@scriptc/compiler 0.0.7 → 0.0.9

package/dist/frontend/lowering/lower-stmts.js

@@ -8,13 +8,14 @@ import { BOOL, BYTES_U8, CAUGHT, DYN, F64, JSVAL, STRING, UNDEFINED_T, VOID, arr
 import { PoisonError, boundIdentifiersOf, dynFallbackType, dynUndefinedExpr, importCallHandleType, neverTaintedJsType, stmtUsesIsland, uncheckedOverloadHandleCall } from "./lowerer.js";
 import { enforceLibBoundary } from "./lib-boundary.js";
 import { cjsExportAssignmentOf, cjsExportDiscardReason, cjsExportTargetLiteral, isCjsJsFile, isJsSourceFile, locOf, requireSpecOf } from "../program.js";
-import { COMPOUND_ASSIGN_OPS, UNSUPPORTED_STMT, isStdlibMember, sideEffectFreeOptionValue, stdlibGlobalAliasDecl, stdlibGlobalNameOf } from "./surfaces.js";
+import { COMPOUND_ASSIGN_OPS, STR_METHODS, UNSUPPORTED_STMT, isStdlibMember, sideEffectFreeOptionValue, stdlibGlobalAliasDecl, stdlibGlobalNameOf } from "./surfaces.js";
 import { isProvenanceSourceFile } from "../provenance-registry.js";
 import { lowerImportEquals, nsWritableTarget } from "./lower-namespaces.js";
 import { expandoWritableTarget, lowerExpandoAssignStmt } from "./lower-expando.js";
-import { lowerForOfMap, lowerForOfSearchParams, lowerForOfSet, objectIterOverIndexShape } from "./lower-containers.js";
-import { bindingGenericFnInfoOf, bindingGenericFnNodeOf, implicitLocalFnInfoOf, implicitLocalFnNodeOf, recordKeysArrayCall } from "./lower-calls.js";
+import { lowerForOfMap, lowerForOfSearchParams, lowerForOfSet, objectIterOverIndexShape, strCharsCall } from "./lower-containers.js";
+import { bindingContextualGenericFnNodeOf, bindingGenericFnAliasInfoOf, bindingGenericFnInfoOf, bindingGenericFnNodeOf, implicitLocalFnInfoOf, implicitLocalFnNodeOf, recordKeysArrayCall } from "./lower-calls.js";
 import { isMixinFnBinding, mixinResultBindingClassOf } from "./lower-mixins.js";
+import { genericIfaceBindingKeepsClass } from "./lower-classes.js";
 import { lowerStreamUnderscoreAssign, streamClassAliasDecl, streamSidesOf } from "./lower-stream.js";
 import { lowerHttpResPropertyAssignment, lowerServerCloseOverrideAssignment } from "./lower-server.js";
 import { builtinMemberRequireDecl, builtinNamespaceDestructureModuleOf } from "./lower-builtins.js";
@@ -1001,6 +1002,19 @@ export function lowerDestructuringDecl(L, decl, isLet) {
         // tsc already rejects this (TS1182); defensive.
         L.unsupported("SC1031", decl);
     }
+    // A STDLIB-GLOBAL source in a JavaScript file (`const { subtle } =
+    // globalThis.crypto`, `const { Console } = console` — the suite's
+    // webcrypto/console prologues): each element binds a member IDENTITY
+    // TOKEN, the identifier chokepoint's rule one member deep — see
+    // stdlibGlobalTokenDestructure. Checked before the initializer
+    // lowers: the whole-global spelling would answer the global's own
+    // token (a string), and the pattern would meet the string fences
+    // below blaming the token's carrier type instead of the global.
+    {
+        const tokenBound = stdlibGlobalTokenDestructure(L, decl, isLet);
+        if (tokenBound !== null)
+            return tokenBound;
+    }
     let init = L.lowerExpr(decl.initializer);
     // A TS `any`-origin source whose lowered value is NOT a destructurable
     // shape (`var { x } = <any>0` — the cast erases to the f64; a dyn
@@ -1015,6 +1029,20 @@ export function lowerDestructuringDecl(L, decl, isLet) {
         init.type.kind !== "record" && init.type.kind !== "array" && init.type.kind !== "jsval") {
         L.anyOpFence("destructuring", decl);
     }
+    // An IR-string source the CHECKER does not type as a string is a
+    // builtin identity token that leaked through a JS local (`const c =
+    // globalThis.crypto; const { x } = c` — the local adopted the token's
+    // carrier type): the value is a token, not a string — the string
+    // lowerings below would read the CARRIER (its length, its code
+    // points), numbers and characters Node never sees. The fence names
+    // the checker's own type instead of the carrier.
+    if (init.type.kind === "string" &&
+        isJsSourceFile(decl.getSourceFile()) &&
+        !checkerStringSource(L, decl.initializer)) {
+        L.unsupported("SC1031", decl.name, ts.isArrayBindingPattern(decl.name)
+            ? `array destructuring of non-array values (the source is '${L.checker.typeToString(L.typeOf(decl.initializer))}'-typed)`
+            : `object destructuring of non-record values (the source is '${L.checker.typeToString(L.typeOf(decl.initializer))}'-typed)`);
+    }
     // PRIMITIVE and unit sources (`let { toString } = 1`, `const [c] =
     // "xy"`, `var [] = null`): JS destructures any value by reading
     // through its wrapper object — prototype members included — or throws
@@ -1022,9 +1050,18 @@ export function lowerDestructuringDecl(L, decl, isLet) {
     // pattern has an engine form, --dynamic marshals the value in and
     // runs the REAL pattern (lowerJsvalBindingPattern); a static build
     // reports the dynamic-family choice instead of the dead-end type
-    // recitation.
+    // recitation. STRING sources whose pattern the static path claims
+    // whole (staticStringPattern — code-point positions, `length`
+    // bindings) skip the gate in STATIC builds: lowerBindingPattern's
+    // string branches are exact there, and the diagnostic would report a
+    // dynamic-engine dependency the program does not have. --dynamic
+    // keeps the engine route for every string pattern — the engine binds
+    // undefined past the last code point where the static chars array
+    // inherits the array divergence's trap.
     if ((init.type.kind === "f64" || init.type.kind === "bool" || init.type.kind === "string" || isUnitType(init.type)) &&
         !isJsSourceFile(decl.getSourceFile()) &&
+        !(!L.dynamic && init.type.kind === "string" &&
+            staticStringPattern(L, decl.name)) &&
         enginePatternSpec(L, decl.name) !== null) {
         if (!L.dynamic) {
             L.pushDiag(requiresDynamicDiag(`destructuring '${L.fmt(init.type)}' values (the engine reads through JS's wrapper coercion)`, locOf(decl)));
@@ -1172,6 +1209,28 @@ export function lowerBindingPattern(L, pattern, srcRef, srcType, isLet, out) {
                 return;
             }
         }
+        // STRING sources (`const [a, b] = str`): array destructuring walks
+        // the STRING ITERATOR — code points, astral characters whole —
+        // which is Array.from(string)'s own machinery (%str.chars), so the
+        // source splits once into a hidden chars array and the pattern
+        // lowers as an array pattern over string[]. Positions, holes,
+        // defaults (with the bounds test), rest (the remaining code points
+        // pack fresh — JS's surplus packing builds a new array too), and
+        // nested patterns all ride the array machinery below — which also
+        // means a position past the LAST code point inherits the array
+        // divergence (the read traps where JS binds undefined; a DEFAULTED
+        // position carries its bounds test and fires exactly there).
+        // Callers vetted the source as a checker-typed string: builtin
+        // identity tokens (IR strings the checker types otherwise) fence
+        // before reaching here.
