@scriptc/compiler 0.0.11 → 0.0.13

package/dist/ir/nodes.d.ts

@@ -232,7 +232,7 @@ export type IrType = {
 /** Heap, refcounted closure. `rest` marks a VARIADIC JS function (a
  * `...args` rest parameter, or a zero-param function body reading
  * `arguments` — test/common's mustCall wrapper): the lifted function
- * takes one extra trailing `ScrDyn *` param — a DOM ARRAY carrying the
+ * takes one extra trailing `ScrDyn *` param — a dyn ARRAY carrying the
  * call's arguments from index params.length on — which the dyn call
  * thunk builds per call. `params` stays the DECLARED (non-rest) list
  * (fn.length semantics). Rest-marked values are only ever CALLED
@@ -286,10 +286,10 @@ export type IrType = {
 }
 /** A dynamic value — the type of `unknown` (JSON.parse results and
  * unknown-typed locals/params/returns). Runtime representation is a
- * refcounted JSON DOM tree (ScrDyn). Deliberately NARROW: a dyn value can
+ * refcounted JSON dyn tree (ScrDyn). Deliberately NARROW: a dyn value can
  * be stored in locals/globals, passed as a param/call arg, returned,
  * validated with a checked cast (`dynCheck`), CALLED (`dynCall` — the
- * DOM's function kind, boxed closures with per-call argument checks),
+ * dyn's function kind, boxed closures with per-call argument checks),
  * and captured by closures (an untraced obj-box: cycles through dyn are
  * never collected, SEMANTICS.md); it can NOT ride record/class fields,
  * array elements, union arms, or the exception cell, and every other
@@ -756,7 +756,7 @@ export interface IrRecordShape {
      * order of the first ts.Type interned to this shape) — metadata, NOT
      * part of the interned identity: a later structurally-equal type with a
      * different member order shares the shape and the first one's order.
-     * JSON.stringify, Object.keys/values/entries, record→DOM conversion,
+     * JSON.stringify, Object.keys/values/entries, record→dyn conversion,
      * and util.inspect all emit this order; JS's per-object insertion order
      * matches it whenever objects are constructed in declaration order
      * (SEMANTICS.md 36 documents the divergence when they are not).
@@ -1316,7 +1316,7 @@ export type IrLibFn = "island.eval"
  * boundary, a conversion that cannot happen throws instead of lying.
  * --dynamic only. */
  | "island.castFail" | "json.parse"
-/** Keyed WRITE on a dyn DOM value — `h.onDone = cb` / `h["k"] = v` on a
+/** Keyed WRITE on a dyn value — `h.onDone = cb` / `h["k"] = v` on a
  * checked-dynamic object (args: receiver, key string, value — all
  * borrowed; the runtime copies the key and retains the value in). An
  * OBJ receiver sets the member (later writes win, insertion order
@@ -1328,27 +1328,38 @@ export type IrLibFn = "island.eval"
  * SEMANTICS.md notes the sloppy divergence: loud, never silent). Void
  * result; in the may-throw seed set. */
  | "dyn.keySet"
-/** Destructuring pack over a dyn DOM source — `const [a, b] = d`, a
+/** Destructuring pack over a dyn source — `const [a, b] = d`, a
  * destructured dyn callback param (args: the source and the STATIC
  * TypeError spelling, "" when the source has none — both borrowed;
- * result: a fresh DOM array, +1). Iterable kinds collect like spread
+ * result: a fresh dyn array, +1). Iterable kinds collect like spread
  * (arrays element-by-element, strings by code point, bytes by byte);
  * every other kind throws V8's destructuring TypeError — the spelling
  * verbatim when non-empty, else the runtime kind wording ("number 5 is
  * not iterable (cannot read property Symbol(Symbol.iterator))"). In the
  * may-throw seed set. */
  | "dyn.iterPack"
-/** Object.defineProperties over DOM values (args: target, descriptors —
+/** The for-of-over-dyn pack accessors — the emitted index loop drives
+ * them over a dyn.iterPack result (ARR by construction). arrLen: the
+ * ARR length as f64 (0 for non-ARR kinds; arg borrowed). arrAt: the
+ * element at index (+1; the undefined singleton past the end). Neither
+ * throws. */
+ | "dyn.arrLen" | "dyn.arrAt"
+/** `key in v` with a RUNTIME (string) key on a checked-dynamic
+ * receiver (args: value dyn, key string; result bool): OBJ answers
+ * own-member presence, ARR answers 'length'/a valid index — exactly
+ * the compile-time dynHasKey fold, per value. Never throws. */
+ | "dyn.hasKey"
+/** Object.defineProperties over dyn values (args: target, descriptors —
  * both borrowed dyn; result: the target, +1 — JS's return value).
  * Value descriptors become plain own properties on OBJ and FUNC targets
- * (writable/enumerable/configurable accepted and IGNORED — DOM
+ * (writable/enumerable/configurable accepted and IGNORED — dyn
  * properties are plain data properties, SEMANTICS.md); get/set
  * descriptors and non-object targets/descriptors throw catchably
  * (Node's TypeError texts; accessors the loud unsupported Error). In
  * the may-throw seed set. */
  | "dyn.defineProps"
 /** Bare `typeof v` on a dyn value AS A STRING (arg: the dyn value,
- * borrowed; result: an owned string) — the DOM kind's JS answer:
+ * borrowed; result: an owned string) — the dyn kind's JS answer:
  * undefined→"undefined", null/object/array/bytes→"object" (JS's oldest
  * wart preserved), boolean/number/string by kind, function→"function".
  * Never throws. */
@@ -1479,8 +1490,8 @@ export type IrLibFn = "island.eval"
  * unescaped — total like the component encoder. Borrow; result +1. */
  | "str.encodeUri"
 /** The WHATWG base64 globals (scr_string.c), Node-global since v16.
