@nudojs/core 1.2.0 → 1.3.0

package/dist/internal.d.ts

@@ -1,9 +1,56 @@
-import { I as InterfaceSource, a as InterfaceTierOpts, p as parseSource, C as CheckIssue } from './check-report-TEOZ4cPZ.js';
-export { L as LeakBudget, b as LoadDepsFingerprint, d as defaultLeakBudget, e as exceedsBudget, c as extractAllLoadSpecs, l as leakIfNeeded, f as loadModuleDepsFingerprint, m as maybeLeak, n as normPath, r as resetLeakCounter, g as resolveDepPath, s as sidecarSpecsOf, t as termDepth, h as termNodes } from './check-report-TEOZ4cPZ.js';
-import { A as Abs, T as Term, c as AstEnv } from './hof-types-COqDeD5F.js';
-export { $ as $tryDigestSoft, d as $tryMarkSoft, e as $tryReleaseSoft, E as ERROR_FAMILY, M as MayThrowEffect, f as errorTypeAbs, g as filterDeclaredThrows, h as filterGateThrows, i as filterIgnoredThrows, j as flushMayThrowEffects, k as formatThrowsAbs, l as getMayThrowCollector, m as isThrowsIgnored, n as mayThrowEffectsToAbs, o as orphanMayThrowEffects, p as popMayThrowFrame, q as pushMayThrowFrame, r as recordMayThrow, s as runWithMayThrowSession, t as setMayThrowCollector, u as throwAbsToKinds, v as throwsKindCovered } from './hof-types-COqDeD5F.js';
+import { I as InterfaceSource, a as InterfaceTierOpts, p as parseSource, C as CheckIssue } from './check-report-BWmfy810.js';
+export { L as LeakBudget, b as LoadDepsFingerprint, M as MAX_PROMISE_MICROS, d as defaultLeakBudget, e as exceedsBudget, c as extractAllLoadSpecs, g as getPromiseMicrosLength, l as leakIfNeeded, f as loadModuleDepsFingerprint, m as maybeLeak, n as normPath, r as resetLeakCounter, h as resolveDepPath, s as sidecarSpecsOf, t as termDepth, i as termNodes } from './check-report-BWmfy810.js';
+import { A as Abs, T as Term, c as AstEnv } from './run-Dk08Q5zl.js';
+export { $ as $tryDigestSoft, d as $tryMarkSoft, e as $tryReleaseSoft, E as ERROR_FAMILY, f as EvalFallbackStats, M as MayThrowEffect, g as enterEvalCallBudgetSession, h as errorTypeAbs, i as exitEvalCallBudgetSession, j as filterDeclaredThrows, k as filterGateThrows, l as filterIgnoredThrows, m as flushMayThrowEffects, n as formatThrowsAbs, o as getEvalCallBudgetState, p as getEvalFallbackStats, q as getMayThrowCollector, r as isThrowsIgnored, s as mayThrowEffectsToAbs, t as orphanMayThrowEffects, u as popMayThrowFrame, v as pushMayThrowFrame, w as recordMayThrow, x as resetEvalFallbackStats, y as runWithMayThrowSession, z as setMayThrowCollector, B as throwAbsToKinds, D as throwsKindCovered, F as withEvalBudgetOverride } from './run-Dk08Q5zl.js';
 import { File, Node } from '@babel/types';
 
+/**
+ * 源码文本工具：注释/字符串/正则字面量剥离。
+ * 原文正则特性探测（require/import/exports 等）必须先剥再测——
+ * 字符串或注释里的同名片段不是代码。
+ *
+ * 扫描语义（单遍状态机）：
+ * - 字符串/模板/注释互不串台（字符串里的 `//` 不是注释）。
+ * - 模板插值 `${…}` 是**代码岛**：内部按普通代码继续扫（可嵌套模板/字符串/
+ *   正则/注释），只把真正的字符串内容当 string——`${require()}` 里的 require
+ *   是真代码，必须可见；嵌套模板按深度配对，内外不串台。
+ * - 正则字面量按 division-vs-regex 启发式识别（前一有效 token 决定 `/`）：
+ *   `/https?:\/\//` 尾部 `//` 不会误开行注释；regex 体整体当 string 剥掉，
+ *   避免 `/import *from/` 误命中 import 探针。
+ * - 已知限制：`if (x) /re/` 这类 `)` 后紧跟 regex 的极端写法会当除法；
+ *   目标是探测器正确，不做完整 JS 词法。
+ */
+type StringLiteralSpan = {
+    /** 引号内原文（转义未折叠；模块 specifier 无需折叠） */
+    value: string;
+    /** 开引号下标 */
+    start: number;
+    /** 含两侧引号的总长 */
+    length: number;
+};
+declare function stripCommentsAndStrings(source: string): string;
+/**
+ * 只剥字符串/模板/正则，**保留注释原文**。
+ * `@nudo:` 指令合法住在 JSDoc/行注释里——指令存在性探针不能吃掉注释，
+ * 否则真指令被漏扫；同时字符串里的假指令文本必须不算命中。
+ * 模板插值 `${…}` 是代码，保留。
+ */
+declare function stripStringsKeepComments(source: string): string;
+/**
+ * 等长掩码：注释与字符串/模板/正则整段替换为空格（保留 `\n` 侧行号对齐）。
+ * 插值 `${…}` 的**代码**保留，定界符与 cooked 段变空格——下标与原文一一对应。
+ * 供定位/改写在**代码区**进行。
+ */
+declare function maskCommentsAndStrings(source: string): string;
+/** 代码区字符串/模板字面量（注释内引号不算；插值模板不报整体，正则不报） */
+declare function scanStringLiterals(source: string): StringLiteralSpan[];
+/** 真实 `require(` 调用（忽略字符串/注释/正则；模板插值内可见） */
+declare function sourceHasRequireCall(source: string): boolean;
+/** 真实 import / require 模块依赖（忽略字符串/注释/正则；模板插值内可见） */
