1------------------------------------------------------------------------------
2--                                                                          --
3--                         GNAT LIBRARY COMPONENTS                          --
4--                                                                          --
5--    A D A . C O N T A I N E R S . B O U N D E D _ H A S H E D _ S E T S   --
6--                                                                          --
7--                                 S p e c                                  --
8--                                                                          --
9--          Copyright (C) 2004-2021, Free Software Foundation, Inc.         --
10--                                                                          --
11-- This specification is derived from the Ada Reference Manual for use with --
12-- GNAT. The copyright notice above, and the license provisions that follow --
13-- apply solely to the  contents of the part following the private keyword. --
14--                                                                          --
15-- GNAT is free software;  you can  redistribute it  and/or modify it under --
16-- terms of the  GNU General Public License as published  by the Free Soft- --
17-- ware  Foundation;  either version 3,  or (at your option) any later ver- --
18-- sion.  GNAT is distributed in the hope that it will be useful, but WITH- --
19-- OUT ANY WARRANTY;  without even the  implied warranty of MERCHANTABILITY --
20-- or FITNESS FOR A PARTICULAR PURPOSE.                                     --
21--                                                                          --
22-- As a special exception under Section 7 of GPL version 3, you are granted --
23-- additional permissions described in the GCC Runtime Library Exception,   --
24-- version 3.1, as published by the Free Software Foundation.               --
25--                                                                          --
26-- You should have received a copy of the GNU General Public License and    --
27-- a copy of the GCC Runtime Library Exception along with this program;     --
28-- see the files COPYING3 and COPYING.RUNTIME respectively.  If not, see    --
29-- <http://www.gnu.org/licenses/>.                                          --
30--                                                                          --
31-- This unit was originally developed by Matthew J Heaney.                  --
32------------------------------------------------------------------------------
33
34with Ada.Iterator_Interfaces;
35
36private with Ada.Containers.Hash_Tables;
37with Ada.Containers.Helpers;
38private with Ada.Streams;
39private with Ada.Finalization;
40private with Ada.Strings.Text_Buffers;
41
42generic
43   type Element_Type is private;
44
45   with function Hash (Element : Element_Type) return Hash_Type;
46
47   with function Equivalent_Elements
48          (Left, Right : Element_Type) return Boolean;
49
50   with function "=" (Left, Right : Element_Type) return Boolean is <>;
51
52package Ada.Containers.Bounded_Hashed_Sets with
53  SPARK_Mode => Off
54is
55   pragma Annotate (CodePeer, Skip_Analysis);
56   pragma Pure;
57   pragma Remote_Types;
58
59   type Set (Capacity : Count_Type; Modulus : Hash_Type) is tagged private
60     with Constant_Indexing => Constant_Reference,
61          Default_Iterator  => Iterate,
62          Iterator_Element  => Element_Type,
63          Aggregate         => (Empty       => Empty,
64                                Add_Unnamed => Include),
65          Preelaborable_Initialization
66                            => Element_Type'Preelaborable_Initialization;
67
68   type Cursor is private with Preelaborable_Initialization;
69
70   Empty_Set : constant Set;
71   --  Set objects declared without an initialization expression are
72   --  initialized to the value Empty_Set.
73
74   function Empty (Capacity : Count_Type := 10) return Set;
75
76   No_Element : constant Cursor;
77   --  Cursor objects declared without an initialization expression are
78   --  initialized to the value No_Element.
79
80   function Has_Element (Position : Cursor) return Boolean;
81   --  Equivalent to Position /= No_Element
82
83   package Set_Iterator_Interfaces is new
84     Ada.Iterator_Interfaces (Cursor, Has_Element);
85
86   function "=" (Left, Right : Set) return Boolean;
87   --  For each element in Left, set equality attempts to find the equal
88   --  element in Right; if a search fails, then set equality immediately
89   --  returns False. The search works by calling Hash to find the bucket in
90   --  the Right set that corresponds to the Left element. If the bucket is
91   --  non-empty, the search calls the generic formal element equality operator
92   --  to compare the element (in Left) to the element of each node in the
93   --  bucket (in Right); the search terminates when a matching node in the
94   --  bucket is found, or the nodes in the bucket are exhausted. (Note that
95   --  element equality is called here, not Equivalent_Elements. Set equality
96   --  is the only operation in which element equality is used. Compare set
97   --  equality to Equivalent_Sets, which does call Equivalent_Elements.)