- * Arguments are borrowed DOM values — WebIDL ToString runs in the
- * runtime over the DOM kind (String(null) is "null": the html spec's
+ * Arguments are borrowed dyn values — WebIDL ToString runs in the
+ * runtime over the dyn kind (String(null) is "null": the html spec's
  * coercion, which Node's atob(null) exercises). str.atob decodes
  * forgiving-base64 (ASCII whitespace stripped, %4==0 strips up to two
  * '=', %4==1 refuses, leftover bits discarded) into the latin1 code
@@ -1568,7 +1579,7 @@ export type IrLibFn = "island.eval"
  * arm tolerated — @types/node's Dict), verified structurally by the
  * frontend (lowerQuerystringParseCall); the emitters construct the
  * record and hand its overflow map to scr_qs_parse_into with the two
- * union tags. qs.stringify takes (obj, sep, eq) with obj a DOM value
+ * union tags. qs.stringify takes (obj, sep, eq) with obj a dyn value
  * (the frontend dynFroms the typed record; JS-world dyn values pass
  * through) — Node's encodeStringified rules run in the runtime, so
  * arrays expand to repeated keys and null/undefined/nested objects are
@@ -1765,7 +1776,7 @@ export type IrLibFn = "island.eval"
  * blocking divergence); its per-union adapter builds the
  * `Error | null` first argument. */
  | "dgram.createSocket" | "dgram.bind" | "dgram.bindCb" | "dgram.connect" | "dgram.connectCb" | "dgram.sendStr" | "dgram.sendBytes"
-/** The send argument-validation ladder over DOM arguments (Node's
+/** The send argument-validation ladder over dyn arguments (Node's
  * signature shuffle: slice bounds, list/type contracts, port/address
  * validation, connected-state errors) — a fully-validated unconnected
  * single-payload send RUNS; callback/list/connected forms meet the
@@ -1882,7 +1893,17 @@ export type IrLibFn = "island.eval"
  * bytes to the front of the stream; serverEmitConnection routes a
  * socket into another server's protocol layer (a TLS target's
  * 'connection' waits for its handshake). */
- | "net.sockOnReadable" | "net.sockRead" | "net.sockUnshift" | "net.serverEmitConnection"
+ | "net.sockOnReadable" | "net.sockRead" | "net.sockUnshift"
+/** Socket flow control and the compat surface: pause/resume (reads
+ * gate off/on — kernel backpressure holds paused bytes; resume flows
+ * and discards sans listeners) and setNoDelay answer the SOCKET (+1,
+ * Node's chaining); destroySoon ends now and destroys once the FIN
+ * flushed; bytesWritten counts accepted bytes; readable is true until
+ * the read half ends. */
+ | "net.sockPause" | "net.sockResume" | "net.sockSetNoDelay" | "net.sockDestroySoon" | "net.sockBytesWritten" | "net.sockReadable"
+/** socket.on('finish', cb) / end(cb): fires once when the FIN goes out
+ * (sweep-deferred, never the registering stack). */
+ | "net.sockOnFinish" | "net.serverEmitConnection"
 /** node:http, the CLIENT slice (http.request/http.get over the net
  * client machinery): request/requestCb take (host, port, path, method,
  * timeoutMs, headerPairs, autoEnd[, responseCb]) — headerPairs is the
@@ -1899,6 +1920,24 @@ export type IrLibFn = "island.eval"
  * the caller set content-length; clientEnd(data) before any write sends
  * Content-Length exactly like Node. */
  | "http.request" | "http.requestCb"
+/** new http.Agent(opts) / new https.Agent(opts): (secure, keepAlive,
+ * keepAliveMsecs, maxSockets, maxFreeSockets, timeoutMs, port) — the
+ * numeric options arrive < 0 for "unset" (Infinity/256/none; port
+ * seeds the settable defaultPort, Node's option merge). Returns the
+ * Agent as a checked-dynamic HANDLE (getName/destroy and the
+ * sockets/requests/freeSockets counters dispatch through the dyn
+ * handle ops). keepAlive: true THROWS the named construction fence —
+ * socket POOLING is not modeled (one dial per request); maxSockets
+ * accounting is real: over-limit requests defer their dial and queue.
+ * MAY THROW. */
+ | "http.agentNew"
+/** The agent-threaded request rows: the http.request/https.request
+ * shape with a trailing `agent` dyn argument (an Agent handle, false —
+ * the one-shot Connection: close dial — or null/undefined for the
+ * default path). port < 0 means "no port option": the agent's settable
+ * defaultPort, then the scheme's. MAY THROW (a non-Agent value is
+ * Node's ERR_INVALID_ARG_TYPE). */
+ | "http.requestAgent" | "http.requestAgentCb" | "https.requestAgent" | "https.requestAgentCb"
 /** The createConnection form (the proxy's own dialer): args are
  * (connCb, path, method, timeout, headers, autoEnd[, cb]) — connCb is
  * a `() => net.Socket` closure the runtime invokes ONCE, synchronously
@@ -1956,7 +1995,18 @@ export type IrLibFn = "island.eval"
 /** tls.getCACertificates(type): validateString + the documented name
  * set, then the trailing compiler-rendered fence — ALWAYS THROWS (the
  * error.nodeThrow polymorphic-result carve-out). May-throw seed. */
- | "tls.caCertsChk" | "https.createServer" | "https.request" | "https.requestCb"
+ | "tls.caCertsChk"
+/** The CA-store introspection surface (scr_tls_ca.c — its own unit and
+ * link gate, "tlsca." NOT "tls.", so a getCACertificates-only binary
+ * never pulls mbedTLS): tlsca.get is tls.getCACertificates(type) — the
+ * cached per-type string[] of PEM blocks (identity-stable across calls,
+ * Node's caching; an unknown type throws Node's ERR_INVALID_ARG_VALUE
+ * TypeError); tlsca.root is the tls.rootCertificates value read;
+ * tlsca.set is tls.setDefaultCACertificates(certs) — replaces the
+ * default set (deduped) and the anchors the TLS client verifies
+ * against, throwing Node's ERR_CRYPTO_OPERATION_FAILED when no entry
+ * carries a certificate block. */
+ | "tlsca.get" | "tlsca.root" | "tlsca.set" | "https.createServer" | "https.request" | "https.requestCb"
 /** A call through a `const requestFn = tls ? https.request :
  * http.request` binding — the module-function-as-value ternary between
  * the two known clients: the https.request row with a leading `secure`
@@ -1976,6 +2026,20 @@ export type IrLibFn = "island.eval"
  * serverOnSessionError evaluates and releases its callback — no h2
  * session ever exists, so the event NEVER fires. */
  | "http2.createSecureServer"
+/** createSecureServer(options, handler) — the eager COMPAT handler as
+ * the first 'request' listener (Node's exact route), on both literal
+ * flavors: Req is the allowHTTP1 server (scr_https_create_server with
+ * the closure — HTTP/1.1 req/res handles), H2Req the ALPN=h2 server
+ * (the compat handles over h2 streams — scr_http2.c's layer). Args are
+ * (cert, key, cb). */
