@nudojs/core 1.10.2 → 1.11.1

package/dist/{chunk-GHFGZ6PZ.js → chunk-5VGO4YJT.js}

@@ -47,7 +47,7 @@ import {
   withEvalBudgetOverride,
   withExecPhi,
   withFnBudgetOverride
-} from "./chunk-VKSROGOF.js";
+} from "./chunk-YRRR6AWI.js";
 
 // src/algebra/directive-scan.ts
 function cleanDirectiveLine(raw, kind) {
@@ -614,6 +614,14 @@ function scanContractSegments(lines) {
   }
   return reqs;
 }
+function scanAssumeSegments(lines) {
+  const out = [];
+  for (const line of lines) {
+    const m = line.match(/^@nudo:assume\s+(.+)$/);
+    if (m) out.push(m[1].trim().replace(/\*\/$/, "").trim());
+  }
+  return out;
+}
 function scanThrowsDecl(lines) {
   const kinds = /* @__PURE__ */ new Set();
   let any = false;
@@ -1490,6 +1498,24 @@ function extractRefineLines(source, fnName) {
   const lines = fnDirectiveCommentLines(source, fnName);
   return scanContractSegments(lines);
 }
+function extractAssumeSegs(source, fnName) {
+  if (!stripStringsKeepComments(source).includes("@nudo:assume")) return [];
+  const out = [];
+  for (const seg of scanAssumeSegments(fnDirectiveCommentLines(source, fnName))) {
+    const geSeg = seg.match(/^([A-Za-z_$][\w$]*)\s*>=\s*([A-Za-z_$][\w$]*)$/);
+    if (geSeg) {
+      out.push({ kind: "ok", lhs: geSeg[2], rhs: geSeg[1] });
+      continue;
+    }
+    const leSeg = seg.match(/^([A-Za-z_$][\w$]*)\s*<=\s*([A-Za-z_$][\w$]*)$/);
+    if (leSeg) {
+      out.push({ kind: "ok", lhs: leSeg[1], rhs: leSeg[2] });
+      continue;
+    }
+    out.push({ kind: "bad", raw: seg });
+  }
+  return out;
+}
 function extractRefinesFromSource(source, fnName, opts = {}) {
   if (!stripStringsKeepComments(source).includes("@nudo:contract")) return [];
   const constraints = collectConstraints(source, opts);
@@ -5525,6 +5551,7 @@ export {
   NudoSidecarError,
   execNudoModule,
   resetNudoModuleExecCache,
+  extractAssumeSegs,
   extractRefinesFromSource,
   refineToIndexedFull,
   extractRefineReturnFromSource,

