The serializer recovery reaches this repo as a generated wire schema
(include/generated/sots_stream_schema.h, 386 classes / 2042 items): for each
class, the ordered sequence of items its Write puts on the stream. Facts only —
no field offsets, no sizeof, no strides. This engine reads and writes the on-disk
format; it does not inherit the original's memory layout.
The table is a specification, not a program: the recovery is a linear pass over
Write, so it cannot see Write's branches (StarShip's BQ2 is gated on hbq but
listed unconditionally) and it flattens container loops. A codec driven off it
would desynchronise. The hand-written io() shapes stay the codec; SchemaProbe
(probe.h) walks them with every branch taken and test_wire_schema LCS-aligns
that against the table — 56 shapes bound, 657 items matched, 0 mismatches.
Four defects the check found, all invisible to a round-trip test:
- SystemParams field 1 is a string, not an int. It is the empty string in
every save, and an empty string is four zero bytes — byte-identical to the
int 0, so it round-tripped by luck. A named planet would have desynced.
- ObservedTech/ObservedWeapon odet is a bool, not an int. Byte-safe only
because a 4-char tag makes a bool item and an int item both 12 bytes.
- SpeciesRatios nv and ShipRecords srbd are counts, not fields.
CoverageArchive separates items a field names from items a Node merely carries,
because a byte-identical round trip is not a coverage claim. Typed coverage of a
real save goes 37.9% -> 97.1% (97.2/97.2/97.6 on the others) with the round trip
still byte-identical, by typing TechTree (both NumTechs sections), Events,
ShipRecs, sprjs, civr, comms, spy2, spymgr, aid, Ojvs, AIEnf, FNG, trdmgr and
the Des section/gun-bank tree. Ratchet at 95%.
trdmgr resolves a recorded trap: ServerTradeManager's Read/Write really are the
inherited no-op, but the call is virtual and ServerTradeManagerImpl has the real
serializer. Same shape resolves IServerSpyManager -> ServerSpyManager.
ctest 34/34, clean_room_check OK, test_save skips cleanly with SOTS_SAVES_DIR unset.
4.1 KiB
G — the wire schema channel
include/generated/sots_stream_schema.h is the second generated channel into this repo, alongside
include/generated/sots_addresses.h. Both carry facts about the original binary and nothing
else, both are produced by a script in the sots-re notes repo, and neither is ever hand-edited.
sots-re objects/layouts.json (the serializer recovery, memory-layout view)
| tools/streams.py -> objects/streams.json (wire view)
| tools/gen_stream_schema.py
v
sots-engine include/generated/sots_stream_schema.h
Regenerate after any change on the notes side:
cd ~/sots-re
uv run python3 tools/streams.py
uv run python3 tools/gen_stream_schema.py ../sots-engine/include/generated/sots_stream_schema.h
What crosses, and what deliberately does not
What crosses is the wire schema: for each serializable class, the ordered sequence of items its
Write puts on the stream — on-disk tag, on-disk primitive, and how the item is framed.
What does not cross is every memory fact in the recovery: field offsets, sizeof, gaps,
container strides. This engine is our own C++, not a byte-for-byte decompilation. It has to read and
write the on-disk format faithfully; it must not inherit the original's ABI in its runtime types,
and shapes.h is free to lay its structs out however C++ likes.
The shim is the one component that legitimately needs the original's ABI, because it reads the
running game's memory. Those offsets have their own home: offset entries in addresses.json,
which arrive through sots_addresses.h.
Note the primitive in the table is the disk type. A member the original holds as int16 or
int8 is written by Stream::WriteInt and is four bytes on the wire; nothing narrow reaches the
stream.
Why it is a check, not a generator
The table is a specification, not a program. The recovery is a linear pass over the game's
Write, so:
- It cannot see branches.
StarShipwritesBQ2only whenhbqis set; the table lists it unconditionally. The sequence is a superset of what any single record contains. - Container loops are flattened. A count item is followed by its element items as siblings
(
member == false), not nested inside the container.
A codec driven straight off the table would desynchronise on the first branch. So the hand-written
io(Ar&) shapes stay the codec — they express the conditionals and the nesting the binary facts
cannot supply — and the table is what proves they agree with the binary.
The two extra archives
src/mars/stream/probe.h adds two archives to the three in archive.h:
SchemaProbewalks a shape'sio()with every branch taken — the same "all branches" view the recovery has — and records the item sequence.tests/mars_stream/test_wire_schema.cppLCS-aligns that against the generated table. A tag both sides name with different disk primitives is a hard failure; a wire-only item is a conditional or coverage debt and is reported only. Run withSOTS_WIRE_VERBOSE=1to list every gap.CoverageArchivewalks a populated shape'sio()and separates items a field names (typed) from items only a genericNodecarried (opaque). This matters because a byte-identical round trip is not a coverage claim:ar.anyand thear.resttail round-trip perfectly by copying bytes they do not understand.test_saveprints the split and the worst offenders, and carries a ratchet so typing a body can never silently regress.
Adding a shape
uv run python3 ~/sots-re/tools/streams.py Game::TheClass— the item list, in disk order.- Write the
io()inshapes.h. Watch for two things the table shows but does not spell out: an item marked[element]is a loop body, so the item before it is a count, not a field; and an item the game writes conditionally will be listed anyway. - Add a
check<sh::Shape>("Shape", "Game::TheClass")line totest_wire_schema.cpp. ctest— the conformance test fails on a type disagreement, andtest_savefails if the round trip breaks or coverage regresses.