packages/deriver/tests/Unit/Deriver/Evaluator/Execution/Transfer/PropertyReferenceTest.php

1<?php
2
3declare (strict_types=1);
4
5namespace Tests\Unit\Deriver\Evaluator\Execution\Transfer;
6
7use Deriver\Deriver;
8use Deriver\Deriver\Candidate\ResultRef;
9use Deriver\Deriver\Candidate\Snapshot;
10use Deriver\Deriver\Candidate\Statistics;
11use Deriver\Deriver\Contributions;
12use Deriver\Deriver\DeriverConfig;
13use Deriver\Deriver\Evaluator\Call\BoundInstruction;
14use Deriver\Deriver\Evaluator\Call\Evaluators;
15use Deriver\Deriver\Evaluator\Call\Extensions;
16use Deriver\Deriver\Evaluator\Call\Provider\DispatchDecision;
17use Deriver\Deriver\Evaluator\Call\Registrations;
18use Deriver\Deriver\Evaluator\Call\StateRegistry;
19use Deriver\Deriver\Evaluator\EvaluatorConfig;
20use Deriver\Deriver\Evaluator\Evidence\Frontier;
21use Deriver\Deriver\Evaluator\Execution\Call\Allocation;
22use Deriver\Deriver\Evaluator\Execution\Call\ArgumentBinding;
23use Deriver\Deriver\Evaluator\Execution\Call\ArgumentOrder;
24use Deriver\Deriver\Evaluator\Execution\Call\CallExecutor;
25use Deriver\Deriver\Evaluator\Execution\Call\CallResolution;
26use Deriver\Deriver\Evaluator\Execution\Call\Creation\Access;
27use Deriver\Deriver\Evaluator\Execution\Call\Member\Invocation;
28use Deriver\Deriver\Evaluator\Execution\Call\MethodInvocation;
29use Deriver\Deriver\Evaluator\Execution\Call\Native\Invocation as NativeInvocation;
30use Deriver\Deriver\Evaluator\Execution\Call\Native\Properties;
31use Deriver\Deriver\Evaluator\Execution\Call\Native\Signatures;
32use Deriver\Deriver\Evaluator\Execution\Call\ParameterBinding;
33use Deriver\Deriver\Evaluator\Execution\Call\PassedArgument;
34use Deriver\Deriver\Evaluator\Execution\Call\Preparation\Arguments;
35use Deriver\Deriver\Evaluator\Execution\Call\Preparation\Creation;
36use Deriver\Deriver\Evaluator\Execution\Call\Preparation\Methods;
37use Deriver\Deriver\Evaluator\Execution\Call\Preparation\Modes;
38use Deriver\Deriver\Evaluator\Execution\Call\Preparation\Resolution;
39use Deriver\Deriver\Evaluator\Execution\Call\Preparation\Target;
40use Deriver\Deriver\Evaluator\Execution\Call\Preparation\Transfer;
41use Deriver\Deriver\Evaluator\Execution\Call\TypeBinding;
42use Deriver\Deriver\Evaluator\Execution\Call\TypeCheck;
43use Deriver\Deriver\Evaluator\Execution\Completion\Alternative;
44use Deriver\Deriver\Evaluator\Execution\Completion\Assessment;
45use Deriver\Deriver\Evaluator\Execution\Completion\Completion;
46use Deriver\Deriver\Evaluator\Execution\Completion\CompletionKind;
47use Deriver\Deriver\Evaluator\Execution\Completion\StorageSnapshot;
48use Deriver\Deriver\Evaluator\Execution\Constant\ClassNames;
49use Deriver\Deriver\Evaluator\Execution\Constraints;
50use Deriver\Deriver\Evaluator\Execution\Context;
51use Deriver\Deriver\Evaluator\Execution\Control\ExceptionChain;
52use Deriver\Deriver\Evaluator\Execution\Control\ExceptionMatch;
53use Deriver\Deriver\Evaluator\Execution\Control\Handler;
54use Deriver\Deriver\Evaluator\Execution\Control\ObservationLimit;
55use Deriver\Deriver\Evaluator\Execution\Control\StateJoin;
56use Deriver\Deriver\Evaluator\Execution\Control\Unwinding;
57use Deriver\Deriver\Evaluator\Execution\Demand\Discovery;
58use Deriver\Deriver\Evaluator\Execution\Dependencies;
59use Deriver\Deriver\Evaluator\Execution\Evaluator;
60use Deriver\Deriver\Evaluator\Execution\EvaluatorConfig as ExecutionEvaluatorConfig;
61use Deriver\Deriver\Evaluator\Execution\InstructionTransfer;
62use Deriver\Deriver\Evaluator\Execution\Memory\Location;
63use Deriver\Deriver\Evaluator\Execution\Memory\Materialization;
64use Deriver\Deriver\Evaluator\Execution\Memory\Memory;
65use Deriver\Deriver\Evaluator\Execution\Memory\ReferenceConstraint;
66use Deriver\Deriver\Evaluator\Execution\Memory\Slots\SlotReference;
67use Deriver\Deriver\Evaluator\Execution\Memory\Slots\StateStorage;
68use Deriver\Deriver\Evaluator\Execution\Memory\StorageCapture;
69use Deriver\Deriver\Evaluator\Execution\ObservationCollector;
70use Deriver\Deriver\Evaluator\Execution\Offset\Address;
71use Deriver\Deriver\Evaluator\Execution\Offset\Path;
72use Deriver\Deriver\Evaluator\Execution\Offset\Transfer as OffsetTransfer;
73use Deriver\Deriver\Evaluator\Execution\Operation\Conversions;
74use Deriver\Deriver\Evaluator\Execution\Operation\ScalarErrors;
75use Deriver\Deriver\Evaluator\Execution\State;
76use Deriver\Deriver\Evaluator\Execution\Summary\Evaluation;
77use Deriver\Deriver\Evaluator\Execution\Summary\Isolation;
78use Deriver\Deriver\Evaluator\Execution\Trace\Derivation;
79use Deriver\Deriver\Evaluator\Execution\Transfer\MemoryStep;
80use Deriver\Deriver\Evaluator\Execution\Transfer\ObjectAccess;
81use Deriver\Deriver\Evaluator\Execution\Transfer\PropertyAccessCheck;
82use Deriver\Deriver\Evaluator\Execution\Transfer\PropertyLookup;
83use Deriver\Deriver\Evaluator\Execution\Transfer\PropertyReference;
84use Deriver\Deriver\Evaluator\Execution\Transfer\PropertySlot;
85use Deriver\Deriver\Evaluator\Execution\Transfer\PropertyTransfer;
86use Deriver\Deriver\Evaluator\Execution\Transfer\PureStep;
87use Deriver\Deriver\Evaluator\Execution\Transfer\ReferenceAssignment;
88use Deriver\Deriver\Evaluator\Request\Budget;
89use Deriver\Deriver\Evaluator\Request\EntryPoint;
90use Deriver\Deriver\Evaluator\Request\QueryScope;
91use Deriver\Deriver\Evaluator\Request\ReturnQuery;
92use Deriver\Deriver\Evaluator\Scalar\Arithmetic;
93use Deriver\Deriver\Evaluator\Scalar\Arrays;
94use Deriver\Deriver\Evaluator\Scalar\Identity;
95use Deriver\Deriver\Evaluator\Scalar\Increment;
96use Deriver\Deriver\Evaluator\Scalar\NumericString;
97use Deriver\Deriver\Evaluator\Scalar\Operations;
98use Deriver\Deriver\Evaluator\TargetProfile;
99use Deriver\Deriver\Evaluator\Term;
100use Deriver\Deriver\Evaluator\TermKind;
101use Deriver\Deriver\Execution\DerivationResult;
102use Deriver\Deriver\Execution\QueryExecution;
103use Deriver\Deriver\Execution\ResultAssessment;
104use Deriver\Deriver\Identity\QueryEncoding;
105use Deriver\Deriver\Identity\ValueGraph;
106use Deriver\Deriver\Lowerer\AggregateLowering;
107use Deriver\Deriver\Lowerer\AssignmentLowering;
108use Deriver\Deriver\Lowerer\CallLowering;
109use Deriver\Deriver\Lowerer\Control\ConditionalLowering;
110use Deriver\Deriver\Lowerer\Control\DestructuringLowering;
111use Deriver\Deriver\Lowerer\Control\ExceptionLowering;
112use Deriver\Deriver\Lowerer\Declaration\CallableIdentity;
113use Deriver\Deriver\Lowerer\Declaration\CallableSource;
114use Deriver\Deriver\Lowerer\Declaration\ConstantSignatures;
115use Deriver\Deriver\Lowerer\Declaration\Index;
116use Deriver\Deriver\Lowerer\Declaration\Indexer;
117use Deriver\Deriver\Lowerer\Declaration\Metadata\ClassDeclaration;
118use Deriver\Deriver\Lowerer\Declaration\Metadata\PropertyDeclaration;
119use Deriver\Deriver\Lowerer\Declaration\Traits\Composition;
120use Deriver\Deriver\Lowerer\Declaration\Traits\LexicalConstants;
121use Deriver\Deriver\Lowerer\Declaration\Traits\Members;
122use Deriver\Deriver\Lowerer\ExpressionLowering;
123use Deriver\Deriver\Lowerer\Graph\Argument;
124use Deriver\Deriver\Lowerer\Graph\BasicBlock;
125use Deriver\Deriver\Lowerer\Graph\CallableGraph;
126use Deriver\Deriver\Lowerer\Graph\CatchTarget;
127use Deriver\Deriver\Lowerer\Graph\ExceptionRegion;
128use Deriver\Deriver\Lowerer\Graph\Instruction;
129use Deriver\Deriver\Lowerer\Graph\Parameter;
130use Deriver\Deriver\Lowerer\Graph\Terminator;
131use Deriver\Deriver\Lowerer\Hierarchy\Access as HierarchyAccess;
132use Deriver\Deriver\Lowerer\Hierarchy\Builtins;
133use Deriver\Deriver\Lowerer\Hierarchy\Dispatch;
134use Deriver\Deriver\Lowerer\InstructionEmitter;
135use Deriver\Deriver\Lowerer\Lowerer;
136use Deriver\Deriver\Lowerer\LoweringScope;
137use Deriver\Deriver\Lowerer\StatementLowering;
138use Deriver\Deriver\MicroEvaluatorConversion;
139use Deriver\Deriver\Parser\Node\File;
140use Deriver\Deriver\Parser\Parser;
141use Deriver\Deriver\Parser\ParserConfig;
