@nudojs/core 1.14.0 → 1.15.0

package/dist/{chunk-N7AGFMSD.js → chunk-47UPDZHE.js}

@@ -2,6 +2,7 @@ import {
   $invoke,
   $new,
   CONSTRAINT_BUILDERS,
+  DIAG,
   abs,
   andC,
   anyAbs,
@@ -47,7 +48,7 @@ import {
   withEvalBudgetOverride,
   withExecPhi,
   withFnBudgetOverride
-} from "./chunk-W3Z77Y2I.js";
+} from "./chunk-NUTYUT3I.js";
 
 // src/algebra/directive-scan.ts
 function cleanDirectiveLine(raw, kind) {
@@ -823,12 +824,12 @@ function diagnoseMalformedNudoImports(source) {
   for (const bad of scanMalformedNudoImports(source)) {
     if (bad === "malformed-default") {
       collectDiag({
-        code: "nudo:contract-syntax",
+        code: DIAG.contractSyntax,
         message: `Default @nudo:import is not supported (use named { a, b } or namespace * as ns)`
       });
     } else {
       collectDiag({
-        code: "nudo:contract-syntax",
+        code: DIAG.contractSyntax,
         message: `Unrecognized @nudo:import form (expected { names } from "path" or * as ns from "path")`
       });
     }
@@ -896,7 +897,7 @@ function rewriteSidecarSource(src, fromFile) {
   const DEFAULT_LOCAL = "__nudoDefault";
   const badExport = (what) => {
     collectDiag({
-      code: "nudo:interface-load",
+      code: DIAG.interfaceLoad,
       message: `sidecar ${what}; recognized export forms are 'export const <name> = \u2026' and 'export default <constraint|fn>'`,
       file: fromFile
     });
@@ -1195,7 +1196,7 @@ function execSidecar(src, opts, chain, preloaded) {
       for (const n of imp.names) {
         if (n.ns) {
           collectDiag({
-            code: "nudo:interface-load",
+            code: DIAG.interfaceLoad,
             message: `sidecar namespace import '${n.local}' from '${imp.spec}' is not supported (import named builders only)`,
             file: fromFile
           });
@@ -1204,7 +1205,7 @@ function execSidecar(src, opts, chain, preloaded) {
           const hasOwnInject = Object.hasOwn(sidecarInjects, n.imported);
           if (!hasOwnInject) {
             collectDiag({
-              code: "nudo:interface-load",
+              code: DIAG.interfaceLoad,
               message: `sidecar import '{ ${n.imported} }' from '${imp.spec}' is not an injected builder`,
               file: fromFile
             });
@@ -1214,7 +1215,7 @@ function execSidecar(src, opts, chain, preloaded) {
           }
         } else {
           collectDiag({
-            code: "nudo:interface-load",
+            code: DIAG.interfaceLoad,
             message: `sidecar default import '${n.local}' from '${imp.spec}' has no default export to bind (sidecars export named constraints only)`,
             file: fromFile
           });
@@ -1226,7 +1227,7 @@ function execSidecar(src, opts, chain, preloaded) {
     const load = opts?.loadModule;
     if (!load || !fromFile) {
       collectDiag({
-        code: "nudo:interface-load",
+        code: DIAG.interfaceLoad,
         message: `sidecar import '${imp.spec}' is unresolvable (no loadModule for relative specifier)`,
         file: fromFile
       });
@@ -1235,7 +1236,7 @@ function execSidecar(src, opts, chain, preloaded) {
     }
     if (!isSidecarSpec(imp.spec)) {
       collectDiag({
-        code: "nudo:interface-load",
+        code: DIAG.interfaceLoad,
         message: `sidecar import '${imp.spec}' unsupported: relative imports must target .nudo.js/.nudo.ts`,
         file: fromFile
       });
@@ -1245,7 +1246,7 @@ function execSidecar(src, opts, chain, preloaded) {
     const canonical = resolveDepPath(fromFile, imp.spec);
     if (isNodeModulesPath(canonical)) {
       collectDiag({
-        code: "nudo:interface-load",
+        code: DIAG.interfaceLoad,
         message: `sidecar import '${imp.spec}' resolves into node_modules (${canonical}); ambient sidecar loading never crosses node_modules`,
         file: fromFile
       });
@@ -1254,14 +1255,14 @@ function execSidecar(src, opts, chain, preloaded) {
     }
     if (chain.includes(canonical)) {
       throw new NudoSidecarError(
-        "nudo:interface-cycle",
+        DIAG.interfaceCycle,
         `sidecar import cycle: ${[...chain, canonical].join(" \u2192 ")}`
       );
     }
     const depSrc = preloaded.has(canonical) ? preloaded.get(canonical) : load(imp.spec, fromFile);
     if (depSrc === void 0) {
       collectDiag({
-        code: "nudo:interface-load",
+        code: DIAG.interfaceLoad,
         message: `sidecar import '${imp.spec}' is unresolvable (loadModule returned no source)`,
         file: fromFile
       });
@@ -1283,7 +1284,7 @@ function execSidecar(src, opts, chain, preloaded) {
           deps[n.local] = depExports[n.imported];
