Files
BFM-decomp/tools/dedup_propagate.py
T
Drew T b497ee1649 feat(phase-30 S33c): PROPAGATE head COMPLETE — func_801466F0 x137 took three fixes + a type-lift
Fleet 96.17 -> 96.21% fn-count / 93.8% instr / 88.0% distinct; dedup 1909 -> 1910
groups, 0 failed, C1 241216/241216. R22 clean-fleet: 140 passed, 0 failed of 140.

The head is now 5/5 classes, 18,545 templatable ins, all banked this session from
a standing start of 0.

func_801466F0 had sat since S6b behind THREE separate blockers, each of which
looked sufficient on its own to explain the failure:
 1. Its definition is under a §37/§73 ASM-LABEL ALIAS (`aF801466F0` in C, bound to
    the real symbol by `__asm__`), and dedup_propagate.find_site anchored its head
    regex on the literal `func_<ADDR>` — structurally blind to the form, returning
    None, which every caller reads as "not matched". Now reuses
    family_remap._alias_decl_for rather than growing a second matcher (R33).
 2. That matcher was itself blind to the WRAPPED (multi-line) declaration — the
    §134 shape, third tool. Fixed by matching over the joined text and mapping the
    offset back to the decl's FIRST line (extract_unit carries from there).
    Regression control: the single-line form still resolves. Fleet census after:
    2,768 of 2,768 alias sites resolve, 0 missed.
 3. Its record type was a draft-local typedef, so the body failed
    compiles_standalone. Lifted Rec801466F0 to src/shared/engine_types.h INSIDE
    the include guard (the SESSION-19 double-include note) and switched both the
    macro and the exemplar to it — byte-neutral, gate-proven.

Probed on ONE member before the fleet run: byte-identical 9052dc0e first try.

MEASURED, NOT INHERITED (R37): the S6b note frames the alias-regex gap as a CLASS
of missed work. It is ONE function — 91 distinct alias decls fleet-wide, the
per-line matcher resolved 90. Recording it so a future session does not scope a
phase against a class that does not exist.

cookbook §138 extended with the alias-form tool boundary and the three-blocker
story; index regenerated.
2026-08-04 00:44:33 -06:00

700 lines
38 KiB
Python
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
#!/usr/bin/env python3
"""dedup_propagate.py — match once, share many across the overlay fleet (Phase 15, cookbook §14).
The overlay fleet is position-locked at vram 0x80128158, so a shared engine function has the
SAME vaddr (hence the same `func_<ADDR>` symbol) and BYTE-IDENTICAL body in every overlay that
contains it. This tool takes a function already matched in ONE overlay and propagates that single
matched C body to every onboarded overlay whose signature shows the same `h_exact` at that addr:
1. extract the matched body from the source overlay's .c (externs + the function def)
2. author it ONCE as a `DEFINE_func_<ADDR>()` macro in src/shared/<header>.h (idempotent)
3. at each member overlay, replace that function's INCLUDE_ASM stub (or, in the source overlay,
its inline def) in place with `DEFINE_func_<ADDR>()` — address order preserved
4. BYTE-GATE every touched overlay (`make build BINARY=<ov>` == its check.sha); on ANY miss,
restore every file from an in-memory snapshot and abort (fail-closed; nothing wrong can land)
5. register the group in config/dedup.us.yaml (the byte-honesty registry, validated by
tools/dedup_integrate.py --check)
Everything is keyed by the integer address: the sig uses lowercase hex ("0x80144b9c"), splat emits
the uppercase symbol ("func_80144B9C") — never compare the strings, always the int.
Lead with h_exact (guaranteed byte-identity). The per-overlay `make check` is the sole arbiter
(G3/P9): a wrong propagation cannot pass it.
Usage:
tools/dedup_propagate.py --addr 0x8013xxxx[,0x...] [--source-overlay ov_SC01_077]
tools/dedup_propagate.py --auto-from ov_SC01_077 [--min-reach 2] [--limit N]
tools/dedup_propagate.py ... --check-only # dry run: print the plan, touch nothing
Options:
--header src/shared/engine_core.h target cluster header (created/appended)
--tier h_exact|h_norm default h_exact (h_norm requires the byte-gate to pass on ALL)
--binaries a,b,c restrict members to these onboarded overlays (default: all that share)
--no-gate skip the per-overlay build gate (CI / batch re-gate later)
"""
import argparse, collections, json, pathlib, re, subprocess, sys
import os as _os
sys.path.insert(0, _os.path.dirname(_os.path.abspath(__file__)))
import cdecl # the comment/string masking oracle (Phase 26-A) — see _skippable below
ROOT = pathlib.Path(__file__).resolve().parent.parent
# ---------------------------------------------------------------- fleet / sig helpers
def onboarded_overlays():
mk = (ROOT / "config/overlays.mk").read_text()
m = re.search(r"^OVERLAY_BINARIES\s*:=\s*(.*)$", mk, re.M)
return m.group(1).split() if m else []
def sig_path(ov):
return ROOT / f".run/sig.{ov}.jsonl"
def load_sig(ov):
"""addr(int) -> {h_exact, h_norm, nins, ...}; {} if absent."""
