@scriptc/compiler 0.2.1 → 0.2.3

package/dist/ir/ir.d.ts

@@ -805,6 +805,10 @@ export interface IrClassDef {
     prototypeDataHelper?: string;
     /** Native instance to its actual prototype, including factory captures and subclasses. */
     instancePrototypeHelper?: string;
+    /** Public JavaScript fields record their creation in the shared property
+     * bag. Its descriptors preserve presence and insertion order independently
+     * of native layout order; field values remain in their native slots. */
+    tracksOwnFields?: boolean;
     /** Stable module symbol identities for public instance layout fields. */
     symbolFields?: {
         field: string;
@@ -991,6 +995,9 @@ export interface IrFunction {
     /** Original TS name (mangling is a backend concern). Lifted lambdas get
      * synthetic '%'-prefixed names ('%' can't appear in a TS identifier). */
     name: string;
+    /** Generated reflection dispatch contains speculative source-member edges.
+     * Target-only host operations behind those edges retain runtime refusals. */
+    speculativeDispatch?: boolean;
     params: IrParam[];
     returnType: IrType;
     /** All locals including params, pre-collected and scope-flat: ids are
@@ -1455,7 +1462,7 @@ export type IrSetIntrinsicMethod = "add" | "has" | "delete" | "size" | "clear" |
  * halves become U+FFFD, divergence 2). `padStart`/`padEnd` take (target
  * length, fill) — the frontend completes an omitted fill to " ", Node's
  * default. `trimStart`/`trimEnd` are trim's one-sided halves. */
-export type IrStrIntrinsicMethod = "length" | "charCodeAt" | "charAt" | "indexOf" | "includes" | "startsWith" | "endsWith" | "slice" | "substring" | "repeat" | "trim" | "trimStart" | "trimEnd" | "split" | "padStart" | "padEnd" | "toLowerCase" | "toUpperCase" | "isWellFormed" | "toWellFormed" | "cpAt";
+export type IrStrIntrinsicMethod = "length" | "charCodeAt" | "charAt" | "indexOf" | "includes" | "startsWith" | "endsWith" | "slice" | "substring" | "repeat" | "trim" | "trimStart" | "trimEnd" | "split" | "padStart" | "padEnd" | "toLowerCase" | "toUpperCase" | "normalize" | "isWellFormed" | "toWellFormed" | "cpAt";
 /** The typed-array/Buffer method surface (bytesIntrinsic). Receiver/arg
  * conventions (validated): `length`/`byteLength` are property reads → f64;
  * `get` takes one f64 index → f64 (trap on any invalid index, like
@@ -1602,7 +1609,7 @@ export type IrLibFn = "ffi.argument" | "ffi.memoryModule" | "intl.segmenterNew"
  * answers once the response head arrives; the response body readers
  * consume the native body stream. AbortSignal and ReadableStream values
  * are opaque checked-dynamic handles. */
- | "fetch.start" | "fetch.input" | "fetch.function" | "fetch.requestNew" | "fetch.headersNew" | "fetch.responseNew" | "fetch.responseArrayBuffer" | "fetch.responseJson" | "fetch.responseText" | "fetch.responseBytes" | "fetch.abortControllerNew" | "fetch.abortTimeout" | "fetch.abortNow" | "fetch.abortAny" | "fetch.webIs" | "fetch.streamIs" | "fetch.streamNew" | "fetch.streamFrom" | "fetch.readerRead" | "island.eval"
+ | "fetch.start" | "fetch.input" | "fetch.function" | "fetch.requestNew" | "fetch.headersNew" | "fetch.responseNew" | "fetch.responseArrayBuffer" | "fetch.responseJson" | "fetch.responseText" | "fetch.responseBytes" | "fetch.abortControllerNew" | "fetch.abortTimeout" | "fetch.abortNow" | "fetch.abortAny" | "abort.controllerNew" | "abort.timeout" | "abort.now" | "abort.any" | "fetch.webIs" | "fetch.streamIs" | "fetch.streamNew" | "fetch.streamFrom" | "fetch.readerRead" | "island.eval"
 /** Load an embedded npm package's runtime entry in the island (cached by
