kobako 0.27.0 → 0.29.0

data/sig/kobako/snapshot.rbs

@@ -0,0 +1,20 @@
+module Kobako
+  # One invocation's result — the whole Snapshot the driver produced.
+  class Snapshot
+    def outcome: () -> [String, Kobako::Outcome::panic_fields?]
+
+    def trap_error: () -> Kobako::TrapError?
+
+    def wall_time: () -> Float
+
+    def memory_peak: () -> Integer
+
+    def stdout: () -> String
+
+    def stdout_truncated?: () -> bool
+
+    def stderr: () -> String
+
+    def stderr_truncated?: () -> bool
+  end
+end

data/sig/kobako/snippet/bytecode.rbs

@@ -0,0 +1,12 @@
+module Kobako
+  module Snippet
+    class Bytecode < Data
+      KIND: Symbol
+
+      attr_reader body: String
+
+      def self.new: (body: String) -> Bytecode
+                  | (String body) -> Bytecode
+    end
+  end
+end

data/sig/kobako/transport/block_failure.rbs

@@ -0,0 +1,13 @@
+module Kobako
+  module Transport
+    class BlockFailure
+      @raised: Kobako::BlockError?
+
+      def initialize: () -> void
+
+      def remember: (Kobako::BlockError error) -> Kobako::BlockError
+
+      def fault_text: (Exception error) -> String?
+    end
+  end
+end

data/sig/kobako/transport/dispatcher.rbs

@@ -9,39 +9,35 @@ module Kobako
 
       BREAK_THROW: Symbol
 
-      OWN_FAULTS: Hash[singleton(StandardError), String]
+      BARE_FAULTS: Hash[singleton(StandardError), String]
 
+      def self.dispatch: (Kobako::Transport::Call call, Kobako::Transport::_ServiceResolver resolver, Kobako::Transport::_HandleTable handles, Kobako::Transport::BlockFailure failure, Kobako::Transport::_GuestYielder guest_yielder) -> [Symbol, String, String?]
 
+      private
 
+      def self.run: (Kobako::Transport::Call call, Kobako::Transport::_ServiceResolver resolver, Kobako::Transport::_HandleTable handles, Kobako::Transport::Yielder? yielder) -> untyped
 
-      def self?.dispatch: (Kobako::Transport::Call call, Kobako::Transport::_ServiceRegistry resolver, Kobako::Transport::_HandleTable handler, Kobako::Transport::_GuestYielder yield_to_guest) -> [bool, String, String?]
+      def self.decode_arguments: (String payload) -> [Kobako::Payload::Arguments, bool]
 
-      def self?.run: (Kobako::Transport::Call call, Kobako::Transport::_ServiceRegistry resolver, Kobako::Transport::_HandleTable handler, Kobako::Transport::Yielder? yielder) -> untyped
+      def self.resolve_call_args: (Kobako::Payload::Arguments arguments, Kobako::Codec::_HandleTable handles, bool carried_handle) -> [Array[untyped], Hash[Symbol, untyped]]
 
-      def self?.resolve_call_args: (Kobako::Payload::Arguments arguments, Kobako::Codec::_HandleTable handler, bool carried_handle) -> [Array[untyped], Hash[Symbol, untyped]]
+      def self.caught_fault: (StandardError error, Kobako::Transport::BlockFailure failure) -> [String, String]
 
-      def self?.decode_arguments: (String payload) -> [Kobako::Payload::Arguments, bool]
+      def self.invoke: (Kobako::Transport::Exposure exposure, String method, Array[untyped] args, Hash[Symbol, untyped] kwargs, Kobako::Transport::Yielder? yielder) -> untyped
 
-      def self?.caught_fault: (StandardError error, Kobako::Transport::Yielder? yielder) -> [String, String]
+      def self.reject_unreachable!: (Kobako::Transport::Exposure exposure, Symbol name) -> void
 
-      def self?.invoke: (Kobako::Transport::Exposure exposure, String method, Array[untyped] args, Hash[Symbol, untyped] kwargs, ?Kobako::Transport::Yielder? yielder) -> untyped
+      def self.resolve_arg: (untyped value, Kobako::Codec::_HandleTable handles) -> untyped
 
