author | wenzelm |
Wed, 26 Nov 2014 20:05:34 +0100 | |
changeset 59058 | a78612c67ec0 |
parent 59028 | df7476e79558 |
child 59104 | a14475f044b2 |
permissions | -rw-r--r-- |
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
1 |
(* Title: HOL/Imperative_HOL/Heap_Monad.thy |
26170 | 2 |
Author: John Matthews, Galois Connections; Alexander Krauss, Lukas Bulwahn & Florian Haftmann, TU Muenchen |
3 |
*) |
|
4 |
||
58889 | 5 |
section {* A monad with a polymorphic heap and primitive reasoning infrastructure *} |
26170 | 6 |
|
7 |
theory Heap_Monad |
|
41413
64cd30d6b0b8
explicit file specifications -- avoid secondary load path;
wenzelm
parents:
40671
diff
changeset
|
8 |
imports |
64cd30d6b0b8
explicit file specifications -- avoid secondary load path;
wenzelm
parents:
40671
diff
changeset
|
9 |
Heap |
64cd30d6b0b8
explicit file specifications -- avoid secondary load path;
wenzelm
parents:
40671
diff
changeset
|
10 |
"~~/src/HOL/Library/Monad_Syntax" |
26170 | 11 |
begin |
12 |
||
13 |
subsection {* The monad *} |
|
14 |
||
37758 | 15 |
subsubsection {* Monad construction *} |
26170 | 16 |
|
17 |
text {* Monadic heap actions either produce values |
|
18 |
and transform the heap, or fail *} |
|
58310 | 19 |
datatype 'a Heap = Heap "heap \<Rightarrow> ('a \<times> heap) option" |
26170 | 20 |
|
40266
d72f1f734e5a
remove term_of equations for Heap type explicitly
haftmann
parents:
40173
diff
changeset
|
21 |
lemma [code, code del]: |
d72f1f734e5a
remove term_of equations for Heap type explicitly
haftmann
parents:
40173
diff
changeset
|
22 |
"(Code_Evaluation.term_of :: 'a::typerep Heap \<Rightarrow> Code_Evaluation.term) = Code_Evaluation.term_of" |
d72f1f734e5a
remove term_of equations for Heap type explicitly
haftmann
parents:
40173
diff
changeset
|
23 |
.. |
d72f1f734e5a
remove term_of equations for Heap type explicitly
haftmann
parents:
40173
diff
changeset
|
24 |
|
37709 | 25 |
primrec execute :: "'a Heap \<Rightarrow> heap \<Rightarrow> ('a \<times> heap) option" where |
26 |
[code del]: "execute (Heap f) = f" |
|
26170 | 27 |
|
37758 | 28 |
lemma Heap_cases [case_names succeed fail]: |
29 |
fixes f and h |
|
30 |
assumes succeed: "\<And>x h'. execute f h = Some (x, h') \<Longrightarrow> P" |
|
31 |
assumes fail: "execute f h = None \<Longrightarrow> P" |
|
32 |
shows P |
|
33 |
using assms by (cases "execute f h") auto |
|
34 |
||
26170 | 35 |
lemma Heap_execute [simp]: |
36 |
"Heap (execute f) = f" by (cases f) simp_all |
|
37 |
||
38 |
lemma Heap_eqI: |
|
39 |
"(\<And>h. execute f h = execute g h) \<Longrightarrow> f = g" |
|
39302
d7728f65b353
renamed lemmas: ext_iff -> fun_eq_iff, set_ext_iff -> set_eq_iff, set_ext -> set_eqI
nipkow
parents:
39250
diff
changeset
|
40 |
by (cases f, cases g) (auto simp: fun_eq_iff) |
26170 | 41 |
|
57956 | 42 |
named_theorems execute_simps "simplification rules for execute" |
37758 | 43 |
|
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
44 |
lemma execute_Let [execute_simps]: |
37758 | 45 |
"execute (let x = t in f x) = (let x = t in execute (f x))" |
46 |
by (simp add: Let_def) |
|
47 |
||
48 |
||
49 |
subsubsection {* Specialised lifters *} |
|
50 |
||
51 |
definition tap :: "(heap \<Rightarrow> 'a) \<Rightarrow> 'a Heap" where |
|
52 |
[code del]: "tap f = Heap (\<lambda>h. Some (f h, h))" |
|
53 |
||
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
54 |
lemma execute_tap [execute_simps]: |
37758 | 55 |
"execute (tap f) h = Some (f h, h)" |
56 |
by (simp add: tap_def) |
|
26170 | 57 |
|
37709 | 58 |
definition heap :: "(heap \<Rightarrow> 'a \<times> heap) \<Rightarrow> 'a Heap" where |
59 |
[code del]: "heap f = Heap (Some \<circ> f)" |
|
26170 | 60 |
|
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
61 |
lemma execute_heap [execute_simps]: |
37709 | 62 |
"execute (heap f) = Some \<circ> f" |
26170 | 63 |
by (simp add: heap_def) |
64 |
||
37754 | 65 |
definition guard :: "(heap \<Rightarrow> bool) \<Rightarrow> (heap \<Rightarrow> 'a \<times> heap) \<Rightarrow> 'a Heap" where |
66 |
[code del]: "guard P f = Heap (\<lambda>h. if P h then Some (f h) else None)" |
|
67 |
||
37758 | 68 |
lemma execute_guard [execute_simps]: |
37754 | 69 |
"\<not> P h \<Longrightarrow> execute (guard P f) h = None" |
70 |
"P h \<Longrightarrow> execute (guard P f) h = Some (f h)" |
|
71 |
by (simp_all add: guard_def) |
|
72 |
||
37758 | 73 |
|
74 |
subsubsection {* Predicate classifying successful computations *} |
|
75 |
||
76 |
definition success :: "'a Heap \<Rightarrow> heap \<Rightarrow> bool" where |
|
77 |
"success f h \<longleftrightarrow> execute f h \<noteq> None" |
|
78 |
||
79 |
lemma successI: |
|
80 |
"execute f h \<noteq> None \<Longrightarrow> success f h" |
|
81 |
by (simp add: success_def) |
|
82 |
||
83 |
lemma successE: |
|
84 |
assumes "success f h" |
|
58510 | 85 |
obtains r h' where "execute f h = Some (r, h')" |
86 |
using assms by (auto simp: success_def) |
|
37758 | 87 |
|
57956 | 88 |
named_theorems success_intros "introduction rules for success" |
37758 | 89 |
|
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
90 |
lemma success_tapI [success_intros]: |
37758 | 91 |
"success (tap f) h" |
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
92 |
by (rule successI) (simp add: execute_simps) |
37758 | 93 |
|
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
94 |
lemma success_heapI [success_intros]: |
37758 | 95 |
"success (heap f) h" |
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
96 |
by (rule successI) (simp add: execute_simps) |
37758 | 97 |
|
98 |
lemma success_guardI [success_intros]: |
|
99 |
"P h \<Longrightarrow> success (guard P f) h" |
|
100 |
by (rule successI) (simp add: execute_guard) |
|
101 |
||
102 |
lemma success_LetI [success_intros]: |
|
103 |
"x = t \<Longrightarrow> success (f x) h \<Longrightarrow> success (let x = t in f x) h" |
|
104 |
by (simp add: Let_def) |
|
105 |
||
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
106 |
lemma success_ifI: |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
107 |
"(c \<Longrightarrow> success t h) \<Longrightarrow> (\<not> c \<Longrightarrow> success e h) \<Longrightarrow> |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
108 |
success (if c then t else e) h" |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
109 |
by (simp add: success_def) |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
110 |
|
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
111 |
|
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
112 |
subsubsection {* Predicate for a simple relational calculus *} |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
113 |
|
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
114 |
text {* |
40671 | 115 |
The @{text effect} predicate states that when a computation @{text c} |
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
