lemmascript 0.1.0 → 0.2.0

package/tools/dist/dafny-emit.js

@@ -1,32 +1,25 @@
 /**
- * Dafny emitter — translates Lean IR to Dafny syntax on the fly.
- *
- * No separate Dafny IR. The shared transform produces Lean IR,
- * and this emitter maps it to Dafny syntax.
+ * Dafny emitter — IR → Dafny text.
  */
-// ── Lean type → Dafny type ──────────────────────────────────
-function leanTypeToDafny(t) {
-    // Simple mappings
-    const MAP = {
-        "Int": "int", "Nat": "nat", "Bool": "bool",
-        "String": "string", "Unit": "()", "_": "int",
-    };
-    if (MAP[t])
-        return MAP[t];
-    // Array (X Y) → seq<...>
-    const arrParenMatch = t.match(/^Array\s+\((.+)\)$/);
-    if (arrParenMatch)
-        return `seq<${leanTypeToDafny(arrParenMatch[1])}>`;
-    // Array X → seq<X>
-    const arrMatch = t.match(/^Array\s+(.+)$/);
-    if (arrMatch)
-        return `seq<${leanTypeToDafny(arrMatch[1])}>`;
-    // Strip parens: (X) → X
-    const parenMatch = t.match(/^\((.+)\)$/);
-    if (parenMatch)
-        return leanTypeToDafny(parenMatch[1]);
-    // User types pass through
-    return t;
+// ── Ty → Dafny type string ─────────────────────────────────
+function tyToDafny(ty) {
+    switch (ty.kind) {
+        case "nat": return "nat";
+        case "int": return "int";
+        case "real": return "real";
+        case "bool": return "bool";
+        case "string": return "string";
+        case "void": return "()";
+        case "array": return `seq<${tyToDafny(ty.elem)}>`;
+        case "map": return `map<${tyToDafny(ty.key)}, ${tyToDafny(ty.value)}>`;
+        case "set": return `set<${tyToDafny(ty.elem)}>`;
+        case "optional": {
+            needsOptionType = true;
+            return `Option<${tyToDafny(ty.inner)}>`;
+        }
+        case "user": return ty.name;
+        case "unknown": return "int";
+    }
 }
 // ── Dafny keyword escaping ──────────────────────────────────
 const DAFNY_KEYWORDS = new Set([
@@ -37,7 +30,7 @@ const DAFNY_KEYWORDS = new Set([
     "match", "case", "return", "break", "continue",
     "requires", "ensures", "invariant", "decreases",
     "forall", "exists", "old", "fresh", "allocated",
-    "true", "false", "null", "this", "new",
+    "true", "false", "null", /*"this",*/ "new",
     "datatype", "type", "const", "ghost", "static",
     "reads", "modifies", "assert", "assume", "print",
     "by", "calc", "reveal",
@@ -52,7 +45,7 @@ function escapeName(name) {
 }
 /** Format a typed parameter list for Dafny: "x: int, y: seq<int>" */
 function paramList(params) {
-    return params.map(p => `${escapeName(p.name)}: ${leanTypeToDafny(p.type)}`).join(", ");
+    return params.map(p => `${escapeName(p.name)}: ${tyToDafny(p.type)}`).join(", ");
 }
 // ── Lean op → Dafny op ─────────────────────────────────────
 const OP_MAP = {
@@ -66,42 +59,101 @@ function emitExpr(e) {
         case "var": return escapeName(e.name);
         case "num": return `${e.value}`;
         case "bool": return e.value ? "true" : "false";
-        case "str": return `"${e.value}"`;
+        case "str": return `"${e.value.replace(/\\/g, '\\\\').replace(/"/g, '\\"').replace(/\n/g, '\\n')}"`;
         case "constructor": return qualifyCtor(e.name, e.type);
         case "arrayLiteral":
             if (e.elems.length === 0)
                 return `[]`;
             return `[${e.elems.map(emitExpr).join(", ")}]`;
-        case "dotCall": {
+        case "emptyMap": return `map[]`;
+        case "emptySet": return `{}`;
+        case "methodCall": {
             const obj = emitExpr(e.obj);
             const args = e.args.map(emitExpr);
-            if (e.method === "with" && args.length === 2)
