rubydb 0.1.4 → 0.1.6

data/scripts/security

@@ -0,0 +1,45 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+# Run the security checks that are deterministic on a developer or CI host.
+# Hosted CodeQL and an independent penetration review remain separate release
+# requirements; this script must not be mistaken for either of those.
+
+require "rbconfig"
+
+ROOT = File.expand_path("..", __dir__)
+
+def run!(label, *command)
+  puts "== #{label} =="
+  abort "#{label} failed" unless system(*command, chdir: ROOT)
+end
+
+audit_command = Gem.win_platform? ? "bundler-audit.bat" : "bundler-audit"
+
+unless system(audit_command, "--version", out: File::NULL, err: File::NULL)
+  abort "bundler-audit is required; install it with: gem install bundler-audit --no-document"
+end
+
+run!("Bundler dependency audit", audit_command, "check", "--update")
+
+secret_patterns = [
+  /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/,
+  /\bAKIA[0-9A-Z]{16}\b/,
+  /\bgh[pousr]_[A-Za-z0-9_]{30,}\b/
+].freeze
+
+tracked_files = IO.popen(["git", "ls-files", "-z"], chdir: ROOT, &:read).split("\0")
+findings = tracked_files.filter_map do |relative_path|
+  next if relative_path.empty?
+
+  absolute_path = File.join(ROOT, relative_path)
+  next unless File.file?(absolute_path)
+
+  contents = File.binread(absolute_path)
+  relative_path if secret_patterns.any? { |pattern| pattern.match?(contents) }
+end
+
+abort "Potential credential material found in tracked files: #{findings.join(", ")}" unless findings.empty?
+
+puts "Security baseline passed: dependency audit and tracked-secret scan."
+puts "Hosted CodeQL and independent security review are still required for certification."