         } else {
           collectDiag({
-            code: "nudo:interface-load",
+            code: DIAG.interfaceLoad,
             message: `sidecar '${imp.spec}' has no export '${n.imported}'`,
             file: fromFile
           });
@@ -1291,7 +1292,7 @@ function execSidecar(src, opts, chain, preloaded) {
         }
       } else {
         collectDiag({
-          code: "nudo:interface-load",
+          code: DIAG.interfaceLoad,
           message: `sidecar default import '${n.local}' from '${imp.spec}' has no default export (sidecars export named constraints only)`,
           file: fromFile
         });
@@ -1430,7 +1431,7 @@ function collectConstraints(source, opts) {
   for (const imp of imports) {
     if (!opts.loadModule || !opts.fromFile) {
       collectDiag({
-        code: "nudo:interface-load",
+        code: DIAG.interfaceLoad,
         message: `sidecar '${imp.spec}' not loaded: loadModule/fromFile missing from host options`,
         file: opts.fromFile
       });
@@ -1441,7 +1442,7 @@ function collectConstraints(source, opts) {
       src = opts.loadModule(imp.spec, opts.fromFile);
     } catch (e) {
       collectDiag({
-        code: "nudo:interface-load",
+        code: DIAG.interfaceLoad,
         message: `sidecar '${imp.spec}' failed to load from '${opts.fromFile}': ${e instanceof Error ? e.message : String(e)}`,
         file: opts.fromFile
       });
@@ -1449,7 +1450,7 @@ function collectConstraints(source, opts) {
     }
     if (src === void 0) {
       collectDiag({
-        code: "nudo:interface-load",
+        code: DIAG.interfaceLoad,
         message: `sidecar '${imp.spec}' failed to load from '${opts.fromFile}'`,
         file: opts.fromFile
       });
@@ -1464,7 +1465,7 @@ function collectConstraints(source, opts) {
         collectDiag({ code: e.code, message: e.message, file: opts.fromFile });
       } else {
         collectDiag({
-          code: "nudo:interface-load",
+          code: DIAG.interfaceLoad,
           message: `sidecar '${imp.spec}' failed to execute: ${e instanceof Error ? e.message : String(e)}`,
           file: opts.fromFile
         });
@@ -1487,13 +1488,13 @@ function collectConstraints(source, opts) {
         map.set(name, v2);
       } else if (v2 === void 0) {
         collectDiag({
-          code: "nudo:interface-load",
+          code: DIAG.interfaceLoad,
           message: `sidecar '${imp.spec}' has no export '${imported}'`,
           file: opts.fromFile
         });
       } else {
         collectDiag({
-          code: "nudo:interface-load",
+          code: DIAG.interfaceLoad,
           message: `sidecar '${imp.spec}' export '${imported}' is not a Nudo constraint`,
           file: opts.fromFile
         });
@@ -1580,7 +1581,7 @@ function extractRefinesFromSource(source, fnName, opts = {}) {
       if (!m) {
         if (/^return\b/.test(part)) continue;
         collectDiag({
-          code: "nudo:contract-syntax",
+          code: DIAG.contractSyntax,
           message: `Malformed @nudo:contract segment '${part}' (expected <param> <constraintName> or return <constraintName>; e.g. @nudo:contract x positive)`
         });
         continue;
@@ -1590,7 +1591,7 @@ function extractRefinesFromSource(source, fnName, opts = {}) {
       const c = constraints.get(cName);
       if (!c) {
         collectDiag({
-          code: "nudo:contract-syntax",
+          code: DIAG.contractSyntax,
           message: `Unknown constraint name '${cName}' in @nudo:contract (expected a name bound by @nudo:import)`
         });
         continue;
@@ -1624,7 +1625,7 @@ function extractRefineReturnFromSource(source, fnName, opts = {}) {
       if (!m) {
         if (/^return\b/.test(part) && !/^return\s+[\w.]+$/.test(part)) {
           collectDiag({
-            code: "nudo:contract-syntax",
+            code: DIAG.contractSyntax,
             message: `Malformed @nudo:contract return segment '${part}' (expected return <constraintName>)`
           });
         }
@@ -1634,7 +1635,7 @@ function extractRefineReturnFromSource(source, fnName, opts = {}) {
       const c = constraints.get(cName);
       if (!c) {
         collectDiag({
-          code: "nudo:contract-syntax",
+          code: DIAG.contractSyntax,
           message: `Unknown constraint name '${cName}' in @nudo:contract return (expected a name bound by @nudo:import)`
         });
         continue;
@@ -2010,7 +2011,7 @@ function loadSidecarBinding(source, fnName, opts) {
     const reason = e instanceof Error ? e.message : String(e);
     if (noteSidecarLoadFailure(sidecarPath, reason)) {
       collectDiag2({
-        code: "nudo:interface-load",
+        code: DIAG.interfaceLoad,
