vercel-labs--zerolang/native/zero-c/src/checker.c

#include "zero.h"
#include "call_resolve.h"
#include "c_import.h"
#include "std_sig.h"
#include "std_source.h"
#include "unify.h"

#include <ctype.h>
#include <errno.h>
#include <float.h>
#include <limits.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>

typedef struct Scope Scope;

typedef struct {
  char *root;
  Scope *root_scope;
  char *path;
} Place;

typedef struct {
  Place *items;
  size_t len;
  size_t cap;
} PlaceVec;

typedef struct {
  char *value_path;
  Place origin;
  bool mutable_borrow;
  bool local_storage;
  bool index_exact;
} ProvenanceEntry;

typedef struct {
  ProvenanceEntry *items;
  size_t len;
  size_t cap;
} ValueProvenance;

typedef struct {
  Place target;
  ValueProvenance value;
  bool overwrite;
} ProvenanceStorageEffect;

typedef struct {
  ProvenanceStorageEffect *items;
  size_t len;
  size_t cap;
} ProvenanceStorageEffectVec;

typedef struct {
  ValueProvenance return_value;
  ProvenanceStorageEffectVec storage_effects;
  bool may_return;
  bool return_complete;
  bool effect_complete;
  bool callee_local_storage;
} FunctionProvenanceSummary;

typedef struct ProvenanceScopeSnapshot {
  Scope *scope;
  ValueProvenance *origins;
  bool *moved;
  PlaceVec maybe_present;
  PlaceVec moved_places;
  size_t len;
  struct ProvenanceScopeSnapshot *next;
} ProvenanceScopeSnapshot;

struct Scope {
  char **names;
  char **types;
  bool *mutable;
  bool *moved;
  bool *is_param;
  bool *is_type_param;
  bool *is_static_param;
  int *decl_line;
  int *decl_column;
  ValueProvenance *value_provenance;
  PlaceVec maybe_present;
  PlaceVec moved_places;
  size_t len;
  size_t cap;
  Scope *parent;
};

typedef enum {
  META_VALUE_NUMBER,
  META_VALUE_BOOL,
  META_VALUE_STRING
} MetaValueKind;

typedef struct {
  MetaValueKind kind;
  unsigned long long number;
  bool boolean;
  char text[128];
} MetaValue;

typedef enum {
  STATIC_VALUE_INVALID,
  STATIC_VALUE_INTEGER,
  STATIC_VALUE_BOOL,
  STATIC_VALUE_ENUM
} StaticValueKind;

typedef struct {
  StaticValueKind kind;
  unsigned long long number;
  bool boolean;
  char enum_type[64];
  char enum_case[64];
} StaticValue;

typedef struct {
  const char *name;
  char *type;
  bool is_static;
  const char *static_type;
} GenericBinding;

typedef struct MetaCache MetaCache;

typedef struct {
  ZDiag *diag;
} DiagSink;

typedef struct {
  const Program *program;
  const ZTargetInfo *target;
  MetaCache *meta_cache;
  DiagSink *diags;
  const Function *function;
  const Shape *shape;
  int allow_fallible_call;
  GenericBinding *return_provenance_expr_bindings;
  size_t return_provenance_expr_binding_len;
} CheckContext;

typedef struct MetaCacheEntry {
  char *key;
  MetaValue value;
  struct MetaCacheEntry *next;
} MetaCacheEntry;

struct MetaCache {
  MetaCacheEntry *entries;
  ZMetaCacheStats stats;
};

static const ZTargetInfo *configured_check_target = NULL;
static MetaCache default_meta_cache = {0};

static void *checker_grow_items(void *items, size_t len, size_t *cap, size_t initial, size_t item_size) {
  if (len + 1 > *cap) {
    *cap = z_grow_capacity(*cap, len + 1, initial);
    return z_checked_reallocarray(items, *cap, item_size);
  }
  return items;
}

static const char *origin_path_text(const char *path) {
  return path ? path : "";
}

static bool origin_path_equal(const char *left, const char *right) {
  return strcmp(origin_path_text(left), origin_path_text(right)) == 0;
}

static bool origin_path_contains_wildcard(const char *path) {
  return strstr(origin_path_text(path), "[*]") != NULL;
}

static char *origin_path_generalize_indexes(const char *path) {
  const char *source = origin_path_text(path);
  char *out = z_checked_malloc(strlen(source) + 1);
  size_t write = 0;
  for (size_t read = 0; source[read]; read++) {
    if (source[read] == '[') {
      const char *close = strchr(source + read, ']');
      if (close) {
        out[write++] = '[';
        out[write++] = '*';
        out[write++] = ']';
        read = (size_t)(close - source);
        continue;
      }
    }
    out[write++] = source[read];
  }
  out[write] = '\0';
  return out;
}

static bool origin_path_segment_boundary(char ch) {
  return ch == '.' || ch == '[';
}

static bool origin_path_array_segment_match(const char **path_cursor, const char **prefix_cursor) {
  const char *path = *path_cursor;
  const char *prefix = *prefix_cursor;
  const char *path_end = strchr(path, ']');
  const char *prefix_end = strchr(prefix, ']');
  if (!path_end || !prefix_end) return false;
  bool path_wildcard = path_end == path + 2 && path[1] == '*';
  bool prefix_wildcard = prefix_end == prefix + 2 && prefix[1] == '*';
  bool match = path_wildcard || prefix_wildcard ||
    ((size_t)(path_end - path) == (size_t)(prefix_end - prefix) &&
     strncmp(path, prefix, (size_t)(path_end - path + 1)) == 0);
  if (!match) return false;
  *path_cursor = path_end + 1;
  *prefix_cursor = prefix_end + 1;
  return true;
}

static bool origin_path_array_segment_definitely_within(const char **path_cursor, const char **prefix_cursor) {
  const char *path = *path_cursor;
  const char *prefix = *prefix_cursor;
  const char *path_end = strchr(path, ']');
  const char *prefix_end = strchr(prefix, ']');
  if (!path_end || !prefix_end) return false;
  bool path_wildcard = path_end == path + 2 && path[1] == '*';
  bool prefix_wildcard = prefix_end == prefix + 2 && prefix[1] == '*';
  bool match = prefix_wildcard ||
    (!path_wildcard &&
     (size_t)(path_end - path) == (size_t)(prefix_end - prefix) &&
     strncmp(path, prefix, (size_t)(path_end - path + 1)) == 0);
  if (!match) return false;
  *path_cursor = path_end + 1;
  *prefix_cursor = prefix_end + 1;
  return true;
}

static bool origin_path_prefix_match(const char *path, const char *prefix, const char **path_after_prefix) {
  while (*prefix) {
    if (*path == '[' && *prefix == '[') {
      if (!origin_path_array_segment_match(&path, &prefix)) return false;
      continue;
    }
    if (*path != *prefix) return false;
    path++;
    prefix++;
  }
  if (path_after_prefix) *path_after_prefix = path;
  return true;
}

static bool origin_path_definite_prefix_match(const char *path, const char *prefix, const char **path_after_prefix) {
  while (*prefix) {
    if (*path == '[' && *prefix == '[') {
      if (!origin_path_array_segment_definitely_within(&path, &prefix)) return false;
      continue;
    }
    if (*path != *prefix) return false;
    path++;
    prefix++;
  }
  if (path_after_prefix) *path_after_prefix = path;
  return true;
}

static bool origin_path_is_within(const char *path, const char *parent) {
  const char *actual = origin_path_text(path);
  const char *prefix = origin_path_text(parent);
  if (!prefix[0]) return true;
  const char *after = NULL;
  if (!origin_path_prefix_match(actual, prefix, &after)) return false;
  return !after[0] || origin_path_segment_boundary(after[0]);
}

static bool origin_path_is_definitely_within(const char *path, const char *parent) {
  const char *actual = origin_path_text(path);
  const char *prefix = origin_path_text(parent);
  if (!prefix[0]) return true;
  const char *after = NULL;
  if (!origin_path_definite_prefix_match(actual, prefix, &after)) return false;
  return !after[0] || origin_path_segment_boundary(after[0]);
}

static bool origin_path_overlaps(const char *left, const char *right) {
  return origin_path_is_within(left, right) || origin_path_is_within(right, left);
}

static bool origin_path_assignment_definitely_reinitializes(const char *moved_path, const char *assigned_path) {
  if (!origin_path_text(assigned_path)[0]) return true;
  if (origin_path_contains_wildcard(assigned_path)) return false;
  return origin_path_is_definitely_within(moved_path, assigned_path);
}

static void format_origin_place(char *out, size_t out_len, const char *root, const char *path) {
  if (!out || out_len == 0) return;
  const char *actual_path = origin_path_text(path);
  const char *separator = actual_path[0] && actual_path[0] != '[' ? "." : "";
  snprintf(out, out_len, "%.96s%s%.96s", root ? root : "", separator, actual_path);
}

static const char *origin_path_after_prefix(const char *path, const char *prefix) {
  const char *actual = origin_path_text(path);
  const char *parent = origin_path_text(prefix);
  if (!parent[0]) return actual;
  const char *after = NULL;
  if (origin_path_prefix_match(actual, parent, &after)) {
    if (!after[0]) return "";
    if (after[0] == '.') return after + 1;
    if (after[0] == '[') return after;
  }
  return actual;
}

static char *origin_path_join(const char *prefix, const char *suffix) {
  const char *left = origin_path_text(prefix);
  const char *right = origin_path_text(suffix);
  if (!left[0]) return right[0] ? z_strdup(right) : NULL;
  if (!right[0]) return z_strdup(left);
  size_t left_len = strlen(left);
  size_t right_len = strlen(right);
  const char *separator = right[0] == '[' ? "" : ".";
  char *joined = z_checked_malloc(left_len + right_len + strlen(separator) + 1);
  snprintf(joined, left_len + right_len + strlen(separator) + 1, "%s%s%s", left, separator, right);
  return joined;
}

static bool value_provenance_add_full_with_index_exact(ValueProvenance *origins, const char *root, Scope *root_scope, bool mut_borrow, bool local_storage, bool index_exact, const char *path, const char *origin_path) {
  if (!origins || !root || !root[0]) return false;
  for (size_t i = 0; i < origins->len; i++) {
    ProvenanceEntry *entry = &origins->items[i];
    if (strcmp(entry->origin.root, root) == 0 && entry->origin.root_scope == root_scope &&
        origin_path_equal(entry->value_path, path) && origin_path_equal(entry->origin.path, origin_path)) {
      entry->mutable_borrow = entry->mutable_borrow || mut_borrow;
      entry->local_storage = entry->local_storage || local_storage;
      entry->index_exact = entry->index_exact && index_exact;
      return true;
    }
  }
  origins->items = checker_grow_items(origins->items, origins->len, &origins->cap, 4, sizeof(ProvenanceEntry));
  origins->items[origins->len] = (ProvenanceEntry){
    .value_path = path && path[0] ? z_strdup(path) : NULL,
    .origin = {
      .root = z_strdup(root),
      .root_scope = root_scope,
      .path = origin_path && origin_path[0] ? z_strdup(origin_path) : NULL,
    },
    .mutable_borrow = mut_borrow,
    .local_storage = local_storage,
    .index_exact = index_exact,
  };
  origins->len++;
  return true;
}

static bool value_provenance_add_full(ValueProvenance *origins, const char *root, Scope *root_scope, bool mut_borrow, bool local_storage, const char *path, const char *origin_path) {
  return value_provenance_add_full_with_index_exact(origins, root, root_scope, mut_borrow, local_storage, false, path, origin_path);
}

static bool value_provenance_add_path(ValueProvenance *origins, const char *root, Scope *root_scope, bool mut_borrow, bool local_storage, const char *path) {
  return value_provenance_add_full(origins, root, root_scope, mut_borrow, local_storage, path, NULL);
}

static bool value_provenance_add(ValueProvenance *origins, const char *root, Scope *root_scope, bool mut_borrow, bool local_storage) {
  return value_provenance_add_path(origins, root, root_scope, mut_borrow, local_storage, NULL);
}

static bool value_provenance_add_all(ValueProvenance *out, const ValueProvenance *source) {
  bool added = false;
  if (!out || !source) return false;
  for (size_t i = 0; i < source->len; i++) {
    ProvenanceEntry *entry = &source->items[i];
    if (value_provenance_add_full_with_index_exact(out, entry->origin.root, entry->origin.root_scope, entry->mutable_borrow, entry->local_storage, entry->index_exact, entry->value_path, entry->origin.path)) added = true;
  }
  return added;
}

static bool value_provenance_add_all_with_prefix(ValueProvenance *out, const ValueProvenance *source, const char *path_prefix) {
  bool added = false;
  if (!out || !source) return false;
  for (size_t i = 0; i < source->len; i++) {
    ProvenanceEntry *entry = &source->items[i];
    char *path = origin_path_join(path_prefix, entry->value_path);
    if (value_provenance_add_full_with_index_exact(out, entry->origin.root, entry->origin.root_scope, entry->mutable_borrow, entry->local_storage, entry->index_exact, path, entry->origin.path)) added = true;
    free(path);
  }
  return added;
}

static bool value_provenance_add_all_as_with_prefix(ValueProvenance *out, const ValueProvenance *source, bool mut_borrow, const char *path_prefix) {
  bool added = false;
  if (!out || !source) return false;
  for (size_t i = 0; i < source->len; i++) {
    ProvenanceEntry *entry = &source->items[i];
    char *path = origin_path_join(path_prefix, entry->value_path);
    if (value_provenance_add_full_with_index_exact(out, entry->origin.root, entry->origin.root_scope, mut_borrow, entry->local_storage, entry->index_exact, path, entry->origin.path)) added = true;
    free(path);
  }
  return added;
}

static bool value_provenance_add_all_as_with_origin_suffix(ValueProvenance *out, const ValueProvenance *source, bool mut_borrow, const char *value_prefix, const char *origin_suffix) {
  bool added = false;
  if (!out || !source) return false;
  for (size_t i = 0; i < source->len; i++) {
    ProvenanceEntry *entry = &source->items[i];
    char *value_path = origin_path_join(value_prefix, entry->value_path);
    char *origin_path = origin_path_join(entry->origin.path, origin_suffix);
    if (value_provenance_add_full_with_index_exact(out, entry->origin.root, entry->origin.root_scope, mut_borrow, entry->local_storage, entry->index_exact, value_path, origin_path)) added = true;
    free(value_path);
    free(origin_path);
  }
  return added;
}

static bool value_provenance_add_direct_as_with_origin_suffix(ValueProvenance *out, const ValueProvenance *source, bool mut_borrow, const char *origin_suffix) {
  bool added = false;
  if (!out || !source) return false;
  for (size_t i = 0; i < source->len; i++) {
    ProvenanceEntry *entry = &source->items[i];
    if (origin_path_text(entry->value_path)[0]) continue;
    char *origin_path = origin_path_join(entry->origin.path, origin_suffix);
    if (value_provenance_add_full_with_index_exact(out, entry->origin.root, entry->origin.root_scope, mut_borrow, entry->local_storage, entry->index_exact, NULL, origin_path)) added = true;
    free(origin_path);
  }
  return added;
}

static bool value_provenance_add_all_under_path(ValueProvenance *out, const ValueProvenance *source, const char *path_prefix) {
  bool added = false;
  if (!out || !source) return false;
  for (size_t i = 0; i < source->len; i++) {
    ProvenanceEntry *entry = &source->items[i];
    if (!origin_path_is_within(entry->value_path, path_prefix)) continue;
    const char *relative_path = origin_path_after_prefix(entry->value_path, path_prefix);
    if (value_provenance_add_full_with_index_exact(out, entry->origin.root, entry->origin.root_scope, entry->mutable_borrow, entry->local_storage, entry->index_exact, relative_path, entry->origin.path)) added = true;
  }
  return added;
}

static void value_provenance_free(ValueProvenance *origins) {
  if (!origins) return;
  for (size_t i = 0; i < origins->len; i++) {
    free(origins->items[i].origin.root);
    free(origins->items[i].origin.path);
    free(origins->items[i].value_path);
  }
  free(origins->items);
  origins->items = NULL;
  origins->len = 0;
  origins->cap = 0;
}

static bool place_vec_add(PlaceVec *places, const char *root, Scope *root_scope, const char *path) {
  if (!places || !root || !root[0]) return false;
  for (size_t i = 0; i < places->len; i++) {
    Place *place = &places->items[i];
    if (strcmp(place->root, root) == 0 && place->root_scope == root_scope && origin_path_equal(place->path, path)) return true;
  }
  places->items = checker_grow_items(places->items, places->len, &places->cap, 4, sizeof(Place));
  places->items[places->len++] = (Place){
    .root = z_strdup(root),
    .root_scope = root_scope,
    .path = path && path[0] ? z_strdup(path) : NULL,
  };
  return true;
}

static void place_free(Place *place) {
  if (!place) return;
  free(place->root);
  free(place->path);
  *place = (Place){0};
}

static void place_vec_free(PlaceVec *places) {
  if (!places) return;
  for (size_t i = 0; i < places->len; i++) {
    place_free(&places->items[i]);
  }
  free(places->items);
  places->items = NULL;
  places->len = 0;
  places->cap = 0;
}

static void place_vec_add_all(PlaceVec *target, const PlaceVec *source) {
  if (!target || !source) return;
  for (size_t i = 0; i < source->len; i++) {
    Place *place = &source->items[i];
    place_vec_add(target, place->root, place->root_scope, place->path);
  }
}

static bool place_vec_contains(const PlaceVec *places, const Place *target) {
  if (!places || !target || !target->root || !target->root[0]) return false;
  for (size_t i = 0; i < places->len; i++) {
    Place *place = &places->items[i];
    if (strcmp(place->root, target->root) == 0 &&
        place->root_scope == target->root_scope &&
        origin_path_equal(place->path, target->path)) return true;
  }
  return false;
}

static void place_vec_add_intersection(PlaceVec *out, const PlaceVec *left, const PlaceVec *right) {
  if (!out || !left || !right) return;
  for (size_t i = 0; i < left->len; i++) {
    Place *place = &left->items[i];
    if (place_vec_contains(right, place)) place_vec_add(out, place->root, place->root_scope, place->path);
  }
}

static void place_vec_replace(PlaceVec *target, const PlaceVec *source) {
  if (!target) return;
  place_vec_free(target);
  place_vec_add_all(target, source);
}

static void place_vec_clear_for_place(PlaceVec *places, Scope *root_scope, const char *root, const char *path) {
  if (!places || !root || !root[0]) return;
  size_t write = 0;
  for (size_t read = 0; read < places->len; read++) {
    Place *place = &places->items[read];
    bool same_root = strcmp(place->root, root) == 0 && (!root_scope || !place->root_scope || place->root_scope == root_scope);
    bool remove = same_root && origin_path_assignment_definitely_reinitializes(place->path, path);
    if (remove) {
      place_free(place);
      continue;
    }
    if (write != read) places->items[write] = places->items[read];
    write++;
  }
  places->len = write;
}

static bool provenance_storage_effect_vec_add(ProvenanceStorageEffectVec *effects, const char *target_root, Scope *target_scope, const char *target_path, const ValueProvenance *value, bool overwrite) {
  if (!effects || !target_root || !target_root[0] || !value || value->len == 0) return false;
  effects->items = checker_grow_items(effects->items, effects->len, &effects->cap, 4, sizeof(ProvenanceStorageEffect));
  ProvenanceStorageEffect *effect = &effects->items[effects->len++];
  *effect = (ProvenanceStorageEffect){
    .target = {
      .root = z_strdup(target_root),
      .root_scope = target_scope,
      .path = target_path && target_path[0] ? z_strdup(target_path) : NULL,
    },
    .value = {0},
    .overwrite = overwrite,
  };
  value_provenance_add_all(&effect->value, value);
  return true;
}

static void provenance_storage_effect_vec_free(ProvenanceStorageEffectVec *effects) {
  if (!effects) return;
  for (size_t i = 0; i < effects->len; i++) {
    place_free(&effects->items[i].target);
    value_provenance_free(&effects->items[i].value);
  }
  free(effects->items);
  effects->items = NULL;
  effects->len = 0;
  effects->cap = 0;
}

static void function_provenance_summary_free(FunctionProvenanceSummary *summary) {
  if (!summary) return;
  value_provenance_free(&summary->return_value);
  provenance_storage_effect_vec_free(&summary->storage_effects);
  *summary = (FunctionProvenanceSummary){0};
}

void z_set_check_target(const ZTargetInfo *target) {
  configured_check_target = target;
}

ZMetaCacheStats z_meta_cache_stats(void) {
  return default_meta_cache.stats;
}

static void scope_add_ex(Scope *scope, const char *name, const char *type, bool mutable, bool is_param, int line, int column) {
  if (scope->len + 1 > scope->cap) {
    size_t next_cap = z_grow_capacity(scope->cap, scope->len + 1, 8);
    scope->names = z_checked_reallocarray(scope->names, next_cap, sizeof(char *));
    scope->types = z_checked_reallocarray(scope->types, next_cap, sizeof(char *));
    scope->mutable = z_checked_reallocarray(scope->mutable, next_cap, sizeof(bool));
    scope->moved = z_checked_reallocarray(scope->moved, next_cap, sizeof(bool));
    scope->is_param = z_checked_reallocarray(scope->is_param, next_cap, sizeof(bool));
    scope->is_type_param = z_checked_reallocarray(scope->is_type_param, next_cap, sizeof(bool));
    scope->is_static_param = z_checked_reallocarray(scope->is_static_param, next_cap, sizeof(bool));
    scope->decl_line = z_checked_reallocarray(scope->decl_line, next_cap, sizeof(int));
    scope->decl_column = z_checked_reallocarray(scope->decl_column, next_cap, sizeof(int));
    scope->value_provenance = z_checked_reallocarray(scope->value_provenance, next_cap, sizeof(ValueProvenance));
    scope->cap = next_cap;
  }
  scope->names[scope->len++] = z_strdup(name);
  scope->types[scope->len - 1] = z_strdup(type ? type : "Unknown");
  scope->mutable[scope->len - 1] = mutable;
  scope->moved[scope->len - 1] = false;
  scope->is_param[scope->len - 1] = is_param;
  scope->is_type_param[scope->len - 1] = false;
  scope->is_static_param[scope->len - 1] = false;
  scope->decl_line[scope->len - 1] = line;
  scope->decl_column[scope->len - 1] = column;
  scope->value_provenance[scope->len - 1] = (ValueProvenance){0};
}

static void scope_add(Scope *scope, const char *name, const char *type, bool mutable) {
  scope_add_ex(scope, name, type, mutable, false, 0, 0);
}

static void scope_add_decl(Scope *scope, const char *name, const char *type, bool mutable, int line, int column) {
  scope_add_ex(scope, name, type, mutable, false, line, column);
}

static void scope_add_param_decl(Scope *scope, const char *name, const char *type, int line, int column) {
  scope_add_ex(scope, name, type, false, true, line, column);
}

static void scope_add_type_param(Scope *scope, const char *name) {
  scope_add_ex(scope, name, "Type", false, false, 0, 0);
  if (scope && scope->len > 0) scope->is_type_param[scope->len - 1] = true;
}

static void scope_add_static_param(Scope *scope, const char *name, const char *type) {
  scope_add_ex(scope, name, type ? type : "usize", false, false, 0, 0);
  if (scope && scope->len > 0) scope->is_static_param[scope->len - 1] = true;
}

static bool scope_has(Scope *scope, const char *name) {
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    for (size_t i = 0; i < cursor->len; i++) {
      if (strcmp(cursor->names[i], name) == 0) return true;
    }
  }
  return false;
}

static Scope *scope_binding_scope(Scope *scope, const char *name) {
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    for (size_t i = 0; i < cursor->len; i++) {
      if (strcmp(cursor->names[i], name) == 0) return cursor;
    }
  }
  return NULL;
}

static bool scope_binding_index_in_scope(Scope *scope, const char *name, size_t *out_index) {
  if (!scope || !name) return false;
  for (size_t i = 0; i < scope->len; i++) {
    if (strcmp(scope->names[i], name) == 0) {
      if (out_index) *out_index = i;
      return true;
    }
  }
  return false;
}

static bool scope_is_ancestor_or_self(const Scope *candidate, const Scope *scope) {
  for (const Scope *cursor = scope; cursor; cursor = cursor->parent) {
    if (cursor == candidate) return true;
  }
  return false;
}

static const char *scope_type(Scope *scope, const char *name) {
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    for (size_t i = 0; i < cursor->len; i++) {
      if (strcmp(cursor->names[i], name) == 0) return cursor->types[i];
    }
  }
  return NULL;
}

static const char *scope_type_in_binding_scope(Scope *scope, Scope *binding_scope, const char *name) {
  if (binding_scope) {
    size_t index = 0;
    if (scope_binding_index_in_scope(binding_scope, name, &index)) return binding_scope->types[index];
  }
  return scope_type(scope, name);
}

static bool scope_is_mutable(Scope *scope, const char *name) {
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    for (size_t i = 0; i < cursor->len; i++) {
      if (strcmp(cursor->names[i], name) == 0) return cursor->mutable[i];
    }
  }
  return false;
}

static bool scope_is_moved(Scope *scope, const char *name) {
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    for (size_t i = 0; i < cursor->len; i++) {
      if (strcmp(cursor->names[i], name) == 0) return cursor->moved[i];
    }
  }
  return false;
}

static bool scope_set_moved_in_scope(Scope *scope, Scope *binding_scope, const char *name, bool moved) {
  if (!name) return false;
  Scope *target = binding_scope ? binding_scope : scope_binding_scope(scope, name);
  if (!target) return false;
  size_t index = 0;
  if (!scope_binding_index_in_scope(target, name, &index)) return false;
  target->moved[index] = moved;
  return true;
}

static bool scope_is_param(Scope *scope, const char *name) {
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    for (size_t i = 0; i < cursor->len; i++) {
      if (strcmp(cursor->names[i], name) == 0) return cursor->is_param[i];
    }
  }
  return false;
}

static bool scope_add_maybe_present(Scope *guard_scope, Scope *lookup_scope, const char *root, const char *path) {
  if (!guard_scope || !lookup_scope || !root || !root[0]) return false;
  if (origin_path_contains_wildcard(path)) return false;
  Scope *root_scope = scope_binding_scope(lookup_scope, root);
  return place_vec_add(&guard_scope->maybe_present, root, root_scope, path);
}

static bool maybe_guard_place_overlaps_mutation(Scope *lookup_scope, const Place *guard_place, Scope *mutation_root_scope, const char *mutation_root, const char *mutation_path);

static void place_vec_clear_maybe_present_for_place(PlaceVec *places, Scope *lookup_scope, Scope *root_scope, const char *root, const char *path) {
  if (!places || !root || !root[0]) return;
  size_t write = 0;
  for (size_t read = 0; read < places->len; read++) {
    Place *place = &places->items[read];
    bool remove = maybe_guard_place_overlaps_mutation(lookup_scope, place, root_scope, root, path);
    if (remove) {
      place_free(place);
      continue;
    }
    if (write != read) places->items[write] = places->items[read];
    write++;
  }
  places->len = write;
}

static void scope_add_maybe_present_all(Scope *target, Scope *source) {
  if (!target || !source) return;
  for (size_t i = 0; i < source->maybe_present.len; i++) {
    Place *place = &source->maybe_present.items[i];
    Scope *root_scope = scope_binding_scope(target, place->root);
    if (!root_scope || (place->root_scope && place->root_scope != root_scope)) continue;
    place_vec_add(&target->maybe_present, place->root, root_scope, place->path);
  }
}

static bool scope_has_maybe_present(Scope *scope, const char *root, const char *path) {
  if (!scope || !root || !root[0]) return false;
  if (origin_path_contains_wildcard(path)) return false;
  Scope *root_scope = scope_binding_scope(scope, root);
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    for (size_t i = 0; i < cursor->maybe_present.len; i++) {
      Place *place = &cursor->maybe_present.items[i];
      if (strcmp(place->root, root) != 0) continue;
      if (root_scope && place->root_scope && place->root_scope != root_scope) continue;
      if (origin_path_equal(place->path, path)) return true;
    }
  }
  return false;
}

static void scope_clear_maybe_present_for_place(Scope *scope, const char *root, const char *path) {
  if (!scope || !root || !root[0]) return;
  Scope *root_scope = scope_binding_scope(scope, root);
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    place_vec_clear_maybe_present_for_place(&cursor->maybe_present, scope, root_scope, root, path);
  }
}

static void scope_clear_maybe_present_in_scope_for_place(Scope *target, Scope *lookup_scope, const char *root, const char *path) {
  if (!target || !lookup_scope || !root || !root[0]) return;
  place_vec_clear_maybe_present_for_place(&target->maybe_present, lookup_scope, scope_binding_scope(lookup_scope, root), root, path);
}

static void scope_clear_maybe_present_in_scope_for_resolved_place(Scope *target, Scope *lookup_scope, const Place *place) {
  if (!target || !place || !place->root || !place->root[0]) return;
  place_vec_clear_maybe_present_for_place(&target->maybe_present, lookup_scope, place->root_scope, place->root, place->path);
}

static void scope_clear_maybe_present_for_resolved_place(Scope *scope, const Place *place) {
  if (!scope || !place || !place->root || !place->root[0]) return;
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    scope_clear_maybe_present_in_scope_for_resolved_place(cursor, scope, place);
  }
}

static bool scope_add_moved_place_with_scope(Scope *scope, Scope *root_scope, const char *root, const char *path) {
  if (!scope || !root || !root[0]) return false;
  if (!root_scope) root_scope = scope_binding_scope(scope, root);
  Scope *target_scope = root_scope ? root_scope : scope;
  return place_vec_add(&target_scope->moved_places, root, root_scope, path);
}

static bool scope_add_moved_resolved_place(Scope *scope, const Place *place) {
  if (!place) return false;
  return scope_add_moved_place_with_scope(scope, place->root_scope, place->root, place->path);
}

static bool scope_has_moved_place_with_scope(Scope *scope, Scope *root_scope, const char *root, const char *path, bool covering) {
  if (!scope || !root || !root[0]) return false;
  if (!root_scope) root_scope = scope_binding_scope(scope, root);
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    for (size_t i = 0; i < cursor->moved_places.len; i++) {
      Place *place = &cursor->moved_places.items[i];
      if (strcmp(place->root, root) != 0) continue;
      if (root_scope && place->root_scope && place->root_scope != root_scope) continue;
      if (covering ? origin_path_is_within(path, place->path) : origin_path_overlaps(place->path, path)) return true;
    }
  }
  return false;
}

static bool scope_has_moved_place(Scope *scope, const char *root, const char *path) {
  return scope_has_moved_place_with_scope(scope, scope_binding_scope(scope, root), root, path, false);
}

static bool scope_has_moved_resolved_place(Scope *scope, const Place *place) {
  if (!place) return false;
  return scope_has_moved_place_with_scope(scope, place->root_scope, place->root, place->path, false);
}

static bool scope_has_moved_place_covering(Scope *scope, const char *root, const char *path) {
  return scope_has_moved_place_with_scope(scope, scope_binding_scope(scope, root), root, path, true);
}

static bool scope_has_moved_resolved_place_covering(Scope *scope, const Place *place) {
  if (!place) return false;
  return scope_has_moved_place_with_scope(scope, place->root_scope, place->root, place->path, true);
}

static void scope_clear_moved_place_with_scope(Scope *scope, Scope *root_scope, const char *root, const char *path) {
  if (!scope || !root || !root[0]) return;
  if (!root_scope) root_scope = scope_binding_scope(scope, root);
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    place_vec_clear_for_place(&cursor->moved_places, root_scope, root, path);
  }
}

static void scope_clear_moved_resolved_place(Scope *scope, const Place *place) {
  if (!place) return;
  scope_clear_moved_place_with_scope(scope, place->root_scope, place->root, place->path);
}

static bool scope_binding_is_excluded(Scope *cursor, size_t binding_index, Scope *exclude_scope, const char *exclude_root) {
  return exclude_root && exclude_root[0] &&
         (!exclude_scope || cursor == exclude_scope) &&
         cursor && binding_index < cursor->len &&
         cursor->names[binding_index] &&
         strcmp(cursor->names[binding_index], exclude_root) == 0;
}

static bool scope_borrow_counts_for_place_resolved(Scope *scope, Scope *root_scope, const char *root, const char *path, Scope *exclude_scope, const char *exclude_root, size_t *shared, size_t *mut) {
  if (shared) *shared = 0;
  if (mut) *mut = 0;
  if (!scope || !root) return false;
  bool found = false;
  if (!root_scope) root_scope = scope_binding_scope(scope, root);
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    for (size_t binding_index = 0; binding_index < cursor->len; binding_index++) {
      if (scope_binding_is_excluded(cursor, binding_index, exclude_scope, exclude_root)) continue;
      ValueProvenance *origins = &cursor->value_provenance[binding_index];
      for (size_t origin_index = 0; origin_index < origins->len; origin_index++) {
        ProvenanceEntry *entry = &origins->items[origin_index];
        if (strcmp(entry->origin.root, root) != 0) continue;
        if (root_scope && entry->origin.root_scope && entry->origin.root_scope != root_scope) continue;
        if (!origin_path_overlaps(entry->origin.path, path)) continue;
        if (entry->mutable_borrow) {
          if (mut) (*mut)++;
        } else {
          if (shared) (*shared)++;
        }
        found = true;
      }
    }
  }
  return found;
}

static bool scope_borrow_counts_for_place(Scope *scope, const char *root, const char *path, size_t *shared, size_t *mut) {
  return scope_borrow_counts_for_place_resolved(scope, NULL, root, path, NULL, NULL, shared, mut);
}

static bool borrow_trace_equal(const ZBorrowTrace *left, const ZBorrowTrace *right) {
  return left && right &&
         strcmp(left->root, right->root) == 0 &&
         strcmp(left->path, right->path) == 0 &&
         strcmp(left->kind, right->kind) == 0 &&
         strcmp(left->binding, right->binding) == 0 &&
         left->binding_line == right->binding_line &&
         left->binding_column == right->binding_column;
}

static bool borrow_trace_push(ZBorrowTrace *out, size_t *out_len, bool *truncated, const ZBorrowTrace *trace) {
  if (!out || !out_len || !trace || !trace->root[0]) return false;
  for (size_t i = 0; i < *out_len; i++) {
    if (borrow_trace_equal(&out[i], trace)) return true;
  }
  if (*out_len >= Z_BORROW_TRACE_MAX) {
    if (truncated) *truncated = true;
    return false;
  }
  out[*out_len] = *trace;
  (*out_len)++;
  return true;
}

static bool scope_active_borrows_for_place_resolved(Scope *scope, Scope *root_scope, const char *root, const char *path, bool mutable_only, Scope *exclude_scope, const char *exclude_root, ZBorrowTrace *out, size_t *out_len, bool *truncated) {
  if (!scope || !root || !out || !out_len) return false;
  *out_len = 0;
  if (truncated) *truncated = false;
  bool found = false;
  if (!root_scope) root_scope = scope_binding_scope(scope, root);
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    for (size_t binding_index = 0; binding_index < cursor->len; binding_index++) {
      if (scope_binding_is_excluded(cursor, binding_index, exclude_scope, exclude_root)) continue;
      ValueProvenance *origins = &cursor->value_provenance[binding_index];
      for (size_t origin_index = 0; origin_index < origins->len; origin_index++) {
        ProvenanceEntry *entry = &origins->items[origin_index];
        if (strcmp(entry->origin.root, root) != 0) continue;
        if (root_scope && entry->origin.root_scope && entry->origin.root_scope != root_scope) continue;
        if (!origin_path_overlaps(entry->origin.path, path)) continue;
        if (mutable_only && !entry->mutable_borrow) continue;
        ZBorrowTrace trace = {0};
        snprintf(trace.root, sizeof(trace.root), "%s", entry->origin.root);
        snprintf(trace.path, sizeof(trace.path), "%s", origin_path_text(entry->origin.path));
        snprintf(trace.kind, sizeof(trace.kind), "%s", entry->mutable_borrow ? "mutable" : "shared");
        snprintf(trace.binding, sizeof(trace.binding), "%s", cursor->names[binding_index]);
        trace.binding_line = cursor->decl_line ? cursor->decl_line[binding_index] : 0;
        trace.binding_column = cursor->decl_column ? cursor->decl_column[binding_index] : 0;
        borrow_trace_push(out, out_len, truncated, &trace);
        found = true;
      }
    }
  }
  return found;
}

static bool scope_active_borrows_for_place(Scope *scope, const char *root, const char *path, bool mutable_only, ZBorrowTrace *out, size_t *out_len, bool *truncated) {
  return scope_active_borrows_for_place_resolved(scope, NULL, root, path, mutable_only, NULL, NULL, out, out_len, truncated);
}

static ZDiag *diag_sink_target(DiagSink *sink) {
  return sink ? sink->diag : NULL;
}

static void diag_sink_borrow_trace(DiagSink *sink, const ZBorrowTrace *active, size_t active_len, bool truncated, const char *repair) {
  ZDiag *diag = diag_sink_target(sink);
  if (!diag || !active || active_len == 0) return;
  size_t copy_len = active_len > Z_BORROW_TRACE_MAX ? Z_BORROW_TRACE_MAX : active_len;
  for (size_t i = 0; i < copy_len; i++) diag->borrow_traces[i] = active[i];
  diag->borrow_trace_count = copy_len;
  diag->borrow_trace_truncated = truncated || active_len > Z_BORROW_TRACE_MAX;
  snprintf(diag->borrow_repair, sizeof(diag->borrow_repair), "%s", repair ? repair : "end the active lexical borrow before the conflicting operation");
}

static void set_diag_borrow_trace(ZDiag *diag, const ZBorrowTrace *active, size_t active_len, bool truncated, const char *repair) {
  DiagSink sink = {.diag = diag};
  diag_sink_borrow_trace(&sink, active, active_len, truncated, repair);
}

static void scope_clear_value_provenance_at(ValueProvenance *origins) {
  if (!origins) return;
  value_provenance_free(origins);
}

static void scope_replace_value_provenance_at(Scope *lookup_scope, Scope *binding_scope, size_t index, const ValueProvenance *origins) {
  if (!binding_scope || index >= binding_scope->len) return;
  (void)lookup_scope;
  scope_clear_value_provenance_at(&binding_scope->value_provenance[index]);
  if (!origins) return;
  for (size_t origin_index = 0; origin_index < origins->len; origin_index++) {
    ProvenanceEntry *entry = &origins->items[origin_index];
    value_provenance_add_full_with_index_exact(&binding_scope->value_provenance[index], entry->origin.root, entry->origin.root_scope, entry->mutable_borrow, entry->local_storage, entry->index_exact, entry->value_path, entry->origin.path);
  }
}

static void scope_replace_value_provenance_path_at(Scope *lookup_scope, Scope *binding_scope, size_t index, const char *path, const ValueProvenance *origins) {
  if (!binding_scope || index >= binding_scope->len) return;
  ValueProvenance merged = {0};
  ValueProvenance *existing = &binding_scope->value_provenance[index];
  for (size_t i = 0; i < existing->len; i++) {
    ProvenanceEntry *entry = &existing->items[i];
    if (origin_path_is_definitely_within(entry->value_path, path)) continue;
    value_provenance_add_full_with_index_exact(&merged, entry->origin.root, entry->origin.root_scope, entry->mutable_borrow, entry->local_storage, entry->index_exact, entry->value_path, entry->origin.path);
  }
  value_provenance_add_all_with_prefix(&merged, origins, path);
  scope_replace_value_provenance_at(lookup_scope, binding_scope, index, &merged);
  value_provenance_free(&merged);
}

static void scope_set_value_provenance(Scope *scope, const char *name, const ValueProvenance *origins) {
  if (!scope || !name || !origins) return;
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    for (size_t i = 0; i < cursor->len; i++) {
      if (strcmp(cursor->names[i], name) == 0) {
        scope_replace_value_provenance_at(scope, cursor, i, origins);
        return;
      }
    }
  }
}

static void scope_set_value_provenance_path(Scope *scope, const char *name, const char *path, const ValueProvenance *origins) {
  if (!scope || !name || !origins) return;
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    for (size_t i = 0; i < cursor->len; i++) {
      if (strcmp(cursor->names[i], name) == 0) {
        scope_replace_value_provenance_path_at(scope, cursor, i, path, origins);
        return;
      }
    }
  }
}

static void scope_set_value_provenance_path_in_scope(Scope *lookup_scope, Scope *binding_scope, const char *name, const char *path, const ValueProvenance *origins) {
  if (!lookup_scope || !name || !origins) return;
  if (binding_scope) {
    size_t index = 0;
    if (scope_binding_index_in_scope(binding_scope, name, &index)) {
      scope_replace_value_provenance_path_at(lookup_scope, binding_scope, index, path, origins);
      return;
    }
  }
  scope_set_value_provenance_path(lookup_scope, name, path, origins);
}

static bool scope_copy_value_provenance(Scope *scope, const char *name, ValueProvenance *out) {
  bool added = false;
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    for (size_t i = 0; i < cursor->len; i++) {
      if (strcmp(cursor->names[i], name) == 0) {
        for (size_t origin_index = 0; origin_index < cursor->value_provenance[i].len; origin_index++) {
          ProvenanceEntry *entry = &cursor->value_provenance[i].items[origin_index];
          if (value_provenance_add_full_with_index_exact(out, entry->origin.root, entry->origin.root_scope, entry->mutable_borrow, entry->local_storage, entry->index_exact, entry->value_path, entry->origin.path)) added = true;
        }
        return added;
      }
    }
  }
  return false;
}

static bool scope_copy_value_provenance_from_scope(Scope *scope, Scope *binding_scope, const char *name, ValueProvenance *out) {
  if (binding_scope) {
    size_t index = 0;
    bool added = false;
    if (!scope_binding_index_in_scope(binding_scope, name, &index)) return false;
    for (size_t origin_index = 0; origin_index < binding_scope->value_provenance[index].len; origin_index++) {
      ProvenanceEntry *entry = &binding_scope->value_provenance[index].items[origin_index];
      if (value_provenance_add_full_with_index_exact(out, entry->origin.root, entry->origin.root_scope, entry->mutable_borrow, entry->local_storage, entry->index_exact, entry->value_path, entry->origin.path)) added = true;
    }
    return added;
  }
  return scope_copy_value_provenance(scope, name, out);
}

static ProvenanceScopeSnapshot *provenance_scope_snapshot_capture(Scope *scope) {
  ProvenanceScopeSnapshot *head = NULL;
  ProvenanceScopeSnapshot *tail = NULL;
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    ProvenanceScopeSnapshot *frame = z_checked_calloc(1, sizeof(ProvenanceScopeSnapshot));
    frame->scope = cursor;
    frame->len = cursor->len;
    frame->origins = z_checked_calloc(frame->len, sizeof(ValueProvenance));
    frame->moved = z_checked_calloc(frame->len, sizeof(bool));
    for (size_t i = 0; i < frame->len; i++) {
      value_provenance_add_all(&frame->origins[i], &cursor->value_provenance[i]);
      frame->moved[i] = cursor->moved[i];
    }
    place_vec_add_all(&frame->maybe_present, &cursor->maybe_present);
    place_vec_add_all(&frame->moved_places, &cursor->moved_places);
    if (!head) {
      head = frame;
    } else {
      tail->next = frame;
    }
    tail = frame;
  }
  return head;
}

static const ProvenanceScopeSnapshot *provenance_scope_snapshot_find(const ProvenanceScopeSnapshot *snapshot, const Scope *scope) {
  for (const ProvenanceScopeSnapshot *frame = snapshot; frame; frame = frame->next) {
    if (frame->scope == scope) return frame;
  }
  return NULL;
}

static void provenance_scope_snapshot_restore(const ProvenanceScopeSnapshot *snapshot) {
  for (const ProvenanceScopeSnapshot *frame = snapshot; frame; frame = frame->next) {
    if (!frame->scope) continue;
    size_t len = frame->len < frame->scope->len ? frame->len : frame->scope->len;
    for (size_t i = 0; i < len; i++) {
      scope_replace_value_provenance_at(frame->scope, frame->scope, i, &frame->origins[i]);
      frame->scope->moved[i] = frame->moved[i];
    }
    place_vec_replace(&frame->scope->maybe_present, &frame->maybe_present);
    place_vec_replace(&frame->scope->moved_places, &frame->moved_places);
  }
}

static void provenance_scope_snapshot_restore_union(const ProvenanceScopeSnapshot *base, ProvenanceScopeSnapshot *const *states, const bool *include, size_t state_len) {
  bool any_included = false;
  for (size_t state_index = 0; include && state_index < state_len; state_index++) {
    if (include[state_index]) any_included = true;
  }
  if (!any_included) {
    provenance_scope_snapshot_restore(base);
    return;
  }
  for (const ProvenanceScopeSnapshot *base_frame = base; base_frame; base_frame = base_frame->next) {
    if (!base_frame->scope) continue;
    size_t len = base_frame->len < base_frame->scope->len ? base_frame->len : base_frame->scope->len;
    for (size_t binding_index = 0; binding_index < len; binding_index++) {
      ValueProvenance merged = {0};
      for (size_t state_index = 0; state_index < state_len; state_index++) {
        if (!include[state_index]) continue;
        const ProvenanceScopeSnapshot *state_frame = provenance_scope_snapshot_find(states[state_index], base_frame->scope);
        if (state_frame && binding_index < state_frame->len) {
          value_provenance_add_all(&merged, &state_frame->origins[binding_index]);
        } else {
          value_provenance_add_all(&merged, &base_frame->origins[binding_index]);
        }
      }
      scope_replace_value_provenance_at(base_frame->scope, base_frame->scope, binding_index, &merged);
      value_provenance_free(&merged);
      bool moved = false;
      for (size_t state_index = 0; state_index < state_len; state_index++) {
        if (!include[state_index]) continue;
        const ProvenanceScopeSnapshot *state_frame = provenance_scope_snapshot_find(states[state_index], base_frame->scope);
        if (state_frame && binding_index < state_frame->len) {
          moved = moved || state_frame->moved[binding_index];
        } else {
          moved = moved || base_frame->moved[binding_index];
        }
      }
      base_frame->scope->moved[binding_index] = moved;
    }
    PlaceVec maybe_merged = {0};
    bool seeded_maybe = false;
    for (size_t state_index = 0; state_index < state_len; state_index++) {
      if (!include[state_index]) continue;
      const ProvenanceScopeSnapshot *state_frame = provenance_scope_snapshot_find(states[state_index], base_frame->scope);
      const PlaceVec *state_maybe = state_frame ? &state_frame->maybe_present : &base_frame->maybe_present;
      if (!seeded_maybe) {
        place_vec_add_all(&maybe_merged, state_maybe);
        seeded_maybe = true;
      } else {
        PlaceVec intersection = {0};
        place_vec_add_intersection(&intersection, &maybe_merged, state_maybe);
        place_vec_free(&maybe_merged);
        maybe_merged = intersection;
      }
    }
    place_vec_replace(&base_frame->scope->maybe_present, &maybe_merged);
    place_vec_free(&maybe_merged);
    PlaceVec moved_merged = {0};
    for (size_t state_index = 0; state_index < state_len; state_index++) {
      if (!include[state_index]) continue;
      const ProvenanceScopeSnapshot *state_frame = provenance_scope_snapshot_find(states[state_index], base_frame->scope);
      const PlaceVec *state_moved = state_frame ? &state_frame->moved_places : &base_frame->moved_places;
      place_vec_add_all(&moved_merged, state_moved);
    }
    place_vec_replace(&base_frame->scope->moved_places, &moved_merged);
    place_vec_free(&moved_merged);
  }
}

static void provenance_scope_snapshot_restore_optional_branch(ProvenanceScopeSnapshot *before, ProvenanceScopeSnapshot *after, bool include_before, bool include_after) {
  ProvenanceScopeSnapshot *states[] = {before, after};
  bool include[] = {include_before, include_after};
  provenance_scope_snapshot_restore_union(before, states, include, 2);
}

static void provenance_scope_snapshot_free(ProvenanceScopeSnapshot *snapshot) {
  while (snapshot) {
    ProvenanceScopeSnapshot *next = snapshot->next;
    for (size_t i = 0; i < snapshot->len; i++) value_provenance_free(&snapshot->origins[i]);
    place_vec_free(&snapshot->maybe_present);
    place_vec_free(&snapshot->moved_places);
    free(snapshot->origins);
    free(snapshot->moved);
    free(snapshot);
    snapshot = next;
  }
}

static void scope_free(Scope *scope) {
  for (size_t i = 0; i < scope->len; i++) {
    free(scope->names[i]);
    free(scope->types[i]);
    value_provenance_free(&scope->value_provenance[i]);
  }
  free(scope->names);
  free(scope->types);
  free(scope->mutable);
  free(scope->moved);
  free(scope->is_param);
  free(scope->is_type_param);
  free(scope->is_static_param);
  free(scope->decl_line);
  free(scope->decl_column);
  free(scope->value_provenance);
  place_vec_free(&scope->maybe_present);
  place_vec_free(&scope->moved_places);
}

static bool diag_sink_set(DiagSink *sink, int code, const char *message, int line, int column) {
  ZDiag *diag = diag_sink_target(sink);
  if (!diag) return false;
  diag->code = code;
  diag->line = line;
  diag->column = column;
  diag->length = 1;
  diag->borrow_trace_count = 0;
  diag->borrow_trace_truncated = false;
  diag->borrow_repair[0] = 0;
  snprintf(diag->message, sizeof(diag->message), "%s", message);
  return false;
}

static bool diag_sink_detail(
  DiagSink *sink,
  int code,
  const char *message,
  int line,
  int column,
  const char *expected,
  const char *actual,
  const char *help
) {
  ZDiag *diag = diag_sink_target(sink);
  if (!diag) return false;
  diag_sink_set(sink, code, message, line, column);
  if (expected) snprintf(diag->expected, sizeof(diag->expected), "%s", expected);
  if (actual) snprintf(diag->actual, sizeof(diag->actual), "%s", actual);
  if (help) snprintf(diag->help, sizeof(diag->help), "%s", help);
  return false;
}

static bool set_diag_detail(
  ZDiag *diag,
  int code,
  const char *message,
  int line,
  int column,
  const char *expected,
  const char *actual,
  const char *help
) {
  DiagSink sink = {.diag = diag};
  return diag_sink_detail(&sink, code, message, line, column, expected, actual, help);
}

static ZDiag *check_context_diag(CheckContext *ctx, ZDiag *fallback) {
  if (fallback) return fallback;
  if (ctx && ctx->diags && ctx->diags->diag) return ctx->diags->diag;
  return NULL;
}

static bool is_builtin_value(const char *name) {
  return strcmp(name, "std") == 0;
}

static void member_name_buf(const Expr *expr, ZBuf *buf) {
  if (!expr) return;
  if (expr->kind == EXPR_IDENT) {
    zbuf_append(buf, expr->text);
  } else if (expr->kind == EXPR_MEMBER) {
    member_name_buf(expr->left, buf);
    zbuf_append_char(buf, '.');
    zbuf_append(buf, expr->text);
  }
}

static bool member_root_ident_is(const Expr *expr, const char *name) {
  if (!expr || !name) return false;
  const Expr *cursor = expr;
  while (cursor && cursor->kind == EXPR_MEMBER) cursor = cursor->left;
  return cursor && cursor->kind == EXPR_IDENT && cursor->text && strcmp(cursor->text, name) == 0;
}

static bool is_world_stream_write_callee(const Expr *callee, Scope *scope) {
  if (!callee || callee->kind != EXPR_MEMBER || !callee->text || strcmp(callee->text, "write") != 0) return false;
  const Expr *stream = callee->left;
  if (!stream || stream->kind != EXPR_MEMBER || !stream->text) return false;
  if (strcmp(stream->text, "out") != 0 && strcmp(stream->text, "err") != 0) return false;
  const Expr *root = stream->left;
  if (!root || root->kind != EXPR_IDENT || !root->text) return false;
  const char *root_type = scope_type(scope, root->text);
  return root_type && strcmp(root_type, "World") == 0;
}

static bool is_world_stream_write_call(const Expr *expr, Scope *scope) {
  return expr && expr->kind == EXPR_CALL && is_world_stream_write_callee(expr->left, scope);
}

static bool type_has_generic_arg(const char *type, const char *name, const char **inner, size_t *inner_len) {
  if (!type || !name) return false;
  size_t name_len = strlen(name);
  size_t type_len = strlen(type);
  if (type_len <= name_len + 2 || strncmp(type, name, name_len) != 0 || type[name_len] != '<' || type[type_len - 1] != '>') return false;
  int depth = 0;
  for (size_t i = name_len; i < type_len; i++) {
    if (type[i] == '<') depth++;
    else if (type[i] == '>') {
      depth--;
      if (depth == 0 && i != type_len - 1) return false;
      if (depth < 0) return false;
    } else if (type[i] == ',' && depth == 1) {
      return false;
    }
  }
  if (depth != 0) return false;
  *inner = type + name_len + 1;
  *inner_len = type_len - name_len - 2;
  return *inner_len > 0;
}

static bool split_generic_args(const char *inner, size_t inner_len, char ***out_items, size_t *out_len) {
  char **items = NULL;
  size_t len = 0;
  size_t cap = 0;
  size_t start = 0;
  int depth = 0;
  for (size_t i = 0; i <= inner_len; i++) {
    char c = i < inner_len ? inner[i] : ',';
    if (c == '<') depth++;
    else if (c == '>') depth--;
    if ((c == ',' && depth == 0) || i == inner_len) {
      size_t end = i;
      while (start < end && isspace((unsigned char)inner[start])) start++;
      while (end > start && isspace((unsigned char)inner[end - 1])) end--;
      if (end == start) {
        for (size_t j = 0; j < len; j++) free(items[j]);
        free(items);
        return false;
      }
      items = checker_grow_items(items, len, &cap, 4, sizeof(char *));
      items[len++] = z_strndup(inner + start, end - start);
      start = i + 1;
    }
    if (depth < 0) {
      for (size_t j = 0; j < len; j++) free(items[j]);
      free(items);
      return false;
    }
  }
  if (depth != 0 || len == 0) {
    for (size_t j = 0; j < len; j++) free(items[j]);
    free(items);
    return false;
  }
  *out_items = items;
  *out_len = len;
  return true;
}

static bool type_generic_arg_list(const char *type, const char *name, char ***out_items, size_t *out_len) {
  if (!type || !name) return false;
  size_t name_len = strlen(name);
  size_t type_len = strlen(type);
  if (type_len <= name_len + 2 || strncmp(type, name, name_len) != 0 || type[name_len] != '<' || type[type_len - 1] != '>') return false;
  const char *inner = type + name_len + 1;
  size_t inner_len = type_len - name_len - 2;
  return split_generic_args(inner, inner_len, out_items, out_len);
}

static void free_type_arg_list(char **items, size_t len) {
  for (size_t i = 0; i < len; i++) free(items[i]);
  free(items);
}

static bool type_is_owned(const char *type) {
  const char *inner = NULL;
  size_t inner_len = 0;
  return type_has_generic_arg(type, "owned", &inner, &inner_len);
}

static bool is_allocator_type(const char *type) {
  return type && (strcmp(type, "NullAlloc") == 0 || strcmp(type, "FixedBufAlloc") == 0 || strcmp(type, "PageAlloc") == 0 || strcmp(type, "GeneralAlloc") == 0);
}

static bool owned_inner_text(const char *type, char *out, size_t out_len) {
  if (!type || !out || out_len == 0) return false;
  const char *inner = NULL;
  size_t inner_len = 0;
  if (!type_has_generic_arg(type, "owned", &inner, &inner_len)) return false;
  snprintf(out, out_len, "%.*s", (int)inner_len, inner);
  return true;
}

static bool ref_inner_text(const char *type, char *out, size_t out_len) {
  if (!type || !out || out_len == 0) return false;
  const char *inner = NULL;
  size_t inner_len = 0;
  if (!type_has_generic_arg(type, "ref", &inner, &inner_len) &&
      !type_has_generic_arg(type, "mutref", &inner, &inner_len)) return false;
  snprintf(out, out_len, "%.*s", (int)inner_len, inner);
  return true;
}

static bool named_ref_inner_text(const char *type, const char *name, char *out, size_t out_len) {
  if (!type || !name || !out || out_len == 0) return false;
  const char *inner = NULL;
  size_t inner_len = 0;
  if (!type_has_generic_arg(type, name, &inner, &inner_len)) return false;
  snprintf(out, out_len, "%.*s", (int)inner_len, inner);
  return true;
}

static bool expr_root_ident(const Expr *expr, char *out, size_t out_len) {
  if (!expr || !out || out_len == 0) return false;
  switch (expr->kind) {
    case EXPR_IDENT:
      snprintf(out, out_len, "%s", expr->text ? expr->text : "");
      return expr->text != NULL;
    case EXPR_MEMBER:
    case EXPR_INDEX:
      return expr_root_ident(expr->left, out, out_len);
    default:
      return false;
  }
}

static bool parse_static_uint_text(const char *text, unsigned long long *out);

static bool expr_static_index_segment(const Expr *expr, char *out, size_t out_len) {
  if (!expr || expr->kind != EXPR_NUMBER || !expr->text || !out || out_len < 4) return false;
  unsigned long long value = 0;
  if (!parse_static_uint_text(expr->text, &value)) return false;
  int written = snprintf(out, out_len, "[%llu]", value);
  if (written < 0 || (size_t)written >= out_len) return false;
  return true;
}

static bool expr_binding_path(const Expr *expr, char *root, size_t root_len, char *path, size_t path_len) {
  if (!expr || !root || root_len == 0 || !path || path_len == 0) return false;
  if (expr->kind == EXPR_IDENT) {
    snprintf(root, root_len, "%s", expr->text ? expr->text : "");
    path[0] = '\0';
    return root[0] != '\0';
  }
  if (expr->kind == EXPR_MEMBER) {
    if (!expr_binding_path(expr->left, root, root_len, path, path_len)) return false;
    if (!expr->text || !expr->text[0]) return false;
    size_t current_len = strlen(path);
    size_t field_len = strlen(expr->text);
    size_t needed = current_len ? current_len + 1 + field_len : field_len;
    if (needed + 1 > path_len) return false;
    if (path[0]) {
      snprintf(path + current_len, path_len - current_len, ".%s", expr->text);
    } else {
      snprintf(path, path_len, "%s", expr->text);
    }
    return true;
  }
  if (expr->kind == EXPR_INDEX) {
    if (!expr_binding_path(expr->left, root, root_len, path, path_len)) return false;
    size_t current_len = strlen(path);
    char index_segment[64];
    if (!expr_static_index_segment(expr->right, index_segment, sizeof(index_segment))) {
      snprintf(index_segment, sizeof(index_segment), "[*]");
    }
    size_t needed = current_len + strlen(index_segment);
    if (needed + 1 > path_len) return false;
    snprintf(path + current_len, path_len - current_len, "%s", index_segment);
    return true;
  }
  return false;
}

static bool expr_is_addressable(const Expr *expr) {
  return expr && (expr->kind == EXPR_IDENT || expr->kind == EXPR_MEMBER || expr->kind == EXPR_INDEX);
}

static bool type_is_named_generic(const char *type, const char *name);
static bool expr_reference_provenance(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ValueProvenance *origins);
static bool check_expr_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, const char *expected);
static const char *expr_type(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope);
static bool is_int_type(const char *type);
static void set_expr_resolved_type(const Expr *expr, const char *type);
static bool collect_assignment_target_places(const Expr *target, Scope *scope, PlaceVec *places);
static bool span_element_text(const char *type, char *out, size_t out_len);
static bool readable_view_element_text(const char *type, char *out, size_t out_len);
static bool fixed_array_type_parts(const char *type, char *length, size_t length_len, char *element, size_t element_len);
static bool index_element_type(const char *base_type, char *out, size_t out_len);
static bool types_compatible_in_scope(const Program *program, Scope *scope, const char *expected, const char *actual);
static bool expr_addressable_storage_type(const Program *program, const Expr *expr, Scope *scope, char *out, size_t out_len);
static bool place_storage_value_provenance_under_path(CheckContext *ctx, const Program *program, Scope *scope, const Place *place, const char *relative_path, ValueProvenance *out);
static bool actual_storage_value_provenance_under_path(CheckContext *ctx, const Program *program, const Expr *actual, Scope *scope, const char *relative_path, ValueProvenance *out);
static char *provenance_context_type_text(const CheckContext *ctx, const Program *program, const char *type, GenericBinding *bindings, size_t binding_len);
static void scope_clear_maybe_guards_for_mutating_call_args(CheckContext *ctx, const Program *program, const Expr *call, Scope *scope);

static bool maybe_type_accepts_present_value(const Program *program, Scope *scope, const char *expected, const char *actual) {
  const char *inner = NULL;
  size_t inner_len = 0;
  if (!type_has_generic_arg(expected, "Maybe", &inner, &inner_len)) return false;
  char *inner_type = z_strndup(inner, inner_len);
  bool ok = types_compatible_in_scope(program, scope, inner_type, actual);
  free(inner_type);
  return ok;
}

static bool slice_source_is_mutable_storage(const Expr *source, Scope *scope, const char *source_type) {
  if (!source || !scope || !source_type) return false;
  char source_mutref_inner[160];
  char source_ref_inner[160];
  if (named_ref_inner_text(source_type, "mutref", source_mutref_inner, sizeof(source_mutref_inner))) {
    source_type = source_mutref_inner;
  } else if (named_ref_inner_text(source_type, "ref", source_ref_inner, sizeof(source_ref_inner))) {
    return false;
  }
  if (type_is_named_generic(source_type, "MutSpan")) return true;
  char element_type[128];
  if (!fixed_array_type_parts(source_type, NULL, 0, element_type, sizeof(element_type))) return false;
  char root[128];
  char path[256];
  if (!expr_binding_path(source, root, sizeof(root), path, sizeof(path)) || !scope_has(scope, root)) return false;
  const char *root_type = scope_type(scope, root);
  char root_mutref_inner[160];
  if (named_ref_inner_text(root_type, "mutref", root_mutref_inner, sizeof(root_mutref_inner))) return true;
  return scope_is_mutable(scope, root);
}

static bool borrow_expr_source_is_local_storage(const Expr *borrowed, Scope *scope, const char *root) {
  if (!scope_is_param(scope, root)) return true;
  const char *root_type = scope_type(scope, root);
  if (!type_is_named_generic(root_type, "ref") && !type_is_named_generic(root_type, "mutref")) return true;
  return borrowed && borrowed->kind == EXPR_IDENT;
}

static bool reference_source_origin_is_local_storage(Scope *scope, const char *root) {
  if (!scope_is_param(scope, root)) return true;
  const char *root_type = scope_type(scope, root);
  return !type_is_named_generic(root_type, "ref") &&
         !type_is_named_generic(root_type, "mutref") &&
         !type_is_named_generic(root_type, "Span") &&
         !type_is_named_generic(root_type, "MutSpan") &&
         strcmp(root_type, "String") != 0;
}

static bool reference_place_origin_is_local_storage(Scope *scope, const char *root) {
  return !scope_is_param(scope, root);
}

static bool span_view_place_origin_is_local_storage(Scope *scope, const char *root) {
  if (!scope_is_param(scope, root)) return true;
  const char *root_type = scope_type(scope, root);
  return !type_is_named_generic(root_type, "ref") &&
         !type_is_named_generic(root_type, "mutref") &&
         !type_is_named_generic(root_type, "Span") &&
         !type_is_named_generic(root_type, "MutSpan") &&
         strcmp(root_type, "String") != 0;
}

static bool expr_value_provenance(const Expr *expr, Scope *scope, ValueProvenance *origins) {
  if (!expr || !origins) return false;
  if (expr->kind == EXPR_BORROW) {
    char root[128];
    char path[256];
    if (!expr_binding_path(expr->left, root, sizeof(root), path, sizeof(path))) return false;
    const char *root_type = scope_type(scope, root);
    if (path[0] && root_type && (type_is_named_generic(root_type, "ref") || type_is_named_generic(root_type, "mutref"))) {
      ValueProvenance binding_origins = {0};
      bool added = false;
      if (scope_copy_value_provenance(scope, root, &binding_origins)) {
        added = value_provenance_add_direct_as_with_origin_suffix(origins, &binding_origins, expr->mutable_borrow, path);
      }
      value_provenance_free(&binding_origins);
      if (added) return true;
    }
    return value_provenance_add_full(origins, root, scope_binding_scope(scope, root), expr->mutable_borrow, borrow_expr_source_is_local_storage(expr->left, scope, root), NULL, path);
  }
  if (expr->kind == EXPR_IDENT) {
    if (scope_copy_value_provenance(scope, expr->text, origins)) return true;
    const char *actual = scope_type(scope, expr->text);
    if (actual && (type_is_named_generic(actual, "ref") || type_is_named_generic(actual, "mutref"))) {
      return value_provenance_add(origins, expr->text, scope_binding_scope(scope, expr->text), type_is_named_generic(actual, "mutref"), reference_source_origin_is_local_storage(scope, expr->text));
    }
  }
  return false;
}

static bool span_view_expr_provenance(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, const char *view_type, ValueProvenance *origins) {
  if (!expr || !scope || !view_type || !origins) return false;

  char expected_element[128];
  if (!readable_view_element_text(view_type, expected_element, sizeof(expected_element))) return false;

  ValueProvenance existing = {0};
  if (expr_reference_provenance(ctx, program, expr, scope, &existing)) {
    bool added = value_provenance_add_all(origins, &existing);
    value_provenance_free(&existing);
    return added;
  }
  value_provenance_free(&existing);

  if (expr_is_addressable(expr)) {
    char root[128];
    char path[256];
    const char *actual = expr_type(ctx, program, expr, scope);
    char actual_element[128];
    if (expr_binding_path(expr, root, sizeof(root), path, sizeof(path)) &&
        scope_has(scope, root)) {
      char storage_type[192];
      const char *actual_storage = actual;
      if (expr_addressable_storage_type(program, expr, scope, storage_type, sizeof(storage_type))) actual_storage = storage_type;
      if (fixed_array_type_parts(actual_storage, NULL, 0, actual_element, sizeof(actual_element)) &&
          types_compatible_in_scope(program, scope, expected_element, actual_element)) {
        bool local_storage = path[0]
          ? span_view_place_origin_is_local_storage(scope, root)
          : reference_source_origin_is_local_storage(scope, root);
        return value_provenance_add_full_with_index_exact(origins, root, scope_binding_scope(scope, root), false, local_storage, true, NULL, path);
      }
    }
    if (expr->kind == EXPR_IDENT &&
        scope_is_param(scope, expr->text) &&
        readable_view_element_text(actual, actual_element, sizeof(actual_element)) &&
        types_compatible_in_scope(program, scope, expected_element, actual_element)) {
      return value_provenance_add(origins, expr->text, scope_binding_scope(scope, expr->text), false, false);
    }
  }

  if (expr->kind != EXPR_SLICE || !expr->left) return false;

  const char *source_type = expr_type(ctx, program, expr->left, scope);
  char actual_element[128];
  if (readable_view_element_text(source_type, actual_element, sizeof(actual_element)) &&
      types_compatible_in_scope(program, scope, expected_element, actual_element)) {
    return span_view_expr_provenance(ctx, program, expr->left, scope, source_type, origins);
  }
  if (!index_element_type(source_type, actual_element, sizeof(actual_element)) ||
      !types_compatible_in_scope(program, scope, expected_element, actual_element)) return false;
  char root[128];
  char path[256];
  if (!expr_binding_path(expr->left, root, sizeof(root), path, sizeof(path)) || !scope_has(scope, root)) return false;
  bool local_storage = path[0] ? span_view_place_origin_is_local_storage(scope, root) : reference_source_origin_is_local_storage(scope, root);
  return value_provenance_add_full(origins, root, scope_binding_scope(scope, root), false, local_storage, NULL, path);
}

static bool expr_reference_provenance_as(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ValueProvenance *origins, bool mut_borrow) {
  ValueProvenance collected = {0};
  bool ok = expr_reference_provenance(ctx, program, expr, scope, &collected);
  if (ok) ok = value_provenance_add_all_as_with_prefix(origins, &collected, mut_borrow, NULL);
  value_provenance_free(&collected);
  return ok;
}

static bool check_borrow_conflict_at_resolved_excluding(Scope *scope, Scope *root_scope, const char *root, const char *path, bool mut_borrow, ZDiag *diag, const Expr *expr, Scope *exclude_scope, const char *exclude_root) {
  size_t shared = 0;
  size_t mut = 0;
  scope_borrow_counts_for_place_resolved(scope, root_scope, root, path, exclude_scope, exclude_root, &shared, &mut);
  if (mut_borrow ? (shared > 0 || mut > 0) : (mut > 0)) {
    char place[200];
    format_origin_place(place, sizeof(place), root, path);
    char actual[160];
    snprintf(actual, sizeof(actual), "%.120s already has %s borrow", place, mut > 0 ? "a mutable" : "shared");
    set_diag_detail(diag, 3029, "borrow conflicts with an active lexical borrow", expr->line, expr->column, mut_borrow ? "unborrowed mutable lvalue" : "no active mutable borrow", actual, "end the earlier borrow's scope before borrowing again");
    ZBorrowTrace active[Z_BORROW_TRACE_MAX] = {0};
    size_t active_len = 0;
    bool truncated = false;
    if (scope_active_borrows_for_place_resolved(scope, root_scope, root, path, !mut_borrow, exclude_scope, exclude_root, active, &active_len, &truncated)) {
      set_diag_borrow_trace(diag, active, active_len, truncated, "move the conflicting borrow after the active borrow's lexical scope or put the earlier borrow in an inner block");
    }
    return false;
  }
  return true;
}

static bool check_borrow_conflict_at(Scope *scope, const char *root, const char *path, bool mut_borrow, ZDiag *diag, const Expr *expr) {
  return check_borrow_conflict_at_resolved_excluding(scope, NULL, root, path, mut_borrow, diag, expr, NULL, NULL);
}

static bool mutating_fixed_storage_place(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, char *root, size_t root_len, char *path, size_t path_len) {
  if (!expr || !scope || !root || !path) return false;
  const Expr *storage = expr && expr->kind == EXPR_SLICE ? expr->left : expr;
  if (!storage || !expr_binding_path(storage, root, root_len, path, path_len) || !scope_has(scope, root)) return false;

  const char *storage_type = expr_type(ctx, program, storage, scope);
  char ref_inner[192];
  if (named_ref_inner_text(storage_type, "ref", ref_inner, sizeof(ref_inner)) ||
      named_ref_inner_text(storage_type, "mutref", ref_inner, sizeof(ref_inner)) ||
      type_is_named_generic(storage_type, "MutSpan")) return false;

  char actual_storage[192];
  if (expr_addressable_storage_type(program, storage, scope, actual_storage, sizeof(actual_storage))) storage_type = actual_storage;
  char element_type[128];
  return fixed_array_type_parts(storage_type, NULL, 0, element_type, sizeof(element_type));
}

static bool check_mutating_fixed_storage_not_borrowed(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag) {
  char root[128];
  char path[256];
  if (mutating_fixed_storage_place(ctx, program, expr, scope, root, sizeof(root), path, sizeof(path))) {
    return check_borrow_conflict_at(scope, root, path, true, diag, expr);
  }

  const char *actual = expr_type(ctx, program, expr, scope);
  if (!type_is_named_generic(actual, "MutSpan")) return true;

  ValueProvenance origins = {0};
  if (!span_view_expr_provenance(ctx, program, expr, scope, actual, &origins)) {
    value_provenance_free(&origins);
    return true;
  }

  char exclude_root[128] = {0};
  Scope *exclude_scope = NULL;
  const Expr *handle = expr && expr->kind == EXPR_SLICE ? expr->left : expr;
  if (handle && handle->kind == EXPR_IDENT && expr_binding_path(handle, exclude_root, sizeof(exclude_root), path, sizeof(path)) && scope_has(scope, exclude_root)) {
    exclude_scope = scope_binding_scope(scope, exclude_root);
  } else {
    exclude_root[0] = '\0';
  }

  bool ok = true;
  for (size_t i = 0; ok && i < origins.len; i++) {
    ProvenanceEntry *entry = &origins.items[i];
    if (!entry->origin.root || !entry->origin.root[0]) continue;
    ok = check_borrow_conflict_at_resolved_excluding(scope, entry->origin.root_scope, entry->origin.root, entry->origin.path, true, diag, expr, exclude_scope, exclude_root);
  }
  value_provenance_free(&origins);
  return ok;
}

static bool check_place_available(const Expr *expr, Scope *scope, const char *root, const char *path, ZDiag *diag) {
  if (!expr || !scope || !root || !root[0]) return true;
  const char *actual = scope_type(scope, root);
  if (actual && strcmp(actual, "Type") == 0) {
    char message[256];
    snprintf(message, sizeof(message), "type name '%s' cannot be used as a runtime value", root);
    return set_diag_detail(diag, 3005, message, expr->line, expr->column, "runtime value", "type name", "use the type name in an annotation or constructor context");
  }
  if (actual && type_is_owned(actual) && scope_is_moved(scope, root)) {
    char actual_detail[160];
    snprintf(actual_detail, sizeof(actual_detail), "%s was moved", root);
    return set_diag_detail(diag, 3013, "owned value was already moved", expr->line, expr->column, "live owned binding", actual_detail, "stop using the old binding after transferring ownership");
  }
  if (scope_has_moved_place(scope, root, path)) {
    char place[200];
    format_origin_place(place, sizeof(place), root, path);
    char actual_detail[240];
    snprintf(actual_detail, sizeof(actual_detail), "%.200s was moved", place);
    return set_diag_detail(diag, 3013, "owned value was already moved", expr->line, expr->column, "live owned binding", actual_detail, "stop using the old binding after transferring ownership");
  }
  PlaceVec resolved_places = {0};
  if (collect_assignment_target_places(expr, scope, &resolved_places)) {
    for (size_t i = 0; i < resolved_places.len; i++) {
      Place *place = &resolved_places.items[i];
      if (scope_has_moved_resolved_place(scope, place)) {
        char place_text[200];
        format_origin_place(place_text, sizeof(place_text), place->root, place->path);
        char actual_detail[240];
        snprintf(actual_detail, sizeof(actual_detail), "%.200s was moved", place_text);
        place_vec_free(&resolved_places);
        return set_diag_detail(diag, 3013, "owned value was already moved", expr->line, expr->column, "live owned binding", actual_detail, "stop using the old binding after transferring ownership");
      }
    }
  }
  place_vec_free(&resolved_places);
  return true;
}

static bool check_lvalue_base_available(const Expr *expr, Scope *scope, const char *root, const char *path, ZDiag *diag) {
  if (!expr || !scope || !root || !root[0]) return true;
  const char *actual = scope_type(scope, root);
  if (actual && strcmp(actual, "Type") == 0) {
    char message[256];
    snprintf(message, sizeof(message), "type name '%s' cannot be used as a runtime value", root);
    return set_diag_detail(diag, 3005, message, expr->line, expr->column, "runtime value", "type name", "use the type name in an annotation or constructor context");
  }
  if (scope_has_moved_place_covering(scope, root, path)) {
    char place[200];
    format_origin_place(place, sizeof(place), root, path);
    char actual_detail[240];
    snprintf(actual_detail, sizeof(actual_detail), "%.200s was moved", place);
    return set_diag_detail(diag, 3013, "owned value was already moved", expr->line, expr->column, "live owned binding", actual_detail, "stop using the old binding after transferring ownership");
  }
  PlaceVec resolved_places = {0};
  if (collect_assignment_target_places(expr, scope, &resolved_places)) {
    for (size_t i = 0; i < resolved_places.len; i++) {
      Place *place = &resolved_places.items[i];
      if (scope_has_moved_resolved_place_covering(scope, place)) {
        char place_text[200];
        format_origin_place(place_text, sizeof(place_text), place->root, place->path);
        char actual_detail[240];
        snprintf(actual_detail, sizeof(actual_detail), "%.200s was moved", place_text);
        place_vec_free(&resolved_places);
        return set_diag_detail(diag, 3013, "owned value was already moved", expr->line, expr->column, "live owned binding", actual_detail, "stop using the old binding after transferring ownership");
      }
    }
  }
  place_vec_free(&resolved_places);
  return true;
}

static bool check_read_not_mutably_borrowed(const Expr *expr, Scope *scope, ZDiag *diag) {
  char root[128];
  char path[256];
  if (!expr_binding_path(expr, root, sizeof(root), path, sizeof(path)) || !scope_has(scope, root)) return true;
  size_t shared = 0;
  size_t mut = 0;
  scope_borrow_counts_for_place(scope, root, path, &shared, &mut);
  (void)shared;
  if (mut == 0) return true;
  char place[200];
  format_origin_place(place, sizeof(place), root, path);
  char actual_detail[200];
  snprintf(actual_detail, sizeof(actual_detail), "%.160s has an active mutable borrow", place);
  set_diag_detail(diag, 3029, "cannot read a value while it is mutably borrowed", expr->line, expr->column, "unborrowed value or shared borrow only", actual_detail, "end the mutable borrow's lexical scope before reading the value");
  ZBorrowTrace active[Z_BORROW_TRACE_MAX] = {0};
  size_t active_len = 0;
  bool truncated = false;
  if (scope_active_borrows_for_place(scope, root, path, true, active, &active_len, &truncated)) {
    set_diag_borrow_trace(diag, active, active_len, truncated, "move the read after the mutable borrow's lexical scope or put the mutable borrow in an inner block");
  }
  return false;
}

static bool check_place_index_exprs(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag) {
  diag = check_context_diag(ctx, diag);
  if (!expr) return true;
  if (expr->kind == EXPR_IDENT) {
    if (!expr->resolved_type) set_expr_resolved_type(expr, expr_type(ctx, program, expr, scope));
    return true;
  }
  if (expr->kind == EXPR_MEMBER) {
    if (!check_place_index_exprs(ctx, program, expr->left, scope, diag)) return false;
    if (!expr->resolved_type) set_expr_resolved_type(expr, expr_type(ctx, program, expr, scope));
    return true;
  }
  if (expr->kind == EXPR_INDEX) {
    if (!check_place_index_exprs(ctx, program, expr->left, scope, diag)) return false;
    if (!check_expr_expected(ctx, program, expr->right, scope, diag, "usize")) return false;
    const char *index_type = expr_type(ctx, program, expr->right, scope);
    if (!is_int_type(index_type)) {
      return set_diag_detail(diag, 3028, "index expression must be an integer", expr->right ? expr->right->line : expr->line, expr->right ? expr->right->column : expr->column, "integer index", index_type, "use an integer expression such as usize or a checked integer literal");
    }
    if (!expr->resolved_type) set_expr_resolved_type(expr, expr_type(ctx, program, expr, scope));
  }
  return true;
}

static bool type_is_named_generic(const char *type, const char *name) {
  const char *inner = NULL;
  size_t inner_len = 0;
  return type_has_generic_arg(type, name, &inner, &inner_len);
}

static bool place_root_scope_matches(Scope *left, Scope *right) {
  return !left || !right || left == right;
}

static bool collect_provenance_resolved_places(Scope *scope, Scope *root_scope, const char *root, const char *path, bool include_direct_view, PlaceVec *places) {
  if (!scope || !root || !root[0] || !places) return false;
  const char *root_type = scope_type_in_binding_scope(scope, root_scope, root);
  char storage_type[192];
  const char *target_storage_type = root_type;
  bool root_ref_like = false;
  if (named_ref_inner_text(root_type, "ref", storage_type, sizeof(storage_type)) ||
      named_ref_inner_text(root_type, "mutref", storage_type, sizeof(storage_type))) {
    root_ref_like = true;
    target_storage_type = storage_type;
  }
  bool root_view_like = type_is_named_generic(target_storage_type, "Span") || type_is_named_generic(target_storage_type, "MutSpan");
  bool added = false;
  ValueProvenance root_origins = {0};
  if (scope_copy_value_provenance_from_scope(scope, root_scope, root, &root_origins)) {
    for (size_t i = 0; i < root_origins.len; i++) {
      ProvenanceEntry *entry = &root_origins.items[i];
      const char *relative_path = NULL;
      bool nested_alias = origin_path_text(entry->value_path)[0];
      if (nested_alias) {
        if (!origin_path_is_within(path, entry->value_path)) continue;
        relative_path = origin_path_after_prefix(path, entry->value_path);
        if (!origin_path_text(relative_path)[0]) continue;
      } else if (include_direct_view && (root_ref_like || root_view_like) && origin_path_text(path)[0]) {
        relative_path = path;
      } else {
        continue;
      }
      bool generalize_indexes = !entry->index_exact && (nested_alias || root_view_like);
      char *generalized_path = generalize_indexes ? origin_path_generalize_indexes(relative_path) : NULL;
      char *target_path = origin_path_join(entry->origin.path, generalized_path ? generalized_path : relative_path);
      if (place_vec_add(places, entry->origin.root, entry->origin.root_scope, target_path)) added = true;
      free(generalized_path);
      free(target_path);
    }
  }
  value_provenance_free(&root_origins);
  return added;
}

static bool maybe_guard_place_overlaps_mutation(Scope *lookup_scope, const Place *guard_place, Scope *mutation_root_scope, const char *mutation_root, const char *mutation_path) {
  if (!guard_place || !guard_place->root || !guard_place->root[0] || !mutation_root || !mutation_root[0]) return false;
  if (strcmp(guard_place->root, mutation_root) == 0 &&
      place_root_scope_matches(guard_place->root_scope, mutation_root_scope) &&
      origin_path_overlaps(guard_place->path, mutation_path)) {
    return true;
  }
  if (!lookup_scope || !origin_path_text(guard_place->path)[0]) return false;

