-- Mathlib/.lake/packages/lean4/src/lean/Std/Data/DHashMap/Internal/WF.lean
theorem wfImp_alterₘ [BEq α] [Hashable α] [LawfulBEq α] {m : Raw₀ α β} (h : Raw.WFImp m.1) {a : α}
    {f : Option (β a) → Option (β a)} : Raw.WFImp (m.alterₘ a f).1 where
  buckets_hash_self := isHashSelf_alterₘ m h a f
  distinct := DistinctKeys.perm (toListModel_alterₘ h) h.distinct.alterKey
  size_eq

Proof state:
α : Type u
β : α → Type v
inst✝² : BEq α
inst✝¹ : Hashable α
inst✝ : LawfulBEq α
m : Raw₀ α β
h : Raw.WFImp m.val
a : α
f : Option (β a) → Option (β a)
h₁ : containsKey a (toListModel m.val.buckets) = true
⊢ (let buckets' := updateBucket m.val.buckets ⋯ a fun l => AssocList.alter a f l;
        let size' := if containsₘ ⟨withComputedSize buckets', ⋯⟩ a = true then m.val.size else m.val.size - 1;
        ⟨{ size := size', buckets := buckets' }, ⋯⟩).val.size =
    (alterKey a f (toListModel m.val.buckets)).length

Tactic:
simp only [length_alterKey, h.size_eq, dif_pos h₁]

Result:
α : Type u
β : α → Type v
inst✝² : BEq α
inst✝¹ : Hashable α
inst✝ : LawfulBEq α
m : Raw₀ α β
h : Raw.WFImp m.val
a : α
f : Option (β a) → Option (β a)
h₁ : containsKey a (toListModel m.val.buckets) = true
⊢ (if containsₘ ⟨withComputedSize (updateBucket m.val.buckets ⋯ a fun l => AssocList.alter a f l), ⋯⟩ a = true then
      (toListModel m.val.buckets).length
    else (toListModel m.val.buckets).length - 1) =
    if (f (some (getValueCast a (toListModel m.val.buckets) h₁))).isSome = true then (toListModel m.val.buckets).length
    else (toListModel m.val.buckets).length - 1

Proof state:
α : Type u
β : α → Type v
inst✝² : BEq α
inst✝¹ : Hashable α
inst✝ : LawfulBEq α
m : Raw₀ α β
h : Raw.WFImp m.val
a : α
f : Option (β a) → Option (β a)
h₁ : m.containsₘ a = true
⊢ (let buckets' := updateBucket m.val.buckets ⋯ a fun l => AssocList.alter a f l;
        let size' := if containsₘ ⟨withComputedSize buckets', ⋯⟩ a = true then m.val.size else m.val.size - 1;
        ⟨{ size := size', buckets := buckets' }, ⋯⟩).val.size =
    (alterKey a f (toListModel m.val.buckets)).length

Tactic:
rw [containsₘ_eq_containsKey h] at h₁

Result:
α : Type u
β : α → Type v
inst✝² : BEq α
inst✝¹ : Hashable α
inst✝ : LawfulBEq α
m : Raw₀ α β
h : Raw.WFImp m.val
a : α
f : Option (β a) → Option (β a)
h₁ : containsKey a (toListModel m.val.buckets) = true
⊢ (let buckets' := updateBucket m.val.buckets ⋯ a fun l => AssocList.alter a f l;
        let size' := if containsₘ ⟨withComputedSize buckets', ⋯⟩ a = true then m.val.size else m.val.size - 1;
        ⟨{ size := size', buckets := buckets' }, ⋯⟩).val.size =
    (alterKey a f (toListModel m.val.buckets)).length

Proof state:
α : Type u
β : α → Type v
inst✝² : BEq α
inst✝¹ : Hashable α
inst✝ : LawfulBEq α
m : Raw₀ α β
h : Raw.WFImp m.val
a : α
f : Option (β a) → Option (β a)
⊢ (m.alterₘ a f).val.size = (toListModel (m.alterₘ a f).val.buckets).length

Tactic:
rw [← Perm.length_eq (toListModel_alterₘ h).symm, alterₘ]

Result:
α : Type u
β : α → Type v
inst✝² : BEq α
inst✝¹ : Hashable α
inst✝ : LawfulBEq α
m : Raw₀ α β
h : Raw.WFImp m.val
a : α
f : Option (β a) → Option (β a)
⊢ (if h : m.containsₘ a = true then
          let buckets' := updateBucket m.val.buckets ⋯ a fun l => AssocList.alter a f l;
          let size' := if containsₘ ⟨withComputedSize buckets', ⋯⟩ a = true then m.val.size else m.val.size - 1;
          ⟨{ size := size', buckets := buckets' }, ⋯⟩
        else
          match f none with
          | none => m
          | some b => (m.consₘ a b).expandIfNecessary).val.size =
    (alterKey a f (toListModel m.val.buckets)).length

