@nudojs/lsp 1.1.0 → 1.1.1

package/dist/index.js

@@ -240131,6 +240131,10 @@ var _bForkBudgetLimit = MAX_B_TOTAL_FORKS;
 var _bForkCount = 0;
 var _bForkTruncNoted = false;
 var FORK_TRUNCATION_LABEL = "#fork-budget";
+var HOST_EFFECT_LABEL_PREFIX = "#host-effect:";
+function noteHostEffectBlocked(name) {
+  noteAbsTruncation(`${HOST_EFFECT_LABEL_PREFIX}${name}`);
+}
 function noteBForkTruncation() {
   noteAbsTruncation(FORK_TRUNCATION_LABEL);
 }
@@ -242176,6 +242180,26 @@ var GLOBAL_FNS = /* @__PURE__ */ new Set([
   "eval",
   "Symbol"
 ]);
+var NEVER_EXEC_HOST_FN_NAMES = [
+  "fetch",
+  "XMLHttpRequest",
+  "WebSocket",
+  "EventSource",
+  "setTimeout",
+  "setInterval",
+  "setImmediate",
+  "queueMicrotask",
+  "requestAnimationFrame",
+  "requestIdleCallback"
+];
+function neverExecHostName(fn2) {
+  if (typeof fn2 !== "function") return null;
+  const g = globalThis;
+  for (const n of NEVER_EXEC_HOST_FN_NAMES) {
+    if (fn2 === g[n]) return n;
+  }
+  return null;
+}
 function noteBCallRecord(r) {
   if (!bCallCollector) return;
   try {
@@ -242257,8 +242281,12 @@ function $callNamed(name, fn2, args, loc, argLocs) {
   try {
     if (typeof fn2 === "function") {
       const g = GLOBAL_FNS.has(name) && fn2 === globalThis[name] ? evalGlobalFn(name, args) : void 0;
+      const blockedHost = g === void 0 ? neverExecHostName(fn2) : null;
       if (g !== void 0) {
         result = g;
+      } else if (blockedHost !== null) {
+        noteHostEffectBlocked(blockedHost);
+        result = bTruncatedAbs();
       } else {
         const entered = bEnterCall(name, fn2, args);
         if (!entered.ok) {
@@ -242357,7 +242385,13 @@ function execRegexBrand(re, method, args) {
   if (method === "toString") return strLit(`/${parts.pat}/${parts.flags}`);
   const subject = args[0] ? litValue(args[0]) : void 0;
   if (typeof subject !== "string") {
-    return method === "test" ? abs({ k: "prim", type: "boolean" }, void 0, void 0, "partial") : void 0;
+    if (method === "test") {
+      return abs({ k: "prim", type: "boolean" }, void 0, void 0, "partial");
+    }
+    const element = joinAbs(str(), undefAbs());
+    const matchAbs = abs({ k: "arr", element }, void 0, void 0, "path");
+    const nullAbs = abs({ k: "unknown" }, { op: "lit", value: null }, void 0, "exact");
+    return joinAbs(nullAbs, matchAbs);
   }
   try {
     return regexExecWithState(re, method, subject).result;

