@scriptc/compiler 0.1.2 → 0.1.4

package/dist/ir/ir.d.ts

@@ -12,6 +12,14 @@ export type IrBytesElem = "u8" | "u32" | "i32" | "f32";
 export type IrType = {
     kind: "f64";
 }
+/** An ECMAScript bigint primitive. Runtime values are immutable,
+ * arbitrary-precision signed integers (ScrBigInt) whose numeric value,
+ * not pointer identity, defines equality. The heap representation is an
+ * implementation detail: bigint remains a JS primitive for truthiness,
+ * typeof, comparison, inspection, and container semantics. */
+ | {
+    kind: "bigint";
+}
 /** The supported ES Date value slice: a scalar TimeClip'd millisecond
  * value. Getters and toISOString observe only this slot, so copying it
  * through locals/params/fields is exact while Date mutation and object
@@ -216,6 +224,13 @@ export type IrType = {
  | {
     kind: "childStream";
 }
+/** A piped child-input stream (child.stdin — spawn with a piped stdin
+ * slot; scr_child.c). Heap, refcounted, and mutable: writes queue into
+ * the platform pipe without blocking the JavaScript thread, and
+ * drain/finish/error listeners drop when the writer settles. */
+ | {
+    kind: "childWriter";
+}
 /** A process output stream as a FIRST-CLASS value (process.stdout /
  * process.stderr flowing into a `NodeJS.WritableStream` slot — the
  * prefixStream idiom). Representation is the raw FD as a double (1 or
@@ -245,21 +260,31 @@ export type IrType = {
  | {
     kind: "secureCtx";
 }
-/** Heap, refcounted closure. `rest` marks a VARIADIC JS function (a
- * `...args` rest parameter, or a zero-param function body reading
- * `arguments` — test/common's mustCall wrapper): the lifted function
- * takes one extra trailing `ScrDyn *` param — a dyn ARRAY carrying the
- * call's arguments from index params.length on — which the dyn call
- * thunk builds per call. `params` stays the DECLARED (non-rest) list
- * (fn.length semantics). Rest-marked values are only ever CALLED
- * through the dyn boundary (boxed thunks); direct static calls box
- * first (lower-calls). */
+/** A node:crypto Hash or Hmac handle (scr_lib.c): heap, refcounted,
+ * MUTABLE until digest(), then permanently finalized. The two TypeScript
+ * surfaces share one runtime representation but stay distinct IR kinds so
+ * Hash.copy() cannot accidentally appear on Hmac values. The incremental
+ * digest state owns no script values and cannot participate in a cycle. */
+ | {
+    kind: "cryptoHash";
+} | {
+    kind: "cryptoHmac";
+}
+/** Heap, refcounted closure. `rest` marks a variadic function value.
+ * `restAbi: "typed"` spells one trailing typed array in `params`; static
+ * call sites pack their surplus arguments into it before `callValue`.
+ * `restAbi: "jsval"` similarly spells one trailing engine array for an
+ * island host callback. An absent `restAbi` is the legacy checked-dynamic
+ * JS form: `params` stays the declared non-rest list and the lifted
+ * function has one hidden trailing ScrDyn array filled by its boxed call
+ * thunk. The backends therefore still see one fixed native closure ABI;
+ * only the frontend's call completion observes variadic source arity. */
  | {
     kind: "func";
     params: IrType[];
     ret: IrType;
     rest?: true;
-    restAbi?: "jsval";
+    restAbi?: "jsval" | "typed";
 } | {
     kind: "object";
     className: string;
@@ -283,6 +308,15 @@ export type IrType = {
     kind: "classval";
     className: string;
 }
+/** An ECMAScript module namespace object for one statically-known module.
+ * `moduleId` is a canonical compiled source-file or builtin identity.
+ * Runtime representation is an interned immortal string token: identity
+ * is pointer identity, while member reads resolve to live module globals
+ * or builtin lowering tables rather than snapshotting export values. */
+ | {
+    kind: "moduleNs";
+    moduleId: string;
+}
 /** Structural record shape (object literal / interface / type alias over
  * data properties). `shapeId` indexes IrModule.records; the frontend
  * interns shapes structurally, so equal shapeId ⇔ equal shape and
@@ -388,13 +422,13 @@ interface IrKindSet<K extends IrType["kind"]> extends ReadonlySet<IrType["kind"]
 }
 /** The opaque runtime handle kinds. procStream is the one scalar handle;
  * every other handle has pointer representation. */
-declare const HANDLE_KIND_LIST: readonly ["stats", "fileHandle", "spawnRes", "child", "netServer", "netSocket", "http2Session", "http2Stream", "dgramSocket", "testCtx", "httpReq", "httpRes", "httpClientReq", "secureCtx", "fsWatcher", "childStream", "procStream"];
+declare const HANDLE_KIND_LIST: readonly ["stats", "fileHandle", "spawnRes", "child", "netServer", "netSocket", "http2Session", "http2Stream", "dgramSocket", "testCtx", "httpReq", "httpRes", "httpClientReq", "secureCtx", "cryptoHash", "cryptoHmac", "fsWatcher", "childStream", "childWriter", "procStream"];
 export type HandleKind = typeof HANDLE_KIND_LIST[number];
-export declare const HANDLE_KINDS: IrKindSet<"child" | "childStream" | "dgramSocket" | "fileHandle" | "fsWatcher" | "http2Session" | "http2Stream" | "httpClientReq" | "httpReq" | "httpRes" | "netServer" | "netSocket" | "procStream" | "secureCtx" | "spawnRes" | "stats" | "testCtx">;
+export declare const HANDLE_KINDS: IrKindSet<"child" | "childStream" | "childWriter" | "cryptoHash" | "cryptoHmac" | "dgramSocket" | "fileHandle" | "fsWatcher" | "http2Session" | "http2Stream" | "httpClientReq" | "httpReq" | "httpRes" | "netServer" | "netSocket" | "procStream" | "secureCtx" | "spawnRes" | "stats" | "testCtx">;
