sanderling/internal/verifier/combinator_test.go

package verifier

import (
	"encoding/json"
	"strings"
	"testing"

	"github.com/priyanshujain/sanderling/internal/ltl"
)

// TestCombinators_VerdictTransitions loads real specs through the goja runtime
// using the chainable LTL combinators (implies/or/and/not + now + within steps)
// and drives them across snapshots. Bug class: a user spec built from these
// combinators silently mis-evaluates (wrong verdict at the wrong step).
func TestCombinators_VerdictTransitions(t *testing.T) {
	const heads = `
globalThis.p = __sanderling__.extract(state => state.snapshots["p"] ?? false, "p");
globalThis.q = __sanderling__.extract(state => state.snapshots["q"] ?? false, "q");
`
	type step struct {
		p, q string
		want ltl.Verdict
	}
	cases := []struct {
		name  string
		body  string
		steps []step
	}{
		{
			name: "implies",
			body: `globalThis.properties = { r: __sanderling__.always(__sanderling__.now(()=>p.current).implies(__sanderling__.now(()=>q.current))) };`,
			steps: []step{
				{"false", "false", ltl.VerdictHolds}, // antecedent false -> vacuously holds
				{"true", "true", ltl.VerdictHolds},
				{"true", "false", ltl.VerdictViolated},  // p true, q false
				{"false", "false", ltl.VerdictViolated}, // sticky
			},
		},
		{
			name: "or",
			body: `globalThis.properties = { r: __sanderling__.always(__sanderling__.now(()=>p.current).or(__sanderling__.now(()=>q.current))) };`,
			steps: []step{
				{"true", "false", ltl.VerdictHolds},
				{"false", "true", ltl.VerdictHolds},
				{"false", "false", ltl.VerdictViolated},
			},
		},
		{
			name: "and",
			body: `globalThis.properties = { r: __sanderling__.always(__sanderling__.now(()=>p.current).and(__sanderling__.now(()=>q.current))) };`,
			steps: []step{
				{"true", "true", ltl.VerdictHolds},
				{"true", "false", ltl.VerdictViolated}, // one conjunct false
			},
		},
		{
			name: "not",
			body: `globalThis.properties = { r: __sanderling__.always(__sanderling__.now(()=>p.current).not()) };`,
			steps: []step{
				{"false", "false", ltl.VerdictHolds},
				{"true", "false", ltl.VerdictViolated},
			},
		},
		{
			name: "within_steps_deadline",
			body: `globalThis.properties = { r: __sanderling__.always(__sanderling__.eventually(()=>p.current).within(2,'steps')) };`,
			steps: []step{
				{"false", "false", ltl.VerdictPending},  // obligation open
				{"false", "false", ltl.VerdictViolated}, // deadline blown, never fired
			},
		},
		{
			name: "within_steps_satisfied",
			body: `globalThis.properties = { r: __sanderling__.always(__sanderling__.eventually(()=>p.current).within(2,'steps')) };`,
			steps: []step{
				{"false", "false", ltl.VerdictPending},
				{"true", "false", ltl.VerdictHolds}, // fired before deadline
			},
		},
	}

	for _, testCase := range cases {
		t.Run(testCase.name, func(t *testing.T) {
			verifier := newVerifier(t)
			mustLoad(t, verifier, heads+testCase.body)
			for i, s := range testCase.steps {
				if err := verifier.PushSnapshot(SnapshotInput{
					Snapshots: Snapshots{"p": json.RawMessage(s.p), "q": json.RawMessage(s.q)},
					StepIndex: i + 1,
				}); err != nil {
					t.Fatal(err)
				}
				if got := verifier.EvaluateProperties()["r"]; got != s.want {
					t.Errorf("step %d (p=%s q=%s): got %v, want %v", i+1, s.p, s.q, got, s.want)
				}
			}
		})
	}
}

// TestWithin_InvalidUnitPanics verifies an unrecognized within() unit surfaces
// as a spec load error rather than silently constructing an unbounded
// eventually. Bug class: a typo'd unit ('ms'/'s') would otherwise build a
// formula that never enforces its deadline.
func TestWithin_InvalidUnitPanics(t *testing.T) {
	for _, unit := range []string{"ms", "s", "minutes", ""} {
		verifier := newVerifier(t)
		src := `globalThis.properties = { r: __sanderling__.always(__sanderling__.eventually(()=>true).within(2,'` + unit + `')) };`
		err := verifier.Load(src)
		if err == nil {
			t.Errorf("unit %q: expected load error, got nil", unit)
			continue
		}
		if !strings.Contains(err.Error(), "within unit must be") {
			t.Errorf("unit %q: error = %v, want within-unit diagnostic", unit, err)
		}
	}
}