Safe Haskell | Safe-Inferred |
---|---|
Language | Haskell2010 |
This is an internal module. Backwards compatibility will not be maintained. See Control.Monad.Validate for the public interface.
Synopsis
- newtype ValidateT e m a = ValidateT {
- getValidateT :: forall s. StateT (MonoMaybe s e) (ExceptT e m) a
- validateT :: forall e m a. Functor m => (forall s. MonoMaybe s e -> m (Either e (MonoMaybe s e, a))) -> ValidateT e m a
- unValidateT :: forall s e m a. Functor m => MonoMaybe s e -> ValidateT e m a -> m (Either e (MonoMaybe s e, a))
- data ValidateTState e a = forall s.ValidateTState {
- getValidateTState :: Either e (MonoMaybe s e, a)
- invalidRestoreError :: a
- liftCatch :: Functor m => (forall b. m b -> (e -> m b) -> m b) -> ValidateT d m a -> (e -> ValidateT d m a) -> ValidateT d m a
- liftMask :: Functor m => (forall c. ((forall a. m a -> m a) -> m c) -> m c) -> ((forall a. ValidateT e m a -> ValidateT e m a) -> ValidateT e m b) -> ValidateT e m b
- runValidateT :: forall e m a. Functor m => ValidateT e m a -> m (Either e a)
- execValidateT :: forall e m a. (Monoid e, Functor m) => ValidateT e m a -> m e
- embedValidateT :: forall e m a. MonadValidate e m => ValidateT e m a -> m a
- mapErrors :: forall e1 e2 m a. (Monad m, Semigroup e2) => (e1 -> e2) -> ValidateT e1 m a -> ValidateT e2 m a
- validateToError :: forall e m a. MonadError e m => ValidateT e m a -> m a
- validateToErrorWith :: forall e1 e2 m a. MonadError e2 m => (e1 -> e2) -> ValidateT e1 m a -> m a
- type Validate e = ValidateT e Identity
- runValidate :: forall e a. Validate e a -> Either e a
- execValidate :: forall e a. Monoid e => Validate e a -> e
- data MonoMaybe s a where
- data MonoMaybeS
- monoMaybe :: (s ~ 'SMaybe => b) -> (a -> b) -> MonoMaybe s a -> b
Documentation
newtype ValidateT e m a Source #
ValidateT
is a monad transformer for writing validations. Like ExceptT
, ValidateT
is
primarily concerned with the production of errors, but it differs from ExceptT
in that ValidateT
is designed not to necessarily halt on the first error. Instead, it provides a mechanism for
collecting many warnings or errors, ideally as many as possible, before failing. In that sense,
ValidateT
is also somewhat like WriterT
, but it is not just a combination
of ExceptT
and WriterT
. Specifically, it differs in the following two
respects:
ValidateT
automatically collects errors from all branches of anApplicative
expression, making it possible to write code in the same style that one would use withExceptT
and automatically get additional information for free. (This is especially true when used in combination with theApplicativeDo
language extension.)ValidateT
provides error signaling operators,refute
anddispute
, which are similar tothrowError
andtell
, respectively. However, both operators combine raised errors into a single value (using an arbitrarySemigroup
), so the relative ordering of validation errors is properly respected. (Of course, if the order doesn’t matter to you, you can choose to accumulate errors into an unordered container.)