+ | "http2.createSecureServerReq" | "http2.createSecureServerH2Req"
+/** createSecureServer with a RUNTIME options record (the divergence-66
+ * stance): allowHTTP1/cert/key read at runtime — allowHTTP1 picks the
+ * flavor, the TLS server walk fences its out-of-bounds members with
+ * the catchable runtime fence, and h2 session-tuning keys drop exactly
+ * like the literal walk ignores them. May throw. The Cb form carries
+ * the eager compat handler. */
+ | "http2.createSecureServerDyn" | "http2.createSecureServerDynCb"
 /** createSecureServer with an SNI callback: args are (cert, key, sniCb)
  * where sniCb is the JS SNICallback — a `(servername, cb) => void`
  * closure, or the `SNICallback | undefined` union from the conditional-
@@ -2085,12 +2149,12 @@ export type IrLibFn = "island.eval"
  * always throws Node's ERR_INVALID_ARG_TYPE ("The \"string\" argument
  * must be of type string. Received ..."). Borrowed dyn; may-throw. */
  | "buffer.newStringFail"
-/** fs._toUnixTimestamp(time) over a DOM value: numeric strings and
+/** fs._toUnixTimestamp(time) over a dyn value: numeric strings and
  * finite numbers coerce (negatives answer now/1000, Node's shape);
  * everything else throws Node's ERR_INVALID_ARG_TYPE. May-throw. */
  | "fs.toUnixTimestamp"
 /** The fs argument-validation ladders (checked-dynamic lane): each Chk
- * replicates its API's Node-order validation over DOM values (Node's
+ * replicates its API's Node-order validation over dyn values (Node's
  * exact typed errors — ERR_INVALID_ARG_TYPE/VALUE, ERR_OUT_OF_RANGE),
  * and a full pass meets the trailing compiler-rendered SC2020 fence
  * string — so the ALWAYS-THROW forms take the error.nodeThrow
@@ -2101,7 +2165,7 @@ export type IrLibFn = "island.eval"
  | "fs.existsChk" | "fs.mkdtempChk" | "fs.mkdtempSyncChk" | "fs.readFileChk" | "fs.opendirChk" | "fs.watchFileChk" | "fs.lchmodChk" | "fs.lchmodSyncChk" | "fsp.lchmodChk" | "fs.readChk" | "fs.streamOptsChk"
 /** The compiler-resolved ERR_INVALID_ARG_TYPE throw with a RUNTIME-
  * rendered Received tail: args [argname, "of type ..." clause, the
- * offending DOM value]. ALWAYS THROWS; polymorphic result (the
+ * offending dyn value]. ALWAYS THROWS; polymorphic result (the
  * error.nodeThrow pattern). May-throw seed. */
  | "error.argTypeThrow"
 /** The property flavor of argTypeThrow ("The \"options.x\" property
@@ -2109,7 +2173,7 @@ export type IrLibFn = "island.eval"
  * THROWS; polymorphic result. May-throw seed. */
  | "error.propTypeThrow"
 /** The checked-dynamic max-listeners ladders: setMaxChk is the
- * instance form over a DOM n (non-numbers ERR_INVALID_ARG_TYPE,
+ * instance form over a dyn n (non-numbers ERR_INVALID_ARG_TYPE,
  * negatives/NaN ERR_OUT_OF_RANGE; +1 receiver back — chaining);
  * setDefaultMaxChk is the static/property form, its second argument
  * naming the message slot ("setMaxListeners" for the static call,
@@ -2157,7 +2221,7 @@ export type IrLibFn = "island.eval"
 /** The ambient receiver — JS `this` in a plain (non-method) function
  * body: the innermost binding the current firing/dispatch window
  * pushed (Node's listener receiver, a dyn OBJ method's object, an
- * apply/call thisArg), or the undefined DOM singleton with none bound
+ * apply/call thisArg), or the undefined dyn singleton with none bound
  * (the strict-mode plain-call answer, the old constant). Zero args →
  * dyn (+1). Never throws. */
  | "dyn.this"
@@ -2347,7 +2411,7 @@ export type IrLibFn = "island.eval"
  * the replaced expression's own (never materialized — the
  * global.undefRead pattern). May-throw seed. */
  | "error.nodeThrow"
-/** JS ToString over a DOM value WITH the object protocol (a user
+/** JS ToString over a dyn value WITH the object protocol (a user
  * toString/valueOf member is CALLED and its throw propagates;
  * exhaustion throws "Cannot convert object to primitive value"; units
  * render "null"/"undefined") — the WHATWG USVString conversions
@@ -2366,43 +2430,43 @@ export type IrLibFn = "island.eval"
  * `C.name` on the class name itself folds to a strLit instead. */
  | "class.name" | "error.ctor" | "error.toString"
 /** `new DOMException(message?, nameOrOptions?)` (scr_error.c): both args
- * are borrowed DOM values (the lowering passes the DOM undefined for an
+ * are borrowed dyn values (the lowering passes the dyn undefined for an
  * absent argument, so WebIDL's optionality lives in one place). The
  * runtime ToStrings the message ("" for absent/undefined), resolves the
  * name — absent/undefined → "Error", a non-null object → ToString of its
  * `name` member plus the `cause` own-property record, anything else →
  * ToString — and stamps the legacy code from the WebIDL name table (0
- * off-table). Result is an owned (+1) %DOMException. Never throws (DOM
+ * off-table). Result is an owned (+1) %DOMException. Never throws (dyn
  * ToString is total). */
  | "error.newDom"
 /** DOMException's own read surface (scr_error.c; %DOMException receivers
  * only — borrowed). domCode: the legacy numeric code. domHasCause: the
  * options form's own-property record (`'cause' in e`). domCause: the
- * cause value, +1 (the DOM undefined when absent — matching Node's
+ * cause value, +1 (the dyn undefined when absent — matching Node's
  * undefined read). None throws. */
  | "error.domCode" | "error.domHasCause" | "error.domCause"
 /** structuredClone of a %DOMException receiver (scr_error.c): WebIDL
  * serialization — name/message copy, the legacy code re-derives, cause
  * does not serialize. args are the borrowed receiver and the borrowed
- * options DOM value (the DOM undefined when absent — the shared
+ * options dyn value (the dyn undefined when absent — the shared
  * validation throws Node's exact option errors; any non-empty transfer
  * list throws DataCloneError, nothing static is transferable). Result
  * +1 %DOMException. */
  | "error.domClone"
 /** `d instanceof TypeError` (and the other BUILTIN error classes) on a
  * checked-dynamic value (scr_json.c): the from_error cache holds the
- * DOM↔error identity edge, so the test resolves the runtime error and
+ * dyn↔error identity edge, so the test resolves the runtime error and
  * asks its vtable's stamped preorder interval — exact for every error
- * that crossed the boundary. A DOM object that never came from an
+ * that crossed the boundary. A dyn object that never came from an
  * error (a hand-built {%error} literal) answers false: subclass
  * identity is unknowable there (the root keeps dynTest's marker
  * answer). args are the borrowed dyn and the SCR_ERR_* kind literal.
