feat: add floop vault sync for Lance-native S3 backup

.github/workflows/ci.yml

@@ -196,14 +196,19 @@ jobs:
           else
             BUILT_LIB="sproink-build/target/release/libsproink.a"
           fi
-          # Build only if cached artifact is absent
+          # Build only if cached artifact is absent.
+          #
+          # sproink's Cargo.toml narrows [lib] crate-type to ["lib"], so plain
+          # `cargo build` produces only an rlib. Use `cargo rustc` to explicitly
+          # request a staticlib, and enable the `ffi` feature to gate-in the
+          # `pub mod ffi` module that exposes the extern "C" symbols.
           if [ ! -f "$BUILT_LIB" ]; then
             cd sproink-build
             if [ "$RUNNER_OS" = "Windows" ]; then
               rustup target add x86_64-pc-windows-gnu
-              cargo build --release --target x86_64-pc-windows-gnu
+              cargo rustc --release --lib --crate-type staticlib --features ffi --target x86_64-pc-windows-gnu
             else
-              cargo build --release
+              cargo rustc --release --lib --crate-type staticlib --features ffi
             fi
             cd ..
           fi

.github/workflows/test-release.yml

@@ -98,12 +98,49 @@ jobs:
             rm -f lancedb-go-native-binaries.tar.gz
           fi
 
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache sproink build
+        uses: actions/cache@v5
+        with:
+          path: sproink-build/target
+          key: sproink-test-release-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('third_party/sproink/include/sproink.h') }}
+
+      - name: Build sproink native library
+        shell: bash
+        run: |
+          # Clone source if missing (cache only restores target/, not source).
+          if [ ! -f "sproink-build/Cargo.toml" ]; then
+            git clone --depth 1 https://github.com/nvandessel/sproink.git sproink-src-tmp
+            if [ -d "sproink-build/target" ]; then
+              mv sproink-build/target sproink-src-tmp/target
+            fi
+            rm -rf sproink-build
+            mv sproink-src-tmp sproink-build
+          fi
+          BUILT_LIB="sproink-build/target/release/libsproink.a"
+          # sproink's Cargo.toml narrows [lib] crate-type to ["lib"]; use cargo
+          # rustc to explicitly request a staticlib and enable the `ffi` feature
+          # that gates `pub mod ffi`.
+          if [ ! -f "$BUILT_LIB" ]; then
+            cd sproink-build
+            cargo rustc --release --lib --crate-type staticlib --features ffi
+            cd ..
+          fi
+          mkdir -p third_party/sproink/lib/linux_amd64
+          cp "$BUILT_LIB" third_party/sproink/lib/linux_amd64/libsproink.a
+
       - name: Build with CGO + LanceDB
         run: |
           PLATFORM="$(go env GOOS)_$(go env GOARCH)"
+          # liblancedb_go.a and libsproink.a are both Rust staticlibs and each
+          # bundle their own copy of libstd. --allow-multiple-definition lets
+          # the linker keep the first definition for the duplicate libstd
+          # symbols (rust_eh_personality, etc.).
           CGO_ENABLED=1 \
           CGO_CFLAGS="-I$(pwd)/include" \
-          CGO_LDFLAGS="-L$(pwd)/lib/${PLATFORM} -Wl,-Bstatic -llancedb_go -Wl,-Bdynamic -lm -ldl -lstdc++ -lpthread" \
+          CGO_LDFLAGS="-L$(pwd)/lib/${PLATFORM} -Wl,-Bstatic -llancedb_go -Wl,-Bdynamic -lm -ldl -lstdc++ -lpthread -Wl,--allow-multiple-definition" \
           go build -ldflags "-s -w -X main.version=test-cgo" \
             -o floop-cgo ./cmd/floop
 

.golangci.yml

@@ -12,7 +12,6 @@ linters:
     - unused
     - gosec
     - misspell
-    - goconst
   disable:
     - lll
     - gocyclo
@@ -36,15 +35,12 @@ linters:
         - G302  # File permissions — tracked in w03.6
         - G304  # File path from variable — we have pathutil validation
         - G306  # WriteFile permissions — tracked in w03.6
-    goconst:
-      min-occurrences: 10
   exclusions:
     rules:
       - path: _test\.go
         linters:
           - errcheck
           - gosec
-          - goconst
       # Ignore errcheck on defer Close() — standard Go pattern
       - text: "Error return value of .*.Close.*is not checked"
         linters: