@scriptc/compiler 0.1.3 → 0.1.4

package/dist/ir/ir.d.ts

@@ -270,21 +270,21 @@ export type IrType = {
 } | {
     kind: "cryptoHmac";
 }
-/** Heap, refcounted closure. `rest` marks a VARIADIC JS function (a
- * `...args` rest parameter, or a zero-param function body reading
- * `arguments` — test/common's mustCall wrapper): the lifted function
- * takes one extra trailing `ScrDyn *` param — a dyn ARRAY carrying the
- * call's arguments from index params.length on — which the dyn call
- * thunk builds per call. `params` stays the DECLARED (non-rest) list
- * (fn.length semantics). Rest-marked values are only ever CALLED
- * through the dyn boundary (boxed thunks); direct static calls box
- * first (lower-calls). */
+/** Heap, refcounted closure. `rest` marks a variadic function value.
+ * `restAbi: "typed"` spells one trailing typed array in `params`; static
+ * call sites pack their surplus arguments into it before `callValue`.
+ * `restAbi: "jsval"` similarly spells one trailing engine array for an
+ * island host callback. An absent `restAbi` is the legacy checked-dynamic
+ * JS form: `params` stays the declared non-rest list and the lifted
+ * function has one hidden trailing ScrDyn array filled by its boxed call
+ * thunk. The backends therefore still see one fixed native closure ABI;
+ * only the frontend's call completion observes variadic source arity. */
  | {
     kind: "func";
     params: IrType[];
     ret: IrType;
     rest?: true;
-    restAbi?: "jsval";
+    restAbi?: "jsval" | "typed";
 } | {
     kind: "object";
     className: string;
@@ -308,6 +308,15 @@ export type IrType = {
     kind: "classval";
     className: string;
 }
+/** An ECMAScript module namespace object for one statically-known module.
+ * `moduleId` is a canonical compiled source-file or builtin identity.
+ * Runtime representation is an interned immortal string token: identity
+ * is pointer identity, while member reads resolve to live module globals
+ * or builtin lowering tables rather than snapshotting export values. */
+ | {
+    kind: "moduleNs";
+    moduleId: string;
+}
 /** Structural record shape (object literal / interface / type alias over
  * data properties). `shapeId` indexes IrModule.records; the frontend
  * interns shapes structurally, so equal shapeId ⇔ equal shape and
@@ -417,9 +426,9 @@ declare const HANDLE_KIND_LIST: readonly ["stats", "fileHandle", "spawnRes", "ch
 export type HandleKind = typeof HANDLE_KIND_LIST[number];
 export declare const HANDLE_KINDS: IrKindSet<"child" | "childStream" | "childWriter" | "cryptoHash" | "cryptoHmac" | "dgramSocket" | "fileHandle" | "fsWatcher" | "http2Session" | "http2Stream" | "httpClientReq" | "httpReq" | "httpRes" | "netServer" | "netSocket" | "procStream" | "secureCtx" | "spawnRes" | "stats" | "testCtx">;
 /** The IR kinds represented as pointers in both native backends. */
-declare const POINTER_KIND_LIST: readonly ["string", "bigint", "array", "map", "set", "regex", "bytes", "url", "searchParams", "symbol", "stats", "fileHandle", "spawnRes", "child", "netServer", "netSocket", "http2Session", "http2Stream", "dgramSocket", "testCtx", "httpReq", "httpRes", "httpClientReq", "secureCtx", "cryptoHash", "cryptoHmac", "fsWatcher", "childStream", "childWriter", "func", "object", "classval", "record", "union", "dyn", "jsval", "caught", "promise", "generator"];
+declare const POINTER_KIND_LIST: readonly ["string", "bigint", "array", "map", "set", "regex", "bytes", "url", "searchParams", "symbol", "stats", "fileHandle", "spawnRes", "child", "netServer", "netSocket", "http2Session", "http2Stream", "dgramSocket", "testCtx", "httpReq", "httpRes", "httpClientReq", "secureCtx", "cryptoHash", "cryptoHmac", "fsWatcher", "childStream", "childWriter", "func", "object", "classval", "moduleNs", "record", "union", "dyn", "jsval", "caught", "promise", "generator"];
 export type PointerKind = typeof POINTER_KIND_LIST[number];
-export declare const POINTER_KINDS: IrKindSet<"array" | "bigint" | "bytes" | "caught" | "child" | "childStream" | "childWriter" | "classval" | "cryptoHash" | "cryptoHmac" | "dgramSocket" | "dyn" | "fileHandle" | "fsWatcher" | "func" | "generator" | "http2Session" | "http2Stream" | "httpClientReq" | "httpReq" | "httpRes" | "jsval" | "map" | "netServer" | "netSocket" | "object" | "promise" | "record" | "regex" | "searchParams" | "secureCtx" | "set" | "spawnRes" | "stats" | "string" | "symbol" | "testCtx" | "union" | "url">;
+export declare const POINTER_KINDS: IrKindSet<"array" | "bigint" | "bytes" | "caught" | "child" | "childStream" | "childWriter" | "classval" | "cryptoHash" | "cryptoHmac" | "dgramSocket" | "dyn" | "fileHandle" | "fsWatcher" | "func" | "generator" | "http2Session" | "http2Stream" | "httpClientReq" | "httpReq" | "httpRes" | "jsval" | "map" | "moduleNs" | "netServer" | "netSocket" | "object" | "promise" | "record" | "regex" | "searchParams" | "secureCtx" | "set" | "spawnRes" | "stats" | "string" | "symbol" | "testCtx" | "union" | "url">;
 /** Runtime RC symbol stem for each IR type kind. An empty stem means the
  * kind is scalar/unit or uses an emitted per-shape helper (object/record).