         message: `sidecar '${spec}' failed to load: ${reason}`,
         file: sidecarPath
       });
@@ -2026,7 +2027,7 @@ function loadSidecarBinding(source, fnName, opts) {
     exports = execNudoModule(sidecarSrc, { loadModule, fromFile: sidecarPath });
   } catch (e) {
     const reason = e instanceof Error ? e.message : String(e);
-    const code = e instanceof NudoSidecarError ? e.code : "nudo:interface-load";
+    const code = e instanceof NudoSidecarError ? e.code : DIAG.interfaceLoad;
     if (noteSidecarLoadFailure(sidecarPath, reason)) {
       let affected = 1;
       if (scNames && scNames.size > 0) {
@@ -2073,7 +2074,7 @@ function loadSidecarBinding(source, fnName, opts) {
     }
     if (binding === void 0 && method !== void 0 && Object.hasOwn(exports, method)) {
       collectDiag2({
-        code: "nudo:interface-load",
+        code: DIAG.interfaceLoad,
         message: `sidecar key '${method}' does not bind '${fnName}' \u2014 use '${cls}.${method}', '${cls}_${method}', or nested { ${cls}: { ${method}: \u2026 } }`,
         file: sidecarPath
       });
@@ -2082,7 +2083,7 @@ function loadSidecarBinding(source, fnName, opts) {
   if (binding === void 0) return { ok: false };
   if (!isNudoConstraint(binding)) {
     collectDiag2({
-      code: "nudo:interface-load",
+      code: DIAG.interfaceLoad,
       message: `sidecar '${spec}' export '${fnName}' is not a Nudo constraint`,
       file: sidecarPath
     });
@@ -2090,7 +2091,7 @@ function loadSidecarBinding(source, fnName, opts) {
   }
   if (!binding.fn) {
     collectDiag2({
-      code: "nudo:interface-load",
+      code: DIAG.interfaceLoad,
       message: `sidecar '${spec}' binding '${fnName}' is not fn() form (Phase 1 consumes only fn({ \u2026 }, \u2026) bindings)`,
       file: sidecarPath
     });
@@ -4298,7 +4299,7 @@ function checkInjectedDomainEvidence(fnName, source, records, opts) {
     return [
       {
         severity: "warning",
-        code: "nudo:interface-load",
+        code: DIAG.interfaceLoad,
         message: `${fnName}: effective interface load failed (${e instanceof Error ? e.message : String(e)}); skipping domain-exceeds check`,
         fn: fnName,
         line: opts.loc?.line,
@@ -4322,7 +4323,7 @@ function checkInjectedDomainEvidence(fnName, source, records, opts) {
     const shown = [...new Set(failures)].map(evidenceToString).join(", ");
     out.push({
       severity: "error",
-      code: "nudo:interface-domain-exceeds",
+      code: DIAG.interfaceDomainExceeds,
       message: `${fnName}[${param}]: cross-file call-site domain evidence ${shown} exceeds handwritten contract`,
       actual: shown,
       expected: formatConstraint(constraint),
@@ -4848,7 +4849,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
             const field = fieldPath.join(".");
             out.push({
               severity: "error",
-              code: "nudo:constraint-violated",
+              code: DIAG.constraintViolated,
               message: `${displayName}[${paramName}]: argument \u22AD precondition`,
               actual: formatAbs(arg),
               expected: `missing field ${field}`,
@@ -4875,7 +4876,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
           if (actualPrim !== void 0 && actualPrim !== expected) {
             out.push({
               severity: "error",
-              code: "nudo:constraint-violated",
+              code: DIAG.constraintViolated,
               message: `${displayName}[${paramName}]: argument \u22AD precondition`,
               actual: formatAbs(arg),
               expected: `typeof ${paramName} = "${expected}"`,
@@ -4891,7 +4892,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
           if (p.op === "gt" || p.op === "ge" || p.op === "lt" || p.op === "le" || p.op === "eq" || p.op === "or") {
             out.push({
               severity: "error",
-              code: "nudo:constraint-violated",
+              code: DIAG.constraintViolated,
               message: `${displayName}[${paramName}]: argument \u22AD precondition`,
               actual: formatAbs(arg),
               expected: predToString(p),
@@ -4910,7 +4911,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
             if (v2 !== void 0 && lv !== v2) {
               out.push({
                 severity: "error",
-                code: "nudo:constraint-violated",
+                code: DIAG.constraintViolated,
                 message: `${displayName}[${paramName}]: argument \u22AD precondition`,
                 actual: formatAbs(arg),
                 expected: predToString(p),
@@ -4936,7 +4937,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