+declare function sourceHasModuleDependency(source: string): boolean;
+/** 真实 CJS exports 赋值面（exports.x / exports[x] / module.x） */
+declare function sourceHasCjsExports(source: string): boolean;
+
 /**
  * 调用预算 + 截断观测（求值引擎共享面）。
  * 抽象求值对递归做展开而非不动点：参数类型每层变形（fac(n-1)）时
@@ -27,6 +74,15 @@ type AbsBudgetStats = {
 declare function getAbsCallBudgetStats(): AbsBudgetStats;
 /** 宿主入口（runTranspiled / callTranspiledExportFull / check）前重置 */
 declare function resetAbsCallBudget(): void;
+/**
+ * 函数级预算覆盖（`@nudo:budget`）：在 fn 期间抬高 depth/calls/forks 上限。
+ * 返回 restore 回调（恢复先前值）。非法值忽略对应维。
+ */
+declare function withFnBudgetOverride(budget: {
+    depth?: number;
+    calls?: number;
+    forks?: number;
+}, run: () => void): void;
 declare function stableCallId(obj: object): string;
 /**
  * 截断结果：分析无信息，conf=opaque。
@@ -72,6 +128,10 @@ declare const FORK_TRUNCATION_LABEL = "#fork-budget";
  * `nudo:host-effect-blocked`，不复用「某函数被截断」文案。
  */
 declare const HOST_EFFECT_LABEL_PREFIX = "#host-effect:";
+/** promise 微队列溢出标签（队列硬上限丢弃；check 映射，避免误报 recursion-truncated） */
+declare const PROMISE_MICRO_OVERFLOW_LABEL = "#promise-micro-overflow";
+/** promise 微任务 drain 抛错标签（不得静默吞掉） */
+declare const PROMISE_MICRO_ERROR_LABEL = "#promise-micro-error";
 /** 宿主副作用未执行观测（service/LSP 映射 nudo:host-effect-blocked；与调用截断同 collector 管道） */
 declare function noteHostEffectBlocked(name: string): void;
 /** fork 超限观测（service/LSP 映射 nudo:fork-truncated；与调用截断同 collector 管道） */
@@ -304,13 +364,24 @@ declare function fixedLengthOfViews(views: TemplatePartView[]): number | undefin
 declare function formatTemplateNameViews(views: TemplatePartView[]): string;
 /** 相邻固定文本合并；rebuildFixed 以合并文本重建视图（含原始 part） */
 declare function mergeAdjacentFixedViews<P>(views: TemplatePartView<P>[], rebuildFixed: (text: string) => TemplatePartView<P>): TemplatePartView<P>[];
-/** 具体字符串是否匹配模板（Refinement.check 的判定语义） */
+/**
+ * 具体字符串是否匹配模板（Refinement.check 的判定语义）。
+ * 抽象 part 吃掉任意（含空）子串；相邻抽象合并成一段可变间隙。
+ * 非末尾固定段从当前位置向后找；末尾固定段须落在字符串末尾
+ * （`${x}abc` 匹配 "abcabc"，x="abc"）。
+ * (pos, si) 记忆化：多间隙长串下否则为 O(n^k) 指数回溯。
+ */
 declare function templateMatchesValue(value: string, views: TemplatePartView[]): boolean;
 /** 三值判定；Abs 方法表把 "unknown" 适配为 boolPrim */
 type TemplatePredicateDecision = boolean | "unknown";
 declare function decideStartsWith(prefix: string, search: string): TemplatePredicateDecision;
 declare function decideEndsWith(suffix: string, search: string): TemplatePredicateDecision;
-declare function decideIncludes(fixedText: string, search: string): TemplatePredicateDecision;
+/**
+ * includes 判定：search 必须落在**单个**固定段内才是 true。
+ * 跨抽象间隙拼接固定段会假精确（`a${x}b` 的固定文本 "ab" 并不蕴含
+ * includes("ab")——x="zz" 时 "azzb" 不含 "ab"）。无固定段命中 → unknown。
+ */
+declare function decideIncludes(fixedRuns: readonly string[], search: string): TemplatePredicateDecision;
 declare function absTemplateViews(parts: Abs[]): TemplatePartView<Abs>[];
 /** 从 Abs 提取 template parts（已是 template 则展开，否则 [self]） */
 declare function templatePartsOf(a: Abs): Abs[];
@@ -335,6 +406,39 @@ declare function concatString(a: Abs, b: Abs): Abs;
 /** Abs 上的运行时守卫表达式（JS boolean 布尔串） */
 declare function denoteGuard(a: Abs, v: string): string;
 
+/**
+ * Codegen escaping: one policy for embedding user-controlled strings into
+ * generated JS/TS/comments (guard bodies, .d.ts types, schema modules, JSDoc).
+ *
+ * - object keys: bare JS ident or canonical integer, else JSON-quoted
+ * - member access: `recv.key` for idents, `recv["key"]` otherwise
+ * - template literal type fixed segments: escape `\` `` ` `` `$`
+ * - comment bodies: neutralize block-comment close, line breaks, control chars
+ */
+declare function isJsIdent(name: string): boolean;
+/**
+ * Object-literal / type-member key: bare ident or canonical integer,
+ * otherwise JSON-quoted. Leading-zero digit keys (`01`) stay quoted — bare
+ * `01` is a SyntaxError in modules/TS.
+ */
+declare function formatObjectKey(k: string): string;
+/**
+ * Member-access expression: `recv.key` for idents, `recv["key"]` otherwise.
+ * Bare non-ident keys inject operators (`foo||true||bar`) or SyntaxError.
