nudojs 1.0.0 → 1.0.2

package/dist/index.js

@@ -27989,6 +27989,9 @@ function exitCall() {
   _absCallDepth--;
   _activeCallKeys.pop();
 }
+function noteHostEffectBlocked(name) {
+  noteAbsTruncation(`${HOST_EFFECT_LABEL_PREFIX}${name}`);
+}
 function noteBForkTruncation() {
   noteAbsTruncation(FORK_TRUNCATION_LABEL);
 }
@@ -28018,7 +28021,7 @@ function bumpBForkBudget() {
   }
   return false;
 }
-var MAX_CALL_DEPTH, MAX_TOTAL_CALLS, _absCallDepth, _absTotalCalls, _activeCallKeys, _fnCallIds, _fnCallIdSeq, _callTruncated, absTruncCollector, MAX_B_TOTAL_FORKS, _bForkBudgetLimit, _bForkCount, _bForkTruncNoted, FORK_TRUNCATION_LABEL;
+var MAX_CALL_DEPTH, MAX_TOTAL_CALLS, _absCallDepth, _absTotalCalls, _activeCallKeys, _fnCallIds, _fnCallIdSeq, _callTruncated, absTruncCollector, MAX_B_TOTAL_FORKS, _bForkBudgetLimit, _bForkCount, _bForkTruncNoted, FORK_TRUNCATION_LABEL, HOST_EFFECT_LABEL_PREFIX;
 var init_call_budget = __esm({
   "../core/src/algebra/call-budget.ts"() {
     "use strict";
@@ -28038,6 +28041,7 @@ var init_call_budget = __esm({
     _bForkCount = 0;
     _bForkTruncNoted = false;
     FORK_TRUNCATION_LABEL = "#fork-budget";
+    HOST_EFFECT_LABEL_PREFIX = "#host-effect:";
   }
 });
 
