src/HOL/Tools/Quickcheck/narrowing_generators.ML
author wenzelm
Fri Mar 06 15:58:56 2015 +0100 (2015-03-06)
changeset 59621 291934bac95e
parent 59498 50b60f501b05
child 60801 7664e0916eec
permissions -rw-r--r--
Thm.cterm_of and Thm.ctyp_of operate on local context;
     1 (*  Title:      HOL/Tools/Quickcheck/narrowing_generators.ML
     2     Author:     Lukas Bulwahn, TU Muenchen
     3 
     4 Narrowing-based counterexample generation.
     5 *)
     6 
     7 signature NARROWING_GENERATORS =
     8 sig
     9   val allow_existentials : bool Config.T
    10   val finite_functions : bool Config.T
    11   val overlord : bool Config.T
    12   val ghc_options : string Config.T  (* FIXME prefer settings, i.e. getenv (!?) *)
    13   val active : bool Config.T
    14   datatype counterexample = Universal_Counterexample of (term * counterexample)
    15     | Existential_Counterexample of (term * counterexample) list
    16     | Empty_Assignment
    17   val put_counterexample: (unit -> (bool * term list) option) -> Proof.context -> Proof.context
    18   val put_existential_counterexample : (unit -> counterexample option) -> Proof.context -> Proof.context
    19 end;
    20 
    21 structure Narrowing_Generators : NARROWING_GENERATORS =
    22 struct
    23 
    24 (* configurations *)
    25 
    26 val allow_existentials = Attrib.setup_config_bool @{binding quickcheck_allow_existentials} (K true)
    27 val finite_functions = Attrib.setup_config_bool @{binding quickcheck_finite_functions} (K true)
    28 val overlord = Attrib.setup_config_bool @{binding quickcheck_narrowing_overlord} (K false)
    29 val ghc_options = Attrib.setup_config_string @{binding quickcheck_narrowing_ghc_options} (K "")
    30 
    31 (* partial_term_of instances *)
    32 
    33 fun mk_partial_term_of (x, T) =
    34   Const (@{const_name Quickcheck_Narrowing.partial_term_of_class.partial_term_of},
    35     Term.itselfT T --> @{typ narrowing_term} --> @{typ Code_Evaluation.term})
    36       $ Logic.mk_type T $ x
    37 
    38 (** formal definition **)
    39 
    40 fun add_partial_term_of tyco raw_vs thy =
    41   let
    42     val vs = map (fn (v, _) => (v, @{sort typerep})) raw_vs;
    43     val ty = Type (tyco, map TFree vs);
    44     val lhs = Const (@{const_name partial_term_of},
    45         Term.itselfT ty --> @{typ narrowing_term} --> @{typ Code_Evaluation.term})
    46       $ Free ("x", Term.itselfT ty) $ Free ("t", @{typ narrowing_term});
    47     val rhs = @{term "undefined :: Code_Evaluation.term"};
    48     val eq = HOLogic.mk_Trueprop (HOLogic.mk_eq (lhs, rhs));
    49     fun triv_name_of t = (fst o dest_Free o fst o strip_comb o fst
    50       o HOLogic.dest_eq o HOLogic.dest_Trueprop) t ^ "_triv";
    51   in
    52     thy
    53     |> Class.instantiation ([tyco], vs, @{sort partial_term_of})
    54     |> `(fn lthy => Syntax.check_term lthy eq)
    55     |-> (fn eq => Specification.definition (NONE, ((Binding.name (triv_name_of eq), []), eq)))
    56     |> snd
    57     |> Class.prove_instantiation_exit (fn ctxt => Class.intro_classes_tac ctxt [])
    58   end;
    59 
    60 fun ensure_partial_term_of (tyco, (raw_vs, _)) thy =
    61   let
    62     val need_inst = not (Sorts.has_instance (Sign.classes_of thy) tyco @{sort partial_term_of})
    63       andalso Sorts.has_instance (Sign.classes_of thy) tyco @{sort typerep};
    64   in if need_inst then add_partial_term_of tyco raw_vs thy else thy end;
    65 
    66 
    67 (** code equations for datatypes **)
    68 
    69 fun mk_partial_term_of_eq thy ty (i, (c, (_, tys))) =
    70   let
    71     val frees = map Free (Name.invent_names Name.context "a" (map (K @{typ narrowing_term}) tys))
    72     val narrowing_term = @{term Quickcheck_Narrowing.Narrowing_constructor} $ HOLogic.mk_number @{typ integer} i
    73       $ HOLogic.mk_list @{typ narrowing_term} (rev frees)
    74     val rhs = fold (fn u => fn t => @{term "Code_Evaluation.App"} $ t $ u)
    75         (map mk_partial_term_of (frees ~~ tys))
    76         (@{term "Code_Evaluation.Const"} $ HOLogic.mk_literal c $ HOLogic.mk_typerep (tys ---> ty))
    77     val insts =
    78       map (SOME o Thm.global_cterm_of thy o Logic.unvarify_types_global o Logic.varify_global)
    79         [Free ("ty", Term.itselfT ty), narrowing_term, rhs]
    80     val cty = Thm.global_ctyp_of thy ty;
    81   in
    82     @{thm partial_term_of_anything}
    83     |> Drule.instantiate' [SOME cty] insts
    84     |> Thm.varifyT_global
    85   end
    86 
    87 fun add_partial_term_of_code tyco raw_vs raw_cs thy =
    88   let
    89     val algebra = Sign.classes_of thy;
    90     val vs = map (fn (v, sort) =>
    91       (v, curry (Sorts.inter_sort algebra) @{sort typerep} sort)) raw_vs;
    92     val ty = Type (tyco, map TFree vs);
    93     val cs = (map o apsnd o apsnd o map o map_atyps)
    94       (fn TFree (v, _) => TFree (v, (the o AList.lookup (op =) vs) v)) raw_cs;
    95     val const = Axclass.param_of_inst thy (@{const_name partial_term_of}, tyco);
    96     val var_insts =
    97       map (SOME o Thm.global_cterm_of thy o Logic.unvarify_types_global o Logic.varify_global)
    98         [Free ("ty", Term.itselfT ty), @{term "Quickcheck_Narrowing.Narrowing_variable p tt"},
    99           @{term "Code_Evaluation.Free (STR ''_'')"} $ HOLogic.mk_typerep ty];
   100     val var_eq =
   101       @{thm partial_term_of_anything}
   102       |> Drule.instantiate' [SOME (Thm.global_ctyp_of thy ty)] var_insts
   103       |> Thm.varifyT_global
   104     val eqs = var_eq :: map_index (mk_partial_term_of_eq thy ty) cs;
   105  in
   106     thy
   107     |> Code.del_eqns const
   108     |> fold Code.add_eqn eqs
   109   end;
   110 
   111 fun ensure_partial_term_of_code (tyco, (raw_vs, cs)) thy =
   112   let
   113     val has_inst = Sorts.has_instance (Sign.classes_of thy) tyco @{sort partial_term_of};
   114   in if has_inst then add_partial_term_of_code tyco raw_vs cs thy else thy end;
   115 
   116 
   117 (* narrowing generators *)
   118 
   119 (** narrowing specific names and types **)
   120 
   121 exception FUNCTION_TYPE;
   122 
   123 val narrowingN = "narrowing";
   124 
   125 fun narrowingT T =
   126   @{typ integer} --> Type (@{type_name Quickcheck_Narrowing.narrowing_cons}, [T])
   127 
   128 fun mk_cons c T = Const (@{const_name Quickcheck_Narrowing.cons}, T --> narrowingT T) $ Const (c, T)
   129 
   130 fun mk_apply (T, t) (U, u) =
   131   let
   132     val (_, U') = dest_funT U
   133   in
   134     (U', Const (@{const_name Quickcheck_Narrowing.apply},
   135       narrowingT U --> narrowingT T --> narrowingT U') $ u $ t)
   136   end
   137 
   138 fun mk_sum (t, u) =
   139   let
   140     val T = fastype_of t
   141   in
   142     Const (@{const_name Quickcheck_Narrowing.sum}, T --> T --> T) $ t $ u
   143   end
   144 
   145 (** deriving narrowing instances **)
   146 
   147 fun mk_equations descr vs narrowings =
   148   let
   149     fun mk_call T =
   150       (T, Const (@{const_name "Quickcheck_Narrowing.narrowing_class.narrowing"}, narrowingT T))
   151     fun mk_aux_call fTs (k, _) (tyco, Ts) =
   152       let
   153         val T = Type (tyco, Ts)
   154         val _ = if not (null fTs) then raise FUNCTION_TYPE else ()
   155       in
   156         (T, nth narrowings k)
   157       end
   158     fun mk_consexpr simpleT (c, xs) =
   159       let
   160         val Ts = map fst xs
   161       in snd (fold mk_apply xs (Ts ---> simpleT, mk_cons c (Ts ---> simpleT))) end
   162     fun mk_rhs exprs = foldr1 mk_sum exprs
   163     val rhss =