142use Deriver\Deriver\Parser\TargetSyntax;
143use Deriver\Deriver\Providers\ProviderExpansion;
144use Deriver\Deriver\Resolver\AssignmentPatterns;
145use Deriver\Deriver\Resolver\ClassScope;
146use Deriver\Deriver\Resolver\ExpressionValidation;
147use Deriver\Deriver\Resolver\MagicContext;
148use Deriver\Deriver\Resolver\Resolver;
149use Deriver\Deriver\Selection\QueryValidation;
150use Deriver\Deriver\SnapshotIdentity;
151use Deriver\Deriver\Sources\LineMap;
152use Deriver\Deriver\Sources\Path as SourcesPath;
153use Deriver\Deriver\Sources\Source;
154use Deriver\Deriver\Sources\SourceRef;
155use Deriver\Deriver\Sources\Sources;
156use Deriver\Exception\ParserException;
157use Deriver\Exception\ResolutionException;
158use JsonException;
159use PHPUnit\Framework\Attributes\CoversClass;
160use PHPUnit\Framework\Attributes\DataProvider;
161use PHPUnit\Framework\Attributes\Small;
162use PHPUnit\Framework\Attributes\UsesClass;
163use PHPUnit\Framework\TestCase;
164
165/**
166 * @covers \Deriver\Deriver\Evaluator\Execution\Transfer\PropertyReference
167 */
168#[UsesClass(Resolver::class)]
169#[UsesClass(ExpressionValidation::class)]
170#[UsesClass(ResolutionException::class)]
171#[UsesClass(ParserConfig::class)]
172#[UsesClass(ParserException::class)]
173#[CoversClass(PropertyReference::class)]
174#[UsesClass(QueryExecution::class)]
175#[UsesClass(QueryValidation::class)]
176#[UsesClass(ResultAssessment::class)]
177#[UsesClass(Deriver::class)]
178#[UsesClass(Constraints::class)]
179#[UsesClass(Argument::class)]
180#[UsesClass(BasicBlock::class)]
181#[UsesClass(CallableGraph::class)]
182#[UsesClass(CallableIdentity::class)]
183#[UsesClass(CatchTarget::class)]
184#[UsesClass(ClassDeclaration::class)]
185#[UsesClass(ExceptionRegion::class)]
186#[UsesClass(Instruction::class)]
187#[UsesClass(Parameter::class)]
188#[UsesClass(PropertyDeclaration::class)]
189#[UsesClass(Terminator::class)]
190#[UsesClass(Allocation::class)]
191#[UsesClass(ArgumentBinding::class)]
192#[UsesClass(ArgumentOrder::class)]
193#[UsesClass(CallExecutor::class)]
194#[UsesClass(CallResolution::class)]
195#[UsesClass(Access::class)]
196#[UsesClass(Builtins::class)]
197#[UsesClass(Dispatch::class)]
198#[UsesClass(HierarchyAccess::class)]
199#[UsesClass(Invocation::class)]
200#[UsesClass(MethodInvocation::class)]
201#[UsesClass(NativeInvocation::class)]
202#[UsesClass(Properties::class)]
203#[UsesClass(Signatures::class)]
204#[UsesClass(ParameterBinding::class)]
205#[UsesClass(PassedArgument::class)]
206#[UsesClass(Arguments::class)]
207#[UsesClass(Creation::class)]
208#[UsesClass(Methods::class)]
209#[UsesClass(Modes::class)]
210#[UsesClass(Resolution::class)]
211#[UsesClass(Target::class)]
212#[UsesClass(Transfer::class)]
213#[UsesClass(TypeBinding::class)]
214#[UsesClass(TypeCheck::class)]
215#[UsesClass(Completion::class)]
216#[UsesClass(ClassNames::class)]
217#[UsesClass(Context::class)]
218#[UsesClass(ExceptionChain::class)]
219#[UsesClass(ExceptionMatch::class)]
220#[UsesClass(Handler::class)]
221#[UsesClass(ObservationLimit::class)]
222#[UsesClass(StateJoin::class)]
223#[UsesClass(Unwinding::class)]
224#[UsesClass(Discovery::class)]
225#[UsesClass(Dependencies::class)]
226#[UsesClass(InstructionTransfer::class)]
227#[UsesClass(Evaluator::class)]
228#[UsesClass(SlotReference::class)]
229#[UsesClass(StateStorage::class)]
230#[UsesClass(ObservationCollector::class)]
231#[UsesClass(Address::class)]
232#[UsesClass(Path::class)]
233#[UsesClass(OffsetTransfer::class)]
234#[UsesClass(Conversions::class)]
235#[UsesClass(ScalarErrors::class)]
236#[UsesClass(State::class)]
237#[UsesClass(Evaluation::class)]
238#[UsesClass(Isolation::class)]
239#[UsesClass(MemoryStep::class)]
240#[UsesClass(ObjectAccess::class)]
241#[UsesClass(PropertyAccessCheck::class)]
242#[UsesClass(PropertyLookup::class)]
243#[UsesClass(PropertySlot::class)]
244#[UsesClass(PropertyTransfer::class)]
245#[UsesClass(PureStep::class)]
246#[UsesClass(ReferenceAssignment::class)]
247#[UsesClass(Location::class)]
248#[UsesClass(Materialization::class)]
249#[UsesClass(Memory::class)]
250#[UsesClass(ReferenceConstraint::class)]
251#[UsesClass(StorageCapture::class)]
252#[UsesClass(DispatchDecision::class)]
253#[UsesClass(Extensions::class)]
254#[UsesClass(ProviderExpansion::class)]
255#[UsesClass(Evaluators::class)]
256#[UsesClass(StateRegistry::class)]
257#[UsesClass(DeriverConfig::class)]
258#[UsesClass(EntryPoint::class)]
259#[UsesClass(Sources::class)]
260#[UsesClass(SourcesPath::class)]
261#[UsesClass(Snapshot::class)]
262#[UsesClass(Source::class)]
263#[UsesClass(TargetProfile::class)]
264#[UsesClass(Budget::class)]
265#[UsesClass(QueryScope::class)]
266#[UsesClass(ReturnQuery::class)]
267#[UsesClass(ResultRef::class)]
268#[UsesClass(SourceRef::class)]
269#[UsesClass(Alternative::class)]
270#[UsesClass(Assessment::class)]
271#[UsesClass(Derivation::class)]
272#[UsesClass(DerivationResult::class)]
273#[UsesClass(QueryEncoding::class)]
274#[UsesClass(ValueGraph::class)]
275#[UsesClass(Statistics::class)]
276#[UsesClass(StorageSnapshot::class)]
277#[UsesClass(Parser::class)]
278#[UsesClass(File::class)]
279#[UsesClass(AggregateLowering::class)]
280#[UsesClass(AssignmentLowering::class)]
281#[UsesClass(CallLowering::class)]
282#[UsesClass(Lowerer::class)]
283#[UsesClass(ConditionalLowering::class)]
284#[UsesClass(DestructuringLowering::class)]
285#[UsesClass(ExceptionLowering::class)]
286#[UsesClass(ExpressionLowering::class)]
287#[UsesClass(InstructionEmitter::class)]
288#[UsesClass(LoweringScope::class)]
289#[UsesClass(StatementLowering::class)]
290#[UsesClass(ConstantSignatures::class)]
291#[UsesClass(CallableSource::class)]
292#[UsesClass(Indexer::class)]
293#[UsesClass(Index::class)]
294#[UsesClass(Composition::class)]
295#[UsesClass(LexicalConstants::class)]
296#[UsesClass(Members::class)]
297#[UsesClass(LineMap::class)]
298#[UsesClass(MagicContext::class)]
299#[UsesClass(AssignmentPatterns::class)]
300#[UsesClass(ClassScope::class)]
301#[UsesClass(TargetSyntax::class)]
302#[UsesClass(Arithmetic::class)]
303#[UsesClass(Arrays::class)]
304#[UsesClass(Identity::class)]
305#[UsesClass(Increment::class)]
306#[UsesClass(NumericString::class)]
307#[UsesClass(Operations::class)]
308#[UsesClass(Term::class)]
309#[Small]
310final class PropertyReferenceTest extends TestCase
311{
312    public function testAliasRejectsReadonlySources(): void
313    {
314        $source = '<?php class B{function __construct(public readonly int $x){}}function target(){$b=new B(1);try{$ref=&$b->x;}catch(Error $e){return $b->x;}return 999;}';
315        $symbol = 'target';
316        $input = new Sources([new Source('fixture.php', $source)]);
317        $configuration = new DeriverConfig();
318        $contributions = new Contributions();
319        $target = new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision);
320        $providers = new ProviderExpansion($input, array_map(Term::fromNative(...), $configuration->environment), $contributions);
321        $contributions1 = $providers->contributions;
322        $evaluators = new Evaluators(new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision), new Registrations($contributions1->evaluators, $contributions1->providers, $contributions1->domains, $contributions1->intrinsics, $contributions1->stateSlots), $configuration->standardEvaluators);
323        $settings = new EvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators, array_map((new MicroEvaluatorConversion())->convert(...), $configuration->evaluators));
324        $identity = new SnapshotIdentity($providers->input, $settings, $evaluators, $providers->manifest);
325        $snapshotId = $identity->id;
326        $input1 = $providers->input;
327        $parser = new Parser(new ParserConfig($target->version));
328        $trees = array_map(static fn (Source $source1): File => (new Resolver())->resolve($parser->parse(new Source(SourcesPath::normalize($source1->path), $source1->contents, $source1->declarationsOnly))), iterator_to_array($input1, false));
