nudojs 1.2.0 → 1.3.0

package/dist/index.js

@@ -59,10 +59,14 @@ function termEquals(a, b) {
   }
   return false;
 }
+function litKeyString(v2) {
+  if (typeof v2 === "number" && Object.is(v2, -0)) return "-0";
+  return String(v2);
+}
 function termToString(t) {
   if (t.op === "lit") {
     if (typeof t.value === "string") return JSON.stringify(t.value);
-    if (typeof t.value === "number" && Object.is(t.value, -0)) return "-0";
+    if (typeof t.value === "number") return litKeyString(t.value);
     return String(t.value);
   }
   if (t.op === "var") return t.id;
@@ -1012,6 +1016,48 @@ var init_pred = __esm({
   }
 });
 
+// ../core/src/algebra/projection-budget.ts
+var PROJECTION_MAX_DEPTH, ProjectionBudget;
+var init_projection_budget = __esm({
+  "../core/src/algebra/projection-budget.ts"() {
+    "use strict";
+    PROJECTION_MAX_DEPTH = 64;
+    ProjectionBudget = class {
+      #maxDepth;
+      #path = [];
+      #onPath = /* @__PURE__ */ new Set();
+      /** 粘性：本次投影是否发生过截断（"cycle" / "depth"），供台账记录 */
+      truncated;
+      constructor(maxDepth = PROJECTION_MAX_DEPTH) {
+        this.#maxDepth = maxDepth;
+      }
+      /**
+       * 进入一个 Abs（或 Shape）子树。返回 null → 继续递归，之后必须配对
+       * `exit()`；返回 "cycle" | "depth" → 不得递归，按出口各自的约定渲染
+       * 截断标记（不调用 exit——本次 enter 没有入栈）。
+       */
+      enter(a) {
+        if (this.#onPath.has(a)) {
+          this.truncated = "cycle";
+          return "cycle";
+        }
+        if (this.#path.length >= this.#maxDepth) {
+          this.truncated = "depth";
+          return "depth";
+        }
+        this.#path.push(a);
+        this.#onPath.add(a);
+        return null;
+      }
+      /** 离开子树（与返回 null 的 enter 严格配对）。 */
+      exit() {
+        const a = this.#path.pop();
+        if (a !== void 0) this.#onPath.delete(a);
+      }
+    };
+  }
+});
+
 // ../core/src/algebra/abs.ts
 function anyVar(id, conf = "path") {
   return { shape: { k: "any" }, term: { op: "var", id }, conf };
@@ -1075,13 +1121,34 @@ function confJoin(a, b) {
   return rank[Math.max(ia < 0 ? 5 : ia, ib < 0 ? 5 : ib)];
 }
 function absToString(a) {
-  const parts = [shapeToString(a.shape)];
-  if (a.term) parts.push(`term=${termToString(a.term)}`);
-  if (a.pred && a.pred.op !== "true") parts.push(predToString(a.pred));
-  parts.push(`#${a.conf}`);
-  return parts.join(" ");
+  return absToStringB(a, new ProjectionBudget());
+}
+function absToStringB(a, budget) {
+  const stop2 = budget.enter(a);
+  if (stop2) return stop2 === "cycle" ? "\u2026cycle" : "\u2026";
+  try {
+    const parts = [shapeToStringB(a.shape, budget)];
+    if (a.term) parts.push(`term=${termToString(a.term)}`);
+    if (a.pred && a.pred.op !== "true") parts.push(predToString(a.pred));
+    parts.push(`#${a.conf}`);
+    return parts.join(" ");
+  } finally {
+    budget.exit();
+  }
 }
 function shapeToString(s) {
+  return shapeToStringB(s, new ProjectionBudget());
+}
+function shapeToStringB(s, budget) {
+  const stop2 = budget.enter(s);
+  if (stop2) return stop2 === "cycle" ? "\u2026cycle" : "\u2026";
+  try {
+    return shapeToStringInner(s, budget);
+  } finally {
+    budget.exit();
+  }
+}
+function shapeToStringInner(s, budget) {
   switch (s.k) {
     case "never":
       return "never";
@@ -1093,22 +1160,22 @@ function shapeToString(s) {
       return s.type;
     case "obj": {
       const entries = Object.entries(s.slots).map(
-        ([k, slot]) => `${k}${slot.optional ? "?" : ""}: ${absToString(slot.value)}`
+        ([k, slot]) => `${k}${slot.optional ? "?" : ""}: ${absToStringB(slot.value, budget)}`
       );
       return `{ ${entries.join(", ")} }`;
     }
     case "arr":
-      return `${shapeToString(s.element.shape)}[]`;
+      return `${shapeToStringB(s.element.shape, budget)}[]`;
     case "tuple":
-      return `[${s.elements.map((e) => shapeToString(e.shape)).join(", ")}]`;
+      return `[${s.elements.map((e) => shapeToStringB(e.shape, budget)).join(", ")}]`;
     case "fn":
       return `fn(${s.params.join(", ")})${s.name ? ` ${s.name}` : ""}`;
     case "brand":
       return s.name;
     case "eff":
-      return `${s.eff}<${shapeToString(s.inner.shape)}>`;
+      return `${s.eff}<${shapeToStringB(s.inner.shape, budget)}>`;
     case "sum":
-      return s.members.map(absToString).join(" | ");
+      return s.members.map((m) => absToStringB(m, budget)).join(" | ");
     default:
       return "\xB7";
   }
@@ -1153,6 +1220,7 @@ var init_abs = __esm({
     "use strict";
     init_term();
     init_pred();
+    init_projection_budget();
     never = { shape: { k: "never" }, conf: "exact" };
     unknown = { shape: { k: "unknown" }, conf: "partial" };
     anyAbs = { shape: { k: "any" }, conf: "path" };
@@ -15788,7 +15856,7 @@ function absFunction(params, impl, opts) {
   return a;
 }
 function termKey2(t) {
-  if (t.op === "lit") return `L:${typeof t.value}:${String(t.value)}`;
+  if (t.op === "lit") return `L:${typeof t.value}:${litKeyString(t.value)}`;
   if (t.op === "var") return `V:${t.id}`;
   return `A:${t.fn}(${t.args.map(termKey2).join(",")})`;
 }
@@ -15904,6 +15972,7 @@ var init_abs_fn = __esm({
   "../core/src/algebra/abs-fn.ts"() {
     "use strict";
     init_abs();
+    init_term();
     implByAbs = /* @__PURE__ */ new WeakMap();
   }
 });
@@ -16258,7 +16327,7 @@ function absShapeKey(a, seen = /* @__PURE__ */ new Set()) {
   try {
     const s = a.shape;
     if (s.k === "prim") {
-      if (a.term?.op === "lit") return `prim:${s.type}:${String(a.term.value)}`;
+      if (a.term?.op === "lit") return `prim:${s.type}:${litKeyString(a.term.value)}`;
       const t = a.term ? termToString(a.term) : "";
       const p = a.pred && a.pred.op !== "true" ? predToString(a.pred) : "";
       return `prim:${s.type}:${t}:${p}`;
@@ -16270,7 +16339,7 @@ function absShapeKey(a, seen = /* @__PURE__ */ new Set()) {
         const v2 = a.term.value;
         if (v2 === void 0) return "unknown:undefined";
         if (v2 === null) return "unknown:null";
-        return `unknown:lit:${typeof v2}:${String(v2)}`;
+        return `unknown:lit:${typeof v2}:${litKeyString(v2)}`;
       }
       if (a.term) return `unknown:${termToString(a.term)}`;
       return "unknown";
@@ -16952,7 +17021,7 @@ function bindTypeVars(pattern, arg, map, depth = 0) {
   }
   if (ps.k === "obj" && as.k === "obj") {
     for (const [key, slot] of Object.entries(ps.slots)) {
-      const aSlot = as.slots[key];
+      const aSlot = getSlot(as.slots, key);
       if (aSlot) bindTypeVars(slot.value, aSlot.value, map, depth + 1);
     }
     return;
@@ -19471,6 +19540,7 @@ function absToJsonNative(a, seen) {
   if (t?.op === "lit") return t.value;
   const s = a.shape;
   if (s.k === "tuple") {
+    if (a.shape.rest) return NOT_LITERAL;
     seen.add(a);
     const holes = a.shape.holes ?? [];
     const out = [];
@@ -21902,51 +21972,15 @@ function toNumericAbs(a) {
   }
   return n;
 }
-function updateAddAbs(a) {
+function updateAddAbs(a, phi2 = pTrue) {
   const n = toNumericAbs(a);
   const one = n.shape.k === "prim" && n.shape.type === "bigint" ? bigintLit(1n) : numLit(1);
-  if (n.shape.k === "prim" && n.shape.type === "bigint" && !n.term) {
-    return abs({ k: "prim", type: "bigint" }, void 0, void 0, confJoin(n.conf, "exact"));
-  }
-  return addNumeric(n, one);
+  return add(n, one, phi2);
 }
-function updateSubAbs(a) {
+function updateSubAbs(a, phi2 = pTrue) {
   const n = toNumericAbs(a);
   const one = n.shape.k === "prim" && n.shape.type === "bigint" ? bigintLit(1n) : numLit(1);
-  if (n.shape.k === "prim" && n.shape.type === "bigint" && !n.term) {
-    return abs({ k: "prim", type: "bigint" }, void 0, void 0, confJoin(n.conf, "exact"));
-  }
-  return subNumeric(n, one);
-}
-function addNumeric(a, b) {
-  const ra = litValue(a);
-  const rb = litValue(b);
-  const va = ra.ok ? ra.value : void 0;
-  const vb = rb.ok ? rb.value : void 0;
-  if (typeof va === "bigint" && typeof vb === "bigint") return bigintLit(va + vb);
-  if (typeof va === "number" && typeof vb === "number") return numLit(va + vb);
-  const big = a.shape.k === "prim" && a.shape.type === "bigint" || typeof va === "bigint";
-  return abs(
-    { k: "prim", type: big ? "bigint" : "number" },
-    void 0,
-    void 0,
-    confJoin(confJoin(a.conf, b.conf), "path")
-  );
-}
-function subNumeric(a, b) {
-  const ra = litValue(a);
-  const rb = litValue(b);
-  const va = ra.ok ? ra.value : void 0;
-  const vb = rb.ok ? rb.value : void 0;
-  if (typeof va === "bigint" && typeof vb === "bigint") return bigintLit(va - vb);
-  if (typeof va === "number" && typeof vb === "number") return numLit(va - vb);
-  const big = a.shape.k === "prim" && a.shape.type === "bigint" || typeof va === "bigint";
-  return abs(
-    { k: "prim", type: big ? "bigint" : "number" },
-    void 0,
-    void 0,
-    confJoin(confJoin(a.conf, b.conf), "path")
-  );
+  return sub(n, one, phi2);
 }
 function toNumberAbs(a) {
   if (isSymbolAbs(a)) {
@@ -22227,6 +22261,7 @@ var init_surface = __esm({
     init_symbol_id();
     init_term();
     init_pred();
+    init_arithmetic();
     init_nudo_throw();
     init_may_throw();
   }
@@ -23019,24 +23054,40 @@ function leqShape(src, tgt, phi2, env2, depth) {
       return leqWithPred(s.element, t.element, phi2, env2, depth + 1);
     }
     if (s.k === "tuple") {
-      return s.elements.every((el) => leqWithPred(el, t.element, phi2, env2, depth + 1).ok) ? ok() : fail("tuple \u22AD arr");
+      const elsOk = s.elements.every((el) => leqWithPred(el, t.element, phi2, env2, depth + 1).ok);
+      const restOk = !s.rest || leqWithPred(s.rest, t.element, phi2, env2, depth + 1).ok;
+      return elsOk && restOk ? ok() : fail("tuple \u22AD arr");
     }
     return fail(`shape ${s.k} \u22AD arr`);
   }
   if (t.k === "tuple") {
     if (s.k !== "tuple") return fail(`shape ${s.k} \u22AD tuple`);
-    if (s.elements.length !== t.elements.length) {
+    if (!t.rest && s.elements.length !== t.elements.length) {
       return fail(`tuple arity ${s.elements.length} \u22AD ${t.elements.length}`);
     }
+    if (t.rest && s.elements.length < t.elements.length) {
+      return fail(`tuple arity ${s.elements.length} \u22AD ${t.elements.length} (target requires ${t.elements.length})`);
+    }
+    if (s.rest && !t.rest) {
+      return fail(`tuple rest \u22AD fixed arity ${t.elements.length}`);
+    }
     const sHoles = s.holes ?? [];
     const tHoles = t.holes ?? [];
-    if (sHoles.length !== tHoles.length || sHoles.some((h, i) => h !== tHoles[i])) {
-      return fail(`tuple holes [${sHoles.join(",")}] \u22AD [${tHoles.join(",")}]`);
+    const overlap = Math.min(s.elements.length, t.elements.length);
+    for (let i = 0; i < overlap; i++) {
+      if (sHoles.includes(i) !== tHoles.includes(i)) {
+        return fail(`tuple holes [${sHoles.join(",")}] \u22AD [${tHoles.join(",")}]`);
+      }
     }
-    for (let i = 0; i < t.elements.length; i++) {
-      const r = leqWithPred(s.elements[i], t.elements[i], phi2, env2, depth + 1);
+    for (let i = 0; i < s.elements.length; i++) {
+      const tgt2 = i < t.elements.length ? t.elements[i] : t.rest;
+      const r = leqWithPred(s.elements[i], tgt2, phi2, env2, depth + 1);
       if (!r.ok) return fail(`tuple[${i}]: ${r.reason}`);
     }
+    if (s.rest && t.rest) {
+      const r = leqWithPred(s.rest, t.rest, phi2, env2, depth + 1);
+      if (!r.ok) return fail(`tuple rest: ${r.reason}`);
+    }
     return ok();
   }
   if (t.k === "fn") {
@@ -23121,13 +23172,29 @@ function formatAbs(a, opts = {}) {
   return parts.join("  ");
 }
 function formatShapeSlot(a) {
-  const base = formatShape(a);
+  return formatShapeSlotB(a, new ProjectionBudget());
+}
+function formatShapeSlotB(a, budget) {
+  const base = formatShapeB(a, budget);
   if (!a.term || a.term.op === "lit") return base;
   if (a.shape.k === "fn" || a.shape.k === "arr") return base;
   if (a.shape.k === "any" && a.term.op === "var") return termToString(a.term);
   return `${base} = ${termToString(a.term)}`;
 }
 function formatShape(a) {
+  return formatShapeB(a, new ProjectionBudget());
+}
+function formatShapeB(a, budget) {
+  const stop2 = budget.enter(a);
+  if (stop2 === "cycle") return FORMAT_TRUNC.cycle;
+  if (stop2 === "depth") return FORMAT_TRUNC.depth;
+  try {
+    return formatShapeInner(a, budget);
+  } finally {
+    budget.exit();
+  }
+}
+function formatShapeInner(a, budget) {
   const s = a.shape;
   switch (s.k) {
     case "never":
@@ -23154,28 +23221,28 @@ function formatShape(a) {
       const entries = Object.entries(s.slots).map(([k, slot]) => {
         const opt = slot.optional ? "?" : "";
         const key = /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(k) ? k : JSON.stringify(k);
-        return `${key}${opt}: ${formatShape(slot.value)}`;
+        return `${key}${opt}: ${formatShapeB(slot.value, budget)}`;
       });
       return `{ ${entries.join(", ")} }`;
     }
     case "arr": {
       if (s.element.shape.k === "any" && s.element.term?.op === "var") {
-        return `arr(${formatShapeSlot(s.element)})`;
+        return `arr(${formatShapeSlotB(s.element, budget)})`;
       }
-      return `${formatShape(s.element)}[]`;
+      return `${formatShapeB(s.element, budget)}[]`;
     }
     case "tuple": {
       const holes = s.holes ?? [];
       const parts = s.elements.map(
-        (el, i) => holes.includes(i) ? "" : formatShape(el)
+        (el, i) => holes.includes(i) ? "" : formatShapeB(el, budget)
       );
       if (s.rest) {
-        parts.push(`...${formatShape(s.rest)}`);
+        parts.push(`...${formatShapeB(s.rest, budget)}`);
       }
       return `[${parts.join(", ")}]`;
     }
     case "fn": {
-      const ret = s.returnType !== void 0 ? formatShapeSlot(s.returnType) : "?";
+      const ret = s.returnType !== void 0 ? formatShapeSlotB(s.returnType, budget) : "?";
       const labels = s.params ?? [];
       const paramTypes = s.paramTypes;
       const hasMarkers = labels.some(
@@ -23187,7 +23254,7 @@ function formatShape(a) {
         for (let i = 0; i < n; i++) {
           const label = labels[i];
           const type = paramTypes?.[i];
-          const typeText = type !== void 0 ? formatShapeSlot(type) : void 0;
+          const typeText = type !== void 0 ? formatShapeSlotB(type, budget) : void 0;
           if (label?.startsWith("...")) {
             ps.push(typeText ? `...${label.slice(3)}: ${typeText}` : label);
           } else if (label?.endsWith("?")) {
@@ -23204,7 +23271,7 @@ function formatShape(a) {
         return `(${renderLabeled().join(", ")}) => ${ret}`;
       }
       if (paramTypes && paramTypes.length > 0) {
-        const ps = paramTypes.map((p) => formatShapeSlot(p));
+        const ps = paramTypes.map((p) => formatShapeSlotB(p, budget));
         return `(${ps.join(", ")}) => ${ret}`;
       }
       return `(${labels.join(", ")}) => ${ret}`;
@@ -23215,7 +23282,7 @@ function formatShape(a) {
       if (slots) {
         const arg = (key) => {
           const sl = slots[key];
-          return sl ? formatShapeSlot(sl.value) : void 0;
+          return sl ? formatShapeSlotB(sl.value, budget) : void 0;
         };
         if (s.name === "Map" || s.name === "ReadonlyMap" || s.name === "WeakMap") {
           const k = arg("__key");
@@ -23230,12 +23297,12 @@ function formatShape(a) {
       return `${s.name}`;
     }
     case "eff":
-      return `${s.eff}<${formatShape(s.inner)}>`;
+      return `${s.eff}<${formatShapeB(s.inner, budget)}>`;
     case "sum": {
       const seen = /* @__PURE__ */ new Set();
       const parts = [];
       for (const m of s.members) {
-        const t = formatShape(m);
+        const t = formatShapeB(m, budget);
         if (seen.has(t)) continue;
         seen.add(t);
         parts.push(t);
@@ -23259,12 +23326,15 @@ function formatAbsMultiline(a, label) {
   lines.push(`  conf: ${a.conf}`);
   return lines.join("\n");
 }
+var FORMAT_TRUNC;
 var init_format = __esm({
   "../core/src/algebra/format.ts"() {
     "use strict";
     init_abs();
     init_term();
     init_pred();
+    init_projection_budget();
+    FORMAT_TRUNC = { cycle: "\u2026cycle", depth: "\u2026" };
   }
 });
 
@@ -23938,12 +24008,19 @@ function parseNudoImportPayload(payload) {
   if (s === "") return void 0;
   const named = s.match(/^\{([^}]+)\}\s*from\s*["']([^"']+)["']$/);
   if (named) {
-    const names2 = named[1].split("\n").map((line) => line.replace(/^\s*\/\/\/?\s?/, "").trim()).join("\n").split(",").map((x) => x.trim()).filter(Boolean).map((x) => x.split(/\s+as\s+/).pop().trim());
-    return { names: names2, spec: named[2] };
+    const names2 = [];
+    const importedOfLocal = {};
+    for (const x of named[1].split("\n").map((line) => line.replace(/^\s*\/\/\/?\s?/, "").trim()).join("\n").split(",").map((x2) => x2.trim()).filter(Boolean)) {
+      const seg = x.split(/\s+as\s+/);
+      const local = seg[seg.length - 1].trim();
+      names2.push(local);
+      if (seg.length > 1) importedOfLocal[local] = seg[0].trim();
+    }
+    return { names: names2, importedOfLocal, spec: named[2] };
   }
   const ns = s.match(/^\*\s+as\s+(\w+)\s+from\s*["']([^"']+)["']$/);
   if (ns) {
-    return { names: [`*${ns[1]}`], spec: ns[2] };
+    return { names: [`*${ns[1]}`], importedOfLocal: {}, spec: ns[2] };
   }
   if (/^[\w$]+\s+from\b/.test(s) || /^[\w$]+\s*,/.test(s)) return "malformed-default";
   return "malformed";
@@ -23953,7 +24030,7 @@ function fileDirectiveVisibleText(source) {
 }
 function extractFileEnvNames(source) {
   const text = fileDirectiveVisibleText(source);
-  const re = new RegExp(`${LINE_COMMENT_PREFIX}\\s*@nudo:env\\s+([^\\n*]+)`, "g");
+  const re = new RegExp(`${LINE_COMMENT_PREFIX}[ \\t]*@nudo:env[ \\t]+([^\\n*]+)`, "g");
   const out = [];
   let m;
   while (m = re.exec(text)) {
@@ -23964,7 +24041,7 @@ function extractFileEnvNames(source) {
 function extractMockModuleRecords(source) {
   const text = fileDirectiveVisibleText(source);
   const re = new RegExp(
-    `${LINE_COMMENT_PREFIX}\\s*@nudo:mock-module\\s+([^\\n]+)`,
+    `${LINE_COMMENT_PREFIX}[ \\t]*@nudo:mock-module[ \\t]+([^\\n]+)`,
     "g"
   );
   const out = [];
@@ -24165,7 +24242,7 @@ var init_directive_scan = __esm({
     init_parse_source();
     isPathLikeEnv = (s) => /^[^\s]+$/.test(s) && (s.startsWith("./") || s.startsWith("../") || s.startsWith("/") || /\.(ts|js|mjs|cjs|tsx|jsx)$/.test(s));
     LINE_COMMENT_PREFIX = "(?:^|[^/:])\\/\\/\\/?";
-    CASE_NAME_REGEX = /(?:^|\n)[ \t]*(?:\*[ \t]*|\/\/\/?\s*)?@nudo:case\s+"([^"]+)"\s*\(/g;
+    CASE_NAME_REGEX = /(?:^|\n)[ \t]*(?:\*[ \t]*|\/[ \t]*)?@nudo:case[ \t]+"([^"\n]+)"[ \t]*\(/g;
   }
 });
 
@@ -24782,11 +24859,7 @@ var init_constraint = __esm({
 });
 
 // ../core/src/algebra/refine.ts
-function extractNudoImports(source) {
-  const out = [];
-  for (const rec of extractNudoImportRecords(source)) {
-    out.push({ names: rec.names, spec: rec.spec });
-  }
+function diagnoseMalformedNudoImports(source) {
   for (const bad of scanMalformedNudoImports(source)) {
     if (bad === "malformed-default") {
       collectDiag({
@@ -24800,7 +24873,13 @@ function extractNudoImports(source) {
       });
     }
   }
-  return out;
+}
+function extractNudoImports(source) {
+  diagnoseMalformedNudoImports(source);
+  return extractNudoImportRecords(source).map((rec) => ({
+    names: rec.names,
+    spec: rec.spec
+  }));
 }
 function setRefineDiagCollector(fn2) {
   refineDiagCollector = fn2;
@@ -24897,6 +24976,21 @@ function rewriteSidecarSource(src, fromFile) {
         cuts.push({ start: stmt.start, end: decl.start, text: "" });
         continue;
       }
+      if (!stmt.source) {
+        let aliasPairs = false;
+        for (const spec of stmt.specifiers) {
+          if (spec.type !== "ExportSpecifier") continue;
+          if (spec.local.type !== "Identifier") continue;
+          const key = spec.exported.type === "Identifier" ? spec.exported.name : spec.exported.value;
+          if (key === void 0) continue;
+          exportPairs.push({ key, expr: spec.local.name });
+          aliasPairs = true;
+        }
+        if (aliasPairs) {
+          cuts.push({ start: stmt.start, end: stmt.end, text: "" });
+          continue;
+        }
+      }
       badExport("'export { \u2026 }' (list / re-export)");
       if (stmt.start != null && stmt.end != null) {
         cuts.push({ start: stmt.start, end: stmt.end, text: "" });
@@ -25053,14 +25147,15 @@ function execSidecar(src, opts, chain, preloaded) {
           });
           prologue.push(`var ${n.local} = __nudoInjects;`);
         } else if (n.imported !== void 0) {
-          if (!(n.imported in sidecarInjects)) {
+          const hasOwnInject = Object.hasOwn(sidecarInjects, n.imported);
+          if (!hasOwnInject) {
             collectDiag({
               code: "nudo:interface-load",
               message: `sidecar import '{ ${n.imported} }' from '${imp.spec}' is not an injected builder`,
               file: fromFile
             });
-          }
-          if (n.local !== n.imported || !(n.imported in sidecarInjects)) {
+            prologue.push(`var ${n.local} = undefined;`);
+          } else if (n.local !== n.imported) {
             prologue.push(`var ${n.local} = __nudoInjects[${JSON.stringify(n.imported)}];`);
           }
         } else {
@@ -25129,21 +25224,23 @@ function execSidecar(src, opts, chain, preloaded) {
       if (n.ns) {
         deps[n.local] = depExports;
       } else if (n.imported !== void 0) {
-        if (!(n.imported in depExports)) {
+        if (Object.hasOwn(depExports, n.imported)) {
+          deps[n.local] = depExports[n.imported];
+        } else {
           collectDiag({
             code: "nudo:interface-load",
             message: `sidecar '${imp.spec}' has no export '${n.imported}'`,
             file: fromFile
           });
+          deps[n.local] = void 0;
         }
-        deps[n.local] = depExports[n.imported];
       } else {
         collectDiag({
           code: "nudo:interface-load",
           message: `sidecar default import '${n.local}' from '${imp.spec}' has no default export (sidecars export named constraints only)`,
           file: fromFile
         });
-        deps[n.local] = depExports.default;
+        deps[n.local] = Object.hasOwn(depExports, "default") ? depExports.default : void 0;
       }
     }
   }
@@ -25247,7 +25344,8 @@ function resetNudoModuleExecCache() {
 }
 function collectConstraints(source, opts) {
   const map = /* @__PURE__ */ new Map();
-  const imports = extractNudoImports(source);
+  diagnoseMalformedNudoImports(source);
+  const imports = extractNudoImportRecords(source);
   for (const imp of imports) {
     if (!opts.loadModule || !opts.fromFile) {
       collectDiag({
@@ -25302,19 +25400,20 @@ function collectConstraints(source, opts) {
         }
         continue;
       }
-      const v2 = exports[name];
+      const imported = imp.importedOfLocal[name] ?? name;
+      const v2 = Object.hasOwn(exports, imported) ? exports[imported] : void 0;
       if (isNudoConstraint(v2)) {
         map.set(name, v2);
       } else if (v2 === void 0) {
         collectDiag({
           code: "nudo:interface-load",
-          message: `sidecar '${imp.spec}' has no export '${name}'`,
+          message: `sidecar '${imp.spec}' has no export '${imported}'`,
           file: opts.fromFile
         });
       } else {
         collectDiag({
           code: "nudo:interface-load",
-          message: `sidecar '${imp.spec}' export '${name}' is not a Nudo constraint`,
+          message: `sidecar '${imp.spec}' export '${imported}' is not a Nudo constraint`,
           file: opts.fromFile
         });
       }
@@ -25345,7 +25444,13 @@ function extractRefinesFromSource(source, fnName, opts = {}) {
       const [, param, cName] = m;
       if (param === "return") continue;
       const c = constraints.get(cName);
-      if (!c) continue;
+      if (!c) {
+        collectDiag({
+          code: "nudo:contract-syntax",
+          message: `Unknown constraint name '${cName}' in @nudo:contract (expected a name bound by @nudo:import)`
+        });
+        continue;
+      }
       out.push({
         param,
         pred: instantiateConstraint(c, param),
@@ -25382,7 +25487,13 @@ function extractRefineReturnFromSource(source, fnName, opts = {}) {
       }
       const cName = m[1];
       const c = constraints.get(cName);
-      if (!c) continue;
+      if (!c) {
+        collectDiag({
+          code: "nudo:contract-syntax",
+          message: `Unknown constraint name '${cName}' in @nudo:contract return (expected a name bound by @nudo:import)`
+        });
+        continue;
+      }
       return { name: cName, constraint: c };
     }
   }
@@ -25451,8 +25562,10 @@ var init_unsupported = __esm({
     NudoUnsupportedError = class extends Error {
       reason;
       loc;
-      constructor(reason, loc) {
-        super(`nudo:unsupported ${reason}`);
+      constructor(reason, loc, detail) {
+        super(
+          detail ? `nudo:unsupported ${reason} (${detail})` : `nudo:unsupported ${reason}`
+        );
         this.name = "NudoUnsupportedError";
         this.reason = reason;
         this.loc = loc;
@@ -26911,15 +27024,15 @@ function transpileStatement(stmt, depth, opts) {
         if (nsSpecs.length > 0) {
           if (!stmt.source) return `${pad}/* export * as without source skipped */`;
           return nsSpecs.map((s) => {
-            const exported = s.exported.type === "Identifier" ? s.exported.name : s.exported.value;
+            const exported = s.exported.type === "Identifier" ? s.exported.name : JSON.stringify(s.exported.value);
             return `${pad}export * as ${exported} from ${JSON.stringify(stmt.source.value)};`;
           }).join("\n");
         }
         const specs = stmt.specifiers.filter(
           (s) => "local" in s
         ).map((s) => {
-          const local = s.local.type === "Identifier" ? s.local.name : s.local.value;
-          const exported = s.exported.type === "Identifier" ? s.exported.name : s.exported.value;
+          const local = s.local.type === "Identifier" ? s.local.name : JSON.stringify(s.local.value);
+          const exported = s.exported.type === "Identifier" ? s.exported.name : JSON.stringify(s.exported.value);
           return local === exported ? local : `${local} as ${exported}`;
         }).join(", ");
         if (stmt.source) {
@@ -28886,10 +28999,10 @@ function $toNumeric(a) {
   return toNumericAbs(a);
 }
 function $updateAdd(a) {
-  return updateAddAbs(a);
+  return updateAddAbs(a, currentExecPhi());
 }
 function $updateSub(a) {
-  return updateSubAbs(a);
+  return updateSubAbs(a, currentExecPhi());
 }
 function $neg(a) {
   return negAbs(a);
@@ -29153,21 +29266,51 @@ var init_member_diag = __esm({
 });
 
