@scriptc/compiler 0.0.9 → 0.0.11

package/dist/ir/nodes.d.ts

@@ -549,8 +549,11 @@ export interface IrLibExport {
     symbol: string;
     /** IR function name (entry-file top-level, so unqualified). */
     fnName: string;
-    params: ("f64" | "bool" | "string" | "bytes" | "u8" | "u32" | "i32")[];
-    returns: "f64" | "bool" | "string" | "bytes" | "void";
+    /** i64/u64 (ask 4): int64_t/uint64_t at the C edge — inbound values
+     * range-check in the wrapper (`inboundIntTrap`), internal call sites
+     * and returns are compile-time proven before this lands on the IR. */
+    params: ("f64" | "bool" | "string" | "bytes" | "u8" | "u32" | "i32" | "i64" | "u64")[];
+    returns: "f64" | "bool" | "string" | "bytes" | "void" | "i64" | "u64";
     /** The exact sink-message bytes this wrapper passes to the inbound-bytes
      * marshalling helper's trap — present exactly when a parameter is
      * bytes-classed. Already the assembled structured trap-teaching form
@@ -559,6 +562,12 @@ export interface IrLibExport {
      * 0x1F when supplied. Assembled ONCE at export resolution so both
      * backends emit identical bytes by construction. */
     inboundBytesTrap?: string;
+    /** The sibling message for the inbound INTEGER host-contract trap
+     * (ask 4): present exactly when a parameter is i64/u64-classed, passed
+     * to the scr_library_i64_in/u64_in helpers, which trap when the inbound
+     * value cannot ride f64 exactly (|v| past 2^53−1). Same assembled
+     * structured form and the same SC4012 code — one host-contract story. */
+    inboundIntTrap?: string;
 }
 /** One runtime-trap overlay row: the profile's teaching (replaces the
  * baseline human line as field 0) and/or remediation (the optional fourth
@@ -1166,8 +1175,11 @@ export type IrStrIntrinsicMethod = "length" | "charCodeAt" | "charAt" | "indexOf
  * arrayGet — the write side is the bytesSet STATEMENT); `slice` takes
  * 0–2 f64 relative indices (omitted args are OMITTED from `args`, like
  * strIntrinsic — backends fill start 0 / end +Infinity) → a fresh
- * same-elem bytes COPY (`subarray` lowers here too: copying is the
- * documented divergence); `setFrom` (`dst.set(src, offset?)`) takes a
+ * same-elem bytes COPY; `subarray` takes the same 0–2 f64 relative
+ * indices → a same-elem VIEW aliasing the receiver's storage (JS's
+ * TypedArray.prototype.subarray; Buffer's slice(), subarray's deprecated
+ * Node alias, lowers here too — only plain typed arrays' slice copies);
+ * `setFrom` (`dst.set(src, offset?)`) takes a
  * same-elem bytes src and an optional f64 offset (omitted = 0) → void,
  * THROWS Node's RangeError on overflow (may-throw seed); `toString` takes
  * one string encoding arg (the frontend completes an omitted one to
@@ -1204,7 +1216,7 @@ export type IrStrIntrinsicMethod = "length" | "charCodeAt" | "charAt" | "indexOf
  * constant RangeError on any bad offset; values coerce JS-exactly
  * (integer kinds by modular truncation, Float32 by double→float
  * rounding). No BIG setters exist — bigint arguments never lower. */
-export type IrBytesIntrinsicMethod = "length" | "byteLength" | "get" | "slice" | "setFrom" | "toString" | "readNum" | "writeNum" | "readNumVar" | "writeNumVar"
+export type IrBytesIntrinsicMethod = "length" | "byteLength" | "get" | "slice" | "subarray" | "setFrom" | "toString" | "readNum" | "writeNum" | "readNumVar" | "writeNumVar"
 /** The comparison/search/mutation surface (u8 receivers only; see the