+        if (srcType.kind === "string") {
+            const loc = locOf(pattern);
+            const charsT = arrayOf(STRING);
+            const chars = L.declareHiddenLocal("%dchars", charsT);
+            out.push({ kind: "varDecl", localId: chars.id, init: strCharsCall(L, srcRef(), loc), loc });
+            L.lowerBindingPattern(pattern, () => ({ kind: "varRef", localId: chars.id, type: charsT, loc }), charsT, isLet, out);
+            return;
+        }
         if (srcType.kind !== "array") {
             L.unsupported("SC1031", pattern, `array destructuring of non-array values (the source is ${srcType.kind}-typed)`);
         }
@@ -1295,7 +1354,25 @@ export function lowerBindingPattern(L, pattern, srcRef, srcType, isLet, out) {
                     continue;
                 const loc = locOf(el);
                 if (el.dotDotDotToken) {
-                    L.unsupported("SC1031", el, "rest elements over class-instance sources (the remaining-properties object has no lowering yet)");
+                    // `{ a, ...rest }` over a class instance: the remaining
+                    // instance FIELDS pack fresh (classInstanceRestValue — JS's
+                    // CopyDataProperties copies own enumerable properties, which
+                    // for a class instance are exactly the fields).
+                    const consumed = new Set();
+                    for (const sib of pattern.elements) {
+                        if (sib === el || sib.name === undefined || sib.dotDotDotToken)
+                            continue;
+                        const keyNode = sib.propertyName ?? (ts.isIdentifier(sib.name) ? sib.name : null);
+                        if (keyNode === null)
+                            continue; // defensive: a pattern target always carries a propertyName
+                        const folded = patternKeyNameOf(L, keyNode);
+                        if (folded === null) {
+                            L.unsupported("SC1031", el, "rest bindings beside computed keys (the consumed set is a runtime fact)");
+                        }
+                        consumed.add(folded);
+                    }
+                    L.bindPatternTarget(el.name, classInstanceRestValue(L, el, srcRef, srcType, info, consumed, patternBindingType(L, el.name)), isLet, out);
+                    continue;
                 }
                 const prop = el.propertyName ?? el.name;
                 const propName = ts.isIdentifier(prop) || ts.isComputedPropertyName(prop) || ts.isStringLiteralLike(prop) || ts.isNumericLiteral(prop)
@@ -1319,6 +1396,14 @@ export function lowerBindingPattern(L, pattern, srcRef, srcType, isLet, out) {
                         field: propName,
                         fieldType: getF ? getF.sig.ret : setF.sig.params[0].type,
                     }, loc, el);
+                    // A defaulted GETTER result lands in a hidden temp first: the
+                    // default's ternary mentions its operand twice (test + present
+                    // arm), and JS calls the getter once per element.
+                    if (el.initializer) {
+                        const got = L.declareHiddenLocal("%dget", value.type);
+                        out.push({ kind: "varDecl", localId: got.id, init: value, loc });
+                        value = { kind: "varRef", localId: got.id, type: value.type, loc };
+                    }
                 }
                 else {
                     L.unsupported("SC1031", el, L.findMethodOn(info, propName)
@@ -1332,6 +1417,44 @@ export function lowerBindingPattern(L, pattern, srcRef, srcType, isLet, out) {
             return;
         }
     }
+    // A STRING source under an OBJECT pattern (`const { length } = str`):
+    // JS reads through the wrapper object, whose one own DATA property is
+    // `length` — the strLen intrinsic, exact, renames and (dead) defaults
+    // included (length always exists and is never undefined, so a default
+    // never evaluates — JS's rule). Everything else on the wrapper is a
+    // prototype METHOD (detached, it loses its receiver) or absent (the
+    // read is undefined, which the binding's type cannot hold) — named
+    // fences either way; rest packs the wrapper's own INDICES (JS's
+    // CopyDataProperties copies one property per code UNIT) and fences
+    // naming that. Callers vetted the source as a checker-typed string —
+    // builtin identity tokens fence before reaching here.
+    if (srcType.kind === "string") {
+        for (const el of pattern.elements) {
+            if (el.name === undefined)
+                continue;
+            const loc = locOf(el);
+            if (el.dotDotDotToken) {
+                L.unsupported("SC1031", el, "rest bindings over string sources (JS packs the wrapper's per-code-unit indices — split with [...s] instead)");
+            }
+            const prop = el.propertyName ?? el.name;
+            const propName = ts.isIdentifier(prop) || ts.isComputedPropertyName(prop) || ts.isStringLiteralLike(prop) || ts.isNumericLiteral(prop)
+                ? patternKeyNameOf(L, prop)
+                : null;
+            if (propName === null) {
+                L.unsupported("SC1031", el, "destructuring with computed keys that do not fold to one property name");
+            }
+            if (propName !== "length") {
+                L.unsupported("SC1031", el, Object.hasOwn(STR_METHODS, propName)
+                    ? `destructuring the method '${propName}' of a string (a detached method loses its receiver — call it through the value)`
+                    : `destructuring the property '${propName}' strings do not carry as data ('length' is the one own data property)`);
+            }
+            let value = { kind: "strIntrinsic", method: "length", receiver: srcRef(), args: [], type: F64, loc };
+            if (el.initializer)
+                value = applyBindingDefault(L, el, value);
+            L.bindPatternTarget(el.name, value, isLet, out);
+        }
+        return;
+    }
     if (srcType.kind !== "record") {
         L.unsupported("SC1031", pattern, srcType.kind === "object"
             ? "object destructuring of class instances (read the fields directly — accessors make the desugar observable)"
@@ -1372,12 +1495,20 @@ export function lowerBindingPattern(L, pattern, srcRef, srcType, isLet, out) {
             if (getSlotT?.kind !== "func") {
                 L.unsupported("SC1031", el, `destructuring the setter-only property '${propName}' (Node would bind undefined)`);
             }
-            if (el.initializer) {
-                L.unsupported("SC1031", el, "defaults on destructured get/set accessor properties");
-            }
             const loc = locOf(el);
             const closure = { kind: "recordGet", obj: srcRef(), shapeId: srcType.shapeId, field: `%get:${propName}`, type: getSlotT, loc };
-            L.bindPatternTarget(el.name, { kind: "callValue", callee: closure, args: [], type: getSlotT.ret, loc }, isLet, out);
+            // The getter call IS the element's read; a default applies to its
+            // RESULT exactly like a data field's (undefined-arm test, lazy).
+            // The result lands in a hidden temp first: the default's ternary
+            // mentions its operand twice (test + present arm), and the getter
+            // must run ONCE (JS calls it once per element).
+            let accessorValue = { kind: "callValue", callee: closure, args: [], type: getSlotT.ret, loc };
+            if (el.initializer) {
+                const got = L.declareHiddenLocal("%dget", accessorValue.type);
+                out.push({ kind: "varDecl", localId: got.id, init: accessorValue, loc });
+                accessorValue = applyBindingDefault(L, el, { kind: "varRef", localId: got.id, type: accessorValue.type, loc });
+            }
+            L.bindPatternTarget(el.name, accessorValue, isLet, out);
             continue;
         }
         const fieldType = shape.fields.find((f) => f.name === propName)?.type;
@@ -1440,11 +1571,199 @@ export function patternKeyNameOf(L, prop) {
         return prop.text;
     if (ts.isComputedPropertyName(prop))
         return L.foldedStringKeyOf(prop.expression);
-    if (ts.isStringLiteral(prop) || ts.isNoSubstitutionTemplateLiteral(prop) || ts.isNumericLiteral(prop)) {
+    // A numeric-literal key spells JS's canonical ToPropertyKey form
+    // directly (`{ 2: x }` names the field "2") — a pattern position is
+    // not an expression, so the checker-type fold below does not apply.
+    if (ts.isNumericLiteral(prop))
+        return String(Number(prop.text));
+    if (ts.isStringLiteral(prop) || ts.isNoSubstitutionTemplateLiteral(prop)) {
         return L.foldedStringKeyOf(prop);
     }
     return null;
 }
+/** True when the CHECKER types this expression as a string in every arm
+   * (unions of string-likes included). The IR carries builtin IDENTITY
+   * TOKENS as strings too (`globalThis.crypto` taken as a value in a JS
+   * file, or a local that adopted such a value's carrier type), and those
+   * must never reach the string-source destructuring lowerings — the
+   * callers fence with the checker's own type name instead. */
+function checkerStringSource(L, e) {
+    const stringLike = (t) => {
+        if ((t.flags & ts.TypeFlags.StringLike) !== 0)
+            return true;
+        if (t.isUnionType())
+            return t.getTypes().every(stringLike);
+        return false;
+    };
+    return stringLike(L.typeOf(e));
+}
+/** True when a pattern over a STRING source lowers statically whole —
+   * every element a form the chars-array/wrapper-read desugars carry.
