@push.rocks/smartdb 5.2.0 → 5.2.2

package/.smartconfig.json

@@ -77,7 +77,22 @@
     },
     "locked": true,
     "static": true,
-    "remapLocalPaths": true
+    "remapLocalPaths": true,
+    "matrix": {
+      "builders": {
+        "linux_amd64": {
+          "transport": "local"
+        },
+        "macos_arm64": {
+          "transport": "ssh",
+          "destinationEnv": "SMARTDB_RELEASE_MACOS_SSH",
+          "temporaryRootEnv": "SMARTDB_RELEASE_MACOS_TEMP_ROOT"
+        }
+      },
+      "smokeTestArgs": [
+        "--version"
+      ]
+    }
   },
   "@ship.zone/szci": {
     "npmGlobalTools": []

package/dist_rust/rustdb_linux_amd64.tsrust-build.json

@@ -1,13 +1,13 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "c5c0a72cc3e9001b008c73ecfbc05dbcde559796eeb81ddd9b57a858f98d4515",
+  "binarySha256": "b585eaae112a1eec36542e1e80410744695543cef34191d03de002ac215c8bd8",
   "buildInfo": {
     "projectName": "@push.rocks/smartdb",
-    "projectVersion": "5.2.0",
-    "gitCommit": "d61180c4086a9f771765d104260f620d76b1cda0",
+    "projectVersion": "5.2.2",
+    "gitCommit": "08f85430fb5272560782a39019414511a0cfedba",
     "gitDirty": false,
-    "builtAt": "2026-08-18T22:39:04.935Z",
-    "tsrustVersion": "1.9.1",
+    "builtAt": "2026-08-21T06:39:21.040Z",
+    "tsrustVersion": "1.10.0",
     "binary": "rustdb",
     "target": "linux_amd64"
   }

package/dist_rust/rustdb_linux_arm64.tsrust-build.json

@@ -1,13 +1,13 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "5f3878be4da5dd17eb4c269fdb3f63185d496bd84c1066ce54f47ea3b8f45321",
+  "binarySha256": "a40dedd961feb9bcc0cb13f45e280ef0d8d2d819697d612023c9a3990fb51cc4",
   "buildInfo": {
     "projectName": "@push.rocks/smartdb",
-    "projectVersion": "5.2.0",
-    "gitCommit": "d61180c4086a9f771765d104260f620d76b1cda0",
+    "projectVersion": "5.2.2",
+    "gitCommit": "08f85430fb5272560782a39019414511a0cfedba",
     "gitDirty": false,
-    "builtAt": "2026-08-18T22:39:24.164Z",
-    "tsrustVersion": "1.9.1",
+    "builtAt": "2026-08-21T06:39:59.105Z",
+    "tsrustVersion": "1.10.0",
     "binary": "rustdb",
     "target": "linux_arm64"
   }

package/dist_rust/rustdb_macos_amd64.tsrust-build.json

@@ -1,13 +1,13 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "1cf98dfc94ff75ab0fad7927c5a59cec87e9623bcc8e36908e7811bd9632064c",
+  "binarySha256": "125f06fb8af9bdc5194ba9772344730aec39a3bd7f1b83c8419a26391649bf2a",
   "buildInfo": {
     "projectName": "@push.rocks/smartdb",
-    "projectVersion": "5.2.0",
-    "gitCommit": "d61180c4086a9f771765d104260f620d76b1cda0",
+    "projectVersion": "5.2.2",
+    "gitCommit": "08f85430fb5272560782a39019414511a0cfedba",
     "gitDirty": false,
-    "builtAt": "2026-08-18T22:40:01.824Z",
-    "tsrustVersion": "1.9.1",
+    "builtAt": "2026-08-21T06:41:11.089Z",
+    "tsrustVersion": "1.10.0",
     "binary": "rustdb",
     "target": "macos_amd64"
   }

package/dist_rust/rustdb_macos_arm64.tsrust-build.json

@@ -1,13 +1,13 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "3784a0e1d125a25a714086b098018a34cef6056677da3f087992a7e76cd9d87f",
+  "binarySha256": "2c7bc50ca344c883d1039886e509be8d945bc85bc16f6dbbadae7d39084ee9cb",
   "buildInfo": {
     "projectName": "@push.rocks/smartdb",
-    "projectVersion": "5.2.0",
-    "gitCommit": "d61180c4086a9f771765d104260f620d76b1cda0",
+    "projectVersion": "5.2.2",
+    "gitCommit": "08f85430fb5272560782a39019414511a0cfedba",
     "gitDirty": false,
-    "builtAt": "2026-08-18T22:41:12.434Z",
-    "tsrustVersion": "1.9.1",
+    "builtAt": "2026-08-21T06:41:51.892Z",
+    "tsrustVersion": "1.10.0",
     "binary": "rustdb",
     "target": "macos_arm64"
   }

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@push.rocks/smartdb',
-    version: '5.2.0',
+    version: '5.2.2',
     description: 'A MongoDB-compatible embedded database server with wire protocol support, backed by a high-performance Rust engine.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSxxQkFBcUI7SUFDM0IsT0FBTyxFQUFFLE9BQU87SUFDaEIsV0FBVyxFQUFFLHFIQUFxSDtDQUNuSSxDQUFBIn0=

