nomen-lang 0.8.0 → 0.10.0

package/core/System/Controls/Scrollable.nm

@@ -386,7 +386,7 @@ pub mv struct Scrollable: Control {
 	}
 
 	// ── Control trait conformance ──
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		```
 		#arch: c
 		#platform: macos

package/core/System/Controls/SearchField.nm

@@ -9,7 +9,7 @@
  * NSSearchField gives the magnifier icon, placeholder, and Cancel button for
  * free; UISearchTextField is the iOS 13+ equivalent.
  **/
-pub mv struct SearchField : Control {
+pub mv struct SearchField: Control {
 	var uint64 handle = 0
 
 	pub func #init = (self, Window window) {
@@ -85,7 +85,7 @@ pub mv struct SearchField : Control {
 		```
 	}
 
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		```
 		#arch: c
 		#platform: macos

package/core/System/Controls/SecureField.nm

@@ -9,7 +9,7 @@
  * A distinct native class on both platforms (NSSecureTextField is NOT
  * NSTextField), so it lands as its own control rather than a TextBox mode.
  **/
-pub mv struct SecureField : Control {
+pub mv struct SecureField: Control {
 	var uint64 handle = 0
 
 	pub func #init = (self, Window window) {
@@ -105,7 +105,7 @@ pub mv struct SecureField : Control {
 		```
 	}
 
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		```
 		#arch: c
 		#platform: macos

package/core/System/Controls/Segmented.nm

@@ -9,7 +9,7 @@
  * The segment count is fixed at construction; labels and the selection are
  * set/poll per frame like every other control.
  **/
-pub mv struct Segmented : Control {
+pub mv struct Segmented: Control {
 	var uint64 handle = 0
 
 	pub func #init = (self, Window window, int count) {
@@ -104,7 +104,7 @@ pub mv struct Segmented : Control {
 		```
 	}
 
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		```
 		#arch: c
 		#platform: macos

package/core/System/Controls/Select.nm

@@ -10,7 +10,7 @@
  * polled after each event batch. iOS needs a picker or action sheet and
  * defers (TODO stubs below; see GUI_PLAN Tier 1 #9).
  **/
-pub mv struct Select : Control {
+pub mv struct Select: Control {
 	var uint64 handle = 0
 
 	pub func #init = (self, Window window) {
@@ -62,7 +62,7 @@ pub mv struct Select : Control {
 		```
 	}
 
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		```
 		#arch: c
 		#platform: macos

package/core/System/Controls/Separator.nm

@@ -10,7 +10,7 @@
  * the frame's aspect (wide = horizontal, tall = vertical). macOS-only —
  * iOS has no separator view (TODO stubs; see GUI_PLAN Tier 1 #17).
  **/
-pub mv struct Separator : Control {
+pub mv struct Separator: Control {
 	var uint64 handle = 0
 
 	pub func #init = (self, Window window) {
@@ -58,7 +58,7 @@ pub mv struct Separator : Control {
 		```
 	}
 
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		```
 		#arch: c
 		#platform: macos

package/core/System/Controls/Sheet.nm

@@ -15,7 +15,7 @@
  * defers to UISheetPresentationController (TODO stubs; see GUI_PLAN
  * Tier 1 #20).
  **/
-pub mv struct Sheet : Control {
+pub mv struct Sheet: Control {
 	var uint64 handle = 0
 	var uint64 host = 0
 
@@ -274,7 +274,7 @@ pub mv struct Sheet : Control {
 	// ── Control trait conformance ──
 	// A sheet is window-coordinated like Alert: the layout engine never
 	// frames it (its own NSWindow carries the geometry).
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		// No-op: the sheet's NSWindow carries the geometry.
 	}
 

package/core/System/Controls/Slider.nm

@@ -8,7 +8,7 @@
  *
  * Continuous control: read `value` each frame in the manual event loop.
  **/
-pub mv struct Slider : Control {
+pub mv struct Slider: Control {
 	var uint64 handle = 0
 
 	pub func #init = (self, Window window, float min, float max) {
@@ -82,7 +82,7 @@ pub mv struct Slider : Control {
 		```
 	}
 
