Skip to main content

harn_vm/
stdlib.rs

1//! Standard library builtins for the Harn VM.
2//!
3//! Every builtin is declared with the `#[harn_builtin]` proc-macro
4//! (`crate::stdlib::macros::harn_builtin`). Each annotation emits a sibling
5//! `static <FN>_DEF: VmBuiltinDef` carrying the signature, aliases, handler,
6//! and metadata, and registers it into the workspace-global
7//! [`macros::ALL_BUILTIN_DEFS`] distributed slice at link time. The CLI / LSP /
8//! lint / serve / dap binaries call [`force_link`] to defeat rlib dead-code
9//! stripping (linkme issue #36) so every static lands in the slice. Modules
10//! still expose a `register_<module>_builtins(vm)` helper for ordered eager
11//! registration (e.g. so `clock::timestamp` can override `process::timestamp`).
12//! `register_vm_stdlib` calls those helpers in order and then installs the
13//! aggregated signatures into the parser registry.
14//!
15//! See `CONTRIBUTING.md` ("Adding a stdlib builtin") for the full template.
16
17pub mod macros;
18
19mod agent_sessions;
20pub mod agent_state;
21pub(crate) mod agents;
22mod agents_daemon;
23mod artifact_emit;
24pub(crate) mod assemble;
25pub mod asset_paths;
26mod bytes;
27mod calendar;
28mod channel_guardrails;
29mod channels;
30pub(crate) mod clock;
31pub(crate) mod collections;
32mod command_policy;
33pub(crate) mod compaction;
34mod compression;
35mod concurrency;
36mod connectors;
37mod cookies;
38mod crypto;
39mod csv;
40mod datetime;
41mod durable_step;
42mod event_log;
43mod external_agent;
44pub(crate) mod files;
45mod flow;
46mod fs;
47mod git;
48mod grounding;
49pub(crate) mod harn_entry;
50pub(crate) mod hitl;
51mod hitl_read;
52pub mod host;
53pub mod http_response;
54pub(crate) mod io;
55mod iter;
56pub(crate) mod json;
57mod json_query;
58pub(crate) mod json_stream;
59mod jsonrpc;
60mod junit;
61mod lifecycle_receipts;
62mod logging;
63pub mod long_running;
64mod math;
65pub(crate) mod memory;
66mod monitors;
67mod multipart;
68mod net;
69mod net_policy;
70mod oauth_dynreg;
71mod oauth_storage;
72pub(crate) mod observability;
73pub(crate) mod options;
74mod path;
75pub(crate) mod path_scope_guard;
76pub(crate) mod pool;
77#[cfg(feature = "postgres")]
78mod postgres;
79#[cfg(feature = "postgres")]
80pub use postgres::install_shared_pool_registry;
81pub mod process;
82pub(crate) mod process_spawn;
83mod project;
84mod project_catalog;
85mod project_enrich;
86mod regex;
87mod review;
88mod runtime_scope;
89pub(crate) mod sandbox;
90pub mod secret_scan;
91mod sets;
92pub(crate) mod shapes;
93mod skills;
94#[cfg(feature = "sqlite")]
95mod sqlite;
96pub(crate) mod strings;
97pub(crate) mod supervisor;
98pub mod template;
99mod testbench;
100mod testing;
101mod timing;
102pub mod token_redaction;
103pub(crate) mod tool_hooks;
104pub(crate) mod tools;
105pub mod tracing;
106mod transcript_compact;
107pub(crate) mod transcript_project;
108mod triggers_stdlib;
109mod tui;
110mod types;
111mod url_parse;
112mod vision;
113pub(crate) mod waitpoint;
114mod waitpoints;
115mod web;
116pub mod workflow_messages;
117pub(crate) mod xml;
118
119use crate::http::register_http_builtins;
120use crate::llm::register_llm_builtins;
121use crate::mcp::register_mcp_builtins;
122use crate::mcp_server::register_mcp_server_builtins;
123use crate::vm::Vm;
124
125pub(crate) use crate::schema::{json_to_vm_value, schema_result_value};
126pub(crate) fn set_thread_source_dir(dir: &std::path::Path) {
127    process::set_thread_source_dir(dir);
128}
129
130/// Register core builtins: pure/deterministic, no I/O.