329        $program = new Index($snapshotId, $trees);
330        $result = (new QueryExecution($program, new ExecutionEvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators), $evaluators, $identity->snapshot(array_map(Frontier::fromDiagnostic(...), $program->diagnostics()))))->derive(new ReturnQuery($symbol));
331        self::assertSame([], $result->frontiers);
332        self::assertSame([], $result->exceptionalOutcomes);
333        self::assertCount(1, $result->normalOutcomes);
334        self::assertSame(1, $result->normalOutcomes[0]->values['return']->native());
335    }
336    public function testBindChecksPropertyAndSourceConstraintsBeforeRebinding(): void
337    {
338        $source = '<?php class B{public int $x=1;}function target(){$b=new B;$x=[];try{$b->x=&$x;}catch(TypeError $e){return [$b->x,$x];}return 999;}';
339        $symbol = 'target';
340        $input = new Sources([new Source('fixture.php', $source)]);
341        $configuration = new DeriverConfig();
342        $contributions = new Contributions();
343        $target = new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision);
344        $providers = new ProviderExpansion($input, array_map(Term::fromNative(...), $configuration->environment), $contributions);
345        $contributions1 = $providers->contributions;
346        $evaluators = new Evaluators(new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision), new Registrations($contributions1->evaluators, $contributions1->providers, $contributions1->domains, $contributions1->intrinsics, $contributions1->stateSlots), $configuration->standardEvaluators);
347        $settings = new EvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators, array_map((new MicroEvaluatorConversion())->convert(...), $configuration->evaluators));
348        $identity = new SnapshotIdentity($providers->input, $settings, $evaluators, $providers->manifest);
349        $snapshotId = $identity->id;
350        $input1 = $providers->input;
351        $parser = new Parser(new ParserConfig($target->version));
352        $trees = array_map(static fn (Source $source1): File => (new Resolver())->resolve($parser->parse(new Source(SourcesPath::normalize($source1->path), $source1->contents, $source1->declarationsOnly))), iterator_to_array($input1, false));
353        $program = new Index($snapshotId, $trees);
354        $result = (new QueryExecution($program, new ExecutionEvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators), $evaluators, $identity->snapshot(array_map(Frontier::fromDiagnostic(...), $program->diagnostics()))))->derive(new ReturnQuery($symbol));
355        self::assertSame([], $result->frontiers);
356        self::assertSame([], $result->exceptionalOutcomes);
357        self::assertCount(1, $result->normalOutcomes);
358        self::assertSame([1, []], $result->normalOutcomes[0]->values['return']->native());
359    }
360    public function testIncrementPreservesTheOldValueOnIntegerOverflow(): void
361    {
362        $source = '<?php class B{public int $x=9223372036854775807;}function target(){$b=new B;try{$b->x++;}catch(TypeError $e){return $b->x;}return 999;}';
363        $symbol = 'target';
364        $input = new Sources([new Source('fixture.php', $source)]);
365        $configuration = new DeriverConfig();
366        $contributions = new Contributions();
367        $target = new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision);
368        $providers = new ProviderExpansion($input, array_map(Term::fromNative(...), $configuration->environment), $contributions);
369        $contributions1 = $providers->contributions;
370        $evaluators = new Evaluators(new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision), new Registrations($contributions1->evaluators, $contributions1->providers, $contributions1->domains, $contributions1->intrinsics, $contributions1->stateSlots), $configuration->standardEvaluators);
371        $settings = new EvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators, array_map((new MicroEvaluatorConversion())->convert(...), $configuration->evaluators));
372        $identity = new SnapshotIdentity($providers->input, $settings, $evaluators, $providers->manifest);
373        $snapshotId = $identity->id;
374        $input1 = $providers->input;
375        $parser = new Parser(new ParserConfig($target->version));
376        $trees = array_map(static fn (Source $source1): File => (new Resolver())->resolve($parser->parse(new Source(SourcesPath::normalize($source1->path), $source1->contents, $source1->declarationsOnly))), iterator_to_array($input1, false));
377        $program = new Index($snapshotId, $trees);
378        $result = (new QueryExecution($program, new ExecutionEvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators), $evaluators, $identity->snapshot(array_map(Frontier::fromDiagnostic(...), $program->diagnostics()))))->derive(new ReturnQuery($symbol));
379        self::assertSame([], $result->frontiers);
380        self::assertSame([], $result->exceptionalOutcomes);
381        self::assertCount(1, $result->normalOutcomes);
382        self::assertSame(9223372036854775807, $result->normalOutcomes[0]->values['return']->native());
383    }
384    public function testReadInitializesNullableStorageBeforeExposingItsReference(): void
385    {
386        $source = '<?php class B{public ?int $x;}function target(){$b=new B;$r=&$b->x;return [$b->x,$r];}';
387        $symbol = 'target';
388        $input = new Sources([new Source('fixture.php', $source)]);
389        $configuration = new DeriverConfig();
390        $contributions = new Contributions();
391        $target = new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision);
392        $providers = new ProviderExpansion($input, array_map(Term::fromNative(...), $configuration->environment), $contributions);
393        $contributions1 = $providers->contributions;
394        $evaluators = new Evaluators(new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision), new Registrations($contributions1->evaluators, $contributions1->providers, $contributions1->domains, $contributions1->intrinsics, $contributions1->stateSlots), $configuration->standardEvaluators);
395        $settings = new EvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators, array_map((new MicroEvaluatorConversion())->convert(...), $configuration->evaluators));
396        $identity = new SnapshotIdentity($providers->input, $settings, $evaluators, $providers->manifest);
397        $snapshotId = $identity->id;
398        $input1 = $providers->input;
399        $parser = new Parser(new ParserConfig($target->version));
400        $trees = array_map(static fn (Source $source1): File => (new Resolver())->resolve($parser->parse(new Source(SourcesPath::normalize($source1->path), $source1->contents, $source1->declarationsOnly))), iterator_to_array($input1, false));
401        $program = new Index($snapshotId, $trees);
402        $result = (new QueryExecution($program, new ExecutionEvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators), $evaluators, $identity->snapshot(array_map(Frontier::fromDiagnostic(...), $program->diagnostics()))))->derive(new ReturnQuery($symbol));
403        self::assertSame([null, null], $result->normalOutcomes[0]->values['return']->native());
404        self::assertSame([], $result->exceptionalOutcomes);
405        self::assertSame([], $result->frontiers);
406    }
407    public function testReadRejectsAnUninitializedNonnullableReference(): void
408    {
409        $source = '<?php class B{public int $x;}function target(){$b=new B;try{$r=&$b->x;}catch(Error $e){return "uninitialized";}return 999;}';
410        $symbol = 'target';
411        $input = new Sources([new Source('fixture.php', $source)]);
412        $configuration = new DeriverConfig();
413        $contributions = new Contributions();