+   * Array patterns take positions, holes, defaults, rest (a nested rest
+   * pattern must be an ARRAY pattern — it destructures the packed
+   * string[]), and nested patterns, whose elements are single code
+   * points and recurse through this same test. Object patterns take
+   * `length` bindings — shorthand, renamed, or (dead-)defaulted.
+   * Anything else — wrapper methods, computed keys, rest over the
+   * wrapper — keeps the engine gate (--dynamic runs the real pattern;
+   * a static build reports the dynamic-family choice). */
+function staticStringPattern(L, pattern) {
+    if (ts.isArrayBindingPattern(pattern)) {
+        return pattern.elements.every((el) => {
+            if (ts.isOmittedExpression(el) || el.name === undefined)
+                return true;
+            if (el.dotDotDotToken) {
+                // The rest binds string[]: identifier targets and nested ARRAY
+                // patterns ride the array machinery; an object pattern over the
+                // packed array keeps its fence.
+                return ts.isIdentifier(el.name) || ts.isArrayBindingPattern(el.name);
+            }
+            if (ts.isIdentifier(el.name))
+                return true;
+            return staticStringPattern(L, el.name);
+        });
+    }
+    return pattern.elements.every((el) => {
+        if (el.name === undefined)
+            return true;
+        if (el.dotDotDotToken || !ts.isIdentifier(el.name))
+            return false;
+        const prop = el.propertyName ?? el.name;
+        const propName = ts.isIdentifier(prop) || ts.isComputedPropertyName(prop) || ts.isStringLiteralLike(prop) || ts.isNumericLiteral(prop)
+            ? patternKeyNameOf(L, prop)
+            : null;
+        return propName === "length";
+    });
+}
+/** The stdlib globals whose members destructure to MEMBER identity
+   * tokens: the OPAQUE globals — no member of theirs has a lowered
+   * surface, so a token binding trades the eager pattern fence for the
+   * per-site token rules and loses nothing. Globals with REAL member
+   * surfaces (Math.max, JSON.stringify, process.env, console.log) stay
+   * OUT: their detached members would ride the token's quiet
+   * own-property-undefined reads where the property spelling works, so
+   * those patterns keep an eager fence naming the global. `console` is
+   * the one split surface: its five CALL members fence by name, while
+   * the rest (`Console` — the suite's constructor-identity probe) have
+   * no surface to lose and bind tokens. */
+const TOKEN_OPAQUE_GLOBALS = new Set(["crypto"]);
+const CONSOLE_CALL_MEMBERS = new Set(["log", "info", "debug", "error", "warn"]);
+/** `const { subtle } = globalThis.crypto`, `const { Console } = console`,
+   * `const { crypto } = globalThis` — an object pattern over a STDLIB
+   * GLOBAL in a JavaScript file (the suite's webcrypto/console
+   * prologues): the identifier chokepoint's identity-token rule, one
+   * member deep. The global taken as a value is an opaque token, and a
+   * member taken off an OPAQUE global is the same kind of value — one
+   * global, one member, one interned string — so plain elements bind
+   * MEMBER tokens (`[builtin crypto.subtle]`), and identity flows agree
+   * across destructures of the same member. A member of GLOBALTHIS that
+   * is itself a canonical global (`const { crypto } = globalThis` —
+   * `declare var` globals are properties of `typeof globalThis`,
+   * stdlib-provenance-checked so user script globals stay out) binds the
+   * global's OWN token, byte-equal to the bare and property spellings'
+   * answers, AND registers in stdlibGlobalAliases — the destructured
+   * twin of stdlibGlobalAliasDecl — so receiver-position uses resolve
+   * through every surface exactly like the bare global (`const { Math }
+   * = globalThis; Math.max(...)` is Math.max). What a token cannot do
+   * meets the per-site rules lazily at each USE — member reads answer
+   * the wrapper's own-property undefined, calls throw Node-shaped
+   * is-not-a-function TypeErrors — at the use's own line, where the
+   * pattern-level fence killed the program at the destructure.
+   *
+   * Everything this rule does NOT claim over a stdlib-global source
+   * fences HERE, naming the global — never the token's carrier string
+   * type: rest (the member set is not statically enumerable), defaults
+   * (member presence is not statically testable), nested patterns,
+   * computed keys, members of the SURFACED globals (detached members
+   * lose their receiver-keyed lowerings), and `var`/TDZ-predeclared/
+   * pre-registered bindings whose slots no token can inhabit. Null only
+   * when the source is not a stdlib global at all, or in TypeScript
+   * files (the identifier chokepoint fences the global there first). */
+function stdlibGlobalTokenDestructure(L, decl, isLet) {
+    if (decl.initializer === undefined || !isJsSourceFile(decl.getSourceFile()))
+        return null;
+    const globalName = stdlibGlobalNameOf(L, decl.initializer);
+    if (globalName === null)
+        return null;
+    if (!ts.isObjectBindingPattern(decl.name)) {
+        L.unsupported("SC1031", decl.name, `array destructuring of the builtin global '${globalName}' (builtin globals are not iterable)`);
+    }
+    if (isVarDeclared(decl)) {
+        L.unsupported("SC1031", decl.name, `var-declared patterns over the builtin global '${globalName}'`);
+    }
+    const srcT = L.typeOf(decl.initializer);
+    const binds = [];
+    for (const el of decl.name.elements) {
+        if (el.name === undefined)
+            continue;
+        if (el.dotDotDotToken) {
+            L.unsupported("SC1031", el, `rest bindings over the builtin global '${globalName}' (the member set is not statically enumerable)`);
+        }
+        if (el.initializer !== undefined) {
+            L.unsupported("SC1031", el, `binding defaults over the builtin global '${globalName}' (member presence is not statically testable)`);
+        }
+        if (!ts.isIdentifier(el.name)) {
+            L.unsupported("SC1031", el, `nested patterns over the builtin global '${globalName}'`);
+        }
+        const prop = el.propertyName ?? el.name;
+        const propName = ts.isIdentifier(prop) || ts.isComputedPropertyName(prop) || ts.isStringLiteralLike(prop) || ts.isNumericLiteral(prop)
+            ? patternKeyNameOf(L, prop)
+            : null;
+        if (propName === null) {
+            L.unsupported("SC1031", el, "destructuring with computed keys that do not fold to one property name");
+        }
+        let token;
+        let alias = null;
+        if (globalName === "globalThis") {
+            // The member must BE a stdlib global (user script vars are
+            // properties of `typeof globalThis` too — their values are real
+            // and this rule has none to give).
