fix(inputlayer-py): timestamps, meta commands, in_(), negation and literals the engine accepts - #239

== R-IN / R-NEG ==
sent: ?emp(Id, Name, Dept), boss(_, Id)
rows: [['Alice']]
[PASS] in_ returns only bosses 
[PASS] in_ emits a positive boss atom, no rel(..., X, ...) filter 
sent: ?emp(Id, Name, Dept), !boss(_, Id)
rows: [['Bob'], ['Cara']]
[PASS] ~in_ returns non-bosses 
[PASS] ~in_ emits a negated atom !boss(...) 
[PASS] unlinked negation refused with CompileError before sending (The negated atom !boss(_, EmpId) shares no variable with a positive atom (test a column of a relation the query or rule joins))

== R-LIT injection attempts ==
sent: +emp[(10, "x\"), emp(99, \"pwn\", \"x", "sec"), (11, "line1\nline2\t\"q\" \\ é 漢 🚀 // /* */ <- ?", "sec")]
[PASS] injection-shaped string stored verbatim 'x"), emp(99, "pwn", "x'
[PASS] escapes/newlines/unicode stored verbatim 'line1\nline2\t"q" \\ é 漢 🚀 // /* */ <- ?'
[PASS] no injected row 99 exists 
[PASS] injection string works as condition constant 
[PASS] float nan refused in condition before sending (IQL has no literal for nan: it does not support infinity or NaN (use a finite float, or leave the value out))
[PASS] float inf refused in condition before sending (IQL has no literal for inf: it does not support infinity or NaN (use a finite float, or leave the value out))
[PASS] float -inf refused in condition before sending (IQL has no literal for -inf: it does not support infinity or NaN (use a finite float, or leave the value out))

== vector_search radius / limit (F2) ==
sent: ?doc(Id, Title, Embedding), Dist = cosine(Embedding, [1.0, 0.0, 0.0]), Dist <= 0.5
rows: [[1, 'a', [1.0, 0.0, 0.0], 0.0]]
[PASS] radius=0.5 finds doc 1 only 
sent: ?doc(Id, Title, Embedding), Dist = cosine(Embedding, [1.0, 0.0, 0.0]), Dist <= "0.5), evil(X"
rows: []
[PASS] injection-shaped radius string is encoded as one quoted literal (no evil atom) 
[PASS] radius=nan refused before sending (IQL has no literal for nan: it does not support infinity or NaN (use a finite float, or leave the value out))
[PASS] radius=inf refused before sending (IQL has no literal for inf: it does not support infinity or NaN (use a finite float, or leave the value out))
[PASS] {'limit': -1} refused before sending (limit must be a non-negative int, got -1 (pass limit as an int of 0 or more))
[PASS] {'limit': '1; drop'} refused before sending (limit must be a non-negative int, got '1; drop' (pass limit as an int of 0 or more))
[PASS] {'offset': -5} refused before sending (offset must be a non-negative int, got -5 (pass offset as an int of 0 or more))
[PASS] {'limit': True} refused before sending (limit must be a non-negative int, got True (pass limit as an int of 0 or more))
sent: il_q(Id) <- emp(Id, Name, Dept)
?il_q(Id:asc), limit(2, 1)
[PASS] limit=2 offset=1 pages [[2], [3]]

== R-TYPE datetime (F1) ==
sent: +event[("a", 1000, 1791117000250, 5), ("b", 1791117000250, 1000, 1791117000250)]
whole.rows: [['a', datetime.datetime(1970, 1, 1, 0, 0, 1, tzinfo=datetime.timezone.utc), datetime.datetime(2026, 10, 4, 12, 30, 0, 250000, tzinfo=datetime.timezone.utc), 5]]
[PASS] whole-relation rows convert datetime, keep Timestamp int 
[PASS] typed iteration gives datetime incl second datetime col Event(label='a', at=datetime.datetime(1970, 1, 1, 0, 0, 1, tzinfo=datetime.timezone.utc), ended=datetime.datetime(2026, 10, 4, 12, 30, 0, 250000, tzinfo=datetime.timezone.utc), seen=5)
projected.rows: [[datetime.datetime(1970, 1, 1, 0, 0, 1, tzinfo=datetime.timezone.utc), 1791117000250]] to_dicts: [{'ended': datetime.datetime(1970, 1, 1, 0, 0, 1, tzinfo=datetime.timezone.utc), 'seen': 1791117000250}]
[PASS] projected datetime column converted 
sent: ?event(Label, At, Ended, Seen), At > 1767225600000
[PASS] datetime condition compares ms 

