@nudojs/core 1.10.1 → 1.11.0

package/dist/{chunk-2ZIOQGW3.js → chunk-OYQMVCUV.js}

@@ -4391,6 +4391,19 @@ function withExecPhi(p, body) {
     phi = prev;
   }
 }
+var assumePremises = pTrue;
+function currentAssumePremises() {
+  return assumePremises;
+}
+function withAssumePremises(p, body) {
+  const prev = assumePremises;
+  assumePremises = p;
+  try {
+    return body();
+  } finally {
+    assumePremises = prev;
+  }
+}
 var noBody2 = { type: "BlockStatement", body: [], directives: [] };
 var hostGlobalFnCall;
 function setHostGlobalFnCall(bridge) {
@@ -4429,6 +4442,12 @@ function $absVal(v2) {
   return asAbsVal(v2);
 }
 function callAtFunctionBoundary(body) {
+  if (assumePremises !== pTrue) {
+    return withAssumePremises(pTrue, () => boundaryBody(body));
+  }
+  return boundaryBody(body);
+}
+function boundaryBody(body) {
   let forwarded = [];
   try {
     return runWithLoopExits(() => {
@@ -8679,7 +8698,12 @@ function emitArrMutatorRebinds(expr, opts, pad) {
     if (node.type === "CallExpression" && node.callee?.type === "MemberExpression" && node.callee.computed !== true && node.callee.property?.type === "Identifier" && ARR_MUTATOR_NAMES.has(node.callee.property.name)) {
       const methodName = node.callee.property.name;
       const argSrcs = (node.arguments ?? []).map(
-        (a) => a.type === "SpreadElement" ? "$unknown()" : isExpression(a) ? emitTranspileExpression(a, opts) : "$unknown()"
+        (a) => (
+          // spread 实参展开（issue #153）：$elems → JS Abs[]，数组字面量 JS
+          // spread 平铺（与 expr.ts 普通调用同口径）；此前折 $unknown() 单参
+          // 让重绑行以 unknown 实参执行真实变更，污染容器元素域
+          a.type === "SpreadElement" ? `...$elems(${emitTranspileExpression(a.argument, opts)})` : isExpression(a) ? emitTranspileExpression(a, opts) : "$unknown()"
+        )
       ).join(", ");
       const objNode = node.callee.object;
       if (objNode.type === "Identifier") {
@@ -9809,7 +9833,12 @@ ${pad}export default ${name};`;
         const methodName = expr.callee.property.name;
         if (["push", "unshift", "splice", "pop", "shift", "reverse", "sort"].includes(methodName)) {
           const argSrcs = expr.arguments.map(
-            (a) => a.type === "SpreadElement" ? "$unknown()" : emitTranspileExpression(a, opts)
+            (a) => (
+              // spread 实参展开（issue #153）：$elems → JS Abs[]，数组字面量 JS spread
+              // 平铺（与普通调用 $callNamed/$invoke 同口径，DEC-006 K5）；
+              // 此前折 $unknown() 单参会污染容器元素域
+              a.type === "SpreadElement" ? `...$elems(${emitTranspileExpression(a.argument, opts)})` : emitTranspileExpression(a, opts)
+            )
           ).join(", ");
           const objNode = expr.callee.object;
           if (objNode.type === "Identifier") {
@@ -12160,6 +12189,7 @@ __export(runtime_exports, {
   callAtFunctionBoundary: () => callAtFunctionBoundary,
   clearStaleTermPred: () => clearStaleTermPred,
   confPartial: () => confPartial,
+  currentAssumePremises: () => currentAssumePremises,
   currentExecPhi: () => currentExecPhi,
   fillTuple: () => fillTuple,
   isArrMutator: () => isArrMutator,
@@ -12177,6 +12207,7 @@ __export(runtime_exports, {
   runWithLoopExits: () => runWithLoopExits,
   takeLoopExits: () => takeLoopExits,
   takeThrowExits: () => takeThrowExits,
+  withAssumePremises: () => withAssumePremises,
   withExecPhi: () => withExecPhi,
   withNewTargetReset: () => withNewTargetReset
 });
@@ -12218,7 +12249,7 @@ function $mul(a, b) {
   return mul(a, b, currentExecPhi());
 }
 function $div(a, b) {
-  return div(a, b, currentExecPhi());
+  return div(a, b, currentExecPhi(), currentAssumePremises());
 }
 function $mod(a, b) {
   return mod(a, b, currentExecPhi());
@@ -14772,14 +14803,32 @@ function $concat(a, b) {
     if (isMapAbs(x)) return mapEntriesAbs(x);
     const mi = matchIterElements(x);
     if (mi) return mi;
+    if (x.shape.k === "brand") return expand(x.shape.shape);
+    if (x.shape.k === "tuple") return [...x.shape.elements];
     return null;
   };
+  const sideEl = (x, expanded) => {
+    if (expanded) {
+      return expanded.length ? expanded.reduce((u, y) => joinAbs(u, y)) : abs({ k: "never" }, void 0, void 0, "exact");
+    }
+    if (x?.shape?.k === "any") return anyMemberResult();
+    if (x?.shape?.k === "tuple") {
+      const els = x.shape.elements;
+      return els.length ? els.reduce((u, y) => joinAbs(u, y)) : abs({ k: "never" }, void 0, void 0, "exact");
+    }
+    if (x?.shape?.k === "prim" && x.shape.type === "string") {
+      return abs({ k: "prim", type: "string" }, void 0, void 0, "path");
+    }
+    if (x?.shape?.k === "arr") return x.shape.element;
+    if (x?.shape?.k === "brand") return sideEl(x.shape.shape, null);
+    return unknown;
+  };
   if (as.k === "tuple") {
     const be = expand(b);
     if (be) {
       return tupleOrWiden([...as.elements, ...be], confJoin(a.conf, b.conf));
     }
-    const bEl = b?.shape?.k === "any" ? anyMemberResult() : unknown;
+    const bEl = sideEl(b, be);
     return abs(
       { k: "arr", element: [...as.elements, bEl].reduce((x, y) => joinAbs(x, y)) },
       void 0,
@@ -14791,20 +14840,6 @@ function $concat(a, b) {
   if (ae && bs.k === "tuple") {
     return tupleOrWiden([...ae, ...bs.elements], confJoin(a.conf, b.conf));
   }
-  const sideEl = (x, expanded) => {
-    if (expanded) {
-      return expanded.length ? expanded.reduce((u, y) => joinAbs(u, y)) : abs({ k: "never" }, void 0, void 0, "exact");
-    }
-    if (x?.shape?.k === "any") return anyMemberResult();
-    if (x?.shape?.k === "tuple") {
-      const els = x.shape.elements;
-      return els.length ? els.reduce((u, y) => joinAbs(u, y)) : abs({ k: "never" }, void 0, void 0, "exact");
-    }
-    if (x?.shape?.k === "prim" && x.shape.type === "string") {
-      return abs({ k: "prim", type: "string" }, void 0, void 0, "path");
-    }
-    return unknown;
-  };
   return abs(
     { k: "arr", element: joinAbs(sideEl(a, ae), sideEl(b, expand(b))) },
     void 0,
@@ -14838,6 +14873,9 @@ function iterabilityKind(a) {
     if (s.slots["@@iterator"]) return "total";
     return s.open ? "may" : "definite";
   }
+  if (s.k === "brand") {
+    return iterabilityKind(s.shape) === "total" ? "total" : "may";
+  }
   return "may";
 }
 function asyncIterabilityKind(a) {
@@ -14855,6 +14893,12 @@ function asyncIterabilityKind(a) {
   if (s.k === "obj" && !s.slots["@@iterator"] && s.slots["@@asyncIterator"]) {
     return "total";
   }
+  if (s.k === "brand") {
+    const ish = s.shape.shape;
+    if (ish.k === "obj" && !ish.slots["@@iterator"] && ish.slots["@@asyncIterator"]) {
+      return "total";
+    }
+  }
   return iterabilityKind(a);
 }
 function guardIterable(a, ctx2) {
@@ -14918,6 +14962,7 @@ function elemsOf(a) {
