src/HOL/Tools/Nitpick/nitpick_model.ML
author blanchet
Thu Oct 22 14:51:47 2009 +0200 (2009-10-22)
changeset 33192 08a39a957ed7
child 33202 0183ab3ca7b4
permissions -rw-r--r--
added Nitpick's theory and ML files to Isabelle/HOL;
the examples and the documentation are on their way.
     1 (*  Title:      HOL/Nitpick/Tools/nitpick_model.ML
     2     Author:     Jasmin Blanchette, TU Muenchen
     3     Copyright   2009
     4 
     5 Model reconstruction for Nitpick.
     6 *)
     7 
     8 signature NITPICK_MODEL =
     9 sig
    10   type scope = NitpickScope.scope
    11   type rep = NitpickRep.rep
    12   type nut = NitpickNut.nut
    13 
    14   type params = {
    15     show_skolems: bool,
    16     show_datatypes: bool,
    17     show_consts: bool}
    18 
    19   structure NameTable : TABLE
    20 
    21   val tuple_list_for_name :
    22     nut NameTable.table -> Kodkod.raw_bound list -> nut -> int list list
    23   val reconstruct_hol_model :
    24     params -> scope -> (term option * int list) list -> styp list -> nut list
    25     -> nut list -> nut list -> nut NameTable.table -> Kodkod.raw_bound list
    26     -> Pretty.T * bool
    27   val prove_hol_model :
    28     scope -> Time.time option -> nut list -> nut list -> nut NameTable.table
    29     -> Kodkod.raw_bound list -> term -> bool option
    30 end;
    31 
    32 structure NitpickModel : NITPICK_MODEL =
    33 struct
    34 
    35 open NitpickUtil
    36 open NitpickHOL
    37 open NitpickScope
    38 open NitpickPeephole
    39 open NitpickRep
    40 open NitpickNut
    41 
    42 type params = {
    43   show_skolems: bool,
    44   show_datatypes: bool,
    45   show_consts: bool}
    46 
    47 val unknown = "?"
    48 val unrep = "\<dots>"
    49 val maybe_mixfix = "_\<^sup>?"
    50 val base_mixfix = "_\<^bsub>base\<^esub>"
    51 val step_mixfix = "_\<^bsub>step\<^esub>"
    52 val abs_mixfix = "\<guillemotleft>_\<guillemotright>"
    53 val non_opt_name = nitpick_prefix ^ "non_opt"
    54 
    55 (* string -> typ -> int -> string *)
    56 fun atom_name prefix (T as Type (s, _)) j =
    57     prefix ^ substring (short_name s, 0, 1) ^ nat_subscript (j + 1)
    58   | atom_name prefix (T as TFree (s, _)) j =
    59     prefix ^ perhaps (try (unprefix "'")) s ^ nat_subscript (j + 1)
    60   | atom_name _ T _ = raise TYPE ("NitpickModel.atom_name", [T], [])
    61 (* bool -> typ -> int -> term *)
    62 fun atom for_auto T j =
    63   if for_auto then
    64     Free (atom_name (hd (space_explode "." nitpick_prefix)) T j, T)
    65   else
    66     Const (atom_name "" T j, T)
    67 
    68 (* nut NameTable.table -> Kodkod.raw_bound list -> nut -> int list list *)
    69 fun tuple_list_for_name rel_table bounds name =
    70   the (AList.lookup (op =) bounds (the_rel rel_table name)) handle NUT _ => [[]]
    71 
    72 (* term -> term *)
    73 fun unbox_term (Const (@{const_name FunBox}, _) $ t1) = unbox_term t1
    74   | unbox_term (Const (@{const_name PairBox},
    75                        Type ("fun", [T1, Type ("fun", [T2, T3])])) $ t1 $ t2) =
    76     let val Ts = map unbox_type [T1, T2] in
    77       Const (@{const_name Pair}, Ts ---> Type ("*", Ts))
    78       $ unbox_term t1 $ unbox_term t2
    79     end
    80   | unbox_term (Const (s, T)) = Const (s, unbox_type T)
    81   | unbox_term (t1 $ t2) = unbox_term t1 $ unbox_term t2
    82   | unbox_term (Free (s, T)) = Free (s, unbox_type T)
    83   | unbox_term (Var (x, T)) = Var (x, unbox_type T)
    84   | unbox_term (Bound j) = Bound j
    85   | unbox_term (Abs (s, T, t')) = Abs (s, unbox_type T, unbox_term t')
    86 
    87 (* typ -> typ -> (typ * typ) * (typ * typ) *)
    88 fun factor_out_types (T1 as Type ("*", [T11, T12]))
    89                      (T2 as Type ("*", [T21, T22])) =
    90     let val (n1, n2) = pairself num_factors_in_type (T11, T21) in
    91       if n1 = n2 then
    92         let
    93           val ((T11', opt_T12'), (T21', opt_T22')) = factor_out_types T12 T22
    94         in
    95           ((Type ("*", [T11, T11']), opt_T12'),
    96            (Type ("*", [T21, T21']), opt_T22'))
    97         end
    98       else if n1 < n2 then
    99         case factor_out_types T1 T21 of
   100           (p1, (T21', NONE)) => (p1, (T21', SOME T22))
   101         | (p1, (T21', SOME T22')) =>
   102           (p1, (T21', SOME (Type ("*", [T22', T22]))))
   103       else
   104         swap (factor_out_types T2 T1)
   105     end
