✓
Passing This code compiles and runs correctly.
Code
// The World in Koru — entry 8, part three.
// Doorway: celld's node self-fence. (github.com/denoland/celld, Rust.)
//
// A celld node holds its authority as a lease in the bucket — `nodes/<node>.json`
// with an `expires_ms`, default TTL 10s, renewed every ttl/3, with a fence timer
// armed at ttl+1ms (`logic/lib.rs:1838-1844`). Miss the renewal and the node
// fences itself: `Effect::Halt { code: 3, reason: NodeLeaseExpired }`, and the
// process exits 3.
//
// The interesting part is what `fence()` does on the way out, and its comment
// says it exactly (`logic/lib.rs:3838-3843`):
//
// Any write still waiting on the output gate loses its cell here, so it
// must fail rather than be acknowledged — the fence and the fail are
// atomic. A late DurableReached for a drained op is ignored.
//
// So it walks `gated_writes` and completes every one as `Err(NodeFenced)`. That
// loop is the whole invariant: NO WRITE IS ACKNOWLEDGED AFTER AUTHORITY IS LOST.
// It is correct because someone wrote it, remembered to write it, and will keep
// it correct as the code grows around it.
//
// Here it is not a loop. `gate.ack` BORROWS `<lease>` — acknowledging requires
// live authority — while `gate.fail` needs nothing. Surrender the lease and the
// ack becomes unreachable, so a pending response has exactly one way out left.
// The fence and the fail are atomic because there is no other shape the program
// can take. 847 is the proof: a valid durability proof in hand is not enough.
//
// LANGUAGE CORNER: renewal and fencing are the same resource read at two
// strengths. `node.renew { lease: string<lease> }` BORROWS — authority survives
// it, so the ack after it is legal. `node.fence { lease: string<!lease> }`
// CONSUMES. Nothing in the names carries that difference; the angle brackets do.
//
// And note the cost this slice pays, pinned in 848: adding `node.fence` gives
// `<!lease>` a SECOND consumer, which retires auto-discharge for leases
// entirely. In 838 a forgotten release was inserted for you. Here every control
// path must say how authority ended — which is celld's own
// `release_or_fence_node_lease`, named for the choice it has to make.
import std/io
import std/store
std/store:new(own, capacity: 1) { epoch: 0[i64], etag: 0[i64] }
std/store:new(st, capacity: 1) { pos: 0[i64], synced: 0[i64] }
pub tor cas.claim { node: string, guard: i64 }
| applied string<lease!>
| rejected
cas.claim = if(guard == own.etag)
| then |> std/store:stored { own.etag: own.etag + 1, own.epoch: own.epoch + 1 } => applied node
| else => rejected
// The two ways authority can end. celld's shell calls exactly one function for
// this and names it `release_or_fence_node_lease`.
pub tor cas.release { lease: string<!lease> }
cas.release = std/io:print.ln(" release {{ lease:s }} — clean handoff")
pub tor node.fence { lease: string<!lease> }
node.fence = std/io:print.ln(" SELF-FENCE {{ lease:s }} — lease not renewed within TTL")
// Renewal borrows. Authority survives it, which is the whole point of a renewal.
pub tor node.renew { lease: string<lease> }
node.renew = std/io:print.ln(" renew {{ lease:s }}")
pub tor cell.write { lease: string<lease>, data: string }
| committed string<pending!>
| not-resident
cell.write = if(own.epoch > 0)
| then |> std/store:stored { st.pos: st.pos + 1 } => committed data
| else => not-resident
pub tor replica.sync { lease: string<lease>, upto: i64 }
| reached i64<durable!>
| behind
replica.sync = if(upto <= st.pos)
| then |> std/store:stored { st.synced: upto } => reached upto
| else => behind
// ACKNOWLEDGING NOW REQUIRES LIVE AUTHORITY. Failing does not.
pub tor gate.ack { r: string<!pending>, proof: i64<!durable>, lease: string<lease> }
gate.ack = std/io:print.ln(" ack {{ r:s }} — durable through {{ proof:d }}")
pub tor gate.fail { r: string<!pending>, why: string }
gate.fail = std/io:print.ln(" fail {{ r:s }} — {{ why:s }}")
// A request served under live, renewed authority.
pub tor served { lease: string<lease>, data: string }
served = cell.write(lease, data)
| committed r |> node.renew(lease) |> replica.sync(lease, upto: st.pos)
| reached p |> gate.ack(r, proof: p, lease)
| behind |> gate.fail(r, why: "durability unproven")
| not-resident |> std/io:print.ln(" not resident at commit epoch")
// msg-1 is served normally. msg-2 commits, and then the node loses its lease
// while that response is still gated — so the only remaining way out is a fail.