+            const member = L.checker.getPropertyOfType(srcT, propName);
+            if (member === undefined || !L.isStdlibSymbol(member)) {
+                L.unsupported("SC1031", el, `destructuring the non-builtin member '${propName}' of 'globalThis'`);
+            }
+            const canonical = member.name === "global" ? "globalThis" : member.name;
+            token = `[builtin ${canonical}]`;
+            alias = canonical;
+        }
+        else if (globalName === "console" && !CONSOLE_CALL_MEMBERS.has(propName)) {
+            token = `[builtin console.${propName}]`;
+        }
+        else if (TOKEN_OPAQUE_GLOBALS.has(globalName)) {
+            token = `[builtin ${globalName}.${propName}]`;
+        }
+        else {
+            L.unsupported("SC1031", el, `destructuring the member '${propName}' of the builtin global '${globalName}' (a detached member loses its receiver-keyed lowering — call it through the global)`);
+        }
+        const symbol = L.checker.getSymbolAtLocation(el.name);
+        if (!symbol || L.tdzPredeclared.has(symbol)) {
+            L.unsupported("SC1031", el, `bindings with predeclared slots over the builtin global '${globalName}'`);
+        }
+        const g = L.globalsBySymbol.get(symbol);
+        if (g !== undefined && g.type.kind !== "string" && g.type.kind !== "dyn") {
+            L.unsupported("SC1031", el, `bindings with '${L.fmt(g.type)}' storage over the builtin global '${globalName}'`);
+        }
+        binds.push({ name: el.name, token, alias, g });
+    }
+    const out = [];
+    for (const b of binds) {
+        const loc = locOf(b.name);
+        const token = { kind: "strLit", value: b.token, type: STRING, loc };
+        if (b.alias !== null) {
+            const symbol = L.checker.getSymbolAtLocation(b.name);
+            if (symbol)
+                L.stdlibGlobalAliases.set(symbol, b.alias);
+        }
+        if (b.g !== undefined) {
+            out.push({ kind: "assign", localId: b.g.id, value: L.coerceInto(b.name, token, b.g.type), loc });
+        }
+        else {
+            const local = L.declareLocal(b.name, b.name.text, STRING, isLet);
+            out.push({ kind: "varDecl", localId: local.id, init: token, loc });
+        }
+    }
+    return out;
+}
 /** `x = dflt` on a pattern position whose source value always EXISTS
    * (tuple positions, record fields): JS evaluates the default exactly
    * when the value is undefined — the undefined-arm ternary, lazy, so
@@ -1681,6 +2000,63 @@ function objectRestValue(L, el, srcRef, srcType, shape) {
     });
     return { kind: "recordLit", fields, type: restT, loc };
 }
+/** The fresh record for `{ a, ...rest }` over a CLASS-INSTANCE source:
+   * JS's CopyDataProperties copies the OWN ENUMERABLE properties — the
+   * instance FIELDS, base chain included, in property-creation order
+   * (base constructors assign theirs first) — and never the prototype
+   * members (methods and accessors stay behind; the checker's rest type
+   * excludes them too, so the two sides agree). The packed record must
+   * agree with the checker's rest type field-for-field — a non-public
+   * field IS copied by JS but the rest type cannot name it (silent
+   * divergence; fence) — and key-for-key in ORDER: the packed shape's
+   * JSON/Object.keys order is first-seen global metadata, and a checker
+   * rest type that reorders (own-before-inherited) would make the
+   * enumeration surfaces diverge from Node, so it fences instead of
+   * silently reordering. Runtime-provided chains (Error/EventEmitter/
+   * stream roots) carry runtime-internal state no record copy can
+   * reproduce — fenced. ES-#private fields are own but non-enumerable:
+   * JS skips them and so does the packing. */
+function classInstanceRestValue(L, blame, srcRef, srcType, info, consumed, restT) {
+    const loc = locOf(blame);
+    for (let c = info; c; c = c.base) {
+        if (c.builtinError || c.builtinEmitter || c.builtinStream) {
+            L.unsupported("SC1031", blame, "rest bindings over runtime-provided class instances (Error/EventEmitter/stream internals have no record form)");
+        }
+    }
+    if (restT?.kind !== "record") {
+        L.unsupported("SC1031", blame, restT
+            ? `rest bindings packing the remaining properties as '${L.fmt(restT)}' (only plain record types pack)`
+            : "rest bindings whose packed type has no static mapping (only plain record types pack)");
+    }
+    const restShape = L.shapes.get(restT.shapeId);
+    if (!restShape)
+        throw new Error(`lowerer bug: rest binding over unknown shape ${restT.shapeId}`);
+    if (restShape.indexValue || restShape.tuple) {
+        L.unsupported("SC1031", blame, "rest bindings over index-signature shapes (the undeclared entries would need overflow packing)");
+    }
+    const remaining = info.def.fields.filter((f) => !f.name.startsWith("#") && !f.name.startsWith("%") && !consumed.has(f.name));
+    for (const f of remaining) {
+        if (!restShape.fields.some((rf) => rf.name === f.name)) {
+            L.unsupported("SC1031", blame, `rest bindings over instances of '${info.def.jsName ?? info.def.name}' (JS copies the non-public field '${f.name}' into the rest object, which the rest type cannot name)`);
+        }
+    }
+    for (const rf of restShape.fields) {
+        if (!remaining.some((f) => f.name === rf.name)) {
+            L.unsupported("SC1031", blame, `the rest field '${rf.name}' is not an instance field of '${info.def.jsName ?? info.def.name}'`);
+        }
+    }
+    const emitOrder = restShape.declaredOrder ?? restShape.fields.map((f) => f.name);
+    if (emitOrder.length !== remaining.length || emitOrder.some((n, i) => n !== remaining[i].name)) {
+        L.unsupported("SC1031", blame, "rest bindings over class instances whose packed key order cannot match Node's (Object.keys/JSON.stringify would enumerate the copied fields in a different order)");
+    }
+    const fields = remaining.map((f) => {
+        const fieldType = info.fields.get(f.name) ?? f.type;
+        const read = L.fieldGetExpr({ container: "class", obj: srcRef(), className: srcType.className, field: f.name, fieldType }, loc, blame);
+        const restFT = restShape.fields.find((rf) => rf.name === f.name).type;
+        return { name: f.name, value: L.coerceInto(blame, read, restFT) };
+    });
+    return { kind: "recordLit", fields, type: restT, loc };
+}
 /** The fences the island's element-wise object path shares: no rest
    * (surplus packing over a handle) and no defaults (an engine undefined
    * test) — the static positions now take both through their own
@@ -2144,12 +2520,19 @@ export function lowerVarDecl(L, decl, isLet) {
     // shapes (reassigned bindings, declarations inside functions) fence
     // by name inside; a collection-time report dedupes.
     {
-        const gfnNode = bindingGenericFnNodeOf(decl);
+        const gfnNode = bindingGenericFnNodeOf(decl) ?? bindingContextualGenericFnNodeOf(L, decl);
         if (gfnNode) {
             bindingGenericFnInfoOf(L, decl, gfnNode);
             return null;
         }
     }
+    // `const h = id` — an ALIAS of a generic function: the alias's symbol
+    // registers the target's info (calls and pinned values resolve like
+    // the target's own name), the binding has no runtime value, and the
+    // statement emits nothing (collectGlobals skipped module-scope
+    // globals by the same test; block-scoped aliases register here).
+    if (bindingGenericFnAliasInfoOf(L, decl))
+        return null;
     // `const knownBy = (cmd) => ...` — an IMPLICIT-ANY function-value
     // binding in npm-static JS (function-scope bindings register here, in
     // source order before any use can lower; file-scope ones registered at
@@ -2403,6 +2786,20 @@ export function lowerVarDecl(L, decl, isLet) {
     // bridge is an independent observer of the same settlement).
     if (init.type.kind === "jsval" && type.kind === "promise")
         type = JSVAL;
+    // A STATIC array of island HANDLES under an unannotated declared type
+    // spelling evolved elements (`const kept = fns.filter(...)` over an
+    // evolving-`any` receiver — the handle-element lowering keeps the
+    // elements jsval, while tsc's evolving-array analysis types the
+    // result by the pushed elements): the value's element type is the
+    // truth, so the binding keeps the handle-element array (the
+    // island-HANDLE local story, one level down) and later method calls
+    // ride the handle-element lowering. Explicit annotations keep the
+    // validated-boundary fence.
+    if (!decl.type &&
+        init.type.kind === "array" && init.type.elem.kind === "jsval" &&
+        type.kind === "array" && type.elem.kind !== "jsval") {
+        type = init.type;
+    }
     // `const runner = options.runner || defaultRunner`: the checker types
     // the || as the union/merge of two structurally-compatible function
     // types — a signature whose RETURN is the arms' union, or the
@@ -2434,6 +2831,14 @@ export function lowerVarDecl(L, decl, isLet) {
             type = init.type;
         }
     }
+    // `const r: Repo = new MemRepo()` over an all-generic-method
+    // interface: the binding keeps the initializer's CLASS representation
+    // (the record shape maps empty and the width copy would drop the
+    // class the generic-method calls monomorphize against) — see
+    // genericIfaceBindingKeepsClass.