   106   | factor_out_types (Type ("*", [T11, T12])) T2 = ((T11, SOME T12), (T2, NONE))
   107   | factor_out_types T1 (Type ("*", [T21, T22])) = ((T1, NONE), (T21, SOME T22))
   108   | factor_out_types T1 T2 = ((T1, NONE), (T2, NONE))
   109 
   110 (* bool -> typ -> typ -> (term * term) list -> term *)
   111 fun make_plain_fun maybe_opt T1 T2 =
   112   let
   113     (* typ -> typ -> (term * term) list -> term *)
   114     fun aux T1 T2 [] =
   115         Const (if maybe_opt orelse T2 <> bool_T then @{const_name undefined}
   116                else non_opt_name, T1 --> T2)
   117       | aux T1 T2 ((t1, t2) :: ps) =
   118         Const (@{const_name fun_upd}, [T1 --> T2, T1, T2] ---> T1 --> T2)
   119         $ aux T1 T2 ps $ t1 $ t2
   120   in aux T1 T2 o rev end
   121 (* term -> bool *)
   122 fun is_plain_fun (Const (s, _)) = s mem [@{const_name undefined}, non_opt_name]
   123   | is_plain_fun (Const (@{const_name fun_upd}, _) $ t0 $ _ $ _) =
   124     is_plain_fun t0
   125   | is_plain_fun _ = false
   126 (* term -> bool * (term list * term list) *)
   127 val dest_plain_fun =
   128   let
   129     (* term -> term list * term list *)
   130     fun aux (Const (s, _)) = (s <> non_opt_name, ([], []))
   131       | aux (Const (@{const_name fun_upd}, _) $ t0 $ t1 $ t2) =
   132         let val (s, (ts1, ts2)) = aux t0 in (s, (t1 :: ts1, t2 :: ts2)) end
   133       | aux t = raise TERM ("NitpickModel.dest_plain_fun", [t])
   134   in apsnd (pairself rev) o aux end
   135 
   136 (* typ -> term -> term list * term *)
   137 fun break_in_two (Type ("*", [T1, T2]))
   138                  (Const (@{const_name Pair}, _) $ t1 $ t2) =
   139     break_in_two T2 t2 |>> cons t1
   140   | break_in_two _ (Const (@{const_name Pair}, _) $ t1 $ t2) = ([t1], t2)
   141   | break_in_two _ t = raise TERM ("NitpickModel.break_in_two", [t])
   142 (* typ -> term -> term -> term *)
   143 fun pair_up (Type ("*", [T1', T2']))
   144             (t1 as Const (@{const_name Pair},
   145                           Type ("fun", [_, Type ("fun", [_, T1])])) $ t11 $ t12)
   146             t2 =
   147     if T1 = T1' then HOLogic.mk_prod (t1, t2)
   148     else HOLogic.mk_prod (t11, pair_up T2' t12 t2)
   149   | pair_up _ t1 t2 = HOLogic.mk_prod (t1, t2)
   150 (* typ -> term -> term list * term list -> (term * term) list*)
   151 fun multi_pair_up T1 t1 (ts2, ts3) = map2 (pair o pair_up T1 t1) ts2 ts3
   152 
   153 (* typ -> typ -> typ -> term -> term *)
   154 fun typecast_fun (Type ("fun", [T1', T2'])) T1 T2 t =
   155     let
   156       (* typ -> typ -> typ -> term -> term *)
   157       fun do_curry T1a T1b T2 t =
   158         let
   159           val (maybe_opt, ps) = dest_plain_fun t
   160           val ps =
   161             ps |>> map (break_in_two T1a #>> mk_flat_tuple T1a)
   162                |> uncurry (map2 (fn (t1a, t1b) => fn t2 => (t1a, (t1b, t2))))
   163                |> AList.coalesce (op =)
   164                |> map (apsnd (make_plain_fun maybe_opt T1b T2))
   165         in make_plain_fun maybe_opt T1a (T1b --> T2) ps end
   166       (* typ -> typ -> term -> term *)
   167       and do_uncurry T1 T2 t =
   168         let
   169           val (maybe_opt, tsp) = dest_plain_fun t
   170           val ps =
   171             tsp |> op ~~
   172                 |> maps (fn (t1, t2) =>
   173                             multi_pair_up T1 t1 (snd (dest_plain_fun t2)))
   174         in make_plain_fun maybe_opt T1 T2 ps end
   175       (* typ -> typ -> typ -> typ -> term -> term *)
   176       and do_arrow T1' T2' _ _ (Const (s, _)) = Const (s, T1' --> T2')
   177         | do_arrow T1' T2' T1 T2
   178                    (Const (@{const_name fun_upd}, _) $ t0 $ t1 $ t2) =
   179           Const (@{const_name fun_upd},
   180                  [T1' --> T2', T1', T2'] ---> T1' --> T2')
   181           $ do_arrow T1' T2' T1 T2 t0 $ do_term T1' T1 t1 $ do_term T2' T2 t2
   182         | do_arrow _ _ _ _ t =
   183           raise TERM ("NitpickModel.typecast_fun.do_arrow", [t])
   184       and do_fun T1' T2' T1 T2 t =
   185         case factor_out_types T1' T1 of
   186           ((_, NONE), (_, NONE)) => t |> do_arrow T1' T2' T1 T2
   187         | ((_, NONE), (T1a, SOME T1b)) =>
   188           t |> do_curry T1a T1b T2 |> do_arrow T1' T2' T1a (T1b --> T2)
   189         | ((T1a', SOME T1b'), (_, NONE)) =>
   190           t |> do_arrow T1a' (T1b' --> T2') T1 T2 |> do_uncurry T1' T2'
   191         | _ => raise TYPE ("NitpickModel.typecast_fun.do_fun", [T1, T1'], [])
