@nudojs/core 1.13.0 → 1.14.1

package/dist/index.js

@@ -2,18 +2,21 @@ import "./chunk-US532PZA.js";
 import {
   INTERFACE_SOURCE_ABBR,
   NudoSidecarError,
+  actionsForIssue,
   buildArgsFromAssume,
   canSkipLiteralCallScan,
   collectAbsFreeVars,
   effectiveInterface,
   evictGeneralizeMemoForPaths,
   execNudoModule,
+  extractAllLoadSpecs,
   extractAssumeSegs,
   extractBalancedParens,
   extractDeclaredThrows,
   extractFileEnvNames,
   extractFn,
   extractFnBudget,
+  extractInvariantSegs,
   extractMockModuleRecords,
   extractNudoImportRecords,
   extractNudoImports,
@@ -22,8 +25,11 @@ import {
   findFnDirectiveScope,
   fnDirectiveCommentLines,
   fnTopLevelLocalNames,
+  formatCheckReport,
   formatConstraint,
   formatEffectiveInterfaceDisplay,
+  formatGithubAnnotations,
+  formatGitlabCodeQuality,
   formatInterfaceTierLine,
   generalizeAll,
   generalizeFromAst,
@@ -56,6 +62,8 @@ import {
   scanContractSegments,
   scanLiteralCalls,
   scanThrowsDecl,
+  serializeCheckJson,
+  serializeCheckJsonMulti,
   setInterfaceDiagCollector,
   setRefineDiagCollector,
   sidecarClosureFingerprint,
@@ -66,7 +74,7 @@ import {
   takeInterfaceDiagsSince,
   takeRefineDiags,
   takeRefineDiagsSince
-} from "./chunk-V2XC3V72.js";
+} from "./chunk-4GZPH6YL.js";
 import {
   $add,
   $arguments,
@@ -525,8 +533,9 @@ import {
   v,
   withAssumePremises,
   withExecPhi,
+  withInvariantSpecs,
   withVar
-} from "./chunk-A2PLG2QV.js";
+} from "./chunk-JMOQEJTD.js";
 
 // src/environment.ts
 function createEnvironment(parent, bindings = /* @__PURE__ */ new Map()) {
@@ -759,6 +768,9 @@ function formatDiagnostics(diags) {
   }).join("\n");
 }
 
+// src/algebra/check.ts
+import { isBuiltin } from "module";
+
 // src/algebra/postcondition.ts
 function proved() {
   return { status: "proved" };
@@ -2413,12 +2425,63 @@ function assumePremisesPhiOf(name, source, file, issues) {
   if (preds.length === 0) return void 0;
   return { phi: and(...preds), display };
 }
+function invariantSpecsOf(name, source, file, issues) {
+  const segs = extractInvariantSegs(source, name);
+  if (segs.length === 0) return void 0;
+  const meta = extractFn(source, name, file);
+  const bindable = /* @__PURE__ */ new Set([
+    ...contractParamNameSet(meta?.formals ?? []),
+    ...meta?.params ?? [],
+    ...fnTopLevelLocalNames(meta?.body)
+  ]);
+  const surface = [...bindable].join(", ");
+  const specs = [];
+  const display = [];
+  for (const seg of segs) {
+    if (seg.kind === "bad") {
+      issues.push({
+        severity: "warning",
+        code: "nudo:invariant-invalid",
+        message: `${name}: malformed @nudo:invariant '${seg.raw}' (expected <name><path> <rel> <number>; path = [*] or .member steps)`,
+        actual: seg.raw,
+        expected: "<name><path> <rel> <number>",
+        suggestion: "loop-carried bounds: @nudo:invariant dp[*][*] >= 0 \u2014 scalar: @nudo:invariant last >= 1",
+        fn: name
+      });
+      continue;
+    }
+    if (!bindable.has(seg.name)) {
+      issues.push({
+        severity: "warning",
+        code: "nudo:invariant-invalid",
+        message: `${name}: @nudo:invariant name not bound as a parameter or top-level local (${seg.name})`,
+        actual: seg.name,
+        expected: surface || "(no params/locals)",
+        suggestion: `reference one of: ${surface || "(no params or top-level locals)"}`,
+        fn: name
+      });
+      continue;
+    }
+    specs.push({ name: seg.name, path: seg.path, rel: seg.rel, value: seg.value });
+    display.push(seg.display);
+  }
+  if (specs.length === 0) return void 0;
+  return { specs, display };
+}
+var OPAQUE_EVIDENCE_HINT = "add @nudo:case or a call site";
+var OPAQUE_ENV_HINT = "declare the runtime env to type native modules: '/// @nudo:env node' (or web/es) \u2014 see guides/env-harvest.md";
+function isBuiltinModuleSpec(spec) {
+  if (spec.startsWith(".") || spec.startsWith("/")) return false;
+  const base = (spec.startsWith("node:") ? spec.slice("node:".length) : spec).split("/")[0];
+  return base.length > 0 && isBuiltin(base);
+}
 function checkSourceInner(filePath, source, file, phi, opts, issues, signatures, names, truncated, identityOpts = opts, depsFp, sidecarFp) {
   const hasRefineDirective = stripStringsKeepComments(source).includes("@nudo:contract");