116 |
runs with the heap @{text h} will result in return value @{text r} |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
117 |
and a heap @{text "h'"}, i.e.~no exception occurs. |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
118 |
*} |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
119 |
|
40671 | 120 |
definition effect :: "'a Heap \<Rightarrow> heap \<Rightarrow> heap \<Rightarrow> 'a \<Rightarrow> bool" where |
121 |
effect_def: "effect c h h' r \<longleftrightarrow> execute c h = Some (r, h')" |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
122 |
|
40671 | 123 |
lemma effectI: |
124 |
"execute c h = Some (r, h') \<Longrightarrow> effect c h h' r" |
|
125 |
by (simp add: effect_def) |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
126 |
|
40671 | 127 |
lemma effectE: |
128 |
assumes "effect c h h' r" |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
129 |
obtains "r = fst (the (execute c h))" |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
130 |
and "h' = snd (the (execute c h))" |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
131 |
and "success c h" |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
132 |
proof (rule that) |
40671 | 133 |
from assms have *: "execute c h = Some (r, h')" by (simp add: effect_def) |
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
134 |
then show "success c h" by (simp add: success_def) |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
135 |
from * have "fst (the (execute c h)) = r" and "snd (the (execute c h)) = h'" |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
136 |
by simp_all |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
137 |
then show "r = fst (the (execute c h))" |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
138 |
and "h' = snd (the (execute c h))" by simp_all |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
139 |
qed |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
140 |
|
40671 | 141 |
lemma effect_success: |
142 |
"effect c h h' r \<Longrightarrow> success c h" |
|
143 |
by (simp add: effect_def success_def) |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
144 |
|
40671 | 145 |
lemma success_effectE: |
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
146 |
assumes "success c h" |
40671 | 147 |
obtains r h' where "effect c h h' r" |
148 |
using assms by (auto simp add: effect_def success_def) |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
149 |
|
40671 | 150 |
lemma effect_deterministic: |
151 |
assumes "effect f h h' a" |
|
152 |
and "effect f h h'' b" |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
153 |
shows "a = b" and "h' = h''" |
40671 | 154 |
using assms unfolding effect_def by auto |
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
155 |
|
57956 | 156 |
named_theorems effect_intros "introduction rules for effect" |
59028 | 157 |
and effect_elims "elimination rules for effect" |
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
158 |
|
40671 | 159 |
lemma effect_LetI [effect_intros]: |
160 |
assumes "x = t" "effect (f x) h h' r" |
|
161 |
shows "effect (let x = t in f x) h h' r" |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
162 |
using assms by simp |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
163 |
|
40671 | 164 |
lemma effect_LetE [effect_elims]: |
165 |
assumes "effect (let x = t in f x) h h' r" |
|
166 |
obtains "effect (f t) h h' r" |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
167 |
using assms by simp |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
168 |
|
40671 | 169 |
lemma effect_ifI: |
170 |
assumes "c \<Longrightarrow> effect t h h' r" |
|
171 |
and "\<not> c \<Longrightarrow> effect e h h' r" |
|
172 |
shows "effect (if c then t else e) h h' r" |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
173 |
by (cases c) (simp_all add: assms) |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
174 |
|
40671 | 175 |
lemma effect_ifE: |
176 |
assumes "effect (if c then t else e) h h' r" |
|
177 |
obtains "c" "effect t h h' r" |
|
178 |
| "\<not> c" "effect e h h' r" |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
179 |
using assms by (cases c) simp_all |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
180 |
|
40671 | 181 |
lemma effect_tapI [effect_intros]: |
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
182 |
assumes "h' = h" "r = f h" |
40671 | 183 |
shows "effect (tap f) h h' r" |
184 |
by (rule effectI) (simp add: assms execute_simps) |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
185 |
|
40671 | 186 |
lemma effect_tapE [effect_elims]: |
187 |
assumes "effect (tap f) h h' r" |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
188 |
obtains "h' = h" and "r = f h" |
40671 | 189 |
using assms by (rule effectE) (auto simp add: execute_simps) |
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
190 |
|
40671 | 191 |
lemma effect_heapI [effect_intros]: |
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
192 |
assumes "h' = snd (f h)" "r = fst (f h)" |
40671 | 193 |
shows "effect (heap f) h h' r" |
194 |
by (rule effectI) (simp add: assms execute_simps) |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
195 |
|
40671 | 196 |
lemma effect_heapE [effect_elims]: |
197 |
assumes "effect (heap f) h h' r" |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
198 |
obtains "h' = snd (f h)" and "r = fst (f h)" |
40671 | 199 |
using assms by (rule effectE) (simp add: execute_simps) |
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
200 |
|
40671 | 201 |
lemma effect_guardI [effect_intros]: |
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
202 |
assumes "P h" "h' = snd (f h)" "r = fst (f h)" |
40671 | 203 |
shows "effect (guard P f) h h' r" |
204 |
by (rule effectI) (simp add: assms execute_simps) |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
205 |
|
40671 | 206 |
lemma effect_guardE [effect_elims]: |
207 |
assumes "effect (guard P f) h h' r" |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
208 |
obtains "h' = snd (f h)" "r = fst (f h)" "P h" |
40671 | 209 |
using assms by (rule effectE) |
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
210 |
(auto simp add: execute_simps elim!: successE, cases "P h", auto simp add: execute_simps) |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
211 |
|
37758 | 212 |
|
213 |
subsubsection {* Monad combinators *} |
|
26170 | 214 |
|
37709 | 215 |
definition return :: "'a \<Rightarrow> 'a Heap" where |
26170 | 216 |
[code del]: "return x = heap (Pair x)" |
217 |
||
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
218 |
lemma execute_return [execute_simps]: |
37709 | 219 |
"execute (return x) = Some \<circ> Pair x" |
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
220 |
by (simp add: return_def execute_simps) |
26170 | 221 |
|
