src/HOL/Tools/meson.ML
author wenzelm
Mon Jul 12 21:38:37 2010 +0200 (2010-07-12)
changeset 37781 2fbbf0a48cef
parent 37539 c80e77e8d036
child 37926 e6ff246c0cdb
permissions -rw-r--r--
moved misc legacy stuff from OldGoals to Misc_Legacy;
OldGoals: removed unused strip_context, metahyps_thms, read_term, read_prop, gethyps;
wenzelm@9869
     1
(*  Title:      HOL/Tools/meson.ML
paulson@9840
     2
    Author:     Lawrence C Paulson, Cambridge University Computer Laboratory
paulson@9840
     3
wenzelm@9869
     4
The MESON resolution proof procedure for HOL.
wenzelm@29267
     5
When making clauses, avoids using the rewriter -- instead uses RS recursively.
paulson@9840
     6
*)
paulson@9840
     7
wenzelm@24300
     8
signature MESON =
paulson@15579
     9
sig
wenzelm@32955
    10
  val trace: bool Unsynchronized.ref
wenzelm@24300
    11
  val term_pair_of: indexname * (typ * 'a) -> term * 'a
wenzelm@24300
    12
  val flexflex_first_order: thm -> thm
wenzelm@24300
    13
  val size_of_subgoals: thm -> int
paulson@26562
    14
  val too_many_clauses: Proof.context option -> term -> bool
paulson@24937
    15
  val make_cnf: thm list -> thm -> Proof.context -> thm list * Proof.context
wenzelm@24300
    16
  val finish_cnf: thm list -> thm list
wenzelm@32262
    17
  val make_nnf: Proof.context -> thm -> thm
wenzelm@32262
    18
  val skolemize: Proof.context -> thm -> thm
wenzelm@24300
    19
  val is_fol_term: theory -> term -> bool
blanchet@35869
    20
  val make_clauses_unsorted: thm list -> thm list
wenzelm@24300
    21
  val make_clauses: thm list -> thm list
wenzelm@24300
    22
  val make_horns: thm list -> thm list
wenzelm@24300
    23
  val best_prolog_tac: (thm -> int) -> thm list -> tactic
wenzelm@24300
    24
  val depth_prolog_tac: thm list -> tactic
wenzelm@24300
    25
  val gocls: thm list -> thm list
wenzelm@32262
    26
  val skolemize_prems_tac: Proof.context -> thm list -> int -> tactic
wenzelm@32262
    27
  val MESON: (thm list -> thm list) -> (thm list -> tactic) -> Proof.context -> int -> tactic
wenzelm@32262
    28
  val best_meson_tac: (thm -> int) -> Proof.context -> int -> tactic
wenzelm@32262
    29
  val safe_best_meson_tac: Proof.context -> int -> tactic
wenzelm@32262
    30
  val depth_meson_tac: Proof.context -> int -> tactic
wenzelm@24300
    31
  val prolog_step_tac': thm list -> int -> tactic
wenzelm@24300
    32
  val iter_deepen_prolog_tac: thm list -> tactic
wenzelm@32262
    33
  val iter_deepen_meson_tac: Proof.context -> thm list -> int -> tactic
wenzelm@24300
    34
  val make_meta_clause: thm -> thm
wenzelm@24300
    35
  val make_meta_clauses: thm list -> thm list
wenzelm@32262
    36
  val meson_tac: Proof.context -> thm list -> int -> tactic
wenzelm@24300
    37
  val negate_head: thm -> thm
wenzelm@24300
    38
  val select_literal: int -> thm -> thm
wenzelm@32262
    39
  val skolemize_tac: Proof.context -> int -> tactic
wenzelm@32262
    40
  val setup: theory -> theory
paulson@15579
    41
end
paulson@9840
    42
wenzelm@24300
    43
structure Meson: MESON =
paulson@15579
    44
struct
paulson@9840
    45
wenzelm@32955
    46
val trace = Unsynchronized.ref false;
wenzelm@32955
    47
fun trace_msg msg = if ! trace then tracing (msg ()) else ();
wenzelm@32955
    48
paulson@26562
    49
val max_clauses_default = 60;
wenzelm@36001
    50
val (max_clauses, setup) = Attrib.config_int "max_clauses" (K max_clauses_default);
paulson@26562
    51
haftmann@31454
    52
val disj_forward = @{thm disj_forward};
haftmann@31454
    53
val disj_forward2 = @{thm disj_forward2};
haftmann@31454
    54
val make_pos_rule = @{thm make_pos_rule};
haftmann@31454
    55
val make_pos_rule' = @{thm make_pos_rule'};
haftmann@31454
    56
val make_pos_goal = @{thm make_pos_goal};
haftmann@31454
    57
val make_neg_rule = @{thm make_neg_rule};
haftmann@31454
    58
val make_neg_rule' = @{thm make_neg_rule'};
haftmann@31454
    59
val make_neg_goal = @{thm make_neg_goal};
haftmann@31454
    60
val conj_forward = @{thm conj_forward};
haftmann@31454
    61
val all_forward = @{thm all_forward};
haftmann@31454
    62
val ex_forward = @{thm ex_forward};
haftmann@31454
    63
val choice = @{thm choice};
haftmann@31454
    64
paulson@15579
    65
val not_conjD = thm "meson_not_conjD";
paulson@15579
    66
val not_disjD = thm "meson_not_disjD";
paulson@15579
    67
val not_notD = thm "meson_not_notD";
paulson@15579
    68
val not_allD = thm "meson_not_allD";
paulson@15579
    69
val not_exD = thm "meson_not_exD";
paulson@15579
    70
val imp_to_disjD = thm "meson_imp_to_disjD";
paulson@15579
    71
val not_impD = thm "meson_not_impD";
paulson@15579
    72
val iff_to_disjD = thm "meson_iff_to_disjD";
paulson@15579
    73
val not_iffD = thm "meson_not_iffD";
paulson@15579
    74
val conj_exD1 = thm "meson_conj_exD1";
paulson@15579
    75
val conj_exD2 = thm "meson_conj_exD2";
paulson@15579
    76
val disj_exD = thm "meson_disj_exD";
paulson@15579
    77
val disj_exD1 = thm "meson_disj_exD1";
paulson@15579
    78
val disj_exD2 = thm "meson_disj_exD2";
paulson@15579
    79
val disj_assoc = thm "meson_disj_assoc";
paulson@15579
    80
val disj_comm = thm "meson_disj_comm";
