kibi-cli 2.31.1 → 2.35.1

package/dist/operations/proof/code-models.d.ts

@@ -0,0 +1,96 @@
+import type { OperationContext } from "../../public/operations/runtime-types.js";
+import type { ProofContract } from "../../public/proof-protocol.js";
+import { type LanguageSpec } from "./regular-language.js";
+/** The most predicate calls one rule certificate may need. */
+export declare const MAX_TABLE_ROWS = 100000;
+export type Resolved = {
+    file: string;
+    export: string;
+};
+export type TableRow = Readonly<{
+    args: readonly string[];
+    value?: boolean;
+    error?: string;
+}>;
+/** What Kibi read for a rule certificate: domains and predicate tables. */
+export type RuleModel = Readonly<{
+    domains: Readonly<Record<string, readonly string[]>>;
+    predicates: Readonly<Record<string, readonly TableRow[]>>;
+}>;
+/** What Kibi read for a state_machine certificate. */
+export type MachineModel = Readonly<{
+    states: readonly string[];
+    transitions: readonly (readonly [string, string])[];
+    initial?: readonly string[];
+}>;
+/** What Kibi read for a regex certificate. */
+export type PatternModel = Readonly<{
+    type: "regexp";
+    source: string;
+    flags: string;
+    flavor: "js" | "python";
+}> | Readonly<{
+    type: "string";
+    value: string;
+}>;
+/**
+ * Run one evaluation plan (table, machine or pattern mode) against the code
+ * files it names, in the language of those files.
+ */
+export declare function evaluateCodeModel<T>(workspaceRoot: string, files: readonly Resolved[], plan: Record<string, unknown>): {
+    ok: true;
+    model: T;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Evaluate every predicate a rule contract names over every combination of
+ * its argument domains, with the argument types the certificate declares.
+ */
+export declare function evaluateRuleModel(context: OperationContext, contract: ProofContract, argTypes: Readonly<Record<string, readonly string[]>>): Promise<{
+    ok: true;
+    model: RuleModel;
+} | {
+    ok: false;
+    reason: string;
+}>;
+/** Read a state machine's states, transitions and initial states. */
+export declare function evaluateMachine(context: OperationContext, contract: ProofContract): Promise<{
+    ok: true;
+    model: MachineModel;
+} | {
+    ok: false;
+    reason: string;
+}>;
+/** Read the pattern or string a regex contract's pattern_source exports. */
+export declare function evaluatePattern(context: OperationContext, contract: ProofContract): Promise<{
+    ok: true;
+    model: PatternModel;
+} | {
+    ok: false;
+    reason: string;
+}>;
+/**
+ * A rule certificate re-checks only when its domains and every predicate
+ * table are what Kibi reads from the code: the same values, and the same
+ * decision for every combination of arguments.
+ */
+export declare function ruleCertificateProblem(context: OperationContext, contract: ProofContract, certificate: Record<string, unknown>): Promise<string | null>;
+/** A state_machine certificate re-checks only when it is the code's machine. */
+export declare function machineCertificateProblem(context: OperationContext, contract: ProofContract, certificate: Record<string, unknown>): Promise<string | null>;
+/** A regex certificate re-checks only when it holds the code's own pattern. */
+export declare function patternCertificateProblem(context: OperationContext, contract: ProofContract, certificate: Record<string, unknown>): Promise<string | null>;
+/** The fact's pattern: a JavaScript pattern with the u flag, matched whole. */
+export declare function factPattern(source: string): LanguageSpec;
+/**
+ * Whether the code's string or pattern meets a string fact's constraint,
+ * decided exactly. For a string constant: eq and neq compare it, matches
+ * tests it against the fact's pattern. For a pattern (the strings a
+ * validator accepts): eq means it accepts exactly that string, neq that it
+ * rejects it, matches that it accepts exactly the strings the fact's pattern
+ * describes. Polarity forbid negates the constraint; for a pattern, a
+ * forbidden match means no string matches both.
+ */
+export declare function stringConstraintProblem(certificate: Record<string, unknown>, obligation: Readonly<Record<string, unknown>>, factId: string): string | null;
+//# sourceMappingURL=code-models.d.ts.map

package/dist/operations/proof/code-models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-models.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/code-models.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AACjF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EACL,KAAK,YAAY,EAKlB,MAAM,uBAAuB,CAAC;AAM/B,8DAA8D;AAC9D,eAAO,MAAM,cAAc,SAAU,CAAC;AAGtC,MAAM,MAAM,QAAQ,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD,MAAM,MAAM,QAAQ,GAAG,QAAQ,CAAC;IAC9B,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEH,2EAA2E;AAC3E,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC;IAC/B,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;IACrD,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,CAAC,CAAC,CAAC;CAC3D,CAAC,CAAC;AAEH,sDAAsD;AACtD,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAClC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;IACpD,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B,CAAC,CAAC;AAEH,8CAA8C;AAC9C,MAAM,MAAM,YAAY,GACpB,QAAQ,CAAC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,IAAI,GAAG,QAAQ,CAAA;CAAE,CAAC,GACpF,QAAQ,CAAC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AA+RhD;;;GAGG;AAEH,wBAAgB,iBAAiB,CAAC,CAAC,EACjC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,SAAS,QAAQ,EAAE,EAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CA0BxD;AAED;;;GAGG;AAEH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,aAAa,EACvB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,GACpD,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA+BzE;AAED,qEAAqE;AAErE,wBAAsB,eAAe,CACnC,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,aAAa,GACtB,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA0B5E;AAED,4EAA4E;AAE5E,wBAAsB,eAAe,CACnC,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,aAAa,GACtB,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAS5E;AA2CD;;;;GAIG;AAEH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,aAAa,EACvB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAqCxB;AAED,gFAAgF;AAEhF,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,aAAa,EACvB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBxB;AAED,+EAA+E;AAE/E,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,aAAa,EACvB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAoBxB;AAED,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAExD;AAED;;;;;;;;GAQG;AAEH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC7C,MAAM,EAAE,MAAM,GACb,MAAM,GAAG,IAAI,CAgDf"}