-                return `${obj}[${args[0]} := ${args[1]}]`;
-            if (e.method === "includes" && args.length === 1)
-                return `(${args[0]} in ${obj})`;
-            if (e.method === "map" && args.length === 1) {
-                needsStdCollections = true;
-                return `Seq.Map(${args[0]}, ${obj})`;
+            const ty = e.objTy.kind;
+            // Array methods
+            if (ty === "array") {
+                if (e.method === "with")
+                    return `${obj}[${args[0]} := ${args[1]}]`;
+                if (e.method === "includes")
+                    return `(${args[0]} in ${obj})`;
+                if (e.method === "push")
+                    return `(${obj} + [${args[0]}])`;
+                if (e.method === "slice")
+                    return `${obj}[${args[0]}..]`;
+                if (e.method === "map") {
+                    needsStdCollections = true;
+                    return `Seq.Map(${args[0]}, ${obj})`;
+                }
+                if (e.method === "filter") {
+                    needsStdCollections = true;
+                    return `Seq.Filter(${args[0]}, ${obj})`;
+                }
+                if (e.method === "every") {
+                    needsStdCollections = true;
+                    return `Seq.All(${obj}, ${args[0]})`;
+                }
+                if (e.method === "some" && e.args[0].kind === "lambda" &&
+                    e.args[0].body.length === 1 && e.args[0].body[0].kind === "return") {
+                    const lam = e.args[0];
+                    const ret = lam.body[0];
+                    if (ret.kind !== "return")
+                        throw new Error("unreachable");
+                    const p = escapeName(lam.params[0]?.name ?? "x");
+                    const body = emitExpr(ret.value);
+                    return `(exists ${p} :: ${p} in ${obj} && ${body})`;
+                }
             }
-            if (e.method === "filter" && args.length === 1) {
-                needsStdCollections = true;
-                return `Seq.Filter(${args[0]}, ${obj})`;
+            // String methods
+            if (ty === "string") {
+                if (e.method === "indexOf") {
+                    needsStringIndexOf = true;
+                    return `StringIndexOf(${obj}, ${args[0]})`;
+                }
+                if (e.method === "slice")
+                    return `${obj}[${args[0]}..${args[1]}]`;
+                if (e.method === "trim") {
+                    needsStringTrim = true;
+                    return `StringTrim(${obj})`;
+                }
+                if (e.method === "toLowerCase") {
+                    needsStringToLower = true;
+                    return `StringToLower(${obj})`;
+                }
+                if (e.method === "toUpperCase") {
+                    needsStringToUpper = true;
+                    return `StringToUpper(${obj})`;
+                }
+                if (e.method === "includes") {
+                    needsStringIndexOf = true;
+                    return `(StringIndexOf(${obj}, ${args[0]}) >= 0)`;
+                }
+                if (e.method === "charCodeAt")
+                    return `(${obj}[${args[0]}] as int)`;
             }
-            if (e.method === "every" && args.length === 1) {
-                needsStdCollections = true;
-                return `Seq.All(${obj}, ${args[0]})`;
+            // Map methods
+            if (ty === "map") {
+                if (e.method === "getDirect")
+                    return `${obj}[${args[0]}]`;
+                if (e.method === "get") {
