aboutsummaryrefslogtreecommitdiff
path: root/docs/SPEC.md
Commit message (Collapse)AuthorAgeFilesLines
* std.Io.print/println take any mix of printable arguments (compiler expands ↵Gravatar zinc 12 days1-0/+2
| | | | per type); docs, conformance
* analyzer: check borrow returns of forward-called functions at the unit's ↵Gravatar zinc 12 days1-0/+6
| | | | end; borrows clause for prototypes, definitions, externs and function types, checked against the body
* analyzer: use-after-end messages name the borrower, the owner and how the ↵Gravatar zinc 12 days1-2/+2
| | | | owner ended (freed, moved, .d parameter, push, global, reassignment), with fixtures
* wip: prover gaps (inline len bound, cross-array, rt.new depth, fixed new, ↵Gravatar zinc 13 days1-1/+1
| | | | affine i*n+k); unbuilt and untested
* actor: a declared actor without its own drop gets one that awaits owed ↵Gravatar zinc 13 days1-1/+1
| | | | replies and closes the endpoint; the handler reaches the struct through endpoint.state so the struct isn't shared; spawn hint skips mailbox structs
* rt: gc_drops finalizes a droppable value that reaches itself (a cycle, or a ↵Gravatar zinc 13 days1-1/+1
| | | | drop capturing its own value), one per collection, each once; before, each waited for the other forever; spec 6.15.3, drop_gc_cycle.zc, drop_gc_self_capture.zc, design doc lists what landed
* o3: an o3 function called from normal code as a receiver method (run.method) ↵Gravatar zinc 13 days1-1/+1
| | | | enters and leaves the region and fattens its result, like a direct call; spec 4.10.3, o3_receiver_method_enter.zc
* o3: break and continue out of an o3 { } block call rt.o3_leave for each ↵Gravatar zinc 13 days1-1/+1
| | | | block they leave (the loop records the o3 depth it began at), so the depth returns to 0 and pending collections and drops run; spec 4.10.3, o3_break_continue_leave.zc
* rt: memreport marks a leaked value whose drop never ran with (drop); spec ↵Gravatar zinc 13 days1-1/+1
| | | | 4.11, readme, memdebug_report_drop.zc
* destructors: hint: x: has drop and is live at spawn; the worker's copy drops ↵Gravatar zinc 13 days1-1/+1
| | | | it too, on x.spawn() of a mailbox struct for each live owned local with a drop; spec 6.15.4, lsp hint check
* destructors: nothing moves out of a value with a drop: pop on an array with ↵Gravatar zinc 13 days1-0/+1
| | | | a drop, or on an array field of a value with a drop, is error: a: can't move out of a value with drop (fields were already borrowed projections); spec 6.15.5, four conformance programs
* destructors: reassigning an m owner that still holds a value frees the old ↵Gravatar zinc 13 days1-2/+2
| | | | value first, running its drop (right side first, then the free, then the store), with hint: x: reassigning frees the old value; a new value that is part of the old one is an error; u, d and captured owners keep the leak error; the new value's size, leaf type and drop are recorded like a declaration's; spec 6.8.5, 6.15.2
* compiler: a //:lines marker starts a new file, so unbounded; and unchecked; ↵Gravatar zinc 13 days1-3/+3
| | | | of the source before it end there: a program joined to the unbounded runtime in a self-hosted run-only image is bounds-checked again (since d55b5fd its index errors went unreported); runtime_image_test expects the trap's exit status 2; spec 4.15.1, 4.x unchecked, 5.15.3
* destructors: heap(v), drop(v, f) / v.drop(f) / v.drop = f, struct drop ↵Gravatar zinc 13 days1-0/+16
| | | | methods, collector drops after the sweep (once, resurrection), freed blocks forget their drop, temporaries drop at statement end with a hint, actor send check; o3: no collection inside a region (pending until the outermost exit), no drops set or ended inside o3; spec 3.11.6, 4.10.3-4, 6.15
* defer: any single statement (if/else, loops, switch, unchecked, unbounded), ↵Gravatar zinc 13 days1-1/+1
| | | | not just an expression or a block
* zy: a runtime trap exits 2 (rt.trap: index out of range, frame overflow, out ↵Gravatar zinc 13 days1-2/+2
| | | | of heap, bad pointer, use after free); compile errors stay 1; spec 8.1.3; exitstatus.sh checks exit 2
* bounds: body scan, loop-entry hoisting, pointer proofs from requested size, ↵Gravatar zinc 13 days1-0/+4
| | | | --explain-checks v1 (non-o3 code)
* rt: exact-size heap bounds; n, the words new asked for, lives in bits 32..62 ↵Gravatar zinc 13 days1-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | of p[-4] the bnd recipe and paylen read n instead of the power-of-two block: bnd: r6 = sub p 3; r6 = ld r6; r7 = xor p 0x2B7E1516; r6 = eq r6 r7; r7 = sub p 4; r7 = ld r7; r7 = shr r7 32; r7 = mul r7 q; r8 = mul i m; r8 = ltu r8 r7; r8 = xor r8 1; r0 = and r6 r8 paylen: return p[-4] >> 32 two loads instead of three; osize, bchk, release, recycle and the memdebug leak report all read n (rt.new(4) has length 4, rt.new(0) has 0). writers: new_raw and new_k set n; stack.h line 87 and tinyvm.ts (BigInt) set it on stack segments. release clears n when a block goes into quarantine (len 0, indexing traps; under memdebug bchk reports a use after free); every free-list path (fpush, mkblock, bdrop, recycle_leaf, balloc hold) rewrites the word as k << 16, and an array that grows gets a fresh block. a request over 2^31-1-HDR words stops in new_raw (oom), and the compiler only takes the new_k fast path for constant sizes that fit, so n is never truncated. bit users checked (all mask or preserve bits 32..62; none compares or copies the whole word): gc mark and sweep; release, free, recycle, recycle_leaf; share and own; isobj, quar, checkptr, obj_base; bclass and the bfree buddy merge; balloc, mkblock, fpush, funlink, heap_grow; frame_grow; stack_allocate in src/core/stack.h and src/js/tinyvm.ts; micro.c and core.c (check word only); the compiler's two p[-4] | F_INTERNAL writes (base.zc, builtins.zc). 32-bit ports: none (baremetal, wasm and micro use int64 Cell). tests: tests/programs/exactsize.zc (n-1/n for non-power-of-two sizes, new(0), packed bytes, recycle, grow, stack growth); 8-runtime: exact_size_bounds, pointer_index_n_minus_1, pointer_index_n_traps, pointer_index_n_traps_memdebug, new_zero_index_traps, new_too_big_traps, stale_index_after_free_traps, stale_index_after_free_memdebug. expectations changed: leak report shows n (tests/test.sh line 169, examples/learn/13-memdebug.out, docs/LEARN.md, 4-statements/memdebug_report_line.zc). programs adjusted to keep test.sh expectations: quarantine.zc (unbounded), bounds_heap.zc (rt.new(11)). spec 3.7.4 and 4.11 updated. fixpoint 402204 words (main 402197).
* len: len on a char* is an error with typecheck off too (appendix b.2.14)Gravatar zinc 13 days1-2/+2
|
* prototypes: parameters may be unnamed, int f(int, int*); (appendix b.2.13)Gravatar zinc 13 days1-2/+2
|
* as: the type after as is read greedily in both compilers; x as int * y is a ↵Gravatar zinc 13 days1-2/+2
| | | | syntax error (appendix b.2.12 settled, no compiler change)
* lexer: a block comment that is never closed is 'unterminated comment' ↵Gravatar zinc 13 days1-2/+2
| | | | (appendix b.2.11)
* bool: a value stored into a bool is normalised to 0 or 1 (appendix b.2.6)Gravatar zinc 13 days1-2/+2
|
* enum: a member is defined as soon as it is declared, so later values can ↵Gravatar zinc 13 days1-2/+2
| | | | name it (appendix b.2.2)
* globals: an integer constant initializing a float or f32 global converts to ↵Gravatar zinc 13 days1-1/+1
| | | | float (float g = 2; is 2.0)
* zc0umd: no recast uses a visible u/m/d as its tag (spec 1.6.3); spec: the ↵Gravatar zinc 13 days1-16/+23
| | | | fixed appendix b bugs are marked fixed
* bounds checking: constant loop bound proof works, plain-op fixed-array ↵Gravatar zinc 13 days1-5/+12
| | | | check, docs (readme, spec 4.15 and friends, server, vscode), conformance and test.sh fixes, todo
* line tables and backtraces: port agent/line-tables onto main, op 56 on the ↵Gravatar zinc 13 days1-5/+14
| | | | x86-64 jit, docs, measurements, tests; default genome reservation 0x68000
* Merge the defer statement; todo: tick it, add its follow-upsGravatar zinc 13 days1-0/+19
|\
| * zc: add the defer statementGravatar zinc 13 days1-0/+19
| | | | | | | | | | | | | | | | | | | | | | | | defer expr; and defer { ... } register code that runs when the enclosing block ends: at the end of the block, and at return, break and continue that leave it. the tokens are kept at the defer and compiled again at each exit (block_close, body, kw_return, kw_break, kw_continue), newest first, before the block's variables are released, so the analyzer sees a deferred rt.free(p) as the transfer of p where it runs. names mean what they meant at the defer; values are read when it runs. return, break and continue inside a deferred statement are errors, reported once. works in unchecked code and closures (own base per function context).
* | fix std hover, full capture terminator, bare static calls, void main in ↵Gravatar zinc 13 days1-2/+2
|/ | | | | | | | | | | | | run-only images - hover: a symbol from an embedded library source (tinyvm:std.zc, tinyvm:icon.zc) was looked up only in the document; look it up by its qualified name in the library source (hover_embedded_sym), and render a method found that way by its line (bs_hover). - std.capture: allocate one word more than the 256 it holds, so end() terminates inside the buffer. - a bare call to a static function of the enclosing struct resolves like a bare struct constant (mstruct is set for every non-generic struct's methods); the struct's own wins over a global. - run.zc declares main untyped (fn main();), so a run-only image accepts int, void or untyped main with both compilers.
* docs: add SPEC.md, the first written specification of zcGravatar zinc 13 days1-0/+1093
Reference for lexing, types, expressions (full precedence table), statements, declarations, the ownership analyzer and its messages, compile-time execution and the runtime contract, with appendices for the zc0 subset and for doc/implementation disagreements and bugs found while checking the rules against build/bin/zy. Pointers added to README.md and ONBOARD.md.
generated by cgit v1.2.3 (git 2.39.1) at 2026-10-27 14:00:40 +0000