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
222 |
lemma success_returnI [success_intros]: |
37758 | 223 |
"success (return x) h" |
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
224 |
by (rule successI) (simp add: execute_simps) |
37758 | 225 |
|
40671 | 226 |
lemma effect_returnI [effect_intros]: |
227 |
"h = h' \<Longrightarrow> effect (return x) h h' x" |
|
228 |
by (rule effectI) (simp add: execute_simps) |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
229 |
|
40671 | 230 |
lemma effect_returnE [effect_elims]: |
231 |
assumes "effect (return x) h h' r" |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
232 |
obtains "r = x" "h' = h" |
40671 | 233 |
using assms by (rule effectE) (simp add: execute_simps) |
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
234 |
|
37709 | 235 |
definition raise :: "string \<Rightarrow> 'a Heap" where -- {* the string is just decoration *} |
236 |
[code del]: "raise s = Heap (\<lambda>_. None)" |
|
26170 | 237 |
|
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
238 |
lemma execute_raise [execute_simps]: |
37709 | 239 |
"execute (raise s) = (\<lambda>_. None)" |
26170 | 240 |
by (simp add: raise_def) |
241 |
||
40671 | 242 |
lemma effect_raiseE [effect_elims]: |
243 |
assumes "effect (raise x) h h' r" |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
244 |
obtains "False" |
40671 | 245 |
using assms by (rule effectE) (simp add: success_def execute_simps) |
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
246 |
|
37792 | 247 |
definition bind :: "'a Heap \<Rightarrow> ('a \<Rightarrow> 'b Heap) \<Rightarrow> 'b Heap" where |
248 |
[code del]: "bind f g = Heap (\<lambda>h. case execute f h of |
|
37709 | 249 |
Some (x, h') \<Rightarrow> execute (g x) h' |
250 |
| None \<Rightarrow> None)" |
|
251 |
||
52622
e0ff1625e96d
localized and modernized adhoc-overloading (patch by Christian Sternagel);
wenzelm
parents:
52435
diff
changeset
|
252 |
adhoc_overloading |
e0ff1625e96d
localized and modernized adhoc-overloading (patch by Christian Sternagel);
wenzelm
parents:
52435
diff
changeset
|
253 |
Monad_Syntax.bind Heap_Monad.bind |
37792 | 254 |
|
37758 | 255 |
lemma execute_bind [execute_simps]: |
37709 | 256 |
"execute f h = Some (x, h') \<Longrightarrow> execute (f \<guillemotright>= g) h = execute (g x) h'" |
257 |
"execute f h = None \<Longrightarrow> execute (f \<guillemotright>= g) h = None" |
|
37756
59caa6180fff
avoid slightly odd "M" suffix; rename mapM to fold_map (fold_map_abort would be more correct, though)
haftmann
parents:
37754
diff
changeset
|
258 |
by (simp_all add: bind_def) |
37709 | 259 |
|
38409 | 260 |
lemma execute_bind_case: |
261 |
"execute (f \<guillemotright>= g) h = (case (execute f h) of |
|
262 |
Some (x, h') \<Rightarrow> execute (g x) h' | None \<Rightarrow> None)" |
|
263 |
by (simp add: bind_def) |
|
264 |
||
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
265 |
lemma execute_bind_success: |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
266 |
"success f h \<Longrightarrow> execute (f \<guillemotright>= g) h = execute (g (fst (the (execute f h)))) (snd (the (execute f h)))" |
58510 | 267 |
by (cases f h rule: Heap_cases) (auto elim: successE simp add: bind_def) |
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
268 |
|
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
269 |
lemma success_bind_executeI: |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
270 |
"execute f h = Some (x, h') \<Longrightarrow> success (g x) h' \<Longrightarrow> success (f \<guillemotright>= g) h" |
58510 | 271 |
by (auto intro!: successI elim: successE simp add: bind_def) |
37758 | 272 |
|
40671 | 273 |
lemma success_bind_effectI [success_intros]: |
274 |
"effect f h h' x \<Longrightarrow> success (g x) h' \<Longrightarrow> success (f \<guillemotright>= g) h" |
|
275 |
by (auto simp add: effect_def success_def bind_def) |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
276 |
|
40671 | 277 |
lemma effect_bindI [effect_intros]: |
278 |
assumes "effect f h h' r" "effect (g r) h' h'' r'" |
|
279 |
shows "effect (f \<guillemotright>= g) h h'' r'" |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
280 |
using assms |
40671 | 281 |
apply (auto intro!: effectI elim!: effectE successE) |
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
282 |
apply (subst execute_bind, simp_all) |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
283 |
done |
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
284 |
|
40671 | 285 |
lemma effect_bindE [effect_elims]: |
286 |
assumes "effect (f \<guillemotright>= g) h h'' r'" |
|
287 |
obtains h' r where "effect f h h' r" "effect (g r) h' h'' r'" |
|
288 |
using assms by (auto simp add: effect_def bind_def split: option.split_asm) |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
289 |
|
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
290 |
lemma execute_bind_eq_SomeI: |
37878 | 291 |
assumes "execute f h = Some (x, h')" |
292 |
and "execute (g x) h' = Some (y, h'')" |
|
293 |
shows "execute (f \<guillemotright>= g) h = Some (y, h'')" |
|
37756
59caa6180fff
avoid slightly odd "M" suffix; rename mapM to fold_map (fold_map_abort would be more correct, though)
haftmann
parents:
37754
diff
changeset
|
294 |
using assms by (simp add: bind_def) |
37754 | 295 |
|
37709 | 296 |
lemma return_bind [simp]: "return x \<guillemotright>= f = f x" |
51485
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
297 |
by (rule Heap_eqI) (simp add: execute_simps) |
37709 | 298 |
|
299 |
lemma bind_return [simp]: "f \<guillemotright>= return = f" |
|
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
300 |
by (rule Heap_eqI) (simp add: bind_def execute_simps split: option.splits) |
37709 | 301 |
|
37828 | 302 |
lemma bind_bind [simp]: "(f \<guillemotright>= g) \<guillemotright>= k = (f :: 'a Heap) \<guillemotright>= (\<lambda>x. g x \<guillemotright>= k)" |
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
303 |
by (rule Heap_eqI) (simp add: bind_def execute_simps split: option.splits) |
37709 | 304 |
|
305 |
lemma raise_bind [simp]: "raise e \<guillemotright>= f = raise e" |
|
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
306 |
by (rule Heap_eqI) (simp add: execute_simps) |
37709 | 307 |
|
26170 | 308 |
|
37758 | 309 |
subsection {* Generic combinators *} |
26170 | 310 |
|
37758 | 311 |
subsubsection {* Assertions *} |
26170 | 312 |
|
37709 | 313 |
definition assert :: "('a \<Rightarrow> bool) \<Rightarrow> 'a \<Rightarrow> 'a Heap" where |
314 |
"assert P x = (if P x then return x else raise ''assert'')" |
|
28742 | 315 |
|
37758 | 316 |
lemma execute_assert [execute_simps]: |
37754 | 317 |
"P x \<Longrightarrow> execute (assert P x) h = Some (x, h)" |
318 |
"\<not> P x \<Longrightarrow> execute (assert P x) h = None" |
|
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
