-
Notifications
You must be signed in to change notification settings - Fork 594
Well-formedness dev guide page #2889
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Changes from all commits
3cbb0e0
6ffe465
3c3ca09
bb9a515
7a4a307
d9f8e3a
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,163 @@ | ||
| # Well-Formedness of Items and Type-Level Terms | ||
|
|
||
| The area of analysis that produces questions like "does `T: Debug` hold true for some data structure that uses T?" or "is this const generic parameter `const B: bool` being handed a value of the right type?" for the trait solver to answer. | ||
|
|
||
| Items and Type-Level Terms[^terms][^terms-abbreviated] are "well formed" when they "follow rules" AKA "fulfill obligations" or "meet the necessary constraints." When we're doing a well-formedness check (wfck) we're usually concerned about if Trait obligations are met, but this also covers obligations of the types broadly, including making sure that the types of const generic terms type check. | ||
|
|
||
| There are two different forms of well-formedness checking: | ||
|
|
||
| - Type-Level Term[^terms] wfck (term-wfck). | ||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. I think we discussed this a little 1:1 but to note it down here too, I feel unsure about the term "Term wfck". I feel like it has strong implications of it being a particular analysis/pass/something. This is the case for item wfck but not as much for wellformedness of terms which is more of a general "thing you can get the trait solver to check" and is done all over the place 🤔 I think things would be a lot closer to how I "expect" them to be if instead of saying, for example, "Item-wfck is one of the entry points where most term-wfck will get performed" we instead wrote like, "Item-wfck is one of the places where well-formedness of terms will get checked" definitely slightly nitpicky and not entirely structural, but also I guess it's kind of a semi-big-picture framing choice so feels somewhat important :3
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. This is a helpful nudge ^^ I think I misinterpreted this originally as "always specify item-wfck vs term-wfck", rather than "'ck' has specific suffix implications and isn't just an abbreviation of check"
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. didn't misinterpret :3 that was the point I was making but then seeing it written out made me unsure about term-wfck as a piece of terminology 😅 this is wholly nitpicky so feel free to ignore this and we can figure it out at a later point, just wanted to make sure i wrote it down and didnt forget
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Gotcha 😌 I've been rotating this in my mind today regardless so I'm kinda fine with either I think? |
||
| - This is the primary subject of "Well-Formedness Checking." | ||
| - Items[^items] wfck (item-wfck). | ||
| - "Items wfck" can call into "Term-wfck" as Items contain Terms. | ||
| - Sometimes normalize their inner Terms first. | ||
|
|
||
| Wfck is not "number of parameters" or "parameter type" checking (AKA "kind checking"), as we might see in languages like Haskell. Neither term-wfck nor item-wfck is concerned with if a type with 2 parameters has 1 or 3 types applied to it (assuming no defaults), or if a const generic parameter has a type applied to it. These kinds of problems will get handled during HIR-ty Lowering[^hir-ty-lower], not wfck. | ||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. I wonder if it'd make sense to have a more general header at the end like "what isn't covered by well formedness" so that this sort-of tangent doesn't get in the way, and also we can talk about other things which one might expect is covered by wfck but actually isnt i guess problem statement: not a huge fan of having this big paragraph here at the very start of the page :3 it feels like it takes up a lot of space and is kinda scary (talks about haskell and "kind checking") while not being all that important for probably the average reader
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. That's reasonable! I figured "problems I ran into while narrowing down what well-formedness is" just had to live somewhere, and that an earlier correction made more sense than a late one. But I'll move it down and replace this with a smaller "what this isn't" link. |
||
|
|
||
| Wfck doesn't check or validate lifetimes, this is handled in [MIR](../borrow-check.md). | ||
|
|
||
| ## Type-Level Terms | ||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. would in theory like this header to be "Well-Formedness of Type-Level Terms" to mirror the following "Well-Formedness of Items" header 🤔 I realise you use this name as a subheader of Type-Level terms but that feels a bit weird to me. I don't think the primary point of this page is to explain what a "type level term" is so I wouldn't structure it too heavily around that, rather than what it means for one to be well formed
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Yeah agreed, this is a weird glossary out of nowhere. Restructuring 🫡 |
||
|
|
||
| Type-Level Terms are the data structures that well-formedness checking is focused on analyzing. Item-wfck is one of the entry points where most term-wfck will get performed. | ||
|
|
||
| ### Obligations | ||
|
|
||
| Term-wfck begins with generating the list of things that need to be true for the thing-being-wfck'd to be well-formed. | ||
|
|
||
| These predicates end up being referred to as Obligations, Requirements, or Constraints. Preferred term is "obligations", as this matches the suffix of the type and the names of relevant functions. In future, this may be superseded by the new solver's term "Goal". | ||
|
|
||
| The term-wfck module[^tlt-wf-module] contains an `obligations` function that takes type-level terms and returns `PredicateObligations`, a list of obligations that Type-Level Term must satisfy in order to be well-formed. The satisfaction of those obligations is performed by the Trait Solver[^trait-solver], and if they are satisfied then the term is Well-Formed. | ||
|
|
||
| ### Well-Formedness of Type-Level Terms | ||
|
|
||
| Terms are Well-Formed when trait obligations within them are satisfied when passed to the trait solver. As an example, the following is not well-formed: | ||
|
|
||
| ```rust,ignore | ||
| Vec<str> | ||
| --- | ||
| // Obligations to fulfill | ||
| Vec<T> where T: Sized | ||
| Vec<str> where str: Sized // This is not true, therefore the term is not well-formed. | ||
| ``` | ||
|
|
||
| During term-wfck we encounter the obligation for `Vec<T>` that `T: Sized`. For `Vec<str>` we encounter the obligation `str: Sized`, and as `str` is not `Sized` the term is not well-formed. | ||
|
|
||
| ### We Don't Need Normalization (Yet) | ||
|
BoxyUwU marked this conversation as resolved.
