1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
use crate::span::Span;
use crate::trivia::Trivia;
/// A parsed Lisp node with span + attached trivia.
#[derive(Debug, Clone, PartialEq)]
pub struct Node {
pub kind: NodeKind,
pub span: Span,
/// Comments / blank lines immediately before this node.
pub leading: Vec<Trivia>,
/// For a compound node: trivia sitting between its last child and its
/// closing delimiter, with no child to attach to. Emitted INSIDE the
/// form, before the `)`.
///
/// Note this slot is overloaded relative to its original meaning
/// ("trailing on the same line"); `sequence()` claimed it for the
/// dangling case. That is why [`Self::after`] exists rather than this
/// being reused again.
pub trailing: Vec<Trivia>,
/// Trivia that follows this node at its own level — OUTSIDE any
/// delimiter it owns.
///
/// The distinction from [`Self::trailing`] is load-bearing, not
/// pedantry: `(define x 1) ; why` and `(define x 1 ; why\n)` are
/// different documents, and a single slot cannot represent both. With
/// only the two original slots the top-level case had nowhere to go
/// and was DISCARDED at EOF — measurably: one mass-format destroyed 44
/// trailing comments in `pleme-io/actions` alone.
pub after: Vec<Trivia>,
}
/// The typed variant discriminator on the caixa-ast surface — every
/// [`Node`]'s carrying-shape (atom family, compound family, quote family)
/// projects through this closed thirteen-arm partition.
///
/// The [`gen_platform::IsVariant`] derive emits per-arm arm-discriminator
/// predicates — [`Self::is_nil`], [`Self::is_symbol`], [`Self::is_keyword`],
/// [`Self::is_str`], [`Self::is_int`], [`Self::is_float`], [`Self::is_bool`],
/// [`Self::is_list`], [`Self::is_map`], [`Self::is_vector`], [`Self::is_quote`],
/// [`Self::is_quasiquote`], [`Self::is_unquote`], [`Self::is_unquote_splice`]
/// — so every downstream consumer that only needs the arm-discriminator
/// projection (not the borrowed field value) reaches for one typed dispatch
/// on the substrate primitive rather than a hand-rolled
/// `matches!(x.kind, NodeKind::X(_))` literal. Peer of the caixa-core
/// [`caixa_core::CaixaKind`] / [`caixa_core::CaixaDialeto`] /
/// [`caixa_core::DepList`] / [`caixa_core::UpgradeInstruction`] /
/// caixa-lint / caixa-arch / caixa-provedor / caixa-theme sibling enums
/// that already carry the `gen_platform::IsVariant` discipline — the first
/// closed-set-typed-enum lift on the caixa-ast surface, extending the
/// discipline onto the AST-node-family axis every downstream authoring
/// consumer (`caixa-fmt`, `caixa-lint`, `caixa-lsp`) partitions on.
#[derive(Debug, Clone, PartialEq, gen_platform::IsVariant)]
pub enum NodeKind {
Nil,
Symbol(String),
Keyword(String),
Str(String),
Int(i64),
Float(f64),
Bool(bool),
List(Vec<Node>),
/// `{ :k v … }` — the brace dialect. REAL SYNTAX per
/// theory/TATARA-LISP-CONSOLIDATION.md D4; 62 live caixa.lisp
/// manifests author nested maps and are consumed today.
Map(Vec<Node>),
/// `[ a b … ]` — the vector dialect, D4's sibling.
Vector(Vec<Node>),
Quote(Box<Node>),
Quasiquote(Box<Node>),
Unquote(Box<Node>),
UnquoteSplice(Box<Node>),
}
impl NodeKind {
/// Substrate-canonical projection onto the [`Self::Keyword`] arm's
/// borrowed scalar payload — returns `Some(&str)` byte-borrowed from
/// the arm's own [`String`] storage, and [`None`] on every other arm
/// of the closed fourteen-arm [`NodeKind`] variant set.
