| (m = m0 ⊃ mkdir(m3, md4, # links(m0, dirs0), m7, entries1 -- str0);mkdir(m4, md6, # links(m, dirs0), m8, entries0)) = mkdir(m6, md5, m9, m10, entries), asynced1 ↔ true, dirs0[m] = mkdir(m4, md6, # links(m, dirs0), m8, entries0), files0[entries0[str]] = mkfile(m5, md0, # links(entries0[str], dirs0), content1), files0[entries1[str0]] = mkfile(m1, md3, # links(entries1[str0], dirs0), content), dirs0[m0] = mkdir(m3 + 1, md4, # links(m0, dirs0), m7, entries1), dirs = dirs0[m0, mkdir(m3, md4, # links(m0, dirs0), m7, entries1 -- str0)][m, mkdir(m6, md5, m9, m10, entries[str, entries1[str0]])], files = files0[ino, files0[ino].nlink:= (files0[ino].nlink - 1)], ino = mkdentry(str, entries0[str]).ino, old_dent = mkdentry(str0, entries1[str0]), mkdentry(str, entries0[str]).dentry?, old_dent.dentry?, afs-cons(dirs0, files0), str0 ∈ entries1, m ∈ dirs0, m0 ∈ dirs0, entries0[str] ∈ files0, entries1[str0] ∈ files0, str ∈ entries0, files0[ino].nlink ≥ 1, m = m0 → md1 = md2, links(m, dirs0) ≠ ∅ ∨ m = ROOT_INO, links(m0, dirs0) ≠ ∅ ∨ m0 = ROOT_INO ⊦ ⟪afs_inode_sync#(mkinode(m0, md2, true, # links(m0, dirs0), m7, m3 + 1); dirs, files); afs_inode_sync#(mkinode(m, md1, true, # links(m, dirs0), m8, m4); dirs, files); if asynced1 then {afs_inode_sync#(mkinode(entries0[str], md, false, # links(entries0[str], dirs0), 0, m2); dirs, files); new_child_inode := getinode(entries0[str], dirs, files)}; old_parent_inode := (m0 ∈ dirs ⊃ mkinode(m0, dirs[m0].meta, true, dirs[m0].nlink, dirs[m0].nsubdirs, dirs[m0].size) ;mkinode(m0, files[m0].meta, false, files[m0].nlink, 0, files[m0].size) ); new_parent_inode := (m ∈ dirs ⊃ mkinode(m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode(m, files[m].meta, false, files[m].nlink, 0, files[m].size) ); err := ESUCCESS; asynced := ?⟫ afs-cons(dirs, files), entries1[str0] ∈ dirs0, entries0[str] ∈ dirs0, m0 = m ∧ mkdentry(str, entries0[str]) = mkdentry(str0, entries1[str0]) |
(m = m0 ⊃ mkdir(m3, md4, # links(m0, dirs0), m7, entries1 -- str0);mkdir(m4, md6, # links(m, dirs0), m8, entries0)) = mkdir(m6, md5, m9, m10, entries), dirs0[m0] = mkdir(m3 + 1, md4, # links(m0, dirs0), m7, entries1), files0[entries1[str0]] = mkfile(m1, md3, # links(entries1[str0], dirs0), content), files0[entries0[str]] = mkfile(m5, md0, # links(entries0[str], dirs0), content1), dirs0[m] = mkdir(m4, md6, # links(m, dirs0), m8, entries0), dirs = dirs0[m0, mkdir(m3, md4, # links(m0, dirs0), m7, entries1 -- str0)][m, mkdir(m6, md5, m9, m10, entries[str, entries1[str0]])], files = files0[entries0[str], mkfile(m5, md0, # links(entries0[str], dirs0) - 1, content1)], # links(entries0[str], dirs0) ≠ 0, afs-cons(dirs0, files0), str ∈ entries0, entries1[str0] ∈ files0, entries0[str] ∈ files0, m0 ∈ dirs0, m ∈ dirs0, str0 ∈ entries1, 1 ≤ # links(entries0[str], dirs0), ¬ entries0[str] ∈ dirs0, ¬ entries1[str0] ∈ dirs0, m = m0 → md1 = md2, links(m0, dirs0) ≠ ∅ ∨ m0 = ROOT_INO, links(m, dirs0) ≠ ∅ ∨ m = ROOT_INO ⊦ ⟪afs_inode_sync#(mkinode(m0, md2, true, # links(m0, dirs0), m7, m3 + 1); dirs, files); afs_inode_sync#(mkinode(m, md1, true, # links(m, dirs0), m8, m4); dirs, files); if true then {afs_inode_sync#(mkinode(entries0[str], md, false, # links(entries0[str], dirs0), 0, m2); dirs, files); new_child_inode := getinode(entries0[str], dirs, files)}; old_parent_inode := (m0 ∈ dirs ⊃ mkinode(m0, dirs[m0].meta, true, dirs[m0].nlink, dirs[m0].nsubdirs, dirs[m0].size) ;mkinode(m0, files[m0].meta, false, files[m0].nlink, 0, files[m0].size) ); new_parent_inode := (m ∈ dirs ⊃ mkinode(m, dirs[m].meta, true, dirs[m].nlink, dirs[m].nsubdirs, dirs[m].size) ;mkinode(m, files[m].meta, false, files[m].nlink, 0, files[m].size) ); err := ESUCCESS; asynced := ?⟫ afs-cons(dirs, files), m0 = m ∧ mkdentry(str, entries0[str]) = mkdentry(str0, entries1[str0])
Used simplifier rules: ⊦ p_ino ∈ dirs ∧ dirs[p_ino] = mkdir(m, md, n, n0, entries) ∧ str ∈ entries → links(entries[str], dirs) ≠ ∅; (s)%size-zero: ⊦ # ls ≠ 0 → ls ≠ ∅; (forward) from specification set-basic[alink-set]% ⊦ mkfile(m, md, m0, content).nlink:= m2 = mkfile(m, md, m2, content); (s)% ⊦ mkfile(m, md, m0, content).nlink = m0; (s)%not-zero: 0 < n ⊦ (* n) ≤ m → m ≠ 0; (forward) from specification nat% ⊦ mkdentry(str, m).dentry?; (s)% ⊦ n ≥ m ↔ m ≤ n; (s)% ⊦ mkdentry(str, m).ino = m; (s)