kobako 0.27.0 → 0.28.0

data/sig/kobako/runtime.rbs

@@ -15,20 +15,28 @@ module Kobako
     def eval: (
       Kobako::Transport::dispatch_proc dispatch,
       Array[String] paths,
-      String source,
-      Array[Kobako::Catalog::Snippets::tuple] snippets
+      Array[Kobako::Catalog::Snippets::tuple] snippets,
+      Array[Kobako::Catalog::Flags::tuple] flags,
+      String source
     ) -> Kobako::Runtime::Snapshot
 
     def run: (
       Kobako::Transport::dispatch_proc dispatch,
       Array[String] paths,
       Array[Kobako::Catalog::Snippets::tuple] snippets,
+      Array[Kobako::Catalog::Flags::tuple] flags,
       String entrypoint,
       String payload
     ) -> Kobako::Runtime::Snapshot
 
     def profile: () -> Symbol
 
+    def compile: (
+      Array[String] paths,
+      Array[Kobako::Catalog::Snippets::tuple] snippets,
+      Array[Kobako::Catalog::Flags::tuple] flags
+    ) -> Array[String]?
+
     # Frame-scoped guest re-entry handle the ext hands the dispatch Proc as
     # its last argument — the production conformer of
     # +Kobako::Transport::_GuestYielder+, answering the Yield Reply already
@@ -39,13 +47,9 @@ module Kobako
 
     # One invocation's result — the whole Snapshot the driver produced.
     class Snapshot
-      def outcome: () -> [Symbol, String, Kobako::Outcome::panic_fields?]
-
-      def trapped?: () -> bool
-
-      def trap_kind: () -> Symbol?
+      def outcome: () -> [String, Kobako::Outcome::panic_fields?]
 
-      def trap_message: () -> String?
+      def trap_error: () -> Kobako::TrapError?
 
       def wall_time: () -> Float
 

data/sig/kobako/sandbox.rbs

@@ -27,6 +27,8 @@ module Kobako
     def preload: (code: String, name: Symbol | String) -> Kobako::Sandbox
                | (binary: String) -> Kobako::Sandbox
 
+    def flag: (Symbol | String name, ?String value, ?advisory: bool) -> Kobako::Sandbox
+
     def run: (Symbol | String target, *untyped args, **untyped kwargs) ?{ (Kobako::Context) -> void } -> Kobako::Execution
 
     def eval: (String code) ?{ (Kobako::Context) -> void } -> Kobako::Execution
@@ -37,6 +39,8 @@ module Kobako
 
     def new_invocation: () -> Kobako::Context
 
+    def refuse_once_invoked!: (String verb) -> void
+
     def begin_invocation!: () -> void
   end
 end

data/sig/kobako/sandbox_options.rbs

@@ -39,12 +39,8 @@ module Kobako
 
     def normalize_timeout: ((Float | Integer)? timeout) -> Float?
 
-    def normalize_memory_limit: (Integer? memory_limit) -> Integer?
+    def normalize_byte_limit: (Integer? limit, String name) -> Integer?
 
-    def normalize_output_limit: (Integer? limit, String name) -> Integer?
-
-    def normalize_profile: (untyped profile) -> Symbol
-
-    def normalize_gvl: (untyped gvl) -> Symbol
+    def normalize_choice: (untyped value, Array[Symbol] choices, String name) -> Symbol
   end
 end

data/sig/kobako/transport/dispatcher.rbs

@@ -11,37 +11,33 @@ module Kobako
 
       OWN_FAULTS: Hash[singleton(StandardError), String]
 
+      def self.dispatch: (Kobako::Transport::Call call, Kobako::Transport::_ServiceResolver resolver, Kobako::Transport::_HandleTable handles, Kobako::Transport::_GuestYielder guest_yielder) -> [bool, String, String?]
 