   const entryNames = localNamedExports(source);
   const exportedNames = sidecarFp !== void 0 ? entryNames : void 0;
   const entryThrowsMode = opts.entryThrows ?? "error";
   const ignoreThrows = opts.ignoreThrows;
+  const opaqueEnvHint = Object.keys(opts.inject?.envGlobals ?? {}).length === 0 && extractFileEnvNames(source).length === 0 && extractAllLoadSpecs(source).some(isBuiltinModuleSpec);
   const driftCandidates = [];
   const returnContracts = /* @__PURE__ */ new Map();
   const returnViolated = /* @__PURE__ */ new Set();
@@ -2441,7 +2504,11 @@ function checkSourceInner(filePath, source, file, phi, opts, issues, signatures,
   };
   for (const name of names) {
     const assumePhi = assumePremisesPhiOf(name, source, file, issues);
-    const runSeeded = (body) => assumePhi === void 0 ? body() : withAssumePremises(assumePhi.phi, body);
+    const inv = invariantSpecsOf(name, source, file, issues);
+    const runSeeded = (body) => {
+      if (assumePhi === void 0 && inv === void 0) return body();
+      return withAssumePremises(assumePhi?.phi ?? pTrue, () => withInvariantSpecs(inv?.specs ?? [], body));
+    };
     if (opts.skips?.has(name)) {
       const declared = opts.skips.get(name) ?? null;
       const meta = extractFn(source, name, file);
@@ -2676,7 +2743,8 @@ function checkSourceInner(filePath, source, file, phi, opts, issues, signatures,
           display,
           eff.returns.constraint,
           g.symbolic,
-          assumePhi?.display
+          assumePhi?.display,
+          inv?.display
         );
         if (retIssues.some((i) => i.severity === "error")) returnViolated.add(name);
         issues.push(...retIssues);
@@ -2694,7 +2762,7 @@ function checkSourceInner(filePath, source, file, phi, opts, issues, signatures,
         severity: "info",
         code: "nudo:opaque-result",
         message: `${name}(...): conf=opaque (path not covered, or native)`,
-        suggestion: "add @nudo:case or a call site",
+        suggestion: opaqueEnvHint ? OPAQUE_ENV_HINT : OPAQUE_EVIDENCE_HINT,
         fn: name
       });
     }
@@ -2877,23 +2945,33 @@ function checkSourceInner(filePath, source, file, phi, opts, issues, signatures,
     budget: { ...budget }
   };
 }
-function checkReturnConstraint(fnName, cName, constraint, ret, assumeDisplay) {
+function checkReturnConstraint(fnName, cName, constraint, ret, assumeDisplay, invariantDisplay) {
   const proof = assertImplies(ret, constraint);
   if (proof.status === "proved") {
+    const relied = [];
     if (assumeDisplay && assumeDisplay.length > 0) {
-      return [
-        {
-          severity: "info",
-          code: "nudo:assume-relied",
-          message: `${fnName}: return contract proved via @nudo:assume ${assumeDisplay.join("; ")}`,
-          actual: `proof relies on user lemma${assumeDisplay.length > 1 ? "s" : ""}`,
-          expected: "engine verifies the obligation, not the lemma itself",
-          suggestion: "@nudo:assume is a user-supplied axiom \u2014 falsify it with concrete @nudo:case runs (nudo test)",
-          fn: fnName
-        }
-      ];
+      relied.push({
+        severity: "info",
+        code: "nudo:assume-relied",
+        message: `${fnName}: return contract proved via @nudo:assume ${assumeDisplay.join("; ")}`,
+        actual: `proof relies on user lemma${assumeDisplay.length > 1 ? "s" : ""}`,
+        expected: "engine verifies the obligation, not the lemma itself",
+        suggestion: "@nudo:assume is a user-supplied axiom \u2014 falsify it with concrete @nudo:case runs (nudo test)",
+        fn: fnName
+      });
+    }
+    if (invariantDisplay && invariantDisplay.length > 0) {
+      relied.push({
+        severity: "info",
+        code: "nudo:invariant-relied",
+        message: `${fnName}: return contract proved via @nudo:invariant ${invariantDisplay.join("; ")}`,
+        actual: `proof relies on user invariant${invariantDisplay.length > 1 ? "s" : ""}`,
+        expected: "engine verifies the obligation, not the loop invariant itself",
+        suggestion: "@nudo:invariant is a user-supplied axiom \u2014 falsify it with concrete @nudo:case runs (nudo test)",
+        fn: fnName
+      });
     }
-    return [];
+    return relied;
   }