414        $target = new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision);
415        $providers = new ProviderExpansion($input, array_map(Term::fromNative(...), $configuration->environment), $contributions);
416        $contributions1 = $providers->contributions;
417        $evaluators = new Evaluators(new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision), new Registrations($contributions1->evaluators, $contributions1->providers, $contributions1->domains, $contributions1->intrinsics, $contributions1->stateSlots), $configuration->standardEvaluators);
418        $settings = new EvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators, array_map((new MicroEvaluatorConversion())->convert(...), $configuration->evaluators));
419        $identity = new SnapshotIdentity($providers->input, $settings, $evaluators, $providers->manifest);
420        $snapshotId = $identity->id;
421        $input1 = $providers->input;
422        $parser = new Parser(new ParserConfig($target->version));
423        $trees = array_map(static fn (Source $source1): File => (new Resolver())->resolve($parser->parse(new Source(SourcesPath::normalize($source1->path), $source1->contents, $source1->declarationsOnly))), iterator_to_array($input1, false));
424        $program = new Index($snapshotId, $trees);
425        $result = (new QueryExecution($program, new ExecutionEvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators), $evaluators, $identity->snapshot(array_map(Frontier::fromDiagnostic(...), $program->diagnostics()))))->derive(new ReturnQuery($symbol));
426        self::assertSame('uninitialized', $result->normalOutcomes[0]->values['return']->native());
427        self::assertSame([], $result->frontiers);
428    }
429    #[DataProvider('providerUninitializedIncrement')]
430    public function testIncrementRejectsUninitializedTypedPropertiesBeforeAnyWrite(string $type, int $delta, bool $post): void
431    {
432        $source1 = '<?php function target(){return 1;}';
433        $budget = new Budget();
434        $configuration = new DeriverConfig();
435        $contributions = new Contributions();
436        $input = new Sources([new Source('fixture.php', $source1)]);
437        $target = new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision);
438        $providers = new ProviderExpansion($input, array_map(Term::fromNative(...), $configuration->environment), $contributions);
439        $contributions1 = $providers->contributions;
440        $evaluators = new Evaluators(new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision), new Registrations($contributions1->evaluators, $contributions1->providers, $contributions1->domains, $contributions1->intrinsics, $contributions1->stateSlots), $configuration->standardEvaluators);
441        $settings = new EvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators, array_map((new MicroEvaluatorConversion())->convert(...), $configuration->evaluators));
442        $identity = new SnapshotIdentity($providers->input, $settings, $evaluators, $providers->manifest);
443        $snapshotId = $identity->id;
444        $input1 = $providers->input;
445        $parser = new Parser(new ParserConfig($target->version));
446        $trees = array_map(static fn (Source $source2): File => (new Resolver())->resolve($parser->parse(new Source(SourcesPath::normalize($source2->path), $source2->contents, $source2->declarationsOnly))), iterator_to_array($input1, false));
447        $program1 = new Index($snapshotId, $trees);
448        $execution = new QueryExecution($program1, new ExecutionEvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators), $evaluators, $identity->snapshot(array_map(Frontier::fromDiagnostic(...), $program1->diagnostics())));
449        $snapshotId1 = 'test';
450        $input2 = new Sources([new Source('fixture.php', $source1)]);
451        $profile = $execution->configuration->target;
452        $parser1 = new Parser(new ParserConfig($profile->version));
453        $trees1 = array_map(static fn (Source $source3): File => (new Resolver())->resolve($parser1->parse(new Source(SourcesPath::normalize($source3->path), $source3->contents, $source3->declarationsOnly))), iterator_to_array($input2, false));
454        $program = new Index($snapshotId1, $trees1);
455        $context = new Context($program, new ReturnQuery('target', budget: $budget), $execution->configuration, $execution->evaluators);
456        $source = new SourceRef('test', 'a.php', 0, 1);
457        $caller = new CallableGraph('target', [], [], $source);
458        $state = new State();
459        $address = new Location('object:one', ['x']);
460        $before = new Term(TermKind::Uninitialized, attributes: ['type' => $type]);
461        $state->memory->write($address, $before);
462        $slot = new PropertySlot(new Term(TermKind::Object, 'one', attributes: ['class' => 'B']), 'x', 'B', new PropertyDeclaration('x', 'B', $type));
463        $instruction = new BoundInstruction('i', 'increment', $source, 'result', ['address'], attributes: ['delta' => $delta, 'post' => $post]);
464        $paths = (new PropertyReference(new Evaluator($context)))->increment($caller, $instruction, $state, $slot, $address);
465        self::assertCount(1, $paths);
466        self::assertSame(CompletionKind::Throw, $paths[0]->completion->kind);
467        self::assertSame('Error', $paths[0]->completion->value?->literal);
468        self::assertSame($before, $paths[0]->memory->read($address));
469        self::assertSame([], $state->registers);
470        self::assertSame([], $context->frontiers);
471    }
472    /**
473     * @return iterable<string,array{string,int,bool}>
474     */
475    public static function providerUninitializedIncrement(): iterable
476    {
477        yield 'integer post increment' => ['int', 1, true];
478        yield 'integer pre increment' => ['int', 1, false];
479        yield 'nullable post decrement' => ['int|null', -1, true];
480        yield 'nullable pre decrement' => ['int|null', -1, false];
481        yield 'string post increment' => ['string', 1, true];
482        yield 'float pre decrement' => ['float', -1, false];
483    }
484    /**
485     * @throws JsonException If independently observed fixture values cannot be decoded
486     */
487    #[DataProvider('providerPropertyAliases')]
488    public function testBindPreservesRecordedReferenceAndPropertyMutationSemantics(string $source, string $expected): void
489    {
490        $symbol = 'target';
491        $input = new Sources([new Source('fixture.php', $source)]);
492        $configuration = new DeriverConfig();
493        $contributions = new Contributions();
494        $target = new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision);
495        $providers = new ProviderExpansion($input, array_map(Term::fromNative(...), $configuration->environment), $contributions);
496        $contributions1 = $providers->contributions;
497        $evaluators = new Evaluators(new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision), new Registrations($contributions1->evaluators, $contributions1->providers, $contributions1->domains, $contributions1->intrinsics, $contributions1->stateSlots), $configuration->standardEvaluators);
498        $settings = new EvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators, array_map((new MicroEvaluatorConversion())->convert(...), $configuration->evaluators));
499        $identity = new SnapshotIdentity($providers->input, $settings, $evaluators, $providers->manifest);
500        $snapshotId = $identity->id;
501        $input1 = $providers->input;
502        $parser = new Parser(new ParserConfig($target->version));
503        $trees = array_map(static fn (Source $source1): File => (new Resolver())->resolve($parser->parse(new Source(SourcesPath::normalize($source1->path), $source1->contents, $source1->declarationsOnly))), iterator_to_array($input1, false));
504        $program = new Index($snapshotId, $trees);
