@nudojs/core 1.5.0 → 1.6.0

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { c as AstEnv, A as Abs, b as Phi, T as Term, I as HofCollectCtx, C as Confidence, S as Shape, a as Pred, R as RelSource, J as HofSite, K as AbsModuleExports, N as RunTranspiledOptions } from './run-WJfj477N.js';
-export { O as $assignRecord, Q as $call, U as $callNamed, V as $recordBinding, W as AbsApplyNoThrow, X as AbsApplyNoThrowFn, Y as AbsApplyResult, Z as AbsApplyReturn, _ as AbsFnImpl, a0 as AbsSigImpl, a1 as EvalAbsAssignRecord, a2 as EvalCallRecord, a3 as EvalFallback, a4 as ImplicationOracle, a5 as LitValueResult, L as LiteralValue, a6 as MAX_EVAL_CALL_DEPTH, a7 as MAX_EVAL_TOTAL_CALLS, P as PrimName, a8 as RUNTIME_IMPORT_RE, a9 as TYPEOF_NAMES, aa as TranspiledCallResult, ab as TypeofName, ac as abs, ad as absFunction, ae as absOnly, af as absToString, ag as and, ah as anyAbs, ai as anyVar, aj as app, ak as assumeFinite, al as attachFnImpl, am as bigintLit, an as bindImports, ao as bindingsOf, ap as bool, aq as boolLit, ar as callTranspiledExport, as as callTranspiledExportApply, at as callTranspiledExportFull, au as collectAbsExports, av as confJoin, aw as emptyPhi, ax as eq, ay as evalExprAbs, az as ge, aA as geNum, aB as getEvalCallCollector, aC as getFnImpl, aD as getImplicationOracle, aE as gt, aF as gtNum, aG as implies, aH as isAbsApplyResult, aI as isBigPrim, aJ as isExactLit, aK as isNumPrim, aL as isStrPrim, aM as le, aN as leNum, aO as lit, aP as litValue, aQ as lt, aR as ltNum, aS as makeAbsApplyResult, aT as markPureFn, aU as namespaceAbsOf, aV as ne, aW as negatePred, aX as never, aY as not, aZ as noteEvalCallRecord, a_ as noteEvalFallback, a$ as num, b0 as numLit, b1 as numVar, b2 as obj, b3 as or, b4 as pFalse, b5 as pTrue, b6 as phiAnd, b7 as predEquals, b8 as predToString, b9 as predVars, ba as primToTypeof, bb as ptypeof, bc as pureFnNameOf, bd as relationFingerprint, be as relationFn, bf as resetEvalCallBudget, bg as runTranspiled, bh as runTranspiledOptionsMemoKey, bi as setEvalAssignCollector, bj as setEvalBindingSink, bk as setEvalCallCollector, bl as setEvalFallbackCollector, bm as setImplicationOracle, bn as shapeOfTerm, bo as shapeOnlyFn, bp as shapeToString, bq as simplifyTerm, br as str, bs as strLit, bt as substPred, bu as termEquals, bv as termToString, bw as tryRunTranspiled, bx as unknown, by as v } from './run-WJfj477N.js';
+import { c as AstEnv, A as Abs, b as Phi, T as Term, I as HofCollectCtx, C as Confidence, S as Shape, a as Pred, R as RelSource, J as HofSite, K as AbsModuleExports, N as RunTranspiledOptions } from './run-Dg7gQO2z.js';
+export { O as $assignRecord, Q as $call, U as $callNamed, V as $recordBinding, W as AbsApplyNoThrow, X as AbsApplyNoThrowFn, Y as AbsApplyResult, Z as AbsApplyReturn, _ as AbsFnImpl, a0 as AbsSigImpl, a1 as EvalAbsAssignRecord, a2 as EvalCallRecord, a3 as EvalFallback, a4 as ImplicationOracle, a5 as LitValueResult, L as LiteralValue, a6 as MAX_EVAL_CALL_DEPTH, a7 as MAX_EVAL_TOTAL_CALLS, P as PrimName, a8 as RUNTIME_IMPORT_RE, a9 as TYPEOF_NAMES, aa as TranspiledCallResult, ab as TypeofName, ac as abs, ad as absFunction, ae as absOnly, af as absToString, ag as and, ah as anyAbs, ai as anyVar, aj as app, ak as assumeFinite, al as attachFnImpl, am as bigintLit, an as bindImports, ao as bindingsOf, ap as bool, aq as boolLit, ar as callTranspiledExport, as as callTranspiledExportApply, at as callTranspiledExportFull, au as collectAbsExports, av as confJoin, aw as emptyPhi, ax as eq, ay as evalExprAbs, az as ge, aA as geNum, aB as getEvalCallCollector, aC as getFnImpl, aD as getImplicationOracle, aE as gt, aF as gtNum, aG as implies, aH as isAbsApplyResult, aI as isAbsVal, aJ as isBigPrim, aK as isExactLit, aL as isNumPrim, aM as isStrPrim, aN as le, aO as leNum, aP as lit, aQ as litValue, aR as lt, aS as ltNum, aT as makeAbsApplyResult, aU as markPureFn, aV as namespaceAbsOf, aW as ne, aX as negatePred, aY as never, aZ as not, a_ as noteEvalCallRecord, a$ as noteEvalFallback, b0 as num, b1 as numLit, b2 as numVar, b3 as obj, b4 as or, b5 as pFalse, b6 as pTrue, b7 as phiAnd, b8 as predEquals, b9 as predToString, ba as predVars, bb as primToTypeof, bc as ptypeof, bd as pureFnNameOf, be as relationFingerprint, bf as relationFn, bg as resetEvalCallBudget, bh as runTranspiled, bi as runTranspiledOptionsMemoKey, bj as setEvalAssignCollector, bk as setEvalBindingSink, bl as setEvalCallCollector, bm as setEvalFallbackCollector, bn as setImplicationOracle, bo as shapeOfTerm, bp as shapeOnlyFn, bq as shapeToString, br as simplifyTerm, bs as str, bt as strLit, bu as substPred, bv as termEquals, bw as termToString, bx as tryRunTranspiled, by as unknown, bz as v } from './run-Dg7gQO2z.js';
 import { Node, File } from '@babel/types';
-import { p as parseSource, L as LeakBudget, E as EffectiveInterfaceOpts, b as LoadDepsFingerprint, o as CheckReport, N as NudoConstraint } from './check-report-Ci1dDysO.js';
