Envzn Reference

Every name a developer looks up, in one index: keywords, primitive types, and the types the shipped modules expose. An entry says what the name is, points at the Constitution section that governs it, and links to the API page that details it. It deliberately does not restate a rule — the specification owns the rules, and a reference that paraphrases them is a second source of truth waiting to disagree.


Keywords (140)

ABSTRACT

keyword

VALUE CLASS (3rd type-kind, §I.J.vi) = a class with value identity + inline storage: methods + generics + IMPLEMENTS, but value-copied and stored inline (no _ev_unique handle). Fields read with ., methods called with -> (like number/complex). DynamicString/DynamicByteBuffer are NOT examples any more — they became ordinary heap classes on 2026-08-24, when the SBO removal left them with no inline storage. Still a class → bind with := (plain = is E3023), uniformly whether strict (all-value fields) or managed (owns heap → compiler synthesizes the deep-copy ctor). Inheritance leaf: IMPLEMENTS yes, EXTENDS/be-extended no (E1132); satisfies interfaces for generic constraints but can't be boxed behind an interface handle in V1 (E1133). VALUE can't combine with ABSTRACT/SINGLETON. (This bullet used to end by calling DynamicString/DynamicByteBuffer value classes, contradicting its own opening sentence four lines earlier — they stopped being value classes on 2026-08-24.)

Specification: I.B — Definitions and Notation

Diagnostics that name it: E1099, E6003, E6006, E6007, E6011, E6020, E6022, E6026 (+4 more)

ALIAS

keyword

ALIAS — file-scoped un-qualification (§I.N.d.iv, #48). At the top of a file (after MODULE, before any CLASS/INTERFACE/NAMESPACE), bind a qualified name to its bare short name for that file only. Three forms by qualifier: ALIAS mda::TextColumn (::) → bare TextColumn is the dep type file-wide (decls/CREATE/MATCH/PANIC); ALIAS Math.cubeRoot (.) → bare cubeRoot(x) is Math.cubeRoot(x); ALIAS Math (bare namespace) → every Math function bare-callable. Pure rewrite to the FQN before file-merge — no new scope, no runtime, no visibility change. Guards: target must be real (E2107); short name may not collide with a local type/method or another alias, incl. a whole-namespace import that brings in a colliding name (E2108 — ALIAS never shadows).

Specification: I.N — Modules and Linkage

AND

keyword

INTERFACE composes with EXTENDS, comma-separated — and NEVER with IMPLEMENTS (E6090). INTERFACE Dictionary[K, V, H] EXTENDS Cloneable, Equatable OF Dictionary, Comparable OF Dictionary — one or more parents, commas, not AND (2026-09-14; AND is the template-qualifier operator, TEMPLATE: GIVEN TYPE T IS (Cloneable AND Comparable), and means nothing on an EXTENDS line where every parent always applies). An interface is a contract, so it implements nothing. A CLASS is the mirror image: exactly one EXTENDS parent (E6018), many IMPLEMENTS interfaces, also comma-separated. Reaching the same ancestor method by two paths with an identical signature is a diamond — one contract, kept once, no error; same name + different params is an overload; same name + same params + a different result is E6091.

Specification: I.F — Expressions

AS

keyword

Primitives carry no methods, no wrapper classes (no Integer/Float64). Convert with the INTO/AS operators (the Convert singleton is deleted — 2026-06-07): x INTO T = lossless/widening, total (int32 INTO int64, num→String); x AS T = lossy/narrowing, fallible(T value | STATUS s) (int64 AS int32). Conversions live in CONVERSIONS hosts (PrimitiveConversions/NumberConverter/FloatConverter/TextConverter/CharConverter) + NAMESPACE codecs called with . (HexCodec.toHex(bb)/Base64Codec./ByteOrderCodec./UTFCodec.). int/integer are aliases of int64; uint of uint64; float of float32. boolean holds TRUE/FALSE (never bool). Any conversion question — which operator, what's valid, what it returns, format auto-convert — see docs/CONVERSIONS.md (the full AS/INTO matrix + per-host detail).

Specification: I.D — The Type System

Diagnostics that name it: E2087, E2088, E2089, E2105, E2106, W10026

ASHIFT

keyword

Specification: I.F — Expressions

ASSERT

keyword

Specification: I.F — Expressions

ASSERT!

keyword

Bare + − * ^ ! / unary that overflows a fixed-width integer — signed AND unsigned (int8..int128, uint8..uint128) — raises a tier-2 MathError PANIC (CLEANUP-unwinds, RECOVER-catchable for graceful shutdown; ALWAYS ON — not stripped under -prod, unlike tier-3 ASSERT!). A wrapped size is the classic exploit; the floor forbids it. Same tier-2 MathError covers integer ÷0 (/ %) and shift-past-width. Two type exceptions: number promotes up its ladder (never panics on int overflow); decimal128 rounds within precision and panics only on ÷0/magnitude(exponent)-overflow. Floats are IEEE-untrapped: float16/32/64 overflow → ±Infinity, underflow → signed 0, NO panic (float32 ≡ float64 — same standard). # hash-combine is EXEMPT (modular by design). Intentional wrap = the greppable operators &+ &- &* (Swift-style; modular add/sub/mul, integer-only — a float/number/decimal128 operand is E2134). Each lowers to a single-instruction ev_wrap* intrinsic; they are the ONLY sanctioned modular arithmetic — never rely on a bare op wrapping. (Not a method: an operator carries no namespace reference, so it introduces no kernel-class dependency.) Enforcement for the panicking + − * is the checked lowering (_checked_arith, which also checks / % <<), and it has LANDED. The interim -fwrapv is gone — from the emitter (Bug #290) and from every build as of 2026-08-26 — so signed overflow is neither defined nor silent: it PANICs. Author to the PANIC contract; there is no wrap to fall back on.

ATTACHED

keyword

AUTO

keyword

Specification: I.K — Abstractions

Diagnostics that name it: E3027, E3028, E6056, E6057, E6066, E7029

BAND

keyword

char family: charchar32=code point (U+0000..10FFFF); char8=UTF-8 unit, char16=UTF-16 unit. Cross-width = explicit INTO/AS (via CharWidthConverter); an implicit cross-char-type conversion (e.g. char16 u = someChar8) warns (W10095) — every pair except char16→char32 (same scalar). (--no-clang-char-warnings silences clang's parallel warning, not Envzn's.) Never write bare char ambiguously; String ring is char32. binary = the raw octet (distinct from char, and — since byte was retired 2026-08-29 — the only octet type; a small number is uint8). Octet rules (I.D.i(c.i)): literals are hex or binary only (0xC3, 0b1100_0011 — never 195, W2136); operators are =, +/-, BAND/BOR/BXOR/BNOT/RSHIFT/LSHIFT, and the six comparisons — no * / % ^ (W2135), because +/- move within the octet space (c - 0x30 decodes an ASCII digit) while scaling assumes a magnitude. Shift count is uint8 (W2137); a literal count adopts it, and a shift ≥ 8 yields 0x00.

Specification: I.D — The Type System

BEQUALS

keyword

Specification: I.F — Expressions

BIND

keyword

Specification: I.N — Modules and Linkage

Diagnostics that name it: E2090, E2091, E2092, E2095, E2096, E2097, E2100

BLITTABLE

keyword

Specification: I.J — Aggregates and Iteration

BNEQUALS

keyword

Specification: I.F — Expressions

BNOT

keyword

char family: charchar32=code point (U+0000..10FFFF); char8=UTF-8 unit, char16=UTF-16 unit. Cross-width = explicit INTO/AS (via CharWidthConverter); an implicit cross-char-type conversion (e.g. char16 u = someChar8) warns (W10095) — every pair except char16→char32 (same scalar). (--no-clang-char-warnings silences clang's parallel warning, not Envzn's.) Never write bare char ambiguously; String ring is char32. binary = the raw octet (distinct from char, and — since byte was retired 2026-08-29 — the only octet type; a small number is uint8). Octet rules (I.D.i(c.i)): literals are hex or binary only (0xC3, 0b1100_0011 — never 195, W2136); operators are =, +/-, BAND/BOR/BXOR/BNOT/RSHIFT/LSHIFT, and the six comparisons — no * / % ^ (W2135), because +/- move within the octet space (c - 0x30 decodes an ASCII digit) while scaling assumes a magnitude. Shift count is uint8 (W2137); a literal count adopts it, and a shift ≥ 8 yields 0x00.

Specification: I.F — Expressions

BOR

keyword

char family: charchar32=code point (U+0000..10FFFF); char8=UTF-8 unit, char16=UTF-16 unit. Cross-width = explicit INTO/AS (via CharWidthConverter); an implicit cross-char-type conversion (e.g. char16 u = someChar8) warns (W10095) — every pair except char16→char32 (same scalar). (--no-clang-char-warnings silences clang's parallel warning, not Envzn's.) Never write bare char ambiguously; String ring is char32. binary = the raw octet (distinct from char, and — since byte was retired 2026-08-29 — the only octet type; a small number is uint8). Octet rules (I.D.i(c.i)): literals are hex or binary only (0xC3, 0b1100_0011 — never 195, W2136); operators are =, +/-, BAND/BOR/BXOR/BNOT/RSHIFT/LSHIFT, and the six comparisons — no * / % ^ (W2135), because +/- move within the octet space (c - 0x30 decodes an ASCII digit) while scaling assumes a magnitude. Shift count is uint8 (W2137); a literal count adopts it, and a shift ≥ 8 yields 0x00.

Specification: I.D — The Type System

BREAK

keyword

Loops: FOR x IN coll (binds non-owning, locks coll vs mutation) · FOR i = 0 TO 10 STEP 2 (TO inclusive, UNTIL exclusive) · FOR (int i = 0; i < n; i++) — the NORMAL FORM of the C-style loop (Brian, 2026-08-25): parens, and i++. Only place with ;. Reach for it when you need a counter of a SPECIFIC width, since the range form's counter is int64 and has no type slot · REPEAT n { } · REPEAT { } (bare = infinite, leave by BREAK).

Specification: I.H — Control Flow

Diagnostics that name it: E4004, E4023

BXOR

keyword

char family: charchar32=code point (U+0000..10FFFF); char8=UTF-8 unit, char16=UTF-16 unit. Cross-width = explicit INTO/AS (via CharWidthConverter); an implicit cross-char-type conversion (e.g. char16 u = someChar8) warns (W10095) — every pair except char16→char32 (same scalar). (--no-clang-char-warnings silences clang's parallel warning, not Envzn's.) Never write bare char ambiguously; String ring is char32. binary = the raw octet (distinct from char, and — since byte was retired 2026-08-29 — the only octet type; a small number is uint8). Octet rules (I.D.i(c.i)): literals are hex or binary only (0xC3, 0b1100_0011 — never 195, W2136); operators are =, +/-, BAND/BOR/BXOR/BNOT/RSHIFT/LSHIFT, and the six comparisons — no * / % ^ (W2135), because +/- move within the octet space (c - 0x30 decodes an ASCII digit) while scaling assumes a magnitude. Shift count is uint8 (W2137); a literal count adopts it, and a shift ≥ 8 yields 0x00.

Specification: I.H — Control Flow

CALLED_BY_EMITTER

keyword

Specification: I.N — Modules and Linkage

CATCH

keyword

Specification: I.M — Error Handling

Diagnostics that name it: E1006, E4016, E4017, W10013, W10042

CLASS

keyword

INTERFACE composes with EXTENDS, comma-separated — and NEVER with IMPLEMENTS (E6090). INTERFACE Dictionary[K, V, H] EXTENDS Cloneable, Equatable OF Dictionary, Comparable OF Dictionary — one or more parents, commas, not AND (2026-09-14; AND is the template-qualifier operator, TEMPLATE: GIVEN TYPE T IS (Cloneable AND Comparable), and means nothing on an EXTENDS line where every parent always applies). An interface is a contract, so it implements nothing. A CLASS is the mirror image: exactly one EXTENDS parent (E6018), many IMPLEMENTS interfaces, also comma-separated. Reaching the same ancestor method by two paths with an identical signature is a diamond — one contract, kept once, no error; same name + different params is an overload; same name + same params + a different result is E6091.

