cmd/

Binary bench-report compares two Go benchmark result files and outputs a markdown comparison table.

Command corpus-mutation-proof measures what a corpus actually DETECTS, rather than what it covers.

Command dst-generate runs metamorphic equivalence scenarios (hand-written or LLM-generated) through the deterministic SQL engine over SimFDB and reports findings.

Command dst-hunt is the overnight brute-force bug hunter for the record layer.

Command explain-differ dumps the planned PHYSICAL plan shape of every query in the yamsql conformance corpus to a stable text baseline, and diffs two such baselines.

factory-migrate re-emits the committed RFC-201 factory corpus from its seeds into the grouped `.yamsql` family-file format (RFC-201 §5.7).

Command factory-plan-census makes a factory-corpus plan-shape drift READABLE, and fails loudly on the drift classes that are regressions.

factory-rebless re-derives the PLAN-SHAPE and DEDUP-KEY headers of the committed RFC-201 factory corpus after a deliberate planner change, and rewrites the census baseline to match.

Command factory-rebless-plan-shapes re-derives the PLAN SHAPE and dedup key of every committed RFC-201 factory scenario and rewrites the ones that moved.

factory-run is the RFC-201 §5 generation factory: it generates seeded query candidates, executes them against a real FoundationDB through the production SQL path, blesses the ones every oracle agrees on, deduplicates them against the corpus already committed, and WRITES the survivors into pkg/relational/conformance/factorycorpus/testdata as permanent suite content.

fdb — fdb.dev CLI for FoundationDB, Record Layer, and SQL.

fdb-binding-stress runs the FDB binding tester across many seeds and reports results.

Package difforacle implements the differential serialization fuzzer.

fdb-wirelog-dump reads a binary wire log (FDB_WIRE_LOG format) and prints human-readable frame summaries.

Command fuzzrun runs one fuzzing command and classifies its failure.

Command gen-feature-matrix regenerates FEATURE_MATRIX.md from the yamsql conformance corpus.

Command gen-sql-coverage regenerates the RFC-165 SQL conformance ledgers from the yamsql conformance corpus.

Command plan-trace plans one query without FDB and reports where the planner's work went: tasks, time and memo groups per phase, task kind and rule, then a census of the memo the run left, including groups explored more than once.

Command secretscan refuses content that must never reach this repository, which is public: credentials and tokens, private keys, OpenTofu state and variables, public host addresses, and the literal contents of the secret files on the machine running it (a Hetzner Cloud token has no shape a pattern could know; its bytes do).

Command spfresh-maintainer is the reference SPFresh maintenance worker (RFC-156 §3.2).

sql-diff-stress is the RFC-182 generative row-soundness differential stress binary: seeded random (schema, data, query) cases executed through the full production SQL path against a real FDB testcontainer, rows diffed against the in-memory brute-force oracle (Oracle M).

Command test-budget reports how much of its Bazel timeout budget each test target actually consumed, and fails when a target that RAN is close enough to its budget that the next growth will break it.

Binary test-report generates a self-contained HTML test report from Bazel's Build Event Protocol (BEP) JSON output.

Command vulnscan runs govulncheck as a CI security gate that cannot be silenced by an upstream outage and cannot silently pass because of one.