toml-spanner 1.0.2

#[cfg(test)]
#[path = "./owned_tests.rs"]
mod tests;

use crate::item::{TAG_ARRAY, TAG_STRING, TAG_TABLE};
use crate::{Array, DateTime, Item, Key, Kind, Span, Table, TableStyle, Value};
use std::mem::size_of;
use std::ptr::NonNull;

/// Write cursor into an [`OwnedItem`] allocation, used by
/// [`Item::emplace_in`] to copy item trees without an arena.
///
/// The allocation is split into two contiguous regions:
/// - **aligned** (front): table entries and array elements (8-byte aligned)
/// - **string** (back): key names and string values (packed, no alignment)
pub(crate) struct ItemCopyTarget {
    pub(crate) aligned: *mut u8,
    #[cfg(debug_assertions)]
    pub(crate) aligned_end: *mut u8,
    pub(crate) string: *mut u8,
    #[cfg(debug_assertions)]
    pub(crate) string_end: *mut u8,
}

impl ItemCopyTarget {
    /// Bumps the aligned pointer forward by `size` bytes, returning
    /// a pointer to the start of the allocated region.
    ///
    /// # Safety
    ///
    /// `size` bytes must remain in the aligned region.
    pub(crate) unsafe fn alloc_aligned(&mut self, size: usize) -> NonNull<u8> {
        #[cfg(debug_assertions)]
        // SAFETY: Both pointers are within (or one-past-the-end of) the
        // same allocation, so offset_from is well-defined.
        unsafe {
            let remaining = self.aligned_end.offset_from(self.aligned) as usize;
            assert!(size <= remaining);
        };
        let ptr = self.aligned;
        // SAFETY: Caller guarantees sufficient space in the aligned region.
        unsafe {
            self.aligned = self.aligned.add(size);
            NonNull::new_unchecked(ptr)
        }
    }

    /// Copies a string into the string region and returns a reference to it.
    ///
    /// # Safety
    ///
    /// `s.len()` bytes must remain in the string region. The returned
    /// reference is `'static` only because OwnedItem manages the backing
    /// memory; the caller must not let it escape.
    pub(crate) unsafe fn copy_str(&mut self, s: &str) -> &'static str {
        if s.is_empty() {
            return "";
        }
        let len = s.len();
        #[cfg(debug_assertions)]
        // SAFETY: Both pointers are within (or one-past-the-end of) the
        // same allocation, so offset_from is well-defined.
        unsafe {
            let remaining = self.string_end.offset_from(self.string) as usize;
            assert!(len <= remaining);
        };
        // SAFETY: Caller guarantees sufficient space. Source and destination
        // do not overlap (source is the parsed input or arena, destination is
        // the OwnedItem allocation).
        unsafe {
            std::ptr::copy_nonoverlapping(s.as_ptr(), self.string, len);
            let result =
                std::str::from_utf8_unchecked(std::slice::from_raw_parts(self.string, len));
            self.string = self.string.add(len);
            result
        }
    }
}

/// Computes the total aligned and string bytes needed to deep-copy `item`.
fn compute_size(item: &Item<'_>, aligned: &mut usize, strings: &mut usize) {
    match item.tag() {
        TAG_STRING => {
            if let Some(s) = item.as_str() {
                *strings += s.len();
            }
        }
        TAG_TABLE => {
            // SAFETY: tag == TAG_TABLE guarantees this is a table item.
            let table = unsafe { item.as_table_unchecked() };
            *aligned += table.len() * size_of::<(Key<'_>, Item<'_>)>();
            for (key, child) in table {
                *strings += key.name.len();
                compute_size(child, aligned, strings);
            }
        }
        TAG_ARRAY => {
            // SAFETY: tag == TAG_ARRAY guarantees this is an array item.
            let array = unsafe { item.as_array_unchecked() };
            *aligned += array.len() * size_of::<Item<'_>>();
            for child in array {
                compute_size(child, aligned, strings);
            }
        }
        _ => {}
    }
}

/// A self-contained TOML table that owns its backing storage.
///
/// The table-specific counterpart of [`OwnedItem`]. The inner value
/// is always a table, so [`table()`](Self::table) is infallible.
///
/// # Flattening
///
/// [`FromFlattened`](crate::FromFlattened) is not provided because
/// [`flatten_any`](crate::helper::flatten_any) is more performant
/// than direct implementation could be, due to current trait definition.
///
/// ```rust,ignore
/// use toml_spanner::Toml;
/// use toml_spanner::helper::flatten_any;
///
/// #[derive(Toml)]
/// #[toml(Toml)]
/// struct Config {
///     name: String,
///     #[toml(flatten, with = flatten_any)]
///     extra: OwnedTable,
/// }
/// ```
///
/// # Examples
///
/// ```
/// use toml_spanner::OwnedTable;
///
/// let owned: OwnedTable = toml_spanner::from_str("
/// host = 'localhost'
/// port = 8080
/// ").unwrap();
///
/// assert_eq!(owned.get("host").unwrap().as_str(), Some("localhost"));
/// assert_eq!(owned.len(), 2);
/// ```
pub struct OwnedTable {
    inner: OwnedItem,
}