+    if (type.kind === "record" && init.type.kind === "object" && genericIfaceBindingKeepsClass(L, decl, type)) {
+        type = init.type;
+    }
     // A TDZ box minted DURING this very initializer (a callback inside it
     // captured this const — predeclareForwardCapture's current-statement
     // case): the binding and its scope-entry varDecl already exist, so
@@ -2586,6 +2991,7 @@ export function lowerUnionSwitch(L, stmt, disc) {
                     kind: "unionEq",
                     unionId: unionType.unionId,
                     negated: false,
+                    sameValue: false,
                     left: disc,
                     right: L.coerceInto(clause.expression, test, unionType),
                     type: BOOL,
@@ -3289,6 +3695,31 @@ export function lowerExprStatement(L, expr) {
                         };
                     }
                 }
+                // `events.defaultMaxListeners = v` in STATEMENT position — the
+                // module-property write Node validates (the lowerBinary
+                // expression twin): the value crosses into the DOM, the runtime
+                // ladder throws Node's exact errors, valid numbers apply.
+                if (!expr.left.questionDotToken && expr.left.name.text === "defaultMaxListeners") {
+                    const bi = L.builtinMemberOf(expr.left);
+                    if (bi && bi.module === "events" && bi.member === "defaultMaxListeners") {
+                        const loc = locOf(expr);
+                        const rhs = L.lowerExpr(expr.right);
+                        if (rhs.type.kind === "dyn" || rhs.kind === "unitLit" || L.dynConvertible(rhs.type)) {
+                            const dynVal = rhs.type.kind === "dyn" ? rhs : { kind: "dynFrom", value: rhs, type: DYN, loc };
+                            return {
+                                kind: "exprStmt",
+                                expr: {
+                                    kind: "libCall",
+                                    fn: "emitter.setDefaultMaxChk",
+                                    args: [dynVal, { kind: "strLit", value: "defaultMaxListeners", type: STRING, loc }],
+                                    type: VOID,
+                                    loc,
+                                },
+                                loc,
+                            };
+                        }
+                    }
+                }
                 // `r._read = fn` / `w._write = fn` (and the other underscore
                 // methods) on a runtime-stream-rooted receiver: Node's
                 // own-property shadow of the prototype method — the runtime
@@ -3811,6 +4242,31 @@ export function lowerDestructuringAssignParts(L, target, rhs, loc) {
    * source-spelling TypeError machinery cannot apply), `blame` the node
    * fences point at. */
 function destructuringAssignInto(L, target, init, rhs, blame, loc) {
+    // IR-string sources in JS files split two ways the carrier type
+    // cannot: a STDLIB GLOBAL (`({ subtle } = globalThis.crypto)`) — the
+    // declaration path binds member identity tokens into FRESH bindings,
+    // but assignment targets carry their own checker-typed slots no token
+    // can honestly inhabit — and a LEAKED token (a local that adopted a
+    // global's carrier type), where the string lowerings below would read
+    // the carrier itself. Both keep fences naming the truth; empty
+    // patterns stay pure (RequireObjectCoercible/GetIterator hold for
+    // globals and strings alike).
+    {
+        const patternEmpty = ts.isObjectLiteralExpression(target)
+            ? target.properties.length === 0
+            : target.elements.length === 0;
+        if (!patternEmpty && rhs !== null && isJsSourceFile(rhs.getSourceFile())) {
+            const globalName = stdlibGlobalNameOf(L, rhs);
+            if (globalName !== null) {
+                L.unsupported("SC1031", blame, `destructuring assignment from the builtin global '${globalName}' (bind the members with a const destructuring declaration instead)`);
+            }
+            if (init.type.kind === "string" && !checkerStringSource(L, rhs)) {
+                L.unsupported("SC1031", blame, ts.isArrayLiteralExpression(target)
+                    ? `array destructuring assignment from non-array values (the source is '${L.checker.typeToString(L.typeOf(rhs))}'-typed)`
+                    : `destructuring assignment from non-record values (the source is '${L.checker.typeToString(L.typeOf(rhs))}'-typed)`);
+            }
+        }
+    }
     const tmp = L.declareHiddenLocal("%destr", init.type);
     const out = [{ kind: "varDecl", localId: tmp.id, init, loc }];
     const tmpRef = () => ({ kind: "varRef", localId: tmp.id, type: init.type, loc });
@@ -3891,6 +4347,200 @@ function destructuringAssignInto(L, target, init, rhs, blame, loc) {
         }
         return { stmts: out, value };
     }
+    // A CLASS-INSTANCE source (`({ a, b } = inst)`): the declaration
+    // path's desugar in assignment position — one member read per
+    // element, left to right (declared fields read their slots, accessor
+    // properties call their getters through the same fieldGetExpr
+    // dispatch), defaults against the TARGET's own type, rest packing
+    // the remaining instance fields (classInstanceRestValue). Methods
+    // and names no class on the chain declares keep the declaration
+    // path's named fences.
+    if (init.type.kind === "object") {
+        const objT = init.type;
+        if (!L.classes.get(objT.className))
+            L.flushDeferredClass(objT.className);
+        const info = L.classes.get(objT.className);
+        if (info) {
+            for (const prop of target.properties) {
+                const propLoc = locOf(prop);
+                if (ts.isSpreadAssignment(prop)) {
+                    let restTo = prop.expression;
+                    while (ts.isParenthesizedExpression(restTo))
+                        restTo = restTo.expression;
+                    const consumed = new Set();
+                    for (const p of target.properties) {
+                        if (ts.isShorthandPropertyAssignment(p))
+                            consumed.add(p.name.text);
+                        else if (ts.isPropertyAssignment(p)) {
+                            const n = patternKeyNameOf(L, p.name);
+                            if (n !== null)
+                                consumed.add(n);
+                        }
+                    }
+                    if (!ts.isIdentifier(restTo)) {
+                        lowerAssignTargetInto(L, out, restTo, prop, null, (targetT) => classInstanceRestValue(L, prop, tmpRef, objT, info, consumed, targetT));
+                        continue;
+                    }
+                    const targetBinding = L.resolveWritable(restTo);
+                    if (!targetBinding) {
+                        L.rejectUnresolved(restTo, `assignment to '${restTo.text}' (not a writable local or module global)`);
+                    }
+                    const packed = classInstanceRestValue(L, prop, tmpRef, objT, info, consumed, targetBinding.type);
+                    out.push({ kind: "assign", localId: targetBinding.id, value: L.coerceInto(prop, packed, targetBinding.type), loc: propLoc });
+                    continue;
+                }
+                let fieldName;
+                let bindTo;
+                let dfltInit = null;
+                if (ts.isShorthandPropertyAssignment(prop)) {
+                    fieldName = prop.name.text;
+                    bindTo = prop.name;
+                    dfltInit = prop.objectAssignmentInitializer ?? null;
+                }
+                else if (ts.isPropertyAssignment(prop)) {
+                    const folded = patternKeyNameOf(L, prop.name);
+                    if (folded === null) {
+                        L.unsupported("SC1031", prop, "destructuring assignment with computed keys that do not fold to one property name");
+                    }
+                    fieldName = folded;
+                    bindTo = prop.initializer;
+                    if (ts.isBinaryExpression(bindTo) && bindTo.operatorToken.kind === ts.SyntaxKind.EqualsToken) {
+                        dfltInit = bindTo.right;
+                        bindTo = bindTo.left;
+                    }
+                }
+                else {
+                    L.unsupported("SC1031", prop, "destructuring assignment with getter/setter or method properties");
+                }
+                const dflt = dfltInit;
+                const readOf = (targetT) => {
+                    const fieldType = info.fields.get(fieldName);
+                    const getF = fieldType === undefined ? L.findMethodOn(info, `get:${fieldName}`) : null;
+                    const setF = fieldType === undefined ? L.findMethodOn(info, `set:${fieldName}`) : null;
+                    let v;
+                    if (fieldType !== undefined) {
+                        v = L.fieldGetExpr({ container: "class", obj: tmpRef(), className: objT.className, field: fieldName, fieldType }, propLoc, prop);
+                    }
+                    else if (getF || setF) {
+                        v = L.fieldGetExpr({ container: "accessor", obj: tmpRef(), className: objT.className, field: fieldName, fieldType: getF ? getF.sig.ret : setF.sig.params[0].type }, propLoc, prop);
+                        // A defaulted getter result temps first — the default's
+                        // ternary mentions its operand twice, and JS calls the
+                        // getter once per element.
