1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
// Copyright (c) 2021 Sebastien Braun
//
// This Source Code Form is subject to the terms of the Mozilla Public
// License, v. 2.0. If a copy of the MPL was not distributed with this
// file, You can obtain one at http://mozilla.org/MPL/2.0/.

//! The [`Maybe`] trait and its two implementations [`An`] and [`No`]
//! describe a compile-time optional value.

use std::{
    marker::PhantomData,
    panic::{RefUnwindSafe, UnwindSafe},
};

/// Prevent anyone else from implementing our traits.
/// This module is unexported so no other crate can
/// implement the [`__SealMaybe`] trait.
mod sealed {
    /// A marker trait that marks types as originating from
    /// this crate. Cannot be implemented outside of our crate.
    pub trait __SealMaybe {}
}

use sealed::*;

/// A type-level optional value.
///
/// This trait is sealed and is only implemented by two types from
/// this crate:
///
/// - [`An<T>`] denotes a value that is present on the type-level
/// - [`No<T>`] denotes the absence of any value, as in there can
///   never be an expression that is executed at run-time that
///   yields a value of this type.
///
/// Note that since no value of [`No`] can ever exist, all functions
/// in this trait may safely assume that they will only be called
/// on an [`An`].
///
/// ```
/// # use eso::maybe::{An,Impossible,No};
/// pub enum X {
///     Yup(An<i32>),
///     Nope(No<String>),
/// }
///
/// // Since no value of X can be of the `Nope` variant, this is
/// // well-typed and cannot panic:
/// fn unwrap_x(x: X) -> i32 {
///     match x {
///         X::Yup(An(i)) => i,
///         _ => unreachable!()
///     }
/// }
/// ```
pub trait Maybe: Sized + __SealMaybe {
    /// The type whose presence or absence is in question
    type Inner;

    /// Yield a reference to the inner value.
    fn inner(&self) -> &Self::Inner;

    /// Yield a mutable reference to the inner value.
    fn inner_mut(&mut self) -> &mut Self::Inner;

    /// Recover the inner value from the wrapper.
    fn unwrap(self) -> Self::Inner;

    /// Run a function on the inner value that either succeeds
    /// or gives back the inner value
    fn unwrap_try<F, T>(self, f: F) -> Result<T, Self>
    where
        F: FnOnce(Self::Inner) -> Result<T, Self::Inner>;

    /// Run a function on the inner value that either succeeds
    /// or gives back the inner value, plus an error value
    fn unwrap_try_x<F, T, E>(self, f: F) -> Result<T, (Self, E)>
    where
        F: FnOnce(Self::Inner) -> Result<T, (Self::Inner, E)>;

    /// Apply a function to the contained value while keeping
    /// the result contained.
    fn map<F, NewInner>(self, f: F) -> <Self as MaybeMap<NewInner>>::Out
    where
        Self: MaybeMap<NewInner>,
        F: FnOnce(Self::Inner) -> NewInner,
    {
        <Self as MaybeMap<NewInner>>::do_map(self, f)
    }
}

/// A type-level function to describe the result
/// of a [`Maybe::map`] operation
pub trait MaybeMap<NewInner>: Maybe {
    /// A [`Maybe`] with the inner type replaced by `NewInner`
    type Out: Maybe<Inner = NewInner>;

    /// The `self` is required as evidence that
    /// you are not constructing a [`No`].
    fn do_map<F>(self, f: F) -> Self::Out
    where
        F: FnOnce(Self::Inner) -> NewInner;
}

/// A trait characterizing a never-existing value
pub trait Impossible {
    /// Conjure up anything from the nonexistant value.
    ///
    /// Since `self` in this function can never exist, it follows
    /// that this function can never be called.
    /// Which means that we can pretend that it returns whatever
    /// the situation calls for.
    /// The code path in which it is called can not be executed
    /// anyway, but still has to typecheck.
    fn absurd<T>(&self) -> T;
}

/// A value of type `A` that exists.
///
/// See the notes about [`Maybe`] for a deeper explanation.
#[derive(Debug, Clone)]
#[repr(transparent)]
pub struct An<A>(pub A);

impl<A> __SealMaybe for An<A> {}

impl<A> Maybe for An<A> {
    type Inner = A;

    fn inner(&self) -> &A {
        &self.0
    }

    fn inner_mut(&mut self) -> &mut A {
        &mut self.0
    }

    fn unwrap(self) -> A {
        self.0
    }

    fn unwrap_try<F, T>(self, f: F) -> Result<T, Self>
    where
        F: FnOnce(Self::Inner) -> Result<T, A>,
    {
        match f(self.unwrap()) {
            Ok(r) => Ok(r),
            Err(inner) => Err(An(inner)),
        }
    }

    fn unwrap_try_x<F, T, E>(self, f: F) -> Result<T, (Self, E)>
    where
        F: FnOnce(Self::Inner) -> Result<T, (Self::Inner, E)>,
    {
        match f(self.unwrap()) {
            Ok(r) => Ok(r),
            Err((inner, e)) => Err((An(inner), e)),
        }
    }

    fn map<F, B>(self, f: F) -> <Self as MaybeMap<B>>::Out
    where
        Self: MaybeMap<B>,
        F: FnOnce(Self::Inner) -> B,
    {
        <Self as MaybeMap<B>>::do_map(self, f)
    }
}

impl<A, B> MaybeMap<B> for An<A> {
    type Out = An<B>;