== R-META ==
sent: .rule def lead
rule_definition: ['lead(Name) <- emp(Id, Name, _), boss(_, Id)']
[PASS] rule_definition returns the live clause 
.session -> [['No session data defined.']]
[PASS] .session list rejected by engine (Program has 1 parse error(s)
  query: .session list)

FAILURES: 0

"""Adversarial live driver for P1-C2 (Python SDK) against a real inputlayer-server.

Wraps the KG connection's execute() as a spy (it still calls the real engine)
so the transcript shows the exact program text the SDK sent.
"""
import asyncio, contextlib, math, os, sys
from datetime import datetime, timezone
from typing import ClassVar, Optional

from inputlayer import Derived, From, InputLayer, Relation, Timestamp, Vector
from inputlayer.exceptions import CompileError, QueryError

URL = os.environ["INPUTLAYER_TEST_SERVER"]
SENT: list[str] = []
FAIL = 0

def check(name, ok, detail=""):
    global FAIL
    print(f"[{'PASS' if ok else 'FAIL'}] {name} {detail}")
    FAIL += 0 if ok else 1

class Emp(Relation):
    id: int
    name: str
    dept: str

class Boss(Relation):
    team: str
    emp_id: int

class Event(Relation):
    label: str
    at: datetime
    ended: datetime
    seen: Timestamp

class Doc(Relation):
    id: int
    title: str
    embedding: Vector[3]

async def main():
    il = InputLayer(URL, username="admin", password="admin")
    await il.connect()
    with contextlib.suppress(Exception):
        await il.drop_knowledge_graph("nm_drive_py")
    kg = il.knowledge_graph("nm_drive_py")
    await kg.define(Emp, Boss, Event, Doc)
    real = kg._conn.execute
    async def spy(iql, **kw):
        SENT.append(iql)
        return await real(iql, **kw)
    kg._conn.execute = spy

    await kg.insert([Emp(id=1, name="Alice", dept="eng"), Emp(id=2, name="Bob", dept="hr"),
                     Emp(id=3, name="Cara", dept="eng")])
    await kg.insert([Boss(team="core", emp_id=1)])

    print("\n== R-IN / R-NEG ==")
    SENT.clear()
    r = await kg.query(Emp.name, where=lambda e: e.id.in_(Boss.emp_id))
    print("sent:", SENT[-1]); print("rows:", r.rows)
    check("in_ returns only bosses", r.rows == [["Alice"]])
    check("in_ emits a positive boss atom, no rel(..., X, ...) filter", "boss(" in SENT[-1] and "!boss" not in SENT[-1])
    SENT.clear()
    r = await kg.query(Emp.name, where=lambda e: ~e.id.in_(Boss.emp_id))
    print("sent:", SENT[-1]); print("rows:", sorted(r.rows))
    check("~in_ returns non-bosses", sorted(r.rows) == [["Bob"], ["Cara"]])
    check("~in_ emits a negated atom !boss(...)", "!boss(" in SENT[-1])
    SENT.clear()
    try:
        await kg.query(Emp.name, where=lambda e: ~Boss.emp_id.in_(Boss.emp_id))
        check("unlinked negation refused", False, "no error")
    except CompileError as exc:
        check("unlinked negation refused with CompileError before sending", SENT == [], f"({exc})")