 // ../core/src/algebra/exec/class-registry.ts
+function beginClassEpoch() {
+  classEpoch++;
+}
+function drainClassCollisions() {
+  return classCollisions.splice(0, classCollisions.length);
+}
+function specShape(spec) {
+  const ctorName = spec.ctor?.name ?? "anon";
+  const methods2 = Object.keys(spec.methods ?? {}).sort().join(",");
+  const statics = Object.keys(spec.staticMethods ?? {}).sort().join(",");
+  const accessors = Object.keys(spec.accessors ?? {}).sort().join(",");
+  return `${ctorName}[${methods2}](${statics}){${accessors}}`;
+}
 function registerEvalClass(spec) {
+  const prev = classRegistry.get(spec.name);
+  const prevEpoch = classEpochs.get(spec.name);
+  if (prev && prev !== spec && // 同 epoch（同一次 run 内）注册两次才可能是真碰撞：
+  // 块级作用域同名类。跨 epoch = 顺序重注册（常态）。
+  prevEpoch === classEpoch && specShape(prev) !== specShape(spec)) {
+    classCollisions.push({
+      name: spec.name,
+      previous: specShape(prev),
+      next: specShape(spec)
+    });
+  }
   classRegistry.set(spec.name, spec);
+  classEpochs.set(spec.name, classEpoch);
 }
 function getEvalClass(name) {
   return classRegistry.get(name);
 }
 function clearBClasses() {
   classRegistry.clear();
+  classEpochs.clear();
+  classCollisions.length = 0;
 }
-var classRegistry;
+var classRegistry, classEpoch, classEpochs, classCollisions;
 var init_class_registry = __esm({
   "../core/src/algebra/exec/class-registry.ts"() {
     "use strict";
     init_class_mark();
     classRegistry = /* @__PURE__ */ new Map();
+    classEpoch = 0;
+    classEpochs = /* @__PURE__ */ new Map();
+    classCollisions = [];
   }
 });
 
@@ -29691,6 +29834,8 @@ function $copy(a) {
       {
         k: "tuple",
         elements: s.elements.map($copy),
+        // rest 槽必须随快照迁移（与 hof snapshotAbs 同口径），否则副本丢尾段
+        ...s.rest ? { rest: $copy(s.rest) } : {},
         holes: s.holes ? [...s.holes] : void 0
       },
       a.term,
@@ -29881,7 +30026,7 @@ function $idx(a, i) {
     if (slots.length === 0) return objShape.open ? unknown : undef();
     const joinSlotsWithUndef = () => joinAbs(slots.reduce((x, y) => joinAbs(x, y)), undef());
     if (typeof iv === "string" || typeof iv === "number" || typeof iv === "boolean") {
-      const slot = objShape.slots[String(iv)];
+      const slot = getSlot(objShape.slots, String(iv));
       if (slot) return slot.value;
       if (objShape.open) return unknown;
       return undef();
@@ -30098,6 +30243,20 @@ function $arrRest(a, start) {
     return parts.length ? parts.reduce((x, y) => joinAbs(x, y)) : unknown;
   }
   if (a.shape.k === "tuple") {
+    if (a.shape.rest) {
+      const sliced = a.shape.elements.slice(start);
+      if (start < a.shape.elements.length && !shouldWidenArrayLiteral(sliced.length + 1)) {
+        return abs(
+          { k: "tuple", elements: sliced, rest: a.shape.rest },
+          void 0,
+          void 0,
+          a.conf
+        );
+      }
+      const restEl = a.shape.rest.shape.k === "arr" ? a.shape.rest.shape.element : a.shape.rest;
+      const el = sliced.reduce((x, y) => joinAbs(x, y), restEl);
+      return abs({ k: "arr", element: el }, void 0, void 0, a.conf);
+    }
     return tupleOrWiden(a.shape.elements.slice(start), a.conf);
   }
   if (a.shape.k === "arr") return a;
@@ -32610,7 +32769,7 @@ function namespaceAbsOf(mod2) {
   return abs({ k: "obj", slots, open: true }, void 0, void 0, "path");
 }
 function bindImports(node, env2, modules) {
-  const mod2 = modules[node.source.value];
+  const mod2 = Object.hasOwn(modules, node.source.value) ? modules[node.source.value] : void 0;
   if (!mod2) {
     for (const s of node.specifiers) {
       env2.vars.set(s.local.name, unknown);
@@ -32622,7 +32781,8 @@ function bindImports(node, env2, modules) {
       env2.vars.set(s.local.name, mod2.default ?? unknown);
     } else if (s.type === "ImportSpecifier") {
       const imported = s.imported.type === "Identifier" ? s.imported.name : String(s.imported);
-      env2.vars.set(s.local.name, mod2.named[imported] ?? unknown);
+      const named = Object.hasOwn(mod2.named, imported) ? mod2.named[imported] : void 0;
+      env2.vars.set(s.local.name, named ?? unknown);
     } else if (s.type === "ImportNamespaceSpecifier") {
       env2.vars.set(s.local.name, namespaceAbsOf(mod2));
     }
@@ -32648,7 +32808,7 @@ function collectAbsExports(file, env2, modules) {
   for (const stmt of file.program.body) {
     if (stmt.type === "ExportNamedDeclaration") {
       if (stmt.source && modules) {
-        const mod2 = modules[stmt.source.value];
+        const mod2 = Object.hasOwn(modules, stmt.source.value) ? modules[stmt.source.value] : void 0;
         if (mod2) {
           for (const spec of stmt.specifiers) {
             if (spec.type === "ExportNamespaceSpecifier") {
@@ -32660,7 +32820,7 @@ function collectAbsExports(file, env2, modules) {
             if (spec.type !== "ExportSpecifier") continue;
             const local = spec.local.type === "Identifier" ? spec.local.name : spec.local.value;
             const exported = spec.exported.type === "Identifier" ? spec.exported.name : spec.exported.value;
-            const v2 = local === "default" ? mod2.default : mod2.named[local];
+            const v2 = local === "default" ? mod2.default : Object.hasOwn(mod2.named, local) ? mod2.named[local] : void 0;
             const slot = v2 ?? unknown;
             if (exported === "default") defaultExport = slot;
             else {
@@ -32706,7 +32866,7 @@ function collectAbsExports(file, env2, modules) {
         }
       }
     } else if (stmt.type === "ExportAllDeclaration" && stmt.source && modules) {
-      const mod2 = modules[stmt.source.value];
+      const mod2 = Object.hasOwn(modules, stmt.source.value) ? modules[stmt.source.value] : void 0;
       if (mod2?.named) {
         for (const [k, v2] of Object.entries(mod2.named)) {
           if (!explicitNames.has(k)) named[k] = v2;
@@ -33061,6 +33221,7 @@ ${js}`;
   const fn2 = new Function(...argNames, `${js}
 ${ret}`);
   setEvalBindingSink(bindings);
+  beginClassEpoch();
   try {
     const result = fn2(...args);
     runBindings.set(result, bindings);
@@ -33068,6 +33229,18 @@ ${ret}`);
   } finally {
     setEvalBindingSink(null);
     drainPromiseMicros();
+    noteDrainedClassCollisions();
+  }
+}
+function noteDrainedClassCollisions() {
+  for (const c of drainClassCollisions()) {
+    noteEvalFallback(
+      new NudoUnsupportedError(
+        "class-collision",
+        void 0,
+        `class '${c.name}' registered again with a different shape (${c.previous} -> ${c.next}); name-keyed lookup may resolve to either definition`
+      )
+    );
   }
 }
 function setEvalFallbackCollector(collector2) {
@@ -33125,14 +33298,16 @@ function isAbsVal(v2) {
 }
 function callTranspiledExportFull(exports, name, args, opts) {
   enterEvalCallBudgetSession();
+  beginClassEpoch();
   try {
     return callTranspiledExportFullInner(exports, name, args, opts);
   } finally {
     exitEvalCallBudgetSession();
+    noteDrainedClassCollisions();
   }
 }
 function callTranspiledExportFullInner(exports, name, args, opts) {
-  const fn2 = exports[name];
+  const fn2 = Object.hasOwn(exports, name) ? exports[name] : void 0;
   if (typeof fn2 === "function") {
     const callArgs = args.map(
       (a) => a && typeof a === "object" && "shape" in a ? $copy(a) : a
@@ -33236,6 +33411,7 @@ var init_run = __esm({
     init_transpile();
     init_intrinsics();
     init_unsupported();
+    init_class_registry();
     init_export_names();
     init_may_throw();
     init_builtins();
@@ -33949,7 +34125,9 @@ function localNamedExports(source) {
   const identName = (n) => {
     if (!n) return void 0;
     if (n.type === "Identifier" && typeof n.name === "string") return n.name;
-    if (n.type === "Literal" && typeof n.value === "string") return n.value;
+    if ((n.type === "StringLiteral" || n.type === "Literal") && typeof n.value === "string") {
+      return n.value;
+    }
     return void 0;
   };
   const localClasses = /* @__PURE__ */ new Map();
@@ -34097,6 +34275,25 @@ function localNamedExports(source) {
   }
   return out;
 }
+function exportedNameOfLocal(source, localName) {
+  let ast;
+  try {
+    ast = parseSource(source, { errorRecovery: true });
+  } catch {
+    return void 0;
+  }
+  for (const stmt of ast.program.body) {
+    if (stmt.type !== "ExportNamedDeclaration" || stmt.source) continue;
+    for (const spec of stmt.specifiers) {
+      if (spec.type !== "ExportSpecifier") continue;
+      if (spec.local.type !== "Identifier" || spec.local.name !== localName) continue;
+      const name = spec.exported.type === "Identifier" ? spec.exported.name : spec.exported.value;
+      if (name === void 0 || name === localName || name === "default") continue;
+      return name;
+    }
+  }
+  return void 0;
+}
 function generatedExportNames(sidecarSrc) {
   const out = /* @__PURE__ */ new Set();
   let ast;
@@ -34110,8 +34307,18 @@ function generatedExportNames(sidecarSrc) {
     const stmt = stmts[i];
     if (stmt.type !== "ExportNamedDeclaration") continue;
     if (stmt.source) continue;
+    if (stmt.start == null) continue;
     const d = stmt.declaration;
-    if (!d || stmt.start == null) continue;
+    if (!d) {
+      if (regionHasGeneratedMarker(stmts, i, sidecarSrc)) {
+        for (const spec of stmt.specifiers) {
+          if (spec.type !== "ExportSpecifier") continue;
+          const name = spec.exported.type === "Identifier" ? spec.exported.name : spec.exported.value;
+          if (name !== void 0) out.add(name);
+        }
+      }
+      continue;
+    }
     const names2 = [];
     if (d.type === "VariableDeclaration") {
       for (const decl of d.declarations) {
@@ -34182,6 +34389,8 @@ function sidecarMayBind(sidecarNames, fnName, source) {
   if (!sidecarNames) return true;
   if (sidecarNames.size === 0) return true;
   if (sidecarNames.has(fnName)) return true;
+  const aliasExport = exportedNameOfLocal(source, fnName);
+  if (aliasExport !== void 0 && sidecarNames.has(aliasExport)) return true;
   if (sidecarNames.has("default") && isDefaultExportLocal(source, fnName)) return true;
   if (fnName.includes(".")) {
     const [cls, method] = fnName.split(".", 2);
@@ -34251,20 +34460,26 @@ function loadSidecarBinding(source, fnName, opts) {
     }
     return { ok: false };
   }
-  let binding = exports[fnName];
+  let binding = Object.hasOwn(exports, fnName) ? exports[fnName] : void 0;
+  if (binding === void 0) {
+    const aliasExport2 = exportedNameOfLocal(source, fnName);
+    if (aliasExport2 !== void 0 && Object.hasOwn(exports, aliasExport2)) {
+      binding = exports[aliasExport2];
+    }
+  }
   if (binding === void 0 && exports.default !== void 0 && isDefaultExportLocal(source, fnName)) {
     binding = exports.default;
   }
   if (binding === void 0 && fnName.includes(".")) {
     const [cls, method] = fnName.split(".", 2);
-    binding = exports[`${cls}_${method}`];
+    binding = Object.hasOwn(exports, `${cls}_${method}`) ? exports[`${cls}_${method}`] : void 0;
     if (binding === void 0) {
-      const bag = exports[cls];
+      const bag = Object.hasOwn(exports, cls) ? exports[cls] : void 0;
       if (bag && typeof bag === "object" && !isNudoConstraint(bag)) {
-        binding = bag[method];
+        binding = Object.hasOwn(bag, method) ? bag[method] : void 0;
       }
     }
-    if (binding === void 0 && method !== void 0 && exports[method] !== void 0) {
+    if (binding === void 0 && method !== void 0 && Object.hasOwn(exports, method)) {
       collectDiag2({
         code: "nudo:interface-load",
         message: `sidecar key '${method}' does not bind '${fnName}' \u2014 use '${cls}.${method}', '${cls}_${method}', or nested { ${cls}: { ${method}: \u2026 } }`,
@@ -34290,7 +34505,8 @@ function loadSidecarBinding(source, fnName, opts) {
     return { ok: false };
   }
   const generatedNames = generatedExportNames(sidecarSrc);
-  const isGenerated2 = generatedNames.has(fnName) || (fnName.includes(".") ? (() => {
+  const aliasExport = exportedNameOfLocal(source, fnName);
+  const isGenerated2 = generatedNames.has(fnName) || (aliasExport !== void 0 ? generatedNames.has(aliasExport) : false) || (fnName.includes(".") ? (() => {
     const [cls, method] = fnName.split(".", 2);
     return generatedNames.has(`${cls}_${method}`) || generatedNames.has(cls);
   })() : false);
@@ -35216,7 +35432,7 @@ var init_promote_scan = __esm({
 function termKey5(t, rename) {
   switch (t.op) {
     case "lit":
-      return `L:${typeof t.value}:${String(t.value)}`;
+      return `L:${typeof t.value}:${litKeyString(t.value)}`;
     case "var":
       return `V:${rename?.get(t.id) ?? t.id}`;
     case "app":
@@ -35323,6 +35539,9 @@ function collectPredVars(p, acc) {
     case "typeof":
       collectTermVars(p.t, acc);
       return;
+    case "assumeFinite":
+      collectTermVars(p.t, acc);
+      return;
   }
 }
 function collectAbsVars(a, acc, seen) {
@@ -38282,8 +38501,17 @@ var init_scan = __esm({
 });
 