505        $result = (new QueryExecution($program, new ExecutionEvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators), $evaluators, $identity->snapshot(array_map(Frontier::fromDiagnostic(...), $program->diagnostics()))))->derive(new ReturnQuery($symbol));
506        self::assertSame([], $result->frontiers);
507        self::assertSame([], $result->exceptionalOutcomes);
508        self::assertCount(1, $result->normalOutcomes);
509        self::assertSame(json_decode($expected, true, flags: JSON_THROW_ON_ERROR), $result->normalOutcomes[0]->values['return']->native());
510    }
511    /**
512     * @return iterable<string,array{string,string}>
513     */
514    public static function providerPropertyAliases(): iterable
515    {
516        foreach (['typed uninitialized read' => ['<?php class B{public int $x;}function target(){$b=new B;try{return $b->x;}catch(Error $e){return "uninitialized";}}', '"uninitialized"'], 'nullable uninitialized silent' => ['<?php class B{public ?int $x;}function target(){$b=new B;return [isset($b->x),$b->x??8];}', '[false,8]'], 'typed reference rejects later write' => ['<?php class B{public int $x=1;}function target(){$b=new B;$r=&$b->x;try{$r="word";}catch(TypeError $e){return [$b->x,$r];}return 999;}', '[1,1]'], 'nullable reference initializes' => ['<?php class B{public ?int $x;}function target(){$b=new B;$r=&$b->x;return [$b->x,$r];}', '[null,null]'], 'nonnullable reference fails' => ['<?php class B{public int $x;}function target(){$b=new B;try{$r=&$b->x;}catch(Error $e){return isset($b->x);}return 999;}', 'false'], 'alias coerces source' => ['<?php class B{public int $x=1;}function target(){$b=new B;$r="42";$b->x=&$r;return [$b->x,$r];}', '[42,42]'], 'increment typed property' => ['<?php class B{public int $x=1;}function target(){$b=new B;return [$b->x++,$b->x,++$b->x];}', '[1,2,3]'], 'increment typed uninitialized' => ['<?php class B{public int $x;}function target(){$b=new B;try{$b->x++;}catch(Error $e){return isset($b->x);}return 999;}', 'false'], 'readonly unset inside before initialization' => ['<?php class B{public readonly int $x;function run(){unset($this->x);$this->x=4;return $this->x;}}function target(){return (new B)->run();}', '4'], 'readonly unset outside before initialization' => ['<?php class B{public readonly int $x;}function target(){$b=new B;try{unset($b->x);}catch(Error $e){return "blocked";}return "allowed";}', '"blocked"'], 'readonly unset after initialization' => ['<?php class B{public readonly int $x;function __construct(){$this->x=4;}function run(){try{unset($this->x);}catch(Error $e){return $this->x;}return 999;}}function target(){return (new B)->run();}', '4'], 'readonly initialize outside' => ['<?php class B{public readonly int $x;}function target(){$b=new B;try{$b->x=4;}catch(Error $e){return isset($b->x);}return 999;}', 'false'], 'readonly clone writes once' => ['<?php class B{function __construct(public readonly int $x){}function __clone(){$this->x=2;try{$this->x=3;}catch(Error $e){}}}function target(){$a=new B(1);$b=clone $a;return [$a->x,$b->x];}', '[1,2]'], 'readonly failed clone type retains opportunity' => ['<?php class B{function __construct(public readonly int $x){}function __clone(){try{$this->x=[];}catch(TypeError $e){}$this->x=3;}}function target(){$a=new B(1);$b=clone $a;return [$a->x,$b->x];}', '[1,3]'], 'static array default' => ['<?php class B{public static array $a=[1];}function target(){B::$a[]=2;return B::$a;}', '[1,2]'], 'static multiple defaults' => ['<?php class B{public static int $x=1;public static int $y=2;}function target(){B::$x=9;return [B::$x,B::$y,B::$x];}', '[9,2,9]'], 'static null default' => ['<?php class B{public static $x;}function target(){return B::$x;}', 'null'], 'static typed no default' => ['<?php class B{public static int $x;}function target(){try{return B::$x;}catch(Error $e){return "uninitialized";}}', '"uninitialized"'], 'static default throws' => ['<?php class B{public static int $x=1/0;}function target(){try{return B::$x;}catch(DivisionByZeroError $e){return "division";}}', '"division"'], 'static missing property' => ['<?php class B{}function target(){try{return B::$missing;}catch(Error $e){return "missing";}}', '"missing"'], 'instance property as static' => ['<?php class B{public int $x=1;}function target(){try{return B::$x;}catch(Error $e){return "instance";}}', '"instance"'], 'inaccessible public read' => ['<?php class B{private int $x=1;}function target(){$b=new B;try{return $b->x;}catch(Error $e){return "private";}}', '"private"'], 'visible silent read' => ['<?php class B{public int $x=3;}function target(){$b=new B;return [isset($b->x),$b->x??8];}', '[true,3]'], 'magic private read' => ['<?php class B{private int $x=1;function __get($name){return "magic:".$name;}}function target(){return (new B)->x;}', '"magic:x"'], 'magic missing read' => ['<?php class B{function __get($name){return "magic:".$name;}}function target(){return (new B)->x;}', '"magic:x"'], 'magic not used for visible property' => ['<?php class B{public int $x=1;function __get($name){return 99;}}function target(){return (new B)->x;}', '1'], 'magic inaccessible write' => ['<?php class B{private int $x=1;public int $seen=0;function __set($name,$value){$this->seen=$value;}}function target(){$b=new B;$b->x=7;return $b->seen;}', '7'], 'readonly indirect array write' => ['<?php class B{function __construct(public readonly array $x){}}function target(){$b=new B([1]);try{$b->x[]=2;}catch(Error $e){return $b->x;}return 999;}', '[1]'], 'readonly object handle mutation' => ['<?php class C{public int $x=1;}class B{function __construct(public readonly C $value){}}function target(){$b=new B(new C);$b->value->x=2;return $b->value->x;}', '2'], 'scalar property write fails' => ['<?php function target(){$a=1;try{$a->x=2;}catch(Error $e){return $a;}return 999;}', '1'], 'typed unset then initialize' => ['<?php class B{public int $x=1;}function target(){$b=new B;unset($b->x);$b->x=2;return $b->x;}', '2']] as $name => $case) {
517            if (str_contains($name, 'reference') || str_contains($name, 'alias') || str_contains($name, 'increment')) {
518                yield $name => $case;
519            }
520        }
521        foreach (['caller write reaches property' => ['<?php class Box{function __construct(public int &$value){}}function target(){$x=1;$b=new Box($x);$x=2;return $b->value;}', '2'], 'property write reaches caller' => ['<?php class Box{function __construct(public int &$value){}}function target(){$x=1;$b=new Box($x);$b->value=2;return $x;}', '2'], 'constructor write reaches property' => ['<?php class Box{function __construct(public int &$value){$value=3;}}function target(){$x=1;$b=new Box($x);return [$x,$b->value];}', '[3,3]'], 'private promotion keeps alias' => ['<?php class Box{function __construct(private int &$value){}function read(){return $this->value;}}function target(){$x=1;$b=new Box($x);$x=4;return $b->read();}', '4'], 'protected promotion keeps alias' => ['<?php class Box{function __construct(protected int &$value){}function read(){return $this->value;}}function target(){$x=1;$b=new Box($x);$x=4;return $b->read();}', '4'], 'clone keeps shared reference' => ['<?php class Box{function __construct(public int &$value){}}function target(){$x=1;$a=new Box($x);$b=clone $a;$x=5;return [$a->value,$b->value];}', '[5,5]'], 'reference enforces live property type' => ['<?php class Box{function __construct(public int &$value){}}function target(){$x=1;$b=new Box($x);try{$x=[];}catch(TypeError $e){return [$x,$b->value];}return 99;}', '[1,1]'], 'unset removes property constraint' => ['<?php class Box{function __construct(public int &$value){}}function target(){$x=1;$b=new Box($x);unset($b->value);$x=[];return $x;}', '[]'], 'by value promotion stays independent' => ['<?php class Box{function __construct(public int $value){}}function target(){$x=1;$b=new Box($x);$x=2;return $b->value;}', '1'], 'reference readonly promotion rejected' => ['<?php class Box{function __construct(public readonly int &$value){}}function target(){$x=1;try{$b=new Box($x);return 99;}catch(Error $e){return $x;}}', '1'], 'reference readonly class rejected' => ['<?php readonly class Box{function __construct(public int &$value){}}function target(){$x=1;try{$b=new Box($x);return 99;}catch(Error $e){return $x;}}', '1'], 'array promotion keeps alias' => ['<?php class Box{function __construct(public array &$items){}}function target(){$x=[1];$b=new Box($x);$b->items[]=2;return $x;}', '[1,2]'], 'reference default aliases parameter and property' => ['<?php class Box{function __construct(public int &$value=1){$value=2;}}function target(){$b=new Box;return $b->value;}', '2'], 'reference named argument' => ['<?php class Box{function __construct(public int &$value){}}function target(){$x=1;$b=new Box(value:$x);$x=6;return $b->value;}', '6'], 'weak coercion precedes readonly failure' => ['<?php class Box{function __construct(public readonly int &$value){}}function target(){$x="1";try{$b=new Box($x);return 99;}catch(Error $e){return $x;}}', '1'], 'readonly promotion cannot reinitialize' => ['<?php class Box{function __construct(public readonly int $x){}}function target(){$b=new Box(1);try{$b->__construct(2);}catch(Error $e){return $b->x;}return 99;}', '1'], 'all parameter checks precede promotion' => ['<?php class Box{function __construct(public int $x,string $y){}}function target(){$b=new Box(1,"a");try{$b->__construct(2,[]);}catch(TypeError $e){return $b->x;}return 99;}', '1'], 'all coercions precede readonly failure' => ['<?php class Box{function __construct(public readonly int &$x,int &$y){}}function target(){$x=1;$y="2";try{new Box($x,$y);}catch(Error $e){return $y;}return 99;}', '2'], 'repeated promotion rebinds reference' => ['<?php class Box{function __construct(public int &$x){}}function target(){$x=1;$y=2;$b=new Box($x);$b->__construct($y);$x=3;$y=4;return [$x,$b->x];}', '[3,4]'], 'promotion reads latest coerced shared argument' => ['<?php class Box{function __construct(public &$x,float &$y){}}function target(){$v=1;$b=new Box($v,$v);return [$b->x,$v];}', '[1.0,1.0]'], 'parent constructor private promotion' => ['<?php class A{function __construct(private int &$x){}function read(){return $this->x;}}class B extends A{}function target(){$x=1;$b=new B($x);$x=9;return $b->read();}', '9'], 'trait constructor reference promotion' => ['<?php trait T{function __construct(private int &$x){}function read(){return $this->x;}}class B{use T;}function target(){$x=1;$b=new B($x);$x=9;return $b->read();}', '9']] as $name => $case) {
522            yield 'promotion: ' . $name => $case;
523        }
524    }
525    public function testBindSeparatesSymbolicTypeFailuresBeforeMutatingEitherStorage(): void
526    {
527        $source1 = '<?php function target(){return 1;}';
528        $budget = new Budget();
529        $configuration = new DeriverConfig();
530        $contributions = new Contributions();
531        $input1 = new Sources([new Source('fixture.php', $source1)]);
532        $target = new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision);
533        $providers = new ProviderExpansion($input1, array_map(Term::fromNative(...), $configuration->environment), $contributions);
534        $contributions1 = $providers->contributions;
535        $evaluators = new Evaluators(new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision), new Registrations($contributions1->evaluators, $contributions1->providers, $contributions1->domains, $contributions1->intrinsics, $contributions1->stateSlots), $configuration->standardEvaluators);
536        $settings = new EvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators, array_map((new MicroEvaluatorConversion())->convert(...), $configuration->evaluators));
537        $identity = new SnapshotIdentity($providers->input, $settings, $evaluators, $providers->manifest);
538        $snapshotId = $identity->id;
539        $input2 = $providers->input;
540        $parser = new Parser(new ParserConfig($target->version));
541        $trees = array_map(static fn (Source $source2): File => (new Resolver())->resolve($parser->parse(new Source(SourcesPath::normalize($source2->path), $source2->contents, $source2->declarationsOnly))), iterator_to_array($input2, false));
542        $program1 = new Index($snapshotId, $trees);
543        $execution = new QueryExecution($program1, new ExecutionEvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators), $evaluators, $identity->snapshot(array_map(Frontier::fromDiagnostic(...), $program1->diagnostics())));
544        $snapshotId1 = 'test';
545        $input3 = new Sources([new Source('fixture.php', $source1)]);
546        $profile = $execution->configuration->target;
547        $parser1 = new Parser(new ParserConfig($profile->version));
548        $trees1 = array_map(static fn (Source $source3): File => (new Resolver())->resolve($parser1->parse(new Source(SourcesPath::normalize($source3->path), $source3->contents, $source3->declarationsOnly))), iterator_to_array($input3, false));
549        $program = new Index($snapshotId1, $trees1);
550        $context = new Context($program, new ReturnQuery('target', budget: $budget), $execution->configuration, $execution->evaluators);
551        $source = new SourceRef('test', 'a.php', 0, 1);
552        $caller = new CallableGraph('target', [], [], $source);
553        $state = new State();
554        $address = new Location('object:one', ['x']);
555        $input = new Term(TermKind::Input, 'argument');
556        $origin = $state->memory->allocate($input);
557        $state->addresses['source'] = $origin;
558        $state->memory->write($address, Term::constant(7));
559        $slot = new PropertySlot(new Term(TermKind::Object, 'one', attributes: ['class' => 'B']), 'x', 'B', new PropertyDeclaration('x', 'B', 'int'));
560        $instruction = new BoundInstruction('i', 'alias', $source, 'result', ['destination', 'source']);
561        $paths = (new PropertyReference(new Evaluator($context)))->bind($caller, $instruction, $state, $slot, $address);
562        self::assertCount(2, $paths);
563        self::assertSame(['normal', 'throw'], array_map(static fn (State $path): string => $path->completion->kind->value, $paths));
564        self::assertSame(TermKind::TypeRefinement, $paths[0]->registers['result']->kind);
565        self::assertSame('int', $paths[0]->registers['result']->attributes['type']);
566        self::assertSame([$input], $paths[0]->registers['result']->operands);
567        self::assertSame($paths[0]->registers['result'], $paths[0]->memory->read($origin));
568        self::assertSame($paths[0]->registers['result'], $paths[0]->memory->read($address));
569        self::assertSame('TypeError', $paths[1]->completion->value?->literal);
570        self::assertSame(7, $paths[1]->memory->read($address)->literal);
571        self::assertSame($input, $paths[1]->memory->read($origin));
572        self::assertArrayNotHasKey('result', $paths[1]->registers);
573        $paths[0]->memory->write($origin, Term::constant(12));
574        self::assertSame(12, $paths[0]->memory->read($address)->literal);
575        self::assertSame(7, $paths[1]->memory->read($address)->literal);
576        self::assertSame([], $context->frontiers);
577    }
578    #[DataProvider('providerReferenceCoercion')]
579    public function testBindCoercesTheSharedSourceOnlyWhenEveryDeclarationAcceptsIt(bool $strict, ?string $sourceType, bool $success): void
580    {
581        $source1 = '<?php function target(){return 1;}';
582        $budget = new Budget();
583        $configuration = new DeriverConfig();
584        $contributions = new Contributions();
585        $input = new Sources([new Source('fixture.php', $source1)]);
586        $target = new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision);
587        $providers = new ProviderExpansion($input, array_map(Term::fromNative(...), $configuration->environment), $contributions);