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		```
 		#arch: c
 		#platform: macos

package/core/System/Controls/Spinner.nm

@@ -11,9 +11,9 @@
  * tracked at the Nomen level (NSProgressIndicator has no isSpinning getter),
  * so `is_spinning` reads true exactly between start() and stop().
  **/
-pub mv struct Spinner : Control {
+pub mv struct Spinner: Control {
 	var uint64 handle = 0
-	var bool spinning = false
+	var spinning = false
 
 	pub func #init = (self, Window window) {
 		```
@@ -92,7 +92,7 @@ pub mv struct Spinner : Control {
 		```
 	}
 
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		```
 		#arch: c
 		#platform: macos
@@ -123,7 +123,7 @@ pub mv struct Spinner : Control {
 		```
 	}
 
-	pub func start = (ref self) {
+	pub func start = (ref self {}) {
 		```
 		#arch: c
 		#platform: macos
@@ -154,7 +154,7 @@ pub mv struct Spinner : Control {
 		```
 	}
 
-	pub func stop = (ref self) {
+	pub func stop = (ref self {}) {
 		```
 		#arch: c
 		#platform: macos

package/core/System/Controls/SplitView.nm

@@ -21,7 +21,7 @@
  * UISplitViewController (a view-controller-level type — see GUI_PLAN
  * Tier 2; the iOS blocks are TODO stubs).
  **/
-pub mv struct SplitView : Control {
+pub mv struct SplitView: Control {
 	var uint64 handle = 0
 
 	// File-scope helper: the pane view class (answers `-contentView` with
@@ -334,7 +334,7 @@ pub mv struct SplitView : Control {
 
 	// Move divider `index`. For a vertical split the position is the left
 	// edge of the pane after the divider, in points from the left.
-	pub func set_position = (ref self, float position, int divider) {
+	pub func set_position = (ref self {}, float position, int divider) {
 		```
 		#arch: c
 		#platform: macos
@@ -424,7 +424,7 @@ pub mv struct SplitView : Control {
 	}
 
 	// ── Control trait conformance ──
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		```
 		#arch: c
 		#platform: macos

package/core/System/Controls/Stepper.nm

@@ -9,7 +9,7 @@
  * Pair with a TextBox for the "number input" composition (gpui-kit's
  * number-input is exactly that pairing).
  **/
-pub mv struct Stepper : Control {
+pub mv struct Stepper: Control {
 	var uint64 handle = 0
 
 	pub func #init = (self, Window window) {
@@ -87,7 +87,7 @@ pub mv struct Stepper : Control {
 		```
 	}
 
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		```
 		#arch: c
 		#platform: macos

package/core/System/Controls/Switch.nm

@@ -8,7 +8,7 @@
  *
  * Pairs with CheckBox: check = task state, switch = preference.
  **/
-pub mv struct Switch : Control {
+pub mv struct Switch: Control {
 	var uint64 handle = 0
 
 	pub func #init = (self, Window window) {
@@ -74,7 +74,7 @@ pub mv struct Switch : Control {
 		```
 	}
 
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		```
 		#arch: c
 		#platform: macos

package/core/System/Controls/Table.nm

@@ -19,7 +19,7 @@
  * `List<T>` lesson). macOS-only (no iOS counterpart for a plain embeddable
  * grid; see GUI_PLAN Tier 2 — the iOS blocks are TODO stubs).
  **/
-pub mv struct Table : Control {
+pub mv struct Table: Control {
 	var uint64 handle = 0
 	var uint64 table = 0
 
@@ -744,7 +744,7 @@ pub mv struct Table : Control {
 	}
 
 	// ── Control trait conformance ──
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		```
 		#arch: c
 		#platform: macos

package/core/System/Controls/Tabs.nm

@@ -17,7 +17,7 @@
  * NSTabView counterpart (UITabBarController is app-level chrome — see
  * GUI_PLAN Tier 2; defer with TODO stubs).
  **/
-pub mv struct Tabs : Control {
+pub mv struct Tabs: Control {
 	var uint64 handle = 0
 
 	// File-scope helper: the page view class. It answers `-contentView` with
@@ -415,7 +415,7 @@ pub mv struct Tabs : Control {
 	}
 
 	// ── Control trait conformance ──
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		```
 		#arch: c
 		#platform: macos

package/core/System/Controls/Text.nm

@@ -18,7 +18,7 @@ pub mv struct Text: Control {
 	// The `#handle` hook synthesizes `NameHandle` — a copyable, non-owning
 	// twin (same public bare-self methods, no destroy) so closures can
 	// capture this control without moving it. See GUI.md, "Handles".
-	#handle = () {}
+	#handle = () { }
 
 	pub func #init = (self, Window window) {
 		```
@@ -249,7 +249,7 @@ pub mv struct Text: Control {
 		return s
 	}
 