cas.claim(node: "node-a", guard: 0)
| applied l |> served(lease: l, data: "msg-1") |> cell.write(lease: l, data: "msg-2")
| committed r2 |> node.fence(lease: l) |> gate.fail(r: r2, why: "node fenced")
| not-resident |> std/io:print.ln(" not resident at commit epoch") |> cas.release(lease: l)
| rejected |> std/io:print.ln(" rejected")
Actual
renew node-a
ack msg-1 — durable through 1
SELF-FENCE node-a — lease not renewed within TTL
fail msg-2 — node fenced
Expected output
✓ Zig✓ C# renew node-a
ack msg-1 — durable through 1
SELF-FENCE node-a — lease not renewed within TTL
fail msg-2 — node fenced
Emitted Zig source
// Access compiler flags via the per-user compiler_env module
const CompilerEnv = @import("compiler_env").CompilerEnv;
pub const panic = if (@import("builtin").mode == .Debug)
@import("std").debug.FullPanic(@import("std").debug.defaultPanic)
else
@import("std").debug.simple_panic;
const __koru_bare = struct {
extern fn posix_memalign(memptr: *?*anyopaque, alignment: usize, size: usize) c_int;
extern fn free(ptr: ?*anyopaque) void;
fn bareAlloc(_: *anyopaque, len: usize, alignment: @import("std").mem.Alignment, _: usize) ?[*]u8 {
var p: ?*anyopaque = null;
const a = @max(alignment.toByteUnits(), @sizeOf(usize));
if (posix_memalign(&p, a, len) != 0) return null;
return @ptrCast(p);
}
fn bareResize(_: *anyopaque, _: []u8, _: @import("std").mem.Alignment, _: usize, _: usize) bool { return false; }
fn bareRemap(_: *anyopaque, _: []u8, _: @import("std").mem.Alignment, _: usize, _: usize) ?[*]u8 { return null; }
fn bareFree(_: *anyopaque, memory: []u8, _: @import("std").mem.Alignment, _: usize) void { free(@ptrCast(memory.ptr)); }
const vtable = @import("std").mem.Allocator.VTable{ .alloc = bareAlloc, .resize = bareResize, .remap = bareRemap, .free = bareFree };
const allocator = @import("std").mem.Allocator{ .ptr = undefined, .vtable = &vtable };
};
const __koru_backing = if (@import("builtin").link_libc) @import("std").heap.c_allocator else if (@import("builtin").os.tag == .freestanding) __koru_bare.allocator else @import("std").heap.page_allocator;
var __koru_leak_count: @import("std").atomic.Value(usize) = .init(0);
fn __koru_alloc(ctx: *anyopaque, len: usize, alignment: @import("std").mem.Alignment, ret_addr: usize) ?[*]u8 {
_ = ctx;
const r = __koru_backing.rawAlloc(len, alignment, ret_addr);
if (comptime @import("builtin").mode == .Debug) {
if (r != null) _ = __koru_leak_count.fetchAdd(1, .monotonic);
}
return r;
}
fn __koru_resize(ctx: *anyopaque, memory: []u8, alignment: @import("std").mem.Alignment, new_len: usize, ret_addr: usize) bool {
_ = ctx;
return __koru_backing.rawResize(memory, alignment, new_len, ret_addr);
}
fn __koru_remap(ctx: *anyopaque, memory: []u8, alignment: @import("std").mem.Alignment, new_len: usize, ret_addr: usize) ?[*]u8 {
_ = ctx;
return __koru_backing.rawRemap(memory, alignment, new_len, ret_addr);
}
fn __koru_free(ctx: *anyopaque, memory: []u8, alignment: @import("std").mem.Alignment, ret_addr: usize) void {
_ = ctx;
__koru_backing.rawFree(memory, alignment, ret_addr);
if (comptime @import("builtin").mode == .Debug) {
_ = __koru_leak_count.fetchSub(1, .monotonic);
}
}
const __koru_vtable = @import("std").mem.Allocator.VTable{ .alloc = __koru_alloc, .resize = __koru_resize, .remap = __koru_remap, .free = __koru_free };
pub fn koru_allocator() @import("std").mem.Allocator {
return .{ .ptr = undefined, .vtable = &__koru_vtable };
}
pub inline fn __koru_intcast(comptime T: type, x: anytype) T {
if (comptime (@import("builtin").mode == .Debug or @import("builtin").mode == .ReleaseSafe))
return @as(T, @intCast(x));
const dst = @typeInfo(T);
const src = @typeInfo(@TypeOf(x));
if (comptime (dst == .int and src == .int and dst.int.bits == src.int.bits and dst.int.signedness != src.int.signedness))
return @as(T, @bitCast(x));
return @as(T, @intCast(x));
}
pub fn koru_leak_check() void {
if (comptime @import("builtin").mode != .Debug) return;
if (__koru_leak_count.load(.acquire) == 0) return;
if (comptime @import("builtin").target.os.tag == .freestanding) {
if (comptime @import("builtin").cpu.arch == .wasm32 or @import("builtin").cpu.arch == .wasm64) {
@panic("KORU LEAK CHECK FAILED: the produced program leaked");
} else {
const __klc = struct { extern var stdout: ?*anyopaque; extern fn fputs(__s: [*:0]const u8, __st: ?*anyopaque) c_int; };
var __lb: [128]u8 = undefined;
const __lm = "KORU LEAK CHECK FAILED: allocations still outstanding at end of run: ";