588        $contributions1 = $providers->contributions;
589        $evaluators = new Evaluators(new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision), new Registrations($contributions1->evaluators, $contributions1->providers, $contributions1->domains, $contributions1->intrinsics, $contributions1->stateSlots), $configuration->standardEvaluators);
590        $settings = new EvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators, array_map((new MicroEvaluatorConversion())->convert(...), $configuration->evaluators));
591        $identity = new SnapshotIdentity($providers->input, $settings, $evaluators, $providers->manifest);
592        $snapshotId = $identity->id;
593        $input1 = $providers->input;
594        $parser = new Parser(new ParserConfig($target->version));
595        $trees = array_map(static fn (Source $source2): File => (new Resolver())->resolve($parser->parse(new Source(SourcesPath::normalize($source2->path), $source2->contents, $source2->declarationsOnly))), iterator_to_array($input1, false));
596        $program1 = new Index($snapshotId, $trees);
597        $execution = new QueryExecution($program1, new ExecutionEvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators), $evaluators, $identity->snapshot(array_map(Frontier::fromDiagnostic(...), $program1->diagnostics())));
598        $snapshotId1 = 'test';
599        $input2 = new Sources([new Source('fixture.php', $source1)]);
600        $profile = $execution->configuration->target;
601        $parser1 = new Parser(new ParserConfig($profile->version));
602        $trees1 = array_map(static fn (Source $source3): File => (new Resolver())->resolve($parser1->parse(new Source(SourcesPath::normalize($source3->path), $source3->contents, $source3->declarationsOnly))), iterator_to_array($input2, false));
603        $program = new Index($snapshotId1, $trees1);
604        $context = new Context($program, new ReturnQuery('target', budget: $budget), $execution->configuration, $execution->evaluators);
605        $source = new SourceRef('test', 'a.php', 0, 1);
606        $caller = new CallableGraph('target', [], [], $source, strict: $strict);
607        $state = new State();
608        $address = new Location('object:one', ['x']);
609        $origin = new Location('object:two', ['y']);
610        $state->addresses['source'] = $origin;
611        $state->memory->write($origin, Term::constant('12'));
612        $state->memory->propertyTypes['object:two'] = $sourceType === null ? [] : ['y' => $sourceType];
613        $state->memory->write($address, Term::constant(7));
614        $slot = new PropertySlot(new Term(TermKind::Object, 'one', attributes: ['class' => 'B']), 'x', 'B', new PropertyDeclaration('x', 'B', 'int'));
615        $instruction = new BoundInstruction('i', 'alias', $source, 'result', ['destination', 'source']);
616        $paths = (new PropertyReference(new Evaluator($context)))->bind($caller, $instruction, $state, $slot, $address);
617        self::assertCount(1, $paths);
618        self::assertSame($success ? CompletionKind::Normal : CompletionKind::Throw, $paths[0]->completion->kind);
619        self::assertSame($success ? null : 'TypeError', $paths[0]->completion->value?->literal);
620        self::assertSame($success ? 12 : '12', $paths[0]->memory->read($origin)->literal);
621        self::assertSame($success ? 12 : 7, $paths[0]->memory->read($address)->literal);
622        self::assertSame($success ? 12 : null, ($paths[0]->registers['result'] ?? null)?->literal);
623        $paths[0]->memory->write($origin, Term::constant(19));
624        self::assertSame($success ? 19 : 7, $paths[0]->memory->read($address)->literal);
625        self::assertSame([], $context->frontiers);
626    }
627    /**
628     * @return iterable<string,array{bool,?string,bool}>
629     */
630    public static function providerReferenceCoercion(): iterable
631    {
632        yield 'untyped source coerced' => [false, null, true];
633        yield 'strict binding rejects numeric string' => [true, null, false];
634        yield 'existing string declaration prevents integer coercion' => [false, 'string', false];
635        yield 'existing union accepts the same integer' => [false, 'int|float', true];
636    }
637    public function testBindRejectsReadonlyPropertiesBeforeReadingTheSource(): void
638    {
639        $source1 = '<?php function target(){return 1;}';
640        $budget = new Budget();
641        $configuration = new DeriverConfig();
642        $contributions = new Contributions();
643        $input = new Sources([new Source('fixture.php', $source1)]);
644        $target = new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision);
645        $providers = new ProviderExpansion($input, array_map(Term::fromNative(...), $configuration->environment), $contributions);
646        $contributions1 = $providers->contributions;
647        $evaluators = new Evaluators(new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision), new Registrations($contributions1->evaluators, $contributions1->providers, $contributions1->domains, $contributions1->intrinsics, $contributions1->stateSlots), $configuration->standardEvaluators);
648        $settings = new EvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators, array_map((new MicroEvaluatorConversion())->convert(...), $configuration->evaluators));
649        $identity = new SnapshotIdentity($providers->input, $settings, $evaluators, $providers->manifest);
650        $snapshotId = $identity->id;
651        $input1 = $providers->input;
652        $parser = new Parser(new ParserConfig($target->version));
653        $trees = array_map(static fn (Source $source2): File => (new Resolver())->resolve($parser->parse(new Source(SourcesPath::normalize($source2->path), $source2->contents, $source2->declarationsOnly))), iterator_to_array($input1, false));
654        $program1 = new Index($snapshotId, $trees);
655        $execution = new QueryExecution($program1, new ExecutionEvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators), $evaluators, $identity->snapshot(array_map(Frontier::fromDiagnostic(...), $program1->diagnostics())));
656        $snapshotId1 = 'test';
657        $input2 = new Sources([new Source('fixture.php', $source1)]);
658        $profile = $execution->configuration->target;
659        $parser1 = new Parser(new ParserConfig($profile->version));
660        $trees1 = array_map(static fn (Source $source3): File => (new Resolver())->resolve($parser1->parse(new Source(SourcesPath::normalize($source3->path), $source3->contents, $source3->declarationsOnly))), iterator_to_array($input2, false));
661        $program = new Index($snapshotId1, $trees1);
662        $context = new Context($program, new ReturnQuery('target', budget: $budget), $execution->configuration, $execution->evaluators);
663        $source = new SourceRef('test', 'a.php', 0, 1);
664        $caller = new CallableGraph('target', [], [], $source);
665        $state = new State();
666        $address = new Location('object:one', ['x']);
667        $state->memory->write($address, Term::constant(7));
668        $slot = new PropertySlot(new Term(TermKind::Object, 'one', attributes: ['class' => 'B']), 'x', 'B', new PropertyDeclaration('x', 'B', 'int', readonly: true));
669        $instruction = new BoundInstruction('i', 'alias', $source, 'result', ['destination', 'unavailable']);
670        $paths = (new PropertyReference(new Evaluator($context)))->bind($caller, $instruction, $state, $slot, $address);
671        self::assertSame([$state], $paths);
672        self::assertSame(CompletionKind::Throw, $paths[0]->completion->kind);
673        self::assertSame('Error', $paths[0]->completion->value?->literal);
674        self::assertSame(7, $paths[0]->memory->read($address)->literal);
675        self::assertSame([], $paths[0]->registers);
676    }
677    public function testReadExposesTheCellOfAnUndeclaredDynamicProperty(): void
678    {