|
||
|
|
||
| [Normalization](../normalization.md) is the process of resolving [type aliases](../normalization.md#aliases) into their underlying type, this is because a type alias is considered well-formed if its underlying type is well-formed. The underlying type is undergoes well-formedness checking at most definition and instantiation sites. | ||
|
|
||
| We don't need to perform normalization to perform term-wfck. | ||
|
|
||
| ### Const Generic Arguments | ||
|
fallible-algebra marked this conversation as resolved.
|
||
|
|
||
| Term-wfck is also responsible for getting "type-checking" obligations of const generic terms[^tyck-const-generics]. Let's look at the following use of const generics: | ||
|
|
||
| ```rust,ignore | ||
| fn use_const_generics<const U: usize>() { /* ... */ } | ||
| // call site | ||
| use_const_generics::<6>(); | ||
| --- | ||
| // call site wfck obligations | ||
| const 6: usize | ||
| ``` | ||
|
|
||
| Applying term-wfck to the call site will provide us with the obligation `6: usize`. This obligation will be passed off to the trait solver just like any trait-style obligation, as the trait solver has more responsibilities than its name suggests. | ||
|
|
||
| ## Well-Formedness of Items | ||
|
|
||
| Items[^items] are, generally speaking, "Things that get defined." Item-wfck[^item-wf-module] only happens at the signature level for types and functions, including the methods and implementations. This doesn't happen for Free Type Aliases other than Const Generic Argument type checking. | ||
|
|
||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. probably a concrete example here of a function and going "things here are item wfck'd" and "things here are handled by normal type checking" would be useful |
||
| Items are a major entry point for performing term-wfck. Because Items contain Terms, item-wfck can invoke term-wfck. | ||
|
|
||
| ### We (Sometimes) Need Normalization | ||
|
|
||
| Currently, there are places where normalization of an Item happens before its Terms have gone through wfck. This is considered problematic as this allows some terms to [bypass term-wfck entirely](https://github.com/rust-lang/rust/issues/100041). | ||
|
|
||
| ### Trivial Bounds | ||
|
|
||
| Trivial bounds[^item-wf-global-bounds] are bounds that don't need any further normalization to go through wfck. These are also sometimes called Global Bounds. Consider the following: | ||
|
|
||
| ```rust,ignore | ||
| fn apartment_complex<T>(block: T, name: String) where String: Clone { /* ... */ } | ||
| --- | ||
| String: Clone // Trivial bound! We don't have to wfck T or any sub-terms to know this holds. | ||
| // Maybe there's obligations on T but we don't care about them here. | ||
| // ... | ||
| ``` | ||
|
|
||
| This produces the trivial bound `String: Clone`. This is something we can check without instantiating any other information in this Item. We don't need to know any information about `T` to be able to make a judgment on the well-formedness of `String: Clone`. | ||
|
|
||
| False trivial bounds are things like: | ||
|
|
||
| ```rust,ignore | ||
| fn apartment_simple<T>(block: T, name: String) where String: Copy { /* ... */ } | ||
| --- | ||
| String: Copy // Trivial bound again, but this one is false! | ||
| ``` | ||
|
|
||
| Here we have a trivial bound that does not hold, because `String` is not `Copy`. | ||
|
|
||
| ## When We Don't Fully Do Well-Formedness Checking | ||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Structurally it feels weird to lump this all under one header instead of wellformedness of terms and wellformedness of items having its own separate lists of "jank". Though I realise some things (e.g. const generics jank) would appear in both sections
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. It's a bit difficult. I like having them all here so there's a stronger emphasis on them as collective jank, but I'll see if I can rework them into the two major sections. |
||
|
|
||
| Well-formedness checking is not a coherent "stage" of type checking. It gets called from various contexts, and there are places where it gets skipped partially or entirely. | ||
|
|
||
| ### Trait Objects | ||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Another example to illustrate this: trait Trait
where
for<'a> [u8]: Sized {}
fn foo(_: &dyn Trait) {}this compiles even though probably a nicer example to lead with so you can separate out discussion of trait object wf jank from the const generics jank working around trait object wf jank lol |
||
|
|
||
| Trait objects of traits with where clauses / const generics do not undergo wfck until the type is coerced back into a concrete type. | ||
|
|
||
| ```rust,ignore | ||
| trait Trait<const N: usize> {} | ||
| fn foo<const B: bool>(_: &dyn Trait<B>) {} | ||
| --- | ||
| // This doesn't end up being generated, because it happens within a trait object. | ||
| const N: usize | ||
| const B: bool | ||
| N = B // Substitution | ||
| // This fails once we coerce out of a trait object to a concrete type. | ||
| // But because we don't coerce, it passes wfck. | ||
| const B: usize + bool | ||
| ``` | ||
|
|
||
| The above shouldn't compile, and yet it does. `foo`s const generic argument is a `bool`, while `Trait`'s is a `usize`. But because the wfck of trait objects doesn't happen until coercion into a concrete type, the above compiles just fine. | ||
|
|
||
| ### Binders / Higher-Ranked Bounds | ||
|
|
||
| HRBs also skip the wfck on their subjects. | ||
|
|
||
| TODO: bit of background of why this doesn't happen. | ||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. u need us to chat about this or just haven't gotten around to writing down what's in your notes?