 /** The IR kinds represented as pointers in both native backends. */
-declare const POINTER_KIND_LIST: readonly ["string", "array", "map", "set", "regex", "bytes", "url", "searchParams", "symbol", "stats", "fileHandle", "spawnRes", "child", "netServer", "netSocket", "http2Session", "http2Stream", "dgramSocket", "testCtx", "httpReq", "httpRes", "httpClientReq", "secureCtx", "fsWatcher", "childStream", "func", "object", "classval", "record", "union", "dyn", "jsval", "caught", "promise", "generator"];
+declare const POINTER_KIND_LIST: readonly ["string", "bigint", "array", "map", "set", "regex", "bytes", "url", "searchParams", "symbol", "stats", "fileHandle", "spawnRes", "child", "netServer", "netSocket", "http2Session", "http2Stream", "dgramSocket", "testCtx", "httpReq", "httpRes", "httpClientReq", "secureCtx", "cryptoHash", "cryptoHmac", "fsWatcher", "childStream", "childWriter", "func", "object", "classval", "moduleNs", "record", "union", "dyn", "jsval", "caught", "promise", "generator"];
 export type PointerKind = typeof POINTER_KIND_LIST[number];
-export declare const POINTER_KINDS: IrKindSet<"array" | "bytes" | "caught" | "child" | "childStream" | "classval" | "dgramSocket" | "dyn" | "fileHandle" | "fsWatcher" | "func" | "generator" | "http2Session" | "http2Stream" | "httpClientReq" | "httpReq" | "httpRes" | "jsval" | "map" | "netServer" | "netSocket" | "object" | "promise" | "record" | "regex" | "searchParams" | "secureCtx" | "set" | "spawnRes" | "stats" | "string" | "symbol" | "testCtx" | "union" | "url">;
+export declare const POINTER_KINDS: IrKindSet<"array" | "bigint" | "bytes" | "caught" | "child" | "childStream" | "childWriter" | "classval" | "cryptoHash" | "cryptoHmac" | "dgramSocket" | "dyn" | "fileHandle" | "fsWatcher" | "func" | "generator" | "http2Session" | "http2Stream" | "httpClientReq" | "httpReq" | "httpRes" | "jsval" | "map" | "moduleNs" | "netServer" | "netSocket" | "object" | "promise" | "record" | "regex" | "searchParams" | "secureCtx" | "set" | "spawnRes" | "stats" | "string" | "symbol" | "testCtx" | "union" | "url">;
 /** Runtime RC symbol stem for each IR type kind. An empty stem means the
  * kind is scalar/unit or uses an emitted per-shape helper (object/record).
  * Keeping this exhaustive makes a new runtime handle kind a compile error
@@ -409,6 +443,7 @@ export declare function runtimeRcStem(t: IrType): string | null;
  * arms with `true`. */
 export declare const REF_TRUTHY_KINDS: ReadonlySet<string>;
 export declare const F64: IrType;
+export declare const BIGINT_T: IrType;
 export declare const DATE_T: IrType;
 export declare const BYTES_U8: IrType;
 export declare const STRING: IrType;
@@ -431,8 +466,11 @@ export declare const HTTPREQ_T: IrType;
 export declare const HTTPRES_T: IrType;
 export declare const HTTPCLIENTREQ_T: IrType;
 export declare const SECURECTX_T: IrType;
+export declare const CRYPTOHASH_T: IrType;
+export declare const CRYPTOHMAC_T: IrType;
 export declare const FSWATCHER_T: IrType;
 export declare const CHILDSTREAM_T: IrType;
+export declare const CHILDWRITER_T: IrType;
 export declare const PROCSTREAM_T: IrType;
 export declare const VOID: IrType;
 export declare const DYN: IrType;
@@ -520,7 +558,7 @@ export declare function typeEquals(a: IrType, b: IrType): boolean;
 export declare function isRefCounted(t: IrType): boolean;
 export interface IrModule {
     /** Bumped on any breaking IR change; serialize.ts refuses mismatches. */
-    irVersion: 8;
+    irVersion: 11;
     sourceFile: string;
     functions: IrFunction[];
     /** Class shapes. Constructors and methods are ordinary module functions
@@ -1754,7 +1792,7 @@ export type IrLibFn =
  * value / string) — both THROW Node's TypeErrors on non-file schemes,
  * encoded slashes, and non-empty hosts. url.pathToFileURL resolves the
  * path (getcwd) and never throws. */
- | "url.new" | "url.protocol" | "url.host" | "url.hostname" | "url.pathname" | "url.href" | "url.fileURLToPathUrl" | "url.fileURLToPathStr" | "url.pathToFileURL"
+ | "url.new" | "url.protocol" | "url.origin" | "url.username" | "url.password" | "url.host" | "url.hostname" | "url.port" | "url.pathname" | "url.href" | "url.fileURLToPathUrl" | "url.fileURLToPathStr" | "url.pathToFileURL"
 /** pathToFileURL under a win32 TARGET: the same scr_url_from_path call
  * (the runtime selects the win32 arm by _WIN32), but a distinct IR name
  * because that arm THROWS for malformed UNC inputs — may-throw seeds on
@@ -1777,7 +1815,7 @@ export type IrLibFn =
  * bools; sp.size/sp.toString are pure reads. sp.keyAt/sp.valAt are
  * the for-of/forEach desugar's index reads (live — the loop re-reads
  * sp.size each pass). */
- | "sp.new" | "sp.parse" | "sp.copy" | "sp.fromPairs" | "sp.with" | "url.searchParams" | "url.search" | "sp.get" | "sp.getAll" | "sp.append" | "sp.set" | "sp.delete" | "sp.deleteValue" | "sp.has" | "sp.hasValue" | "sp.sort" | "sp.size" | "sp.toString" | "sp.keyAt" | "sp.valAt"
+ | "sp.new" | "sp.parse" | "sp.copy" | "sp.fromPairs" | "sp.with" | "url.searchParams" | "url.search" | "url.hash" | "sp.get" | "sp.getAll" | "sp.append" | "sp.set" | "sp.delete" | "sp.deleteValue" | "sp.has" | "sp.hasValue" | "sp.sort" | "sp.size" | "sp.toString" | "sp.keyAt" | "sp.valAt"
 /** node:querystring (scr_qs.c — link-gated by moduleUsesQs; NOT
  * URLSearchParams: the legacy codec's escaping and '+' rules differ).
