tree-sitter: v1 grammar — parses examples/01-single-module.twasm end-to-end (zero ERROR nodes)

[hyperpolymath]

Summary

Extends the Phase 0 tree-sitter scaffold (PR #58, region-decls only) to v1 grammar that parses examples/01-single-module.twasm end-to-end with zero parse errors.

Verification (local)

cd tools/tree-sitter-twasm
npm install
tree-sitter generate    # no conflicts; parser.c emitted
tree-sitter parse ../../examples/01-single-module.twasm
# → 0 ERROR / 0 MISSING nodes, exit 0, full AST for all 134 lines

What v1 now covers (beyond region declarations)

• memory_decl — memory Name { initial: N; maximum: N; place X at N; }
• function_decl — fn name(params) -> ret effects { ... } { body }
  • parameter_list with region_handle_type (&, &mut, own)
  • effects_clause — Read / Write / Alloc / Free / ReadRegion(R) / WriteRegion(R)
  • return_type including void
• Statements — region.get, region.set, region.scan (with where + binding + body), let [mut] name [: type] = expr;, assignment, if/else, return
• Expressions — literals (int/float/bool/null), identifier_expr, region_var ($x), binary_expr (full operator set with precedence), unary_expr, is_null_expr, paren_expr
• Field paths — including nested access (.pos.x)
• region_target — bare-identifier form for post-null-check references

Precedence chain: ['unary', 'mul', 'add', 'cmp', 'and', 'or'] with unary at top.

Still deferred (next Track A PR)

• Imports / exports
• Invariant declarations + proof statements
• const declarations
• Block-expression if ... yield
• Match on union regions
• L13–L16 surface (isolated, session, capability, choreography)
• L11/L12 surface (cost_bound, fresh, version_of, region.sync)
• Lifetime annotations on function decls
• Striated region layout

By production count v1 covers ~60–70% of spec/grammar.ebnf.

Files

File	Change
grammar.js	~80 → ~270 lines
corpus/functions.txt	new — 6 corpus tests covering memory_decl, if/else, is_null guard with bare-ident target, scan, nested field paths
queries/highlights.scm	extended with function/memory/if/effect/handle-mode/literal/builtin categories
README.md	updated to reflect v1 scope
tree-sitter.json	new — tree-sitter-cli metadata
package.json	minor metadata tweaks

CI integration

Still deferred to the next Track A PR. When the grammar reaches full EBNF parity, the install-and-test cost (~30MB tree-sitter-cli toolchain on every PR run) is justified by the regression value. Today the 6-test corpus + the local parse-of-example-01 covers the regression risk well enough.

Phase 0 impact

This PR plus the existing Track A scaffold (PR #58) moves the Phase 0 §Track A checklist from "scaffold landed" to "scaffold + v1 grammar landed, parses simplest example end-to-end". Remaining Track A items (full EBNF parity, Idris2 parser, ReScript cut, codegen v0) are still ahead.

Test plan

• tree-sitter generate succeeds (no conflicts)
• tree-sitter parse examples/01-single-module.twasm returns 0 ERROR / 0 MISSING nodes
• Corpus tests pass on a CI runner with tree-sitter-cli installed (deferred to next PR with CI wiring)
• Smoke test, structural E2E, claim-envelope, property, security-envelope, proof regression — none touch tools/tree-sitter-twasm/ so no regressions expected

---

Generated by Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 93 issues detected

Severity	Count
🔴 Critical	6
🟠 High	36
🟡 Medium	51

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in quality.yml",
    "type": "missing_workflow",
    "file": "quality.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in security-policy.yml",
    "type": "missing_workflow",
    "file": "security-policy.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action hyperpolymath/standards/.github/workflows/governance-reusable.yml@main needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Action actions/upload-artifact@v4 needs attention",
    "type": "unpinned_action",
    "file": "release.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action actions/download-artifact@v4 needs attention",
    "type": "unpinned_action",
    "file": "release.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
    "type": "believe_me",
    "file": "/home/runner/work/typed-wasm/typed-wasm/src/abi/TypedWasm/ABI/SessionProtocol.idr",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "assert_total bypasses totality checker (1 occurrences, CWE-704)",
    "type": "assert_total",
    "file": "/home/runner/work/typed-wasm/typed-wasm/src/abi/TypedWasm/ABI/SessionProtocol.idr",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
    "type": "believe_me",
    "file": "/home/runner/work/typed-wasm/typed-wasm/src/abi/TypedWasm/ABI/Echo.idr",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "assert_total bypasses totality checker (1 occurrences, CWE-704)",
    "type": "assert_total",
    "file": "/home/runner/work/typed-wasm/typed-wasm/src/abi/TypedWasm/ABI/Echo.idr",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
    "type": "believe_me",
    "file": "/home/runner/work/typed-wasm/typed-wasm/src/abi/TypedWasm/ABI/ResourceCapabilities.idr",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence