@orygn/opa-mcp 0.5.0 → 0.6.0

package/dist/lib/rego-verify-engine.js

@@ -1,9 +1,9 @@
 import { walkModule } from './rego-ast-walker.js';
-import { inferTypes } from './rego-type-inferencer.js';
-import { createInputVars, encodeRule } from './rego-smt-encoder.js';
+import { collectPathReads, inferTypes } from './rego-type-inferencer.js';
+import { clauseInputPaths, createInputVars, structuralAxioms, encodeRule, } from './rego-smt-encoder.js';
 import { extractCounterexample, formatCounterexample, } from './rego-counterexample.js';
 import { describeProperty } from './rego-property-parser.js';
-import { getZ3, withZ3Lock } from './rego-z3.js';
+import { getZ3, isZ3RecoverableMessage, isZ3UnavailableMessage, withZ3Lock, Z3_SOLVER_MAX_MEMORY_MB, } from './rego-z3.js';
 // Monotonically increasing counter used to generate a unique prefix for all
 // Z3 constant names within each runVerify call. This prevents sort conflicts
 // when the same input path is inferred with different sorts across calls
@@ -17,6 +17,10 @@ const SOLVER_TIMEOUT_MS = 10_000;
  * The caller must pass the JSON-parsed result of `opa parse --format=json`.
  */
 export async function runVerify(ast, property, signal) {
+    return verifyAttempt(ast, property, signal, 0);
+}
+/** One attempt; a fault that cuts it short earns one more on a fresh module. */
+async function verifyAttempt(ast, property, signal, attempt) {
     const walked = walkModule(ast);
     const warnings = [];
     const targetClauses = walked.rules.get(property.ruleName);
@@ -58,6 +62,49 @@ export async function runVerify(ast, property, signal) {
         for (const conflict of typeResult.conflicts) {
             warnings.push(conflict.reason);
         }
+        // How this rule reads each path. Scoped to the rule under test: what
+        // another rule of the module does with a field says nothing about the
+        // inputs that reach this one.
+        const reads = collectPathReads(targetClauses);
+        // Every path this rule reads, with its segments. Also what a witness may
+        // name: a path from another rule has no constraint here, so model
+        // completion would invent a value for it.
+        const rulePaths = new Map();
+        for (const path of clauseInputPaths(targetClauses)) {
+            const segs = walked.inputPaths.get(path);
+            if (segs !== undefined)
+                rulePaths.set(path, segs);
+        }
+        // A field the rule reads beneath is an object in any input that reaches
+        // that read, yet the model gives it one scalar value. Comparing it as a
+        // value in a way the structural axioms do not cover (anything but
+        // equality with a scalar literal or a string built-in) can then be
+        // satisfied by a model whose witness carries the object, on which OPA
+        // decides the comparison the other way; under a negated property the
+        // directions that happen to hold for an object flip. No verdict from such
+        // a model can be trusted, so the rule is reported inconclusive.
+        const comparedParents = [...reads.valueReads]
+            .filter((path) => {
+            const segs = rulePaths.get(path);
+            if (segs === undefined)
+                return false;
+            for (const otherSegs of rulePaths.values()) {
+                if (otherSegs.length > segs.length && segs.every((seg, i) => otherSegs[i] === seg)) {
+                    return true;
+                }
+            }
+            return false;
+        })
+            .sort();
+        if (comparedParents.length > 0) {
+            return inconclusive(property, `Rule "${property.ruleName}" compares ${comparedParents.join(', ')} as a value and also reads a field beneath it. Such a field is an object wherever the deeper read holds, which the encoder cannot model, so verification is inconclusive.`, [
+                ...unsupportedInRule,
+                {
+                    constructType: 'parent_field_compared_as_value',
+                    description: `${comparedParents.join(', ')} compared as a value while a field beneath it is also read`,
+                },
+            ], warnings);
+        }
         signal?.throwIfAborted();
         // Everything below touches the shared Z3 Context, which is one
         // single-threaded WASM heap. Concurrent MCP tool calls must not overlap
@@ -78,110 +125,134 @@ export async function runVerify(ast, property, signal) {
             if (encoded.unencodable) {
                 return inconclusive(property, `Rule "${property.ruleName}" contains a value or operand the encoder cannot represent (for example a null literal). Verification is inconclusive rather than guessed.`, unsupportedInRule, warnings);
             }
-            // Z3's high-level Solver and Model objects use FinalizationRegistry internally
-            // (solver_dec_ref / model_dec_ref) so they are cleaned up when GC'd.
-            // We avoid holding a reference to the Model beyond extractCounterexample so
-            // it becomes eligible for GC as soon as the call returns, reducing WASM heap
-            // pressure under high call volume.
+            // Released in the finally below, along with its model, rather than
+            // left to the collector, which cannot see Z3's memory: measured, that
+            // release alone is what holds 1500 solves at about 210 MB. The
+            // formula's nodes go through z3-solver's finalizers, which rego-z3
+            // holds until no solve is running.
             const solver = new Z3.Solver();
-            // Set timeout to prevent hanging on complex policies
-            solver.set('timeout', SOLVER_TIMEOUT_MS);
-            switch (property.kind) {
-                case 'always_true':
-                    // Prove rule is always true: check if NOT(rule) is satisfiable.
-                    // SAT → counterexample (input where rule is false)
-                    // UNSAT → proven always true
-                    solver.add(Z3.Not(encoded.formula));
-                    break;
-                case 'never_true':
-                    // Prove rule is never true: check if rule IS satisfiable.
-                    // SAT → counterexample (input where rule fires, violating "never")
-                    // UNSAT → proven never true
-                    solver.add(encoded.formula);
-                    break;
-                case 'satisfiable':
-                    // Check if any input satisfies the rule.
-                    // SAT → witness found (not a bug, just a satisfying input)
-                    // UNSAT → rule is vacuously false / dead code
-                    solver.add(encoded.formula);
-                    break;
-            }
-            signal?.throwIfAborted();
-            let solverResult = await solver.check();
-            // Prefer a witness in which every field the rule reads is PRESENT.
-            //
-            // With absence modelled, Z3 will happily satisfy NOT(rule) by omitting a
-            // field, which is sound but unhelpful: "it fails when the input is empty"
-            // is rarely the case a reviewer is chasing. Re-ask with presence forced and
-            // keep that model when one exists, otherwise fall back to the original.
-            // Soundness is unaffected either way, since both are real models.
-            if (solverResult === 'sat' && presenceVars.size > 0) {
-                solver.push();
-                for (const present of presenceVars.values())
-                    solver.add(present);
-                const withPresence = await solver.check();
-                if (withPresence === 'sat') {
-                    solverResult = withPresence;
+            try {
+                // Bounded in time and in memory. The solver's memory bound sits below
+                // the process ceiling so that running out answers "unknown" at a
+                // checkpoint instead of failing an allocation; see rego-z3.ts.
+                solver.set('timeout', SOLVER_TIMEOUT_MS);
+                solver.set('max_memory', Z3_SOLVER_MAX_MEMORY_MB);
+                switch (property.kind) {
+                    case 'always_true':
+                        // Prove rule is always true: check if NOT(rule) is satisfiable.
+                        // SAT → counterexample (input where rule is false)
+                        // UNSAT → proven always true
+                        solver.add(Z3.Not(encoded.formula));
+                        break;
+                    case 'never_true':
+                        // Prove rule is never true: check if rule IS satisfiable.
+                        // SAT → counterexample (input where rule fires, violating "never")
+                        // UNSAT → proven never true
+                        solver.add(encoded.formula);
+                        break;
+                    case 'satisfiable':
+                        // Check if any input satisfies the rule.
+                        // SAT → witness found (not a bug, just a satisfying input)
+                        // UNSAT → rule is vacuously false / dead code
+                        solver.add(encoded.formula);
+                        break;
                 }
-                else {
-                    solver.pop();
+                signal?.throwIfAborted();
+                // What any real input looks like, alongside the property.
+                for (const axiom of structuralAxioms(Z3, walked.inputPaths, reads.scalarPaths, presenceVars)) {
+                    solver.add(axiom);
                 }
-            }
-            if (solverResult === 'unknown') {
-                return inconclusive(property, `Z3 solver returned "unknown" (timeout or resource limit reached after ${SOLVER_TIMEOUT_MS}ms). The policy may be too complex for automated verification.`, unsupportedInRule, warnings);
-            }
-            if (solverResult === 'unsat') {
+                let solverResult = await solver.check();
+                // Prefer a witness in which every field the rule reads is PRESENT.
+                //
+                // With absence modelled, Z3 will happily satisfy NOT(rule) by omitting a
+                // field, which is sound but unhelpful: "it fails when the input is empty"
+                // is rarely the case a reviewer is chasing. Re-ask with presence forced and
+                // keep that model when one exists, otherwise fall back to the original.
+                // Soundness is unaffected either way, since both are real models.
+                if (solverResult === 'sat' && presenceVars.size > 0) {
+                    solver.push();
+                    for (const present of presenceVars.values())
+                        solver.add(present);
+                    const withPresence = await solver.check();
+                    if (withPresence === 'sat') {
+                        solverResult = withPresence;
+                    }
+                    else {
+                        // The model belongs to the last check; after the pop that was an
+                        // unsat one, so ask again before reading it.
+                        solver.pop();
+                        solverResult = await solver.check();
+                    }
+                }
+                if (solverResult === 'unknown') {
+                    return inconclusive(property, `Z3 solver returned "unknown": the ${SOLVER_TIMEOUT_MS}ms time limit or the ${Z3_SOLVER_MAX_MEMORY_MB} MB memory limit was reached. The policy may be too complex for automated verification.`, unsupportedInRule, warnings);
+                }
+                if (solverResult === 'unsat') {
+                    if (property.kind === 'satisfiable') {
+                        // No satisfying input exists -- rule is dead code or has contradictory conditions.
+                        return {
+                            verdict: 'unsatisfiable',
+                            property: describeProperty(property),
+                            rule: property.ruleName,
+                            unsupportedConstructs: unsupportedInRule,
+                            warnings,
+                            message: `UNSATISFIABLE: No input can make "${property.ruleName}" true. The rule may be dead code or have contradictory conditions.`,
+                        };
+                    }
+                    // For always_true / never_true: UNSAT on the negation = property proven
+                    return {
+                        verdict: 'proven',
+                        property: describeProperty(property),
+                        rule: property.ruleName,
+                        unsupportedConstructs: unsupportedInRule,
+                        warnings,
+                        message: `PROVEN: ${describeProperty(property)}.`,
+                    };
+                }
+                // SAT: read the model and release it as soon as the witness is out; it
+                // is Z3 memory the collector cannot see.
