR Apache-2.0
+r-efi | 5.3.0 | MIT OR Apache-2.0 OR LGPL-2.1-or-later
+r-efi | 6.0.0 | MIT OR Apache-2.0 OR LGPL-2.1-or-later
+rand | 0.10.1 | MIT OR Apache-2.0
+rand | 0.9.4 | MIT OR Apache-2.0
+rand_chacha | 0.9.0 | MIT OR Apache-2.0
+rand_core | 0.10.1 | MIT OR Apache-2.0
+rand_core | 0.9.5 | MIT OR Apache-2.0
+rc2 | 0.8.1 | MIT OR Apache-2.0
+regex | 1.12.4 | MIT OR Apache-2.0
+regex-automata | 0.4.14 | MIT OR Apache-2.0
+regex-syntax | 0.8.11 | MIT OR Apache-2.0
+ring | 0.17.14 | Apache-2.0 AND ISC
+rustc_version | 0.4.1 | MIT OR Apache-2.0
+rusticata-macros | 4.1.0 | MIT/Apache-2.0
+rustls | 0.23.41 | Apache-2.0 OR ISC OR MIT
+rustls-native-certs | 0.8.4 | Apache-2.0 OR ISC OR MIT
+rustls-pki-types | 1.15.0 | MIT OR Apache-2.0
+rustls-webpki | 0.103.13 | ISC
+rustversion | 1.0.22 | MIT OR Apache-2.0
+ryu | 1.0.23 | Apache-2.0 OR BSL-1.0
+salsa20 | 0.10.2 | MIT OR Apache-2.0
+schannel | 0.1.29 | MIT
+scrypt | 0.11.0 | MIT OR Apache-2.0
+security-framework | 3.7.0 | MIT OR Apache-2.0
+security-framework-sys | 2.17.0 | MIT OR Apache-2.0
+semver | 1.0.28 | MIT OR Apache-2.0
+serde | 1.0.228 | MIT OR Apache-2.0
+serde_core | 1.0.228 | MIT OR Apache-2.0
+serde_derive | 1.0.228 | MIT OR Apache-2.0
+serde_json | 1.0.150 | MIT OR Apache-2.0
+sha1 | 0.10.6 | MIT OR Apache-2.0
+sha2 | 0.10.9 | MIT OR Apache-2.0
+shlex | 2.0.1 | MIT OR Apache-2.0
+siphasher | 1.0.3 | MIT/Apache-2.0
+slab | 0.4.12 | MIT
+slugify | 0.1.0 | MIT
+socket2 | 0.6.4 | MIT OR Apache-2.0
+spki | 0.7.3 | Apache-2.0 OR MIT
+subtle | 2.6.1 | BSD-3-Clause
+syn | 1.0.109 | MIT OR Apache-2.0
+syn | 2.0.118 | MIT OR Apache-2.0
+synstructure | 0.12.6 | MIT
+synstructure | 0.13.2 | MIT
+thiserror | 1.0.69 | MIT OR Apache-2.0
+thiserror | 2.0.18 | MIT OR Apache-2.0
+thiserror-impl | 1.0.69 | MIT OR Apache-2.0
+thiserror-impl | 2.0.18 | MIT OR Apache-2.0
+time | 0.3.53 | MIT OR Apache-2.0
+time-core | 0.1.9 | MIT OR Apache-2.0
+time-macros | 0.2.31 | MIT OR Apache-2.0
+tiny-keccak | 2.0.2 | CC0-1.0
+typenum | 1.20.1 | MIT OR Apache-2.0
+unicode-ident | 1.0.24 | (MIT OR Apache-2.0) AND Unicode-3.0
+unicode-xid | 0.2.6 | MIT OR Apache-2.0
+unidecode | 0.3.0 | BSD-3-Clause
+untrusted | 0.9.0 | ISC
+ureq | 3.1.4 | MIT OR Apache-2.0
+ureq-proto | 0.5.3 | MIT OR Apache-2.0
+utf-8 | 0.7.6 | MIT OR Apache-2.0
+version_check | 0.9.5 | MIT/Apache-2.0
+wasi | 0.11.1+wasi-snapshot-preview1 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT
+wasip2 | 1.0.4+wasi-0.2.12 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT
+wasm-bindgen | 0.2.126 | MIT OR Apache-2.0
+wasm-bindgen-macro | 0.2.126 | MIT OR Apache-2.0
+wasm-bindgen-macro-support | 0.2.126 | MIT OR Apache-2.0
+wasm-bindgen-shared | 0.2.126 | MIT OR Apache-2.0
+webpki-roots | 1.0.8 | CDLA-Permissive-2.0
+windows-core | 0.62.2 | MIT OR Apache-2.0
+windows-implement | 0.60.2 | MIT OR Apache-2.0
+windows-interface | 0.59.3 | MIT OR Apache-2.0
+windows-link | 0.2.1 | MIT OR Apache-2.0
+windows-result | 0.4.1 | MIT OR Apache-2.0
+windows-strings | 0.5.1 | MIT OR Apache-2.0
+windows-sys | 0.52.0 | MIT OR Apache-2.0
+windows-sys | 0.60.2 | MIT OR Apache-2.0
+windows-sys | 0.61.2 | MIT OR Apache-2.0
+windows-targets | 0.52.6 | MIT OR Apache-2.0
+windows-targets | 0.53.5 | MIT OR Apache-2.0
+windows_aarch64_gnullvm | 0.52.6 | MIT OR Apache-2.0
+windows_aarch64_gnullvm | 0.53.1 | MIT OR Apache-2.0
+windows_aarch64_msvc | 0.52.6 | MIT OR Apache-2.0
+windows_aarch64_msvc | 0.53.1 | MIT OR Apache-2.0
+windows_i686_gnu | 0.52.6 | MIT OR Apache-2.0
+windows_i686_gnu | 0.53.1 | MIT OR Apache-2.0
+windows_i686_gnullvm | 0.52.6 | MIT OR Apache-2.0
+windows_i686_gnullvm | 0.53.1 | MIT OR Apache-2.0
+windows_i686_msvc | 0.52.6 | MIT OR Apache-2.0
+windows_i686_msvc | 0.53.1 | MIT OR Apache-2.0
+windows_x86_64_gnu | 0.52.6 | MIT OR Apache-2.0
+windows_x86_64_gnu | 0.53.1 | MIT OR Apache-2.0
+windows_x86_64_gnullvm | 0.52.6 | MIT OR Apache-2.0
+windows_x86_64_gnullvm | 0.53.1 | MIT OR Apache-2.0
+windows_x86_64_msvc | 0.52.6 | MIT OR Apache-2.0
+windows_x86_64_msvc | 0.53.1 | MIT OR Apache-2.0
+wit-bindgen | 0.57.1 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT
+x509-cert | 0.2.5 | Apache-2.0 OR MIT
+x509-parser | 0.18.1 | MIT OR Apache-2.0
+zerocopy | 0.8.52 | BSD-2-Clause OR Apache-2.0 OR MIT
+zerocopy-derive | 0.8.52 | BSD-2-Clause OR Apache-2.0 OR MIT
+zeroize | 1.9.0 | Apache-2.0 OR MIT
+zmij | 1.0.21 | MIT
+zstd | 0.13.3 | MIT
+zstd-safe | 7.2.4 | MIT OR Apache-2.0
+zstd-sys | 2.0.16+zstd.1.5.7 | MIT/Apache-2.0
+
+
+The corresponding upstream license files remain under `vendor/rust-dependencies`; this notice supplements rather than replaces them.