@scriptc/compiler 0.0.10 → 0.0.12

package/dist/frontend/lowering/lower-calls.d.ts

@@ -184,11 +184,11 @@ leading?: readonly IrExpr[]): IrExpr[];
    * `type` has no undefined arm to wrap into. */
 export declare function wrappedUndefined(L: Lowerer, type: IrType, loc: SrcLoc): IrExpr | null;
 /** The synthesized argument for an omitted omittable param: the interned
-   * undefined arm of the param's `T | undefined` ABI union, or the DOM
+   * undefined arm of the param's `T | undefined` ABI union, or the checked-dynamic tree
    * undefined for a checked-dynamic param (`bar?: any`). */
 /** The "absent argument" value for a param SLOT type, or null when the
    * slot cannot hold one: the interned undefined arm for undefined-armed
-   * unions, the DOM undefined for checked-dynamic slots, the engine's own
+   * unions, the dyn undefined for checked-dynamic slots, the engine's own
    * undefined for island slots. Shared by every call-completion loop
    * (direct calls and calls through func-typed values). */
 export declare function omittedArgFor(L: Lowerer, type: IrType, loc: SrcLoc): IrExpr | null;
@@ -382,7 +382,7 @@ export declare function lowerCall(L: Lowerer, expr: ts.CallExpression): IrExpr;
    * - CHECKED-DYNAMIC (dyn spread sources — a JS rest binding, a dyn
    *   value): box the callee (dynFrom; a dyn callee is already boxed),
    *   convert every argument into dyn, and emit the spread-marked dynCall
-   *   — the emitters build one fresh DOM argument array (spreads flatten
+   *   — the emitters build one fresh dyn argument array (spreads flatten
    *   left-to-right, non-iterables throw V8's TypeError) and apply through
    *   it; the boxed thunk delivers JS arity exactly. Result dyn, checked
    *   per use like every any-origin value.
@@ -404,7 +404,7 @@ export declare function lowerSpreadArgsCall(L: Lowerer, expr: ts.CallExpression,
    * slots keep completeArgs' same-element spread packing. */
 export declare function spreadNeedsRuntimeArity(shapes: readonly ParamShape[], argNodes: readonly ts.Expression[]): boolean;
 /** The SHARED prototype names scr_dyn_invoke dispatches at runtime (the
- * subset of DOM_PROTO_METHOD_NAMES with a receiver-kind dispatch): the
+ * subset of DYN_PROTO_METHOD_NAMES with a receiver-kind dispatch): the
  * runtime runs the real method for the receiver's kind, throws Node's
  * is-not-a-function where the kind's prototype lacks the name, and
  * fences LOUDLY on real-but-unimplemented pairs. */

package/dist/frontend/lowering/lower-calls.js

@@ -13,7 +13,7 @@ import { NARROW_FIRST, builtinFenceHintOf, builtinModuleFnOf } from "./surfaces.
 import { requiresDynamicDiag } from "../../diagnostics/diagnostic.js";
 import { mixinFnShapeOf } from "./lower-mixins.js";
 import { bufEncoding, dynStringReceiver, lowerArrayFromCall, lowerDynArrayFilterCall, lowerDynArrayFlatMapCall, lowerGroupByStaticCall, lowerIteratorHelperCall, lowerObjectAssignIndexShape, lowerObjectFromEntriesCall, lowerObjectIterOverIndexShape, lowerRegexMethodCall, lowerStringMethodCall, lowerTupleReadMethodCall } from "./lower-containers.js";
-import { lowerChildStreamMethodCall, lowerDirentMethodCall, lowerPerfHooksCall, lowerProcStreamMethodCall, lowerReflectApplyCall, lowerWatcherMethodCall } from "./lower-builtins.js";
+import { lowerChildStreamMethodCall, lowerCreateRequireCall, lowerDirentMethodCall, lowerPerfHooksCall, lowerProcStreamMethodCall, lowerReflectApplyCall, lowerWatcherMethodCall } from "./lower-builtins.js";
 import { droppableStatic, lowerPromiseAllTupleCall, lowerPromiseRejectCall, probeLower, templateRawTextOf } from "./lower-exprs.js";
 import { httpClientFnBindingOf, isStreamUndefCallExpr, lowerHttpClientFnCall } from "./lower-server.js";
 import { EMITTER_API_MEMBERS, exactInstanceClassOf, findGenericMethodOn, lowerClassGenericMethodCall, lowerStaticMethodCall } from "./lower-classes.js";
@@ -85,7 +85,7 @@ export function paramShape(L, param) {
             const raw = L.irTypeOf(param.name);
             // A DYNAMIC-TIER pattern source (`function f({} = a)` with
             // `a: any` — jsval for island values, dyn for the checked-dynamic
-            // DOM): the slot holds its tier's undefined DIRECTLY, so the ABI
+            // dyn): the slot holds its tier's undefined DIRECTLY, so the ABI
             // is the slot itself — no synthesized union; the prologue tests
             // undefined at runtime (declareParams).
             if (raw.kind === "dyn" || raw.kind === "jsval") {
@@ -103,7 +103,7 @@ export function paramShape(L, param) {
     }
     if (param.dotDotDotToken) {
         // A JS rest param with no static element type (`(...args)` — any[]):
-        // the VARIADIC dyn form. The lifted function takes one trailing DOM
+        // the VARIADIC dyn form. The lifted function takes one trailing dyn
         // ARRAY param the dyn call thunk fills with the call's surplus
         // arguments; the binding is that array (dynRest — funcType marks
         // `rest`, and the value only ever calls through the boxed thunk).