   164       Old_Datatype_Aux.interpret_construction descr vs
   165         { atyp = mk_call, dtyp = mk_aux_call }
   166       |> (map o apfst) Type
   167       |> map (fn (T, cs) => map (mk_consexpr T) cs)
   168       |> map mk_rhs
   169     val lhss = narrowings
   170     val eqs = map (HOLogic.mk_Trueprop o HOLogic.mk_eq) (lhss ~~ rhss)
   171   in
   172     eqs
   173   end
   174 
   175 fun contains_recursive_type_under_function_types xs =
   176   exists (fn (_, (_, _, cs)) => cs |> exists (snd #> exists (fn dT =>
   177     (case Old_Datatype_Aux.strip_dtyp dT of (_ :: _, Old_Datatype_Aux.DtRec _) => true | _ => false)))) xs
   178 
   179 fun instantiate_narrowing_datatype config descr vs tycos prfx (names, auxnames) (Ts, Us) thy =
   180   let
   181     val _ = Old_Datatype_Aux.message config "Creating narrowing generators ...";
   182     val narrowingsN = map (prefix (narrowingN ^ "_")) (names @ auxnames);
   183   in
   184     if not (contains_recursive_type_under_function_types descr) then
   185       thy
   186       |> Class.instantiation (tycos, vs, @{sort narrowing})
   187       |> Quickcheck_Common.define_functions
   188         (fn narrowings => mk_equations descr vs narrowings, NONE)
   189         prfx [] narrowingsN (map narrowingT (Ts @ Us))
   190       |> Class.prove_instantiation_exit (fn ctxt => Class.intro_classes_tac ctxt [])
   191     else
   192       thy
   193   end;
   194 
   195 (* testing framework *)
   196 
   197 val target = "Haskell_Quickcheck"
   198 
   199 (** invocation of Haskell interpreter **)
   200 
   201 val narrowing_engine =
   202   File.read @{path "~~/src/HOL/Tools/Quickcheck/Narrowing_Engine.hs"}
   203 
   204 val pnf_narrowing_engine =
   205   File.read @{path "~~/src/HOL/Tools/Quickcheck/PNF_Narrowing_Engine.hs"}
   206 
   207 fun exec verbose code =
   208   ML_Context.exec (fn () => Secure.use_text ML_Env.local_context (0, "generated code") verbose code)
   209 
   210 fun with_overlord_dir name f =
   211   let
   212     val path =
   213       Path.append (Path.explode "$ISABELLE_HOME_USER") (Path.basic (name ^ serial_string ()))
   214     val _ = Isabelle_System.mkdirs path;
   215   in Exn.release (Exn.capture f path) end;
   216 
   217 fun elapsed_time description e =
   218   let val ({elapsed, ...}, result) = Timing.timing e ()
   219   in (result, (description, Time.toMilliseconds elapsed)) end
   220 
   221 fun value (contains_existentials, ((genuine_only, (quiet, verbose)), size)) ctxt cookie (code_modules, _) =
   222   let
   223     val ((is_genuine, counterexample_of), (get, put, put_ml)) = cookie
   224     fun message s = if quiet then () else writeln s
   225     fun verbose_message s = if not quiet andalso verbose then writeln s else ()
   226     val current_size = Unsynchronized.ref 0
   227     val current_result = Unsynchronized.ref Quickcheck.empty_result
   228     val tmp_prefix = "Quickcheck_Narrowing"
   229     val ghc_options = Config.get ctxt ghc_options
   230     val with_tmp_dir =
   231       if Config.get ctxt overlord then with_overlord_dir else Isabelle_System.with_tmp_dir
   232     fun run in_path =
   233       let
   234         fun mk_code_file name = Path.append in_path (Path.basic (name ^ ".hs"))
   235         val generatedN = Code_Target.generatedN
   236         val includes = AList.delete (op =) generatedN code_modules |> (map o apfst) mk_code_file;
   237         val code = the (AList.lookup (op =) code_modules generatedN)
   238         val code_file = mk_code_file generatedN
   239         val narrowing_engine_file = mk_code_file "Narrowing_Engine"
   240         val main_file = mk_code_file "Main"
   241         val main = "module Main where {\n\n" ^
   242           "import System.IO;\n" ^
   243           "import System.Environment;\n" ^
   244           "import Narrowing_Engine;\n" ^