  * the engine's module registry) and take one export: args are the entry
  * KEY (an embedded module's key, from IrModule.embedded) and the export
@@ -1676,7 +1683,7 @@ export type IrLibFn = "ffi.argument" | "ffi.memoryModule" | "intl.segmenterNew"
  * descriptors and non-object targets/descriptors throw catchably
  * (Node's TypeError texts; accessors the loud unsupported Error). In
  * the may-throw seed set. */
- | "dyn.defineProps" | "dyn.defineProperty" | "dyn.getOwnPropertyDescriptor" | "dyn.arrayProtoCall"
+ | "dyn.defineProps" | "dyn.defineProperty" | "dyn.getOwnPropertyDescriptor" | "dyn.arrayProtoCall" | "dyn.promiseAll"
 /** Bare `typeof v` on a dyn value AS A STRING (arg: the dyn value,
  * borrowed; result: an owned string) — the dyn kind's JS answer:
  * undefined→"undefined", null/object/array/bytes→"object" (JS's oldest
@@ -1859,14 +1866,21 @@ export type IrLibFn = "ffi.argument" | "ffi.memoryModule" | "intl.segmenterNew"
  * result is constant true there). Borrows the name; never throws. */
  | "process.envUnset"
 /** node:url + the URL class (scr_url.c). url.new parses one absolute
- * URL string into an immutable URL value (+1) — invalid input THROWS a
+ * URL string into a mutable URL value (+1) — invalid input THROWS a
  * catchable TypeError ("Invalid URL"), like Node's constructor. The
  * getters (borrowed receiver, +1 string) never throw; url.href doubles
  * as toString(). fileURLToPath has one libFn per receiver form (URL
  * value / string) — both THROW Node's TypeErrors on non-file schemes,
  * encoded slashes, and non-empty hosts. url.pathToFileURL resolves the
  * path (getcwd) and never throws. */
- | "url.new" | "url.newBase" | "url.protocol" | "url.origin" | "url.username" | "url.password" | "url.host" | "url.hostname" | "url.port" | "url.pathname" | "url.href" | "url.fileURLToPathUrl" | "url.fileURLToPathChecked" | "url.fileURLToPathStr" | "url.pathToFileURL"
+ | "url.new" | "url.newBase"
+/** Factories consume already-converted input/base strings. canParse
+ * answers a boolean; parse returns a checked native URL or null (+1).
+ * Parser failures are suppressed; conversion occurs before these calls. */
+ | "url.canParse" | "url.canParseBase" | "url.parse" | "url.parseBase" | "url.protocol" | "url.origin" | "url.username" | "url.password" | "url.host" | "url.hostname" | "url.port" | "url.pathname" | "url.href"
+/** Selected component writes borrow the receiver and converted string.
+ * href replaces its parsed fields while retaining cached params identity. */
+ | "url.set" | "url.setChecked" | "url.fileURLToPathUrl" | "url.fileURLToPathChecked" | "url.fileURLToPathOptions" | "url.fileURLToPathBuffer" | "url.pathToFileURLChecked" | "url.fileURLToPathStr" | "url.pathToFileURL"
 /** Explicit path syntax from the options.windows argument, independent
  * of the executable's host platform. Windows UNC input can throw. */
  | "url.pathToFileURLPlatform"
@@ -1919,7 +1933,7 @@ export type IrLibFn = "ffi.argument" | "ffi.memoryModule" | "intl.segmenterNew"
  * checked-dynamic ParsedResults tree out. Statically typed member reads
  * validate their values when leaving that tree. The native parser may
  * throw Node's coded validation/grammar TypeErrors. */
- | "util.parseArgs"
+ | "util.parseArgs" | "util.parseEnv" | "util.getSystemErrorName" | "util.getSystemErrorMessage" | "util.systemErrorEntries" | "util.stripVTControlCharacters" | "util.toUSVString" | "util.isDeepStrictEqual" | "util.styleText" | "util.typeIs" | "util.typeValue"
 /** ES Symbol values (scr_symbol.c — link-gated by moduleUsesSymbol).
  * sym.new: `Symbol(desc)` — a fresh runtime-unique identity (+1) whose
  * one arg is the description string (borrowed); sym.newAnon is the
@@ -2478,10 +2492,10 @@ export type IrLibFn = "ffi.argument" | "ffi.memoryModule" | "intl.segmenterNew"
  * the entries below; all paths share the incremental runtime core. */
  | "crypto.hashDigestStr" | "crypto.hashDigestBytes"
 /** First-class static Hash/Hmac handles. Constructors validate the
- * runtime algorithm string (md5/sha1/sha256); update returns the same
+ * runtime algorithm string (MD5, SHA-1, or SHA-2); update returns the same
  * handle by retained identity, copy snapshots Hash state, and digest
  * finalizes the handle and returns either a Buffer or encoded string. */
- | "crypto.native" | "crypto.hashNew" | "crypto.hmacNewStr" | "crypto.hmacNewBytes" | "crypto.hashUpdateStr" | "crypto.hashUpdateBytes" | "crypto.hmacUpdateStr" | "crypto.hmacUpdateBytes" | "crypto.hashCopy" | "crypto.hashDigestString" | "crypto.hashDigestBuffer" | "crypto.hmacDigestString" | "crypto.hmacDigestBuffer" | "crypto.timingSafeEqual" | "crypto.randomFill" | "crypto.randomFillRest" | "crypto.randomInt" | "crypto.pbkdf2" | "crypto.randomBytesCb" | "crypto.pbkdf2Cb"
+ | "crypto.native" | "crypto.hashNew" | "crypto.hmacNewStr" | "crypto.hmacNewBytes" | "crypto.hashUpdateStr" | "crypto.hashUpdateBytes" | "crypto.hmacUpdateStr" | "crypto.hmacUpdateBytes" | "crypto.hashCopy" | "crypto.hashDigestString" | "crypto.hashDigestBuffer" | "crypto.hmacDigestString" | "crypto.hmacDigestBuffer" | "crypto.timingSafeEqual" | "crypto.randomFill" | "crypto.randomFillRest" | "crypto.randomInt" | "crypto.pbkdf2" | "crypto.randomBytesCb" | "crypto.pbkdf2Cb" | "crypto.hkdf" | "crypto.hkdfCb" | "crypto.scrypt" | "crypto.scryptCb"
 /** crypto.randomBytes(n) → a real u8 Buffer (+1). THROWS Node's
  * RangeError on out-of-range sizes, exactly like the composed
  * randomBytesToString (which keeps its one-libCall lowering — the two
@@ -2584,7 +2598,7 @@ export type IrLibFn = "ffi.argument" | "ffi.memoryModule" | "intl.segmenterNew"
  * literal { recursive?, mode? } options (the mkdirSync matrix behind
  * settled promises), unlink, chmod. Failures REJECT (catchable at the
  * await), like the rest of the fsp family. */
- | "fsp.mkdirMode" | "fsp.mkdirRecursive" | "fsp.mkdirRecursiveMode" | "fsp.unlink" | "fsp.chmod" | "fsp.rename" | "fsp.readdir"
+ | "fsp.mkdirMode" | "fsp.mkdirRecursive" | "fsp.mkdirRecursiveMode" | "fsp.unlink" | "fsp.chmod" | "fsp.link" | "fsp.symlink" | "fsp.readlink" | "fsp.statfs" | "fsp.readlinkStr" | "fsp.readlinkBuffer" | "fsp.utimes" | "fsp.lutimes" | "fsp.rename" | "fsp.readdir"
 /** `fs.promises.readdir(path, { withFileTypes: true })` — the settled-
  * promise twin of fs.readdirTypesSync. The backends assemble the same
  * call-site-shaped Dirent rows, then move the array into a promise;
@@ -2595,7 +2609,7 @@ export type IrLibFn = "ffi.argument" | "ffi.memoryModule" | "intl.segmenterNew"
  * become rejections rather than escaping synchronously. read/write
  * results are call-site record shapes ({ bytesRead/bytesWritten,
  * buffer }) assembled by the backends around the fixed runtime ABI. */
- | "fsp.open" | "fileHandle.fd" | "fileHandle.close" | "fileHandle.read" | "fileHandle.writeBytes" | "fileHandle.writeStr" | "fileHandle.readFile" | "fileHandle.readFileBytes" | "fileHandle.writeFile" | "fileHandle.writeFileBytes" | "fileHandle.stat" | "process.argv" | "process.platform"
+ | "fsp.open" | "fileHandle.fd" | "fileHandle.close" | "fileHandle.sync" | "fileHandle.datasync" | "fileHandle.truncate" | "fileHandle.chmod" | "fileHandle.utimes" | "fileHandle.readv" | "fileHandle.writev" | "fileHandle.read" | "fileHandle.writeBytes" | "fileHandle.writeStr" | "fileHandle.readFile" | "fileHandle.readFileBytes" | "fileHandle.writeFile" | "fileHandle.writeFileBytes" | "fileHandle.stat" | "process.argv" | "process.platform"
 /** getenv(3): one string key arg → the interned `string | undefined`
  * union (present: +1 string wrapped into the string arm; absent: the
  * interned undefined-arm instance). BOTH source forms — `process.env.FOO`
@@ -2648,7 +2662,7 @@ export type IrLibFn = "ffi.argument" | "ffi.memoryModule" | "intl.segmenterNew"
  | "process.umask"
 /** chdir(2) — throws Node's fs-shaped error (ENOENT/EACCES/ENOTDIR,
  * syscall "chdir") on failure. */
- | "process.chdir"
+ | "process.chdir" | "process.loadEnvFile"
 /** process._exiting: true once the exit sequence began (exit listeners
  * running) — the runtime flag scr_run_exit_listeners/process.exit set.
