@nudojs/lsp 1.1.0 → 1.1.2

package/dist/index.js

@@ -240131,6 +240131,10 @@ var _bForkBudgetLimit = MAX_B_TOTAL_FORKS;
 var _bForkCount = 0;
 var _bForkTruncNoted = false;
 var FORK_TRUNCATION_LABEL = "#fork-budget";
+var HOST_EFFECT_LABEL_PREFIX = "#host-effect:";
+function noteHostEffectBlocked(name) {
+  noteAbsTruncation(`${HOST_EFFECT_LABEL_PREFIX}${name}`);
+}
 function noteBForkTruncation() {
   noteAbsTruncation(FORK_TRUNCATION_LABEL);
 }
@@ -242127,7 +242131,9 @@ __export(calls_exports, {
   $recordBinding: () => $recordBinding,
   MAX_B_CALL_DEPTH: () => MAX_B_CALL_DEPTH,
   MAX_B_TOTAL_CALLS: () => MAX_B_TOTAL_CALLS,
+  blockHostSideEffect: () => blockHostSideEffect,
   getBCallCollector: () => getBCallCollector,
+  neverExecHostName: () => neverExecHostName,
   noteBCallRecord: () => noteBCallRecord,
   resetBCallBudget: () => resetBCallBudget,
   setBAssignCollector: () => setBAssignCollector,
@@ -242176,6 +242182,32 @@ var GLOBAL_FNS = /* @__PURE__ */ new Set([
   "eval",
   "Symbol"
 ]);
+var NEVER_EXEC_HOST_FN_NAMES = [
+  "fetch",
+  "XMLHttpRequest",
+  "WebSocket",
+  "EventSource",
+  "setTimeout",
+  "setInterval",
+  "setImmediate",
+  "queueMicrotask",
+  "requestAnimationFrame",
+  "requestIdleCallback"
+];
+function neverExecHostName(fn2) {
+  if (typeof fn2 !== "function") return null;
+  const g = globalThis;
+  for (const n of NEVER_EXEC_HOST_FN_NAMES) {
+    if (fn2 === g[n]) return n;
+  }
+  return null;
+}
+function blockHostSideEffect(fn2) {
+  const hostName = neverExecHostName(fn2);
+  if (hostName === null) return null;
+  noteHostEffectBlocked(hostName);
+  return abs({ k: "unknown" }, void 0, void 0, "opaque");
+}
 function noteBCallRecord(r) {
   if (!bCallCollector) return;
   try {
@@ -242257,8 +242289,11 @@ function $callNamed(name, fn2, args, loc, argLocs) {
   try {
     if (typeof fn2 === "function") {
       const g = GLOBAL_FNS.has(name) && fn2 === globalThis[name] ? evalGlobalFn(name, args) : void 0;
+      const blockedHost = g === void 0 ? blockHostSideEffect(fn2) : null;
       if (g !== void 0) {
         result = g;
+      } else if (blockedHost !== null) {
+        result = blockedHost;
       } else {
         const entered = bEnterCall(name, fn2, args);
         if (!entered.ok) {
@@ -242357,7 +242392,13 @@ function execRegexBrand(re, method, args) {
   if (method === "toString") return strLit(`/${parts.pat}/${parts.flags}`);
   const subject = args[0] ? litValue(args[0]) : void 0;
   if (typeof subject !== "string") {
-    return method === "test" ? abs({ k: "prim", type: "boolean" }, void 0, void 0, "partial") : void 0;
+    if (method === "test") {
+      return abs({ k: "prim", type: "boolean" }, void 0, void 0, "partial");
+    }
+    const element = joinAbs(str(), undefAbs());
+    const matchAbs = abs({ k: "arr", element }, void 0, void 0, "path");
+    const nullAbs = abs({ k: "unknown" }, { op: "lit", value: null }, void 0, "exact");
+    return joinAbs(nullAbs, matchAbs);
   }
   try {
     return regexExecWithState(re, method, subject).result;
@@ -242523,6 +242564,8 @@ function $new(cls, args) {
     }
   }
   if (typeof cls === "function") {
+    const blockedHost = blockHostSideEffect(cls);
+    if (blockedHost) return blockedHost;
     if (cls === Array) {
       return makeArrayCtorAbs(args);
     }