-      def self?.reject_unreachable!: (Kobako::Transport::Exposure exposure, Symbol name) -> void
+      def self.resolve_target: (String | Integer target, Kobako::Transport::_ServiceResolver resolver, Kobako::Transport::_HandleTable handles) -> Kobako::Transport::Exposure
 
+      def self.resolve_path: (String path, Kobako::Transport::_ServiceResolver resolver) -> Kobako::Transport::Exposure
 
-      def self?.resolve_arg: (untyped value, Kobako::Codec::_HandleTable handler) -> untyped
+      def self.resolve_handle: (Integer id, Kobako::Transport::_HandleTable handles) -> Kobako::Transport::Exposure
 
-      def self?.resolve_target: (String | Integer target, Kobako::Transport::_ServiceRegistry resolver, Kobako::Transport::_HandleTable handler) -> Kobako::Transport::Exposure
+      def self.encode_ok: (untyped value, Kobako::Codec::_HandleTable handles) -> String
 
-      def self?.resolve_path: (String path, Kobako::Transport::_ServiceRegistry resolver) -> Kobako::Transport::Exposure
-
-      def self?.resolve_handle: (Integer id, Kobako::Transport::_HandleTable handler) -> Kobako::Transport::Exposure
-
-      def self?.encode_ok: (untyped value, Kobako::Codec::_HandleTable handler) -> String
-
-      def self?.wrap_as_handle: (untyped value, Kobako::Codec::_HandleTable handler) -> Kobako::Handle
-
-      def self?.fault: (String type, String message) -> [String, String]
+      def self.fault: (String type, String message) -> [String, String]
     end
   end
 end

data/sig/kobako/transport/exposure.rbs

@@ -37,7 +37,7 @@ module Kobako
 
       def self.with_singleton: (untyped object, Set[Symbol] names) -> Set[Symbol]
 
-      def self.authored: (Module owner) -> Array[Symbol]
+      def self.authored_names:(Module owner) -> Array[Symbol]
     end
   end
 end

data/sig/kobako/transport/reflection.rbs

@@ -1,15 +1,30 @@
 module Kobako
   module Transport
     module Reflection
-      META_OWNERS: Array[Module]
       GADGET_OWNERS: Array[Module]
       CALLABLE_ALLOW: Array[Symbol]
 
-      def self?.refusal: (Kobako::Transport::Exposure exposure, Symbol name) -> String?
+      def self.refusal: (Kobako::Transport::Exposure exposure, Symbol name) -> String?
 
-      def self?.ambient_refusal: (untyped target, Symbol name) -> String?
+      def self.authored?: (UnboundMethod method) -> bool
 
-      def self?.ambient_owner?: (Module owner, untyped target) -> bool
+      private
+
+      def self.ambient_copy?: (UnboundMethod method) -> bool
+
+      def self.ambient_refusal: (untyped target, Symbol name) -> String?
+
+      def self.defined_refusal: (untyped target, Symbol name, Module klass) -> String?
+
+      def self.authored_for?: (untyped target, Symbol name, UnboundMethod method, Module klass) -> bool
+
+      def self.refused: (Symbol name) -> String
+
+      def self.owner_refusal: (untyped target, Symbol name, Module owner) -> String?
+
+      def self.lookup_class: (untyped target) -> Module
+
+      def self.ambient_owner?: (Module owner, untyped target) -> bool
     end
   end
 end

data/sig/kobako/transport/run.rbs

@@ -1,8 +1,6 @@
 module Kobako
   module Transport
     class Run < Data
-      NAME_PATTERN: Regexp
-
       attr_reader entrypoint: Symbol
       attr_reader args: Array[Kobako::Codec::wire_value]
       attr_reader kwargs: Hash[Symbol, Kobako::Codec::wire_value]
@@ -11,7 +9,7 @@ module Kobako
 
       def initialize: (entrypoint: Symbol | String, ?args: Array[untyped], ?kwargs: Hash[untyped, untyped]) -> void
 
-      def payload: (Kobako::Codec::_HandleTable handler) -> String
+      def payload: (Kobako::Codec::_HandleTable handles) -> String
 
       private
 

data/sig/kobako/transport/yielder.rbs

@@ -1,28 +1,24 @@
 module Kobako
   module Transport
     class Yielder
-      @yield_to_guest: Kobako::Transport::_GuestYielder
+      @guest_yielder: Kobako::Transport::_GuestYielder
       @break_tag: Symbol
-      @handler: Kobako::Codec::_HandleTable
+      @handles: Kobako::Codec::_HandleTable
+      @failure: Kobako::Transport::BlockFailure
       @active: bool
-      @raised: Kobako::BlockError?
 