  * Never throws. */
@@ -2908,14 +2922,14 @@ export type IrLibFn = "ffi.argument" | "ffi.memoryModule" | "intl.segmenterNew"
  * drives the real iterator protocol, whose failure describes the VALUE
  * ("object null is not iterable (cannot read property
  * Symbol(Symbol.iterator))"). The frontend picks by position. */
- | "dyn.packPushSpreadIter" | "dyn.assignAll" | "dyn.reflectApply"
+ | "dyn.packPushSpreadIter" | "dyn.assignAll" | "dyn.reflectApply" | "dyn.reflectGet" | "dyn.reflectSet" | "dyn.reflectDefine" | "dyn.abstractEq"
 /** `Object.create(null)` (scr_json.c): a fresh NULL-PROTOTYPE dyn
  * dictionary. The checked-dynamic tree's OBJ dispatch is already own-member-only —
  * Node's null-proto answer — so the flag's whole job is the observations
  * that SEE the prototype: inspect's "[Object: null prototype]" prefix
  * and deepStrictEqual's prototype gate. Never throws. Static builds
  * only; --dynamic routes Object.create through the engine instead. */
- | "dyn.objCreateNullProto" | "dyn.arrayPrototype" | "dyn.objectPrototype" | "dyn.functionApply" | "dyn.builtinMethod" | "dyn.classPrototype" | "dyn.classBasePrototype" | "dyn.classInherit" | "dyn.classSuper" | "dyn.assignPrototype" | "dyn.objCreate" | "dyn.objCreateWithProperties" | "dyn.getPrototype" | "dyn.setPrototype" | "dyn.getOwnPropertyNames" | "dyn.ownKeys" | "dyn.getOwnPropertySymbols" | "dyn.getOwnPropertyDescriptors" | "dyn.preventExtensions" | "dyn.isExtensible" | "dyn.seal" | "dyn.isSealed" | "dyn.objValues" | "dyn.objEntries"
+ | "dyn.objCreateNullProto" | "dyn.arrayPrototype" | "dyn.arrayConstructor" | "dyn.objectPrototype" | "dyn.functionApply" | "dyn.builtinMethod" | "dyn.classPrototype" | "dyn.classBasePrototype" | "dyn.classInherit" | "dyn.classSuper" | "dyn.assignPrototype" | "dyn.definePrototypeProps" | "dyn.bagGet" | "dyn.bagSet" | "dyn.objCreate" | "dyn.objCreateWithProperties" | "dyn.getPrototype" | "dyn.setPrototype" | "dyn.getOwnPropertyNames" | "dyn.ownKeys" | "dyn.getOwnPropertySymbols" | "dyn.getOwnPropertyDescriptors" | "dyn.preventExtensions" | "dyn.isExtensible" | "dyn.seal" | "dyn.isSealed" | "dyn.objValues" | "dyn.objEntries"
 /** structuredClone over the checked-dynamic tree (scr_json.c): the JSON-safe subset plus
  * bytes (a fresh copy — a Buffer clones as a plain Uint8Array, like
  * Node), deep. Functions and handle kinds throw the spec's catchable
@@ -3122,7 +3136,7 @@ export type IrLibFn = "ffi.argument" | "ffi.memoryModule" | "intl.segmenterNew"
  * the value's inspection) — the frontend routes null/undefined to a
  * no-op and everything else here (Node throws for falsy values too).
