nudojs 1.3.20 → 1.3.21

package/dist/index.js

@@ -19039,6 +19039,18 @@ function withExecPhi(p, body) {
     phi = prev;
   }
 }
+function currentAssumePremises() {
+  return assumePremises;
+}
+function withAssumePremises(p, body) {
+  const prev = assumePremises;
+  assumePremises = p;
+  try {
+    return body();
+  } finally {
+    assumePremises = prev;
+  }
+}
 function setHostGlobalFnCall(bridge) {
   hostGlobalFnCall = bridge;
 }
@@ -19075,6 +19087,12 @@ function $absVal(v2) {
   return asAbsVal(v2);
 }
 function callAtFunctionBoundary(body) {
+  if (assumePremises !== pTrue) {
+    return withAssumePremises(pTrue, () => boundaryBody(body));
+  }
+  return boundaryBody(body);
+}
+function boundaryBody(body) {
   let forwarded = [];
   try {
     return runWithLoopExits(() => {
@@ -19383,7 +19401,7 @@ function $isBreakTo(e, label) {
 function $rethrowIfNudoReturn(e) {
   if (isNudoReturn(e)) throw e;
 }
-var phi, noBody2, hostGlobalFnCall, newTargetStack, loopExitsAls, throwExitsAls, tryMarksAls, softFrameActiveAls, NudoReturn, loopSignalFromAbstractArm, NudoLoopSignal;
+var phi, assumePremises, noBody2, hostGlobalFnCall, newTargetStack, loopExitsAls, throwExitsAls, tryMarksAls, softFrameActiveAls, NudoReturn, loopSignalFromAbstractArm, NudoLoopSignal;
 var init_state = __esm({
   "../core/src/algebra/exec/runtime/state.ts"() {
     "use strict";
@@ -19396,6 +19414,7 @@ var init_state = __esm({
     init_containers();
     init_objects();
     phi = pTrue;
+    assumePremises = pTrue;
     noBody2 = { type: "BlockStatement", body: [], directives: [] };
     newTargetStack = [];
     loopExitsAls = new AsyncLocalStorage3();
@@ -23800,7 +23819,12 @@ function emitArrMutatorRebinds(expr, opts, pad) {
     if (node.type === "CallExpression" && node.callee?.type === "MemberExpression" && node.callee.computed !== true && node.callee.property?.type === "Identifier" && ARR_MUTATOR_NAMES.has(node.callee.property.name)) {
       const methodName = node.callee.property.name;
       const argSrcs = (node.arguments ?? []).map(
-        (a) => a.type === "SpreadElement" ? "$unknown()" : isExpression(a) ? emitTranspileExpression(a, opts) : "$unknown()"
+        (a) => (
+          // spread 实参展开（issue #153）：$elems → JS Abs[]，数组字面量 JS
+          // spread 平铺（与 expr.ts 普通调用同口径）；此前折 $unknown() 单参
+          // 让重绑行以 unknown 实参执行真实变更，污染容器元素域
+          a.type === "SpreadElement" ? `...$elems(${emitTranspileExpression(a.argument, opts)})` : isExpression(a) ? emitTranspileExpression(a, opts) : "$unknown()"
+        )
       ).join(", ");
       const objNode = node.callee.object;
       if (objNode.type === "Identifier") {
@@ -24947,7 +24971,12 @@ ${pad}export default ${name};`;
         const methodName = expr.callee.property.name;
         if (["push", "unshift", "splice", "pop", "shift", "reverse", "sort"].includes(methodName)) {
           const argSrcs = expr.arguments.map(
-            (a) => a.type === "SpreadElement" ? "$unknown()" : emitTranspileExpression(a, opts)
+            (a) => (
+              // spread 实参展开（issue #153）：$elems → JS Abs[]，数组字面量 JS spread
+              // 平铺（与普通调用 $callNamed/$invoke 同口径，DEC-006 K5）；
+              // 此前折 $unknown() 单参会污染容器元素域
+              a.type === "SpreadElement" ? `...$elems(${emitTranspileExpression(a.argument, opts)})` : emitTranspileExpression(a, opts)
+            )
           ).join(", ");
           const objNode = expr.callee.object;
           if (objNode.type === "Identifier") {
@@ -27251,7 +27280,7 @@ function $mul(a, b) {