+                    needsOptionType = true;
+                    return `(if ${args[0]} in ${obj} then Some(${obj}[${args[0]}]) else None)`;
+                }
+                if (e.method === "set")
+                    return `${obj}[${args[0]} := ${args[1]}]`;
+                if (e.method === "has")
+                    return `(${args[0]} in ${obj})`;
             }
-            if (e.method === "some" && args.length === 1 && e.args[0].kind === "lambda" &&
-                e.args[0].body.length === 1 && e.args[0].body[0].kind === "return") {
-                const lam = e.args[0];
-                const ret = lam.body[0];
-                if (ret.kind !== "return")
-                    throw new Error("unreachable");
-                const p = escapeName(lam.params[0]?.name ?? "x");
-                const body = emitExpr(ret.value);
-                return `(exists ${p} :: ${p} in ${obj} && ${body})`;
+            // Set methods
+            if (ty === "set") {
+                if (e.method === "has")
+                    return `(${args[0]} in ${obj})`;
+                if (e.method === "add")
+                    return `(${obj} + {${args[0]}})`;
+                if (e.method === "delete")
+                    return `(${obj} - {${args[0]}})`;
             }
-            return `${obj}.${e.method}(${args.join(", ")})`;
+            throw new Error(`Unsupported Dafny method call: .${e.method}() on ${ty}`);
         }
         case "lambda": {
             const ps = paramList(e.params);
@@ -127,6 +179,45 @@ function emitExpr(e) {
                 const pred = `${emitExpr(e.left)}.${ctorName}?`;
                 return op === "!=" ? `(!${pred})` : pred;
             }
+            // Bitwise operators on int: translate to arithmetic
+            // x >> n → x / 2^n (right shift)
+            // x << n → x * 2^n (left shift)
+            if (e.op === ">>") {
+                if (e.right.kind === "num") {
+                    return `(${emitExpr(e.left)} / ${Math.pow(2, e.right.value)})`;
+                }
+                needsPow2 = true;
+                return `(${emitExpr(e.left)} / Pow2(${emitExpr(e.right)}))`;
+            }
+            if (e.op === "<<") {
+                if (e.right.kind === "num") {
+                    return `(${emitExpr(e.left)} * ${Math.pow(2, e.right.value)})`;
+                }
+                needsPow2 = true;
+                return `(${emitExpr(e.left)} * Pow2(${emitExpr(e.right)}))`;
+            }
+            // x & mask → x % (mask + 1) for literal masks of form 2^n - 1, else BitAnd
+            if (e.op === "&") {
+                if (e.right.kind === "num") {
+                    const mask = e.right.value;
+                    const modulus = mask + 1;
+                    if ((modulus & (modulus - 1)) === 0) {
+                        return `(${emitExpr(e.left)} % ${modulus})`;
+                    }
+                }
+                needsBitAnd = true;
+                return `BitAnd(${emitExpr(e.left)}, ${emitExpr(e.right)})`;
+            }
+            // int * real coercion: wrap int side with "as real"
+            if (["+", "-", "*", "/"].includes(op)) {
+                const leftIsReal = e.left.kind === "num" && !Number.isInteger(e.left.value);
+                const rightIsReal = e.right.kind === "num" && !Number.isInteger(e.right.value);
+                if (leftIsReal !== rightIsReal) {
+                    const left = leftIsReal ? emitExpr(e.left) : `(${emitExpr(e.left)} as real)`;
+                    const right = rightIsReal ? emitExpr(e.right) : `(${emitExpr(e.right)} as real)`;
+                    return `(${left} ${op} ${right})`;
