@scriptc/runtime 0.0.9 → 0.0.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scriptc/runtime",
-  "version": "0.0.9",
+  "version": "0.0.10",
   "description": "scriptc native runtime — C sources, compiled into every scriptc binary",
   "license": "Apache-2.0",
   "homepage": "https://scriptc.dev",

package/src/scr_assert.c

@@ -439,6 +439,11 @@ static bool scr_assert_dyn_same_value(const ScrDyn *a, const ScrDyn *b) {
     case SCR_DYN_PROMISE:
       /* Identity is the PROMISE (the strict_eq stance). */
       return a->v.promise == b->v.promise;
+    case SCR_DYN_JSVAL:
+      /* Identity is the ENGINE VALUE (the strict_eq stance): the engine's
+       * === — exact for SameValue too, since wrap-time scalar
+       * normalization leaves only reference kinds behind. */
+      return a == b || scr_dyn_jsval_ops()->strict_eq(a->v.jsval.cell, b->v.jsval.cell);
     default:
       return a == b; /* ARR/OBJ/BYTES: node identity */
   }
@@ -454,7 +459,16 @@ static bool scr_assert_dyn_same_value(const ScrDyn *a, const ScrDyn *b) {
  * memo here where Node carries one (documented divergence). */
 static bool scr_assert_dyn_deep_eq(const ScrDyn *a, const ScrDyn *b) {
   if (a == b) return true;
-  if (a->kind != b->kind) return false;
+  if (a->kind != b->kind) {
+    /* A MIXED comparison with an island side (wrapped engine object vs
+     * DOM data): Node walks both structurally — a plain `false` would
+     * mint a fabricated AssertionError for values Node may call equal.
+     * Loud fence (the long-tail lane's structural walk). */
+    if (a->kind == SCR_DYN_JSVAL || b->kind == SCR_DYN_JSVAL) {
+      scr_dyn_isl_fence(a->kind == SCR_DYN_JSVAL ? a : b, "deepStrictEqual");
+    }
+    return false;
+  }
   switch (a->kind) {
     case SCR_DYN_UNDEF:
     case SCR_DYN_NULL:
@@ -493,6 +507,7 @@ static bool scr_assert_dyn_deep_eq(const ScrDyn *a, const ScrDyn *b) {
       return true;
     }
     case SCR_DYN_OBJ: {
+      if (a->null_proto != b->null_proto) return false; /* the prototype gate */
       if (a->v.obj.len != b->v.obj.len) return false;
       for (size_t i = 0; i < a->v.obj.len; i++) {
         const ScrDynEntry *ent = &a->v.obj.entries[i];
@@ -501,6 +516,14 @@ static bool scr_assert_dyn_deep_eq(const ScrDyn *a, const ScrDyn *b) {
       }
       return true;
     }
+    case SCR_DYN_JSVAL:
+      /* Node walks the engine objects structurally — a walk this runtime
+       * cannot run. Engine-identical answers true honestly; anything else
+       * throws the loud ladder (scr_assert_eq_dyn propagates the pending
+       * exception INSTEAD of minting an AssertionError). */
+      if (scr_dyn_jsval_ops()->strict_eq(a->v.jsval.cell, b->v.jsval.cell)) return true;
+      scr_dyn_isl_fence(a, "deepStrictEqual");
+      return false;
   }
   return false; /* unreachable */
 }
@@ -653,15 +676,26 @@ static void scr_assert_cf_value(ScrAssertBuf *b, const ScrDyn *d, size_t indent,
