Skip to main content

harn_vm/
stdlib.rs

1//! Standard library builtins for the Harn VM.
2//!
3//! Every builtin is declared with the `#[harn_builtin]` proc-macro
4//! (`crate::stdlib::macros::harn_builtin`). Each annotation emits a sibling
5//! `static <FN>_DEF: VmBuiltinDef` carrying the signature, aliases, handler,
6//! and metadata, and registers it into the workspace-global
7//! [`macros::ALL_BUILTIN_DEFS`] distributed slice at link time. The CLI / LSP /
8//! lint / serve / dap binaries call [`force_link`] to defeat rlib dead-code
9//! stripping (linkme issue #36) so every static lands in the slice. Modules
10//! still expose a `register_<module>_builtins(vm)` helper for ordered eager
11//! registration (e.g. so `clock::timestamp` can override `process::timestamp`).
12//! `register_vm_stdlib` calls those helpers in order and then installs the
13//! aggregated signatures into the parser registry.
14//!
15//! See `CONTRIBUTING.md` ("Adding a stdlib builtin") for the full template.
16
17pub mod macros;
18
19mod agent_sessions;
20pub mod agent_state;
21pub(crate) mod agents;
22mod agents_daemon;
23mod artifact_emit;
24pub(crate) mod assemble;
25pub mod asset_paths;
26mod bytes;
27mod calendar;
28mod channel_guardrails;
29mod channels;
30pub(crate) mod clock;
31pub(crate) mod collections;
32mod command_policy;
33pub(crate) mod compaction;
34mod compression;
35mod concurrency;
36mod connectors;
37mod cookies;
38mod crypto;
39mod csv;
40mod datetime;
41mod durable_step;
42mod event_log;
43mod external_agent;
44pub(crate) mod files;
45mod flow;
46mod fs;
47mod git;
48mod grounding;
49pub(crate) mod harn_entry;
50pub(crate) mod hitl;
51mod hitl_read;
52pub mod host;
53pub mod http_response;
54pub(crate) mod io;
55mod iter;
56pub(crate) mod json;
57mod json_query;
58pub(crate) mod json_stream;
59mod jsonrpc;
60mod junit;
61mod lifecycle_receipts;
62mod logging;
63pub mod long_running;
64mod math;
65pub(crate) mod memory;
66mod monitors;
67mod multipart;
68mod net;
69mod net_policy;
70mod oauth_dynreg;
71mod oauth_storage;
72pub(crate) mod observability;
73pub(crate) mod options;
74mod path;
75pub(crate) mod path_scope_guard;
76pub(crate) mod pool;
77#[cfg(feature = "postgres")]
78mod postgres;
79pub mod process;
80mod project;
81mod project_catalog;
82mod project_enrich;
83mod regex;
84mod review;
85mod runtime_scope;
86pub(crate) mod sandbox;
87pub mod secret_scan;
88mod sets;
89pub(crate) mod shapes;
90mod skills;
91#[cfg(feature = "sqlite")]
92mod sqlite;
93mod strings;
94pub(crate) mod supervisor;
95pub mod template;
96mod testbench;
97mod testing;
98mod timing;
99pub mod token_redaction;
100pub(crate) mod tool_hooks;
101pub(crate) mod tools;
102pub mod tracing;
103mod transcript_compact;
104pub(crate) mod transcript_project;
105mod triggers_stdlib;
106mod tui;
107mod types;
108mod url_parse;
109mod vision;
110pub(crate) mod waitpoint;
111mod waitpoints;
112mod web;
113pub mod workflow_messages;
114pub(crate) mod xml;
115
116use crate::http::register_http_builtins;
117use crate::llm::register_llm_builtins;
118use crate::mcp::register_mcp_builtins;
119use crate::mcp_server::register_mcp_server_builtins;
120use crate::vm::Vm;
121
122pub(crate) use crate::schema::{json_to_vm_value, schema_result_value};
123pub(crate) fn set_thread_source_dir(dir: &std::path::Path) {
124    process::set_thread_source_dir(dir);
125}
126
127/// Register core builtins: pure/deterministic, no I/O.
