doc-src/isac/CTP-userinterfaces.tex
author Walther Neuper <neuper@ist.tugraz.at>
Mon, 10 Jan 2011 10:15:44 +0100
branchdecompose-isar
changeset 38089 042b19985ea0
parent 38079 431344850e40
child 38090 4e128838c313
permissions -rwxr-xr-x
CTP-userinterfaces: cite, ref, paragraph
neuper@38077
     1
\documentclass{article}
neuper@38077
     2
\usepackage{a4}
neuper@38077
     3
\usepackage{times}
neuper@38077
     4
\usepackage{latexsym}
neuper@38077
     5
\bibliographystyle{alpha}
neuper@38077
     6
\usepackage{graphicx}
neuper@38077
     7
neuper@38077
     8
\def\isac{${\cal I}\mkern-2mu{\cal S}\mkern-5mu{\cal AC}$}
neuper@38077
     9
\def\sisac{{\footnotesize${\cal I}\mkern-2mu{\cal S}\mkern-5mu{\cal AC}$}}
neuper@38077
    10
\def\Problem{ {\tt Problem }}
neuper@38077
    11
neuper@38089
    12
\title{Userinterfaces for Computer Theorem Provers.\\
neuper@38089
    13
	Contributions to Isabelle
neuper@38077
    14
}
neuper@38077
    15
neuper@38077
    16
\author{G. Schafhauser, A. Schulhofer, M. Steger\\
neuper@38077
    17
Knowledge Management Institute (KMI)\\
neuper@38077
    18
TU Graz}
neuper@38077
    19
neuper@38077
    20
\begin{document}
neuper@38077
    21
\maketitle
neuper@38077
    22
\abstract{
neuper@38077
    23
TODO}
neuper@38077
    24
neuper@38077
    25
\section{Introduction}\label{intro} (WN)
neuper@38077
    26
 Computer theorem proving (CTP)\footnote{The term CTP is used to address two different things in this paper: (1) the academic discipline comprising respective theories as well as (2) the products developed within this discipline, the provers and the respective technology.}, 
neuper@38077
    27
neuper@38077
    28
graphical user interfaces (GUI)
neuper@38077
    29
neuper@38077
    30
%Georg
neuper@38077
    31
\section{State of the art in CTP Interfaces}
neuper@38077
    32
neuper@38077
    33
\subsection{A European technology: Coq and Isabelle}\label{ctp-techn}
neuper@38089
    34
%     http://en.wikipedia.org/wiki/Coq\\
neuper@38089
    35
%     http://coq.inria.fr/
neuper@38089
    36
%
neuper@38089
    37
%     http://en.wikipedia.org/wiki/Isabelle\_(theorem\_prover)\\
neuper@38089
    38
%     http://isabelle.in.tum.de/index.html
neuper@38089
    39
%
neuper@38089
    40
%why math -- functional: some of the languages have been specifically designed for constructing software for symbolic computation (SC). 
neuper@38089
    41
%%+ required for \ref{ml-users}
neuper@38089
    42
%
neuper@38089
    43
%SC http://en.wikipedia.org/wiki/Symbolic\_computation
neuper@38089
    44
%% mainly does not compute numerical values, but terms containing variables like functions (symbols)
neuper@38089
    45
%
neuper@38089
    46
%The LCF project
neuper@38089
    47
%http://hopl.murdoch.edu.au/showlanguage.prx?exp=8177
neuper@38089
    48
%specifically designed a 'meta language' (ML)
neuper@38089
    49
%http://en.wikipedia.org/wiki/ML\_(programming\_language)
neuper@38089
    50
%\cite{pl:milner97}
neuper@38089
    51
%for developing CTP
neuper@38089
    52
\subsubsection{Standard ML}
neuper@38089
    53
Standard ML is a general-purpose, modular, functional programming language. 
neuper@38089
    54
Programs written in Standard ML consist of expressions to be evaluated, as opposed to statements or commands. 
neuper@38089
    55
SML is a modern descendant of the ML programming language used in the Logic for Computable Functions (LCF) theorem-proving project. 
neuper@38089
    56
It is invented by Robin Milner. %http://en.wikipedia.org/wiki/Standard_M 
neuper@38089
    57
\subsubsection{Coq}
neuper@38089
    58
Coq is an interactive theorem prover, developed in France. The team leader is Senior Scientist Benjamin Werner. 
neuper@38089
    59
Coq is in Objective Caml programmed, an ML based programming language.
neuper@38089
    60
It has the ability to express  mathematical  assertions and check proof of mathematical  assertions. 
neuper@38089
    61
Furthermore Coq includes automatic theorem proving tactics and decision procedures.
neuper@38089
    62
Proof development in Coq is done through a language of tactics that allows a user-guided proof process. 
neuper@38089
    63
At the end, the user can check that tactics build lambda-terms. 
neuper@38089
    64
Another feature of Coq is “that it can automatically extract executable programs from specifications, as either Objective Caml 
neuper@38089
    65
or Haskell source code.“
neuper@38089
    66
Properties, programs and proofs are written a language called the Calculus of Inductive Constructions (CIC).
neuper@38089
    67
Coq is based on a type-checking algorithm, therefore Coq uses only typing judgements.
neuper@38089
    68
Coq supports a functional programming language.
neuper@38089
    69
(http://coq.inria.fr/a-short-introduction-to-coq)
neuper@38089
    70
\subsubsection{Isabelle}
neuper@38089
    71
Isabelle is an interactive theorem proving framework for high-level natural deduction proofs \cite{Paulson:Isa94}, written in Standard ML. 
neuper@38089
    72
Isabelle is developed at University of Cambridge (Larry Paulson), Technische Universität München (Tobias Nipkow) 
neuper@38089
    73
and Université Paris-Sud (Makarius Wenzel).
neuper@38089
    74
The most widespread instance of Isabelle nowadays is Isabelle/HOL, providing a higher-order logic theorem proving environment.
neuper@38089
    75
Isabelle/HOL includes several  specification tools, e.g. for datatypes, inductive definitions and functions with complex pattern matching.
neuper@38089
    76
Proofs are written in the structured proof language Isar. Isabelle implements several tools to increase the user's productivity in theorem proving. 