       ab_char(b, ']');
       return;
     }
+    case SCR_DYN_JSVAL: {
+      /* The depth-elided placeholder (the handle stance): Node renders
+       * the engine object's property dump — internals this walker does
+       * not model; the text only appears inside FAILURE reports, which
+       * already diverge in format. */
+      ab_cstr(b, "[island value]");
+      return;
+    }
     case SCR_DYN_OBJ: {
+      /* The null-proto dictionary renders with Node's prefix in the
+       * failure diff too (assertion_error.js inspects both sides). */
       if (d->v.obj.len == 0) {
-        ab_cstr(b, "{}");
+        ab_cstr(b, d->null_proto ? "[Object: null prototype] {}" : "{}");
         return;
       }
       if (depth == 0) {
-        ab_cstr(b, "[Object]");
+        ab_cstr(b, d->null_proto ? "[Object: null prototype]" : "[Object]");
         return;
       }
+      if (d->null_proto) ab_cstr(b, "[Object: null prototype] ");
       /* Render every entry, then sort the RENDERED texts (Node's
        * sorted:true sorts formatted entries, quotes included). */
       ScrCfEntry *ents = malloc(d->v.obj.len * sizeof *ents);
@@ -893,7 +927,8 @@ static bool scr_assert_print_myers(ScrAssertBuf *b, const ScrDiffOp *diff, size_
 /* Is this DOM kind `typeof == "object" && != null` to assertion_error.js? */
 static bool scr_assert_dyn_is_object(const ScrDyn *d) {
   return d->kind == SCR_DYN_ARR || d->kind == SCR_DYN_OBJ || d->kind == SCR_DYN_BYTES ||
-         d->kind == SCR_DYN_HANDLE || d->kind == SCR_DYN_PROMISE;
+         d->kind == SCR_DYN_HANDLE || d->kind == SCR_DYN_PROMISE ||
+         scr_dyn_isl_typeof_is(d, "object"); /* engine-held: the engine's typeof */
 }
 
 /* The failing EQUAL operators over dyn operands — createErrDiff. */
@@ -1065,6 +1100,10 @@ static void scr_assert_dyn_neq_fail(ScrDyn *a, bool deep, ScrStr *msg, bool has_
 void scr_assert_eq_dyn(ScrDyn *a, ScrDyn *b, bool negated, bool deep,
                        ScrStr *msg, bool has_msg) {
   bool same = deep ? scr_assert_dyn_deep_eq(a, b) : scr_assert_dyn_same_value(a, b);
+  /* The deep walk's JSVAL arm fences loudly (an island value it cannot
+   * compare structurally): propagate THAT, never a fabricated
+   * AssertionError over a comparison that did not run. */
+  if (scr_exc_pending()) return;
   if ((negated && !same) || (!negated && same)) return;
   if (negated) {
     scr_assert_dyn_neq_fail(a, deep, msg, has_msg);

package/src/scr_bytes.c

@@ -927,7 +927,7 @@ ScrBytes *scr_bytes_from_arr(ScrBytesElem elem, const ScrArr *arr) {
  * the '>= 0 && <= max' render, ERR_OUT_OF_RANGE's Received rules — and
  * copy's C++-side ladder; pinned by corpus 1663) ─────────────────────── */
 
-static size_t scr_bytes_received(double v, char out[48]); /* the numeric section below */
+size_t scr_num_received(double v, char out[48]); /* the numeric section below */
 
 /* validateOffset(name, 0, max): non-integers are 'an integer' (Number.