 // ../core/src/algebra/projection.ts
-function absToConstraint(a) {
+function absToConstraint(a, budget = new ProjectionBudget()) {
   if (!PROJECTABLE_CONF.has(a.conf)) return void 0;
+  const stop2 = budget.enter(a);
+  if (stop2) return void 0;
+  try {
+    return absToConstraintInner(a, budget);
+  } finally {
+    budget.exit();
+  }
+}
+function absToConstraintInner(a, budget) {
   const s = a.shape;
   switch (s.k) {
     case "prim":
@@ -38301,9 +38529,9 @@ function absToConstraint(a) {
     case "any":
       return a.pred?.op === "or" ? projectOrLiterals(a) : void 0;
     case "obj":
-      return projectObj(s.slots, s.index, s.open);
+      return projectObj(s.slots, s.index, s.open, budget);
     case "arr":
-      return projectArr(s.element);
+      return projectArr(s.element, budget);
     case "sum":
       return projectSum(s.members);
     default:
@@ -38486,18 +38714,18 @@ function projectOrLiterals(a) {
   }
   return lits.length > 0 ? union(...lits) : void 0;
 }
-function projectObj(slots, index2, open) {
+function projectObj(slots, index2, open, budget) {
   if (index2 || open) return void 0;
   const fields = {};
   for (const [k, slot] of Object.entries(slots)) {
-    const fc = absToConstraint(slot.value);
+    const fc = absToConstraint(slot.value, budget);
     if (!fc) return void 0;
     fields[k] = { constraint: fc, ...slot.optional ? { optional: true } : {} };
   }
   return { __nudoConstraint: true, preds: [], fields };
 }
-function projectArr(element) {
-  const ec = absToConstraint(element);
+function projectArr(element, budget) {
+  const ec = absToConstraint(element, budget);
   if (ec) return array(ec);
   if (element.shape.k === "prim" && isBuilderPrim(element.shape.type) && (!element.pred || element.pred.op === "true") && ARR_FALLBACK_CONF.has(element.conf)) {
     return array(primConstraint(element.shape.type));
@@ -38607,6 +38835,7 @@ var init_projection = __esm({
     init_objects();
     init_term();
     init_term();
+    init_projection_budget();
     PROJECTABLE_CONF = /* @__PURE__ */ new Set(["exact", "path"]);
     ARR_FALLBACK_CONF = /* @__PURE__ */ new Set([
       "exact",
@@ -39045,7 +39274,7 @@ function evalThrowsOf(source, fnName, args, opts = {}, phi2 = pTrue) {
     }
   };
   try {
-    if (fnName in exports) return call(fnName, args);
+    if (Object.hasOwn(exports, fnName)) return call(fnName, args);
     if (fnName.includes(".")) {
       const [clsName, methodName] = fnName.split(".", 2);
       const clsAbs = exports[clsName ?? ""];
@@ -39091,12 +39320,9 @@ function widenForAssign(a) {
   if (s.k === "tuple") {
     const holes = new Set(s.holes ?? []);
     const els = s.elements.filter((_, i) => !holes.has(i));
-    let el = anyAbs;
-    if (els.length > 0) {
-      el = els.map(widenForAssign).reduce((x, y) => joinAbs(x, y));
-    } else if (s.rest) {
-      el = widenForAssign(s.rest);
-    }
+    const parts = els.map(widenForAssign);
+    if (s.rest) parts.push(widenForAssign(s.rest));
+    const el = parts.length > 0 ? parts.reduce((x, y) => joinAbs(x, y)) : anyAbs;
     return abs({ k: "arr", element: el }, void 0, void 0, a.conf);
   }
   if (s.k === "obj") {
@@ -40641,6 +40867,7 @@ __export(src_exports, {
   interfaceSourceOf: () => interfaceSourceOf,
   interfaceTierOf: () => interfaceTierOf,
   isAbsApplyResult: () => isAbsApplyResult,
+  isAbsVal: () => isAbsVal,
   isArrMutator: () => isArrMutator,
   isBigPrim: () => isBigPrim,
   isDefinitelyFalse: () => isDefinitelyFalse,
@@ -41046,6 +41273,7 @@ function paramName(param) {
   return void 0;
 }
 function unwrapDefaultExport(mod2) {
+  if (mod2 == null) return void 0;
   if (typeof mod2 === "function") return mod2;
   return mod2.default;
 }
@@ -41111,9 +41339,73 @@ function emitDirectiveDiag(d) {
 function resetDirectiveDiagSeen() {
   directiveDiagSeen.clear();
 }
+function isSafeTypeExprNode(node) {
+  switch (node.type) {
+    case "NumericLiteral":
+    case "StringLiteral":
+    case "BooleanLiteral":
+    case "NullLiteral":
+      return true;
+    case "Identifier":
+      return node.name === "undefined";
+    case "UnaryExpression":
+      return node.operator === "-" && node.argument.type === "NumericLiteral";
+    case "ArrayExpression":
+      return node.elements.every(
+        (el) => el !== null && el.type !== "SpreadElement" && isSafeTypeExprNode(el)
+      );
+    case "ObjectExpression":
+      return node.properties.every((prop) => {
+        if (prop.type !== "ObjectProperty") return false;
+        if (prop.computed) return false;
+        const key = prop.key;
+        if (key.type !== "Identifier" && key.type !== "StringLiteral") return false;
+        return isSafeTypeExprNode(prop.value);
+      });
+    case "CallExpression": {
+      const argsOk = node.arguments.every(
+        (arg) => arg.type !== "SpreadElement" && arg.type !== "ArgumentPlaceholder" && isSafeTypeExprNode(arg)
+      );
+      if (!argsOk) return false;
+      return isSafeTypeExprCallee(node.callee);
+    }
+    default:
+      return false;
+  }
+}
+function isSafeTypeExprCallee(node) {
+  if (node.type === "Identifier") {
+    return CONSTRAINT_BUILDER_NAMES.includes(node.name);
+  }
+  if (node.type === "MemberExpression") {
+    if (node.computed) return false;
+    if (node.property.type !== "Identifier") return false;
+    if (!TYPE_EXPR_CHAIN_METHODS.has(node.property.name)) return false;
+    return isSafeTypeExprNode(node.object);
+  }
+  return false;
+}
+function isSafeTypeExprSource(s) {
+  try {
+    const ast = parse2(`(${s});`);
+    if (ast.program.body.length !== 1) return false;
+    const stmt = ast.program.body[0];
+    if (stmt.type !== "ExpressionStatement") return false;
+    return isSafeTypeExprNode(stmt.expression);
+  } catch {
+    return false;
+  }
+}
 function tryParseConstraint(expr) {
   const s = expr.trim();
   if (!CONSTRAINT_EXPR_RE.test(s)) return void 0;
+  if (!isSafeTypeExprSource(s)) {
+    emitDirectiveDiag({
+      code: "nudo:directive-syntax",
+      message: `Unsafe constraint expression rejected: ${s.slice(0, 80)} (only builder calls, chain methods, and literals are allowed)`
+    });
+    return void 0;
+  }
   try {
     const src = `export const __nudo_case_arg = (${s});`;
     const exports = execNudoModule(src);
@@ -41149,9 +41441,10 @@ function constraintSelfEqLit(c, selfIds) {
   if (isSelf(b) && a.op === "lit") return { found: true, value: a.value };
   return { found: false };
 }
-function constraintToCaseArgAbs(c) {
+function constraintToCaseArgAbs(c, depth) {
+  if (depth > MAX_CASE_ARG_DEPTH) return depthCapDiag(constraintPreview(c));
   if (c.members && c.members.length > 0) {
-    const parts = c.members.map((m) => constraintToCaseArgAbs(m));
+    const parts = c.members.map((m) => constraintToCaseArgAbs(m, depth + 1));
     if (parts.length === 1) return parts[0];
     return { shape: { k: "sum", members: parts }, conf: "path" };
   }
@@ -41166,12 +41459,12 @@ function constraintToCaseArgAbs(c) {
     return absUndefLit();
   }
   if (c.element) {
-    return absExact({ k: "arr", element: constraintToCaseArgAbs(c.element) });
+    return absExact({ k: "arr", element: constraintToCaseArgAbs(c.element, depth + 1) });
   }
   if (c.fields) {
     const slots = {};
     for (const [key, field] of Object.entries(c.fields)) {
-      slots[key] = { value: constraintToCaseArgAbs(field.constraint) };
+      slots[key] = { value: constraintToCaseArgAbs(field.constraint, depth + 1) };
     }
     return absExact({ k: "obj", slots });
   }
@@ -41184,18 +41477,33 @@ function constraintToCaseArgAbs(c) {
   }
   return constraintToEntryAbs(c, "__arg");
 }
-function parseCaseArgExpr(expr) {
+function depthCapDiag(expr) {
+  emitDirectiveDiag({
+    code: "nudo:directive-syntax",
+    message: `Type expression nesting exceeds depth ${MAX_CASE_ARG_DEPTH}: ${expr.trim().slice(0, 40)} \u2026 (deeper structure collapses to unknown)`
+  });
+  return absUnknown2();
+}
+function constraintPreview(c) {
+  if (c.element) return "array(\u2026)";
+  if (c.members) return "union(\u2026)";
+  if (c.fields) return "shape({ \u2026 })";
+  if (c.fn) return "fn(\u2026)";
+  return c.prim ? `${c.prim}()` : "constraint";
+}
+function parseCaseArgExpr(expr, depth = 0) {
+  if (depth > MAX_CASE_ARG_DEPTH) return depthCapDiag(expr);
   const constraint = tryParseConstraint(expr);
   if (constraint) {
     try {
-      return constraintToCaseArgAbs(constraint);
+      return constraintToCaseArgAbs(constraint, depth);
     } catch {
       return absUnknown2();
     }
   }
-  return parseLiteralOrStructure(expr);
+  return parseLiteralOrStructure(expr, depth);
 }
-function parseLiteralOrStructure(expr) {
+function parseLiteralOrStructure(expr, depth) {
   const s = expr.trim();
   if (s === "true") return absLit(true);
   if (s === "false") return absLit(false);
@@ -41214,17 +41522,20 @@ function parseLiteralOrStructure(expr) {
     return absLit(s.slice(1, -1));
   }
   if (s.startsWith("{") && s.endsWith("}")) {
-    return parseObjectLiteral(s.slice(1, -1).trim());
+    return parseObjectLiteral(s.slice(1, -1).trim(), depth);
   }
   if (s.startsWith("[") && s.endsWith("]")) {
     const content = s.slice(1, -1).trim();
     if (!content) return absExact({ k: "tuple", elements: [] });
     const elements = splitTopLevelArgs(content);
-    return absExact({ k: "tuple", elements: elements.map((e) => parseCaseArgExpr(e)) });
+    return absExact({
+      k: "tuple",
+      elements: elements.map((e) => parseCaseArgExpr(e, depth + 1))
+    });
   }
   return absUnknown2();
 }
-function parseObjectLiteral(content) {
+function parseObjectLiteral(content, depth) {
   if (!content) return absExact({ k: "obj", slots: {} });
   const entries = splitTopLevelArgs(content);
   const slots = {};
@@ -41233,7 +41544,7 @@ function parseObjectLiteral(content) {
     if (colonIdx === -1) continue;
     const key = entry.slice(0, colonIdx).trim().replace(/^["']|["']$/g, "");
     const val = entry.slice(colonIdx + 1).trim();
-    slots[key] = { value: parseCaseArgExpr(val) };
+    slots[key] = { value: parseCaseArgExpr(val, depth + 1) };
   }
   return absExact({ k: "obj", slots });
 }
@@ -41399,6 +41710,13 @@ function parseSkipReturnsExpr(rest) {
     if (inner !== null && s.slice(inner.length + 2).trim() === "") {
       return parseAbsExprDiag(inner, "@nudo:skip (...)");
     }
+    if (inner === null) {
+      emitDirectiveDiag({
+        code: "nudo:directive-syntax",
+        message: `@nudo:skip type expression has unclosed parenthesis (expected @nudo:skip (<typeExpr>)) \u2014 got: ${s.slice(0, 60)}`
+      });
+      return void 0;
+    }
   }
   return void 0;
 }
@@ -41492,7 +41810,8 @@ function parseSinonExpr(expr) {
   return null;
 }
 function parseNudoMockExpr(expr) {
-  const s = expr.trim();
+  let s = expr.trim();
+  while (s.startsWith("sinon.")) s = s.slice("sinon.".length);
   const stubReturnsOnFirstMatch = s.match(/^stub\(\)\.returns\((.+)\)\.onFirstCall\(\)$/);
   if (stubReturnsOnFirstMatch) {
     const helper = stub.returns(parseAbsExpr(stubReturnsOnFirstMatch[1].trim()));
@@ -41563,9 +41882,6 @@ function parseNudoMockExpr(expr) {
   if (s === "mock()") {
     return mock();
   }
-  if (s.startsWith("sinon.")) {
-    return parseNudoMockExpr(s.slice("sinon.".length));
-  }
   return null;
 }
 function parseDirectivesFromCommentTexts(comments) {
@@ -41675,8 +41991,17 @@ function scanMalformedCaseNames(text, caseArgSpans) {
   while ((m = CASE_TAG_REGEX.exec(text)) !== null) {
     if (inCaseArgs(m.index)) continue;
     const rest = m[1].trim();
-    if (/^"[^"]+"\s*\(/.test(rest)) continue;
-    if (/^"[^"]+"\s*\(/.test(rest)) continue;
+    const legal = rest.match(/^("[^"]+")[ \t]*\(/);
+    if (legal) {
+      const parenIdx = m.index + m[0].length - m[1].length + legal[0].length - 1;
+      if (extractBalancedParens(text, parenIdx) === null) {
+        emitDirectiveDiag({
+          code: "nudo:directive-syntax",
+          message: `Malformed @nudo:case: unclosed argument list (missing closing ")") \u2014 got: @nudo:case ${rest.slice(0, 60)}`
+        });
+      }
+      continue;
+    }
     let reason;
     if (rest.startsWith("'")) {
       reason = `single-quoted name (use double quotes: @nudo:case "name" (\u2026))`;
@@ -41716,6 +42041,14 @@ function scanMalformedMockNames(text, caseArgSpans) {
         code: "nudo:directive-syntax",
         message: `Malformed @nudo:mock name '${name}': not a valid identifier (use letters, digits, _, $; Unicode letters allowed)`
       });
+      continue;
+    }
+    const afterName = rest.slice(name.length);
+    if (/^[ \t]+from[ \t]+"[^"\n]*$/.test(afterName)) {
+      emitDirectiveDiag({
+        code: "nudo:directive-syntax",
+        message: `Malformed @nudo:mock from: unclosed quote in path (expected @nudo:mock ${name} from "path") \u2014 got: @nudo:mock ${rest.slice(0, 60)}`
+      });
     }
   }
 }
@@ -41742,6 +42075,28 @@ function extractDirectivesQuiet(ast) {
   takeDirectiveDiagsSince(since);
   return out;
 }
+function stripInlineCommentPrefix(line, kind) {
+  const s = kind === "block" ? line.replace(/^\s*\*\s?/, "") : line.replace(/^\//, "");
+  return s.trim();
+}
+function findTrailingCommentStart(expr) {
+  let inString = null;
+  for (let i = 0; i < expr.length; i++) {
+    const ch = expr[i];
+    if (inString) {
+      if (ch === inString) inString = null;
+      continue;
+    }
+    if (ch === '"' || ch === "'") {
+      inString = ch;
+      continue;
+    }
+    if ((ch === " " || ch === "	") && /^[ \t]+(?:\/\/|\/\*)/.test(expr.slice(i))) {
+      return i;
+    }
+  }
+  return -1;
+}
 function extractInlineDirectives(node) {
   resetDirectiveDiagSeen();
   const comments = node.leadingComments;
@@ -41749,39 +42104,56 @@ function extractInlineDirectives(node) {
   const results = [];
   for (const comment of comments) {
     if (comment.type !== "CommentLine" && comment.type !== "CommentBlock") continue;
-    const text = comment.value;
-    const asMatch = text.match(AS_REGEX);
-    if (asMatch) {
-      const rawExpr = asMatch[1].trim();
-      const trailing = rawExpr.match(AS_TRAILING_COMMENT_RE);
-      if (trailing) {
-        const typePart = rawExpr.slice(0, trailing.index).trim();
+    const kind = comment.type === "CommentLine" ? "line" : "block";
+    for (const rawLine of comment.value.split("\n")) {
+      const line = stripInlineCommentPrefix(rawLine, kind);
+      const asMatch = line.match(AS_LINE_REGEX);
+      if (asMatch) {
+        const rawExpr = asMatch[1].trim();
+        const trailingIdx = findTrailingCommentStart(rawExpr);
+        if (trailingIdx !== -1) {
+          const typePart = rawExpr.slice(0, trailingIdx).trim();
+          emitDirectiveDiag({
+            code: "nudo:directive-syntax",
+            message: `Trailing comment in @nudo:as type expression: '${rawExpr}' (remove the comment; the type must be a clean expression)`
+          });
+          results.push({ kind: "as", typeAbs: typePart ? parseAbsExprDiag(typePart, "@nudo:as") : absUnknown2() });
+          continue;
+        }
+        results.push({ kind: "as", typeAbs: parseAbsExprDiag(rawExpr, "@nudo:as") });
+        continue;
+      }
+      if (AS_BARE_RE.test(line)) {
         emitDirectiveDiag({
           code: "nudo:directive-syntax",
-          message: `Trailing comment in @nudo:as type expression: '${rawExpr}' (remove the comment; the type must be a clean expression)`
+          message: `@nudo:as requires a type expression (e.g. @nudo:as number())`
         });
-        results.push({ kind: "as", typeAbs: typePart ? parseAbsExprDiag(typePart, "@nudo:as") : absUnknown2() });
         continue;
       }
-      results.push({ kind: "as", typeAbs: parseAbsExprDiag(rawExpr, "@nudo:as") });
-      continue;
-    }
-    const replaceMatch = text.match(REPLACE_REGEX);
-    if (replaceMatch) {
-      const raw = replaceMatch[1].trim();
-      const sepIdx = findReplaceSeparator(raw);
-      if (sepIdx !== -1) {
-        const targetSource = raw.slice(0, sepIdx).trim();
-        const typeExprStr = raw.slice(sepIdx + 1).trim();
-        results.push({
-          kind: "replace",
-          targetSource,
-          typeAbs: parseAbsExprDiag(typeExprStr, "@nudo:replace")
-        });
-      } else {
+      const replaceMatch = line.match(REPLACE_LINE_REGEX);
+      if (replaceMatch) {
+        const raw = replaceMatch[1].trim();
+        const sepIdx = findReplaceSeparator(raw);
+        if (sepIdx !== -1) {
+          const targetSource = raw.slice(0, sepIdx).trim();
+          const typeExprStr = raw.slice(sepIdx + 1).trim();
+          results.push({
+            kind: "replace",
+            targetSource,
+            typeAbs: parseAbsExprDiag(typeExprStr, "@nudo:replace")
+          });
+        } else {
+          emitDirectiveDiag({
+            code: "nudo:directive-syntax",
+            message: `Malformed @nudo:replace: cannot separate target from type (expected @nudo:replace <target> <typeExpr>) \u2014 got: ${raw.slice(0, 60)}`
+          });
+        }
+        continue;
+      }
+      if (REPLACE_BARE_RE.test(line)) {
         emitDirectiveDiag({
           code: "nudo:directive-syntax",
-          message: `Malformed @nudo:replace: cannot separate target from type (expected @nudo:replace <target> <typeExpr>) \u2014 got: ${raw.slice(0, 60)}`
+          message: `@nudo:replace requires a target and type expression (expected @nudo:replace <target> <typeExpr>)`
         });
       }
     }
@@ -41846,7 +42218,7 @@ function extractFileDirectives(ast) {
   }
   return results;
 }
-var directiveDiagCollector, directiveDiagSeq, directiveDiags, MAX_DIRECTIVE_DIAGS, directiveDiagSeen, CASE_TAG_REGEX, JS_IDENT_RE, MOCK_INLINE_REGEX, MOCK_FROM_REGEX, MOCK_TAG_REGEX, PURE_REGEX, SKIP_REGEX, SAMPLE_REGEX, SAMPLE_NUM_RE, AS_REGEX, REPLACE_REGEX, AS_TRAILING_COMMENT_RE, ENV_REGEX, MOCK_MODULE_REGEX;
+var directiveDiagCollector, directiveDiagSeq, directiveDiags, MAX_DIRECTIVE_DIAGS, directiveDiagSeen, CASE_TAG_REGEX, JS_IDENT_RE, MOCK_INLINE_REGEX, MOCK_FROM_REGEX, MOCK_TAG_REGEX, PURE_REGEX, SKIP_REGEX, SAMPLE_REGEX, SAMPLE_NUM_RE, TYPE_EXPR_CHAIN_METHODS, MAX_CASE_ARG_DEPTH, AS_LINE_REGEX, REPLACE_LINE_REGEX, AS_BARE_RE, REPLACE_BARE_RE, ENV_REGEX, MOCK_MODULE_REGEX;
 var init_directives = __esm({
   "../parser/src/directives.ts"() {
     "use strict";
@@ -41857,18 +42229,32 @@ var init_directives = __esm({
     directiveDiags = [];
     MAX_DIRECTIVE_DIAGS = 1024;
     directiveDiagSeen = /* @__PURE__ */ new Set();
-    CASE_TAG_REGEX = /(?:^|\n)[ \t]*(?:\*[ \t]*)?@nudo:case\s+([^\n]+)/g;
+    CASE_TAG_REGEX = /(?:^|\n)[ \t]*(?:\*[ \t]*|\/[ \t]*)?@nudo:case\b[ \t]*([^\n]*)/g;
     JS_IDENT_RE = /^[\p{L}$_][\p{L}\p{N}$_]*$/u;
-    MOCK_INLINE_REGEX = /(?:^|\n)[ \t]*(?:\*[ \t]*)?@nudo:mock\s+([^\s=]+)\s*=\s*(.+)/g;
-    MOCK_FROM_REGEX = /(?:^|\n)[ \t]*(?:\*[ \t]*)?@nudo:mock\s+([^\s]+)\s+from\s+"([^"]+)"/g;
-    MOCK_TAG_REGEX = /(?:^|\n)[ \t]*(?:\*[ \t]*)?@nudo:mock\s+([^\n]+)/g;
-    PURE_REGEX = /(?:^|\n)[ \t]*(?:\*[ \t]*)?@nudo:pure\b/g;
-    SKIP_REGEX = /(?:^|\n)[ \t]*(?:\*[ \t]*)?@nudo:skip\b(?:[ \t]+(\S[^\n]*))?/g;
-    SAMPLE_REGEX = /(?:^|\n)[ \t]*(?:\*[ \t]*)?@nudo:sample\b(?:[ \t]+(\S+))?/g;
+    MOCK_INLINE_REGEX = /(?:^|\n)[ \t]*(?:\*[ \t]*|\/[ \t]*)?@nudo:mock\b[ \t]+([^\s=]+)[ \t]*=[ \t]*(.+)/g;
+    MOCK_FROM_REGEX = /(?:^|\n)[ \t]*(?:\*[ \t]*|\/[ \t]*)?@nudo:mock\b[ \t]+([^\s]+)[ \t]+from[ \t]+"([^"\n]+)"/g;
+    MOCK_TAG_REGEX = /(?:^|\n)[ \t]*(?:\*[ \t]*|\/[ \t]*)?@nudo:mock\b[ \t]*([^\n]*)/g;
+    PURE_REGEX = /(?:^|\n)[ \t]*(?:\*[ \t]*|\/[ \t]*)?@nudo:pure\b/g;
+    SKIP_REGEX = /(?:^|\n)[ \t]*(?:\*[ \t]*|\/[ \t]*)?@nudo:skip\b(?:[ \t]+(\S[^\n]*))?/g;
+    SAMPLE_REGEX = /(?:^|\n)[ \t]*(?:\*[ \t]*|\/[ \t]*)?@nudo:sample\b(?:[ \t]+(\S+))?/g;
     SAMPLE_NUM_RE = /^[+-]?(?:\d+\.?\d*|\.\d+)(?:[eE][+-]?\d+)?$/;
-    AS_REGEX = /^\s*@nudo:as\s+(.+)/;
-    REPLACE_REGEX = /^\s*@nudo:replace\s+(.+)/;
-    AS_TRAILING_COMMENT_RE = /\s+(?:\/\/|\/\*)/;
+    TYPE_EXPR_CHAIN_METHODS = /* @__PURE__ */ new Set([
+      "gt",
+      "ge",
+      "lt",
+      "le",
+      "int",
+      "min",
+      "max",
+      "length",
+      "shift",
+      "optional"
+    ]);
+    MAX_CASE_ARG_DEPTH = 32;
+    AS_LINE_REGEX = /^@nudo:as[ \t]+(.+)$/;
+    REPLACE_LINE_REGEX = /^@nudo:replace[ \t]+(.+)$/;
+    AS_BARE_RE = /^@nudo:as[ \t]*$/;
+    REPLACE_BARE_RE = /^@nudo:replace[ \t]*$/;
     ENV_REGEX = /^\/?\s*@nudo:env\s+(.+)/;
     MOCK_MODULE_REGEX = /^\/?\s*@nudo:mock-module\s+(.+)/;
   }
@@ -42112,6 +42498,27 @@ var init_inlay = __esm({
 function isJsIdent(name) {
   return JS_IDENT.test(name);
 }
+function isJsBindingIdent(name) {
+  return JS_BINDING_IDENT.test(name) && !JS_BINDING_RESERVED.has(name);
+}
+function toJsBindingIdent(name, used) {
+  let base = name;
+  if (!JS_BINDING_IDENT.test(base)) {
+    base = base.replace(/[^\p{ID_Continue}$\u200C\u200D]/gu, "_");
+    if (base.length === 0) base = "_";
+    else if (!/^[$_\p{ID_Start}]/u.test(base)) base = `_${base}`;
+  }
+  if (JS_BINDING_RESERVED.has(base)) base = `_${base}`;
+  if (!used) return base;
+  let n = base;
+  let i = 2;
+  while (used.has(n)) {
+    n = `${base}_${i}`;
+    i++;
+  }
+  used.add(n);
+  return n;
+}
 function formatObjectKey(k) {
   if (JS_IDENT.test(k)) return k;
   if (JS_CANONICAL_INT.test(k)) return k;
@@ -42126,27 +42533,90 @@ function escapeTemplateTypeFixed(text) {
 function sanitizeCommentText(text) {
   return text.replace(/\*\//g, "*\\/").replace(/[\r\n\u2028\u2029\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g, " ");
 }
-var JS_IDENT, JS_CANONICAL_INT;
+var JS_IDENT, JS_BINDING_IDENT, JS_BINDING_RESERVED, JS_CANONICAL_INT;
 var init_codegen_escape = __esm({
   "../core/src/algebra/codegen-escape.ts"() {
     "use strict";
     JS_IDENT = /^[A-Za-z_$][A-Za-z0-9_$]*$/;
+    JS_BINDING_IDENT = /^(?:[$_\p{ID_Start}])(?:[$\u200C\u200D\p{ID_Continue}])*$/u;
+    JS_BINDING_RESERVED = /* @__PURE__ */ new Set([
+      // ECMA-262 keywords
+      "break",
+      "case",
+      "catch",
+      "class",
+      "const",
+      "continue",
+      "debugger",
+      "default",
+      "delete",
+      "do",
+      "else",
+      "enum",
+      "export",
+      "extends",
+      "false",
+      "finally",
+      "for",
+      "function",
+      "if",
+      "import",
+      "in",
+      "instanceof",
+      "new",
+      "null",
+      "return",
+      "super",
+      "switch",
+      "this",
+      "throw",
+      "true",
+      "try",
+      "typeof",
+      "var",
+      "void",
+      "while",
+      "with",
+      "yield",
+      // strict mode / module-code reserved
+      "let",
+      "static",
+      "await",
+      "implements",
+      "interface",
+      "package",
+      "private",
+      "protected",
+      "public",
+      // never legal bindings in strict / module code
+      "eval",
+      "arguments"
+    ]);
     JS_CANONICAL_INT = /^(?:0|[1-9]\d*)$/;
   }
 });
 
 // ../core/src/algebra/denote.ts
 function denoteGuard(a, v2) {
-  if (a.term?.op === "lit" && (!a.pred || a.pred.op === "true")) {
-    return eqGuard(v2, a.term.value);
+  return denoteGuardB(a, v2, new ProjectionBudget());
+}
+function denoteGuardB(a, v2, budget) {
+  const stop2 = budget.enter(a);
+  if (stop2) return `/* nudo:truncated:${stop2} */ true`;
+  try {
+    if (a.term?.op === "lit" && (!a.pred || a.pred.op === "true")) {
+      return eqGuard(v2, a.term.value);
+    }
+    const shape2 = denoteShape(a.shape, v2, budget);
+    const pred = denotePred(a, v2);
+    if (shape2 === "true") return pred;
+    if (pred === "true") return shape2;
+    return `(${shape2}) && (${pred})`;
+  } finally {
+    budget.exit();
   }
-  const shape2 = denoteShape(a.shape, v2);
-  const pred = denotePred(a, v2);
-  if (shape2 === "true") return pred;
-  if (pred === "true") return shape2;
-  return `(${shape2}) && (${pred})`;
 }
-function denoteShape(s, v2) {
+function denoteShape(s, v2, budget) {
   switch (s.k) {
     case "never":
       return "false";
@@ -42172,7 +42642,7 @@ function denoteShape(s, v2) {
       const checks = [`typeof ${v2} === "object"`, `${v2} !== null`];
       for (const [key, slot] of Object.entries(s.slots)) {
         const access = safeMemberAccess(v2, key);
-        const inner = denoteGuard(slot.value, access);
+        const inner = denoteGuardB(slot.value, access, budget);
         if (slot.optional) {
           if (inner !== "true") checks.push(`(${access} === undefined || ${inner})`);
         } else {
@@ -42182,7 +42652,7 @@ function denoteShape(s, v2) {
       return checks.join(" && ");
     }
     case "arr":
-      return `Array.isArray(${v2}) && ${v2}.every((item) => ${denoteGuard(s.element, "item")})`;
+      return `Array.isArray(${v2}) && ${v2}.every((item) => ${denoteGuardB(s.element, "item", budget)})`;
     case "tuple": {
       const checks = [`Array.isArray(${v2})`];
       const minLen = s.elements.length;
@@ -42193,14 +42663,14 @@ function denoteShape(s, v2) {
           checks.push(`!(${i} in ${v2})`);
           return;
         }
-        const inner = denoteGuard(el, `${v2}[${i}]`);
+        const inner = denoteGuardB(el, `${v2}[${i}]`, budget);
         if (inner !== "true") checks.push(inner);
       });
       for (const i of holes) {
         if (i >= minLen) checks.push(`!(${i} in ${v2})`);
       }
       if (s.rest) {
-        const rest = denoteGuard(s.rest, "item");
+        const rest = denoteGuardB(s.rest, "item", budget);
         if (rest !== "true") {
           checks.push(`${v2}.slice(${minLen}).every((item) => ${rest})`);
         }
@@ -42213,10 +42683,10 @@ function denoteShape(s, v2) {
       if (s.eff === "promise") return `${v2} instanceof Promise`;
       return "true";
     case "brand":
-      return denoteShape(s.shape.shape, v2);
+      return denoteShape(s.shape.shape, v2, budget);
     case "sum": {
       if (s.members.length === 0) return "false";
-      const parts = s.members.map((m) => denoteGuard(m, v2));
+      const parts = s.members.map((m) => denoteGuardB(m, v2, budget));
       return `(${parts.join(" || ")})`;
     }
   }
@@ -42310,6 +42780,7 @@ var init_denote = __esm({
   "../core/src/algebra/denote.ts"() {
     "use strict";
     init_codegen_escape();
+    init_projection_budget();
   }
 });
 
@@ -42327,8 +42798,10 @@ __export(internal_exports, {
   MAX_PROMISE_MICROS: () => MAX_PROMISE_MICROS,
   MAX_TOTAL_CALLS: () => MAX_TOTAL_CALLS,
   OBJECT_PROTO_NAMES: () => OBJECT_PROTO_NAMES,
+  PROJECTION_MAX_DEPTH: () => PROJECTION_MAX_DEPTH,
   PROMISE_MICRO_ERROR_LABEL: () => PROMISE_MICRO_ERROR_LABEL,
   PROMISE_MICRO_OVERFLOW_LABEL: () => PROMISE_MICRO_OVERFLOW_LABEL,
+  ProjectionBudget: () => ProjectionBudget,
   abortDerivationSession: () => abortDerivationSession,
   absTemplateViews: () => absTemplateViews,
   allFixedTextOfViews: () => allFixedTextOfViews,
@@ -42363,6 +42836,7 @@ __export(internal_exports, {
   exceedsBudget: () => exceedsBudget,
   exitCall: () => exitCall,
   exitEvalCallBudgetSession: () => exitEvalCallBudgetSession,
+  exportedNameOfLocal: () => exportedNameOfLocal,
   extractAllLoadSpecs: () => extractAllLoadSpecs,
   filterDeclaredThrows: () => filterDeclaredThrows,
   filterGateThrows: () => filterGateThrows,
@@ -42391,6 +42865,7 @@ __export(internal_exports, {
   instanceOf: () => instanceOf,
   instantiateClass: () => instantiateClass,
   isEvalMissingSlotEnabled: () => isEvalMissingSlotEnabled,
+  isJsBindingIdent: () => isJsBindingIdent,
   isJsIdent: () => isJsIdent,
   isNullishAbs: () => isNullishAbs,
   isTemplateLike: () => isTemplateLike,
@@ -42467,6 +42942,7 @@ __export(internal_exports, {
   termNodes: () => termNodes,
   throwAbsToKinds: () => throwAbsToKinds,
   throwsKindCovered: () => throwsKindCovered,
+  toJsBindingIdent: () => toJsBindingIdent,
   truncatedAbs: () => truncatedAbs,
   viewTemplateParts: () => viewTemplateParts,
   withEvalBudgetOverride: () => withEvalBudgetOverride,
@@ -42478,6 +42954,7 @@ var init_internal = __esm({
     "use strict";
     init_code_text();
     init_leak();
+    init_projection_budget();
     init_call_budget();
     init_promise();
     init_calls();
@@ -42486,6 +42963,7 @@ var init_internal = __esm({
     init_stable_source_key();
     init_fn_fp();
     init_load_deps_fp();
+    init_interface();
     init_derivation();
     init_inlay();
     init_template();
@@ -52779,20 +53257,20 @@ function envLimits(env2) {
   };
 }
 function pick2(key, env2, fallback) {
-  const e = env2[key];
-  if (typeof e === "number" && Number.isFinite(e)) return e;
   const x = explicit[key];
   if (typeof x === "number" && Number.isFinite(x)) return clampEntries(x, fallback);
+  const e = env2[key];
+  if (typeof e === "number" && Number.isFinite(e)) return e;
   const p = fromProject[key];
   if (typeof p === "number" && Number.isFinite(p)) return clampEntries(p, fallback);
   return fallback;
 }
 function getSessionCacheLimits(env2 = process.env) {
-  if (envCache === null) envCache = envLimits(env2);
+  const fromEnv = envLimits(env2);
   return {
-    maxFiles: pick2("maxFiles", envCache, DEFAULT_SESSION_CACHE_LIMITS.maxFiles),
-    maxFns: pick2("maxFns", envCache, DEFAULT_SESSION_CACHE_LIMITS.maxFns),
-    maxEvalRuns: pick2("maxEvalRuns", envCache, DEFAULT_SESSION_CACHE_LIMITS.maxEvalRuns)
+    maxFiles: pick2("maxFiles", fromEnv, DEFAULT_SESSION_CACHE_LIMITS.maxFiles),
+    maxFns: pick2("maxFns", fromEnv, DEFAULT_SESSION_CACHE_LIMITS.maxFns),
+    maxEvalRuns: pick2("maxEvalRuns", fromEnv, DEFAULT_SESSION_CACHE_LIMITS.maxEvalRuns)
   };
 }
 function setSessionCacheLimits(partial2) {
@@ -52805,9 +53283,8 @@ function setSessionCacheFromProject(partial2) {
 function resetSessionCacheLimitState() {
   explicit = {};
   fromProject = {};
-  envCache = null;
 }
-var DEFAULT_SESSION_CACHE_LIMITS, HARD_CAP, explicit, fromProject, envCache;
+var DEFAULT_SESSION_CACHE_LIMITS, HARD_CAP, explicit, fromProject;
 var init_session_cache_limits = __esm({
   "../service/src/session-cache-limits.ts"() {
     "use strict";
@@ -52819,7 +53296,6 @@ var init_session_cache_limits = __esm({
     HARD_CAP = 65536;
     explicit = {};
     fromProject = {};
-    envCache = null;
   }
 });
 