@@ -133,7 +133,7 @@ export function paramShape(L, param) {
         const raw = L.irTypeOf(param.name);
         // A DYNAMIC-TIER defaulted param (`function f(x = a)` with `a: any`
         // — tsc types x any; jsval for island values, dyn for the checked-
-        // dynamic DOM): the slot holds its tier's undefined directly, so
+        // dynamic dyn): the slot holds its tier's undefined directly, so
         // the ABI is the slot itself and the prologue's default test is the
         // runtime undefined test (declareParams).
         if (raw.kind === "dyn" || raw.kind === "jsval") {
@@ -169,7 +169,7 @@ export function paramShape(L, param) {
     if (param.questionToken && !L.bareUndefinedArmedUnion(type) && type.kind !== "dyn" && type.kind !== "jsval") {
         // `x?: unknown` where unknown came from an annotation: undefined is
         // absorbed into the hole type, so no undefined ARM exists — but a
-        // checked-dynamic slot holds the DOM undefined directly (`bar?: any`
+        // checked-dynamic slot holds the dyn undefined directly (`bar?: any`
         // — an omitted call passes it, undefinedArgFor), and an island slot
         // the engine's own undefined likewise (`options?: [string?]` — an
         // optional-tuple param, jsval-mapped), so dyn and jsval params stay
@@ -243,7 +243,7 @@ leading) {
             // A missing argument for a CHECKED-DYNAMIC param (an implicit-any
             // JS signature called short — `mustCall(fn)` with `expected`
             // omitted): JS fills undefined, and the dyn slot holds exactly
-            // that — the undefined DOM value. tsc's arity families don't gate
+            // that — the undefined dyn value. tsc's arity families don't gate
             // .js builds (SEMANTICS.md 116), so the completion lands here.
             if (shape.type.kind === "dyn") {
                 return { kind: "dynFrom", value: { kind: "unitLit", unit: "undefined", type: UNDEFINED_T, loc }, type: DYN, loc };
@@ -271,7 +271,7 @@ leading) {
     else if (restAt >= 0 && shapes[restAt].mode === "dynRest") {
         // The VARIADIC dyn pack (a JS `...args` with no static element
         // type, or the synthetic `arguments` slot): surplus arguments
-        // convert through the dyn boundary into one fresh DOM array —
+        // convert through the dyn boundary into one fresh dyn array —
         // exactly what the boxed call thunk builds for indirect calls.
         const elems = sources.slice(restAt).map((a) => {
             if (isIr(a))
@@ -384,11 +384,11 @@ export function wrappedUndefined(L, type, loc) {
     return wrapped.kind === "unionWrap" ? wrapped : null;
 }
 /** The synthesized argument for an omitted omittable param: the interned
-   * undefined arm of the param's `T | undefined` ABI union, or the DOM
+   * undefined arm of the param's `T | undefined` ABI union, or the checked-dynamic tree
    * undefined for a checked-dynamic param (`bar?: any`). */
 /** The "absent argument" value for a param SLOT type, or null when the
    * slot cannot hold one: the interned undefined arm for undefined-armed
-   * unions, the DOM undefined for checked-dynamic slots, the engine's own
+   * unions, the dyn undefined for checked-dynamic slots, the engine's own
    * undefined for island slots. Shared by every call-completion loop
    * (direct calls and calls through func-typed values). */
 export function omittedArgFor(L, type, loc) {
@@ -529,7 +529,7 @@ export function appendImplicitUndefinedReturn(L, body, bodyReturn, loc) {
     // A DYN body that can complete without returning (a JS function whose
     // guarded return may not run — mustSucceed's `if (typeof fn ===
     // 'function') return fn.apply(...)`): JS completes with undefined —
-    // the undefined DOM value.
+    // the undefined dyn value.
     if (bodyReturn.kind === "dyn") {
         body.push({
             kind: "return",
@@ -584,7 +584,7 @@ export function declaredReturnType(L, decl, blame) {
     // The RECORD twin (the tracing suite's traced closures — `function ()
     // { return expectedResult; }` infers `{ foo: string }`): JS object
     // literals are checked-dynamic VALUES, so a record-typed return would
-    // copy the DOM value into a struct at the return and copy it back out
+    // copy the dyn value into a struct at the return and copy it back out
     // at any dyn boundary — identity lost twice (found.result !==
     // expectedResult where Node passes the object through). The inferred
     // shape is inference, not a contract: the return stays checked-
@@ -1332,7 +1332,7 @@ function resolveInferredReturn(L, inst, infer, body, decl) {
                 distinct.push(e.stmt.value.type);
         }
         if (distinct.length === 0) {
-            final = DYN; // no valued return: JS completes with undefined — the DOM undefined, today's slot
+            final = DYN; // no valued return: JS completes with undefined — the dyn undefined, today's slot
         }
         else if (distinct.length === 1) {
             const t = distinct[0];
@@ -1459,7 +1459,7 @@ export function lowerGenericFnValue(L, ref, info) {
     const inst = genericValueInstance(L, ref, info, bindings);
     // The value's type is the completed ABI signature — exact-arity, the
     // declared-function value rule (dynRest slots stay out of the param
-    // list; the rest marker carries the trailing DOM-array ABI).