  * Never throws. */
  | "dyn.errInstanceof"
 /** Object.keys/values/entries over a CHECKED-DYNAMIC receiver
- * (scr_json.c): the runtime walks the DOM node's own members in JS
+ * (scr_json.c): the runtime walks the dyn node's own members in JS
  * own-key order (array-index keys ascending first, then insertion
- * order) and answers a DOM array (entries: an array of [key, value]
+ * order) and answers a dyn array (entries: an array of [key, value]
  * pairs; values RETAIN the member nodes — reference semantics, like
  * JS). Strings/arrays/bytes answer their index keys; other scalars an
  * empty array; null/undefined throw Node's catchable TypeError
@@ -2410,7 +2474,7 @@ export type IrLibFn = "island.eval"
  | "dyn.objKeys" | "dyn.hasOwn" | "dyn.assign"
 /** Variadic Object.assign over CHECKED-DYNAMIC targets (`Object.assign(
  * {}, ...arr.map(f), tail)` — the option-table merge): the lowering
- * builds one fresh DOM pack of sources (packPush retains a plain source
+ * builds one fresh dyn pack of sources (packPush retains a plain source
  * in; packPushSpread flattens a spread source through the spread-call
  * walk — V8's exact TypeError texts, the string arg spelling the spread
  * expression for the nullish form), so every source evaluates and
@@ -2426,19 +2490,19 @@ export type IrLibFn = "island.eval"
  * ("object null is not iterable (cannot read property
  * Symbol(Symbol.iterator))"). The frontend picks by position. */
  | "dyn.packPushSpreadIter" | "dyn.assignAll"
-/** `Object.create(null)` (scr_json.c): a fresh NULL-PROTOTYPE DOM
- * dictionary. The DOM's OBJ dispatch is already own-member-only —
+/** `Object.create(null)` (scr_json.c): a fresh NULL-PROTOTYPE dyn
+ * dictionary. The checked-dynamic tree's OBJ dispatch is already own-member-only —
  * Node's null-proto answer — so the flag's whole job is the observations
  * that SEE the prototype: inspect's "[Object: null prototype]" prefix
  * and deepStrictEqual's prototype gate. Never throws. Static builds
  * only; --dynamic routes Object.create through the engine instead. */
  | "dyn.objCreateNullProto" | "dyn.objValues" | "dyn.objEntries"
-/** structuredClone over the DOM (scr_json.c): the JSON-safe subset plus
+/** structuredClone over the checked-dynamic tree (scr_json.c): the JSON-safe subset plus
  * bytes (a fresh copy — a Buffer clones as a plain Uint8Array, like
  * Node), deep. Functions and handle kinds throw the spec's catchable
- * DataCloneError; CYCLES throw the scriptc fence (the DOM cannot
+ * DataCloneError; CYCLES throw the scriptc fence (the checked-dynamic tree cannot
  * represent them — Node clones cycles; documented divergence). The
- * options DOM value validates with Node's exact errors (dictionary
+ * options dyn value validates with Node's exact errors (dictionary
  * conversion, the transfer-sequence member; any non-empty transfer
  * list throws DataCloneError). dyn.cloneMissing is the zero-argument
  * call: always throws Node's TypeError [ERR_MISSING_ARGS] with Node's
@@ -2457,7 +2521,7 @@ export type IrLibFn = "island.eval"
 /** structuredClone with a NON-EMPTY transfer array of static values:
  * nothing static is transferable, so the call always throws Node's
  * catchable DataCloneError ("Found invalid value in transferList.") —
- * lowered directly (the list's values need no DOM representation to
+ * lowered directly (the list's values need no dyn representation to
  * fail). */
  | "dyn.cloneTransferFail"
 /** node:events EventEmitter (scr_events_emitter.c, link-gated by
@@ -2546,7 +2610,7 @@ export type IrLibFn = "island.eval"
 /** node:stream/consumers — the promise consumers over the readable
  * machinery: (s) → a pending promise settled at the terminal point
  * with the accumulated result (sc.text: the utf8 decode, sc.json: the
- * parsed DOM — malformed input rejects with the parse's SyntaxError,
+ * parsed dyn — malformed input rejects with the parse's SyntaxError,
  * sc.buffer: the concatenated bytes) or rejected with the stream's
  * error / ERR_STREAM_PREMATURE_CLOSE. */
  | "sc.text" | "sc.json" | "sc.buffer" | "readable.newDyn" | "writable.newDyn" | "duplex.newDyn" | "transform.newDyn" | "passthrough.newDyn" | "readable.initDyn" | "writable.initDyn" | "duplex.initDyn" | "transform.initDyn" | "passthrough.initDyn" | "readable.push" | "readable.pushStr" | "readable.pushNull" | "readable.pushU" | "readable.pushDyn" | "readable.unshift" | "readable.unshiftStr" | "readable.read" | "readable.pause" | "readable.resume" | "readable.setEncoding"
@@ -2611,10 +2675,10 @@ export type IrLibFn = "island.eval"
  * (a, b, negated, deep, msg, hasMsg) — the whole quartet over
  * checked-dynamic operands (both slots dyn; the frontend boxes a
  * static side with dynFrom first): SameValue for the strict pair over
- * the DOM kinds (boxed-closure identity for functions), the structural
- * DOM walk for the deep pair, with assertion_error.js's messages —
+ * the dyn kinds (boxed-closure identity for functions), the structural
+ * dyn walk for the deep pair, with assertion_error.js's messages —
  * scalar forms byte-exact, composites rendered compact:false/sorted
- * through the DOM and diffed with the real myers line printer.
+ * through the checked-dynamic tree and diffed with the real myers line printer.
  *
  * The assert.throws(fn, {name/code/message}) shape check
  * (expectedException over the static error surface): shapeBegin
@@ -2637,7 +2701,7 @@ export type IrLibFn = "island.eval"
  * All arguments are borrowed. */
  | "assert.ok" | "assert.eqF64" | "assert.eqStr" | "assert.eqBool" | "assert.eqSym" | "assert.eqDyn" | "assert.deepResult" | "assert.sameValue" | "assert.deqEnter" | "assert.deqLeave" | "assert.match" | "assert.throwsNone" | "assert.throwsMismatch" | "assert.throwsRegex" | "assert.shapeBegin" | "assert.shapeStr" | "assert.shapeRe" | "assert.shapeEnd" | "assert.regexErrTest" | "assert.unwantedRejection"
 /** Node's expectsError over an error-INSTANCE expected (assert.throws/
- * rejects second argument): walk the expected DOM error's keys (name,
+ * rejects second argument): walk the expected dyn error's keys (name,
  * message, code — the %error marker skipped) and deep-compare each
  * against the caught value's; a mismatch throws the deep-equal
  * AssertionError (scr_assert.c). MAY THROW by design. */
@@ -2648,7 +2712,7 @@ export type IrLibFn = "island.eval"
  * ladder + line splitting; insp.regex: /source/flags; insp.buffer:
  * <Buffer aa ..>). insp.error renders the STACKLESS [Name: message]
  * form with the code slot as its one property. insp.dyn walks the
- * checked-dynamic DOM entirely in the runtime (its shape lives in the
+ * checked-dynamic tree entirely in the runtime (its shape lives in the
  * value); insp.dynS is format's %s twin (dyn strings pass verbatim).