An introduction to ValidateT
The first of the above two points is by far the most interesting feature of ValidateT
. Let’s make
it more concrete with an example:
>>>runValidate
(refute
["bang"]*>
refute
["boom"])Left
["bang", "boom"]
At first blush, the above example may lead you to believe that refute
is like tell
from
WriterT
, but it is actually more like throwError
. Consider its type:
refute
::MonadValidate
e m => e -> m a
Note that, like throwError
, refute
is polymorphic in its return type, which is to say it never
returns. Indeed, if we introduce a dependency on a computation that fails using refute
via
>>=
, the downstream computation will not be run:
>>> let getString =refute
["bang"]*>
pure
"boom" useString a =refute
[a] inrunValidate
(getString>>=
useString)Left
["bang"]
This works because although the Monad
instance for ValidateT
fails as soon as the first refute
is executed (as it must due to the way the second argument of >>=
depends on the result of its
first argument), the Applicative
instance runs all branches of <*>
and combines the errors
produced by all of them. When ApplicativeDo
is enabled, this can lead to some “magical” looking
error reporting where validation automatically continues on each sub-piece of a piece of data until
it absolutely cannot proceed any further. As an example, this package’s test suite includes the
following function:
validateQueryRequest :: (MonadReader
Env m,MonadValidate
[Error] m) => Value -> m QueryRequest validateQueryRequest req = withObject "request" req$
o -> do qrAuth <- withKey o "auth_token" parseAuthToken ~(qrTable, info) <- withKey o "table" parseTableName qrQuery <- withKey o "query" parseQueryfor_
info$
tableInfo -> pushPath "query"$
validateQuery qrTable tableInfo (atIsAdmin qrAuth) qrQuerypure
QueryRequest { qrAuth, qrTable, qrQuery }
The above do
block parses and validates some JSON, and it’s written as straight line code, but
with ApplicativeDo
enabled (along with the -foptimal-applicative-do
option, which makes GHC try
a little harder), it still produces errors for all parts of the input document at once:
>>>flip
runReader
env.
runValidateT
$
validateQueryRequest [aesonQQ| { "auth_token": 123 , "table": { "name": "users" } , "query": { "add": [ { "lit": "42" } , { "select": "points" } ]} }|]Left
[ Error ["auth_token"] (JSONBadValue "string" (Number 123)) , Error ["table"] (JSONMissingKey "schema") , Error ["query", "add", "lit"] (JSONBadValue "number" (String "42")) ]
The penultimate statement in the do
block—the one with the call to validateQuery
—depends on
several of the bindings bound earlier in the same do
block, namely qrAuth
, info
, and
qrQuery
. Because of that, validateQuery
will not be executed so long as any of its dependencies
fail. As soon as they all succeed, their results will be passed to validateQuery
as usual, and
validation will continue.
The full details
Although ValidateT
(with ApplicativeDo
) may seem magical, of course, it is not. As alluded to
above, ValidateT
simply provides a <*>
implementation that collects errors produced by both
arguments rather than short-circuiting as soon as the first error is raised.
However, that explanation alone may raise some additional questions. What about the monad laws? When
ValidateT
is used in a monad transformer stack, what happens to side effects? And what are
ValidateT
’s performance characteristics? The remainder of this section discusses those topics.
ValidateT
and the Monad
laws
ValidateT
’s Applicative
and Monad
instances do not conform to a strict interpretation of the
Monad
laws, which dictate that <*>
must be equivalent to ap
. For ValidateT
, this is not true
if we consider “equivalent” to mean ==
. However, if we accept a slightly weaker notion of
equivalence, we can satisfy the laws. Specifically, we may use the definition that some Validate
action a
is equivalent to another action b
iff
- if
producesrunValidate
a
, thenRight
x
must producerunValidate
b
whereRight
yx
(and==
y==
is the usual Haskell==
), - and if
producesrunValidate
a
, thenLeft
x
must producerunValidate
b
(butLeft
yx
andy
may be unrelated).
In other words, our definition of equivalence is like ==
, except that we make no guarantees about
the contents of an error should one occur. However, we do guarantee that replacing <*>
with
ap
or vice versa will never change an error to a success or a success to an error, nor will it
change the value of a successful result in any way. To put it another way, ValidateT
provides
“best effort” error reporting: it will never return fewer errors than an equivalent use of
ExceptT
, but it might return more.
Using ValidateT
with other monad transformers
ValidateT
is a valid, lawful, generally well-behaved monad transformer, and it is safe to use
within a larger monad transformer stack. Instances for the most common mtl
-style typeclasses are
provided. However, be warned: many common monad transformers do not have sufficiently
order-independent Applicative
instances for ValidateT
’s Applicative
instance to actually
collect errors from multiple branches of a computation.