             if (!pass && !unknown2) {
               out.push({
                 severity: "error",
-                code: "nudo:constraint-violated",
+                code: DIAG.constraintViolated,
                 message: `${displayName}[${paramName}]: argument \u22AD precondition`,
                 actual: formatAbs(arg),
                 expected: predToString(p),
@@ -4961,7 +4962,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
             if (!ok2) {
               out.push({
                 severity: "error",
-                code: "nudo:constraint-violated",
+                code: DIAG.constraintViolated,
                 message: `${displayName}[${paramName}]: argument \u22AD precondition`,
                 actual: formatAbs(arg),
                 expected: `length(${paramName}) ${opSym} ${n}`,
@@ -4976,7 +4977,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
           if (typeof lv === "boolean" || lv === null) {
             out.push({
               severity: "error",
-              code: "nudo:constraint-violated",
+              code: DIAG.constraintViolated,
               message: `${displayName}[${paramName}]: argument \u22AD precondition`,
               actual: formatAbs(arg),
               expected: predToString(p),
@@ -4996,7 +4997,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
           if (!ok) {
             out.push({
               severity: "error",
-              code: "nudo:constraint-violated",
+              code: DIAG.constraintViolated,
               message: `${displayName}[${paramName}]: argument \u22AD precondition`,
               actual: formatAbs(arg),
               expected: predToString(p),
@@ -5018,7 +5019,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
       if (absArg.shape.k !== "unknown" && absArg.shape.k !== "never" && absArg.shape.k !== "any") {
         out.push({
           severity: "error",
-          code: "nudo:constraint-violated",
+          code: DIAG.constraintViolated,
           message: `${displayName}[${paramName}]: argument \u22AD precondition`,
           actual: formatAbs(absArg),
           expected: `object shape at ${path}`,
@@ -5037,7 +5038,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
         if (!field.optional && !field.constraint.isOptional) {
           out.push({
             severity: "error",
-            code: "nudo:constraint-violated",
+            code: DIAG.constraintViolated,
             message: `${displayName}[${paramName}]: argument \u22AD precondition`,
             actual: formatAbs(absArg),
             expected: `missing field ${fieldPath}`,
@@ -5059,7 +5060,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
       if (actualPrim !== constraint.prim) {
         out.push({
           severity: "error",
-          code: "nudo:constraint-violated",
+          code: DIAG.constraintViolated,
           message: `${displayName}[${paramName}]: argument \u22AD precondition`,
           actual: formatAbs(fieldAbs),
           expected: `typeof ${fieldPath} = "${constraint.prim}"`,
@@ -5077,7 +5078,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
       if (typeof iv === "number" && !Number.isInteger(iv)) {
         out.push({
           severity: "error",
-          code: "nudo:constraint-violated",
+          code: DIAG.constraintViolated,
           message: `${displayName}[${paramName}]: argument \u22AD precondition`,
           actual: formatAbs(fieldAbs),
           expected: `${fieldPath} is int`,
@@ -5135,7 +5136,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
             if (!ok2) {
               out.push({
                 severity: "error",
-                code: "nudo:constraint-violated",
+                code: DIAG.constraintViolated,
                 message: `${displayName}[${paramName}]: argument \u22AD precondition`,
                 actual: formatAbs(fieldAbs),
                 expected: `length(${fieldPath}) ${opSym} ${n}`,
@@ -5156,7 +5157,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
           if (!ok) {
             out.push({
               severity: "error",
-              code: "nudo:constraint-violated",
+              code: DIAG.constraintViolated,
               message: `${displayName}[${paramName}]: argument \u22AD precondition`,
               actual: formatAbs(fieldAbs),
               expected: `${fieldPath} ${opSym} ${n}`,
@@ -5174,7 +5175,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
     if (fieldIsLit && (typeof fieldLit === "number" || typeof fieldLit === "string" || typeof fieldLit === "boolean" || fieldLit === null || fieldLit === void 0) && ((constraint.members?.length ?? 0) > 0 || constraint.preds.some((p) => p.op === "eq")) && !literalMeetsConstraint(fieldLit, constraint)) {