   const push = (severity, actual, expected, suggestion) => [
     {
@@ -2921,361 +2999,6 @@ function checkReturnConstraint(fnName, cName, constraint, ret, assumeDisplay) {
     `${proof.reason}; add a precondition, narrow the return expression, or relax the return contract`
   );
 }
-
-// src/algebra/check-report.ts
-function actionsForIssue(i) {
-  const draft = {
-    kind: "draft",
-    command: "nudo contract --draft",
-    label: "emit a sidecar draft you can edit"
-  };
-  switch (i.code) {
-    case "nudo:constraint-violated":
-      return [
-        {
-          kind: "callsite",
-          label: "use a value satisfying the constraint",
-          ...i.expected ? { hint: i.expected } : {}
-        },
-        {
-          kind: "relax",
-          label: "relax the precondition (edit *.nudo.js / @nudo:contract)",
-          ...i.expected ? { hint: i.expected } : {}
-        },
-        draft
-      ];
-    case "nudo:assign-mismatch":
-      return [
-        {
-          kind: "callsite",
-          label: "align the assigned value with the existing shape",
-          ...i.expected ? { hint: i.expected } : {}
-        },
-        draft
-      ];
-    case "nudo:entry-may-throw":
-      return [
-        {
-          kind: "draft",
-          command: "nudo contract --draft",
-          label: "narrow the entry with a sidecar fn({ \u2026 }) param contract \u2014 most honest fix for helpers (also tightens the signature)",
-          ...i.fn ? { hint: i.fn } : {}
-        },
-        {
-          kind: "relax",
-          label: "declare intentional fail-fast: @nudo:throws Error (or case `!! throws`)",
-          ...i.fn ? { hint: i.fn } : {}
-        },
-        {
-          kind: "info",
-          label: "or refine / guard / try-catch the entry so it is total"
-        },
-        {
-          kind: "ignore-throws",
-          command: "nudo check --ignore-throws TypeError",
-          label: "migration switch: ignore this throw class on L2"
-        }
-      ];
-    case "nudo:unproven-return":
-      return [
-        {
-          kind: "relax",
-          label: `relax the return contract${i.fn ? ` of ${i.fn}` : ""} to the inferred surface (review the diff \u2014 not a silent green)`,
-          ...i.expected ? { hint: i.expected } : {}
-        },
-        draft,
-        {
-          kind: "info",
-          label: "or narrow the return expression / add a precondition so the bound is implied"
-        }
-      ];
-    case "nudo:unknown-inference":
-    case "nudo:opaque-result":
-      return [
-        { kind: "mock", label: "pin the native/unknown face with @nudo:mock" },
-        { kind: "assume", command: "nudo check --assume", label: "state preconditions via --assume" },
-        { kind: "info", label: "or add a call site / @nudo:case for evidence" }
-      ];
-    case "nudo:arg-opaque":
-    case "nudo:constraint-unproven":
-      return [
-        { kind: "assume", command: "nudo check --assume", label: "state preconditions via --assume" },
-        { kind: "info", label: "add a call site or @nudo:case" }
-      ];
-    case "nudo:fork-truncated":
-    case "nudo:promise-micro-truncated":
-    case "nudo:promise-micro-error":
-      return [
-        {
-          kind: "info",
-          label: "results widened to unknown \u2014 raise budget (@nudo:budget forks/calls/depth on the function) or narrow control flow"
-        }
-      ];
-    case "nudo:loop-truncated":
-      return [
-        {
-          kind: "info",
-          label: "loop state widened \u2014 the exit condition stayed concrete-true past the iteration cap; make the bound data-dependent (abstract) or pin the result with @nudo:case / @nudo:contract"
-        }
-      ];
-    case "nudo:recursion-truncated":
-      return [
-        {
-          kind: "info",
-          label: i.reason === "cycle" ? "call cycle: same abstract arguments already on the stack \u2014 raising @nudo:budget cannot lift it; make the arguments vary per recursion level or declare @nudo:contract" : i.reason === "depth" || i.reason === "calls" || i.reason === "budget" ? `results widened to unknown \u2014 raise budget (@nudo:budget ${i.reason === "depth" ? "depth" : i.reason === "calls" ? "calls" : "calls/depth"} on the function) or narrow the recursion` : "results widened to unknown \u2014 raise budget (@nudo:budget calls/depth on the function) or narrow control flow"