  * Keeping this exhaustive makes a new runtime handle kind a compile error
@@ -549,7 +558,7 @@ export declare function typeEquals(a: IrType, b: IrType): boolean;
 export declare function isRefCounted(t: IrType): boolean;
 export interface IrModule {
     /** Bumped on any breaking IR change; serialize.ts refuses mismatches. */
-    irVersion: 9;
+    irVersion: 11;
     sourceFile: string;
     functions: IrFunction[];
     /** Class shapes. Constructors and methods are ordinary module functions
@@ -1783,7 +1792,7 @@ export type IrLibFn =
  * value / string) — both THROW Node's TypeErrors on non-file schemes,
  * encoded slashes, and non-empty hosts. url.pathToFileURL resolves the
  * path (getcwd) and never throws. */
- | "url.new" | "url.protocol" | "url.host" | "url.hostname" | "url.pathname" | "url.href" | "url.fileURLToPathUrl" | "url.fileURLToPathStr" | "url.pathToFileURL"
+ | "url.new" | "url.protocol" | "url.origin" | "url.username" | "url.password" | "url.host" | "url.hostname" | "url.port" | "url.pathname" | "url.href" | "url.fileURLToPathUrl" | "url.fileURLToPathStr" | "url.pathToFileURL"
 /** pathToFileURL under a win32 TARGET: the same scr_url_from_path call
  * (the runtime selects the win32 arm by _WIN32), but a distinct IR name
  * because that arm THROWS for malformed UNC inputs — may-throw seeds on
@@ -1806,7 +1815,7 @@ export type IrLibFn =
  * bools; sp.size/sp.toString are pure reads. sp.keyAt/sp.valAt are
  * the for-of/forEach desugar's index reads (live — the loop re-reads
  * sp.size each pass). */
- | "sp.new" | "sp.parse" | "sp.copy" | "sp.fromPairs" | "sp.with" | "url.searchParams" | "url.search" | "sp.get" | "sp.getAll" | "sp.append" | "sp.set" | "sp.delete" | "sp.deleteValue" | "sp.has" | "sp.hasValue" | "sp.sort" | "sp.size" | "sp.toString" | "sp.keyAt" | "sp.valAt"
+ | "sp.new" | "sp.parse" | "sp.copy" | "sp.fromPairs" | "sp.with" | "url.searchParams" | "url.search" | "url.hash" | "sp.get" | "sp.getAll" | "sp.append" | "sp.set" | "sp.delete" | "sp.deleteValue" | "sp.has" | "sp.hasValue" | "sp.sort" | "sp.size" | "sp.toString" | "sp.keyAt" | "sp.valAt"
 /** node:querystring (scr_qs.c — link-gated by moduleUsesQs; NOT
  * URLSearchParams: the legacy codec's escaping and '+' rules differ).
  * qs.escape is Node's qsEscape, which encodes exactly the component
@@ -1848,10 +1857,10 @@ export type IrLibFn =
  * parse accepts the ECMAScript BigInt string grammar; fromF64 accepts
  * finite integral Numbers. Arithmetic returns fresh immutable values.
  * cmp returns -1/0/1 as f64; toString accepts a numeric radix. */
- | "bigint.parse" | "bigint.fromF64" | "bigint.neg" | "bigint.not" | "bigint.add" | "bigint.sub" | "bigint.mul" | "bigint.div" | "bigint.mod" | "bigint.pow" | "bigint.and" | "bigint.or" | "bigint.xor" | "bigint.shl" | "bigint.shr" | "bigint.eq" | "bigint.cmp" | "bigint.cmpNumber" | "bigint.truthy" | "bigint.toString" | "bigint.inspect" | "bigint.toF64" | "bigint.asUintN" | "bigint.asIntN" | "bigint.bufferRead" | "bigint.bufferWrite" | "bigint.dataViewGet" | "bigint.dataViewSet"
+ | "bigint.parse" | "bigint.fromF64" | "bigint.neg" | "bigint.not" | "bigint.add" | "bigint.sub" | "bigint.mul" | "bigint.div" | "bigint.mod" | "bigint.pow" | "bigint.and" | "bigint.or" | "bigint.xor" | "bigint.shl" | "bigint.shr" | "bigint.eq" | "bigint.eqString" | "bigint.cmp" | "bigint.cmpNumber" | "bigint.truthy" | "bigint.toString" | "bigint.inspect" | "bigint.toF64" | "bigint.asUintN" | "bigint.asIntN" | "bigint.bufferRead" | "bigint.bufferWrite" | "bigint.dataViewGet" | "bigint.dataViewSet"
 /** fs.statSync → a Stats value (may throw, like the other sync fs
  * calls); the stats.* getters are pure reads on it. */
- | "fs.statSync" | "stats.isFile" | "stats.isDirectory" | "stats.size"
+ | "fs.statSync" | "stats.isFile" | "stats.isDirectory" | "stats.size" | "stats.dev" | "stats.ino"
 /** child_process.spawnSync (scr_child.c): posix_spawn + waitpid + piped
  * utf8 capture — cmd borrowed, args one borrowed string[] (the frontend
  * completes an omitted list to an empty literal), result an owned (+1)
@@ -1879,7 +1888,9 @@ export type IrLibFn =
  * cmd/args borrowed; result an owned (+1) child handle. The loop will
  * not exhaust while any spawned child is unreaped — Node's keep-alive.