  * All arguments are borrowed. */
- | "assert.ok" | "assert.eqF64" | "assert.eqBigInt" | "assert.eqStr" | "assert.eqBool" | "assert.eqSym" | "assert.eqDyn" | "assert.looseResult" | "assert.deepResult" | "assert.sameValue" | "assert.deqEnter" | "assert.deqLeave" | "assert.match" | "assert.throwsNone" | "assert.throwsMismatch" | "assert.throwsRegex" | "assert.shapeBegin" | "assert.shapeStr" | "assert.shapeRe" | "assert.shapeEnd" | "assert.regexErrTest" | "assert.unwantedRejection"
+ | "assert.ok" | "assert.eqF64" | "assert.eqBigInt" | "assert.eqStr" | "assert.eqBool" | "assert.eqSym" | "assert.eqDyn" | "assert.looseResult" | "assert.deepResult" | "assert.sameValue" | "assert.deqEnter" | "assert.deqLeave" | "assert.match" | "assert.throwsNone" | "assert.throwsMismatch" | "assert.throwsRegex" | "assert.shapeBegin" | "assert.shapeStr" | "assert.shapeRe" | "assert.shapeEnd" | "assert.regexErrTest" | "assert.unwantedRejection" | "assert.unwantedError" | "assert.noErrorPredicate" | "assert.regexDynTest"
 /** Node's expectsError over an error-INSTANCE expected (assert.throws/
  * rejects second argument): walk the expected dyn error's keys (name,
  * message, code — the %error marker skipped) and deep-compare each
@@ -3372,7 +3386,7 @@ export type IrLibFn = "ffi.argument" | "ffi.memoryModule" | "intl.segmenterNew"
  * mapping tables are generated from the pinned Node 24 oracle, keeping
  * output portable without an ICU/iconv dependency. Borrowed args; owned
  * (+1) string; never throws. */
- | "text.decodeLegacy" | "text.decoderEncoding"
+ | "text.decodeLegacy" | "text.decoderEncoding" | "text.decoderName" | "text.encodeInto" | "buffer.isAscii" | "buffer.isUtf8" | "buffer.transcode"
 /** The wider sync fs slice (scr_lib.c), all throwing catchably with
  * Node's errno message shapes and `.code` stamped like the rest of
  * sync fs. unlink/chmod/chown wrap the syscalls 1:1 (Node reports the
@@ -3394,7 +3408,7 @@ export type IrLibFn = "ffi.argument" | "ffi.memoryModule" | "intl.segmenterNew"
 /** renameSync is the direct two-path syscall wrapper. renameCb defers
  * the operation to the loop and fires a program-shaped Error | null
  * callback through a backend-emitted adapter. */
- | "fs.renameSync" | "fs.renameCb" | "fs.lstatSync" | "fs.fstatSync" | "fs.fchmodSync" | "fs.fsyncSync" | "fs.linkSync"
+ | "fs.renameSync" | "fs.renameCb" | "fs.lstatSync" | "fs.fstatSync" | "fs.fchmodSync" | "fs.fsyncSync" | "fs.fdatasyncSync" | "fs.ftruncateSync" | "fs.utimesSync" | "fs.futimesSync" | "fs.lutimesSync" | "fs.readvSync" | "fs.writevSync" | "fs.linkSync" | "fs.symlinkSync" | "fs.readlinkSync" | "fs.statfsSync" | "fs.readlinkSyncStr" | "fs.readlinkSyncBuffer"
 /** fs.openSync(path, flags) → the raw fd as f64; fs.readSync/fs.writeSync
  * over Buffer windows perform sequential I/O when position is -1 and
  * offset-preserving positioned I/O otherwise; fs.writeStrSync is the
@@ -3974,12 +3988,10 @@ export type IrExpr =
 }
 /** `new Set<T>()` — allocate an empty set. `type` is the set type (the
  * element fence already enforced by the frontend); the result is owned
- * (+1). `seed` carries the SUPPORTED seeded form — `new Set(values)`
- * where values is any T[]-typed expression (literal or variable; T
- * already a legal element type) — one borrowed array whose elements
- * add() in order (duplicates collapse, first insertion position wins,
- * SameValueZero — exactly JS). Non-array seeds (another Set, general
- * iterables) stay frontend-fenced. */
+ * (+1). `seed` is one borrowed array whose elements add() in order
+ * (duplicates collapse, first insertion position wins, SameValueZero).