  * insp.jsval ([value, recurse, depth], --dynamic only) renders the
  * island scalars and THROWS a catchable TypeError on composites (the
@@ -2656,7 +2720,7 @@ export type IrLibFn = "island.eval"
  * engine from the compiler-synthesized per-type traversal helpers
  * (%util.insp.N — the deepStrictEqual precedent). */
  | "insp.f64"
-/** util.format %j over a checked-dynamic argument: the runtime DOM
+/** util.format %j over a checked-dynamic argument: the runtime dyn
  * walk (JS-exact stringify; root undefined/function prints
  * "undefined"; a handle in the tree throws the loud fence). */
  | "insp.jsonDyn" | "insp.str" | "insp.regex" | "insp.buffer" | "insp.error" | "insp.dyn" | "insp.dynS" | "insp.jsval" | "insp.begin" | "insp.entry" | "insp.key" | "insp.moreItems" | "insp.circCheck" | "insp.seenPush" | "insp.refWrap" | "insp.circular" | "insp.end"
@@ -2696,7 +2760,7 @@ export type IrLibFn = "island.eval"
 /** node:diagnostics_channel (scr_dc.c, linked when any dc.* appears —
  * the zlib gating precedent): a process-global name→channel registry;
  * channel values are f64 handles (types.ts maps Channel to F64, the
- * readline.Interface pattern). Subscribers are DOM function values —
+ * readline.Interface pattern). Subscribers are dyn function values —
  * identity-compared by unsubscribe, called (message, name) by publish
  * over a SNAPSHOT of the list (a subscriber unsubscribing itself
  * mid-publish still lets its siblings fire, Node's behavior). dc.publish
@@ -2707,23 +2771,23 @@ export type IrLibFn = "island.eval"
  | "dc.channel" | "dc.subscribe" | "dc.unsubscribe" | "dc.hasSubscribers" | "dc.publish" | "dc.chanSubscribe" | "dc.chanUnsubscribe" | "dc.chanHasSubscribers" | "dc.chanName"
 /** TracingChannel (dc.tracingChannel): a registry entry of the five
  * event channels, an f64 handle like Channel (types.ts). tcSubscribe/
- * tcUnsubscribe walk a DOM handlers object's five event keys (truthy
+ * tcUnsubscribe walk a dyn handlers object's five event keys (truthy
  * non-function slots throw the per-channel ERR_INVALID_ARG_TYPE);
  * tcTraceSync/tcTraceCallback/tcTracePromise run Node's publish choreography in C over
- * DOM values (fn, ctx, thisArg, args-array) with thisArg bound as the
+ * dyn values (fn, ctx, thisArg, args-array) with thisArg bound as the
  * ambient receiver — the traced call's throw and any subscriber throw
  * both propagate (MAY THROW). tcTraceCallback wraps args[position] in a
  * native error/result + asyncStart/asyncEnd publisher and throws Node's
  * TypeError when that slot is not callable. tracingChannelOf is the
  * five-Channel collection form of the constructor. */
-/** setImmediate as a first-class DOM value (scr_async.c): a minted dyn
+/** setImmediate as a first-class dyn value (scr_async.c): a minted dyn
  * callable scheduling args[0](args[1..]) on the immediate queue — the
  * Node-suite traceCallback shape (`traceCallback(setImmediate, ...)`).
  * Calling it validates the callback (the dyn call machinery); minting
  * never throws. */
  | "timers.setImmediateFnValue"
 /** `new Promise(setImmediate)` (the Node-suite early-exit shape): a
- * fresh promise an immediate fulfills with the undefined DOM value —
+ * fresh promise an immediate fulfills with the undefined dyn value —
  * the executor IS setImmediate, so resolve rides the immediate queue
  * (scr_async.c). Never throws. */
  | "timers.immediatePromise" | "dc.tracingChannel" | "dc.tracingChannelOf" | "dc.tcChannel" | "dc.tcHasSubscribers" | "dc.tcSubscribe" | "dc.tcUnsubscribe" | "dc.tcTraceSync" | "dc.tcTraceCallback"
@@ -2737,11 +2801,11 @@ export type IrLibFn = "island.eval"
 /** AsyncLocalStorage (node:async_hooks — scr_async.c): stores are f64
  * handles; contexts are immutable fiber-carried snapshots (spawned
  * fibers inherit the spawner's — Node's init-time capture). run/exit
- * enter (or clear) the store, call the DOM function with forwarded
+ * enter (or clear) the store, call the dyn function with forwarded
  * arguments, and restore (the finally); getStore answers the current
- * DOM value or undefined; enterWith installs with no restore point.
+ * dyn value or undefined; enterWith installs with no restore point.
  * run/exit MAY THROW (the callback's own throws propagate). */
-/** `await v` over a checked-dynamic VALUE (scr_async.c): a DOM promise
+/** `await v` over a checked-dynamic VALUE (scr_async.c): a dyn promise
  * adopts (rejections re-throw — MAY THROW), anything else takes JS's
  * one-microtask non-thenable await and answers itself. Only emitted
  * inside async bodies (the frontend's isAsync gate). */
@@ -2756,17 +2820,28 @@ export type IrLibFn = "island.eval"
  * publish and the callback (MAY THROW: transforms, subscribers, and
  * the callback all run). */
  | "dc.chanBindStore" | "dc.chanUnbindStore" | "dc.chanRunStores"
-/** process warnings (scr_lib.c): onWarning/offWarning register DOM
+/** process warnings (scr_lib.c): onWarning/offWarning register dyn
  * listeners; emitWarning applies Node's full argument grammar over the
- * call's DOM argument vector (ERR_INVALID_ARG_TYPE TypeErrors — MAY
+ * call's dyn argument vector (ERR_INVALID_ARG_TYPE TypeErrors — MAY
  * THROW; a listener throw propagates too) and always prints Node's
  * stderr report. Emission is synchronous (SEMANTICS.md). */
  | "process.onWarning" | "process.offWarning" | "process.emitWarning"
-/** process.on('unhandledRejection', fn): registers a DOM listener the
- * loop-end report dispatches per never-observed rejection — (reason,
- * promise) — instead of printing and exiting 1 (scr_async.c). Throws
- * Node's ERR_INVALID_ARG_TYPE on a non-function. */
- | "process.onUnhandledRejection"
+/** process.on/once('unhandledRejection', fn): registers a dyn listener
+ * the loop-end report dispatches per never-observed rejection —
+ * (reason, promise) — instead of printing and exiting 1 (scr_async.c).
+ * The bool second arg is `once` (auto-removed after one delivery,
+ * Node's once); off/removeListener remove by closure identity, the
+ * offWarning stance. Throws Node's ERR_INVALID_ARG_TYPE on a
+ * non-function. */
+ | "process.onUnhandledRejection" | "process.offUnhandledRejection"
+/** process.on/once/off('rejectionHandled', fn): the sibling registry.
+ * Under the loop-exhaustion rejection model the event has exactly ONE
+ * firing window — a handler attached DURING an unhandledRejection
+ * listener (Node's other windows, later turns, don't exist here: a
+ * rejection handled before exhaustion never enters the report at all —
+ * the documented end-of-turn divergence). Dispatch is synchronous at
+ * the attach, with the promise, Node's payload. */
+ | "process.onRejectionHandled" | "process.offRejectionHandled"
 /** The Number statics with a static C implementation (scr_lib.c): one
  * f64 arg → bool, JS-exact BY CONSTRUCTION — Number.isFinite/isNaN/
  * isInteger/isSafeInteger never coerce, and the frontend routes only
@@ -3159,11 +3234,24 @@ export type IrExpr =
  * ""/0/NaN/false falsy, object arms truthy), extract the arm when
  * truthy (+1 for ref kinds — the only truthy values live in that arm),
  * evaluate d lazily otherwise. JS value semantics exactly; `nullish`'s
- * sibling with truthiness in place of the unit-tag test. */
+ * sibling with truthiness in place of the unit-tag test.