       out.push({
         severity: "error",
-        code: "nudo:constraint-violated",
+        code: DIAG.constraintViolated,
         message: `${displayName}[${paramName}]: argument \u22AD precondition`,
         actual: formatAbs(fieldAbs),
         expected: `${fieldPath} \u2208 ${formatConstraint(constraint)}`,
@@ -5202,7 +5203,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
             const field = fieldPath.join(".");
             out.push({
               severity: "error",
-              code: "nudo:constraint-violated",
+              code: DIAG.constraintViolated,
               message: `${displayName}[${paramName}]: argument \u22AD precondition`,
               actual: formatAbs(arg),
               expected: `missing field ${field}`,
@@ -5244,7 +5245,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
         } else if (isExactUndef(arg) || arg.shape.k !== "unknown" && arg.shape.k !== "any") {
           out.push({
             severity: "error",
-            code: "nudo:constraint-violated",
+            code: DIAG.constraintViolated,
             message: `${displayName}[${paramName}]: argument \u22AD precondition`,
             actual: formatAbs(arg),
             expected: `array at ${paramName}`,
@@ -5261,7 +5262,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
         if (typeof iv === "number" && !Number.isInteger(iv)) {
           out.push({
             severity: "error",
-            code: "nudo:constraint-violated",
+            code: DIAG.constraintViolated,
             message: `${displayName}[${paramName}]: argument \u22AD precondition`,
             actual: formatAbs(arg),
             expected: `${paramName} is int`,
@@ -5450,7 +5451,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
     } catch {
       out.push({
         severity: "warning",
-        code: "nudo:no-signature",
+        code: DIAG.noSignature,
         message: `${displayName}: external callee contract could not be resolved; skipping call-site precondition check`,
         fn: displayName,
         line: loc?.start.line,
@@ -5493,7 +5494,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
         const isPromote = rel.source === "promote";
         out.push({
           severity: isPromote ? "warning" : "error",
-          code: "nudo:arg-structure",
+          code: DIAG.argStructure,
           message: `${displayName}[${pname}]: argument is not a callable fn`,
           actual: formatAbs(absArg),
           expected: formatShape(expected),
@@ -5527,7 +5528,7 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
     } catch (e) {
       out.push({
         severity: "warning",
-        code: "nudo:no-signature",
+        code: DIAG.noSignature,
         message: `${displayName ?? fnName}: signature recovery failed (${e instanceof Error ? e.message : String(e)}); skipping call-site checks`,
         fn: displayName ?? fnName,
         line: loc?.start.line,
@@ -5570,6 +5571,395 @@ function scanLiteralCalls(source, knownFns, phi, opts) {
   return out;
 }
 
+// src/algebra/check-report.ts
+function actionsForIssue(i) {
+  const draft = {
+    kind: "draft",
+    command: "nudo contract --draft",
+    label: "emit a sidecar draft you can edit"
+  };
+  switch (i.code) {
+    case DIAG.constraintViolated:
+      return [
+        {
+          kind: "callsite",
+          label: "use a value satisfying the constraint",
+          ...i.expected ? { hint: i.expected } : {}
+        },
+        {
+          kind: "relax",
+          label: "relax the precondition (edit *.nudo.js / @nudo:contract)",
+          ...i.expected ? { hint: i.expected } : {}
+        },
+        draft
+      ];
+    case DIAG.assignMismatch:
+      return [
+        {
+          kind: "callsite",
+          label: "align the assigned value with the existing shape",
+          ...i.expected ? { hint: i.expected } : {}
+        },
+        draft
+      ];
+    case DIAG.entryMayThrow:
+      return [
+        {
+          kind: "draft",
+          command: "nudo contract --draft",
+          label: "narrow the entry with a sidecar fn({ \u2026 }) param contract \u2014 most honest fix for helpers (also tightens the signature)",
+          ...i.fn ? { hint: i.fn } : {}
+        },
+        {
+          kind: "relax",
+          label: "declare intentional fail-fast: @nudo:throws Error (or case `!! throws`)",
+          ...i.fn ? { hint: i.fn } : {}
+        },
+        {
+          kind: "info",
+          label: "or refine / guard / try-catch the entry so it is total"
+        },
+        {