@memcpy(__lb[0..__lm.len], __lm);
var __ln: usize = __lm.len;
var __lv = __koru_leak_count.load(.acquire);
var __ld: [20]u8 = undefined;
var __lk: usize = 0;
while (__lv > 0) : (__lk += 1) { __ld[__lk] = @intCast('0' + __lv % 10); __lv /= 10; }
for (0..__lk) |__li| { __lb[__ln] = __ld[__lk - 1 - __li]; __ln += 1; }
__lb[__ln] = '\n'; __ln += 1; __lb[__ln] = 0;
_ = __klc.fputs(@as([*:0]const u8, @ptrCast(&__lb)), __klc.stdout);
@trap();
}
} else {
@import("std").debug.print("KORU LEAK CHECK FAILED: the produced program leaked (trace above)\n", .{});
@import("std").process.exit(1);
}
}
pub const main_module = struct {
// std/store: 'own' created (cell + write-subflow at module scope); fields epoch: i64, etag: i64
// std/store: 'st' created (cell + write-subflow at module scope); fields pos: i64, synced: i64
pub const cas_claim_event = struct {
pub const Input = struct {
node: []const u8,
guard: i64,
};
pub const Output = union(enum(u8)) {
applied: []const u8,
rejected: struct {
},
};
pub fn handler(__koru_event_input: @This().Input) @This().Output {
// >>> SUBFLOW: tests/regression/830_THE_WORLD/846_celld_fence_forces_failure/input.k:48
const node = __koru_event_input.node;
const guard = __koru_event_input.guard;
_ = &node;
_ = &guard;
_ = &__koru_event_input;
if ((blk: { const __koru_l = guard; const __koru_r = __koru_store_own.etag; const __koru_lo = @typeInfo(@TypeOf(__koru_l)) == .optional; const __koru_ro = @typeInfo(@TypeOf(__koru_r)) == .optional; const __koru_lp = if (__koru_lo) @typeInfo(@TypeOf(__koru_l)).optional.child else @TypeOf(__koru_l); const __koru_rp = if (__koru_ro) @typeInfo(@TypeOf(__koru_r)).optional.child else @TypeOf(__koru_r); const __koru_ls = __koru_str: { const __koru_ty = @typeInfo(__koru_lp); if (__koru_ty == .array) break :__koru_str __koru_ty.array.child == u8; if (__koru_ty == .pointer) { const __koru_ptr = __koru_ty.pointer; if (__koru_ptr.size == .slice and __koru_ptr.child == u8) break :__koru_str true; break :__koru_str __koru_ptr.size == .one and @typeInfo(__koru_ptr.child) == .array and @typeInfo(__koru_ptr.child).array.child == u8; } break :__koru_str false; }; const __koru_rs = __koru_str: { const __koru_ty = @typeInfo(__koru_rp); if (__koru_ty == .array) break :__koru_str __koru_ty.array.child == u8; if (__koru_ty == .pointer) { const __koru_ptr = __koru_ty.pointer; if (__koru_ptr.size == .slice and __koru_ptr.child == u8) break :__koru_str true; break :__koru_str __koru_ptr.size == .one and @typeInfo(__koru_ptr.child) == .array and @typeInfo(__koru_ptr.child).array.child == u8; } break :__koru_str false; }; if (__koru_ls and __koru_rs) { const __koru_ln = if (__koru_lo) __koru_l == null else false; const __koru_rn = if (__koru_ro) __koru_r == null else false; break :blk (__koru_ln == __koru_rn) and (__koru_ln or @import("std").mem.eql(u8, if (__koru_lo) __koru_l.? else __koru_l, if (__koru_ro) __koru_r.? else __koru_r)); } else break :blk __koru_l == __koru_r; })) {
{ const result_c0_0 = main_module.__store_envwrite_own_event.handler(.{ .field = @as(i64, @bitCast(@as(u64, 1) << 1)), .value = __koru_store_own.etag + 1 });
_ = &result_c0_0;
const result_c0_1 = main_module.__store_envwrite_own_event.handler(.{ .field = @as(i64, @bitCast(@as(u64, 1) << 0)), .value = __koru_store_own.epoch + 1 });
_ = &result_c0_1;
const result_c0_2 = main_module.__store_announce_own_event.handler(.{ .field = 1 });
_ = &result_c0_2;
const result_c0_3 = main_module.__store_announce_own_event.handler(.{ .field = 0 });
_ = &result_c0_3;
return .{ .applied = node };
}
} else {
{ return .{ .rejected = .{ } };
}
}
}
};
pub const cas_release_event = struct {
pub const Input = struct {
lease: []const u8,
};
pub const Output = void;
pub fn handler(__koru_event_input: @This().Input) @This().Output {
// >>> SUBFLOW: tests/regression/830_THE_WORLD/846_celld_fence_forces_failure/input.k:55
const lease = __koru_event_input.lease;
_ = &lease;
_ = &__koru_event_input;