p = sig_path(ov)
if not p.exists():
return {}
out = {}
for ln in p.read_text().splitlines():
ln = ln.strip()
if ln:
r = json.loads(ln)
out[int(r["addr"], 16)] = r
return out
def registered_addrs():
"""Vaddrs already in config/dedup.us.yaml (shared via ANY mechanism — engine_core, ov_setters,
clearTbl40). --auto-from skips these so the bulk is purely additive and never collides with an
existing share (e.g. a SETTER-matched function) — which would trip the structural check."""
p = ROOT / "config/dedup.us.yaml"
if not p.exists():
return set()
try:
import yaml
sys.path.insert(0, str(ROOT / "tools"))
from dedup_integrate import group_members
data = yaml.safe_load(p.read_text()) or {}
return {v for g in (data.get("groups") or []) for (_b, v, _n) in group_members(g)}
except Exception:
return set()
def sym(addr):
return f"func_{addr:08X}" # splat convention: uppercase 8-hex
def c_path(ov):
return ROOT / f"src/{ov}/{ov}.c"
def overlay_files(ov):
"""[(path, asm_subdir)] for ov's source file(s): the main .c plus any Phase-19 split files
(ov_SC01_077_a.c / _o0.c). Single-file overlays return just the main .c — default behaviour
preserved. Lets a fn matched in a split file propagate ×reach (its stub/def lives in _a/_o0)."""
# DERIVED from the tree — a GLOB, never an allowlist (Phase 26-A audit, HIGH).
#
# This was a hardcoded suffix list ("_a","_o0","_o0b","_after") that predated the Phase-26 jr
# carves, so it returned 404 of the fleet's 811 overlay .c. The 407-file gap held **36,135
# INCLUDE_ASM stubs and ~32,000 inline defs — half the corpus** — and overlay_files gates ALL of
# dedup_propagate (source_text / find_site / apply_plan / struct_check / reconcile_caller_extern).
# 435 of ov_SC01_077's 689 inline defs were invisible to --auto-from.
#
# It is also WHY the 4 functions in .run/audit/a1_harvest_fuel.json were never propagated: three
# of them are defined in ov_SC01_077_jr_8012ACE0.c, which this list could not see. The dedup group
# was registered anyway and dedup_integrate greenlit the lie (A1). Two silent-skip bugs compounding.
#
# Do NOT "fix" this by adding _jr_* to the tuple: the NEXT split family would re-open the hole.
# The asm_subdir is always the file stem — an invariant the four old entries already satisfied.
out = [(c_path(ov), ov)]
for p in sorted(ROOT.glob(f"src/{ov}/{ov}_*.c")):
out.append((p, p.stem))
return out
def source_text(ov):
"""Concatenation of all of ov's split files — for SOURCE-side def finding + body extraction
only (find_site uses the body lines, so cross-file concat is safe; never used to EDIT)."""
return "\n".join(p.read_text() for p, _ in overlay_files(ov))
def stub_line(ov, addr):
return f'INCLUDE_ASM("asm/{ov}/nonmatchings/{ov}", {sym(addr)});'
# ---------------------------------------------------------------- body extraction
def find_site(text, ov, addr):
"""Locate this function in ov's .c. Returns (kind, start, end, body_lines):
kind 'stub' -> the INCLUDE_ASM line (start==end, body_lines None)
kind 'def' -> an inline definition block (preceding contiguous externs .. closing brace)
kind 'macro' -> already a DEFINE_func_<ADDR>() instantiation (already propagated)
None -> not present / matched in some other form."""
lines = text.splitlines()
# Comments blanked ONCE by the project's single masking oracle (R33). Length-preserving, so
# index i into mlines is index i into lines. This is what makes _skippable MULTI-LINE aware.
mlines = cdecl._mask(text).splitlines()
if len(mlines) != len(lines): # R32: the invariant this rests on, asserted not assumed
mlines = lines
s = sym(addr)
stub = stub_line(ov, addr)
for i, l in enumerate(lines):
if l.strip() == stub:
return ("stub", i, i, None)
for i, l in enumerate(lines):
if l.strip() == f"DEFINE_{s}()" or l.strip().startswith(f"DEFINE_{s}()"):
return ("macro", i, i, None)