-      def initialize: (Kobako::Transport::_GuestYielder yield_to_guest, Symbol break_tag, Kobako::Codec::_HandleTable handler) -> void
-
-      def fault_text: (Exception error) -> String?
+      def initialize: (Kobako::Transport::_GuestYielder guest_yielder, Symbol break_tag, Kobako::Codec::_HandleTable handles, Kobako::Transport::BlockFailure failure) -> void
 
       def yield: (*untyped args) -> untyped
 
       def to_proc: () -> Proc
 
-      def invalidate!: () -> void
+      def invalidate: () -> void
 
       private
 
       def encode_args: (Array[untyped] args) -> String
 
-      def remember: (Kobako::BlockError error) -> Kobako::BlockError
-
       def decode_body: (String body) -> [untyped, bool]
 
       def restore: (untyped value, bool carried_handle) -> untyped

data/sig/kobako/transport.rbs

@@ -1,8 +1,9 @@
 module Kobako
   module Transport
     # The guest re-entry callable a dispatch hands to a Yielder: invoked
-    # with the encoded yield args, it returns the encoded Yield Reply.
-    # The ext's Kobako::Runtime::GuestYielder is the production conformer;
+    # with the encoded yield args, it returns the decoded Yield Reply as an
+    # +[arm, body, klass]+ triple.
+    # The ext's Kobako::GuestYielder is the production conformer;
     # modelled structurally so the Transport layer needs no upward
     # dependency on Runtime.
     interface _GuestYielder
@@ -13,13 +14,13 @@ module Kobako
     # side already decoded off the core envelope and answering the arm and
     # body it puts on the Reply. Named here so the producer (Context) and the
     # consumer (Runtime) cannot declare it differently.
-    type dispatch_proc = ^(String | Integer, String, bool, String, _GuestYielder) -> [bool, String, String?]
+    type dispatch_proc = ^(String | Integer, String, bool, String, _GuestYielder) -> [Symbol, String, String?]
 
