@push.rocks/smartdb 5.2.2 → 5.3.0

package/dist_rust/rustdb_linux_amd64.tsrust-build.json

@@ -1,13 +1,13 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "b585eaae112a1eec36542e1e80410744695543cef34191d03de002ac215c8bd8",
+  "binarySha256": "2a987ebdd10f7e677b7719e6191d3029b831151ac0e6a8f5841518b67ba85d90",
   "buildInfo": {
     "projectName": "@push.rocks/smartdb",
-    "projectVersion": "5.2.2",
-    "gitCommit": "08f85430fb5272560782a39019414511a0cfedba",
+    "projectVersion": "5.3.0",
+    "gitCommit": "c4cee481c0b1b735cddef47802fd891db48b41d0",
     "gitDirty": false,
-    "builtAt": "2026-08-21T06:39:21.040Z",
-    "tsrustVersion": "1.10.0",
+    "builtAt": "2026-08-26T07:47:27.006Z",
+    "tsrustVersion": "1.10.3",
     "binary": "rustdb",
     "target": "linux_amd64"
   }

package/dist_rust/rustdb_linux_arm64.tsrust-build.json

@@ -1,13 +1,13 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "a40dedd961feb9bcc0cb13f45e280ef0d8d2d819697d612023c9a3990fb51cc4",
+  "binarySha256": "ebd4360466a494171b4ff6ac83792b61ec0dca7f6f843798f9ce666df1408234",
   "buildInfo": {
     "projectName": "@push.rocks/smartdb",
-    "projectVersion": "5.2.2",
-    "gitCommit": "08f85430fb5272560782a39019414511a0cfedba",
+    "projectVersion": "5.3.0",
+    "gitCommit": "c4cee481c0b1b735cddef47802fd891db48b41d0",
     "gitDirty": false,
-    "builtAt": "2026-08-21T06:39:59.105Z",
-    "tsrustVersion": "1.10.0",
+    "builtAt": "2026-08-26T07:48:02.335Z",
+    "tsrustVersion": "1.10.3",
     "binary": "rustdb",
     "target": "linux_arm64"
   }

package/dist_rust/rustdb_macos_amd64.tsrust-build.json

@@ -1,13 +1,13 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "125f06fb8af9bdc5194ba9772344730aec39a3bd7f1b83c8419a26391649bf2a",
+  "binarySha256": "188b588c091e093c598c21b27337f1dc34e928790f422c9a68d9e1fd0cdbe743",
   "buildInfo": {
     "projectName": "@push.rocks/smartdb",
-    "projectVersion": "5.2.2",
-    "gitCommit": "08f85430fb5272560782a39019414511a0cfedba",
+    "projectVersion": "5.3.0",
+    "gitCommit": "c4cee481c0b1b735cddef47802fd891db48b41d0",
     "gitDirty": false,
-    "builtAt": "2026-08-21T06:41:11.089Z",
-    "tsrustVersion": "1.10.0",
+    "builtAt": "2026-08-26T07:49:14.445Z",
+    "tsrustVersion": "1.10.3",
     "binary": "rustdb",
     "target": "macos_amd64"
   }

package/dist_rust/rustdb_macos_arm64.tsrust-build.json

@@ -1,13 +1,13 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "2c7bc50ca344c883d1039886e509be8d945bc85bc16f6dbbadae7d39084ee9cb",
+  "binarySha256": "40c83c9595834a0db955c2c72bf074eb7c65cba734e065141eaff15f3acf4fad",
   "buildInfo": {
     "projectName": "@push.rocks/smartdb",
-    "projectVersion": "5.2.2",
-    "gitCommit": "08f85430fb5272560782a39019414511a0cfedba",
+    "projectVersion": "5.3.0",
+    "gitCommit": "c4cee481c0b1b735cddef47802fd891db48b41d0",
     "gitDirty": false,
-    "builtAt": "2026-08-21T06:41:51.892Z",
-    "tsrustVersion": "1.10.0",
+    "builtAt": "2026-08-26T07:50:10.975Z",
+    "tsrustVersion": "1.10.3",
     "binary": "rustdb",
     "target": "macos_arm64"
   }

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@push.rocks/smartdb',
-    version: '5.2.2',
+    version: '5.3.0',
     description: 'A MongoDB-compatible embedded database server with wire protocol support, backed by a high-performance Rust engine.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSxxQkFBcUI7SUFDM0IsT0FBTyxFQUFFLE9BQU87SUFDaEIsV0FBVyxFQUFFLHFIQUFxSDtDQUNuSSxDQUFBIn0=

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@push.rocks/smartdb",
-  "version": "5.2.2",
+  "version": "5.3.0",
   "private": false,
   "description": "A MongoDB-compatible embedded database server with wire protocol support, backed by a high-performance Rust engine.",
   "exports": {
@@ -16,13 +16,13 @@
     "@design.estate/dees-element": "^2.2.4",
     "@git.zone/tsbuild": "^4.4.2",
     "@git.zone/tsbundle": "^2.11.4",
-    "@git.zone/tsrust": "^1.10.0",
+    "@git.zone/tsrust": "^1.10.3",
     "@git.zone/tstest": "^4.0.0",
     "@types/node": "26.2.0",
     "mongodb": "^7.5.0"
   },
   "dependencies": {
-    "@push.rocks/smartrust": "^1.7.0",
+    "@push.rocks/smartrust": "^1.7.1",
     "bson": "^7.3.1"
   },
   "browserslist": [
@@ -68,7 +68,7 @@
     "url": "https://code.foss.global/push.rocks/smartdb/issues"
   },
   "scripts": {
-    "test:before": "(tsrust)",
+    "test:before": "(tsrust) && (CARGO_TARGET_DIR=.nogit/rustdb-test-support-target cargo build --manifest-path rust/Cargo.toml --locked --release -p rustdb --features test-support)",
     "test": "(tstest test/. --verbose --logfile --timeout 60)",
     "test:rust": "(cd rust && cargo test)",
     "build": "(tsbundle) && (tsbuild tsfolders) && (tsrust)",