///
/// Six production consumers today across two caixa-monorepo crates
/// — the [`Node::kwarg`] pair-loop `:key value` alternator, and the
/// caixa-lint rule surface's [`caixa_lint::rules`]::`check_keyword_kebab`
/// walker, `check_enum_pascal` kwarg-loop filter, `keyword_present`
/// walker, `matches_kwarg` kwarg-loop filter, and `items_has_key`
/// kwarg-loop filter — which previously reached the underlying
/// keyword-name scalar through six raw `if let NodeKind::Keyword(k)
/// = &n.kind` (or `matches!(&n.kind, NodeKind::Keyword(k) if k ==
/// key)`) open-coded per-arm pattern-matches that expressed no
/// compile-time link back to the substrate primitive's typed
/// scalar-arm projection. A future `NodeKind` arm addition (a
/// `TaggedKeyword(String, KeywordTag)` shape once the tatara-lisp
/// reader grows a per-keyword scope tag, a `NamespacedKeyword(String,
/// String)` shape once the sexp→JSON bridge stabilizes the
/// `::ns/key` sugar theory/TATARA-LISP-CONSOLIDATION.md D6 sketches)
/// reaches every downstream per-`Keyword`-arm consumer through this
/// one dispatch by construction — no coordinated six-way rewrite
/// across every per-rule projection site.
///
/// Zero-copy — the returned `&str` borrows from the arm's own
/// [`String`] storage (pinned by the
/// `as_keyword_is_by_borrow_pointer_identity` test), the same
/// discipline as the sibling [`caixa_teia::TeiaValue::as_str`]
/// (7304ffe) / [`caixa_teia::TeiaValue::as_object`] (7304ffe)
/// outer-`TeiaValue` sum-type per-arm projections and the sibling
/// [`caixa_teia::TeiaRefRepr::tipo`] (a856d67) /
/// [`caixa_teia::TeiaRefRepr::nome`] (15bcdef) /
/// [`caixa_teia::TeiaRefRepr::atributo`] outer-`TeiaRefRepr` scalar
/// accessors on the substrate's IaC-side per-`(ref …)` reference
/// carrier — one axis level up on the sibling AST-side per-`NodeKind`
/// sum-type projection surface.
///
/// First `Option<&<payload>>` projection accessor on the outer
/// [`NodeKind`] sum-type — opens the `as_<variant>` typed projection
/// family the future per-arm [`Self::as_symbol`] / [`Self::as_str`]
/// projections fold on the same shape at their first cross-crate
/// consumer (the sibling caixa-lint `check_enum_pascal` /
/// `check_nome_kebab` / `check_no_fixme` per-`NodeKind::Str`-arm
/// scalar-projection sites and `check_git_pin` /
/// `check_aplicacao_timeout` / `check_consistent_quote` per-
/// `NodeKind::Symbol`-arm scalar-projection sites), extending the
/// discipline onto the caixa-ast per-AST-node-family arm-set every
/// downstream authoring consumer (`caixa-fmt`, `caixa-lint`,
/// `caixa-lsp`) partitions on.
#[must_use]
pub fn as_keyword(&self) -> Option<&str> {
match self {
Self::Keyword(k) => Some(k.as_str()),
_ => None,
}
}
}
impl Node {
#[must_use]
pub fn new(kind: NodeKind, span: Span) -> Self {
Self {
kind,
span,
leading: Vec::new(),
trailing: Vec::new(),
after: Vec::new(),
}
}
/// Drop all spans + trivia, lowering into the plain `tatara_lisp::Sexp`
/// used by the compile pipeline.
#[must_use]
pub fn to_tatara_sexp(&self) -> tatara_lisp::Sexp {
use tatara_lisp::{Atom, Sexp};
match &self.kind {
NodeKind::Nil => Sexp::Nil,
NodeKind::Symbol(s) => Sexp::Atom(Atom::Symbol(s.clone())),
NodeKind::Keyword(s) => Sexp::Atom(Atom::Keyword(s.clone())),
NodeKind::Str(s) => Sexp::Atom(Atom::Str(s.clone())),
NodeKind::Int(i) => Sexp::Atom(Atom::Int(*i)),
NodeKind::Float(f) => Sexp::Atom(Atom::Float(*f)),
NodeKind::Bool(b) => Sexp::Atom(Atom::Bool(*b)),
NodeKind::List(items) => Sexp::List(items.iter().map(Node::to_tatara_sexp).collect()),
// `tatara_lisp::Sexp` has no Map/Vector variant yet — adding
// them is a LANGUAGE change, sequenced as Phase 2 of
// theory/TATARA-LISP-CONSOLIDATION.md D4 and gated on its own
// differential run over the 1,123-file corpus (correction C4).