  * qs.escape is Node's qsEscape, which encodes exactly the component
@@ -1815,9 +1853,14 @@ export type IrLibFn =
  * (the runtime returns +1-or-NULL; the backend builds the union arms —
  * the child.stdout pattern). None of these throw. */
  | "sym.new" | "sym.newAnon" | "sym.for" | "sym.keyFor" | "sym.desc" | "sym.toString"
+/** Engine-free arbitrary-precision bigint operations (scr_bigint.c).
+ * parse accepts the ECMAScript BigInt string grammar; fromF64 accepts
+ * finite integral Numbers. Arithmetic returns fresh immutable values.
+ * cmp returns -1/0/1 as f64; toString accepts a numeric radix. */
+ | "bigint.parse" | "bigint.fromF64" | "bigint.neg" | "bigint.not" | "bigint.add" | "bigint.sub" | "bigint.mul" | "bigint.div" | "bigint.mod" | "bigint.pow" | "bigint.and" | "bigint.or" | "bigint.xor" | "bigint.shl" | "bigint.shr" | "bigint.eq" | "bigint.eqString" | "bigint.cmp" | "bigint.cmpNumber" | "bigint.truthy" | "bigint.toString" | "bigint.inspect" | "bigint.toF64" | "bigint.asUintN" | "bigint.asIntN" | "bigint.bufferRead" | "bigint.bufferWrite" | "bigint.dataViewGet" | "bigint.dataViewSet"
 /** fs.statSync → a Stats value (may throw, like the other sync fs
  * calls); the stats.* getters are pure reads on it. */
- | "fs.statSync" | "stats.isFile" | "stats.isDirectory" | "stats.size"
+ | "fs.statSync" | "stats.isFile" | "stats.isDirectory" | "stats.size" | "stats.dev" | "stats.ino"
 /** child_process.spawnSync (scr_child.c): posix_spawn + waitpid + piped
  * utf8 capture — cmd borrowed, args one borrowed string[] (the frontend
  * completes an omitted list to an empty literal), result an owned (+1)
@@ -1836,17 +1879,18 @@ export type IrLibFn =
  * the backend (the envGet convention). Never throws. */
  | "spawnRes.error"
 /** child_process.spawn (scr_child.c + the scr_async.c loop): posix_spawnp
- * with stdio "ignore" (all three fds on /dev/null — the only supported
- * stdio; "pipe"/"inherit" are frontend-fenced), the child registered
- * with the event loop, which polls waitpid(WNOHANG) at quiescence like
- * timers (kqueue is the follow-up; SEMANTICS.md documents the polling).
+ * with per-slot ignore/inherit/pipe modes (and number output fds), the
+ * all-piped Node default, and the child registered with the event loop,
+ * which polls waitpid(WNOHANG) at quiescence like timers.
  * NEVER throws: spawn failure defers to the "error" event, Node-exact
  * (the error message is Node's "spawn <cmd> <ERRNO-NAME>"; an "error"
  * event with no listener prints it and exits 1 like an EventEmitter).
  * cmd/args borrowed; result an owned (+1) child handle. The loop will
  * not exhaust while any spawned child is unreaped — Node's keep-alive.
  *
- * child.onExit / child.onError — `child.on("exit"|"error", cb)`: the
+ * child.onExit / child.onClose / child.onError — terminal listener
+ * registration through child.on/once. Close uses the exit adapter shape
+ * but fires only after every piped stdio handle reaches EOF. The
  * receiver is borrowed, the CALLBACK MOVES into the child's listener
  * registry (released after the terminal event fires, or at reap for
  * the event that never fires). Both are void (chaining is fenced).