-export { q as CONSTRAINT_BUILDERS, u as CONSTRAINT_BUILDER_NAMES, v as CONSTRAINT_EXPR_RE, w as CheckAction, C as CheckIssue, x as CheckJson, y as CheckJsonMulti, z as ConstraintBuilder, D as Diagnostic, A as EffectiveInterface, G as GitlabCodeQualityIssue, B as InterfaceDiag, I as InterfaceSource, F as InterfaceTierInfo, a as InterfaceTierOpts, H as NamedImport, J as NudoField, K as NudoFnConstraint, O as NudoSidecarError, P as NudoSig, R as RefineDiag, Q as RefineEntry, S as RefineResolveOpts, T as SELF, U as actionsForIssue, V as andC, W as any, X as array, Y as boolean, Z as checkArg, _ as checkCall, $ as constraintAdmitsNullish, a0 as constraintToEntryAbs, a1 as drainPromiseMicros, a2 as effectiveInterface, a3 as enterPromiseExecutorScope, a4 as evalPromiseCtor, a5 as evalPromiseMethod, a6 as evalPromiseStatic, a7 as execNudoModule, a8 as extractDeclaredThrows, a9 as extractFnBudget, aa as extractNudoImports, ab as extractRefineReturnFromSource, ac as extractRefinesFromSource, ad as fn, ae as fnConstraintToEntryReqs, af as formatCheckReport, ag as formatConstraint, ah as formatDiagnostics, ai as formatEffectiveInterfaceDisplay, aj as formatGithubAnnotations, ak as formatGitlabCodeQuality, al as formatInterfaceTierLine, am as generatedExportNames, an as getParseSourceCacheSize, ao as getTerm, ap as instantiateConstraint, aq as interfaceDiagCount, ar as interfaceSourceOf, as as interfaceTierOf, at as isIntFlag, au as isNodeModulesPath, av as isNudoConstraint, aw as leavePromiseExecutorScope, ax as lenTerm, ay as litC, az as localNamedExports, aA as notePromiseExecutorFork, aB as nullable, aC as number, aD as omit, aE as partial, aF as pick, aG as queuePromiseMicro, aH as refineDiagCount, aI as refineToIndexedFull, aJ as resetNudoModuleExecCache, aK as resetParseSourceCache, aL as resetSidecarLoadFailureCache, aM as serializeCheckJson, aN as serializeCheckJsonMulti, aO as setInterfaceDiagCollector, aP as setRefineDiagCollector, aQ as shape, aR as sidecarClosureFingerprint, aS as sidecarPathOf, aT as string, aU as takeInterfaceDiags, aV as takeInterfaceDiagsSince, aW as takeRefineDiags, aX as takeRefineDiagsSince, aY as throwConstraintToKinds, aZ as union } from './check-report-Ci1dDysO.js';
+import { p as parseSource, L as LeakBudget, E as EffectiveInterfaceOpts, b as LoadDepsFingerprint, v as CheckReport, N as NudoConstraint, c as ProjectionBudget } from './projection-budget-CGbs16aX.js';
+export { w as CONSTRAINT_BUILDERS, x as CONSTRAINT_BUILDER_NAMES, y as CONSTRAINT_EXPR_RE, z as CheckAction, C as CheckIssue, A as CheckJson, B as CheckJsonMulti, D as ConstraintBuilder, F as Diagnostic, G as EffectiveInterface, H as GitlabCodeQualityIssue, J as InterfaceDiag, I as InterfaceSource, K as InterfaceTierInfo, a as InterfaceTierOpts, O as NamedImport, Q as NudoField, R as NudoFnConstraint, S as NudoSidecarError, T as NudoSig, U as RefineDiag, V as RefineEntry, W as RefineResolveOpts, X as SELF, Y as actionsForIssue, Z as andC, _ as any, $ as array, a0 as boolean, a1 as checkArg, a2 as checkCall, a3 as constraintAdmitsNullish, a4 as constraintToEntryAbs, a5 as drainPromiseMicros, a6 as effectiveInterface, a7 as enterPromiseExecutorScope, a8 as evalPromiseCtor, a9 as evalPromiseMethod, aa as evalPromiseStatic, ab as execNudoModule, ac as extractDeclaredThrows, ad as extractFnBudget, ae as extractNudoImports, af as extractRefineReturnFromSource, ag as extractRefinesFromSource, ah as fn, ai as fnConstraintToEntryReqs, aj as formatCheckReport, ak as formatConstraint, al as formatDiagnostics, am as formatEffectiveInterfaceDisplay, an as formatGithubAnnotations, ao as formatGitlabCodeQuality, ap as formatInterfaceTierLine, aq as generatedExportNames, ar as getParseSourceCacheSize, as as getTerm, at as instantiateConstraint, au as interfaceDiagCount, av as interfaceSourceOf, aw as interfaceTierOf, ax as isIntFlag, ay as isNodeModulesPath, az as isNudoConstraint, aA as leavePromiseExecutorScope, aB as lenTerm, aC as litC, aD as localNamedExports, aE as notePromiseExecutorFork, aF as nullable, aG as number, aH as omit, aI as partial, aJ as pick, aK as queuePromiseMicro, aL as refineDiagCount, aM as refineToIndexedFull, aN as resetNudoModuleExecCache, aO as resetParseSourceCache, aP as resetSidecarLoadFailureCache, aQ as serializeCheckJson, aR as serializeCheckJsonMulti, aS as setInterfaceDiagCollector, aT as setRefineDiagCollector, aU as shape, aV as sidecarClosureFingerprint, aW as sidecarPathOf, aX as string, aY as takeInterfaceDiags, aZ as takeInterfaceDiagsSince, a_ as takeRefineDiags, a$ as takeRefineDiagsSince, b0 as throwConstraintToKinds, b1 as union } from './projection-budget-CGbs16aX.js';
 export { $add, $arguments, $arr, $arrMutContainer, $arrRest, $arrWithHoles, $async, $asyncReturn, $await, $bitand, $bitnot, $bitor, $bitxor, $catchVal, $class, $classExpr, $collectionForEach, $concat, $copy, $del, $delRes, $div, $dynamicImport, $elems, $eq, $eqLoose, $fnVal, $for, $forInKeys, $forIter, $forOf, $fork, $ge, $gen, $get, $gt, $idx, $idxSet, $importMeta, $in, $instanceof, $instanceofNonIdent, $invoke, $invokeSuper, $isBreakTo, $isForkExit, $join, $le, $len, $lit, $loopBreak, $loopContinue, $loopReturn, $lt, $mod, $mul, $ne, $neLoose, $neg, $new, $not, $nullishTest, $obj, $objAccessor, $objRest, $optionalGet, $optionalInvoke, $orDefault, $pow, $pushLoopExit, $rawThis, $reStateCall, $regex, $rethrowIfNudoReturn, $set, $setKey, $shl, $shr, $spread, $staticInvoke, $sub, $super, $switch, $thisGet, $thisSet, $throw, $toNumber, $toNumeric, $tryCurrentMark, $tryDetachSoftCatch, $tryDigestSoftCatch, $tryDiscardSoft, $tryMark, $tryOrphanSoft, $tryPopMark, $tryReleaseSoftCatch, $tryReleaseSoftOut, $tryTakeSince, $typeof, $unknown, $updateAdd, $updateSub, $ushr, $while, $whileSeq, $yield, DEFAULT_MAX_LOOP_ITERS, EvalClassSpec, NudoLoopSignal, NudoReturn, NudoThrow, NudoUnsupportedError, TranspileOptions, asAbsVal, callAtFunctionBoundary, clearBClasses, clearStaleTermPred, currentExecPhi, fillTuple, foldRequireSpecArg, foldStaticStringExpr, getEvalClass, isArrMutator, isDefinitelyFalse, isDefinitelyTrue, isNudoBreak, isNudoContinue, isNudoReturn, isNudoThrow, litTruth, lookupObjAccessor, namespaceNameOf, pushLoopExit, pushThrowExit, registerEvalClass, runWithLoopExits, runtimeImportOf, takeLoopExits, takeThrowExits, transpile, transpileBodyNode, transpileExpression, transpileFile, transpileSource, withExecPhi } from './exec.js';
 
