Skip to main content

mir_types/
union.rs

1use rustc_hash::FxHashMap;
2use serde::{Deserialize, Serialize};
3use smallvec::SmallVec;
4use std::sync::{Arc, OnceLock};
5
6use crate::atomic::Atomic;
7use crate::symbol::Name;
8
9/// Returns a cached empty `Arc<[Type]>` for `type_params` / `parts` fields.
10/// Re-uses a single Arc allocation so all empty parameter lists share one
11/// control block instead of allocating one per TNamedObject construction.
12pub fn empty_type_params() -> Arc<[Type]> {
13    static EMPTY: OnceLock<Arc<[Type]>> = OnceLock::new();
14    EMPTY.get_or_init(|| Arc::from([] as [Type; 0])).clone()
15}
16
17/// Convert a `Vec<Type>` to `Arc<[Type]>`, using the cached empty Arc when
18/// the vec is empty to avoid an allocation for the common no-generic case.
19pub fn vec_to_type_params(v: Vec<Type>) -> Arc<[Type]> {
20    if v.is_empty() {
21        empty_type_params()
22    } else {
23        Arc::from(v)
24    }
25}
26
27// Most unions contain 1-2 atomics (e.g. `string|null`), so we inline two.
28pub type AtomicVec = SmallVec<[Atomic; 2]>;
29
30/// Result of classifying a type for `clone` validity (see [`Type::clone_validity`]).
31#[derive(Debug, Clone, Copy, PartialEq, Eq)]
32pub enum CloneValidity {
33    /// Every member is (or may be) an object — cloning is fine.
34    Cloneable,
35    /// Every member is definitely a non-object — cloning is an error.
36    Invalid,
37    /// Some members are non-objects, some are objects — cloning may be an error.
38    PossiblyInvalid,
39    /// Empty/unknown type — no diagnostic.
40    Unknown,
41}
42
43// ---------------------------------------------------------------------------
44// Type — the primary type carrier
45// ---------------------------------------------------------------------------
46
47#[derive(Debug, Clone, PartialEq, Eq, Hash, Serialize, Deserialize)]
48pub struct Type {
49    pub types: AtomicVec,
50    /// The variable holding this type may not be initialized at this point.
51    pub possibly_undefined: bool,
52    /// This type originated from a docblock annotation rather than inference.
53    pub from_docblock: bool,
54    /// A `false`/`null` failure variant was deliberately stripped from this type
55    /// (e.g. `preg_split`'s regex-error `false`) because real code overwhelmingly
56    /// never checks for it. A defensive `=== false`/`=== null` check or a
57    /// `(string)`/`(array)` cast guarding against that exact stripped variant is
58    /// still legitimate, so the impossibility/redundancy checks (`ImpossibleIdenticalComparison`,
59    /// `RedundantCast`, the `=== null` narrowing divergence) exempt it instead of
60    /// flagging the caller's own defensive code.
61    pub falsy_stripped: bool,
62    /// This type was read from a generic array/list offset (`$arr[$key]`)
63    /// whose key presence isn't statically provable — PHP returns `null`
64    /// (with a warning) for a missing offset, so a defensive `=== null`/
65    /// `!== null` check against it is legitimate even though the inferred
66    /// value type itself doesn't literally include `null` (adding `null`
67    /// unconditionally to every generic-array read would drown real code in
68    /// `PossiblyNull*` noise for the overwhelmingly common case where the key
69    /// really is present). The impossibility/redundancy checks
70    /// (`ImpossibleIdenticalComparison`, the `=== null` narrowing divergence)
71    /// exempt it, mirroring `falsy_stripped`.
72    pub possibly_absent_offset: bool,
73}
74
75impl Type {
76    // --- Constructors -------------------------------------------------------
77
78    pub fn empty() -> Self {
79        Self {
80            types: SmallVec::new(),
81            possibly_undefined: false,
82            from_docblock: false,
83            falsy_stripped: false,
84            possibly_absent_offset: false,
85        }
86    }
87
88    pub fn single(atomic: Atomic) -> Self {
89        let mut types = SmallVec::new();
90        types.push(atomic);
91        Self {
92            types,
93            possibly_undefined: false,
94            from_docblock: false,
95            falsy_stripped: false,
96            possibly_absent_offset: false,
97        }
98    }
99
100    pub fn mixed() -> Self {
101        Self::single(Atomic::TMixed)
102    }
103
104    pub fn void() -> Self {
105        Self::single(Atomic::TVoid)
106    }
107
108    pub fn never() -> Self {
109        Self::single(Atomic::TNever)
110    }
111
112    pub fn null() -> Self {
113        Self::single(Atomic::TNull)
114    }
115
116    pub fn bool() -> Self {
117        Self::single(Atomic::TBool)
118    }
119
120    pub fn int() -> Self {
121        Self::single(Atomic::TInt)
122    }
123
124    pub fn float() -> Self {
125        Self::single(Atomic::TFloat)
126    }
127
128    pub fn string() -> Self {
129        Self::single(Atomic::TString)
130    }
131
132    /// `int|string` — the canonical PHP array-key type, used as the default
133    /// key type when a docblock/inferred array has no more specific key.
134    pub fn array_key() -> Self {
135        let mut u = Self::single(Atomic::TInt);
136        u.add_type(Atomic::TString);
137        u
138    }
139
140    /// `T|null`
141    pub fn nullable(atomic: Atomic) -> Self {
142        // `mixed|null` = `mixed` — null is already included in mixed.
143        if matches!(atomic, Atomic::TMixed) {
144            return Self::mixed();
145        }
146        let mut types = SmallVec::new();
147        types.push(atomic);
148        types.push(Atomic::TNull);
149        Self {
150            types,
151            possibly_undefined: false,
152            from_docblock: false,
153            falsy_stripped: false,
154            possibly_absent_offset: false,
155        }
156    }
157
158    /// Build a union from multiple atomics, de-duplicating on the fly.
159    pub fn from_vec(atomics: Vec<Atomic>) -> Self {
160        let mut u = Self::empty();
161        for a in atomics {
162            u.add_type(a);
163        }
164        u
165    }
166
167    // --- Introspection -------------------------------------------------------
168
169    pub fn is_empty(&self) -> bool {
170        self.types.is_empty()
171    }
172
173    pub fn is_single(&self) -> bool {
174        self.types.len() == 1
175    }
176
177    pub fn is_nullable(&self) -> bool {
178        self.types.iter().any(|t| matches!(t, Atomic::TNull))
179    }
180
181    /// True when this is exactly `int|string` — the array-key domain, which
182    /// is already the maximal set of legal PHP array keys and so should be
183    /// treated like a "default"/unconstrained key, same as `mixed` would be
184    /// for a non-key type parameter.
185    pub fn is_array_key(&self) -> bool {
186        self.types.len() == 2
187            && self.types.iter().any(|t| matches!(t, Atomic::TInt))
188            && self.types.iter().any(|t| matches!(t, Atomic::TString))
189    }
190
191    pub fn is_mixed(&self) -> bool {
192        self.types.iter().any(|t| match t {
193            Atomic::TMixed => true,
194            Atomic::TTemplateParam { as_type, .. } => as_type.is_mixed(),
195            _ => false,
196        })
197    }
198
199    /// True only when the type contains `TMixed` atoms and no `TTemplateParam` atoms.
200    /// Unlike [`Self::is_mixed`], this does not treat an unconstrained template parameter as
201    /// "mixed" — a `T` placeholder is an intentionally parameterised type that will be
202    /// instantiated at the call site, so it must not trigger `MixedAssignment` warnings.
203    pub fn is_mixed_not_template(&self) -> bool {
204        self.is_mixed()
205            && !self
206                .types
207                .iter()
208                .any(|t| matches!(t, Atomic::TTemplateParam { .. }))
209    }
210
211    pub fn is_never(&self) -> bool {
212        self.types.iter().all(|t| matches!(t, Atomic::TNever)) && !self.types.is_empty()
213    }
214
215    /// Classify this type for `clone` validity. Recurses into template-param
216    /// bounds (like [`Type::is_mixed`]). Callers handle `mixed` separately.
217    pub fn clone_validity(&self) -> CloneValidity {
218        if self.types.is_empty() {
219            return CloneValidity::Unknown;
220        }
221        let mut has_non_object = false;
222        let mut has_other = false; // object or ambiguous (callable, mixed, conditional, …)
223        for t in &self.types {
224            match t {
225                Atomic::TTemplateParam { as_type, .. } => match as_type.clone_validity() {
226                    CloneValidity::Invalid => has_non_object = true,
227                    CloneValidity::PossiblyInvalid => {
228                        has_non_object = true;
229                        has_other = true;
230                    }
231                    CloneValidity::Cloneable | CloneValidity::Unknown => has_other = true,
232                },
233                other if other.is_definitely_non_object() => has_non_object = true,
234                _ => has_other = true,
235            }
236        }
237        match (has_non_object, has_other) {
238            (true, false) => CloneValidity::Invalid,
239            (true, true) => CloneValidity::PossiblyInvalid,
240            _ => CloneValidity::Cloneable,
241        }
242    }
243
244    pub fn is_void(&self) -> bool {
245        self.is_single() && matches!(self.types[0], Atomic::TVoid)
246    }
247
248    pub fn can_be_falsy(&self) -> bool {
249        self.types.iter().any(|t| t.can_be_falsy())
250    }
251
252    pub fn can_be_truthy(&self) -> bool {
253        self.types.iter().any(|t| t.can_be_truthy())
254    }
255
256    pub fn contains<F: Fn(&Atomic) -> bool>(&self, f: F) -> bool {
257        self.types.iter().any(f)
258    }
259
260    pub fn has_named_object(&self, fqcn: &str) -> bool {
261        self.types.iter().any(|t| match t {
262            Atomic::TNamedObject { fqcn: f, .. } => f.as_ref() == fqcn,
263            _ => false,
264        })
265    }
266
267    // --- Mutation ------------------------------------------------------------
268
269    /// Add an atomic to this union, skipping duplicates.
270    /// Subsumption rules: anything ⊆ TMixed; TLiteralInt ⊆ TInt; etc.
271    pub fn add_type(&mut self, atomic: Atomic) {
272        // If we already have TMixed, nothing to add.
273        if self.types.iter().any(|t| matches!(t, Atomic::TMixed)) {
274            return;
275        }
276
277        // Adding TMixed subsumes everything.
278        if matches!(atomic, Atomic::TMixed) {
279            self.types.clear();
280            self.types.push(Atomic::TMixed);
281            return;
282        }
283
284        // Simplify trivial conditional types: (X is ? T : T) → T
285        // Recursively simplify branches first so nested trivial conditionals collapse.
286        let atomic = if let Atomic::TConditional { data } = &atomic {
287            let (if_true, if_false) = (&data.if_true, &data.if_false);
288            let mut simplified_true = Type::empty();
289            for t in &if_true.types {
290                simplified_true.add_type(t.clone());
291            }
292            let mut simplified_false = Type::empty();
293            for t in &if_false.types {
294                simplified_false.add_type(t.clone());
295            }
296            if simplified_true == simplified_false {
297                for t in simplified_true.types {
298                    self.add_type(t);
299                }
300                return;
301            }
302            atomic
303        } else {
304            atomic
305        };
306
307        // Avoid exact duplicates.
308        if self.types.contains(&atomic) {
309            return;
310        }
311
312        // TLiteralInt(n) is subsumed by TInt.
313        if let Atomic::TLiteralInt(_) = &atomic {
314            if self.types.iter().any(|t| matches!(t, Atomic::TInt)) {
315                return;
316            }
317        }
318        // TLiteralString(s) is subsumed by TString.
319        if let Atomic::TLiteralString(_) = &atomic {
320            if self.types.iter().any(|t| matches!(t, Atomic::TString)) {
321                return;
322            }
323        }
324        // TTrue / TFalse are subsumed by TBool.
325        if matches!(atomic, Atomic::TTrue | Atomic::TFalse)
326            && self.types.iter().any(|t| matches!(t, Atomic::TBool))
327        {
328            return;
329        }
330        // TTrue and TFalse together are exactly TBool — merge rather than
331        // keeping both literals once both are present.
332        if matches!(atomic, Atomic::TTrue) && self.types.iter().any(|t| matches!(t, Atomic::TFalse))
333        {
334            self.types.retain(|t| !matches!(t, Atomic::TFalse));
335            self.types.push(Atomic::TBool);
336            return;
337        }
338        if matches!(atomic, Atomic::TFalse) && self.types.iter().any(|t| matches!(t, Atomic::TTrue))
339        {
340            self.types.retain(|t| !matches!(t, Atomic::TTrue));
341            self.types.push(Atomic::TBool);
342            return;
343        }
344        // Adding TInt widens away all TLiteralInt variants.
345        if matches!(atomic, Atomic::TInt) {
346            self.types.retain(|t| !matches!(t, Atomic::TLiteralInt(_)));
347        }
348        // Adding TString widens away all TLiteralString variants.
349        if matches!(atomic, Atomic::TString) {
350            self.types
351                .retain(|t| !matches!(t, Atomic::TLiteralString(_)));
352        }
353        // Adding TBool widens away TTrue/TFalse.
354        if matches!(atomic, Atomic::TBool) {
355            self.types
356                .retain(|t| !matches!(t, Atomic::TTrue | Atomic::TFalse));
357        }
358
359        // TNever is the bottom type: T | never = T.
360        if matches!(atomic, Atomic::TNever) {
361            if !self.types.is_empty() {
362                return;
363            }
364        } else {
365            self.types.retain(|t| !matches!(t, Atomic::TNever));
366        }
367
368        // Closed empty keyed array (array{}) is a subtype of any generic array or
369        // list. Remove it if we already have a generic array<K,V> or list<V>. An
370        // OPEN empty shape (array{...}) carries real information — it may hold
371        // unknown, possibly non-list, extra keys at runtime — so it's not
372        // subsumed and must not be dropped.
373        if let Atomic::TKeyedArray {
374            properties,
375            is_open,
376            ..
377        } = &atomic
378        {
379            if properties.is_empty() && !is_open {
380                for existing in &self.types {
381                    match existing {
382                        Atomic::TArray { .. }
383                        | Atomic::TNonEmptyArray { .. }
384                        | Atomic::TList { .. }
385                        | Atomic::TNonEmptyList { .. } => {
386                            return; // Don't add empty array, it's subsumed
387                        }
388                        _ => {}
389                    }
390                }
391            }
392        }
393
394        // When adding a generic array or list, remove any CLOSED empty keyed
395        // arrays since they're subtypes (same reasoning as above, mirrored).
396        let is_generic_array_or_list = matches!(
397            &atomic,
398            Atomic::TArray { .. }
399                | Atomic::TNonEmptyArray { .. }
400                | Atomic::TList { .. }
401                | Atomic::TNonEmptyList { .. }
402        );
403        if is_generic_array_or_list {
404            self.types.retain(|t| {
405                if let Atomic::TKeyedArray {
406                    properties,
407                    is_open,
408                    ..
409                } = t
410                {
411                    !properties.is_empty() || *is_open
412                } else {
413                    true
414                }
415            });
416        }
417
418        self.types.push(atomic);
419    }
420
421    // --- Narrowing -----------------------------------------------------------
422
423    /// Remove `null` from the union (e.g. after a null check).
424    pub fn remove_null(&self) -> Type {
425        self.filter(|t| !matches!(t, Atomic::TNull))
426    }
427
428    /// Remove `false` from the union.
429    /// `TFalse` is dropped; `TBool` becomes `TTrue` since `bool - false = true`.
430    pub fn remove_false(&self) -> Type {
431        let mut result = self.filter(|t| !matches!(t, Atomic::TFalse | Atomic::TBool));
432        if self.types.iter().any(|t| matches!(t, Atomic::TBool)) {
433            result.add_type(Atomic::TTrue);
434        }
435        result
436    }
437
438    /// Remove `true` from the union.
439    /// `TTrue` is dropped; `TBool` becomes `TFalse` since `bool - true = false`.
440    pub fn remove_true(&self) -> Type {
441        let mut result = self.filter(|t| !matches!(t, Atomic::TTrue | Atomic::TBool));
442        if self.types.iter().any(|t| matches!(t, Atomic::TBool)) {
443            result.add_type(Atomic::TFalse);
444        }
445        result
446    }
447
448    /// Remove both `null` and `false` from the union (core type without nullable/falsy variants).
449    pub fn core_type(&self) -> Type {
450        self.remove_null().remove_false()
451    }
452
453    /// Keep only truthy atomics (e.g. after `if ($x)`).
454    pub fn narrow_to_truthy(&self) -> Type {
455        if self.is_mixed_not_template() {
456            return Type::mixed();
457        }
458        let mut result = Type::empty();
459        result.from_docblock = self.from_docblock;
460        for t in &self.types {
461            match t {
462                // An unconstrained/bounded template could resolve to anything at
463                // runtime, truthy or falsy — preserve it rather than dropping or
464                // widening it, the same way narrow_to_string/_int/etc. already do.
465                Atomic::TTemplateParam { .. } => result.add_type(t.clone()),
466                // Always-falsy — exclude entirely.
467                Atomic::TLiteralInt(0)
468                | Atomic::TLiteralFloat(0, 0)
469                | Atomic::TNull
470                | Atomic::TFalse => {}
471                Atomic::TLiteralString(s) if s.as_ref() == "" || s.as_ref() == "0" => {}
472                // bool contains both true (truthy) and false (falsy); truthy branch is true.
473                Atomic::TBool => result.add_type(Atomic::TTrue),
474                // array/list: empty ↔ falsy; truthy branch is non-empty-array/list.