package/dist_ts/ts_migration/migrators/v0_to_v1.js

@@ -11,7 +11,6 @@ const FILE_MAGIC = Buffer.from('SMARTDB\0', 'ascii');
 const FORMAT_VERSION = 1;
 /** File type tags */
 const FILE_TYPE_DATA = 1;
-const FILE_TYPE_HINT = 3;
 /** File header total size */
 const FILE_HEADER_SIZE = 64;
 /** Per-record magic */
@@ -54,23 +53,6 @@ function encodeDataRecord(timestamp, key, value) {
     buf.writeUInt32LE(crc, 18);
     return buf;
 }
-function encodeHintEntry(key, offset, recordLen, valueLen, timestamp) {
-    const keyBuf = Buffer.from(key, 'utf-8');
-    const buf = Buffer.alloc(4 + keyBuf.length + 8 + 4 + 4 + 8);
-    let pos = 0;
-    buf.writeUInt32LE(keyBuf.length, pos);
-    pos += 4;
-    keyBuf.copy(buf, pos);
-    pos += keyBuf.length;
-    buf.writeBigUInt64LE(offset, pos);
-    pos += 8;
-    buf.writeUInt32LE(recordLen, pos);
-    pos += 4;
-    buf.writeUInt32LE(valueLen, pos);
-    pos += 4;
-    buf.writeBigUInt64LE(timestamp, pos);
-    return buf;
-}
 // ---------------------------------------------------------------------------
 // CRC32 (matching crc32fast in Rust)
 // ---------------------------------------------------------------------------
@@ -167,7 +149,7 @@ const syncFile = async (filePathArg, signalArg) => {
     }, signalArg);
 };
 const assertPublishedMigrationComplete = async (collectionDirectoryArg) => {
-    for (const fileName of ['data.rdb', 'keydir.hint', 'indexes.json']) {
+    for (const fileName of ['data.rdb', 'indexes.json']) {
         let fileStat;
         try {
             fileStat = await fs.lstat(path.join(collectionDirectoryArg, fileName));
@@ -183,6 +165,9 @@ const assertPublishedMigrationComplete = async (collectionDirectoryArg) => {
         }
     }
 };
+// ---------------------------------------------------------------------------
+// Migration: v0 (JSON) → v1 (Bitcask binary)
+// ---------------------------------------------------------------------------
 /**
  * Migrate a storage directory from v0 (JSON-per-collection) to v1 (Bitcask binary).
  *
@@ -247,8 +232,6 @@ export async function migrateV0ToV1(storagePath, signalArg) {
                     // File header
                     const headerBuf = writeFileHeader(FILE_TYPE_DATA);
                     await writeBuffer(dataFileHandle, headerBuf, signalArg);
-                    let currentOffset = BigInt(FILE_HEADER_SIZE);
-                    const keydir = new Map();
                     const ts = BigInt(Date.now());
                     for (const doc of docs) {
                         signalArg?.throwIfAborted();
@@ -274,27 +257,9 @@ export async function migrateV0ToV1(storagePath, signalArg) {
                         const valueBuf = Buffer.from(bsonBytes);
                         const record = encodeDataRecord(ts, keyBuf, valueBuf);
                         await writeBuffer(dataFileHandle, record, signalArg);
-                        keydir.set(idHex, {
-                            offset: currentOffset,
-                            recordLen: record.length,
-                            valueLen: valueBuf.length,
-                            timestamp: ts,
-                        });
-                        currentOffset += BigInt(record.length);
                     }
                     await dataFileHandle.sync();
                     signalArg?.throwIfAborted();
-                    // Write keydir.hint
-                    const hintPath = path.join(stagingDir, 'keydir.hint');
-                    await withFileHandle(hintPath, 'wx', async (hintFileHandle) => {
-                        await writeBuffer(hintFileHandle, writeFileHeader(FILE_TYPE_HINT), signalArg);
-                        for (const [key, entry] of keydir) {
-                            signalArg?.throwIfAborted();
-                            await writeBuffer(hintFileHandle, encodeHintEntry(key, entry.offset, entry.recordLen, entry.valueLen, entry.timestamp), signalArg);
-                        }
-                        await hintFileHandle.sync();
-                        signalArg?.throwIfAborted();
-                    }, signalArg);
                 }, signalArg);
                 // Copy indexes.json if it exists
                 if (await pathExists(indexJsonPath)) {
@@ -341,4 +306,4 @@ export async function migrateV0ToV1(storagePath, signalArg) {
     }
     return deletableFiles;
 }
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidjBfdG9fdjEuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi90cy90c19taWdyYXRpb24vbWlncmF0b3JzL3YwX3RvX3YxLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sS0FBSyxFQUFFLE1BQU0sa0JBQWtCLENBQUM7QUFDdkMsT0FBTyxLQUFLLElBQUksTUFBTSxXQUFXLENBQUM7QUFDbEMsT0FBTyxLQUFLLE1BQU0sTUFBTSxhQUFhLENBQUM7QUFDdEMsT0FBTyxFQUFFLElBQUksRUFBRSxNQUFNLE1BQU0sQ0FBQztBQUU1Qiw4RUFBOEU7QUFDOUUsdURBQXVEO0FBQ3ZELDhFQUE4RTtBQUU5RSxvQ0FBb0M7QUFDcEMsTUFBTSxVQUFVLEdBQUcsTUFBTSxDQUFDLElBQUksQ0FBQyxXQUFXLEVBQUUsT0FBTyxDQUFDLENBQUM7QUFDckQsNkJBQTZCO0FBQzdCLE1BQU0sY0FBYyxHQUFHLENBQUMsQ0FBQztBQUN6QixxQkFBcUI7QUFDckIsTUFBTSxjQUFjLEdBQUcsQ0FBQyxDQUFDO0FBQ3pCLE1BQU0sY0FBYyxHQUFHLENBQUMsQ0FBQztBQUN6Qiw2QkFBNkI7QUFDN0IsTUFBTSxnQkFBZ0IsR0FBRyxFQUFFLENBQUM7QUFDNUIsdUJBQXVCO0FBQ3ZCLE1BQU0sWUFBWSxHQUFHLE1BQU0sQ0FBQztBQUM1Qiw2QkFBNkI7QUFDN0IsTUFBTSxrQkFBa0IsR0FBRyxFQUFFLENBQUMsQ0FBQyxvQkFBb0I7QUFFbkQsOEVBQThFO0FBQzlFLDBCQUEwQjtBQUMxQiw4RUFBOEU7QUFFOUUsU0FBUyxlQUFlLENBQUMsUUFBZ0I7SUFDdkMsTUFBTSxHQUFHLEdBQUcsTUFBTSxDQUFDLEtBQUssQ0FBQyxnQkFBZ0IsRUFBRSxDQUFDLENBQUMsQ0FBQztJQUM5QyxVQUFVLENBQUMsSUFBSSxDQUFDLEdBQUcsRUFBRSxDQUFDLENBQUMsQ0FBQztJQUN4QixHQUFHLENBQUMsYUFBYSxDQUFDLGNBQWMsRUFBRSxDQUFDLENBQUMsQ0FBQztJQUNyQyxHQUFHLENBQUMsVUFBVSxDQUFDLFFBQVEsRUFBRSxFQUFFLENBQUMsQ0FBQztJQUM3QixHQUFHLENBQUMsYUFBYSxDQUFDLENBQUMsRUFBRSxFQUFFLENBQUMsQ0FBQyxDQUFDLFFBQVE7SUFDbEMsTUFBTSxHQUFHLEdBQUcsTUFBTSxDQUFDLElBQUksQ0FBQyxHQUFHLEVBQUUsQ0FBQyxDQUFDO0lBQy9CLEdBQUcsQ0FBQyxnQkFBZ0IsQ0FBQyxHQUFHLEVBQUUsRUFBRSxDQUFDLENBQUM7SUFDOUIsb0NBQW9DO0lBQ3BDLE9BQU8sR0FBRyxDQUFDO0FBQ2IsQ0FBQztBQUVELFNBQVMsZ0JBQWdCLENBQUMsU0FBaUIsRUFBRSxHQUFXLEVBQUUsS0FBYTtJQUNyRSxNQUFNLE1BQU0sR0FBRyxHQUFHLENBQUMsTUFBTSxDQUFDO0lBQzFCLE1BQU0sTUFBTSxHQUFHLEtBQUssQ0FBQyxNQUFNLENBQUM7SUFDNUIsTUFBTSxTQUFTLEdBQUcsa0JBQWtCLEdBQUcsTUFBTSxHQUFHLE1BQU0sQ0FBQztJQUN2RCxNQUFNLEdBQUcsR0FBRyxNQUFNLENBQUMsS0FBSyxDQUFDLFNBQVMsQ0FBQyxDQUFDO0lBRXBDLG9DQUFvQztJQUNwQyxHQUFHLENBQUMsYUFBYSxDQUFDLFlBQVksRUFBRSxDQUFDLENBQUMsQ0FBQztJQUNuQyxHQUFHLENBQUMsZ0JBQWdCLENBQUMsU0FBUyxFQUFFLENBQUMsQ0FBQyxDQUFDO0lBQ25DLEdBQUcsQ0FBQyxhQUFhLENBQUMsTUFBTSxFQUFFLEVBQUUsQ0FBQyxDQUFDO0lBQzlCLEdBQUcsQ0FBQyxhQUFhLENBQUMsTUFBTSxFQUFFLEVBQUUsQ0FBQyxDQUFDO0lBQzlCLHFEQUFxRDtJQUNyRCxHQUFHLENBQUMsSUFBSSxDQUFDLEdBQUcsRUFBRSxrQkFBa0IsQ0FBQyxDQUFDO0lBQ2xDLEtBQUssQ0FBQyxJQUFJLENBQUMsR0FBRyxFQUFFLGtCQUFrQixHQUFHLE1BQU0sQ0FBQyxDQUFDO0lBRTdDLHVEQUF1RDtJQUN2RCwrQkFBK0I7SUFDL0IsTUFBTSxHQUFHLEdBQUcsS0FBSyxDQUFDLE1BQU0sQ0FBQyxNQUFNLENBQUM7UUFDOUIsR0FBRyxDQUFDLFFBQVEsQ0FBQyxDQUFDLEVBQUUsRUFBRSxDQUFDO1FBQ25CLEdBQUcsQ0FBQyxRQUFRLENBQUMsRUFBRSxDQUFDO0tBQ2pCLENBQUMsQ0FBQyxDQUFDO0lBQ0osR0FBRyxDQUFDLGFBQWEsQ0FBQyxHQUFHLEVBQUUsRUFBRSxDQUFDLENBQUM7SUFFM0IsT0FBTyxHQUFHLENBQUM7QUFDYixDQUFDO0FBRUQsU0FBUyxlQUFlLENBQUMsR0FBVyxFQUFFLE1BQWMsRUFBRSxTQUFpQixFQUFFLFFBQWdCLEVBQUUsU0FBaUI7SUFDMUcsTUFBTSxNQUFNLEdBQUcsTUFBTSxDQUFDLElBQUksQ0FBQyxHQUFHLEVBQUUsT0FBTyxDQUFDLENBQUM7SUFDekMsTUFBTSxHQUFHLEdBQUcsTUFBTSxDQUFDLEtBQUssQ0FBQyxDQUFDLEdBQUcsTUFBTSxDQUFDLE1BQU0sR0FBRyxDQUFDLEdBQUcsQ0FBQyxHQUFHLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQztJQUM1RCxJQUFJLEdBQUcsR0FBRyxDQUFDLENBQUM7SUFDWixHQUFHLENBQUMsYUFBYSxDQUFDLE1BQU0sQ0FBQyxNQUFNLEVBQUUsR0FBRyxDQUFDLENBQUM7SUFBQyxHQUFHLElBQUksQ0FBQyxDQUFDO0lBQ2hELE1BQU0sQ0FBQyxJQUFJLENBQUMsR0FBRyxFQUFFLEdBQUcsQ0FBQyxDQUFDO0lBQUMsR0FBRyxJQUFJLE1BQU0sQ0FBQyxNQUFNLENBQUM7SUFDNUMsR0FBRyxDQUFDLGdCQUFnQixDQUFDLE1BQU0sRUFBRSxHQUFHLENBQUMsQ0FBQztJQUFDLEdBQUcsSUFBSSxDQUFDLENBQUM7SUFDNUMsR0FBRyxDQUFDLGFBQWEsQ0FBQyxTQUFTLEVBQUUsR0FBRyxDQUFDLENBQUM7SUFBQyxHQUFHLElBQUksQ0FBQyxDQUFDO0lBQzVDLEdBQUcsQ0FBQyxhQUFhLENBQUMsUUFBUSxFQUFFLEdBQUcsQ0FBQyxDQUFDO0lBQUMsR0FBRyxJQUFJLENBQUMsQ0FBQztJQUMzQyxHQUFHLENBQUMsZ0JBQWdCLENBQUMsU0FBUyxFQUFFLEdBQUcsQ0FBQyxDQUFDO0lBQ3JDLE9BQU8sR0FBRyxDQUFDO0FBQ2IsQ0FBQztBQUVELDhFQUE4RTtBQUM5RSxxQ0FBcUM7QUFDckMsOEVBQThFO0FBRTlFLE1BQU0sV0FBVyxHQUFHLENBQUMsR0FBRyxFQUFFO0lBQ3hCLE1BQU0sS0FBSyxHQUFHLElBQUksV0FBVyxDQUFDLEdBQUcsQ0FBQyxDQUFDO0lBQ25DLEtBQUssSUFBSSxDQUFDLEdBQUcsQ0FBQyxFQUFFLENBQUMsR0FBRyxHQUFHLEVBQUUsQ0FBQyxFQUFFLEVBQUUsQ0FBQztRQUM3QixJQUFJLEdBQUcsR0FBRyxDQUFDLENBQUM7UUFDWixLQUFLLElBQUksQ0FBQyxHQUFHLENBQUMsRUFBRSxDQUFDLEdBQUcsQ0FBQyxFQUFFLENBQUMsRUFBRSxFQUFFLENBQUM7WUFDM0IsR0FBRyxHQUFHLENBQUMsR0FBRyxHQUFHLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLFVBQVUsR0FBRyxDQUFDLEdBQUcsS0FBSyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLEdBQUcsS0FBSyxDQUFDLENBQUMsQ0FBQztRQUM3RCxDQUFDO1FBQ0QsS0FBSyxDQUFDLENBQUMsQ0FBQyxHQUFHLEdBQUcsQ0FBQztJQUNqQixDQUFDO0lBQ0QsT0FBTyxLQUFLLENBQUM7QUFDZixDQUFDLENBQUMsRUFBRSxDQUFDO0FBRUwsU0FBUyxLQUFLLENBQUMsSUFBWTtJQUN6QixJQUFJLEdBQUcsR0FBRyxVQUFVLENBQUM7SUFDckIsS0FBSyxJQUFJLENBQUMsR0FBRyxDQUFDLEVBQUUsQ0FBQyxHQUFHLElBQUksQ0FBQyxNQUFNLEVBQUUsQ0FBQyxFQUFFLEVBQUUsQ0FBQztRQUNyQyxHQUFHLEdBQUcsV0FBVyxDQUFDLENBQUMsR0FBRyxHQUFHLElBQUksQ0FBQyxDQUFDLENBQUMsQ0FBQyxHQUFHLElBQUksQ0FBQyxHQUFHLENBQUMsR0FBRyxLQUFLLENBQUMsQ0FBQyxDQUFDO0lBQzFELENBQUM7SUFDRCxPQUFPLENBQUMsR0FBRyxHQUFHLFVBQVUsQ0FBQyxLQUFLLENBQUMsQ0FBQztBQUNsQyxDQUFDO0FBRUQsTUFBTSxVQUFVLEdBQUcsS0FBSyxFQUFFLE9BQWUsRUFBb0IsRUFBRTtJQUM3RCxJQUFJLENBQUM7UUFDSCxNQUFNLEVBQUUsQ0FBQyxJQUFJLENBQUMsT0FBTyxDQUFDLENBQUM7UUFDdkIsT0FBTyxJQUFJLENBQUM7SUFDZCxDQUFDO0lBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztRQUNmLElBQUssS0FBK0IsQ0FBQyxJQUFJLEtBQUssUUFBUTtZQUFFLE9BQU8sS0FBSyxDQUFDO1FBQ3JFLE1BQU0sS0FBSyxDQUFDO0lBQ2QsQ0FBQztBQUNILENBQUMsQ0FBQztBQUVGLE1BQU0sT0FBTyxtQ0FBb0MsU0FBUSxjQUFjO0lBQ3JFLFlBQVksaUJBQTBCLEVBQUUsZ0JBQTJCO1FBQ2pFLEtBQUssQ0FDSCxDQUFDLGlCQUFpQixFQUFFLEdBQUcsZ0JBQWdCLENBQUMsRUFDeEMsNEVBQTRFLEVBQzVFLEVBQUUsS0FBSyxFQUFFLGlCQUFpQixFQUFFLENBQzdCLENBQUM7UUFDRixJQUFJLENBQUMsSUFBSSxHQUFHLHFDQUFxQyxDQUFDO0lBQ3BELENBQUM7Q0FDRjtBQUVELE1BQU0sQ0FBQyxNQUFNLCtCQUErQixHQUFHLEtBQUssRUFJbEQsYUFBMEIsRUFDMUIsWUFFcUIsRUFDckIsU0FBdUIsRUFDTCxFQUFFO0lBQ3BCLElBQUksZUFBb0MsQ0FBQztJQUN6QyxJQUFJLGNBQXVCLENBQUM7SUFDNUIsSUFBSSxrQkFBa0IsR0FBRyxLQUFLLENBQUM7SUFDL0IsSUFBSSxDQUFDO1FBQ0gsZUFBZSxHQUFHLE1BQU0sWUFBWSxDQUFDLGFBQWEsQ0FBQyxDQUFDO1FBQ3BELGtCQUFrQixHQUFHLElBQUksQ0FBQztJQUM1QixDQUFDO0lBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztRQUNmLGNBQWMsR0FBRyxLQUFLLENBQUM7SUFDekIsQ0FBQztJQUNELElBQUksQ0FBQztRQUNILE1BQU0sYUFBYSxDQUFDLEtBQUssRUFBRSxDQUFDO0lBQzlCLENBQUM7SUFBQyxPQUFPLFVBQVUsRUFBRSxDQUFDO1FBQ3BCLElBQUksY0FBYyxLQUFLLFNBQVMsRUFBRSxDQUFDO1lBQ2pDLE1BQU0sSUFBSSxtQ0FBbUMsQ0FBQyxjQUFjLEVBQUUsQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUFDO1FBQzlFLENBQUM7UUFDRCxJQUFJLFNBQVMsRUFBRSxPQUFPLEVBQUUsQ0FBQztZQUN2QixNQUFNLElBQUksbUNBQW1DLENBQUMsU0FBUyxDQUFDLE1BQU0sRUFBRSxDQUFDLFVBQVUsQ0FBQyxDQUFDLENBQUM7UUFDaEYsQ0FBQztRQUNELE1BQU0sVUFBVSxDQUFDO0lBQ25CLENBQUM7SUFDRCxJQUFJLENBQUMsa0JBQWtCO1FBQUUsTUFBTSxjQUFjLENBQUM7SUFDOUMsT0FBTyxlQUEwQixDQUFDO0FBQ3BDLENBQUMsQ0FBQztBQUVGLE1BQU0sY0FBYyxHQUFHLEtBQUssRUFDMUIsV0FBbUIsRUFDbkIsUUFBb0IsRUFDcEIsWUFFcUIsRUFDckIsU0FBdUIsRUFDTCxFQUFFLENBQUMsK0JBQStCLENBQ3BELE1BQU0sRUFBRSxDQUFDLElBQUksQ0FBQyxXQUFXLEVBQUUsUUFBUSxDQUFDLEVBQ3BDLFlBQVksRUFDWixTQUFTLENBQ1YsQ0FBQztBQUVGLE1BQU0sV0FBVyxHQUFHLEtBQUssRUFDdkIsYUFBa0QsRUFDbEQsU0FBaUIsRUFDakIsU0FBdUIsRUFDUixFQUFFO0lBQ2pCLElBQUksTUFBTSxHQUFHLENBQUMsQ0FBQztJQUNmLE9BQU8sTUFBTSxHQUFHLFNBQVMsQ0FBQyxNQUFNLEVBQUUsQ0FBQztRQUNqQyxTQUFTLEVBQUUsY0FBYyxFQUFFLENBQUM7UUFDNUIsTUFBTSxFQUFFLFlBQVksRUFBRSxHQUFHLE1BQU0sYUFBYSxDQUFDLEtBQUssQ0FDaEQsU0FBUyxFQUNULE1BQU0sRUFDTixTQUFTLENBQUMsTUFBTSxHQUFHLE1BQU0sRUFDekIsSUFBSSxDQUNMLENBQUM7UUFDRixJQUFJLFlBQVksSUFBSSxDQUFDLEVBQUUsQ0FBQztZQUN0QixNQUFNLElBQUksS0FBSyxDQUFDLGtEQUFrRCxDQUFDLENBQUM7UUFDdEUsQ0FBQztRQUNELE1BQU0sSUFBSSxZQUFZLENBQUM7SUFDekIsQ0FBQztJQUNELFNBQVMsRUFBRSxjQUFjLEVBQUUsQ0FBQztBQUM5QixDQUFDLENBQUM7QUFFRixNQUFNLGFBQWEsR0FBRyxLQUFLLEVBQ3pCLGdCQUF3QixFQUN4QixTQUF1QixFQUNSLEVBQUU7SUFDakIsSUFBSSxDQUFDO1FBQ0gsTUFBTSxjQUFjLENBQUMsZ0JBQWdCLEVBQUUsR0FBRyxFQUFFLEtBQUssRUFBRSxrQkFBa0IsRUFBRSxFQUFFO1lBQ3ZFLE1BQU0sa0JBQWtCLENBQUMsSUFBSSxFQUFFLENBQUM7UUFDbEMsQ0FBQyxFQUFFLFNBQVMsQ0FBQyxDQUFDO0lBQ2hCLENBQUM7SUFBQyxPQUFPLEtBQUssRUFBRSxDQUFDO1FBQ2YsSUFBSSxDQUFDLENBQUMsUUFBUSxFQUFFLFNBQVMsQ0FBQyxDQUFDLFFBQVEsQ0FBRSxLQUErQixDQUFDLElBQUksSUFBSSxFQUFFLENBQUMsRUFBRSxDQUFDO1lBQ2pGLE1BQU0sS0FBSyxDQUFDO1FBQ2QsQ0FBQztJQUNILENBQUM7QUFDSCxDQUFDLENBQUM7QUFFRixNQUFNLFFBQVEsR0FBRyxLQUFLLEVBQUUsV0FBbUIsRUFBRSxTQUF1QixFQUFpQixFQUFFO0lBQ3JGLE1BQU0sY0FBYyxDQUFDLFdBQVcsRUFBRSxHQUFHLEVBQUUsS0FBSyxFQUFFLGFBQWEsRUFBRSxFQUFFO1FBQzdELE1BQU0sYUFBYSxDQUFDLElBQUksRUFBRSxDQUFDO0lBQzdCLENBQUMsRUFBRSxTQUFTLENBQUMsQ0FBQztBQUNoQixDQUFDLENBQUM7QUFFRixNQUFNLGdDQUFnQyxHQUFHLEtBQUssRUFDNUMsc0JBQThCLEVBQ2YsRUFBRTtJQUNqQixLQUFLLE1BQU0sUUFBUSxJQUFJLENBQUMsVUFBVSxFQUFFLGFBQWEsRUFBRSxjQUFjLENBQUMsRUFBRSxDQUFDO1FBQ25FLElBQUksUUFBOEMsQ0FBQztRQUNuRCxJQUFJLENBQUM7WUFDSCxRQUFRLEdBQUcsTUFBTSxFQUFFLENBQUMsS0FBSyxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsc0JBQXNCLEVBQUUsUUFBUSxDQUFDLENBQUMsQ0FBQztRQUN6RSxDQUFDO1FBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztZQUNmLElBQUssS0FBK0IsQ0FBQyxJQUFJLEtBQUssUUFBUSxFQUFFLENBQUM7Z0JBQ3ZELE1BQU0sSUFBSSxLQUFLLENBQ2Isa0RBQWtELHNCQUFzQixFQUFFLEVBQzFFLEVBQUUsS0FBSyxFQUFFLEtBQUssRUFBRSxDQUNqQixDQUFDO1lBQ0osQ0FBQztZQUNELE1BQU0sS0FBSyxDQUFDO1FBQ2QsQ0FBQztRQUNELElBQUksQ0FBQyxRQUFRLENBQUMsTUFBTSxFQUFFLElBQUksUUFBUSxDQUFDLGNBQWMsRUFBRSxFQUFFLENBQUM7WUFDcEQsTUFBTSxJQUFJLEtBQUssQ0FDYixrREFBa0Qsc0JBQXNCLEVBQUUsQ0FDM0UsQ0FBQztRQUNKLENBQUM7SUFDSCxDQUFDO0FBQ0gsQ0FBQyxDQUFDO0FBYUY7Ozs7Ozs7R0FPRztBQUNILE1BQU0sQ0FBQyxLQUFLLFVBQVUsYUFBYSxDQUNqQyxXQUFtQixFQUNuQixTQUF1QjtJQUV2QixNQUFNLGNBQWMsR0FBYSxFQUFFLENBQUM7SUFDcEMsTUFBTSxrQkFBa0IsR0FBRyxJQUFJLEdBQUcsRUFBVSxDQUFDO0lBRTdDLElBQUksQ0FBQztRQUNILFNBQVMsRUFBRSxjQUFjLEVBQUUsQ0FBQztRQUM1QixNQUFNLFNBQVMsR0FBRyxNQUFNLEVBQUUsQ0FBQyxPQUFPLENBQUMsV0FBVyxFQUFFLEVBQUUsYUFBYSxFQUFFLElBQUksRUFBRSxDQUFDLENBQUM7UUFFekUsS0FBSyxNQUFNLE9BQU8sSUFBSSxTQUFTLEVBQUUsQ0FBQztZQUNoQyxTQUFTLEVBQUUsY0FBYyxFQUFFLENBQUM7WUFDNUIsSUFBSSxDQUFDLE9BQU8sQ0FBQyxXQUFXLEVBQUU7Z0JBQUUsU0FBUztZQUNyQyxJQUFJLE9BQU8sQ0FBQyxJQUFJLENBQUMsVUFBVSxDQUFDLFlBQVksQ0FBQztnQkFBRSxTQUFTO1lBRXBELE1BQU0sS0FBSyxHQUFHLElBQUksQ0FBQyxJQUFJLENBQUMsV0FBVyxFQUFFLE9BQU8sQ0FBQyxJQUFJLENBQUMsQ0FBQztZQUNuRCxNQUFNLFNBQVMsR0FBRyxNQUFNLEVBQUUsQ0FBQyxPQUFPLENBQUMsS0FBSyxFQUFFLEVBQUUsYUFBYSxFQUFFLElBQUksRUFBRSxDQUFDLENBQUM7WUFFbkUsS0FBSyxNQUFNLFFBQVEsSUFBSSxTQUFTLEVBQUUsQ0FBQztnQkFDakMsU0FBUyxFQUFFLGNBQWMsRUFBRSxDQUFDO2dCQUM1QixJQUFJLENBQUMsUUFBUSxDQUFDLE1BQU0sRUFBRTtvQkFBRSxTQUFTO2dCQUNqQyxJQUFJLFFBQVEsQ0FBQyxJQUFJLENBQUMsVUFBVSxDQUFDLFlBQVksQ0FBQztvQkFBRSxTQUFTO2dCQUNyRCxJQUFJLENBQUMsUUFBUSxDQUFDLElBQUksQ0FBQyxRQUFRLENBQUMsT0FBTyxDQUFDO29CQUFFLFNBQVM7Z0JBQy9DLElBQUksUUFBUSxDQUFDLElBQUksQ0FBQyxRQUFRLENBQUMsZUFBZSxDQUFDO29CQUFFLFNBQVM7Z0JBRXRELE1BQU0sUUFBUSxHQUFHLFFBQVEsQ0FBQyxJQUFJLENBQUMsT0FBTyxDQUFDLFNBQVMsRUFBRSxFQUFFLENBQUMsQ0FBQztnQkFDdEQsTUFBTSxRQUFRLEdBQUcsSUFBSSxDQUFDLElBQUksQ0FBQyxLQUFLLEVBQUUsUUFBUSxDQUFDLElBQUksQ0FBQyxDQUFDO2dCQUNqRCxNQUFNLGFBQWEsR0FBRyxJQUFJLENBQUMsSUFBSSxDQUFDLEtBQUssRUFBRSxHQUFHLFFBQVEsZUFBZSxDQUFDLENBQUM7Z0JBRW5FLG1CQUFtQjtnQkFDbkIsTUFBTSxPQUFPLEdBQUcsSUFBSSxDQUFDLElBQUksQ0FBQyxLQUFLLEVBQUUsUUFBUSxDQUFDLENBQUM7Z0JBQzNDLElBQUksTUFBTSxVQUFVLENBQUMsT0FBTyxDQUFDLEVBQUUsQ0FBQztvQkFDOUIsTUFBTSxnQ0FBZ0MsQ0FBQyxPQUFPLENBQUMsQ0FBQztvQkFDaEQsSUFBSSxNQUFNLFVBQVUsQ0FBQyxhQUFhLENBQUM7d0JBQUUsY0FBYyxDQUFDLElBQUksQ0FBQyxhQUFhLENBQUMsQ0FBQztvQkFDeEUsY0FBYyxDQUFDLElBQUksQ0FBQyxRQUFRLENBQUMsQ0FBQztvQkFDOUIsU0FBUztnQkFDWCxDQUFDO2dCQUVELE9BQU8sQ0FBQyxHQUFHLENBQUMseUJBQXlCLE9BQU8sQ0FBQyxJQUFJLElBQUksUUFBUSxLQUFLLENBQUMsQ0FBQztnQkFFcEUsMkJBQTJCO2dCQUMzQixNQUFNLFFBQVEsR0FBRyxNQUFNLEVBQUUsQ0FBQyxRQUFRLENBQUMsUUFBUSxFQUFFO29CQUMzQyxRQUFRLEVBQUUsTUFBTTtvQkFDaEIsTUFBTSxFQUFFLFNBQVM7aUJBQ2xCLENBQUMsQ0FBQztnQkFDSCxTQUFTLEVBQUUsY0FBYyxFQUFFLENBQUM7Z0JBQzVCLE1BQU0sSUFBSSxHQUFVLElBQUksQ0FBQyxLQUFLLENBQUMsUUFBUSxDQUFDLENBQUM7Z0JBRXpDLG1FQUFtRTtnQkFDbkUsZ0VBQWdFO2dCQUNoRSxNQUFNLFVBQVUsR0FBRyxJQUFJLENBQUMsSUFBSSxDQUMxQixLQUFLLEVBQ0wsdUJBQXVCLFFBQVEsSUFBSSxPQUFPLENBQUMsR0FBRyxJQUFJLE1BQU0sQ0FBQyxXQUFXLENBQUMsQ0FBQyxDQUFDLENBQUMsUUFBUSxDQUFDLEtBQUssQ0FBQyxFQUFFLENBQzFGLENBQUM7Z0JBQ0YsTUFBTSxFQUFFLENBQUMsS0FBSyxDQUFDLFVBQVUsQ0FBQyxDQUFDO2dCQUMzQixrQkFBa0IsQ0FBQyxHQUFHLENBQUMsVUFBVSxDQUFDLENBQUM7Z0JBQ25DLFNBQVMsRUFBRSxjQUFjLEVBQUUsQ0FBQztnQkFFNUIsaUJBQWlCO2dCQUNqQixNQUFNLFFBQVEsR0FBRyxJQUFJLENBQUMsSUFBSSxDQUFDLFVBQVUsRUFBRSxVQUFVLENBQUMsQ0FBQztnQkFDbkQsTUFBTSxjQUFjLENBQUMsUUFBUSxFQUFFLElBQUksRUFBRSxLQUFLLEVBQUUsY0FBYyxFQUFFLEVBQUU7b0JBQzVELGNBQWM7b0JBQ2QsTUFBTSxTQUFTLEdBQUcsZUFBZSxDQUFDLGNBQWMsQ0FBQyxDQUFDO29CQUNsRCxNQUFNLFdBQVcsQ0FBQyxjQUFjLEVBQUUsU0FBUyxFQUFFLFNBQVMsQ0FBQyxDQUFDO29CQUV4RCxJQUFJLGFBQWEsR0FBRyxNQUFNLENBQUMsZ0JBQWdCLENBQUMsQ0FBQztvQkFDN0MsTUFBTSxNQUFNLEdBQThCLElBQUksR0FBRyxFQUFFLENBQUM7b0JBQ3BELE1BQU0sRUFBRSxHQUFHLE1BQU0sQ0FBQyxJQUFJLENBQUMsR0FBRyxFQUFFLENBQUMsQ0FBQztvQkFFOUIsS0FBSyxNQUFNLEdBQUcsSUFBSSxJQUFJLEVBQUUsQ0FBQzt3QkFDdkIsU0FBUyxFQUFFLGNBQWMsRUFBRSxDQUFDO3dCQUM1QixjQUFjO3dCQUNkLElBQUksS0FBYSxDQUFDO3dCQUNsQixJQUFJLEdBQUcsQ0FBQyxHQUFHLElBQUksR0FBRyxDQUFDLEdBQUcsQ0FBQyxJQUFJLEVBQUUsQ0FBQzs0QkFDNUIsS0FBSyxHQUFHLEdBQUcsQ0FBQyxHQUFHLENBQUMsSUFBSSxDQUFDO3dCQUN2QixDQUFDOzZCQUFNLElBQUksT0FBTyxHQUFHLENBQUMsR0FBRyxLQUFLLFFBQVEsRUFBRSxDQUFDOzRCQUN2QyxLQUFLLEdBQUcsR0FBRyxDQUFDLEdBQUcsQ0FBQzt3QkFDbEIsQ0FBQzs2QkFBTSxJQUFJLEdBQUcsQ0FBQyxHQUFHLEVBQUUsQ0FBQzs0QkFDbkIsS0FBSyxHQUFHLE1BQU0sQ0FBQyxHQUFHLENBQUMsR0FBRyxDQUFDLENBQUM7d0JBQzFCLENBQUM7NkJBQU0sQ0FBQzs0QkFDTiwwQkFBMEI7NEJBQzFCLEtBQUssR0FBRyxNQUFNLENBQUMsV0FBVyxDQUFDLEVBQUUsQ0FBQyxDQUFDLFFBQVEsQ0FBQyxLQUFLLENBQUMsQ0FBQzs0QkFDL0MsR0FBRyxDQUFDLEdBQUcsR0FBRyxFQUFFLElBQUksRUFBRSxLQUFLLEVBQUUsQ0FBQzt3QkFDNUIsQ0FBQzt3QkFFRCxvQkFBb0I7d0JBQ3BCLE1BQU0sU0FBUyxHQUFHLElBQUksQ0FBQyxTQUFTLENBQUMsR0FBRyxDQUFDLENBQUM7d0JBQ3RDLE1BQU0sTUFBTSxHQUFHLE1BQU0sQ0FBQyxJQUFJLENBQUMsS0FBSyxFQUFFLE9BQU8sQ0FBQyxDQUFDO3dCQUMzQyxNQUFNLFFBQVEsR0FBRyxNQUFNLENBQUMsSUFBSSxDQUFDLFNBQVMsQ0FBQyxDQUFDO3dCQUV4QyxNQUFNLE1BQU0sR0FBRyxnQkFBZ0IsQ0FBQyxFQUFFLEVBQUUsTUFBTSxFQUFFLFFBQVEsQ0FBQyxDQUFDO3dCQUN0RCxNQUFNLFdBQVcsQ0FBQyxjQUFjLEVBQUUsTUFBTSxFQUFFLFNBQVMsQ0FBQyxDQUFDO3dCQUVyRCxNQUFNLENBQUMsR0FBRyxDQUFDLEtBQUssRUFBRTs0QkFDaEIsTUFBTSxFQUFFLGFBQWE7NEJBQ3JCLFNBQVMsRUFBRSxNQUFNLENBQUMsTUFBTTs0QkFDeEIsUUFBUSxFQUFFLFFBQVEsQ0FBQyxNQUFNOzRCQUN6QixTQUFTLEVBQUUsRUFBRTt5QkFDZCxDQUFDLENBQUM7d0JBRUgsYUFBYSxJQUFJLE1BQU0sQ0FBQyxNQUFNLENBQUMsTUFBTSxDQUFDLENBQUM7b0JBQ3pDLENBQUM7b0JBRUQsTUFBTSxjQUFjLENBQUMsSUFBSSxFQUFFLENBQUM7b0JBQzVCLFNBQVMsRUFBRSxjQUFjLEVBQUUsQ0FBQztvQkFFNUIsb0JBQW9CO29CQUNwQixNQUFNLFFBQVEsR0FBRyxJQUFJLENBQUMsSUFBSSxDQUFDLFVBQVUsRUFBRSxhQUFhLENBQUMsQ0FBQztvQkFDdEQsTUFBTSxjQUFjLENBQUMsUUFBUSxFQUFFLElBQUksRUFBRSxLQUFLLEVBQUUsY0FBYyxFQUFFLEVBQUU7d0JBQzVELE1BQU0sV0FBVyxDQUFDLGNBQWMsRUFBRSxlQUFlLENBQUMsY0FBYyxDQUFDLEVBQUUsU0FBUyxDQUFDLENBQUM7d0JBQzlFLEtBQUssTUFBTSxDQUFDLEdBQUcsRUFBRSxLQUFLLENBQUMsSUFBSSxNQUFNLEVBQUUsQ0FBQzs0QkFDbEMsU0FBUyxFQUFFLGNBQWMsRUFBRSxDQUFDOzRCQUM1QixNQUFNLFdBQVcsQ0FDZixjQUFjLEVBQ2QsZUFBZSxDQUNiLEdBQUcsRUFDSCxLQUFLLENBQUMsTUFBTSxFQUNaLEtBQUssQ0FBQyxTQUFTLEVBQ2YsS0FBSyxDQUFDLFFBQVEsRUFDZCxLQUFLLENBQUMsU0FBUyxDQUNoQixFQUNELFNBQVMsQ0FDVixDQUFDO3dCQUNKLENBQUM7d0JBQ0QsTUFBTSxjQUFjLENBQUMsSUFBSSxFQUFFLENBQUM7d0JBQzVCLFNBQVMsRUFBRSxjQUFjLEVBQUUsQ0FBQztvQkFDOUIsQ0FBQyxFQUFFLFNBQVMsQ0FBQyxDQUFDO2dCQUNoQixDQUFDLEVBQUUsU0FBUyxDQUFDLENBQUM7Z0JBRWQsaUNBQWlDO2dCQUNqQyxJQUFJLE1BQU0sVUFBVSxDQUFDLGFBQWEsQ0FBQyxFQUFFLENBQUM7b0JBQ3BDLE1BQU0sYUFBYSxHQUFHLElBQUksQ0FBQyxJQUFJLENBQUMsVUFBVSxFQUFFLGNBQWMsQ0FBQyxDQUFDO29CQUM1RCxNQUFNLEVBQUUsQ0FBQyxRQUFRLENBQUMsYUFBYSxFQUFFLGFBQWEsQ0FBQyxDQUFDO29CQUNoRCxNQUFNLFFBQVEsQ0FBQyxhQUFhLEVBQUUsU0FBUyxDQUFDLENBQUM7b0JBQ3pDLFNBQVMsRUFBRSxjQUFjLEVBQUUsQ0FBQztvQkFDNUIsY0FBYyxDQUFDLElBQUksQ0FBQyxhQUFhLENBQUMsQ0FBQztnQkFDckMsQ0FBQztxQkFBTSxDQUFDO29CQUNOLDBCQUEwQjtvQkFDMUIsTUFBTSxhQUFhLEdBQUcsSUFBSSxDQUFDLElBQUksQ0FBQyxVQUFVLEVBQUUsY0FBYyxDQUFDLENBQUM7b0JBQzVELE1BQU0sRUFBRSxDQUFDLFNBQVMsQ0FDaEIsYUFBYSxFQUNiLElBQUksQ0FBQyxTQUFTLENBQUMsQ0FBQyxFQUFFLElBQUksRUFBRSxNQUFNLEVBQUUsR0FBRyxFQUFFLEVBQUUsR0FBRyxFQUFFLENBQUMsRUFBRSxFQUFFLENBQUMsRUFBRSxJQUFJLEVBQUUsQ0FBQyxDQUFDLEVBQzVELEVBQUUsTUFBTSxFQUFFLFNBQVMsRUFBRSxDQUN0QixDQUFDO29CQUNGLE1BQU0sUUFBUSxDQUFDLGFBQWEsRUFBRSxTQUFTLENBQUMsQ0FBQztvQkFDekMsU0FBUyxFQUFFLGNBQWMsRUFBRSxDQUFDO2dCQUM5QixDQUFDO2dCQUVELE1BQU0sZ0NBQWdDLENBQUMsVUFBVSxDQUFDLENBQUM7Z0JBQ25ELE1BQU0sYUFBYSxDQUFDLFVBQVUsRUFBRSxTQUFTLENBQUMsQ0FBQztnQkFDM0MsU0FBUyxFQUFFLGNBQWMsRUFBRSxDQUFDO2dCQUM1QixNQUFNLEVBQUUsQ0FBQyxNQUFNLENBQUMsVUFBVSxFQUFFLE9BQU8sQ0FBQyxDQUFDO2dCQUNyQyxrQkFBa0IsQ0FBQyxNQUFNLENBQUMsVUFBVSxDQUFDLENBQUM7Z0JBQ3RDLE1BQU0sYUFBYSxDQUFDLEtBQUssRUFBRSxTQUFTLENBQUMsQ0FBQztnQkFDdEMsU0FBUyxFQUFFLGNBQWMsRUFBRSxDQUFDO2dCQUM1QixjQUFjLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxDQUFDO2dCQUU5QixPQUFPLENBQUMsR0FBRyxDQUFDLHdCQUF3QixPQUFPLENBQUMsSUFBSSxJQUFJLFFBQVEsS0FBSyxJQUFJLENBQUMsTUFBTSxZQUFZLENBQUMsQ0FBQztZQUM1RixDQUFDO1FBQ0gsQ0FBQztJQUNILENBQUM7SUFBQyxPQUFPLEdBQUcsRUFBRSxDQUFDO1FBQ2IsTUFBTSxhQUFhLEdBQWMsRUFBRSxDQUFDO1FBQ3BDLEtBQUssTUFBTSxHQUFHLElBQUksS0FBSyxDQUFDLElBQUksQ0FBQyxrQkFBa0IsQ0FBQyxDQUFDLE9BQU8sRUFBRSxFQUFFLENBQUM7WUFDM0QsSUFBSSxDQUFDO2dCQUNILE1BQU0sRUFBRSxDQUFDLEVBQUUsQ0FBQyxHQUFHLEVBQUUsRUFBRSxTQUFTLEVBQUUsSUFBSSxFQUFFLEtBQUssRUFBRSxJQUFJLEVBQUUsQ0FBQyxDQUFDO2dCQUNuRCxNQUFNLGFBQWEsQ0FBQyxJQUFJLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUM7WUFDekMsQ0FBQztZQUFDLE9BQU8sWUFBWSxFQUFFLENBQUM7Z0JBQ3RCLGFBQWEsQ0FBQyxJQUFJLENBQUMsWUFBWSxDQUFDLENBQUM7WUFDbkMsQ0FBQztRQUNILENBQUM7UUFDRCxJQUFJLGFBQWEsQ0FBQyxNQUFNLEdBQUcsQ0FBQyxFQUFFLENBQUM7WUFDN0IsTUFBTSxJQUFJLG1DQUFtQyxDQUFDLEdBQUcsRUFBRSxhQUFhLENBQUMsQ0FBQztRQUNwRSxDQUFDO1FBQ0QsTUFBTSxHQUFHLENBQUM7SUFDWixDQUFDO0lBRUQsT0FBTyxjQUFjLENBQUM7QUFDeEIsQ0FBQyJ9
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@push.rocks/smartdb",
-  "version": "5.2.0",
+  "version": "5.2.2",
   "private": false,
   "description": "A MongoDB-compatible embedded database server with wire protocol support, backed by a high-performance Rust engine.",
   "exports": {
@@ -16,8 +16,7 @@
     "@design.estate/dees-element": "^2.2.4",
     "@git.zone/tsbuild": "^4.4.2",
     "@git.zone/tsbundle": "^2.11.4",
-    "@git.zone/tsrun": "^2.0.6",
-    "@git.zone/tsrust": "^1.9.1",
+    "@git.zone/tsrust": "^1.10.0",
     "@git.zone/tstest": "^4.0.0",
     "@types/node": "26.2.0",
     "mongodb": "^7.5.0"
@@ -31,7 +30,6 @@
   ],
   "files": [
     "ts/**/*",
-    "scripts/**/*",
     "ts_web/**/*",
     "dist/**/*",
     "dist_*/**/*",
@@ -75,7 +73,7 @@
     "test:rust": "(cd rust && cargo test)",
     "build": "(tsbundle) && (tsbuild tsfolders) && (tsrust)",
     "buildDocs": "tsdoc",
-    "release:check-builders": "tsrun scripts/release-artifacts.ts check",
-    "release:build-artifacts": "tsrun scripts/release-artifacts.ts build"
+    "release:check-builders": "tsrust matrix check",
+    "release:build-artifacts": "(tsbundle) && (tsbuild tsfolders) && (tsrust matrix build)"
   }
 }