neuper@38089
    77
Isabelle's classical reasoner is used to check formulas. The simplifier can reason with and about equations. 
neuper@38089
    78
Linear arithmetic facts are proved automatically.
neuper@38089
    79
Isabelle provides notational support: new notations can be introduced, using normal mathematical symbols.
neuper@38089
    80
Definitions and proofs may include LaTeX source, from which Isabelle can automatically generate typeset documents.
neuper@38089
    81
Isabelle/HOL allows to turn executable specifications directly into code in SML, OCaml, and Haskell.
neuper@38089
    82
(http://www.cl.cam.ac.uk/research/hvg/Isabelle/overview.html)
neuper@38089
    83
\subsection{Userinterfaces for CTP: Coq and Isabelle}\label{gui-coq-isa}
neuper@38089
    84
%     CoqIDE, ..
neuper@38089
    85
%         http://coq.inria.fr/what-is-coq?q=node/57\\
neuper@38089
    86
%         earlier than Isabelle/jEdit
neuper@38089
    87
%
neuper@38089
    88
%     ProofGeneral for Isabelle
neuper@38089
    89
%         http://proofgeneral.inf.ed.ac.uk/\\
neuper@38089
    90
%         emacs stone age ?
neuper@38089
    91
\subsubsection{Coq Integrated Development Environment}
neuper@38089
    92
CoqIde is a graphical interface for Coq. It is written in Ocaml. (http://coq.inria.fr/cocorico/CoqIde)
neuper@38089
    93
Its main purpose is to allow the user to navigate forward and backward into a Coq vernacular file, 
neuper@38089
    94
executing corresponding commands or undoing them respectively. 
neuper@38089
    95
There are several  buffers for helping to write proof scripts.
neuper@38089
    96
Among all these buffers, there is always one which is the current running buffer, whose name is displayed on a green background,
neuper@38089
    97
which is the one where Coq commands are currently executed. 
neuper@38089
    98
Buffers may be edited as in any text editor, and classical basic editing commands (Copy/Paste, ...) are available.  
neuper@38089
    99
CoqIde provides also a feedback system for the user. 
neuper@38089
   100
Therefore the background is green when a command succeeds, otherwise an errormessage is displayed in the message window and the error location is underlined red.
neuper@38089
   101
CoqIDE offers only basic editing commands, therefore it is possible to launch another more sophisticated text editor. 
neuper@38089
   102
Furthermore CoqIde provides a proof wizard “for automatically trying to solve the current goal using simple tactics.”
neuper@38089
   103
Another features of this IDE are the customization options, which can be accessed by the Edit menu. 
neuper@38089
   104
This allows the user to change the apeareance of the IDE.
neuper@38077
   105
neuper@38077
   106
neuper@38089
   107
\begin{figure}[htbp]
neuper@38089
   108
\centering
neuper@38089
   109
%\includegraphics[bb=0 0 10 10]{coqide.png}
neuper@38089
   110
\includegraphics[scale=0.25]{fig/coqide}
neuper@38089
   111
\caption{CoqIDE main screen}
neuper@38089
   112
\end{figure}
neuper@38077
   113
neuper@38077
   114
neuper@38089
   115
(http://coq.inria.fr/V8.1/refman/Reference-Manual016.html)
neuper@38089
   116
\subsubsection{Proof General for Isabelle}
neuper@38089
   117
Proof General is a generic front-end for proof assistants, based on the customizable text editor Emacs.
neuper@38089
   118
Proof General has been developed at the LFCS in the University of Edinburgh with contributions from other sites.
neuper@38089
   119
Proof General comes ready-to-go for these proof assistants: Isabelle, Coq, PhoX, LEGO.
neuper@38089
   120
Proof General is used to write proof scripts. A Proof Script is a sequence of commands sent to theorem prover. 
neuper@38089
   121
The communication between the user and the theorem prover takes place via two or  more Emacs text widgets. 
neuper@38089
   122
Therefore the user sees only the output from the latest proof step.(proofgeneral.ps.gz)
neuper@38077
   123
neuper@38077
   124
neuper@38089
   125
Isabelle/Isar Proof General has full support for multiple file scripting, with dependencies between theories communicated between Isabelle and Proof General. 
neuper@38089
   126
There is full support for Unicode Tokens, using the Isabelle print mode for X Symbol tokens. Many Isabelle theories have X Symbol syntax already defined 
neuper@38089
   127
and it's easy to add to your own theories. 
neuper@38089
   128
(http://proofgeneral.inf.ed.ac.uk/fileshow.php?file=releases%2FProofGeneral%2Fisar%2FREADME)
neuper@38089
   129
\begin{figure}[htbp]
neuper@38089
   130
\centering
neuper@38089
   131
\includegraphics[scale=0.5]{fig/pgisabelle}
neuper@38089
   132
\caption{Proof General for Isabelle}%
neuper@38089
   133
\end{figure}
neuper@38089
   134
\subsubsection{Isabelle/Jedit}
neuper@38089
   135
jEdit is a text editor for programmers, written in Java.
neuper@38089
   136
Compared to fully-featured IDEs, such as Eclipse or Netbeans, jEdit is much 
neuper@38089
   137
smaller and better focused on its primary task of text editing.
neuper@38089
   138
The general look of the Isabelle/jEdit plugin is similar to existing Java IDEs.
neuper@38089
   139
The main Isabelle/jEdit plugin consists of ≈ 10 small Scala files  that augment some key jEdit components in order to provide a metaphor of asynchronous 
neuper@38089
   140
proof document editing. 
neuper@38089
   141
Isabelle/jEdit integrates the jEdit 4.3.2 framework  and some further  jEdit plugins. 
neuper@38089
   142
It also implements custom-made IsabelleText Unicode font that actually contains the usual Isabelle symbols that users expect from long 
neuper@38089
   143
years of Proof General X-Symbol support. 
neuper@38089
   144
The editor provides useful feedback, via semantic information from the processed document in the background. 
neuper@38089
   145
This achieves continuous proof checking based on our 
neuper@38089
   146
asynchronous prover toplevel. A lot of information can be directly attached 
neuper@38089
   147
to the source text, via coloring, tooltips, popups etc.
