Packages

This is Elixir library application that adds support for design by contract. For intro to DbC methodology see https://en.wikipedia.org/wiki/Design_by_contract.

Current section

Files

Jump to
ex_contract lib ex_contract.ex
Raw

lib/ex_contract.ex

defmodule ExContract do
@moduledoc """
This is Elixir library application that adds support for design by contract. For intro to DbC
methodology see [DbC](https://en.wikipedia.org/wiki/Design_by_contract). Also, you may consult
[readme](readme.html) file for usage and theory behind Design by Contract.
"""
alias Macro.Env
alias ExContract.CompileState
alias ExContract.ConditionMsg
alias ExContract.Assert
@default_state CompileState.new()
@typedoc """
Defines type for Elixir Abastract Syntax Tree that is being modified by this module to add support
for Design by Contract to Elixir.
"""
@type t_ast :: tuple | list(any) | any
#
# Private Functions
#
@spec agent_name(env :: Env.t()) :: atom
defp agent_name(%Env{module: module} = _env) do
Module.concat(__MODULE__, module)
end
# Transforms a list of pre-conditions to ast that is to be inserted into client code.
@spec requires_ast(cond_msg :: ConditionMsg.t()) :: t_ast
defp requires_ast(%ConditionMsg{condition: condition, msg: msg} = _cond_msg) do
condition_txt = Macro.to_string(condition)
ast =
quote do
Assert.requires(unquote(condition), unquote(condition_txt), __ENV__, unquote(msg))
end
# IO.puts("requires_ast=#{Macro.to_string(ast)}")
ast
end
# Transforms a list of post-conditions to ast that is to be inserted into client code.
@spec ensures_ast(cond_msg :: ConditionMsg.t()) :: t_ast
defp ensures_ast(%ConditionMsg{condition: condition, msg: msg} = _cond_msg) do
condition_txt = Macro.to_string(condition)
ast =
quote do
Assert.ensures(unquote(condition), unquote(condition_txt), __ENV__, unquote(msg))
end
# IO.puts("ensures_ast=#{Macro.to_string(ast)}")
ast
end
@spec check_ast(condition :: t_ast, msg :: String.t()) :: t_ast
defp check_ast(condition, msg) do
condition_txt = Macro.to_string(condition)
ast =
quote do
Assert.check(unquote(condition), unquote(condition_txt), __ENV__, unquote(msg))
end
# IO.puts("check_ast=#{Macro.to_string(ast)}")
ast
end
@spec get_and_reset_compile_state(env :: Env.t()) :: CompileState.t()
defp get_and_reset_compile_state(%Env{} = env) do
Agent.get_and_update(agent_name(env), fn %CompileState{} = s -> {s, @default_state} end)
end
@spec build_body_with_contracts_ast(
requires :: list(ConditionMsg.t()),
body_ast :: t_ast,
ensures :: list(ConditionMsg.t())
) :: t_ast
defp build_body_with_contracts_ast(requires, body_ast, ensures) do
pre_expr =
requires
|> Enum.map(&requires_ast/1)
post_expr =
ensures
|> Enum.map(&ensures_ast/1)
result =
case {Enum.empty?(pre_expr), Enum.empty?(post_expr)} do
{true, true} ->
body_ast
{true, false} ->
quote do
var!(result) = unquote(body_ast)
unquote_splicing(post_expr)
var!(result)
end
{false, true} ->
quote do
unquote_splicing(pre_expr)
unquote(body_ast)
end
{false, false} ->
quote do
unquote_splicing(pre_expr)
var!(result) = unquote(body_ast)
unquote_splicing(post_expr)
var!(result)
end
end
# IO.puts("result=#{inspect result}")
result
end
@spec def_imp(public? :: boolean, definition :: t_ast, body :: t_ast, env :: Env.t()) :: t_ast
defp def_imp(public?, definition, body, env) do
%CompileState{requires: requires, ensures: ensures} = get_and_reset_compile_state(env)
body_with_contracts_ast = build_body_with_contracts_ast(requires, body, ensures)
ast =
if public? do
quote do
Kernel.def unquote(definition) do
unquote(body_with_contracts_ast)
end
end
else
quote do
Kernel.defp unquote(definition) do
unquote(body_with_contracts_ast)
end
end
end
# IO.puts("#{Macro.to_string(ast)}")
ast
end
@spec def_implicit_try_imp(list) :: t_ast
defp def_implicit_try_imp(do: body, after: rest) do
quote do
try do
unquote(body)
after
unquote(rest)
end
end
end
defp def_implicit_try_imp(do: body, rescue: rest) do
quote do
try do
unquote(body)
rescue
unquote(rest)
end
end
end
defp def_implicit_try_imp(do: body, catch: rest) do
quote do
try do
unquote(body)
catch
unquote(rest)
end
end
end
#
# Macros
#
defmacro __using__(_options) do
{:ok, _pid} = Agent.start_link(fn -> @default_state end, name: agent_name(__CALLER__))
ast =
quote do
import Kernel, except: [def: 2, defp: 2]
import unquote(__MODULE__)
alias ExContract.Contract.Assert
@before_compile unquote(__MODULE__)
end
# IO.puts("#{Macro.to_string(ast)}")
ast
end
defmacro __before_compile__(%Env{} = env) do
:ok = Agent.stop(agent_name(env))
end
@doc ~S"""
Defines a requirement that needs to be satisfied by a caller to a function in terms of
pre-condition. A call to a function that specifies pre-condition is only valid if the `condition`
parameter, upon method entry, is true. Parameter `condition` evaluating to false, is an
indicatation of a bug in the caller. This bug is manifested by exception
`ExContract.RequiresException`. Macro `requires` can occure one or more times before function