475                Atomic::TArray { key, value } => result.add_type(Atomic::TNonEmptyArray {
476                    key: key.clone(),
477                    value: value.clone(),
478                }),
479                Atomic::TList { value } => result.add_type(Atomic::TNonEmptyList {
480                    value: value.clone(),
481                }),
482                // string: only "" and "0" are falsy; truthy branch is non-empty-string.
483                // non-empty-string still includes "0" (which is falsy) but that is the
484                // standard approximation used by Psalm and other analyzers.
485                Atomic::TString => result.add_type(Atomic::TNonEmptyString),
486                // numeric-string: "0" is the only falsy value; non-zero numerics are truthy.
487                // No named "non-zero numeric-string" type exists; keep as-is conservatively.
488                // int<0, max> only has 0 as its falsy value; truthy branch is int<1, max>.
489                // (int<0, 0> is handled by the can_be_truthy() false guard below.)
490                Atomic::TNonNegativeInt => result.add_type(Atomic::TPositiveInt),
491                Atomic::TIntRange { min: Some(0), max } if max.is_none_or(|m| m >= 1) => {
492                    let atom = if max.is_none() {
493                        Atomic::TPositiveInt
494                    } else {
495                        Atomic::TIntRange {
496                            min: Some(1),
497                            max: *max,
498                        }
499                    };
500                    result.add_type(atom);
501                }
502                // int<min, 0>: 0 is the only falsy value; truthy branch excludes it → int<min, -1>.
503                Atomic::TIntRange { min, max: Some(0) } => {
504                    let atom = match min {
505                        None => Atomic::TNegativeInt,
506                        Some(n) if *n <= -1 => Atomic::TIntRange {
507                            min: *min,
508                            max: Some(-1),
509                        },
510                        _ => continue, // min >= 0 with max == 0 → range is {0} — can_be_truthy() handles this
511                    };
512                    result.add_type(atom);
513                }
514                // Anything else that can never be truthy — drop.
515                t if !t.can_be_truthy() => {}
516                _ => result.add_type(t.clone()),
517            }
518        }
519        result
520    }
521
522    /// Keep only falsy atomics (e.g. after `if (!$x)`).
523    pub fn narrow_to_falsy(&self) -> Type {
524        if self.is_mixed_not_template() {
525            return Type::from_vec(vec![
526                Atomic::TNull,
527                Atomic::TFalse,
528                Atomic::TLiteralInt(0),
529                Atomic::TLiteralString("".into()),
530            ]);
531        }
532        let mut result = Type::empty();
533        result.from_docblock = self.from_docblock;
534        for t in &self.types {
535            match t {
536                // An unconstrained/bounded template could resolve to anything at
537                // runtime, truthy or falsy — preserve it rather than dropping it
538                // (its own `can_be_falsy()` conservatively defaults to `false`,
539                // which would otherwise wrongly exclude it here).
540                Atomic::TTemplateParam { .. } => result.add_type(t.clone()),
541                // bool: only false is falsy; falsy branch is false.
542                Atomic::TBool => result.add_type(Atomic::TFalse),
543                // int: only 0 is falsy.
544                Atomic::TInt => result.add_type(Atomic::TLiteralInt(0)),
545                // float: only 0.0 is falsy.
546                Atomic::TFloat => result.add_type(Atomic::TLiteralFloat(0, 0)),
547                // string: only "" and "0" are falsy.
548                Atomic::TString => {
549                    result.add_type(Atomic::TLiteralString("".into()));
550                    result.add_type(Atomic::TLiteralString("0".into()));
551                }
552                // numeric-string: only "0" is a falsy numeric string.
553                Atomic::TNumericString => result.add_type(Atomic::TLiteralString("0".into())),
554                // non-negative-int: only 0 is falsy.
555                Atomic::TNonNegativeInt => result.add_type(Atomic::TLiteralInt(0)),
556                // int<0, hi>: only 0 is falsy.
557                Atomic::TIntRange {
558                    min: Some(0),
559                    max: Some(_) | None,
560                } => result.add_type(Atomic::TLiteralInt(0)),
561                // int<min, 0>: only 0 is falsy.
562                Atomic::TIntRange { max: Some(0), .. } => result.add_type(Atomic::TLiteralInt(0)),
563                t if !t.can_be_falsy() => {} // always truthy — exclude
564                _ => result.add_type(t.clone()),
565            }
566        }
567        result
568    }
569
570    /// Narrow this type as if `$x instanceof ClassName` is true.
571    ///
572    /// The instanceof check guarantees the value IS an instance of `class`, so we
573    /// replace any object / mixed constituents with the specific named object.  Scalar
574    /// constituents are dropped (they can never satisfy instanceof).
575    pub fn narrow_instanceof(&self, class: &str) -> Type {
576        let narrowed_ty = Atomic::TNamedObject {
577            fqcn: class.into(),
578            type_params: empty_type_params(),
579        };
580        // If any constituent is an object-like type, the result is the specific class.
581        let has_object = self.types.iter().any(|t| {
582            matches!(
583                t,
584                Atomic::TObject | Atomic::TNamedObject { .. } | Atomic::TMixed | Atomic::TNull // null fails instanceof, but mixed/object may include null
585            )
586        });
587        if has_object || self.is_empty() {
588            Type::single(narrowed_ty)
589        } else {
590            // Pure scalars — instanceof is always false here, but return the class
591            // defensively so callers don't see an empty union.
592            Type::single(narrowed_ty)
593        }
594    }
595
596    /// Narrow as if `is_string($x)` is true. `mixed`/`scalar` become a concrete
597    /// `string` (rather than staying `mixed`) so downstream string-only
598    /// operations see a usable type instead of reporting `Mixed*`.
599    pub fn narrow_to_string(&self) -> Type {
600        self.filter_replacing(
601            |t| t.is_string() || matches!(t, Atomic::TTemplateParam { .. }),
602            |t| matches!(t, Atomic::TMixed | Atomic::TScalar),
603            Atomic::TString,
604        )
605    }
606
607    /// Narrow as if `is_int($x)` is true.
608    pub fn narrow_to_int(&self) -> Type {
609        self.filter_replacing(
610            |t| t.is_int() || matches!(t, Atomic::TTemplateParam { .. }),
611            |t| matches!(t, Atomic::TMixed | Atomic::TScalar | Atomic::TNumeric),
612            Atomic::TInt,
613        )
614    }
615
616    /// Narrow as if `is_float($x)` is true.
617    pub fn narrow_to_float(&self) -> Type {
618        self.filter_replacing(
619            |t| {
620                matches!(
621                    t,
622                    Atomic::TFloat
623                        | Atomic::TIntegralFloat
624                        | Atomic::TLiteralFloat(..)
625                        | Atomic::TTemplateParam { .. }
626                )
627            },
628            |t| matches!(t, Atomic::TMixed | Atomic::TScalar | Atomic::TNumeric),
629            Atomic::TFloat,
630        )
631    }
632
633    /// Narrow as if `is_bool($x)` is true.
634    pub fn narrow_to_bool(&self) -> Type {
635        self.filter_replacing(
636            |t| {
637                matches!(
638                    t,
639                    Atomic::TBool | Atomic::TTrue | Atomic::TFalse | Atomic::TTemplateParam { .. }
640                )
641            },
642            |t| matches!(t, Atomic::TMixed | Atomic::TScalar),
643            Atomic::TBool,
644        )
645    }
646
647    /// Narrow as if `is_null($x)` is true.
648    pub fn narrow_to_null(&self) -> Type {
649        self.filter_replacing(
650            |t| matches!(t, Atomic::TNull | Atomic::TTemplateParam { .. }),
651            |t| matches!(t, Atomic::TMixed),
652            Atomic::TNull,
653        )
654    }
655
656    /// Narrow as if `is_array($x)` is true.
657    pub fn narrow_to_array(&self) -> Type {
658        self.filter_replacing(
659            |t| t.is_array() || matches!(t, Atomic::TTemplateParam { .. }),
660            |t| matches!(t, Atomic::TMixed),
661            Atomic::TArray {
662                key: Box::new(Type::mixed()),
663                value: Box::new(Type::mixed()),
664            },
665        )
666    }
667
668    /// Narrow array/list types to their non-empty variants (for `count() > 0` etc.).
669    pub fn narrow_to_non_empty_collection(&self) -> Type {
670        let mut out = Type::empty();
671        out.from_docblock = self.from_docblock;
672        for t in &self.types {
673            match t {
674                Atomic::TArray { key, value } => out.add_type(Atomic::TNonEmptyArray {
675                    key: key.clone(),
676                    value: value.clone(),
677                }),
678                Atomic::TList { value } => out.add_type(Atomic::TNonEmptyList {
679                    value: value.clone(),
680                }),
681                _ => out.add_type(t.clone()),
682            }
683        }
684        out
685    }
686
687    /// Narrow array/list types when proven empty (e.g. `array_key_first($x) === null`,
688    /// `$arr === []`). Drops the non-empty variants outright — they can never
689    /// be empty — and narrows a plain `array`/`list` down to the same closed,
690    /// zero-property `TKeyedArray` an empty `[]` literal itself types as, so
691    /// e.g. `$values[0]` on a proven-empty branch is flagged as a
692    /// `NonExistentArrayOffset` instead of silently keeping the pre-narrow
693    /// element type. `TKeyedArray` atoms are left unchanged — narrowing an
694    /// already-shaped array to "empty" when it may declare required
695    /// properties is a separate, more nuanced case.
696    pub fn narrow_to_empty_collection(&self) -> Type {
697        let mut out = Type::empty();
698        out.from_docblock = self.from_docblock;
699        for t in &self.types {
700            match t {
701                Atomic::TNonEmptyArray { .. } | Atomic::TNonEmptyList { .. } => {}
702                Atomic::TArray { .. } | Atomic::TList { .. } => {
703                    out.add_type(Atomic::TKeyedArray {
704                        properties: Box::default(),
705                        is_open: false,
706                        is_list: true,
707                    });
708                }
709                _ => out.add_type(t.clone()),
710            }
711        }
712        out
713    }
714
715    /// Narrow as if `array_is_list($x)` is true.
716    /// Lists have sequential integer keys starting from 0, so:
717    /// - `list<T>` / `non-empty-list<T>` are kept unchanged.
718    /// - `array<int, T>` is narrowed to `list<T>` (could be sequential).
719    /// - `non-empty-array<int, T>` is narrowed to `non-empty-list<T>`.
720    /// - `TKeyedArray` (shape) is kept only when its own `is_list` flag is
721    ///   already true — that flag is precise (set from the actual literal's
722    ///   keys, or an explicit `list{...}` docblock), not a hint, so a
723    ///   string-keyed or non-contiguous shape is correctly excluded.
724    /// - `mixed` becomes `list<mixed>` (array_is_list implies array).
725    /// - All other types (string-keyed arrays, non-arrays) are dropped.
726    pub fn narrow_to_list(&self) -> Type {
727        let mut out = Type::empty();
728        out.from_docblock = self.from_docblock;
729        for t in &self.types {
730            match t {
731                Atomic::TList { .. } | Atomic::TNonEmptyList { .. } => out.add_type(t.clone()),
732                // Guard on "key admits int" rather than "key is exactly TInt" —
733                // `is_array($mixed)` narrows an unknown key to `Type::mixed()`,
734                // which is a list candidate (the runtime shape is still unknown),
735                // unlike a key statically known to exclude int entirely (e.g. a
736                // docblock-declared `array<string, T>`), which must stay excluded.
737                Atomic::TArray { key, value } if !key.narrow_to_int().is_empty() => {
738                    out.add_type(Atomic::TList {
739                        value: value.clone(),
740                    });
741                }
742                Atomic::TNonEmptyArray { key, value } if !key.narrow_to_int().is_empty() => {
743                    out.add_type(Atomic::TNonEmptyList {
744                        value: value.clone(),
745                    });
746                }
747                Atomic::TKeyedArray { is_list: true, .. } => out.add_type(t.clone()),
748                Atomic::TMixed => out.add_type(Atomic::TList {
749                    value: Box::new(Type::mixed()),
750                }),
751                _ => {}
752            }
753        }
754        if out.is_empty() {
755            self.filter(|t| matches!(t, Atomic::TList { .. } | Atomic::TNonEmptyList { .. }))
756        } else {
757            out
758        }
759    }
760
761    /// Narrow as if `is_object($x)` is true. A `mixed` becomes a concrete bare
762    /// `object` (rather than staying `mixed`) so downstream object-only
763    /// operations — `clone`, `instanceof`, method calls — see an object type
764    /// instead of reporting `Mixed*`.
765    pub fn narrow_to_object(&self) -> Type {
766        let mut out = Type::empty();
767        for t in &self.types {
768            if matches!(t, Atomic::TMixed) {
769                out.add_type(Atomic::TObject);
770            } else if t.is_object() || matches!(t, Atomic::TTemplateParam { .. }) {
771                out.add_type(t.clone());
772            }
773        }
774        if out.types.is_empty() {
775            self.filter(|t| t.is_object())
776        } else {
777            out
778        }
779    }
780
781    /// Narrow as if `is_callable($x)` is true.
782    ///
783    /// PHP accepts closures, TCallable, strings (function names), arrays
784    /// (['Class', 'method'] or [$obj, 'method']), and objects with __invoke.
785    /// Keep all of these; only drop atoms that are definitely not callable
786    /// (scalars, null, bool, etc.).
787    pub fn narrow_to_callable(&self) -> Type {
788        let narrowed = self.filter(|t| {
789            t.is_callable()
790                || t.is_string()
791                || t.is_array()
792                || t.is_object()
793                || matches!(t, Atomic::TMixed | Atomic::TTemplateParam { .. })
794        });
795        // A bare `object` carries no known `__invoke` signature to compare
796        // against a `callable`-typed target, so it stayed an object rather
797        // than satisfying one — represent it as a generic callable instead,
798        // matching what `is_callable()` actually proved. A `TNamedObject`
799        // keeps its own class (its real `__invoke`, if any, is more precise
800        // than a generic callable).
801        let mut result = Type::empty();
802        result.possibly_undefined = narrowed.possibly_undefined;
803        result.from_docblock = narrowed.from_docblock;
804        for atomic in narrowed.types {
805            if matches!(atomic, Atomic::TObject) {
806                result.add_type(Atomic::TCallable {
807                    params: None,
808                    return_type: None,
809                });
810            } else {
811                result.add_type(atomic);
812            }
813        }
814        result
815    }
816
817    /// Narrow as if `is_scalar($x)` is true (int | string | float | bool).
818    pub fn narrow_to_scalar(&self) -> Type {
819        self.filter_replacing(
820            |t| {
821                t.is_string()
822                    || t.is_int()
823                    || matches!(
824                        t,
825                        Atomic::TFloat
826                            | Atomic::TIntegralFloat
827                            | Atomic::TLiteralFloat(..)
828                            | Atomic::TBool
829                            | Atomic::TTrue
830                            | Atomic::TFalse
831                            | Atomic::TScalar
832                            | Atomic::TNumeric
833                            | Atomic::TNumericString
834                            | Atomic::TTemplateParam { .. }
835                    )
836            },
837            |t| matches!(t, Atomic::TMixed),
838            Atomic::TScalar,
839        )
840    }
841
842    /// Narrow as if `is_iterable($x)` is true (array | Traversable).
843    /// For simplicity, this narrows to arrays or objects (can't easily verify interfaces).
844    pub fn narrow_to_iterable(&self) -> Type {
845        self.filter(|t| {
846            t.is_array()
847                || t.is_object()
848                || matches!(t, Atomic::TMixed | Atomic::TTemplateParam { .. })
849        })
850    }
851
852    /// Narrow as if `is_countable($x)` is true (array | Countable).
853    /// For simplicity, this narrows to arrays or objects (can't easily verify Countable interface).
854    pub fn narrow_to_countable(&self) -> Type {
855        self.filter(|t| {
856            t.is_array()
857                || t.is_object()
858                || matches!(t, Atomic::TMixed | Atomic::TTemplateParam { .. })
859        })
860    }
861
862    /// Narrow as if `is_resource($x)` is true.
863    /// Note: No TResource atomic type exists in the type system; this is a no-op.
864    /// Resources are declining in modern PHP and not actively tracked.
865    pub fn narrow_to_resource(&self) -> Type {
866        // No resource type in the system; just return mixed (allows any type)
867        self.filter(|t| matches!(t, Atomic::TMixed))
868    }
869
870    /// Narrow as if `class_exists($x)` returned true for a string variable.
871    /// String atoms become `class-string`; existing class-string atoms pass through;
872    /// mixed/scalar becomes `class-string`. Non-string atoms are dropped (returning
873    /// empty so the caller can mark the branch as diverging).
874    pub fn narrow_to_class_string(&self) -> Type {
875        let mut out = Type::empty();
876        out.from_docblock = self.from_docblock;
877        for t in &self.types {
878            match t {
879                Atomic::TClassString(_) => out.add_type(t.clone()),
880                _ if t.is_string() || matches!(t, Atomic::TMixed | Atomic::TScalar) => {
881                    out.add_type(Atomic::TClassString(None));
882                }
883                _ => {}
884            }
885        }
886        out
887    }
888
889    /// Narrow as if `interface_exists($x)` returned true for a string variable.
890    /// String atoms become `interface-string`; existing interface-string atoms pass
891    /// through; mixed/scalar becomes `interface-string`. Non-string atoms are dropped
892    /// (returning empty so the caller can mark the branch as diverging).
893    pub fn narrow_to_interface_string(&self) -> Type {
894        let mut out = Type::empty();
895        out.from_docblock = self.from_docblock;
896        for t in &self.types {
897            match t {
898                Atomic::TInterfaceString(_) => out.add_type(t.clone()),
899                // A known class-string keeps its name — every interface-string is
900                // also a valid class-string, so `interface_exists()` returning true
901                // narrows the atom without losing which class it names.