+                }
+            }
             return `(${emitExpr(e.left)} ${op} ${emitExpr(e.right)})`;
         }
         case "implies": {
@@ -135,23 +226,26 @@ function emitExpr(e) {
         }
         case "app": {
             const args = e.args.map(emitExpr);
-            // Dafny built-in translations
-            if (e.fn === "StringIndexOf") {
-                needsStringIndexOf = true;
-                return `StringIndexOf(${args.join(", ")})`;
+            if (e.fn === "SetToSeq") {
+                needsSetToSeq = true;
+                return `SetToSeq(${args.join(", ")})`;
             }
-            if (e.fn === "StringSlice")
-                return `${args[0]}[${args[1]}..${args[2]}]`;
-            if (e.fn === "SeqPush")
-                return `(${args[0]} + [${args[1]}])`;
+            if (e.fn === "BigInt" || e.fn === "Number")
+                return args[0]; // identity: both map to int
             if (e.fn === "JSFloorDiv")
                 needsJSFloorDiv = true;
+            if (e.fn === "CeilReal")
+                needsCeilReal = true;
+            if (e.fn === "FloorReal")
+                needsFloorReal = true;
             return `${e.fn}(${args.join(", ")})`;
         }
         case "field": {
             const obj = emitExpr(e.obj);
-            if (e.field === "size" || e.field === "length")
+            if (e.field === "size" || e.field === "length" || e.field === "collectionSize")
                 return `|${obj}|`;
+            if (e.field === "keys")
+                return `${obj}.Keys`;
             if (e.field === "toNat")
                 return obj;
             return `${obj}.${escapeName(e.field)}`;
@@ -175,12 +269,36 @@ function emitExpr(e) {
         case "if":
             return `if ${emitExpr(e.cond)} then ${emitExpr(e.then)} else ${emitExpr(e.else)}`;
         case "match": {
-            const arms = e.arms.map(a => `case ${a.pattern.replace(/^\./, "")} => ${emitExpr(a.body)}`);
-            return `match ${e.scrutinee} { ${arms.join(" ")} }`;
+            const scrut = typeof e.scrutinee === "string" ? escapeName(e.scrutinee) : emitExpr(e.scrutinee);
+            const arms = e.arms.map(a => `case ${translatePattern(a.pattern)} => ${emitExpr(a.body)}`);
+            return `(match ${scrut} { ${arms.join(" ")} })`;
+        }
+        case "forall": {
+            // Collapse nested foralls: forall x :: forall y :: P → forall x, y :: P
+            const vars = [];
+            let body = e;
+            while (body.kind === "forall") {
+                const dty = tyToDafny(body.type);
+                const ann = dty === "string" ? "" : `: ${dty}`;
+                vars.push(`${body.var}${ann}`);
+                body = body.body;
+            }
+            return `forall ${vars.join(", ")} :: ${emitExpr(body)}`;
+        }
+        case "exists": {
+            // Collapse nested exists: exists x :: exists y :: P → exists x, y :: P
+            const vars = [];
+            let body = e;
+            while (body.kind === "exists") {
+                const dty = tyToDafny(body.type);
+                const ann = dty === "string" ? "" : `: ${dty}`;
+                vars.push(`${body.var}${ann}`);
+                body = body.body;
+            }
+            return `exists ${vars.join(", ")} :: ${emitExpr(body)}`;
         }
-        case "forall": return `forall ${e.var}: ${leanTypeToDafny(e.type)} :: ${emitExpr(e.body)}`;
-        case "exists": return `exists ${e.var}: ${leanTypeToDafny(e.type)} :: ${emitExpr(e.body)}`;
         case "let": return `var ${escapeName(e.name)} := ${emitExpr(e.value)}; ${emitExpr(e.body)}`;