Specification: I.K — Abstractions

Diagnostics that name it: E1008, E1024, E1099, E1100, E1101, E1102, E1103, E1132 (+23 more)

CLEANUP

keyword

LABEL <name> <loop-or-block> — name it, then BREAK <name> / CONTINUE <name> jumps multiple levels. Prefixes ANY loop form or a bare { } (the early-exit ladder). The jump is lexical — forward to just past the block, or back to the named loop's next iteration; it never enters a block, moves sideways, or leaves the method. Unwinds properly: destructors, every CLEANUP, and any FINALLY it leaves all run. Names are unique per CLASS (E4038) even across methods. Not allowed inside a FINALLY (E4037) or across PARALLEL/CONCURRENT/LAMBDA (E4036); CONTINUE needs a loop, not a block (E4035).

Specification: I.I — Memory and Ownership

Diagnostics that name it: E2076, E3005, E3022, E6004, W10031

CONCURRENT

keyword

LABEL <name> <loop-or-block> — name it, then BREAK <name> / CONTINUE <name> jumps multiple levels. Prefixes ANY loop form or a bare { } (the early-exit ladder). The jump is lexical — forward to just past the block, or back to the named loop's next iteration; it never enters a block, moves sideways, or leaves the method. Unwinds properly: destructors, every CLEANUP, and any FINALLY it leaves all run. Names are unique per CLASS (E4038) even across methods. Not allowed inside a FINALLY (E4037) or across PARALLEL/CONCURRENT/LAMBDA (E4036); CONTINUE needs a loop, not a block (E4035).

Specification: I.L — Concurrency

Diagnostics that name it: E4090, E4100, E4101, E4102, E4105, E4109, W4106, W4108

CONSTANT

keyword

Fields public + immutable by default (2026-08-14, gh #215 — visibility NARROWS, it never widens); modifiers PRIVATE/PROTECTED/INTERNAL, SHARED, CONSTANT. A field, CONSTANT, or method declaring none of PRIVATE/INTERNAL/PROTECTED is public — PUBLIC is a reserved word that parses NOWHERE (absent from the field-modifier set in parse/parser/decl_class.py and the method set in decl_method.py), so writing it is E1008, not a no-op. Immutability is the axis that carries the safety: every write path is a named MODIFY method. Field visibility is enforced by the ANALYZER, on reads AND writesPRIVATE by E6009, module-scoped INTERNAL by E6034 (2026-08-12; the write side was unreachable before then, which is how gh #205's a._length = 100000 reached clang). METHODS are NOT checked — E6009 is oop:private-field and never inspects a call, so a cross-class PRIVATE method call falls through to a raw clang reject (#213) and a kernel PRIVATE method is emitted public: in EV_*.hpp and is callable from any module with no error at all (#214) — don't read a green build as proof a method is properly encapsulated. In the emitted C++ a PRIVATE field lands in private: as defence in depth, but an INTERNAL one lands in public: on purpose and permanently — C++ has no way to say "same module", protected: means subclass, and a module-mate that isn't a subclass legitimately reads it. Don't "fix" that. A STRUCT field may carry no visibility modifier at all (E6030, at the declaration). Class-typed fields must be set on every INIT path (no silent EMPTY). REFERENCE = non-owning (use for back-pointers to avoid ownership cycles). VOLATILE is retired on class fields (V1, 2026-05-13) — reserved word only; route shared mutable state through MODIFY methods + Mutex[T]/AtomicX/SHARED CLASS (a STRUCT field may still be VOLATILE, I.J.iv).

Specification: I.E — Declarations and Bindings

Diagnostics that name it: E1024, E1080, E1081, E1082, E1083, E1084, E1086, E1107 (+4 more)

CONTINUE

keyword

LABEL <name> <loop-or-block> — name it, then BREAK <name> / CONTINUE <name> jumps multiple levels. Prefixes ANY loop form or a bare { } (the early-exit ladder). The jump is lexical — forward to just past the block, or back to the named loop's next iteration; it never enters a block, moves sideways, or leaves the method. Unwinds properly: destructors, every CLEANUP, and any FINALLY it leaves all run. Names are unique per CLASS (E4038) even across methods. Not allowed inside a FINALLY (E4037) or across PARALLEL/CONCURRENT/LAMBDA (E4036); CONTINUE needs a loop, not a block (E4035).

Specification: I.H — Control Flow

Diagnostics that name it: E4005

CONVERSIONS

keyword

Primitives carry no methods, no wrapper classes (no Integer/Float64). Convert with the INTO/AS operators (the Convert singleton is deleted — 2026-06-07): x INTO T = lossless/widening, total (int32 INTO int64, num→String); x AS T = lossy/narrowing, fallible(T value | STATUS s) (int64 AS int32). Conversions live in CONVERSIONS hosts (PrimitiveConversions/NumberConverter/FloatConverter/TextConverter/CharConverter) + NAMESPACE codecs called with . (HexCodec.toHex(bb)/Base64Codec./ByteOrderCodec./UTFCodec.). int/integer are aliases of int64; uint of uint64; float of float32. boolean holds TRUE/FALSE (never bool). Any conversion question — which operator, what's valid, what it returns, format auto-convert — see docs/CONVERSIONS.md (the full AS/INTO matrix + per-host detail).

Specification: I.O — The Standard Library Surface

Diagnostics that name it: E2088, E2089, W10026

CREATE

keyword

= | bind a value, never object ownership. Primitive/value-class/STATUS/enum: any expr (bit copy). String: a string literal only. Other class: EMPTY only. Any CREATE/->clone()/copy under = is an error (E2020 String, E3023 other). |

Specification: I.J — Aggregates and Iteration

Diagnostics that name it: E1084, E1131, E1133, E2016, E2057, E6027

DEFAULT

keyword

REMOVED 2026-08-02 — all are IF/ELSE IF now (E4030): WHEN ==0: · WHEN 1 TO 10: · WHEN 5: (any literal/list) · WHEN .method(): / WHEN NOT .field: · WHEN x IF guard: · subjectless MATCH { WHEN <bool>: } · DEFAULT: (a named closed set has nothing left to catch; DEFAULT survives ONLY on the compile-time WHEN IS/IMPLEMENTS form, where the else arm is mandatory). An int32/char/String is not a closed set — that is the whole test. Deep IF-chains are a design smell: reach for polymorphism, not a longer chain.

Specification: I.H — Control Flow

Diagnostics that name it: W10004

DEPRECATED

keyword

Specification: I.K — Abstractions

Diagnostics that name it: E6004

DERIVED

keyword

Specification: I.P — Serialization and Reconstruction

DETACHED

keyword

Specification: I.L — Concurrency

Diagnostics that name it: E4109, W4106

DIRTY

keyword

Specification: I.I — Memory and Ownership

DO

keyword

Specification: I.H — Control Flow

Diagnostics that name it: E1030, E1090, W10001

DUPLICATE

keyword

Read live exemplars first: LinkedList.ev (splice/ownership), Stack.ev/Queue.ev (compose-on-Array), ChainedHashEntry.ev/DefaultHasher.ev/Hasher.ev (generic dispatch + DUPLICATE).

Specification: I.I — Memory and Ownership

Diagnostics that name it: E3027, E3028, E6056, E6057, E6058, E6066, E7029

ELSE

keyword

Conditional compilation (#5): WHEN Build IS DEBUG { } ELSE { } / WHEN Build IS RELEASE { } ELSE { } — compile-time; the unmatched arm is removed before analysis (never type-checked/emitted). Posture = RELEASE iff -prod (or --build release), else DEBUG. Positive-identity only, mandatory ELSE. (Platform / WHEN FEATURE forms designed, not yet implemented.)

Specification: I.H — Control Flow

Diagnostics that name it: E1095, E4010

EMPTY

keyword

= | bind a value, never object ownership. Primitive/value-class/STATUS/enum: any expr (bit copy). String: a string literal only. Other class: EMPTY only. Any CREATE/->clone()/copy under = is an error (E2020 String, E3023 other). |

Specification: I.B — Definitions and Notation

Diagnostics that name it: E2005, E2010, E2076, E2080, E4003, E5006, W10046

ENCRYPTED

keyword

Specification: I.I — Memory and Ownership

ENUM

keyword

MATCH = exhaustive dispatch over a CLOSED SET, and every arm BINDS (§I.H.v(a)). Exactly three closed sets, because they are the only things the compiler can enumerate: a GROUP (types) WHEN Circle c: · a dev ENUM (cases) WHEN NORTH: · a STATUS (kinds) WHEN FAILURE(msg): — STATUS is not special, it is the built-in instance of the enum form. No fallthrough; statement, yields no value.

Specification: I.K — Abstractions

Diagnostics that name it: E1021, E6019, E6039, E9003, E9004, E9031, W10026, W10050

EXCEPT

keyword

Specification: I.K — Abstractions

Diagnostics that name it: E2112, E2113

EXTENDS

keyword

VALUE CLASS (3rd type-kind, §I.J.vi) = a class with value identity + inline storage: methods + generics + IMPLEMENTS, but value-copied and stored inline (no _ev_unique handle). Fields read with ., methods called with -> (like number/complex). DynamicString/DynamicByteBuffer are NOT examples any more — they became ordinary heap classes on 2026-08-24, when the SBO removal left them with no inline storage. Still a class → bind with := (plain = is E3023), uniformly whether strict (all-value fields) or managed (owns heap → compiler synthesizes the deep-copy ctor). Inheritance leaf: IMPLEMENTS yes, EXTENDS/be-extended no (E1132); satisfies interfaces for generic constraints but can't be boxed behind an interface handle in V1 (E1133). VALUE can't combine with ABSTRACT/SINGLETON. (This bullet used to end by calling DynamicString/DynamicByteBuffer value classes, contradicting its own opening sentence four lines earlier — they stopped being value classes on 2026-08-24.)

Specification: I.K — Abstractions

Diagnostics that name it: E1102, E1130, E1132, E2039, E4026, E6003, E6005, E6006 (+9 more)

FAILURE

keyword

Specification: I.M — Error Handling

Diagnostics that name it: E1007

FALSE

keyword

Primitives carry no methods, no wrapper classes (no Integer/Float64). Convert with the INTO/AS operators (the Convert singleton is deleted — 2026-06-07): x INTO T = lossless/widening, total (int32 INTO int64, num→String); x AS T = lossy/narrowing, fallible(T value | STATUS s) (int64 AS int32). Conversions live in CONVERSIONS hosts (PrimitiveConversions/NumberConverter/FloatConverter/TextConverter/CharConverter) + NAMESPACE codecs called with . (HexCodec.toHex(bb)/Base64Codec./ByteOrderCodec./UTFCodec.). int/integer are aliases of int64; uint of uint64; float of float32. boolean holds TRUE/FALSE (never bool). Any conversion question — which operator, what's valid, what it returns, format auto-convert — see docs/CONVERSIONS.md (the full AS/INTO matrix + per-host detail).

Specification: I.F — Expressions

FEATURE

keyword

Specification: I.H — Control Flow

FENCE

keyword

FINAL

keyword

Dictionary toolbox — Dictionary[K,V,H] is the interface and every impl is HIDDEN (2026-09-12): an impl name is a CREATE target and nothing else, so naming one as a field/param/return type is E1131. Hold the interface, CREATE the impl. Two arities: [K,V,H] generic-key — ChainedHashDictionary (unordered, general-purpose default) · RedBlackTreeDictionary (ordered key iteration, K also Comparable, O(log n)) · IntKeyedDictionary (TRUSTED-KEY FAST TIER for dense integer keys — SoA open-addressing + hash & mask, ~1.1× C; the hasher is passed in: Dictionary[int32,int64,InlineIntHasher[int32]] d := CREATE IntKeyedDictionary[int32,int64,InlineIntHasher[int32]](CREATE InlineIntHasher[int32]())) · ShallowDictionary (PARKED — multiply-shift + prime fallback; robust but ~4.6× C since a mixing index scatters, so NOT the default). [V,H] byte-key — the key is FIXED to BinaryWord, so these declare two parameters, not three: StringKeyedDictionary (the STRING/BYTE FAST TIER) and ProHashDictionary (SipHash-128 keyed, DoS-resistant for untrusted keys). BinaryWord is a borrowed byte WINDOW, not an array — a VALUE CLASS over (REFERENCE binary[] src, int64 off, int64 len). Transcode the String key ONCE (s INTO ByteBufferbinary[]), then wrap it, keeping the array alive longer than the window: Dictionary[BinaryWord,int32,DefaultHasher[BinaryWord]] d := CREATE StringKeyedDictionary[int32,DefaultHasher[BinaryWord]]() · binary[] k := bytesOf(s) · BinaryWord kw := CREATE BinaryWord(k, 0, k.length) · d->insert(kw, v). StringKeyed's flat binary[] key pool + byte-FNV HOTLOOP hash + System->memoryCompare confirm + cached-hash reject → 0.77× C (BEATS C), pure Envzn, no FOREIGN. Interface surface = insert/insertCopy/lookup/lookupFast/remove/contains; the zero-copy slice surface (insertSlice/lookupFastSlice(buf,off,len)) and the non-pipe-XOR d[key] read are CONCRETE-only and therefore unreachable while the impls are HIDDEN. Hashers = the H slot: DefaultHasher (FNV, the no-arg default) · StringHasher · SipHasher (keyed SipHash; ProHash's built-in) · FastIntHasher (identity, regular class) · InlineIntHasher (identity VALUE CLASS — stores inline as a concrete H, for IntKeyedDictionary). Set[V,H] is FINAL, not hidden — it wraps a Dictionary and is constructed directly; same hasher choices. The cache law: a dict lookup is memory-bound — cache-fast needs identity-hash+dense keys (IntKeyed) or inline byte-dense slots (StringKeyed); every mixing/robust index (FNV/Sip/multiply-shift) scatters → ~3–4× C floor.