   245           "import " ^ generatedN ^ " ;\n\n" ^
   246           "main = getArgs >>= \\[potential, size] -> " ^
   247           "Narrowing_Engine.depthCheck (read potential) (read size) (" ^ generatedN ^ ".value ())\n\n" ^
   248           "}\n"
   249         val _ = map (uncurry File.write) (includes @
   250           [(narrowing_engine_file, if contains_existentials then pnf_narrowing_engine else narrowing_engine),
   251            (code_file, code), (main_file, main)])
   252         val executable = File.shell_path (Path.append in_path (Path.basic "isabelle_quickcheck_narrowing"))
   253         val cmd = "exec \"$ISABELLE_GHC\" " ^ Code_Haskell.language_params ^ " " ^
   254           ghc_options ^ " " ^
   255           (space_implode " " (map File.shell_path (map fst includes @ [code_file, narrowing_engine_file, main_file]))) ^
   256           " -o " ^ executable ^ ";"
   257         val (_, compilation_time) =
   258           elapsed_time "Haskell compilation" (fn () => Isabelle_System.bash cmd)
   259         val _ = Quickcheck.add_timing compilation_time current_result
   260         fun haskell_string_of_bool v = if v then "True" else "False"
   261         val _ = if Isabelle_System.bash cmd <> 0 then error "Compilation with GHC failed" else ()
   262         fun with_size genuine_only k =
   263           if k > size then
   264             (NONE, !current_result)
   265           else
   266             let
   267               val _ = verbose_message ("[Quickcheck-narrowing] Test data size: " ^ string_of_int k)
   268               val _ = current_size := k
   269               val ((response, _), timing) = elapsed_time ("execution of size " ^ string_of_int k)
   270                 (fn () => Isabelle_System.bash_output
   271                   (executable ^ " " ^ haskell_string_of_bool genuine_only ^ " " ^ string_of_int k))
   272               val _ = Quickcheck.add_timing timing current_result
   273             in
   274               if response = "NONE\n" then
   275                 with_size genuine_only (k + 1)
   276               else
   277                 let
   278                   val output_value = the_default "NONE"
   279                     (try (snd o split_last o filter_out (fn s => s = "") o split_lines) response)
   280                     |> translate_string (fn s => if s = "\\" then "\\\\" else s)
   281                   val ml_code = "\nval _ = Context.set_thread_data (SOME (Context.map_proof (" ^ put_ml
   282                     ^ " (fn () => " ^ output_value ^ ")) (ML_Context.the_generic_context ())))";
   283                   val ctxt' = ctxt
   284                     |> put (fn () => error ("Bad evaluation for " ^ quote put_ml))
   285                     |> Context.proof_map (exec false ml_code);
   286                   val counterexample = get ctxt' ()
   287                 in
   288                   if is_genuine counterexample then
   289                     (counterexample, !current_result)
   290                   else
   291                     let
   292                       val cex = Option.map (rpair []) (counterexample_of counterexample);
   293                       val _ = message (Pretty.string_of (Quickcheck.pretty_counterex ctxt false cex));
   294                       val _ = message "Quickcheck continues to find a genuine counterexample...";
   295                     in with_size true (k + 1) end
   296                end
   297             end
   298       in with_size genuine_only 0 end
   299   in
   300     with_tmp_dir tmp_prefix run
   301   end;
   302 
   303 fun dynamic_value_strict opts cookie ctxt postproc t =
   304   let
   305     fun evaluator program _ vs_ty_t deps =
   306       Exn.interruptible_capture (value opts ctxt cookie)