(struct { fn __kout(__fd: i32, __b: []const u8) void { if (@import("builtin").os.tag == .freestanding) { const __kc = struct { extern var stdout: ?*anyopaque; extern var stderr: ?*anyopaque; extern fn fputs(__s: [*:0]const u8, __st: ?*anyopaque) c_int; }; var __kt: [4096]u8 = undefined; for (0..(__b.len + __kt.len - 2) / (__kt.len - 1)) |__ki| { const __kn = @min(__kt.len - 1, __b.len - __ki * (__kt.len - 1)); @memcpy(__kt[0..__kn], __b[__ki * (__kt.len - 1)..][0..__kn]); __kt[__kn] = 0; @import("std").mem.doNotOptimizeAway(__kc.fputs(@as([*:0]const u8, @ptrCast(&__kt)), if (__fd == 2) __kc.stderr else __kc.stdout)); } } else { @import("std").mem.doNotOptimizeAway(@import("std").posix.write(__fd, __b) catch @as(usize, 0)); } } fn __kw(comptime __f: []const u8, __a: anytype) void { var __kb: [65536]u8 = undefined; const __ks = @import("std").fmt.bufPrint(&__kb, __f, __a) catch __kb[0..0]; __kout(1, __ks); } }).__kw(" release {s} — clean handoff\n", .{lease});
}
};
pub const node_fence_event = struct {
pub const Input = struct {
lease: []const u8,
};
pub const Output = void;
pub fn handler(__koru_event_input: @This().Input) @This().Output {
// >>> SUBFLOW: tests/regression/830_THE_WORLD/846_celld_fence_forces_failure/input.k:58
const lease = __koru_event_input.lease;
_ = &lease;
_ = &__koru_event_input;
(struct { fn __kout(__fd: i32, __b: []const u8) void { if (@import("builtin").os.tag == .freestanding) { const __kc = struct { extern var stdout: ?*anyopaque; extern var stderr: ?*anyopaque; extern fn fputs(__s: [*:0]const u8, __st: ?*anyopaque) c_int; }; var __kt: [4096]u8 = undefined; for (0..(__b.len + __kt.len - 2) / (__kt.len - 1)) |__ki| { const __kn = @min(__kt.len - 1, __b.len - __ki * (__kt.len - 1)); @memcpy(__kt[0..__kn], __b[__ki * (__kt.len - 1)..][0..__kn]); __kt[__kn] = 0; @import("std").mem.doNotOptimizeAway(__kc.fputs(@as([*:0]const u8, @ptrCast(&__kt)), if (__fd == 2) __kc.stderr else __kc.stdout)); } } else { @import("std").mem.doNotOptimizeAway(@import("std").posix.write(__fd, __b) catch @as(usize, 0)); } } fn __kw(comptime __f: []const u8, __a: anytype) void { var __kb: [65536]u8 = undefined; const __ks = @import("std").fmt.bufPrint(&__kb, __f, __a) catch __kb[0..0]; __kout(1, __ks); } }).__kw(" SELF-FENCE {s} — lease not renewed within TTL\n", .{lease});
}
};
pub const node_renew_event = struct {
pub const Input = struct {
lease: []const u8,
};
pub const Output = void;
pub fn handler(__koru_event_input: @This().Input) @This().Output {
// >>> SUBFLOW: tests/regression/830_THE_WORLD/846_celld_fence_forces_failure/input.k:62
const lease = __koru_event_input.lease;
_ = &lease;
_ = &__koru_event_input;
(struct { fn __kout(__fd: i32, __b: []const u8) void { if (@import("builtin").os.tag == .freestanding) { const __kc = struct { extern var stdout: ?*anyopaque; extern var stderr: ?*anyopaque; extern fn fputs(__s: [*:0]const u8, __st: ?*anyopaque) c_int; }; var __kt: [4096]u8 = undefined; for (0..(__b.len + __kt.len - 2) / (__kt.len - 1)) |__ki| { const __kn = @min(__kt.len - 1, __b.len - __ki * (__kt.len - 1)); @memcpy(__kt[0..__kn], __b[__ki * (__kt.len - 1)..][0..__kn]); __kt[__kn] = 0; @import("std").mem.doNotOptimizeAway(__kc.fputs(@as([*:0]const u8, @ptrCast(&__kt)), if (__fd == 2) __kc.stderr else __kc.stdout)); } } else { @import("std").mem.doNotOptimizeAway(@import("std").posix.write(__fd, __b) catch @as(usize, 0)); } } fn __kw(comptime __f: []const u8, __a: anytype) void { var __kb: [65536]u8 = undefined; const __ks = @import("std").fmt.bufPrint(&__kb, __f, __a) catch __kb[0..0]; __kout(1, __ks); } }).__kw(" renew {s}\n", .{lease});
}
};
pub const cell_write_event = struct {
pub const Input = struct {
lease: []const u8,
data: []const u8,
};
pub const Output = union(enum(u8)) {
committed: []const u8,
not_resident: struct {
},
};
pub fn handler(__koru_event_input: @This().Input) @This().Output {
// >>> SUBFLOW: tests/regression/830_THE_WORLD/846_celld_fence_forces_failure/input.k:67
const lease = __koru_event_input.lease;
const data = __koru_event_input.data;
_ = &lease;
_ = &data;
_ = &__koru_event_input;
if (__koru_store_own.epoch > 0) {
{ const result_c0_0 = main_module.__store_write_st_event.handler(.{ .field = 0, .value = __koru_store_st.pos + 1 });
_ = &result_c0_0;
return .{ .committed = data };
}
} else {
{ return .{ .not_resident = .{ } };
}
}
}
};
pub const replica_sync_event = struct {
pub const Input = struct {
lease: []const u8,
upto: i64,
};
pub const Output = union(enum(u8)) {
reached: i64,
behind: struct {
},
};
pub fn handler(__koru_event_input: @This().Input) @This().Output {
// >>> SUBFLOW: tests/regression/830_THE_WORLD/846_celld_fence_forces_failure/input.k:74
const lease = __koru_event_input.lease;
const upto = __koru_event_input.upto;
_ = &lease;
_ = &upto;
_ = &__koru_event_input;
if (upto <= __koru_store_st.pos) {
{ const result_c0_0 = main_module.__store_write_st_event.handler(.{ .field = 1, .value = upto });