// Until that lands, both lower to a plain list: the elements
// survive in order, only the brace-ness is dropped. That is
// strictly closer to intent than today's behaviour, where the
// delimiters lowered as literal `{` / `}` SYMBOLS inside the
// list. This projection is used only by the round-trip
// equivalence tests, which stay honest because formatting
// re-emits the delimiters and re-parsing recovers the node.
NodeKind::Map(items) | NodeKind::Vector(items) => {
Sexp::List(items.iter().map(Node::to_tatara_sexp).collect())
}
NodeKind::Quote(inner) => Sexp::Quote(Box::new(inner.to_tatara_sexp())),
NodeKind::Quasiquote(inner) => Sexp::Quasiquote(Box::new(inner.to_tatara_sexp())),
NodeKind::Unquote(inner) => Sexp::Unquote(Box::new(inner.to_tatara_sexp())),
NodeKind::UnquoteSplice(inner) => Sexp::UnquoteSplice(Box::new(inner.to_tatara_sexp())),
}
}
/// Head symbol for a list node like `(defX ...)`. Returns None unless this
/// is a `List` whose first element is a `Symbol`.
#[must_use]
pub fn head_symbol(&self) -> Option<&str> {
let NodeKind::List(items) = &self.kind else {
return None;
};
let NodeKind::Symbol(s) = &items.first()?.kind else {
return None;
};
Some(s)
}
/// For a list formatted as alternating `:key value :key value`, returns
/// the matching value node for `key` (without the leading colon).
#[must_use]
pub fn kwarg(&self, key: &str) -> Option<&Node> {
let NodeKind::List(items) = &self.kind else {
return None;
};
let start = if items.first().is_some_and(|n| n.kind.is_symbol()) {
1
} else {
0
};
let mut i = start;
while i + 1 < items.len() {
// Route the per-`:key value` pair-loop's per-item keyword-
// name scalar projection through the lifted
// [`NodeKind::as_keyword`] `Option<&str>` accessor rather
// than the raw `if let NodeKind::Keyword(k) = &items[i]
// .kind` open-coded per-arm pattern-match — the per-
// `Keyword`-arm scalar projection now keys off the
// substrate-canonical sum-type per-arm accessor every
// downstream caixa-ast/caixa-lint per-`Keyword`-arm consumer
// (`caixa_lint::rules::check_keyword_kebab`,
// `check_enum_pascal`, `keyword_present`, `matches_kwarg`,
// `items_has_key`) routes through, so any future
// `NodeKind::Keyword`-adjacent arm extension picks up this
// dispatch through exactly one edit on the substrate primitive.
if let Some(k) = items[i].kind.as_keyword() {
if k == key {
return Some(&items[i + 1]);
}
}
i += 2;
}
None
}
}
#[cfg(test)]
mod is_variant_tests {
use super::*;
fn all_variants() -> Vec<(NodeKind, &'static str)> {
vec![
(NodeKind::Nil, "Nil"),
(NodeKind::Symbol("x".into()), "Symbol"),
(NodeKind::Keyword("k".into()), "Keyword"),
(NodeKind::Str("s".into()), "Str"),
(NodeKind::Int(0), "Int"),
(NodeKind::Float(0.0), "Float"),
(NodeKind::Bool(false), "Bool"),
(NodeKind::List(Vec::new()), "List"),
(NodeKind::Map(Vec::new()), "Map"),
(NodeKind::Vector(Vec::new()), "Vector"),
(
NodeKind::Quote(Box::new(Node::new(NodeKind::Nil, Span::new(0, 0)))),
"Quote",
),
(
NodeKind::Quasiquote(Box::new(Node::new(NodeKind::Nil, Span::new(0, 0)))),
"Quasiquote",
),
(
NodeKind::Unquote(Box::new(Node::new(NodeKind::Nil, Span::new(0, 0)))),
"Unquote",
),
(
NodeKind::UnquoteSplice(Box::new(Node::new(NodeKind::Nil, Span::new(0, 0)))),
"UnquoteSplice",
),
]
}
fn predicate_row(k: &NodeKind) -> [bool; 14] {
[
k.is_nil(),
k.is_symbol(),
k.is_keyword(),
k.is_str(),
k.is_int(),
k.is_float(),
k.is_bool(),
k.is_list(),
k.is_map(),
k.is_vector(),
k.is_quote(),
k.is_quasiquote(),
k.is_unquote(),
k.is_unquote_splice(),
]
}
// Fail-before-pass-after pin on the [`gen_platform::IsVariant`]
// derive-generated per-arm predicate partition — for every variant
// in `all_variants()`, the observed 14-slot predicate row must
// equal a one-hot row with the `true` at exactly the same index as
// the variant's declaration order. Expected rows are generated
// live from the enumeration rather than transcribed by hand, so a
// copy-paste flip that reroutes one arm through the wrong
// predicate lane trips at the identity-diagonal assertion the way
// every peer `CaixaKind` / `CaixaDialeto` / `DepList` /
// `PathShapeViolation` / `RestartStrategy` partition pin already
// does on the sibling caixa-core surface.
