rubydb 0.1.3 → 0.1.5

data/.github/workflows/release.yml

@@ -1,77 +1,77 @@
-name: Release gem
-
-on:
-  push:
-    tags: ["v*"]
-
-permissions:
-  contents: write
-  id-token: write
-  attestations: write
-
-jobs:
-  build-and-publish:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: "3.3"
-          bundler-cache: true
-      - name: Require protected release credentials
-        env:
-          RUBYGEMS_API_KEY: ${{ secrets.RUBYGEMS_API_KEY }}
-          RUBYDB_GEM_SIGNING_KEY_B64: ${{ secrets.RUBYDB_GEM_SIGNING_KEY_B64 }}
-          RUBYDB_GEM_CERT_B64: ${{ secrets.RUBYDB_GEM_CERT_B64 }}
-        shell: bash
-        run: |
-          set -euo pipefail
-          test -n "$RUBYGEMS_API_KEY" || { echo "RUBYGEMS_API_KEY is required for a release tag" >&2; exit 1; }
-          test -n "$RUBYDB_GEM_SIGNING_KEY_B64" || { echo "RUBYDB_GEM_SIGNING_KEY_B64 is required for a release tag" >&2; exit 1; }
-          test -n "$RUBYDB_GEM_CERT_B64" || { echo "RUBYDB_GEM_CERT_B64 is required for a release tag" >&2; exit 1; }
-
-      - name: Configure RubyGems signing
-        env:
-          RUBYDB_GEM_SIGNING_KEY_B64: ${{ secrets.RUBYDB_GEM_SIGNING_KEY_B64 }}
-          RUBYDB_GEM_CERT_B64: ${{ secrets.RUBYDB_GEM_CERT_B64 }}
-        shell: bash
-        run: |
-          key_path="$RUNNER_TEMP/rubydb-gem-private-key.pem"
-          cert_path="$RUNNER_TEMP/rubydb-gem-public-cert.pem"
-          printf '%s' "$RUBYDB_GEM_SIGNING_KEY_B64" | base64 --decode > "$key_path"
-          printf '%s' "$RUBYDB_GEM_CERT_B64" | base64 --decode > "$cert_path"
-          chmod 600 "$key_path"
-          {
-            echo "RUBYDB_GEM_SIGNING_KEY=$key_path"
-            echo "RUBYDB_GEM_CERT=$cert_path"
-          } >> "$GITHUB_ENV"
-      - name: Verify tag matches gem version
-        shell: bash
-        run: test "${GITHUB_REF_NAME#v}" = "$(ruby -Ilib -rrubydb/version -e 'puts RubyDB::VERSION')"
-      - name: Verify changelog release entry
-        run: ruby scripts/release_check
-      - name: Test and build release artifact
-        run: |
-          bundle exec rspec
-          ruby scripts/release
-      - name: Sign release provenance
-        uses: actions/attest-build-provenance@v2
-        with:
-          subject-path: "pkg/*.gem"
-      - name: Publish to RubyGems
-        env:
-          GEM_HOST_API_KEY: ${{ secrets.RUBYGEMS_API_KEY }}
-          RUBYDB_PUBLISH: "1"
-        run: ruby scripts/release
-      - name: Publish GitHub release notes from changelog history
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: gh release create "$GITHUB_REF_NAME" --verify-tag --generate-notes --title "$GITHUB_REF_NAME"
-      - uses: actions/upload-artifact@v4
-        with:
-          name: rubydb-gem-${{ github.ref_name }}
-          path: |
-            pkg/*.gem
-            checksums/*.sha512
+name: Release gem
+
+on:
+  push:
+    tags: ["v*"]
+
+permissions:
+  contents: write
+  id-token: write
+  attestations: write
+
+jobs:
+  build-and-publish:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: "3.3"
+          bundler-cache: true
+      - name: Require protected release credentials
+        env:
+          RUBYGEMS_API_KEY: ${{ secrets.RUBYGEMS_API_KEY }}
+          RUBYDB_GEM_SIGNING_KEY_B64: ${{ secrets.RUBYDB_GEM_SIGNING_KEY_B64 }}
+          RUBYDB_GEM_CERT_B64: ${{ secrets.RUBYDB_GEM_CERT_B64 }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          test -n "$RUBYGEMS_API_KEY" || { echo "RUBYGEMS_API_KEY is required for a release tag" >&2; exit 1; }
+          test -n "$RUBYDB_GEM_SIGNING_KEY_B64" || { echo "RUBYDB_GEM_SIGNING_KEY_B64 is required for a release tag" >&2; exit 1; }
+          test -n "$RUBYDB_GEM_CERT_B64" || { echo "RUBYDB_GEM_CERT_B64 is required for a release tag" >&2; exit 1; }
+
+      - name: Configure RubyGems signing
+        env:
+          RUBYDB_GEM_SIGNING_KEY_B64: ${{ secrets.RUBYDB_GEM_SIGNING_KEY_B64 }}
+          RUBYDB_GEM_CERT_B64: ${{ secrets.RUBYDB_GEM_CERT_B64 }}
+        shell: bash
+        run: |
+          key_path="$RUNNER_TEMP/rubydb-gem-private-key.pem"
+          cert_path="$RUNNER_TEMP/rubydb-gem-public-cert.pem"
+          printf '%s' "$RUBYDB_GEM_SIGNING_KEY_B64" | base64 --decode > "$key_path"
+          printf '%s' "$RUBYDB_GEM_CERT_B64" | base64 --decode > "$cert_path"
+          chmod 600 "$key_path"
+          {
+            echo "RUBYDB_GEM_SIGNING_KEY=$key_path"
+            echo "RUBYDB_GEM_CERT=$cert_path"
+          } >> "$GITHUB_ENV"
+      - name: Verify tag matches gem version
+        shell: bash
+        run: test "${GITHUB_REF_NAME#v}" = "$(ruby -Ilib -rrubydb/version -e 'puts RubyDB::VERSION')"
+      - name: Verify changelog release entry
+        run: ruby scripts/release_check
+      - name: Test and build release artifact
+        run: |
+          bundle exec rspec
+          ruby scripts/release
+      - name: Sign release provenance
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-path: "pkg/*.gem"
+      - name: Publish to RubyGems
+        env:
+          GEM_HOST_API_KEY: ${{ secrets.RUBYGEMS_API_KEY }}
+          RUBYDB_PUBLISH: "1"
+        run: ruby scripts/release
+      - name: Publish GitHub release notes from changelog history
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: gh release create "$GITHUB_REF_NAME" --verify-tag --generate-notes --title "$GITHUB_REF_NAME"
+      - uses: actions/upload-artifact@v4
+        with:
+          name: rubydb-gem-${{ github.ref_name }}
+          path: |
+            pkg/*.gem
+            checksums/*.sha512