package/dist/server.js

@@ -250531,6 +250531,10 @@ var _bForkBudgetLimit = MAX_B_TOTAL_FORKS;
 var _bForkCount = 0;
 var _bForkTruncNoted = false;
 var FORK_TRUNCATION_LABEL = "#fork-budget";
+var HOST_EFFECT_LABEL_PREFIX = "#host-effect:";
+function noteHostEffectBlocked(name) {
+  noteAbsTruncation(`${HOST_EFFECT_LABEL_PREFIX}${name}`);
+}
 function noteBForkTruncation() {
   noteAbsTruncation(FORK_TRUNCATION_LABEL);
 }
@@ -252576,6 +252580,26 @@ var GLOBAL_FNS = /* @__PURE__ */ new Set([
   "eval",
   "Symbol"
 ]);
+var NEVER_EXEC_HOST_FN_NAMES = [
+  "fetch",
+  "XMLHttpRequest",
+  "WebSocket",
+  "EventSource",
+  "setTimeout",
+  "setInterval",
+  "setImmediate",
+  "queueMicrotask",
+  "requestAnimationFrame",
+  "requestIdleCallback"
+];
+function neverExecHostName(fn2) {
+  if (typeof fn2 !== "function") return null;
+  const g = globalThis;
+  for (const n of NEVER_EXEC_HOST_FN_NAMES) {
+    if (fn2 === g[n]) return n;
+  }
+  return null;
+}
 function noteBCallRecord(r) {
   if (!bCallCollector) return;
   try {
@@ -252657,8 +252681,12 @@ function $callNamed(name, fn2, args, loc, argLocs) {
   try {
     if (typeof fn2 === "function") {
       const g = GLOBAL_FNS.has(name) && fn2 === globalThis[name] ? evalGlobalFn(name, args) : void 0;
+      const blockedHost = g === void 0 ? neverExecHostName(fn2) : null;
       if (g !== void 0) {
         result = g;
+      } else if (blockedHost !== null) {
+        noteHostEffectBlocked(blockedHost);
+        result = bTruncatedAbs();
       } else {
         const entered = bEnterCall(name, fn2, args);
         if (!entered.ok) {
@@ -252757,7 +252785,13 @@ function execRegexBrand(re, method, args) {
   if (method === "toString") return strLit(`/${parts.pat}/${parts.flags}`);
   const subject = args[0] ? litValue(args[0]) : void 0;
   if (typeof subject !== "string") {
-    return method === "test" ? abs({ k: "prim", type: "boolean" }, void 0, void 0, "partial") : void 0;
+    if (method === "test") {
+      return abs({ k: "prim", type: "boolean" }, void 0, void 0, "partial");
+    }
+    const element = joinAbs(str(), undefAbs());
+    const matchAbs = abs({ k: "arr", element }, void 0, void 0, "path");
+    const nullAbs = abs({ k: "unknown" }, { op: "lit", value: null }, void 0, "exact");
+    return joinAbs(nullAbs, matchAbs);
   }
   try {
     return regexExecWithState(re, method, subject).result;
@@ -258057,6 +258091,17 @@ function checkSourceInner(filePath, source, file, phi2, opts, issues, signatures
       });
       continue;
     }
+    if (label.startsWith(HOST_EFFECT_LABEL_PREFIX)) {
+      const hostName = label.slice(HOST_EFFECT_LABEL_PREFIX.length);
+      issues.push({
+        severity: "info",
+        code: "nudo:host-effect-blocked",
+        message: `Host function '${hostName}' is not executed during analysis (network/timer side effect); result widened to unknown#opaque`,
+        suggestion: "optional: mock it with @nudo:mock / @nudo:env, or pass the value in from a call site",
+        fn: hostName
+      });
+      continue;
+    }
     issues.push({
       severity: "info",
       code: "nudo:recursion-truncated",
@@ -258186,6 +258231,19 @@ function checkReturnConstraint(fnName, cName, constraint, ret) {
   const out = [];
   if (ret.shape.k === "unknown" && !ret.term) return out;
   if (ret.shape.k === "any") return out;
+  if (isNullishLitAbs(ret)) return out;
+  if (ret.shape.k === "sum" && constraint.fields) {
+    const seen = /* @__PURE__ */ new Set();
+    for (const m of ret.shape.members) {
+      for (const issue of checkReturnConstraint(fnName, cName, constraint, m)) {
+        const key = `${issue.message}\0${issue.actual ?? ""}\0${issue.expected ?? ""}`;
+        if (seen.has(key)) continue;
+        seen.add(key);
+        out.push(issue);
+      }
+    }
+    return out;
+  }
   const push = (actual, expected, suggestion) => {
     out.push({
       severity: "error",
@@ -258354,6 +258412,11 @@ function actionsForIssue(i) {
           label: "results widened to unknown \u2014 raise budget or narrow control flow"
         }
       ];
+    case "nudo:host-effect-blocked":
+      return [
+        { kind: "mock", label: "pin the host API with @nudo:mock / @nudo:env" },
+        { kind: "info", label: "results widened to unknown \u2014 or feed the value in from a call site" }
+      ];
     case "nudo:interface-drift":
       return [
         {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nudojs/lsp",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "engines": {
     "node": ">=20"
   },
@@ -49,9 +49,9 @@
     "registry": "https://registry.npmjs.org"
   },
   "dependencies": {
-    "@nudojs/service": "1.1.0",
-    "@nudojs/core": "1.1.0",
-    "@nudojs/parser": "1.1.0",
+    "@nudojs/service": "1.1.1",
+    "@nudojs/core": "1.1.1",
+    "@nudojs/parser": "1.1.1",
     "@babel/traverse": "^8.0.6",
     "@babel/types": "^8.0.6",
     "vscode-languageserver": "^10.1.2",