  * isInteger — ±Infinity render 'an integer' too), the rest '>= 0 && <=
@@ -938,7 +938,7 @@ static size_t scr_bytes_received(double v, char out[48]); /* the numeric section
 bool scr_bytes_validate_off(const char *name, double value, double max) {
   if (isfinite(value) && floor(value) == value && value >= 0 && (max < 0 || value <= max)) return true;
   char recv[48];
-  scr_bytes_received(value, recv);
+  scr_num_received(value, recv);
   char msg[160];
   int mlen;
   if (floor(value) != value || !isfinite(value)) {
@@ -1250,8 +1250,9 @@ ScrBytes *scr_bytes_concat(const ScrArr *list) {
 /* ERR_OUT_OF_RANGE's "Received" rendering: integers with |v| > 2^32 get
  * Node's addNumericalSeparator underscores applied to the plain String()
  * form — INCLUDING its quirks on exponent renderings ("1e_+21",
- * "1e+_300"); everything else is the shortest-roundtrip number. */
-static size_t scr_bytes_received(double v, char out[48]) {
+ * "1e+_300"); everything else is the shortest-roundtrip number. Shared
+ * with the fs/net option-ladder validators (scr_num_received). */
+size_t scr_num_received(double v, char out[48]) {
   char plain[32];
   size_t n = scr_f64_to_str(v, plain);
   if (!(isfinite(v) && trunc(v) == v && fabs(v) > 4294967296.0)) {
@@ -1281,7 +1282,7 @@ static size_t scr_bytes_received(double v, char out[48]) {
  * "byteLength" renders min 1. All catchable RangeErrors. */
 static void scr_bytes_bounds_error(double value, double length, const char *type) {
   char recv[48];
-  scr_bytes_received(value, recv);
+  scr_num_received(value, recv);
   char msg[160];
   int mlen;
   if (floor(value) != value) {
@@ -1322,7 +1323,7 @@ static bool scr_bytes_check_int(const ScrBytes *b, double value, double offset,
   double min = sign ? -exp2((double)(8 * width - 1)) : 0;
   if (value > max || value < min) {
     char recv[48];
-    scr_bytes_received(value, recv);
+    scr_num_received(value, recv);
     char msg[160];
     int mlen;
     if (width > 4) {

package/src/scr_bytes_io.c

@@ -12,6 +12,9 @@
 #include <stdlib.h>
 #include <string.h>
 #include <time.h>
+#ifdef __APPLE__
+#include <sys/stat.h> /* lchmod(2) — the fs.lchmodSync ladder's real tail */
+#endif
 
 static void scr_bytes_io_oom(void) {
   scr_trap("scriptc: out of memory\n");
@@ -254,3 +257,410 @@ double scr_fs_to_unix_timestamp(const ScrDyn *t) {
   scr_dyn_arg_type_fail("time", "an instance of Date or an Time in seconds", t);
   return 0;
 }
+
+/* ── the fs argument-validation ladders (checked-dynamic lane) ─────────
+ * Each fs.*Chk libCall replicates its API's Node-order validation over
+ * DOM values and throws Node's exact typed errors; when every validation
+ * passes, the honest tail runs — the real operation where one exists
+ * (mkdtempSync, lchmodSync on macOS), the compiler-rendered SC2020 fence
+ * otherwise (scr_throw_lowering_fence). All arguments borrowed. */
+
+static bool scr_fs_dyn_absent(const ScrDyn *v) {
+  return v->kind == SCR_DYN_UNDEF || v->kind == SCR_DYN_NULL;
+}
+
+static bool scr_fs_str_is(const ScrStr *s, const char *lit) {
+  size_t n = strlen(lit);
+  return s->len == n && memcmp(s->data, lit, n) == 0;
+}
+
+/* Node's maybeCallback/validateFunction over a callback slot. */
+static bool scr_fs_cb_chk(const ScrDyn *cb, const char *name) {
+  if (cb->kind == SCR_DYN_FUNC) return true;
+  scr_dyn_arg_type_fail(name, "of type function", cb);
+  return false;
+}
+
+/* getValidatedPath: strings and Buffers pass (URL instances never reach