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		```
 		#arch: c
 		#platform: macos

package/core/System/Controls/TextBox.nm

@@ -6,13 +6,13 @@
  * `#destroy` releases what the handle names. The constructor's `self` is
  * the inline instance (the `.` accessor); methods keep the pointer form.
  **/
-pub mv struct TextBox : Control {
+pub mv struct TextBox: Control {
 	var uint64 handle = 0
 
 	// The `#handle` hook synthesizes `NameHandle` — a copyable, non-owning
 	// twin (same public bare-self methods, no destroy) so closures can
 	// capture this control without moving it. See GUI.md, "Handles".
-	#handle = () {}
+	#handle = () { }
 
 	pub func #init = (self, Window window) {
 		```
@@ -111,7 +111,7 @@ pub mv struct TextBox : Control {
 		```
 	}
 
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		```
 		#arch: c
 		#platform: macos

package/core/System/Controls/TextView.nm

@@ -17,7 +17,7 @@ pub mv struct TextView: Control {
 	// The `#handle` hook synthesizes `NameHandle` — a copyable, non-owning
 	// twin (same public bare-self methods, no destroy) so closures can
 	// capture this control without moving it. See GUI.md, "Handles".
-	#handle = () {}
+	#handle = () { }
 
 	pub func #init = (self, Window window) {
 		```
@@ -116,7 +116,7 @@ pub mv struct TextView: Control {
 		```
 	}
 
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		```
 		#arch: c
 		#platform: macos

package/core/System/Controls/Toggle.nm

@@ -10,13 +10,13 @@
  * selected state. Where `Button` is momentary, `Toggle` stays depressed
  * until clicked again (toolbar-style).
  **/
-pub mv struct Toggle : Control {
+pub mv struct Toggle: Control {
 	var uint64 handle = 0
 
 	// The `#handle` hook synthesizes `NameHandle` — a copyable, non-owning
 	// twin (same public bare-self methods, no destroy) so closures can
 	// capture this control without moving it. See GUI.md, "Handles".
-	#handle = () {}
+	#handle = () { }
 
 	pub func #init = (self, Window window, string title) {
 		```
@@ -109,7 +109,7 @@ pub mv struct Toggle : Control {
 		```
 	}
 
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		```
 		#arch: c
 		#platform: macos

package/core/System/Controls/Toolbar.nm

@@ -17,7 +17,7 @@
  * already make). macOS-only (NSToolbar has no iOS counterpart; see GUI_PLAN
  * Tier 2 — the iOS blocks are TODO stubs).
  **/
-pub mv struct Toolbar : Control {
+pub mv struct Toolbar: Control {
 	var uint64 handle = 0
 
 	// File-scope helper: the shared delegate + action recorder (shared — one
@@ -456,7 +456,7 @@ pub mv struct Toolbar : Control {
 	// ── Control trait conformance ──
 	// A toolbar is window chrome: the layout engine never frames it (AppKit
 	// owns the layout rect and shrinks the contentView itself).
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		// No-op: the NSWindow carries the toolbar's geometry.
 	}
 