131pub fn register_core_stdlib(vm: &mut Vm) {
132    crate::runtime_context::register_runtime_context_builtins(vm);
133    types::register_type_builtins(vm);
134    math::register_math_builtins(vm);
135    strings::register_string_builtins(vm);
136    json::register_json_builtins(vm);
137    json_stream::register_json_stream_builtins(vm);
138    xml::register_xml_builtins(vm);
139    datetime::register_datetime_builtins(vm);
140    calendar::register_calendar_builtins(vm);
141    regex::register_regex_builtins(vm);
142    bytes::register_bytes_builtins(vm);
143    compression::register_compression_builtins(vm);
144    command_policy::register_command_policy_builtins(vm);
145    runtime_scope::register_runtime_scope_builtins(vm);
146    crypto::register_crypto_builtins(vm);
147    csv::register_csv_builtins(vm);
148    junit::register_junit_builtins(vm);
149    multipart::register_multipart_builtins(vm);
150    url_parse::register_url_builtins(vm);
151    web::register_web_builtins(vm);
152    cookies::register_cookie_builtins(vm);
153    path::register_path_helper_builtins(vm);
154    sets::register_set_builtins(vm);
155    collections::register_collection_builtins(vm);
156    iter::register_iter_builtins(vm);
157    event_log::register_event_log_builtins(vm);
158    durable_step::register_durable_step_builtins(vm);
159    channels::register_channel_builtins(vm);
160    channel_guardrails::register_channel_guardrail_builtins(vm);
161    shapes::register_shape_builtins(vm);
162    testing::register_testing_builtins(vm);
163    flow::register_flow_builtins(vm);
164    lifecycle_receipts::register_lifecycle_receipt_builtins(vm);
165    net_policy::register_net_policy_builtins(vm);
166    http_response::register_http_response_builtins(vm);
167}
168
169/// Register I/O builtins (requires OS access).
170pub fn register_io_stdlib(vm: &mut Vm) {
171    io::register_io_builtins(vm);
172    host::register_host_builtins(vm);
173    fs::register_fs_builtins(vm);
174    files::register_file_builtins(vm);
175    git::register_git_builtins(vm);
176    vision::register_vision_builtins(vm);
177    agent_state::register_agent_state_builtins(vm);
178    memory::register_memory_builtins(vm);
179    net::register_net_builtins(vm);
180    process::register_process_builtins(vm);
181    process::register_path_builtins(vm);
182    sandbox::register_sandbox_builtins(vm);
183    // Clock builtins overlay process::timestamp/elapsed so they honor
184    // mock_time / advance_time. Register AFTER process to take precedence.
185    clock::register_clock_builtins(vm);
186    crate::durable_rate_limit::register_durable_rate_limit_builtins(vm);
187    testbench::register_testbench_builtins(vm);
188    project::register_project_builtins(vm);
189    grounding::register_grounding_builtins(vm);
190    tracing::register_tracing_builtins(vm);
191    observability::register_observability_builtins(vm);
192    timing::register_timing_builtins(vm);
193    tui::register_tui_builtins(vm);
194}
195
196fn register_agent_stdlib_before_llm(vm: &mut Vm) {
197    concurrency::register_concurrency_builtins(vm);
198    connectors::register_connector_builtins(vm);
199    review::register_review_builtins(vm);
200    secret_scan::register_secret_scan_builtins(vm);
201    tools::register_tool_builtins(vm);
202    tool_hooks::register_tool_hooks_builtins(vm);
203    crate::composition::register_composition_builtins(vm);
204    skills::register_skill_builtins(vm);
205    agents_daemon::register_daemon_builtins(vm);
206    triggers_stdlib::register_trigger_builtins(vm);
207    #[cfg(feature = "postgres")]
208    postgres::register_postgres_builtins(vm);
209    #[cfg(feature = "sqlite")]
210    sqlite::register_sqlite_builtins(vm);
211    waitpoints::register_waitpoint_builtins(vm);
212    monitors::register_monitor_builtins(vm);
213    hitl::register_hitl_builtins(vm);
214    hitl_read::register_hitl_read_builtins(vm);
215    waitpoint::register_waitpoint_builtins(vm);
216    supervisor::register_supervisor_builtins(vm);
217    agents::register_agent_builtins(vm);
218    pool::register_pool_builtins(vm);
219    oauth_storage::register_oauth_storage_builtins(vm);
220    oauth_dynreg::register_oauth_dynreg_builtins(vm);
221    token_redaction::register_token_redaction_builtins(vm);
222    agent_sessions::register_agent_session_builtins(vm);
223    artifact_emit::register_artifact_emit_builtins(vm);
224    external_agent::register_external_agent_builtins(vm);
225    path_scope_guard::register_path_scope_guard_builtins(vm);
226    workflow_messages::register_workflow_message_builtins(vm);
227    transcript_compact::register_transcript_compaction_builtins(vm);
228    compaction::register_compaction_builtins(vm);
229    transcript_project::register_transcript_projection_builtins(vm);
230    assemble::register_assemble_context_builtin(vm);
231    crate::egress::register_egress_builtins(vm);
232    crate::security::register_security_builtins(vm);
233    register_http_builtins(vm);
234    jsonrpc::register_jsonrpc_builtins(vm);
235}
236
237fn register_agent_stdlib_after_llm(vm: &mut Vm) {
238    register_mcp_builtins(vm);
239    register_mcp_server_builtins(vm);
240    crate::step_runtime::register_step_builtins(vm);
241}
242
243/// Register agent builtins (requires network access and async runtime).