   307         (Code_Target.evaluator ctxt target program deps true vs_ty_t);
   308   in Exn.release (Code_Thingol.dynamic_value ctxt (Exn.map_result o postproc) evaluator t) end;
   309 
   310 
   311 (** counterexample generator **)
   312 
   313 datatype counterexample =
   314     Universal_Counterexample of (term * counterexample)
   315   | Existential_Counterexample of (term * counterexample) list
   316   | Empty_Assignment
   317 
   318 fun map_counterexample f Empty_Assignment = Empty_Assignment
   319   | map_counterexample f (Universal_Counterexample (t, c)) =
   320       Universal_Counterexample (f t, map_counterexample f c)
   321   | map_counterexample f (Existential_Counterexample cs) =
   322       Existential_Counterexample (map (fn (t, c) => (f t, map_counterexample f c)) cs)
   323 
   324 structure Data = Proof_Data
   325 (
   326   type T =
   327     (unit -> (bool * term list) option) *
   328     (unit -> counterexample option);
   329   val empty: T =
   330    (fn () => raise Fail "counterexample",
   331     fn () => raise Fail "existential_counterexample");
   332   fun init _ = empty;
   333 );
   334 
   335 val get_counterexample = #1 o Data.get;
   336 val get_existential_counterexample = #2 o Data.get;
   337 
   338 val put_counterexample = Data.map o @{apply 2(1)} o K;
   339 val put_existential_counterexample = Data.map o @{apply 2(2)} o K;
   340 
   341 fun finitize_functions (xTs, t) =
   342   let
   343     val (names, boundTs) = split_list xTs
   344     fun mk_eval_ffun dT rT =
   345       Const (@{const_name "Quickcheck_Narrowing.eval_ffun"},
   346         Type (@{type_name "Quickcheck_Narrowing.ffun"}, [dT, rT]) --> dT --> rT)
   347     fun mk_eval_cfun dT rT =
   348       Const (@{const_name "Quickcheck_Narrowing.eval_cfun"},
   349         Type (@{type_name "Quickcheck_Narrowing.cfun"}, [rT]) --> dT --> rT)
   350     fun eval_function (Type (@{type_name fun}, [dT, rT])) =
   351       let
   352         val (rt', rT') = eval_function rT
   353       in
   354         case dT of
   355           Type (@{type_name fun}, _) =>
   356             (fn t => absdummy dT (rt' (mk_eval_cfun dT rT' $ incr_boundvars 1 t $ Bound 0)),
   357               Type (@{type_name "Quickcheck_Narrowing.cfun"}, [rT']))
   358         | _ =>
   359             (fn t => absdummy dT (rt' (mk_eval_ffun dT rT' $ incr_boundvars 1 t $ Bound 0)),
   360               Type (@{type_name "Quickcheck_Narrowing.ffun"}, [dT, rT']))
   361       end
   362       | eval_function (T as Type (@{type_name prod}, [fT, sT])) =
   363         let
   364           val (ft', fT') = eval_function fT
   365           val (st', sT') = eval_function sT
   366           val T' = Type (@{type_name prod}, [fT', sT'])
   367           val map_const = Const (@{const_name map_prod}, (fT' --> fT) --> (sT' --> sT) --> T' --> T)
   368           fun apply_dummy T t = absdummy T (t (Bound 0))
   369         in
   370           (fn t => list_comb (map_const, [apply_dummy fT' ft', apply_dummy sT' st', t]), T')
   371         end
   372       | eval_function T = (I, T)
   373     val (tt, boundTs') = split_list (map eval_function boundTs)
   374     val t' = subst_bounds (map2 (fn f => fn x => f x) (rev tt) (map_index (Bound o fst) boundTs), t)
   375   in
   376     (names ~~ boundTs', t')
   377   end
   378 
   379 fun dest_ffun (Type (@{type_name "Quickcheck_Narrowing.ffun"}, [dT, rT])) = (dT, rT)
   380 
   381 fun eval_finite_functions (Const (@{const_name "Quickcheck_Narrowing.ffun.Constant"}, T) $ value) =
   382     absdummy (fst (dest_ffun (body_type T))) (eval_finite_functions value)
   383   | eval_finite_functions (Const (@{const_name "Quickcheck_Narrowing.ffun.Update"}, T) $ a $ b $ f) =
   384     let
   385       val (T1, T2) = dest_ffun (body_type T)
   386     in
   387       Quickcheck_Common.mk_fun_upd T1 T2
