kobako 0.26.0-aarch64-linux → 0.28.0-aarch64-linux

data/sig/kobako/codec/ext_types.rbs

@@ -5,21 +5,23 @@ module Kobako
       EXT_HANDLE: Integer
       UNREPRESENTABLE_GUARD_ID: Integer
 
-      def self?.build_factory: () -> MessagePack::Factory
+      def self.build_factory: () -> MessagePack::Factory
 
-      def self?.pack_symbol: (Symbol symbol) -> String
+      private
 
-      def self?.unpack_symbol: (String payload) -> Symbol
+      def self.pack_symbol: (Symbol symbol) -> String
 
-      def self?.pack_handle: (Kobako::Handle handle) -> String
+      def self.unpack_symbol: (String payload) -> Symbol
 
-      def self?.unpack_handle: (String payload, State state) -> Kobako::Handle
+      def self.pack_handle: (Kobako::Handle handle) -> String
 
-      def self?.register_symbol: (MessagePack::Factory factory) -> void
+      def self.unpack_handle: (String payload, State state) -> Kobako::Handle
 
-      def self?.register_handle: (MessagePack::Factory factory) -> void
+      def self.register_symbol: (MessagePack::Factory factory) -> void
 
-      def self?.register_unrepresentable: (MessagePack::Factory factory) -> void
+      def self.register_handle: (MessagePack::Factory factory) -> void
+
+      def self.register_unrepresentable: (MessagePack::Factory factory) -> void
     end
 
     FACTORY: MessagePack::Factory

data/sig/kobako/codec/handle_walk.rbs

@@ -3,19 +3,21 @@ module Kobako
     module HandleWalk
       MSGPACK_INT_RANGE: Range[Integer]
 
-      def self?.representable?: (untyped value, ?Integer depth) -> bool
+      def self.representable?: (untyped value, ?Integer depth) -> bool
 
-      def self?.deep_wrap: (untyped value, Kobako::Codec::_HandleTable handler, ?Integer depth) -> untyped
+      def self.deep_wrap: (untyped value, Kobako::Codec::_HandleTable handles, ?Integer depth) -> untyped
 
-      def self?.guard_nesting!: (Integer depth) -> void
+      def self.deep_restore: (untyped value, Kobako::Codec::_HandleTable handles) -> untyped
 
-      def self?.deep_wrap_hash: (Hash[untyped, untyped] hash, Kobako::Codec::_HandleTable handler, Integer depth) -> Hash[untyped, untyped]
+      private
 
-      def self?.deep_restore: (untyped value, Kobako::Codec::_HandleTable handler) -> untyped
+      def self.guard_nesting!: (Integer depth) -> void
 
-      def self?.primitive_type?: (untyped value) -> bool
+      def self.deep_wrap_hash: (Hash[untyped, untyped] hash, Kobako::Codec::_HandleTable handles, Integer depth) -> Hash[untyped, untyped]
 
-      def self?.container_representable?: (untyped value, Integer depth) -> bool
+      def self.primitive_type?: (untyped value) -> bool
+
+      def self.container_representable?: (untyped value, Integer depth) -> bool
     end
   end
 end

data/sig/kobako/codec/utils.rbs

@@ -1,9 +1,9 @@
 module Kobako
   module Codec
     module Utils
-      def self?.assert_utf8!: (String string, String label) -> void
+      def self.assert_utf8!: (String string, String label) -> void
 
-      def self?.with_boundary: [T] () { () -> T } -> T
+      def self.with_boundary: [T] () { () -> T } -> T
     end
   end
 end

data/sig/kobako/codec.rbs

@@ -17,8 +17,8 @@ module Kobako
     # The Handle allocator/resolver a wire walk works against: alloc
     # registers a non-wire-representable object and returns its Handle,
     # fetch resolves a wire Handle id back to the live object. The
-    # Sandbox's Kobako::Catalog::Handles is the production conformer;
-    # modelled structurally so the Codec and Transport tiers need no
+    # Kobako::Catalog::Handles each invocation mints is the production
+    # conformer; modelled structurally so the Codec and Transport tiers need no
     # upward dependency on Catalog.
     interface _HandleTable
       def alloc: (untyped object) -> Kobako::Handle

data/sig/kobako/constant_name.rbs

@@ -0,0 +1,3 @@
+module Kobako
+  CONSTANT_NAME: Regexp
+end

data/sig/kobako/context.rbs

@@ -4,6 +4,7 @@ module Kobako
       runtime: Kobako::Runtime,
       services: Kobako::Catalog::Services,
       snippets: Kobako::Catalog::Snippets,
+      flags: Kobako::Catalog::Flags,
       extensions: Kobako::Catalog::Extensions
     ) -> void
 