definition. By convention `requires` macro is defined before `ensures` is.
Example:
```elixir
requires x > 0
requires x < y, "Called with x=#{inspect x} and y=#{inspect y}"
@spec test_requires(x :: integer, y :: integer) :: integer | no_return
def test_requires(x, y) do
...
...
end
```
"""
defmacro requires(condition) do
Agent.update(agent_name(__CALLER__), fn %CompileState{} = s ->
CompileState.add_require(s, condition)
end)
end
@doc ~S"""
The same as `ExContract.requires/1` but in addition accepts message paramter that gets embedded
into `ExContract.RequiresException`.
"""
defmacro requires(condition, msg) do
Agent.update(agent_name(__CALLER__), fn %CompileState{} = s ->
CompileState.add_require(s, condition, msg)
end)
end
@doc ~S"""
Used for defining a benefit that a function guarantees to a client code. Establishes condition
that is true when a function exits. Condition being false, upon a function exit, indicates a bug
in the implementation of the function. This bug is manifested by exception
`ExContract.EnsuresException`. Macro `ensures` can occure one or more times before function
definition. By convention `ensures` macro is specified after `requires` is. This macro defines
`result` variable that contains the returned result from the funciton used in specifying the
post-condition.
Example:
```elixir
ensures result == x * y
@spec test_ensures(x :: integer, y :: integer) :: integer | no_return
def test_ensures(x, y) do
x * y
end
```
"""
defmacro ensures(condition) do
Agent.update(agent_name(__CALLER__), fn %CompileState{} = s ->
CompileState.add_ensure(s, condition)
end)
end
@doc ~S"""
The same as `ExContract.ensures/1` but in addition accepts message paramter that gets embedded
into `ExContract.EnsuresException`.
"""
defmacro ensures(condition, msg) do
Agent.update(agent_name(__CALLER__), fn %CompileState{} = s ->
CompileState.add_ensure(s, condition, msg)
end)
end
@doc ~S"""
Defines a condition that is belived to be true at certain point of function execution. Check
condition being invalid, indicates that assumptions about program computation need to be revised.
In effect, this indicates a bug in the implementation of the function. This bug is manifested by
exception`ExContract.CheckException`. Macro `check` can occure one or more times inside function
definition.
Example:
```elixir
@spec test_check(x :: integer) :: integer | no_return
def test_check(x) do
r = x * x
check r > x or r == 1
r
end
```
"""
defmacro check(condition) do
check_ast(condition, "")
end
@doc ~S"""
The same as `ExContract.check/1` but in addition accepts message paramter that gets embedded into
`ExContract.CheckException`.
"""
defmacro check(condition, msg) do
check_ast(condition, msg)
end
@doc ~S"""
Fail statement indicates that it is belived that a function excecution should never reach a
portion of the code that contains the `fail` macro. Excecution of `fail` macro indicates that a
particular path in function execution is possible and understanding of program control flow needs
to be revised. In effect, this indicates a bug in the implementation of the function. This bug is
manifested by exception`ExContract.FailException`. Macro `fail` can occure one or more times
inside function definition.
Example:
```elixir
@spec test_fail(x :: integer) :: integer | no_return
def test_fail(x) do
fail "This callback should never have been executed"
end
"""
defmacro fail(msg) do
ast =
quote do
Assert.fail(__ENV__, unquote(msg))
end
# IO.puts("fail_ast=#{Macro.to_string(ast)}")
ast
end
@doc """
This macro is not meant to be called directly from client code; instead its invokation is made at
compile time when it generates AST decorated with DbC constructs. This macro re-defines
`Kernel.def/2` and adds Design by Contract functionality to Elixir. When no pre or post-conditions
are specified, this macro generates the same code as `Kernel.def/2`. When pre-conditions are
specified, this macro insert the portion that adds the checks as the first statements that are
executed. When post-coditions are specified the macro wraps the body of the function and stores
the result into `result` variable that is avialable for examination in the definition of
`ExContract.ensures/1`. The macro handles function definitions that contain implicit `try` block
that is followed by `rescue`, `after`, or `catch`.
Example:
```
def without_even_trying do
raise "oops"
after
IO.puts "cleaning up!"
end
```
"""
defmacro def(definition, do: body) do
def_imp(true, definition, body, __CALLER__)
end
defmacro def(definition, body) do
body_ast = def_implicit_try_imp(body)
def_imp(true, definition, body_ast, __CALLER__)
end
@doc """
The same as `ExContract.def/2` macro except add support for private functions.
"""
defmacro defp(definition, do: body) do
def_imp(false, definition, body, __CALLER__)
end
defmacro defp(definition, body) do
body_ast = def_implicit_try_imp(body)
def_imp(false, definition, body_ast, __CALLER__)
end
end