_ = &result_c0_0;
return .{ .reached = upto };
}
} else {
{ return .{ .behind = .{ } };
}
}
}
};
pub const gate_ack_event = struct {
pub const Input = struct {
r: []const u8,
proof: i64,
lease: []const u8,
};
pub const Output = void;
pub fn handler(__koru_event_input: @This().Input) @This().Output {
// >>> SUBFLOW: tests/regression/830_THE_WORLD/846_celld_fence_forces_failure/input.k:80
const r = __koru_event_input.r;
const proof = __koru_event_input.proof;
const lease = __koru_event_input.lease;
_ = &r;
_ = &proof;
_ = &lease;
_ = &__koru_event_input;
(struct { fn __kout(__fd: i32, __b: []const u8) void { if (@import("builtin").os.tag == .freestanding) { const __kc = struct { extern var stdout: ?*anyopaque; extern var stderr: ?*anyopaque; extern fn fputs(__s: [*:0]const u8, __st: ?*anyopaque) c_int; }; var __kt: [4096]u8 = undefined; for (0..(__b.len + __kt.len - 2) / (__kt.len - 1)) |__ki| { const __kn = @min(__kt.len - 1, __b.len - __ki * (__kt.len - 1)); @memcpy(__kt[0..__kn], __b[__ki * (__kt.len - 1)..][0..__kn]); __kt[__kn] = 0; @import("std").mem.doNotOptimizeAway(__kc.fputs(@as([*:0]const u8, @ptrCast(&__kt)), if (__fd == 2) __kc.stderr else __kc.stdout)); } } else { @import("std").mem.doNotOptimizeAway(@import("std").posix.write(__fd, __b) catch @as(usize, 0)); } } fn __kw(comptime __f: []const u8, __a: anytype) void { var __kb: [65536]u8 = undefined; const __ks = @import("std").fmt.bufPrint(&__kb, __f, __a) catch __kb[0..0]; __kout(1, __ks); } }).__kw(" ack {s} — durable through {d}\n", .{r, proof});
}
};
pub const gate_fail_event = struct {
pub const Input = struct {
r: []const u8,
why: []const u8,
};
pub const Output = void;
pub fn handler(__koru_event_input: @This().Input) @This().Output {
// >>> SUBFLOW: tests/regression/830_THE_WORLD/846_celld_fence_forces_failure/input.k:83
const r = __koru_event_input.r;
const why = __koru_event_input.why;
_ = &r;
_ = &why;
_ = &__koru_event_input;
(struct { fn __kout(__fd: i32, __b: []const u8) void { if (@import("builtin").os.tag == .freestanding) { const __kc = struct { extern var stdout: ?*anyopaque; extern var stderr: ?*anyopaque; extern fn fputs(__s: [*:0]const u8, __st: ?*anyopaque) c_int; }; var __kt: [4096]u8 = undefined; for (0..(__b.len + __kt.len - 2) / (__kt.len - 1)) |__ki| { const __kn = @min(__kt.len - 1, __b.len - __ki * (__kt.len - 1)); @memcpy(__kt[0..__kn], __b[__ki * (__kt.len - 1)..][0..__kn]); __kt[__kn] = 0; @import("std").mem.doNotOptimizeAway(__kc.fputs(@as([*:0]const u8, @ptrCast(&__kt)), if (__fd == 2) __kc.stderr else __kc.stdout)); } } else { @import("std").mem.doNotOptimizeAway(@import("std").posix.write(__fd, __b) catch @as(usize, 0)); } } fn __kw(comptime __f: []const u8, __a: anytype) void { var __kb: [65536]u8 = undefined; const __ks = @import("std").fmt.bufPrint(&__kb, __f, __a) catch __kb[0..0]; __kout(1, __ks); } }).__kw(" fail {s} — {s}\n", .{r, why});
}
};
pub const served_event = struct {
pub const Input = struct {
lease: []const u8,
data: []const u8,
};
pub const Output = void;
pub fn handler(__koru_event_input: @This().Input) @This().Output {
// >>> SUBFLOW: tests/regression/830_THE_WORLD/846_celld_fence_forces_failure/input.k:87
const lease = __koru_event_input.lease;
const data = __koru_event_input.data;
_ = &lease;
_ = &data;
_ = &__koru_event_input;
const result = main_module.cell_write_event.handler(.{ .lease = lease, .data = data });
switch (result) {
// >>> BRANCH: tests/regression/830_THE_WORLD/846_celld_fence_forces_failure/input.k:91 | not-resident |>
.not_resident => {
(struct { fn __kout(__fd: i32, __b: []const u8) void { if (@import("builtin").os.tag == .freestanding) { const __kc = struct { extern var stdout: ?*anyopaque; extern var stderr: ?*anyopaque; extern fn fputs(__s: [*:0]const u8, __st: ?*anyopaque) c_int; }; var __kt: [4096]u8 = undefined; for (0..(__b.len + __kt.len - 2) / (__kt.len - 1)) |__ki| { const __kn = @min(__kt.len - 1, __b.len - __ki * (__kt.len - 1)); @memcpy(__kt[0..__kn], __b[__ki * (__kt.len - 1)..][0..__kn]); __kt[__kn] = 0; @import("std").mem.doNotOptimizeAway(__kc.fputs(@as([*:0]const u8, @ptrCast(&__kt)), if (__fd == 2) __kc.stderr else __kc.stdout)); } } else { @import("std").mem.doNotOptimizeAway(@import("std").posix.write(__fd, __b) catch @as(usize, 0)); } } fn __kw(comptime __f: []const u8, __a: anytype) void { var __kb: [65536]u8 = undefined; const __ks = @import("std").fmt.bufPrint(&__kb, __f, __a) catch __kb[0..0]; __kout(1, __ks); } }).__kw(" not resident at commit epoch\n", .{});