+          kind: "ignore-throws",
+          command: "nudo check --ignore-throws TypeError",
+          label: "migration switch: ignore this throw class on L2"
+        }
+      ];
+    case DIAG.unprovenReturn:
+      return [
+        {
+          kind: "relax",
+          label: `relax the return contract${i.fn ? ` of ${i.fn}` : ""} to the inferred surface (review the diff \u2014 not a silent green)`,
+          ...i.expected ? { hint: i.expected } : {}
+        },
+        draft,
+        {
+          kind: "info",
+          label: "or narrow the return expression / add a precondition so the bound is implied"
+        }
+      ];
+    case DIAG.unknownInference:
+    case DIAG.opaqueResult:
+      return [
+        { kind: "mock", label: "pin the native/unknown face with @nudo:mock" },
+        { kind: "assume", command: "nudo check --assume", label: "state preconditions via --assume" },
+        { kind: "info", label: "or add a call site / @nudo:case for evidence" }
+      ];
+    case DIAG.argOpaque:
+    case DIAG.constraintUnproven:
+      return [
+        { kind: "assume", command: "nudo check --assume", label: "state preconditions via --assume" },
+        { kind: "info", label: "add a call site or @nudo:case" }
+      ];
+    case DIAG.forkTruncated:
+    case DIAG.promiseMicroTruncated:
+    case DIAG.promiseMicroError:
+      return [
+        {
+          kind: "info",
+          label: "results widened to unknown \u2014 raise budget (@nudo:budget forks/calls/depth on the function) or narrow control flow"
+        }
+      ];
+    case DIAG.loopTruncated:
+      return [
+        {
+          kind: "info",
+          label: "loop state widened \u2014 the exit condition stayed concrete-true past the iteration cap; make the bound data-dependent (abstract) or pin the result with @nudo:case / @nudo:contract"
+        }
+      ];
+    case DIAG.recursionTruncated:
+      return [
+        {
+          kind: "info",
+          label: i.reason === "cycle" ? "call cycle: same abstract arguments already on the stack \u2014 raising @nudo:budget cannot lift it; make the arguments vary per recursion level or declare @nudo:contract" : i.reason === "depth" || i.reason === "calls" || i.reason === "budget" ? `results widened to unknown \u2014 raise budget (@nudo:budget ${i.reason === "depth" ? "depth" : i.reason === "calls" ? "calls" : "calls/depth"} on the function) or narrow the recursion` : "results widened to unknown \u2014 raise budget (@nudo:budget calls/depth on the function) or narrow control flow"
+        }
+      ];
+    case DIAG.hostEffectBlocked:
+      return [
+        { kind: "mock", label: "pin the host API with @nudo:mock / @nudo:env" },
+        { kind: "info", label: "results widened to unknown \u2014 or feed the value in from a call site" }
+      ];
+    case DIAG.interfaceDrift:
+      return [
+        {
+          kind: "emit",
+          command: "nudo contract --emit",
+          label: "refresh the @generated segment"
+        }
+      ];
+    case DIAG.dualEntry:
+      return [
+        {
+          kind: "info",
+          label: "browser/node records do not cross files \u2014 analyze the entry you ship; mock or skip the other variant"
+        }
+      ];
+    default:
+      return i.suggestion ? [{ kind: "info", label: i.suggestion }] : [];
+  }
+}
+function serializeCheckJson(r) {
+  return {
+    version: 1,
+    file: r.file,
+    ok: r.ok,
+    summary: { ...r.summary },
+    signatures: r.signatures.map((s) => ({
+      name: s.name,
+      params: [...s.params],
+      ...s.paramTypes ? { paramTypes: [...s.paramTypes] } : {},
+      display: s.display,
+      detail: s.detail,
+      conf: s.conf,
+      abs: formatAbs(s.abs),
+      ...s.throws ? { throws: s.throws } : {},
+      ...s.entry ? { entry: true } : {}
+    })),
+    issues: r.issues.map((i) => {
+      const acts = i.actions ?? actionsForIssue(i);
+      return {
+        severity: i.severity,
+        code: i.code,
+        message: i.message,
+        ...i.fn !== void 0 ? { fn: i.fn } : {},
+        ...i.line !== void 0 ? { line: i.line } : {},
+        ...i.column !== void 0 ? { column: i.column } : {},
+        ...i.actual !== void 0 ? { actual: i.actual } : {},
+        ...i.expected !== void 0 ? { expected: i.expected } : {},
+        ...i.suggestion !== void 0 ? { suggestion: i.suggestion } : {},
+        ...i.reason !== void 0 ? { reason: i.reason } : {},
+        ...acts.length > 0 ? { actions: acts } : {}
+      };
+    }),
+    ...r.budget ? { budget: { ...r.budget } } : {}
+  };
+}
+function serializeCheckJsonMulti(reports) {
+  const summary = {
+    errors: 0,