package/dist/server.js

@@ -250531,6 +250531,10 @@ var _bForkBudgetLimit = MAX_B_TOTAL_FORKS;
 var _bForkCount = 0;
 var _bForkTruncNoted = false;
 var FORK_TRUNCATION_LABEL = "#fork-budget";
+var HOST_EFFECT_LABEL_PREFIX = "#host-effect:";
+function noteHostEffectBlocked(name) {
+  noteAbsTruncation(`${HOST_EFFECT_LABEL_PREFIX}${name}`);
+}
 function noteBForkTruncation() {
   noteAbsTruncation(FORK_TRUNCATION_LABEL);
 }
@@ -252527,7 +252531,9 @@ __export(calls_exports, {
   $recordBinding: () => $recordBinding,
   MAX_B_CALL_DEPTH: () => MAX_B_CALL_DEPTH,
   MAX_B_TOTAL_CALLS: () => MAX_B_TOTAL_CALLS,
+  blockHostSideEffect: () => blockHostSideEffect,
   getBCallCollector: () => getBCallCollector,
+  neverExecHostName: () => neverExecHostName,
   noteBCallRecord: () => noteBCallRecord,
   resetBCallBudget: () => resetBCallBudget,
   setBAssignCollector: () => setBAssignCollector,
@@ -252576,6 +252582,32 @@ var GLOBAL_FNS = /* @__PURE__ */ new Set([
   "eval",
   "Symbol"
 ]);
+var NEVER_EXEC_HOST_FN_NAMES = [
+  "fetch",
+  "XMLHttpRequest",
+  "WebSocket",
+  "EventSource",
+  "setTimeout",
+  "setInterval",
+  "setImmediate",
+  "queueMicrotask",
+  "requestAnimationFrame",
+  "requestIdleCallback"
+];
+function neverExecHostName(fn2) {
+  if (typeof fn2 !== "function") return null;
+  const g = globalThis;
+  for (const n of NEVER_EXEC_HOST_FN_NAMES) {
+    if (fn2 === g[n]) return n;
+  }
+  return null;
+}
+function blockHostSideEffect(fn2) {
+  const hostName = neverExecHostName(fn2);
+  if (hostName === null) return null;
+  noteHostEffectBlocked(hostName);
+  return abs({ k: "unknown" }, void 0, void 0, "opaque");
+}
 function noteBCallRecord(r) {
   if (!bCallCollector) return;
   try {
@@ -252657,8 +252689,11 @@ function $callNamed(name, fn2, args, loc, argLocs) {
   try {
     if (typeof fn2 === "function") {
       const g = GLOBAL_FNS.has(name) && fn2 === globalThis[name] ? evalGlobalFn(name, args) : void 0;
+      const blockedHost = g === void 0 ? blockHostSideEffect(fn2) : null;
       if (g !== void 0) {
         result = g;
+      } else if (blockedHost !== null) {
+        result = blockedHost;
       } else {
         const entered = bEnterCall(name, fn2, args);
         if (!entered.ok) {
@@ -252757,7 +252792,13 @@ function execRegexBrand(re, method, args) {
   if (method === "toString") return strLit(`/${parts.pat}/${parts.flags}`);
   const subject = args[0] ? litValue(args[0]) : void 0;
   if (typeof subject !== "string") {
-    return method === "test" ? abs({ k: "prim", type: "boolean" }, void 0, void 0, "partial") : void 0;
+    if (method === "test") {
+      return abs({ k: "prim", type: "boolean" }, void 0, void 0, "partial");
+    }
+    const element = joinAbs(str(), undefAbs());
+    const matchAbs = abs({ k: "arr", element }, void 0, void 0, "path");
+    const nullAbs = abs({ k: "unknown" }, { op: "lit", value: null }, void 0, "exact");
+    return joinAbs(nullAbs, matchAbs);
   }
   try {
     return regexExecWithState(re, method, subject).result;
@@ -252923,6 +252964,8 @@ function $new(cls, args) {
     }
   }
   if (typeof cls === "function") {
+    const blockedHost = blockHostSideEffect(cls);
+    if (blockedHost) return blockedHost;
     if (cls === Array) {
       return makeArrayCtorAbs(args);
     }
@@ -258057,6 +258100,17 @@ function checkSourceInner(filePath, source, file, phi2, opts, issues, signatures
       });
       continue;
     }
+    if (label.startsWith(HOST_EFFECT_LABEL_PREFIX)) {
+      const hostName = label.slice(HOST_EFFECT_LABEL_PREFIX.length);
+      issues.push({
+        severity: "info",
+        code: "nudo:host-effect-blocked",
+        message: `Host function '${hostName}' is not executed during analysis (network/timer side effect); result widened to unknown#opaque`,
+        suggestion: "optional: mock it with @nudo:mock / @nudo:env, or pass the value in from a call site",
+        fn: hostName
+      });
+      continue;
+    }
     issues.push({
       severity: "info",
       code: "nudo:recursion-truncated",
@@ -258186,6 +258240,19 @@ function checkReturnConstraint(fnName, cName, constraint, ret) {
   const out = [];
   if (ret.shape.k === "unknown" && !ret.term) return out;
   if (ret.shape.k === "any") return out;
+  if (isNullishLitAbs(ret)) return out;
+  if (ret.shape.k === "sum" && constraint.fields) {
+    const seen = /* @__PURE__ */ new Set();
+    for (const m of ret.shape.members) {
+      for (const issue of checkReturnConstraint(fnName, cName, constraint, m)) {
+        const key = `${issue.message}\0${issue.actual ?? ""}\0${issue.expected ?? ""}`;
+        if (seen.has(key)) continue;
+        seen.add(key);
+        out.push(issue);
+      }
+    }
+    return out;
+  }
   const push = (actual, expected, suggestion) => {
     out.push({
       severity: "error",
@@ -258354,6 +258421,11 @@ function actionsForIssue(i) {
           label: "results widened to unknown \u2014 raise budget or narrow control flow"
         }
       ];
+    case "nudo:host-effect-blocked":
+      return [
+        { kind: "mock", label: "pin the host API with @nudo:mock / @nudo:env" },
+        { kind: "info", label: "results widened to unknown \u2014 or feed the value in from a call site" }
+      ];
     case "nudo:interface-drift":
       return [
         {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nudojs/lsp",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "engines": {
     "node": ">=20"
   },
@@ -49,9 +49,9 @@
     "registry": "https://registry.npmjs.org"
   },
   "dependencies": {
-    "@nudojs/service": "1.1.0",
-    "@nudojs/core": "1.1.0",
-    "@nudojs/parser": "1.1.0",
+    "@nudojs/service": "1.1.2",
+    "@nudojs/core": "1.1.2",
+    "@nudojs/parser": "1.1.2",
     "@babel/traverse": "^8.0.6",
     "@babel/types": "^8.0.6",
     "vscode-languageserver": "^10.1.2",