+                        if (dflt && targetT) {
+                            const got = L.declareHiddenLocal("%dget", v.type);
+                            out.push({ kind: "varDecl", localId: got.id, init: v, loc: propLoc });
+                            v = { kind: "varRef", localId: got.id, type: v.type, loc: propLoc };
+                        }
+                    }
+                    else {
+                        L.unsupported("SC1031", prop, L.findMethodOn(info, fieldName)
+                            ? `destructuring the method '${fieldName}' (a detached method loses its receiver — call it through the instance)`
+                            : `destructuring the property '${fieldName}' the class '${info.def.jsName ?? info.def.name}' does not declare`);
+                    }
+                    if (dflt && targetT)
+                        v = undefArmDefault(L, prop, dflt, v, targetT);
+                    return v;
+                };
+                while (ts.isParenthesizedExpression(bindTo))
+                    bindTo = bindTo.expression;
+                if (!ts.isIdentifier(bindTo)) {
+                    lowerAssignTargetInto(L, out, bindTo, prop, dfltInit, readOf);
+                    continue;
+                }
+                let targetBinding;
+                if (ts.isShorthandPropertyAssignment(prop)) {
+                    const valueSymbol = L.checker.getShorthandAssignmentValueSymbol(prop) ?? null;
+                    const local = valueSymbol ? L.resolveKey(valueSymbol, bindTo) : null;
+                    const g = valueSymbol ? L.globalsBySymbol.get(valueSymbol) : undefined;
+                    targetBinding = local ? { id: local.id, type: local.type } : g ? { id: g.id, type: g.type } : null;
+                }
+                else {
+                    targetBinding = L.resolveWritable(bindTo);
+                }
+                if (!targetBinding) {
+                    L.rejectUnresolved(bindTo, `assignment to '${bindTo.text}' (not a writable local or module global)`);
+                }
+                out.push({
+                    kind: "assign",
+                    localId: targetBinding.id,
+                    value: L.coerceInto(prop, readOf(targetBinding.type), targetBinding.type),
+                    loc: propLoc,
+                });
+            }
+            return { stmts: out, value };
+        }
+    }
+    // A STRING source under an object ASSIGNMENT pattern (`({ length: n }
+    // = s)`): the declaration path's wrapper rule in assignment position —
+    // `length` is the wrapper's one own data property (the strLen
+    // intrinsic; a default is dead code — length always exists and is
+    // never undefined, so JS never evaluates it either); identifier,
+    // property, and element targets ride the shared target plumbing.
+    // Methods, unknown names, computed keys, spreads, and accessor
+    // properties keep the declaration path's named fences. Callers vetted
+    // the source as a checker-typed string.
+    if (init.type.kind === "string") {
+        for (const prop of target.properties) {
+            const propLoc = locOf(prop);
+            if (ts.isSpreadAssignment(prop)) {
+                L.unsupported("SC1031", prop, "rest bindings over string sources (JS packs the wrapper's per-code-unit indices — split with [...s] instead)");
+            }
+            let fieldName;
+            let bindTo;
+            if (ts.isShorthandPropertyAssignment(prop)) {
+                fieldName = prop.name.text;
+                bindTo = prop.name;
+            }
+            else if (ts.isPropertyAssignment(prop)) {
+                const folded = patternKeyNameOf(L, prop.name);
+                if (folded === null) {
+                    L.unsupported("SC1031", prop, "destructuring assignment with computed keys that do not fold to one property name");
+                }
+                fieldName = folded;
+                bindTo = prop.initializer;
+                // `({ length: n = 3 } = s)`: the default is dead (length always
+                // exists) — strip it, exactly the evaluation JS skips.
+                if (ts.isBinaryExpression(bindTo) && bindTo.operatorToken.kind === ts.SyntaxKind.EqualsToken) {
+                    bindTo = bindTo.left;
+                }
+            }
+            else {
+                L.unsupported("SC1031", prop, "destructuring assignment with getter/setter or method properties");
+            }
+            if (fieldName !== "length") {
+                L.unsupported("SC1031", prop, Object.hasOwn(STR_METHODS, fieldName)
+                    ? `destructuring the method '${fieldName}' of a string (a detached method loses its receiver — call it through the value)`
+                    : `destructuring the property '${fieldName}' strings do not carry as data ('length' is the one own data property)`);
+            }
+            const readOf = () => ({ kind: "strIntrinsic", method: "length", receiver: tmpRef(), args: [], type: F64, loc: propLoc });
+            while (ts.isParenthesizedExpression(bindTo))
+                bindTo = bindTo.expression;
+            if (!ts.isIdentifier(bindTo)) {
+                lowerAssignTargetInto(L, out, bindTo, prop, null, readOf);
+                continue;
+            }
+            let targetBinding;
+            if (ts.isShorthandPropertyAssignment(prop)) {
+                const valueSymbol = L.checker.getShorthandAssignmentValueSymbol(prop) ?? null;
+                const local = valueSymbol ? L.resolveKey(valueSymbol, bindTo) : null;
+                const g = valueSymbol ? L.globalsBySymbol.get(valueSymbol) : undefined;
+                targetBinding = local ? { id: local.id, type: local.type } : g ? { id: g.id, type: g.type } : null;
+            }
+            else {
+                targetBinding = L.resolveWritable(bindTo);
+            }
+            if (!targetBinding) {
+                L.rejectUnresolved(bindTo, `assignment to '${bindTo.text}' (not a writable local or module global)`);
+            }
+            out.push({
+                kind: "assign",
+                localId: targetBinding.id,
+                value: L.coerceInto(prop, readOf(), targetBinding.type),
+                loc: propLoc,
+            });
+        }
+        return { stmts: out, value };
+    }
     if (init.type.kind !== "record") {
         L.unsupported("SC1031", blame, init.type.kind === "object"
             ? "destructuring assignment from class instances (read the fields directly — accessors make the desugar observable)"
@@ -3914,13 +4564,6 @@ function destructuringAssignInto(L, target, init, rhs, blame, loc) {
             let restTo = prop.expression;
             while (ts.isParenthesizedExpression(restTo))
                 restTo = restTo.expression;
-            if (!ts.isIdentifier(restTo)) {
-                L.unsupported("SC1031", prop, "destructuring assignment of rest into non-variable targets");
-            }
-            const targetBinding = L.resolveWritable(restTo);
-            if (!targetBinding) {
-                L.rejectUnresolved(restTo, `assignment to '${restTo.text}' (not a writable local or module global)`);
-            }
             if (shape.indexValue) {
                 L.unsupported("SC1031", prop, "rest bindings over index-signature shapes (the undeclared entries would need overflow packing)");
             }
@@ -3945,6 +4588,16 @@ function destructuringAssignInto(L, target, init, rhs, blame, loc) {
                 type: { kind: "record", shapeId: restShapeId },
                 loc: locOf(prop),
             };
+            if (!ts.isIdentifier(restTo)) {
+                // `({ a, ...box.rest } = src)` — the rest packs identically and
+                // lands through the property/element write machinery.
+                lowerAssignTargetInto(L, out, restTo, prop, null, () => packed);
+                continue;
+            }
+            const targetBinding = L.resolveWritable(restTo);
+            if (!targetBinding) {
+                L.rejectUnresolved(restTo, `assignment to '${restTo.text}' (not a writable local or module global)`);
+            }
             out.push({
                 kind: "assign",
                 localId: targetBinding.id,
@@ -3981,7 +4634,33 @@ function destructuringAssignInto(L, target, init, rhs, blame, loc) {
         while (ts.isParenthesizedExpression(bindTo))
             bindTo = bindTo.expression;
         if (!ts.isIdentifier(bindTo)) {
-            L.unsupported("SC1031", bindTo, "destructuring assignment to nested patterns or non-variable targets (assign a variable, then write the parts out)");
+            // Nested patterns and property/element targets: the element's
+            // value (default applied at the target's own type) lands through
+            // the shared non-variable machinery.
+            const fieldT = shape.fields.find((f) => f.name === fieldName)?.type;
+            const dflt = dfltInit;
+            lowerAssignTargetInto(L, out, bindTo, prop, dflt, (targetT) => {
+                if (!fieldT) {
+                    // The defaulted read of a field the shape does not carry is
+                    // always undefined — the default IS the value (the identifier
+                    // path's rule below).