package/readme.hints.md

@@ -1,11 +1,19 @@
 # smartdb hints
 
+## Authoritative File Recovery
+
+- `data.rdb` is the sole runtime source for rebuilding KeyDir. The v1 `keydir.hint` format cannot prove completeness or data-generation identity, so existing regular hint files are tolerated for compatibility and diagnostics but their contents are never loaded as runtime state. New shutdowns, compactions, and v0-to-v1 migrations do not publish hints.
+- `KeyDir::build_from_data_file()` streams every payload through CRC32 in fixed-size chunks before allocating its key and never allocates the declared value length. It may classify only a final prefix shorter than `RECORD_HEADER_SIZE` with matching record-magic bytes as an incomplete tail. A full header with a short payload and every checksum, magic, length, or UTF-8 key failure are corruption and must leave `data.rdb` unchanged.
+- Compaction durably removes any legacy hint and syncs the collection directory before replacing `data.rdb`. This ordering forces SmartDB 5.2.1 and earlier to rebuild after downgrade even when the compacted file happens to have the hint's old recorded size.
+- Startup maintenance may skip a publication-held database. Its first later storage access still performs the authoritative scan and fails unchanged on corruption; never infer validation of held data from listener startup alone.
+- Every cancellation-unsafe maintenance, fencing, auth, or storage worker must own a clone of the retained storage-root capability through its final file/lock cleanup. Provider installation is a finite joined startup sweep; periodic maintenance starts only after listener setup has no remaining fallible step. `close()` joins maintenance, `RustDb::drop()` requests cooperative shutdown, and Unix socket cleanup is bound to the exact device/inode created by `bind()`.
+
 ## Stopped Storage-Root Relocation
 
 - `LocalSmartDb.relocateStoppedStorageRoot()` is the only supported path-changing operation. It uses a dedicated serialized mutating sidecar runner; do not route it through the disposable offline-inspection helper. A bridge whose termination is unconfirmed remains in the static cleanup gate, and no later relocation may spawn until cleanup succeeds.
 - Rust owns the descriptor-relative operation in `rust/crates/rustdb/src/storage_root_relocation.rs`. It never constructs `RustDb`. The fixed journal phases are `preparing`, `prepared`, `exchanged`, `providerPublished`, `sentinelPublished`, and `cleaned`; retries reconcile the exact source-root/destination-absent-or-receipt topology or source-receipt/destination-root topology before continuing.
 - The destination receipt is published with an exclusive rename, then exchanged with the source root using an atomic swap (`RENAME_NOREPLACE`/`RENAME_EXCHANGE` on Linux and `RENAME_EXCL`/`RENAME_SWAP` on macOS). Provider and sentinel replacement also uses checked exchanges, retaining each previous object in the workspace until the replacement is durable and verified. The original root inode ends at the destination and the original receipt inode remains at the source indefinitely. Parent, root, internal, lock, provider, and sentinel identities are revalidated around publication.
-- Eligibility is intentionally narrow: Linux on the existing supported local-filesystem set or macOS on qualified local APFS, exact current owner/provider/sentinel metadata, no auth path digest, and no resource receipt, allocation, retired lock, durable database/transaction workspace, database marker, symlink, unknown entry, or unsafe ownership/mode/link profile. macOS additionally rejects case, Unicode, mount, and ancestry aliases by retained physical identity. Missing metadata is rejected and never initialized by relocation.
+- Eligibility is intentionally narrow: Linux on the existing supported local-filesystem set or macOS on qualified local APFS, exact current owner/provider/sentinel metadata, no auth path digest, and no active resource receipt, allocation, database-mutation workspace, unrelated marker, symlink, unknown entry, or unsafe ownership/mode/link profile. A transaction workspace is eligible only when `rustdb-storage` validates its exact `cleaned` internal journal and matching database transaction marker; workspace debris, unfinished phases, mismatches, and allocation bindings remain unsupported. Empty retired legacy locks are eligible only with the canonical resource-digest/inode name parsed by `resource_fencing`, within its existing bound, and tied to one of those terminal transaction resources. macOS additionally rejects case, Unicode, mount, and ancestry aliases by retained physical identity. Missing metadata is rejected and never initialized by relocation.
 - Both TypeScript startup paths check for `.__rustdb_internal/storage-root-relocation` before `StorageMigrator`. Rust checks immediately after securely opening an existing root and repeats the descriptor-relative check after acquiring the owner lock, before storage initialization. This closes the interval where a relocation can create its workspace and release the lock after startup's first inspection. Occupancy or inspection ambiguity is a startup error; only an exact relocation retry performs recovery.
 - Completed roots retain the SmartDB 5.0.1 provider/sentinel JSON shape, changing only their storage-root path digest. Interrupted Linux state requires 5.1.0 or newer; interrupted macOS state requires a macOS-capable release. Exact replay lasts only while the destination remains current; a later relocation supersedes the old source/destination tuple.
 
@@ -44,4 +52,5 @@
 - `pnpm run test:rust` runs the Rust unit tests; plain `cargo test` in `rust/` works as well.
 - Verify linkage manually with `ldd dist_rust/<binary>_linux_amd64` → "statically linked".
 - Do NOT verify feature presence in release binaries with `strings`/`grep`: on x86_64 release builds LLVM embeds short string literals (≤16 bytes, e.g. BSON doc keys like `volatileOnly`) as instruction immediates, so they are invisible to byte scans while the aarch64 binary shows them in `.rodata`. This produces false "stale binary" alarms. Verify behavior by running the binary (the wire tests spawn the host-arch binary from `dist_rust/`), or disassemble: `objdump -d <bin> | grep <hex-of-literal-LE>`.
-- Release builds use tsrust 1.9 host partitions and strict sidecar assembly. The enabled gitzone test preflight compiles and executes a static Linux arm64 probe through `binfmt` and checks macOS Rosetta before versioning. The post-version build transfers exact HEAD by Git bundle, executes all four target binaries, and assembles separate Linux and macOS inputs. Remote cleanup is limited to the unique sentinel-owned child below `SMARTDB_RELEASE_MACOS_TEMP_ROOT`.
+- Release builds use the tsrust 1.10 native matrix. The enabled gitzone test preflight checks the exact project-local tool, cross-execution, worker identities, toolchains, and remote root before versioning. The post-version build bundles TypeScript, transfers exact HEAD into isolated local and SSH workers, installs the frozen lockfile, executes all four target binaries, retrieves bounded artifact sets, and transactionally publishes the complete provenance matrix. Remote cleanup is limited to the unique owner-marked child below `SMARTDB_RELEASE_MACOS_TEMP_ROOT` and gates publication.
+- Matrix workers use synthetic homes and therefore do not inherit operator-global pnpm policy. Keep the workspace release-age exception pinned to the exact audited `@git.zone/tsrust` version needed by an immediate upstream-to-downstream release; do not disable the age gate or widen the exception to a scope.

package/readme.md

@@ -398,7 +398,7 @@ const released = await server.commitDatabasePublication({
 });
 ```
 
-The held barrier survives restart and blocks wire commands, transactions, startup recovery, compaction, index restoration, and close-time hint writes for that database while unrelated databases remain available. Commit is exact and idempotent. A successful commit removes the raw capability from durable state and retains only protected verification material. Provider/root identity, durable fenced-mode markers, and bounded startup validation make copied, missing, corrupt, or legacy-active publication state fail closed. A higher fencing token compacts resolved older receipts, so long-lived coordinators do not exhaust receipt capacity.
+The held barrier survives restart and blocks wire commands, transactions, startup recovery, compaction, and index restoration for that database while unrelated databases remain available. Commit is exact and idempotent. A successful commit removes the raw capability from durable state and retains only protected verification material. Provider/root identity, durable fenced-mode markers, and bounded startup validation make copied, missing, corrupt, or legacy-active publication state fail closed. A higher fencing token compacts resolved older receipts, so long-lived coordinators do not exhaust receipt capacity.
 
 Durable database publication holds and allocation fencing remain Linux-only. The macOS support described under stopped storage-root relocation does not enable these runtime mutation features.
 
@@ -586,7 +586,7 @@ interface ILocalSmartDbStoppedStorageRootRelocationReceipt {
 
 On success, the destination directory is the original storage-root inode and the source path is an exact mode-0600 regular-file receipt. SmartDB does not remove that source receipt. Data, WAL, hint, and index bytes are not copied or rewritten. `providerRootId`, root device/inode, and every provider/sentinel field are preserved; only `storageRootSha256` changes to the destination's canonical path digest. This leaves a completed destination compatible with SmartDB 5.0.1.
 
-Relocation deliberately supports only the plain, unbound `LocalSmartDb` topology. The existing owner lock, `provider-identity.json`, and resource-fencing sentinel must all be present; the operation never creates missing ownership metadata. A provider identity containing `authUsersPathSha256` is unsupported. Any durable fence receipt or capability, allocation state, retired fence lock, database mutation/transaction journal, allocation/publication marker, symlink, unknown entry, unsafe mode/owner/link count, exhausted scan bound, active owner, or ambiguous identity fails closed.
+Relocation deliberately supports only the plain, unbound `LocalSmartDb` topology. The existing owner lock, `provider-identity.json`, and resource-fencing sentinel must all be present; the operation never creates missing ownership metadata. A provider identity containing `authUsersPathSha256` is unsupported. One narrow terminal transaction topology is also eligible: each retained internal transaction journal must be in the exact `cleaned` phase, contain no workspace debris or allocation binding, and match the exact transaction-publication marker in its database. Canonically named, empty retired legacy fence locks are accepted only when their resource digest belongs to one of those terminal transactions and their encoded inode matches the retained file. These terminal artifacts move unchanged with the root and continue the existing transaction token sequence after restart. Any unfinished or mismatched transaction, durable database-mutation journal, active fence receipt or capability, allocation state, unrelated or malformed retired lock, allocation/general publication marker, symlink, unknown entry, unsafe mode/owner/link count, exhausted scan bound, active owner, or ambiguous identity fails closed.
 
 The operation journals phases `preparing`, `prepared`, `exchanged`, `providerPublished`, `sentinelPublished`, and `cleaned`. If a call returns `RECOVERY_REQUIRED`, stop all startup attempts and retry the exact same normalized source path, destination path, and `relocationId` with the same SmartDB version that began the relocation or a newer version. Startup rejects any relocation-workspace occupancy and does not mutate or recover it. Do not delete, rename, edit, or replace either path between attempts. Linux relocation state created by SmartDB 5.1.0 remains recoverable by 5.1.0 or newer; macOS recovery requires a macOS-capable release. A completed root remains 5.0.1-compatible.
 
@@ -682,7 +682,7 @@ const namespaces = await LocalSmartDb.inspectOfflinePhysicalNamespaces({
 
 The result is exactly `{ schemaVersion: 1, databases: Array<{ name, collections }> }`. Databases and each database's collections are sorted by physical name, empty database directories are retained, and no documents, index definitions, record identifiers, or values cross the management boundary.
 
-The accepted root must contain the current `.__rustdb_internal/storage-owner.lock`; legacy roots without that lock are rejected. The sidecar takes the shared owner lock, so an active engine causes the call to fail. Every reported collection must have the canonical complete profile of regular `data.rdb`, `wal.rdb`, and `indexes.json` files. A regular `keydir.hint` is optional and is treated only as an allowed cache file. Missing canonical files, unexpected collection entries, malformed index metadata, invalid data or WAL records, symlinks, cross-filesystem traversal, resource-limit exhaustion, and changes observed during inspection fail the complete operation. No partial result is returned and the storage tree is not mutated.
+The accepted root must contain the current `.__rustdb_internal/storage-owner.lock`; legacy roots without that lock are rejected. The sidecar takes the shared owner lock, so an active engine causes the call to fail. Every reported collection must have the canonical complete profile of regular `data.rdb`, `wal.rdb`, and `indexes.json` files. A regular `keydir.hint` is optional and is treated only as an allowed legacy cache file; runtime recovery ignores its contents. Missing canonical files, unexpected collection entries, malformed index metadata, invalid data or WAL records, symlinks, cross-filesystem traversal, resource-limit exhaustion, and changes observed during inspection fail the complete operation. No partial result is returned and the storage tree is not mutated.
 
 Inspection performs two full bounded passes and returns only if their namespace results and retained filesystem observations agree. The entry, database, collection, index, file-byte, and record limits are enforced independently on each pass, so total validation work is at most twice the corresponding caller cap. The result-size cap applies to the single serialized result. This is a contract for the current owner-locked canonical SmartDB file-storage profile, not a claim of compatibility with arbitrary MongoDB layouts, legacy SmartDB roots, or unspecified future storage formats.
 
@@ -1015,7 +1015,7 @@ Cross-compiled for `linux_amd64`, `linux_arm64`, `macos_amd64`, and `macos_arm64
 
 ### Multi-host release artifacts
 
-Normal `tsrust` builds select only the current host's partition from `targetsByHost`. Releases coordinate both partitions after the version commit exists, then publish only after every exact-commit binary has executed and passed strict provenance assembly.
+Normal `tsrust` builds select only the current host's partition from `targetsByHost`. Releases use `tsrust matrix` to coordinate both partitions after the version commit exists, then publish only after every exact-commit binary has executed and passed strict provenance assembly.
 
 The release coordinator must be Linux amd64 with `aarch64-linux-gnu-gcc` and a registered Linux arm64 `binfmt` interpreter. Set these environment variables to an authorized Apple Silicon builder with Rosetta and a dedicated temporary root:
 
@@ -1024,14 +1024,14 @@ export SMARTDB_RELEASE_MACOS_SSH="release-user@mac-builder.example"
 export SMARTDB_RELEASE_MACOS_TEMP_ROOT="/absolute/dedicated/smartdb-release"
 ```
 