package/core/System/Controls/Window.nm

@@ -1190,7 +1190,7 @@ pub mv struct Window: Control {
 	// frame where the content rect changed. The grid must outlive the run
 	// (an app field — registration stores its address). Call from
 	// App.start; also arms the resize delegate's target pair.
-	pub func set_content = (ref self, ref Container grid) {
+	pub func set_content = (ref self {}, ref Container grid { aligns, cols, dirty, dirty_idx, gaps, grows, h_kinds, h_vals, handles, kinds, measured_count, mh, mw, pads, pars, prh, prw, prx, pry, rh, rw, rx, ry, shrinks, spans, w_kinds, w_vals }) {
 		```
 		#arch: c
 		#platform: macos
@@ -1307,6 +1307,12 @@ pub mv struct Window: Control {
 	// FORCED: it bypasses the close_requested interception (the delegate's
 	// windowShouldClose: sees nomen_close_forced and allows). Only the red
 	// button routes through `close_requested`.
+	//
+	// The forced latch is one-shot: it is armed immediately before
+	// performClose: (which dispatches windowShouldClose: synchronously) and
+	// disarmed right after. Left armed it is process-global — every LATER
+	// red-button close (another window, a later run loop) would silently
+	// bypass App.close_requested forever.
 	pub func close = (self) {
 		```
 		#arch: c
@@ -1314,6 +1320,7 @@ pub mv struct Window: Control {
 		extern int nomen_close_forced;
 		nomen_close_forced = 1;
 		((void(*)(id, SEL, id))objc_msgSend)((id)self->handle, sel_registerName("performClose:"), (id)0);
+		nomen_close_forced = 0;
 		```
 		```
 		#arch: aarch64_use_c
@@ -1321,6 +1328,7 @@ pub mv struct Window: Control {
 		extern int nomen_close_forced;
 		nomen_close_forced = 1;
 		((void(*)(id, SEL, id))objc_msgSend)((id)self->handle, sel_registerName("performClose:"), (id)0);
+		nomen_close_forced = 0;
 		```
 		```
 		#arch: c
@@ -1345,7 +1353,7 @@ pub mv struct Window: Control {
 	// a FrameEvents each frame.
 	// The app is consumed: it is destroyed when the loop exits (controls
 	// release, buffers free).
-	pub func run = (ref self, mv App app) {
+	pub func run = (ref self {}, mv App app) {
 		app.start(ref self)
 		Container.arm_resize_delegate(self)
 		self.arm_mouse_moves()
@@ -1354,7 +1362,7 @@ pub mv struct Window: Control {
 		self.relayout(1)
 		var int prev_w = self.content_width()
 		var int prev_h = self.content_height()
-		var FrameEvents ev = FrameEvents()
+		var ev = FrameEvents()
 		while self.is_visible() {
 			// Close interception: the delegate refused the native close and
 			// set the pending flag; consult the app. Accept → forced close
@@ -1432,7 +1440,7 @@ pub mv struct Window: Control {
 		return s
 	}
 
-	pub func set_frame = (ref self, int x, int y, int width, int height) {
+	pub func set_frame = (ref self {}, int x, int y, int width, int height) {
 		```
 		#arch: c
 		#platform: macos
@@ -1853,7 +1861,6 @@ pub func nomen_control_take_input = (uint64 handle, out bool) {
 	```
 }
 