98
99   function Equivalent_Sets (Left, Right : Set) return Boolean;
100   --  Similar to set equality, with the difference that the element in Left is
101   --  compared to the elements in Right using the generic formal
102   --  Equivalent_Elements operation instead of element equality.
103
104   function To_Set (New_Item : Element_Type) return Set;
105   --  Constructs a singleton set comprising New_Element. To_Set calls Hash to
106   --  determine the bucket for New_Item.
107
108   function Capacity (Container : Set) return Count_Type;
109   --  Returns the current capacity of the set. Capacity is the maximum length
110   --  before which rehashing in guaranteed not to occur.
111
112   procedure Reserve_Capacity (Container : in out Set; Capacity : Count_Type);
113   --  If the value of the Capacity actual parameter is less or equal to
114   --  Container.Capacity, then the operation has no effect.  Otherwise it
115   --  raises Capacity_Error (as no expansion of capacity is possible for a
116   --  bounded form).
117
118   function Default_Modulus (Capacity : Count_Type) return Hash_Type;
119   --  Returns a modulus value (hash table size) which is optimal for the
120   --  specified capacity (which corresponds to the maximum number of items).
121
122   function Length (Container : Set) return Count_Type;
123   --  Returns the number of items in the set
124
125   function Is_Empty (Container : Set) return Boolean;
126   --  Equivalent to Length (Container) = 0
127
128   procedure Clear (Container : in out Set);
129   --  Removes all of the items from the set. This will deallocate all memory
130   --  associated with this set.
131
132   function Element (Position : Cursor) return Element_Type;
133   --  Returns the element of the node designated by the cursor
134
135   procedure Replace_Element
136     (Container : in out Set;
137      Position  : Cursor;
138      New_Item  : Element_Type);
139   --  If New_Item is equivalent (as determined by calling Equivalent_Elements)
140   --  to the element of the node designated by Position, then New_Element is
141   --  assigned to that element. Otherwise, it calls Hash to determine the
142   --  bucket for New_Item. If the bucket is not empty, then it calls
143   --  Equivalent_Elements for each node in that bucket to determine whether
144   --  New_Item is equivalent to an element in that bucket. If
145   --  Equivalent_Elements returns True then Program_Error is raised (because
146   --  an element may appear only once in the set); otherwise, New_Item is
147   --  assigned to the node designated by Position, and the node is moved to
148   --  its new bucket.
149
150   procedure Query_Element
151     (Position : Cursor;
152      Process  : not null access procedure (Element : Element_Type));
153   --  Calls Process with the element (having only a constant view) of the node
154   --  designated by the cursor.
155
156   type Constant_Reference_Type
157     (Element : not null access constant Element_Type) is private
158        with Implicit_Dereference => Element;
159
160   function Constant_Reference
161     (Container : aliased Set;
162      Position  : Cursor) return Constant_Reference_Type;
163
164   procedure Assign (Target : in out Set; Source : Set);
165   --  If Target denotes the same object as Source, then the operation has no
166   --  effect. If the Target capacity is less than the Source length, then
167   --  Assign raises Capacity_Error.  Otherwise, Assign clears Target and then
168   --  copies the (active) elements from Source to Target.
169
170   function Copy
171     (Source   : Set;
172      Capacity : Count_Type := 0;
173      Modulus  : Hash_Type := 0) return Set;
174   --  Constructs a new set object whose elements correspond to Source.  If the
175   --  Capacity parameter is 0, then the capacity of the result is the same as
176   --  the length of Source. If the Capacity parameter is equal or greater than
177   --  the length of Source, then the capacity of the result is the specified
178   --  value. Otherwise, Copy raises Capacity_Error. If the Modulus parameter
179   --  is 0, then the modulus of the result is the value returned by a call to
180   --  Default_Modulus with the capacity parameter determined as above;
181   --  otherwise the modulus of the result is the specified value.
182
183   procedure Move (Target : in out Set; Source : in out Set);
184   --  Clears Target (if it's not empty), and then moves (not copies) the
185   --  buckets array and nodes from Source to Target.