+      private
 
+      def self.run: (Kobako::Transport::Call call, Kobako::Transport::_ServiceResolver resolver, Kobako::Transport::_HandleTable handles, Kobako::Transport::Yielder? yielder) -> untyped
 
-      def self?.dispatch: (Kobako::Transport::Call call, Kobako::Transport::_ServiceRegistry resolver, Kobako::Transport::_HandleTable handler, Kobako::Transport::_GuestYielder yield_to_guest) -> [bool, String, String?]
+      def self.decode_arguments: (String payload) -> [Kobako::Payload::Arguments, bool]
 
-      def self?.run: (Kobako::Transport::Call call, Kobako::Transport::_ServiceRegistry resolver, Kobako::Transport::_HandleTable handler, Kobako::Transport::Yielder? yielder) -> untyped
+      def self.resolve_call_args: (Kobako::Payload::Arguments arguments, Kobako::Codec::_HandleTable handles, bool carried_handle) -> [Array[untyped], Hash[Symbol, untyped]]
 
-      def self?.resolve_call_args: (Kobako::Payload::Arguments arguments, Kobako::Codec::_HandleTable handler, bool carried_handle) -> [Array[untyped], Hash[Symbol, untyped]]
+      def self.caught_fault: (StandardError error, Kobako::Transport::Yielder? yielder) -> [String, String]
 
-      def self?.decode_arguments: (String payload) -> [Kobako::Payload::Arguments, bool]
+      def self.invoke: (Kobako::Transport::Exposure exposure, String method, Array[untyped] args, Hash[Symbol, untyped] kwargs, Kobako::Transport::Yielder? yielder) -> untyped
 
-      def self?.caught_fault: (StandardError error, Kobako::Transport::Yielder? yielder) -> [String, String]
+      def self.reject_unreachable!: (Kobako::Transport::Exposure exposure, Symbol name) -> void
 
-      def self?.invoke: (Kobako::Transport::Exposure exposure, String method, Array[untyped] args, Hash[Symbol, untyped] kwargs, ?Kobako::Transport::Yielder? yielder) -> untyped
+      def self.resolve_arg: (untyped value, Kobako::Codec::_HandleTable handles) -> untyped
 
-      def self?.reject_unreachable!: (Kobako::Transport::Exposure exposure, Symbol name) -> void
+      def self.resolve_target: (String | Integer target, Kobako::Transport::_ServiceResolver resolver, Kobako::Transport::_HandleTable handles) -> Kobako::Transport::Exposure
 
+      def self.resolve_path: (String path, Kobako::Transport::_ServiceResolver resolver) -> Kobako::Transport::Exposure
 
-      def self?.resolve_arg: (untyped value, Kobako::Codec::_HandleTable handler) -> untyped
+      def self.resolve_handle: (Integer id, Kobako::Transport::_HandleTable handles) -> Kobako::Transport::Exposure
 
-      def self?.resolve_target: (String | Integer target, Kobako::Transport::_ServiceRegistry resolver, Kobako::Transport::_HandleTable handler) -> Kobako::Transport::Exposure
+      def self.encode_ok: (untyped value, Kobako::Codec::_HandleTable handles) -> String
 
-      def self?.resolve_path: (String path, Kobako::Transport::_ServiceRegistry resolver) -> Kobako::Transport::Exposure
-
-      def self?.resolve_handle: (Integer id, Kobako::Transport::_HandleTable handler) -> Kobako::Transport::Exposure
-
-      def self?.encode_ok: (untyped value, Kobako::Codec::_HandleTable handler) -> String
-
-      def self?.wrap_as_handle: (untyped value, Kobako::Codec::_HandleTable handler) -> Kobako::Handle
-
-      def self?.fault: (String type, String message) -> [String, String]
+      def self.fault: (String type, String message) -> [String, String]
     end
   end
 end

data/sig/kobako/transport/reflection.rbs

@@ -5,11 +5,13 @@ module Kobako
       GADGET_OWNERS: Array[Module]
       CALLABLE_ALLOW: Array[Symbol]
 
-      def self?.refusal: (Kobako::Transport::Exposure exposure, Symbol name) -> String?
+      def self.refusal: (Kobako::Transport::Exposure exposure, Symbol name) -> String?
 