   192       (* typ -> typ -> term -> term *)
   193       and do_term (Type ("fun", [T1', T2'])) (Type ("fun", [T1, T2])) t =
   194           do_fun T1' T2' T1 T2 t
   195         | do_term (T' as Type ("*", Ts' as [T1', T2'])) (Type ("*", [T1, T2]))
   196                   (Const (@{const_name Pair}, _) $ t1 $ t2) =
   197           Const (@{const_name Pair}, Ts' ---> T')
   198           $ do_term T1' T1 t1 $ do_term T2' T2 t2
   199         | do_term T' T t =
   200           if T = T' then t
   201           else raise TYPE ("NitpickModel.typecast_fun.do_term", [T, T'], [])
   202     in if T1' = T1 andalso T2' = T2 then t else do_fun T1' T2' T1 T2 t end
   203   | typecast_fun T' _ _ _ = raise TYPE ("NitpickModel.typecast_fun", [T'], [])
   204 
   205 (* term -> string *)
   206 fun truth_const_sort_key @{const True} = "0"
   207   | truth_const_sort_key @{const False} = "2"
   208   | truth_const_sort_key _ = "1"
   209 
   210 (* typ -> term list -> term *)
   211 fun mk_tuple (Type ("*", [T1, T2])) ts =
   212     HOLogic.mk_prod (mk_tuple T1 ts,
   213         mk_tuple T2 (List.drop (ts, length (HOLogic.flatten_tupleT T1))))
   214   | mk_tuple _ (t :: _) = t
   215 
   216 (* string * string * string * string -> scope -> nut list -> nut list
   217    -> nut list -> nut NameTable.table -> Kodkod.raw_bound list -> typ -> typ
   218    -> rep -> int list list -> term *)
   219 fun reconstruct_term (maybe_name, base_name, step_name, abs_name)
   220         ({ext_ctxt as {thy, ctxt, ...}, card_assigns, datatypes, ofs, ...}
   221          : scope) sel_names rel_table bounds =
   222   let
   223     val for_auto = (maybe_name = "")
   224     (* bool -> typ -> typ -> (term * term) list -> term *)
   225     fun make_set maybe_opt T1 T2 =
   226       let
   227         val empty_const = Const (@{const_name Set.empty}, T1 --> T2)
   228         val insert_const = Const (@{const_name insert},
   229                                   [T1, T1 --> T2] ---> T1 --> T2)
   230         (* (term * term) list -> term *)
   231         fun aux [] =
   232             if maybe_opt andalso not (is_precise_type datatypes T1) then
   233               insert_const $ Const (unrep, T1) $ empty_const
   234             else
   235               empty_const
   236           | aux ((t1, t2) :: zs) =
   237             aux zs |> t2 <> @{const False}
   238                       ? curry (op $) (insert_const
   239                                       $ (t1 |> t2 <> @{const True}
   240                                                ? curry (op $)
   241                                                        (Const (maybe_name,
   242                                                                T1 --> T1))))
   243       in aux end
   244     (* typ -> typ -> typ -> (term * term) list -> term *)
   245     fun make_map T1 T2 T2' =
   246       let
   247         val update_const = Const (@{const_name fun_upd},
   248                                   [T1 --> T2, T1, T2] ---> T1 --> T2)
   249         (* (term * term) list -> term *)
   250         fun aux' [] = Const (@{const_name Map.empty}, T1 --> T2)
   251           | aux' ((t1, t2) :: ps) =
   252             (case t2 of
   253                Const (@{const_name None}, _) => aux' ps
   254              | _ => update_const $ aux' ps $ t1 $ t2)
   255         fun aux ps =
   256           if not (is_precise_type datatypes T1) then
   257             update_const $ aux' ps $ Const (unrep, T1)
   258             $ (Const (@{const_name Some}, T2' --> T2) $ Const (unknown, T2'))
   259           else
   260             aux' ps
   261       in aux end
   262     (* typ list -> term -> term *)
   263     fun setify_mapify_funs Ts t =
   264       (case fastype_of1 (Ts, t) of
   265          Type ("fun", [T1, T2]) =>
   266          if is_plain_fun t then
   267            case T2 of
   268              @{typ bool} =>
   269              let
   270                val (maybe_opt, ts_pair) =
   271                  dest_plain_fun t ||> pairself (map (setify_mapify_funs Ts))
   272              in
   273                make_set maybe_opt T1 T2
   274                         (sort_wrt (truth_const_sort_key o snd) (op ~~ ts_pair))
   275              end
   276            | Type (@{type_name option}, [T2']) =>
   277              let
   278                val ts_pair = snd (dest_plain_fun t)
   279                              |> pairself (map (setify_mapify_funs Ts))
   280              in make_map T1 T2 T2' (rev (op ~~ ts_pair)) end
   281            | _ => raise SAME ()