+ */
+declare function safeMemberAccess(recv: string, key: string): string;
+/**
+ * Escape a fixed text segment for a TypeScript template literal type.
+ * Escapes `\`, `` ` ``, and `$` so `${` cannot open a type interpolation.
+ */
+declare function escapeTemplateTypeFixed(text: string): string;
+/**
+ * Sanitize text destined for a generated comment body (JSDoc `* ` or `//`).
+ * Neutralizes the block-comment close sequence, line breaks (U+2028/2029
+ * included), and control characters so the comment cannot be broken out of.
+ */
+declare function sanitizeCommentText(text: string): string;
+
 /**
  * 语言覆盖：class / new / instanceof / this / async await。
  * brand 表示名义类；eff("promise") 表示异步效应。
@@ -547,4 +651,4 @@ declare function runWithEvalMissingSlot<T>(enabled: boolean, body: () => T): T;
  */
 declare function noteObjSlotMissing(recv: Abs | undefined, name: string, loc?: [number, number]): boolean;
 
-export { type AbsBudgetStats, type AbsInlay, type ArgDerivation, type ClassDef, type CollectAbsInlaysOpts, type DerivationNode, type EvalMemberDiag, FORK_TRUNCATION_LABEL, type FnFp, HOST_EFFECT_LABEL_PREFIX, type InjectedDomainEvidenceOpts, type InjectedDomainRecord, MAX_CALL_DEPTH, MAX_EVAL_TOTAL_FORKS, MAX_TOTAL_CALLS, type MethodDef, OBJECT_PROTO_NAMES, type TemplateMeta, type TemplatePartDesc, type TemplatePartView, type TemplatePredicateDecision, abortDerivationSession, absTemplateViews, allFixedTextOfViews, anyMemberResult, awaitAbs, beginDerivationSession, bumpEvalForkBudget, callBudgetKey, canSkipLiteralCallScan, checkInjectedDomainEvidence, classChainNames, classFromMethods, coerceAsyncReturn, collectAbsInlays, concatString, createTemplateAbs, decideEndsWith, decideIncludes, decideStartsWith, defineClass, definitelyUncallableMember, denoteGuard, derivationChain, endDerivationSession, enterCall, exitCall, fixedLengthOfViews, fnFingerprints, formatTemplateNameViews, generalizeSourceKeyPart, getAbsCallBudgetStats, getAbsOrigin, getClass, getClassChain, getDerivation, getEvalForkBudgetLimit, getEvalForkCount, getFnNameAndBodies, hasDerivationSession, hashSource, instanceOf, instantiateClass, isEvalMissingSlotEnabled, isNullishAbs, isTemplateLike, knownPrefixOfViews, knownSuffixOfViews, listTopFunctions, lookupMethod, lookupMethodWithOwner, lookupSuperMethod, mergeAdjacentFixedViews, noteAbsTruncation, noteAnyMemberMayThrow, noteDerivationAdd, noteDerivationJoin, noteEvalForkTruncation, noteHostEffectBlocked, noteMemberDispatchMiss, noteNullishMemberThrows, noteObjSlotMissing, notePrimMemberMissing, noteUnknownMemberMissing, popCallLoc, projectBrand, projectDerivationDsl, pushCallLoc, recordMemberDiag, resetAbsCallBudget, resetEvalForkBudget, resetFnFpCache, resetHashSourceCache, runWithEvalMissingSlot, setAbsTruncationCollector, setDerivation, setDerivationCollector, setEvalForkBudgetLimit, setEvalMissingSlotEnabled, setMemberDiagCollector, stableAnalyzeKeySource, stableCallId, superNameOf, tagAbsOrigin, tagDerivationRoot, templateMatchesValue, templatePartsOf, termKey, truncatedAbs, viewTemplateParts, wrapPromise };
+export { type AbsBudgetStats, type AbsInlay, type ArgDerivation, type ClassDef, type CollectAbsInlaysOpts, type DerivationNode, type EvalMemberDiag, FORK_TRUNCATION_LABEL, type FnFp, HOST_EFFECT_LABEL_PREFIX, type InjectedDomainEvidenceOpts, type InjectedDomainRecord, MAX_CALL_DEPTH, MAX_EVAL_TOTAL_FORKS, MAX_TOTAL_CALLS, type MethodDef, OBJECT_PROTO_NAMES, PROMISE_MICRO_ERROR_LABEL, PROMISE_MICRO_OVERFLOW_LABEL, type StringLiteralSpan, type TemplateMeta, type TemplatePartDesc, type TemplatePartView, type TemplatePredicateDecision, abortDerivationSession, absTemplateViews, allFixedTextOfViews, anyMemberResult, awaitAbs, beginDerivationSession, bumpEvalForkBudget, callBudgetKey, canSkipLiteralCallScan, checkInjectedDomainEvidence, classChainNames, classFromMethods, coerceAsyncReturn, collectAbsInlays, concatString, createTemplateAbs, decideEndsWith, decideIncludes, decideStartsWith, defineClass, definitelyUncallableMember, denoteGuard, derivationChain, endDerivationSession, enterCall, escapeTemplateTypeFixed, exitCall, fixedLengthOfViews, fnFingerprints, formatObjectKey, formatTemplateNameViews, generalizeSourceKeyPart, getAbsCallBudgetStats, getAbsOrigin, getClass, getClassChain, getDerivation, getEvalForkBudgetLimit, getEvalForkCount, getFnNameAndBodies, hasDerivationSession, hashSource, instanceOf, instantiateClass, isEvalMissingSlotEnabled, isJsIdent, isNullishAbs, isTemplateLike, knownPrefixOfViews, knownSuffixOfViews, listTopFunctions, lookupMethod, lookupMethodWithOwner, lookupSuperMethod, maskCommentsAndStrings, mergeAdjacentFixedViews, noteAbsTruncation, noteAnyMemberMayThrow, noteDerivationAdd, noteDerivationJoin, noteEvalForkTruncation, noteHostEffectBlocked, noteMemberDispatchMiss, noteNullishMemberThrows, noteObjSlotMissing, notePrimMemberMissing, noteUnknownMemberMissing, popCallLoc, projectBrand, projectDerivationDsl, pushCallLoc, recordMemberDiag, resetAbsCallBudget, resetEvalForkBudget, resetFnFpCache, resetHashSourceCache, runWithEvalMissingSlot, safeMemberAccess, sanitizeCommentText, scanStringLiterals, setAbsTruncationCollector, setDerivation, setDerivationCollector, setEvalForkBudgetLimit, setEvalMissingSlotEnabled, setMemberDiagCollector, sourceHasCjsExports, sourceHasModuleDependency, sourceHasRequireCall, stableAnalyzeKeySource, stableCallId, stripCommentsAndStrings, stripStringsKeepComments, superNameOf, tagAbsOrigin, tagDerivationRoot, templateMatchesValue, templatePartsOf, termKey, truncatedAbs, viewTemplateParts, withFnBudgetOverride, wrapPromise };

package/dist/internal.js

@@ -16,7 +16,7 @@ import {
   resolveDepPath,
   sidecarSpecsOf,
   stableAnalyzeKeySource
-} from "./chunk-GD5XIQQK.js";
+} from "./chunk-5YNR4Q7E.js";
 import {
   $tryDigestSoft,
   $tryMarkSoft,
@@ -26,8 +26,11 @@ import {
   HOST_EFFECT_LABEL_PREFIX,
   MAX_CALL_DEPTH,
   MAX_EVAL_TOTAL_FORKS,
+  MAX_PROMISE_MICROS,
   MAX_TOTAL_CALLS,
   OBJECT_PROTO_NAMES,
+  PROMISE_MICRO_ERROR_LABEL,
+  PROMISE_MICRO_OVERFLOW_LABEL,
   abortDerivationSession,
   absTemplateViews,
   allFixedTextOfViews,
@@ -50,9 +53,11 @@ import {
   derivationChain,
   endDerivationSession,
   enterCall,
+  enterEvalCallBudgetSession,
   errorTypeAbs,
   exceedsBudget,
   exitCall,
+  exitEvalCallBudgetSession,
   filterDeclaredThrows,
   filterGateThrows,
   filterIgnoredThrows,
@@ -66,9 +71,12 @@ import {
   getClass,
   getClassChain,
   getDerivation,
+  getEvalCallBudgetState,
+  getEvalFallbackStats,
   getEvalForkBudgetLimit,
   getEvalForkCount,
   getMayThrowCollector,
+  getPromiseMicrosLength,
   hasDerivationSession,
   instanceOf,
   instantiateClass,
@@ -83,6 +91,7 @@ import {
   lookupMethod,
   lookupMethodWithOwner,
   lookupSuperMethod,
+  maskCommentsAndStrings,
   mayThrowEffectsToAbs,
   maybeLeak,
   mergeAdjacentFixedViews,
@@ -109,10 +118,12 @@ import {
   recordMayThrow,
   recordMemberDiag,
   resetAbsCallBudget,
+  resetEvalFallbackStats,
   resetEvalForkBudget,
   resetLeakCounter,
   runWithEvalMissingSlot,
   runWithMayThrowSession,
+  scanStringLiterals,
   setAbsTruncationCollector,
   setDerivation,
   setDerivationCollector,
@@ -120,7 +131,12 @@ import {
   setEvalMissingSlotEnabled,
   setMayThrowCollector,
   setMemberDiagCollector,
+  sourceHasCjsExports,
+  sourceHasModuleDependency,
+  sourceHasRequireCall,
   stableCallId,
+  stripCommentsAndStrings,
+  stripStringsKeepComments,
   superNameOf,
   tagAbsOrigin,
   tagDerivationRoot,
@@ -134,8 +150,10 @@ import {
   throwsKindCovered,
   truncatedAbs,
   viewTemplateParts,
+  withEvalBudgetOverride,
+  withFnBudgetOverride,
   wrapPromise
-} from "./chunk-WB565PQK.js";
+} from "./chunk-CKH6GQAI.js";
 
 // src/algebra/inlay.ts
 function listFunctions(source) {
@@ -286,6 +304,27 @@ function collectAbsInlays(source, opts) {
   return inlays;
 }
 
+// src/algebra/codegen-escape.ts
+var JS_IDENT = /^[A-Za-z_$][A-Za-z0-9_$]*$/;
+var JS_CANONICAL_INT = /^(?:0|[1-9]\d*)$/;
+function isJsIdent(name) {
+  return JS_IDENT.test(name);
+}
+function formatObjectKey(k) {
+  if (JS_IDENT.test(k)) return k;
+  if (JS_CANONICAL_INT.test(k)) return k;
+  return JSON.stringify(k);
+}
+function safeMemberAccess(recv, key) {
+  return JS_IDENT.test(key) ? `${recv}.${key}` : `${recv}[${JSON.stringify(key)}]`;
+}
+function escapeTemplateTypeFixed(text) {
+  return text.replace(/[\\`$]/g, "\\$&");
+}
+function sanitizeCommentText(text) {
+  return text.replace(/\*\//g, "*\\/").replace(/[\r\n\u2028\u2029\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g, " ");
+}
+
 // src/algebra/denote.ts
 function denoteGuard(a, v) {
   const lv = litValue(a);
@@ -323,7 +362,7 @@ function denoteShape(s, v) {
     case "obj": {
       const checks = [`typeof ${v} === "object"`, `${v} !== null`];
       for (const [key, slot] of Object.entries(s.slots)) {