package/readme.hints.md

@@ -53,4 +53,4 @@
 - Verify linkage manually with `ldd dist_rust/<binary>_linux_amd64` → "statically linked".
 - Do NOT verify feature presence in release binaries with `strings`/`grep`: on x86_64 release builds LLVM embeds short string literals (≤16 bytes, e.g. BSON doc keys like `volatileOnly`) as instruction immediates, so they are invisible to byte scans while the aarch64 binary shows them in `.rodata`. This produces false "stale binary" alarms. Verify behavior by running the binary (the wire tests spawn the host-arch binary from `dist_rust/`), or disassemble: `objdump -d <bin> | grep <hex-of-literal-LE>`.
 - Release builds use the tsrust 1.10 native matrix. The enabled gitzone test preflight checks the exact project-local tool, cross-execution, worker identities, toolchains, and remote root before versioning. The post-version build bundles TypeScript, transfers exact HEAD into isolated local and SSH workers, installs the frozen lockfile, executes all four target binaries, retrieves bounded artifact sets, and transactionally publishes the complete provenance matrix. Remote cleanup is limited to the unique owner-marked child below `SMARTDB_RELEASE_MACOS_TEMP_ROOT` and gates publication.
-- Matrix workers use synthetic homes and therefore do not inherit operator-global pnpm policy. Keep the workspace release-age exception pinned to the exact audited `@git.zone/tsrust` version needed by an immediate upstream-to-downstream release; do not disable the age gate or widen the exception to a scope.
+- Workspace release-age exclusion arrays replace operator-global exclusions, and matrix workers use synthetic homes with a separate age policy. For immediate dependency-chain releases, enumerate every required exact audited package version across all install contexts; do not disable the age gate or widen an exception to a scope.

package/readme.md

@@ -961,12 +961,42 @@ const names = await collection.distinct('name');
 | **CRUD** | `find`, `insert`, `update`, `delete`, `findAndModify`, `getMore`, `killCursors` |
 | **Aggregation** | `aggregate`, `count`, `distinct` |
 | **Indexes** | `createIndexes`, `dropIndexes`, `listIndexes` |
-| **Sessions** | `startSession`, `endSessions` |
+| **Sessions** | `startSession`, `endSessions`, `killSessions` |
 | **Transactions** | `startTransaction`, `commitTransaction`, `abortTransaction` through driver sessions |
 | **Admin** | `ping`, `listDatabases`, `listCollections`, `drop`, `dropDatabase`, `create`, `serverStatus`, `dbStats`, `collStats`, `connectionStatus`, `renameCollection` |
 
 Advertises MongoDB wire protocol versions 0–21. The documented command surface is tested with the official `mongodb` Node.js driver version 7.5.x.
 
+OP_MSG parsing rejects unknown required flags, invalid CRC-32C checksums,
+duplicate BSON keys, noncanonical array indexes, malformed section boundaries,
+multiple body sections, duplicate or colliding document-sequence identifiers,
+and missing or non-string `$db` fields. Early command-envelope validation then
+accepts document sequences only as `insert.documents`, `update.updates`, or
+`delete.deletes`; empty, oversized, extra, mismatched, and body-colliding forms
+reject before authentication or command resources are acquired. All three accepted
+forms are consumed as the corresponding bulk command argument. Unknown optional
+flags are ignored. A message is limited to 48,000,000 bytes, each BSON document to
+16,777,216 bytes, and BSON nesting to 100 levels. One message may contain at most
+128 sections, 10,000 document-sequence documents, 100,000 BSON elements, and
+100,000 BSON document or array containers. The advertised `maxWriteBatchSize` is
+therefore 10,000.
+
+The `moreToCome` request flag is accepted only for the exact `endSessions` or
+`killSessions` cleanup envelope: an `admin` command body containing only the
+session array, `writeConcern: { w: 0 }`, and `$db: "admin"`, with no document
+sequence. It executes without a transport response and leaves the connection
+reusable. Every other `moreToCome` envelope closes before command routing or
+response-owned resource creation.
+
+Raw receive buffers and parsed requests are charged separately against a
+process-wide 256 MiB encoded-byte admission budget. A partial frame is charged by
+its incrementally reserved receive capacity, not by the length in its prefix.
+Receive leases retain their high-water charge until the buffer is dropped or
+successfully compacted, and every allocation growth is reconciled before another
+socket read. Large unread pipelines remain charged and are compacted only at
+geometric utilization thresholds; the budget is an encoded-input bound rather
+than a claim about exact allocator heap usage.
+
 ### Read and Write Concerns
 
 SmartDB 5.x does not implement MongoDB `readConcern` or `writeConcern`
@@ -997,7 +1027,7 @@ available and reports SmartDB's fixed disabled state.
 