package/dist/{chunk-VKSROGOF.js → chunk-YRRR6AWI.js}

@@ -4391,6 +4391,19 @@ function withExecPhi(p, body) {
     phi = prev;
   }
 }
+var assumePremises = pTrue;
+function currentAssumePremises() {
+  return assumePremises;
+}
+function withAssumePremises(p, body) {
+  const prev = assumePremises;
+  assumePremises = p;
+  try {
+    return body();
+  } finally {
+    assumePremises = prev;
+  }
+}
 var noBody2 = { type: "BlockStatement", body: [], directives: [] };
 var hostGlobalFnCall;
 function setHostGlobalFnCall(bridge) {
@@ -4429,6 +4442,12 @@ function $absVal(v2) {
   return asAbsVal(v2);
 }
 function callAtFunctionBoundary(body) {
+  if (assumePremises !== pTrue) {
+    return withAssumePremises(pTrue, () => boundaryBody(body));
+  }
+  return boundaryBody(body);
+}
+function boundaryBody(body) {
   let forwarded = [];
   try {
     return runWithLoopExits(() => {
@@ -8679,7 +8698,12 @@ function emitArrMutatorRebinds(expr, opts, pad) {
     if (node.type === "CallExpression" && node.callee?.type === "MemberExpression" && node.callee.computed !== true && node.callee.property?.type === "Identifier" && ARR_MUTATOR_NAMES.has(node.callee.property.name)) {
       const methodName = node.callee.property.name;
       const argSrcs = (node.arguments ?? []).map(
-        (a) => a.type === "SpreadElement" ? "$unknown()" : isExpression(a) ? emitTranspileExpression(a, opts) : "$unknown()"
+        (a) => (
+          // spread 实参展开（issue #153）：$elems → JS Abs[]，数组字面量 JS
+          // spread 平铺（与 expr.ts 普通调用同口径）；此前折 $unknown() 单参
+          // 让重绑行以 unknown 实参执行真实变更，污染容器元素域
+          a.type === "SpreadElement" ? `...$elems(${emitTranspileExpression(a.argument, opts)})` : isExpression(a) ? emitTranspileExpression(a, opts) : "$unknown()"
+        )
       ).join(", ");
       const objNode = node.callee.object;
       if (objNode.type === "Identifier") {
@@ -9809,7 +9833,12 @@ ${pad}export default ${name};`;
         const methodName = expr.callee.property.name;
         if (["push", "unshift", "splice", "pop", "shift", "reverse", "sort"].includes(methodName)) {
           const argSrcs = expr.arguments.map(
-            (a) => a.type === "SpreadElement" ? "$unknown()" : emitTranspileExpression(a, opts)
+            (a) => (
+              // spread 实参展开（issue #153）：$elems → JS Abs[]，数组字面量 JS spread
+              // 平铺（与普通调用 $callNamed/$invoke 同口径，DEC-006 K5）；
+              // 此前折 $unknown() 单参会污染容器元素域
+              a.type === "SpreadElement" ? `...$elems(${emitTranspileExpression(a.argument, opts)})` : emitTranspileExpression(a, opts)
+            )
           ).join(", ");
           const objNode = expr.callee.object;
           if (objNode.type === "Identifier") {
@@ -12160,6 +12189,7 @@ __export(runtime_exports, {
   callAtFunctionBoundary: () => callAtFunctionBoundary,
   clearStaleTermPred: () => clearStaleTermPred,
   confPartial: () => confPartial,
+  currentAssumePremises: () => currentAssumePremises,
   currentExecPhi: () => currentExecPhi,
   fillTuple: () => fillTuple,
   isArrMutator: () => isArrMutator,
@@ -12177,6 +12207,7 @@ __export(runtime_exports, {
   runWithLoopExits: () => runWithLoopExits,
   takeLoopExits: () => takeLoopExits,
   takeThrowExits: () => takeThrowExits,
+  withAssumePremises: () => withAssumePremises,
   withExecPhi: () => withExecPhi,
   withNewTargetReset: () => withNewTargetReset
 });
@@ -12218,7 +12249,7 @@ function $mul(a, b) {
   return mul(a, b, currentExecPhi());
 }
 function $div(a, b) {
-  return div(a, b, currentExecPhi());
+  return div(a, b, currentExecPhi(), currentAssumePremises());
 }
 function $mod(a, b) {
   return mod(a, b, currentExecPhi());
@@ -13826,6 +13857,10 @@ function leafGrew(acc, next) {
   if (aR.ok) return true;
   return !leqAbs(next, acc).ok;
 }
+function joinElems(t) {
+  const parts = t.holes?.length ? [...t.elements, oobUndef()] : t.elements;
+  return parts.length > 0 ? parts.reduce((x, y) => joinAbs(x, y)) : void 0;
+}
 function diffGrowth(acc, next) {
   const as = acc.shape;
   const ns = next.shape;
@@ -13843,7 +13878,10 @@ function diffGrowth(acc, next) {
     return any2 ? { slots } : null;
   }
   if (as.k === "tuple" && ns.k === "tuple") {
-    if (as.elements.length !== ns.elements.length) return true;
+    if (as.elements.length !== ns.elements.length) {
+      const g = diffGrowth(joinElems(as) ?? never, joinElems(ns) ?? never);
+      return { el: g };
+    }
     let any2 = false;
     const els = [];
     for (let i = 0; i < ns.elements.length; i++) {
@@ -13871,6 +13909,51 @@ function primTop(type) {
       return abs({ k: "prim", type }, void 0, void 0, "exact");
   }
 }
+function sumArrParts(s) {
+  const elems = [];
+  const lengths = /* @__PURE__ */ new Set();
+  let hasArr = false;
+  for (const m of s.members) {
+    const ms = m.shape;
+    if (ms.k === "tuple") {
+      lengths.add(ms.elements.length);
+      const e = joinElems(ms);
+      if (e) elems.push(e);
+    } else if (ms.k === "arr") {
+      hasArr = true;
+      elems.push(ms.element);
+    } else {
+      return { ok: false, collapse: false };
+    }
+  }
+  return {
+    ok: true,
+    collapse: hasArr || lengths.size > 1,
+    element: elems.length > 0 ? elems.reduce((x, y) => joinAbs(x, y)) : void 0
+  };
+}
+function arrify(v2) {
+  const s = v2.shape;
+  if (s.k === "tuple") {
+    return abs(
+      { k: "arr", element: joinElems(s) ?? unknown },
+      void 0,
+      void 0,
+      confJoin(v2.conf, "widened")
+    );
+  }
+  if (s.k === "sum") {
+    const p = sumArrParts(s);
+    if (!p.ok) return void 0;
+    return abs(
+      { k: "arr", element: p.element ?? unknown },
+      void 0,
+      void 0,
+      confJoin(v2.conf, "widened")
+    );
+  }
+  return void 0;
+}
 function domainTop(v2) {
   const s = v2.shape;
   if (s.k === "sum" && s.members.length === 2) {
@@ -13882,6 +13965,17 @@ function domainTop(v2) {
   }
   let top;
   if (s.k === "sum") {
+    const collapsed = arrify(v2);
+    if (collapsed) {
+      return confJoin22(
+        abs(
+          { k: "arr", element: domainTop(collapsed.shape.element) },
+          void 0,
+          void 0,
+          collapsed.conf
+        )
+      );
+    }
     let acc;
     for (const m of s.members) {
       const t = domainTop(m);
@@ -13891,15 +13985,9 @@ function domainTop(v2) {
   } else if (s.k === "prim") {
     top = primTop(s.type);
   } else if (s.k === "tuple") {
-    const els = s.elements.map((e) => domainTop(e));
-    const known = els.length ? els.reduce((x, y) => joinAbs(x, y)) : unknown;
-    top = abs(
-      { k: "arr", element: joinAbs(known, abs({ k: "unknown" }, { op: "lit", value: void 0 }, void 0, "partial")) },
-      void 0,
-      void 0,
-      "widened"
-    );
-    return top;
+    const parts = s.holes?.length ? [...s.elements, oobUndef()] : s.elements;
+    const known = parts.length > 0 ? parts.map((e) => domainTop(e)).reduce((x, y) => joinAbs(x, y)) : unknown;
+    return abs({ k: "arr", element: known }, void 0, void 0, "widened");
   } else if (s.k === "arr") {
     top = abs({ k: "arr", element: domainTop(s.element) }, void 0, void 0, v2.conf);
   } else if (s.k === "obj") {
@@ -13915,6 +14003,23 @@ function confJoin22(top) {
   const c = confJoin(top.conf, "widened");
   return c === top.conf ? top : { ...top, conf: c };
 }
+function normalizeForWiden(v2, g) {
+  if (g === null) return v2;
+  const s = v2.shape;
+  let target = v2;
+  if (s.k === "sum" && s.members.length > 0 && s.members.every((m) => m.shape.k === "obj")) {
+    target = s.members.reduce((x, y) => joinObjects(x, y));
+  }
+  if (g === true || !("slots" in g)) return target;
+  const ts = target.shape;
+  if (ts.k !== "obj") return target;
+  const slots = {};
+  for (const [k, slot] of Object.entries(ts.slots)) {
+    const gi = g.slots[k];
+    slots[k] = gi === void 0 ? slot : { ...slot, value: normalizeForWiden(slot.value, gi) };
+  }
+  return abs({ ...ts, slots }, void 0, void 0, target.conf);
+}
 function widenWithPath(v2, g) {
   if (g === null) return v2;
   if (g === true) return domainTop(v2);
@@ -13931,11 +14036,40 @@ function widenWithPath(v2, g) {
     const elements = s.elements.map((e, i) => widenWithPath(e, g.els[i] ?? null));
     return abs({ ...s, elements }, void 0, void 0, v2.conf);
   }
-  if ("el" in g && s.k === "arr") {
-    return abs({ k: "arr", element: widenWithPath(s.element, g.el) }, void 0, void 0, v2.conf);
+  if ("el" in g) {
+    const a = s.k === "arr" ? v2 : arrify(v2);
+    if (a && a.shape.k === "arr") {
+      return abs(
+        { k: "arr", element: widenWithPath(a.shape.element, g.el) },
+        void 0,
+        void 0,
+        a.conf
+      );
+    }
   }
   return domainTop(v2);
 }
+function collapseArrSums(v2) {
+  const s = v2.shape;
+  if (s.k === "sum") {
+    const p = sumArrParts(s);
+    if (p.ok && p.collapse && p.element) {
+      return abs({ k: "arr", element: p.element }, void 0, void 0, v2.conf);
+    }
+    return v2;
+  }
+  if (s.k === "obj") {
+    let changed = false;
+    const slots = {};
+    for (const [k, slot] of Object.entries(s.slots)) {
+      const w = collapseArrSums(slot.value);
+      if (w !== slot.value) changed = true;
+      slots[k] = { ...slot, value: w };
+    }
+    return changed ? abs({ ...s, slots }, void 0, void 0, v2.conf) : v2;
+  }
+  return v2;
+}
 function makeLoopWidener() {
   let acc;
   let growth = null;
@@ -13957,7 +14091,10 @@ function makeLoopWidener() {
       observe(final);
       const base = acc ?? final;
       const g = interrupted ? true : growth;
-      return g === null ? base : widenWithPath(base, g === true ? true : g);
+      if (g === null) {
+        return collapseArrSums(base);
+      }
+      return widenWithPath(normalizeForWiden(base, g), g);
     }
   };
 }
@@ -15887,7 +16024,7 @@ function widenLoopJoin(a) {
     const known = els.length ? els.reduce((x, y) => joinAbs(x, y)) : unknown;
     const element = undefArms.length ? undefArms.reduce((x, y) => joinAbs(x, y), known) : known;
     return abs(
-      { k: "arr", element: joinAbs(element, oobUndef()) },
+      { k: "arr", element },
       void 0,
       void 0,
       confJoin(v2.conf, "widened")
@@ -16649,6 +16786,15 @@ var intFlaggedBuilders = /* @__PURE__ */ new WeakSet();
 function isIntFlag(c) {
   return c.int === true || intFlaggedBuilders.has(c);
 }
+function finiteBoundArg(method, n) {
+  if (typeof n !== "number" || !Number.isFinite(n)) {
+    const shown = typeof n === "string" ? JSON.stringify(n) : String(n);
+    throw new Error(
+      `nudo ${method}(): finite numeric bound expected, got ${shown} \u2014 variable references are not supported; express cross-variable lemmas with @nudo:assume (issue #152)`
+    );
+  }
+  return n;
+}
 function makeBuilder(prim, preds, extra) {
   const fields = extra?.fields;
   const element = extra?.element;
@@ -16673,17 +16819,16 @@ function makeBuilder(prim, preds, extra) {
     /* @__PURE__ */ Object.create(null),
     base,
     {
-      gt: (n) => add2(gt(selfTerm(), lit(n))),
-      ge: (n) => add2(ge(selfTerm(), lit(n))),
-      lt: (n) => add2(lt(selfTerm(), lit(n))),
-      le: (n) => add2(le(selfTerm(), lit(n))),
+      gt: (n) => add2(gt(selfTerm(), lit(finiteBoundArg("gt", n)))),
+      ge: (n) => add2(ge(selfTerm(), lit(finiteBoundArg("ge", n)))),
+      lt: (n) => add2(lt(selfTerm(), lit(finiteBoundArg("lt", n)))),
+      le: (n) => add2(le(selfTerm(), lit(finiteBoundArg("le", n)))),
       int: () => makeBuilder(prim ?? "number", preds, { ...extra, int: true }),
-      min: (n) => add2(ge(lenTerm(selfTerm()), lit(n))),
-      max: (n) => add2(le(lenTerm(selfTerm()), lit(n))),
+      min: (n) => add2(ge(lenTerm(selfTerm()), lit(finiteBoundArg("min", n)))),
+      max: (n) => add2(le(lenTerm(selfTerm()), lit(finiteBoundArg("max", n)))),
       length: (n) => add2(and(ge(lenTerm(selfTerm()), lit(n)), le(lenTerm(selfTerm()), lit(n)))),
       shift: (n) => {
-        if (!Number.isFinite(n))
-          throw new Error("nudo shift(): offset must be a finite number");
+        finiteBoundArg("shift", n);
         if (fields || element || members || fnSlot || lazySlot)
           throw new Error("nudo shift(): only numeric scalar constraint chains are allowed (shape/array/union/fn are not supported)");
         if (prim !== void 0 && prim !== "number")
@@ -17340,6 +17485,7 @@ function argLacksInformation(a) {
   return false;
 }
 function adoptCallArgsToFaces(args, faces) {
+  if (currentAssumePremises() !== pTrue) return args;
   const n = Math.min(args.length, faces.paramFaces.length);
   let changed = false;
   const out = args.slice();
@@ -25193,7 +25339,50 @@ function mul(a, b, phi2 = pTrue) {
   noteAbstractArithMayThrow(a, b);
   return abs({ k: "unknown" }, void 0, void 0, "partial");
 }
-function div(a, b, phi2 = pTrue) {
+function assumePremiseList(assume) {
+  if (!assume || assume.op === "true") return [];
+  const out = [];
+  const walk = (p) => {
+    if (p.op === "and") {
+      p.args.forEach(walk);
+      return;
+    }
+    if (p.op !== "true") out.push(p);
+  };
+  walk(assume);
+  return out;
+}
+function divAssumeBounds(a, b, resultTerm, phi2, assume) {
+  const premises = assumePremiseList(assume);
+  if (premises.length === 0) return void 0;
+  if (!a.term || !b.term) return void 0;
+  const bb = numericBounds(b, phi2);
+  const posDen = bb?.lo !== void 0 && (bb.lo.value > 0 || bb.lo.value === 0 && bb.lo.strict);
+  const negDen = bb?.hi !== void 0 && (bb.hi.value < 0 || bb.hi.value === 0 && bb.hi.strict);
+  if (!posDen && !negDen) return void 0;
+  let aLeB = false;
+  let bLeA = false;
+  for (const p of premises) {
+    if (p.op !== "le") continue;
+    if (termEquals(p.a, a.term) && termEquals(p.b, b.term)) aLeB = true;
+    else if (termEquals(p.a, b.term) && termEquals(p.b, a.term)) bLeA = true;
+  }
+  if (!aLeB && !bLeA) return void 0;
+  const facts = [];
+  if (aLeB) facts.push(posDen ? le(resultTerm, lit(1)) : ge(resultTerm, lit(1)));
+  if (bLeA) facts.push(posDen ? ge(resultTerm, lit(1)) : le(resultTerm, lit(1)));
+  const ab = numericBounds(a, phi2);
+  if (ab?.lo !== void 0 && (ab.lo.value > 0 || ab.lo.value === 0)) {
+    if (posDen) facts.push(ab.lo.strict ? gt(resultTerm, lit(0)) : ge(resultTerm, lit(0)));
+    else facts.push(ab.lo.strict ? lt(resultTerm, lit(0)) : le(resultTerm, lit(0)));
+  }
+  if (ab?.hi !== void 0 && (ab.hi.value < 0 || ab.hi.value === 0)) {
+    if (posDen) facts.push(ab.hi.strict ? lt(resultTerm, lit(0)) : le(resultTerm, lit(0)));
+    else facts.push(ab.hi.strict ? gt(resultTerm, lit(0)) : ge(resultTerm, lit(0)));
+  }
+  return facts.length ? and(...facts) : void 0;
+}
+function div(a, b, phi2 = pTrue, assume) {
   {
     const fa = builtinBrandToPrimitive(a, "number");
     const fb = builtinBrandToPrimitive(b, "number");
@@ -25248,7 +25437,13 @@ function div(a, b, phi2 = pTrue) {
         term.op === "lit" ? "exact" : confJoin(confJoin(a.conf, b.conf), "path")
       );
     }
-    return abs(num().shape, term, void 0, confJoin(confJoin(a.conf, b.conf), "path"));
+    const assumePred = divAssumeBounds(a, b, term, phi2, assume);
+    return abs(
+      num().shape,
+      term,
+      assumePred,
+      confJoin(confJoin(a.conf, b.conf), "path")
+    );
   }
   if (isNumericLike(a) && isNumericLike(b)) {
     return abs(num().shape, void 0, void 0, "partial");
@@ -25259,7 +25454,7 @@ function div(a, b, phi2 = pTrue) {
   if (isAnyLike(a) || isAnyLike(b)) {
     return toNumberResult(a, b, "/");
   }
-  const distributed = distributeSumBinOp("/", a, b, phi2, div);
+  const distributed = distributeSumBinOp("/", a, b, phi2, (x, y, p) => div(x, y, p, assume));
   if (distributed) return distributed;
   noteAbstractArithMayThrow(a, b);
   return abs({ k: "unknown" }, void 0, void 0, "partial");
@@ -25962,6 +26157,8 @@ export {
   clearStaleTermPred,
   currentExecPhi,
   withExecPhi,
+  currentAssumePremises,
+  withAssumePremises,
   asAbsVal,
   $absVal,
   callAtFunctionBoundary,

