ibex-runtime 0.2.0 → 0.4.0

data/sig/ibex/runtime/event_sanitizer.rbs

@@ -5,6 +5,10 @@ module Ibex
     # Converts application-owned values into bounded, data-only event summaries.
     # rubocop:disable Metrics/ModuleLength
     module EventSanitizer
+      type json_value = String | Integer | Float | bool | nil | Array[json_value] | Hash[String, json_value]
+
+      type sanitized_value = untyped
+
       MAX_DEPTH: Integer
 
       MAX_COLLECTION_ENTRIES: Integer
@@ -20,73 +24,75 @@ module Ibex
       # Copy a runtime payload into deeply frozen JSON data. Unknown objects are
       # summarized instead of being retained, so callers cannot smuggle mutable
       # application identities into an Event.
-      # @rbs (Hash[untyped, untyped] input) -> Hash[String, untyped]
-      def self.data: (Hash[untyped, untyped] input) -> Hash[String, untyped]
+      # @rbs (Hash[sanitized_value, sanitized_value] input) -> Hash[String, json_value]
+      def self.data: (Hash[sanitized_value, sanitized_value] input) -> Hash[String, json_value]
 
-      # @rbs (untyped input) -> untyped
-      def self.value: (untyped input) -> untyped
+      # @rbs (sanitized_value input) -> json_value
+      def self.value: (sanitized_value input) -> json_value
 
-      # @rbs (untyped location) -> Hash[String, untyped]?
-      def self.location: (untyped location) -> Hash[String, untyped]?
+      # @rbs (sanitized_value location) -> Hash[String, json_value]?
+      def self.location: (sanitized_value location) -> Hash[String, json_value]?
 
-      # @rbs (untyped input) -> String
-      def self.string: (untyped input) -> String
+      # @rbs (sanitized_value input) -> String
+      def self.string: (sanitized_value input) -> String
 
-      # @rbs (untyped input) -> String
-      def self.class_name: (untyped input) -> String
+      # @rbs (sanitized_value input) -> String
+      def self.class_name: (sanitized_value input) -> String
 
-      # @rbs (untyped input, depth: Integer, seen: Hash[Integer, bool]) -> untyped
-      private def self.summarize: (untyped input, depth: Integer, seen: Hash[Integer, bool]) -> untyped
+      # @rbs (sanitized_value input, depth: Integer, seen: Hash[Integer, bool]) -> json_value
+      private def self.summarize: (sanitized_value input, depth: Integer, seen: Hash[Integer, bool]) -> json_value
 
-      # @rbs (untyped input, depth: Integer, seen: Hash[Integer, bool]) -> untyped
-      private def self.json_data: (untyped input, depth: Integer, seen: Hash[Integer, bool]) -> untyped
+      # @rbs (sanitized_value input, depth: Integer, seen: Hash[Integer, bool]) -> json_value
+      private def self.json_data: (sanitized_value input, depth: Integer, seen: Hash[Integer, bool]) -> json_value
 
-      # @rbs (Array[untyped] input, depth: Integer, seen: Hash[Integer, bool]) -> untyped
-      private def self.summarize_array: (Array[untyped] input, depth: Integer, seen: Hash[Integer, bool]) -> untyped
+      # @rbs (Array[sanitized_value] input, depth: Integer, seen: Hash[Integer, bool]) -> json_value
+      private def self.summarize_array: (Array[sanitized_value] input, depth: Integer, seen: Hash[Integer, bool]) -> json_value
 
-      # @rbs (Hash[untyped, untyped] input, depth: Integer, seen: Hash[Integer, bool]) -> untyped
-      private def self.summarize_hash: (Hash[untyped, untyped] input, depth: Integer, seen: Hash[Integer, bool]) -> untyped
+      # @rbs (Hash[sanitized_value, sanitized_value] input, depth: Integer, seen: Hash[Integer, bool]) -> json_value
+      private def self.summarize_hash: (Hash[sanitized_value, sanitized_value] input, depth: Integer, seen: Hash[Integer, bool]) -> json_value
 
