Jakt is a memory-safe systems programming language.
It currently transpiles to C++.
NOTE: The language is under heavy development.
The transpilation to C++ requires clang
. Make sure you have that installed.
jakt file.jakt
./build/file
- Memory safety
- Code readability
- Developer productivity
- Executable performance
- Fun!
The following strategies are employed to achieve memory safety:
- Automatic reference counting
- Strong typing
- Bounds checking
- No raw pointers in safe mode
In Jakt, there are three pointer types:
- T (Strong pointer to reference-counted class
T
.) - weak T? (Weak pointer to reference-counted class
T
. Becomes empty on pointee destruction.) - raw T (Raw pointer to arbitrary type
T
. Only usable inunsafe
blocks.)
Null pointers are not possible in safe mode, but pointers can be wrapped in Optional
, i.e Optional<T>
or T?
for short.
Note that weak pointers must always be wrapped in Optional
. There is no weak T, only weak T?.
- Integer overflow (both signed and unsigned) is a runtime error.
- Numeric values are not automatically coerced to
int
. All casts must be explicit.
For cases where silent integer overflow is desired, there are explicit functions that provide this functionality.
Far more time is spent reading code than writing it. For that reason, Jakt puts a high emphasis on readability.
Some of the features that encourage more readable programs:
- Immutable by default.
- Argument labels in call expressions (
object.function(width: 10, height: 5)
) - Inferred
enum
scope. (You can sayFoo
instead ofMyEnum::Foo
). - Pattern matching with
match
. - Optional chaining (
foo?.bar?.baz
(fallible) andfoo!.bar!.baz
(infallible)) - None coalescing for optionals (
foo ?? bar
yieldsfoo
iffoo
has a value, otherwisebar
) -
defer
statements. - Pointers are always dereferenced with
.
(never->
) - Trailing closure parameters can be passed outside the call parentheses.
- Error propagation with
ErrorOr<T>
return type and dedicatedtry
/must
keywords.
When calling a function, you must specify the name of each argument as you're passing it:
rect.set_size(width: 640, height: 480)
There are two exceptions to this:
- If the parameter in the function declaration is declared as
anon
, omitting the argument label is allowed. - When passing a variable with the same name as the parameter.
There are two main ways to declare a structure in Jakt: struct
and class
.
Basic syntax:
struct Point {
x: i64
y: i64
}
Structs in Jakt have value semantics:
- Variables that contain a struct always have a unique instance of the struct.
- Copying a
struct
instance always makes a deep copy.
let a = Point(x: 10, y: 5)
let b = a
// "b" is a deep copy of "a", they do not refer to the same Point
Jakt generates a default constructor for structs. It takes all fields by name. For the Point
struct above, it looks like this:
Point(x: i64, y: i64)
Struct members are public by default.
- basic class support
- private-by-default members
- inheritance
- class-based polymorphism (assign child instance to things requiring the parent type)
-
Super
type -
Self
type
Same basic syntax as struct
:
class Size {
width: i64
height: i64
public function area(this) => .width * .height
}
Classes in Jakt have reference semantics:
- Copying a
class
instance (aka an "object") copies a reference to the object. - All objects are reference-counted by default. This ensures that objects don't get accessed after being deleted.
Class members are private by default.
Both structs and classes can have member functions.
There are three kinds of member functions:
Static member functions don't require an object to call. They have no this
parameter.
class Foo {
function func() => println("Hello!")
}
// Foo::func() can be called without an object.
Foo::func()
Non-mutating member functions require an object to be called, but cannot mutate the object. The first parameter is this
.
class Foo {
function func(this) => println("Hello!")
}
// Foo::func() can only be called on an instance of Foo.
let x = Foo()
x.func()
Mutating member functions require an object to be called, and may modify the object. The first parameter is mut this
.
class Foo {
x: i64
function set(mut this, anon x: i64) {
this.x = x
}
}
// Foo::set() can only be called on a mut Foo:
mut foo = Foo(x: 3)
foo.set(9)
To reduce repetitive this.
spam in methods, the shorthand .foo
expands to this.foo
.
Dynamic arrays are provided via a built-in Array<T>
type. They can grow and shrink at runtime.
Array
is memory safe:
- Out-of-bounds will panic the program with a runtime error.
- Slices of an
Array
keep the underlying data alive via automatic reference counting.
// Function that takes an Array<i64> and returns an Array<String>
function foo(numbers: [i64]) -> [String] {
...
}
// Array<i64> with 256 elements, all initialized to 0.
let values = [0; 256]
// Array<String> with 3 elements: "foo", "bar" and "baz".
let values = ["foo", "bar", "baz"]
- Creating dictionaries
- Indexing dictionaries
- Assigning into indexes (aka lvalue)
function main() {
let dict = ["a": 1, "b": 2]
println("{}", dict["a"])
}
// Function that takes a Dictionary<i64, String> and returns an Dictionary<String, bool>
function foo(numbers: [i64:String]) -> [String:bool] {
...
}
// Dictionary<String, i64> with 3 entries.
let values = ["foo": 500, "bar": 600, "baz": 700]
- Creating sets
- Reference semantics
function main() {
let set = {1, 2, 3}
println("{}", set.contains(1))
println("{}", set.contains(5))
}
- Creating tuples
- Index tuples
- Tuple types
function main() {
let x = ("a", 2, true)
println("{}", x.1)
}
- Enums as sum-types
- Generic enums
- Enums as names for values of an underlying type
-
match
expressions - Enum scope inference in
match
arms - Yielding values from match blocks
- Nested
match
patterns - Traits as
match
patterns - Support for interop with the
?