   388         (eval_finite_functions a, eval_finite_functions b) (eval_finite_functions f)
   389     end
   390   | eval_finite_functions t = t
   391 
   392 (** tester **)
   393 
   394 val rewrs =
   395     map (swap o HOLogic.dest_eq o HOLogic.dest_Trueprop o Thm.prop_of)
   396       (@{thms all_simps} @ @{thms ex_simps})
   397     @ map (HOLogic.dest_eq o HOLogic.dest_Trueprop o Thm.prop_of)
   398         [@{thm iff_conv_conj_imp}, @{thm not_ex}, @{thm not_all},
   399          @{thm meta_eq_to_obj_eq [OF Ex1_def]}]
   400 
   401 fun make_pnf_term thy t = Pattern.rewrite_term thy rewrs [] t
   402 
   403 fun strip_quantifiers (Const (@{const_name Ex}, _) $ Abs (x, T, t)) =
   404     apfst (cons (@{const_name Ex}, (x, T))) (strip_quantifiers t)
   405   | strip_quantifiers (Const (@{const_name All}, _) $ Abs (x, T, t)) =
   406     apfst (cons (@{const_name All}, (x, T))) (strip_quantifiers t)
   407   | strip_quantifiers t = ([], t)
   408 
   409 fun contains_existentials t = exists (fn (Q, _) => Q = @{const_name Ex}) (fst (strip_quantifiers t))
   410 
   411 fun mk_property qs t =
   412   let
   413     fun enclose (@{const_name Ex}, (x, T)) t =
   414         Const (@{const_name Quickcheck_Narrowing.exists}, (T --> @{typ property}) --> @{typ property})
   415           $ Abs (x, T, t)
   416       | enclose (@{const_name All}, (x, T)) t =
   417         Const (@{const_name Quickcheck_Narrowing.all}, (T --> @{typ property}) --> @{typ property})
   418           $ Abs (x, T, t)
   419   in
   420     fold_rev enclose qs (@{term Quickcheck_Narrowing.Property} $ t)
   421   end
   422 
   423 fun mk_case_term ctxt p ((@{const_name Ex}, (x, T)) :: qs') (Existential_Counterexample cs) =
   424     Case_Translation.make_case ctxt Case_Translation.Quiet Name.context (Free (x, T)) (map (fn (t, c) =>
   425       (t, mk_case_term ctxt (p - 1) qs' c)) cs)
   426   | mk_case_term ctxt p ((@{const_name All}, _) :: qs') (Universal_Counterexample (t, c)) =
   427     if p = 0 then t else mk_case_term ctxt (p - 1) qs' c
   428 
   429 val post_process = (perhaps (try Quickcheck_Common.post_process_term)) o eval_finite_functions
   430 
   431 fun mk_terms ctxt qs result =
   432   let
   433     val
   434       ps = filter (fn (_, (@{const_name All}, _)) => true | _ => false) (map_index I qs)
   435     in
   436       map (fn (p, (_, (x, _))) => (x, mk_case_term ctxt p qs result)) ps
   437       |> map (apsnd post_process)
   438     end
   439 
   440 fun test_term ctxt catch_code_errors (t, _) =
   441   let
   442     fun dest_result (Quickcheck.Result r) = r
   443     val opts =
   444       ((Config.get ctxt Quickcheck.genuine_only,
   445        (Config.get ctxt Quickcheck.quiet, Config.get ctxt Quickcheck.verbose)),
   446         Config.get ctxt Quickcheck.size)
   447     val thy = Proof_Context.theory_of ctxt
   448     val t' = fold_rev (fn (x, T) => fn t => HOLogic.mk_all (x, T, t)) (Term.add_frees t []) t
   449     val pnf_t = make_pnf_term thy t'
   450   in
   451     if Config.get ctxt allow_existentials andalso contains_existentials pnf_t then
   452       let
   453         fun wrap f (qs, t) =
   454           let val (qs1, qs2) = split_list qs in
   455           apfst (map2 pair qs1) (f (qs2, t)) end
   456         val finitize = if Config.get ctxt finite_functions then wrap finitize_functions else I
   457         val (qs, prop_t) = finitize (strip_quantifiers pnf_t)
   458         val act = if catch_code_errors then try else (fn f => SOME o f)
   459         val execute =
   460           dynamic_value_strict (true, opts)
   461             ((K true, fn _ => error ""),
   462               (get_existential_counterexample, put_existential_counterexample,
   463                 "Narrowing_Generators.put_existential_counterexample"))