  *
- * child.onExit / child.onError — `child.on("exit"|"error", cb)`: the
+ * child.onExit / child.onClose / child.onError — terminal listener
+ * registration through child.on/once. Close uses the exit adapter shape
+ * but fires only after every piped stdio handle reaches EOF. The
  * receiver is borrowed, the CALLBACK MOVES into the child's listener
  * registry (released after the terminal event fires, or at reap for
  * the event that never fires). Both are void (chaining is fenced).
@@ -1891,7 +1902,16 @@ export type IrLibFn =
  * shape — scr_error_new needs no program types). "exit" fires once
  * with the code (f64 arm) or null (signal death); "error" fires only
  * for spawn failure, exactly Node's split. */
- | "cp.spawn" | "child.onExit" | "child.onError"
+ | "cp.spawn"
+/** Static-native fork startup and IPC. process.forkTarget initializes a
+ * re-executed child's inherited channel and returns its embedded target id
+ * (-1 in the parent). The remaining entries mirror Node's JSON channel. */
+ | "process.forkTarget" | "cp.fork" | "child.connected" | "child.send" | "child.sendCb" | "child.disconnect" | "child.onMessage" | "child.onDisconnect" | "process.connected" | "process.send" | "process.sendCb" | "process.disconnect" | "process.onMessage" | "process.onDisconnect"
+/** child_process.execFile's callback slice: starts an all-piped child,
+ * captures stdout/stderr, and moves the error-first callback into the
+ * child registry. The callback shape is program-dependent and checked
+ * by the validator/backends. */
+ | "cp.execFile" | "child.onExit" | "child.onClose" | "child.onError"
 /** The ChildProcess lifecycle members (scr_child.c), Node's shapes
  * exactly (SEMANTICS.md has the pinned matrix). child.pid is the
  * checker's `number | undefined` (undefined = spawn failure) and
@@ -1914,12 +1934,14 @@ export type IrLibFn =
  * arm). stream.onData/onEnd register 'data'/'end' listeners (receiver
  * borrowed, CALLBACK MOVES, trailing once-flag, void — chaining
  * fenced): 'data' fires one Buffer chunk per read (zero-param and
- * Buffer-param adapters are runtime-provided; a union-param listener —
+ * Buffer/string adapters are runtime-provided; setEncoding threads
+ * split multibyte sequences through the shared StringDecoder core. A
+ * union-param listener —
  * ngrok's `Buffer | string` — gets a compiler-emitted adapter wrapping
  * the chunk at its Buffer arm), 'end' fires once at EOF, always BEFORE
  * the child's 'exit' (the pinned ordering). A flowing stream keeps the
  * loop alive: usesTimers. */
- | "child.stdout" | "child.stderr" | "stream.onData" | "stream.onEnd"
+ | "child.stdout" | "child.stderr" | "stream.onData" | "stream.onDataStr" | "stream.onEnd" | "stream.childSetEncoding"
 /** The piped-input writer (stdio mode 3 on fd 0). child.stdin answers
  * `Writable | null`; writes copy borrowed data into the nonblocking
  * queue, end/destroy settle it, writable is a pure state read, and
@@ -2071,11 +2093,9 @@ export type IrLibFn =
  * for end-before-head, chunked after an explicit writeHead/write). */
  | "http.createServer"
 /** http.createServer() / http.Server() with no handler — the
- * on("request") route; createServerOpts is the (options[, listener])
- * overload's twin carrying the two lowered parser flags
- * (requireHostHeader: false is already this parser's behavior;
- * joinDuplicateHeaders joins repeated request-header reads ", "). */
- | "http.createServerEmpty" | "http.serverJoinDupHeaders"
+ * on("request") route; option helpers set parser behavior on a fresh
+ * server before the constructor/factory result is returned. */
+ | "http.createServerEmpty" | "http.serverJoinDupHeaders" | "http.serverAllowMissingHostHeader"
 /** The five writable numeric http.Server timeout fields use one
  * selector ABI: 0 timeout, 1 keepAliveTimeout, 2 headersTimeout,
  * 3 requestTimeout, 4 keepAliveTimeoutBuffer. These calls store/read
@@ -2092,9 +2112,9 @@ export type IrLibFn =
  * the callback fires deferred, Node's 'finish' emit). writeHead's
  * statusMessage forms compose in interned helpers: resStatusMsgSet
  * then the ordinary writeHead entry. */
- | "http.resStatusGet" | "http.resStatusSet" | "http.resStatusMsgGet" | "http.resStatusMsgSet" | "http.resGetHeader" | "http.resHasHeader" | "http.resRemoveHeader" | "http.resOnFinish" | "http.reqUrl" | "http.reqMethod" | "http.reqHeader" | "http.reqOnData" | "http.reqOnEnd" | "http.resSetHeader" | "http.resWriteHead" | "http.resWriteHeadN" | "http.resWrite" | "http.resWriteBytes" | "http.resEnd" | "http.resEndStr" | "http.resEndBytes"