Specification: I.K — Abstractions

Diagnostics that name it: E6003, E6004, E6006, E6007, E6008, E6011, E6020, E6026 (+2 more)

FINALLY

keyword

LABEL <name> <loop-or-block> — name it, then BREAK <name> / CONTINUE <name> jumps multiple levels. Prefixes ANY loop form or a bare { } (the early-exit ladder). The jump is lexical — forward to just past the block, or back to the named loop's next iteration; it never enters a block, moves sideways, or leaves the method. Unwinds properly: destructors, every CLEANUP, and any FINALLY it leaves all run. Names are unique per CLASS (E4038) even across methods. Not allowed inside a FINALLY (E4037) or across PARALLEL/CONCURRENT/LAMBDA (E4036); CONTINUE needs a loop, not a block (E4035).

Specification: I.H — Control Flow

Diagnostics that name it: E4006, E4007, E4009, E4017

FOR

keyword

Specification: I.H — Control Flow

Diagnostics that name it: E1022, E1112, E1113, E4014, E4025, E5009, E5013, E5022 (+1 more)

FOREACH

keyword

⚠️ Withdrawn 2026-08-18: FOREACH (reserved, E1163 — use FOR … IN) · LOOP it = coll->iterator() {…} and LOOP $_ IN coll (both gone with the old LOOP surface; for cursor control hold a kernel iterator and consume next() in a WHILE). STEP is unaffected.

Specification: I.H — Control Flow

Diagnostics that name it: E1112, E1113, E5012, E5020, W10001

FOREIGN

keyword

C-ABI boundary types (§I.D.x, shipped 2026-08-06): C.size_t · C.ssize_t · C.long · C.unsignedLong — four ATOMIC reserved words that contain a dot (C is not a namespace; CLASS C stays legal). They lower verbatim to the C spelling and are legal only inside a FOREIGN/FOREIGN BIND declaration (else E2143). No arithmetic, no ordering, not Numeric, no guaranteed width — that absence IS the contract. Use them whenever the C type is pointed to (LOAD C.size_t siglensize_t*): a fixed-width primitive cannot express it, because size_t is unsigned long while uint64_t is unsigned long long on Darwin — and they SWAP on Linux, so the wrong spelling compiles on one target and fails on the other (W2146 warns on a 64-bit fixed-width LOAD). By value the old spelling merely works by implicit conversion.

Specification: I.N — Modules and Linkage

Diagnostics that name it: E1003, E1018, E2090, E2091, E2092, E2095, E2096, E2097 (+2 more)

FOREIGN_TYPE

keyword

Specification: I.I — Memory and Ownership

Diagnostics that name it: E1080, E3028, E3036, E3037, E6063

FREEZE

keyword

FROM

keyword

Specification: I.D — The Type System

Diagnostics that name it: E2088, E2089, W10026

GIVEN

keyword

Specification: I.K — Abstractions

Diagnostics that name it: E2110

GROUP

keyword

MATCH = exhaustive dispatch over a CLOSED SET, and every arm BINDS (§I.H.v(a)). Exactly three closed sets, because they are the only things the compiler can enumerate: a GROUP (types) WHEN Circle c: · a dev ENUM (cases) WHEN NORTH: · a STATUS (kinds) WHEN FAILURE(msg): — STATUS is not special, it is the built-in instance of the enum form. No fallthrough; statement, yields no value.

Specification: I.K — Abstractions

Diagnostics that name it: E2005, E2016, E2112, E2113, E3015, E6002, E6015, E6025 (+9 more)

HIDDEN

keyword

Dictionary toolbox — Dictionary[K,V,H] is the interface and every impl is HIDDEN (2026-09-12): an impl name is a CREATE target and nothing else, so naming one as a field/param/return type is E1131. Hold the interface, CREATE the impl. Two arities: [K,V,H] generic-key — ChainedHashDictionary (unordered, general-purpose default) · RedBlackTreeDictionary (ordered key iteration, K also Comparable, O(log n)) · IntKeyedDictionary (TRUSTED-KEY FAST TIER for dense integer keys — SoA open-addressing + hash & mask, ~1.1× C; the hasher is passed in: Dictionary[int32,int64,InlineIntHasher[int32]] d := CREATE IntKeyedDictionary[int32,int64,InlineIntHasher[int32]](CREATE InlineIntHasher[int32]())) · ShallowDictionary (PARKED — multiply-shift + prime fallback; robust but ~4.6× C since a mixing index scatters, so NOT the default). [V,H] byte-key — the key is FIXED to BinaryWord, so these declare two parameters, not three: StringKeyedDictionary (the STRING/BYTE FAST TIER) and ProHashDictionary (SipHash-128 keyed, DoS-resistant for untrusted keys). BinaryWord is a borrowed byte WINDOW, not an array — a VALUE CLASS over (REFERENCE binary[] src, int64 off, int64 len). Transcode the String key ONCE (s INTO ByteBufferbinary[]), then wrap it, keeping the array alive longer than the window: Dictionary[BinaryWord,int32,DefaultHasher[BinaryWord]] d := CREATE StringKeyedDictionary[int32,DefaultHasher[BinaryWord]]() · binary[] k := bytesOf(s) · BinaryWord kw := CREATE BinaryWord(k, 0, k.length) · d->insert(kw, v). StringKeyed's flat binary[] key pool + byte-FNV HOTLOOP hash + System->memoryCompare confirm + cached-hash reject → 0.77× C (BEATS C), pure Envzn, no FOREIGN. Interface surface = insert/insertCopy/lookup/lookupFast/remove/contains; the zero-copy slice surface (insertSlice/lookupFastSlice(buf,off,len)) and the non-pipe-XOR d[key] read are CONCRETE-only and therefore unreachable while the impls are HIDDEN. Hashers = the H slot: DefaultHasher (FNV, the no-arg default) · StringHasher · SipHasher (keyed SipHash; ProHash's built-in) · FastIntHasher (identity, regular class) · InlineIntHasher (identity VALUE CLASS — stores inline as a concrete H, for IntKeyedDictionary). Set[V,H] is FINAL, not hidden — it wraps a Dictionary and is constructed directly; same hasher choices. The cache law: a dict lookup is memory-bound — cache-fast needs identity-hash+dense keys (IntKeyed) or inline byte-dense slots (StringKeyed); every mixing/robust index (FNV/Sip/multiply-shift) scatters → ~3–4× C floor.

Specification: I.K — Abstractions

Diagnostics that name it: E1130, E1131

HOTLOOP

keyword

Dictionary toolbox — Dictionary[K,V,H] is the interface and every impl is HIDDEN (2026-09-12): an impl name is a CREATE target and nothing else, so naming one as a field/param/return type is E1131. Hold the interface, CREATE the impl. Two arities: [K,V,H] generic-key — ChainedHashDictionary (unordered, general-purpose default) · RedBlackTreeDictionary (ordered key iteration, K also Comparable, O(log n)) · IntKeyedDictionary (TRUSTED-KEY FAST TIER for dense integer keys — SoA open-addressing + hash & mask, ~1.1× C; the hasher is passed in: Dictionary[int32,int64,InlineIntHasher[int32]] d := CREATE IntKeyedDictionary[int32,int64,InlineIntHasher[int32]](CREATE InlineIntHasher[int32]())) · ShallowDictionary (PARKED — multiply-shift + prime fallback; robust but ~4.6× C since a mixing index scatters, so NOT the default). [V,H] byte-key — the key is FIXED to BinaryWord, so these declare two parameters, not three: StringKeyedDictionary (the STRING/BYTE FAST TIER) and ProHashDictionary (SipHash-128 keyed, DoS-resistant for untrusted keys). BinaryWord is a borrowed byte WINDOW, not an array — a VALUE CLASS over (REFERENCE binary[] src, int64 off, int64 len). Transcode the String key ONCE (s INTO ByteBufferbinary[]), then wrap it, keeping the array alive longer than the window: Dictionary[BinaryWord,int32,DefaultHasher[BinaryWord]] d := CREATE StringKeyedDictionary[int32,DefaultHasher[BinaryWord]]() · binary[] k := bytesOf(s) · BinaryWord kw := CREATE BinaryWord(k, 0, k.length) · d->insert(kw, v). StringKeyed's flat binary[] key pool + byte-FNV HOTLOOP hash + System->memoryCompare confirm + cached-hash reject → 0.77× C (BEATS C), pure Envzn, no FOREIGN. Interface surface = insert/insertCopy/lookup/lookupFast/remove/contains; the zero-copy slice surface (insertSlice/lookupFastSlice(buf,off,len)) and the non-pipe-XOR d[key] read are CONCRETE-only and therefore unreachable while the impls are HIDDEN. Hashers = the H slot: DefaultHasher (FNV, the no-arg default) · StringHasher · SipHasher (keyed SipHash; ProHash's built-in) · FastIntHasher (identity, regular class) · InlineIntHasher (identity VALUE CLASS — stores inline as a concrete H, for IntKeyedDictionary). Set[V,H] is FINAL, not hidden — it wraps a Dictionary and is constructed directly; same hasher choices. The cache law: a dict lookup is memory-bound — cache-fast needs identity-hash+dense keys (IntKeyed) or inline byte-dense slots (StringKeyed); every mixing/robust index (FNV/Sip/multiply-shift) scatters → ~3–4× C floor.

Specification: I.H — Control Flow

IDENTITY

keyword

Specification: I.P — Serialization and Reconstruction

IF

keyword

REMOVED 2026-08-02 — all are IF/ELSE IF now (E4030): WHEN ==0: · WHEN 1 TO 10: · WHEN 5: (any literal/list) · WHEN .method(): / WHEN NOT .field: · WHEN x IF guard: · subjectless MATCH { WHEN <bool>: } · DEFAULT: (a named closed set has nothing left to catch; DEFAULT survives ONLY on the compile-time WHEN IS/IMPLEMENTS form, where the else arm is mandatory). An int32/char/String is not a closed set — that is the whole test. Deep IF-chains are a design smell: reach for polymorphism, not a longer chain.

Specification: I.H — Control Flow

Diagnostics that name it: E6053, W10001, W10085

IMPLEMENTS

keyword

REMOVED 2026-08-02 — all are IF/ELSE IF now (E4030): WHEN ==0: · WHEN 1 TO 10: · WHEN 5: (any literal/list) · WHEN .method(): / WHEN NOT .field: · WHEN x IF guard: · subjectless MATCH { WHEN <bool>: } · DEFAULT: (a named closed set has nothing left to catch; DEFAULT survives ONLY on the compile-time WHEN IS/IMPLEMENTS form, where the else arm is mandatory). An int32/char/String is not a closed set — that is the whole test. Deep IF-chains are a design smell: reach for polymorphism, not a longer chain.

Specification: I.J — Aggregates and Iteration

Diagnostics that name it: E1095, E1096, E1097, E1130, E2068, E2115, E6005, E6013 (+3 more)

IN

keyword

Specification: I.H — Control Flow

Diagnostics that name it: E5009, E5013, E5022, W10001

INDEX

keyword

Specification: I.H — Control Flow

INIT

keyword

An unassigned String/ByteBuffer field reads as "", never a fault (I.E.e.i/e.ii). The compiler materialises the empty value lazily, at first read — no per-field malloc in every ctor, so an INIT that assigns the field pays for one construction, not two. You never guard a String field. (Bug #293.)