impl OwnedTable {
    /// Returns a reference to the contained [`Table`].
    #[inline(always)]
    pub fn table<'a>(&'a self) -> &'a Table<'a> {
        // SAFETY: OwnedItem guarantees the item is valid for the lifetime of self.
        unsafe { self.inner.item().as_table_unchecked() }
    }

    /// Returns the source span, or `0..0` if this table was constructed
    /// programmatically (format-hints mode).
    #[inline]
    pub fn span(&self) -> Span {
        self.table().span()
    }

    /// Returns the number of entries.
    #[inline]
    pub fn len(&self) -> usize {
        self.table().len()
    }

    /// Returns `true` if the table has no entries.
    #[inline]
    pub fn is_empty(&self) -> bool {
        self.table().is_empty()
    }

    /// Returns references to both key and value for `name`.
    pub fn get_key_value<'a>(&'a self, name: &str) -> Option<(&'a Key<'a>, &'a Item<'a>)> {
        self.table().get_key_value(name)
    }

    /// Returns a reference to the value for `name`.
    pub fn get<'a>(&'a self, name: &str) -> Option<&'a Item<'a>> {
        self.table().get(name)
    }

    /// Returns `true` if the table contains the key.
    #[inline]
    pub fn contains_key(&self, name: &str) -> bool {
        self.table().contains_key(name)
    }

    /// Returns a slice of all entries.
    #[inline]
    pub fn entries<'a>(&'a self) -> &'a [(Key<'a>, Item<'a>)] {
        self.table().entries()
    }

    /// Returns an iterator over all entries (key-value pairs).
    #[inline]
    pub fn iter<'a>(&'a self) -> std::slice::Iter<'a, (Key<'a>, Item<'a>)> {
        self.table().iter()
    }

    /// Returns the contained table as an [`Item`] reference.
    #[inline]
    pub fn as_item<'a>(&'a self) -> &'a Item<'a> {
        self.inner.item()
    }

    /// Returns the kind of this table (implicit, dotted, header, or inline).
    #[inline]
    pub fn style(&self) -> TableStyle {
        self.table().style()
    }
}

impl std::fmt::Debug for OwnedTable {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        self.table().fmt(f)
    }
}

impl Clone for OwnedTable {
    fn clone(&self) -> Self {
        Self {
            inner: self.inner.clone(),
        }
    }
}

impl PartialEq for OwnedTable {
    fn eq(&self, other: &Self) -> bool {
        self.table() == other.table()
    }
}

impl<'a> IntoIterator for &'a OwnedTable {
    type Item = &'a (Key<'a>, Item<'a>);
    type IntoIter = std::slice::Iter<'a, (Key<'a>, Item<'a>)>;

    fn into_iter(self) -> Self::IntoIter {
        self.table().iter()
    }
}

impl From<&Table<'_>> for OwnedTable {
    fn from(value: &Table<'_>) -> Self {
        let owned_item = OwnedItem::from(value.as_item());
        debug_assert_eq!(owned_item.item().kind(), Kind::Table);
        Self { inner: owned_item }
    }
}

/// A self-contained TOML value that owns its backing storage.
///
/// An [`Item`] normally borrows from an [`Arena`](crate::Arena).
/// `OwnedItem` bundles the value with its own allocation so it can
/// be stored, returned, or moved independently of any parse context.
///
/// Create one by converting from an [`Item`] reference or value, or
/// deserialize directly via [`FromToml`](crate::FromToml). Access
/// the underlying [`Item`] through [`item()`](Self::item).
///
/// [`FromFlattened`](crate::FromFlattened) is not provided because
/// [`flatten_any`](crate::helper::flatten_any) is more performant
/// than direct implementation could be. See [`OwnedTable`] for an example.
///
/// # Examples
///
/// ```
/// use toml_spanner::{Arena, OwnedItem, parse};
///
/// let arena = Arena::new();
/// let doc = parse("greeting = 'hello'", &arena).unwrap();
/// let owned = OwnedItem::from(doc.table()["greeting"].item().unwrap());
///
/// drop(arena);
/// assert_eq!(owned.as_str(), Some("hello"));
/// ```
pub struct OwnedItem {
    // This 'static is a lie! It borrows from ptr.
    item: Item<'static>,
    ptr: NonNull<u8>,
    capacity: usize,
}