   if (a.shape.k === "prim" && a.shape.type === "string") {
     return [abs({ k: "prim", type: "string" }, void 0, void 0, "path")];
   }
+  if (a.shape.k === "brand") return elemsOf(a.shape.shape);
   return [unknown];
 }
 function $forInKeys(o) {
@@ -16635,6 +16680,15 @@ var intFlaggedBuilders = /* @__PURE__ */ new WeakSet();
 function isIntFlag(c) {
   return c.int === true || intFlaggedBuilders.has(c);
 }
+function finiteBoundArg(method, n) {
+  if (typeof n !== "number" || !Number.isFinite(n)) {
+    const shown = typeof n === "string" ? JSON.stringify(n) : String(n);
+    throw new Error(
+      `nudo ${method}(): finite numeric bound expected, got ${shown} \u2014 variable references are not supported; express cross-variable lemmas with @nudo:assume (issue #152)`
+    );
+  }
+  return n;
+}
 function makeBuilder(prim, preds, extra) {
   const fields = extra?.fields;
   const element = extra?.element;
@@ -16659,17 +16713,16 @@ function makeBuilder(prim, preds, extra) {
     /* @__PURE__ */ Object.create(null),
     base,
     {
-      gt: (n) => add2(gt(selfTerm(), lit(n))),
-      ge: (n) => add2(ge(selfTerm(), lit(n))),
-      lt: (n) => add2(lt(selfTerm(), lit(n))),
-      le: (n) => add2(le(selfTerm(), lit(n))),
+      gt: (n) => add2(gt(selfTerm(), lit(finiteBoundArg("gt", n)))),
+      ge: (n) => add2(ge(selfTerm(), lit(finiteBoundArg("ge", n)))),
+      lt: (n) => add2(lt(selfTerm(), lit(finiteBoundArg("lt", n)))),
+      le: (n) => add2(le(selfTerm(), lit(finiteBoundArg("le", n)))),
       int: () => makeBuilder(prim ?? "number", preds, { ...extra, int: true }),
-      min: (n) => add2(ge(lenTerm(selfTerm()), lit(n))),
-      max: (n) => add2(le(lenTerm(selfTerm()), lit(n))),
+      min: (n) => add2(ge(lenTerm(selfTerm()), lit(finiteBoundArg("min", n)))),
+      max: (n) => add2(le(lenTerm(selfTerm()), lit(finiteBoundArg("max", n)))),
       length: (n) => add2(and(ge(lenTerm(selfTerm()), lit(n)), le(lenTerm(selfTerm()), lit(n)))),
       shift: (n) => {
-        if (!Number.isFinite(n))
-          throw new Error("nudo shift(): offset must be a finite number");
+        finiteBoundArg("shift", n);
         if (fields || element || members || fnSlot || lazySlot)
           throw new Error("nudo shift(): only numeric scalar constraint chains are allowed (shape/array/union/fn are not supported)");
         if (prim !== void 0 && prim !== "number")
@@ -21459,7 +21512,7 @@ ${js}`;
     (k) => !ENV_SHADOW_SKIP.has(k)
   );
   if (envInjectNames.length > 0) {
-    const envBinds = envInjectNames.map((k) => `const ${k} = __nudoEnv[${JSON.stringify(k)}];`).join("\n");
+    const envBinds = envInjectNames.map((k) => `let ${k} = __nudoEnv[${JSON.stringify(k)}];`).join("\n");
     js = `${envBinds}
 ${js}`;
   }
@@ -21580,7 +21633,9 @@ function callTranspiledExportFullInner(exports, name, args, opts) {
     return runWithLoopExits(() => {
       try {
         const invoke = () => withNewTargetReset(() => fn2(...callArgs));
-        const r = opts?.phi ? withExecPhi(opts.phi, invoke) : invoke();
+        const ap = opts?.assumePremises;
+        const seeded = ap !== void 0 ? () => withAssumePremises(ap, invoke) : invoke;
+        const r = opts?.phi ? withExecPhi(opts.phi, seeded) : seeded();
         drainPromiseMicros();
         if (!isAbsVal(r)) return joinControlExits(asAbsVal(r));
         return joinControlExits(r);
@@ -25179,7 +25234,50 @@ function mul(a, b, phi2 = pTrue) {
   noteAbstractArithMayThrow(a, b);
   return abs({ k: "unknown" }, void 0, void 0, "partial");
 }
-function div(a, b, phi2 = pTrue) {
+function assumePremiseList(assume) {
+  if (!assume || assume.op === "true") return [];
+  const out = [];
+  const walk = (p) => {
+    if (p.op === "and") {
+      p.args.forEach(walk);
+      return;
+    }
+    if (p.op !== "true") out.push(p);
+  };
+  walk(assume);
+  return out;
+}
+function divAssumeBounds(a, b, resultTerm, phi2, assume) {
+  const premises = assumePremiseList(assume);
+  if (premises.length === 0) return void 0;
+  if (!a.term || !b.term) return void 0;
+  const bb = numericBounds(b, phi2);
+  const posDen = bb?.lo !== void 0 && (bb.lo.value > 0 || bb.lo.value === 0 && bb.lo.strict);
+  const negDen = bb?.hi !== void 0 && (bb.hi.value < 0 || bb.hi.value === 0 && bb.hi.strict);
+  if (!posDen && !negDen) return void 0;
+  let aLeB = false;
+  let bLeA = false;
+  for (const p of premises) {
+    if (p.op !== "le") continue;
+    if (termEquals(p.a, a.term) && termEquals(p.b, b.term)) aLeB = true;
+    else if (termEquals(p.a, b.term) && termEquals(p.b, a.term)) bLeA = true;
+  }
+  if (!aLeB && !bLeA) return void 0;
+  const facts = [];
+  if (aLeB) facts.push(posDen ? le(resultTerm, lit(1)) : ge(resultTerm, lit(1)));
+  if (bLeA) facts.push(posDen ? ge(resultTerm, lit(1)) : le(resultTerm, lit(1)));
+  const ab = numericBounds(a, phi2);
+  if (ab?.lo !== void 0 && (ab.lo.value > 0 || ab.lo.value === 0)) {
+    if (posDen) facts.push(ab.lo.strict ? gt(resultTerm, lit(0)) : ge(resultTerm, lit(0)));
+    else facts.push(ab.lo.strict ? lt(resultTerm, lit(0)) : le(resultTerm, lit(0)));
+  }
+  if (ab?.hi !== void 0 && (ab.hi.value < 0 || ab.hi.value === 0)) {
+    if (posDen) facts.push(ab.hi.strict ? lt(resultTerm, lit(0)) : le(resultTerm, lit(0)));
+    else facts.push(ab.hi.strict ? gt(resultTerm, lit(0)) : ge(resultTerm, lit(0)));
+  }
+  return facts.length ? and(...facts) : void 0;
+}
+function div(a, b, phi2 = pTrue, assume) {
   {
     const fa = builtinBrandToPrimitive(a, "number");
     const fb = builtinBrandToPrimitive(b, "number");
@@ -25234,7 +25332,13 @@ function div(a, b, phi2 = pTrue) {
         term.op === "lit" ? "exact" : confJoin(confJoin(a.conf, b.conf), "path")
       );
     }
-    return abs(num().shape, term, void 0, confJoin(confJoin(a.conf, b.conf), "path"));
+    const assumePred = divAssumeBounds(a, b, term, phi2, assume);
+    return abs(
+      num().shape,
+      term,
+      assumePred,
+      confJoin(confJoin(a.conf, b.conf), "path")
+    );
   }
   if (isNumericLike(a) && isNumericLike(b)) {
     return abs(num().shape, void 0, void 0, "partial");
@@ -25245,7 +25349,7 @@ function div(a, b, phi2 = pTrue) {
   if (isAnyLike(a) || isAnyLike(b)) {
     return toNumberResult(a, b, "/");
   }
-  const distributed = distributeSumBinOp("/", a, b, phi2, div);
+  const distributed = distributeSumBinOp("/", a, b, phi2, (x, y, p) => div(x, y, p, assume));
   if (distributed) return distributed;
   noteAbstractArithMayThrow(a, b);
   return abs({ k: "unknown" }, void 0, void 0, "partial");
@@ -25948,6 +26052,8 @@ export {
   clearStaleTermPred,
   currentExecPhi,
   withExecPhi,
+  currentAssumePremises,
+  withAssumePremises,
   asAbsVal,
   $absVal,
   callAtFunctionBoundary,