  PlaceVec guard_targets = {0};
  bool overlaps = false;
  if (collect_provenance_resolved_places(lookup_scope, guard_place->root_scope, guard_place->root, guard_place->path, true, &guard_targets)) {
    for (size_t i = 0; i < guard_targets.len; i++) {
      Place *target = &guard_targets.items[i];
      bool same_storage_root = strcmp(target->root, mutation_root) == 0 &&
        place_root_scope_matches(target->root_scope, mutation_root_scope);
      if (same_storage_root && origin_path_overlaps(target->path, mutation_path)) overlaps = true;
      if (overlaps) break;
    }
  }
  place_vec_free(&guard_targets);
  return overlaps;
}

static void scope_clear_maybe_guards_for_expr_mutations(CheckContext *ctx, const Program *program, const Expr *expr, Scope *lookup_scope, Scope *guard_scope);
static void scope_clear_maybe_guards_for_resolved_call_mutations(CheckContext *ctx, const Program *program, const Expr *call, Scope *lookup_scope, Scope *guard_scope);
static bool resolve_receiver_shape_call(CheckContext *ctx, const Program *program, const Expr *call, Scope *scope, const char *receiver_type_hint, ZCallResolution *out);
static bool shape_method_receiver_info(const Function *method, bool *requires_mut);

static bool maybe_presence_guard_place(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, char *root, size_t root_len, char *path, size_t path_len) {
  if (!expr || expr->kind != EXPR_MEMBER || !expr->left || !expr->text || strcmp(expr->text, "has") != 0) return false;
  if (!expr_binding_path(expr->left, root, root_len, path, path_len) || !scope_has(scope, root)) return false;
  return type_is_named_generic(expr_type(ctx, program, expr->left, scope), "Maybe");
}

static bool maybe_bool_literal(const Expr *expr, bool *out) {
  if (!expr || expr->kind != EXPR_BOOL) return false;
  if (out) *out = expr->bool_value;
  return true;
}

static void scope_add_maybe_guards_from_condition_value(CheckContext *ctx, const Program *program, const Expr *expr, Scope *source_scope, Scope *guard_scope, bool value);

static void scope_add_maybe_guards_from_condition_true(CheckContext *ctx, const Program *program, const Expr *expr, Scope *source_scope, Scope *guard_scope) {
  scope_add_maybe_guards_from_condition_value(ctx, program, expr, source_scope, guard_scope, true);
}

static void scope_add_maybe_guards_from_condition_false(CheckContext *ctx, const Program *program, const Expr *expr, Scope *source_scope, Scope *guard_scope) {
  scope_add_maybe_guards_from_condition_value(ctx, program, expr, source_scope, guard_scope, false);
}

static void scope_add_maybe_guards_from_condition_value(CheckContext *ctx, const Program *program, const Expr *expr, Scope *source_scope, Scope *guard_scope, bool value) {
  if (!expr || !source_scope || !guard_scope) return;
  if (expr->kind == EXPR_BINARY && expr->text) {
    if (strcmp(expr->text, "&&") == 0) {
      if (value) {
        scope_add_maybe_guards_from_condition_value(ctx, program, expr->left, source_scope, guard_scope, true);
        scope_clear_maybe_guards_for_expr_mutations(ctx, program, expr->right, source_scope, guard_scope);
        scope_add_maybe_guards_from_condition_value(ctx, program, expr->right, source_scope, guard_scope, true);
      }
      return;
    }
    if (strcmp(expr->text, "||") == 0) {
      if (!value) {
        scope_add_maybe_guards_from_condition_value(ctx, program, expr->left, source_scope, guard_scope, false);
        scope_clear_maybe_guards_for_expr_mutations(ctx, program, expr->right, source_scope, guard_scope);
        scope_add_maybe_guards_from_condition_value(ctx, program, expr->right, source_scope, guard_scope, false);
      }
      return;
    }
    if (strcmp(expr->text, "==") == 0 || strcmp(expr->text, "!=") == 0) {
      bool literal = false;
      const Expr *condition = NULL;
      if (maybe_bool_literal(expr->right, &literal)) {
        condition = expr->left;
      } else if (maybe_bool_literal(expr->left, &literal)) {
        condition = expr->right;
      }
      if (condition) {
        bool condition_value = strcmp(expr->text, "==") == 0
          ? (value ? literal : !literal)
          : (value ? !literal : literal);
        scope_add_maybe_guards_from_condition_value(ctx, program, condition, source_scope, guard_scope, condition_value);
      }
      return;
    }
  }
  if (!value) return;
  char root[128];
  char path[256];
  if (maybe_presence_guard_place(ctx, program, expr, source_scope, root, sizeof(root), path, sizeof(path))) {
    scope_add_maybe_present(guard_scope, source_scope, root, path);
  }
}

static bool check_maybe_value_present(const Expr *expr, Scope *scope, ZDiag *diag) {
  if (!expr || !expr->left || !expr->text || strcmp(expr->text, "value") != 0) return true;
  char root[128];
  char path[256];
  if (!expr_binding_path(expr->left, root, sizeof(root), path, sizeof(path)) || !scope_has(scope, root)) {
    return set_diag_detail(diag, 3051, "Maybe payload read requires a presence guard", expr->line, expr->column, ".has proven true, check maybe_value, or rescue maybe_value err fallback", "temporary Maybe value", "bind the Maybe to a local and guard it with `.has`, or use `check`/`rescue` to handle absence");
  }
  if (scope_has_maybe_present(scope, root, path)) return true;
  char actual[256];
  format_origin_place(actual, sizeof(actual), root, path);
  return set_diag_detail(diag, 3051, "Maybe payload read requires a presence guard", expr->line, expr->column, ".has proven true, check maybe_value, or rescue maybe_value err fallback", actual, "guard the Maybe with `.has` before reading `.value`, or use `check`/`rescue` to handle absence");
}

static bool check_maybe_value_accesses_in_place(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag) {
  if (!expr) return true;
  if (expr->kind == EXPR_MEMBER) {
    if (!check_maybe_value_accesses_in_place(ctx, program, expr->left, scope, diag)) return false;
    const char *left_type = expr_type(ctx, program, expr->left, scope);
    if (type_is_named_generic(left_type, "Maybe") && !check_maybe_value_present(expr, scope, diag)) return false;
  } else if (expr->kind == EXPR_INDEX) {
    if (!check_maybe_value_accesses_in_place(ctx, program, expr->left, scope, diag)) return false;
  }
  return true;
}

static void scope_clear_maybe_guards_for_mutable_borrow_args(const Expr *call, Scope *scope) {
  if (!call || call->kind != EXPR_CALL || !scope) return;
  for (size_t i = 0; i < call->args.len; i++) {
    const Expr *arg = call->args.items[i];
    if (!arg || arg->kind != EXPR_BORROW || !arg->mutable_borrow) continue;
    char root[128];
    char path[256];
    if (expr_binding_path(arg->left, root, sizeof(root), path, sizeof(path)) && scope_has(scope, root)) {
      scope_clear_maybe_present_for_place(scope, root, path);
    }
  }
}

static void scope_clear_maybe_guards_for_expr_mutations(CheckContext *ctx, const Program *program, const Expr *expr, Scope *lookup_scope, Scope *guard_scope) {
  if (!expr || !lookup_scope || !guard_scope) return;
  if (expr->kind == EXPR_CALL) {
    for (size_t i = 0; i < expr->args.len; i++) {
      const Expr *arg = expr->args.items[i];
      if (!arg || arg->kind != EXPR_BORROW || !arg->mutable_borrow) continue;
      char root[128];
      char path[256];
      if (expr_binding_path(arg->left, root, sizeof(root), path, sizeof(path)) && scope_has(lookup_scope, root)) {
        scope_clear_maybe_present_in_scope_for_place(guard_scope, lookup_scope, root, path);
      }
    }
    if (expr->left && expr->left->kind == EXPR_MEMBER && expr->left->left) {
      const Expr *receiver = expr->left->left;
      const char *receiver_type = expr_type(ctx, program, receiver, lookup_scope);
      ZCallResolution resolution = {0};
      if (resolve_receiver_shape_call(ctx, program, expr, lookup_scope, receiver_type, &resolution)) {
        bool receiver_requires_mut = false;
        if (shape_method_receiver_info(resolution.callee, &receiver_requires_mut) && receiver_requires_mut) {
          char root[128];
          char path[256];
          if (expr_binding_path(receiver, root, sizeof(root), path, sizeof(path)) && scope_has(lookup_scope, root)) {
            scope_clear_maybe_present_in_scope_for_place(guard_scope, lookup_scope, root, path);
          }
        }
        z_call_resolution_free(&resolution);
      }
    }
    scope_clear_maybe_guards_for_resolved_call_mutations(ctx, program, expr, lookup_scope, guard_scope);
  }
  scope_clear_maybe_guards_for_expr_mutations(ctx, program, expr->left, lookup_scope, guard_scope);
  scope_clear_maybe_guards_for_expr_mutations(ctx, program, expr->right, lookup_scope, guard_scope);
  for (size_t i = 0; i < expr->args.len; i++) scope_clear_maybe_guards_for_expr_mutations(ctx, program, expr->args.items[i], lookup_scope, guard_scope);
  for (size_t i = 0; i < expr->fields.len; i++) scope_clear_maybe_guards_for_expr_mutations(ctx, program, expr->fields.items[i].value, lookup_scope, guard_scope);
}

static bool span_element_text(const char *type, char *out, size_t out_len) {
  if (!type || !out || out_len == 0) return false;
  const char *inner = NULL;
  size_t inner_len = 0;
  if (!type_has_generic_arg(type, "Span", &inner, &inner_len) &&
      !type_has_generic_arg(type, "MutSpan", &inner, &inner_len)) return false;
  snprintf(out, out_len, "%.*s", (int)inner_len, inner);
  return true;
}

static bool readable_view_element_text(const char *type, char *out, size_t out_len) {
  if (!type || !out || out_len == 0) return false;
  if (strcmp(type, "String") == 0) {
    snprintf(out, out_len, "u8");
    return true;
  }
  return span_element_text(type, out, out_len);
}

static bool mutspan_element_text(const char *type, char *out, size_t out_len) {
  if (!type || !out || out_len == 0) return false;
  const char *inner = NULL;
  size_t inner_len = 0;
  if (!type_has_generic_arg(type, "MutSpan", &inner, &inner_len)) return false;
  snprintf(out, out_len, "%.*s", (int)inner_len, inner);
  return true;
}

static bool validate_type_form_inner(const char *type, ZDiag *diag, int line, int column, bool allow_self) {
  if (!type) return true;
  if (strcmp(type, "Self") == 0 && !allow_self) {
    return set_diag_detail(diag, 3046, "Self is only valid inside shape methods", line, column, "concrete type name outside shape methods", "Self", "use the declaring shape name or move this type into a shape method signature");
  }
  if (strncmp(type, "const ", strlen("const ")) == 0) return validate_type_form_inner(type + strlen("const "), diag, line, column, allow_self);
  if (type[0] == '[') {
    const char *close = strchr(type, ']');
    if (!close || close[1] == 0) return set_diag_detail(diag, 3015, "malformed fixed array type", line, column, "[N]T", type, "write a fixed length and element type");
    return validate_type_form_inner(close + 1, diag, line, column, allow_self);
  }
  if (strcmp(type, "Maybe") == 0 || strcmp(type, "Span") == 0 || strcmp(type, "MutSpan") == 0 || strcmp(type, "ref") == 0 || strcmp(type, "mutref") == 0 || strcmp(type, "owned") == 0) {
    return set_diag_detail(diag, 3015, "memory type requires one type argument", line, column, "Span<T>, MutSpan<T>, Maybe<T>, ref<T>, mutref<T>, or owned<T>", type, "add the missing type argument");
  }
  if (strncmp(type, "Maybe<", strlen("Maybe<")) == 0 || strncmp(type, "Span<", strlen("Span<")) == 0 || strncmp(type, "MutSpan<", strlen("MutSpan<")) == 0 ||
      strncmp(type, "ref<", strlen("ref<")) == 0 || strncmp(type, "mutref<", strlen("mutref<")) == 0 || strncmp(type, "owned<", strlen("owned<")) == 0) {
    const char *name = "ref";
    if (strncmp(type, "Maybe<", strlen("Maybe<")) == 0) name = "Maybe";
    else if (strncmp(type, "Span<", strlen("Span<")) == 0) name = "Span";
    else if (strncmp(type, "MutSpan<", strlen("MutSpan<")) == 0) name = "MutSpan";
    else if (strncmp(type, "mutref<", strlen("mutref<")) == 0) name = "mutref";
    else if (strncmp(type, "owned<", strlen("owned<")) == 0) name = "owned";
    const char *inner = NULL;
    size_t inner_len = 0;
    if (!type_has_generic_arg(type, name, &inner, &inner_len)) {
      return set_diag_detail(diag, 3015, "memory type expects exactly one type argument", line, column, "one nested type argument", type, "remove extra arguments or close the generic type");
    }
    char *inner_type = z_strndup(inner, inner_len);
    bool ok = validate_type_form_inner(inner_type, diag, line, column, allow_self);
    free(inner_type);
    return ok;
  }
  return true;
}

static bool validate_type_form(const char *type, ZDiag *diag, int line, int column) {
  return validate_type_form_inner(type, diag, line, column, false);
}

static bool validate_shape_method_type_form(const char *type, ZDiag *diag, int line, int column) {
  return validate_type_form_inner(type, diag, line, column, true);
}

static const TypeAlias *find_alias(const Program *program, const char *name) {
  if (!program || !name) return NULL;
  for (size_t i = 0; i < program->aliases.len; i++) {
    if (strcmp(program->aliases.items[i].name, name) == 0) return &program->aliases.items[i];
  }
  return NULL;
}

static const char *resolve_alias_type(const Program *program, const char *type) {
  if (!program || !type) return type;
  for (size_t depth = 0; depth < program->aliases.len; depth++) {
    const TypeAlias *alias = find_alias(program, type);
    if (!alias || !alias->target) return type;
    type = alias->target;
  }
  return type;
}

static bool check_expr(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag);
static bool check_expr_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, const char *expected);
static bool check_stmt_vec_with_loop(CheckContext *ctx, const Program *program, const Function *fun, const StmtVec *body, Scope *scope, ZDiag *diag, int loop_depth);
static bool stmt_vec_guarantees_exit(const StmtVec *body, bool function_raises);
static bool check_lvalue_target(CheckContext *ctx, const Program *program, const Expr *target, Scope *scope, ZDiag *diag, char *out_type, size_t out_type_len);
static const char *expr_type(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope);
static bool types_compatible(const Program *program, const char *expected, const char *actual);
static bool types_compatible_in_scope(const Program *program, Scope *scope, const char *expected, const char *actual);
static bool scope_static_param_type(Scope *scope, const char *name, const char **out_type);
static bool scope_type_name_shadows_static_const(Scope *scope, const char *name);
static const char *visible_concrete_type_name_kind(const Program *program, const char *name);
static bool validate_type_names(const Program *program, const char *type, const ParamVec *primary, const ParamVec *secondary, bool allow_self, ZDiag *diag, int line, int column);
static bool type_param_name_known(const ParamVec *primary, const ParamVec *secondary, const char *name);
static bool static_type_param_name_known_for_type(const Program *program, const ParamVec *primary, const ParamVec *secondary, const char *name, const char *expected_type);
static bool static_value_name_shadowed_by_type_param(const ParamVec *primary, const ParamVec *secondary, const char *name);
static const ParamVec *generic_type_params_for_name(const Program *program, const char *name);
static bool type_core_generic_arg_kind_for_program(const void *context, const char *type_name, size_t arg_index, ZTypeArgKind *out_kind);
static const Shape *find_shape_for_type(const Program *program, const char *type);
static const Choice *find_choice(const Program *program, const char *name);
static const Param *find_case(const ParamVec *cases, const char *name);
static const Function *find_shape_method_decl(const Shape *shape, const char *name);
static void set_expr_resolved_type(const Expr *expr, const char *type);
static void set_expr_checked_type_args(const Expr *expr, GenericBinding *bindings, size_t binding_len);
static const Function *find_namespace_shape_method(const Program *program, const Expr *callee, const Shape **out_shape);
static const Function *find_constrained_interface_method_in_function(const Program *program, const Function *fun, const Expr *callee, const InterfaceDecl **out_interface);
static void strip_ref_like_type(const char *type, char *out, size_t out_len);
static bool shape_method_bindings_from_recorded_type_args(CheckContext *ctx, const Program *program, const Shape *shape, const Function *method, const Expr *call, GenericBinding **out_bindings, size_t *out_len, bool *out_recorded);
static bool interface_method_bindings_from_recorded_type_args(CheckContext *ctx, const Program *program, const InterfaceDecl *interface, const Function *method, const Expr *call, GenericBinding *context_bindings, size_t context_binding_len, GenericBinding **out_bindings, size_t *out_len, bool *out_recorded);
static bool generic_call_bindings_from_checked_call(CheckContext *ctx, const Program *program, const Function *callee, const Expr *call, Scope *scope, const char *return_type, GenericBinding **out_bindings, size_t *out_len);
static void call_resolution_record_bindings(ZCallResolution *resolution, GenericBinding *bindings, size_t binding_len);
static void call_resolution_record_param_facts(CheckContext *ctx, const Program *program, const Function *callee, const Expr *call, const Expr *receiver, size_t param_offset, Scope *scope, GenericBinding *bindings, size_t binding_len, ZCallResolution *resolution);
static char *call_resolution_param_type_text(const ZCallResolution *resolution, size_t param_index);
static bool interface_constraint_parts(const Program *program, const char *constraint, const InterfaceDecl **out_interface, char ***out_args, size_t *out_arg_len);
static bool type_contains_owned(const Program *program, const char *type, size_t depth);
static void mark_owned_move_if_needed(const Program *program, const Expr *expr, Scope *scope, const char *destination_type);
static bool check_owned_array_element_transfer(const Program *program, const Expr *expr, Scope *scope, const char *element_type, bool array_repeat, ZDiag *diag);
static void mark_owned_target_live_if_needed(const Program *program, const Expr *target, Scope *scope, const char *target_type);
static size_t type_core_static_const_binder_count(const Program *program);
static size_t append_type_core_static_const_binders(const Program *program, Scope *shadow_scope, ZTypeBinderDecl *decls, size_t len, ZTypeBinderId first_id, bool omit_ambiguous_type_args);
static ZUnifyBinding *checker_unify_trace_push(ZUnifyTrace *trace);
static bool seed_type_core_static_const_bindings(const Program *program, const ZTypeBinderScope *scope, ZTypeBinderId first_const_id, ZUnifyTrace *trace);

static bool function_exists(const Program *program, const char *name) {
  if (strcmp(name, "expect") == 0) return true;
  for (size_t i = 0; i < program->functions.len; i++) {
    if (strcmp(program->functions.items[i].name, name) == 0) return true;
  }
  return false;
}

static const Function *find_function(const Program *program, const char *name) {
  for (size_t i = 0; i < program->functions.len; i++) {
    if (strcmp(program->functions.items[i].name, name) == 0) return &program->functions.items[i];
  }
  return NULL;
}

typedef struct {
  ZCallResolution resolution;
  GenericBinding *bindings;
  size_t binding_len;
} ResolvedProvenanceCall;

static bool apply_expr_call_storage_effects(
  CheckContext *ctx,
  const Program *program,
  const Expr *expr,
  Scope *scope,
  ZDiag *diag
);

static bool apply_checked_call_storage_effects(
  CheckContext *ctx,
  const Program *program,
  const Expr *expr,
  Scope *scope,
  ZDiag *diag
);
static char *canonical_static_arg(const Program *program, const char *text);
static char *canonical_static_arg_for_type(const Program *program, const char *text, const char *type);

static bool function_is_generic(const Function *fun) {
  return fun && fun->type_params.len > 0;
}

static const TypeArgVec *call_type_args(const Expr *call) {
  if (!call) return NULL;
  if (call->type_args.len > 0) return &call->type_args;
  if (call->kind == EXPR_CALL && call->left && call->left->type_args.len > 0) return &call->left->type_args;
  return &call->type_args;
}

static void call_resolution_record_function_errors(ZCallResolution *out, const Function *callee) {
  if (!out || !callee || !callee->has_error_set) return;
  for (size_t i = 0; i < callee->errors.len; i++) {
    if (callee->errors.items[i].name) z_call_resolution_add_error(out, callee->errors.items[i].name);
  }
}

static bool resolve_named_function_call(const Program *program, const Expr *call, ZCallResolution *out) {
  if (!program || !call || call->kind != EXPR_CALL || !call->left || call->left->kind != EXPR_IDENT || !out) return false;
  const Function *callee = find_function(program, call->left->text);
  if (!callee) return false;
  z_call_resolution_init(out);
  out->kind = Z_CALL_FUNCTION;
  out->call_expr = call;
  out->callee_expr = call->left;
  out->type_args = call_type_args(call);
  out->callee = callee;
  out->param_len = callee->params.len;
  out->fallible = callee->raises || callee->has_error_set;
  z_call_resolution_set_callee_name(out, callee->name);
  z_call_resolution_set_return_type(out, callee->return_type ? callee->return_type : "Void");
  call_resolution_record_function_errors(out, callee);
  return true;
}

static bool resolve_shape_namespace_call(const Program *program, const Expr *call, ZCallResolution *out);
static bool resolve_concrete_constrained_shape_call(const CheckContext *ctx, const Program *program, const Function *context_fun, GenericBinding *bindings, size_t binding_len, const Expr *call, ZCallResolution *out);
static bool resolve_constrained_interface_call(const Program *program, const Function *context_fun, const Expr *call, ZCallResolution *out);
static bool resolve_receiver_shape_call(CheckContext *ctx, const Program *program, const Expr *call, Scope *scope, const char *receiver_type_hint, ZCallResolution *out);

static const char *generic_binding_lookup(GenericBinding *bindings, size_t len, const char *name) {
  if (!bindings || !name) return NULL;
  for (size_t i = 0; i < len; i++) {
    if (bindings[i].name && strcmp(bindings[i].name, name) == 0) return bindings[i].type;
  }
  return NULL;
}

static const char *static_type_or_usize(const char *type) {
  return type && type[0] ? type : "usize";
}

static void generic_binding_init_from_param(GenericBinding *binding, const Param *param) {
  if (!binding || !param) return;
  binding->name = param->name;
  binding->is_static = param->is_static;
  binding->static_type = param->is_static ? static_type_or_usize(param->type) : NULL;
}

static void generic_bindings_init_from_params(GenericBinding *bindings, const ParamVec *params, size_t offset) {
  if (!bindings || !params) return;
  for (size_t i = 0; i < params->len; i++) {
    generic_binding_init_from_param(&bindings[offset + i], &params->items[i]);
  }
}

static void generic_bindings_free(GenericBinding *bindings, size_t len) {
  for (size_t i = 0; i < len; i++) free(bindings[i].type);
}

static char **generic_binding_type_snapshot(GenericBinding *bindings, size_t len) {
  char **snapshot = z_checked_calloc(len ? len : 1, sizeof(char *));
  for (size_t i = 0; i < len; i++) {
    if (bindings[i].type) snapshot[i] = z_strdup(bindings[i].type);
  }
  return snapshot;
}

static void generic_binding_type_snapshot_restore(GenericBinding *bindings, size_t len, char **snapshot) {
  if (!bindings || !snapshot) return;
  for (size_t i = 0; i < len; i++) {
    free(bindings[i].type);
    bindings[i].type = snapshot[i] ? z_strdup(snapshot[i]) : NULL;
  }
}

static void generic_binding_type_snapshot_free(char **snapshot, size_t len) {
  if (!snapshot) return;
  for (size_t i = 0; i < len; i++) free(snapshot[i]);
  free(snapshot);
}

static void resolved_provenance_call_free(ResolvedProvenanceCall *resolved) {
  if (!resolved) return;
  generic_bindings_free(resolved->bindings, resolved->binding_len);
  free(resolved->bindings);
  z_call_resolution_free(&resolved->resolution);
  *resolved = (ResolvedProvenanceCall){0};
}

static bool generic_binding_values_compatible_with_static_context(const Program *program, Scope *scope, const char *static_type, const char *bound, const char *next) {
  if (!next) return false;
  const char *bound_param_type = NULL;
  const char *next_param_type = NULL;
  bool bound_open = scope_static_param_type(scope, bound, &bound_param_type);
  bool next_open = scope_static_param_type(scope, next, &next_param_type);
  if (bound_open || next_open) {
    if (!bound_open || !next_open) return false;
    if (static_type && (!types_compatible(program, static_type, bound_param_type) || !types_compatible(program, static_type, next_param_type))) return false;
    return strcmp(bound, next) == 0;
  }
  char *bound_static = static_type ? canonical_static_arg_for_type(program, bound, static_type) : canonical_static_arg(program, bound);
  char *next_static = static_type ? canonical_static_arg_for_type(program, next, static_type) : canonical_static_arg(program, next);
  bool ok = false;
  if (bound_static || next_static) {
    ok = bound_static && next_static && strcmp(bound_static, next_static) == 0;
  } else {
    ok = types_compatible_in_scope(program, scope, bound, next);
  }
  free(bound_static);
  free(next_static);
  return ok;
}

static bool generic_binding_set_with_static_context(const Program *program, Scope *scope, const char *static_type, GenericBinding *bindings, size_t len, const char *name, const char *type) {
  for (size_t i = 0; i < len; i++) {
    if (bindings[i].name && name && strcmp(bindings[i].name, name) == 0) {
      if (static_type) {
        bindings[i].is_static = true;
        bindings[i].static_type = static_type_or_usize(static_type);
      }
      if (!bindings[i].type) {
        bindings[i].type = z_strdup(type ? type : "Unknown");
        return true;
      }
      return generic_binding_values_compatible_with_static_context(program, scope, static_type, bindings[i].type, type);
    }
  }
  return true;
}

static bool generic_binding_set(const Program *program, GenericBinding *bindings, size_t len, const char *name, const char *type) {
  return generic_binding_set_with_static_context(program, NULL, NULL, bindings, len, name, type);
}

static char *type_substitute_generic_signature(const Program *program, const char *type, GenericBinding *bindings, size_t binding_len);
static char *type_substitute_generic_signature_open_bindings(const Program *program, const char *type, GenericBinding *bindings, size_t binding_len);
static char *type_substitute_interface_method_signature(const Program *program, const char *type, GenericBinding *interface_bindings, size_t interface_binding_len, const Function *required, const Function *method);
static char *type_substitute_static_arg_signature(const Program *program, const char *text, GenericBinding *bindings, size_t binding_len);
static bool infer_generic_type_from_pattern(const Program *program, const Function *fun, Scope *actual_scope, const char *pattern, const char *actual, GenericBinding *bindings, size_t binding_len);

static bool type_text_references_name(const char *type, const char *name) {
  if (!type || !name || !name[0]) return false;
  size_t name_len = strlen(name);
  const char *cursor = type;
  while ((cursor = strstr(cursor, name)) != NULL) {
    bool left_ok = cursor == type || !(isalnum((unsigned char)cursor[-1]) || cursor[-1] == '_');
    bool right_ok = !(isalnum((unsigned char)cursor[name_len]) || cursor[name_len] == '_');
    if (left_ok && right_ok) return true;
    cursor += name_len;
  }
  return false;
}

static bool type_references_function_generic_param(const Function *fun, const char *type) {
  if (!function_is_generic(fun) || !type) return false;
  for (size_t i = 0; i < fun->type_params.len; i++) {
    if (fun->type_params.items[i].is_static) continue;
    if (type_text_references_name(type, fun->type_params.items[i].name)) return true;
  }
  return false;
}

static bool function_names_match(const Function *left, const Function *right) {
  if (left == right) return true;
  return left && right && left->name && right->name && strcmp(left->name, right->name) == 0;
}

static bool recursive_generic_bindings_reference_origin(const Function *origin, GenericBinding *bindings, size_t binding_len) {
  if (!origin || !function_is_generic(origin)) return false;
  for (size_t i = 0; i < binding_len; i++) {
    if (type_references_function_generic_param(origin, bindings[i].type)) return true;
  }
  return false;
}

static bool recursive_generic_bindings_keep_origin_stable(const Function *origin, const Expr *call, ZDiag *diag, GenericBinding *bindings, size_t binding_len) {
  if (!origin || !function_is_generic(origin)) return true;
  for (size_t i = 0; i < origin->type_params.len && i < binding_len; i++) {
    const Param *param = &origin->type_params.items[i];
    if (param->is_static) continue;
    const char *bound = generic_binding_lookup(bindings, binding_len, param->name);
    if (!type_references_function_generic_param(origin, bound)) continue;
    if (strcmp(bound, param->name) == 0) continue;
    return set_diag_detail(diag, 3050, "recursive generic call changes type arguments", call->line, call->column, "recursive call with unchanged generic type parameters", bound ? bound : "Unknown", "call recursively with the current type parameters or use a concrete helper");
  }
  return true;
}

static char *recursive_generic_context_type_text(const Program *program, const char *type, GenericBinding *context_bindings, size_t context_binding_len) {
  return type_substitute_generic_signature_open_bindings(program, type ? type : "Unknown", context_bindings, context_binding_len);
}

static char *recursive_generic_expr_type_text(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, GenericBinding *context_bindings, size_t context_binding_len) {
  if (expr && expr->kind == EXPR_IDENT) {
    const char *scoped_type = scope_type(scope, expr->text);
    if (scoped_type) return z_strdup(scoped_type);
  }
  return recursive_generic_context_type_text(program, expr_type(ctx, program, expr, scope), context_bindings, context_binding_len);
}

static void recursive_generic_scope_add_function_bindings(const Program *program, const Function *fun, GenericBinding *context_bindings, size_t context_binding_len, Scope *scope) {
  if (!fun || !scope) return;
  for (size_t i = 0; i < fun->type_params.len; i++) {
    const Param *type_param = &fun->type_params.items[i];
    if (type_param->is_static) scope_add_static_param(scope, type_param->name, type_param->type);
    else scope_add_type_param(scope, type_param->name);
  }
  for (size_t i = 0; i < fun->params.len; i++) {
    const Param *param = &fun->params.items[i];
    char *param_type = recursive_generic_context_type_text(program, param->type, context_bindings, context_binding_len);
    scope_add_param_decl(scope, param->name, param_type, param->line, param->column);
    free(param_type);
  }
}

static void recursive_generic_scope_add_stmt_binding(CheckContext *ctx, const Program *program, const Stmt *stmt, Scope *scope, GenericBinding *context_bindings, size_t context_binding_len) {
  if (!stmt || stmt->kind != STMT_LET || !stmt->name || !scope) return;
  const char *raw_type = stmt->resolved_type ? stmt->resolved_type : stmt->type;
  if (!raw_type && stmt->expr) raw_type = expr_type(ctx, program, stmt->expr, scope);
  char *binding_type = recursive_generic_context_type_text(program, raw_type, context_bindings, context_binding_len);
  scope_add(scope, stmt->name, binding_type, stmt->mutable_binding);
  free(binding_type);
}

static bool recursive_generic_call_bindings_for_context(CheckContext *ctx, const Program *program, const Function *callee, const Expr *call, Scope *scope, GenericBinding *context_bindings, size_t context_binding_len, GenericBinding **out_bindings, size_t *out_len) {
  if (!callee || !call || !out_bindings || !out_len) return false;
  const TypeArgVec *type_args = call_type_args(call);
  GenericBinding *bindings = z_checked_calloc(callee->type_params.len ? callee->type_params.len : 1, sizeof(GenericBinding));
  generic_bindings_init_from_params(bindings, &callee->type_params, 0);
  if (type_args && type_args->len > 0) {
    if (type_args->len != callee->type_params.len) {
      free(bindings);
      return false;
    }
    for (size_t i = 0; i < callee->type_params.len; i++) {
      bindings[i].type = recursive_generic_context_type_text(program, type_args->items[i].type, context_bindings, context_binding_len);
    }
  } else {
    for (size_t i = 0; i < callee->params.len && i < call->args.len; i++) {
      char *actual = recursive_generic_expr_type_text(ctx, program, call->args.items[i], scope, context_bindings, context_binding_len);
      bool ok = infer_generic_type_from_pattern(program, callee, scope, callee->params.items[i].type, actual, bindings, callee->type_params.len);
      free(actual);
      if (!ok) {
        generic_bindings_free(bindings, callee->type_params.len);
        free(bindings);
        return false;
      }
    }
    for (size_t i = 0; i < callee->type_params.len; i++) {
      if (!bindings[i].type && !callee->type_params.items[i].is_static) {
        generic_bindings_free(bindings, callee->type_params.len);
        free(bindings);
        return false;
      }
      if (!bindings[i].type) bindings[i].type = z_strdup(callee->type_params.items[i].name);
    }
  }
  *out_bindings = bindings;
  *out_len = callee->type_params.len;
  return true;
}

static bool validate_recursive_generic_cycle_in_function(CheckContext *ctx, const Program *program, const Function *origin, const Function *callee, GenericBinding *context_bindings, size_t context_binding_len, ZDiag *diag, size_t depth, size_t depth_limit);
static bool validate_recursive_generic_cycle_in_expr(CheckContext *ctx, const Program *program, const Function *origin, const Expr *expr, Scope *scope, GenericBinding *context_bindings, size_t context_binding_len, ZDiag *diag, size_t depth, size_t depth_limit);

static bool validate_recursive_generic_cycle_in_stmt_vec(CheckContext *ctx, const Program *program, const Function *origin, const StmtVec *body, Scope *scope, GenericBinding *context_bindings, size_t context_binding_len, ZDiag *diag, size_t depth, size_t depth_limit) {
  diag = check_context_diag(ctx, diag);
  if (!body || depth > depth_limit) return true;
  for (size_t i = 0; i < body->len; i++) {
    const Stmt *stmt = body->items[i];
    if (!stmt) continue;
    if (!validate_recursive_generic_cycle_in_expr(ctx, program, origin, stmt->target, scope, context_bindings, context_binding_len, diag, depth, depth_limit)) return false;
    if (!validate_recursive_generic_cycle_in_expr(ctx, program, origin, stmt->expr, scope, context_bindings, context_binding_len, diag, depth, depth_limit)) return false;
    if (!validate_recursive_generic_cycle_in_expr(ctx, program, origin, stmt->range_end, scope, context_bindings, context_binding_len, diag, depth, depth_limit)) return false;
    if (stmt->kind == STMT_LET) recursive_generic_scope_add_stmt_binding(ctx, program, stmt, scope, context_bindings, context_binding_len);
    if (stmt->kind == STMT_FOR) {
      Scope body_scope = {.parent = scope};
      const char *iter_type = stmt->resolved_type ? stmt->resolved_type : (stmt->expr ? expr_type(ctx, program, stmt->expr, scope) : "Unknown");
      char *context_iter_type = recursive_generic_context_type_text(program, iter_type, context_bindings, context_binding_len);
      if (stmt->name) scope_add(&body_scope, stmt->name, context_iter_type ? context_iter_type : "Unknown", false);
      free(context_iter_type);
      bool body_ok = validate_recursive_generic_cycle_in_stmt_vec(ctx, program, origin, &stmt->then_body, &body_scope, context_bindings, context_binding_len, diag, depth, depth_limit);
      scope_free(&body_scope);
      if (!body_ok) return false;
      if (!validate_recursive_generic_cycle_in_stmt_vec(ctx, program, origin, &stmt->else_body, scope, context_bindings, context_binding_len, diag, depth, depth_limit)) return false;
    } else {
      Scope then_scope = {.parent = scope};
      Scope else_scope = {.parent = scope};
      bool nested_ok = validate_recursive_generic_cycle_in_stmt_vec(ctx, program, origin, &stmt->then_body, &then_scope, context_bindings, context_binding_len, diag, depth, depth_limit) &&
                       validate_recursive_generic_cycle_in_stmt_vec(ctx, program, origin, &stmt->else_body, &else_scope, context_bindings, context_binding_len, diag, depth, depth_limit);
      scope_free(&then_scope);
      scope_free(&else_scope);
      if (!nested_ok) return false;
    }
    for (size_t arm_index = 0; arm_index < stmt->match_arms.len; arm_index++) {
      const MatchArm *arm = &stmt->match_arms.items[arm_index];
      if (!validate_recursive_generic_cycle_in_expr(ctx, program, origin, arm->guard, scope, context_bindings, context_binding_len, diag, depth, depth_limit)) return false;
      Scope arm_scope = {.parent = scope};
      if (stmt->kind == STMT_MATCH && arm->payload_name && stmt->expr) {
        const char *match_type = stmt->resolved_type ? stmt->resolved_type : expr_type(ctx, program, stmt->expr, scope);
        char *context_match_type = recursive_generic_context_type_text(program, match_type, context_bindings, context_binding_len);
        const Choice *item_choice = find_choice(program, context_match_type);
        const Param *item_case = item_choice ? find_case(&item_choice->cases, arm->case_name) : NULL;
        if (item_case && item_case->type) scope_add(&arm_scope, arm->payload_name, item_case->type, false);
        free(context_match_type);
      }
      bool arm_ok = validate_recursive_generic_cycle_in_stmt_vec(ctx, program, origin, &arm->body, &arm_scope, context_bindings, context_binding_len, diag, depth, depth_limit);
      scope_free(&arm_scope);
      if (!arm_ok) return false;
    }
  }
  return true;
}

static bool validate_recursive_generic_cycle_in_expr(CheckContext *ctx, const Program *program, const Function *origin, const Expr *expr, Scope *scope, GenericBinding *context_bindings, size_t context_binding_len, ZDiag *diag, size_t depth, size_t depth_limit) {
  diag = check_context_diag(ctx, diag);
  if (!expr || !program || !origin || depth > depth_limit) return true;
  if (expr->kind == EXPR_CALL && expr->left && expr->left->kind == EXPR_IDENT) {
    const Function *callee = find_function(program, expr->left->text);
    if (function_is_generic(callee)) {
      GenericBinding *next_bindings = NULL;
      size_t next_binding_len = 0;
      if (recursive_generic_call_bindings_for_context(ctx, program, callee, expr, scope, context_bindings, context_binding_len, &next_bindings, &next_binding_len)) {
        bool ok = true;
        if (function_names_match(callee, origin)) {
          ok = recursive_generic_bindings_keep_origin_stable(origin, expr, diag, next_bindings, next_binding_len);
        } else if (recursive_generic_bindings_reference_origin(origin, next_bindings, next_binding_len)) {
          ok = validate_recursive_generic_cycle_in_function(ctx, program, origin, callee, next_bindings, next_binding_len, diag, depth + 1, depth_limit);
        }
        generic_bindings_free(next_bindings, next_binding_len);
        free(next_bindings);
        if (!ok) return false;
      }
    }
  }
  if (!validate_recursive_generic_cycle_in_expr(ctx, program, origin, expr->left, scope, context_bindings, context_binding_len, diag, depth, depth_limit)) return false;
  if (!validate_recursive_generic_cycle_in_expr(ctx, program, origin, expr->right, scope, context_bindings, context_binding_len, diag, depth, depth_limit)) return false;
  for (size_t i = 0; i < expr->args.len; i++) {
    if (!validate_recursive_generic_cycle_in_expr(ctx, program, origin, expr->args.items[i], scope, context_bindings, context_binding_len, diag, depth, depth_limit)) return false;
  }
  for (size_t i = 0; i < expr->fields.len; i++) {
    if (!validate_recursive_generic_cycle_in_expr(ctx, program, origin, expr->fields.items[i].value, scope, context_bindings, context_binding_len, diag, depth, depth_limit)) return false;
  }
  return true;
}

static bool validate_recursive_generic_cycle_in_function(CheckContext *ctx, const Program *program, const Function *origin, const Function *callee, GenericBinding *context_bindings, size_t context_binding_len, ZDiag *diag, size_t depth, size_t depth_limit) {
  diag = check_context_diag(ctx, diag);
  Scope scope = {0};
  recursive_generic_scope_add_function_bindings(program, callee, context_bindings, context_binding_len, &scope);
  bool ok = validate_recursive_generic_cycle_in_stmt_vec(ctx, program, origin, &callee->body, &scope, context_bindings, context_binding_len, diag, depth, depth_limit);
  scope_free(&scope);
  return ok;
}

static bool validate_recursive_generic_call_bindings(CheckContext *ctx, const Program *program, const Function *fun, const Expr *call, ZDiag *diag, GenericBinding *bindings, size_t binding_len) {
  diag = check_context_diag(ctx, diag);
  const Function *checking_function = ctx ? ctx->function : NULL;
  if (!checking_function || !function_is_generic(checking_function) || !function_is_generic(fun) || !call) return true;
  if (function_names_match(checking_function, fun)) {
    return recursive_generic_bindings_keep_origin_stable(checking_function, call, diag, bindings, binding_len);
  }
  if (!program || !recursive_generic_bindings_reference_origin(checking_function, bindings, binding_len)) return true;
  size_t depth_limit = program->functions.len + 1;
  return validate_recursive_generic_cycle_in_function(ctx, program, checking_function, fun, bindings, binding_len, diag, 1, depth_limit);
}

static bool is_static_int_param_type(const char *type) {
  return type && (strcmp(type, "usize") == 0 || strcmp(type, "isize") == 0 ||
                  strcmp(type, "u8") == 0 || strcmp(type, "u16") == 0 || strcmp(type, "u32") == 0 || strcmp(type, "u64") == 0 ||
                  strcmp(type, "i8") == 0 || strcmp(type, "i16") == 0 || strcmp(type, "i32") == 0 || strcmp(type, "i64") == 0);
}

static bool enum_decl_has_case(const EnumDecl *item_enum, const char *case_name) {
  if (!item_enum || !case_name) return false;
  for (size_t i = 0; i < item_enum->cases.len; i++) {
    if (strcmp(item_enum->cases.items[i].name, case_name) == 0) return true;
  }
  return false;
}

static const EnumDecl *static_enum_type(const Program *program, const char *type) {
  if (!program || !type) return NULL;
  for (size_t i = 0; i < program->enums.len; i++) {
    if (strcmp(program->enums.items[i].name, type) == 0) return &program->enums.items[i];
  }
  return NULL;
}

static bool is_static_value_param_type(const Program *program, const char *type) {
  return is_static_int_param_type(type) || (type && strcmp(type, "Bool") == 0) || static_enum_type(program, type) != NULL;
}

static const char *static_value_expected_label(const Program *program, const char *type) {
  if (is_static_int_param_type(type)) return "integer, integer const, or integer meta result";
  if (type && strcmp(type, "Bool") == 0) return "Bool literal, Bool const, or Bool meta result";
  if (static_enum_type(program, type)) return "enum case such as Mode.on or a const enum value";
  return "integer, Bool, or enum static value";
}

static bool integer_suffix_text(const char *text) {
  static const char *suffixes[] = {
    "i8", "i16", "i32", "i64", "isize",
    "u8", "u16", "u32", "u64", "usize",
    NULL,
  };
  for (size_t i = 0; suffixes[i]; i++) {
    if (strcmp(text, suffixes[i]) == 0) return true;
  }
  return false;
}

static bool parse_static_uint_text(const char *text, unsigned long long *out) {
  if (!text || !text[0]) return false;
  size_t text_len = strlen(text);
  size_t body_len = text_len;
  const char *last_underscore = strrchr(text, '_');
  if (last_underscore) {
    const char *candidate = last_underscore + 1;
    if (candidate[0] == 0) return false;
    if (integer_suffix_text(candidate)) {
      body_len = (size_t)(last_underscore - text);
    } else if (candidate[0] == 'i' || candidate[0] == 'u') {
      return false;
    }
  }
  if (body_len == 0) return false;
  unsigned radix = 10;
  size_t index = 0;
  if (body_len > 2 && text[0] == '0' && (text[1] == 'x' || text[1] == 'X')) {
    radix = 16;
    index = 2;
  } else if (body_len > 2 && text[0] == '0' && (text[1] == 'b' || text[1] == 'B')) {
    radix = 2;
    index = 2;
  } else if (body_len > 2 && text[0] == '0' && (text[1] == 'o' || text[1] == 'O')) {
    radix = 8;
    index = 2;
  }
  unsigned long long value = 0;
  bool saw_digit = false;
  bool previous_underscore = false;
  for (; index < body_len; index++) {
    char ch = text[index];
    if (ch == '_') {
      if (!saw_digit || previous_underscore) return false;
      previous_underscore = true;
      continue;
    }
    int digit = -1;
    if (ch >= '0' && ch <= '9') digit = ch - '0';
    else if (ch >= 'a' && ch <= 'f') digit = 10 + (ch - 'a');
    else if (ch >= 'A' && ch <= 'F') digit = 10 + (ch - 'A');
    if (digit < 0 || (unsigned)digit >= radix) return false;
    if (value > (ULLONG_MAX - (unsigned)digit) / radix) return false;
    value = value * radix + (unsigned)digit;
    saw_digit = true;
    previous_underscore = false;
  }
  if (!saw_digit || previous_underscore) return false;
  if (out) *out = value;
  return true;
}

static bool eval_meta_value(CheckContext *ctx, const Program *program, const Expr *expr, MetaValue *out, size_t depth, size_t *steps);
static bool static_value_from_expr(const Program *program, const Expr *expr, StaticValue *out, size_t depth);

static bool static_enum_value_from_text(const Program *program, const char *text, StaticValue *out) {
  if (!program || !text) return false;
  const char *dot = strchr(text, '.');
  if (!dot || dot == text || dot[1] == 0 || strchr(dot + 1, '.')) return false;
  char enum_type[64];
  char enum_case[64];
  snprintf(enum_type, sizeof(enum_type), "%.*s", (int)(dot - text), text);
  snprintf(enum_case, sizeof(enum_case), "%s", dot + 1);
  const EnumDecl *item_enum = static_enum_type(program, enum_type);
  if (!enum_decl_has_case(item_enum, enum_case)) return false;
  if (out) {
    *out = (StaticValue){.kind = STATIC_VALUE_ENUM};
    snprintf(out->enum_type, sizeof(out->enum_type), "%s", enum_type);
    snprintf(out->enum_case, sizeof(out->enum_case), "%s", enum_case);
  }
  return true;
}

static bool static_value_from_text(const Program *program, const char *text, StaticValue *out) {
  unsigned long long value = 0;
  if (parse_static_uint_text(text, &value)) {
    if (out) *out = (StaticValue){.kind = STATIC_VALUE_INTEGER, .number = value};
    return true;
  }
  if (text && (strcmp(text, "true") == 0 || strcmp(text, "false") == 0)) {
    if (out) *out = (StaticValue){.kind = STATIC_VALUE_BOOL, .boolean = strcmp(text, "true") == 0};
    return true;
  }
  if (static_enum_value_from_text(program, text, out)) return true;
  for (size_t i = 0; program && text && i < program->consts.len; i++) {
    if (strcmp(program->consts.items[i].name, text) == 0) {
      return static_value_from_expr(program, program->consts.items[i].expr, out, 0);
    }
  }
  return false;
}

static bool static_value_from_meta(const MetaValue *meta, StaticValue *out) {
  if (!meta) return false;
  if (meta->kind == META_VALUE_NUMBER) {
    if (out) *out = (StaticValue){.kind = STATIC_VALUE_INTEGER, .number = meta->number};
    return true;
  }
  if (meta->kind == META_VALUE_BOOL) {
    if (out) *out = (StaticValue){.kind = STATIC_VALUE_BOOL, .boolean = meta->boolean};
    return true;
  }
  return false;
}

static bool static_value_from_expr(const Program *program, const Expr *expr, StaticValue *out, size_t depth) {
  if (!expr || depth > 64) return false;
  if (expr->kind == EXPR_MEMBER && expr->left && expr->left->kind == EXPR_IDENT) {
    char text[128];
    snprintf(text, sizeof(text), "%s.%s", expr->left->text ? expr->left->text : "", expr->text ? expr->text : "");
    if (static_enum_value_from_text(program, text, out)) return true;
  }
  MetaValue meta = {0};
  size_t steps = 0;
  if (eval_meta_value(NULL, program, expr, &meta, depth, &steps) && static_value_from_meta(&meta, out)) return true;
  return false;
}

static bool static_value_matches_type(const Program *program, const StaticValue *value, const char *type) {
  if (!value) return false;
  if (is_static_int_param_type(type)) return value->kind == STATIC_VALUE_INTEGER;
  if (type && strcmp(type, "Bool") == 0) return value->kind == STATIC_VALUE_BOOL;
  const EnumDecl *item_enum = static_enum_type(program, type);
  return item_enum && value->kind == STATIC_VALUE_ENUM && strcmp(value->enum_type, type) == 0 && enum_decl_has_case(item_enum, value->enum_case);
}

static char *static_value_canonical_text(const StaticValue *value) {
  if (!value) return NULL;
  ZBuf buf;
  zbuf_init(&buf);
  if (value->kind == STATIC_VALUE_INTEGER) zbuf_appendf(&buf, "%llu", value->number);
  else if (value->kind == STATIC_VALUE_BOOL) zbuf_append(&buf, value->boolean ? "true" : "false");
  else if (value->kind == STATIC_VALUE_ENUM) zbuf_appendf(&buf, "%s.%s", value->enum_type, value->enum_case);
  else {
    zbuf_free(&buf);
    return NULL;
  }
  return buf.data;
}

static char *canonical_static_arg(const Program *program, const char *text) {
  StaticValue value = {0};
  if (!static_value_from_text(program, text, &value)) return NULL;
  return static_value_canonical_text(&value);
}

static char *canonical_static_arg_for_type(const Program *program, const char *text, const char *type) {
  StaticValue value = {0};
  if (!static_value_from_text(program, text, &value) || !static_value_matches_type(program, &value, type)) return NULL;
  return static_value_canonical_text(&value);
}

static bool scope_static_param_type(Scope *scope, const char *name, const char **out_type) {
  if (!scope || !name) return false;
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    for (size_t i = 0; i < cursor->len; i++) {
      if (!cursor->is_static_param || !cursor->is_static_param[i]) continue;
      if (!cursor->names[i] || strcmp(cursor->names[i], name) != 0) continue;
      if (out_type) *out_type = cursor->types[i] ? cursor->types[i] : "usize";
      return true;
    }
  }
  return false;
}

static char *canonical_static_arg_for_type_in_scope(const Program *program, Scope *scope, const char *text, const char *type) {
  const char *actual_type = NULL;
  if (scope_static_param_type(scope, text, &actual_type)) {
    if (!types_compatible(program, type ? type : "usize", actual_type ? actual_type : "usize")) return NULL;
    return z_strdup(text);
  }
  if (scope_type_name_shadows_static_const(scope, text)) return NULL;
  return canonical_static_arg_for_type(program, text, type);
}

static bool normalize_static_bindings(const Program *program, const Function *fun, Scope *scope, const Expr *call, ZDiag *diag, GenericBinding *bindings, size_t binding_len) {
  if (!function_is_generic(fun)) return true;
  for (size_t i = 0; i < fun->type_params.len && i < binding_len; i++) {
    const Param *param = &fun->type_params.items[i];
    if (!param->is_static) continue;
    if (!is_static_value_param_type(program, param->type)) {
      return set_diag_detail(diag, 3043, "static value parameter type is not supported", param->line, param->column, "integer, Bool, or enum static parameter", param->type ? param->type : "Unknown", "use a concrete integer, Bool, or enum type for this static parameter");
    }
    char *canonical = canonical_static_arg_for_type_in_scope(program, scope, bindings[i].type, param->type);
    if (!canonical) {
      return set_diag_detail(diag, 3044, "static value argument must be deterministic and concrete", call ? call->line : param->line, call ? call->column : param->column, static_value_expected_label(program, param->type), bindings[i].type ? bindings[i].type : "Unknown", "pass an explicit literal, top-level const, or supported meta value with the static parameter type");
    }
    free(bindings[i].type);
    bindings[i].type = canonical;
  }
  return true;
}

static bool validate_interface_method_generic_params(const Program *program, const InterfaceDecl *interface, GenericBinding *interface_bindings, size_t interface_binding_len, const Function *required, const Function *method, ZDiag *diag) {
  if (!required || !method) return true;
  if (method->type_params.len != required->type_params.len) {
    char expected[128];
    char actual[128];
    snprintf(expected, sizeof(expected), "%zu generic parameter(s)", required->type_params.len);
    snprintf(actual, sizeof(actual), "%zu generic parameter(s)", method->type_params.len);
    char message[256];
    snprintf(message, sizeof(message), "interface method '%s.%s' generic parameter count does not match shape method", interface ? interface->name : "interface", required->name ? required->name : "method");
    return set_diag_detail(diag, 3040, message, method->line, method->column, expected, actual, "update the shape method generic parameter list to match the interface method");
  }
  for (size_t i = 0; i < required->type_params.len; i++) {
    const Param *expected_param = &required->type_params.items[i];
    const Param *actual_param = &method->type_params.items[i];
    if (expected_param->is_static != actual_param->is_static) {
      char message[256];
      snprintf(message, sizeof(message), "interface method '%s.%s' generic parameter %zu kind does not match shape method", interface ? interface->name : "interface", required->name ? required->name : "method", i + 1);
      return set_diag_detail(diag, 3042, message, actual_param->line, actual_param->column, expected_param->is_static ? "static generic parameter" : "type generic parameter", actual_param->is_static ? "static generic parameter" : "type generic parameter", "use matching generic parameter kinds in the shape method implementation");
    }
    if (!expected_param->is_static) {
      char *expected_constraint = type_substitute_interface_method_signature(program, expected_param->type ? expected_param->type : "Type", interface_bindings, interface_binding_len, required, method);
      const char *actual_constraint = actual_param->type ? actual_param->type : "Type";
      bool constraints_match = types_compatible(program, expected_constraint, actual_constraint);
      if (!constraints_match) {
        char message[256];
        snprintf(message, sizeof(message), "interface method '%s.%s' generic parameter %zu constraint does not match shape method", interface ? interface->name : "interface", required->name ? required->name : "method", i + 1);
        bool diag_ok = set_diag_detail(diag, 3042, message, actual_param->line, actual_param->column, expected_constraint, actual_constraint, "use the same generic parameter constraint as the interface method");
        free(expected_constraint);
        return diag_ok;
      }
      free(expected_constraint);
      continue;
    }
    const char *expected_type = expected_param->type ? expected_param->type : "usize";
    const char *actual_type = actual_param->type ? actual_param->type : "usize";
    if (!types_compatible(program, expected_type, actual_type)) {
      char message[256];
      snprintf(message, sizeof(message), "interface method '%s.%s' static generic parameter %zu type does not match shape method", interface ? interface->name : "interface", required->name ? required->name : "method", i + 1);
      return set_diag_detail(diag, 3042, message, actual_param->line, actual_param->column, expected_type, actual_type, "use the same static value parameter type as the interface method");
    }
  }
  return true;
}

static char *type_substitute_interface_method_signature(const Program *program, const char *type, GenericBinding *interface_bindings, size_t interface_binding_len, const Function *required, const Function *method) {
  GenericBinding *first_pass_bindings = interface_bindings;
  size_t first_pass_len = interface_binding_len;
  if (required && method && required->type_params.len > 0) {
    first_pass_len = interface_binding_len + required->type_params.len;
    first_pass_bindings = z_checked_calloc(first_pass_len, sizeof(GenericBinding));
    for (size_t i = 0; i < interface_binding_len; i++) {
      first_pass_bindings[i] = interface_bindings[i];
      first_pass_bindings[i].type = z_strdup(interface_bindings[i].type);
    }
    for (size_t i = 0; i < required->type_params.len; i++) {
      size_t index = interface_binding_len + i;
      generic_binding_init_from_param(&first_pass_bindings[index], &required->type_params.items[i]);
      first_pass_bindings[index].type = z_strdup(required->type_params.items[i].name);
    }
  }
  char *with_interface = type_substitute_generic_signature(program, type, first_pass_bindings, first_pass_len);
  if (first_pass_bindings != interface_bindings) {
    generic_bindings_free(first_pass_bindings, first_pass_len);
    free(first_pass_bindings);
  }
  if (!required || !method || required->type_params.len == 0) return with_interface;
  GenericBinding *method_bindings = z_checked_calloc(required->type_params.len, sizeof(GenericBinding));
  for (size_t i = 0; i < required->type_params.len; i++) {
    generic_binding_init_from_param(&method_bindings[i], &required->type_params.items[i]);
    method_bindings[i].type = z_strdup(method->type_params.items[i].name);
  }
  char *substituted = type_substitute_generic_signature(program, with_interface, method_bindings, required->type_params.len);
  free(with_interface);
  generic_bindings_free(method_bindings, required->type_params.len);
  free(method_bindings);
  return substituted;
}

static GenericBinding *shape_interface_method_signature_bindings(const Program *program, const Shape *shape, const char *actual_type, const Function *method, size_t *out_len) {
  size_t shape_len = shape ? shape->type_params.len : 0;
  size_t method_len = method ? method->type_params.len : 0;
  size_t len = 1 + shape_len + method_len;
  GenericBinding *bindings = z_checked_calloc(len, sizeof(GenericBinding));
  bindings[0].name = "Self";
  bindings[0].type = z_strdup(actual_type ? actual_type : (shape ? shape->name : "Unknown"));

  char **shape_args = NULL;
  size_t shape_arg_len = 0;
  bool has_shape_args = shape && shape_len > 0 && actual_type && type_generic_arg_list(resolve_alias_type(program, actual_type), shape->name, &shape_args, &shape_arg_len) && shape_arg_len == shape_len;
  for (size_t i = 0; i < shape_len; i++) {
    generic_binding_init_from_param(&bindings[i + 1], &shape->type_params.items[i]);
    bindings[i + 1].type = z_strdup(has_shape_args ? shape_args[i] : shape->type_params.items[i].name);
  }
  free_type_arg_list(shape_args, shape_arg_len);

  size_t method_offset = 1 + shape_len;
  for (size_t i = 0; i < method_len; i++) {
    generic_binding_init_from_param(&bindings[method_offset + i], &method->type_params.items[i]);
    bindings[method_offset + i].type = z_strdup(method->type_params.items[i].name);
  }
  if (out_len) *out_len = len;
  return bindings;
}

static bool generic_binding_is_self_alias(const GenericBinding *binding) {
  return binding && binding->name && binding->type && strcmp(binding->name, binding->type) == 0;
}

static size_t append_type_core_substitution_binders_from(GenericBinding *bindings, size_t binding_len, ZTypeBinderDecl *decls, size_t len, ZTypeBinderId first_id) {
  if (!decls) return len;
  for (size_t i = 0; i < binding_len; i++) {
    if (!bindings || !bindings[i].name) continue;
    decls[len++] = (ZTypeBinderDecl){
      .name = bindings[i].name,
      .kind = bindings[i].is_static ? Z_TYPE_BINDER_STATIC : Z_TYPE_BINDER_TYPE,
      .id = (ZTypeBinderId)(first_id + i),
      .static_type = bindings[i].is_static ? static_type_or_usize(bindings[i].static_type) : NULL,
    };
  }
  return len;
}

static size_t append_type_core_substitution_binders(GenericBinding *bindings, size_t binding_len, ZTypeBinderDecl *decls, size_t len) {
  return append_type_core_substitution_binders_from(bindings, binding_len, decls, len, 1);
}

static void type_core_substitution_source_scope(const Program *program, GenericBinding *bindings, size_t binding_len, ZTypeBinderDecl *decls, ZTypeBinderScope *scope) {
  if (scope) *scope = (ZTypeBinderScope){0};
  if (!decls || !scope) return;
  size_t len = append_type_core_substitution_binders(bindings, binding_len, decls, 0);
  len = append_type_core_static_const_binders(program, NULL, decls, len, (ZTypeBinderId)(binding_len + 1), false);
  *scope = (ZTypeBinderScope){.items = decls, .len = len, .arg_kind = type_core_generic_arg_kind_for_program, .arg_kind_context = program};
}

static void type_core_substitution_binding_scope(const Program *program, GenericBinding *bindings, size_t binding_len, ZTypeBinderDecl *decls, ZTypeBinderScope *scope) {
  if (scope) *scope = (ZTypeBinderScope){0};
  if (!decls || !scope) return;
  size_t len = append_type_core_substitution_binders(bindings, binding_len, decls, 0);
  // Binding values come from the caller context; importing top-level const binders here
  // would collapse open static args that intentionally shadow const names.
  *scope = (ZTypeBinderScope){.items = decls, .len = len, .arg_kind = type_core_generic_arg_kind_for_program, .arg_kind_context = program};
}

static bool seed_type_core_substitution_bindings(ZTypeArena *arena, const ZTypeBinderScope *binding_scope, GenericBinding *bindings, size_t binding_len, ZUnifyTrace *trace) {
  if (!arena || !trace) return false;
  for (size_t i = 0; i < binding_len; i++) {
    if (!bindings || !bindings[i].name || !bindings[i].type || generic_binding_is_self_alias(&bindings[i])) continue;
    ZUnifyBinding *binding = checker_unify_trace_push(trace);
    if (!binding) return false;
    binding->binder = (ZTypeBinderId)(i + 1);
    binding->kind = bindings[i].is_static ? Z_UNIFY_BINDING_STATIC : Z_UNIFY_BINDING_TYPE;
    binding->name = z_strdup(bindings[i].name);
    ZTypeParseError error = {0};
    if (bindings[i].is_static) {
      if (!z_static_value_parse_with_binders(bindings[i].type, binding_scope, &binding->static_value, &error)) return false;
    } else if (!z_type_parse_with_binders(arena, bindings[i].type, binding_scope, &binding->type, &error)) {
      return false;
    }
  }
  return true;
}

static char *type_substitute_generic_signature_inner(const Program *program, const char *type, GenericBinding *bindings, size_t binding_len, bool open_binding_values) {
  if (!type) return z_strdup("Unknown");
  size_t max_binders = binding_len + type_core_static_const_binder_count(program);
  ZTypeBinderDecl *decls = z_checked_calloc(max_binders ? max_binders : 1, sizeof(ZTypeBinderDecl));
  ZTypeBinderDecl *binding_decls = z_checked_calloc(binding_len ? binding_len : 1, sizeof(ZTypeBinderDecl));
  ZTypeBinderScope source_scope = {0};
  ZTypeBinderScope binding_scope = {0};
  type_core_substitution_source_scope(program, bindings, binding_len, decls, &source_scope);
  if (open_binding_values) {
    // Recursive generic analysis may bind a callee parameter to an origin parameter
    // with the same text name; give binding values distinct IDs so growth stays visible.
    ZTypeBinderId first_open_id = (ZTypeBinderId)(binding_len + type_core_static_const_binder_count(program) + 1);
    size_t len = append_type_core_substitution_binders_from(bindings, binding_len, binding_decls, 0, first_open_id);
    binding_scope = (ZTypeBinderScope){.items = binding_decls, .len = len, .arg_kind = type_core_generic_arg_kind_for_program, .arg_kind_context = program};
  } else {
    type_core_substitution_binding_scope(program, bindings, binding_len, binding_decls, &binding_scope);
  }

  ZTypeArena arena;
  z_type_arena_init(&arena);
  ZUnifyTrace trace;
  z_unify_trace_init(&trace);
  ZTypeParseError error = {0};
  ZTypeId source = Z_TYPE_ID_INVALID;
  ZTypeId substituted = Z_TYPE_ID_INVALID;
  char *result = NULL;
  bool ok = seed_type_core_static_const_bindings(program, &source_scope, (ZTypeBinderId)(binding_len + 1), &trace) &&
            seed_type_core_substitution_bindings(&arena, &binding_scope, bindings, binding_len, &trace) &&
            z_type_parse_with_binders(&arena, type, &source_scope, &source, &error) &&
            z_type_substitute(&arena, source, &trace, &substituted);
  if (ok) result = z_type_format(&arena, substituted);
  z_unify_trace_free(&trace);
  z_type_arena_free(&arena);
  free(binding_decls);
  free(decls);
  return result ? result : z_strdup("Unknown");
}

static char *type_substitute_generic_signature(const Program *program, const char *type, GenericBinding *bindings, size_t binding_len) {
  return type_substitute_generic_signature_inner(program, type, bindings, binding_len, false);
}

static char *type_substitute_generic_signature_open_bindings(const Program *program, const char *type, GenericBinding *bindings, size_t binding_len) {
  return type_substitute_generic_signature_inner(program, type, bindings, binding_len, true);
}

static char *type_substitute_static_arg_signature(const Program *program, const char *text, GenericBinding *bindings, size_t binding_len) {
  if (!text) return z_strdup("Unknown");
  size_t max_binders = binding_len + type_core_static_const_binder_count(program);
  ZTypeBinderDecl *decls = z_checked_calloc(max_binders ? max_binders : 1, sizeof(ZTypeBinderDecl));
  ZTypeBinderDecl *binding_decls = z_checked_calloc(binding_len ? binding_len : 1, sizeof(ZTypeBinderDecl));
  ZTypeBinderScope source_scope = {0};
  ZTypeBinderScope binding_scope = {0};
  type_core_substitution_source_scope(program, bindings, binding_len, decls, &source_scope);
  type_core_substitution_binding_scope(program, bindings, binding_len, binding_decls, &binding_scope);

  ZBuf wrapped;
  zbuf_init(&wrapped);
  zbuf_append_char(&wrapped, '[');
  zbuf_append(&wrapped, text);
  zbuf_append(&wrapped, "]u8");

  ZTypeArena arena;
  z_type_arena_init(&arena);
  ZUnifyTrace trace;
  z_unify_trace_init(&trace);
  ZTypeParseError error = {0};
  ZTypeId source = Z_TYPE_ID_INVALID;
  ZTypeId substituted = Z_TYPE_ID_INVALID;
  char *result = NULL;
  bool ok = seed_type_core_static_const_bindings(program, &source_scope, (ZTypeBinderId)(binding_len + 1), &trace) &&
            seed_type_core_substitution_bindings(&arena, &binding_scope, bindings, binding_len, &trace) &&
            z_type_parse_with_binders(&arena, wrapped.data, &source_scope, &source, &error) &&
            z_type_substitute(&arena, source, &trace, &substituted);
  if (ok && z_type_kind(&arena, substituted) == Z_TYPE_NODE_ARRAY) {
    result = z_static_value_format(z_type_array_length(&arena, substituted));
  }
  z_unify_trace_free(&trace);
  z_type_arena_free(&arena);
  zbuf_free(&wrapped);
  free(binding_decls);
  free(decls);
  return result ? result : z_strdup("Unknown");
}

static const char *expr_resolved_type_for_current_context(const CheckContext *ctx, const Expr *expr) {
  if (!expr || !expr->resolved_type) return NULL;
  if (ctx && ctx->return_provenance_expr_bindings && ctx->return_provenance_expr_binding_len > 0) {
    static char substituted_type[256];
    char *substituted = type_substitute_generic_signature(ctx->program, expr->resolved_type, ctx->return_provenance_expr_bindings, ctx->return_provenance_expr_binding_len);
    snprintf(substituted_type, sizeof(substituted_type), "%s", substituted ? substituted : "Unknown");
    free(substituted);
    return substituted_type;
  }
  return expr->resolved_type;
}

static char *provenance_context_type_text(const CheckContext *ctx, const Program *program, const char *type, GenericBinding *bindings, size_t binding_len) {
  const Program *substitution_program = program ? program : (ctx ? ctx->program : NULL);
  if (bindings && binding_len > 0) return type_substitute_generic_signature(substitution_program, type, bindings, binding_len);
  if (ctx && ctx->return_provenance_expr_bindings && ctx->return_provenance_expr_binding_len > 0) {
    return type_substitute_generic_signature(substitution_program, type, ctx->return_provenance_expr_bindings, ctx->return_provenance_expr_binding_len);
  }
  return z_strdup(type ? type : "Unknown");
}

static void provenance_context_substitute_bindings(const CheckContext *ctx, const Program *program, GenericBinding *bindings, size_t binding_len, GenericBinding *context_bindings, size_t context_binding_len) {
  if (!bindings || binding_len == 0) return;
  GenericBinding *source_bindings = context_bindings;
  size_t source_len = context_binding_len;
  const Program *substitution_program = program ? program : (ctx ? ctx->program : NULL);
  if ((!source_bindings || source_len == 0) && ctx && ctx->return_provenance_expr_bindings && ctx->return_provenance_expr_binding_len > 0) {
    source_bindings = ctx->return_provenance_expr_bindings;
    source_len = ctx->return_provenance_expr_binding_len;
  }
  if (!source_bindings || source_len == 0) return;
  for (size_t i = 0; i < binding_len; i++) {
    if (!bindings[i].type) continue;
    char *substituted = type_substitute_generic_signature(substitution_program, bindings[i].type, source_bindings, source_len);
    free(bindings[i].type);
    bindings[i].type = substituted;
  }
}

static bool type_pattern_references_any_generic_param(const Function *fun, const char *pattern) {
  if (!function_is_generic(fun) || !pattern) return false;
  for (size_t i = 0; i < fun->type_params.len; i++) {
    if (type_text_references_name(pattern, fun->type_params.items[i].name)) return true;
  }
  return false;
}

static bool type_core_binder_decl_name_exists(const ZTypeBinderDecl *decls, size_t len, const char *name) {
  if (!decls || !name) return false;
  for (size_t i = 0; i < len; i++) {
    if (decls[i].name && strcmp(decls[i].name, name) == 0) return true;
  }
  return false;
}

static bool scope_type_name_shadows_static_const(Scope *scope, const char *name) {
  if (!scope || !name) return false;
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    for (size_t i = 0; i < cursor->len; i++) {
      if (!cursor->names[i] || strcmp(cursor->names[i], name) != 0) continue;
      if (cursor->is_type_param && cursor->is_type_param[i]) return true;
    }
  }
  return false;
}

static bool static_const_name_is_ambiguous_type_arg(const Program *program, const char *name) {
  return visible_concrete_type_name_kind(program, name) != NULL;
}

static const char *type_core_static_const_type_compute(const Program *program, const ConstDecl *item) {
  if (!program || !item || !item->name) return NULL;
  StaticValue value = {0};
  if (!static_value_from_text(program, item->name, &value)) return NULL;
  if (item->type) {
    if (!is_static_value_param_type(program, item->type)) return NULL;
    return static_value_matches_type(program, &value, item->type) ? item->type : NULL;
  }
  if (value.kind == STATIC_VALUE_INTEGER) return "usize";
  if (value.kind == STATIC_VALUE_BOOL) return "Bool";
  if (value.kind == STATIC_VALUE_ENUM) {
    const EnumDecl *item_enum = static_enum_type(program, value.enum_type);
    return item_enum ? item_enum->name : NULL;
  }
  return NULL;
}

/*
 * Static const classification evaluates the const initializer expression, and
 * generic signature substitution asks for it for every program const at every
 * call site. The program is immutable while it is being checked, so the
 * answers are memoized per const slot and reset when a different program (or
 * a resized const table) shows up, mirroring the provenance summary cache
 * contract. Returned type texts point at the const declaration or at string
 * literals, both stable for the cached program.
 */
static const Program *static_const_type_cache_program;
static size_t static_const_type_cache_len;
static const char **static_const_type_cache_types;
static unsigned char *static_const_type_cache_set;
static char **static_const_type_cache_canonical;
static unsigned char *static_const_type_cache_canonical_set;

static void static_const_type_cache_prime(const Program *program) {
  if (program == static_const_type_cache_program && program->consts.len == static_const_type_cache_len) return;
  free(static_const_type_cache_types);
  free(static_const_type_cache_set);
  for (size_t i = 0; static_const_type_cache_canonical && i < static_const_type_cache_len; i++) free(static_const_type_cache_canonical[i]);
  free(static_const_type_cache_canonical);
  free(static_const_type_cache_canonical_set);
  static_const_type_cache_len = program->consts.len;
  size_t slots = static_const_type_cache_len ? static_const_type_cache_len : 1;
  static_const_type_cache_types = z_checked_calloc(slots, sizeof(const char *));
  static_const_type_cache_set = z_checked_calloc(slots, sizeof(unsigned char));
  static_const_type_cache_canonical = z_checked_calloc(slots, sizeof(char *));
  static_const_type_cache_canonical_set = z_checked_calloc(slots, sizeof(unsigned char));
  static_const_type_cache_program = program;
}

static const char *type_core_static_const_type(const Program *program, const ConstDecl *item) {
  if (!program || !item || !item->name) return NULL;
  static_const_type_cache_prime(program);
  if (item < program->consts.items || item >= program->consts.items + program->consts.len) {
    return type_core_static_const_type_compute(program, item);
  }
  size_t index = (size_t)(item - program->consts.items);
  if (!static_const_type_cache_set[index]) {
    static_const_type_cache_types[index] = type_core_static_const_type_compute(program, item);
    static_const_type_cache_set[index] = 1;
  }
  return static_const_type_cache_types[index];
}