186
187   procedure Insert
188     (Container : in out Set;
189      New_Item  : Element_Type;
190      Position  : out Cursor;
191      Inserted  : out Boolean);
192   --  Conditionally inserts New_Item into the set. If New_Item is already in
193   --  the set, then Inserted returns False and Position designates the node
194   --  containing the existing element (which is not modified). If New_Item is
195   --  not already in the set, then Inserted returns True and Position
196   --  designates the newly-inserted node containing New_Item. The search for
197   --  an existing element works as follows. Hash is called to determine
198   --  New_Item's bucket; if the bucket is non-empty, then Equivalent_Elements
199   --  is called to compare New_Item to the element of each node in that
200   --  bucket. If the bucket is empty, or there were no equivalent elements in
201   --  the bucket, the search "fails" and the New_Item is inserted in the set
202   --  (and Inserted returns True); otherwise, the search "succeeds" (and
203   --  Inserted returns False).
204
205   procedure Insert  (Container : in out Set; New_Item : Element_Type);
206   --  Attempts to insert New_Item into the set, performing the usual insertion
207   --  search (which involves calling both Hash and Equivalent_Elements); if
208   --  the search succeeds (New_Item is equivalent to an element already in the
209   --  set, and so was not inserted), then this operation raises
210   --  Constraint_Error. (This version of Insert is similar to Replace, but
211   --  having the opposite exception behavior. It is intended for use when you
212   --  want to assert that the item is not already in the set.)
213
214   procedure Include (Container : in out Set; New_Item : Element_Type);
215   --  Attempts to insert New_Item into the set. If an element equivalent to
216   --  New_Item is already in the set (the insertion search succeeded, and
217   --  hence New_Item was not inserted), then the value of New_Item is assigned
218   --  to the existing element. (This insertion operation only raises an
219   --  exception if cursor tampering occurs. It is intended for use when you
220   --  want to insert the item in the set, and you don't care whether an
221   --  equivalent element is already present.)
222
223   procedure Replace (Container : in out Set; New_Item : Element_Type);
224   --  Searches for New_Item in the set; if the search fails (because an
225   --  equivalent element was not in the set), then it raises
226   --  Constraint_Error. Otherwise, the existing element is assigned the value
227   --  New_Item. (This is similar to Insert, but with the opposite exception
228   --  behavior. It is intended for use when you want to assert that the item
229   --  is already in the set.)
230
231   procedure Exclude (Container : in out Set; Item : Element_Type);
232   --  Searches for Item in the set, and if found, removes its node from the
233   --  set and then deallocates it. The search works as follows. The operation
234   --  calls Hash to determine the item's bucket; if the bucket is not empty,
235   --  it calls Equivalent_Elements to compare Item to the element of each node
236   --  in the bucket. (This is the deletion analog of Include. It is intended
237   --  for use when you want to remove the item from the set, but don't care
238   --  whether the item is already in the set.)
239
240   procedure Delete  (Container : in out Set; Item : Element_Type);
241   --  Searches for Item in the set (which involves calling both Hash and
242   --  Equivalent_Elements). If the search fails, then the operation raises
243   --  Constraint_Error. Otherwise it removes the node from the set and then
244   --  deallocates it. (This is the deletion analog of non-conditional
245   --  Insert. It is intended for use when you want to assert that the item is
246   --  already in the set.)
247
248   procedure Delete (Container : in out Set; Position : in out Cursor);
249   --  Removes the node designated by Position from the set, and then
250   --  deallocates the node. The operation calls Hash to determine the bucket,
251   --  and then compares Position to each node in the bucket until there's a
252   --  match (it does not call Equivalent_Elements).
253
254   procedure Union (Target : in out Set; Source : Set);
255   --  Iterates over the Source set, and conditionally inserts each element
256   --  into Target.
257
258   function Union (Left, Right : Set) return Set;
259   --  The operation first copies the Left set to the result, and then iterates
260   --  over the Right set to conditionally insert each element into the result.
261
262   function "or" (Left, Right : Set) return Set renames Union;
263
264   procedure Intersection (Target : in out Set; Source : Set);
265   --  Iterates over the Target set (calling First and Next), calling Find to
266   --  determine whether the element is in Source. If an equivalent element is
267   --  not found in Source, the element is deleted from Target.
268
269   function Intersection (Left, Right : Set) return Set;
270   --  Iterates over the Left set, calling Find to determine whether the
271   --  element is in Right. If an equivalent element is found, it is inserted
272   --  into the result set.