244pub fn register_agent_stdlib(vm: &mut Vm) {
245    register_agent_stdlib_before_llm(vm);
246    register_llm_builtins(vm);
247    register_agent_stdlib_after_llm(vm);
248}
249
250/// Register all standard builtins on a VM (core + io + agent). Also
251/// installs the macro-emitted signature slice into the parser registry
252/// (idempotent under repeat calls with the same slice pointer).
253pub fn register_vm_stdlib(vm: &mut Vm) {
254    register_core_stdlib(vm);
255    register_io_stdlib(vm);
256    register_agent_stdlib(vm);
257    harn_builtin_registry::install_builtin_signatures(all_builtin_signatures());
258}
259
260pub(crate) fn rebind_execution_state_builtins(vm: &mut Vm) {
261    concurrency::register_concurrency_builtins(vm);
262}
263
264fn stdlib_probe_vm() -> Vm {
265    let mut vm = Vm::new();
266    register_vm_stdlib(&mut vm);
267    // Name-only/metadata introspection never accesses this path, but passing
268    // a real per-platform temp dir keeps registration logic honest if a
269    // callee someday validates its parent.
270    let tmp = std::env::temp_dir();
271    crate::store::register_store_builtins(&mut vm, &tmp);
272    crate::checkpoint::register_checkpoint_builtins(&mut vm, &tmp, "default");
273    crate::metadata::register_metadata_builtins(&mut vm, &tmp);
274    // Install the macro-emitted signatures into the parser registry so any
275    // probe-driven name/metadata query (e.g. the alignment test) sees the
276    // post-migration sig set. Idempotent under repeat install with the same
277    // pointer (which `all_builtin_signatures()` guarantees).
278    harn_builtin_registry::install_builtin_signatures(all_builtin_signatures());
279    vm
280}
281
282/// Aggregate of every `#[harn_builtin]`-emitted `VmBuiltinDef` in the stdlib.
283///
284/// Backed by the `linkme::distributed_slice` declared on
285/// [`crate::stdlib::macros::ALL_BUILTIN_DEFS`] — every annotated fn
286/// contributes one entry automatically at link time, eliminating the
287/// per-module `MODULE_BUILTINS` arrays and the hand-maintained aggregator
288/// that used to live here.
289///
290/// **Force-link warning** (linkme issue #36): rlib dead-code stripping
291/// can drop these statics when `harn-vm` is linked transitively. Every
292/// binary that exercises builtins (`harn-cli`, `harn-lsp`, `harn-lint`,
293/// `harn-serve`, `harn-dap`) calls [`force_link`] near `main()` to defeat
294/// the stripping. The alignment test
295/// `linkme_distributed_slice_populates_with_all_builtins` catches a silent
296/// regression by asserting the slice is non-empty.
297pub fn all_builtin_defs() -> &'static [&'static macros::VmBuiltinDef] {
298    &macros::ALL_BUILTIN_DEFS
299}
300
301/// Force-link entry point: a `pub fn` that touches `ALL_BUILTIN_DEFS` so
302/// the linker keeps every `#[harn_builtin]`-emitted static. Drivers
303/// (`harn-cli`, `harn-lsp`, etc.) call this once at startup. Doing nothing
304/// at runtime is fine — the side effect is purely a link-time signal.
305///
306/// See [`linkme issue #36`](https://github.com/dtolnay/linkme/issues/36)
307/// for why the explicit touch is necessary on every supported target.
308pub fn force_link() {
309    // `black_box` prevents LLVM from constant-folding the length read away.
310    // The `>= 1` guard never trips at runtime but is a load-bearing safety
311    // net: it converts a silent slice-empty regression into a panic that
312    // surfaces at the first builtin call instead of a confusing
313    // `HARN-NAM-002` somewhere down the line.
314    let len = std::hint::black_box(macros::ALL_BUILTIN_DEFS.len());
315    assert!(
316        len >= 1,
317        "linkme distributed_slice ALL_BUILTIN_DEFS is empty — \
318         the binary is missing `harn_vm::stdlib::force_link()` at startup, \
319         or the linker stripped the harn-vm rlib statics (see linkme issue #36)"
320    );
321}
322
323/// Driver-facing helper: flatten the macro-emitted `BuiltinDef`s into a
324/// `&'static [&'static BuiltinSignature]` slice suitable for
325/// [`harn_builtin_registry::install_builtin_signatures`].
326///
327/// Aliases are expanded into their own `BuiltinSignature` entries (the
328/// allocation is leaked once at startup — process-lifetime is appropriate
329/// for a global registry).