+ *
+ * `retag` widens that to the case where the checker types the result as
+ * ANOTHER UNION (`process.env.X || null` is `string | null`; `||
+ * 3000` is `string | number`): `type` is then that union and the truthy
+ * side hands the whole left box to the named union→union retag helper
+ * instead of extracting one arm, so u may have any number of non-unit
+ * arms. The helper's stranded-unit-arm throw is unreachable here BY
+ * CONSTRUCTION — the truthiness test has already ruled those arms out,
+ * which is exactly why the left cannot be coerced eagerly into a target
+ * the checker built by DROPPING them. The helper consumes its argument
+ * (the ordinary call convention), so the truthy side must not also
+ * release the left. */
  | {
     kind: "orDefault";
     left: IrExpr;
     right: IrExpr;
+    retag?: string;
     type: IrType;
     loc: SrcLoc;
 }
@@ -3730,13 +3818,13 @@ export type IrExpr =
  * struct slot), then the overflow map on index-signature shapes. `type`
  * is the CHECKER's type for the access: the index signature's value type
  * (dyn for `unknown`; with noUncheckedIndexedAccess, its
- * `V | undefined` union). A MISSING key produces: the undefined DOM
+ * `V | undefined` union). A MISSING key produces: the undefined dyn
  * singleton when `type` is dyn; the undefined arm when `type` is an
  * undefined-armed union; otherwise a TRAP — the checker claimed V and no
  * undefined is representable (the array OOB policy; on declared-only
  * shapes tsc's keyof check makes the trap unreachable without an `as`
  * smuggle). Declared-field values surface as `type`: V-typed fields read
- * directly, dyn results build a DOM COPY of the field value (the dynFrom
+ * directly, dyn results build a dyn COPY of the field value (the dynFrom
  * conversion — deep for composites, documented), union results wrap.
  * The key and object are borrowed; refcounted results are owned (+1).
  * `overflowOnly` (set when the key is a LITERAL that names no declared
@@ -3751,17 +3839,17 @@ export type IrExpr =
     type: IrType;
     loc: SrcLoc;
 }
-/** Static value → dyn DOM conversion (`type` is always dyn): the operand
+/** Static value → dyn conversion (`type` is always dyn): the operand
  * (a JSON-safe type — f64/string/bool/record/array/union, validated)
- * converts to a fresh DOM tree, DEEP-COPYING composites (the jsMarshal
+ * converts to a fresh dyn tree, DEEP-COPYING composites (the jsMarshal
  * aliasing stance; a dyn value can never alias static storage). An
- * undefined-armed union's undefined arm becomes the undefined DOM
+ * undefined-armed union's undefined arm becomes the undefined dyn
  * singleton. A FUNCTION operand (canBoxFuncIntoDyn — the mustCall shape:
  * a typed closure flowing into an untyped JS helper's implicit-any
- * param) BOXES instead of copying: the DOM's function kind carries the
+ * param) BOXES instead of copying: the checked-dynamic tree's function kind carries the
  * retained closure, a compiled per-signature call thunk (per-argument
  * dynCheck into the declared param types, result dynFrom'd back — JS
- * arity: extras ignored, missing args are the undefined DOM value and
+ * arity: extras ignored, missing args are the undefined dyn value and
  * must satisfy the param's type or the thunk throws the catchable
  * TypeError), the interned signature key (dynCheck's exact-unwrap fast
  * path), and `fnName` — the best-effort static spelling for inspect
@@ -3774,14 +3862,14 @@ export type IrExpr =
     type: IrType;
     loc: SrcLoc;
 }
-/** Island value → dyn DOM conversion (`type` is always dyn; the operand
- * is always jsval): the jsval→DOM crossing — an 'any'-typed engine
+/** Island value → dyn conversion (`type` is always dyn; the operand
+ * is always jsval): the jsval→dyn crossing — an 'any'-typed engine
  * value flowing into an 'unknown'/'object'/JS-residue slot wraps BY
- * REFERENCE as the DOM's SCR_DYN_JSVAL kind (scr_dyn_from_jsval).
+ * REFERENCE as the checked-dynamic tree's SCR_DYN_JSVAL kind (scr_dyn_from_jsval).
  * Engine scalars (number/string/boolean/null/undefined) normalize to
- * the native DOM kinds at wrap time, so wrapped nodes only ever hold
+ * the native dyn kinds at wrap time, so wrapped nodes only ever hold
  * engine objects/arrays/functions; typeof/truthiness/String()/=== on
- * the wrapped node route to the engine, un-armed DOM walks fence
+ * the wrapped node route to the engine, un-armed dyn walks fence
  * loudly, and scr_jsval_from_dyn unwraps the SAME engine value back
  * (identity round trip). The operand is borrowed; the result is owned
  * (+1). Never throws. */
@@ -3791,7 +3879,7 @@ export type IrExpr =
     type: IrType;
     loc: SrcLoc;
 }
-/** CALLING a dyn DOM value — `fn(a, b)` where fn is checked-dynamic (an
+/** CALLING a dyn value — `fn(a, b)` where fn is checked-dynamic (an
  * implicit-any JS binding, a dyn record member, a dynKeyGet result).
  * Arguments are ALREADY dyn-typed (typed values box through dynFrom at
  * the call's coercion — function args included); `type` is always dyn.
@@ -3806,8 +3894,8 @@ export type IrExpr =
  * args are borrowed; the result is owned (+1). MAY THROW.
  *
  * `spreads` (the runtime-arity form — `f(...args)`, the rest-forwarding
- * idiom): entries name indices into `args` whose DOM values FLATTEN into
- * the argument vector at the call — JS's spread over the DOM's iterable
+ * idiom): entries name indices into `args` whose dyn values FLATTEN into
+ * the argument vector at the call — JS's spread over the checked-dynamic tree's iterable
  * kinds (arrays element-by-element, strings by code point, bytes by
  * byte; every other kind throws V8's exact spread-call TypeError,
  * catchably — `what` is the spread expression's source spelling, which
@@ -3827,7 +3915,7 @@ export type IrExpr =
     loc: SrcLoc;
 }
 /** Prototype-method DISPATCH on a dyn receiver — `recv.m(...)` where `m`
- * is a name a DOM-representable prototype declares (Array/String/
+ * is a name a dyn-representable prototype declares (Array/String/
  * Function shared names: push, slice, join, forEach, map, apply, ...),
  * so a stored-member read would silently mis-answer real methods. The
  * runtime (scr_dyn_invoke) dispatches on the receiver's KIND:
@@ -3848,7 +3936,7 @@ export type IrExpr =
     type: IrType;
     loc: SrcLoc;
 }
-/** A DOM ARRAY built element-by-element (JS mixed-element literals —
+/** A dyn ARRAY built element-by-element (JS mixed-element literals —
  * `['pwd', []]` — and evolving `[]` declarations): each element is
  * already a dyn value; the result owns them. Never throws. */
  | {
@@ -3857,7 +3945,7 @@ export type IrExpr =
     type: IrType;
     loc: SrcLoc;
 }
-/** A DOM OBJECT built member-by-member. With no `fields` it is the empty
+/** A dyn OBJECT built member-by-member. With no `fields` it is the empty
  * object (the JS stand-in for opaque container values — `new WeakMap()`
  * in harness code: the value exists for identity; every reached METHOD
  * use meets its own fence). With `fields` it is a JS object literal whose