@@ -1858,7 +1902,16 @@ export type IrLibFn =
  * shape — scr_error_new needs no program types). "exit" fires once
  * with the code (f64 arm) or null (signal death); "error" fires only
  * for spawn failure, exactly Node's split. */
- | "cp.spawn" | "child.onExit" | "child.onError"
+ | "cp.spawn"
+/** Static-native fork startup and IPC. process.forkTarget initializes a
+ * re-executed child's inherited channel and returns its embedded target id
+ * (-1 in the parent). The remaining entries mirror Node's JSON channel. */
+ | "process.forkTarget" | "cp.fork" | "child.connected" | "child.send" | "child.sendCb" | "child.disconnect" | "child.onMessage" | "child.onDisconnect" | "process.connected" | "process.send" | "process.sendCb" | "process.disconnect" | "process.onMessage" | "process.onDisconnect"
+/** child_process.execFile's callback slice: starts an all-piped child,
+ * captures stdout/stderr, and moves the error-first callback into the
+ * child registry. The callback shape is program-dependent and checked
+ * by the validator/backends. */
+ | "cp.execFile" | "child.onExit" | "child.onClose" | "child.onError"
 /** The ChildProcess lifecycle members (scr_child.c), Node's shapes
  * exactly (SEMANTICS.md has the pinned matrix). child.pid is the
  * checker's `number | undefined` (undefined = spawn failure) and
@@ -1881,12 +1934,19 @@ export type IrLibFn =
  * arm). stream.onData/onEnd register 'data'/'end' listeners (receiver
  * borrowed, CALLBACK MOVES, trailing once-flag, void — chaining
  * fenced): 'data' fires one Buffer chunk per read (zero-param and
- * Buffer-param adapters are runtime-provided; a union-param listener —
+ * Buffer/string adapters are runtime-provided; setEncoding threads
+ * split multibyte sequences through the shared StringDecoder core. A
+ * union-param listener —
  * ngrok's `Buffer | string` — gets a compiler-emitted adapter wrapping
  * the chunk at its Buffer arm), 'end' fires once at EOF, always BEFORE
  * the child's 'exit' (the pinned ordering). A flowing stream keeps the
  * loop alive: usesTimers. */
- | "child.stdout" | "child.stderr" | "stream.onData" | "stream.onEnd"
+ | "child.stdout" | "child.stderr" | "stream.onData" | "stream.onDataStr" | "stream.onEnd" | "stream.childSetEncoding"
+/** The piped-input writer (stdio mode 3 on fd 0). child.stdin answers
+ * `Writable | null`; writes copy borrowed data into the nonblocking
+ * queue, end/destroy settle it, writable is a pure state read, and
+ * listener callbacks move into the writer registry. */
+ | "child.stdin" | "writer.writeString" | "writer.writeBytes" | "writer.end" | "writer.destroy" | "writer.writable" | "writer.onDrain" | "writer.onFinish" | "writer.onError"
 /** The first-class WritableStream write (`output.write(line)` — the
  * prefixStream idiom): the receiver IS the fd scalar (process.stdout/
  * stderr reads mint 1/2), dispatched onto the exact stdoutWrite/
@@ -2033,11 +2093,9 @@ export type IrLibFn =
  * for end-before-head, chunked after an explicit writeHead/write). */
  | "http.createServer"
 /** http.createServer() / http.Server() with no handler — the
- * on("request") route; createServerOpts is the (options[, listener])
- * overload's twin carrying the two lowered parser flags
- * (requireHostHeader: false is already this parser's behavior;
- * joinDuplicateHeaders joins repeated request-header reads ", "). */
- | "http.createServerEmpty" | "http.serverJoinDupHeaders"
+ * on("request") route; option helpers set parser behavior on a fresh
+ * server before the constructor/factory result is returned. */
+ | "http.createServerEmpty" | "http.serverJoinDupHeaders" | "http.serverAllowMissingHostHeader"
 /** The five writable numeric http.Server timeout fields use one
  * selector ABI: 0 timeout, 1 keepAliveTimeout, 2 headersTimeout,
  * 3 requestTimeout, 4 keepAliveTimeoutBuffer. These calls store/read
@@ -2054,9 +2112,9 @@ export type IrLibFn =
  * the callback fires deferred, Node's 'finish' emit). writeHead's
  * statusMessage forms compose in interned helpers: resStatusMsgSet
  * then the ordinary writeHead entry. */
- | "http.resStatusGet" | "http.resStatusSet" | "http.resStatusMsgGet" | "http.resStatusMsgSet" | "http.resGetHeader" | "http.resHasHeader" | "http.resRemoveHeader" | "http.resOnFinish" | "http.reqUrl" | "http.reqMethod" | "http.reqHeader" | "http.reqOnData" | "http.reqOnEnd" | "http.resSetHeader" | "http.resWriteHead" | "http.resWriteHeadN" | "http.resWrite" | "http.resWriteBytes" | "http.resEnd" | "http.resEndStr" | "http.resEndBytes"
+ | "http.resStatusGet" | "http.resStatusSet" | "http.resStatusMsgGet" | "http.resStatusMsgSet" | "http.resGetHeader" | "http.resHasHeader" | "http.resRemoveHeader" | "http.resOnFinish" | "http.reqUrl" | "http.reqMethod" | "http.reqHeader" | "http.reqTrailer" | "http.reqHeaderValues" | "http.reqTrailerValues" | "http.reqOnData" | "http.reqOnEnd" | "http.resSetHeader" | "http.resWriteHead" | "http.resWriteHeadN" | "http.resWrite" | "http.resWriteBytes" | "http.resEnd" | "http.resEndStr" | "http.resEndBytes"
 /** The checked-dynamic chunk twins (the net.sockWriteDyn story). */
- | "http.resWriteDyn" | "http.resEndDyn" | "http.resHeadersSent"
+ | "http.resWriteDyn" | "http.resEndDyn" | "http.resHeadersSent" | "http.resFlushHeaders" | "http.resAddTrailers" | "http.resCork" | "http.resUncork" | "http.resWritableCorked"
 /** The server-surface member follow-ups: reqStatusCode answers the
  * interned `number | undefined` union (negative = the undefined arm —