  * runtime contract): `equals` [bytes] → bool (never throws);
  * `compareBuf` [bytes, 0-4 f64 index args — omitted args OMITTED,
@@ -1219,7 +1231,14 @@ export type IrBytesIntrinsicMethod = "length" | "byteLength" | "get" | "slice" |
  * f64 copied count, THROWS; `swap16/32/64` [] → the receiver (+1,
  * in-place), THROW; `writeStr` [string, strLit enc, f64 offset, f64
  * length?] → f64 bytes written, THROWS. */
- | "equals" | "compareBuf" | "indexOf" | "lastIndexOf" | "includes" | "indexOfNum" | "lastIndexOfNum" | "includesNum" | "fill" | "fillNum" | "fillStr" | "copy" | "swap16" | "swap32" | "swap64" | "writeStr" | "byteOffset" | "dataViewNew" | "dvGetUint8" | "dvGetInt8" | "dvGetUint16" | "dvGetInt16" | "dvGetUint32" | "dvGetInt32" | "dvGetFloat32" | "dvGetFloat64" | "dvGetBigUint64Number" | "dvGetBigInt64Number" | "dvSetUint8" | "dvSetInt8" | "dvSetUint16" | "dvSetInt16" | "dvSetUint32" | "dvSetInt32" | "dvSetFloat32" | "dvSetFloat64";
+ | "equals" | "compareBuf" | "indexOf" | "lastIndexOf" | "includes" | "indexOfNum" | "lastIndexOfNum" | "includesNum" | "fill" | "fillNum" | "fillStr"
+/** TypedArray.prototype.fill on NON-u8 receivers: [f64 value, 0-2 f64
+ * relative indices] → the RECEIVER (+1, chaining); the value coerces
+ * per element kind (the scr_bytes_set discipline), indices clamp like
+ * slice, never throws. u8 receivers keep the Buffer fill family above
+ * (same observable number-fill result; Buffer's throwing offset
+ * validation). */
+ | "fillElem" | "copy" | "swap16" | "swap32" | "swap64" | "writeStr" | "byteOffset" | "dataViewNew" | "dvGetUint8" | "dvGetInt8" | "dvGetUint16" | "dvGetInt16" | "dvGetUint32" | "dvGetInt32" | "dvGetFloat32" | "dvGetFloat64" | "dvGetBigUint64Number" | "dvGetBigInt64Number" | "dvSetUint8" | "dvSetInt8" | "dvSetUint16" | "dvSetInt16" | "dvSetUint32" | "dvSetInt32" | "dvSetFloat32" | "dvSetFloat64";
 /** The bytesIntrinsic methods that can raise a catchable error — backends'
  * may-throw analyses seed on these exactly like MAY_THROW_LIB_FNS. */
 export declare const MAY_THROW_BYTES_METHODS: ReadonlySet<IrBytesIntrinsicMethod>;
@@ -1303,11 +1322,22 @@ export type IrLibFn = "island.eval"
  * OBJ receiver sets the member (later writes win, insertion order
  * preserved — JS exactly); undefined/null throws Node's catchable
  * "Cannot set properties of undefined (setting 'k')"; every other kind
- * throws Node's STRICT-mode "Cannot create property 'k' on <kind>"
+ * throws Node's STRICT-mode "Cannot create property 'k' on <kind>" —
+ * primitives quoting their rendering, V8's "on number '5'"
  * (sloppy mode would silently ignore — suite tests are 'use strict';
  * SEMANTICS.md notes the sloppy divergence: loud, never silent). Void
  * result; in the may-throw seed set. */
  | "dyn.keySet"
+/** Destructuring pack over a dyn DOM source — `const [a, b] = d`, a
+ * destructured dyn callback param (args: the source and the STATIC
+ * TypeError spelling, "" when the source has none — both borrowed;
+ * result: a fresh DOM array, +1). Iterable kinds collect like spread
+ * (arrays element-by-element, strings by code point, bytes by byte);
+ * every other kind throws V8's destructuring TypeError — the spelling
+ * verbatim when non-empty, else the runtime kind wording ("number 5 is
+ * not iterable (cannot read property Symbol(Symbol.iterator))"). In the
+ * may-throw seed set. */
+ | "dyn.iterPack"
 /** Object.defineProperties over DOM values (args: target, descriptors —
  * both borrowed dyn; result: the target, +1 — JS's return value).