 ## Rust Crate Architecture 🦀
 
-The Rust engine is organized as a Cargo workspace with 9 focused crates:
+The Rust engine is organized as a Cargo workspace with 11 focused crates:
 
 | Crate | Purpose |
 |---|---|
@@ -1005,12 +1035,16 @@ The Rust engine is organized as a Cargo workspace with 9 focused crates:
 | `rustdb-config` | Server configuration types (serde, camelCase JSON) |
 | `rustdb-wire` | Wire protocol parser/encoder (OP_MSG, OP_QUERY, OP_REPLY) |
 | `rustdb-query` | Query matcher, update engine, aggregation, sort, projection |
+| `rustdb-state` | Internal deterministic Storage VNext commands, stable retry identities, and durable receipts |
+| `rustdb-replication` | Internal non-serving OpenRaft 0.9.25 one-voter fresh-root foundation; not linked into the released `rustdb` server |
 | `rustdb-storage` | Storage backends (memory, file), OpLog with point-in-time replay |
 | `rustdb-index` | B-tree/hash indexes, query planner (IXSCAN/COLLSCAN) |
 | `rustdb-txn` | Transaction + session management with snapshot isolation |
 | `rustdb-auth` | SCRAM-SHA-256 credential handling, user metadata persistence, RBAC checks |
 | `rustdb-commands` | 40+ command handlers wiring everything together |
 
+Storage VNext currently opens a fresh root only on Linux, using descriptor-relative access, checks for a supported local filesystem, and dual parent-slot/in-root leases. Stable retry identities resolve to durable receipts, including capacity-race rejection, with crash/reopen and post-quiescence snapshot/log proof. This internal foundation has no wire concerns, migration, serving listener, multi-voter transport, or HA claim. macOS and other non-Linux VNext root opens fail closed for now; existing released legacy binaries remain cross-compiled for the targets below.
+
 Cross-compiled for `linux_amd64`, `linux_arm64`, `macos_amd64`, and `macos_arm64` via [@git.zone/tsrust](https://www.npmjs.com/package/@git.zone/tsrust).
 
 ### Multi-host release artifacts

package/readme.plan.md

@@ -3,14 +3,14 @@
 Status: canonical direction, approved 2026-08-17. Reread before starting engine or
 managed-service work.
 
-Baseline: `@push.rocks/smartdb` 5.2.1. SmartDB is a Rust database engine with a
+Baseline: `@push.rocks/smartdb` 5.2.3. SmartDB is a Rust database engine with a
 TypeScript lifecycle facade, a MongoDB wire-protocol command surface, file and
 memory storage, authentication, transactions, resource fencing, and official
 MongoDB Node.js driver integration.
 
 Current execution status:
 
-- the legal and provenance gate has not passed
+- the legal and provenance gate passed on 2026-08-22
 - Phase 0 and the Phase 1 gate have not passed
 - 5.x maintenance now treats `data.rdb` as authoritative, ignores unverifiable
   legacy hint contents, streams CRC validation, and repairs only an incomplete
@@ -131,7 +131,8 @@ and reproducible baseline measurements.
 
 - stop over-advertising MongoDB version, wire behavior, and batch limits
 - reject ignored concerns, options, commands, and successful administrative stubs
-- validate OP_MSG required flags, checksums, and no-response behavior
+- completed slice (2026-08-25): validate OP_MSG required flags, CRC-32C
+  checksums, bounded framing, and exact no-response admission and execution
 - preserve complete BSON type and value identity for document and index keys
 - reconcile ambiguous point-write failures before returning control to callers
 - journal DDL and sync every required file and parent directory

package/third-party-notices.md

@@ -3,49 +3,64 @@
 The Rust executables distributed with this package include
 third-party components. This document covers the complete third-party package
 set recorded by `rust/Cargo.lock`, including target-inactive and compile-time
-components. The nine `rustdb*` workspace crates are covered by the package's
+components. The eleven `rustdb*` workspace crates are covered by the package's
 own MIT license and are not repeated below.
 
 ## Component Inventory
 
-The package selects MIT wherever an upstream expression offers MIT as an
-alternative. The selected licenses for the remaining components are stated in
-the table. This inventory was generated from the lockfile with
-`cargo license --json`.
+The selected license for each component is stated in the table. This inventory
+was generated from the lockfile with `cargo license --json`.
 