paulson@15579
    81
val disj_FalseD1 = thm "meson_disj_FalseD1";
paulson@15579
    82
val disj_FalseD2 = thm "meson_disj_FalseD2";
paulson@9840
    83
paulson@9840
    84
paulson@15579
    85
(**** Operators for forward proof ****)
paulson@15579
    86
paulson@20417
    87
paulson@20417
    88
(** First-order Resolution **)
paulson@20417
    89
paulson@20417
    90
fun typ_pair_of (ix, (sort,ty)) = (TVar (ix,sort), ty);
paulson@20417
    91
fun term_pair_of (ix, (ty,t)) = (Var (ix,ty), t);
paulson@20417
    92
paulson@20417
    93
(*FIXME: currently does not "rename variables apart"*)
paulson@20417
    94
fun first_order_resolve thA thB =
wenzelm@32262
    95
  (case
wenzelm@32262
    96
    try (fn () =>
wenzelm@32262
    97
      let val thy = theory_of_thm thA
wenzelm@32262
    98
          val tmA = concl_of thA
wenzelm@32262
    99
          val Const("==>",_) $ tmB $ _ = prop_of thB
blanchet@37398
   100
          val tenv =
blanchet@37410
   101
            Pattern.first_order_match thy (tmB, tmA)
blanchet@37410
   102
                                          (Vartab.empty, Vartab.empty) |> snd
wenzelm@32262
   103
          val ct_pairs = map (pairself (cterm_of thy) o term_pair_of) (Vartab.dest tenv)
wenzelm@32262
   104
      in  thA RS (cterm_instantiate ct_pairs thB)  end) () of
wenzelm@32262
   105
    SOME th => th
blanchet@37398
   106
  | NONE => raise THM ("first_order_resolve", 0, [thA, thB]))
paulson@18175
   107
wenzelm@24300
   108
fun flexflex_first_order th =
paulson@23440
   109
  case (tpairs_of th) of
paulson@23440
   110
      [] => th
paulson@23440
   111
    | pairs =>
wenzelm@24300
   112
        let val thy = theory_of_thm th
wenzelm@32032
   113
            val (tyenv, tenv) =
wenzelm@32032
   114
              fold (Pattern.first_order_match thy) pairs (Vartab.empty, Vartab.empty)
wenzelm@24300
   115
            val t_pairs = map term_pair_of (Vartab.dest tenv)
wenzelm@24300
   116
            val th' = Thm.instantiate ([], map (pairself (cterm_of thy)) t_pairs) th
wenzelm@24300
   117
        in  th'  end
wenzelm@24300
   118
        handle THM _ => th;
paulson@23440
   119
paulson@24937
   120
(*Forward proof while preserving bound variables names*)
paulson@24937
   121
fun rename_bvs_RS th rl =
paulson@24937
   122
  let val th' = th RS rl
paulson@24937
   123
  in  Thm.rename_boundvars (concl_of th') (concl_of th) th' end;
paulson@24937
   124
paulson@24937
   125
(*raises exception if no rules apply*)
wenzelm@24300
   126
fun tryres (th, rls) =
paulson@18141
   127
  let fun tryall [] = raise THM("tryres", 0, th::rls)
paulson@24937
   128
        | tryall (rl::rls) = (rename_bvs_RS th rl handle THM _ => tryall rls)
paulson@18141
   129
  in  tryall rls  end;
wenzelm@24300
   130
paulson@21050
   131
(*Permits forward proof from rules that discharge assumptions. The supplied proof state st,
paulson@21050
   132
  e.g. from conj_forward, should have the form
paulson@21050
   133
    "[| P' ==> ?P; Q' ==> ?Q |] ==> ?P & ?Q"
paulson@21050
   134
  and the effect should be to instantiate ?P and ?Q with normalized versions of P' and Q'.*)
wenzelm@32262
   135
fun forward_res ctxt nf st =
paulson@21050
   136
  let fun forward_tacf [prem] = rtac (nf prem) 1
wenzelm@24300
   137
        | forward_tacf prems =
wenzelm@32091
   138
            error (cat_lines
wenzelm@32091
   139
              ("Bad proof state in forward_res, please inform lcp@cl.cam.ac.uk:" ::
wenzelm@32262
   140
                Display.string_of_thm ctxt st ::
wenzelm@32262
   141
                "Premises:" :: map (Display.string_of_thm ctxt) prems))
paulson@21050
   142
  in
wenzelm@37781
   143
    case Seq.pull (ALLGOALS (Misc_Legacy.METAHYPS forward_tacf) st)
paulson@21050
   144
    of SOME(th,_) => th
paulson@21050
   145
     | NONE => raise THM("forward_res", 0, [st])
paulson@21050
   146
  end;
paulson@15579
   147
paulson@20134
   148
(*Are any of the logical connectives in "bs" present in the term?*)
paulson@20134
   149
fun has_conns bs =
paulson@20134
   150
  let fun has (Const(a,_)) = false
paulson@20134
   151
        | has (Const("Trueprop",_) $ p) = has p
paulson@20134
   152
        | has (Const("Not",_) $ p) = has p
paulson@20134
   153
        | has (Const("op |",_) $ p $ q) = member (op =) bs "op |" orelse has p orelse has q
paulson@20134
   154
        | has (Const("op &",_) $ p $ q) = member (op =) bs "op &" orelse has p orelse has q
paulson@20134
   155
        | has (Const("All",_) $ Abs(_,_,p)) = member (op =) bs "All" orelse has p
paulson@20134
   156
        | has (Const("Ex",_) $ Abs(_,_,p)) = member (op =) bs "Ex" orelse has p
wenzelm@24300
   157
        | has _ = false
paulson@15579
   158
  in  has  end;
wenzelm@24300
   159
paulson@9840
   160
paulson@15579
   161
(**** Clause handling ****)
paulson@9840
   162
paulson@15579
   163
fun literals (Const("Trueprop",_) $ P) = literals P
paulson@15579
   164
  | literals (Const("op |",_) $ P $ Q) = literals P @ literals Q
paulson@15579
   165
  | literals (Const("Not",_) $ P) = [(false,P)]
paulson@15579
   166
  | literals P = [(true,P)];
paulson@9840
   167