+ | "http.resStatusGet" | "http.resStatusSet" | "http.resStatusMsgGet" | "http.resStatusMsgSet" | "http.resGetHeader" | "http.resHasHeader" | "http.resRemoveHeader" | "http.resOnFinish" | "http.reqUrl" | "http.reqMethod" | "http.reqHeader" | "http.reqTrailer" | "http.reqHeaderValues" | "http.reqTrailerValues" | "http.reqOnData" | "http.reqOnEnd" | "http.resSetHeader" | "http.resWriteHead" | "http.resWriteHeadN" | "http.resWrite" | "http.resWriteBytes" | "http.resEnd" | "http.resEndStr" | "http.resEndBytes"
 /** The checked-dynamic chunk twins (the net.sockWriteDyn story). */
- | "http.resWriteDyn" | "http.resEndDyn" | "http.resHeadersSent"
+ | "http.resWriteDyn" | "http.resEndDyn" | "http.resHeadersSent" | "http.resFlushHeaders" | "http.resAddTrailers" | "http.resCork" | "http.resUncork" | "http.resWritableCorked"
 /** The server-surface member follow-ups: reqStatusCode answers the
  * interned `number | undefined` union (negative = the undefined arm —
  * a SERVER request, where Node's statusCode is undefined; every client
@@ -2117,11 +2137,11 @@ export type IrLibFn =
  * line carried none), the undefined arm on server requests (the
  * statusCode split). sockDestroyed is socket.destroyed — true once the
  * fd is gone (destroy() or full close). */
- | "http.reqRawHeaders" | "http.reqStatusMessage"
+ | "http.reqRawHeaders" | "http.reqRawTrailers" | "http.reqStatusMessage"
 /** The `{ ...req.headers }` snapshot feed: [lowercased name, value,
  * ...] pairs in arrival order — the interned %headers.snapshot helper
  * builds the record over it, exactly the process.envPairs pattern. */
- | "http.reqHeaderPairs" | "net.sockDestroyed"
+ | "http.reqHeaderPairs" | "http.reqTrailerPairs" | "net.sockDestroyed"
 /** socket.writable — the write half is open: no end() yet, no FIN sent,
  * fd alive (connecting sockets answer true; writes queue). Node's
  * stream flag. Borrows; never throws. */
@@ -2356,7 +2376,7 @@ export type IrLibFn =
  * idiom reads it through a cast). */
  | "net.sockEncrypted" | "http.clientWrite" | "http.clientWriteBytes" | "http.clientEnd" | "http.clientEndStr" | "http.clientEndBytes"
 /** The checked-dynamic chunk twins (the net.sockWriteDyn story). */
- | "http.clientWriteDyn" | "http.clientEndDyn"
+ | "http.clientWriteDyn" | "http.clientEndDyn" | "http.clientFlushHeaders" | "http.clientAddTrailers" | "http.clientCork" | "http.clientUncork" | "http.clientWritableCorked"
 /** request/get with a URL-STRING first argument: the runtime parses it
  * (WHATWG) and dials — throws catchably on an unparsable input or a
  * non-http scheme. */
@@ -2452,11 +2472,15 @@ export type IrLibFn =
  * pair THROWS catchably on failure exactly like the utf8 forms. */
  | "fs.readFileSyncBytes" | "fs.writeFileSyncBytes" | "fsp.readFileBytes"
 /** node:zlib (scr_zlib.c — native-toolchain.ts compiles/links it ONLY when these
- * appear on the IR, the regex/libcurl gating precedent): deflateSync/
- * inflateSync over u8 bytes with Node's default options. deflate never
- * throws (OOM aborts); inflate of corrupt input THROWS Node's error
- * catchably. */
- | "zlib.deflateSync" | "zlib.inflateSync"
+ * appear on the IR, the regex/libcurl gating precedent): one-shot zlib,
+ * raw-DEFLATE, gzip, and auto-detect codecs over u8 bytes with Node's
+ * default options. Compression never throws (OOM aborts); decompression
+ * of corrupt input THROWS Node's error catchably. */
+ | "zlib.deflateSync" | "zlib.inflateSync" | "zlib.deflateRawSync" | "zlib.inflateRawSync" | "zlib.gzipSync" | "zlib.gunzipSync" | "zlib.unzipSync"
+/** The default-options callback twins run on the executable's shared
+ * native work pool and deliver (Error | null, Buffer) on a later loop
+ * turn. crc32 validates its optional uint32 seed synchronously. */
+ | "zlib.deflateCb" | "zlib.inflateCb" | "zlib.deflateRawCb" | "zlib.inflateRawCb" | "zlib.gzipCb" | "zlib.gunzipCb" | "zlib.unzipCb" | "zlib.crc32"
 /** The Buffer overloads of the raw stream writes — same promptly
  * submitted streams as process.stdoutWrite/stderrWrite, constantly true.
  * The encoding arg is evaluated but ignored for bytes, like Node. The Cb
@@ -2469,7 +2493,12 @@ export type IrLibFn =
  * literal { recursive?, mode? } options (the mkdirSync matrix behind
  * settled promises), unlink, chmod. Failures REJECT (catchable at the
  * await), like the rest of the fsp family. */
- | "fsp.mkdirMode" | "fsp.mkdirRecursive" | "fsp.mkdirRecursiveMode" | "fsp.unlink" | "fsp.chmod" | "fsp.rename" | "fsp.readdir" | "fsp.rm" | "fsp.stat"
+ | "fsp.mkdirMode" | "fsp.mkdirRecursive" | "fsp.mkdirRecursiveMode" | "fsp.unlink" | "fsp.chmod" | "fsp.rename" | "fsp.readdir"
+/** `fs.promises.readdir(path, { withFileTypes: true })` — the settled-
+ * promise twin of fs.readdirTypesSync. The backends assemble the same
+ * call-site-shaped Dirent rows, then move the array into a promise;
+ * scandir failure becomes its rejection. */
+ | "fsp.readdirTypes" | "fsp.rm" | "fsp.stat" | "fsp.realpath" | "fsp.lstat"
 /** fs/promises.open and the statically represented FileHandle surface.