// SAFETY: `OwnedItem` exclusively owns the heap allocation referenced by
// `ptr` (allocated in `From<&Item>` and freed in `Drop`). The embedded
// `Item<'static>` has `NonNull`s into that same allocation. No other handle
// to the allocation exists, and the crate never applies interior mutability
// to an `OwnedItem` (`Clone` produces a fresh allocation, and there is no
// method that mutates the buffer through `&self`). Transferring ownership
// to another thread moves the allocation as one unit; sharing `&OwnedItem`
// across threads is sound because every accessor returns borrowed data from
// memory that is only ever read.
unsafe impl Send for OwnedItem {}
unsafe impl Sync for OwnedItem {}

// SAFETY: `OwnedTable` is a thin wrapper around `OwnedItem` and inherits
// the same ownership and immutability invariants.
unsafe impl Send for OwnedTable {}
unsafe impl Sync for OwnedTable {}

impl std::fmt::Debug for OwnedItem {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        self.item.fmt(f)
    }
}

impl Clone for OwnedItem {
    fn clone(&self) -> Self {
        OwnedItem::from(self.item())
    }
}

impl Drop for OwnedItem {
    fn drop(&mut self) {
        if self.capacity > 0 {
            // Pedantically, remove the allocated Item before deallocating.
            // probrably not needed, MIRI seams to be happy without it.
            // self.item = Item::from(false);

            // SAFETY: ptr was allocated with Layout { size: capacity, align: 8 }
            // in `From<&Item>`. capacity > 0 guarantees a real allocation.
            unsafe {
                let layout = std::alloc::Layout::from_size_align_unchecked(self.capacity, 8);
                std::alloc::dealloc(self.ptr.as_ptr(), layout);
            }
        }
    }
}

impl<'a> From<&Item<'a>> for OwnedItem {
    /// Creates an `OwnedItem` by copying `item` into a single managed allocation.
    ///
    /// All strings (keys and values) are copied, and all table/array
    /// backing storage is laid out in one contiguous buffer. The result
    /// is fully independent of the source arena.
    fn from(item: &Item<'a>) -> Self {
        let mut aligned = 0usize;
        let mut strings = 0usize;
        compute_size(item, &mut aligned, &mut strings);
        let total = aligned + strings;

        if total == 0 {
            // SAFETY: When total is 0 the item is either a non-string scalar
            // (no borrowed data), an empty string (payload is static ""), or
            // an empty container (dangling pointer with len 0). Transmuting
            // the lifetime is safe because nothing actually borrows from an
            // arena. Item has no Drop impl.
            return Self {
                item: unsafe { std::mem::transmute_copy(item) },
                ptr: NonNull::dangling(),
                capacity: 0,
            };
        }

        let layout = std::alloc::Layout::from_size_align(total, 8).expect("layout overflow");
        // SAFETY: layout has non-zero size (total > 0).
        let raw = unsafe { std::alloc::alloc(layout) };
        let Some(base) = NonNull::new(raw) else {
            std::alloc::handle_alloc_error(layout);
        };

        // SAFETY: base.add(aligned) and base.add(total) are within or
        // one-past-the-end of the allocation.
        let mut target = unsafe {
            ItemCopyTarget {
                aligned: base.as_ptr(),
                #[cfg(debug_assertions)]
                aligned_end: base.as_ptr().add(aligned),
                string: base.as_ptr().add(aligned),
                #[cfg(debug_assertions)]
                string_end: base.as_ptr().add(total),
            }
        };

        // SAFETY: compute_size computed the exact space needed; emplace_in
        // consumes exactly that much from target.
        let new_item = unsafe { item.emplace_in(&mut target) };

        #[cfg(debug_assertions)]
        {
            assert_eq!(target.aligned as usize, base.as_ptr() as usize + aligned);
            assert_eq!(target.string as usize, base.as_ptr() as usize + total);
        }

        Self {
            item: new_item,
            ptr: base,
            capacity: total,
        }
    }
}

impl<'a> From<Item<'a>> for OwnedItem {
    /// Creates an `OwnedItem` by copying `item` into a single managed allocation.
    ///
    /// This is a convenience wrapper that delegates to `From<&Item>`.
    fn from(item: Item<'a>) -> Self {
        OwnedItem::from(&item)
    }
}

impl OwnedItem {
    /// Returns a reference to the contained [`Item`].
    ///
    /// The returned item borrows from `self` and provides the same
    /// accessor methods as any other [`Item`] (`as_str()`, `as_table()`,
    /// `value()`, etc.).
    #[inline(always)]
    pub fn item<'a>(&'a self) -> &'a Item<'a> {
        &self.item
    }