+ * The frontend materializes supported non-array seeds, including Sets,
+ * strings, tuples, and collection iterators, before constructing this IR. */
  | {
     kind: "setNew";
     seed?: IrExpr;
@@ -4436,6 +4448,7 @@ export type IrExpr =
     callee: IrExpr;
     receiver?: IrExpr;
     calleeName: string;
+    calleeNameValue?: IrExpr;
     args: IrExpr[];
     spreads?: {
         arg: number;
@@ -4462,6 +4475,7 @@ export type IrExpr =
     recv: IrExpr;
     method: string;
     calleeName: string;
+    calleeNameValue?: IrExpr;
     args: IrExpr[];
     type: IrType;
     loc: SrcLoc;
@@ -4901,6 +4915,7 @@ export type IrExpr =
     args: IrExpr[];
     type: IrType;
     loc: SrcLoc;
+    prototypeIdentityOnly?: true;
 }
 /** `JSON.stringify(v)` — type-DIRECTED serialization: `value`'s static IR
  * type must be JSON-safe (f64/string/bool/record/array/union of those,
@@ -4938,10 +4953,13 @@ export type IrExpr =
  * The dyn operand is borrowed; the result is owned (+1). This is
  * scriptc-specific behavior — JS `as` never checks (SEMANTICS.md
  * documents it as the headline divergence: a lying cast throws instead of
- * corrupting memory). */
+ * corrupting memory). `preserveRefs` refuses structural copies of native
+ * references, including references nested in newly materialized arrays or
+ * tuples; collection seeds use it to preserve key identity. */
  | {
     kind: "dynCheck";
     value: IrExpr;
+    preserveRefs?: true;
     type: IrType;
     loc: SrcLoc;
 }
@@ -5416,9 +5434,9 @@ export declare function moduleUsesSearchParams(mod: IrModule): boolean;
  * loop hooks, cross-compiles everywhere). qs-free programs keep their
  * exact link line. Same generic-walk shape as moduleUsesZlib. */
 export declare function moduleUsesQs(mod: IrModule): boolean;
-/** True when the module uses native util.parseArgs — the link switch for
- * scr_util.c. The implementation is a pure checked-dynamic data transform,
- * cross-platform and independent of the island's node:util shim. */
+/** True when the module uses native util parsing, comparison, or styling.
+ * The utility units also follow their required symbol, inspection, and
+ * warning features, independently of the island's node:util shim. */
 export declare function moduleUsesParseArgs(mod: IrModule): boolean;
 /** True when the module contains any fs.watch/watcher.* libCall — the
  * link switch that pulls scr_watch.c into the binary and has the emitted

package/dist/ir/ir.js

@@ -1086,6 +1086,7 @@ function canBoxDynComposite(t, getRecord, getUnion, visiting = new Set()) {
 }
 function canBoxDynCompositeAt(t, getRecord, getUnion, visiting) {
     switch (t.kind) {
+        case "procStream":
         case "f64":
         case "bigint":
         case "symbol":
@@ -1111,7 +1112,9 @@ function canBoxDynCompositeAt(t, getRecord, getUnion, visiting) {
         case "object":
             return RUNTIME_ERROR_CLASSES.has(t.className) || isDynTypedRefType(t);
         case "array":
-            return canBoxDynComposite(t.elem, getRecord, getUnion, visiting);
+            // Process streams have scalar storage only in fields, closures and
+            // unions. A direct procStream array has no native ScrArr layout.
+            return t.elem.kind !== "procStream" && canBoxDynComposite(t.elem, getRecord, getUnion, visiting);
         case "record": {
             const shape = getRecord(t.shapeId);
             if (!shape)
@@ -1181,6 +1184,8 @@ function clearDynConversionResults(visiting) {
     }
 }
 function canDynCheckToAt(t, getRecord, getUnion, visiting) {
+    if (t.kind === "procStream")
+        return true;
     // Unknown fields keep an owned dyn subtree; checking the surrounding
     // record/array still validates its layout. This is broader than the
     // stringify/island JSON domain, which cannot assume opaque slots are
@@ -1207,6 +1212,8 @@ function canDynCheckToAt(t, getRecord, getUnion, visiting) {
     if (isDynTypedRefType(t))
         return true;
     if (t.kind === "array") {
+        if (t.elem.kind === "procStream")
+            return false;
         const key = typeKey(t);
         if (visiting.has(key))
             return false;
@@ -1334,10 +1341,11 @@ export function canExitIslandToType(t, getRecord, getUnion) {
 const DYN_ASYNC_LIB_FNS = new Set([
     "fs.callbackValue", "fs.callbackCall",
     "async.awaitDyn", "timers.immediatePromise", "crypto.native",
+    "dyn.promiseAll",
     "process.onUncaughtException", "process.offUncaughtException",
     "process.onUnhandledRejection", "process.offUnhandledRejection",
     "process.onRejectionHandled", "process.offRejectionHandled",
-    "process.onWarning", "process.offWarning", "process.emitWarning",
+    "process.onWarning", "process.offWarning", "process.emitWarning", "util.styleText",
     "als.new", "als.get", "als.run", "als.exitRun", "als.enterWith", "als.disable",
     "dc.chanBindStore", "dc.chanUnbindStore", "dc.chanRunStores",
 ]);
@@ -1364,7 +1372,7 @@ function scanRuntimeFeatures(mod, stopAt) {
     const expr = (node) => {
         if (node.kind === "libCall") {
             const fn = node.fn;
-            if (fn === "regexp.escape" || fn === "dyn.nativeRegexIs")
+            if (fn === "regexp.escape" || fn === "dyn.nativeRegexIs" || fn === "util.stripVTControlCharacters")
                 features.regex = true;
             if (fn === "text.decodeLegacy" || fn === "text.decodeLegacyOptions" || fn === "text.decodeStream")
                 features.legacyTextDecoder = true;
@@ -1385,11 +1393,11 @@ function scanRuntimeFeatures(mod, stopAt) {
                 features.dc = true;
             if (fn.startsWith("assert."))