-      # @rbs (Array[untyped] input, depth: Integer, seen: Hash[Integer, bool]) -> untyped
-      private def self.json_array: (Array[untyped] input, depth: Integer, seen: Hash[Integer, bool]) -> untyped
+      # @rbs (Array[sanitized_value] input, depth: Integer, seen: Hash[Integer, bool]) -> json_value
+      private def self.json_array: (Array[sanitized_value] input, depth: Integer, seen: Hash[Integer, bool]) -> json_value
 
-      # @rbs (Hash[untyped, untyped] input, depth: Integer, seen: Hash[Integer, bool]) -> untyped
-      private def self.json_hash: (Hash[untyped, untyped] input, depth: Integer, seen: Hash[Integer, bool]) -> untyped
+      # @rbs (Hash[sanitized_value, sanitized_value] input, depth: Integer, seen: Hash[Integer, bool]) -> json_value
+      private def self.json_hash: (Hash[sanitized_value, sanitized_value] input, depth: Integer, seen: Hash[Integer, bool]) -> json_value
 
-      # @rbs (Array[untyped] input, seen: Hash[Integer, bool])
-      #   { (untyped, Hash[Integer, bool]) -> untyped } -> untyped
-      private def self.copy_array: (Array[untyped] input, seen: Hash[Integer, bool]) { (untyped, Hash[Integer, bool]) -> untyped } -> untyped
+      # @rbs (Array[sanitized_value] input, seen: Hash[Integer, bool])
+      #   { (sanitized_value, Hash[Integer, bool]) -> json_value } -> json_value
+      private def self.copy_array: (Array[sanitized_value] input, seen: Hash[Integer, bool]) { (sanitized_value, Hash[Integer, bool]) -> json_value } -> json_value
 
-      # @rbs (untyped input) -> bool
-      private def self.primitive?: (untyped input) -> bool
+      # @rbs (sanitized_value input) -> bool
+      private def self.primitive?: (sanitized_value input) -> bool
 
-      # @rbs (Integer input) -> untyped
-      private def self.bounded_integer: (Integer input) -> untyped
+      # @rbs (Integer input) -> json_value
+      private def self.bounded_integer: (Integer input) -> json_value
 
-      # @rbs (Float input) -> untyped
-      private def self.finite_float: (Float input) -> untyped
+      # @rbs (Float input) -> json_value
+      private def self.finite_float: (Float input) -> json_value
 
-      # @rbs (untyped input, Module type) -> bool
-      private def self.core_type?: (untyped input, Module type) -> bool
+      # @rbs (sanitized_value input, Module type) -> bool
+      private def self.core_type?: (sanitized_value input, Module type) -> bool
 
-      # @rbs (untyped key) -> String
-      private def self.data_key: (untyped key) -> String
+      # @rbs (sanitized_value key) -> String
+      private def self.data_key: (sanitized_value key) -> String
 
       # @rbs (String input) -> String
       private def self.truncate_utf8: (String input) -> String
 
-      # @rbs (untyped input) -> Integer
-      private def self.object_identity: (untyped input) -> Integer
+      # @rbs (sanitized_value input) -> Integer
+      private def self.object_identity: (sanitized_value input) -> Integer
 
-      # @rbs (untyped location, Symbol field) -> untyped
-      private def self.location_field: (untyped location, Symbol field) -> untyped
+      # @rbs (sanitized_value location, Symbol field) -> sanitized_value
+      private def self.location_field: (sanitized_value location, Symbol field) -> sanitized_value
 
-      # @rbs (String reason) -> Hash[String, untyped]
-      private def self.unavailable: (String reason) -> Hash[String, untyped]
+      # @rbs (String reason) -> Hash[String, json_value]
+      private def self.unavailable: (String reason) -> Hash[String, json_value]
 