128pub fn register_core_stdlib(vm: &mut Vm) {
129    crate::runtime_context::register_runtime_context_builtins(vm);
130    types::register_type_builtins(vm);
131    math::register_math_builtins(vm);
132    strings::register_string_builtins(vm);
133    json::register_json_builtins(vm);
134    json_stream::register_json_stream_builtins(vm);
135    xml::register_xml_builtins(vm);
136    datetime::register_datetime_builtins(vm);
137    calendar::register_calendar_builtins(vm);
138    regex::register_regex_builtins(vm);
139    bytes::register_bytes_builtins(vm);
140    compression::register_compression_builtins(vm);
141    command_policy::register_command_policy_builtins(vm);
142    runtime_scope::register_runtime_scope_builtins(vm);
143    crypto::register_crypto_builtins(vm);
144    csv::register_csv_builtins(vm);
145    junit::register_junit_builtins(vm);
146    multipart::register_multipart_builtins(vm);
147    url_parse::register_url_builtins(vm);
148    web::register_web_builtins(vm);
149    cookies::register_cookie_builtins(vm);
150    path::register_path_helper_builtins(vm);
151    sets::register_set_builtins(vm);
152    collections::register_collection_builtins(vm);
153    iter::register_iter_builtins(vm);
154    event_log::register_event_log_builtins(vm);
155    durable_step::register_durable_step_builtins(vm);
156    channels::register_channel_builtins(vm);
157    channel_guardrails::register_channel_guardrail_builtins(vm);
158    shapes::register_shape_builtins(vm);
159    testing::register_testing_builtins(vm);
160    flow::register_flow_builtins(vm);
161    lifecycle_receipts::register_lifecycle_receipt_builtins(vm);
162    net_policy::register_net_policy_builtins(vm);
163    http_response::register_http_response_builtins(vm);
164}
165
166/// Register I/O builtins (requires OS access).
167pub fn register_io_stdlib(vm: &mut Vm) {
168    io::register_io_builtins(vm);
169    host::register_host_builtins(vm);
170    fs::register_fs_builtins(vm);
171    files::register_file_builtins(vm);
172    git::register_git_builtins(vm);
173    vision::register_vision_builtins(vm);
174    agent_state::register_agent_state_builtins(vm);
175    memory::register_memory_builtins(vm);
176    net::register_net_builtins(vm);
177    process::register_process_builtins(vm);
178    process::register_path_builtins(vm);
179    sandbox::register_sandbox_builtins(vm);
180    // Clock builtins overlay process::timestamp/elapsed so they honor
181    // mock_time / advance_time. Register AFTER process to take precedence.
182    clock::register_clock_builtins(vm);
183    crate::durable_rate_limit::register_durable_rate_limit_builtins(vm);
184    testbench::register_testbench_builtins(vm);
185    project::register_project_builtins(vm);
186    grounding::register_grounding_builtins(vm);
187    tracing::register_tracing_builtins(vm);
188    observability::register_observability_builtins(vm);
189    timing::register_timing_builtins(vm);
190    tui::register_tui_builtins(vm);
191}
192
193fn register_agent_stdlib_before_llm(vm: &mut Vm) {
194    concurrency::register_concurrency_builtins(vm);
195    connectors::register_connector_builtins(vm);
196    review::register_review_builtins(vm);
197    secret_scan::register_secret_scan_builtins(vm);
198    tools::register_tool_builtins(vm);
199    tool_hooks::register_tool_hooks_builtins(vm);
200    crate::composition::register_composition_builtins(vm);
201    skills::register_skill_builtins(vm);
202    agents_daemon::register_daemon_builtins(vm);
203    triggers_stdlib::register_trigger_builtins(vm);
204    #[cfg(feature = "postgres")]
205    postgres::register_postgres_builtins(vm);
206    #[cfg(feature = "sqlite")]
207    sqlite::register_sqlite_builtins(vm);
208    waitpoints::register_waitpoint_builtins(vm);
209    monitors::register_monitor_builtins(vm);
210    hitl::register_hitl_builtins(vm);
211    hitl_read::register_hitl_read_builtins(vm);
212    waitpoint::register_waitpoint_builtins(vm);
213    supervisor::register_supervisor_builtins(vm);
214    agents::register_agent_builtins(vm);
215    pool::register_pool_builtins(vm);
216    oauth_storage::register_oauth_storage_builtins(vm);
217    oauth_dynreg::register_oauth_dynreg_builtins(vm);
218    token_redaction::register_token_redaction_builtins(vm);
219    agent_sessions::register_agent_session_builtins(vm);
220    artifact_emit::register_artifact_emit_builtins(vm);
221    external_agent::register_external_agent_builtins(vm);
222    path_scope_guard::register_path_scope_guard_builtins(vm);
223    workflow_messages::register_workflow_message_builtins(vm);
224    transcript_compact::register_transcript_compaction_builtins(vm);
225    compaction::register_compaction_builtins(vm);
226    transcript_project::register_transcript_projection_builtins(vm);
227    assemble::register_assemble_context_builtin(vm);
228    crate::egress::register_egress_builtins(vm);
229    crate::security::register_security_builtins(vm);
230    register_http_builtins(vm);
231    jsonrpc::register_jsonrpc_builtins(vm);
232}
233
234fn register_agent_stdlib_after_llm(vm: &mut Vm) {
235    register_mcp_builtins(vm);
236    register_mcp_server_builtins(vm);
237    crate::step_runtime::register_step_builtins(vm);
238}
239
240/// Register agent builtins (requires network access and async runtime).
