datalogic-rs 5.9.0

#![forbid(unsafe_code)]
#![warn(missing_docs)]
#![warn(unreachable_pub)]
// Enable the `#[doc(cfg(...))]` attribute on docs.rs builds so feature-gated
// public items render with a "Available on crate feature X only" badge. The
// matching `--cfg docsrs` is passed by `[package.metadata.docs.rs]` in
// Cargo.toml; on a regular stable build this attribute is inert.
#![cfg_attr(docsrs, feature(doc_cfg))]

//! # datalogic-rs
//!
//! A high-performance, thread-safe Rust implementation of JSONLogic.
//!
//! ## Overview
//!
//! `datalogic-rs` provides a powerful rule evaluation engine that compiles JSONLogic
//! expressions into optimized, reusable structures that can be evaluated across
//! multiple threads with zero overhead.
//!
//! ## Key Features
//!
//! - **Compilation-based optimization**: Parse once, evaluate many times
//! - **Thread-safe by design**: Share compiled logic across threads with `Arc`
//! - **84 built-in operators**: Complete JSONLogic compatibility plus extensions
//! - **Arena-allocated evaluation**: Results live in a `bumpalo::Bump` arena and can borrow directly into caller input for zero-copy paths
//! - **Extensible**: Add custom operators via the [`CustomOperator`] trait
//! - **Structured templates**: Preserve object structure for dynamic outputs
//!
//! ## Quick Start (one-shot)
//!
//! ```rust
//! use datalogic_rs::Engine;
//!
//! let engine = Engine::new();
//! let result = engine.eval_str(
//!     r#"{"==": [{"var": "status"}, "active"]}"#,
//!     r#"{"status": "active"}"#,
//! ).unwrap();
//! assert_eq!(result, "true");
//! ```
//!
//! ## Reusing the arena across many evaluations
//!
//! For high-throughput callers, open a [`Session`] handle. It owns a
//! [`bumpalo::Bump`], resets it between calls, and returns owned results so
//! you don't have to juggle arena lifetimes:
//!
//! ```rust
//! use datalogic_rs::Engine;
//!
//! let engine = Engine::new();
//! let compiled = engine.compile(r#"{"+": [{"var": "x"}, 1]}"#).unwrap();
//! let mut session = engine.session();
//!
//! for x in 0..3 {
//!     let payload = format!(r#"{{"x": {}}}"#, x);
//!     let result = session.eval_str(&compiled, &payload).unwrap();
//!     assert_eq!(result, (x + 1).to_string());
//!     // The session does not auto-reset; bound peak memory by
//!     // resetting between iterations (constant-time, reuses chunks).
//!     session.reset();
//! }
//! ```
//!
//! ## Power-user (compile once, evaluate many, zero-copy results)
//!
//! When the result borrow can stay scoped to a caller-managed
//! [`bumpalo::Bump`], skip the deep-clone and use [`Engine::evaluate`]
//! directly. `evaluate` accepts any input shape via [`EvalInput`]:
//! `&str`, `&OwnedDataValue`, `&serde_json::Value`, an owned `DataValue<'a>`,
//! or an existing `&'a DataValue<'a>`.
//!
//! ```rust
//! use bumpalo::Bump;
//! use datalogic_rs::Engine;
//!
//! let engine = Engine::new();
//! let compiled = engine.compile(r#"{"==": [{"var": "status"}, "active"]}"#).unwrap();
//!
//! let arena = Bump::new();
//! let result = engine.evaluate(&compiled, r#"{"status": "active"}"#, &arena).unwrap();
//! assert_eq!(result.as_bool(), Some(true));
//! ```
//!
//! ## Architecture
//!
//! The library uses a two-phase approach:
//!
//! 1. **Compilation**: JSON logic is parsed into `Logic` with OpCode dispatch
//! 2. **Evaluation**: Compiled logic is evaluated through arena dispatch — results
//!    are `&'a DataValue<'a>` allocated in a `bumpalo::Bump` for the duration of
//!    one evaluate call.
//!
//! This design enables sharing compiled logic across threads, eliminates
//! repeated parsing overhead, and lets read-through operations like `var`
//! return zero-copy borrows into the caller's input data.

