Version 1.1.0

Minor version adding more json builtins and an improved built-in system.

This change adds some json builtins and also completely refactors the built-in
system to make it more efficient. It also adds some quality of life improvements
to the C++ API. The C API remains stable, but the C++ API exposes additional
methods to make handling outputs of queries a bit easier.

**New Features**
- `json.filter`, `json.patch`, and `json.remove` are now available
- All built-ins are now accounted for in the built-in system, and those which
  are not supported are explicitly marked as such.
- There is now an `Output` class, which is returned from the new `query_output`
  method on `Interpreter`. It provides methods which are similar to those available
  in the C API for inspecting the output of a query.
- There are now `try_get_double`, `try_get_string`, and `try_get_bool` methods
  which will attempt to get raw C++ types from Node objects.
- The `whitelist` and `blacklist` methods in `BuiltInsDef` provide fine-grained
  control over which built-ins are allowed to be loaded.
- The `stmt_limit` method on `Interpreter` provides a time-out mechanism (defined
  as number of statements which the VM is allowed to execute)

**Improvements**
- The `Interpreter` object can now be created at almost no cost. A large portion
  of its construction cost was the creation of the `BuiltIns` lookup structure,
  which now is defined statically in-code.
- The test driver can now run all the tests in the OPA test suite and will skip
  those which use a built-in that is not available in the current implementation.
  This means we do not have to cherry-pick tests anymore, and will pick up
  new tests more cleanly.
- New methods for creating scalar nodes have been added (`number`, `boolean`,
  `string`, `null`) and the existing `scalar` methods have been deprecated.

**Breaking Changes**
- The `get_string` method, which previously returned the raw string of the Trieste
  node, now tries to get a string from a `JSONString` node and strips it of its
  quotes (in line with the other `get_*` methods). The previous functionality is
  available via `get_raw_string`.

**Bug Fixes**
- Fuzzer bug with `SomeDecl` in a `NotExpr`
- An issue with built-ins not being written to binary bundles
- A unification bug with variables in comprehensions that had the same name as their module
- `regopy` now performs some additional checks to ensure it is loading the correct
  shared library on all platforms
- Ubuntu 22.04 builds are now working again and the image has been added back to the workflow
- macos/x86_64 image has been added back to the workflow, and shared library builds
  (for the Python and dotnet wrappers)
- Unification bug with masking scopes and variables with comprehensions and every

Signed-off-by: Matthew A Johnson <matjoh@microsoft.com>

Author: matajoh

CHANGELOG

@@ -1,5 +1,55 @@
 # Changelog
 
+## 2025-10-31 - Version 1.1.0
+Minor version adding more json builtins and an improved built-in system.
+
+This change adds some json builtins and also completely refactors the built-in
+system to make it more efficient. It also adds some quality of life improvements
+to the C++ API. The C API remains stable, but the C++ API exposes additional
+methods to make handling outputs of queries a bit easier.
+
+**New Features**
+- `json.filter`, `json.patch`, and `json.remove` are now available
+- All built-ins are now accounted for in the built-in system, and those which
+  are not supported are explicitly marked as such.
+- There is now an `Output` class, which is returned from the new `query_output`
+  method on `Interpreter`. It provides methods which are similar to those available
+  in the C API for inspecting the output of a query.
+- There are now `try_get_double`, `try_get_string`, and `try_get_bool` methods
+  which will attempt to get raw C++ types from Node objects.
+- The `whitelist` and `blacklist` methods in `BuiltInsDef` provide fine-grained
+  control over which built-ins are allowed to be loaded.
+- The `stmt_limit` method on `Interpreter` provides a time-out mechanism (defined
+  as number of statements which the VM is allowed to execute)
+
+**Improvements**
+- The `Interpreter` object can now be created at almost no cost. A large portion
+  of its construction cost was the creation of the `BuiltIns` lookup structure,
+  which now is defined statically in-code.
+- The test driver can now run all the tests in the OPA test suite and will skip
+  those which use a built-in that is not available in the current implementation.
+  This means we do not have to cherry-pick tests anymore, and will pick up
+  new tests more cleanly.
+- New methods for creating scalar nodes have been added (`number`, `boolean`, 
+  `string`, `null`) and the existing `scalar` methods have been deprecated.
+
+**Breaking Changes**
+- The `get_string` method, which previously returned the raw string of the Trieste
+  node, now tries to get a string from a `JSONString` node and strips it of its
+  quotes (in line with the other `get_*` methods). The previous functionality is
+  available via `get_raw_string`.
+
+**Bug Fixes**
+- Fuzzer bug with `SomeDecl` in a `NotExpr`
+- An issue with built-ins not being written to binary bundles
+- A unification bug with variables in comprehensions that had the same name as their module
+- `regopy` now performs some additional checks to ensure it is loading the correct
+  shared library on all platforms
+- Ubuntu 22.04 builds are now working again and the image has been added back to the workflow
+- macos/x86_64 image has been added back to the workflow, and shared library builds
+  (for the Python and dotnet wrappers)
+- Unification bug with masking scopes and variables with comprehensions and every
+
 ## 2025-10-12 - Version 1.0.0
 Major version adding VM-based execution of bundles.
 