    /// Returns the type discriminant of this value.
    #[inline]
    pub fn kind(&self) -> Kind {
        self.item().kind()
    }

    /// Returns the source span, or `0..0` if this item was constructed
    /// programmatically (format-hints mode).
    #[inline]
    pub fn span(&self) -> Span {
        self.item().span()
    }

    /// Returns a borrowed string if this is a string value.
    #[inline]
    pub fn as_str(&self) -> Option<&str> {
        self.item().as_str()
    }

    /// Returns an `i128` if this is an integer value.
    #[inline]
    pub fn as_i128(&self) -> Option<i128> {
        self.item().as_i128()
    }

    /// Returns an `i64` if this is an integer value that fits in the `i64` range.
    #[inline]
    pub fn as_i64(&self) -> Option<i64> {
        self.item().as_i64()
    }

    /// Returns a `u64` if this is an integer value that fits in the `u64` range.
    #[inline]
    pub fn as_u64(&self) -> Option<u64> {
        self.item().as_u64()
    }

    /// Returns an `f64` if this is a float or integer value.
    ///
    /// Integer values are converted to `f64` via `as` cast (lossy for large
    /// values outside the 2^53 exact-integer range).
    #[inline]
    pub fn as_f64(&self) -> Option<f64> {
        self.item().as_f64()
    }

    /// Returns a `bool` if this is a boolean value.
    #[inline]
    pub fn as_bool(&self) -> Option<bool> {
        self.item().as_bool()
    }

    /// Returns a borrowed array if this is an array value.
    #[inline]
    pub fn as_array<'a>(&'a self) -> Option<&'a Array<'a>> {
        self.item().as_array()
    }

    /// Returns a borrowed table if this is a table value.
    #[inline]
    pub fn as_table<'a>(&'a self) -> Option<&'a Table<'a>> {
        self.item().as_table()
    }

    /// Returns a borrowed [`DateTime`] if this is a datetime value.
    #[inline]
    pub fn as_datetime(&self) -> Option<&DateTime> {
        self.item().as_datetime()
    }

    /// Returns a borrowed view for pattern matching.
    #[inline]
    pub fn value<'a>(&'a self) -> Value<'a, 'a> {
        self.item().value()
    }

    /// Returns `true` if the value is a non-empty table.
    #[inline]
    pub fn has_keys(&self) -> bool {
        self.item().has_keys()
    }

    /// Returns `true` if the value is a table containing `key`.
    #[inline]
    pub fn has_key(&self, key: &str) -> bool {
        self.item().has_key(key)
    }
}

impl PartialEq for OwnedItem {
    fn eq(&self, other: &Self) -> bool {
        self.item() == other.item()
    }
}

#[cfg(feature = "from-toml")]
impl<'a> crate::FromToml<'a> for OwnedItem {
    fn from_toml(_: &mut crate::Context<'a>, item: &Item<'a>) -> Result<Self, crate::Failed> {
        Ok(OwnedItem::from(item))
    }
}

#[cfg(feature = "to-toml")]
impl crate::ToToml for OwnedItem {
    fn to_toml<'a>(&'a self, arena: &'a crate::Arena) -> Result<Item<'a>, crate::ToTomlError> {
        Ok(self.item().clone_in(arena))
    }
}

#[cfg(feature = "to-toml")]
impl crate::ToFlattened for OwnedItem {
    fn to_flattened<'a>(
        &'a self,
        arena: &'a crate::Arena,
        table: &mut crate::Table<'a>,
    ) -> Result<(), crate::ToTomlError> {
        self.item().to_flattened(arena, table)
    }
}

#[cfg(feature = "from-toml")]
impl<'a> crate::FromToml<'a> for OwnedTable {
    fn from_toml(ctx: &mut crate::Context<'a>, item: &Item<'a>) -> Result<Self, crate::Failed> {
        let Ok(table) = item.require_table(ctx) else {
            return Err(crate::Failed);
        };
        Ok(OwnedTable::from(table))
    }
}

#[cfg(feature = "to-toml")]
impl crate::ToToml for OwnedTable {
    fn to_toml<'a>(&'a self, arena: &'a crate::Arena) -> Result<Item<'a>, crate::ToTomlError> {
        Ok(self.table().as_item().clone_in(arena))
    }
}

#[cfg(feature = "to-toml")]
impl crate::ToFlattened for OwnedTable {
    fn to_flattened<'a>(
        &'a self,
        arena: &'a crate::Arena,
        table: &mut crate::Table<'a>,
    ) -> Result<(), crate::ToTomlError> {
        self.table().to_flattened(arena, table)
    }
}