+    warnings: 0,
+    infos: 0,
+    functions: 0,
+    files: reports.length
+  };
+  let calls = 0;
+  let forks = 0;
+  let maxCalls = 0;
+  let maxForks = 0;
+  let callTruncated = false;
+  let forkTruncated = false;
+  let evalCalls = 0;
+  let maxEvalCalls = 0;
+  let evalCallTruncated = false;
+  let cycleTruncated = false;
+  let loopTruncated = false;
+  const callReasons = /* @__PURE__ */ new Set();
+  const evalReasons = /* @__PURE__ */ new Set();
+  let depth = 0;
+  let maxDepth = 0;
+  let evalDepth = 0;
+  let maxEvalDepth = 0;
+  const reasons = /* @__PURE__ */ new Set();
+  for (const r of reports) {
+    summary.errors += r.summary.errors;
+    summary.warnings += r.summary.warnings;
+    summary.infos += r.summary.infos;
+    summary.functions += r.summary.functions;
+    if (r.budget) {
+      calls += r.budget.calls;
+      forks += r.budget.forks;
+      maxCalls = Math.max(maxCalls, r.budget.maxCalls);
+      maxForks = Math.max(maxForks, r.budget.maxForks);
+      callTruncated = callTruncated || r.budget.callTruncated;
+      forkTruncated = forkTruncated || r.budget.forkTruncated;
+      evalCalls += r.budget.evalCalls ?? 0;
+      maxEvalCalls = Math.max(maxEvalCalls, r.budget.maxEvalCalls ?? 0);
+      evalCallTruncated = evalCallTruncated || (r.budget.evalCallTruncated ?? false);
+      cycleTruncated = cycleTruncated || (r.budget.cycleTruncated ?? false);
+      loopTruncated = loopTruncated || (r.budget.loopTruncated ?? false);
+      for (const x of r.budget.callReasons ?? []) callReasons.add(x);
+      for (const x of r.budget.evalReasons ?? []) evalReasons.add(x);
+      depth = Math.max(depth, r.budget.depth ?? 0);
+      maxDepth = Math.max(maxDepth, r.budget.maxDepth ?? 0);
+      evalDepth = Math.max(evalDepth, r.budget.evalDepth ?? 0);
+      maxEvalDepth = Math.max(maxEvalDepth, r.budget.maxEvalDepth ?? 0);
+      for (const x of r.budget.reasons ?? []) reasons.add(x);
+    }
+  }
+  const budgetTruncated = callTruncated || evalCallTruncated || forkTruncated || loopTruncated;
+  return {
+    version: 1,
+    kind: "multi",
+    ok: reports.every((r) => r.ok),
+    summary: {
+      ...summary,
+      ...budgetTruncated ? { budgetTruncated: true } : {}
+    },
+    ...budgetTruncated || reports.some((r) => r.budget) ? {
+      budget: {
+        truncated: budgetTruncated,
+        callTruncated,
+        forkTruncated,
+        calls,
+        maxCalls,
+        forks,
+        maxForks,
+        evalCalls,
+        maxEvalCalls,
+        evalCallTruncated,
+        cycleTruncated,
+        loopTruncated,
+        callReasons: [...callReasons].sort(),
+        depth,
+        maxDepth,
+        evalReasons: [...evalReasons].sort(),
+        evalDepth,
+        maxEvalDepth,
+        reasons: [...reasons].sort()
+      }
+    } : {},
+    reports
+  };
+}
+var CONTRACT_FIX_CODES = /* @__PURE__ */ new Set([
+  DIAG.constraintViolated,
+  DIAG.assignMismatch,
+  DIAG.argStructure,
+  DIAG.interfaceDomainExceeds,
+  DIAG.entryMayThrow,
+  DIAG.missingSlot
+]);
+function budgetAttributionSegs(b) {
+  const segs = [];
+  if ((b.callReasons ?? []).includes("calls")) segs.push(`calls ${b.calls}/${b.maxCalls}`);
+  if ((b.callReasons ?? []).includes("depth")) segs.push(`call depth ${b.depth}/${b.maxDepth}`);
+  if ((b.evalReasons ?? []).includes("calls")) {
+    segs.push(`eval calls ${b.evalCalls}/${b.maxEvalCalls}`);
+  }
+  if ((b.evalReasons ?? []).includes("depth")) {
+    segs.push(`eval depth ${b.evalDepth}/${b.maxEvalDepth}`);
+  }
+  if (b.forkTruncated) segs.push(`forks ${b.forks}/${b.maxForks}`);
+  if (b.loopTruncated) segs.push("loop iterations");
+  const cycleOnly = segs.length === 0;
+  if (cycleOnly) segs.push("call cycle \u2014 not a budget limit");
+  return { segs, cycleOnly };
+}
+function formatCheckReport(r, opts = {}) {
+  const lines = [];
+  lines.push(`nudo check  ${r.file}`);
+  lines.push(r.ok ? "OK" : "FAILED");
+  lines.push(
+    `  ${r.summary.errors} error \xB7 ${r.summary.warnings} warning \xB7 ${r.summary.infos} info \xB7 ${r.summary.functions} fn`
+  );
+  if (r.budget?.truncated) {
+    const b = r.budget;
+    const onlyLoop = b.loopTruncated && !b.callTruncated && !b.evalCallTruncated && !b.forkTruncated;
+    const { segs } = budgetAttributionSegs(b);
+    lines.push("");
+    lines.push("budget");
+    lines.push(`  truncated  ${segs.join(" \xB7 ")}`);
+    lines.push(