-        }
-      ];
-    case "nudo:host-effect-blocked":
-      return [
-        { kind: "mock", label: "pin the host API with @nudo:mock / @nudo:env" },
-        { kind: "info", label: "results widened to unknown \u2014 or feed the value in from a call site" }
-      ];
-    case "nudo:interface-drift":
-      return [
-        {
-          kind: "emit",
-          command: "nudo contract --emit",
-          label: "refresh the @generated segment"
-        }
-      ];
-    case "nudo:dual-entry":
-      return [
-        {
-          kind: "info",
-          label: "browser/node records do not cross files \u2014 analyze the entry you ship; mock or skip the other variant"
-        }
-      ];
-    default:
-      return i.suggestion ? [{ kind: "info", label: i.suggestion }] : [];
-  }
-}
-function serializeCheckJson(r) {
-  return {
-    version: 1,
-    file: r.file,
-    ok: r.ok,
-    summary: { ...r.summary },
-    signatures: r.signatures.map((s) => ({
-      name: s.name,
-      params: [...s.params],
-      ...s.paramTypes ? { paramTypes: [...s.paramTypes] } : {},
-      display: s.display,
-      detail: s.detail,
-      conf: s.conf,
-      abs: formatAbs(s.abs),
-      ...s.throws ? { throws: s.throws } : {},
-      ...s.entry ? { entry: true } : {}
-    })),
-    issues: r.issues.map((i) => {
-      const acts = i.actions ?? actionsForIssue(i);
-      return {
-        severity: i.severity,
-        code: i.code,
-        message: i.message,
-        ...i.fn !== void 0 ? { fn: i.fn } : {},
-        ...i.line !== void 0 ? { line: i.line } : {},
-        ...i.column !== void 0 ? { column: i.column } : {},
-        ...i.actual !== void 0 ? { actual: i.actual } : {},
-        ...i.expected !== void 0 ? { expected: i.expected } : {},
-        ...i.suggestion !== void 0 ? { suggestion: i.suggestion } : {},
-        ...i.reason !== void 0 ? { reason: i.reason } : {},
-        ...acts.length > 0 ? { actions: acts } : {}
-      };
-    }),
-    ...r.budget ? { budget: { ...r.budget } } : {}
-  };
-}
-function serializeCheckJsonMulti(reports) {
-  const summary = {
-    errors: 0,
-    warnings: 0,
-    infos: 0,
-    functions: 0,
-    files: reports.length
-  };
-  let calls = 0;
-  let forks = 0;
-  let maxCalls = 0;
-  let maxForks = 0;
-  let callTruncated = false;
-  let forkTruncated = false;
-  let evalCalls = 0;
-  let maxEvalCalls = 0;
-  let evalCallTruncated = false;
-  let cycleTruncated = false;
-  let loopTruncated = false;
-  const reasons = /* @__PURE__ */ new Set();
-  for (const r of reports) {
-    summary.errors += r.summary.errors;
-    summary.warnings += r.summary.warnings;
-    summary.infos += r.summary.infos;
-    summary.functions += r.summary.functions;
-    if (r.budget) {
-      calls += r.budget.calls;
-      forks += r.budget.forks;
-      maxCalls = Math.max(maxCalls, r.budget.maxCalls);
-      maxForks = Math.max(maxForks, r.budget.maxForks);
-      callTruncated = callTruncated || r.budget.callTruncated;
-      forkTruncated = forkTruncated || r.budget.forkTruncated;
-      evalCalls += r.budget.evalCalls ?? 0;
-      maxEvalCalls = Math.max(maxEvalCalls, r.budget.maxEvalCalls ?? 0);
-      evalCallTruncated = evalCallTruncated || (r.budget.evalCallTruncated ?? false);
-      cycleTruncated = cycleTruncated || (r.budget.cycleTruncated ?? false);
-      loopTruncated = loopTruncated || (r.budget.loopTruncated ?? false);
-      for (const x of r.budget.reasons ?? []) reasons.add(x);
-    }
-  }
-  const budgetTruncated = callTruncated || evalCallTruncated || forkTruncated || loopTruncated;
-  return {
-    version: 1,
-    kind: "multi",
-    ok: reports.every((r) => r.ok),
-    summary: {
-      ...summary,
-      ...budgetTruncated ? { budgetTruncated: true } : {}
-    },
-    ...budgetTruncated || reports.some((r) => r.budget) ? {
-      budget: {
-        truncated: budgetTruncated,
-        callTruncated,
-        forkTruncated,
-        calls,
-        maxCalls,
-        forks,
-        maxForks,
-        evalCalls,
-        maxEvalCalls,
-        evalCallTruncated,
-        cycleTruncated,
-        loopTruncated,
-        reasons: [...reasons].sort()
-      }
-    } : {},
