1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
//! Pure, typed actor-behavior primitives.
//!
//! [`Protocol`] is stable public destination identity (`Addr` plus `Msg`). A
//! [`Behavior`] separately owns state and folds its complete [`Behavior::Event`]
//! algebra into exactly [`Actions`]: sends, fresh creations, and its next
//! behavior or termination. A protocol is not a behavior, and `Behavior` is not
//! a `Protocol` supertrait. Higher capabilities extend internal event and
//! effect algebras while transparent wrappers preserve [`Behavior::Protocol`].
//!
//! Finite mailbox execution belongs to a runtime or test driver, not to this
//! one-turn behavior algebra.
//!
//! ```compile_fail
//! use behavior::ActionReducer;
//! ```
//!
//! Capability-restricted action products use the existing `Actions` algebra;
//! there is no second convenience wrapper with an overlapping contract.
//!
//! ```compile_fail
//! fn accepts_duplicate(_: behavior::Effect<u8>) {}
//! ```
// The `#[behavior]` expansion emits `::behavior::…` paths; this alias lets the
// expansion resolve inside this crate too.
extern crate self as behavior;
pub use ;
pub use ;
pub use ;
pub use ;
pub use ;
/// Generate the nominal protocol, closed effect products, and exact `Behavior`
/// wiring for an inherent impl. `addr` and `message` are required. Omitting
/// `sends`, `births`, or `error` selects the capability-free `NoSends`,
/// `NoBirths`, or `Never` type respectively.
///
/// A `sends = { lane: Product }` declaration generates `ActorSends`, one
/// distinct `ActorSendsLane` selector per field, and structural `SendEffects`,
/// `SendsFor`, [`SendSettlements`], and `InterpretSends` implementations. The
/// doc-hidden `ActorSettlements` product keeps the same semantic field names
/// and has one runtime-independent type. The macro also generates an
/// `ActorActions` extension trait with one fluent `send_lane` method per named
/// lane. Each method delegates to [`AppendSend`], changing only the send leg
/// while preserving creations and the exact next-behavior verdict. A
/// `births = { lane: Child }` declaration generates `ActorChildren` as the
/// exact closed child algebra. One child remains its direct concrete type;
/// multiple alternatives form `ChildChoice` in declaration order. The macro
/// also generates one nominal role per declaration and an `ActorChild`
/// namespace for those roles. Every role implements both [`ChildRole`] for its
/// authored parent and [`ChildOccurrence`] for sealed resolution against that
/// parent or a topology-transparent wrapper. Creation remains an authored
/// [`Creations`] or [`Children`] value and is never performed by the macro.
///
/// Invalid receivers are rejected at compile time.
///
/// ```compile_fail
/// use behavior::{Actions, BehaviorActed, MailAddr};
///
/// struct Invalid;
/// #[behavior::behavior(
/// addr = MailAddr,
/// message = u8,
/// )]
/// impl Invalid {
/// fn init(&self) -> BehaviorActed<Self> {
/// Ok(Actions::cont())
/// }
/// fn receive(&mut self, _: MailAddr, _: u8) -> BehaviorActed<Self> {
/// Ok(Actions::cont())
/// }
/// }
/// ```
///
/// Missing receive methods are rejected by the macro itself:
///
/// ```compile_fail
/// use behavior::MailAddr;
/// struct Missing;
/// #[behavior::behavior(
/// addr = MailAddr,
/// message = u8,
/// )]
/// impl Missing {
/// }
/// ```
///
/// Async behavior methods cannot introduce an erased or alternate execution
/// path:
///
/// ```compile_fail
/// use behavior::{Actions, BehaviorActed, MailAddr};
/// struct Async;
/// #[behavior::behavior(
/// addr = MailAddr,
/// message = u8,
/// )]
/// impl Async {
/// async fn init(&mut self) -> BehaviorActed<Self> {
/// Ok(Actions::cont())
/// }
/// fn receive(&mut self, _: MailAddr, _: u8) -> BehaviorActed<Self> {
/// Ok(Actions::cont())
/// }
/// }
/// ```
///
/// Undeclared send lanes have no selector and cannot be emitted:
///
/// ```compile_fail
/// use behavior::{Actions, BehaviorActed, MailAddr, SendEffects};
/// struct Sender;
/// #[behavior::behavior(addr = MailAddr, message = (), sends = { replies: Vec<u8> })]
/// impl Sender {
/// fn receive(&mut self, _: MailAddr, _: ()) -> BehaviorActed<Self> {
/// let mut sends = SenderSends::empty();
/// sends.send::<_, SenderSendsUndeclared>(1);
/// Ok(Actions::send(sends))
/// }
/// }
/// ```
///
/// Generated lane methods accept only inputs supported by that lane:
///
/// ```compile_fail
/// use behavior::{Actions, BehaviorActed, MailAddr};
/// struct Sender;
/// #[behavior::behavior(addr = MailAddr, message = (), sends = { replies: Vec<u8> })]
/// impl Sender {
/// fn receive(&mut self, _: MailAddr, _: ()) -> BehaviorActed<Self> {
/// Ok(Actions::cont().send_replies("not a u8"))
/// }
/// }
/// ```
///
/// A child absent from the declared closed birth product cannot be created:
///
/// ```compile_fail
/// use behavior::{Actions, BehaviorActed, CreationSequence, Creations, CreateChild, MailAddr};
/// struct Declared;
/// #[behavior::behavior(addr = MailAddr, message = behavior::Never)]
/// impl Declared {
/// fn receive(&mut self, _: MailAddr, message: behavior::Never) -> BehaviorActed<Self> {
/// match message {}
/// }
/// }
/// struct Other;
/// #[behavior::behavior(addr = MailAddr, message = behavior::Never)]
/// impl Other {
/// fn receive(&mut self, _: MailAddr, message: behavior::Never) -> BehaviorActed<Self> {
/// match message {}
/// }
/// }
/// struct Root { creations: CreationSequence }
/// #[behavior::behavior(addr = MailAddr, message = (), births = { declared: Declared })]
/// impl Root {
/// fn receive(&mut self, _: MailAddr, _: ()) -> BehaviorActed<Self> {
/// let id = self.creations.issue().expect("fixture creation ID");
/// Ok(Actions::create(Creations::one(CreateChild::birth(id, Other))))
/// }
/// }
/// ```
///
/// Every generated send lane remains a separate interpreter obligation:
///
/// ```compile_fail
/// use behavior::{BehaviorActed, Delivery, InterpretItem, InterpretSends, ItemSettlement,
/// MailAddr, MessageProtocol, Never};
/// struct Root;
/// type AuditProtocol = MessageProtocol<MailAddr, u8>;
/// type MetricsProtocol = MessageProtocol<MailAddr, u16>;
/// #[behavior::behavior(addr = MailAddr, message = (), sends = {
/// audit: Vec<Delivery<AuditProtocol>>,
/// metrics: Vec<Delivery<MetricsProtocol>>,
/// })]
/// impl Root {
/// fn receive(&mut self, _: MailAddr, _: ()) -> BehaviorActed<Self> {
/// Ok(behavior::Actions::cont())
/// }
/// }
/// struct Incomplete;
/// impl<RootEvent, Path> InterpretItem<Delivery<AuditProtocol>, RootEvent, Path> for Incomplete {
/// fn interpret_item(&mut self, _: Delivery<AuditProtocol>) -> impl core::future::Future<
/// Output = ItemSettlement<Delivery<AuditProtocol>, (), Never, Never>,
/// > + Send {
/// async { ItemSettlement::Accepted(()) }
/// }
/// }
/// fn require_complete()
/// where
/// RootSends: InterpretSends<Incomplete, behavior::User<MailAddr, ()>, behavior::Here>,
/// {}
/// ```
///
/// Generated child products likewise require one [`EstablishChild`]
/// implementation for every declared alternative. [`DispatchBirth`] owns the
/// compile-denial example so this crate overview does not duplicate it.
///
/// Two declared roles remain distinct even when they use the same behavior:
///
/// ```compile_fail
/// use behavior::{Behavior, BehaviorActed, ChildDelivery, CreationSequence, MailAddr, Never};
/// struct Worker;
/// #[behavior::behavior(addr = MailAddr, message = ())]
/// impl Worker {
/// fn receive(&mut self, _: MailAddr, _: ()) -> BehaviorActed<Self> {
/// Ok(behavior::Actions::cont())
/// }
/// }
/// struct Root;
/// #[behavior::behavior(addr = MailAddr, message = Never, births = {
/// primary: Worker,
/// backup: Worker,
/// })]
/// impl Root {
/// fn receive(&mut self, _: MailAddr, message: Never) -> BehaviorActed<Self> {
/// match message {}
/// }
/// }
/// fn requires_primary(
/// _: ChildDelivery<<Worker as Behavior>::Protocol, RootChildrenPrimary>,
/// ) {}
/// let mut sequence = CreationSequence::new();
/// let id = sequence.issue().expect("fixture creation ID");
/// let backup = ChildDelivery::<<Worker as Behavior>::Protocol, RootChildrenBackup>::after(id, ());
/// requires_primary(backup);
/// ```
///
/// Named topology selectors accept only the child declared for that parent
/// role, which lets an application builder remain entirely static:
///
/// ```compile_fail
/// use behavior::{Behavior, BehaviorActed, ChildRole, MailAddr, Never};
/// struct Worker;
/// #[behavior::behavior(addr = MailAddr, message = Never)]
/// impl Worker {
/// fn receive(&mut self, _: MailAddr, message: Never) -> BehaviorActed<Self> {
/// match message {}
/// }
/// }
/// struct Query;
/// #[behavior::behavior(addr = MailAddr, message = Never)]
/// impl Query {
/// fn receive(&mut self, _: MailAddr, message: Never) -> BehaviorActed<Self> {
/// match message {}
/// }
/// }
/// struct Root;
/// #[behavior::behavior(addr = MailAddr, message = Never, births = { workers: Worker })]
/// impl Root {
/// fn receive(&mut self, _: MailAddr, message: Never) -> BehaviorActed<Self> {
/// match message {}
/// }
/// }
/// fn child<Parent, Role>(_: Role, _: Role::Child)
/// where
/// Parent: Behavior,
/// Role: ChildRole<Parent>,
/// {}
/// child::<Root, _>(RootChild::Workers, Query);
/// ```
pub use behavior;