 | Component | Version | Upstream expression | Selected license |
 | --- | --- | --- | --- |
+| ahash | 0.7.8 | Apache-2.0 OR MIT | MIT |
 | ahash | 0.8.12 | Apache-2.0 OR MIT | MIT |
 | aho-corasick | 1.1.4 | MIT OR Unlicense | MIT |
+| android_system_properties | 0.1.6 | Apache-2.0 OR MIT | MIT |
 | anstream | 1.0.0 | Apache-2.0 OR MIT | MIT |
 | anstyle | 1.0.14 | Apache-2.0 OR MIT | MIT |
 | anstyle-parse | 1.0.0 | Apache-2.0 OR MIT | MIT |
 | anstyle-query | 1.1.5 | Apache-2.0 OR MIT | MIT |
 | anstyle-wincon | 3.0.11 | Apache-2.0 OR MIT | MIT |
+| anyerror | 0.1.13 | Apache-2.0 | Apache-2.0 |
 | anyhow | 1.0.102 | Apache-2.0 OR MIT | MIT |
 | arc-swap | 1.9.0 | Apache-2.0 OR MIT | MIT |
+| arrayvec | 0.7.8 | Apache-2.0 OR MIT | MIT |
 | async-trait | 0.1.89 | Apache-2.0 OR MIT | MIT |
+| autocfg | 1.5.1 | Apache-2.0 OR MIT | MIT |
 | base64 | 0.22.1 | Apache-2.0 OR MIT | MIT |
 | bitflags | 2.11.0 | Apache-2.0 OR MIT | MIT |
 | bitvec | 1.0.1 | MIT | MIT |
 | block-buffer | 0.10.4 | Apache-2.0 OR MIT | MIT |
+| borsh | 1.8.0 | Apache-2.0 OR MIT | MIT |
+| borsh-derive | 1.8.0 | Apache-2.0 | Apache-2.0 |
 | bson | 2.15.0 | MIT | MIT |
 | bumpalo | 3.20.2 | Apache-2.0 OR MIT | MIT |
+| byte-unit | 5.2.5 | MIT | MIT |
+| bytecheck | 0.6.12 | MIT | MIT |
+| bytecheck_derive | 0.6.12 | MIT | MIT |
 | bytes | 1.11.1 | MIT | MIT |
 | cc | 1.2.57 | Apache-2.0 OR MIT | MIT |
 | cfg-if | 1.0.4 | Apache-2.0 OR MIT | MIT |
+| cfg_aliases | 0.2.2 | MIT | MIT |
+| chrono | 0.4.45 | Apache-2.0 OR MIT | MIT |
 | clap | 4.6.0 | Apache-2.0 OR MIT | MIT |
 | clap_builder | 4.6.0 | Apache-2.0 OR MIT | MIT |
 | clap_derive | 4.6.0 | Apache-2.0 OR MIT | MIT |
 | clap_lex | 1.1.0 | Apache-2.0 OR MIT | MIT |
 | colorchoice | 1.0.5 | Apache-2.0 OR MIT | MIT |
+| core-foundation-sys | 0.8.7 | Apache-2.0 OR MIT | MIT |
 | cpufeatures | 0.2.17 | Apache-2.0 OR MIT | MIT |
+| crc32c | 0.6.8 | Apache-2.0 OR MIT | Apache-2.0 |
 | crc32fast | 1.5.0 | Apache-2.0 OR MIT | MIT |
 | crossbeam-utils | 0.8.21 | Apache-2.0 OR MIT | MIT |
 | crypto-common | 0.1.7 | Apache-2.0 OR MIT | MIT |
 | dashmap | 6.1.0 | MIT | MIT |
 | deranged | 0.5.8 | Apache-2.0 OR MIT | MIT |
+| derive_more | 1.0.0 | MIT | MIT |
+| derive_more-impl | 1.0.0 | MIT | MIT |
 | digest | 0.10.7 | Apache-2.0 OR MIT | MIT |
+| dyn-clone | 1.0.20 | Apache-2.0 OR MIT | MIT |
 | equivalent | 1.0.2 | Apache-2.0 OR MIT | MIT |
 | errno | 0.3.14 | Apache-2.0 OR MIT | MIT |
 | fastrand | 2.4.0 | Apache-2.0 OR MIT | MIT |
@@ -53,7 +68,11 @@ the table. This inventory was generated from the lockfile with
 | foldhash | 0.1.5 | Zlib | Zlib |
 | fs2 | 0.4.3 | Apache-2.0 OR MIT | MIT |
 | funty | 2.0.0 | MIT | MIT |
+| futures | 0.3.32 | Apache-2.0 OR MIT | MIT |
+| futures-channel | 0.3.32 | Apache-2.0 OR MIT | MIT |
 | futures-core | 0.3.32 | Apache-2.0 OR MIT | MIT |
+| futures-executor | 0.3.32 | Apache-2.0 OR MIT | MIT |
+| futures-io | 0.3.34 | Apache-2.0 OR MIT | MIT |
 | futures-macro | 0.3.32 | Apache-2.0 OR MIT | MIT |
 | futures-sink | 0.3.32 | Apache-2.0 OR MIT | MIT |
 | futures-task | 0.3.32 | Apache-2.0 OR MIT | MIT |
@@ -62,12 +81,15 @@ the table. This inventory was generated from the lockfile with
 | getrandom | 0.2.17 | Apache-2.0 OR MIT | MIT |
 | getrandom | 0.3.4 | Apache-2.0 OR MIT | MIT |
 | getrandom | 0.4.2 | Apache-2.0 OR MIT | MIT |
+| hashbrown | 0.12.3 | Apache-2.0 OR MIT | MIT |
 | hashbrown | 0.14.5 | Apache-2.0 OR MIT | MIT |
 | hashbrown | 0.15.5 | Apache-2.0 OR MIT | MIT |
 | hashbrown | 0.16.1 | Apache-2.0 OR MIT | MIT |
 | heck | 0.5.0 | Apache-2.0 OR MIT | MIT |