                 features.assert = true;
-            if (fn === "dyn.defineProps" || fn === "dyn.defineProperty" || fn === "dyn.objCreateWithProperties" || fn === "dyn.arrayProtoCall" || fn === "dyn.arrayPrototype" || fn === "dyn.functionApply" || fn === "dyn.builtinMethod")
+            if (fn === "dyn.defineProps" || fn === "dyn.definePrototypeProps" || fn === "dyn.defineProperty" || fn === "dyn.objCreateWithProperties" || fn === "dyn.arrayProtoCall" || fn === "dyn.arrayPrototype" || fn === "dyn.functionApply" || fn === "dyn.builtinMethod")
                 features.dynInvoke = true;
             if (DYN_ASYNC_LIB_FNS.has(fn))
                 features.dynAsync = true;
-            if (fn.startsWith("insp.") || fn === "console.native" || fn === "global.native")
+            if (fn.startsWith("insp.") || fn === "console.native" || fn === "global.native" || fn === "util.styleText")
                 features.inspect = true;
             if (fn.startsWith("cp.") || fn.startsWith("child.") || fn.startsWith("writer.") || fn.startsWith("spawnRes.") ||
                 fn === "process.forkTarget" || fn === "process.connected" || fn === "process.send" || fn === "process.sendCb" ||
@@ -1408,7 +1416,7 @@ function scanRuntimeFeatures(mod, stopAt) {
             }
             if (fn.startsWith("http2.") && !HTTP2_LEGACY_FNS.has(fn))
                 features.http2 = true;
-            if (fn.startsWith("sym."))
+            if (fn.startsWith("sym.") || fn === "util.isDeepStrictEqual")
                 features.symbol = true;
             if (fn === "process.hrtimeValue")
                 features.bigint = true;
@@ -1418,8 +1426,10 @@ function scanRuntimeFeatures(mod, stopAt) {
                 features.searchParams = true;
             if (fn === "qs.parse" || fn === "qs.stringify" || fn === "qs.unescape")
                 features.qs = true;
-            if (fn === "util.parseArgs")
+            if (fn === "util.parseArgs" || fn === "util.isDeepStrictEqual" || fn === "util.styleText")
                 features.parseArgs = true;
+            if (fn === "util.styleText")
+                features.processEvents = true;
             if (fn.startsWith("fs.watch") || fn.startsWith("watcher."))
                 features.fsWatch = true;
             if (fn.startsWith("test."))
@@ -1436,7 +1446,7 @@ function scanRuntimeFeatures(mod, stopAt) {
                     features.regex = true;
                     break;
                 case "strIntrinsic":
-                    if (node.method === "toLowerCase" || node.method === "toUpperCase")
+                    if (node.method === "toLowerCase" || node.method === "toUpperCase" || node.method === "normalize")
                         features.regex = true;
                     break;
                 case "arrIntrinsic":
@@ -1476,6 +1486,9 @@ function scanRuntimeFeatures(mod, stopAt) {
             case "fileHandle":
                 features.fileHandle = true;
                 break;
+            case "procStream":
+                features.processEvents = true;
+                break;
             case "child":
             case "childStream":
             case "childWriter":
@@ -1733,9 +1746,9 @@ export function moduleUsesSearchParams(mod) {
 export function moduleUsesQs(mod) {
     return scanRuntimeFeatures(mod, "qs").qs;
 }
-/** True when the module uses native util.parseArgs — the link switch for
- * scr_util.c. The implementation is a pure checked-dynamic data transform,
- * cross-platform and independent of the island's node:util shim. */
+/** True when the module uses native util parsing, comparison, or styling.