902                Atomic::TClassString(name) => {
903                    out.add_type(Atomic::TInterfaceString(*name));
904                }
905                _ if t.is_string() || matches!(t, Atomic::TMixed | Atomic::TScalar) => {
906                    out.add_type(Atomic::TInterfaceString(None));
907                }
908                _ => {}
909            }
910        }
911        out
912    }
913
914    // --- Merge (branch join) ------------------------------------------------
915
916    /// Merge two unions at a branch join point (e.g. after if/else).
917    /// The result is the union of all types in both.
918    pub fn merge(a: &Type, b: &Type) -> Type {
919        // Fast path: b is empty — nothing to add.
920        if b.types.is_empty() {
921            let mut result = a.clone();
922            result.possibly_undefined = a.possibly_undefined || b.possibly_undefined;
923            return result;
924        }
925        // Fast path: a is empty — clone b.
926        if a.types.is_empty() {
927            let mut result = b.clone();
928            result.possibly_undefined = a.possibly_undefined || b.possibly_undefined;
929            return result;
930        }
931        // Fast path: a is already mixed — b cannot widen it further.
932        if a.types.len() == 1 && matches!(a.types[0], Atomic::TMixed) {
933            let mut result = a.clone();
934            result.possibly_undefined = a.possibly_undefined || b.possibly_undefined;
935            return result;
936        }
937        // Fast path: b contains mixed — result collapses to mixed.
938        if b.types.iter().any(|t| matches!(t, Atomic::TMixed)) {
939            return Type {
940                types: smallvec::smallvec![Atomic::TMixed],
941                possibly_undefined: a.possibly_undefined || b.possibly_undefined,
942                from_docblock: a.from_docblock || b.from_docblock,
943                falsy_stripped: false,
944                possibly_absent_offset: false,
945            };
946        }
947        let mut result = a.clone();
948        result.merge_with(b);
949        result
950    }
951
952    /// Merge `other` into `self` in-place (avoids cloning `self`).
953    pub fn merge_with(&mut self, other: &Type) {
954        if self.types.iter().any(|t| matches!(t, Atomic::TMixed)) {
955            self.possibly_undefined |= other.possibly_undefined;
956            return;
957        }
958        if other.types.iter().any(|t| matches!(t, Atomic::TMixed)) {
959            self.types.clear();
960            self.types.push(Atomic::TMixed);
961            self.possibly_undefined |= other.possibly_undefined;
962            return;
963        }
964        for atomic in &other.types {
965            self.add_type(atomic.clone());
966        }
967        self.possibly_undefined |= other.possibly_undefined;
968    }
969
970    /// Intersect with another union: keep only types present in `other`, widening
971    /// where `self` contains `mixed` (which is compatible with everything).
972    /// Used for match-arm subject narrowing.
973    pub fn intersect_with(&self, other: &Type) -> Type {
974        if self.is_mixed() {
975            return other.clone();
976        }
977        if other.is_mixed() {
978            return self.clone();
979        }
980        // Keep the more specific of each overlapping (self, other) atomic
981        // pair — e.g. intersecting `int` with `1|2` must keep `1|2` (the
982        // narrower side), not `int` (self's own, wider atomic): the whole
983        // point of narrowing a variable against a match/switch arm's
984        // literal conditions is to end up with the literal, not the bare
985        // declared type it already had. Every matching pair is kept (not
986        // just the first), so `int ∩ (1|2)` keeps both `1` and `2`.
987        let mut result = Type::empty();
988        for a in &self.types {
989            for b in &other.types {
990                if a == b {
991                    result.add_type(a.clone());
992                } else if atomic_subtype(b, a) {
993                    result.add_type(b.clone());
994                } else if atomic_subtype(a, b) {
995                    result.add_type(a.clone());
996                }
997            }
998        }
999        if result.is_empty() {
1000            Type::never()
1001        } else {
1002            result
1003        }
1004    }
1005
1006    // --- Template substitution ----------------------------------------------
1007
1008    /// Replace template param references with their resolved types.
1009    pub fn substitute_templates(&self, bindings: &FxHashMap<Name, Type>) -> Type {
1010        if bindings.is_empty() {
1011            return self.clone();
1012        }
1013        // Most argument/return types are plain scalars or resolved objects
1014        // with nothing to substitute — skip the rebuild entirely.
1015        if !self.types.iter().any(atomic_may_contain_templates) {
1016            return self.clone();
1017        }
1018        let mut result = Type::empty();
1019        result.possibly_undefined = self.possibly_undefined;
1020        result.from_docblock = self.from_docblock;
1021        for atomic in &self.types {
1022            match atomic {
1023                Atomic::TTemplateParam { name, .. } => {
1024                    if let Some(resolved) = bindings.get(name) {
1025                        for t in &resolved.types {
1026                            result.add_type(t.clone());
1027                        }
1028                    } else {
1029                        result.add_type(atomic.clone());
1030                    }
1031                }
1032                Atomic::TArray { key, value } => {
1033                    result.add_type(Atomic::TArray {
1034                        key: Box::new(key.substitute_templates(bindings)),
1035                        value: Box::new(value.substitute_templates(bindings)),
1036                    });
1037                }
1038                Atomic::TList { value } => {
1039                    result.add_type(Atomic::TList {
1040                        value: Box::new(value.substitute_templates(bindings)),
1041                    });
1042                }
1043                Atomic::TNonEmptyArray { key, value } => {
1044                    result.add_type(Atomic::TNonEmptyArray {
1045                        key: Box::new(key.substitute_templates(bindings)),
1046                        value: Box::new(value.substitute_templates(bindings)),
1047                    });
1048                }
1049                Atomic::TNonEmptyList { value } => {
1050                    result.add_type(Atomic::TNonEmptyList {
1051                        value: Box::new(value.substitute_templates(bindings)),
1052                    });
1053                }
1054                Atomic::TKeyedArray {
1055                    properties,
1056                    is_open,
1057                    is_list,
1058                } => {
1059                    use crate::atomic::KeyedProperty;
1060                    let new_props = properties
1061                        .iter()
1062                        .map(|(k, prop)| {
1063                            (
1064                                k.clone(),
1065                                KeyedProperty {
1066                                    ty: prop.ty.substitute_templates(bindings),
1067                                    optional: prop.optional,
1068                                },
1069                            )
1070                        })
1071                        .collect();
1072                    result.add_type(Atomic::TKeyedArray {
1073                        properties: Box::new(new_props),
1074                        is_open: *is_open,
1075                        is_list: *is_list,
1076                    });
1077                }
1078                Atomic::TCallable {
1079                    params,
1080                    return_type,
1081                } => {
1082                    result.add_type(Atomic::TCallable {
1083                        params: params.as_ref().map(|ps| {
1084                            ps.iter()
1085                                .map(|p| substitute_in_fn_param(p, bindings))
1086                                .collect()
1087                        }),
1088                        return_type: return_type
1089                            .as_ref()
1090                            .map(|r| Box::new(r.substitute_templates(bindings))),
1091                    });
1092                }
1093                Atomic::TClosure { data } => {
1094                    result.add_type(Atomic::TClosure {
1095                        data: Box::new(crate::atomic::ClosureData {
1096                            params: data
1097                                .params
1098                                .iter()
1099                                .map(|p| substitute_in_fn_param(p, bindings))
1100                                .collect(),
1101                            return_type: data.return_type.substitute_templates(bindings),
1102                            this_type: data
1103                                .this_type
1104                                .as_ref()
1105                                .map(|t| t.substitute_templates(bindings)),
1106                        }),
1107                    });
1108                }
1109                Atomic::TConditional { data } => {
1110                    let param_name = &data.param_name;
1111                    let new_subject = data.subject.substitute_templates(bindings);
1112                    let new_if_true = data.if_true.substitute_templates(bindings);
1113                    let new_if_false = data.if_false.substitute_templates(bindings);
1114
1115                    // If param_name names a template that is bound in this substitution,
1116                    // resolve the conditional immediately using the same predicate logic as
1117                    // `resolve_conditional_returns` for the $param form.
1118                    let resolved = if let Some(name) = param_name {
1119                        if let Some(bound) = bindings.get(name) {
1120                            if new_subject.types.len() == 1 {
1121                                resolve_conditional_branch(
1122                                    &new_subject.types[0],
1123                                    bound,
1124                                    &new_if_true,
1125                                    &new_if_false,
1126                                )
1127                            } else {
1128                                None
1129                            }
1130                        } else {
1131                            None
1132                        }
1133                    } else {
1134                        None
1135                    };
1136
1137                    if let Some(branch) = resolved {
1138                        for t in branch.types {
1139                            result.add_type(t);
1140                        }
1141                    } else {
1142                        result.add_type(Atomic::TConditional {
1143                            data: Box::new(crate::atomic::ConditionalData {
1144                                param_name: *param_name,
1145                                subject: new_subject,
1146                                if_true: new_if_true,
1147                                if_false: new_if_false,
1148                            }),
1149                        });
1150                    }
1151                }
1152                Atomic::TKeyOf { target } => {
1153                    let new_target = target.substitute_templates(bindings);
1154                    if let Some(resolved) = eval_key_of_type(&new_target) {
1155                        result.merge_with(&resolved);
1156                    } else {
1157                        result.add_type(Atomic::TKeyOf {
1158                            target: Box::new(new_target),
1159                        });
1160                    }
1161                }
1162                Atomic::TValueOf { target } => {
1163                    let new_target = target.substitute_templates(bindings);
1164                    if let Some(resolved) = eval_value_of_type(&new_target) {
1165                        result.merge_with(&resolved);
1166                    } else {
1167                        result.add_type(Atomic::TValueOf {
1168                            target: Box::new(new_target),
1169                        });
1170                    }
1171                }
1172                Atomic::TIntersection { parts } => {
1173                    result.add_type(Atomic::TIntersection {
1174                        parts: vec_to_type_params(
1175                            parts
1176                                .iter()
1177                                .map(|p| p.substitute_templates(bindings))
1178                                .collect(),
1179                        ),
1180                    });
1181                }
1182                Atomic::TNamedObject { fqcn, type_params } => {
1183                    // See issue #26 for context.
1184                    if type_params.is_empty() && !fqcn.contains('\\') {
1185                        if let Some(resolved) = bindings.get(fqcn) {
1186                            for t in &resolved.types {
1187                                result.add_type(t.clone());
1188                            }
1189                            continue;
1190                        }
1191                    }
1192                    let new_params: Vec<Type> = type_params
1193                        .iter()
1194                        .map(|p| p.substitute_templates(bindings))
1195                        .collect();
1196                    result.add_type(Atomic::TNamedObject {
1197                        fqcn: *fqcn,
1198                        type_params: vec_to_type_params(new_params),
1199                    });
1200                }
1201                // class-string<T> → substitute T from bindings
1202                Atomic::TClassString(Some(param_name)) => {
1203                    if let Some(resolved) = bindings.get(param_name) {
1204                        for r_atomic in &resolved.types {
1205                            let cls_name = if let Atomic::TNamedObject { fqcn, .. } = r_atomic {
1206                                Some(*fqcn)
1207                            } else {
1208                                None
1209                            };
1210                            result.add_type(Atomic::TClassString(cls_name));
1211                        }
1212                    } else {
1213                        result.add_type(atomic.clone());
1214                    }
1215                }
1216                // interface-string<T> → substitute T from bindings
1217                Atomic::TInterfaceString(Some(param_name)) => {
1218                    if let Some(resolved) = bindings.get(param_name) {
1219                        for r_atomic in &resolved.types {
1220                            let iface_name = if let Atomic::TNamedObject { fqcn, .. } = r_atomic {
1221                                Some(*fqcn)
1222                            } else {
1223                                None
1224                            };
1225                            result.add_type(Atomic::TInterfaceString(iface_name));
1226                        }
1227                    } else {
1228                        result.add_type(atomic.clone());
1229                    }
1230                }
1231                _ => {
1232                    result.add_type(atomic.clone());
1233                }
1234            }
1235        }
1236        result
1237    }
1238
1239    /// Resolves `TConditional` atoms whose discriminator is known at the call site.
1240    ///
1241    /// `lookup(param_name)` returns the call-site argument type for the named parameter,
1242    /// or `None` if the argument is not available. Handles `is null`, `is string`, and
1243    /// `is array` conditions; other condition types pass through unchanged.
1244    pub fn resolve_conditional_returns<F>(self, lookup: F) -> Type
1245    where
1246        F: Fn(&str) -> Option<Type>,
1247    {
1248        self.resolve_conditional_inner(&lookup)
1249    }
1250
1251    fn resolve_conditional_inner<F>(self, lookup: &F) -> Type
1252    where
1253        F: Fn(&str) -> Option<Type>,
1254    {
1255        let mut result = Type::empty();
1256        for atomic in self.types {
1257            match atomic {
1258                Atomic::TConditional { ref data } => {
1259                    let (param_name, subject, if_true, if_false) = (
1260                        &data.param_name,
1261                        &data.subject,
1262                        &data.if_true,
1263                        &data.if_false,
1264                    );
1265                    let resolved = if subject.types.len() == 1 {
1266                        if let Some(name) = param_name {
1267                            if let Some(arg_ty) = lookup(name.as_ref()) {
1268                                resolve_conditional_branch(
1269                                    &subject.types[0],
1270                                    &arg_ty,
1271                                    if_true,
1272                                    if_false,
1273                                )
1274                            } else {
1275                                None
1276                            }
1277                        } else {
1278                            None
1279                        }
1280                    } else {
1281                        None
1282                    };
1283
1284                    if let Some(branch) = resolved {
1285                        // Recursively resolve nested conditionals in the selected branch.
1286                        for t in branch.resolve_conditional_inner(lookup).types {
1287                            result.add_type(t);
1288                        }
1289                    } else {
1290                        // Cannot resolve at this call site: widen to the union of both branches.
1291                        // Recursively resolve nested conditionals in each branch.
1292                        for t in if_true.clone().resolve_conditional_inner(lookup).types {
1293                            result.add_type(t);
1294                        }
1295                        for t in if_false.clone().resolve_conditional_inner(lookup).types {
1296                            result.add_type(t);
1297                        }
1298                    }
1299                }
1300                other => result.add_type(other),
1301            }
1302        }
1303        result
1304    }
1305
1306    // --- Subtype check -------------------------------------------------------
1307
1308    /// Returns true if every atomic in `self` is a subtype of some atomic in `other`,
1309    /// using **only structural rules** — no `extends` / `implements` walk.
1310    ///
1311    /// Two distinct user-defined classes are never related here, even when one
1312    /// extends the other. Within `mir-analyzer`, when a `db` is in scope,
1313    /// prefer `crate::subtype::is_subtype(db, sub, sup)` which layers
1314    /// inheritance resolution on top of this check.
1315    pub fn is_subtype_structural(&self, other: &Type) -> bool {
1316        if other.is_mixed() {
1317            return true;
1318        }
1319        if self.is_never() {
1320            return true; // never <: everything
1321        }
1322        self.types
1323            .iter()
1324            .all(|a| other.types.iter().any(|b| atomic_subtype(a, b)))
1325    }
1326
1327    /// `sub <: self`, structurally, for a single atomic — equivalent to
1328    /// `Type::single(sub.clone()).is_subtype_structural(self)` without the
1329    /// clone and the temporary single-atomic union.
1330    pub fn accepts_atomic_structural(&self, sub: &Atomic) -> bool {
1331        if self.is_mixed() {
1332            return true;
1333        }
1334        matches!(sub, Atomic::TNever) || self.types.iter().any(|b| atomic_subtype(sub, b))
1335    }
1336
1337    // --- Utilities ----------------------------------------------------------
1338
1339    fn filter<F: Fn(&Atomic) -> bool>(&self, f: F) -> Type {
1340        let mut result = Type::empty();
1341        result.possibly_undefined = self.possibly_undefined;
1342        result.from_docblock = self.from_docblock;
1343        for atomic in &self.types {
1344            if f(atomic) {
1345                result.types.push(atomic.clone());
1346            }
1347        }
1348        result
1349    }
1350
1351    /// Like `filter`, but atoms matching `placeholder` are substituted with
1352    /// `replacement` instead of passing through unchanged. Used so narrowing
1353    /// an unrefined `mixed`/`scalar`/`numeric` value (e.g. via `is_int($x)`)
1354    /// yields the concrete narrowed type instead of staying `mixed`.
1355    fn filter_replacing<K: Fn(&Atomic) -> bool, P: Fn(&Atomic) -> bool>(
1356        &self,
1357        keep: K,
1358        placeholder: P,
1359        replacement: Atomic,
1360    ) -> Type {
1361        let mut result = Type::empty();
1362        result.possibly_undefined = self.possibly_undefined;
1363        result.from_docblock = self.from_docblock;
1364        for atomic in &self.types {
1365            if keep(atomic) {
1366                result.add_type(atomic.clone());
1367            } else if placeholder(atomic) {
1368                result.add_type(replacement.clone());
1369            }
1370        }
1371        result
1372    }
1373
1374    /// Mark this union as possibly-undefined and return it.
1375    pub fn possibly_undefined(mut self) -> Self {
1376        self.possibly_undefined = true;
1377        self
1378    }
1379
1380    /// Mark this union as coming from a docblock annotation.
1381    pub fn from_docblock(mut self) -> Self {
1382        self.from_docblock = true;
1383        self
1384    }
1385
1386    /// Mark this union as having had a `false`/`null` failure variant stripped
1387    /// for flow purposes (see the field doc on [`Type::falsy_stripped`]).