+ * these ladders — the DOM has no URL kind here, and Node would accept
+ * only file: URLs anyway). */
+static bool scr_fs_path_chk(const ScrDyn *p, const char *name) {
+  if (p->kind == SCR_DYN_STR || p->kind == SCR_DYN_BYTES) return true;
+  scr_dyn_arg_type_fail(name, "of type string or an instance of Buffer or URL", p);
+  return false;
+}
+
+/* assertEncoding over an options slot (a bare encoding string or an
+ * options record's `encoding` member): Node throws ERR_INVALID_ARG_VALUE
+ * for any truthy value Buffer.isEncoding rejects. */
+static bool scr_fs_encoding_chk(const ScrDyn *opts) {
+  const ScrDyn *enc = opts;
+  if (opts->kind == SCR_DYN_OBJ) {
+    enc = scr_dyn_obj_get(opts, "encoding", 8);
+    if (enc == NULL) return true;
+  }
+  if (scr_fs_dyn_absent(enc)) return true;
+  if (enc->kind == SCR_DYN_STR) {
+    if (enc->v.str->len == 0) return true; /* falsy: assertEncoding's `encoding &&` gate */
+    if (scr_bytes_is_encoding(enc->v.str)) return true;
+  }
+  if (enc->kind == SCR_DYN_BOOL && !enc->v.b) return true;
+  if (enc->kind == SCR_DYN_NUM && enc->v.num == 0) return true;
+  scr_dyn_arg_value_fail("encoding", "is invalid encoding", enc);
+  return false;
+}
+
+/* parseFileMode: integers 0..2^32-1 pass, octal strings parse, and the
+ * rest throw Node's exact ladder (validateUint32's wording). */
+static bool scr_fs_mode_chk(const ScrDyn *m, const char *name) {
+  if (m->kind == SCR_DYN_STR) {
+    const ScrStr *s = m->v.str;
+    bool octal = s->len > 0;
+    for (size_t i = 0; octal && i < s->len; i++) {
+      if (s->data[i] < '0' || s->data[i] > '7') octal = false;
+    }
+    if (octal) return true;
+    scr_dyn_arg_value_fail(name, "must be a 32-bit unsigned integer or an octal string", m);
+    return false;
+  }
+  if (m->kind != SCR_DYN_NUM) {
+    scr_dyn_arg_type_fail(name, "of type number", m);
+    return false;
+  }
+  double v = m->v.num;
+  if (!(isfinite(v) && trunc(v) == v)) {
+    char recv[48], msg[160];
+    scr_num_received(v, recv);
+    int len = snprintf(msg, sizeof msg,
+                       "The value of \"%s\" is out of range. It must be an integer. Received %s",
+                       name, recv);
+    scr_throw_error_msg_code(SCR_ERR_RANGE, msg, (size_t)len, "ERR_OUT_OF_RANGE");
+    return false;
+  }
+  if (v < 0 || v > 4294967295.0) {
+    char recv[48], msg[160];
+    scr_num_received(v, recv);
+    int len = snprintf(msg, sizeof msg,
+                       "The value of \"%s\" is out of range. It must be >= 0 && <= 4294967295. Received %s",
+                       name, recv);
+    scr_throw_error_msg_code(SCR_ERR_RANGE, msg, (size_t)len, "ERR_OUT_OF_RANGE");
+    return false;
+  }
+  return true;
+}
+
+/* fs.exists(path, cb) — the REAL deprecated-API shape: the callback
+ * validates synchronously (Node's one throwing arm), and the answer
+ * arrives asynchronously through it — string/Buffer paths run the
+ * existsSync probe at fire time, every other path kind answers `false`
+ * (Node swallows getValidatedPath failures there). The loop-held timer
+ * matches Node's I/O-completion timing closely enough for the
+ * sequential CLI corpus. */
+#ifndef SCR_LIB
+static void scr_fs_exists_fire(ScrClosure *self) {
+  ScrDyn *path = scr_box_get_ref(self->caps[0]); /* +1 */
+  ScrDyn *cb = scr_box_get_ref(self->caps[1]);   /* +1 */
+  bool ans = false;
+  if (path->kind == SCR_DYN_STR) {
+    ScrStr *p = scr_str_retain(path->v.str);
+    ans = scr_fs_exists(p);
+    scr_str_release(p);