  * Value descriptors become plain own properties on OBJ and FUNC targets
@@ -1407,6 +1437,12 @@ export type IrLibFn = "island.eval"
  * round() is half-away-from-zero and floor(x+0.5) drifts at the
  * epsilon boundary). Borrow nothing; never throw. */
  | "math.abs" | "math.round"
+/** Math.trunc / Math.ceil — C trunc()/ceil() ARE the JS operations
+ * (NaN/±0/±Infinity pass through bit-exactly; ceil(-0.5) is -0 in IEEE
+ * round-toward-+Infinity exactly as ECMA says). Static like floor —
+ * they are ask-4's wholeness-discharge operators, so the library
+ * inference needs them compiled, not island-served. Never throw. */
+ | "math.trunc" | "math.ceil"
 /** The static global parsers/tests (scr_string.c). num.parseInt is
  * ECMA-262 19.2.5 exactly — JS whitespace, sign, ToInt32 radix (the
  * frontend completes an omitted radix to 0 = the spec's "undefined":
@@ -1675,7 +1711,18 @@ export type IrLibFn = "island.eval"
  * (handshake-completion timing); on a server without deferred
  * connections (a plain net server) the registration never fires,
  * exactly Node's split. */
- | "net.serverOnSecureConnection" | "net.connect" | "net.connectCb"
+ | "net.serverOnSecureConnection" | "net.connect"
+/** connect with a validated autoSelectFamilyAttemptTimeout option (the
+ * budget runs Node's validateInt32-from-1 ladder and is then inert —
+ * the single dial has nothing to time). May-throw. */
+ | "net.connectAttempt"
+/** net.connect/createConnection over a RUNTIME option bag (computed
+ * keys — the invalid-input probes): Node-order validation (the
+ * objectMode trio's ERR_INVALID_ARG_VALUE, validatePort, host string,
+ * autoSelectFamily boolean, the attempt budget), then the trailing
+ * compiler-rendered fence — ALWAYS THROWS (the error.nodeThrow
+ * polymorphic-result carve-out). May-throw seed. */
+ | "net.connectOptsChk" | "net.connectCb"
 /** connect({ port, host, autoSelectFamily: true, lookup }) — the
  * caller-resolver dial (portless's createLoopbackConnection): args
  * [port, host, lookup]. The runtime creates the (connecting) socket
@@ -1717,7 +1764,13 @@ export type IrLibFn = "island.eval"
  * defers the callback to the next turn (SEMANTICS.md documents the
  * blocking divergence); its per-union adapter builds the
  * `Error | null` first argument. */
- | "dgram.createSocket" | "dgram.bind" | "dgram.bindCb" | "dgram.connect" | "dgram.connectCb" | "dgram.sendStr" | "dgram.sendBytes" | "dgram.address" | "dgram.close" | "dgram.closeCb" | "dgram.unref" | "dgram.ref" | "dgram.onMessage" | "dgram.onError" | "dgram.onListening" | "dgram.onClose" | "dgram.onConnect" | "dns.lookup"
+ | "dgram.createSocket" | "dgram.bind" | "dgram.bindCb" | "dgram.connect" | "dgram.connectCb" | "dgram.sendStr" | "dgram.sendBytes"
+/** The send argument-validation ladder over DOM arguments (Node's
+ * signature shuffle: slice bounds, list/type contracts, port/address
+ * validation, connected-state errors) — a fully-validated unconnected
+ * single-payload send RUNS; callback/list/connected forms meet the
+ * trailing fence. May-throw. */
+ | "dgram.sendChk" | "dgram.address" | "dgram.close" | "dgram.closeCb" | "dgram.unref" | "dgram.ref" | "dgram.onMessage" | "dgram.onError" | "dgram.onListening" | "dgram.onClose" | "dgram.onConnect" | "dns.lookup"
 /** node:test (scr_test.c — linked only when one of these appears on
  * the IR; moduleUsesNodeTest is the switch, and the main epilogue asks
  * scr_test_exit_code() for the process's exit status). Strings are
@@ -1893,7 +1946,17 @@ export type IrLibFn = "island.eval"
 /** tls.createSecureContext({ cert, key }) — parses the PEM pair into an
  * opaque SecureContext handle (secureCtx kind) for SNI callbacks to
  * answer with; cert/key are PEM strings or Buffers like createServer's. */
- | "tls.createSecureContext" | "https.createServer" | "https.request" | "https.requestCb"
+ | "tls.createSecureContext"
+/** createSecureContext over a RUNTIME options record (the checked-
+ * dynamic lane): Node's typed option validations first (the ciphers/
+ * passphrase/engine/version/timeout/ticketKeys ladders), then the pem
+ * walk — a validated { cert, key } bag builds the real context.