1388    pub fn falsy_stripped(mut self) -> Self {
1389        self.falsy_stripped = true;
1390        self
1391    }
1392
1393    /// Mark this union as read from a generic array/list offset whose key
1394    /// presence isn't statically provable (see the field doc on
1395    /// [`Type::possibly_absent_offset`]).
1396    pub fn possibly_absent_offset(mut self) -> Self {
1397        self.possibly_absent_offset = true;
1398        self
1399    }
1400}
1401
1402// ---------------------------------------------------------------------------
1403// Conditional return resolution helpers
1404// ---------------------------------------------------------------------------
1405
1406/// Coarse value class of a runtime value.
1407///
1408/// One atom may hold several classes (a `bool` may hold `true` *or*
1409/// `false`; a `scalar` argument is one of the five scalar classes).
1410/// Literal refinements stay precise only where they matter: `int`/`float`
1411/// literals get their own class so that `int` and `float` literals decide
1412/// against each other's subjects; string literals collapse to
1413/// [`ValueClass::String`] (refined string kinds never feed a conditional
1414/// subject and would only cost match precision).
1415#[derive(Clone, PartialEq, Eq, Debug)]
1416enum ValueClass {
1417    Int,
1418    Float,
1419    True,
1420    False,
1421    String,
1422    Array,
1423    /// `list`-shaped arrays (sequential integer keys) — a refinement of [`Array`].
1424    List,
1425    Object,
1426    Null,
1427    /// `mixed`/`void` — a value of every class; it overlaps every other
1428    /// class, so a `mixed` argument rules out no branch.
1429    Top,
1430    /// Literal `int` — precise against `int`/`float` subjects: an `int`
1431    /// literal is not a float, a float literal is not an int.
1432    LitInt(i64),
1433    /// Literal `float` — the bit decomposition mirrors [`Atomic::TLiteralFloat`].
1434    LitFloat(i64, i64),
1435    /// A specific `string` literal.
1436    LitString(Arc<str>),
1437}
1438
1439impl ValueClass {
1440    /// Whether a value of class `b` is necessarily a value of class `a`, i.e.
1441    /// whether the class lattice (`int` literal <: `int` <: `scalar`;
1442    /// `list` <: `array`; `true`/`false` <: `bool`; `mixed` <: everything)
1443    /// places `b` beneath `a`.
1444    fn includes(&self, b: &Self) -> bool {
1445        self == b
1446            || matches!(
1447                (self, b),
1448                (Self::Top, _)
1449                    | (Self::Int, Self::LitInt(_))
1450                    | (Self::Float, Self::LitFloat(..))
1451                    | (Self::String, Self::LitString(_))
1452                    | (Self::Array, Self::List)
1453            )
1454    }
1455}
1456
1457/// The value classes an atom may hold.
1458///
1459/// Meta-types map to every class they may hold (`TBool` holds `true` *and*
1460/// `false`); opaque/deferred atoms (`TTemplateParam`, `TKeyOf`, …) map to
1461/// none — an argument of such a type rules out no branch.
1462fn value_classes(a: &Atomic) -> Vec<ValueClass> {
1463    use ValueClass::*;
1464    match a {
1465        // Integers (range bounds are not modeled: a subject `int` is a
1466        // family question).
1467        Atomic::TInt
1468        | Atomic::TIntRange { .. }
1469        | Atomic::TPositiveInt
1470        | Atomic::TNegativeInt
1471        | Atomic::TNonNegativeInt => vec![Int],
1472        Atomic::TLiteralInt(v) => vec![LitInt(*v)],
1473        // Floats.
1474        Atomic::TFloat | Atomic::TIntegralFloat => vec![Float],
1475        Atomic::TLiteralFloat(int_bits, frac_bits) => {
1476            vec![LitFloat(*int_bits, *frac_bits)]
1477        }
1478        // Bools.
1479        Atomic::TBool => vec![True, False],
1480        Atomic::TTrue => vec![True],
1481        Atomic::TFalse => vec![False],
1482        // Strings — every refined string kind maps to one class.
1483        Atomic::TString
1484        | Atomic::TNonEmptyString
1485        | Atomic::TNumericString
1486        | Atomic::TClassString(_)
1487        | Atomic::TInterfaceString(_)
1488        | Atomic::TEnumString
1489        | Atomic::TTraitString
1490        | Atomic::TCallableString => vec![String],
1491        Atomic::TLiteralString(s) => vec![LitString(s.clone())],
1492        // Arrays — `list` is a refinement of `array`.
1493        Atomic::TArray { .. }
1494        | Atomic::TNonEmptyArray { .. }
1495        | Atomic::TKeyedArray { is_list: false, .. } => vec![Array],
1496        Atomic::TList { .. }
1497        | Atomic::TNonEmptyList { .. }
1498        | Atomic::TKeyedArray { is_list: true, .. } => vec![List],
1499        // Objects — a specific class instance is an object at runtime.
1500        Atomic::TObject
1501        | Atomic::TNamedObject { .. }
1502        | Atomic::TStaticObject { .. }
1503        | Atomic::TSelf { .. }
1504        | Atomic::TParent { .. }
1505        | Atomic::TClosure { .. }
1506        | Atomic::TLiteralEnumCase { .. } => vec![Object],
1507        // Null. `void` maps to `Top` (a `void`-typed value is unknown; treating
1508        // it as "everything" keeps any branch it feeds undecidable).
1509        Atomic::TNull => vec![Null],
1510        Atomic::TVoid => vec![Top],
1511        // Everything / scalars.
1512        Atomic::TMixed => vec![Top],
1513        Atomic::TScalar => vec![Int, Float, True, False, String],
1514        // `numeric` may hold `int` or `float` values (a numeric *string*
1515        // can never be the discriminant of an `is numeric` subject).
1516        Atomic::TNumeric => vec![Int, Float],
1517        // Opaque / deferred — rules out no branch.
1518        Atomic::TCallable { .. }
1519        | Atomic::TNever
1520        | Atomic::TTemplateParam { .. }
1521        | Atomic::TKeyOf { .. }
1522        | Atomic::TValueOf { .. }
1523        | Atomic::TConditional { .. }
1524        | Atomic::TIntersection { .. } => Vec::new(),
1525    }
1526}
1527
1528/// Whether a conditional discriminant subject can be decided by value class.
1529///
1530/// Only the bare family kinds qualify. A refined subject (a named object, a
1531/// shape, a non-empty list, an enum case, …) carries value-level constraints
1532/// the class lattice cannot express — an argument that is *some* object is
1533/// not necessarily *that* class — so refined subjects stay undecidable, the
1534/// same behavior as the pre-class predicate (which had no arm for them).
1535fn subject_is_decidable(subject: &Atomic) -> bool {
1536    matches!(
1537        subject,
1538        Atomic::TNull
1539            | Atomic::TTrue
1540            | Atomic::TFalse
1541            | Atomic::TBool
1542            | Atomic::TString
1543            | Atomic::TInt
1544            | Atomic::TFloat
1545            | Atomic::TArray { .. }
1546            | Atomic::TList { .. }
1547            | Atomic::TObject
1548            | Atomic::TMixed
1549            | Atomic::TScalar
1550    )
1551}
1552
1553/// Resolve one branch of a conditional return type given the subject
1554/// discriminant and the actual argument type at the call site.
1555///
1556/// Returns `Some(branch)` when the branch can be determined statically, or
1557/// `None` to signal that the caller should widen to the union of both
1558/// branches.
1559///
1560/// Decision rule (value-class semantics): the discriminant and the argument
1561/// are compared *only on value classes* — the value sets the runtime type
1562/// system uses for narrowing. Class containment is the same lattice the
1563/// subtype relation uses for these kinds (`true` ⊆ `bool` ⊆ `scalar`,
1564/// `list` ⊆ `array`, `int`/`float` literals distinct, `mixed` ⊆ everything),
1565/// so a subject kind and an argument kind are related iff some contained
1566/// class relates them.
1567///
1568/// The true branch commits when every argument class is contained in some
1569/// subject class (every value the argument can hold is a subject value); the
1570/// false branch commits when every argument class is disjoint from every
1571/// subject class (no value the argument can hold is a subject value).
1572/// Otherwise the branch is undecidable and the caller widens to the union of
1573/// both branches.
1574fn resolve_conditional_branch(
1575    subject: &Atomic,
1576    arg_ty: &Type,
1577    if_true: &Type,
1578    if_false: &Type,
1579) -> Option<Type> {
1580    if !subject_is_decidable(subject) {
1581        return None;
1582    }
1583    if arg_ty.types.is_empty() {
1584        return None;
1585    }
1586    let subject_classes = value_classes(subject);
1587    let arg_classes: Vec<ValueClass> = arg_ty.types.iter().flat_map(value_classes).collect();
1588    if arg_classes.is_empty() {
1589        // Opaque argument (template, `key-of`, …) — no branch is ruled out.
1590        return None;
1591    }
1592    let all_match = arg_classes
1593        .iter()
1594        .all(|c| subject_classes.iter().any(|s| s.includes(c)));
1595    let any_overlap = arg_classes.iter().any(|c| {
1596        subject_classes
1597            .iter()
1598            .any(|s| s.includes(c) || c.includes(s))
1599    });
1600    if all_match {
1601        Some(if_true.clone())
1602    } else if !any_overlap {
1603        Some(if_false.clone())
1604    } else {
1605        None
1606    }
1607}
1608
1609// ---------------------------------------------------------------------------
1610// Template substitution helpers
1611// ---------------------------------------------------------------------------
1612
1613/// Whether `substitute_templates` could change this atomic: it is either a
1614/// template reference itself or a container/callable that may hold one.
1615/// Mirrors the substituting arms of that function's match — keep in sync.
1616fn atomic_may_contain_templates(atomic: &Atomic) -> bool {
1617    match atomic {
1618        // Bare unqualified names double as template refs (docblock parser
1619        // workaround, see substitute_templates); qualified names only matter
1620        // when they carry generic params.
1621        Atomic::TNamedObject { fqcn, type_params } => {
1622            !type_params.is_empty() || !fqcn.contains('\\')
1623        }
1624        Atomic::TTemplateParam { .. }
1625        | Atomic::TKeyOf { .. }
1626        | Atomic::TValueOf { .. }
1627        | Atomic::TArray { .. }
1628        | Atomic::TList { .. }
1629        | Atomic::TNonEmptyArray { .. }
1630        | Atomic::TNonEmptyList { .. }
1631        | Atomic::TKeyedArray { .. }
1632        | Atomic::TCallable { .. }
1633        | Atomic::TClosure { .. }
1634        | Atomic::TConditional { .. }
1635        | Atomic::TIntersection { .. }
1636        | Atomic::TClassString(Some(_))
1637        | Atomic::TInterfaceString(Some(_)) => true,
1638        _ => false,
1639    }
1640}
1641
1642fn eval_key_of_type(t: &Type) -> Option<Type> {
1643    let mut result = Type::empty();
1644    for atomic in &t.types {
1645        match atomic {
1646            Atomic::TArray { key, .. } | Atomic::TNonEmptyArray { key, .. } => {
1647                for k in &key.types {
1648                    result.add_type(k.clone());
1649                }
1650            }
1651            Atomic::TList { .. } | Atomic::TNonEmptyList { .. } => {
1652                result.add_type(Atomic::TInt);
1653            }
1654            Atomic::TKeyedArray { properties, .. } => {
1655                for key in properties.keys() {
1656                    match key {
1657                        crate::atomic::ArrayKey::Int(n) => result.add_type(Atomic::TLiteralInt(*n)),
1658                        crate::atomic::ArrayKey::String(s) => {
1659                            result.add_type(Atomic::TLiteralString(s.clone()))
1660                        }
1661                    }
1662                }
1663            }
1664            _ => return None,
1665        }
1666    }
1667    (!result.types.is_empty()).then_some(result)
1668}
1669
1670fn eval_value_of_type(t: &Type) -> Option<Type> {
1671    let mut result = Type::empty();
1672    for atomic in &t.types {
1673        match atomic {
1674            Atomic::TArray { value, .. }
1675            | Atomic::TNonEmptyArray { value, .. }
1676            | Atomic::TList { value }
1677            | Atomic::TNonEmptyList { value } => {
1678                result.merge_with(value);
1679            }
1680            Atomic::TKeyedArray { properties, .. } => {
1681                for prop in properties.values() {
1682                    result.merge_with(&prop.ty);
1683                }
1684            }
1685            _ => return None,
1686        }
1687    }
1688    (!result.types.is_empty()).then_some(result)
1689}
1690
1691fn substitute_in_fn_param(
1692    p: &crate::atomic::FnParam,
1693    bindings: &FxHashMap<Name, Type>,
1694) -> crate::atomic::FnParam {
1695    crate::atomic::FnParam {
1696        name: p.name,
1697        ty: p.ty.as_ref().map(|t| {
1698            let u = t.to_union();
1699            let substituted = u.substitute_templates(bindings);
1700            crate::compact::SimpleType::from_union(substituted)
1701        }),
1702        out_ty: p.out_ty.as_ref().map(|t| {
1703            let u = t.to_union();
1704            let substituted = u.substitute_templates(bindings);
1705            crate::compact::SimpleType::from_union(substituted)
1706        }),
1707        default: p.default.as_ref().map(|d| {
1708            let u = d.to_union();
1709            let substituted = u.substitute_templates(bindings);
1710            crate::compact::SimpleType::from_union(substituted)
1711        }),
1712        is_variadic: p.is_variadic,
1713        is_byref: p.is_byref,
1714        is_optional: p.is_optional,
1715    }
1716}
1717
1718// ---------------------------------------------------------------------------
1719// Atomic subtype (no codebase — structural check only)
1720// ---------------------------------------------------------------------------
1721
1722/// Structural `sub <: sup` for a single atomic pair, without hierarchy resolution.
1723pub fn atomic_subtype(sub: &Atomic, sup: &Atomic) -> bool {
1724    if sub == sup {
1725        return true;
1726    }
1727    match (sub, sup) {
1728        // Bottom type
1729        (Atomic::TNever, _) => true,
1730        // Top types — anything goes in both directions for mixed
1731        (_, Atomic::TMixed) => true,
1732        (Atomic::TMixed, _) => true,
1733        // Template param in supertype position: any value satisfies an unconstrained
1734        // template (as_type = mixed), or a constrained one if it satisfies the bound.
1735        // This handles union bounds like `T of string|list<I>|array<K, V>` where
1736        // I/K/V are free template params — any type satisfies them structurally.
1737        (_, Atomic::TTemplateParam { as_type, .. }) => {
1738            as_type.is_mixed() || as_type.types.iter().any(|b| atomic_subtype(sub, b))
1739        }
1740
1741        // Scalars
1742        (Atomic::TLiteralInt(_), Atomic::TInt) => true,
1743        (Atomic::TLiteralInt(_), Atomic::TNumeric) => true,
1744        (Atomic::TLiteralInt(_), Atomic::TScalar) => true,
1745        (Atomic::TLiteralInt(n), Atomic::TPositiveInt) => *n > 0,
1746        (Atomic::TLiteralInt(n), Atomic::TNonNegativeInt) => *n >= 0,
1747        (Atomic::TLiteralInt(n), Atomic::TNegativeInt) => *n < 0,
1748        (Atomic::TPositiveInt, Atomic::TInt) => true,
1749        (Atomic::TPositiveInt, Atomic::TNonNegativeInt) => true,
1750        (Atomic::TPositiveInt, Atomic::TNumeric) => true,
1751        (Atomic::TPositiveInt, Atomic::TScalar) => true,
1752        (Atomic::TNegativeInt, Atomic::TInt) => true,
1753        (Atomic::TNegativeInt, Atomic::TNumeric) => true,
1754        (Atomic::TNegativeInt, Atomic::TScalar) => true,
1755        (Atomic::TNonNegativeInt, Atomic::TInt) => true,
1756        (Atomic::TNonNegativeInt, Atomic::TNumeric) => true,
1757        (Atomic::TNonNegativeInt, Atomic::TScalar) => true,
1758        (Atomic::TIntRange { .. }, Atomic::TInt) => true,
1759        (Atomic::TIntRange { .. }, Atomic::TNumeric) => true,
1760        (Atomic::TIntRange { .. }, Atomic::TScalar) => true,
1761        // positive-int is int<1, ∞>: subtype of int<sup_min, ∞> when sup_min <= 1
1762        (Atomic::TPositiveInt, Atomic::TIntRange { min, max }) => {
1763            max.is_none() && min.is_none_or(|m| m <= 1)
1764        }
1765        // negative-int is int<-∞, -1>: subtype of int<-∞, sup_max> when sup_max >= -1
1766        (Atomic::TNegativeInt, Atomic::TIntRange { min, max }) => {
1767            min.is_none() && max.is_none_or(|m| m >= -1)
1768        }
1769        // non-negative-int is int<0, ∞>: subtype of int<sup_min, ∞> when sup_min <= 0
1770        (Atomic::TNonNegativeInt, Atomic::TIntRange { min, max }) => {
1771            max.is_none() && min.is_none_or(|m| m <= 0)
1772        }
1773        // A bounded int range is a subtype of a named int subtype when every value fits
1774        (Atomic::TIntRange { min: sub_min, .. }, Atomic::TPositiveInt) => {
1775            sub_min.is_some_and(|lo| lo >= 1)
1776        }
1777        (Atomic::TIntRange { min: sub_min, .. }, Atomic::TNonNegativeInt) => {
1778            sub_min.is_some_and(|lo| lo >= 0)
1779        }
1780        (Atomic::TIntRange { max: sub_max, .. }, Atomic::TNegativeInt) => {
1781            sub_max.is_some_and(|hi| hi <= -1)
1782        }
1783        // int<sub_min, sub_max> <: int<sup_min, sup_max> when ranges nest
1784        (
1785            Atomic::TIntRange {
1786                min: sub_min,
1787                max: sub_max,
1788            },
1789            Atomic::TIntRange {
1790                min: sup_min,
1791                max: sup_max,
1792            },
1793        ) => {
1794            let lower_ok = match (sub_min, sup_min) {
1795                (_, None) => true,
1796                (None, Some(_)) => false,
1797                (Some(sl), Some(su)) => sl >= su,
1798            };
1799            let upper_ok = match (sub_max, sup_max) {
1800                (None, None) | (Some(_), None) => true,
1801                (None, Some(_)) => false,
1802                (Some(sl), Some(su)) => sl <= su,
1803            };
1804            lower_ok && upper_ok
1805        }
1806
1807        (Atomic::TLiteralFloat(..), Atomic::TFloat) => true,
1808        (Atomic::TLiteralFloat(..), Atomic::TNumeric) => true,
1809        (Atomic::TLiteralFloat(..), Atomic::TScalar) => true,
1810
1811        (Atomic::TLiteralString(s), Atomic::TString) => {
1812            let _ = s;
1813            true
1814        }
1815        (Atomic::TLiteralString(s), Atomic::TCallableString) => {
1816            let _ = s;
1817            true
1818        }
1819        (Atomic::TLiteralString(s), Atomic::TNonEmptyString) => !s.is_empty(),
1820        (Atomic::TLiteralString(s), Atomic::TNumericString) => s.parse::<f64>().is_ok(),
1821        // A literal string is type-compatible with class-string; validate_class_string_argument
1822        // separately checks whether the string names a real class (UndefinedClass).
