meta.language.envelopes.class_calls

invokes crate::module::Class::method(); permits a call on any instance of the named class or a known subclass. This permission does not require equality with the caller’s receiver.

Read in specification context · design/meta/language.md

Tests and review

Indexed tests and the implementation-completeness and test-adequacy review; no test run is implied.

Implemented sage_meta::a_class_wide_permission_does_not_require_receiver_identity

crates/sage-meta/tests/runtime_contracts.rs · test:runtime_contracts

#![allow(unused)]
fn main() {
#[test]
#[sage::test(meta.language.envelopes.class_calls)]
fn a_class_wide_permission_does_not_require_receiver_identity() {
    let model = model(
        r#"
        class Item { """Item."""
            fn run() -> u32 { """Run.""" envelope {
                invokes self.read(); invokes crate::Item::read();
            } }
            query read() -> u32 { """Read.""" envelope {} }
        }
    "#,
    );
    for (caller, callee) in [(None, None), (Some("item:1"), Some("item:2"))] {
        let mut checked = session(model.clone(), &["Item::run"]);
        let run = checked.enter("demo::Item::run", caller);
        let read = checked.enter("demo::Item::read", callee);
        checked.exit(read);
        checked.exit(run);
        checked.finish().assert_calls_conform();
    }
}
}

See more source ↗

Implemented sage_meta::overrides_inherit_prohibitions_and_calls_dispatch_to_known_implementations

crates/sage-meta/tests/runtime_contracts.rs · test:runtime_contracts

#![allow(unused)]
fn main() {
#[test]
#[sage::test(meta.language.envelopes.class_calls)]
fn overrides_inherit_prohibitions_and_calls_dispatch_to_known_implementations() {
    let mut session = session(
        model(
            r#"
        class Base { """Base."""
            query run() -> u32 { """Run.""" envelope { forbid transitive crate::Leaf::read; } }
        }
        class Child extends crate::Base { """Child."""
            override query run() -> u32 { """Run.""" envelope {} }
        }
        class Leaf { """Leaf.""" query read() -> u32 { """Read.""" envelope {} } }
        class Caller { """Caller."""
            fn run() -> u32 { """Run.""" envelope { invokes crate::Base::run(); } }
        }
    "#,
        ),
        &["Caller::run"],
    );
    let caller = session.enter("demo::Caller::run", None);
    let child = session.enter("demo::Child::run", None);
    let leaf = session.enter("demo::Leaf::read", None);
    session.exit(leaf);
    session.exit(child);
    session.exit(caller);
    let report = session.finish();
    assert_eq!(report.violations.len(), 2);
    assert_eq!(
        report.violations[1].rule.as_ref().unwrap().operation,
        "demo::Base::run"
    );
}
}

See more source ↗

Review: Accepted · Codex /root/anchor_193.

Source review: the complete claim requires class-qualified invokes to permit the named class and known subclasses, independently of caller receiver identity. Both ordinary implementation entries satisfy this: validate.rs resolves the named method, includes descendants through ancestors/method lookup, and marks only self-rooted permissions same_receiver; contracts.rs accepts any matching unrestricted permission before receiver comparison. Both ordinary associated tests were inspected. a_class_wide_permission_does_not_require_receiver_identity calls Item::read with missing and unequal identities, alongside a self permission, and asserts calls_conform (which checks both violations and gaps). overrides_inherit_prohibitions_and_calls_dispatch_to_known_implementations calls Child::run under Base::run permission: its exact two-violation count and inherited-rule assertion account for the undeclared Leaf edge and inherited prohibition, leaving no extra undeclared Child edge. This meaningfully exercises known-subclass permission. Captured runtime test setup helpers parse a demo model and establish explicit roots. No TODO/N/A entries or deferred prerequisites exist. Baseline: independently verified exact byte equality of contracts.rs, validate.rs, and runtime_contracts.rs with the supplied historical snapshots; the earlier rationale remains supported by current source and full associated assertions. Execution: personally ran review start/read and byte comparison, then review record; no behavioral tests or build were run by this reviewer. The coordinator separately reports 321 passing functional tests and a passing root build. No source edits requested.

Browse meta anchors

116 anchors

Anchor Implementation Tests

meta (116) 102 Implemented24 TODO 103 Implemented36 TODO

meta.anchors (22) 22 Implemented 21 Implemented12 TODO

anchor_pages Implemented ImplementedTODO

Every specification anchor has a stable page identifying the rule and showing its definition, context, implementation entries, and tests/evidence. The page includes Rust excerpts and access to surrounding source, and exposes each entry’s placeholder status and explanation. Multiple sites remain individually inspectable rather than being reduced to a single coverage badge.

Symposiun AGentic Environment (SAGE)

meta.language.envelopes.class_calls

Implementation

Tests and review