pi-pstack-native 0.0.0-stage → 1.0.0

package/skills/statechart/scripts/test/config-fuzz.test.ts

@@ -0,0 +1,263 @@
+import assert from "node:assert/strict";
+import { spawnSync } from "node:child_process";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { test } from "node:test";
+import { fileURLToPath } from "node:url";
+import { configText } from "../backends/cfg.ts";
+import { readConfig } from "../frontends/config.ts";
+import { type Checks, readChecks } from "../frontends/spec.ts";
+
+const here = path.dirname(fileURLToPath(import.meta.url));
+const skip = !process.env.TLA2TOOLS && "set TLA2TOOLS to the path of tla2tools.jar to run TLC";
+const SEED = 1;
+const CONFIGS = 4000;
+const KEYWORDS =
+  "CONSTANT CONSTANTS CONSTRAINT CONSTRAINTS ACTION_CONSTRAINT ACTION_CONSTRAINTS INVARIANT INVARIANTS PROPERTY PROPERTIES INIT NEXT SPECIFICATION VIEW SYMMETRY TYPE TYPE_CONSTRAINT CHECK_DEADLOCK".split(
+    " ",
+  );
+const ONE_NAME = ["INIT", "NEXT", "SPECIFICATION", "VIEW", "SYMMETRY", "TYPE", "TYPE_CONSTRAINT"];
+const NAMES = [
+  "Init",
+  "Next",
+  "Spec",
+  "Inv",
+  "TypeOK",
+  "Live",
+  "V",
+  "x1",
+  "_a",
+  "INIT2",
+  "Next_INIT",
+];
+const VALUES = [
+  "0",
+  "7",
+  "TRUE",
+  "m1",
+  '"a b"',
+  '"INVARIANT (* x"',
+  '"\\\\* y *)"',
+  '"\\""',
+  "{}",
+  "{1, 2}",
+  '{"p", "q"}',
+  "{m1, m2}",
+];
+const SPACES = [" ", " ", "\t", "  "];
+const BREAKS = ["\n", "\n", "\r\n", "\r", "\n\n"];
+const GAPS = [...SPACES, ...BREAKS, ""];
+const ODD_SPACES = ["", "\u00a0", "\u2028", "\u2029", "\u0085"];
+const COMMENTS = [
+  "\\* CHECK_DEADLOCK FALSE\n",
+  "\\* CHECK_DEADLOCK FALSE\r",
+  "\\* CHECK_DEADLOCK FALSE\r\n",
+  "(* CHECK_DEADLOCK FALSE *)",
+  "(* (* INVARIANT Hidden *) CHECK_DEADLOCK FALSE *)",
+  "(**)",
+  '(* " *)',
+];
+const INSERTS = [
+  "(* CHECK_DEADLOCK FALSE",
+  "*)",
+  '"open',
+  ",",
+  "=",
+  "<-",
+  "{",
+  "1",
+  "foo",
+  "invariant",
+  "ALIAS",
+  "POSTCONDITION",
+  "\\",
+  '"a\\qb"',
+];
+const NAME = /^\w*[A-Za-z]\w*$/;
+const MODEL = [
+  "CONSTANT",
+  "CONSTRAINT",
+  "ACTION_CONSTRAINT",
+  "INIT",
+  "NEXT",
+  "SPECIFICATION",
+  "VIEW",
+  "SYMMETRY",
+  "TYPE",
+  "TYPE_CONSTRAINT",
+];
+
+type Reading = { [key: string]: unknown };
+
+const isRecord = (v: unknown): v is Reading =>
+  typeof v === "object" && v !== null && !Array.isArray(v);
+
+const tableOf = (reading: Reading) => {
+  if (!isRecord(reading.table)) throw new Error(`TLC printed no table: ${JSON.stringify(reading)}`);
+  return reading.table;
+};
+
+function mulberry32(seed: number) {
+  return () => {
+    seed = (seed + 0x6d2b79f5) | 0;
+    let t = Math.imul(seed ^ (seed >>> 15), 1 | seed);
+    t = (t + Math.imul(t ^ (t >>> 7), 61 | t)) ^ t;
+    return ((t ^ (t >>> 14)) >>> 0) / 4294967296;
+  };
+}
+
+function generate(random: () => number) {
+  const int = (n: number) => Math.floor(random() * n);
+  const pick = <T>(list: T[]) => list[int(list.length)];
+  const section = (key: string) => {
+    const out = [{ gap: pick(BREAKS), text: key }];
+    const add = (text: string) => out.push({ gap: pick(SPACES), text });
+    if (key === "CHECK_DEADLOCK") add(pick(["TRUE", "FALSE"]));
+    else if (ONE_NAME.includes(key)) add(pick(NAMES));
+    else if (!key.startsWith("CONSTANT")) for (let n = 1 + int(3); n--;) add(pick(NAMES));
+    else
+      for (let n = 1 + int(2); n--;) {
+        const form = pick(["=", "<-", "<-[M]"]);
+        add(pick(["N", "K", "S"]));
+        add(form.slice(0, 2));
+        if (form === "<-[M]") add("[M]");
+        add(form === "=" ? pick(VALUES) : pick(NAMES));
+      }
+    return out;
+  };
+  const tokens = [];
+  for (const key of pick([["SPECIFICATION"], ["INIT", "NEXT"]])) tokens.push(...section(key));
+  for (let n = int(4); n--;) tokens.splice(pick([0, tokens.length]), 0, ...section(pick(KEYWORDS)));
+  for (let n = int(3); n--;)
+    tokens.splice(int(tokens.length + 1), 0, { gap: pick(GAPS), text: pick(COMMENTS) });
+  const mutations = int(4);
+  for (let n = mutations; n--;) {
+    const kind = pick(["typo", "case", "space", "insert", "drop", "section"]);
+    const t = tokens[int(tokens.length)];
+    const at = int(tokens.length + 1);
+    if (kind === "typo") {
+      const k = int(t.text.length);
+      t.text =
+        t.text.slice(0, k) +
+        pick(["", "E", "_", "0", ",", t.text[k] + t.text[k]]) +
+        t.text.slice(k + 1);
+    } else if (kind === "case")
+      t.text = pick([t.text.toLowerCase(), t.text[0] + t.text.slice(1).toLowerCase()]);
+    else if (kind === "space") t.gap = pick(ODD_SPACES);
+    else if (kind === "insert")
+      tokens.splice(at, 0, { gap: pick(GAPS), text: pick(pick([INSERTS, KEYWORDS])) });
+    else if (kind === "drop" && tokens.length > 1) tokens.splice(at % tokens.length, 1);
+    else if (kind === "section") tokens.splice(at, 0, ...section(pick(KEYWORDS)));
+  }
+  let text = "";
+  for (const t of tokens) text += t.gap + t.text;
+  return { text: `${text}\n`, mutated: mutations > 0 };
+}
+
+function readInTlc(files: string[], jar: string) {
+  const r = spawnSync(
+    process.env.JAVA || "java",
+    ["-cp", jar, path.join(here, "ConfigOracle.java")],
+    { input: `${files.join("\n")}\n`, encoding: "utf8", maxBuffer: 1 << 30 },
+  );
+  assert.equal(r.status, 0, r.error?.message ?? r.stderr);
+  const lines = r.stdout.split("\n");
+  const readings = new Map<string, Reading>();
+  for (let i = 0; i < files.length; i++) {
+    const reading: unknown = JSON.parse(lines[i]);
+    if (!isRecord(reading)) throw new Error(`TLC printed ${lines[i]}`);
+    readings.set(files[i], reading);
+  }
+  return readings;
+}
+
+function passesTlcStartChecks(reading: Reading) {
+  if (reading.error) return false;
+  const table = tableOf(reading);
+  for (const key of ["INVARIANT", "PROPERTY", "CONSTRAINT", "ACTION_CONSTRAINT"]) {
+    const names: unknown = table[key];
+    if (!Array.isArray(names)) throw new Error(`TLC printed no list for ${key}.`);
+    for (const name of names) if (!NAME.test(String(name))) return false;
+  }
+  for (const key of ["INIT", "NEXT", "SPECIFICATION", "VIEW", "SYMMETRY"])
+    if (table[key] && !NAME.test(String(table[key]))) return false;
+  return table.SPECIFICATION ? !table.INIT && !table.NEXT : Boolean(table.INIT);
+}
+
+function model(reading: Reading | undefined) {
+  if (!reading || reading.error) return reading;
+  const { overrides, modConstants, modOverrides } = reading;
+  const table = tableOf(reading);
+  const out: Reading = { overrides, modConstants, modOverrides };
+  for (const key of MODEL) out[key] = table[key];
+  return out;
+}
+
+test(
+  `${CONFIGS} configs from seed ${SEED} read in the skill as in TLC, or stop before TLC runs`,
+  { skip },
+  (t) => {
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), "statechart-config-fuzz-"));
+    t.after(() => fs.rmSync(dir, { recursive: true }));
+    const random = mulberry32(SEED);
+    const cases: {
+      i: number;
+      text: string;
+      mutated: boolean;
+      skill: Checks | Error;
+      file: string;
+      written: string;
+    }[] = [];
+    const files: string[] = [];
+    for (let i = 0; i < CONFIGS; i++) {
+      const { text, mutated } = generate(random);
+      const file = path.join(dir, `${i}.cfg`);
+      fs.writeFileSync(file, text);
+      files.push(file);
+      const written = path.join(dir, `${i}-written.cfg`);
+      let skill: Checks | Error;
+      try {
+        skill = readChecks({ configFile: file, config: readConfig({ file, text }) });
+        fs.writeFileSync(written, configText(skill.written, []));
+        files.push(written);
+      } catch (error) {
+        if (!(error instanceof Error)) throw error;
+        skill = error;
+      }
+      cases.push({ i, text, mutated, skill, file, written });
+    }
+    const tlc = readInTlc(files, String(process.env.TLA2TOOLS));
+    for (const { i, text, mutated, skill, file, written } of cases) {
+      const want = tlc.get(file);
+      assert.ok(want, `TLC printed nothing for config ${i}`);
+      const where = `config ${i} of seed ${SEED}: ${JSON.stringify(text)}\nTLC reads ${JSON.stringify(want)}`;
+      if (skill instanceof Error) {
+        if (skill.message.startsWith("TLC refuses"))
+          assert.ok(!passesTlcStartChecks(want), `The skill says TLC refuses ${where}`);
+        else
+          assert.ok(
+            mutated && skill.message.startsWith("The command cannot read"),
+            `${skill.message}\n${where}`,
+          );
+        continue;
+      }
+      assert.ok(passesTlcStartChecks(want), `The skill reads ${where}`);
+      assert.deepEqual(
+        {
+          invariants: skill.invariants,
+          properties: skill.properties,
+          deadlock: skill.deadlock,
+          model: model(tlc.get(written)),
+        },
+        {
+          invariants: tableOf(want).INVARIANT,
+          properties: tableOf(want).PROPERTY,
+          deadlock: want.deadlock,
+          model: model(want),
+        },
+        where,
+      );
+    }
+  },
+);