1823        (Atomic::TLiteralString(_), Atomic::TClassString(_)) => true,
1824        // Same, for interface-string; validate_interface_string_argument checks existence
1825        // and that the name actually resolves to an interface.
1826        (Atomic::TLiteralString(_), Atomic::TInterfaceString(_)) => true,
1827        (Atomic::TLiteralString(_), Atomic::TScalar) => true,
1828        (Atomic::TNonEmptyString, Atomic::TString) => true,
1829        (Atomic::TCallableString, Atomic::TString) => true,
1830        // numeric-string is always non-empty (e.g. "42", "-1", "0.5") — "" is not numeric.
1831        (Atomic::TNumericString, Atomic::TNonEmptyString) => true,
1832        (Atomic::TNumericString, Atomic::TString) => true,
1833        // A class/interface/callable/enum/trait name can never be the empty
1834        // string in real PHP — every one of these string-subtype atoms is
1835        // always non-empty, same reasoning as numeric-string above.
1836        (Atomic::TClassString(_), Atomic::TNonEmptyString) => true,
1837        (Atomic::TInterfaceString(_), Atomic::TNonEmptyString) => true,
1838        (Atomic::TCallableString, Atomic::TNonEmptyString) => true,
1839        (Atomic::TEnumString, Atomic::TNonEmptyString) => true,
1840        (Atomic::TTraitString, Atomic::TNonEmptyString) => true,
1841        (Atomic::TClassString(_), Atomic::TString) => true,
1842        (Atomic::TInterfaceString(_), Atomic::TString) => true,
1843        // Every interface-string is a valid class-string: PHP doesn't distinguish
1844        // the two at runtime — both are just strings naming a class-like symbol.
1845        // Instantiability (`new $x()`) is guarded separately, since an interface
1846        // name can never be `new`-ed even though it satisfies class-string.
1847        (Atomic::TInterfaceString(_), Atomic::TClassString(None)) => true,
1848        (Atomic::TInterfaceString(Some(a)), Atomic::TClassString(Some(b))) => a == b,
1849        (Atomic::TEnumString, Atomic::TString) => true,
1850        (Atomic::TTraitString, Atomic::TString) => true,
1851
1852        (Atomic::TTrue, Atomic::TBool) => true,
1853        (Atomic::TFalse, Atomic::TBool) => true,
1854
1855        (Atomic::TInt, Atomic::TNumeric) => true,
1856        (Atomic::TFloat, Atomic::TNumeric) => true,
1857        (Atomic::TIntegralFloat, Atomic::TNumeric) => true,
1858        (Atomic::TNumericString, Atomic::TNumeric) => true,
1859
1860        (Atomic::TInt, Atomic::TScalar) => true,
1861        (Atomic::TFloat, Atomic::TScalar) => true,
1862        (Atomic::TIntegralFloat, Atomic::TScalar) => true,
1863        (Atomic::TString, Atomic::TScalar) => true,
1864        (Atomic::TBool, Atomic::TScalar) => true,
1865        (Atomic::TNumeric, Atomic::TScalar) => true,
1866        (Atomic::TTrue, Atomic::TScalar) => true,
1867        (Atomic::TFalse, Atomic::TScalar) => true,
1868        // Every refined string atom is, at runtime, still just a `string` —
1869        // and therefore a `scalar` — same as the already-covered TLiteralString
1870        // and int-family refinements just above/below.
1871        (Atomic::TNonEmptyString, Atomic::TScalar) => true,
1872        (Atomic::TNumericString, Atomic::TScalar) => true,
1873        (Atomic::TCallableString, Atomic::TScalar) => true,
1874        (Atomic::TClassString(_), Atomic::TScalar) => true,
1875        (Atomic::TInterfaceString(_), Atomic::TScalar) => true,
1876        (Atomic::TEnumString, Atomic::TScalar) => true,
1877        (Atomic::TTraitString, Atomic::TScalar) => true,
1878
1879        // Object hierarchy (structural, no codebase)
1880        (Atomic::TNamedObject { .. }, Atomic::TObject) => true,
1881        (Atomic::TStaticObject { .. }, Atomic::TObject) => true,
1882        (Atomic::TSelf { .. }, Atomic::TObject) => true,
1883        // An enum-case literal is, at runtime, an object.
1884        (Atomic::TLiteralEnumCase { .. }, Atomic::TObject) => true,
1885        // self(X) and static(X) satisfy TNamedObject(X) with same FQCN
1886        (Atomic::TSelf { fqcn: a }, Atomic::TNamedObject { fqcn: b, .. }) => a == b,
1887        (Atomic::TStaticObject { fqcn: a }, Atomic::TNamedObject { fqcn: b, .. }) => a == b,
1888        // TNamedObject(X) satisfies self(X) / static(X) with same FQCN
1889        (Atomic::TNamedObject { fqcn: a, .. }, Atomic::TSelf { fqcn: b }) => a == b,
1890        (Atomic::TNamedObject { fqcn: a, .. }, Atomic::TStaticObject { fqcn: b }) => a == b,
1891        // An enum-case literal satisfies its own bare enum type (enums are
1892        // represented as TNamedObject).
1893        (Atomic::TLiteralEnumCase { enum_fqcn, .. }, Atomic::TNamedObject { fqcn, .. }) => {
1894            enum_fqcn == fqcn
1895        }
1896        // Bare generic property accepts parameterized value: Box accepts Box<string>.
1897        // The reverse is NOT true — bare Box value does not satisfy Box<string> property
1898        // (invariant check). Only sup being bare (empty type_params) is the wildcard.
1899        (
1900            Atomic::TNamedObject {
1901                fqcn: sub_fqcn,
1902                type_params: sub_params,
1903            },
1904            Atomic::TNamedObject {
1905                fqcn: sup_fqcn,
1906                type_params: sup_params,
1907            },
1908        ) => {
1909            sub_fqcn == sup_fqcn
1910                && (sup_params.is_empty() || type_params_compatible(sub_params, sup_params))
1911        }
1912
1913        // TIntegralFloat is a subtype of float (all integral floats are floats)
1914        (Atomic::TIntegralFloat, Atomic::TFloat) => true,
1915
1916        // Literal int widens to float in PHP
1917        (Atomic::TLiteralInt(_), Atomic::TFloat) => true,
1918        (Atomic::TPositiveInt, Atomic::TFloat) => true,
1919        (Atomic::TNegativeInt, Atomic::TFloat) => true,
1920        (Atomic::TNonNegativeInt, Atomic::TFloat) => true,
1921        (Atomic::TInt, Atomic::TFloat) => true,
1922        (Atomic::TIntRange { .. }, Atomic::TFloat) => true,
1923
1924        // Literal int satisfies an int range only when the value is within bounds
1925        (Atomic::TLiteralInt(n), Atomic::TIntRange { min, max }) => {
1926            min.is_none_or(|lo| *n >= lo) && max.is_none_or(|hi| *n <= hi)
1927        }
1928
1929        // PHP callables: string and array are valid callable values
1930        (Atomic::TString, Atomic::TCallable { .. }) => true,
1931        (Atomic::TNonEmptyString, Atomic::TCallable { .. }) => true,
1932        (Atomic::TLiteralString(_), Atomic::TCallable { .. }) => true,
1933        (Atomic::TArray { .. }, Atomic::TCallable { .. }) => true,
1934        (Atomic::TNonEmptyArray { .. }, Atomic::TCallable { .. }) => true,
1935        (Atomic::TKeyedArray { .. }, Atomic::TCallable { .. }) => true,
1936
1937        // Closure <: callable, typed Closure <: Closure
1938        (Atomic::TClosure { .. }, Atomic::TCallable { .. }) => true,
1939        // callable <: Closure: callable is wider but not flagged at default error level
1940        (Atomic::TCallable { .. }, Atomic::TClosure { .. }) => true,
1941        // TClosure <: TClosure: check arity, per-parameter contravariance, and
1942        // return covariance for scalar/array-shaped types, where a purely
1943        // structural check is reliable. A named-class (or nested-callable)
1944        // param/return is skipped rather than checked — this checker has no
1945        // database access to walk `extends`/`implements`, so it can't safely
1946        // tell a real Liskov violation apart from a legitimate subclass/
1947        // superclass substitution; treating it as compatible avoids false
1948        // positives on that far more common case at the cost of missing the
1949        // narrower nominal-variance violation.
1950        (Atomic::TClosure { data: sub }, Atomic::TClosure { data: sup }) => {
1951            fn has_nominal_type(t: &Type) -> bool {
1952                t.types.iter().any(|a| {
1953                    matches!(
1954                        a,
1955                        Atomic::TNamedObject { .. }
1956                            | Atomic::TSelf { .. }
1957                            | Atomic::TStaticObject { .. }
1958                            | Atomic::TTemplateParam { .. }
1959                            | Atomic::TClosure { .. }
1960                            | Atomic::TCallable { .. }
1961                    )
1962                })
1963            }
1964            let sub_required = sub
1965                .params
1966                .iter()
1967                .filter(|p| !p.is_optional && !p.is_variadic)
1968                .count();
1969            if sub_required > sup.params.len() {
1970                false
1971            } else {
1972                let params_ok = sup.params.iter().enumerate().all(|(i, sup_param)| {
1973                    let Some(sub_param) = sub.params.get(i) else {
1974                        return true;
1975                    };
1976                    if sub_param.is_optional || sub_param.is_variadic {
1977                        return true;
1978                    }
1979                    let (Some(sub_ty), Some(sup_ty)) =
1980                        (sub_param.ty.as_ref(), sup_param.ty.as_ref())
1981                    else {
1982                        return true;
1983                    };
1984                    let (sub_u, sup_u) = (sub_ty.to_union(), sup_ty.to_union());
1985                    if has_nominal_type(&sub_u) || has_nominal_type(&sup_u) {
1986                        return true;
1987                    }
1988                    // Contravariance: whatever `sup` promises to pass must be
1989                    // acceptable to `sub`'s declared parameter type.
1990                    sup_u.is_subtype_structural(&sub_u)
1991                });
1992                params_ok
1993                    && (sub.return_type.is_mixed()
1994                        || sup.return_type.is_mixed()
1995                        // A void callback discards its return value, so any
1996                        // return type satisfies it — PHP places no
1997                        // constraint on what an implementation returns here.
1998                        || sup.return_type.is_void()
1999                        || has_nominal_type(&sub.return_type)
2000                        || has_nominal_type(&sup.return_type)
2001                        || sub.return_type.is_subtype_structural(&sup.return_type))
2002            }
2003        }
2004        // callable <: callable (trivial)
2005        (Atomic::TCallable { .. }, Atomic::TCallable { .. }) => true,
2006        // TClosure satisfies `Closure` named object or `object`
2007        (Atomic::TClosure { .. }, Atomic::TNamedObject { fqcn, .. }) => {
2008            fqcn.as_ref().eq_ignore_ascii_case("closure")
2009        }
2010        (Atomic::TClosure { .. }, Atomic::TObject) => true,
2011        // bare `Closure` (named object without signature) satisfies any typed Closure(): T
2012        (Atomic::TNamedObject { fqcn, .. }, Atomic::TClosure { .. }) => {
2013            fqcn.as_ref().eq_ignore_ascii_case("closure")
2014        }
2015        // `Closure` named-object satisfies `callable`
2016        (Atomic::TNamedObject { fqcn, .. }, Atomic::TCallable { .. }) => {
2017            fqcn.as_ref().eq_ignore_ascii_case("closure")
2018        }
2019
2020        // A&B&C <: D&E iff every part of the supertype is satisfied by some
2021        // part of the subtype — an intersection with MORE conjuncts is the
2022        // more specific (sub)type, so `Countable&ArrayAccess&Iterator` is a
2023        // subtype of `Countable&ArrayAccess`. Purely structural (each part's
2024        // own `is_subtype_structural` recurses, so e.g. two differently-named
2025        // interfaces only match when equal — same conservative stance as the
2026        // TClosure<:TClosure arm above for named types).
2027        (
2028            Atomic::TIntersection { parts: sub_parts },
2029            Atomic::TIntersection { parts: sup_parts },
2030        ) => sup_parts.iter().all(|sup_part| {
2031            sub_parts
2032                .iter()
2033                .any(|sub_part| sub_part.is_subtype_structural(sup_part))
2034        }),
2035
2036        // List <: array  (list key is always int; int must satisfy the array's key type)
2037        (Atomic::TList { value }, Atomic::TArray { key, value: av }) => {
2038            Type::single(Atomic::TInt).is_subtype_structural(key) && value.is_subtype_structural(av)
2039        }
2040        (Atomic::TNonEmptyList { value }, Atomic::TArray { key, value: av }) => {
2041            Type::single(Atomic::TInt).is_subtype_structural(key) && value.is_subtype_structural(av)
2042        }
2043        (Atomic::TNonEmptyList { value }, Atomic::TNonEmptyArray { key, value: av }) => {
2044            Type::single(Atomic::TInt).is_subtype_structural(key) && value.is_subtype_structural(av)
2045        }
2046        (Atomic::TNonEmptyList { value }, Atomic::TList { value: lv }) => {
2047            value.is_subtype_structural(lv)
2048        }
2049        // array<int, X> is accepted where list<X> or non-empty-list<X> expected
2050        (Atomic::TArray { key, value: av }, Atomic::TList { value: lv }) => {
2051            matches!(key.types.as_slice(), [Atomic::TInt | Atomic::TMixed])
2052                && av.is_subtype_structural(lv)
2053        }
2054        (Atomic::TArray { key, value: av }, Atomic::TNonEmptyList { value: lv }) => {
2055            matches!(key.types.as_slice(), [Atomic::TInt | Atomic::TMixed])
2056                && av.is_subtype_structural(lv)
2057        }
2058        (Atomic::TNonEmptyArray { key, value: av }, Atomic::TList { value: lv }) => {
2059            matches!(key.types.as_slice(), [Atomic::TInt | Atomic::TMixed])
2060                && av.is_subtype_structural(lv)
2061        }
2062        (Atomic::TNonEmptyArray { key, value: av }, Atomic::TNonEmptyList { value: lv }) => {
2063            matches!(key.types.as_slice(), [Atomic::TInt | Atomic::TMixed])
2064                && av.is_subtype_structural(lv)
2065        }
2066        // TList <: TList value covariance
2067        (Atomic::TList { value: v1 }, Atomic::TList { value: v2 }) => v1.is_subtype_structural(v2),
2068        (Atomic::TNonEmptyArray { key: k1, value: v1 }, Atomic::TArray { key: k2, value: v2 }) => {
2069            k1.is_subtype_structural(k2) && v1.is_subtype_structural(v2)
2070        }
2071
2072        // array<A, B> <: array<C, D>  iff  A <: C && B <: D
2073        (Atomic::TArray { key: k1, value: v1 }, Atomic::TArray { key: k2, value: v2 }) => {
2074            k1.is_subtype_structural(k2) && v1.is_subtype_structural(v2)
2075        }
2076
2077        // A keyed/shape array is a subtype of array<K, V> / non-empty-array<K, V>
2078        // when all property KEYS are subtypes of K. Value compatibility is checked
2079        // structurally only for scalar types; named-object values are deferred to
2080        // class-hierarchy checks in return_arrays_compatible (mir-analyzer).
2081        // Open shapes (is_open=true) may have extra unknown keys beyond `properties`:
2082        // those stay unchecked (permissive), but every KNOWN property must still
2083        // satisfy K/V regardless of openness — an open shape isn't a license to skip
2084        // checking the keys it does declare.
2085        (Atomic::TKeyedArray { properties, .. }, Atomic::TArray { key, value }) => {
2086            properties.iter().all(|(prop_key, prop)| {
2087                let key_atomic = match prop_key {
2088                    crate::atomic::ArrayKey::String(s) => Atomic::TLiteralString(s.clone()),
2089                    crate::atomic::ArrayKey::Int(n) => Atomic::TLiteralInt(*n),
2090                };
2091                if !Type::single(key_atomic).is_subtype_structural(key) {
2092                    return false; // key mismatch — definitively incompatible
2093                }
2094                // Named-object values require class-hierarchy checks not available here.