319 |
by (simp_all add: assert_def execute_simps) |
37754 | 320 |
|
37758 | 321 |
lemma success_assertI [success_intros]: |
322 |
"P x \<Longrightarrow> success (assert P x) h" |
|
323 |
by (rule successI) (simp add: execute_assert) |
|
324 |
||
40671 | 325 |
lemma effect_assertI [effect_intros]: |
326 |
"P x \<Longrightarrow> h' = h \<Longrightarrow> r = x \<Longrightarrow> effect (assert P x) h h' r" |
|
327 |
by (rule effectI) (simp add: execute_assert) |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
328 |
|
40671 | 329 |
lemma effect_assertE [effect_elims]: |
330 |
assumes "effect (assert P x) h h' r" |
|
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
331 |
obtains "P x" "r = x" "h' = h" |
40671 | 332 |
using assms by (rule effectE) (cases "P x", simp_all add: execute_assert success_def) |
37771
1bec64044b5e
spelt out relational framework in a consistent way
haftmann
parents:
37758
diff
changeset
|
333 |
|
28742 | 334 |
lemma assert_cong [fundef_cong]: |
335 |
assumes "P = P'" |
|
336 |
assumes "\<And>x. P' x \<Longrightarrow> f x = f' x" |
|
337 |
shows "(assert P x >>= f) = (assert P' x >>= f')" |
|
37754 | 338 |
by (rule Heap_eqI) (insert assms, simp add: assert_def) |
28742 | 339 |
|
37758 | 340 |
|
341 |
subsubsection {* Plain lifting *} |
|
342 |
||
37754 | 343 |
definition lift :: "('a \<Rightarrow> 'b) \<Rightarrow> 'a \<Rightarrow> 'b Heap" where |
344 |
"lift f = return o f" |
|
37709 | 345 |
|
37754 | 346 |
lemma lift_collapse [simp]: |
347 |
"lift f x = return (f x)" |
|
348 |
by (simp add: lift_def) |
|
37709 | 349 |
|
37754 | 350 |
lemma bind_lift: |
351 |
"(f \<guillemotright>= lift g) = (f \<guillemotright>= (\<lambda>x. return (g x)))" |
|
352 |
by (simp add: lift_def comp_def) |
|
37709 | 353 |
|
37758 | 354 |
|
355 |
subsubsection {* Iteration -- warning: this is rarely useful! *} |
|
356 |
||
37756
59caa6180fff
avoid slightly odd "M" suffix; rename mapM to fold_map (fold_map_abort would be more correct, though)
haftmann
parents:
37754
diff
changeset
|
357 |
primrec fold_map :: "('a \<Rightarrow> 'b Heap) \<Rightarrow> 'a list \<Rightarrow> 'b list Heap" where |
59caa6180fff
avoid slightly odd "M" suffix; rename mapM to fold_map (fold_map_abort would be more correct, though)
haftmann
parents:
37754
diff
changeset
|
358 |
"fold_map f [] = return []" |
37792 | 359 |
| "fold_map f (x # xs) = do { |
37709 | 360 |
y \<leftarrow> f x; |
37756
59caa6180fff
avoid slightly odd "M" suffix; rename mapM to fold_map (fold_map_abort would be more correct, though)
haftmann
parents:
37754
diff
changeset
|
361 |
ys \<leftarrow> fold_map f xs; |
37709 | 362 |
return (y # ys) |
37792 | 363 |
}" |
37709 | 364 |
|
37756
59caa6180fff
avoid slightly odd "M" suffix; rename mapM to fold_map (fold_map_abort would be more correct, though)
haftmann
parents:
37754
diff
changeset
|
365 |
lemma fold_map_append: |
59caa6180fff
avoid slightly odd "M" suffix; rename mapM to fold_map (fold_map_abort would be more correct, though)
haftmann
parents:
37754
diff
changeset
|
366 |
"fold_map f (xs @ ys) = fold_map f xs \<guillemotright>= (\<lambda>xs. fold_map f ys \<guillemotright>= (\<lambda>ys. return (xs @ ys)))" |
37754 | 367 |
by (induct xs) simp_all |
368 |
||
37758 | 369 |
lemma execute_fold_map_unchanged_heap [execute_simps]: |
37754 | 370 |
assumes "\<And>x. x \<in> set xs \<Longrightarrow> \<exists>y. execute (f x) h = Some (y, h)" |
37756
59caa6180fff
avoid slightly odd "M" suffix; rename mapM to fold_map (fold_map_abort would be more correct, though)
haftmann
parents:
37754
diff
changeset
|
371 |
shows "execute (fold_map f xs) h = |
37754 | 372 |
Some (List.map (\<lambda>x. fst (the (execute (f x) h))) xs, h)" |
373 |
using assms proof (induct xs) |
|
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
374 |
case Nil show ?case by (simp add: execute_simps) |
37754 | 375 |
next |
376 |
case (Cons x xs) |
|
377 |
from Cons.prems obtain y |
|
378 |
where y: "execute (f x) h = Some (y, h)" by auto |
|
37756
59caa6180fff
avoid slightly odd "M" suffix; rename mapM to fold_map (fold_map_abort would be more correct, though)
haftmann
parents:
37754
diff
changeset
|
379 |
moreover from Cons.prems Cons.hyps have "execute (fold_map f xs) h = |
37754 | 380 |
Some (map (\<lambda>x. fst (the (execute (f x) h))) xs, h)" by auto |
37787
30dc3abf4a58
theorem collections do not contain default rules any longer
haftmann
parents:
37772
diff
changeset
|
381 |
ultimately show ?case by (simp, simp only: execute_bind(1), simp add: execute_simps) |
37754 | 382 |
qed |
383 |
||
40267 | 384 |
|
385 |
subsection {* Partial function definition setup *} |
|
386 |
||
387 |
definition Heap_ord :: "'a Heap \<Rightarrow> 'a Heap \<Rightarrow> bool" where |
|
388 |
"Heap_ord = img_ord execute (fun_ord option_ord)" |
|
389 |
||
44174
d1d79f0e1ea6
make more HOL theories work with separate set type
huffman
parents:
43324
diff
changeset
|
390 |
definition Heap_lub :: "'a Heap set \<Rightarrow> 'a Heap" where |
40267 | 391 |
"Heap_lub = img_lub execute Heap (fun_lub (flat_lub None))" |
392 |
||
54630
9061af4d5ebc
restrict admissibility to non-empty chains to allow more syntax-directed proof rules
Andreas Lochbihler
parents:
53361
diff
changeset
|
393 |
lemma Heap_lub_empty: "Heap_lub {} = Heap Map.empty" |
9061af4d5ebc
restrict admissibility to non-empty chains to allow more syntax-directed proof rules
Andreas Lochbihler
parents:
53361
diff
changeset
|
394 |
by(simp add: Heap_lub_def img_lub_def fun_lub_def flat_lub_def) |
9061af4d5ebc
restrict admissibility to non-empty chains to allow more syntax-directed proof rules
Andreas Lochbihler
parents:
53361
diff
changeset
|
395 |
|
51485
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
396 |
lemma heap_interpretation: "partial_function_definitions Heap_ord Heap_lub" |
40267 | 397 |
proof - |
398 |
have "partial_function_definitions (fun_ord option_ord) (fun_lub (flat_lub None))" |
|
399 |
by (rule partial_function_lift) (rule flat_interpretation) |
|
400 |
then have "partial_function_definitions (img_ord execute (fun_ord option_ord)) |
|
401 |
(img_lub execute Heap (fun_lub (flat_lub None)))" |
|
402 |
by (rule partial_function_image) (auto intro: Heap_eqI) |
|
403 |
then show "partial_function_definitions Heap_ord Heap_lub" |
|
404 |
by (simp only: Heap_ord_def Heap_lub_def) |
|
405 |
qed |
|
406 |
||
51485
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
407 |
interpretation heap!: partial_function_definitions Heap_ord Heap_lub |
54630
9061af4d5ebc
restrict admissibility to non-empty chains to allow more syntax-directed proof rules
Andreas Lochbihler
parents:
53361
diff
changeset
|
408 |
where "Heap_lub {} \<equiv> Heap Map.empty" |
9061af4d5ebc
restrict admissibility to non-empty chains to allow more syntax-directed proof rules
Andreas Lochbihler
parents:
53361
diff