package/skills/statechart/scripts/test/corpus/Counter/ChartRun.out

@@ -0,0 +1,57 @@
+@!@!@STARTMSG 2262:0 @!@!@
+TLC2 Version 2.19 of 08 August 2024 (rev: 5a47802)
+@!@!@ENDMSG 2262 @!@!@
+@!@!@STARTMSG 2401:3 @!@!@
+Please run the Java VM which executes TLC with a throughput optimized garbage collector by passing the "-XX:+UseParallelGC" property.
+@!@!@ENDMSG 2401 @!@!@
+@!@!@STARTMSG 2187:0 @!@!@
+Running breadth-first search Model-Checking with fp 0 and seed -495839499608247374 with 1 worker on 8 cores with 23888MB heap and 64MB offheap memory [pid: 570392] (Linux 6.12.94+ amd64, Eclipse Adoptium 25.0.5 x86_64, MSBDiskFPSet, DiskStateQueue).
+@!@!@ENDMSG 2187 @!@!@
+@!@!@STARTMSG 2220:0 @!@!@
+Starting SANY...
+@!@!@ENDMSG 2220 @!@!@
+Parsing file /tmp/statechart-BUHfTS/statechart-nSpcGM/ChartRun.tla
+Parsing file /agent/repos/plugins/pstack/skills/statechart/scripts/test/corpus/Counter/Counter.tla
+Parsing file /tmp/statechart-BUHfTS/statechart-nSpcGM/tmp-ChartRun/Naturals.tla
+Parsing file /tmp/statechart-BUHfTS/statechart-nSpcGM/tmp-ChartRun/TLC.tla
+Parsing file /tmp/statechart-BUHfTS/statechart-nSpcGM/tmp-ChartRun/Sequences.tla
+Parsing file /tmp/statechart-BUHfTS/statechart-nSpcGM/tmp-ChartRun/FiniteSets.tla
+Semantic processing of module Naturals
+Semantic processing of module Counter
+Semantic processing of module Sequences
+Semantic processing of module FiniteSets
+Semantic processing of module TLC
+Semantic processing of module ChartRun
+@!@!@STARTMSG 2219:0 @!@!@
+SANY finished.
+@!@!@ENDMSG 2219 @!@!@
+@!@!@STARTMSG 2185:0 @!@!@
+Starting... (2026-10-26 21:45:11)
+@!@!@ENDMSG 2185 @!@!@
+@!@!@STARTMSG 2189:0 @!@!@
+Computing initial states...
+@!@!@ENDMSG 2189 @!@!@
+@!@!@STARTMSG 2190:0 @!@!@
+Finished computing initial states: 1 distinct state generated at 2026-10-26 21:45:11.
+@!@!@ENDMSG 2190 @!@!@
+@!@!@STARTMSG 2193:0 @!@!@
+Model checking completed. No error has been found.
+  Estimates of the probability that TLC did not check all reachable states
+  because two distinct states had the same fingerprint:
+  calculated (optimistic):  val = 0.0
+@!@!@ENDMSG 2193 @!@!@
+@!@!@STARTMSG 2200:0 @!@!@
+Progress(4) at 2026-10-26 21:45:11: 4 states generated (683 s/min), 4 distinct states found (683 ds/min), 0 states left on queue.
+@!@!@ENDMSG 2200 @!@!@
+@!@!@STARTMSG 2199:0 @!@!@
+4 states generated, 4 distinct states found, 0 states left on queue.
+@!@!@ENDMSG 2199 @!@!@
+@!@!@STARTMSG 2194:0 @!@!@
+The depth of the complete state graph search is 4.
+@!@!@ENDMSG 2194 @!@!@
+@!@!@STARTMSG 2268:0 @!@!@
+The average outdegree of the complete state graph is 1 (minimum is 0, the maximum 1 and the 95th percentile is 1).
+@!@!@ENDMSG 2268 @!@!@
+@!@!@STARTMSG 2186:0 @!@!@
+Finished in 355ms at (2026-10-26 21:45:11)
+@!@!@ENDMSG 2186 @!@!@

