shoney.arickathil
47db5b6cfe
- .wob v3: class records carry an index tail (flags bit0 = unique, col_cnt, columns) -- @table(index:[a,b]) entries plus one unique single-column entry per @unique field; loader validates columns in range and scalar/Text-kinded; emitter validates the declarations (unknown column, un-indexable kind => diagnostic) - engine: db_index hash multimap per table, built from the class table at first touch, maintained ONLY inside wo_row_insert/ wo_row_remove; unique checks re-compare actual column values (a hash is a hint); replay re-indexes via wo_row_raw_commit AFTER slots are filled, so recovered tables carry their indexes - WO_T_UNIQUE = 10; a violating insert is un-applied whole (bitmap, hash, count, and the never-observable id reclaimed) and traps catchably -- the employee SEED-DUP pattern - wo_row_insert gains err_kind so db.c maps UNIQUE/OOM/other to the right trap; test images and the runner's loader mirror speak v3 - fixtures: trap/db-unique-violation (code 10 exact) and run/db-unique-catch (catchable dup, composite index accepts duplicates, next id dense after a refusal) - gates: oop-e2e 73/0, all 15 runtime suites, woc-test green, log-watcher 7/0 Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
74 lines
2.6 KiB
C
74 lines
2.6 KiB
C
/* loader.h — .wob loading + the full static-validation contract.
|
|
* The "no UB on any input" constraint lives here: everything is parsed
|
|
* through a bounds-checked cursor and COPIED OUT into aligned, malloc'd
|
|
* structures (misaligned files and input-buffer lifetimes are non-issues);
|
|
* text constants intern as const-flagged strings. What the loader accepts,
|
|
* the interpreter trusts forever — the validation list is in loader.c.
|
|
* Field indexes on GETF/SETF stay runtime checks (registers are untyped):
|
|
* the spec's residual-check doctrine. */
|
|
#ifndef WO_LOADER_H
|
|
#define WO_LOADER_H
|
|
|
|
#include "obj.h"
|
|
|
|
typedef struct wo_lineent {
|
|
uint32_t pc, line;
|
|
} wo_lineent;
|
|
|
|
typedef struct wo_dropent {
|
|
uint32_t pc;
|
|
uint64_t owned; /* register bitmask: live owned values at pc */
|
|
uint64_t gc; /* register bitmask: live @gc references at pc */
|
|
} wo_dropent;
|
|
|
|
typedef struct wo_methodrec {
|
|
uint32_t name; /* constant index of a text constant */
|
|
uint32_t class_id; /* WOB_NONE = free fn */
|
|
uint8_t arg_cnt, reg_cnt;
|
|
uint32_t *code; /* aligned owned copy */
|
|
uint32_t ninstr;
|
|
wo_lineent *lines;
|
|
uint32_t line_cnt;
|
|
wo_dropent *drops;
|
|
uint32_t drop_cnt;
|
|
} wo_methodrec;
|
|
|
|
typedef struct wo_const {
|
|
uint8_t tag; /* WOB_K_INT / WOB_K_TEXT */
|
|
int64_t i; /* tag INT */
|
|
wo_str *s; /* tag TEXT: interned, WO_F_CONST, module-owned */
|
|
} wo_const;
|
|
|
|
/* vtable rows expanded flat and sorted by (class_id, slot) for binary
|
|
* search at ICALL time */
|
|
typedef struct wo_vtabent {
|
|
uint32_t class_id, slot, method;
|
|
} wo_vtabent;
|
|
|
|
typedef struct wo_module {
|
|
wo_const *consts;
|
|
uint32_t const_cnt;
|
|
wo_classdesc *classes;
|
|
uint32_t class_cnt;
|
|
uint8_t *kindpool; /* pooled field-kind bytes the classes point into */
|
|
/* pooled per-field metadata (v2): names, referenced class ids, element
|
|
kinds — see wob.h's "class-table field metadata" note */
|
|
uint32_t *metapool;
|
|
uint32_t *idxpool; /* v3 pooled per-class index metadata (flags/cols) */
|
|
uint32_t slot_cnt; /* total interface slots across all interfaces */
|
|
wo_vtabent *vtabs;
|
|
uint32_t vtab_cnt;
|
|
wo_methodrec *methods;
|
|
uint32_t method_cnt;
|
|
uint32_t entry; /* WOB_NONE = none */
|
|
} wo_module;
|
|
|
|
/* 0 ok; -1 reject with a human-readable reason in err (never empty) and
|
|
* everything parsed so far freed. */
|
|
int wo_load_buf(wo_module *m, const uint8_t *buf, size_t len, char *err,
|
|
size_t errlen);
|
|
/* mmap -> parse -> munmap */
|
|
int wo_load_file(wo_module *m, const char *path, char *err, size_t errlen);
|
|
void wo_module_free(wo_module *m);
|
|
|
|
#endif /* WO_LOADER_H */
|