package/dist/{chunk-PKVKQB5S.js → chunk-UTRLGWJL.js}

@@ -47,7 +47,7 @@ import {
   withEvalBudgetOverride,
   withExecPhi,
   withFnBudgetOverride
-} from "./chunk-2ZIOQGW3.js";
+} from "./chunk-OYQMVCUV.js";
 
 // src/algebra/directive-scan.ts
 function cleanDirectiveLine(raw, kind) {
@@ -614,6 +614,14 @@ function scanContractSegments(lines) {
   }
   return reqs;
 }
+function scanAssumeSegments(lines) {
+  const out = [];
+  for (const line of lines) {
+    const m = line.match(/^@nudo:assume\s+(.+)$/);
+    if (m) out.push(m[1].trim().replace(/\*\/$/, "").trim());
+  }
+  return out;
+}
 function scanThrowsDecl(lines) {
   const kinds = /* @__PURE__ */ new Set();
   let any = false;
@@ -1490,6 +1498,24 @@ function extractRefineLines(source, fnName) {
   const lines = fnDirectiveCommentLines(source, fnName);
   return scanContractSegments(lines);
 }
+function extractAssumeSegs(source, fnName) {
+  if (!stripStringsKeepComments(source).includes("@nudo:assume")) return [];
+  const out = [];
+  for (const seg of scanAssumeSegments(fnDirectiveCommentLines(source, fnName))) {
+    const geSeg = seg.match(/^([A-Za-z_$][\w$]*)\s*>=\s*([A-Za-z_$][\w$]*)$/);
+    if (geSeg) {
+      out.push({ kind: "ok", lhs: geSeg[2], rhs: geSeg[1] });
+      continue;
+    }
+    const leSeg = seg.match(/^([A-Za-z_$][\w$]*)\s*<=\s*([A-Za-z_$][\w$]*)$/);
+    if (leSeg) {
+      out.push({ kind: "ok", lhs: leSeg[1], rhs: leSeg[2] });
+      continue;
+    }
+    out.push({ kind: "bad", raw: seg });
+  }
+  return out;
+}
 function extractRefinesFromSource(source, fnName, opts = {}) {
   if (!stripStringsKeepComments(source).includes("@nudo:contract")) return [];
   const constraints = collectConstraints(source, opts);
@@ -5525,6 +5551,7 @@ export {
   NudoSidecarError,
   execNudoModule,
   resetNudoModuleExecCache,
+  extractAssumeSegs,
   extractRefinesFromSource,
   refineToIndexedFull,
   extractRefineReturnFromSource,

package/dist/exec.d.ts

@@ -1,5 +1,5 @@
-import { A as Abs, M as MayThrowEffect, b as Phi } from './run-Bgj2tCrv.js';
-export { W as $assignRecord, X as $call, Y as $callNamed, bI as $nodoPos, Z as $recordBinding, a5 as EvalAbsAssignRecord, a6 as EvalCallRecord, a7 as EvalFallback, g as EvalFallbackStats, a8 as EvalPosRecord, ab as MAX_EVAL_CALL_DEPTH, ac as MAX_EVAL_TOTAL_CALLS, ad as RUNTIME_IMPORT_RE, V as RunTranspiledOptions, af as TranspiledCallResult, at as bindingsOf, aw as callTranspiledExport, ax as callTranspiledExportApply, ay as callTranspiledExportFull, l as clearPureCallMemo, m as clearPureMemo, n as enterEvalCallBudgetSession, aD as evalExprAbs, p as exitEvalCallBudgetSession, v as getEvalCallBudgetState, aG as getEvalCallCollector, w as getEvalFallbackStats, bJ as getPosCollector, aO as isAbsVal, aQ as isCjsMainRun, b5 as noteEvalCallRecord, b6 as noteEvalFallback, bn as resetEvalCallBudget, H as resetEvalFallbackStats, bK as routeApplyThrows, bo as runTranspiled, bp as runTranspiledOptionsMemoKey, bq as setEvalAssignCollector, br as setEvalBindingSink, bs as setEvalCallCollector, bt as setEvalFallbackCollector, bv as setPosCollector, bF as tryRunTranspiled, O as withEvalBudgetOverride } from './run-Bgj2tCrv.js';
+import { A as Abs, M as MayThrowEffect, b as Phi } from './run-CDBM1fJZ.js';
+export { W as $assignRecord, X as $call, Y as $callNamed, bI as $nodoPos, Z as $recordBinding, a5 as EvalAbsAssignRecord, a6 as EvalCallRecord, a7 as EvalFallback, g as EvalFallbackStats, a8 as EvalPosRecord, ab as MAX_EVAL_CALL_DEPTH, ac as MAX_EVAL_TOTAL_CALLS, ad as RUNTIME_IMPORT_RE, V as RunTranspiledOptions, af as TranspiledCallResult, at as bindingsOf, aw as callTranspiledExport, ax as callTranspiledExportApply, ay as callTranspiledExportFull, l as clearPureCallMemo, m as clearPureMemo, n as enterEvalCallBudgetSession, aD as evalExprAbs, p as exitEvalCallBudgetSession, v as getEvalCallBudgetState, aG as getEvalCallCollector, w as getEvalFallbackStats, bJ as getPosCollector, aO as isAbsVal, aQ as isCjsMainRun, b5 as noteEvalCallRecord, b6 as noteEvalFallback, bn as resetEvalCallBudget, H as resetEvalFallbackStats, bK as routeApplyThrows, bo as runTranspiled, bp as runTranspiledOptionsMemoKey, bq as setEvalAssignCollector, br as setEvalBindingSink, bs as setEvalCallCollector, bt as setEvalFallbackCollector, bv as setPosCollector, bF as tryRunTranspiled, O as withEvalBudgetOverride } from './run-CDBM1fJZ.js';
 import { Node, Expression, File } from '@babel/types';
 
 /**
@@ -29,6 +29,8 @@ declare function isNudoThrow(e: unknown): e is NudoThrow;
 declare function clearStaleTermPred(v: Abs): void;
 declare function currentExecPhi(): Phi;
 declare function withExecPhi<T>(p: Phi, body: () => T): T;
+declare function currentAssumePremises(): Phi;
+declare function withAssumePremises<T>(p: Phi, body: () => T): T;
 /**
  * transpile 泄漏的 JS 函数值 → 一等 fn Abs。
  * 求值引擎把函数声明/表达式编译成真实 JS 函数；它们流进对象槽、
@@ -825,4 +827,4 @@ declare class NudoUnsupportedError extends Error {
     detail?: string);
 }
 