   464             ctxt (apfst o Option.map o map_counterexample)
   465       in
   466         case act execute (mk_property qs prop_t) of
   467           SOME (counterexample, result) => Quickcheck.Result
   468             {counterexample = Option.map (pair true o mk_terms ctxt qs) counterexample,
   469             evaluation_terms = Option.map (K []) counterexample,
   470             timings = #timings (dest_result result), reports = #reports (dest_result result)}
   471         | NONE =>
   472           (Quickcheck.message ctxt "Conjecture is not executable with Quickcheck-narrowing";
   473            Quickcheck.empty_result)
   474       end
   475     else
   476       let
   477         val frees = Term.add_frees t []
   478         val t' = fold_rev absfree frees t
   479         fun wrap f t = uncurry (fold_rev Term.abs) (f (strip_abs t))
   480         val finitize = if Config.get ctxt finite_functions then wrap finitize_functions else I
   481         fun ensure_testable t =
   482           Const (@{const_name Quickcheck_Narrowing.ensure_testable}, fastype_of t --> fastype_of t) $ t
   483         fun is_genuine (SOME (true, _)) = true
   484           | is_genuine _ = false
   485         val counterexample_of = Option.map (apsnd (curry (op ~~) (map fst frees) o map post_process))
   486         val act = if catch_code_errors then try else (fn f => SOME o f)
   487         val execute =
   488           dynamic_value_strict (false, opts)
   489             ((is_genuine, counterexample_of),
   490               (get_counterexample, put_counterexample,
   491                 "Narrowing_Generators.put_counterexample"))
   492             ctxt (apfst o Option.map o apsnd o map)
   493       in
   494         case act execute (ensure_testable (finitize t')) of
   495           SOME (counterexample, result) =>
   496             Quickcheck.Result
   497              {counterexample = counterexample_of counterexample,
   498               evaluation_terms = Option.map (K []) counterexample,
   499               timings = #timings (dest_result result),
   500               reports = #reports (dest_result result)}
   501         | NONE =>
   502           (Quickcheck.message ctxt "Conjecture is not executable with Quickcheck-narrowing";
   503            Quickcheck.empty_result)
   504       end
   505   end;
   506 
   507 fun test_goals ctxt catch_code_errors insts goals =
   508   if (not (getenv "ISABELLE_GHC" = "")) then
   509     let
   510       val _ = Quickcheck.message ctxt "Testing conjecture with Quickcheck-narrowing...";
   511       val correct_inst_goals = Quickcheck_Common.instantiate_goals ctxt insts goals
   512     in
   513       Quickcheck_Common.collect_results (test_term ctxt catch_code_errors)
   514         (maps (map snd) correct_inst_goals) []
   515     end
   516   else
   517     (if Config.get ctxt Quickcheck.quiet then () else writeln
   518       ("Environment variable ISABELLE_GHC is not set. To use narrowing-based quickcheck, please set "
   519         ^ "this variable to your GHC Haskell compiler in your settings file. "
   520         ^ "To deactivate narrowing-based quickcheck, set quickcheck_narrowing_active to false.");
   521       [Quickcheck.empty_result])
   522 
   523 (* setup *)
   524 
   525 val active = Attrib.setup_config_bool @{binding quickcheck_narrowing_active} (K false);
   526 
   527 val _ =
   528   Theory.setup
   529    (Code.datatype_interpretation ensure_partial_term_of
   530     #> Code.datatype_interpretation ensure_partial_term_of_code
   531     #> Quickcheck_Common.datatype_interpretation @{plugin quickcheck_narrowing}
   532       (@{sort narrowing}, instantiate_narrowing_datatype)
   533     #> Context.theory_map (Quickcheck.add_tester ("narrowing", (active, test_goals))));
   534 
   535 end;