  * a SERVER request, where Node's statusCode is undefined; every client
@@ -2079,11 +2137,11 @@ export type IrLibFn =
  * line carried none), the undefined arm on server requests (the
  * statusCode split). sockDestroyed is socket.destroyed — true once the
  * fd is gone (destroy() or full close). */
- | "http.reqRawHeaders" | "http.reqStatusMessage"
+ | "http.reqRawHeaders" | "http.reqRawTrailers" | "http.reqStatusMessage"
 /** The `{ ...req.headers }` snapshot feed: [lowercased name, value,
  * ...] pairs in arrival order — the interned %headers.snapshot helper
  * builds the record over it, exactly the process.envPairs pattern. */
- | "http.reqHeaderPairs" | "net.sockDestroyed"
+ | "http.reqHeaderPairs" | "http.reqTrailerPairs" | "net.sockDestroyed"
 /** socket.writable — the write half is open: no end() yet, no FIN sent,
  * fd alive (connecting sockets answer true; writes queue). Node's
  * stream flag. Borrows; never throws. */
@@ -2318,7 +2376,7 @@ export type IrLibFn =
  * idiom reads it through a cast). */
  | "net.sockEncrypted" | "http.clientWrite" | "http.clientWriteBytes" | "http.clientEnd" | "http.clientEndStr" | "http.clientEndBytes"
 /** The checked-dynamic chunk twins (the net.sockWriteDyn story). */
- | "http.clientWriteDyn" | "http.clientEndDyn"
+ | "http.clientWriteDyn" | "http.clientEndDyn" | "http.clientFlushHeaders" | "http.clientAddTrailers" | "http.clientCork" | "http.clientUncork" | "http.clientWritableCorked"
 /** request/get with a URL-STRING first argument: the runtime parses it
  * (WHATWG) and dials — throws catchably on an unparsable input or a
  * non-http scheme. */
@@ -2329,18 +2387,19 @@ export type IrLibFn =
  * these are in the may-throw seed. readFile is utf8-fenced like
  * readFileSync. The non-interleaving divergence is documented in
  * SEMANTICS.md. */
-/** node:crypto, the string-producing slice: randomUUID (never throws)
- * and the COMPOSED randomBytes(n).toString("hex"|"base64") — one
- * libCall, the Buffer never escapes (bare randomBytes is fenced).
- * randomBytesToString THROWS Node's RangeError on out-of-range sizes. */
+/** node:crypto randomness: randomUUID plus randomBytes as either a real
+ * Buffer or the fused randomBytes(n).toString("hex"|"base64") path.
+ * The size-taking forms throw Node's RangeError on invalid values. */
  | "crypto.randomUUID" | "crypto.randomBytesToString"
-/** The COMPOSED hash chain createHash(alg).update(data).digest(enc)
- * fused into one call — the Hash handle never materializes. Args are
- * (alg, data, enc); alg is "sha256" | "sha1" and enc "hex" | "base64",
- * both compile-time literals (frontend-fenced). Strings hash their
- * UTF-8 bytes (Node's default input encoding); the bytes form hashes a
- * Buffer/typed array's bytes. Pure; never throw. */
+/** The fused createHash(alg).update(data).digest(enc) fast path and the
+ * one-shot crypto.hash implementation. First-class Hash/Hmac handles use
+ * the entries below; all paths share the incremental runtime core. */
  | "crypto.hashDigestStr" | "crypto.hashDigestBytes"
+/** First-class static Hash/Hmac handles. Constructors validate the
+ * runtime algorithm string (md5/sha1/sha256); update returns the same
+ * handle by retained identity, copy snapshots Hash state, and digest
+ * finalizes the handle and returns either a Buffer or encoded string. */
+ | "crypto.hashNew" | "crypto.hmacNewStr" | "crypto.hmacNewBytes" | "crypto.hashUpdateStr" | "crypto.hashUpdateBytes" | "crypto.hmacUpdateStr" | "crypto.hmacUpdateBytes" | "crypto.hashCopy" | "crypto.hashDigestString" | "crypto.hashDigestBuffer" | "crypto.hmacDigestString" | "crypto.hmacDigestBuffer" | "crypto.timingSafeEqual" | "crypto.randomFill" | "crypto.randomFillRest" | "crypto.randomInt" | "crypto.pbkdf2" | "crypto.randomBytesCb" | "crypto.pbkdf2Cb"
 /** crypto.randomBytes(n) → a real u8 Buffer (+1). THROWS Node's
  * RangeError on out-of-range sizes, exactly like the composed
  * randomBytesToString (which keeps its one-libCall lowering — the two
@@ -2413,11 +2472,15 @@ export type IrLibFn =
  * pair THROWS catchably on failure exactly like the utf8 forms. */
  | "fs.readFileSyncBytes" | "fs.writeFileSyncBytes" | "fsp.readFileBytes"
 /** node:zlib (scr_zlib.c — native-toolchain.ts compiles/links it ONLY when these
- * appear on the IR, the regex/libcurl gating precedent): deflateSync/
- * inflateSync over u8 bytes with Node's default options. deflate never
- * throws (OOM aborts); inflate of corrupt input THROWS Node's error
- * catchably. */
- | "zlib.deflateSync" | "zlib.inflateSync"
+ * appear on the IR, the regex/libcurl gating precedent): one-shot zlib,
+ * raw-DEFLATE, gzip, and auto-detect codecs over u8 bytes with Node's
+ * default options. Compression never throws (OOM aborts); decompression
+ * of corrupt input THROWS Node's error catchably. */
+ | "zlib.deflateSync" | "zlib.inflateSync" | "zlib.deflateRawSync" | "zlib.inflateRawSync" | "zlib.gzipSync" | "zlib.gunzipSync" | "zlib.unzipSync"
+/** The default-options callback twins run on the executable's shared
+ * native work pool and deliver (Error | null, Buffer) on a later loop
+ * turn. crc32 validates its optional uint32 seed synchronously. */
+ | "zlib.deflateCb" | "zlib.inflateCb" | "zlib.deflateRawCb" | "zlib.inflateRawCb" | "zlib.gzipCb" | "zlib.gunzipCb" | "zlib.unzipCb" | "zlib.crc32"
 /** The Buffer overloads of the raw stream writes — same promptly
  * submitted streams as process.stdoutWrite/stderrWrite, constantly true.