# inline definition: "<type> func_XXXX(...)" at column 0 OR indented (recover_integration/harvest
# write the def block indented -> a column-0-only match silently dropped every indented def from
# propagation, T6 blocker 1), brace on the SAME or the NEXT line (drafts vary the brace placement).
# SAFE against indented CALL-exprs: the pattern requires a TYPE prefix ([A-Za-z_][\w \*]*, which
# admits neither '(' nor '=') before the name AND the whole line to BE the signature (ends ')' or
# '){'), so `if (func_X(...)) {`, `x = func_X(...);`, and a bare `func_X(a);` call never match.
# The signature HEAD. Anchored on a type prefix ([A-Za-z_][\w \*]*, which admits neither '(' nor
# '=') followed by the name and an open paren — so `if (func_X(...))`, `x = func_X(...);` and a
# bare `func_X(a);` call can never match. Deliberately NOT anchored on the line ENDING in ')':
# that anchor silently dropped every MULTI-LINE signature (Phase 26-A audit).
# S33: a function defined under the §37/§73 ASM-LABEL ALIAS is named `aF<ADDR>` in C and only
# BINDS the real symbol via `__asm__("func_<ADDR>")`. A head regex anchored on the literal
# `func_<ADDR>` is structurally blind to it, so find_site returned None and every caller read
# "not matched" — func_801466F0 (137 members / 3,288 ins) sat unreachable behind exactly this.
# family_remap._alias_decl_for already resolves the form (and, since S33, its WRAPPED variant);
# reuse it rather than write a second matcher (R33 — one oracle).
names = [s]
try:
import family_remap as _FR
_alias, _ = _FR._alias_decl_for(lines, addr)
if _alias and _alias.lower() != s.lower():
names.append(_alias)
except Exception:
pass
defhead = re.compile(r"^\s*[A-Za-z_][\w \*]*\b(?:" + "|".join(re.escape(n) for n in names) + r")\s*\(")
# A K&R parameter declaration, e.g. `s32 arg0;` / `struct S *p[4];`
kr_param = re.compile(r"^\s*[A-Za-z_][\w \t\*]*\b\w+\s*(\[[^\]]*\])?\s*;\s*$")
for i, l in enumerate(lines):
m = defhead.match(l)
if not m:
continue
# Walk from the '(' that opens the parameter list to ITS matching ')', character by character
# and across lines. Do NOT use line.count('(')-count(')') or split(')')[-1]: a single-line body
# containing a call (`void f(int a) { g(a); }`) has balanced parens of its own, so both
# shortcuts land on the WRONG paren and then misread the body's `;` as a prototype terminator.
depth, li, ci = 0, i, m.end() - 1
while li < len(lines):
line = lines[li]
while ci < len(line):
if line[ci] == "(":
depth += 1
elif line[ci] == ")":
depth -= 1
if depth == 0:
break
ci += 1
if depth == 0 and ci < len(lines[li]):
break
li += 1
ci = 0
if li >= len(lines):
continue
close = li # the line on which the parameter list closes
rest = lines[close][ci + 1:] # everything AFTER the signature's own ')'
if rest.lstrip().startswith(";"):
continue # `... );` -> a PROTOTYPE, not a definition
tail = rest
# locate the body's opening brace. It is on the closing line, OR on a following line — and in
# a K&R definition the PARAMETER DECLARATIONS sit between ')' and '{'. The old code demanded
# the next non-blank line start with '{', so it silently dropped EVERY K&R definition — which
# is the project's house style for exactly the biggest, highest-reach functions (func_8015AE2C
# 562 ins, func_80166994, func_80133CD4, func_8015A3C8). Those live in the _jr_* files this
# function could not even open until the overlay_files glob above; fixing one without the other
# would have exposed the files and still dropped their biggest prizes.
if "{" in tail:
bstart = close # single-line body / brace on the signature line
else:
k = close + 1
while k < len(lines) and (lines[k].strip() == "" or kr_param.match(lines[k])):
k += 1 # skip blanks AND K&R parameter declarations
if k >= len(lines) or "{" not in lines[k]:
continue # no body -> a prototype
bstart = k
if True:
# brace-match forward to the closing '}'
depth = 0
end = None
for j in range(bstart, len(lines)):
depth += lines[j].count("{") - lines[j].count("}")
if depth <= 0:
end = j
break
if end is None:
return None
# collect contiguous preceding extern declarations (skip blank lines). A trailing
# `/* comment */` after the ; is allowed (a banked extern block often annotates a decl,
# e.g. `extern u8 D_x[]; /* canonical TU type */` — a comment-blind `;\s*$` stopped the
# scan there and dropped every EARLIER extern, failing compiles_standalone on the now-
# undeclared callees/data; T6.4 fix for func_8014E048's pin/asm body).
# SESSION-18: the walk skipped BLANK lines but not STANDALONE COMMENT lines, so a
# full-line `/* ---- */` between two extern groups halted it and silently dropped every
# extern ABOVE the comment. That is the whole "CARRY-FIXABLE" class: the body then fails
# compiles_standalone on now-undeclared data/callees, and the caller filed it under
# "overlay-local TYPE (the real cap)" — a mislabel that wrote the class off for ~4 phases.
# (T6.4 had already fixed the TRAILING-comment case, `extern u8 D_x[]; /* note */`; this
# is the standalone-LINE case it did not reach.) Skip comment-only lines exactly like
# blanks, and drop them from the emitted body so make_macro never sees a `//`.
# S11: the SESSION-18 fix handled BLANK, `//`, and SINGLE-LINE `/* … */` lines, but a
# MULTI-LINE block comment still halted the walk — its middle lines start with `*` and
# its last line ends `*/` without starting `/*`. That is the §134 multi-line-blindness
# class (S6b fixed the same shape three times in family_remap). Deciding on the MASK
# instead of on line syntax subsumes every comment form in one oracle and cannot be
# fooled by a `/*` inside a string. Byte-measured: this is the whole CARRY-FIXABLE
# bucket for func_8012A598 (3,288 templatable ins that were being written off).
def _skippable(idx):
return mlines[idx].strip() == ""
start = i
k = i - 1
while k >= 0 and _skippable(k):
k -= 1
while k >= 0 and re.match(r"^\s*extern\b.*;\s*(/\*.*\*/\s*)?$", lines[k]):
start = k
k -= 1
while k >= 0 and _skippable(k):
k -= 1
body = [lines[j] for j in range(start, end + 1) if not _skippable(j)]
return ("def", start, end, body)
return None
def make_macro(addr, body_lines):
"""Turn an extracted body (externs + def) into a `#define DEFINE_func_<ADDR>() \\`-continued macro.
Fails loud on constructs that don't survive line-continuation (// comments, trailing backslash)."""
s = sym(addr)
for ln in body_lines:
if "//" in ln:
raise SystemExit(f"[refuse] {s}: body has a // comment — not macro-safe (handle manually)")
if ln.rstrip().endswith("\\"):
raise SystemExit(f"[refuse] {s}: body line ends with backslash — not macro-safe")
out = [f"#define DEFINE_{s}() \\"]
for idx, ln in enumerate(body_lines):
cont = " \\" if idx < len(body_lines) - 1 else ""
out.append(" " + ln.rstrip() + cont)
return "\n".join(out) + "\n"
# ---------------------------------------------------------------- file edits (in memory)
INCLUDE_RE = re.compile(r'^#include\s+"\.\./shared/')
def ensure_include(text, header):
rel = f'#include "../shared/{pathlib.Path(header).name}"'
if rel in text:
return text
lines = text.splitlines(keepends=True)
for i, l in enumerate(lines):
if l.strip() == '#include "common.h"':
lines.insert(i + 1, rel + "\n")
return "".join(lines)
return rel + "\n" + text # fallback: prepend
def replace_site(text, ov, addr, kind, start, end):
lines = text.splitlines(keepends=True)
repl = f"DEFINE_{sym(addr)}() /* dedup: shared engine-core @0x{addr:08X} (src/shared) */\n"
lines[start:end + 1] = [repl]
return "".join(lines)
# ---------------------------------------------------------------- dedup.us.yaml registration
def append_groups(groups):
"""Append new groups textually (preserve the file's header comments). Idempotent by id."""
path = ROOT / "config/dedup.us.yaml"
text = path.read_text()
blocks = []
for g in groups:
if re.search(rf"^\s*-\s*id:\s*{re.escape(g['id'])}\s*$", text, re.M):
continue # already present
# position-locked share -> compact shorthand (vram + binaries list), ~20x smaller than verbose
# members for fleet-wide groups; group_members() in dedup_integrate expands it.
bins = ", ".join(m["binary"] for m in g["members"])
blocks.append(
f" - id: {g['id']}\n"
f" tier: {g['tier']}\n"
f" hash: {g['hash']}\n"
f" source: {g['source']}\n"
f" func: DEFINE_{sym(g['addr'])}\n"
f" vram: 0x{g['addr']:08X}\n"
f" binaries: [{bins}]")
if not blocks:
return 0
if not text.endswith("\n"):
text += "\n"
path.write_text(text + "\n".join(blocks) + "\n")
return len(blocks)
# ---------------------------------------------------------------- byte gate
def byte_gate(ov):
r = subprocess.run(["make", "build", f"BINARY={ov}"], cwd=ROOT,
capture_output=True, text=True)
return r.returncode == 0, r.stdout + r.stderr
# ---------------------------------------------------------------- straggler caller-extern reconcile (--recover)
def reconcile_caller_extern(ov, addr):
"""no-proto every conflicting `extern <ret> func_<ADDR>(<params>);` caller decl in ov's src files
(main + _a/_o0 splits), keeping the return type, dropping the params. A member overlay that
forward-declares the banked fn with a prototype INCOMPATIBLE with the def (`extern void
func_X(s32,s32,s32);` vs the def's (s32,s32,u32)) makes its TU fail `conflicting types` once the
macro def lands. No-proto'ing that decl is byte-NEUTRAL (the call `func_X(a,b,c)` emits identical
code; a K&R decl is compatible with any promotion-safe def) and lets the def compile — the same
lever as tools/fix_arity_callers.py --any-proto, applied surgically to the failing overlay. The
whole-binary byte-gate stays the sole arbiter (G3/P9). Returns (snapshot, n_edits); the snapshot
restores the files VERBATIM (fix_arity_callers --revert is LOSSY for non-(void) forms)."""