package/skills/statechart/scripts/test/corpus/Counter/Counter.cfg

@@ -0,0 +1,3 @@
+SPECIFICATION Spec
+PROPERTY Low StaysSmall
+CHECK_DEADLOCK FALSE

package/skills/statechart/scripts/test/corpus/Counter/Counter.tla

@@ -0,0 +1,10 @@
+---- MODULE Counter ----
+EXTENDS Naturals
+VARIABLE x
+vars == <<x>>
+Init == x = 0
+Inc == x < 3 /\ x' = x + 1
+Spec == Init /\ [][Inc]_vars
+Low == x \in 0..1
+StaysSmall == [](x <= 3)
+====

package/skills/statechart/scripts/test/corpus/Counter/chart.mmd

@@ -0,0 +1,9 @@
+stateDiagram-v2
+  s0: 0
+  s1: 1
+  s2: 2
+  s3: 3
+  [*] --> s0
+  s0 --> s1: Inc
+  s1 --> s2: Inc
+  s2 --> s3: Inc

package/skills/statechart/scripts/test/corpus/Counter/graph.dot

@@ -0,0 +1,16 @@
+strict digraph DiskGraph {
+nodesep=0.35;
+subgraph cluster_graph {
+color="white";
+-3406341414084290173 [label="x = 0",style = filled]
+-3406341414084290173 -> -686636423115914061 [label="Inc",color="black",fontcolor="black"];
+-686636423115914061 [label="x = 1"];
+-686636423115914061 -> -7115858903467826205 [label="Inc",color="black",fontcolor="black"];
+-7115858903467826205 [label="x = 2"];
+-7115858903467826205 -> -4900539538744082733 [label="Inc",color="black",fontcolor="black"];
+-4900539538744082733 [label="x = 3"];
+{rank = same; -3406341414084290173;}
+{rank = same; -686636423115914061;}
+{rank = same; -7115858903467826205;}
+}
+}

package/skills/statechart/scripts/test/corpus/Counter/report.md

@@ -0,0 +1,7 @@
+# Counter
+
+TLC reached 4 states and 3 steps. The chart draws 4 states and 3 arrows.
+
+## Rules that hold
+Low, StaysSmall
+TLC checked Low only in the initial states, because it has no [], <>, or ~>. List it as an INVARIANT to check every state.