   282          else
   283            raise SAME ()
   284        | _ => raise SAME ())
   285       handle SAME () =>
   286              case t of
   287                t1 $ t2 => setify_mapify_funs Ts t1 $ setify_mapify_funs Ts t2
   288              | Abs (s, T, t') => Abs (s, T, setify_mapify_funs (T :: Ts) t')
   289              | _ => t
   290     (* bool -> typ -> typ -> typ -> term list -> term list -> term *)
   291     fun make_fun maybe_opt T1 T2 T' ts1 ts2 =
   292       ts1 ~~ ts2 |> T1 = @{typ bisim_iterator} ? rev
   293                  |> make_plain_fun (maybe_opt andalso not for_auto) T1 T2
   294                  |> unbox_term
   295                  |> typecast_fun (unbox_type T') (unbox_type T1) (unbox_type T2)
   296     (* (typ * int) list -> typ -> typ -> int -> term *)
   297     fun term_for_atom seen (T as Type ("fun", [T1, T2])) T' j =
   298         let
   299           val k1 = card_of_type card_assigns T1
   300           val k2 = card_of_type card_assigns T2
   301         in
   302           term_for_rep seen T T' (Vect (k1, Atom (k2, 0)))
   303                        [nth_combination (replicate k1 (k2, 0)) j]
   304           handle General.Subscript =>
   305                  raise ARG ("NitpickModel.reconstruct_term.term_for_atom",
   306                             signed_string_of_int j ^ " for " ^
   307                             string_for_rep (Vect (k1, Atom (k2, 0))))
   308         end
   309       | term_for_atom seen (Type ("*", [T1, T2])) _ j =
   310         let val k1 = card_of_type card_assigns T1 in
   311           list_comb (HOLogic.pair_const T1 T2,
   312                      map2 (fn T => term_for_atom seen T T) [T1, T2]
   313                           [j div k1, j mod k1])
   314         end
   315       | term_for_atom seen @{typ prop} _ j =
   316         HOLogic.mk_Trueprop (term_for_atom seen bool_T bool_T j)
   317       | term_for_atom _ @{typ bool} _ j =
   318         if j = 0 then @{const False} else @{const True}
   319       | term_for_atom _ @{typ unit} _ _ = @{const Unity}
   320       | term_for_atom seen T _ j =
   321         if T = nat_T then
   322           HOLogic.mk_number nat_T j
   323         else if T = int_T then
   324           HOLogic.mk_number int_T
   325               (int_for_atom (card_of_type card_assigns int_T, 0) j)
   326         else if is_fp_iterator_type T then
   327           HOLogic.mk_number nat_T (card_of_type card_assigns T - j - 1)
   328         else if T = @{typ bisim_iterator} then
   329           HOLogic.mk_number nat_T j
   330         else case datatype_spec datatypes T of
   331           NONE => atom for_auto T j
   332         | SOME {constrs, co, ...} =>
   333           let
   334             (* styp -> int list *)
   335             fun tuples_for_const (s, T) =
   336               tuple_list_for_name rel_table bounds (ConstName (s, T, Any))
   337             (* unit -> indexname * typ *)
   338             fun var () = ((atom_name "" T j, 0), T)
   339             val discr_jsss = map (tuples_for_const o discr_for_constr o #const)
   340                                  constrs
   341             val real_j = j + offset_of_type ofs T
   342             val constr_x as (constr_s, constr_T) =
   343               get_first (fn (jss, {const, ...}) =>
   344                             if [real_j] mem jss then SOME const else NONE)
   345                         (discr_jsss ~~ constrs) |> the
   346             val arg_Ts = curried_binder_types constr_T
   347             val sel_xs = map (boxed_nth_sel_for_constr ext_ctxt constr_x)
   348                              (index_seq 0 (length arg_Ts))
   349             val sel_Rs =
   350               map (fn x => get_first
   351                                (fn ConstName (s', T', R) =>
   352                                    if (s', T') = x then SOME R else NONE
   353                                  | u => raise NUT ("NitpickModel.reconstruct_\
   354                                                    \term.term_for_atom", [u]))
   355                                sel_names |> the) sel_xs
   356             val arg_Rs = map (snd o dest_Func) sel_Rs
   357             val sel_jsss = map tuples_for_const sel_xs
   358             val arg_jsss =
   359               map (map_filter (fn js => if hd js = real_j then SOME (tl js)
   360                                         else NONE)) sel_jsss
   361             val uncur_arg_Ts = binder_types constr_T
   362           in