-        const access = `${v}.${key}`;
+        const access = safeMemberAccess(v, key);
         const inner = denoteGuard(slot.value, access);
         if (slot.optional) {
           if (inner !== "true") checks.push(`(${access} === undefined || ${inner})`);
@@ -463,8 +502,11 @@ export {
   HOST_EFFECT_LABEL_PREFIX,
   MAX_CALL_DEPTH,
   MAX_EVAL_TOTAL_FORKS,
+  MAX_PROMISE_MICROS,
   MAX_TOTAL_CALLS,
   OBJECT_PROTO_NAMES,
+  PROMISE_MICRO_ERROR_LABEL,
+  PROMISE_MICRO_OVERFLOW_LABEL,
   abortDerivationSession,
   absTemplateViews,
   allFixedTextOfViews,
@@ -491,9 +533,12 @@ export {
   derivationChain,
   endDerivationSession,
   enterCall,
+  enterEvalCallBudgetSession,
   errorTypeAbs,
+  escapeTemplateTypeFixed,
   exceedsBudget,
   exitCall,
+  exitEvalCallBudgetSession,
   extractAllLoadSpecs,
   filterDeclaredThrows,
   filterGateThrows,
@@ -501,6 +546,7 @@ export {
   fixedLengthOfViews,
   flushMayThrowEffects,
   fnFingerprints,
+  formatObjectKey,
   formatTemplateNameViews,
   formatThrowsAbs,
   generalizeSourceKeyPart,
@@ -509,15 +555,19 @@ export {
   getClass,
   getClassChain,
   getDerivation,
+  getEvalCallBudgetState,
+  getEvalFallbackStats,
   getEvalForkBudgetLimit,
   getEvalForkCount,
   getFnNameAndBodies,
   getMayThrowCollector,
+  getPromiseMicrosLength,
   hasDerivationSession,
   hashSource,
   instanceOf,
   instantiateClass,
   isEvalMissingSlotEnabled,
+  isJsIdent,
   isNullishAbs,
   isTemplateLike,
   isThrowsIgnored,
@@ -529,6 +579,7 @@ export {
   lookupMethod,
   lookupMethodWithOwner,
   lookupSuperMethod,
+  maskCommentsAndStrings,
   mayThrowEffectsToAbs,
   maybeLeak,
   mergeAdjacentFixedViews,
@@ -554,6 +605,7 @@ export {
   recordMayThrow,
   recordMemberDiag,
   resetAbsCallBudget,
+  resetEvalFallbackStats,
   resetEvalForkBudget,
   resetFnFpCache,
   resetHashSourceCache,
@@ -561,6 +613,9 @@ export {
   resolveDepPath,
   runWithEvalMissingSlot,
   runWithMayThrowSession,
+  safeMemberAccess,
+  sanitizeCommentText,
+  scanStringLiterals,
   setAbsTruncationCollector,
   setDerivation,
   setDerivationCollector,
@@ -569,8 +624,13 @@ export {
   setMayThrowCollector,
   setMemberDiagCollector,
   sidecarSpecsOf,
+  sourceHasCjsExports,
+  sourceHasModuleDependency,
+  sourceHasRequireCall,
   stableAnalyzeKeySource,
   stableCallId,
+  stripCommentsAndStrings,
+  stripStringsKeepComments,
   superNameOf,
   tagAbsOrigin,
   tagDerivationRoot,
@@ -583,5 +643,7 @@ export {
   throwsKindCovered,
   truncatedAbs,
   viewTemplateParts,
+  withEvalBudgetOverride,
+  withFnBudgetOverride,
   wrapPromise
 };

package/dist/{hof-types-COqDeD5F.d.ts → run-Dk08Q5zl.d.ts}

@@ -1,4 +1,5 @@
-import { Node } from '@babel/types';
+import * as _babel_types from '@babel/types';
+import { Node, ImportDeclaration, File } from '@babel/types';
 
 /** 项（Term）：抽象值的身份。字面量是项的特例。 */
 type LiteralValue = string | number | boolean | null | undefined;
@@ -71,6 +72,16 @@ type Pred = {
     op: "typeof";
     t: Term;
     type: TypeofName;
+}
+/**
+ * 显式有限证据：t 是有限数（非 NaN/±Inf）。
+ * 在场时允许线性环化简（x-x=0、k*(x+y) 分配等）；
+ * 默认关闭——无此谓词（或由 typeof=number + 双侧有限界自动导出）时
+ * 仍 fail-closed，与 BUG-001 / DEC-007A 口径一致。
+ */
+ | {
+    op: "assumeFinite";
+    t: Term;
 };
 declare const pTrue: Pred;
 declare const pFalse: Pred;
@@ -81,6 +92,8 @@ declare const le: (a: Term, b: Term) => Pred;
 declare const gt: (a: Term, b: Term) => Pred;
 declare const ge: (a: Term, b: Term) => Pred;
 declare const ptypeof: (t: Term, type: TypeofName) => Pred;
+/** 显式有限证据：t 为有限数（非 NaN/±Inf），开启线性环化简 */
+declare const assumeFinite: (t: Term) => Pred;
 declare function and(...preds: Pred[]): Pred;
 declare function or(...preds: Pred[]): Pred;
 declare function not(p: Pred): Pred;
@@ -88,6 +101,11 @@ declare function not(p: Pred): Pred;
  * 逻辑否定（De Morgan）：¬(A∧B)=¬A∨¬B；¬(A∨B)=¬A∧¬B；双重否定消去。
  * typeof 否定展开为其余 TypeofName 标签的析取——8 标签域是 JS typeof 的
  * 完整结果域，展开健全且相对完备。
+ *
+ * 关系比较（lt/le/gt/ge）的否定 **不是** 全序对偶：JS 里 NaN 参与时
+ * 全部关系为 false，故 ¬(x<5) 真而 x≥5 假。精确否定是 not(lt)；
+ * 正向全序事实（Φ ⊢ x≥5 ⇒ x<5 为假）仍由 totalOrderDual 处理。
+ * eq↔ne 是精确否定，不受 NaN 影响。
  */
 declare function negatePred(p: Pred): Pred;
 declare function predEquals(a: Pred, b: Pred): boolean;
@@ -162,6 +180,15 @@ type Shape = {
     name?: string;
     paramTypes?: Abs[];
     returnType?: Abs;
+    /**
+     * Dual-facet globals (Number/Array/…): callable AND carries static members.