paulson@15579
   168
(*number of literals in a term*)
paulson@15579
   169
val nliterals = length o literals;
paulson@9840
   170
paulson@18389
   171
paulson@18389
   172
(*** Tautology Checking ***)
paulson@18389
   173
wenzelm@24300
   174
fun signed_lits_aux (Const ("op |", _) $ P $ Q) (poslits, neglits) =
paulson@18389
   175
      signed_lits_aux Q (signed_lits_aux P (poslits, neglits))
paulson@18389
   176
  | signed_lits_aux (Const("Not",_) $ P) (poslits, neglits) = (poslits, P::neglits)
paulson@18389
   177
  | signed_lits_aux P (poslits, neglits) = (P::poslits, neglits);
wenzelm@24300
   178
paulson@18389
   179
fun signed_lits th = signed_lits_aux (HOLogic.dest_Trueprop (concl_of th)) ([],[]);
paulson@18389
   180
paulson@18389
   181
(*Literals like X=X are tautologous*)
paulson@18389
   182
fun taut_poslit (Const("op =",_) $ t $ u) = t aconv u
paulson@18389
   183
  | taut_poslit (Const("True",_)) = true
paulson@18389
   184
  | taut_poslit _ = false;
paulson@18389
   185
paulson@18389
   186
fun is_taut th =
paulson@18389
   187
  let val (poslits,neglits) = signed_lits th
paulson@18389
   188
  in  exists taut_poslit poslits
paulson@18389
   189
      orelse
wenzelm@20073
   190
      exists (member (op aconv) neglits) (HOLogic.false_const :: poslits)
paulson@19894
   191
  end
wenzelm@24300
   192
  handle TERM _ => false;       (*probably dest_Trueprop on a weird theorem*)
paulson@18389
   193
paulson@18389
   194
paulson@18389
   195
(*** To remove trivial negated equality literals from clauses ***)
paulson@18389
   196
paulson@18389
   197
(*They are typically functional reflexivity axioms and are the converses of
paulson@18389
   198
  injectivity equivalences*)
wenzelm@24300
   199
paulson@18389
   200
val not_refl_disj_D = thm"meson_not_refl_disj_D";
paulson@18389
   201
paulson@20119
   202
(*Is either term a Var that does not properly occur in the other term?*)
paulson@20119
   203
fun eliminable (t as Var _, u) = t aconv u orelse not (Logic.occs(t,u))
paulson@20119
   204
  | eliminable (u, t as Var _) = t aconv u orelse not (Logic.occs(t,u))
paulson@20119
   205
  | eliminable _ = false;
paulson@20119
   206
paulson@18389
   207
fun refl_clause_aux 0 th = th
paulson@18389
   208
  | refl_clause_aux n th =
paulson@18389
   209
       case HOLogic.dest_Trueprop (concl_of th) of
wenzelm@24300
   210
          (Const ("op |", _) $ (Const ("op |", _) $ _ $ _) $ _) =>
paulson@18389
   211
            refl_clause_aux n (th RS disj_assoc)    (*isolate an atom as first disjunct*)
wenzelm@24300
   212
        | (Const ("op |", _) $ (Const("Not",_) $ (Const("op =",_) $ t $ u)) $ _) =>
wenzelm@24300
   213
            if eliminable(t,u)
wenzelm@24300
   214
            then refl_clause_aux (n-1) (th RS not_refl_disj_D)  (*Var inequation: delete*)
wenzelm@24300
   215
            else refl_clause_aux (n-1) (th RS disj_comm)  (*not between Vars: ignore*)
wenzelm@24300
   216
        | (Const ("op |", _) $ _ $ _) => refl_clause_aux n (th RS disj_comm)
wenzelm@24300
   217
        | _ => (*not a disjunction*) th;
paulson@18389
   218
wenzelm@24300
   219
fun notequal_lits_count (Const ("op |", _) $ P $ Q) =
paulson@18389
   220
      notequal_lits_count P + notequal_lits_count Q
paulson@18389
   221
  | notequal_lits_count (Const("Not",_) $ (Const("op =",_) $ _ $ _)) = 1
paulson@18389
   222
  | notequal_lits_count _ = 0;
paulson@18389
   223
paulson@18389
   224
(*Simplify a clause by applying reflexivity to its negated equality literals*)
wenzelm@24300
   225
fun refl_clause th =
paulson@18389
   226
  let val neqs = notequal_lits_count (HOLogic.dest_Trueprop (concl_of th))
paulson@19894
   227
  in  zero_var_indexes (refl_clause_aux neqs th)  end
wenzelm@24300
   228
  handle TERM _ => th;  (*probably dest_Trueprop on a weird theorem*)
paulson@18389
   229
paulson@18389
   230
paulson@24937
   231
(*** Removal of duplicate literals ***)
paulson@24937
   232
paulson@24937
   233
(*Forward proof, passing extra assumptions as theorems to the tactic*)
wenzelm@32262
   234
fun forward_res2 ctxt nf hyps st =
paulson@24937
   235
  case Seq.pull
paulson@24937
   236
        (REPEAT
wenzelm@37781
   237
         (Misc_Legacy.METAHYPS (fn major::minors => rtac (nf (minors@hyps) major) 1) 1)
paulson@24937
   238
         st)
paulson@24937
   239
  of SOME(th,_) => th
paulson@24937
   240
   | NONE => raise THM("forward_res2", 0, [st]);
paulson@24937
   241
paulson@24937
   242
(*Remove duplicates in P|Q by assuming ~P in Q
paulson@24937
   243
  rls (initially []) accumulates assumptions of the form P==>False*)
wenzelm@32262
   244
fun nodups_aux ctxt rls th = nodups_aux ctxt rls (th RS disj_assoc)
paulson@24937
   245
    handle THM _ => tryres(th,rls)
wenzelm@32262
   246
    handle THM _ => tryres(forward_res2 ctxt (nodups_aux ctxt) rls (th RS disj_forward2),
paulson@24937
   247
                           [disj_FalseD1, disj_FalseD2, asm_rl])
paulson@24937
   248
    handle THM _ => th;
paulson@24937
   249
paulson@24937
   250
(*Remove duplicate literals, if there are any*)
wenzelm@32262
   251
fun nodups ctxt th =
paulson@24937
   252