rx = re.compile(rf'(extern\s+[A-Za-z_][\w \t\*]*?\b{sym(addr)}\s*\()\s*[^;)]+?\s*(\)\s*;)', re.I)
snap, n = {}, 0
for cp, _ in overlay_files(ov):
txt = cp.read_text()
snap[cp] = txt
new, k = rx.subn(r"\1\2", txt)
if k:
cp.write_text(new)
n += k
return snap, n
def restore_snapshot(snap):
for cp, txt in snap.items():
cp.write_text(txt)
CC1 = ROOT / "tools/bin/gcc-2.7.2-psx/cc1"
def compiles_standalone(body_lines):
"""True iff the lifted body compiles with ONLY common.h (cpp -> cc1). A body that uses overlay-
LOCAL struct types (named in the SOURCE overlay's .c but not common.h) compiles in the source yet
FAILS in every other overlay — it cannot be mechanically lifted. Pre-filtering on this avoids an
all-or-nothing byte-gate revert and lets us report the non-liftable count honestly (P9)."""
# include the shared engine types so struct-USING bodies (that reference header types like
# `struct Vec`) resolve; a body using an overlay-local typedef not in the header still fails -> skip.
src = ('#include "common.h"\n#include "engine_types.h"\n'
+ "\n".join(body_lines) + "\n")
d = ROOT / ".run/dpcc"; d.mkdir(parents=True, exist_ok=True)
f = d / "t.c"; f.write_text(src)
cpp = subprocess.run(["mipsel-linux-gnu-cpp", "-lang-c", f"-I{ROOT}/include",
f"-I{ROOT}/src/shared", "-undef",
"-fno-builtin", "-Dmips", "-D__GNUC__=2", "-D__OPTIMIZE__", "-Dpsx",
"-D_PSYQ", "-D_MIPSEL", "-D_LANGUAGE_C", str(f)], capture_output=True, text=True)
if cpp.returncode != 0:
return False, (cpp.stderr or "cpp failed")
cc1 = subprocess.run([str(CC1), "-quiet", "-O2", "-G0", "-mips1", "-mcpu=3000", "-mgas",
"-msoft-float", "-fgnu-linker", "-o", "/dev/null"],
input=cpp.stdout, capture_output=True, text=True)
return cc1.returncode == 0, (cc1.stderr or "")
# ---------------------------------------------------------------- main
def main():
ap = argparse.ArgumentParser(description=__doc__, formatter_class=argparse.RawDescriptionHelpFormatter)
ap.add_argument("--addr", help="comma-separated target vaddrs (hex)")
ap.add_argument("--auto-from", help="propagate every matched+shared function of this overlay")
ap.add_argument("--source-overlay", help="overlay to extract the matched body from (default: auto)")
ap.add_argument("--min-reach", type=int, default=2, help="min #overlays sharing (auto mode; default 2)")
ap.add_argument("--limit", type=int, default=0, help="cap #functions (auto mode; 0 = no cap)")
ap.add_argument("--header", default="src/shared/engine_core.h")
ap.add_argument("--tier", default="h_exact", choices=("h_exact", "h_norm"))
ap.add_argument("--binaries", help="restrict members to these onboarded overlays (comma list)")
ap.add_argument("--check-only", action="store_true", help="dry run: print the plan, touch nothing")
ap.add_argument("--no-gate", action="store_true")
ap.add_argument("--recover", action="store_true",
help="on a straggler byte-gate failure, FIRST no-proto that overlay's conflicting "
"caller extern for the fn and re-gate (Part B reconcile — byte-neutral, same "
"lever as fix_arity_callers --any-proto); if still failing, EXCLUDE only that "
"overlay from the fn's members (Part A, ×N-1) rather than dropping the fn from "
"ALL overlays (the historical all-or-nothing). Recovers T6 caller-decl stragglers.")