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. We gotta chat about this :') This is lightly mentioned but any details are missing from my notes. |
||
|
|
||
| ```rust,ignore | ||
| let _: for<'a> fn(Vec<[&'a ()]>); | ||
| --- | ||
| // This doesn't end up being generated, because it happens within a HRB | ||
| [&'a ()]: Sized // slices aren't sized. | ||
| ``` | ||
|
|
||
| ### Free Type Aliases | ||
|
|
||
| The rhs of Free Type Aliases[^fta] do not go through a full wfck at the definition site, with the exception of shallowly "type checking" const generic parameters of the rhs. | ||
|
|
||
| This means the following _currently_ passes type checking, assuming you don't actually use it in a non-FTA Item: | ||
|
|
||
| ```rust,ignore | ||
| type WorksButShouldNot = Vec<str>; | ||
| --- | ||
| // This should fail! But we skip the rhs of free type aliases | ||
| str: Sized | ||
| ``` | ||
|
|
||
| This shouldn't work, as `T: Sized`, `str: Sized` being implied by `Vec<T>`, but because the rhs of a free type alias doesn't go through well-formedness checking unless it's used this doesn't error. | ||
|
|
||
| [^trait-solver]: Despite being called a trait solver, it solves other things too[^boxy]. | ||
| [^fta]: Type aliases not associated with anything, i.e. a module-level `type Alias = Vec<u8>;`. | ||
| [^boxy]: Boxy said so. TODO: don't have any of these references :) | ||
| [^items]: "Definition" style things in rust, See the [glossary](../appendix/glossary.md) | ||
| [^terms]: Type expressions? TODO: this needs to be nailed down, and maybe inserted into the glossary. | ||
| [^terms-abbreviated]: Abbreviated as "Terms" on this page in some areas. | ||
| [^hir-ty-lower]: https://doc.rust-lang.org/nightly/nightly-rustc/rustc_hir_analysis/hir_ty_lowering/index.html | ||
| [^tlt-wf-module]: https://doc.rust-lang.org/nightly/nightly-rustc/rustc_trait_selection/traits/wf/index.html | ||
| [^item-wf-module]: https://doc.rust-lang.org/nightly/nightly-rustc/rustc_hir_analysis/check/wfcheck/index.html | ||
| [^wf-ctx-construction]: https://doc.rust-lang.org/nightly/nightly-rustc/rustc_hir_analysis/check/wfcheck/fn.enter_wf_checking_ctxt.html | ||
| [^item-wf-ctx]: https://doc.rust-lang.org/nightly/nightly-rustc/rustc_hir_analysis/check/wfcheck/struct.WfCheckingCtxt.html | ||
| [^item-wf-global-bounds]: https://doc.rust-lang.org/nightly/nightly-rustc/rustc_hir_analysis/check/wfcheck/struct.WfCheckingCtxt.html#method.check_false_global_bounds | ||
| [^tyck-const-generics]: https://rustc-dev-guide.rust-lang.org/const-generics.html#checking-types-of-const-arguments | ||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
something about this paragraph feels odd to me and im not sure I can place why. it might just be that it feels like it makes more sense in the "Well-Formedness of Type-Level Terms" section, but also that would feel a bit weird too.
I think leading with the second paragraph "Items and Type-Level Terms are 'well formed' when they ..." feels like it would work fine and also feels better to me for some reason?
I guess concretely leading with this feels weird because:
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think I can see it? But also I'd like to put the high-level "input/output" of the processes described here somewhere close to the top. I think the following paragraph isn't concrete enough in comparison. I'll wiggle things around.