+  } else if (path->kind == SCR_DYN_BYTES) {
+    ScrStr *p = scr_str_new((const char *)path->v.bytes->data, path->v.bytes->len);
+    ans = scr_fs_exists(p);
+    scr_str_release(p);
+  }
+  ScrDyn *arg = scr_dyn_new_bool(ans);
+  ScrDyn *r = scr_dyn_call(cb, &arg, 1, "the fs.exists callback");
+  scr_dyn_release(arg);
+  scr_dyn_release(r);
+  scr_dyn_release(path);
+  scr_dyn_release(cb);
+}
+#endif
+
+ScrDyn *scr_fs_exists_async(const ScrDyn *path, const ScrDyn *cb) {
+  if (!scr_fs_cb_chk(cb, "cb")) return NULL;
+  if (path->kind != SCR_DYN_STR && path->kind != SCR_DYN_BYTES) {
+    /* Node's wart, kept exactly: a path getValidatedPath rejects answers
+     * false through the callback SYNCHRONOUSLY (`return callback(false)`
+     * in lib/fs.js exists). */
+    ScrDyn *arg = scr_dyn_new_bool(false);
+    ScrDyn *r = scr_dyn_call(cb, &arg, 1, "the fs.exists callback");
+    scr_dyn_release(arg);
+    scr_dyn_release(r);
+    if (scr_exc_pending()) return NULL;
+    return scr_dyn_retain(scr_dyn_undefined());
+  }
+#ifdef SCR_LIB
+  /* Library links exclude the event-loop unit, and the compile-time scan
+   * refuses the fs.exists surface (SC4005's family) — this arm exists
+   * only so the TU links without scr_async. Unreachable by construction. */
+  scr_trap("scriptc: internal error: fs.exists async fire reached in a library build — please report this");
+  return NULL;
+#else
+  ScrClosure *clo = scr_closure_new((void *)scr_fs_exists_fire, 2);
+  clo->caps[0] = scr_box_new_obj(scr_dyn_retain_v, scr_dyn_release_v, NULL);
+  scr_box_set_ref(clo->caps[0], scr_dyn_retain((ScrDyn *)path));
+  clo->caps[1] = scr_box_new_obj(scr_dyn_retain_v, scr_dyn_release_v, NULL);
+  scr_box_set_ref(clo->caps[1], scr_dyn_retain((ScrDyn *)cb));
+  scr_set_timeout(clo, 0);
+  return scr_dyn_retain(scr_dyn_undefined());
+#endif
+}
+
+/* fs.mkdtemp(prefix, options?, cb): callback first (makeCallback), then
+ * the prefix (getValidatedPath's 'prefix' slot); the async op fences. */
+void scr_fs_mkdtemp_chk(const ScrDyn *prefix, const ScrDyn *cb, const ScrStr *fence) {
+  if (!scr_fs_cb_chk(cb, "cb")) return;
+  if (!scr_fs_path_chk(prefix, "prefix")) return;
+  scr_throw_lowering_fence(fence);
+}
+
+/* fs.mkdtempSync(prefix, options?): prefix validates (Node's 'prefix'
+ * slot), the options walk accepts only shapes that leave utf8 semantics
+ * (absent/empty records, utf8 spellings — invalid encodings throw the
+ * assertEncoding ladder, other effectful options fence), then the REAL
+ * mkdtemp runs. +1 result or NULL with the exception pending. */
+ScrStr *scr_fs_mkdtemp_sync_chk(const ScrDyn *prefix, const ScrDyn *opts, const ScrStr *fence) {
+  if (!scr_fs_path_chk(prefix, "prefix")) return NULL;
+  if (!scr_fs_encoding_chk(opts)) return NULL;
+  bool utf8 = true;
+  if (opts->kind == SCR_DYN_OBJ) {
+    for (size_t i = 0; i < opts->v.obj.len; i++) {
+      const ScrDynEntry *e = &opts->v.obj.entries[i];
+      if (scr_fs_dyn_absent(e->value)) continue;
+      if (strcmp(e->key, "encoding") == 0) {
+        const ScrDyn *enc = e->value;
+        if (!(enc->kind == SCR_DYN_STR &&
+              (scr_fs_str_is(enc->v.str, "utf8") || scr_fs_str_is(enc->v.str, "utf-8")))) {
+          utf8 = false;
+        }
+        continue;
+      }
+      utf8 = false; /* an unmodeled effectful option */
+    }
+  } else if (opts->kind == SCR_DYN_STR) {
+    utf8 = scr_fs_str_is(opts->v.str, "utf8") || scr_fs_str_is(opts->v.str, "utf-8");
+  } else if (!scr_fs_dyn_absent(opts)) {
+    utf8 = false;