   return mul(a, b, currentExecPhi());
 }
 function $div(a, b) {
-  return div(a, b, currentExecPhi());
+  return div(a, b, currentExecPhi(), currentAssumePremises());
 }
 function $mod(a, b) {
   return mod(a, b, currentExecPhi());
@@ -31822,6 +31851,7 @@ __export(runtime_exports, {
   callAtFunctionBoundary: () => callAtFunctionBoundary,
   clearStaleTermPred: () => clearStaleTermPred,
   confPartial: () => confPartial,
+  currentAssumePremises: () => currentAssumePremises,
   currentExecPhi: () => currentExecPhi,
   fillTuple: () => fillTuple,
   isArrMutator: () => isArrMutator,
@@ -31839,6 +31869,7 @@ __export(runtime_exports, {
   runWithLoopExits: () => runWithLoopExits,
   takeLoopExits: () => takeLoopExits,
   takeThrowExits: () => takeThrowExits,
+  withAssumePremises: () => withAssumePremises,
   withExecPhi: () => withExecPhi,
   withNewTargetReset: () => withNewTargetReset
 });
@@ -31932,6 +31963,15 @@ function isNudoConstraint(x) {
 function isIntFlag(c) {
   return c.int === true || intFlaggedBuilders.has(c);
 }
+function finiteBoundArg(method, n) {
+  if (typeof n !== "number" || !Number.isFinite(n)) {
+    const shown = typeof n === "string" ? JSON.stringify(n) : String(n);
+    throw new Error(
+      `nudo ${method}(): finite numeric bound expected, got ${shown} \u2014 variable references are not supported; express cross-variable lemmas with @nudo:assume (issue #152)`
+    );
+  }
+  return n;
+}
 function makeBuilder(prim2, preds, extra) {
   const fields = extra?.fields;
   const element = extra?.element;
@@ -31956,17 +31996,16 @@ function makeBuilder(prim2, preds, extra) {
     /* @__PURE__ */ Object.create(null),
     base,
     {
-      gt: (n) => add2(gt(selfTerm(), lit(n))),
-      ge: (n) => add2(ge(selfTerm(), lit(n))),
-      lt: (n) => add2(lt(selfTerm(), lit(n))),
-      le: (n) => add2(le(selfTerm(), lit(n))),
+      gt: (n) => add2(gt(selfTerm(), lit(finiteBoundArg("gt", n)))),
+      ge: (n) => add2(ge(selfTerm(), lit(finiteBoundArg("ge", n)))),
+      lt: (n) => add2(lt(selfTerm(), lit(finiteBoundArg("lt", n)))),
+      le: (n) => add2(le(selfTerm(), lit(finiteBoundArg("le", n)))),
       int: () => makeBuilder(prim2 ?? "number", preds, { ...extra, int: true }),
-      min: (n) => add2(ge(lenTerm(selfTerm()), lit(n))),
-      max: (n) => add2(le(lenTerm(selfTerm()), lit(n))),
+      min: (n) => add2(ge(lenTerm(selfTerm()), lit(finiteBoundArg("min", n)))),
+      max: (n) => add2(le(lenTerm(selfTerm()), lit(finiteBoundArg("max", n)))),
       length: (n) => add2(and(ge(lenTerm(selfTerm()), lit(n)), le(lenTerm(selfTerm()), lit(n)))),
       shift: (n) => {
-        if (!Number.isFinite(n))
-          throw new Error("nudo shift(): offset must be a finite number");
+        finiteBoundArg("shift", n);
         if (fields || element || members || fnSlot || lazySlot)
           throw new Error("nudo shift(): only numeric scalar constraint chains are allowed (shape/array/union/fn are not supported)");
         if (prim2 !== void 0 && prim2 !== "number")
@@ -37078,7 +37117,9 @@ function callTranspiledExportFullInner(exports, name, args, opts) {
     return runWithLoopExits(() => {
       try {
         const invoke = () => withNewTargetReset(() => fn2(...callArgs));
-        const r = opts?.phi ? withExecPhi(opts.phi, invoke) : invoke();
+        const ap = opts?.assumePremises;
+        const seeded = ap !== void 0 ? () => withAssumePremises(ap, invoke) : invoke;
+        const r = opts?.phi ? withExecPhi(opts.phi, seeded) : seeded();