 | hex | 0.4.3 | Apache-2.0 OR MIT | MIT |
 | hmac | 0.12.1 | Apache-2.0 OR MIT | MIT |
+| iana-time-zone | 0.1.65 | Apache-2.0 OR MIT | MIT |
+| iana-time-zone-haiku | 0.1.2 | Apache-2.0 OR MIT | MIT |
 | id-arena | 2.3.0 | Apache-2.0 OR MIT | MIT |
 | indexmap | 2.13.0 | Apache-2.0 OR MIT | MIT |
 | is_terminal_polyfill | 1.70.2 | Apache-2.0 OR MIT | MIT |
@@ -80,22 +102,31 @@ the table. This inventory was generated from the lockfile with
 | linux-raw-sys | 0.12.1 | Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT | MIT |
 | lock_api | 0.4.14 | Apache-2.0 OR MIT | MIT |
 | log | 0.4.29 | Apache-2.0 OR MIT | MIT |
+| maplit | 1.0.2 | Apache-2.0 OR MIT | MIT |
 | matchers | 0.2.0 | MIT | MIT |
 | memchr | 2.8.0 | MIT OR Unlicense | MIT |
 | mimalloc | 0.1.48 | MIT | MIT |
 | mio | 1.1.1 | MIT | MIT |
 | nu-ansi-term | 0.50.3 | MIT | MIT |
 | num-conv | 0.2.1 | Apache-2.0 OR MIT | MIT |
+| num-traits | 0.2.19 | Apache-2.0 OR MIT | MIT |
 | once_cell | 1.21.4 | Apache-2.0 OR MIT | MIT |
 | once_cell_polyfill | 1.70.2 | Apache-2.0 OR MIT | MIT |
+| openraft | 0.9.25 | Apache-2.0 OR MIT | MIT |
+| openraft-macros | 0.9.25 | Apache-2.0 OR MIT | MIT |
 | parking_lot | 0.12.5 | Apache-2.0 OR MIT | MIT |
 | parking_lot_core | 0.9.12 | Apache-2.0 OR MIT | MIT |
 | pbkdf2 | 0.12.2 | Apache-2.0 OR MIT | MIT |
+| pin-project | 1.1.13 | Apache-2.0 OR MIT | MIT |
+| pin-project-internal | 1.1.13 | Apache-2.0 OR MIT | MIT |
 | pin-project-lite | 0.2.17 | Apache-2.0 OR MIT | MIT |
 | powerfmt | 0.2.0 | Apache-2.0 OR MIT | MIT |
 | ppv-lite86 | 0.2.21 | Apache-2.0 OR MIT | MIT |
 | prettyplease | 0.2.37 | Apache-2.0 OR MIT | MIT |
+| proc-macro-crate | 3.5.0 | Apache-2.0 OR MIT | MIT |
 | proc-macro2 | 1.0.106 | Apache-2.0 OR MIT | MIT |
+| ptr_meta | 0.1.4 | MIT | MIT |
+| ptr_meta_derive | 0.1.4 | MIT | MIT |
 | quote | 1.0.45 | Apache-2.0 OR MIT | MIT |
 | r-efi | 5.3.0 | Apache-2.0 OR LGPL-2.1-or-later OR MIT | MIT |
 | r-efi | 6.0.0 | Apache-2.0 OR LGPL-2.1-or-later OR MIT | MIT |
@@ -107,17 +138,26 @@ the table. This inventory was generated from the lockfile with
 | rand_core | 0.6.4 | Apache-2.0 OR MIT | MIT |
 | rand_core | 0.9.5 | Apache-2.0 OR MIT | MIT |
 | redox_syscall | 0.5.18 | MIT | MIT |
+| ref-cast | 1.0.27 | Apache-2.0 OR MIT | MIT |
+| ref-cast-impl | 1.0.27 | Apache-2.0 OR MIT | MIT |
 | regex | 1.12.3 | Apache-2.0 OR MIT | MIT |
 | regex-automata | 0.4.14 | Apache-2.0 OR MIT | MIT |
 | regex-syntax | 0.8.10 | Apache-2.0 OR MIT | MIT |
+| rend | 0.4.2 | MIT | MIT |
 | ring | 0.17.14 | Apache-2.0 AND ISC | Apache-2.0 AND ISC |
+| rkyv | 0.7.46 | MIT | MIT |
+| rkyv_derive | 0.7.46 | MIT | MIT |
+| rust_decimal | 1.42.1 | MIT | MIT |
+| rustc_version | 0.4.1 | Apache-2.0 OR MIT | MIT |
 | rustix | 1.1.4 | Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT | MIT |
 | rustls | 0.23.40 | Apache-2.0 OR ISC OR MIT | MIT |
 | rustls-pemfile | 2.2.0 | Apache-2.0 OR ISC OR MIT | MIT |
 | rustls-pki-types | 1.14.1 | Apache-2.0 OR MIT | MIT |
 | rustls-webpki | 0.103.13 | ISC | ISC |
 | rustversion | 1.0.22 | Apache-2.0 OR MIT | MIT |
+| schemars | 1.2.2 | MIT | MIT |
 | scopeguard | 1.2.0 | Apache-2.0 OR MIT | MIT |
+| seahash | 4.1.0 | MIT | MIT |
 | semver | 1.0.27 | Apache-2.0 OR MIT | MIT |
 | serde | 1.0.228 | Apache-2.0 OR MIT | MIT |
 | serde_bytes | 0.11.19 | Apache-2.0 OR MIT | MIT |
@@ -128,35 +168,48 @@ the table. This inventory was generated from the lockfile with
 | sharded-slab | 0.1.7 | MIT | MIT |
 | shlex | 1.3.0 | Apache-2.0 OR MIT | MIT |
 | signal-hook-registry | 1.4.8 | Apache-2.0 OR MIT | MIT |