-      def self?.ambient_refusal: (untyped target, Symbol name) -> String?
+      private
 
-      def self?.ambient_owner?: (Module owner, untyped target) -> bool
+      def self.ambient_refusal: (untyped target, Symbol name) -> String?
+
+      def self.ambient_owner?: (Module owner, untyped target) -> bool
     end
   end
 end

data/sig/kobako/transport/run.rbs

@@ -1,8 +1,6 @@
 module Kobako
   module Transport
     class Run < Data
-      NAME_PATTERN: Regexp
-
       attr_reader entrypoint: Symbol
       attr_reader args: Array[Kobako::Codec::wire_value]
       attr_reader kwargs: Hash[Symbol, Kobako::Codec::wire_value]
@@ -11,7 +9,7 @@ module Kobako
 
       def initialize: (entrypoint: Symbol | String, ?args: Array[untyped], ?kwargs: Hash[untyped, untyped]) -> void
 
-      def payload: (Kobako::Codec::_HandleTable handler) -> String
+      def payload: (Kobako::Codec::_HandleTable handles) -> String
 
       private
 

data/sig/kobako/transport/yielder.rbs

@@ -1,13 +1,13 @@
 module Kobako
   module Transport
     class Yielder
-      @yield_to_guest: Kobako::Transport::_GuestYielder
+      @guest_yielder: Kobako::Transport::_GuestYielder
       @break_tag: Symbol
-      @handler: Kobako::Codec::_HandleTable
+      @handles: Kobako::Codec::_HandleTable
       @active: bool
       @raised: Kobako::BlockError?
 
-      def initialize: (Kobako::Transport::_GuestYielder yield_to_guest, Symbol break_tag, Kobako::Codec::_HandleTable handler) -> void
+      def initialize: (Kobako::Transport::_GuestYielder guest_yielder, Symbol break_tag, Kobako::Codec::_HandleTable handles) -> void
 
       def fault_text: (Exception error) -> String?
 

data/sig/kobako/transport.rbs

@@ -1,7 +1,8 @@
 module Kobako
   module Transport
     # The guest re-entry callable a dispatch hands to a Yielder: invoked
-    # with the encoded yield args, it returns the encoded Yield Reply.
+    # with the encoded yield args, it returns the decoded Yield Reply as an
+    # +[arm, body, klass]+ triple.
     # The ext's Kobako::Runtime::GuestYielder is the production conformer;
     # modelled structurally so the Transport layer needs no upward
     # dependency on Runtime.
@@ -15,11 +16,11 @@ module Kobako
     # consumer (Runtime) cannot declare it differently.
     type dispatch_proc = ^(String | Integer, String, bool, String, _GuestYielder) -> [bool, String, String?]
 