+ * May-throw. */
+ | "tls.createSecureContextDyn"
+/** tls.getCACertificates(type): validateString + the documented name
+ * set, then the trailing compiler-rendered fence — ALWAYS THROWS (the
+ * error.nodeThrow polymorphic-result carve-out). May-throw seed. */
+ | "tls.caCertsChk" | "https.createServer" | "https.request" | "https.requestCb"
 /** A call through a `const requestFn = tls ? https.request :
  * http.request` binding — the module-function-as-value ternary between
  * the two known clients: the https.request row with a leading `secure`
@@ -2026,11 +2089,25 @@ export type IrLibFn = "island.eval"
  * finite numbers coerce (negatives answer now/1000, Node's shape);
  * everything else throws Node's ERR_INVALID_ARG_TYPE. May-throw. */
  | "fs.toUnixTimestamp"
+/** The fs argument-validation ladders (checked-dynamic lane): each Chk
+ * replicates its API's Node-order validation over DOM values (Node's
+ * exact typed errors — ERR_INVALID_ARG_TYPE/VALUE, ERR_OUT_OF_RANGE),
+ * and a full pass meets the trailing compiler-rendered SC2020 fence
+ * string — so the ALWAYS-THROW forms take the error.nodeThrow
+ * polymorphic-result carve-out. mkdtempSyncChk and the lchmod sync/
+ * promise pair run the REAL operation on a validated pass instead
+ * (macOS lchmod(2); non-APPLE answers Node's not-a-function /
+ * ERR_METHOD_NOT_IMPLEMENTED shapes). May-throw seeds, all of them. */
+ | "fs.existsChk" | "fs.mkdtempChk" | "fs.mkdtempSyncChk" | "fs.readFileChk" | "fs.opendirChk" | "fs.watchFileChk" | "fs.lchmodChk" | "fs.lchmodSyncChk" | "fsp.lchmodChk" | "fs.readChk" | "fs.streamOptsChk"
 /** The compiler-resolved ERR_INVALID_ARG_TYPE throw with a RUNTIME-
  * rendered Received tail: args [argname, "of type ..." clause, the
  * offending DOM value]. ALWAYS THROWS; polymorphic result (the
  * error.nodeThrow pattern). May-throw seed. */
  | "error.argTypeThrow"
+/** The property flavor of argTypeThrow ("The \"options.x\" property
+ * must be ..."): the option-bag ladders' provably-invalid arms. ALWAYS
+ * THROWS; polymorphic result. May-throw seed. */
+ | "error.propTypeThrow"
 /** The checked-dynamic max-listeners ladders: setMaxChk is the
  * instance form over a DOM n (non-numbers ERR_INVALID_ARG_TYPE,
  * negatives/NaN ERR_OUT_OF_RANGE; +1 receiver back — chaining);
@@ -2330,7 +2407,32 @@ export type IrLibFn = "island.eval"
  * JS). Strings/arrays/bytes answer their index keys; other scalars an
  * empty array; null/undefined throw Node's catchable TypeError
  * ("Cannot convert undefined or null to object"). */
- | "dyn.objKeys" | "dyn.hasOwn" | "dyn.assign" | "dyn.objValues" | "dyn.objEntries"
+ | "dyn.objKeys" | "dyn.hasOwn" | "dyn.assign"
+/** Variadic Object.assign over CHECKED-DYNAMIC targets (`Object.assign(
+ * {}, ...arr.map(f), tail)` — the option-table merge): the lowering
+ * builds one fresh DOM pack of sources (packPush retains a plain source
+ * in; packPushSpread flattens a spread source through the spread-call
+ * walk — V8's exact TypeError texts, the string arg spelling the spread
+ * expression for the nullish form), so every source evaluates and
+ * flattens BEFORE any copying (JS's ArgumentListEvaluation), then
+ * assignAll copies each pack element's own enumerable keys onto the
+ * target left to right and answers the TARGET (+1) — identity, like JS.