+                const witnessVars = new Map([...inputVars].filter(([path]) => rulePaths.has(path)));
+                const witnessPresence = new Map([...presenceVars].filter(([path]) => rulePaths.has(path)));
+                const model = solver.model();
+                let ce;
+                try {
+                    ce = extractCounterexample(model, witnessVars, typeResult.sorts, witnessPresence);
+                }
+                finally {
+                    model.release();
+                }
+                const ceFormatted = formatCounterexample(ce);
                 if (property.kind === 'satisfiable') {
-                    // No satisfying input exists -- rule is dead code or has contradictory conditions.
                     return {
-                        verdict: 'unsatisfiable',
+                        verdict: 'proven',
                         property: describeProperty(property),
                         rule: property.ruleName,
+                        counterexample: ce,
+                        counterexampleFormatted: ceFormatted,
                         unsupportedConstructs: unsupportedInRule,
                         warnings,
-                        message: `UNSATISFIABLE: No input can make "${property.ruleName}" true. The rule may be dead code or have contradictory conditions.`,
+                        message: `SATISFIABLE: Found an input that makes "${property.ruleName}" true.\n\nWitness input:\n${ceFormatted}`,
                     };
                 }
-                // For always_true / never_true: UNSAT on the negation = property proven
+                // always_true / never_true: SAT means we found a violation
+                const ceLabel = property.kind === 'always_true'
+                    ? 'input where rule is FALSE'
+                    : 'input where rule is TRUE (violates "never")';
                 return {
-                    verdict: 'proven',
-                    property: describeProperty(property),
-                    rule: property.ruleName,
-                    unsupportedConstructs: unsupportedInRule,
-                    warnings,
-                    message: `PROVEN: ${describeProperty(property)}.`,
-                };
-            }
-            // SAT: pass solver.model() inline so the Model object is not kept alive
-            // beyond extractCounterexample -- it becomes GC-eligible immediately after.
-            const ce = extractCounterexample(solver.model(), inputVars, typeResult.sorts, presenceVars);
-            const ceFormatted = formatCounterexample(ce);
-            if (property.kind === 'satisfiable') {
-                return {
-                    verdict: 'proven',
+                    verdict: 'counterexample',
                     property: describeProperty(property),
                     rule: property.ruleName,
                     counterexample: ce,
                     counterexampleFormatted: ceFormatted,
                     unsupportedConstructs: unsupportedInRule,
                     warnings,
-                    message: `SATISFIABLE: Found an input that makes "${property.ruleName}" true.\n\nWitness input:\n${ceFormatted}`,
+                    message: `COUNTEREXAMPLE: Property does NOT hold. Found ${ceLabel}:\n\n${ceFormatted}`,
                 };
             }
-            // always_true / never_true: SAT means we found a violation
-            const ceLabel = property.kind === 'always_true'
-                ? 'input where rule is FALSE'
-                : 'input where rule is TRUE (violates "never")';
-            return {
-                verdict: 'counterexample',
-                property: describeProperty(property),
-                rule: property.ruleName,
-                counterexample: ce,
-                counterexampleFormatted: ceFormatted,
-                unsupportedConstructs: unsupportedInRule,
-                warnings,
-                message: `COUNTEREXAMPLE: Property does NOT hold. Found ${ceLabel}:\n\n${ceFormatted}`,
-            };
+            finally {
+                solver.release();
+            }
         });
     }
     catch (e) {
@@ -191,10 +262,20 @@ export async function runVerify(ast, property, signal) {
         if (signal?.aborted)
             throw e;
         const detail = e instanceof Error ? e.message : String(e);
+        // A fault cut this solve short; the next getZ3 brings up a fresh module,
+        // so the call is worth one more try before it is reported.
+        if (attempt === 0 && isZ3RecoverableMessage(detail)) {
+            return verifyAttempt(ast, property, signal, 1);
+        }
         const isSortConflict = /sort/i.test(detail) && /incompat/i.test(detail);
-        return inconclusive(property, isSortConflict
-            ? 'The rule constrains an input field to conflicting types (for example, compared against both a number and a string), which cannot be encoded for SMT solving.'
-            : 'Verification could not be completed due to an internal encoding or solver error.', [
+        // A dead Z3 says so in its message; that is the one thing the caller can
+        // act on (restart), so it goes through verbatim.
+        const z3Down = isZ3UnavailableMessage(detail);
+        return inconclusive(property, z3Down
+            ? detail
+            : isSortConflict
+                ? 'The rule constrains an input field to conflicting types (for example, compared against both a number and a string), which cannot be encoded for SMT solving.'
