pmcp-workbook-runtime 0.2.0

Reader-free workbook IR + deterministic executor + writer-only .xlsx renderer
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130

//! `workbook-runtime` — the RUNTIME-only leaf of the v0.5.0 compiler pipeline
//! (Phase 11, Plan 05 — Codex HIGH #2: the runtime/compiler LINK boundary).
//!
//! This crate holds the owned IR types (`Expr`/`BinOp`/`UnOp`/`RangeRef`/`Cell`/
//! `CellExpr`/`CellValue`), the dependency `Dag` container + `toposort`, the
//! SERVE-time topo-ordered [`run`] executor, the manifest projection model, and a
//! PURE-RUST scalar leaf evaluator ([`scalar_eval`]) that REPLACES the
//! `pmcp-code-mode` (SWC/JS) kernel on the served-binary path.
//!
//! It depends on NEITHER `umya` NOR SWC NOR `pmcp-code-mode` NOR `quick-xml` NOR
//! `zip` — making the Ph10 D-01 boundary a cargo-tree-PROVABLE LINK boundary. The
//! served binary (Plan 04) depends ONLY on this crate; `workbook-compiler`
//! re-exports these types FROM here so its public surface (and Plan 03) keeps
//! compiling unchanged.

// Compiler/clippy-enforced panic-freedom on the library value path (mirrors
// workbook-compiler). Test code constructs fixtures freely.
#![deny(clippy::unwrap_used, clippy::expect_used, clippy::panic)]
#![cfg_attr(test, allow(clippy::unwrap_used, clippy::expect_used, clippy::panic))]

/// The shared Excel error-value set.
pub mod excel_error;

/// The owned A1 range reference + the canonical `cell_key` helper.
pub mod range_ref;

/// The owned formula AST (Expr/BinOp/UnOp).
pub mod formula;

/// The located, collect-all lint-finding types (LintFinding/Severity/LintReport).
pub mod finding;

/// The pure owned dependency `Dag` container + Kahn's `toposort`.
pub mod dag;

/// Range/reference resolution PRIMITIVES (expand_range/parse_a1/split_ref).
pub mod resolve;

/// The logical manifest projection model (Manifest/CellRole/Role/InputTier/…).
pub mod manifest_model;

/// The RUNTIME-safe bundle artifact model + hashing (CellMap/BundleLock + the
/// integrity hash helpers shared by the emitter and the served integrity check).
pub mod artifact_model;

/// The dumb-byte `BundleSource` trait (local-dir + feature-gated embedded impls)
/// — raw-byte access only, so no source can bypass the shared loader's integrity
/// gate (WBSV-08/WBSV-09).
pub mod bundle_source;

/// The single shared, fail-closed bundle loader (`load` + `WorkbookBundle` +
/// `BundleLoadError`) — the ONLY parse+integrity-verify path for any
/// `BundleSource` (WBSV-08).
pub mod bundle_loader;

/// The PURE-RUST scalar leaf evaluator that replaces the pmcp-code-mode kernel.
pub mod scalar_eval;

/// The `sheet_ir` value/eval layer + the SERVE-time executor.
pub mod sheet_ir;

/// The serve-side render layer (Phase 12): the shared, versioned
/// `LayoutDescriptor` serde shape (Plan 01) the offline emitter and the
/// writer-only serve path (Plan 02) both use.
pub mod render;

/// The shared version-changelog model (Phase 13, Plan 01): the owned serde +
/// `JsonSchema` records (`ChangeClass`/`Severity`/`OutputMeta`/`OutputDelta`/
/// `VersionChangelog`) the offline promote gate RECORDS and the served
/// `diff_version` tool SERVES. Defined HERE (not in `workbook-compiler`) because
/// the served binary deserializes it — the crate-purity invariant.
pub mod changelog;

/// Reference-input reconciliation (WBVER-03): re-run the executor at the
/// workbook's reference inputs and diff each output against `Tool.oracle` within
/// `TOL` — the reader-free, pure-diff core of the `verify_accuracy` meta-tool.
pub mod reconcile;

// ---- Curated re-export surface (matches the names workbook-compiler exported) ----

pub use excel_error::ExcelError;
pub use finding::{LintFinding, LintReport, Severity};
pub use formula::{BinOp, Expr, UnOp};
pub use range_ref::{cell_key, RangeRef};

pub use dag::{toposort, upstream_input_leaves, Dag};
pub use resolve::{
    a1_to_zero_indexed_row_col, expand_range, parse_a1, split_ref, RangeShape, ResolveError,
    MAX_RANGE_CELLS,
};

pub use manifest_model::{
    is_computed, is_strict_constant, json_key_for_role, role_for_cell, sanitize_tool_name,
    AnnotationDecl, CapabilityDecl, CellRole, ChangelogEntry, Dtype, GovernedDatum, InputTier,
    LoopDecl, Manifest, Role, RESERVED_TOOL_NAMES,
};

pub use artifact_model::{
    build_bundle_lock, fold_evidence_hash, sha256_hex, update_field, ArtifactHashes, BundleLock,
    CellEntry, CellMap, Tool,
};

#[cfg(feature = "embedded")]
pub use bundle_source::EmbeddedSource;
pub use bundle_source::{BundleSource, BundleSourceError, LocalDirSource};

pub use bundle_loader::{load as load_bundle, BundleLoadError, WorkbookBundle};

pub use render::{
    CellLayout, LayoutDescriptor, RenderMode, SheetLayout, LAYOUT_DESCRIPTOR_VERSION,
};

// NOTE: `changelog::Severity` is INTENTIONALLY not re-exported at the crate root —
// `finding::Severity` (the lint-finding tier) already occupies the bare `Severity`
// name (line ~60). The changelog severity is a DISTINCT type; reach it via its
// module path `pmcp_workbook_runtime::changelog::Severity` (Rule 3 — blocking name
// collision resolved without aliasing the historical lint `Severity`).
pub use changelog::{ChangeClass, OutputDelta, OutputMeta, VersionChangelog};

pub use reconcile::{
    reconcile_reference, seed_reference_inputs, OutputRow, ReconcileReport, ToolReport,
};

pub use scalar_eval::eval_scalar;

pub use sheet_ir::eval_bridge::{env_key, from_json, percent, powf, preflight_error, to_json};
pub use sheet_ir::{
    build_dag, run as run_executor, Cell, CellEnv, CellExpr, CellValue, EvalTrace, EvalValue,
    RunResult,
};