data/.github/workflows/security.yml

@@ -1,37 +1,39 @@
-name: Security
-
-on:
-  push:
-    branches: [main]
-  pull_request:
-    branches: [main]
-  schedule:
-    - cron: "17 3 * * 1"
-
-permissions:
-  contents: read
-  security-events: write
-
-jobs:
-  dependency-audit:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: "3.3"
-          bundler-cache: true
-      - name: Audit Ruby dependencies
-        run: |
-          gem install bundler-audit --no-document
-          bundle audit check --update
-
-  codeql:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: github/codeql-action/init@v3
-        with:
-          languages: ruby
-          build-mode: none
-      - uses: github/codeql-action/analyze@v3
+name: Security
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  schedule:
+    - cron: "17 3 * * 1"
+
+permissions:
+  contents: read
+  security-events: write
+
+jobs:
+  dependency-audit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: "3.3"
+          bundler-cache: true
+      - name: Audit Ruby dependencies
+        run: |
+          gem install bundler-audit --no-document
+          bundle audit check --update
+      - name: Run repository security baseline
+        run: ruby scripts/security
+
+  codeql:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: github/codeql-action/init@v3
+        with:
+          languages: ruby
+          build-mode: none
+      - uses: github/codeql-action/analyze@v3

data/.github/workflows/test.yml

@@ -1,26 +1,26 @@
-name: Test
-
-on:
-  push:
-    branches: [main]
-  pull_request:
-    branches: [main]
-
-permissions:
-  contents: read
-
-jobs:
-  rspec:
-    runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        ruby: ["3.3", "3.4"]
-    steps:
-      - uses: actions/checkout@v4
-      - uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: ${{ matrix.ruby }}
-          bundler-cache: true
-      - run: bundle exec rspec
-      - run: ruby benchmarks/concurrent_workload.rb
+name: Test
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  rspec:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        ruby: ["3.3", "3.4"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ${{ matrix.ruby }}
+          bundler-cache: true
+      - run: bundle exec rspec
+      - run: ruby benchmarks/concurrent_workload.rb