Proof state:
α : Type u
β : α → Type v
inst✝² : BEq α
inst✝¹ : Hashable α
inst✝ : LawfulBEq α
m : Raw₀ α β
h : Raw.WFImp m.val
a : α
f : Option (β a) → Option (β a)
h₁ : ¬containsKey a (toListModel m.val.buckets) = true
x✝ : Option (β a)
heq : f none = none
⊢ m.val.size =
    (match f none with
      | none => eraseKey a (toListModel m.val.buckets)
      | some v => insertEntry a v (toListModel m.val.buckets)).length

Tactic:
rw [heq, h.size_eq, length_eraseKey, if_neg h₁]

Result:
no goals

Proof state:
α : Type u
β : α → Type v
inst✝² : BEq α
inst✝¹ : Hashable α
inst✝ : LawfulBEq α
m : Raw₀ α β
h : Raw.WFImp m.val
a : α
f : Option (β a) → Option (β a)
h₁ : containsKey a (toListModel m.val.buckets) = true
⊢ (if containsKey a (alterKey a f (toListModel m.val.buckets)) = true then (toListModel m.val.buckets).length
    else (toListModel m.val.buckets).length - 1) =
    if (f (getValueCast? a (toListModel m.val.buckets))).isSome = true then (toListModel m.val.buckets).length
    else (toListModel m.val.buckets).length - 1

Tactic:
conv => lhs; congr; rw [containsKey_alterKey_self h.distinct]

Result:
no goals

Proof state:
α : Type u
β : α → Type v
inst✝² : BEq α
inst✝¹ : Hashable α
inst✝ : LawfulBEq α
m : Raw₀ α β
h : Raw.WFImp m.val
a : α
f : Option (β a) → Option (β a)
h₁ : containsKey a (toListModel m.val.buckets) = true
⊢ (if
        containsKey a
            (toListModel
              ⟨withComputedSize (updateBucket m.val.buckets ⋯ a fun l => AssocList.alter a f l), ⋯⟩.val.buckets) =
          true then
      (toListModel m.val.buckets).length
    else (toListModel m.val.buckets).length - 1) =
    if (f (some (getValueCast a (toListModel m.val.buckets) h₁))).isSome = true then (toListModel m.val.buckets).length
    else (toListModel m.val.buckets).length - 1

Tactic:
simp only [buckets_withComputedSize]

Result:
α : Type u
β : α → Type v
inst✝² : BEq α
inst✝¹ : Hashable α
inst✝ : LawfulBEq α
m : Raw₀ α β
h : Raw.WFImp m.val
a : α
f : Option (β a) → Option (β a)
h₁ : containsKey a (toListModel m.val.buckets) = true
⊢ (if containsKey a (toListModel (updateBucket m.val.buckets ⋯ a fun l => AssocList.alter a f l)) = true then
      (toListModel m.val.buckets).length
    else (toListModel m.val.buckets).length - 1) =
    if (f (some (getValueCast a (toListModel m.val.buckets) h₁))).isSome = true then (toListModel m.val.buckets).length
    else (toListModel m.val.buckets).length - 1

Proof state:
α : Type u
β : α → Type v
inst✝² : BEq α
inst✝¹ : Hashable α
inst✝ : LawfulBEq α
m : Raw₀ α β
h : Raw.WFImp m.val
a : α
f : Option (β a) → Option (β a)
h₁ : containsKey a (toListModel m.val.buckets) = true
⊢ Raw.WFImp ⟨withComputedSize (updateBucket m.val.buckets ⋯ a fun l => AssocList.alter a f l), ⋯⟩.val

Tactic:
apply wfImp_updateBucket_alter h

Result:
no goals

Proof state:
α : Type u
β : α → Type v
inst✝² : BEq α
inst✝¹ : Hashable α
inst✝ : LawfulBEq α
m : Raw₀ α β
h : Raw.WFImp m.val
a : α
f : Option (β a) → Option (β a)
h₁ : containsKey a (toListModel m.val.buckets) = true
⊢ (if containsKey a (alterKey a f (toListModel m.val.buckets)) = true then (toListModel m.val.buckets).length
    else (toListModel m.val.buckets).length - 1) =
    if (f (some (getValueCast a (toListModel m.val.buckets) h₁))).isSome = true then (toListModel m.val.buckets).length
    else (toListModel m.val.buckets).length - 1

Tactic:
rw [← getValueCast?_eq_some_getValueCast h₁]

Result:
α : Type u
β : α → Type v
inst✝² : BEq α
inst✝¹ : Hashable α
inst✝ : LawfulBEq α
m : Raw₀ α β
h : Raw.WFImp m.val
a : α
f : Option (β a) → Option (β a)
h₁ : containsKey a (toListModel m.val.buckets) = true
⊢ (if containsKey a (alterKey a f (toListModel m.val.buckets)) = true then (toListModel m.val.buckets).length
    else (toListModel m.val.buckets).length - 1) =
    if (f (getValueCast? a (toListModel m.val.buckets))).isSome = true then (toListModel m.val.buckets).length
    else (toListModel m.val.buckets).length - 1