package/dist/exec.d.ts

@@ -1,5 +1,5 @@
-import { A as Abs, M as MayThrowEffect, b as Phi } from './run-Bgj2tCrv.js';
-export { W as $assignRecord, X as $call, Y as $callNamed, bI as $nodoPos, Z as $recordBinding, a5 as EvalAbsAssignRecord, a6 as EvalCallRecord, a7 as EvalFallback, g as EvalFallbackStats, a8 as EvalPosRecord, ab as MAX_EVAL_CALL_DEPTH, ac as MAX_EVAL_TOTAL_CALLS, ad as RUNTIME_IMPORT_RE, V as RunTranspiledOptions, af as TranspiledCallResult, at as bindingsOf, aw as callTranspiledExport, ax as callTranspiledExportApply, ay as callTranspiledExportFull, l as clearPureCallMemo, m as clearPureMemo, n as enterEvalCallBudgetSession, aD as evalExprAbs, p as exitEvalCallBudgetSession, v as getEvalCallBudgetState, aG as getEvalCallCollector, w as getEvalFallbackStats, bJ as getPosCollector, aO as isAbsVal, aQ as isCjsMainRun, b5 as noteEvalCallRecord, b6 as noteEvalFallback, bn as resetEvalCallBudget, H as resetEvalFallbackStats, bK as routeApplyThrows, bo as runTranspiled, bp as runTranspiledOptionsMemoKey, bq as setEvalAssignCollector, br as setEvalBindingSink, bs as setEvalCallCollector, bt as setEvalFallbackCollector, bv as setPosCollector, bF as tryRunTranspiled, O as withEvalBudgetOverride } from './run-Bgj2tCrv.js';
+import { A as Abs, M as MayThrowEffect, b as Phi } from './run-dg1bW60I.js';
+export { W as $assignRecord, X as $call, Y as $callNamed, bI as $nodoPos, Z as $recordBinding, a5 as EvalAbsAssignRecord, a6 as EvalCallRecord, a7 as EvalFallback, g as EvalFallbackStats, a8 as EvalPosRecord, ab as MAX_EVAL_CALL_DEPTH, ac as MAX_EVAL_TOTAL_CALLS, ad as RUNTIME_IMPORT_RE, V as RunTranspiledOptions, af as TranspiledCallResult, at as bindingsOf, aw as callTranspiledExport, ax as callTranspiledExportApply, ay as callTranspiledExportFull, l as clearPureCallMemo, m as clearPureMemo, n as enterEvalCallBudgetSession, aD as evalExprAbs, p as exitEvalCallBudgetSession, v as getEvalCallBudgetState, aG as getEvalCallCollector, w as getEvalFallbackStats, bJ as getPosCollector, aO as isAbsVal, aQ as isCjsMainRun, b5 as noteEvalCallRecord, b6 as noteEvalFallback, bn as resetEvalCallBudget, H as resetEvalFallbackStats, bK as routeApplyThrows, bo as runTranspiled, bp as runTranspiledOptionsMemoKey, bq as setEvalAssignCollector, br as setEvalBindingSink, bs as setEvalCallCollector, bt as setEvalFallbackCollector, bv as setPosCollector, bF as tryRunTranspiled, O as withEvalBudgetOverride } from './run-dg1bW60I.js';
 import { Node, Expression, File } from '@babel/types';
 