+        case "havoc": return "*";
     }
 }
 /** Emit a pure expression with indentation for if/match/let. */
@@ -190,7 +308,8 @@ function emitPureExpr(e, indent) {
         case "if":
             return `${pad}if ${emitExpr(e.cond)} then\n${emitPureExpr(e.then, indent + 1)}\n${pad}else\n${emitPureExpr(e.else, indent + 1)}`;
         case "match": {
-            const lines = [`${pad}match ${e.scrutinee} {`];
+            const scrut = typeof e.scrutinee === "string" ? escapeName(e.scrutinee) : emitExpr(e.scrutinee);
+            const lines = [`${pad}match ${scrut} {`];
             for (const arm of e.arms) {
                 lines.push(`${pad}  case ${translatePattern(arm.pattern)} =>`);
                 lines.push(emitPureExpr(arm.body, indent + 2));
@@ -212,9 +331,17 @@ function emitStmt(s, indent) {
     const pad = "  ".repeat(indent);
     switch (s.kind) {
         case "let":
+            if (s.value.kind === "havoc")
+                return `${pad}var ${escapeName(s.name)}: ${tyToDafny(s.type)} := ${emitExpr(s.value)};`;
             return `${pad}var ${escapeName(s.name)} := ${emitExpr(s.value)};`;
         case "assign":
             return `${pad}${escapeName(s.target)} := ${emitExpr(s.value)};`;
+        case "ghostLet":
+            return `${pad}ghost var ${escapeName(s.name)}: ${tyToDafny(s.type)} := ${emitExpr(s.value)};`;
+        case "ghostAssign":
+            return `${pad}${escapeName(s.target)} := ${emitExpr(s.value)};`;
+        case "assert":
+            return `${pad}assert ${emitExpr(s.expr)};`;
         case "bind":
             // Monadic bind shouldn't appear in Dafny mode, emit as regular assign
             return `${pad}${escapeName(s.target)} := ${emitExpr(s.value)};`;
@@ -240,7 +367,8 @@ function emitStmt(s, indent) {
             return out;
         }
         case "match": {
-            const lines = [`${pad}match ${s.scrutinee} {`];
+            const scrut = typeof s.scrutinee === "string" ? escapeName(s.scrutinee) : emitExpr(s.scrutinee);
+            const lines = [`${pad}match ${scrut} {`];
             for (const arm of s.arms) {
                 lines.push(`${pad}  case ${translatePattern(arm.pattern)} =>`);
                 lines.push(emitStmts(arm.body, indent + 2));
@@ -291,7 +419,7 @@ function emitDecl(d) {
             return `datatype ${d.name} = ${d.name}(${paramList(d.fields)})`;
         }
         case "def": {
-            const lines = [`function ${d.name}(${paramList(d.params)}): ${leanTypeToDafny(d.returnType)}`];
+            const lines = [`function ${d.name}(${paramList(d.params)}): ${tyToDafny(d.returnType)}`];
             for (const r of d.requires)
                 lines.push(`  requires ${emitExpr(r)}`);
             lines.push(`{`);
@@ -311,7 +439,7 @@ function emitDecl(d) {
             return lines.join("\n");
         }
         case "method": {
-            const lines = [`method ${d.name}(${paramList(d.params)}) returns (res: ${leanTypeToDafny(d.returnType)})`];
+            const lines = [`method ${d.name}(${paramList(d.params)}) returns (res: ${tyToDafny(d.returnType)})`];
             for (const r of d.requires)
                 lines.push(`  requires ${emitExpr(r)}`);
             for (const e of d.ensures)
@@ -321,6 +449,29 @@ function emitDecl(d) {
             lines.push(`}`);
             return lines.join("\n");
         }
+        case "class": {
+            const lines = [`class ${d.name} {`];
+            for (const f of d.fields) {
+                lines.push(`  var ${escapeName(f.name)}: ${tyToDafny(f.type)}`);
+            }
+            if (d.fields.length > 0 && d.methods.length > 0)
+                lines.push("");