/*
 * Canonical static argument text for a const binder, memoized per const slot
 * keyed by the binder name and its classified static type. The memoized
 * value is the result of the full ordered canonical_static_arg_for_type
 * lookup, so name resolution order is unchanged; queries for other types or
 * names that match no const fall through to the uncached path.
 */
static char *canonical_static_arg_for_type_cached(const Program *program, const char *name, const char *type) {
  if (program && name && type) {
    static_const_type_cache_prime(program);
    for (size_t i = 0; i < program->consts.len; i++) {
      const ConstDecl *item = &program->consts.items[i];
      if (!item->name || strcmp(item->name, name) != 0) continue;
      const char *classified = type_core_static_const_type(program, item);
      if (!classified || strcmp(classified, type) != 0) break;
      if (!static_const_type_cache_canonical_set[i]) {
        static_const_type_cache_canonical[i] = canonical_static_arg_for_type(program, name, type);
        static_const_type_cache_canonical_set[i] = 1;
      }
      return static_const_type_cache_canonical[i] ? z_strdup(static_const_type_cache_canonical[i]) : NULL;
    }
  }
  return canonical_static_arg_for_type(program, name, type);
}

static bool program_has_ambiguous_type_arg_static_consts(const Program *program) {
  for (size_t i = 0; program && i < program->consts.len; i++) {
    const ConstDecl *item = &program->consts.items[i];
    if (!type_core_static_const_type(program, item)) continue;
    if (static_const_name_is_ambiguous_type_arg(program, item->name)) return true;
  }
  return false;
}

static size_t append_type_core_static_const_binders(const Program *program, Scope *shadow_scope, ZTypeBinderDecl *decls, size_t len, ZTypeBinderId first_id, bool omit_ambiguous_type_args) {
  size_t ordinal = 0;
  for (size_t i = 0; program && i < program->consts.len; i++) {
    const ConstDecl *item = &program->consts.items[i];
    const char *static_type = type_core_static_const_type(program, item);
    if (!static_type) continue;
    ZTypeBinderId id = (ZTypeBinderId)(first_id + ordinal);
    ordinal++;
    if (type_core_binder_decl_name_exists(decls, len, item->name)) continue;
    if (scope_type_name_shadows_static_const(shadow_scope, item->name)) continue;
    if (omit_ambiguous_type_args && static_const_name_is_ambiguous_type_arg(program, item->name)) continue;
    decls[len++] = (ZTypeBinderDecl){
      .name = item->name,
      .kind = Z_TYPE_BINDER_STATIC,
      .id = id,
      .static_type = static_type,
    };
  }
  return len;
}

static size_t type_core_static_const_binder_count(const Program *program) {
  size_t len = 0;
  for (size_t i = 0; program && i < program->consts.len; i++) {
    if (type_core_static_const_type(program, &program->consts.items[i])) len++;
  }
  return len;
}

static size_t append_type_core_scope_static_param_binders(Scope *scope, ZTypeBinderDecl *decls, size_t len, ZTypeBinderId first_id) {
  size_t added = 0;
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    for (size_t i = 0; i < cursor->len; i++) {
      if (!cursor->is_static_param || !cursor->is_static_param[i] || !cursor->names[i]) continue;
      bool duplicate = false;
      for (size_t j = 0; j < len; j++) {
        if (decls[j].name && strcmp(decls[j].name, cursor->names[i]) == 0) {
          duplicate = true;
          break;
        }
      }
      if (duplicate) continue;
      decls[len++] = (ZTypeBinderDecl){
        .name = cursor->names[i],
        .kind = Z_TYPE_BINDER_STATIC,
        .id = (ZTypeBinderId)(first_id + added),
        .static_type = cursor->types[i] ? cursor->types[i] : "usize",
      };
      added++;
    }
  }
  return len;
}

static void function_type_pattern_binder_scope(const Program *program, const Function *fun, ZTypeBinderDecl *decls, ZTypeBinderScope *scope, bool omit_ambiguous_type_args) {
  if (scope) *scope = (ZTypeBinderScope){0};
  if (!function_is_generic(fun) || !decls || !scope) return;
  for (size_t i = 0; i < fun->type_params.len; i++) {
    const Param *param = &fun->type_params.items[i];
    decls[i] = (ZTypeBinderDecl){
      .name = param->name,
      .kind = param->is_static ? Z_TYPE_BINDER_STATIC : Z_TYPE_BINDER_TYPE,
      .id = (ZTypeBinderId)(i + 1),
      .static_type = param->is_static ? (param->type ? param->type : "usize") : NULL,
    };
  }
  size_t len = fun->type_params.len;
  len = append_type_core_static_const_binders(program, NULL, decls, len, (ZTypeBinderId)(fun->type_params.len + 1), omit_ambiguous_type_args);
  *scope = (ZTypeBinderScope){.items = decls, .len = len, .arg_kind = type_core_generic_arg_kind_for_program, .arg_kind_context = program};
}

static void function_type_actual_binder_scope(const Program *program, const Function *fun, Scope *actual_scope, ZTypeBinderDecl *decls, ZTypeBinderScope *scope, bool omit_ambiguous_type_args) {
  if (scope) *scope = (ZTypeBinderScope){0};
  if (!function_is_generic(fun) || !decls || !scope) return;
  ZTypeBinderId const_id = (ZTypeBinderId)(fun->type_params.len + 1);
  size_t const_count = type_core_static_const_binder_count(program);
  size_t len = append_type_core_scope_static_param_binders(actual_scope, decls, 0, (ZTypeBinderId)(const_id + const_count));
  len = append_type_core_static_const_binders(program, actual_scope, decls, len, const_id, omit_ambiguous_type_args);
  *scope = (ZTypeBinderScope){.items = decls, .len = len, .arg_kind = type_core_generic_arg_kind_for_program, .arg_kind_context = program};
}

static char *unify_binding_text(const ZTypeArena *arena, const ZUnifyBinding *binding) {
  if (!binding) return NULL;
  if (binding->kind == Z_UNIFY_BINDING_STATIC) return z_static_value_format(&binding->static_value);
  return z_type_format(arena, binding->type);
}

static bool apply_unify_trace_to_generic_bindings(const Program *program, const Function *fun, Scope *scope, const ZTypeArena *arena, const ZUnifyTrace *trace, GenericBinding *bindings, size_t binding_len) {
  if (!function_is_generic(fun)) return true;
  for (size_t i = 0; i < fun->type_params.len && i < binding_len; i++) {
    const Param *param = &fun->type_params.items[i];
    ZUnifyBindingKind kind = param->is_static ? Z_UNIFY_BINDING_STATIC : Z_UNIFY_BINDING_TYPE;
    const ZUnifyBinding *binding = z_unify_trace_lookup(trace, (ZTypeBinderId)(i + 1), kind);
    if (!binding) continue;
    char *value = unify_binding_text(arena, binding);
    bool ok = value && generic_binding_set_with_static_context(program, scope, param->is_static ? (param->type ? param->type : "usize") : NULL, bindings, binding_len, param->name, value);
    free(value);
    if (!ok) return false;
  }
  return true;
}

static ZUnifyBinding *checker_unify_trace_push(ZUnifyTrace *trace) {
  if (!trace) return NULL;
  if (trace->len + 1 > trace->cap) {
    size_t next = trace->cap ? trace->cap * 2 : 8;
    trace->items = z_checked_reallocarray(trace->items, next, sizeof(ZUnifyBinding));
    trace->cap = next;
  }
  trace->items[trace->len] = (ZUnifyBinding){0};
  return &trace->items[trace->len++];
}

static bool seed_type_core_static_const_bindings(const Program *program, const ZTypeBinderScope *scope, ZTypeBinderId first_const_id, ZUnifyTrace *trace) {
  if (!program || !scope || !trace) return true;
  if (scope->len == 0) return true;
  if (!trace->items) {
    trace->items = z_checked_calloc(scope->len, sizeof(ZUnifyBinding));
    trace->cap = scope->len;
  }
  for (size_t i = 0; i < scope->len; i++) {
    const ZTypeBinderDecl *decl = &scope->items[i];
    if (decl->kind != Z_TYPE_BINDER_STATIC) continue;
    if (decl->id < first_const_id) continue;
    char *canonical = canonical_static_arg_for_type_cached(program, decl->name, decl->static_type);
    if (!canonical) continue;
    ZStaticValue value = {0};
    ZTypeParseError error = {0};
    bool ok = z_static_value_parse(canonical, &value, &error);
    free(canonical);
    if (!ok) continue;
    ZUnifyBinding *binding = checker_unify_trace_push(trace);
    if (!binding) return false;
    binding->binder = decl->id;
    binding->kind = Z_UNIFY_BINDING_STATIC;
    binding->name = z_strdup(decl->name);
    binding->static_value = value;
  }
  return true;
}

static bool infer_generic_type_from_pattern_type_core_attempt(const Program *program, const Function *fun, Scope *actual_scope, const char *pattern, const char *actual, GenericBinding *bindings, size_t binding_len, bool omit_ambiguous_type_args) {
  if (!pattern || !actual) return true;
  if (!type_pattern_references_any_generic_param(fun, pattern)) return true;
  size_t max_binders = fun->type_params.len + (program ? program->consts.len : 0);
  for (Scope *cursor = actual_scope; cursor; cursor = cursor->parent) max_binders += cursor->len;
  ZTypeBinderDecl *pattern_decls = z_checked_calloc(max_binders ? max_binders : 1, sizeof(ZTypeBinderDecl));
  ZTypeBinderDecl *actual_decls = z_checked_calloc(max_binders ? max_binders : 1, sizeof(ZTypeBinderDecl));
  ZTypeBinderScope pattern_scope = {0};
  ZTypeBinderScope actual_type_scope = {0};
  function_type_pattern_binder_scope(program, fun, pattern_decls, &pattern_scope, omit_ambiguous_type_args);
  function_type_actual_binder_scope(program, fun, actual_scope, actual_decls, &actual_type_scope, omit_ambiguous_type_args);

  ZTypeArena arena;
  z_type_arena_init(&arena);
  ZUnifyTrace trace;
  z_unify_trace_init(&trace);
  seed_type_core_static_const_bindings(program, &pattern_scope, (ZTypeBinderId)(fun->type_params.len + 1), &trace);
  ZTypeParseError error = {0};
  ZTypeId pattern_type = Z_TYPE_ID_INVALID;
  ZTypeId actual_type = Z_TYPE_ID_INVALID;
  bool ok = z_type_parse_with_binders(&arena, pattern, &pattern_scope, &pattern_type, &error) &&
            z_type_parse_with_binders(&arena, actual, &actual_type_scope, &actual_type, &error) &&
            z_type_unify(&arena, pattern_type, actual_type, &trace) &&
            apply_unify_trace_to_generic_bindings(program, fun, actual_scope, &arena, &trace, bindings, binding_len);
  z_unify_trace_free(&trace);
  z_type_arena_free(&arena);
  free(actual_decls);
  free(pattern_decls);
  return ok;
}

static bool infer_generic_type_from_pattern_type_core(const Program *program, const Function *fun, Scope *actual_scope, const char *pattern, const char *actual, GenericBinding *bindings, size_t binding_len) {
  bool may_retry = program_has_ambiguous_type_arg_static_consts(program);
  char **snapshot = may_retry ? generic_binding_type_snapshot(bindings, binding_len) : NULL;
  bool ok = infer_generic_type_from_pattern_type_core_attempt(program, fun, actual_scope, pattern, actual, bindings, binding_len, false);
  if (ok || !may_retry) {
    generic_binding_type_snapshot_free(snapshot, binding_len);
    return ok;
  }
  generic_binding_type_snapshot_restore(bindings, binding_len, snapshot);
  ok = infer_generic_type_from_pattern_type_core_attempt(program, fun, actual_scope, pattern, actual, bindings, binding_len, true);
  if (!ok) generic_binding_type_snapshot_restore(bindings, binding_len, snapshot);
  generic_binding_type_snapshot_free(snapshot, binding_len);
  return ok;
}

static bool infer_generic_type_from_pattern(const Program *program, const Function *fun, Scope *actual_scope, const char *pattern, const char *actual, GenericBinding *bindings, size_t binding_len) {
  return infer_generic_type_from_pattern_type_core(program, fun, actual_scope, pattern, actual, bindings, binding_len);
}

static bool build_generic_bindings(CheckContext *ctx, const Program *program, const Function *fun, const Expr *call, Scope *scope, ZDiag *diag, GenericBinding *bindings, size_t binding_len, const char *expected_return) {
  diag = check_context_diag(ctx, diag);
  if (!function_is_generic(fun)) return true;
  const TypeArgVec *type_args = call_type_args(call);
  if (type_args && type_args->len > 0) {
    if (type_args->len != fun->type_params.len) {
      return set_diag_detail(diag, 3032, "generic call type argument count mismatch", call->line, call->column, "one type argument per generic parameter", "wrong generic argument count", "pass explicit type arguments matching the function declaration");
    }
    for (size_t i = 0; i < fun->type_params.len; i++) bindings[i].type = z_strdup(type_args->items[i].type);
    return normalize_static_bindings(program, fun, scope, call, diag, bindings, binding_len);
  }
  for (size_t i = 0; i < fun->params.len && i < call->args.len; i++) {
    const char *actual = expr_type(ctx, program, call->args.items[i], scope);
    if (!infer_generic_type_from_pattern(program, fun, scope, fun->params.items[i].type, actual, bindings, binding_len)) {
      return set_diag_detail(diag, 3033, "generic inference found conflicting argument types", call->args.items[i]->line, call->args.items[i]->column, "one concrete type for each generic parameter", actual, "pass explicit type arguments or make argument types match");
    }
  }
  if (expected_return && fun->return_type && !infer_generic_type_from_pattern(program, fun, scope, fun->return_type, expected_return, bindings, binding_len)) {
    return set_diag_detail(diag, 3033, "generic inference found conflicting expected return type", call->line, call->column, "one concrete type for each generic parameter", expected_return, "pass explicit type arguments or adjust the expected return type");
  }
  for (size_t i = 0; i < binding_len; i++) {
    if (!bindings[i].type) {
      return set_diag_detail(diag, 3034, "generic type argument cannot be inferred", call->line, call->column, "explicit generic type argument", fun->type_params.items[i].name, "call the function with explicit type arguments such as name<i32>(value)");
    }
  }
  return normalize_static_bindings(program, fun, scope, call, diag, bindings, binding_len);
}

static bool validate_generic_constraints(const Program *program, const Function *fun, const Expr *call, ZDiag *diag, GenericBinding *bindings, size_t binding_len) {
  if (!function_is_generic(fun)) return true;
  for (size_t param_index = 0; param_index < fun->type_params.len; param_index++) {
    const Param *type_param = &fun->type_params.items[param_index];
    if (type_param->is_static) continue;
    if (!type_param->type || strcmp(type_param->type, "Type") == 0) continue;
    const InterfaceDecl *interface = NULL;
    char **constraint_args = NULL;
    size_t constraint_arg_len = 0;
    if (!interface_constraint_parts(program, type_param->type, &interface, &constraint_args, &constraint_arg_len) || !interface) {
      char message[256];
      snprintf(message, sizeof(message), "generic parameter '%s' references an unknown interface constraint", type_param->name);
      free_type_arg_list(constraint_args, constraint_arg_len);
      return set_diag_detail(diag, 3038, message, type_param->line, type_param->column, "declared interface constraint", type_param->type, "declare the interface or change the constraint to Type");
    }
    const char *actual_type = generic_binding_lookup(bindings, binding_len, type_param->name);
    const Shape *shape = find_shape_for_type(program, actual_type);
    if (!shape) {
      char message[256];
      snprintf(message, sizeof(message), "type argument for '%s' does not satisfy interface '%s'", type_param->name, interface->name);
      free_type_arg_list(constraint_args, constraint_arg_len);
      return set_diag_detail(diag, 3038, message, call->line, call->column, "concrete shape type", actual_type ? actual_type : "Unknown", "pass a shape with matching static methods");
    }
    GenericBinding *interface_bindings = z_checked_calloc(interface->type_params.len, sizeof(GenericBinding));
    for (size_t i = 0; i < interface->type_params.len; i++) {
      generic_binding_init_from_param(&interface_bindings[i], &interface->type_params.items[i]);
      const char *constraint_arg = i < constraint_arg_len ? constraint_args[i] : "Unknown";
      interface_bindings[i].type = interface->type_params.items[i].is_static
        ? type_substitute_static_arg_signature(program, constraint_arg, bindings, binding_len)
        : type_substitute_generic_signature(program, constraint_arg, bindings, binding_len);
    }
    for (size_t method_index = 0; method_index < interface->methods.len; method_index++) {
      const Function *required = &interface->methods.items[method_index];
      const Function *method = find_shape_method_decl(shape, required->name);
      if (!method) {
        char message[256];
        snprintf(message, sizeof(message), "shape '%s' is missing interface method '%s.%s'", actual_type ? actual_type : shape->name, interface->name, required->name);
        free_type_arg_list(constraint_args, constraint_arg_len);
        generic_bindings_free(interface_bindings, interface->type_params.len);
        free(interface_bindings);
        return set_diag_detail(diag, 3039, message, call->line, call->column, "matching static method on the concrete shape", "method not found", "add the required static method with the interface signature");
      }
      if (!validate_interface_method_generic_params(program, interface, interface_bindings, interface->type_params.len, required, method, diag)) {
        free_type_arg_list(constraint_args, constraint_arg_len);
        generic_bindings_free(interface_bindings, interface->type_params.len);
        free(interface_bindings);
        return false;
      }
      if (method->params.len != required->params.len) {
        char message[256];
        snprintf(message, sizeof(message), "interface method '%s.%s' parameter count does not match shape method", interface->name, required->name);
        free_type_arg_list(constraint_args, constraint_arg_len);
        generic_bindings_free(interface_bindings, interface->type_params.len);
        free(interface_bindings);
        return set_diag_detail(diag, 3040, message, method->line, method->column, "same parameter count as interface", "different parameter count", "update the shape method signature to match the interface");
      }
      size_t actual_binding_len = 0;
      GenericBinding *actual_bindings = shape_interface_method_signature_bindings(program, shape, actual_type ? actual_type : shape->name, method, &actual_binding_len);
      for (size_t i = 0; i < required->params.len; i++) {
        char *expected = type_substitute_interface_method_signature(program, required->params.items[i].type, interface_bindings, interface->type_params.len, required, method);
        char *actual = type_substitute_generic_signature(program, method->params.items[i].type, actual_bindings, actual_binding_len);
        bool ok = types_compatible(program, expected, actual);
        if (!ok) {
          char message[256];
          snprintf(message, sizeof(message), "interface method '%s.%s' parameter %zu does not match shape method", interface->name, required->name, i + 1);
          bool diag_ok = set_diag_detail(diag, 3042, message, method->params.items[i].line, method->params.items[i].column, expected, actual, "use the parameter type required by the interface");
          free(expected);
          free(actual);
          free_type_arg_list(constraint_args, constraint_arg_len);
          generic_bindings_free(interface_bindings, interface->type_params.len);
          free(interface_bindings);
          generic_bindings_free(actual_bindings, actual_binding_len);
          free(actual_bindings);
          return diag_ok;
        }
        free(expected);
        free(actual);
      }
      char *expected_return = type_substitute_interface_method_signature(program, required->return_type, interface_bindings, interface->type_params.len, required, method);
      char *actual_return = type_substitute_generic_signature(program, method->return_type, actual_bindings, actual_binding_len);
      if (!types_compatible(program, expected_return, actual_return)) {
        char message[256];
        snprintf(message, sizeof(message), "interface method '%s.%s' return type does not match shape method", interface->name, required->name);
        bool ok = set_diag_detail(diag, 3041, message, method->line, method->column, expected_return, actual_return, "return the type required by the interface");
        free(expected_return);
        free(actual_return);
        free_type_arg_list(constraint_args, constraint_arg_len);
        generic_bindings_free(interface_bindings, interface->type_params.len);
        free(interface_bindings);
        generic_bindings_free(actual_bindings, actual_binding_len);
        free(actual_bindings);
        return ok;
      }
      free(expected_return);
      free(actual_return);
      generic_bindings_free(actual_bindings, actual_binding_len);
      free(actual_bindings);
    }
    free_type_arg_list(constraint_args, constraint_arg_len);
    generic_bindings_free(interface_bindings, interface->type_params.len);
    free(interface_bindings);
  }
  return true;
}

static bool function_error_contains(const Function *fun, const char *name) {
  if (!fun || !name) return false;
  for (size_t i = 0; i < fun->errors.len; i++) {
    if (fun->errors.items[i].name && strcmp(fun->errors.items[i].name, name) == 0) return true;
  }
  return false;
}

static const Function *fallible_callee_in_context(CheckContext *ctx, const Program *program, const Function *context_fun, Scope *scope, const Expr *expr);
static bool stdlib_call_has_error_flow(const Expr *expr);
static bool stdlib_call_error_sets_covered(const Function *caller, ZDiag *diag, const Expr *stdlib_call, const Expr *diagnostic_expr);

static const Shape *find_shape_owning_method(const Program *program, const Function *method) {
  if (!program || !method) return NULL;
  for (size_t shape_index = 0; shape_index < program->shapes.len; shape_index++) {
    const Shape *shape = &program->shapes.items[shape_index];
    for (size_t method_index = 0; method_index < shape->methods.len; method_index++) {
      if (&shape->methods.items[method_index] == method) return shape;
    }
  }
  return NULL;
}

static bool function_error_sets_compatible_inner(CheckContext *ctx, const Function *caller, const Function *callee, ZDiag *diag, const Expr *call, size_t depth);
static bool stmt_vec_raise_errors_covered(CheckContext *ctx, const Program *program, const StmtVec *body, const Function *caller, const Function *context_fun, Scope *scope, const Expr *call, ZDiag *diag, size_t depth);

static bool expr_raise_errors_covered(CheckContext *ctx, const Program *program, const Expr *expr, const Function *caller, const Function *context_fun, Scope *scope, const Expr *call, ZDiag *diag, size_t depth) {
  diag = check_context_diag(ctx, diag);
  if (!expr || depth > 64) return true;
  if (expr->kind == EXPR_CHECK) {
    if (!stdlib_call_error_sets_covered(caller, diag, expr->left, call)) return false;
    const Function *callee = fallible_callee_in_context(ctx, program, context_fun, scope, expr->left);
    if (callee && !function_error_sets_compatible_inner(ctx, caller, callee, diag, call, depth + 1)) return false;
    return expr_raise_errors_covered(ctx, program, expr->left, caller, context_fun, scope, call, diag, depth);
  }
  if (expr->kind == EXPR_RESCUE) return expr_raise_errors_covered(ctx, program, expr->right, caller, context_fun, scope, call, diag, depth);
  if (!expr_raise_errors_covered(ctx, program, expr->left, caller, context_fun, scope, call, diag, depth) ||
      !expr_raise_errors_covered(ctx, program, expr->right, caller, context_fun, scope, call, diag, depth)) return false;
  for (size_t i = 0; i < expr->args.len; i++) {
    if (!expr_raise_errors_covered(ctx, program, expr->args.items[i], caller, context_fun, scope, call, diag, depth)) return false;
  }
  for (size_t i = 0; i < expr->fields.len; i++) {
    if (!expr_raise_errors_covered(ctx, program, expr->fields.items[i].value, caller, context_fun, scope, call, diag, depth)) return false;
  }
  return true;
}

static void flow_scope_add_stmt_binding(CheckContext *ctx, const Program *program, const Stmt *stmt, Scope *scope) {
  if (!stmt || stmt->kind != STMT_LET || !stmt->name || !scope) return;
  const char *binding_type = stmt->resolved_type ? stmt->resolved_type : stmt->type;
  if (!binding_type && stmt->expr) binding_type = expr_type(ctx, program, stmt->expr, scope);
  scope_add(scope, stmt->name, binding_type ? binding_type : "Unknown", stmt->mutable_binding);
}

static void flow_scope_add_function_bindings(const Function *fun, Scope *scope) {
  if (!fun || !scope) return;
  for (size_t type_param_index = 0; type_param_index < fun->type_params.len; type_param_index++) {
    const Param *type_param = &fun->type_params.items[type_param_index];
    if (type_param->is_static) scope_add_static_param(scope, type_param->name, type_param->type);
    else scope_add_type_param(scope, type_param->name);
  }
  for (size_t param_index = 0; param_index < fun->params.len; param_index++) {
    const Param *param = &fun->params.items[param_index];
    scope_add_param_decl(scope, param->name, param->type, param->line, param->column);
  }
}

static bool stmt_raise_errors_covered(CheckContext *ctx, const Program *program, const Stmt *stmt, const Function *caller, const Function *context_fun, Scope *scope, const Expr *call, ZDiag *diag, size_t depth) {
  diag = check_context_diag(ctx, diag);
  if (!stmt) return true;
  if (depth > 64) return true;
  if (stmt->kind == STMT_RAISE && stmt->name && !function_error_contains(caller, stmt->name)) {
    char actual[160];
    snprintf(actual, sizeof(actual), "callee may raise %s", stmt->name);
    return set_diag_detail(diag, 1002, "caller error set does not include inferred callee error", call->line, call->column, "caller `raises [...]` set containing every checked callee error", actual, "add the missing error to the caller's `raises [...]` set");
  }
  if (stmt->kind == STMT_CHECK) {
    if (!stdlib_call_error_sets_covered(caller, diag, stmt->expr, call)) return false;
    const Function *callee = fallible_callee_in_context(ctx, program, context_fun, scope, stmt->expr);
    if (callee && !function_error_sets_compatible_inner(ctx, caller, callee, diag, call, depth + 1)) return false;
  }
  if (!expr_raise_errors_covered(ctx, program, stmt->target, caller, context_fun, scope, call, diag, depth) ||
      !expr_raise_errors_covered(ctx, program, stmt->expr, caller, context_fun, scope, call, diag, depth) ||
      !expr_raise_errors_covered(ctx, program, stmt->range_end, caller, context_fun, scope, call, diag, depth)) return false;
  if (stmt->kind == STMT_IF) {
    Scope then_scope = {.parent = scope};
    Scope else_scope = {.parent = scope};
    bool ok = stmt_vec_raise_errors_covered(ctx, program, &stmt->then_body, caller, context_fun, &then_scope, call, diag, depth) &&
              stmt_vec_raise_errors_covered(ctx, program, &stmt->else_body, caller, context_fun, &else_scope, call, diag, depth);
    scope_free(&then_scope);
    scope_free(&else_scope);
    if (!ok) return false;
    return true;
  }
  if (stmt->kind == STMT_WHILE) {
    Scope then_scope = {.parent = scope};
    bool ok = stmt_vec_raise_errors_covered(ctx, program, &stmt->then_body, caller, context_fun, &then_scope, call, diag, depth);
    scope_free(&then_scope);
    if (!ok) return false;
  } else if (stmt->kind == STMT_FOR) {
    Scope body_scope = {.parent = scope};
    const char *iter_type = stmt->resolved_type ? stmt->resolved_type : (stmt->expr ? expr_type(ctx, program, stmt->expr, scope) : "Unknown");
    if (stmt->name) scope_add(&body_scope, stmt->name, iter_type ? iter_type : "Unknown", false);
    bool ok = stmt_vec_raise_errors_covered(ctx, program, &stmt->then_body, caller, context_fun, &body_scope, call, diag, depth);
    scope_free(&body_scope);
    if (!ok) return false;
  } else if (!stmt_vec_raise_errors_covered(ctx, program, &stmt->then_body, caller, context_fun, scope, call, diag, depth)) {
    return false;
  }
  if (!stmt_vec_raise_errors_covered(ctx, program, &stmt->else_body, caller, context_fun, scope, call, diag, depth)) return false;
  for (size_t i = 0; i < stmt->match_arms.len; i++) {
    const MatchArm *arm = &stmt->match_arms.items[i];
    if (!expr_raise_errors_covered(ctx, program, arm->guard, caller, context_fun, scope, call, diag, depth)) return false;
    Scope arm_scope = {.parent = scope};
    if (stmt->kind == STMT_MATCH && arm->payload_name && stmt->expr) {
      const char *match_type = stmt->resolved_type ? stmt->resolved_type : expr_type(ctx, program, stmt->expr, scope);
      const Choice *item_choice = find_choice(program, match_type);
      const Param *item_case = item_choice ? find_case(&item_choice->cases, arm->case_name) : NULL;
      if (item_case && item_case->type) scope_add(&arm_scope, arm->payload_name, item_case->type, false);
    }
    bool ok = stmt_vec_raise_errors_covered(ctx, program, &arm->body, caller, context_fun, &arm_scope, call, diag, depth);
    scope_free(&arm_scope);
    if (!ok) return false;
  }
  return true;
}

static bool stmt_vec_raise_errors_covered(CheckContext *ctx, const Program *program, const StmtVec *body, const Function *caller, const Function *context_fun, Scope *scope, const Expr *call, ZDiag *diag, size_t depth) {
  diag = check_context_diag(ctx, diag);
  if (!body) return true;
  for (size_t i = 0; i < body->len; i++) {
    const Stmt *stmt = body->items[i];
    if (!stmt_raise_errors_covered(ctx, program, stmt, caller, context_fun, scope, call, diag, depth)) return false;
    flow_scope_add_stmt_binding(ctx, program, stmt, scope);
  }
  return true;
}

static bool function_error_sets_compatible_inner(CheckContext *ctx, const Function *caller, const Function *callee, ZDiag *diag, const Expr *call, size_t depth) {
  diag = check_context_diag(ctx, diag);
  if (!caller || !callee || !callee->raises) return true;
  if (depth > 64) return true;
  if (!caller->raises) {
    return set_diag_detail(diag, 1001, "fallible call requires function to be marked fallible", call->line, call->column, "function signature with `raises` or `raises [...]`", "function is not marked fallible", "add `raises` to the function signature or handle the error locally");
  }
  if (!caller->has_error_set) return true;
  if (!callee->has_error_set) {
    const Program *program = ctx ? ctx->program : NULL;
    Scope flow_scope = {0};
    flow_scope_add_function_bindings(callee, &flow_scope);
    CheckContext callee_ctx = ctx ? *ctx : (CheckContext){0};
    callee_ctx.function = callee;
    const Shape *callee_shape = find_shape_owning_method(program, callee);
    callee_ctx.shape = callee_shape ? callee_shape : (ctx && ctx->function == callee ? ctx->shape : NULL);
    bool ok = stmt_vec_raise_errors_covered(&callee_ctx, program, &callee->body, caller, callee, &flow_scope, call, diag, depth + 1);
    scope_free(&flow_scope);
    return ok;
  }
  for (size_t i = 0; i < callee->errors.len; i++) {
    const char *error_name = callee->errors.items[i].name;
    if (!function_error_contains(caller, error_name)) {
      char actual[160];
      snprintf(actual, sizeof(actual), "callee may raise %s", error_name ? error_name : "<error>");
      return set_diag_detail(diag, 1002, "caller error set does not include callee error", call->line, call->column, "caller `raises [...]` set containing every checked callee error", actual, "add the missing error to the caller's `raises [...]` set");
    }
  }
  return true;
}

static bool function_error_sets_compatible(CheckContext *ctx, const Function *caller, const Function *callee, ZDiag *diag, const Expr *call) {
  diag = check_context_diag(ctx, diag);
  return function_error_sets_compatible_inner(ctx, caller, callee, diag, call, 0);
}

static bool function_has_error_flow_inner(CheckContext *ctx, const Program *program, const Function *fun, size_t depth);

static bool expr_is_world_stream_write_shape(const Expr *expr) {
  if (!expr || expr->kind != EXPR_CALL || !expr->left || expr->left->kind != EXPR_MEMBER) return false;
  const Expr *write = expr->left;
  if (!write->text || strcmp(write->text, "write") != 0) return false;
  const Expr *stream = write->left;
  return stream && stream->kind == EXPR_MEMBER && stream->text &&
         (strcmp(stream->text, "out") == 0 || strcmp(stream->text, "err") == 0);
}

static const Function *resolve_call_function_in_context(CheckContext *ctx, const Program *program, const Function *context_fun, Scope *scope, const Expr *expr) {
  if (!expr || expr->kind != EXPR_CALL || !expr->left) return NULL;
  const Function *fun = NULL;
  if (expr->left->kind == EXPR_IDENT) {
    ZCallResolution resolution = {0};
    if (resolve_named_function_call(program, expr, &resolution)) {
      fun = resolution.callee;
      z_call_resolution_free(&resolution);
    }
  } else if (expr->left->kind == EXPR_MEMBER) {
    ZCallResolution resolution = {0};
    if (resolve_shape_namespace_call(program, expr, &resolution) ||
        resolve_concrete_constrained_shape_call(ctx, program, context_fun, ctx ? ctx->return_provenance_expr_bindings : NULL, ctx ? ctx->return_provenance_expr_binding_len : 0, expr, &resolution) ||
        resolve_constrained_interface_call(program, context_fun, expr, &resolution)) {
      fun = resolution.callee;
      z_call_resolution_free(&resolution);
    }
    if (!fun && expr->left->left) {
      ZCallResolution receiver_resolution = {0};
      if (resolve_receiver_shape_call(ctx, program, expr, scope, NULL, &receiver_resolution)) {
        fun = receiver_resolution.callee;
        z_call_resolution_free(&receiver_resolution);
      }
    }
  }
  return fun;
}

static bool expr_call_has_error_flow(CheckContext *ctx, const Program *program, const Function *context_fun, Scope *scope, const Expr *expr, size_t depth) {
  if (!expr || expr->kind != EXPR_CALL || !expr->left) return false;
  if (stdlib_call_has_error_flow(expr) || expr_is_world_stream_write_shape(expr)) return true;
  const Function *fun = resolve_call_function_in_context(ctx, program, context_fun, scope, expr);
  return function_has_error_flow_inner(ctx, program, fun, depth + 1);
}

static bool expr_has_checked_error_flow(CheckContext *ctx, const Program *program, const Function *context_fun, Scope *scope, const Expr *expr, size_t depth) {
  if (!expr) return false;
  if (expr->kind == EXPR_CHECK && expr_call_has_error_flow(ctx, program, context_fun, scope, expr->left, depth)) return true;
  if (expr->kind == EXPR_RESCUE) return expr_has_checked_error_flow(ctx, program, context_fun, scope, expr->right, depth);
  if (expr_has_checked_error_flow(ctx, program, context_fun, scope, expr->left, depth) || expr_has_checked_error_flow(ctx, program, context_fun, scope, expr->right, depth)) return true;
  for (size_t i = 0; i < expr->args.len; i++) {
    if (expr_has_checked_error_flow(ctx, program, context_fun, scope, expr->args.items[i], depth)) return true;
  }
  for (size_t i = 0; i < expr->fields.len; i++) {
    if (expr_has_checked_error_flow(ctx, program, context_fun, scope, expr->fields.items[i].value, depth)) return true;
  }
  return false;
}

static bool stmt_vec_has_checked_error_flow(CheckContext *ctx, const Program *program, const Function *context_fun, const StmtVec *body, Scope *scope, size_t depth) {
  if (!body || depth > 64) return false;
  for (size_t i = 0; i < body->len; i++) {
    const Stmt *stmt = body->items[i];
    if (!stmt) continue;
    if (stmt->kind == STMT_RAISE) return true;
    if (stmt->kind == STMT_CHECK && expr_call_has_error_flow(ctx, program, context_fun, scope, stmt->expr, depth)) return true;
    if (expr_has_checked_error_flow(ctx, program, context_fun, scope, stmt->target, depth) ||
        expr_has_checked_error_flow(ctx, program, context_fun, scope, stmt->expr, depth) ||
        expr_has_checked_error_flow(ctx, program, context_fun, scope, stmt->range_end, depth)) return true;
    if (stmt->kind == STMT_IF) {
      Scope then_scope = {.parent = scope};
      Scope else_scope = {.parent = scope};
      bool found = stmt_vec_has_checked_error_flow(ctx, program, context_fun, &stmt->then_body, &then_scope, depth);
      scope_free(&then_scope);
      if (found) return true;
      found = stmt_vec_has_checked_error_flow(ctx, program, context_fun, &stmt->else_body, &else_scope, depth);
      scope_free(&else_scope);
      if (found) return true;
    } else if (stmt->kind == STMT_WHILE) {
      Scope then_scope = {.parent = scope};
      bool found = stmt_vec_has_checked_error_flow(ctx, program, context_fun, &stmt->then_body, &then_scope, depth);
      scope_free(&then_scope);
      if (found) return true;
    } else if (stmt->kind == STMT_FOR) {
      Scope body_scope = {.parent = scope};
      const char *iter_type = stmt->resolved_type ? stmt->resolved_type : (stmt->expr ? expr_type(ctx, program, stmt->expr, scope) : "Unknown");
      if (stmt->name) scope_add(&body_scope, stmt->name, iter_type ? iter_type : "Unknown", false);
      bool found = stmt_vec_has_checked_error_flow(ctx, program, context_fun, &stmt->then_body, &body_scope, depth);
      scope_free(&body_scope);
      if (found) return true;
    } else if (stmt_vec_has_checked_error_flow(ctx, program, context_fun, &stmt->then_body, scope, depth)) {
      return true;
    }
    if (stmt->kind != STMT_IF && stmt_vec_has_checked_error_flow(ctx, program, context_fun, &stmt->else_body, scope, depth)) return true;
    for (size_t arm_index = 0; arm_index < stmt->match_arms.len; arm_index++) {
      const MatchArm *arm = &stmt->match_arms.items[arm_index];
      if (expr_has_checked_error_flow(ctx, program, context_fun, scope, arm->guard, depth)) return true;
      Scope arm_scope = {.parent = scope};
      if (stmt->kind == STMT_MATCH && arm->payload_name && stmt->expr) {
        const char *match_type = stmt->resolved_type ? stmt->resolved_type : expr_type(ctx, program, stmt->expr, scope);
        const Choice *item_choice = find_choice(program, match_type);
        const Param *item_case = item_choice ? find_case(&item_choice->cases, arm->case_name) : NULL;
        if (item_case && item_case->type) scope_add(&arm_scope, arm->payload_name, item_case->type, false);
      }
      bool found = stmt_vec_has_checked_error_flow(ctx, program, context_fun, &arm->body, &arm_scope, depth);
      scope_free(&arm_scope);
      if (found) return true;
    }
    flow_scope_add_stmt_binding(ctx, program, stmt, scope);
  }
  return false;
}

static bool function_has_error_flow_inner(CheckContext *ctx, const Program *program, const Function *fun, size_t depth) {
  if (!fun || !fun->raises) return false;
  if (fun->has_error_set) return true;
  Scope flow_scope = {0};
  flow_scope_add_function_bindings(fun, &flow_scope);
  CheckContext fun_ctx = ctx ? *ctx : (CheckContext){0};
  fun_ctx.function = fun;
  const Shape *fun_shape = find_shape_owning_method(program, fun);
  fun_ctx.shape = fun_shape ? fun_shape : (ctx && ctx->function == fun ? ctx->shape : NULL);
  bool result = stmt_vec_has_checked_error_flow(&fun_ctx, program, fun, &fun->body, &flow_scope, depth);
  scope_free(&flow_scope);
  return result;
}

static bool function_has_error_flow(CheckContext *ctx, const Program *program, const Function *fun) {
  return function_has_error_flow_inner(ctx, program, fun, 0);
}

static bool check_fallible_call_is_checked(CheckContext *ctx, const Program *program, const Function *callee, const Expr *call, ZDiag *diag, const char *message, const char *expected, const char *actual, const char *help) {
  diag = check_context_diag(ctx, diag);
  if (!function_has_error_flow(ctx, program, callee)) return true;
  if (!ctx || ctx->allow_fallible_call == 0) {
    return set_diag_detail(diag, 1003, message, call->line, call->column, expected, actual, help);
  }
  return true;
}

static const Function *fallible_callee_in_context(CheckContext *ctx, const Program *program, const Function *context_fun, Scope *scope, const Expr *expr) {
  const Function *fun = resolve_call_function_in_context(ctx, program, context_fun, scope, expr);
  return function_has_error_flow(ctx, program, fun) ? fun : NULL;
}

static bool function_error_sets_include_stdlib_resolution(const Function *caller, ZDiag *diag, const ZCallResolution *resolution, const Expr *diagnostic_expr) {
  const Expr *call = diagnostic_expr ? diagnostic_expr : (resolution ? resolution->call_expr : NULL);
  int line = call ? call->line : 1;
  int column = call ? call->column : 1;
  if (!resolution || !resolution->fallible) return true;
  if (!caller || !caller->raises) {
    return set_diag_detail(diag, 1001, "fallible std call requires function to be marked fallible", line, column, "function signature with `raises` or `raises [...]`", "function is not marked fallible", "add `raises` to the function signature or handle the error locally");
  }
  if (!caller->has_error_set) return true;
  char expected[160];
  z_call_resolution_error_set_text(resolution, expected, sizeof(expected));
  for (size_t i = 0; i < resolution->error_len; i++) {
    const char *error_name = resolution->errors[i].name;
    if (error_name && !function_error_contains(caller, error_name)) {
      char actual[160];
      snprintf(actual, sizeof(actual), "std call may raise %s", error_name);
      return set_diag_detail(diag, 1002, "caller error set does not include std error", line, column, expected, actual, "add the missing std error to `raises [...]` or rescue the call locally");
    }
  }
  return true;
}

static const Shape *find_shape(const Program *program, const char *name) {
  for (size_t i = 0; i < program->shapes.len; i++) {
    if (strcmp(program->shapes.items[i].name, name) == 0) return &program->shapes.items[i];
  }
  return NULL;
}

static const Shape *find_shape_for_type(const Program *program, const char *type) {
  type = resolve_alias_type(program, type);
  const Shape *shape = find_shape(program, type);
  if (shape) return shape;
  if (!type) return NULL;
  for (size_t i = 0; i < program->shapes.len; i++) {
    const Shape *candidate = &program->shapes.items[i];
    char **args = NULL;
    size_t arg_len = 0;
    bool matched = candidate->type_params.len > 0 && type_generic_arg_list(type, candidate->name, &args, &arg_len) && arg_len == candidate->type_params.len;
    free_type_arg_list(args, arg_len);
    if (matched) return candidate;
  }
  return NULL;
}

static char *shape_field_type_for_owner(const Program *program, const Shape *shape, const char *owner_type, const Param *field) {
  if (!shape || !field) return z_strdup("Unknown");
  owner_type = resolve_alias_type(program, owner_type);
  if (shape->type_params.len > 0) {
    char **args = NULL;
    size_t arg_len = 0;
    if (type_generic_arg_list(owner_type, shape->name, &args, &arg_len) && arg_len == shape->type_params.len) {
      GenericBinding *bindings = z_checked_calloc(arg_len, sizeof(GenericBinding));
      for (size_t i = 0; i < arg_len; i++) {
        generic_binding_init_from_param(&bindings[i], &shape->type_params.items[i]);
        bindings[i].type = z_strdup(args[i]);
      }
      char *result = type_substitute_generic_signature(program, field->type, bindings, arg_len);
      for (size_t i = 0; i < arg_len; i++) free(bindings[i].type);
      free(bindings);
      free_type_arg_list(args, arg_len);
      return result;
    }
    free_type_arg_list(args, arg_len);
  }
  return z_strdup(field->type ? field->type : "Unknown");
}

static const EnumDecl *find_enum(const Program *program, const char *name) {
  for (size_t i = 0; i < program->enums.len; i++) {
    if (strcmp(program->enums.items[i].name, name) == 0) return &program->enums.items[i];
  }
  return NULL;
}

static const Choice *find_choice(const Program *program, const char *name) {
  for (size_t i = 0; i < program->choices.len; i++) {
    if (strcmp(program->choices.items[i].name, name) == 0) return &program->choices.items[i];
  }
  return NULL;
}

static bool has_case(const ParamVec *cases, const char *name) {
  for (size_t i = 0; i < cases->len; i++) {
    if (strcmp(cases->items[i].name, name) == 0) return true;
  }
  return false;
}

static const Param *find_case(const ParamVec *cases, const char *name) {
  for (size_t i = 0; i < cases->len; i++) {
    if (strcmp(cases->items[i].name, name) == 0) return &cases->items[i];
  }
  return NULL;
}

static const Param *find_shape_field(const Shape *shape, const char *name) {
  for (size_t i = 0; i < shape->fields.len; i++) {
    if (strcmp(shape->fields.items[i].name, name) == 0) return &shape->fields.items[i];
  }
  return NULL;
}

static bool expr_addressable_storage_type(const Program *program, const Expr *expr, Scope *scope, char *out, size_t out_len) {
  if (!expr || !out || out_len == 0) return false;
  switch (expr->kind) {
    case EXPR_IDENT: {
      const char *type = scope_type(scope, expr->text);
      if (!type) return false;
      snprintf(out, out_len, "%s", type);
      return true;
    }
    case EXPR_MEMBER: {
      if (!expr->left || !expr->text) return false;
      char left_type_storage[192];
      if (!expr_addressable_storage_type(program, expr->left, scope, left_type_storage, sizeof(left_type_storage))) return false;
      const char *left_type = left_type_storage;
      char owned_left[192];
      char ref_left[192];
      if (owned_inner_text(left_type, owned_left, sizeof(owned_left))) left_type = owned_left;
      if (ref_inner_text(left_type, ref_left, sizeof(ref_left))) left_type = ref_left;
      const char *maybe_inner = NULL;
      size_t maybe_inner_len = 0;
      if (type_has_generic_arg(left_type, "Maybe", &maybe_inner, &maybe_inner_len)) {
        if (strcmp(expr->text, "has") == 0) {
          snprintf(out, out_len, "Bool");
          return true;
        }
        if (strcmp(expr->text, "value") == 0) {
          snprintf(out, out_len, "%.*s", (int)maybe_inner_len, maybe_inner);
          return true;
        }
      }
      const Shape *shape = find_shape_for_type(program, left_type);
      if (!shape) return false;
      const Param *field = find_shape_field(shape, expr->text);
      if (!field) return false;
      char *field_type = shape_field_type_for_owner(program, shape, left_type, field);
      snprintf(out, out_len, "%s", field_type ? field_type : "Unknown");
      free(field_type);
      return true;
    }
    case EXPR_INDEX: {
      if (!expr->left) return false;
      char base_type[192];
      if (!expr_addressable_storage_type(program, expr->left, scope, base_type, sizeof(base_type))) return false;
      return index_element_type(base_type, out, out_len);
    }
    default:
      return false;
  }
}

static void meta_cache_free(MetaCache *cache) {
  if (!cache) return;
  MetaCacheEntry *entry = cache->entries;
  while (entry) {
    MetaCacheEntry *next = entry->next;
    free(entry->key);
    free(entry);
    entry = next;
  }
  cache->entries = NULL;
  cache->stats = (ZMetaCacheStats){0};
}

static void meta_expr_key(ZBuf *buf, const Expr *expr) {
  if (!expr) {
    zbuf_append(buf, "<null>");
    return;
  }
  zbuf_appendf(buf, "%d:", (int)expr->kind);
  if (expr->text) zbuf_append(buf, expr->text);
  if (expr->kind == EXPR_BOOL) zbuf_append(buf, expr->bool_value ? "true" : "false");
  if (expr->left) {
    zbuf_append_char(buf, '(');
    meta_expr_key(buf, expr->left);
    zbuf_append_char(buf, ')');
  }
  if (expr->right) {
    zbuf_append_char(buf, '[');
    meta_expr_key(buf, expr->right);
    zbuf_append_char(buf, ']');
  }
  for (size_t i = 0; i < expr->args.len; i++) {
    zbuf_append_char(buf, ',');
    meta_expr_key(buf, expr->args.items[i]);
  }
}

static bool meta_cache_get(MetaCache *cache, const char *key, MetaValue *out) {
  if (!cache) return false;
  for (MetaCacheEntry *entry = cache->entries; entry; entry = entry->next) {
    if (strcmp(entry->key, key) == 0) {
      if (out) *out = entry->value;
      cache->stats.hits++;
      return true;
    }
  }
  return false;
}

static void meta_cache_put(MetaCache *cache, const char *key, MetaValue value) {
  if (!cache) return;
  MetaCacheEntry *entry = z_checked_calloc(1, sizeof(MetaCacheEntry));
  entry->key = z_strdup(key);
  entry->value = value;
  entry->next = cache->entries;
  cache->entries = entry;
  cache->stats.misses++;
  cache->stats.entries++;
}

static const ZTargetInfo *check_context_target(const CheckContext *ctx) {
  if (ctx && ctx->target) return ctx->target;
  return configured_check_target ? configured_check_target : z_find_target(z_host_target());
}

static MetaCache *check_context_meta_cache(CheckContext *ctx) {
  if (ctx && ctx->meta_cache) return ctx->meta_cache;
  return &default_meta_cache;
}

static bool meta_target_fact(CheckContext *ctx, const Expr *expr, MetaValue *out) {
  const ZTargetInfo *target = check_context_target(ctx);
  if (!expr || !target) return false;
  if (expr->kind == EXPR_MEMBER && expr->left && expr->left->kind == EXPR_IDENT && strcmp(expr->left->text, "target") == 0) {
    if (strcmp(expr->text, "os") == 0) {
      *out = (MetaValue){.kind = META_VALUE_STRING};
      snprintf(out->text, sizeof(out->text), "%s", target->os ? target->os : "unknown");
      return true;
    }
    if (strcmp(expr->text, "arch") == 0) {
      *out = (MetaValue){.kind = META_VALUE_STRING};
      snprintf(out->text, sizeof(out->text), "%s", target->arch ? target->arch : "unknown");
      return true;
    }
    if (strcmp(expr->text, "abi") == 0) {
      *out = (MetaValue){.kind = META_VALUE_STRING};
      snprintf(out->text, sizeof(out->text), "%s", target->abi ? target->abi : "none");
      return true;
    }
    if (strcmp(expr->text, "libc") == 0) {
      *out = (MetaValue){.kind = META_VALUE_STRING};
      snprintf(out->text, sizeof(out->text), "%s", target->libc ? target->libc : "none");
      return true;
    }
    if (strcmp(expr->text, "objectFormat") == 0) {
      *out = (MetaValue){.kind = META_VALUE_STRING};
      snprintf(out->text, sizeof(out->text), "%s", target->object_format ? target->object_format : "unknown");
      return true;
    }
    if (strcmp(expr->text, "endian") == 0) {
      *out = (MetaValue){.kind = META_VALUE_STRING};
      snprintf(out->text, sizeof(out->text), "little");
      return true;
    }
    if (strcmp(expr->text, "pointerWidth") == 0) {
      *out = (MetaValue){.kind = META_VALUE_NUMBER, .number = 64};
      return true;
    }
  }
  if (expr->kind == EXPR_CALL && expr->left && expr->left->kind == EXPR_MEMBER &&
      expr->left->left && expr->left->left->kind == EXPR_IDENT &&
      strcmp(expr->left->left->text, "target") == 0 && strcmp(expr->left->text, "hasCapability") == 0 &&
      expr->args.len == 1 && expr->args.items[0]->kind == EXPR_STRING) {
    *out = (MetaValue){.kind = META_VALUE_BOOL, .boolean = z_target_has_capability(target, expr->args.items[0]->text)};
    return true;
  }
  return false;
}

static bool eval_meta_value(CheckContext *ctx, const Program *program, const Expr *expr, MetaValue *out, size_t depth, size_t *steps);

static bool meta_type_fact(const Program *program, const Expr *expr, MetaValue *out, size_t depth, size_t *steps) {
  (void)depth;
  (void)steps;
  if (!expr || expr->kind != EXPR_CALL || !expr->left || expr->left->kind != EXPR_IDENT) return false;
  if (strcmp(expr->left->text, "fieldCount") == 0 && expr->args.len == 1 && expr->args.items[0]->kind == EXPR_IDENT) {
    const Shape *shape = find_shape(program, expr->args.items[0]->text);
    if (!shape) return false;
    *out = (MetaValue){.kind = META_VALUE_NUMBER, .number = shape->fields.len};
    return true;
  }
  if (strcmp(expr->left->text, "hasField") == 0 && expr->args.len == 2 &&
      expr->args.items[0]->kind == EXPR_IDENT && expr->args.items[1]->kind == EXPR_STRING) {
    const Shape *shape = find_shape(program, expr->args.items[0]->text);
    if (!shape) return false;
    *out = (MetaValue){.kind = META_VALUE_BOOL, .boolean = find_shape_field(shape, expr->args.items[1]->text) != NULL};
    return true;
  }
  if (strcmp(expr->left->text, "fieldType") == 0 && expr->args.len == 2 &&
      expr->args.items[0]->kind == EXPR_IDENT && expr->args.items[1]->kind == EXPR_STRING) {
    const Shape *shape = find_shape(program, expr->args.items[0]->text);
    const Param *field = shape ? find_shape_field(shape, expr->args.items[1]->text) : NULL;
    if (!field || !field->type) return false;
    *out = (MetaValue){.kind = META_VALUE_STRING};
    snprintf(out->text, sizeof(out->text), "%s", field->type);
    return true;
  }
  if (strcmp(expr->left->text, "enumCaseCount") == 0 && expr->args.len == 1 && expr->args.items[0]->kind == EXPR_IDENT) {
    const EnumDecl *item_enum = find_enum(program, expr->args.items[0]->text);
    if (!item_enum) return false;
    *out = (MetaValue){.kind = META_VALUE_NUMBER, .number = item_enum->cases.len};
    return true;
  }
  if (strcmp(expr->left->text, "hasEnumCase") == 0 && expr->args.len == 2 &&
      expr->args.items[0]->kind == EXPR_IDENT && expr->args.items[1]->kind == EXPR_STRING) {
    const EnumDecl *item_enum = find_enum(program, expr->args.items[0]->text);
    if (!item_enum) return false;
    *out = (MetaValue){.kind = META_VALUE_BOOL, .boolean = has_case(&item_enum->cases, expr->args.items[1]->text)};
    return true;
  }
  if (strcmp(expr->left->text, "choiceCaseCount") == 0 && expr->args.len == 1 && expr->args.items[0]->kind == EXPR_IDENT) {
    const Choice *item_choice = find_choice(program, expr->args.items[0]->text);
    if (!item_choice) return false;
    *out = (MetaValue){.kind = META_VALUE_NUMBER, .number = item_choice->cases.len};
    return true;
  }
  if (strcmp(expr->left->text, "hasChoiceCase") == 0 && expr->args.len == 2 &&
      expr->args.items[0]->kind == EXPR_IDENT && expr->args.items[1]->kind == EXPR_STRING) {
    const Choice *item_choice = find_choice(program, expr->args.items[0]->text);
    if (!item_choice) return false;
    *out = (MetaValue){.kind = META_VALUE_BOOL, .boolean = has_case(&item_choice->cases, expr->args.items[1]->text)};
    return true;
  }
  return false;
}

static bool eval_meta_value_uncached(CheckContext *ctx, const Program *program, const Expr *expr, MetaValue *out, size_t depth, size_t *steps) {
  if (!expr || depth > 64 || !steps || ++(*steps) > 1024) return false;
  if (meta_target_fact(ctx, expr, out)) return true;
  if (meta_type_fact(program, expr, out, depth, steps)) return true;
  switch (expr->kind) {
    case EXPR_NUMBER: {
      unsigned long long value = 0;
      if (!parse_static_uint_text(expr->text, &value)) return false;
      *out = (MetaValue){.kind = META_VALUE_NUMBER, .number = value};
      return true;
    }
    case EXPR_BOOL:
      *out = (MetaValue){.kind = META_VALUE_BOOL, .boolean = expr->bool_value};
      return true;
    case EXPR_STRING:
      *out = (MetaValue){.kind = META_VALUE_STRING};
      snprintf(out->text, sizeof(out->text), "%s", expr->text ? expr->text : "");
      return true;
    case EXPR_META:
      return eval_meta_value(ctx, program, expr->left, out, depth + 1, steps);
    case EXPR_IDENT:
      for (size_t i = 0; program && i < program->consts.len; i++) {
        if (strcmp(program->consts.items[i].name, expr->text) == 0) {
          return eval_meta_value(ctx, program, program->consts.items[i].expr, out, depth + 1, steps);
        }
      }
      return false;
    case EXPR_BINARY: {
      MetaValue left = {0};
      MetaValue right = {0};
      if (!eval_meta_value(ctx, program, expr->left, &left, depth + 1, steps) ||
          !eval_meta_value(ctx, program, expr->right, &right, depth + 1, steps)) return false;
      if (strcmp(expr->text, "==") == 0 || strcmp(expr->text, "!=") == 0) {
        bool equal = false;
        if (left.kind == right.kind && left.kind == META_VALUE_NUMBER) equal = left.number == right.number;
        else if (left.kind == right.kind && left.kind == META_VALUE_BOOL) equal = left.boolean == right.boolean;
        else if (left.kind == right.kind && left.kind == META_VALUE_STRING) equal = strcmp(left.text, right.text) == 0;
        *out = (MetaValue){.kind = META_VALUE_BOOL, .boolean = strcmp(expr->text, "==") == 0 ? equal : !equal};
        return true;
      }
      if (strcmp(expr->text, "&&") == 0 || strcmp(expr->text, "||") == 0) {
        if (left.kind != META_VALUE_BOOL || right.kind != META_VALUE_BOOL) return false;
        *out = (MetaValue){.kind = META_VALUE_BOOL, .boolean = strcmp(expr->text, "&&") == 0 ? (left.boolean && right.boolean) : (left.boolean || right.boolean)};
        return true;
      }
      if (left.kind != META_VALUE_NUMBER || right.kind != META_VALUE_NUMBER) return false;
      if (strcmp(expr->text, "+") == 0) *out = (MetaValue){.kind = META_VALUE_NUMBER, .number = left.number + right.number};
      else if (strcmp(expr->text, "-") == 0) {
        if (right.number > left.number) return false;
        *out = (MetaValue){.kind = META_VALUE_NUMBER, .number = left.number - right.number};
      } else if (strcmp(expr->text, "*") == 0) *out = (MetaValue){.kind = META_VALUE_NUMBER, .number = left.number * right.number};
      else if (strcmp(expr->text, "/") == 0) {
        if (right.number == 0) return false;
        *out = (MetaValue){.kind = META_VALUE_NUMBER, .number = left.number / right.number};
      } else if (strcmp(expr->text, "%") == 0) {
        if (right.number == 0) return false;
        *out = (MetaValue){.kind = META_VALUE_NUMBER, .number = left.number % right.number};
      } else if (strcmp(expr->text, "<") == 0) *out = (MetaValue){.kind = META_VALUE_BOOL, .boolean = left.number < right.number};
      else if (strcmp(expr->text, "<=") == 0) *out = (MetaValue){.kind = META_VALUE_BOOL, .boolean = left.number <= right.number};
      else if (strcmp(expr->text, ">") == 0) *out = (MetaValue){.kind = META_VALUE_BOOL, .boolean = left.number > right.number};
      else if (strcmp(expr->text, ">=") == 0) *out = (MetaValue){.kind = META_VALUE_BOOL, .boolean = left.number >= right.number};
      else return false;
      return true;
    }
    default:
      return false;
  }
}

static bool eval_meta_value(CheckContext *ctx, const Program *program, const Expr *expr, MetaValue *out, size_t depth, size_t *steps) {
  ZBuf key;
  zbuf_init(&key);
  const ZTargetInfo *target = check_context_target(ctx);
  zbuf_append(&key, target && target->name ? target->name : z_host_target());
  zbuf_append_char(&key, ':');
  meta_expr_key(&key, expr);
  MetaCache *cache = check_context_meta_cache(ctx);
  if (meta_cache_get(cache, key.data, out)) {
    zbuf_free(&key);
    return true;
  }
  MetaValue value = {0};
  bool ok = eval_meta_value_uncached(ctx, program, expr, &value, depth, steps);
  if (ok) {
    meta_cache_put(cache, key.data, value);
    if (out) *out = value;
  }
  zbuf_free(&key);
  return ok;
}

static bool check_meta_expr(CheckContext *ctx, const Program *program, const Expr *expr, ZDiag *diag) {
  diag = check_context_diag(ctx, diag);
  MetaValue value = {0};
  size_t steps = 0;
  if (!eval_meta_value(ctx, program, expr->left, &value, 0, &steps)) {
    return set_diag_detail(diag, 3035, "unsupported meta expression", expr->line, expr->column, "literal arithmetic, target facts, or type facts within safety limits", "sandboxed meta evaluator rejected this expression or hit a safety limit/cycle", "use deterministic meta expressions such as meta 2 + 2, meta target.pointerWidth, or meta hasField(Shape, \"field\")");
  }
  char text[128];
  if (value.kind == META_VALUE_NUMBER) {
    snprintf(text, sizeof(text), "%llu", value.number);
    set_expr_resolved_type(expr, "usize");
    free(((Expr *)expr)->text);
    ((Expr *)expr)->text = z_strdup(text);
  } else if (value.kind == META_VALUE_BOOL) {
    set_expr_resolved_type(expr, "Bool");
    ((Expr *)expr)->bool_value = value.boolean;
    free(((Expr *)expr)->text);
    ((Expr *)expr)->text = z_strdup(value.boolean ? "true" : "false");
  } else {
    set_expr_resolved_type(expr, "String");
    free(((Expr *)expr)->text);
    ((Expr *)expr)->text = z_strdup(value.text);
  }
  return true;
}

static const Function *find_shape_method_decl(const Shape *shape, const char *name) {
  if (!shape || !name) return NULL;
  for (size_t i = 0; i < shape->methods.len; i++) {
    if (strcmp(shape->methods.items[i].name, name) == 0) return &shape->methods.items[i];
  }
  return NULL;
}

static const Function *find_namespace_shape_method(const Program *program, const Expr *callee, const Shape **out_shape) {
  if (!callee || callee->kind != EXPR_MEMBER || !callee->left || callee->left->kind != EXPR_IDENT) return NULL;
  const Shape *shape = find_shape(program, callee->left->text);
  if (!shape) return NULL;
  const Function *method = find_shape_method_decl(shape, callee->text);
  if (method && out_shape) *out_shape = shape;
  return method;
}

static char *shape_open_instance_type(const Shape *shape) {
  if (!shape) return z_strdup("Unknown");
  if (shape->type_params.len == 0) return z_strdup(shape->name);
  ZBuf buf;
  zbuf_init(&buf);
  zbuf_append(&buf, shape->name);
  zbuf_append_char(&buf, '<');
  for (size_t i = 0; i < shape->type_params.len; i++) {
    if (i > 0) zbuf_append_char(&buf, ',');
    zbuf_append(&buf, shape->type_params.items[i].name);
  }
  zbuf_append_char(&buf, '>');
  return buf.data;
}

static char *shape_concrete_instance_type(const Shape *shape, GenericBinding *bindings, size_t binding_len) {
  if (!shape) return z_strdup("Unknown");
  if (shape->type_params.len == 0) return z_strdup(shape->name);
  ZBuf buf;
  zbuf_init(&buf);
  zbuf_append(&buf, shape->name);
  zbuf_append_char(&buf, '<');
  for (size_t i = 0; i < shape->type_params.len; i++) {
    if (i > 0) zbuf_append_char(&buf, ',');
    const char *bound = generic_binding_lookup(bindings, binding_len, shape->type_params.items[i].name);
    zbuf_append(&buf, bound ? bound : "Unknown");
  }
  zbuf_append_char(&buf, '>');
  return buf.data;
}

static void strip_ref_like_type(const char *type, char *out, size_t out_len) {
  if (!out || out_len == 0) return;
  snprintf(out, out_len, "%s", type ? type : "Unknown");
  char inner[160];
  if (owned_inner_text(out, inner, sizeof(inner)) || ref_inner_text(out, inner, sizeof(inner))) {
    snprintf(out, out_len, "%s", inner);
  }
}

typedef struct {
  size_t binding_index;
  ZTypeBinderId id;
  bool is_static;
  bool infer;
  const char *static_type;
} TypeCoreInferenceBinder;

static bool generic_binding_set_at_with_static_context(const Program *program, Scope *scope, const char *static_type, GenericBinding *bindings, size_t len, size_t index, const char *type) {
  if (!bindings || index >= len) return true;
  if (static_type) {
    bindings[index].is_static = true;
    bindings[index].static_type = static_type_or_usize(static_type);
  }
  if (!bindings[index].type) {
    bindings[index].type = z_strdup(type ? type : "Unknown");
    return true;
  }
  return generic_binding_values_compatible_with_static_context(program, scope, static_type, bindings[index].type, type);
}

static bool type_pattern_references_inference_binder(GenericBinding *bindings, size_t binding_len, const TypeCoreInferenceBinder *binders, size_t binder_len, const char *pattern) {
  if (!bindings || !pattern) return false;
  for (size_t i = 0; i < binder_len; i++) {
    if (!binders[i].infer) continue;
    size_t binding_index = binders[i].binding_index;
    if (binding_index >= binding_len || !bindings[binding_index].name) continue;
    if (type_text_references_name(pattern, bindings[binding_index].name)) return true;
  }
  return false;
}

static void type_core_inference_pattern_scope(const Program *program, GenericBinding *bindings, size_t binding_len, const TypeCoreInferenceBinder *binders, size_t binder_len, ZTypeBinderDecl *decls, ZTypeBinderScope *scope, bool omit_ambiguous_type_args) {
  if (scope) *scope = (ZTypeBinderScope){0};
  if (!bindings || !decls || !scope) return;
  size_t len = 0;
  for (size_t i = 0; i < binder_len; i++) {
    size_t binding_index = binders[i].binding_index;
    if (binding_index >= binding_len || !bindings[binding_index].name) continue;
    decls[len++] = (ZTypeBinderDecl){
      .name = bindings[binding_index].name,
      .kind = binders[i].is_static ? Z_TYPE_BINDER_STATIC : Z_TYPE_BINDER_TYPE,
      .id = binders[i].id,
      .static_type = binders[i].is_static ? (binders[i].static_type ? binders[i].static_type : "usize") : NULL,
    };
  }
  len = append_type_core_static_const_binders(program, NULL, decls, len, (ZTypeBinderId)(binder_len + 1), omit_ambiguous_type_args);
  *scope = (ZTypeBinderScope){.items = decls, .len = len, .arg_kind = type_core_generic_arg_kind_for_program, .arg_kind_context = program};
}

static void type_core_inference_actual_scope(const Program *program, Scope *actual_scope, size_t binder_len, ZTypeBinderDecl *decls, ZTypeBinderScope *scope, bool omit_ambiguous_type_args) {
  if (scope) *scope = (ZTypeBinderScope){0};
  if (!decls || !scope) return;
  ZTypeBinderId const_id = (ZTypeBinderId)(binder_len + 1);
  size_t const_count = type_core_static_const_binder_count(program);
  size_t len = append_type_core_scope_static_param_binders(actual_scope, decls, 0, (ZTypeBinderId)(const_id + const_count));
  len = append_type_core_static_const_binders(program, actual_scope, decls, len, const_id, omit_ambiguous_type_args);
  *scope = (ZTypeBinderScope){.items = decls, .len = len, .arg_kind = type_core_generic_arg_kind_for_program, .arg_kind_context = program};
}

static bool seed_type_core_existing_generic_bindings(ZTypeArena *arena, const ZTypeBinderScope *actual_scope, GenericBinding *bindings, size_t binding_len, const TypeCoreInferenceBinder *binders, size_t binder_len, ZUnifyTrace *trace) {
  if (!arena || !bindings || !trace) return false;
  for (size_t i = 0; i < binder_len; i++) {
    size_t binding_index = binders[i].binding_index;
    if (binding_index >= binding_len || !bindings[binding_index].type) continue;
    ZUnifyBinding *binding = checker_unify_trace_push(trace);
    if (!binding) return false;
    binding->binder = binders[i].id;
    binding->kind = binders[i].is_static ? Z_UNIFY_BINDING_STATIC : Z_UNIFY_BINDING_TYPE;
    binding->name = z_strdup(bindings[binding_index].name ? bindings[binding_index].name : "");
    ZTypeParseError error = {0};
    if (binders[i].is_static) {
      if (!z_static_value_parse_with_binders(bindings[binding_index].type, actual_scope, &binding->static_value, &error)) return false;
    } else if (!z_type_parse_with_binders(arena, bindings[binding_index].type, actual_scope, &binding->type, &error)) {
      return false;
    }
  }
  return true;
}

static bool apply_type_core_inference_trace(const Program *program, Scope *scope, const ZTypeArena *arena, const ZUnifyTrace *trace, GenericBinding *bindings, size_t binding_len, const TypeCoreInferenceBinder *binders, size_t binder_len) {
  if (!bindings || !trace) return true;
  for (size_t i = 0; i < binder_len; i++) {
    if (!binders[i].infer) continue;
    size_t binding_index = binders[i].binding_index;
    if (binding_index >= binding_len) continue;
    ZUnifyBindingKind kind = binders[i].is_static ? Z_UNIFY_BINDING_STATIC : Z_UNIFY_BINDING_TYPE;
    const ZUnifyBinding *binding = z_unify_trace_lookup(trace, binders[i].id, kind);
    if (!binding) continue;
    char *value = unify_binding_text(arena, binding);
    bool ok = value && generic_binding_set_at_with_static_context(program, scope, binders[i].is_static ? (binders[i].static_type ? binders[i].static_type : "usize") : NULL, bindings, binding_len, binding_index, value);
    free(value);
    if (!ok) return false;
  }
  return true;
}

static bool infer_type_core_bindings_attempt(const Program *program, Scope *actual_scope, const char *pattern, const char *actual, GenericBinding *bindings, size_t binding_len, const TypeCoreInferenceBinder *binders, size_t binder_len, bool omit_ambiguous_type_args) {
  if (!pattern || !actual) return true;
  if (binder_len == 0 || !type_pattern_references_inference_binder(bindings, binding_len, binders, binder_len, pattern)) return true;
  size_t max_binders = binder_len + (program ? program->consts.len : 0);
  for (Scope *cursor = actual_scope; cursor; cursor = cursor->parent) max_binders += cursor->len;
  ZTypeBinderDecl *pattern_decls = z_checked_calloc(max_binders ? max_binders : 1, sizeof(ZTypeBinderDecl));
  ZTypeBinderDecl *actual_decls = z_checked_calloc(max_binders ? max_binders : 1, sizeof(ZTypeBinderDecl));
  ZTypeBinderScope pattern_scope = {0};
  ZTypeBinderScope actual_type_scope = {0};
  type_core_inference_pattern_scope(program, bindings, binding_len, binders, binder_len, pattern_decls, &pattern_scope, omit_ambiguous_type_args);
  type_core_inference_actual_scope(program, actual_scope, binder_len, actual_decls, &actual_type_scope, omit_ambiguous_type_args);