neuper@38077
   148
neuper@38077
   149
\subsection{Upcoming requirements for userinterfaces in CTP}\label{gui-requir}
neuper@38089
   150
%     @ interaction close to tty (Telegraph)\\
neuper@38089
   151
%       BUT: separate parts in {\em one} proof could be processed in parallel
neuper@38089
   152
%
neuper@38089
   153
%     @ http://www.informatik.uni-bremen.de/uitp/
neuper@38089
   154
%
neuper@38089
   155
%     @ ... see\\
neuper@38089
   156
%       http://www4.in.tum.de/~wenzelm/papers/async-isabelle-scala.pdf,\\
neuper@38089
   157
%       http://www4.in.tum.de/~wenzelm/papers/parallel-isabelle.pdf
neuper@38089
   158
After several decades, most proof assistants are still centered around TTY-based(Fußnote)  interaction in a
neuper@38089
   159
tight read-eval-print loop. All Emacs-based GUI's for CTPs follow this synchronous
neuper@38089
   160
model based on single commands with immediate response, meaning that the editor waits for the
neuper@38089
   161
prover after each command. As to multicore politics of leading semiconductor chip manufacturer,  parallelism in software technology has become very popular. 
neuper@38089
   162
Therefore the support of parallelism in CTP technology could improve the performance and the multiuser support. 
neuper@38089
   163
So it is necessary to use proof documents instead of proof scripts.  
neuper@38089
   164
Proof scripts are  sequences of commands however proof documents are  structured texts. 
neuper@38089
   165
So the proof document idea seems to guarantee the perfect support for parallelism in the CTP technology. 
neuper@38089
   166
(MW async-isabelle-scala.pdf)
neuper@38089
   167
\newpage
neuper@38077
   168
%Andreas
neuper@38077
   169
\section{Isabelle's plans for new user-interfaces}\label{gui-plans}
neuper@38089
   170
%       http://www4.in.tum.de/~wenzelm/papers/async-isabelle-scala.pdf,\\
neuper@38089
   171
%       http://www4.in.tum.de/~wenzelm/papers/parallel-isabelle.pdf
neuper@38089
   172
%
neuper@38089
   173
%theorem proving will be integrated into software development
neuper@38089
   174
%
neuper@38089
   175
%hundreds of proof obligations are generated during a software verification process 
neuper@38089
   176
%
neuper@38089
   177
%so the final goald of Isabelle's planning is integration with other software development tools in an integrated development environment (IDE).
neuper@38089
   178
%
neuper@38089
   179
%still many principal issues need to be clarified with respect to integration of CTP and other development tools. So engaging into details makes no sense at the present, and Isabelle will approach the final goal via experimental intermediate steps of integration.
neuper@38077
   180
neuper@38089
   181
\begin{itemize}
neuper@38089
   182
\item theorem proving will be integrated into software development
neuper@38089
   183
\item hundreds of proof obligations are generated during a software verification process
neuper@38089
   184
\item so the final goal of Isabelle's planning is integration with other software development tolls in an integrated development environment (IDE)
neuper@38089
   185
\item still many principal issues need to be clarified with respect to integration of CTP and other development tools. So engaging into details makes no sense at the present, and Isabelle will approach the final goal via experimental intermediate steps of integration
neuper@38089
   186
\item favorite IDE is the jEdit, because it is clearer than Eclipse or NetBeans. The reason behind this choice follows in section 4.2
neuper@38089
   187
\end{itemize}
neuper@38077
   188
neuper@38077
   189
\subsection{Connect ML-world to the users' world via JVM}\label{ml-users}
neuper@38077
   190
In Sect.\ref{ctp-techn} reasons have been given, why mathematics software at the state-of-the-art cannot be written in Java or the like. On the other side, Sect.\ref{gui-requir} stated requirements for mathematical user interfaces, which cannot be accomplished by ML-like languages. These requirements can be best accomplished by languages like Java, which have powerful libraries available for convenient assembly of GUIs.
neuper@38077
   191
neuper@38089
   192
neuper@38089
   193
neuper@38089
   194
neuper@38077
   195
\paragraph{Example: a functional mathematics engine} as the experimental one in the \sisac-project is given by the following signature:
neuper@38077
   196
{\it
neuper@38077
   197
\begin{tabbing}
neuper@38077
   198
\=xx\=xxxxxxxxxxxxxxxxxxxxxxxxx\=\kill
neuper@38077
   199
\>signature INTERPRETER =\\
neuper@38077
   200
\>sig\\
neuper@38077
   201
\>\>type calcstate\\
neuper@38077
   202
\>\>type step = formula * position * tactic\\
neuper@38077
   203
\>\> \\
neuper@38077
   204
\>\>val do\_next : program $\rightarrow$ calcstate $\rightarrow$ (calcstate * step)\\
neuper@38077
   205
\>\>val apply\_tactic : program $\rightarrow$ calcstate $\rightarrow$ position $\rightarrow$ tactic $\rightarrow$ (calcstate * step list)\\
neuper@38077
   206
\>\>val apply\_formula : program $\rightarrow$ calcstate $\rightarrow$ position $\rightarrow$ formula $\rightarrow$ (calcstate * step list)\\
neuper@38077
   207
%\\
neuper@38077
   208
%\>\>val get\_next : program $\rightarrow$ calcstate $\rightarrow$ step\\
neuper@38077
   209
%\>\>val get\_applicable\_tactics : program $\rightarrow$ calcstate $\rightarrow$ tactic list\\
neuper@38077
   210
%\>\>val get\_intermediate : program $\rightarrow$ calcstate $\rightarrow$ position * position $\rightarrow$ step list\\
neuper@38077
   211
\>end
neuper@38077
   212
\end{tabbing}}
neuper@38077
   213
The three essential functions are \textit{do\_next}, which reads a \textit{program} for determining the next \textit{step} in a calculation, the function \textit{apply\_tactic}, which applies a \textit{tactic} input by the user to the current \textit{position} in a calculation and thus may produce a list of \textit{step}s and the function \textit{apply\_formula}, which applies an input \textit{formula} accordingly.
neuper@38077
   214
neuper@38077
   215
Now, the point with functional programming is, that the functions do {\em not} cause persistent updates in some memory, rather: all three functions above take the current state of the calculation, \textit{calcstate}, as an argument and after they have done they work return the updated \textit{calcstate}.
