Reader-facing prose and rustdoc carried opaque shorthand like
"Decision 10", "clause-5", "mq.1", "ct.1", "eob.1", "rpe.1",
"post-mq.3", and "Iter 22b.1:" with no in-repo definition the reader
could follow. This commit replaces every such occurrence in the
durable tier the reader is most likely to land on (design/ ledger +
source //! module headers + the central /// public-item rustdoc) with
an inline content phrase plus, where applicable, a Markdown link to
the file that defines the referenced concept.
design/ ledger — 16 files:
Definition-site headings demoted from "Decision N: <title>" to
"<title>": authoring-surface, tail-calls, memory-model section in
rc-uniqueness.md, dual-allocator section, typeclass design,
effects "pure core + algebraic effects".
Cross-reference sites: "Decision 1" -> canonical-schema principle
(data-model); "Decision 3/4" -> effects + scope-boundaries; "Decision
6" -> authoring-surface; "Decision 8" -> tail-calls; "Decision 9" ->
rc-uniqueness (dual-allocator); "Decision 10" -> memory-model;
"Decision 11" -> typeclasses (model). "clause-5" -> body-link
durability gate. "clause-3" (in language-constraints) ->
bug-class-reintroduction discriminator. "mq.1/2/3", "ct.1/4",
"eob.1", "rpe.1" -> the canonical-form rule / the type-driven
dispatch / the Str carve-out / etc. "post-mq.3" -> "type-driven".
design/contracts/feature-acceptance.md: file-local "clauses 1/2/3"
-> "criteria 1/2/3" (sprachliche Kohärenz mit der File-Überschrift
"Feature-acceptance criterion"); "the clause-3 mechanism" -> "the
bug-class-reintroduction discriminator".
Source //! module headers — 24 files:
Stripped "Iter X.Y:" prefixes and "(Decision N)" / "(mq.X)" tags
from spec_drift, uniqueness, reuse_shape, migrate_canonical_types,
typeclass_22b{2,3,c}, suppress_filter, lift, mono, linearity,
diagnostic, method_dispatch_pin, method_collision_pin,
no_per_type_print_ops, mq3_multi_class_e2e, print_mono_body_shape,
print_no_leak_pin, cli_diag_human_workspace_load_error,
ct1_check_cli, prose snapshot, unbound_in_instance_method_pin,
mono_xmod_ctor_pattern, desugar.
Central /// public-item rustdoc:
ast.rs (full sweep — every "Iter X" + "Decision N" prefix
reformulated; mode/Type::Fn rustdoc now points at memory-model.md;
Constraint / SuperclassRef / InstanceDef / ClassDef rustdoc points
at typeclasses contract).
diagnostic.rs (all "(Iter X)" / "(mq.X)" tags on diagnostic codes
removed).
lib.rs (FORM_A_SPEC rustdoc points at authoring-surface.md
instead of "Decision 6").
canonical.rs (type_hash + Float-literal rustdoc).
Still outstanding (for a follow-up commit): ~500 inline `//`
code-body comments with `Iter X.Y` markers across the workspace, and
a handful of `///` rustdoc items in hash_pin / workspace_pin / lift /
mono / suppress_filter test-pin and internal-function bodies. Code
identifiers (test filenames like `mq3_multi_class_e2e.rs`, function
names like `iter18e_drop_iterative_default_preserves_hashes`) stay
verbatim per the user's "code identifiers stay verbatim" rule.
Tests: design_index_pin 5/5 + docs_honesty_pin 5/5; workspace builds
clean; full `cargo test --workspace` previously green (every
`test result: ok` line, no FAILED line).
11 KiB
Typeclasses
The schema, registry, and diagnostic contract for the typeclass layer. The resolution/monomorphisation whitepaper lives at models/typeclasses; the call-site lookup rule at method dispatch; the built-in classes the prelude ships at prelude classes.
Form-A schema (the JSON authoring surface)
Three additive schema extensions; no existing module becomes invalid.
The canonical schema for ClassDef, InstanceDef, and the
FnDef.type constraints field lives in
Data model; this section is the typeclass-layer
narrative.