  if has_duplicates (op =) (literals (prop_of th))
wenzelm@32262
   253
    then nodups_aux ctxt [] th
paulson@24937
   254
    else th;
paulson@24937
   255
paulson@24937
   256
paulson@18389
   257
(*** The basic CNF transformation ***)
paulson@18389
   258
paulson@26562
   259
fun too_many_clauses ctxto t = 
paulson@26562
   260
 let
paulson@26562
   261
  val max_cl = case ctxto of SOME ctxt => Config.get ctxt max_clauses
paulson@26562
   262
                           | NONE => max_clauses_default
paulson@26562
   263
  
paulson@26562
   264
  fun sum x y = if x < max_cl andalso y < max_cl then x+y else max_cl;
paulson@26562
   265
  fun prod x y = if x < max_cl andalso y < max_cl then x*y else max_cl;
paulson@26562
   266
  
paulson@26562
   267
  (*Estimate the number of clauses in order to detect infeasible theorems*)
paulson@26562
   268
  fun signed_nclauses b (Const("Trueprop",_) $ t) = signed_nclauses b t
paulson@26562
   269
    | signed_nclauses b (Const("Not",_) $ t) = signed_nclauses (not b) t
paulson@26562
   270
    | signed_nclauses b (Const("op &",_) $ t $ u) =
wenzelm@32960
   271
        if b then sum (signed_nclauses b t) (signed_nclauses b u)
wenzelm@32960
   272
             else prod (signed_nclauses b t) (signed_nclauses b u)
paulson@26562
   273
    | signed_nclauses b (Const("op |",_) $ t $ u) =
wenzelm@32960
   274
        if b then prod (signed_nclauses b t) (signed_nclauses b u)
wenzelm@32960
   275
             else sum (signed_nclauses b t) (signed_nclauses b u)
paulson@26562
   276
    | signed_nclauses b (Const("op -->",_) $ t $ u) =
wenzelm@32960
   277
        if b then prod (signed_nclauses (not b) t) (signed_nclauses b u)
wenzelm@32960
   278
             else sum (signed_nclauses (not b) t) (signed_nclauses b u)
paulson@26562
   279
    | signed_nclauses b (Const("op =", Type ("fun", [T, _])) $ t $ u) =
wenzelm@32960
   280
        if T = HOLogic.boolT then (*Boolean equality is if-and-only-if*)
wenzelm@32960
   281
            if b then sum (prod (signed_nclauses (not b) t) (signed_nclauses b u))
wenzelm@32960
   282
                          (prod (signed_nclauses (not b) u) (signed_nclauses b t))
wenzelm@32960
   283
                 else sum (prod (signed_nclauses b t) (signed_nclauses b u))
wenzelm@32960
   284
                          (prod (signed_nclauses (not b) t) (signed_nclauses (not b) u))
wenzelm@32960
   285
        else 1
paulson@26562
   286
    | signed_nclauses b (Const("Ex", _) $ Abs (_,_,t)) = signed_nclauses b t
paulson@26562
   287
    | signed_nclauses b (Const("All",_) $ Abs (_,_,t)) = signed_nclauses b t
paulson@26562
   288
    | signed_nclauses _ _ = 1; (* literal *)
paulson@26562
   289
 in 
paulson@26562
   290
  signed_nclauses true t >= max_cl
paulson@26562
   291
 end;
paulson@19894
   292
paulson@15579
   293
(*Replaces universally quantified variables by FREE variables -- because
paulson@24937
   294
  assumptions may not contain scheme variables.  Later, generalize using Variable.export. *)
paulson@24937
   295
local  
paulson@24937
   296
  val spec_var = Thm.dest_arg (Thm.dest_arg (#2 (Thm.dest_implies (Thm.cprop_of spec))));
paulson@24937
   297
  val spec_varT = #T (Thm.rep_cterm spec_var);
paulson@24937
   298
  fun name_of (Const ("All", _) $ Abs(x,_,_)) = x | name_of _ = Name.uu;
paulson@24937
   299
in  
paulson@24937
   300
  fun freeze_spec th ctxt =
paulson@24937
   301
    let
paulson@24937
   302
      val cert = Thm.cterm_of (ProofContext.theory_of ctxt);
paulson@24937
   303
      val ([x], ctxt') = Variable.variant_fixes [name_of (HOLogic.dest_Trueprop (concl_of th))] ctxt;
paulson@24937
   304
      val spec' = Thm.instantiate ([], [(spec_var, cert (Free (x, spec_varT)))]) spec;
paulson@24937
   305
    in (th RS spec', ctxt') end
paulson@24937
   306
end;
paulson@9840
   307
paulson@15998
   308
(*Used with METAHYPS below. There is one assumption, which gets bound to prem
paulson@15998
   309
  and then normalized via function nf. The normal form is given to resolve_tac,
paulson@22515
   310
  instantiate a Boolean variable created by resolution with disj_forward. Since
paulson@22515
   311
  (nf prem) returns a LIST of theorems, we can backtrack to get all combinations.*)
paulson@15579
   312
fun resop nf [prem] = resolve_tac (nf prem) 1;
paulson@9840
   313
wenzelm@24300
   314
(*Any need to extend this list with
wenzelm@26424
   315
  "HOL.type_class","HOL.eq_class","Pure.term"?*)
wenzelm@24300
   316
val has_meta_conn =
paulson@29684
   317
    exists_Const (member (op =) ["==", "==>", "=simp=>", "all", "prop"] o #1);
paulson@20417
   318
blanchet@37410
   319
fun apply_skolem_theorem (th, rls) =
blanchet@37398
   320
  let
blanchet@37410
   321
    fun tryall [] = raise THM ("apply_skolem_theorem", 0, th::rls)
blanchet@37398
   322
      | tryall (rl :: rls) =
blanchet@37398
   323
        first_order_resolve th rl handle THM _ => tryall rls
blanchet@37398
   324
  in tryall rls end
paulson@22515
   325
blanchet@37410
   326
(* Conjunctive normal form, adding clauses from th in front of ths (for foldr).
blanchet@37410
   327
   Strips universal quantifiers and breaks up conjunctions.