+| simdutf8 | 0.1.5 | Apache-2.0 OR MIT | MIT |
 | slab | 0.4.12 | MIT | MIT |
 | smallvec | 1.15.1 | Apache-2.0 OR MIT | MIT |
 | socket2 | 0.6.3 | Apache-2.0 OR MIT | MIT |
 | strsim | 0.11.1 | MIT | MIT |
 | subtle | 2.6.1 | BSD-3-Clause | BSD-3-Clause |
+| syn | 1.0.109 | Apache-2.0 OR MIT | MIT |
 | syn | 2.0.117 | Apache-2.0 OR MIT | MIT |
+| syn | 3.0.4 | Apache-2.0 OR MIT | MIT |
 | tap | 1.0.1 | MIT | MIT |
 | tempfile | 3.27.0 | Apache-2.0 OR MIT | MIT |
+| thiserror | 1.0.69 | Apache-2.0 OR MIT | MIT |
 | thiserror | 2.0.18 | Apache-2.0 OR MIT | MIT |
+| thiserror-impl | 1.0.69 | Apache-2.0 OR MIT | MIT |
 | thiserror-impl | 2.0.18 | Apache-2.0 OR MIT | MIT |
 | thread_local | 1.1.9 | Apache-2.0 OR MIT | MIT |
 | time | 0.3.47 | Apache-2.0 OR MIT | MIT |
 | time-core | 0.1.8 | Apache-2.0 OR MIT | MIT |
 | time-macros | 0.2.27 | Apache-2.0 OR MIT | MIT |
+| tinyvec | 1.12.0 | Apache-2.0 OR MIT OR Zlib | MIT |
+| tinyvec_macros | 0.1.1 | Apache-2.0 OR MIT OR Zlib | MIT |
 | tokio | 1.50.0 | MIT | MIT |
 | tokio-macros | 2.6.1 | MIT | MIT |
 | tokio-rustls | 0.26.4 | Apache-2.0 OR MIT | MIT |
 | tokio-util | 0.7.18 | MIT | MIT |
+| toml_datetime | 1.1.1+spec-1.1.0 | Apache-2.0 OR MIT | MIT |
+| toml_edit | 0.25.13+spec-1.1.0 | Apache-2.0 OR MIT | MIT |
+| toml_parser | 1.1.3+spec-1.1.0 | Apache-2.0 OR MIT | MIT |
 | tracing | 0.1.44 | MIT | MIT |
 | tracing-attributes | 0.1.31 | MIT | MIT |
 | tracing-core | 0.1.36 | MIT | MIT |
+| tracing-futures | 0.2.5 | MIT | MIT |
 | tracing-log | 0.2.0 | MIT | MIT |
 | tracing-subscriber | 0.3.23 | MIT | MIT |
 | typenum | 1.20.0 | Apache-2.0 OR MIT | MIT |
 | unicode-ident | 1.0.24 | (Apache-2.0 OR MIT) AND Unicode-3.0 | MIT AND Unicode-3.0 |
 | unicode-xid | 0.2.6 | Apache-2.0 OR MIT | MIT |
 | untrusted | 0.9.0 | ISC | ISC |
+| utf8-width | 0.1.9 | MIT | MIT |
 | utf8parse | 0.2.2 | Apache-2.0 OR MIT | MIT |
 | uuid | 1.22.0 | Apache-2.0 OR MIT | MIT |
+| validit | 0.2.6 | Apache-2.0 OR MIT | MIT |
 | valuable | 0.1.1 | MIT | MIT |
 | version_check | 0.9.5 | Apache-2.0 OR MIT | MIT |
 | wasi | 0.11.1+wasi-snapshot-preview1 | Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT | MIT |
@@ -172,7 +225,12 @@ the table. This inventory was generated from the lockfile with
 | winapi | 0.3.9 | Apache-2.0 OR MIT | MIT |
 | winapi-i686-pc-windows-gnu | 0.4.0 | Apache-2.0 OR MIT | MIT |
 | winapi-x86_64-pc-windows-gnu | 0.4.0 | Apache-2.0 OR MIT | MIT |
+| windows-core | 0.62.2 | Apache-2.0 OR MIT | MIT |
+| windows-implement | 0.60.2 | Apache-2.0 OR MIT | MIT |
+| windows-interface | 0.59.3 | Apache-2.0 OR MIT | MIT |
 | windows-link | 0.2.1 | Apache-2.0 OR MIT | MIT |
+| windows-result | 0.4.1 | Apache-2.0 OR MIT | MIT |
+| windows-strings | 0.5.1 | Apache-2.0 OR MIT | MIT |
 | windows-sys | 0.52.0 | Apache-2.0 OR MIT | MIT |
 | windows-sys | 0.61.2 | Apache-2.0 OR MIT | MIT |
 | windows-targets | 0.52.6 | Apache-2.0 OR MIT | MIT |
@@ -184,6 +242,7 @@ the table. This inventory was generated from the lockfile with
 | windows_x86_64_gnu | 0.52.6 | Apache-2.0 OR MIT | MIT |
 | windows_x86_64_gnullvm | 0.52.6 | Apache-2.0 OR MIT | MIT |
 | windows_x86_64_msvc | 0.52.6 | Apache-2.0 OR MIT | MIT |
+| winnow | 1.0.4 | MIT | MIT |
 | wit-bindgen | 0.51.0 | Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT | MIT |
 | wit-bindgen-core | 0.51.0 | Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT | MIT |
 | wit-bindgen-rust | 0.51.0 | Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT | MIT |
@@ -204,6 +263,10 @@ Copyright (c) 2009-2013 Mozilla Foundation (sha2)
 