+    // list; the rest marker carries the trailing dyn-array ABI).
     const funcType = {
         kind: "func",
         params: inst.params.filter((p) => p.mode !== "dynRest").map((p) => p.type),
@@ -2316,6 +2316,15 @@ export function lowerCall(L, expr) {
             }
         }
     }
+    // `require("spec")` through a createRequire binding (and the inline
+    // `createRequire(import.meta.url)("spec")` spelling — a CallExpression
+    // callee no other dispatch path serves): the static erasure —
+    // builtins/json/npm per lowerCreateRequireCall's arms.
+    {
+        const crServed = lowerCreateRequireCall(L, expr, loc);
+        if (crServed)
+            return crServed;
+    }
     // `process.getuid?.()` — intercepted BEFORE the optional-chain
     // machinery (the member always exists on a POSIX target, so the
     // optional call IS the call; `process.getuid` itself has no value
@@ -2433,7 +2442,7 @@ export function lowerCall(L, expr) {
             // non-format argument: strings VERBATIM, everything else through
             // inspect at the rest-args depth 2 (formatWithOptions) — scalar
             // kinds byte-exactly, boxed functions as [Function: name] /
-            // [Function (anonymous)], composites through the dyn DOM walk
+            // [Function (anonymous)], composites through the dyn walk
             // (insp.dyn). Never throws — Node's console.log never does.
             if (lowered.type.kind === "dyn") {
                 return {
@@ -2542,10 +2551,10 @@ export function lowerCall(L, expr) {
         }
         return { kind: "libCall", fn: "timers.queueMicrotask", args: [adapted], type: VOID, loc };
     }
-    // structuredClone: the JSON-safe + bytes subset over the DOM, deep;
+    // structuredClone: the JSON-safe + bytes subset over the checked-dynamic tree, deep;
     // %DOMException clones through WebIDL serialization (name/message,
     // the code re-derives). Functions/handles throw the spec's catchable
-    // DataCloneError; cycles fence (the DOM cannot represent them — Node
+    // DataCloneError; cycles fence (the checked-dynamic tree cannot represent them — Node
     // clones cycles, a documented divergence). Option validation throws
     // Node's exact errors; the zero-argument call Node's
     // ERR_MISSING_ARGS. Provenance-checked like setTimeout.
@@ -2571,7 +2580,7 @@ export function lowerCall(L, expr) {
         const valueNode = expr.arguments[0];
         // A NON-EMPTY transfer array of static values: nothing static is
         // transferable, so the call is Node's DataCloneError — decided here
-        // (the list's values need no DOM representation to fail). An EMPTY
+        // (the list's values need no dyn representation to fail). An EMPTY
         // literal transfer list is a no-op member and drops.
         {
             let optNode = expr.arguments[1];
@@ -2602,8 +2611,8 @@ export function lowerCall(L, expr) {
         const value = toDynArg(valueNode);
         const cloned = { kind: "libCall", fn: "dyn.structuredClone", args: [value, optsArg], type: DYN, loc };
         // The declared result is the value's own type (the generic's T):
-        // validate the DOM copy back into it when the type can be checked;
-        // dyn-typed and unmappable results stay DOM values (JS files).
+        // validate the dyn copy back into it when the type can be checked;
+        // dyn-typed and unmappable results stay dyn values (JS files).
         const resultT = L.mapTypeOf(L.typeOf(expr));
         if (resultT !== null && resultT.kind !== "dyn" && resultT.kind !== "void" &&
             canDynCheckTo(resultT, (id) => L.shapes.get(id), (id) => L.unions.get(id))) {
@@ -2709,7 +2718,7 @@ export function lowerCall(L, expr) {
     if (ts.isPropertyAccessExpression(expr.expression) &&
         L.isIslandExpr(expr.expression.expression)) {
         const receiver = L.lowerExpr(expr.expression.expression);
-        // A checker-`any` receiver whose VALUE lives in the DOM (a
+        // A checker-`any` receiver whose VALUE lives in the checked-dynamic tree (a
         // checked-dynamic local behind the any-typed spelling — the JS
         // WeakSet placeholder, rest-args arrays): the checked-dynamic
         // method machinery owns it — receiver-kind dispatch, stored-member
@@ -2756,7 +2765,7 @@ export function lowerCall(L, expr) {
         }
         const callee = L.lowerExpr(expr.expression);
         // A checker-`any` callee that LOWERED checked-dynamic (a dyn member
-        // chain's stored function): the DOM's own call — dynCall reads and
+        // chain's stored function): the checked-dynamic tree's own call — dynCall reads and
         // calls the stored member with Node's is-not-a-function TypeError
         // on refusal.