+ * The utility units also follow their required symbol, inspection, and
+ * warning features, independently of the island's node:util shim. */
 export function moduleUsesParseArgs(mod) {
     return scanRuntimeFeatures(mod, "parseArgs").parseArgs;
 }
@@ -2037,11 +2050,19 @@ export function moduleLibNondeterministicSurface(mod) {
  * seed on `dynCheck` and `awaitExpr` nodes, which throw on validation
  * failure / promise rejection). */
 export const MAY_THROW_LIB_FNS = new Set([
+    "text.encodeInto",
+    "buffer.isAscii",
+    "buffer.isUtf8",
+    "buffer.transcode",
     "cp.spawnDynamic",
     "child.onDyn",
     "text.decoderEncoding",
     "dyn.construct",
     "dyn.reflectApply",
+    "dyn.reflectGet",
+    "dyn.reflectSet",
+    "dyn.reflectDefine",
+    "dyn.abstractEq",
     "text.decodeOptions",
     "text.decodeStream",
     "text.decodeLegacyOptions",
@@ -2093,6 +2114,8 @@ export const MAY_THROW_LIB_FNS = new Set([
     "fetch.responseNew",
     "fetch.abortTimeout",
     "fetch.abortAny",
+    "abort.timeout",
+    "abort.any",
     "fetch.streamNew",
     "fetch.streamFrom",
     "num.toFixed",
@@ -2364,6 +2387,13 @@ export const MAY_THROW_LIB_FNS = new Set([
     "date.nativeNew",
     "date.checkedValue",
     "util.parseArgs",
+    "util.parseEnv",
+    "util.getSystemErrorName",
+    "util.getSystemErrorMessage",
+    "util.stripVTControlCharacters",
+    "util.isDeepStrictEqual",
+    "util.styleText",
+    "util.toUSVString",
     // decodeURIComponent throws the spec's URIError on bad hex/invalid
     // UTF-8 octets (encodeURIComponent never throws — see the IrLibFn doc).
     "str.decodeUriComponent",
@@ -2442,10 +2472,14 @@ export const MAY_THROW_LIB_FNS = new Set([
     "dyn.toString",
     "string.fromCodePoint",
     "dyn.defineProps",
+    "dyn.definePrototypeProps",
+    "dyn.bagGet",
+    "dyn.bagSet",
     "dyn.defineProperty",
     "dyn.getOwnPropertyDescriptor",
     "dyn.arrayProtoCall",
     "process.chdir",
+    "process.loadEnvFile",
     "fs.realpathSync",
     "fs.realpathNativeSync",
     "fs.readFileSync",
@@ -2458,8 +2492,13 @@ export const MAY_THROW_LIB_FNS = new Set([
     "fs.readdirTypesSync",
     "url.new",
     "url.newBase",
+    "url.set",
+    "url.setChecked",
     "url.fileURLToPathUrl",
     "url.fileURLToPathChecked",
+    "url.fileURLToPathOptions",
+    "url.fileURLToPathBuffer",
+    "url.pathToFileURLChecked",
     "url.fileURLToPathStr",
     // The win32-target flavor of pathToFileURL (same runtime entry point —
     // the bridge dispatches by the binary's platform): Node's win32 arm
@@ -2496,6 +2535,10 @@ export const MAY_THROW_LIB_FNS = new Set([
     "crypto.pbkdf2",
     "crypto.randomBytesCb",
     "crypto.pbkdf2Cb",
+    "crypto.hkdf",
+    "crypto.hkdfCb",
+    "crypto.scrypt",
+    "crypto.scryptCb",
     "buffer.concat",
     "buffer.concatLen",
     "buffer.fromDyn",
@@ -2574,6 +2617,9 @@ export const MAY_THROW_LIB_FNS = new Set([
     "assert.throwsRegex",
     "assert.shapeEnd",
     "assert.unwantedRejection",
+    "assert.unwantedError",
+    "assert.noErrorPredicate",
+    "assert.regexDynTest",
     "assert.expectsErrDyn",
     "assert.ifErrorErr",
     "assert.ifErrorF64",
@@ -2593,7 +2639,19 @@ export const MAY_THROW_LIB_FNS = new Set([
     "fs.fstatSync",
     "fs.fchmodSync",
     "fs.fsyncSync",
+    "fs.fdatasyncSync",
+    "fs.ftruncateSync",
+    "fs.utimesSync",
+    "fs.futimesSync",
+    "fs.lutimesSync",
+    "fs.readvSync",
+    "fs.writevSync",
     "fs.linkSync",
+    "fs.symlinkSync",
+    "fs.readlinkSync",
+    "fs.statfsSync",
+    "fs.readlinkSyncStr",
+    "fs.readlinkSyncBuffer",
     "fs.writeFileModeSync",
     "fs.mkdirModeSync",
     "fs.mkdirRecursiveModeSync",