-    # The Service registry a dispatch resolves constant-path targets
-    # against. The Sandbox's Kobako::Catalog::Services is the
-    # production conformer; modelled structurally so the Transport
-    # layer needs no upward dependency on Catalog.
-    interface _ServiceRegistry
+    # What a dispatch resolves constant-path targets against. The
+    # invocation's Kobako::Context is the production conformer, so its
+    # overrides answer before the Sandbox's bindings; modelled structurally
+    # so the Transport layer needs no upward dependency on Orchestration.
+    interface _ServiceResolver
       def lookup: (String target) -> Exposure
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kobako
 version: !ruby/object:Gem::Version
-  version: 0.27.0
+  version: 0.29.0
 platform: ruby
 authors:
 - Aotokitsuruya
@@ -13,16 +13,22 @@ dependencies:
   name: msgpack
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.8.2
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '1.7'
+        version: '2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.8.2
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '1.7'
+        version: '2'
 - !ruby/object:Gem::Dependency
   name: rb_sys
   requirement: !ruby/object:Gem::Requirement
@@ -60,7 +66,18 @@ files:
 - crates/kobako-runtime/README.md
 - crates/kobako-runtime/src/dispatch.rs
 - crates/kobako-runtime/src/error.rs
+- crates/kobako-runtime/src/filesystem.rs
+- crates/kobako-runtime/src/filesystem/directory.rs
+- crates/kobako-runtime/src/filesystem/directory/spelling.rs
+- crates/kobako-runtime/src/filesystem/memory.rs
+- crates/kobako-runtime/src/filesystem/overlay.rs
+- crates/kobako-runtime/src/filesystem/overlay/exclusive.rs
+- crates/kobako-runtime/src/filesystem/overlay/stack.rs
+- crates/kobako-runtime/src/filesystem/path.rs
+- crates/kobako-runtime/src/filesystem/temporary.rs
+- crates/kobako-runtime/src/grant.rs
 - crates/kobako-runtime/src/lib.rs
+- crates/kobako-runtime/src/mount.rs
 - crates/kobako-runtime/src/profile.rs
 - crates/kobako-runtime/src/runtime.rs
 - crates/kobako-runtime/src/snapshot.rs
@@ -72,12 +89,16 @@ files:
 - crates/kobako-transport/src/envelope.rs
 - crates/kobako-transport/src/envelope/bytes.rs
 - crates/kobako-transport/src/envelope/call.rs
+- crates/kobako-transport/src/envelope/compile_reply.rs
 - crates/kobako-transport/src/envelope/error_record.rs
 - crates/kobako-transport/src/envelope/fault.rs
-- crates/kobako-transport/src/envelope/invocation_frames.rs
 - crates/kobako-transport/src/envelope/outcome.rs
+- crates/kobako-transport/src/envelope/preamble.rs
 - crates/kobako-transport/src/envelope/reply.rs
+- crates/kobako-transport/src/envelope/request.rs
 - crates/kobako-transport/src/envelope/run.rs
+- crates/kobako-transport/src/envelope/tag.rs
+- crates/kobako-transport/src/envelope/unsupported.rs
 - crates/kobako-transport/src/lib.rs
 - crates/kobako-wasmtime/CHANGELOG.md
 - crates/kobako-wasmtime/Cargo.toml
@@ -87,15 +108,38 @@ files:
 - crates/kobako-wasmtime/src/cache.rs
 - crates/kobako-wasmtime/src/capture.rs
 - crates/kobako-wasmtime/src/config.rs
+- crates/kobako-wasmtime/src/descriptors.rs
 - crates/kobako-wasmtime/src/dispatch.rs
 - crates/kobako-wasmtime/src/driver.rs
 - crates/kobako-wasmtime/src/exports.rs
-- crates/kobako-wasmtime/src/frames.rs
 - crates/kobako-wasmtime/src/guest_mem.rs
+- crates/kobako-wasmtime/src/imports.rs
 - crates/kobako-wasmtime/src/instance_pre.rs
 - crates/kobako-wasmtime/src/invocation.rs
+- crates/kobako-wasmtime/src/io.rs
 - crates/kobako-wasmtime/src/lib.rs
+- crates/kobako-wasmtime/src/limiter.rs
+- crates/kobako-wasmtime/src/preview1.rs
+- crates/kobako-wasmtime/src/preview1/args.rs
+- crates/kobako-wasmtime/src/preview1/beneath.rs