+ * assignAll throws Node's ToObject TypeError on a nullish target. */
+ | "dyn.packPush" | "dyn.packPushSpread"
+/** The iterated-path spread twin: V8 spells the optimized apply-path
+ * texts (packPushSpread's — the expression named for nullish sources)
+ * only for the SINGLE LAST argument's spread; any other spread position
+ * drives the real iterator protocol, whose failure describes the VALUE
+ * ("object null is not iterable (cannot read property
+ * Symbol(Symbol.iterator))"). The frontend picks by position. */
+ | "dyn.packPushSpreadIter" | "dyn.assignAll"
+/** `Object.create(null)` (scr_json.c): a fresh NULL-PROTOTYPE DOM
+ * dictionary. The DOM's OBJ dispatch is already own-member-only —
+ * Node's null-proto answer — so the flag's whole job is the observations
+ * that SEE the prototype: inspect's "[Object: null prototype]" prefix
+ * and deepStrictEqual's prototype gate. Never throws. Static builds
+ * only; --dynamic routes Object.create through the engine instead. */
+ | "dyn.objCreateNullProto" | "dyn.objValues" | "dyn.objEntries"
 /** structuredClone over the DOM (scr_json.c): the JSON-safe subset plus
  * bytes (a fresh copy — a Buffer clones as a plain Uint8Array, like
  * Node), deep. Functions and handle kinds throw the spec's catchable
@@ -2440,7 +2542,18 @@ export type IrLibFn = "island.eval"
  * settles; sp.pipeline: (count, s1..sn) → the callback pipeline's
  * chaining/destroyer semantics settling a void promise (fulfilled on a
  * clean finish, rejected with the finish status otherwise). */
- | "sp.finished" | "sp.pipeline" | "readable.newDyn" | "writable.newDyn" | "duplex.newDyn" | "transform.newDyn" | "passthrough.newDyn" | "readable.initDyn" | "writable.initDyn" | "duplex.initDyn" | "transform.initDyn" | "passthrough.initDyn" | "readable.push" | "readable.pushStr" | "readable.pushNull" | "readable.pushU" | "readable.pushDyn" | "readable.unshift" | "readable.unshiftStr" | "readable.read" | "readable.pause" | "readable.resume" | "readable.setEncoding"
+ | "sp.finished" | "sp.pipeline"
+/** node:stream/consumers — the promise consumers over the readable
+ * machinery: (s) → a pending promise settled at the terminal point
+ * with the accumulated result (sc.text: the utf8 decode, sc.json: the
+ * parsed DOM — malformed input rejects with the parse's SyntaxError,
+ * sc.buffer: the concatenated bytes) or rejected with the stream's
+ * error / ERR_STREAM_PREMATURE_CLOSE. */
+ | "sc.text" | "sc.json" | "sc.buffer" | "readable.newDyn" | "writable.newDyn" | "duplex.newDyn" | "transform.newDyn" | "passthrough.newDyn" | "readable.initDyn" | "writable.initDyn" | "duplex.initDyn" | "transform.initDyn" | "passthrough.initDyn" | "readable.push" | "readable.pushStr" | "readable.pushNull" | "readable.pushU" | "readable.pushDyn" | "readable.unshift" | "readable.unshiftStr" | "readable.read" | "readable.pause" | "readable.resume" | "readable.setEncoding"
+/** push(chunk, enc) with a literal non-utf8 encoding, and the
+ * defaultEncoding option's push side (how push(string) decodes —
+ * Buffer.from(chunk, enc)); both carry the CANONICAL literal. */
+ | "readable.pushStrEnc" | "readable.pushEncoding"
 /** for-await over a readable (the desugared loop's per-pass promise):
  * +1 promise of the next chunk — buffered content, the EOF sentinel
  * (empty Buffer / dyn undefined), or a rejection with the stream's
@@ -2846,9 +2959,18 @@ export type IrLibFn = "island.eval"
  * the rest as Int32) — backends emit the scr_bit_* runtime helpers. */