 /**
@@ -29,6 +29,8 @@ declare function isNudoThrow(e: unknown): e is NudoThrow;
 declare function clearStaleTermPred(v: Abs): void;
 declare function currentExecPhi(): Phi;
 declare function withExecPhi<T>(p: Phi, body: () => T): T;
+declare function currentAssumePremises(): Phi;
+declare function withAssumePremises<T>(p: Phi, body: () => T): T;
 /**
  * transpile 泄漏的 JS 函数值 → 一等 fn Abs。
  * 求值引擎把函数声明/表达式编译成真实 JS 函数；它们流进对象槽、
@@ -825,4 +827,4 @@ declare class NudoUnsupportedError extends Error {
     detail?: string);
 }
 
-export { $absVal, $add, $arguments, $arr, $arrMutContainer, $arrRest, $arrWithHoles, $async, $asyncReturn, $await, $bitand, $bitnot, $bitor, $bitxor, $catchVal, $class, $classExpr, $collectionForEach, $concat, $copy, $del, $delRes, $div, $dynamicImport, $elems, $eq, $eqLoose, $fnVal, $for, $forInKeys, $forIter, $forOf, $fork, $ge, $gen, $get, $getSuper, $getSuperObj, $gt, $idx, $idxSet, $importMeta, $in, $instanceof, $instanceofNonIdent, $invoke, $invokeSuper, $invokeSuperKey, $invokeSuperObj, $isBreakTo, $isForkExit, $iterCheck, $join, $le, $len, $lit, $loopBreak, $loopContinue, $loopReturn, $lt, $mod, $mul, $narrowMemberEq, $narrowTypeOf, $ne, $neLoose, $neg, $new, $newTarget, $not, $nullishTest, $obj, $objAccessor, $objAccessorKey, $objRest, $optionalGet, $optionalInvoke, $orDefault, $pow, $pushLoopExit, $rawThis, $reStateCall, $refineRel, $regex, $removeMemberNullish, $removeNull, $removeNullish, $removeUndefined, $restBind, $rethrowIfNudoReturn, $set, $setKey, $setProto, $shl, $shr, $spread, $staticInit, $staticInvoke, $sub, $super, $switch, $thisGet, $thisSet, $throw, $toNumber, $toNumeric, $tpl, $tryCurrentMark, $tryDetachSoftCatch, $tryDigestSoftCatch, $tryDiscardSoft, $tryMark, $tryOrphanSoft, $tryPopMark, $tryReleaseSoftCatch, $tryReleaseSoftOut, $tryTakeSince, $typeof, $unknown, $updateAdd, $updateSub, $ushr, $while, $whileSeq, $yield, $yieldStar, DEFAULT_MAX_LOOP_ITERS, type EvalClassSpec, NudoLoopSignal, NudoReturn, NudoThrow, NudoUnsupportedError, type TranspileOptions, asAbsVal, callAtFunctionBoundary, clearBClasses, clearStaleTermPred, currentExecPhi, fillTuple, foldRequireSpecArg, foldStaticStringExpr, getEvalClass, isArrMutator, isDefinitelyFalse, isDefinitelyTrue, isNudoBreak, isNudoContinue, isNudoReturn, isNudoThrow, litTruth, lookupObjAccessor, namespaceNameOf, pushLoopExit, pushThrowExit, registerEvalClass, runWithLoopExits, runtimeImportOf, takeLoopExits, takeThrowExits, transpile, transpileBodyNode, transpileExpression, transpileFile, transpileSource, withExecPhi };
+export { $absVal, $add, $arguments, $arr, $arrMutContainer, $arrRest, $arrWithHoles, $async, $asyncReturn, $await, $bitand, $bitnot, $bitor, $bitxor, $catchVal, $class, $classExpr, $collectionForEach, $concat, $copy, $del, $delRes, $div, $dynamicImport, $elems, $eq, $eqLoose, $fnVal, $for, $forInKeys, $forIter, $forOf, $fork, $ge, $gen, $get, $getSuper, $getSuperObj, $gt, $idx, $idxSet, $importMeta, $in, $instanceof, $instanceofNonIdent, $invoke, $invokeSuper, $invokeSuperKey, $invokeSuperObj, $isBreakTo, $isForkExit, $iterCheck, $join, $le, $len, $lit, $loopBreak, $loopContinue, $loopReturn, $lt, $mod, $mul, $narrowMemberEq, $narrowTypeOf, $ne, $neLoose, $neg, $new, $newTarget, $not, $nullishTest, $obj, $objAccessor, $objAccessorKey, $objRest, $optionalGet, $optionalInvoke, $orDefault, $pow, $pushLoopExit, $rawThis, $reStateCall, $refineRel, $regex, $removeMemberNullish, $removeNull, $removeNullish, $removeUndefined, $restBind, $rethrowIfNudoReturn, $set, $setKey, $setProto, $shl, $shr, $spread, $staticInit, $staticInvoke, $sub, $super, $switch, $thisGet, $thisSet, $throw, $toNumber, $toNumeric, $tpl, $tryCurrentMark, $tryDetachSoftCatch, $tryDigestSoftCatch, $tryDiscardSoft, $tryMark, $tryOrphanSoft, $tryPopMark, $tryReleaseSoftCatch, $tryReleaseSoftOut, $tryTakeSince, $typeof, $unknown, $updateAdd, $updateSub, $ushr, $while, $whileSeq, $yield, $yieldStar, DEFAULT_MAX_LOOP_ITERS, type EvalClassSpec, NudoLoopSignal, NudoReturn, NudoThrow, NudoUnsupportedError, type TranspileOptions, asAbsVal, callAtFunctionBoundary, clearBClasses, clearStaleTermPred, currentAssumePremises, currentExecPhi, fillTuple, foldRequireSpecArg, foldStaticStringExpr, getEvalClass, isArrMutator, isDefinitelyFalse, isDefinitelyTrue, isNudoBreak, isNudoContinue, isNudoReturn, isNudoThrow, litTruth, lookupObjAccessor, namespaceNameOf, pushLoopExit, pushThrowExit, registerEvalClass, runWithLoopExits, runtimeImportOf, takeLoopExits, takeThrowExits, transpile, transpileBodyNode, transpileExpression, transpileFile, transpileSource, withAssumePremises, withExecPhi };

package/dist/exec.js

@@ -149,6 +149,7 @@ import {
   clearPureCallMemo,
   clearPureMemo,
   clearStaleTermPred,
+  currentAssumePremises,
   currentExecPhi,
   enterEvalCallBudgetSession,
   evalExprAbs,
@@ -198,9 +199,10 @@ import {
   transpileFile,
   transpileSource,
   tryRunTranspiled,
+  withAssumePremises,
   withEvalBudgetOverride,
   withExecPhi
-} from "./chunk-VKSROGOF.js";
+} from "./chunk-YRRR6AWI.js";
 export {
   $absVal,
   $add,
@@ -351,6 +353,7 @@ export {
   clearPureCallMemo,
   clearPureMemo,
   clearStaleTermPred,
+  currentAssumePremises,
   currentExecPhi,
   enterEvalCallBudgetSession,
   evalExprAbs,
@@ -400,6 +403,7 @@ export {
   transpileFile,
   transpileSource,
   tryRunTranspiled,
+  withAssumePremises,
   withEvalBudgetOverride,
   withExecPhi
 };