-`gitzone release` first runs `pnpm run release:check-builders`, before creating a version commit or tag. It compiles and executes a static arm64 probe and rejects missing cross-toolchain or `binfmt` execution, an unsuitable macOS host, missing Rosetta, missing tools, or an unwritable remote temporary root. The release build then:
+`gitzone release` first runs `pnpm run release:check-builders`, before creating a version commit or tag. It verifies the project-local tsrust version, compiles and executes the required architecture probes, and rejects missing cross-toolchains or emulation, an unsuitable macOS host, missing tools, or an unsafe remote temporary root. The release build then:
 
-1. Builds and executes the Linux amd64 and arm64 binaries.
-2. Transfers a Git bundle of the unpushed release commit into a unique sentinel-owned macOS workspace.
-3. Builds both Darwin targets from the frozen lockfile, verifies their Cargo bytes and signatures, and executes both architectures.
-4. Copies each host output into separate `.nogit` inputs and runs strict `tsrust assemble` into `dist_rust/`.
+1. Builds the TypeScript package and debug UI bundle from the version commit.
+2. Streams an exact Git bundle into isolated local Linux and remote macOS worker workspaces and installs each frozen lockfile.
+3. Builds and executes the Linux amd64, Linux arm64, macOS arm64, and macOS amd64 binaries on their assigned workers.
+4. Retrieves bounded artifact sets and transactionally publishes the complete provenance-checked matrix into `dist_rust/`.
 
-No host address or path is stored in the repository. A failed run retains its unique diagnostic directories and prints their paths. Successful cleanup can remove only the generated child whose path and random ownership sentinel both match.
+No host address or path is stored in the repository. A failed run retains its unique local diagnostics and owner-marked remote diagnostics, then prints their paths. Remote cleanup is an owner-validated publication gate, and an incomplete matrix never replaces the prior `dist_rust/`.
 
 ### Storage Engine Reliability 🔒
 
@@ -1040,8 +1040,8 @@ The Bitcask-style file storage engine includes several reliability features:
 - **Write-ahead log (WAL)** — every write is logged before being applied, with crash recovery on restart; once committed entries grow past 16 MiB the WAL is checkpointed and truncated at runtime, so `wal.rdb` does not grow unbounded
 - **CRC32 checksums** — every record is integrity-checked on read
 - **Automatic compaction** — dead records are reclaimed when they exceed 50% of file size, runs on startup and after every write
-- **Hint file staleness detection** — the hint file records the data file size at write time; if data.rdb changed since (e.g. crash after a delete), the engine falls back to a full scan to ensure tombstones are not lost
-- **Torn-tail repair** — startup scans `data.rdb` to the last valid record, truncates invalid trailing bytes, and preserves all verified records after interrupted writes
+- **Authoritative streamed recovery** — collection initialization rebuilds KeyDir from the complete `data.rdb` record stream, verifies each CRC without allocating the declared value size, and never trusts legacy hint files as runtime state; publication-held databases defer this work until first access after release
+- **Conservative torn-header repair** — collection initialization truncates only a final sequence shorter than the fixed record header whose available record-magic bytes match; checksum, magic, length, UTF-8 key, and full-header short-payload failures stop initialization without changing `data.rdb`
 - **Stale socket cleanup** — orphaned `/tmp/smartdb-*.sock` files from crashed instances are automatically cleaned up on startup
 
