feat: json.patch builtin with Rego set support + partial-rule multi-body fix (picks up #442)

Cargo.toml

@@ -40,6 +40,7 @@ http = []
 glob = ["dep:globset"]
 graph = []
 jsonschema = ["dep:jsonschema"]
+jsonpatch = []
 mimalloc = ["dep:mimalloc"]
 net = ["dep:ipnet"]
 no_std = ["lazy_static/spin_no_std"]
@@ -63,6 +64,7 @@ full-opa = [
     "hex",
     "http",
     "jsonschema",
+    "jsonpatch",
     "net",
     "opa-runtime",
     "regex",
@@ -86,6 +88,7 @@ opa-no-std = [
   "coverage",
   "graph",
   "hex",
+  "jsonpatch",
   "no_std",
   "opa-runtime",
   "regex",

README.md

@@ -351,7 +351,6 @@ The following test suites don't pass fully due to missing builtins:
 - `globsmatch`
 - `graphql`
 - `invalidkeyerror`
-- `jsonpatch`
 - `jwtbuiltins`
 - `jwtdecodeverify`
 - `jwtencodesign`

bindings/wasm/Cargo.toml

@@ -25,6 +25,7 @@ default = [
 	"regorus/hex",
 	"regorus/http",
 	"regorus/jsonschema",
+	"regorus/jsonpatch",
 	"regorus/net",
 	"regorus/opa-runtime",
 	"regorus/regex",

bindings/wasm/test.js

@@ -92,6 +92,24 @@ console.log(report);
 report = engine.getCoverageReportPretty();
 console.log(report);
 
+// json.patch is available through the WASM default feature set.
+{
+const patchEngine = new regorus.Engine();
+patchEngine.addPolicy('json-patch.rego', `
+package wasm_patch
+import rego.v1
+
+result := json.patch(
+  {"a": [1, 2]},
+  [{"op": "replace", "path": "/a/1", "value": 9}],
+)
+`);
+const patched = JSON.parse(patchEngine.evalRule('data.wasm_patch.result'));
+if (JSON.stringify(patched) !== JSON.stringify({a: [1, 9]})) {
+  throw new Error(`Unexpected json.patch WASM result: ${JSON.stringify(patched)}`);
+}
+}
+
 // RVM regular example
 {
 const policy = `

docs/builtins.md

@@ -69,6 +69,7 @@ In future, each builtin will be associated with a feature (many builtins could b
   |----------------------------------------------------------------------------------------------------------------------|--------------|
   | [json.filter](https://www.openpolicyagent.org/docs/latest/policy-reference/#builtin-object-jsonfilter)               | _            |
   | [json.match_schema](https://www.openpolicyagent.org/docs/latest/policy-reference/#builtin-object-jsonmatch_schema)   | `jsonschema` |
+  | [json.patch](https://www.openpolicyagent.org/docs/latest/policy-reference/#builtin-object-jsonpatch)                 | `jsonpatch`  |
   | [json.remove](https://www.openpolicyagent.org/docs/latest/policy-reference/#builtin-object-jsonremove)               | _            |
   | [json.verify_schema](https://www.openpolicyagent.org/docs/latest/policy-reference/#builtin-object-jsonverify_schema) | `jsonschema` |
   | [object.filter](https://www.openpolicyagent.org/docs/latest/policy-reference/#builtin-object-objectfilter)           | _            |

src/ast.rs

@@ -390,6 +390,9 @@ pub struct RuleAssign {
 pub struct RuleBody {
     pub span: Span,
     pub assign: Option<RuleAssign>,
+    /// True when this body was introduced by an `else` clause. Unlike
+    /// independent legacy query blocks, else bodies are mutually exclusive.
+    pub is_else: bool,
     pub query: Ref<Query>,
 }