  * Every operation returns an already-settled promise; syscall failures
  * become rejections rather than escaping synchronously. read/write
@@ -2490,7 +2519,11 @@ export type IrLibFn =
  * (the frontend's interned %env.snapshot helper keyed-writes the pairs
  * into a fresh `{ [k: string]: string | undefined }` record). Fresh +1
  * array; never throws. */
- | "process.envPairs" | "process.exit" | "process.cwd"
+ | "process.envPairs" | "process.exit"
+/** Numeric process.exitCode write (integer validation, implicit exit status). */
+ | "process.setExitCode"
+/** The code for process.exit() with no argument, or zero when unset. */
+ | "process.currentExitCode" | "process.cwd"
 /** getpid(2) / getuid(2): zero args → f64. POSIX-only target, so both
  * always answer (the checker's `getuid?` optionality covers Windows —
  * `process.getuid?.()` lowers as the plain call). Never throw. */
@@ -2694,6 +2727,11 @@ export type IrLibFn =
  * render "null"/"undefined") — the WHATWG USVString conversions
  * (URLSearchParams names/values). Borrowed dyn; +1 string. May-throw. */
  | "dyn.toStringCoerce"
+/** JS ToNumber over a dyn value WITH the object protocol (number-hint
+ * valueOf/toString ordering; user throws propagate). Borrowed dyn;
+ * f64 result, or a throw. Used by statically lowered numeric coercions
+ * whose checker type remained any. */
+ | "dyn.toNumberCoerce"
 /** A read of a `declare`d const NOTHING defines (the bundler-define
  * pattern — __VERSION__): always throws the catchable ReferenceError
  * Node raises at the access ("<name> is not defined"). args[0] is the
@@ -2820,7 +2858,7 @@ export type IrLibFn =
  * the had-listeners bool. emitter.emitError: emit('error', err) —
  * throws err when unhandled. count/countFn/names/listeners/getMax/
  * setMax/setDefaultMax/getDefaultMax are the introspection surface. */
- | "emitter.new" | "emitter.ctor" | "emitter.on" | "emitter.off" | "emitter.checkListener" | "emitter.onDyn" | "emitter.offDyn" | "emitter.removeAll" | "emitter.emit" | "emitter.emitError" | "emitter.count" | "emitter.countFn" | "emitter.names" | "emitter.listeners" | "emitter.setMax" | "emitter.getMax"
+ | "emitter.new" | "emitter.ctor" | "emitter.on" | "emitter.off" | "emitter.checkListener" | "emitter.onDyn" | "emitter.onFlex" | "emitter.offDyn" | "emitter.removeAll" | "emitter.emit" | "emitter.emitFlex" | "emitter.emitError" | "emitter.count" | "emitter.countFn" | "emitter.names" | "emitter.listeners" | "emitter.setMax" | "emitter.getMax"
 /** Stream-'data' registration twins of emitter.on/onDyn (same args):
  * chosen at registration sites whose receiver is stream-rooted, so the
  * backend emits DATA thunks — the runtime's 'data' emission carries
@@ -2980,7 +3018,7 @@ export type IrLibFn =
  * the value's inspection) — the frontend routes null/undefined to a
  * no-op and everything else here (Node throws for falsy values too).
  * All arguments are borrowed. */
- | "assert.ok" | "assert.eqF64" | "assert.eqBigInt" | "assert.eqStr" | "assert.eqBool" | "assert.eqSym" | "assert.eqDyn" | "assert.deepResult" | "assert.sameValue" | "assert.deqEnter" | "assert.deqLeave" | "assert.match" | "assert.throwsNone" | "assert.throwsMismatch" | "assert.throwsRegex" | "assert.shapeBegin" | "assert.shapeStr" | "assert.shapeRe" | "assert.shapeEnd" | "assert.regexErrTest" | "assert.unwantedRejection"
+ | "assert.ok" | "assert.eqF64" | "assert.eqBigInt" | "assert.eqStr" | "assert.eqBool" | "assert.eqSym" | "assert.eqDyn" | "assert.looseResult" | "assert.deepResult" | "assert.sameValue" | "assert.deqEnter" | "assert.deqLeave" | "assert.match" | "assert.throwsNone" | "assert.throwsMismatch" | "assert.throwsRegex" | "assert.shapeBegin" | "assert.shapeStr" | "assert.shapeRe" | "assert.shapeEnd" | "assert.regexErrTest" | "assert.unwantedRejection"
 /** Node's expectsError over an error-INSTANCE expected (assert.throws/
  * rejects second argument): walk the expected dyn error's keys (name,
  * message, code — the %error marker skipped) and deep-compare each
@@ -3134,7 +3172,9 @@ export type IrLibFn =
  * ToInteger truncation of fractional ms) and THROWS Node's "Invalid
  * time value" RangeError on NaN / out-of-range input (may-throw seed).