241pub fn register_agent_stdlib(vm: &mut Vm) {
242    register_agent_stdlib_before_llm(vm);
243    register_llm_builtins(vm);
244    register_agent_stdlib_after_llm(vm);
245}
246
247/// Register all standard builtins on a VM (core + io + agent). Also
248/// installs the macro-emitted signature slice into the parser registry
249/// (idempotent under repeat calls with the same slice pointer).
250pub fn register_vm_stdlib(vm: &mut Vm) {
251    register_core_stdlib(vm);
252    register_io_stdlib(vm);
253    register_agent_stdlib(vm);
254    harn_builtin_registry::install_builtin_signatures(all_builtin_signatures());
255}
256
257pub(crate) fn rebind_execution_state_builtins(vm: &mut Vm) {
258    concurrency::register_concurrency_builtins(vm);
259}
260
261fn stdlib_probe_vm() -> Vm {
262    let mut vm = Vm::new();
263    register_vm_stdlib(&mut vm);
264    // Name-only/metadata introspection never accesses this path, but passing
265    // a real per-platform temp dir keeps registration logic honest if a
266    // callee someday validates its parent.
267    let tmp = std::env::temp_dir();
268    crate::store::register_store_builtins(&mut vm, &tmp);
269    crate::checkpoint::register_checkpoint_builtins(&mut vm, &tmp, "default");
270    crate::metadata::register_metadata_builtins(&mut vm, &tmp);
271    // Install the macro-emitted signatures into the parser registry so any
272    // probe-driven name/metadata query (e.g. the alignment test) sees the
273    // post-migration sig set. Idempotent under repeat install with the same
274    // pointer (which `all_builtin_signatures()` guarantees).
275    harn_builtin_registry::install_builtin_signatures(all_builtin_signatures());
276    vm
277}
278
279/// Aggregate of every `#[harn_builtin]`-emitted `VmBuiltinDef` in the stdlib.
280///
281/// Backed by the `linkme::distributed_slice` declared on
282/// [`crate::stdlib::macros::ALL_BUILTIN_DEFS`] — every annotated fn
283/// contributes one entry automatically at link time, eliminating the
284/// per-module `MODULE_BUILTINS` arrays and the hand-maintained aggregator
285/// that used to live here.
286///
287/// **Force-link warning** (linkme issue #36): rlib dead-code stripping
288/// can drop these statics when `harn-vm` is linked transitively. Every
289/// binary that exercises builtins (`harn-cli`, `harn-lsp`, `harn-lint`,
290/// `harn-serve`, `harn-dap`) calls [`force_link`] near `main()` to defeat
291/// the stripping. The alignment test
292/// `linkme_distributed_slice_populates_with_all_builtins` catches a silent
293/// regression by asserting the slice is non-empty.
294pub fn all_builtin_defs() -> &'static [&'static macros::VmBuiltinDef] {
295    &macros::ALL_BUILTIN_DEFS
296}
297
298/// Force-link entry point: a `pub fn` that touches `ALL_BUILTIN_DEFS` so
299/// the linker keeps every `#[harn_builtin]`-emitted static. Drivers
300/// (`harn-cli`, `harn-lsp`, etc.) call this once at startup. Doing nothing
301/// at runtime is fine — the side effect is purely a link-time signal.
302///
303/// See [`linkme issue #36`](https://github.com/dtolnay/linkme/issues/36)
304/// for why the explicit touch is necessary on every supported target.
305pub fn force_link() {
306    // `black_box` prevents LLVM from constant-folding the length read away.
307    // The `>= 1` guard never trips at runtime but is a load-bearing safety
308    // net: it converts a silent slice-empty regression into a panic that
309    // surfaces at the first builtin call instead of a confusing
310    // `HARN-NAM-002` somewhere down the line.
311    let len = std::hint::black_box(macros::ALL_BUILTIN_DEFS.len());
312    assert!(
313        len >= 1,
314        "linkme distributed_slice ALL_BUILTIN_DEFS is empty — \
315         the binary is missing `harn_vm::stdlib::force_link()` at startup, \
316         or the linker stripped the harn-vm rlib statics (see linkme issue #36)"
317    );
318}
319
320/// Driver-facing helper: flatten the macro-emitted `BuiltinDef`s into a
321/// `&'static [&'static BuiltinSignature]` slice suitable for
322/// [`harn_builtin_registry::install_builtin_signatures`].
323///
324/// Aliases are expanded into their own `BuiltinSignature` entries (the
325/// allocation is leaked once at startup — process-lifetime is appropriate
326/// for a global registry).