blanchet@37410
   328
   Eliminates existential quantifiers using Skolemization theorems. *)
blanchet@37410
   329
fun cnf skolem_ths ctxt (th, ths) =
wenzelm@33222
   330
  let val ctxtr = Unsynchronized.ref ctxt   (* FIXME ??? *)
paulson@24937
   331
      fun cnf_aux (th,ths) =
wenzelm@24300
   332
        if not (can HOLogic.dest_Trueprop (prop_of th)) then ths (*meta-level: ignore*)
wenzelm@24300
   333
        else if not (has_conns ["All","Ex","op &"] (prop_of th))
wenzelm@32262
   334
        then nodups ctxt th :: ths (*no work to do, terminate*)
wenzelm@24300
   335
        else case head_of (HOLogic.dest_Trueprop (concl_of th)) of
wenzelm@24300
   336
            Const ("op &", _) => (*conjunction*)
wenzelm@24300
   337
                cnf_aux (th RS conjunct1, cnf_aux (th RS conjunct2, ths))
wenzelm@24300
   338
          | Const ("All", _) => (*universal quantifier*)
paulson@24937
   339
                let val (th',ctxt') = freeze_spec th (!ctxtr)
paulson@24937
   340
                in  ctxtr := ctxt'; cnf_aux (th', ths) end
wenzelm@24300
   341
          | Const ("Ex", _) =>
wenzelm@24300
   342
              (*existential quantifier: Insert Skolem functions*)
blanchet@37410
   343
              cnf_aux (apply_skolem_theorem (th, skolem_ths), ths)
wenzelm@24300
   344
          | Const ("op |", _) =>
wenzelm@24300
   345
              (*Disjunction of P, Q: Create new goal of proving ?P | ?Q and solve it using
wenzelm@24300
   346
                all combinations of converting P, Q to CNF.*)
wenzelm@24300
   347
              let val tac =
wenzelm@37781
   348
                  Misc_Legacy.METAHYPS (resop cnf_nil) 1 THEN
wenzelm@37781
   349
                   (fn st' => st' |> Misc_Legacy.METAHYPS (resop cnf_nil) 1)
wenzelm@24300
   350
              in  Seq.list_of (tac (th RS disj_forward)) @ ths  end
wenzelm@32262
   351
          | _ => nodups ctxt th :: ths  (*no work to do*)
paulson@19154
   352
      and cnf_nil th = cnf_aux (th,[])
paulson@24937
   353
      val cls = 
wenzelm@32960
   354
            if too_many_clauses (SOME ctxt) (concl_of th)
wenzelm@32960
   355
            then (trace_msg (fn () => "cnf is ignoring: " ^ Display.string_of_thm ctxt th); ths)
wenzelm@32960
   356
            else cnf_aux (th,ths)
paulson@24937
   357
  in  (cls, !ctxtr)  end;
paulson@22515
   358
blanchet@37410
   359
fun make_cnf skolem_ths th ctxt = cnf skolem_ths ctxt (th, []);
paulson@20417
   360
paulson@20417
   361
(*Generalization, removal of redundant equalities, removal of tautologies.*)
paulson@24937
   362
fun finish_cnf ths = filter (not o is_taut) (map refl_clause ths);
paulson@9840
   363
paulson@9840
   364
paulson@15579
   365
(**** Generation of contrapositives ****)
paulson@9840
   366
wenzelm@24300
   367
fun is_left (Const ("Trueprop", _) $
paulson@21102
   368
               (Const ("op |", _) $ (Const ("op |", _) $ _ $ _) $ _)) = true
paulson@21102
   369
  | is_left _ = false;
wenzelm@24300
   370
paulson@15579
   371
(*Associate disjuctions to right -- make leftmost disjunct a LITERAL*)
wenzelm@24300
   372
fun assoc_right th =
paulson@21102
   373
  if is_left (prop_of th) then assoc_right (th RS disj_assoc)
paulson@21102
   374
  else th;
paulson@9840
   375
paulson@15579
   376
(*Must check for negative literal first!*)
paulson@15579
   377
val clause_rules = [disj_assoc, make_neg_rule, make_pos_rule];
paulson@9840
   378
paulson@15579
   379
(*For ordinary resolution. *)
paulson@15579
   380
val resolution_clause_rules = [disj_assoc, make_neg_rule', make_pos_rule'];
paulson@9840
   381
paulson@15579
   382
(*Create a goal or support clause, conclusing False*)
paulson@15579
   383
fun make_goal th =   (*Must check for negative literal first!*)
paulson@15579
   384
    make_goal (tryres(th, clause_rules))
paulson@15579
   385
  handle THM _ => tryres(th, [make_neg_goal, make_pos_goal]);
paulson@9840
   386
paulson@15579
   387
(*Sort clauses by number of literals*)
paulson@15579
   388
fun fewerlits(th1,th2) = nliterals(prop_of th1) < nliterals(prop_of th2);
paulson@9840
   389
paulson@18389
   390
fun sort_clauses ths = sort (make_ord fewerlits) ths;
paulson@9840
   391
paulson@15581
   392
(*True if the given type contains bool anywhere*)
paulson@15581
   393
fun has_bool (Type("bool",_)) = true
paulson@15581
   394
  | has_bool (Type(_, Ts)) = exists has_bool Ts
paulson@15581
   395
  | has_bool _ = false;
wenzelm@24300
   396
wenzelm@24300
   397
(*Is the string the name of a connective? Really only | and Not can remain,
wenzelm@24300
   398
  since this code expects to be called on a clause form.*)
wenzelm@19875
   399
val is_conn = member (op =)
wenzelm@24300
   400
    ["Trueprop", "op &", "op |", "op -->", "Not",
haftmann@37388
   401
     "All", "Ex", @{const_name Ball}, @{const_name Bex}];
paulson@15613
   402
wenzelm@24300
   403
(*True if the term contains a function--not a logical connective--where the type
paulson@20524
   404
  of any argument contains bool.*)
wenzelm@24300
   405
val has_bool_arg_const =
paulson@15613
   406
    exists_Const
paulson@15613
   407
      (fn (c,T) => not(is_conn c) andalso exists (has_bool) (binder_types T));
paulson@22381
   408
wenzelm@24300
   409
(*A higher-order instance of a first-order constant? Example is the definition of
haftmann@34974
   410
  one, 1, at a function type in theory SetsAndFunctions.*)
wenzelm@24300
   411
fun higher_inst_const thy (c,T) =
paulson@22381
   412
  case binder_types T of
paulson@22381
   413
      [] => false (*not a function type, OK*)
paulson@22381
   414
    | Ts => length (binder_types (Sign.the_const_type thy c)) <> length Ts;
paulson@22381
   415
paulson@24742
   416
(*Returns false if any Vars in the theorem mention type bool.