         if (callee.type.kind === "dyn") {
@@ -3022,7 +3031,7 @@ export function lowerCall(L, expr) {
         }
         // STATIC atob/btoa (str.atob / str.btoa — scr_string.c; WHATWG
         // forgiving-base64, Node is the oracle). The argument crosses as a
-        // DOM value: WebIDL ToString runs in the runtime over the DOM kind
+        // dyn value: WebIDL ToString runs in the runtime over the dyn kind
         // (Node's atob(null) decodes "null"), a malformed input throws the
         // catchable DOMException InvalidCharacterError, and the
         // zero-argument call throws Node's TypeError [ERR_MISSING_ARGS].
@@ -3515,7 +3524,7 @@ export function lowerCall(L, expr) {
     if (callee.type.kind === "dyn") {
         if (expr.arguments.some((a) => ts.isSpreadElement(a))) {
             // The runtime-arity lane: a dyn callee is already boxed — the
-            // spread-marked dynCall applies through a fresh DOM argument
+            // spread-marked dynCall applies through a fresh dyn argument
             // array (lowerSpreadArgsCall). Sources outside it keep the fence.
             const spreadServed = lowerSpreadArgsCall(L, expr, callee, loc);
             if (spreadServed)
@@ -3595,7 +3604,7 @@ export function lowerCall(L, expr) {
     // skip — not a shape this surface models; fence.
     for (let i = args.length; i < params.length; i++) {
         // A missing argument completes with the slot's absent value — the
-        // interned undefined arm, the DOM undefined for checked-dynamic
+        // interned undefined arm, the dyn undefined for checked-dynamic
         // slots (a JS-inferred wrapper like mustCall's, called short), or
         // the engine undefined for island slots.
         const absent = omittedArgFor(L, params[i], loc);
@@ -3615,7 +3624,7 @@ export function lowerCall(L, expr) {
    * - CHECKED-DYNAMIC (dyn spread sources — a JS rest binding, a dyn
    *   value): box the callee (dynFrom; a dyn callee is already boxed),
    *   convert every argument into dyn, and emit the spread-marked dynCall
-   *   — the emitters build one fresh DOM argument array (spreads flatten
+   *   — the emitters build one fresh dyn argument array (spreads flatten
    *   left-to-right, non-iterables throw V8's TypeError) and apply through
    *   it; the boxed thunk delivers JS arity exactly. Result dyn, checked
    *   per use like every any-origin value.
@@ -3703,7 +3712,7 @@ export function spreadNeedsRuntimeArity(shapes, argNodes) {
 }
 /** METHOD calls on dyn receivers (`pkg.name.replace(...)`, `rawName.split`,
  * `ws.packages.filter(...)` — JSON.parse-derived values): validate the
- * receiver's DOM kind, extract, and ride the STATIC method machinery — the
+ * receiver's dyn kind, extract, and ride the STATIC method machinery — the
  * dyn boundary's trust-but-verify stance extended to receivers. The
  * receiver-kind mismatch throws V8's own catchable TypeErrors (nullish:
  * "Cannot read properties of undefined (reading 'replace')"; other kinds:
@@ -3711,14 +3720,14 @@ export function spreadNeedsRuntimeArity(shapes, argNodes) {
  * evaluate, where JS evaluates them first for the non-nullish case
  * (SEMANTICS.md). String methods ride the string/regex intrinsic tables
  * through a validated-string receiver; `.filter` runs the predicate over
- * the DOM array and validated-extracts the survivors into the element type
+ * the dyn array and validated-extracts the survivors into the element type
  * the checker committed the result to. Null when the receiver isn't a dyn
  * value or the method isn't claimable (the method-call fence stays). */
 function lowerDynReceiverMethodCall(L, call, access) {
     if (L.chainBlocked(call, access))
         return null;
     // Only checker-untyped receivers: `any`/`unknown`, or the `any[]` an
-    // Array.isArray guard narrows them to (the value is STILL the DOM
+    // Array.isArray guard narrows them to (the value is STILL the checked-dynamic tree
     // array — scalar narrowings bridge through maybeNarrow's dynCheck and
     // take the ordinary typed paths, but there is no static home for an
     // any-elemented array). Typed receivers keep their own lowerings.
@@ -3750,7 +3759,7 @@ function lowerDynReceiverMethodCall(L, call, access) {
         return null;
     // Typed-destination filter first (validated extraction into a real
     // T[]); an untyped destination falls through to the runtime dispatch
-    // below (the survivors stay DOM values).
