kibi-cli 2.31.1 → 2.35.1

package/dist/operations/proof/code-certificates.d.ts

@@ -0,0 +1,155 @@
+import type { OperationContext } from "../../public/operations/runtime-types.js";
+import { type ProofContract, type ProofKind } from "../../public/proof-protocol.js";
+/**
+ * What a receipt records about its contract's kind: the evidence level it
+ * supports and, for a certificate kind, the certificate and its re-check.
+ */
+export type CertificateVerdict = Readonly<{
+    kind: ProofKind;
+    evidence_level: "proved" | "tested";
+    certificate?: Readonly<Record<string, unknown>>;
+    certificate_digest?: string;
+    certificate_rejection?: string;
+}>;
+export type SymbolRow = Readonly<{
+    id: string;
+    title: string;
+    sourceFile: string;
+}>;
+export declare function loadSymbol(context: OperationContext, symbolId: string): Promise<SymbolRow | null>;
+export declare function readWorkspaceFile(workspaceRoot: string, relative: string): string | null;
+/**
+ * Whether `source` (at `sourcePath`) imports `targetPath` and names
+ * `identifier`: the domain is read from the code, not hand-listed. A suite
+ * that tests compiled output imports the domain from the TypeScript
+ * project's `outDir`; given the workspace root, such an import counts when it
+ * maps back to the domain's source file under `rootDir`.
+ */
+export declare function importsDomain(source: string, sourcePath: string, targetPath: string, identifier: string, workspaceRoot?: string): boolean;
+/**
+ * Map a workspace-relative path inside a TypeScript project's `outDir` to the
+ * matching path under its `rootDir` (the tsconfig's directory when unset),
+ * using the nearest tsconfig.json above the path. Null when no tsconfig
+ * declares an `outDir` that contains it.
+ */
+export declare function compiledToSourcePath(workspaceRoot: string, relativePath: string): string | null;
+/**
+ * The domain as the code defines it: Kibi imports the domain_source file
+ * itself and reads the named export's members, so a certificate cannot cover
+ * a hand-listed subset. A TypeScript or JavaScript domain loads with bun when
+ * it is on PATH, else with the workspace's tsx, else with node's type
+ * stripping (which retries extensionless relative imports as TypeScript
+ * files); a Python domain (`.py`) loads with the first interpreter
+ * pythonDomainInterpreters finds.
+ */
+export declare function evaluateDomain(workspaceRoot: string, sourceFile: string, exportName: string, options?: Readonly<{
+    /** The TypeScript runners to try, in order (default all three). */
+    runners?: readonly ("bun" | "tsx" | "node")[];
+}>): {
+    ok: true;
+    count: number;
+    members: readonly string[] | null;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * The number a value_source export holds, read the same way as a domain.
+ */
+export declare function evaluateScalar(workspaceRoot: string, sourceFile: string, exportName: string): {
+    ok: true;
+    value: number;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Whether an exhaustive certificate covers the domain Kibi evaluated: the
+ * same members when they are primitive values, else the same count.
+ */
+export declare function domainCoverageProblem(exportName: string, evaluated: Readonly<{
+    count: number;
+    members: readonly string[] | null;
+}>, certified: readonly string[]): string | null;
+/**
+ * Kibi compiles a typecheck witness itself, with the workspace's TypeScript.
+ * Imports resolve the way the project's own tsconfig says (module,
+ * moduleResolution, paths, ...) and its declaration files are in the
+ * program, but the checking options stay fixed and
+ * strict, so a lax project tsconfig cannot make the never check vacuous. It
+ * accepts the witness only with no errors in it.
+ */
+export declare function compileWitness(workspaceRoot: string, witnessPath: string, options?: Readonly<{
+    requireExhaustiveness?: boolean;
+}>): {
+    ok: true;
+    version: string;
+} | {
+    ok: false;
+    reason: string;
+    errorLines?: number[];
+};
+export type FactConstraint = Readonly<{
+    operator: string;
+    value: number;
+}>;
+/** The SMT-LIB assertion a fact constraint must appear as in the query. */
+export declare function smtAssertion(property: string, valueType: "int" | "real", row: FactConstraint): string;
+/**
+ * The values a contract's value_source exports hold, read from the code the
+ * same way as a domain (a count measure is the collection's size), or why
+ * one cannot be read.
+ */
+export declare function valueSourceValues(context: OperationContext, contract: ProofContract): Promise<{
+    ok: true;
+    values: {
+        symbol_id: string;
+        value: number;
+    }[];
+} | {
+    ok: false;
+    reason: string;
+}>;
+/** The solver re-run behind an smt certificate; unsat is the only proof. */
+export declare function rerunSmtQuery(solver: string, query: string): {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * The certificate of a source proof: the contract's source and what Kibi
+ * reads from it. A certificate the run left must name the same source, and
+ * a model it carries must be what Kibi reads; either way the stored model is
+ * Kibi's own read, so the proof never rests on members the test listed.
+ */
+export declare function completeSourceCertificate(context: OperationContext, testId: string, contract: ProofContract, left: unknown): Promise<{
+    ok: true;
+    certificate: Record<string, unknown>;
+} | {
+    ok: false;
+    reason: string;
+}>;
+/**
+ * A typecheck certificate whose own outcome is failed says only that: add
+ * what Kibi's compile of the same witness reports, so the author sees the
+ * first error, or learns that the test compiled it differently.
+ */
+export declare function withWitnessDiagnosis(context: OperationContext, contract: ProofContract, reason: string): string;
+export { pythonDomainInterpreters, runCodeEvaluator, TS_RESOLVE_HOOKS, } from "./code-runner.js";
+/**
+ * Re-check the certificate a certificate-kind run left for one test. A
+ * runner kind (e2e, example, property) supports tested evidence and needs
+ * no certificate; a certificate kind supports proved evidence only when the
+ * certificate re-checks: its structure and arithmetic in code_certificates.pl,
+ * and here that the proof read its domain from the code, that the witness is
+ * the workspace file, that the solver still answers unsat, and that a rule
+ * table, state machine or pattern is what Kibi itself reads from the code.
+ */
+export declare function checkCodeCertificate(context: OperationContext, input: Readonly<{
+    testId: string;
+    contract: ProofContract;
+    outcome: string;
+    certificate: unknown;
+}>): Promise<CertificateVerdict>;
+//# sourceMappingURL=code-certificates.d.ts.map

