| entries[str] ∈ dirs ↔ root[q + str '].dir?, isdir ↔ true, dirs[ino1] = mkdir(# entries, md, # links(ino1, dirs), m1, entries), err = err0, root[q].dir?, root.dir?, dom of < ino0, abs(root, ROOT_INO)(dirs), afs-cons(dirs, files), fids-cons(root, abs-files(files), abs-of(of)), ispath(q, ROOT_INO, ino1, dirs, files), of-cons(of, dirs, files), pw(user, md), px(user, md), px-parent(user, q, ROOT_INO, dirs, files), ino1 ∈ dirs, str ∈ entries, ⌊err0⌋ , psynced → asynced, links(ino1, dirs) ≠ ∅ ∨ ino1 = ROOT_INO, entries[str] ∈ dirs ∨ entries[str] ∈ files ⊦ [p_inode := inode; if err = ESUCCESS then {isdir := p_inode.directory; if isdir then if p_inode.ino = ROOT_INO then err := EACCESS else if p_inode.size ≠ 0 then err := ENOTEMPTY}; isdir1 := true; isdir0 := isdir; if isdir1 ∧ ¬ isdir0 then err := ENOTDIR; if ¬ isdir1 ∧ isdir0 then err := EISDIR; err1 := err; if err1 = ESUCCESS then afs_check_commit#(dirs, files; err1; asynced); fs := abs-files(files); if err1 = ESUCCESS then {inode := (ino1 ∈ dirs ⊃ mkinode(ino1, md, true, # links(ino1, dirs), m1, # entries) ;mkinode(ino1, files[ino1].meta, false, files[ino1].nlink, 0, files[ino1].size) ); dent := mkdentry(str, dirs[ino1].entries[str]); afs_rmdir#(; inode, p_inode, dent, err1, dirs, files; asynced); vfs_put_inode#(p_inode, of, asynced; err1, dirs, files)}] ( of-cons(of, dirs, files) ∧ afs-cons(dirs, files) → ⟨posix_rmdir#(q + str ', user, fs, abs-of(of); err2, root; psynced)⟩ (fs = abs-files(files) ∧ abs(root, ROOT_INO)(dirs) ∧ (psynced → asynced) ∧ err1 = err2)) |
isdir ↔ true, entries[str] ∈ dirs ↔ root[q + str '].dir?, dirs[ino1] = mkdir(# entries, md, # links(ino1, dirs), m1, entries), err = err0, p_inode = inode, root.dir?, root[q].dir?, dom of < ino0, abs(root, ROOT_INO)(dirs), afs-cons(dirs, files), fids-cons(root, abs-files(files), abs-of(of)), ispath(q, ROOT_INO, ino1, dirs, files), of-cons(of, dirs, files), pw(user, md), px(user, md), px-parent(user, q, ROOT_INO, dirs, files), str ∈ entries, ino1 ∈ dirs, ⌊err0⌋ , psynced → asynced, entries[str] ∈ dirs ∨ entries[str] ∈ files, links(ino1, dirs) ≠ ∅ ∨ ino1 = ROOT_INO ⊦ [if err = ESUCCESS then {isdir := p_inode.directory; if isdir then if p_inode.ino = ROOT_INO then err := EACCESS else if p_inode.size ≠ 0 then err := ENOTEMPTY}; isdir1 := true; isdir0 := isdir; if isdir1 ∧ ¬ isdir0 then err := ENOTDIR; if ¬ isdir1 ∧ isdir0 then err := EISDIR; err1 := err; if err1 = ESUCCESS then afs_check_commit#(dirs, files; err1; asynced); fs := abs-files(files); if err1 = ESUCCESS then {inode := (ino1 ∈ dirs ⊃ mkinode(ino1, md, true, # links(ino1, dirs), m1, # entries) ;mkinode(ino1, files[ino1].meta, false, files[ino1].nlink, 0, files[ino1].size) ); dent := mkdentry(str, dirs[ino1].entries[str]); afs_rmdir#(; inode, p_inode, dent, err1, dirs, files; asynced); vfs_put_inode#(p_inode, of, asynced; err1, dirs, files)}] ( of-cons(of, dirs, files) ∧ afs-cons(dirs, files) → ⟨posix_rmdir#(q + str ', user, fs, abs-of(of); err2, root; psynced)⟩ (fs = abs-files(files) ∧ abs(root, ROOT_INO)(dirs) ∧ (psynced → asynced) ∧ err1 = err2))