-    # The Service registry a dispatch resolves constant-path targets
-    # against. The Sandbox's Kobako::Catalog::Services is the
-    # production conformer; modelled structurally so the Transport
-    # layer needs no upward dependency on Catalog.
-    interface _ServiceRegistry
+    # What a dispatch resolves constant-path targets against. The
+    # invocation's Kobako::Context is the production conformer, so its
+    # overrides answer before the Sandbox's bindings; modelled structurally
+    # so the Transport layer needs no upward dependency on Orchestration.
+    interface _ServiceResolver
       def lookup: (String target) -> Exposure
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kobako
 version: !ruby/object:Gem::Version
-  version: 0.27.0
+  version: 0.28.0
 platform: ruby
 authors:
 - Aotokitsuruya
@@ -72,12 +72,16 @@ files:
 - crates/kobako-transport/src/envelope.rs
 - crates/kobako-transport/src/envelope/bytes.rs
 - crates/kobako-transport/src/envelope/call.rs
+- crates/kobako-transport/src/envelope/compile_reply.rs
 - crates/kobako-transport/src/envelope/error_record.rs
 - crates/kobako-transport/src/envelope/fault.rs
-- crates/kobako-transport/src/envelope/invocation_frames.rs
 - crates/kobako-transport/src/envelope/outcome.rs
+- crates/kobako-transport/src/envelope/preamble.rs
 - crates/kobako-transport/src/envelope/reply.rs
+- crates/kobako-transport/src/envelope/request.rs
 - crates/kobako-transport/src/envelope/run.rs
+- crates/kobako-transport/src/envelope/tag.rs
+- crates/kobako-transport/src/envelope/unsupported.rs
 - crates/kobako-transport/src/lib.rs
 - crates/kobako-wasmtime/CHANGELOG.md
 - crates/kobako-wasmtime/Cargo.toml
@@ -90,12 +94,17 @@ files:
 - crates/kobako-wasmtime/src/dispatch.rs
 - crates/kobako-wasmtime/src/driver.rs
 - crates/kobako-wasmtime/src/exports.rs
-- crates/kobako-wasmtime/src/frames.rs
 - crates/kobako-wasmtime/src/guest_mem.rs
 - crates/kobako-wasmtime/src/instance_pre.rs
 - crates/kobako-wasmtime/src/invocation.rs
+- crates/kobako-wasmtime/src/io.rs
 - crates/kobako-wasmtime/src/lib.rs
+- crates/kobako-wasmtime/src/limiter.rs
 - crates/kobako-wasmtime/src/trap.rs
+- crates/kobako-wasmtime/tests/preamble_flags.rs
+- crates/kobako-wasmtime/tests/snippet_compile.rs
+- crates/kobako-wasmtime/tests/support/mod.rs
+- crates/kobako-wasmtime/tests/unsupported_call.rs
 - data/kobako.wasm
 - ext/kobako/Cargo.toml
 - ext/kobako/extconf.rb
@@ -108,6 +117,7 @@ files:
 - lib/kobako/capture.rb
 - lib/kobako/catalog.rb
 - lib/kobako/catalog/extensions.rb
+- lib/kobako/catalog/flags.rb
 - lib/kobako/catalog/handles.rb
 - lib/kobako/catalog/services.rb
 - lib/kobako/catalog/snippets.rb
@@ -120,6 +130,7 @@ files:
 - lib/kobako/codec/nesting.rb
 - lib/kobako/codec/state.rb
 - lib/kobako/codec/utils.rb
+- lib/kobako/constant_name.rb
 - lib/kobako/context.rb
 - lib/kobako/errors.rb
 - lib/kobako/execution.rb
@@ -147,11 +158,11 @@ files:
 - lib/kobako/usage.rb
 - lib/kobako/version.rb
 - release-please-config.json
-- rust-toolchain.toml
 - sig/kobako.rbs
 - sig/kobako/capture.rbs
 - sig/kobako/catalog.rbs
 - sig/kobako/catalog/extensions.rbs
+- sig/kobako/catalog/flags.rbs
 - sig/kobako/catalog/handles.rbs
 - sig/kobako/catalog/services.rbs
 - sig/kobako/catalog/snippets.rbs
@@ -164,6 +175,7 @@ files:
 - sig/kobako/codec/nesting.rbs
 - sig/kobako/codec/state.rbs
 - sig/kobako/codec/utils.rbs
+- sig/kobako/constant_name.rbs
 - sig/kobako/context.rbs
 - sig/kobako/errors.rbs
 - sig/kobako/execution.rbs