paulson@21102
   417
  Also rejects functions whose arguments are Booleans or other functions.*)
paulson@22381
   418
fun is_fol_term thy t =
paulson@22381
   419
    Term.is_first_order ["all","All","Ex"] t andalso
wenzelm@29267
   420
    not (exists_subterm (fn Var (_, T) => has_bool T | _ => false) t  orelse
wenzelm@24300
   421
         has_bool_arg_const t  orelse
wenzelm@24300
   422
         exists_Const (higher_inst_const thy) t orelse
wenzelm@24300
   423
         has_meta_conn t);
paulson@19204
   424
paulson@21102
   425
fun rigid t = not (is_Var (head_of t));
paulson@21102
   426
paulson@21102
   427
fun ok4horn (Const ("Trueprop",_) $ (Const ("op |", _) $ t $ _)) = rigid t
paulson@21102
   428
  | ok4horn (Const ("Trueprop",_) $ t) = rigid t
paulson@21102
   429
  | ok4horn _ = false;
paulson@21102
   430
paulson@15579
   431
(*Create a meta-level Horn clause*)
wenzelm@24300
   432
fun make_horn crules th =
wenzelm@24300
   433
  if ok4horn (concl_of th)
paulson@21102
   434
  then make_horn crules (tryres(th,crules)) handle THM _ => th
paulson@21102
   435
  else th;
paulson@9840
   436
paulson@16563
   437
(*Generate Horn clauses for all contrapositives of a clause. The input, th,
paulson@16563
   438
  is a HOL disjunction.*)
wenzelm@33339
   439
fun add_contras crules th hcs =
paulson@15579
   440
  let fun rots (0,th) = hcs
wenzelm@24300
   441
        | rots (k,th) = zero_var_indexes (make_horn crules th) ::
wenzelm@24300
   442
                        rots(k-1, assoc_right (th RS disj_comm))
paulson@15862
   443
  in case nliterals(prop_of th) of
wenzelm@24300
   444
        1 => th::hcs
paulson@15579
   445
      | n => rots(n, assoc_right th)
paulson@15579
   446
  end;
paulson@9840
   447
paulson@15579
   448
(*Use "theorem naming" to label the clauses*)
paulson@15579
   449
fun name_thms label =
wenzelm@33339
   450
    let fun name1 th (k, ths) =
wenzelm@27865
   451
          (k-1, Thm.put_name_hint (label ^ string_of_int k) th :: ths)
wenzelm@33339
   452
    in  fn ths => #2 (fold_rev name1 ths (length ths, []))  end;
paulson@9840
   453
paulson@16563
   454
(*Is the given disjunction an all-negative support clause?*)
paulson@15579
   455
fun is_negative th = forall (not o #1) (literals (prop_of th));
paulson@9840
   456
wenzelm@33317
   457
val neg_clauses = filter is_negative;
paulson@9840
   458
paulson@9840
   459
paulson@15579
   460
(***** MESON PROOF PROCEDURE *****)
paulson@9840
   461
paulson@15579
   462
fun rhyps (Const("==>",_) $ (Const("Trueprop",_) $ A) $ phi,
wenzelm@24300
   463
           As) = rhyps(phi, A::As)
paulson@15579
   464
  | rhyps (_, As) = As;
paulson@9840
   465
paulson@15579
   466
(** Detecting repeated assumptions in a subgoal **)
paulson@9840
   467
paulson@15579
   468
(*The stringtree detects repeated assumptions.*)
wenzelm@33245
   469
fun ins_term t net = Net.insert_term (op aconv) (t, t) net;
paulson@9840
   470
paulson@15579
   471
(*detects repetitions in a list of terms*)
paulson@15579
   472
fun has_reps [] = false
paulson@15579
   473
  | has_reps [_] = false
paulson@15579
   474
  | has_reps [t,u] = (t aconv u)
wenzelm@33245
   475
  | has_reps ts = (fold ins_term ts Net.empty; false) handle Net.INSERT => true;
paulson@9840
   476
paulson@15579
   477
(*Like TRYALL eq_assume_tac, but avoids expensive THEN calls*)
paulson@18508
   478
fun TRYING_eq_assume_tac 0 st = Seq.single st
paulson@18508
   479
  | TRYING_eq_assume_tac i st =
wenzelm@31945
   480
       TRYING_eq_assume_tac (i-1) (Thm.eq_assumption i st)
paulson@18508
   481
       handle THM _ => TRYING_eq_assume_tac (i-1) st;
paulson@18508
   482
paulson@18508
   483
fun TRYALL_eq_assume_tac st = TRYING_eq_assume_tac (nprems_of st) st;
paulson@9840
   484
paulson@15579
   485
(*Loop checking: FAIL if trying to prove the same thing twice
paulson@15579
   486
  -- if *ANY* subgoal has repeated literals*)
paulson@15579
   487
fun check_tac st =
paulson@15579
   488
  if exists (fn prem => has_reps (rhyps(prem,[]))) (prems_of st)
paulson@15579
   489
  then  Seq.empty  else  Seq.single st;
paulson@9840
   490
paulson@9840
   491
paulson@15579
   492
(* net_resolve_tac actually made it slower... *)
paulson@15579
   493
fun prolog_step_tac horns i =
paulson@15579
   494
    (assume_tac i APPEND resolve_tac horns i) THEN check_tac THEN
paulson@18508
   495
    TRYALL_eq_assume_tac;
paulson@9840
   496
paulson@9840
   497
(*Sums the sizes of the subgoals, ignoring hypotheses (ancestors)*)
wenzelm@33339
   498
fun addconcl prem sz = size_of_term (Logic.strip_assums_concl prem) + sz;
paulson@15579
   499
wenzelm@33339
   500
fun size_of_subgoals st = fold_rev addconcl (prems_of st) 0;
paulson@15579
   501
paulson@9840
   502
paulson@9840
   503
(*Negation Normal Form*)
paulson@9840
   504
val nnf_rls = [imp_to_disjD, iff_to_disjD, not_conjD, not_disjD,
wenzelm@9869
   505
               not_impD, not_iffD, not_allD, not_exD, not_notD];
paulson@15581
   506
paulson@21102
   507
fun ok4nnf (Const ("Trueprop",_) $ (Const ("Not", _) $ t)) = rigid t
paulson@21102
   508
  | ok4nnf (Const ("Trueprop",_) $ t) = rigid t
paulson@21102
   509
  | ok4nnf _ = false;
paulson@21102
   510
wenzelm@32262
   511
fun make_nnf1 ctxt th =
wenzelm@24300
   512
  if ok4nnf (concl_of th)
wenzelm@32262
   513
  then make_nnf1 ctxt (tryres(th, nnf_rls))
paulson@28174
   514
    handle THM ("tryres", _, _) =>
wenzelm@32262
   515
        forward_res ctxt (make_nnf1 ctxt)
wenzelm@9869
   516
           (tryres(th, [conj_forward,disj_forward,all_forward,ex_forward]))
paulson@28174
   517
    handle THM ("tryres", _, _) => th
paulson@21102
   518
  else th;
paulson@9840
   519
wenzelm@24300
   520
(*The simplification removes defined quantifiers and occurrences of True and False.