ClassDef — top-level definition kind, declares a class:
{ "kind": "class",
"name": "Show",
"param": "a",
"superclass": null,
"methods": [
{ "name": "show",
"type": { /* full FnSig over `a`, with mode annotations */ },
"default": null
}
]
}
superclass is either null or { "class": <name>, "type": "a" }
where "a" MUST be the same identifier as the class's own param.
default is either null (method is abstract-required at instance
sites) or an AST body (method is optional with the body as fallback).
InstanceDef — top-level definition kind, declares an instance:
{ "kind": "instance",
"class": "Show",
"type": "Int",
"methods": [
{ "name": "show", "body": <AST> }
]
}
type is a concrete type expression, never the class param. methods
contains the bodies for every required method plus optional overrides
of default-bearing methods.
FnDef.type extension — the existing FnSig schema gains a
constraints sibling field next to forall:
"type": {
"forall": ["a"],
"constraints": [{ "class": "Show", "type": "a" }],
"type": ["Fn", [...], "String"]
}
When forall is empty, constraints is also empty (and may be
omitted for hash stability of older definitions). Each constraint's
type field MUST reference a type variable bound by the surrounding
forall.
Method invocation sites do NOT get a new node. A call to a class
method is a normal Call node; resolution against a class is the
typechecker's job, not the parser's. The LLM author writes show x
exactly as for any free function.
Cross-module references in synthesised bodies
The unified mono pass (see
models/typeclasses for the
resolution/monomorphisation algorithm) synthesises mono symbols for
polymorphic free fns and class-method instances in the symbol's
owner module — e.g. print__Int lives in prelude (because print
is defined in the prelude), but a user-ADT call site
print (MkIntBox 7) causes synthesis of prelude.print__IntBox
whose body references show_user_adt.show__IntBox (the user
instance lives in the user-defining module per the
orphan-free-coherence rule documented in
models/typeclasses). The synthesised
body crosses a module boundary the source template did not.
Three invariants make this work:
-
MonoTarget::FreeFn::type_argscarries canonical types post-collection. At every site wheresubst.apply(m)produces a concrete substitution that entersMonoTarget::FreeFn::type_args(crates/ailang-check/src/mono.rs::collect_mono_targetsand::collect_residuals_ordered), the resolvedTypemust be passed throughRegistry::normalize_type_for_lookup(caller_module, &t)before being pushed. The downstream synthesised body's Phase 3 rewrite cursor (which runs in the OWNER module's context, not the caller's) keys lookups inRegistry::entriesby the canonical qualified form; a bare type-con reference at the type_args layer silently drops the cross-module mono-symbol synthesis and leaves a bareVar "show"post-mono that codegen later rejects withunknown variable. -
Post-mono synthesised body cross-module references may bypass the source template's
import_map.preludedoes not import user modules (the auto-injection runs one-way: user workspaces import prelude, never the inverse). But a synthesised body forprelude.print__<UserType>references<user_module>.show__<UserType>, created by mono — not by the prelude source. Codegen's cross-module name-resolution must accept this: atcrates/ailang-codegen/src/lib.rs::resolve_top_level_fn(Var- resolution),::lower_app's cross-module call arm, and::synth_with_extras's Var arm, the resolution first tries the current module'simport_map, then falls back to a directmodule_user_fns/module_def_ail_typeslookup against the prefix. Both ends were independently typechecked under their own module contexts before mono ran; the cross-module reference is a post-mono construct, not a source-language one. -
FreeFnCall synth pushes one residual per declared forall- constraint. At
crates/ailang-check/src/lib.rs's synth Var arm for theprefix.suffixfree-fn path, when the type is aType::Forall { vars, constraints, body }, instantiation produces fresh metavars for thevarsAND pushes oneResidualConstraintper entry inconstraints(with rigid vars substituted by the freshly-generated metavars). The downstream discharge loop atcheck_fn's post-synth phase resolves each residual against the workspace registry; if no instance satisfies the residual at the unified concrete type, theNoInstancediagnostic fires at typecheck (correctly), not at codegen (confusingly). Without the residual push, polymorphic-helper negative cases (e.g.print fwheref : Int -> Int) silently typecheck and surface asunknown variable: showfrom codegen instead of the right typecheck-phase NoInstance Show.