 /**
@@ -1106,12 +1106,17 @@ type MockModuleRecord = {
  */
 declare function parseMockModulePayload(payload: string): MockModuleRecord | undefined;
 type NudoImportRecord = {
+    /** 本地绑定名（`a as b` 的 `b`，@nudo:contract 的引用名）；namespace 记 `*ns` */
     names: string[];
+    /** local → 侧车原始导出名（`a as b` 的 `a`）；未写别名的名字不进表 */
+    importedOfLocal: Record<string, string>;
     spec: string;
 };
 /**
  * `@nudo:import` 载荷：named `{ a, b as c }` / namespace `* as ns`。
  * default 等未识别形态返回 `malformed`（由消费方发诊断）。
+ * import 绑定语义 local ← imported：`a as b` 两个名字都保留——只留 local
+ * 会让查表用错名字（`exports[b]` miss，BUG-016）。
  */
 declare function parseNudoImportPayload(payload: string): NudoImportRecord | "malformed-default" | "malformed" | undefined;
 declare function extractFileEnvNames(source: string): string[];
@@ -1202,8 +1207,10 @@ declare function literalMeetsConstraint(lv: number | string | boolean | null | u
  * lit/and 已消歧；侧车注入键名仍为 lit/and）。
  */
 
-/** Abs → 契约；不可表达 → undefined */
-declare function absToConstraint(a: Abs): NudoConstraint | undefined;
+/** Abs → 契约；不可表达 → undefined。
+ *  `budget`：共享遍历预算（DESIGN-001）——环 / 超深 shape 返回 undefined
+ *  （不可表达），调用方走既有 fallback；schema 投影传入与自身共享的实例。 */
+declare function absToConstraint(a: Abs, budget?: ProjectionBudget): NudoConstraint | undefined;
 /**
  * 工件聚合投影（设计 §4.2：先 Abs join 折叠再投影）。
  * 空列表 → undefined（无证据不产约束）。

package/dist/index.js

@@ -91,7 +91,7 @@ import {
   takeRefineDiagsSince,
   throwConstraintToKinds,
   union
-} from "./chunk-YO4GKCNE.js";
+} from "./chunk-I35CHJNO.js";
 import {
   $add,
   $arguments,
@@ -215,6 +215,7 @@ import {
   OBJECT_PROTO_METHOD_NAMES,
   PROMISE_MICRO_ERROR_LABEL,
   PROMISE_MICRO_OVERFLOW_LABEL,
+  ProjectionBudget,
   RUNTIME_IMPORT_RE,
   TYPEOF_NAMES,
   abs,
@@ -331,6 +332,7 @@ import {
   implies,
   instantiateReturn,
   isAbsApplyResult,
+  isAbsVal,
   isArrMutator,
   isBigPrim,
   isDefinitelyFalse,
@@ -507,7 +509,7 @@ import {
   v,
   withExecPhi,
   withVar
-} from "./chunk-W2MP6REI.js";
+} from "./chunk-LZJC7X5J.js";
 
 // src/environment.ts
 function createEnvironment(parent, bindings = /* @__PURE__ */ new Map()) {
@@ -1030,8 +1032,17 @@ var ARR_FALLBACK_CONF = /* @__PURE__ */ new Set([
   "path",
   "widened"
 ]);
-function absToConstraint(a) {
+function absToConstraint(a, budget = new ProjectionBudget()) {
   if (!PROJECTABLE_CONF.has(a.conf)) return void 0;
+  const stop = budget.enter(a);
+  if (stop) return void 0;
+  try {
+    return absToConstraintInner(a, budget);
+  } finally {
+    budget.exit();
+  }
+}
+function absToConstraintInner(a, budget) {
   const s = a.shape;
   switch (s.k) {
     case "prim":
@@ -1049,9 +1060,9 @@ function absToConstraint(a) {
     case "any":
       return a.pred?.op === "or" ? projectOrLiterals(a) : void 0;
     case "obj":
-      return projectObj(s.slots, s.index, s.open);
+      return projectObj(s.slots, s.index, s.open, budget);
     case "arr":
-      return projectArr(s.element);
+      return projectArr(s.element, budget);
     case "sum":
       return projectSum(s.members);
     default:
@@ -1234,18 +1245,18 @@ function projectOrLiterals(a) {
   }
   return lits.length > 0 ? union(...lits) : void 0;
 }
-function projectObj(slots, index, open) {
+function projectObj(slots, index, open, budget) {
   if (index || open) return void 0;
   const fields = {};
   for (const [k, slot] of Object.entries(slots)) {
-    const fc = absToConstraint(slot.value);
+    const fc = absToConstraint(slot.value, budget);
     if (!fc) return void 0;
     fields[k] = { constraint: fc, ...slot.optional ? { optional: true } : {} };
   }
   return { __nudoConstraint: true, preds: [], fields };
 }
-function projectArr(element) {
-  const ec = absToConstraint(element);
+function projectArr(element, budget) {
+  const ec = absToConstraint(element, budget);
   if (ec) return array(ec);
   if (element.shape.k === "prim" && isBuilderPrim(element.shape.type) && (!element.pred || element.pred.op === "true") && ARR_FALLBACK_CONF.has(element.conf)) {
     return array(primConstraint(element.shape.type));
@@ -1725,7 +1736,7 @@ function evalThrowsOf(source, fnName, args, opts = {}, phi = pTrue) {
     exports = run;
     evalRunMemo.set(runKey, exports);
   }
-  const isAbsVal = (v2) => !!v2 && typeof v2 === "object" && "shape" in v2 && "conf" in v2;
+  const isAbsVal2 = (v2) => !!v2 && typeof v2 === "object" && "shape" in v2 && "conf" in v2;
   const call = (name, callArgs) => {
     try {
       return callTranspiledExportFull(exports, name, callArgs, phi.op === "true" ? void 0 : { phi });
@@ -1734,11 +1745,11 @@ function evalThrowsOf(source, fnName, args, opts = {}, phi = pTrue) {
     }
   };
   try {
-    if (fnName in exports) return call(fnName, args);
+    if (Object.hasOwn(exports, fnName)) return call(fnName, args);
     if (fnName.includes(".")) {
       const [clsName, methodName] = fnName.split(".", 2);
       const clsAbs = exports[clsName ?? ""];
-      if (isAbsVal(clsAbs)) {
+      if (isAbsVal2(clsAbs)) {
         return invokeAsThrows(() => $staticInvoke(clsAbs, methodName ?? "", args), phi);
       }
       return void 0;
@@ -1746,7 +1757,7 @@ function evalThrowsOf(source, fnName, args, opts = {}, phi = pTrue) {
     if ("default" in exports) {
       const d = exports["default"];
       if (typeof d === "function") return call("default", args);
-      if (isAbsVal(d)) {
+      if (isAbsVal2(d)) {
         if (d.shape.k === "fn") return call("default", args);
         if (d.shape.k === "obj") {
           return invokeAsThrows(() => $invoke(d, fnName, args), phi);
@@ -1765,12 +1776,9 @@ function widenForAssign(a) {
   if (s.k === "tuple") {
     const holes = new Set(s.holes ?? []);
     const els = s.elements.filter((_, i) => !holes.has(i));
-    let el = anyAbs;
-    if (els.length > 0) {
-      el = els.map(widenForAssign).reduce((x, y) => joinAbs(x, y));
-    } else if (s.rest) {
-      el = widenForAssign(s.rest);
-    }
+    const parts = els.map(widenForAssign);
+    if (s.rest) parts.push(widenForAssign(s.rest));
+    const el = parts.length > 0 ? parts.reduce((x, y) => joinAbs(x, y)) : anyAbs;
     return abs({ k: "arr", element: el }, void 0, void 0, a.conf);
   }
   if (s.k === "obj") {
@@ -3211,6 +3219,7 @@ export {
   interfaceSourceOf,
   interfaceTierOf,
   isAbsApplyResult,
+  isAbsVal,
   isArrMutator,
   isBigPrim,
   isDefinitelyFalse,

package/dist/internal.d.ts

@@ -1,7 +1,7 @@
-import { I as InterfaceSource, a as InterfaceTierOpts, p as parseSource, C as CheckIssue } from './check-report-Ci1dDysO.js';
-export { L as LeakBudget, b as LoadDepsFingerprint, M as MAX_PROMISE_MICROS, d as defaultLeakBudget, e as exceedsBudget, c as extractAllLoadSpecs, g as getPromiseMicrosLength, l as leakIfNeeded, f as loadModuleDepsFingerprint, m as maybeLeak, n as normPath, r as resetLeakCounter, h as resolveDepPath, s as sidecarSpecsOf, i as stablePathKey, j as stablePathKeyGraph, t as termDepth, k as termNodes } from './check-report-Ci1dDysO.js';
-import { A as Abs, T as Term, c as AstEnv } from './run-WJfj477N.js';
-export { $ as $tryDigestSoft, d as $tryMarkSoft, e as $tryReleaseSoft, E as ERROR_FAMILY, f as EvalFallbackStats, M as MayThrowEffect, g as clearPureCallMemo, h as clearPureMemo, i as enterEvalCallBudgetSession, j as errorTypeAbs, k as exitEvalCallBudgetSession, l as filterDeclaredThrows, m as filterGateThrows, n as filterIgnoredThrows, o as flushMayThrowEffects, p as formatThrowsAbs, q as getEvalCallBudgetState, r as getEvalFallbackStats, s as getMayThrowCollector, t as isThrowsIgnored, u as mayThrowEffectsToAbs, v as orphanMayThrowEffects, w as popMayThrowFrame, x as pushMayThrowFrame, y as recordMayThrow, z as resetEvalFallbackStats, B as runWithMayThrowSession, D as setMayThrowCollector, F as throwAbsToKinds, G as throwsKindCovered, H as withEvalBudgetOverride } from './run-WJfj477N.js';
+import { I as InterfaceSource, a as InterfaceTierOpts, p as parseSource, C as CheckIssue } from './projection-budget-CGbs16aX.js';
+export { L as LeakBudget, b as LoadDepsFingerprint, M as MAX_PROMISE_MICROS, P as PROJECTION_MAX_DEPTH, c as ProjectionBudget, d as ProjectionStopReason, e as defaultLeakBudget, f as exceedsBudget, g as exportedNameOfLocal, h as extractAllLoadSpecs, i as getPromiseMicrosLength, l as leakIfNeeded, j as loadModuleDepsFingerprint, m as maybeLeak, n as normPath, r as resetLeakCounter, k as resolveDepPath, s as sidecarSpecsOf, o as stablePathKey, q as stablePathKeyGraph, t as termDepth, u as termNodes } from './projection-budget-CGbs16aX.js';
+import { A as Abs, T as Term, c as AstEnv } from './run-Dg7gQO2z.js';
+export { $ as $tryDigestSoft, d as $tryMarkSoft, e as $tryReleaseSoft, E as ERROR_FAMILY, f as EvalFallbackStats, M as MayThrowEffect, g as clearPureCallMemo, h as clearPureMemo, i as enterEvalCallBudgetSession, j as errorTypeAbs, k as exitEvalCallBudgetSession, l as filterDeclaredThrows, m as filterGateThrows, n as filterIgnoredThrows, o as flushMayThrowEffects, p as formatThrowsAbs, q as getEvalCallBudgetState, r as getEvalFallbackStats, s as getMayThrowCollector, t as isThrowsIgnored, u as mayThrowEffectsToAbs, v as orphanMayThrowEffects, w as popMayThrowFrame, x as pushMayThrowFrame, y as recordMayThrow, z as resetEvalFallbackStats, B as runWithMayThrowSession, D as setMayThrowCollector, F as throwAbsToKinds, G as throwsKindCovered, H as withEvalBudgetOverride } from './run-Dg7gQO2z.js';
 import { File, Node } from '@babel/types';
 