paulson@20018
   521
  nnf_ss also includes the one-point simprocs,
paulson@18405
   522
  which are needed to avoid the various one-point theorems from generating junk clauses.*)
paulson@19894
   523
val nnf_simps =
blanchet@37539
   524
  @{thms simp_implies_def Ex1_def Ball_def Bex_def if_True if_False if_cancel
blanchet@37539
   525
         if_eq_cancel cases_simp}
blanchet@37539
   526
val nnf_extra_simps = @{thms split_ifs ex_simps all_simps simp_thms}
paulson@18405
   527
paulson@18405
   528
val nnf_ss =
wenzelm@24300
   529
  HOL_basic_ss addsimps nnf_extra_simps
wenzelm@24040
   530
    addsimprocs [defALL_regroup,defEX_regroup, @{simproc neq}, @{simproc let_simp}];
paulson@15872
   531
wenzelm@32262
   532
fun make_nnf ctxt th = case prems_of th of
paulson@21050
   533
    [] => th |> rewrite_rule (map safe_mk_meta_eq nnf_simps)
wenzelm@24300
   534
             |> simplify nnf_ss
wenzelm@32262
   535
             |> make_nnf1 ctxt
paulson@21050
   536
  | _ => raise THM ("make_nnf: premises in argument", 0, [th]);
paulson@15581
   537
paulson@15965
   538
(*Pull existential quantifiers to front. This accomplishes Skolemization for
paulson@15965
   539
  clauses that arise from a subgoal.*)
wenzelm@32262
   540
fun skolemize1 ctxt th =
paulson@20134
   541
  if not (has_conns ["Ex"] (prop_of th)) then th
wenzelm@32262
   542
  else (skolemize1 ctxt (tryres(th, [choice, conj_exD1, conj_exD2,
quigley@15679
   543
                              disj_exD, disj_exD1, disj_exD2])))
paulson@28174
   544
    handle THM ("tryres", _, _) =>
wenzelm@32262
   545
        skolemize1 ctxt (forward_res ctxt (skolemize1 ctxt)
wenzelm@9869
   546
                   (tryres (th, [conj_forward, disj_forward, all_forward])))
paulson@28174
   547
    handle THM ("tryres", _, _) => 
wenzelm@32262
   548
        forward_res ctxt (skolemize1 ctxt) (rename_bvs_RS th ex_forward);
paulson@29684
   549
wenzelm@32262
   550
fun skolemize ctxt th = skolemize1 ctxt (make_nnf ctxt th);
paulson@9840
   551
wenzelm@32262
   552
fun skolemize_nnf_list _ [] = []
wenzelm@32262
   553
  | skolemize_nnf_list ctxt (th::ths) =
wenzelm@32262
   554
      skolemize ctxt th :: skolemize_nnf_list ctxt ths
paulson@25710
   555
      handle THM _ => (*RS can fail if Unify.search_bound is too small*)
wenzelm@32955
   556
       (trace_msg (fn () => "Failed to Skolemize " ^ Display.string_of_thm ctxt th);
wenzelm@32262
   557
        skolemize_nnf_list ctxt ths);
paulson@25694
   558
wenzelm@33339
   559
fun add_clauses th cls =
wenzelm@36603
   560
  let val ctxt0 = Variable.global_thm_context th
wenzelm@33339
   561
      val (cnfs, ctxt) = make_cnf [] th ctxt0
paulson@24937
   562
  in Variable.export ctxt ctxt0 cnfs @ cls end;
paulson@9840
   563
paulson@9840
   564
(*Make clauses from a list of theorems, previously Skolemized and put into nnf.
paulson@9840
   565
  The resulting clauses are HOL disjunctions.*)
blanchet@35869
   566
fun make_clauses_unsorted ths = fold_rev add_clauses ths [];
blanchet@35869
   567
val make_clauses = sort_clauses o make_clauses_unsorted;
quigley@15773
   568
paulson@16563
   569
(*Convert a list of clauses (disjunctions) to Horn clauses (contrapositives)*)
wenzelm@9869
   570
fun make_horns ths =
paulson@9840
   571
    name_thms "Horn#"
wenzelm@33339
   572
      (distinct Thm.eq_thm_prop (fold_rev (add_contras clause_rules) ths []));
paulson@9840
   573
paulson@9840
   574
(*Could simply use nprems_of, which would count remaining subgoals -- no
paulson@9840
   575
  discrimination as to their size!  With BEST_FIRST, fails for problem 41.*)
paulson@9840
   576
wenzelm@9869
   577
fun best_prolog_tac sizef horns =
paulson@9840
   578
    BEST_FIRST (has_fewer_prems 1, sizef) (prolog_step_tac horns 1);
paulson@9840
   579
wenzelm@9869
   580
fun depth_prolog_tac horns =
paulson@9840
   581
    DEPTH_FIRST (has_fewer_prems 1) (prolog_step_tac horns 1);
paulson@9840
   582
paulson@9840
   583
(*Return all negative clauses, as possible goal clauses*)
paulson@9840
   584
fun gocls cls = name_thms "Goal#" (map make_goal (neg_clauses cls));
paulson@9840
   585
wenzelm@32262
   586
fun skolemize_prems_tac ctxt prems =
wenzelm@32262
   587
    cut_facts_tac (skolemize_nnf_list ctxt prems) THEN'
paulson@9840
   588
    REPEAT o (etac exE);
paulson@9840
   589
paulson@22546
   590
(*Basis of all meson-tactics.  Supplies cltac with clauses: HOL disjunctions.
paulson@22546
   591
  Function mkcl converts theorems to clauses.*)
wenzelm@32262
   592
fun MESON mkcl cltac ctxt i st =
paulson@16588
   593
  SELECT_GOAL
wenzelm@35625
   594
    (EVERY [Object_Logic.atomize_prems_tac 1,
paulson@23552
   595
            rtac ccontr 1,
wenzelm@32283
   596
            Subgoal.FOCUS (fn {context = ctxt', prems = negs, ...} =>
wenzelm@32262
   597
                      EVERY1 [skolemize_prems_tac ctxt negs,
wenzelm@32283
   598
                              Subgoal.FOCUS (cltac o mkcl o #prems) ctxt']) ctxt 1]) i st
wenzelm@24300
   599
  handle THM _ => no_tac st;    (*probably from make_meta_clause, not first-order*)
paulson@9840
   600
paulson@9840
   601
(** Best-first search versions **)
paulson@9840
   602
paulson@16563
   603
(*ths is a list of additional clauses (HOL disjunctions) to use.*)
wenzelm@9869
   604
fun best_meson_tac sizef =
wenzelm@24300
   605
  MESON make_clauses
paulson@22546
   606
    (fn cls =>
paulson@9840
   607
         THEN_BEST_FIRST (resolve_tac (gocls cls) 1)
paulson@9840
   608
                         (has_fewer_prems 1, sizef)
paulson@9840
   609
                         (prolog_step_tac (make_horns cls) 1));
paulson@9840
   610
paulson@9840
   611
(*First, breaks the goal into independent units*)
wenzelm@32262
   612
fun safe_best_meson_tac ctxt =
wenzelm@32262
   613
     SELECT_GOAL (TRY (safe_tac (claset_of ctxt)) THEN