Specification: I.E — Declarations and Bindings

Diagnostics that name it: E1018, E1103, E2057, E2079, E6004, E6011, E6012, E6031 (+6 more)

INTERFACE

keyword

INTERFACE composes with EXTENDS, comma-separated — and NEVER with IMPLEMENTS (E6090). INTERFACE Dictionary[K, V, H] EXTENDS Cloneable, Equatable OF Dictionary, Comparable OF Dictionary — one or more parents, commas, not AND (2026-09-14; AND is the template-qualifier operator, TEMPLATE: GIVEN TYPE T IS (Cloneable AND Comparable), and means nothing on an EXTENDS line where every parent always applies). An interface is a contract, so it implements nothing. A CLASS is the mirror image: exactly one EXTENDS parent (E6018), many IMPLEMENTS interfaces, also comma-separated. Reaching the same ancestor method by two paths with an identical signature is a diamond — one contract, kept once, no error; same name + different params is an overload; same name + same params + a different result is E6091.

Specification: I.K — Abstractions

Diagnostics that name it: E1097, E6001, E6028, E6035, E9003, E9004, E9031, W10026 (+1 more)

INTERNAL

keyword

Fields public + immutable by default (2026-08-14, gh #215 — visibility NARROWS, it never widens); modifiers PRIVATE/PROTECTED/INTERNAL, SHARED, CONSTANT. A field, CONSTANT, or method declaring none of PRIVATE/INTERNAL/PROTECTED is public — PUBLIC is a reserved word that parses NOWHERE (absent from the field-modifier set in parse/parser/decl_class.py and the method set in decl_method.py), so writing it is E1008, not a no-op. Immutability is the axis that carries the safety: every write path is a named MODIFY method. Field visibility is enforced by the ANALYZER, on reads AND writesPRIVATE by E6009, module-scoped INTERNAL by E6034 (2026-08-12; the write side was unreachable before then, which is how gh #205's a._length = 100000 reached clang). METHODS are NOT checked — E6009 is oop:private-field and never inspects a call, so a cross-class PRIVATE method call falls through to a raw clang reject (#213) and a kernel PRIVATE method is emitted public: in EV_*.hpp and is callable from any module with no error at all (#214) — don't read a green build as proof a method is properly encapsulated. In the emitted C++ a PRIVATE field lands in private: as defence in depth, but an INTERNAL one lands in public: on purpose and permanently — C++ has no way to say "same module", protected: means subclass, and a module-mate that isn't a subclass legitimately reads it. Don't "fix" that. A STRUCT field may carry no visibility modifier at all (E6030, at the declaration). Class-typed fields must be set on every INIT path (no silent EMPTY). REFERENCE = non-owning (use for back-pointers to avoid ownership cycles). VOLATILE is retired on class fields (V1, 2026-05-13) — reserved word only; route shared mutable state through MODIFY methods + Mutex[T]/AtomicX/SHARED CLASS (a STRUCT field may still be VOLATILE, I.J.iv).

Specification: I.N — Modules and Linkage

Diagnostics that name it: E1024, E1080, E2064, E6034

INTO

keyword

Primitives carry no methods, no wrapper classes (no Integer/Float64). Convert with the INTO/AS operators (the Convert singleton is deleted — 2026-06-07): x INTO T = lossless/widening, total (int32 INTO int64, num→String); x AS T = lossy/narrowing, fallible(T value | STATUS s) (int64 AS int32). Conversions live in CONVERSIONS hosts (PrimitiveConversions/NumberConverter/FloatConverter/TextConverter/CharConverter) + NAMESPACE codecs called with . (HexCodec.toHex(bb)/Base64Codec./ByteOrderCodec./UTFCodec.). int/integer are aliases of int64; uint of uint64; float of float32. boolean holds TRUE/FALSE (never bool). Any conversion question — which operator, what's valid, what it returns, format auto-convert — see docs/CONVERSIONS.md (the full AS/INTO matrix + per-host detail).

Specification: I.O — The Standard Library Surface

Diagnostics that name it: E2087, E2088, E2089, E2105, W10026

IS

keyword

Specification: I.K — Abstractions

Diagnostics that name it: E1007, E1095, E1105, E2007, E2080, E4010, E6041, E6042 (+4 more)

LABEL

keyword

Specification: I.H — Control Flow

LAMBDA

keyword

LABEL <name> <loop-or-block> — name it, then BREAK <name> / CONTINUE <name> jumps multiple levels. Prefixes ANY loop form or a bare { } (the early-exit ladder). The jump is lexical — forward to just past the block, or back to the named loop's next iteration; it never enters a block, moves sideways, or leaves the method. Unwinds properly: destructors, every CLEANUP, and any FINALLY it leaves all run. Names are unique per CLASS (E4038) even across methods. Not allowed inside a FINALLY (E4037) or across PARALLEL/CONCURRENT/LAMBDA (E4036); CONTINUE needs a loop, not a block (E4035).

Specification: I.F — Expressions

Diagnostics that name it: E1023, E7022, E7023, W10023, W10045

LOAD

keyword

C-ABI boundary types (§I.D.x, shipped 2026-08-06): C.size_t · C.ssize_t · C.long · C.unsignedLong — four ATOMIC reserved words that contain a dot (C is not a namespace; CLASS C stays legal). They lower verbatim to the C spelling and are legal only inside a FOREIGN/FOREIGN BIND declaration (else E2143). No arithmetic, no ordering, not Numeric, no guaranteed width — that absence IS the contract. Use them whenever the C type is pointed to (LOAD C.size_t siglensize_t*): a fixed-width primitive cannot express it, because size_t is unsigned long while uint64_t is unsigned long long on Darwin — and they SWAP on Linux, so the wrong spelling compiles on one target and fails on the other (W2146 warns on a 64-bit fixed-width LOAD). By value the old spelling merely works by implicit conversion.

Specification: I.N — Modules and Linkage

Diagnostics that name it: E2100, E2101, E2102

LONG_LIVED

keyword

LOOP

keyword

LOOP x IN coll WITH INDEX i { } — the ONE LOOP form: element + its zero-based int32 position. Both clauses mandatory (E1151 without WITH INDEX; use FOR … IN if you don't need i). i is read-only (E4032) and advances on CONTINUE; BREAK leaves it at the element that triggered it. WITH INDEX on any other loop keyword is E4034; the comma-pair guess LOOP i, x IN coll is E4033.

Specification: I.H — Control Flow

Diagnostics that name it: E1112, E1113, E4011, E4024

LROTATE

keyword

Specification: I.F — Expressions

LSHIFT

keyword

char family: charchar32=code point (U+0000..10FFFF); char8=UTF-8 unit, char16=UTF-16 unit. Cross-width = explicit INTO/AS (via CharWidthConverter); an implicit cross-char-type conversion (e.g. char16 u = someChar8) warns (W10095) — every pair except char16→char32 (same scalar). (--no-clang-char-warnings silences clang's parallel warning, not Envzn's.) Never write bare char ambiguously; String ring is char32. binary = the raw octet (distinct from char, and — since byte was retired 2026-08-29 — the only octet type; a small number is uint8). Octet rules (I.D.i(c.i)): literals are hex or binary only (0xC3, 0b1100_0011 — never 195, W2136); operators are =, +/-, BAND/BOR/BXOR/BNOT/RSHIFT/LSHIFT, and the six comparisons — no * / % ^ (W2135), because +/- move within the octet space (c - 0x30 decodes an ASCII digit) while scaling assumes a magnitude. Shift count is uint8 (W2137); a literal count adopts it, and a shift ≥ 8 yields 0x00.

Specification: I.F — Expressions

MATCH

keyword

MATCH = exhaustive dispatch over a CLOSED SET, and every arm BINDS (§I.H.v(a)). Exactly three closed sets, because they are the only things the compiler can enumerate: a GROUP (types) WHEN Circle c: · a dev ENUM (cases) WHEN NORTH: · a STATUS (kinds) WHEN FAILURE(msg): — STATUS is not special, it is the built-in instance of the enum form. No fallthrough; statement, yields no value.

Specification: I.H — Control Flow

Diagnostics that name it: E1013, E1025, E2005, E4003, E4012, E4020, E6024, W10004 (+3 more)

METHOD

keyword

Specification: I.K — Abstractions

Diagnostics that name it: E1011, E1018, E2060, E2078, E2104, E6004, E6008, E6021 (+16 more)

MODIFY

keyword

=@ reference-kind: tightening OK, loosening is an error. A MUTABLE REFERENCE value may be assigned into a non-mutable REFERENCE handle (mutable → read-only); a REFERENCE may not be bound into a MUTABLE REFERENCE (E6067 — you can't widen a read-only borrow back to writable). A mirror accessor (a non-MODIFY method returning MUTABLE REFERENCE — e.g. Array subscript arr[i], Dictionary.lookupRef) propagates this automatically: reached through a const/REFERENCE receiver it returns a read-only REFERENCE, through a mutable receiver a MUTABLE REFERENCE. So REFERENCE T r =@ arr[i] always works; MUTABLE REFERENCE T r =@ arr[i] works only when arr is itself mutable. (§I.I.ix)

Specification: I.K — Abstractions

Diagnostics that name it: E1098, E1101, E1108, E2038, E2039, E2068, E6009, E6034 (+1 more)

MODULE

keyword

ALIAS — file-scoped un-qualification (§I.N.d.iv, #48). At the top of a file (after MODULE, before any CLASS/INTERFACE/NAMESPACE), bind a qualified name to its bare short name for that file only. Three forms by qualifier: ALIAS mda::TextColumn (::) → bare TextColumn is the dep type file-wide (decls/CREATE/MATCH/PANIC); ALIAS Math.cubeRoot (.) → bare cubeRoot(x) is Math.cubeRoot(x); ALIAS Math (bare namespace) → every Math function bare-callable. Pure rewrite to the FQN before file-merge — no new scope, no runtime, no visibility change. Guards: target must be real (E2107); short name may not collide with a local type/method or another alias, incl. a whole-namespace import that brings in a colliding name (E2108 — ALIAS never shadows).

Specification: I.N — Modules and Linkage

MOVE

keyword

Constructors take REFERENCE, never MOVE — handing an array to a constructor never takes it away from you. The ONE exception is String.INIT(MOVE char32[], int64), which exists only so the emitter can build a string literal in one allocation; the redundant second argument is what keeps it from being ambiguous with the REFERENCE form.

Specification: I.I — Memory and Ownership

Diagnostics that name it: E2102, E3010, E3024, E3025, E3026, E3038, E6040

MUTABLE

keyword

Specification: I.I — Memory and Ownership

Diagnostics that name it: E1024, E1111, E1115, E1122, E2117, E3032, E6038, E6039 (+5 more)

NAMESPACE

keyword

Primitives carry no methods, no wrapper classes (no Integer/Float64). Convert with the INTO/AS operators (the Convert singleton is deleted — 2026-06-07): x INTO T = lossless/widening, total (int32 INTO int64, num→String); x AS T = lossy/narrowing, fallible(T value | STATUS s) (int64 AS int32). Conversions live in CONVERSIONS hosts (PrimitiveConversions/NumberConverter/FloatConverter/TextConverter/CharConverter) + NAMESPACE codecs called with . (HexCodec.toHex(bb)/Base64Codec./ByteOrderCodec./UTFCodec.). int/integer are aliases of int64; uint of uint64; float of float32. boolean holds TRUE/FALSE (never bool). Any conversion question — which operator, what's valid, what it returns, format auto-convert — see docs/CONVERSIONS.md (the full AS/INTO matrix + per-host detail).

Specification: I.F — Expressions

Diagnostics that name it: E1106, E1107, E1108, E1109, W10026

NONE

keyword

Diagnostics that name it: E5006

NOT

keyword

Specification: I.H — Control Flow

Diagnostics that name it: W10018

NO_RETURN

keyword

OF

keyword

Specification: I.J — Aggregates and Iteration

OK

keyword

Specification: I.L — Concurrency

OPERATOR

keyword

Specification: I.D — The Type System

Diagnostics that name it: E2088, E2089, W10026

OR

keyword

Specification: I.F — Expressions

OVERRIDE

keyword

OVERRIDE required on concrete-parent reimpl, forbidden on abstract-impl. SUPER->m(). AUTO METHOD clone() (empty body, needs all fields Cloneable). DEPRECATED("…") advisory.