  ZTypeArena arena;
  z_type_arena_init(&arena);
  ZUnifyTrace trace;
  z_unify_trace_init(&trace);
  seed_type_core_static_const_bindings(program, &pattern_scope, (ZTypeBinderId)(binder_len + 1), &trace);
  ZTypeParseError error = {0};
  ZTypeId pattern_type = Z_TYPE_ID_INVALID;
  ZTypeId actual_type = Z_TYPE_ID_INVALID;
  bool ok = seed_type_core_existing_generic_bindings(&arena, &actual_type_scope, bindings, binding_len, binders, binder_len, &trace) &&
            z_type_parse_with_binders(&arena, pattern, &pattern_scope, &pattern_type, &error) &&
            z_type_parse_with_binders(&arena, actual, &actual_type_scope, &actual_type, &error) &&
            z_type_unify(&arena, pattern_type, actual_type, &trace) &&
            apply_type_core_inference_trace(program, actual_scope, &arena, &trace, bindings, binding_len, binders, binder_len);
  z_unify_trace_free(&trace);
  z_type_arena_free(&arena);
  free(actual_decls);
  free(pattern_decls);
  return ok;
}

static bool infer_type_core_bindings(const Program *program, Scope *actual_scope, const char *pattern, const char *actual, GenericBinding *bindings, size_t binding_len, const TypeCoreInferenceBinder *binders, size_t binder_len) {
  bool may_retry = program_has_ambiguous_type_arg_static_consts(program);
  char **snapshot = may_retry ? generic_binding_type_snapshot(bindings, binding_len) : NULL;
  bool ok = infer_type_core_bindings_attempt(program, actual_scope, pattern, actual, bindings, binding_len, binders, binder_len, false);
  if (ok || !may_retry) {
    generic_binding_type_snapshot_free(snapshot, binding_len);
    return ok;
  }
  generic_binding_type_snapshot_restore(bindings, binding_len, snapshot);
  ok = infer_type_core_bindings_attempt(program, actual_scope, pattern, actual, bindings, binding_len, binders, binder_len, true);
  if (!ok) generic_binding_type_snapshot_restore(bindings, binding_len, snapshot);
  generic_binding_type_snapshot_free(snapshot, binding_len);
  return ok;
}

static const Param *shape_method_binding_param_at(const Shape *shape, const Function *method, size_t binding_index) {
  if (binding_index == 0) return NULL;
  size_t shape_len = shape ? shape->type_params.len : 0;
  if (binding_index - 1 < shape_len) return &shape->type_params.items[binding_index - 1];
  size_t method_offset = 1 + shape_len;
  if (method && binding_index >= method_offset && binding_index - method_offset < method->type_params.len) return &method->type_params.items[binding_index - method_offset];
  return NULL;
}

static bool type_core_binding_in_inference_range(size_t binding_index, size_t binding_start, size_t binding_count, size_t binding_len) {
  if (binding_start > binding_len) return false;
  size_t end = binding_start + binding_count;
  if (end < binding_start || end > binding_len) end = binding_len;
  return binding_index >= binding_start && binding_index < end;
}

static bool type_core_fixed_binding_available(const GenericBinding *binding) {
  return binding && binding->name && binding->type && strcmp(binding->type, "Unknown") != 0;
}

static bool infer_shape_method_binding_in_range(const Program *program, const Shape *shape, const Function *method, Scope *actual_scope, const char *pattern, const char *actual, GenericBinding *bindings, size_t binding_len, size_t binding_start, size_t binding_count) {
  TypeCoreInferenceBinder *binders = z_checked_calloc(binding_len ? binding_len : 1, sizeof(TypeCoreInferenceBinder));
  size_t binder_len = 0;
  for (size_t binding_index = 0; binding_index < binding_len; binding_index++) {
    bool infer = type_core_binding_in_inference_range(binding_index, binding_start, binding_count, binding_len);
    if (!infer && !type_core_fixed_binding_available(&bindings[binding_index])) continue;
    const Param *param = shape_method_binding_param_at(shape, method, binding_index);
    binders[binder_len] = (TypeCoreInferenceBinder){
      .binding_index = binding_index,
      .id = (ZTypeBinderId)(binder_len + 1),
      .is_static = param ? param->is_static : false,
      .infer = infer,
      .static_type = param && param->is_static ? (param->type ? param->type : "usize") : NULL,
    };
    binder_len++;
  }
  bool ok = infer_type_core_bindings(program, actual_scope, pattern, actual, bindings, binding_len, binders, binder_len);
  free(binders);
  return ok;
}

static bool infer_shape_method_binding(const Program *program, const Shape *shape, const Function *method, Scope *actual_scope, const char *pattern, const char *actual, GenericBinding *bindings, size_t binding_len) {
  return infer_shape_method_binding_in_range(program, shape, method, actual_scope, pattern, actual, bindings, binding_len, 0, binding_len);
}

static size_t shape_method_binding_count(const Shape *shape, const Function *method) {
  return 1 + (shape ? shape->type_params.len : 0) + (method ? method->type_params.len : 0);
}

static size_t shape_method_method_binding_offset(const Shape *shape) {
  return 1 + (shape ? shape->type_params.len : 0);
}

static void shape_method_init_bindings(const Shape *shape, const Function *method, GenericBinding *bindings) {
  if (!bindings) return;
  bindings[0].name = "Self";
  if (shape) generic_bindings_init_from_params(bindings, &shape->type_params, 1);
  size_t method_offset = shape_method_method_binding_offset(shape);
  if (method) generic_bindings_init_from_params(bindings, &method->type_params, method_offset);
}

static bool bind_type_arg_to_param(const Program *program, Scope *scope, const Param *param, const TypeArg *arg, GenericBinding *binding, const Expr *call, ZDiag *diag) {
  if (!param || !arg || !binding) return true;
  free(binding->type);
  binding->type = NULL;
  if (param->is_static) {
    const char *static_type = param->type ? param->type : "usize";
    if (!is_static_value_param_type(program, static_type)) {
      return set_diag_detail(diag, 3043, "static value parameter type is not supported", param->line, param->column, "integer, Bool, or enum static parameter", static_type, "use a concrete integer, Bool, or enum type for this static parameter");
    }
    binding->type = canonical_static_arg_for_type_in_scope(program, scope, arg->type, static_type);
    if (!binding->type) {
      return set_diag_detail(diag, 3044, "static value argument must be deterministic and concrete", call ? call->line : arg->line, call ? call->column : arg->column, static_value_expected_label(program, static_type), arg->type ? arg->type : "Unknown", "pass an explicit literal, top-level const, or supported meta value with the static parameter type");
    }
  } else {
    binding->type = z_strdup(arg->type ? arg->type : "Unknown");
  }
  return true;
}

static bool bind_type_arg_range_to_params(const Program *program, Scope *scope, const ParamVec *params, size_t param_offset, const TypeArgVec *type_args, size_t arg_offset, size_t count, GenericBinding *bindings, const Expr *call, ZDiag *diag) {
  if (!params || !type_args || !bindings) return count == 0;
  for (size_t i = 0; i < count; i++) {
    if (!bind_type_arg_to_param(program, scope, &params->items[i], &type_args->items[arg_offset + i], &bindings[param_offset + i], call, diag)) return false;
  }
  return true;
}

static bool finish_type_param_bindings(const Program *program, Scope *scope, const ParamVec *params, size_t binding_offset, GenericBinding *bindings, const Expr *call, ZDiag *diag, const char *message, const char *help) {
  if (!params || params->len == 0) return true;
  for (size_t i = 0; i < params->len; i++) {
    const Param *param = &params->items[i];
    GenericBinding *binding = &bindings[binding_offset + i];
    if (!binding->type || strcmp(binding->type, "Unknown") == 0) {
      char actual[128];
      snprintf(actual, sizeof(actual), "%s is not bound", binding->name ? binding->name : "generic parameter");
      return set_diag_detail(diag, 3046, message, call ? call->line : param->line, call ? call->column : param->column, "explicit method type arguments or inferable parameter/return types", actual, help);
    }
    if (!param->is_static) continue;
    const char *static_type = param->type ? param->type : "usize";
    if (!is_static_value_param_type(program, static_type)) {
      return set_diag_detail(diag, 3043, "static value parameter type is not supported", param->line, param->column, "integer, Bool, or enum static parameter", static_type, "use a concrete integer, Bool, or enum type for this static parameter");
    }
    char *canonical = canonical_static_arg_for_type_in_scope(program, scope, binding->type, static_type);
    if (!canonical) {
      return set_diag_detail(diag, 3044, "static value argument must be deterministic and concrete", call ? call->line : param->line, call ? call->column : param->column, static_value_expected_label(program, static_type), binding->type ? binding->type : "Unknown", "pass an explicit literal, top-level const, or supported meta value with the static parameter type");
    }
    free(binding->type);
    binding->type = canonical;
  }
  return true;
}

static bool bind_shape_method_explicit_type_args(const Program *program, Scope *scope, const Shape *shape, const Function *method, const Expr *call, bool receiver_style, ZDiag *diag, GenericBinding *bindings, bool *out_bound_shape, bool *out_bound_method) {
  if (out_bound_shape) *out_bound_shape = false;
  if (out_bound_method) *out_bound_method = false;
  const TypeArgVec *type_args = call_type_args(call);
  if (!type_args || type_args->len == 0) return true;
  size_t shape_len = shape ? shape->type_params.len : 0;
  size_t method_len = method ? method->type_params.len : 0;
  size_t method_offset = shape_method_method_binding_offset(shape);
  if (type_args->len == shape_len + method_len && shape_len + method_len > 0) {
    if (!bind_type_arg_range_to_params(program, scope, shape ? &shape->type_params : NULL, 1, type_args, 0, shape_len, bindings, call, diag)) return false;
    if (!bind_type_arg_range_to_params(program, scope, method ? &method->type_params : NULL, method_offset, type_args, shape_len, method_len, bindings, call, diag)) return false;
    if (out_bound_shape) *out_bound_shape = shape_len > 0;
    if (out_bound_method) *out_bound_method = method_len > 0;
    return true;
  }
  if (receiver_style && method_len > 0 && type_args->len == method_len) {
    if (!bind_type_arg_range_to_params(program, scope, &method->type_params, method_offset, type_args, 0, method_len, bindings, call, diag)) return false;
    if (out_bound_method) *out_bound_method = true;
    return true;
  }
  char expected[160];
  if (receiver_style) {
    snprintf(expected, sizeof(expected), "%zu method argument(s), or %zu shape plus method argument(s)", method_len, shape_len + method_len);
  } else {
    snprintf(expected, sizeof(expected), "%zu shape plus method argument(s)", shape_len + method_len);
  }
  return set_diag_detail(diag, 3046, receiver_style ? "generic receiver method type argument count mismatch" : "generic shape method type argument count mismatch", call->line, call->column, expected, "wrong generic method argument count", receiver_style ? "pass method type arguments after the receiver or omit them when inferable" : "pass explicit shape arguments followed by method type arguments, or omit them when inferable");
}

static bool bind_shape_params_from_self(const Program *program, Scope *scope, const Shape *shape, GenericBinding *bindings, size_t binding_len, ZDiag *diag, const Expr *call) {
  const char *self_type = generic_binding_lookup(bindings, binding_len, "Self");
  if (!self_type) return true;
  char owner_type[192];
  strip_ref_like_type(self_type, owner_type, sizeof(owner_type));
  if (shape->type_params.len == 0) return generic_binding_set(program, bindings, binding_len, "Self", shape->name);
  char **args = NULL;
  size_t arg_len = 0;
  if (!type_generic_arg_list(resolve_alias_type(program, owner_type), shape->name, &args, &arg_len) || arg_len != shape->type_params.len) {
    free_type_arg_list(args, arg_len);
    return set_diag_detail(diag, 3047, "shape method Self argument has the wrong instantiation", call->line, call->column, "Self instantiated with the declaring generic shape", owner_type, "call the method with a value of the declaring shape type");
  }
  bool ok = true;
  for (size_t i = 0; i < shape->type_params.len && ok; i++) {
    char *value = NULL;
    if (shape->type_params.items[i].is_static) {
      const char *static_type = shape->type_params.items[i].type ? shape->type_params.items[i].type : "usize";
      value = canonical_static_arg_for_type_in_scope(program, scope, args[i], static_type);
    } else {
      value = z_strdup(args[i]);
    }
    if (!value) {
      ok = set_diag_detail(diag, 3044, "static value argument must be deterministic and concrete", call->line, call->column, static_value_expected_label(program, shape->type_params.items[i].type), args[i], "pass an explicit literal, top-level const, or supported meta value with the static parameter type");
    } else {
      ok = generic_binding_set_with_static_context(program, scope, shape->type_params.items[i].is_static ? (shape->type_params.items[i].type ? shape->type_params.items[i].type : "usize") : NULL, bindings, binding_len, shape->type_params.items[i].name, value);
    }
    free(value);
  }
  free_type_arg_list(args, arg_len);
  if (!ok) return set_diag_detail(diag, 3047, "shape method Self argument conflicts with explicit shape arguments", call->line, call->column, "matching shape method instantiation", owner_type, "use one concrete shape instantiation for the method call");
  return true;
}

static bool shape_method_receiver_info(const Function *method, bool *requires_mut) {
  if (!method || method->params.len == 0 || !method->params.items[0].type) return false;
  char inner[160];
  if (named_ref_inner_text(method->params.items[0].type, "mutref", inner, sizeof(inner)) && strcmp(inner, "Self") == 0) {
    if (requires_mut) *requires_mut = true;
    return true;
  }
  if (named_ref_inner_text(method->params.items[0].type, "ref", inner, sizeof(inner)) && strcmp(inner, "Self") == 0) {
    if (requires_mut) *requires_mut = false;
    return true;
  }
  return false;
}

static char *receiver_self_arg_type(const char *receiver_type, bool requires_mut) {
  char ref_inner[192];
  if (named_ref_inner_text(receiver_type, "ref", ref_inner, sizeof(ref_inner)) ||
      named_ref_inner_text(receiver_type, "mutref", ref_inner, sizeof(ref_inner))) {
    return z_strdup(receiver_type);
  }
  char owner_type[192];
  strip_ref_like_type(receiver_type, owner_type, sizeof(owner_type));
  ZBuf buf;
  zbuf_init(&buf);
  zbuf_appendf(&buf, "%s<%s>", requires_mut ? "mutref" : "ref", owner_type);
  return buf.data;
}

static bool build_receiver_shape_method_bindings(CheckContext *ctx, const Program *program, const Shape *shape, const Function *method, const Expr *call, const char *self_arg_type, Scope *scope, ZDiag *diag, GenericBinding **out_bindings, size_t *out_len) {
  diag = check_context_diag(ctx, diag);
  size_t binding_len = shape_method_binding_count(shape, method);
  GenericBinding *bindings = z_checked_calloc(binding_len, sizeof(GenericBinding));
  shape_method_init_bindings(shape, method, bindings);
  bool bound_shape_args = false;
  bool bound_method_args = false;
  if (!bind_shape_method_explicit_type_args(program, scope, shape, method, call, true, diag, bindings, &bound_shape_args, &bound_method_args)) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    return false;
  }
  if (bound_shape_args) {
    bindings[0].type = shape_concrete_instance_type(shape, bindings, binding_len);
  }
  if (!infer_shape_method_binding(program, shape, method, scope, method->params.items[0].type, self_arg_type, bindings, binding_len)) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    return set_diag_detail(diag, 3047, "receiver method Self argument conflicts with explicit shape arguments", call->line, call->column, "matching receiver method instantiation", self_arg_type, "use one concrete shape instantiation for the receiver call");
  }
  if (!bind_shape_params_from_self(program, scope, shape, bindings, binding_len, diag, call)) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    return false;
  }
  for (size_t param_index = 1; method && param_index < method->params.len && param_index - 1 < call->args.len; param_index++) {
    const char *actual = expr_type(ctx, program, call->args.items[param_index - 1], scope);
    const char *pattern = method->params.items[param_index].type;
    size_t method_offset = shape_method_method_binding_offset(shape);
    bool ok = pattern && strstr(pattern, "Self")
      ? infer_shape_method_binding(program, shape, method, scope, pattern, actual, bindings, binding_len)
      : infer_shape_method_binding_in_range(program, shape, method, scope, pattern, actual, bindings, binding_len, method_offset, method ? method->type_params.len : 0);
    if (!ok) {
      generic_bindings_free(bindings, binding_len);
      free(bindings);
      return set_diag_detail(diag, 3047, "receiver method argument conflicts with inferred Self type", call->args.items[param_index - 1]->line, call->args.items[param_index - 1]->column, "one concrete shape instantiation", actual, "make all receiver method arguments use the same shape instantiation");
    }
  }
  if (!finish_type_param_bindings(program, scope, method ? &method->type_params : NULL, shape_method_method_binding_offset(shape), bindings, call, diag, "generic receiver method arguments cannot be inferred", "pass explicit method type arguments or make them inferable from the receiver call")) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    return false;
  }
  if (!bindings[0].type) bindings[0].type = shape_concrete_instance_type(shape, bindings, binding_len);
  for (size_t i = 0; i < binding_len; i++) {
    if (!bindings[i].type || strcmp(bindings[i].type, "Unknown") == 0) {
      char actual[128];
      snprintf(actual, sizeof(actual), "%s is not bound", bindings[i].name);
      generic_bindings_free(bindings, binding_len);
      free(bindings);
      return set_diag_detail(diag, 3046, "generic receiver method arguments cannot be inferred", call->line, call->column, "explicit shape method arguments or concrete receiver", actual, "call the method on a concrete receiver or pass explicit method type arguments");
    }
  }
  if (!validate_generic_constraints(program, method, call, diag, bindings, binding_len)) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    return false;
  }
  *out_bindings = bindings;
  *out_len = binding_len;
  return true;
}

static bool bind_shape_method_from_expected_self(const Program *program, Scope *scope, const Shape *shape, const Function *method, const Expr *call, const char *expected, GenericBinding *bindings, size_t binding_len, ZDiag *diag) {
  if (!program || !shape || !method || !expected || !method->return_type || strcmp(method->return_type, "Self") != 0) return true;
  char **args = NULL;
  size_t arg_len = 0;
  if (!type_generic_arg_list(resolve_alias_type(program, expected), shape->name, &args, &arg_len) || arg_len != shape->type_params.len) {
    free_type_arg_list(args, arg_len);
    return true;
  }
  for (size_t i = 0; i < shape->type_params.len; i++) {
    if (shape->type_params.items[i].is_static) {
      const char *static_type = shape->type_params.items[i].type ? shape->type_params.items[i].type : "usize";
      char *value = canonical_static_arg_for_type_in_scope(program, scope, args[i], static_type);
      if (!value) {
        free_type_arg_list(args, arg_len);
        return set_diag_detail(diag, 3044, "static value argument must be deterministic and concrete", call->line, call->column, static_value_expected_label(program, shape->type_params.items[i].type), args[i], "pass an explicit literal, top-level const, or supported meta value with the static parameter type");
      }
      if (!generic_binding_set_with_static_context(program, scope, static_type, bindings, binding_len, shape->type_params.items[i].name, value)) {
        free(value);
        free_type_arg_list(args, arg_len);
        return set_diag_detail(diag, 3047, "expected type conflicts with shape method Self type", call->line, call->column, "one concrete shape instantiation", expected, "use explicit shape method arguments when the expected type conflicts");
      }
      free(value);
    } else if (!generic_binding_set(program, bindings, binding_len, shape->type_params.items[i].name, args[i])) {
      free_type_arg_list(args, arg_len);
      return set_diag_detail(diag, 3047, "expected type conflicts with shape method Self type", call->line, call->column, "one concrete shape instantiation", expected, "use explicit shape method arguments when the expected type conflicts");
    }
  }
  if (!bindings[0].type) bindings[0].type = shape_concrete_instance_type(shape, bindings, binding_len);
  free_type_arg_list(args, arg_len);
  return true;
}

static bool build_shape_method_bindings(CheckContext *ctx, const Program *program, const Shape *shape, const Function *method, const Expr *call, Scope *scope, const char *expected, ZDiag *diag, GenericBinding **out_bindings, size_t *out_len) {
  diag = check_context_diag(ctx, diag);
  size_t binding_len = shape_method_binding_count(shape, method);
  GenericBinding *bindings = z_checked_calloc(binding_len, sizeof(GenericBinding));
  shape_method_init_bindings(shape, method, bindings);
  bool bound_shape_args = false;
  bool bound_method_args = false;
  if (!bind_shape_method_explicit_type_args(program, scope, shape, method, call, false, diag, bindings, &bound_shape_args, &bound_method_args)) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    return false;
  }
  if (bound_shape_args) {
    bindings[0].type = shape_concrete_instance_type(shape, bindings, binding_len);
  }
  if (!bound_shape_args && !bind_shape_method_from_expected_self(program, scope, shape, method, call, expected, bindings, binding_len, diag)) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    return false;
  }
  for (size_t i = 0; method && i < method->params.len && i < call->args.len; i++) {
    const char *actual = expr_type(ctx, program, call->args.items[i], scope);
    const char *pattern = method->params.items[i].type;
    size_t method_offset = shape_method_method_binding_offset(shape);
    bool ok = pattern && strstr(pattern, "Self")
      ? infer_shape_method_binding(program, shape, method, scope, pattern, actual, bindings, binding_len)
      : infer_shape_method_binding_in_range(program, shape, method, scope, pattern, actual, bindings, binding_len, method_offset, method->type_params.len);
    if (!ok) {
      generic_bindings_free(bindings, binding_len);
      free(bindings);
      return set_diag_detail(diag, 3047, "shape method argument conflicts with inferred Self type", call->args.items[i]->line, call->args.items[i]->column, "one concrete shape instantiation", actual, "make all method arguments use the same shape instantiation");
    }
    if (pattern && strstr(pattern, "Self") && !bind_shape_params_from_self(program, scope, shape, bindings, binding_len, diag, call)) {
      generic_bindings_free(bindings, binding_len);
      free(bindings);
      return false;
    }
  }
  if (!bound_method_args && expected) {
    const char *pattern = method ? method->return_type : NULL;
    size_t method_offset = shape_method_method_binding_offset(shape);
    bool ok = pattern && strstr(pattern, "Self")
      ? infer_shape_method_binding(program, shape, method, scope, pattern, expected, bindings, binding_len)
      : infer_shape_method_binding_in_range(program, shape, method, scope, pattern, expected, bindings, binding_len, method_offset, method ? method->type_params.len : 0);
    if (!ok) {
      generic_bindings_free(bindings, binding_len);
      free(bindings);
      return set_diag_detail(diag, 3047, "shape method return type conflicts with expected type", call->line, call->column, "one consistent method instantiation", expected, "use explicit method type arguments when the expected type conflicts");
    }
  }
  if (!bind_shape_params_from_self(program, scope, shape, bindings, binding_len, diag, call)) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    return false;
  }
  if (!finish_type_param_bindings(program, scope, method ? &method->type_params : NULL, shape_method_method_binding_offset(shape), bindings, call, diag, "generic shape method arguments cannot be inferred", "pass explicit method type arguments or make them inferable from the call")) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    return false;
  }
  if (!bindings[0].type) bindings[0].type = shape_concrete_instance_type(shape, bindings, binding_len);
  for (size_t i = 0; i < binding_len; i++) {
    if (!bindings[i].type || strcmp(bindings[i].type, "Unknown") == 0) {
      char actual[128];
      snprintf(actual, sizeof(actual), "%s is not bound", bindings[i].name);
      generic_bindings_free(bindings, binding_len);
      free(bindings);
      return set_diag_detail(diag, 3046, "generic shape method arguments cannot be inferred", call->line, call->column, "explicit shape method arguments or concrete Self argument", actual, "pass a concrete self argument or explicit method type arguments");
    }
  }
  if (!validate_generic_constraints(program, method, call, diag, bindings, binding_len)) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    return false;
  }
  *out_bindings = bindings;
  *out_len = binding_len;
  return true;
}

static const InterfaceDecl *find_interface(const Program *program, const char *name) {
  if (!program || !name) return NULL;
  for (size_t i = 0; i < program->interfaces.len; i++) {
    if (strcmp(program->interfaces.items[i].name, name) == 0) return &program->interfaces.items[i];
  }
  return NULL;
}

static const Function *find_interface_method_decl(const InterfaceDecl *interface, const char *name) {
  if (!interface || !name) return NULL;
  for (size_t i = 0; i < interface->methods.len; i++) {
    if (strcmp(interface->methods.items[i].name, name) == 0) return &interface->methods.items[i];
  }
  return NULL;
}

static bool interface_constraint_parts(const Program *program, const char *constraint, const InterfaceDecl **out_interface, char ***out_args, size_t *out_arg_len) {
  if (out_interface) *out_interface = NULL;
  if (out_args) *out_args = NULL;
  if (out_arg_len) *out_arg_len = 0;
  if (!constraint || strcmp(constraint, "Type") == 0) return true;
  const char *open = strchr(constraint, '<');
  char *name = open ? z_strndup(constraint, (size_t)(open - constraint)) : z_strdup(constraint);
  const InterfaceDecl *interface = find_interface(program, name);
  if (!interface) {
    free(name);
    return false;
  }
  char **args = NULL;
  size_t arg_len = 0;
  bool ok = true;
  if (open) {
    ok = type_generic_arg_list(constraint, name, &args, &arg_len);
  } else {
    arg_len = 0;
  }
  if (ok && arg_len != interface->type_params.len) ok = false;
  free(name);
  if (!ok) {
    free_type_arg_list(args, arg_len);
    return false;
  }
  if (out_interface) *out_interface = interface;
  if (out_args) *out_args = args;
  else free_type_arg_list(args, arg_len);
  if (out_arg_len) *out_arg_len = arg_len;
  return true;
}

static const InterfaceDecl *constrained_interface_for_type_param(const Program *program, const Function *fun, const char *type_param_name, char ***out_args, size_t *out_arg_len) {
  if (out_args) *out_args = NULL;
  if (out_arg_len) *out_arg_len = 0;
  if (!fun || !type_param_name) return NULL;
  for (size_t i = 0; i < fun->type_params.len; i++) {
    Param *param = &fun->type_params.items[i];
    if (strcmp(param->name, type_param_name) != 0 || !param->type || strcmp(param->type, "Type") == 0) continue;
    const InterfaceDecl *interface = NULL;
    char **args = NULL;
    size_t arg_len = 0;
    if (!interface_constraint_parts(program, param->type, &interface, &args, &arg_len)) {
      free_type_arg_list(args, arg_len);
      return NULL;
    }
    if (out_args) *out_args = args;
    else free_type_arg_list(args, arg_len);
    if (out_arg_len) *out_arg_len = arg_len;
    return interface;
  }
  return NULL;
}

static size_t interface_method_binding_count(const InterfaceDecl *interface, const Function *method) {
  return (interface ? interface->type_params.len : 0) + (method ? method->type_params.len : 0);
}

static size_t interface_method_method_binding_offset(const InterfaceDecl *interface) {
  return interface ? interface->type_params.len : 0;
}

static void interface_method_init_bindings(const InterfaceDecl *interface, const Function *method, GenericBinding *bindings) {
  if (!bindings) return;
  if (interface) generic_bindings_init_from_params(bindings, &interface->type_params, 0);
  size_t method_offset = interface_method_method_binding_offset(interface);
  if (method) generic_bindings_init_from_params(bindings, &method->type_params, method_offset);
}

static const Param *interface_method_binding_param_at(const InterfaceDecl *interface, const Function *method, size_t binding_index) {
  size_t interface_len = interface ? interface->type_params.len : 0;
  if (binding_index < interface_len) return &interface->type_params.items[binding_index];
  size_t method_offset = interface_method_method_binding_offset(interface);
  if (method && binding_index >= method_offset && binding_index - method_offset < method->type_params.len) return &method->type_params.items[binding_index - method_offset];
  return NULL;
}

static bool infer_interface_method_binding_in_range(const Program *program, const InterfaceDecl *interface, const Function *method, Scope *actual_scope, const char *pattern, const char *actual, GenericBinding *bindings, size_t binding_len, size_t binding_start, size_t binding_count) {
  TypeCoreInferenceBinder *binders = z_checked_calloc(binding_len ? binding_len : 1, sizeof(TypeCoreInferenceBinder));
  size_t binder_len = 0;
  for (size_t binding_index = 0; binding_index < binding_len; binding_index++) {
    bool infer = type_core_binding_in_inference_range(binding_index, binding_start, binding_count, binding_len);
    if (!infer && !type_core_fixed_binding_available(&bindings[binding_index])) continue;
    const Param *param = interface_method_binding_param_at(interface, method, binding_index);
    binders[binder_len] = (TypeCoreInferenceBinder){
      .binding_index = binding_index,
      .id = (ZTypeBinderId)(binder_len + 1),
      .is_static = param ? param->is_static : false,
      .infer = infer,
      .static_type = param && param->is_static ? (param->type ? param->type : "usize") : NULL,
    };
    binder_len++;
  }
  bool ok = infer_type_core_bindings(program, actual_scope, pattern, actual, bindings, binding_len, binders, binder_len);
  free(binders);
  return ok;
}

static bool build_constrained_interface_method_bindings(CheckContext *ctx, const Program *program, const Function *context_fun, const Expr *call, Scope *scope, const InterfaceDecl *interface, const Function *method, const char *expected_return, GenericBinding *context_bindings, size_t context_binding_len, ZDiag *diag, GenericBinding **out_bindings, size_t *out_len) {
  if (out_bindings) *out_bindings = NULL;
  if (out_len) *out_len = 0;
  if (!program || !context_fun || !call || call->kind != EXPR_CALL || !call->left || call->left->kind != EXPR_MEMBER ||
      !call->left->left || call->left->left->kind != EXPR_IDENT || !interface || !method || !out_bindings || !out_len) return false;
  diag = check_context_diag(ctx, diag);
  char **constraint_args = NULL;
  size_t constraint_arg_len = 0;
  constrained_interface_for_type_param(program, context_fun, call->left->left->text, &constraint_args, &constraint_arg_len);
  size_t binding_len = interface_method_binding_count(interface, method);
  GenericBinding *bindings = z_checked_calloc(binding_len ? binding_len : 1, sizeof(GenericBinding));
  interface_method_init_bindings(interface, method, bindings);
  for (size_t i = 0; i < interface->type_params.len; i++) {
    bindings[i].type = provenance_context_type_text(ctx, program, i < constraint_arg_len ? constraint_args[i] : "Unknown", context_bindings, context_binding_len);
  }
  free_type_arg_list(constraint_args, constraint_arg_len);

  size_t method_offset = interface_method_method_binding_offset(interface);
  const TypeArgVec *type_args = call_type_args(call);
  bool bound_method_args = false;
  if (type_args && type_args->len > 0) {
    if (type_args->len != method->type_params.len) {
      char expected[128];
      snprintf(expected, sizeof(expected), "%zu method type argument(s)", method->type_params.len);
      generic_bindings_free(bindings, binding_len);
      free(bindings);
      return set_diag_detail(diag, 3046, "generic interface method type argument count mismatch", call->line, call->column, expected, "wrong generic interface method argument count", "pass explicit method type arguments matching the interface method declaration");
    }
    if (!bind_type_arg_range_to_params(program, scope, &method->type_params, method_offset, type_args, 0, method->type_params.len, bindings, call, diag)) {
      generic_bindings_free(bindings, binding_len);
      free(bindings);
      return false;
    }
    bound_method_args = method->type_params.len > 0;
  }

  if (!bound_method_args) {
    for (size_t i = 0; method && scope && i < method->params.len && i < call->args.len; i++) {
      const char *actual = expr_type(ctx, program, call->args.items[i], scope);
      if (!infer_interface_method_binding_in_range(program, interface, method, scope, method->params.items[i].type, actual, bindings, binding_len, method_offset, method->type_params.len)) {
        generic_bindings_free(bindings, binding_len);
        free(bindings);
        return set_diag_detail(diag, 3047, "interface method argument conflicts with inferred method type", call->args.items[i]->line, call->args.items[i]->column, "one consistent interface method instantiation", actual, "use explicit method type arguments when inference conflicts");
      }
    }
    if (expected_return && !infer_interface_method_binding_in_range(program, interface, method, scope, method->return_type, expected_return, bindings, binding_len, method_offset, method->type_params.len)) {
      generic_bindings_free(bindings, binding_len);
      free(bindings);
      return set_diag_detail(diag, 3047, "interface method return type conflicts with expected type", call->line, call->column, "one consistent interface method instantiation", expected_return, "use explicit method type arguments when the expected type conflicts");
    }
  }

  if (!finish_type_param_bindings(program, scope, &method->type_params, method_offset, bindings, call, diag, "generic interface method arguments cannot be inferred", "pass explicit method type arguments or make them inferable from the constrained call")) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    return false;
  }
  if (!validate_generic_constraints(program, method, call, diag, bindings, binding_len)) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    return false;
  }
  *out_bindings = bindings;
  *out_len = binding_len;
  return true;
}

static const Function *find_constrained_interface_method_in_function(const Program *program, const Function *fun, const Expr *callee, const InterfaceDecl **out_interface) {
  if (!callee || callee->kind != EXPR_MEMBER || !callee->left || callee->left->kind != EXPR_IDENT) return NULL;
  char **args = NULL;
  size_t arg_len = 0;
  const InterfaceDecl *interface = constrained_interface_for_type_param(program, fun, callee->left->text, &args, &arg_len);
  free_type_arg_list(args, arg_len);
  if (!interface) return NULL;
  const Function *method = find_interface_method_decl(interface, callee->text);
  if (method && out_interface) *out_interface = interface;
  return method;
}

static const Function *find_concrete_constrained_shape_method_in_context(const CheckContext *ctx, const Program *program, const Function *context_fun, GenericBinding *bindings, size_t binding_len, const Expr *callee, const Shape **out_shape) {
  if (out_shape) *out_shape = NULL;
  if (!program || !callee || callee->kind != EXPR_MEMBER || !callee->left || callee->left->kind != EXPR_IDENT) return NULL;
  char **constraint_args = NULL;
  size_t constraint_arg_len = 0;
  const InterfaceDecl *interface = constrained_interface_for_type_param(program, context_fun, callee->left->text, &constraint_args, &constraint_arg_len);
  free_type_arg_list(constraint_args, constraint_arg_len);
  if (!interface) return NULL;
  if ((!bindings || binding_len == 0) && ctx && ctx->return_provenance_expr_bindings && ctx->return_provenance_expr_binding_len > 0) {
    bindings = ctx->return_provenance_expr_bindings;
    binding_len = ctx->return_provenance_expr_binding_len;
  }
  if (!bindings || binding_len == 0) return NULL;
  const char *bound_owner = generic_binding_lookup(bindings, binding_len, callee->left->text);
  if (!bound_owner) return NULL;
  char owner_type[192];
  strip_ref_like_type(bound_owner, owner_type, sizeof(owner_type));
  const Shape *shape = find_shape_for_type(program, owner_type);
  if (!shape) return NULL;
  const Function *method = find_shape_method_decl(shape, callee->text);
  if (method && out_shape) *out_shape = shape;
  return method;
}

static void call_resolution_init_callee(ZCallResolution *out, ZCallKind kind, const Expr *call, const Function *callee) {
  z_call_resolution_init(out);
  out->kind = kind;
  out->call_expr = call;
  out->callee_expr = call ? call->left : NULL;
  out->type_args = call_type_args(call);
  out->callee = callee;
  out->param_len = callee ? callee->params.len : 0;
  out->fallible = callee && (callee->raises || callee->has_error_set);
  z_call_resolution_set_callee_name(out, callee ? callee->name : NULL);
  z_call_resolution_set_return_type(out, callee && callee->return_type ? callee->return_type : "Void");
  call_resolution_record_function_errors(out, callee);
}

static bool resolve_shape_namespace_call(const Program *program, const Expr *call, ZCallResolution *out) {
  if (!program || !call || call->kind != EXPR_CALL || !call->left || !out) return false;
  const Shape *shape = NULL;
  const Function *callee = find_namespace_shape_method(program, call->left, &shape);
  if (!callee) return false;
  call_resolution_init_callee(out, Z_CALL_SHAPE_NAMESPACE, call, callee);
  out->shape = shape;
  return true;
}

static bool resolve_concrete_constrained_shape_call(const CheckContext *ctx, const Program *program, const Function *context_fun, GenericBinding *bindings, size_t binding_len, const Expr *call, ZCallResolution *out) {
  if (!program || !call || call->kind != EXPR_CALL || !call->left || !out) return false;
  const Shape *shape = NULL;
  const Function *callee = find_concrete_constrained_shape_method_in_context(ctx, program, context_fun, bindings, binding_len, call->left, &shape);
  if (!callee) return false;
  call_resolution_init_callee(out, Z_CALL_CONCRETE_CONSTRAINED_SHAPE, call, callee);
  out->shape = shape;
  return true;
}

static bool resolve_constrained_interface_call(const Program *program, const Function *context_fun, const Expr *call, ZCallResolution *out) {
  if (!program || !call || call->kind != EXPR_CALL || !call->left || !out) return false;
  const InterfaceDecl *interface = NULL;
  const Function *callee = find_constrained_interface_method_in_function(program, context_fun, call->left, &interface);
  if (!callee || !interface) return false;
  call_resolution_init_callee(out, Z_CALL_CONSTRAINED_INTERFACE, call, callee);
  out->interface = interface;
  return true;
}

static bool resolve_receiver_shape_call(CheckContext *ctx, const Program *program, const Expr *call, Scope *scope, const char *receiver_type_hint, ZCallResolution *out) {
  if (!program || !call || call->kind != EXPR_CALL || !call->left || call->left->kind != EXPR_MEMBER || !call->left->left || !scope || !out) return false;
  const Expr *receiver = call->left->left;
  const char *receiver_type_raw = receiver_type_hint ? receiver_type_hint : expr_type(ctx, program, receiver, scope);
  char receiver_type[192];
  strip_ref_like_type(receiver_type_raw, receiver_type, sizeof(receiver_type));
  const Shape *shape = (strcmp(receiver_type, "Self") == 0 && ctx) ? ctx->shape : NULL;
  if (!shape) shape = find_shape_for_type(program, receiver_type);
  const Function *callee = find_shape_method_decl(shape, call->left->text);
  bool receiver_requires_mut = false;
  if (!callee || !shape_method_receiver_info(callee, &receiver_requires_mut)) return false;
  call_resolution_init_callee(out, Z_CALL_RECEIVER, call, callee);
  out->receiver_expr = receiver;
  out->param_offset = 1;
  out->shape = shape;
  return true;
}

static bool resolve_stdlib_callee(const Expr *callee, const Expr *call, ZCallResolution *out) {
  if (!callee || callee->kind != EXPR_MEMBER || !out) return false;
  ZBuf name;
  zbuf_init(&name);
  member_name_buf(callee, &name);
  const ZStdHelperInfo *helper = name.data ? z_std_helper_find(name.data) : NULL;
  bool resolved = helper != NULL;
  if (resolved) {
    z_call_resolution_init(out);
    out->kind = Z_CALL_STDLIB;
    out->call_expr = call;
    out->callee_expr = callee;
    out->type_args = call_type_args(call);
    out->std_helper = helper;
    out->param_len = helper->arg_count >= 0 ? (size_t)helper->arg_count : 0;
    z_call_resolution_set_callee_name(out, name.data);
    z_call_resolution_set_return_type(out, helper->return_type);
    for (size_t i = 0; call && helper->arg_count > 0 && i < (size_t)helper->arg_count && i < Z_STD_HELPER_MAX_ARGS && i < call->args.len; i++) {
      if (helper->arg_types[i]) z_call_resolution_add_arg(out, i, call->args.items[i], helper->arg_types[i], NULL);
    }
    for (size_t i = 0; i < Z_STD_HELPER_MAX_ERRORS; i++) {
      const char *error_name = z_std_helper_error_name(helper, i);
      if (!error_name) break;
      z_call_resolution_add_error(out, error_name);
    }
  }
  zbuf_free(&name);
  return resolved;
}

static bool resolve_stdlib_call(const Expr *call, ZCallResolution *out) {
  if (!call || call->kind != EXPR_CALL || !call->left) return false;
  return resolve_stdlib_callee(call->left, call, out);
}

static bool resolve_c_import_call(const Program *program, const ZTargetInfo *target, const Expr *call, Scope *scope, ZCallResolution *out) {
  if (!program || !call || call->kind != EXPR_CALL || !call->left || call->left->kind != EXPR_MEMBER ||
      !call->left->left || call->left->left->kind != EXPR_IDENT || !out) {
    return false;
  }
  const char *alias = call->left->left->text;
  const char *symbol = call->left->text;
  if (scope_has(scope, alias)) return false;
  ZCImportFunction function = {0};
  if (!z_c_import_find_function_for_target(program, target, alias, symbol, &function, NULL)) return false;
  z_call_resolution_init(out);
  out->kind = Z_CALL_C_IMPORT;
  out->call_expr = call;
  out->callee_expr = call->left;
  out->type_args = call_type_args(call);
  out->param_len = function.param_len;
  ZBuf name;
  zbuf_init(&name);
  zbuf_append(&name, alias ? alias : "");
  zbuf_append_char(&name, '.');
  zbuf_append(&name, symbol ? symbol : "");
  z_call_resolution_set_callee_name(out, name.data);
  z_call_resolution_set_return_type(out, function.return_zero_type);
  for (size_t i = 0; i < function.param_len && i < call->args.len; i++) {
    z_call_resolution_add_arg(out, i, call->args.items[i], function.params[i].zero_type, NULL);
  }
  zbuf_free(&name);
  z_c_import_function_free(&function);
  return true;
}

static bool resolve_stdlib_fallible_call(const Expr *expr, ZCallResolution *out) {
  if (!out) return false;
  ZCallResolution resolution = {0};
  if (!resolve_stdlib_call(expr, &resolution)) return false;
  if (!resolution.fallible) {
    z_call_resolution_free(&resolution);
    return false;
  }
  *out = resolution;
  return true;
}

static bool stdlib_call_has_error_flow(const Expr *expr) {
  ZCallResolution resolution = {0};
  bool result = resolve_stdlib_fallible_call(expr, &resolution);
  z_call_resolution_free(&resolution);
  return result;
}

static bool stdlib_call_error_sets_covered(const Function *caller, ZDiag *diag, const Expr *stdlib_call, const Expr *diagnostic_expr) {
  ZCallResolution resolution = {0};
  if (!resolve_stdlib_fallible_call(stdlib_call, &resolution)) return true;
  bool result = function_error_sets_include_stdlib_resolution(caller, diag, &resolution, diagnostic_expr);
  z_call_resolution_free(&resolution);
  return result;
}

static bool stdlib_fallible_return_type_text(const Expr *expr, char *buf, size_t cap) {
  if (!buf || cap == 0) return false;
  ZCallResolution resolution = {0};
  if (!resolve_stdlib_fallible_call(expr, &resolution)) return false;
  snprintf(buf, cap, "%s", resolution.return_type ? resolution.return_type : "Unknown");
  z_call_resolution_free(&resolution);
  return true;
}

static const char *stdlib_fallible_return_type(const Expr *expr) {
  static char return_type[160];
  return stdlib_fallible_return_type_text(expr, return_type, sizeof(return_type)) ? return_type : NULL;
}

static bool resolve_choice_constructor_call(const Program *program, const Expr *call, ZCallResolution *out) {
  if (!program || !call || call->kind != EXPR_CALL || !call->left || call->left->kind != EXPR_MEMBER ||
      !call->left->left || call->left->left->kind != EXPR_IDENT || !out) return false;
  const Choice *choice = find_choice(program, call->left->left->text);
  if (!choice) return false;
  const Param *item_case = find_case(&choice->cases, call->left->text);
  if (!item_case) return false;
  z_call_resolution_init(out);
  out->kind = Z_CALL_CHOICE_CONSTRUCTOR;
  out->call_expr = call;
  out->callee_expr = call->left;
  out->choice = choice;
  out->choice_case = item_case;
  out->param_len = item_case->type ? 1 : 0;
  ZBuf name;
  zbuf_init(&name);
  member_name_buf(call->left, &name);
  z_call_resolution_set_callee_name(out, name.data);
  zbuf_free(&name);
  z_call_resolution_set_return_type(out, choice->name ? choice->name : "Unknown");
  return true;
}

static void set_expr_resolved_type(const Expr *expr, const char *type) {
  if (!expr) return;
  Expr *mutable_expr = (Expr *)expr;
  free(mutable_expr->resolved_type);
  mutable_expr->resolved_type = z_strdup(type ? type : "Unknown");
}

static void type_arg_vec_free_shallow(TypeArgVec *args) {
  if (!args) return;
  for (size_t i = 0; i < args->len; i++) free(args->items[i].type);
  free(args->items);
  *args = (TypeArgVec){0};
}

static void type_arg_vec_push_copy(TypeArgVec *args, const char *type, int line, int column) {
  if (!args) return;
  args->items = z_checked_reallocarray(args->items, args->len + 1, sizeof(TypeArg));
  args->items[args->len++] = (TypeArg){
    .type = z_strdup(type ? type : "Unknown"),
    .line = line,
    .column = column
  };
}

static void set_expr_checked_type_args(const Expr *expr, GenericBinding *bindings, size_t binding_len) {
  if (!expr) return;
  Expr *mutable_expr = (Expr *)expr;
  type_arg_vec_free_shallow(&mutable_expr->checked_type_args);
  for (size_t i = 0; bindings && i < binding_len; i++) {
    type_arg_vec_push_copy(&mutable_expr->checked_type_args, bindings[i].type, expr->line, expr->column);
  }
}

static bool bind_type_args_to_bindings(CheckContext *ctx, const Program *program, const TypeArgVec *type_args, GenericBinding *bindings, size_t binding_len, GenericBinding *context_bindings, size_t context_binding_len) {
  if (!type_args || type_args->len != binding_len || !bindings) return false;
  for (size_t i = 0; i < binding_len; i++) {
    free(bindings[i].type);
    bindings[i].type = provenance_context_type_text(ctx, program, type_args->items[i].type, context_bindings, context_binding_len);
  }
  return true;
}

static void set_stmt_resolved_type(const Stmt *stmt, const char *type) {
  if (!stmt) return;
  Stmt *mutable_stmt = (Stmt *)stmt;
  free(mutable_stmt->resolved_type);
  mutable_stmt->resolved_type = z_strdup(type ? type : "Unknown");
}

static bool is_bool_type(const char *type) {
  return type && (strcmp(type, "Bool") == 0 || strcmp(type, "bool") == 0);
}

static bool is_char_type(const char *type) {
  return type && strcmp(type, "char") == 0;
}

static bool type_is_const(const char *type) {
  return type && strncmp(type, "const ", strlen("const ")) == 0;
}

static const char *type_strip_const(const char *type) {
  return type_is_const(type) ? type + strlen("const ") : type;
}

static bool is_float_type(const char *type) {
  return type && (strcmp(type, "f32") == 0 || strcmp(type, "f64") == 0);
}

typedef struct {
  const char *name;
  int bits;
  bool is_signed;
  unsigned long long max;
} IntTypeInfo;

static bool int_type_info(const char *type, IntTypeInfo *out) {
  if (!type) return false;
  IntTypeInfo info[] = {
    {"i8", 8, true, 127ull},
    {"i16", 16, true, 32767ull},
    {"i32", 32, true, 2147483647ull},
    {"i64", 64, true, 9223372036854775807ull},
    {"u8", 8, false, 255ull},
    {"u16", 16, false, 65535ull},
    {"u32", 32, false, 4294967295ull},
    {"u64", 64, false, 18446744073709551615ull},
    {"usize", (int)(sizeof(size_t) * 8), false, sizeof(size_t) == 8 ? 18446744073709551615ull : 4294967295ull},
    {"isize", (int)(sizeof(size_t) * 8), true, sizeof(size_t) == 8 ? 9223372036854775807ull : 2147483647ull},
  };
  for (size_t i = 0; i < sizeof(info) / sizeof(info[0]); i++) {
    if (strcmp(type, info[i].name) == 0) {
      if (out) *out = info[i];
      return true;
    }
  }
  return false;
}

static bool is_int_type(const char *type) {
  return int_type_info(type, NULL);
}

static bool is_primitive_cast_type(const char *type) {
  return is_int_type(type) || is_float_type(type) || is_char_type(type);
}

static bool is_abi_scalar_type(const char *type) {
  type = type_strip_const(type);
  return is_int_type(type) || is_float_type(type) || is_char_type(type) || is_bool_type(type) ||
         type_is_named_generic(type, "ref") || type_is_named_generic(type, "mutref");
}

static bool is_c_abi_type(const char *type) {
  type = type_strip_const(type);
  return (type && strcmp(type, "Void") == 0) || is_abi_scalar_type(type);
}

static bool is_packed_scalar_type(const char *type) {
  type = type_strip_const(type);
  return is_int_type(type) || is_char_type(type) || is_bool_type(type);
}

static bool is_float_literal_text(const char *text) {
  return text && strchr(text, '.') != NULL;
}

typedef struct {
  unsigned long long value;
  const char *suffix;
  bool overflow;
} ParsedIntegerLiteral;

static int integer_digit_value(char ch) {
  if (ch >= '0' && ch <= '9') return ch - '0';
  if (ch >= 'a' && ch <= 'f') return 10 + (ch - 'a');
  if (ch >= 'A' && ch <= 'F') return 10 + (ch - 'A');
  return -1;
}

static bool parse_integer_literal(const char *text, ParsedIntegerLiteral *out) {
  if (!text || !text[0]) return false;
  size_t text_len = strlen(text);
  size_t body_len = text_len;
  const char *suffix = NULL;
  const char *last_underscore = strrchr(text, '_');
  if (last_underscore) {
    const char *candidate = last_underscore + 1;
    if (candidate[0] == 0) return false;
    if (int_type_info(candidate, NULL)) {
      suffix = candidate;
      body_len = (size_t)(last_underscore - text);
    } else if (candidate[0] == 'i' || candidate[0] == 'u') {
      return false;
    }
  }
  if (body_len == 0) return false;

  int radix = 10;
  size_t cursor_index = 0;
  if (body_len >= 2 && text[0] == '0' && (text[1] == 'x' || text[1] == 'X')) {
    radix = 16;
    cursor_index = 2;
  } else if (body_len >= 2 && text[0] == '0' && (text[1] == 'b' || text[1] == 'B')) {
    radix = 2;
    cursor_index = 2;
  } else if (body_len >= 2 && text[0] == '0' && (text[1] == 'o' || text[1] == 'O')) {
    radix = 8;
    cursor_index = 2;
  }
  if (cursor_index >= body_len) return false;

  unsigned long long value = 0;
  bool saw_digit = false;
  bool previous_underscore = false;
  bool overflow = false;
  for (; cursor_index < body_len; cursor_index++) {
    char ch = text[cursor_index];
    if (ch == '_') {
      if (!saw_digit || previous_underscore) return false;
      previous_underscore = true;
      continue;
    }
    int digit = integer_digit_value(ch);
    if (digit < 0 || digit >= radix) return false;
    if (value > (ULLONG_MAX - (unsigned)digit) / (unsigned)radix) {
      overflow = true;
      value = ULLONG_MAX;
    } else if (!overflow) {
      value = value * (unsigned)radix + (unsigned)digit;
    }
    saw_digit = true;
    previous_underscore = false;
  }
  if (!saw_digit || previous_underscore) return false;
  out->value = value;
  out->suffix = suffix;
  out->overflow = overflow;
  return true;
}

static bool validate_integer_literal_for_type(const Expr *expr, const char *expected, ZDiag *diag) {
  if (!expr || expr->kind != EXPR_NUMBER) return true;
  ParsedIntegerLiteral parsed = {0};
  if (!parse_integer_literal(expr->text, &parsed)) {
    return set_diag_detail(diag, 3021, "malformed integer literal", expr->line, expr->column, "integer literal with optional radix prefix, separators, and integer suffix", expr->text, "use digits valid for the literal radix and a supported integer suffix");
  }
  const char *target = parsed.suffix ? parsed.suffix : (expected && is_int_type(expected) ? expected : "i32");
  IntTypeInfo info;
  int_type_info(target, &info);
  if (parsed.overflow || parsed.value > info.max) {
    char actual[128];
    snprintf(actual, sizeof(actual), "%s overflows %s", expr->text, target);
    return set_diag_detail(diag, 3022, "integer literal is out of range", expr->line, expr->column, target, actual, "use a smaller literal or a wider integer type");
  }
  set_expr_resolved_type(expr, target);
  return true;
}

static bool expr_is_untyped_int_literal(const Expr *expr) {
  if (!expr || expr->kind != EXPR_NUMBER || !expr->text) return false;
  if (is_float_literal_text(expr->text)) return false;
  ParsedIntegerLiteral parsed = {0};
  return parse_integer_literal(expr->text, &parsed) && !parsed.suffix;
}

static bool parse_float_literal(const char *text, double *out, bool *out_of_range) {
  if (!text || !text[0]) return false;
  if (strchr(text, '_')) return false;
  size_t index = 0;
  if (!isdigit((unsigned char)text[index])) return false;
  while (isdigit((unsigned char)text[index])) index++;
  if (text[index] != '.') return false;
  index++;
  if (!isdigit((unsigned char)text[index])) return false;
  while (isdigit((unsigned char)text[index])) index++;
  if (text[index] == 'e' || text[index] == 'E') {
    index++;
    if (text[index] == '+' || text[index] == '-') index++;
    if (!isdigit((unsigned char)text[index])) return false;
    while (isdigit((unsigned char)text[index])) index++;
  }
  if (text[index] != 0) return false;

  errno = 0;
  char *end = NULL;
  double value = strtod(text, &end);
  if (!end || *end != 0) return false;
  *out = value;
  *out_of_range = errno == ERANGE;
  return true;
}

static bool validate_float_literal_for_type(const Expr *expr, const char *expected, ZDiag *diag) {
  if (!expr || expr->kind != EXPR_NUMBER) return true;
  double value = 0.0;
  bool out_of_range = false;
  if (!parse_float_literal(expr->text, &value, &out_of_range)) {
    return set_diag_detail(diag, 3025, "malformed float literal", expr->line, expr->column, "digits '.' digits with optional exponent", expr->text, "use a decimal literal like 1.0, 0.5, or 1.0e-3");
  }
  const char *target = expected && is_float_type(expected) ? expected : "f64";
  if (out_of_range || (strcmp(target, "f32") == 0 && value > FLT_MAX)) {
    char actual[128];
    snprintf(actual, sizeof(actual), "%s overflows %s", expr->text, target);
    return set_diag_detail(diag, 3026, "float literal is out of range", expr->line, expr->column, target, actual, "use a smaller literal or f64");
  }
  set_expr_resolved_type(expr, target);
  return true;
}

static bool fixed_array_type_parts(const char *type, char *length, size_t length_len, char *element, size_t element_len) {
  if (!type || type[0] != '[' || !element || element_len == 0) return false;
  const char *close = strchr(type, ']');
  if (!close || close == type + 1 || !close[1]) return false;
  if (length && length_len > 0) snprintf(length, length_len, "%.*s", (int)(close - type - 1), type + 1);
  snprintf(element, element_len, "%s", close + 1);
  return true;
}

static bool index_element_type(const char *base_type, char *out, size_t out_len) {
  if (!base_type || !out || out_len == 0) return false;
  char ref_inner[128];
  if (ref_inner_text(base_type, ref_inner, sizeof(ref_inner))) base_type = ref_inner;
  if (strcmp(base_type, "String") == 0) {
    snprintf(out, out_len, "u8");
    return true;
  }
  if (fixed_array_type_parts(base_type, NULL, 0, out, out_len)) return true;
  const char *inner = NULL;
  size_t inner_len = 0;
  if (type_has_generic_arg(base_type, "Span", &inner, &inner_len) ||
      type_has_generic_arg(base_type, "MutSpan", &inner, &inner_len)) {
    snprintf(out, out_len, "%.*s", (int)inner_len, inner);
    return true;
  }
  return false;
}

static bool type_contains_owned(const Program *program, const char *type, size_t depth) {
  if (!program || !type || depth > 16) return false;
  type = type_strip_const(resolve_alias_type(program, type));
  if (type_is_owned(type)) return true;

  const char *inner = NULL;
  size_t inner_len = 0;
  if (type_has_generic_arg(type, "Maybe", &inner, &inner_len)) {
    char *inner_type = z_strndup(inner, inner_len);
    bool result = type_contains_owned(program, inner_type, depth + 1);
    free(inner_type);
    return result;
  }

  char element_type[160];
  if (fixed_array_type_parts(type, NULL, 0, element_type, sizeof(element_type))) {
    return type_contains_owned(program, element_type, depth + 1);
  }

  const Choice *choice = find_choice(program, type);
  if (choice) {
    for (size_t i = 0; i < choice->cases.len; i++) {
      const Param *item_case = &choice->cases.items[i];
      if (item_case->type && type_contains_owned(program, item_case->type, depth + 1)) return true;
    }
    return false;
  }

  const Shape *shape = find_shape_for_type(program, type);
  if (shape) {
    for (size_t i = 0; i < shape->fields.len; i++) {
      const Param *field = &shape->fields.items[i];
      if (!field->type) continue;
      char *field_type = shape_field_type_for_owner(program, shape, type, field);
      bool result = type_contains_owned(program, field_type, depth + 1);
      free(field_type);
      if (result) return true;
    }
  }
  return false;
}

static bool resolve_expr_call_for_type(CheckContext *ctx, const Program *program, const Expr *call, Scope *scope, ZCallResolution *resolution) {
  if (!program || !call || call->kind != EXPR_CALL || !call->left || !resolution) return false;
  if (call->left->kind == EXPR_IDENT) return resolve_named_function_call(program, call, resolution);
  if (call->left->kind != EXPR_MEMBER) return false;
  return resolve_shape_namespace_call(program, call, resolution) ||
    resolve_concrete_constrained_shape_call(ctx, program, ctx ? ctx->function : NULL, ctx ? ctx->return_provenance_expr_bindings : NULL, ctx ? ctx->return_provenance_expr_binding_len : 0, call, resolution) ||
    resolve_constrained_interface_call(program, ctx ? ctx->function : NULL, call, resolution) ||
    resolve_receiver_shape_call(ctx, program, call, scope, NULL, resolution) ||
    resolve_choice_constructor_call(program, call, resolution) ||
    resolve_c_import_call(program, check_context_target(ctx), call, scope, resolution) ||
    resolve_stdlib_call(call, resolution);
}

static void expr_call_return_set_substituted(const Program *program, const char *type, GenericBinding *bindings, size_t binding_len, char *out, size_t out_len) {
  char *substituted = type_substitute_generic_signature(program, type, bindings, binding_len);
  snprintf(out, out_len, "%s", substituted);
  free(substituted);
}

static const char *expr_call_return_type(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope) {
  if (!expr || expr->kind != EXPR_CALL || !expr->left) return "Unknown";
  if (expr->left->kind == EXPR_IDENT && strcmp(expr->left->text, "expect") == 0) return "Void";
  if (expr->left->kind == EXPR_MEMBER && is_world_stream_write_callee(expr->left, scope)) return "Void";

  ZCallResolution resolution = {0};
  if (!resolve_expr_call_for_type(ctx, program, expr, scope, &resolution)) return "Unknown";
  static char return_type[160];
  snprintf(return_type, sizeof(return_type), "%s", resolution.return_type ? resolution.return_type : "Unknown");

  if (resolution.kind == Z_CALL_FUNCTION && function_is_generic(resolution.callee)) {
    GenericBinding *bindings = NULL;
    size_t binding_len = 0;
    if (generic_call_bindings_from_checked_call(ctx, program, resolution.callee, expr, scope, NULL, &bindings, &binding_len)) {
      provenance_context_substitute_bindings(ctx, program, bindings, binding_len, ctx ? ctx->return_provenance_expr_bindings : NULL, ctx ? ctx->return_provenance_expr_binding_len : 0);
      expr_call_return_set_substituted(program, resolution.return_type, bindings, binding_len, return_type, sizeof(return_type));
    }
    generic_bindings_free(bindings, binding_len);
    free(bindings);
  } else if (resolution.kind == Z_CALL_SHAPE_NAMESPACE || resolution.kind == Z_CALL_CONCRETE_CONSTRAINED_SHAPE) {
    GenericBinding *bindings = NULL;
    size_t binding_len = 0;
    ZDiag ignored = {0};
    bool recorded_type_args = false;
    if (shape_method_bindings_from_recorded_type_args(ctx, program, resolution.shape, resolution.callee, expr, &bindings, &binding_len, &recorded_type_args) ||
        (!recorded_type_args && build_shape_method_bindings(ctx, program, resolution.shape, resolution.callee, expr, scope, NULL, &ignored, &bindings, &binding_len))) {
      provenance_context_substitute_bindings(ctx, program, bindings, binding_len, ctx ? ctx->return_provenance_expr_bindings : NULL, ctx ? ctx->return_provenance_expr_binding_len : 0);
      expr_call_return_set_substituted(program, resolution.return_type, bindings, binding_len, return_type, sizeof(return_type));
    }
    generic_bindings_free(bindings, binding_len);
    free(bindings);
  } else if (resolution.kind == Z_CALL_CONSTRAINED_INTERFACE) {
    GenericBinding *bindings = NULL;
    size_t binding_len = 0;
    ZDiag ignored = {0};
    bool recorded_type_args = false;
    if (interface_method_bindings_from_recorded_type_args(ctx, program, resolution.interface, resolution.callee, expr, ctx ? ctx->return_provenance_expr_bindings : NULL, ctx ? ctx->return_provenance_expr_binding_len : 0, &bindings, &binding_len, &recorded_type_args) ||
        (!recorded_type_args && build_constrained_interface_method_bindings(ctx, program, ctx ? ctx->function : NULL, expr, scope, resolution.interface, resolution.callee, NULL, ctx ? ctx->return_provenance_expr_bindings : NULL, ctx ? ctx->return_provenance_expr_binding_len : 0, &ignored, &bindings, &binding_len))) {
      expr_call_return_set_substituted(program, resolution.return_type, bindings, binding_len, return_type, sizeof(return_type));
    }
    generic_bindings_free(bindings, binding_len);
    free(bindings);
  } else if (resolution.kind == Z_CALL_RECEIVER) {
    bool receiver_requires_mut = false;
    GenericBinding *bindings = NULL;
    size_t binding_len = 0;
    ZDiag ignored = {0};
    if (shape_method_receiver_info(resolution.callee, &receiver_requires_mut)) {
      char *self_arg_type = receiver_self_arg_type(expr_type(ctx, program, resolution.receiver_expr, scope), receiver_requires_mut);
      bool recorded_type_args = false;
      if (shape_method_bindings_from_recorded_type_args(ctx, program, resolution.shape, resolution.callee, expr, &bindings, &binding_len, &recorded_type_args) ||
          (!recorded_type_args && build_receiver_shape_method_bindings(ctx, program, resolution.shape, resolution.callee, expr, self_arg_type, scope, &ignored, &bindings, &binding_len))) {
        expr_call_return_set_substituted(program, resolution.return_type, bindings, binding_len, return_type, sizeof(return_type));
      }
      free(self_arg_type);
    }
    generic_bindings_free(bindings, binding_len);
    free(bindings);
  }

  z_call_resolution_free(&resolution);
  return return_type;
}

static const char *expr_type(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope) {
  if (!expr) return "Void";
  const char *resolved_type = expr_resolved_type_for_current_context(ctx, expr);
  if (resolved_type) return resolved_type;
  switch (expr->kind) {
    case EXPR_STRING: return "String";
    case EXPR_CHAR: return "char";
    case EXPR_NUMBER: {
      if (expr->resolved_type) return expr->resolved_type;
      if (is_float_literal_text(expr->text)) return "f64";
      ParsedIntegerLiteral parsed = {0};
      if (parse_integer_literal(expr->text, &parsed) && parsed.suffix) return parsed.suffix;
      return "i32";
    }
    case EXPR_BOOL: return "Bool";
    case EXPR_NULL: return "Null";
    case EXPR_IDENT: {
      const char *type = scope_type(scope, expr->text);
      if (type) return type;
      const Function *fun = find_function(program, expr->text);
      return fun ? fun->return_type : "Unknown";
    }
    case EXPR_CALL: return expr_call_return_type(ctx, program, expr, scope);
    case EXPR_INDEX: {
      static char element_type[128];
      if (index_element_type(expr_type(ctx, program, expr->left, scope), element_type, sizeof(element_type))) return element_type;
      return "Unknown";
    }
    case EXPR_SLICE: {
      static char slice_type[128];
      const char *base_type = expr_type(ctx, program, expr->left, scope);
      char element_type[96];
      if (index_element_type(base_type, element_type, sizeof(element_type))) {
        snprintf(
          slice_type,
          sizeof(slice_type),
          "%s<%s>",
          slice_source_is_mutable_storage(expr->left, scope, base_type) ? "MutSpan" : "Span",
          element_type
        );
        return slice_type;
      }
      return "Unknown";
    }
    case EXPR_CAST:
      return expr->text ? expr->text : "Unknown";
    case EXPR_BORROW: {
      static char borrow_type[160];
      const char *inner_type = expr_type(ctx, program, expr->left, scope);
      char owned_inner[128];
      if (owned_inner_text(inner_type, owned_inner, sizeof(owned_inner))) inner_type = owned_inner;
      snprintf(borrow_type, sizeof(borrow_type), "%s<%s>", expr->mutable_borrow ? "mutref" : "ref", inner_type ? inner_type : "Unknown");
      return borrow_type;
    }
    case EXPR_CHECK: {
      const Function *fun = fallible_callee_in_context(ctx, program, ctx ? ctx->function : NULL, scope, expr->left);
      if (fun) return fun->return_type;
      const char *stdlib_type = stdlib_fallible_return_type(expr->left);
      if (stdlib_type) return stdlib_type;
      const char *checked_type = expr_type(ctx, program, expr->left, scope);
      const char *inner = NULL;
      size_t inner_len = 0;
      if (type_has_generic_arg(checked_type, "Maybe", &inner, &inner_len)) {
        static char maybe_inner[128];
        snprintf(maybe_inner, sizeof(maybe_inner), "%.*s", (int)inner_len, inner);
        return maybe_inner;
      }
      return checked_type;
    }
    case EXPR_RESCUE:
      return expr_type(ctx, program, expr->right, scope);
    case EXPR_META:
      return expr->resolved_type ? expr->resolved_type : "Unknown";
    case EXPR_SHAPE_LITERAL:
      return find_shape(program, expr->text) ? expr->text : "Unknown";
    case EXPR_ARRAY_LITERAL: {
      static char array_type[128];
      const char *element_type = expr->args.len > 0 ? expr_type(ctx, program, expr->args.items[0], scope) : "Unknown";
      snprintf(array_type, sizeof(array_type), "[%zu]%s", expr->args.len, element_type);
      return array_type;
    }
    case EXPR_BINARY:
      if (strcmp(expr->text, "==") == 0 || strcmp(expr->text, "!=") == 0 || strcmp(expr->text, "<") == 0 ||
          strcmp(expr->text, "<=") == 0 || strcmp(expr->text, ">") == 0 || strcmp(expr->text, ">=") == 0 ||
          strcmp(expr->text, "&&") == 0 || strcmp(expr->text, "||") == 0) return "Bool";
      return "i32";
    case EXPR_MEMBER:
      if (expr->left) {
        if (expr->left->kind == EXPR_IDENT && find_enum(program, expr->left->text)) return expr->left->text;
        if (expr->left->kind == EXPR_IDENT && find_choice(program, expr->left->text)) return expr->left->text;
        const char *left_type = expr_type(ctx, program, expr->left, scope);
        char owned_shape_type[128];
        char ref_shape_type[128];
        if (owned_inner_text(left_type, owned_shape_type, sizeof(owned_shape_type))) left_type = owned_shape_type;
        if (ref_inner_text(left_type, ref_shape_type, sizeof(ref_shape_type))) left_type = ref_shape_type;
        if (strcmp(left_type, "World") == 0 && (strcmp(expr->text, "out") == 0 || strcmp(expr->text, "err") == 0)) return "WorldStream";
        const Shape *shape = find_shape_for_type(program, left_type);
        if (shape) {
          const Param *field = find_shape_field(shape, expr->text);
          if (field) {
            static char resolved_field_type[160];
            char *field_type = shape_field_type_for_owner(program, shape, left_type, field);
            snprintf(resolved_field_type, sizeof(resolved_field_type), "%s", field_type);
            free(field_type);
            return resolved_field_type;
          }
          return "Unknown";
        }
        {
          const char *left_type = expr_type(ctx, program, expr->left, scope);
          const char *inner = NULL;
          size_t inner_len = 0;
          if (type_has_generic_arg(left_type, "Maybe", &inner, &inner_len)) {
            if (strcmp(expr->text, "has") == 0) return "Bool";
            if (strcmp(expr->text, "value") == 0) {
              static char maybe_value_type[128];
              snprintf(maybe_value_type, sizeof(maybe_value_type), "%.*s", (int)inner_len, inner);
              return maybe_value_type;
            }
          }
        }
      }
      return "Unknown";
  }
  return "Unknown";
}

static bool static_arg_texts_match_in_scope(const Program *program, Scope *scope, const char *expected, const char *actual) {
  const char *expected_open_type = NULL;
  const char *actual_open_type = NULL;
  bool expected_open = scope_static_param_type(scope, expected, &expected_open_type);
  bool actual_open = scope_static_param_type(scope, actual, &actual_open_type);
  if (expected_open || actual_open) {
    return expected_open && actual_open &&
           types_compatible(program, expected_open_type, actual_open_type) &&
           strcmp(expected, actual) == 0;
  }
  bool expected_type_shadow = scope_type_name_shadows_static_const(scope, expected);
  bool actual_type_shadow = scope_type_name_shadows_static_const(scope, actual);
  if (expected_type_shadow || actual_type_shadow) {
    return expected_type_shadow && actual_type_shadow && strcmp(expected, actual) == 0;
  }
  char *expected_static = canonical_static_arg(program, expected);
  char *actual_static = canonical_static_arg(program, actual);
  bool ok = strcmp(expected_static ? expected_static : expected, actual_static ? actual_static : actual) == 0;
  free(expected_static);
  free(actual_static);
  return ok;
}

static bool static_arg_texts_match_for_type_in_scope(const Program *program, Scope *scope, const char *expected, const char *actual, const char *static_type) {
  const char *expected_open_type = NULL;
  const char *actual_open_type = NULL;
  const char *required_type = static_type && static_type[0] ? static_type : "usize";
  bool expected_open = scope_static_param_type(scope, expected, &expected_open_type);
  bool actual_open = scope_static_param_type(scope, actual, &actual_open_type);
  if (expected_open || actual_open) {
    return expected_open && actual_open &&
           types_compatible(program, required_type, expected_open_type) &&
           types_compatible(program, required_type, actual_open_type) &&
           strcmp(expected, actual) == 0;
  }
  if (scope_type_name_shadows_static_const(scope, expected) || scope_type_name_shadows_static_const(scope, actual)) return false;
  char *expected_static = canonical_static_arg_for_type(program, expected, required_type);
  char *actual_static = canonical_static_arg_for_type(program, actual, required_type);
  bool ok = expected_static && actual_static && strcmp(expected_static, actual_static) == 0;
  free(expected_static);
  free(actual_static);
  return ok;
}

static const ParamVec *generic_type_params_for_name(const Program *program, const char *name) {
  const Shape *shape = find_shape(program, name);
  if (shape) return &shape->type_params;
  const InterfaceDecl *interface = find_interface(program, name);
  if (interface) return &interface->type_params;
  return NULL;
}

static bool builtin_type_arg_kind(const char *type_name, size_t arg_index, ZTypeArgKind *out_kind) {
  if (!type_name || !out_kind) return false;
  if (strcmp(type_name, "FixedMap") == 0 && arg_index < 2) {
    *out_kind = Z_TYPE_ARG_TYPE;
    return true;
  }
  if (arg_index != 0) return false;
  const char *type_arg_wrappers[] = {"Maybe", "Span", "MutSpan", "ref", "mutref", "owned", "FixedSet", "FixedDeque", "FixedRingBuffer", "FixedMap", NULL};
  for (size_t i = 0; type_arg_wrappers[i]; i++) {
    if (strcmp(type_name, type_arg_wrappers[i]) != 0) continue;
    *out_kind = Z_TYPE_ARG_TYPE;
    return true;
  }
  return false;
}

static bool type_core_generic_arg_kind_for_program(const void *context, const char *type_name, size_t arg_index, ZTypeArgKind *out_kind) {
  if (builtin_type_arg_kind(type_name, arg_index, out_kind)) return true;
  const Program *program = (const Program *)context;
  const ParamVec *type_params = generic_type_params_for_name(program, type_name);
  if (!type_params || arg_index >= type_params->len || !out_kind) return false;
  *out_kind = type_params->items[arg_index].is_static ? Z_TYPE_ARG_STATIC : Z_TYPE_ARG_TYPE;
  return true;
}

static bool type_core_parse_for_program(const Program *program, ZTypeArena *arena, const char *text, ZTypeId *out) {
  ZTypeBinderScope scope = {.arg_kind = type_core_generic_arg_kind_for_program, .arg_kind_context = program};
  ZTypeParseError error = {0};
  return z_type_parse_with_binders(arena, text, &scope, out, &error);
}

static bool type_core_apply_is(const ZTypeArena *arena, ZTypeId type, const char *name) {
  return z_type_kind(arena, type) == Z_TYPE_NODE_APPLY && z_type_name(arena, type) && strcmp(z_type_name(arena, type), name) == 0;
}

static ZTypeId type_core_single_type_arg(const ZTypeArena *arena, ZTypeId type) {
  if (z_type_kind(arena, type) != Z_TYPE_NODE_APPLY || z_type_apply_arg_len(arena, type) != 1) return Z_TYPE_ID_INVALID;
  const ZTypeArg *arg = z_type_apply_arg(arena, type, 0);
  return arg && arg->kind == Z_TYPE_ARG_TYPE ? arg->as.type : Z_TYPE_ID_INVALID;
}

static bool type_core_static_values_match_in_scope(const Program *program, Scope *scope, const ZStaticValue *expected, const ZStaticValue *actual, const char *static_type) {
  char *expected_text = z_static_value_format(expected);
  char *actual_text = z_static_value_format(actual);
  bool ok = false;
  if (expected_text && actual_text) {
    ok = static_type && static_type[0]
      ? static_arg_texts_match_for_type_in_scope(program, scope, expected_text, actual_text, static_type)
      : static_arg_texts_match_in_scope(program, scope, expected_text, actual_text);
  }
  free(expected_text);
  free(actual_text);
  return ok;
}

static bool type_core_static_values_mismatch(const Program *program, const ZStaticValue *expected, const ZStaticValue *actual, const char *static_type) {
  char *expected_text = z_static_value_format(expected);
  char *actual_text = z_static_value_format(actual);
  char *expected_static = NULL;
  char *actual_static = NULL;
  if (expected_text && actual_text) {
    expected_static = static_type && static_type[0] ? canonical_static_arg_for_type(program, expected_text, static_type) : canonical_static_arg(program, expected_text);
    actual_static = static_type && static_type[0] ? canonical_static_arg_for_type(program, actual_text, static_type) : canonical_static_arg(program, actual_text);
  }
  bool mismatch = expected_static && actual_static && strcmp(expected_static, actual_static) != 0;
  free(expected_text);
  free(actual_text);
  free(expected_static);
  free(actual_static);
  return mismatch;
}

static bool type_core_types_compatible_inner(const Program *program, Scope *scope, ZTypeArena *arena, ZTypeId expected, ZTypeId actual, size_t depth);

static bool type_core_alias_compatible(const Program *program, Scope *scope, ZTypeArena *arena, ZTypeId alias_node, ZTypeId other, bool alias_is_expected, size_t depth) {
  if (z_type_kind(arena, alias_node) != Z_TYPE_NODE_NAME) return false;
  const char *name = z_type_name(arena, alias_node);
  const char *resolved = resolve_alias_type(program, name);
  if (!name || !resolved || strcmp(name, resolved) == 0) return false;
  ZTypeId resolved_type = Z_TYPE_ID_INVALID;
  if (!type_core_parse_for_program(program, arena, resolved, &resolved_type)) return false;
  return alias_is_expected
    ? type_core_types_compatible_inner(program, scope, arena, resolved_type, other, depth + 1)
    : type_core_types_compatible_inner(program, scope, arena, other, resolved_type, depth + 1);
}

static bool type_core_apply_args_compatible(const Program *program, Scope *scope, ZTypeArena *arena, const char *name, ZTypeId expected, ZTypeId actual, size_t depth) {
  size_t expected_len = z_type_apply_arg_len(arena, expected);
  size_t actual_len = z_type_apply_arg_len(arena, actual);
  if (expected_len != actual_len) return false;
  const ParamVec *type_params = generic_type_params_for_name(program, name);
  if (type_params && expected_len != type_params->len) return false;
  for (size_t i = 0; i < expected_len; i++) {
    const ZTypeArg *expected_arg = z_type_apply_arg(arena, expected, i);
    const ZTypeArg *actual_arg = z_type_apply_arg(arena, actual, i);
    if (!expected_arg || !actual_arg || expected_arg->kind != actual_arg->kind) return false;
    const Param *param = type_params && i < type_params->len ? &type_params->items[i] : NULL;
    if (expected_arg->kind == Z_TYPE_ARG_STATIC) {
      const char *static_type = param && param->is_static ? param->type : NULL;
      if (!type_core_static_values_match_in_scope(program, scope, &expected_arg->as.static_value, &actual_arg->as.static_value, static_type)) return false;
    } else if (!type_core_types_compatible_inner(program, scope, arena, expected_arg->as.type, actual_arg->as.type, depth + 1)) {
      return false;
    }
  }
  return true;
}

static bool type_core_is_u8(const ZTypeArena *arena, ZTypeId type) {
  return z_type_kind(arena, type) == Z_TYPE_NODE_NAME && strcmp(z_type_name(arena, type) ? z_type_name(arena, type) : "", "u8") == 0;
}

static bool type_core_is_string(const ZTypeArena *arena, ZTypeId type) {
  return z_type_kind(arena, type) == Z_TYPE_NODE_NAME && strcmp(z_type_name(arena, type) ? z_type_name(arena, type) : "", "String") == 0;
}

static bool type_core_is_byte_apply(const ZTypeArena *arena, ZTypeId type, const char *name) {
  if (!type_core_apply_is(arena, type, name)) return false;
  ZTypeId inner = type_core_single_type_arg(arena, type);
  return inner != Z_TYPE_ID_INVALID && type_core_is_u8(arena, inner);
}

static bool type_core_readable_byte_span_like(const ZTypeArena *arena, ZTypeId type) {
  return type_core_is_string(arena, type) ||
         type_core_is_byte_apply(arena, type, "Span") ||
         type_core_is_byte_apply(arena, type, "MutSpan");
}

static bool type_core_byte_view_abi_like(const ZTypeArena *arena, ZTypeId type) {
  if (type_core_readable_byte_span_like(arena, type)) return true;
  if (z_type_kind(arena, type) == Z_TYPE_NODE_NAME) return strcmp(z_type_name(arena, type) ? z_type_name(arena, type) : "", "ByteBuf") == 0;
  if (!type_core_apply_is(arena, type, "owned")) return false;
  ZTypeId inner = type_core_single_type_arg(arena, type);
  return inner != Z_TYPE_ID_INVALID &&
         z_type_kind(arena, inner) == Z_TYPE_NODE_NAME &&
         strcmp(z_type_name(arena, inner) ? z_type_name(arena, inner) : "", "ByteBuf") == 0;
}

static bool type_core_types_compatible_inner(const Program *program, Scope *scope, ZTypeArena *arena, ZTypeId expected, ZTypeId actual, size_t depth) {
  if (depth > 64) return false;
  if (z_type_equal(arena, expected, actual)) return true;
  if (type_core_alias_compatible(program, scope, arena, expected, actual, true, depth)) return true;
  if (type_core_alias_compatible(program, scope, arena, actual, expected, false, depth)) return true;

  ZTypeNodeKind expected_kind = z_type_kind(arena, expected);
  ZTypeNodeKind actual_kind = z_type_kind(arena, actual);
  if (expected_kind == Z_TYPE_NODE_CONST) {
    ZTypeId actual_inner = actual_kind == Z_TYPE_NODE_CONST ? z_type_const_inner(arena, actual) : actual;
    return type_core_types_compatible_inner(program, scope, arena, z_type_const_inner(arena, expected), actual_inner, depth + 1);
  }
  if (actual_kind == Z_TYPE_NODE_CONST) return false;

  if (type_core_is_byte_apply(arena, expected, "MutSpan")) return type_core_is_byte_apply(arena, actual, "MutSpan");
  if ((type_core_is_string(arena, expected) || type_core_is_byte_apply(arena, expected, "Span")) &&
      type_core_readable_byte_span_like(arena, actual)) return true;

  if (expected_kind == Z_TYPE_NODE_APPLY && type_core_apply_is(arena, expected, "Maybe") &&
      !type_core_apply_is(arena, actual, "Maybe")) {
    ZTypeId expected_inner = type_core_single_type_arg(arena, expected);
    return expected_inner != Z_TYPE_ID_INVALID &&
           type_core_byte_view_abi_like(arena, expected_inner) &&
           type_core_byte_view_abi_like(arena, actual) &&
           type_core_types_compatible_inner(program, scope, arena, expected_inner, actual, depth + 1);
  }

  if (expected_kind == Z_TYPE_NODE_APPLY && type_core_apply_is(arena, expected, "owned")) {
    ZTypeId expected_inner = type_core_single_type_arg(arena, expected);
    ZTypeId actual_inner = type_core_apply_is(arena, actual, "owned") ? type_core_single_type_arg(arena, actual) : actual;
    return expected_inner != Z_TYPE_ID_INVALID && actual_inner != Z_TYPE_ID_INVALID &&
           type_core_types_compatible_inner(program, scope, arena, expected_inner, actual_inner, depth + 1);
  }

  if (expected_kind == Z_TYPE_NODE_APPLY && type_core_apply_is(arena, expected, "Span")) {
    ZTypeId expected_inner = type_core_single_type_arg(arena, expected);
    if (expected_inner == Z_TYPE_ID_INVALID) return false;
    if (actual_kind == Z_TYPE_NODE_ARRAY) {
      return type_core_types_compatible_inner(program, scope, arena, expected_inner, z_type_array_element(arena, actual), depth + 1);
    }
    if (type_core_apply_is(arena, actual, "MutSpan")) {
      ZTypeId actual_inner = type_core_single_type_arg(arena, actual);
      return actual_inner != Z_TYPE_ID_INVALID &&
             type_core_types_compatible_inner(program, scope, arena, expected_inner, actual_inner, depth + 1);
    }
  }

  if (expected_kind == Z_TYPE_NODE_APPLY && type_core_apply_is(arena, expected, "ref") && type_core_apply_is(arena, actual, "mutref")) {
    ZTypeId expected_inner = type_core_single_type_arg(arena, expected);
    ZTypeId actual_inner = type_core_single_type_arg(arena, actual);
    return expected_inner != Z_TYPE_ID_INVALID && actual_inner != Z_TYPE_ID_INVALID &&
           type_core_types_compatible_inner(program, scope, arena, expected_inner, actual_inner, depth + 1);
  }

  if (expected_kind == Z_TYPE_NODE_ARRAY && actual_kind == Z_TYPE_NODE_ARRAY) {
    if (!type_core_static_values_match_in_scope(program, scope, z_type_array_length(arena, expected), z_type_array_length(arena, actual), NULL)) return false;
    return type_core_types_compatible_inner(program, scope, arena, z_type_array_element(arena, expected), z_type_array_element(arena, actual), depth + 1);
  }

  if (expected_kind == Z_TYPE_NODE_APPLY && actual_kind == Z_TYPE_NODE_APPLY) {
    const char *expected_name = z_type_name(arena, expected);
    const char *actual_name = z_type_name(arena, actual);
    if (!expected_name || !actual_name || strcmp(expected_name, actual_name) != 0) return false;
    return type_core_apply_args_compatible(program, scope, arena, expected_name, expected, actual, depth + 1);
  }

  return false;
}

static bool types_compatible_in_scope(const Program *program, Scope *scope, const char *expected, const char *actual) {
  expected = resolve_alias_type(program, expected);
  actual = resolve_alias_type(program, actual);
  if (!expected || strcmp(expected, "Unknown") == 0) return true;
  if (!actual || strcmp(actual, "Unknown") == 0) return true;
  if (strcmp(expected, actual) == 0) return true;