// Compile and run the crate README's Rust blocks as doctests, so the
// README crates.io renders cannot drift from the API. Gated on the
// features its examples use; `cargo test --all-features` runs them.
#[cfg(all(
    doctest,
    feature = "serde_json",
    feature = "templating",
    feature = "trace",
    feature = "all-operators"
))]
#[doc = include_str!("../README.md")]
struct ReadmeDoctests;

mod arena;
mod arena_ext;
mod builder;
mod check;
mod compile;
mod config;
mod engine;
mod error;
mod eval_input;
mod facts;
mod logic_input;
mod node;
mod node_serialize;
pub mod operator;
mod operators;
mod parsed_data;
mod path;
mod projection;
mod result_output;
mod roots;
#[cfg(feature = "serde_json")]
mod serde_bridge;
mod session;
mod top_level;
#[cfg(feature = "trace")]
mod trace;
mod truthy_input;

pub use arena::DataValue;
pub use arena_ext::ArenaExt;
pub use builder::EngineBuilder;
/// The [`bumpalo`] arena allocator, re-exported.
///
/// `Engine::evaluate` and the [`CustomOperator`] trait both take a
/// `&'a bumpalo::Bump` parameter, so callers need a way to construct
/// arenas. Re-exporting locks the major version of `bumpalo` to whatever
/// `datalogic-rs` itself depends on — pair with `use datalogic_rs::bumpalo`
/// instead of an independent `bumpalo` dep to avoid major-version skew.
pub use bumpalo;
pub use check::{CheckMode, CompileError, Diagnostic, DiagnosticCode, Severity};
pub use config::{
    DivisionByZeroHandling, EvaluationConfig, MissingVar, NanHandling, NumericCoercionConfig,
    TruthyEvaluator,
};
/// The `datavalue` crate, re-exported. `datalogic-rs` builds on `datavalue`'s
/// owned and borrowed value types — accessing them through this module makes
/// the dependency explicit at the use site.
///
/// # Working with `DataValue`
///
/// Evaluation returns [`DataValue`] (re-exported at the crate root and
/// also reachable as `datalogic_rs::datavalue::DataValue`). It's an
/// arena-allocated JSON-shaped value tree borrowed from a
/// [`bumpalo::Bump`]. The accessors most callers reach for live in this
/// re-exported crate:
///
/// - **Type predicates** — `.is_null()`, `.is_bool()`, `.is_number()`,
///   `.is_string()`, `.is_array()`, `.is_object()`.
/// - **Owned readers** — `.as_bool()`, `.as_i64()`, `.as_f64()`,
///   `.as_str()`, `.as_array()`, `.as_object()`. Each returns
///   `Option<…>`; the `None` case is "wrong variant," not a runtime error.
/// - **Indexing** — `value["key"]` / `value[idx]` returns `&DataValue`
///   (or the `Null` singleton on miss, matching `serde_json::Value`).
///
/// # Owned vs borrowed
///
/// [`DataValue<'a>`](datavalue::DataValue) borrows from a `Bump`;
/// [`OwnedDataValue`](datavalue::OwnedDataValue) is the heap-owned
/// counterpart. Use the owned form when you need to outlive the arena —
/// caching a result, returning across an `await`, sending across a
/// channel. Convert via `borrowed.to_owned()` and `owned.to_arena(&bump)`.
///
/// # Crossing the `serde_json` boundary
///
/// Conversions to / from `serde_json::Value` are gated behind the
/// `serde_json` feature (kept off by default so the crate has zero
/// external dependencies in the minimal build). With `serde_json`
/// enabled, pass a `&serde_json::Value` into any `eval*` method via
/// [`EvalInput`] / [`IntoLogic`] (a `T: Serialize` is converted first with
/// `serde_json::to_value`; there is no blanket `&T: Serialize` impl), and
/// ask for a `serde_json::Value` (or any `T: DeserializeOwned`) back via
// `Engine::eval_into` / `Session::eval_into` are gated behind
// `serde_json`; link them when the feature is on, otherwise emit them
// as code text so default-features `cargo doc` doesn't break.
#[cfg_attr(
    feature = "serde_json",
    doc = "[`Engine::eval_into`] / [`Session::eval_into`]. For the `DataValue"
)]
#[cfg_attr(
    not(feature = "serde_json"),
    doc = "`Engine::eval_into` / `Session::eval_into`. For the `DataValue"
)]
/// → JSON String` path use the standard `value.to_string()`, which is
/// what [`Engine::eval_str`] uses internally.
pub use datavalue;
pub use engine::Engine;
#[cfg(feature = "budget")]
#[cfg_attr(docsrs, doc(cfg(feature = "budget")))]
pub use engine::Metered;
pub use error::{CustomErrorSource, Error, ErrorCode, ErrorKind, UnknownErrorCode};
pub use eval_input::{EvalInput, OwnedInput};
pub use facts::{DataPath, Facts};
pub use logic_input::IntoLogic;
pub use node::Logic;
pub use operators::info::{OperatorInfo, ScopedArg};
pub use operators::table::Family;
pub use parsed_data::ParsedData;
pub use path::PathStep;
pub use result_output::FromDataValue;
pub use roots::{RootValue, Roots};
pub use session::{Session, SharedSession};
#[cfg(feature = "serde_json")]
#[cfg_attr(docsrs, doc(cfg(feature = "serde_json")))]
pub use top_level::eval_into;
pub use top_level::{compile, eval, eval_str};
#[cfg(feature = "trace")]
#[cfg_attr(docsrs, doc(cfg(feature = "trace")))]
pub use trace::{ExecutionStep, ExpressionNode, TracedRun, TracedSession};
pub use truthy_input::TruthyInput;