 /**
@@ -414,8 +414,26 @@ declare function denoteGuard(a: Abs, v: string): string;
  * - member access: `recv.key` for idents, `recv["key"]` otherwise
  * - template literal type fixed segments: escape `\` `` ` `` `$`
  * - comment bodies: neutralize block-comment close, line breaks, control chars
+ * - binding names (`export const/function`, params): ident + non-reserved
  */
 declare function isJsIdent(name: string): boolean;
+/**
+ * True when `name` is legal as a `const` / `function` / `class` binding
+ * (or a `.d.ts` param / type-param name): IdentifierName shape and not
+ * a reserved word. Unlike `isJsIdent`, accepts Unicode identifiers and
+ * rejects `class` / `default` / `let` / `eval` / …
+ */
+declare function isJsBindingIdent(name: string): boolean;
+/**
+ * Binding name for a generated `export const` / `export function` slot.
+ *
+ * - already a legal binding → unchanged (Unicode names preserved)
+ * - reserved word → `_` prefix (`class` → `_class`)
+ * - otherwise sanitize: non-ident chars → `_`, leading non-start → `_` prefix
+ * - `used` (when given) de-duplicates within one generated module
+ *   (`a_b`, `a_b_2`, …) so cleaned names cannot collide
+ */
+declare function toJsBindingIdent(name: string, used?: Set<string>): string;
 /**
  * Object-literal / type-member key: bare ident or canonical integer,
  * otherwise JSON-quoted. Leading-zero digit keys (`01`) stay quoted — bare
@@ -651,4 +669,4 @@ declare function runWithEvalMissingSlot<T>(enabled: boolean, body: () => T): T;
  */
 declare function noteObjSlotMissing(recv: Abs | undefined, name: string, loc?: [number, number]): boolean;
 
-export { type AbsBudgetStats, type AbsInlay, type ArgDerivation, type ClassDef, type CollectAbsInlaysOpts, type DerivationNode, type EvalMemberDiag, FORK_TRUNCATION_LABEL, type FnFp, HOST_EFFECT_LABEL_PREFIX, type InjectedDomainEvidenceOpts, type InjectedDomainRecord, MAX_CALL_DEPTH, MAX_EVAL_TOTAL_FORKS, MAX_TOTAL_CALLS, type MethodDef, OBJECT_PROTO_NAMES, PROMISE_MICRO_ERROR_LABEL, PROMISE_MICRO_OVERFLOW_LABEL, type StringLiteralSpan, type TemplateMeta, type TemplatePartDesc, type TemplatePartView, type TemplatePredicateDecision, abortDerivationSession, absTemplateViews, allFixedTextOfViews, anyMemberResult, awaitAbs, beginDerivationSession, bumpEvalForkBudget, callBudgetKey, canSkipLiteralCallScan, checkInjectedDomainEvidence, classChainNames, classFromMethods, coerceAsyncReturn, collectAbsInlays, concatString, createTemplateAbs, decideEndsWith, decideIncludes, decideStartsWith, defineClass, definitelyUncallableMember, denoteGuard, derivationChain, endDerivationSession, enterCall, escapeTemplateTypeFixed, exitCall, fixedLengthOfViews, fnFingerprints, formatObjectKey, formatTemplateNameViews, generalizeSourceKeyPart, getAbsCallBudgetStats, getAbsOrigin, getClass, getClassChain, getDerivation, getEvalForkBudgetLimit, getEvalForkCount, getFnNameAndBodies, hasDerivationSession, hashSource, instanceOf, instantiateClass, isEvalMissingSlotEnabled, isJsIdent, isNullishAbs, isTemplateLike, knownPrefixOfViews, knownSuffixOfViews, listTopFunctions, lookupMethod, lookupMethodWithOwner, lookupSuperMethod, maskCommentsAndStrings, mergeAdjacentFixedViews, noteAbsTruncation, noteAnyMemberMayThrow, noteDerivationAdd, noteDerivationJoin, noteEvalForkTruncation, noteHostEffectBlocked, noteMemberDispatchMiss, noteNullishMemberThrows, noteObjSlotMissing, notePrimMemberMissing, noteUnknownMemberMissing, popCallLoc, projectBrand, projectDerivationDsl, pushCallLoc, recordMemberDiag, resetAbsCallBudget, resetEvalForkBudget, resetFnFpCache, resetHashSourceCache, runWithEvalMissingSlot, safeMemberAccess, sanitizeCommentText, scanStringLiterals, setAbsTruncationCollector, setDerivation, setDerivationCollector, setEvalForkBudgetLimit, setEvalMissingSlotEnabled, setMemberDiagCollector, sourceHasCjsExports, sourceHasModuleDependency, sourceHasRequireCall, stableAnalyzeKeySource, stableCallId, stripCommentsAndStrings, stripStringsKeepComments, superNameOf, tagAbsOrigin, tagDerivationRoot, templateMatchesValue, templatePartsOf, termKey, truncatedAbs, viewTemplateParts, withFnBudgetOverride, wrapPromise };
+export { type AbsBudgetStats, type AbsInlay, type ArgDerivation, type ClassDef, type CollectAbsInlaysOpts, type DerivationNode, type EvalMemberDiag, FORK_TRUNCATION_LABEL, type FnFp, HOST_EFFECT_LABEL_PREFIX, type InjectedDomainEvidenceOpts, type InjectedDomainRecord, MAX_CALL_DEPTH, MAX_EVAL_TOTAL_FORKS, MAX_TOTAL_CALLS, type MethodDef, OBJECT_PROTO_NAMES, PROMISE_MICRO_ERROR_LABEL, PROMISE_MICRO_OVERFLOW_LABEL, type StringLiteralSpan, type TemplateMeta, type TemplatePartDesc, type TemplatePartView, type TemplatePredicateDecision, abortDerivationSession, absTemplateViews, allFixedTextOfViews, anyMemberResult, awaitAbs, beginDerivationSession, bumpEvalForkBudget, callBudgetKey, canSkipLiteralCallScan, checkInjectedDomainEvidence, classChainNames, classFromMethods, coerceAsyncReturn, collectAbsInlays, concatString, createTemplateAbs, decideEndsWith, decideIncludes, decideStartsWith, defineClass, definitelyUncallableMember, denoteGuard, derivationChain, endDerivationSession, enterCall, escapeTemplateTypeFixed, exitCall, fixedLengthOfViews, fnFingerprints, formatObjectKey, formatTemplateNameViews, generalizeSourceKeyPart, getAbsCallBudgetStats, getAbsOrigin, getClass, getClassChain, getDerivation, getEvalForkBudgetLimit, getEvalForkCount, getFnNameAndBodies, hasDerivationSession, hashSource, instanceOf, instantiateClass, isEvalMissingSlotEnabled, isJsBindingIdent, isJsIdent, isNullishAbs, isTemplateLike, knownPrefixOfViews, knownSuffixOfViews, listTopFunctions, lookupMethod, lookupMethodWithOwner, lookupSuperMethod, maskCommentsAndStrings, mergeAdjacentFixedViews, noteAbsTruncation, noteAnyMemberMayThrow, noteDerivationAdd, noteDerivationJoin, noteEvalForkTruncation, noteHostEffectBlocked, noteMemberDispatchMiss, noteNullishMemberThrows, noteObjSlotMissing, notePrimMemberMissing, noteUnknownMemberMissing, popCallLoc, projectBrand, projectDerivationDsl, pushCallLoc, recordMemberDiag, resetAbsCallBudget, resetEvalForkBudget, resetFnFpCache, resetHashSourceCache, runWithEvalMissingSlot, safeMemberAccess, sanitizeCommentText, scanStringLiterals, setAbsTruncationCollector, setDerivation, setDerivationCollector, setEvalForkBudgetLimit, setEvalMissingSlotEnabled, setMemberDiagCollector, sourceHasCjsExports, sourceHasModuleDependency, sourceHasRequireCall, stableAnalyzeKeySource, stableCallId, stripCommentsAndStrings, stripStringsKeepComments, superNameOf, tagAbsOrigin, tagDerivationRoot, templateMatchesValue, templatePartsOf, termKey, toJsBindingIdent, truncatedAbs, viewTemplateParts, withFnBudgetOverride, wrapPromise };