+                : 'Verification could not be completed due to an internal encoding or solver error.', [
             ...unsupportedInRule,
             {
                 constructType: isSortConflict ? 'type_conflict' : 'encoding_error',

package/dist/lib/rego-verify-engine.js.map

@@ -1 +1 @@
-{"version":3,"file":"rego-verify-engine.js","sourceRoot":"","sources":["../../src/lib/rego-verify-engine.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GAErB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAuB,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAEjD,4EAA4E;AAC5E,6EAA6E;AAC7E,yEAAyE;AACzE,0EAA0E;AAC1E,qBAAqB;AACrB,IAAI,kBAAkB,GAAG,CAAC,CAAC;AAe3B,6CAA6C;AAC7C,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAc,EACd,QAAwB,EACxB,MAAoB;IAEpB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE1D,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,+DAA+D;IAC/D,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAAU,CAAC;IACnD,KAAK,MAAM,MAAM,IAAI,aAAa,IAAI,EAAE,EAAE,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa;gBAAE,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,MAAM,iBAAiB,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACxD,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAC9C,CAAC;IAEF,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,gFAAgF;QAChF,mEAAmE;QACnE,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,OAAO,YAAY,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,oBAAoB,CAAC,QAAQ,EAAE,YAAY,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,YAAY,CACjB,QAAQ,EACR,SAAS,QAAQ,CAAC,QAAQ,qCAAqC,EAC/D,iBAAiB,EACjB,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,MAAM,uBAAuB,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACvD,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CACpD,CAAC;IACF,IAAI,uBAAuB,EAAE,CAAC;QAC5B,OAAO,YAAY,CACjB,QAAQ,EACR,SAAS,QAAQ,CAAC,QAAQ,sKAAsK,EAChM,iBAAiB,EACjB,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,4EAA4E;IAC5E,0EAA0E;IAC1E,6EAA6E;IAC7E,8EAA8E;IAC9E,2EAA2E;IAC3E,oBAAoB;IACpB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7E,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAED,MAAM,EAAE,cAAc,EAAE,CAAC;QAEzB,+DAA+D;QAC/D,wEAAwE;QACxE,kEAAkE;QAClE,uEAAuE;QACvE,4BAA4B;QAC5B,OAAO,MAAM,UAAU,CAAC,KAAK,IAAI,EAAE;YACjC,MAAM,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;YAEzB,MAAM,EAAE,cAAc,EAAE,CAAC;YAEzB,MAAM,MAAM,GAAG,IAAI,kBAAkB,EAAE,EAAE,CAAC;YAC1C,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,eAAe,CACjE,EAAE,EACF,MAAM,CAAC,UAAU,EACjB,UAAU,CAAC,KAAK,EAChB,MAAM,CACP,CAAC;YACF,MAAM,GAAG,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YAC7E,wEAAwE;YACxE,6EAA6E;YAC7E,oEAAoE;YACpE,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvF,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YAEnC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBACxB,OAAO,YAAY,CACjB,QAAQ,EACR,SAAS,QAAQ,CAAC,QAAQ,4IAA4I,EACtK,iBAAiB,EACjB,QAAQ,CACT,CAAC;YACJ,CAAC;YAED,+EAA+E;YAC/E,qEAAqE;YACrE,4EAA4E;YAC5E,6EAA6E;YAC7E,mCAAmC;YACnC,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;YAE/B,qDAAqD;YACrD,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;YAEzC,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACtB,KAAK,aAAa;oBAChB,gEAAgE;oBAChE,mDAAmD;oBACnD,6BAA6B;oBAC7B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;oBACpC,MAAM;gBACR,KAAK,YAAY;oBACf,0DAA0D;oBAC1D,mEAAmE;oBACnE,4BAA4B;oBAC5B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;oBAC5B,MAAM;gBACR,KAAK,aAAa;oBAChB,yCAAyC;oBACzC,2DAA2D;oBAC3D,8CAA8C;oBAC9C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;oBAC5B,MAAM;YACV,CAAC;YAED,MAAM,EAAE,cAAc,EAAE,CAAC;YAEzB,IAAI,YAAY,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YAExC,mEAAmE;YACnE,EAAE;YACF,yEAAyE;YACzE,0EAA0E;YAC1E,4EAA4E;YAC5E,wEAAwE;YACxE,kEAAkE;YAClE,IAAI,YAAY,KAAK,KAAK,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACpD,MAAM,CAAC,IAAI,EAAE,CAAC;gBACd,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE;oBAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACjE,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC1C,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;oBAC3B,YAAY,GAAG,YAAY,CAAC;gBAC9B,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,GAAG,EAAE,CAAC;gBACf,CAAC;YACH,CAAC;YAED,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,YAAY,CACjB,QAAQ,EACR,yEAAyE,iBAAiB,gEAAgE,EAC1J,iBAAiB,EACjB,QAAQ,CACT,CAAC;YACJ,CAAC;YAED,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;gBAC7B,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBACpC,mFAAmF;oBACnF,OAAO;wBACL,OAAO,EAAE,eAAe;wBACxB,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC;wBACpC,IAAI,EAAE,QAAQ,CAAC,QAAQ;wBACvB