  * The encoding arg is evaluated but ignored for bytes, like Node. The Cb
@@ -2430,7 +2493,12 @@ export type IrLibFn =
  * literal { recursive?, mode? } options (the mkdirSync matrix behind
  * settled promises), unlink, chmod. Failures REJECT (catchable at the
  * await), like the rest of the fsp family. */
- | "fsp.mkdirMode" | "fsp.mkdirRecursive" | "fsp.mkdirRecursiveMode" | "fsp.unlink" | "fsp.chmod" | "fsp.rename" | "fsp.readdir" | "fsp.rm" | "fsp.stat"
+ | "fsp.mkdirMode" | "fsp.mkdirRecursive" | "fsp.mkdirRecursiveMode" | "fsp.unlink" | "fsp.chmod" | "fsp.rename" | "fsp.readdir"
+/** `fs.promises.readdir(path, { withFileTypes: true })` — the settled-
+ * promise twin of fs.readdirTypesSync. The backends assemble the same
+ * call-site-shaped Dirent rows, then move the array into a promise;
+ * scandir failure becomes its rejection. */
+ | "fsp.readdirTypes" | "fsp.rm" | "fsp.stat" | "fsp.realpath" | "fsp.lstat"
 /** fs/promises.open and the statically represented FileHandle surface.
  * Every operation returns an already-settled promise; syscall failures
  * become rejections rather than escaping synchronously. read/write
@@ -2451,7 +2519,11 @@ export type IrLibFn =
  * (the frontend's interned %env.snapshot helper keyed-writes the pairs
  * into a fresh `{ [k: string]: string | undefined }` record). Fresh +1
  * array; never throws. */
- | "process.envPairs" | "process.exit" | "process.cwd"
+ | "process.envPairs" | "process.exit"
+/** Numeric process.exitCode write (integer validation, implicit exit status). */
+ | "process.setExitCode"
+/** The code for process.exit() with no argument, or zero when unset. */
+ | "process.currentExitCode" | "process.cwd"
 /** getpid(2) / getuid(2): zero args → f64. POSIX-only target, so both
  * always answer (the checker's `getuid?` optionality covers Windows —
  * `process.getuid?.()` lowers as the plain call). Never throw. */
@@ -2655,6 +2727,11 @@ export type IrLibFn =
  * render "null"/"undefined") — the WHATWG USVString conversions
  * (URLSearchParams names/values). Borrowed dyn; +1 string. May-throw. */
  | "dyn.toStringCoerce"
+/** JS ToNumber over a dyn value WITH the object protocol (number-hint
+ * valueOf/toString ordering; user throws propagate). Borrowed dyn;
+ * f64 result, or a throw. Used by statically lowered numeric coercions
+ * whose checker type remained any. */
+ | "dyn.toNumberCoerce"
 /** A read of a `declare`d const NOTHING defines (the bundler-define
  * pattern — __VERSION__): always throws the catchable ReferenceError
  * Node raises at the access ("<name> is not defined"). args[0] is the
@@ -2781,7 +2858,7 @@ export type IrLibFn =
  * the had-listeners bool. emitter.emitError: emit('error', err) —
  * throws err when unhandled. count/countFn/names/listeners/getMax/
  * setMax/setDefaultMax/getDefaultMax are the introspection surface. */
- | "emitter.new" | "emitter.ctor" | "emitter.on" | "emitter.off" | "emitter.checkListener" | "emitter.onDyn" | "emitter.offDyn" | "emitter.removeAll" | "emitter.emit" | "emitter.emitError" | "emitter.count" | "emitter.countFn" | "emitter.names" | "emitter.listeners" | "emitter.setMax" | "emitter.getMax"
+ | "emitter.new" | "emitter.ctor" | "emitter.on" | "emitter.off" | "emitter.checkListener" | "emitter.onDyn" | "emitter.onFlex" | "emitter.offDyn" | "emitter.removeAll" | "emitter.emit" | "emitter.emitFlex" | "emitter.emitError" | "emitter.count" | "emitter.countFn" | "emitter.names" | "emitter.listeners" | "emitter.setMax" | "emitter.getMax"
 /** Stream-'data' registration twins of emitter.on/onDyn (same args):
  * chosen at registration sites whose receiver is stream-rooted, so the
  * backend emits DATA thunks — the runtime's 'data' emission carries
@@ -2894,8 +2971,8 @@ export type IrLibFn =
  *
  * assert.ok: (pass, message) — the frontend computed the truthiness AND
  * the full message (the user's, or the compile-time source-text form —
- * assert.fail lowers here too with pass=false). assert.eqF64/eqStr/
- * eqBool: (a, b, negated, deep, msg, hasMsg) — Object.is comparison,
+ * assert.fail lowers here too with pass=false). assert.eqF64/eqBigInt/
+ * eqStr/eqBool: (a, b, negated, deep, msg, hasMsg) — Object.is comparison,
  * covering strictEqual/notStrictEqual and the scalar deepStrictEqual
  * pair; msg is a typed dummy ("" literal) when hasMsg is false (Node
  * distinguishes an omitted message from an empty one per operator).