+      r.budget.cycleTruncated ? `  \u2192 some results widened to unknown (not a contract failure) \u2014 includes call cycles (same abstract args; a budget cannot lift them)` : onlyLoop ? `  \u2192 loop state widened (iteration budget, not a contract failure) \u2014 @nudo:budget does not apply; make the bound data-dependent or pin with @nudo:case / @nudo:contract` : `  \u2192 some results widened to unknown (not a contract failure) \u2014 raise @nudo:budget / nudo.analysis.maxForks or simplify recursion`
+    );
+  }
+  if (r.signatures.length > 0) {
+    lines.push("");
+    lines.push("signatures");
+    for (const s of r.signatures) {
+      const paramStr = s.paramTypes && s.paramTypes.length > 0 ? s.params.map((p, i) => `${p}: ${s.paramTypes[i] ?? "any"}`).join(", ") : s.params.join(", ");
+      const throwsStr = s.throws ? `  throws ${s.throws}` : "";
+      const displayBase = s.display.replace(/\s+throws\s+[\s\S]+$/, "").trim();
+      const shapeK = s.abs?.shape?.k;
+      const looksLikeFakeAny = shapeK === "any" && displayBase.length > 0 && !/^any(\b|$)/.test(displayBase);
+      const retStr = !looksLikeFakeAny && shapeK ? formatShape(s.abs) || displayBase.replace(/\s+#\w+$/, "").trim() : displayBase.replace(/\s+#\w+$/, "").trim();
+      lines.push(`  ${s.name}(${paramStr}) => ${retStr}${throwsStr}`);
+      if (opts.verbose) {
+        for (const ln of s.detail.split("\n").slice(1)) {
+          lines.push(`  ${ln}`);
+        }
+      }
+    }
+  }
+  if (r.issues.length === 0) {
+    lines.push("");
+    lines.push("(no issues)");
+  } else {
+    lines.push("");
+    lines.push("issues");
+    for (const i of r.issues) {
+      const loc = i.line != null ? `L${i.line}` : "";
+      const head = [i.severity.toUpperCase(), loc, i.fn].filter(Boolean).join(" ");
+      lines.push(`  [${head}] ${i.message}  (${i.code})`);
+      const showDetail = i.severity === "error" || opts.verbose;
+      if (showDetail && i.actual) lines.push(`      actual:   ${i.actual}`);
+      if (showDetail && i.expected) lines.push(`      expected: ${i.expected}`);
+      if (i.suggestion) {
+        lines.push(`      \u2192 ${i.suggestion}`);
+      } else if (CONTRACT_FIX_CODES.has(i.code)) {
+        lines.push(`      \u2192 add a refine / sidecar contract, or fix the call-site value`);
+      }
+      if (CONTRACT_FIX_CODES.has(i.code)) {
+        lines.push(`      fix:  nudo contract --draft  (emit a sidecar draft you can edit)`);
+      }
+    }
+  }
+  return lines.join("\n");
+}
+function escapeGhaData(s) {
+  return s.replace(/%/g, "%25").replace(/\r/g, "%0D").replace(/\n/g, "%0A");
+}
+function escapeGhaProp(s) {
+  return escapeGhaData(s).replace(/:/g, "%3A").replace(/,/g, "%2C");
+}
+function formatGithubAnnotations(r, opts = {}) {
+  const lines = [];
+  let file = r.file;
+  if (opts.workspaceRoot && file.startsWith(opts.workspaceRoot)) {
+    file = file.slice(opts.workspaceRoot.length).replace(/^[/\\]/, "");
+  }
+  for (const i of r.issues) {
+    const level = i.severity === "error" ? "error" : i.severity === "warning" ? "warning" : "notice";
+    const line = i.line ?? 1;
+    const col = (i.column ?? 0) + 1;
+    const title = escapeGhaProp(i.code);
+    const msgBits = [i.message];
+    if (i.actual && i.expected) msgBits.push(`${i.actual} \u22AD ${i.expected}`);
+    else if (i.suggestion) msgBits.push(i.suggestion);
+    if (CONTRACT_FIX_CODES.has(i.code)) {
+      msgBits.push(`fix: nudo contract --draft`);
+    }
+    const msg = escapeGhaData(msgBits.join(" \xB7 "));
+    const props = [
+      `file=${escapeGhaProp(file)}`,
+      `line=${line}`,
+      `col=${col}`,
+      `title=${title}`
+    ].join(",");
+    lines.push(`::${level} ${props}::${msg}`);
+  }
+  return lines.join("\n");
+}
+function formatGitlabCodeQuality(r, opts = {}) {
+  let file = r.file;
+  if (opts.workspaceRoot && file.startsWith(opts.workspaceRoot)) {
+    file = file.slice(opts.workspaceRoot.length).replace(/^[/\\]/, "");
+  }
+  return r.issues.map((i) => {
+    const begin = i.line ?? 1;
+    const severity = i.severity === "error" ? "major" : i.severity === "warning" ? "minor" : "info";
+    const description = i.actual && i.expected ? `${i.message} (${i.actual} \u22AD ${i.expected})` : i.message;
+    const fingerprint = `${file}:${i.code}:${begin}:${i.message}`;
+    return {
+      description,
+      check_name: i.code,
+      fingerprint,
+      severity,
+      location: { path: file, lines: { begin } }
+    };
+  });
+}
+
 export {
   listFnDirectiveScopes,
   findFnDirectiveScope,
@@ -5648,5 +6038,12 @@ export {
   stableAnalyzeKeySource,
   listTopFunctions,
   scanLiteralCalls,
-  checkInjectedDomainEvidence
+  checkInjectedDomainEvidence,
+  actionsForIssue,
+  serializeCheckJson,
+  serializeCheckJsonMulti,
+  budgetAttributionSegs,
+  formatCheckReport,
+  formatGithubAnnotations,
+  formatGitlabCodeQuality
 };