,qBAAqB,EAAE,iBAAiB;wBACxC,QAAQ;wBACR,OAAO,EAAE,qCAAqC,QAAQ,CAAC,QAAQ,qEAAqE;qBACrI,CAAC;gBACJ,CAAC;gBACD,wEAAwE;gBACxE,OAAO;oBACL,OAAO,EAAE,QAAQ;oBACjB,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC;oBACpC,IAAI,EAAE,QAAQ,CAAC,QAAQ;oBACvB,qBAAqB,EAAE,iBAAiB;oBACxC,QAAQ;oBACR,OAAO,EAAE,WAAW,gBAAgB,CAAC,QAAQ,CAAC,GAAG;iBAClD,CAAC;YACJ,CAAC;YAED,wEAAwE;YACxE,4EAA4E;YAC5E,MAAM,EAAE,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YAC5F,MAAM,WAAW,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;YAE7C,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACpC,OAAO;oBACL,OAAO,EAAE,QAAQ;oBACjB,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC;oBACpC,IAAI,EAAE,QAAQ,CAAC,QAAQ;oBACvB,cAAc,EAAE,EAAE;oBAClB,uBAAuB,EAAE,WAAW;oBACpC,qBAAqB,EAAE,iBAAiB;oBACxC,QAAQ;oBACR,OAAO,EAAE,2CAA2C,QAAQ,CAAC,QAAQ,8BAA8B,WAAW,EAAE;iBACjH,CAAC;YACJ,CAAC;YAED,2DAA2D;YAC3D,MAAM,OAAO,GACX,QAAQ,CAAC,IAAI,KAAK,aAAa;gBAC7B,CAAC,CAAC,2BAA2B;gBAC7B,CAAC,CAAC,6CAA6C,CAAC;YAEpD,OAAO;gBACL,OAAO,EAAE,gBAAgB;gBACzB,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC;gBACpC,IAAI,EAAE,QAAQ,CAAC,QAAQ;gBACvB,cAAc,EAAE,EAAE;gBAClB,uBAAuB,EAAE,WAAW;gBACpC,qBAAqB,EAAE,iBAAiB;gBACxC,QAAQ;gBACR,OAAO,EAAE,iDAAiD,OAAO,QAAQ,WAAW,EAAE;aACvF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,sEAAsE;QACtE,uEAAuE;QACvE,qDAAqD;QACrD,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxE,OAAO,YAAY,CACjB,QAAQ,EACR,cAAc;YACZ,CAAC,CAAC,8JAA8J;YAChK,CAAC,CAAC,kFAAkF,EACtF;YACE,GAAG,iBAAiB;YACpB;gBACE,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,gBAAgB;gBAClE,WAAW,EAAE,MAAM;aACpB;SACF,EACD,QAAQ,CACT,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CACnB,QAAwB,EACxB,MAAc,EACd,qBAA4E,EAC5E,QAAkB;IAElB,OAAO;QACL,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC;QACpC,IAAI,EAAE,QAAQ,CAAC,QAAQ;QACvB,qBAAqB;QACrB,QAAQ;QACR,OAAO,EAAE,iBAAiB,MAAM,EAAE;KACnC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAC3B,QAAwB,EACxB,YAAqB,EACrB,qBAA4E,EAC5E,QAAkB;IAElB,yEAAyE;IACzE,0DAA0D;IAC1D,MAAM,YAAY,GAAwB,EAAE,CAAC;IAC7C,MAAM,cAAc,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAE/B,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,aAAa;YAChB,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,QAAQ;oBACjB,QAAQ,EAAE,IAAI;oBACd,IAAI,EAAE,IAAI;oBACV,qBAAqB;oBACrB,QAAQ;oBACR,OAAO,EAAE,WAAW,IAAI,WAAW,IAAI,2DAA2D;iBACnG,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,gBAAgB;gBACzB,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,IAAI;gBACV,cAAc,EAAE,YAAY;gBAC5B,uBAAuB,EAAE,cAAc;gBACvC,qBAAqB;gBACrB,QAAQ;gBACR,OAAO,EAAE,yBAAyB,IAAI,2GAA2G;aAClJ,CAAC;QAEJ,KAAK,YAAY;YACf,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO;oBACL,OAAO,EAAE,QAAQ;oBACjB,QAAQ,EAAE,IAAI;oBACd,IAAI,EAAE,IAAI;oBACV,qBAAqB;oBACrB,QAAQ;oBACR,OAAO,EAAE,WAAW,IAAI,WAAW,IAAI,2DAA2D;iBACnG,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,gBAAgB;gBACzB,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,IAAI;gBACV,cAAc,EAAE,YAAY;gBAC5B,uBAAuB,EAAE,cAAc;gBACvC,qBAAqB;gBACrB,QAAQ;gBACR,OAAO,EAAE,yBAAyB,IAAI,0GAA0G;aACjJ,CAAC;QAEJ,KAAK,aAAa;YAChB,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,QAAQ;oBACjB,QAAQ,EAAE,IAAI;oBACd,IAAI,EAAE,IAAI;oBACV,cAAc,EAAE,YAAY;oBAC5B,uBAAuB,EAAE,cAAc;oBACvC,qBAAqB;oBACrB,QAAQ;oBACR,OAAO,EAAE,sBAAsB,IAAI,kEAAkE;iBACtG,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,eAAe;gBACxB,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,IAAI;gBACV,qBAAqB;gBACrB,QAAQ;gBACR,OAAO,EAAE,wBAAwB,IAAI,sEAAsE;aAC5G,CAAC;IACN,CAAC;AACH,CAAC"}
+{"version":3,"file":"rego-verify-engine.js","sourceRoot":"","sources":["../../src/lib/rego-verify-engine.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,UAAU,GACX,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GAErB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAuB,MAAM,2BAA2B,CAAC;AAClF,OAAO,EACL,KAAK,EACL,sBAAsB,EACtB,sBAAsB,EACtB,UAAU,EACV,uBAAuB,GACxB,MAAM,cAAc,CAAC;AAEtB,4EAA4E;AAC5E,6EAA6E;AAC7E,yEAAyE;AACzE,0EAA0E;AAC1E,qBAAqB;AACrB,IAAI,kBAAkB,GAAG,CAAC,CAAC;AAe3B,6CAA6C;AAC7C,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAc,EACd,QAAwB,EACxB,MAAoB;IAEpB,OAAO,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,aAAa,CAC1B,GAAc,EACd,QAAwB,EACxB,MAA+B,EAC/B,OAAe;IAEf,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE1D,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,+DAA+D;IAC/D,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAAU,CAAC;IACnD,KAAK,MAAM,MAAM,IAAI,aAAa,IAAI,EAAE,EAAE,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa;gBAAE,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,MAAM,iBAAiB,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACxD,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAC9C,CAAC;IAEF,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,gFAAgF;QAChF,mEAAmE;QACnE,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,OAAO,YAAY,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,oBAAoB,CAAC,QAAQ,EAAE,YAAY,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,YAAY,CACjB,QAAQ,EACR,SAAS,QAAQ,CAAC,QAAQ,qCAAqC,EAC/D,iBAAiB,EACjB,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,MAAM,uBAAuB,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACvD,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CACpD,CAAC;IACF,IAAI,uBAAuB,EAAE,CAAC;QAC5B,OAAO,YAAY,CACjB,QAAQ,EACR,SAAS,QAAQ,CAAC,QAAQ,sKAAsK,EAChM,iBAAiB,EACjB,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,4EAA4E;IAC5E,0EAA0E;IAC1E,6EAA6E;IAC7E,8EAA8E;IAC9E,2EAA2E;IAC3E,oBAAoB;IACpB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7E,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAED,qEAAqE;QACrE,sEAAsE;QACtE,8BAA8B;QAC9B,MAAM,KAAK,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAC9C,yEAAyE;QACzE,kEAAkE;QAClE,0CAA0C;QAC1C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,CAAC;QAED,wEAAwE;QACxE,wEAAwE;QACxE,kEAAkE;QAClE,mEAAmE;QACnE,sEAAsE;QACtE,qEAAqE;QACrE,0EAA0E;QAC1E,gEAAgE;QAChE,MAAM,eAAe,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;aAC1C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACf,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YACrC,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC3C,IAAI,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;oBACnF,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;aACD,IAAI,EAAE,CAAC;QACV,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,YAAY,CACjB,QAAQ,EACR,SAAS,QAAQ,CAAC,QAAQ,cAAc,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,2KAA2K,EAC7O;gBACE,GAAG,iBAAiB;gBACpB;oBACE,aAAa,EAAE,gCAAgC;oBAC/C,WAAW,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,4DAA4D;iBACvG;aACF,EACD,QAAQ,CACT,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,cAAc,EAAE,CAAC;QAEzB,+DAA+D;QAC/D,wEAAwE;QACxE,kEAAkE;QAClE,uEAAuE;QACvE,4BAA4B;QAC5B,OAAO,MAAM,UAAU,CAAC,KAAK,IAAI,EAAE;YACjC,MAAM,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC;YAEzB,MAAM,EAAE,cAAc,EAAE,CAAC;YAEzB,MAAM,MAAM,GAAG,IAAI,kBAAkB,EAAE,EAAE,CAAC;YAC1C,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,eAAe,CACjE,EAAE,EACF,MAAM,CAAC,UAAU,EACjB,UAAU,CAAC,KAAK,EAChB,MAAM,CACP,CAAC;YACF,MAAM,GAAG,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YAC7E,wEAAwE;YACxE,6EAA6E;YAC7E,oEAAoE;YACpE,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvF,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YAEnC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBACxB,OAAO,YAAY,CACjB,QAAQ,EACR,SAAS,QAAQ,CAAC,QAAQ,4IAA4I,EACtK,iBAAiB,EACjB,QAAQ,CACT,CAAC;YACJ,CAAC;YAED,mEAAmE;YACnE,sEAAsE;YACtE,+DAA+D;YAC/D,mEAAmE;YACnE,mCAAmC;YACnC,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,sEAAsE;gBACtE,iEAAiE;gBACjE,+DAA+D;gBAC/D,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;gBACzC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;gBAClD,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACtB,KAAK,aAAa;wBAChB,gEAAgE;wBAChE,mDAAmD;wBACnD,6BAA6B;wBAC7B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;wBACpC,MAAM;oBACR,KAAK,YAAY;wBACf,0DAA0D;wBAC1D,mEAAmE;wBACnE,4BAA4B;wBAC5B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;wBAC5B,MAAM;oBACR,KAAK,aAAa;wBAChB,yCAAyC;wBACzC,2DAA2D;wBAC3D,8CAA8C;wBAC9C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;wBAC5B,MAAM;gBACV,CAAC;gBAED,MAAM,EAAE,cAAc,EAAE,CAAC;gBAEzB,0DAA0D;gBAC1D,KAAK,MAAM,KAAK,IAAI,gBAAgB,CAClC,EAAE,EACF,MAAM,CAAC,UAAU,EACjB,KAAK,CAAC,WAAW,EACjB,YAAY,CACb,EAAE,CAAC;oBACF,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACpB,CAAC;gBAED,IAAI,YAAY,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBAExC,mEAAmE;gBACnE,EAAE;gBACF,yEAAyE;gBACzE,0EAA0E;gBAC1E,4EAA4E;gBAC5E,wEAAwE;gBACxE,kEAAkE;gBAClE,IAAI,YAAY,KAAK,KAAK,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;oBACpD,MAAM,CAAC,IAAI,EAAE,CAAC;oBACd,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE;wBAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACjE,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;oBAC1C,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;wBAC3B,YAAY,GAAG,YAAY,CAAC;oBAC9B,CAAC;yBAAM,CAAC;wBACN,iEAAiE;wBACjE,6CAA6C;wBAC7C,MAAM,CAAC,GAAG,EAAE,CAAC;wBACb,YAAY,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;oBACtC,CAAC;gBACH,CAAC;gBAED,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;oBAC/B,OAAO,YAAY,CACjB,QAAQ,EACR,qCAAqC,iBAAiB,wBAAwB,uBAAuB,yFAAyF,EAC9L,iBAAiB,EACjB,QAAQ,CACT,CAAC;gBACJ,CAAC;gBAED,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