neuper@38077
   216
neuper@38077
   217
There are several advantages of this kind of programming: more straight forward verification, which is not discussed here, and other features. For instance, given the three functions above, it is easy to undo steps of calculations, or go back to an earlier step of calculations: one just needs to store the \textit{calcstate}s (in a list), even without knowing the details of the \textit{calcstate}, which thus can be encapsulated for internal access only.
neuper@38089
   218
%
neuper@38089
   219
%\paragraph{Example: an object-oriented wrapper} as required for embedding the above mathematics engine into an object-oriented system. Such a wrapper looks like this:
neuper@38089
   220
%
neuper@38089
   221
%TODO
neuper@38077
   222
neuper@38077
   223
\subsection{Scala as a mediator between ML and JVM}\label{scala-medi}
neuper@38089
   224
{\em new} %language --- what for, ideas ...
neuper@38089
   225
Scala is a hybrid multi-paradigm programming language. It combines object-oriented programming and functional programming. Scala runs on the Java Virtual Machine and is byte-code compatible with existing Java programs. The compilation model of Scala is nearly the same as the Java's model. So existing tools, libraries and applications can be used with Scala. The Syntax of Scala is similar to Java and ML. A number of keywords plus the block syntax is adopted from Java and from ML the syntax for type annotation and declaration. The source-code is typically reduced, concisely and more compact compared to equivalent Java code.\\
neuper@38089
   226
Scala is pure object-oriented, this means every value is an object. The same is true for primitive data types, because compiler-generated byte code is using primitive data types. Known design patterns from OOP can be used with Scala as well. Data types and behaviors of objects are described by classes and traits [wiki]. Traits not only consist of definitions, they also can contain implementations of methods. To avoid the problems of multiple inheritance, classes are able to extend various traits, this is a flexible mixin-based mechanism. The keyword Object is used to implement a Singleton-Class. \\
neuper@38089
   227
In Scala every function is a value, hence Scala is also a functional language. Functions in Scala are first-class objects, this means it is possible to pass a function as a parameter, return a function from a subroutine, or assign to a variable. Scala also supports case classes, which are used for pattern matching. Case classes are regular classes which export their constructor parameters[wiki-11-1s]. Furthermore Scala supports higher-order functions, currying and allows functions to be nested. \\
neuper@38089
   228
Scala is more statically typed than Java, but is able to infer types by usage. So most static type declarations are optional. This static type system ensures a safe and coherent use of abstraction. Scala supports:
neuper@38089
   229
\\
neuper@38089
   230
\begin{itemize}
neuper@38089
   231
\item generic classes
neuper@38089
   232
\item variance annotations
neuper@38089
   233
\item upper and lower type bounds
neuper@38089
   234
\item classes and abstract types as object members
neuper@38089
   235
\item compound types
neuper@38089
   236
\item explicitly typed self references
neuper@38089
   237
\item views
neuper@38089
   238
\item polymorphic methods
neuper@38089
   239
\end{itemize}
neuper@38089
   240
Static types need no explicit declaration but can be given to give the code some clarity.\\\\
neuper@38089
   241
Scala supports threads, but the Scala library contains an actor model inspired from Erlang. Concurrency and Scala actors follow in the next section.\\
neuper@38089
   242
neuper@38089
   243
%quellen
neuper@38089
   244
%%http://de.wikipedia.org/wiki/Scala_%28Programmiersprache%29
neuper@38089
   245
%%http://en.wikipedia.org/wiki/Scala_%28programming_language%29
neuper@38089
   246
%%http://creativekarma.com/ee.php/weblog/comments/why_scala_instead_of_java/
neuper@38089
   247
%%http://www.scalasolutions.com/scala
neuper@38089
   248
neuper@38077
   249
neuper@38077
   250
\subsection{Support for parallel processing}\label{actors}
neuper@38089
   251
%actors copied from erlang
neuper@38089
   252
neuper@38089
   253
Concurrency has lately become more and more attention, because multicore processors make concurrency very important for efficient program execution, by running multiple threads parallel and so concurrent programming gets indispensable and distributed computing,web services and mobile environments are naturally concurrent. \\
neuper@38089
   254
A very attractive model, because of the fact that it might addresses multicore processors and several techniques which are basically concurrent, is message-based concurrency. Most of the message passing systems, which are used in practice, are based on the actor model. \\
neuper@38089
   255
An actor is a concurrent process that executes a function. The state of an actor gets never shared, so it doesn't need to compete for locks of shared data. Actors own a mailbox where incoming messages are stored in. A mailbox is mainly a queue with several producers and one consumer, which are other actors. Actors share data by sending Messages which are sent asynchronously. Messages are unchangeable, so they don't require a lock and are used for communication between actors. By creating new actors, by sending messages to known actors, or changing its behavior, an actor is able to reply to a message. The actor-based process is combined with pattern matching for messages.\\
neuper@38089
   256
The Erlang programming language is a functional programming language and a very popular implementation of message-based concurrency, which operates with actors. It was developed for real-time control systems. Such systems are telephone exchanges, network simulators and distributed resource controllers [IoC]. These systems use a very lightweight implementation and a large number of concurrent processes, which can active simultaneously.\\
neuper@38089
   257
Operating system threads and threads of virtual machines, are too heavyweight for the implementation of such processes. The standard concurrency for mainstream platforms where shared-memory threads with locks. Such a platform is the Java Virtual Machine (JVM), which suffers from high memory consumption and context-switching overhead.
neuper@38089
   258
The main reasons are:
neuper@38089
   259
\begin{enumerate}
neuper@38089
   260
\item quick exhaustion of virtual address space
neuper@38089
   261
\item locking mechanisms often lack suitable contention managers
neuper@38089
   262
\end{enumerate}
neuper@38089
   263
%[IoC]
neuper@38089
   264
For that reasons Erlang uses lightweight concurrent processes by its own run time system and not by the underlying operating system [IoC] and the computations on these platforms are often modeled in an event-driven style, which is complicated and error-prone.
neuper@38089
   265
\paragraph{Two different strategies for concurrency} are being used for implementation. This two strategies often follow different programming models, the benefit of thread-based models is that they are easier to use, but they still suffer from the memory consumption and the context-switching. The event-based models are just the opposite of the thread-based, they are more efficient, but in massive designs they are very difficult.