         drainPromiseMicros();
         if (!isAbsVal(r)) return joinControlExits(asAbsVal(r));
         return joinControlExits(r);
@@ -40816,7 +40857,50 @@ function mul(a, b, phi2 = pTrue) {
   noteAbstractArithMayThrow(a, b);
   return abs({ k: "unknown" }, void 0, void 0, "partial");
 }
-function div(a, b, phi2 = pTrue) {
+function assumePremiseList(assume) {
+  if (!assume || assume.op === "true") return [];
+  const out = [];
+  const walk = (p) => {
+    if (p.op === "and") {
+      p.args.forEach(walk);
+      return;
+    }
+    if (p.op !== "true") out.push(p);
+  };
+  walk(assume);
+  return out;
+}
+function divAssumeBounds(a, b, resultTerm, phi2, assume) {
+  const premises = assumePremiseList(assume);
+  if (premises.length === 0) return void 0;
+  if (!a.term || !b.term) return void 0;
+  const bb = numericBounds(b, phi2);
+  const posDen = bb?.lo !== void 0 && (bb.lo.value > 0 || bb.lo.value === 0 && bb.lo.strict);
+  const negDen = bb?.hi !== void 0 && (bb.hi.value < 0 || bb.hi.value === 0 && bb.hi.strict);
+  if (!posDen && !negDen) return void 0;
+  let aLeB = false;
+  let bLeA = false;
+  for (const p of premises) {
+    if (p.op !== "le") continue;
+    if (termEquals(p.a, a.term) && termEquals(p.b, b.term)) aLeB = true;
+    else if (termEquals(p.a, b.term) && termEquals(p.b, a.term)) bLeA = true;
+  }
+  if (!aLeB && !bLeA) return void 0;
+  const facts = [];
+  if (aLeB) facts.push(posDen ? le(resultTerm, lit(1)) : ge(resultTerm, lit(1)));
+  if (bLeA) facts.push(posDen ? ge(resultTerm, lit(1)) : le(resultTerm, lit(1)));
+  const ab = numericBounds(a, phi2);
+  if (ab?.lo !== void 0 && (ab.lo.value > 0 || ab.lo.value === 0)) {
+    if (posDen) facts.push(ab.lo.strict ? gt(resultTerm, lit(0)) : ge(resultTerm, lit(0)));
+    else facts.push(ab.lo.strict ? lt(resultTerm, lit(0)) : le(resultTerm, lit(0)));
+  }
+  if (ab?.hi !== void 0 && (ab.hi.value < 0 || ab.hi.value === 0)) {
+    if (posDen) facts.push(ab.hi.strict ? lt(resultTerm, lit(0)) : le(resultTerm, lit(0)));
+    else facts.push(ab.hi.strict ? gt(resultTerm, lit(0)) : ge(resultTerm, lit(0)));
+  }
+  return facts.length ? and(...facts) : void 0;
+}
+function div(a, b, phi2 = pTrue, assume) {
   {
     const fa = builtinBrandToPrimitive(a, "number");
     const fb = builtinBrandToPrimitive(b, "number");
@@ -40871,7 +40955,13 @@ function div(a, b, phi2 = pTrue) {
         term.op === "lit" ? "exact" : confJoin(confJoin(a.conf, b.conf), "path")
       );
     }
-    return abs(num().shape, term, void 0, confJoin(confJoin(a.conf, b.conf), "path"));
+    const assumePred = divAssumeBounds(a, b, term, phi2, assume);
+    return abs(
+      num().shape,
+      term,
+      assumePred,
+      confJoin(confJoin(a.conf, b.conf), "path")
+    );
   }
   if (isNumericLike(a) && isNumericLike(b)) {
     return abs(num().shape, void 0, void 0, "partial");
@@ -40882,7 +40972,7 @@ function div(a, b, phi2 = pTrue) {
   if (isAnyLike(a) || isAnyLike(b)) {
     return toNumberResult(a, b, "/");
   }
-  const distributed = distributeSumBinOp("/", a, b, phi2, div);
+  const distributed = distributeSumBinOp("/", a, b, phi2, (x, y, p) => div(x, y, p, assume));
   if (distributed) return distributed;
   noteAbstractArithMayThrow(a, b);
   return abs({ k: "unknown" }, void 0, void 0, "partial");
@@ -41692,6 +41782,14 @@ function scanContractSegments(lines) {
   }
   return reqs;
 }
+function scanAssumeSegments(lines) {
+  const out = [];
+  for (const line of lines) {
+    const m = line.match(/^@nudo:assume\s+(.+)$/);