 export type IrNumBinOp = "+" | "-" | "*" | "/" | "%" | "**" | "&" | "|" | "^" | "<<" | ">>" | ">>>" | "<" | "<=" | ">" | ">=" | "===" | "!==";
 export type IrStrCmpOp = "<" | "<=" | ">" | ">=";
-export type IrExpr = {
+export type IrExpr = 
+/** `spelling` (ask 4's representability input) is the author's SOURCE
+ * spelling of a decimal integer literal, present exactly when that
+ * spelling does not round-trip f64 (`9007199254740993` reads back as
+ * 9007199254740992) — the library integer-boundary check refuses on the
+ * spelling, never on the already-rounded value. Round-tripping literals
+ * and non-integer spellings carry nothing, so the IR is byte-identical
+ * for every program that held its numbers. */
+{
     kind: "numLit";
     value: number;
+    spelling?: string;
     type: IrType;
     loc: SrcLoc;
 } | {
@@ -3652,6 +3774,23 @@ export type IrExpr = {
     type: IrType;
     loc: SrcLoc;
 }
+/** Island value → dyn DOM conversion (`type` is always dyn; the operand
+ * is always jsval): the jsval→DOM crossing — an 'any'-typed engine
+ * value flowing into an 'unknown'/'object'/JS-residue slot wraps BY
+ * REFERENCE as the DOM's SCR_DYN_JSVAL kind (scr_dyn_from_jsval).
+ * Engine scalars (number/string/boolean/null/undefined) normalize to
+ * the native DOM kinds at wrap time, so wrapped nodes only ever hold
+ * engine objects/arrays/functions; typeof/truthiness/String()/=== on
+ * the wrapped node route to the engine, un-armed DOM walks fence
+ * loudly, and scr_jsval_from_dyn unwraps the SAME engine value back
+ * (identity round trip). The operand is borrowed; the result is owned
+ * (+1). Never throws. */
+ | {
+    kind: "dynFromJsval";
+    value: IrExpr;
+    type: IrType;
+    loc: SrcLoc;
+}
 /** CALLING a dyn DOM value — `fn(a, b)` where fn is checked-dynamic (an
  * implicit-any JS binding, a dyn record member, a dynKeyGet result).
  * Arguments are ALREADY dyn-typed (typed values box through dynFrom at
@@ -4577,6 +4716,17 @@ export declare function moduleLibAsyncSurface(mod: IrModule): {
     surface: string;
     loc: SrcLoc;
 } | null;
+/** libCall families that demote `deterministic` (prefix match over
+ * IrLibFn spellings). process.stdout/stderr writes are deliberately NOT
+ * here: output is an effect, not a nondeterminism input, and console
+ * policy is the profile's ask-5 business. process.platform/arch and the
+ * version constants fold at compile time, so they are per-binary
+ * constants, not ambient reads. Exported for the attestation-parity test
+ * (tests/harness/surface-manifest.test.ts): every spelling this table
+ * demotes on must be deniable by a manifest-id fence, or the ask-5 §4
+ * invariant (compiles under full fences ⇒ deterministic) cannot be
+ * stated. */
+export declare const LIB_NONDETERMINISTIC_PREFIXES: readonly [string, string][];
 /** First ambient-nondeterminism or ambient-authority surface the module
  * graph reaches, or null when the graph is clean (the sidecar then
  * attests `deterministic: true`). */

package/dist/ir/nodes.js

@@ -870,7 +870,12 @@ export function canConvertToDyn(t, getRecord, getUnion) {
     }
     if (t.kind === "union") {
         const def = getUnion(t.unionId);
-        return !!def && def.arms.every((a) => a.kind === "undefinedT" || isJsonSafeType(a, getRecord, getUnion));
+        // JSON-safe arms box as before; BOXABLE FUNCTION arms join them (the
+        // invalid-input probes iterate `[1, null, () => {}, true]` — the
+        // union's func arm crosses through the checked-dynamic function
+        // boundary exactly like a bare func dynFrom).