To understand why that might be, consider that StateT
must enforce a left-to-right evaluation
order for <*>
in order to thread the state through the computation. If the a
action in an
expression a
fails, then it is simply not possible to run <*>
bb
since b
may still depend
on the state that would have been produced by a
. Similarly, ExceptT
enforces a left-to-right
evaluation because it aborts a computation as soon as an error is thrown. Using ValidateT
with
these kinds of monad transformers will cause it to effectively degrade to
WriterT
over ExceptT
since it will not be able to gather any errors
produced by refute
beyond the first one.
However, even that isn’t the whole story, since the relative order of monads in a monad transformer
stack can affect things further. For example, while the StateT
monad transformer enforces
left-to-right evaluation order, it only does this for the monad underneath it, so although
will not be able to collect multiple errors, StateT
s (ValidateT
e)
will. Note, however, that those two types differ in other ways, too—running each to
completion results in different types:ValidateT
e
(State
s)
runState
(runValidateT
m) s :: (Either
e a, s)runValidate
(runStateT
m s) ::Either
e (a, s)
That kind of difference is generally true when using monad transformers—the two combinations of
ExceptT
and StateT
have the same types as above, for example—but because ValidateT
needs to be
on top of certain transformers for it to be useful, combining ValidateT
with certain transformers
may be of little practical use.
One way to identify which monad transformers are uncooperative in the aforementioned way is to look
at the constraints included in the context of the transformer’s Applicative
instance. Transformers
like StateT
have instances of the shape
instanceMonad
m =>Applicative
(StateT
s m)
which notably require Monad
instances just to implement Applicative
! However, this is not always
sufficient for distinguishing which functions or instances use <*>
and which use >>=
, especially
since many older libraries (which predate Applicative
) may include Monad
contraints even when
they only use features of Applicative
. The only way to be certain is to examine the
implementation (or conservatively write code that is explicitly restricted to Applicative
).
(As it happens, ValidateT
’s Applicative
is actually one such “uncooperative” instance itself: it
has a Monad
constraint in its context. It is possible to write an implementation of ValidateT
without that constraint, but its <*>
would necessarily leak space in the same way
WriterT
’s >>=
leaks space. If you have a reason to want the less efficient
but more permissive variant, please let the author of this library know, as she would probably find
it interesting.)
Performance characteristics of ValidateT
Although the interface to ValidateT
is minimal, there are surprisingly many different ways to
implement it, each with its own set of performance tradeoffs. Here is a quick summary of the choices
ValidateT
makes:
ValidateT
is strict in the set of errors it accumulates, which is to say it reduces them to weak head normal form (WHNF) viaseq
immediately upon any call torefute
ordispute
.- Furthermore, all of
ValidateT
’s operations, including<*>
, operate in constant space. This means, for example, that evaluating
will consume constant space regardless of the size ofsequence_
xsxs
, not counting any space consumed purely due to the relevantFoldable
instance’s traversal ofxs
. - Finally,
ValidateT
accumulates errors in a left-associative manner, which is to say that any uses ofrefute
ordispute
combine the existing set of errors,e
, with the added set of errors,e'
, via the expressione
.<>
e'
A good rule of thumb is that ValidateT
has similar performance characteristics to
, while types like foldl'
(<>
)Validation
from the either
package tend to
have similar performance characteristics to
. That decision has both significant
advantages and significant disadvantages; the following subsections elaborate further.foldr
(<>
)
<*>
takes constant space
Great care has been taken in the implementation of <*>
to ensure it does not leak space. Notably,
the same cannot be said for many existing implementations of similar concepts. For example, you
will find that executing the expression
let m () =pure
()*>
m () in m ()
may continuously allocate memory until it is exhausted for types such as Validation
(from the
either
package), but ValidateT
will execute it in constant space. This point may seem silly,
since the above definition of m ()
will never do anything useful, anyway, but the same point also
applies to operations like sequence_
.