 ### Data Integrity CLI 🔍
@@ -1058,14 +1058,14 @@ The Rust binary includes an offline integrity checker:
 # Database: mydb
 #   Collection: users
 #     Header:       OK
-#     Records:      1,234 (1,200 live, 34 tombstones)
-#     Data size:    2.1 MB
+#     Records:      1234 (1200 live, 34 tombstones)
+#     Data size:    2097152 bytes
 #     Duplicates:   0
 #     CRC errors:   0
-#     Hint file:    OK
+#     Hint file:    legacy cache (ignored)
 ```
 
-Checks file headers, record CRC32 checksums, duplicate `_id` entries, and hint file consistency. Exit code 1 if any errors are found.
+Checks file headers, record CRC32 checksums, and duplicate `_id` entries. Existing hint files are reported as ignored legacy caches and do not determine data integrity. Exit code 1 if any authoritative-data errors are found.
 
 ---
 

package/readme.plan.md

@@ -3,11 +3,22 @@
 Status: canonical direction, approved 2026-08-17. Reread before starting engine or
 managed-service work.
 
-Baseline: `@push.rocks/smartdb` 5.0.1. SmartDB is a Rust database engine with a
+Baseline: `@push.rocks/smartdb` 5.2.1. SmartDB is a Rust database engine with a
 TypeScript lifecycle facade, a MongoDB wire-protocol command surface, file and
 memory storage, authentication, transactions, resource fencing, and official
 MongoDB Node.js driver integration.
 
+Current execution status:
+
+- the legal and provenance gate has not passed
+- Phase 0 and the Phase 1 gate have not passed
+- 5.x maintenance now treats `data.rdb` as authoritative, ignores unverifiable
+  legacy hint contents, streams CRC validation, and repairs only an incomplete
+  final record-header prefix
+- strict runtime WAL recovery, ambiguous point-write reconciliation, crash-safe
+  ordinary DDL, debug-server security, and general crash/soak qualification remain
+  separate required slices
+
 ## Product objective
 
 Build SmartDB into a commercially operated, MongoDB-driver-compatible managed

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@push.rocks/smartdb',
-  version: '5.2.0',
+  version: '5.2.2',
   description: 'A MongoDB-compatible embedded database server with wire protocol support, backed by a high-performance Rust engine.'
 }

package/ts/ts_migration/migrators/v0_to_v1.ts

@@ -13,7 +13,6 @@ const FILE_MAGIC = Buffer.from('SMARTDB\0', 'ascii');
 const FORMAT_VERSION = 1;
 /** File type tags */
 const FILE_TYPE_DATA = 1;
-const FILE_TYPE_HINT = 3;
 /** File header total size */
 const FILE_HEADER_SIZE = 64;
 /** Per-record magic */
@@ -63,19 +62,6 @@ function encodeDataRecord(timestamp: bigint, key: Buffer, value: Buffer): Buffer
   return buf;
 }
 
-function encodeHintEntry(key: string, offset: bigint, recordLen: number, valueLen: number, timestamp: bigint): Buffer {
-  const keyBuf = Buffer.from(key, 'utf-8');
-  const buf = Buffer.alloc(4 + keyBuf.length + 8 + 4 + 4 + 8);
-  let pos = 0;
-  buf.writeUInt32LE(keyBuf.length, pos); pos += 4;
-  keyBuf.copy(buf, pos); pos += keyBuf.length;
-  buf.writeBigUInt64LE(offset, pos); pos += 8;
-  buf.writeUInt32LE(recordLen, pos); pos += 4;
-  buf.writeUInt32LE(valueLen, pos); pos += 4;
-  buf.writeBigUInt64LE(timestamp, pos);
-  return buf;
-}
-
 // ---------------------------------------------------------------------------
 // CRC32 (matching crc32fast in Rust)
 // ---------------------------------------------------------------------------
@@ -214,7 +200,7 @@ const syncFile = async (filePathArg: string, signalArg?: AbortSignal): Promise<v
 const assertPublishedMigrationComplete = async (
   collectionDirectoryArg: string,
 ): Promise<void> => {
-  for (const fileName of ['data.rdb', 'keydir.hint', 'indexes.json']) {
+  for (const fileName of ['data.rdb', 'indexes.json']) {
     let fileStat: Awaited<ReturnType<typeof fs.lstat>>;
     try {
       fileStat = await fs.lstat(path.join(collectionDirectoryArg, fileName));
@@ -239,13 +225,6 @@ const assertPublishedMigrationComplete = async (
 // Migration: v0 (JSON) → v1 (Bitcask binary)
 // ---------------------------------------------------------------------------
 
-interface IKeyDirEntry {
-  offset: bigint;
-  recordLen: number;
-  valueLen: number;
-  timestamp: bigint;
-}
-
 /**
  * Migrate a storage directory from v0 (JSON-per-collection) to v1 (Bitcask binary).
  *
@@ -320,8 +299,6 @@ export async function migrateV0ToV1(
           const headerBuf = writeFileHeader(FILE_TYPE_DATA);
           await writeBuffer(dataFileHandle, headerBuf, signalArg);
 
-          let currentOffset = BigInt(FILE_HEADER_SIZE);
-          const keydir: Map<string, IKeyDirEntry> = new Map();
           const ts = BigInt(Date.now());
 
           for (const doc of docs) {
@@ -348,40 +325,10 @@ export async function migrateV0ToV1(
             const record = encodeDataRecord(ts, keyBuf, valueBuf);
             await writeBuffer(dataFileHandle, record, signalArg);
 
-            keydir.set(idHex, {
-              offset: currentOffset,
-              recordLen: record.length,
-              valueLen: valueBuf.length,
-              timestamp: ts,
-            });
-
-            currentOffset += BigInt(record.length);
           }
 
           await dataFileHandle.sync();
           signalArg?.throwIfAborted();
-
-          // Write keydir.hint
-          const hintPath = path.join(stagingDir, 'keydir.hint');
-          await withFileHandle(hintPath, 'wx', async (hintFileHandle) => {
-            await writeBuffer(hintFileHandle, writeFileHeader(FILE_TYPE_HINT), signalArg);
-            for (const [key, entry] of keydir) {
-              signalArg?.throwIfAborted();
-              await writeBuffer(
-                hintFileHandle,
-                encodeHintEntry(
-                  key,
-                  entry.offset,
-                  entry.recordLen,
-                  entry.valueLen,
-                  entry.timestamp,
-                ),
-                signalArg,
-              );
-            }
-            await hintFileHandle.sync();
-            signalArg?.throwIfAborted();
-          }, signalArg);
         }, signalArg);
 
         // Copy indexes.json if it exists

package/scripts/release-artifacts.ts

@@ -1,626 +0,0 @@
-import * as childProcess from 'node:child_process';
-import * as crypto from 'node:crypto';
-import * as fs from 'node:fs';
-import * as path from 'node:path';
-
-type TReleaseArtifactMode = 'check' | 'build';
-
-interface IReleaseArtifactEnvironment {
-  macosSsh: string;
-  macosTempRoot: string;
-}
-
-const provenanceSuffix = '.tsrust-build.json';
-const defaultCommandTimeoutMs = 60 * 60 * 1000;
-const capabilityCommandTimeoutMs = 5 * 60 * 1000;
-const forceKillDelayMs = 10 * 1000;
-const maximumCapturedOutputBytes = 16 * 1024 * 1024;
-const sshConnectionArgs = [
-  '-o',
-  'ServerAliveInterval=15',
-  '-o',
-  'ServerAliveCountMax=2',
-];
-
-type TForwardedSignal = 'SIGINT' | 'SIGTERM' | 'SIGHUP';
-
-const shellQuote = (valueArg: string): string => `'${valueArg.replace(/'/g, `'"'"'`)}'`;
-
-const executeCommand = (
-  commandArg: string,
-  argsArg: string[],
-  optionsArg: {
-    cwd?: string;
-    capture?: boolean;
-    timeoutMs?: number;
-    heartbeatStdin?: boolean;
-  } = {},
-): Promise<string> =>
-  new Promise((resolveArg, rejectArg) => {
-    const capture = optionsArg.capture === true;
-    const child = childProcess.spawn(commandArg, argsArg, {
-      cwd: optionsArg.cwd || process.cwd(),
-      env: process.env,
-      stdio: capture
-        ? ['ignore', 'pipe', 'pipe']
-        : optionsArg.heartbeatStdin
-          ? ['pipe', 'inherit', 'inherit']
-          : 'inherit',
-      detached: true,
-    });
-    let stdout = '';
-    let stderr = '';
-    let capturedOutputBytes = 0;
-    let timedOut = false;
-    let outputLimitExceeded = false;
-    let forwardedSignal: TForwardedSignal | undefined;
-    let forwardedSignalCount = 0;
-    let settled = false;
-    let forceKillTimer: NodeJS.Timeout | undefined;
-    let heartbeatTimer: NodeJS.Timeout | undefined;
-
-    const killProcessGroup = (signalArg: NodeJS.Signals): void => {
-      if (!child.pid) return;
-      try {
-        process.kill(-child.pid, signalArg);
-      } catch {
-        try {
-          child.kill(signalArg);
-        } catch {
-          // The process may already have exited.
-        }
-      }
-    };
-
-    const terminateProcessGroup = (signalArg: NodeJS.Signals): void => {
-      killProcessGroup(signalArg);
-      if (!forceKillTimer) {
-        forceKillTimer = setTimeout(
-          () => killProcessGroup('SIGKILL'),
-          forceKillDelayMs,
-        );
-      }
-    };
-
-    const processGroupExists = (): boolean => {
-      if (!child.pid) return false;
-      try {
-        process.kill(-child.pid, 0);
-        return true;
-      } catch (error) {
-        if ((error as NodeJS.ErrnoException).code === 'ESRCH') return false;
-        throw error;
-      }
-    };
-
-    const waitForProcessGroupExit = async (timeoutMsArg: number): Promise<boolean> => {
-      const deadline = Date.now() + timeoutMsArg;
-      while (processGroupExists() && Date.now() < deadline) {
-        await new Promise((resolveArg) => setTimeout(resolveArg, 100));
-      }
-      return !processGroupExists();
-    };
-
-    const ensureProcessGroupStopped = async (): Promise<void> => {
-      if (!processGroupExists()) return;
-      terminateProcessGroup('SIGTERM');
-      if (!(await waitForProcessGroupExit(forceKillDelayMs + 1000))) {
-        killProcessGroup('SIGKILL');
-        if (!(await waitForProcessGroupExit(2000))) {
-          throw new Error(`${commandArg} left a live descendant process group`);
-        }
-      }
-    };
-
-    const signalHandlers = new Map<TForwardedSignal, () => void>();
-    for (const signal of ['SIGINT', 'SIGTERM', 'SIGHUP'] as TForwardedSignal[]) {
-      const handler = (): void => {
-        forwardedSignal = signal;
-        forwardedSignalCount += 1;
-        if (forwardedSignalCount === 1) terminateProcessGroup(signal);
-        else killProcessGroup('SIGKILL');
-      };
-      signalHandlers.set(signal, handler);
-      process.on(signal, handler);
-    }
-
-    const timeout = setTimeout(() => {
-      timedOut = true;
-      terminateProcessGroup('SIGTERM');
-    }, optionsArg.timeoutMs || defaultCommandTimeoutMs);
-
-    if (optionsArg.heartbeatStdin) {
-      child.stdin?.on('error', () => {
-        // Process close handles a lost stdin channel.
-      });
-      const sendHeartbeat = (): void => {
-        if (!child.stdin?.destroyed) child.stdin?.write('heartbeat\n');
-      };
-      sendHeartbeat();
-      heartbeatTimer = setInterval(sendHeartbeat, 1000);
-    }
-
-    const cleanup = (): void => {
-      clearTimeout(timeout);
-      if (forceKillTimer) clearTimeout(forceKillTimer);
-      if (heartbeatTimer) clearInterval(heartbeatTimer);
-      child.stdin?.end();
-      for (const [signal, handler] of signalHandlers) {
-        process.off(signal, handler);
-      }
-    };
-
-    const captureChunk = (targetArg: 'stdout' | 'stderr', chunkArg: Buffer): void => {
-      capturedOutputBytes += chunkArg.length;
-      if (capturedOutputBytes > maximumCapturedOutputBytes) {
-        outputLimitExceeded = true;
-        terminateProcessGroup('SIGTERM');
-        return;
-      }
-      if (targetArg === 'stdout') stdout += chunkArg.toString('utf8');
-      else stderr += chunkArg.toString('utf8');
-    };
-    child.stdout?.on('data', (chunkArg: Buffer) => captureChunk('stdout', chunkArg));
-    child.stderr?.on('data', (chunkArg: Buffer) => captureChunk('stderr', chunkArg));
-
-    child.once('error', (errorArg) => {
-      if (settled) return;
-      settled = true;
-      cleanup();
-      rejectArg(errorArg);
-    });
-    child.once('close', (codeArg, signalArg) => {
-      if (settled) return;
-      settled = true;
-      void (async () => {
-        try {
-          await ensureProcessGroupStopped();
-          cleanup();
-          if (codeArg !== 0 && capture) {
-            if (stdout) process.stdout.write(stdout);
-            if (stderr) process.stderr.write(stderr);
-          }
-          if (timedOut) {
-            rejectArg(new Error(`${commandArg} exceeded its command timeout`));
-          } else if (outputLimitExceeded) {
-            rejectArg(new Error(`${commandArg} exceeded the captured output limit`));
-          } else if (forwardedSignal) {
-            rejectArg(new Error(`${commandArg} was interrupted by ${forwardedSignal}`));
-          } else if (codeArg !== 0) {
-            rejectArg(
-              new Error(
-                `${commandArg} exited with ${signalArg ? `signal ${signalArg}` : `status ${codeArg}`}`,
-              ),
-            );
-          } else {
-            resolveArg(stdout.trim());
-          }
-        } catch (error) {
-          cleanup();
-          rejectArg(error);
-        }
-      })();
-    });
-  });
-
-const runCommand = async (
-  commandArg: string,
-  argsArg: string[],
-  cwdArg: string = process.cwd(),
-  timeoutMsArg: number = defaultCommandTimeoutMs,
-  heartbeatStdinArg: boolean = false,
-): Promise<void> => {
-  await executeCommand(commandArg, argsArg, {
-    cwd: cwdArg,
-    timeoutMs: timeoutMsArg,
-    heartbeatStdin: heartbeatStdinArg,
-  });
-};
-
-const captureCommand = async (
-  commandArg: string,
-  argsArg: string[],
-  cwdArg: string = process.cwd(),
-): Promise<string> => {
-  return executeCommand(commandArg, argsArg, {
-    cwd: cwdArg,
-    capture: true,
-    timeoutMs: capabilityCommandTimeoutMs,
-  });
-};
-
-const loadEnvironment = (): IReleaseArtifactEnvironment => {
-  const macosSsh = process.env.SMARTDB_RELEASE_MACOS_SSH?.trim() || '';
-  const macosTempRoot = (process.env.SMARTDB_RELEASE_MACOS_TEMP_ROOT?.trim() || '').replace(
-    /\/+$/,
-    '',
-  );
-
-  if (!/^[A-Za-z0-9._-]+@[A-Za-z0-9.-]+$/.test(macosSsh)) {
-    throw new Error(
-      'SMARTDB_RELEASE_MACOS_SSH must use the user@host form without SSH options',
-    );
-  }
-  if (
-    !/^\/[A-Za-z0-9._/-]+$/.test(macosTempRoot) ||
-    path.posix.normalize(macosTempRoot) !== macosTempRoot ||
-    macosTempRoot.split('/').filter(Boolean).length < 2
-  ) {
-    throw new Error(
-      'SMARTDB_RELEASE_MACOS_TEMP_ROOT must be a non-root absolute path without spaces',
-    );