Specification: I.K — Abstractions

Diagnostics that name it: E6003, E6004, E6006, E6007, E6008, E6011, E6020, E6022 (+5 more)

PANIC

keyword

ALIAS — file-scoped un-qualification (§I.N.d.iv, #48). At the top of a file (after MODULE, before any CLASS/INTERFACE/NAMESPACE), bind a qualified name to its bare short name for that file only. Three forms by qualifier: ALIAS mda::TextColumn (::) → bare TextColumn is the dep type file-wide (decls/CREATE/MATCH/PANIC); ALIAS Math.cubeRoot (.) → bare cubeRoot(x) is Math.cubeRoot(x); ALIAS Math (bare namespace) → every Math function bare-callable. Pure rewrite to the FQN before file-merge — no new scope, no runtime, no visibility change. Guards: target must be real (E2107); short name may not collide with a local type/method or another alias, incl. a whole-namespace import that brings in a colliding name (E2108 — ALIAS never shadows).

Specification: I.M — Error Handling

PARALLEL

keyword

LABEL <name> <loop-or-block> — name it, then BREAK <name> / CONTINUE <name> jumps multiple levels. Prefixes ANY loop form or a bare { } (the early-exit ladder). The jump is lexical — forward to just past the block, or back to the named loop's next iteration; it never enters a block, moves sideways, or leaves the method. Unwinds properly: destructors, every CLEANUP, and any FINALLY it leaves all run. Names are unique per CLASS (E4038) even across methods. Not allowed inside a FINALLY (E4037) or across PARALLEL/CONCURRENT/LAMBDA (E4036); CONTINUE needs a loop, not a block (E4035).

Specification: I.L — Concurrency

Diagnostics that name it: E4105, E4109

PARTIAL

keyword

Specification: I.F — Expressions

PARTIAL_SUCCESS

keyword

Specification: I.M — Error Handling

Diagnostics that name it: E1007

POISON

keyword

PRIMITIVE

keyword

Specification: I.K — Abstractions

Diagnostics that name it: E2112

PRIVATE

keyword

Fields public + immutable by default (2026-08-14, gh #215 — visibility NARROWS, it never widens); modifiers PRIVATE/PROTECTED/INTERNAL, SHARED, CONSTANT. A field, CONSTANT, or method declaring none of PRIVATE/INTERNAL/PROTECTED is public — PUBLIC is a reserved word that parses NOWHERE (absent from the field-modifier set in parse/parser/decl_class.py and the method set in decl_method.py), so writing it is E1008, not a no-op. Immutability is the axis that carries the safety: every write path is a named MODIFY method. Field visibility is enforced by the ANALYZER, on reads AND writesPRIVATE by E6009, module-scoped INTERNAL by E6034 (2026-08-12; the write side was unreachable before then, which is how gh #205's a._length = 100000 reached clang). METHODS are NOT checked — E6009 is oop:private-field and never inspects a call, so a cross-class PRIVATE method call falls through to a raw clang reject (#213) and a kernel PRIVATE method is emitted public: in EV_*.hpp and is callable from any module with no error at all (#214) — don't read a green build as proof a method is properly encapsulated. In the emitted C++ a PRIVATE field lands in private: as defence in depth, but an INTERNAL one lands in public: on purpose and permanently — C++ has no way to say "same module", protected: means subclass, and a module-mate that isn't a subclass legitimately reads it. Don't "fix" that. A STRUCT field may carry no visibility modifier at all (E6030, at the declaration). Class-typed fields must be set on every INIT path (no silent EMPTY). REFERENCE = non-owning (use for back-pointers to avoid ownership cycles). VOLATILE is retired on class fields (V1, 2026-05-13) — reserved word only; route shared mutable state through MODIFY methods + Mutex[T]/AtomicX/SHARED CLASS (a STRUCT field may still be VOLATILE, I.J.iv).

Specification: I.E — Declarations and Bindings

Diagnostics that name it: E1024, E1080, E1117, E2064, E2116, E6009, E6030, E6039 (+1 more)

PROTECTED

keyword

Fields public + immutable by default (2026-08-14, gh #215 — visibility NARROWS, it never widens); modifiers PRIVATE/PROTECTED/INTERNAL, SHARED, CONSTANT. A field, CONSTANT, or method declaring none of PRIVATE/INTERNAL/PROTECTED is public — PUBLIC is a reserved word that parses NOWHERE (absent from the field-modifier set in parse/parser/decl_class.py and the method set in decl_method.py), so writing it is E1008, not a no-op. Immutability is the axis that carries the safety: every write path is a named MODIFY method. Field visibility is enforced by the ANALYZER, on reads AND writesPRIVATE by E6009, module-scoped INTERNAL by E6034 (2026-08-12; the write side was unreachable before then, which is how gh #205's a._length = 100000 reached clang). METHODS are NOT checked — E6009 is oop:private-field and never inspects a call, so a cross-class PRIVATE method call falls through to a raw clang reject (#213) and a kernel PRIVATE method is emitted public: in EV_*.hpp and is callable from any module with no error at all (#214) — don't read a green build as proof a method is properly encapsulated. In the emitted C++ a PRIVATE field lands in private: as defence in depth, but an INTERNAL one lands in public: on purpose and permanently — C++ has no way to say "same module", protected: means subclass, and a module-mate that isn't a subclass legitimately reads it. Don't "fix" that. A STRUCT field may carry no visibility modifier at all (E6030, at the declaration). Class-typed fields must be set on every INIT path (no silent EMPTY). REFERENCE = non-owning (use for back-pointers to avoid ownership cycles). VOLATILE is retired on class fields (V1, 2026-05-13) — reserved word only; route shared mutable state through MODIFY methods + Mutex[T]/AtomicX/SHARED CLASS (a STRUCT field may still be VOLATILE, I.J.iv).

Specification: I.E — Declarations and Bindings

Diagnostics that name it: E1024, E6030, E6039

PUBLIC

keyword

Fields public + immutable by default (2026-08-14, gh #215 — visibility NARROWS, it never widens); modifiers PRIVATE/PROTECTED/INTERNAL, SHARED, CONSTANT. A field, CONSTANT, or method declaring none of PRIVATE/INTERNAL/PROTECTED is public — PUBLIC is a reserved word that parses NOWHERE (absent from the field-modifier set in parse/parser/decl_class.py and the method set in decl_method.py), so writing it is E1008, not a no-op. Immutability is the axis that carries the safety: every write path is a named MODIFY method. Field visibility is enforced by the ANALYZER, on reads AND writesPRIVATE by E6009, module-scoped INTERNAL by E6034 (2026-08-12; the write side was unreachable before then, which is how gh #205's a._length = 100000 reached clang). METHODS are NOT checked — E6009 is oop:private-field and never inspects a call, so a cross-class PRIVATE method call falls through to a raw clang reject (#213) and a kernel PRIVATE method is emitted public: in EV_*.hpp and is callable from any module with no error at all (#214) — don't read a green build as proof a method is properly encapsulated. In the emitted C++ a PRIVATE field lands in private: as defence in depth, but an INTERNAL one lands in public: on purpose and permanently — C++ has no way to say "same module", protected: means subclass, and a module-mate that isn't a subclass legitimately reads it. Don't "fix" that. A STRUCT field may carry no visibility modifier at all (E6030, at the declaration). Class-typed fields must be set on every INIT path (no silent EMPTY). REFERENCE = non-owning (use for back-pointers to avoid ownership cycles). VOLATILE is retired on class fields (V1, 2026-05-13) — reserved word only; route shared mutable state through MODIFY methods + Mutex[T]/AtomicX/SHARED CLASS (a STRUCT field may still be VOLATILE, I.J.iv).

Specification: I.K — Abstractions

RECOVER

keyword

PANIC/RECOVER (handleable defects; renamed from THROW/CATCH 2026-06-26 — old keywords now error): subclass Error, SUPER(msg); PANIC FileNotFoundError(msg, path); TRY { … } RECOVER (FileNotFoundError e) { e.message e.filename } FINALLY { … } — parens required, no as; FINALLY clause optional; multiple RECOVER matched top→bottom (subclass before superclass); catching the abstract base — RECOVER (Error e) — is rejected (E4016, catch-too-broad): name concrete subclasses, there is no catch-all. Catch as close to the problem as possible. Compiler injects filename/line/thread. Unwind runs CLEANUP. (e.message is char32[] — read it via format/auto-convert, not String methods.)

Specification: I.M — Error Handling

REFERENCE

keyword

=@ | non-owning reference bind; requires REFERENCE/MUTABLE REFERENCE LHS + a place expression. |

Specification: I.I — Memory and Ownership

Diagnostics that name it: E1024, E1111, E1114, E1115, E1120, E1121, E1122, E2047 (+25 more)

REPEAT

keyword

Specification: I.H — Control Flow

Diagnostics that name it: E1030

RETURN

keyword

Specification: I.H — Control Flow

Diagnostics that name it: E1119, E2052, E2053, E3022, E3029, E3030, E3031, E4001 (+10 more)

RETURNS

keyword

Specification: I.M — Error Handling

Diagnostics that name it: E1015, E2082, E3029, E3030, E3031, E6050, E6051, E6052 (+8 more)

RROTATE

keyword

Specification: I.F — Expressions

RSHIFT

keyword

char family: charchar32=code point (U+0000..10FFFF); char8=UTF-8 unit, char16=UTF-16 unit. Cross-width = explicit INTO/AS (via CharWidthConverter); an implicit cross-char-type conversion (e.g. char16 u = someChar8) warns (W10095) — every pair except char16→char32 (same scalar). (--no-clang-char-warnings silences clang's parallel warning, not Envzn's.) Never write bare char ambiguously; String ring is char32. binary = the raw octet (distinct from char, and — since byte was retired 2026-08-29 — the only octet type; a small number is uint8). Octet rules (I.D.i(c.i)): literals are hex or binary only (0xC3, 0b1100_0011 — never 195, W2136); operators are =, +/-, BAND/BOR/BXOR/BNOT/RSHIFT/LSHIFT, and the six comparisons — no * / % ^ (W2135), because +/- move within the octet space (c - 0x30 decodes an ASCII digit) while scaling assumes a magnitude. Shift count is uint8 (W2137); a literal count adopts it, and a shift ≥ 8 yields 0x00.

Specification: I.F — Expressions

SECRET

keyword

Specification: I.I — Memory and Ownership

SELF

keyword

Pass minimal handles, not whole instances. An iterator takes the head node (CREATE LinkedListIterator[T](.head)), not the list — no SELF needed. (Same minimalism as bounded genericity.)

Specification: I.L — Concurrency

Diagnostics that name it: E1085, E2038, E2039, E2068, E2076, E3025, E3026, E3032 (+4 more)

SETS_ERRNO

keyword

Specification: I.N — Modules and Linkage

Diagnostics that name it: E2094

SHARED

keyword

Fields public + immutable by default (2026-08-14, gh #215 — visibility NARROWS, it never widens); modifiers PRIVATE/PROTECTED/INTERNAL, SHARED, CONSTANT. A field, CONSTANT, or method declaring none of PRIVATE/INTERNAL/PROTECTED is public — PUBLIC is a reserved word that parses NOWHERE (absent from the field-modifier set in parse/parser/decl_class.py and the method set in decl_method.py), so writing it is E1008, not a no-op. Immutability is the axis that carries the safety: every write path is a named MODIFY method. Field visibility is enforced by the ANALYZER, on reads AND writesPRIVATE by E6009, module-scoped INTERNAL by E6034 (2026-08-12; the write side was unreachable before then, which is how gh #205's a._length = 100000 reached clang). METHODS are NOT checked — E6009 is oop:private-field and never inspects a call, so a cross-class PRIVATE method call falls through to a raw clang reject (#213) and a kernel PRIVATE method is emitted public: in EV_*.hpp and is callable from any module with no error at all (#214) — don't read a green build as proof a method is properly encapsulated. In the emitted C++ a PRIVATE field lands in private: as defence in depth, but an INTERNAL one lands in public: on purpose and permanently — C++ has no way to say "same module", protected: means subclass, and a module-mate that isn't a subclass legitimately reads it. Don't "fix" that. A STRUCT field may carry no visibility modifier at all (E6030, at the declaration). Class-typed fields must be set on every INIT path (no silent EMPTY). REFERENCE = non-owning (use for back-pointers to avoid ownership cycles). VOLATILE is retired on class fields (V1, 2026-05-13) — reserved word only; route shared mutable state through MODIFY methods + Mutex[T]/AtomicX/SHARED CLASS (a STRUCT field may still be VOLATILE, I.J.iv).