wenzelm@32262
   614
                  TRYALL (best_meson_tac size_of_subgoals ctxt));
paulson@9840
   615
paulson@9840
   616
(** Depth-first search version **)
paulson@9840
   617
paulson@9840
   618
val depth_meson_tac =
paulson@22546
   619
  MESON make_clauses
paulson@22546
   620
    (fn cls => EVERY [resolve_tac (gocls cls) 1, depth_prolog_tac (make_horns cls)]);
paulson@9840
   621
paulson@9840
   622
paulson@9840
   623
(** Iterative deepening version **)
paulson@9840
   624
paulson@9840
   625
(*This version does only one inference per call;
paulson@9840
   626
  having only one eq_assume_tac speeds it up!*)
wenzelm@9869
   627
fun prolog_step_tac' horns =
paulson@9840
   628
    let val (horn0s, hornps) = (*0 subgoals vs 1 or more*)
paulson@9840
   629
            take_prefix Thm.no_prems horns
paulson@9840
   630
        val nrtac = net_resolve_tac horns
paulson@9840
   631
    in  fn i => eq_assume_tac i ORELSE
paulson@9840
   632
                match_tac horn0s i ORELSE  (*no backtracking if unit MATCHES*)
paulson@9840
   633
                ((assume_tac i APPEND nrtac i) THEN check_tac)
paulson@9840
   634
    end;
paulson@9840
   635
wenzelm@9869
   636
fun iter_deepen_prolog_tac horns =
paulson@9840
   637
    ITER_DEEPEN (has_fewer_prems 1) (prolog_step_tac' horns);
paulson@9840
   638
wenzelm@32262
   639
fun iter_deepen_meson_tac ctxt ths = ctxt |> MESON make_clauses
wenzelm@32091
   640
  (fn cls =>
wenzelm@32091
   641
    (case (gocls (cls @ ths)) of
wenzelm@32091
   642
      [] => no_tac  (*no goal clauses*)
wenzelm@32091
   643
    | goes =>
wenzelm@32091
   644
        let
wenzelm@32091
   645
          val horns = make_horns (cls @ ths)
wenzelm@32955
   646
          val _ = trace_msg (fn () =>
wenzelm@32091
   647
            cat_lines ("meson method called:" ::
wenzelm@32262
   648
              map (Display.string_of_thm ctxt) (cls @ ths) @
wenzelm@32262
   649
              ["clauses:"] @ map (Display.string_of_thm ctxt) horns))
wenzelm@32091
   650
        in THEN_ITER_DEEPEN (resolve_tac goes 1) (has_fewer_prems 1) (prolog_step_tac' horns) end));
paulson@9840
   651
wenzelm@32262
   652
fun meson_tac ctxt ths =
wenzelm@32262
   653
  SELECT_GOAL (TRY (safe_tac (claset_of ctxt)) THEN TRYALL (iter_deepen_meson_tac ctxt ths));
wenzelm@9869
   654
wenzelm@9869
   655
paulson@14813
   656
(**** Code to support ordinary resolution, rather than Model Elimination ****)
paulson@14744
   657
wenzelm@24300
   658
(*Convert a list of clauses (disjunctions) to meta-level clauses (==>),
paulson@15008
   659
  with no contrapositives, for ordinary resolution.*)
paulson@14744
   660
paulson@14744
   661
(*Rules to convert the head literal into a negated assumption. If the head
paulson@14744
   662
  literal is already negated, then using notEfalse instead of notEfalse'
paulson@14744
   663
  prevents a double negation.*)
wenzelm@27239
   664
val notEfalse = read_instantiate @{context} [(("R", 0), "False")] notE;
paulson@14744
   665
val notEfalse' = rotate_prems 1 notEfalse;
paulson@14744
   666
wenzelm@24300
   667
fun negated_asm_of_head th =
paulson@14744
   668
    th RS notEfalse handle THM _ => th RS notEfalse';
paulson@14744
   669
paulson@26066
   670
(*Converting one theorem from a disjunction to a meta-level clause*)
paulson@26066
   671
fun make_meta_clause th =
wenzelm@33832
   672
  let val (fth,thaw) = Drule.legacy_freeze_thaw_robust th
paulson@26066
   673
  in  
wenzelm@35845
   674
      (zero_var_indexes o Thm.varifyT_global o thaw 0 o 
paulson@26066
   675
       negated_asm_of_head o make_horn resolution_clause_rules) fth
paulson@26066
   676
  end;
wenzelm@24300
   677
paulson@14744
   678
fun make_meta_clauses ths =
paulson@14744
   679
    name_thms "MClause#"
wenzelm@22360
   680
      (distinct Thm.eq_thm_prop (map make_meta_clause ths));
paulson@14744
   681
paulson@14744
   682
(*Permute a rule's premises to move the i-th premise to the last position.*)
paulson@14744
   683
fun make_last i th =
wenzelm@24300
   684
  let val n = nprems_of th
wenzelm@24300
   685
  in  if 1 <= i andalso i <= n
paulson@14744
   686
      then Thm.permute_prems (i-1) 1 th
paulson@15118
   687
      else raise THM("select_literal", i, [th])
paulson@14744
   688
  end;
paulson@14744
   689
paulson@14744
   690
(*Maps a rule that ends "... ==> P ==> False" to "... ==> ~P" while suppressing
paulson@14744
   691
  double-negations.*)
wenzelm@35410
   692
val negate_head = rewrite_rule [@{thm atomize_not}, not_not RS eq_reflection];
paulson@14744
   693
paulson@14744
   694
(*Maps the clause  [P1,...Pn]==>False to [P1,...,P(i-1),P(i+1),...Pn] ==> ~P*)
paulson@14744
   695
fun select_literal i cl = negate_head (make_last i cl);
paulson@14744
   696
paulson@18508
   697
paulson@14813
   698
(*Top-level Skolemization. Allows part of the conversion to clauses to be
wenzelm@24300
   699
  expressed as a tactic (or Isar method).  Each assumption of the selected
paulson@14813
   700
  goal is converted to NNF and then its existential quantifiers are pulled
wenzelm@24300
   701
  to the front. Finally, all existential quantifiers are eliminated,
paulson@14813
   702
  leaving !!-quantified variables. Perhaps Safe_tac should follow, but it
paulson@14813
   703
  might generate many subgoals.*)
mengj@18194
   704
wenzelm@32262
   705
fun skolemize_tac ctxt = SUBGOAL (fn (goal, i) =>
wenzelm@32262
   706
  let val ts = Logic.strip_assums_hyp goal
wenzelm@24300
   707
  in
wenzelm@32262
   708
    EVERY'
wenzelm@37781
   709
     [Misc_Legacy.METAHYPS (fn hyps =>
wenzelm@32262
   710
        (cut_facts_tac (skolemize_nnf_list ctxt hyps) 1
wenzelm@32262
   711
          THEN REPEAT (etac exE 1))),
wenzelm@32262
   712
      REPEAT_DETERM_N (length ts) o (etac thin_rl)] i
wenzelm@32262
   713
  end);
mengj@18194
   714
paulson@9840
   715
end;