-    reports
-  };
-}
-var CONTRACT_FIX_CODES = /* @__PURE__ */ new Set([
-  "nudo:constraint-violated",
-  "nudo:assign-mismatch",
-  "nudo:arg-structure",
-  "nudo:interface-domain-exceeds",
-  "nudo:entry-may-throw",
-  "nudo:missing-slot"
-]);
-function formatCheckReport(r, opts = {}) {
-  const lines = [];
-  lines.push(`nudo check  ${r.file}`);
-  lines.push(r.ok ? "OK" : "FAILED");
-  lines.push(
-    `  ${r.summary.errors} error \xB7 ${r.summary.warnings} warning \xB7 ${r.summary.infos} info \xB7 ${r.summary.functions} fn`
-  );
-  if (r.budget?.truncated) {
-    const onlyLoop = r.budget.loopTruncated && !r.budget.callTruncated && !r.budget.evalCallTruncated && !r.budget.forkTruncated;
-    lines.push("");
-    lines.push("budget");
-    lines.push(
-      `  truncated  calls ${r.budget.calls}/${r.budget.maxCalls} \xB7 eval calls ${r.budget.evalCalls}/${r.budget.maxEvalCalls} \xB7 forks ${r.budget.forks}/${r.budget.maxForks}${r.budget.callTruncated ? "  (calls)" : ""}${r.budget.evalCallTruncated ? "  (eval calls)" : ""}${r.budget.forkTruncated ? "  (forks)" : ""}${r.budget.loopTruncated ? "  (loop iters)" : ""}`
-    );
-    lines.push(
-      r.budget.cycleTruncated ? `  \u2192 some results widened to unknown (not a contract failure) \u2014 includes call cycles (same abstract args; a budget cannot lift them)` : onlyLoop ? `  \u2192 loop state widened (iteration budget, not a contract failure) \u2014 @nudo:budget does not apply; make the bound data-dependent or pin with @nudo:case / @nudo:contract` : `  \u2192 some results widened to unknown (not a contract failure) \u2014 raise @nudo:budget / nudo.analysis.maxForks or simplify recursion`
-    );
-  }
-  if (r.signatures.length > 0) {
-    lines.push("");
-    lines.push("signatures");
-    for (const s of r.signatures) {
-      const paramStr = s.paramTypes && s.paramTypes.length > 0 ? s.params.map((p, i) => `${p}: ${s.paramTypes[i] ?? "any"}`).join(", ") : s.params.join(", ");
-      const throwsStr = s.throws ? `  throws ${s.throws}` : "";
-      const displayBase = s.display.replace(/\s+throws\s+[\s\S]+$/, "").trim();
-      const shapeK = s.abs?.shape?.k;
-      const looksLikeFakeAny = shapeK === "any" && displayBase.length > 0 && !/^any(\b|$)/.test(displayBase);
-      const retStr = !looksLikeFakeAny && shapeK ? formatShape(s.abs) || displayBase.replace(/\s+#\w+$/, "").trim() : displayBase.replace(/\s+#\w+$/, "").trim();
-      lines.push(`  ${s.name}(${paramStr}) => ${retStr}${throwsStr}`);
-      if (opts.verbose) {
-        for (const ln of s.detail.split("\n").slice(1)) {
-          lines.push(`  ${ln}`);
-        }
-      }
-    }
-  }
-  if (r.issues.length === 0) {
-    lines.push("");
-    lines.push("(no issues)");
-  } else {
-    lines.push("");
-    lines.push("issues");
-    for (const i of r.issues) {
-      const loc = i.line != null ? `L${i.line}` : "";
-      const head = [i.severity.toUpperCase(), loc, i.fn].filter(Boolean).join(" ");
-      lines.push(`  [${head}] ${i.message}  (${i.code})`);
-      const showDetail = i.severity === "error" || opts.verbose;
-      if (showDetail && i.actual) lines.push(`      actual:   ${i.actual}`);
-      if (showDetail && i.expected) lines.push(`      expected: ${i.expected}`);
-      if (i.suggestion) {
-        lines.push(`      \u2192 ${i.suggestion}`);
-      } else if (CONTRACT_FIX_CODES.has(i.code)) {
-        lines.push(`      \u2192 add a refine / sidecar contract, or fix the call-site value`);
-      }
-      if (CONTRACT_FIX_CODES.has(i.code)) {
-        lines.push(`      fix:  nudo contract --draft  (emit a sidecar draft you can edit)`);
-      }
-    }
-  }
-  return lines.join("\n");
-}
-function escapeGhaData(s) {
-  return s.replace(/%/g, "%25").replace(/\r/g, "%0D").replace(/\n/g, "%0A");
-}
-function escapeGhaProp(s) {
-  return escapeGhaData(s).replace(/:/g, "%3A").replace(/,/g, "%2C");
-}
-function formatGithubAnnotations(r, opts = {}) {
-  const lines = [];
-  let file = r.file;
-  if (opts.workspaceRoot && file.startsWith(opts.workspaceRoot)) {
-    file = file.slice(opts.workspaceRoot.length).replace(/^[/\\]/, "");
-  }
-  for (const i of r.issues) {
-    const level = i.severity === "error" ? "error" : i.severity === "warning" ? "warning" : "notice";
-    const line = i.line ?? 1;