package/skills/statechart/scripts/test/corpus/Counter/sany.out

@@ -0,0 +1,2 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?><modules><RootModule>Counter</RootModule><context><entry><UID>2</UID><BuiltInKind><location><column><begin>0</begin><end>0</end></column><line><begin>0</begin><end>0</end></line><filename>--TLA+ BUILTINS--</filename></location><level>0</level><uniquename>TRUE</uniquename><arity>0</arity><params/></BuiltInKind></entry><entry><UID>4</UID><BuiltInKind><location><column><begin>0</begin><end>0</end></column><line><begin>0</begin><end>0</end></line><filename>--TLA+ BUILTINS--</filename></location><level>0</level><uniquename>=</uniquename><arity>2</arity><params><leibnizparam><FormalParamNodeRef><UID>5</UID></FormalParamNodeRef><leibniz/></leibnizparam><leibnizparam><FormalParamNodeRef><UID>6</UID></FormalParamNodeRef><leibniz/></leibnizparam></params></BuiltInKind></entry><entry><UID>5</UID><FormalParamNode><uniquename>Formal_0</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>261</UID><UserDefinedOpKind><location><column><begin>1</begin><end>17</end></column><line><begin>8</begin><end>8</end></line><filename>Counter</filename></location><level>1</level><uniquename>Low</uniquename><arity>0</arity><body><OpApplNode><location><column><begin>8</begin><end>17</end></column><line><begin>8</begin><end>8</end></line><filename>Counter</filename></location><level>1</level><operator><BuiltInKindRef><UID>40</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>8</begin><end>8</end></column><line><begin>8</begin><end>8</end></line><filename>Counter</filename></location><level>1</level><operator><OpDeclNodeRef><UID>230</UID></OpDeclNodeRef></operator><operands/></OpApplNode><OpApplNode><location><column><begin>14</begin><end>17</end></column><line><begin>8</begin><end>8</end></line><filename>Counter</filename></location><level>0</level><operator><UserDefinedOpKindRef><UID>224</UID></UserDefinedOpKindRef></operator><operands><NumeralNode><location><column><begin>14</begin><end>14</end></column><line><begin>8</begin><end>8</end></line><filename>Counter</filename></location><level>0</level><IntValue>0</IntValue></NumeralNode><NumeralNode><location><column><begin>17</begin><end>17</end></column><line><begin>8</begin><end>8</end></line><filename>Counter</filename></location><level>0</level><IntValue>1</IntValue></NumeralNode></operands></OpApplNode></operands></OpApplNode></body><params/></UserDefinedOpKind></entry><entry><UID>6</UID><FormalParamNode><uniquename>Formal_1</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>266</UID><UserDefinedOpKind><location><column><begin>1</begin><end>24</end></column><line><begin>9</begin><end>9</end></line><filename>Counter</filename></location><level>3</level><uniquename>StaysSmall</uniquename><arity>0</arity><body><OpApplNode><location><column><begin>15</begin><end>24</end></column><line><begin>9</begin><end>9</end></line><filename>Counter</filename></location><level>3</level><operator><BuiltInKindRef><UID>61</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>18</begin><end>23</end></column><line><begin>9</begin><end>9</end></line><filename>Counter</filename></location><level>1</level><operator><UserDefinedOpKindRef><UID>200</UID></UserDefinedOpKindRef></operator><operands><OpApplNode><location><column><begin>18</begin><end>18</end></column><line><begin>9</begin><end>9</end></line><filename>Counter</filename></location><level>1</level><operator><OpDeclNodeRef><UID>230</UID></OpDeclNodeRef></operator><operands/></OpApplNode><NumeralNode><location><column><begin>23</begin><end>23</end></column><line><begin>9</begin><end>9</end></line><filename>Counter</filename></location><level>0</level><IntValue>3</IntValue></NumeralNode></operands></OpApplNode></operands></OpApplNode></body><params/></UserDefinedOpKind></entry><entry><UID>13</UID><BuiltInKind><location><column><begin>0</begin><end>0</end></column><line><begin>0</begin><end>0</end></line><filename>--TLA+ BUILTINS--</filename></location><level>2</level><uniquename>'</uniquename><arity>1</arity><params><leibnizparam><FormalParamNodeRef><UID>14</UID></FormalParamNodeRef></leibnizparam></params></BuiltInKind></entry><entry><UID>14</UID><FormalParamNode><uniquename>Formal_0</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>19</UID><BuiltInKind><location><column><begin>0</begin><end>0</end></column><line><begin>0</begin><end>0</end></line><filename>--TLA+ BUILTINS--</filename></location><level>0</level><uniquename>\land</uniquename><arity>2</arity><params><leibnizparam><FormalParamNodeRef><UID>20</UID></FormalParamNodeRef><leibniz/></leibnizparam><leibnizparam><FormalParamNodeRef><UID>21</UID></FormalParamNodeRef><leibniz/></leibnizparam></params></BuiltInKind></entry><entry><UID>20</UID><FormalParamNode><uniquename>Formal_0</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>21</UID><FormalParamNode><uniquename>Formal_1</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>154</UID><ModuleNode><location><column><begin>1</begin><end>77</end></column><line><begin>1</begin><end>36</end></line><filename>Naturals</filename></location><uniquename>Naturals</uniquename><UserDefinedOpKindRef><UID>156</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>162</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>172</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>176</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>182</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>188</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>194</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>200</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>206</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>212</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>218</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>224</UID></UserDefinedOpKindRef></ModuleNode></entry><entry><UID>156</UID><UserDefinedOpKind><location><column><begin>1</begin><end>16</end></column><line><begin>14</begin><end>14</end></line><filename>Naturals</filename></location><level>0</level><uniquename>Nat</uniquename><arity>0</arity><body><OpApplNode><location><column><begin>14</begin><end>16</end></column><line><begin>14</begin><end>14</end></line><filename>Naturals</filename></location><level>0</level><operator><BuiltInKindRef><UID>106</UID></BuiltInKindRef></operator><operands/></OpApplNode></body><params/></UserDefinedOpKind></entry><entry><UID>157</UID><FormalParamNode><location><column><begin>1</begin><end>1</end></column><line><begin>15</begin><end>15</end></line><filename>Naturals</filename></location><level>0</level><uniquename>a</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>158</UID><FormalParamNode><location><column><begin>3</begin><end>3</end></column><line><begin>15</begin><end>15</end></line><filename>Naturals</filename></location><level>0</level><uniquename>b</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>162</UID><UserDefinedOpKind><location><column><begin>1</begin><end>19</end></column><line><begin>15</begin><end>15</end></line><filename>Naturals</filename></location><level>0</level><uniquename>+</uniquename><arity>2</arity><body><OpApplNode><location><column><begin>14</begin><end>19</end></column><line><begin>15</begin><end>15</end></line><filename>Naturals</filename></location><level>0</level><operator><BuiltInKindRef><UID>106</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>15</begin><end>15</end></column><line><begin>15</begin><end>15</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>157</UID></FormalParamNodeRef></operator><operands/></OpApplNode><OpApplNode><location><column><begin>18</begin><end>18</end></column><line><begin>15</begin><end>15</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>158</UID></FormalParamNodeRef></operator><operands/></OpApplNode></operands></OpApplNode></body><params><leibnizparam><FormalParamNodeRef><UID>157</UID></FormalParamNodeRef><leibniz/></leibnizparam><leibnizparam><FormalParamNodeRef><UID>158</UID></FormalParamNodeRef><leibniz/></leibnizparam></params></UserDefinedOpKind></entry><entry><UID>163</UID><FormalParamNode><location><column><begin>1</begin><end>1</end></column><line><begin>17</begin><end>17</end></line><filename>Naturals</filename></location><level>0</level><uniquename>a</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>164</UID><FormalParamNode><location><column><begin>3</begin><end>3</end></column><line><begin>17</begin><end>17</end></line><filename>Naturals</filename></location><level>0</level><uniquename>b</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>165</UID><FormalParamNode><location><column><begin>14</begin><end>19</end></column><line><begin>17</begin><end>17</end></line><filename>Naturals</filename></location><level>0</level><uniquename>n</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>40</UID><BuiltInKind><location><column><begin>0</begin><end>0</end></column><line><begin>0</begin><end>0</end></line><filename>--TLA+ BUILTINS--</filename></location><level>0</level><uniquename>\in</uniquename><arity>2</arity><params><leibnizparam><FormalParamNodeRef><UID>41</UID></FormalParamNodeRef><leibniz/></leibnizparam><leibnizparam><FormalParamNodeRef><UID>42</UID></FormalParamNodeRef><leibniz/></leibnizparam></params></BuiltInKind></entry><entry><UID>41</UID><FormalParamNode><uniquename>Formal_0</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>42</UID><FormalParamNode><uniquename>Formal_1</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>172</UID><UserDefinedOpKind><location><column><begin>1</begin><end>33</end></column><line><begin>17</begin><end>17</end></line><filename>Naturals</filename></location><level>0</level><uniquename>-</uniquename><arity>2</arity><body><OpApplNode><location><column><begin>14</begin><end>33</end></column><line><begin>17</begin><end>17</end></line><filename>Naturals</filename></location><level>0</level><operator><BuiltInKindRef><UID>126</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>25</begin><end>33</end></column><line><begin>17</begin><end>17</end></line><filename>Naturals</filename></location><level>0</level><operator><BuiltInKindRef><UID>4</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>25</begin><end>29</end></column><line><begin>17</begin><end>17</end></line><filename>Naturals</filename></location><level>0</level><operator><UserDefinedOpKindRef><UID>162</UID></UserDefinedOpKindRef></operator><operands><OpApplNode><location><column><begin>25</begin><end>25</end></column><line><begin>17</begin><end>17</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>164</UID></FormalParamNodeRef></operator><operands/></OpApplNode><OpApplNode><location><column><begin>29</begin><end>29</end></column><line><begin>17</begin><end>17</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>165</UID></FormalParamNodeRef></operator><operands/></OpApplNode></operands></OpApplNode><OpApplNode><location><column><begin>33</begin><end>33</end></column><line><begin>17</begin><end>17</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>163</UID></FormalParamNodeRef></operator><operands/></OpApplNode></operands></OpApplNode></operands><boundSymbols><unbound><FormalParamNodeRef><UID>165</UID></FormalParamNodeRef></unbound></boundSymbols></OpApplNode></body><params><leibnizparam><FormalParamNodeRef><UID>163</UID></FormalParamNodeRef><leibniz/></leibnizparam><leibnizparam><FormalParamNodeRef><UID>164</UID></FormalParamNodeRef><leibniz/></leibnizparam></params></UserDefinedOpKind></entry><entry><UID>173</UID><FormalParamNode><location><column><begin>1</begin><end>1</end></column><line><begin>18</begin><end>18</end></line><filename>Naturals</filename></location><uniquename>a</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>174</UID><FormalParamNode><location><column><begin>3</begin><end>3</end></column><line><begin>18</begin><end>18</end></line><filename>Naturals</filename></location><uniquename>b</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>176</UID><UserDefinedOpKind><location><column><begin>1</begin><end>17</end></column><line><begin>18</begin><end>18</end></line><filename>Naturals</filename></location><level>0</level><uniquename>*</uniquename><arity>2</arity><body><OpApplNode><location><column><begin>14</begin><end>17</end></column><line><begin>18</begin><end>18</end></line><filename>Naturals</filename></location><level>0</level><operator><BuiltInKindRef><UID>2</UID></BuiltInKindRef></operator><operands/></OpApplNode></body><params><leibnizparam><FormalParamNodeRef><UID>173</UID></FormalParamNodeRef><leibniz/></leibnizparam><leibnizparam><FormalParamNodeRef><UID>174</UID></FormalParamNodeRef><leibniz/></leibnizparam></params></UserDefinedOpKind></entry><entry><UID>177</UID><FormalParamNode><location><column><begin>1</begin><end>1</end></column><line><begin>19</begin><end>19</end></line><filename>Naturals</filename></location><level>0</level><uniquename>a</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>178</UID><FormalParamNode><location><column><begin>3</begin><end>3</end></column><line><begin>19</begin><end>19</end></line><filename>Naturals</filename></location><level>0</level><uniquename>b</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>182</UID><UserDefinedOpKind><location><column><begin>1</begin><end>19</end></column><line><begin>19</begin><end>19</end></line><filename>Naturals</filename></location><level>0</level><uniquename>^</uniquename><arity>2</arity><body><OpApplNode><location><column><begin>14</begin><end>19</end></column><line><begin>19</begin><end>19</end></line><filename>Naturals</filename></location><level>0</level><operator><BuiltInKindRef><UID>106</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>15</begin><end>15</end></column><line><begin>19</begin><end>19</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>177</UID></FormalParamNodeRef></operator><operands/></OpApplNode><OpApplNode><location><column><begin>18</begin><end>18</end></column><line><begin>19</begin><end>19</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>178</UID></FormalParamNodeRef></operator><operands/></OpApplNode></operands></OpApplNode></body><params><leibnizparam><FormalParamNodeRef><UID>177</UID></FormalParamNodeRef><leibniz/></leibnizparam><leibnizparam><FormalParamNodeRef><UID>178</UID></FormalParamNodeRef><leibniz/></leibnizparam></params></UserDefinedOpKind></entry><entry><UID>183</UID><FormalParamNode><location><column><begin>1</begin><end>1</end></column><line><begin>20</begin><end>20</end></line><filename>Naturals</filename></location><level>0</level><uniquename>a</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>184</UID><FormalParamNode><location><column><begin>3</begin><end>3</end></column><line><begin>20</begin><end>20</end></line><filename>Naturals</filename></location><level>0</level><uniquename>b</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>188</UID><UserDefinedOpKind><location><column><begin>1</begin><end>19</end></column><line><begin>20</begin><end>20</end></line><filename>Naturals</filename></location><level>0</level><uniquename>&lt;</uniquename><arity>2</arity><body><OpApplNode><location><column><begin>15</begin><end>19</end></column><line><begin>20</begin><end>20</end></line><filename>Naturals</filename></location><level>0</level><operator><BuiltInKindRef><UID>4</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>15</begin><end>15</end></column><line><begin>20</begin><end>20</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>183</UID></FormalParamNodeRef></operator><operands/></OpApplNode><OpApplNode><location><column><begin>19</begin><end>19</end></column><line><begin>20</begin><end>20</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>184</UID></FormalParamNodeRef></operator><operands/></OpApplNode></operands></OpApplNode></body><params><leibnizparam><FormalParamNodeRef><UID>183</UID></FormalParamNodeRef><leibniz/></leibnizparam><leibnizparam><FormalParamNodeRef><UID>184</UID></FormalParamNodeRef><leibniz/></leibnizparam></params></UserDefinedOpKind></entry><entry><UID>189</UID><FormalParamNode><location><column><begin>1</begin><end>1</end></column><line><begin>21</begin><end>21</end></line><filename>Naturals</filename></location><level>0</level><uniquename>a</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>61</UID><BuiltInKind><location><column><begin>0</begin><end>0</end></column><line><begin>0</begin><end>0</end></line><filename>--TLA+ BUILTINS--</filename></location><level>3</level><uniquename>[]</uniquename><arity>1</arity><params><leibnizparam><FormalParamNodeRef><UID>62</UID></FormalParamNodeRef></leibnizparam></params></BuiltInKind></entry><entry><UID>190</UID><FormalParamNode><location><column><begin>3</begin><end>3</end></column><line><begin>21</begin><end>21</end></line><filename>Naturals</filename></location><level>0</level><uniquename>b</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>62</UID><FormalParamNode><uniquename>Formal_0</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>194</UID><UserDefinedOpKind><location><column><begin>1</begin><end>19</end></column><line><begin>21</begin><end>21</end></line><filename>Naturals</filename></location><level>0</level><uniquename>&gt;</uniquename><arity>2</arity><body><OpApplNode><location><column><begin>15</begin><end>19</end></column><line><begin>21</begin><end>21</end></line><filename>Naturals</filename></location><level>0</level><operator><BuiltInKindRef><UID>4</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>15</begin><end>15</end></column><line><begin>21</begin><end>21</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>189</UID></FormalParamNodeRef></operator><operands/></OpApplNode><OpApplNode><location><column><begin>19</begin><end>19</end></column><line><begin>21</begin><end>21</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>190</UID></FormalParamNodeRef></operator><operands/></OpApplNode></operands></OpApplNode></body><params><leibnizparam><FormalParamNodeRef><UID>189</UID></FormalParamNodeRef><leibniz/></leibnizparam><leibnizparam><FormalParamNodeRef><UID>190</UID></FormalParamNodeRef><leibniz/></leibnizparam></params></UserDefinedOpKind