changeset
|
409 |
by (fact heap_interpretation)(simp add: Heap_lub_empty) |
51485
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
410 |
|
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
411 |
lemma heap_step_admissible: |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
412 |
"option.admissible |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
413 |
(\<lambda>f:: 'a => ('b * 'c) option. \<forall>h h' r. f h = Some (r, h') \<longrightarrow> P x h h' r)" |
53361
1cb7d3c0cf31
move admissible out of class ccpo to avoid unnecessary class predicate in foundational theorems
Andreas Lochbihler
parents:
52728
diff
changeset
|
414 |
proof (rule ccpo.admissibleI) |
51485
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
415 |
fix A :: "('a \<Rightarrow> ('b * 'c) option) set" |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
416 |
assume ch: "Complete_Partial_Order.chain option.le_fun A" |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
417 |
and IH: "\<forall>f\<in>A. \<forall>h h' r. f h = Some (r, h') \<longrightarrow> P x h h' r" |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
418 |
from ch have ch': "\<And>x. Complete_Partial_Order.chain option_ord {y. \<exists>f\<in>A. y = f x}" by (rule chain_fun) |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
419 |
show "\<forall>h h' r. option.lub_fun A h = Some (r, h') \<longrightarrow> P x h h' r" |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
420 |
proof (intro allI impI) |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
421 |
fix h h' r assume "option.lub_fun A h = Some (r, h')" |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
422 |
from flat_lub_in_chain[OF ch' this[unfolded fun_lub_def]] |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
423 |
have "Some (r, h') \<in> {y. \<exists>f\<in>A. y = f h}" by simp |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
424 |
then have "\<exists>f\<in>A. f h = Some (r, h')" by auto |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
425 |
with IH show "P x h h' r" by auto |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
426 |
qed |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
427 |
qed |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
428 |
|
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
429 |
lemma admissible_heap: |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
430 |
"heap.admissible (\<lambda>f. \<forall>x h h' r. effect (f x) h h' r \<longrightarrow> P x h h' r)" |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
431 |
proof (rule admissible_fun[OF heap_interpretation]) |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
432 |
fix x |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
433 |
show "ccpo.admissible Heap_lub Heap_ord (\<lambda>a. \<forall>h h' r. effect a h h' r \<longrightarrow> P x h h' r)" |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
434 |
unfolding Heap_ord_def Heap_lub_def |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
435 |
proof (intro admissible_image partial_function_lift flat_interpretation) |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
436 |
show "option.admissible ((\<lambda>a. \<forall>h h' r. effect a h h' r \<longrightarrow> P x h h' r) \<circ> Heap)" |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
437 |
unfolding comp_def effect_def execute.simps |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
438 |
by (rule heap_step_admissible) |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
439 |
qed (auto simp add: Heap_eqI) |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
440 |
qed |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
441 |
|
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
442 |
lemma fixp_induct_heap: |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
443 |
fixes F :: "'c \<Rightarrow> 'c" and |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
444 |
U :: "'c \<Rightarrow> 'b \<Rightarrow> 'a Heap" and |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
445 |
C :: "('b \<Rightarrow> 'a Heap) \<Rightarrow> 'c" and |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
446 |
P :: "'b \<Rightarrow> heap \<Rightarrow> heap \<Rightarrow> 'a \<Rightarrow> bool" |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
447 |
assumes mono: "\<And>x. monotone (fun_ord Heap_ord) Heap_ord (\<lambda>f. U (F (C f)) x)" |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
448 |
assumes eq: "f \<equiv> C (ccpo.fixp (fun_lub Heap_lub) (fun_ord Heap_ord) (\<lambda>f. U (F (C f))))" |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
449 |
assumes inverse2: "\<And>f. U (C f) = f" |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
450 |
assumes step: "\<And>f x h h' r. (\<And>x h h' r. effect (U f x) h h' r \<Longrightarrow> P x h h' r) |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
451 |
\<Longrightarrow> effect (U (F f) x) h h' r \<Longrightarrow> P x h h' r" |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
452 |
assumes defined: "effect (U f x) h h' r" |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
453 |
shows "P x h h' r" |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
454 |
using step defined heap.fixp_induct_uc[of U F C, OF mono eq inverse2 admissible_heap, of P] |
54630
9061af4d5ebc
restrict admissibility to non-empty chains to allow more syntax-directed proof rules
Andreas Lochbihler
parents:
53361
diff
changeset
|
455 |
unfolding effect_def execute.simps |
51485
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
456 |
by blast |
637aa1649ac7
added rudimentary induction rule for partial_function (heap)
krauss
parents:
51143
diff
changeset
|
457 |
|
42949
618adb3584e5
separate initializations for different modes of partial_function -- generation of induction rules will be non-uniform
krauss
parents:
41413
diff
changeset
|
458 |
declaration {* Partial_Function.init "heap" @{term heap.fixp_fun} |
52728
470b579f35d2
derive specialized version of full fixpoint induction (with admissibility)
krauss
parents:
52622
diff
changeset
|
459 |
@{term heap.mono_body} @{thm heap.fixp_rule_uc} @{thm heap.fixp_induct_uc} |
470b579f35d2
derive specialized version of full fixpoint induction (with admissibility)
krauss
parents:
52622
diff
changeset
|
460 |
(SOME @{thm fixp_induct_heap}) *} |
42949
618adb3584e5
separate initializations for different modes of partial_function -- generation of induction rules will be non-uniform
krauss
parents:
41413
diff
changeset
|
461 |
|
618adb3584e5
separate initializations for different modes of partial_function -- generation of induction rules will be non-uniform
krauss
parents:
41413
diff
changeset
|
462 |
|
40267 | 463 |
abbreviation "mono_Heap \<equiv> monotone (fun_ord Heap_ord) Heap_ord" |
464 |
||
465 |
lemma Heap_ordI: |
|
466 |