330pub fn all_builtin_signatures() -> &'static [&'static harn_builtin_meta::BuiltinSignature] {
331    use std::sync::OnceLock;
332    static AGG: OnceLock<Vec<&'static harn_builtin_meta::BuiltinSignature>> = OnceLock::new();
333    AGG.get_or_init(|| {
334        let mut out: Vec<&'static harn_builtin_meta::BuiltinSignature> = Vec::new();
335        for def in all_builtin_defs() {
336            if def.runtime_only {
337                continue;
338            }
339            out.push(&def.sig);
340            for alias in def.aliases {
341                let aliased = harn_builtin_meta::BuiltinSignature {
342                    name: alias,
343                    ..def.sig
344                };
345                out.push(Box::leak(Box::new(aliased)));
346            }
347        }
348        out
349    })
350    .as_slice()
351}
352
353/// Register every `#[harn_builtin]`-emitted def on the given VM. Drivers
354/// that build the full stdlib via `register_vm_stdlib` get this for free —
355/// each module's `register_*_builtins` walks its `MODULE_BUILTINS` slice.
356/// This helper is exposed for embedders / tests that want a one-call entry.
357pub fn register_all_macro_builtins(vm: &mut Vm) {
358    for def in all_builtin_defs() {
359        vm.register_builtin_def(def);
360    }
361}
362
363/// Return the canonical list of all stdlib builtin names. Used by
364/// harn-lint and harn-lsp to avoid hardcoded duplicate lists.
365pub fn stdlib_builtin_names() -> Vec<String> {
366    let vm = stdlib_probe_vm();
367    let mut names = vm.builtin_names();
368    // Special opcodes/keywords, not registered builtins, but linter
369    // should recognize them as valid function calls.
370    for extra in [
371        "spawn",
372        "await",
373        "cancel",
374        "cancel_graceful",
375        "__signal_interrupted",
376        "__signal_off_interrupt",
377        "__signal_on_interrupt",
378        "__signal_raise",
379        "is_cancelled",
380    ] {
381        names.push(extra.to_string());
382    }
383    names
384}
385
386/// Return discoverable metadata for registered stdlib builtins.
387pub fn stdlib_builtin_metadata() -> Vec<crate::vm::VmBuiltinMetadata> {
388    stdlib_probe_vm().builtin_metadata()
389}
390
391/// Reset thread-local stdlib state. Call between test runs.
392///
393/// Note: `long_running::reset_state()` is intentionally NOT called here
394/// because that store is process-global, not thread-local. Wiping it
395/// from a per-test reset hook lets one test cancel another test's
396/// in-flight worker thread (and lose its `agent_inbox::push`
397/// notification), which surfaces as `walk_dir_long_running` /
398/// `glob_long_running` timing out under parallel test load. The two
399/// call sites that genuinely need a clean handle store —
400/// `stdlib::fs::tests::{walk_dir_long_running,glob_long_running}` — call
401/// `long_running::reset_state()` explicitly while holding
402/// `LONG_RUNNING_TEST_LOCK`.
403pub fn reset_stdlib_state() {
404    logging::reset_logging_state();
405    process::reset_process_state();
406    clock::reset_clock_state();
407    io::reset_io_state();
408    sandbox::reset_sandbox_state();
409    fs::reset_fs_state();
410    json::reset_json_state();
411    json_stream::reset_json_stream_state();
412    host::reset_host_state();
413    observability::reset_observability_state();
414    timing::reset_timing_state();
415    durable_step::reset_durable_step_state();
416    crate::egress::reset_egress_policy_for_host();
417    hitl::reset_hitl_state();
418    crate::http::reset_http_state();
419    crate::external_agent::reset_external_agent_state();
420    jsonrpc::reset_jsonrpc_state();
421    monitors::reset_monitor_state();
422    waitpoints::reset_waitpoint_state();
423    waitpoint::reset_waitpoint_state();
424    triggers_stdlib::reset_auto_resume_timeouts();
425    compaction::reset_compaction_state();
426    agents::reset_agent_worker_state();
427    agents::workflow::reset_workflow_run_states();
428    pool::reset_pool_state();
429    #[cfg(feature = "postgres")]
430    postgres::reset_postgres_state();
431    #[cfg(feature = "sqlite")]
432    sqlite::reset_sqlite_state();
433    supervisor::reset_supervisor_state();
434    agents::records::reset_eval_metrics();
435    agents::records::reset_friction_events();
436    tools::clear_current_tool_registry();
437    tools::clear_tool_synthesis_cache();
438    vision::reset_vision_state();
439    crate::skills::clear_current_skill_registry();
440    template::reset_prompt_registry();
441    crate::triggers::clear_webhook_intake_state();
442    crate::llm::cache::reset_in_process_cache_state();
443}