-export { $absVal, $add, $arguments, $arr, $arrMutContainer, $arrRest, $arrWithHoles, $async, $asyncReturn, $await, $bitand, $bitnot, $bitor, $bitxor, $catchVal, $class, $classExpr, $collectionForEach, $concat, $copy, $del, $delRes, $div, $dynamicImport, $elems, $eq, $eqLoose, $fnVal, $for, $forInKeys, $forIter, $forOf, $fork, $ge, $gen, $get, $getSuper, $getSuperObj, $gt, $idx, $idxSet, $importMeta, $in, $instanceof, $instanceofNonIdent, $invoke, $invokeSuper, $invokeSuperKey, $invokeSuperObj, $isBreakTo, $isForkExit, $iterCheck, $join, $le, $len, $lit, $loopBreak, $loopContinue, $loopReturn, $lt, $mod, $mul, $narrowMemberEq, $narrowTypeOf, $ne, $neLoose, $neg, $new, $newTarget, $not, $nullishTest, $obj, $objAccessor, $objAccessorKey, $objRest, $optionalGet, $optionalInvoke, $orDefault, $pow, $pushLoopExit, $rawThis, $reStateCall, $refineRel, $regex, $removeMemberNullish, $removeNull, $removeNullish, $removeUndefined, $restBind, $rethrowIfNudoReturn, $set, $setKey, $setProto, $shl, $shr, $spread, $staticInit, $staticInvoke, $sub, $super, $switch, $thisGet, $thisSet, $throw, $toNumber, $toNumeric, $tpl, $tryCurrentMark, $tryDetachSoftCatch, $tryDigestSoftCatch, $tryDiscardSoft, $tryMark, $tryOrphanSoft, $tryPopMark, $tryReleaseSoftCatch, $tryReleaseSoftOut, $tryTakeSince, $typeof, $unknown, $updateAdd, $updateSub, $ushr, $while, $whileSeq, $yield, $yieldStar, DEFAULT_MAX_LOOP_ITERS, type EvalClassSpec, NudoLoopSignal, NudoReturn, NudoThrow, NudoUnsupportedError, type TranspileOptions, asAbsVal, callAtFunctionBoundary, clearBClasses, clearStaleTermPred, currentExecPhi, fillTuple, foldRequireSpecArg, foldStaticStringExpr, getEvalClass, isArrMutator, isDefinitelyFalse, isDefinitelyTrue, isNudoBreak, isNudoContinue, isNudoReturn, isNudoThrow, litTruth, lookupObjAccessor, namespaceNameOf, pushLoopExit, pushThrowExit, registerEvalClass, runWithLoopExits, runtimeImportOf, takeLoopExits, takeThrowExits, transpile, transpileBodyNode, transpileExpression, transpileFile, transpileSource, withExecPhi };
+export { $absVal, $add, $arguments, $arr, $arrMutContainer, $arrRest, $arrWithHoles, $async, $asyncReturn, $await, $bitand, $bitnot, $bitor, $bitxor, $catchVal, $class, $classExpr, $collectionForEach, $concat, $copy, $del, $delRes, $div, $dynamicImport, $elems, $eq, $eqLoose, $fnVal, $for, $forInKeys, $forIter, $forOf, $fork, $ge, $gen, $get, $getSuper, $getSuperObj, $gt, $idx, $idxSet, $importMeta, $in, $instanceof, $instanceofNonIdent, $invoke, $invokeSuper, $invokeSuperKey, $invokeSuperObj, $isBreakTo, $isForkExit, $iterCheck, $join, $le, $len, $lit, $loopBreak, $loopContinue, $loopReturn, $lt, $mod, $mul, $narrowMemberEq, $narrowTypeOf, $ne, $neLoose, $neg, $new, $newTarget, $not, $nullishTest, $obj, $objAccessor, $objAccessorKey, $objRest, $optionalGet, $optionalInvoke, $orDefault, $pow, $pushLoopExit, $rawThis, $reStateCall, $refineRel, $regex, $removeMemberNullish, $removeNull, $removeNullish, $removeUndefined, $restBind, $rethrowIfNudoReturn, $set, $setKey, $setProto, $shl, $shr, $spread, $staticInit, $staticInvoke, $sub, $super, $switch, $thisGet, $thisSet, $throw, $toNumber, $toNumeric, $tpl, $tryCurrentMark, $tryDetachSoftCatch, $tryDigestSoftCatch, $tryDiscardSoft, $tryMark, $tryOrphanSoft, $tryPopMark, $tryReleaseSoftCatch, $tryReleaseSoftOut, $tryTakeSince, $typeof, $unknown, $updateAdd, $updateSub, $ushr, $while, $whileSeq, $yield, $yieldStar, DEFAULT_MAX_LOOP_ITERS, type EvalClassSpec, NudoLoopSignal, NudoReturn, NudoThrow, NudoUnsupportedError, type TranspileOptions, asAbsVal, callAtFunctionBoundary, clearBClasses, clearStaleTermPred, currentAssumePremises, currentExecPhi, fillTuple, foldRequireSpecArg, foldStaticStringExpr, getEvalClass, isArrMutator, isDefinitelyFalse, isDefinitelyTrue, isNudoBreak, isNudoContinue, isNudoReturn, isNudoThrow, litTruth, lookupObjAccessor, namespaceNameOf, pushLoopExit, pushThrowExit, registerEvalClass, runWithLoopExits, runtimeImportOf, takeLoopExits, takeThrowExits, transpile, transpileBodyNode, transpileExpression, transpileFile, transpileSource, withAssumePremises, withExecPhi };

package/dist/exec.js

@@ -149,6 +149,7 @@ import {
   clearPureCallMemo,
   clearPureMemo,
   clearStaleTermPred,
+  currentAssumePremises,
   currentExecPhi,
   enterEvalCallBudgetSession,
   evalExprAbs,
@@ -198,9 +199,10 @@ import {
   transpileFile,
   transpileSource,
   tryRunTranspiled,
+  withAssumePremises,
   withEvalBudgetOverride,
   withExecPhi
-} from "./chunk-2ZIOQGW3.js";
+} from "./chunk-OYQMVCUV.js";
 export {
   $absVal,
   $add,
@@ -351,6 +353,7 @@ export {
   clearPureCallMemo,
   clearPureMemo,
   clearStaleTermPred,
+  currentAssumePremises,
   currentExecPhi,
   enterEvalCallBudgetSession,
   evalExprAbs,
@@ -400,6 +403,7 @@ export {
   transpileFile,
   transpileSource,
   tryRunTranspiled,
+  withAssumePremises,
   withEvalBudgetOverride,
   withExecPhi
 };