+            for (const m of d.methods) {
+                lines.push(`  method ${m.name}(${paramList(m.params)}) returns (res: ${tyToDafny(m.returnType)})`);
+                for (const r of m.requires)
+                    lines.push(`    requires ${emitExpr(r)}`);
+                for (const e of m.ensures)
+                    lines.push(`    ensures ${emitExpr(e)}`);
+                lines.push(`  {`);
+                lines.push(emitStmts(m.body, 2));
+                lines.push(`  }`);
+            }
+            lines.push(`}`);
+            return lines.join("\n");
+        }
+        case "const": {
+            return `const ${escapeName(d.name)}: ${tyToDafny(d.type)} := ${emitExpr(d.value)}`;
+        }
         case "namespace": {
             // Dafny doesn't need namespaces — flatten declarations
             return d.decls.map(emitDecl).join("\n\n");
@@ -330,8 +481,30 @@ function emitDecl(d) {
 // ── File emission ───────────────────────────────────────────
 // ── Preamble helpers ────────────────────────────────────────
 let needsStringIndexOf = false;
+let needsStringTrim = false;
+let needsStringToLower = false;
+let needsStringToUpper = false;
 let needsJSFloorDiv = false;
+let needsCeilReal = false;
+let needsFloorReal = false;
 let needsStdCollections = false;
+let needsOptionType = false;
+let needsSetToSeq = false;
+let needsBitAnd = false;
+let needsPow2 = false;
+const POW2 = `function Pow2(n: int): int
+  requires n >= 0
+  decreases n
+{
+  if n == 0 then 1 else 2 * Pow2(n - 1)
+}`;
+const BIT_AND = `function BitAnd(x: int, y: int): int
+  requires x >= 0 && y >= 0
+  decreases x
+{
+  if x == 0 || y == 0 then 0
+  else 2 * BitAnd(x / 2, y / 2) + (if x % 2 == 1 && y % 2 == 1 then 1 else 0)
+}`;
 const JS_FLOOR_DIV = `function JSFloorDiv(a: int, b: int): int
   requires b != 0
 {
@@ -342,6 +515,15 @@ const JS_FLOOR_DIV = `function JSFloorDiv(a: int, b: int): int
     if a <= 0 then (-a) / (-b)
     else -((a - 1) / (-b)) - 1
 }`;
+const FLOOR_REAL = `function FloorReal(x: real): int
+{
+  x.Floor
+}`;
+const CEIL_REAL = `function CeilReal(x: real): int
+{
+  if x == (x.Floor as real) then x.Floor
+  else x.Floor + 1
+}`;
 const STRING_INDEX_OF = `function StringIndexOf(s: string, sub: string): int
 {
   StringIndexOfFrom(s, sub, 0)
@@ -354,6 +536,49 @@ function StringIndexOfFrom(s: string, sub: string, from: nat): int
   else if s[from..from + |sub|] == sub then from as int
   else StringIndexOfFrom(s, sub, from + 1)
 }`;
+const STRING_TRIM = `function StringTrimLeft(s: string): string
+  ensures |StringTrimLeft(s)| <= |s|
+  ensures StringTrimLeft(s) == "" || (|StringTrimLeft(s)| > 0 && StringTrimLeft(s)[0] != ' ')
+  decreases |s|
+{
+  if |s| == 0 then ""
+  else if s[0] == ' ' then StringTrimLeft(s[1..])
+  else s
+}
+
+function StringTrimRight(s: string): string
+  ensures |StringTrimRight(s)| <= |s|
+  decreases |s|
+{
+  if |s| == 0 then ""
+  else if s[|s|-1] == ' ' then StringTrimRight(s[..|s|-1])
+  else s
+}
+
+function StringTrim(s: string): string
+{
+  StringTrimRight(StringTrimLeft(s))
+}`;
+const STRING_TO_LOWER = `function StringToLower(s: string): string
+  ensures |StringToLower(s)| == |s|
+  decreases |s|
+{
+  if |s| == 0 then ""
+  else
+    var c := s[0];
+    var lower := if 'A' <= c <= 'Z' then (c - 'A' + 'a') as char else c;
+    [lower] + StringToLower(s[1..])
+}`;
+const STRING_TO_UPPER = `function StringToUpper(s: string): string
+  ensures |StringToUpper(s)| == |s|
+  decreases |s|
+{
+  if |s| == 0 then ""
+  else
+    var c := s[0];
+    var upper := if 'a' <= c <= 'z' then (c - 'a' + 'A') as char else c;
+    [upper] + StringToUpper(s[1..])