;oBAC7B,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;wBACpC,mFAAmF;wBACnF,OAAO;4BACL,OAAO,EAAE,eAAe;4BACxB,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC;4BACpC,IAAI,EAAE,QAAQ,CAAC,QAAQ;4BACvB,qBAAqB,EAAE,iBAAiB;4BACxC,QAAQ;4BACR,OAAO,EAAE,qCAAqC,QAAQ,CAAC,QAAQ,qEAAqE;yBACrI,CAAC;oBACJ,CAAC;oBACD,wEAAwE;oBACxE,OAAO;wBACL,OAAO,EAAE,QAAQ;wBACjB,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC;wBACpC,IAAI,EAAE,QAAQ,CAAC,QAAQ;wBACvB,qBAAqB,EAAE,iBAAiB;wBACxC,QAAQ;wBACR,OAAO,EAAE,WAAW,gBAAgB,CAAC,QAAQ,CAAC,GAAG;qBAClD,CAAC;gBACJ,CAAC;gBAED,uEAAuE;gBACvE,yCAAyC;gBACzC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACpF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC7B,IAAI,EAAuB,CAAC;gBAC5B,IAAI,CAAC;oBACH,EAAE,GAAG,qBAAqB,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;gBACpF,CAAC;wBAAS,CAAC;oBACT,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,CAAC;gBACD,MAAM,WAAW,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;gBAE7C,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBACpC,OAAO;wBACL,OAAO,EAAE,QAAQ;wBACjB,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC;wBACpC,IAAI,EAAE,QAAQ,CAAC,QAAQ;wBACvB,cAAc,EAAE,EAAE;wBAClB,uBAAuB,EAAE,WAAW;wBACpC,qBAAqB,EAAE,iBAAiB;wBACxC,QAAQ;wBACR,OAAO,EAAE,2CAA2C,QAAQ,CAAC,QAAQ,8BAA8B,WAAW,EAAE;qBACjH,CAAC;gBACJ,CAAC;gBAED,2DAA2D;gBAC3D,MAAM,OAAO,GACX,QAAQ,CAAC,IAAI,KAAK,aAAa;oBAC7B,CAAC,CAAC,2BAA2B;oBAC7B,CAAC,CAAC,6CAA6C,CAAC;gBAEpD,OAAO;oBACL,OAAO,EAAE,gBAAgB;oBACzB,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC;oBACpC,IAAI,EAAE,QAAQ,CAAC,QAAQ;oBACvB,cAAc,EAAE,EAAE;oBAClB,uBAAuB,EAAE,WAAW;oBACpC,qBAAqB,EAAE,iBAAiB;oBACxC,QAAQ;oBACR,OAAO,EAAE,iDAAiD,OAAO,QAAQ,WAAW,EAAE;iBACvF,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,sEAAsE;QACtE,uEAAuE;QACvE,qDAAqD;QACrD,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1D,yEAAyE;QACzE,2DAA2D;QAC3D,IAAI,OAAO,KAAK,CAAC,IAAI,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,OAAO,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxE,yEAAyE;QACzE,iDAAiD;QACjD,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAC9C,OAAO,YAAY,CACjB,QAAQ,EACR,MAAM;YACJ,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,cAAc;gBACd,CAAC,CAAC,8JAA8J;gBAChK,CAAC,CAAC,kFAAkF,EACxF;YACE,GAAG,iBAAiB;YACpB;gBACE,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,gBAAgB;gBAClE,WAAW,EAAE,MAAM;aACpB;SACF,EACD,QAAQ,CACT,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CACnB,QAAwB,EACxB,MAAc,EACd,qBAA4E,EAC5E,QAAkB;IAElB,OAAO;QACL,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC;QACpC,IAAI,EAAE,QAAQ,CAAC,QAAQ;QACvB,qBAAqB;QACrB,QAAQ;QACR,OAAO,EAAE,iBAAiB,MAAM,EAAE;KACnC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAC3B,QAAwB,EACxB,YAAqB,EACrB,qBAA4E,EAC5E,QAAkB;IAElB,yEAAyE;IACzE,0DAA0D;IAC1D,MAAM,YAAY,GAAwB,EAAE,CAAC;IAC7C,MAAM,cAAc,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAE/B,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,aAAa;YAChB,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,QAAQ;oBACjB,QAAQ,EAAE,IAAI;oBACd,IAAI,EAAE,IAAI;oBACV,qBAAqB;oBACrB,QAAQ;oBACR,OAAO,EAAE,WAAW,IAAI,WAAW,IAAI,2DAA2D;iBACnG,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,gBAAgB;gBACzB,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,IAAI;gBACV,cAAc,EAAE,YAAY;gBAC5B,uBAAuB,EAAE,cAAc;gBACvC,qBAAqB;gBACrB,QAAQ;gBACR,OAAO,EAAE,yBAAyB,IAAI,2GAA2G;aAClJ,CAAC;QAEJ,KAAK,YAAY;YACf,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO;oBACL,OAAO,EAAE,QAAQ;oBACjB,QAAQ,EAAE,IAAI;oBACd,IAAI,EAAE,IAAI;oBACV,qBAAqB;oBACrB,QAAQ;oBACR,OAAO,EAAE,WAAW,IAAI,WAAW,IAAI,2DAA2D;iBACnG,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,gBAAgB;gBACzB,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,IAAI;gBACV,cAAc,EAAE,YAAY;gBAC5B,uBAAuB,EAAE,cAAc;gBACvC,qBAAqB;gBACrB,QAAQ;gBACR,OAAO,EAAE,yBAAyB,IAAI,0GAA0G;aACjJ,CAAC;QAEJ,KAAK,aAAa;YAChB,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,QAAQ;oBACjB,QAAQ,EAAE,IAAI;oBACd,IAAI,EAAE,IAAI;oBACV,cAAc,EAAE,YAAY;oBAC5B,uBAAuB,EAAE,cAAc;oBACvC,qBAAqB;oBACrB,QAAQ;oBACR,OAAO,EAAE,sBAAsB,IAAI,kEAAkE;iBACtG,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,eAAe;gBACxB,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,IAAI;gBACV,qBAAqB;gBACrB,QAAQ;gBACR,OAAO,EAAE,wBAAwB,IAAI,sEAAsE;aAC5G,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/lib/rego-z3.d.ts

@@ -1,10 +1,66 @@
 import type { init as Z3Init } from 'z3-solver';
 export type Z3Context = ReturnType<Awaited<ReturnType<typeof Z3Init>>['Context']>;
+/**
+ * Ceiling on Z3's own allocations, in megabytes. Reached, Z3 raises an
+ * ordinary exception that the engine turns into an inconclusive verdict.