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { d as AstEnv, A as Abs, b as Phi, T as Term, Q as HofCollectCtx, C as Confidence, S as Shape, a as Pred, R as RelSource, U as HofSite, c as AbsModuleExports, V as RunTranspiledOptions } from './run-Bgj2tCrv.js';
-export { W as $assignRecord, X as $call, Y as $callNamed, Z as $recordBinding, _ as AbsApplyNoThrow, a0 as AbsApplyNoThrowFn, a1 as AbsApplyResult, a2 as AbsApplyReturn, a3 as AbsFnImpl, a4 as AbsSigImpl, a5 as EvalAbsAssignRecord, a6 as EvalCallRecord, a7 as EvalFallback, a8 as EvalPosRecord, a9 as ImplicationOracle, aa as LitValueResult, L as LiteralValue, ab as MAX_EVAL_CALL_DEPTH, ac as MAX_EVAL_TOTAL_CALLS, P as PrimName, ad as RUNTIME_IMPORT_RE, ae as TYPEOF_NAMES, af as TranspiledCallResult, ag as TypeofName, ah as abs, ai as absFunction, aj as absOnly, ak as absToString, al as and, am as anyAbs, an as anyVar, ao as app, ap as assumeFinite, aq as attachFnImpl, ar as bigintLit, as as bindImports, at as bindingsOf, au as bool, av as boolLit, aw as callTranspiledExport, ax as callTranspiledExportApply, ay as callTranspiledExportFull, az as collectAbsExports, aA as confJoin, aB as emptyPhi, aC as eq, aD as evalExprAbs, aE as ge, aF as geNum, aG as getEvalCallCollector, aH as getFnImpl, aI as getImplicationOracle, aJ as gt, aK as gtNum, aL as hostFnCtorFacet, aM as implies, aN as isAbsApplyResult, aO as isAbsVal, aP as isBigPrim, aQ as isCjsMainRun, aR as isExactLit, aS as isNumPrim, aT as isStrPrim, aU as le, aV as leNum, aW as lit, aX as litValue, aY as lt, aZ as ltNum, a_ as makeAbsApplyResult, a$ as markPureFn, b0 as namespaceAbsOf, b1 as ne, b2 as negatePred, b3 as never, b4 as not, b5 as noteEvalCallRecord, b6 as noteEvalFallback, b7 as num, b8 as numLit, b9 as numVar, ba as obj, bb as or, bc as pFalse, bd as pTrue, be as phiAnd, bf as predEquals, bg as predToString, bh as predVars, bi as primToTypeof, bj as ptypeof, bk as pureFnNameOf, bl as relationFingerprint, bm as relationFn, bn as resetEvalCallBudget, bo as runTranspiled, bp as runTranspiledOptionsMemoKey, bq as setEvalAssignCollector, br as setEvalBindingSink, bs as setEvalCallCollector, bt as setEvalFallbackCollector, bu as setImplicationOracle, bv as setPosCollector, bw as shapeOfTerm, bx as shapeOnlyFn, by as shapeToString, bz as simplifyTerm, bA as str, bB as strLit, bC as substPred, bD as termEquals, bE as termToString, bF as tryRunTranspiled, bG as unknown, bH as v } from './run-Bgj2tCrv.js';
+import { d as AstEnv, A as Abs, b as Phi, T as Term, Q as HofCollectCtx, C as Confidence, S as Shape, a as Pred, R as RelSource, U as HofSite, c as AbsModuleExports, V as RunTranspiledOptions } from './run-dg1bW60I.js';
+export { W as $assignRecord, X as $call, Y as $callNamed, Z as $recordBinding, _ as AbsApplyNoThrow, a0 as AbsApplyNoThrowFn, a1 as AbsApplyResult, a2 as AbsApplyReturn, a3 as AbsFnImpl, a4 as AbsSigImpl, a5 as EvalAbsAssignRecord, a6 as EvalCallRecord, a7 as EvalFallback, a8 as EvalPosRecord, a9 as ImplicationOracle, aa as LitValueResult, L as LiteralValue, ab as MAX_EVAL_CALL_DEPTH, ac as MAX_EVAL_TOTAL_CALLS, P as PrimName, ad as RUNTIME_IMPORT_RE, ae as TYPEOF_NAMES, af as TranspiledCallResult, ag as TypeofName, ah as abs, ai as absFunction, aj as absOnly, ak as absToString, al as and, am as anyAbs, an as anyVar, ao as app, ap as assumeFinite, aq as attachFnImpl, ar as bigintLit, as as bindImports, at as bindingsOf, au as bool, av as boolLit, aw as callTranspiledExport, ax as callTranspiledExportApply, ay as callTranspiledExportFull, az as collectAbsExports, aA as confJoin, aB as emptyPhi, aC as eq, aD as evalExprAbs, aE as ge, aF as geNum, aG as getEvalCallCollector, aH as getFnImpl, aI as getImplicationOracle, aJ as gt, aK as gtNum, aL as hostFnCtorFacet, aM as implies, aN as isAbsApplyResult, aO as isAbsVal, aP as isBigPrim, aQ as isCjsMainRun, aR as isExactLit, aS as isNumPrim, aT as isStrPrim, aU as le, aV as leNum, aW as lit, aX as litValue, aY as lt, aZ as ltNum, a_ as makeAbsApplyResult, a$ as markPureFn, b0 as namespaceAbsOf, b1 as ne, b2 as negatePred, b3 as never, b4 as not, b5 as noteEvalCallRecord, b6 as noteEvalFallback, b7 as num, b8 as numLit, b9 as numVar, ba as obj, bb as or, bc as pFalse, bd as pTrue, be as phiAnd, bf as predEquals, bg as predToString, bh as predVars, bi as primToTypeof, bj as ptypeof, bk as pureFnNameOf, bl as relationFingerprint, bm as relationFn, bn as resetEvalCallBudget, bo as runTranspiled, bp as runTranspiledOptionsMemoKey, bq as setEvalAssignCollector, br as setEvalBindingSink, bs as setEvalCallCollector, bt as setEvalFallbackCollector, bu as setImplicationOracle, bv as setPosCollector, bw as shapeOfTerm, bx as shapeOnlyFn, by as shapeToString, bz as simplifyTerm, bA as str, bB as strLit, bC as substPred, bD as termEquals, bE as termToString, bF as tryRunTranspiled, bG as unknown, bH as v } from './run-dg1bW60I.js';
 import { Node, File } from '@babel/types';
-import { p as parseSource, L as LeakBudget, E as EffectiveInterfaceOpts, b as LoadDepsFingerprint, v as CheckReport, N as NudoConstraint, c as ProjectionBudget } from './projection-budget-Dey0IUJa.js';
-export { w as CONSTRAINT_BUILDERS, x as CONSTRAINT_BUILDER_NAMES, y as CONSTRAINT_EXPR_RE, z as CheckAction, C as CheckIssue, A as CheckJson, B as CheckJsonMulti, D as ConstraintBuilder, F as Diagnostic, G as EffectiveInterface, H as GitlabCodeQualityIssue, J as INTERFACE_SOURCE_ABBR, K as InterfaceDiag, I as InterfaceSource, O as InterfaceTierInfo, a as InterfaceTierOpts, Q as NamedImport, R as NudoField, S as NudoFnConstraint, T as NudoSidecarError, U as NudoSig, V as RefineDiag, W as RefineEntry, X as RefineResolveOpts, Y as SELF, Z as actionsForIssue, _ as andC, $ as any, a0 as array, a1 as boolean, a2 as checkArg, a3 as checkCall, a4 as constraintAdmitsNullish, a5 as constraintToEntryAbs, a6 as derefConstraint, a7 as drainPromiseMicros, a8 as effectiveInterface, a9 as enterPromiseExecutorScope, aa as evalPromiseCtor, ab as evalPromiseMethod, ac as evalPromiseStatic, ad as execNudoModule, ae as extractDeclaredThrows, af as extractFnBudget, ag as extractNudoImports, ah as extractRefineReturnFromSource, ai as extractRefinesFromSource, aj as fn, ak as fnConstraintToEntryReqs, al as formatCheckReport, am as formatConstraint, an as formatDiagnostics, ao as formatEffectiveInterfaceDisplay, ap as formatGithubAnnotations, aq as formatGitlabCodeQuality, ar as formatInterfaceTierLine, as as generatedExportNames, at as getParseSourceCacheSize, au as getTerm, av as instantiateConstraint, aw as interfaceDiagCount, ax as interfaceSourceOf, ay as interfaceTierOf, az as isIntFlag, aA as isNodeModulesPath, aB as isNudoConstraint, aC as lazy, aD as leavePromiseExecutorScope, aE as lenTerm, aF as litC, aG as localNamedExports, aH as notePromiseExecutorFork, aI as nullable, aJ as number, aK as omit, aL as partial, aM as pick, aN as queuePromiseMicro, aO as refineDiagCount, aP as refineToIndexedFull, aQ as resetNudoModuleExecCache, aR as resetParseSourceCache, aS as resetSidecarLoadFailureCache, aT as serializeCheckJson, aU as serializeCheckJsonMulti, aV as setInterfaceDiagCollector, aW as setRefineDiagCollector, aX as shape, aY as sidecarClosureFingerprint, aZ as sidecarPathOf, a_ as string, a$ as takeInterfaceDiags, b0 as takeInterfaceDiagsSince, b1 as takeRefineDiags, b2 as takeRefineDiagsSince, b3 as throwConstraintToKinds, b4 as union } from './projection-budget-Dey0IUJa.js';
+import { p as parseSource, L as LeakBudget, E as EffectiveInterfaceOpts, b as LoadDepsFingerprint, v as CheckReport, N as NudoConstraint, c as ProjectionBudget } from './projection-budget-B0c9KEhd.js';
+export { w as CONSTRAINT_BUILDERS, x as CONSTRAINT_BUILDER_NAMES, y as CONSTRAINT_EXPR_RE, z as CheckAction, C as CheckIssue, A as CheckJson, B as CheckJsonMulti, D as ConstraintBuilder, F as Diagnostic, G as EffectiveInterface, H as GitlabCodeQualityIssue, J as INTERFACE_SOURCE_ABBR, K as InterfaceDiag, I as InterfaceSource, O as InterfaceTierInfo, a as InterfaceTierOpts, Q as NamedImport, R as NudoField, S as NudoFnConstraint, T as NudoSidecarError, U as NudoSig, V as RefineDiag, W as RefineEntry, X as RefineResolveOpts, Y as SELF, Z as actionsForIssue, _ as andC, $ as any, a0 as array, a1 as boolean, a2 as checkArg, a3 as checkCall, a4 as constraintAdmitsNullish, a5 as constraintToEntryAbs, a6 as derefConstraint, a7 as drainPromiseMicros, a8 as effectiveInterface, a9 as enterPromiseExecutorScope, aa as evalPromiseCtor, ab as evalPromiseMethod, ac as evalPromiseStatic, ad as execNudoModule, ae as extractDeclaredThrows, af as extractFnBudget, ag as extractNudoImports, ah as extractRefineReturnFromSource, ai as extractRefinesFromSource, aj as fn, ak as fnConstraintToEntryReqs, al as formatCheckReport, am as formatConstraint, an as formatDiagnostics, ao as formatEffectiveInterfaceDisplay, ap as formatGithubAnnotations, aq as formatGitlabCodeQuality, ar as formatInterfaceTierLine, as as generatedExportNames, at as getParseSourceCacheSize, au as getTerm, av as instantiateConstraint, aw as interfaceDiagCount, ax as interfaceSourceOf, ay as interfaceTierOf, az as isIntFlag, aA as isNodeModulesPath, aB as isNudoConstraint, aC as lazy, aD as leavePromiseExecutorScope, aE as lenTerm, aF as litC, aG as localNamedExports, aH as notePromiseExecutorFork, aI as nullable, aJ as number, aK as omit, aL as partial, aM as pick, aN as queuePromiseMicro, aO as refineDiagCount, aP as refineToIndexedFull, aQ as resetNudoModuleExecCache, aR as resetParseSourceCache, aS as resetSidecarLoadFailureCache, aT as serializeCheckJson, aU as serializeCheckJsonMulti, aV as setInterfaceDiagCollector, aW as setRefineDiagCollector, aX as shape, aY as sidecarClosureFingerprint, aZ as sidecarPathOf, a_ as string, a$ as takeInterfaceDiags, b0 as takeInterfaceDiagsSince, b1 as takeRefineDiags, b2 as takeRefineDiagsSince, b3 as throwConstraintToKinds, b4 as union } from './projection-budget-B0c9KEhd.js';
 export { $add, $arguments, $arr, $arrMutContainer, $arrRest, $arrWithHoles, $async, $asyncReturn, $await, $bitand, $bitnot, $bitor, $bitxor, $catchVal, $class, $classExpr, $collectionForEach, $concat, $copy, $del, $delRes, $div, $dynamicImport, $elems, $eq, $eqLoose, $fnVal, $for, $forInKeys, $forIter, $forOf, $fork, $ge, $gen, $get, $gt, $idx, $idxSet, $importMeta, $in, $instanceof, $instanceofNonIdent, $invoke, $invokeSuper, $isBreakTo, $isForkExit, $join, $le, $len, $lit, $loopBreak, $loopContinue, $loopReturn, $lt, $mod, $mul, $ne, $neLoose, $neg, $new, $not, $nullishTest, $obj, $objAccessor, $objRest, $optionalGet, $optionalInvoke, $orDefault, $pow, $pushLoopExit, $rawThis, $reStateCall, $regex, $rethrowIfNudoReturn, $set, $setKey, $shl, $shr, $spread, $staticInvoke, $sub, $super, $switch, $thisGet, $thisSet, $throw, $toNumber, $toNumeric, $tryCurrentMark, $tryDetachSoftCatch, $tryDigestSoftCatch, $tryDiscardSoft, $tryMark, $tryOrphanSoft, $tryPopMark, $tryReleaseSoftCatch, $tryReleaseSoftOut, $tryTakeSince, $typeof, $unknown, $updateAdd, $updateSub, $ushr, $while, $whileSeq, $yield, DEFAULT_MAX_LOOP_ITERS, EvalClassSpec, NudoLoopSignal, NudoReturn, NudoThrow, NudoUnsupportedError, TranspileOptions, asAbsVal, callAtFunctionBoundary, clearBClasses, clearStaleTermPred, currentExecPhi, fillTuple, foldRequireSpecArg, foldStaticStringExpr, getEvalClass, isArrMutator, isDefinitelyFalse, isDefinitelyTrue, isNudoBreak, isNudoContinue, isNudoReturn, isNudoThrow, litTruth, lookupObjAccessor, namespaceNameOf, pushLoopExit, pushThrowExit, registerEvalClass, runWithLoopExits, runtimeImportOf, takeLoopExits, takeThrowExits, transpile, transpileBodyNode, transpileExpression, transpileFile, transpileSource, withExecPhi } from './exec.js';
 