+    // below (the survivors stay dyn values).
     if (access.name.text === "filter") {
         const extracted = lowerDynArrayFilterCall(L, call, access, recv);
         if (extracted)
@@ -3758,10 +3767,10 @@ function lowerDynReceiverMethodCall(L, call, access) {
     }
     if (access.name.text === "flatMap")
         return lowerDynArrayFlatMapCall(L, call, access, recv);
-    // String methods claim only names NO other DOM-representable kind's
+    // String methods claim only names NO other dyn-representable kind's
     // prototype declares (Array carries includes/indexOf/slice too): for
     // these, "the receiver is a string, or the call throws V8's TypeError"
-    // IS Node's semantics for every possible DOM value. Shared names would
+    // IS Node's semantics for every possible dyn value. Shared names would
     // need a receiver-kind dispatch — they keep the fence.
     if (DYN_STRING_ONLY_METHODS.has(access.name.text)) {
         const checked = () => dynStringReceiver(L, recv, access);
@@ -3795,7 +3804,7 @@ function lowerDynReceiverMethodCall(L, call, access) {
     }
     // SHARED prototype names with a runtime dispatch (scr_dyn_invoke):
     // push/slice/join/forEach/map/apply/... dispatch on the receiver's
-    // RUNTIME kind — the honest answer for names more than one DOM-
+    // RUNTIME kind — the honest answer for names more than one dyn-
     // representable prototype declares (test/common's mustCall internals:
     // mustCallChecks.push(context), failed.forEach(fn), fn.apply(this,
     // args)). Implemented (kind, name) pairs run JS-exact; real-but-
@@ -3817,18 +3826,18 @@ function lowerDynReceiverMethodCall(L, call, access) {
             loc: locOf(call),
         };
     }
-    // Names NO DOM-representable prototype declares: the member can only
+    // Names NO dyn-representable prototype declares: the member can only
     // be an OWN property, so "read the member, call it" IS Node's
-    // semantics for every possible DOM value — `handlers.onDone(x)` on a
+    // semantics for every possible dyn value — `handlers.onDone(x)` on a
     // checked-dynamic object calls the stored function (dynKeyGet answers
     // the member or undefined; dynCall throws Node's exact catchable
     // "handlers.onDone is not a function" on a non-function). Prototype
     // names (map/join/hasOwnProperty/call/...) keep the fence: on a real
-    // DOM array/string/object Node would run the METHOD, which no stored
+    // dyn array/string/object Node would run the METHOD, which no stored
     // member models. Order note: JS reads the callee before evaluating
     // arguments — dynKeyGet's undefined-receiver TypeError fires first,
     // exactly Node.
-    if (DOM_PROTO_METHOD_NAMES.has(access.name.text))
+    if (DYN_PROTO_METHOD_NAMES.has(access.name.text))
         return null;
     // Optional forms (`obj.cb?.()`, `obj?.cb()`) belong to the chain
     // machinery's short-circuit semantics — not modeled here yet.
@@ -3848,12 +3857,12 @@ function lowerDynReceiverMethodCall(L, call, access) {
     const args = call.arguments.map((a) => L.lowerExprExpecting(a, DYN));
     return { kind: "dynCall", callee: member, calleeName: access.getText(), args, type: DYN, loc };
 }
-/** Prototype method names of the DOM-representable kinds (String, Array,
+/** Prototype method names of the checked-dynamic tree-representable kinds (String, Array,
  * Object, Function, Number prototypes): a dyn receiver call on one of
  * these could be a REAL method on a real value, which a stored-member
  * read would silently mis-answer — they keep the fence. Everything else
- * is own-property-or-throw for every DOM value (the honest dynCall). */
-const DOM_PROTO_METHOD_NAMES = new Set([
+ * is own-property-or-throw for every dyn value (the honest dynCall). */
+const DYN_PROTO_METHOD_NAMES = new Set([
     // Object.prototype
     "hasOwnProperty", "isPrototypeOf", "propertyIsEnumerable", "toLocaleString", "toString", "valueOf",
     // Function.prototype
@@ -3868,7 +3877,7 @@ const DOM_PROTO_METHOD_NAMES = new Set([
     "toExponential", "toFixed", "toPrecision",
 ]);
 /** The SHARED prototype names scr_dyn_invoke dispatches at runtime (the
- * subset of DOM_PROTO_METHOD_NAMES with a receiver-kind dispatch): the
+ * subset of DYN_PROTO_METHOD_NAMES with a receiver-kind dispatch): the
  * runtime runs the real method for the receiver's kind, throws Node's
  * is-not-a-function where the kind's prototype lacks the name, and
  * fences LOUDLY on real-but-unimplemented pairs. */
@@ -3882,7 +3891,7 @@ export const DYN_DISPATCH_METHODS = new Set([
     // the runtime kind so a boxed IncomingMessage/ServerResponse/Socket
     // routes onto the same entry points the static lowerings use (modeled
     // members) or the loud not-supported ladder (real-but-unmodeled ones).
-    // On every other DOM kind they answer exactly what the stored-member
+    // On every other dyn kind they answer exactly what the stored-member
     // path answered (OBJ own members call; the rest throw Node's
     // is-not-a-function).
     "on", "once", "addListener", "removeListener", "off", "removeAllListeners",
@@ -3897,11 +3906,11 @@ export const DYN_DISPATCH_METHODS = new Set([
     // The netServer half of the handle surface (`let server; server =
     // createServer(...)` — the handle lives in a dyn binding whose
     // closures the checker cannot narrow): listen/close dispatch onto the
-    // server ops; no other DOM prototype declares either name, so the
+    // server ops; no other dyn prototype declares either name, so the
     // remainder keeps the stored-member answers.