  ZTypeArena arena;
  z_type_arena_init(&arena);
  ZTypeId expected_type = Z_TYPE_ID_INVALID;
  ZTypeId actual_type = Z_TYPE_ID_INVALID;
  bool ok = type_core_parse_for_program(program, &arena, expected, &expected_type) &&
            type_core_parse_for_program(program, &arena, actual, &actual_type) &&
            type_core_types_compatible_inner(program, scope, &arena, expected_type, actual_type, 0);
  z_type_arena_free(&arena);
  return ok;
}

static bool types_compatible(const Program *program, const char *expected, const char *actual) {
  return types_compatible_in_scope(program, NULL, expected, actual);
}

static bool type_core_static_value_mismatch_inner(const Program *program, ZTypeArena *arena, ZTypeId expected, ZTypeId actual, size_t depth) {
  if (depth > 64) return false;
  ZTypeNodeKind expected_kind = z_type_kind(arena, expected);
  ZTypeNodeKind actual_kind = z_type_kind(arena, actual);
  if (expected_kind == Z_TYPE_NODE_NAME) {
    const char *name = z_type_name(arena, expected);
    const char *resolved = resolve_alias_type(program, name);
    if (name && resolved && strcmp(name, resolved) != 0) {
      ZTypeId resolved_type = Z_TYPE_ID_INVALID;
      if (!type_core_parse_for_program(program, arena, resolved, &resolved_type)) return false;
      return type_core_static_value_mismatch_inner(program, arena, resolved_type, actual, depth + 1);
    }
  }
  if (actual_kind == Z_TYPE_NODE_NAME) {
    const char *name = z_type_name(arena, actual);
    const char *resolved = resolve_alias_type(program, name);
    if (name && resolved && strcmp(name, resolved) != 0) {
      ZTypeId resolved_type = Z_TYPE_ID_INVALID;
      if (!type_core_parse_for_program(program, arena, resolved, &resolved_type)) return false;
      return type_core_static_value_mismatch_inner(program, arena, expected, resolved_type, depth + 1);
    }
  }
  if (expected_kind == Z_TYPE_NODE_CONST) {
    ZTypeId actual_inner = actual_kind == Z_TYPE_NODE_CONST ? z_type_const_inner(arena, actual) : actual;
    return type_core_static_value_mismatch_inner(program, arena, z_type_const_inner(arena, expected), actual_inner, depth + 1);
  }
  if (expected_kind == Z_TYPE_NODE_ARRAY && actual_kind == Z_TYPE_NODE_ARRAY) {
    return type_core_static_values_mismatch(program, z_type_array_length(arena, expected), z_type_array_length(arena, actual), NULL) ||
           type_core_static_value_mismatch_inner(program, arena, z_type_array_element(arena, expected), z_type_array_element(arena, actual), depth + 1);
  }
  if (expected_kind != Z_TYPE_NODE_APPLY || actual_kind != Z_TYPE_NODE_APPLY) return false;
  const char *expected_name = z_type_name(arena, expected);
  const char *actual_name = z_type_name(arena, actual);
  if (!expected_name || !actual_name || strcmp(expected_name, actual_name) != 0) return false;
  size_t expected_len = z_type_apply_arg_len(arena, expected);
  size_t actual_len = z_type_apply_arg_len(arena, actual);
  if (expected_len != actual_len) return false;
  const ParamVec *type_params = generic_type_params_for_name(program, expected_name);
  for (size_t i = 0; i < expected_len; i++) {
    const ZTypeArg *expected_arg = z_type_apply_arg(arena, expected, i);
    const ZTypeArg *actual_arg = z_type_apply_arg(arena, actual, i);
    if (!expected_arg || !actual_arg || expected_arg->kind != actual_arg->kind) continue;
    const Param *param = type_params && i < type_params->len ? &type_params->items[i] : NULL;
    if (expected_arg->kind == Z_TYPE_ARG_STATIC) {
      const char *static_type = param && param->is_static ? param->type : NULL;
      if (type_core_static_values_mismatch(program, &expected_arg->as.static_value, &actual_arg->as.static_value, static_type)) return true;
    } else if (type_core_static_value_mismatch_inner(program, arena, expected_arg->as.type, actual_arg->as.type, depth + 1)) {
      return true;
    }
  }
  return false;
}

static bool type_static_value_mismatch(const Program *program, const char *expected, const char *actual) {
  expected = resolve_alias_type(program, expected);
  actual = resolve_alias_type(program, actual);
  if (!expected || !actual) return false;
  ZTypeArena arena;
  z_type_arena_init(&arena);
  ZTypeId expected_type = Z_TYPE_ID_INVALID;
  ZTypeId actual_type = Z_TYPE_ID_INVALID;
  bool mismatch = type_core_parse_for_program(program, &arena, expected, &expected_type) &&
                  type_core_parse_for_program(program, &arena, actual, &actual_type) &&
                  type_core_static_value_mismatch_inner(program, &arena, expected_type, actual_type, 0);
  z_type_arena_free(&arena);
  return mismatch;
}

static bool member_call_skips_callee_expr_check(const Expr *callee, Scope *scope) {
  if (!callee || callee->kind != EXPR_MEMBER) return false;
  return member_root_ident_is(callee, "std") || is_world_stream_write_callee(callee, scope);
}

static bool check_call_callee(CheckContext *ctx, const Program *program, const Expr *call, Scope *scope, ZDiag *diag) {
  diag = check_context_diag(ctx, diag);
  const Expr *callee = call && call->kind == EXPR_CALL ? call->left : call;
  if (!callee) return false;
  if (callee->kind == EXPR_IDENT) {
    if (scope_has(scope, callee->text)) {
      const char *actual = expr_type(ctx, program, callee, scope);
      return set_diag_detail(diag, 3005, "call target is not a function", callee->line, callee->column, "function name", actual, "call a declared function instead of a local value");
    }
    const Function *fun = find_function(program, callee->text);
    if (fun) return true;
    return check_expr(ctx, program, callee, scope, diag);
  }
  if (callee->kind == EXPR_MEMBER) {
    if (member_call_skips_callee_expr_check(callee, scope)) return true;
    return check_expr(ctx, program, callee, scope, diag);
  }
  return check_expr(ctx, program, callee, scope, diag);
}

static bool build_named_call_bindings_expected(CheckContext *ctx, const Program *program, const Function *fun, const Expr *expr, Scope *scope, ZDiag *diag, const char *expected, GenericBinding **out_bindings, size_t *out_len) {
  if (out_bindings) *out_bindings = NULL;
  if (out_len) *out_len = 0;
  if (!function_is_generic(fun)) return true;
  size_t binding_len = fun->type_params.len;
  GenericBinding *bindings = z_checked_calloc(binding_len, sizeof(GenericBinding));
  generic_bindings_init_from_params(bindings, &fun->type_params, 0);
  if (!build_generic_bindings(ctx, program, fun, expr, scope, diag, bindings, binding_len, expected) ||
      !validate_recursive_generic_call_bindings(ctx, program, fun, expr, diag, bindings, binding_len) ||
      !validate_generic_constraints(program, fun, expr, diag, bindings, binding_len)) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    return false;
  }
  if (out_bindings) *out_bindings = bindings;
  if (out_len) *out_len = binding_len;
  return true;
}

typedef enum {
  CHECKED_CALL_ARG_NAMED_FUNCTION,
  CHECKED_CALL_ARG_SHAPE_METHOD,
  CHECKED_CALL_ARG_RECEIVER_METHOD,
  CHECKED_CALL_ARG_CONSTRAINED_INTERFACE
} CheckedCallArgSurface;

static bool report_call_resolution_arg_mismatch(const Program *program, ZDiag *diag, const Expr *arg, size_t arg_number, CheckedCallArgSurface surface, const char *owner_name, const char *callee_name, bool generic, const char *expected_type, const char *actual_type) {
  char message[256];
  switch (surface) {
    case CHECKED_CALL_ARG_NAMED_FUNCTION:
      snprintf(message, sizeof(message), generic ? "argument %zu to generic '%s' has incompatible type" : "argument %zu to '%s' has incompatible type", arg_number, callee_name);
      return generic && type_static_value_mismatch(program, expected_type, actual_type)
        ? set_diag_detail(diag, 3045, "static value argument does not match the annotated value", arg->line, arg->column, expected_type, actual_type, "pass the same static value or remove the conflicting explicit argument")
        : set_diag_detail(diag, 3005, message, arg->line, arg->column, expected_type, actual_type, generic ? "pass a value matching the resolved generic parameter" : "pass a compatible value");
    case CHECKED_CALL_ARG_SHAPE_METHOD:
      snprintf(message, sizeof(message), "argument %zu to method '%s.%s' has incompatible type", arg_number, owner_name, callee_name);
      return type_static_value_mismatch(program, expected_type, actual_type)
        ? set_diag_detail(diag, 3047, "shape method static value does not match Self instantiation", arg->line, arg->column, expected_type, actual_type, "call the method with one matching generic shape instantiation")
        : set_diag_detail(diag, 3005, message, arg->line, arg->column, expected_type, actual_type, "pass a value matching the static method parameter");
    case CHECKED_CALL_ARG_RECEIVER_METHOD:
      snprintf(message, sizeof(message), "argument %zu to receiver method '%s.%s' has incompatible type", arg_number, owner_name, callee_name);
      return type_static_value_mismatch(program, expected_type, actual_type)
        ? set_diag_detail(diag, 3047, "receiver method static value does not match Self instantiation", arg->line, arg->column, expected_type, actual_type, "call the method with one matching generic shape instantiation")
        : set_diag_detail(diag, 3005, message, arg->line, arg->column, expected_type, actual_type, "pass a value matching the receiver method parameter");
    case CHECKED_CALL_ARG_CONSTRAINED_INTERFACE:
      snprintf(message, sizeof(message), "argument %zu to constrained method '%s.%s' has incompatible type", arg_number, owner_name, callee_name);
      return set_diag_detail(diag, 3042, message, arg->line, arg->column, expected_type, actual_type, "pass a value matching the interface method parameter");
  }
  return set_diag_detail(diag, 3005, "call argument has incompatible type", arg->line, arg->column, expected_type, actual_type, "pass a compatible value");
}

static bool check_call_resolution_args_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution, size_t param_offset, CheckedCallArgSurface surface, const char *owner_name, const char *callee_name, bool generic) {
  for (size_t i = 0; i < expr->args.len; i++) {
    char *expected_type = call_resolution_param_type_text(resolution, i + param_offset);
    if (!check_expr_expected(ctx, program, expr->args.items[i], scope, diag, expected_type)) {
      free(expected_type);
      return false;
    }
    const char *actual = expr_type(ctx, program, expr->args.items[i], scope);
    if (!types_compatible_in_scope(program, scope, expected_type, actual)) {
      bool ok = report_call_resolution_arg_mismatch(program, diag, expr->args.items[i], i + 1, surface, owner_name, callee_name, generic, expected_type, actual);
      free(expected_type);
      return ok;
    }
    mark_owned_move_if_needed(program, expr->args.items[i], scope, expected_type);
    free(expected_type);
  }
  return true;
}

static bool check_named_call_args_expected(CheckContext *ctx, const Program *program, const Function *fun, const Expr *expr, Scope *scope, ZDiag *diag, bool generic, ZCallResolution *resolution) {
  return check_call_resolution_args_expected(ctx, program, expr, scope, diag, resolution, 0, CHECKED_CALL_ARG_NAMED_FUNCTION, NULL, fun->name, generic);
}

static bool check_named_call_fallibility_expected(CheckContext *ctx, const Program *program, const Function *fun, const Expr *expr, ZDiag *diag, bool generic) {
  if (!function_has_error_flow(ctx, program, fun)) return true;
  char actual[160];
  snprintf(actual, sizeof(actual), "call to '%s'", fun->name);
  return check_fallible_call_is_checked(
    ctx,
    program,
    fun,
    expr,
    diag,
    generic ? "fallible generic function call must be checked" : "fallible function call must be checked",
    "check fallible_call ...",
    actual,
    "prefix the call with check in a function marked with `raises`"
  );
}

static bool prepare_named_call_return_and_storage_expected(CheckContext *ctx, const Program *program, const Function *fun, const Expr *expr, Scope *scope, ZDiag *diag, bool generic, GenericBinding *bindings, size_t binding_len, char **return_type_out) {
  char *return_type = generic
    ? type_substitute_generic_signature(program, fun->return_type, bindings, binding_len)
    : z_strdup(fun->return_type ? fun->return_type : "Void");
  if (generic) set_expr_resolved_type(expr, return_type);
  if (!apply_checked_call_storage_effects(ctx, program, expr, scope, diag)) {
    free(return_type);
    return false;
  }
  *return_type_out = return_type;
  return true;
}

static void finish_named_call_return_expected(const Expr *expr, char *return_type) {
  if (!expr->resolved_type) set_expr_resolved_type(expr, return_type);
  free(return_type);
}

static bool check_named_function_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, const char *expected, bool *handled) {
  diag = check_context_diag(ctx, diag);
  if (handled) *handled = false;
  if (!expr || expr->kind != EXPR_CALL || !expr->left || expr->left->kind != EXPR_IDENT) return true;
  ZCallResolution resolution = {0};
  if (!resolve_named_function_call(program, expr, &resolution)) return true;
  if (handled) *handled = true;
  const Function *fun = resolution.callee;
  bool generic = function_is_generic(fun);
  size_t expected_arg_count = z_call_resolution_expected_arg_count(&resolution);
  if (expected_arg_count != expr->args.len) {
    char message[256];
    snprintf(message, sizeof(message), "function '%s' expects %zu argument(s), got %zu", fun->name, expected_arg_count, expr->args.len);
    z_call_resolution_free(&resolution);
    return set_diag_detail(diag, 3004, message, expr->line, expr->column, "matching argument count", "wrong argument count", "update the call or function signature");
  }
  const TypeArgVec *type_args = resolution.type_args;
  if (!generic && type_args && type_args->len > 0) {
    z_call_resolution_free(&resolution);
    return set_diag_detail(diag, 3032, "non-generic function cannot take type arguments", expr->line, expr->column, "call without <...>", "type arguments on non-generic function", "remove the explicit type arguments or make the function generic");
  }

  GenericBinding *bindings = NULL;
  size_t binding_len = 0;
  if (!build_named_call_bindings_expected(ctx, program, fun, expr, scope, diag, expected, &bindings, &binding_len)) {
    z_call_resolution_free(&resolution);
    return false;
  }
  call_resolution_record_bindings(&resolution, bindings, binding_len);
  call_resolution_record_param_facts(ctx, program, fun, expr, NULL, 0, scope, bindings, binding_len, &resolution);

  if (!check_named_call_args_expected(ctx, program, fun, expr, scope, diag, generic, &resolution)) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    z_call_resolution_free(&resolution);
    return false;
  }
  if (generic) set_expr_checked_type_args(expr, bindings, binding_len);

  if (generic && !check_named_call_fallibility_expected(ctx, program, fun, expr, diag, true)) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    z_call_resolution_free(&resolution);
    return false;
  }

  char *return_type = NULL;
  if (!prepare_named_call_return_and_storage_expected(ctx, program, fun, expr, scope, diag, generic, bindings, binding_len, &return_type)) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    z_call_resolution_free(&resolution);
    return false;
  }
  if (!generic && !check_named_call_fallibility_expected(ctx, program, fun, expr, diag, false)) {
    free(return_type);
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    z_call_resolution_free(&resolution);
    return false;
  }
  finish_named_call_return_expected(expr, return_type);
  generic_bindings_free(bindings, binding_len);
  free(bindings);
  z_call_resolution_free(&resolution);
  return true;
}

static bool check_stdlib_table_arg_range_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, const char *name, size_t start_index, bool allow_span_array_arg, ZCallResolution *resolution) {
  diag = check_context_diag(ctx, diag);
  if (!expr || !name || !resolution) return true;
  for (size_t i = start_index; i < expr->args.len; i++) {
    const char *raw_expected = z_call_resolution_param_type(resolution, i);
    bool has_expected = raw_expected && strcmp(raw_expected, "Unknown") != 0;
    const char *initial_actual = expr_type(ctx, program, expr->args.items[i], scope);
    if (has_expected) z_call_resolution_add_arg(resolution, i, expr->args.items[i], raw_expected, initial_actual);
    char *expected_type = has_expected ? call_resolution_param_type_text(resolution, i) : z_strdup("Unknown");
    if (!check_expr_expected(ctx, program, expr->args.items[i], scope, diag, has_expected ? expected_type : NULL)) {
      free(expected_type);
      return false;
    }
    const char *actual = expr_type(ctx, program, expr->args.items[i], scope);
    if (expr->args.items[i]->kind == EXPR_IDENT) {
      const char *scope_actual = scope_type(scope, expr->args.items[i]->text);
      if (scope_actual) actual = scope_actual;
    }
    z_call_resolution_add_arg(resolution, i, expr->args.items[i], has_expected ? expected_type : NULL, actual);
    bool span_array_arg = false;
    bool expected_span = has_expected && type_is_named_generic(expected_type, "Span");
    bool expected_mut_span = has_expected && type_is_named_generic(expected_type, "MutSpan");
    bool inline_array_literal = expr->args.items[i] && expr->args.items[i]->kind == EXPR_ARRAY_LITERAL;
    if (allow_span_array_arg && has_expected && actual && actual[0] == '[' && (expected_span || (expected_mut_span && !inline_array_literal))) {
      char expected_element[128];
      char actual_element[128];
      if (span_element_text(expected_type, expected_element, sizeof(expected_element)) &&
          fixed_array_type_parts(actual, NULL, 0, actual_element, sizeof(actual_element))) {
        span_array_arg = types_compatible_in_scope(program, scope, expected_element, actual_element);
      }
    }
    if (has_expected && !span_array_arg && !types_compatible_in_scope(program, scope, expected_type, actual)) {
      char message[256];
      snprintf(message, sizeof(message), "argument %zu to '%s' has incompatible type", i + 1, name);
      bool ok = set_diag_detail(diag, 3012, message, expr->args.items[i]->line, expr->args.items[i]->column, expected_type, actual, "pass a compatible value");
      free(expected_type);
      return ok;
    }
    if (expected_mut_span && !check_mutating_fixed_storage_not_borrowed(ctx, program, expr->args.items[i], scope, diag)) {
      free(expected_type);
      return false;
    }
    free(expected_type);
  }
  return true;
}

static void record_stdlib_arg_fact(ZCallResolution *resolution, size_t index, const Expr *arg, const char *expected_type, const char *actual_type) {
  if (resolution) z_call_resolution_add_arg(resolution, index, arg, expected_type, actual_type);
}

static bool check_stdlib_allocator_arg(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution, size_t index, const char *display_name, const char *alloc_help, const char *mut_help) {
  if (!check_expr(ctx, program, expr->args.items[index], scope, diag)) return false;
  const char *alloc_type = expr_type(ctx, program, expr->args.items[index], scope);
  record_stdlib_arg_fact(resolution, index, expr->args.items[index], "Alloc", alloc_type);
  if (!is_allocator_type(alloc_type)) {
    char message[256];
    snprintf(message, sizeof(message), "%s expects an allocator primitive", display_name);
    return set_diag_detail(diag, 3012, message, expr->args.items[index]->line, expr->args.items[index]->column, "NullAlloc or mutable FixedBufAlloc", alloc_type, alloc_help);
  }
  if (strcmp(alloc_type, "FixedBufAlloc") == 0 &&
      (expr->args.items[index]->kind != EXPR_IDENT || !scope_is_mutable(scope, expr->args.items[index]->text))) {
    char message[256];
    snprintf(message, sizeof(message), "%s requires a mutable FixedBufAlloc binding", display_name);
    return set_diag_detail(diag, 3012, message, expr->args.items[index]->line, expr->args.items[index]->column, "mut allocator FixedBufAlloc", "immutable or temporary FixedBufAlloc", mut_help);
  }
  return true;
}

static bool check_stdlib_mem_len_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  if (!check_expr(ctx, program, expr->args.items[0], scope, diag)) return false;
  const char *actual = expr_type(ctx, program, expr->args.items[0], scope);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], NULL, actual);
  char element_type[128];
  if (strcmp(actual, "String") != 0 &&
      !span_element_text(actual, element_type, sizeof(element_type)) &&
      !fixed_array_type_parts(actual, NULL, 0, element_type, sizeof(element_type))) {
    return set_diag_detail(diag, 3012, "std.mem.len expects a String, Span<T>, or fixed array", expr->args.items[0]->line, expr->args.items[0]->column, "String, Span<T>, or [N]T", actual, "pass a byte-oriented string, span, or fixed array value");
  }
  set_expr_resolved_type(expr, "usize");
  return true;
}

static bool check_stdlib_mem_get_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  if (!check_expr(ctx, program, expr->args.items[0], scope, diag)) return false;
  const char *actual = expr_type(ctx, program, expr->args.items[0], scope);
  char element_type[128];
  if (!index_element_type(actual, element_type, sizeof(element_type))) {
    return set_diag_detail(diag, 3012, "std.mem.get expects an indexable value", expr->args.items[0]->line, expr->args.items[0]->column, "[N]T, Span<T>, MutSpan<T>, or String", actual, "pass an indexable value and handle the Maybe<T> result");
  }
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], "Span<T>", actual);
  if (!check_expr_expected(ctx, program, expr->args.items[1], scope, diag, "usize")) return false;
  const char *index_type = expr_type(ctx, program, expr->args.items[1], scope);
  if (!is_int_type(index_type)) {
    return set_diag_detail(diag, 3028, "std.mem.get index must be an integer", expr->args.items[1]->line, expr->args.items[1]->column, "integer index", index_type, "use an integer expression such as usize or a checked integer literal");
  }
  record_stdlib_arg_fact(resolution, 1, expr->args.items[1], "usize", index_type);
  char result_type[160];
  snprintf(result_type, sizeof(result_type), "Maybe<%s>", element_type);
  set_expr_resolved_type(expr, result_type);
  z_call_resolution_set_return_type(resolution, result_type);
  return true;
}

static bool stdlib_writable_item_element(const Expr *expr, ZDiag *diag, const char *display_name, const char *element_type) {
  if (!type_is_const(element_type)) return true;
  char message[256];
  snprintf(message, sizeof(message), "%s expects mutable non-const item storage", display_name);
  return set_diag_detail(diag, 3010, message, expr->line, expr->column, "mutable non-const item storage", element_type, "use a mutable element type when item mutation is required");
}

static bool stdlib_mutable_items_arg_element(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, const char *display_name, char *element_type, size_t element_len, const char **actual_type) {
  if (!check_expr(ctx, program, expr, scope, diag)) return false;
  const char *actual = expr_type(ctx, program, expr, scope);
  if (actual_type) *actual_type = actual;
  if (mutspan_element_text(actual, element_type, element_len)) {
    return check_mutating_fixed_storage_not_borrowed(ctx, program, expr, scope, diag) &&
           stdlib_writable_item_element(expr, diag, display_name, element_type);
  }
  if (fixed_array_type_parts(actual, NULL, 0, element_type, element_len)) {
    if (slice_source_is_mutable_storage(expr, scope, actual)) {
      return check_mutating_fixed_storage_not_borrowed(ctx, program, expr, scope, diag) &&
             stdlib_writable_item_element(expr, diag, display_name, element_type);
    }
    char message[256];
    snprintf(message, sizeof(message), "%s expects mutable item storage", display_name);
    return set_diag_detail(diag, 3010, message, expr->line, expr->column, "mutable [N]T or MutSpan<T>", "immutable array binding", "declare the array with var or pass a MutSpan<T>");
  }
  char message[256];
  snprintf(message, sizeof(message), "%s expects mutable item storage", display_name);
  return set_diag_detail(diag, 3012, message, expr->line, expr->column, "mutable [N]T or MutSpan<T>", actual, "pass caller-owned mutable storage with a concrete element type");
}

static bool stdlib_readable_items_arg_element(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, const char *display_name, char *element_type, size_t element_len, const char **actual_type) {
  if (!check_expr(ctx, program, expr, scope, diag)) return false;
  const char *actual = expr_type(ctx, program, expr, scope);
  if (actual_type) *actual_type = actual;
  if (index_element_type(actual, element_type, element_len)) return true;
  char message[256];
  snprintf(message, sizeof(message), "%s expects readable item storage", display_name);
  return set_diag_detail(diag, 3012, message, expr->line, expr->column, "[N]T, Span<T>, MutSpan<T>, or String", actual, "pass readable contiguous storage with a concrete element type");
}

static void stdlib_span_type_for_element(char *out, size_t out_len, const char *element_type, bool mut) {
  snprintf(out, out_len, "%s<%s>", mut ? "MutSpan" : "Span", element_type ? element_type : "Unknown");
}

static void stdlib_record_single_type_arg(const Expr *expr, const char *type) {
  GenericBinding binding = {.name = "T", .type = (char *)(type ? type : "Unknown")};
  set_expr_checked_type_args(expr, &binding, 1);
}

static void stdlib_record_key_type_arg(const Expr *expr, const char *type) {
  GenericBinding binding = {.name = "K", .type = (char *)(type ? type : "Unknown")};
  set_expr_checked_type_args(expr, &binding, 1);
}

static void stdlib_record_two_type_args(const Expr *expr, const char *key_type, const char *value_type) {
  GenericBinding bindings[2] = {
    {.name = "K", .type = (char *)(key_type ? key_type : "Unknown")},
    {.name = "V", .type = (char *)(value_type ? value_type : "Unknown")}
  };
  set_expr_checked_type_args(expr, bindings, 2);
}

static bool type_references_visible_type_param(Scope *scope, const char *type) {
  for (Scope *cursor = scope; type && cursor; cursor = cursor->parent)
    for (size_t i = 0; i < cursor->len; i++)
      if (cursor->is_type_param && cursor->is_type_param[i] && type_text_references_name(type, cursor->names[i])) return true;
  return false;
}

static bool stdlib_reject_owned_item_element(const Program *program, Scope *scope, const char *display_name, const char *element_type, const Expr *expr, ZDiag *diag, const char *action, const char *help) {
  if (type_references_visible_type_param(scope, element_type)) {
    char message[256]; snprintf(message, sizeof(message), "%s cannot %s potentially owned generic item elements", display_name, action ? action : "duplicate");
    return set_diag_detail(diag, 3013, message, expr ? expr->line : 0, expr ? expr->column : 0, "concrete item type without owned values", element_type ? element_type : "Unknown", help ? help : "use a concrete non-owned item type or write each owned element explicitly");
  }
  if (!type_contains_owned(program, element_type, 0)) return true;
  char message[256];
  snprintf(message, sizeof(message), "%s cannot %s owned item elements", display_name, action ? action : "duplicate");
  return set_diag_detail(diag, 3013, message, expr ? expr->line : 0, expr ? expr->column : 0, "item type without owned values", element_type ? element_type : "Unknown", help ? help : "write each owned element explicitly so ownership is transferred once");
}

static bool stdlib_require_supported_item_element(const Program *program, const char *display_name, const char *element_type, const Expr *expr, ZDiag *diag) {
  const char *resolved = type_strip_const(resolve_alias_type(program, element_type));
  char pattern[64];
  snprintf(pattern, sizeof(pattern), "|%s|", resolved ? resolved : "");
  if ((resolved && !strchr(resolved, '|') && strstr("|Bool|bool|u8|u16|usize|i32|u32|i64|u64|", pattern)) || type_is_named_generic(resolved, "ref") || type_is_named_generic(resolved, "mutref")) return true;
  char message[256]; snprintf(message, sizeof(message), "%s item element type is not supported", display_name);
  return set_diag_detail(diag, 3012, message, expr ? expr->line : 0, expr ? expr->column : 0, "Bool, u8, u16, usize, i32, u32, i64, or u64 item storage", element_type ? element_type : "Unknown", "use a supported scalar item type or write a specialized helper for this type");
}

static bool check_stdlib_mem_eql_bytes_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *callee = resolution && resolution->callee_name ? resolution->callee_name : "std.mem helper";
  if (!check_expr(ctx, program, expr->args.items[0], scope, diag) || !check_expr(ctx, program, expr->args.items[1], scope, diag)) return false;
  const char *left_type = expr_type(ctx, program, expr->args.items[0], scope);
  const char *right_type = expr_type(ctx, program, expr->args.items[1], scope);
  char left_element[128];
  char right_element[128];
  if (!span_element_text(left_type, left_element, sizeof(left_element)) || !span_element_text(right_type, right_element, sizeof(right_element))) {
    char message[256]; snprintf(message, sizeof(message), "%s expects Span<T> arguments", callee);
    return set_diag_detail(diag, 3012, message, expr->line, expr->column, "two Span<T> values", "non-span argument", "pass spans with matching element types");
  }
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], "Span<T>", left_type); record_stdlib_arg_fact(resolution, 1, expr->args.items[1], "Span<T>", right_type);
  if (!types_compatible_in_scope(program, scope, left_element, right_element)) {
    char message[256]; snprintf(message, sizeof(message), "%s span element types must match", callee);
    return set_diag_detail(diag, 3012, message, expr->line, expr->column, left_element, right_element, "use spans with the same element type");
  }
  bool scalar_items = resolution && resolution->std_helper && resolution->std_helper->emits_runtime_helper;
  if (scalar_items && (!stdlib_reject_owned_item_element(program, scope, callee, left_element, expr->args.items[0], diag, "compare", "compare non-owned scalar item spans or write a specialized helper for this type") ||
      !stdlib_require_supported_item_element(program, callee, left_element, expr->args.items[0], diag))) return false;
  set_expr_resolved_type(expr, "Bool"); return true;
}

static bool stdlib_validate_item_write_lifetimes(Scope *scope, const char *target_root, const ValueProvenance *origins, const Expr *site, ZDiag *diag, const char *display_name) {
  if (!scope || !target_root || !origins) return true;
  Scope *target_scope = scope_binding_scope(scope, target_root);
  for (size_t i = 0; i < origins->len; i++) {
    const ProvenanceEntry *entry = &origins->items[i];
    Scope *root_scope = entry->origin.root_scope ? entry->origin.root_scope : scope_binding_scope(scope, entry->origin.root);
    if (target_scope && root_scope && !scope_is_ancestor_or_self(root_scope, target_scope)) {
      char actual[256];
      snprintf(actual, sizeof(actual), "reference to shorter-lived local '%s'", entry->origin.root ? entry->origin.root : "<unknown>");
      char message[256];
      snprintf(message, sizeof(message), "cannot store a shorter-lived reference through %s", display_name ? display_name : "std.mem item write");
      return set_diag_detail(diag, 3030, message, site ? site->line : 0, site ? site->column : 0, "borrow source that outlives the destination storage", actual, "copy only references derived from caller-owned values into longer-lived storage");
    }
  }
  return true;
}

static bool stdlib_install_item_write_provenance(CheckContext *ctx, const Program *program, const Expr *dst, const Expr *value, Scope *scope, ZDiag *diag, const char *value_type, bool value_is_span, const char *display_name) {
  ValueProvenance origins = {0};
  bool have_origins = value_is_span
    ? span_view_expr_provenance(ctx, program, value, scope, value_type, &origins)
    : (expr_reference_provenance(ctx, program, value, scope, &origins) || span_view_expr_provenance(ctx, program, value, scope, value_type, &origins));
  if (!have_origins || origins.len == 0) {
    value_provenance_free(&origins);
    return true;
  }
  char root[128];
  char path[256];
  if (!expr_binding_path(dst, root, sizeof(root), path, sizeof(path)) || !scope_has(scope, root)) {
    value_provenance_free(&origins);
    return true;
  }
  if (!stdlib_validate_item_write_lifetimes(scope, root, &origins, value, diag, display_name)) {
    value_provenance_free(&origins);
    return false;
  }
  char *target_path = origin_path_join(path, "[*]");
  scope_set_value_provenance_path_in_scope(scope, scope_binding_scope(scope, root), root, target_path, &origins);
  free(target_path);
  value_provenance_free(&origins);
  return true;
}

static bool check_stdlib_mem_copy_items_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *dst_actual = NULL;
  char element_type[128];
  if (!stdlib_mutable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, "std.mem.copyItems", element_type, sizeof(element_type), &dst_actual) ||
      !stdlib_reject_owned_item_element(program, scope, "std.mem.copyItems", element_type, expr->args.items[0], diag, "copy", "move owned values explicitly so each destination receives one owner") ||
      !stdlib_require_supported_item_element(program, "std.mem.copyItems", element_type, expr->args.items[0], diag)) return false;
  char expected_dst[160];
  char expected_src[160];
  stdlib_span_type_for_element(expected_dst, sizeof(expected_dst), element_type, true);
  stdlib_span_type_for_element(expected_src, sizeof(expected_src), element_type, false);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_dst, dst_actual);
  if (!check_expr_expected(ctx, program, expr->args.items[1], scope, diag, expected_src)) return false;
  const char *src_actual = expr_type(ctx, program, expr->args.items[1], scope);
  record_stdlib_arg_fact(resolution, 1, expr->args.items[1], expected_src, src_actual);
  if (!types_compatible_in_scope(program, scope, expected_src, src_actual)) {
    return set_diag_detail(diag, 3012, "std.mem.copyItems source element type must match destination", expr->args.items[1]->line, expr->args.items[1]->column, expected_src, src_actual, "copy between spans with the same element type");
  }
  if (!stdlib_install_item_write_provenance(ctx, program, expr->args.items[0], expr->args.items[1], scope, diag, expected_src, true, "std.mem.copyItems")) return false;
  const char *return_type = resolution && resolution->return_type ? resolution->return_type : "usize";
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_mem_fill_items_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *dst_actual = NULL;
  char element_type[128];
  if (!stdlib_mutable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, "std.mem.fillItems", element_type, sizeof(element_type), &dst_actual) ||
      !stdlib_reject_owned_item_element(program, scope, "std.mem.fillItems", element_type, expr->args.items[0], diag, "duplicate", "write each owned element explicitly so ownership is transferred once") ||
      !stdlib_require_supported_item_element(program, "std.mem.fillItems", element_type, expr->args.items[0], diag)) return false;
  char expected_dst[160];
  stdlib_span_type_for_element(expected_dst, sizeof(expected_dst), element_type, true);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_dst, dst_actual);
  if (!check_expr_expected(ctx, program, expr->args.items[1], scope, diag, element_type)) return false;
  const char *value_actual = expr_type(ctx, program, expr->args.items[1], scope);
  record_stdlib_arg_fact(resolution, 1, expr->args.items[1], element_type, value_actual);
  if (!types_compatible_in_scope(program, scope, element_type, value_actual)) {
    return set_diag_detail(diag, 3012, "std.mem.fillItems value type must match destination element", expr->args.items[1]->line, expr->args.items[1]->column, element_type, value_actual, "fill storage with a value of the same element type");
  }
  if (!stdlib_install_item_write_provenance(ctx, program, expr->args.items[0], expr->args.items[1], scope, diag, element_type, false, "std.mem.fillItems")) return false;
  const char *return_type = resolution && resolution->return_type ? resolution->return_type : "usize";
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_mem_contains_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *items_actual = NULL;
  char element_type[128];
  if (!stdlib_readable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, resolution && resolution->callee_name ? resolution->callee_name : "std.mem.contains", element_type, sizeof(element_type), &items_actual)) return false;
  if ((z_std_helper_kind(resolution ? resolution->std_helper : NULL) == Z_STD_HELPER_KIND_MEM_CONTAINS &&
       !stdlib_reject_owned_item_element(program, scope, "std.mem.contains", element_type, expr->args.items[0], diag, "compare", "compare a non-owned key or move owned values explicitly")) ||
      !stdlib_require_supported_item_element(program, resolution && resolution->callee_name ? resolution->callee_name : "std.mem.contains", element_type, expr->args.items[0], diag)) return false;
  char expected_items[160];
  stdlib_span_type_for_element(expected_items, sizeof(expected_items), element_type, false);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_items, items_actual);
  if (expr->args.len > 1) {
    if (!check_expr_expected(ctx, program, expr->args.items[1], scope, diag, element_type)) return false;
    const char *needle_actual = expr_type(ctx, program, expr->args.items[1], scope);
    record_stdlib_arg_fact(resolution, 1, expr->args.items[1], element_type, needle_actual);
    if (!types_compatible_in_scope(program, scope, element_type, needle_actual)) {
      return set_diag_detail(diag, 3012, "std.mem.contains needle type must match item element", expr->args.items[1]->line, expr->args.items[1]->column, element_type, needle_actual, "search for a value with the same element type");
    }
  }
  set_expr_resolved_type(expr, "Bool");
  z_call_resolution_set_return_type(resolution, "Bool");
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_mem_split_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *items_actual = NULL;
  const char *callee = resolution && resolution->callee_name ? resolution->callee_name : "std.mem.splitBefore";
  char element_type[128];
  if (!stdlib_readable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, callee, element_type, sizeof(element_type), &items_actual) ||
      !stdlib_reject_owned_item_element(program, scope, callee, element_type, expr->args.items[0], diag, "compare", "split around a non-owned delimiter or move owned values explicitly") ||
      !stdlib_require_supported_item_element(program, callee, element_type, expr->args.items[0], diag)) return false;
  char expected_items[160];
  stdlib_span_type_for_element(expected_items, sizeof(expected_items), element_type, false);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_items, items_actual);
  if (!check_expr_expected(ctx, program, expr->args.items[1], scope, diag, element_type)) return false;
  const char *needle_actual = expr_type(ctx, program, expr->args.items[1], scope);
  record_stdlib_arg_fact(resolution, 1, expr->args.items[1], element_type, needle_actual);
  if (!types_compatible_in_scope(program, scope, element_type, needle_actual)) {
    return set_diag_detail(diag, 3012, "std.mem split delimiter type must match item element", expr->args.items[1]->line, expr->args.items[1]->column, element_type, needle_actual, "split around a delimiter with the same element type");
  }
  set_expr_resolved_type(expr, expected_items);
  z_call_resolution_set_return_type(resolution, expected_items);
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_mem_slice_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *items_actual = NULL;
  char element_type[128];
  if (!stdlib_readable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, resolution && resolution->callee_name ? resolution->callee_name : "std.mem.prefix", element_type, sizeof(element_type), &items_actual) ||
      !stdlib_require_supported_item_element(program, resolution && resolution->callee_name ? resolution->callee_name : "std.mem.prefix", element_type, expr->args.items[0], diag)) return false;
  char result_type[160];
  char expected_items[160];
  stdlib_span_type_for_element(result_type, sizeof(result_type), element_type, false);
  stdlib_span_type_for_element(expected_items, sizeof(expected_items), element_type, false);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_items, items_actual);
  for (size_t i = 1; i < expr->args.len; i++) {
    if (!check_expr_expected(ctx, program, expr->args.items[i], scope, diag, "usize")) return false;
    const char *actual = expr_type(ctx, program, expr->args.items[i], scope);
    record_stdlib_arg_fact(resolution, i, expr->args.items[i], "usize", actual);
    if (!types_compatible_in_scope(program, scope, "usize", actual)) {
      return set_diag_detail(diag, 3028, "std.mem span view bounds must be usize", expr->args.items[i]->line, expr->args.items[i]->column, "usize", actual, "pass usize indices and counts");
    }
  }
  set_expr_resolved_type(expr, result_type);
  z_call_resolution_set_return_type(resolution, result_type);
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_mem_span_usize_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *items_actual = NULL;
  char element_type[128];
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.mem helper";
  if (!stdlib_readable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, element_type, sizeof(element_type), &items_actual) ||
      !stdlib_require_supported_item_element(program, name, element_type, expr->args.items[0], diag)) return false;
  char expected_items[160];
  stdlib_span_type_for_element(expected_items, sizeof(expected_items), element_type, false);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_items, items_actual);
  for (size_t i = 1; i < expr->args.len; i++) {
    if (!check_expr_expected(ctx, program, expr->args.items[i], scope, diag, "usize")) return false;
    const char *actual = expr_type(ctx, program, expr->args.items[i], scope);
    record_stdlib_arg_fact(resolution, i, expr->args.items[i], "usize", actual);
    if (!types_compatible_in_scope(program, scope, "usize", actual)) {
      return set_diag_detail(diag, 3028, "std.mem helper bounds must be usize", expr->args.items[i]->line, expr->args.items[i]->column, "usize", actual, "pass usize indices and counts");
    }
  }
  const char *return_type = resolution && resolution->return_type ? resolution->return_type : "usize";
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_usize_arg_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution, size_t index, const char *message, const char *help) {
  if (!check_expr_expected(ctx, program, expr->args.items[index], scope, diag, "usize")) return false;
  const char *actual = expr_type(ctx, program, expr->args.items[index], scope);
  record_stdlib_arg_fact(resolution, index, expr->args.items[index], "usize", actual);
  if (!types_compatible_in_scope(program, scope, "usize", actual)) {
    return set_diag_detail(diag, 3028, message, expr->args.items[index]->line, expr->args.items[index]->column, "usize", actual, help);
  }
  return true;
}

static bool check_stdlib_collections_push_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *items_actual = NULL;
  char element_type[128];
  if (!stdlib_mutable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, "std.collections.push", element_type, sizeof(element_type), &items_actual) ||
      !stdlib_reject_owned_item_element(program, scope, "std.collections.push", element_type, expr->args.items[0], diag, "copy", "push owned values explicitly so ownership is transferred once") ||
      !stdlib_require_supported_item_element(program, "std.collections.push", element_type, expr->args.items[0], diag)) return false;
  char expected_items[160];
  stdlib_span_type_for_element(expected_items, sizeof(expected_items), element_type, true);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_items, items_actual);
  if (!check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 1, "std.collections.push length must be usize", "track the live item count as a usize")) return false;
  if (!check_expr_expected(ctx, program, expr->args.items[2], scope, diag, element_type)) return false;
  const char *value_actual = expr_type(ctx, program, expr->args.items[2], scope);
  record_stdlib_arg_fact(resolution, 2, expr->args.items[2], element_type, value_actual);
  if (!types_compatible_in_scope(program, scope, element_type, value_actual)) {
    return set_diag_detail(diag, 3012, "std.collections.push value type must match item element", expr->args.items[2]->line, expr->args.items[2]->column, element_type, value_actual, "push a value of the same element type");
  }
  const char *return_type = resolution && resolution->return_type ? resolution->return_type : "usize";
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool stdlib_direct_place_provenance(Scope *scope, const Expr *expr, ValueProvenance *origins) {
  char root[128];
  char path[256];
  if (!expr_binding_path(expr, root, sizeof(root), path, sizeof(path)) ||
      !scope_has(scope, root)) return false;
  return value_provenance_add_full_with_index_exact(origins, root, scope_binding_scope(scope, root), false, reference_source_origin_is_local_storage(scope, root), true, NULL, path);
}

static bool stdlib_provenance_sets_overlap(Scope *scope, const ValueProvenance *left, const ValueProvenance *right) {
  if (!left || !right) return false;
  for (size_t left_index = 0; left_index < left->len; left_index++) {
    const ProvenanceEntry *left_entry = &left->items[left_index];
    Scope *left_scope = left_entry->origin.root_scope ? left_entry->origin.root_scope : scope_binding_scope(scope, left_entry->origin.root);
    for (size_t right_index = 0; right_index < right->len; right_index++) {
      const ProvenanceEntry *right_entry = &right->items[right_index];
      Scope *right_scope = right_entry->origin.root_scope ? right_entry->origin.root_scope : scope_binding_scope(scope, right_entry->origin.root);
      if (left_entry->origin.root &&
          right_entry->origin.root &&
          origin_path_equal(left_entry->origin.root, right_entry->origin.root) &&
          (!left_scope || !right_scope || left_scope == right_scope) &&
          origin_path_overlaps(left_entry->origin.path, right_entry->origin.path)) return true;
    }
  }
  return false;
}

static bool stdlib_reject_overlapping_span_source(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, size_t dst_index, const char *dst_type, size_t src_index, const char *src_type, const char *message, const char *actual, const char *help) {
  ValueProvenance dst_origins = {0};
  ValueProvenance src_origins = {0};
  bool dst_known = span_view_expr_provenance(ctx, program, expr->args.items[dst_index], scope, dst_type, &dst_origins) ||
                   stdlib_direct_place_provenance(scope, expr->args.items[dst_index], &dst_origins);
  bool src_known = span_view_expr_provenance(ctx, program, expr->args.items[src_index], scope, src_type, &src_origins);
  if (!dst_known || !src_known) {
    value_provenance_free(&dst_origins);
    value_provenance_free(&src_origins);
    return true;
  }
  if (stdlib_provenance_sets_overlap(scope, &dst_origins, &src_origins)) {
    value_provenance_free(&dst_origins);
    value_provenance_free(&src_origins);
    return set_diag_detail(diag, 3012, message, expr->args.items[src_index]->line, expr->args.items[src_index]->column, "separate source storage", actual, help);
  }
  value_provenance_free(&dst_origins);
  value_provenance_free(&src_origins);
  return true;
}

static bool stdlib_reject_overlapping_collection_append(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, const char *items_type, const char *values_type) {
  return stdlib_reject_overlapping_span_source(ctx, program, expr, scope, diag, 0, items_type, 2, values_type, "std.collections.append source must not overlap destination storage", "overlapping append source", "copy through a separate scratch buffer or append values from distinct storage");
}

static bool check_stdlib_collections_append_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *items_actual = NULL;
  char element_type[128];
  if (!stdlib_mutable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, "std.collections.append", element_type, sizeof(element_type), &items_actual) ||
      !stdlib_reject_owned_item_element(program, scope, "std.collections.append", element_type, expr->args.items[0], diag, "copy", "append owned values explicitly so ownership is transferred once") ||
      !stdlib_require_supported_item_element(program, "std.collections.append", element_type, expr->args.items[0], diag)) return false;
  char expected_items[160];
  char expected_values[160];
  stdlib_span_type_for_element(expected_items, sizeof(expected_items), element_type, true);
  stdlib_span_type_for_element(expected_values, sizeof(expected_values), element_type, false);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_items, items_actual);
  if (!check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 1, "std.collections.append length must be usize", "track the live item count as a usize")) return false;
  if (!check_expr_expected(ctx, program, expr->args.items[2], scope, diag, expected_values)) return false;
  const char *values_actual = expr_type(ctx, program, expr->args.items[2], scope);
  record_stdlib_arg_fact(resolution, 2, expr->args.items[2], expected_values, values_actual);
  if (!types_compatible_in_scope(program, scope, expected_values, values_actual)) {
    return set_diag_detail(diag, 3012, "std.collections.append source element type must match item storage", expr->args.items[2]->line, expr->args.items[2]->column, expected_values, values_actual, "append values with the same element type");
  }
  if (!stdlib_reject_overlapping_collection_append(ctx, program, expr, scope, diag, expected_items, expected_values)) return false;
  set_expr_resolved_type(expr, "usize");
  z_call_resolution_set_return_type(resolution, "usize");
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_sort_merge_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution, const char *name) {
  if (!check_stdlib_table_arg_range_expected(ctx, program, expr, scope, diag, name, 0, true, resolution)) return false;
  char *dst_type = call_resolution_param_type_text(resolution, 0);
  char *left_type = call_resolution_param_type_text(resolution, 1);
  char *right_type = call_resolution_param_type_text(resolution, 2);
  bool ok = stdlib_reject_overlapping_span_source(ctx, program, expr, scope, diag, 0, dst_type, 1, left_type, "std.sort.mergeSorted source must not overlap destination storage", "overlapping merge source", "merge into a separate destination buffer or copy through scratch storage") &&
            stdlib_reject_overlapping_span_source(ctx, program, expr, scope, diag, 0, dst_type, 2, right_type, "std.sort.mergeSorted source must not overlap destination storage", "overlapping merge source", "merge into a separate destination buffer or copy through scratch storage");
  free(dst_type);
  free(left_type);
  free(right_type);
  if (!ok) return false;
  set_expr_resolved_type(expr, resolution && resolution->return_type ? resolution->return_type : "usize");
  return true;
}

static bool check_stdlib_collections_view_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *items_actual = NULL;
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections.view";
  char element_type[128];
  if (!stdlib_readable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, element_type, sizeof(element_type), &items_actual) ||
      !stdlib_require_supported_item_element(program, name, element_type, expr->args.items[0], diag)) return false;
  char expected_items[160];
  char result_type[160];
  stdlib_span_type_for_element(expected_items, sizeof(expected_items), element_type, false);
  stdlib_span_type_for_element(result_type, sizeof(result_type), element_type, false);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_items, items_actual);
  if (!check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 1, "std.collections.view length must be usize", "track the live item count as a usize")) return false;
  set_expr_resolved_type(expr, result_type);
  z_call_resolution_set_return_type(resolution, result_type);
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_collections_len_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution, bool mutable_items, bool has_value) {
  const char *items_actual = NULL;
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections";
  char element_type[128];
  bool items_ok = mutable_items ?
      stdlib_mutable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, element_type, sizeof(element_type), &items_actual) :
      stdlib_readable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, element_type, sizeof(element_type), &items_actual);
  if (!items_ok ||
      (mutable_items && !stdlib_reject_owned_item_element(program, scope, name, element_type, expr->args.items[0], diag, "move", "move owned values explicitly so ownership is transferred once")) ||
      (has_value && !mutable_items && !stdlib_reject_owned_item_element(program, scope, name, element_type, expr->args.items[0], diag, "compare", "compare a non-owned key or move owned values explicitly")) ||
      !stdlib_require_supported_item_element(program, name, element_type, expr->args.items[0], diag)) return false;
  char expected_items[160];
  stdlib_span_type_for_element(expected_items, sizeof(expected_items), element_type, mutable_items);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_items, items_actual);
  if (!check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 1, "collection length must be usize", "track the live item count as a usize")) return false;
  if (has_value) {
    if (!check_expr_expected(ctx, program, expr->args.items[2], scope, diag, element_type)) return false;
    const char *value_actual = expr_type(ctx, program, expr->args.items[2], scope);
    record_stdlib_arg_fact(resolution, 2, expr->args.items[2], element_type, value_actual);
    if (!types_compatible_in_scope(program, scope, element_type, value_actual)) {
      return set_diag_detail(diag, 3012, "collection value type must match item element", expr->args.items[2]->line, expr->args.items[2]->column, element_type, value_actual, "use a value of the same element type");
    }
  }
  const char *return_type = resolution && resolution->return_type ? resolution->return_type : "usize";
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_collections_len_usize_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *items_actual = NULL;
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections";
  char element_type[128];
  if (!stdlib_readable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, element_type, sizeof(element_type), &items_actual) ||
      !stdlib_require_supported_item_element(program, name, element_type, expr->args.items[0], diag)) return false;
  char expected_items[160];
  stdlib_span_type_for_element(expected_items, sizeof(expected_items), element_type, false);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_items, items_actual);
  if (!check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 1, "collection length must be usize", "track the live item count as a usize") ||
      !check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 2, "collection requested length must be usize", "pass a usize length")) return false;
  set_expr_resolved_type(expr, "usize");
  z_call_resolution_set_return_type(resolution, "usize");
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_collections_len_maybe_value_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *items_actual = NULL;
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections";
  char element_type[128];
  if (!stdlib_readable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, element_type, sizeof(element_type), &items_actual) ||
      !stdlib_reject_owned_item_element(program, scope, name, element_type, expr->args.items[0], diag, "return", "return non-owned scalar collection values or move owned values explicitly") ||
      !stdlib_require_supported_item_element(program, name, element_type, expr->args.items[0], diag)) return false;
  char expected_items[160];
  char result_type[160];
  stdlib_span_type_for_element(expected_items, sizeof(expected_items), element_type, false);
  snprintf(result_type, sizeof(result_type), "Maybe<%s>", element_type);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_items, items_actual);
  if (!check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 1, "collection length must be usize", "track the live item count as a usize")) return false;
  set_expr_resolved_type(expr, result_type);
  z_call_resolution_set_return_type(resolution, result_type);
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_collections_len_index_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *items_actual = NULL;
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections";
  char element_type[128];
  if (!stdlib_mutable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, element_type, sizeof(element_type), &items_actual) ||
      !stdlib_reject_owned_item_element(program, scope, name, element_type, expr->args.items[0], diag, "move", "move owned values explicitly so ownership is transferred once") ||
      !stdlib_require_supported_item_element(program, name, element_type, expr->args.items[0], diag)) return false;
  char expected_items[160];
  stdlib_span_type_for_element(expected_items, sizeof(expected_items), element_type, true);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_items, items_actual);
  if (!check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 1, "collection length must be usize", "track the live item count as a usize") ||
      !check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 2, "collection index must be usize", "pass a usize index")) return false;
  const char *return_type = resolution && resolution->return_type ? resolution->return_type : "usize";
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_collections_insert_at_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *items_actual = NULL;
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections.insertAt";
  char element_type[128];
  if (!stdlib_mutable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, element_type, sizeof(element_type), &items_actual) ||
      !stdlib_reject_owned_item_element(program, scope, name, element_type, expr->args.items[0], diag, "move", "move owned values explicitly so ownership is transferred once") ||
      !stdlib_require_supported_item_element(program, name, element_type, expr->args.items[0], diag)) return false;
  char expected_items[160];
  stdlib_span_type_for_element(expected_items, sizeof(expected_items), element_type, true);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_items, items_actual);
  if (!check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 1, "collection length must be usize", "track the live item count as a usize") ||
      !check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 2, "collection index must be usize", "pass a usize index")) return false;
  if (!check_expr_expected(ctx, program, expr->args.items[3], scope, diag, element_type)) return false;
  const char *value_actual = expr_type(ctx, program, expr->args.items[3], scope);
  record_stdlib_arg_fact(resolution, 3, expr->args.items[3], element_type, value_actual);
  if (!types_compatible_in_scope(program, scope, element_type, value_actual)) {
    return set_diag_detail(diag, 3012, "collection inserted value type must match item element", expr->args.items[3]->line, expr->args.items[3]->column, element_type, value_actual, "insert a value of the same element type");
  }
  const char *return_type = resolution && resolution->return_type ? resolution->return_type : "usize";
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_collections_swap_at_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *items_actual = NULL;
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections.swapAt";
  char element_type[128];
  if (!stdlib_mutable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, element_type, sizeof(element_type), &items_actual) ||
      !stdlib_reject_owned_item_element(program, scope, name, element_type, expr->args.items[0], diag, "move", "move owned values explicitly so ownership is transferred once") ||
      !stdlib_require_supported_item_element(program, name, element_type, expr->args.items[0], diag)) return false;
  char expected_items[160];
  stdlib_span_type_for_element(expected_items, sizeof(expected_items), element_type, true);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_items, items_actual);
  if (!check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 1, "collection length must be usize", "track the live item count as a usize") ||
      !check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 2, "collection left index must be usize", "pass a usize index") ||
      !check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 3, "collection right index must be usize", "pass a usize index")) return false;
  const char *return_type = resolution && resolution->return_type ? resolution->return_type : "Bool";
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_collections_map_key_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution, const char *return_type) {
  const char *keys_actual = NULL;
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections.mapIndex";
  char key_type[128];
  if (!stdlib_readable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, key_type, sizeof(key_type), &keys_actual) ||
      !stdlib_reject_owned_item_element(program, scope, name, key_type, expr->args.items[0], diag, "compare", "use a non-owned scalar key type for fixed map storage") ||
      !stdlib_require_supported_item_element(program, name, key_type, expr->args.items[0], diag)) return false;
  char expected_keys[160];
  stdlib_span_type_for_element(expected_keys, sizeof(expected_keys), key_type, false);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_keys, keys_actual);
  if (!check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 1, "collection map length must be usize", "track the live key count as a usize")) return false;
  if (!check_expr_expected(ctx, program, expr->args.items[2], scope, diag, key_type)) return false;
  const char *key_actual = expr_type(ctx, program, expr->args.items[2], scope);
  record_stdlib_arg_fact(resolution, 2, expr->args.items[2], key_type, key_actual);
  if (!types_compatible_in_scope(program, scope, key_type, key_actual)) {
    return set_diag_detail(diag, 3012, "collection map key type must match key storage element", expr->args.items[2]->line, expr->args.items[2]->column, key_type, key_actual, "look up a key with the same type as the key storage");
  }
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  stdlib_record_key_type_arg(expr, key_type);
  return true;
}

static bool check_stdlib_collections_map_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution, bool mutable_storage, bool has_value) {
  const char *keys_actual = NULL;
  const char *values_actual = NULL;
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections.map";
  char key_type[128];
  char value_type[128];
  bool keys_ok = mutable_storage ?
      stdlib_mutable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, key_type, sizeof(key_type), &keys_actual) :
      stdlib_readable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, key_type, sizeof(key_type), &keys_actual);
  bool values_ok = mutable_storage ?
      stdlib_mutable_items_arg_element(ctx, program, expr->args.items[1], scope, diag, name, value_type, sizeof(value_type), &values_actual) :
      stdlib_readable_items_arg_element(ctx, program, expr->args.items[1], scope, diag, name, value_type, sizeof(value_type), &values_actual);
  if (!keys_ok ||
      !values_ok ||
      !stdlib_reject_owned_item_element(program, scope, name, key_type, expr->args.items[0], diag, "compare", "use a non-owned scalar key type for fixed map storage") ||
      !stdlib_reject_owned_item_element(program, scope, name, value_type, expr->args.items[1], diag, mutable_storage ? "move" : "return", "use a non-owned scalar value type for fixed map storage") ||
      !stdlib_require_supported_item_element(program, name, key_type, expr->args.items[0], diag) ||
      !stdlib_require_supported_item_element(program, name, value_type, expr->args.items[1], diag)) return false;
  char expected_keys[160];
  char expected_values[160];
  stdlib_span_type_for_element(expected_keys, sizeof(expected_keys), key_type, mutable_storage);
  stdlib_span_type_for_element(expected_values, sizeof(expected_values), value_type, mutable_storage);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_keys, keys_actual);
  record_stdlib_arg_fact(resolution, 1, expr->args.items[1], expected_values, values_actual);
  if (!check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 2, "collection map length must be usize", "track the live key/value count as a usize")) return false;
  if (!check_expr_expected(ctx, program, expr->args.items[3], scope, diag, key_type)) return false;
  const char *key_actual = expr_type(ctx, program, expr->args.items[3], scope);
  record_stdlib_arg_fact(resolution, 3, expr->args.items[3], key_type, key_actual);
  if (!types_compatible_in_scope(program, scope, key_type, key_actual)) {
    return set_diag_detail(diag, 3012, "collection map key type must match key storage element", expr->args.items[3]->line, expr->args.items[3]->column, key_type, key_actual, "look up a key with the same type as the key storage");
  }
  if (has_value) {
    if (!check_expr_expected(ctx, program, expr->args.items[4], scope, diag, value_type)) return false;
    const char *value_actual = expr_type(ctx, program, expr->args.items[4], scope);
    record_stdlib_arg_fact(resolution, 4, expr->args.items[4], value_type, value_actual);
    if (!types_compatible_in_scope(program, scope, value_type, value_actual)) {
      return set_diag_detail(diag, 3012, "collection map value type must match value storage element", expr->args.items[4]->line, expr->args.items[4]->column, value_type, value_actual, "store a value with the same type as the value storage");
    }
  }
  if (mutable_storage) {
    set_expr_resolved_type(expr, "usize");
    z_call_resolution_set_return_type(resolution, "usize");
  } else {
    char result_type[160];
    snprintf(result_type, sizeof(result_type), "Maybe<%s>", value_type);
    set_expr_resolved_type(expr, result_type);
    z_call_resolution_set_return_type(resolution, result_type);
  }
  stdlib_record_two_type_args(expr, key_type, value_type);
  return true;
}

static bool check_stdlib_collections_map_values_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *keys_actual = NULL;
  const char *values_actual = NULL;
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections.mapValues";
  char key_type[128];
  char value_type[128];
  if (!stdlib_readable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, key_type, sizeof(key_type), &keys_actual) ||
      !stdlib_readable_items_arg_element(ctx, program, expr->args.items[1], scope, diag, name, value_type, sizeof(value_type), &values_actual) ||
      !stdlib_reject_owned_item_element(program, scope, name, key_type, expr->args.items[0], diag, "compare", "use a non-owned scalar key type for fixed map storage") ||
      !stdlib_reject_owned_item_element(program, scope, name, value_type, expr->args.items[1], diag, "return", "use a non-owned scalar value type for fixed map storage") ||
      !stdlib_require_supported_item_element(program, name, key_type, expr->args.items[0], diag) ||
      !stdlib_require_supported_item_element(program, name, value_type, expr->args.items[1], diag)) return false;
  char expected_keys[160];
  char expected_values[160];
  char result_type[160];
  stdlib_span_type_for_element(expected_keys, sizeof(expected_keys), key_type, false);
  stdlib_span_type_for_element(expected_values, sizeof(expected_values), value_type, false);
  stdlib_span_type_for_element(result_type, sizeof(result_type), value_type, false);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_keys, keys_actual);
  record_stdlib_arg_fact(resolution, 1, expr->args.items[1], expected_values, values_actual);
  if (!check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 2, "collection map length must be usize", "track the live key/value count as a usize")) return false;
  set_expr_resolved_type(expr, result_type);
  z_call_resolution_set_return_type(resolution, result_type);
  stdlib_record_two_type_args(expr, key_type, value_type);
  return true;
}

static bool check_stdlib_collections_map_state_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *keys_actual = NULL;
  const char *values_actual = NULL;
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections.map";
  char key_type[128];
  char value_type[128];
  if (!stdlib_readable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, key_type, sizeof(key_type), &keys_actual) ||
      !stdlib_readable_items_arg_element(ctx, program, expr->args.items[1], scope, diag, name, value_type, sizeof(value_type), &values_actual) ||
      !stdlib_reject_owned_item_element(program, scope, name, key_type, expr->args.items[0], diag, "compare", "use a non-owned scalar key type for fixed map storage") ||
      !stdlib_reject_owned_item_element(program, scope, name, value_type, expr->args.items[1], diag, "inspect", "use a non-owned scalar value type for fixed map storage") ||
      !stdlib_require_supported_item_element(program, name, key_type, expr->args.items[0], diag) ||
      !stdlib_require_supported_item_element(program, name, value_type, expr->args.items[1], diag)) return false;
  char expected_keys[160];
  char expected_values[160];
  stdlib_span_type_for_element(expected_keys, sizeof(expected_keys), key_type, false);
  stdlib_span_type_for_element(expected_values, sizeof(expected_values), value_type, false);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_keys, keys_actual);
  record_stdlib_arg_fact(resolution, 1, expr->args.items[1], expected_values, values_actual);
  if (!check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 2, "collection map length must be usize", "track the live key/value count as a usize")) return false;
  const char *return_type = resolution && resolution->return_type ? resolution->return_type : "usize";
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  stdlib_record_two_type_args(expr, key_type, value_type);
  return true;
}

static bool check_stdlib_collections_map_truncate_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  if (!check_stdlib_collections_map_state_call_expected(ctx, program, expr, scope, diag, resolution)) return false;
  if (!check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 3, "collection map requested length must be usize", "pass a usize length")) return false;
  set_expr_resolved_type(expr, "usize");
  z_call_resolution_set_return_type(resolution, "usize");
  return true;
}

static bool fixed_set_ref_element_type(const Program *program, const char *actual, char *element_type, size_t element_len) {
  char set_type[192];
  if (!named_ref_inner_text(actual, "ref", set_type, sizeof(set_type)) &&
      !named_ref_inner_text(actual, "mutref", set_type, sizeof(set_type))) return false;
  char **args = NULL;
  size_t arg_len = 0;
  const char *resolved = resolve_alias_type(program, set_type);
  bool ok = type_generic_arg_list(resolved ? resolved : set_type, "FixedSet", &args, &arg_len) && arg_len == 1;
  if (ok) snprintf(element_type, element_len, "%s", args[0]);
  free_type_arg_list(args, arg_len);
  return ok;
}

static bool fixed_set_ref_is_mutable(const char *actual) {
  char set_type[192];
  return named_ref_inner_text(actual, "mutref", set_type, sizeof(set_type));
}

static bool fixed_map_ref_types(const Program *program, const char *actual, char *key_type, size_t key_len, char *value_type, size_t value_len) {
  char map_type[224];
  if (!named_ref_inner_text(actual, "ref", map_type, sizeof(map_type)) &&
      !named_ref_inner_text(actual, "mutref", map_type, sizeof(map_type))) return false;
  char **args = NULL;
  size_t arg_len = 0;
  const char *resolved = resolve_alias_type(program, map_type);
  bool ok = type_generic_arg_list(resolved ? resolved : map_type, "FixedMap", &args, &arg_len) && arg_len == 2;
  if (ok) {
    snprintf(key_type, key_len, "%s", args[0]);
    snprintf(value_type, value_len, "%s", args[1]);
  }
  free_type_arg_list(args, arg_len);
  return ok;
}

static bool fixed_map_ref_is_mutable(const char *actual) {
  char map_type[224];
  return named_ref_inner_text(actual, "mutref", map_type, sizeof(map_type));
}

static bool check_stdlib_collections_fixed_set_constructor_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *items_actual = NULL;
  char element_type[128];
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections.fixedSet";
  if (!stdlib_mutable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, element_type, sizeof(element_type), &items_actual) ||
      !stdlib_reject_owned_item_element(program, scope, name, element_type, expr->args.items[0], diag, "store", "use a non-owned scalar item type for fixed set storage") ||
      !stdlib_require_supported_item_element(program, name, element_type, expr->args.items[0], diag)) return false;
  char expected_items[160];
  stdlib_span_type_for_element(expected_items, sizeof(expected_items), element_type, true);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_items, items_actual);
  if (!check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 1, "fixed set length must be usize", "track the live set count as a usize")) return false;
  char return_type[160];
  snprintf(return_type, sizeof(return_type), "FixedSet<%s>", element_type);
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_collections_fixed_map_constructor_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *keys_actual = NULL;
  const char *values_actual = NULL;
  char key_type[128];
  char value_type[128];
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections.fixedMap";
  if (!stdlib_mutable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, key_type, sizeof(key_type), &keys_actual) ||
      !stdlib_mutable_items_arg_element(ctx, program, expr->args.items[1], scope, diag, name, value_type, sizeof(value_type), &values_actual) ||
      !stdlib_reject_owned_item_element(program, scope, name, key_type, expr->args.items[0], diag, "compare", "use a non-owned scalar key type for fixed map storage") ||
      !stdlib_reject_owned_item_element(program, scope, name, value_type, expr->args.items[1], diag, "store", "use a non-owned scalar value type for fixed map storage") ||
      !stdlib_require_supported_item_element(program, name, key_type, expr->args.items[0], diag) ||
      !stdlib_require_supported_item_element(program, name, value_type, expr->args.items[1], diag)) return false;
  char expected_keys[160];
  char expected_values[160];
  stdlib_span_type_for_element(expected_keys, sizeof(expected_keys), key_type, true);
  stdlib_span_type_for_element(expected_values, sizeof(expected_values), value_type, true);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_keys, keys_actual);
  record_stdlib_arg_fact(resolution, 1, expr->args.items[1], expected_values, values_actual);
  if (!check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 2, "fixed map length must be usize", "track the live map count as a usize")) return false;
  char return_type[192];
  snprintf(return_type, sizeof(return_type), "FixedMap<%s, %s>", key_type, value_type);
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  stdlib_record_two_type_args(expr, key_type, value_type);
  return true;
}

static bool check_stdlib_collections_fixed_set_ref_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution, bool mutable_set, bool has_value, const char *return_type_override) {
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections.fixedSet";
  if (!check_expr(ctx, program, expr->args.items[0], scope, diag)) return false;
  const char *actual = expr_type(ctx, program, expr->args.items[0], scope);
  char element_type[128];
  if (!fixed_set_ref_element_type(program, actual, element_type, sizeof(element_type))) {
    char message[256];
    snprintf(message, sizeof(message), "%s expects a FixedSet reference", name);
    return set_diag_detail(diag, 3012, message, expr->args.items[0]->line, expr->args.items[0]->column, mutable_set ? "mutref<FixedSet<T>>" : "ref<FixedSet<T>>", actual, mutable_set ? "pass &mut set from std.collections.fixedSet(...)" : "pass &set from std.collections.fixedSet(...)");
  }
  if (mutable_set && !fixed_set_ref_is_mutable(actual)) {
    char message[256];
    snprintf(message, sizeof(message), "%s expects a mutable FixedSet reference", name);
    return set_diag_detail(diag, 3012, message, expr->args.items[0]->line, expr->args.items[0]->column, "mutref<FixedSet<T>>", actual, "pass &mut set from a mutable FixedSet binding");
  }
  if (!stdlib_reject_owned_item_element(program, scope, name, element_type, expr->args.items[0], diag, mutable_set ? "move" : "compare", "use a non-owned scalar item type for fixed set storage") ||
      !stdlib_require_supported_item_element(program, name, element_type, expr->args.items[0], diag)) return false;
  char expected_set[180];
  snprintf(expected_set, sizeof(expected_set), "%s<FixedSet<%s>>", mutable_set ? "mutref" : "ref", element_type);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_set, actual);
  if (has_value) {
    if (!check_expr_expected(ctx, program, expr->args.items[1], scope, diag, element_type)) return false;
    const char *value_actual = expr_type(ctx, program, expr->args.items[1], scope);
    record_stdlib_arg_fact(resolution, 1, expr->args.items[1], element_type, value_actual);
    if (!types_compatible_in_scope(program, scope, element_type, value_actual)) {
      char message[256];
      snprintf(message, sizeof(message), "%s value type must match set element", name);
      return set_diag_detail(diag, 3012, message, expr->args.items[1]->line, expr->args.items[1]->column, element_type, value_actual, "use a value with the same type as the FixedSet storage");
    }
  }
  char return_type[160];
  if (return_type_override && strcmp(return_type_override, "Span<T>") == 0) {
    stdlib_span_type_for_element(return_type, sizeof(return_type), element_type, false);
  } else {
    snprintf(return_type, sizeof(return_type), "%s", return_type_override ? return_type_override : (resolution && resolution->return_type ? resolution->return_type : "Bool"));
  }
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_collections_fixed_set_truncate_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  if (!check_stdlib_collections_fixed_set_ref_call_expected(ctx, program, expr, scope, diag, resolution, true, false, "usize")) return false;
  return check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 1, "fixed set requested length must be usize", "pass a usize length");
}

static bool fixed_deque_ref_element_type(const Program *program, const char *actual, char *element_type, size_t element_len) {
  char deque_type[192];
  if (!named_ref_inner_text(actual, "ref", deque_type, sizeof(deque_type)) &&
      !named_ref_inner_text(actual, "mutref", deque_type, sizeof(deque_type))) return false;
  char **args = NULL;
  size_t arg_len = 0;
  const char *resolved = resolve_alias_type(program, deque_type);
  bool ok = type_generic_arg_list(resolved ? resolved : deque_type, "FixedDeque", &args, &arg_len) && arg_len == 1;
  if (ok) snprintf(element_type, element_len, "%s", args[0]);
  free_type_arg_list(args, arg_len);
  return ok;
}

static bool fixed_deque_ref_is_mutable(const char *actual) {
  char deque_type[192];
  return named_ref_inner_text(actual, "mutref", deque_type, sizeof(deque_type));
}

static bool check_stdlib_collections_fixed_deque_constructor_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *items_actual = NULL;
  char element_type[128];
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections.fixedDeque";
  if (!stdlib_mutable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, element_type, sizeof(element_type), &items_actual) ||
      !stdlib_reject_owned_item_element(program, scope, name, element_type, expr->args.items[0], diag, "store", "use a non-owned scalar item type for fixed deque storage") ||
      !stdlib_require_supported_item_element(program, name, element_type, expr->args.items[0], diag)) return false;
  char expected_items[160];
  stdlib_span_type_for_element(expected_items, sizeof(expected_items), element_type, true);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_items, items_actual);
  if (!check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 1, "fixed deque length must be usize", "track the live deque count as a usize")) return false;
  char return_type[160];
  snprintf(return_type, sizeof(return_type), "FixedDeque<%s>", element_type);
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_collections_fixed_deque_ref_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution, bool mutable_deque, bool has_value, const char *return_type_override) {
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections.fixedDeque";
  if (!check_expr(ctx, program, expr->args.items[0], scope, diag)) return false;
  const char *actual = expr_type(ctx, program, expr->args.items[0], scope);
  char element_type[128];
  if (!fixed_deque_ref_element_type(program, actual, element_type, sizeof(element_type))) {
    char message[256];
    snprintf(message, sizeof(message), "%s expects a FixedDeque reference", name);
    return set_diag_detail(diag, 3012, message, expr->args.items[0]->line, expr->args.items[0]->column, mutable_deque ? "mutref<FixedDeque<T>>" : "ref<FixedDeque<T>>", actual, mutable_deque ? "pass &mut deque from std.collections.fixedDeque(...)" : "pass &deque from std.collections.fixedDeque(...)");
  }
  if (mutable_deque && !fixed_deque_ref_is_mutable(actual)) {
    char message[256];
    snprintf(message, sizeof(message), "%s expects a mutable FixedDeque reference", name);
    return set_diag_detail(diag, 3012, message, expr->args.items[0]->line, expr->args.items[0]->column, "mutref<FixedDeque<T>>", actual, "pass &mut deque from a mutable FixedDeque binding");
  }
  if (!stdlib_reject_owned_item_element(program, scope, name, element_type, expr->args.items[0], diag, mutable_deque ? "move" : "read", "use a non-owned scalar item type for fixed deque storage") ||
      !stdlib_require_supported_item_element(program, name, element_type, expr->args.items[0], diag)) return false;
  char expected_deque[180];
  snprintf(expected_deque, sizeof(expected_deque), "%s<FixedDeque<%s>>", mutable_deque ? "mutref" : "ref", element_type);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_deque, actual);
  if (has_value) {
    if (!check_expr_expected(ctx, program, expr->args.items[1], scope, diag, element_type)) return false;
    const char *value_actual = expr_type(ctx, program, expr->args.items[1], scope);
    record_stdlib_arg_fact(resolution, 1, expr->args.items[1], element_type, value_actual);
    if (!types_compatible_in_scope(program, scope, element_type, value_actual)) {
      char message[256];
      snprintf(message, sizeof(message), "%s value type must match deque element", name);
      return set_diag_detail(diag, 3012, message, expr->args.items[1]->line, expr->args.items[1]->column, element_type, value_actual, "use a value with the same type as the FixedDeque storage");
    }
  }
  char return_type[160];
  if (return_type_override && strcmp(return_type_override, "Span<T>") == 0) {
    stdlib_span_type_for_element(return_type, sizeof(return_type), element_type, false);
  } else if (return_type_override && strcmp(return_type_override, "Maybe<T>") == 0) {
    snprintf(return_type, sizeof(return_type), "Maybe<%s>", element_type);
  } else {
    snprintf(return_type, sizeof(return_type), "%s", return_type_override ? return_type_override : (resolution && resolution->return_type ? resolution->return_type : "Bool"));
  }
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_collections_fixed_deque_truncate_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  if (!check_stdlib_collections_fixed_deque_ref_call_expected(ctx, program, expr, scope, diag, resolution, true, false, "usize")) return false;
  return check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 1, "fixed deque requested length must be usize", "pass a usize length");
}

static bool check_stdlib_collections_fixed_deque_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution, ZStdHelperKind kind) {
  switch (kind) {
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_CONSTRUCTOR:
      return check_stdlib_collections_fixed_deque_constructor_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_STATE:
      return check_stdlib_collections_fixed_deque_ref_call_expected(ctx, program, expr, scope, diag, resolution, resolution && resolution->std_helper && resolution->std_helper->arg_types[0] && strstr(resolution->std_helper->arg_types[0], "mutref<") != NULL, false, resolution && resolution->std_helper ? resolution->std_helper->return_type : "usize");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_VIEW:
      return check_stdlib_collections_fixed_deque_ref_call_expected(ctx, program, expr, scope, diag, resolution, false, false, "Span<T>");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_VALUE:
      return check_stdlib_collections_fixed_deque_ref_call_expected(ctx, program, expr, scope, diag, resolution, false, false, "Maybe<T>");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_MUT_VALUE:
      return check_stdlib_collections_fixed_deque_ref_call_expected(ctx, program, expr, scope, diag, resolution, true, true, "Bool");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_POP:
      return check_stdlib_collections_fixed_deque_ref_call_expected(ctx, program, expr, scope, diag, resolution, true, false, "Maybe<T>");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_TRUNCATE:
      return check_stdlib_collections_fixed_deque_truncate_call_expected(ctx, program, expr, scope, diag, resolution);
    default:
      return false;
  }
}

static bool fixed_ring_buffer_ref_element_type(const Program *program, const char *actual, char *element_type, size_t element_len) {
  char ring_type[224];
  if (!named_ref_inner_text(actual, "ref", ring_type, sizeof(ring_type)) &&
      !named_ref_inner_text(actual, "mutref", ring_type, sizeof(ring_type))) return false;
  char **args = NULL;
  size_t arg_len = 0;
  const char *resolved = resolve_alias_type(program, ring_type);
  bool ok = type_generic_arg_list(resolved ? resolved : ring_type, "FixedRingBuffer", &args, &arg_len) && arg_len == 1;
  if (ok) snprintf(element_type, element_len, "%s", args[0]);
  free_type_arg_list(args, arg_len);
  return ok;
}

static bool fixed_ring_buffer_ref_is_mutable(const char *actual) {
  char ring_type[224];
  return named_ref_inner_text(actual, "mutref", ring_type, sizeof(ring_type));
}

static bool check_stdlib_collections_fixed_ring_buffer_constructor_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *items_actual = NULL;
  char element_type[128];
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections.fixedRingBuffer";
  if (!stdlib_mutable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, element_type, sizeof(element_type), &items_actual) ||
      !stdlib_reject_owned_item_element(program, scope, name, element_type, expr->args.items[0], diag, "store", "use a non-owned scalar item type for fixed ring buffer storage") ||
      !stdlib_require_supported_item_element(program, name, element_type, expr->args.items[0], diag)) return false;
  char expected_items[160];
  stdlib_span_type_for_element(expected_items, sizeof(expected_items), element_type, true);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_items, items_actual);
  if (!check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 1, "fixed ring buffer head must be usize", "track the storage head as a usize") ||
      !check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 2, "fixed ring buffer length must be usize", "track the live ring buffer count as a usize")) return false;
  char return_type[192];
  snprintf(return_type, sizeof(return_type), "FixedRingBuffer<%s>", element_type);
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_collections_fixed_ring_buffer_ref_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution, bool mutable_ring, bool has_value, bool has_index, const char *return_type_override) {
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections.fixedRingBuffer";
  if (!check_expr(ctx, program, expr->args.items[0], scope, diag)) return false;
  const char *actual = expr_type(ctx, program, expr->args.items[0], scope);
  char element_type[128];
  if (!fixed_ring_buffer_ref_element_type(program, actual, element_type, sizeof(element_type))) {
    char message[256];
    snprintf(message, sizeof(message), "%s expects a FixedRingBuffer reference", name);
    return set_diag_detail(diag, 3012, message, expr->args.items[0]->line, expr->args.items[0]->column, mutable_ring ? "mutref<FixedRingBuffer<T>>" : "ref<FixedRingBuffer<T>>", actual, mutable_ring ? "pass &mut ring from std.collections.fixedRingBuffer(...)" : "pass &ring from std.collections.fixedRingBuffer(...)");
  }
  if (mutable_ring && !fixed_ring_buffer_ref_is_mutable(actual)) {
    char message[256];
    snprintf(message, sizeof(message), "%s expects a mutable FixedRingBuffer reference", name);
    return set_diag_detail(diag, 3012, message, expr->args.items[0]->line, expr->args.items[0]->column, "mutref<FixedRingBuffer<T>>", actual, "pass &mut ring from a mutable FixedRingBuffer binding");
  }
  if (!stdlib_reject_owned_item_element(program, scope, name, element_type, expr->args.items[0], diag, mutable_ring ? "move" : "read", "use a non-owned scalar item type for fixed ring buffer storage") ||
      !stdlib_require_supported_item_element(program, name, element_type, expr->args.items[0], diag)) return false;
  char expected_ring[224];
  snprintf(expected_ring, sizeof(expected_ring), "%s<FixedRingBuffer<%s>>", mutable_ring ? "mutref" : "ref", element_type);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_ring, actual);
  if (has_value) {
    if (!check_expr_expected(ctx, program, expr->args.items[1], scope, diag, element_type)) return false;
    const char *value_actual = expr_type(ctx, program, expr->args.items[1], scope);
    record_stdlib_arg_fact(resolution, 1, expr->args.items[1], element_type, value_actual);
    if (!types_compatible_in_scope(program, scope, element_type, value_actual)) {
      char message[256];
      snprintf(message, sizeof(message), "%s value type must match ring buffer element", name);
      return set_diag_detail(diag, 3012, message, expr->args.items[1]->line, expr->args.items[1]->column, element_type, value_actual, "use a value with the same type as the FixedRingBuffer storage");
    }
  }
  if (has_index && !check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 1, "fixed ring buffer index must be usize", "pass a usize logical index")) return false;
  char return_type[192];
  if (return_type_override && strcmp(return_type_override, "Maybe<T>") == 0) {
    snprintf(return_type, sizeof(return_type), "Maybe<%s>", element_type);
  } else {
    snprintf(return_type, sizeof(return_type), "%s", return_type_override ? return_type_override : (resolution && resolution->return_type ? resolution->return_type : "Bool"));
  }
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_collections_fixed_ring_buffer_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution, ZStdHelperKind kind) {
  switch (kind) {
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_CONSTRUCTOR:
      return check_stdlib_collections_fixed_ring_buffer_constructor_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_STATE:
      return check_stdlib_collections_fixed_ring_buffer_ref_call_expected(ctx, program, expr, scope, diag, resolution, resolution && resolution->std_helper && resolution->std_helper->arg_types[0] && strstr(resolution->std_helper->arg_types[0], "mutref<") != NULL, false, false, resolution && resolution->std_helper ? resolution->std_helper->return_type : "usize");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_VALUE:
      return check_stdlib_collections_fixed_ring_buffer_ref_call_expected(ctx, program, expr, scope, diag, resolution, false, false, false, "Maybe<T>");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_GET:
      return check_stdlib_collections_fixed_ring_buffer_ref_call_expected(ctx, program, expr, scope, diag, resolution, false, false, true, "Maybe<T>");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_MUT_VALUE:
      return check_stdlib_collections_fixed_ring_buffer_ref_call_expected(ctx, program, expr, scope, diag, resolution, true, true, false, "Bool");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_POP:
      return check_stdlib_collections_fixed_ring_buffer_ref_call_expected(ctx, program, expr, scope, diag, resolution, true, false, false, "Maybe<T>");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_TRUNCATE:
      return check_stdlib_collections_fixed_ring_buffer_ref_call_expected(ctx, program, expr, scope, diag, resolution, true, false, true, "usize");
    default:
      return false;
  }
}

static bool check_stdlib_collections_fixed_map_ref_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution, bool mutable_map, bool has_key, bool has_value, bool has_len, const char *return_type_override) {
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.collections.fixedMap";
  if (!check_expr(ctx, program, expr->args.items[0], scope, diag)) return false;
  const char *actual = expr_type(ctx, program, expr->args.items[0], scope);
  char key_type[128];
  char value_type[128];
  if (!fixed_map_ref_types(program, actual, key_type, sizeof(key_type), value_type, sizeof(value_type))) {
    char message[256];
    snprintf(message, sizeof(message), "%s expects a FixedMap reference", name);
    return set_diag_detail(diag, 3012, message, expr->args.items[0]->line, expr->args.items[0]->column, mutable_map ? "mutref<FixedMap<K,V>>" : "ref<FixedMap<K,V>>", actual, mutable_map ? "pass &mut map from std.collections.fixedMap(...)" : "pass &map from std.collections.fixedMap(...)");
  }
  if (mutable_map && !fixed_map_ref_is_mutable(actual)) {
    char message[256];
    snprintf(message, sizeof(message), "%s expects a mutable FixedMap reference", name);
    return set_diag_detail(diag, 3012, message, expr->args.items[0]->line, expr->args.items[0]->column, "mutref<FixedMap<K,V>>", actual, "pass &mut map from a mutable FixedMap binding");
  }
  if (!stdlib_reject_owned_item_element(program, scope, name, key_type, expr->args.items[0], diag, "compare", "use a non-owned scalar key type for fixed map storage") ||
      !stdlib_reject_owned_item_element(program, scope, name, value_type, expr->args.items[0], diag, mutable_map ? "store" : "read", "use a non-owned scalar value type for fixed map storage") ||
      !stdlib_require_supported_item_element(program, name, key_type, expr->args.items[0], diag) ||
      !stdlib_require_supported_item_element(program, name, value_type, expr->args.items[0], diag)) return false;
  char expected_map[224];
  snprintf(expected_map, sizeof(expected_map), "%s<FixedMap<%s, %s>>", mutable_map ? "mutref" : "ref", key_type, value_type);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_map, actual);
  if (has_key) {
    if (!check_expr_expected(ctx, program, expr->args.items[1], scope, diag, key_type)) return false;
    const char *key_actual = expr_type(ctx, program, expr->args.items[1], scope);
    record_stdlib_arg_fact(resolution, 1, expr->args.items[1], key_type, key_actual);
    if (!types_compatible_in_scope(program, scope, key_type, key_actual)) {
      char message[256];
      snprintf(message, sizeof(message), "%s key type must match map keys", name);
      return set_diag_detail(diag, 3012, message, expr->args.items[1]->line, expr->args.items[1]->column, key_type, key_actual, "use a key with the same type as the FixedMap key storage");
    }
  }
  if (has_value) {
    if (!check_expr_expected(ctx, program, expr->args.items[2], scope, diag, value_type)) return false;
    const char *value_actual = expr_type(ctx, program, expr->args.items[2], scope);
    record_stdlib_arg_fact(resolution, 2, expr->args.items[2], value_type, value_actual);
    if (!types_compatible_in_scope(program, scope, value_type, value_actual)) {
      char message[256];
      snprintf(message, sizeof(message), "%s value type must match map values", name);
      return set_diag_detail(diag, 3012, message, expr->args.items[2]->line, expr->args.items[2]->column, value_type, value_actual, "use a value with the same type as the FixedMap value storage");
    }
  }
  if (has_len && !check_stdlib_usize_arg_expected(ctx, program, expr, scope, diag, resolution, 1, "fixed map requested length must be usize", "pass a usize length")) return false;
  char return_type[192];
  if (return_type_override && strcmp(return_type_override, "Span<K>") == 0) {
    stdlib_span_type_for_element(return_type, sizeof(return_type), key_type, false);
  } else if (return_type_override && strcmp(return_type_override, "Span<V>") == 0) {
    stdlib_span_type_for_element(return_type, sizeof(return_type), value_type, false);
  } else if (return_type_override && strcmp(return_type_override, "Maybe<V>") == 0) {
    snprintf(return_type, sizeof(return_type), "Maybe<%s>", value_type);
  } else {
    snprintf(return_type, sizeof(return_type), "%s", return_type_override ? return_type_override : (resolution && resolution->return_type ? resolution->return_type : "Bool"));
  }
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  stdlib_record_two_type_args(expr, key_type, value_type);
  return true;
}

static bool check_stdlib_search_index_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *items_actual = NULL;
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std.search";
  char element_type[128];
  if (!stdlib_readable_items_arg_element(ctx, program, expr->args.items[0], scope, diag, name, element_type, sizeof(element_type), &items_actual) ||
      !stdlib_reject_owned_item_element(program, scope, name, element_type, expr->args.items[0], diag, "compare", "compare a non-owned key or move owned values explicitly") ||
      !stdlib_require_supported_item_element(program, name, element_type, expr->args.items[0], diag)) return false;
  char expected_items[160];
  stdlib_span_type_for_element(expected_items, sizeof(expected_items), element_type, false);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], expected_items, items_actual);
  if (!check_expr_expected(ctx, program, expr->args.items[1], scope, diag, element_type)) return false;
  const char *needle_actual = expr_type(ctx, program, expr->args.items[1], scope);
  record_stdlib_arg_fact(resolution, 1, expr->args.items[1], element_type, needle_actual);
  if (!types_compatible_in_scope(program, scope, element_type, needle_actual)) {
    return set_diag_detail(diag, 3012, "std.search value type must match item element", expr->args.items[1]->line, expr->args.items[1]->column, element_type, needle_actual, "search for a value with the same element type");
  }
  set_expr_resolved_type(expr, "usize");
  z_call_resolution_set_return_type(resolution, "usize");
  stdlib_record_single_type_arg(expr, element_type);
  return true;
}

static bool check_stdlib_allocator_len_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution, const char *name, const char *result_type, const char *len_message, const char *len_help, const char *mut_help) {
  if (!check_stdlib_allocator_arg(ctx, program, expr, scope, diag, resolution, 0, name, "use std.mem.nullAlloc() or a mut FixedBufAlloc from std.mem.fixedBufAlloc(buffer)", mut_help)) return false;
  if (!check_expr_expected(ctx, program, expr->args.items[1], scope, diag, "usize")) return false;
  const char *len_type = expr_type(ctx, program, expr->args.items[1], scope);
  record_stdlib_arg_fact(resolution, 1, expr->args.items[1], "usize", len_type);
  if (!is_int_type(len_type)) {
    return set_diag_detail(diag, 3028, len_message, expr->args.items[1]->line, expr->args.items[1]->column, "usize length", len_type, len_help);
  }
  set_expr_resolved_type(expr, result_type);
  return true;
}

static bool check_stdlib_fs_read_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  if (!check_expr(ctx, program, expr->args.items[0], scope, diag)) return false;
  const char *file_or_path_type = expr_type(ctx, program, expr->args.items[0], scope);
  const char *first_expected = "String";
  const char *return_type = "usize";
  if (type_is_named_generic(file_or_path_type, "ref") || type_is_named_generic(file_or_path_type, "mutref")) {
    first_expected = "mutref<File>";
      return_type = "Maybe<usize>";
  }
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], first_expected, file_or_path_type);
  if (!types_compatible(program, first_expected, file_or_path_type)) {
    return set_diag_detail(diag, 3012, "std.fs.read expects a path or mutable File reference", expr->args.items[0]->line, expr->args.items[0]->column, "String path or mutref<File>", file_or_path_type, "use std.fs.readBytes(path, buffer) for paths or std.fs.read(&mut file, buffer) for file resources");
  }
  if (!check_expr_expected(ctx, program, expr->args.items[1], scope, diag, "MutSpan<u8>")) return false;
  const char *buf_type = expr_type(ctx, program, expr->args.items[1], scope);
  record_stdlib_arg_fact(resolution, 1, expr->args.items[1], "MutSpan<u8>", buf_type);
  if (!types_compatible(program, "MutSpan<u8>", buf_type)) {
    return set_diag_detail(diag, 3012, "std.fs.read expects a mutable byte buffer", expr->args.items[1]->line, expr->args.items[1]->column, "MutSpan<u8>", buf_type, "pass a mutable byte array or MutSpan<u8>");
  }
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  return true;
}

static bool check_stdlib_fs_read_all_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution, const char *name, ZStdHelperKind kind) {
  if (!check_stdlib_allocator_arg(ctx, program, expr, scope, diag, resolution, 0, "std.fs.readAll", "pass an explicit allocator; no global filesystem allocator is available", "store the fixed buffer allocator in a var binding before reading")) return false;
  if (!check_stdlib_table_arg_range_expected(ctx, program, expr, scope, diag, name, 1, false, resolution)) return false;
  const char *return_type = kind == Z_STD_HELPER_KIND_FS_READ_ALL_OR_RAISE ? "owned<ByteBuf>" : "Maybe<owned<ByteBuf>>";
  set_expr_resolved_type(expr, return_type);
  z_call_resolution_set_return_type(resolution, return_type);
  return true;
}

static bool check_stdlib_json_parse_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution, const char *name, ZStdHelperKind kind) {
  if (!check_stdlib_allocator_arg(ctx, program, expr, scope, diag, resolution, 0, name, "pass an explicit allocator; JSON parsing does not use a global allocator", "store the fixed buffer allocator in a var binding before parsing JSON")) return false;
  const char *expected = kind == Z_STD_HELPER_KIND_JSON_PARSE_BYTES ? "Span<u8>" : "String";
  if (!check_expr_expected(ctx, program, expr->args.items[1], scope, diag, expected)) return false;
  const char *actual = expr_type(ctx, program, expr->args.items[1], scope);
  record_stdlib_arg_fact(resolution, 1, expr->args.items[1], expected, actual);
  if (!types_compatible_in_scope(program, scope, expected, actual)) {
    char message[256];
    snprintf(message, sizeof(message), "argument 2 to '%s' has incompatible type", name);
    return set_diag_detail(diag, 3012, message, expr->args.items[1]->line, expr->args.items[1]->column, expected, actual, "pass a compatible JSON payload");
  }
  set_expr_resolved_type(expr, "Maybe<JsonDoc>");
  return true;
}

static bool check_stdlib_table_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution, const char *name) {
  if (!check_stdlib_table_arg_range_expected(ctx, program, expr, scope, diag, name, 0, true, resolution)) return false;
  set_expr_resolved_type(expr, resolution && resolution->return_type ? resolution->return_type : "Unknown");
  return true;
}

static bool check_stdlib_call_fallibility_expected(CheckContext *ctx, const Expr *expr, ZDiag *diag, const ZCallResolution *resolution);

static bool check_stdlib_http_listen_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  if (!expr) return true;
  if (expr->args.len != 1 && expr->args.len != 2) {
    return set_diag_detail(diag,
                           3011,
                           "std function 'std.http.listen' expects World plus an optional u16 port",
                           expr->line,
                           expr->column,
                           "std.http.listen(world) or std.http.listen(world, 3000_u16)",
                           "wrong argument count",
                           "omit the port for auto-incrementing dev port selection, or pass one explicit u16 port");
  }
  if (!check_stdlib_call_fallibility_expected(ctx, expr, diag, resolution)) return false;
  if (!check_expr_expected(ctx, program, expr->args.items[0], scope, diag, "World")) return false;
  const char *world_type = expr_type(ctx, program, expr->args.items[0], scope);
  record_stdlib_arg_fact(resolution, 0, expr->args.items[0], "World", world_type);
  if (!types_compatible_in_scope(program, scope, "World", world_type)) {
    return set_diag_detail(diag, 3012, "argument 1 to 'std.http.listen' has incompatible type", expr->args.items[0]->line, expr->args.items[0]->column, "World", world_type, "pass the main function's World capability");
  }
  if (expr->args.len == 2) {
    if (!check_expr_expected(ctx, program, expr->args.items[1], scope, diag, "u16")) return false;
    const char *port_type = expr_type(ctx, program, expr->args.items[1], scope);
    record_stdlib_arg_fact(resolution, 1, expr->args.items[1], "u16", port_type);
    if (!types_compatible_in_scope(program, scope, "u16", port_type)) {
      return set_diag_detail(diag, 3012, "argument 2 to 'std.http.listen' has incompatible type", expr->args.items[1]->line, expr->args.items[1]->column, "u16", port_type, "pass a u16 port literal such as 3000_u16");
    }
  }
  set_expr_resolved_type(expr, "Void");
  return true;
}

static bool z_std_helper_kind_is_collections_fixed_resource(ZStdHelperKind kind) {
  switch (kind) {
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_SET_CONSTRUCTOR:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_SET_STATE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_SET_VIEW:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_SET_VALUE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_SET_MUT_VALUE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_SET_TRUNCATE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_CONSTRUCTOR:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_STATE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_VIEW:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_VALUE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_MUT_VALUE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_POP:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_TRUNCATE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_CONSTRUCTOR:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_STATE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_VALUE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_GET:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_MUT_VALUE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_POP:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_TRUNCATE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_MAP_CONSTRUCTOR:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_MAP_STATE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_MAP_VIEW:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_MAP_KEY:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_MAP_GET:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_MAP_PUT:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_MAP_REMOVE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_MAP_TRUNCATE:
      return true;
    default:
      return false;
  }
}

static bool check_stdlib_collections_fixed_resource_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution, ZStdHelperKind kind) {
  switch (kind) {
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_SET_CONSTRUCTOR:
      return check_stdlib_collections_fixed_set_constructor_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_SET_STATE:
      return check_stdlib_collections_fixed_set_ref_call_expected(ctx, program, expr, scope, diag, resolution, resolution && resolution->std_helper && resolution->std_helper->arg_types[0] && strstr(resolution->std_helper->arg_types[0], "mutref<") != NULL, false, resolution && resolution->std_helper ? resolution->std_helper->return_type : "usize");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_SET_VIEW:
      return check_stdlib_collections_fixed_set_ref_call_expected(ctx, program, expr, scope, diag, resolution, false, false, "Span<T>");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_SET_VALUE:
      return check_stdlib_collections_fixed_set_ref_call_expected(ctx, program, expr, scope, diag, resolution, false, true, resolution && resolution->std_helper ? resolution->std_helper->return_type : "Bool");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_SET_MUT_VALUE:
      return check_stdlib_collections_fixed_set_ref_call_expected(ctx, program, expr, scope, diag, resolution, true, true, resolution && resolution->std_helper ? resolution->std_helper->return_type : "Bool");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_SET_TRUNCATE:
      return check_stdlib_collections_fixed_set_truncate_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_CONSTRUCTOR:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_STATE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_VIEW:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_VALUE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_MUT_VALUE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_POP:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_DEQUE_TRUNCATE:
      return check_stdlib_collections_fixed_deque_call_expected(ctx, program, expr, scope, diag, resolution, kind);
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_CONSTRUCTOR:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_STATE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_VALUE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_GET:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_MUT_VALUE:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_POP:
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_RING_BUFFER_TRUNCATE:
      return check_stdlib_collections_fixed_ring_buffer_call_expected(ctx, program, expr, scope, diag, resolution, kind);
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_MAP_CONSTRUCTOR:
      return check_stdlib_collections_fixed_map_constructor_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_MAP_STATE:
      return check_stdlib_collections_fixed_map_ref_call_expected(ctx, program, expr, scope, diag, resolution, resolution && resolution->std_helper && resolution->std_helper->arg_types[0] && strstr(resolution->std_helper->arg_types[0], "mutref<") != NULL, false, false, false, resolution && resolution->std_helper ? resolution->std_helper->return_type : "usize");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_MAP_VIEW:
      return check_stdlib_collections_fixed_map_ref_call_expected(ctx, program, expr, scope, diag, resolution, false, false, false, false, resolution && resolution->std_helper ? resolution->std_helper->return_type : "Span<K>");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_MAP_KEY:
      return check_stdlib_collections_fixed_map_ref_call_expected(ctx, program, expr, scope, diag, resolution, false, true, false, false, resolution && resolution->std_helper ? resolution->std_helper->return_type : "Bool");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_MAP_GET:
      return check_stdlib_collections_fixed_map_ref_call_expected(ctx, program, expr, scope, diag, resolution, false, true, false, false, "Maybe<V>");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_MAP_PUT:
      return check_stdlib_collections_fixed_map_ref_call_expected(ctx, program, expr, scope, diag, resolution, true, true, true, false, "Bool");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_MAP_REMOVE:
      return check_stdlib_collections_fixed_map_ref_call_expected(ctx, program, expr, scope, diag, resolution, true, true, false, false, "Bool");
    case Z_STD_HELPER_KIND_COLLECTIONS_FIXED_MAP_TRUNCATE:
      return check_stdlib_collections_fixed_map_ref_call_expected(ctx, program, expr, scope, diag, resolution, true, false, false, true, "usize");
    default:
      return false;
  }
}

static bool check_stdlib_known_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, ZCallResolution *resolution) {
  const char *name = resolution && resolution->callee_name ? resolution->callee_name : "std helper";
  ZStdHelperKind kind = z_std_helper_kind(resolution ? resolution->std_helper : NULL);
  if (z_std_helper_kind_is_collections_fixed_resource(kind)) {
    return check_stdlib_collections_fixed_resource_call_expected(ctx, program, expr, scope, diag, resolution, kind);
  }
  switch (kind) {
    case Z_STD_HELPER_KIND_HTTP_LISTEN:
      return check_stdlib_http_listen_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_MEM_LEN:
      return check_stdlib_mem_len_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_MEM_GET:
      return check_stdlib_mem_get_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_MEM_EQL_BYTES:
      return check_stdlib_mem_eql_bytes_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_MEM_COPY_ITEMS:
      return check_stdlib_mem_copy_items_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_MEM_FILL_ITEMS:
      return check_stdlib_mem_fill_items_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_MEM_CONTAINS:
    case Z_STD_HELPER_KIND_MEM_IS_EMPTY:
      return check_stdlib_mem_contains_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_MEM_SPLIT:
      return check_stdlib_mem_split_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_MEM_SLICE:
      return check_stdlib_mem_slice_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_MEM_SPAN_USIZE:
      return check_stdlib_mem_span_usize_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_SORT_MERGE:
      return check_stdlib_sort_merge_call_expected(ctx, program, expr, scope, diag, resolution, name);
    case Z_STD_HELPER_KIND_COLLECTIONS_PUSH:
      return check_stdlib_collections_push_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_COLLECTIONS_APPEND:
      return check_stdlib_collections_append_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_COLLECTIONS_VIEW:
      return check_stdlib_collections_view_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_COLLECTIONS_LEN_STATE:
      return check_stdlib_collections_len_call_expected(ctx, program, expr, scope, diag, resolution, false, false);
    case Z_STD_HELPER_KIND_COLLECTIONS_LEN_USIZE:
      return check_stdlib_collections_len_usize_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_COLLECTIONS_LEN_MAYBE_VALUE:
      return check_stdlib_collections_len_maybe_value_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_COLLECTIONS_LEN_VALUE:
      return check_stdlib_collections_len_call_expected(ctx, program, expr, scope, diag, resolution, false, true);
    case Z_STD_HELPER_KIND_COLLECTIONS_MUT_LEN_STATE:
      return check_stdlib_collections_len_call_expected(ctx, program, expr, scope, diag, resolution, true, false);
    case Z_STD_HELPER_KIND_COLLECTIONS_MUT_LEN_VALUE:
      return check_stdlib_collections_len_call_expected(ctx, program, expr, scope, diag, resolution, true, true);
    case Z_STD_HELPER_KIND_COLLECTIONS_LEN_INDEX:
      return check_stdlib_collections_len_index_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_COLLECTIONS_INSERT_AT:
      return check_stdlib_collections_insert_at_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_COLLECTIONS_REPLACE_AT:
      return check_stdlib_collections_insert_at_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_COLLECTIONS_SWAP_AT:
      return check_stdlib_collections_swap_at_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_COLLECTIONS_MAP_CONTAINS:
      return check_stdlib_collections_map_key_call_expected(ctx, program, expr, scope, diag, resolution, "Bool");
    case Z_STD_HELPER_KIND_COLLECTIONS_MAP_INDEX:
      return check_stdlib_collections_map_key_call_expected(ctx, program, expr, scope, diag, resolution, "usize");
    case Z_STD_HELPER_KIND_COLLECTIONS_MAP_GET:
      return check_stdlib_collections_map_call_expected(ctx, program, expr, scope, diag, resolution, false, false);
    case Z_STD_HELPER_KIND_COLLECTIONS_MAP_VALUES:
      return check_stdlib_collections_map_values_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_COLLECTIONS_MAP_STATE:
      return check_stdlib_collections_map_state_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_COLLECTIONS_MAP_TRUNCATE:
      return check_stdlib_collections_map_truncate_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_COLLECTIONS_MAP_PUT:
      return check_stdlib_collections_map_call_expected(ctx, program, expr, scope, diag, resolution, true, true);
    case Z_STD_HELPER_KIND_COLLECTIONS_MAP_REMOVE:
      return check_stdlib_collections_map_call_expected(ctx, program, expr, scope, diag, resolution, true, false);
    case Z_STD_HELPER_KIND_SEARCH_INDEX:
      return check_stdlib_search_index_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_MEM_ALLOC_BYTES:
      return check_stdlib_allocator_len_call_expected(ctx, program, expr, scope, diag, resolution, name, "Maybe<MutSpan<u8>>", "allocation length must be an integer", "pass an integer byte count", "store the fixed buffer allocator in a var binding before allocating");
    case Z_STD_HELPER_KIND_MEM_BYTE_BUF:
      return check_stdlib_allocator_len_call_expected(ctx, program, expr, scope, diag, resolution, name, "Maybe<owned<ByteBuf>>", "ByteBuf length must be an integer", "pass an integer byte count", "store the fixed buffer allocator in a var binding before allocating a ByteBuf");
    case Z_STD_HELPER_KIND_FS_READ:
      return check_stdlib_fs_read_call_expected(ctx, program, expr, scope, diag, resolution);
    case Z_STD_HELPER_KIND_FS_READ_ALL:
    case Z_STD_HELPER_KIND_FS_READ_ALL_OR_RAISE:
      return check_stdlib_fs_read_all_call_expected(ctx, program, expr, scope, diag, resolution, name, kind);
    case Z_STD_HELPER_KIND_JSON_PARSE:
    case Z_STD_HELPER_KIND_JSON_PARSE_BYTES:
      return check_stdlib_json_parse_call_expected(ctx, program, expr, scope, diag, resolution, name, kind);
    case Z_STD_HELPER_KIND_TABLE:
    case Z_STD_HELPER_KIND_UNKNOWN:
    default:
      return check_stdlib_table_call_expected(ctx, program, expr, scope, diag, resolution, name);
  }
}

static bool check_stdlib_call_fallibility_expected(CheckContext *ctx, const Expr *expr, ZDiag *diag, const ZCallResolution *resolution) {
  if (!resolution || !resolution->fallible || (ctx && ctx->allow_fallible_call > 0)) return true;
  char actual[160];
  snprintf(actual, sizeof(actual), "call to '%s'", resolution->callee_name ? resolution->callee_name : "std fallible helper");
  return set_diag_detail(diag, 1003, "fallible function call must be checked", expr->line, expr->column, "check fallible_call ...", actual, "prefix the call with check in a function marked with `raises`");
}

static bool check_stdlib_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, bool *handled) {
  if (handled) *handled = false;
  if (!handled || !expr || !expr->left || expr->left->kind != EXPR_MEMBER) return true;
  ZCallResolution std_resolution = {0};
  if (!resolve_stdlib_call(expr, &std_resolution)) {
    ZBuf std_name;
    zbuf_init(&std_name);
    member_name_buf(expr->left, &std_name);
    if (strncmp(std_name.data, "std.", strlen("std.")) == 0) {
      char message[256];
      snprintf(message, sizeof(message), "unknown std helper '%s'", std_name.data);
      zbuf_free(&std_name);
      return set_diag_detail(diag, 3011, message, expr->line, expr->column, "known std helper", "unknown std helper", "use a documented std helper name");
    }
    zbuf_free(&std_name);
    return true;
  }
  *handled = true;
  const char *std_name = std_resolution.callee_name;
  if (!std_name) {
    z_call_resolution_free(&std_resolution);
    return false;
  }
  if (z_std_helper_kind(std_resolution.std_helper) != Z_STD_HELPER_KIND_HTTP_LISTEN) {
    size_t expected_count = z_call_resolution_expected_arg_count(&std_resolution);
    if (expected_count != expr->args.len) {
      char message[256];
      snprintf(message, sizeof(message), "std function '%s' expects %zu argument(s), got %zu", std_name, expected_count, expr->args.len);
      z_call_resolution_free(&std_resolution);
      return set_diag_detail(diag, 3011, message, expr->line, expr->column, "matching std helper signature", "wrong argument count", "update the std helper call");
    }
  }
  if (!check_stdlib_call_fallibility_expected(ctx, expr, diag, &std_resolution)) {
    z_call_resolution_free(&std_resolution);
    return false;
  }
  bool ok = check_stdlib_known_call_expected(ctx, program, expr, scope, diag, &std_resolution);
  z_call_resolution_free(&std_resolution);
  return ok;
}

static bool c_import_function_supported(const ZCImportFunction *function, char *actual, size_t actual_len) {
  if (!function) return false;
  if (function->old_style_params) {
    snprintf(actual, actual_len, "old-style empty parameter list on '%s'", function->name ? function->name : "<function>");
    return false;
  }
  if (strcmp(function->return_zero_type ? function->return_zero_type : "Unknown", "Unknown") == 0) {
    snprintf(actual, actual_len, "return type '%s'", function->return_c_type ? function->return_c_type : "<missing>");
    return false;
  }
  for (size_t i = 0; i < function->param_len; i++) {
    if (strcmp(function->params[i].zero_type ? function->params[i].zero_type : "Unknown", "Unknown") == 0) {
      snprintf(actual, actual_len, "parameter %zu type '%s'", i + 1, function->params[i].c_type ? function->params[i].c_type : "<missing>");
      return false;
    }
  }
  return true;
}

static bool check_c_import_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, bool *handled) {
  diag = check_context_diag(ctx, diag);
  if (handled) *handled = false;
  if (!handled || !program || !expr || !expr->left || expr->left->kind != EXPR_MEMBER ||
      !expr->left->left || expr->left->left->kind != EXPR_IDENT) {
    return true;
  }
  const char *alias = expr->left->left->text;
  const char *symbol = expr->left->text;
  if (scope_has(scope, alias)) return true;
  if (!z_c_import_alias_exists(program, alias)) return true;
  *handled = true;
  ZCImportFunction function = {0};
  if (!z_c_import_find_function_for_target(program, check_context_target(ctx), alias, symbol, &function, diag)) {
    char actual[192];
    snprintf(actual, sizeof(actual), "%s.%s", alias ? alias : "<alias>", symbol ? symbol : "<symbol>");
    return set_diag_detail(diag, 8004, "extern c function is not declared in imported header", expr->line, expr->column, "function declared in extern c header", actual, "call a symbol from the imported header or update the header");
  }
  const TypeArgVec *type_args = call_type_args(expr);
  if (type_args && type_args->len > 0) {
    z_c_import_function_free(&function);
    return set_diag_detail(diag, 3032, "extern c functions cannot use Zero type arguments", expr->line, expr->column, "plain extern c call", "type-argument call", "wrap generic behavior in Zero or expose a concrete C shim");
  }
  char unsupported[192];
  if (!c_import_function_supported(&function, unsupported, sizeof(unsupported))) {
    z_c_import_function_free(&function);
    return set_diag_detail(diag, 8004, "extern c function uses unsupported C ABI type", expr->line, expr->column, "supported scalar C ABI types", unsupported, "wrap unsupported C behind a scalar C shim before importing it");
  }
  if (expr->args.len != function.param_len) {
    char message[256];
    snprintf(message, sizeof(message), "extern c function '%s.%s' expects %zu argument(s), got %zu", alias ? alias : "", symbol ? symbol : "", function.param_len, expr->args.len);
    z_c_import_function_free(&function);
    return set_diag_detail(diag, 3004, message, expr->line, expr->column, "matching extern c signature", "wrong argument count", "update the call or the C shim signature");
  }
  for (size_t i = 0; i < expr->args.len; i++) {
    const char *expected = function.params[i].zero_type ? function.params[i].zero_type : "Unknown";
    if (!check_expr_expected(ctx, program, expr->args.items[i], scope, diag, expected)) {
      z_c_import_function_free(&function);
      return false;
    }
    const char *actual = expr_type(ctx, program, expr->args.items[i], scope);
    if (!types_compatible_in_scope(program, scope, expected, actual)) {
      char message[256];
      snprintf(message, sizeof(message), "argument %zu to extern c function '%s.%s' has incompatible type", i + 1, alias ? alias : "", symbol ? symbol : "");
      bool ok = set_diag_detail(diag, 3012, message, expr->args.items[i]->line, expr->args.items[i]->column, expected, actual, "pass the Zero scalar type that matches the C parameter");
      z_c_import_function_free(&function);
      return ok;
    }
  }
  set_expr_resolved_type(expr, function.return_zero_type ? function.return_zero_type : "Unknown");
  z_c_import_function_free(&function);
  return true;
}

static bool check_choice_constructor_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, bool *handled) {
  diag = check_context_diag(ctx, diag);
  if (handled) *handled = false;
  if (!expr || !expr->left || expr->left->kind != EXPR_MEMBER || !expr->left->left || expr->left->left->kind != EXPR_IDENT) return true;
  ZCallResolution choice_resolution = {0};
  if (!resolve_choice_constructor_call(program, expr, &choice_resolution)) {
    const Choice *choice = find_choice(program, expr->left->left->text);
    if (!choice) return true;
    if (handled) *handled = true;
    return set_diag_detail(diag, 3104, "unknown choice case", expr->line, expr->column, "declared choice case", expr->left->text, "rename the case or update the choice");
  }
  if (handled) *handled = true;
  const Param *item_case = choice_resolution.choice_case;
  size_t expected_count = z_call_resolution_expected_arg_count(&choice_resolution);
  if (expr->args.len != expected_count) {
    z_call_resolution_free(&choice_resolution);
    return set_diag_detail(diag, 3108, "choice payload arity mismatch", expr->line, expr->column, expected_count ? "one payload argument" : "no payload arguments", "wrong payload argument count", "add or remove the payload argument");
  }
  for (size_t i = 0; i < expr->args.len; i++) {
    z_call_resolution_add_arg(&choice_resolution, i, expr->args.items[i], item_case->type, expr_type(ctx, program, expr->args.items[i], scope));
    char *expected_type = call_resolution_param_type_text(&choice_resolution, i);
    if (!check_expr_expected(ctx, program, expr->args.items[i], scope, diag, expected_type)) {
      free(expected_type);
      z_call_resolution_free(&choice_resolution);
      return false;
    }
    const char *actual = expr_type(ctx, program, expr->args.items[i], scope);
    z_call_resolution_add_arg(&choice_resolution, i, expr->args.items[i], expected_type, actual);
    if (!types_compatible_in_scope(program, scope, expected_type, actual)) {
      bool ok = set_diag_detail(diag, 3109, "choice payload type mismatch", expr->args.items[i]->line, expr->args.items[i]->column, expected_type, actual, "pass a payload value of the declared case type");
      free(expected_type);
      z_call_resolution_free(&choice_resolution);
      return ok;
    }
    mark_owned_move_if_needed(program, expr->args.items[i], scope, expected_type);
    free(expected_type);
  }
  z_call_resolution_free(&choice_resolution);
  return true;
}

static bool check_shape_namespace_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, const char *expected, bool *handled) {
  diag = check_context_diag(ctx, diag);
  if (handled) *handled = false;
  if (!expr || !expr->left || expr->left->kind != EXPR_MEMBER) return true;
  ZCallResolution resolution = {0};
  if (!resolve_shape_namespace_call(program, expr, &resolution)) return true;
  if (handled) *handled = true;

  const Shape *shape = resolution.shape;
  const Function *method = resolution.callee;
  size_t expected_arg_count = z_call_resolution_expected_arg_count(&resolution);
  if (expected_arg_count != expr->args.len) {
    char message[256];
    snprintf(message, sizeof(message), "method '%s.%s' expects %zu argument(s), got %zu", shape->name, method->name, expected_arg_count, expr->args.len);
    z_call_resolution_free(&resolution);
    return set_diag_detail(diag, 3004, message, expr->line, expr->column, "matching method argument count", "wrong argument count", "update the static method call or method signature");
  }
  GenericBinding *method_bindings = NULL;
  size_t method_binding_len = 0;
  if (!build_shape_method_bindings(ctx, program, shape, method, expr, scope, expected, diag, &method_bindings, &method_binding_len)) {
    z_call_resolution_free(&resolution);
    return false;
  }
  call_resolution_record_bindings(&resolution, method_bindings, method_binding_len);
  call_resolution_record_param_facts(ctx, program, method, expr, NULL, 0, scope, method_bindings, method_binding_len, &resolution);
  if (!check_call_resolution_args_expected(ctx, program, expr, scope, diag, &resolution, 0, CHECKED_CALL_ARG_SHAPE_METHOD, shape->name, method->name, false)) {
    generic_bindings_free(method_bindings, method_binding_len);
    free(method_bindings);
    z_call_resolution_free(&resolution);
    return false;
  }
  set_expr_checked_type_args(expr, method_bindings, method_binding_len);
  if (function_has_error_flow(ctx, program, method)) {
    char actual[160];
    snprintf(actual, sizeof(actual), "call to '%s.%s'", shape->name, method->name);
    if (!check_fallible_call_is_checked(ctx, program, method, expr, diag, "fallible static method call must be checked", "check Shape.method ...", actual, "prefix the call with check in a function marked with `raises`")) {
      generic_bindings_free(method_bindings, method_binding_len);
      free(method_bindings);
      z_call_resolution_free(&resolution);
      return false;
    }
  }
  char *return_type = type_substitute_generic_signature(program, method->return_type, method_bindings, method_binding_len);
  set_expr_resolved_type(expr, return_type);
  if (!apply_checked_call_storage_effects(ctx, program, expr, scope, diag)) {
    free(return_type);
    generic_bindings_free(method_bindings, method_binding_len);
    free(method_bindings);
    z_call_resolution_free(&resolution);
    return false;
  }
  free(return_type);
  generic_bindings_free(method_bindings, method_binding_len);
  free(method_bindings);
  z_call_resolution_free(&resolution);
  return true;
}

static bool receiver_member_call_should_resolve(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope) {
  if (!expr || expr->kind != EXPR_CALL || !expr->left || expr->left->kind != EXPR_MEMBER) return false;
  const Expr *receiver = expr->left->left;
  if (!receiver) return false;
  ZCallResolution builtin_std_resolution = {0};
  bool stdlib_member_callee = resolve_stdlib_call(expr, &builtin_std_resolution);
  z_call_resolution_free(&builtin_std_resolution);
  bool builtin_member_callee = member_root_ident_is(expr->left, "std") ||
    stdlib_member_callee ||
    is_world_stream_write_callee(expr->left, scope);
  if (builtin_member_callee) return false;
  if (receiver->kind == EXPR_IDENT && find_shape(program, receiver->text)) return false;
  char **receiver_constraint_args = NULL;
  size_t receiver_constraint_arg_len = 0;
  bool constrained_owner = receiver->kind == EXPR_IDENT &&
    constrained_interface_for_type_param(program, ctx ? ctx->function : NULL, receiver->text, &receiver_constraint_args, &receiver_constraint_arg_len);
  free_type_arg_list(receiver_constraint_args, receiver_constraint_arg_len);
  return !constrained_owner;
}

static bool check_receiver_method_receiver_access(CheckContext *ctx, const Program *program, const Expr *receiver, Scope *scope, ZDiag *diag, const char *receiver_type, bool receiver_requires_mut) {
  char receiver_ref_inner[192];
  bool receiver_is_ref = named_ref_inner_text(receiver_type, "ref", receiver_ref_inner, sizeof(receiver_ref_inner));
  bool receiver_is_mutref = named_ref_inner_text(receiver_type, "mutref", receiver_ref_inner, sizeof(receiver_ref_inner));
  if (receiver_requires_mut && receiver_is_ref) {
    return set_diag_detail(diag, 3049, "receiver method requires a mutable receiver", receiver->line, receiver->column, "mutref<Self> receiver or mutable record lvalue", receiver_type, "call the method on a mut value or pass a mutref receiver");
  }
  if (receiver_requires_mut && !receiver_is_mutref) {
    if (!expr_is_addressable(receiver)) {
      return set_diag_detail(diag, 3049, "receiver method requires an addressable mutable receiver", receiver->line, receiver->column, "var record value", "temporary receiver", "store the value in a var binding before calling the mutating method");
    }
    char root[128];
    if (expr_root_ident(receiver, root, sizeof(root)) && !scope_is_mutable(scope, root)) {
      return set_diag_detail(diag, 3049, "receiver method requires a mutable receiver", receiver->line, receiver->column, "mut receiver binding", "immutable receiver binding", "declare the receiver with mut before calling a mutating method");
    }
    char lvalue_type[192];
    if (!check_lvalue_target(ctx, program, receiver, scope, diag, lvalue_type, sizeof(lvalue_type))) return false;
  } else if (!receiver_requires_mut && !receiver_is_ref && !receiver_is_mutref && !expr_is_addressable(receiver)) {
    return set_diag_detail(diag, 3049, "receiver method requires an addressable receiver", receiver->line, receiver->column, "shape lvalue or ref<Self>", "temporary receiver", "store the value in a binding before calling the method");
  }
  char root[128];
  char path[256];
  return !expr_binding_path(receiver, root, sizeof(root), path, sizeof(path)) ||
    check_borrow_conflict_at(scope, root, path, receiver_requires_mut, diag, receiver);
}

static bool check_receiver_shape_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, bool *handled) {
  diag = check_context_diag(ctx, diag);
  if (handled) *handled = false;
  if (!receiver_member_call_should_resolve(ctx, program, expr, scope)) return true;
  const Expr *receiver = expr->left->left;
  if (!check_expr(ctx, program, receiver, scope, diag)) return false;
  const char *receiver_type_raw = expr_type(ctx, program, receiver, scope);
  char receiver_type[192];
  snprintf(receiver_type, sizeof(receiver_type), "%s", receiver_type_raw ? receiver_type_raw : "Unknown");
  char owner_type[192];
  strip_ref_like_type(receiver_type, owner_type, sizeof(owner_type));
  const Shape *receiver_shape = find_shape_for_type(program, owner_type);
  if (!receiver_shape) return true;
  if (handled) *handled = true;

  ZCallResolution resolution = {0};
  if (!resolve_receiver_shape_call(ctx, program, expr, scope, receiver_type, &resolution)) {
    const Function *method_decl = find_shape_method_decl(receiver_shape, expr->left->text);
    if (!method_decl) {
      char message[256];
      snprintf(message, sizeof(message), "shape '%s' has no receiver method '%s'", receiver_shape->name, expr->left->text);
      return set_diag_detail(diag, 3048, message, expr->line, expr->column, "method declared on receiver shape", expr->left->text, "rename the method or call a declared shape method");
    }
    char message[256];
    snprintf(message, sizeof(message), "method '%s.%s' is not a receiver method", receiver_shape->name, method_decl->name);
    return set_diag_detail(diag, 3048, message, expr->line, expr->column, "method whose first parameter is self: ref<Self> or self: mutref<Self>", "static method without self receiver", "call this method through the shape namespace or add an explicit self parameter");
  }
  const Function *receiver_method = resolution.callee;
  receiver_shape = resolution.shape;
  bool receiver_requires_mut = false;
  bool ok = true;
  char *self_arg_type = NULL;
  char *expected_self = NULL;
  char *return_type = NULL;
  GenericBinding *receiver_bindings = NULL;
  size_t receiver_binding_len = 0;
  if (!shape_method_receiver_info(receiver_method, &receiver_requires_mut)) { ok = false; goto cleanup; }
  size_t expected_arg_count = z_call_resolution_expected_arg_count(&resolution);
  if (expected_arg_count != expr->args.len) {
    char message[256];
    snprintf(message, sizeof(message), "receiver method '%s.%s' expects %zu argument(s), got %zu", receiver_shape->name, receiver_method->name, expected_arg_count, expr->args.len);
    ok = set_diag_detail(diag, 3004, message, expr->line, expr->column, "matching receiver method argument count", "wrong argument count", "update the receiver method call or signature");
    goto cleanup;
  }
  if (!check_receiver_method_receiver_access(ctx, program, receiver, scope, diag, receiver_type, receiver_requires_mut)) { ok = false; goto cleanup; }
  self_arg_type = receiver_self_arg_type(receiver_type, receiver_requires_mut);
  if (!build_receiver_shape_method_bindings(ctx, program, receiver_shape, receiver_method, expr, self_arg_type, scope, diag, &receiver_bindings, &receiver_binding_len)) { ok = false; goto cleanup; }
  call_resolution_record_bindings(&resolution, receiver_bindings, receiver_binding_len);
  call_resolution_record_param_facts(ctx, program, receiver_method, expr, receiver, resolution.param_offset, scope, receiver_bindings, receiver_binding_len, &resolution);
  expected_self = type_substitute_generic_signature(program, receiver_method->params.items[0].type, receiver_bindings, receiver_binding_len);
  if (!types_compatible_in_scope(program, scope, expected_self, self_arg_type)) {
    ok = set_diag_detail(diag, 3047, "receiver Self type does not match method receiver", receiver->line, receiver->column, expected_self, self_arg_type, "call the method on a receiver with the expected shape instantiation");
    goto cleanup;
  }
  if (!check_call_resolution_args_expected(ctx, program, expr, scope, diag, &resolution, resolution.param_offset, CHECKED_CALL_ARG_RECEIVER_METHOD, receiver_shape->name, receiver_method->name, false)) { ok = false; goto cleanup; }
  set_expr_checked_type_args(expr, receiver_bindings, receiver_binding_len);
  if (function_has_error_flow(ctx, program, receiver_method)) {
    if ((!ctx || ctx->allow_fallible_call == 0)) {
      ok = set_diag_detail(diag, 1003, "fallible receiver method call must be checked", expr->line, expr->column, "check receiver.method ...", "unchecked fallible receiver method", "prefix the call with check in a function marked with `raises`");
      goto cleanup;
    }
    if (!function_error_sets_compatible(ctx, ctx ? ctx->function : NULL, receiver_method, diag, expr)) { ok = false; goto cleanup; }
  }
  return_type = type_substitute_generic_signature(program, receiver_method->return_type, receiver_bindings, receiver_binding_len);
  set_expr_resolved_type(expr, return_type);
  if (!apply_checked_call_storage_effects(ctx, program, expr, scope, diag)) ok = false;
  if (ok && receiver_requires_mut) {
    char root[128];
    char path[256];
    if (expr_binding_path(receiver, root, sizeof(root), path, sizeof(path)) && scope_has(scope, root)) {
      scope_clear_maybe_present_for_place(scope, root, path);
    }
  }

cleanup:
  free(return_type);
  free(expected_self);
  free(self_arg_type);
  generic_bindings_free(receiver_bindings, receiver_binding_len);
  free(receiver_bindings);
  z_call_resolution_free(&resolution);
  return ok;
}

static bool check_constrained_interface_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, const char *expected, bool *handled) {
  diag = check_context_diag(ctx, diag);
  if (handled) *handled = false;
  ZCallResolution resolution = {0};
  if (!resolve_constrained_interface_call(program, ctx ? ctx->function : NULL, expr, &resolution)) return true;
  if (handled) *handled = true;

  const InterfaceDecl *interface = resolution.interface;
  const Function *required = resolution.callee;
  size_t expected_arg_count = z_call_resolution_expected_arg_count(&resolution);
  if (expected_arg_count != expr->args.len) {
    char message[256];
    snprintf(message, sizeof(message), "interface method '%s.%s' expects %zu argument(s), got %zu", interface->name, required->name, expected_arg_count, expr->args.len);
    z_call_resolution_free(&resolution);
    return set_diag_detail(diag, 3040, message, expr->line, expr->column, "matching interface method argument count", "wrong argument count", "update the constrained static call or interface signature");
  }
  GenericBinding *interface_bindings = NULL;
  size_t interface_binding_len = 0;
  if (!build_constrained_interface_method_bindings(ctx, program, ctx ? ctx->function : NULL, expr, scope, interface, required, expected, NULL, 0, diag, &interface_bindings, &interface_binding_len)) {
    z_call_resolution_free(&resolution);
    return false;
  }
  call_resolution_record_bindings(&resolution, interface_bindings, interface_binding_len);
  call_resolution_record_param_facts(ctx, program, required, expr, NULL, 0, scope, interface_bindings, interface_binding_len, &resolution);
  if (!check_call_resolution_args_expected(ctx, program, expr, scope, diag, &resolution, 0, CHECKED_CALL_ARG_CONSTRAINED_INTERFACE, interface->name, required->name, false)) {
    generic_bindings_free(interface_bindings, interface_binding_len);
    free(interface_bindings);
    z_call_resolution_free(&resolution);
    return false;
  }
  set_expr_checked_type_args(expr, interface_bindings, interface_binding_len);
  if (function_has_error_flow(ctx, program, required)) {
    char actual[160];
    snprintf(actual, sizeof(actual), "call to '%s.%s'", interface->name, required->name);
    if (!check_fallible_call_is_checked(ctx, program, required, expr, diag, "fallible constrained interface method call must be checked", "check Interface.method ...", actual, "prefix the call with check in a function marked with `raises`")) {
      generic_bindings_free(interface_bindings, interface_binding_len);
      free(interface_bindings);
      z_call_resolution_free(&resolution);
      return false;
    }
  }
  char *return_type = type_substitute_generic_signature(program, required->return_type, interface_bindings, interface_binding_len);
  set_expr_resolved_type(expr, return_type);
  if (!apply_checked_call_storage_effects(ctx, program, expr, scope, diag)) {
    free(return_type);
    generic_bindings_free(interface_bindings, interface_binding_len);
    free(interface_bindings);
    z_call_resolution_free(&resolution);
    return false;
  }
  free(return_type);
  generic_bindings_free(interface_bindings, interface_binding_len);
  free(interface_bindings);
  z_call_resolution_free(&resolution);
  return true;
}

static bool check_world_stream_write_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, bool *handled) {
  diag = check_context_diag(ctx, diag);
  if (handled) *handled = false;
  if (!is_world_stream_write_call(expr, scope)) return true;
  if (handled) *handled = true;

  if (expr->args.len != 1) return set_diag_detail(diag, 3004, "World stream write expects one argument", expr->line, expr->column, "world.out.write(text)", "wrong argument count", "pass exactly one String or byte span argument");
  if (!check_expr_expected(ctx, program, expr->args.items[0], scope, diag, "String")) return false;
  const char *actual = expr_type(ctx, program, expr->args.items[0], scope);
  if (!types_compatible_in_scope(program, scope, "String", actual) && !types_compatible_in_scope(program, scope, "Span<u8>", actual)) {
    return set_diag_detail(diag, 3005, "World stream write argument has incompatible type", expr->args.items[0]->line, expr->args.items[0]->column, "String or Span<u8>", actual, "pass text or a byte span to the stream writer");
  }
  if ((!ctx || ctx->allow_fallible_call == 0)) {
    return set_diag_detail(diag, 1003, "fallible World stream write must be checked", expr->line, expr->column, "check world.out.write text", "unchecked World stream write", "prefix the write with check in a function marked with `raises`");
  }
  set_expr_resolved_type(expr, "Void");
  return true;
}

static bool check_unchecked_fallible_call_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag) {
  diag = check_context_diag(ctx, diag);
  const Function *fun = fallible_callee_in_context(ctx, program, ctx ? ctx->function : NULL, scope, expr);
  if (fun && (!ctx || ctx->allow_fallible_call == 0)) {
    char actual[160];
    snprintf(actual, sizeof(actual), "call to '%s'", fun->name);
    return set_diag_detail(diag, 1003, "fallible function call must be checked", expr->line, expr->column, "check fallible_call ...", actual, "prefix the call with check in a function marked with `raises`");
  }
  return true;
}

static bool check_call_expr_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, const char *expected) {
  diag = check_context_diag(ctx, diag);
  if (!expr || expr->kind != EXPR_CALL) return true;
  if (expr->left && expr->left->kind == EXPR_IDENT && strcmp(expr->left->text, "expect") == 0) {
    if (expr->args.len != 1) return set_diag_detail(diag, 3004, "expect requires one Bool argument", expr->line, expr->column, "expect(condition)", "wrong argument count", "pass exactly one Bool condition");
    if (!check_expr_expected(ctx, program, expr->args.items[0], scope, diag, "Bool")) return false;
    const char *actual = expr_type(ctx, program, expr->args.items[0], scope);
    if (!is_bool_type(actual)) return set_diag_detail(diag, 3005, "expect argument must be Bool", expr->args.items[0]->line, expr->args.items[0]->column, "Bool", actual, "compare explicitly before calling expect");
    set_expr_resolved_type(expr, "Void");
    return true;
  }
  if (expr->left && expr->left->kind == EXPR_MEMBER && strcmp(expr->left->text, "drop") == 0) {
    return set_diag_detail(diag, 3014, "drop methods are specified but not enforced by this compiler", expr->line, expr->column, "simple defer cleanup expression", "drop method call", "use an explicit cleanup function with defer until owned drop checking lands");
  }
  bool choice_call_handled = false;
  if (!check_choice_constructor_call_expected(ctx, program, expr, scope, diag, &choice_call_handled)) return false;
  if (choice_call_handled) return true;
  if (expr->left && expr->left->kind == EXPR_MEMBER) {
    bool c_import_call_handled = false;
    if (!check_c_import_call_expected(ctx, program, expr, scope, diag, &c_import_call_handled)) return false;
    if (c_import_call_handled) return true;
    bool shape_namespace_call_handled = false;
    if (!check_shape_namespace_call_expected(ctx, program, expr, scope, diag, expected, &shape_namespace_call_handled)) return false;
    if (shape_namespace_call_handled) return true;
    bool receiver_shape_call_handled = false;
    if (!check_receiver_shape_call_expected(ctx, program, expr, scope, diag, &receiver_shape_call_handled)) return false;
    if (receiver_shape_call_handled) return true;
    bool constrained_interface_call_handled = false;
    if (!check_constrained_interface_call_expected(ctx, program, expr, scope, diag, expected, &constrained_interface_call_handled)) return false;
    if (constrained_interface_call_handled) return true;
  }
  bool std_call_handled = false;
  if (!check_stdlib_call_expected(ctx, program, expr, scope, diag, &std_call_handled)) return false;
  if (std_call_handled) return true;
  if (!check_call_callee(ctx, program, expr, scope, diag)) return false;
  bool named_call_handled = false;
  if (!check_named_function_call_expected(ctx, program, expr, scope, diag, expected, &named_call_handled)) return false;
  if (named_call_handled) return true;
  for (size_t i = 0; i < expr->args.len; i++) {
    if (!check_expr(ctx, program, expr->args.items[i], scope, diag)) return false;
  }
  bool world_stream_write_handled = false;
  if (!check_world_stream_write_call_expected(ctx, program, expr, scope, diag, &world_stream_write_handled)) return false;
  if (world_stream_write_handled) return true;
  if (!check_unchecked_fallible_call_expected(ctx, program, expr, scope, diag)) return false;
  if (!expr->resolved_type) set_expr_resolved_type(expr, expr_type(ctx, program, expr, scope));
  return true;
}

static bool check_expr_expected(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag, const char *expected) {
  diag = check_context_diag(ctx, diag);
  if (!expr) return true;
  if (expr->kind == EXPR_NUMBER) {
    if (is_float_literal_text(expr->text)) return validate_float_literal_for_type(expr, expected, diag);
    return validate_integer_literal_for_type(expr, expected, diag);
  }
  if (expr->kind == EXPR_NULL) {
    if (expected && type_is_named_generic(expected, "Maybe")) {
      set_expr_resolved_type(expr, expected);
      return true;
    }
    return set_diag_detail(diag, 3017, "null requires an explicit Maybe<T> context", expr->line, expr->column, "Maybe<T>", expected ? expected : "untyped null", "add a Maybe<T> annotation or use a non-null value");
  }
  switch (expr->kind) {
    case EXPR_IDENT:
      if (!scope_has(scope, expr->text) && !function_exists(program, expr->text) && !is_builtin_value(expr->text)) {
        char message[256];
        snprintf(message, sizeof(message), "unknown identifier '%s'", expr->text);
        return set_diag_detail(diag, 3003, message, expr->line, expr->column, "visible local, parameter, function, or builtin", "no matching visible symbol", "declare the name before using it");
      }
      if (function_exists(program, expr->text) && !scope_has(scope, expr->text)) {
        char message[256];
        snprintf(message, sizeof(message), "function '%s' cannot be used as a runtime value", expr->text);
        return set_diag_detail(diag, 3005, message, expr->line, expr->column, "function call expression", "function name", "call the function with parentheses");
      }
      if (is_builtin_value(expr->text) && !scope_has(scope, expr->text)) {
        char message[256];
        snprintf(message, sizeof(message), "builtin namespace '%s' cannot be used as a runtime value", expr->text);
        return set_diag_detail(diag, 3005, message, expr->line, expr->column, "runtime value", "builtin namespace", "use a supported member call such as std.fs.host()");
      }
      {
        if (scope_has(scope, expr->text) && !check_place_available(expr, scope, expr->text, NULL, diag)) return false;
        if (!check_read_not_mutably_borrowed(expr, scope, diag)) return false;
      }
      if (expected && type_is_named_generic(expected, "MutSpan")) {
        const char *actual = expr_type(ctx, program, expr, scope);
        char expected_element[128];
        char actual_element[128];
        if (mutspan_element_text(expected, expected_element, sizeof(expected_element)) &&
            fixed_array_type_parts(actual, NULL, 0, actual_element, sizeof(actual_element))) {
          if (!scope_is_mutable(scope, expr->text)) {
            return set_diag_detail(diag, 3010, "cannot create MutSpan from immutable array binding", expr->line, expr->column, "array binding declared with var", "immutable array binding", "change let to var before creating a MutSpan");
          }
          if (!types_compatible_in_scope(program, scope, expected_element, actual_element)) {
            return set_diag_detail(diag, 3006, "MutSpan element type does not match array element", expr->line, expr->column, expected_element, actual_element, "use a MutSpan with the same element type as the array");
          }
          if (!check_mutating_fixed_storage_not_borrowed(ctx, program, expr, scope, diag)) return false;
          set_expr_resolved_type(expr, expected);
          return true;
        }
      }
      if (!expr->resolved_type) set_expr_resolved_type(expr, expr_type(ctx, program, expr, scope));
      return true;
    case EXPR_MEMBER:
      if (expr->left && expr->left->kind == EXPR_IDENT) {
        const EnumDecl *item_enum = find_enum(program, expr->left->text);
        if (item_enum) {
          if (!has_case(&item_enum->cases, expr->text)) return set_diag_detail(diag, 3103, "unknown enum case", expr->line, expr->column, "declared enum case", expr->text, "rename the case or update the enum");
          return true;
        }
        const Choice *item_choice = find_choice(program, expr->left->text);
        if (item_choice) {
          if (!has_case(&item_choice->cases, expr->text)) return set_diag_detail(diag, 3104, "unknown choice case", expr->line, expr->column, "declared choice case", expr->text, "rename the case or update the choice");
          return true;
        }
      }
      char root[128];
      char path[256];
      bool local_place = expr_binding_path(expr, root, sizeof(root), path, sizeof(path)) && scope_has(scope, root);
      if (local_place) {
        if (!check_place_available(expr, scope, root, path, diag)) return false;
        if (!check_place_index_exprs(ctx, program, expr, scope, diag)) return false;
        if (!check_maybe_value_accesses_in_place(ctx, program, expr, scope, diag)) return false;
      } else if (!check_expr(ctx, program, expr->left, scope, diag)) return false;
      {
        const char *left_type = expr_type(ctx, program, expr->left, scope);
        char owned_shape_type[128];
        char ref_shape_type[128];
        if (owned_inner_text(left_type, owned_shape_type, sizeof(owned_shape_type))) left_type = owned_shape_type;
        if (ref_inner_text(left_type, ref_shape_type, sizeof(ref_shape_type))) left_type = ref_shape_type;
        if (strcmp(left_type, "World") == 0 && (strcmp(expr->text, "out") == 0 || strcmp(expr->text, "err") == 0)) {
          return set_diag_detail(diag, 3005, "World stream member cannot be used as a runtime value", expr->line, expr->column, "world.out.write text or world.err.write text", expr->text, "call write directly on the stream capability");
        }
        const Shape *shape = find_shape_for_type(program, left_type);
        if (shape) {
          if (!find_shape_field(shape, expr->text)) {
            char message[256];
            snprintf(message, sizeof(message), "shape '%s' has no field '%s'", shape->name, expr->text);
            return set_diag_detail(diag, 3101, message, expr->line, expr->column, "declared shape field", expr->text, "rename the field or update the shape");
          }
          if (!expr->resolved_type) set_expr_resolved_type(expr, expr_type(ctx, program, expr, scope));
          if (!check_read_not_mutably_borrowed(expr, scope, diag)) return false;
          return true;
        }
        {
          const char *inner = NULL;
          size_t inner_len = 0;
          if (type_has_generic_arg(left_type, "Maybe", &inner, &inner_len)) {
            if (strcmp(expr->text, "has") == 0 || strcmp(expr->text, "value") == 0) {
              if (!check_maybe_value_present(expr, scope, diag)) return false;
              if (!expr->resolved_type) set_expr_resolved_type(expr, expr_type(ctx, program, expr, scope));
              if (!check_read_not_mutably_borrowed(expr, scope, diag)) return false;
              return true;
            }
            return set_diag_detail(diag, 3101, "unknown Maybe member", expr->line, expr->column, "has or value", expr->text, "use .has to test a Maybe or .value after proving it is present");
          }
        }
        return set_diag_detail(diag, 3027, "member access requires a shape, Maybe value, enum case, or choice case", expr->line, expr->column, "declared field or variant case", left_type, "remove the member access or use a value with declared members");
      }
    case EXPR_INDEX: {
      char root[128];
      char path[256];
      bool local_place = expr_binding_path(expr, root, sizeof(root), path, sizeof(path)) && scope_has(scope, root);
      if (local_place) {
        if (!check_place_available(expr, scope, root, path, diag)) return false;
        if (!check_place_index_exprs(ctx, program, expr, scope, diag)) return false;
        if (!check_maybe_value_accesses_in_place(ctx, program, expr, scope, diag)) return false;
      } else if (!check_expr(ctx, program, expr->left, scope, diag)) return false;
      const char *base_type = expr_type(ctx, program, expr->left, scope);
      char element_type[128];
      if (!index_element_type(base_type, element_type, sizeof(element_type))) {
        return set_diag_detail(diag, 3027, "value does not support indexing", expr->line, expr->column, "[N]T, Span<T>, or String", base_type, "index fixed arrays, Span<T>, or byte-oriented String values supported by this compiler");
      }
      if (!local_place) {
        if (!check_expr_expected(ctx, program, expr->right, scope, diag, "usize")) return false;
        const char *index_type = expr_type(ctx, program, expr->right, scope);
        if (!is_int_type(index_type)) {
          return set_diag_detail(diag, 3028, "index expression must be an integer", expr->right ? expr->right->line : expr->line, expr->right ? expr->right->column : expr->column, "integer index", index_type, "use an integer expression such as usize or a checked integer literal");
        }
      }
      set_expr_resolved_type(expr, element_type);
      if (!check_read_not_mutably_borrowed(expr, scope, diag)) return false;
      return true;
    }
    case EXPR_BORROW: {
      if (!expr_is_addressable(expr->left)) {
        return set_diag_detail(diag, 3029, "borrow requires an addressable local lvalue", expr->line, expr->column, expr->mutable_borrow ? "&mut lvalue" : "&lvalue", "temporary or unsupported expression", "borrow a local binding, field, or indexed lvalue");
      }
      char root[128];
      char path[256];
      if (!expr_binding_path(expr->left, root, sizeof(root), path, sizeof(path)) || !scope_has(scope, root)) {
        return set_diag_detail(diag, 3003, "borrow target is not a visible local", expr->line, expr->column, "visible local binding", "unknown borrow root", "borrow a local binding that is in scope");
      }
      if (expr->mutable_borrow) {
        char target_type[128];
        if (!check_lvalue_target(ctx, program, expr->left, scope, diag, target_type, sizeof(target_type))) return false;
      } else {
        if (!check_expr(ctx, program, expr->left, scope, diag)) return false;
      }
      if (!check_borrow_conflict_at(scope, root, path, expr->mutable_borrow, diag, expr)) return false;
      const char *inner_type = expr_type(ctx, program, expr->left, scope);
      char owned_inner[128];
      if (owned_inner_text(inner_type, owned_inner, sizeof(owned_inner))) inner_type = owned_inner;
      char borrow_type[160];
      snprintf(borrow_type, sizeof(borrow_type), "%s<%s>", expr->mutable_borrow ? "mutref" : "ref", inner_type);
      set_expr_resolved_type(expr, borrow_type);
      return true;
    }
    case EXPR_CHECK: {
      if (!ctx || !ctx->function || !ctx->function->raises) {
        return set_diag_detail(diag, 1001, "`check` requires function to be marked fallible", expr->line, expr->column, "function signature with `raises` or `raises [...]`", "function is not marked fallible", "add `raises` to the function signature");
      }
      ctx->allow_fallible_call++;
      bool checked_ok = check_expr(ctx, program, expr->left, scope, diag);
      ctx->allow_fallible_call--;
      if (!checked_ok) return false;
      const Function *callee = fallible_callee_in_context(ctx, program, ctx ? ctx->function : NULL, scope, expr->left);
      if (callee && !function_error_sets_compatible(ctx, ctx ? ctx->function : NULL, callee, diag, expr->left)) return false;
      if (!stdlib_call_error_sets_covered(ctx ? ctx->function : NULL, diag, expr->left, expr->left)) return false;
      const char *checked_type = expr_type(ctx, program, expr->left, scope);
      if (callee) {
        set_expr_resolved_type(expr, callee->return_type);
        return true;
      }
      const char *stdlib_type = stdlib_fallible_return_type(expr->left);
      if (stdlib_type) {
        set_expr_resolved_type(expr, stdlib_type);
        return true;
      }
      if (is_world_stream_write_call(expr->left, scope)) {
        set_expr_resolved_type(expr, "Void");
        return true;
      }
      const char *inner = NULL;
      size_t inner_len = 0;
      if (!type_has_generic_arg(checked_type, "Maybe", &inner, &inner_len)) {
        return set_diag_detail(diag, 1001, "`check` expects Maybe<T> or a fallible function call", expr->line, expr->column, "Maybe<T> value or fallible call", checked_type, "check a Maybe value or a named-error fallible function");
      }
      char value_type[128];
      snprintf(value_type, sizeof(value_type), "%.*s", (int)inner_len, inner);
      set_expr_resolved_type(expr, value_type);
      return true;
    }
    case EXPR_RESCUE: {
      ctx->allow_fallible_call++;
      bool left_ok = check_expr(ctx, program, expr->left, scope, diag);
      ctx->allow_fallible_call--;
      if (!left_ok) return false;
      const Function *callee = fallible_callee_in_context(ctx, program, ctx ? ctx->function : NULL, scope, expr->left);
      char stdlib_left_type[160];
      const char *left_type = callee ? callee->return_type : NULL;
      if (!left_type && stdlib_fallible_return_type_text(expr->left, stdlib_left_type, sizeof(stdlib_left_type))) left_type = stdlib_left_type;
      if (!left_type) {
        const char *maybe_type = expr_type(ctx, program, expr->left, scope);
        const char *inner = NULL;
        size_t inner_len = 0;
        if (!type_has_generic_arg(maybe_type, "Maybe", &inner, &inner_len)) {
          return set_diag_detail(diag, 1001, "rescue expects Maybe<T> or a fallible function call", expr->line, expr->column, "fallible expression rescue err { fallback }", maybe_type, "rescue a Maybe value, user fallible call, or std fallible call");
        }
        char inner_type[128];
        snprintf(inner_type, sizeof(inner_type), "%.*s", (int)inner_len, inner);
        left_type = inner_type;
        ProvenanceScopeSnapshot *before_right = provenance_scope_snapshot_capture(scope);
        if (!check_expr_expected(ctx, program, expr->right, scope, diag, left_type)) {
          provenance_scope_snapshot_restore(before_right);
          provenance_scope_snapshot_free(before_right);
          return false;
        }
        ProvenanceScopeSnapshot *right_after = provenance_scope_snapshot_capture(scope);
        provenance_scope_snapshot_restore_optional_branch(before_right, right_after, true, true);
        provenance_scope_snapshot_free(right_after);
        provenance_scope_snapshot_free(before_right);
        set_expr_resolved_type(expr, left_type);
        return true;
      }
      ProvenanceScopeSnapshot *before_right = provenance_scope_snapshot_capture(scope);
      if (!check_expr_expected(ctx, program, expr->right, scope, diag, left_type)) {
        provenance_scope_snapshot_restore(before_right);
        provenance_scope_snapshot_free(before_right);
        return false;
      }
      ProvenanceScopeSnapshot *right_after = provenance_scope_snapshot_capture(scope);
      provenance_scope_snapshot_restore_optional_branch(before_right, right_after, true, true);
      provenance_scope_snapshot_free(right_after);
      provenance_scope_snapshot_free(before_right);
      const char *fallback_type = expr_type(ctx, program, expr->right, scope);
      if (!types_compatible_in_scope(program, scope, left_type, fallback_type)) {
        return set_diag_detail(diag, 3006, "rescue fallback type does not match recovered value", expr->line, expr->column, left_type, fallback_type, "return a fallback value with the same type as the fallible expression");
      }
      set_expr_resolved_type(expr, left_type);
      return true;
    }
    case EXPR_META:
      return check_meta_expr(ctx, program, expr, diag);
    case EXPR_SLICE: {
      if (!check_expr(ctx, program, expr->left, scope, diag)) return false;
      const char *base_type = expr_type(ctx, program, expr->left, scope);
      char element_type[128];
      if (!index_element_type(base_type, element_type, sizeof(element_type))) {
        return set_diag_detail(diag, 3027, "value does not support slicing", expr->line, expr->column, "[N]T, Span<T>, or String", base_type, "slice fixed arrays, Span<T>, or byte-oriented String values supported by this compiler");
      }
      if (expr->args.len != 2) return set_diag_detail(diag, 100, "malformed slice expression", expr->line, expr->column, "start..end, start.., ..end, or ..", "invalid slice", "use valid slice syntax");
      for (size_t i = 0; i < expr->args.len; i++) {
        Expr *bound = expr->args.items[i];
        if (!bound) continue;
        if (!check_expr_expected(ctx, program, bound, scope, diag, "usize")) return false;
        const char *bound_type = expr_type(ctx, program, bound, scope);
        if (!is_int_type(bound_type)) {
          return set_diag_detail(diag, 3028, "slice bounds must be integers", bound->line, bound->column, "integer slice bound", bound_type, "use integer expressions for slice start and end");
        }
      }
      char slice_type[160];
      snprintf(
        slice_type,
        sizeof(slice_type),
        "%s<%s>",
        slice_source_is_mutable_storage(expr->left, scope, base_type) ? "MutSpan" : "Span",
        element_type
      );
      if (expected && type_is_named_generic(expected, "MutSpan") && type_is_named_generic(slice_type, "MutSpan") &&
          !check_mutating_fixed_storage_not_borrowed(ctx, program, expr, scope, diag)) return false;
      set_expr_resolved_type(expr, slice_type);
      return true;
    }
    case EXPR_CALL:
      if (!check_call_expr_expected(ctx, program, expr, scope, diag, expected)) return false;
      scope_clear_maybe_guards_for_mutating_call_args(ctx, program, expr, scope);
      return true;
    case EXPR_CAST: {
      if (!validate_type_form(expr->text, diag, expr->line, expr->column)) return false;
      if (!check_expr(ctx, program, expr->left, scope, diag)) return false;
      const char *source_type = expr_type(ctx, program, expr->left, scope);
      if (!is_primitive_cast_type(source_type) || !is_primitive_cast_type(expr->text)) {
        char actual[128];
        snprintf(actual, sizeof(actual), "%s as %s", source_type, expr->text ? expr->text : "Unknown");
        return set_diag_detail(diag, 3023, "cast requires primitive numeric or byte char types", expr->line, expr->column, "integer, float, or char as integer, float, or char", actual, "cast only between primitive numeric types and byte-sized char");
      }
      set_expr_resolved_type(expr, expr->text);
      return true;
    }
    case EXPR_BINARY: {
      bool comparison = strcmp(expr->text, "==") == 0 || strcmp(expr->text, "!=") == 0 || strcmp(expr->text, "<") == 0 ||
        strcmp(expr->text, "<=") == 0 || strcmp(expr->text, ">") == 0 || strcmp(expr->text, ">=") == 0;
      bool logical = strcmp(expr->text, "&&") == 0 || strcmp(expr->text, "||") == 0;
      if (!check_expr_expected(ctx, program, expr->left, scope, diag, expected && (is_int_type(expected) || is_float_type(expected)) ? expected : NULL)) return false;
      const char *left_type = expr_type(ctx, program, expr->left, scope);
      if (logical) {
        ProvenanceScopeSnapshot *before_right = provenance_scope_snapshot_capture(scope);
        Scope right_scope = {.parent = scope};
        if (strcmp(expr->text, "&&") == 0) {
          scope_add_maybe_guards_from_condition_true(ctx, program, expr->left, scope, &right_scope);
        } else if (strcmp(expr->text, "||") == 0) {
          scope_add_maybe_guards_from_condition_false(ctx, program, expr->left, scope, &right_scope);
        }
        if (!check_expr_expected(ctx, program, expr->right, &right_scope, diag, "Bool")) {
          provenance_scope_snapshot_restore(before_right);
          provenance_scope_snapshot_free(before_right);
          scope_free(&right_scope);
          return false;
        }
        ProvenanceScopeSnapshot *right_after = provenance_scope_snapshot_capture(scope);
        bool left_is_bool_literal = expr->left && expr->left->kind == EXPR_BOOL;
        bool left_value = left_is_bool_literal && expr->left->bool_value;
        bool include_before = true;
        bool include_after = true;
        if (left_is_bool_literal && strcmp(expr->text, "&&") == 0) {
          include_before = !left_value;
          include_after = left_value;
        } else if (left_is_bool_literal && strcmp(expr->text, "||") == 0) {
          include_before = left_value;
          include_after = !left_value;
        }
        provenance_scope_snapshot_restore_optional_branch(before_right, right_after, include_before, include_after);
        provenance_scope_snapshot_free(right_after);
        provenance_scope_snapshot_free(before_right);
        const char *right_type = expr_type(ctx, program, expr->right, &right_scope);
        scope_free(&right_scope);
        if (!is_bool_type(left_type) || !is_bool_type(right_type)) return set_diag_detail(diag, 3006, "logical operators require Bool operands", expr->line, expr->column, "Bool operands", "non-Bool operand", "compare values explicitly before using && or ||");
        set_expr_resolved_type(expr, "Bool");
        return true;
      }
      const char *right_expected = (is_int_type(left_type) || is_float_type(left_type)) ? left_type : NULL;
      if (!check_expr_expected(ctx, program, expr->right, scope, diag, right_expected)) return false;
      const char *right_type = expr_type(ctx, program, expr->right, scope);
      if (is_int_type(right_type) && strcmp(left_type, right_type) != 0 &&
          expr_is_untyped_int_literal(expr->left) && !expr_is_untyped_int_literal(expr->right)) {
        if (!validate_integer_literal_for_type(expr->left, right_type, diag)) return false;
        left_type = expr_type(ctx, program, expr->left, scope);
      }
      if (comparison) {
        if (!types_compatible_in_scope(program, scope, left_type, right_type)) {
          return set_diag_detail(diag, 3006, "comparison operands must have matching types", expr->line, expr->column, left_type, right_type, "compare values with the same type");
        }
        bool equality = strcmp(expr->text, "==") == 0 || strcmp(expr->text, "!=") == 0;
        if (!equality && !((is_int_type(left_type) && is_int_type(right_type)) || (is_float_type(left_type) && is_float_type(right_type)))) {
          return set_diag_detail(diag, 3006, "ordered comparisons require numeric operands", expr->line, expr->column, "matching integer or float operands", left_type, "use == or != for non-numeric values");
        }
        set_expr_resolved_type(expr, "Bool");
        return true;
      }
      if (!((is_int_type(left_type) && is_int_type(right_type)) || (is_float_type(left_type) && is_float_type(right_type)))) {
        return set_diag_detail(diag, 3006, "arithmetic operators require matching numeric operands", expr->line, expr->column, "matching integer or float operands", is_char_type(left_type) || is_char_type(right_type) ? "char operand" : "mixed or non-numeric operand", "keep integers, floats, and chars separate");
      }
      if (strcmp(left_type, right_type) != 0) {
        return set_diag_detail(diag, 3006, "numeric operands must have the same type", expr->line, expr->column, left_type, right_type, "use matching numeric types until broader casts are supported");
      }
      set_expr_resolved_type(expr, left_type);
      return true;
    }
    case EXPR_SHAPE_LITERAL: {
      const Shape *shape = find_shape(program, expr->text);
      if (!shape) return set_diag_detail(diag, 3009, "unknown shape literal", expr->line, expr->column, "declared shape", expr->text, "declare the shape before constructing it");
      const char *expected_shape_type = expected;
      char expected_owned_inner[160];
      if (owned_inner_text(expected_shape_type, expected_owned_inner, sizeof(expected_owned_inner))) expected_shape_type = expected_owned_inner;
      if (expected_shape_type && strcmp(expected_shape_type, "Unknown") != 0) {
        const Shape *expected_shape = find_shape_for_type(program, type_strip_const(expected_shape_type));
        if (!expected_shape || strcmp(expected_shape->name, shape->name) != 0) {
          return set_diag_detail(diag, 3006, "shape literal type does not match expected type", expr->line, expr->column, shape->name, expected, "assign the shape literal to the matching shape type");
        }
      }
      GenericBinding *shape_bindings = NULL;
      size_t shape_binding_len = 0;
      if (shape->type_params.len > 0) {
        char **args = NULL;
        size_t arg_len = 0;
        if (!expected_shape_type || !type_generic_arg_list(resolve_alias_type(program, expected_shape_type), shape->name, &args, &arg_len) || arg_len != shape->type_params.len) {
          free_type_arg_list(args, arg_len);
          return set_diag_detail(diag, 3034, "generic shape literal requires an explicit annotated type", expr->line, expr->column, "let value: Shape<T> = Shape { ... }", expected ? expected : "untyped shape literal", "add an explicit generic shape type annotation");
        }
        shape_binding_len = shape->type_params.len;
        shape_bindings = z_checked_calloc(shape_binding_len, sizeof(GenericBinding));
        for (size_t i = 0; i < shape_binding_len; i++) {
          generic_binding_init_from_param(&shape_bindings[i], &shape->type_params.items[i]);
          if (shape->type_params.items[i].is_static) {
            if (!is_static_value_param_type(program, shape->type_params.items[i].type)) {
              free_type_arg_list(args, arg_len);
              generic_bindings_free(shape_bindings, shape_binding_len);
              free(shape_bindings);
              return set_diag_detail(diag, 3043, "static value parameter type is not supported", shape->type_params.items[i].line, shape->type_params.items[i].column, "integer, Bool, or enum static parameter", shape->type_params.items[i].type, "use a concrete integer, Bool, or enum type for this static parameter");
            }
            shape_bindings[i].type = canonical_static_arg_for_type_in_scope(program, scope, args[i], shape->type_params.items[i].type);
            if (!shape_bindings[i].type) {
              free_type_arg_list(args, arg_len);
              generic_bindings_free(shape_bindings, shape_binding_len);
              free(shape_bindings);
              return set_diag_detail(diag, 3044, "static value argument must be deterministic and concrete", expr->line, expr->column, static_value_expected_label(program, shape->type_params.items[i].type), args[i], "pass an explicit literal, top-level const, or supported meta value with the static parameter type");
            }
          } else {
            shape_bindings[i].type = z_strdup(args[i]);
          }
        }
        free_type_arg_list(args, arg_len);
      }
      for (size_t i = 0; i < expr->fields.len; i++) {
        FieldInit *field = &expr->fields.items[i];
        for (size_t previous = 0; previous < i; previous++) {
          if (strcmp(expr->fields.items[previous].name, field->name) == 0) {
            bool ok = set_diag_detail(diag, 3008, "duplicate shape literal field", field->line, field->column, "one initializer per field", field->name, "remove the duplicate field initializer");
            generic_bindings_free(shape_bindings, shape_binding_len);
            free(shape_bindings);
            return ok;
          }
        }
        const Param *shape_field = find_shape_field(shape, field->name);
        if (!shape_field) {
          char message[256];
          snprintf(message, sizeof(message), "shape '%s' has no field '%s'", shape->name, field->name);
          return set_diag_detail(diag, 3101, message, field->line, field->column, "declared shape field", field->name, "rename the field or update the shape");
        }
        char *field_type = shape_bindings ? type_substitute_generic_signature(program, shape_field->type, shape_bindings, shape_binding_len) : z_strdup(shape_field->type);
        if (!check_expr_expected(ctx, program, field->value, scope, diag, field_type)) {
          free(field_type);
          generic_bindings_free(shape_bindings, shape_binding_len);
          free(shape_bindings);
          return false;
        }
        const char *actual = expr_type(ctx, program, field->value, scope);
        if (!types_compatible_in_scope(program, scope, field_type, actual)) {
          char message[256];
          snprintf(message, sizeof(message), "field '%s' has incompatible type", field->name);
          bool ok = set_diag_detail(diag, 3006, message, field->line, field->column, field_type, actual, "initialize the field with a compatible value");
          free(field_type);
          generic_bindings_free(shape_bindings, shape_binding_len);
          free(shape_bindings);
          return ok;
        }
        mark_owned_move_if_needed(program, field->value, scope, field_type);
        free(field_type);
      }
      for (size_t i = 0; i < shape->fields.len; i++) {
        bool seen = false;
        for (size_t j = 0; j < expr->fields.len; j++) {
          if (strcmp(shape->fields.items[i].name, expr->fields.items[j].name) == 0) seen = true;
        }
        if (!seen) {
          Param *shape_field = &shape->fields.items[i];
          if (!shape_field->default_value) {
            return set_diag_detail(diag, 3102, "shape literal is missing a field", expr->line, expr->column, shape_field->name, "field not initialized", "initialize the field or add a field default");
          }
          char *field_type = shape_bindings ? type_substitute_generic_signature(program, shape_field->type, shape_bindings, shape_binding_len) : z_strdup(shape_field->type);
          if (!check_expr_expected(ctx, program, shape_field->default_value, scope, diag, field_type)) {
            free(field_type);
            generic_bindings_free(shape_bindings, shape_binding_len);
            free(shape_bindings);
            return false;
          }
          const char *actual = expr_type(ctx, program, shape_field->default_value, scope);
          if (!types_compatible_in_scope(program, scope, field_type, actual)) {
            char message[256];
            snprintf(message, sizeof(message), "default for field '%s' has incompatible type", shape_field->name);
            bool ok = set_diag_detail(diag, 3006, message, shape_field->default_value->line, shape_field->default_value->column, field_type, actual, "initialize the field default with a compatible value");
            free(field_type);
            generic_bindings_free(shape_bindings, shape_binding_len);
            free(shape_bindings);
            return ok;
          }
          free(field_type);
        }
      }
      char *normalized_shape_type = NULL;
      if (shape_bindings) {
        ZBuf type_buf;
        zbuf_init(&type_buf);
        zbuf_append(&type_buf, shape->name);
        zbuf_append_char(&type_buf, '<');
        for (size_t i = 0; i < shape_binding_len; i++) {
          if (i > 0) zbuf_append_char(&type_buf, ',');
          zbuf_append(&type_buf, shape_bindings[i].type ? shape_bindings[i].type : "Unknown");
        }
        zbuf_append_char(&type_buf, '>');
        normalized_shape_type = type_buf.data;
      }
      const char *literal_resolved_type = normalized_shape_type ? normalized_shape_type : shape->name;
      char owned_literal_inner[160];
      if (owned_inner_text(literal_resolved_type, owned_literal_inner, sizeof(owned_literal_inner))) literal_resolved_type = owned_literal_inner;
      set_expr_resolved_type(expr, literal_resolved_type);
      free(normalized_shape_type);
      generic_bindings_free(shape_bindings, shape_binding_len);
      free(shape_bindings);
      return true;
    }
    case EXPR_ARRAY_LITERAL: {
      const char *element_expected = NULL;
      char expected_len_text[64] = {0};
      char actual_len_text[64] = {0};
      char inferred_type[160];
      char inferred_element_type[160] = {0};
      if (expr->array_repeat) {
        if (expr->args.len != 2) {
          return set_diag_detail(diag, 3006, "array repeat literal requires a value and count", expr->line, expr->column, "[value; count]", "array literal", "write a repeated fixed-array literal such as [0_u8; 16]");
        }
        const Expr *count = expr->args.items[1];
        if (!count || (count->kind != EXPR_NUMBER && count->kind != EXPR_IDENT)) {
          return set_diag_detail(diag, 3006, "array repeat count must be a compile-time integer", count ? count->line : expr->line, count ? count->column : expr->column, "integer literal or static const", count ? "non-integer expression" : "missing count", "use a literal count such as [0_u8; 16]");
        }
        char *actual_static = canonical_static_arg_for_type_in_scope(program, scope, count->text, "usize");
        if (!actual_static) {
          return set_diag_detail(diag, 3006, "array repeat count must be a compile-time integer", count->line, count->column, "integer literal, static const, or static parameter", count->text ? count->text : "<unknown>", "use a literal count, top-level integer const, or integer static parameter");
        }
        snprintf(actual_len_text, sizeof(actual_len_text), "%s", actual_static);
        free(actual_static);
      } else {
        snprintf(actual_len_text, sizeof(actual_len_text), "%zu", expr->args.len);
      }
      if (expected && expected[0] == '[') {
        const char *close = strchr(expected, ']');
        if (close && close[1]) {
          snprintf(expected_len_text, sizeof(expected_len_text), "%.*s", (int)(close - expected - 1), expected + 1);
          bool length_ok = static_arg_texts_match_in_scope(program, scope, expected_len_text, actual_len_text);
          if (!length_ok) {
            char actual_detail[128];
            if (expr->array_repeat) snprintf(actual_detail, sizeof(actual_detail), "repeat count %s", actual_len_text);
            else snprintf(actual_detail, sizeof(actual_detail), "%zu element(s)", expr->args.len);
            bool ok = set_diag_detail(diag, 3006, "array literal length does not match expected fixed array", expr->line, expr->column, expected, actual_detail, "make the lengths agree: resize the initializer or annotate the intended array length");
            return ok;
          }
          element_expected = close + 1;
        }
      }
      size_t element_count = expr->array_repeat ? 1 : expr->args.len;
      for (size_t i = 0; i < element_count; i++) {
        if (!check_expr_expected(ctx, program, expr->args.items[i], scope, diag, element_expected)) return false;
        const char *actual = expr_type(ctx, program, expr->args.items[i], scope);
        if (element_expected) {
          if (!types_compatible_in_scope(program, scope, element_expected, actual)) {
            char message[256];
            snprintf(message, sizeof(message), "array literal element %zu has incompatible type", i + 1);
            return set_diag_detail(diag, 3006, message, expr->args.items[i]->line, expr->args.items[i]->column, element_expected, actual, "use elements whose types match the fixed-array element type");
          }
        } else if (i == 0) {
          snprintf(inferred_element_type, sizeof(inferred_element_type), "%s", actual ? actual : "Unknown");
        } else if (!types_compatible_in_scope(program, scope, inferred_element_type, actual)) {
          char message[256];
          snprintf(message, sizeof(message), "array literal element %zu has incompatible type", i + 1);
          return set_diag_detail(diag, 3006, message, expr->args.items[i]->line, expr->args.items[i]->column, inferred_element_type, actual, "annotate the array or use elements with one inferred element type");
        }
        if (!check_owned_array_element_transfer(program, expr->args.items[i], scope, element_expected ? element_expected : actual, expr->array_repeat, diag)) return false;
      }
      if (expected && expected[0] == '[') {
        set_expr_resolved_type(expr, expected);
      } else if (expr->array_repeat && expr->args.len == 2) {
        snprintf(inferred_type, sizeof(inferred_type), "[%s]%s", actual_len_text, expr_type(ctx, program, expr->args.items[0], scope));
        set_expr_resolved_type(expr, inferred_type);
      } else if (expr->args.len > 0) {
        snprintf(inferred_type, sizeof(inferred_type), "[%zu]%s", expr->args.len, expr_type(ctx, program, expr->args.items[0], scope));
        set_expr_resolved_type(expr, inferred_type);
      } else {
        set_expr_resolved_type(expr, "[0]Unknown");
      }
      return true;
    }
    case EXPR_STRING:
    case EXPR_CHAR:
    case EXPR_NUMBER:
    case EXPR_BOOL:
    case EXPR_NULL:
      return true;
  }
  return true;
}