+  }
+  if (!utf8 || prefix->kind != SCR_DYN_STR) {
+    scr_throw_lowering_fence(fence);
+    return NULL;
+  }
+  ScrStr *p = scr_str_retain(prefix->v.str);
+  ScrStr *r = scr_fs_mkdtemp(p);
+  scr_str_release(p);
+  return r;
+}
+
+/* fs.readFile(path, options?, cb): Node's order — the callback
+ * (maybeCallback), the options walk's assertEncoding, then the path;
+ * the async read itself fences. */
+void scr_fs_read_file_chk(const ScrDyn *path, const ScrDyn *opts, const ScrDyn *cb,
+                          const ScrStr *fence) {
+  if (!scr_fs_cb_chk(cb, "cb")) return;
+  if (!scr_fs_encoding_chk(opts)) return;
+  if (!scr_fs_path_chk(path, "path")) return;
+  scr_throw_lowering_fence(fence);
+}
+
+/* fs.opendirSync(path, options?): getValidatedPath, then getOptions'
+ * assertEncoding; the Dir machinery fences. */
+void scr_fs_opendir_chk(const ScrDyn *path, const ScrDyn *opts, const ScrStr *fence) {
+  if (!scr_fs_path_chk(path, "path")) return;
+  if (!scr_fs_encoding_chk(opts)) return;
+  scr_throw_lowering_fence(fence);
+}
+
+/* fs.watchFile(path, options?, listener): the path first, the listener's
+ * function check second (Node's watchFile order); real watching fences. */
+void scr_fs_watch_file_chk(const ScrDyn *path, const ScrDyn *listener, const ScrStr *fence) {
+  if (!scr_fs_path_chk(path, "path")) return;
+  if (listener->kind != SCR_DYN_FUNC) {
+    scr_dyn_arg_type_fail("listener", "of type function", listener);
+    return;
+  }
+  scr_throw_lowering_fence(fence);
+}
+
+/* fs.lchmod / lchmodSync / fs.promises.lchmod — macOS-only in Node (the
+ * callback/sync pair is not even exported elsewhere, so non-APPLE builds
+ * answer the not-a-function TypeError; the promise form rejects
+ * ERR_METHOD_NOT_IMPLEMENTED, Node's own linux shape). On macOS the
+ * validation ladder runs in Node's order and the real lchmod(2) applies
+ * where an operation survives it. */
+static bool scr_fs_lchmod_defined(const char *api) {
+#ifdef __APPLE__
+  (void)api;
+  return true;
+#else
+  char msg[64];
+  int len = snprintf(msg, sizeof msg, "%s is not a function", api);
+  scr_throw_error_msg(SCR_ERR_TYPE, msg, (size_t)len);
+  return false;
+#endif
+}
+
+void scr_fs_lchmod_chk(const ScrDyn *path, const ScrDyn *mode, const ScrDyn *cb,
+                       const ScrStr *fence) {
+  if (!scr_fs_lchmod_defined("fs.lchmod")) return;
+  if (!scr_fs_cb_chk(cb, "cb")) return;
+  if (!scr_fs_path_chk(path, "path")) return;
+  if (!scr_fs_mode_chk(mode, "mode")) return;
+  scr_throw_lowering_fence(fence); /* the async op + callback dispatch */
+}
+
+#ifdef __APPLE__
+static void scr_fs_lchmod_apply(const ScrDyn *path, const ScrDyn *mode) {
+  ScrStr *p = path->kind == SCR_DYN_STR ? scr_str_retain(path->v.str)
+                                        : scr_str_new((const char *)path->v.bytes->data, path->v.bytes->len);
+  double m = mode->kind == SCR_DYN_NUM ? mode->v.num : (double)strtol(mode->v.str->data, NULL, 8);
+  if (lchmod(p->data, (mode_t)m) != 0) scr_fs_throw(errno, "lchmod", p);
+  scr_str_release(p);
+}
+#endif
+
+/* Answers the DOM undefined (+1) on success — lchmodSync's JS value, so
+ * return-position uses lower; NULL with the exception pending. */
+ScrDyn *scr_fs_lchmod_sync_chk(const ScrDyn *path, const ScrDyn *mode) {
+  if (!scr_fs_lchmod_defined("fs.lchmodSync")) return NULL;
+  if (!scr_fs_path_chk(path, "path")) return NULL;
+  if (!scr_fs_mode_chk(mode, "mode")) return NULL;
+#ifdef __APPLE__
+  scr_fs_lchmod_apply(path, mode);