-    const col = (i.column ?? 0) + 1;
-    const title = escapeGhaProp(i.code);
-    const msgBits = [i.message];
-    if (i.actual && i.expected) msgBits.push(`${i.actual} \u22AD ${i.expected}`);
-    else if (i.suggestion) msgBits.push(i.suggestion);
-    if (CONTRACT_FIX_CODES.has(i.code)) {
-      msgBits.push(`fix: nudo contract --draft`);
-    }
-    const msg = escapeGhaData(msgBits.join(" \xB7 "));
-    const props = [
-      `file=${escapeGhaProp(file)}`,
-      `line=${line}`,
-      `col=${col}`,
-      `title=${title}`
-    ].join(",");
-    lines.push(`::${level} ${props}::${msg}`);
-  }
-  return lines.join("\n");
-}
-function formatGitlabCodeQuality(r, opts = {}) {
-  let file = r.file;
-  if (opts.workspaceRoot && file.startsWith(opts.workspaceRoot)) {
-    file = file.slice(opts.workspaceRoot.length).replace(/^[/\\]/, "");
-  }
-  return r.issues.map((i) => {
-    const begin = i.line ?? 1;
-    const severity = i.severity === "error" ? "major" : i.severity === "warning" ? "minor" : "info";
-    const description = i.actual && i.expected ? `${i.message} (${i.actual} \u22AD ${i.expected})` : i.message;
-    const fingerprint = `${file}:${i.code}:${begin}:${i.message}`;
-    return {
-      description,
-      check_name: i.code,
-      fingerprint,
-      severity,
-      location: { path: file, lines: { begin } }
-    };
-  });
-}
 export {
   $add,
   $arguments,

package/dist/internal.d.ts

@@ -1,7 +1,7 @@
-import { I as InterfaceSource, a as InterfaceTierOpts, p as parseSource, C as CheckIssue } from './projection-budget-DPPRBOLp.js';
-export { L as LeakBudget, b as LoadDepsFingerprint, M as MAX_PROMISE_MICROS, P as PROJECTION_MAX_DEPTH, c as ProjectionBudget, d as ProjectionStopReason, e as defaultLeakBudget, f as exceedsBudget, g as exportedNameOfLocal, h as extractAllLoadSpecs, i as getPromiseMicrosLength, l as leakIfNeeded, j as loadModuleDepsFingerprint, m as maybeLeak, n as normPath, r as resetLeakCounter, k as resolveDepPath, s as sidecarSpecsOf, o as stablePathKey, q as stablePathKeyGraph, t as termDepth, u as termNodes } from './projection-budget-DPPRBOLp.js';
-import { A as Abs, T as Term, c as AbsModuleExports, d as AstEnv } from './run-DhSqP3in.js';
-export { $ as $tryDigestSoft, e as $tryMarkSoft, f as $tryReleaseSoft, E as ERROR_FAMILY, g as EvalFallbackStats, M as MayThrowEffect, h as absLit, i as absNumLit, j as absStrLit, k as allAbsStr, l as clearPureCallMemo, m as clearPureMemo, n as enterEvalCallBudgetSession, o as errorTypeAbs, p as exitEvalCallBudgetSession, q as filterDeclaredThrows, r as filterGateThrows, s as filterIgnoredThrows, t as flushMayThrowEffects, u as formatThrowsAbs, v as getEvalCallBudgetState, w as getEvalFallbackStats, x as getMayThrowCollector, y as isThrowsIgnored, z as mayThrowEffectsToAbs, B as orphanMayThrowEffects, D as popMayThrowFrame, F as pushMayThrowFrame, G as recordMayThrow, H as resetEvalFallbackStats, I as runWithMayThrowSession, J as setMayThrowCollector, K as throwAbsToKinds, N as throwsKindCovered, O as withEvalBudgetOverride } from './run-DhSqP3in.js';
+import { I as InterfaceSource, a as InterfaceTierOpts, p as parseSource, C as CheckIssue } from './projection-budget-07VnMktV.js';
+export { L as LeakBudget, b as LoadDepsFingerprint, M as MAX_PROMISE_MICROS, P as PROJECTION_MAX_DEPTH, c as ProjectionBudget, d as ProjectionStopReason, e as budgetAttributionSegs, f as defaultLeakBudget, g as exceedsBudget, h as exportedNameOfLocal, i as extractAllLoadSpecs, j as getPromiseMicrosLength, l as leakIfNeeded, k as loadModuleDepsFingerprint, m as maybeLeak, n as normPath, r as resetLeakCounter, o as resolveDepPath, s as sidecarSpecsOf, q as stablePathKey, t as stablePathKeyGraph, u as termDepth, v as termNodes } from './projection-budget-07VnMktV.js';
+import { A as Abs, T as Term, c as AbsModuleExports, d as AstEnv } from './run-DfloWX6i.js';