   363             if co andalso (T, j) mem seen then
   364               Var (var ())
   365             else
   366               let
   367                 val seen = seen |> co ? cons (T, j)
   368                 val ts =
   369                   if length arg_Ts = 0 then
   370                     []
   371                   else
   372                     map3 (fn Ts => term_for_rep seen Ts Ts) arg_Ts arg_Rs
   373                          arg_jsss
   374                     |> mk_tuple (HOLogic.mk_tupleT uncur_arg_Ts)
   375                     |> dest_n_tuple (length uncur_arg_Ts)
   376                 val t =
   377                   if constr_s = @{const_name Abs_Frac} then
   378                     let
   379                       val num_T = body_type T
   380                       (* int -> term *)
   381                       val mk_num = HOLogic.mk_number num_T
   382                     in
   383                       case ts of
   384                         [Const (@{const_name Pair}, _) $ t1 $ t2] =>
   385                         (case snd (HOLogic.dest_number t1) of
   386                            0 => mk_num 0
   387                          | n1 => case HOLogic.dest_number t2 |> snd of
   388                                    1 => mk_num n1
   389                                  | n2 => Const (@{const_name HOL.divide},
   390                                                 [num_T, num_T] ---> num_T)
   391                                          $ mk_num n1 $ mk_num n2)
   392                       | _ => raise TERM ("NitpickModel.reconstruct_term.term_\
   393                                          \for_atom (Abs_Frac)", ts)
   394                     end
   395                   else if not for_auto andalso is_abs_fun thy constr_x then
   396                     Const (abs_name, constr_T) $ the_single ts
   397                   else
   398                     list_comb (Const constr_x, ts)
   399               in
   400                 if co then
   401                   let val var = var () in
   402                     if exists_subterm (equal (Var var)) t then
   403                       Const (@{const_name The}, (T --> bool_T) --> T)
   404                       $ Abs ("\<omega>", T,
   405                              Const (@{const_name "op ="}, [T, T] ---> bool_T)
   406                              $ Bound 0 $ abstract_over (Var var, t))
   407                     else
   408                       t
   409                   end
   410                 else
   411                   t
   412               end
   413           end
   414     (* (typ * int) list -> int -> rep -> typ -> typ -> typ -> int list
   415        -> term *)
   416     and term_for_vect seen k R T1 T2 T' js =
   417       make_fun true T1 T2 T' (map (term_for_atom seen T1 T1) (index_seq 0 k))
   418                (map (term_for_rep seen T2 T2 R o single)
   419                     (batch_list (arity_of_rep R) js))
   420     (* (typ * int) list -> typ -> typ -> rep -> int list list -> term *)
   421     and term_for_rep seen T T' Unit [[]] = term_for_atom seen T T' 0
   422       | term_for_rep seen T T' (R as Atom (k, j0)) [[j]] =
   423         if j >= j0 andalso j < j0 + k then term_for_atom seen T T' (j - j0)
   424         else raise REP ("NitpickModel.reconstruct_term.term_for_rep", [R])
   425       | term_for_rep seen (Type ("*", [T1, T2])) _ (Struct [R1, R2]) [js] =
   426         let
   427           val arity1 = arity_of_rep R1
   428           val (js1, js2) = chop arity1 js
   429         in
   430           list_comb (HOLogic.pair_const T1 T2,
   431                      map3 (fn T => term_for_rep seen T T) [T1, T2] [R1, R2]
   432                           [[js1], [js2]])
   433         end
   434       | term_for_rep seen (Type ("fun", [T1, T2])) T' (R as Vect (k, R')) [js] =
   435         term_for_vect seen k R' T1 T2 T' js
   436       | term_for_rep seen (Type ("fun", [T1, T2])) T' (Func (R1, Formula Neut))
   437                      jss =
   438         let
   439           val jss1 = all_combinations_for_rep R1
   440           val ts1 = map (term_for_rep seen T1 T1 R1 o single) jss1
   441           val ts2 =
   442             map (fn js => term_for_rep seen T2 T2 (Atom (2, 0))
   443                                        [[int_for_bool (js mem jss)]]) jss1
   444         in make_fun false T1 T2 T' ts1 ts2 end
   445       | term_for_rep seen (Type ("fun", [T1, T2])) T' (Func (R1, R2)) jss =
   446         let