neuper@38089
   266
neuper@38089
   267
\subparagraph{Thread-based implementation:} The behavior of a concurrent process is defined by implementing a thread-specific method. The execution state is maintained by an associated thread stack [2.P].
neuper@38089
   268
Supports blocking operations and can be executed on multicore processors in parallel.
neuper@38089
   269
neuper@38089
   270
\subparagraph{Event-based implementation:} The behavior is defined by a number of (non-nested) event-handlers which are called from inside an event loop. The execution state of a concurrent process is maintained by an associated record or object [2.P]. Targets to a large number of actor which can be active simultaneously, because they are more lightweight.
neuper@38089
   271
neuper@38089
   272
\paragraph{Actors in Scala} are based on actors in Erlang. Scala uses the basic thread model of Erlang, but on the other hand all higher-level functions got implemented in the Scala library as classes or methods. The Scala-actors are a unification of the concurrent process implementation models, mentioned above and they are compatible with normal Virtual Machine thread. Normal VM threads can use the same communication and monitoring capabilities, because they are treated like an actor. A message-based concurrency seems to be more secure than shared-memory with locks, because accessing an actor's mailbox is race-free. The advantage of a implementation in a library is that it can be flexibly extended and adapted to new needs. The library makes use of Scala abstraction opportunities, like partial functions and pattern matching.
neuper@38089
   273
neuper@38089
   274
The main idea of this model is that an actor is able to wait for a message by using two different operations, which try to remove a message from the current actor's mailbox. To do so, a partial function must be given to the operation, that specifies a set of message patterns. These operations are receive and react. An actor can suspend with a full thread stack (receive) or it can suspend with just a continuation closure (react) [2.P]. The first operation of an actor to wait for an message is equal to thread-based programming and the second operation to event-based programming.
neuper@38089
   275
neuper@38089
   276
receive:         def receive[R](f: PartialFunction[Any, R]): R
neuper@38089
   277
The current actor's mailbox get scanned and if there is one message which matches one of the patterns declared in the partial function, the message is removed from the mailbox and the partial function is applied to the message, the result is returned. Otherwise the current thread blocks. Thus the receiving actor has the ability to execute normally when receiving a message which matches.  Note that receive retains the complete call stack of the receiving actor; the actor’s behavior is therefore a sequential program which corresponds to thread-based programming [2.P]. \\
neuper@38089
   278
react:          
neuper@38089
   279
$$\mathit{def}\;\mathit{react}(f: \mathit{PartialFunction}[Any, Unit]): \mathit{Nothing}$$
neuper@38089
   280
The action which is specified in the partial function is the last code that the current actor executes, if the message is matching. The partial function gets registered by the current actor and the underlying thread gets released. React has the return type Nothing, this means that the method never returns normally. When the actor receives a matching message, the earlier registered partial function gets called and the actor's execution gets continued. The partial function f which corresponds to a set of event handlers [2.P]. \\
neuper@38089
   281
For this implementation multiple acotrs are executed by multiple threads and therefore a thread pool is used. Whenever it is necessary the pool can be re sized, to support the operations of the thread-based and event-based model. If only operations of the event-based model are executed then the thread pool could be fixed. To avoid system-included deadlocks, if some actors use thread-based operations, the thread pool has to grow, because if there are outstanding tasks and every worker thread is occupied by a blocked actor, new threads are necessary. \\
neuper@38089
   282
Since the communication between actors takes place through asynchronous message passing, asynchronous operations get executed, tasks have to be created and submitted to a thread pool for execution. A new task is created, when an actor spawns a new actor or a message, which enables an actor to continue, is send to an actor which is suspended in a react operation or by calling react, where a message can be immediately removed from the mailbox.\\
neuper@38089
   283
Event-Based Programming without Inversion of Control - Philipp Haller, Martin Odersky  [IoC]\\
neuper@38089
   284
Scala actors: Unifying thread-based and event-based programming - Philipp Haller, Martin Odersky [2.P]\\
neuper@38089
   285
neuper@38077
   286
neuper@38077
   287
% Marco
neuper@38077
   288
\section{Planned contributions at TU Graz}
neuper@38077
   289
neuper@38077
   290
\subsection{Make Isabelle process structured derivations}\label{struct-der}
neuper@38077
   291
Structured Derivations (SD) is a format for calculational reasoning, which has been established by \cite{back-grundy-wright-98}. This is an example calculation:
neuper@38077
   292
{\it\begin{tabbing}
neuper@38077
   293
123\=123\=123\=123\=123\=123\=123\=123\=123\=123\=123\=123\=\kill
neuper@38077
   294
\> $\bullet$\> \Problem [ maximum\_by, calculus ]\\
neuper@38077
   295
\>\> $\vdash$\> $A = 2\cdot u\cdot v - u^2$\\
neuper@38077
   296
\>\> $\bullet$\> \Problem [make, diffable, funtion]\\
neuper@38077
   297
\>\> \dots\> $\overline{A}(\alpha) = 8\cdot r^2\cdot\sin\alpha\cdot\cos\alpha - 4\cdot r^2\cdot(\sin\alpha)^2$\\
neuper@38077
   298
\>\> $\bullet$\> \Problem [on\_interval, for\_maximum, differentiate, function]\\
neuper@38077
   299
\>\>\> $\vdash$\> $\overline{A}(\alpha) = 8\cdot r^2\cdot\sin\alpha\cdot\cos\alpha - 4\cdot r^2\cdot(\sin\alpha)^2$\\
neuper@38077
   300
\>\>\> $\bullet$\> \Problem [differentiate, funtion]\\
neuper@38077
   301
\>\>\> \dots\> $\overline{A}^\prime(\alpha) = 8\cdot r^2\cdot(-(\sin\alpha)^2+(\cos\alpha)^2 - 2\cdot\sin\alpha\cdot\cos\alpha)$\\
neuper@38077
   302
\>\>\> $\bullet$\> \Problem [on\_interval, goniometric, equation]\\
neuper@38077
   303
\>\>\> \dots\> $\alpha = \tan^{-1}(-1+\sqrt{2})$\\
neuper@38077
   304
\>\> \dots\> $\alpha = \tan^{-1}(-1+\sqrt{2})$\\
neuper@38077
   305
\>\> $\bullet$\> \Problem [tool, find\_values]\\
neuper@38077
   306
\>\> \dots\> [ $u=0.23\cdot r, \:v=0.76\cdot r$ ]\\
neuper@38077
   307
\> \dots\> [ $u=0.23\cdot r, \:v=0.76\cdot r$ ] %TODO calculate !