The three invariants are lockstep partners: invariant (1) creates the
cross-module reference, invariant (2) makes codegen able to resolve
it, invariant (3) makes the typecheck-time discharge fire correctly
when no instance exists. A future refactor that loosens any one of
the three breaks the user-ADT trajectory; the test pins at
crates/ail/tests/codegen_import_map_fallback_pin.rs (invariant 2),
crates/ail/tests/polyfn_dot_qualified_branch_pin.rs (invariant 3
- lockstep), and the existing
crates/ail/tests/show_user_adtfixture (full trajectory) collectively protect the contract.
Defaults and superclasses
Defaults. A ClassDef.methods[i].default is either null (the
method is required at instance level) or an AST body. When an
InstanceDef does not specify a method that has a default, the
typechecker uses the default body for that instance, with the class
param substituted to the instance type. Default bodies may call
other methods of the same class (the canonical example is
default ne x y = not (eq x y)); the called methods resolve at
monomorphisation time against the same instance.
Superclasses. A ClassDef.superclass of { "class": "Eq", "type": "a" } declares that any instance C T requires a
corresponding instance Eq T to exist. The check fires at
workspace-load time: for each InstanceDef whose class declares a
superclass, the registry is queried for the matching superclass
instance. Missing → MissingSuperclassInstance.
Superclass auto-expansion in constraint contexts. When a function
declares Ord a as a constraint, the typechecker treats the constraint
context as { Ord a, Eq a } for the purposes of MissingConstraint
checking. This is the one deviation from "alles sichtbar": the
extension is anchored in the class's own superclass field, so the
relation is schema-visible at the class declaration even when the
constraint at the function site reads Ord a alone.
Superclass chains are linear (single-superclass relation per class) and auto-expansion closes transitively across the chain.
No deriving. AILang does not auto-derive instances. instance Eq MyType must be written by hand.
Diagnostic categories
The typeclass layer introduces three families of diagnostics. Exact wording is fixed; the categories and their triggers are:
Workspace-load (registry-build) diagnostics:
OrphanInstance— instance is not in class's or type's module.DuplicateInstance— two instances match the same key.MissingSuperclassInstance— superclass instance absent.MissingMethod— instance omits a required method.OverridingNonExistentMethod— instance specifies a method not in the class.
Cross-class method sharing is structurally legal; ambiguity surfaces
at the call site via AmbiguousMethodResolution or, for class-fn
name overlap, via the class-method-shadowed-by-fn warning. See
Method dispatch.
Class-schema diagnostics (validation of class declarations):
InvalidSuperclassParam— superclasstypediffers from the class's ownparam.ConstraintReferencesUnboundTypeVar— a constraint mentions a type variable not bound by the surroundingforall.
A class param appearing in applied position (e.g., f a where f
is the class param) is rejected earlier by the canonical-form
validator as BareCrossModuleTypeRef — f is a bare,
non-primitive name not declared as a TypeDef in the owning
module.
Typecheck diagnostics (per function body):
MissingConstraint— body's residual constraint is not covered by declared (and superclass-expanded) constraints.NoInstance— fully concrete constraint has no registry entry. Carries an optionalcandidate_classesfield surfacing the multi-candidate set when the bare-method dispatch path's filter collapses to zero registry survivors.AmbiguousMethodResolution— a monomorphicTerm::Varcall site survives both type-driven and constraint-driven filters with more than one candidate class. LLM-author writes the explicit qualifier form<module>.<Class>.<method>to disambiguate.UnknownClass— an explicit class qualifier inTerm::Var.namenames a qualified class that is not in the workspace's candidate-class index for the method.class-method-shadowed-by-fn(warning) — aTerm::Varresolved via fn lookup precedence (locals → caller-module-fn → imported-fn) while a class method of the same name also exists in the workspace. Fn resolution proceeds; the warning surfaces the shadow so the LLM-author can disambiguate via explicit class-qualified call if the shadow was unintentional.
There is no AmbiguousInstance diagnostic at the registry level —
coherence (DuplicateInstance at registry build, W2) makes
per-(class, type) ambiguity structurally impossible. Cross-class
method ambiguity is a separate concern resolved at the call site
via AmbiguousMethodResolution (see Method dispatch).
Ratified by: crates/ail/tests/show_no_instance_e2e.rs.