></entry><entry><UID>195</UID><FormalParamNode><location><column><begin>1</begin><end>1</end></column><line><begin>22</begin><end>22</end></line><filename>Naturals</filename></location><level>0</level><uniquename>a</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>196</UID><FormalParamNode><location><column><begin>8</begin><end>8</end></column><line><begin>22</begin><end>22</end></line><filename>Naturals</filename></location><level>0</level><uniquename>b</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>200</UID><UserDefinedOpKind><location><column><begin>1</begin><end>19</end></column><line><begin>22</begin><end>22</end></line><filename>Naturals</filename></location><level>0</level><uniquename>\leq</uniquename><arity>2</arity><body><OpApplNode><location><column><begin>15</begin><end>19</end></column><line><begin>22</begin><end>22</end></line><filename>Naturals</filename></location><level>0</level><operator><BuiltInKindRef><UID>4</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>15</begin><end>15</end></column><line><begin>22</begin><end>22</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>195</UID></FormalParamNodeRef></operator><operands/></OpApplNode><OpApplNode><location><column><begin>19</begin><end>19</end></column><line><begin>22</begin><end>22</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>196</UID></FormalParamNodeRef></operator><operands/></OpApplNode></operands></OpApplNode></body><params><leibnizparam><FormalParamNodeRef><UID>195</UID></FormalParamNodeRef><leibniz/></leibnizparam><leibnizparam><FormalParamNodeRef><UID>196</UID></FormalParamNodeRef><leibniz/></leibnizparam></params></UserDefinedOpKind></entry><entry><UID>201</UID><FormalParamNode><location><column><begin>1</begin><end>1</end></column><line><begin>23</begin><end>23</end></line><filename>Naturals</filename></location><level>0</level><uniquename>a</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>202</UID><FormalParamNode><location><column><begin>8</begin><end>8</end></column><line><begin>23</begin><end>23</end></line><filename>Naturals</filename></location><level>0</level><uniquename>b</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>206</UID><UserDefinedOpKind><location><column><begin>1</begin><end>19</end></column><line><begin>23</begin><end>23</end></line><filename>Naturals</filename></location><level>0</level><uniquename>\geq</uniquename><arity>2</arity><body><OpApplNode><location><column><begin>15</begin><end>19</end></column><line><begin>23</begin><end>23</end></line><filename>Naturals</filename></location><level>0</level><operator><BuiltInKindRef><UID>4</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>15</begin><end>15</end></column><line><begin>23</begin><end>23</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>201</UID></FormalParamNodeRef></operator><operands/></OpApplNode><OpApplNode><location><column><begin>19</begin><end>19</end></column><line><begin>23</begin><end>23</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>202</UID></FormalParamNodeRef></operator><operands/></OpApplNode></operands></OpApplNode></body><params><leibnizparam><FormalParamNodeRef><UID>201</UID></FormalParamNodeRef><leibniz/></leibnizparam><leibnizparam><FormalParamNodeRef><UID>202</UID></FormalParamNodeRef><leibniz/></leibnizparam></params></UserDefinedOpKind></entry><entry><UID>207</UID><FormalParamNode><location><column><begin>1</begin><end>1</end></column><line><begin>33</begin><end>33</end></line><filename>Naturals</filename></location><level>0</level><uniquename>a</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>208</UID><FormalParamNode><location><column><begin>5</begin><end>5</end></column><line><begin>33</begin><end>33</end></line><filename>Naturals</filename></location><level>0</level><uniquename>b</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>212</UID><UserDefinedOpKind><location><column><begin>1</begin><end>20</end></column><line><begin>33</begin><end>33</end></line><filename>Naturals</filename></location><level>0</level><uniquename>%</uniquename><arity>2</arity><body><OpApplNode><location><column><begin>15</begin><end>20</end></column><line><begin>33</begin><end>33</end></line><filename>Naturals</filename></location><level>0</level><operator><BuiltInKindRef><UID>106</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>16</begin><end>16</end></column><line><begin>33</begin><end>33</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>207</UID></FormalParamNodeRef></operator><operands/></OpApplNode><OpApplNode><location><column><begin>19</begin><end>19</end></column><line><begin>33</begin><end>33</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>208</UID></FormalParamNodeRef></operator><operands/></OpApplNode></operands></OpApplNode></body><params><leibnizparam><FormalParamNodeRef><UID>207</UID></FormalParamNodeRef><leibniz/></leibnizparam><leibnizparam><FormalParamNodeRef><UID>208</UID></FormalParamNodeRef><leibniz/></leibnizparam></params></UserDefinedOpKind></entry><entry><UID>213</UID><FormalParamNode><location><column><begin>1</begin><end>1</end></column><line><begin>34</begin><end>34</end></line><filename>Naturals</filename></location><level>0</level><uniquename>a</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>214</UID><FormalParamNode><location><column><begin>8</begin><end>8</end></column><line><begin>34</begin><end>34</end></line><filename>Naturals</filename></location><level>0</level><uniquename>b</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>218</UID><UserDefinedOpKind><location><column><begin>1</begin><end>20</end></column><line><begin>34</begin><end>34</end></line><filename>Naturals</filename></location><level>0</level><uniquename>\div</uniquename><arity>2</arity><body><OpApplNode><location><column><begin>15</begin><end>20</end></column><line><begin>34</begin><end>34</end></line><filename>Naturals</filename></location><level>0</level><operator><BuiltInKindRef><UID>106</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>16</begin><end>16</end></column><line><begin>34</begin><end>34</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>213</UID></FormalParamNodeRef></operator><operands/></OpApplNode><OpApplNode><location><column><begin>19</begin><end>19</end></column><line><begin>34</begin><end>34</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>214</UID></FormalParamNodeRef></operator><operands/></OpApplNode></operands></OpApplNode></body><params><leibnizparam><FormalParamNodeRef><UID>213</UID></FormalParamNodeRef><leibniz/></leibnizparam><leibnizparam><FormalParamNodeRef><UID>214</UID></FormalParamNodeRef><leibniz/></leibnizparam></params></UserDefinedOpKind></entry><entry><UID>219</UID><FormalParamNode><location><column><begin>1</begin><end>1</end></column><line><begin>35</begin><end>35</end></line><filename>Naturals</filename></location><level>0</level><uniquename>a</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>220</UID><FormalParamNode><location><column><begin>6</begin><end>6</end></column><line><begin>35</begin><end>35</end></line><filename>Naturals</filename></location><level>0</level><uniquename>b</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>224</UID><UserDefinedOpKind><location><column><begin>1</begin><end>20</end></column><line><begin>35</begin><end>35</end></line><filename>Naturals</filename></location><level>0</level><uniquename>..</uniquename><arity>2</arity><body><OpApplNode><location><column><begin>15</begin><end>20</end></column><line><begin>35</begin><end>35</end></line><filename>Naturals</filename></location><level>0</level><operator><BuiltInKindRef><UID>106</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>16</begin><end>16</end></column><line><begin>35</begin><end>35</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>219</UID></FormalParamNodeRef></operator><operands/></OpApplNode><OpApplNode><location><column><begin>19</begin><end>19</end></column><line><begin>35</begin><end>35</end></line><filename>Naturals</filename></location><level>0</level><operator><FormalParamNodeRef><UID>220</UID></FormalParamNodeRef></operator><operands/></OpApplNode></operands></OpApplNode></body><params><leibnizparam><FormalParamNodeRef><UID>219</UID></FormalParamNodeRef><leibniz/></leibnizparam><leibnizparam><FormalParamNodeRef><UID>220</UID></FormalParamNodeRef><leibniz/></leibnizparam></params></UserDefinedOpKind></entry><entry><UID>229</UID><ModuleNode><location><column><begin>1</begin><end>4</end></column><line><begin>1</begin><end>10</end></line><filename>Counter</filename></location><uniquename>Counter</uniquename><OpDeclNodeRef><UID>230</UID></OpDeclNodeRef><UserDefinedOpKindRef><UID>156</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>162</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>172</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>176</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>182</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>188</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>194</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>200</