In practice, this issue matters far less for types like Validation
than it does for ValidateT
,
as Validation
and its cousins don’t have a Monad
instance and do not generally experience the
same usage patterns. (The additional laziness they are capable of can sometimes even avoid the space
leak altogether.) However, it can be relevant more often for ValidateT
, so this implementation
makes choices to avoid the potential for the leak altogether.
Errors are accumulated using strict, left-associated <>
A major consequence of the decision to both strictly accumulate state and maintain constant space is
that ValidateT
’s internal applications of <>
to combine errors are naturally strict and
left-associated, not lazy and right-associated like they are for types like Validation
. If the
number of errors your validation generates is small, this difference is irrelevant, but if it is
large, the difference in association can prove disastrous if the Semigroup
you choose to
accumulate errors in is [a]
!
To make it painfully explicit why using [a]
can come back to bite you, consider that each time
ValidateT
executes
, given some existing collection of errors refute
e'e
, it (strictly)
evalutes e
to obtain a new collection of errors. Now consider the implications of that
if <>
e'e
is a ten thousand element list: <>
will have to traverse all ten thousand elements and
reallocate a fresh cons cell for every single one in order to build the new list, even if just one
element is being appended to the end! Unfortunately, the ubiquitous, built-in [a]
type is clearly
an exceptionally poor choice for this pattern of accumulation.
Fortunately, the solution is quite simple: use a different data structure. If order doesn’t matter,
use a Set
or HashSet
. If it does, but either LIFO consumption of the data is okay or you are
okay with paying to reverse the data once after collecting the errors, use
to accumulate elements in an efficient manner. If neither is true, use a data structure like
Dual
[a]Seq
that provides an efficient implementation of a functional queue. You can always convert back
to a plain list at the end once you’re done, if you have to.
ValidateT | |
|
Instances
validateT :: forall e m a. Functor m => (forall s. MonoMaybe s e -> m (Either e (MonoMaybe s e, a))) -> ValidateT e m a Source #
unValidateT :: forall s e m a. Functor m => MonoMaybe s e -> ValidateT e m a -> m (Either e (MonoMaybe s e, a)) Source #
data ValidateTState e a Source #
An opaque type used to capture the current state of a ValidateT
computation, used as the
StT
instance for ValidateT
. It is opaque in an attempt to protect internal invariants about
the state, but it is unfortunately still theoretically possible for it to be misused (but such
misuses are exceedingly unlikely).
forall s. ValidateTState | |
|
Instances
Functor (ValidateTState e) Source # | |
Defined in Control.Monad.Validate.Internal fmap :: (a -> b) -> ValidateTState e a -> ValidateTState e b # (<$) :: a -> ValidateTState e b -> ValidateTState e a # | |
(Show e, Show a) => Show (ValidateTState e a) Source # | |
Defined in Control.Monad.Validate.Internal showsPrec :: Int -> ValidateTState e a -> ShowS # show :: ValidateTState e a -> String # showList :: [ValidateTState e a] -> ShowS # |
invalidRestoreError :: a Source #
liftCatch :: Functor m => (forall b. m b -> (e -> m b) -> m b) -> ValidateT d m a -> (e -> ValidateT d m a) -> ValidateT d m a Source #
liftMask :: Functor m => (forall c. ((forall a. m a -> m a) -> m c) -> m c) -> ((forall a. ValidateT e m a -> ValidateT e m a) -> ValidateT e m b) -> ValidateT e m b Source #
execValidateT :: forall e m a. (Monoid e, Functor m) => ValidateT e m a -> m e Source #
Runs a ValidateT
computation, returning the errors on failure or mempty
on success. The
computation’s result, if any, is discarded.
>>>execValidate
(refute
["bang"]) ["bang"] >>>execValidate
@[] (pure
42) []
embedValidateT :: forall e m a. MonadValidate e m => ValidateT e m a -> m a Source #
Runs a ValidateT
transformer by interpreting it in an underlying transformer with a
MonadValidate
instance. That might seem like a strange thing to do, but it can be useful in
combination with mapErrors
to locally alter the error type in a larger ValidateT
computation.