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { d as AstEnv, A as Abs, b as Phi, T as Term, Q as HofCollectCtx, C as Confidence, S as Shape, a as Pred, R as RelSource, U as HofSite, c as AbsModuleExports, V as RunTranspiledOptions } from './run-Bgj2tCrv.js';
-export { W as $assignRecord, X as $call, Y as $callNamed, Z as $recordBinding, _ as AbsApplyNoThrow, a0 as AbsApplyNoThrowFn, a1 as AbsApplyResult, a2 as AbsApplyReturn, a3 as AbsFnImpl, a4 as AbsSigImpl, a5 as EvalAbsAssignRecord, a6 as EvalCallRecord, a7 as EvalFallback, a8 as EvalPosRecord, a9 as ImplicationOracle, aa as LitValueResult, L as LiteralValue, ab as MAX_EVAL_CALL_DEPTH, ac as MAX_EVAL_TOTAL_CALLS, P as PrimName, ad as RUNTIME_IMPORT_RE, ae as TYPEOF_NAMES, af as TranspiledCallResult, ag as TypeofName, ah as abs, ai as absFunction, aj as absOnly, ak as absToString, al as and, am as anyAbs, an as anyVar, ao as app, ap as assumeFinite, aq as attachFnImpl, ar as bigintLit, as as bindImports, at as bindingsOf, au as bool, av as boolLit, aw as callTranspiledExport, ax as callTranspiledExportApply, ay as callTranspiledExportFull, az as collectAbsExports, aA as confJoin, aB as emptyPhi, aC as eq, aD as evalExprAbs, aE as ge, aF as geNum, aG as getEvalCallCollector, aH as getFnImpl, aI as getImplicationOracle, aJ as gt, aK as gtNum, aL as hostFnCtorFacet, aM as implies, aN as isAbsApplyResult, aO as isAbsVal, aP as isBigPrim, aQ as isCjsMainRun, aR as isExactLit, aS as isNumPrim, aT as isStrPrim, aU as le, aV as leNum, aW as lit, aX as litValue, aY as lt, aZ as ltNum, a_ as makeAbsApplyResult, a$ as markPureFn, b0 as namespaceAbsOf, b1 as ne, b2 as negatePred, b3 as never, b4 as not, b5 as noteEvalCallRecord, b6 as noteEvalFallback, b7 as num, b8 as numLit, b9 as numVar, ba as obj, bb as or, bc as pFalse, bd as pTrue, be as phiAnd, bf as predEquals, bg as predToString, bh as predVars, bi as primToTypeof, bj as ptypeof, bk as pureFnNameOf, bl as relationFingerprint, bm as relationFn, bn as resetEvalCallBudget, bo as runTranspiled, bp as runTranspiledOptionsMemoKey, bq as setEvalAssignCollector, br as setEvalBindingSink, bs as setEvalCallCollector, bt as setEvalFallbackCollector, bu as setImplicationOracle, bv as setPosCollector, bw as shapeOfTerm, bx as shapeOnlyFn, by as shapeToString, bz as simplifyTerm, bA as str, bB as strLit, bC as substPred, bD as termEquals, bE as termToString, bF as tryRunTranspiled, bG as unknown, bH as v } from './run-Bgj2tCrv.js';
+import { d as AstEnv, A as Abs, b as Phi, T as Term, Q as HofCollectCtx, C as Confidence, S as Shape, a as Pred, R as RelSource, U as HofSite, c as AbsModuleExports, V as RunTranspiledOptions } from './run-CDBM1fJZ.js';
+export { W as $assignRecord, X as $call, Y as $callNamed, Z as $recordBinding, _ as AbsApplyNoThrow, a0 as AbsApplyNoThrowFn, a1 as AbsApplyResult, a2 as AbsApplyReturn, a3 as AbsFnImpl, a4 as AbsSigImpl, a5 as EvalAbsAssignRecord, a6 as EvalCallRecord, a7 as EvalFallback, a8 as EvalPosRecord, a9 as ImplicationOracle, aa as LitValueResult, L as LiteralValue, ab as MAX_EVAL_CALL_DEPTH, ac as MAX_EVAL_TOTAL_CALLS, P as PrimName, ad as RUNTIME_IMPORT_RE, ae as TYPEOF_NAMES, af as TranspiledCallResult, ag as TypeofName, ah as abs, ai as absFunction, aj as absOnly, ak as absToString, al as and, am as anyAbs, an as anyVar, ao as app, ap as assumeFinite, aq as attachFnImpl, ar as bigintLit, as as bindImports, at as bindingsOf, au as bool, av as boolLit, aw as callTranspiledExport, ax as callTranspiledExportApply, ay as callTranspiledExportFull, az as collectAbsExports, aA as confJoin, aB as emptyPhi, aC as eq, aD as evalExprAbs, aE as ge, aF as geNum, aG as getEvalCallCollector, aH as getFnImpl, aI as getImplicationOracle, aJ as gt, aK as gtNum, aL as hostFnCtorFacet, aM as implies, aN as isAbsApplyResult, aO as isAbsVal, aP as isBigPrim, aQ as isCjsMainRun, aR as isExactLit, aS as isNumPrim, aT as isStrPrim, aU as le, aV as leNum, aW as lit, aX as litValue, aY as lt, aZ as ltNum, a_ as makeAbsApplyResult, a$ as markPureFn, b0 as namespaceAbsOf, b1 as ne, b2 as negatePred, b3 as never, b4 as not, b5 as noteEvalCallRecord, b6 as noteEvalFallback, b7 as num, b8 as numLit, b9 as numVar, ba as obj, bb as or, bc as pFalse, bd as pTrue, be as phiAnd, bf as predEquals, bg as predToString, bh as predVars, bi as primToTypeof, bj as ptypeof, bk as pureFnNameOf, bl as relationFingerprint, bm as relationFn, bn as resetEvalCallBudget, bo as runTranspiled, bp as runTranspiledOptionsMemoKey, bq as setEvalAssignCollector, br as setEvalBindingSink, bs as setEvalCallCollector, bt as setEvalFallbackCollector, bu as setImplicationOracle, bv as setPosCollector, bw as shapeOfTerm, bx as shapeOnlyFn, by as shapeToString, bz as simplifyTerm, bA as str, bB as strLit, bC as substPred, bD as termEquals, bE as termToString, bF as tryRunTranspiled, bG as unknown, bH as v } from './run-CDBM1fJZ.js';
 import { Node, File } from '@babel/types';
-import { p as parseSource, L as LeakBudget, E as EffectiveInterfaceOpts, b as LoadDepsFingerprint, v as CheckReport, N as NudoConstraint, c as ProjectionBudget } from './projection-budget-Dey0IUJa.js';
-export { w as CONSTRAINT_BUILDERS, x as CONSTRAINT_BUILDER_NAMES, y as CONSTRAINT_EXPR_RE, z as CheckAction, C as CheckIssue, A as CheckJson, B as CheckJsonMulti, D as ConstraintBuilder, F as Diagnostic, G as EffectiveInterface, H as GitlabCodeQualityIssue, J as INTERFACE_SOURCE_ABBR, K as InterfaceDiag, I as InterfaceSource, O as InterfaceTierInfo, a as InterfaceTierOpts, Q as NamedImport, R as NudoField, S as NudoFnConstraint, T as NudoSidecarError, U as NudoSig, V as RefineDiag, W as RefineEntry, X as RefineResolveOpts, Y as SELF, Z as actionsForIssue, _ as andC, $ as any, a0 as array, a1 as boolean, a2 as checkArg, a3 as checkCall, a4 as constraintAdmitsNullish, a5 as constraintToEntryAbs, a6 as derefConstraint, a7 as drainPromiseMicros, a8 as effectiveInterface, a9 as enterPromiseExecutorScope, aa as evalPromiseCtor, ab as evalPromiseMethod, ac as evalPromiseStatic, ad as execNudoModule, ae as extractDeclaredThrows, af as extractFnBudget, ag as extractNudoImports, ah as extractRefineReturnFromSource, ai as extractRefinesFromSource, aj as fn, ak as fnConstraintToEntryReqs, al as formatCheckReport, am as formatConstraint, an as formatDiagnostics, ao as formatEffectiveInterfaceDisplay, ap as formatGithubAnnotations, aq as formatGitlabCodeQuality, ar as formatInterfaceTierLine, as as generatedExportNames, at as getParseSourceCacheSize, au as getTerm, av as instantiateConstraint, aw as interfaceDiagCount, ax as interfaceSourceOf, ay as interfaceTierOf, az as isIntFlag, aA as isNodeModulesPath, aB as isNudoConstraint, aC as lazy, aD as leavePromiseExecutorScope, aE as lenTerm, aF as litC, aG as localNamedExports, aH as notePromiseExecutorFork, aI as nullable, aJ as number, aK as omit, aL as partial, aM as pick, aN as queuePromiseMicro, aO as refineDiagCount, aP as refineToIndexedFull, aQ as resetNudoModuleExecCache, aR as resetParseSourceCache, aS as resetSidecarLoadFailureCache, aT as serializeCheckJson, aU as serializeCheckJsonMulti, aV as setInterfaceDiagCollector, aW as setRefineDiagCollector, aX as shape, aY as sidecarClosureFingerprint, aZ as sidecarPathOf, a_ as string, a$ as takeInterfaceDiags, b0 as takeInterfaceDiagsSince, b1 as takeRefineDiags, b2 as takeRefineDiagsSince, b3 as throwConstraintToKinds, b4 as union } from './projection-budget-Dey0IUJa.js';
+import { p as parseSource, L as LeakBudget, E as EffectiveInterfaceOpts, b as LoadDepsFingerprint, v as CheckReport, N as NudoConstraint, c as ProjectionBudget } from './projection-budget-BB2U2rwC.js';
+export { w as CONSTRAINT_BUILDERS, x as CONSTRAINT_BUILDER_NAMES, y as CONSTRAINT_EXPR_RE, z as CheckAction, C as CheckIssue, A as CheckJson, B as CheckJsonMulti, D as ConstraintBuilder, F as Diagnostic, G as EffectiveInterface, H as GitlabCodeQualityIssue, J as INTERFACE_SOURCE_ABBR, K as InterfaceDiag, I as InterfaceSource, O as InterfaceTierInfo, a as InterfaceTierOpts, Q as NamedImport, R as NudoField, S as NudoFnConstraint, T as NudoSidecarError, U as NudoSig, V as RefineDiag, W as RefineEntry, X as RefineResolveOpts, Y as SELF, Z as actionsForIssue, _ as andC, $ as any, a0 as array, a1 as boolean, a2 as checkArg, a3 as checkCall, a4 as constraintAdmitsNullish, a5 as constraintToEntryAbs, a6 as derefConstraint, a7 as drainPromiseMicros, a8 as effectiveInterface, a9 as enterPromiseExecutorScope, aa as evalPromiseCtor, ab as evalPromiseMethod, ac as evalPromiseStatic, ad as execNudoModule, ae as extractDeclaredThrows, af as extractFnBudget, ag as extractNudoImports, ah as extractRefineReturnFromSource, ai as extractRefinesFromSource, aj as fn, ak as fnConstraintToEntryReqs, al as formatCheckReport, am as formatConstraint, an as formatDiagnostics, ao as formatEffectiveInterfaceDisplay, ap as formatGithubAnnotations, aq as formatGitlabCodeQuality, ar as formatInterfaceTierLine, as as generatedExportNames, at as getParseSourceCacheSize, au as getTerm, av as instantiateConstraint, aw as interfaceDiagCount, ax as interfaceSourceOf, ay as interfaceTierOf, az as isIntFlag, aA as isNodeModulesPath, aB as isNudoConstraint, aC as lazy, aD as leavePromiseExecutorScope, aE as lenTerm, aF as litC, aG as localNamedExports, aH as notePromiseExecutorFork, aI as nullable, aJ as number, aK as omit, aL as partial, aM as pick, aN as queuePromiseMicro, aO as refineDiagCount, aP as refineToIndexedFull, aQ as resetNudoModuleExecCache, aR as resetParseSourceCache, aS as resetSidecarLoadFailureCache, aT as serializeCheckJson, aU as serializeCheckJsonMulti, aV as setInterfaceDiagCollector, aW as setRefineDiagCollector, aX as shape, aY as sidecarClosureFingerprint, aZ as sidecarPathOf, a_ as string, a$ as takeInterfaceDiags, b0 as takeInterfaceDiagsSince, b1 as takeRefineDiags, b2 as takeRefineDiagsSince, b3 as throwConstraintToKinds, b4 as union } from './projection-budget-BB2U2rwC.js';
 export { $add, $arguments, $arr, $arrMutContainer, $arrRest, $arrWithHoles, $async, $asyncReturn, $await, $bitand, $bitnot, $bitor, $bitxor, $catchVal, $class, $classExpr, $collectionForEach, $concat, $copy, $del, $delRes, $div, $dynamicImport, $elems, $eq, $eqLoose, $fnVal, $for, $forInKeys, $forIter, $forOf, $fork, $ge, $gen, $get, $gt, $idx, $idxSet, $importMeta, $in, $instanceof, $instanceofNonIdent, $invoke, $invokeSuper, $isBreakTo, $isForkExit, $join, $le, $len, $lit, $loopBreak, $loopContinue, $loopReturn, $lt, $mod, $mul, $ne, $neLoose, $neg, $new, $not, $nullishTest, $obj, $objAccessor, $objRest, $optionalGet, $optionalInvoke, $orDefault, $pow, $pushLoopExit, $rawThis, $reStateCall, $regex, $rethrowIfNudoReturn, $set, $setKey, $shl, $shr, $spread, $staticInvoke, $sub, $super, $switch, $thisGet, $thisSet, $throw, $toNumber, $toNumeric, $tryCurrentMark, $tryDetachSoftCatch, $tryDigestSoftCatch, $tryDiscardSoft, $tryMark, $tryOrphanSoft, $tryPopMark, $tryReleaseSoftCatch, $tryReleaseSoftOut, $tryTakeSince, $typeof, $unknown, $updateAdd, $updateSub, $ushr, $while, $whileSeq, $yield, DEFAULT_MAX_LOOP_ITERS, EvalClassSpec, NudoLoopSignal, NudoReturn, NudoThrow, NudoUnsupportedError, TranspileOptions, asAbsVal, callAtFunctionBoundary, clearBClasses, clearStaleTermPred, currentExecPhi, fillTuple, foldRequireSpecArg, foldStaticStringExpr, getEvalClass, isArrMutator, isDefinitelyFalse, isDefinitelyTrue, isNudoBreak, isNudoContinue, isNudoReturn, isNudoThrow, litTruth, lookupObjAccessor, namespaceNameOf, pushLoopExit, pushThrowExit, registerEvalClass, runWithLoopExits, runtimeImportOf, takeLoopExits, takeThrowExits, transpile, transpileBodyNode, transpileExpression, transpileFile, transpileSource, withExecPhi } from './exec.js';
 