+- crates/kobako-wasmtime/src/preview1/differential.rs
+- crates/kobako-wasmtime/src/preview1/differential/mount.rs
+- crates/kobako-wasmtime/src/preview1/errno.rs
+- crates/kobako-wasmtime/src/preview1/fd.rs
+- crates/kobako-wasmtime/src/preview1/memory.rs
+- crates/kobako-wasmtime/src/preview1/mount_view.rs
+- crates/kobako-wasmtime/src/preview1/path.rs
+- crates/kobako-wasmtime/src/preview1/poll.rs
+- crates/kobako-wasmtime/src/preview1/sock.rs
 - crates/kobako-wasmtime/src/trap.rs
+- crates/kobako-wasmtime/src/wasi.rs
+- crates/kobako-wasmtime/tests/compile_posture.rs
+- crates/kobako-wasmtime/tests/guest_file.rs
+- crates/kobako-wasmtime/tests/preamble_flags.rs
+- crates/kobako-wasmtime/tests/snippet_compile.rs
+- crates/kobako-wasmtime/tests/support/mod.rs
+- crates/kobako-wasmtime/tests/unanswered_call.rs
+- crates/kobako-wasmtime/tests/unsupported_call.rs
 - data/kobako.wasm
 - ext/kobako/Cargo.toml
 - ext/kobako/extconf.rb
@@ -103,12 +147,21 @@ files:
 - ext/kobako/src/runtime.rs
 - ext/kobako/src/runtime/bridge.rs
 - ext/kobako/src/runtime/errors.rs
+- ext/kobako/src/runtime/escape.rs
+- ext/kobako/src/runtime/filesystem.rs
+- ext/kobako/src/runtime/filesystem/grants.rs
+- ext/kobako/src/runtime/filesystem/ruby.rs
 - ext/kobako/src/runtime/gvl.rs
+- ext/kobako/src/runtime/pinned_value.rs
+- ext/kobako/src/runtime/snapshot.rs
 - lib/kobako.rb
 - lib/kobako/capture.rb
 - lib/kobako/catalog.rb
 - lib/kobako/catalog/extensions.rb
+- lib/kobako/catalog/flags.rb
+- lib/kobako/catalog/grants.rb
 - lib/kobako/catalog/handles.rb
+- lib/kobako/catalog/mount.rb
 - lib/kobako/catalog/services.rb
 - lib/kobako/catalog/snippets.rb
 - lib/kobako/codec.rb
@@ -120,10 +173,13 @@ files:
 - lib/kobako/codec/nesting.rb
 - lib/kobako/codec/state.rb
 - lib/kobako/codec/utils.rb
+- lib/kobako/codec/value_budget.rb
+- lib/kobako/constant_name.rb
 - lib/kobako/context.rb
 - lib/kobako/errors.rb
 - lib/kobako/execution.rb
 - lib/kobako/extension.rb
+- lib/kobako/filesystem.rb
 - lib/kobako/handle.rb
 - lib/kobako/outcome.rb
 - lib/kobako/payload.rb
@@ -133,9 +189,10 @@ files:
 - lib/kobako/sandbox.rb
 - lib/kobako/sandbox_options.rb
 - lib/kobako/snippet.rb
-- lib/kobako/snippet/binary.rb
+- lib/kobako/snippet/bytecode.rb
 - lib/kobako/snippet/source.rb
 - lib/kobako/transport.rb
+- lib/kobako/transport/block_failure.rb
 - lib/kobako/transport/call.rb
 - lib/kobako/transport/dispatcher.rb
 - lib/kobako/transport/error.rb
@@ -147,12 +204,14 @@ files:
 - lib/kobako/usage.rb
 - lib/kobako/version.rb
 - release-please-config.json
-- rust-toolchain.toml
 - sig/kobako.rbs
 - sig/kobako/capture.rbs
 - sig/kobako/catalog.rbs
 - sig/kobako/catalog/extensions.rbs
+- sig/kobako/catalog/flags.rbs
+- sig/kobako/catalog/grants.rbs
 - sig/kobako/catalog/handles.rbs
+- sig/kobako/catalog/mount.rbs
 - sig/kobako/catalog/services.rbs
 - sig/kobako/catalog/snippets.rbs
 - sig/kobako/codec.rbs
@@ -164,10 +223,14 @@ files:
 - sig/kobako/codec/nesting.rbs
 - sig/kobako/codec/state.rbs
 - sig/kobako/codec/utils.rbs
+- sig/kobako/codec/value_budget.rbs
+- sig/kobako/constant_name.rbs
 - sig/kobako/context.rbs
 - sig/kobako/errors.rbs
 - sig/kobako/execution.rbs
 - sig/kobako/extension.rbs
+- sig/kobako/filesystem.rbs
+- sig/kobako/guest_yielder.rbs
 - sig/kobako/handle.rbs
 - sig/kobako/outcome.rbs
 - sig/kobako/payload.rbs
@@ -176,10 +239,12 @@ files:
 - sig/kobako/runtime.rbs
 - sig/kobako/sandbox.rbs
 - sig/kobako/sandbox_options.rbs
+- sig/kobako/snapshot.rbs
 - sig/kobako/snippet.rbs
-- sig/kobako/snippet/binary.rbs
+- sig/kobako/snippet/bytecode.rbs
 - sig/kobako/snippet/source.rbs
 - sig/kobako/transport.rbs
+- sig/kobako/transport/block_failure.rbs
 - sig/kobako/transport/call.rbs
 - sig/kobako/transport/dispatcher.rbs
 - sig/kobako/transport/error.rbs