@@ -52954,15 +53430,22 @@ function findProjectConfig(startDir) {
   while (dir !== root) {
     const pkgPath = resolve6(dir, "package.json");
     if (existsSync7(pkgPath)) {
+      let pkg;
       try {
-        const pkg = JSON.parse(readFileSync7(pkgPath, "utf-8"));
-        if (pkg.nudo) {
-          const nudo = pkg.nudo;
-          setSessionCacheFromProject(nudo.sessionCache);
-          applyBForkBudgetFromConfig(nudo);
-          return { config: nudo, projectDir: dir };
-        }
-      } catch {
+        pkg = JSON.parse(readFileSync7(pkgPath, "utf-8"));
+      } catch (err) {
+        process.stderr?.write?.(
+          `nudo: package.json parse failed at ${pkgPath} (${err instanceof Error ? err.message : String(err)}); project config disabled for this subtree (defaults + env apply)
+`
+        );
+        applyBForkBudgetFromConfig(null);
+        return null;
+      }
+      const nudo = pkg && typeof pkg === "object" ? pkg.nudo : void 0;
+      if (nudo) {
+        setSessionCacheFromProject(nudo.sessionCache);
+        applyBForkBudgetFromConfig(nudo);
+        return { config: nudo, projectDir: dir };
       }
     }
     const parent = dirname5(dir);
@@ -267994,8 +268477,8 @@ function collectExports(sourceFile) {
   }
   return out;
 }
-function draftExportName(name) {
-  return name.includes(".") ? name.replace(/\./g, "_") : name;
+function draftExportName(name, used) {
+  return toJsBindingIdent(name.includes(".") ? name.replace(/\./g, "_") : name, used);
 }
 function formatDtsContractDraft(label, files, exports) {
   const draftable = exports.filter((e) => e.dsl !== void 0);
@@ -268007,6 +268490,7 @@ function formatDtsContractDraft(label, files, exports) {
   }
   if (draftable.some((e) => /\bany\s*\(/.test(e.dsl))) used.add("any");
   const importList = BUILDERS.filter((b) => used.has(b)).join(", ");
+  const exportUsed = /* @__PURE__ */ new Set();
   const lines = [
     "// @nudo:draft",
     `// Generated by \`nudo contract --from-dts\` from ${label}`,
@@ -268033,7 +268517,7 @@ function formatDtsContractDraft(label, files, exports) {
     }
     if (e.note) lines.push(`// ${e.name} \u2014 ${e.note}`);
     else lines.push(`// ${e.name} \u2014 from TypeScript`);
-    lines.push(`export const ${draftExportName(e.name)} = ${e.dsl};`);
+    lines.push(`export const ${draftExportName(e.name, exportUsed)} = ${e.dsl};`);
     if (e.name.includes(".")) {
       lines.push(`//   sidecar key may also be written as \`${e.name}\``);
     }
@@ -268115,6 +268599,7 @@ var init_dts_contract_draft = __esm({
   "../harvester/src/dts-contract-draft.ts"() {
     "use strict";
     import_typescript2 = __toESM(require_typescript(), 1);
+    init_internal();
     BUILDERS = [
       "fn",
       "number",
@@ -268265,8 +268750,8 @@ function formatHarvestSummary(h) {
   return lines.join("\n");
 }
 function lookupHarvested(h, moduleName, exportName) {
-  const mod2 = h.env.modules[moduleName];
-  const a = mod2?.[exportName] ?? h.env.globals[exportName];
+  const mod2 = Object.hasOwn(h.env.modules, moduleName) ? h.env.modules[moduleName] : void 0;
+  const a = (mod2 !== void 0 && Object.hasOwn(mod2, exportName) ? mod2[exportName] : void 0) ?? (Object.hasOwn(h.env.globals, exportName) ? h.env.globals[exportName] : void 0);
   if (!a) return void 0;
   return formatShape(a);
 }
@@ -269300,7 +269785,7 @@ function collectRequireSpecs(node, out) {
   };
   visit2(node);
 }
-function buildModulesForFile(source, fromFile, load, evalDep, depth, maxDepth, onIssue) {
+function buildModulesForFile(source, fromFile, load, evalDep, depth, maxDepth, onIssue, localDepsOut) {
   const modules = {};
   for (const spec of importSpecs(source)) {
     if (spec.startsWith(".") || spec.startsWith("/")) {
@@ -269310,6 +269795,7 @@ function buildModulesForFile(source, fromFile, load, evalDep, depth, maxDepth, o
         continue;
       }
       modules[spec] = evalDep(childPath, spec, fromFile, depth + 1);
+      localDepsOut?.push(stablePathKey(childPath));
     } else if (!spec.startsWith("node:")) {
       const resolved = resolveNpmJsEntryDetailed(spec, dirname10(fromFile));
       if (resolved.exportsUnresolved) {
@@ -269321,6 +269807,7 @@ function buildModulesForFile(source, fromFile, load, evalDep, depth, maxDepth, o
       }
       if (resolved.path) {
         const executed = evalDep(resolved.path, spec, fromFile, depth + 1);
+        localDepsOut?.push(stablePathKey(resolved.path));
         if (executed && (executed.default !== void 0 || Object.keys(executed.named ?? {}).length > 0)) {
           modules[spec] = executed;
           continue;
@@ -269342,6 +269829,18 @@ function clearAbsModuleCache() {
 function evictAbsModuleCacheFiles(paths) {
   for (const p of paths) absModuleCache.delete(stablePathKey(p));
 }
+function depFingerprintCurrent(deps) {
+  for (const d of deps) {
+    let src;
+    try {
+      src = readFileSync13(d.path, "utf-8");
+    } catch {
+      return false;
+    }
+    if (hashSource(src) !== d.hash) return false;
+  }
+  return true;
+}
 function moduleLabel(p) {
   const parts = p.split(/[/\\]/);
   return parts[parts.length - 1] || p;
@@ -269426,7 +269925,7 @@ function collectMissingExportIssues(source, modules, fromFile) {
   const checkName = (spec, name, kind) => {
     const mod2 = modules[spec];
     if (!mod2?.evaluated) return;
-    const has = name === "default" ? mod2.default !== void 0 : name in mod2.named;
+    const has = name === "default" ? mod2.default !== void 0 : Object.hasOwn(mod2.named, name);
     if (!has) push(spec, name, kind);
   };
   const body = file.program?.body ?? [];
@@ -269459,11 +269958,15 @@ function evalAbsModuleGraph(entrySource, entryFile, opts = {}) {
   const loading = [];
   const issues = [];
   const seenIssue = /* @__PURE__ */ new Set();
+  const issueFlow = [];
+  const depMeta = /* @__PURE__ */ new Map();
   const pushIssue2 = (kind, label, reason) => {
+    const iss = { kind, label, reason };
+    issueFlow.push(iss);
     const key = `${kind}:${label}`;
     if (seenIssue.has(key)) return;
     seenIssue.add(key);
-    issues.push({ kind, label, reason });
+    issues.push(iss);
   };
   function evalDep(absPathRaw, spec, fromFile, depth) {
     const absPath = stablePathKey(absPathRaw);
@@ -269481,9 +269984,13 @@ function evalAbsModuleGraph(entrySource, entryFile, opts = {}) {
     if (shared) {
       try {
         const st = statSync9(absPath);
-        if (st.mtimeMs === shared.mtimeMs && st.size === shared.size) {
+        if (st.mtimeMs === shared.mtimeMs && st.size === shared.size && depFingerprintCurrent(shared.depFingerprints)) {
           for (const iss of shared.issues) pushIssue2(iss.kind, iss.label, iss.reason);
           cache2.set(absPath, shared.exports);
+          depMeta.set(absPath, {
+            contentHash: shared.contentHash,
+            depFingerprints: shared.depFingerprints
+          });
           return shared.exports;
         }
       } catch {
@@ -269521,7 +270028,8 @@ function evalAbsModuleGraph(entrySource, entryFile, opts = {}) {
       loading.pop();
       return placeholder;
     }
-    const issueStart = issues.length;
+    const issueStart = issueFlow.length;
+    const localDeps = [];
     const modules2 = buildModulesForFile(
       source,
       absPath,
@@ -269531,7 +270039,8 @@ function evalAbsModuleGraph(entrySource, entryFile, opts = {}) {
       maxDepth,
       (kind, label, reason) => {
         pushIssue2(kind, label, reason);
-      }
+      },
+      localDeps
     );
     let exports;
     const evalRun = tryRunTranspiled(source, { mode: "analyze", modules: modules2 });
@@ -269548,17 +270057,40 @@ function evalAbsModuleGraph(entrySource, entryFile, opts = {}) {
     if (exports.default !== void 0) placeholder.default = exports.default;
     if (exports.evaluated) placeholder.evaluated = true;
     cache2.set(absPath, placeholder);
+    const depFingerprints = [];
+    const seenDep = /* @__PURE__ */ new Set();
+    let untrackable = false;
+    for (const depPath of localDeps) {
+      const meta = depMeta.get(depPath);
+      if (!meta) {
+        untrackable = true;
+        break;
+      }
+      if (!seenDep.has(depPath)) {
+        seenDep.add(depPath);
+        depFingerprints.push({ path: depPath, hash: meta.contentHash });
+      }
+      for (const e of meta.depFingerprints) {
+        if (seenDep.has(e.path)) continue;
+        seenDep.add(e.path);
+        depFingerprints.push(e);
+      }
+    }
+    const subtree = untrackable ? null : { contentHash: hashSource(source), depFingerprints };
+    depMeta.set(absPath, subtree);
     let fingerprint;
     try {
       const st = statSync9(absPath);
       fingerprint = { mtimeMs: st.mtimeMs, size: st.size };
     } catch {
     }
-    if (fingerprint) {
+    if (fingerprint && subtree) {
       absModuleCache.set(absPath, {
         ...fingerprint,
+        contentHash: subtree.contentHash,
+        depFingerprints: subtree.depFingerprints,
         exports: placeholder,
-        issues: issues.slice(issueStart)
+        issues: issueFlow.slice(issueStart)
       });
     }
     return placeholder;
@@ -269602,7 +270134,7 @@ function importLocalBindings(source, modules) {
       } else if (sp.type === "ImportSpecifier") {
         const imported = sp.imported?.type === "StringLiteral" ? sp.imported.value : sp.imported?.name;
         if (imported === void 0) continue;
-        const absVal = imported === "default" ? mod2.default : mod2.named[imported];
+        const absVal = imported === "default" ? mod2.default : Object.hasOwn(mod2.named, imported) ? mod2.named[imported] : void 0;
         out.set(local, absVal ?? unknown);
       }
     }
@@ -269800,7 +270332,7 @@ function pickNamed(mock2, names2) {
       if (mock2.default) def = mock2.default;
       continue;
     }
-    const v2 = mock2.named[n];
+    const v2 = Object.hasOwn(mock2.named, n) ? mock2.named[n] : void 0;
     if (v2 !== void 0) named[n] = v2;
   }
   return def !== void 0 ? { named, default: def } : { named };
@@ -269885,6 +270417,7 @@ function trimAnalysisFileCache() {
   }
 }
 function analysisCacheGet(filePath, source, auxKey) {
+  if (getSessionCacheLimits().maxFiles <= 0) return void 0;
   const key = stablePathKey(filePath);
   const e = analysisByFile.get(key);
   if (!e) return void 0;
@@ -269902,6 +270435,7 @@ function analysisCacheSet(filePath, source, auxKey, value) {
     if (oldest === void 0) break;
     analysisByFile.delete(oldest);
   }
+  analysisByFile.delete(key);
   analysisByFile.set(key, { source, auxKey, value });
 }
 function evictAnalysisFileCacheForFiles(files) {
@@ -269943,6 +270477,7 @@ function trimFnAnalysisCache() {
   }
 }
 function fnAnalysisCacheGet(key) {
+  if (getSessionCacheLimits().maxFns <= 0) return void 0;
   const k = normalizeFnCacheKey(key);
   const hit = fnAnalysisCache.get(k);
   if (hit !== void 0) {
@@ -269960,6 +270495,7 @@ function fnAnalysisCacheSet(key, value) {
     if (oldest === void 0) break;
     fnAnalysisCache.delete(oldest);
   }
+  fnAnalysisCache.delete(k);
   fnAnalysisCache.set(k, value);
 }
 function evictFnAnalysisCacheForFiles(files) {
@@ -270150,7 +270686,11 @@ function collectEvalReplacements(source) {
       }
     };
     visitStmts(file.program.body);
-  } catch {
+  } catch (err) {
+    if (targets.length > 0 || asTargets.length > 0) {
+      throw err;
+    }
+    noteEvalFallback(err);
   }
   return { targets, values, asTargets, asValues };
 }
@@ -270192,6 +270732,7 @@ function evalCacheSet(filePath, stableSource, mode, envKey, mockKey, depKey, val
     if (oldest === void 0) break;
     evalRunByFile.delete(oldest);
   }
+  evalRunByFile.delete(key);
   evalRunByFile.set(key, { stableSource, mode, envKey, mockKey, depKey, value });
 }
 function trimEvalCache() {
@@ -270210,7 +270751,7 @@ function tryRunEval(source, filePath, opts = {}) {
   const stable = stableAnalyzeKeySource(source);
   const depKey = evalDepKey(source, filePath);
   const canCache = depKey !== null;
-  if (canCache) {
+  if (canCache && getSessionCacheLimits().maxEvalRuns > 0) {
     const cacheKey = stablePathKey(filePath);
     const cached2 = evalRunByFile.get(cacheKey);
     if (cached2 && cached2.stableSource === stable && cached2.mode === mode && cached2.envKey === envKey && cached2.mockKey === mockKey && cached2.depKey === depKey) {
@@ -270274,7 +270815,7 @@ function tryRunEval(source, filePath, opts = {}) {
 function tryEvalCallFull(source, filePath, fnName, args, opts = {}) {
   const run = tryRunEval(source, filePath, { envNames: opts.envNames, mocks: opts.mocks });
   if (!run) return void 0;
-  if (!(fnName in run.exports)) return void 0;
+  if (!Object.hasOwn(run.exports, fnName)) return void 0;
   const collected = [];
   const memberDiags = [];
   const prevCall = opts.collectCalls ? setEvalCallCollector((r) => collected.push(r)) : void 0;
@@ -270299,7 +270840,14 @@ function tryEvalCall(source, filePath, fnName, args, opts = {}) {
   const full = tryEvalCallFull(source, filePath, fnName, args, opts);
   if (!full) return void 0;
   const r = full.result;
-  if (!r) return void 0;
+  if (!isAbsVal(r)) {
+    noteEvalFallback(
+      new Error(
+        `tryEvalCall: '${fnName}' result is not an Abs value (producer contract violation)`
+      )
+    );
+    return void 0;
+  }
   if (r.shape.k === "never" && full.throws.shape.k !== "never") {
     return void 0;
   }
@@ -270502,13 +271050,14 @@ function safeAbsOrUnknown(a) {
 }
 function callRecordFromAbsCall(r, impMap) {
   const argAbs = r.args.map(safeAbsOrUnknown);
-  const threw = !!r.threw;
+  const threw = r.threw === true;
+  const threwUnknown = r.threw === void 0;
   const thrownOrResult = safeAbsOrUnknown(r.result);
   const rec = {
     fnName: r.fnName,
     argAbs,
     resultAbs: threw ? neverAbs : thrownOrResult,
-    throwsAbs: threw ? thrownOrResult : neverAbs,
+    throwsAbs: threw ? thrownOrResult : threwUnknown ? unknown : neverAbs,
     callLoc: r.callLoc
   };
   const imp = impMap?.get(r.fnName) ?? // `ns.helper` / `Class.method`：先整名，再按首段点号拆命名空间成员
@@ -270978,19 +271527,23 @@ function collectDeclared(file) {
     if (id.type === "Identifier") names2.add(id.name);
     if (id.type === "ObjectPattern") {
       for (const p of id.properties) {
-        addId(p.value);
+        addId(p.type === "RestElement" ? p.argument : p.value);
       }
     }
     if (id.type === "ArrayPattern") {
       for (const el of id.elements) addId(el);
     }
+    if (id.type === "AssignmentPattern") addId(id.left);
+    if (id.type === "RestElement") addId(id.argument);
   };
   const visit2 = (node) => {
     if (!node || typeof node !== "object") return;
     const o = node;
     switch (o.type) {
       case "FunctionDeclaration":
+      case "FunctionExpression":
       case "ClassDeclaration":
+      case "ClassExpression":
         addId(o.id);
         break;
       case "VariableDeclarator":
@@ -271035,7 +271588,7 @@ function isStaticStringExpr(node) {
 function isFreeUnknown(name, declared, seen, known) {
   return !declared.has(name) && !known.has(name) && !name.startsWith("$") && !seen.has(name);
 }
-function walkBuiltinUnknown(node, declared, out, seen, known, parentKey) {
+function walkBuiltinUnknown(node, declared, out, seen, known, namePosition = false) {
   const n = node;
   const flag = (idNode, name) => {
     if (!isFreeUnknown(name, declared, seen, known)) return;
@@ -271057,20 +271610,21 @@ function walkBuiltinUnknown(node, declared, out, seen, known, parentKey) {
     } else if (callee?.type === "Identifier") {
       flag(n.callee, callee.name);
     }
-  } else if (n.type === "Identifier" && typeof n.name === "string" && n.name !== "require" && parentKey !== "key" && parentKey !== "property" && parentKey !== "local" && parentKey !== "id") {
+  } else if (n.type === "Identifier" && typeof n.name === "string" && n.name !== "require" && !namePosition) {
     flag(node, n.name);
   }
   for (const key of Object.keys(n)) {
     if (key === "loc" || key === "start" || key === "end") continue;
+    const childIsName = (key === "key" || key === "property") && n.computed !== true || key === "local" || key === "id";
     const v2 = n[key];
     if (Array.isArray(v2)) {
       v2.forEach((x) => {
         if (x && typeof x === "object" && "type" in x) {
-          walkBuiltinUnknown(x, declared, out, seen, known, key);
+          walkBuiltinUnknown(x, declared, out, seen, known, childIsName);
         }
       });
     } else if (v2 && typeof v2 === "object" && "type" in v2) {
-      walkBuiltinUnknown(v2, declared, out, seen, known, key);
+      walkBuiltinUnknown(v2, declared, out, seen, known, childIsName);
     }
   }
 }
@@ -272834,10 +273388,16 @@ var init_disk_cache = __esm({
 });
 
 // ../service/src/watch-paths.ts
+function matchFormalSidecarSuffix(path) {
+  for (const suffix of FORMAL_SIDECAR_SUFFIXES) {
+    if (path.slice(-suffix.length).toLowerCase() === suffix) return suffix;
+  }
+  return void 0;
+}
 function isSidecarPath(path) {
   const lower = path.toLowerCase().replace(/\\/g, "/");
   if (lower.includes(".nudo.draft.")) return false;
-  return lower.endsWith(".nudo.js") || lower.endsWith(".nudo.mjs") || lower.endsWith(".nudo.ts");
+  return matchFormalSidecarSuffix(lower) !== void 0;
 }
 function isProjectConfigPath(path) {
   const norm = path.replace(/\\/g, "/");
@@ -272850,13 +273410,13 @@ function isWatchRelevantPath(path) {
 }
 function ambientSourcesOfSidecar(sidecarPath) {
   const norm = sidecarPath.replace(/\\/g, "/");
-  const m = norm.match(/^(.*)\.nudo\.(js|ts)$/i);
-  if (!m || norm.toLowerCase().includes(".nudo.draft.")) return [];
-  const base = m[1];
-  const ext = m[2].toLowerCase();
-  return ext === "js" ? [`${base}.js`, `${base}.mjs`] : [`${base}.ts`, `${base}.mts`];
+  if (norm.toLowerCase().includes(".nudo.draft.")) return [];
+  const suffix = matchFormalSidecarSuffix(norm);
+  if (!suffix) return [];
+  const base = norm.slice(0, norm.length - suffix.length);
+  return SIDECAR_AMBIENT_SUFFIXES[suffix].map((ext) => `${base}${ext}`);
 }
-var PROJECT_CONFIG_BASENAMES;
+var PROJECT_CONFIG_BASENAMES, FORMAL_SIDECAR_SUFFIXES, SIDECAR_AMBIENT_SUFFIXES;
 var init_watch_paths = __esm({
   "../service/src/watch-paths.ts"() {
     "use strict";
@@ -272871,6 +273431,12 @@ var init_watch_paths = __esm({
       ".nudorc",
       ".nudorc.json"
     ]);
+    FORMAL_SIDECAR_SUFFIXES = [".nudo.js", ".nudo.mjs", ".nudo.ts"];
+    SIDECAR_AMBIENT_SUFFIXES = {
+      ".nudo.js": [".js", ".mjs"],
+      ".nudo.mjs": [".js", ".mjs"],
+      ".nudo.ts": [".ts", ".mts"]
+    };
   }
 });
 
@@ -273343,7 +273909,7 @@ var init_chunk_4TAFH6ZZ = __esm({
   }
 });
 
-// ../service/dist/chunk-RHEXBPQ6.js
+// ../service/dist/chunk-2RP2Q6LJ.js
 import { readFileSync as readFileSync17, existsSync as existsSync16, statSync as statSync10, mkdirSync as mkdirSync5, writeFileSync as writeFileSync5 } from "fs";
 import { resolve as resolvePath2, join as joinPath2 } from "path";
 import { pathToFileURL as pathToFileURL2 } from "url";
@@ -273524,20 +274090,20 @@ function envLimits2(env2) {
   };
 }
 function pick3(key, env2, fallback) {
-  const e = env2[key];
-  if (typeof e === "number" && Number.isFinite(e)) return e;
   const x = explicit2[key];
   if (typeof x === "number" && Number.isFinite(x)) return clampEntries2(x, fallback);
+  const e = env2[key];
+  if (typeof e === "number" && Number.isFinite(e)) return e;
   const p = fromProject2[key];
   if (typeof p === "number" && Number.isFinite(p)) return clampEntries2(p, fallback);
   return fallback;
 }
 function getSessionCacheLimits2(env2 = process.env) {
-  if (envCache2 === null) envCache2 = envLimits2(env2);
+  const fromEnv = envLimits2(env2);
   return {
-    maxFiles: pick3("maxFiles", envCache2, DEFAULT_SESSION_CACHE_LIMITS2.maxFiles),
-    maxFns: pick3("maxFns", envCache2, DEFAULT_SESSION_CACHE_LIMITS2.maxFns),
-    maxEvalRuns: pick3("maxEvalRuns", envCache2, DEFAULT_SESSION_CACHE_LIMITS2.maxEvalRuns)
+    maxFiles: pick3("maxFiles", fromEnv, DEFAULT_SESSION_CACHE_LIMITS2.maxFiles),
+    maxFns: pick3("maxFns", fromEnv, DEFAULT_SESSION_CACHE_LIMITS2.maxFns),
+    maxEvalRuns: pick3("maxEvalRuns", fromEnv, DEFAULT_SESSION_CACHE_LIMITS2.maxEvalRuns)
   };
 }
 function setSessionCacheFromProject2(partial2) {
@@ -273646,15 +274212,22 @@ function findProjectConfig2(startDir) {
   while (dir !== root) {
     const pkgPath = resolve10(dir, "package.json");
     if (existsSync22(pkgPath)) {
+      let pkg;
       try {
-        const pkg = JSON.parse(readFileSync22(pkgPath, "utf-8"));
-        if (pkg.nudo) {
-          const nudo = pkg.nudo;
-          setSessionCacheFromProject2(nudo.sessionCache);
-          applyBForkBudgetFromConfig2(nudo);
-          return { config: nudo, projectDir: dir };
-        }
-      } catch {
+        pkg = JSON.parse(readFileSync22(pkgPath, "utf-8"));
+      } catch (err) {
+        process.stderr?.write?.(
+          `nudo: package.json parse failed at ${pkgPath} (${err instanceof Error ? err.message : String(err)}); project config disabled for this subtree (defaults + env apply)
+`
+        );
+        applyBForkBudgetFromConfig2(null);
+        return null;
+      }
+      const nudo = pkg && typeof pkg === "object" ? pkg.nudo : void 0;
+      if (nudo) {
+        setSessionCacheFromProject2(nudo.sessionCache);
+        applyBForkBudgetFromConfig2(nudo);
+        return { config: nudo, projectDir: dir };
       }
     }
     const parent = dirname18(dir);
@@ -273806,9 +274379,9 @@ function resolveNpmJsEntryDetailed2(source, fromDir) {
   }
   return { path: tryInsidePkg2(pkgDir, subpath, tryFile), exportsUnresolved: false };
 }
-var BUILTIN_ERROR_CLASSES2, BUILTIN_PROTOTYPE_CLASSES2, numA2, strA2, boolA2, unkA2, undefA2, nullA2, OBJECT_PROTOTYPE_METHODS2, BUILTIN_PROTOTYPE_METHOD_APPROXIMATIONS2, BoundedLruMap4, envFactories2, impliedDeps2, PATH_ENV_CACHE_MAX2, PATH_ENV_BY_PATH_MAX2, PATH_ENV_BASE_DIRS_MAX2, pathEnvCache2, pathEnvByPath2, pathEnvBaseDirs2, DEFAULT_SESSION_CACHE_LIMITS2, HARD_CAP2, explicit2, fromProject2, envCache2, DEFAULT_ANALYSIS_EXCLUDE2, DEFAULT_ANALYSIS_MODE2, JS_CONDITIONS2;
-var init_chunk_RHEXBPQ6 = __esm({
-  "../service/dist/chunk-RHEXBPQ6.js"() {
+var BUILTIN_ERROR_CLASSES2, BUILTIN_PROTOTYPE_CLASSES2, numA2, strA2, boolA2, unkA2, undefA2, nullA2, OBJECT_PROTOTYPE_METHODS2, BUILTIN_PROTOTYPE_METHOD_APPROXIMATIONS2, BoundedLruMap4, envFactories2, impliedDeps2, PATH_ENV_CACHE_MAX2, PATH_ENV_BY_PATH_MAX2, PATH_ENV_BASE_DIRS_MAX2, pathEnvCache2, pathEnvByPath2, pathEnvBaseDirs2, DEFAULT_SESSION_CACHE_LIMITS2, HARD_CAP2, explicit2, fromProject2, DEFAULT_ANALYSIS_EXCLUDE2, DEFAULT_ANALYSIS_MODE2, JS_CONDITIONS2;
+var init_chunk_2RP2Q6LJ = __esm({
+  "../service/dist/chunk-2RP2Q6LJ.js"() {
     "use strict";
     init_src();
     init_es();
@@ -274074,7 +274647,6 @@ var init_chunk_RHEXBPQ6 = __esm({
     HARD_CAP2 = 65536;
     explicit2 = {};
     fromProject2 = {};
-    envCache2 = null;
     DEFAULT_ANALYSIS_EXCLUDE2 = [
       "**/node_modules/**",
       "**/dist/**",
@@ -274085,7 +274657,7 @@ var init_chunk_RHEXBPQ6 = __esm({
   }
 });
 