+    if (m) out.push(m[1].trim().replace(/\*\/$/, "").trim());
+  }
+  return out;
+}
 function scanThrowsDecl(lines) {
   const kinds = /* @__PURE__ */ new Set();
   let any2 = false;
@@ -42566,6 +42664,24 @@ function extractRefineLines(source, fnName) {
   const lines = fnDirectiveCommentLines(source, fnName);
   return scanContractSegments(lines);
 }
+function extractAssumeSegs(source, fnName) {
+  if (!stripStringsKeepComments(source).includes("@nudo:assume")) return [];
+  const out = [];
+  for (const seg of scanAssumeSegments(fnDirectiveCommentLines(source, fnName))) {
+    const geSeg = seg.match(/^([A-Za-z_$][\w$]*)\s*>=\s*([A-Za-z_$][\w$]*)$/);
+    if (geSeg) {
+      out.push({ kind: "ok", lhs: geSeg[2], rhs: geSeg[1] });
+      continue;
+    }
+    const leSeg = seg.match(/^([A-Za-z_$][\w$]*)\s*<=\s*([A-Za-z_$][\w$]*)$/);
+    if (leSeg) {
+      out.push({ kind: "ok", lhs: leSeg[1], rhs: leSeg[2] });
+      continue;
+    }
+    out.push({ kind: "bad", raw: seg });
+  }
+  return out;
+}
 function extractRefinesFromSource(source, fnName, opts = {}) {
   if (!stripStringsKeepComments(source).includes("@nudo:contract")) return [];
   const constraints = collectConstraints(source, opts);
@@ -45369,7 +45485,7 @@ function flattenSumArms(ret) {
   return out;
 }
 function isWidenedSumArm(m, parent) {
-  return parent.conf === "partial" && m.shape.k === "prim" && !m.term && (!m.pred || m.pred.op === "true");
+  return (parent.conf === "partial" || m.conf === "widened") && m.shape.k === "prim" && !m.term && (!m.pred || m.pred.op === "true");
 }
 function provesBarePrimDomain(arm, constraint) {
   if (constraint.members) {
@@ -45396,7 +45512,7 @@ function assertImplies(ret, constraint, opts) {
   const phi2 = opts?.phi ?? pTrue;
   if (ret.shape.k === "never") return proved();
   if (isAnyConstraint(constraint)) return proved();
-  if (isValueSetUnknown(ret)) {
+  if (isValueSetUnknown(ret) && ret.conf !== "widened") {
     return unprovable(
       ret.shape.k === "any" ? "any does not establish the return contract" : "inference failure (unknown/opaque) \u2014 cannot prove the return contract"
     );
@@ -45452,6 +45568,9 @@ function assertImpliesSingle(arm, constraint, opts, phi2) {
     return constraintAdmitsNullish(constraint) ? proved() : disproved(`nullish return \u22AD ${formatConstraint(constraint)}`);
   }
   if (isValueSetUnknown(arm)) {
+    if (arm.conf === "widened" && arm.shape.k === "prim" && !arm.term && (!arm.pred || arm.pred.op === "true") && provesBarePrimDomain(arm, constraint)) {
+      return proved();
+    }
     return unprovable(
       arm.shape.k === "any" ? "any does not establish the return contract" : "inference failure (unknown/opaque) \u2014 cannot prove the return contract"
     );
@@ -47509,6 +47628,7 @@ function numericBound(p, self) {
   if (p.op !== "gt" && p.op !== "ge" && p.op !== "lt" && p.op !== "le") return void 0;
   if (!self) return void 0;
   if (termEquals(p.a, self) && p.b.op === "lit" && typeof p.b.value === "number") {
+    if (!Number.isFinite(p.b.value)) return void 0;
     return { op: p.op, n: p.b.value };
   }
   return void 0;
@@ -48578,6 +48698,49 @@ function sidecarDiagIssues(diags) {
   }
   return out;
 }
+function assumePremisesPhiOf(name, source, file, issues) {
+  const segs = extractAssumeSegs(source, name);
+  if (segs.length === 0) return void 0;
+  const meta = extractFn(source, name, file);
+  const bindable = /* @__PURE__ */ new Set([
+    ...contractParamNameSet(meta?.formals ?? []),
+    ...meta?.params ?? []