    print("\n== R-LIT injection attempts ==")
    evil = 'x"), emp(99, "pwn", "x'
    weird = 'line1\nline2\t"q" \\ é 漢 🚀 // /* */ <- ?'
    await kg.insert([Emp(id=10, name=evil, dept="sec"), Emp(id=11, name=weird, dept="sec")])
    print("sent:", SENT[-1])
    r = await kg.query(Emp.id, Emp.name, where=lambda e: e.dept == "sec")
    got = {row[0]: row[1] for row in r.rows}
    check("injection-shaped string stored verbatim", got.get(10) == evil, repr(got.get(10)))
    check("escapes/newlines/unicode stored verbatim", got.get(11) == weird, repr(got.get(11)))
    r = await kg.query(Emp.id, where=lambda e: e.id == 99)
    check("no injected row 99 exists", r.rows == [])
    r = await kg.query(Emp.id, where=lambda e: e.name == evil)
    check("injection string works as condition constant", r.rows == [[10]])
    for bad in (math.nan, math.inf, -math.inf):
        SENT.clear()
        try:
            await kg.query(Emp.name, where=lambda e, b=bad: e.id == b)
            check(f"float {bad} refused in condition", False)
        except CompileError as exc:
            check(f"float {bad} refused in condition before sending", SENT == [], f"({exc})")

    print("\n== vector_search radius / limit (F2) ==")
    await kg.insert([Doc(id=1, title="a", embedding=[1.0, 0.0, 0.0]), Doc(id=2, title="b", embedding=[0.0, 1.0, 0.0])])
    SENT.clear()
    r = await kg.vector_search(Doc, [1.0, 0.0, 0.0], radius=0.5)
    print("sent:", SENT[-1]); print("rows:", r.rows)
    check("radius=0.5 finds doc 1 only", [row[0] for row in r.rows] == [1])
    SENT.clear()
    r = await kg.vector_search(Doc, [1.0, 0.0, 0.0], radius="0.5), evil(X")
    print("sent:", SENT[-1]); print("rows:", r.rows)
    check("injection-shaped radius string is encoded as one quoted literal (no evil atom)",
          SENT[-1].endswith('Dist <= "0.5), evil(X"') and SENT[-1].count('"') == 2)
    for bad in (float("nan"), float("inf")):
        SENT.clear()
        try:
            await kg.vector_search(Doc, [1.0, 0.0, 0.0], radius=bad)
            check(f"radius={bad!r} refused", False, f"sent {SENT}")
        except CompileError as exc:
            check(f"radius={bad!r} refused before sending", SENT == [], f"({exc})")
    for kw in ({"limit": -1}, {"limit": "1; drop"}, {"offset": -5}, {"limit": True}):
        SENT.clear()
        try:
            await kg.query(Emp.name, **kw)
            check(f"{kw} refused", False, f"sent {SENT}")
        except CompileError as exc:
            check(f"{kw} refused before sending", SENT == [], f"({exc})")
    r = await kg.query(Emp.id, order_by=Emp.id, limit=2, offset=1)
    print("sent:", SENT[-1]); check("limit=2 offset=1 pages", r.rows == [[2], [3]], str(r.rows))

    print("\n== R-TYPE datetime (F1) ==")
    t0 = datetime(1970, 1, 1, 0, 0, 1, tzinfo=timezone.utc)
    t1 = datetime(2026, 10, 4, 12, 30, 0, 250000, tzinfo=timezone.utc)
    SENT.clear()
    await kg.insert([Event(label="a", at=t0, ended=t1, seen=Timestamp(5)),
                     Event(label="b", at=t1, ended=t0, seen=Timestamp.from_datetime(t1))])
    print("sent:", SENT[-1])
    whole = await kg.query(Event, where=lambda e: e.label == "a")
    print("whole.rows:", whole.rows)
    check("whole-relation rows convert datetime, keep Timestamp int", whole.rows == [["a", t0, t1, 5]])
    objs = list(whole)
    check("typed iteration gives datetime incl second datetime col", objs[0].at == t0 and objs[0].ended == t1, repr(objs[0]))
    proj = await kg.query(Event.ended, Event.seen, where=lambda e: e.label == "b")
    print("projected.rows:", proj.rows, "to_dicts:", proj.to_dicts())
    check("projected datetime column converted", proj.rows == [[t0, 1791117000250]])
    r = await kg.query(Event.label, where=lambda e: e.at > datetime(2026, 1, 1, tzinfo=timezone.utc))
    print("sent:", SENT[-1])
    check("datetime condition compares ms", r.rows == [["b"]])