-// ../service/dist/chunk-XY75TNBY.js
+// ../service/dist/chunk-6GFPZGQS.js
 import { existsSync as existsSync17, statSync as statSync11, readFileSync as readFileSync18 } from "fs";
 import { dirname as dirname19, resolve as resolve11, join as join13 } from "path";
 import { readFileSync as readFileSync42, statSync as statSync32 } from "fs";
@@ -274696,7 +275268,7 @@ function collectRequireSpecs2(node, out) {
   };
   visit2(node);
 }
-function buildModulesForFile2(source, fromFile, load, evalDep, depth, maxDepth, onIssue) {
+function buildModulesForFile2(source, fromFile, load, evalDep, depth, maxDepth, onIssue, localDepsOut) {
   const modules = {};
   for (const spec of importSpecs2(source)) {
     if (spec.startsWith(".") || spec.startsWith("/")) {
@@ -274706,6 +275278,7 @@ function buildModulesForFile2(source, fromFile, load, evalDep, depth, maxDepth,
         continue;
       }
       modules[spec] = evalDep(childPath, spec, fromFile, depth + 1);
+      localDepsOut?.push(stablePathKey(childPath));
     } else if (!spec.startsWith("node:")) {
       const resolved = resolveNpmJsEntryDetailed2(spec, dirname32(fromFile));
       if (resolved.exportsUnresolved) {
@@ -274717,6 +275290,7 @@ function buildModulesForFile2(source, fromFile, load, evalDep, depth, maxDepth,
       }
       if (resolved.path) {
         const executed = evalDep(resolved.path, spec, fromFile, depth + 1);
+        localDepsOut?.push(stablePathKey(resolved.path));
         if (executed && (executed.default !== void 0 || Object.keys(executed.named ?? {}).length > 0)) {
           modules[spec] = executed;
           continue;
@@ -274729,6 +275303,18 @@ function buildModulesForFile2(source, fromFile, load, evalDep, depth, maxDepth,
   void maxDepth;
   return modules;
 }
+function depFingerprintCurrent2(deps) {
+  for (const d of deps) {
+    let src;
+    try {
+      src = readFileSync42(d.path, "utf-8");
+    } catch {
+      return false;
+    }
+    if (hashSource(src) !== d.hash) return false;
+  }
+  return true;
+}
 function moduleLabel2(p) {
   const parts = p.split(/[/\\]/);
   return parts[parts.length - 1] || p;
@@ -274813,7 +275399,7 @@ function collectMissingExportIssues2(source, modules, fromFile) {
   const checkName = (spec, name, kind) => {
     const mod2 = modules[spec];
     if (!mod2?.evaluated) return;
-    const has = name === "default" ? mod2.default !== void 0 : name in mod2.named;
+    const has = name === "default" ? mod2.default !== void 0 : Object.hasOwn(mod2.named, name);
     if (!has) push(spec, name, kind);
   };
   const body = file.program?.body ?? [];
@@ -274846,11 +275432,15 @@ function evalAbsModuleGraph2(entrySource, entryFile, opts = {}) {
   const loading = [];
   const issues = [];
   const seenIssue = /* @__PURE__ */ new Set();
+  const issueFlow = [];
+  const depMeta = /* @__PURE__ */ new Map();
   const pushIssue2 = (kind, label, reason) => {
+    const iss = { kind, label, reason };
+    issueFlow.push(iss);
     const key = `${kind}:${label}`;
     if (seenIssue.has(key)) return;
     seenIssue.add(key);
-    issues.push({ kind, label, reason });
+    issues.push(iss);
   };
   function evalDep(absPathRaw, spec, fromFile, depth) {
     const absPath = stablePathKey(absPathRaw);
@@ -274868,9 +275458,13 @@ function evalAbsModuleGraph2(entrySource, entryFile, opts = {}) {
     if (shared) {
       try {
         const st = statSync32(absPath);
-        if (st.mtimeMs === shared.mtimeMs && st.size === shared.size) {
+        if (st.mtimeMs === shared.mtimeMs && st.size === shared.size && depFingerprintCurrent2(shared.depFingerprints)) {
           for (const iss of shared.issues) pushIssue2(iss.kind, iss.label, iss.reason);
           cache2.set(absPath, shared.exports);
+          depMeta.set(absPath, {
+            contentHash: shared.contentHash,
+            depFingerprints: shared.depFingerprints
+          });
           return shared.exports;
         }
       } catch {
@@ -274908,7 +275502,8 @@ function evalAbsModuleGraph2(entrySource, entryFile, opts = {}) {
       loading.pop();
       return placeholder;
     }
-    const issueStart = issues.length;
+    const issueStart = issueFlow.length;
+    const localDeps = [];
     const modules2 = buildModulesForFile2(
       source,
       absPath,
@@ -274918,7 +275513,8 @@ function evalAbsModuleGraph2(entrySource, entryFile, opts = {}) {
       maxDepth,
       (kind, label, reason) => {
         pushIssue2(kind, label, reason);
-      }
+      },
+      localDeps
     );
     let exports;
     const evalRun = tryRunTranspiled(source, { mode: "analyze", modules: modules2 });
@@ -274935,17 +275531,40 @@ function evalAbsModuleGraph2(entrySource, entryFile, opts = {}) {
     if (exports.default !== void 0) placeholder.default = exports.default;
     if (exports.evaluated) placeholder.evaluated = true;
     cache2.set(absPath, placeholder);
+    const depFingerprints = [];
+    const seenDep = /* @__PURE__ */ new Set();
+    let untrackable = false;
+    for (const depPath of localDeps) {
+      const meta = depMeta.get(depPath);
+      if (!meta) {
+        untrackable = true;
+        break;
+      }
+      if (!seenDep.has(depPath)) {
+        seenDep.add(depPath);
+        depFingerprints.push({ path: depPath, hash: meta.contentHash });
+      }
+      for (const e of meta.depFingerprints) {
+        if (seenDep.has(e.path)) continue;
+        seenDep.add(e.path);
+        depFingerprints.push(e);
+      }
+    }
+    const subtree = untrackable ? null : { contentHash: hashSource(source), depFingerprints };
+    depMeta.set(absPath, subtree);
     let fingerprint;
     try {
       const st = statSync32(absPath);
       fingerprint = { mtimeMs: st.mtimeMs, size: st.size };
     } catch {
     }
-    if (fingerprint) {
+    if (fingerprint && subtree) {
       absModuleCache2.set(absPath, {
         ...fingerprint,
+        contentHash: subtree.contentHash,
+        depFingerprints: subtree.depFingerprints,
         exports: placeholder,
-        issues: issues.slice(issueStart)
+        issues: issueFlow.slice(issueStart)
       });
     }
     return placeholder;
@@ -274989,7 +275608,7 @@ function importLocalBindings2(source, modules) {
       } else if (sp.type === "ImportSpecifier") {
         const imported = sp.imported?.type === "StringLiteral" ? sp.imported.value : sp.imported?.name;
         if (imported === void 0) continue;
-        const absVal = imported === "default" ? mod2.default : mod2.named[imported];
+        const absVal = imported === "default" ? mod2.default : Object.hasOwn(mod2.named, imported) ? mod2.named[imported] : void 0;
         out.set(local, absVal ?? unknown);
       }
     }
@@ -275132,7 +275751,7 @@ function pickNamed2(mock2, names2) {
       if (mock2.default) def = mock2.default;
       continue;
     }
-    const v2 = mock2.named[n];
+    const v2 = Object.hasOwn(mock2.named, n) ? mock2.named[n] : void 0;
     if (v2 !== void 0) named[n] = v2;
   }
   return def !== void 0 ? { named, default: def } : { named };
@@ -275192,6 +275811,7 @@ function applyMockModuleDirectivesFromSource2(source, base, opts) {
   return applyMockModuleDirectives2(base, fileDirectives, opts);
 }
 function analysisCacheGet2(filePath, source, auxKey) {
+  if (getSessionCacheLimits2().maxFiles <= 0) return void 0;
   const key = stablePathKey(filePath);
   const e = analysisByFile2.get(key);
   if (!e) return void 0;
@@ -275209,6 +275829,7 @@ function analysisCacheSet2(filePath, source, auxKey, value) {
     if (oldest === void 0) break;
     analysisByFile2.delete(oldest);
   }
+  analysisByFile2.delete(key);
   analysisByFile2.set(key, { source, auxKey, value });
 }
 function normalizeFnCacheKey2(key) {
@@ -275218,6 +275839,7 @@ function normalizeFnCacheKey2(key) {
   return stablePathKey(filePath) + rest;
 }
 function fnAnalysisCacheGet2(key) {
+  if (getSessionCacheLimits2().maxFns <= 0) return void 0;
   const k = normalizeFnCacheKey2(key);
   const hit = fnAnalysisCache2.get(k);
   if (hit !== void 0) {
@@ -275235,6 +275857,7 @@ function fnAnalysisCacheSet2(key, value) {
     if (oldest === void 0) break;
     fnAnalysisCache2.delete(oldest);
   }
+  fnAnalysisCache2.delete(k);
   fnAnalysisCache2.set(k, value);
 }
 function caseDirectiveKey2(directives, formatAbs6) {
@@ -275399,7 +276022,11 @@ function collectEvalReplacements2(source) {
       }
     };
     visitStmts(file.program.body);
-  } catch {
+  } catch (err) {
+    if (targets.length > 0 || asTargets.length > 0) {
+      throw err;
+    }
+    noteEvalFallback(err);
   }
   return { targets, values, asTargets, asValues };
 }
@@ -275426,6 +276053,7 @@ function evalCacheSet2(filePath, stableSource, mode, envKey, mockKey, depKey, va
     if (oldest === void 0) break;
     evalRunByFile2.delete(oldest);
   }
+  evalRunByFile2.delete(key);
   evalRunByFile2.set(key, { stableSource, mode, envKey, mockKey, depKey, value });
 }
 function tryRunEval2(source, filePath, opts = {}) {
@@ -275436,7 +276064,7 @@ function tryRunEval2(source, filePath, opts = {}) {
   const stable = stableAnalyzeKeySource(source);
   const depKey = evalDepKey2(source, filePath);
   const canCache = depKey !== null;
-  if (canCache) {
+  if (canCache && getSessionCacheLimits2().maxEvalRuns > 0) {
     const cacheKey = stablePathKey(filePath);
     const cached2 = evalRunByFile2.get(cacheKey);
     if (cached2 && cached2.stableSource === stable && cached2.mode === mode && cached2.envKey === envKey && cached2.mockKey === mockKey && cached2.depKey === depKey) {
@@ -275500,7 +276128,7 @@ function tryRunEval2(source, filePath, opts = {}) {
 function tryEvalCallFull2(source, filePath, fnName, args, opts = {}) {
   const run = tryRunEval2(source, filePath, { envNames: opts.envNames, mocks: opts.mocks });
   if (!run) return void 0;
-  if (!(fnName in run.exports)) return void 0;
+  if (!Object.hasOwn(run.exports, fnName)) return void 0;
   const collected = [];
   const memberDiags = [];
   const prevCall = opts.collectCalls ? setEvalCallCollector((r) => collected.push(r)) : void 0;
@@ -275525,7 +276153,14 @@ function tryEvalCall2(source, filePath, fnName, args, opts = {}) {
   const full = tryEvalCallFull2(source, filePath, fnName, args, opts);
   if (!full) return void 0;
   const r = full.result;
-  if (!r) return void 0;
+  if (!isAbsVal(r)) {
+    noteEvalFallback(
+      new Error(
+        `tryEvalCall: '${fnName}' result is not an Abs value (producer contract violation)`
+      )
+    );
+    return void 0;
+  }
   if (r.shape.k === "never" && full.throws.shape.k !== "never") {
     return void 0;
   }
@@ -275686,7 +276321,7 @@ function absFromSinon2(sinonExpr) {
   }
   return constantMockFn2(unknown);
 }
-function isAbsVal22(v2) {
+function isAbsVal32(v2) {
   return !!v2 && typeof v2 === "object" && "shape" in v2 && "conf" in v2;
 }
 function loadFromMockBinding2(name, fromPath, fromFile, loadModule) {
@@ -275718,7 +276353,7 @@ function loadFromMockBinding2(name, fromPath, fromFile, loadModule) {
   let absVal;
   if (val === void 0) {
     absVal = undefAbs();
-  } else if (isAbsVal22(val)) {
+  } else if (isAbsVal32(val)) {
     absVal = val;
   } else if (typeof val === "function") {
     const fn2 = val;
@@ -275979,13 +276614,14 @@ function safeAbsOrUnknown2(a) {
 }
 function callRecordFromAbsCall2(r, impMap) {
   const argAbs = r.args.map(safeAbsOrUnknown2);
-  const threw = !!r.threw;
+  const threw = r.threw === true;
+  const threwUnknown = r.threw === void 0;
   const thrownOrResult = safeAbsOrUnknown2(r.result);
   const rec = {
     fnName: r.fnName,
     argAbs,
     resultAbs: threw ? neverAbs2 : thrownOrResult,
-    throwsAbs: threw ? thrownOrResult : neverAbs2,
+    throwsAbs: threw ? thrownOrResult : threwUnknown ? unknown : neverAbs2,
     callLoc: r.callLoc
   };
   const imp = impMap?.get(r.fnName) ?? // `ns.helper` / `Class.method`：先整名，再按首段点号拆命名空间成员
@@ -276089,19 +276725,23 @@ function collectDeclared2(file) {
     if (id.type === "Identifier") names2.add(id.name);
     if (id.type === "ObjectPattern") {
       for (const p of id.properties) {
-        addId(p.value);
+        addId(p.type === "RestElement" ? p.argument : p.value);
       }
     }
     if (id.type === "ArrayPattern") {
       for (const el of id.elements) addId(el);
     }
+    if (id.type === "AssignmentPattern") addId(id.left);
+    if (id.type === "RestElement") addId(id.argument);
   };
   const visit2 = (node) => {
     if (!node || typeof node !== "object") return;
     const o = node;
     switch (o.type) {
       case "FunctionDeclaration":
+      case "FunctionExpression":
       case "ClassDeclaration":
+      case "ClassExpression":
         addId(o.id);
         break;
       case "VariableDeclarator":
@@ -276146,7 +276786,7 @@ function isStaticStringExpr2(node) {
 function isFreeUnknown2(name, declared, seen, known) {
   return !declared.has(name) && !known.has(name) && !name.startsWith("$") && !seen.has(name);
 }
-function walkBuiltinUnknown2(node, declared, out, seen, known, parentKey) {
+function walkBuiltinUnknown2(node, declared, out, seen, known, namePosition = false) {
   const n = node;
   const flag = (idNode, name) => {
     if (!isFreeUnknown2(name, declared, seen, known)) return;
@@ -276168,20 +276808,21 @@ function walkBuiltinUnknown2(node, declared, out, seen, known, parentKey) {
     } else if (callee?.type === "Identifier") {
       flag(n.callee, callee.name);
     }
-  } else if (n.type === "Identifier" && typeof n.name === "string" && n.name !== "require" && parentKey !== "key" && parentKey !== "property" && parentKey !== "local" && parentKey !== "id") {
+  } else if (n.type === "Identifier" && typeof n.name === "string" && n.name !== "require" && !namePosition) {
     flag(node, n.name);
   }
   for (const key of Object.keys(n)) {
     if (key === "loc" || key === "start" || key === "end") continue;
+    const childIsName = (key === "key" || key === "property") && n.computed !== true || key === "local" || key === "id";
     const v2 = n[key];
     if (Array.isArray(v2)) {
       v2.forEach((x) => {
         if (x && typeof x === "object" && "type" in x) {
-          walkBuiltinUnknown2(x, declared, out, seen, known, key);
+          walkBuiltinUnknown2(x, declared, out, seen, known, childIsName);
         }
       });
     } else if (v2 && typeof v2 === "object" && "type" in v2) {
-      walkBuiltinUnknown2(v2, declared, out, seen, known, key);
+      walkBuiltinUnknown2(v2, declared, out, seen, known, childIsName);
     }
   }
 }
@@ -277379,10 +278020,10 @@ function analyzeFile2(filePath, source, activeCases, externalCallRecords, loadMo
   return cloneAnalysisResult2(result);
 }
 var MODULE_RESOLVE_EXTS2, ModuleReadError2, neverAbs2, undefAbs4, MAX_RECORD_TYPE_NODES2, ABS_MODULE_CACHE_MAX2, absModuleCache2, ENV_DEPENDENTS_MAX2, ENV_DEPENDENTS_PER_KEY_MAX2, envDependents2, analysisByFile2, fnAnalysisCache2, envHarvestConflictCollector2, evalRunByFile2, KNOWN_GLOBALS2, DEFAULT_CALLSITE_BUDGET3, COLLAPSE_LITERAL_THRESHOLD2;
-var init_chunk_XY75TNBY = __esm({
-  "../service/dist/chunk-XY75TNBY.js"() {
+var init_chunk_6GFPZGQS = __esm({
+  "../service/dist/chunk-6GFPZGQS.js"() {
     "use strict";
-    init_chunk_RHEXBPQ6();
+    init_chunk_2RP2Q6LJ();
     init_src2();
     init_src();
     init_src2();
@@ -277518,12 +278159,14 @@ __export(emit_exports, {
   insertGeneratedCaseDirectives: () => insertGeneratedCaseDirectives,
   interfaceSurface: () => interfaceSurface,
   isDraftableEntry: () => isDraftableEntry,
+  matchSidecarFnDecl: () => matchSidecarFnDecl,
   materializeAction: () => materializeAction,
   projectAbsToSchema: () => projectAbsToSchema,
   schemaNodeToZod: () => schemaNodeToZod,
   serializeCaseArg: () => serializeCaseArg,
   serializeCaseJson: () => serializeCaseJson,
   shapeDslFromFields: () => shapeDslFromFields,
+  sidecarBindingFor: () => sidecarBindingFor,
   sidecarDraftPath: () => sidecarDraftPath,
   stripGeneratedCaseDirectives: () => stripGeneratedCaseDirectives,
   titleKindFor: () => titleKindFor,
@@ -277711,6 +278354,18 @@ function serializeObjectKey(key) {
   return `"${key}"`;
 }
 function serializeCaseArg(a) {
+  return serializeCaseArgB(a, new ProjectionBudget());
+}
+function serializeCaseArgB(a, budget) {
+  const stop2 = budget.enter(a);
+  if (stop2) return null;
+  try {
+    return serializeCaseArgInner(a, budget);
+  } finally {
+    budget.exit();
+  }
+}
+function serializeCaseArgInner(a, budget) {
   const s = a.shape;
   if (a.term?.op === "lit") {
     const v2 = a.term.value;
@@ -277740,20 +278395,21 @@ function serializeCaseArg(a) {
     case "sum": {
       const parts = [];
       for (const member of s.members) {
-        const ser = serializeCaseArg(member);
+        const ser = serializeCaseArgB(member, budget);
         if (ser === null) return null;
         parts.push(ser);
       }
       return `union(${parts.join(", ")})`;
     }
     case "arr": {
-      const el = serializeCaseArg(s.element);
+      const el = serializeCaseArgB(s.element, budget);
       return el === null ? null : `array(${el})`;
     }
     case "tuple": {
+      if (s.rest) return null;
       const parts = [];
       for (const el of s.elements) {
-        const ser = serializeCaseArg(el);
+        const ser = serializeCaseArgB(el, budget);
         if (ser === null) return null;
         parts.push(ser);
       }
@@ -277762,7 +278418,7 @@ function serializeCaseArg(a) {
     case "obj": {
       const parts = [];
       for (const [key, slot] of Object.entries(s.slots)) {
-        const vs = serializeCaseArg(slot.value);
+        const vs = serializeCaseArgB(slot.value, budget);
         if (vs === null) return null;
         const ks = serializeObjectKey(key);
         if (ks === null) return null;
@@ -278039,6 +278695,17 @@ function unifiedDiff(a, b, path) {
   }
   return out.join("\n") + "\n";
 }
+function exportNameRepr(name) {
+  return JS_EXPORT_NAME.test(name) ? name : JSON.stringify(name);
+}
+function directBindingOk(name, taken) {
+  return isJsBindingIdent(name) && !taken(name);
+}
+function allocNudoBinding(taken) {
+  let n = 1;
+  while (taken(`_nudo_${n}`)) n++;
+  return `_nudo_${n}`;
+}
 async function emitInterface(filePath, opts) {
   const abs2 = resolve23(filePath);
   if (isNodeModulesPath(abs2) || isNodeModulesPath(sidecarPathOf(abs2))) {
@@ -278077,7 +278744,10 @@ async function emitInterface(filePath, opts) {
       `sidecar '${relative6(process.cwd(), sidecarPath) || sidecarPath}' is not parseable; fix it before emitting`
     );
   }
-  for (const n of generatedNames) declared.delete(n);
+  for (const s of sections) {
+    for (const n of s.names) declared.delete(n);
+    for (const b of s.bindings) declared.delete(b);
+  }
   const analysis = await analyzeFileAsync2(
     abs2,
     source,
@@ -278090,16 +278760,47 @@ async function emitInterface(filePath, opts) {
   for (const f of analysis.functions) {
     if (!fnByName.has(f.name)) fnByName.set(f.name, f);
   }
-  const fileExportOrder = analysis.functions.map((f) => f.name).filter((n) => exported.has(n));
+  const identityOfLocal = (local) => exportedNameOfLocal(source, local) ?? local;
+  const localOf = /* @__PURE__ */ new Map();
+  const identityOfFn = /* @__PURE__ */ new Map();
+  for (const f of analysis.functions) {
+    if (identityOfFn.has(f.name)) continue;
+    const identity = identityOfLocal(f.name);
+    identityOfFn.set(f.name, identity);
+    if (!localOf.has(identity)) localOf.set(identity, f.name);
+  }
+  const fileExportOrder = [
+    ...new Set(
+      analysis.functions.map((f) => identityOfFn.get(f.name)).filter((n) => exported.has(n))
+    )
+  ];
   let targetNames;
   if (opts.fnNames && opts.fnNames.length > 0) {
-    targetNames = [...new Set(opts.fnNames)];
+    targetNames = [...new Set(opts.fnNames.map((n) => identityOfFn.get(n) ?? n))];
   } else if (opts.all) {
     targetNames = fileExportOrder;
   } else {
     targetNames = fileExportOrder.filter((n) => generatedNames.has(n));
   }
   const targetSet = new Set(targetNames);
+  const takenBindings = /* @__PURE__ */ new Set();
+  const claimFrom = (text) => {
+    for (const n of topLevelDeclaredNames(text) ?? []) takenBindings.add(n);
+  };
+  if (opts.mode === "update") {
+    claimFrom(removeSections(sidecarSrc, sections));
+    for (const s of sections) {
+      if (!s.names.some((n) => targetSet.has(n))) claimFrom(s.text);
+    }
+  } else {
+    claimFrom(sidecarSrc);
+  }
+  const bindingOf = /* @__PURE__ */ new Map();
+  for (const name of targetNames) {
+    const binding = directBindingOk(name, (n) => takenBindings.has(n)) ? name : allocNudoBinding((n) => takenBindings.has(n));
+    takenBindings.add(binding);
+    bindingOf.set(name, binding);
+  }
   const written = [];
   const skipped = [];
   const issues = [];
@@ -278108,9 +278809,9 @@ async function emitInterface(filePath, opts) {
   const planFor = (name) => {
     const hit = planCache.get(name);
     if (hit) return hit;
-    const fn2 = fnByName.get(name);
+    const fn2 = fnByName.get(localOf.get(name) ?? name);
     const dsl = fn2 === void 0 ? void 0 : projectFunctionDsl(fn2);
-    const roundTrip = dsl !== void 0 && roundTrips(sectionText(name, dsl, srcRel), name);
+    const roundTrip = dsl !== void 0 && roundTrips(sectionText(name, dsl, srcRel, bindingOf.get(name)), name);
     const rec = { dsl, roundTrip };
     planCache.set(name, rec);
     return rec;
@@ -278125,7 +278826,7 @@ async function emitInterface(filePath, opts) {
   }
   const acceptedAtomic = /* @__PURE__ */ new Set();
   for (const name of targetNames) {
-    if (!exported.has(name) || !fnByName.has(name)) {
+    if (!exported.has(name) || !fnByName.has(localOf.get(name) ?? name)) {
       skipped.push({
         fn: name,
         reason: "not-an-export"
@@ -278165,7 +278866,7 @@ async function emitInterface(filePath, opts) {
       }
       continue;
     }
-    const text = sectionText(name, plan.dsl, srcRel);
+    const text = sectionText(name, plan.dsl, srcRel, bindingOf.get(name));
     if (opts.mode === "add" && prev !== void 0) {
       skipped.push({ fn: name, reason: "no-change" });
       continue;
@@ -278262,10 +278963,12 @@ function projectFunctionDsl(fn2) {
   const ret = retConstraint === void 0 ? "" : `, ${formatConstraint(retConstraint)}`;
   return `fn({ ${paramParts.join(", ")} }${ret})`;
 }
-function sectionText(fn2, dsl, srcRel) {
+function sectionText(fn2, dsl, srcRel, binding = fn2) {
+  const decl = binding === fn2 ? `export const ${fn2} = ${dsl};` : `const ${binding} = ${dsl};
+export { ${binding} as ${exportNameRepr(fn2)} };`;
   return `${GENERATED_HEADER}
 // source: ${sanitizeCommentText(`${srcRel}:${fn2}`)}
-export const ${fn2} = ${dsl};
+${decl}
 `;
 }
 function roundTrips(text, fn2) {
@@ -278288,23 +278991,62 @@ function collectGeneratedSections(sidecarSrc) {
   } catch {
     throw new Error("sidecar is not parseable");
   }
+  const stmts = ast.program.body;
   const out = [];
-  for (const stmt of ast.program.body) {
+  for (let i = 0; i < stmts.length; i++) {
+    const stmt = stmts[i];
     if (stmt.type !== "ExportNamedDeclaration" || stmt.source) continue;
-    const d = stmt.declaration;
-    if (!d || stmt.start == null || stmt.end == null) continue;
+    if (stmt.end == null) continue;
+    const chain = [];
+    for (let j = i; j >= 0; j--) {
+      const p = stmts[j];
+      if (j !== i && p.type !== "ImportDeclaration" && p.type !== "VariableDeclaration") break;
+      chain.unshift(p);
+    }
+    let blockStart;
+    for (const c of chain) {
+      if (c.start == null) continue;
+      const b = generatedCommentBlockStart(sidecarSrc, c.start);
+      if (b !== void 0) {
+        blockStart = b;
+        break;
+      }
+    }
+    if (blockStart === void 0) continue;
     const names2 = [];
-    if (d.type === "VariableDeclaration") {
-      for (const decl of d.declarations) {
-        if (decl.id.type === "Identifier") names2.push(decl.id.name);
+    const bindings = [];
+    const d = stmt.declaration;
+    if (d) {
+      if (d.type === "VariableDeclaration") {
+        for (const decl of d.declarations) {
+          if (decl.id.type === "Identifier") {
+            names2.push(decl.id.name);
+            bindings.push(decl.id.name);
+          }
+        }
+      } else if (d.type === "FunctionDeclaration" || d.type === "ClassDeclaration") {
+        if (d.id) {
+          names2.push(d.id.name);
+          bindings.push(d.id.name);
+        }
+      }
+    } else {
+      for (const spec of stmt.specifiers) {
+        if (spec.type !== "ExportSpecifier") continue;
+        names2.push(
+          spec.exported.type === "Identifier" ? spec.exported.name : spec.exported.value
+        );
+        if (spec.local.type === "Identifier") bindings.push(spec.local.name);
       }
-    } else if (d.type === "FunctionDeclaration" || d.type === "ClassDeclaration") {
-      if (d.id) names2.push(d.id.name);
     }
     if (names2.length === 0) continue;
-    const blockStart = generatedCommentBlockStart(sidecarSrc, stmt.start);
-    if (blockStart === void 0) continue;
-    out.push({ names: names2, start: blockStart, end: stmt.end, text: sidecarSrc.slice(blockStart, stmt.end) });
+    out.push({
+      names: names2,
+      bindings,
+      start: blockStart,
+      end: stmt.end,
+      text: sidecarSrc.slice(blockStart, stmt.end)
+    });
   }
   return out;
 }
@@ -279042,8 +279784,8 @@ function toDraftBuilderDsl(display) {
     }
   );
 }
-function draftExportName2(fnName) {
-  return fnName.includes(".") ? fnName.replace(/\./g, "_") : fnName;
+function draftExportName2(fnName, used) {
+  return toJsBindingIdent(fnName.includes(".") ? fnName.replace(/\./g, "_") : fnName, used);
 }
 function draftDsl(entry) {
   const parts = entry.params.filter((p) => p.projected && p.constraint !== void 0).map((p) => {
@@ -279158,6 +279900,7 @@ ${suggestedBodyDsl(e.fn, e.params) ?? ""}`;
     }
   }
   const importList = BUILDERS2.filter((b) => used.has(b)).join(", ");
+  const exportUsed = /* @__PURE__ */ new Set();
   const lines = [
     "// @nudo:draft",
     `// Generated by \`nudo contract --draft\` from ${sanitizeCommentText(filePath)}`,
@@ -279196,7 +279939,7 @@ ${suggestedBodyDsl(e.fn, e.params) ?? ""}`;
     } else if (e.returnEvidence === "symbolic") {
       lines.push(`//   returns: ${sanitizeCommentText(e.returns?.display ?? "")} (symbolic)`);
     }
-    lines.push(`export const ${draftExportName2(e.fn)} = ${e.dsl};`);
+    lines.push(`export const ${draftExportName2(e.fn, exportUsed)} = ${e.dsl};`);
     if (e.fn.includes(".")) {
       lines.push(
         `//   sidecar key may also be written as \`${sanitizeCommentText(e.fn)}\` / nested { ${sanitizeCommentText(e.fn.split(".")[1] ?? "")}: \u2026 }`
@@ -279875,7 +280618,8 @@ function formatDerivedSection(row, opts) {
     retDsl = `, ${row.returns.dsl}`;
   }
   const namer = new NameAllocator(opts.takenNames);
-  namer.claim(row.fn);
+  const directBinding = directBindingOk(row.fn, (n) => namer.has(n));
+  const binding = directBinding ? namer.claim(row.fn) : namer.claim(allocNudoBinding((n) => namer.has(n)));
   const renames = /* @__PURE__ */ new Map();
   const importLocals = [];
   for (const [name, from] of [...importMap.entries()].sort((a, b) => a[0].localeCompare(b[0]))) {
@@ -279906,11 +280650,13 @@ function formatDerivedSection(row, opts) {
     const spec = original === local ? local : `${original} as ${local}`;
     return `import { ${spec} } from ${JSON.stringify(from)};`;
   }).sort((a, b) => a.localeCompare(b));
+  const exportStmt = directBinding ? `export const ${binding} = fn({ ${paramParts.join(", ")} }${retPart});` : `const ${binding} = fn({ ${paramParts.join(", ")} }${retPart});
+export { ${binding} as ${exportNameRepr(row.fn)} };`;
   const lines = [
     ...importLineTexts,
     ...importLineTexts.length > 0 && renamedPreludes.length > 0 ? [""] : [],
     ...renamedPreludes,
-    `export const ${row.fn} = fn({ ${paramParts.join(", ")} }${retPart});`
+    exportStmt
   ];
   const usedNames = /* @__PURE__ */ new Set();
   for (const { local } of importLocals) usedNames.add(local);
@@ -279918,7 +280664,7 @@ function formatDerivedSection(row, opts) {
     const n = preludeLocalName(line);
     if (n) usedNames.add(n);
   }
-  usedNames.add(row.fn);
+  usedNames.add(binding);
   return { text: lines.join("\n"), usedNames: [...usedNames] };
 }
 function collectTopLevelNames(src) {
@@ -280168,18 +280914,35 @@ function collectGeneratedSectionsRaw(src) {
       if (stmt.type !== "ExportNamedDeclaration" || stmt.source) continue;
       if (stmt.start == null || stmt.end == null || stmt.start < headerPos) continue;
       const d = stmt.declaration;
-      if (!d) continue;
       const names2 = [];
-      if (d.type === "VariableDeclaration") {
-        for (const decl of d.declarations) {
-          if (decl.id.type === "Identifier") names2.push(decl.id.name);
+      const bindings = [];
+      if (d) {
+        if (d.type === "VariableDeclaration") {
+          for (const decl of d.declarations) {
+            if (decl.id.type === "Identifier") {
+              names2.push(decl.id.name);
+              bindings.push(decl.id.name);
+            }
+          }
+        } else if (d.type === "FunctionDeclaration" || d.type === "ClassDeclaration") {
+          if (d.id) {
+            names2.push(d.id.name);
+            bindings.push(d.id.name);
+          }
+        }
+      } else {
+        for (const spec of stmt.specifiers) {
+          if (spec.type !== "ExportSpecifier") continue;
+          names2.push(
+            spec.exported.type === "Identifier" ? spec.exported.name : spec.exported.value
+          );
+          if (spec.local.type === "Identifier") bindings.push(spec.local.name);
         }
-      } else if (d.type === "FunctionDeclaration" || d.type === "ClassDeclaration") {
-        if (d.id) names2.push(d.id.name);
       }
       if (names2.length === 0) continue;
       out.push({
         names: names2,
+        bindings,
         start: headerPos,
         end: stmt.end,
         text: src.slice(headerPos, stmt.end)
@@ -280201,9 +280964,6 @@ function findGeneratedHeaderOffsets(src) {
   }
   return out;
 }
-function generatedSectionNames(src) {
-  return new Set(collectGeneratedSectionsRaw(src).flatMap((s) => s.names));
-}
 function handwrittenNames(src) {
   if (src.trim() === "") return /* @__PURE__ */ new Set();
   let ast;
@@ -280236,7 +280996,10 @@ function handwrittenNames(src) {
       collect(stmt);
     }
   }
-  for (const n of generatedSectionNames(src)) names2.delete(n);
+  for (const s of collectGeneratedSectionsRaw(src)) {
+    for (const n of s.names) names2.delete(n);
+    for (const b of s.bindings) names2.delete(b);
+  }
   return names2;
 }
 function findGeneratedSectionText(src, fn2) {
@@ -280289,32 +281052,53 @@ function tsTypeParamName(id) {
   if (n.length === 0) n = "T";
   return n;
 }
-function wrapComplexAbs(a, typeVars) {
-  const ts3 = absToTSType(a, typeVars);
+function wrapComplexAbs(a, typeVars, budget) {
+  const ts3 = absToTSTypeB(a, typeVars, budget);
   if (a.shape.k === "sum" || a.shape.k === "fn") return `(${ts3})`;
   return ts3;
 }
-function wrapUnionMember(a, typeVars) {
-  const ts3 = absToTSType(a, typeVars);
+function wrapUnionMember(a, typeVars, budget) {
+  const ts3 = absToTSTypeB(a, typeVars, budget);
   if (a.shape.k === "fn") return `(${ts3})`;
   return ts3;
 }
-function isTsIdent(name) {
-  return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name) && !TS_PARAM_RESERVED.has(name);
+function tsTplSafe(ts3) {
+  if (ts3 === TS_TRUNC.cycle) return TS_TRUNC.cycleTpl;
+  if (ts3 === TS_TRUNC.depth) return TS_TRUNC.depthTpl;
+  return ts3;
 }
 function sanitizeParamName(name, index2) {
-  if (name.startsWith("...")) {
-    const rest = name.slice(3);
-    if (isTsIdent(rest)) return name;
+  let optional = false;
+  let base = name;
+  if (base.endsWith("?")) {
+    optional = true;
+    base = base.slice(0, -1);
+  }
+  if (base.startsWith("...")) {
+    const rest = base.slice(3);
+    if (isJsBindingIdent(rest)) return `...${rest}${optional ? "?" : ""}`;
     return `...arg${index2}`;
   }
-  if (isTsIdent(name)) return name;
+  if (isJsBindingIdent(base)) return `${base}${optional ? "?" : ""}`;
   return `arg${index2}`;
 }
 function formatPropKey(k) {
   return formatObjectKey(k);
 }
 function absToTSType(a, typeVars) {
+  return absToTSTypeB(a, typeVars, new ProjectionBudget());
+}
+function absToTSTypeB(a, typeVars, budget) {
+  const stop2 = budget.enter(a);
+  if (stop2 === "cycle") return TS_TRUNC.cycle;
+  if (stop2 === "depth") return TS_TRUNC.depth;
+  try {
+    return absToTSTypeInner(a, typeVars, budget);
+  } finally {
+    budget.exit();
+  }
+}
+function absToTSTypeInner(a, typeVars, budget) {
   if (a.shape.k === "any" && a.term?.op === "var" && typeVars) {
     const mapped = typeVars.get(a.term.id);
     if (mapped) return mapped;
@@ -280342,7 +281126,7 @@ function absToTSType(a, typeVars) {
       const lvR = litValue(p);
       const lv = lvR.ok ? lvR.value : void 0;
       if (typeof lv === "string") return escapeTemplateTypeFixed(lv);
-      return `\${${absToTSType(p, typeVars)}}`;
+      return `\${${tsTplSafe(absToTSTypeB(p, typeVars, budget))}}`;
     }).join("");
     return `\`${inner}\``;
   }
@@ -280356,9 +281140,9 @@ function absToTSType(a, typeVars) {
       return a.shape.type;
     case "obj": {
       const entries = Object.entries(a.shape.slots).map(([k, slot]) => {
-        const inner = absToTSType(slot.value, typeVars);
+        const inner = absToTSTypeB(slot.value, typeVars, budget);
         if (slot.optional) {
-          const t = wrapComplexAbs(slot.value, typeVars);
+          const t = wrapComplexAbs(slot.value, typeVars, budget);
           return `${formatPropKey(k)}: ${t} | undefined`;
         }
         return `${formatPropKey(k)}: ${inner}`;
@@ -280367,16 +281151,16 @@ function absToTSType(a, typeVars) {
       return `{ ${entries.join("; ")} }`;
     }
     case "arr":
-      return `${wrapComplexAbs(a.shape.element, typeVars)}[]`;
+      return `${wrapComplexAbs(a.shape.element, typeVars, budget)}[]`;
     case "tuple": {
       const holes = a.shape.holes ?? [];
       const parts = a.shape.elements.map((e, i) => {
-        const ts3 = absToTSType(e, typeVars);
+        const ts3 = absToTSTypeB(e, typeVars, budget);
         return holes.includes(i) ? `hole: ${ts3}` : ts3;
       });
       if (a.shape.rest) {
         const rest = a.shape.rest;
-        const restTs = rest.shape.k === "arr" ? absToTSType(rest, typeVars) : `${wrapComplexAbs(rest, typeVars)}[]`;
+        const restTs = rest.shape.k === "arr" ? absToTSTypeB(rest, typeVars, budget) : `${wrapComplexAbs(rest, typeVars, budget)}[]`;
         parts.push(`...${restTs}`);
       }
       return `[${parts.join(", ")}]`;
@@ -280388,22 +281172,27 @@ function absToTSType(a, typeVars) {
         const name = sanitizeParamName(p, i);
         const pt = paramTypes?.[i];
         let typeStr;
-        if (pt) typeStr = absToTSType(pt, typeVars);
-        else if (isRest) typeStr = "unknown[]";
+        if (pt) {
+          if (isRest) {
+            typeStr = pt.shape.k === "arr" ? absToTSTypeB(pt, typeVars, budget) : `${wrapComplexAbs(pt, typeVars, budget)}[]`;
+          } else {
+            typeStr = absToTSTypeB(pt, typeVars, budget);
+          }
+        } else if (isRest) typeStr = "unknown[]";
         else typeStr = "unknown";
         return `${name}: ${typeStr}`;
       }).join(", ");
-      const ret = a.shape.returnType ? absToTSType(a.shape.returnType, typeVars) : "unknown";
+      const ret = a.shape.returnType ? absToTSTypeB(a.shape.returnType, typeVars, budget) : "unknown";
       return `(${params}) => ${ret}`;
     }
     case "brand":
-      return isTsIdent(a.shape.name) || /^[A-Z][A-Za-z0-9_$]*$/.test(a.shape.name) ? a.shape.name : "unknown";
+      return isJsBindingIdent(a.shape.name) || /^[A-Z][A-Za-z0-9_$]*$/.test(a.shape.name) ? a.shape.name : "unknown";
     case "eff":
       if (a.shape.eff === "promise")
-        return `Promise<${absToTSType(a.shape.inner, typeVars)}>`;
-      return absToTSType(a.shape.inner, typeVars);
+        return `Promise<${absToTSTypeB(a.shape.inner, typeVars, budget)}>`;
+      return absToTSTypeB(a.shape.inner, typeVars, budget);
     case "sum": {
-      const parts = a.shape.members.map((m) => wrapUnionMember(m, typeVars)).filter((p) => p !== "never");
+      const parts = a.shape.members.map((m) => wrapUnionMember(m, typeVars, budget)).filter((p) => p !== "never");
       const uniq = [...new Set(parts)];
       if (uniq.length === 0) return "never";
       if (uniq.length === 1) return uniq[0];
@@ -280419,32 +281208,47 @@ function caseArgAbs(c, i) {
 function caseResultAbs(c) {
   return c.abs;
 }
-function widenParamAbs(a) {
+function widenParamAbs(a, budget = new ProjectionBudget()) {
+  const stop2 = budget.enter(a);
+  if (stop2) return a;
+  try {
+    return widenParamAbsInner(a, budget);
+  } finally {
+    budget.exit();
+  }
+}
+function widenParamAbsInner(a, budget) {
   const s = a.shape;
   switch (s.k) {
     case "prim":
       return abs(s, void 0, void 0, "exact");
     case "tuple": {
-      const widened = s.elements.map(widenParamAbs);
+      const widened = s.elements.map((el) => widenParamAbs(el, budget));
+      const widenedRest = s.rest ? widenParamAbs(s.rest, budget) : void 0;
       const holes = s.holes;
       const first = widened[0];
-      if (!holes?.length && first && widened.length > 0 && widened.every((el) => absToTSType(el) === absToTSType(first))) {
+      if (!holes?.length && first && widened.length > 0 && widened.every((el) => absToTSType(el) === absToTSType(first)) && (!widenedRest || absToTSType(widenedRest) === absToTSType(first))) {
         return abs({ k: "arr", element: first }, void 0, void 0, "exact");
       }
       return abs(
-        { k: "tuple", elements: widened, ...holes?.length ? { holes: [...holes] } : {} },
+        {
+          k: "tuple",
+          elements: widened,
+          ...widenedRest ? { rest: widenedRest } : {},
+          ...holes?.length ? { holes: [...holes] } : {}
+        },
         void 0,
         void 0,
         "exact"
       );
     }
     case "arr":
-      return abs({ k: "arr", element: widenParamAbs(s.element) }, void 0, void 0, "exact");
+      return abs({ k: "arr", element: widenParamAbs(s.element, budget) }, void 0, void 0, "exact");
     case "obj": {
       const slots = {};
       for (const [k, slot] of Object.entries(s.slots)) {
         slots[k] = {
-          value: widenParamAbs(slot.value),
+          value: widenParamAbs(slot.value, budget),
           ...slot.optional ? { optional: true } : {}
         };
       }
@@ -280452,21 +281256,21 @@ function widenParamAbs(a) {
     }
     case "eff":
       return abs(
-        { k: "eff", eff: s.eff, inner: widenParamAbs(s.inner) },
+        { k: "eff", eff: s.eff, inner: widenParamAbs(s.inner, budget) },
         void 0,
         void 0,
         "exact"
       );
     case "brand":
       return abs(
-        { k: "brand", name: s.name, shape: widenParamAbs(s.shape) },
+        { k: "brand", name: s.name, shape: widenParamAbs(s.shape, budget) },
         void 0,
         void 0,
         "exact"
       );
     case "sum":
       return abs(
-        { k: "sum", members: s.members.map(widenParamAbs) },
+        { k: "sum", members: s.members.map((m) => widenParamAbs(m, budget)) },
         void 0,
         void 0,
         "exact"
@@ -280543,7 +281347,7 @@ function computeMainSignature(fn2) {
     let name = getParamName(fn2, i);
     const isRest = name.startsWith("...");
     const bare = isRest ? name.slice(3) : name;
-    if (!isTsIdent(bare)) {
+    if (!isJsBindingIdent(bare)) {
       name = isRest ? `...arg${i}` : `arg${i}`;
     }
     if (usedNames.has(name)) {
@@ -280616,7 +281420,7 @@ function computeHofSignature(fn2) {
   const typeParams = [];
   for (const id of [...free].sort()) {
     let n = tsTypeParamName(id);
-    if (used.has(n) || TS_PARAM_RESERVED.has(n)) {
+    if (used.has(n) || !isJsBindingIdent(n)) {
       let i = 2;
       while (used.has(`${n}${i}`)) i++;
       n = `${n}${i}`;
@@ -280745,6 +281549,7 @@ function numericBound2(p, self, allowSelfVar) {
   const nR = litOf(p.b);
   const n = nR.ok ? nR.value : void 0;
   if (typeof n !== "number") return "drop";
+  if (!Number.isFinite(n)) return "drop";
   if (p.a.op === "app" && p.a.fn === "length") return "skip";
   if (allowSelfVar && isSelfVar2(p.a, self)) return { op: p.op, n };
   if (p.a.op === "app" && (p.a.fn === "get" || p.a.fn === "length")) return "skip";
@@ -280757,6 +281562,7 @@ function lengthBound3(p, self) {
   const nR = litOf(p.b);
   const n = nR.ok ? nR.value : void 0;
   if (typeof n !== "number") return void 0;
+  if (!Number.isFinite(n)) return void 0;
   if (p.op === "ge") return { dir: "min", n: Math.ceil(n) };
   if (p.op === "gt") return { dir: "min", n: Math.floor(n) + 1 };
   if (p.op === "le") return { dir: "max", n: Math.floor(n) };
@@ -280817,7 +281623,7 @@ function refinementsFromPreds(preds, opts) {
     }
     dropped.push(`pred not projected: ${predToString(p)}`);
   }
-  return { refinements, ...eqLit !== void 0 ? { eqLit } : {}, dropped };