+  if (scr_exc_pending()) return NULL;
+#endif
+  return scr_dyn_retain(scr_dyn_undefined());
+}
+
+ScrPromise *scr_fsp_lchmod_chk(const ScrDyn *path, const ScrDyn *mode) {
+#ifndef __APPLE__
+  (void)path;
+  (void)mode;
+  static const char ni[] = "The lchmod() method is not implemented";
+  scr_throw_error_msg_code(SCR_ERR_ERROR, ni, sizeof ni - 1, "ERR_METHOD_NOT_IMPLEMENTED");
+  return scr_promise_settled_void();
+#else
+  if (scr_fs_path_chk(path, "path") && scr_fs_mode_chk(mode, "mode")) {
+    scr_fs_lchmod_apply(path, mode);
+  }
+  return scr_promise_settled_void();
+#endif
+}
+
+/* fs.read(fd, buffer, offset, length, position, cb) — the full argument
+ * ladder in Node's order (buffer, fd, offset, length, position); the
+ * async read fences. Bounds follow lib/fs.js read(): offset within the
+ * buffer, length within buffer - offset. */
+static bool scr_fs_int_range_chk(const ScrDyn *v, const char *name, double min, double max,
+                                 const char *range) {
+  if (v->kind != SCR_DYN_NUM) {
+    scr_dyn_arg_type_fail(name, "of type number", v);
+    return false;
+  }
+  double n = v->v.num;
+  char recv[48], msg[192];
+  if (!(isfinite(n) && trunc(n) == n)) {
+    scr_num_received(n, recv);
+    int len = snprintf(msg, sizeof msg,
+                       "The value of \"%s\" is out of range. It must be an integer. Received %s",
+                       name, recv);
+    scr_throw_error_msg_code(SCR_ERR_RANGE, msg, (size_t)len, "ERR_OUT_OF_RANGE");
+    return false;
+  }
+  if (n < min || n > max) {
+    scr_num_received(n, recv);
+    int len = snprintf(msg, sizeof msg,
+                       "The value of \"%s\" is out of range. It must be %s. Received %s",
+                       name, range, recv);
+    scr_throw_error_msg_code(SCR_ERR_RANGE, msg, (size_t)len, "ERR_OUT_OF_RANGE");
+    return false;
+  }
+  return true;
+}
+
+void scr_fs_read_chk(const ScrDyn *fd, const ScrDyn *buffer, const ScrDyn *offset,
+                     const ScrDyn *length, const ScrDyn *position, const ScrStr *fence) {
+  if (buffer->kind != SCR_DYN_BYTES) {
+    scr_dyn_arg_type_fail("buffer", "an instance of Buffer, TypedArray, or DataView", buffer);
+    return;
+  }
+  if (fd->kind != SCR_DYN_NUM) {
+    scr_dyn_arg_type_fail("fd", "of type number", fd);
+    return;
+  }
+  double buflen = (double)buffer->v.bytes->len;
+  if (!scr_fs_dyn_absent(offset)) {
+    /* validateInteger's MAX_SAFE range first, the buffer bound second —
+     * Node renders each with its own max. */
+    if (!scr_fs_int_range_chk(offset, "offset", 0, 9007199254740991.0,
+                              ">= 0 && <= 9007199254740991")) {
+      return;
+    }
+    if (offset->v.num > buflen) {
+      char range[64];
+      snprintf(range, sizeof range, ">= 0 && <= %.0f", buflen);
+      if (!scr_fs_int_range_chk(offset, "offset", 0, buflen, range)) return;
+    }
+  }
+  double off = offset->kind == SCR_DYN_NUM ? offset->v.num : 0;
+  if (!scr_fs_dyn_absent(length)) {
+    if (length->kind != SCR_DYN_NUM || !(isfinite(length->v.num) && trunc(length->v.num) == length->v.num) ||
+        length->v.num < 0) {
+      /* Node renders the bare ">= 0" form here (checkPosition's cousin). */
+      if (length->kind == SCR_DYN_NUM) {
+        char recv[48], msg[160];
+        scr_num_received(length->v.num, recv);
+        const char *shape = (isfinite(length->v.num) && trunc(length->v.num) == length->v.num)
+                                ? "It must be >= 0."