CMakeLists.txt

@@ -99,7 +99,7 @@ FetchContent_Declare(
 FetchContent_Declare(
   trieste
   GIT_REPOSITORY https://github.com/microsoft/trieste
-  GIT_TAG        67273a5e13b640dd8a9d0eb6a6a3953b543787f0
+  GIT_TAG        main
 )
 
 FetchContent_MakeAvailable(cmake_utils)
@@ -242,7 +242,7 @@ if (REGOCPP_COPY_EXAMPLES)
 endif()
 
 if (REGOCPP_BUILD_TESTS)
-  install(TARGETS rego_test rego_test_c_api RUNTIME)
+  install(TARGETS rego_test rego_test_c_api rego_test_cpp_api RUNTIME)
   install(FILES tests/regocpp.yaml tests/bigint.yaml tests/bugs.yaml tests/bad.json DESTINATION tests)
   install(DIRECTORY tests/aci DESTINATION tests)
   install(DIRECTORY tests/cts DESTINATION tests)

VERSION

@@ -1 +1 @@
-1.0.0
+1.1.0

examples/c/example.c

@@ -38,7 +38,7 @@ int print_error(regoInterpreter* rego)
     return REGO_ERROR;
   }
 
-  buf = malloc(size);
+  buf = (char*)malloc(size);
   err = regoError(rego, buf, size);
   if (err == REGO_OK)
   {
@@ -57,12 +57,13 @@ int main(void)
   regoEnum err;
   int rc = EXIT_SUCCESS;
   regoOutput* output = NULL;
+  regoNode* node = NULL;
   regoBundle* bundle = NULL;
   regoInput* input = NULL;
   regoInterpreter* rego = regoNew();
   regoSize size = 0;
   char* buf = NULL;
-  const char* bundle_dir = "bundle";
+  const char* bundle_dir = "example_bundle";
   const char* bundle_path = "example.rbb";
 
   err = regoAddModuleFile(rego, "examples/objects.rego");
@@ -101,6 +102,52 @@ int main(void)
     goto error;
   }
 
+  node = regoOutputBinding(output, "x");
+  if (node == NULL)
+  {
+    goto error;
+  }
+
+  size = regoNodeJSONSize(node);
+  if (size == 0)
+  {
+    goto error;
+  }
+
+  buf = (char*)malloc(size);
+  err = regoNodeJSON(node, buf, size);
+  if (err != REGO_OK)
+  {
+    goto error;
+  }
+
+  printf("x = %s\n", buf);
+  free(buf);
+  buf = NULL;
+
+  node = regoNodeGet(node, 1); // index
+  if (node == NULL)
+  {
+    goto error;
+  }
+
+  size = regoNodeValueSize(node);
+  if (size == 0)
+  {
+    goto error;
+  }
+
+  buf = (char*)malloc(size);
+  err = regoNodeValue(node, buf, size);
+  if (err != REGO_OK)
+  {
+    goto error;
+  }
+
+  printf("x[1] = `%s`\n", buf);
+  free(buf);
+  buf = NULL;
+
   regoFreeOutput(output);
   output = NULL;
 