 Copyright (c) 2010 The Rust Project Developers (lazy_static)
 
+Copyright (c) 2012-2013 Mozilla Foundation (core-foundation-sys)
+
+Copyright (c) 2013 Nicolas Silva (android_system_properties)
+
 Copyright (c) 2013-2014 The Rust Project Developers. (hex)
 
 Copyright (c) 2014 Alex Crichton (cc, cfg-if, find-msvc-tools, id-arena, js-sys, socket2, wasm-bindgen, wasm-bindgen-macro, wasm-bindgen-macro-support, wasm-bindgen-shared)
@@ -214,9 +277,13 @@ Copyright (c) 2014 Carl Lerche and other MIO contributors (mio)
 
 Copyright (c) 2014 Chris Wong (errno)
 
+Copyright (c) 2014, Kang Seonghoon. (chrono)
+
 Copyright (c) 2014 Paho Lurie-Gregg (typenum)
 
-Copyright (c) 2014 The Rust Project Developers (bitflags, getrandom, log, rand, rand_chacha, rand_core, regex, regex-automata, regex-syntax, uuid)
+Copyright (c) 2014 The Rust Project Developers (bitflags, getrandom, log, num-traits, rand, rand_chacha, rand_core, regex, regex-automata, regex-syntax, uuid)
+
+Copyright (c) 2015 (maplit)
 
 Copyright (c) 2015 Alice Maz (base64)
 
@@ -238,17 +305,21 @@ Copyright (c) 2015-2018 The winapi-rs Developers (winapi)
 
 Copyright (c) 2015-2020 The rust-hex Developers (hex)
 
-Copyright (c) 2016 Alex Crichton (futures-core, futures-macro, futures-sink, futures-task, futures-util)
+Copyright (c) 2016 Alex Crichton (futures, futures-channel, futures-core, futures-executor, futures-io, futures-macro, futures-sink, futures-task, futures-util)
 
-Copyright (c) 2016 Amanieu d'Antras (hashbrown)
+Copyright (c) 2016 Amanieu d'Antras (ahash 0.7.8, hashbrown)
 
 Copyright (c) 2016 Artyom Pavlov (sha2)
 
+Copyright (c) 2016 Jelte Fennema (derive_more, derive_more-impl)
+
 Copyright (c) 2016 Joe Wilm (utf8parse)
 
 Copyright (c) 2016 Joseph Birr-Pixton <jpixton@gmail.com> (rustls, rustls-pemfile)
 
-Copyright (c) 2016 The Rust Project Developers (lock_api, parking_lot, parking_lot_core, thread_local)
+Copyright (c) 2016 Paul Mason (rust_decimal)
+
+Copyright (c) 2016 The Rust Project Developers (lock_api, parking_lot, parking_lot_core, rustc_version, thread_local)
 
 Copyright (c) 2016 Titus Wormer <tituswormer@gmail.com> (strsim)
 
@@ -268,7 +339,7 @@ Copyright (c) 2017 quininer kel (tokio-rustls)
 
 Copyright (c) 2017 Redox OS Developers (redox_syscall)
 
-Copyright (c) 2017 The Tokio Authors (futures-core, futures-macro, futures-sink, futures-task, futures-util)
+Copyright (c) 2017 The Tokio Authors (futures, futures-channel, futures-core, futures-executor, futures-io, futures-macro, futures-sink, futures-task, futures-util)
 
 Copyright (c) 2017 tokio-jsonrpc developers (signal-hook-registry)
 
@@ -280,13 +351,15 @@ Copyright (c) 2018 Ashley Mannix, Christopher Armstrong, Dylan DPC, Hunar Roop K
 
 Copyright (c) 2018 Carl Lerche (bytes)
 
+Copyright (c) 2018 Josh Stone (autocfg)
+
 Copyright (c) 2018 myrrlyn (Alexander Payne) (bitvec, wyz)
 
 Copyright (c) 2018 Sam Rijs, Alex Crichton and contributors (crc32fast)
 
 Copyright (c) 2018 The Servo Project Developers (smallvec)
 
-Copyright (c) 2018 Tom Kaitchuck (ahash)
+Copyright (c) 2018 Tom Kaitchuck (ahash 0.8.12)
 
 Copyright (c) 2018-2019 The RustCrypto Project Developers (block-buffer)
 
@@ -308,6 +381,8 @@ Copyright (c) 2019 Carl Lerche (slab)
 
 Copyright (c) 2019 Eliza Weisman (matchers, sharded-slab)
 
+Copyright (c) 2019 Graham Esau (schemars)
+
 Copyright (c) 2019 kneecaw (Nika Layzell) (radium)
 
 Copyright (c) 2019 Nick Fitzgerald (bumpalo)
@@ -316,14 +391,26 @@ Copyright (c) 2019 The Crossbeam Project Developers (crossbeam-utils)
 
 Copyright (c) 2019 The CryptoCorrosion Contributors (ppv-lite86)
 
-Copyright (c) 2019 Tokio Contributors (tracing, tracing-attributes, tracing-core, tracing-log, tracing-subscriber)
+Copyright (c) 2019 Tokio Contributors (tracing, tracing-attributes, tracing-core, tracing-futures, tracing-log, tracing-subscriber)
 
 Copyright (c) 2019 Yoshua Wuyts (tokio-macros)
 