a = ap.parse_args()
onb = onboarded_overlays()
restrict = set(a.binaries.split(",")) if a.binaries else None
pool = [ov for ov in onb if (restrict is None or ov in restrict)]
sigs = {ov: load_sig(ov) for ov in pool}
# ---- choose target addresses + source overlay per target
targets = [] # list of (addr, source_overlay)
if a.auto_from:
src = a.auto_from
ssig = load_sig(src)
ctext = source_text(src) # scan main + split files for matched defs
reg = registered_addrs() # skip functions already shared (additive + resumable)
# -O0 split-file functions are OVERLAY-LOCAL (§18/§20, cont.4): -O0 codegen embeds per-overlay
# %lo data addresses, so their bytes diverge per overlay even though the relocation-MASKED
# h_exact falsely reports reach-134. Cross-overlay-propagating one fails the byte-gate and,
# under the all-or-nothing batch revert, poisons every CLEAN match in the batch (cont.4:
# func_8013C360 reverted 10 good ×134 matches). Never auto-propagate them — detect by def-site
# in the -O0 split file (*_o0.c). (--addr still forces them, for an explicit override.)
o0_skip = set()
for _p, _tag in overlay_files(src):
if _p.name.endswith("_o0.c"):
_o0txt = _p.read_text()
for _ad in ssig:
_s = find_site(_o0txt, src, _ad)
if _s and _s[0] == "def":
o0_skip.add(_ad)
for addr in sorted(ssig):
if addr in reg or addr in o0_skip:
continue
site = find_site(ctext, src, addr)
if not site or site[0] != "def": # only functions matched (inline def) in the source
continue
h = ssig[addr].get(a.tier)
reach = sum(1 for ov in pool if sigs[ov].get(addr, {}).get(a.tier) == h)
if reach >= a.min_reach:
targets.append((addr, src))
targets.sort(key=lambda t: ssig[t[0]]["nins"])
if a.limit:
targets = targets[:a.limit]
elif a.addr:
for tok in a.addr.split(","):
addr = int(tok, 16)
src = a.source_overlay
if not src: # auto: an onboarded overlay where it is an inline def
for ov in pool:
site = find_site(source_text(ov), ov, addr)
if site and site[0] == "def":
src = ov
break
if not src:
sys.exit(f"[error] 0x{addr:08X}: no source overlay has it matched — give --source-overlay")
targets.append((addr, src))
else:
sys.exit("give --addr or --auto-from")
# ---- build the per-target plan (members + body + hash). Cache the source sig/.c (one src in
# auto-from). Filter out bodies that aren't self-contained (overlay-local types -> not liftable).
plan = []
sig_cache, txt_cache = {}, {}
n_nondef = n_local = n_lowreach = 0
# R32: a skip that only increments a counter is invisible work — and `n_local` aggregates THREE
# unrelated causes (macro-unsafe body / inline type def / genuinely overlay-local type), which
# mislabels the queue: a body skipped for containing a `//` comment is a 1-line fix, not the
# per-camp type reconcile. Track and NAME each class separately.
skipped = collections.defaultdict(list)
for addr, src in targets:
ssig = sig_cache.setdefault(src, load_sig(src))
if addr not in ssig:
continue
h = ssig[addr].get(a.tier)
ctext = txt_cache.setdefault(src, source_text(src))
site = find_site(ctext, src, addr)
if not site or site[0] != "def":
n_nondef += 1; skipped["not-inline-def"].append(addr); continue
body = site[3]
members = [ov for ov in pool if sigs[ov].get(addr, {}).get(a.tier) == h]
if len(members) < 2:
n_lowreach += 1; skipped["reach<2"].append(addr); continue
if any("//" in l or l.rstrip().endswith("\\") for l in body):
n_local += 1; skipped["macro-unsafe (// or \\)"].append(addr); continue
# A body that inline-DEFINES a named struct/union or a typedef can't be lifted as a macro
# (two macros defining the same type redefine it when both instantiate in one overlay). But
# USING a type that lives in the shared src/shared/engine_types.h header (§14c struct follow-up)
# is fine — the header is included via engine_core.h in every overlay. Anonymous local structs
# (`struct {...} v;`, no name, no typedef) are unique per instantiation -> also fine. So skip
# ONLY inline named-struct defs + typedefs; compiles_standalone (which includes engine_types.h)
# then rejects any body using an overlay-local type NOT yet promoted to the header.
if re.search(r'(\b(struct|union)\s+\w+\s*\{)|(\btypedef\b)', "\n".join(body)):
n_local += 1; skipped["inline type def in body"].append(addr); continue
ok, why = compiles_standalone(body)
if not ok:
# SESSION-18: this bucket asserted "overlay-local TYPE" for EVERY failure, which is a
# mislabel — the dominant real cause is that the body references file-scope `extern`
# decls that live OUTSIDE the extracted block (func_80174CB0: 22 of them), exactly the
# gap Phase-27's family_remap._carry_macros closed for file-scope #defines. Name the
# causes apart so the queue can be sized honestly (R32/R33).
undecl = sorted(set(re.findall(r"`([A-Za-z_]\w*)' undeclared", why)))
if undecl:
n_local += 1
skipped["missing file-scope extern (CARRY-FIXABLE): " + ",".join(undecl[:4])].append(addr)
else:
n_local += 1; skipped["overlay-local TYPE (the real cap)"].append(addr)
continue
plan.append(dict(addr=addr, src=src, hash=h, body=body, members=members))
if n_local or n_nondef or n_lowreach:
print(f"[skip] {n_local} not self-contained (local types), {n_nondef} not inline-def, "
f"{n_lowreach} reach<{a.min_reach}")
for why, addrs in sorted(skipped.items()):
print(f" [{why}] {len(addrs)}: {' '.join('0x%08x' % x for x in sorted(addrs))}")
if not plan:
sys.exit("[error] nothing to propagate")
print(f"== plan: {len(plan)} function(s), tier={a.tier}, header={a.header} ==")
for p in plan:
print(f" 0x{p['addr']:08X} body={len(p['body'])}L members={len(p['members'])} "
f"[{','.join(m.replace('ov_','') for m in p['members'][:6])}{'…' if len(p['members'])>6 else ''}]")
if a.check_only:
print("(--check-only: no files touched)")
return
# ---- apply machinery (extracted so the drop-straggler retry can re-apply a sub-plan).
header_path = ROOT / a.header
DEFAULT_H = ("/* src/shared/engine_core.h — Phase 15 shared engine-core bodies (cross-overlay dedup, §14).\n"
" * Each DEFINE_func_XXXX() expands to the WHOLE matched body once; instantiated in place at the\n"
" * func_XXXX site in every overlay that shares it (address order preserved). Registry +\n"
" * byte-honesty: config/dedup.us.yaml + tools/dedup_integrate.py. Tool-generated; do not hand-edit. */\n"
"#ifndef SHARED_ENGINE_CORE_H\n#define SHARED_ENGINE_CORE_H\n#include \"common.h\"\n\n#endif\n")
MACRO_RE = re.compile(r'^\s*DEFINE_func_([0-9A-Fa-f]+)\(\)')
def apply_plan(subplan, restrict=None):
"""Author each fn's macro into engine_core.h + instantiate it at its site in every member
overlay (optionally restricted to a set — the per-fn straggler trial uses one overlay). Edit
each member overlay ONCE (group by overlay; stub lines replace 1:1, inline defs splice in
REVERSE order). Returns (touched, changed); caller byte-gates `changed` then restore(touched)."""
touched = {}
def _edit(path, newtext):
if path not in touched:
touched[path] = path.read_text() if path.exists() else None
path.write_text(newtext)
htext = header_path.read_text() if header_path.exists() else DEFAULT_H
for p in subplan:
if f"DEFINE_{sym(p['addr'])}()" not in htext:
htext = htext.replace("\n#endif\n", "\n" + make_macro(p["addr"], p["body"]) + "\n#endif\n")
_edit(header_path, htext)
by_ov = {}
for p in subplan:
for ov in p["members"]:
if restrict and ov not in restrict:
continue
by_ov.setdefault(ov, []).append(p)
changed = []
for ov in sorted(by_ov):
remaining = {p["addr"]: p for p in by_ov[ov]} # targets not yet placed in a file
ovc = False
for cp, asm_sub in overlay_files(ov): # main + Phase-19 split files (_a/_o0)
if not remaining:
break
lines = ensure_include(cp.read_text(), a.header).splitlines(keepends=True)
sp = re.compile(rf'^\s*INCLUDE_ASM\("asm/{re.escape(ov)}/nonmatchings/{re.escape(asm_sub)}",\s*func_([0-9A-Fa-f]+)\);\s*$')
stub_idx, macro_set = {}, set()
for i, l in enumerate(lines):
ms = sp.match(l)
if ms: stub_idx[int(ms.group(1), 16)] = i; continue
mm = MACRO_RE.match(l)
if mm: macro_set.add(int(mm.group(1), 16))
joined = "".join(lines)
line_repls, def_ranges = {}, []
for ad in list(remaining):
if ad in macro_set:
del remaining[ad]; continue # already instantiated in this file (idempotent)
repl = f"DEFINE_{sym(ad)}() /* dedup: shared engine-core @0x{ad:08X} (src/shared) */\n"
if ad in stub_idx:
line_repls[stub_idx[ad]] = repl; del remaining[ad]; ovc = True
else:
site = find_site(joined, ov, ad) # inline def in THIS file? (else try the next split file)
if site and site[0] == "def":
def_ranges.append((site[1], site[2], repl)); del remaining[ad]; ovc = True
if line_repls or def_ranges:
for idx, repl in line_repls.items():
lines[idx] = repl
for start, end, repl in sorted(def_ranges, key=lambda x: -x[0]):
lines[start:end + 1] = [repl]
_edit(cp, "".join(lines))
if ovc:
changed.append(ov)
return touched, changed
def restore(touched):
for path, orig in touched.items():
if orig is None:
path.unlink(missing_ok=True)
else:
path.write_text(orig)
def struct_check(subplan, changed, touched):