-  }
-  return { macosSsh, macosTempRoot };
-};
-
-const runRemoteLoginScript = async (
-  environmentArg: IReleaseArtifactEnvironment,
-  scriptArg: string,
-  timeoutMsArg: number = defaultCommandTimeoutMs,
-): Promise<void> => {
-  const ownedRemoteScript = [
-    'set -u',
-    'exec 3<&0',
-    'child_pid=',
-    'watchdog_pid=',
-    'kill_tree() {',
-    '  local parent_pid children child_pid_to_kill',
-    '  parent_pid="$1"',
-    '  kill -STOP "$parent_pid" 2>/dev/null || return 0',
-    '  children="$(/usr/bin/pgrep -P "$parent_pid" 2>/dev/null || true)"',
-    '  for child_pid_to_kill in $children; do kill_tree "$child_pid_to_kill"; done',
-    '  kill -KILL "$parent_pid" 2>/dev/null || true',
-    '}',
-    'terminate_owned() { test -z "$child_pid" || kill_tree "$child_pid"; test -z "$watchdog_pid" || kill -KILL "$watchdog_pid" 2>/dev/null || true; }',
-    'watch_channel() { while IFS= read -r -t 45 ignored_line; do :; done; test -z "$child_pid" || kill_tree "$child_pid"; }',
-    'trap terminate_owned EXIT HUP INT TERM',
-    `/bin/zsh -lc ${shellQuote(scriptArg)} </dev/null &`,
-    'child_pid=$!',
-    'watch_channel <&3 &',
-    'watchdog_pid=$!',
-    'wait "$child_pid"',
-    'exit_status=$?',
-    'child_pid=',
-    'kill -KILL "$watchdog_pid" 2>/dev/null || true',
-    'wait "$watchdog_pid" 2>/dev/null || true',
-    'watchdog_pid=',
-    'exec 3<&-',
-    'trap - EXIT HUP INT TERM',
-    'exit "$exit_status"',
-  ].join('\n');
-  await runCommand(
-    'ssh',
-    [
-      ...sshConnectionArgs,
-      environmentArg.macosSsh,
-      `zsh -lic ${shellQuote(`/bin/sh -c ${shellQuote(ownedRemoteScript)}`)}`,
-    ],
-    process.cwd(),
-    timeoutMsArg,
-    true,
-  );
-};
-
-const checkBuilders = async (
-  environmentArg: IReleaseArtifactEnvironment,
-): Promise<void> => {
-  if (process.platform !== 'linux' || process.arch !== 'x64') {
-    throw new Error('SmartDB release artifact assembly requires a Linux amd64 coordinator');
-  }
-
-  await runCommand('git', ['--version'], process.cwd(), capabilityCommandTimeoutMs);
-  await runCommand('pnpm', ['--version'], process.cwd(), capabilityCommandTimeoutMs);
-  await captureCommand('/bin/sh', ['-c', 'command -v scp >/dev/null']);
-  const linuxProbeParent = path.join(process.cwd(), '.nogit', 'smartdb-release-probe');
-  fs.mkdirSync(linuxProbeParent, { recursive: true, mode: 0o700 });
-  const linuxProbeDirectory = fs.mkdtempSync(path.join(linuxProbeParent, 'arm64-'));
-  try {
-    const sourcePath = path.join(linuxProbeDirectory, 'probe.c');
-    const binaryPath = path.join(linuxProbeDirectory, 'probe');
-    fs.writeFileSync(sourcePath, 'int main(void) { return 0; }\n');
-    await runCommand(
-      'aarch64-linux-gnu-gcc',
-      ['-static', '-O2', sourcePath, '-o', binaryPath],
-      process.cwd(),
-      capabilityCommandTimeoutMs,
-    );
-    await runCommand(binaryPath, [], process.cwd(), capabilityCommandTimeoutMs);
-  } finally {
-    fs.rmSync(linuxProbeDirectory, { recursive: true, force: true });
-  }
-
-  const probeToken = crypto.randomUUID();
-  const probePath = `${environmentArg.macosTempRoot}/smartdb-release-check.${probeToken}`;
-  const remoteCheckScript = [
-    'set -eu',
-    'test "$(uname -s)" = "Darwin"',
-    'test "$(uname -m)" = "arm64"',
-    'command -v git >/dev/null',
-    'command -v pnpm >/dev/null',
-    'command -v codesign >/dev/null',
-    'command -v cmp >/dev/null',
-    `root=${shellQuote(environmentArg.macosTempRoot)}`,
-    `probe=${shellQuote(probePath)}`,
-    `test "$probe" = "$root/smartdb-release-check.${probeToken}"`,
-    'mkdir -p "$root"',
-    'test "$(cd "$root" && pwd -P)" = "$root"',
-    'created=0',
-    `cleanup_probe() { if [ "$created" = 1 ]; then test ! -f "$probe/.smartdb-release-owner" || test "$(cat "$probe/.smartdb-release-owner")" = ${shellQuote(probeToken)} || return; rm -f "$probe/.smartdb-release-owner"; rmdir "$probe" 2>/dev/null || true; fi; }`,
-    'trap cleanup_probe EXIT HUP INT TERM',
-    'mkdir -m 700 "$probe"',
-    'created=1',
-    `printf '%s\\n' ${shellQuote(probeToken)} > "$probe/.smartdb-release-owner"`,
-    'rm -f "$probe/.smartdb-release-owner"',
-    'rmdir "$probe"',
-    'trap - EXIT HUP INT TERM',
-    '/usr/bin/arch -x86_64 /usr/bin/true',
-  ].join('\n');
-  await runRemoteLoginScript(
-    environmentArg,
-    remoteCheckScript,
-    capabilityCommandTimeoutMs,
-  );
-  console.log('All SmartDB release builders can execute their assigned architectures.');
-};
-
-const assertArtifactSet = (directoryArg: string, targetsArg: string[]): void => {
-  const expectedNames = targetsArg.flatMap((targetArg) => [
-    `rustdb_${targetArg}`,
-    `rustdb_${targetArg}${provenanceSuffix}`,
-  ]);
-  const actualNames = fs.readdirSync(directoryArg).sort();
-  if (JSON.stringify(actualNames) !== JSON.stringify(expectedNames.sort())) {
-    throw new Error(
-      `Unexpected release artifact set in ${directoryArg}: ${actualNames.join(', ')}`,
-    );
-  }
-  for (const target of targetsArg) {
-    const binaryPath = path.join(directoryArg, `rustdb_${target}`);
-    const stat = fs.lstatSync(binaryPath);
-    if (!stat.isFile() || (stat.mode & 0o111) === 0) {
-      throw new Error(`Release artifact is not an executable regular file: ${binaryPath}`);
-    }
-  }
-};
-
-const remoteWorkspacePath = (
-  environmentArg: IReleaseArtifactEnvironment,
-  gitCommitArg: string,
-  ownerTokenArg: string,
-): string =>
-  `${environmentArg.macosTempRoot}/smartdb-release.${gitCommitArg}.${ownerTokenArg}`;
-
-const assertOwnedRemoteWorkspacePath = (
-  environmentArg: IReleaseArtifactEnvironment,
-  remoteDirectoryArg: string,
-  gitCommitArg: string,
-  ownerTokenArg: string,
-): void => {
-  const expectedDirectory = remoteWorkspacePath(
-    environmentArg,
-    gitCommitArg,
-    ownerTokenArg,
-  );
-  if (
-    remoteDirectoryArg !== expectedDirectory ||
-    path.posix.dirname(remoteDirectoryArg) !== environmentArg.macosTempRoot ||
-    path.posix.normalize(remoteDirectoryArg) !== remoteDirectoryArg
-  ) {
-    throw new Error(`Refusing unsafe macOS release workspace path: ${remoteDirectoryArg}`);
-  }
-};
-
-const createRemoteWorkspace = async (
-  environmentArg: IReleaseArtifactEnvironment,
-  remoteDirectoryArg: string,
-  gitCommitArg: string,
-  ownerTokenArg: string,
-): Promise<void> => {
-  assertOwnedRemoteWorkspacePath(
-    environmentArg,
-    remoteDirectoryArg,
-    gitCommitArg,
-    ownerTokenArg,
-  );
-  const createScript = [
-    'set -eu',
-    `root=${shellQuote(environmentArg.macosTempRoot)}`,
-    `directory=${shellQuote(remoteDirectoryArg)}`,
-    `test "$directory" = "$root/smartdb-release.${gitCommitArg}.${ownerTokenArg}"`,
-    'mkdir -p "$root"',
-    'test "$(cd "$root" && pwd -P)" = "$root"',
-    'created=0',
-    `cleanup_unowned() { if [ "$created" = 1 ]; then test ! -f "$directory/.smartdb-release-owner" || test "$(cat "$directory/.smartdb-release-owner")" = ${shellQuote(ownerTokenArg)} || return; rm -f "$directory/.smartdb-release-owner"; rmdir "$directory" 2>/dev/null || true; fi; }`,
-    'trap cleanup_unowned EXIT HUP INT TERM',
-    'mkdir -m 700 "$directory"',
-    'created=1',
-    `printf '%s\\n' ${shellQuote(ownerTokenArg)} > "$directory/.smartdb-release-owner"`,
-    'trap - EXIT HUP INT TERM',
-  ].join('\n');
-  await runCommand(
-    'ssh',
-    [...sshConnectionArgs, environmentArg.macosSsh, createScript],
-    process.cwd(),
-    capabilityCommandTimeoutMs,
-  );
-};
-
-const cleanupRemoteWorkspace = async (
-  environmentArg: IReleaseArtifactEnvironment,
-  remoteDirectoryArg: string,
-  gitCommitArg: string,
-  ownerTokenArg: string,
-): Promise<void> => {
-  assertOwnedRemoteWorkspacePath(
-    environmentArg,
-    remoteDirectoryArg,
-    gitCommitArg,
-    ownerTokenArg,
-  );
-  const cleanupScript = [
-    'set -eu',
-    `root=${shellQuote(environmentArg.macosTempRoot)}`,
-    `directory=${shellQuote(remoteDirectoryArg)}`,
-    `test "$directory" = "$root/smartdb-release.${gitCommitArg}.${ownerTokenArg}"`,
-    'test "$(cd "$root" && pwd -P)" = "$root"',
-    'test -f "$directory/.smartdb-release-owner"',
-    `test "$(cat "$directory/.smartdb-release-owner")" = ${shellQuote(ownerTokenArg)}`,
-    'rm -rf "$directory"',
-  ].join('\n');
-  await runCommand('ssh', [...sshConnectionArgs, environmentArg.macosSsh, cleanupScript]);
-};
-
-const buildArtifacts = async (
-  environmentArg: IReleaseArtifactEnvironment,
-): Promise<void> => {
-  await checkBuilders(environmentArg);
-
-  const workspace = process.cwd();
-  const branch = await captureCommand('git', ['branch', '--show-current'], workspace);
-  const gitCommit = await captureCommand('git', ['rev-parse', 'HEAD'], workspace);
-  const gitStatus = await captureCommand(
-    'git',
-    ['status', '--porcelain=v1', '--untracked-files=all'],
-    workspace,
-  );
-  const packageJson = JSON.parse(
-    fs.readFileSync(path.join(workspace, 'package.json'), 'utf8'),
-  ) as { version?: string };
-  const expectedTag = `v${packageJson.version || ''}`;
-  const tagsAtHead = (
-    await captureCommand('git', ['tag', '--points-at', 'HEAD'], workspace)
-  ).split(/\r?\n/);
-  if (branch !== 'main') throw new Error('SmartDB releases must be built from main');
-  if (gitStatus) throw new Error('SmartDB release artifact build requires a clean worktree');
-  if (!packageJson.version || !tagsAtHead.includes(expectedTag)) {
-    throw new Error(`SmartDB release artifact build requires ${expectedTag} at HEAD`);
-  }
-
-  const releaseParent = path.join(workspace, '.nogit', 'smartdb-release');
-  fs.mkdirSync(releaseParent, { recursive: true, mode: 0o700 });
-  const localDirectory = fs.mkdtempSync(
-    path.join(releaseParent, `${gitCommit.slice(0, 12)}-`),
-  );
-  const linuxDirectory = path.join(localDirectory, 'linux');
-  const macosDirectory = path.join(localDirectory, 'macos');
-  const bundlePath = path.join(localDirectory, 'source.bundle');
-  const ownerToken = crypto.randomUUID();
-  let remoteDirectory: string | undefined;
-  let completed = false;
-
-  try {
-    await runCommand('pnpm', ['exec', 'tsbundle'], workspace);
-    await runCommand('pnpm', ['exec', 'tsbuild', 'tsfolders'], workspace);
-    await runCommand('pnpm', ['exec', 'tsrust'], workspace);
-
-    fs.cpSync(path.join(workspace, 'dist_rust'), linuxDirectory, {
-      recursive: true,
-      preserveTimestamps: true,
-    });
-    assertArtifactSet(linuxDirectory, ['linux_amd64', 'linux_arm64']);
-    await runCommand(path.join(linuxDirectory, 'rustdb_linux_amd64'), ['--version'], workspace);
-    await runCommand(
-      path.join(linuxDirectory, 'rustdb_linux_arm64'),
-      ['--version'],
-      workspace,
-    );
-
-    await runCommand('git', ['bundle', 'create', bundlePath, 'HEAD'], workspace);
-    remoteDirectory = remoteWorkspacePath(environmentArg, gitCommit, ownerToken);
-    await createRemoteWorkspace(
-      environmentArg,
-      remoteDirectory,
-      gitCommit,
-      ownerToken,
-    );
-    await runCommand('scp', [
-      '-p',
-      ...sshConnectionArgs,
-      bundlePath,
-      `${environmentArg.macosSsh}:${remoteDirectory}/source.bundle`,
-    ]);
-
-    const remoteWorkspace = `${remoteDirectory}/workspace`;
-    const remoteBuildScript = [
-      'set -eu',
-      `bundle=${shellQuote(`${remoteDirectory}/source.bundle`)}`,
-      `workspace=${shellQuote(remoteWorkspace)}`,
-      `expected_commit=${shellQuote(gitCommit)}`,
-      'git clone --quiet "$bundle" "$workspace"',
-      'cd "$workspace"',
-      'test "$(git rev-parse HEAD)" = "$expected_commit"',
-      'test -z "$(git status --porcelain=v1 --untracked-files=all)"',
-      'pnpm install --frozen-lockfile',
-      'pnpm exec tsrust',
-      'cmp .nogit/tsrust-target/aarch64-apple-darwin/release/rustdb dist_rust/rustdb_macos_arm64',
-      'cmp .nogit/tsrust-target/x86_64-apple-darwin/release/rustdb dist_rust/rustdb_macos_amd64',
-      'codesign --verify --deep --strict dist_rust/rustdb_macos_arm64',
-      'codesign --verify --deep --strict dist_rust/rustdb_macos_amd64',
-      '/usr/bin/arch -arm64 dist_rust/rustdb_macos_arm64 --version',
-      '/usr/bin/arch -x86_64 dist_rust/rustdb_macos_amd64 --version',
-      'test "$(git rev-parse HEAD)" = "$expected_commit"',
-      'test -z "$(git status --porcelain=v1 --untracked-files=all)"',
-    ].join('\n');
-    await runRemoteLoginScript(environmentArg, remoteBuildScript);
-    await runCommand('scp', [
-      '-pr',
-      ...sshConnectionArgs,
-      `${environmentArg.macosSsh}:${remoteWorkspace}/dist_rust`,
-      macosDirectory,
-    ]);
-    assertArtifactSet(macosDirectory, ['macos_amd64', 'macos_arm64']);
-
-    await runCommand(
-      'pnpm',
-      ['exec', 'tsrust', 'assemble', linuxDirectory, macosDirectory],
-      workspace,
-    );
-    assertArtifactSet(path.join(workspace, 'dist_rust'), [
-      'linux_amd64',
-      'linux_arm64',
-      'macos_amd64',
-      'macos_arm64',
-    ]);
-    for (const target of ['linux_amd64', 'linux_arm64', 'macos_amd64', 'macos_arm64']) {
-      await runCommand(
-        'pnpm',
-        ['exec', 'tsrust', 'inspect', `dist_rust/rustdb_${target}`],
-        workspace,
-      );
-    }
-
-    await cleanupRemoteWorkspace(
-      environmentArg,
-      remoteDirectory,
-      gitCommit,
-      ownerToken,
-    );
-    remoteDirectory = undefined;
-    fs.rmSync(localDirectory, { recursive: true });
-    completed = true;
-    console.log(`Assembled and qualified SmartDB release artifacts for ${expectedTag}.`);
-  } finally {
-    if (!completed) {
-      console.error(`Retained local release diagnostics at ${localDirectory}`);
-      if (remoteDirectory) {
-        console.error(`Retained macOS release diagnostics at ${remoteDirectory}`);
-      }
-    }
-  }
-};
-
-try {
-  const mode = process.argv.find((argumentArg) =>
-    ['check', 'build'].includes(argumentArg),
-  ) as TReleaseArtifactMode | undefined;
-  if (!mode) throw new Error('Usage: release-artifacts.ts <check|build>');
-  const environment = loadEnvironment();
-  if (mode === 'check') {
-    await checkBuilders(environment);
-  } else {
-    await buildArtifacts(environment);
-  }
-} catch (error) {
-  console.error(error);
-  process.exitCode = 1;
-}