},
// >>> BRANCH: tests/regression/830_THE_WORLD/846_celld_fence_forces_failure/input.k:88 | committed r |>
.committed => |r| {
_ = &r;
const result_0 = main_module.node_renew_event.handler(.{ .lease = lease });
_ = &result_0;
const result_1 = main_module.replica_sync_event.handler(.{ .lease = lease, .upto = __koru_store_st.pos });
_ = &result_1;
switch (result_1) {
// >>> BRANCH: tests/regression/830_THE_WORLD/846_celld_fence_forces_failure/inp
... [truncated - 31KB total]Emitted C# source
static class main_module {
public static void __koru_stdout_write(dynamic s) => global::System.Console.Out.Write(s);
public static void __koru_stderr_write(dynamic s) => global::System.Console.Error.Write(s);
// The mutable handle carrier — `*String`-style resources are
// `new __KoruBox { data = … }` because C# anonymous types are
// read-only: `s.data = …` (std/string append/clear, handle
// mutation generally) needs a settable member.
public class __KoruBox { public dynamic data; }
// Textification for `{{ … }}` operands: C# bool ToStrings as
// `True` where Koru prints `true`, and the operand's static type
// is unknown at this boundary — a `(x) is bool` inline test would
// be a compile error on statically-typed operands instead. Generic
// on purpose: `dynamic` boxed every value-type operand — measured
// ~1s/10M elements on 012_threat_scanner — while T specializes to
// the operand's own ToString() with no box.
public static string __koru_str<T>(T v) => v is bool b ? (b ? "true" : "false") : v?.ToString();
// std/store: 'own' created (cell + write-subflow at module scope); fields epoch: i64, etag: i64
// std/store: 'st' created (cell + write-subflow at module scope); fields pos: i64, synced: i64
static class __koru_store_own {
public static long epoch = 0;
public static long etag = 0;
public static long __koru_brand = -1;
}
static class __koru_store_st {
public static long pos = 0;
public static long synced = 0;
public static long __koru_brand = -1;
}
public static class cas_claim_event {
public struct Input {
public string node;
public long guard;
}
public struct Output {
public string tag;
public string applied;
public dynamic rejected;
}
public static Output handler(Input __koru_input) {
var node = __koru_input.node;
var guard = __koru_input.guard;
if (guard == __koru_store_own.etag) {
{ {
var __koru_p_field = (long)((long)((long)((ulong)((ulong)(1) << 1))));
var __koru_p_value = (long)(__koru_store_own.etag + 1);
var __koru_mask = (ulong)__koru_p_field;
if ((__koru_mask & (1UL << 0)) != 0) __koru_store_own.epoch = __koru_p_value;
if ((__koru_mask & (1UL << 1)) != 0) __koru_store_own.etag = __koru_p_value;
}
{
var __koru_p_field = (long)((long)((long)((ulong)((ulong)(1) << 0))));
var __koru_p_value = (long)(__koru_store_own.epoch + 1);
var __koru_mask = (ulong)__koru_p_field;
if ((__koru_mask & (1UL << 0)) != 0) __koru_store_own.epoch = __koru_p_value;
if ((__koru_mask & (1UL << 1)) != 0) __koru_store_own.etag = __koru_p_value;
}
{
var __koru_p_field = (long)(1);
}
{
var __koru_p_field = (long)(0);
}
return new Output { tag = "applied", applied = node };
}
} else {
{ return new Output { tag = "rejected" };
}
}
return default;
}
}
public static class cas_release_event {
public struct Input {
public string lease;
}
public static dynamic handler(Input __koru_input) {
var lease = __koru_input.lease;
__koru_stdout_write(" release " + __koru_str(lease) + " — clean handoff" + "\n");
return default;
}
}
public static class node_fence_event {
public struct Input {
public string lease;
}
public static dynamic handler(Input __koru_input) {
var lease = __koru_input.lease;
__koru_stdout_write(" SELF-FENCE " + __koru_str(lease) + " — lease not renewed within TTL" + "\n");
return default;
}
}
public static class node_renew_event {
public struct Input {
public string lease;
}
public static dynamic handler(Input __koru_input) {
var lease = __koru_input.lease;
__koru_stdout_write(" renew " + __koru_str(lease) + "\n");
return default;
}
}
public static class cell_write_event {
public struct Input {
public string lease;
public string data;
}
public struct Output {
public string tag;
public string committed;
public dynamic not_resident;
}
public static Output handler(Input __koru_input) {
var lease = __koru_input.lease;
var data = __koru_input.data;