+        return !!def && def.arms.every((a) => a.kind === "undefinedT" || isJsonSafeType(a, getRecord, getUnion) ||
+            (a.kind === "func" && canBoxFuncIntoDyn(a, getRecord, getUnion)));
     }
     return false;
 }
@@ -946,8 +951,15 @@ export function canDynCheckTo(t, getRecord, getUnion) {
  * back). */
 export function canBoxFuncIntoDyn(t, getRecord, getUnion) {
     return (t.kind === "func" &&
-        t.params.every((p) => p.kind === "dyn" || canDynCheckTo(p, getRecord, getUnion)) &&
-        (t.ret.kind === "void" || t.ret.kind === "dyn" || canConvertToDyn(t.ret, getRecord, getUnion)));
+        // A jsval (island) param converts through scr_jsval_from_dyn in the
+        // thunk (wrapped cells unwrap by reference, DOM data deep-copies) —
+        // the checker-'any' callback params of the routed-dispatch lane
+        // (`bag.list.map((x) => ...)` with x typed any).
+        t.params.every((p) => p.kind === "dyn" || p.kind === "jsval" || canDynCheckTo(p, getRecord, getUnion)) &&
+        // A jsval return converts through the by-reference wrap
+        // (dynFromJsval — the thunk's result conversion), so engine-returning
+        // callbacks box too: the routed-dispatch lane's flatMap shape.
+        (t.ret.kind === "void" || t.ret.kind === "dyn" || t.ret.kind === "jsval" || canConvertToDyn(t.ret, getRecord, getUnion)));
 }
 /** A closure type a dyn function value can ADAPT to (dynCheck): every
  * param dyn or dyn-convertible (the adapter converts typed arguments into
@@ -1171,6 +1183,7 @@ export function moduleUsesStream(mod) {
                 node.fn === "stream.destroy" || node.fn === "stream.destroyErr" ||
                 node.fn === "stream.prop" || node.fn === "stream.errored" ||
                 node.fn === "sp.finished" || node.fn === "sp.pipeline" ||
+                node.fn.startsWith("sc.") ||
                 node.fn.startsWith("stream.set"))) {
             found = true;
             return;
@@ -1730,6 +1743,10 @@ export function moduleUsesTls(mod) {
 /** libCall families a v1 library artifact refuses, with the surface name the SC4005
  * teaching uses. Prefix match over IrLibFn spellings. */
 const LIB_MODE_REFUSED_PREFIXES = [
+    // fs.exists is the one CALLBACK-async fs op with a real implementation:
+    // its fire rides the timer queue (scr_bytes_io.c), which library links
+    // exclude — refuse the surface like the rest of the event-loop family.
+    ["fs.existsChk", "the async fs callback surface (fs.exists)"],
     ["timers.", "the timers surface (setTimeout family)"],
     ["tp.", "the timers/promises surface"],
     ["cp.", "the child_process surface"],
@@ -1877,8 +1894,12 @@ export function moduleLibAsyncSurface(mod) {
  * here: output is an effect, not a nondeterminism input, and console
  * policy is the profile's ask-5 business. process.platform/arch and the
  * version constants fold at compile time, so they are per-binary
- * constants, not ambient reads. */
-const LIB_NONDETERMINISTIC_PREFIXES = [
+ * constants, not ambient reads. Exported for the attestation-parity test
+ * (tests/harness/surface-manifest.test.ts): every spelling this table
+ * demotes on must be deniable by a manifest-id fence, or the ask-5 §4
+ * invariant (compiles under full fences ⇒ deterministic) cannot be
+ * stated. */
+export const LIB_NONDETERMINISTIC_PREFIXES = [
     ["math.random", "Math.random"],
     ["crypto.random", "crypto randomness"],
     ["date.", "the live clock (Date)"],
@@ -1893,7 +1914,16 @@ const LIB_NONDETERMINISTIC_PREFIXES = [
     ["process.execPath", "process identity"],
     ["process.uptime", "the live clock (process.uptime)"],
     ["process.availableMemory", "machine memory state"],
-    ["process.memoryUsage", "machine memory state"],
+    ["process.constrainedMemory", "machine memory state"],
+    // process.memoryUsage carries NO row: nothing lowers it — no IrLibFn
+    // spelling exists for it, so a prefix here would be dead. If a lowering
+    // ever lands, its spellings must join this table AND the manifest's
+    // ambient projection (the parity test fails until both agree).