,??
and!
operators
enum MyOptional<T> {
Some(T)
None
}
function value_or_default<T>(anon x: MyOptional<T>, default: T) -> T {
return match x {
Some(value) => {
let stuff = maybe_do_stuff_with(value)
let more_stuff = stuff.do_some_more_processing()
yield more_stuff
}
None => default
}
}
enum Foo {
StructLikeThingy (
field_a: i32
field_b: i32
)
}
function look_at_foo(anon x: Foo) -> i32 {
match x {
StructLikeThingy(field_a: a, field_b) => {
return a + field_b
}
}
}
enum AlertDescription: i8 {
CloseNotify = 0
UnexpectedMessage = 10
BadRecordMAC = 20
// etc
}
// Use in match:
function do_nothing_in_particular() => match AlertDescription::CloseNotify {
CloseNotify => { ... }
UnexpectedMessage => { ... }
BadRecordMAC => { ... }
}
- Generic types
- Generic type inference
- Traits
Jakt supports both generic structures and generic functions.
function id<T>(anon x: T) -> T {
return x
}
function main() {
let y = id(3)
println("{}", y + 1000)
}
struct Foo<T> {
x: T
}
function main() {
let f = Foo(x: 100)
println("{}", f.x)
}
- Namespace support for functions and struct/class/enum
- Deep namespace support
namespace Greeters {
function greet() {
println("Well, hello friends")
}
}
function main() {
Greeters::greet()
}
There are two built-in casting operators in Jakt.
as? T
: Returns anOptional<T>
, empty if the source value isn't convertible toT
.as! T
: Returns aT
, aborts the program if the source value isn't convertible toT
.
The as
cast can do these things (note that the implementation may not agree yet):
- Casts to the same type are infallible and pointless, so might be forbidden in the future.
- If both types are primitive, a safe conversion is done.
- Integer casts will fail if the value is out of range. This means that promotion casts like i32 -> i64 are infallible.
- Float -> Integer casts truncate the decimal point (?)
- Integer -> Float casts resolve to the closest value to the integer representable by the floating-point type (?). If the integer value is too large, they resolve to infinity (?)
- Any primitive -> bool will create
true
for any value except 0, which isfalse
. - bool -> any primitive will do
false -> 0
andtrue -> 1
, even for floats.
- If the types are two different pointer types (see above), the cast is essentially a no-op. A cast to
T
will increment the reference count as expected; that's the preferred way of creating a strong reference from a weak reference. A cast from and toraw T
is unsafe. - If the types are part of the same type hierarchy (i.e. one is a child type of another):
- A child can be cast to its parent infallibly.
- A parent can be cast to a child, but this will check the type at runtime and fail if the object was not of the child type or one of its subtypes.
- If the types are incompatible, a user-defined cast is attempted to be used. The details here are not decided yet.
- If nothing works, the cast will not even compile.
Additional casts are available in the standard library. Two important ones are as_saturated
and as_truncated
, which cast integral values while saturating to the boundaries or truncating bits, respectively.
(Not yet implemented)
To make generics a bit more powerful and expressive, you can add additional information to them:
trait Hashable {
function hash(self) -> i128
}
class Foo implements Hashable {
function hash(self) => 42
}
type i64 implements Hashable {
function hash(self) => 100
}
The intention is that generics use traits to limit what is passed into a generic parameter, and also to grant that variable more capabilities in the body. It's not really intended to do vtable types of things (for that, just use a subclass)
(Not yet implemented)
To keep things safe, there are a few kinds of analysis we'd like to do (non-exhaustive):
- Preventing overlapping of method calls that would collide with each other. For example, creating an iterator over a container, and while that's live, resizing the container
- Using and manipulating raw pointers
- Calling out to C code that may have side effects
Functions that can fail with an error instead of returning normally are marked with the throws
keyword:
function task_that_might_fail() throws -> usize {
if problem {
throw Error::from_errno(EPROBLEM)
}
...
return result
}
function task_that_cannot_fail() -> usize {
...
return result
}
Unlike languages like C++ and Java, errors don't unwind the call stack automatically. Instead, they bubble up to the nearest caller.
If nothing else is specified, calling a function that throws
from within a function that throws
will implicitly bubble errors.
If you want to catch errors locally instead of letting them bubble up to the caller, use a try
/catch
construct like this:
try {
task_that_might_fail()
} catch error {
println("Caught error: {}", error)
}
There's also a shorter form:
try task_that_might_fail() catch error {
println("Caught error: {}", error)
}
(Not yet implemented)
For better interoperability with existing C++ code, as well as situations where the capabilities of Jakt within unsafe
blocks are not powerful enough, the possibility of embedding inline C++ code into the program exists in the form of cpp
blocks:
mut x = 0
unsafe {
cpp {
"x = (i64)&x;"
}
}
println("{}", x)
Values and objects can be passed by reference in some situations where it's provably safe to do so.
A reference is either immutable (default) or mutable.
&T
is an immutable reference to a value of typeT
.&mut T
is a mutable reference to a value of typeT
.
&foo
creates an immutable reference to the variablefoo
.&mut foo
creates a mutable reference to the variablefoo
.
To "get the value out" of a reference, it must be dereferenced using the *
operator:
function sum(a: &i64, b: &i64) -> i64 {
return *a + *b
}
For mutable references to structs, you'll need to wrap the dereference in parentheses in order to do a field access:
struct Foo {
x: i64
}
function zero_out(foo: &mut Foo) {
(*foo).x = 0
}
- Reference types
- Reference function parameters
- No reference locals
- No references in structs
- No references in return types
- No mutable references to immutable values
- Allow
&foo
and&mut foo
without argument label for parameters namedfoo
- (
unsafe
) references and raw pointers bidirectionally convertible - No capture-by-reference in persistent closures