2095                let has_named_obj = prop.ty.types.iter().any(|a| {
2096                    matches!(
2097                        a,
2098                        Atomic::TNamedObject { .. }
2099                            | Atomic::TSelf { .. }
2100                            | Atomic::TStaticObject { .. }
2101                            | Atomic::TClosure { .. }
2102                            | Atomic::TTemplateParam { .. }
2103                    )
2104                });
2105                has_named_obj || prop.ty.is_subtype_structural(value)
2106            })
2107        }
2108        (
2109            Atomic::TKeyedArray {
2110                properties,
2111                is_open,
2112                ..
2113            },
2114            Atomic::TNonEmptyArray { key, value },
2115        ) => {
2116            (*is_open || properties.iter().any(|(_, p)| !p.optional))
2117                && properties.iter().all(|(prop_key, prop)| {
2118                    let key_atomic = match prop_key {
2119                        crate::atomic::ArrayKey::String(s) => Atomic::TLiteralString(s.clone()),
2120                        crate::atomic::ArrayKey::Int(n) => Atomic::TLiteralInt(*n),
2121                    };
2122                    if !Type::single(key_atomic).is_subtype_structural(key) {
2123                        return false;
2124                    }
2125                    let has_named_obj = prop.ty.types.iter().any(|a| {
2126                        matches!(
2127                            a,
2128                            Atomic::TNamedObject { .. }
2129                                | Atomic::TSelf { .. }
2130                                | Atomic::TStaticObject { .. }
2131                                | Atomic::TClosure { .. }
2132                                | Atomic::TTemplateParam { .. }
2133                        )
2134                    });
2135                    has_named_obj || prop.ty.is_subtype_structural(value)
2136                })
2137        }
2138
2139        // A list-shaped keyed array (is_list=true, all int keys) is a subtype of list<X>.
2140        (
2141            Atomic::TKeyedArray {
2142                properties,
2143                is_list,
2144                ..
2145            },
2146            Atomic::TList { value: lv },
2147        ) => *is_list && properties.values().all(|p| p.ty.is_subtype_structural(lv)),
2148        (
2149            Atomic::TKeyedArray {
2150                properties,
2151                is_list,
2152                ..
2153            },
2154            Atomic::TNonEmptyList { value: lv },
2155        ) => {
2156            *is_list
2157                && !properties.is_empty()
2158                && properties.values().all(|p| p.ty.is_subtype_structural(lv))
2159        }
2160
2161        // Two shapes: every sup key must be satisfied (present+compatible, or
2162        // absent-but-optional/sub-open), and sub may not have keys sup doesn't
2163        // declare unless sup itself is open. Named-object values are deferred
2164        // to class-hierarchy checks, same as the TArray/TList sup arms above.
2165        (
2166            Atomic::TKeyedArray {
2167                properties: sub_props,
2168                is_open: sub_open,
2169                ..
2170            },
2171            Atomic::TKeyedArray {
2172                properties: sup_props,
2173                is_open: sup_open,
2174                ..
2175            },
2176        ) => {
2177            let keys_satisfied = sup_props
2178                .iter()
2179                .all(|(key, sup_prop)| match sub_props.get(key) {
2180                    Some(sub_prop) => {
2181                        // A key merely optional on the sub side may legally be
2182                        // absent at runtime, so it can't satisfy a sup key that
2183                        // requires it present.
2184                        if !sup_prop.optional && sub_prop.optional {
2185                            return false;
2186                        }
2187                        let has_named_obj = sup_prop.ty.types.iter().any(|a| {
2188                            matches!(
2189                                a,
2190                                Atomic::TNamedObject { .. }
2191                                    | Atomic::TSelf { .. }
2192                                    | Atomic::TStaticObject { .. }
2193                                    | Atomic::TClosure { .. }
2194                                    | Atomic::TTemplateParam { .. }
2195                            )
2196                        });
2197                        has_named_obj || sub_prop.ty.is_subtype_structural(&sup_prop.ty)
2198                    }
2199                    None => sup_prop.optional || *sub_open,
2200                });
2201            let no_undeclared_extras =
2202                *sup_open || sub_props.keys().all(|k| sup_props.contains_key(k));
2203            keys_satisfied && no_undeclared_extras
2204        }
2205        // TKeyedArray (array shape) satisfies TIntersection iff it satisfies every
2206        // intersection part. This handles the Psalm idiom of using intersection types
2207        // for "shape plus extra keys allowed" patterns like:
2208        // @psalm-type Context = array<string,mixed> & array{actor:...,target?:...,outcome:...}
2209        (
2210            Atomic::TKeyedArray {
2211                properties,
2212                is_open,
2213                ..
2214            },
2215            Atomic::TIntersection { parts },
2216        ) => parts.iter().all(|part| {
2217            part.types.iter().any(|part_atomic| match part_atomic {
2218                Atomic::TKeyedArray {
2219                    properties: sup_props,
2220                    is_open: sup_open,
2221                    ..
2222                } => {
2223                    let keys_satisfied =
2224                        sup_props
2225                            .iter()
2226                            .all(|(key, sup_prop)| match properties.get(key) {
2227                                Some(sub_prop) => {
2228                                    if !sup_prop.optional && sub_prop.optional {
2229                                        return false;
2230                                    }
2231                                    let has_named_obj = sup_prop.ty.types.iter().any(|a| {
2232                                        matches!(
2233                                            a,
2234                                            Atomic::TNamedObject { .. }
2235                                                | Atomic::TSelf { .. }
2236                                                | Atomic::TStaticObject { .. }
2237                                                | Atomic::TClosure { .. }
2238                                                | Atomic::TTemplateParam { .. }
2239                                        )
2240                                    });
2241                                    has_named_obj || sub_prop.ty.is_subtype_structural(&sup_prop.ty)
2242                                }
2243                                None => *is_open || sup_prop.optional,
2244                            });
2245                    let has_array_part = parts.iter().any(|part| {
2246                        part.types
2247                            .iter()
2248                            .any(|t| matches!(t, Atomic::TArray { .. }))
2249                    });
2250                    let has_keyed_array_part = parts.iter().any(|part| {
2251                        part.types
2252                            .iter()
2253                            .any(|t| matches!(t, Atomic::TKeyedArray { .. }))
2254                    });
2255                    let keys_allowed_by_some_part = if has_array_part {
2256                        true
2257                    } else if has_keyed_array_part {
2258                        properties.keys().all(|k| {
2259                            parts.iter().any(|part| {
2260                                part.types.iter().any(|t| {
2261                                    if let Atomic::TKeyedArray {
2262                                        properties: part_props,
2263                                        ..
2264                                    } = t
2265                                    {
2266                                        part_props.contains_key(k)
2267                                    } else {
2268                                        false
2269                                    }
2270                                })
2271                            })
2272                        })
2273                    } else {
2274                        true
2275                    };
2276                    let no_undeclared_extras = *sup_open || keys_allowed_by_some_part;
2277                    keys_satisfied && no_undeclared_extras
2278                }
2279                Atomic::TArray { key, value } => properties.iter().all(|(prop_key, prop)| {
2280                    let key_atomic = match prop_key {
2281                        crate::atomic::ArrayKey::String(s) => Atomic::TLiteralString(s.clone()),
2282                        crate::atomic::ArrayKey::Int(n) => Atomic::TLiteralInt(*n),
2283                    };
2284                    if !Type::single(key_atomic).is_subtype_structural(key) {
2285                        return false;
2286                    }
2287                    let has_named_obj = prop.ty.types.iter().any(|a| {
2288                        matches!(
2289                            a,
2290                            Atomic::TNamedObject { .. }
2291                                | Atomic::TSelf { .. }
2292                                | Atomic::TStaticObject { .. }
2293                                | Atomic::TClosure { .. }
2294                                | Atomic::TTemplateParam { .. }
2295                        )
2296                    });
2297                    has_named_obj || prop.ty.is_subtype_structural(value)
2298                }),
2299                Atomic::TNamedObject { .. }
2300                | Atomic::TSelf { .. }
2301                | Atomic::TStaticObject { .. }
2302                | Atomic::TClosure { .. }
2303                | Atomic::TTemplateParam { .. } => true,
2304                _ => false,
2305            })
2306        }),
2307
2308        _ => false,
2309    }
2310}
2311
2312/// Whether each generic type-argument in `sub` is compatible with the
2313/// corresponding argument in `sup`. Arguments are invariant (require structural
2314/// equality) with one exception: an empty array literal (`array{}`) is accepted
2315/// against any array/list argument, so `new Box([])` — inferred as
2316/// `Box<array{}>` — satisfies a declared `Box<list<T>>` for any `T`.
2317fn type_params_compatible(sub: &[Type], sup: &[Type]) -> bool {
2318    if sub.len() != sup.len() {
2319        return false;
2320    }
2321    sub.iter()
2322        .zip(sup.iter())
2323        .all(|(a, b)| a == b || (is_empty_array_literal(a) && is_array_like(b)))
2324}
2325
2326/// True for a non-empty union whose atoms are all empty keyed arrays (`array{}`),
2327/// i.e. the type of an empty array literal `[]`.
2328fn is_empty_array_literal(t: &Type) -> bool {
2329    !t.types.is_empty()
2330        && t.types.iter().all(
2331            |atom| matches!(atom, Atomic::TKeyedArray { properties, .. } if properties.is_empty()),
2332        )
2333}
2334
2335/// True for a non-empty union whose atoms are all array/list types.
2336fn is_array_like(t: &Type) -> bool {
2337    !t.types.is_empty() && t.types.iter().all(|atom| atom.is_array())
2338}
2339
2340// ---------------------------------------------------------------------------
2341// Tests
2342// ---------------------------------------------------------------------------
2343
2344#[cfg(test)]
2345mod tests {
2346    use std::sync::Arc;
2347
2348    use super::*;
2349
2350    fn conditional(
2351        param_name: Option<Name>,
2352        subject: Type,
2353        if_true: Type,
2354        if_false: Type,
2355    ) -> Atomic {
2356        Atomic::TConditional {
2357            data: Box::new(crate::atomic::ConditionalData {
2358                param_name,
2359                subject,
2360                if_true,
2361                if_false,
2362            }),
2363        }
2364    }
2365
2366    #[test]
2367    fn single_is_single() {
2368        let u = Type::single(Atomic::TString);
2369        assert!(u.is_single());
2370        assert!(!u.is_nullable());
2371    }
2372
2373    #[test]
2374    fn nullable_has_null() {
2375        let u = Type::nullable(Atomic::TString);
2376        assert!(u.is_nullable());
2377        assert_eq!(u.types.len(), 2);
2378    }
2379
2380    #[test]
2381    fn add_type_deduplicates() {
2382        let mut u = Type::single(Atomic::TString);
2383        u.add_type(Atomic::TString);
2384        assert_eq!(u.types.len(), 1);
2385    }
2386
2387    #[test]
2388    fn array_key_is_int_string() {
2389        let k = Type::array_key();
2390        assert!(k.is_array_key());
2391        assert_eq!(k.types.len(), 2);
2392    }
2393
2394    #[test]
2395    fn is_array_key_false_for_plain_int() {
2396        assert!(!Type::int().is_array_key());
2397    }
2398
2399    #[test]
2400    fn is_array_key_false_for_mixed() {
2401        assert!(!Type::mixed().is_array_key());
2402    }
2403
2404    #[test]
2405    fn is_array_key_false_for_int_string_null() {
2406        let mut u = Type::array_key();
2407        u.add_type(Atomic::TNull);
2408        assert!(!u.is_array_key());
2409    }
2410
2411    #[test]
2412    fn add_type_literal_subsumed_by_base() {
2413        let mut u = Type::single(Atomic::TInt);
2414        u.add_type(Atomic::TLiteralInt(42));
2415        assert_eq!(u.types.len(), 1);
2416        assert!(matches!(u.types[0], Atomic::TInt));
2417    }
2418
2419    #[test]
2420    fn true_then_false_merges_to_bool() {
2421        let mut u = Type::single(Atomic::TTrue);
2422        u.add_type(Atomic::TFalse);
2423        assert_eq!(u.types.len(), 1);
2424        assert!(matches!(u.types[0], Atomic::TBool));
2425    }
2426
2427    #[test]
2428    fn false_then_true_merges_to_bool() {
2429        let mut u = Type::single(Atomic::TFalse);
2430        u.add_type(Atomic::TTrue);
2431        assert_eq!(u.types.len(), 1);
2432        assert!(matches!(u.types[0], Atomic::TBool));
2433    }
2434
2435    #[test]
2436    fn true_alone_stays_true() {
2437        let u = Type::single(Atomic::TTrue);
2438        assert_eq!(u.types.len(), 1);
2439        assert!(matches!(u.types[0], Atomic::TTrue));
2440    }
2441
2442    #[test]
2443    fn true_false_merge_preserves_other_union_members() {
2444        let mut u = Type::single(Atomic::TTrue);
2445        u.add_type(Atomic::TNull);
2446        u.add_type(Atomic::TFalse);
2447        assert_eq!(u.types.len(), 2);
2448        assert!(u.contains(|t| matches!(t, Atomic::TBool)));
2449        assert!(u.contains(|t| matches!(t, Atomic::TNull)));
2450    }
2451
2452    #[test]
2453    fn add_type_base_widens_literals() {
2454        let mut u = Type::single(Atomic::TLiteralInt(1));
2455        u.add_type(Atomic::TLiteralInt(2));
2456        u.add_type(Atomic::TInt);
2457        assert_eq!(u.types.len(), 1);
2458        assert!(matches!(u.types[0], Atomic::TInt));
2459    }
2460
2461    #[test]
2462    fn mixed_subsumes_everything() {
2463        let mut u = Type::single(Atomic::TString);
2464        u.add_type(Atomic::TMixed);
2465        assert_eq!(u.types.len(), 1);
2466        assert!(u.is_mixed());
2467    }
2468
2469    #[test]
2470    fn remove_null() {
2471        let u = Type::nullable(Atomic::TString);
2472        let narrowed = u.remove_null();
2473        assert!(!narrowed.is_nullable());
2474        assert_eq!(narrowed.types.len(), 1);
2475    }
2476
2477    #[test]
2478    fn narrow_to_truthy_removes_null_false() {
2479        let mut u = Type::empty();
2480        u.add_type(Atomic::TString);
2481        u.add_type(Atomic::TNull);
2482        u.add_type(Atomic::TFalse);
2483        let truthy = u.narrow_to_truthy();
2484        assert!(!truthy.is_nullable());
2485        assert!(!truthy.contains(|t| matches!(t, Atomic::TFalse)));
2486    }
2487
2488    #[test]
2489    fn merge_combines_types() {
2490        let a = Type::single(Atomic::TString);
2491        let b = Type::single(Atomic::TInt);
2492        let merged = Type::merge(&a, &b);
2493        assert_eq!(merged.types.len(), 2);
2494    }
2495
2496    #[test]
2497    fn intersect_keeps_narrower_side_not_self() {
2498        // int ∩ (1|2) must keep the narrower `1|2`, not the wider `int` —
2499        // this is exactly what a `match ($x) { 1, 2 => ... }` arm relies on
2500        // to narrow $x inside its body.