+}`;
 // ── Constructor and record helpers ───────────────────────────
 let _recordCtors = new Map();
 function buildRecordCtorMap(decls) {
@@ -379,13 +604,14 @@ function qualifyCtor(name, type) {
  *  ".ctorName" → "ctorName"
  *  "_" → "_"
  */
+const CTOR_MAP = { "some": "Some", "none": "None" };
 function translatePattern(pattern) {
     if (pattern === "_")
         return "_";
     const m = pattern.match(/^\.(\w+)\s*(.*)$/);
     if (!m)
         return pattern;
-    const ctorName = escapeName(m[1]);
+    const ctorName = CTOR_MAP[m[1]] ?? escapeName(m[1]);
     const fields = m[2].trim();
     if (!fields)
         return ctorName;
@@ -398,8 +624,17 @@ const PREAMBLES = {
 export function emitDafnyFile(file, tsFileName) {
     buildRecordCtorMap(file.decls);
     needsStringIndexOf = false;
+    needsStringTrim = false;
+    needsStringToLower = false;
+    needsStringToUpper = false;
     needsJSFloorDiv = false;
+    needsCeilReal = false;
+    needsFloorReal = false;
     needsStdCollections = false;
+    needsOptionType = false;
+    needsSetToSeq = false;
+    needsBitAnd = false;
+    needsPow2 = false;
     // Collect pure def names so we can skip their method wrappers
     const pureDefs = new Set();
     for (const d of file.decls) {
@@ -423,7 +658,9 @@ export function emitDafnyFile(file, tsFileName) {
         }
         catch (e) {
             const name = "name" in decl ? decl.name : "unknown";
-            console.error(`WARNING: skipping '${name}': ${e.message}`);
+            const msg = e.message;
+            console.error(`WARNING: skipping '${name}': ${msg}`);
+            declLines.push(`// LemmaScript: skipped ${name}`);
             skipped.push(name);
         }
     }
@@ -436,14 +673,66 @@ export function emitDafnyFile(file, tsFileName) {
         lines.push(`// Generated by lsc from ${tsFileName}`);
     if (needsStdCollections)
         lines.push("import Std.Collections.Seq");
+    if (needsOptionType) {
+        lines.push("");
+        lines.push("datatype Option<T> = None | Some(value: T)");
+    }
+    if (needsSetToSeq) {
+        lines.push("");
+        lines.push(`method SetToSeq<T>(s: set<T>) returns (res: seq<T>)
+  ensures forall x :: x in s <==> x in res
+  ensures |res| == |s|
+{
+  var remaining := s;
+  res := [];
+  while remaining != {}
+    invariant remaining <= s
+    invariant forall x :: x in res <==> (x in s && x !in remaining)
+    invariant |res| + |remaining| == |s|
+    decreases remaining
+  {
+    var x :| x in remaining;
+    res := res + [x];
+    remaining := remaining - {x};
+  }
+}`);
+    }
+    if (needsPow2) {
+        lines.push("");
+        lines.push(POW2);
+    }
+    if (needsBitAnd) {
+        lines.push("");
+        lines.push(BIT_AND);
+    }
     if (needsJSFloorDiv) {
         lines.push("");
         lines.push(JS_FLOOR_DIV);
     }
+    if (needsCeilReal) {
+        lines.push("");
+        lines.push(CEIL_REAL);
+    }
+    if (needsFloorReal) {
+        lines.push("");
+        lines.push(FLOOR_REAL);
+    }
     if (needsStringIndexOf) {
         lines.push("");
         lines.push(PREAMBLES.StringIndexOf);
     }
+    if (needsStringTrim) {
+        lines.push("");
+        lines.push(STRING_TRIM);
+    }
+    if (needsStringToLower) {
+        lines.push("");
+        lines.push(STRING_TO_LOWER);
+    }
+    if (needsStringToUpper) {
+        lines.push("");
+        lines.push(STRING_TO_UPPER);
+    }
     lines.push(...declLines);
     return lines.join("\n") + "\n";
 }