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rubydb
 version: !ruby/object:Gem::Version
-  version: 0.1.4
+  version: 0.1.6
 platform: ruby
 authors:
 - Aldane Hutchinson
@@ -65,6 +65,48 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.4'
+- !ruby/object:Gem::Dependency
+  name: bigdecimal
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '3.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '3.1'
+- !ruby/object:Gem::Dependency
+  name: concurrent-ruby
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.2'
+- !ruby/object:Gem::Dependency
+  name: base64
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0.2'
 description: |
   RubyDB is a developer-first relational database foundation written in Ruby.
   It combines SQLite-like simplicity with a growing SQL, WAL, MVCC, server,
@@ -112,6 +154,40 @@ files:
 - Rakefile
 - SECURITY.md
 - SUPPORT.md
+- accelerator/bin/SHA256SUMS
+- accelerator/bin/rubydb-accelerator-darwin-amd64
+- accelerator/bin/rubydb-accelerator-darwin-arm64
+- accelerator/bin/rubydb-accelerator-linux-amd64
+- accelerator/bin/rubydb-accelerator-linux-arm64
+- accelerator/bin/rubydb-accelerator-windows-amd64.exe
+- accelerator/bin/rubydb-accelerator-windows-arm64.exe
+- accelerator/cmd/rubydb-accelerator/main.go
+- accelerator/go.mod
+- accelerator/internal/execution/aggregate.go
+- accelerator/internal/execution/distinct.go
+- accelerator/internal/execution/filter.go
+- accelerator/internal/execution/join.go
+- accelerator/internal/execution/operators.go
+- accelerator/internal/execution/scan.go
+- accelerator/internal/execution/sort.go
+- accelerator/internal/execution/types.go
+- accelerator/internal/execution/value.go
+- accelerator/internal/memory/arena.go
+- accelerator/internal/memory/reuse.go
+- accelerator/internal/metrics/registry.go
+- accelerator/internal/parallel/bounded_queue.go
+- accelerator/internal/parallel/scheduler.go
+- accelerator/internal/parallel/worker_pool.go
+- accelerator/internal/protocol/cancellation.go
+- accelerator/internal/protocol/columnar.go
+- accelerator/internal/protocol/frame.go
+- accelerator/internal/runtime/worker.go
+- accelerator/internal/storage/page_reader.go
+- accelerator/internal/storage/snapshot_scan.go
+- accelerator/internal/wal/checksum.go
+- accelerator/internal/wal/compression.go
+- accelerator/internal/wal/group_commit.go
+- accelerator/internal/wal/record_encoder.go
 - adapters/activerecord/Gemfile
 - adapters/activerecord/README.md
 - adapters/activerecord/lib/active_record/connection_adapters/rubydb_adapter.rb
@@ -129,6 +205,7 @@ files:
 - docs/architecture/concurrency.md
 - docs/architecture/current-state.md
 - docs/architecture/execution-engine.md
+- docs/architecture/go-accelerator.md
 - docs/architecture/indexes.md
 - docs/architecture/mvcc.md
 - docs/architecture/overview.md
@@ -200,7 +277,23 @@ files:
 - docs/sql/transactions.md
 - docs/troubleshooting.md
 - exe/rubydb
+- lessons/01-foundations.md
+- lessons/02-local-development.md
+- lessons/03-embedded-rubydb.md
+- lessons/04-rails-complex-apps.md
+- lessons/05-rubydb-production-server.md
+- lessons/06-postgresql-massive-apps.md
+- lessons/07-hybrid-microservices.md
+- lessons/08-migrations-backups-recovery.md
+- lessons/09-observability-security-scale.md
+- lessons/10-release-readiness.md
+- lessons/11-community-adapter.md
+- lessons/12-rails-ecommerce-pressure.md
 - lib/rubydb.rb
+- lib/rubydb/accelerator.rb
+- lib/rubydb/accelerator/client.rb
+- lib/rubydb/accelerator/error.rb
+- lib/rubydb/accelerator/manager.rb
 - lib/rubydb/backup/archive.rb
 - lib/rubydb/backup/backup.rb
 - lib/rubydb/backup/incremental.rb
@@ -227,6 +320,7 @@ files:
 - lib/rubydb/catalog/trigger.rb
 - lib/rubydb/catalog/view.rb
 - lib/rubydb/cli/application.rb
+- lib/rubydb/cli/commands/accelerator.rb
 - lib/rubydb/cli/commands/backup.rb
 - lib/rubydb/cli/commands/branch.rb
 - lib/rubydb/cli/commands/checkout.rb
@@ -293,7 +387,9 @@ files:
 - lib/rubydb/errors/server_error.rb
 - lib/rubydb/errors/storage_error.rb
 - lib/rubydb/errors/transaction_error.rb
+- lib/rubydb/execution/accelerator_dispatch.rb
 - lib/rubydb/execution/aggregate_executor.rb
+- lib/rubydb/execution/cost_model.rb
 - lib/rubydb/execution/delete_executor.rb
 - lib/rubydb/execution/distinct_executor.rb
 - lib/rubydb/execution/executor.rb
@@ -302,7 +398,9 @@ files:
 - lib/rubydb/execution/insert_executor.rb
 - lib/rubydb/execution/join_executor.rb
 - lib/rubydb/execution/limit_executor.rb
+- lib/rubydb/execution/operator_selection.rb
 - lib/rubydb/execution/optimizer.rb
+- lib/rubydb/execution/physical_plan.rb
 - lib/rubydb/execution/plan.rb
 - lib/rubydb/execution/planner.rb
 - lib/rubydb/execution/predicate.rb
@@ -355,6 +453,7 @@ files:
 - lib/rubydb/protocol/encoder.rb
 - lib/rubydb/protocol/handshake.rb
 - lib/rubydb/protocol/message.rb
+- lib/rubydb/protocol/parameter_binder.rb
 - lib/rubydb/protocol/protocol.rb
 - lib/rubydb/protocol/version.rb
 - lib/rubydb/rails/adapter.rb
@@ -449,6 +548,7 @@ files:
 - lib/rubydb/storage/record.rb
 - lib/rubydb/storage/row.rb
 - lib/rubydb/storage/serializer.rb
+- lib/rubydb/storage/snapshot_reader.rb
 - lib/rubydb/storage/storage_layout.rb
 - lib/rubydb/storage/storage_manager.rb
 - lib/rubydb/storage/tuple.rb
@@ -494,6 +594,7 @@ files:
 - packaging/systemd/rubydb.service
 - rubydb.gemspec
 - scripts/benchmark
+- scripts/build_accelerator
 - scripts/durability_drill
 - scripts/format
 - scripts/fuzz