data/.github/workflows/workload.yml

@@ -1,58 +1,58 @@
-name: Sustained workload validation
-
-on:
-  schedule:
-    - cron: "31 3 * * 6"
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-jobs:
-  workload:
-    runs-on: ubuntu-latest
-    timeout-minutes: 30
-    steps:
-      - uses: actions/checkout@v4
-      - uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: "3.3"
-          bundler-cache: true
-      - name: Run sustained threaded durability soak
-        shell: bash
-        run: |
-          set -euo pipefail
-          mkdir -p workload-results
-          RUBYDB_SOAK_ROUNDS=3 \
-          RUBYDB_SOAK_THREADS=16 \
-          RUBYDB_SOAK_OPERATIONS=2000 \
-          RUBYDB_SOAK_PAYLOAD_BYTES=512 \
-          ruby benchmarks/concurrent_soak.rb | tee workload-results/threaded.json
-      - name: Run sustained server/client latency workload
-        shell: bash
-        run: |
-          set -euo pipefail
-          RUBYDB_SERVER_WORKLOAD_CLIENTS=16 \
-          RUBYDB_SERVER_WORKLOAD_OPERATIONS=1000 \
-          ruby -Ilib benchmarks/server_workload.rb | tee workload-results/server.json
-      - name: Run sustained multi-process client workload
-        shell: bash
-        run: |
-          set -euo pipefail
-          RUBYDB_SERVER_WORKLOAD_PROCESSES=8 \
-          RUBYDB_SERVER_WORKLOAD_OPERATIONS=1000 \
-          ruby benchmarks/multiprocess_server_workload.rb | tee workload-results/multiprocess.json
-      - name: Run cancellation, capacity, and deadlock soak
-        shell: bash
-        run: |
-          set -euo pipefail
-          RUBYDB_PRODUCTION_SOAK_CLIENTS=8 \
-          RUBYDB_PRODUCTION_SOAK_OPERATIONS=500 \
-          RUBYDB_PRODUCTION_SOAK_CANCEL_ROWS=250000 \
-          ruby benchmarks/production_soak.rb | tee workload-results/production-soak.json
-      - name: Upload workload metrics
-        if: always()
-        uses: actions/upload-artifact@v4
-        with:
-          name: rubydb-workload-${{ github.sha }}
-          path: workload-results/
+name: Sustained workload validation
+
+on:
+  schedule:
+    - cron: "31 3 * * 6"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  workload:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: "3.3"
+          bundler-cache: true
+      - name: Run sustained threaded durability soak
+        shell: bash
+        run: |
+          set -euo pipefail
+          mkdir -p workload-results
+          RUBYDB_SOAK_ROUNDS=3 \
+          RUBYDB_SOAK_THREADS=16 \
+          RUBYDB_SOAK_OPERATIONS=2000 \
+          RUBYDB_SOAK_PAYLOAD_BYTES=512 \
+          ruby benchmarks/concurrent_soak.rb | tee workload-results/threaded.json
+      - name: Run sustained server/client latency workload
+        shell: bash
+        run: |
+          set -euo pipefail
+          RUBYDB_SERVER_WORKLOAD_CLIENTS=16 \
+          RUBYDB_SERVER_WORKLOAD_OPERATIONS=1000 \
+          ruby -Ilib benchmarks/server_workload.rb | tee workload-results/server.json
+      - name: Run sustained multi-process client workload
+        shell: bash
+        run: |
+          set -euo pipefail
+          RUBYDB_SERVER_WORKLOAD_PROCESSES=8 \
+          RUBYDB_SERVER_WORKLOAD_OPERATIONS=1000 \
+          ruby benchmarks/multiprocess_server_workload.rb | tee workload-results/multiprocess.json
+      - name: Run cancellation, capacity, and deadlock soak
+        shell: bash
+        run: |
+          set -euo pipefail
+          RUBYDB_PRODUCTION_SOAK_CLIENTS=8 \
+          RUBYDB_PRODUCTION_SOAK_OPERATIONS=500 \
+          RUBYDB_PRODUCTION_SOAK_CANCEL_ROWS=250000 \
+          ruby benchmarks/production_soak.rb | tee workload-results/production-soak.json
+      - name: Upload workload metrics
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: rubydb-workload-${{ github.sha }}
+          path: workload-results/

data/.gitignore

@@ -26,11 +26,18 @@
 *.log
 /examples/server/tmp/
 
-# Environment
-/.bundle/
-/vendor/bundle/
-/.env
-/.env.local
+# Environment
+/.bundle/
+/vendor/bundle/
+/.env
+/.env.local
+
+# Python adapter build output
+/adapters/python/build/
+/adapters/python/dist/
+/adapters/python/src/*.egg-info/
+__pycache__/
+*.py[cod]
 