neuper@38077
   308
\end{tabbing}}
neuper@38077
   309
The plan is to use the machinery provided Isabelle/Isar as a 'logical operating system' ~\cite{isar-impl} and adapt the machinery such that is accepts SC in parallel to the Isar proof language~\cite{wenzel:isar}.
neuper@38077
   310
neuper@38077
   311
This plan involves the following details.
neuper@38077
   312
neuper@38077
   313
\subsection{Add a plug-in to jEdit}\label{plugin}
neuper@38089
   314
    % file structure, copied from example project ...
neuper@38089
   315
%Die von jEdit verfolgte Strategie im Bezug auf Plugin-Management und natürlich generell die totale Offenlegegung des Codes ist für ein Projekt wie Isabelle und auch für das Isac-Project an der TU ideal. Plugins lassen sich sehr einfach anfügen und durch die riesige Vielfalt von bereits bestehenden Plugins ist auch die Adaption von Plugins möglich bzw. zu empfehlen, denn warum sollte nicht bereits funktionierender Code verwendet werden?\\
neuper@38089
   316
The importance of connecting the ML-world with the world of user interfaces has been is discussed in Sect.\ref{ml-users}. jEdit follows these lines, it is an open-source, Java-based text editor that works on Windows, Mac OS X, and Linux. A big advantage of jEdit is, that there is a very good and also simple way to use and write a Plugin. There are a lot of useful and powerful Plugins available in the net and it is also possible to use a existing Plugin as part of a new one. Because of this facts, jEdit is very suitable for a project like Isabelle and also for the Isac-project at TU-Graz. \\\\
neuper@38089
   317
Each jEdit-Plugin basically consists of source files, written in Java or Scala, XML-files and property files. The XML-Files are important for the administration of a Plugin and provides information like the name, author, ... of the Plugin. They are also containing small pieces of BeanShell code which is executed upon a user request. (Like pressing the 'start plugin' button.) So the XML-files provide the “glue” between user input and specific Plugin routines located in the source files. As you see, this files are used as interface between the Plugin and the jEdit engine itself.\\
neuper@38089
   318
Based on the jEdit API, you are allowed to design your code quit freely and don't have to use a prescribed way to implement your ideas.    
neuper@38089
   319
To get more information about the jEdit infrastructure see: http://jedit.org/users-guide/plugin-intro
neuper@38089
   320
\\\\
neuper@38089
   321
%isabell plugin beschreiben!!!!!!!!
neuper@38089
   322
The Isabelle-team also follow use this Plugin-structure. In the next paragraph the involved files will be described. The jEdit-Isabelle-Plugin consists of:
neuper@38089
   323
\begin{itemize}
neuper@38089
   324
\item 14 Scala-source-files
neuper@38089
   325
\item three XML-files
neuper@38089
   326
\item one property file
neuper@38089
   327
\end{itemize}
neuper@38089
   328
%Das vom Isabelle-Team erstellte jEdit-Plugin folgt natürlich auch dem oben erklärten Muster. Es wird nun genauer auf dieses Plugin eingegangen. The plugin consits of 14 scala-source-files, three xml-files and one property-file. 
neuper@38089
   329
The property-file \textit{Isabelle.props} contains general informations about the Isabelle-Plugin and the needed dependencies between Isabelle and the other used Plugins like sidekick. \\
neuper@38089
   330
The XML-file \textit{dockables.xml} is used to create the needed dock-able windows which are important to set up the GUI of the Plugin.\\
neuper@38089
   331
In the file \textit{actions.xml}, the dockable windows are added to the window-manager \textit{wm} and there is also some Beanshell-code to activate the Isabelle-GUI.\\
neuper@38089
   332
The last XML-file is \textit{services.xml} and is used to create instances of needed jEdit-Plugins.\\
neuper@38089
   333
This four files are located in the folder \textit{plugin}.\\\\
neuper@38089
   334
The more interesting files, the scala-files of the Plugin, can be found in the 'src/jedit'-directory. In this directory you can find the file \textit{Dummy.java} which is a dummy class and is simply used to make javadoc work. Just forget about this file. Also there is a folder/package \textit{jedit} which contains all Scala-source-files. Now it is time to take a closer look on the source-files: \\
neuper@38089
   335
The file \textit{plugin.scala} is the main-file of the Isabelle-Plugin and there are two important parts. First the \textit{Isabelle object}. This object contains data like name and path and also few basic functions. The second part is the \textit{class Plugin} which is derived from EBPlugin. Here the basic methods \textit{handleMessage}, \textit{start} and \textit{stop} are implemented. Each jEdit-Plugin should have this methods because they are very important for the handling of the Plugin! \\
neuper@38089
   336
jEdit and also the Isabelle Plugin work with dock-able windows. This means that you can move around each single window and dock it somewhere on the screen. So it is possible to individualize the jEdit-GUI. To support this, the file \textit{dockable.scala} is needed. The file \textit{output-dockable.scala} is derived from \textit{dockable.scala} and is used to print the result/output in a dock-able window. The same thing with \textit{protocol-dockable.scala} and \textit{raw-output-dockable.scala}.\\
neuper@38089
   337
The next interesting file is \textit{scala-console.scala} with the main-class Scala-Console. This class is used to expand the Console-Plugin in a way, that it is possible to interpret Scala-code with a Shell inside of jEdit.\\ 
neuper@38089
   338