-      # @rbs (Module owner, Symbol method_name, untyped receiver, *untyped args, **untyped keywords)
-      #   ?{ (*untyped) -> untyped } -> untyped
-      private def self.core_call: (Module owner, Symbol method_name, untyped receiver, *untyped args, **untyped keywords) ?{ (*untyped) -> untyped } -> untyped
+      # Reflection deliberately erases the receiver's method signature; callers validate
+      # returned values at each sanitization boundary.
+      # @rbs (Module owner, Symbol method_name, sanitized_value receiver, *sanitized_value, **sanitized_value)
+      #   ?{ (*sanitized_value) -> sanitized_value } -> sanitized_value
+      private def self.core_call: (Module owner, Symbol method_name, sanitized_value receiver, *sanitized_value, **sanitized_value) ?{ (*sanitized_value) -> sanitized_value } -> sanitized_value
     end
   end
 end

data/sig/ibex/runtime/generated_lexer.rbs

@@ -21,7 +21,7 @@ module Ibex
 
       @lexer_skip_requested: bool
 
-      @lexer_emission: Object | Array[untyped]
+      @lexer_emission: Object | Array[Object?]
 
       @lexer_lexeme: String?
 
@@ -43,16 +43,23 @@ module Ibex
       # @rbs (String | IO | Fiber source, ?file: String) -> self
       def lex: (String | IO | Fiber source, ?file: String) -> self
 
-      # Lex and parse one String, IO, or Fiber source.
-      # @rbs (String | IO | Fiber source, ?file: String) -> untyped
-      def parse: (String | IO | Fiber source, ?file: String) -> untyped
+      # Lex and semantically parse one String, IO, or Fiber source.
+      # Parser and generated lexer actions execute. Loading the generated file
+      # may also execute user sections; this trusted application path is not a
+      # sandbox.
+      # @rbs (String | IO | Fiber source, ?file: String) -> Object?
+      def parse: (String | IO | Fiber source, ?file: String) -> Object?
 
       # Parse one generated-lexer source and return its semantic and syntax results.
+      # Parser and generated lexer actions execute. This trusted application
+      # path is not a sandbox.
       # @rbs (String | IO | Fiber source, ?file: String) -> CST::ParseResult
       def parse_with_syntax: (String | IO | Fiber source, ?file: String) -> CST::ParseResult
 
       # Parse without executing parser production actions.
-      # Lexer actions still run because they define tokenization and lexer state.
+      # Generated lexer actions still run because they define tokenization and
+      # lexer state. Loading user sections and running lexer actions are trusted
+      # application boundaries, so this method is not a no-user-code sandbox.
       # @rbs (String source, ?file: String) -> CST::SyntaxResult
       def parse_syntax: (String source, ?file: String) -> CST::SyntaxResult
 
@@ -65,8 +72,8 @@ module Ibex
       def lexer_state=: (Symbol | String state) -> Symbol
 
       # Pull one token using longest match and declaration-order tie breaking.
-      # @rbs () -> [untyped, untyped, Hash[Symbol, untyped]]
-      def next_token: () -> [ untyped, untyped, Hash[Symbol, untyped] ]
+      # @rbs () -> [Object?, Object?, Hash[Symbol, Object?]]
+      def next_token: () -> [ Object?, Object?, Hash[Symbol, Object?] ]
 
       private
 
@@ -77,14 +84,14 @@ module Ibex
       # @rbs (CST::SourceText source_text, CST::NodeCache cache) -> CST::LexedSyntax
       def scan_syntax_with_cache: (CST::SourceText source_text, CST::NodeCache cache) -> CST::LexedSyntax
 
-      # @rbs (Integer token_id, untyped value, untyped location, CST::NodeCache cache) -> CST::GreenToken
-      def scanned_green_token: (Integer token_id, untyped value, untyped location, CST::NodeCache cache) -> CST::GreenToken
+      # @rbs (Integer token_id, Object? value, Object? location, CST::NodeCache cache) -> CST::GreenToken
+      def scanned_green_token: (Integer token_id, Object? value, Object? location, CST::NodeCache cache) -> CST::GreenToken
 
-      # @rbs (Array[CST::GreenToken] tokens, untyped location, CST::NodeCache cache) -> void
-      def replace_previous_scanned_trailing: (Array[CST::GreenToken] tokens, untyped location, CST::NodeCache cache) -> void
+      # @rbs (Array[CST::GreenToken] tokens, Object? location, CST::NodeCache cache) -> void
+      def replace_previous_scanned_trailing: (Array[CST::GreenToken] tokens, Object? location, CST::NodeCache cache) -> void
 