+  ]);
+  const surface = [...bindable].join(", ");
+  const preds = [];
+  const display = [];
+  for (const seg of segs) {
+    if (seg.kind === "bad") {
+      issues.push({
+        severity: "error",
+        code: "nudo:assume-invalid",
+        message: `${name}: malformed @nudo:assume '${seg.raw}' (expected <param> <= <param> or <param> >= <param>; constant bounds belong to sidecar contracts)`,
+        actual: seg.raw,
+        expected: "<param> <= <param>",
+        suggestion: "cross-variable lemmas: @nudo:assume d <= max \u2014 constant bounds: sidecar number().le(10)",
+        fn: name
+      });
+      continue;
+    }
+    const bad = [seg.lhs, seg.rhs].filter((n) => !bindable.has(n));
+    if (bad.length > 0) {
+      issues.push({
+        severity: "error",
+        code: "nudo:assume-invalid",
+        message: `${name}: @nudo:assume parameter name(s) not in the formal parameter list (${bad.join(", ")})`,
+        actual: bad.join(", "),
+        expected: surface || "(no params)",
+        suggestion: `reference one of: ${surface || "(function has no params)"}`,
+        fn: name
+      });
+      continue;
+    }
+    preds.push(le(v(seg.lhs), v(seg.rhs)));
+    display.push(`${seg.lhs} <= ${seg.rhs}`);
+  }
+  if (preds.length === 0) return void 0;
+  return { phi: and(...preds), display };
+}
 function checkSourceInner(filePath, source, file, phi2, opts, issues, signatures, names2, truncated, identityOpts = opts, depsFp, sidecarFp) {
   const hasRefineDirective = stripStringsKeepComments(source).includes("@nudo:contract");
   const entryNames = localNamedExports(source);
@@ -48605,6 +48768,8 @@ function checkSourceInner(filePath, source, file, phi2, opts, issues, signatures
     return eff;
   };
   for (const name of names2) {
+    const assumePhi = assumePremisesPhiOf(name, source, file, issues);
+    const runSeeded = (body) => assumePhi === void 0 ? body() : withAssumePremises(assumePhi.phi, body);
     if (opts.skips?.has(name)) {
       const declared = opts.skips.get(name) ?? null;
       const meta = extractFn(source, name, file);
@@ -48649,19 +48814,21 @@ function checkSourceInner(filePath, source, file, phi2, opts, issues, signatures
       }
       continue;
     }
-    const g = generalizeFromAst(name, source, {
-      file,
-      refine: {
-        loadModule: refineLoad,
-        fromFile: refineFrom,
-        ...autoBind !== void 0 ? { autoBind } : {},
-        ...projectDir !== void 0 ? { projectDir } : {}
-      },
-      depsFp,
-      sidecarFp,
-      modules: opts.modules,
-      ...opts.inject ? { inject: opts.inject } : {}
-    });
+    const g = runSeeded(
+      () => generalizeFromAst(name, source, {
+        file,
+        refine: {
+          loadModule: refineLoad,
+          fromFile: refineFrom,
+          ...autoBind !== void 0 ? { autoBind } : {},
+          ...projectDir !== void 0 ? { projectDir } : {}
+        },
+        depsFp,
+        sidecarFp,
+        modules: opts.modules,
+        ...opts.inject ? { inject: opts.inject } : {}
+      })
+    );
     if (!g) {
       const isEntryCandidate = entryNames.has(name) || name === "default" || entryNames.has("default") && isDefaultExportName(source, name);
       if (isEntryCandidate && entryThrowsMode !== "off") {
@@ -48721,7 +48888,7 @@ function checkSourceInner(filePath, source, file, phi2, opts, issues, signatures
     const isEntry = entryNames.has(name) || name === "default" || entryNames.has("default") && isDefaultExportName(source, name) || name.includes(".") && entryNames.has(name);