  * Results: f64 / owned (+1) string. */
- | "date.now" | "date.newNow" | "date.newMs" | "date.newString" | "date.getTime" | "date.valueOf" | "date.toISOString" | "date.toISOStringValue" | "date.getFullYear" | "date.getUTCFullYear" | "date.getMonth" | "date.getUTCMonth" | "date.getDate" | "date.getUTCDate" | "date.getDay" | "date.getUTCDay" | "date.getHours" | "date.getUTCHours" | "date.getMinutes" | "date.getUTCMinutes" | "date.getSeconds" | "date.getUTCSeconds" | "date.getMilliseconds" | "date.getUTCMilliseconds" | "date.getTimezoneOffset"
+ | "date.now" | "date.newNow" | "date.newMs" | "date.newString"
+/** Date.parse(dateString), with its own reach witness for exact fences. */
+ | "date.parse" | "date.getTime" | "date.valueOf" | "date.toISOString" | "date.toISOStringValue" | "date.getFullYear" | "date.getUTCFullYear" | "date.getMonth" | "date.getUTCMonth" | "date.getDate" | "date.getUTCDate" | "date.getDay" | "date.getUTCDay" | "date.getHours" | "date.getUTCHours" | "date.getMinutes" | "date.getUTCMinutes" | "date.getSeconds" | "date.getUTCSeconds" | "date.getMilliseconds" | "date.getUTCMilliseconds" | "date.getTimezoneOffset"
 /** The composed `new Date(dateString).getTime()` read: one borrowed
  * string, f64 milliseconds since epoch. The parsed grammar is BOUNDED
  * (documented divergence — V8's parser accepts far more): the ASN.1
@@ -3235,7 +3275,7 @@ export type IrLibFn =
  * uv_fs_copyfile behavior); its errors carry BOTH paths — Node's
  * "copyfile 'src' -> 'dest'". lstatSync is statSync without following
  * a trailing symlink (Node reports lstat); stats.isSymbolicLink /
- * stats.blocks / nlink / atimeMs / mtimeMs are pure reads on the widened
+ * stats.dev / ino / blocks / nlink / atimeMs / mtimeMs / ctimeMs are pure reads on the widened
  * snapshot (blocks is allocated 512-byte units; the times are milliseconds
  * with their sub-second fractions, Node's arithmetic).
  * writeFileModeSync is writeFileSync(path, data, { mode }): the mode
@@ -3248,7 +3288,7 @@ export type IrLibFn =
 /** renameSync is the direct two-path syscall wrapper. renameCb defers
  * the operation to the loop and fires a program-shaped Error | null
  * callback through a backend-emitted adapter. */
- | "fs.renameSync" | "fs.renameCb" | "fs.lstatSync"
+ | "fs.renameSync" | "fs.renameCb" | "fs.lstatSync" | "fs.fstatSync" | "fs.fchmodSync" | "fs.fsyncSync" | "fs.linkSync"
 /** fs.openSync(path, flags) → the raw fd as f64; fs.readSync/fs.writeSync
  * over Buffer windows perform sequential I/O when position is -1 and
  * offset-preserving positioned I/O otherwise; fs.writeStrSync is the
@@ -3259,7 +3299,7 @@ export type IrLibFn =
  * Node's ERR_INVALID_ARG_VALUE TypeError text). All throw Node-shaped
  * fs errors (openSync ENOENT/EACCES..., readSync EBADF/range errors,
  * closeSync EBADF). */
- | "fs.openSync" | "fs.readSync" | "fs.writeSync" | "fs.writeStrSync" | "fs.closeSync"
+ | "fs.openSync" | "fs.openNumericSync" | "fs.readSync" | "fs.writeSync" | "fs.writeStrSync" | "fs.closeSync"
 /** fs.watch(path, listener?) → an FSWatcher handle (scr_watch.c —
  * linked, and scr_watch_install() emitted, only when these appear on
  * the IR; moduleUsesFsWatch is the switch). The path opens NOW —
@@ -3282,7 +3322,7 @@ export type IrLibFn =
  * ASN1_TIME_print shape ("Jul  1 00:00:00 2026 GMT" — %2d space-padded
  * day). Same input contract and PEM error as the fingerprint pair
  * (may-throw). */
- | "crypto.x509ValidFrom" | "crypto.x509ValidFromStr" | "crypto.x509ValidTo" | "crypto.x509ValidToStr" | "stats.isSymbolicLink" | "stats.blocks" | "stats.nlink" | "stats.atimeMs" | "stats.mtimeMs" | "fs.writeFileModeSync" | "fs.mkdirModeSync" | "fs.mkdirRecursiveModeSync"
+ | "crypto.x509ValidFrom" | "crypto.x509ValidFromStr" | "crypto.x509ValidTo" | "crypto.x509ValidToStr" | "stats.isSymbolicLink" | "stats.blocks" | "stats.nlink" | "stats.atimeMs" | "stats.mtimeMs" | "stats.ctimeMs" | "fs.writeFileModeSync" | "fs.mkdirModeSync" | "fs.mkdirRecursiveModeSync"
 /** spawnSync with options (scr_child.c): the cp.spawnSync core plus the
  * option slice portless-class CLIs pass — timeout (killSignal fires at
  * the deadline and the result carries error: ETIMEDOUT + the signal,
@@ -3348,6 +3388,13 @@ export type IrExpr =
     value: string;
     type: IrType;
     loc: SrcLoc;
+}
+/** The singleton namespace token for one compiled or builtin module. */
+ | {
+    kind: "moduleNsRef";
+    moduleId: string;
+    type: IrType;
+    loc: SrcLoc;
 } | {
     kind: "boolLit";
     value: boolean;
@@ -5258,8 +5305,7 @@ export declare function moduleLibNondeterministicSurface(mod: IrModule): string
 /** The may-throw seed: libCall members that can raise. Every fs.* member
  * EXCEPT existsSync (which, like Node's, swallows errors and returns false)
  * throws a catchable error on failure; json.parse throws a catchable
- * SyntaxError-shaped string on malformed input; process.* members never
- * throw. Backends' may-throw analyses must treat a function containing one
+ * SyntaxError-shaped string on malformed input. Backends' may-throw analyses must treat a function containing one
  * of these as throwing, exactly like a `throw` statement (and must ALSO
  * seed on `dynCheck` and `awaitExpr` nodes, which throw on validation
  * failure / promise rejection). */

package/dist/ir/ir.js

@@ -46,6 +46,7 @@ const POINTER_KIND_LIST = [
     "func",
     "object",
     "classval",
+    "moduleNs",
     "record",
     "union",
     "dyn",
@@ -96,6 +97,7 @@ export const RUNTIME_RC_STEMS = {
     func: "scr_closure",
     object: "",
     classval: "scr_classobj",
+    moduleNs: "scr_str",
     record: "",
     union: "scr_union",
     dyn: "scr_dyn",
@@ -137,6 +139,8 @@ export const REF_TRUTHY_KINDS = new Set([
     "generator",
     // A class object is a JS object (constructors are functions): always truthy.