The file \textit{isabelle-sidekick.scala} is related to the file \textit{scala-console.scala} because it is also used to adapt the Plugin Sidekick for Isabelle.\\
neuper@38089
   339
The files \textit{document-model.scala} and \textit{document-view.scala1} are used to connect the jEdit-buffer/the text-area to Isabelle. Both classes offer, upon others, methods to activate and deactivate this features.\\
neuper@38089
   340
There also some other source-files but they aren’t discussed here, because the main goal of this paragraph is to give a basic idea how a jEdit-Plugin should be set up and the remaining files are not as important for the Isabelle-Plugin-structure:
neuper@38089
   341
\begin{itemize}
neuper@38089
   342
\item $html_panel.scala$
neuper@38089
   343
\item $isabelle_encoding.scala$
neuper@38089
   344
\item $isabelle_hyperlinks.scala$
neuper@38089
   345
\item $isabelle_options.scala$
neuper@38089
   346
\item $isabelle_token_maker.scala$
neuper@38089
   347
\item $isabelle_hyperlinks.scala$
neuper@38089
   348
\end{itemize}
neuper@38089
   349
neuper@38089
   350
neuper@38089
   351
%  Like each other jEdit-Plugin also this 
neuper@38089
   352
neuper@38089
   353
%Das Konzept des frei wählbaren Designs ist am Beginn villeicht etwas schwierig umzusetzten, da es leichter ist, sich irgendwo anzulehnen bzw. ein bereits bestehendes sowie funktionierendes Konzept zu übernehmen. So wurden auch die ersten Schritte an der TU gemacht. Zu diesem Zweck wurde das von den Entwicklern von jEdit zur Verfügung gestellte plugin 'QuickNotepad' übernommen und in Scala übersetzt. Obwohl Scala eng mit Java verknüpft ist, war doch einiges an 'rewritting' notwendig bis das Scala-plugin lauffähig wurde. Die benötigten XML-files konnten dazu nahezu unberührt gelassen werden.\\
neuper@38077
   354
neuper@38077
   355
\subsection{Details of NetBeans projects}\label{netbeans}
neuper@38089
   356
%     Scala + Java: html project files
neuper@38089
   357
As described in the last paragraph, jEdit is a open-source-project. The jEdit-developers use a NetBeans-project to produce the source-code and so it is beneficial to use a NetBeans project too, because there is a quite good documentation about setting up a NetBeans-project with the jEdit-source. See http://wiki.netbeans.org/NetbeansedJEdit for further information.\\\\
neuper@38089
   358
If you want to set up a new jEdit-Plugin-project you have to attend that you have to create some source-files and that there must be a connection to the jEdit-source because you will need to exchange data with the jEdit engine. This could probably look like: \textit{jEdit.getProperty("options.isabelle.isabelle")}\\
neuper@38089
   359
As shown above, the jEdit-source is needed to compile and build your Plugin. There are two ways to organize your project:
neuper@38089
   360
\begin{itemize}
neuper@38089
   361
\item with jEdit source code - two projects in one
neuper@38089
   362
\item with jedit.jar library
neuper@38089
   363
\end{itemize}
neuper@38089
   364
\subsubsection{Plugin with jEdit-source}
neuper@38089
   365
It is a good way to download the jEdit source as Netbeans project because then it is possible to add another subproject to the existing jEdit-NetBeans-project. As you see it is also possible to mix Scala and Java. A big advantage is, that debugging will now work really fine. If you want to set up a project like this, you should complete the following steps.
neuper@38089
   366
\begin{enumerate}
neuper@38089
   367
\item {Create a new NetBeans-project for your Plugin like \textit{example-plugin}. This will probably be a Scala-Project.}
neuper@38089
   368
\item Download (and try out) the \textit{jEdit-NetBeans-project}
neuper@38089
   369
\item at project \textit{example-plugin}: \textit{Project-browser} $\rightarrow$ Right-click at \textit{Libraries} $\rightarrow$ \textit{add Project...} and then choose the \textit{jEdit-NetBeans-project}.
neuper@38089
   370
\item at project \textit{example-plugin}: \textit{Project-browser} $\rightarrow$ Right-click at project-name-label $\rightarrow$ \textit{Properties} $\rightarrow$ \textit{Run} $\rightarrow$ \textit{Main Class:} org.gjt.sp.jedit.jEdit
neuper@38089
   371
\item compile and run
neuper@38089
   372
\end{enumerate}
neuper@38089
   373
neuper@38089
   374
\subsubsection{Plugin with jedit.jar}
neuper@38089
   375
It is also possible to use the \textit{jedit.jar} file. This file is already included in \$ISABELLE-HOME/contrib/jedit-4.3.2. Now you just have to follow this steps:
neuper@38089
   376
\begin{enumerate}
neuper@38089
   377
\item {Create a new NetBeans-project for your Plugin like \textit{example-plugin}. This will probably be a Scala-Project.}
neuper@38089
   378
\item at project \textit{example-plugin}: \textit{Project-browser} $\rightarrow$ Right-click at \textit{Libraries} $\rightarrow$ \textit{add JAR/Folder...} and then choose the \textit{jedit.jar} file.
neuper@38089
   379
\item at project \textit{example-plugin}: \textit{Project-browser} $\rightarrow$ Right-click at project-name-label $\rightarrow$ \textit{Properties} $\rightarrow$ \textit{Run} $\rightarrow$ \textit{Main Class:} org.gjt.sp.jedit.jEdit
neuper@38089
   380
\item compile and run
neuper@38089
   381
\end{enumerate}
neuper@38089
   382
This are two different ways to get started. It is difficult to say what is better because both versions have advantages. Now it is time to start coding your own Plugin but there are still a few things to think about. Remember, that a Plugin consists of source-, XML- and property-files. On default, NetBeans will just pack the source-files in the \textit{example-plugin.jar}-package. So you have to add a copy/move-routine in the \textit{build.xml} file of your NetBeans-project to get a complemented package.