// `CompiledNode`, `OpCode`, `MetadataHint`, `PathSegment`, `ReduceHint` were
// public in 4.x. They are compile-internal in v5; consumers reach for them
// via `crate::node::*` / `crate::OpCode` directly.
pub(crate) use node::CompiledNode;

/// Not public API. The operator table's full catalogue, every family
/// whether compiled in or not, for the conformance runner and repository
/// tooling to tell a gated-off operator from a misspelled one.
#[doc(hidden)]
pub mod __private {
    pub use crate::operators::table::{CATALOGUE, CatalogueEntry};
}
pub(crate) use operators::table::OpCode;

/// Result type for Engine operations
pub type Result<T> = std::result::Result<T, Error>;

/// Custom operator hook for the [`Engine`].
///
/// Implementations receive args **already evaluated** as borrowed
/// [`DataValue`] references and return a `&'a DataValue<'a>` result
/// allocated in the supplied [`bumpalo::Bump`] arena.
///
/// ## Lifetime
///
/// `'a` is the arena lifetime, tied to the [`bumpalo::Bump`] allocator
/// that lives for the duration of one [`Engine::evaluate`] call. Args
/// borrow from the caller's input and from prior arena allocations; the
/// returned `&'a DataValue<'a>` must be allocated in the arena (or be a
/// preallocated singleton) — never a stack reference.
///
/// ## Example
///
/// ```rust
/// use datalogic_rs::{CustomOperator, DataValue, Engine, Result, operator::EvalContext};
/// use bumpalo::Bump;
///
/// struct DoubleArena;
/// impl CustomOperator for DoubleArena {
///     fn evaluate<'a>(
///         &self,
///         args: &[&'a DataValue<'a>],
///         _ctx: &mut EvalContext<'_, 'a>,
///         arena: &'a Bump,
///     ) -> Result<&'a DataValue<'a>> {
///         let n = args.first().and_then(|v| v.as_f64()).unwrap_or(0.0);
///         Ok(arena.alloc(DataValue::from_f64(n * 2.0)))
///     }
/// }
///
/// let engine = Engine::builder().add_operator("double", DoubleArena).build();
///
/// let result = engine.eval_str(r#"{"double": 21}"#, "null").unwrap();
/// assert_eq!(result, "42");
/// ```
///
/// ## Stability
///
/// This trait is the headline extension point of the crate and is
/// intentionally not sealed. Within the **5.x series** the only changes
/// that will be made to this trait are *default-method additions* — no
/// new required methods, no signature changes to [`Self::evaluate`], no
/// lifetime restructuring. Implementations written against 5.0 will
/// compile against every 5.x release without modification. Any breaking
/// change here requires a 6.0 bump.
///
/// The opaque types in the signature ([`crate::DataValue`],
/// [`operator::EvalContext`], [`bumpalo::Bump`]) may evolve internally
/// without breaking this contract, since their public surface is the
/// stable boundary.
pub trait CustomOperator: Send + Sync {
    /// Evaluate this operator with arena-allocated args and result.
    ///
    /// # Arguments
    ///
    /// * `args` — pre-evaluated args as `&'a DataValue<'a>`. The arena
    ///   dispatcher has already recursed into each arg's expression tree.
    /// * `ctx` — opaque view into the engine's evaluation context. Most
    ///   operators ignore this; it exposes [`operator::EvalContext::root_input`]
    ///   and [`operator::EvalContext::depth`] for the rare case where an
    ///   operator's behaviour depends on the surrounding context.
    /// * `arena` — the [`bumpalo::Bump`] allocator. Use `arena.alloc(...)`
    ///   for arena values, `arena.alloc_str(...)` for strings. For the
    ///   common case of returning a typed `DataValue` result, prefer the
    ///   one-call helpers on [`ArenaExt`] (`arena.f64(n)`,
    ///   `arena.string(s)`, `arena.bool(b)`, …) — they are zero-cost
    ///   over the manual form and short-circuit to preallocated
    ///   singletons for `null`, booleans, small ints, and empty
    ///   string/array/object.
    fn evaluate<'a>(
        &self,
        args: &[&'a DataValue<'a>],
        ctx: &mut operator::EvalContext<'_, 'a>,
        arena: &'a bumpalo::Bump,
    ) -> Result<&'a DataValue<'a>>;