327pub fn all_builtin_signatures() -> &'static [&'static harn_builtin_meta::BuiltinSignature] {
328    use std::sync::OnceLock;
329    static AGG: OnceLock<Vec<&'static harn_builtin_meta::BuiltinSignature>> = OnceLock::new();
330    AGG.get_or_init(|| {
331        let mut out: Vec<&'static harn_builtin_meta::BuiltinSignature> = Vec::new();
332        for def in all_builtin_defs() {
333            if def.runtime_only {
334                continue;
335            }
336            out.push(&def.sig);
337            for alias in def.aliases {
338                let aliased = harn_builtin_meta::BuiltinSignature {
339                    name: alias,
340                    ..def.sig
341                };
342                out.push(Box::leak(Box::new(aliased)));
343            }
344        }
345        out
346    })
347    .as_slice()
348}
349
350/// Register every `#[harn_builtin]`-emitted def on the given VM. Drivers
351/// that build the full stdlib via `register_vm_stdlib` get this for free —
352/// each module's `register_*_builtins` walks its `MODULE_BUILTINS` slice.
353/// This helper is exposed for embedders / tests that want a one-call entry.
354pub fn register_all_macro_builtins(vm: &mut Vm) {
355    for def in all_builtin_defs() {
356        vm.register_builtin_def(def);
357    }
358}
359
360/// Return the canonical list of all stdlib builtin names. Used by
361/// harn-lint and harn-lsp to avoid hardcoded duplicate lists.
362pub fn stdlib_builtin_names() -> Vec<String> {
363    let vm = stdlib_probe_vm();
364    let mut names = vm.builtin_names();
365    // Special opcodes/keywords, not registered builtins, but linter
366    // should recognize them as valid function calls.
367    for extra in [
368        "spawn",
369        "await",
370        "cancel",
371        "cancel_graceful",
372        "__signal_interrupted",
373        "__signal_off_interrupt",
374        "__signal_on_interrupt",
375        "__signal_raise",
376        "is_cancelled",
377    ] {
378        names.push(extra.to_string());
379    }
380    names
381}
382
383/// Return discoverable metadata for registered stdlib builtins.
384pub fn stdlib_builtin_metadata() -> Vec<crate::vm::VmBuiltinMetadata> {
385    stdlib_probe_vm().builtin_metadata()
386}
387
388/// Reset thread-local stdlib state. Call between test runs.
389///
390/// Note: `long_running::reset_state()` is intentionally NOT called here
391/// because that store is process-global, not thread-local. Wiping it
392/// from a per-test reset hook lets one test cancel another test's
393/// in-flight worker thread (and lose its `agent_inbox::push`
394/// notification), which surfaces as `walk_dir_long_running` /
395/// `glob_long_running` timing out under parallel test load. The two
396/// call sites that genuinely need a clean handle store —
397/// `stdlib::fs::tests::{walk_dir_long_running,glob_long_running}` — call
398/// `long_running::reset_state()` explicitly while holding
399/// `LONG_RUNNING_TEST_LOCK`.
400pub fn reset_stdlib_state() {
401    logging::reset_logging_state();
402    process::reset_process_state();
403    clock::reset_clock_state();
404    io::reset_io_state();
405    sandbox::reset_sandbox_state();
406    fs::reset_fs_state();
407    json::reset_json_state();
408    json_stream::reset_json_stream_state();
409    host::reset_host_state();
410    observability::reset_observability_state();
411    timing::reset_timing_state();
412    durable_step::reset_durable_step_state();
413    crate::egress::reset_egress_policy_for_host();
414    hitl::reset_hitl_state();
415    crate::http::reset_http_state();
416    crate::external_agent::reset_external_agent_state();
417    jsonrpc::reset_jsonrpc_state();
418    monitors::reset_monitor_state();
419    waitpoints::reset_waitpoint_state();
420    waitpoint::reset_waitpoint_state();
421    triggers_stdlib::reset_auto_resume_timeouts();
422    compaction::reset_compaction_state();
423    agents::reset_agent_worker_state();
424    agents::workflow::reset_workflow_run_states();
425    pool::reset_pool_state();
426    #[cfg(feature = "postgres")]
427    postgres::reset_postgres_state();
428    #[cfg(feature = "sqlite")]
429    sqlite::reset_sqlite_state();
430    supervisor::reset_supervisor_state();
431    agents::records::reset_eval_metrics();
432    agents::records::reset_friction_events();
433    tools::clear_current_tool_registry();
434    tools::clear_tool_synthesis_cache();
435    vision::reset_vision_state();
436    crate::skills::clear_current_skill_registry();
437    template::reset_prompt_registry();
438    crate::triggers::clear_webhook_intake_state();
439    crate::llm::cache::reset_in_process_cache_state();
440}