Specification: I.E — Declarations and Bindings

Diagnostics that name it: E1024, E1080, E1115, E2115, E2116, E2117, E3032, E6010 (+2 more)

SINGLETON

keyword

VALUE CLASS (3rd type-kind, §I.J.vi) = a class with value identity + inline storage: methods + generics + IMPLEMENTS, but value-copied and stored inline (no _ev_unique handle). Fields read with ., methods called with -> (like number/complex). DynamicString/DynamicByteBuffer are NOT examples any more — they became ordinary heap classes on 2026-08-24, when the SBO removal left them with no inline storage. Still a class → bind with := (plain = is E3023), uniformly whether strict (all-value fields) or managed (owns heap → compiler synthesizes the deep-copy ctor). Inheritance leaf: IMPLEMENTS yes, EXTENDS/be-extended no (E1132); satisfies interfaces for generic constraints but can't be boxed behind an interface handle in V1 (E1133). VALUE can't combine with ABSTRACT/SINGLETON. (This bullet used to end by calling DynamicString/DynamicByteBuffer value classes, contradicting its own opening sentence four lines earlier — they stopped being value classes on 2026-08-24.)

Specification: I.B — Definitions and Notation

Diagnostics that name it: E1099, E1100, E1101, E1102, E1103

SNAPSHOT

keyword

STACKTRACE

keyword

STEP

keyword

⚠️ Withdrawn 2026-08-18: FOREACH (reserved, E1163 — use FOR … IN) · LOOP it = coll->iterator() {…} and LOOP $_ IN coll (both gone with the old LOOP surface; for cursor control hold a kernel iterator and consume next() in a WHILE). STEP is unaffected.

Specification: I.H — Control Flow

Diagnostics that name it: E4025

STRUCT

keyword

Fields public + immutable by default (2026-08-14, gh #215 — visibility NARROWS, it never widens); modifiers PRIVATE/PROTECTED/INTERNAL, SHARED, CONSTANT. A field, CONSTANT, or method declaring none of PRIVATE/INTERNAL/PROTECTED is public — PUBLIC is a reserved word that parses NOWHERE (absent from the field-modifier set in parse/parser/decl_class.py and the method set in decl_method.py), so writing it is E1008, not a no-op. Immutability is the axis that carries the safety: every write path is a named MODIFY method. Field visibility is enforced by the ANALYZER, on reads AND writesPRIVATE by E6009, module-scoped INTERNAL by E6034 (2026-08-12; the write side was unreachable before then, which is how gh #205's a._length = 100000 reached clang). METHODS are NOT checked — E6009 is oop:private-field and never inspects a call, so a cross-class PRIVATE method call falls through to a raw clang reject (#213) and a kernel PRIVATE method is emitted public: in EV_*.hpp and is callable from any module with no error at all (#214) — don't read a green build as proof a method is properly encapsulated. In the emitted C++ a PRIVATE field lands in private: as defence in depth, but an INTERNAL one lands in public: on purpose and permanently — C++ has no way to say "same module", protected: means subclass, and a module-mate that isn't a subclass legitimately reads it. Don't "fix" that. A STRUCT field may carry no visibility modifier at all (E6030, at the declaration). Class-typed fields must be set on every INIT path (no silent EMPTY). REFERENCE = non-owning (use for back-pointers to avoid ownership cycles). VOLATILE is retired on class fields (V1, 2026-05-13) — reserved word only; route shared mutable state through MODIFY methods + Mutex[T]/AtomicX/SHARED CLASS (a STRUCT field may still be VOLATILE, I.J.iv).

Specification: I.N — Modules and Linkage

Diagnostics that name it: E2096, E6003, E6004, E6005, E6016, E6030, E6031, E6039 (+6 more)

SUCCESS

keyword

STATUS (recoverable): SUCCESS / PARTIAL_SUCCESS(msg[,code]) / FAILURE(msg[,code]). Assign with =. Test in plain IF: IF s IS FAILURE (no ELSE — use MATCH to bind msg/code).

Specification: I.M — Error Handling

Diagnostics that name it: E1007

SUPER

keyword

Specification: I.K — Abstractions

Diagnostics that name it: E4026, E6011, E6012, E6033

SYNCHRONIZED

keyword

Specification: I.L — Concurrency

Diagnostics that name it: E4110

TEMPLATE

keyword

Specification: I.K — Abstractions

Diagnostics that name it: E2110

TEMPORARY

keyword

THEN

keyword

Specification: I.M — Error Handling

Diagnostics that name it: E1090

THROW

keyword

Specification: I.M — Error Handling

Diagnostics that name it: E4006, E4009, E4022, W10042

TO

keyword

Specification: I.H — Control Flow

TRUE

keyword

Primitives carry no methods, no wrapper classes (no Integer/Float64). Convert with the INTO/AS operators (the Convert singleton is deleted — 2026-06-07): x INTO T = lossless/widening, total (int32 INTO int64, num→String); x AS T = lossy/narrowing, fallible(T value | STATUS s) (int64 AS int32). Conversions live in CONVERSIONS hosts (PrimitiveConversions/NumberConverter/FloatConverter/TextConverter/CharConverter) + NAMESPACE codecs called with . (HexCodec.toHex(bb)/Base64Codec./ByteOrderCodec./UTFCodec.). int/integer are aliases of int64; uint of uint64; float of float32. boolean holds TRUE/FALSE (never bool). Any conversion question — which operator, what's valid, what it returns, format auto-convert — see docs/CONVERSIONS.md (the full AS/INTO matrix + per-host detail).

Specification: I.D — The Type System

TRY

keyword

FINALLY { } is the optional trailing clause of a TRY (§13) — not standalone; runs last on every exit path of its TRY (one per TRY, no RETURN/PANIC inside).

Specification: I.M — Error Handling

Diagnostics that name it: E4016, E4017, W10013, W10042

TYPE

keyword

Specification: I.K — Abstractions

TYPES

keyword

Specification: I.C — Lexical Forms

UNION

keyword

Specification: I.D — The Type System

Diagnostics that name it: E6004, E6016, E6062

UNREACHABLE

keyword

Specification: I.H — Control Flow

UNREACHABLE!

keyword

UNSAFE

keyword

Specification: I.I — Memory and Ownership

Diagnostics that name it: E3036, E3037

UNTIL

keyword

Specification: I.H — Control Flow

Diagnostics that name it: W10001, W10019

VALID

keyword

Specification: I.D — The Type System

Diagnostics that name it: E2080, E6041, E6042, E6043, E6044, E6045

VALUE

keyword

VALUE CLASS (3rd type-kind, §I.J.vi) = a class with value identity + inline storage: methods + generics + IMPLEMENTS, but value-copied and stored inline (no _ev_unique handle). Fields read with ., methods called with -> (like number/complex). DynamicString/DynamicByteBuffer are NOT examples any more — they became ordinary heap classes on 2026-08-24, when the SBO removal left them with no inline storage. Still a class → bind with := (plain = is E3023), uniformly whether strict (all-value fields) or managed (owns heap → compiler synthesizes the deep-copy ctor). Inheritance leaf: IMPLEMENTS yes, EXTENDS/be-extended no (E1132); satisfies interfaces for generic constraints but can't be boxed behind an interface handle in V1 (E1133). VALUE can't combine with ABSTRACT/SINGLETON. (This bullet used to end by calling DynamicString/DynamicByteBuffer value classes, contradicting its own opening sentence four lines earlier — they stopped being value classes on 2026-08-24.)

Specification: I.J — Aggregates and Iteration

Diagnostics that name it: E1132, E1133

VERSION

keyword

VOID

keyword

Specification: I.K — Abstractions

VOLATILE

keyword

Fields public + immutable by default (2026-08-14, gh #215 — visibility NARROWS, it never widens); modifiers PRIVATE/PROTECTED/INTERNAL, SHARED, CONSTANT. A field, CONSTANT, or method declaring none of PRIVATE/INTERNAL/PROTECTED is public — PUBLIC is a reserved word that parses NOWHERE (absent from the field-modifier set in parse/parser/decl_class.py and the method set in decl_method.py), so writing it is E1008, not a no-op. Immutability is the axis that carries the safety: every write path is a named MODIFY method. Field visibility is enforced by the ANALYZER, on reads AND writesPRIVATE by E6009, module-scoped INTERNAL by E6034 (2026-08-12; the write side was unreachable before then, which is how gh #205's a._length = 100000 reached clang). METHODS are NOT checked — E6009 is oop:private-field and never inspects a call, so a cross-class PRIVATE method call falls through to a raw clang reject (#213) and a kernel PRIVATE method is emitted public: in EV_*.hpp and is callable from any module with no error at all (#214) — don't read a green build as proof a method is properly encapsulated. In the emitted C++ a PRIVATE field lands in private: as defence in depth, but an INTERNAL one lands in public: on purpose and permanently — C++ has no way to say "same module", protected: means subclass, and a module-mate that isn't a subclass legitimately reads it. Don't "fix" that. A STRUCT field may carry no visibility modifier at all (E6030, at the declaration). Class-typed fields must be set on every INIT path (no silent EMPTY). REFERENCE = non-owning (use for back-pointers to avoid ownership cycles). VOLATILE is retired on class fields (V1, 2026-05-13) — reserved word only; route shared mutable state through MODIFY methods + Mutex[T]/AtomicX/SHARED CLASS (a STRUCT field may still be VOLATILE, I.J.iv).

Specification: I.E — Declarations and Bindings

Diagnostics that name it: E3008, E4102, E6032

WHEN

keyword

Specification: I.H — Control Flow

Diagnostics that name it: E1013, E1095, E1096, E1097, E1104, E1105, E2005, E4003 (+6 more)

WHILE

keyword

⚠️ Withdrawn 2026-08-18: FOREACH (reserved, E1163 — use FOR … IN) · LOOP it = coll->iterator() {…} and LOOP $_ IN coll (both gone with the old LOOP surface; for cursor control hold a kernel iterator and consume next() in a WHILE). STEP is unaffected.

Specification: I.H — Control Flow

Diagnostics that name it: E1030, W10001, W10019

WITH

keyword

Specification: I.H — Control Flow

XOR

keyword

Specification: I.B — Definitions and Notation

im

keyword

Specification: I.C — Lexical Forms


Primitive types (31)

C.long

primitive · c_abi

Specification: I.D — The Type System

C.size_t

primitive · c_abi

Specification: I.D — The Type System

C.ssize_t

primitive · c_abi

Specification: I.D — The Type System

C.unsignedLong

primitive · c_abi

Specification: I.D — The Type System

bigint

primitive · arbitrary_int · reserved

Specification: I.D — The Type System

binary

primitive · binary · 8-bit

Specification: I.D — The Type System

Conversions: 2e.i binary — the octet (added 2026-08-28; byte retired 2026-08-29); 3. Formatting (->format) and auto-conversion — what is handled, what is not; 5. Not AS/INTO — reach for these instead — see docs/CONVERSIONS.md.

bit

primitive · bit · 1-bit · reserved

Specification: I.D — The Type System

boolean

primitive · boolean

Specification: I.D — The Type System

Conversions: 2b. Value / char → String (rendering — always lossless + total); 2c. String → value (parse — lossless but can fail); 3. Formatting (->format) and auto-conversion — what is handled, what is not — see docs/CONVERSIONS.md.

char16

primitive · char · 16-bit

Specification: I.D — The Type System

Also written c16.

Conversions: 2b. Value / char → String (rendering — always lossless + total); 2e. char ↔ integer (bit-twins, widening, narrowing); 2e.i binary — the octet (added 2026-08-28; byte retired 2026-08-29) — see docs/CONVERSIONS.md.

char32

primitive · char · 32-bit

Specification: I.D — The Type System

Also written char, character, c32.

Conversions: 2b. Value / char → String (rendering — always lossless + total); 2e. char ↔ integer (bit-twins, widening, narrowing); 2e.i binary — the octet (added 2026-08-28; byte retired 2026-08-29) — see docs/CONVERSIONS.md.

char8

primitive · char · 8-bit

Specification: I.D — The Type System

Also written c8.