package/dist/internal.js

@@ -1,6 +1,7 @@
 import {
   canSkipLiteralCallScan,
   checkInjectedDomainEvidence,
+  exportedNameOfLocal,
   extractAllLoadSpecs,
   fnFingerprints,
   generalizeFromAst,
@@ -18,7 +19,7 @@ import {
   stableAnalyzeKeySource,
   stablePathKey,
   stablePathKeyGraph
-} from "./chunk-YO4GKCNE.js";
+} from "./chunk-I35CHJNO.js";
 import {
   $tryDigestSoft,
   $tryMarkSoft,
@@ -31,8 +32,10 @@ import {
   MAX_PROMISE_MICROS,
   MAX_TOTAL_CALLS,
   OBJECT_PROTO_NAMES,
+  PROJECTION_MAX_DEPTH,
   PROMISE_MICRO_ERROR_LABEL,
   PROMISE_MICRO_OVERFLOW_LABEL,
+  ProjectionBudget,
   abortDerivationSession,
   absTemplateViews,
   allFixedTextOfViews,
@@ -157,7 +160,7 @@ import {
   withEvalBudgetOverride,
   withFnBudgetOverride,
   wrapPromise
-} from "./chunk-W2MP6REI.js";
+} from "./chunk-LZJC7X5J.js";
 
 // src/algebra/inlay.ts
 function listFunctions(source) {
@@ -311,10 +314,85 @@ function collectAbsInlays(source, opts) {
 
 // src/algebra/codegen-escape.ts
 var JS_IDENT = /^[A-Za-z_$][A-Za-z0-9_$]*$/;
+var JS_BINDING_IDENT = /^(?:[$_\p{ID_Start}])(?:[$\u200C\u200D\p{ID_Continue}])*$/u;
+var JS_BINDING_RESERVED = /* @__PURE__ */ new Set([
+  // ECMA-262 keywords
+  "break",
+  "case",
+  "catch",
+  "class",
+  "const",
+  "continue",
+  "debugger",
+  "default",
+  "delete",
+  "do",
+  "else",
+  "enum",
+  "export",
+  "extends",
+  "false",
+  "finally",
+  "for",
+  "function",
+  "if",
+  "import",
+  "in",
+  "instanceof",
+  "new",
+  "null",
+  "return",
+  "super",
+  "switch",
+  "this",
+  "throw",
+  "true",
+  "try",
+  "typeof",
+  "var",
+  "void",
+  "while",
+  "with",
+  "yield",
+  // strict mode / module-code reserved
+  "let",
+  "static",
+  "await",
+  "implements",
+  "interface",
+  "package",
+  "private",
+  "protected",
+  "public",
+  // never legal bindings in strict / module code
+  "eval",
+  "arguments"
+]);
 var JS_CANONICAL_INT = /^(?:0|[1-9]\d*)$/;
 function isJsIdent(name) {
   return JS_IDENT.test(name);
 }
+function isJsBindingIdent(name) {
+  return JS_BINDING_IDENT.test(name) && !JS_BINDING_RESERVED.has(name);
+}
+function toJsBindingIdent(name, used) {
+  let base = name;
+  if (!JS_BINDING_IDENT.test(base)) {
+    base = base.replace(/[^\p{ID_Continue}$\u200C\u200D]/gu, "_");
+    if (base.length === 0) base = "_";
+    else if (!/^[$_\p{ID_Start}]/u.test(base)) base = `_${base}`;
+  }
+  if (JS_BINDING_RESERVED.has(base)) base = `_${base}`;
+  if (!used) return base;
+  let n = base;
+  let i = 2;
+  while (used.has(n)) {
+    n = `${base}_${i}`;
+    i++;
+  }
+  used.add(n);
+  return n;
+}
 function formatObjectKey(k) {
   if (JS_IDENT.test(k)) return k;
   if (JS_CANONICAL_INT.test(k)) return k;
@@ -332,16 +410,25 @@ function sanitizeCommentText(text) {
 
 // src/algebra/denote.ts
 function denoteGuard(a, v) {
-  if (a.term?.op === "lit" && (!a.pred || a.pred.op === "true")) {
-    return eqGuard(v, a.term.value);
+  return denoteGuardB(a, v, new ProjectionBudget());
+}
+function denoteGuardB(a, v, budget) {
+  const stop = budget.enter(a);
+  if (stop) return `/* nudo:truncated:${stop} */ true`;
+  try {
+    if (a.term?.op === "lit" && (!a.pred || a.pred.op === "true")) {
+      return eqGuard(v, a.term.value);
+    }
+    const shape = denoteShape(a.shape, v, budget);
+    const pred = denotePred(a, v);
+    if (shape === "true") return pred;
+    if (pred === "true") return shape;
+    return `(${shape}) && (${pred})`;
+  } finally {
+    budget.exit();
   }
-  const shape = denoteShape(a.shape, v);
-  const pred = denotePred(a, v);
-  if (shape === "true") return pred;
-  if (pred === "true") return shape;
-  return `(${shape}) && (${pred})`;
 }
-function denoteShape(s, v) {
+function denoteShape(s, v, budget) {
   switch (s.k) {
     case "never":
       return "false";
@@ -367,7 +454,7 @@ function denoteShape(s, v) {
       const checks = [`typeof ${v} === "object"`, `${v} !== null`];
       for (const [key, slot] of Object.entries(s.slots)) {
         const access = safeMemberAccess(v, key);
-        const inner = denoteGuard(slot.value, access);
+        const inner = denoteGuardB(slot.value, access, budget);
         if (slot.optional) {
           if (inner !== "true") checks.push(`(${access} === undefined || ${inner})`);
         } else {
@@ -377,7 +464,7 @@ function denoteShape(s, v) {
       return checks.join(" && ");
     }
     case "arr":
-      return `Array.isArray(${v}) && ${v}.every((item) => ${denoteGuard(s.element, "item")})`;
+      return `Array.isArray(${v}) && ${v}.every((item) => ${denoteGuardB(s.element, "item", budget)})`;
     case "tuple": {
       const checks = [`Array.isArray(${v})`];
       const minLen = s.elements.length;
@@ -388,14 +475,14 @@ function denoteShape(s, v) {
           checks.push(`!(${i} in ${v})`);
           return;
         }
-        const inner = denoteGuard(el, `${v}[${i}]`);
+        const inner = denoteGuardB(el, `${v}[${i}]`, budget);
         if (inner !== "true") checks.push(inner);
       });
       for (const i of holes) {
         if (i >= minLen) checks.push(`!(${i} in ${v})`);
       }
       if (s.rest) {
-        const rest = denoteGuard(s.rest, "item");
+        const rest = denoteGuardB(s.rest, "item", budget);
         if (rest !== "true") {
           checks.push(`${v}.slice(${minLen}).every((item) => ${rest})`);
         }
@@ -408,10 +495,10 @@ function denoteShape(s, v) {
       if (s.eff === "promise") return `${v} instanceof Promise`;
       return "true";
     case "brand":
-      return denoteShape(s.shape.shape, v);
+      return denoteShape(s.shape.shape, v, budget);
     case "sum": {
       if (s.members.length === 0) return "false";
-      const parts = s.members.map((m) => denoteGuard(m, v));
+      const parts = s.members.map((m) => denoteGuardB(m, v, budget));
       return `(${parts.join(" || ")})`;
     }
   }
@@ -513,8 +600,10 @@ export {
   MAX_PROMISE_MICROS,
   MAX_TOTAL_CALLS,
   OBJECT_PROTO_NAMES,
+  PROJECTION_MAX_DEPTH,
   PROMISE_MICRO_ERROR_LABEL,
   PROMISE_MICRO_OVERFLOW_LABEL,
+  ProjectionBudget,
   abortDerivationSession,
   absTemplateViews,
   allFixedTextOfViews,
@@ -549,6 +638,7 @@ export {
   exceedsBudget,
   exitCall,
   exitEvalCallBudgetSession,
+  exportedNameOfLocal,
   extractAllLoadSpecs,
   filterDeclaredThrows,
   filterGateThrows,
@@ -577,6 +667,7 @@ export {
   instanceOf,
   instantiateClass,
   isEvalMissingSlotEnabled,
+  isJsBindingIdent,
   isJsIdent,
   isNullishAbs,
   isTemplateLike,
@@ -653,6 +744,7 @@ export {
   termNodes,
   throwAbsToKinds,
   throwsKindCovered,
+  toJsBindingIdent,
   truncatedAbs,
   viewTemplateParts,
   withEvalBudgetOverride,