 /**
@@ -262,7 +262,7 @@ declare function mul(a: Abs, b: Abs, phi?: Phi): Abs;
  * 除法：字面量折叠；除以正/负常数时按单调性推界。
  * 除以 0：JS 语义为 ±Infinity / NaN，shape 仍 number（不报违例）。
  */
-declare function div(a: Abs, b: Abs, phi?: Phi): Abs;
+declare function div(a: Abs, b: Abs, phi?: Phi, assume?: Phi): Abs;
 /**
  * 取模：字面量折叠；`x % k`（k 为有限非零字面量）仅当被除数有限时
  * 结果界在 (−|k|, |k|)。整数模可收紧到 [0, k)，此处先做保守实数界。

package/dist/index.js

@@ -8,6 +8,7 @@ import {
   effectiveInterface,
   evictGeneralizeMemoForPaths,
   execNudoModule,
+  extractAssumeSegs,
   extractBalancedParens,
   extractDeclaredThrows,
   extractFileEnvNames,
@@ -64,7 +65,7 @@ import {
   takeInterfaceDiagsSince,
   takeRefineDiags,
   takeRefineDiagsSince
-} from "./chunk-PKVKQB5S.js";
+} from "./chunk-UTRLGWJL.js";
 import {
   $add,
   $arguments,
@@ -520,9 +521,10 @@ import {
   unknown,
   ushrAbs,
   v,
+  withAssumePremises,
   withExecPhi,
   withVar
-} from "./chunk-2ZIOQGW3.js";
+} from "./chunk-OYQMVCUV.js";
 