neuper@38089
   383
\begin{itemize}
neuper@38089
   384
\item $\langle target name="-pre-jar"\rangle$
neuper@38089
   385
\item $	\langle copy $file="plugin/services.xml" todir="\${build.classes.dir}" $/\rangle$
neuper@38089
   386
\item $	\langle copy $file="plugin/dockables.xml" todir="\${build.classes.dir}" $/\rangle$
neuper@38089
   387
\item $	\langle copy $file="plugin/actions.xml" todir="\${build.classes.dir}" $/\rangle$	
neuper@38089
   388
\item $	\langle copy $file="plugin/Isabelle.props" todir="\${build.classes.dir}" $/\rangle$
neuper@38089
   389
\item $	\langle /target\rangle$
neuper@38089
   390
\end{itemize}
neuper@38089
   391
%* kurze aufzählung der xml-netbeans-files + erklärung\\
neuper@38089
   392
\subsubsection{NetBeans project files}
neuper@38089
   393
As you see in the paragraph above, it is also important to have basic knowledge about NetBeans, the project structure and how to change the operational sequences. A typical NetBeans-project consist of the source- and library-files and administrative XML- and property-files. In this paragraph the administrative part of the project is of note. The most important file is \textit{build.xml}. This file can be found in the project directory. There is also a folder \textit{nbproject} which contains the remaining XML- and property-files and also a folder \textit{private}, where individual user informations about the project is stored. The files in this \textit{private} folder are not important to describe (and they should not be pushed on the repository!).\\
neuper@38089
   394
A build-file like \textit{build.xml} contains one project and at least one (default) target. Targets contain task elements. Each task element of the build-file can have an id attribute and can later be referred to by the value supplied to this. So the id has to be unique. Such targets can be "run", "debug", "build", ... and can have dependencies to other targets. Tasks define what should happen, if a target is executed. So like in the example above, the target is \textit{pre-jar}, that means that this things will happen before the jar-package is packed. The tasks of this target are copying some files into the package.\\
neuper@38089
   395
The files inside the \textit{nbproject}-folder are not so important because some of it are generated from \textit{build.xml} and changes in this files are useless. Just the file project.properties is really interesting because this file gives a nice and tight overview about the project settings.
neuper@38077
   396
neuper@38077
   397
\subsection{Use interfaces between Java and Scala}\label{java-scala}
neuper@38089
   398
%     how are data exchanged between Scala and Java ...
neuper@38089
   399
jEdit is completely written in Java and the required plugin(s) for Isac will be coded in Scala - so there must be ways to exchange data between Java and Scala. One way is to connect this two worlds with the in 4.2 described XML-files. Here you need to use a third type of code to get an interface between Java and Scala code. But there is also a way to get a direct connection.\\
neuper@38089
   400
This link should be shown on the graphic-library \textit{Swing}. In both languages it is possible to use Swing which provides a lot of different shapes and useful functionality. So there is a Java-Swing and also a Scala-Swing-library. Now it is interesting to examine the connection between this two libraries.\\
neuper@38089
   401
In Scala a direct use of Java-Libs (like Java-Swing) is possible. So if you are Java-Programmer and want to use Java-Swing in Scala, you can simply type \textit{import javax.swing.JButton} to work with a Java-button. But you can also use the Scala-equivalent \textit{scala.swing.Button}. This two button-types will provide nearly the same functionality.\\So what is the idea of creating a nearly similar library a second time? Why have the Scala-developers done such extra work? The answer is, that they have tried to improve and simplify the usage of the Swing-library(and many other libs too!). So big parts of this Scala-Libraries are just Wrapper-objects, Wrapper-Classes and Wrapper-Methods of already existing parts in Java-Libraries. Needless to say that they also added new useful shapes and functionality.\\
neuper@38089
   402
But there is one important question left: Is it possible to mix Scala- and Java-objects? And yes, it is possible. There is a really easy way to convert a Scala-object to the Java-equivalent:
neuper@38089
   403
\begin{enumerate}
neuper@38089
   404
\item \textit{import javax.swing.JButton}
neuper@38089
   405
\item \textit{import scala.swing.Button}
neuper@38089
   406
\item \textit{var b: scala.swing.Button}
neuper@38089
   407
\item \textit{var jb: javax.swing.JButton}
neuper@38089
   408
\item \textit{jb = b.peer}
neuper@38089
   409
\end{enumerate}
neuper@38089
   410
As the example above illustrates, a conversion of Scala- to Java-objects is possible. It looks easy but also a little bit useless. Why should you need this? Just imagine that there is a Plugin written in Scala and one coded in Java. With this connection between Scala and Java, it would be easy to connect this two Plugins! 
neuper@38089
   411
%Diesen direkten Zusammenhang zwischen Java und Scala soll anhand der Grafik-Bibliotheken Swing. Beide Sprachen stellen diese Grafik-Bibliotheken zur Verfügung (und darin auch eigene Shapes und Funktionalität). Es ist jedoch möglich, Java-Bibliotheken, wie eben auch Java-Swing in Scala zu verwenden. Ein JButton kann zum Beispiel mittels \textit{import javax.swing.JButton} eingebunden und damit sofort auch verwendet werden. Auch Scala stellt in seiner Swing-Bibliothek zur Verfügung: \textit{scala.swing.Button}. Es wird nahezu die selbe Funktionalität angeboten und teilweise die Erzeugung bzw. Verwendung vereinfacht(???). Man kann sich nun fragen, warum sich die Scala-Entwickler einerseit die Mühe gemacht haben die Verwendung Java-Swing, wie in Java selbst, möglich zu machen und andererseits mit Scala-Swing eine nahezu idente Alternative geschaffen haben. Die Antwort darauf zeigt wie der objektorientierte Teil von Scala in vielen Bereichen aufgebaut wurden. Es wurde kein neues Konzept für diese Grafikklassen entworfen sondern Wrapper-Objekte/Methoden/Klassen erstellt, die das Arbeiten mit diesen Grafikkomponenten erleichtern soll. Ein Letztes Problem bleibt noch: Es ist zwar sehr einfach ein Java-Swing-Objekt an einen Scala-Swing-Container (zb. Frame) anzubinden, da eine Konvertierung von Java-Komponente in ein Scala-Äquivalent ist problemlos möglich. ...
neuper@38089
   412
http://www.scala-lang.org/api/current/scala/swing/Button.html\\
neuper@38089
   413
http://download.oracle.com/javase/1.4.2/docs/api/javax/swing/JButton.html
neuper@38077
   414
neuper@38077
   415
\section{Conclusion and future work}
neuper@38077
   416
neuper@38077
   417
neuper@38079
   418
\bibliography{CTP-userinterfaces}
neuper@38079
   419
%\bibliography{bib/math-eng,bib/bk,bib/RISC_2,bib/isac,bib/pl,bib/math,bib/pl}
neuper@38077
   420
\end{document}