-
 pub func nomen_window_clicks_init = (uint64 handle) {
 	```
 	#arch: c

package/core/System/Fiber.nm

@@ -71,9 +71,13 @@ pub mv struct Fiber<T> : Spawnable<T> {
 	// out of the instance (started; #destroy no-ops), return the handle.
 	// While the fiber waits, it parks and frees its worker instead of
 	// blocking it.
-	pub func start = (ref self, mv out Task<T>) {
+	pub func start = (ref self {}, mv out Task<T>) {
 		```
 		#arch: c
+		// Single-launch contract: a consumed construction (started) owns
+		// nothing — the handles below are zeroed, and writing the ref count
+		// through the null future would fault. Abort with the reason.
+		if (self->started) __nomen_spawn_double_start_abort();
 		struct nomen_future *_f = (struct nomen_future *)self->future;
 		_f->refs = self->nursery_futures ? 3 : 2;
 		__nomen_fiber_spawn((struct nomen_closure *)self->task, _f);
@@ -83,7 +87,12 @@ pub mv struct Fiber<T> : Spawnable<T> {
 		```
 		```
 		#arch: aarch64
-		// x19 = self. f = self->future (#32); nursery_futures at #48.
+		// x19 = self. started at #40; f = self->future (#32); nursery_futures
+		// at #48. Single-launch contract first: a consumed construction has
+		// zeroed handles, and the ref-store below would write through null.
+		ldrb w9, [x19, #40]
+		cbnz w9, .Lnomen_fstart_double
+		// f = self->future (#32); nursery_futures at #48.
 		ldr x0, [x19, #32]
 		ldr x1, [x19, #48]
 		mov w2, #2
@@ -103,6 +112,10 @@ pub mv struct Fiber<T> : Spawnable<T> {
 		ldr x3, [x19, #32]
 		bl ___nomen_nursery_track
 		.Lnomen_fstart_notrack:
+		b .Lnomen_fstart_done
+		.Lnomen_fstart_double:
+		bl ___nomen_spawn_double_start_abort
+		.Lnomen_fstart_done:
 		```
 		var t = Task<T>()
 		t.result_slot = self.result_slot
@@ -122,7 +135,7 @@ pub mv struct Fiber<T> : Spawnable<T> {
 	// The fiber is launched exactly like start, but the handle is dropped
 	// immediately: the future's refs are released as the discarded Task is
 	// reclaimed, and the fiber completes into the void — nothing joins it.
-	pub func detach = (ref self) {
+	pub func detach = (ref self {}) {
 		self.start()
 	}
 

package/core/System/Graph.nm

@@ -14,7 +14,7 @@ pub mv struct Graph<T>: Enumerable {
 	var node_count = 0
 	var edge_count = 0
 
-	pub func add_node = (ref self, mv T value) {
+	pub func add_node = (ref self { head_edge, values }, mv T value) {
 		var int idx = self.node_count
 		self.values.grow(idx + 1)
 		self.values.store(idx, value)
@@ -23,7 +23,7 @@ pub mv struct Graph<T>: Enumerable {
 		self.node_count = self.node_count + 1
 	}
 
-	pub func add_edge = (ref self, int from, int to) {
+	pub func add_edge = (ref self { edge_next, edge_target, head_edge }, int from, int to) {
 		var int e = self.edge_count
 		self.edge_target.grow_int(e + 1)
 		self.edge_target.store_int(e, to)

package/core/System/LinkedList.nm

@@ -13,10 +13,19 @@ pub mv struct LinkedList<T>: Enumerable {
 	var int head = -1
 	var count = 0
 
-	pub func add = (ref self, mv T value) {
+	pub func add = (ref self { nexts, prevs, values }, mv T value) {
 		var int idx = self.count
 		self.values.grow(idx + 1)
-		self.values.store(idx, value)
+		// The value arrives owned (`mv T value`): move a value-struct element
+		// that OWNS resources into the fresh slot (the caller's storage
+		// zeroes, no deep copy). A non-owning value struct is a legal bare
+		// argument, so it keeps the copying store; strings keep the
+		// deep-copying store too (their pair arrives by value).
+		if T_TAKES_OWNERSHIP {
+			self.values.store_take(idx, value)
+		} else {
+			self.values.store(idx, value)
+		}
 		self.nexts.grow_int(idx + 1)
 		self.nexts.store_int(idx, -1)
 		self.prevs.grow_int(idx + 1)
@@ -27,14 +36,14 @@ pub mv struct LinkedList<T>: Enumerable {
 		}
 	}
 
-	pub func set_next = (ref self, int idx, int next) {
+	pub func set_next = (ref self { nexts, prevs }, int idx, int next) {
 		self.nexts.store_int(idx, next)
 		if next >= 0 && next < self.prevs.cap {
 			self.prevs.store_int(next, idx)
 		}
 	}
 
-	pub func set_previous = (ref self, int idx, int prev) {
+	pub func set_previous = (ref self { nexts, prevs }, int idx, int prev) {
 		self.prevs.store_int(idx, prev)
 		if prev >= 0 && prev < self.nexts.cap {
 			self.nexts.store_int(prev, idx)