#[test]
fn node_kind_is_variant_predicates_partition_the_arm_set() {
let variants = all_variants();
for (idx, (variant, name)) in variants.iter().enumerate() {
let observed = predicate_row(variant);
let mut expected = [false; 14];
expected[idx] = true;
assert_eq!(
observed, expected,
"NodeKind::{name} at declaration-order slot {idx} must \
satisfy exactly one is_* predicate (its own); observed \
row must equal the one-hot expected row"
);
}
}
// Byte-parity pin on the two field-agnostic `matches!` shapes this
// lift replaces at production call sites: the `NodeKind::Symbol(_)`
// gate (caixa-ast/src/node.rs `kwarg` head-skip, caixa-fmt/src/
// printer.rs `kwargs_head_len` take-while) and the
// `NodeKind::Keyword(_)` gate (caixa-fmt/src/printer.rs
// `kwargs_head_len` pair-check + `inline_slot_count` pair-detect,
// caixa-lint/src/rules.rs `paired-kwargs` first-arg + second-arg
// gates). Refuses a future accidental split between the derived
// predicate and its pre-lift `matches!` shape (a hand-rolled
// shadow `impl` that overrides one path, an accidental rebrand of
// one converged call site back to the `matches!` form) on the two
// load-bearing arm-discriminator axes every downstream authoring
// consumer (caixa-fmt, caixa-lint) partitions on.
#[test]
fn node_kind_is_symbol_and_is_keyword_byte_equal_pre_lift_matches_shape() {
for (variant, name) in all_variants() {
let via_matches_symbol = matches!(variant, NodeKind::Symbol(_));
let via_predicate_symbol = variant.is_symbol();
assert_eq!(
via_predicate_symbol, via_matches_symbol,
"NodeKind::{name}.is_symbol() must byte-equal \
matches!(_, NodeKind::Symbol(_)) — otherwise the \
converged call sites in caixa-ast/caixa-fmt would \
silently disagree with their pre-lift shape"
);
let via_matches_keyword = matches!(variant, NodeKind::Keyword(_));
let via_predicate_keyword = variant.is_keyword();
assert_eq!(
via_predicate_keyword, via_matches_keyword,
"NodeKind::{name}.is_keyword() must byte-equal \
matches!(_, NodeKind::Keyword(_)) — otherwise the \
converged call sites in caixa-fmt/caixa-lint would \
silently disagree with their pre-lift shape"
);
}
}
// Projection contract on the outer-`NodeKind` sum-type's `Keyword`
// scalar-arm accessor: exactly the `Keyword` arm returns
// `Some(&str)` byte-borrowed from the arm's own [`String`] storage;
// every other arm returns `None`. Pins the "one canonical
// projection dispatch per typed arm on the substrate primitive"
// discipline the six per-`Keyword`-arm consumer sites (caixa-ast
// [`Node::kwarg`] pair-loop; caixa-lint `check_keyword_kebab`,
// `check_enum_pascal`, `keyword_present`, `matches_kwarg`,
// `items_has_key`) route through via
// `.as_keyword()`/`.and_then(NodeKind::as_keyword)`. A regression
// that admitted a non-`Keyword` arm through this projection would
// silently classify a bare symbol or string literal as a keyword
// at the six per-consumer sites — `kwarg` would return the wrong
// pair value, `keyword_present` would find phantom `:timeout`s in
// string literals, `matches_kwarg`/`items_has_key` would treat
// positional args as keyword pairs. This test guards that surface
// across every arm of the closed fourteen-arm partition.
#[test]
fn as_keyword_projects_only_keyword_arm() {
let variants = all_variants();
for (variant, name) in &variants {
let projected = variant.as_keyword();
if matches!(variant, NodeKind::Keyword(_)) {
let NodeKind::Keyword(k) = variant else {
unreachable!("guarded by matches! above");
};
assert_eq!(
projected,
Some(k.as_str()),
"NodeKind::{name} is the Keyword arm — as_keyword() \
must project onto its own String payload"
);
} else {
assert_eq!(
projected, None,
"NodeKind::{name} is not the Keyword arm — \
as_keyword() must return None"
);
}
}
// Empty keyword — the accessor is a projection, not a gate; an
// empty-`:` keyword (author-declared or parser-produced) round-
// trips as `Some("")`, not `None`.
assert_eq!(NodeKind::Keyword(String::new()).as_keyword(), Some(""));
}
// Zero-copy pin — `k.as_keyword()` must borrow from the `Keyword`
// arm's own [`String`] storage, not clone into a fresh buffer.
// Fails at build time if a future rewrite regresses to
// `Some(k.clone().leak())` or any other detour that silently
// allocates on every call (the same shape as the sibling
// [`caixa_teia::TeiaValue::as_str_is_by_borrow_pointer_identity`]
// pin on the outer-`TeiaValue` scalar accessor).
#[test]
fn as_keyword_is_by_borrow_pointer_identity() {
let k = NodeKind::Keyword("timeout".into());
let via_accessor: &str = k.as_keyword().unwrap();
let NodeKind::Keyword(ref inner) = k else {
unreachable!("constructed above as NodeKind::Keyword");
};
assert_eq!(
via_accessor.as_ptr(),
inner.as_ptr(),
"NodeKind::as_keyword must borrow from the Keyword arm's \
String backing storage (zero-copy projection)",
);
assert_eq!(
via_accessor.len(),
inner.len(),
"NodeKind::as_keyword and inner.as_str() must byte-equal \
in length (same slice)",
);
}
// Byte-parity pin on the pre-lift `if let NodeKind::Keyword(k) =
// &n.kind { … if k == key … }` shape the six caixa-ast/caixa-lint
// consumer sites route through today via
// `n.kind.as_keyword() == Some(key)` (or `if let Some(k) =
// n.kind.as_keyword() { if k == key … }`). Refuses a future
// accidental split between the accessor's return contract and its
// pre-lift `matches!`/`if let` shape (a hand-rolled shadow
// `impl` that overrides one path, an accidental rebrand of one
// converged call site back to the raw `NodeKind::Keyword(k)`
// form) on the load-bearing keyword-name-projection axis every
// downstream caixa-lint rule's `:key value` pair-loop / walker
// partitions on.
#[test]
fn as_keyword_byte_equal_pre_lift_pattern_match_shape() {
for (variant, name) in all_variants() {
let via_pattern: Option<&str> = match &variant {
NodeKind::Keyword(k) => Some(k.as_str()),
_ => None,
};
let via_accessor = variant.as_keyword();
assert_eq!(
via_accessor, via_pattern,
"NodeKind::{name}.as_keyword() must byte-equal \
`match &_ {{ NodeKind::Keyword(k) => Some(k.as_str()), \
_ => None }}` — otherwise the six converged caixa-ast/ \
caixa-lint call sites would silently disagree with \
their pre-lift shape"
);
}
}
// Byte-parity pin on the disjunctive `NodeKind::Int(_) |
// NodeKind::Float(_)` shape the caixa-fmt/src/printer.rs
// `is_numeric` grid-column right-align gate keys off. Refuses a
// future arm addition (a hypothetical `NodeKind::Rational(_)` /
// `NodeKind::Ratio(_)` when the reader grows a rational literal)
// that lands on the disjunction without a matching predicate
// extension — the pin trips at build time before the fmt printer
// silently miscategorises the new numeric arm.
#[test]
fn node_kind_is_int_or_is_float_byte_equal_pre_lift_numeric_matches_shape() {
for (variant, name) in all_variants() {
let via_matches = matches!(variant, NodeKind::Int(_) | NodeKind::Float(_));
let via_predicate = variant.is_int() || variant.is_float();
assert_eq!(
via_predicate, via_matches,
"NodeKind::{name}.is_int() || .is_float() must \
byte-equal matches!(_, NodeKind::Int(_) | \
NodeKind::Float(_)) — otherwise caixa-fmt's grid-column \
numeric-right-align gate would silently disagree with \
its pre-lift shape"
);
}
}
}