 /**
@@ -262,7 +262,7 @@ declare function mul(a: Abs, b: Abs, phi?: Phi): Abs;
  * 除法：字面量折叠；除以正/负常数时按单调性推界。
  * 除以 0：JS 语义为 ±Infinity / NaN，shape 仍 number（不报违例）。
  */
-declare function div(a: Abs, b: Abs, phi?: Phi): Abs;
+declare function div(a: Abs, b: Abs, phi?: Phi, assume?: Phi): Abs;
 /**
  * 取模：字面量折叠；`x % k`（k 为有限非零字面量）仅当被除数有限时
  * 结果界在 (−|k|, |k|)。整数模可收紧到 [0, k)，此处先做保守实数界。

package/dist/index.js

@@ -8,6 +8,7 @@ import {
   effectiveInterface,
   evictGeneralizeMemoForPaths,
   execNudoModule,
+  extractAssumeSegs,
   extractBalancedParens,
   extractDeclaredThrows,
   extractFileEnvNames,
@@ -64,7 +65,7 @@ import {
   takeInterfaceDiagsSince,
   takeRefineDiags,
   takeRefineDiagsSince
-} from "./chunk-GHFGZ6PZ.js";
+} from "./chunk-5VGO4YJT.js";
 import {
   $add,
   $arguments,
@@ -520,9 +521,10 @@ import {
   unknown,
   ushrAbs,
   v,
+  withAssumePremises,
   withExecPhi,
   withVar
-} from "./chunk-VKSROGOF.js";
+} from "./chunk-YRRR6AWI.js";
 