 // src/environment.ts
 function createEnvironment(parent, bindings = /* @__PURE__ */ new Map()) {
@@ -793,7 +795,7 @@ function flattenSumArms(ret) {
   return out;
 }
 function isWidenedSumArm(m, parent) {
-  return parent.conf === "partial" && m.shape.k === "prim" && !m.term && (!m.pred || m.pred.op === "true");
+  return (parent.conf === "partial" || m.conf === "widened") && m.shape.k === "prim" && !m.term && (!m.pred || m.pred.op === "true");
 }
 function provesBarePrimDomain(arm, constraint) {
   if (constraint.members) {
@@ -820,7 +822,7 @@ function assertImplies(ret, constraint, opts) {
   const phi = opts?.phi ?? pTrue;
   if (ret.shape.k === "never") return proved();
   if (isAnyConstraint(constraint)) return proved();
-  if (isValueSetUnknown(ret)) {
+  if (isValueSetUnknown(ret) && ret.conf !== "widened") {
     return unprovable(
       ret.shape.k === "any" ? "any does not establish the return contract" : "inference failure (unknown/opaque) \u2014 cannot prove the return contract"
     );
@@ -876,6 +878,9 @@ function assertImpliesSingle(arm, constraint, opts, phi) {
     return constraintAdmitsNullish(constraint) ? proved() : disproved(`nullish return \u22AD ${formatConstraint(constraint)}`);
   }
   if (isValueSetUnknown(arm)) {
+    if (arm.conf === "widened" && arm.shape.k === "prim" && !arm.term && (!arm.pred || arm.pred.op === "true") && provesBarePrimDomain(arm, constraint)) {
+      return proved();
+    }
     return unprovable(
       arm.shape.k === "any" ? "any does not establish the return contract" : "inference failure (unknown/opaque) \u2014 cannot prove the return contract"
     );
@@ -1372,6 +1377,7 @@ function numericBound(p, self) {
   if (p.op !== "gt" && p.op !== "ge" && p.op !== "lt" && p.op !== "le") return void 0;
   if (!self) return void 0;
   if (termEquals(p.a, self) && p.b.op === "lit" && typeof p.b.value === "number") {
+    if (!Number.isFinite(p.b.value)) return void 0;
     return { op: p.op, n: p.b.value };
   }
   return void 0;
@@ -2340,6 +2346,49 @@ function sidecarDiagIssues(diags) {
   }
   return out;
 }
+function assumePremisesPhiOf(name, source, file, issues) {
+  const segs = extractAssumeSegs(source, name);
+  if (segs.length === 0) return void 0;
+  const meta = extractFn(source, name, file);
+  const bindable = /* @__PURE__ */ new Set([
+    ...contractParamNameSet(meta?.formals ?? []),
+    ...meta?.params ?? []
+  ]);
+  const surface = [...bindable].join(", ");
+  const preds = [];
+  const display = [];
+  for (const seg of segs) {
+    if (seg.kind === "bad") {
+      issues.push({
+        severity: "error",
+        code: "nudo:assume-invalid",
+        message: `${name}: malformed @nudo:assume '${seg.raw}' (expected <param> <= <param> or <param> >= <param>; constant bounds belong to sidecar contracts)`,
+        actual: seg.raw,
+        expected: "<param> <= <param>",
+        suggestion: "cross-variable lemmas: @nudo:assume d <= max \u2014 constant bounds: sidecar number().le(10)",
+        fn: name
+      });
+      continue;
+    }
+    const bad = [seg.lhs, seg.rhs].filter((n) => !bindable.has(n));
+    if (bad.length > 0) {
+      issues.push({
+        severity: "error",
+        code: "nudo:assume-invalid",
+        message: `${name}: @nudo:assume parameter name(s) not in the formal parameter list (${bad.join(", ")})`,
+        actual: bad.join(", "),
+        expected: surface || "(no params)",
+        suggestion: `reference one of: ${surface || "(function has no params)"}`,
+        fn: name
+      });
+      continue;
+    }
+    preds.push(le(v(seg.lhs), v(seg.rhs)));
+    display.push(`${seg.lhs} <= ${seg.rhs}`);
+  }
+  if (preds.length === 0) return void 0;
+  return { phi: and(...preds), display };
+}
 function checkSourceInner(filePath, source, file, phi, opts, issues, signatures, names, truncated, identityOpts = opts, depsFp, sidecarFp) {
   const hasRefineDirective = stripStringsKeepComments(source).includes("@nudo:contract");
   const entryNames = localNamedExports(source);
@@ -2367,6 +2416,8 @@ function checkSourceInner(filePath, source, file, phi, opts, issues, signatures,
     return eff;
   };
   for (const name of names) {
+    const assumePhi = assumePremisesPhiOf(name, source, file, issues);
+    const runSeeded = (body) => assumePhi === void 0 ? body() : withAssumePremises(assumePhi.phi, body);
     if (opts.skips?.has(name)) {
       const declared = opts.skips.get(name) ?? null;
       const meta = extractFn(source, name, file);
@@ -2411,19 +2462,21 @@ function checkSourceInner(filePath, source, file, phi, opts, issues, signatures,
       }
       continue;
     }
-    const g = generalizeFromAst(name, source, {
-      file,
-      refine: {
-        loadModule: refineLoad,
-        fromFile: refineFrom,
-        ...autoBind !== void 0 ? { autoBind } : {},
-        ...projectDir !== void 0 ? { projectDir } : {}
-      },
-      depsFp,
-      sidecarFp,
-      modules: opts.modules,
-      ...opts.inject ? { inject: opts.inject } : {}
-    });
+    const g = runSeeded(
+      () => generalizeFromAst(name, source, {
+        file,
+        refine: {
+          loadModule: refineLoad,
+          fromFile: refineFrom,
+          ...autoBind !== void 0 ? { autoBind } : {},
+          ...projectDir !== void 0 ? { projectDir } : {}
+        },
+        depsFp,
+        sidecarFp,
+        modules: opts.modules,
+        ...opts.inject ? { inject: opts.inject } : {}
+      })
+    );
     if (!g) {
       const isEntryCandidate = entryNames.has(name) || name === "default" || entryNames.has("default") && isDefaultExportName(source, name);
       if (isEntryCandidate && entryThrowsMode !== "off") {
@@ -2483,7 +2536,7 @@ function checkSourceInner(filePath, source, file, phi, opts, issues, signatures,
     const isEntry = entryNames.has(name) || name === "default" || entryNames.has("default") && isDefaultExportName(source, name) || name.includes(".") && entryNames.has(name);
     let throwsDisplay;
     if (isEntry && entryThrowsMode !== "off") {
-      const effects = collectEntryMayThrows(source, name, g, file, phi, opts);
+      const effects = runSeeded(() => collectEntryMayThrows(source, name, g, file, phi, opts));
       throwsDisplay = formatThrowsAbs(mayThrowEffectsToAbs(effects));
       const declared = extractDeclaredThrows(source, name) ?? effectiveInterfaceCached(name)?.throws?.kinds;
       const remaining = filterGateThrows(effects, declared, ignoreThrows);
@@ -2504,7 +2557,7 @@ function checkSourceInner(filePath, source, file, phi, opts, issues, signatures,
         });
       }
     } else if (isEntry) {
-      const effects = collectEntryMayThrows(source, name, g, file, phi, opts);
+      const effects = runSeeded(() => collectEntryMayThrows(source, name, g, file, phi, opts));
       throwsDisplay = formatThrowsAbs(mayThrowEffectsToAbs(effects));
     }
     const fmt = formatSigCached(g.symbolic, name);
@@ -2598,7 +2651,8 @@ function checkSourceInner(filePath, source, file, phi, opts, issues, signatures,
           name,
           display,
           eff.returns.constraint,
-          g.symbolic
+          g.symbolic,
+          assumePhi?.display
         );
         if (retIssues.some((i) => i.severity === "error")) returnViolated.add(name);
         issues.push(...retIssues);
@@ -2794,9 +2848,24 @@ function checkSourceInner(filePath, source, file, phi, opts, issues, signatures,
     }
   };
 }
-function checkReturnConstraint(fnName, cName, constraint, ret) {
+function checkReturnConstraint(fnName, cName, constraint, ret, assumeDisplay) {
   const proof = assertImplies(ret, constraint);
-  if (proof.status === "proved") return [];
+  if (proof.status === "proved") {
+    if (assumeDisplay && assumeDisplay.length > 0) {
+      return [
+        {
+          severity: "info",
+          code: "nudo:assume-relied",
+          message: `${fnName}: return contract proved via @nudo:assume ${assumeDisplay.join("; ")}`,
+          actual: `proof relies on user lemma${assumeDisplay.length > 1 ? "s" : ""}`,
+          expected: "engine verifies the obligation, not the lemma itself",
+          suggestion: "@nudo:assume is a user-supplied axiom \u2014 falsify it with concrete @nudo:case runs (nudo test)",
+          fn: fnName
+        }
+      ];
+    }
+    return [];
+  }
   const push = (severity, actual, expected, suggestion) => [
     {
       severity,