    /// What the engine may assume about this operator. The default,
    /// [`CustomOperatorInfo::opaque`], assumes nothing: the operator may
    /// return a different result each call and read the whole context.
    ///
    /// Declaring more lets the engine do more:
    ///
    /// - [`deterministic`](CustomOperatorInfo::deterministic) without
    ///   [`reads_context`](CustomOperatorInfo::reads_context): a call
    ///   whose arguments are all constant is evaluated once, when the rule
    ///   is compiled, and replaced by its result.
    /// - [`Logic::facts`] trusts the declaration:
    ///   [`Facts::is_deterministic`] holds for a deterministic operator,
    ///   and [`Facts::reads_complete`] for one that does not read the
    ///   context.
    /// - A declared argument count is checked before any argument is
    ///   evaluated; a call outside it fails with `InvalidArguments`.
    ///
    /// The engine reads this when it compiles a call, so it should not
    /// change over the operator's lifetime. A wrong declaration gives wrong
    /// results: an operator that declares itself deterministic but is not
    /// is folded to whatever it returned at compile time.
    fn info(&self) -> CustomOperatorInfo {
        CustomOperatorInfo::opaque()
    }

    /// Validate a call's arguments as written, before anything runs.
    /// [`Engine::check`] and [`Engine::compile_checked`] call it for every
    /// call to this operator whose argument count fits
    /// [`info`](Self::info); [`Engine::compile`] does not.
    ///
    /// `args` is the call's argument list as JSON: `{"op": [a, b]}` gives
    /// `[a, b]`, and a lone argument that is not an array (`{"op": a}`)
    /// gives `[a]`. An argument that is an expression arrives as written,
    /// so an operator call is a one-key object (`{"var": "x"}`) and only a
    /// literal can be checked as a value.
    ///
    /// Return [`Diagnostic::error`] for a call that will fail (it stops
    /// [`Engine::compile_checked`]) or [`Diagnostic::warning`] for one that
    /// runs but probably not as meant, narrowed with
    /// [`Diagnostic::at_argument`]. The checker fills in the location and
    /// the operator name. The default accepts every call.
    ///
    /// ```rust
    /// use datalogic_rs::datavalue::OwnedDataValue;
    /// use datalogic_rs::{CheckMode, CustomOperator, DataValue, Diagnostic, Engine, Result};
    /// use datalogic_rs::operator::EvalContext;
    ///
    /// struct Table;
    /// impl CustomOperator for Table {
    ///     fn evaluate<'a>(
    ///         &self,
    ///         args: &[&'a DataValue<'a>],
    ///         _ctx: &mut EvalContext<'_, 'a>,
    ///         _arena: &'a datalogic_rs::bumpalo::Bump,
    ///     ) -> Result<&'a DataValue<'a>> {
    ///         Ok(args[0])
    ///     }
    ///
    ///     fn check(&self, args: &[OwnedDataValue]) -> std::result::Result<(), Diagnostic> {
    ///         match args.first() {
    ///             Some(OwnedDataValue::String(name)) if name != "users" => {
    ///                 Err(Diagnostic::error(format!("no table {name:?}")).at_argument(0))
    ///             }
    ///             _ => Ok(()),
    ///         }
    ///     }
    /// }
    ///
    /// let engine = Engine::builder().add_operator("table", Table).build();
    /// let diags = engine.check(r#"{"table": ["orders"]}"#, CheckMode::Engine);
    /// assert_eq!(diags[0].pointer, "/table/0");
    /// ```
    fn check(&self, args: &[datavalue::OwnedDataValue]) -> std::result::Result<(), Diagnostic> {
        let _ = args;
        Ok(())
    }
}