+    ["process.rusage", "machine resource usage (process.resourceUsage)"],
+    ["process.cpu", "the process CPU clock (process.cpuUsage)"],
+    ["process.threadCpu", "the thread CPU clock (process.threadCpuUsage)"],
+    ["process.isTTY", "terminal attachment (isTTY)"],
+    ["process.columns", "terminal geometry (columns)"],
     ["process.kill", "process authority (kill)"],
     ["process.umask", "process authority (umask)"],
     ["process.exit", "process authority (exit)"],
@@ -1968,6 +1998,8 @@ export const MAY_THROW_LIB_FNS = new Set([
     // divergence-66 stance).
     "tls.pemDyn",
     "tls.createServerDyn",
+    "tls.createSecureContextDyn",
+    "tls.caCertsChk",
     "tls.createServerDynCb",
     "https.createServerDyn",
     "https.createServerDynCb",
@@ -2031,6 +2063,9 @@ export const MAY_THROW_LIB_FNS = new Set([
     "stream.pipelineDyn",
     "sp.finished",
     "sp.pipeline",
+    "sc.text",
+    "sc.json",
+    "sc.buffer",
     "readable.newDyn",
     "writable.newDyn",
     "duplex.newDyn",
@@ -2043,6 +2078,7 @@ export const MAY_THROW_LIB_FNS = new Set([
     "passthrough.initDyn",
     "readable.push",
     "readable.pushStr",
+    "readable.pushStrEnc",
     "readable.pushNull",
     "readable.pushU",
     "readable.pushDyn",
@@ -2132,6 +2168,11 @@ export const MAY_THROW_LIB_FNS = new Set([
     "dyn.objKeys",
     "dyn.hasOwn",
     "dyn.assign",
+    // variadic Object.assign: spread flattening throws V8's spread-call
+    // TypeErrors; the final copy throws ToObject on a nullish target
+    "dyn.packPushSpread",
+    "dyn.packPushSpreadIter",
+    "dyn.assignAll",
     "dyn.objValues",
     "dyn.objEntries",
     "error.domClone",
@@ -2139,6 +2180,8 @@ export const MAY_THROW_LIB_FNS = new Set([
     // throws Node's catchable SyntaxError at construction.
     "regex.new",
     "dyn.keySet",
+    // the destructuring pack throws V8's TypeError on non-iterable DOM kinds
+    "dyn.iterPack",
     "dyn.toString",
     "dyn.defineProps",
     "process.chdir",
@@ -2174,7 +2217,22 @@ export const MAY_THROW_LIB_FNS = new Set([
     "bytes.compareChk",
     "buffer.newStringFail",
     "fs.toUnixTimestamp",
+    "fs.existsChk",
+    "fs.mkdtempChk",
+    "fs.mkdtempSyncChk",
+    "fs.readFileChk",
+    "fs.opendirChk",
+    "fs.watchFileChk",
+    "fs.lchmodChk",
+    "fs.lchmodSyncChk",
+    "fsp.lchmodChk",
+    "fs.readChk",
+    "fs.streamOptsChk",
+    "net.connectAttempt",
+    "net.connectOptsChk",
+    "net.setAutoSelTimeout",
     "error.argTypeThrow",
+    "error.propTypeThrow",
     "emitter.setMaxChk",
     "emitter.setDefaultMaxChk",
     "fs.readFileSyncBytes",
@@ -2197,6 +2255,7 @@ export const MAY_THROW_LIB_FNS = new Set([
     "dgram.connectCb",
     "dgram.sendStr",
     "dgram.sendBytes",
+    "dgram.sendChk",
     "dgram.address",
     "dgram.close",
     "dgram.closeCb",