@@ -3868,7 +3956,7 @@ export type IrExpr =
  * JS's ToPropertyKey on the string side), each value is already dyn, and
  * entries evaluate key-then-value in SOURCE order (JS's object-literal
  * evaluation order; later duplicate keys win, insertion order preserved —
- * the DOM's own set semantics). Keys and values are borrowed (the member
+ * the checked-dynamic tree's own set semantics). Keys and values are borrowed (the member
  * retains the value in). Never throws itself. */
  | {
     kind: "dynObjLit";
@@ -3879,32 +3967,32 @@ export type IrExpr =
     type: IrType;
     loc: SrcLoc;
 }
-/** Runtime kind test on a dyn DOM value — the narrowing tests tsc's
+/** Runtime kind test on a dyn value — the narrowing tests tsc's
  * control flow understands on `unknown`: `typeof v === "string" |
  * "number" | "boolean" | "undefined"` and the unit comparisons `v ===
  * undefined` / `v === null` (`"nullish"` is the LOOSE `v == null` pair —
  * undefined or null in one test), and `v instanceof Uint8Array`
- * (`"bytes"` — the DOM's bytes kind; Node's Buffer IS a Uint8Array
+ * (`"bytes"` — the checked-dynamic tree's bytes kind; Node's Buffer IS a Uint8Array
  * subclass and both worlds answer true for it, SEMANTICS.md 45), plus
  * the two object-family tests: `"object"` is `typeof v === "object"`
- * exactly (true for the DOM's object, array, bytes, AND null kinds —
+ * exactly (true for the checked-dynamic tree's object, array, bytes, AND null kinds —
  * JS's oldest wart preserved), `"array"` is `Array.isArray(v)` (the
- * array kind alone), and `"truthy"` is ToBoolean over the whole DOM
+ * array kind alone), and `"truthy"` is ToBoolean over the whole dyn
  * (`if (v)` on unknown): undefined/null false, bool by value, number
  * falsy exactly for 0, -0, and NaN, string falsy exactly when empty,
  * object/array/bytes always true — JS-exact for every kind. A pure
- * kind-tag compare against the DOM node's kind (truthy also reads the
+ * kind-tag compare against the dyn node's kind (truthy also reads the
  * scalar payload); the operand is
  * borrowed, nothing allocates, never throws. Result is bool. Narrowed
  * READS afterwards bridge through `dynCheck` extraction
  * (trust-but-VERIFY: unlike unionNarrow, a read reached with a lying
  * kind throws instead of misreading the payload). `"error"` is
- * `v instanceof Error` on an unknown value: true exactly for the DOM's
+ * `v instanceof Error` on an unknown value: true exactly for the checked-dynamic tree's
  * error encoding — an object carrying the reserved "%error" key, the
  * shape caughtToDyn builds for Error payloads (SEMANTICS.md 67) — so a
  * caught Error passed through an unknown slot answers true like Node;
  * dynCheck against %Error extracts it. `"function"` is `typeof v ===
- * "function"` — true exactly for the DOM's function kind (boxed
+ * "function"` — true exactly for the checked-dynamic tree's function kind (boxed
  * closures); function values are truthy and answer FALSE to the
  * `"object"` test, JS-exact. */
  | {
@@ -3915,7 +4003,7 @@ export type IrExpr =
     type: IrType;
     loc: SrcLoc;
 }
-/** Keyed read on a dyn DOM value — `pkg.name` / `pkg["k"]` / the
+/** Keyed read on a dyn value — `pkg.name` / `pkg["k"]` / the
  * `pkg?.scripts` chain step on a JSON.parse result. `key` is
  * string-typed (a strLit for the dot form); `type` is always dyn. An
  * OBJ receiver answers the member (+1) or the undefined singleton (the
@@ -3937,9 +4025,9 @@ export type IrExpr =
     type: IrType;
     loc: SrcLoc;
 }
-/** `"k" in pkg` on a dyn DOM receiver (literal keys only): OBJ answers
+/** `"k" in pkg` on a dyn receiver (literal keys only): OBJ answers
  * own-member presence (a member holding the undefined value still
- * answers true — the DOM stores presence, unlike the record form's
+ * answers true — the checked-dynamic tree stores presence, unlike the record form's
  * SEMANTICS.md 55 stance), ARR answers true for "length" and canonical
  * in-range indices, everything else answers false (tsc admits `in`
  * only on object-typed operands, so unit receivers — where JS throws —
@@ -3953,16 +4041,16 @@ export type IrExpr =
     type: IrType;
     loc: SrcLoc;
 }
-/** Strict equality between a dyn DOM value and a SCALAR-typed value
+/** Strict equality between a dyn value and a SCALAR-typed value
  * (`v !== ""`, `v === 5` — one side `unknown`, the other f64/string/
  * bool): a guarded kind test plus payload compare — true exactly when
- * the DOM holds that scalar kind AND the payloads are strictly equal
+ * the checked-dynamic tree holds that scalar kind AND the payloads are strictly equal
  * (C == for numbers: NaN false, ±0 equal — JS-exact; bytewise for
  * strings). `left`/`right` keep SOURCE order (evaluation order is
  * JS's); at least one side is dyn-typed — BOTH-dyn compares run the
- * runtime's whole-DOM strict equality (scr_dyn_strict_eq: scalars by
+ * runtime's whole-dyn strict equality (scr_dyn_strict_eq: scalars by
  * value, units by kind, reference kinds by node identity — JS-exact
- * within the DOM's aliasing story). Both operands are borrowed,
+ * within the checked-dynamic tree's aliasing story). Both operands are borrowed,
  * nothing allocates, never throws. Result is bool. */
  | {
     kind: "dynScalarEq";
@@ -3993,7 +4081,7 @@ export type IrExpr =
  * 'FIRSTPROP' of 'SPELLING' …" when `firstProp` is set (V8 names the
  * pattern's first property) — and yields the value unchanged otherwise.
  * `spelling` is the RHS's compile-time source spelling. Value and type
- * are dyn (the DOM helper) or jsval (the island's prelude guard —
+ * are dyn (the dyn helper) or jsval (the island's prelude guard —
  * engine-thrown, catchable like every boundary throw). */
  | {
     kind: "dynDestrCheck";
@@ -4004,12 +4092,12 @@ export type IrExpr =
     loc: SrcLoc;
 }
 /** GetIterator + the first `count` steps, as array destructuring sees
- * it. Over a DOM value: arrays step by index, strings by code point,
+ * it. Over a dyn value: arrays step by index, strings by code point,
  * Buffers by byte; everything else throws V8's exact "<desc> is not
  * iterable (cannot read property Symbol(Symbol.iterator))" TypeError.
  * Over an island (jsval) value the engine runs the REAL iterator
  * protocol (user iterables included, IteratorClose per spec) behind the
- * same V8 message for non-iterables. The result is a FRESH array (DOM
+ * same V8 message for non-iterables. The result is a FRESH array (dyn
  * or engine, matching the operand) of exactly `count` elements
  * (undefined-padded past the end) — the empty pattern passes count 0
  * and uses only the validation. Value is borrowed; the result is owned
@@ -4093,16 +4181,16 @@ export type IrExpr =
     loc: SrcLoc;
 }
 /** A catch binding flowing into an `unknown` slot (`options.onError?.(e)`
- * — the caught snapshot converting to a dyn DOM value, the typed→unknown
+ * — the caught snapshot converting to a dyn value, the typed→unknown
  * deep-copy stance extended to exception payloads, SEMANTICS.md 67).