+     * `$get` reads these before falling back to Function.prototype names.
+     */
+    slots?: Record<string, {
+        value: Abs;
+        optional?: boolean;
+        readonly?: boolean;
+    }>;
 } | {
     k: "brand";
     name: string;
@@ -294,6 +321,77 @@ declare function filterIgnoredThrows(effects: MayThrowEffect[], ignore: readonly
  */
 declare function filterDeclaredThrows(effects: MayThrowEffect[], declared: readonly string[] | "*" | undefined): MayThrowEffect[];
 
+/**
+ * 求值引擎调用点记录：transpile 把 `f(args)` 改成 $callNamed，
+ * 分析时可收集 call@ 所需的 AbsCallRecord。
+ * 成员缺失诊断见 member-diag.ts（共用，避免循环依赖）。
+ */
+
+type EvalCallRecord = {
+    fnName: string;
+    args: Abs[];
+    result: Abs;
+    callLoc?: {
+        line: number;
+        column: number;
+    };
+    threw?: boolean;
+};
+/** B 赋值记录（与 ast-records.ts AbsAssignRecord 同形；structuralAssignIssues 消费） */
+type EvalAbsAssignRecord = {
+    name: string;
+    prev: Abs | undefined;
+    next: Abs;
+    line?: number;
+    column?: number;
+    conditional?: boolean;
+};
+/** 返回先前 collector，便于嵌套调用 save/restore（禁止 finally 置 null 砸外层） */
+declare function setEvalAssignCollector(collector: ((r: EvalAbsAssignRecord) => void) | null): ((r: EvalAbsAssignRecord) => void) | null;
+/** 结构赋值记录（transpile 插桩调用；无收集器时 no-op） */
+declare function $assignRecord(name: string, prev: Abs | undefined, next: Abs, line: number, column: number, conditional: boolean): void;
+declare function setEvalBindingSink(sink: Map<string, unknown> | null): void;
+/** 顶层绑定记录（transpile 插桩调用） */
+declare function $recordBinding(name: string, value: unknown): void;
+/** 返回先前 collector，便于嵌套调用 save/restore（禁止 finally 置 null 砸外层） */
+/** 成员/方法调用点打点（$invoke 等；无收集器时 no-op）。不进 $callNamed 预算。 */
+declare function noteEvalCallRecord(r: EvalCallRecord): void;
+declare function setEvalCallCollector(collector: ((r: EvalCallRecord) => void) | null): ((r: EvalCallRecord) => void) | null;
+declare function getEvalCallCollector(): ((r: EvalCallRecord) => void) | null;
+/**
+ * 按名调用并记录。
+ * loc: [line, column]（1-based line，0-based column，与 Babel 一致）
+ * argLocs: 与 args 对齐的实参字面量源位置（provenance；无 loc 用 null）
+ */
+declare const MAX_EVAL_CALL_DEPTH = 64;
+/** 总调用上限：与 call-budget.MAX_TOTAL_CALLS 同阀（递归×循环×分支展开的
+ *  规模阀）。200k 在病态展开（lodash _baseFlatten）下 ~30s，20k 收口到
+ *  ~3s——截断 → opaque（更保守，zero-FP 安全）。 */
+declare const MAX_EVAL_TOTAL_CALLS = 20000;
+/** 宿主入口前强制清零（测试 / 显式 API）。执行入口请用 enterEvalCallBudgetSession。 */
+declare function resetEvalCallBudget(): void;
+/** @nudo:budget：在 run 期间抬高 B 路径 depth/calls 上限；finally 恢复 */
+declare function withEvalBudgetOverride(budget: {
+    depth?: number;
+    calls?: number;
+}, run: () => void): void;
+/**
+ * 进入执行会话。最外层才重置预算；嵌套（导出桥 $call → apply →
+ * callTranspiledExportFull）必须继承外层深度/cycle 键/totalCalls，否则
+ * 外层帧被抹掉，$callNamed 的 evalExitCall 再把 depth 打成负数。
+ */
+declare function enterEvalCallBudgetSession(): void;
+/** 退出执行会话。禁止把 sessionDepth 留在负数。 */
+declare function exitEvalCallBudgetSession(): void;
+/** 预算快照（测试/诊断：断言嵌套期间 depth/keys 不被清空、depth 不为负） */
+declare function getEvalCallBudgetState(): {
+    depth: number;
+    totalCalls: number;
+    activeKeys: number;
+    sessionDepth: number;
+};
+declare function $callNamed(name: string, fn: unknown, args: Abs[], loc?: [number, number], argLocs?: Array<[number, number] | null | undefined>): Abs;
+
 /**
  * 共享纯类型结点（AstEnv / HofCollectCtx / HofSite / RelSource）。
  *
@@ -365,4 +463,124 @@ type AstEnv = {
     hofCollect?: HofCollectCtx;
 };
 
-export { $tryDigestSoft as $, type Abs as A, absToString as B, type Confidence as C, and as D, ERROR_FAMILY as E, anyAbs as F, anyVar as G, type HofCollectCtx as H, type ImplicationOracle as I, app as J, bigintLit as K, type LiteralValue as L, type MayThrowEffect as M, bool as N, boolLit as O, type PrimName as P, confJoin as Q, type RelSource as R, type Shape as S, type Term as T, emptyPhi as U, eq as V, ge as W, geNum as X, getImplicationOracle as Y, gt as Z, gtNum as _, type Pred as a, implies as a0, isBigPrim as a1, isExactLit as a2, isNumPrim as a3, isStrPrim as a4, le as a5, leNum as a6, lit as a7, litValue as a8, lt as a9, termToString as aA, unknown as aB, v as