2501        let int_ty = Type::single(Atomic::TInt);
2502        let mut literals = Type::empty();
2503        literals.add_type(Atomic::TLiteralInt(1));
2504        literals.add_type(Atomic::TLiteralInt(2));
2505
2506        let narrowed = int_ty.intersect_with(&literals);
2507        assert_eq!(narrowed.types.len(), 2);
2508        assert!(narrowed.contains(|t| matches!(t, Atomic::TLiteralInt(1))));
2509        assert!(narrowed.contains(|t| matches!(t, Atomic::TLiteralInt(2))));
2510        assert!(!narrowed.contains(|t| matches!(t, Atomic::TInt)));
2511    }
2512
2513    #[test]
2514    fn subtype_literal_int_under_int() {
2515        let sub = Type::single(Atomic::TLiteralInt(5));
2516        let sup = Type::single(Atomic::TInt);
2517        assert!(sub.is_subtype_structural(&sup));
2518    }
2519
2520    #[test]
2521    fn subtype_never_is_bottom() {
2522        let never = Type::never();
2523        let string = Type::single(Atomic::TString);
2524        assert!(never.is_subtype_structural(&string));
2525    }
2526
2527    #[test]
2528    fn subtype_everything_under_mixed() {
2529        let string = Type::single(Atomic::TString);
2530        let mixed = Type::mixed();
2531        assert!(string.is_subtype_structural(&mixed));
2532    }
2533
2534    #[test]
2535    fn subtype_enum_case_under_own_enum() {
2536        let sub = Type::single(Atomic::TLiteralEnumCase {
2537            enum_fqcn: Name::new("RoundingMode"),
2538            case_name: Name::new("Unnecessary"),
2539        });
2540        let sup = Type::single(Atomic::TNamedObject {
2541            fqcn: Name::new("RoundingMode"),
2542            type_params: empty_type_params(),
2543        });
2544        assert!(sub.is_subtype_structural(&sup));
2545    }
2546
2547    #[test]
2548    fn enum_case_not_subtype_of_unrelated_enum() {
2549        let sub = Type::single(Atomic::TLiteralEnumCase {
2550            enum_fqcn: Name::new("RoundingMode"),
2551            case_name: Name::new("Unnecessary"),
2552        });
2553        let sup = Type::single(Atomic::TNamedObject {
2554            fqcn: Name::new("Suit"),
2555            type_params: empty_type_params(),
2556        });
2557        assert!(!sub.is_subtype_structural(&sup));
2558    }
2559
2560    #[test]
2561    fn subtype_enum_case_under_bare_object() {
2562        let sub = Type::single(Atomic::TLiteralEnumCase {
2563            enum_fqcn: Name::new("RoundingMode"),
2564            case_name: Name::new("Unnecessary"),
2565        });
2566        let sup = Type::single(Atomic::TObject);
2567        assert!(sub.is_subtype_structural(&sup));
2568    }
2569
2570    #[test]
2571    fn template_substitution() {
2572        let mut bindings = FxHashMap::default();
2573        bindings.insert(Name::new("T"), Type::single(Atomic::TString));
2574
2575        let tmpl = Type::single(Atomic::TTemplateParam {
2576            name: Name::new("T"),
2577            as_type: Box::new(Type::mixed()),
2578            defining_entity: Name::new("MyClass"),
2579        });
2580
2581        let resolved = tmpl.substitute_templates(&bindings);
2582        assert_eq!(resolved.types.len(), 1);
2583        assert!(matches!(resolved.types[0], Atomic::TString));
2584    }
2585
2586    #[test]
2587    fn intersection_is_object() {
2588        let parts = vec![
2589            Type::single(Atomic::TNamedObject {
2590                fqcn: Name::new("Iterator"),
2591                type_params: empty_type_params(),
2592            }),
2593            Type::single(Atomic::TNamedObject {
2594                fqcn: Name::new("Countable"),
2595                type_params: empty_type_params(),
2596            }),
2597        ];
2598        let atomic = Atomic::TIntersection {
2599            parts: vec_to_type_params(parts),
2600        };
2601        assert!(atomic.is_object());
2602        assert!(!atomic.can_be_falsy());
2603        assert!(atomic.can_be_truthy());
2604    }
2605
2606    #[test]
2607    fn intersection_display_two_parts() {
2608        let parts = vec![
2609            Type::single(Atomic::TNamedObject {
2610                fqcn: Name::new("Iterator"),
2611                type_params: empty_type_params(),
2612            }),
2613            Type::single(Atomic::TNamedObject {
2614                fqcn: Name::new("Countable"),
2615                type_params: empty_type_params(),
2616            }),
2617        ];
2618        let u = Type::single(Atomic::TIntersection {
2619            parts: vec_to_type_params(parts),
2620        });
2621        assert_eq!(format!("{u}"), "Iterator&Countable");
2622    }
2623
2624    #[test]
2625    fn intersection_display_three_parts() {
2626        let parts = vec![
2627            Type::single(Atomic::TNamedObject {
2628                fqcn: Name::new("A"),
2629                type_params: empty_type_params(),
2630            }),
2631            Type::single(Atomic::TNamedObject {
2632                fqcn: Name::new("B"),
2633                type_params: empty_type_params(),
2634            }),
2635            Type::single(Atomic::TNamedObject {
2636                fqcn: Name::new("C"),
2637                type_params: empty_type_params(),
2638            }),
2639        ];
2640        let u = Type::single(Atomic::TIntersection {
2641            parts: vec_to_type_params(parts),
2642        });
2643        assert_eq!(format!("{u}"), "A&B&C");
2644    }
2645
2646    #[test]
2647    fn intersection_in_nullable_union_display() {
2648        let intersection = Atomic::TIntersection {
2649            parts: vec_to_type_params(vec![
2650                Type::single(Atomic::TNamedObject {
2651                    fqcn: Name::new("Iterator"),
2652                    type_params: empty_type_params(),
2653                }),
2654                Type::single(Atomic::TNamedObject {
2655                    fqcn: Name::new("Countable"),
2656                    type_params: empty_type_params(),
2657                }),
2658            ]),
2659        };
2660        let mut u = Type::single(intersection);
2661        u.add_type(Atomic::TNull);
2662        assert!(u.is_nullable());
2663        assert!(u.contains(|t| matches!(t, Atomic::TIntersection { .. })));
2664    }
2665
2666    // --- substitute_templates coverage for previously-missing arms ----------
2667
2668    fn t_param(name: &str) -> Type {
2669        Type::single(Atomic::TTemplateParam {
2670            name: Name::new(name),
2671            as_type: Box::new(Type::mixed()),
2672            defining_entity: Name::new("Fn"),
2673        })
2674    }
2675
2676    fn bindings_t_string() -> FxHashMap<Name, Type> {
2677        let mut b = FxHashMap::default();
2678        b.insert(Name::new("T"), Type::single(Atomic::TString));
2679        b
2680    }
2681
2682    #[test]
2683    fn substitute_non_empty_array_key_and_value() {
2684        let ty = Type::single(Atomic::TNonEmptyArray {
2685            key: Box::new(t_param("T")),
2686            value: Box::new(t_param("T")),
2687        });
2688        let result = ty.substitute_templates(&bindings_t_string());
2689        assert_eq!(result.types.len(), 1);
2690        let Atomic::TNonEmptyArray { key, value } = &result.types[0] else {
2691            panic!("expected TNonEmptyArray");
2692        };
2693        assert!(matches!(key.types[0], Atomic::TString));
2694        assert!(matches!(value.types[0], Atomic::TString));
2695    }
2696
2697    #[test]
2698    fn substitute_non_empty_list_value() {
2699        let ty = Type::single(Atomic::TNonEmptyList {
2700            value: Box::new(t_param("T")),
2701        });
2702        let result = ty.substitute_templates(&bindings_t_string());
2703        let Atomic::TNonEmptyList { value } = &result.types[0] else {
2704            panic!("expected TNonEmptyList");
2705        };
2706        assert!(matches!(value.types[0], Atomic::TString));
2707    }
2708
2709    #[test]
2710    fn substitute_keyed_array_property_types() {
2711        use crate::atomic::{ArrayKey, KeyedProperty};
2712        use indexmap::IndexMap;
2713        let mut props = IndexMap::new();
2714        props.insert(
2715            ArrayKey::String(Arc::from("name")),
2716            KeyedProperty {
2717                ty: t_param("T"),
2718                optional: false,
2719            },
2720        );
2721        props.insert(
2722            ArrayKey::String(Arc::from("tag")),
2723            KeyedProperty {
2724                ty: t_param("T"),
2725                optional: true,
2726            },
2727        );
2728        let ty = Type::single(Atomic::TKeyedArray {
2729            properties: Box::new(props),
2730            is_open: true,
2731            is_list: false,
2732        });
2733        let result = ty.substitute_templates(&bindings_t_string());
2734        let Atomic::TKeyedArray {
2735            properties,
2736            is_open,
2737            is_list,
2738        } = &result.types[0]
2739        else {
2740            panic!("expected TKeyedArray");
2741        };
2742        assert!(is_open);
2743        assert!(!is_list);
2744        assert!(matches!(
2745            properties[&ArrayKey::String(Arc::from("name"))].ty.types[0],
2746            Atomic::TString
2747        ));
2748        assert!(properties[&ArrayKey::String(Arc::from("tag"))].optional);
2749        assert!(matches!(
2750            properties[&ArrayKey::String(Arc::from("tag"))].ty.types[0],
2751            Atomic::TString
2752        ));
2753    }
2754
2755    #[test]
2756    fn substitute_callable_params_and_return() {
2757        use crate::atomic::FnParam;
2758        let ty = Type::single(Atomic::TCallable {
2759            params: Some(Box::new([FnParam {
2760                name: Name::new("x"),
2761                ty: Some(crate::compact::SimpleType::from_union(t_param("T"))),
2762                out_ty: None,
2763                default: None,
2764                is_variadic: false,
2765                is_byref: false,
2766                is_optional: false,
2767            }])),
2768            return_type: Some(Box::new(t_param("T"))),
2769        });
2770        let result = ty.substitute_templates(&bindings_t_string());
2771        let Atomic::TCallable {
2772            params,
2773            return_type,
2774        } = &result.types[0]
2775        else {
2776            panic!("expected TCallable");
2777        };
2778        let param_ty = params.as_ref().unwrap()[0].ty.as_ref().unwrap();
2779        let param_union = param_ty.to_union();
2780        assert!(matches!(param_union.types[0], Atomic::TString));
2781        let ret = return_type.as_ref().unwrap();
2782        assert!(matches!(ret.types[0], Atomic::TString));
2783    }
2784
2785    #[test]
2786    fn substitute_callable_bare_no_panic() {
2787        // callable with no params/return — must not panic and must pass through unchanged
2788        let ty = Type::single(Atomic::TCallable {
2789            params: None,
2790            return_type: None,
2791        });
2792        let result = ty.substitute_templates(&bindings_t_string());
2793        assert!(matches!(
2794            result.types[0],
2795            Atomic::TCallable {
2796                params: None,
2797                return_type: None
2798            }
2799        ));
2800    }
2801
2802    #[test]
2803    fn substitute_closure_params_return_and_this() {
2804        use crate::atomic::FnParam;
2805        let ty = Type::single(Atomic::TClosure {
2806            data: Box::new(crate::atomic::ClosureData {
2807                params: Box::new([FnParam {
2808                    name: Name::new("a"),
2809                    ty: Some(crate::compact::SimpleType::from_union(t_param("T"))),
2810                    out_ty: None,
2811                    default: Some(crate::compact::SimpleType::from_union(t_param("T"))),
2812                    is_variadic: true,
2813                    is_byref: true,
2814                    is_optional: true,
2815                }]),
2816                return_type: t_param("T"),
2817                this_type: Some(t_param("T")),
2818            }),
2819        });
2820        let result = ty.substitute_templates(&bindings_t_string());
2821        let Atomic::TClosure { data } = &result.types[0] else {
2822            panic!("expected TClosure");
2823        };
2824        let (params, return_type, this_type) = (&data.params, &data.return_type, &data.this_type);
2825        let p = &params[0];
2826        let ty_union = p.ty.as_ref().unwrap().to_union();
2827        let default_union = p.default.as_ref().unwrap().to_union();
2828        assert!(matches!(ty_union.types[0], Atomic::TString));
2829        assert!(matches!(default_union.types[0], Atomic::TString));
2830        // flags preserved
2831        assert!(p.is_variadic);
2832        assert!(p.is_byref);
2833        assert!(p.is_optional);
2834        assert!(matches!(return_type.types[0], Atomic::TString));
2835        assert!(matches!(
2836            this_type.as_ref().unwrap().types[0],
2837            Atomic::TString
2838        ));
2839    }
2840
2841    #[test]
2842    fn substitute_conditional_all_branches() {
2843        let ty = Type::single(conditional(
2844            None,
2845            t_param("T"),
2846            t_param("T"),
2847            Type::single(Atomic::TInt),
2848        ));
2849        let result = ty.substitute_templates(&bindings_t_string());
2850        let Atomic::TConditional { data } = &result.types[0] else {
2851            panic!("expected TConditional");
2852        };
2853        let (subject, if_true, if_false) = (&data.subject, &data.if_true, &data.if_false);
2854        assert!(matches!(subject.types[0], Atomic::TString));
2855        assert!(matches!(if_true.types[0], Atomic::TString));
2856        assert!(matches!(if_false.types[0], Atomic::TInt));
2857    }
2858
2859    #[test]
2860    fn resolve_conditional_is_null_non_null_arg() {
2861        let ty = Type::single(conditional(
2862            Some(Name::new("x")),
2863            Type::single(Atomic::TNull),
2864            Type::single(Atomic::TInt),
2865            Type::single(Atomic::TString),
2866        ));
2867        let result = ty.resolve_conditional_returns(|name| {
2868            if name == "x" {
2869                Some(Type::single(Atomic::TString)) // definitely not null
2870            } else {
2871                None
2872            }
2873        });
2874        assert!(result.types.len() == 1);
2875        assert!(matches!(result.types[0], Atomic::TString));
2876    }
2877
2878    #[test]
2879    fn resolve_conditional_is_null_null_arg() {
2880        let ty = Type::single(conditional(
2881            Some(Name::new("x")),
2882            Type::single(Atomic::TNull),
2883            Type::single(Atomic::TInt),
2884            Type::single(Atomic::TString),
2885        ));
2886        let result = ty.resolve_conditional_returns(|name| {
2887            if name == "x" {
2888                Some(Type::single(Atomic::TNull)) // definitely null
2889            } else {
2890                None
2891            }
2892        });
2893        assert!(result.types.len() == 1);
2894        assert!(matches!(result.types[0], Atomic::TInt));
2895    }
2896
2897    #[test]
2898    fn resolve_conditional_is_null_nullable_arg_widens_to_branch_union() {
2899        let mut nullable_str = Type::single(Atomic::TString);
2900        nullable_str.add_type(Atomic::TNull);
2901        let ty = Type::single(conditional(
2902            Some(Name::new("x")),
2903            Type::single(Atomic::TNull),
2904            Type::single(Atomic::TInt),
2905            Type::single(Atomic::TString),
2906        ));
2907        let result = ty.resolve_conditional_returns(|name| {
2908            if name == "x" {
2909                Some(nullable_str.clone())
2910            } else {
2911                None
2912            }
2913        });
2914        // uncertain discriminator → widen to if_true | if_false
2915        assert_eq!(result.types.len(), 2);
2916        assert!(result.types.iter().any(|t| matches!(t, Atomic::TInt)));
2917        assert!(result.types.iter().any(|t| matches!(t, Atomic::TString)));
2918    }
2919
2920    #[test]
2921    fn resolve_conditional_nested_widens_inner_branch() {
2922        // ($x is null ? int : ($x is string ? string : float))
2923        // When $x is unknown, should widen to int|string|float (no TConditional remaining).
2924        let inner = Type::single(conditional(
2925            Some(Name::new("x")),
2926            Type::single(Atomic::TString),
2927            Type::single(Atomic::TString),
2928            Type::single(Atomic::TFloat),
2929        ));
2930        let ty = Type::single(conditional(
2931            Some(Name::new("x")),
2932            Type::single(Atomic::TNull),
2933            Type::single(Atomic::TInt),
2934            inner,
2935        ));
2936        // unknown arg → widen both outer branches, inner conditional must also be widened
2937        let result = ty.resolve_conditional_returns(|_| None);
2938        assert!(
2939            result
2940                .types
2941                .iter()
2942                .all(|t| !matches!(t, Atomic::TConditional { .. })),
2943            "no TConditional should survive: {:?}",
2944            result.types
2945        );
2946        assert!(result.types.iter().any(|t| matches!(t, Atomic::TInt)));
2947        assert!(result.types.iter().any(|t| matches!(t, Atomic::TString)));
2948        assert!(result.types.iter().any(|t| matches!(t, Atomic::TFloat)));
2949    }
2950
2951    #[test]
2952    fn resolve_conditional_nested_resolves_inner_branch() {
2953        // ($x is null ? int : ($x is string ? string : float))
2954        // When $x is definitely not null but unknown string-or-not → resolves outer to inner,
2955        // then inner must also be resolved.
2956        let inner = Type::single(conditional(
2957            Some(Name::new("x")),
2958            Type::single(Atomic::TString),
2959            Type::single(Atomic::TString),
2960            Type::single(Atomic::TFloat),
2961        ));
2962        let ty = Type::single(conditional(
2963            Some(Name::new("x")),
2964            Type::single(Atomic::TNull),
2965            Type::single(Atomic::TInt),
2966            inner,
2967        ));
2968        // $x = string → outer: not null → if_false (inner); inner: is string → if_true = string
2969        let result = ty.resolve_conditional_returns(|name| {
2970            if name == "x" {
2971                Some(Type::single(Atomic::TString))
2972            } else {
2973                None
2974            }
2975        });
2976        assert!(
2977            result
2978                .types
2979                .iter()
2980                .all(|t| !matches!(t, Atomic::TConditional { .. })),
2981            "no TConditional should survive: {:?}",
2982            result.types
2983        );
2984        assert_eq!(result.types.len(), 1);
2985        assert!(matches!(result.types[0], Atomic::TString));
2986    }
2987
2988    #[test]
2989    fn resolve_conditional_true_subject_bool_arg_widens() {
2990        // A `bool` argument carries the value classes `{true, false}`:
2991        // `false` is not contained in the `true` class, and `true`
2992        // overlaps it, so neither branch is ruled out.
2993        let ty = Type::single(conditional(
2994            Some(Name::new("x")),
2995            Type::single(Atomic::TTrue),
2996            Type::single(Atomic::TInt),
2997            Type::single(Atomic::TString),
2998        ));
2999        let result = ty.resolve_conditional_returns(|name| {
3000            if name == "x" {
3001                Some(Type::single(Atomic::TBool))
3002            } else {
3003                None
3004            }
3005        });
3006        assert_eq!(result.types.len(), 2);
3007        assert!(result.contains(|t| matches!(t, Atomic::TInt)));
3008        assert!(result.contains(|t| matches!(t, Atomic::TString)));
3009    }
3010
3011    #[test]
3012    fn resolve_conditional_true_subject_mixed_arg_widens() {
3013        // `mixed` maps to the `Top` value class, which overlaps every
3014        // other class, so it can never rule a branch out.
3015        let ty = Type::single(conditional(
3016            Some(Name::new("x")),
3017            Type::single(Atomic::TTrue),
3018            Type::single(Atomic::TInt),
3019            Type::single(Atomic::TString),
3020        ));
3021        let result = ty.resolve_conditional_returns(|name| {
3022            if name == "x" {
3023                Some(Type::mixed())
3024            } else {
3025                None
3026            }
3027        });
3028        assert_eq!(result.types.len(), 2);
3029        assert!(result.contains(|t| matches!(t, Atomic::TInt)));
3030        assert!(result.contains(|t| matches!(t, Atomic::TString)));
3031    }
3032
3033    #[test]
3034    fn resolve_conditional_true_subject_literal_args() {
3035        // Literals decide by value class: `false` is contained in
3036        // `{false}` and disjoint from `{true}`, and vice versa.