-      # @rbs (untyped location, Symbol key) -> Array[CST::GreenTrivia]
-      def scanned_green_trivia: (untyped location, Symbol key) -> Array[CST::GreenTrivia]
+      # @rbs (Object? location, Symbol key) -> Array[CST::GreenTrivia]
+      def scanned_green_trivia: (Object? location, Symbol key) -> Array[CST::GreenTrivia]
 
       # @rbs (LexerInput input) -> bool
       def ensure_lexer_data?: (LexerInput input) -> bool
@@ -102,13 +109,13 @@ module Ibex
       # @rbs (LexerInput input, String lexeme) -> Hash[Symbol, untyped]
       def consume_lexer_match: (LexerInput input, String lexeme) -> Hash[Symbol, untyped]
 
-      # @rbs (Hash[Symbol, untyped] rule, String lexeme, Hash[Symbol, untyped] location) ->
-      #   [untyped, untyped, Hash[Symbol, untyped]]?
-      def apply_lexer_rule: (Hash[Symbol, untyped] rule, String lexeme, Hash[Symbol, untyped] location) -> [ untyped, untyped, Hash[Symbol, untyped] ]?
+      # @rbs (Hash[Symbol, untyped] rule, String lexeme, Hash[Symbol, Object?] location) ->
+      #   [Object?, Object?, Hash[Symbol, Object?]]?
+      def apply_lexer_rule: (Hash[Symbol, untyped] rule, String lexeme, Hash[Symbol, Object?] location) -> [ Object?, Object?, Hash[Symbol, Object?] ]?
 
       # Emit a token from a lexer action.
-      # @rbs (untyped token, ?untyped value) -> untyped
-      def emit: (untyped token, ?untyped value) -> untyped
+      # @rbs (Object? token, ?Object? value) -> Object?
+      def emit: (Object? token, ?Object? value) -> Object?
 
       # Suppress the current match from a lexer action.
       # @rbs () -> nil
@@ -118,11 +125,11 @@ module Ibex
       # @rbs () -> String?
       def lexeme: () -> String?
 
-      # @rbs (String text, Hash[Symbol, untyped] location) -> void
-      def retain_cst_trivia: (String text, Hash[Symbol, untyped] location) -> void
+      # @rbs (String text, Hash[Symbol, Object?] location) -> void
+      def retain_cst_trivia: (String text, Hash[Symbol, Object?] location) -> void
 
-      # @rbs (Hash[Symbol, untyped] location) -> Hash[Symbol, untyped]
-      def attach_cst_trivia: (Hash[Symbol, untyped] location) -> Hash[Symbol, untyped]
+      # @rbs (Hash[Symbol, Object?] location) -> Hash[Symbol, Object?]
+      def attach_cst_trivia: (Hash[Symbol, Object?] location) -> Hash[Symbol, Object?]
 
       # @rbs () -> Symbol
       def cst_trivia_policy: () -> Symbol
@@ -159,8 +166,8 @@ module Ibex
       # @rbs () -> Hash[Symbol, Integer]
       def lexer_position: () -> Hash[Symbol, Integer]
 
-      # @rbs () -> Hash[Symbol, untyped]
-      def lexer_zero_width_location: () -> Hash[Symbol, untyped]
+      # @rbs () -> Hash[Symbol, Object?]
+      def lexer_zero_width_location: () -> Hash[Symbol, Object?]
 
       # @rbs (String lexeme) -> void
       def advance_lexer_position: (String lexeme) -> void

data/sig/ibex/runtime/lexer_input.rbs

@@ -34,8 +34,8 @@ module Ibex
       # @rbs () -> void
       def read_chunk: () -> void
 
-      # @rbs (Fiber source) -> untyped
-      def resume_fiber: (Fiber source) -> untyped
+      # @rbs (Fiber source) -> Object?
+      def resume_fiber: (Fiber source) -> Object?
 