   447           val arity1 = arity_of_rep R1
   448           val jss1 = all_combinations_for_rep R1
   449           val ts1 = map (term_for_rep seen T1 T1 R1 o single) jss1
   450           val grouped_jss2 = AList.group (op =) (map (chop arity1) jss)
   451           val ts2 = map (term_for_rep seen T2 T2 R2 o the_default []
   452                          o AList.lookup (op =) grouped_jss2) jss1
   453         in make_fun true T1 T2 T' ts1 ts2 end
   454       | term_for_rep seen T T' (Opt R) jss =
   455         if null jss then Const (unknown, T) else term_for_rep seen T T' R jss
   456       | term_for_rep seen T _ R jss =
   457         raise ARG ("NitpickModel.reconstruct_term.term_for_rep",
   458                    Refute.string_of_typ T ^ " " ^ string_for_rep R ^ " " ^
   459                    string_of_int (length jss))
   460   in
   461     (not for_auto ? setify_mapify_funs []) o unbox_term oooo term_for_rep []
   462   end
   463 
   464 (* scope -> nut list -> nut NameTable.table -> Kodkod.raw_bound list -> nut
   465    -> term *)
   466 fun term_for_name scope sel_names rel_table bounds name =
   467   let val T = type_of name in
   468     tuple_list_for_name rel_table bounds name
   469     |> reconstruct_term ("", "", "", "") scope sel_names rel_table bounds T T
   470                         (rep_of name)
   471   end
   472 
   473 (* Proof.context
   474    -> (string * string * string * string * string) * Proof.context *)
   475 fun add_wacky_syntax ctxt =
   476   let
   477     (* term -> string *)
   478     val name_of = fst o dest_Const
   479     val thy = ProofContext.theory_of ctxt |> Context.reject_draft
   480     val (maybe_t, thy) =
   481       Sign.declare_const [] ((@{binding nitpick_maybe}, @{typ "'a => 'a"}),
   482                              Mixfix (maybe_mixfix, [1000], 1000)) thy
   483     val (base_t, thy) =
   484       Sign.declare_const [] ((@{binding nitpick_base}, @{typ "'a => 'a"}),
   485                              Mixfix (base_mixfix, [1000], 1000)) thy
   486     val (step_t, thy) =
   487       Sign.declare_const [] ((@{binding nitpick_step}, @{typ "'a => 'a"}),
   488                              Mixfix (step_mixfix, [1000], 1000)) thy
   489     val (abs_t, thy) =
   490       Sign.declare_const [] ((@{binding nitpick_abs}, @{typ "'a => 'b"}),
   491                              Mixfix (abs_mixfix, [40], 40)) thy
   492   in
   493     ((name_of maybe_t, name_of base_t, name_of step_t, name_of abs_t),
   494      ProofContext.transfer_syntax thy ctxt)
   495   end
   496 
   497 (* term -> term *)
   498 fun unfold_outer_the_binders (t as Const (@{const_name The}, _)
   499                                    $ Abs (s, T, Const (@{const_name "op ="}, _)
   500                                                 $ Bound 0 $ t')) =
   501     betapply (Abs (s, T, t'), t) |> unfold_outer_the_binders
   502   | unfold_outer_the_binders t = t
   503 (* typ list -> int -> term * term -> bool *)
   504 fun bisimilar_values _ 0 _ = true
   505   | bisimilar_values coTs max_depth (t1, t2) =
   506     let val T = fastype_of t1 in
   507       if exists_subtype (member (op =) coTs) T then
   508         let
   509           val ((head1, args1), (head2, args2)) =
   510             pairself (strip_comb o unfold_outer_the_binders) (t1, t2)
   511           val max_depth = max_depth - (if T mem coTs then 1 else 0)
   512         in
   513           head1 = head2
   514           andalso forall (bisimilar_values coTs max_depth) (args1 ~~ args2)
   515         end
   516       else
   517         t1 = t2
   518     end
   519 
   520 (* params -> scope -> (term option * int list) list -> styp list -> nut list
   521   -> nut list -> nut list -> nut NameTable.table -> Kodkod.raw_bound list
   522   -> Pretty.T * bool *)
   523 fun reconstruct_hol_model {show_skolems, show_datatypes, show_consts}
   524         ({ext_ctxt as {thy, ctxt, max_bisim_depth, boxes, user_axioms, debug,
   525                        wfs, destroy_constrs, specialize, skolemize,
   526                        star_linear_preds, uncurry, fast_descrs, tac_timeout,
   527                        evals, case_names, def_table, nondef_table, user_nondefs,
   528                        simp_table, psimp_table, intro_table, ground_thm_table,
   529                        ersatz_table, skolems, special_funs, unrolled_preds,
   530                        wf_cache},
   531          card_assigns, bisim_depth, datatypes, ofs} : scope) formats all_frees