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>206</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>212</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>218</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>224</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>233</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>237</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>248</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>255</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>261</UID></UserDefinedOpKindRef><UserDefinedOpKindRef><UID>266</UID></UserDefinedOpKindRef></ModuleNode></entry><entry><UID>230</UID><OpDeclNode><location><column><begin>10</begin><end>10</end></column><line><begin>3</begin><end>3</end></line><filename>Counter</filename></location><level>1</level><uniquename>x</uniquename><arity>0</arity><kind>3</kind></OpDeclNode></entry><entry><UID>233</UID><UserDefinedOpKind><location><column><begin>1</begin><end>13</end></column><line><begin>4</begin><end>4</end></line><filename>Counter</filename></location><level>1</level><uniquename>vars</uniquename><arity>0</arity><body><OpApplNode><location><column><begin>9</begin><end>13</end></column><line><begin>4</begin><end>4</end></line><filename>Counter</filename></location><level>1</level><operator><BuiltInKindRef><UID>125</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>11</begin><end>11</end></column><line><begin>4</begin><end>4</end></line><filename>Counter</filename></location><level>1</level><operator><OpDeclNodeRef><UID>230</UID></OpDeclNodeRef></operator><operands/></OpApplNode></operands></OpApplNode></body><params/></UserDefinedOpKind></entry><entry><UID>106</UID><BuiltInKind><location><column><begin>0</begin><end>0</end></column><line><begin>0</begin><end>0</end></line><filename>--TLA+ BUILTINS--</filename></location><level>0</level><uniquename>$SetEnumerate</uniquename><arity>-1</arity></BuiltInKind></entry><entry><UID>237</UID><UserDefinedOpKind><location><column><begin>1</begin><end>13</end></column><line><begin>5</begin><end>5</end></line><filename>Counter</filename></location><level>1</level><uniquename>Init</uniquename><arity>0</arity><body><OpApplNode><location><column><begin>9</begin><end>13</end></column><line><begin>5</begin><end>5</end></line><filename>Counter</filename></location><level>1</level><operator><BuiltInKindRef><UID>4</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>9</begin><end>9</end></column><line><begin>5</begin><end>5</end></line><filename>Counter</filename></location><level>1</level><operator><OpDeclNodeRef><UID>230</UID></OpDeclNodeRef></operator><operands/></OpApplNode><NumeralNode><location><column><begin>13</begin><end>13</end></column><line><begin>5</begin><end>5</end></line><filename>Counter</filename></location><level>0</level><IntValue>0</IntValue></NumeralNode></operands></OpApplNode></body><params/></UserDefinedOpKind></entry><entry><UID>113</UID><BuiltInKind><location><column><begin>0</begin><end>0</end></column><line><begin>0</begin><end>0</end></line><filename>--TLA+ BUILTINS--</filename></location><level>2</level><uniquename>$SquareAct</uniquename><arity>2</arity><params><leibnizparam><FormalParamNodeRef><UID>114</UID></FormalParamNodeRef></leibnizparam><leibnizparam><FormalParamNodeRef><UID>115</UID></FormalParamNodeRef></leibnizparam></params></BuiltInKind></entry><entry><UID>114</UID><FormalParamNode><uniquename>Formal_0</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>115</UID><FormalParamNode><uniquename>Formal_1</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>248</UID><UserDefinedOpKind><location><column><begin>1</begin><end>26</end></column><line><begin>6</begin><end>6</end></line><filename>Counter</filename></location><level>2</level><uniquename>Inc</uniquename><arity>0</arity><body><OpApplNode><location><column><begin>8</begin><end>26</end></column><line><begin>6</begin><end>6</end></line><filename>Counter</filename></location><level>2</level><operator><BuiltInKindRef><UID>19</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>8</begin><end>12</end></column><line><begin>6</begin><end>6</end></line><filename>Counter</filename></location><level>1</level><operator><UserDefinedOpKindRef><UID>188</UID></UserDefinedOpKindRef></operator><operands><OpApplNode><location><column><begin>8</begin><end>8</end></column><line><begin>6</begin><end>6</end></line><filename>Counter</filename></location><level>1</level><operator><OpDeclNodeRef><UID>230</UID></OpDeclNodeRef></operator><operands/></OpApplNode><NumeralNode><location><column><begin>12</begin><end>12</end></column><line><begin>6</begin><end>6</end></line><filename>Counter</filename></location><level>0</level><IntValue>3</IntValue></NumeralNode></operands></OpApplNode><OpApplNode><location><column><begin>17</begin><end>26</end></column><line><begin>6</begin><end>6</end></line><filename>Counter</filename></location><level>2</level><operator><BuiltInKindRef><UID>4</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>17</begin><end>18</end></column><line><begin>6</begin><end>6</end></line><filename>Counter</filename></location><level>2</level><operator><BuiltInKindRef><UID>13</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>17</begin><end>17</end></column><line><begin>6</begin><end>6</end></line><filename>Counter</filename></location><level>1</level><operator><OpDeclNodeRef><UID>230</UID></OpDeclNodeRef></operator><operands/></OpApplNode></operands></OpApplNode><OpApplNode><location><column><begin>22</begin><end>26</end></column><line><begin>6</begin><end>6</end></line><filename>Counter</filename></location><level>1</level><operator><UserDefinedOpKindRef><UID>162</UID></UserDefinedOpKindRef></operator><operands><OpApplNode><location><column><begin>22</begin><end>22</end></column><line><begin>6</begin><end>6</end></line><filename>Counter</filename></location><level>1</level><operator><OpDeclNodeRef><UID>230</UID></OpDeclNodeRef></operator><operands/></OpApplNode><NumeralNode><location><column><begin>26</begin><end>26</end></column><line><begin>6</begin><end>6</end></line><filename>Counter</filename></location><level>0</level><IntValue>1</IntValue></NumeralNode></operands></OpApplNode></operands></OpApplNode></operands></OpApplNode></body><params/></UserDefinedOpKind></entry><entry><UID>125</UID><BuiltInKind><location><column><begin>0</begin><end>0</end></column><line><begin>0</begin><end>0</end></line><filename>--TLA+ BUILTINS--</filename></location><level>0</level><uniquename>$Tuple</uniquename><arity>-1</arity></BuiltInKind></entry><entry><UID>126</UID><BuiltInKind><location><column><begin>0</begin><end>0</end></column><line><begin>0</begin><end>0</end></line><filename>--TLA+ BUILTINS--</filename></location><level>0</level><uniquename>$UnboundedChoose</uniquename><arity>1</arity><params><leibnizparam><FormalParamNodeRef><UID>127</UID></FormalParamNodeRef><leibniz/></leibnizparam></params></BuiltInKind></entry><entry><UID>127</UID><FormalParamNode><uniquename>Formal_0</uniquename><arity>0</arity></FormalParamNode></entry><entry><UID>255</UID><UserDefinedOpKind><location><column><begin>1</begin><end>28</end></column><line><begin>7</begin><end>7</end></line><filename>Counter</filename></location><level>3</level><uniquename>Spec</uniquename><arity>0</arity><body><OpApplNode><location><column><begin>9</begin><end>28</end></column><line><begin>7</begin><end>7</end></line><filename>Counter</filename></location><level>3</level><operator><BuiltInKindRef><UID>19</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>9</begin><end>12</end></column><line><begin>7</begin><end>7</end></line><filename>Counter</filename></location><level>1</level><operator><UserDefinedOpKindRef><UID>237</UID></UserDefinedOpKindRef></operator><operands/></OpApplNode><OpApplNode><location><column><begin>17</begin><end>28</end></column><line><begin>7</begin><end>7</end></line><filename>Counter</filename></location><level>3</level><operator><BuiltInKindRef><UID>61</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>19</begin><end>28</end></column><line><begin>7</begin><end>7</end></line><filename>Counter</filename></location><level>2</level><operator><BuiltInKindRef><UID>113</UID></BuiltInKindRef></operator><operands><OpApplNode><location><column><begin>20</begin><end>22</end></column><line><begin>7</begin><end>7</end></line><filename>Counter</filename></location><level>2</level><operator><UserDefinedOpKindRef><UID>248</UID></UserDefinedOpKindRef></operator><operands/></OpApplNode><OpApplNode><location><column><begin>25</begin><end>28</end></column><line><begin>7</begin><end>7</end></line><filename>Counter</filename></location><level>1</level><operator><UserDefinedOpKindRef><UID>233</UID></UserDefinedOpKindRef></operator><operands/></OpApplNode></operands></OpApplNode></operands></OpApplNode></operands></OpApplNode></body><params/></UserDefinedOpKind></entry></context><ModuleNodeRef><UID>154</UID></ModuleNodeRef><ModuleNodeRef><UID>229</UID></ModuleNodeRef></modules>Semantic processing of module Naturals
+Semantic processing of module Counter