@@ -2941,7 +3018,7 @@ export type IrLibFn =
  * the value's inspection) — the frontend routes null/undefined to a
  * no-op and everything else here (Node throws for falsy values too).
  * All arguments are borrowed. */
- | "assert.ok" | "assert.eqF64" | "assert.eqStr" | "assert.eqBool" | "assert.eqSym" | "assert.eqDyn" | "assert.deepResult" | "assert.sameValue" | "assert.deqEnter" | "assert.deqLeave" | "assert.match" | "assert.throwsNone" | "assert.throwsMismatch" | "assert.throwsRegex" | "assert.shapeBegin" | "assert.shapeStr" | "assert.shapeRe" | "assert.shapeEnd" | "assert.regexErrTest" | "assert.unwantedRejection"
+ | "assert.ok" | "assert.eqF64" | "assert.eqBigInt" | "assert.eqStr" | "assert.eqBool" | "assert.eqSym" | "assert.eqDyn" | "assert.looseResult" | "assert.deepResult" | "assert.sameValue" | "assert.deqEnter" | "assert.deqLeave" | "assert.match" | "assert.throwsNone" | "assert.throwsMismatch" | "assert.throwsRegex" | "assert.shapeBegin" | "assert.shapeStr" | "assert.shapeRe" | "assert.shapeEnd" | "assert.regexErrTest" | "assert.unwantedRejection"
 /** Node's expectsError over an error-INSTANCE expected (assert.throws/
  * rejects second argument): walk the expected dyn error's keys (name,
  * message, code — the %error marker skipped) and deep-compare each
@@ -3095,7 +3172,9 @@ export type IrLibFn =
  * ToInteger truncation of fractional ms) and THROWS Node's "Invalid
  * time value" RangeError on NaN / out-of-range input (may-throw seed).
  * Results: f64 / owned (+1) string. */
- | "date.now" | "date.newNow" | "date.newMs" | "date.newString" | "date.getTime" | "date.valueOf" | "date.toISOString" | "date.toISOStringValue" | "date.getFullYear" | "date.getUTCFullYear" | "date.getMonth" | "date.getUTCMonth" | "date.getDate" | "date.getUTCDate" | "date.getDay" | "date.getUTCDay" | "date.getHours" | "date.getUTCHours" | "date.getMinutes" | "date.getUTCMinutes" | "date.getSeconds" | "date.getUTCSeconds" | "date.getMilliseconds" | "date.getUTCMilliseconds" | "date.getTimezoneOffset"
+ | "date.now" | "date.newNow" | "date.newMs" | "date.newString"
+/** Date.parse(dateString), with its own reach witness for exact fences. */
+ | "date.parse" | "date.getTime" | "date.valueOf" | "date.toISOString" | "date.toISOStringValue" | "date.getFullYear" | "date.getUTCFullYear" | "date.getMonth" | "date.getUTCMonth" | "date.getDate" | "date.getUTCDate" | "date.getDay" | "date.getUTCDay" | "date.getHours" | "date.getUTCHours" | "date.getMinutes" | "date.getUTCMinutes" | "date.getSeconds" | "date.getUTCSeconds" | "date.getMilliseconds" | "date.getUTCMilliseconds" | "date.getTimezoneOffset"
 /** The composed `new Date(dateString).getTime()` read: one borrowed
  * string, f64 milliseconds since epoch. The parsed grammar is BOUNDED
  * (documented divergence — V8's parser accepts far more): the ASN.1
@@ -3196,7 +3275,7 @@ export type IrLibFn =
  * uv_fs_copyfile behavior); its errors carry BOTH paths — Node's
  * "copyfile 'src' -> 'dest'". lstatSync is statSync without following
  * a trailing symlink (Node reports lstat); stats.isSymbolicLink /
- * stats.blocks / nlink / atimeMs / mtimeMs are pure reads on the widened
+ * stats.dev / ino / blocks / nlink / atimeMs / mtimeMs / ctimeMs are pure reads on the widened
  * snapshot (blocks is allocated 512-byte units; the times are milliseconds
  * with their sub-second fractions, Node's arithmetic).