679        $source1 = '<?php function target(){return 1;}';
680        $budget = new Budget();
681        $configuration = new DeriverConfig();
682        $contributions = new Contributions();
683        $input = new Sources([new Source('fixture.php', $source1)]);
684        $target = new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision);
685        $providers = new ProviderExpansion($input, array_map(Term::fromNative(...), $configuration->environment), $contributions);
686        $contributions1 = $providers->contributions;
687        $evaluators = new Evaluators(new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision), new Registrations($contributions1->evaluators, $contributions1->providers, $contributions1->domains, $contributions1->intrinsics, $contributions1->stateSlots), $configuration->standardEvaluators);
688        $settings = new EvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators, array_map((new MicroEvaluatorConversion())->convert(...), $configuration->evaluators));
689        $identity = new SnapshotIdentity($providers->input, $settings, $evaluators, $providers->manifest);
690        $snapshotId = $identity->id;
691        $input1 = $providers->input;
692        $parser = new Parser(new ParserConfig($target->version));
693        $trees = array_map(static fn (Source $source2): File => (new Resolver())->resolve($parser->parse(new Source(SourcesPath::normalize($source2->path), $source2->contents, $source2->declarationsOnly))), iterator_to_array($input1, false));
694        $program1 = new Index($snapshotId, $trees);
695        $execution = new QueryExecution($program1, new ExecutionEvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators), $evaluators, $identity->snapshot(array_map(Frontier::fromDiagnostic(...), $program1->diagnostics())));
696        $snapshotId1 = 'test';
697        $input2 = new Sources([new Source('fixture.php', $source1)]);
698        $profile = $execution->configuration->target;
699        $parser1 = new Parser(new ParserConfig($profile->version));
700        $trees1 = array_map(static fn (Source $source3): File => (new Resolver())->resolve($parser1->parse(new Source(SourcesPath::normalize($source3->path), $source3->contents, $source3->declarationsOnly))), iterator_to_array($input2, false));
701        $program = new Index($snapshotId1, $trees1);
702        $context = new Context($program, new ReturnQuery('target', budget: $budget), $execution->configuration, $execution->evaluators);
703        $source = new SourceRef('test', 'a.php', 0, 1);
704        $caller = new CallableGraph('target', [], [], $source);
705        $state = new State();
706        $address = new Location('object:one', ['x']);
707        $state->addresses['property'] = $address;
708        $state->memory->write($address, Term::constant(7));
709        $slot = new PropertySlot(new Term(TermKind::Object, 'one', attributes: ['class' => 'B']), 'x', 'B', null);
710        $instruction = new BoundInstruction('i', 'reference', $source, 'result', ['property']);
711        $paths = (new PropertyReference(new Evaluator($context)))->read($caller, $instruction, $state, $slot, $address);
712        self::assertSame([$state], $paths);
713        self::assertSame(CompletionKind::Normal, $paths[0]->completion->kind);
714        self::assertSame(TermKind::Cell, $paths[0]->registers['result']->kind);
715        self::assertIsString($paths[0]->registers['result']->literal);
716        $paths[0]->memory->write(new Location($paths[0]->registers['result']->literal), Term::constant(12));
717        self::assertSame(12, $paths[0]->memory->read($address)->literal);
718        self::assertSame([], $context->frontiers);
719    }
720    #[DataProvider('providerRejectedIncrement')]
721    public function testIncrementLeavesStorageAndResultUntouchedWhenRejected(Term $before, bool $readonly, string $error): void
722    {
723        $source1 = '<?php function target(){return 1;}';
724        $budget = new Budget();
725        $configuration = new DeriverConfig();
726        $contributions = new Contributions();
727        $input = new Sources([new Source('fixture.php', $source1)]);
728        $target = new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision);
729        $providers = new ProviderExpansion($input, array_map(Term::fromNative(...), $configuration->environment), $contributions);
730        $contributions1 = $providers->contributions;
731        $evaluators = new Evaluators(new TargetProfile($configuration->phpVersion, $configuration->integerBits, $configuration->floatPrecision), new Registrations($contributions1->evaluators, $contributions1->providers, $contributions1->domains, $contributions1->intrinsics, $contributions1->stateSlots), $configuration->standardEvaluators);
732        $settings = new EvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators, array_map((new MicroEvaluatorConversion())->convert(...), $configuration->evaluators));
733        $identity = new SnapshotIdentity($providers->input, $settings, $evaluators, $providers->manifest);
734        $snapshotId = $identity->id;
735        $input1 = $providers->input;
736        $parser = new Parser(new ParserConfig($target->version));
737        $trees = array_map(static fn (Source $source2): File => (new Resolver())->resolve($parser->parse(new Source(SourcesPath::normalize($source2->path), $source2->contents, $source2->declarationsOnly))), iterator_to_array($input1, false));
738        $program1 = new Index($snapshotId, $trees);
739        $execution = new QueryExecution($program1, new ExecutionEvaluatorConfig($target, $providers->environment, $configuration->standardEvaluators), $evaluators, $identity->snapshot(array_map(Frontier::fromDiagnostic(...), $program1->diagnostics())));
740        $snapshotId1 = 'test';
741        $input2 = new Sources([new Source('fixture.php', $source1)]);
742        $profile = $execution->configuration->target;
743        $parser1 = new Parser(new ParserConfig($profile->version));
744        $trees1 = array_map(static fn (Source $source3): File => (new Resolver())->resolve($parser1->parse(new Source(SourcesPath::normalize($source3->path), $source3->contents, $source3->declarationsOnly))), iterator_to_array($input2, false));
745        $program = new Index($snapshotId1, $trees1);
746        $context = new Context($program, new ReturnQuery('target', budget: $budget), $execution->configuration, $execution->evaluators);
747        $source = new SourceRef('test', 'a.php', 0, 1);
748        $caller = new CallableGraph('target', [], [], $source);
749        $state = new State();
750        $address = new Location('object:one', ['x']);
751        $state->memory->write($address, $before);
752        $slot = new PropertySlot(new Term(TermKind::Object, 'one', attributes: ['class' => 'B']), 'x', 'B', new PropertyDeclaration('x', 'B', readonly: $readonly));
753        $instruction = new BoundInstruction('i', 'increment', $source, 'result', ['property'], attributes: ['post' => true]);
754        $paths = (new PropertyReference(new Evaluator($context)))->increment($caller, $instruction, $state, $slot, $address);
755        self::assertSame([$state], $paths);
756        self::assertSame(CompletionKind::Throw, $paths[0]->completion->kind);
757        self::assertSame($error, $paths[0]->completion->value?->literal);
758        self::assertSame($before, $paths[0]->memory->read($address));
759        self::assertSame([], $paths[0]->registers);
760    }
761    /**
762     * @return iterable<string,array{Term,bool,string}>
763     */
764    public static function providerRejectedIncrement(): iterable
765    {
766        yield 'readonly integer' => [Term::constant(1), true, 'Error'];
767        yield 'array is not incrementable' => [Term::array([]), false, 'TypeError'];
768        yield 'object is not incrementable' => [new Term(TermKind::Object, 'other', attributes: ['class' => 'B']), false, 'TypeError'];
769    }
770}
771