+Copyright (c) 2020 Andrew D. Straw (iana-time-zone, iana-time-zone-haiku)
+
+Copyright 2020 David Koloski (bytecheck, bytecheck_derive)
+
+Copyright (c) 2020 Katharos Technology (cfg_aliases)
+
+Copyright (c) 2020 magiclen.org (Ron Li) (utf8-width)
+
 Copyright (c) 2020 myrrlyn (Alexander Payne) (funty)
 
+Copyright (c) 2020 Soveu (tinyvec_macros)
+
 Copyright (c) 2020-2025 The RustCrypto Project Developers (cpufeatures)
 
+Copyright 2021 David Koloski (ptr_meta, ptr_meta_derive, rend, rkyv, rkyv_derive)
+
 Copyright (c) 2021 RustCrypto Developers (crypto-common)
 
 Copyright (c) 2021-2022 The Nushell Project Developers (nu-ansi-term)
@@ -332,9 +419,11 @@ Copyright (c) 2023 Dirkjan Ochtman <dirkjan@ochtman.nl> (rustls-pki-types)
 
 Copyright (c) 2023 Jacob Pratt et al. (powerfmt)
 
+Copyright (c) 2023 magiclen.org (Ron Li) (byte-unit)
+
 Copyright (c) 2024 Jacob Pratt et al. (deranged)
 
-Copyright (c) Individual contributors (anstream, anstyle, anstyle-parse, anstyle-query, anstyle-wincon, clap, clap_builder, clap_derive, clap_lex, colorchoice, is_terminal_polyfill, once_cell_polyfill)
+Copyright (c) Individual contributors (anstream, anstyle, anstyle-parse, anstyle-query, anstyle-wincon, clap, clap_builder, clap_derive, clap_lex, colorchoice, is_terminal_polyfill, once_cell_polyfill, toml_datetime, toml_edit, toml_parser)
 
 Copyright (c) Jacob Pratt (num-conv)
 
@@ -344,12 +433,28 @@ Copyright (c) The Rust Project Developers (libc)
 
 Copyright (c) Tokio Contributors (tokio, tokio-macros, tokio-util)
 
+Copyright (c) Microsoft Corporation. (windows-core, windows-implement, windows-interface, windows-result, windows-strings)
+
+Copyright (c) Ulrik Sverdrup "bluss" 2015-2023 (arrayvec)
+
 Copyright 2018 Developers of the Rand project (rand, rand_chacha, rand_core)
 
 Copyright 2019 Octavian Oncescu (mimalloc)
 
 Copyright 2023 The Fuchsia Authors (zerocopy, zerocopy-derive)
 
+### MIT Provenance Notes
+
+The published `cfg_aliases` 0.2.2 `NOTICES.md` states that the
+`cfg_aliases!` macro "uses a lot of the code" from
+[`tectonic_cfg_support::target_cfg!`](https://github.com/tectonic-typesetting/tectonic/blob/f2439b936470ad27bdf92882064bc4702ee01899/cfg_support/src/lib.rs#L166),
+which it identifies as licensed under the MIT License.
+
+The published `openraft` 0.9.25 `README.md` states that Openraft is derived
+from [`async-raft`](https://docs.rs/crate/async-raft/latest) with
+[several bugs fixed](https://github.com/datafuselabs/openraft/blob/main/derived-from-async-raft.md).
+It provides no separate copyright notice for that derivation.
+
 The remaining MIT-selected components publish the canonical terms below
 without an additional non-placeholder copyright line in their packaged license
 source.
@@ -374,7 +479,23 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
-## Apache-2.0 Notice for ring
+## Apache-2.0 Notices
+
+### anyerror
+
+`anyerror` is distributed under the Apache License 2.0 and includes no
+separate NOTICE file in its published crate. The canonical terms are included
+below.
+
+### borsh-derive
+
+Copyright 2019 Near
+
+`borsh-derive` is distributed under the Apache License 2.0. Its published
+crate includes no separate NOTICE file. The canonical terms are included
+below.
+
+### ring
 
 `ring` includes BoringSSL-derived, once_cell-derived, and fiat-crypto-derived
 code under the Apache License 2.0. The fiat-crypto-derived code carries this
@@ -741,6 +862,30 @@ the following restrictions:
    misrepresented as being the original software.
 3. This notice may not be removed or altered from any source distribution.
 
+## Zlib-derived Notice for crc32c
+
+The `crc32c` component's `src/combine.rs` is based on the Zlib project's
+`crc32.c` combine implementation and carries the following notice:
+
+crc32.c -- compute the CRC-32 of a data stream
+Copyright (C) 1995-2006, 2010, 2011, 2012, 2016 Mark Adler
+
+This software is provided 'as-is', without any express or implied warranty. In
+no event will the authors be held liable for any damages arising from the use of
+this software.
+
+Permission is granted to anyone to use this software for any purpose, including
+commercial applications, and to alter it and redistribute it freely, subject to
+the following restrictions:
+
+1. The origin of this software must not be misrepresented; you must not claim
+   that you wrote the original software. If you use this software in a product,
+   an acknowledgment in the product documentation would be appreciated but is
+   not required.
+2. Altered source versions must be plainly marked as such, and must not be
+   misrepresented as being the original software.
+3. This notice may not be removed or altered from any source distribution.
+
 ## Unicode License V3 for unicode-ident
 
 COPYRIGHT AND PERMISSION NOTICE

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@push.rocks/smartdb',
-  version: '5.2.2',
+  version: '5.3.0',
   description: 'A MongoDB-compatible embedded database server with wire protocol support, backed by a high-performance Rust engine.'
 }