  * Runtime dispatch on the snapshot's kind: string/number/boolean payloads
- * become the exact DOM scalars; an Error-family OBJ payload becomes the
- * DOM's error encoding — an object with the reserved "%error" marker key
+ * become the exact dyn scalars; an Error-family OBJ payload becomes the
+ * dyn's error encoding — an object with the reserved "%error" marker key
  * plus "name"/"message" (and "code" when stamped), so `instanceof Error`
  * (dynTest "error"), the %Error dynCheck extraction, and String() answer
  * like Node; every other payload (records, arrays, closures, unions,
  * non-Error hierarchy objects — type-erased at runtime) becomes an EMPTY
- * DOM object: truthy, typeof "object", fields unreadable — the
+ * dyn object: truthy, typeof "object", fields unreadable — the
  * "[object Object]" approximation, documented. `value` is a caught-typed
  * varRef (borrowed); `type` is dyn; the result is a fresh tree (+1),
  * never aliasing the payload. Never throws. */
@@ -4272,7 +4360,7 @@ export type IrExpr =
     loc: SrcLoc;
 }
 /** The dynamic-boundary check — a CHECKED cast `dynValue as T`: validate
- * the dyn value's JSON DOM against `type` (a non-dyn, JSON-representable
+ * the dyn value's JSON dyn against `type` (a non-dyn, JSON-representable
  * IR type) and BUILD the typed value (+1), or THROW a catchable
  * TypeError-flavored, path-annotated string ("TypeError: expected number
  * at $.items[2].price, got string") through the exception cell. Semantics:
@@ -4282,7 +4370,7 @@ export type IrExpr =
  * missing key for an undefined-armed union field — an optional field —
  * builds the interned undefined arm instead); arrays check every element;
  * unions try arms in canonical order and the first FULL match wins (no
- * match → throw; an undefined arm matches no DOM value); JSON null matches
+ * match → throw; an undefined arm matches no dyn value); JSON null matches
  * exactly the nullT arm of a union target (bare null targets cannot
  * exist). MAY THROW:
  * backends' may-throw analyses must treat it like a `throw` statement.
@@ -4501,7 +4589,7 @@ export declare function islandCallbackRet(t: IrType, getRecord: (shapeId: string
  * (no per-type extraction exists for them inside a host call). */
 export declare function canMarshalTypedFuncIntoIsland(t: IrType, getRecord: (shapeId: string) => IrRecordShape | undefined, getUnion: (unionId: string) => IrUnionDef | undefined): boolean;
 /** The runtime HANDLE kinds that cross the checked-dynamic boundary as
- * the DOM's HANDLE kind (SCR_DYN_HANDLE): boxed by REFERENCE (identity —
+ * the checked-dynamic tree's HANDLE kind (SCR_DYN_HANDLE): boxed by REFERENCE (identity —
  * stateful I/O objects never copy), unboxed by tag check, members
  * dispatched at runtime onto the same entry points the static lowerings
  * use. The set is deliberately the handles whose member surfaces have
@@ -4514,7 +4602,7 @@ export declare const DYN_HANDLE_KINDS: ReadonlyMap<string, {
     tag: string;
     cls: string;
 }>;
-/** A static type that CONVERTS into a dyn DOM value — the dynFrom domain:
+/** A static type that CONVERTS into a dyn value — the dynFrom domain:
  * JSON-safe data, bytes<u8> (payload copied), undefined-armed unions of
  * JSON-safe arms, boxable function types, and the runtime HANDLE kinds
  * (boxed by reference — DYN_HANDLE_KINDS). */
@@ -4525,7 +4613,7 @@ export declare function canConvertToDyn(t: IrType, getRecord: (shapeId: string)
  * and the runtime HANDLE kinds (a tag-checked reference unwrap —
  * DYN_HANDLE_KINDS). */
 export declare function canDynCheckTo(t: IrType, getRecord: (shapeId: string) => IrRecordShape | undefined, getUnion: (unionId: string) => IrUnionDef | undefined): boolean;
-/** A closure type that can BOX into the DOM's function kind (dynFrom):
+/** A closure type that can BOX into the checked-dynamic tree's function kind (dynFrom):
  * every param dyn or dynCheckable (the thunk validates dyn arguments into
  * them), return void, dyn, or dyn-convertible (the thunk converts it
  * back). */
@@ -4548,6 +4636,12 @@ export declare function canMarshalIntoIsland(t: IrType, getRecord: (shapeId: str
  * null and data ride the round trip into the union's dynCheck. The
  * package-API shape `result.headers` : `Record<string, string> |
  * undefined` is the motivating case. */
+/** The static-promise→engine bridge's payload domain: the fulfillment
+ * types a scriptc promise may deliver INTO the island as a real engine
+ * thenable (scr_jsval_from_promise — the async-callback return bridge,
+ * reused by promise VALUES crossing at jsvalIn edges and the island
+ * Promise.all arm). Null = outside the domain (the boundary fence). */
+export declare function islandPromisePayloadTag(inner: IrType): "void" | "f64" | "bool" | "string" | "jsval" | "jsvalArr" | null;
 export declare function canExitIslandToType(t: IrType, getRecord: (shapeId: string) => IrRecordShape | undefined, getUnion: (unionId: string) => IrUnionDef | undefined): boolean;
 /** True when the module contains any regex construct — a regexLit /
  * regexIntrinsic node or a regex-typed slot anywhere. This is the link
@@ -4634,7 +4728,7 @@ export declare function moduleUsesDynInvoke(mod: IrModule): boolean;
  * precedent — inspect-free binaries keep the historical command line and
  * size class). Same walk shape as moduleUsesZlib. */
 /** True when the module needs scr_async_dyn.c — the checked-dynamic
- * async surfaces (DOM-promise then/catch/finally reactions, await of a
+ * async surfaces (dyn-promise then/catch/finally reactions, await of a
  * dyn value, `new Promise(setImmediate)`, AsyncLocalStorage, the
  * unhandledRejection/warning process events). Also pulled by the
  * dynInvoke and dc gates (their TUs call into this one) — cc.ts. Same
@@ -4705,6 +4799,14 @@ export declare function moduleUsesHttp2(mod: IrModule): boolean;
  * true for these, so scr_net.c and scr_http.c come along). TLS-free
  * programs keep their exact link line and never build mbedTLS. */
 export declare function moduleUsesTls(mod: IrModule): boolean;
+/** True when the module contains any tlsca.* libCall — the link switch
+ * for scr_tls_ca.c, the CA-store introspection unit (getCACertificates /
+ * rootCertificates / setDefaultCACertificates). Deliberately SEPARATE
+ * from moduleUsesTls: the unit is plain PEM-block bookkeeping, so a
+ * program that only inspects the CA store never pulls mbedTLS. cc.ts
+ * also compiles the unit whenever TLS itself links — scr_tls.c consults
+ * the unit's default-set override for its trust anchors. */
+export declare function moduleUsesTlsCa(mod: IrModule): boolean;
 /** First async/event-loop/ambient-process surface the module graph
  * reaches, or null when the graph is async_free (the v1 library requirement).
  * The generic-walk shape of moduleUsesRegex, tracking the nearest