+export { $ as $tryDigestSoft, e as $tryMarkSoft, f as $tryReleaseSoft, E as ERROR_FAMILY, g as EvalFallbackStats, M as MayThrowEffect, h as absLit, i as absNumLit, j as absStrLit, k as allAbsStr, l as clearPureCallMemo, m as clearPureMemo, n as enterEvalCallBudgetSession, o as errorTypeAbs, p as exitEvalCallBudgetSession, q as filterDeclaredThrows, r as filterGateThrows, s as filterIgnoredThrows, t as flushMayThrowEffects, u as formatThrowsAbs, v as getEvalCallBudgetState, w as getEvalFallbackStats, x as getMayThrowCollector, y as isThrowsIgnored, z as mayThrowEffectsToAbs, B as orphanMayThrowEffects, D as popMayThrowFrame, F as pushMayThrowFrame, G as recordMayThrow, H as resetEvalFallbackStats, I as runWithMayThrowSession, J as setMayThrowCollector, K as throwAbsToKinds, N as throwsKindCovered, O as withEvalBudgetOverride } from './run-DfloWX6i.js';
 import { File, Node } from '@babel/types';
 
 /**
@@ -89,6 +89,18 @@ type AbsBudgetStats = {
     loopTruncated: boolean;
     /** 调用截断原因集合（A+B；稳定排序，进 JSON） */
     reasons: AbsTruncationReason[];
+    /** A 路径（enterCall 抽象调用）本轮截断原因——上屏归因用（与合并集 reasons 分流） */
+    callReasons: AbsTruncationReason[];
+    /** A 路径最大进入深度；depth 截断时 = 触发时深度（== 触发时生效上限） */
+    depth: number;
+    /** A 路径 depth 上限；depth 截断时 = 触发时生效上限（@nudo:budget 覆盖亦如实） */
+    maxDepth: number;
+    /** B 路径（$callNamed 求值调用）本轮截断原因 */
+    evalReasons: AbsTruncationReason[];
+    /** B 路径最大进入深度；depth 截断时 = 触发时深度（== 触发时生效上限） */
+    evalDepth: number;
+    /** B 路径 depth 上限；depth 截断时 = 触发时生效上限（@nudo:budget 覆盖亦如实） */
+    maxEvalDepth: number;
 };
 declare function getAbsCallBudgetStats(): AbsBudgetStats;
 /** 宿主入口（runTranspiled / callTranspiledExportFull / check）前重置 */
@@ -170,6 +182,10 @@ declare function resetEvalForkBudget(): void;
 /** $fork 入口：超限放弃该分支（调用方返回 unknown = 最保守，安全）。 */
 declare function bumpEvalForkBudget(): boolean;
 
+/** 每轮模块图求值入口清空：上一轮 refresh 闭包只指向已死模块作用域，
+ * 语义无害但滞留膨胀；新图重新注册（evalAbsModuleGraph 入口调用）。 */
+declare function clearLiveImportRefreshers(): void;
+
 /**
  * 可 ALS 隔离的模块级可变槽。
  * 语义：`get`/`set` 作用于当前最内层 store（无作用域 = fallback）；
@@ -774,4 +790,4 @@ declare function runWithEvalMissingSlot<T>(enabled: boolean, body: () => T): T;
  */
 declare function noteObjSlotMissing(recv: Abs | undefined, name: string, loc?: [number, number]): boolean;
 
-export { type AbsBudgetStats, type AbsInlay, type ArgDerivation, type ClassDef, type CollectAbsInlaysOpts, type CollectorScopeParticipant, type DerivationNode, type DiagChannel, type EvalMemberDiag, FORK_TRUNCATION_LABEL, type FnFp, HOST_EFFECT_LABEL_PREFIX, type InjectedDomainEvidenceOpts, type InjectedDomainRecord, MAX_CALL_DEPTH, MAX_EVAL_TOTAL_FORKS, MAX_TOTAL_CALLS, type MethodDef, OBJECT_PROTO_NAMES, PROMISE_MICRO_ERROR_LABEL, PROMISE_MICRO_OVERFLOW_LABEL, type ScopedDiagChannel, type ScopedSlot, type StringLiteralSpan, type TemplateMeta, type TemplatePartDesc, type TemplatePartView, type TemplatePredicateDecision, abortDerivationSession, absTemplateViews, allFixedTextOfViews, anyMemberResult, awaitAbs, beginDerivationSession, bumpEvalForkBudget, callBudgetKey, canSkipLiteralCallScan, checkInjectedDomainEvidence, classChainNames, classFromMethods, coerceAsyncReturn, collectAbsInlays, concatString, createDiagChannel, createScopedDiagChannel, createScopedSlot, createTemplateAbs, decideEndsWith, decideIncludes, decideStartsWith, defineClass, definitelyUncallableMember, denoteGuard, derivationChain, endDerivationSession, enterCall, escapeTemplateTypeFixed, exitCall, fixedLengthOfViews, fnFingerprints, formatObjectKey, formatTemplateNameViews, generalizeSourceKeyPart, getAbsCallBudgetStats, getAbsOrigin, getClass, getClassChain, getDerivation, getEvalForkBudgetLimit, getEvalForkCount, getFnNameAndBodies, hasDerivationSession, hashSource, instanceOf, instantiateClass, isEvalMissingSlotEnabled, isJsBindingIdent, isJsIdent, isNullishAbs, isTemplateLike, knownPrefixOfViews, knownSuffixOfViews, listTopFunctions, lookupMethod, lookupMethodWithOwner, lookupSuperMethod, maskCommentsAndStrings, mergeAdjacentFixedViews, noteAbsTruncation, noteAnyMemberMayThrow, noteDerivationAdd, noteDerivationJoin, noteEvalForkTruncation, noteHostEffectBlocked, noteMemberDispatchMiss, noteNullishMemberThrows, noteObjSlotMissing, notePrimMemberMissing, noteUnknownMemberMissing, popCallLoc, projectBrand, projectDerivationDsl, pushCallLoc, recordMemberDiag, registerCollectorScopeParticipant, resetAbsCallBudget, resetEvalForkBudget, resetFnFpCache, resetHashSourceCache, runWithCollectorScope, runWithEvalMissingSlot, safeMemberAccess, sanitizeCommentText, scanStringLiterals, setAbsTruncationCollector, setDerivation, setDerivationCollector, setEvalForkBudgetLimit, setEvalMissingSlotEnabled, setMemberDiagCollector, sourceHasCjsExports, sourceHasModuleDependency, sourceHasRequireCall, stableAnalyzeKeySource, stableCallId, stripCommentsAndStrings, stripStringsKeepComments, superNameOf, tagAbsOrigin, tagDerivationRoot, templateMatchesValue, templatePartsOf, termKey, toJsBindingIdent, truncatedAbs, viewTemplateParts, withFnBudgetOverride, wrapPromise };