     "listen", "close",
     // Promise.prototype (SCR_DYN_PROMISE receivers): the reaction trio
-    // rides the fiber machinery (scr_dyn_promise_then); on every other DOM
+    // rides the fiber machinery (scr_dyn_promise_then); on every other dyn
     // kind then/catch/finally answer the stored-member path (OBJ own
     // members call, the rest throw Node's is-not-a-function).
     "then", "catch", "finally",
@@ -3915,15 +3924,15 @@ export const DYN_DISPATCH_METHODS = new Set([
     "additionalHeaders", "altsvc", "origin",
 ]);
 /** STR_METHODS ∪ the regex-form names, MINUS everything Array (or any
- * other DOM kind's prototype) also declares. */
+ * other dyn kind's prototype) also declares. */
 const DYN_STRING_ONLY_METHODS = new Set([
     "charCodeAt", "charAt", "startsWith", "endsWith", "substring", "repeat",
     "trim", "trimStart", "trimEnd", "split", "padStart", "padEnd",
     "toLowerCase", "toUpperCase", "replace", "replaceAll", "match", "matchAll",
     "search",
 ]);
-/** `Array.isArray(v)` — a real runtime test on `unknown` values (the DOM's
- * array kind: DOM arrays answer true, bytes/objects/scalars false — exactly
+/** `Array.isArray(v)` — a real runtime test on `unknown` values (the checked-dynamic tree's
+ * array kind: dyn arrays answer true, bytes/objects/scalars false — exactly
  * JS, Uint8Array included), a compile-time constant on statically-typed
  * ones (an `T[]` value IS an array, every other static kind is not; folded
  * only over side-effect-free reads, the `in`-operator discipline; unions
@@ -4658,7 +4667,7 @@ export function lambdaSignature(L, node) {
     // VARIADIC JS functions: a dynRest param (above), or a plain function
     // whose body reads `arguments` (test/common's mustCall wrapper —
     // `function() { ...; return fn.apply(this, arguments); }`). Both mark
-    // the func type `rest`: the lifted body takes one trailing DOM-array
+    // the func type `rest`: the lifted body takes one trailing dyn-array
     // param, filled by the boxed call thunk with the call's arguments
     // from index params.length on. `arguments` is only claimed in
     // ZERO-param functions (there it IS the surplus array); alongside
@@ -4678,7 +4687,7 @@ export function lambdaSignature(L, node) {
         shapes,
         funcType: {
             kind: "func",
-            // dynRest is EXCLUDED (the boxed thunk fills the trailing DOM
+            // dynRest is EXCLUDED (the boxed thunk fills the trailing dyn
             // array — no spelled slot); islandRest is INCLUDED (the trailing
             // jsval param IS the engine arguments array, the REST host-call
             // adapter's one uniform shape).
@@ -4761,7 +4770,7 @@ export function lowerLambda(L, node) {
     try {
         const { params, prologue } = L.declareParams(node.parameters, shapes);
         // The VARIADIC `arguments` form (rest-marked with no declared rest
-        // param): a synthetic trailing DOM-array param carries the call's
+        // param): a synthetic trailing dyn-array param carries the call's
         // arguments; `arguments` reads resolve to it (identifier lowering).
         if (funcType.rest && !shapes.some((s) => s.mode === "dynRest" || s.mode === "islandRest")) {
             const argsLocal = L.declareHiddenLocal("%arguments", DYN);
@@ -4866,7 +4875,7 @@ export function lowerLambda(L, node) {
         const first = captured[0];
         const pos = ts.getLineAndCharacterOfPosition(L.program.getSourceFile(first.loc.file) ?? node.getSourceFile(), first.loc.start);
         const params = funcType.params.map((t, i) => ({ localId: `%pf${i}`, name: `%pf${i}`, type: t }));
-        // A REST-MARKED value type hides one synthetic trailing DOM-array
+        // A REST-MARKED value type hides one synthetic trailing dyn-array
         // param in the lifted function (the boxed call thunk fills it) —
         // the fence lambda must spell that slot too or the validator's
         // closure-signature check trips (SC9001). Island rest types SPELL
@@ -5093,7 +5102,7 @@ export function lowerPromiseMethodCall(L, call, access) {
         // A TYPED handler on a DYN-settling promise (the tracePromise
         // result's `.then((value) => ...)` — the checker's generic
         // instantiation typed the parameter, but the settled value is a
-        // DOM value): box the handler and ride the dyn-handler desugar
+        // dyn value): box the handler and ride the dyn-handler desugar
         // below — its call thunk validates the settled value into the
         // declared parameter type (the per-arg dynCheck), Node's own
         // runtime contract for a value that came off the wire untyped.