static bool check_expr(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag) {
  diag = check_context_diag(ctx, diag);
  return check_expr_expected(ctx, program, expr, scope, diag, NULL);
}

static bool mark_owned_payload_move_from_maybe_expr(const Expr *maybe_expr, Scope *scope) {
  PlaceVec places = {0};
  bool marked = false;
  if (collect_assignment_target_places(maybe_expr, scope, &places)) {
    for (size_t i = 0; i < places.len; i++) {
      Place *place = &places.items[i];
      char *payload_path = origin_path_join(place->path, "value");
      if (scope_add_moved_place_with_scope(scope, place->root_scope, place->root, payload_path)) marked = true;
      free(payload_path);
    }
  }
  place_vec_free(&places);
  return marked;
}

static void mark_owned_move_if_needed(const Program *program, const Expr *expr, Scope *scope, const char *destination_type) {
  if (!expr || !scope || !destination_type || !type_contains_owned(program, destination_type, 0)) return;
  if (expr->kind == EXPR_CHECK) {
    if (mark_owned_payload_move_from_maybe_expr(expr->left, scope)) ((Expr *)expr)->moves_ownership = true;
    return;
  }
  if (expr->kind == EXPR_RESCUE) {
    if (mark_owned_payload_move_from_maybe_expr(expr->left, scope)) ((Expr *)expr)->moves_ownership = true;
    mark_owned_move_if_needed(program, expr->right, scope, destination_type);
    return;
  }
  PlaceVec places = {0};
  bool marked = false;
  if (collect_assignment_target_places(expr, scope, &places)) {
    for (size_t i = 0; i < places.len; i++) {
      Place *place = &places.items[i];
      if (!origin_path_text(place->path)[0]) {
        const char *source_type = scope_type_in_binding_scope(scope, place->root_scope, place->root);
        if (source_type && type_contains_owned(program, source_type, 0)) {
          if (scope_add_moved_place_with_scope(scope, place->root_scope, place->root, NULL)) marked = true;
          scope_set_moved_in_scope(scope, place->root_scope, place->root, true);
        }
      } else if (scope_add_moved_resolved_place(scope, place)) {
        marked = true;
      }
    }
  }
  place_vec_free(&places);
  if (marked) ((Expr *)expr)->moves_ownership = true;
}

static bool check_owned_array_element_transfer(const Program *program, const Expr *expr, Scope *scope, const char *element_type, bool array_repeat, ZDiag *diag) {
  if (array_repeat && type_contains_owned(program, element_type, 0)) {
    if (expr && expr->kind == EXPR_NULL) return true;
    return set_diag_detail(diag, 3013, "array repeat cannot duplicate owned values", expr ? expr->line : 0, expr ? expr->column : 0, "fresh owned value per element", element_type, "write each owned element explicitly so ownership is transferred once");
  }
  mark_owned_move_if_needed(program, expr, scope, element_type);
  return true;
}

static void mark_owned_target_live_if_needed(const Program *program, const Expr *target, Scope *scope, const char *target_type) {
  if (!target || !scope || !target_type || !type_contains_owned(program, target_type, 0)) return;
  PlaceVec places = {0};
  if (collect_assignment_target_places(target, scope, &places)) {
    for (size_t i = 0; i < places.len; i++) {
      Place *place = &places.items[i];
      if (!origin_path_text(place->path)[0]) scope_set_moved_in_scope(scope, place->root_scope, place->root, false);
      scope_clear_moved_resolved_place(scope, place);
    }
  }
  place_vec_free(&places);
}

static bool check_lvalue_target(CheckContext *ctx, const Program *program, const Expr *target, Scope *scope, ZDiag *diag, char *out_type, size_t out_type_len) {
  diag = check_context_diag(ctx, diag);
  if (!target || !out_type || out_type_len == 0) {
    return set_diag_detail(diag, 3027, "unsupported assignment target", target ? target->line : 0, target ? target->column : 0, "mutable identifier, shape field, or fixed-array index", "unsupported assignment target", "assign through a mutable local lvalue");
  }
  switch (target->kind) {
    case EXPR_IDENT: {
      if (!scope_has(scope, target->text)) {
        char message[256];
        snprintf(message, sizeof(message), "unknown identifier '%s'", target->text ? target->text : "<assignment target>");
        return set_diag_detail(diag, 3003, message, target->line, target->column, "visible mutable local", "no matching visible symbol", "declare the name before assigning it");
      }
      if (!scope_is_mutable(scope, target->text)) {
        return set_diag_detail(diag, 3010, "cannot assign through immutable binding", target->line, target->column, "binding declared with var", "immutable binding", "change let to var before assigning through it");
      }
      const char *type = scope_type(scope, target->text);
      if (type_is_const(type)) {
        return set_diag_detail(diag, 3010, "cannot assign to const binding", target->line, target->column, "mutable non-const binding", type, "remove const from the binding type or write to a separate mutable value");
      }
      snprintf(out_type, out_type_len, "%s", type ? type : "Unknown");
      set_expr_resolved_type(target, out_type);
      return true;
    }
    case EXPR_MEMBER: {
      char root[128];
      char path[256];
      bool local_place = expr_binding_path(target->left, root, sizeof(root), path, sizeof(path)) && scope_has(scope, root);
      if (local_place) {
        if (!check_lvalue_base_available(target->left, scope, root, path, diag)) return false;
        if (!check_place_index_exprs(ctx, program, target->left, scope, diag)) return false;
        if (!check_maybe_value_accesses_in_place(ctx, program, target, scope, diag)) return false;
      } else if (!check_expr(ctx, program, target->left, scope, diag)) return false;
      const char *read_base_type = expr_type(ctx, program, target->left, scope);
      char base_type[128];
      snprintf(base_type, sizeof(base_type), "%s", read_base_type ? read_base_type : "Unknown");
      const char *shape_type = base_type;
      char ref_shape_type[128];
      if (named_ref_inner_text(shape_type, "ref", ref_shape_type, sizeof(ref_shape_type))) {
        return set_diag_detail(diag, 3010, "cannot assign through ref<T>", target->line, target->column, "mutref<T> or mutable shape lvalue", "ref<T>", "borrow with &mut when mutation is required");
      }
      if (named_ref_inner_text(shape_type, "mutref", ref_shape_type, sizeof(ref_shape_type))) {
        shape_type = ref_shape_type;
      } else if (!check_lvalue_target(ctx, program, target->left, scope, diag, base_type, sizeof(base_type))) {
        return false;
      }
      const Shape *shape = find_shape_for_type(program, shape_type);
      if (!shape) {
        return set_diag_detail(diag, 3027, "field assignment requires a shape value", target->line, target->column, "mutable shape field", base_type, "assign only to fields of mutable shape values");
      }
      const Param *field = find_shape_field(shape, target->text);
      if (!field) {
        char message[256];
        snprintf(message, sizeof(message), "shape '%s' has no field '%s'", shape->name, target->text);
        return set_diag_detail(diag, 3101, message, target->line, target->column, "declared shape field", target->text, "rename the field or update the shape");
      }
      if (type_is_const(field->type)) {
        return set_diag_detail(diag, 3010, "cannot assign to const field", target->line, target->column, "mutable non-const field", field->type, "remove const from the field type or replace the containing value");
      }
      char *field_type = shape_field_type_for_owner(program, shape, shape_type, field);
      snprintf(out_type, out_type_len, "%s", field_type ? field_type : "Unknown");
      free(field_type);
      set_expr_resolved_type(target, out_type);
      return true;
    }
    case EXPR_INDEX: {
      char root[128];
      char path[256];
      bool local_place = expr_binding_path(target->left, root, sizeof(root), path, sizeof(path)) && scope_has(scope, root);
      if (local_place) {
        if (!check_lvalue_base_available(target->left, scope, root, path, diag)) return false;
        if (!check_place_index_exprs(ctx, program, target->left, scope, diag)) return false;
        if (!check_maybe_value_accesses_in_place(ctx, program, target, scope, diag)) return false;
      } else if (!check_expr(ctx, program, target->left, scope, diag)) return false;
      const char *read_base_type = expr_type(ctx, program, target->left, scope);
      char element_type[128];
      char mutref_inner[128];
      bool is_mutref_base = named_ref_inner_text(read_base_type, "mutref", mutref_inner, sizeof(mutref_inner));
      bool is_ref_base = named_ref_inner_text(read_base_type, "ref", mutref_inner, sizeof(mutref_inner));
      const char *mutable_base_type = is_mutref_base ? mutref_inner : read_base_type;
      if (is_ref_base) {
        return set_diag_detail(diag, 3010, "cannot assign through indexed ref<T>", target->line, target->column, "MutSpan<T>, mutref<MutSpan<T>>, or mutable fixed array", "ref<T>", "borrow with &mut when indexed mutation is required");
      }
      if (!mutspan_element_text(mutable_base_type, element_type, sizeof(element_type))) {
        char base_type[128];
        if (!check_lvalue_target(ctx, program, target->left, scope, diag, base_type, sizeof(base_type))) return false;
        const char *array_base_type = base_type;
        char array_ref_inner[128];
        if (named_ref_inner_text(array_base_type, "mutref", array_ref_inner, sizeof(array_ref_inner))) array_base_type = array_ref_inner;
        if (!fixed_array_type_parts(array_base_type, NULL, 0, element_type, sizeof(element_type))) {
          return set_diag_detail(diag, 3027, "indexed assignment requires a mutable fixed array or MutSpan", target->line, target->column, "mutable [N]T, MutSpan<T>, mutref<[N]T>, or mutref<MutSpan<T>>", base_type, "String indexing is byte-oriented and read-only; assign only through mutable indexed storage");
        }
      }
      if (type_is_const(element_type)) {
        return set_diag_detail(diag, 3010, "cannot assign to const indexed element", target->line, target->column, "mutable non-const element", element_type, "use a mutable element type when indexed mutation is required");
      }
      if (!check_expr_expected(ctx, program, target->right, scope, diag, "usize")) return false;
      const char *index_type = expr_type(ctx, program, target->right, scope);
      if (!is_int_type(index_type)) {
        return set_diag_detail(diag, 3028, "index expression must be an integer", target->right ? target->right->line : target->line, target->right ? target->right->column : target->column, "integer index", index_type, "use an integer expression such as usize or a checked integer literal");
      }
      snprintf(out_type, out_type_len, "%s", element_type);
      set_expr_resolved_type(target, out_type);
      return true;
    }
    default:
      return set_diag_detail(diag, 3027, "unsupported assignment target", target->line, target->column, "mutable identifier, shape field, or fixed-array index", "unsupported assignment target", "assign through a mutable local lvalue");
  }
}

static const TypeArgVec *checked_call_type_args(const Expr *call) {
  if (!call) return NULL;
  if (call->checked_type_args.len > 0) return &call->checked_type_args;
  if (call->kind == EXPR_CALL && call->left && call->left->checked_type_args.len > 0) return &call->left->checked_type_args;
  return NULL;
}

static bool generic_bindings_from_type_args(CheckContext *ctx, const Program *program, const Function *callee, const TypeArgVec *type_args, GenericBinding **out_bindings, size_t *out_len) {
  if (out_bindings) *out_bindings = NULL;
  if (out_len) *out_len = 0;
  if (!callee || !function_is_generic(callee) || !type_args || type_args->len == 0 || !out_bindings || !out_len) return false;

  size_t binding_len = callee->type_params.len;
  if (type_args->len != binding_len) return false;

  GenericBinding *bindings = z_checked_calloc(binding_len, sizeof(GenericBinding));
  generic_bindings_init_from_params(bindings, &callee->type_params, 0);
  if (!bind_type_args_to_bindings(ctx, program, type_args, bindings, binding_len, NULL, 0)) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    return false;
  }
  *out_bindings = bindings;
  *out_len = binding_len;
  return true;
}

static bool checked_call_bindings_from_recorded_type_args(CheckContext *ctx, const Program *program, const Function *callee, const Expr *call, GenericBinding **out_bindings, size_t *out_len, bool *out_recorded) {
  if (out_recorded) *out_recorded = false;
  const TypeArgVec *type_args = checked_call_type_args(call);
  if (!type_args || type_args->len == 0) return false;
  if (out_recorded) *out_recorded = true;
  return generic_bindings_from_type_args(ctx, program, callee, type_args, out_bindings, out_len);
}

static bool shape_method_bindings_from_recorded_type_args(CheckContext *ctx, const Program *program, const Shape *shape, const Function *method, const Expr *call, GenericBinding **out_bindings, size_t *out_len, bool *out_recorded) {
  if (out_bindings) *out_bindings = NULL;
  if (out_len) *out_len = 0;
  if (out_recorded) *out_recorded = false;
  const TypeArgVec *type_args = checked_call_type_args(call);
  if (!type_args || type_args->len == 0) return false;
  if (out_recorded) *out_recorded = true;
  if (!shape || !method || !out_bindings || !out_len) return false;
  size_t binding_len = shape_method_binding_count(shape, method);
  if (type_args->len != binding_len) return false;
  GenericBinding *bindings = z_checked_calloc(binding_len, sizeof(GenericBinding));
  shape_method_init_bindings(shape, method, bindings);
  if (!bind_type_args_to_bindings(ctx, program, type_args, bindings, binding_len, NULL, 0)) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    return false;
  }
  *out_bindings = bindings;
  *out_len = binding_len;
  return true;
}

static bool interface_method_bindings_from_recorded_type_args(CheckContext *ctx, const Program *program, const InterfaceDecl *interface, const Function *method, const Expr *call, GenericBinding *context_bindings, size_t context_binding_len, GenericBinding **out_bindings, size_t *out_len, bool *out_recorded) {
  if (out_bindings) *out_bindings = NULL;
  if (out_len) *out_len = 0;
  if (out_recorded) *out_recorded = false;
  const TypeArgVec *type_args = checked_call_type_args(call);
  if (!type_args || type_args->len == 0) return false;
  if (out_recorded) *out_recorded = true;
  if (!interface || !method || !out_bindings || !out_len) return false;
  size_t binding_len = interface_method_binding_count(interface, method);
  if (type_args->len != binding_len) return false;
  GenericBinding *bindings = z_checked_calloc(binding_len ? binding_len : 1, sizeof(GenericBinding));
  interface_method_init_bindings(interface, method, bindings);
  if (!bind_type_args_to_bindings(ctx, program, type_args, bindings, binding_len, context_bindings, context_binding_len)) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    return false;
  }
  *out_bindings = bindings;
  *out_len = binding_len;
  return true;
}

static bool generic_call_bindings_from_checked_call(CheckContext *ctx, const Program *program, const Function *callee, const Expr *call, Scope *scope, const char *return_type, GenericBinding **out_bindings, size_t *out_len) {
  if (out_bindings) *out_bindings = NULL;
  if (out_len) *out_len = 0;
  if (!callee || !function_is_generic(callee) || !call || !out_bindings || !out_len) return false;

  bool recorded_type_args = false;
  if (checked_call_bindings_from_recorded_type_args(ctx, program, callee, call, out_bindings, out_len, &recorded_type_args)) return true;
  if (recorded_type_args) return false;

  const TypeArgVec *type_args = call_type_args(call);
  if (type_args && type_args->len > 0) {
    size_t binding_len = callee->type_params.len;
    GenericBinding *bindings = z_checked_calloc(binding_len, sizeof(GenericBinding));
    generic_bindings_init_from_params(bindings, &callee->type_params, 0);
    ZDiag ignored = {0};
    if (!build_generic_bindings(ctx, program, callee, call, scope, &ignored, bindings, binding_len, NULL)) {
      generic_bindings_free(bindings, binding_len);
      free(bindings);
      return false;
    }
    *out_bindings = bindings;
    *out_len = binding_len;
    return true;
  }

  size_t binding_len = callee->type_params.len;
  GenericBinding *bindings = z_checked_calloc(binding_len, sizeof(GenericBinding));
  generic_bindings_init_from_params(bindings, &callee->type_params, 0);

  bool ok = true;
  if (return_type && callee->return_type) {
    ok = infer_generic_type_from_pattern(program, callee, scope, callee->return_type, return_type, bindings, binding_len);
  }
  for (size_t i = 0; ok && i < callee->params.len && i < call->args.len; i++) {
    ok = infer_generic_type_from_pattern(program, callee, scope, callee->params.items[i].type, expr_type(ctx, program, call->args.items[i], scope), bindings, binding_len);
  }
  if (!ok) {
    generic_bindings_free(bindings, binding_len);
    free(bindings);
    return false;
  }
  *out_bindings = bindings;
  *out_len = binding_len;
  return true;
}

static char *call_param_type_text(const Program *program, const Function *callee, size_t param_index, GenericBinding *bindings, size_t binding_len) {
  if (!callee || param_index >= callee->params.len) return z_strdup("Unknown");
  const char *param_type = callee->params.items[param_index].type;
  return type_substitute_generic_signature(program, param_type ? param_type : "Unknown", bindings, binding_len);
}

static void call_resolution_record_bindings(ZCallResolution *resolution, GenericBinding *bindings, size_t binding_len) {
  if (!resolution || !bindings) return;
  for (size_t i = 0; i < binding_len; i++) {
    z_call_resolution_add_binding(resolution, bindings[i].name, bindings[i].type, bindings[i].is_static, bindings[i].static_type);
  }
}

static char *call_resolution_param_type_text(const ZCallResolution *resolution, size_t param_index) {
  const char *param_type = z_call_resolution_param_type(resolution, param_index);
  return z_strdup(param_type ? param_type : "Unknown");
}

static void call_resolution_record_param_facts(CheckContext *ctx, const Program *program, const Function *callee, const Expr *call, const Expr *receiver, size_t param_offset, Scope *scope, GenericBinding *bindings, size_t binding_len, ZCallResolution *resolution) {
  if (!program || !callee || !call || !scope || !resolution) return;
  if (receiver && callee->params.len > 0) {
    char *expected = call_param_type_text(program, callee, 0, bindings, binding_len);
    z_call_resolution_add_arg(resolution, 0, receiver, expected, expr_type(ctx, program, receiver, scope));
    free(expected);
  }
  for (size_t i = 0; i < call->args.len; i++) {
    size_t param_index = i + param_offset;
    if (param_index >= callee->params.len) continue;
    char *expected = call_param_type_text(program, callee, param_index, bindings, binding_len);
    z_call_resolution_add_arg(resolution, param_index, call->args.items[i], expected, expr_type(ctx, program, call->args.items[i], scope));
    free(expected);
  }
}

static char *resolved_call_param_type_text(const Program *program, const ResolvedProvenanceCall *resolved, size_t param_index) {
  if (!resolved) return z_strdup("Unknown");
  const char *recorded = z_call_resolution_param_type(&resolved->resolution, param_index);
  if (recorded) return z_strdup(recorded);
  return call_param_type_text(program, resolved->resolution.callee, param_index, resolved->bindings, resolved->binding_len);
}

static bool finish_shape_method_provenance_call(CheckContext *ctx, const Program *program, const Expr *call, Scope *scope, const char *return_type, GenericBinding *context_bindings, size_t context_binding_len, ResolvedProvenanceCall *out) {
  const Function *callee = out->resolution.callee;
  const Shape *shape = out->resolution.shape;
  if (!callee || !shape) {
    resolved_provenance_call_free(out);
    return false;
  }
  z_call_resolution_set_return_type(&out->resolution, return_type ? return_type : (callee->return_type ? callee->return_type : "Void"));
  ZDiag ignored = {0};
  bool recorded_type_args = false;
  if (!shape_method_bindings_from_recorded_type_args(ctx, program, shape, callee, call, &out->bindings, &out->binding_len, &recorded_type_args) &&
      (recorded_type_args || !build_shape_method_bindings(ctx, program, shape, callee, call, scope, out->resolution.return_type, &ignored, &out->bindings, &out->binding_len))) {
    resolved_provenance_call_free(out);
    return false;
  }
  provenance_context_substitute_bindings(ctx, program, out->bindings, out->binding_len, context_bindings, context_binding_len);
  call_resolution_record_bindings(&out->resolution, out->bindings, out->binding_len);
  call_resolution_record_param_facts(ctx, program, callee, call, NULL, 0, scope, out->bindings, out->binding_len, &out->resolution);
  return true;
}

static bool resolve_shape_namespace_provenance_call(CheckContext *ctx, const Program *program, const Expr *call, Scope *scope, const char *return_type, GenericBinding *context_bindings, size_t context_binding_len, ResolvedProvenanceCall *out, bool *handled) {
  if (handled) *handled = false;
  if (!resolve_shape_namespace_call(program, call, &out->resolution)) return true;
  if (handled) *handled = true;
  return finish_shape_method_provenance_call(ctx, program, call, scope, return_type, context_bindings, context_binding_len, out);
}

static bool resolve_concrete_constrained_shape_provenance_call(CheckContext *ctx, const Program *program, const Function *context_fun, const Expr *call, Scope *scope, const char *return_type, GenericBinding *context_bindings, size_t context_binding_len, ResolvedProvenanceCall *out, bool *handled) {
  if (handled) *handled = false;
  if (!resolve_concrete_constrained_shape_call(ctx, program, context_fun, context_bindings, context_binding_len, call, &out->resolution)) return true;
  if (handled) *handled = true;
  return finish_shape_method_provenance_call(ctx, program, call, scope, return_type, context_bindings, context_binding_len, out);
}

static bool resolve_named_provenance_call(CheckContext *ctx, const Program *program, const Expr *call, Scope *scope, const char *return_type, GenericBinding *context_bindings, size_t context_binding_len, ResolvedProvenanceCall *out) {
  if (!resolve_named_function_call(program, call, &out->resolution)) return false;
  const Function *callee = out->resolution.callee;
  z_call_resolution_set_return_type(&out->resolution, return_type ? return_type : (callee->return_type ? callee->return_type : "Void"));
  if (function_is_generic(callee)) {
    if (!generic_call_bindings_from_checked_call(ctx, program, callee, call, scope, out->resolution.return_type, &out->bindings, &out->binding_len)) {
      resolved_provenance_call_free(out);
      return false;
    }
    provenance_context_substitute_bindings(ctx, program, out->bindings, out->binding_len, context_bindings, context_binding_len);
    call_resolution_record_bindings(&out->resolution, out->bindings, out->binding_len);
  }
  call_resolution_record_param_facts(ctx, program, callee, call, NULL, 0, scope, out->bindings, out->binding_len, &out->resolution);
  return true;
}

static bool resolve_graph_backed_stdlib_provenance_call(CheckContext *ctx, const Program *program, const Expr *call, Scope *scope, const char *return_type, GenericBinding *context_bindings, size_t context_binding_len, ResolvedProvenanceCall *out, bool *handled) {
  if (handled) *handled = false;
  if (!program || !call || call->kind != EXPR_CALL || !call->left || call->left->kind != EXPR_MEMBER || !out) return true;

  ZBuf public_name;
  zbuf_init(&public_name);
  member_name_buf(call->left, &public_name);
  const char *target_name = z_std_source_target_for_public_call(public_name.data);
  if (!target_name) {
    zbuf_free(&public_name);
    return true;
  }
  if (handled) *handled = true;

  const Function *callee = find_function(program, target_name);
  if (!callee) {
    zbuf_free(&public_name);
    return false;
  }

  z_call_resolution_init(&out->resolution);
  out->resolution.kind = Z_CALL_FUNCTION;
  out->resolution.call_expr = call;
  out->resolution.callee_expr = call->left;
  out->resolution.type_args = checked_call_type_args(call);
  if (!out->resolution.type_args || out->resolution.type_args->len == 0) out->resolution.type_args = call_type_args(call);
  out->resolution.callee = callee;
  out->resolution.param_len = callee->params.len;
  out->resolution.fallible = callee->raises || callee->has_error_set;
  z_call_resolution_set_callee_name(&out->resolution, public_name.data);
  z_call_resolution_set_return_type(&out->resolution, return_type ? return_type : (callee->return_type ? callee->return_type : "Void"));
  call_resolution_record_function_errors(&out->resolution, callee);

  if (function_is_generic(callee)) {
    if (!generic_call_bindings_from_checked_call(ctx, program, callee, call, scope, out->resolution.return_type, &out->bindings, &out->binding_len)) {
      zbuf_free(&public_name);
      resolved_provenance_call_free(out);
      return false;
    }
    provenance_context_substitute_bindings(ctx, program, out->bindings, out->binding_len, context_bindings, context_binding_len);
    call_resolution_record_bindings(&out->resolution, out->bindings, out->binding_len);
  }
  call_resolution_record_param_facts(ctx, program, callee, call, NULL, 0, scope, out->bindings, out->binding_len, &out->resolution);
  zbuf_free(&public_name);
  return true;
}

static bool resolve_constrained_interface_provenance_call(CheckContext *ctx, const Program *program, const Function *context_fun, const Expr *call, Scope *scope, const char *return_type, GenericBinding *context_bindings, size_t context_binding_len, ResolvedProvenanceCall *out, bool *handled) {
  if (handled) *handled = false;
  if (!resolve_constrained_interface_call(program, context_fun, call, &out->resolution)) return true;
  if (handled) *handled = true;
  const Function *callee = out->resolution.callee;
  const InterfaceDecl *interface = out->resolution.interface;
  ZDiag ignored = {0};
  bool recorded_type_args = false;
  if (!interface_method_bindings_from_recorded_type_args(ctx, program, interface, callee, call, context_bindings, context_binding_len, &out->bindings, &out->binding_len, &recorded_type_args) &&
      (recorded_type_args || !build_constrained_interface_method_bindings(ctx, program, context_fun, call, scope, interface, callee, return_type, context_bindings, context_binding_len, &ignored, &out->bindings, &out->binding_len))) {
    resolved_provenance_call_free(out);
    return false;
  }
  char *substituted_return = type_substitute_generic_signature(program, callee->return_type, out->bindings, out->binding_len);
  z_call_resolution_set_return_type(&out->resolution, return_type ? return_type : substituted_return);
  free(substituted_return);
  call_resolution_record_bindings(&out->resolution, out->bindings, out->binding_len);
  call_resolution_record_param_facts(ctx, program, callee, call, NULL, 0, scope, out->bindings, out->binding_len, &out->resolution);
  return true;
}

static bool resolve_receiver_shape_provenance_call(CheckContext *ctx, const Program *program, const Expr *call, Scope *scope, const char *return_type, GenericBinding *context_bindings, size_t context_binding_len, ResolvedProvenanceCall *out) {
  if (!resolve_receiver_shape_call(ctx, program, call, scope, NULL, &out->resolution)) return false;
  const Function *callee = out->resolution.callee;
  const Shape *receiver_shape = out->resolution.shape;
  bool receiver_requires_mut = false;
  if (!shape_method_receiver_info(callee, &receiver_requires_mut)) {
    resolved_provenance_call_free(out);
    return false;
  }
  z_call_resolution_set_return_type(&out->resolution, return_type ? return_type : (callee->return_type ? callee->return_type : "Void"));
  ZDiag ignored = {0};
  char *self_arg_type = receiver_self_arg_type(expr_type(ctx, program, out->resolution.receiver_expr, scope), receiver_requires_mut);
  bool recorded_type_args = false;
  if (!shape_method_bindings_from_recorded_type_args(ctx, program, receiver_shape, callee, call, &out->bindings, &out->binding_len, &recorded_type_args) &&
      (recorded_type_args || !build_receiver_shape_method_bindings(ctx, program, receiver_shape, callee, call, self_arg_type, scope, &ignored, &out->bindings, &out->binding_len))) {
    free(self_arg_type);
    resolved_provenance_call_free(out);
    return false;
  }
  free(self_arg_type);
  provenance_context_substitute_bindings(ctx, program, out->bindings, out->binding_len, context_bindings, context_binding_len);
  call_resolution_record_bindings(&out->resolution, out->bindings, out->binding_len);
  call_resolution_record_param_facts(ctx, program, callee, call, out->resolution.receiver_expr, out->resolution.param_offset, scope, out->bindings, out->binding_len, &out->resolution);
  return true;
}

static bool resolve_provenance_call(CheckContext *ctx, const Program *program, const Expr *call, Scope *scope, const char *expected_return, const Function *context_fun, GenericBinding *context_bindings, size_t context_binding_len, ResolvedProvenanceCall *out) {
  if (!out) return false;
  *out = (ResolvedProvenanceCall){0};
  if (!program || !call || call->kind != EXPR_CALL || !call->left || !scope) return false;
  context_fun = context_fun ? context_fun : (ctx ? ctx->function : NULL);
  const char *return_type = expected_return ? expected_return : expr_type(ctx, program, call, scope);

  if (call->left->kind == EXPR_IDENT) {
    return resolve_named_provenance_call(ctx, program, call, scope, return_type, context_bindings, context_binding_len, out);
  }

  if (call->left->kind != EXPR_MEMBER) return false;

  bool handled = false;
  if (!resolve_graph_backed_stdlib_provenance_call(ctx, program, call, scope, return_type, context_bindings, context_binding_len, out, &handled)) return false;
  if (handled) return true;

  if (!resolve_shape_namespace_provenance_call(ctx, program, call, scope, return_type, context_bindings, context_binding_len, out, &handled)) return false;
  if (handled) return true;

  if (!resolve_concrete_constrained_shape_provenance_call(ctx, program, context_fun, call, scope, return_type, context_bindings, context_binding_len, out, &handled)) return false;
  if (handled) return true;

  if (!resolve_constrained_interface_provenance_call(ctx, program, context_fun, call, scope, return_type, context_bindings, context_binding_len, out, &handled)) return false;
  if (handled) return true;

  return resolve_receiver_shape_provenance_call(ctx, program, call, scope, return_type, context_bindings, context_binding_len, out);
}

static void call_facts_append_json_string(ZBuf *buf, const char *text) {
  zbuf_append_char(buf, '"');
  for (const char *p = text ? text : ""; *p; p++) {
    switch (*p) {
      case '\\': zbuf_append(buf, "\\\\"); break;
      case '"': zbuf_append(buf, "\\\""); break;
      case '\n': zbuf_append(buf, "\\n"); break;
      case '\r': zbuf_append(buf, "\\r"); break;
      case '\t': zbuf_append(buf, "\\t"); break;
      default: zbuf_append_char(buf, *p); break;
    }
  }
  zbuf_append_char(buf, '"');
}

static const char *call_facts_source_path(const SourceInput *input, int parser_line) {
  if (!input || parser_line <= 0) return "";
  size_t index = (size_t)parser_line - 1;
  if (index < input->source_line_count && input->source_line_paths[index]) return input->source_line_paths[index];
  return input->source_file ? input->source_file : "";
}

static int call_facts_source_line(const SourceInput *input, int parser_line) {
  if (parser_line <= 0) return 0;
  if (input) {
    size_t index = (size_t)parser_line - 1;
    if (index < input->source_line_count && input->source_line_numbers[index] > 0) return input->source_line_numbers[index];
  }
  return parser_line;
}

static void call_facts_append_type_args_json(ZBuf *buf, const TypeArgVec *type_args) {
  zbuf_append(buf, "[");
  for (size_t i = 0; type_args && i < type_args->len; i++) {
    if (i > 0) zbuf_append(buf, ",");
    call_facts_append_json_string(buf, type_args->items[i].type);
  }
  zbuf_append(buf, "]");
}

static void call_facts_append_bindings_json(ZBuf *buf, const ZCallResolution *resolution) {
  zbuf_append(buf, "[");
  for (size_t i = 0; resolution && i < resolution->binding_len; i++) {
    if (i > 0) zbuf_append(buf, ",");
    const ZCallBinding *binding = &resolution->bindings[i];
    zbuf_append(buf, "{\"name\":");
    call_facts_append_json_string(buf, binding->name);
    zbuf_append(buf, ",\"type\":");
    call_facts_append_json_string(buf, binding->type);
    zbuf_appendf(buf, ",\"static\":%s", binding->is_static ? "true" : "false");
    zbuf_append(buf, ",\"staticType\":");
    call_facts_append_json_string(buf, binding->static_type ? binding->static_type : "");
    zbuf_append(buf, "}");
  }
  zbuf_append(buf, "]");
}

static void call_facts_append_args_json(ZBuf *buf, const SourceInput *input, const ZCallResolution *resolution) {
  zbuf_append(buf, "[");
  for (size_t i = 0; resolution && i < resolution->arg_len; i++) {
    if (i > 0) zbuf_append(buf, ",");
    const ZCallArgument *arg = &resolution->args[i];
    int parser_line = arg->arg_expr ? arg->arg_expr->line : 0;
    zbuf_appendf(buf, "{\"paramIndex\":%zu,\"path\":", arg->param_index);
    call_facts_append_json_string(buf, call_facts_source_path(input, parser_line));
    zbuf_appendf(buf, ",\"line\":%d,\"column\":%d,\"expectedType\":",
                 call_facts_source_line(input, parser_line),
                 arg->arg_expr ? arg->arg_expr->column : 0);
    call_facts_append_json_string(buf, arg->expected_type);
    zbuf_append(buf, ",\"actualType\":");
    call_facts_append_json_string(buf, arg->actual_type);
    zbuf_append(buf, "}");
  }
  zbuf_append(buf, "]");
}

static void call_facts_append_errors_json(ZBuf *buf, const ZCallResolution *resolution) {
  zbuf_append(buf, "[");
  for (size_t i = 0; resolution && i < resolution->error_len; i++) {
    if (i > 0) zbuf_append(buf, ",");
    call_facts_append_json_string(buf, resolution->errors[i].name);
  }
  zbuf_append(buf, "]");
}

static void call_facts_append_resolution_json(ZBuf *buf, const SourceInput *input, const ZCallResolution *resolution, const char *owner, size_t instantiation_depth, const char *instantiated_by) {
  zbuf_append(buf, "{\"kind\":");
  call_facts_append_json_string(buf, z_call_kind_name(resolution ? resolution->kind : Z_CALL_UNKNOWN));
  zbuf_append(buf, ",\"calleeName\":");
  call_facts_append_json_string(buf, resolution ? resolution->callee_name : NULL);
  zbuf_append(buf, ",\"owner\":");
  call_facts_append_json_string(buf, owner);
  int parser_line = resolution && resolution->call_expr ? resolution->call_expr->line : 0;
  zbuf_append(buf, ",\"path\":");
  call_facts_append_json_string(buf, call_facts_source_path(input, parser_line));
  zbuf_appendf(buf, ",\"line\":%d,\"column\":%d",
               call_facts_source_line(input, parser_line),
               resolution && resolution->call_expr ? resolution->call_expr->column : 0);
  zbuf_append(buf, ",\"returnType\":");
  call_facts_append_json_string(buf, resolution ? resolution->return_type : NULL);
  zbuf_appendf(buf, ",\"fallible\":%s,\"expectedArgCount\":%zu,\"argCount\":%zu,\"paramOffset\":%zu",
               resolution && resolution->fallible ? "true" : "false",
               z_call_resolution_expected_arg_count(resolution),
               resolution && resolution->call_expr ? resolution->call_expr->args.len : 0,
               resolution ? resolution->param_offset : 0);
  zbuf_append(buf, ",\"typeArgs\":");
  call_facts_append_type_args_json(buf, resolution ? resolution->type_args : NULL);
  zbuf_append(buf, ",\"bindings\":");
  call_facts_append_bindings_json(buf, resolution);
  zbuf_append(buf, ",\"args\":");
  call_facts_append_args_json(buf, input, resolution);
  zbuf_append(buf, ",\"errors\":");
  call_facts_append_errors_json(buf, resolution);
  zbuf_append(buf, ",\"shape\":");
  call_facts_append_json_string(buf, resolution && resolution->shape ? resolution->shape->name : "");
  zbuf_append(buf, ",\"interface\":");
  call_facts_append_json_string(buf, resolution && resolution->interface ? resolution->interface->name : "");
  zbuf_append(buf, ",\"choice\":");
  call_facts_append_json_string(buf, resolution && resolution->choice ? resolution->choice->name : "");
  zbuf_append(buf, ",\"choiceCase\":");
  call_facts_append_json_string(buf, resolution && resolution->choice_case ? resolution->choice_case->name : "");
  zbuf_appendf(buf, ",\"instantiationDepth\":%zu", instantiation_depth);
  if (instantiated_by) {
    zbuf_append(buf, ",\"instantiatedBy\":");
    call_facts_append_json_string(buf, instantiated_by);
  }
  zbuf_append(buf, "}");
}

static char *call_facts_type_text(const Program *program, const char *type, GenericBinding *bindings, size_t binding_len) {
  if (bindings && binding_len > 0) return type_substitute_generic_signature(program, type ? type : "Unknown", bindings, binding_len);
  return z_strdup(type ? type : "Unknown");
}

static void call_facts_seed_consts(CheckContext *ctx, const Program *program, Scope *scope) {
  if (!program || !scope) return;
  CheckContext const_ctx = {.program = program};
  CheckContext *type_ctx = ctx ? ctx : &const_ctx;
  for (size_t i = 0; i < program->consts.len; i++) {
    const ConstDecl *item = &program->consts.items[i];
    const char *type = item->type ? item->type : expr_type(type_ctx, program, item->expr, scope);
    scope_add(scope, item->name, type ? type : "Unknown", false);
  }
}

static void call_facts_seed_scope(const Program *program, Scope *scope, const Shape *shape, const Function *fun, GenericBinding *bindings, size_t binding_len) {
  call_facts_seed_consts(NULL, program, scope);
  for (size_t i = 0; shape && i < shape->type_params.len; i++) {
    Param *param = &shape->type_params.items[i];
    if (param->is_static) scope_add_static_param(scope, param->name, param->type);
    else scope_add_type_param(scope, param->name);
  }
  for (size_t i = 0; fun && i < fun->type_params.len; i++) {
    Param *param = &fun->type_params.items[i];
    if (param->is_static) scope_add_static_param(scope, param->name, param->type);
    else scope_add_type_param(scope, param->name);
  }
  for (size_t i = 0; fun && i < fun->params.len; i++) {
    Param *param = &fun->params.items[i];
    char *type = call_facts_type_text(program, param->type, bindings, binding_len);
    scope_add_param_decl(scope, param->name, type, param->line, param->column);
    free(type);
  }
}

static bool call_facts_resolve_stdlib_call(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZCallResolution *out) {
  if (!resolve_stdlib_call(expr, out)) return false;
  if (z_call_resolution_expected_arg_count(out) != expr->args.len) {
    z_call_resolution_free(out);
    return false;
  }
  ZDiag ignored = {0};
  if (!check_stdlib_known_call_expected(ctx, program, expr, scope, &ignored, out)) {
    z_call_resolution_free(out);
    return false;
  }
  return true;
}

static bool call_facts_resolve_c_import_call(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZCallResolution *out) {
  if (!resolve_c_import_call(program, check_context_target(ctx), expr, scope, out)) return false;
  if (z_call_resolution_expected_arg_count(out) != expr->args.len) {
    z_call_resolution_free(out);
    return false;
  }
  ZDiag ignored = {0};
  bool handled = false;
  if (!check_c_import_call_expected(ctx, program, expr, scope, &ignored, &handled) || !handled) {
    z_call_resolution_free(out);
    return false;
  }
  for (size_t i = 0; i < out->arg_len; i++) {
    if (out->args[i].arg_expr) {
      free(out->args[i].actual_type);
      out->args[i].actual_type = z_strdup(expr_type(ctx, program, out->args[i].arg_expr, scope));
    }
  }
  return true;
}

static bool call_facts_resolve_call(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ResolvedProvenanceCall *resolved) {
  if (!expr || expr->kind != EXPR_CALL || !resolved) return false;
  *resolved = (ResolvedProvenanceCall){0};
  if (call_facts_resolve_stdlib_call(ctx, program, expr, scope, &resolved->resolution)) return true;
  if (call_facts_resolve_c_import_call(ctx, program, expr, scope, &resolved->resolution)) return true;
  if (resolve_choice_constructor_call(program, expr, &resolved->resolution)) {
    if (resolved->resolution.choice_case && resolved->resolution.choice_case->type && expr->args.len > 0) {
      z_call_resolution_add_arg(&resolved->resolution, 0, expr->args.items[0], resolved->resolution.choice_case->type, expr_type(ctx, program, expr->args.items[0], scope));
    }
    return true;
  }
  return resolve_provenance_call(ctx, program, expr, scope, expr_resolved_type_for_current_context(ctx, expr), ctx ? ctx->function : NULL, ctx ? ctx->return_provenance_expr_bindings : NULL, ctx ? ctx->return_provenance_expr_binding_len : 0, resolved);
}

static void call_facts_collect_expr(ZBuf *buf, const SourceInput *input, bool *wrote, CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, const char *owner, size_t instantiation_depth, const char *instantiated_by);
static void call_facts_collect_stmt_vec(ZBuf *buf, const SourceInput *input, bool *wrote, CheckContext *ctx, const Program *program, const StmtVec *body, Scope *scope, const char *owner, size_t instantiation_depth, const char *instantiated_by);

static bool call_facts_resolution_has_instantiable_body(const ZCallResolution *resolution) {
  if (!resolution || !resolution->callee || resolution->binding_len == 0) return false;
  return resolution->kind == Z_CALL_FUNCTION ||
         resolution->kind == Z_CALL_RECEIVER ||
         resolution->kind == Z_CALL_SHAPE_NAMESPACE ||
         resolution->kind == Z_CALL_CONCRETE_CONSTRAINED_SHAPE;
}

static void call_facts_collect_instantiated_callee(ZBuf *buf, const SourceInput *input, bool *wrote, const Program *program, const ZCallResolution *resolution, size_t instantiation_depth, const char *owner) {
  if (!call_facts_resolution_has_instantiable_body(resolution) || instantiation_depth >= 1) return;
  const Function *callee = resolution->callee;
  const Shape *callee_shape = resolution->kind == Z_CALL_FUNCTION ? NULL : resolution->shape;
  GenericBinding *bindings = z_checked_calloc(resolution->binding_len, sizeof(GenericBinding));
  for (size_t i = 0; i < resolution->binding_len; i++) {
    bindings[i].name = resolution->bindings[i].name;
    bindings[i].type = z_strdup(resolution->bindings[i].type);
    bindings[i].is_static = resolution->bindings[i].is_static;
    bindings[i].static_type = resolution->bindings[i].static_type;
  }
  Scope callee_scope = {0};
  call_facts_seed_scope(program, &callee_scope, callee_shape, callee, bindings, resolution->binding_len);
  CheckContext callee_ctx = {
    .program = program,
    .function = callee,
    .shape = callee_shape,
    .return_provenance_expr_bindings = bindings,
    .return_provenance_expr_binding_len = resolution->binding_len,
  };
  char callee_owner[192];
  if (callee_shape) snprintf(callee_owner, sizeof(callee_owner), "%s.%s", callee_shape->name, callee->name);
  else snprintf(callee_owner, sizeof(callee_owner), "%s", callee->name ? callee->name : "");
  call_facts_collect_stmt_vec(buf, input, wrote, &callee_ctx, program, &callee->body, &callee_scope, callee_owner, instantiation_depth + 1, owner);
  scope_free(&callee_scope);
  generic_bindings_free(bindings, resolution->binding_len);
  free(bindings);
}

static void call_facts_write_resolution(ZBuf *buf, const SourceInput *input, bool *wrote, CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, const char *owner, size_t instantiation_depth, const char *instantiated_by) {
  ResolvedProvenanceCall resolved = {0};
  if (!call_facts_resolve_call(ctx, program, expr, scope, &resolved)) return;
  if (*wrote) zbuf_append(buf, ",");
  call_facts_append_resolution_json(buf, input, &resolved.resolution, owner, instantiation_depth, instantiated_by);
  *wrote = true;
  call_facts_collect_instantiated_callee(buf, input, wrote, program, &resolved.resolution, instantiation_depth, owner);
  resolved_provenance_call_free(&resolved);
}

static void call_facts_collect_expr(ZBuf *buf, const SourceInput *input, bool *wrote, CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, const char *owner, size_t instantiation_depth, const char *instantiated_by) {
  if (!expr) return;
  call_facts_collect_expr(buf, input, wrote, ctx, program, expr->left, scope, owner, instantiation_depth, instantiated_by);
  call_facts_collect_expr(buf, input, wrote, ctx, program, expr->right, scope, owner, instantiation_depth, instantiated_by);
  for (size_t i = 0; i < expr->args.len; i++) call_facts_collect_expr(buf, input, wrote, ctx, program, expr->args.items[i], scope, owner, instantiation_depth, instantiated_by);
  for (size_t i = 0; i < expr->fields.len; i++) call_facts_collect_expr(buf, input, wrote, ctx, program, expr->fields.items[i].value, scope, owner, instantiation_depth, instantiated_by);
  if (expr->kind == EXPR_CALL) call_facts_write_resolution(buf, input, wrote, ctx, program, expr, scope, owner, instantiation_depth, instantiated_by);
}

static void call_facts_seed_match_payload_scope(CheckContext *ctx, const Program *program, const Stmt *stmt, const MatchArm *arm, Scope *match_scope, Scope *arm_scope) {
  if (!ctx || !program || !stmt || stmt->kind != STMT_MATCH || !stmt->expr || !arm || !arm_scope || !arm->payload_name) return;
  if (!arm->case_name || strcmp(arm->case_name, "_") == 0) return;
  const char *match_type = stmt->resolved_type ? stmt->resolved_type : expr_type(ctx, program, stmt->expr, match_scope);
  char *resolved_match_type = call_facts_type_text(program, match_type, ctx->return_provenance_expr_bindings, ctx->return_provenance_expr_binding_len);
  const Choice *choice = find_choice(program, resolved_match_type);
  free(resolved_match_type);
  if (!choice) return;
  const Param *item_case = find_case(&choice->cases, arm->case_name);
  if (!item_case || !item_case->type) return;
  char *payload_type = call_facts_type_text(program, item_case->type, ctx->return_provenance_expr_bindings, ctx->return_provenance_expr_binding_len);
  scope_add(arm_scope, arm->payload_name, payload_type, false);
  free(payload_type);
}

static void call_facts_collect_stmt(ZBuf *buf, const SourceInput *input, bool *wrote, CheckContext *ctx, const Program *program, const Stmt *stmt, Scope *scope, const char *owner, size_t instantiation_depth, const char *instantiated_by) {
  if (!stmt) return;
  call_facts_collect_expr(buf, input, wrote, ctx, program, stmt->target, scope, owner, instantiation_depth, instantiated_by);
  call_facts_collect_expr(buf, input, wrote, ctx, program, stmt->expr, scope, owner, instantiation_depth, instantiated_by);
  call_facts_collect_expr(buf, input, wrote, ctx, program, stmt->range_end, scope, owner, instantiation_depth, instantiated_by);
  if ((stmt->kind == STMT_LET || stmt->kind == STMT_FOR) && stmt->name) {
    const char *decl_type = stmt->type ? stmt->type : (stmt->resolved_type ? stmt->resolved_type : "Unknown");
    char *type = call_facts_type_text(program, decl_type, ctx ? ctx->return_provenance_expr_bindings : NULL, ctx ? ctx->return_provenance_expr_binding_len : 0);
    scope_add_decl(scope, stmt->name, type, stmt->mutable_binding, stmt->line, stmt->column);
    free(type);
  }
  Scope then_scope = {.parent = scope};
  call_facts_collect_stmt_vec(buf, input, wrote, ctx, program, &stmt->then_body, &then_scope, owner, instantiation_depth, instantiated_by);
  scope_free(&then_scope);
  Scope else_scope = {.parent = scope};
  call_facts_collect_stmt_vec(buf, input, wrote, ctx, program, &stmt->else_body, &else_scope, owner, instantiation_depth, instantiated_by);
  scope_free(&else_scope);
  for (size_t i = 0; i < stmt->match_arms.len; i++) {
    MatchArm *arm = &stmt->match_arms.items[i];
    Scope arm_scope = {.parent = scope};
    call_facts_collect_expr(buf, input, wrote, ctx, program, arm->guard, &arm_scope, owner, instantiation_depth, instantiated_by);
    call_facts_seed_match_payload_scope(ctx, program, stmt, arm, scope, &arm_scope);
    call_facts_collect_stmt_vec(buf, input, wrote, ctx, program, &arm->body, &arm_scope, owner, instantiation_depth, instantiated_by);
    scope_free(&arm_scope);
  }
}

static void call_facts_collect_stmt_vec(ZBuf *buf, const SourceInput *input, bool *wrote, CheckContext *ctx, const Program *program, const StmtVec *body, Scope *scope, const char *owner, size_t instantiation_depth, const char *instantiated_by) {
  for (size_t i = 0; body && i < body->len; i++) {
    call_facts_collect_stmt(buf, input, wrote, ctx, program, body->items[i], scope, owner, instantiation_depth, instantiated_by);
  }
}

static void call_facts_collect_function(ZBuf *buf, const SourceInput *input, bool *wrote, const Program *program, const Shape *shape, const Function *fun) {
  Scope scope = {0};
  call_facts_seed_scope(program, &scope, shape, fun, NULL, 0);
  CheckContext ctx = {.program = program, .function = fun, .shape = shape};
  char owner[192];
  if (shape) snprintf(owner, sizeof(owner), "%s.%s", shape->name, fun->name);
  else snprintf(owner, sizeof(owner), "%s", fun ? fun->name : "");
  call_facts_collect_stmt_vec(buf, input, wrote, &ctx, program, fun ? &fun->body : NULL, &scope, owner, 0, NULL);
  scope_free(&scope);
}

static void call_facts_collect_shape_defaults(ZBuf *buf, const SourceInput *input, bool *wrote, const Program *program, const Shape *shape) {
  if (!shape) return;
  Scope scope = {0};
  call_facts_seed_scope(program, &scope, shape, NULL, NULL, 0);
  CheckContext ctx = {.program = program, .shape = shape};
  for (size_t field_index = 0; field_index < shape->fields.len; field_index++) {
    const Param *field = &shape->fields.items[field_index];
    if (!field->default_value) continue;
    char owner[192];
    snprintf(owner, sizeof(owner), "%s.%s", shape->name ? shape->name : "", field->name ? field->name : "");
    call_facts_collect_expr(buf, input, wrote, &ctx, program, field->default_value, &scope, owner, 0, NULL);
  }
  scope_free(&scope);
}

static void call_facts_collect_consts(ZBuf *buf, const SourceInput *input, bool *wrote, const Program *program) {
  Scope scope = {0};
  CheckContext ctx = {.program = program};
  for (size_t i = 0; program && i < program->consts.len; i++) {
    ConstDecl *item = &program->consts.items[i];
    call_facts_collect_expr(buf, input, wrote, &ctx, program, item->expr, &scope, item->name ? item->name : "", 0, NULL);
    const char *type = item->type ? item->type : expr_type(&ctx, program, item->expr, &scope);
    scope_add(&scope, item->name, type ? type : "Unknown", false);
  }
  scope_free(&scope);
}

void z_append_call_resolution_facts_json(ZBuf *buf, const SourceInput *input, const Program *program) {
  static const ZCallKind supported_kinds[] = {Z_CALL_FUNCTION, Z_CALL_STDLIB, Z_CALL_RECEIVER, Z_CALL_SHAPE_NAMESPACE, Z_CALL_CONSTRAINED_INTERFACE, Z_CALL_CONCRETE_CONSTRAINED_SHAPE, Z_CALL_CHOICE_CONSTRUCTOR, Z_CALL_C_IMPORT};
  zbuf_append(buf, "{\"schemaVersion\":1,\"supportedKinds\":[");
  for (size_t i = 0; i < sizeof(supported_kinds) / sizeof(supported_kinds[0]); i++) {
    if (i > 0) zbuf_append(buf, ",");
    call_facts_append_json_string(buf, z_call_kind_name(supported_kinds[i]));
  }
  zbuf_append(buf, "],\"calls\":[");
  bool wrote = false;
  call_facts_collect_consts(buf, input, &wrote, program);
  for (size_t i = 0; program && i < program->functions.len; i++) {
    call_facts_collect_function(buf, input, &wrote, program, NULL, &program->functions.items[i]);
  }
  for (size_t shape_index = 0; program && shape_index < program->shapes.len; shape_index++) {
    Shape *shape = &program->shapes.items[shape_index];
    call_facts_collect_shape_defaults(buf, input, &wrote, program, shape);
    for (size_t method_index = 0; method_index < shape->methods.len; method_index++) {
      call_facts_collect_function(buf, input, &wrote, program, shape, &shape->methods.items[method_index]);
    }
  }
  zbuf_append(buf, "]}");
}

static bool function_return_value_provenance(CheckContext *ctx, const Program *program, const Function *fun, GenericBinding *bindings, size_t binding_len, ValueProvenance *origins, bool *may_return);
static bool function_param_index_by_name(const Function *fun, const char *name, size_t *out_index);

static bool type_value_provenance_from_place(
  const Program *program,
  const char *type,
  Scope *scope,
  const char *root,
  Scope *root_scope,
  const char *root_path,
  const char *value_path,
  ValueProvenance *origins,
  size_t depth
) {
  if (!program || !type || !root || !origins || depth > 16) return false;
  bool local_storage = reference_place_origin_is_local_storage(scope, root);
  if (type_is_named_generic(type, "ref") || type_is_named_generic(type, "mutref")) {
    return value_provenance_add_full(origins, root, root_scope ? root_scope : scope_binding_scope(scope, root), type_is_named_generic(type, "mutref"), local_storage, value_path, root_path);
  }
  const char *inner = NULL;
  size_t inner_len = 0;
  if (type_has_generic_arg(type, "Maybe", &inner, &inner_len) ||
      type_has_generic_arg(type, "owned", &inner, &inner_len)) {
    char *inner_type = z_strndup(inner, inner_len);
    const char *prefix = type_has_generic_arg(type, "Maybe", &inner, &inner_len) ? "value" : NULL;
    char *next_value_path = origin_path_join(value_path, prefix);
    char *next_root_path = origin_path_join(root_path, prefix);
    bool added = type_value_provenance_from_place(program, inner_type, scope, root, root_scope, next_root_path, next_value_path, origins, depth + 1);
    free(next_value_path);
    free(next_root_path);
    free(inner_type);
    return added;
  }
  char element_type[160];
  if (fixed_array_type_parts(type, NULL, 0, element_type, sizeof(element_type)) ||
      span_element_text(type, element_type, sizeof(element_type))) {
    char *next_value_path = origin_path_join(value_path, "[*]");
    char *next_root_path = origin_path_join(root_path, "[*]");
    bool added = type_value_provenance_from_place(program, element_type, scope, root, root_scope, next_root_path, next_value_path, origins, depth + 1);
    free(next_value_path);
    free(next_root_path);
    return added;
  }
  const Choice *choice = find_choice(program, type);
  if (choice) {
    bool added = false;
    for (size_t i = 0; i < choice->cases.len; i++) {
      const Param *item_case = &choice->cases.items[i];
      if (!item_case->name || !item_case->type) continue;
      char *next_value_path = origin_path_join(value_path, item_case->name);
      char *next_root_path = origin_path_join(root_path, item_case->name);
      if (type_value_provenance_from_place(program, item_case->type, scope, root, root_scope, next_root_path, next_value_path, origins, depth + 1)) added = true;
      free(next_value_path);
      free(next_root_path);
    }
    return added;
  }
  const Shape *shape = find_shape_for_type(program, type);
  if (shape) {
    bool added = false;
    for (size_t i = 0; i < shape->fields.len; i++) {
      const Param *field = &shape->fields.items[i];
      if (!field->name || !field->type) continue;
      char *field_type = shape_field_type_for_owner(program, shape, type, field);
      char *next_value_path = origin_path_join(value_path, field->name);
      char *next_root_path = origin_path_join(root_path, field->name);
      if (type_value_provenance_from_place(program, field_type, scope, root, root_scope, next_root_path, next_value_path, origins, depth + 1)) added = true;
      free(next_value_path);
      free(next_root_path);
      free(field_type);
    }
    return added;
  }
  return false;
}

static bool maybe_unwrapped_value_provenance(ValueProvenance *out, const ValueProvenance *source) {
  return value_provenance_add_all_under_path(out, source, "value");
}

static bool choice_constructor_value_provenance(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ValueProvenance *origins) {
  if (!program || !expr || !origins) return false;
  ZCallResolution resolution = {0};
  if (!resolve_choice_constructor_call(program, expr, &resolution)) return false;
  const Param *item_case = resolution.choice_case;
  if (!item_case || !item_case->type || expr->args.len != 1) {
    z_call_resolution_free(&resolution);
    return false;
  }
  z_call_resolution_add_arg(&resolution, 0, expr->args.items[0], item_case->type, expr_type(ctx, program, expr->args.items[0], scope));

  ValueProvenance payload_origins = {0};
  bool added = false;
  if (expr_reference_provenance(ctx, program, expr->args.items[0], scope, &payload_origins) ||
      span_view_expr_provenance(ctx, program, expr->args.items[0], scope, item_case->type, &payload_origins)) {
    added = value_provenance_add_all_with_prefix(origins, &payload_origins, item_case->name);
  }
  value_provenance_free(&payload_origins);
  z_call_resolution_free(&resolution);
  return added;
}

static void register_match_payload_binding_provenance(
  CheckContext *ctx,
  const Program *program,
  const Expr *match_expr,
  Scope *match_scope,
  Scope *payload_scope,
  const char *payload_name,
  const char *case_name
) {
  if (!program || !match_expr || !match_scope || !payload_scope || !payload_name || !case_name) return;
  ValueProvenance match_origins = {0};
  if (!expr_reference_provenance(ctx, program, match_expr, match_scope, &match_origins)) {
    value_provenance_free(&match_origins);
    return;
  }
  ValueProvenance payload_origins = {0};
  if (value_provenance_add_all_under_path(&payload_origins, &match_origins, case_name)) {
    scope_set_value_provenance(payload_scope, payload_name, &payload_origins);
  }
  value_provenance_free(&payload_origins);
  value_provenance_free(&match_origins);
}

static bool std_mem_get_value_provenance(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ValueProvenance *origins) {
  if (!program || !expr || expr->kind != EXPR_CALL || !expr->left || expr->left->kind != EXPR_MEMBER || expr->args.len < 1) return false;
  ZCallResolution resolution = {0};
  if (!resolve_stdlib_call(expr, &resolution)) return false;
  bool added = false;
  if (z_std_helper_kind(resolution.std_helper) != Z_STD_HELPER_KIND_MEM_GET) goto done;

  const Expr *collection = expr->args.items[0];
  z_call_resolution_add_arg(&resolution, 0, collection, z_call_resolution_param_type(&resolution, 0), expr_type(ctx, program, collection, scope));
  ValueProvenance collection_provenance = {0};
  if (expr_reference_provenance(ctx, program, collection, scope, &collection_provenance)) {
    ValueProvenance element_provenance = {0};
    if (value_provenance_add_all_under_path(&element_provenance, &collection_provenance, "[*]")) {
      if (value_provenance_add_all_with_prefix(origins, &element_provenance, "value")) added = true;
    }
    value_provenance_free(&element_provenance);
  }
  value_provenance_free(&collection_provenance);
  if (added) goto done;

  char root[128], path[256], element_type[160];
  if (!expr_binding_path(collection, root, sizeof(root), path, sizeof(path)) ||
      !scope_has(scope, root) ||
      !index_element_type(expr_type(ctx, program, collection, scope), element_type, sizeof(element_type))) goto done;
  char *element_path = origin_path_join(path, "[*]");
  added = type_value_provenance_from_place(program, element_type, scope, root, scope_binding_scope(scope, root), element_path, "value", origins, 0);
  free(element_path);
done:
  z_call_resolution_free(&resolution);
  return added;
}

static bool stdlib_return_type_is_borrowed_view(const char *return_type, const char **value_prefix) {
  if (value_prefix) *value_prefix = NULL;
  if (!return_type) return false;
  char element_type[128];
  const char *inner = NULL;
  size_t inner_len = 0;
  if (type_has_generic_arg(return_type, "Maybe", &inner, &inner_len)) {
    char inner_type[160];
    snprintf(inner_type, sizeof(inner_type), "%.*s", (int)inner_len, inner);
    if (!readable_view_element_text(inner_type, element_type, sizeof(element_type))) return false;
    if (value_prefix) *value_prefix = "value";
    return true;
  }
  return readable_view_element_text(return_type, element_type, sizeof(element_type));
}

static bool stdlib_borrowed_result_arg_index(const ZStdHelperInfo *helper, size_t *arg_index) {
  if (!helper || !helper->name || !arg_index) return false;
  const char *behavior = helper->allocation_behavior ? helper->allocation_behavior : "";
  if (strncmp(behavior, "borrows input", strlen("borrows input")) == 0 ||
      strncmp(behavior, "borrows/static", strlen("borrows/static")) == 0 ||
      strncmp(behavior, "borrows owned buffer", strlen("borrows owned buffer")) == 0 ||
      strncmp(behavior, "writes caller buffer", strlen("writes caller buffer")) == 0 ||
      strncmp(behavior, "writes non-overlapping caller buffer", strlen("writes non-overlapping caller buffer")) == 0) {
    *arg_index = 0;
    return true;
  }
  return false;
}

static bool stdlib_result_value_provenance(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ValueProvenance *origins) {
  if (!program || !expr || expr->kind != EXPR_CALL || !expr->left || !origins) return false;
  ZCallResolution resolution = {0};
  bool added = false;
  if (!resolve_stdlib_call(expr, &resolution) || z_call_resolution_expected_arg_count(&resolution) != expr->args.len || !check_stdlib_known_call_expected(ctx, program, expr, scope, &(ZDiag){0}, &resolution)) goto done;
  const char *value_prefix = NULL;
  size_t arg_index = 0;
  if (!stdlib_return_type_is_borrowed_view(resolution.return_type, &value_prefix) ||
      !stdlib_borrowed_result_arg_index(resolution.std_helper, &arg_index) ||
      arg_index >= expr->args.len) {
    goto done;
  }
  const Expr *arg = expr->args.items[arg_index];
  const char *arg_type = z_call_resolution_param_type(&resolution, arg_index);
  if (!arg_type && resolution.std_helper && arg_index < Z_STD_HELPER_MAX_ARGS) arg_type = resolution.std_helper->arg_types[arg_index];
  ValueProvenance arg_origins = {0};
  if (expr_reference_provenance(ctx, program, arg, scope, &arg_origins) ||
      (arg_type && span_view_expr_provenance(ctx, program, arg, scope, arg_type, &arg_origins))) {
    if (value_prefix) {
      if (value_provenance_add_all_with_prefix(origins, &arg_origins, value_prefix)) added = true;
    } else if (value_provenance_add_all(origins, &arg_origins)) {
      added = true;
    }
  }
  value_provenance_free(&arg_origins);
done:
  z_call_resolution_free(&resolution);
  return added;
}

static bool value_provenance_add_actual_place(ValueProvenance *origins, const Expr *actual, Scope *scope, const ProvenanceEntry *summary_entry) {
  if (!origins || !actual || !scope || !summary_entry) return false;
  char root[128];
  char path[256];
  if (!expr_binding_path(actual, root, sizeof(root), path, sizeof(path)) || !scope_has(scope, root)) return false;
  char *origin_path = origin_path_join(path, summary_entry->origin.path);
  bool local_storage = borrow_expr_source_is_local_storage(actual, scope, root);
  bool added = value_provenance_add_full(
    origins,
    root,
    scope_binding_scope(scope, root),
    summary_entry->mutable_borrow,
    local_storage,
    summary_entry->value_path,
    origin_path
  );
  free(origin_path);
  return added;
}

static bool instantiate_call_provenance_entry(CheckContext *ctx, const Program *program, const ResolvedProvenanceCall *resolved, Scope *scope, const ProvenanceEntry *summary_entry, ValueProvenance *out);

static bool call_result_value_provenance(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ValueProvenance *origins) {
  if (!program || !expr || expr->kind != EXPR_CALL || !expr->left || !origins) return false;
  if (std_mem_get_value_provenance(ctx, program, expr, scope, origins)) return true;
  if (stdlib_result_value_provenance(ctx, program, expr, scope, origins)) return true;
  const char *return_type = expr_type(ctx, program, expr, scope);
  bool return_mut = type_is_named_generic(return_type, "mutref");