if (__koru_store_own.epoch > 0) {
{ main_module.__store_write_st_event.handler(new __store_write_st_event.Input { field = (long)(0), value = (long)(__koru_store_st.pos + 1)});
return new Output { tag = "committed", committed = data };
}
} else {
{ return new Output { tag = "not-resident" };
}
}
return default;
}
}
public static class replica_sync_event {
public struct Input {
public string lease;
public long upto;
}
public struct Output {
public string tag;
public long reached;
public dynamic behind;
}
public static Output handler(Input __koru_input) {
var lease = __koru_input.lease;
var upto = __koru_input.upto;
if (upto <= __koru_store_st.pos) {
{ main_module.__store_write_st_event.handler(new __store_write_st_event.Input { field = (long)(1), value = (long)(upto)});
return new Output { tag = "reached", reached = upto };
}
} else {
{ return new Output { tag = "behind" };
}
}
return default;
}
}
public static class gate_ack_event {
public struct Input {
public string r;
public long proof;
public string lease;
}
public static dynamic handler(Input __koru_input) {
var r = __koru_input.r;
var proof = __koru_input.proof;
var lease = __koru_input.lease;
__koru_stdout_write(" ack " + __koru_str(r) + " — durable through " + __koru_str(proof) + "\n");
return default;
}
}
public static class gate_fail_event {
public struct Input {
public string r;
public string why;
}
public static dynamic handler(Input __koru_input) {
var r = __koru_input.r;
var why = __koru_input.why;
__koru_stdout_write(" fail " + __koru_str(r) + " — " + __koru_str(why) + "\n");
return default;
}
}
public static class served_event {
public struct Input {
public string lease;
public string data;
}
public static dynamic handler(Input __koru_input) {
var lease = __koru_input.lease;
var data = __koru_input.data;
var result_0 = main_module.cell_write_event.handler(new cell_write_event.Input { lease = (string)(lease), data = (string)(data)});
if (result_0.tag == "committed") {
var r = result_0.committed;
main_module.node_renew_event.handler(new node_renew_event.Input { lease = (string)(lease)});
var result_1 = main_module.replica_sync_event.handler(new replica_sync_event.Input { lease = (string)(lease), upto = (long)(__koru_store_st.pos)});
if (result_1.tag == "reached") {
var p = result_1.reached;
main_module.gate_ack_event.handler(new gate_ack_event.Input { r = (string)(r), proof = (long)(p), lease = (string)(lease)});
}
if (result_1.tag == "behind") {
main_module.gate_fail_event.handler(new gate_fail_event.Input { r = (string)(r), why = (string)("durability unproven")});
}
}
if (result_0.tag == "not-resident") {
__koru_stdout_write(" not resident at commit epoch" + "\n");
}
return default;
}
}
public static class __store_apply_own_event {
public struct Input {
public long field;
public long value;
}
public struct Output {
public string tag;
public long epoch;
public long etag;
}
public static Output handler(Input __koru_input) {
var field = __koru_input.field;
var value = __koru_input.value;
switch (field) {
case 0: { __koru_store_own.epoch = value; return new Output { tag = "epoch", epoch = value }; }
case 1: { __koru_store_own.etag = value; return new Output { tag = "etag", etag = value }; }
}
throw new global::System.Exception("__store_apply_own: field index " + field + " is not a column of store 'own'");
return default;
}
}
public static class __store_announce_own_event {
public struct Input {
public long field;
}
public static dynamic handler(Input __koru_input) {
var field = __koru_input.field;
return default;
}
}
public static class __store_envwrite_own_event {
public struct Input {
public long field;
public long value;
}
public static dynamic handler(Input __koru_input) {
var field = __koru_input.field;
var value = __koru_input.value;
var __koru_mask = (ulong)field;
if ((__koru_mask & (1UL << 0)) != 0) __koru_store_own.epoch = value;
if ((__koru_mask & (1UL << 1)) != 0) __koru_store_own.etag = value;
return default;
}
}
public static class __store_apply_st_event {
public struct Input {
public long field;
public long value;
}
public struct Output {
public string tag;
public long pos;
public long synced;
}
public static Output handler(Input __koru_input) {
var field = __koru_input.field;
var value = __koru_input.value;
switch (field) {
case 0: { __koru_store_st.pos = value; return new Output { tag = "pos", pos = value }; }
case 1: { __koru_store_st.synced = value; return new Output { tag = "synced", synced = value }; }