package/skills/statechart/scripts/test/corpus/Counter/verdict-1.out

@@ -0,0 +1,49 @@
+@!@!@STARTMSG 2262:0 @!@!@
+TLC2 Version 2.19 of 08 August 2024 (rev: 5a47802)
+@!@!@ENDMSG 2262 @!@!@
+@!@!@STARTMSG 2401:3 @!@!@
+Please run the Java VM which executes TLC with a throughput optimized garbage collector by passing the "-XX:+UseParallelGC" property.
+@!@!@ENDMSG 2401 @!@!@
+@!@!@STARTMSG 2187:0 @!@!@
+Running breadth-first search Model-Checking with fp 0 and seed 590789401470717458 with 1 worker on 8 cores with 23888MB heap and 64MB offheap memory [pid: 570233] (Linux 6.12.94+ amd64, Eclipse Adoptium 25.0.5 x86_64, MSBDiskFPSet, DiskStateQueue).
+@!@!@ENDMSG 2187 @!@!@
+@!@!@STARTMSG 2220:0 @!@!@
+Starting SANY...
+@!@!@ENDMSG 2220 @!@!@
+Parsing file /agent/repos/plugins/pstack/skills/statechart/scripts/test/corpus/Counter/Counter.tla
+Parsing file /tmp/statechart-BUHfTS/statechart-nSpcGM/tmp-verdict-1/Naturals.tla
+Semantic processing of module Naturals
+Semantic processing of module Counter
+@!@!@STARTMSG 2219:0 @!@!@
+SANY finished.
+@!@!@ENDMSG 2219 @!@!@
+@!@!@STARTMSG 2185:0 @!@!@
+Starting... (2026-10-26 21:45:10)
+@!@!@ENDMSG 2185 @!@!@
+@!@!@STARTMSG 2189:0 @!@!@
+Computing initial states...
+@!@!@ENDMSG 2189 @!@!@
+@!@!@STARTMSG 2190:0 @!@!@
+Finished computing initial states: 1 distinct state generated at 2026-10-26 21:45:10.
+@!@!@ENDMSG 2190 @!@!@
+@!@!@STARTMSG 2193:0 @!@!@
+Model checking completed. No error has been found.
+  Estimates of the probability that TLC did not check all reachable states
+  because two distinct states had the same fingerprint:
+  calculated (optimistic):  val = 0.0
+@!@!@ENDMSG 2193 @!@!@
+@!@!@STARTMSG 2200:0 @!@!@
+Progress(4) at 2026-10-26 21:45:10: 4 states generated (731 s/min), 4 distinct states found (731 ds/min), 0 states left on queue.
+@!@!@ENDMSG 2200 @!@!@
+@!@!@STARTMSG 2199:0 @!@!@
+4 states generated, 4 distinct states found, 0 states left on queue.
+@!@!@ENDMSG 2199 @!@!@
+@!@!@STARTMSG 2194:0 @!@!@
+The depth of the complete state graph search is 4.
+@!@!@ENDMSG 2194 @!@!@
+@!@!@STARTMSG 2268:0 @!@!@
+The average outdegree of the complete state graph is 1 (minimum is 0, the maximum 1 and the 95th percentile is 1).
+@!@!@ENDMSG 2268 @!@!@
+@!@!@STARTMSG 2186:0 @!@!@
+Finished in 332ms at (2026-10-26 21:45:10)
+@!@!@ENDMSG 2186 @!@!@

package/skills/statechart/scripts/test/corpus/CounterAction/ChartRun.out

@@ -0,0 +1,60 @@
+@!@!@STARTMSG 2262:0 @!@!@
+TLC2 Version 2.19 of 08 August 2024 (rev: 5a47802)
+@!@!@ENDMSG 2262 @!@!@
+@!@!@STARTMSG 2401:3 @!@!@
+Please run the Java VM which executes TLC with a throughput optimized garbage collector by passing the "-XX:+UseParallelGC" property.
+@!@!@ENDMSG 2401 @!@!@
+@!@!@STARTMSG 2187:0 @!@!@
+Running breadth-first search Model-Checking with fp 0 and seed -382698100414716996 with 1 worker on 8 cores with 23888MB heap and 64MB offheap memory [pid: 570797] (Linux 6.12.94+ amd64, Eclipse Adoptium 25.0.5 x86_64, MSBDiskFPSet, DiskStateQueue).
+@!@!@ENDMSG 2187 @!@!@
+@!@!@STARTMSG 2220:0 @!@!@
+Starting SANY...
+@!@!@ENDMSG 2220 @!@!@
+Parsing file /tmp/statechart-0h3ubN/statechart-C3zSS6/ChartRun.tla
+Parsing file /agent/repos/plugins/pstack/skills/statechart/scripts/test/corpus/CounterAction/CounterAction.tla
+Parsing file /tmp/statechart-0h3ubN/statechart-C3zSS6/tmp-ChartRun/Naturals.tla
+Parsing file /tmp/statechart-0h3ubN/statechart-C3zSS6/tmp-ChartRun/TLC.tla
+Parsing file /tmp/statechart-0h3ubN/statechart-C3zSS6/tmp-ChartRun/Sequences.tla
+Parsing file /tmp/statechart-0h3ubN/statechart-C3zSS6/tmp-ChartRun/FiniteSets.tla
+Semantic processing of module Naturals
+Semantic processing of module CounterAction
+Semantic processing of module Sequences
+Semantic processing of module FiniteSets
+Semantic processing of module TLC
+Semantic processing of module ChartRun
+@!@!@STARTMSG 2219:0 @!@!@
+SANY finished.
+@!@!@ENDMSG 2219 @!@!@
+@!@!@STARTMSG 2185:0 @!@!@
+Starting... (2026-10-26 21:45:15)
+@!@!@ENDMSG 2185 @!@!@
+@!@!@STARTMSG 2189:0 @!@!@
+Computing initial states...
+@!@!@ENDMSG 2189 @!@!@
+@!@!@STARTMSG 2190:0 @!@!@
+Finished computing initial states: 1 distinct state generated at 2026-10-26 21:45:15.
+@!@!@ENDMSG 2190 @!@!@
+<<"chart", <<3>>, {"NotThree"}>>
+<<"chart", <<3>>, {"NotThree"}>>
+<<"chart", <<4>>, {"NotFour"}>>
+@!@!@STARTMSG 2193:0 @!@!@
+Model checking completed. No error has been found.
+  Estimates of the probability that TLC did not check all reachable states
+  because two distinct states had the same fingerprint:
+  calculated (optimistic):  val = 5.4E-19
+@!@!@ENDMSG 2193 @!@!@
+@!@!@STARTMSG 2200:0 @!@!@
+Progress(5) at 2026-10-26 21:45:15: 7 states generated (1,169 s/min), 5 distinct states found (835 ds/min), 0 states left on queue.
+@!@!@ENDMSG 2200 @!@!@
+@!@!@STARTMSG 2199:0 @!@!@
+7 states generated, 5 distinct states found, 0 states left on queue.
+@!@!@ENDMSG 2199 @!@!@
+@!@!@STARTMSG 2194:0 @!@!@
+The depth of the complete state graph search is 5.
+@!@!@ENDMSG 2194 @!@!@
+@!@!@STARTMSG 2268:0 @!@!@
+The average outdegree of the complete state graph is 1 (minimum is 0, the maximum 1 and the 95th percentile is 1).
+@!@!@ENDMSG 2268 @!@!@
+@!@!@STARTMSG 2186:0 @!@!@
+Finished in 362ms at (2026-10-26 21:45:15)
+@!@!@ENDMSG 2186 @!@!@

package/skills/statechart/scripts/test/corpus/CounterAction/CounterAction.cfg

@@ -0,0 +1,4 @@
+SPECIFICATION Spec
+INVARIANTS NotThree NotFour
+CONSTRAINT Small
+ACTION_CONSTRAINT NoJump