  * writeFileModeSync is writeFileSync(path, data, { mode }): the mode
@@ -3209,7 +3288,7 @@ export type IrLibFn =
 /** renameSync is the direct two-path syscall wrapper. renameCb defers
  * the operation to the loop and fires a program-shaped Error | null
  * callback through a backend-emitted adapter. */
- | "fs.renameSync" | "fs.renameCb" | "fs.lstatSync"
+ | "fs.renameSync" | "fs.renameCb" | "fs.lstatSync" | "fs.fstatSync" | "fs.fchmodSync" | "fs.fsyncSync" | "fs.linkSync"
 /** fs.openSync(path, flags) → the raw fd as f64; fs.readSync/fs.writeSync
  * over Buffer windows perform sequential I/O when position is -1 and
  * offset-preserving positioned I/O otherwise; fs.writeStrSync is the
@@ -3220,7 +3299,7 @@ export type IrLibFn =
  * Node's ERR_INVALID_ARG_VALUE TypeError text). All throw Node-shaped
  * fs errors (openSync ENOENT/EACCES..., readSync EBADF/range errors,
  * closeSync EBADF). */
- | "fs.openSync" | "fs.readSync" | "fs.writeSync" | "fs.writeStrSync" | "fs.closeSync"
+ | "fs.openSync" | "fs.openNumericSync" | "fs.readSync" | "fs.writeSync" | "fs.writeStrSync" | "fs.closeSync"
 /** fs.watch(path, listener?) → an FSWatcher handle (scr_watch.c —
  * linked, and scr_watch_install() emitted, only when these appear on
  * the IR; moduleUsesFsWatch is the switch). The path opens NOW —
@@ -3243,7 +3322,7 @@ export type IrLibFn =
  * ASN1_TIME_print shape ("Jul  1 00:00:00 2026 GMT" — %2d space-padded
  * day). Same input contract and PEM error as the fingerprint pair
  * (may-throw). */
- | "crypto.x509ValidFrom" | "crypto.x509ValidFromStr" | "crypto.x509ValidTo" | "crypto.x509ValidToStr" | "stats.isSymbolicLink" | "stats.blocks" | "stats.nlink" | "stats.atimeMs" | "stats.mtimeMs" | "fs.writeFileModeSync" | "fs.mkdirModeSync" | "fs.mkdirRecursiveModeSync"
+ | "crypto.x509ValidFrom" | "crypto.x509ValidFromStr" | "crypto.x509ValidTo" | "crypto.x509ValidToStr" | "stats.isSymbolicLink" | "stats.blocks" | "stats.nlink" | "stats.atimeMs" | "stats.mtimeMs" | "stats.ctimeMs" | "fs.writeFileModeSync" | "fs.mkdirModeSync" | "fs.mkdirRecursiveModeSync"
 /** spawnSync with options (scr_child.c): the cp.spawnSync core plus the
  * option slice portless-class CLIs pass — timeout (killSignal fires at
  * the deadline and the result carries error: ETIMEDOUT + the signal,
@@ -3309,6 +3388,13 @@ export type IrExpr =
     value: string;
     type: IrType;
     loc: SrcLoc;
+}
+/** The singleton namespace token for one compiled or builtin module. */
+ | {
+    kind: "moduleNsRef";
+    moduleId: string;
+    type: IrType;
+    loc: SrcLoc;
 } | {
     kind: "boolLit";
     value: boolean;
@@ -3400,8 +3486,8 @@ export type IrExpr =
     type: IrType;
     loc: SrcLoc;
 }
-/** JS ToBoolean: f64 is false iff 0, -0, or NaN; string is false iff empty.
- * Operand is f64|string (bool needs no conversion) or a UNION — the ARM
+/** JS ToBoolean: f64 is false iff 0, -0, or NaN; string is false iff empty;
+ * dyn asks its runtime kind. The other operand form is a UNION — the ARM
  * value's ToBoolean via a per-union interned helper (unit arms false;
  * f64/string/bool arms per-value; ref arms — arrays, records, objects,
  * functions, maps, sets, promises, ... — always true; jsval arms ask the
@@ -5124,6 +5210,10 @@ export declare function moduleUsesNet(mod: IrModule): boolean;
  * fence still emits release calls that need the unit linked. Symbol-free
  * programs pay zero bytes and keep their exact link line. */
 export declare function moduleUsesSymbol(mod: IrModule): boolean;
+/** True when bigint runtime operations or bigint-typed storage appears in
+ * the IR. The type check keeps retain/release references link-safe even
+ * when a producing statement was replaced by a runtime fence. */
+export declare function moduleUsesBigInt(mod: IrModule): boolean;
 /** True when the module uses the URLSearchParams surface — sp.* libCalls,
  * the url.searchParams getter, or a searchParams-kind type anywhere on
  * the IR (a fenced statement can leave a typed local whose release call
@@ -5215,8 +5305,7 @@ export declare function moduleLibNondeterministicSurface(mod: IrModule): string
 /** The may-throw seed: libCall members that can raise. Every fs.* member
  * EXCEPT existsSync (which, like Node's, swallows errors and returns false)
  * throws a catchable error on failure; json.parse throws a catchable
- * SyntaxError-shaped string on malformed input; process.* members never
- * throw. Backends' may-throw analyses must treat a function containing one
+ * SyntaxError-shaped string on malformed input. Backends' may-throw analyses must treat a function containing one
  * of these as throwing, exactly like a `throw` statement (and must ALSO
  * seed on `dynCheck` and `awaitExpr` nodes, which throw on validation
  * failure / promise rejection). */