package/dist/{check-report-Ci1dDysO.d.ts → projection-budget-CGbs16aX.d.ts}

@@ -1,5 +1,5 @@
 import { File } from '@babel/types';
-import { A as Abs, T as Term, P as PrimName, a as Pred, L as LiteralValue, b as Phi, C as Confidence } from './run-WJfj477N.js';
+import { A as Abs, T as Term, P as PrimName, a as Pred, L as LiteralValue, b as Phi, C as Confidence } from './run-Dg7gQO2z.js';
 
 declare function resetParseSourceCache(): void;
 declare function getParseSourceCacheSize(): number;
@@ -217,6 +217,11 @@ declare const CONSTRAINT_BUILDER_NAMES: readonly string[];
 /**
  * 约束表达式头：`name(` 形态。由 CONSTRAINT_BUILDER_NAMES 生成——
  * 名单只在 CONSTRAINT_BUILDERS 一处维护。
+ *
+ * 注意：这只是**前缀预筛**（快速判定「像不像构建器调用」），不是安全门禁。
+ * 整条表达式在进入 execNudoModule/new Function 前必须过 AST 白名单
+ * （parser 的 isSafeTypeExprSource）——否则 `number(), process.exit(1)`
+ * 这类拼接可以借前缀骗过本正则并执行任意 JS。
  */
 declare const CONSTRAINT_EXPR_RE: RegExp;
 /** 把模板绑定到参数名：self → paramName；shape 展开为字段访问 Pred */
@@ -268,7 +273,8 @@ type NamedImport = {
 };
 /**
  * `@nudo:import` 命名/namespace 导入（D5=F1：文法在 directive-scan 单源）。
- * default 等未识别形态发 nudo:contract-syntax，不再静默丢弃。
+ * `names` 是本地绑定名（契约引用名）；别名→导出名的映射留在
+ * `NudoImportRecord.importedOfLocal`（查表口 collectConstraints 消费）。
  */
 declare function extractNudoImports(source: string): NamedImport[];
 /** refine 侧车加载诊断（severity 由消费方按 code 定档，形状对齐 Issue 子集） */
@@ -411,11 +417,23 @@ type InterfaceSource = "handwritten" | "generated" | "implicit";
  * 排除 re-export（`export {x} from` / `export *`）。
  */
 declare function localNamedExports(source: string): Set<string>;
+/**
+ * `export { local as exported }`（含 string 导出名 `export { x as "a-b" }`）
+ * 的本地声明名 → 导出名查询（DESIGN-003：契约身份=导出名）。声明形态
+ * （exported === local）与 default 形态不进表——default 走 C4.4 的
+ * 本地名/default 双键绑定，身份保持本地名。解析失败 / 无别名子句 →
+ * undefined。
+ */
+declare function exportedNameOfLocal(source: string, localName: string): string | undefined;
 /**
  * 侧车源码的生成段导出名：export 之前（跳过紧邻的 import/const 链）的注释
  * 行含 `@generated` → 该名为 generated。组合式下行段（§5.3）形态为
  * `import` + `@generated 头` + prelude + export；callsite 段则是头紧贴
  * export。隔了其他代码行 / 无标记 / re-export 列表均不算。
+ *
+ * DESIGN-003 别名段：导出名不是合法绑定名（保留字 / 非 ident）时发射为
+ * `const _nudo_1 = …; export { _nudo_1 as class };` —— 身份恒为**导出名**
+ * （`class` / string 名），不是绑定别名。
  */
 declare function generatedExportNames(sidecarSrc: string): Set<string>;
 type EffectiveInterfaceOpts = RefineResolveOpts & {
@@ -735,4 +753,44 @@ declare function formatGitlabCodeQuality(r: CheckReport, opts?: {
     workspaceRoot?: string;
 }): GitlabCodeQualityIssue[];
 