+  return { refinements, ...hasEqLit ? { eqLit } : {}, hasEqLit, dropped };
 }
 function constraintToSchemaNode(c) {
   if (c.fn) return { k: "fn" };
@@ -280839,11 +281645,11 @@ function constraintToSchemaNode(c) {
   }
   const preds = c.preds ?? [];
   const kind = c.prim === "number" ? "number" : c.prim === "string" ? "string" : c.prim === "boolean" ? "boolean" : c.prim ? "other" : "other";
-  const { refinements, eqLit, dropped } = refinementsFromPreds(preds, {
+  const { refinements, eqLit, hasEqLit, dropped } = refinementsFromPreds(preds, {
     kind
     // constraint 路径：absToConstraint 已把 self 改写成 __nudo_self__
   });
-  if (eqLit !== void 0 && (kind === "number" || kind === "string" || kind === "boolean" || !c.prim)) {
+  if (hasEqLit && (kind === "number" || kind === "string" || kind === "boolean" || !c.prim)) {
     return { k: "lit", value: eqLit };
   }
   if (isIntFlag(c) && !refinements.some((r) => r.kind === "int")) {
@@ -280876,17 +281682,18 @@ function constraintDropped(c, prefix2 = "") {
     }
     if (n.fn) return;
     const kind = n.prim === "number" ? "number" : n.prim === "string" ? "string" : n.prim === "boolean" ? "boolean" : "other";
-    const { eqLit, dropped } = refinementsFromPreds(n.preds ?? [], {
+    const { dropped } = refinementsFromPreds(n.preds ?? [], {
       kind
     });
     for (const d of dropped) out.push(path ? `${path}: ${d}` : d);
-    if (eqLit === void 0 && n.preds?.some((p) => p.op === "eq") && !isIntFlag(n)) {
-    }
   };
   visit2(c, prefix2);
   return out;
 }
 function absToSchemaNode(a) {
+  return absToSchemaNodeB(a, new ProjectionBudget());
+}
+function absToSchemaNodeB(a, budget) {
   const dropped = [];
   if (a.term?.op === "lit") {
     const v2 = a.term.value;
@@ -280901,7 +281708,7 @@ function absToSchemaNode(a) {
   }
   const conf = a.conf;
   const lowConf = conf !== "exact" && conf !== "path";
-  const projected = absToConstraint(a);
+  const projected = absToConstraint(a, budget);
   if (projected) {
     const node = constraintToSchemaNode(projected);
     dropped.push(...constraintDropped(projected));
@@ -280910,6 +281717,18 @@ function absToSchemaNode(a) {
   if (lowConf) {
     dropped.push(`conf=${conf}: contract projection skipped; shape-only fallback`);
   }
+  const stop2 = budget.enter(a);
+  if (stop2) {
+    dropped.push(`shape truncated (${stop2}) projected as unknown`);
+    return { node: { k: "unknown" }, dropped };
+  }
+  try {
+    return absToSchemaShape(a, budget, dropped);
+  } finally {
+    budget.exit();
+  }
+}
+function absToSchemaShape(a, budget, dropped) {
   const s = a.shape;
   switch (s.k) {
     case "never":
@@ -280926,12 +281745,12 @@ function absToSchemaNode(a) {
         }
         return { node: { k: "prim", type: s.type, refinements: [] }, dropped };
       }
-      const { refinements, eqLit, dropped: d } = refinementsFromPreds(leaves, {
+      const { refinements, eqLit, hasEqLit, dropped: d } = refinementsFromPreds(leaves, {
         kind,
         self: a.term
       });
       dropped.push(...d);
-      if (eqLit !== void 0 && !Number.isNaN(eqLit)) {
+      if (hasEqLit && (eqLit === void 0 || !Number.isNaN(eqLit))) {
         return { node: { k: "lit", value: eqLit }, dropped };
       }
       return { node: { k: "prim", type: s.type, refinements }, dropped };
@@ -280945,7 +281764,7 @@ function absToSchemaNode(a) {
       }
       const slots = [];
       for (const [key, slot] of Object.entries(s.slots)) {
-        const sub2 = absToSchemaNode(slot.value);
+        const sub2 = absToSchemaNodeB(slot.value, budget);
         dropped.push(...sub2.dropped.map((n) => `${key}: ${n}`));
         slots.push({ key, node: sub2.node, ...slot.optional ? { optional: true } : {} });
       }
@@ -280955,7 +281774,7 @@ function absToSchemaNode(a) {
       if (a.pred && a.pred.op !== "true") {
         dropped.push(`arr pred not projected: ${predToString(a.pred)}`);
       }
-      const sub2 = absToSchemaNode(s.element);
+      const sub2 = absToSchemaNodeB(s.element, budget);
       dropped.push(...sub2.dropped);
       return { node: { k: "arr", element: sub2.node }, dropped };
     }
@@ -280966,15 +281785,21 @@ function absToSchemaNode(a) {
           dropped.push(`tuple hole at ${i} not projected (slot absent \u2260 undefined)`);
           return { k: "unknown" };
         }
-        const sub2 = absToSchemaNode(e);
+        const sub2 = absToSchemaNodeB(e, budget);
         dropped.push(...sub2.dropped);
         return sub2.node;
       });
-      return { node: { k: "tuple", elements }, dropped };
+      let rest;
+      if (s.rest) {
+        const sub2 = absToSchemaNodeB(s.rest, budget);
+        dropped.push(...sub2.dropped);
+        rest = sub2.node;
+      }
+      return { node: { k: "tuple", elements, ...rest ? { rest } : {} }, dropped };
     }
     case "sum": {
       const members = s.members.map((m) => {
-        const sub2 = absToSchemaNode(m);
+        const sub2 = absToSchemaNodeB(m, budget);
         dropped.push(...sub2.dropped);
         return sub2.node;
       });
@@ -280983,7 +281808,7 @@ function absToSchemaNode(a) {
     case "fn":
       return { node: { k: "fn" }, dropped };
     case "eff": {
-      const inner = absToSchemaNode(s.inner);
+      const inner = absToSchemaNodeB(s.inner, budget);
       dropped.push(...inner.dropped);
       return {
         node: s.eff === "promise" ? { k: "promise", inner: inner.node } : inner.node,
@@ -281042,8 +281867,10 @@ function schemaNodeToZod(node) {
     }
     case "arr":
       return `z.array(${schemaNodeToZod(node.element)})`;
-    case "tuple":
-      return `z.tuple([${node.elements.map(schemaNodeToZod).join(", ")}])`;
+    case "tuple": {
+      const base = `z.tuple([${node.elements.map(schemaNodeToZod).join(", ")}])`;
+      return node.rest ? `${base}.rest(${schemaNodeToZod(node.rest)})` : base;
+    }
     case "union":
       return `z.union([${node.members.map(schemaNodeToZod).join(", ")}])`;
     case "fn":
@@ -281068,24 +281895,23 @@ function projectAbsToSchema(a, opts) {
 function absToSchemaSource(a, opts) {
   return projectAbsToSchema(a, opts).source;
 }
-function zodExportIdent(name) {
-  if (/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name)) return name;
-  const cleaned = name.replace(/[^A-Za-z0-9_$]/g, "_");
-  return /^[A-Za-z_$]/.test(cleaned) ? cleaned : `_${cleaned}`;
+function zodExportIdent(name, used) {
+  return toJsBindingIdent(name, used);
 }
 function formatJsObjectKey(k) {
   return formatObjectKey(k);
 }
-function safeExportIdent(name) {
-  return zodExportIdent(name);
+function safeExportIdent(name, used) {
+  return zodExportIdent(name, used);
 }
 function absToZodSchemaModule(exports, opts) {
   const dropped = [];
   const decls = [];
+  const used = /* @__PURE__ */ new Set();
   for (const [name, abs2] of Object.entries(exports)) {
     const p = projectAbsToSchema(abs2, { dialect: "zod" });
     dropped.push(...p.dropped.map((n) => `${name}: ${n}`));
-    decls.push(`export const ${zodExportIdent(name)} = ${p.source};`);
+    decls.push(`export const ${zodExportIdent(name, used)} = ${p.source};`);
   }
   const banner = opts?.banner ?? `// @generated by nudo export --format schema \u2014 dialect: zod
 // One-way lossy projection of Abs; do not edit. nudo check remains the gate.`;
@@ -281179,10 +282005,11 @@ function checkNode(node, value, path, issues) {
       const rec = value;
       for (const slot of node.slots) {
         const key = slot.key;
-        if (!(key in rec) || rec[key] === void 0) {
+        if (!Object.hasOwn(rec, key)) {
           if (!slot.optional) pushIssue(issues, [...path, key], "required");
           continue;
         }
+        if (rec[key] === void 0 && slot.optional) continue;
         checkNode(slot.node, rec[key], [...path, key], issues);
       }
       return;
@@ -281205,6 +282032,11 @@ function checkNode(node, value, path, issues) {
       node.elements.forEach((el, i) => {
         checkNode(el, value[i], [...path, i], issues);
       });
+      if (node.rest) {
+        for (let i = node.elements.length; i < value.length; i++) {
+          checkNode(node.rest, value[i], [...path, i], issues);
+        }
+      }
       return;
     }
     case "union": {
@@ -281229,10 +282061,10 @@ function validateSchemaNode(node, value) {
   checkNode(node, value, [], issues);
   return issues.length === 0 ? { value } : { issues };
 }
-function makeStandardSchemaSource(exportName, node, dropped) {
+function makeStandardSchemaSource(exportName, node, dropped, used) {
   const json = JSON.stringify(node);
   const notes = dropped.length > 0 ? dropped.map((d) => `//   ${sanitizeCommentText(d)}`).join("\n") + "\n" : "";
-  return `${notes}export const ${safeExportIdent(exportName)} = {
+  return `${notes}export const ${safeExportIdent(exportName, used)} = {
   "~standard": {
     version: 1,
     vendor: "nudo",
@@ -281247,10 +282079,11 @@ function makeStandardSchemaSource(exportName, node, dropped) {
 function absToStandardSchemaModule(exports, opts) {
   const dropped = [];
   const bodies = [];
+  const used = /* @__PURE__ */ new Set();
   for (const [name, abs2] of Object.entries(exports)) {
     const { node, dropped: d } = absToSchemaNode(abs2);
     dropped.push(...d.map((n) => `${name}: ${n}`));
-    bodies.push(makeStandardSchemaSource(name, node, d.map((n) => `${name}: ${n}`)));
+    bodies.push(makeStandardSchemaSource(name, node, d.map((n) => `${name}: ${n}`), used));
   }
   const banner = opts?.banner ?? `// @generated by nudo export --format standard \u2014 Standard Schema v1 (vendor: nudo)
 // One-way lossy projection of Abs; do not edit. nudo check remains the gate.`;
@@ -281460,15 +282293,85 @@ ${tag}
     ]
   };
 }
-function wrapReturnNullable(sidecarSource, fnName) {
-  const fn2 = escapeRegExp22(fnName);
+function* exportSpecifierParts(src) {
+  const re = /\bexport\s*\{/g;
+  let m;
+  while ((m = re.exec(src)) !== null) {
+    const parts = [];
+    let cur = "";
+    let quote;
+    let close = -1;
+    for (let i = m.index + m[0].length; i < src.length; i++) {
+      const ch = src[i];
+      if (quote !== void 0) {
+        cur += ch;
+        if (ch === "\\") {
+          if (i + 1 < src.length) cur += src[i + 1];
+          i++;
+        } else if (ch === quote) {
+          quote = void 0;
+        }
+        continue;
+      }
+      if (ch === '"' || ch === "'") {
+        quote = ch;
+        cur += ch;
+      } else if (ch === ",") {
+        parts.push(cur);
+        cur = "";
+      } else if (ch === "}") {
+        parts.push(cur);
+        cur = "";
+        close = i;
+        break;
+      } else {
+        cur += ch;
+      }
+    }
+    if (close === -1) break;
+    re.lastIndex = close + 1;
+    for (const p of parts) yield p.trim();
+  }
+}
+function sidecarBindingFor(sidecarSource, exportName) {
+  for (const t of exportSpecifierParts(sidecarSource)) {
+    if (!t) continue;
+    const asMatch = /^([\w$]+)\s+as\s+(.+)$/.exec(t);
+    if (!asMatch) continue;
+    const local = asMatch[1];
+    let exported = asMatch[2].trim();
+    if (exported.startsWith('"') || exported.startsWith("'")) {
+      try {
+        exported = JSON.parse(exported.replace(/^'|'$/g, '"'));
+      } catch {
+        continue;
+      }
+    }
+    if (exported === exportName) return local;
+  }
+  return void 0;
+}
+function matchSidecarFnDecl(sidecarSource, exportName) {
+  const fn2 = escapeRegExp22(exportName);
   const startRe = new RegExp(
     `(?:export\\s+const\\s+${fn2}\\s*=\\s*|(?<![\\w$])${fn2}\\s*=\\s*)fn\\s*\\(`
   );
-  const m = sidecarSource.match(startRe);
+  let m = sidecarSource.match(startRe);
+  if (!m || m.index === void 0) {
+    const binding = sidecarBindingFor(sidecarSource, exportName);
+    if (binding === void 0) return void 0;
+    m = sidecarSource.match(
+      new RegExp(`(?<![\\w$])${escapeRegExp22(binding)}\\s*=\\s*fn\\s*\\(`)
+    );
+  }
   if (!m || m.index === void 0) return void 0;
-  const start = m.index;
-  const open = start + m[0].lastIndexOf("(");
+  return { start: m.index, openParen: m.index + m[0].lastIndexOf("(") };
+}
+function wrapReturnNullable(sidecarSource, fnName) {
+  const located = matchSidecarFnDecl(sidecarSource, fnName);
+  if (located === void 0) return void 0;
+  const start = located.start;
+  const open = located.openParen;
   let depth = 0;
   let end = -1;
   for (let i = open; i < sidecarSource.length; i++) {
@@ -281587,8 +282490,19 @@ function materializeAction(input) {
       fields = fieldNames.map((f) => ({ field: f, type: "any()", via: "read (no type evidence)" }));
     }
     const shapeText = shapeDslFromFields(fields);
-    const clause = `export const ${fn2} = fn({ ${paramName2}: ${shapeText} });
+    const direct = isJsBindingIdent(fn2);
+    const clause = direct ? `export const ${fn2} = fn({ ${paramName2}: ${shapeText} });
+` : (() => {
+      const used = new Set(
+        [...(sidecarText ?? "").matchAll(/(?<![\w$])_nudo_(\d+)(?![\w$])/g)].map(
+          (x) => x[0]
+        )
+      );
+      const binding = allocNudoBinding((n) => used.has(n));
+      return `const ${binding} = fn({ ${paramName2}: ${shapeText} });
+export { ${binding} as ${exportNameRepr(fn2)} };
 `;
+    })();
     const next = sidecarText && sidecarText.trim().length > 0 ? sidecarText.endsWith("\n") ? sidecarText + clause : sidecarText + "\n" + clause : `// Generated by quickfix \u2014 review before accepting
 ${clause}`;
     return {
@@ -281637,17 +282551,19 @@ ${clause}`;
   }
   return void 0;
 }
-var GENERATED_PREFIX, GENERATED_CASE_LINE_REGEX, IDENT_KEY_REGEX, NUMBER_LITERAL_REGEX, UNSAFE_STRING_CHARS, UNSAFE_KEY_CHARS, CONTROL_CHARS, DIFF_CONTEXT, GENERATED_HEADER, STRING_METHODS2, NUMBER_METHODS, ARRAY_METHODS, NameAllocator, DERIVED_HEADER, TS_PARAM_RESERVED, DIALECT_RENDERERS, CHECK_FN_SOURCE;
+var GENERATED_PREFIX, GENERATED_CASE_LINE_REGEX, IDENT_KEY_REGEX, NUMBER_LITERAL_REGEX, UNSAFE_STRING_CHARS, UNSAFE_KEY_CHARS, CONTROL_CHARS, DIFF_CONTEXT, JS_EXPORT_NAME, GENERATED_HEADER, STRING_METHODS2, NUMBER_METHODS, ARRAY_METHODS, NameAllocator, DERIVED_HEADER, TS_TRUNC, DIALECT_RENDERERS, CHECK_FN_SOURCE;
 var init_emit2 = __esm({
   "../service/dist/emit/index.js"() {
     "use strict";
     init_chunk_4TAFH6ZZ();
-    init_chunk_XY75TNBY();
-    init_chunk_RHEXBPQ6();
+    init_chunk_6GFPZGQS();
+    init_chunk_2RP2Q6LJ();
     init_src();
     init_src();
     init_internal();
+    init_internal();
     init_src2();
+    init_internal();
     init_src();
     init_internal();
     init_src2();
@@ -281666,6 +282582,7 @@ var init_emit2 = __esm({
     init_internal();
     init_internal();
     init_src();
+    init_internal();
     GENERATED_PREFIX = "call@";
     GENERATED_CASE_LINE_REGEX = /^\s*\*?\s*@nudo:case\s+"(call@[^"]*)"/;
     IDENT_KEY_REGEX = /^[A-Za-z_$][A-Za-z0-9_$]*$/;
@@ -281674,6 +282591,7 @@ var init_emit2 = __esm({
     UNSAFE_KEY_CHARS = /[,()[\]{}:]/;
     CONTROL_CHARS = /[\x00-\x1f\x7f]/;
     DIFF_CONTEXT = 3;
+    JS_EXPORT_NAME = /^(?:[$_\p{ID_Start}])(?:[$\u200C\u200D\p{ID_Continue}])*$/u;
     GENERATED_HEADER = "// @generated by nudo \u2014 do not edit; regenerate with `nudo contract --emit`";
     STRING_METHODS2 = /* @__PURE__ */ new Set([
       "toLowerCase",
@@ -281740,6 +282658,10 @@ var init_emit2 = __esm({
       constructor(initial) {
         this.taken = new Set(initial ?? []);
       }
+      /** 名字是否已被占用（绑定别名分配用） */
+      has(preferred) {
+        return this.taken.has(preferred);
+      }
       claim(preferred) {
         if (!this.taken.has(preferred)) {
           this.taken.add(preferred);
@@ -281753,57 +282675,12 @@ var init_emit2 = __esm({
       }
     };
     DERIVED_HEADER = "// @generated by nudo \u2014 do not edit; regenerate with `nudo contract --emit`";
-    TS_PARAM_RESERVED = /* @__PURE__ */ new Set([
-      "break",
-      "case",
-      "catch",
-      "class",
-      "const",
-      "continue",
-      "debugger",
-      "default",
-      "delete",
-      "do",
-      "else",
-      "enum",
-      "export",
-      "extends",
-      "false",
-      "finally",
-      "for",
-      "function",
-      "if",
-      "import",
-      "in",
-      "instanceof",
-      "new",
-      "null",
-      "return",
-      "super",
-      "switch",
-      "this",
-      "throw",
-      "true",
-      "try",
-      "typeof",
-      "var",
-      "void",
-      "while",
-      "with",
-      "yield",
-      "let",
-      "static",
-      "await",
-      "implements",
-      "interface",
-      "package",
-      "private",
-      "protected",
-      "public",
-      "arguments",
-      "eval",
-      "constructor"
-    ]);
+    TS_TRUNC = {
+      cycle: "/* nudo:truncated:cycle */ unknown",
+      depth: "/* nudo:truncated:depth */ unknown",
+      cycleTpl: "/* nudo:truncated:cycle */ string",
+      depthTpl: "/* nudo:truncated:depth */ string"
+    };
     DIALECT_RENDERERS = {
       zod: schemaNodeToZod
     };
@@ -281870,10 +282747,12 @@ function __nudoCheck(node, value, path, issues) {
       }
       for (const slot of node.slots) {
         const key = slot.key;
-        if (!(key in value) || value[key] === undefined) {
+        // \u7F3A\u952E\u5224\u5B9A\u53EA\u7528\u81EA\u6709\u5C5E\u6027\uFF08BUG-018/S6-003\uFF1B\u4E24\u4EFD\u5B9E\u73B0\u987B\u540C\u53E3\u5F84\uFF09
+        if (!Object.hasOwn(value, key)) {
           if (!slot.optional) { path.push(key); push("required"); path.pop(); }
           continue;
         }
+        if (value[key] === undefined && slot.optional) continue;
         path.push(key);
         __nudoCheck(slot.node, value[key], path, issues);
         path.pop();
@@ -281896,6 +282775,13 @@ function __nudoCheck(node, value, path, issues) {
         __nudoCheck(node.elements[i], value[i], path, issues);
         path.pop();
       }
+      if (node.rest) {
+        for (var ri = node.elements.length; ri < value.length; ri++) {
+          path.push(ri);
+          __nudoCheck(node.rest, value[ri], path, issues);
+          path.pop();
+        }
+      }
       return;
     }
     case "union": {
@@ -282089,7 +282975,7 @@ __export(migrate_exports, {
   stripTsToJs: () => stripTsToJs
 });
 import {
-  existsSync as existsSync25,
+  existsSync as existsSync26,
   mkdirSync as mkdirSync7,
   readFileSync as readFileSync28,
   readdirSync as readdirSync4,
@@ -282110,7 +282996,7 @@ function readJson(path) {
 }
 function writeFileAtomic(path, data) {
   const dir = dirname27(path);
-  if (!existsSync25(dir)) mkdirSync7(dir, { recursive: true });
+  if (!existsSync26(dir)) mkdirSync7(dir, { recursive: true });
   const tmp = `${path}.tmp-${process.pid}-${Date.now()}`;
   try {
     writeFileSync10(tmp, data, "utf-8");
@@ -282128,7 +283014,7 @@ function writeJson(path, value) {
 `);
 }
 function snapshotFile(path) {
-  if (!existsSync25(path)) return { path, kind: "missing" };
+  if (!existsSync26(path)) return { path, kind: "missing" };
   try {
     if (statSync15(path).isFile()) {
       return { path, kind: "file", content: readFileSync28(path, "utf-8") };
@@ -282140,7 +283026,7 @@ function snapshotFile(path) {
 }
 function restoreSnapshot(snap) {
   if (snap.kind === "missing") {
-    if (existsSync25(snap.path)) rmSync3(snap.path, { force: true });
+    if (existsSync26(snap.path)) rmSync3(snap.path, { force: true });
     return;
   }
   if (snap.kind === "file") writeFileAtomic(snap.path, snap.content);
@@ -282237,7 +283123,7 @@ function unquoteYamlScalar(s) {
 }
 function parsePnpmWorkspacePackages(root) {
   const yamlPath = join19(root, "pnpm-workspace.yaml");
-  if (!existsSync25(yamlPath)) return [];
+  if (!existsSync26(yamlPath)) return [];
   let text;
   try {
     text = readFileSync28(yamlPath, "utf-8");
@@ -282299,17 +283185,17 @@ function packageRoots(root) {
     if (w.startsWith("!")) continue;
     if (w.endsWith("/*") || w.endsWith("/**")) {
       const base = join19(root, w.replace(/\/\*\*?$/, ""));
-      if (!existsSync25(base)) continue;
+      if (!existsSync26(base)) continue;
       for (const name of readdirSync4(base)) {
         const p = join19(base, name);
-        if (!existsSync25(join19(p, "package.json"))) continue;
+        if (!existsSync26(join19(p, "package.json"))) continue;
         if (seen.has(p)) continue;
         seen.add(p);
         roots.push(p);
       }
     } else {
       const p = join19(root, w);
-      if (!existsSync25(join19(p, "package.json"))) continue;
+      if (!existsSync26(join19(p, "package.json"))) continue;
       if (seen.has(p)) continue;
       seen.add(p);
       roots.push(p);
@@ -282537,7 +283423,7 @@ function findWorkflowDir(from) {
   let cur = resolve19(from);
   for (let i = 0; i < 6; i++) {
     const wf = join19(cur, ".github", "workflows");
-    if (existsSync25(wf) && statSync15(wf).isDirectory()) return wf;
+    if (existsSync26(wf) && statSync15(wf).isDirectory()) return wf;
     const parent = dirname27(cur);
     if (parent === cur) break;
     cur = parent;
@@ -282583,7 +283469,7 @@ function rewriteWorkflowsNear(from, opts = {}) {
 }
 function resolveMigrateRoot(rootDir) {
   const raw = resolve19(rootDir);
-  if (!existsSync25(raw)) {
+  if (!existsSync26(raw)) {
     throw new Error(`not found: ${rootDir}`);
   }
   return statSync15(raw).isDirectory() ? raw : dirname27(raw);
@@ -282607,9 +283493,9 @@ function migrateStatus(rootDir) {
       ...pkg?.devDependencies ?? {}
     };
     const markerPath = join19(r, ".nudo", "migrate-retired.json");
-    const retired = existsSync25(markerPath) && statSync15(markerPath).isFile();
+    const retired = existsSync26(markerPath) && statSync15(markerPath).isFile();
     const retiringPath = join19(r, ".nudo", "migrate-retiring.json");
-    const retiring = !retired && existsSync25(retiringPath) && statSync15(retiringPath).isFile();
+    const retiring = !retired && existsSync26(retiringPath) && statSync15(retiringPath).isFile();
     const blockers = [];
     if (retiring) {
       blockers.push(
@@ -282630,9 +283516,9 @@ function migrateStatus(rootDir) {
     }
     rows.push({
       root: relative12(process.cwd(), r) || ".",
-      packageJson: existsSync25(pkgPath),
+      packageJson: existsSync26(pkgPath),
       typescriptDep: Boolean(deps.typescript),
-      tsconfig: existsSync25(join19(r, "tsconfig.json")),
+      tsconfig: existsSync26(join19(r, "tsconfig.json")),
       tscScripts,
       tsFiles,
       tsxFiles,
@@ -282672,7 +283558,7 @@ async function migrateStrip(paths, opts = {}) {
   const files = [];
   for (const p of paths) {
     const abs2 = resolve19(p);
-    if (!existsSync25(abs2)) {
+    if (!existsSync26(abs2)) {
       throw new Error(`not found: ${p}`);
     }
     if (statSync15(abs2).isDirectory()) {
@@ -282696,9 +283582,9 @@ async function migrateStrip(paths, opts = {}) {
     const outFile = TSX_EXT.has(ext) ? file.replace(/\.tsx$/i, ".jsx") : file.replace(/\.tsx$/i, ".js").replace(/\.mts$/i, ".mjs").replace(/\.cts$/i, ".cjs").replace(/\.ts$/i, ".js");
     const wouldClobberNonTs = outFile === file && !isStripSource(file);
     if (opts.write && !wouldClobberNonTs) {
-      if (opts.backup && existsSync25(file) && !existsSync25(`${file}.bak`)) {
+      if (opts.backup && existsSync26(file) && !existsSync26(`${file}.bak`)) {
         renameSync4(file, `${file}.bak`);
-      } else if (opts.backup !== true && existsSync25(file) && extname(file).toLowerCase() !== extname(outFile).toLowerCase()) {
+      } else if (opts.backup !== true && existsSync26(file) && extname(file).toLowerCase() !== extname(outFile).toLowerCase()) {
       }
       writeFileSync10(outFile, code2, "utf-8");
     }
@@ -282708,7 +283594,7 @@ async function migrateStrip(paths, opts = {}) {
         const draft = await draftInterface(outFile, { source: code2, bodyAccesses: true });
         if (draft.draftSource && draft.draftSource.trim().length > 0) {
           const sc = sidecarPathOf(outFile);
-          if (!existsSync25(sc)) {
+          if (!existsSync26(sc)) {
             mkdirSync7(dirname27(sc), { recursive: true });
             writeFileSync10(sc, draft.draftSource, "utf-8");
             sidecarDraft = sc;
@@ -282744,11 +283630,11 @@ function runTscBaseline(root, files) {
 }
 async function migrateVerify(paths, opts = {}) {
   const { checkSource: checkSource2, formatCheckReport: formatCheckReport2, pTrue: pTrue3 } = await Promise.resolve().then(() => (init_src(), src_exports));
-  const { defaultLoadModule: defaultLoadModule3, findProjectConfig: findProjectConfig3, interfaceConfig: interfaceConfig3, checkConfig: checkConfig2 } = await Promise.resolve().then(() => (init_src4(), src_exports4));
+  const { collectSkipReturns: collectSkipReturns2, defaultLoadModule: defaultLoadModule3, findProjectConfig: findProjectConfig3, interfaceConfig: interfaceConfig3, checkConfig: checkConfig2 } = await Promise.resolve().then(() => (init_src4(), src_exports4));
   const files = [];
   for (const p of paths) {
     const abs2 = resolve19(p);
-    if (!existsSync25(abs2)) {
+    if (!existsSync26(abs2)) {
       throw new Error(`not found: ${p}`);
     }
     if (statSync15(abs2).isDirectory()) {
@@ -282774,7 +283660,9 @@ async function migrateVerify(paths, opts = {}) {
       ...autoBind === false ? { autoBind: false } : {},
       ...proj?.projectDir ? { projectDir: proj.projectDir } : {},
       entryThrows: cCfg.entryThrows,
-      ...cCfg.ignoreThrows && cCfg.ignoreThrows.length > 0 ? { ignoreThrows: cCfg.ignoreThrows } : {}
+      ...cCfg.ignoreThrows && cCfg.ignoreThrows.length > 0 ? { ignoreThrows: cCfg.ignoreThrows } : {},
+      // 与 nudo check 同源：@nudo:skip 的函数不评估 body（verify 的 ok 必须等于 check）
+      skips: collectSkipReturns2(source)
     });
     const summary = `${report.summary.errors} error \xB7 ${report.summary.warnings} warning \xB7 ${report.summary.functions} fn`;
     const row = {
@@ -282843,7 +283731,7 @@ function migrateRetire(rootDir, opts = {}) {
     mkdirSync7(markerDir, { recursive: true });
     commitWriteSet(root, ops);
     const retiring = join19(markerDir, "migrate-retiring.json");
-    if (existsSync25(retiring)) rmSync3(retiring, { force: true });
+    if (existsSync26(retiring)) rmSync3(retiring, { force: true });
   }
   return {
     root: relative12(process.cwd(), root) || ".",
@@ -283026,6 +283914,21 @@ function usageError(message, fix) {
   console.error(message);
   console.error(`fix:  ${fix}`);
 }
+function displayPathOf(p) {
+  const rel = relative7(process.cwd(), p);
+  return rel === "" || rel.startsWith("..") ? p : rel;
+}
+function variadicSwallowError(command, flags) {
+  const list = flags.join(", ");
+  const first = flags[0] ?? "--from";
+  console.error(
+    `error: \`nudo ${command}\` received no paths \u2014 variadic flag(s) ${list} consumed the following arguments`
+  );
+  console.error(
+    `fix:  separate variadic flags from paths with \`--\` (e.g. \`nudo ${command} ${first} a.js -- b.js\`) or list paths before the flags`
+  );
+  process.exitCode = 1;
+}
 function reportPathErrors(errors) {
   for (const e of errors) usageError(e.message, e.suggestion);
   if (errors.length > 0) process.exitCode = 1;
@@ -283213,7 +284116,8 @@ function startWatch(paths, runOne, label) {
     console.log(`[${(/* @__PURE__ */ new Date()).toLocaleTimeString()}] Watching for changes...`);
     graph = buildModuleGraph(getFiles());
   };
-  runAll().catch(() => {
+  runAll().catch((err) => {
+    console.error(`nudo ${label} failed to start: ${err.message}`);
   });
   let debounceTimer = null;
   const watchTarget = isDir ? primary : dirname21(primary);
@@ -283432,6 +284336,7 @@ async function runCheck(file, opts = {}) {
   let cachedJson;
   let algebraReport;
   let mockFromErrors = [];
+  let injectionSetupFailed = false;
   if (cached2) {
     cachedJson = cached2;
     algebraReport = reportFromCachedJson(cached2);
@@ -283478,7 +284383,12 @@ async function runCheck(file, opts = {}) {
         ...reps.targets.length > 0 ? { replacements: reps.values, replacementTargets: reps.targets } : {},
         ...reps.asTargets.length > 0 ? { asOverrides: reps.asValues, asOverrideTargets: reps.asTargets } : {}
       };
-    } catch {
+    } catch (err) {
+      console.error(
+        `error: eval injection setup failed: ${err.message}`
+      );
+      injectionSetupFailed = true;
+      if (opts.gateFlags) opts.gateFlags.injectionSetupFailed = true;
     }
     algebraReport = checkSource2(filePath, source, pTrue3, {
       loadModule,
@@ -283596,31 +284506,32 @@ async function runCheck(file, opts = {}) {
   })) {
     printDocsLinks(algebraReport.issues);
   }
-  if (useDisk && cacheKey && !cached2 && !opts.abs) {
+  if (useDisk && cacheKey && !cached2 && !opts.abs && !injectionSetupFailed) {
     try {
       disk.set(cacheKey, serializeCheckJson2(algebraReport));
     } catch {
     }
   }
   if (opts.json && !opts.jsonCollect) {
-    process.exitCode = checkJson.ok ? 0 : 1;
-  } else if (!opts.jsonCollect && !algebraReport.ok) {
+    process.exitCode = checkJson.ok && !injectionSetupFailed ? 0 : 1;
+  } else if (!opts.jsonCollect && (!algebraReport.ok || injectionSetupFailed)) {
     process.exitCode = 1;
   }
 }
 async function runCheckFix(opts) {
   const core = await Promise.resolve().then(() => (init_src(), src_exports));
   const { checkSource: checkSource2, pTrue: pTrue3, sidecarPathOf: sidecarPathOf2, actionsForIssue: actionsForIssue2 } = core;
-  const { collectSkipReturns: collectSkipReturns2, defaultLoadModule: defaultLoadModule3 } = await Promise.resolve().then(() => (init_src4(), src_exports4));
+  const { collectSkipReturns: collectSkipReturns2, defaultLoadModule: defaultLoadModule3, findProjectConfig: findProjectConfig3, checkConfig: checkConfig2 } = await Promise.resolve().then(() => (init_src4(), src_exports4));
   const {
     materializeAction: materializeAction2,
     applyTextEdits: applyTextEdits2,
     unifiedDiff: unifiedDiff2
   } = await Promise.resolve().then(() => (init_emit2(), emit_exports));
-  const { writeFileSync: writeFileSync11, readFileSync: readFileSync29, existsSync: existsSync26 } = await import("fs");
+  const { writeFileSync: writeFileSync11, readFileSync: readFileSync29, existsSync: existsSync27 } = await import("fs");
   const only = opts.only && opts.only.length > 0 ? new Set(opts.only) : void 0;
   let planned = 0;
   let written = 0;
+  let residualErrors = 0;
   for (const file of opts.targets) {
     let source;
     try {
@@ -283628,17 +284539,26 @@ async function runCheckFix(opts) {
     } catch {
       continue;
     }
+    const proj = findProjectConfig3(dirname24(file));
+    const cCfg = checkConfig2(proj?.config);
+    const gate = checkGateFromConfig(proj?.config);
+    const entryThrows = resolveEntryThrows(
+      { entryThrows: opts.entryThrows, profile: opts.profile },
+      gate,
+      cCfg.entryThrows
+    );
+    const ignoreThrows = mergeIgnoreThrows(opts.ignoreThrows, cCfg.ignoreThrows);
     const report = checkSource2(file, source, pTrue3, {
       loadModule: defaultLoadModule3,
       fromFile: file,
-      ...opts.ignoreThrows ? { ignoreThrows: opts.ignoreThrows } : {},
-      ...opts.entryThrows ? { entryThrows: opts.entryThrows } : {},
+      ...ignoreThrows.length > 0 ? { ignoreThrows } : {},
+      entryThrows,
       skips: collectSkipReturns2(source)
     });
     const sidecar = sidecarPathOf2(file);
     let sidecarText;
     try {
-      sidecarText = existsSync26(sidecar) ? readFileSync29(sidecar, "utf-8") : void 0;
+      sidecarText = existsSync27(sidecar) ? readFileSync29(sidecar, "utf-8") : void 0;
     } catch {
       sidecarText = void 0;
     }
@@ -283699,6 +284619,16 @@ async function runCheckFix(opts) {
         }
       }
     }
+    if (report.issues.some((i) => i.severity === "error")) {
+      const post = checkSource2(file, source, pTrue3, {
+        loadModule: defaultLoadModule3,
+        fromFile: file,
+        ...ignoreThrows.length > 0 ? { ignoreThrows } : {},
+        entryThrows,
+        skips: collectSkipReturns2(source)
+      });
+      residualErrors += post.issues.filter((i) => i.severity === "error").length;
+    }
   }
   const mode = opts.write ? "written" : "planned (dry-run)";
   console.log(
@@ -283710,9 +284640,13 @@ check --fix: ${planned} edit(s) ${mode}${opts.write ? `, ${written} applied` : "
       "hint: only [fix]/[adjust] are auto-applied; [silence]/[review] need a human (or LSP quickfix)"
     );
   }
+  if (residualErrors > 0) {
+    console.log(`check --fix: ${residualErrors} residual error(s) remain \u2014 gate stays red`);
+  }
+  return { planned, written, residualErrors };
 }
 function registerCheckCommand(program3) {
-  program3.command("check").description("Gate contracts + entry throws; print signatures (CI). Day 0 observation lives here.").argument("<paths...>", "File(s) or directory(s) to check").option("--watch, -w", "Watch files and re-run check on change").option("--json", "Emit stable CheckJson (1 file) or CheckJsonMulti envelope (N files) for CI / Agent").option("--gha", "GitHub Actions inline annotations (::error/::warning). Auto when GITHUB_ACTIONS=true").option("--gitlab", "GitLab Code Quality JSON array (write as gl-code-quality-report.json)").option("--verbose", "Expand Abs signatures (term/pred/conf detail)").option("--abs", "Algebra face: term/pred/conf per function").option("--fn <name>", "With --abs: only this function").option("--assume <pred...>", "With --abs: assume constraints, e.g. x>0 y>=1").option("--generalize", "With --abs: polymorphic signatures via symbolic execution").option(
+  program3.command("check").description("Gate contracts + entry throws; print signatures (CI). Day 0 observation lives here.").argument("[paths...]", "File(s) or directory(s) to check").option("--watch, -w", "Watch files and re-run check on change").option("--json", "Emit stable CheckJson (1 file) or CheckJsonMulti envelope (N files) for CI / Agent").option("--gha", "GitHub Actions inline annotations (::error/::warning). Auto when GITHUB_ACTIONS=true").option("--gitlab", "GitLab Code Quality JSON array (write as gl-code-quality-report.json)").option("--verbose", "Expand Abs signatures (term/pred/conf detail)").option("--abs", "Algebra face: term/pred/conf per function").option("--fn <name>", "With --abs: only this function").option("--assume <pred...>", "With --abs: assume constraints, e.g. x>0 y>=1").option("--generalize", "With --abs: polymorphic signatures via symbolic execution").option(
     "--from <paths...>",
     "Usage-site files: inject call records for cross-file domain evidence"
   ).option(
@@ -283729,6 +284663,28 @@ function registerCheckCommand(program3) {
     "AI3: assume `name:type` bindings (e.g. raw:string) and report --target"
   ).option("--target <name>", "With --what-if: binding name whose inferred type to print").option("--fix", "Materialize one fix/adjust edit per issue (default --dry-run: print unified diff)").option("--only <codes...>", "With --fix: only these diagnostic codes (e.g. nudo:entry-may-throw)").option("--write", "With --fix: apply edits to disk (default dry-run)").option("--dry-run", "With --fix: print diffs only (default; kept for explicitness)").action(
     async (paths, opts) => {
+      if (paths.length === 0) {
+        const swallowed = [
+          ...opts.from?.length ? ["--from"] : [],
+          ...opts.assume?.length ? ["--assume"] : [],
+          ...opts.whatIf?.length ? ["--what-if"] : [],
+          ...opts.only?.length ? ["--only"] : []
+        ];
+        if (swallowed.length > 0) {
+          variadicSwallowError("check", swallowed);
+          return;
+        }
+        console.error("Usage error: `nudo check` needs at least one path.");
+        process.exitCode = 1;
+        return;
+      }
+      if (opts.fix && (opts.json || opts.abs || opts.gha || opts.gitlab || opts.watch || opts.verbose || opts.from && opts.from.length > 0 || opts.whatIf && opts.whatIf.length > 0)) {
+        console.error(
+          "error: --fix cannot be combined with --json/--abs/--gha/--gitlab/--watch/--verbose/--from/--what-if (materialization face; the CI gate is plain `nudo check`)"
+        );
+        process.exitCode = 1;
+        return;
+      }
       if (opts.whatIf && opts.whatIf.length > 0) {
         const targets2 = [];
         for (const p of paths) targets2.push(...resolveTargets(p));
@@ -283786,7 +284742,7 @@ function registerCheckCommand(program3) {
       const entryThrows = isEntryThrowsMode(opts.entryThrows) ? opts.entryThrows : void 0;
       const profile = isGateProfile(opts.profile) ? opts.profile : void 0;
       if (opts.fix) {
-        await runCheckFix({
+        const fix = await runCheckFix({
           targets,
           only: opts.only,
           write: opts.write === true,
@@ -283794,6 +284750,9 @@ function registerCheckCommand(program3) {
           entryThrows,
           profile
         });
+        if (fix.residualErrors > 0) {
+          process.exitCode = 1;
+        }
         return;
       }
       const shared = {
@@ -283817,13 +284776,14 @@ function registerCheckCommand(program3) {
         const wantMulti = targets.length > 1 || allPathErrors.length > 0;
         if (wantMulti) {
           const collected = [];
+          const gateFlags = {};
           for (const t of targets) {
-            await runCheck(t, { ...shared, json: true, jsonCollect: collected });
+            await runCheck(t, { ...shared, json: true, jsonCollect: collected, gateFlags });
           }
           const { serializeCheckJsonMulti: multi } = await Promise.resolve().then(() => (init_src(), src_exports));
           const envelope = attachPathErrors(multi(collected), allPathErrors);
           console.log(JSON.stringify(envelope, null, 2));
-          process.exitCode = envelope.ok ? 0 : 1;
+          process.exitCode = envelope.ok && !gateFlags.injectionSetupFailed ? 0 : 1;
           return;
         }
         if (targets.length === 1) {
@@ -284046,13 +285006,13 @@ async function runTest(file, opts = {}) {
     if (report.failed > 0 || pathErrors.length > 0) process.exitCode = 1;
     else process.exitCode = 0;
   } else if (opts.abs) {
-    const report = buildTestReport(filePath, result);
+    const report = buildTestReport(displayPathOf(filePath), result);
     await runAbsView(filePath, {});
     console.log("");
     console.log(formatTestReport(report));
     if (report.failed > 0) process.exitCode = 1;
   } else {
-    const report = buildTestReport(filePath, result);
+    const report = buildTestReport(displayPathOf(filePath), result);
     console.log(formatTestReport(report));
     if (report.failed > 0) process.exitCode = 1;
   }
@@ -284091,8 +285051,17 @@ freeze \u2192 ${relPath} (${directiveCount} directive(s) across ${emitOut.writte
   }
 }
 function registerTestCommand(program3) {
-  program3.command("test").description("Report every inferred case (call@/entry@ + debug witnesses); assert declared expectations").argument("<paths...>", "File(s) or directory(s)").option("--watch, -w", "Watch files and re-run test on change").option("--from <paths...>", "Usage-site files whose calls become synthesized cases").option("--freeze [mode]", "Solidify call-site witnesses as @nudo:case (mode: update | add; add is the default when the value is omitted)").option("--dry-run", "With --freeze: print a unified diff instead of writing").option("--exit-on-diff", "With --freeze --dry-run: exit 1 when the diff is non-empty").option("--json", "Output case facts as JSON (single file)").option("--abs", "Algebra face via check --abs").action(
+  program3.command("test").description("Report every inferred case (call@/entry@ + debug witnesses); assert declared expectations").argument("[paths...]", "File(s) or directory(s)").option("--watch, -w", "Watch files and re-run test on change").option("--from <paths...>", "Usage-site files whose calls become synthesized cases").option("--freeze [mode]", "Solidify call-site witnesses as @nudo:case (mode: update | add; add is the default when the value is omitted)").option("--dry-run", "With --freeze: print a unified diff instead of writing").option("--exit-on-diff", "With --freeze --dry-run: exit 1 when the diff is non-empty").option("--json", "Output case facts as JSON (single file)").option("--abs", "Algebra face via check --abs").action(
     async (paths, opts) => {
+      if (paths.length === 0) {
+        if (opts.from?.length) {
+          variadicSwallowError("test", ["--from"]);
+          return;
+        }
+        console.error("Usage error: `nudo test` needs at least one path.");
+        process.exitCode = 1;
+        return;
+      }
       const targets = [];
       const pathErrors = [];
       for (const p of paths) {
@@ -284481,6 +285450,10 @@ function registerContractCommand(program3) {
         return;
       }
       if (paths.length === 0) {
+        if (opts.from?.length) {
+          variadicSwallowError("contract", ["--from"]);
+          return;
+        }
         console.error(
           "Usage error: `nudo contract` needs at least one path. " + (opts.emit ? "Writing filters: --fn <names> / --all (default: only refresh existing @generated segments)." : opts.draft ? "Draft mode: pass a file or directory." : "Print-only: pass a file or directory.")
         );
@@ -284572,11 +285545,11 @@ function registerContractCommand(program3) {
 }
 