package/dist/operations/proof/code-certificates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-certificates.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/code-certificates.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAKjF,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,SAAS,EAEf,MAAM,gCAAgC,CAAC;AAkBxC;;;GAGG;AAEH,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,IAAI,EAAE,SAAS,CAAC;IAChB,cAAc,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACpC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAYpF,wBAAsB,UAAU,CAC9B,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAS3B;AAED,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,iBAIxE;AAKD;;;;;;GAMG;AAEH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAgBT;AA0ED;;;;;GAKG;AAEH,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,GACnB,MAAM,GAAG,IAAI,CA2Bf;AAoED;;;;;;;;GAQG;AAEH,wBAAgB,cAAc,CAC5B,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,QAAQ,CAAC;IAChB,mEAAmE;IACnE,OAAO,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC;CAC/C,CAAM,GAEL;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;CAAE,GAC9D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAShC;AAED;;GAEG;AAEH,wBAAgB,cAAc,CAC5B,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAM7D;AA2DD;;;GAGG;AAEH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;CAAE,CAAC,EACzE,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,MAAM,GAAG,IAAI,CAiBf;AAwHD;;;;;;;GAOG;AAEH,wBAAgB,cAAc,CAC5B,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,QAAQ,CAAC;IAAE,qBAAqB,CAAC,EAAE,OAAO,CAAA;CAAE,CAAM,GAEzD;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CA2DvD;AAED,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAiF3E,2EAA2E;AAC3E,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,KAAK,GAAG,MAAM,EACzB,GAAG,EAAE,cAAc,GAClB,MAAM,CAKR;AAED;;;;GAIG;AAEH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,aAAa,GACtB,OAAO,CACN;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GAC5D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAChC,CA0CA;AAmED,4EAA4E;AAE5E,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CA0B9C;AA+FD;;;;;GAKG;AAEH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,gBAAgB,EACzB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,aAAa,EACvB,IAAI,EAAE,OAAO,GACZ,OAAO,CACR;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CACnF,CAsCA;AAID;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,MAAM,GACb,MAAM,CAOR;AAED,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;GAQG;AAEH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,QAAQ,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC,GACD,OAAO,CAAC,kBAAkB,CAAC,CAoF7B"}