@@ -5105,10 +5114,10 @@ export function lowerPromiseMethodCall(L, call, access) {
         }
         // A CHECKED-DYNAMIC handler VALUE (`p.then(common.mustCall())` — the
         // Node-suite wrapper is an untyped rest-args function): the same
-        // async desugar with the handler called through the DOM — the
+        // async desugar with the handler called through the checked-dynamic tree — the
         // settled value boxes (dyn passes through; void arrives as JS's
         // explicit undefined argument), the result promise settles with the
-        // handler's DOM result. A receiver rejection passes through the
+        // handler's dyn result. A receiver rejection passes through the
         // await like the typed path; the dyn call's own argument checking
         // throws Node's TypeError for non-callables.
         if (cb.type.kind === "dyn") {
@@ -5118,7 +5127,7 @@ export function lowerPromiseMethodCall(L, call, access) {
                 if (canConvertToDyn(v.type, (id) => L.shapes.get(id), (id) => L.unions.get(id))) {
                     return { kind: "dynFrom", value: v, type: DYN, loc };
                 }
-                L.unsupported("SC1090", call.arguments[0], `then handlers receiving '${L.fmt(v.type)}' values through an untyped handler (the settled value cannot cross the DOM boundary)`);
+                L.unsupported("SC1090", call.arguments[0], `then handlers receiving '${L.fmt(v.type)}' values through an untyped handler (the settled value cannot cross the checked-dynamic tree boundary)`);
             };
             const resultT = { kind: "promise", inner: DYN };
             const fnName = `%fn${L.lambdaCounter++}_then`;
@@ -5344,8 +5353,8 @@ export function lowerPromiseMethodCall(L, call, access) {
         }
     }
     // .catch on a DYN-SETTLING promise (the tracePromise result's
-    // `.catch((e) => ...)`): the rejection reason is a DOM value, so the
-    // handler runs through the DOM — a lifted async helper awaits the
+    // `.catch((e) => ...)`): the rejection reason is a dyn value, so the
+    // handler runs through the checked-dynamic tree — a lifted async helper awaits the
     // receiver, passes fulfillments through as dyn, and on rejection
     // calls the boxed handler with caughtToDyn's identity-preserving
     // snapshot (the dyn-then desugar's catch twin).
@@ -5531,7 +5540,7 @@ export function lowerPromiseMethodCall(L, call, access) {
         else if (R.kind === "dyn") {
             // A checked-dynamic result (the dyn-handler .then's promise-of-dyn
             // chained into .catch): falling off the handler's end resolves
-            // with the DOM undefined.
+            // with the dyn undefined.
             catchBody.push({ kind: "return", value: dynUndefinedExpr(loc), loc });
         }
         else if (R.kind === "jsval") {
@@ -6263,7 +6272,7 @@ function lowerObjectStaticCall(L, call, access) {
             // REAL prototype semantics: reads delegate LIVE, writes shadow,
             // and inspect renders Node's exact shapes ("[Object: null
             // prototype]" included). null and engine-held (jsval) prototypes
-            // route; checked-dynamic (DOM) prototypes keep the named fence —
+            // route; checked-dynamic (dyn) prototypes keep the named fence —
             // their marshal into the engine is a DEEP COPY, so a later
             // prototype mutation would be invisible through the created
             // object where Node delegates live.
@@ -6328,7 +6337,7 @@ function lowerObjectStaticCall(L, call, access) {
             const tProbe = probeLower(L, call.arguments[0]);
             const sProbe = probeLower(L, call.arguments[1]);
             // CHECKED-DYNAMIC target and source (the JS file-scope
-            // object-literal identity story): the runtime DOM copy — own
+            // object-literal identity story): the runtime dyn copy — own
             // members of the source land on the target, which returns.
             if (tProbe?.type.kind === "dyn") {
                 const loc = locOf(call);
@@ -6363,7 +6372,7 @@ function lowerObjectStaticCall(L, call, access) {
         // `Object.assign(target, ...sources)` over a CHECKED-DYNAMIC target
         // — the n-ary/spread form (`Object.assign({}, ...plugins.map(p =>
         // p.options), coreOptions)`, support.js's option-table merge). The
-        // sources pack into one fresh DOM array FIRST — plain sources
+        // sources pack into one fresh dyn array FIRST — plain sources
         // retain in, spread sources flatten through the spread-call walk
         // (V8's exact TypeError texts, the source spelling carried for the
         // nullish form) — so every source evaluates and flattens before any
@@ -6375,7 +6384,7 @@ function lowerObjectStaticCall(L, call, access) {
         // spread copies in at the boundary, the documented aliasing
         // stance); anything else keeps the fence. Targets: dyn values, a
         // FRESH object-literal target (`Object.assign({}, ...)` — no alias
-        // exists, so building it as a DOM object instead of a record is
+        // exists, so building it as a dyn object instead of a record is
         // unobservable), or a nullish unit (Node's ToObject TypeError
         // throws at the call, catchably); aliased record targets keep the
         // fence — their identity could not survive the conversion.
@@ -6450,7 +6459,7 @@ function lowerObjectStaticCall(L, call, access) {
     // Object.defineProperties over a CHECKED-DYNAMIC target (test/common's
     // _mustCallInner copying name/length onto the mustCall wrapper): the
     // runtime turns each descriptor's `value` into a plain own property on
-    // the DOM node (OBJ members; FUNC nodes carry an own-property table) —
+    // the dyn node (OBJ members; FUNC nodes carry an own-property table) —
     // flags accepted and ignored, accessors throw loudly (SEMANTICS.md).