+                                : "It must be an integer.";
+        int len = snprintf(msg, sizeof msg,
+                           "The value of \"length\" is out of range. %s Received %s", shape, recv);
+        scr_throw_error_msg_code(SCR_ERR_RANGE, msg, (size_t)len, "ERR_OUT_OF_RANGE");
+        return;
+      }
+      scr_dyn_arg_type_fail("length", "of type number", length);
+      return;
+    }
+    if (length->v.num > buflen - off) {
+      char recv[48], msg[160];
+      scr_num_received(length->v.num, recv);
+      int len = snprintf(msg, sizeof msg,
+                         "The value of \"length\" is out of range. It must be <= %.0f. Received %s",
+                         buflen - off, recv);
+      scr_throw_error_msg_code(SCR_ERR_RANGE, msg, (size_t)len, "ERR_OUT_OF_RANGE");
+      return;
+    }
+  }
+  if (!scr_fs_dyn_absent(position)) {
+    if (position->kind != SCR_DYN_NUM) {
+      scr_dyn_arg_type_fail("position", "of type bigint or integer", position);
+      return;
+    }
+    if (!scr_fs_int_range_chk(position, "position", -1, 9007199254740991.0,
+                              ">= -1 && <= 9007199254740991")) {
+      return;
+    }
+  }
+  scr_throw_lowering_fence(fence);
+}
+
+/* createReadStream/createWriteStream(path, options?): getOptions'
+ * assertEncoding, the fd member's FileHandle-or-integer contract when
+ * present, the path contract otherwise; the stream machinery fences. */
+void scr_fs_stream_opts_chk(const ScrDyn *path, const ScrDyn *opts, const ScrStr *fence) {
+  if (!scr_fs_encoding_chk(opts)) return;
+  const ScrDyn *fd = opts->kind == SCR_DYN_OBJ ? scr_dyn_obj_get(opts, "fd", 2) : NULL;
+  if (fd != NULL && !scr_fs_dyn_absent(fd)) {
+    if (fd->kind != SCR_DYN_NUM) {
+      scr_dyn_prop_type_fail("options.fd", "of type number or an instance of FileHandle", fd);
+      return;
+    }
+    if (!scr_fs_int_range_chk(fd, "fd", 0, 2147483647.0, ">= 0 && <= 2147483647")) return;
+  } else if (!scr_fs_path_chk(path, "path")) {
+    return;
+  }
+  scr_throw_lowering_fence(fence);
+}

package/src/scr_dc.c

@@ -132,6 +132,12 @@ static void dc_throw_bad_fn_arg(const ScrDyn *cb, const char *arg_name) {
              (int)(cb->v.str->len < 28 ? cb->v.str->len : 28), cb->v.str->data);
     received = detail;
     break;
+  case SCR_DYN_JSVAL:
+    /* An engine callback may well BE a function — subscribing island
+     * values is unarmed (lane dyn-routing-ops); fence loudly rather
+     * than claim "Received an instance of Object". */
+    scr_dyn_isl_fence(cb, "subscribing");
+    return;
   default: break;
   }
   char buf[160];