     let throwsDisplay;
     if (isEntry && entryThrowsMode !== "off") {
-      const effects = collectEntryMayThrows(source, name, g, file, phi2, opts);
+      const effects = runSeeded(() => collectEntryMayThrows(source, name, g, file, phi2, opts));
       throwsDisplay = formatThrowsAbs(mayThrowEffectsToAbs(effects));
       const declared = extractDeclaredThrows(source, name) ?? effectiveInterfaceCached(name)?.throws?.kinds;
       const remaining = filterGateThrows(effects, declared, ignoreThrows);
@@ -48742,7 +48909,7 @@ function checkSourceInner(filePath, source, file, phi2, opts, issues, signatures
         });
       }
     } else if (isEntry) {
-      const effects = collectEntryMayThrows(source, name, g, file, phi2, opts);
+      const effects = runSeeded(() => collectEntryMayThrows(source, name, g, file, phi2, opts));
       throwsDisplay = formatThrowsAbs(mayThrowEffectsToAbs(effects));
     }
     const fmt = formatSigCached(g.symbolic, name);
@@ -48836,7 +49003,8 @@ function checkSourceInner(filePath, source, file, phi2, opts, issues, signatures
           name,
           display,
           eff.returns.constraint,
-          g.symbolic
+          g.symbolic,
+          assumePhi?.display
         );
         if (retIssues.some((i) => i.severity === "error")) returnViolated.add(name);
         issues.push(...retIssues);
@@ -49032,9 +49200,24 @@ function checkSourceInner(filePath, source, file, phi2, opts, issues, signatures
     }
   };
 }
-function checkReturnConstraint(fnName, cName, constraint, ret) {
+function checkReturnConstraint(fnName, cName, constraint, ret, assumeDisplay) {
   const proof = assertImplies(ret, constraint);
-  if (proof.status === "proved") return [];
+  if (proof.status === "proved") {
+    if (assumeDisplay && assumeDisplay.length > 0) {
+      return [
+        {
+          severity: "info",
+          code: "nudo:assume-relied",
+          message: `${fnName}: return contract proved via @nudo:assume ${assumeDisplay.join("; ")}`,
+          actual: `proof relies on user lemma${assumeDisplay.length > 1 ? "s" : ""}`,
+          expected: "engine verifies the obligation, not the lemma itself",
+          suggestion: "@nudo:assume is a user-supplied axiom \u2014 falsify it with concrete @nudo:case runs (nudo test)",
+          fn: fnName
+        }
+      ];
+    }
+    return [];
+  }
   const push = (severity, actual, expected, suggestion) => [
     {
       severity,
@@ -49082,6 +49265,7 @@ var init_check = __esm({
     init_abs();
     init_abs();
     init_pred();
+    init_term();
     init_format();
     init_scan();
     init_check_interface_drift();
@@ -49090,6 +49274,7 @@ var init_check = __esm({
     init_check_assign();
     init_check_case_scan();
     init_run();
+    init_runtime();
     init_calls();
     init_may_throw2();
     init_check_memo();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nudojs",
-  "version": "1.3.20",
+  "version": "1.3.21",
   "engines": {
     "node": ">=20"
   },
@@ -46,11 +46,11 @@
   "dependencies": {
     "@babel/generator": "^8.0.6",
     "@babel/types": "^8.0.6",
-    "@nudojs/core": "1.10.2",
-    "@nudojs/env": "0.4.34",
-    "@nudojs/harvester": "0.3.20",
-    "@nudojs/parser": "1.4.16",
-    "@nudojs/service": "1.6.19",
+    "@nudojs/core": "1.11.0",
+    "@nudojs/env": "0.4.35",
+    "@nudojs/harvester": "0.3.21",
+    "@nudojs/parser": "1.4.17",
+    "@nudojs/service": "1.6.20",
     "commander": "^15.0.0"
   },
   "devDependencies": {