       # @rbs (String chunk) -> void
       def append: (String chunk) -> void

data/sig/ibex/runtime/location_span.rbs

@@ -8,57 +8,57 @@ module Ibex
     # supplied by the lexer. A reduction wraps the outer boundaries in this
     # immutable value so actions can distinguish synthesized spans.
     class LocationSpan
-      attr_reader start: untyped
+      attr_reader start: Object?
 
-      attr_reader finish: untyped
+      attr_reader finish: Object?
 
-      # @rbs (start: untyped, finish: untyped, ?empty: bool) -> void
-      def initialize: (start: untyped, finish: untyped, ?empty: bool) -> void
+      # @rbs (start: Object?, finish: Object?, ?empty: bool) -> void
+      def initialize: (start: Object?, finish: Object?, ?empty: bool) -> void
 
       # Build a span for an LR reduction. Nonempty reductions cover the first
       # through last located RHS entry. Empty reductions are zero-width at the
       # current lookahead location.
-      # @rbs (Array[untyped] locations, lookahead: untyped) -> LocationSpan?
-      def self.for_reduction: (Array[untyped] locations, lookahead: untyped) -> LocationSpan?
+      # @rbs (Array[Object?] locations, lookahead: Object?) -> LocationSpan?
+      def self.for_reduction: (Array[Object?] locations, lookahead: Object?) -> LocationSpan?
 
       # Whether this is the zero-width span of an empty production.
       # @rbs () -> bool
       def empty?: () -> bool
 
-      # @rbs () -> untyped
-      def file: () -> untyped
+      # @rbs () -> Object?
+      def file: () -> Object?
 
-      # @rbs () -> untyped
-      def line: () -> untyped
+      # @rbs () -> Object?
+      def line: () -> Object?
 
-      # @rbs () -> untyped
-      def column: () -> untyped
+      # @rbs () -> Object?
+      def column: () -> Object?
 
-      # @rbs () -> untyped
-      def source_line: () -> untyped
+      # @rbs () -> Object?
+      def source_line: () -> Object?
 
-      # @rbs () -> untyped
-      def end_file: () -> untyped
+      # @rbs () -> Object?
+      def end_file: () -> Object?
 
-      # @rbs () -> untyped
-      def end_line: () -> untyped
+      # @rbs () -> Object?
+      def end_line: () -> Object?
 
-      # @rbs () -> untyped
-      def end_column: () -> untyped
+      # @rbs () -> Object?
+      def end_column: () -> Object?
 
-      # @rbs () -> Hash[Symbol, untyped]
-      def to_h: () -> Hash[Symbol, untyped]
+      # @rbs () -> Hash[Symbol, Object?]
+      def to_h: () -> Hash[Symbol, Object?]
 
-      # @rbs (untyped location) -> untyped
-      private def self.boundary_start: (untyped location) -> untyped
+      # @rbs (Object? location) -> Object?
+      private def self.boundary_start: (Object? location) -> Object?
 
-      # @rbs (untyped location) -> untyped
-      private def self.boundary_finish: (untyped location) -> untyped
+      # @rbs (Object? location) -> Object?
+      private def self.boundary_finish: (Object? location) -> Object?
 
       private
 
-      # @rbs (untyped location, Symbol key) -> untyped
-      def location_value: (untyped location, Symbol key) -> untyped
+      # @rbs (Object? location, Symbol key) -> Object?
+      def location_value: (Object? location, Symbol key) -> Object?
     end
   end
 end

data/sig/ibex/runtime/observation.rbs

@@ -22,8 +22,8 @@ module Ibex
 
       private
 
-      # @rbs (Symbol type, Hash[untyped, untyped] data, ?observers: Array[Proc]?) -> void
-      def emit_runtime_event: (Symbol type, Hash[untyped, untyped] data, ?observers: Array[Proc]?) -> void
+      # @rbs (Symbol type, Hash[Object?, Object?] data, ?observers: Array[Proc]?) -> void
+      def emit_runtime_event: (Symbol type, Hash[Object?, Object?] data, ?observers: Array[Proc]?) -> void
 
       # @rbs () -> Array[Proc]?
       def runtime_observer_snapshot: () -> Array[Proc]?