     // The result is the target, like JS. Typed targets keep the fence:
     // static shapes have no property table to extend.
@@ -6513,7 +6522,7 @@ function lowerObjectStaticCall(L, call, access) {
         const keyNode = call.arguments[1];
         const probed = probeLower(L, recvNode);
         // A CHECKED-DYNAMIC receiver (the JS file-scope object-literal
-        // identity story): the runtime DOM probe — OBJ member presence, ARR
+        // identity story): the runtime dyn probe — OBJ member presence, ARR
         // index bounds, Node's ToObject TypeError on nullish.
         if (probed?.type.kind === "dyn") {
             const loc = locOf(call);
@@ -6553,9 +6562,9 @@ function lowerObjectStaticCall(L, call, access) {
     const argNode = call.arguments[0];
     // A CHECKED-DYNAMIC argument — the checker may still spell a record
     // type (the JS file-scope object-literal identity story stores the
-    // DOM object), so the LOWERED value's kind is the dispatch: the
-    // runtime walks the DOM node's own keys (integer-like keys first,
-    // JS's own-key order) and answers a DOM array.
+    // dyn object), so the LOWERED value's kind is the dispatch: the
+    // runtime walks the dyn node's own keys (integer-like keys first,
+    // JS's own-key order) and answers a dyn array.
     {
         const probed = probeLower(L, argNode);
         const isDyn = probed?.type.kind === "dyn";
@@ -6777,7 +6786,7 @@ export function lowerFunction(L, decl) {
         const { params, prologue } = L.declareParams(decl.parameters, sig.params);
         // The synthetic `arguments` slot (a dynRest shape BEYOND the declared
         // parameters — collectSignatureInner appended it): one trailing
-        // DOM-array param, resolved by `arguments` reads.
+        // dyn-array param, resolved by `arguments` reads.
         if (sig.params.length > decl.parameters.length && sig.params[sig.params.length - 1].mode === "dynRest") {
             const argsLocal = L.declareHiddenLocal("%arguments", DYN);
             params.push({ localId: argsLocal.id, name: "%arguments", type: DYN });
@@ -7128,8 +7137,13 @@ export function nullishValueUnitOf(L, sym) {
         return cached;
     L.nullishBindings.set(sym, null); // cycle guard: self-referential probes answer non-qualifying
     const decl = L.checker.valueDeclarationOf(sym);
+    // Statement-position declarators only: a for-loop head (`for (let x =
+    // null as any; ...)`) declares a LOCAL with per-iteration semantics —
+    // lowerVarDeclList's contract requires a lowered statement for it, so
+    // the no-storage family never claims it.
     if (!decl || !ts.isVariableDeclaration(decl) || !ts.isIdentifier(decl.name) ||
-        decl.getSourceFile().isDeclarationFile || decl.initializer === undefined) {
+        decl.getSourceFile().isDeclarationFile || decl.initializer === undefined ||
+        !ts.isVariableStatement(decl.parent.parent)) {
         return null;
     }
     const unit = nullishExprUnitOf(L, decl.initializer);
@@ -7204,8 +7218,21 @@ export function nullishGenericBindingUnitOf(L, sym) {
     if (unit === null)
         return null;
     const mapped = L.mapTypeOf(L.checker.getTypeOfSymbol(sym));
-    if (mapped !== null && mapped.kind !== "record")
-        return null;
+    if (mapped !== null) {
+        // Only the EMPTY interned shape qualifies among record mappings —
+        // the all-generic-signature interface (`I<A & B>`) whose struct has
+        // no slot at all. A record with DATA fields (`const value: { inner:
+        // number | string } = null as any`) keeps its real storage and
+        // every ordinary lowering: its reads flow through positions (comma
+        // chains, call arguments) the no-storage read paths never claim,
+        // so claiming the binding would fence working programs.
+        if (mapped.kind !== "record")
+            return null;
+        const shape = L.shapes.get(mapped.shapeId);
+        if (!shape || shape.fields.length > 0 || shape.tuple !== undefined || shape.indexValue !== undefined) {
+            return null;
+        }
+    }
     return unit;
 }
 /** True when every write of `sym` in its declaring file is a plain `x =
@@ -7297,6 +7324,13 @@ export function deadUnmappableBinding(L, sym, decl) {
         return true;
     if (!ts.isIdentifier(decl.name))
         return false;
+    // Statement-position declarators only: a for-loop head (`for (let x;
+    // false;) {}`) declares a LOCAL with per-iteration semantics —
+    // lowerVarDeclList's contract requires a lowered statement for it, so
+    // the no-storage family never claims it (catch bindings sit outside a
+    // variable statement too and stay out the same way).
+    if (!ts.isVariableStatement(decl.parent.parent))
+        return false;
     const sf = decl.getSourceFile();
     if (sf.isDeclarationFile || isJsSourceFile(sf))
         return false;