}
throw new global::System.Exception("__store_apply_st: field index " + field + " is not a column of store 'st'");
return default;
}
}
public static class __store_write_st_event {
public struct Input {
public long field;
public long value;
}
public static dynamic handler(Input __koru_input) {
var field = __koru_input.field;
var value = __koru_input.value;
var result_2 = main_module.__store_apply_st_event.handler(new __store_apply_st_event.Input { field = (long)(field), value = (long)(value)});
if (result_2.tag == "pos") {
var _auto_8 = result_2.pos;
}
if (result_2.tag == "synced") {
var _auto_9 = result_2.synced;
}
return default;
}
}
public static class __store_announce_st_event {
public struct Input {
public long field;
}
public static dynamic handler(Input __koru_input) {
var field = __koru_input.field;
return default;
}
}
public static class std_control_if_event {
public struct Input {
public dynamic expr;
}
public struct Output {
public string tag;
public dynamic then;
public dynamic @else;
}
public static Output handler(Input __koru_input) {
var expr = __koru_input.expr;
throw new global::System.Exception("if: |template| proc is inlined at call sites and must never be called");
}
}
public static class koru_start_event {
public struct Input {
}
public struct Output {
public string tag;
public dynamic done;
}
public static Output handler(Input __koru_input) => new Output { tag = "done" };
}
public static class koru_end_event {
public struct Input {
}
public struct Output {
public string tag;
public dynamic done;
}
public static Output handler(Input __koru_input) => new Output { tag = "done" };
}
public static void flow0() {
var result_3 = main_module.cas_claim_event.handler(new cas_claim_event.Input { node = (string)("node-a"), guard = (long)(0)});
if (result_3.tag == "applied") {
var l = result_3.applied;
main_module.served_event.handler(new served_event.Input { lease = (string)(l), data = (string)("msg-1")});
var result_4 = main_module.cell_write_event.handler(new cell_write_event.Input { lease = (string)(l), data = (string)("msg-2")});
if (result_4.tag == "committed") {
var r2 = result_4.committed;
main_module.node_fence_event.handler(new node_fence_event.Input { lease = (string)(l)});
main_module.gate_fail_event.handler(new gate_fail_event.Input { r = (string)(r2), why = (string)("node fenced")});
}
if (result_4.tag == "not-resident") {
__koru_stdout_write(" not resident at commit epoch" + "\n");
main_module.cas_release_event.handler(new cas_release_event.Input { lease = (string)(l)});
}
}
if (result_3.tag == "rejected") {
__koru_stdout_write(" rejected" + "\n");
}
}
public static void flow1() {
main_module.koru_start_event.handler(new koru_start_event.Input { });
}
public static void flow2() {
main_module.koru_end_event.handler(new koru_end_event.Input { });
}
}
static class Program {
static void Main() {
main_module.flow1();
main_module.flow0();
main_module.flow2();
}
}
Flows
flow ~new click a branch to expand · @labels scroll to their anchor
new (own, capacity: 1, source: epoch: 0[i64], etag: 0[i64])
flow ~new click a branch to expand · @labels scroll to their anchor
new (st, capacity: 1, source: pos: 0[i64], synced: 0[i64])
subflow ~cas.claim click a branch to expand · @labels scroll to their anchor
if (guard == own.etag)
subflow ~cas.release click a branch to expand · @labels scroll to their anchor
print.ln (expr: " release {{ lease:s }} — clean handoff")
subflow ~node.fence click a branch to expand · @labels scroll to their anchor
print.ln (expr: " SELF-FENCE {{ lease:s }} — lease not renewed within TTL")
subflow ~node.renew click a branch to expand · @labels scroll to their anchor
print.ln (expr: " renew {{ lease:s }}")
subflow ~cell.write click a branch to expand · @labels scroll to their anchor
if (own.epoch > 0)
subflow ~replica.sync click a branch to expand · @labels scroll to their anchor
if (upto <= st.pos)
subflow ~gate.ack click a branch to expand · @labels scroll to their anchor
print.ln (expr: " ack {{ r:s }} — durable through {{ proof:d }}")
subflow ~gate.fail click a branch to expand · @labels scroll to their anchor
print.ln (expr: " fail {{ r:s }} — {{ why:s }}")
subflow ~served click a branch to expand · @labels scroll to their anchor
cell.write (lease, data)
flow ~cas.claim click a branch to expand · @labels scroll to their anchor
cas.claim (node: "node-a", guard: 0)
Test Configuration
MUST_RUN LANGUAGES: zig cs