@@ -23,9 +24,7 @@ module Kobako
 
     def populate_observability!: (Kobako::Runtime::Snapshot snapshot) -> void
 
-    def trap_class_for: (Kobako::TrapError err) -> singleton(Kobako::TrapError)
-
-    def trap_error_for: (Kobako::Runtime::Snapshot snapshot, Symbol verb) -> Kobako::TrapError
+    def with_verb: (Kobako::TrapError err, Symbol verb) -> Kobako::TrapError
 
     def build_execution: (untyped value, failed: bool) -> Kobako::Execution
 

data/sig/kobako/errors.rbs

@@ -60,12 +60,18 @@ module Kobako
   class YieldValueError < Error
   end
 
+  class UnsupportedError < Error
+  end
+
   class HandleExhaustedError < SandboxError
   end
 
   class BytecodeError < SandboxError
   end
 
+  class UnsupportedFlagError < SandboxError
+  end
+
   class UndefinedEntrypointError < SandboxError
     attr_reader name: Symbol?
     attr_reader available: Array[Symbol]

data/sig/kobako/outcome.rbs

@@ -6,18 +6,16 @@ module Kobako
 
     type panic_fields = [String, String, String, Array[String], Array[String]]
 
-    def self?.reify: (Symbol kind, String payload, panic_fields? panic, ?entrypoint: Symbol?) -> Kobako::Codec::wire_value
+    def self.reify: (String payload, panic_fields? panic, ?entrypoint: Symbol?) -> Kobako::Codec::wire_value
 
-    # Everything below is private_class_method at runtime; RBS cannot mark a
-    # `self?` method private, so the declarations stay visible to the checker.
-    def self?.panic_error: (panic_fields panic, Symbol? entrypoint) -> (SandboxError | ServiceError)
+    private
 
-    def self?.error_class: (String origin, String klass) -> (singleton(SandboxError) | singleton(ServiceError))
+    def self.panic_error: (panic_fields panic, Symbol? entrypoint) -> (SandboxError | ServiceError)
 
-    def self?.trap_error: (Symbol kind) -> TrapError
+    def self.error_class: (String origin, String klass) -> (singleton(SandboxError) | singleton(ServiceError))
 
-    def self?.decode_value: (String payload) -> Kobako::Codec::wire_value
+    def self.decode_value: (String payload) -> Kobako::Codec::wire_value
 
-    def self?.wire_error: (String message, ?diagnostic: String?) -> Transport::Error
+    def self.wire_error: (String message, ?diagnostic: String?) -> Transport::Error
   end
 end

data/sig/kobako/runtime.rbs

@@ -15,20 +15,28 @@ module Kobako
     def eval: (
       Kobako::Transport::dispatch_proc dispatch,
       Array[String] paths,
-      String source,
-      Array[Kobako::Catalog::Snippets::tuple] snippets
+      Array[Kobako::Catalog::Snippets::tuple] snippets,
+      Array[Kobako::Catalog::Flags::tuple] flags,
+      String source
     ) -> Kobako::Runtime::Snapshot
 
     def run: (
       Kobako::Transport::dispatch_proc dispatch,
       Array[String] paths,
       Array[Kobako::Catalog::Snippets::tuple] snippets,
+      Array[Kobako::Catalog::Flags::tuple] flags,
       String entrypoint,
       String payload
     ) -> Kobako::Runtime::Snapshot
 
     def profile: () -> Symbol
 
+    def compile: (
+      Array[String] paths,
+      Array[Kobako::Catalog::Snippets::tuple] snippets,
+      Array[Kobako::Catalog::Flags::tuple] flags
+    ) -> Array[String]?
+
     # Frame-scoped guest re-entry handle the ext hands the dispatch Proc as
     # its last argument — the production conformer of
     # +Kobako::Transport::_GuestYielder+, answering the Yield Reply already
@@ -39,13 +47,9 @@ module Kobako
 
     # One invocation's result — the whole Snapshot the driver produced.
     class Snapshot
-      def outcome: () -> [Symbol, String, Kobako::Outcome::panic_fields?]
-
-      def trapped?: () -> bool
-
-      def trap_kind: () -> Symbol?
+      def outcome: () -> [String, Kobako::Outcome::panic_fields?]
 