For example:
throwsIntegers ::MonadValidate
[Integer
] m => m () throwsIntegers =dispute
[42] throwsBools ::MonadValidate
[Bool
] m => m () throwsBools =dispute
[False
] throwsBoth ::MonadValidate
[Either
Integer
Bool
] m => m () throwsBoth = doembedValidateT
$
mapErrors
(map
Left
) throwsIntegersembedValidateT
$
mapErrors
(map
Right
) throwsBools >>>runValidate
throwsBothLeft
[Left
42,Right
False]
Since: 1.1.0.0
mapErrors :: forall e1 e2 m a. (Monad m, Semigroup e2) => (e1 -> e2) -> ValidateT e1 m a -> ValidateT e2 m a Source #
validateToError :: forall e m a. MonadError e m => ValidateT e m a -> m a Source #
Runs a ValidateT
computation, and if it raised any errors, re-raises them using throwError
.
This effectively converts a computation that uses ValidateT
(or MonadValidate
) into one that
uses MonadError
.
>>>runExcept
$
validateToError
(pure
42)Right
42 >>>runExcept
$
validateToError
(refute
["boom"] *>refute
["bang"])Left
["boom", "bang"]
Since: 1.2.0.0
validateToErrorWith :: forall e1 e2 m a. MonadError e2 m => (e1 -> e2) -> ValidateT e1 m a -> m a Source #
Like validateToError
, but additionally accepts a function, which is applied to the errors
raised by ValidateT
before passing them to throwError
. This can be useful to concatenate
multiple errors into one.
>>>runExcept
$
validateToErrorWith
mconcat
(pure
42)Right
42 >>>runExcept
$
validateToErrorWith
mconcat
(refute
["boom"] *>refute
["bang"])Left
"boombang"
Since: 1.2.0.0
runValidate :: forall e a. Validate e a -> Either e a Source #
See runValidateT
.
execValidate :: forall e a. Monoid e => Validate e a -> e Source #
See execValidateT
.
data MonoMaybe s a where Source #
Monotonically increasing Maybe
values. A function with the type
forall s.MonoMaybe
s Foo ->MonoMaybe
s Bar
may return MNothing
only when given MNothing
, but it may return MJust
for any input. This
is useful for keeping track of the error state within ValidateT
, since we want to statically
prevent the possibility of a ValidateT
action being passed a nonempty set of errors but returning
no errors.
The benefit of this additional type tracking shows up most prominently in the implementation of
<*>
. Consider an expression x
, where <*>
yx
is an action that fails, but y
is an action
that succeeds. We pass the errors returned by x
to y
, then pattern-match on y
’s result. If y
succeeds, we’ll end up with a tuple of type (
. We can’t use the second
element of that tuple at all because we need to return a value of type MonoMaybe
'SJust
e, a)b
, but the only way to get
one is to apply a function of type a -> b
returned by x
… which we don’t have, since x
failed.
Since we can’t produce a value of type
, our only option is to return a value of type
Right
b
. But if the first element of the tuple had type Left
e
, we’d now be in a sticky
situation! Its value could be Maybe
eNothing
, but we need it to be
since we only have a
Just
eSemigroup
instance for e
, not a Monoid
instance, so we can’t produce an e
out of thin air.
However, by returning a MonoMaybe
, we guarantee that the result will be
, and we can
proceed safely.MJust
e
Instances
Functor (MonoMaybe s) Source # | |
Show a => Show (MonoMaybe s a) Source # | |
Eq a => Eq (MonoMaybe s a) Source # | |
Ord a => Ord (MonoMaybe s a) Source # | |
Defined in Control.Monad.Validate.Internal compare :: MonoMaybe s a -> MonoMaybe s a -> Ordering # (<) :: MonoMaybe s a -> MonoMaybe s a -> Bool # (<=) :: MonoMaybe s a -> MonoMaybe s a -> Bool # (>) :: MonoMaybe s a -> MonoMaybe s a -> Bool # (>=) :: MonoMaybe s a -> MonoMaybe s a -> Bool # |
data MonoMaybeS Source #
The kind of types used to track the current state of a MonoMaybe
value.