+                    if (dflt && targetT)
+                        return L.lowerExprExpecting(dflt, targetT);
+                    L.unsupported("SC1031", prop, `destructuring the field '${fieldName}' the source shape does not carry`);
+                }
+                let v = {
+                    kind: "recordGet",
+                    obj: { kind: "varRef", localId: tmp.id, type: srcType, loc: locOf(prop) },
+                    shapeId: srcType.shapeId,
+                    field: fieldName,
+                    type: fieldT,
+                    loc: locOf(prop),
+                };
+                if (dflt && targetT)
+                    v = undefArmDefault(L, prop, dflt, v, targetT);
+                return v;
+            });
+            continue;
         }
         // Shorthand names resolve to the PROPERTY symbol at their location;
         // the VALUE symbol (the binding being assigned) comes from the
@@ -4037,6 +4716,102 @@ function destructuringAssignInto(L, target, init, rhs, blame, loc) {
     }
     return { stmts: out, value };
 }
+/** A destructuring-ASSIGNMENT target that is not a plain variable:
+   * PROPERTY targets (`({ a: this.x } = o)`, `[c.x, c.y] = t` — the
+   * receiver evaluates into a hidden temp at the element's pattern
+   * position, BEFORE the element's value read, JS's get-the-reference-
+   * then-GetV order), ELEMENT targets over arrays (runtime f64 index)
+   * and tuples/records (literal keys) with the same receiver/key temp
+   * discipline, and NESTED patterns (`({ p: { q } } = o)`, `[[a], b] = t`
+   * — the element's value destructures through the same assignment
+   * machinery, its own hidden temp included). `valueOf` builds the
+   * (defaulted) source value at the target's own type; it receives null
+   * exactly for nested patterns, which have no single binding type —
+   * defaults there keep a fence (JS would need the pattern's implied
+   * type to test against). Optional-chain targets are not assignment
+   * targets in JS at all; index-signature runtime keys and island/dyn
+   * receivers keep the fence below. */
+function lowerAssignTargetInto(L, out, targetNode, blame, dflt, valueOf) {
+    let t = targetNode;
+    while (ts.isParenthesizedExpression(t))
+        t = t.expression;
+    const loc = locOf(t);
+    if (ts.isObjectLiteralExpression(t) || ts.isArrayLiteralExpression(t)) {
+        if (dflt) {
+            L.unsupported("SC1031", blame, "defaults on nested patterns in destructuring assignment (bind a variable with the default, then destructure it)");
+        }
+        const sub = destructuringAssignInto(L, t, valueOf(null), null, blame, loc);
+        out.push(...sub.stmts);
+        return;
+    }
+    if (ts.isPropertyAccessExpression(t) && !t.questionDotToken) {
+        const ft = L.fieldTarget(t);
+        if (ft) {
+            // The receiver temps FIRST: JS evaluates the target reference
+            // before reading the element's value, so a side-effecting
+            // receiver (`f().x`) must run before the source read the
+            // defaulted value machinery may emit.
+            const recv = L.declareHiddenLocal("%dtRecv", ft.obj.type);
+            out.push({ kind: "varDecl", localId: recv.id, init: ft.obj, loc });
+            const value = L.coerceInto(blame, valueOf(ft.fieldType), ft.fieldType);
+            out.push(L.fieldSetStmt({ ...ft, obj: { kind: "varRef", localId: recv.id, type: ft.obj.type, loc } }, value, loc, t));
+            return;
+        }
+    }
+    if (ts.isElementAccessExpression(t) && !t.questionDotToken) {
+        const recvT = L.mapTypeOf(L.typeOf(t.expression));
+        if (recvT?.kind === "array") {
+            const arr = L.lowerExpr(t.expression);
+            if (arr.type.kind === "array") {
+                const recv = L.declareHiddenLocal("%dtRecv", arr.type);
+                out.push({ kind: "varDecl", localId: recv.id, init: arr, loc });
+                const index = L.lowerExpr(t.argumentExpression);
+                if (index.type.kind !== "f64") {
+                    L.unsupported("SC1090", t.argumentExpression, "indexing with non-number keys");
+                }
+                const idx = L.declareHiddenLocal("%dtIdx", F64);
+                out.push({ kind: "varDecl", localId: idx.id, init: index, loc });
+                const value = L.coerceInto(blame, valueOf(recvT.elem), recvT.elem);
+                out.push({
+                    kind: "arraySet",
+                    arr: { kind: "varRef", localId: recv.id, type: arr.type, loc },
+                    index: { kind: "varRef", localId: idx.id, type: F64, loc },
+                    value,
+                    loc,
+                });
+                return;
+            }
+        }
+        else if (recvT?.kind === "record") {
+            // Tuple positions and LITERAL declared record keys are field
+            // writes (the element-write lowering's own rule); runtime keys
+            // keep the fence below.
+            const shape = L.shapes.get(recvT.shapeId);
+            const litKey = ts.isStringLiteralLike(t.argumentExpression) || ts.isNumericLiteral(t.argumentExpression)
+                ? L.foldedStringKeyOf(t.argumentExpression)
+                : null;
+            const field = litKey !== null ? shape?.fields.find((f) => f.name === litKey) : undefined;
+            if (field) {
+                const obj = L.lowerExpr(t.expression);
+                if (obj.type.kind === "record") {
+                    const recv = L.declareHiddenLocal("%dtRecv", obj.type);
+                    out.push({ kind: "varDecl", localId: recv.id, init: obj, loc });
+                    const value = L.coerceInto(blame, valueOf(field.type), field.type);
+                    out.push({
+                        kind: "recordSet",
+                        obj: { kind: "varRef", localId: recv.id, type: obj.type, loc },
+                        shapeId: recvT.shapeId,
+                        field: field.name,
+                        value,
+                        loc,
+                    });
+                    return;
+                }
+            }
+        }
+    }
+    L.unsupported("SC1031", targetNode, "destructuring assignment to targets with no static write form (assign a variable, then write the parts out)");
+}
 /** One object-pattern property's pieces for the checked-dynamic path:
    * the source FIELD name (or, over ISLAND sources, a runtime KEY
    * expression the engine indexes with) and the resolved writable target.
@@ -4099,7 +4874,23 @@ function destructAssignPiece(L, prop, islandSource) {
    * bounds test (JS reads undefined past the end), rest packs the tail
    * fresh (array slices, tuple tails). */
 function lowerArrayAssignInto(L, out, target, tmpRef, blame, loc) {
-    const srcType = tmpRef().type;
+    let srcType = tmpRef().type;
+    // A STRING source (`[a, b] = s`): the declaration path's rule in
+    // assignment position — the string iterator's code-point split
+    // (%str.chars, astral characters whole) into a hidden chars array,
+    // then the pattern proceeds as an array pattern over string[]
+    // (defaults with the bounds test, rest packing the remaining code
+    // points, elisions; positions past the last code point inherit the
+    // array divergence). The EMPTY pattern skips the split — GetIterator
+    // + close, nothing observable — through the iterable early-return
+    // below. Callers vetted the source as a checker-typed string.