273
274   function "and" (Left, Right : Set) return Set renames Intersection;
275
276   procedure Difference (Target : in out Set; Source : Set);
277   --  Iterates over the Source (calling First and Next), calling Find to
278   --  determine whether the element is in Target. If an equivalent element is
279   --  found, it is deleted from Target.
280
281   function Difference (Left, Right : Set) return Set;
282   --  Iterates over the Left set, calling Find to determine whether the
283   --  element is in the Right set. If an equivalent element is not found, the
284   --  element is inserted into the result set.
285
286   function "-" (Left, Right : Set) return Set renames Difference;
287
288   procedure Symmetric_Difference (Target : in out Set; Source : Set);
289   --  The operation iterates over the Source set, searching for the element
290   --  in Target (calling Hash and Equivalent_Elements). If an equivalent
291   --  element is found, it is removed from Target; otherwise it is inserted
292   --  into Target.
293
294   function Symmetric_Difference (Left, Right : Set) return Set;
295   --  The operation first iterates over the Left set. It calls Find to
296   --  determine whether the element is in the Right set. If no equivalent
297   --  element is found, the element from Left is inserted into the result. The
298   --  operation then iterates over the Right set, to determine whether the
299   --  element is in the Left set. If no equivalent element is found, the Right
300   --  element is inserted into the result.
301
302   function "xor" (Left, Right : Set) return Set
303     renames Symmetric_Difference;
304
305   function Overlap (Left, Right : Set) return Boolean;
306   --  Iterates over the Left set (calling First and Next), calling Find to
307   --  determine whether the element is in the Right set. If an equivalent
308   --  element is found, the operation immediately returns True. The operation
309   --  returns False if the iteration over Left terminates without finding any
310   --  equivalent element in Right.
311
312   function Is_Subset (Subset : Set; Of_Set : Set) return Boolean;
313   --  Iterates over Subset (calling First and Next), calling Find to determine
314   --  whether the element is in Of_Set. If no equivalent element is found in
315   --  Of_Set, the operation immediately returns False. The operation returns
316   --  True if the iteration over Subset terminates without finding an element
317   --  not in Of_Set (that is, every element in Subset is equivalent to an
318   --  element in Of_Set).
319
320   function First (Container : Set) return Cursor;
321   --  Returns a cursor that designates the first non-empty bucket, by
322   --  searching from the beginning of the buckets array.
323
324   function Next (Position : Cursor) return Cursor;
325   --  Returns a cursor that designates the node that follows the current one
326   --  designated by Position. If Position designates the last node in its
327   --  bucket, the operation calls Hash to compute the index of this bucket,
328   --  and searches the buckets array for the first non-empty bucket, starting
329   --  from that index; otherwise, it simply follows the link to the next node
330   --  in the same bucket.
331
332   procedure Next (Position : in out Cursor);
333   --  Equivalent to Position := Next (Position)
334
335   function Find
336     (Container : Set;
337      Item      : Element_Type) return Cursor;
338   --  Searches for Item in the set. Find calls Hash to determine the item's
339   --  bucket; if the bucket is not empty, it calls Equivalent_Elements to
340   --  compare Item to each element in the bucket. If the search succeeds, Find
341   --  returns a cursor designating the node containing the equivalent element;
342   --  otherwise, it returns No_Element.
343
344   function Contains (Container : Set; Item : Element_Type) return Boolean;
345   --  Equivalent to Find (Container, Item) /= No_Element
346
347   function Equivalent_Elements (Left, Right : Cursor) return Boolean;
348   --  Returns the result of calling Equivalent_Elements with the elements of
349   --  the nodes designated by cursors Left and Right.
350
351   function Equivalent_Elements
352     (Left  : Cursor;
353      Right : Element_Type) return Boolean;
354   --  Returns the result of calling Equivalent_Elements with element of the
355   --  node designated by Left and element Right.
356
357   function Equivalent_Elements
358     (Left  : Element_Type;
359      Right : Cursor) return Boolean;
360   --  Returns the result of calling Equivalent_Elements with element Left and
361   --  the element of the node designated by Right.
362
363   procedure Iterate
364     (Container : Set;
365      Process   : not null access procedure (Position : Cursor));
366   --  Calls Process for each node in the set
367
368   function Iterate
369     (Container : Set)
370      return Set_Iterator_Interfaces.Forward_Iterator'Class;
371
372   generic
373      type Key_Type (<>) is private;
374
375      with function Key (Element : Element_Type) return Key_Type;
376
377      with function Hash (Key : Key_Type) return Hash_Type;
378
379      with function Equivalent_Keys (Left, Right : Key_Type) return Boolean;
380
381   package Generic_Keys is
382
383      function Key (Position : Cursor) return Key_Type;
384      --  Applies generic formal operation Key to the element of the node
385      --  designated by Position.