data/crates/kobako-transport/src/envelope/invocation_frames.rs

@@ -1,241 +0,0 @@
-//! The invocation frames — Frame 1's bound constant paths and Frame 3's
-//! preloaded snippets, the two both entry points read before running
-//! anything. The numbering skips Frame 2 because the `#eval` user source
-//! is raw UTF-8 with no envelope of its own.
-//!
-//! Both are mandatory-presence even when empty, so a reader never has to
-//! tell an absent frame from an empty one, and each frame's length reaches
-//! the guest from the channel's own prefix rather than from the envelope.
-
-use super::bytes::{Reader, Writer};
-use super::DecodeError;
-
-const SNIPPET_SOURCE: u8 = 0;
-const SNIPPET_BYTECODE: u8 = 1;
-
-/// Frame 1 — the bound constant paths the guest installs proxies from.
-/// Always present; an empty list means no Service is bound.
-#[derive(Debug, Clone, PartialEq, Eq, Default)]
-pub struct Bindings {
-    pub paths: Vec<String>,
-}
-
-impl Bindings {
-    pub fn decode(bytes: &[u8]) -> Result<Self, DecodeError> {
-        let mut reader = Reader::new(bytes);
-        let paths = reader.text_list()?;
-        reader.finish()?;
-        Ok(Bindings { paths })
-    }
-
-    pub fn encode(&self) -> Vec<u8> {
-        let mut writer = Writer::new();
-        writer.list(&self.paths);
-        writer.into_bytes()
-    }
-}
-
-/// One preloaded snippet. Source carries the filename the guest compiles
-/// under; bytecode does not, because its filename — when it has one — lives
-/// in the bytecode's own debug section.
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum Snippet {
-    Source { name: String, body: String },
-    Bytecode { body: Vec<u8> },
-}
-
-/// Frame 3 — the preloaded snippets, in insertion order. Always present;
-/// a zero count means nothing was preloaded.
-#[derive(Debug, Clone, PartialEq, Eq, Default)]
-pub struct Snippets {
-    pub entries: Vec<Snippet>,
-}
-
-impl Snippets {
-    pub fn decode(bytes: &[u8]) -> Result<Self, DecodeError> {
-        let mut reader = Reader::new(bytes);
-        let count = reader.u32()? as usize;
-        // Each entry costs at least a kind byte, so a count past the bytes
-        // left cannot be satisfied; refusing it bounds the allocation.
-        if count > reader.remaining().len() {
-            return Err(DecodeError::new(
-                "Frame 3 declares more entries than the frame holds",
-            ));
-        }
-        let mut entries = Vec::with_capacity(count);
-        for _ in 0..count {
-            entries.push(match reader.u8()? {
-                SNIPPET_SOURCE => Snippet::Source {
-                    name: reader.text()?.to_owned(),
-                    body: reader.text()?.to_owned(),
-                },
-                SNIPPET_BYTECODE => Snippet::Bytecode {
-                    body: reader.bytes()?.to_vec(),
-                },
-                _ => return Err(DecodeError::new("Frame 3 snippet kind must be 0 or 1")),
-            });
-        }
-        reader.finish()?;
-        Ok(Snippets { entries })
-    }
-
-    pub fn encode(&self) -> Vec<u8> {
-        let mut writer = Writer::new();
-        writer.u32(self.entries.len() as u32);
-        for entry in &self.entries {
-            match entry {
-                Snippet::Source { name, body } => {
-                    writer
-                        .u8(SNIPPET_SOURCE)
-                        .bytes(name.as_bytes())
-                        .bytes(body.as_bytes());
-                }
-                Snippet::Bytecode { body } => {
-                    writer.u8(SNIPPET_BYTECODE).bytes(body);
-                }
-            }
-        }
-        writer.into_bytes()
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    // @behavior WE-050
-    #[test]
-    fn empty_bindings_round_trip() {
-        let encoded = Bindings::default().encode();
-        assert_eq!(
-            Bindings::decode(&encoded),
-            Ok(Bindings::default()),