data/crates/kobako-transport/src/envelope/invocation_frames.rs

@@ -1,241 +0,0 @@
-//! The invocation frames — Frame 1's bound constant paths and Frame 3's
-//! preloaded snippets, the two both entry points read before running
-//! anything. The numbering skips Frame 2 because the `#eval` user source
-//! is raw UTF-8 with no envelope of its own.
-//!
-//! Both are mandatory-presence even when empty, so a reader never has to
-//! tell an absent frame from an empty one, and each frame's length reaches
-//! the guest from the channel's own prefix rather than from the envelope.
-
-use super::bytes::{Reader, Writer};
-use super::DecodeError;
-
-const SNIPPET_SOURCE: u8 = 0;
-const SNIPPET_BYTECODE: u8 = 1;
-
-/// Frame 1 — the bound constant paths the guest installs proxies from.
-/// Always present; an empty list means no Service is bound.
-#[derive(Debug, Clone, PartialEq, Eq, Default)]
-pub struct Bindings {
-    pub paths: Vec<String>,
-}
-
-impl Bindings {
-    pub fn decode(bytes: &[u8]) -> Result<Self, DecodeError> {
-        let mut reader = Reader::new(bytes);
-        let paths = reader.text_list()?;
-        reader.finish()?;
-        Ok(Bindings { paths })
-    }
-
-    pub fn encode(&self) -> Vec<u8> {
-        let mut writer = Writer::new();
-        writer.list(&self.paths);
-        writer.into_bytes()
-    }
-}
-
-/// One preloaded snippet. Source carries the filename the guest compiles
-/// under; bytecode does not, because its filename — when it has one — lives
-/// in the bytecode's own debug section.
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum Snippet {
-    Source { name: String, body: String },
-    Bytecode { body: Vec<u8> },
-}
-
-/// Frame 3 — the preloaded snippets, in insertion order. Always present;
-/// a zero count means nothing was preloaded.
-#[derive(Debug, Clone, PartialEq, Eq, Default)]
-pub struct Snippets {
-    pub entries: Vec<Snippet>,
-}
-
-impl Snippets {
-    pub fn decode(bytes: &[u8]) -> Result<Self, DecodeError> {
-        let mut reader = Reader::new(bytes);
-        let count = reader.u32()? as usize;
-        // Each entry costs at least a kind byte, so a count past the bytes
-        // left cannot be satisfied; refusing it bounds the allocation.
-        if count > reader.remaining().len() {
-            return Err(DecodeError::new(
-                "Frame 3 declares more entries than the frame holds",
-            ));
-        }
-        let mut entries = Vec::with_capacity(count);
-        for _ in 0..count {
-            entries.push(match reader.u8()? {
-                SNIPPET_SOURCE => Snippet::Source {
-                    name: reader.text()?.to_owned(),
-                    body: reader.text()?.to_owned(),
-                },
-                SNIPPET_BYTECODE => Snippet::Bytecode {
-                    body: reader.bytes()?.to_vec(),
-                },
-                _ => return Err(DecodeError::new("Frame 3 snippet kind must be 0 or 1")),
-            });
-        }
-        reader.finish()?;
-        Ok(Snippets { entries })
-    }
-
-    pub fn encode(&self) -> Vec<u8> {
-        let mut writer = Writer::new();
-        writer.u32(self.entries.len() as u32);
-        for entry in &self.entries {
-            match entry {
-                Snippet::Source { name, body } => {
-                    writer
-                        .u8(SNIPPET_SOURCE)
-                        .bytes(name.as_bytes())
-                        .bytes(body.as_bytes());
-                }
-                Snippet::Bytecode { body } => {
-                    writer.u8(SNIPPET_BYTECODE).bytes(body);
-                }
-            }
-        }
-        writer.into_bytes()
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    // @behavior WE-050
-    #[test]
-    fn empty_bindings_round_trip() {
-        let encoded = Bindings::default().encode();
-        assert_eq!(
-            Bindings::decode(&encoded),
-            Ok(Bindings::default()),