386
387      function Element (Container : Set; Key : Key_Type) return Element_Type;
388      --  Searches (as per the key-based Find) for the node containing Key, and
389      --  returns the associated element.
390
391      procedure Replace
392        (Container : in out Set;
393         Key       : Key_Type;
394         New_Item  : Element_Type);
395      --  Searches (as per the key-based Find) for the node containing Key, and
396      --  then replaces the element of that node (as per the element-based
397      --  Replace_Element).
398
399      procedure Exclude (Container : in out Set; Key : Key_Type);
400      --  Searches for Key in the set, and if found, removes its node from the
401      --  set and then deallocates it. The search works by first calling Hash
402      --  (on Key) to determine the bucket; if the bucket is not empty, it
403      --  calls Equivalent_Keys to compare parameter Key to the value of
404      --  generic formal operation Key applied to element of each node in the
405      --  bucket.
406
407      procedure Delete (Container : in out Set; Key : Key_Type);
408      --  Deletes the node containing Key as per Exclude, with the difference
409      --  that Constraint_Error is raised if Key is not found.
410
411      function Find (Container : Set; Key : Key_Type) return Cursor;
412      --  Searches for the node containing Key, and returns a cursor
413      --  designating the node. The search works by first calling Hash (on Key)
414      --  to determine the bucket. If the bucket is not empty, the search
415      --  compares Key to the element of each node in the bucket, and returns
416      --  the matching node. The comparison itself works by applying the
417      --  generic formal Key operation to the element of the node, and then
418      --  calling generic formal operation Equivalent_Keys.
419
420      function Contains (Container : Set; Key : Key_Type) return Boolean;
421      --  Equivalent to Find (Container, Key) /= No_Element
422
423      procedure Update_Element_Preserving_Key
424        (Container : in out Set;
425         Position  : Cursor;
426         Process   : not null access
427                       procedure (Element : in out Element_Type));
428      --  Calls Process with the element of the node designated by Position,
429      --  but with the restriction that the key-value of the element is not
430      --  modified. The operation first makes a copy of the value returned by
431      --  applying generic formal operation Key on the element of the node, and
432      --  then calls Process with the element. The operation verifies that the
433      --  key-part has not been modified by calling generic formal operation
434      --  Equivalent_Keys to compare the saved key-value to the value returned
435      --  by applying generic formal operation Key to the post-Process value of
436      --  element. If the key values compare equal then the operation
437      --  completes. Otherwise, the node is removed from the map and
438      --  Program_Error is raised.
439
440      type Reference_Type (Element : not null access Element_Type) is private
441        with Implicit_Dereference => Element;
442
443      function Reference_Preserving_Key
444        (Container : aliased in out Set;
445         Position  : Cursor) return Reference_Type;
446
447      function Constant_Reference
448        (Container : aliased Set;
449         Key       : Key_Type) return Constant_Reference_Type;
450
451      function Reference_Preserving_Key
452        (Container : aliased in out Set;
453         Key       : Key_Type) return Reference_Type;
454
455   private
456      type Set_Access is access all Set;
457      for Set_Access'Storage_Size use 0;
458
459      package Impl is new Helpers.Generic_Implementation;
460
461      type Reference_Control_Type is
462         new Impl.Reference_Control_Type with
463      record
464         Container : Set_Access;
465         Index     : Hash_Type;
466         Old_Pos   : Cursor;
467         Old_Hash  : Hash_Type;
468      end record;
469
470      overriding procedure Finalize (Control : in out Reference_Control_Type);
471      pragma Inline (Finalize);
472
473      type Reference_Type (Element : not null access Element_Type) is record
474         Control  : Reference_Control_Type;
475      end record;
476
477      use Ada.Streams;
478
479      procedure Read
480        (Stream : not null access Root_Stream_Type'Class;
481         Item   : out Reference_Type);
482
483      for Reference_Type'Read use Read;