Conversions: 2b. Value / char → String (rendering — always lossless + total); 2e. char ↔ integer (bit-twins, widening, narrowing); 2e.i binary — the octet (added 2026-08-28; byte retired 2026-08-29) — see docs/CONVERSIONS.md.

complex

primitive · complex

Specification: I.D — The Type System

Conversions: 2g. number and complex (the value-class numeric primitives, §I.D.i(g)); 2h. decimal128 (the exact base-10 primitive, §I.D.i); 4. Per-host detail (where each operator lives + edge cases) — see docs/CONVERSIONS.md.

complex_float32

primitive · complex_float · 32-bit · reserved

Specification: I.D — The Type System

complex_float64

primitive · complex_float · 64-bit · reserved

Specification: I.D — The Type System

complex_int32

primitive · complex_int · 32-bit · reserved

Specification: I.D — The Type System

decimal128

primitive · decimal · 128-bit

Specification: I.D — The Type System

Also written decimal.

Conversions: 2h. decimal128 (the exact base-10 primitive, §I.D.i); 4. Per-host detail (where each operator lives + edge cases) — see docs/CONVERSIONS.md.

float32

primitive · float · 32-bit

Specification: I.D — The Type System

Also written float, f32.

Conversions: 2a. Numeric ↔ numeric; 2b. Value / char → String (rendering — always lossless + total); 2c. String → value (parse — lossless but can fail) — see docs/CONVERSIONS.md.

float64

primitive · float · 64-bit

Specification: I.D — The Type System

Also written f64.

Conversions: 2a. Numeric ↔ numeric; 2b. Value / char → String (rendering — always lossless + total); 2c. String → value (parse — lossless but can fail) — see docs/CONVERSIONS.md.

int128

primitive · signed_int · 128-bit

Specification: I.D — The Type System

Also written i128.

Conversions: 2a. Numeric ↔ numeric; 2b. Value / char → String (rendering — always lossless + total); 2c. String → value (parse — lossless but can fail) — see docs/CONVERSIONS.md.

int16

primitive · signed_int · 16-bit

Specification: I.D — The Type System

Also written i16.

Conversions: 2a. Numeric ↔ numeric; 2e. char ↔ integer (bit-twins, widening, narrowing); 2e.i binary — the octet (added 2026-08-28; byte retired 2026-08-29) — see docs/CONVERSIONS.md.

int32

primitive · signed_int · 32-bit

Specification: I.D — The Type System

Also written i32.

Conversions: 2a. Numeric ↔ numeric; 2b. Value / char → String (rendering — always lossless + total); 2c. String → value (parse — lossless but can fail) — see docs/CONVERSIONS.md.

int64

primitive · signed_int · 64-bit

Specification: I.D — The Type System

Also written integer, int, i64.

Conversions: 2a. Numeric ↔ numeric; 2b. Value / char → String (rendering — always lossless + total); 2c. String → value (parse — lossless but can fail) — see docs/CONVERSIONS.md.

int8

primitive · signed_int · 8-bit

Specification: I.D — The Type System

Also written i8.

Conversions: 2a. Numeric ↔ numeric; 2e. char ↔ integer (bit-twins, widening, narrowing); 2e.i binary — the octet (added 2026-08-28; byte retired 2026-08-29) — see docs/CONVERSIONS.md.

number

primitive · number

Specification: I.D — The Type System

Conversions: 2g. number and complex (the value-class numeric primitives, §I.D.i(g)); 2h. decimal128 (the exact base-10 primitive, §I.D.i); 4. Per-host detail (where each operator lives + edge cases) — see docs/CONVERSIONS.md.

opaque

primitive · opaque

Specification: I.D — The Type System

Conversions: 3. Formatting (->format) and auto-conversion — what is handled, what is not — see docs/CONVERSIONS.md.

rational

primitive · rational · reserved

Specification: I.D — The Type System

uint128

primitive · unsigned_int · 128-bit

Specification: I.D — The Type System

Also written u128.

Conversions: 2a. Numeric ↔ numeric; 2b. Value / char → String (rendering — always lossless + total); 2c. String → value (parse — lossless but can fail) — see docs/CONVERSIONS.md.

uint16

primitive · unsigned_int · 16-bit

Specification: I.D — The Type System

Also written u16.

Conversions: 2a. Numeric ↔ numeric; 2e. char ↔ integer (bit-twins, widening, narrowing); 2e.i binary — the octet (added 2026-08-28; byte retired 2026-08-29) — see docs/CONVERSIONS.md.

uint32

primitive · unsigned_int · 32-bit

Specification: I.D — The Type System

Also written u32.

Conversions: 2a. Numeric ↔ numeric; 2b. Value / char → String (rendering — always lossless + total); 2c. String → value (parse — lossless but can fail) — see docs/CONVERSIONS.md.

uint64

primitive · unsigned_int · 64-bit

Specification: I.D — The Type System

Also written uint, u64.

Conversions: 2a. Numeric ↔ numeric; 2b. Value / char → String (rendering — always lossless + total); 2c. String → value (parse — lossless but can fail) — see docs/CONVERSIONS.md.

uint8

primitive · unsigned_int · 8-bit

Specification: I.D — The Type System

Also written u8.

Conversions: 2a. Numeric ↔ numeric; 2e. char ↔ integer (bit-twins, widening, narrowing); 2e.i binary — the octet (added 2026-08-28; byte retired 2026-08-29) — see docs/CONVERSIONS.md.


Types (285)