aC, ltNum as aa, ne as ab, negatePred as ac, never as ad, not as ae, num as af, numLit as ag, numVar as ah, obj as ai, or as aj, pFalse as ak, pTrue as al, phiAnd as am, predEquals as an, predToString as ao, predVars as ap, primToTypeof as aq, ptypeof as ar, setImplicationOracle as as, shapeOfTerm as at, shapeToString as au, simplifyTerm as av, str as aw, strLit as ax, substPred as ay, termEquals as az, type Phi as b, type AstEnv as c, $tryMarkSoft as d, $tryReleaseSoft as e, errorTypeAbs as f, filterDeclaredThrows as g, filterGateThrows as h, filterIgnoredThrows as i, flushMayThrowEffects as j, formatThrowsAbs as k, getMayThrowCollector as l, isThrowsIgnored as m, mayThrowEffectsToAbs as n, orphanMayThrowEffects as o, popMayThrowFrame as p, pushMayThrowFrame as q, recordMayThrow as r, runWithMayThrowSession as s, setMayThrowCollector as t, throwAbsToKinds as u, throwsKindCovered as v, type HofSite as w, TYPEOF_NAMES as x, type TypeofName as y, abs as z };
+/**
+ * Abs 模块面（无 fs）：import 绑定 + export 收集。
+ * 解析路径/读文件在 host；core 只吃「specifier → 导出表」。
+ */
+
+type AbsModuleExports = {
+    named: Record<string, Abs>;
+    default?: Abs;
+    /**
+     * 导出表来自成功求值（evalExportsToModuleExports）。
+     * fail-closed 空表 / harvest stub / env 手写表不设——missing-export 只对
+     * 成功求值的表报（zero-FP，避免与 module-missing 叠报）。
+     */
+    evaluated?: boolean;
+};
+/**
+ * 命名空间 Abs（`import * as ns` / `export * as ns` / CJS require 绑定）：
+ * open + path——导出收集可能不全（CJS 收集失败等），缺失成员是分析
+ * 视图不完整，不得按「运行时缺失」判定（不可调用判定会假抛 TypeError）。
+ * 单一构造点：bindImports / run.ts namespaceAbsOf / abs-modules-graph 同口径。
+ */
+declare function namespaceAbsOf(mod: AbsModuleExports): Abs;
+/** 把 import 说明符绑定进 env（宿主已求值依赖） */
+declare function bindImports(node: ImportDeclaration, env: AstEnv, modules: Record<string, AbsModuleExports>): void;
+/**
+ * 从已求值 env + AST 收集 ESM 导出。
+ * 支持：export function/const、export { a, b as c }、export default（具名）、
+ * 以及带 source 的 re-export（`export { a } from "mod"` / `export * from "mod"` /
+ * `export * as ns from "mod"`——需 host 传入已求值 modules）。
+ */
+declare function collectAbsExports(file: File, env: AstEnv, modules?: Record<string, AbsModuleExports>): AbsModuleExports;
+
+type RunTranspiledOptions = {
+    /** 说明符 → 依赖导出（host 模块图或 runTranspiled 产物） */
+    modules?: Record<string, AbsModuleExports | Record<string, unknown>>;
+    maxLoopIters?: number;
+    /** analyze = 跳过效应性顶层语句 */
+    mode?: "exec" | "analyze";
+    /** @nudo:replace 注入值：varName → Abs */
+    replacements?: Record<string, Abs>;
+    /** @nudo:replace 匹配表：传给 transpile */
+    replacementTargets?: Array<{
+        target: string;
+        varName: string;
+        stmtStart?: number;
+        stmtEnd?: number;
+    }>;
+    /** @nudo:as 注入值：varName → Abs */
+    asOverrides?: Record<string, Abs>;
+    /** @nudo:as 语句范围表 */
+    asOverrideTargets?: Array<{
+        varName: string;
+        stmtStart: number;
+        stmtEnd: number;
+    }>;
+    /** @nudo:env 全局 Abs（JSON/Math/console…）→ 作用域绑定 */
+    envGlobals?: Record<string, Abs>;
+    /** @nudo:mock 注入值：name → Abs（mockDirectivesToAbsSeeds 产物） */
+    mocks?: Record<string, Abs>;
+    /** 宽松全局（调用点发现 exec 采集：未声明全局调用保守 unknown 不中断） */
+    lenientGlobals?: boolean;
+};
+/**
+ * inject/modules **内容**指纹（memo 键）。对象身份对「每次新建同内容」
+ * 的 CLI 注入不稳——同一语义的 inject 跨 checkSource 调用会 miss 缓存。
+ */
+declare function runTranspiledOptionsMemoKey(opts: RunTranspiledOptions | undefined): string;
+declare const RUNTIME_IMPORT_RE: RegExp;
+declare function bindingsOf(run: Record<string, unknown>): Map<string, unknown> | undefined;
+/**
+ * 执行一段 求值引擎程序，返回顶层 `export function` / `export const`。
+ */
+declare function runTranspiled(source: string, opts?: RunTranspiledOptions): Record<string, unknown>;
+/** evaluator 回落事件（观测单一埋点；reason: unsupported:* = 能力边界，internal = 引擎自身缺陷） */
+type EvalFallback = {
+    reason: string;
+    message: string;
+    loc?: {
+        line: number;
+        column: number;
+    };
+};
+declare function setEvalFallbackCollector(collector: ((f: EvalFallback) => void) | null): void;
+/** 表达式级求值（scan 的 case 字面量实参等静态求值面）：编译单表达式经
+ *  eval 运行时执行。bindings：表达式自由标识符 → Abs（调用方按绑定表注入）。
+ *  编译失败抛错（调用方按需 catch）。 */