assumes "\<And>h. execute x h = None \<or> execute x h = execute y h" |
|
467 |
shows "Heap_ord x y" |
|
468 |
using assms unfolding Heap_ord_def img_ord_def fun_ord_def flat_ord_def |
|
469 |
by blast |
|
470 |
||
471 |
lemma Heap_ordE: |
|
472 |
assumes "Heap_ord x y" |
|
473 |
obtains "execute x h = None" | "execute x h = execute y h" |
|
474 |
using assms unfolding Heap_ord_def img_ord_def fun_ord_def flat_ord_def |
|
475 |
by atomize_elim blast |
|
476 |
||
46029
4a19e3d147c3
attribute code_abbrev superseedes code_unfold_post; tuned names and spacing
haftmann
parents:
45294
diff
changeset
|
477 |
lemma bind_mono [partial_function_mono]: |
40267 | 478 |
assumes mf: "mono_Heap B" and mg: "\<And>y. mono_Heap (\<lambda>f. C y f)" |
479 |
shows "mono_Heap (\<lambda>f. B f \<guillemotright>= (\<lambda>y. C y f))" |
|
480 |
proof (rule monotoneI) |
|
481 |
fix f g :: "'a \<Rightarrow> 'b Heap" assume fg: "fun_ord Heap_ord f g" |
|
482 |
from mf |
|
483 |
have 1: "Heap_ord (B f) (B g)" by (rule monotoneD) (rule fg) |
|
484 |
from mg |
|
485 |
have 2: "\<And>y'. Heap_ord (C y' f) (C y' g)" by (rule monotoneD) (rule fg) |
|
486 |
||
487 |
have "Heap_ord (B f \<guillemotright>= (\<lambda>y. C y f)) (B g \<guillemotright>= (\<lambda>y. C y f))" |
|
488 |
(is "Heap_ord ?L ?R") |
|
489 |
proof (rule Heap_ordI) |
|
490 |
fix h |
|
491 |
from 1 show "execute ?L h = None \<or> execute ?L h = execute ?R h" |
|
492 |
by (rule Heap_ordE[where h = h]) (auto simp: execute_bind_case) |
|
493 |
qed |
|
494 |
also |
|
495 |
have "Heap_ord (B g \<guillemotright>= (\<lambda>y'. C y' f)) (B g \<guillemotright>= (\<lambda>y'. C y' g))" |
|
496 |
(is "Heap_ord ?L ?R") |
|
497 |
proof (rule Heap_ordI) |
|
498 |
fix h |
|
499 |
show "execute ?L h = None \<or> execute ?L h = execute ?R h" |
|
500 |
proof (cases "execute (B g) h") |
|
501 |
case None |
|
502 |
then have "execute ?L h = None" by (auto simp: execute_bind_case) |
|
503 |
thus ?thesis .. |
|
504 |
next |
|
505 |
case Some |
|
506 |
then obtain r h' where "execute (B g) h = Some (r, h')" |
|
507 |
by (metis surjective_pairing) |
|
508 |
then have "execute ?L h = execute (C r f) h'" |
|
509 |
"execute ?R h = execute (C r g) h'" |
|
510 |
by (auto simp: execute_bind_case) |
|
511 |
with 2[of r] show ?thesis by (auto elim: Heap_ordE) |
|
512 |
qed |
|
513 |
qed |
|
514 |
finally (heap.leq_trans) |
|
515 |
show "Heap_ord (B f \<guillemotright>= (\<lambda>y. C y f)) (B g \<guillemotright>= (\<lambda>y'. C y' g))" . |
|
516 |
qed |
|
517 |
||
518 |
||
26182 | 519 |
subsection {* Code generator setup *} |
520 |
||
521 |
subsubsection {* Logical intermediate layer *} |
|
522 |
||
39250
548a3e5521ab
changing String.literal to a type instead of a datatype
bulwahn
parents:
39198
diff
changeset
|
523 |
definition raise' :: "String.literal \<Rightarrow> 'a Heap" where |
57437 | 524 |
[code del]: "raise' s = raise (String.explode s)" |
39250
548a3e5521ab
changing String.literal to a type instead of a datatype
bulwahn
parents:
39198
diff
changeset
|
525 |
|
46029
4a19e3d147c3
attribute code_abbrev superseedes code_unfold_post; tuned names and spacing
haftmann
parents:
45294
diff
changeset
|
526 |
lemma [code_abbrev]: "raise' (STR s) = raise s" |
4a19e3d147c3
attribute code_abbrev superseedes code_unfold_post; tuned names and spacing
haftmann
parents:
45294
diff
changeset
|
527 |
unfolding raise'_def by (simp add: STR_inverse) |
26182 | 528 |
|
46029
4a19e3d147c3
attribute code_abbrev superseedes code_unfold_post; tuned names and spacing
haftmann
parents:
45294
diff
changeset
|
529 |
lemma raise_raise': (* FIXME delete candidate *) |
37709 | 530 |
"raise s = raise' (STR s)" |
39250
548a3e5521ab
changing String.literal to a type instead of a datatype
bulwahn
parents:
39198
diff
changeset
|
531 |
unfolding raise'_def by (simp add: STR_inverse) |
26182 | 532 |
|
37709 | 533 |
code_datatype raise' -- {* avoid @{const "Heap"} formally *} |
26182 | 534 |
|
535 |
||
27707 | 536 |
subsubsection {* SML and OCaml *} |
26182 | 537 |
|
52435
6646bb548c6b
migration from code_(const|type|class|instance) to code_printing and from code_module to code_identifier
haftmann
parents:
52388
diff
changeset
|
538 |
code_printing type_constructor Heap \<rightharpoonup> (SML) "(unit/ ->/ _)" |
6646bb548c6b
migration from code_(const|type|class|instance) to code_printing and from code_module to code_identifier
haftmann
parents:
52388
diff
changeset
|
539 |
code_printing constant bind \<rightharpoonup> (SML) "!(fn/ f'_/ =>/ fn/ ()/ =>/ f'_/ (_/ ())/ ())" |
6646bb548c6b
migration from code_(const|type|class|instance) to code_printing and from code_module to code_identifier
haftmann
parents:
52388
diff
changeset
|
540 |
code_printing constant return \<rightharpoonup> (SML) "!(fn/ ()/ =>/ _)" |
6646bb548c6b
migration from code_(const|type|class|instance) to code_printing and from code_module to code_identifier
haftmann
parents:
52388
diff
changeset
|
541 |
code_printing constant Heap_Monad.raise' \<rightharpoonup> (SML) "!(raise/ Fail/ _)" |
26182 | 542 |
|
52435
6646bb548c6b
migration from code_(const|type|class|instance) to code_printing and from code_module to code_identifier
haftmann
parents:
52388
diff
changeset
|
543 |
code_printing type_constructor Heap \<rightharpoonup> (OCaml) "(unit/ ->/ _)" |
6646bb548c6b
migration from code_(const|type|class|instance) to code_printing and from code_module to code_identifier
haftmann
parents:
52388
diff
changeset
|
544 |
code_printing constant bind \<rightharpoonup> (OCaml) "!(fun/ f'_/ ()/ ->/ f'_/ (_/ ())/ ())" |
6646bb548c6b
migration from code_(const|type|class|instance) to code_printing and from code_module to code_identifier
haftmann
parents:
52388
diff
changeset
|
545 |
code_printing constant return \<rightharpoonup> (OCaml) "!(fun/ ()/ ->/ _)" |
6646bb548c6b
migration from code_(const|type|class|instance) to code_printing and from code_module to code_identifier
haftmann
parents:
52388
diff
changeset
|
546 |
code_printing constant Heap_Monad.raise' \<rightharpoonup> (OCaml) "failwith" |
27707 | 547 |
|
37838 | 548 |
|
549 |
subsubsection {* Haskell *} |
|
550 |
||
551 |
text {* Adaption layer *} |
|
552 |
||
55372 | 553 |
code_printing code_module "Heap" \<rightharpoonup> (Haskell) |
37838 | 554 |
{*import qualified Control.Monad; |
555 |
import qualified Control.Monad.ST; |
|
556 |
import qualified Data.STRef; |
|
557 |
import qualified Data.Array.ST; |
|
558 |
||
559 |
type RealWorld = Control.Monad.ST.RealWorld; |
|
560 |
type ST s a = Control.Monad.ST.ST s a; |
|
561 |
type STRef s a = Data.STRef.STRef s a; |
|
51143
0a2371e7ced3
two target language numeral types: integer and natural, as replacement for code_numeral;
haftmann
parents:
48073
diff
changeset
|
562 |
type STArray s a = Data.Array.ST.STArray s Integer a; |
37838 | 563 |
|
564 |
newSTRef = Data.STRef.newSTRef; |
|
565 |