    print("\n== R-META ==")
    class Lead(Derived):
        name: str
        rules: ClassVar[list] = []
    Lead.rules = [From(Emp).where(lambda e: e.id.in_(Boss.emp_id)).select(name=Emp.name)]
    await kg.define_rules(Lead)
    SENT.clear()
    d = await kg.rule_definition(Lead)
    print("sent:", SENT[-1]); print("rule_definition:", d)
    check("rule_definition returns the live clause", len(d) == 1 and d[0].startswith("lead("))
    s = await kg.execute(".session")
    print(".session ->", s.rows)
    try:
        await kg.execute(".session list")
        check(".session list rejected by engine", False)
    except QueryError as exc:
        check(".session list rejected by engine", True, f"({exc})")

    kg._conn.execute = real
    await il.drop_knowledge_graph("nm_drive_py")
    await il.close()
    print(f"\nFAILURES: {FAIL}")
    sys.exit(1 if FAIL else 0)

asyncio.run(main())

============================= test session starts ==============================
platform linux -- Python 3.10.22, pytest-9.1.1, pluggy-1.6.0 -- ~/.no-mistakes/worktrees/9eea230c3aae/01M43DNKY22A7HB9SSTGKAZ0DV/packages/inputlayer-py/.venv/bin/python
cachedir: .pytest_cache
rootdir: ~/.no-mistakes/worktrees/9eea230c3aae/01M43DNKY22A7HB9SSTGKAZ0DV/packages/inputlayer-py
configfile: pyproject.toml
plugins: langsmith-0.12.1, asyncio-1.3.0, anyio-4.13.0
asyncio: mode=auto, debug=False, asyncio_default_fixture_loop_scope=None, asyncio_default_test_loop_scope=function
collecting ... collected 48 items