package/dist/internal.d.ts

@@ -1,7 +1,7 @@
-import { I as InterfaceSource, a as InterfaceTierOpts, p as parseSource, C as CheckIssue } from './projection-budget-Dey0IUJa.js';
-export { L as LeakBudget, b as LoadDepsFingerprint, M as MAX_PROMISE_MICROS, P as PROJECTION_MAX_DEPTH, c as ProjectionBudget, d as ProjectionStopReason, e as defaultLeakBudget, f as exceedsBudget, g as exportedNameOfLocal, h as extractAllLoadSpecs, i as getPromiseMicrosLength, l as leakIfNeeded, j as loadModuleDepsFingerprint, m as maybeLeak, n as normPath, r as resetLeakCounter, k as resolveDepPath, s as sidecarSpecsOf, o as stablePathKey, q as stablePathKeyGraph, t as termDepth, u as termNodes } from './projection-budget-Dey0IUJa.js';
-import { A as Abs, T as Term, c as AbsModuleExports, d as AstEnv } from './run-Bgj2tCrv.js';
-export { $ as $tryDigestSoft, e as $tryMarkSoft, f as $tryReleaseSoft, E as ERROR_FAMILY, g as EvalFallbackStats, M as MayThrowEffect, h as absLit, i as absNumLit, j as absStrLit, k as allAbsStr, l as clearPureCallMemo, m as clearPureMemo, n as enterEvalCallBudgetSession, o as errorTypeAbs, p as exitEvalCallBudgetSession, q as filterDeclaredThrows, r as filterGateThrows, s as filterIgnoredThrows, t as flushMayThrowEffects, u as formatThrowsAbs, v as getEvalCallBudgetState, w as getEvalFallbackStats, x as getMayThrowCollector, y as isThrowsIgnored, z as mayThrowEffectsToAbs, B as orphanMayThrowEffects, D as popMayThrowFrame, F as pushMayThrowFrame, G as recordMayThrow, H as resetEvalFallbackStats, I as runWithMayThrowSession, J as setMayThrowCollector, K as throwAbsToKinds, N as throwsKindCovered, O as withEvalBudgetOverride } from './run-Bgj2tCrv.js';
+import { I as InterfaceSource, a as InterfaceTierOpts, p as parseSource, C as CheckIssue } from './projection-budget-BB2U2rwC.js';
+export { L as LeakBudget, b as LoadDepsFingerprint, M as MAX_PROMISE_MICROS, P as PROJECTION_MAX_DEPTH, c as ProjectionBudget, d as ProjectionStopReason, e as defaultLeakBudget, f as exceedsBudget, g as exportedNameOfLocal, h as extractAllLoadSpecs, i as getPromiseMicrosLength, l as leakIfNeeded, j as loadModuleDepsFingerprint, m as maybeLeak, n as normPath, r as resetLeakCounter, k as resolveDepPath, s as sidecarSpecsOf, o as stablePathKey, q as stablePathKeyGraph, t as termDepth, u as termNodes } from './projection-budget-BB2U2rwC.js';
+import { A as Abs, T as Term, c as AbsModuleExports, d as AstEnv } from './run-CDBM1fJZ.js';
+export { $ as $tryDigestSoft, e as $tryMarkSoft, f as $tryReleaseSoft, E as ERROR_FAMILY, g as EvalFallbackStats, M as MayThrowEffect, h as absLit, i as absNumLit, j as absStrLit, k as allAbsStr, l as clearPureCallMemo, m as clearPureMemo, n as enterEvalCallBudgetSession, o as errorTypeAbs, p as exitEvalCallBudgetSession, q as filterDeclaredThrows, r as filterGateThrows, s as filterIgnoredThrows, t as flushMayThrowEffects, u as formatThrowsAbs, v as getEvalCallBudgetState, w as getEvalFallbackStats, x as getMayThrowCollector, y as isThrowsIgnored, z as mayThrowEffectsToAbs, B as orphanMayThrowEffects, D as popMayThrowFrame, F as pushMayThrowFrame, G as recordMayThrow, H as resetEvalFallbackStats, I as runWithMayThrowSession, J as setMayThrowCollector, K as throwAbsToKinds, N as throwsKindCovered, O as withEvalBudgetOverride } from './run-CDBM1fJZ.js';
 import { File, Node } from '@babel/types';
 
 /**

package/dist/internal.js

@@ -21,7 +21,7 @@ import {
   stableAnalyzeKeySource,
   stablePathKey,
   stablePathKeyGraph
-} from "./chunk-PKVKQB5S.js";
+} from "./chunk-UTRLGWJL.js";
 import {
   $tryDigestSoft,
   $tryMarkSoft,
@@ -169,7 +169,7 @@ import {
   withEvalBudgetOverride,
   withFnBudgetOverride,
   wrapPromise
-} from "./chunk-2ZIOQGW3.js";
+} from "./chunk-OYQMVCUV.js";
 
 // src/algebra/inlay.ts
 function listFunctions(source) {

package/dist/{projection-budget-Dey0IUJa.d.ts → projection-budget-BB2U2rwC.d.ts}

@@ -1,5 +1,5 @@
 import { File } from '@babel/types';
-import { A as Abs, T as Term, P as PrimName, a as Pred, L as LiteralValue, b as Phi, C as Confidence } from './run-Bgj2tCrv.js';
+import { A as Abs, T as Term, P as PrimName, a as Pred, L as LiteralValue, b as Phi, C as Confidence } from './run-CDBM1fJZ.js';
 
 declare function resetParseSourceCache(): void;
 declare function getParseSourceCacheSize(): number;

package/dist/{run-Bgj2tCrv.d.ts → run-CDBM1fJZ.d.ts}

@@ -840,9 +840,12 @@ type TranspiledCallResult = {
 declare function isAbsVal(v: unknown): v is Abs;
 /** 调用 runTranspiled 导出（捕获 $throw）。opts.phi：入口 Φ 种子
  *  （instantiate/symbolic 的约束入口——eval 侧路径条件收窄）。
+ *  opts.assumePremises（#152 用户引理）：入口前提独立槽种子——与 phi 分槽
+ *  （不随调用链继承），消费方经 currentAssumePremises() 读。
  *  嵌套进入（导出桥 apply）继承外层预算；仅最外层宿主入口重置。 */
 declare function callTranspiledExportFull(exports: Record<string, unknown>, name: string, args: Abs[], opts?: {
     phi?: Phi;
+    assumePremises?: Phi;
 }): TranspiledCallResult;
 /** 调用 runTranspiled 导出（仅结果） */
 declare function callTranspiledExport(exports: Record<string, unknown>, name: string, args: Abs[]): Abs;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nudojs/core",
-  "version": "1.10.1",
+  "version": "1.11.0",
   "engines": {
     "node": ">=20"
   },