-      def trap_message: () -> String?
+      def trap_error: () -> Kobako::TrapError?
 
       def wall_time: () -> Float
 

data/sig/kobako/sandbox.rbs

@@ -27,6 +27,8 @@ module Kobako
     def preload: (code: String, name: Symbol | String) -> Kobako::Sandbox
                | (binary: String) -> Kobako::Sandbox
 
+    def flag: (Symbol | String name, ?String value, ?advisory: bool) -> Kobako::Sandbox
+
     def run: (Symbol | String target, *untyped args, **untyped kwargs) ?{ (Kobako::Context) -> void } -> Kobako::Execution
 
     def eval: (String code) ?{ (Kobako::Context) -> void } -> Kobako::Execution
@@ -37,6 +39,8 @@ module Kobako
 
     def new_invocation: () -> Kobako::Context
 
+    def refuse_once_invoked!: (String verb) -> void
+
     def begin_invocation!: () -> void
   end
 end

data/sig/kobako/sandbox_options.rbs

@@ -39,12 +39,8 @@ module Kobako
 
     def normalize_timeout: ((Float | Integer)? timeout) -> Float?
 
-    def normalize_memory_limit: (Integer? memory_limit) -> Integer?
+    def normalize_byte_limit: (Integer? limit, String name) -> Integer?
 
-    def normalize_output_limit: (Integer? limit, String name) -> Integer?
-
-    def normalize_profile: (untyped profile) -> Symbol
-
-    def normalize_gvl: (untyped gvl) -> Symbol
+    def normalize_choice: (untyped value, Array[Symbol] choices, String name) -> Symbol
   end
 end

data/sig/kobako/transport/dispatcher.rbs

@@ -11,37 +11,33 @@ module Kobako
 
       OWN_FAULTS: Hash[singleton(StandardError), String]
 
+      def self.dispatch: (Kobako::Transport::Call call, Kobako::Transport::_ServiceResolver resolver, Kobako::Transport::_HandleTable handles, Kobako::Transport::_GuestYielder guest_yielder) -> [bool, String, String?]
 
+      private
 
+      def self.run: (Kobako::Transport::Call call, Kobako::Transport::_ServiceResolver resolver, Kobako::Transport::_HandleTable handles, Kobako::Transport::Yielder? yielder) -> untyped
 
-      def self?.dispatch: (Kobako::Transport::Call call, Kobako::Transport::_ServiceRegistry resolver, Kobako::Transport::_HandleTable handler, Kobako::Transport::_GuestYielder yield_to_guest) -> [bool, String, String?]
+      def self.decode_arguments: (String payload) -> [Kobako::Payload::Arguments, bool]
 
-      def self?.run: (Kobako::Transport::Call call, Kobako::Transport::_ServiceRegistry resolver, Kobako::Transport::_HandleTable handler, Kobako::Transport::Yielder? yielder) -> untyped
+      def self.resolve_call_args: (Kobako::Payload::Arguments arguments, Kobako::Codec::_HandleTable handles, bool carried_handle) -> [Array[untyped], Hash[Symbol, untyped]]
 
-      def self?.resolve_call_args: (Kobako::Payload::Arguments arguments, Kobako::Codec::_HandleTable handler, bool carried_handle) -> [Array[untyped], Hash[Symbol, untyped]]
+      def self.caught_fault: (StandardError error, Kobako::Transport::Yielder? yielder) -> [String, String]
 
-      def self?.decode_arguments: (String payload) -> [Kobako::Payload::Arguments, bool]
+      def self.invoke: (Kobako::Transport::Exposure exposure, String method, Array[untyped] args, Hash[Symbol, untyped] kwargs, Kobako::Transport::Yielder? yielder) -> untyped
 