+    if (srcType.kind === "string" && target.elements.length > 0) {
+        const charsT = arrayOf(STRING);
+        const chars = L.declareHiddenLocal("%dchars", charsT);
+        out.push({ kind: "varDecl", localId: chars.id, init: strCharsCall(L, tmpRef(), loc), loc });
+        tmpRef = () => ({ kind: "varRef", localId: chars.id, type: charsT, loc });
+        srcType = charsT;
+    }
     // A sole leading rest whose operand is ITSELF an array pattern
     // (`[...[a, b = 0]] = t`): the rest collects every element, then the
     // inner pattern destructures the collection — over arrays/tuples that
@@ -4184,32 +4975,28 @@ function lowerArrayAssignInto(L, out, target, tmpRef, blame, loc) {
         }
         while (ts.isParenthesizedExpression(targetNode))
             targetNode = targetNode.expression;
-        if (!ts.isIdentifier(targetNode)) {
-            L.unsupported("SC1031", targetNode, "destructuring assignment to nested patterns or non-variable targets (assign a variable, then write the parts out)");
-        }
-        const targetBinding = L.resolveWritable(targetNode);
-        if (!targetBinding) {
-            L.rejectUnresolved(targetNode, `assignment to '${targetNode.text}' (not a writable local or module global)`);
-        }
-        let read;
-        if (isRest) {
-            read = isTuple
-                ? tupleTailValue(L, el, tmpRef, srcType, shape, i, targetBinding.type)
-                : { kind: "arrIntrinsic", method: "slice", receiver: tmpRef(), args: [{ kind: "numLit", value: i, type: F64, loc: locOf(el) }], type: srcType, loc: locOf(el) };
-        }
-        else if (isTuple && defaultNode !== null && !shape.fields.some((f) => f.name === String(i))) {
-            // Past the tuple's end the read is always undefined — the default
-            // IS the assignment (JS evaluates it unconditionally there).
-            read = L.lowerExprExpecting(defaultNode, targetBinding.type);
-        }
-        else {
+        // The element's (defaulted) value at the target's own type — shared
+        // by variable, property/element, and nested-pattern targets (the
+        // latter receive null: no single binding type exists there, and
+        // defaults on nested targets fence in the shared machinery).
+        const readOf = (targetT) => {
+            if (isRest) {
+                return isTuple
+                    ? tupleTailValue(L, el, tmpRef, srcType, shape, i, targetT)
+                    : { kind: "arrIntrinsic", method: "slice", receiver: tmpRef(), args: [{ kind: "numLit", value: i, type: F64, loc: locOf(el) }], type: srcType, loc: locOf(el) };
+            }
+            if (isTuple && defaultNode !== null && targetT !== null && !shape.fields.some((f) => f.name === String(i))) {
+                // Past the tuple's end the read is always undefined — the default
+                // IS the assignment (JS evaluates it unconditionally there).
+                return L.lowerExprExpecting(defaultNode, targetT);
+            }
             // Defaults: JS applies the default ONLY when the element reads
             // undefined. A checked-dynamic element tests at runtime; a tuple
             // position tests its undefined arm (a never-undefined field makes
             // the default dead — JS would not evaluate it either); an array
             // position carries the bounds test (past the end JS reads
             // undefined where the plain read would trap).
-            read = elemRead(i, el);
+            let read = elemRead(i, el);
             if (defaultNode !== null) {
                 if (read.type.kind === "dyn" || read.type.kind === "jsval") {
                     const boundary = read.type;
@@ -4229,18 +5016,26 @@ function lowerArrayAssignInto(L, out, target, tmpRef, blame, loc) {
                         loc: locOf(el),
                     };
                 }
-                else if (isTuple) {
-                    read = undefArmDefault(L, el, defaultNode, read, targetBinding.type);
-                }
-                else {
-                    read = arrayPositionDefaultValue(L, el, defaultNode, read, tmpRef, i, srcType.elem, targetBinding.type, out);
+                else if (targetT !== null) {
+                    read = isTuple
+                        ? undefArmDefault(L, el, defaultNode, read, targetT)
+                        : arrayPositionDefaultValue(L, el, defaultNode, read, tmpRef, i, srcType.elem, targetT, out);
                 }
             }
+            return read;
+        };
+        if (!ts.isIdentifier(targetNode)) {
+            lowerAssignTargetInto(L, out, targetNode, el, defaultNode, readOf);
+            return;
+        }
+        const targetBinding = L.resolveWritable(targetNode);
+        if (!targetBinding) {
+            L.rejectUnresolved(targetNode, `assignment to '${targetNode.text}' (not a writable local or module global)`);
         }
         out.push({
             kind: "assign",
             localId: targetBinding.id,
-            value: L.coerceInto(el, read, targetBinding.type),
+            value: L.coerceInto(el, readOf(targetBinding.type), targetBinding.type),
             loc: locOf(el),
         });
     });
@@ -4371,7 +5166,7 @@ export function lowerForOf(L, stmt) {
     if (iterable.type.kind !== "array") {
         // The lib types strings as iterable too, so those for-ofs typecheck;
         // only arrays, Maps, and Sets have a lowering. Named specifically —
-        // the generic SC2001 would blame the TYPE, which is itself supported.
+        // the blanket type fence would blame the TYPE, which is itself supported.
         if (iterable.type.kind === "string") {
             // JS's string iterator walks code POINTS, not units: each pass
             // yields the whole character (two UTF-16 units for astral chars,
@@ -4918,11 +5713,13 @@ function lowerForOfIsland(L, stmt, iterable, labels) {
 function lowerForOfString(L, stmt, iterable, labels) {
     let exprTarget = null;
     let exprTargetNode = null;
+    let exprPattern = null;
     if (!ts.isVariableDeclarationList(stmt.initializer)) {
         // `for (v of "hello")` over a PRE-DECLARED identifier: assign the
-        // existing binding per pass (the array head's rule). Member and
-        // destructuring targets keep the fence — a string yields single
-        // characters, so patterns over them stay the non-array fences.
+        // existing binding per pass (the array head's rule). PATTERN heads
+        // (`for ([a] of "xy")`) destructure the per-iteration code point
+        // through the string-source assignment lowerings; member targets
+        // keep the fence.
         let target = stmt.initializer;
         while (ts.isParenthesizedExpression(target))
             target = target.expression;
@@ -4930,7 +5727,10 @@ function lowerForOfString(L, stmt, iterable, labels) {
             exprTarget = L.resolveWritable(target);
             exprTargetNode = target;
         }
-        if (!exprTarget) {
+        else if (ts.isObjectLiteralExpression(target) || ts.isArrayLiteralExpression(target)) {
+            exprPattern = target;
+        }
+        if (!exprTarget && !exprPattern) {
             L.unsupported("SC1090", stmt.initializer, "for-of over a pre-declared variable (declare the loop variable in the loop: for (const x of ...))");
         }
     }
@@ -4940,8 +5740,6 @@ function lowerForOfString(L, stmt, iterable, labels) {
     }
     const isLet = list !== null && (list.flags & ts.NodeFlags.Let) !== 0;
     const decl = list ? list.declarations[0] : null; // the grammar allows exactly one
-    if (decl && !ts.isIdentifier(decl.name))
-        L.unsupported("SC1031", decl.name);
     const loc = locOf(stmt);
     L.scopes.push(new Map());
     try {
@@ -4953,9 +5751,15 @@ function lowerForOfString(L, stmt, iterable, labels) {
         // `for (var c of str)`: the character mechanics stay on a hidden
         // per-iteration local; the body opens by assigning it into the ONE
         // hoisted var binding (see forOfVarTarget). Pre-declared expression
-        // heads assign their existing binding the same way.
-        const varTarget = exprTarget ?? (decl ? forOfVarTarget(L, decl) : null);
-        const ch = varTarget
+        // heads assign their existing binding the same way. PATTERN heads
+        // (`for (const [half] of "😀x")`) destructure the per-iteration
+        // code point through the string-source pattern lowerings — each
+        // element is a genuine one-code-point string.
+        const declPattern = decl !== null && !ts.isIdentifier(decl.name)
+            ? decl.name
+            : null;
+        const varTarget = exprTarget ?? (decl && !declPattern ? forOfVarTarget(L, decl) : null);
+        const ch = varTarget || declPattern || exprPattern
             ? L.declareHiddenLocal("%vof", STRING)
             : L.declareLocal(decl.name, decl.name.text, STRING, isLet);
         const chRef = { kind: "varRef", localId: ch.id, type: STRING, loc };
@@ -4983,6 +5787,12 @@ function lowerForOfString(L, stmt, iterable, labels) {
                 loc,
             },
         ];
+        if (declPattern) {
+            L.lowerBindingPattern(declPattern, () => chRef, STRING, isLet, head);
+        }
+        if (exprPattern) {
+            head.push(lowerDestructuringAssign(L, exprPattern, chRef, exprPattern, loc));
+        }
         const body = L.inCtl("loop", () => L.lowerScopedBlock(stmt.statement), labels);
         return {
             kind: "block",