   532         free_names sel_names nonsel_names rel_table bounds =
   533   let
   534     val (wacky_names as (_, base_name, step_name, _), ctxt) =
   535       add_wacky_syntax ctxt
   536     val ext_ctxt =
   537       {thy = thy, ctxt = ctxt, max_bisim_depth = max_bisim_depth, boxes = boxes,
   538        wfs = wfs, user_axioms = user_axioms, debug = debug,
   539        destroy_constrs = destroy_constrs, specialize = specialize,
   540        skolemize = skolemize, star_linear_preds = star_linear_preds,
   541        uncurry = uncurry, fast_descrs = fast_descrs, tac_timeout = tac_timeout,
   542        evals = evals, case_names = case_names, def_table = def_table,
   543        nondef_table = nondef_table, user_nondefs = user_nondefs,
   544        simp_table = simp_table, psimp_table = psimp_table,
   545        intro_table = intro_table, ground_thm_table = ground_thm_table,
   546        ersatz_table = ersatz_table, skolems = skolems,
   547        special_funs = special_funs, unrolled_preds = unrolled_preds,
   548        wf_cache = wf_cache}
   549     val scope = {ext_ctxt = ext_ctxt, card_assigns = card_assigns,
   550                  bisim_depth = bisim_depth, datatypes = datatypes, ofs = ofs}
   551     (* typ -> typ -> rep -> int list list -> term *)
   552     val term_for_rep = reconstruct_term wacky_names scope sel_names rel_table
   553                                         bounds
   554     (* typ -> typ -> typ *)
   555     fun nth_value_of_type T card n = term_for_rep T T (Atom (card, 0)) [[n]]
   556     (* dtype_spec list -> dtype_spec -> bool *)
   557     fun is_codatatype_wellformed (cos : dtype_spec list)
   558                                  ({typ, card, ...} : dtype_spec) =
   559       let
   560         val ts = map (nth_value_of_type typ card) (index_seq 0 card)
   561         val max_depth = Integer.sum (map #card cos)
   562       in
   563         forall (not o bisimilar_values (map #typ cos) max_depth)
   564                (all_distinct_unordered_pairs_of ts)
   565       end
   566     (* string -> Pretty.T *)
   567     fun pretty_for_assign name =
   568       let
   569         val (oper, (t1, T'), T) =
   570           case name of
   571             FreeName (s, T, _) =>
   572             let val t = Free (s, unbox_type T) in
   573               ("=", (t, format_term_type thy def_table formats t), T)
   574             end
   575           | ConstName (s, T, _) =>
   576             (assign_operator_for_const (s, T),
   577              user_friendly_const ext_ctxt (base_name, step_name) formats (s, T),
   578              T)
   579           | _ => raise NUT ("NitpickModel.reconstruct_hol_model.\
   580                             \pretty_for_assign", [name])
   581         val t2 = if rep_of name = Any then
   582                    Const (@{const_name undefined}, T')
   583                  else
   584                    tuple_list_for_name rel_table bounds name
   585                    |> term_for_rep T T' (rep_of name)
   586       in
   587         Pretty.block (Pretty.breaks
   588             [(setmp_CRITICAL show_question_marks false o setmp_show_all_types)
   589                  (Syntax.pretty_term ctxt) t1,
   590              Pretty.str oper, Syntax.pretty_term ctxt t2])
   591       end
   592     (* dtype_spec -> Pretty.T *)
   593     fun pretty_for_datatype ({typ, card, precise, ...} : dtype_spec) =
   594       Pretty.block (Pretty.breaks
   595           [Syntax.pretty_typ ctxt (unbox_type typ), Pretty.str "=",
   596            Pretty.enum "," "{" "}"
   597                (map (Syntax.pretty_term ctxt o nth_value_of_type typ card)
   598                     (index_seq 0 card) @
   599                 (if precise then [] else [Pretty.str unrep]))])
   600     (* typ -> dtype_spec list *)
   601     fun integer_datatype T =
   602       [{typ = T, card = card_of_type card_assigns T, co = false,
   603         precise = false, constrs = []}]
   604       handle TYPE ("NitpickHOL.card_of_type", _, _) => []
   605     val (codatatypes, datatypes) =
   606       List.partition #co datatypes
   607       ||> append (integer_datatype nat_T @ integer_datatype int_T)
   608     val block_of_datatypes =
   609       if show_datatypes andalso not (null datatypes) then
   610         [Pretty.big_list ("Datatype" ^ plural_s_for_list datatypes ^ ":")
   611                          (map pretty_for_datatype datatypes)]
   612       else
   613         []
   614     val block_of_codatatypes =
   615       if show_datatypes andalso not (null codatatypes) then