+declare function evalExprAbs(expr: _babel_types.Expression, bindings?: Record<string, Abs>): Abs;
+/** 回落计数（D6-A：internal 可暴露为 health 指标，不静默吞） */
+type EvalFallbackStats = {
+    internal: number;
+    unsupported: number;
+    moduleThrow: number;
+    total: number;
+};
+/** 始终累计（与 collector 无关）——health / 测试读同一口径 */
+declare function getEvalFallbackStats(): EvalFallbackStats;
+/** 宿主入口 / health 按文件分析前重置 */
+declare function resetEvalFallbackStats(): void;
+/** 记录一次 B 回落（body-fn / tryRunTranspiled / call 边界兜底共用） */
+declare function noteEvalFallback(e: unknown): void;
+/**
+ * B 单一入口：runTranspiled + 类型化回落观测。
+ * unsupported:*（能力边界）/ internal（B 缺陷）都记录到收集器；
+ * 返回 undefined 表示调用方应走解释路径。
+ */
+declare function tryRunTranspiled(source: string, opts?: RunTranspiledOptions): Record<string, unknown> | undefined;
+type TranspiledCallResult = {
+    result: Abs;
+    /** 非 never 表示函数可能 throw 该类型 */
+    throws: Abs;
+};
+/** 调用 runTranspiled 导出（捕获 $throw）。opts.phi：入口 Φ 种子
+ *  （instantiate/symbolic 的约束入口——eval 侧路径条件收窄）。
+ *  嵌套进入（导出桥 apply）继承外层预算；仅最外层宿主入口重置。 */
+declare function callTranspiledExportFull(exports: Record<string, unknown>, name: string, args: Abs[], opts?: {
+    phi?: Phi;
+}): TranspiledCallResult;
+/** 调用 runTranspiled 导出（仅结果） */
+declare function callTranspiledExport(exports: Record<string, unknown>, name: string, args: Abs[]): Abs;
+
+export { $tryDigestSoft as $, type Abs as A, throwAbsToKinds as B, type Confidence as C, throwsKindCovered as D, ERROR_FAMILY as E, withEvalBudgetOverride as F, type HofSite as G, type HofCollectCtx as H, type AbsModuleExports as I, type RunTranspiledOptions as J, $assignRecord as K, $callNamed as L, type MayThrowEffect as M, $recordBinding as N, type EvalAbsAssignRecord as O, type PrimName as P, type EvalCallRecord as Q, type RelSource as R, type Shape as S, type Term as T, type EvalFallback as U, type ImplicationOracle as V, type LiteralValue as W, MAX_EVAL_CALL_DEPTH as X, MAX_EVAL_TOTAL_CALLS as Y, RUNTIME_IMPORT_RE as Z, TYPEOF_NAMES as _, type Pred as a, setEvalCallCollector as a$, type TranspiledCallResult as a0, type TypeofName as a1, abs as a2, absToString as a3, and as a4, anyAbs as a5, anyVar as a6, app as a7, assumeFinite as a8, bigintLit as a9, lt as aA, ltNum as aB, namespaceAbsOf as aC, ne as aD, negatePred as aE, never as aF, not as aG, noteEvalCallRecord as aH, noteEvalFallback as aI, num as aJ, numLit as aK, numVar as aL, obj as aM, or as aN, pFalse as aO, pTrue as aP, phiAnd as aQ, predEquals as aR, predToString as aS, predVars as aT, primToTypeof as aU, ptypeof as aV, resetEvalCallBudget as aW, runTranspiled as aX, runTranspiledOptionsMemoKey as aY, setEvalAssignCollector as aZ, setEvalBindingSink as a_, bindImports as aa, bindingsOf as ab, bool as ac, boolLit as ad, callTranspiledExport as ae, callTranspiledExportFull as af, collectAbsExports as ag, confJoin as ah, emptyPhi as ai, eq as aj, evalExprAbs as ak, ge as al, geNum as am, getEvalCallCollector as an, getImplicationOracle as ao, gt as ap, gtNum as aq, implies as ar, isBigPrim as as, isExactLit as at, isNumPrim as au, isStrPrim as av, le as aw, leNum as ax, lit as ay, litValue as az, type Phi as b, setEvalFallbackCollector as b0, setImplicationOracle as b1, shapeOfTerm as b2, shapeToString as b3, simplifyTerm as b4, str as b5, strLit as b6, substPred as b7, termEquals as b8, termToString as b9, tryRunTranspiled as ba, unknown as bb, v as bc, type AstEnv as c, $tryMarkSoft as d, $tryReleaseSoft as e, type EvalFallbackStats as f, enterEvalCallBudgetSession as g, errorTypeAbs as h, exitEvalCallBudgetSession as i, filterDeclaredThrows as j, filterGateThrows as k, filterIgnoredThrows as l, flushMayThrowEffects as m, formatThrowsAbs as n, getEvalCallBudgetState as o, getEvalFallbackStats as p, getMayThrowCollector as q, isThrowsIgnored as r, mayThrowEffectsToAbs as s, orphanMayThrowEffects as t, popMayThrowFrame as u, pushMayThrowFrame as v, recordMayThrow as w, resetEvalFallbackStats as x, runWithMayThrowSession as y, setMayThrowCollector as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nudojs/core",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "engines": {
     "node": ">=20"
   },