@@ -30215,7 +30219,9 @@ __export(calls_exports, {
   $recordBinding: () => $recordBinding,
   MAX_B_CALL_DEPTH: () => MAX_B_CALL_DEPTH,
   MAX_B_TOTAL_CALLS: () => MAX_B_TOTAL_CALLS,
+  blockHostSideEffect: () => blockHostSideEffect,
   getBCallCollector: () => getBCallCollector,
+  neverExecHostName: () => neverExecHostName,
   noteBCallRecord: () => noteBCallRecord,
   resetBCallBudget: () => resetBCallBudget,
   setBAssignCollector: () => setBAssignCollector,
@@ -30247,6 +30253,20 @@ function setBBindingSink(sink) {
 function $recordBinding(name, value) {
   if (bindingSink) bindingSink.set(name, value);
 }
+function neverExecHostName(fn2) {
+  if (typeof fn2 !== "function") return null;
+  const g = globalThis;
+  for (const n of NEVER_EXEC_HOST_FN_NAMES) {
+    if (fn2 === g[n]) return n;
+  }
+  return null;
+}
+function blockHostSideEffect(fn2) {
+  const hostName = neverExecHostName(fn2);
+  if (hostName === null) return null;
+  noteHostEffectBlocked(hostName);
+  return abs({ k: "unknown" }, void 0, void 0, "opaque");
+}
 function noteBCallRecord(r) {
   if (!bCallCollector) return;
   try {
@@ -30321,8 +30341,11 @@ function $callNamed(name, fn2, args, loc, argLocs) {
   try {
     if (typeof fn2 === "function") {
       const g = GLOBAL_FNS.has(name) && fn2 === globalThis[name] ? evalGlobalFn(name, args) : void 0;
+      const blockedHost = g === void 0 ? blockHostSideEffect(fn2) : null;
       if (g !== void 0) {
         result = g;
+      } else if (blockedHost !== null) {
+        result = blockedHost;
       } else {
         const entered = bEnterCall(name, fn2, args);
         if (!entered.ok) {
@@ -30375,7 +30398,7 @@ function $callNamed(name, fn2, args, loc, argLocs) {
   }
   return result;
 }
-var pureCallMemo, bCallCollector, bAssignCollector, bindingSink, GLOBAL_FNS, MAX_B_CALL_DEPTH, MAX_B_TOTAL_CALLS, bCallDepth, bTotalCalls, bActiveCallKeys, bFnCallIds, bFnCallIdSeq;
+var pureCallMemo, bCallCollector, bAssignCollector, bindingSink, GLOBAL_FNS, NEVER_EXEC_HOST_FN_NAMES, MAX_B_CALL_DEPTH, MAX_B_TOTAL_CALLS, bCallDepth, bTotalCalls, bActiveCallKeys, bFnCallIds, bFnCallIdSeq;
 var init_calls = __esm({
   "../core/src/algebra/exec/calls.ts"() {
     "use strict";
@@ -30403,6 +30426,18 @@ var init_calls = __esm({
       "eval",
       "Symbol"
     ]);
+    NEVER_EXEC_HOST_FN_NAMES = [
+      "fetch",
+      "XMLHttpRequest",
+      "WebSocket",
+      "EventSource",
+      "setTimeout",
+      "setInterval",
+      "setImmediate",
+      "queueMicrotask",
+      "requestAnimationFrame",
+      "requestIdleCallback"
+    ];
     MAX_B_CALL_DEPTH = 64;
     MAX_B_TOTAL_CALLS = 2e4;
     bCallDepth = 0;
@@ -30458,7 +30493,13 @@ function execRegexBrand(re, method, args) {
   if (method === "toString") return strLit(`/${parts.pat}/${parts.flags}`);
   const subject = args[0] ? litValue(args[0]) : void 0;
   if (typeof subject !== "string") {
-    return method === "test" ? abs({ k: "prim", type: "boolean" }, void 0, void 0, "partial") : void 0;
+    if (method === "test") {
+      return abs({ k: "prim", type: "boolean" }, void 0, void 0, "partial");
+    }
+    const element = joinAbs(str(), undefAbs());
+    const matchAbs = abs({ k: "arr", element }, void 0, void 0, "path");
+    const nullAbs = abs({ k: "unknown" }, { op: "lit", value: null }, void 0, "exact");
+    return joinAbs(nullAbs, matchAbs);
   }
   try {
     return regexExecWithState(re, method, subject).result;
@@ -30657,6 +30698,8 @@ function $new(cls, args) {
     }
   }
   if (typeof cls === "function") {
+    const blockedHost = blockHostSideEffect(cls);
+    if (blockedHost) return blockedHost;
     if (cls === Array) {
       return makeArrayCtorAbs(args);
     }
@@ -36245,6 +36288,17 @@ function checkSourceInner(filePath, source, file, phi2, opts, issues, signatures
       });
       continue;
     }
+    if (label.startsWith(HOST_EFFECT_LABEL_PREFIX)) {
+      const hostName = label.slice(HOST_EFFECT_LABEL_PREFIX.length);
+      issues.push({
+        severity: "info",
+        code: "nudo:host-effect-blocked",
+        message: `Host function '${hostName}' is not executed during analysis (network/timer side effect); result widened to unknown#opaque`,
+        suggestion: "optional: mock it with @nudo:mock / @nudo:env, or pass the value in from a call site",
+        fn: hostName
+      });
+      continue;
+    }
     issues.push({
       severity: "info",
       code: "nudo:recursion-truncated",
@@ -36374,6 +36428,19 @@ function checkReturnConstraint(fnName, cName, constraint, ret) {
   const out = [];
   if (ret.shape.k === "unknown" && !ret.term) return out;
   if (ret.shape.k === "any") return out;
+  if (isNullishLitAbs(ret)) return out;
+  if (ret.shape.k === "sum" && constraint.fields) {
+    const seen = /* @__PURE__ */ new Set();
+    for (const m of ret.shape.members) {
+      for (const issue of checkReturnConstraint(fnName, cName, constraint, m)) {
+        const key = `${issue.message}\0${issue.actual ?? ""}\0${issue.expected ?? ""}`;
+        if (seen.has(key)) continue;
+        seen.add(key);
+        out.push(issue);
+      }
+    }
+    return out;
+  }
   const push = (actual, expected, suggestion) => {
     out.push({
       severity: "error",
@@ -36475,6 +36542,7 @@ var init_check = __esm({
   "../core/src/algebra/check.ts"() {
     "use strict";
     init_parse_source();
+    init_surface();
     init_call_budget();
     init_refine();
     init_interface();
@@ -36574,6 +36642,11 @@ function actionsForIssue(i) {
           label: "results widened to unknown \u2014 raise budget or narrow control flow"
         }
       ];
+    case "nudo:host-effect-blocked":
+      return [
+        { kind: "mock", label: "pin the host API with @nudo:mock / @nudo:env" },
+        { kind: "info", label: "results widened to unknown \u2014 or feed the value in from a call site" }
+      ];
     case "nudo:interface-drift":
       return [
         {
@@ -46028,6 +46101,7 @@ __export(internal_exports, {
   $tryReleaseSoft: () => $tryReleaseSoft,
   ERROR_FAMILY: () => ERROR_FAMILY,
   FORK_TRUNCATION_LABEL: () => FORK_TRUNCATION_LABEL,
+  HOST_EFFECT_LABEL_PREFIX: () => HOST_EFFECT_LABEL_PREFIX,
   MAX_B_TOTAL_FORKS: () => MAX_B_TOTAL_FORKS,
   MAX_CALL_DEPTH: () => MAX_CALL_DEPTH,
   MAX_TOTAL_CALLS: () => MAX_TOTAL_CALLS,
@@ -46105,6 +46179,7 @@ __export(internal_exports, {
   noteBForkTruncation: () => noteBForkTruncation,
   noteDerivationAdd: () => noteDerivationAdd,
   noteDerivationJoin: () => noteDerivationJoin,
+  noteHostEffectBlocked: () => noteHostEffectBlocked,
   noteMemberDispatchMiss: () => noteMemberDispatchMiss,
   noteNullishMemberThrows: () => noteNullishMemberThrows,
   noteObjSlotMissing: () => noteObjSlotMissing,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nudojs",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "engines": {
     "node": ">=20"
   },
@@ -46,10 +46,10 @@
   "dependencies": {
     "@babel/generator": "^8.0.6",
     "@babel/types": "^8.0.6",
-    "@nudojs/core": "1.1.0",
-    "@nudojs/parser": "1.1.0",
-    "@nudojs/service": "1.1.0",
-    "@nudojs/harvester": "0.2.8",
+    "@nudojs/core": "1.1.2",
+    "@nudojs/parser": "1.1.2",
+    "@nudojs/service": "1.1.2",
+    "@nudojs/harvester": "0.2.10",
     "commander": "^15.0.0"
   },
   "devDependencies": {