-      def self?.caught_fault: (StandardError error, Kobako::Transport::Yielder? yielder) -> [String, String]
+      def self.reject_unreachable!: (Kobako::Transport::Exposure exposure, Symbol name) -> void
 
-      def self?.invoke: (Kobako::Transport::Exposure exposure, String method, Array[untyped] args, Hash[Symbol, untyped] kwargs, ?Kobako::Transport::Yielder? yielder) -> untyped
+      def self.resolve_arg: (untyped value, Kobako::Codec::_HandleTable handles) -> untyped
 
-      def self?.reject_unreachable!: (Kobako::Transport::Exposure exposure, Symbol name) -> void
+      def self.resolve_target: (String | Integer target, Kobako::Transport::_ServiceResolver resolver, Kobako::Transport::_HandleTable handles) -> Kobako::Transport::Exposure
 
+      def self.resolve_path: (String path, Kobako::Transport::_ServiceResolver resolver) -> Kobako::Transport::Exposure
 
-      def self?.resolve_arg: (untyped value, Kobako::Codec::_HandleTable handler) -> untyped
+      def self.resolve_handle: (Integer id, Kobako::Transport::_HandleTable handles) -> Kobako::Transport::Exposure
 
-      def self?.resolve_target: (String | Integer target, Kobako::Transport::_ServiceRegistry resolver, Kobako::Transport::_HandleTable handler) -> Kobako::Transport::Exposure
+      def self.encode_ok: (untyped value, Kobako::Codec::_HandleTable handles) -> String
 
-      def self?.resolve_path: (String path, Kobako::Transport::_ServiceRegistry resolver) -> Kobako::Transport::Exposure
-
-      def self?.resolve_handle: (Integer id, Kobako::Transport::_HandleTable handler) -> Kobako::Transport::Exposure
-
-      def self?.encode_ok: (untyped value, Kobako::Codec::_HandleTable handler) -> String
-
-      def self?.wrap_as_handle: (untyped value, Kobako::Codec::_HandleTable handler) -> Kobako::Handle
-
-      def self?.fault: (String type, String message) -> [String, String]
+      def self.fault: (String type, String message) -> [String, String]
     end
   end
 end

data/sig/kobako/transport/reflection.rbs

@@ -5,11 +5,13 @@ module Kobako
       GADGET_OWNERS: Array[Module]
       CALLABLE_ALLOW: Array[Symbol]
 
-      def self?.refusal: (Kobako::Transport::Exposure exposure, Symbol name) -> String?
+      def self.refusal: (Kobako::Transport::Exposure exposure, Symbol name) -> String?
 
-      def self?.ambient_refusal: (untyped target, Symbol name) -> String?
+      private
 
-      def self?.ambient_owner?: (Module owner, untyped target) -> bool
+      def self.ambient_refusal: (untyped target, Symbol name) -> String?
+
+      def self.ambient_owner?: (Module owner, untyped target) -> bool
     end
   end
 end

data/sig/kobako/transport/run.rbs

@@ -1,8 +1,6 @@
 module Kobako
   module Transport
     class Run < Data
-      NAME_PATTERN: Regexp
-
       attr_reader entrypoint: Symbol
       attr_reader args: Array[Kobako::Codec::wire_value]
       attr_reader kwargs: Hash[Symbol, Kobako::Codec::wire_value]
@@ -11,7 +9,7 @@ module Kobako
 
       def initialize: (entrypoint: Symbol | String, ?args: Array[untyped], ?kwargs: Hash[untyped, untyped]) -> void
 
-      def payload: (Kobako::Codec::_HandleTable handler) -> String
+      def payload: (Kobako::Codec::_HandleTable handles) -> String
 
       private
 

data/sig/kobako/transport/yielder.rbs

@@ -1,13 +1,13 @@
 module Kobako
   module Transport
     class Yielder
-      @yield_to_guest: Kobako::Transport::_GuestYielder
+      @guest_yielder: Kobako::Transport::_GuestYielder
       @break_tag: Symbol
-      @handler: Kobako::Codec::_HandleTable
+      @handles: Kobako::Codec::_HandleTable
       @active: bool
       @raised: Kobako::BlockError?
 