-            "a Sandbox with no bindings must send a present, empty Frame 1"
-        );
-    }
-
-    // @behavior WE-051
-    #[test]
-    fn bindings_round_trip_every_path() {
-        let bindings = Bindings {
-            paths: vec!["MyService::KV".into(), "File".into()],
-        };
-        let encoded = bindings.encode();
-        assert_eq!(
-            Bindings::decode(&encoded),
-            Ok(bindings),
-            "Frame 1 must carry every bound path in order"
-        );
-    }
-
-    // @behavior WE-052
-    #[test]
-    fn snippets_round_trip_both_kinds_in_order() {
-        let snippets = Snippets {
-            entries: vec![
-                Snippet::Source {
-                    name: "Helper".into(),
-                    body: "def helper; end".into(),
-                },
-                Snippet::Bytecode {
-                    body: vec![0x52, 0x49, 0x54, 0x45],
-                },
-            ],
-        };
-        let encoded = snippets.encode();
-        assert_eq!(
-            Snippets::decode(&encoded),
-            Ok(snippets),
-            "Frame 3 must carry source and bytecode entries in insertion order"
-        );
-    }
-
-    // @behavior WE-053
-    #[test]
-    fn an_empty_snippet_table_round_trips() {
-        let encoded = Snippets::default().encode();
-        assert_eq!(
-            Snippets::decode(&encoded),
-            Ok(Snippets::default()),
-            "a Sandbox with no preloads must send a present, zero-count Frame 3"
-        );
-    }
-
-    // @behavior WE-054
-    #[test]
-    fn golden_layout_pins_the_bindings_as_a_counted_list() {
-        let bindings = Bindings {
-            paths: vec!["A".into()],
-        };
-        assert_eq!(
-            bindings.encode(),
-            vec![
-                0, 0, 0, 1, // path count
-                0, 0, 0, 1, b'A',
-            ],
-            "Frame 1 must be a counted list of paths, so the count precedes the first entry"
-        );
-    }
-
-    // @behavior WE-055
-    #[test]
-    fn golden_layout_pins_the_snippet_entry_shape() {
-        let snippets = Snippets {
-            entries: vec![
-                Snippet::Source {
-                    name: "N".into(),
-                    body: "b".into(),
-                },
-                Snippet::Bytecode { body: vec![0x52] },
-            ],
-        };
-        assert_eq!(
-            snippets.encode(),
-            vec![
-                0, 0, 0, 2, // entry count
-                0, // kind: source
-                0, 0, 0, 1, b'N', // name, source only
-                0, 0, 0, 1, b'b', // body
-                1,    // kind: bytecode
-                0, 0, 0, 1, 0x52, // body, no name
-            ],
-            "a source entry must encode as kind byte 0 with a name and a bytecode entry as \
-             kind byte 1 with none, so the two stay distinguishable by their tag alone"
-        );
-    }
-
-    // @behavior WE-056
-    #[test]
-    fn an_unknown_snippet_kind_is_refused() {
-        let bytes = {
-            let mut w = Writer::new();
-            w.u32(1).u8(9);
-            w.into_bytes()
-        };
-        assert!(
-            Snippets::decode(&bytes).is_err(),
-            "a Frame 3 snippet kind that is neither source nor bytecode must be rejected"
-        );
-    }
-
-    // @behavior WE-057
-    #[test]
-    fn a_snippet_count_the_frame_cannot_satisfy_is_refused() {
-        let bytes = [0xff, 0xff, 0xff, 0xff];
-        assert!(
-            Snippets::decode(&bytes).is_err(),
-            "a Frame 3 count larger than the frame must be rejected before any allocation"
-        );
-    }
-
-    // @behavior WE-058
-    #[test]
-    fn trailing_bytes_after_a_frame_are_refused() {
-        let mut encoded = Bindings::default().encode();
-        encoded.push(0);
-        assert!(
-            Bindings::decode(&encoded).is_err(),
-            "bytes past Frame 1's last field must fail loudly as a framing desync"
-        );
-    }
-}