 // src/environment.ts
 function createEnvironment(parent, bindings = /* @__PURE__ */ new Map()) {
@@ -793,7 +795,18 @@ function flattenSumArms(ret) {
   return out;
 }
 function isWidenedSumArm(m, parent) {
-  return parent.conf === "partial" && m.shape.k === "prim" && !m.term && (!m.pred || m.pred.op === "true");
+  return (parent.conf === "partial" || m.conf === "widened") && m.shape.k === "prim" && !m.term && (!m.pred || m.pred.op === "true");
+}
+function constraintMatchesStructuralArm(arm, c) {
+  if (c.element) return arm.shape.k === "arr" || arm.shape.k === "tuple";
+  if (c.fields) return arm.shape.k === "obj";
+  if (c.members) {
+    return c.members.some((m) => constraintMatchesStructuralArm(arm, derefConstraint(m)));
+  }
+  return false;
+}
+function isWidenedStructuralArm(arm, constraint) {
+  return arm.conf === "widened" && constraintMatchesStructuralArm(arm, constraint);
 }
 function provesBarePrimDomain(arm, constraint) {
   if (constraint.members) {
@@ -820,7 +833,7 @@ function assertImplies(ret, constraint, opts) {
   const phi = opts?.phi ?? pTrue;
   if (ret.shape.k === "never") return proved();
   if (isAnyConstraint(constraint)) return proved();
-  if (isValueSetUnknown(ret)) {
+  if (isValueSetUnknown(ret) && ret.conf !== "widened") {
     return unprovable(
       ret.shape.k === "any" ? "any does not establish the return contract" : "inference failure (unknown/opaque) \u2014 cannot prove the return contract"
     );
@@ -853,6 +866,11 @@ function assertSumArms(arms, parent, constraint, opts, phi) {
       if (isWidenedSumArm(arm, parent) && provesBarePrimDomain(arm, constraint)) {
         continue;
       }
+      if (isWidenedStructuralArm(arm, constraint)) {
+        const r2 = assertImpliesSingle(arm, constraint, opts, phi);
+        if (r2.status !== "proved") sawUnprovable = true;
+        continue;
+      }
       sawUnprovable = true;
       continue;
     }
@@ -875,7 +893,10 @@ function assertImpliesSingle(arm, constraint, opts, phi) {
   if (isNullishLitAbs(arm)) {
     return constraintAdmitsNullish(constraint) ? proved() : disproved(`nullish return \u22AD ${formatConstraint(constraint)}`);
   }
-  if (isValueSetUnknown(arm)) {
+  if (isValueSetUnknown(arm) && !isWidenedStructuralArm(arm, constraint)) {
+    if (arm.conf === "widened" && arm.shape.k === "prim" && !arm.term && (!arm.pred || arm.pred.op === "true") && provesBarePrimDomain(arm, constraint)) {
+      return proved();
+    }
     return unprovable(
       arm.shape.k === "any" ? "any does not establish the return contract" : "inference failure (unknown/opaque) \u2014 cannot prove the return contract"
     );
@@ -1372,6 +1393,7 @@ function numericBound(p, self) {
   if (p.op !== "gt" && p.op !== "ge" && p.op !== "lt" && p.op !== "le") return void 0;
   if (!self) return void 0;
   if (termEquals(p.a, self) && p.b.op === "lit" && typeof p.b.value === "number") {
+    if (!Number.isFinite(p.b.value)) return void 0;
     return { op: p.op, n: p.b.value };
   }
   return void 0;
@@ -2340,6 +2362,49 @@ function sidecarDiagIssues(diags) {
   }
   return out;
 }
+function assumePremisesPhiOf(name, source, file, issues) {
+  const segs = extractAssumeSegs(source, name);
+  if (segs.length === 0) return void 0;
+  const meta = extractFn(source, name, file);
+  const bindable = /* @__PURE__ */ new Set([
+    ...contractParamNameSet(meta?.formals ?? []),
+    ...meta?.params ?? []
+  ]);
+  const surface = [...bindable].join(", ");
+  const preds = [];
+  const display = [];
+  for (const seg of segs) {
+    if (seg.kind === "bad") {
+      issues.push({
+        severity: "error",
+        code: "nudo:assume-invalid",
+        message: `${name}: malformed @nudo:assume '${seg.raw}' (expected <param> <= <param> or <param> >= <param>; constant bounds belong to sidecar contracts)`,
+        actual: seg.raw,
+        expected: "<param> <= <param>",
+        suggestion: "cross-variable lemmas: @nudo:assume d <= max \u2014 constant bounds: sidecar number().le(10)",
+        fn: name
+      });
+      continue;
+    }
+    const bad = [seg.lhs, seg.rhs].filter((n) => !bindable.has(n));
+    if (bad.length > 0) {
+      issues.push({
+        severity: "error",
+        code: "nudo:assume-invalid",
+        message: `${name}: @nudo:assume parameter name(s) not in the formal parameter list (${bad.join(", ")})`,
+        actual: bad.join(", "),
+        expected: surface || "(no params)",
+        suggestion: `reference one of: ${surface || "(function has no params)"}`,
+        fn: name
+      });
+      continue;
+    }
+    preds.push(le(v(seg.lhs), v(seg.rhs)));
+    display.push(`${seg.lhs} <= ${seg.rhs}`);
+  }
+  if (preds.length === 0) return void 0;
+  return { phi: and(...preds), display };
+}
 function checkSourceInner(filePath, source, file, phi, opts, issues, signatures, names, truncated, identityOpts = opts, depsFp, sidecarFp) {
   const hasRefineDirective = stripStringsKeepComments(source).includes("@nudo:contract");
   const entryNames = localNamedExports(source);
@@ -2367,6 +2432,8 @@ function checkSourceInner(filePath, source, file, phi, opts, issues, signatures,
     return eff;
   };
   for (const name of names) {
+    const assumePhi = assumePremisesPhiOf(name, source, file, issues);
+    const runSeeded = (body) => assumePhi === void 0 ? body() : withAssumePremises(assumePhi.phi, body);
     if (opts.skips?.has(name)) {
       const declared = opts.skips.get(name) ?? null;
       const meta = extractFn(source, name, file);
@@ -2411,19 +2478,21 @@ function checkSourceInner(filePath, source, file, phi, opts, issues, signatures,
       }
       continue;
     }
-    const g = generalizeFromAst(name, source, {
-      file,
-      refine: {
-        loadModule: refineLoad,
-        fromFile: refineFrom,
-        ...autoBind !== void 0 ? { autoBind } : {},
-        ...projectDir !== void 0 ? { projectDir } : {}
-      },
-      depsFp,
-      sidecarFp,
-      modules: opts.modules,
-      ...opts.inject ? { inject: opts.inject } : {}
-    });
+    const g = runSeeded(
+      () => generalizeFromAst(name, source, {
+        file,
+        refine: {
+          loadModule: refineLoad,
+          fromFile: refineFrom,
+          ...autoBind !== void 0 ? { autoBind } : {},
+          ...projectDir !== void 0 ? { projectDir } : {}
+        },
+        depsFp,
+        sidecarFp,
+        modules: opts.modules,
+        ...opts.inject ? { inject: opts.inject } : {}
+      })
+    );
     if (!g) {
       const isEntryCandidate = entryNames.has(name) || name === "default" || entryNames.has("default") && isDefaultExportName(source, name);
       if (isEntryCandidate && entryThrowsMode !== "off") {
@@ -2483,7 +2552,7 @@ function checkSourceInner(filePath, source, file, phi, opts, issues, signatures,
     const isEntry = entryNames.has(name) || name === "default" || entryNames.has("default") && isDefaultExportName(source, name) || name.includes(".") && entryNames.has(name);
     let throwsDisplay;
     if (isEntry && entryThrowsMode !== "off") {
-      const effects = collectEntryMayThrows(source, name, g, file, phi, opts);
+      const effects = runSeeded(() => collectEntryMayThrows(source, name, g, file, phi, opts));
       throwsDisplay = formatThrowsAbs(mayThrowEffectsToAbs(effects));
       const declared = extractDeclaredThrows(source, name) ?? effectiveInterfaceCached(name)?.throws?.kinds;
       const remaining = filterGateThrows(effects, declared, ignoreThrows);
@@ -2504,7 +2573,7 @@ function checkSourceInner(filePath, source, file, phi, opts, issues, signatures,
         });
       }
     } else if (isEntry) {
-      const effects = collectEntryMayThrows(source, name, g, file, phi, opts);
+      const effects = runSeeded(() => collectEntryMayThrows(source, name, g, file, phi, opts));
       throwsDisplay = formatThrowsAbs(mayThrowEffectsToAbs(effects));
     }
     const fmt = formatSigCached(g.symbolic, name);
@@ -2598,7 +2667,8 @@ function checkSourceInner(filePath, source, file, phi, opts, issues, signatures,
           name,
           display,
           eff.returns.constraint,
-          g.symbolic
+          g.symbolic,
+          assumePhi?.display
         );
         if (retIssues.some((i) => i.severity === "error")) returnViolated.add(name);
         issues.push(...retIssues);
@@ -2794,9 +2864,24 @@ function checkSourceInner(filePath, source, file, phi, opts, issues, signatures,
     }
   };
 }
-function checkReturnConstraint(fnName, cName, constraint, ret) {
+function checkReturnConstraint(fnName, cName, constraint, ret, assumeDisplay) {
   const proof = assertImplies(ret, constraint);
-  if (proof.status === "proved") return [];
+  if (proof.status === "proved") {
+    if (assumeDisplay && assumeDisplay.length > 0) {
+      return [
+        {
+          severity: "info",
+          code: "nudo:assume-relied",
+          message: `${fnName}: return contract proved via @nudo:assume ${assumeDisplay.join("; ")}`,
+          actual: `proof relies on user lemma${assumeDisplay.length > 1 ? "s" : ""}`,
+          expected: "engine verifies the obligation, not the lemma itself",
+          suggestion: "@nudo:assume is a user-supplied axiom \u2014 falsify it with concrete @nudo:case runs (nudo test)",
+          fn: fnName
+        }
+      ];
+    }
+    return [];
+  }
   const push = (severity, actual, expected, suggestion) => [
     {
       severity,