     "classval",
+    // A module namespace object is always truthy.
+    "moduleNs",
 ]);
 export const F64 = { kind: "f64" };
 export const BIGINT_T = { kind: "bigint" };
@@ -205,6 +209,7 @@ export function isSupportedArrayElem(t) {
         case "netServer":
         case "symbol":
         case "classval":
+        case "moduleNs":
             return true;
         default:
             return false;
@@ -369,11 +374,13 @@ export function typeKey(t) {
         case "set":
             return `set<${typeKey(t.elem)}>`;
         case "func":
-            return `func(${[...t.params.map(typeKey), ...(t.rest ? [t.restAbi === "jsval" ? "...jsval[]" : "...dyn[]"] : [])].join(",")})=>${typeKey(t.ret)}`;
+            return `func(${[...t.params.map(typeKey), ...(t.rest ? [t.restAbi === "jsval" ? "...jsval[]" : t.restAbi === "typed" ? "...typed[]" : "...dyn[]"] : [])].join(",")})=>${typeKey(t.ret)}`;
         case "object":
             return `object:${t.className}`;
         case "classval":
             return `classval:${t.className}`;
+        case "moduleNs":
+            return `moduleNs:${t.moduleId}`;
         case "record":
             return `record:${t.shapeId}`;
         case "union":
@@ -403,6 +410,7 @@ export function typeEquals(a, b) {
         return (b.kind === "func" &&
             a.params.length === b.params.length &&
             (a.rest === true) === (b.rest === true) &&
+            a.restAbi === b.restAbi &&
             a.params.every((p, i) => typeEquals(p, b.params[i])) &&
             typeEquals(a.ret, b.ret));
     }
@@ -410,6 +418,8 @@ export function typeEquals(a, b) {
         return b.kind === "object" && a.className === b.className;
     if (a.kind === "classval")
         return b.kind === "classval" && a.className === b.className;
+    if (a.kind === "moduleNs")
+        return b.kind === "moduleNs" && a.moduleId === b.moduleId;
     // The frontend deduplicates shapes structurally (one shapeId per canonical
     // field list), so id equality IS structural equality.
     if (a.kind === "record")
@@ -771,6 +781,7 @@ function isJsonSafeAt(t, getRecord, getUnion, stringify, undefinedAllowed, visit
         case "caught":
         case "promise":
         case "generator":
+        case "moduleNs":
         case "void":
             return false;
         // Record fields drop undefined. Stringification also represents it in
@@ -1081,6 +1092,10 @@ export function canDynCheckTo(t, getRecord, getUnion) {
  * back). */
 export function canBoxFuncIntoDyn(t, getRecord, getUnion) {
     return (t.kind === "func" &&
+        // Only the legacy hidden-dyn rest ABI has a checked-dynamic call thunk.
+        // Typed rest stays static (its trailing array is compiler-packed), and
+        // island rest has its separate engine host-callback adapter.
+        (t.rest !== true || t.restAbi === undefined) &&
         // A jsval (island) param converts through scr_jsval_from_dyn in the
         // thunk (wrapped cells unwrap by reference, dyn data deep-copies) —
         // the checker-'any' callback params of the routed-dispatch lane
@@ -1646,7 +1661,10 @@ export function moduleUsesChildProcess(mod) {
         const node = v;
         if (node.kind === "libCall" &&
             typeof node.fn === "string" &&
-            (node.fn.startsWith("cp.") || node.fn.startsWith("child.") || node.fn.startsWith("writer.") || node.fn.startsWith("spawnRes."))) {
+            (node.fn.startsWith("cp.") || node.fn.startsWith("child.") || node.fn.startsWith("writer.") || node.fn.startsWith("spawnRes.") ||
+                node.fn === "process.forkTarget" || node.fn === "process.connected" || node.fn === "process.send" ||
+                node.fn === "process.sendCb" || node.fn === "process.disconnect" || node.fn === "process.onMessage" ||
+                node.fn === "process.onDisconnect")) {
             found = true;
             return;
         }
@@ -2097,6 +2115,13 @@ const LIB_MODE_REFUSED_PREFIXES = [
     // exclude — refuse the surface like the rest of the event-loop family.