-      def initialize: (Kobako::Transport::_GuestYielder yield_to_guest, Symbol break_tag, Kobako::Codec::_HandleTable handler) -> void
+      def initialize: (Kobako::Transport::_GuestYielder guest_yielder, Symbol break_tag, Kobako::Codec::_HandleTable handles) -> void
 
       def fault_text: (Exception error) -> String?
 

data/sig/kobako/transport.rbs

@@ -1,7 +1,8 @@
 module Kobako
   module Transport
     # The guest re-entry callable a dispatch hands to a Yielder: invoked
-    # with the encoded yield args, it returns the encoded Yield Reply.
+    # with the encoded yield args, it returns the decoded Yield Reply as an
+    # +[arm, body, klass]+ triple.
     # The ext's Kobako::Runtime::GuestYielder is the production conformer;
     # modelled structurally so the Transport layer needs no upward
     # dependency on Runtime.
@@ -15,11 +16,11 @@ module Kobako
     # consumer (Runtime) cannot declare it differently.
     type dispatch_proc = ^(String | Integer, String, bool, String, _GuestYielder) -> [bool, String, String?]
 
-    # The Service registry a dispatch resolves constant-path targets
-    # against. The Sandbox's Kobako::Catalog::Services is the
-    # production conformer; modelled structurally so the Transport
-    # layer needs no upward dependency on Catalog.
-    interface _ServiceRegistry
+    # What a dispatch resolves constant-path targets against. The
+    # invocation's Kobako::Context is the production conformer, so its
+    # overrides answer before the Sandbox's bindings; modelled structurally
+    # so the Transport layer needs no upward dependency on Orchestration.
+    interface _ServiceResolver
       def lookup: (String target) -> Exposure
     end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: kobako
 version: !ruby/object:Gem::Version
-  version: 0.26.0
+  version: 0.28.0
 platform: aarch64-linux
 authors:
 - Aotokitsuruya
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2026-09-15 00:00:00.000000000 Z
+date: 2026-10-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: msgpack
@@ -53,6 +53,7 @@ files:
 - lib/kobako/capture.rb
 - lib/kobako/catalog.rb
 - lib/kobako/catalog/extensions.rb
+- lib/kobako/catalog/flags.rb
 - lib/kobako/catalog/handles.rb
 - lib/kobako/catalog/services.rb
 - lib/kobako/catalog/snippets.rb
@@ -65,6 +66,7 @@ files:
 - lib/kobako/codec/nesting.rb
 - lib/kobako/codec/state.rb
 - lib/kobako/codec/utils.rb
+- lib/kobako/constant_name.rb
 - lib/kobako/context.rb
 - lib/kobako/errors.rb
 - lib/kobako/execution.rb
@@ -92,11 +94,11 @@ files:
 - lib/kobako/usage.rb
 - lib/kobako/version.rb
 - release-please-config.json
-- rust-toolchain.toml
 - sig/kobako.rbs
 - sig/kobako/capture.rbs
 - sig/kobako/catalog.rbs
 - sig/kobako/catalog/extensions.rbs
+- sig/kobako/catalog/flags.rbs
 - sig/kobako/catalog/handles.rbs
 - sig/kobako/catalog/services.rbs
 - sig/kobako/catalog/snippets.rbs
@@ -109,6 +111,7 @@ files:
 - sig/kobako/codec/nesting.rbs
 - sig/kobako/codec/state.rbs
 - sig/kobako/codec/utils.rbs
+- sig/kobako/constant_name.rbs
 - sig/kobako/context.rbs
 - sig/kobako/errors.rbs
 - sig/kobako/execution.rbs

data/rust-toolchain.toml

@@ -1,11 +0,0 @@
-# Pin the Rust toolchain so local builds and CI stay byte-identical.
-# The wasm32-wasip1 crt1-command.o references __wasi_init_tp from 1.96 onward;
-# vendored wasi-sdk 33's libc.a supplies that symbol, so the two move together.
-# Bump this in lockstep with the wasi-sdk toolchain beni vendors
-# (`rake beni:build`, wired in the Rakefile's Beni::Tasks block).
-# This file is the single source of the channel; the CI workflows read it.
-[toolchain]
-channel = "stable"
-components = ["clippy", "rustfmt"]
-targets = ["wasm32-wasip1"]
-profile = "minimal"