-export { constraintAdmitsNullish as $, type EffectiveInterface as A, type InterfaceDiag as B, type CheckIssue as C, type Diagnostic as D, type EffectiveInterfaceOpts as E, type InterfaceTierInfo as F, type GitlabCodeQualityIssue as G, type NamedImport as H, type InterfaceSource as I, type NudoField as J, type NudoFnConstraint as K, type LeakBudget as L, MAX_PROMISE_MICROS as M, type NudoConstraint as N, NudoSidecarError as O, type NudoSig as P, type RefineEntry as Q, type RefineDiag as R, type RefineResolveOpts as S, SELF as T, actionsForIssue as U, andC as V, any as W, array as X, boolean as Y, checkArg as Z, checkCall as _, type InterfaceTierOpts as a, constraintToEntryAbs as a0, drainPromiseMicros as a1, effectiveInterface as a2, enterPromiseExecutorScope as a3, evalPromiseCtor as a4, evalPromiseMethod as a5, evalPromiseStatic as a6, execNudoModule as a7, extractDeclaredThrows as a8, extractFnBudget as a9, notePromiseExecutorFork as aA, nullable as aB, number as aC, omit as aD, partial as aE, pick as aF, queuePromiseMicro as aG, refineDiagCount as aH, refineToIndexedFull as aI, resetNudoModuleExecCache as aJ, resetParseSourceCache as aK, resetSidecarLoadFailureCache as aL, serializeCheckJson as aM, serializeCheckJsonMulti as aN, setInterfaceDiagCollector as aO, setRefineDiagCollector as aP, shape as aQ, sidecarClosureFingerprint as aR, sidecarPathOf as aS, string as aT, takeInterfaceDiags as aU, takeInterfaceDiagsSince as aV, takeRefineDiags as aW, takeRefineDiagsSince as aX, throwConstraintToKinds as aY, union as aZ, extractNudoImports as aa, extractRefineReturnFromSource as ab, extractRefinesFromSource as ac, fn as ad, fnConstraintToEntryReqs as ae, formatCheckReport as af, formatConstraint as ag, formatDiagnostics as ah, formatEffectiveInterfaceDisplay as ai, formatGithubAnnotations as aj, formatGitlabCodeQuality as ak, formatInterfaceTierLine as al, generatedExportNames as am, getParseSourceCacheSize as an, getTerm as ao, instantiateConstraint as ap, interfaceDiagCount as aq, interfaceSourceOf as ar, interfaceTierOf as as, isIntFlag as at, isNodeModulesPath as au, isNudoConstraint as av, leavePromiseExecutorScope as aw, lenTerm as ax, litC as ay, localNamedExports as az, type LoadDepsFingerprint as b, extractAllLoadSpecs as c, defaultLeakBudget as d, exceedsBudget as e, loadModuleDepsFingerprint as f, getPromiseMicrosLength as g, resolveDepPath as h, stablePathKey as i, stablePathKeyGraph as j, termNodes as k, leakIfNeeded as l, maybeLeak as m, normPath as n, type CheckReport as o, parseSource as p, CONSTRAINT_BUILDERS as q, resetLeakCounter as r, sidecarSpecsOf as s, termDepth as t, CONSTRAINT_BUILDER_NAMES as u, CONSTRAINT_EXPR_RE as v, type CheckAction as w, type CheckJson as x, type CheckJsonMulti as y, type ConstraintBuilder as z };
+/**
+ * 投影/格式化层共享的 Abs 遍历预算（DESIGN-001）。
+ *
+ * Abs 是可计算值：shape 图可环（evaluator 对 `const a = {}; a.self = a` 产出
+ * 真环）、可深（深层嵌套结构 / harvest 链）。所有外延出口（formatShape /
+ * absToString / absToTSType / absToSchemaNode / denoteGuard / absToConstraint /
+ * serializeCaseArg）必须有界——absStableKey / absShapeKey 的 "cycle" 哨兵早已
+ * 承认该不变量，本模块是它的共享抽象。
+ *
+ * 语义：
+ * - enter/exit 按「当前路径」记账（进栈/出栈）：只有祖先重复才算环。
+ *   兄弟复用同一子树（DAG 共享）不误判——与 absStableKey 的累积 seen 不同，
+ *   那是键生成口径，渲染需要完整兄弟分支，不能沿用。
+ * - 深度 = 当前路径长度；达到 maxDepth 返回 "depth"。
+ * - truncated 粘性记录本次投影是否截断及原因，供 dropped 台账 / 注释标记
+ *   消费（与 load-deps-fp truncated → noCache 同风格：截断必须可观测）。
+ *
+ * 本模块零依赖（Abs/Shape 都是普通 object），供 core 各层与 service emit
+ * 共同 import，不引入环。
+ */
+/** 投影深度上限。BUG-014 给手写 case 实参文法 32 层（合法用例 ~4 层）；
+ *  渲染面消费的是机器生成的 shape（evaluator 嵌套 / env harvest），取 2×
+ *  余量 64：足够深到覆盖真实结构，又把最坏输出/栈框钉在有界。 */
+declare const PROJECTION_MAX_DEPTH = 64;
+type ProjectionStopReason = "cycle" | "depth";
+declare class ProjectionBudget {
+    #private;
+    /** 粘性：本次投影是否发生过截断（"cycle" / "depth"），供台账记录 */
+    truncated: ProjectionStopReason | undefined;
+    constructor(maxDepth?: number);
+    /**
+     * 进入一个 Abs（或 Shape）子树。返回 null → 继续递归，之后必须配对
+     * `exit()`；返回 "cycle" | "depth" → 不得递归，按出口各自的约定渲染
+     * 截断标记（不调用 exit——本次 enter 没有入栈）。
+     */
+    enter(a: object): ProjectionStopReason | null;
+    /** 离开子树（与返回 null 的 enter 严格配对）。 */
+    exit(): void;
+}
+
+export { array as $, type CheckJson as A, type CheckJsonMulti as B, type CheckIssue as C, type ConstraintBuilder as D, type EffectiveInterfaceOpts as E, type Diagnostic as F, type EffectiveInterface as G, type GitlabCodeQualityIssue as H, type InterfaceSource as I, type InterfaceDiag as J, type InterfaceTierInfo as K, type LeakBudget as L, MAX_PROMISE_MICROS as M, type NudoConstraint as N, type NamedImport as O, PROJECTION_MAX_DEPTH as P, type NudoField as Q, type NudoFnConstraint as R, NudoSidecarError as S, type NudoSig as T, type RefineDiag as U, type RefineEntry as V, type RefineResolveOpts as W, SELF as X, actionsForIssue as Y, andC as Z, any as _, type InterfaceTierOpts as a, takeRefineDiagsSince as a$, boolean as a0, checkArg as a1, checkCall as a2, constraintAdmitsNullish as a3, constraintToEntryAbs as a4, drainPromiseMicros as a5, effectiveInterface as a6, enterPromiseExecutorScope as a7, evalPromiseCtor as a8, evalPromiseMethod as a9, leavePromiseExecutorScope as aA, lenTerm as aB, litC as aC, localNamedExports as aD, notePromiseExecutorFork as aE, nullable as aF, number as aG, omit as aH, partial as aI, pick as aJ, queuePromiseMicro as aK, refineDiagCount as aL, refineToIndexedFull as aM, resetNudoModuleExecCache as aN, resetParseSourceCache as aO, resetSidecarLoadFailureCache as aP, serializeCheckJson as aQ, serializeCheckJsonMulti as aR, setInterfaceDiagCollector as aS, setRefineDiagCollector as aT, shape as aU, sidecarClosureFingerprint as aV, sidecarPathOf as aW, string as aX, takeInterfaceDiags as aY, takeInterfaceDiagsSince as aZ, takeRefineDiags as a_, evalPromiseStatic as aa, execNudoModule as ab, extractDeclaredThrows as ac, extractFnBudget as ad, extractNudoImports as ae, extractRefineReturnFromSource as af, extractRefinesFromSource as ag, fn as ah, fnConstraintToEntryReqs as ai, formatCheckReport as aj, formatConstraint as ak, formatDiagnostics as al, formatEffectiveInterfaceDisplay as am, formatGithubAnnotations as an, formatGitlabCodeQuality as ao, formatInterfaceTierLine as ap, generatedExportNames as aq, getParseSourceCacheSize as ar, getTerm as as, instantiateConstraint as at, interfaceDiagCount as au, interfaceSourceOf as av, interfaceTierOf as aw, isIntFlag as ax, isNodeModulesPath as ay, isNudoConstraint as az, type LoadDepsFingerprint as b, throwConstraintToKinds as b0, union as b1, ProjectionBudget as c, type ProjectionStopReason as d, defaultLeakBudget as e, exceedsBudget as f, exportedNameOfLocal as g, extractAllLoadSpecs as h, getPromiseMicrosLength as i, loadModuleDepsFingerprint as j, resolveDepPath as k, leakIfNeeded as l, maybeLeak as m, normPath as n, stablePathKey as o, parseSource as p, stablePathKeyGraph as q, resetLeakCounter as r, sidecarSpecsOf as s, termDepth as t, termNodes as u, type CheckReport as v, CONSTRAINT_BUILDERS as w, CONSTRAINT_BUILDER_NAMES as x, CONSTRAINT_EXPR_RE as y, type CheckAction as z };

package/dist/{run-WJfj477N.d.ts → run-Dg7gQO2z.d.ts}

@@ -366,7 +366,10 @@ type EvalCallRecord = {
         line: number;
         column: number;
     };
-    threw?: boolean;
+    /** BUG-028：必填——漏设时异常 payload 会被当成功结果
+     * （resultAbs=payload、throwsAbs=never，isLeakedCallRecord
+     * 的 never+never 拦不住）。5 处 emitter 均已显式设置。 */
+    threw: boolean;
 };
 /** 清空 pureCallMemo（宿主入口 / 会话缓存失效） */
 declare function clearPureCallMemo(): void;
@@ -748,6 +751,7 @@ type TranspiledCallResult = {
     /** 非 never 表示函数可能 throw 该类型 */
     throws: Abs;
 };
+declare function isAbsVal(v: unknown): v is Abs;
 /** 调用 runTranspiled 导出（捕获 $throw）。opts.phi：入口 Φ 种子
  *  （instantiate/symbolic 的约束入口——eval 侧路径条件收窄）。
  *  嵌套进入（导出桥 apply）继承外层预算；仅最外层宿主入口重置。 */
@@ -766,4 +770,4 @@ declare function callTranspiledExport(exports: Record<string, unknown>, name: st
  */
 declare function callTranspiledExportApply(exports: Record<string, unknown> | (() => Record<string, unknown>), name: string): (args: Abs[], thisVal?: Abs) => AbsApplyResult;
 
-export { $tryDigestSoft as $, type Abs as A, runWithMayThrowSession as B, type Confidence as C, setMayThrowCollector as D, ERROR_FAMILY as E, throwAbsToKinds as F, throwsKindCovered as G, withEvalBudgetOverride as H, type HofCollectCtx as I, type HofSite as J, type AbsModuleExports as K, type LiteralValue as L, type MayThrowEffect as M, type RunTranspiledOptions as N, $assignRecord as O, type PrimName as P, $call as Q, type RelSource as R, type Shape as S, type Term as T, $callNamed as U, $recordBinding as V, type AbsApplyNoThrow as W, type AbsApplyNoThrowFn as X, type AbsApplyResult as Y, type AbsApplyReturn as Z, type AbsFnImpl as _, type Pred as a, num as a$, type AbsSigImpl as a0, type EvalAbsAssignRecord as a1, type EvalCallRecord as a2, type EvalFallback as a3, type ImplicationOracle as a4, type LitValueResult as a5, MAX_EVAL_CALL_DEPTH as a6, MAX_EVAL_TOTAL_CALLS as a7, RUNTIME_IMPORT_RE as a8, TYPEOF_NAMES as a9, geNum as aA, getEvalCallCollector as aB, getFnImpl as aC, getImplicationOracle as aD, gt as aE, gtNum as aF, implies as aG, isAbsApplyResult as aH, isBigPrim as aI, isExactLit as aJ, isNumPrim as aK, isStrPrim as aL, le as aM, leNum as aN, lit as aO, litValue as aP, lt as aQ, ltNum as aR, makeAbsApplyResult as aS, markPureFn as aT, namespaceAbsOf as aU, ne as aV, negatePred as aW, never as aX, not as aY, noteEvalCallRecord as aZ, noteEvalFallback as a_, type TranspiledCallResult as aa, type TypeofName as ab, abs as ac, absFunction as ad, absOnly as ae, absToString as af, and as ag, anyAbs as ah, anyVar as ai, app as aj, assumeFinite as ak, attachFnImpl as al, bigintLit as am, bindImports as an, bindingsOf as ao, bool as ap, boolLit as aq, callTranspiledExport as ar, callTranspiledExportApply as as, callTranspiledExportFull as at, collectAbsExports as au, confJoin as av, emptyPhi as aw, eq as ax, evalExprAbs as ay, ge as az, type Phi as b, numLit as b0, numVar as b1, obj as b2, or as b3, pFalse as b4, pTrue as b5, phiAnd as b6, predEquals as b7, predToString as b8, predVars as b9, primToTypeof as ba, ptypeof as bb, pureFnNameOf as bc, relationFingerprint as bd, relationFn as be, resetEvalCallBudget as bf, runTranspiled as bg, runTranspiledOptionsMemoKey as bh, setEvalAssignCollector as bi, setEvalBindingSink as bj, setEvalCallCollector as bk, setEvalFallbackCollector as bl, setImplicationOracle as bm, shapeOfTerm as bn, shapeOnlyFn as bo, shapeToString as bp, simplifyTerm as bq, str as br, strLit as bs, substPred as bt, termEquals as bu, termToString as bv, tryRunTranspiled as bw, unknown as bx, v as by, routeApplyThrows as bz, type AstEnv as c, $tryMarkSoft as d, $tryReleaseSoft as e, type EvalFallbackStats as f, clearPureCallMemo as g, clearPureMemo as h, enterEvalCallBudgetSession as i, errorTypeAbs as j, exitEvalCallBudgetSession as k, filterDeclaredThrows as l, filterGateThrows as m, filterIgnoredThrows as n, flushMayThrowEffects as o, formatThrowsAbs as p, getEvalCallBudgetState as q, getEvalFallbackStats as r, getMayThrowCollector as s, isThrowsIgnored as t, mayThrowEffectsToAbs as u, orphanMayThrowEffects as v, popMayThrowFrame as w, pushMayThrowFrame as x, recordMayThrow as y, resetEvalFallbackStats as z };
+export { $tryDigestSoft as $, type Abs as A, runWithMayThrowSession as B, type Confidence as C, setMayThrowCollector as D, ERROR_FAMILY as E, throwAbsToKinds as F, throwsKindCovered as G, withEvalBudgetOverride as H, type HofCollectCtx as I, type HofSite as J, type AbsModuleExports as K, type LiteralValue as L, type MayThrowEffect as M, type RunTranspiledOptions as N, $assignRecord as O, type PrimName as P, $call as Q, type RelSource as R, type Shape as S, type Term as T, $callNamed as U, $recordBinding as V, type AbsApplyNoThrow as W, type AbsApplyNoThrowFn as X, type AbsApplyResult as Y, type AbsApplyReturn as Z, type AbsFnImpl as _, type Pred as a, noteEvalFallback as a$, type AbsSigImpl as a0, type EvalAbsAssignRecord as a1, type EvalCallRecord as a2, type EvalFallback as a3, type ImplicationOracle as a4, type LitValueResult as a5, MAX_EVAL_CALL_DEPTH as a6, MAX_EVAL_TOTAL_CALLS as a7, RUNTIME_IMPORT_RE as a8, TYPEOF_NAMES as a9, geNum as aA, getEvalCallCollector as aB, getFnImpl as aC, getImplicationOracle as aD, gt as aE, gtNum as aF, implies as aG, isAbsApplyResult as aH, isAbsVal as aI, isBigPrim as aJ, isExactLit as aK, isNumPrim as aL, isStrPrim as aM, le as aN, leNum as aO, lit as aP, litValue as aQ, lt as aR, ltNum as aS, makeAbsApplyResult as aT, markPureFn as aU, namespaceAbsOf as aV, ne as aW, negatePred as aX, never as aY, not as aZ, noteEvalCallRecord as a_, type TranspiledCallResult as aa, type TypeofName as ab, abs as ac, absFunction as ad, absOnly as ae, absToString as af, and as ag, anyAbs as ah, anyVar as ai, app as aj, assumeFinite as ak, attachFnImpl as al, bigintLit as am, bindImports as an, bindingsOf as ao, bool as ap, boolLit as aq, callTranspiledExport as ar, callTranspiledExportApply as as, callTranspiledExportFull as at, collectAbsExports as au, confJoin as av, emptyPhi as aw, eq as ax, evalExprAbs as ay, ge as az, type Phi as b, num as b0, numLit as b1, numVar as b2, obj as b3, or as b4, pFalse as b5, pTrue as b6, phiAnd as b7, predEquals as b8, predToString as b9, routeApplyThrows as bA, predVars as ba, primToTypeof as bb, ptypeof as bc, pureFnNameOf as bd, relationFingerprint as be, relationFn as bf, resetEvalCallBudget as bg, runTranspiled as bh, runTranspiledOptionsMemoKey as bi, setEvalAssignCollector as bj, setEvalBindingSink as bk, setEvalCallCollector as bl, setEvalFallbackCollector as bm, setImplicationOracle as bn, shapeOfTerm as bo, shapeOnlyFn as bp, shapeToString as bq, simplifyTerm as br, str as bs, strLit as bt, substPred as bu, termEquals as bv, termToString as bw, tryRunTranspiled as bx, unknown as by, v as bz, type AstEnv as c, $tryMarkSoft as d, $tryReleaseSoft as e, type EvalFallbackStats as f, clearPureCallMemo as g, clearPureMemo as h, enterEvalCallBudgetSession as i, errorTypeAbs as j, exitEvalCallBudgetSession as k, filterDeclaredThrows as l, filterGateThrows as m, filterIgnoredThrows as n, flushMayThrowEffects as o, formatThrowsAbs as p, getEvalCallBudgetState as q, getEvalFallbackStats as r, getMayThrowCollector as s, isThrowsIgnored as t, mayThrowEffectsToAbs as u, orphanMayThrowEffects as v, popMayThrowFrame as w, pushMayThrowFrame as x, recordMayThrow as y, resetEvalFallbackStats as z };