 # IDE
 /.idea/

data/.rubocop.yml

@@ -1,44 +1,50 @@
-inherit_gem:
-  standard: config/base.yml
-
-AllCops:
-  TargetRubyVersion: 4.0
-  NewCops: enable
-  Exclude:
-    - 'bin/**/*'
-    - 'exe/**/*'
-    - 'tmp/**/*'
-    - 'vendor/**/*'
-    - 'test/fixtures/**/*'
-    - 'fuzz/**/*'
-
-# Ruby 4.0 modern features
-Style/HashSyntax:
-  EnforcedShorthandSyntax: either
-
-Style/EndlessMethod:
-  Enabled: true
-  EnforcedStyle: allow_single_line
-
-Style/PatternMatching:
-  Enabled: true
-
-Lint/ShadowingOuterLocalVariable:
-  Enabled: false
-
-Metrics/ClassLength:
-  Max: 200
-
-Metrics/MethodLength:
-  Max: 25
-
-Metrics/BlockLength:
-  Max: 50
-  Exclude:
-    - 'spec/**/*'
-    - 'test/**/*'
-    - '*.gemspec'
-
-Naming/FileName:
-  Exclude:
-    - 'lib/rubydb.rb'
+inherit_gem:
+  standard: config/base.yml
+
+AllCops:
+  TargetRubyVersion: 3.3
+  NewCops: enable
+  Exclude:
+    - 'bin/**/*'
+    - 'exe/**/*'
+    - 'tmp/**/*'
+    - 'vendor/**/*'
+    - 'test/fixtures/**/*'
+    - 'fuzz/**/*'
+
+# Ruby 4.0 modern features
+Style/HashSyntax:
+  EnforcedShorthandSyntax: either
+
+Style/EndlessMethod:
+  Enabled: true
+  EnforcedStyle: allow_single_line
+
+Lint/ShadowingOuterLocalVariable:
+  Enabled: false
+
+# Several service objects declare a cheap reader with attr_reader and later
+# replace it with a synchronized, computed stats method. The explicit method
+# is the intended public API; RuboCop's duplicate-method warning is expected.
+Lint/DuplicateMethods:
+  Enabled: false
+
+Metrics/ClassLength:
+  Max: 200
+
+Metrics/MethodLength:
+  Max: 25
+
+Metrics/BlockLength:
+  Max: 50
+  Exclude:
+    - 'spec/**/*'
+    - 'test/**/*'
+    - '*.gemspec'
+
+Naming/FileName:
+  Exclude:
+    - 'lib/rubydb.rb'
+
+Layout/EndOfLine:
+  EnforcedStyle: lf

data/.standard.yml

@@ -1,14 +1,9 @@
-# Standard Ruby configuration
-ruby_version: 4.0
-
-ignore:
-  - 'tmp/**/*'
-  - 'vendor/**/*'
-  - 'test/fixtures/**/*'
-  - 'fuzz/**/*'
-  - 'bin/**/*'
-
-# Allow some flexibility in development
-plugins:
-  - rubocop-performance
-  - rubocop-rspec
+# Standard Ruby configuration
+ruby_version: 3.3
+
+ignore:
+  - 'tmp/**/*'
+  - 'vendor/**/*'
+  - 'test/fixtures/**/*'
+  - 'fuzz/**/*'
+  - 'bin/**/*'

data/ARCHITECTURE.md

@@ -1,21 +1,21 @@
-# RubyDB architecture
-
-RubyDB is organized as a durable relational engine with optional server/client
-and Rails integration layers:
-
-1. SQL lexer/parser and AST
-2. binder, planner, and executor
-3. catalog, constraints, and indexes
-4. transactions, MVCC, lock management, and WAL
-5. page storage, checkpoints, recovery, backup, and compaction
-6. server protocol, authentication, TLS, limits, and monitoring
-7. logical replication, fencing, failover, and adapters
-
-The architecture is deliberately modular so every durable boundary can be
-tested independently and end to end. Start with the [architecture index](docs/README.md),
-then read [current state](docs/architecture/current-state.md) and the
-[production validation contract](docs/production_validation.md).
-
-The embedded engine requires exclusive ownership. Server mode is the boundary
-for multiple application processes. Automatic election is disabled until an
-independent multi-host fencing authority is validated.
+# RubyDB architecture
+
+RubyDB is organized as a durable relational engine with optional server/client
+and Rails integration layers:
+
+1. SQL lexer/parser and AST
+2. binder, planner, and executor
+3. catalog, constraints, and indexes
+4. transactions, MVCC, lock management, and WAL
+5. page storage, checkpoints, recovery, backup, and compaction
+6. server protocol, authentication, TLS, limits, and monitoring
+7. logical replication, fencing, failover, and adapters
+
+The architecture is deliberately modular so every durable boundary can be
+tested independently and end to end. Start with the [architecture index](docs/README.md),
+then read [current state](docs/architecture/current-state.md) and the
+[production validation contract](docs/production_validation.md).
+
+The embedded engine requires exclusive ownership. Server mode is the boundary
+for multiple application processes. Automatic election is disabled until an
+independent multi-host fencing authority is validated.