readSTRef = Data.STRef.readSTRef; |
|
566 |
writeSTRef = Data.STRef.writeSTRef; |
|
567 |
||
51143
0a2371e7ced3
two target language numeral types: integer and natural, as replacement for code_numeral;
haftmann
parents:
48073
diff
changeset
|
568 |
newArray :: Integer -> a -> ST s (STArray s a); |
58939
994fe0ba8335
less space-wasting serialization setup: highest cell of array has been unused so far
haftmann
parents:
58889
diff
changeset
|
569 |
newArray k = Data.Array.ST.newArray (0, k - 1); |
37838 | 570 |
|
571 |
newListArray :: [a] -> ST s (STArray s a); |
|
58939
994fe0ba8335
less space-wasting serialization setup: highest cell of array has been unused so far
haftmann
parents:
58889
diff
changeset
|
572 |
newListArray xs = Data.Array.ST.newListArray (0, (fromInteger . toInteger . length) xs - 1) xs; |
37838 | 573 |
|
51143
0a2371e7ced3
two target language numeral types: integer and natural, as replacement for code_numeral;
haftmann
parents:
48073
diff
changeset
|
574 |
newFunArray :: Integer -> (Integer -> a) -> ST s (STArray s a); |
58939
994fe0ba8335
less space-wasting serialization setup: highest cell of array has been unused so far
haftmann
parents:
58889
diff
changeset
|
575 |
newFunArray k f = Data.Array.ST.newListArray (0, k - 1) (map f [0..k-1]); |
37838 | 576 |
|
51143
0a2371e7ced3
two target language numeral types: integer and natural, as replacement for code_numeral;
haftmann
parents:
48073
diff
changeset
|
577 |
lengthArray :: STArray s a -> ST s Integer; |
58939
994fe0ba8335
less space-wasting serialization setup: highest cell of array has been unused so far
haftmann
parents:
58889
diff
changeset
|
578 |
lengthArray a = Control.Monad.liftM (\(_, l) -> l + 1) (Data.Array.ST.getBounds a); |
37838 | 579 |
|
51143
0a2371e7ced3
two target language numeral types: integer and natural, as replacement for code_numeral;
haftmann
parents:
48073
diff
changeset
|
580 |
readArray :: STArray s a -> Integer -> ST s a; |
37838 | 581 |
readArray = Data.Array.ST.readArray; |
582 |
||
51143
0a2371e7ced3
two target language numeral types: integer and natural, as replacement for code_numeral;
haftmann
parents:
48073
diff
changeset
|
583 |
writeArray :: STArray s a -> Integer -> a -> ST s (); |
37838 | 584 |
writeArray = Data.Array.ST.writeArray;*} |
585 |
||
586 |
code_reserved Haskell Heap |
|
587 |
||
588 |
text {* Monad *} |
|
589 |
||
52435
6646bb548c6b
migration from code_(const|type|class|instance) to code_printing and from code_module to code_identifier
haftmann
parents:
52388
diff
changeset
|
590 |
code_printing type_constructor Heap \<rightharpoonup> (Haskell) "Heap.ST/ Heap.RealWorld/ _" |
37838 | 591 |
code_monad bind Haskell |
52435
6646bb548c6b
migration from code_(const|type|class|instance) to code_printing and from code_module to code_identifier
haftmann
parents:
52388
diff
changeset
|
592 |
code_printing constant return \<rightharpoonup> (Haskell) "return" |
6646bb548c6b
migration from code_(const|type|class|instance) to code_printing and from code_module to code_identifier
haftmann
parents:
52388
diff
changeset
|
593 |
code_printing constant Heap_Monad.raise' \<rightharpoonup> (Haskell) "error" |
37838 | 594 |
|
595 |
||
596 |
subsubsection {* Scala *} |
|
597 |
||
55372 | 598 |
code_printing code_module "Heap" \<rightharpoonup> (Scala) |
38968
e55deaa22fff
do not print object frame around Scala includes -- this is in the responsibility of the user
haftmann
parents:
38773
diff
changeset
|
599 |
{*object Heap { |
e55deaa22fff
do not print object frame around Scala includes -- this is in the responsibility of the user
haftmann
parents:
38773
diff
changeset
|
600 |
def bind[A, B](f: Unit => A, g: A => Unit => B): Unit => B = (_: Unit) => g (f ()) () |
e55deaa22fff
do not print object frame around Scala includes -- this is in the responsibility of the user
haftmann
parents:
38773
diff
changeset
|
601 |
} |
37842 | 602 |
|
603 |
class Ref[A](x: A) { |
|
604 |
var value = x |
|
605 |
} |
|
606 |
||
607 |
object Ref { |
|
38771 | 608 |
def apply[A](x: A): Ref[A] = |
609 |
new Ref[A](x) |
|
610 |
def lookup[A](r: Ref[A]): A = |
|
611 |
r.value |
|
612 |
def update[A](r: Ref[A], x: A): Unit = |
|
613 |
{ r.value = x } |
|
37842 | 614 |
} |
615 |
||
37964 | 616 |
object Array { |
38968
e55deaa22fff
do not print object frame around Scala includes -- this is in the responsibility of the user
haftmann
parents:
38773
diff
changeset
|
617 |
import collection.mutable.ArraySeq |
51143
0a2371e7ced3
two target language numeral types: integer and natural, as replacement for code_numeral;
haftmann
parents:
48073
diff
changeset
|
618 |
def alloc[A](n: BigInt)(x: A): ArraySeq[A] = |
0a2371e7ced3
two target language numeral types: integer and natural, as replacement for code_numeral;
haftmann
parents:
48073
diff
changeset
|
619 |
ArraySeq.fill(n.toInt)(x) |
0a2371e7ced3
two target language numeral types: integer and natural, as replacement for code_numeral;
haftmann
parents:
48073
diff
changeset
|
620 |
def make[A](n: BigInt)(f: BigInt => A): ArraySeq[A] = |
0a2371e7ced3
two target language numeral types: integer and natural, as replacement for code_numeral;
haftmann
parents:
48073
diff
changeset
|
621 |
ArraySeq.tabulate(n.toInt)((k: Int) => f(BigInt(k))) |
0a2371e7ced3
two target language numeral types: integer and natural, as replacement for code_numeral;
haftmann
parents:
48073
diff
changeset
|
622 |
def len[A](a: ArraySeq[A]): BigInt = |
0a2371e7ced3
two target language numeral types: integer and natural, as replacement for code_numeral;
haftmann
parents:
48073
diff
changeset
|
623 |
BigInt(a.length) |
0a2371e7ced3
two target language numeral types: integer and natural, as replacement for code_numeral;
haftmann
parents:
48073
diff
changeset
|
624 |
def nth[A](a: ArraySeq[A], n: BigInt): A = |
0a2371e7ced3
two target language numeral types: integer and natural, as replacement for code_numeral;
haftmann
parents:
48073
diff
changeset
|
625 |
a(n.toInt) |
0a2371e7ced3
two target language numeral types: integer and natural, as replacement for code_numeral;
haftmann
parents:
48073
diff
changeset
|
626 |
def upd[A](a: ArraySeq[A], n: BigInt, x: A): Unit = |
0a2371e7ced3
two target language numeral types: integer and natural, as replacement for code_numeral;
haftmann
parents:
48073
diff
changeset
|
627 |
a.update(n.toInt, x) |
38771 | 628 |
def freeze[A](a: ArraySeq[A]): List[A] = |
629 |
a.toList |
|
38968
e55deaa22fff
do not print object frame around Scala includes -- this is in the responsibility of the user
haftmann
parents:
38773
diff
changeset
|
630 |
} |
e55deaa22fff
do not print object frame around Scala includes -- this is in the responsibility of the user
haftmann
parents:
38773
diff
changeset
|
631 |
*} |
37842 | 632 |
|
38968
e55deaa22fff
do not print object frame around Scala includes -- this is in the responsibility of the user