 // src/commands/export.ts
+import { readFileSync as readFileSync26, writeFileSync as writeFileSync9, mkdirSync as mkdirSync6 } from "fs";
+import { resolve as resolve17, relative as relative10, join as join18, basename as basename8 } from "path";
 init_src();
 init_emit2();
 init_src4();
-import { readFileSync as readFileSync26, writeFileSync as writeFileSync9, mkdirSync as mkdirSync6 } from "fs";
-import { resolve as resolve17, relative as relative10, join as join18, basename as basename8 } from "path";
 
 // src/export-format.ts
 var EXPORT_FORMATS = ["schema", "standard", "guard", "dts", "all"];
@@ -284704,34 +285677,50 @@ ${mod2.source}`);
   const schemaModule = Object.keys(schemaExports).length > 0 ? absToZodSchemaModule(schemaExports) : void 0;
   if (output) {
     const outDir = resolve17(output);
-    mkdirSync6(outDir, { recursive: true });
+    const ioError = (op) => ({
+      path: outDir,
+      code: "nudo:path-io",
+      message: `export --out ${op} failed: ${displayPathOf(outDir)}`,
+      suggestion: `check --out <dir> is writable and the path is a directory, then re-run nudo export`
+    });
+    try {
+      mkdirSync6(outDir, { recursive: true });
+    } catch {
+      reportPathErrors([ioError("mkdir")]);
+      return;
+    }
     const written = [];
-    if (schemaModule) {
-      const p = join18(outDir, schemaFileName(stem, effectiveDialect));
-      writeFileSync9(p, schemaModule.source, "utf-8");
-      written.push(p);
-    }
-    if (standardChunks.length > 0) {
-      for (const chunk of standardChunks) {
-        const m = chunk.match(/\/\/ === (\S+) Standard Schema ===/);
-        const fnStem = m?.[1] ?? stem;
-        const p = join18(outDir, `${fnStem}.nudo.standard.ts`);
-        const header = `// @generated by nudo export --format standard \u2014 Standard Schema v1 (vendor: nudo)
+    try {
+      if (schemaModule) {
+        const p = join18(outDir, schemaFileName(stem, effectiveDialect));
+        writeFileSync9(p, schemaModule.source, "utf-8");
+        written.push(p);
+      }
+      if (standardChunks.length > 0) {
+        for (const chunk of standardChunks) {
+          const m = chunk.match(/\/\/ === (\S+) Standard Schema ===/);
+          const fnStem = m?.[1] ?? stem;
+          const p = join18(outDir, `${fnStem}.nudo.standard.ts`);
+          const header = `// @generated by nudo export --format standard \u2014 Standard Schema v1 (vendor: nudo)
 `;
-        const body = chunk.startsWith("\n") ? chunk.slice(1) : chunk;
-        writeFileSync9(p, body.includes("@generated") ? body + "\n" : header + body + "\n", "utf-8");
+          const body = chunk.startsWith("\n") ? chunk.slice(1) : chunk;
+          writeFileSync9(p, body.includes("@generated") ? body + "\n" : header + body + "\n", "utf-8");
+          written.push(p);
+        }
+      }
+      if (guardChunks.length > 0) {
+        const p = join18(outDir, `${stem}.nudo.guard.ts`);
+        writeFileSync9(p, guardChunks.join("\n") + "\n", "utf-8");
         written.push(p);
       }
-    }
-    if (guardChunks.length > 0) {
-      const p = join18(outDir, `${stem}.nudo.guard.ts`);
-      writeFileSync9(p, guardChunks.join("\n") + "\n", "utf-8");
-      written.push(p);
-    }
-    if (dtsChunks.length > 0) {
-      const p = join18(outDir, `${stem}.d.ts`);
-      writeFileSync9(p, dtsChunks.join("\n") + "\n", "utf-8");
-      written.push(p);
+      if (dtsChunks.length > 0) {
+        const p = join18(outDir, `${stem}.d.ts`);
+        writeFileSync9(p, dtsChunks.join("\n") + "\n", "utf-8");
+        written.push(p);
+      }
+    } catch {
+      reportPathErrors([ioError("write")]);
+      return;
     }
     for (const p of written) {
       console.log(`wrote ${relative10(process.cwd(), p)}`);
@@ -284776,21 +285765,30 @@ function registerExportCommand(program3) {
         process.exitCode = 1;
         return;
       }
-      await runExport(file, format, options.out, dialect);
+      const { targets, errors } = resolveTargetsCollect(file);
+      if (errors.length > 0) {
+        reportPathErrors(errors);
+        return;
+      }
+      if (targets.length !== 1) {
+        console.error(
+          `error: export takes exactly one analysis file (got ${targets.length} from ${file})`
+        );
+        console.error("fix:  pass the single .js/.mjs/.ts file to project");
+        process.exitCode = 1;
+        return;
+      }
+      await runExport(targets[0], format, options.out, dialect);
     }
   );
 }
 