@@ -132,6 +179,9 @@ int main(void)
     goto error;
   }
 
+  regoFreeBundle(bundle);
+  bundle = NULL;
+
   bundle = regoBundleLoad(rego, bundle_dir);
 
   if (bundle == NULL || !regoBundleOk(bundle))
@@ -146,6 +196,9 @@ int main(void)
     goto error;
   }
 
+  regoFreeBundle(bundle);
+  bundle = NULL;
+
   bundle = regoBundleLoadBinary(rego, bundle_path);
 
   if (bundle == NULL || !regoBundleOk(bundle))
@@ -214,11 +267,26 @@ int main(void)
   rc = EXIT_FAILURE;
 
 exit:
+  if (buf != NULL)
+  {
+    free(buf);
+  }
+
   if (output != NULL)
   {
     regoFreeOutput(output);
   }
 
+  if (input != NULL)
+  {
+    regoFreeInput(input);
+  }
+
+  if (bundle != NULL)
+  {
+    regoFreeBundle(bundle);
+  }
+
   if (rego != NULL)
   {
     regoFree(rego);

examples/cpp/custom_builtin.cc

@@ -38,6 +38,6 @@ int main()
 {
   Interpreter rego;
   rego.builtins()->register_builtin(
-    bi::BuiltInDef::create(Location("myadd"), add_decl, add));
+    BuiltInDef::create(Location("myadd"), add_decl, add));
   logging::Output() << rego.query("myadd(2, 3)");
 }

examples/cpp/example.cc

@@ -52,8 +52,23 @@ f := e["dev"])");
     "c": 30.0,
     "d": true
 })");
-  std::cout << rego.query("[data.one, input.b, data.objects.sites[1]] = x")
-            << std::endl;
+
+  auto output =
+    rego.query_output("[data.one, input.a, data.objects.sites[1]] = x");
+  std::cout << output.json() << std::endl;
+
+  // we can get the value of bindings using the `binding` method on output
+  auto x = output.binding("x");
+  // as Rego integer can be arbitrary precision,
+  // rego-cpp exposes an arbitrary precision integer type
+  // called BigInt.
+  rego::BigInt x_1 = rego::try_get_int(x->at(1)).value();
+  std::cout << "x[1] = " << x_1 << std::endl;
+  // we can get values from objects using try_get_item
+  rego::Node x_2 = x->at(2);
+  std::string x_2_val =
+    rego::try_get_string(rego::try_get_item(x->at(2), "name").value()).value();
+  std::cout << "x[2][\"name\"] = " << x_2_val << std::endl;
 
   // if we need to reuse a policy, we can build a bundle and save it for re-use
   rego.set_query("[data.one, input.b, data.objects.sites[1]] = x");
@@ -80,10 +95,10 @@ f := e["dev"])");
 
   // we can also assemble the input term manually
   rego::Node input = rego::object({
-    rego::object_item(rego::scalar("a"), rego::scalar(rego::BigInt(10L))),
-    rego::object_item(rego::scalar("b"), rego::scalar("20")),
-    rego::object_item(rego::scalar("c"), rego::scalar(30.0)),
-    rego::object_item(rego::scalar("d"), rego::scalar(true)),
+    rego::object_item(rego::string("a"), rego::number(10)),
+    rego::object_item(rego::string("b"), rego::string("20")),
+    rego::object_item(rego::string("c"), rego::number(30.0)),
+    rego::object_item(rego::string("d"), rego::boolean(true)),
   });
 
   rego.set_input(input);

examples/dotnet/MyPolicy/MyPolicy.csproj

@@ -8,7 +8,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Rego" Version="1.0.0" />
+    <PackageReference Include="Rego" Version="1.1.0" />
   </ItemGroup>
 
 </Project>

examples/dotnet/example/example.csproj

@@ -6,6 +6,6 @@
     <Nullable>enable</Nullable>
   </PropertyGroup>
   <ItemGroup>
-    <PackageReference Include="Rego" Version="1.0.0" />
+    <PackageReference Include="Rego" Version="1.1.0" />
   </ItemGroup>
 </Project>

examples/rust/Cargo.toml

@@ -6,5 +6,5 @@ edition = "2021"
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
 [dependencies]
-regorust = { version = "1.0.0" }
+regorust = { version = "1.1.0" }
 clap = { version = "4.0", features = ["derive"] }