# the byte-gate CANNOT catch a leftover stub (it is itself byte-identical): every claimed
# member must now instantiate the macro and have no stub. One read per changed overlay.
incasm = lambda ad: re.compile(rf'INCLUDE_ASM\("[^"]+",\s*{sym(ad)}\)')
for ov in changed:
t = source_text(ov) # all split files (post-edit, from disk)
for p in (pp for pp in subplan if ov in pp["members"]):
if f"DEFINE_{sym(p['addr'])}()" not in t:
restore(touched); sys.exit(f"[FAIL] {ov}: 0x{p['addr']:08X} not instantiated — REVERTED")
if incasm(p["addr"]).search(t):
restore(touched); sys.exit(f"[FAIL] {ov}: 0x{p['addr']:08X} stub still present — REVERTED")
# ---- apply with DROP-STRAGGLER retry. A fn whose shared C body, in some OTHER overlay's TU,
# byte-mismatches (-O0 per-overlay %lo data) or compile-errors (cross-overlay loose-typed callee
# decls — cont.4 wave-2) would, under an all-or-nothing batch revert, poison every CLEAN match.
# So on a byte-gate failure: isolate the culprit(s) for the failing overlay (per-fn trial), drop
# them (they stay matched ×1 in the source), and retry the batch with the survivors. The byte-gate
# stays the sole arbiter (G3/P9) — a dropped fn is never banked anywhere it isn't byte-identical.
while plan:
touched, changed = apply_plan(plan)
struct_check(plan, changed, touched)
if a.no_gate:
break
fail_ov = None
for ov in changed:
if not byte_gate(ov)[0]:
fail_ov = ov; break
if fail_ov is None:
print(f"[ OK ] {len(changed)} overlays byte-identical after propagation")
break
restore(touched)
survivors, dropped, excluded, recovered = [], [], [], []
for p in plan:
if fail_ov not in p["members"]:
survivors.append(p); continue
t2, c2 = apply_plan([p], restrict={fail_ov})
pok = byte_gate(fail_ov)[0] if fail_ov in c2 else True
restore(t2)
if pok:
survivors.append(p); continue # p alone is fine here -> a multi-fn interaction
# p is a real culprit for fail_ov. Without --recover: the historical all-or-nothing drop.
if not a.recover:
dropped.append(p); continue
# Part B — reconcile fail_ov's conflicting caller extern for p, then re-trial the byte-gate.
snap, n = reconcile_caller_extern(fail_ov, p["addr"])
if n:
t3, c3 = apply_plan([p], restrict={fail_ov})
pok2 = byte_gate(fail_ov)[0] if fail_ov in c3 else True
restore(t3) # -> the RECONCILED text (t3 snapshot is post-reconcile)
if pok2:
survivors.append(p); recovered.append(p); continue # keep the reconcile on disk
restore_snapshot(snap) # reconcile didn't buy the match -> undo it
# Part A — exclude ONLY fail_ov from p's members (keep p for the rest); drop iff reach<2.
p["members"] = [m for m in p["members"] if m != fail_ov]
if len(p["members"]) >= 2:
survivors.append(p); excluded.append(p)
else:
dropped.append(p)
if recovered:
print(f"[recover] {fail_ov}: reconciled the conflicting caller extern for "
f"{len(recovered)} fn(s), kept in members: " + ", ".join(f"0x{p['addr']:08X}" for p in recovered))
if excluded:
print(f"[exclude] {fail_ov}: {len(excluded)} fn(s) byte-diverge / irreconcilable here -> "
f"propagated to the rest, {fail_ov} kept ×1: " + ", ".join(f"0x{p['addr']:08X}" for p in excluded))
if dropped:
print(f"[drop] {fail_ov}: {len(dropped)} cross-overlay straggler(s) "
f"(reach<2 after exclude / all-or-nothing): " + ", ".join(f"0x{p['addr']:08X}" for p in dropped))
if not (recovered or excluded or dropped):
# fail_ov fails with the full batch but no single fn is a culprit -> a multi-fn interaction;
# conservatively drop every fn targeting fail_ov (rare; kept ×1) so the rest can proceed.
tofail = [p for p in plan if fail_ov in p["members"]]
print(f"[drop] {fail_ov}: byte-gate fails with no single-fn culprit (interaction) — "
f"dropping its {len(tofail)} fn(s), kept ×1")
survivors = [p for p in plan if fail_ov not in p["members"]]
plan = survivors
if not plan:
sys.exit("[error] all candidates dropped — no cleanly-shareable function")
# ---- register groups (compact shorthand: position-locked -> vram + binaries list)
groups = [dict(id=f"E_{sym(p['addr'])}", tier=a.tier, hash=p["hash"],
source=a.header, addr=p["addr"],
members=[dict(binary=ov, vram=p["addr"], name=sym(p["addr"])) for ov in p["members"]])
for p in plan]
n = append_groups(groups)
print(f"== propagated {len(plan)} function(s); {len(changed)} overlays rebuilt byte-identical; "
f"registered {n} new group(s) in config/dedup.us.yaml ==")
if __name__ == "__main__":
main()