tests/compile_rules_live.py::test_every_fixture_command_runs_and_rejected_spellings_fail PASSED [  2%]
tests/compile_rules_live.py::test_rule_definition_reads_the_clauses PASSED [  4%]
tests/compile_rules_live.py::test_session_rules_list_and_drop_by_clause PASSED [  6%]
tests/compile_rules_live.py::test_datetime_columns_define_insert_and_read_back PASSED [  8%]
tests/compile_rules_live.py::test_in_and_not_in_queries PASSED           [ 10%]
tests/compile_rules_live.py::test_in_in_a_rule_and_a_conditional_delete PASSED [ 12%]
tests/compile_rules_live.py::test_ground_negation_binds_a_constant_for_the_request_only PASSED [ 14%]
tests/compile_rules_live.py::test_negation_sharing_no_variable_is_refused_before_sending PASSED [ 16%]
tests/compile_rules_live.py::test_view_with_ground_negation PASSED       [ 18%]
tests/compile_rules_live.py::test_session_view_with_ground_negation PASSED [ 20%]
tests/compile_rules_live.py::test_negated_comparison PASSED              [ 22%]
tests/compile_rules_live.py::test_literals_round_trip_through_the_engine PASSED [ 25%]
tests/compile_rules_live.py::test_unrepresentable_values_are_refused_before_sending PASSED [ 27%]
tests/docs_queries_live.py::test_basic_queries_all_rows PASSED           [ 29%]
tests/docs_queries_live.py::test_basic_queries_with_a_filter PASSED      [ 31%]
tests/docs_queries_live.py::test_selecting_specific_columns PASSED       [ 33%]
tests/docs_queries_live.py::test_a_projection_is_a_set PASSED            [ 35%]
tests/docs_queries_live.py::test_joins PASSED                            [ 37%]
tests/docs_queries_live.py::test_self_joins PASSED                       [ 39%]
tests/docs_queries_live.py::test_computed_columns PASSED                 [ 41%]
tests/docs_queries_live.py::test_ordering_and_pagination PASSED          [ 43%]
tests/docs_queries_live.py::test_sort_and_limit_run_in_the_engine PASSED [ 45%]
tests/docs_queries_live.py::test_aggregations_group_by_department_with_stats PASSED [ 47%]
tests/docs_queries_live.py::test_agg_two_measures_same_column PASSED     [ 50%]
tests/docs_queries_live.py::test_aggregates_leave_no_session_rule PASSED [ 52%]
tests/docs_queries_live.py::test_count_without_a_column PASSED           [ 54%]
tests/docs_queries_live.py::test_aggregations_top_k_per_group PASSED     [ 56%]
tests/docs_queries_live.py::test_aggregate_ordered_and_limited PASSED    [ 58%]
tests/docs_queries_live.py::test_working_with_results PASSED             [ 60%]
tests/docs_queries_live.py::test_query_plans PASSED                      [ 62%]
tests/docs_queries_live.py::test_debug_takes_the_arguments_of_query PASSED [ 64%]
tests/docs_queries_live.py::test_debug_shows_the_plan_of_an_aggregate_query PASSED [ 66%]
tests/docs_queries_live.py::test_why_returns_the_selected_columns_with_a_proof_per_row PASSED [ 68%]
tests/docs_queries_live.py::test_why_explains_an_aggregate_query PASSED  [ 70%]
tests/docs_queries_live.py::test_why_returns_a_column_of_the_second_joined_relation PASSED [ 72%]
tests/docs_queries_live.py::test_why_returns_a_computed_column PASSED    [ 75%]
tests/docs_queries_live.py::test_an_offset_without_a_limit_pages_in_the_engine PASSED [ 77%]
tests/docs_queries_live.py::test_why_orders_and_paginates_like_query PASSED [ 79%]
tests/docs_queries_live.py::test_why_returns_the_distinct_rows_of_a_projection_like_query PASSED [ 81%]
tests/docs_queries_live.py::test_paging_a_projection_ordered_by_an_unselected_column_is_refused PASSED [ 83%]
tests/docs_queries_live.py::test_why_orders_and_limits_an_aggregate_query_like_query PASSED [ 85%]
tests/docs_queries_live.py::test_raw_iql PASSED                          [ 87%]
tests/docs_queries_live.py::test_derived_relations_querying_a_recursive_rule PASSED [ 89%]
tests/docs_queries_live.py::test_sessions_session_facts_mix_with_persistent_data PASSED [ 91%]
tests/docs_queries_live.py::test_session_insert_keeps_every_fact PASSED  [ 93%]
tests/docs_queries_live.py::test_distance_functions PASSED               [ 95%]
tests/docs_queries_live.py::test_temporal_functions PASSED               [ 97%]
tests/docs_queries_live.py::test_or_conditions_merge_their_branches PASSED [100%]

============================= 48 passed in 14.38s ==============================

seed 1: 1 passed, 12 deselected in 0.23s
seed 42: 1 passed, 12 deselected in 0.24s
seed 31337: 1 passed, 12 deselected in 0.24s
seed 2024: 1 passed, 12 deselected in 0.23s

?emp(Id, Name, Dept), boss(_, Id) -> [['Alice']]
?emp(Id, Name, Dept), !boss(_, Id) -> [['Bob'], ['Cara']]
~Boss.emp_id.in_(Boss.emp_id) -> CompileError 'shares no variable', nothing sent

+emp[(10, "x\"), emp(99, \"pwn\", \"x", "sec"), (11, "line1\nline2\t\"q\" \\ é 漢 🚀 // /* */ <- ?", "sec")]
read back verbatim; no row 99 created
radius=nan/inf, limit=-1/'1; drop'/True, offset=-5 -> CompileError before sending