Agg

enum · Data

API: DataAgg

AggSpec

struct · Data

API: DataAggSpec

Arithmetic

interface · kernel

Specification: I.K — Abstractions

API: kernelArithmetic

Array

class · kernel

Specification: I.J — Aggregates and Iteration

API: kernelArray

ArrayIterator

class · kernel

API: kernelArrayIterator

AtomicBinary

class · kernel

API: kernelAtomicBinary

AtomicBoolean

class · kernel

Specification: I.I — Memory and Ownership

API: kernelAtomicBoolean

AtomicChar16

class · kernel

API: kernelAtomicChar16

AtomicChar32

class · kernel

API: kernelAtomicChar32

AtomicChar8

class · kernel

API: kernelAtomicChar8

AtomicInt16

class · kernel

API: kernelAtomicInt16

AtomicInt32

class · kernel

Specification: I.I — Memory and Ownership

API: kernelAtomicInt32

AtomicInt64

class · kernel

Specification: I.L — Concurrency

API: kernelAtomicInt64

AtomicInt8

class · kernel

API: kernelAtomicInt8

AtomicUint16

class · kernel

API: kernelAtomicUint16

AtomicUint32

class · kernel

API: kernelAtomicUint32

AtomicUint64

class · kernel

API: kernelAtomicUint64

AtomicUint8

class · kernel

API: kernelAtomicUint8

BackpressurePolicy

enum · kernel

Specification: I.L — Concurrency

API: kernelBackpressurePolicy

Base64Codec

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelBase64Codec

BidirectionalIterator

interface · kernel

Specification: I.J — Aggregates and Iteration

API: kernelBidirectionalIterator

BinaryMode

enum · kernel

API: kernelBinaryMode

BinaryWord

class · kernel

API: kernelBinaryWord

BoolColumn

class · Data

API: DataBoolColumn

Box

class · kernel

Specification: I.J — Aggregates and Iteration

API: kernelBox

Broker

class · kernel

Specification: I.L — Concurrency

API: kernelBroker

Build

enum · kernel

Specification: I.H — Control Flow

API: kernelBuild

BuildInfo

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelBuildInfo

BuildLedger

class · epm

API: epmBuildLedger

BuildOutcome

class · epm

API: epmBuildOutcome

BuildPlan

class · epm

API: epmBuildPlan

BuildUnit

class · epm

API: epmBuildUnit

Builder

class · epm

API: epmBuilder

ByteBuffer

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelByteBuffer

ByteBufferIterator

class · kernel

API: kernelByteBufferIterator

ByteBufferView

class · kernel

Specification: I.D — The Type System

API: kernelByteBufferView

ByteOrderCodec

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelByteOrderCodec

CasualRandom

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelCasualRandom

ChainedHashDictionary

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelChainedHashDictionary

Channel

class · kernel

Specification: I.L — Concurrency

API: kernelChannel

ChannelWriterSink

class · Logger

API: LoggerChannelWriterSink

CharClassifier

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelCharClassifier

CharConverter

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelCharConverter

CharWidthConverter

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelCharWidthConverter

Cloneable

interface · kernel

Specification: I.K — Abstractions

API: kernelCloneable

Codec

class · Json

Specification: I.P — Serialization and Reconstruction

API: JsonCodec

Collectable

group · kernel

Specification: I.K — Abstractions

API: kernelCollectable

Collection

interface · kernel

Specification: I.J — Aggregates and Iteration

API: kernelCollection

Collectors

group · kernel

API: kernelCollectors

CollisionNode

class · kernel

API: kernelCollisionNode

Column

class · mda

Specification: I.J — Aggregates and Iteration

API: mdaColumn

ColumnBacking

enum · Data

API: DataColumnBacking

ColumnExpr

class · Data

API: DataColumnExpr

ColumnSpec

struct · Data

API: DataColumnSpec

ColumnType

enum · Data

API: DataColumnType

Comparable

interface · kernel

Specification: I.K — Abstractions

API: kernelComparable

Compare

enum · Data

API: DataCompare

CompileError

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelCompileError

Complex

class · kernel

Specification: I.D — The Type System

API: kernelComplex

ComplexConversions

class · kernel

API: kernelComplexConversions

Concurrency

group · kernel

API: kernelConcurrency

Config

class · epm

API: epmConfig

ConsoleSink

class · Logger

API: LoggerConsoleSink

Countable

interface · kernel

Specification: I.J — Aggregates and Iteration

API: kernelCountable

CsvOptions

struct · Data

API: DataCsvOptions

CsvSink

class · Data

API: DataCsvSink

CsvSource

class · Data

API: DataCsvSource

DataError

class · Data

API: DataDataError

DataFrame

class · Data

API: DataDataFrame

DataKind

enum · kernel

API: kernelDataKind

DataSink

interface · Data

API: DataDataSink

DataSource

interface · Data

API: DataDataSource

DataValue

class · kernel

Specification: I.P — Serialization and Reconstruction

API: kernelDataValue

DataValueBuilder

class · kernel

API: kernelDataValueBuilder

DataValueFrame

class · kernel

API: kernelDataValueFrame

DataValueReader

class · kernel

API: kernelDataValueReader

DateTime

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelDateTime

DateTimeFactory

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelDateTimeFactory

DateTimeFields

struct · kernel

API: kernelDateTimeFields

Decimal128

class · kernel

API: kernelDecimal128

DecimalCodec

class · kernel

API: kernelDecimalCodec

DecimalColumn

class · Data

API: DataDecimalColumn

DecimalConversions

class · kernel

API: kernelDecimalConversions

DecimalParts

struct · kernel

API: kernelDecimalParts

DecimalText

class · kernel

API: kernelDecimalText

DefaultHasher

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelDefaultHasher

Deque

class · kernel

Specification: I.P — Serialization and Reconstruction

API: kernelDeque

Deserializer

interface · kernel

Specification: I.P — Serialization and Reconstruction

API: kernelDeserializer

Dictionary

interface · kernel

Specification: I.P — Serialization and Reconstruction

API: kernelDictionary

DurationText

class · kernel

API: kernelDurationText

DynamicByteBuffer

class · kernel

Specification: I.F — Expressions

API: kernelDynamicByteBuffer

DynamicString

class · kernel

Specification: I.D — The Type System

API: kernelDynamicString

Encoding

enum · kernel

Specification: I.O — The Standard Library Surface

API: kernelEncoding

Endianness

enum · kernel

Specification: I.O — The Standard Library Surface

API: kernelEndianness

EnumKind

struct · kernel

Specification: I.K — Abstractions

API: kernelEnumKind

EnumReflection

class · kernel

Specification: I.P — Serialization and Reconstruction

API: kernelEnumReflection

Equatable

interface · kernel

Specification: I.J — Aggregates and Iteration

API: kernelEquatable

Error

class · kernel

Specification: I.M — Error Handling

API: kernelError

ExternalDep

struct · epm

API: epmExternalDep

Externals

class · epm

API: epmExternals

FastIntHasher

class · kernel

API: kernelFastIntHasher

Fetcher

class · epm

API: epmFetcher

Field

class · Logger

Specification: I.N — Modules and Linkage

API: LoggerField

File

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelFile

FileError

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelFileError

FileSink

class · Logger

API: LoggerFileSink

FloatBigInt

class · kernel

API: kernelFloatBigInt

FloatConverter

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelFloatConverter

FloatFormat

class · kernel

Specification: I.K — Abstractions

API: kernelFloatFormat

FloatParse

class · kernel

API: kernelFloatParse

FloatParseConverter

class · kernel

API: kernelFloatParseConverter

FloatParseResult

class · kernel

API: kernelFloatParseResult

FloatToDecimal

class · kernel

API: kernelFloatToDecimal

Floating

group · kernel

Specification: I.F — Expressions

API: kernelFloating

FloatingDecimal32

struct · kernel

API: kernelFloatingDecimal32

FloatingDecimal64

struct · kernel

API: kernelFloatingDecimal64

FormatSpec

struct · kernel

API: kernelFormatSpec

Formatter

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelFormatter

FrameBuilder

class · Data

API: DataFrameBuilder

Future

class · kernel

Specification: I.L — Concurrency

API: kernelFuture

GitHubRepo

struct · epm

API: epmGitHubRepo

GroupBy

class · Data

API: DataGroupBy

GrowthHint

enum · kernel

API: kernelGrowthHint

HashBucket

class · kernel

API: kernelHashBucket

HashBucketIterator

class · kernel

API: kernelHashBucketIterator

HashConstants

class · kernel

API: kernelHashConstants

HashKey

group · kernel

Specification: I.K — Abstractions

API: kernelHashKey

Hashable

interface · kernel

Specification: I.O — The Standard Library Surface

API: kernelHashable

Hasher

interface · kernel

Specification: I.O — The Standard Library Surface

API: kernelHasher

HexCodec

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelHexCodec

HttpClient

class · Networking

API: NetworkingHttpClient

HttpHeader

class · Networking

API: NetworkingHttpHeader

HttpMethod

enum · Networking

API: NetworkingHttpMethod

HttpResponse

class · Networking

Specification: I.N — Modules and Linkage

API: NetworkingHttpResponse

IColumn

interface · Data

API: DataIColumn

ICommand

interface · epm

API: epmICommand

Identity

struct · kernel

Specification: I.K — Abstractions

API: kernelIdentity

IndexOutOfBoundsError

class · kernel

Specification: I.J — Aggregates and Iteration

API: kernelIndexOutOfBoundsError

InlineIntHasher

class · kernel

API: kernelInlineIntHasher

Inoperative

interface · kernel

API: kernelInoperative

IntKeyedDictionary

class · kernel

API: kernelIntKeyedDictionary

IntKeyedDictionaryIterator

class · kernel

API: kernelIntKeyedDictionaryIterator

Iso8601

class · Data

API: DataIso8601

Iterator

interface · kernel

Specification: I.J — Aggregates and Iteration

API: kernelIterator

JoinKind

enum · Data

API: DataJoinKind

JsonEncoder

class · Logger

API: LoggerJsonEncoder

JsonFrame

class · Json

Specification: I.N — Modules and Linkage

API: JsonJsonFrame

JsonParser

class · epm

API: epmJsonParser

JsonReader

class · Json

API: JsonJsonReader

JsonValue

class · epm

API: epmJsonValue

JsonWriter

class · Json

API: JsonJsonWriter

LinkedList

class · kernel

Specification: I.P — Serialization and Reconstruction

API: kernelLinkedList

LinkedListIterator

class · kernel

API: kernelLinkedListIterator

LinkedListNode

class · kernel

API: kernelLinkedListNode

Lock

class · kernel

Specification: I.K — Abstractions

API: kernelLock

LockEntry

struct · epm

API: epmLockEntry

LockFile

class · epm

API: epmLockFile

LogEncoder

interface · Logger

API: LoggerLogEncoder

LogLevel

enum · Logger

API: LoggerLogLevel

LogRecord

class · Logger

API: LoggerLogRecord

LogSink

interface · Logger

API: LoggerLogSink

LogValue

class · Logger

API: LoggerLogValue

LogValueKind

enum · Logger

API: LoggerLogValueKind

Logger

class · Logger

Specification: I.O — The Standard Library Surface

API: LoggerLogger

Main

class · epm

Specification: I.N — Modules and Linkage

API: epmMain

Manifest

class · epm

API: epmManifest

Math

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelMath

MathError

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelMathError

Mda

class · mda

API: mdaMda

MdaError

class · mda

API: mdaMdaError

MeasuringTimer

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelMeasuringTimer

ModuleWorker

class · epm

API: epmModuleWorker

MultiplexSink

class · Logger

API: LoggerMultiplexSink

Multiplier

interface · kernel

Specification: I.F — Expressions

API: kernelMultiplier

Mutex

class · kernel

Specification: I.L — Concurrency

API: kernelMutex

NativeDep

struct · epm

API: epmNativeDep

NetworkError

class · Networking

Specification: I.O — The Standard Library Surface

API: NetworkingNetworkError

NullPointerException

class · kernel

Specification: I.I — Memory and Ownership

API: kernelNullPointerException

NullSink

class · Logger

API: LoggerNullSink

NumStore

union · kernel

Specification: I.D — The Type System

API: kernelNumStore

Number

class · kernel

Specification: I.D — The Type System

API: kernelNumber

NumberColumn

class · Data

API: DataNumberColumn

NumberConversions

class · kernel

API: kernelNumberConversions

NumberConverter

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelNumberConverter

NumberKind

enum · kernel

Specification: I.D — The Type System

API: kernelNumberKind

NumberToDecimal

class · kernel

API: kernelNumberToDecimal

Numeric

group · kernel

Specification: I.K — Abstractions

API: kernelNumeric

NumericLimits

class · kernel

Specification: I.K — Abstractions

API: kernelNumericLimits

NumericUtilities

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelNumericUtilities

ObjectIterator

interface · kernel

API: kernelObjectIterator

OrderedArray

class · kernel

API: kernelOrderedArray

OwnedList

class · kernel

Specification: I.K — Abstractions

API: kernelOwnedList

OwnedListIterator

class · kernel

API: kernelOwnedListIterator

OwnedListNode

class · kernel

API: kernelOwnedListNode

PackageRef

struct · epm

API: epmPackageRef

PartialSpec

struct · epm

API: epmPartialSpec

Path

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelPath

PoolSlot

class · Networking

API: NetworkingPoolSlot

Pow5Entry

struct · kernel

API: kernelPow5Entry

PrimitiveConversions

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelPrimitiveConversions

Printable

interface · kernel

Specification: I.O — The Standard Library Surface

API: kernelPrintable

ProHashDictionary

class · kernel

Specification: I.J — Aggregates and Iteration

API: kernelProHashDictionary

ProHashDictionaryIterator

class · kernel

API: kernelProHashDictionaryIterator

Process

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelProcess

ProcessResult

struct · kernel

Specification: I.O — The Standard Library Surface

API: kernelProcessResult

Queue

class · kernel

Specification: I.J — Aggregates and Iteration

API: kernelQueue

RBNode

class · kernel

API: kernelRBNode

Random

interface · kernel

Specification: I.O — The Standard Library Surface

API: kernelRandom

RandomError

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelRandomError

RawThread

class · kernel

API: kernelRawThread

Readable

interface · kernel

Specification: I.O — The Standard Library Surface

API: kernelReadable

RedBlackTreeDictionary

class · kernel

Specification: I.J — Aggregates and Iteration

API: kernelRedBlackTreeDictionary

RedBlackTreeDictionaryIterator

class · kernel

API: kernelRedBlackTreeDictionaryIterator

ReferenceIterator

interface · kernel

Specification: I.J — Aggregates and Iteration

API: kernelReferenceIterator

Regex

class · Regex

Specification: I.D — The Type System

API: RegexRegex

Resolution

struct · epm

Specification: I.N — Modules and Linkage

API: epmResolution

ResolvedDep

struct · epm

API: epmResolvedDep

Resolver

class · epm

API: epmResolver

ResponseReader

class · Networking

API: NetworkingResponseReader

RetryPolicy

class · Networking

API: NetworkingRetryPolicy

RoundingMode

enum · kernel

API: kernelRoundingMode

Row

class · Data

Specification: I.N — Modules and Linkage

API: DataRow

RowIterator

class · Data

API: DataRowIterator

Searchable

interface · kernel

Specification: I.J — Aggregates and Iteration

API: kernelSearchable

SecureRandom

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelSecureRandom

SeededRandom

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelSeededRandom

SemVersion

struct · epm

API: epmSemVersion

Semver

class · epm

API: epmSemver

Serializable

interface · kernel

Specification: I.P — Serialization and Reconstruction

API: kernelSerializable

Serializer

interface · kernel

Specification: I.P — Serialization and Reconstruction

API: kernelSerializer

Set

class · kernel

Specification: I.N — Modules and Linkage

API: kernelSet

Severity

enum · kernel

Specification: I.O — The Standard Library Surface

API: kernelSeverity

ShallowDictionary

class · kernel

API: kernelShallowDictionary

ShallowDictionaryIterator

class · kernel

API: kernelShallowDictionaryIterator

Shareable

interface · kernel

Specification: I.K — Abstractions

API: kernelShareable

Shuffleable

interface · kernel

Specification: I.O — The Standard Library Surface

API: kernelShuffleable

Shuffler

interface · kernel

Specification: I.O — The Standard Library Surface

API: kernelShuffler

SipHasher

class · kernel

Specification: I.J — Aggregates and Iteration

API: kernelSipHasher

SipState

class · kernel

API: kernelSipState

SipVariant

enum · kernel

API: kernelSipVariant

Socket

class · Networking

Specification: I.N — Modules and Linkage

API: NetworkingSocket

SortedList

class · kernel

Specification: I.P — Serialization and Reconstruction

API: kernelSortedList

Stack

class · kernel

Specification: I.M — Error Handling

API: kernelStack

Stdio

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelStdio

String

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelString

StringHasher

class · kernel

Specification: I.J — Aggregates and Iteration

API: kernelStringHasher

StringIterator

class · kernel

API: kernelStringIterator

StringKeyedDictionary

class · kernel

API: kernelStringKeyedDictionary

StringKeyedDictionaryIterator

class · kernel

API: kernelStringKeyedDictionaryIterator

StringView

class · kernel

Specification: I.D — The Type System

API: kernelStringView

Subscription

class · kernel

Specification: I.I — Memory and Ownership

API: kernelSubscription

System

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelSystem

TLSSocket

class · Networking

API: NetworkingTLSSocket

Tag

struct · epm

Specification: I.D — The Type System

API: epmTag

Task

class · kernel

Specification: I.L — Concurrency

API: kernelTask

TaskStarter

interface · kernel

Specification: I.N — Modules and Linkage

API: kernelTaskStarter

TemporalColumn

class · Data

API: DataTemporalColumn

TemporalKind

enum · Data

API: DataTemporalKind

TestRunner

class · evTest

API: evTestTestRunner

Text

group · kernel

Specification: I.D — The Type System

API: kernelText

TextColumn

class · Data

Specification: I.N — Modules and Linkage

API: DataTextColumn

TextConverter

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelTextConverter

TextEncoder

class · Logger

API: LoggerTextEncoder

ThreadCondition

class · kernel

Specification: I.I — Memory and Ownership

API: kernelThreadCondition

TimeComparison

enum · kernel

Specification: I.O — The Standard Library Surface

API: kernelTimeComparison

TimeConstants

class · kernel

API: kernelTimeConstants

TimeDuration

class · kernel

Specification: I.P — Serialization and Reconstruction

API: kernelTimeDuration

TlsError

class · Networking

API: NetworkingTlsError

Toolchain

class · epm

API: epmToolchain

UTFCodec

class · kernel

Specification: I.D — The Type System

API: kernelUTFCodec

UrlCodec

class · Networking

API: NetworkingUrlCodec

ValueIterator

interface · kernel

Specification: I.J — Aggregates and Iteration

API: kernelValueIterator

ValuePrimitive

group · kernel

API: kernelValuePrimitive

VersionRange

struct · epm

API: epmVersionRange

View

interface · kernel

Specification: I.K — Abstractions

API: kernelView

Viewable

interface · kernel

API: kernelViewable

WordKey

group · kernel

Specification: I.K — Abstractions

API: kernelWordKey

WorkerBody

class · kernel

API: kernelWorkerBody

WorkerJobNode

class · kernel

API: kernelWorkerJobNode

WorkerPool

class · kernel

Specification: I.L — Concurrency

API: kernelWorkerPool

WorkerPoolCore

class · kernel

API: kernelWorkerPoolCore

Workspace

class · epm

API: epmWorkspace

Writable

interface · kernel

Specification: I.O — The Standard Library Surface

API: kernelWritable

Xoshiro256

class · kernel

Specification: I.O — The Standard Library Surface

API: kernelXoshiro256

opaque

primitive · kernel

Specification: I.I — Memory and Ownership

API: kernelopaque