3037        let ty = Type::single(conditional(
3038            Some(Name::new("x")),
3039            Type::single(Atomic::TTrue),
3040            Type::single(Atomic::TInt),
3041            Type::single(Atomic::TString),
3042        ));
3043        let false_arg = ty.clone().resolve_conditional_returns(|name| {
3044            if name == "x" {
3045                Some(Type::single(Atomic::TFalse))
3046            } else {
3047                None
3048            }
3049        });
3050        assert_eq!(false_arg.types.len(), 1);
3051        assert!(matches!(false_arg.types[0], Atomic::TString));
3052
3053        let true_arg = ty.resolve_conditional_returns(|name| {
3054            if name == "x" {
3055                Some(Type::single(Atomic::TTrue))
3056            } else {
3057                None
3058            }
3059        });
3060        assert_eq!(true_arg.types.len(), 1);
3061        assert!(matches!(true_arg.types[0], Atomic::TInt));
3062    }
3063
3064    #[test]
3065    fn resolve_conditional_bool_subject_scalar_arg_widens() {
3066        // `scalar` carries all five scalar classes: `true`/`false`
3067        // overlap the `bool` subject, but `int`/`float`/`string` are
3068        // not contained in `{true, false}`, so neither branch commits.
3069        let ty = Type::single(conditional(
3070            Some(Name::new("x")),
3071            Type::single(Atomic::TBool),
3072            Type::single(Atomic::TInt),
3073            Type::single(Atomic::TString),
3074        ));
3075        let result = ty.resolve_conditional_returns(|name| {
3076            if name == "x" {
3077                Some(Type::single(Atomic::TScalar))
3078            } else {
3079                None
3080            }
3081        });
3082        assert_eq!(result.types.len(), 2);
3083        assert!(result.contains(|t| matches!(t, Atomic::TInt)));
3084        assert!(result.contains(|t| matches!(t, Atomic::TString)));
3085    }
3086
3087    #[test]
3088    fn resolve_conditional_string_subject_bool_arg_false_branch() {
3089        // Disjoint value classes still commit to the false branch: a
3090        // `bool` argument carries `{true, false}`, none of which is a
3091        // string, and strings are not bools.
3092        let ty = Type::single(conditional(
3093            Some(Name::new("x")),
3094            Type::single(Atomic::TString),
3095            Type::single(Atomic::TInt),
3096            Type::single(Atomic::TBool),
3097        ));
3098        let result = ty.resolve_conditional_returns(|name| {
3099            if name == "x" {
3100                Some(Type::single(Atomic::TBool))
3101            } else {
3102                None
3103            }
3104        });
3105        assert_eq!(result.types.len(), 1);
3106        assert!(matches!(result.types[0], Atomic::TBool));
3107    }
3108
3109    #[test]
3110    fn resolve_conditional_list_subject_bare_array_arg_widens() {
3111        // A bare `array` is the supertype of `list`, so it may or may
3112        // not be a list: both branches stay live.
3113        let ty = Type::single(conditional(
3114            Some(Name::new("x")),
3115            Type::single(Atomic::TList {
3116                value: Box::new(Type::mixed()),
3117            }),
3118            Type::single(Atomic::TInt),
3119            Type::single(Atomic::TString),
3120        ));
3121        let result = ty.resolve_conditional_returns(|name| {
3122            if name == "x" {
3123                Some(Type::single(Atomic::TArray {
3124                    key: Box::new(Type::mixed()),
3125                    value: Box::new(Type::mixed()),
3126                }))
3127            } else {
3128                None
3129            }
3130        });
3131        assert_eq!(result.types.len(), 2);
3132        assert!(result.contains(|t| matches!(t, Atomic::TInt)));
3133        assert!(result.contains(|t| matches!(t, Atomic::TString)));
3134    }
3135
3136    #[test]
3137    fn resolve_conditional_float_subject_int_literal_false_branch() {
3138        // A `float` subject is the `Float` class; an int literal is
3139        // `LitInt`, which is not a float, and floats are not ints.
3140        let ty = resolve_conditional_branch(
3141            &Atomic::TFloat,
3142            &Type::single(Atomic::TLiteralInt(42)),
3143            &Type::single(Atomic::TInt),
3144            &Type::single(Atomic::TString),
3145        );
3146        assert!(matches!(
3147            ty.as_ref(),
3148            Some(t) if t.types.len() == 1 && matches!(t.types[0], Atomic::TString)
3149        ));
3150    }
3151
3152    #[test]
3153    fn resolve_conditional_int_subject_float_literal_false_branch() {
3154        let ty = resolve_conditional_branch(
3155            &Atomic::TInt,
3156            &Type::single(Atomic::TLiteralFloat(1, 0)),
3157            &Type::single(Atomic::TInt),
3158            &Type::single(Atomic::TString),
3159        );
3160        assert!(matches!(
3161            ty.as_ref(),
3162            Some(t) if t.types.len() == 1 && matches!(t.types[0], Atomic::TString)
3163        ));
3164    }
3165
3166    #[test]
3167    fn resolve_conditional_float_subject_float_literal_then_branch() {
3168        let ty = resolve_conditional_branch(
3169            &Atomic::TFloat,
3170            &Type::single(Atomic::TLiteralFloat(1, 5)),
3171            &Type::single(Atomic::TInt),
3172            &Type::single(Atomic::TString),
3173        );
3174        assert!(matches!(
3175            ty.as_ref(),
3176            Some(t) if t.types.len() == 1 && matches!(t.types[0], Atomic::TInt)
3177        ));
3178    }
3179
3180    #[test]
3181    fn resolve_conditional_int_subject_int_literal_then_branch() {
3182        let ty = resolve_conditional_branch(
3183            &Atomic::TInt,
3184            &Type::single(Atomic::TLiteralInt(7)),
3185            &Type::single(Atomic::TInt),
3186            &Type::single(Atomic::TString),
3187        );
3188        assert!(matches!(
3189            ty.as_ref(),
3190            Some(t) if t.types.len() == 1 && matches!(t.types[0], Atomic::TInt)
3191        ));
3192    }
3193
3194    #[test]
3195    fn resolve_conditional_int_subject_float_arg_false_branch() {
3196        // A bare `float` argument is never an `int`: disjoint value
3197        // classes commit to the false branch.
3198        let ty = resolve_conditional_branch(
3199            &Atomic::TInt,
3200            &Type::single(Atomic::TFloat),
3201            &Type::single(Atomic::TInt),
3202            &Type::single(Atomic::TString),
3203        );
3204        assert!(matches!(
3205            ty.as_ref(),
3206            Some(t) if t.types.len() == 1 && matches!(t.types[0], Atomic::TString)
3207        ));
3208    }
3209
3210    #[test]
3211    fn resolve_conditional_array_subject_string_arg_false_branch() {
3212        let ty = resolve_conditional_branch(
3213            &Atomic::TArray {
3214                key: Box::new(Type::mixed()),
3215                value: Box::new(Type::mixed()),
3216            },
3217            &Type::single(Atomic::TString),
3218            &Type::single(Atomic::TInt),
3219            &Type::single(Atomic::TString),
3220        );
3221        assert!(matches!(
3222            ty.as_ref(),
3223            Some(t) if t.types.len() == 1 && matches!(t.types[0], Atomic::TString)
3224        ));
3225    }
3226
3227    #[test]
3228    fn resolve_conditional_array_subject_bool_arg_false_branch() {
3229        let ty = resolve_conditional_branch(
3230            &Atomic::TArray {
3231                key: Box::new(Type::mixed()),
3232                value: Box::new(Type::mixed()),
3233            },
3234            &Type::single(Atomic::TBool),
3235            &Type::single(Atomic::TInt),
3236            &Type::single(Atomic::TString),
3237        );
3238        assert!(matches!(
3239            ty.as_ref(),
3240            Some(t) if t.types.len() == 1 && matches!(t.types[0], Atomic::TString)
3241        ));
3242    }
3243
3244    #[test]
3245    fn resolve_conditional_array_subject_mixed_arg_widens() {
3246        // A `mixed` argument is `Top`: it overlaps `array`, so the then
3247        // branch is never ruled out, and it is not contained in `array`,
3248        // so the false branch is never ruled out either.
3249        let ty = resolve_conditional_branch(
3250            &Atomic::TArray {
3251                key: Box::new(Type::mixed()),
3252                value: Box::new(Type::mixed()),
3253            },
3254            &Type::mixed(),
3255            &Type::single(Atomic::TInt),
3256            &Type::single(Atomic::TString),
3257        );
3258        assert!(ty.is_none());
3259    }
3260
3261    #[test]
3262    fn resolve_conditional_array_subject_list_arg_then_branch() {
3263        // A `list` argument is an `array` (`List` is contained in
3264        // `Array`), so every argument class is in the subject's class.
3265        let ty = resolve_conditional_branch(
3266            &Atomic::TArray {
3267                key: Box::new(Type::mixed()),
3268                value: Box::new(Type::mixed()),
3269            },
3270            &Type::single(Atomic::TList {
3271                value: Box::new(Type::mixed()),
3272            }),
3273            &Type::single(Atomic::TInt),
3274            &Type::single(Atomic::TString),
3275        );
3276        assert!(matches!(
3277            ty.as_ref(),
3278            Some(t) if t.types.len() == 1 && matches!(t.types[0], Atomic::TInt)
3279        ));
3280    }
3281
3282    #[test]
3283    fn resolve_conditional_list_subject_keyed_list_arg_then_branch() {
3284        // A keyed array with `is_list` is a list at runtime.
3285        let ty = resolve_conditional_branch(
3286            &Atomic::TList {
3287                value: Box::new(Type::mixed()),
3288            },
3289            &Type::single(Atomic::TKeyedArray {
3290                properties: Box::default(),
3291                is_open: false,
3292                is_list: true,
3293            }),
3294            &Type::single(Atomic::TInt),
3295            &Type::single(Atomic::TString),
3296        );
3297        assert!(matches!(
3298            ty.as_ref(),
3299            Some(t) if t.types.len() == 1 && matches!(t.types[0], Atomic::TInt)
3300        ));
3301    }
3302
3303    #[test]
3304    fn resolve_conditional_list_subject_list_string_union_widens() {
3305        // A `list|string` argument carries `{List, String}`: `List`
3306        // overlaps the `list` subject, `String` does not, so neither
3307        // branch is ruled out.
3308        let ty = resolve_conditional_branch(
3309            &Atomic::TList {
3310                value: Box::new(Type::mixed()),
3311            },
3312            &Type::from_vec(vec![
3313                Atomic::TList {
3314                    value: Box::new(Type::mixed()),
3315                },
3316                Atomic::TString,
3317            ]),
3318            &Type::single(Atomic::TInt),
3319            &Type::single(Atomic::TString),
3320        );
3321        assert!(ty.is_none());
3322    }
3323
3324    #[test]
3325    fn resolve_conditional_numeric_subject_widens() {
3326        // `numeric` is a refined subject (it admits numeric strings such
3327        // as `"123"`), so the value-class lattice cannot reduce it: the
3328        // branch stays undecidable even for a literal string argument.
3329        let ty = resolve_conditional_branch(
3330            &Atomic::TNumeric,
3331            &Type::single(Atomic::TLiteralString("123".into())),
3332            &Type::single(Atomic::TInt),
3333            &Type::single(Atomic::TString),
3334        );
3335        assert!(ty.is_none());
3336    }
3337
3338    #[test]
3339    fn resolve_conditional_non_empty_string_subject_widens() {
3340        // A `non-empty-string` subject is refined (`""` is a string but
3341        // not non-empty), so even a bare string argument is undecidable.
3342        let ty = resolve_conditional_branch(
3343            &Atomic::TNonEmptyString,
3344            &Type::single(Atomic::TString),
3345            &Type::single(Atomic::TInt),
3346            &Type::single(Atomic::TString),
3347        );
3348        assert!(ty.is_none());
3349    }
3350
3351    #[test]
3352    fn resolve_conditional_template_arg_widens() {
3353        // A template parameter has no value classes at all (opaque), so
3354        // it is undecidable against any subject.
3355        let ty = resolve_conditional_branch(
3356            &Atomic::TString,
3357            &t_param("T"),
3358            &Type::single(Atomic::TInt),
3359            &Type::single(Atomic::TString),
3360        );
3361        assert!(ty.is_none());
3362    }
3363
3364    #[test]
3365    fn resolve_conditional_mixed_subject_bool_arg_then_branch() {
3366        // `mixed` is a decidable subject: every value class is contained
3367        // in `Top`, so a bool argument is always `mixed`.
3368        let ty = resolve_conditional_branch(
3369            &Atomic::TMixed,
3370            &Type::single(Atomic::TBool),
3371            &Type::single(Atomic::TInt),
3372            &Type::single(Atomic::TString),
3373        );
3374        assert!(matches!(
3375            ty.as_ref(),
3376            Some(t) if t.types.len() == 1 && matches!(t.types[0], Atomic::TInt)
3377        ));
3378    }
3379
3380    #[test]
3381    fn resolve_conditional_scalar_subject_null_arg_false_branch() {
3382        // `null` is not a scalar value class: the argument is disjoint
3383        // from the subject, so the false branch is taken.
3384        let ty = resolve_conditional_branch(
3385            &Atomic::TScalar,
3386            &Type::single(Atomic::TNull),
3387            &Type::single(Atomic::TInt),
3388            &Type::single(Atomic::TString),
3389        );
3390        assert!(matches!(
3391            ty.as_ref(),
3392            Some(t) if t.types.len() == 1 && matches!(t.types[0], Atomic::TString)
3393        ));
3394    }
3395
3396    #[test]
3397    fn resolve_conditional_object_subject_named_arg_then_branch() {
3398        // A named class instance is an object at runtime.
3399        let ty = resolve_conditional_branch(
3400            &Atomic::TObject,
3401            &Type::single(Atomic::TNamedObject {
3402                fqcn: Name::new("Foo"),
3403                type_params: empty_type_params(),
3404            }),
3405            &Type::single(Atomic::TInt),
3406            &Type::single(Atomic::TString),
3407        );
3408        assert!(matches!(
3409            ty.as_ref(),
3410            Some(t) if t.types.len() == 1 && matches!(t.types[0], Atomic::TInt)
3411        ));
3412    }
3413
3414    #[test]
3415    fn resolve_conditional_named_subject_other_class_widens() {
3416        // A named-object subject is refined (one specific class), so an
3417        // instance of another class is undecidable even though both are
3418        // objects.
3419        let ty = resolve_conditional_branch(
3420            &Atomic::TNamedObject {
3421                fqcn: Name::new("Foo"),
3422                type_params: empty_type_params(),
3423            },
3424            &Type::single(Atomic::TNamedObject {
3425                fqcn: Name::new("Bar"),
3426                type_params: empty_type_params(),
3427            }),
3428            &Type::single(Atomic::TInt),
3429            &Type::single(Atomic::TString),
3430        );
3431        assert!(ty.is_none());
3432    }
3433
3434    #[test]
3435    fn resolve_conditional_enum_case_subject_widens() {
3436        // An enum-case subject is refined: the value-class lattice cannot
3437        // reduce a specific enum case, so an int argument is undecidable.
3438        let ty = resolve_conditional_branch(
3439            &Atomic::TLiteralEnumCase {
3440                enum_fqcn: Name::new("RoundingMode"),
3441                case_name: Name::new("Unnecessary"),
3442            },
3443            &Type::single(Atomic::TInt),
3444            &Type::single(Atomic::TInt),
3445            &Type::single(Atomic::TString),
3446        );
3447        assert!(ty.is_none());
3448    }
3449
3450    #[test]
3451    fn resolve_conditional_null_subject_bool_arg_false_branch() {
3452        // `null` and bool are disjoint value classes.
3453        let ty = resolve_conditional_branch(
3454            &Atomic::TNull,
3455            &Type::single(Atomic::TBool),
3456            &Type::single(Atomic::TInt),
3457            &Type::single(Atomic::TString),
3458        );
3459        assert!(matches!(
3460            ty.as_ref(),
3461            Some(t) if t.types.len() == 1 && matches!(t.types[0], Atomic::TString)
3462        ));
3463    }
3464
3465    #[test]
3466    fn resolve_conditional_bool_subject_true_arg_then_branch() {
3467        // `true` is contained in `bool`'s `{true, false}` classes, so
3468        // the then branch is taken.
3469        let ty = resolve_conditional_branch(
3470            &Atomic::TBool,
3471            &Type::single(Atomic::TTrue),
3472            &Type::single(Atomic::TInt),
3473            &Type::single(Atomic::TString),
3474        );
3475        assert!(matches!(
3476            ty.as_ref(),
3477            Some(t) if t.types.len() == 1 && matches!(t.types[0], Atomic::TInt)
3478        ));
3479    }
3480
3481    #[test]
3482    fn substitute_intersection_parts() {
3483        let ty = Type::single(Atomic::TIntersection {
3484            parts: vec_to_type_params(vec![
3485                Type::single(Atomic::TNamedObject {
3486                    fqcn: Name::new("Countable"),
3487                    type_params: empty_type_params(),
3488                }),
3489                t_param("T"),
3490            ]),
3491        });
3492        let result = ty.substitute_templates(&bindings_t_string());
3493        let Atomic::TIntersection { parts } = &result.types[0] else {
3494            panic!("expected TIntersection");
3495        };
3496        assert_eq!(parts.len(), 2);
3497        assert!(matches!(parts[0].types[0], Atomic::TNamedObject { .. }));
3498        assert!(matches!(parts[1].types[0], Atomic::TString));
3499    }
3500
3501    #[test]
3502    fn substitute_no_template_params_identity() {
3503        let ty = Type::single(Atomic::TInt);
3504        let result = ty.substitute_templates(&bindings_t_string());
3505        assert!(matches!(result.types[0], Atomic::TInt));
3506    }
3507}