     ["fs.existsChk", "the async fs callback surface (fs.exists)"],
     ["fs.renameCb", "the async fs callback surface (fs.rename)"],
+    ["zlib.deflateCb", "the async node:zlib callback surface"],
+    ["zlib.inflateCb", "the async node:zlib callback surface"],
+    ["zlib.deflateRawCb", "the async node:zlib callback surface"],
+    ["zlib.inflateRawCb", "the async node:zlib callback surface"],
+    ["zlib.gzipCb", "the async node:zlib callback surface"],
+    ["zlib.gunzipCb", "the async node:zlib callback surface"],
+    ["zlib.unzipCb", "the async node:zlib callback surface"],
     ["process.stdoutWriteBytesCb", "process.stdout.write completion callbacks"],
     ["process.stderrWriteBytesCb", "process.stderr.write completion callbacks"],
     ["timers.", "the timers surface (setTimeout family)"],
@@ -2280,6 +2305,7 @@ export const LIB_NONDETERMINISTIC_PREFIXES = [
     ["process.kill", "process authority (kill)"],
     ["process.umask", "process authority (umask)"],
     ["process.exit", "process authority (exit)"],
+    ["process.setExitCode", "process authority (exit status)"],
     ["fs.", "the filesystem"],
     ["os.", "machine/OS identity"],
     // The CA-store surface reads the host's certificate bundle (and the
@@ -2317,8 +2343,7 @@ export function moduleLibNondeterministicSurface(mod) {
 /** The may-throw seed: libCall members that can raise. Every fs.* member
  * EXCEPT existsSync (which, like Node's, swallows errors and returns false)
  * throws a catchable error on failure; json.parse throws a catchable
- * SyntaxError-shaped string on malformed input; process.* members never
- * throw. Backends' may-throw analyses must treat a function containing one
+ * SyntaxError-shaped string on malformed input. Backends' may-throw analyses must treat a function containing one
  * of these as throwing, exactly like a `throw` statement (and must ALSO
  * seed on `dynCheck` and `awaitExpr` nodes, which throw on validation
  * failure / promise rejection). */
@@ -2397,11 +2422,13 @@ export const MAY_THROW_LIB_FNS = new Set([
     // any of them can throw. emitError additionally THROWS its payload when
     // 'error' has no listener, Node's unhandled-'error' contract.
     "emitter.emit",
+    "emitter.emitFlex",
     "emitter.emitError",
     "emitter.on",
     "emitter.off",
     "emitter.checkListener",
     "emitter.onDyn",
+    "emitter.onFlex",
     "emitter.offDyn",
     "emitter.onData",
     "emitter.onDataDyn",
@@ -2414,8 +2441,27 @@ export const MAY_THROW_LIB_FNS = new Set([
     "net.sockEndDyn",
     "http.resWriteDyn",
     "http.resEndDyn",
+    "http.resAddTrailers",
+    "http.resFlushHeaders",
+    "http.resUncork",
+    "http.resWriteHead",
+    "http.resWriteHeadN",
+    "http.resWriteHeadPairs",
+    "http.resWrite",
+    "http.resWriteBytes",
+    "http.resEnd",
+    "http.resEndStr",
+    "http.resEndBytes",
     "http.clientWriteDyn",
     "http.clientEndDyn",
+    "http.clientAddTrailers",
+    "http.clientFlushHeaders",
+    "http.clientUncork",
+    "http.clientWrite",
+    "http.clientWriteBytes",
+    "http.clientEnd",
+    "http.clientEndStr",
+    "http.clientEndBytes",
     // The URL-string client form throws catchably on an unparsable input
     // ("Invalid URL") or a non-http scheme (ERR_INVALID_PROTOCOL).
     "http.requestUrl",
@@ -2495,6 +2541,7 @@ export const MAY_THROW_LIB_FNS = new Set([
     "http.requestConnCb",
     "process.kill",
     "process.killNum",
+    "process.setExitCode",
     // cpuUsage(prev)'s field validation: negative/non-finite prev fields
     // throw Node's ERR_INVALID_ARG_VALUE RangeError, catchably.
     "process.cpuPrevValidate",
@@ -2511,6 +2558,8 @@ export const MAY_THROW_LIB_FNS = new Set([
     "error.nodeThrow",
     // USVString coercion runs user toString/valueOf — throws propagate.
     "dyn.toStringCoerce",
+    // Numeric coercion runs user valueOf/toString — throws propagate.
+    "dyn.toNumberCoerce",
     "child.kill",
     // The caller's lookup runs synchronously inside the connect call — a
     // throw there propagates like Node's.
@@ -2662,6 +2711,10 @@ export const MAY_THROW_LIB_FNS = new Set([
     "fs.readFileSyncBytes",
     "fs.writeFileSyncBytes",
     "zlib.inflateSync",
+    "zlib.inflateRawSync",
+    "zlib.gunzipSync",
+    "zlib.unzipSync",
+    "zlib.crc32",
     "date.toISOString",
     "date.toISOStringValue",
     "fs.mkdirRecursiveSync",
@@ -2694,6 +2747,7 @@ export const MAY_THROW_LIB_FNS = new Set([
     "assert.eqBool",
     "assert.eqSym",
     "assert.eqDyn",
+    "assert.looseResult",
     "assert.deepResult",
     "assert.match",
     "assert.refEqBytes",
@@ -2719,10 +2773,15 @@ export const MAY_THROW_LIB_FNS = new Set([
     "fs.copyFileSync",
     "fs.renameSync",
     "fs.lstatSync",
+    "fs.fstatSync",
+    "fs.fchmodSync",
+    "fs.fsyncSync",
+    "fs.linkSync",
     "fs.writeFileModeSync",
     "fs.mkdirModeSync",
     "fs.mkdirRecursiveModeSync",
     "fs.openSync",
+    "fs.openNumericSync",
     "fs.readSync",
     "fs.writeSync",
     "fs.writeStrSync",