-            "a Sandbox with no bindings must send a present, empty Frame 1"
-        );
-    }
-
-    // @behavior WE-051
-    #[test]
-    fn bindings_round_trip_every_path() {
-        let bindings = Bindings {
-            paths: vec!["MyService::KV".into(), "File".into()],
-        };
-        let encoded = bindings.encode();
-        assert_eq!(
-            Bindings::decode(&encoded),
-            Ok(bindings),
-            "Frame 1 must carry every bound path in order"
-        );
-    }
-
-    // @behavior WE-052
-    #[test]
-    fn snippets_round_trip_both_kinds_in_order() {
-        let snippets = Snippets {
-            entries: vec![
-                Snippet::Source {
-                    name: "Helper".into(),
-                    body: "def helper; end".into(),
-                },
-                Snippet::Bytecode {
-                    body: vec![0x52, 0x49, 0x54, 0x45],
-                },
-            ],
-        };
-        let encoded = snippets.encode();
-        assert_eq!(
-            Snippets::decode(&encoded),
-            Ok(snippets),
-            "Frame 3 must carry source and bytecode entries in insertion order"
-        );
-    }
-
-    // @behavior WE-053
-    #[test]
-    fn an_empty_snippet_table_round_trips() {
-        let encoded = Snippets::default().encode();
-        assert_eq!(
-            Snippets::decode(&encoded),
-            Ok(Snippets::default()),
-            "a Sandbox with no preloads must send a present, zero-count Frame 3"
-        );
-    }
-
-    // @behavior WE-054
-    #[test]
-    fn golden_layout_pins_the_bindings_as_a_counted_list() {
-        let bindings = Bindings {
-            paths: vec!["A".into()],
-        };
-        assert_eq!(
-            bindings.encode(),
-            vec![
-                0, 0, 0, 1, // path count
-                0, 0, 0, 1, b'A',
-            ],
-            "Frame 1 must be a counted list of paths, so the count precedes the first entry"
-        );
-    }
-
-    // @behavior WE-055
-    #[test]
-    fn golden_layout_pins_the_snippet_entry_shape() {
-        let snippets = Snippets {
-            entries: vec![
-                Snippet::Source {
-                    name: "N".into(),
-                    body: "b".into(),
-                },
-                Snippet::Bytecode { body: vec![0x52] },
-            ],
-        };
-        assert_eq!(
-            snippets.encode(),
-            vec![
-                0, 0, 0, 2, // entry count
-                0, // kind: source
-                0, 0, 0, 1, b'N', // name, source only
-                0, 0, 0, 1, b'b', // body
-                1,    // kind: bytecode
-                0, 0, 0, 1, 0x52, // body, no name
-            ],
-            "a source entry must encode as kind byte 0 with a name and a bytecode entry as \
-             kind byte 1 with none, so the two stay distinguishable by their tag alone"
-        );
-    }
-
-    // @behavior WE-056
-    #[test]
-    fn an_unknown_snippet_kind_is_refused() {
-        let bytes = {
-            let mut w = Writer::new();
-            w.u32(1).u8(9);
-            w.into_bytes()
-        };
-        assert!(
-            Snippets::decode(&bytes).is_err(),
-            "a Frame 3 snippet kind that is neither source nor bytecode must be rejected"
-        );
-    }
-
-    // @behavior WE-057
-    #[test]
-    fn a_snippet_count_the_frame_cannot_satisfy_is_refused() {
-        let bytes = [0xff, 0xff, 0xff, 0xff];
-        assert!(
-            Snippets::decode(&bytes).is_err(),
-            "a Frame 3 count larger than the frame must be rejected before any allocation"
-        );
-    }
-
-    // @behavior WE-058
-    #[test]
-    fn trailing_bytes_after_a_frame_are_refused() {
-        let mut encoded = Bindings::default().encode();
-        encoded.push(0);
-        assert!(
-            Bindings::decode(&encoded).is_err(),
-            "bytes past Frame 1's last field must fail loudly as a framing desync"
-        );
-    }
-}