haftmann
parents:
38773
diff
changeset
|
633 |
code_reserved Scala Heap Ref Array |
37838 | 634 |
|
52435
6646bb548c6b
migration from code_(const|type|class|instance) to code_printing and from code_module to code_identifier
haftmann
parents:
52388
diff
changeset
|
635 |
code_printing type_constructor Heap \<rightharpoonup> (Scala) "(Unit/ =>/ _)" |
6646bb548c6b
migration from code_(const|type|class|instance) to code_printing and from code_module to code_identifier
haftmann
parents:
52388
diff
changeset
|
636 |
code_printing constant bind \<rightharpoonup> (Scala) "Heap.bind" |
6646bb548c6b
migration from code_(const|type|class|instance) to code_printing and from code_module to code_identifier
haftmann
parents:
52388
diff
changeset
|
637 |
code_printing constant return \<rightharpoonup> (Scala) "('_: Unit)/ =>/ _" |
6646bb548c6b
migration from code_(const|type|class|instance) to code_printing and from code_module to code_identifier
haftmann
parents:
52388
diff
changeset
|
638 |
code_printing constant Heap_Monad.raise' \<rightharpoonup> (Scala) "!sys.error((_))" |
37838 | 639 |
|
640 |
||
641 |
subsubsection {* Target variants with less units *} |
|
642 |
||
31871 | 643 |
setup {* |
644 |
||
645 |
let |
|
27707 | 646 |
|
31871 | 647 |
open Code_Thingol; |
648 |
||
55147
bce3dbc11f95
prefer explicit code symbol type over ad-hoc name mangling
haftmann
parents:
54630
diff
changeset
|
649 |
val imp_program = |
31871 | 650 |
let |
55147
bce3dbc11f95
prefer explicit code symbol type over ad-hoc name mangling
haftmann
parents:
54630
diff
changeset
|
651 |
val is_bind = curry (op =) @{const_name bind}; |
bce3dbc11f95
prefer explicit code symbol type over ad-hoc name mangling
haftmann
parents:
54630
diff
changeset
|
652 |
val is_return = curry (op =) @{const_name return}; |
31893 | 653 |
val dummy_name = ""; |
654 |
val dummy_case_term = IVar NONE; |
|
31871 | 655 |
(*assumption: dummy values are not relevant for serialization*) |
55147
bce3dbc11f95
prefer explicit code symbol type over ad-hoc name mangling
haftmann
parents:
54630
diff
changeset
|
656 |
val unitT = @{type_name unit} `%% []; |
bce3dbc11f95
prefer explicit code symbol type over ad-hoc name mangling
haftmann
parents:
54630
diff
changeset
|
657 |
val unitt = |
bce3dbc11f95
prefer explicit code symbol type over ad-hoc name mangling
haftmann
parents:
54630
diff
changeset
|
658 |
IConst { sym = Code_Symbol.Constant @{const_name Unity}, typargs = [], dicts = [], dom = [], |
58397 | 659 |
annotation = NONE }; |
31871 | 660 |
fun dest_abs ((v, ty) `|=> t, _) = ((v, ty), t) |
661 |
| dest_abs (t, ty) = |
|
662 |
let |
|
663 |
val vs = fold_varnames cons t []; |
|
43324
2b47822868e4
discontinued Name.variant to emphasize that this is old-style / indirect;
wenzelm
parents:
43080
diff
changeset
|
664 |
val v = singleton (Name.variant_list vs) "x"; |
31871 | 665 |
val ty' = (hd o fst o unfold_fun) ty; |
31893 | 666 |
in ((SOME v, ty'), t `$ IVar (SOME v)) end; |
55147
bce3dbc11f95
prefer explicit code symbol type over ad-hoc name mangling
haftmann
parents:
54630
diff
changeset
|
667 |
fun force (t as IConst { sym = Code_Symbol.Constant c, ... } `$ t') = if is_return c |
31871 | 668 |
then t' else t `$ unitt |
669 |
| force t = t `$ unitt; |
|
38385 | 670 |
fun tr_bind'' [(t1, _), (t2, ty2)] = |
31871 | 671 |
let |
672 |
val ((v, ty), t) = dest_abs (t2, ty2); |
|
48072
ace701efe203
prefer records with speaking labels over deeply nested tuples
haftmann
parents:
46029
diff
changeset
|
673 |
in ICase { term = force t1, typ = ty, clauses = [(IVar v, tr_bind' t)], primitive = dummy_case_term } end |
38385 | 674 |
and tr_bind' t = case unfold_app t |
55147
bce3dbc11f95
prefer explicit code symbol type over ad-hoc name mangling
haftmann
parents:
54630
diff
changeset
|
675 |
of (IConst { sym = Code_Symbol.Constant c, dom = ty1 :: ty2 :: _, ... }, [x1, x2]) => if is_bind c |
38386 | 676 |
then tr_bind'' [(x1, ty1), (x2, ty2)] |
677 |
else force t |
|
678 |
| _ => force t; |
|
48072
ace701efe203
prefer records with speaking labels over deeply nested tuples
haftmann
parents:
46029
diff
changeset
|
679 |
fun imp_monad_bind'' ts = (SOME dummy_name, unitT) `|=> |
ace701efe203
prefer records with speaking labels over deeply nested tuples
haftmann
parents:
46029
diff
changeset
|
680 |
ICase { term = IVar (SOME dummy_name), typ = unitT, clauses = [(unitt, tr_bind'' ts)], primitive = dummy_case_term } |
55147
bce3dbc11f95
prefer explicit code symbol type over ad-hoc name mangling
haftmann
parents:
54630
diff
changeset
|
681 |
fun imp_monad_bind' (const as { sym = Code_Symbol.Constant c, dom = dom, ... }) ts = if is_bind c then case (ts, dom) |
31871 | 682 |
of ([t1, t2], ty1 :: ty2 :: _) => imp_monad_bind'' [(t1, ty1), (t2, ty2)] |
683 |
| ([t1, t2, t3], ty1 :: ty2 :: _) => imp_monad_bind'' [(t1, ty1), (t2, ty2)] `$ t3 |
|
684 |
| (ts, _) => imp_monad_bind (eta_expand 2 (const, ts)) |
|
685 |
else IConst const `$$ map imp_monad_bind ts |
|
686 |
and imp_monad_bind (IConst const) = imp_monad_bind' const [] |
|
687 |
| imp_monad_bind (t as IVar _) = t |
|
688 |
| imp_monad_bind (t as _ `$ _) = (case unfold_app t |
|
689 |
of (IConst const, ts) => imp_monad_bind' const ts |
|
690 |
| (t, ts) => imp_monad_bind t `$$ map imp_monad_bind ts) |
|
691 |
| imp_monad_bind (v_ty `|=> t) = v_ty `|=> imp_monad_bind t |
|
48072
ace701efe203
prefer records with speaking labels over deeply nested tuples
haftmann
parents:
46029
diff
changeset
|
692 |
| imp_monad_bind (ICase { term = t, typ = ty, clauses = clauses, primitive = t0 }) = |
ace701efe203
prefer records with speaking labels over deeply nested tuples
haftmann
parents:
46029
diff
changeset
|
693 |
ICase { term = imp_monad_bind t, typ = ty, |
59058
a78612c67ec0
renamed "pairself" to "apply2", in accordance to @{apply 2};
wenzelm
parents:
59028
diff
changeset
|
694 |
clauses = (map o apply2) imp_monad_bind clauses, primitive = imp_monad_bind t0 }; |
28663
bd8438543bf2
code identifier namings are no longer imperative
haftmann
parents:
28562
diff
changeset
|
695 |
|
55147
bce3dbc11f95
prefer explicit code symbol type over ad-hoc name mangling
haftmann
parents:
54630
diff
changeset
|
696 |
in (Code_Symbol.Graph.map o K o map_terms_stmt) imp_monad_bind end; |
27707 | 697 |
|
698 |
in |
|
699 |
||
31871 | 700 |
Code_Target.extend_target ("SML_imp", ("SML", imp_program)) |
701 |
#> Code_Target.extend_target ("OCaml_imp", ("OCaml", imp_program)) |
|
37838 | 702 |
#> Code_Target.extend_target ("Scala_imp", ("Scala", imp_program)) |
27707 | 703 |
|
704 |
end |
|
31871 | 705 |
|
27707 | 706 |
*} |
707 |
||
37758 | 708 |
hide_const (open) Heap heap guard raise' fold_map |
37724 | 709 |
|
26170 | 710 |
end |
48072
ace701efe203
prefer records with speaking labels over deeply nested tuples
haftmann
parents:
46029
diff
changeset
|
711 |