+export { type AbsBudgetStats, type AbsInlay, type ArgDerivation, type ClassDef, type CollectAbsInlaysOpts, type CollectorScopeParticipant, type DerivationNode, type DiagChannel, type EvalMemberDiag, FORK_TRUNCATION_LABEL, type FnFp, HOST_EFFECT_LABEL_PREFIX, type InjectedDomainEvidenceOpts, type InjectedDomainRecord, MAX_CALL_DEPTH, MAX_EVAL_TOTAL_FORKS, MAX_TOTAL_CALLS, type MethodDef, OBJECT_PROTO_NAMES, PROMISE_MICRO_ERROR_LABEL, PROMISE_MICRO_OVERFLOW_LABEL, type ScopedDiagChannel, type ScopedSlot, type StringLiteralSpan, type TemplateMeta, type TemplatePartDesc, type TemplatePartView, type TemplatePredicateDecision, abortDerivationSession, absTemplateViews, allFixedTextOfViews, anyMemberResult, awaitAbs, beginDerivationSession, bumpEvalForkBudget, callBudgetKey, canSkipLiteralCallScan, checkInjectedDomainEvidence, classChainNames, classFromMethods, clearLiveImportRefreshers, coerceAsyncReturn, collectAbsInlays, concatString, createDiagChannel, createScopedDiagChannel, createScopedSlot, createTemplateAbs, decideEndsWith, decideIncludes, decideStartsWith, defineClass, definitelyUncallableMember, denoteGuard, derivationChain, endDerivationSession, enterCall, escapeTemplateTypeFixed, exitCall, fixedLengthOfViews, fnFingerprints, formatObjectKey, formatTemplateNameViews, generalizeSourceKeyPart, getAbsCallBudgetStats, getAbsOrigin, getClass, getClassChain, getDerivation, getEvalForkBudgetLimit, getEvalForkCount, getFnNameAndBodies, hasDerivationSession, hashSource, instanceOf, instantiateClass, isEvalMissingSlotEnabled, isJsBindingIdent, isJsIdent, isNullishAbs, isTemplateLike, knownPrefixOfViews, knownSuffixOfViews, listTopFunctions, lookupMethod, lookupMethodWithOwner, lookupSuperMethod, maskCommentsAndStrings, mergeAdjacentFixedViews, noteAbsTruncation, noteAnyMemberMayThrow, noteDerivationAdd, noteDerivationJoin, noteEvalForkTruncation, noteHostEffectBlocked, noteMemberDispatchMiss, noteNullishMemberThrows, noteObjSlotMissing, notePrimMemberMissing, noteUnknownMemberMissing, popCallLoc, projectBrand, projectDerivationDsl, pushCallLoc, recordMemberDiag, registerCollectorScopeParticipant, resetAbsCallBudget, resetEvalForkBudget, resetFnFpCache, resetHashSourceCache, runWithCollectorScope, runWithEvalMissingSlot, safeMemberAccess, sanitizeCommentText, scanStringLiterals, setAbsTruncationCollector, setDerivation, setDerivationCollector, setEvalForkBudgetLimit, setEvalMissingSlotEnabled, setMemberDiagCollector, sourceHasCjsExports, sourceHasModuleDependency, sourceHasRequireCall, stableAnalyzeKeySource, stableCallId, stripCommentsAndStrings, stripStringsKeepComments, superNameOf, tagAbsOrigin, tagDerivationRoot, templateMatchesValue, templatePartsOf, termKey, toJsBindingIdent, truncatedAbs, viewTemplateParts, withFnBudgetOverride, wrapPromise };

package/dist/internal.js

@@ -1,4 +1,5 @@
 import {
+  budgetAttributionSegs,
   canSkipLiteralCallScan,
   checkInjectedDomainEvidence,
   createDiagChannel,
@@ -21,7 +22,7 @@ import {
   stableAnalyzeKeySource,
   stablePathKey,
   stablePathKeyGraph
-} from "./chunk-V2XC3V72.js";
+} from "./chunk-4GZPH6YL.js";
 import {
   $tryDigestSoft,
   $tryMarkSoft,
@@ -52,6 +53,7 @@ import {
   callBudgetKey,
   classChainNames,
   classFromMethods,
+  clearLiveImportRefreshers,
   clearPureCallMemo,
   clearPureMemo,
   coerceAsyncReturn,
@@ -169,7 +171,7 @@ import {
   withEvalBudgetOverride,
   withFnBudgetOverride,
   wrapPromise
-} from "./chunk-A2PLG2QV.js";
+} from "./chunk-JMOQEJTD.js";
 
 // src/algebra/inlay.ts
 function listFunctions(source) {
@@ -632,12 +634,14 @@ export {
   anyMemberResult,
   awaitAbs,
   beginDerivationSession,
+  budgetAttributionSegs,
   bumpEvalForkBudget,
   callBudgetKey,
   canSkipLiteralCallScan,
   checkInjectedDomainEvidence,
   classChainNames,
   classFromMethods,
+  clearLiveImportRefreshers,
   clearPureCallMemo,
   clearPureMemo,
   coerceAsyncReturn,