484
485      procedure Write
486        (Stream : not null access Root_Stream_Type'Class;
487         Item   : Reference_Type);
488
489      for Reference_Type'Write use Write;
490
491   end Generic_Keys;
492
493private
494   pragma Inline (Next);
495
496   type Node_Type is record
497      Element : aliased Element_Type;
498      Next    : Count_Type;
499   end record;
500
501   package HT_Types is
502     new Hash_Tables.Generic_Bounded_Hash_Table_Types (Node_Type);
503
504   type Set (Capacity : Count_Type; Modulus : Hash_Type) is
505     new HT_Types.Hash_Table_Type (Capacity, Modulus)
506      with null record with Put_Image => Put_Image;
507
508   procedure Put_Image
509     (S : in out Ada.Strings.Text_Buffers.Root_Buffer_Type'Class; V : Set);
510
511   use HT_Types, HT_Types.Implementation;
512   use Ada.Streams;
513
514   procedure Write
515     (Stream    : not null access Root_Stream_Type'Class;
516      Container : Set);
517
518   for Set'Write use Write;
519
520   procedure Read
521     (Stream    : not null access Root_Stream_Type'Class;
522      Container : out Set);
523
524   for Set'Read use Read;
525
526   type Set_Access is access all Set;
527   for Set_Access'Storage_Size use 0;
528
529   --  Note: If a Cursor object has no explicit initialization expression,
530   --  it must default initialize to the same value as constant No_Element.
531   --  The Node component of type Cursor has scalar type Count_Type, so it
532   --  requires an explicit initialization expression of its own declaration,
533   --  in order for objects of record type Cursor to properly initialize.
534
535   type Cursor is record
536      Container : Set_Access;
537      Node      : Count_Type := 0;
538   end record;
539
540   procedure Write
541     (Stream : not null access Root_Stream_Type'Class;
542      Item   : Cursor);
543
544   for Cursor'Write use Write;
545
546   procedure Read
547     (Stream : not null access Root_Stream_Type'Class;
548      Item   : out Cursor);
549
550   for Cursor'Read use Read;
551
552   subtype Reference_Control_Type is Implementation.Reference_Control_Type;
553   --  It is necessary to rename this here, so that the compiler can find it
554
555   type Constant_Reference_Type
556     (Element : not null access constant Element_Type) is
557      record
558         Control : Reference_Control_Type :=
559           raise Program_Error with "uninitialized reference";
560         --  The RM says, "The default initialization of an object of
561         --  type Constant_Reference_Type or Reference_Type propagates
562         --  Program_Error."
563      end record;
564
565   procedure Read
566     (Stream : not null access Root_Stream_Type'Class;
567      Item   : out Constant_Reference_Type);
568
569   for Constant_Reference_Type'Read use Read;
570
571   procedure Write
572     (Stream : not null access Root_Stream_Type'Class;
573      Item   : Constant_Reference_Type);
574
575   for Constant_Reference_Type'Write use Write;
576
577   --  Three operations are used to optimize in the expansion of "for ... of"
578   --  loops: the Next(Cursor) procedure in the visible part, and the following
579   --  Pseudo_Reference and Get_Element_Access functions. See Sem_Ch5 for
580   --  details.
581
582   function Pseudo_Reference
583     (Container : aliased Set'Class) return Reference_Control_Type;
584   pragma Inline (Pseudo_Reference);
585   --  Creates an object of type Reference_Control_Type pointing to the
586   --  container, and increments the Lock. Finalization of this object will
587   --  decrement the Lock.
588
589   type Element_Access is access all Element_Type with
590     Storage_Size => 0;
591
592   function Get_Element_Access
593     (Position : Cursor) return not null Element_Access;
594   --  Returns a pointer to the element designated by Position.
595
596   Empty_Set : constant Set :=
597                 (Hash_Table_Type with Capacity => 0, Modulus => 0);
598
599   No_Element : constant Cursor := (Container => null, Node => 0);
600
601   type Iterator is new Ada.Finalization.Limited_Controlled and
602     Set_Iterator_Interfaces.Forward_Iterator with
603   record
604      Container : Set_Access;
605   end record
606     with Disable_Controlled => not T_Check;
607
608   overriding procedure Finalize (Object : in out Iterator);
609
610   overriding function First (Object : Iterator) return Cursor;
611
612   overriding function Next
613     (Object   : Iterator;
614      Position : Cursor) return Cursor;
615
616end Ada.Containers.Bounded_Hashed_Sets;
617