package/dist/internal.d.ts

@@ -1,7 +1,7 @@
-import { I as InterfaceSource, a as InterfaceTierOpts, p as parseSource, C as CheckIssue } from './projection-budget-Dey0IUJa.js';
-export { L as LeakBudget, b as LoadDepsFingerprint, M as MAX_PROMISE_MICROS, P as PROJECTION_MAX_DEPTH, c as ProjectionBudget, d as ProjectionStopReason, e as defaultLeakBudget, f as exceedsBudget, g as exportedNameOfLocal, h as extractAllLoadSpecs, i as getPromiseMicrosLength, l as leakIfNeeded, j as loadModuleDepsFingerprint, m as maybeLeak, n as normPath, r as resetLeakCounter, k as resolveDepPath, s as sidecarSpecsOf, o as stablePathKey, q as stablePathKeyGraph, t as termDepth, u as termNodes } from './projection-budget-Dey0IUJa.js';
-import { A as Abs, T as Term, c as AbsModuleExports, d as AstEnv } from './run-Bgj2tCrv.js';
-export { $ as $tryDigestSoft, e as $tryMarkSoft, f as $tryReleaseSoft, E as ERROR_FAMILY, g as EvalFallbackStats, M as MayThrowEffect, h as absLit, i as absNumLit, j as absStrLit, k as allAbsStr, l as clearPureCallMemo, m as clearPureMemo, n as enterEvalCallBudgetSession, o as errorTypeAbs, p as exitEvalCallBudgetSession, q as filterDeclaredThrows, r as filterGateThrows, s as filterIgnoredThrows, t as flushMayThrowEffects, u as formatThrowsAbs, v as getEvalCallBudgetState, w as getEvalFallbackStats, x as getMayThrowCollector, y as isThrowsIgnored, z as mayThrowEffectsToAbs, B as orphanMayThrowEffects, D as popMayThrowFrame, F as pushMayThrowFrame, G as recordMayThrow, H as resetEvalFallbackStats, I as runWithMayThrowSession, J as setMayThrowCollector, K as throwAbsToKinds, N as throwsKindCovered, O as withEvalBudgetOverride } from './run-Bgj2tCrv.js';
+import { I as InterfaceSource, a as InterfaceTierOpts, p as parseSource, C as CheckIssue } from './projection-budget-B0c9KEhd.js';
+export { L as LeakBudget, b as LoadDepsFingerprint, M as MAX_PROMISE_MICROS, P as PROJECTION_MAX_DEPTH, c as ProjectionBudget, d as ProjectionStopReason, e as defaultLeakBudget, f as exceedsBudget, g as exportedNameOfLocal, h as extractAllLoadSpecs, i as getPromiseMicrosLength, l as leakIfNeeded, j as loadModuleDepsFingerprint, m as maybeLeak, n as normPath, r as resetLeakCounter, k as resolveDepPath, s as sidecarSpecsOf, o as stablePathKey, q as stablePathKeyGraph, t as termDepth, u as termNodes } from './projection-budget-B0c9KEhd.js';
+import { A as Abs, T as Term, c as AbsModuleExports, d as AstEnv } from './run-dg1bW60I.js';
+export { $ as $tryDigestSoft, e as $tryMarkSoft, f as $tryReleaseSoft, E as ERROR_FAMILY, g as EvalFallbackStats, M as MayThrowEffect, h as absLit, i as absNumLit, j as absStrLit, k as allAbsStr, l as clearPureCallMemo, m as clearPureMemo, n as enterEvalCallBudgetSession, o as errorTypeAbs, p as exitEvalCallBudgetSession, q as filterDeclaredThrows, r as filterGateThrows, s as filterIgnoredThrows, t as flushMayThrowEffects, u as formatThrowsAbs, v as getEvalCallBudgetState, w as getEvalFallbackStats, x as getMayThrowCollector, y as isThrowsIgnored, z as mayThrowEffectsToAbs, B as orphanMayThrowEffects, D as popMayThrowFrame, F as pushMayThrowFrame, G as recordMayThrow, H as resetEvalFallbackStats, I as runWithMayThrowSession, J as setMayThrowCollector, K as throwAbsToKinds, N as throwsKindCovered, O as withEvalBudgetOverride } from './run-dg1bW60I.js';
 import { File, Node } from '@babel/types';
 
 /**

package/dist/internal.js

@@ -21,7 +21,7 @@ import {
   stableAnalyzeKeySource,
   stablePathKey,
   stablePathKeyGraph
-} from "./chunk-GHFGZ6PZ.js";
+} from "./chunk-5VGO4YJT.js";
 import {
   $tryDigestSoft,
   $tryMarkSoft,
@@ -169,7 +169,7 @@ import {
   withEvalBudgetOverride,
   withFnBudgetOverride,
   wrapPromise
-} from "./chunk-VKSROGOF.js";
+} from "./chunk-YRRR6AWI.js";
 
 // src/algebra/inlay.ts
 function listFunctions(source) {

package/dist/{projection-budget-Dey0IUJa.d.ts → projection-budget-B0c9KEhd.d.ts}

@@ -1,5 +1,5 @@
 import { File } from '@babel/types';
-import { A as Abs, T as Term, P as PrimName, a as Pred, L as LiteralValue, b as Phi, C as Confidence } from './run-Bgj2tCrv.js';
+import { A as Abs, T as Term, P as PrimName, a as Pred, L as LiteralValue, b as Phi, C as Confidence } from './run-dg1bW60I.js';
 
 declare function resetParseSourceCache(): void;
 declare function getParseSourceCacheSize(): number;

package/dist/{run-Bgj2tCrv.d.ts → run-dg1bW60I.d.ts}

@@ -840,7 +840,9 @@ type TranspiledCallResult = {
 declare function isAbsVal(v: unknown): v is Abs;
 /** 调用 runTranspiled 导出（捕获 $throw）。opts.phi：入口 Φ 种子
  *  （instantiate/symbolic 的约束入口——eval 侧路径条件收窄）。
- *  嵌套进入（导出桥 apply）继承外层预算；仅最外层宿主入口重置。 */
+ *  嵌套进入（导出桥 apply）继承外层预算；仅最外层宿主入口重置。
+ *  #152 assume 前提不设选项位：播种统一走 withAssumePremises 动态域
+ *  包裹（check.ts 的 runSeeded extent），单一机制无第二路径。 */
 declare function callTranspiledExportFull(exports: Record<string, unknown>, name: string, args: Abs[], opts?: {
     phi?: Phi;
 }): TranspiledCallResult;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nudojs/core",
-  "version": "1.10.2",
+  "version": "1.11.1",
   "engines": {
     "node": ">=20"
   },