+ * Without it the WASM heap itself runs out, and that abort surfaces outside
+ * every try/catch as an uncaughtException that ends the server.
+ */
+export declare const Z3_MEMORY_MAX_MB = 1024;
+/**
+ * The solver's own bound, checked at its checkpoints, where running out
+ * degrades to an "unknown" answer. It sits well below the process ceiling on
+ * purpose: at the same value the allocator's exception won the race, and an
+ * allocation failing inside a destructor ends in an abort rather than an
+ * error. Measured in review: equal caps aborted four times in four; a lower
+ * solver bound answered "unknown" four times in four.
+ */
+export declare const Z3_SOLVER_MAX_MEMORY_MB = 768;
 /**
  * Return the shared Z3 Context, initializing WASM on first call.
  * Safe to call from concurrent async paths.
  */
 export declare function getZ3(): Promise<Z3Context>;
+/** Read back a Z3 global parameter, after initialisation. */
+export declare function getZ3Param(name: string): Promise<string | null>;
+/** Whether a Z3 critical section is running right now. */
+export declare function isZ3Busy(): boolean;
+/**
+ * Give up on the Z3 module in use. Called when it failed outside a try/catch:
+ * the heap it lives in cannot be trusted. The next call brings up a fresh
+ * module, a bounded number of times per process.
+ */
+export declare function markZ3Unusable(reason: string): void;
+/**
+ * Whether an error message is one of the two this module produces once Z3
+ * has been given up on. The engine passes such a message through to the
+ * caller verbatim, since a restart is the one thing they can do about it.
+ */
+export declare function isZ3UnavailableMessage(detail: string): boolean;
+/**
+ * Whether a failure is the solve in flight being cut short by a fault, which
+ * a fresh module can answer: the engine retries such a call once.
+ */
+export declare function isZ3RecoverableMessage(detail: string): boolean;
+/**
+ * How many fresh modules this process may still bring up after a fault.
+ * Three for the life of the process, however far apart the faults: each
+ * retained instance costs memory, and a fourth fault is a pattern to
+ * restart out of, not to ride.
+ */
+export declare function z3RecoveriesLeft(): number;
+/** For tests: how many finalizers are waiting for the open section to close. */
+export declare function deferredFinalizersForTesting(): number;
+/**
+ * For tests: what z3-solver's finalizers go through. Runs at once when no
+ * section is open, otherwise once the open one closes.
+ */
+export declare function enqueueFinalizerForTesting(finalizer: () => void): void;
+/**
+ * Whether an uncaught error is the WASM heap giving out, rather than some
+ * unrelated failure that happened while a solve was running.
+ */
+export declare function isZ3Failure(e: unknown): boolean;
 /**
  * Run `fn` with exclusive access to the shared Z3 Context.
  *

package/dist/lib/rego-z3.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rego-z3.d.ts","sourceRoot":"","sources":["../../src/lib/rego-z3.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,WAAW,CAAC;AAKhD,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAKlF;;;GAGG;AACH,wBAAsB,KAAK,IAAI,OAAO,CAAC,SAAS,CAAC,CAKhD;AASD;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAapE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAGxC"}
+{"version":3,"file":"rego-z3.d.ts","sourceRoot":"","sources":["../../src/lib/rego-z3.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,WAAW,CAAC;AAKhD,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAIlF;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAsH3C;;;GAGG;AACH,wBAAsB,KAAK,IAAI,OAAO,CAAC,SAAS,CAAC,CA+BhD;AAED,6DAA6D;AAC7D,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAGrE;AAED,0DAA0D;AAC1D,wBAAgB,QAAQ,IAAI,OAAO,CAElC;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAYnD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,gFAAgF;AAChF,wBAAgB,4BAA4B,IAAI,MAAM,CAErD;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,IAAI,GAAG,IAAI,CAGtE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAiB/C;AASD;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CA2BpE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAUxC"}