/// What the engine may assume about a [`CustomOperator`], returned by
/// [`CustomOperator::info`].
///
/// Build one from [`Self::opaque`] or [`Self::pure`] and the `with` / `-ing`
/// methods; the struct is `#[non_exhaustive]` so fields can be added in 5.x.
///
/// ```rust
/// use datalogic_rs::CustomOperatorInfo;
///
/// // Depends only on its one or two arguments.
/// let info = CustomOperatorInfo::pure().with_args(1, Some(2));
/// assert!(info.deterministic && !info.reads_context);
/// ```
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
#[non_exhaustive]
pub struct CustomOperatorInfo {
    /// The same arguments (and, if [`Self::reads_context`], the same data)
    /// always give the same result, and evaluating it has no effect the
    /// rule could observe.
    pub deterministic: bool,
    /// Reads the data context through
    /// [`EvalContext`](operator::EvalContext), beyond its arguments.
    pub reads_context: bool,
    /// The fewest arguments a call may pass.
    pub min_args: usize,
    /// The most arguments a call may pass, or `None` for no limit.
    pub max_args: Option<usize>,
}

impl CustomOperatorInfo {
    /// Whether a call may pass `count` arguments.
    #[inline]
    pub(crate) fn accepts(&self, count: usize) -> bool {
        count >= self.min_args && self.max_args.is_none_or(|max| count <= max)
    }

    /// Nothing assumed: nondeterministic, may read the context, any
    /// number of arguments. The default.
    pub const fn opaque() -> Self {
        CustomOperatorInfo {
            deterministic: false,
            reads_context: true,
            min_args: 0,
            max_args: None,
        }
    }

    /// A function of its arguments alone: deterministic, reads no
    /// context, any number of arguments.
    pub const fn pure() -> Self {
        CustomOperatorInfo {
            deterministic: true,
            reads_context: false,
            min_args: 0,
            max_args: None,
        }
    }

    /// The same, but also reading the data context.
    pub const fn reading_context(self) -> Self {
        CustomOperatorInfo {
            reads_context: true,
            ..self
        }
    }

    /// The same, accepting between `min` and `max` arguments (`None`: no
    /// upper limit).
    pub const fn with_args(self, min: usize, max: Option<usize>) -> Self {
        CustomOperatorInfo {
            min_args: min,
            max_args: max,
            ..self
        }
    }
}

impl Default for CustomOperatorInfo {
    fn default() -> Self {
        Self::opaque()
    }
}

// `Box<dyn CustomOperator>` itself implements `CustomOperator` by
// delegating to the inner trait object. This collapses what used to be
// two separate registration methods on `EngineBuilder` (`add_operator`
// for typed operators, `add_operator_box` for pre-boxed trait objects)
// into a single entry point: `EngineBuilder::add_operator(name, op)`
// accepts either a typed `T: CustomOperator + 'static` or a
// `Box<dyn CustomOperator>` produced by a runtime registry.
impl CustomOperator for Box<dyn CustomOperator> {
    #[inline]
    fn evaluate<'a>(
        &self,
        args: &[&'a DataValue<'a>],
        ctx: &mut operator::EvalContext<'_, 'a>,
        arena: &'a bumpalo::Bump,
    ) -> Result<&'a DataValue<'a>> {
        (**self).evaluate(args, ctx, arena)
    }

    #[inline]
    fn info(&self) -> CustomOperatorInfo {
        (**self).info()
    }

    #[inline]
    fn check(&self, args: &[datavalue::OwnedDataValue]) -> std::result::Result<(), Diagnostic> {
        (**self).check(args)
    }
}

// `Arc<T>` delegates the same way, so one operator instance (and any state
// it holds) can be registered on several engines: a host that rebuilds its
// engine on hot reload keeps its operators in a registry of
// `Arc<dyn CustomOperator>` and hands each new builder a clone, with no
// wrapper type of its own.
impl<T: CustomOperator + ?Sized> CustomOperator for std::sync::Arc<T> {
    #[inline]
    fn evaluate<'a>(
        &self,
        args: &[&'a DataValue<'a>],
        ctx: &mut operator::EvalContext<'_, 'a>,
        arena: &'a bumpalo::Bump,
    ) -> Result<&'a DataValue<'a>> {
        (**self).evaluate(args, ctx, arena)
    }

    #[inline]
    fn info(&self) -> CustomOperatorInfo {
        (**self).info()
    }

    #[inline]
    fn check(&self, args: &[datavalue::OwnedDataValue]) -> std::result::Result<(), Diagnostic> {
        (**self).check(args)
    }
}