    #[inline]
    fn do_map<F>(self, f: F) -> Self::Out
    where
        F: FnOnce(Self::Inner) -> B,
    {
        An(f(self.0))
    }
}

#[derive(Debug, Clone)]
enum Nothing {}

/// A value of type `A` that cannot exist.
///
/// See the notes about [`Maybe`] for a deeper explanation.
#[derive(Debug)]
pub struct No<A> {
    ghost: PhantomData<A>,
    impossible: Nothing,
}

impl<A> Impossible for No<A> {
    fn absurd<T>(&self) -> T {
        match self.impossible {}
    }
}

impl<A> __SealMaybe for No<A> {}

impl<A> Maybe for No<A> {
    type Inner = A;

    fn inner(&self) -> &A {
        self.absurd()
    }

    fn inner_mut(&mut self) -> &mut Self::Inner {
        self.absurd()
    }

    fn unwrap(self) -> A {
        self.absurd()
    }

    fn unwrap_try<F, T>(self, _f: F) -> Result<T, Self>
    where
        F: FnOnce(Self::Inner) -> Result<T, A>,
    {
        self.absurd()
    }

    fn unwrap_try_x<F, T, E>(self, _f: F) -> Result<T, (Self, E)>
    where
        F: FnOnce(Self::Inner) -> Result<T, (Self::Inner, E)>,
    {
        self.absurd()
    }

    fn map<F, NewInner>(self, _: F) -> <Self as MaybeMap<NewInner>>::Out
    where
        Self: MaybeMap<NewInner>,
        F: FnOnce(Self::Inner) -> NewInner,
    {
        self.absurd()
    }
}

impl<A, B> MaybeMap<B> for No<A> {
    type Out = No<B>;

    fn do_map<F>(self, _: F) -> Self::Out
    where
        F: FnOnce(Self::Inner) -> B,
    {
        self.absurd()
    }
}

impl<A> Clone for No<A> {
    fn clone(&self) -> Self {
        self.absurd()
    }
}

/// **SAFETY**: Since you can't get hold of a [`No<A>`] anyway, and therefore can't ever
/// have a reference to one (in safe code), any code path where you hold one
/// across a potential panic is dead and won't ever execute.
impl<A> RefUnwindSafe for No<A> {}

/// **SAFETY**: Since you can't get hold of a [`No<A>`] anyway, it doesn't matter at all
/// whether or not you try to send one to another thread.
#[cfg(feature = "allow-unsafe")]
#[allow(unsafe_code)]
unsafe impl<A> Send for No<A> {}

/// **SAFETY**: Since you can't get hold of a [`No<A>`] anyway, and therefore can't ever
/// have a reference to one (in safe code), it doesn't matter at all, *how many
/// threads* you can't ever have those references on.
#[cfg(feature = "allow-unsafe")]
#[allow(unsafe_code)]
unsafe impl<A> Sync for No<A> {}

/// **SAFETY**: Since you can't get hold of a [`No<A>`] anyway, whatever detrimental
/// effects might arise from unpinning it can never happen since it's not there
/// in the first place, and the code unpinning it will never execute.
impl<A> Unpin for No<A> {}

/// **SAFETY**: Since you can't get hold of a [`No<A>`] anyway, any code path where you
/// hold one across a potential panic is dead and will never execute.
impl<A> UnwindSafe for No<A> {}

/// Safe conversion between [`Maybe`]s.
///
/// Casting between [`An`] and [`No`] is safe in the following
/// combinations:
///
///  - An [`An<A>`] may only be cast into itself.
///
///  - A [`No<A>`] may be cast into any [`An<B>`] or any other
///    [`No<B>`], since the [`No<A>`] cannot exist in the
///    first place, so the cast can never actually happen.
pub trait Relax<Into>: Maybe {
    /// Cast `self` into another type of [`Maybe`].
    ///
    /// See the [trait documentation](Relax) for the rules.
    fn relax(self) -> Into;
}

impl<A> Relax<An<A>> for An<A> {
    fn relax(self) -> An<A> {
        self
    }
}

impl<A, B> Relax<An<B>> for No<A> {
    fn relax(self) -> An<B> {
        self.absurd()
    }
}

impl<A, B> Relax<No<B>> for No<A> {
    fn relax(self) -> No<B> {
        self.absurd()
    }
}