   616         [Pretty.big_list ("Codatatype" ^ plural_s_for_list codatatypes ^ ":")
   617                          (map pretty_for_datatype codatatypes)]
   618       else
   619         []
   620     (* bool -> string -> nut list -> Pretty.T list *)
   621     fun block_of_names show title names =
   622       if show andalso not (null names) then
   623         Pretty.str (title ^ plural_s_for_list names ^ ":")
   624         :: map (Pretty.indent indent_size o pretty_for_assign)
   625                (sort_wrt (original_name o nickname_of) names)
   626       else
   627         []
   628     val (skolem_names, nonskolem_nonsel_names) =
   629       List.partition is_skolem_name nonsel_names
   630     val (eval_names, noneval_nonskolem_nonsel_names) =
   631       List.partition (String.isPrefix eval_prefix o nickname_of)
   632                      nonskolem_nonsel_names
   633       ||> filter_out (equal @{const_name bisim_iterator_max} o nickname_of)
   634     val free_names =
   635       map (fn x as (s, T) =>
   636               case filter (equal x o nickname_of pairf (unbox_type o type_of))
   637                           free_names of
   638                 [name] => name
   639               | [] => FreeName (s, T, Any)
   640               | _ => raise TERM ("NitpickModel.reconstruct_hol_model",
   641                                  [Const x])) all_frees
   642     val chunks = block_of_names true "Free variable" free_names @
   643                  block_of_names show_skolems "Skolem constant" skolem_names @
   644                  block_of_names true "Evaluated term" eval_names @
   645                  block_of_datatypes @ block_of_codatatypes @
   646                  block_of_names show_consts "Constant"
   647                                 noneval_nonskolem_nonsel_names
   648   in
   649     (Pretty.chunks (if null chunks then [Pretty.str "Empty assignment"]
   650                     else chunks),
   651      bisim_depth >= 0
   652      orelse forall (is_codatatype_wellformed codatatypes) codatatypes)
   653   end
   654 
   655 (* scope -> Time.time option -> nut list -> nut list -> nut NameTable.table
   656    -> Kodkod.raw_bound list -> term -> bool option *)
   657 fun prove_hol_model (scope as {ext_ctxt as {thy, ctxt, ...}, card_assigns, ...})
   658                     auto_timeout free_names sel_names rel_table bounds prop =
   659   let
   660     (* typ * int -> term *)
   661     fun free_type_assm (T, k) =
   662       let
   663         (* int -> term *)
   664         val atom = atom true T
   665         fun equation_for_atom j = HOLogic.eq_const T $ Bound 0 $ atom j
   666         val eqs = map equation_for_atom (index_seq 0 k)
   667         val compreh_assm =
   668           Const (@{const_name All}, (T --> bool_T) --> bool_T)
   669               $ Abs ("x", T, foldl1 HOLogic.mk_disj eqs)
   670         val distinct_assm = distinctness_formula T (map atom (index_seq 0 k))
   671       in HOLogic.mk_conj (compreh_assm, distinct_assm) end
   672     (* nut -> term *)
   673     fun free_name_assm name =
   674       HOLogic.mk_eq (Free (nickname_of name, type_of name),
   675                      term_for_name scope sel_names rel_table bounds name)
   676     val freeT_assms = map free_type_assm (filter (is_TFree o fst) card_assigns)
   677     val model_assms = map free_name_assm free_names
   678     val assm = List.foldr HOLogic.mk_conj @{const True}
   679                           (freeT_assms @ model_assms)
   680     (* bool -> bool *)
   681     fun try_out negate =
   682       let
   683         val concl = (negate ? curry (op $) @{const Not})
   684                     (ObjectLogic.atomize_term thy prop)
   685         val goal = HOLogic.mk_Trueprop (HOLogic.mk_imp (assm, concl))
   686                    |> map_types (map_type_tfree
   687                           (fn (s, []) => TFree (s, HOLogic.typeS)
   688                             | x => TFree x))
   689                    |> cterm_of thy |> Goal.init
   690       in
   691         (goal |> SINGLE (DETERM_TIMEOUT auto_timeout
   692                                         (auto_tac (clasimpset_of ctxt)))
   693               |> the |> Goal.finish ctxt; true)
   694         handle THM _ => false
   695              | TimeLimit.TimeOut => false
   696       end
   697   in
   698     if silence try_out false then SOME true
   699     else if silence try_out true then SOME false
   700     else NONE
   701   end
   702 
   703 end;