 // src/commands/health.ts
 init_src4();
-import { readFileSync as readFileSync27, existsSync as existsSync24, statSync as statSync14 } from "fs";
-import { resolve as resolve18, dirname as dirname26, relative as relative11 } from "path";
-var displayPath = (p) => {
-  const rel = relative11(process.cwd(), p);
-  return rel === "" || rel.startsWith("..") ? p : rel;
-};
+import { readFileSync as readFileSync27, existsSync as existsSync25, statSync as statSync14 } from "fs";
+import { resolve as resolve18, dirname as dirname26 } from "path";
 async function healthFile(filePath, records) {
-  const report = { file: displayPath(filePath), functions: 0, entryOnly: 0, uncovered: [] };
+  const report = { file: displayPathOf(filePath), functions: 0, entryOnly: 0, uncovered: [] };
   let source;
   try {
     source = readFileSync27(filePath, "utf-8");
@@ -284859,13 +285857,16 @@ async function countInterfaceDrift(filePath) {
   }
   if (!/@generated/.test(scSrc)) return { count: 0 };
   try {
-    const { findProjectConfig: findProjectConfig3, interfaceConfig: interfaceConfig3 } = await Promise.resolve().then(() => (init_src4(), src_exports4));
+    const { collectSkipReturns: collectSkipReturns2, findProjectConfig: findProjectConfig3, interfaceConfig: interfaceConfig3 } = await Promise.resolve().then(() => (init_src4(), src_exports4));
     const proj = findProjectConfig3(dirname26(abs2));
     const autoBind = interfaceConfig3(proj?.config).autoBind;
-    const r = checkSource2(abs2, rf(abs2, "utf-8"), pTrue3, {
+    const source = rf(abs2, "utf-8");
+    const r = checkSource2(abs2, source, pTrue3, {
       loadModule: defaultLoadModule3,
       fromFile: abs2,
-      ...autoBind === false ? { autoBind: false } : {}
+      ...autoBind === false ? { autoBind: false } : {},
+      // 与 nudo check 同源：@nudo:skip 的函数不评估 body，不产出 drift 候选
+      skips: collectSkipReturns2(source)
     });
     return { count: r.issues.filter((i) => i.code === "nudo:interface-drift").length };
   } catch (e) {
@@ -284874,13 +285875,14 @@ async function countInterfaceDrift(filePath) {
 }
 async function runHealth(paths, opts) {
   const targetPaths = paths.length > 0 ? paths : ["."];
-  const externalRecords = opts.from?.length ? collectExternalRecords(opts.from) : void 0;
+  const fromErrors = [];
+  const externalRecords = opts.from?.length ? collectExternalRecords(opts.from, fromErrors) : void 0;
   const files = [];
   const reports = [];
   for (const p of targetPaths) {
     const abs2 = resolve18(p);
-    if (!existsSync24(abs2)) {
-      reports.push({ file: displayPath(abs2), functions: 0, entryOnly: 0, uncovered: [], error: `File not found: ${abs2}` });
+    if (!existsSync25(abs2)) {
+      reports.push({ file: displayPathOf(abs2), functions: 0, entryOnly: 0, uncovered: [], error: `File not found: ${displayPathOf(abs2)}` });
       continue;
     }
     files.push(...statSync14(abs2).isDirectory() ? collectNudoFiles(abs2) : [abs2]);
@@ -284893,11 +285895,21 @@ async function runHealth(paths, opts) {
   const errorCount = reports.filter((r) => r.error).length;
   const uncoveredTotal = reports.reduce((n, r) => n + r.uncovered.length, 0);
   const failed = driftCount > 0 || ifaceDriftCount > 0 || errorCount > 0;
+  const ok2 = !failed && fromErrors.length === 0;
+  process.exitCode = ok2 ? 0 : 1;
   if (opts.json) {
     console.log(
       JSON.stringify(
         {
-          ok: !failed,
+          ok: ok2,
+          ...fromErrors.length > 0 ? {
+            pathErrors: fromErrors.map((e) => ({
+              path: e.path,
+              code: e.code,
+              message: e.message,
+              suggestion: e.suggestion
+            }))
+          } : {},
           files: reports.map((r) => ({
             file: r.file,
             functions: r.functions,
@@ -284912,7 +285924,7 @@ async function runHealth(paths, opts) {
             files: reports.length,
             drift: driftCount,
             interfaceDrift: ifaceDriftCount,
-            errors: errorCount,
+            errors: errorCount + fromErrors.length,
             uncovered: uncoveredTotal,
             internal_fallbacks: reports.reduce((n, r) => n + (r.internalFallbacks ?? 0), 0)
           }
@@ -284922,8 +285934,16 @@ async function runHealth(paths, opts) {
       )
     );
   } else {
+    for (const e of fromErrors) {
+      console.error(e.message);
+      console.error(`fix:  ${e.suggestion}`);
+    }
     if (reports.length === 0) {
-      console.log("No files to check.");
+      if (fromErrors.length > 0) {
+        console.log("Result: FAIL (path errors found)");
+      } else {
+        console.log("No files to check.");
+      }
       return;
     }
     for (const r of reports) {
@@ -284962,12 +285982,27 @@ async function runHealth(paths, opts) {
       `
 Summary: ${reports.length} file(s) \xB7 ${driftCount} case drift \xB7 ${ifaceDriftCount} contract drift \xB7 ${errorCount} error(s) \xB7 ${uncoveredTotal} uncovered function(s)` + (internalTotal > 0 ? ` \xB7 ${internalTotal} internal_fallback(s)` : "")
     );
-    console.log(failed ? "Result: FAIL (drift or errors found)" : "Result: OK (uncovered function(s) are informational only)");
+    console.log(
+      ok2 ? "Result: OK (uncovered function(s) are informational only)" : fromErrors.length > 0 && !failed ? "Result: FAIL (path errors found)" : "Result: FAIL (drift or errors found)"
+    );
   }
-  if (failed) process.exitCode = 1;
 }
 function registerHealthCommand(program3) {
-  program3.command("health").description("Project health & drift: uncovered functions, witness drift, contract drift, analysis errors").argument("[paths...]", "File(s) or directory(s) (default: current directory)").option("--watch, -w", "Watch and re-run health on change").option("--from <paths...>", "Usage-site files for freeze-drift detection").option("--json", "Output as JSON").action(async (paths, opts) => {
+  program3.command("health").description("Project health & drift: uncovered functions, witness drift, contract drift, analysis errors").argument("[paths...]", "File(s) or directory(s) (default: current directory; with --from, pass paths explicitly \u2014 e.g. `nudo health . --from usage.js`)").option("--watch, -w", "Watch and re-run health on change").option("--from <paths...>", "Usage-site files for freeze-drift detection").option("--json", "Output as JSON").action(async (paths, opts) => {
+    if (opts.from?.length) {
+      if (opts.from.length > 1) {
+        variadicSwallowError("health", ["--from"]);
+        return;
+      }
+      if (paths.length === 0) {
+        console.error(
+          "error: `nudo health` --from requires explicit paths when used without positional paths (previously defaulted to cwd scan)"
+        );
+        console.error("fix:  use: `nudo health . --from usage.js`");
+        process.exitCode = 1;
+        return;
+      }
+    }
     const fromPaths = opts.from;
     const runOneDir = async () => {
       await runHealth(paths, { ...fromPaths ? { from: fromPaths } : {}, json: opts.json });
@@ -285099,7 +286134,7 @@ function registerMigrateCommand(program3) {
 
 // src/index.ts
 var program2 = new Command();
-var argv = process.argv.filter((a, i) => !(i >= 2 && a === "--"));
+var argv = process.argv[2] === "--" ? [process.argv[0], process.argv[1], ...process.argv.slice(3)] : process.argv;
 program2.name("nudo").description("JavaScript types, computed \u2014 check / test / contract / export / health / migrate").version(formatVersionOutput()).addHelpText(
   "after",
   `