  ResolvedProvenanceCall resolved = {0};
  if (!resolve_provenance_call(ctx, program, expr, scope, return_type, ctx ? ctx->function : NULL, ctx ? ctx->return_provenance_expr_bindings : NULL, ctx ? ctx->return_provenance_expr_binding_len : 0, &resolved)) return false;

  bool added = false;
  ValueProvenance summary = {0};
  bool callee_may_return = true;
  if (function_return_value_provenance(ctx, program, resolved.resolution.callee, resolved.bindings, resolved.binding_len, &summary, &callee_may_return)) {
    for (size_t origin_index = 0; origin_index < summary.len; origin_index++) {
      if (instantiate_call_provenance_entry(ctx, program, &resolved, scope, &summary.items[origin_index], origins)) added = true;
    }
  }
  value_provenance_free(&summary);
  if (added) {
    resolved_provenance_call_free(&resolved);
    return true;
  }
  if (!callee_may_return) {
    resolved_provenance_call_free(&resolved);
    return false;
  }

  if (!return_mut && !type_is_named_generic(return_type, "ref")) {
    resolved_provenance_call_free(&resolved);
    return false;
  }

  if (resolved.resolution.receiver_expr && resolved.resolution.callee->params.len > 0) {
    char *param_type = resolved_call_param_type_text(program, &resolved, 0);
    if (type_is_named_generic(param_type, "ref") || type_is_named_generic(param_type, "mutref")) {
      if (expr_reference_provenance_as(ctx, program, resolved.resolution.receiver_expr, scope, origins, return_mut)) {
        added = true;
      } else {
        char root[128];
        if (expr_root_ident(resolved.resolution.receiver_expr, root, sizeof(root)) && scope_has(scope, root)) {
          if (value_provenance_add(origins, root, scope_binding_scope(scope, root), return_mut, reference_source_origin_is_local_storage(scope, root))) added = true;
        }
      }
    }
    free(param_type);
  }

  for (size_t i = 0; i < expr->args.len && i + resolved.resolution.param_offset < resolved.resolution.callee->params.len; i++) {
    char *param_type = resolved_call_param_type_text(program, &resolved, i + resolved.resolution.param_offset);
    bool reference_param = type_is_named_generic(param_type, "ref") || type_is_named_generic(param_type, "mutref");
    free(param_type);
    if (!reference_param) continue;
    if (expr_reference_provenance_as(ctx, program, expr->args.items[i], scope, origins, return_mut)) added = true;
  }
  resolved_provenance_call_free(&resolved);
  return added;
}

static bool expr_reference_provenance(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ValueProvenance *origins) {
  if (!expr || !origins) return false;
  if (expr_value_provenance(expr, scope, origins) ||
      choice_constructor_value_provenance(ctx, program, expr, scope, origins) ||
      call_result_value_provenance(ctx, program, expr, scope, origins)) return true;
  if (expr->kind == EXPR_IDENT) {
    const char *actual = scope_type(scope, expr->text);
    if (actual && type_value_provenance_from_place(program, actual, scope, expr->text, scope_binding_scope(scope, expr->text), NULL, NULL, origins, 0)) return true;
  }
  if (expr->kind == EXPR_CHECK) {
    ValueProvenance checked_provenance = {0};
    bool added = false;
    if (expr_reference_provenance(ctx, program, expr->left, scope, &checked_provenance)) {
      const char *checked_type = expr_type(ctx, program, expr->left, scope);
      const char *inner = NULL;
      size_t inner_len = 0;
      if (type_has_generic_arg(checked_type, "Maybe", &inner, &inner_len)) {
        added = maybe_unwrapped_value_provenance(origins, &checked_provenance);
      } else {
        added = value_provenance_add_all(origins, &checked_provenance);
      }
    }
    value_provenance_free(&checked_provenance);
    return added;
  }
  if (expr->kind == EXPR_RESCUE) {
    bool added = false;
    ValueProvenance left_provenance = {0};
    if (expr_reference_provenance(ctx, program, expr->left, scope, &left_provenance)) {
      const char *left_type = expr_type(ctx, program, expr->left, scope);
      const char *inner = NULL;
      size_t inner_len = 0;
      if (type_has_generic_arg(left_type, "Maybe", &inner, &inner_len)) {
        if (maybe_unwrapped_value_provenance(origins, &left_provenance)) added = true;
      } else if (value_provenance_add_all(origins, &left_provenance)) {
        added = true;
      }
    }
    value_provenance_free(&left_provenance);
    ValueProvenance fallback_provenance = {0};
    if (expr_reference_provenance(ctx, program, expr->right, scope, &fallback_provenance)) {
      if (value_provenance_add_all(origins, &fallback_provenance)) added = true;
    }
    value_provenance_free(&fallback_provenance);
    return added;
  }
  if (expr->kind == EXPR_CAST) return expr_reference_provenance(ctx, program, expr->left, scope, origins);
  if (expr->kind == EXPR_MEMBER) {
    char root[128];
    char path[256];
    const char *member_type = expr_type(ctx, program, expr, scope);
    if (expr_binding_path(expr, root, sizeof(root), path, sizeof(path))) {
      ValueProvenance binding_origins = {0};
      bool has_binding_origins = scope_copy_value_provenance(scope, root, &binding_origins);
      bool added = value_provenance_add_all_under_path(origins, &binding_origins, path);
      const char *root_type = scope_type(scope, root);
      if (!added && has_binding_origins && origin_path_text(path)[0] &&
          (type_is_named_generic(root_type, "ref") || type_is_named_generic(root_type, "mutref"))) {
        PlaceVec places = {0};
        for (size_t i = 0; i < binding_origins.len; i++) {
          ProvenanceEntry *entry = &binding_origins.items[i];
          if (origin_path_text(entry->value_path)[0]) continue;
          char *place_path = origin_path_join(entry->origin.path, path);
          place_vec_add(&places, entry->origin.root, entry->origin.root_scope, place_path);
          free(place_path);
        }
        for (size_t i = 0; i < places.len; i++) {
          if (place_storage_value_provenance_under_path(ctx, program, scope, &places.items[i], NULL, origins)) added = true;
        }
        place_vec_free(&places);
      }
      value_provenance_free(&binding_origins);
      if (added) return true;
      if (scope_has(scope, root) && type_value_provenance_from_place(program, member_type, scope, root, scope_binding_scope(scope, root), path, NULL, origins, 0)) return true;
      if (has_binding_origins) return false;
    }
    if (type_is_named_generic(member_type, "ref") || type_is_named_generic(member_type, "mutref")) {
      ValueProvenance receiver_origins = {0};
      bool added = false;
      if (expr_reference_provenance(ctx, program, expr->left, scope, &receiver_origins)) {
        added = value_provenance_add_all_under_path(origins, &receiver_origins, expr->text);
      }
      value_provenance_free(&receiver_origins);
      return added;
    }
  }
  if (expr->kind == EXPR_INDEX) {
    char root[128];
    char path[256];
    const char *element_type = expr_type(ctx, program, expr, scope);
    if (expr_binding_path(expr, root, sizeof(root), path, sizeof(path))) {
      ValueProvenance binding_origins = {0};
      bool has_binding_origins = scope_copy_value_provenance(scope, root, &binding_origins);
      bool added = value_provenance_add_all_under_path(origins, &binding_origins, path);
      const char *root_type = scope_type(scope, root);
      if (!added && has_binding_origins && origin_path_text(path)[0] &&
          (type_is_named_generic(root_type, "ref") || type_is_named_generic(root_type, "mutref"))) {
        PlaceVec places = {0};
        for (size_t i = 0; i < binding_origins.len; i++) {
          ProvenanceEntry *entry = &binding_origins.items[i];
          if (origin_path_text(entry->value_path)[0]) continue;
          char *place_path = origin_path_join(entry->origin.path, path);
          place_vec_add(&places, entry->origin.root, entry->origin.root_scope, place_path);
          free(place_path);
        }
        for (size_t i = 0; i < places.len; i++) {
          if (place_storage_value_provenance_under_path(ctx, program, scope, &places.items[i], NULL, origins)) added = true;
        }
        place_vec_free(&places);
      }
      value_provenance_free(&binding_origins);
      if (added) return true;
      if (scope_has(scope, root) && type_value_provenance_from_place(program, element_type, scope, root, scope_binding_scope(scope, root), path, NULL, origins, 0)) return true;
      if (has_binding_origins) return false;
    }
    if (type_is_named_generic(element_type, "ref") || type_is_named_generic(element_type, "mutref")) {
      ValueProvenance receiver_origins = {0};
      bool added = false;
      if (expr_reference_provenance(ctx, program, expr->left, scope, &receiver_origins)) {
        added = value_provenance_add_all_under_path(origins, &receiver_origins, "[*]");
      }
      value_provenance_free(&receiver_origins);
      return added;
    }
  }
  if (expr->kind == EXPR_SHAPE_LITERAL) {
    bool added = false;
    const char *owner_type = expr->resolved_type ? expr->resolved_type : expr->text;
    char owned_owner[160];
    if (owned_inner_text(owner_type, owned_owner, sizeof(owned_owner))) owner_type = owned_owner;
    const Shape *shape = find_shape_for_type(program, type_strip_const(owner_type));
    if (!shape) shape = find_shape(program, expr->text);
    for (size_t i = 0; i < expr->fields.len; i++) {
      FieldInit *field_init = &expr->fields.items[i];
      char *field_type = NULL;
      if (shape) {
        const Param *shape_field = find_shape_field(shape, field_init->name);
        if (shape_field) field_type = shape_field_type_for_owner(program, shape, owner_type, shape_field);
      }
      ValueProvenance field_origins = {0};
      bool collected = expr_reference_provenance(ctx, program, field_init->value, scope, &field_origins);
      if (!collected && field_type) {
        collected = span_view_expr_provenance(ctx, program, field_init->value, scope, field_type, &field_origins);
      }
      if (collected) {
        if (value_provenance_add_all_with_prefix(origins, &field_origins, field_init->name)) added = true;
      }
      value_provenance_free(&field_origins);
      free(field_type);
    }
    return added;
  }
  if (expr->kind == EXPR_ARRAY_LITERAL) {
    bool added = false;
    char element_type[160];
    bool has_element_type = expr->resolved_type &&
      fixed_array_type_parts(expr->resolved_type, NULL, 0, element_type, sizeof(element_type));
    size_t element_count = expr->array_repeat ? (expr->args.len > 0 ? 1 : 0) : expr->args.len;
    for (size_t i = 0; i < element_count; i++) {
      ValueProvenance item_origins = {0};
      bool collected = expr_reference_provenance(ctx, program, expr->args.items[i], scope, &item_origins);
      if (!collected && has_element_type) {
        collected = span_view_expr_provenance(ctx, program, expr->args.items[i], scope, element_type, &item_origins);
      }
      if (collected) {
        char element_path[40];
        snprintf(element_path, sizeof(element_path), "[%zu]", i);
        if (value_provenance_add_all_with_prefix(origins, &item_origins, element_path)) added = true;
      }
      value_provenance_free(&item_origins);
    }
    return added;
  }
  return false;
}

static bool register_borrow_binding(CheckContext *ctx, const Program *program, const Stmt *stmt, Scope *scope) {
  if (!stmt || !stmt->name || !stmt->expr) return false;
  ValueProvenance origins = {0};
  const char *binding_type = stmt->resolved_type ? stmt->resolved_type : stmt->type;
  if (!expr_reference_provenance(ctx, program, stmt->expr, scope, &origins) &&
      !span_view_expr_provenance(ctx, program, stmt->expr, scope, binding_type, &origins)) {
    value_provenance_free(&origins);
    return false;
  }
  if (binding_type && (type_is_named_generic(binding_type, "ref") || type_is_named_generic(binding_type, "mutref"))) {
    bool mut_borrow = type_is_named_generic(binding_type, "mutref");
    for (size_t i = 0; i < origins.len; i++) origins.items[i].mutable_borrow = mut_borrow;
  }
  scope_set_value_provenance(scope, stmt->name, &origins);
  value_provenance_free(&origins);
  return true;
}

static bool collect_assignment_target_places(const Expr *target, Scope *scope, PlaceVec *places) {
  if (!target || !scope || !places) return false;
  char root[128];
  char path[256];
  if (!expr_binding_path(target, root, sizeof(root), path, sizeof(path)) || !scope_has(scope, root)) return false;

  Scope *root_scope = scope_binding_scope(scope, root);
  if (collect_provenance_resolved_places(scope, root_scope, root, path, true, places)) return true;
  return place_vec_add(places, root, root_scope, path);
}

static bool update_borrow_assignment(CheckContext *ctx, const Program *program, const Expr *target, const Expr *value, Scope *scope, ZDiag *diag) {
  diag = check_context_diag(ctx, diag);
  char target_root[128];
  char target_path[256];
  if (!target || !expr_binding_path(target, target_root, sizeof(target_root), target_path, sizeof(target_path)) || !scope_has(scope, target_root)) return true;
  const char *target_type = target->resolved_type ? target->resolved_type : scope_type(scope, target_root);
  PlaceVec targets = {0};
  if (!collect_assignment_target_places(target, scope, &targets)) return true;
  ValueProvenance origins = {0};
  if (expr_reference_provenance(ctx, program, value, scope, &origins) ||
      span_view_expr_provenance(ctx, program, value, scope, target_type, &origins)) {
    for (size_t target_index = 0; target_index < targets.len; target_index++) {
      Scope *target_scope = targets.items[target_index].root_scope ? targets.items[target_index].root_scope : scope_binding_scope(scope, targets.items[target_index].root);
      for (size_t i = 0; i < origins.len; i++) {
        ProvenanceEntry *entry = &origins.items[i];
        Scope *root_scope = entry->origin.root_scope ? entry->origin.root_scope : scope_binding_scope(scope, entry->origin.root);
        if (target_scope && root_scope && !scope_is_ancestor_or_self(root_scope, target_scope)) {
          char actual[256];
          snprintf(actual, sizeof(actual), "reference to shorter-lived local '%s'", entry->origin.root);
          value_provenance_free(&origins);
          place_vec_free(&targets);
          return set_diag_detail(diag, 3030, "cannot assign a reference to a shorter-lived binding", value ? value->line : target->line, value ? value->column : target->column, "borrow source that outlives the reference binding", actual, "keep the reference binding in the same lexical scope as the borrowed value");
        }
      }
    }
    if (type_is_named_generic(target_type, "ref") || type_is_named_generic(target_type, "mutref")) {
      bool mut_borrow = type_is_named_generic(target_type, "mutref");
      for (size_t i = 0; i < origins.len; i++) origins.items[i].mutable_borrow = mut_borrow;
    }
    for (size_t target_index = 0; target_index < targets.len; target_index++) {
      Place *place = &targets.items[target_index];
      scope_set_value_provenance_path_in_scope(scope, place->root_scope, place->root, place->path, &origins);
    }
  } else {
    ValueProvenance empty = {0};
    for (size_t target_index = 0; target_index < targets.len; target_index++) {
      Place *place = &targets.items[target_index];
      scope_set_value_provenance_path_in_scope(scope, place->root_scope, place->root, place->path, &empty);
    }
  }
  value_provenance_free(&origins);
  place_vec_free(&targets);
  return true;
}

typedef struct {
  PlaceVec targets;
  ValueProvenance *previous;
} AssignmentProvenanceSnapshot;

static void assignment_provenance_snapshot_clear(const Expr *target, Scope *scope, AssignmentProvenanceSnapshot *snapshot) {
  if (!snapshot) return;
  *snapshot = (AssignmentProvenanceSnapshot){0};
  if (!target || !scope) return;
  if (!collect_assignment_target_places(target, scope, &snapshot->targets)) return;
  snapshot->previous = z_checked_calloc(snapshot->targets.len, sizeof(ValueProvenance));
  for (size_t i = 0; i < snapshot->targets.len; i++) {
    Place *place = &snapshot->targets.items[i];
    ValueProvenance full = {0};
    if (scope_copy_value_provenance_from_scope(scope, place->root_scope, place->root, &full)) {
      value_provenance_add_all_under_path(&snapshot->previous[i], &full, place->path);
    }
    value_provenance_free(&full);
    ValueProvenance empty = {0};
    scope_set_value_provenance_path_in_scope(scope, place->root_scope, place->root, place->path, &empty);
  }
}

static void assignment_provenance_snapshot_restore(Scope *scope, AssignmentProvenanceSnapshot *snapshot) {
  if (!snapshot) return;
  for (size_t i = 0; i < snapshot->targets.len; i++) {
    Place *place = &snapshot->targets.items[i];
    scope_set_value_provenance_path_in_scope(scope, place->root_scope, place->root, place->path, &snapshot->previous[i]);
    value_provenance_free(&snapshot->previous[i]);
  }
  free(snapshot->previous);
  snapshot->previous = NULL;
  place_vec_free(&snapshot->targets);
}

static size_t function_return_provenance_depth = 0;

// Function provenance summaries are memoized per (function, generic bindings)
// with in-progress markers so call cycles cost linear work instead of
// re-expanding the callee per call site. In-cycle queries answer with the
// same conservative approximation the recursion depth cap produces. A
// generous work budget converts any future divergence in this analysis into
// a clear diagnostic instead of a silent spin.

typedef struct ProvenanceSummaryCacheEntry {
  const Function *fun;
  char *binding_key;
  FunctionProvenanceSummary summary;
  bool ok;
  struct ProvenanceSummaryCacheEntry *next;
} ProvenanceSummaryCacheEntry;

typedef struct {
  const Function *fun;
  char *binding_key;
  bool depends_on_in_progress;
} ProvenanceSummaryFrame;

#define PROVENANCE_SUMMARY_WORK_BUDGET 500000u

static ProvenanceSummaryCacheEntry *provenance_summary_cache = NULL;
static const Program *provenance_summary_cache_program = NULL;
static ProvenanceSummaryFrame *provenance_summary_stack = NULL;
static size_t provenance_summary_stack_len = 0;
static size_t provenance_summary_stack_cap = 0;
static size_t provenance_summary_work = 0;
static bool provenance_summary_budget_exceeded = false;
static char provenance_summary_budget_function[128];
static int provenance_summary_budget_line = 0;
static int provenance_summary_budget_column = 0;

static void provenance_summary_cache_clear(void) {
  ProvenanceSummaryCacheEntry *entry = provenance_summary_cache;
  while (entry) {
    ProvenanceSummaryCacheEntry *next = entry->next;
    free(entry->binding_key);
    function_provenance_summary_free(&entry->summary);
    free(entry);
    entry = next;
  }
  provenance_summary_cache = NULL;
  provenance_summary_cache_program = NULL;
}

static void provenance_summary_state_reset(void) {
  provenance_summary_cache_clear();
  provenance_summary_work = 0;
  provenance_summary_budget_exceeded = false;
  provenance_summary_budget_function[0] = '\0';
  provenance_summary_budget_line = 0;
  provenance_summary_budget_column = 0;
}

static char *provenance_summary_binding_key(GenericBinding *bindings, size_t binding_len) {
  if (!bindings || binding_len == 0) return NULL;
  ZBuf buf;
  zbuf_init(&buf);
  for (size_t i = 0; i < binding_len; i++) {
    zbuf_append(&buf, bindings[i].name ? bindings[i].name : "");
    zbuf_append_char(&buf, '=');
    zbuf_append(&buf, bindings[i].type ? bindings[i].type : "");
    if (bindings[i].is_static) {
      zbuf_append_char(&buf, '#');
      zbuf_append(&buf, bindings[i].static_type ? bindings[i].static_type : "");
    }
    zbuf_append_char(&buf, ';');
  }
  return buf.data;
}

static bool provenance_summary_binding_key_equal(const char *left, const char *right) {
  if (!left && !right) return true;
  if (!left || !right) return false;
  return strcmp(left, right) == 0;
}

static ProvenanceSummaryCacheEntry *provenance_summary_cache_find(const Function *fun, const char *binding_key) {
  for (ProvenanceSummaryCacheEntry *entry = provenance_summary_cache; entry; entry = entry->next) {
    if (entry->fun == fun && provenance_summary_binding_key_equal(entry->binding_key, binding_key)) return entry;
  }
  return NULL;
}

static bool provenance_summary_stack_find(const Function *fun, const char *binding_key, size_t *out_index) {
  for (size_t i = 0; i < provenance_summary_stack_len; i++) {
    if (provenance_summary_stack[i].fun == fun &&
        provenance_summary_binding_key_equal(provenance_summary_stack[i].binding_key, binding_key)) {
      if (out_index) *out_index = i;
      return true;
    }
  }
  return false;
}

static void provenance_summary_taint_frames_above(size_t index) {
  for (size_t i = index + 1; i < provenance_summary_stack_len; i++) {
    provenance_summary_stack[i].depends_on_in_progress = true;
  }
}

static void provenance_summary_taint_all_frames(void) {
  for (size_t i = 0; i < provenance_summary_stack_len; i++) {
    provenance_summary_stack[i].depends_on_in_progress = true;
  }
}

static void function_provenance_summary_copy(FunctionProvenanceSummary *target, const FunctionProvenanceSummary *source) {
  *target = (FunctionProvenanceSummary){
    .may_return = source->may_return,
    .return_complete = source->return_complete,
    .effect_complete = source->effect_complete,
    .callee_local_storage = source->callee_local_storage,
  };
  value_provenance_add_all(&target->return_value, &source->return_value);
  for (size_t i = 0; i < source->storage_effects.len; i++) {
    const ProvenanceStorageEffect *effect = &source->storage_effects.items[i];
    provenance_storage_effect_vec_add(&target->storage_effects, effect->target.root, effect->target.root_scope, effect->target.path, &effect->value, effect->overwrite);
  }
}

static char *return_provenance_type_text(const Program *program, const char *type, GenericBinding *bindings, size_t binding_len) {
  if (!type) return NULL;
  if (bindings && binding_len > 0) return type_substitute_generic_signature(program, type, bindings, binding_len);
  return z_strdup(type);
}

static bool collect_return_expr_provenance(CheckContext *ctx, const Program *program, const Function *fun, const Expr *expr, Scope *scope, GenericBinding *bindings, size_t binding_len, ValueProvenance *out) {
  ValueProvenance origins = {0};
  char *return_type = return_provenance_type_text(program, fun ? fun->return_type : NULL, bindings, binding_len);
  bool added = expr_reference_provenance(ctx, program, expr, scope, &origins) ||
               span_view_expr_provenance(ctx, program, expr, scope, return_type ? return_type : (fun ? fun->return_type : NULL), &origins);
  if (added) added = value_provenance_add_all(out, &origins);
  free(return_type);
  value_provenance_free(&origins);
  return added;
}

static bool collect_return_value_provenance_from_stmt_vec(CheckContext *ctx, const Program *program, const Function *fun, const StmtVec *body, Scope *scope, GenericBinding *bindings, size_t binding_len, ValueProvenance *out, bool *may_return, bool *complete) {
  if (!program || !fun || !body || !scope || !out) {
    if (complete) *complete = false;
    return false;
  }
  bool added = false;
  for (size_t stmt_index = 0; stmt_index < body->len; stmt_index++) {
    const Stmt *stmt = body->items[stmt_index];
    if (!stmt) continue;
    if (stmt->kind == STMT_LET) {
      ZDiag ignored = {0};
      if (!apply_expr_call_storage_effects(ctx, program, stmt->expr, scope, &ignored)) {
        if (complete) *complete = false;
        return added;
      }
      const char *binding_type = stmt->resolved_type ? stmt->resolved_type : stmt->type;
      if (!binding_type && stmt->expr) binding_type = expr_type(ctx, program, stmt->expr, scope);
      char *substituted_type = return_provenance_type_text(program, binding_type, bindings, binding_len);
      if (stmt->name) {
        scope_add(scope, stmt->name, substituted_type ? substituted_type : "Unknown", stmt->mutable_binding);
        register_borrow_binding(ctx, program, stmt, scope);
      }
      free(substituted_type);
      continue;
    }
    if (stmt->kind == STMT_ASSIGN) {
      ZDiag ignored = {0};
      if (!apply_expr_call_storage_effects(ctx, program, stmt->expr, scope, &ignored)) {
        if (complete) *complete = false;
        return added;
      }
      if (!update_borrow_assignment(ctx, program, stmt->target, stmt->expr, scope, &ignored)) {
        if (complete) *complete = false;
        return added;
      }
      continue;
    }
    if (stmt->kind == STMT_RETURN) {
      ZDiag ignored = {0};
      if (!apply_expr_call_storage_effects(ctx, program, stmt->expr, scope, &ignored)) {
        if (complete) *complete = false;
        return added;
      }
      if (may_return) *may_return = true;
      if (collect_return_expr_provenance(ctx, program, fun, stmt->expr, scope, bindings, binding_len, out)) added = true;
      return added;
    }
    if (stmt->kind == STMT_RAISE) {
      if (fun->raises) return added;
      continue;
    }
    if (stmt->kind == STMT_EXPR || stmt->kind == STMT_CHECK || stmt->kind == STMT_DEFER) {
      ZDiag ignored = {0};
      if (!apply_expr_call_storage_effects(ctx, program, stmt->expr, scope, &ignored)) {
        if (complete) *complete = false;
        return added;
      }
      continue;
    }
    if (stmt->kind == STMT_IF) {
      ZDiag ignored = {0};
      if (!apply_expr_call_storage_effects(ctx, program, stmt->expr, scope, &ignored)) {
        if (complete) *complete = false;
        return added;
      }
      bool then_possible = true;
      bool else_possible = true;
      if (stmt->expr && stmt->expr->kind == EXPR_BOOL) {
        then_possible = stmt->expr->bool_value;
        else_possible = !stmt->expr->bool_value;
      }
      ProvenanceScopeSnapshot *before = provenance_scope_snapshot_capture(scope);
      ProvenanceScopeSnapshot *then_after = NULL;
      ProvenanceScopeSnapshot *else_after = NULL;
      if (then_possible) {
        Scope then_scope = {.parent = scope};
        if (collect_return_value_provenance_from_stmt_vec(ctx, program, fun, &stmt->then_body, &then_scope, bindings, binding_len, out, may_return, complete)) added = true;
        scope_free(&then_scope);
        then_after = provenance_scope_snapshot_capture(scope);
      }
      provenance_scope_snapshot_restore(before);
      if (else_possible) {
        Scope else_scope = {.parent = scope};
        if (collect_return_value_provenance_from_stmt_vec(ctx, program, fun, &stmt->else_body, &else_scope, bindings, binding_len, out, may_return, complete)) added = true;
        scope_free(&else_scope);
        else_after = provenance_scope_snapshot_capture(scope);
      }
      ProvenanceScopeSnapshot *states[] = {then_after, else_after};
      bool continues[] = {
        then_possible && !stmt_vec_guarantees_exit(&stmt->then_body, fun->raises),
        else_possible && !stmt_vec_guarantees_exit(&stmt->else_body, fun->raises),
      };
      provenance_scope_snapshot_restore_union(before, states, continues, 2);
      provenance_scope_snapshot_free(then_after);
      provenance_scope_snapshot_free(else_after);
      provenance_scope_snapshot_free(before);
      if (!continues[0] && !continues[1]) return added;
      continue;
    }
    if (stmt->kind == STMT_WHILE) {
      ZDiag ignored = {0};
      if (!apply_expr_call_storage_effects(ctx, program, stmt->expr, scope, &ignored)) {
        if (complete) *complete = false;
        return added;
      }
      ProvenanceScopeSnapshot *before = provenance_scope_snapshot_capture(scope);
      bool body_possible = !(stmt->expr && stmt->expr->kind == EXPR_BOOL && !stmt->expr->bool_value);
      ProvenanceScopeSnapshot *body_after = NULL;
      if (body_possible) {
        Scope body_scope = {.parent = scope};
        if (collect_return_value_provenance_from_stmt_vec(ctx, program, fun, &stmt->then_body, &body_scope, bindings, binding_len, out, may_return, complete)) added = true;
        scope_free(&body_scope);
        body_after = provenance_scope_snapshot_capture(scope);
      }
      ProvenanceScopeSnapshot *states[] = {before, body_after};
      bool continues[] = {true, body_possible && !stmt_vec_guarantees_exit(&stmt->then_body, fun->raises)};
      provenance_scope_snapshot_restore_union(before, states, continues, 2);
      provenance_scope_snapshot_free(body_after);
      provenance_scope_snapshot_free(before);
      continue;
    }
    if (stmt->kind == STMT_FOR) {
      ZDiag ignored = {0};
      if (!apply_expr_call_storage_effects(ctx, program, stmt->expr, scope, &ignored) ||
          !apply_expr_call_storage_effects(ctx, program, stmt->range_end, scope, &ignored)) {
        if (complete) *complete = false;
        return added;
      }
      ProvenanceScopeSnapshot *before = provenance_scope_snapshot_capture(scope);
      Scope body_scope = {.parent = scope};
      const char *iter_type = stmt->resolved_type ? stmt->resolved_type : (stmt->expr ? expr_type(ctx, program, stmt->expr, scope) : "Unknown");
      char *substituted_iter_type = return_provenance_type_text(program, iter_type, bindings, binding_len);
      if (stmt->name) scope_add(&body_scope, stmt->name, substituted_iter_type ? substituted_iter_type : "Unknown", false);
      free(substituted_iter_type);
      if (collect_return_value_provenance_from_stmt_vec(ctx, program, fun, &stmt->then_body, &body_scope, bindings, binding_len, out, may_return, complete)) added = true;
      scope_free(&body_scope);
      ProvenanceScopeSnapshot *body_after = provenance_scope_snapshot_capture(scope);
      ProvenanceScopeSnapshot *states[] = {before, body_after};
      bool continues[] = {true, !stmt_vec_guarantees_exit(&stmt->then_body, fun->raises)};
      provenance_scope_snapshot_restore_union(before, states, continues, 2);
      provenance_scope_snapshot_free(body_after);
      provenance_scope_snapshot_free(before);
      continue;
    }
    if (stmt->kind == STMT_MATCH) {
      ZDiag ignored = {0};
      if (!apply_expr_call_storage_effects(ctx, program, stmt->expr, scope, &ignored)) {
        if (complete) *complete = false;
        return added;
      }
      ProvenanceScopeSnapshot *before = provenance_scope_snapshot_capture(scope);
      ProvenanceScopeSnapshot **arm_states = z_checked_calloc(stmt->match_arms.len, sizeof(ProvenanceScopeSnapshot *));
      bool *arm_continues = z_checked_calloc(stmt->match_arms.len, sizeof(bool));
      const char *match_type = stmt->resolved_type ? stmt->resolved_type : (stmt->expr ? expr_type(ctx, program, stmt->expr, scope) : "Unknown");
      const Choice *item_choice = find_choice(program, match_type);
      for (size_t arm_index = 0; arm_index < stmt->match_arms.len; arm_index++) {
        provenance_scope_snapshot_restore(before);
        const MatchArm *arm = &stmt->match_arms.items[arm_index];
        Scope arm_scope = {.parent = scope};
        if (arm->payload_name && item_choice) {
          const Param *item_case = find_case(&item_choice->cases, arm->case_name);
          if (item_case && item_case->type) {
            char *payload_type = return_provenance_type_text(program, item_case->type, bindings, binding_len);
            scope_add(&arm_scope, arm->payload_name, payload_type ? payload_type : "Unknown", false);
            register_match_payload_binding_provenance(ctx, program, stmt->expr, scope, &arm_scope, arm->payload_name, arm->case_name);
            free(payload_type);
          }
        }
        if (collect_return_value_provenance_from_stmt_vec(ctx, program, fun, &arm->body, &arm_scope, bindings, binding_len, out, may_return, complete)) added = true;
        scope_free(&arm_scope);
        arm_states[arm_index] = provenance_scope_snapshot_capture(scope);
        arm_continues[arm_index] = !stmt_vec_guarantees_exit(&arm->body, fun->raises);
      }
      provenance_scope_snapshot_restore_union(before, arm_states, arm_continues, stmt->match_arms.len);
      bool any_arm_continues = false;
      for (size_t i = 0; i < stmt->match_arms.len; i++) {
        if (arm_continues[i]) any_arm_continues = true;
      }
      for (size_t i = 0; i < stmt->match_arms.len; i++) provenance_scope_snapshot_free(arm_states[i]);
      free(arm_states);
      free(arm_continues);
      provenance_scope_snapshot_free(before);
      if (!any_arm_continues) return added;
      continue;
    }
  }
  return added;
}

static bool seed_param_storage_value_provenance(const Program *program, Scope *scope, const char *name, const char *type) {
  if (!program || !scope || !name || !type) return false;
  const char *storage_type = type;
  char ref_inner[192];
  if (named_ref_inner_text(type, "ref", ref_inner, sizeof(ref_inner)) ||
      named_ref_inner_text(type, "mutref", ref_inner, sizeof(ref_inner))) {
    storage_type = ref_inner;
  }
  ValueProvenance seed = {0};
  bool added = type_value_provenance_from_place(program, storage_type, scope, name, scope_binding_scope(scope, name), NULL, NULL, &seed, 0);
  if (added) scope_set_value_provenance(scope, name, &seed);
  value_provenance_free(&seed);
  return added;
}

static bool function_provenance_summary_compute(CheckContext *ctx, const Program *program, const Function *fun, GenericBinding *bindings, size_t binding_len, FunctionProvenanceSummary *summary) {
  summary->may_return = false;
  summary->return_complete = true;
  summary->effect_complete = true;
  function_return_provenance_depth++;
  CheckContext summary_ctx = ctx ? *ctx : (CheckContext){0};
  summary_ctx.return_provenance_expr_bindings = bindings;
  summary_ctx.return_provenance_expr_binding_len = binding_len;
  summary_ctx.function = fun;
  Scope scope = {0};
  for (size_t param_index = 0; param_index < fun->params.len; param_index++) {
    const Param *param = &fun->params.items[param_index];
    if (param->name) {
      char *param_type = return_provenance_type_text(program, param->type, bindings, binding_len);
      scope_add_param_decl(&scope, param->name, param_type ? param_type : "Unknown", param->line, param->column);
      if (type_is_named_generic(param_type, "mutref") || type_is_named_generic(param_type, "MutSpan")) {
        seed_param_storage_value_provenance(program, &scope, param->name, param_type ? param_type : "Unknown");
      }
      free(param_type);
    }
  }

  bool body_complete = true;
  collect_return_value_provenance_from_stmt_vec(&summary_ctx, program, fun, &fun->body, &scope, bindings, binding_len, &summary->return_value, &summary->may_return, &body_complete);
  if (!body_complete) {
    summary->return_complete = false;
    summary->effect_complete = false;
  }
  for (size_t param_index = 0; param_index < fun->params.len; param_index++) {
    const Param *param = &fun->params.items[param_index];
    if (!param->name) continue;
    char *param_type = call_param_type_text(program, fun, param_index, bindings, binding_len);
    bool mutspan_param = type_is_named_generic(param_type, "MutSpan"), mutating_param = type_is_named_generic(param_type, "mutref") || mutspan_param;
    free(param_type);
    if (!mutating_param) continue;
    ValueProvenance value = {0};
    if (scope_copy_value_provenance(&scope, param->name, &value)) {
      for (size_t i = 0; i < value.len; i++) {
        if (!function_param_index_by_name(fun, value.items[i].origin.root, NULL)) summary->callee_local_storage = true;
      }
      provenance_storage_effect_vec_add(&summary->storage_effects, param->name, NULL, NULL, &value, !mutspan_param);
    }
    value_provenance_free(&value);
  }

  scope_free(&scope);
  function_return_provenance_depth--;
  return summary->return_complete && summary->effect_complete;
}

static bool function_provenance_summary(CheckContext *ctx, const Program *program, const Function *fun, GenericBinding *bindings, size_t binding_len, FunctionProvenanceSummary *summary) {
  if (!summary) return false;
  *summary = (FunctionProvenanceSummary){.may_return = true};
  if (!program || !fun) return false;
  if (program != provenance_summary_cache_program) {
    provenance_summary_cache_clear();
    provenance_summary_cache_program = program;
  }
  char *binding_key = provenance_summary_binding_key(bindings, binding_len);
  ProvenanceSummaryCacheEntry *cached = provenance_summary_cache_find(fun, binding_key);
  if (cached) {
    function_provenance_summary_copy(summary, &cached->summary);
    free(binding_key);
    return cached->ok;
  }
  size_t frame_index = 0;
  if (provenance_summary_stack_find(fun, binding_key, &frame_index)) {
    // In-cycle query: answer with the conservative approximation and keep
    // every summary that observed this in-flight value out of the cache.
    provenance_summary_taint_frames_above(frame_index);
    free(binding_key);
    return false;
  }
  if (function_return_provenance_depth > 16 || provenance_summary_budget_exceeded) {
    provenance_summary_taint_all_frames();
    free(binding_key);
    return false;
  }
  if (++provenance_summary_work > PROVENANCE_SUMMARY_WORK_BUDGET) {
    if (!provenance_summary_budget_exceeded) {
      provenance_summary_budget_exceeded = true;
      snprintf(provenance_summary_budget_function, sizeof(provenance_summary_budget_function), "%s", fun->name ? fun->name : "<anonymous>");
      provenance_summary_budget_line = fun->line;
      provenance_summary_budget_column = fun->column;
    }
    provenance_summary_taint_all_frames();
    free(binding_key);
    return false;
  }
  if (provenance_summary_stack_len + 1 > provenance_summary_stack_cap) {
    provenance_summary_stack_cap = z_grow_capacity(provenance_summary_stack_cap, provenance_summary_stack_len + 1, 16);
    provenance_summary_stack = z_checked_reallocarray(provenance_summary_stack, provenance_summary_stack_cap, sizeof(ProvenanceSummaryFrame));
  }
  provenance_summary_stack[provenance_summary_stack_len++] = (ProvenanceSummaryFrame){
    .fun = fun,
    .binding_key = binding_key,
    .depends_on_in_progress = false,
  };
  bool ok = function_provenance_summary_compute(ctx, program, fun, bindings, binding_len, summary);
  ProvenanceSummaryFrame frame = provenance_summary_stack[--provenance_summary_stack_len];
  if (!frame.depends_on_in_progress && !provenance_summary_budget_exceeded) {
    ProvenanceSummaryCacheEntry *entry = z_checked_calloc(1, sizeof(ProvenanceSummaryCacheEntry));
    entry->fun = fun;
    entry->binding_key = frame.binding_key;
    function_provenance_summary_copy(&entry->summary, summary);
    entry->ok = ok;
    entry->next = provenance_summary_cache;
    provenance_summary_cache = entry;
  } else {
    free(frame.binding_key);
  }
  return ok;
}

static bool function_return_value_provenance(CheckContext *ctx, const Program *program, const Function *fun, GenericBinding *bindings, size_t binding_len, ValueProvenance *origins, bool *may_return) {
  if (may_return) *may_return = true;
  if (!program || !fun || !origins) return false;
  FunctionProvenanceSummary summary = {0};
  bool ok = function_provenance_summary(ctx, program, fun, bindings, binding_len, &summary);
  if (may_return) *may_return = summary.may_return;
  value_provenance_add_all(origins, &summary.return_value);
  function_provenance_summary_free(&summary);
  return ok;
}

static const Expr *call_actual_for_param(const Expr *call, const Expr *receiver, size_t param_offset, size_t param_index) {
  if (receiver && param_offset == 1 && param_index == 0) return receiver;
  if (!call || param_index < param_offset) return NULL;
  size_t arg_index = param_index - param_offset;
  return arg_index < call->args.len ? call->args.items[arg_index] : NULL;
}

static bool function_param_index_by_name(const Function *fun, const char *name, size_t *out_index) {
  if (!fun || !name) return false;
  for (size_t i = 0; i < fun->params.len; i++) {
    if (fun->params.items[i].name && strcmp(fun->params.items[i].name, name) == 0) {
      if (out_index) *out_index = i;
      return true;
    }
  }
  return false;
}

static bool collect_effect_target_places(CheckContext *ctx, const Program *program, const Expr *actual, Scope *scope, PlaceVec *places) {
  if (!program || !actual || !scope || !places) return false;
  bool added = false;
  ValueProvenance direct = {0};
  if (expr_reference_provenance(ctx, program, actual, scope, &direct)) {
    for (size_t i = 0; i < direct.len; i++) {
      ProvenanceEntry *entry = &direct.items[i];
      if (origin_path_text(entry->value_path)[0]) continue;
      if (place_vec_add(places, entry->origin.root, entry->origin.root_scope, entry->origin.path)) added = true;
    }
  }
  value_provenance_free(&direct);
  if (added) return true;

  const Expr *place_expr = actual && actual->kind == EXPR_BORROW ? actual->left : actual;
  char root[128];
  char path[256];
  if (expr_binding_path(place_expr, root, sizeof(root), path, sizeof(path)) && scope_has(scope, root)) {
    return place_vec_add(places, root, scope_binding_scope(scope, root), path);
  }
  return false;
}

static void scope_clear_maybe_guards_for_places(Scope *scope, const PlaceVec *places) {
  if (!scope || !places) return;
  for (size_t i = 0; i < places->len; i++) {
    const Place *place = &places->items[i];
    scope_clear_maybe_present_for_resolved_place(scope, place);
  }
}

static void scope_clear_maybe_guards_for_mutating_actual(CheckContext *ctx, const Program *program, const Expr *actual, Scope *scope) {
  if (!program || !actual || !scope) return;
  PlaceVec places = {0};
  if (collect_effect_target_places(ctx, program, actual, scope, &places)) {
    scope_clear_maybe_guards_for_places(scope, &places);
  }
  place_vec_free(&places);
}

static void scope_clear_maybe_guards_for_resolved_call_mutations(CheckContext *ctx, const Program *program, const Expr *call, Scope *lookup_scope, Scope *guard_scope) {
  if (!program || !call || call->kind != EXPR_CALL || !lookup_scope || !guard_scope) return;
  ResolvedProvenanceCall resolved = {0};
  if (!resolve_provenance_call(ctx, program, call, lookup_scope, expr_type(ctx, program, call, lookup_scope), ctx ? ctx->function : NULL, ctx ? ctx->return_provenance_expr_bindings : NULL, ctx ? ctx->return_provenance_expr_binding_len : 0, &resolved)) {
    resolved_provenance_call_free(&resolved);
    return;
  }
  const ZCallResolution *resolution = &resolved.resolution;
  const Function *callee = resolution->callee;
  for (size_t param_index = 0; callee && param_index < callee->params.len; param_index++) {
    char *param_type = resolved_call_param_type_text(program, &resolved, param_index);
    bool mutating_param = type_is_named_generic(param_type, "mutref") || type_is_named_generic(param_type, "MutSpan");
    free(param_type);
    if (!mutating_param) continue;
    const Expr *actual = call_actual_for_param(call, resolution->receiver_expr, resolution->param_offset, param_index);
    PlaceVec places = {0};
    if (collect_effect_target_places(ctx, program, actual, lookup_scope, &places)) {
      for (size_t i = 0; i < places.len; i++) {
        scope_clear_maybe_present_in_scope_for_resolved_place(guard_scope, lookup_scope, &places.items[i]);
      }
    }
    place_vec_free(&places);
  }
  resolved_provenance_call_free(&resolved);
}

static void scope_clear_maybe_guards_for_mutating_call_args(CheckContext *ctx, const Program *program, const Expr *call, Scope *scope) {
  if (!program || !call || call->kind != EXPR_CALL || !scope) return;
  scope_clear_maybe_guards_for_mutable_borrow_args(call, scope);

  ResolvedProvenanceCall resolved = {0};
  if (!resolve_provenance_call(ctx, program, call, scope, expr_type(ctx, program, call, scope), ctx ? ctx->function : NULL, ctx ? ctx->return_provenance_expr_bindings : NULL, ctx ? ctx->return_provenance_expr_binding_len : 0, &resolved)) {
    resolved_provenance_call_free(&resolved);
    return;
  }
  const ZCallResolution *resolution = &resolved.resolution;
  const Function *callee = resolution->callee;
  for (size_t param_index = 0; callee && param_index < callee->params.len; param_index++) {
    char *param_type = resolved_call_param_type_text(program, &resolved, param_index);
    bool mutating_param = type_is_named_generic(param_type, "mutref") || type_is_named_generic(param_type, "MutSpan");
    free(param_type);
    if (!mutating_param) continue;
    const Expr *actual = call_actual_for_param(call, resolution->receiver_expr, resolution->param_offset, param_index);
    scope_clear_maybe_guards_for_mutating_actual(ctx, program, actual, scope);
  }
  resolved_provenance_call_free(&resolved);
}

static bool place_storage_value_provenance_under_path(CheckContext *ctx, const Program *program, Scope *scope, const Place *place, const char *relative_path, ValueProvenance *out) {
  (void)ctx;
  if (!program || !scope || !place || !place->root || !out) return false;
  bool added = false;
  char *full_path = origin_path_join(place->path, relative_path);

  ValueProvenance existing = {0};
  if (scope_copy_value_provenance_from_scope(scope, place->root_scope, place->root, &existing)) {
    if (value_provenance_add_all_under_path(out, &existing, full_path)) added = true;
  }
  value_provenance_free(&existing);

  if (!added) {
    const char *root_type = scope_type_in_binding_scope(scope, place->root_scope, place->root);
    char storage_type[192];
    if (named_ref_inner_text(root_type, "ref", storage_type, sizeof(storage_type)) ||
        named_ref_inner_text(root_type, "mutref", storage_type, sizeof(storage_type))) {
      root_type = storage_type;
    }
    ValueProvenance typed = {0};
    if (type_value_provenance_from_place(program, root_type, scope, place->root, place->root_scope ? place->root_scope : scope_binding_scope(scope, place->root), NULL, NULL, &typed, 0)) {
      if (value_provenance_add_all_under_path(out, &typed, full_path)) added = true;
    }
    value_provenance_free(&typed);
  }

  free(full_path);
  return added;
}

static bool actual_storage_value_provenance_under_path(CheckContext *ctx, const Program *program, const Expr *actual, Scope *scope, const char *relative_path, ValueProvenance *out) {
  if (!program || !actual || !scope || !out) return false;
  bool added = false;
  PlaceVec places = {0};
  if (collect_effect_target_places(ctx, program, actual, scope, &places)) {
    for (size_t i = 0; i < places.len; i++) {
      if (place_storage_value_provenance_under_path(ctx, program, scope, &places.items[i], relative_path, out)) added = true;
    }
  }
  place_vec_free(&places);
  return added;
}

static bool instantiate_call_provenance_entry(CheckContext *ctx, const Program *program, const ResolvedProvenanceCall *resolved, Scope *scope, const ProvenanceEntry *summary_entry, ValueProvenance *out) {
  if (!program || !resolved || !resolved->resolution.callee || !resolved->resolution.call_expr || !scope || !summary_entry || !out) return false;
  const ZCallResolution *resolution = &resolved->resolution;
  const Function *callee = resolution->callee;
  const Expr *call = resolution->call_expr;
  size_t param_index = callee->params.len;
  if (!function_param_index_by_name(callee, summary_entry->origin.root, &param_index)) return false;
  const Expr *actual = call_actual_for_param(call, resolution->receiver_expr, resolution->param_offset, param_index);
  if (!actual) return false;

  bool added = false;
  ValueProvenance actual_origins = {0};
  char *param_type = resolved_call_param_type_text(program, resolved, param_index);
  bool reference_param = type_is_named_generic(param_type, "ref") || type_is_named_generic(param_type, "mutref");
  bool view_param = type_is_named_generic(param_type, "Span") || type_is_named_generic(param_type, "MutSpan");
  if (reference_param && callee->params.items[param_index].name &&
      strcmp(callee->params.items[param_index].name, summary_entry->origin.root) == 0) {
    ValueProvenance storage_origins = {0};
    if (actual_storage_value_provenance_under_path(ctx, program, actual, scope, summary_entry->origin.path, &storage_origins)) {
      if (value_provenance_add_all_as_with_prefix(out, &storage_origins, summary_entry->mutable_borrow, summary_entry->value_path)) added = true;
      value_provenance_free(&storage_origins);
      free(param_type);
      return added;
    }
    value_provenance_free(&storage_origins);
  }
  const char *actual_type = expr_type(ctx, program, actual, scope);
  bool actual_ref_like = type_is_named_generic(actual_type, "ref") || type_is_named_generic(actual_type, "mutref");
  char actual_root[128];
  char actual_path[256];
  bool implicit_reference_actual = reference_param && !actual_ref_like &&
    expr_binding_path(actual, actual_root, sizeof(actual_root), actual_path, sizeof(actual_path)) &&
    scope_has(scope, actual_root);
  if (expr_reference_provenance_as(ctx, program, actual, scope, &actual_origins, summary_entry->mutable_borrow) ||
      (view_param && span_view_expr_provenance(ctx, program, actual, scope, param_type, &actual_origins))) {
    ValueProvenance selected_origins = {0};
    ValueProvenance *source_origins = &actual_origins;
    if (summary_entry->origin.path) {
      if (value_provenance_add_all_under_path(&selected_origins, &actual_origins, summary_entry->origin.path)) {
        source_origins = &selected_origins;
      } else if (reference_param) {
        if (implicit_reference_actual) {
          if (value_provenance_add_actual_place(out, actual, scope, summary_entry)) added = true;
        } else if (value_provenance_add_all_as_with_origin_suffix(out, &actual_origins, summary_entry->mutable_borrow, summary_entry->value_path, summary_entry->origin.path)) {
          added = true;
        }
        source_origins = NULL;
      } else {
        source_origins = NULL;
      }
    } else if (implicit_reference_actual) {
      if (value_provenance_add_actual_place(out, actual, scope, summary_entry)) added = true;
      source_origins = NULL;
    }
    if (source_origins && value_provenance_add_all_as_with_prefix(out, source_origins, summary_entry->mutable_borrow, summary_entry->value_path)) added = true;
    value_provenance_free(&selected_origins);
  } else {
    char root[128];
    char path[256];
    if (expr_binding_path(actual, root, sizeof(root), path, sizeof(path)) && scope_has(scope, root)) {
      if (reference_param) {
        if (value_provenance_add_actual_place(out, actual, scope, summary_entry)) added = true;
      } else if (view_param && (type_is_named_generic(actual_type, "Span") || type_is_named_generic(actual_type, "MutSpan"))) {
        added = false;
      } else {
        char *origin_path = origin_path_join(path, summary_entry->origin.path);
        bool local_storage = summary_entry->origin.path ? reference_place_origin_is_local_storage(scope, root) : reference_source_origin_is_local_storage(scope, root);
        if (value_provenance_add_full(out, root, scope_binding_scope(scope, root), summary_entry->mutable_borrow, local_storage, summary_entry->value_path, origin_path)) added = true;
        free(origin_path);
      }
    }
  }
  free(param_type);
  value_provenance_free(&actual_origins);
  return added;
}

static bool validate_installed_provenance_lifetimes(Scope *scope, const char *target_root, Scope *target_root_scope, const ValueProvenance *origins, const Expr *site, ZDiag *diag) {
  if (!scope || !target_root || !origins) return true;
  Scope *target_scope = target_root_scope ? target_root_scope : scope_binding_scope(scope, target_root);
  for (size_t i = 0; i < origins->len; i++) {
    const ProvenanceEntry *entry = &origins->items[i];
    Scope *root_scope = entry->origin.root_scope ? entry->origin.root_scope : scope_binding_scope(scope, entry->origin.root);
    if (target_scope && root_scope && !scope_is_ancestor_or_self(root_scope, target_scope)) {
      char actual[256];
      snprintf(actual, sizeof(actual), "reference to shorter-lived local '%s'", entry->origin.root);
      return set_diag_detail(diag, 3030, "cannot store a reference to a shorter-lived binding through receiver method call", site ? site->line : 0, site ? site->column : 0, "borrow source that outlives the receiver storage", actual, "keep the receiver in the same lexical scope as the borrowed value");
    }
  }
  return true;
}

static bool function_storage_effect_summary(CheckContext *ctx, const Program *program, const Function *fun, GenericBinding *bindings, size_t binding_len, ProvenanceStorageEffectVec *effects) {
  if (!program || !fun || !effects) return false;
  FunctionProvenanceSummary summary = {0};
  bool ok = function_provenance_summary(ctx, program, fun, bindings, binding_len, &summary);
  for (size_t i = 0; i < summary.storage_effects.len; i++) {
    ProvenanceStorageEffect *effect = &summary.storage_effects.items[i];
    provenance_storage_effect_vec_add(effects, effect->target.root, effect->target.root_scope, effect->target.path, &effect->value, effect->overwrite);
  }
  function_provenance_summary_free(&summary);
  return ok;
}

static bool apply_provenance_storage_effect(CheckContext *ctx, const Program *program, const ResolvedProvenanceCall *resolved, const ProvenanceStorageEffect *effect, Scope *scope, ZDiag *diag) {
  diag = check_context_diag(ctx, diag);
  if (!program || !resolved || !resolved->resolution.callee || !resolved->resolution.call_expr || !effect || !scope) return true;
  const ZCallResolution *resolution = &resolved->resolution;
  size_t param_index = resolution->callee->params.len;
  if (!function_param_index_by_name(resolution->callee, effect->target.root, &param_index)) return true;
  const Expr *actual = call_actual_for_param(resolution->call_expr, resolution->receiver_expr, resolution->param_offset, param_index);
  if (!actual) return true;

  PlaceVec targets = {0};
  if (!collect_effect_target_places(ctx, program, actual, scope, &targets)) {
    place_vec_free(&targets);
    return true;
  }

  ValueProvenance instantiated = {0};
  for (size_t i = 0; i < effect->value.len; i++) {
    const ProvenanceEntry *entry = &effect->value.items[i];
    if (!function_param_index_by_name(resolution->callee, entry->origin.root, NULL)) {
      char actual_detail[256];
      snprintf(actual_detail, sizeof(actual_detail), "reference to callee-local '%s'", entry->origin.root ? entry->origin.root : "<unknown>");
      value_provenance_free(&instantiated);
      place_vec_free(&targets);
      return set_diag_detail(diag, 3030, "cannot store a reference to a callee-local binding through a mutable parameter", resolution->call_expr->line, resolution->call_expr->column, "borrow source that outlives the call", actual_detail, "store only references derived from caller-owned arguments into mutable parameter storage");
    }
    instantiate_call_provenance_entry(ctx, program, resolved, scope, entry, &instantiated);
  }
  if (instantiated.len == 0) {
    value_provenance_free(&instantiated);
    place_vec_free(&targets);
    return true;
  }

  for (size_t i = 0; i < targets.len; i++) {
    Place *target = &targets.items[i];
    char *target_path = origin_path_join(target->path, effect->target.path);
    ValueProvenance target_effects = {0};
    if (!effect->overwrite || targets.len > 1) {
      place_storage_value_provenance_under_path(ctx, program, scope, target, effect->target.path, &target_effects);
    }
    value_provenance_add_all(&target_effects, &instantiated);
    if (!validate_installed_provenance_lifetimes(scope, target->root, target->root_scope, &target_effects, resolution->call_expr, diag)) {
      free(target_path);
      value_provenance_free(&target_effects);
      value_provenance_free(&instantiated);
      place_vec_free(&targets);
      return false;
    }
    value_provenance_free(&target_effects);
    free(target_path);
  }

  for (size_t i = 0; i < targets.len; i++) {
    Place *target = &targets.items[i];
    char *target_path = origin_path_join(target->path, effect->target.path);
    ValueProvenance target_effects = {0};
    if (!effect->overwrite || targets.len > 1) {
      place_storage_value_provenance_under_path(ctx, program, scope, target, effect->target.path, &target_effects);
    }
    value_provenance_add_all(&target_effects, &instantiated);
    scope_set_value_provenance_path_in_scope(scope, target->root_scope, target->root, target_path, &target_effects);
    value_provenance_free(&target_effects);
    free(target_path);
  }

  value_provenance_free(&instantiated);
  place_vec_free(&targets);
  return true;
}

static bool apply_provenance_call_storage_effects(CheckContext *ctx, const Program *program, const ResolvedProvenanceCall *resolved, Scope *scope, ZDiag *diag) {
  diag = check_context_diag(ctx, diag);
  if (!program || !resolved || !resolved->resolution.callee || !resolved->resolution.call_expr || !scope) return true;
  const ZCallResolution *resolution = &resolved->resolution;
  ProvenanceStorageEffectVec effects = {0};
  bool complete = function_storage_effect_summary(ctx, program, resolution->callee, resolved->bindings, resolved->binding_len, &effects);
  if (!complete) {
    for (size_t i = 0; i < resolution->callee->params.len; i++) {
      char *param_type = resolved_call_param_type_text(program, resolved, i);
      bool mutating_param = type_is_named_generic(param_type, "mutref") || type_is_named_generic(param_type, "MutSpan");
      free(param_type);
      if (!mutating_param) continue;
      provenance_storage_effect_vec_free(&effects);
      return set_diag_detail(diag, 3030, "cannot verify provenance effects for mutable parameter call", resolution->call_expr->line, resolution->call_expr->column, "complete provenance summary", "recursive or incomplete mutable parameter summary", "simplify the call cycle or keep reference-storing mutable calls non-recursive");
    }
  }
  bool ok = true;
  for (size_t i = 0; ok && i < effects.len; i++) {
    ok = apply_provenance_storage_effect(ctx, program, resolved, &effects.items[i], scope, diag);
  }
  provenance_storage_effect_vec_free(&effects);
  return ok;
}

static bool apply_checked_call_storage_effects(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag) {
  diag = check_context_diag(ctx, diag);
  if (!program || !expr || expr->kind != EXPR_CALL || !expr->left || !scope) return true;
  ResolvedProvenanceCall resolved = {0};
  if (!resolve_provenance_call(ctx, program, expr, scope, expr_type(ctx, program, expr, scope), ctx ? ctx->function : NULL, ctx ? ctx->return_provenance_expr_bindings : NULL, ctx ? ctx->return_provenance_expr_binding_len : 0, &resolved)) return true;
  bool ok = apply_provenance_call_storage_effects(ctx, program, &resolved, scope, diag);
  resolved_provenance_call_free(&resolved);
  return ok;
}

static bool apply_resolved_call_storage_effects(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag) {
  diag = check_context_diag(ctx, diag);
  return apply_checked_call_storage_effects(ctx, program, expr, scope, diag);
}

static bool apply_expr_call_storage_effects(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag) {
  diag = check_context_diag(ctx, diag);
  if (!program || !expr || !scope) return true;
  if (expr->kind == EXPR_RESCUE) {
    if (!apply_expr_call_storage_effects(ctx, program, expr->left, scope, diag)) return false;
    ProvenanceScopeSnapshot *before_right = provenance_scope_snapshot_capture(scope);
    if (!apply_expr_call_storage_effects(ctx, program, expr->right, scope, diag)) {
      provenance_scope_snapshot_restore(before_right);
      provenance_scope_snapshot_free(before_right);
      return false;
    }
    ProvenanceScopeSnapshot *right_after = provenance_scope_snapshot_capture(scope);
    provenance_scope_snapshot_restore_optional_branch(before_right, right_after, true, true);
    provenance_scope_snapshot_free(right_after);
    provenance_scope_snapshot_free(before_right);
    return true;
  }
  if (expr->kind == EXPR_BINARY && expr->text && (strcmp(expr->text, "&&") == 0 || strcmp(expr->text, "||") == 0)) {
    if (!apply_expr_call_storage_effects(ctx, program, expr->left, scope, diag)) return false;
    ProvenanceScopeSnapshot *before_right = provenance_scope_snapshot_capture(scope);
    if (!apply_expr_call_storage_effects(ctx, program, expr->right, scope, diag)) {
      provenance_scope_snapshot_restore(before_right);
      provenance_scope_snapshot_free(before_right);
      return false;
    }
    ProvenanceScopeSnapshot *right_after = provenance_scope_snapshot_capture(scope);
    bool left_is_bool_literal = expr->left && expr->left->kind == EXPR_BOOL;
    bool left_value = left_is_bool_literal && expr->left->bool_value;
    bool include_before = true;
    bool include_after = true;
    if (left_is_bool_literal && strcmp(expr->text, "&&") == 0) {
      include_before = !left_value;
      include_after = left_value;
    } else if (left_is_bool_literal && strcmp(expr->text, "||") == 0) {
      include_before = left_value;
      include_after = !left_value;
    }
    provenance_scope_snapshot_restore_optional_branch(before_right, right_after, include_before, include_after);
    provenance_scope_snapshot_free(right_after);
    provenance_scope_snapshot_free(before_right);
    return true;
  }
  if (!apply_expr_call_storage_effects(ctx, program, expr->left, scope, diag) ||
      !apply_expr_call_storage_effects(ctx, program, expr->right, scope, diag)) return false;
  for (size_t i = 0; i < expr->args.len; i++) {
    if (!apply_expr_call_storage_effects(ctx, program, expr->args.items[i], scope, diag)) return false;
  }
  for (size_t i = 0; i < expr->fields.len; i++) {
    if (!apply_expr_call_storage_effects(ctx, program, expr->fields.items[i].value, scope, diag)) return false;
  }
  if (expr->kind == EXPR_CALL) return apply_resolved_call_storage_effects(ctx, program, expr, scope, diag);
  return true;
}

static bool check_assignment_not_borrowed(const Expr *target, Scope *scope, ZDiag *diag) {
  char root[128];
  char path[256];
  if (!expr_binding_path(target, root, sizeof(root), path, sizeof(path))) return true;
  size_t shared = 0;
  size_t mut = 0;
  scope_borrow_counts_for_place(scope, root, path, &shared, &mut);
  if (shared == 0 && mut == 0) return true;
  char place[200];
  format_origin_place(place, sizeof(place), root, path);
  char actual[256];
  snprintf(actual, sizeof(actual), "%.160s has %zu shared and %zu mutable borrow(s)", place, shared, mut);
  set_diag_detail(diag, 3029, "cannot assign to a value while it is borrowed", target->line, target->column, "unborrowed assignment target", actual, "end the borrow's lexical scope before assigning to this value");
  ZBorrowTrace active[Z_BORROW_TRACE_MAX] = {0};
  size_t active_len = 0;
  bool truncated = false;
  if (scope_active_borrows_for_place(scope, root, path, false, active, &active_len, &truncated)) {
    set_diag_borrow_trace(diag, active, active_len, truncated, "move the assignment after the active borrow's lexical scope or put the borrow in an inner block");
  }
  return false;
}

static bool check_return_borrow_escape(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, const char *return_type, ZDiag *diag) {
  diag = check_context_diag(ctx, diag);
  if (!expr) return true;
  ValueProvenance origins = {0};
  if (!expr_reference_provenance(ctx, program, expr, scope, &origins) &&
      !span_view_expr_provenance(ctx, program, expr, scope, return_type, &origins)) {
    value_provenance_free(&origins);
    return true;
  }
  for (size_t i = 0; i < origins.len; i++) {
    ProvenanceEntry *entry = &origins.items[i];
    if (entry->local_storage) {
      char actual[256];
      snprintf(actual, sizeof(actual), "reference to local '%s'", entry->origin.root);
      value_provenance_free(&origins);
      return set_diag_detail(diag, 3030, "cannot return a reference to a local binding", expr->line, expr->column, "reference derived from a parameter or longer-lived value", actual, "return an owned value or keep the borrow inside the current function");
    }
  }
  value_provenance_free(&origins);
  return true;
}

static bool check_return_call_borrow_escape(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, ZDiag *diag) {
  diag = check_context_diag(ctx, diag);
  if (!expr || expr->kind != EXPR_CALL || !expr->left) return true;
  ValueProvenance origins = {0};
  if (!call_result_value_provenance(ctx, program, expr, scope, &origins)) {
    value_provenance_free(&origins);
    return true;
  }
  for (size_t i = 0; i < origins.len; i++) {
    ProvenanceEntry *entry = &origins.items[i];
    if (entry->local_storage) {
      char actual[256];
      snprintf(actual, sizeof(actual), "call may return reference derived from local '%s'", entry->origin.root);
      value_provenance_free(&origins);
      return set_diag_detail(diag, 3030, "cannot return a reference derived from a local call argument", expr->line, expr->column, "reference derived from a parameter or longer-lived value", actual, "keep local borrows inside the current function or return an owned value");
    }
  }
  value_provenance_free(&origins);
  return true;
}

static bool check_return_reference_escape(CheckContext *ctx, const Program *program, const Expr *expr, Scope *scope, const char *return_type, ZDiag *diag) {
  diag = check_context_diag(ctx, diag);
  if (!check_return_call_borrow_escape(ctx, program, expr, scope, diag)) return false;
  return check_return_borrow_escape(ctx, program, expr, scope, return_type, diag);
}

static bool param_vec_contains_name(const ParamVec *params, const char *name) {
  if (!params || !name) return false;
  for (size_t i = 0; i < params->len; i++) {
    if (params->items[i].name && strcmp(params->items[i].name, name) == 0) return true;
  }
  return false;
}

static void collect_visible_type_names(Scope *scope, ParamVec *out) {
  if (!out) return;
  for (Scope *cursor = scope; cursor; cursor = cursor->parent) {
    for (size_t i = 0; i < cursor->len; i++) {
      bool static_param = cursor->is_static_param && cursor->is_static_param[i];
      bool type_param = cursor->is_type_param && cursor->is_type_param[i];
      if (!cursor->names[i] || (!type_param && !static_param)) continue;
      if (param_vec_contains_name(out, cursor->names[i])) continue;
      out->items = checker_grow_items(out->items, out->len, &out->cap, 8, sizeof(Param));
      out->items[out->len++] = (Param){
        .name = cursor->names[i],
        .type = static_param ? cursor->types[i] : "Type",
        .is_static = static_param,
      };
    }
  }
}

static bool validate_local_type_names(const Program *program, const Function *fun, Scope *scope, const char *type, ZDiag *diag, int line, int column) {
  if (!type) return true;
  ParamVec visible = {0};
  collect_visible_type_names(scope, &visible);
  bool ok = validate_type_names(program, type, &visible, fun ? &fun->type_params : NULL, false, diag, line, column);
  free(visible.items);
  return ok;
}

static bool parse_match_int_literal(const char *text, unsigned long long *out) {
  if (!text || !*text) return false;
  char digits[64];
  size_t len = 0;
  for (size_t i = 0; text[i] && len + 1 < sizeof(digits); i++) {
    if (text[i] == '_') continue;
    if (text[i] < '0' || text[i] > '9') break;
    digits[len++] = text[i];
  }
  digits[len] = '\0';
  if (len == 0) return false;
  char *end = NULL;
  unsigned long long value = strtoull(digits, &end, 10);
  if (!end || *end != '\0') return false;
  *out = value;
  return true;
}

static bool check_match_guard(CheckContext *ctx, const Program *program, MatchArm *arm, Scope *scope, ZDiag *diag) {
  diag = check_context_diag(ctx, diag);
  if (!arm->guard) return true;
  if (!check_expr(ctx, program, arm->guard, scope, diag)) return false;
  const char *guard_type = expr_type(ctx, program, arm->guard, scope);
  if (!is_bool_type(guard_type)) return set_diag_detail(diag, 3111, "match arm guard must be Bool", arm->guard->line, arm->guard->column, "Bool", guard_type, "use a boolean condition after `if`");
  return true;
}

static bool match_arm_is_fallback(const MatchArm *arm) {
  return arm && arm->case_name && strcmp(arm->case_name, "_") == 0;
}

static bool scalar_match_arm_bounds(const MatchArm *arm, unsigned long long *start, unsigned long long *end) {
  if (!arm || match_arm_is_fallback(arm)) return false;
  unsigned long long parsed_start = 0;
  unsigned long long parsed_end = 0;
  if (!parse_match_int_literal(arm->case_name, &parsed_start)) return false;
  parsed_end = parsed_start;
  if (arm->range_end && !parse_match_int_literal(arm->range_end, &parsed_end)) return false;
  if (start) *start = parsed_start;
  if (end) *end = parsed_end;
  return true;
}

static bool scalar_match_arms_may_share_value(const MatchArm *left, const MatchArm *right, bool is_bool) {
  if (!left || !right) return false;
  if (match_arm_is_fallback(left) || match_arm_is_fallback(right)) return true;
  if (is_bool) return !left->range_end && !right->range_end && strcmp(left->case_name, right->case_name) == 0;
  unsigned long long left_start = 0;
  unsigned long long left_end = 0;
  unsigned long long right_start = 0;
  unsigned long long right_end = 0;
  if (!scalar_match_arm_bounds(left, &left_start, &left_end) ||
      !scalar_match_arm_bounds(right, &right_start, &right_end)) return true;
  return left_start <= right_end && right_start <= left_end;
}

static bool variant_match_arms_may_share_value(const MatchArm *left, const MatchArm *right) {
  if (!left || !right) return false;
  if (match_arm_is_fallback(left) || match_arm_is_fallback(right)) return true;
  return strcmp(left->case_name, right->case_name) == 0;
}

static bool match_guard_can_be_false(const MatchArm *arm) {
  return !arm || !arm->guard || arm->guard->kind != EXPR_BOOL || !arm->guard->bool_value;
}

static void scope_add_bool_match_case_guards(CheckContext *ctx, const Program *program, const Expr *match_expr, const MatchArm *arm, Scope *source_scope, Scope *guard_scope) {
  if (!arm || arm->range_end || match_arm_is_fallback(arm)) return;
  if (strcmp(arm->case_name, "true") == 0) {
    scope_add_maybe_guards_from_condition_true(ctx, program, match_expr, source_scope, guard_scope);
  } else if (strcmp(arm->case_name, "false") == 0) {
    scope_add_maybe_guards_from_condition_false(ctx, program, match_expr, source_scope, guard_scope);
  }
}

static bool match_subject_maybe_guard_invalidated_by_guard(CheckContext *ctx, const Program *program, const Expr *match_expr, const Expr *guard, Scope *scope) {
  if (!match_expr || !guard || !scope) return false;
  char root[128];
  char path[256];
  if (!maybe_presence_guard_place(ctx, program, match_expr, scope, root, sizeof(root), path, sizeof(path))) return false;
  Scope temp = {.parent = scope};
  if (!scope_add_maybe_present(&temp, scope, root, path)) return false;
  scope_clear_maybe_guards_for_expr_mutations(ctx, program, guard, scope, &temp);
  Place fact = {
    .root = root,
    .root_scope = scope_binding_scope(scope, root),
    .path = path[0] ? path : NULL,
  };
  bool still_present = place_vec_contains(&temp.maybe_present, &fact);
  scope_free(&temp);
  return !still_present;
}

static void seed_variant_match_payload_scope(CheckContext *ctx, const Program *program, const Expr *match_expr, Scope *match_scope, Scope *arm_scope, const MatchArm *arm, const Choice *item_choice) {
  if (!arm || match_arm_is_fallback(arm) || !arm->payload_name || !item_choice) return;
  const Param *item_case = find_case(&item_choice->cases, arm->case_name);
  if (!item_case || !item_case->type) return;
  scope_add(arm_scope, arm->payload_name, item_case->type, false);
  register_match_payload_binding_provenance(ctx, program, match_expr, match_scope, arm_scope, arm->payload_name, arm->case_name);
}

static bool apply_match_guard_false_fallthrough(CheckContext *ctx, const Program *program, MatchArm *arm, Scope *match_scope, Scope *guard_scope, ZDiag *diag) {
  if (!check_match_guard(ctx, program, arm, guard_scope, diag)) return false;
  scope_clear_maybe_guards_for_expr_mutations(ctx, program, arm->guard, guard_scope, match_scope);
  Scope fallthrough_facts = {.parent = match_scope};
  scope_add_maybe_guards_from_condition_false(ctx, program, arm->guard, guard_scope, &fallthrough_facts);
  scope_add_maybe_present_all(match_scope, &fallthrough_facts);
  scope_free(&fallthrough_facts);
  return true;
}

static bool apply_prior_scalar_match_guard_fallthroughs(CheckContext *ctx, const Program *program, const Stmt *stmt, size_t current_index, bool is_bool, Scope *scope, ZDiag *diag, bool *case_facts_valid) {
  bool facts_valid = true;
  MatchArm *current = &stmt->match_arms.items[current_index];
  for (size_t previous_index = 0; previous_index < current_index; previous_index++) {
    MatchArm *previous = &stmt->match_arms.items[previous_index];
    if (!previous->guard || !match_guard_can_be_false(previous) || !scalar_match_arms_may_share_value(previous, current, is_bool)) continue;
    bool invalidates_match_fact = is_bool && facts_valid && match_subject_maybe_guard_invalidated_by_guard(ctx, program, stmt->expr, previous->guard, scope);
    Scope guard_scope = {.parent = scope};
    if (is_bool && facts_valid) scope_add_bool_match_case_guards(ctx, program, stmt->expr, previous, scope, &guard_scope);
    bool ok = apply_match_guard_false_fallthrough(ctx, program, previous, scope, &guard_scope, diag);
    scope_free(&guard_scope);
    if (!ok) return false;
    if (invalidates_match_fact) facts_valid = false;
  }
  if (case_facts_valid) *case_facts_valid = facts_valid;
  return true;
}

static bool apply_prior_variant_match_guard_fallthroughs(CheckContext *ctx, const Program *program, const Stmt *stmt, size_t current_index, Scope *scope, ZDiag *diag, const Choice *item_choice) {
  MatchArm *current = &stmt->match_arms.items[current_index];
  for (size_t previous_index = 0; previous_index < current_index; previous_index++) {
    MatchArm *previous = &stmt->match_arms.items[previous_index];
    if (!previous->guard || !match_guard_can_be_false(previous) || !variant_match_arms_may_share_value(previous, current)) continue;
    Scope guard_scope = {.parent = scope};
    seed_variant_match_payload_scope(ctx, program, stmt->expr, scope, &guard_scope, previous, item_choice);
    bool ok = apply_match_guard_false_fallthrough(ctx, program, previous, scope, &guard_scope, diag);
    scope_free(&guard_scope);
    if (!ok) return false;
  }
  return true;
}

static bool check_scalar_match(CheckContext *ctx, const Program *program, const Function *fun, const Stmt *stmt, Scope *scope, ZDiag *diag, int loop_depth, const char *match_type) {
  diag = check_context_diag(ctx, diag);
  bool is_bool = is_bool_type(match_type);
  bool is_u8 = strcmp(match_type, "u8") == 0;
  bool bool_seen[2] = {false, false};
  bool u8_seen[256] = {false};
  bool has_fallback = false;
  for (size_t arm_index = 0; arm_index < stmt->match_arms.len; arm_index++) {
    MatchArm *arm = &stmt->match_arms.items[arm_index];
    if (arm->payload_name) return set_diag_detail(diag, 3110, "scalar match arm cannot bind a payload", arm->line, arm->column, "case { ... }", "payload binding on scalar case", "remove the payload binding");
    if (strcmp(arm->case_name, "_") == 0) {
      if (arm->range_end) return set_diag_detail(diag, 3111, "fallback match arm cannot be a range", arm->line, arm->column, "_", "range fallback", "use either a fallback or an integer range");
      if (arm->guard) return set_diag_detail(diag, 3111, "fallback match arm cannot have a guard", arm->line, arm->column, "unguarded _ fallback", "guarded fallback", "move the condition to a concrete arm before the fallback");
      if (has_fallback) return set_diag_detail(diag, 3107, "duplicate match fallback arm", arm->line, arm->column, "one fallback arm", "duplicate fallback", "remove the duplicate fallback arm");
      has_fallback = true;
    } else if (is_bool) {
      if (arm->range_end || (strcmp(arm->case_name, "true") != 0 && strcmp(arm->case_name, "false") != 0)) return set_diag_detail(diag, 3103, "Bool match arm must be true, false, or _", arm->line, arm->column, "true, false, or _", arm->case_name, "match each boolean value or add a fallback");
      int index = strcmp(arm->case_name, "true") == 0 ? 1 : 0;
      if (!arm->guard && bool_seen[index]) return set_diag_detail(diag, 3107, "duplicate match arm", arm->line, arm->column, "one unguarded arm per scalar value", arm->case_name, "remove the duplicate arm");
      if (!arm->guard) bool_seen[index] = true;
    } else {
      unsigned long long start = 0;
      unsigned long long end = 0;
      if (!parse_match_int_literal(arm->case_name, &start)) return set_diag_detail(diag, 3103, "integer match arm must be an integer literal, range, or _", arm->line, arm->column, "integer literal, range, or _", arm->case_name, "use a numeric case such as `0` or `0..3`");
      end = start;
      if (arm->range_end && !parse_match_int_literal(arm->range_end, &end)) return set_diag_detail(diag, 3103, "integer range end must be an integer literal", arm->line, arm->column, "integer literal range end", arm->range_end, "use a numeric range end");
      if (end < start) return set_diag_detail(diag, 3108, "integer match range must not be empty", arm->line, arm->column, "start <= end", arm->case_name, "reverse the range bounds");
      if (is_u8) {
        if (end > 255) return set_diag_detail(diag, 3108, "u8 match range is out of bounds", arm->line, arm->column, "0..255", arm->range_end ? arm->range_end : arm->case_name, "keep u8 ranges within 0..255");
        if (!arm->guard) {
          for (unsigned long long value = start; value <= end; value++) {
            if (u8_seen[value]) return set_diag_detail(diag, 3107, "duplicate match arm", arm->line, arm->column, "non-overlapping integer cases", arm->case_name, "remove the overlapping case or range");
            u8_seen[value] = true;
          }
        }
      }
    }
  }
  if (!has_fallback) {
    if (is_bool) {
      if (!bool_seen[0] || !bool_seen[1]) return set_diag_detail(diag, 3106, "non-exhaustive Bool match", stmt->line, stmt->column, "true and false arms", !bool_seen[0] ? "false" : "true", "add the missing boolean arm or a fallback `_` arm");
    } else if (is_u8) {
      for (size_t value = 0; value < 256; value++) {
        if (!u8_seen[value]) return set_diag_detail(diag, 3106, "non-exhaustive u8 match", stmt->line, stmt->column, "0..255 coverage or fallback", "missing integer value", "add a covering range or a fallback `_` arm");
      }
    } else {
      return set_diag_detail(diag, 3106, "non-exhaustive integer match", stmt->line, stmt->column, "fallback `_` arm", "open integer domain", "add a fallback `_` arm for integer matches outside finite u8 coverage");
    }
  }
  ProvenanceScopeSnapshot *before = provenance_scope_snapshot_capture(scope);
  ProvenanceScopeSnapshot **arm_states = z_checked_calloc(stmt->match_arms.len, sizeof(ProvenanceScopeSnapshot *));
  bool *arm_continues = z_checked_calloc(stmt->match_arms.len, sizeof(bool));
  PlaceVec *arm_maybe_present = z_checked_calloc(stmt->match_arms.len, sizeof(PlaceVec));
  for (size_t arm_index = 0; arm_index < stmt->match_arms.len; arm_index++) {
    provenance_scope_snapshot_restore(before);
    bool case_facts_valid = true;
    if (!apply_prior_scalar_match_guard_fallthroughs(ctx, program, stmt, arm_index, is_bool, scope, diag, &case_facts_valid)) {
      provenance_scope_snapshot_restore(before);
      for (size_t i = 0; i < stmt->match_arms.len; i++) {
        provenance_scope_snapshot_free(arm_states[i]);
        place_vec_free(&arm_maybe_present[i]);
      }
      free(arm_states);
      free(arm_continues);
      free(arm_maybe_present);
      provenance_scope_snapshot_free(before);
      return false;
    }
    Scope arm_scope = {.parent = scope};
    MatchArm *arm = &stmt->match_arms.items[arm_index];
    if (is_bool && case_facts_valid) scope_add_bool_match_case_guards(ctx, program, stmt->expr, arm, scope, &arm_scope);
    if (!check_match_guard(ctx, program, arm, &arm_scope, diag)) {
      scope_free(&arm_scope);
      provenance_scope_snapshot_restore(before);
      for (size_t i = 0; i < stmt->match_arms.len; i++) {
        provenance_scope_snapshot_free(arm_states[i]);
        place_vec_free(&arm_maybe_present[i]);
      }
      free(arm_states);
      free(arm_continues);
      free(arm_maybe_present);
      provenance_scope_snapshot_free(before);
      return false;
    }
    scope_clear_maybe_guards_for_expr_mutations(ctx, program, arm->guard, &arm_scope, &arm_scope);
    scope_add_maybe_guards_from_condition_true(ctx, program, arm->guard, &arm_scope, &arm_scope);
    bool ok = check_stmt_vec_with_loop(ctx, program, fun, &arm->body, &arm_scope, diag, loop_depth);
    place_vec_add_all(&arm_maybe_present[arm_index], &arm_scope.maybe_present);
    scope_free(&arm_scope);
    if (!ok) {
      provenance_scope_snapshot_restore(before);
      for (size_t i = 0; i < stmt->match_arms.len; i++) {
        provenance_scope_snapshot_free(arm_states[i]);
        place_vec_free(&arm_maybe_present[i]);
      }
      free(arm_states);
      free(arm_continues);
      free(arm_maybe_present);
      provenance_scope_snapshot_free(before);
      return false;
    }
    arm_states[arm_index] = provenance_scope_snapshot_capture(scope);
    arm_continues[arm_index] = !stmt_vec_guarantees_exit(&arm->body, fun->raises);
  }
  provenance_scope_snapshot_restore_union(before, arm_states, arm_continues, stmt->match_arms.len);
  size_t continuing_arm = stmt->match_arms.len;
  size_t continuing_count = 0;
  for (size_t i = 0; i < stmt->match_arms.len; i++) {
    if (arm_continues[i]) {
      continuing_arm = i;
      continuing_count++;
    }
  }
  if (continuing_count == 1) {
    Scope guard_source = {.parent = scope, .maybe_present = arm_maybe_present[continuing_arm]};
    scope_add_maybe_present_all(scope, &guard_source);
  }
  for (size_t i = 0; i < stmt->match_arms.len; i++) {
    provenance_scope_snapshot_free(arm_states[i]);
    place_vec_free(&arm_maybe_present[i]);
  }
  free(arm_states);
  free(arm_continues);
  free(arm_maybe_present);
  provenance_scope_snapshot_free(before);
  return true;
}

static bool check_if_stmt(CheckContext *ctx, const Program *program, const Function *fun, const Stmt *stmt, Scope *scope, ZDiag *diag, int loop_depth) {
  if (!check_expr_expected(ctx, program, stmt->expr, scope, diag, "Bool")) return false;
  const char *condition_type = expr_type(ctx, program, stmt->expr, scope);
  if (!is_bool_type(condition_type)) return set_diag_detail(diag, 3016, "condition must be Bool", stmt->expr->line, stmt->expr->column, "Bool", condition_type, "compare explicitly or produce a Bool value");
  bool then_possible = true;
  bool else_possible = true;
  if (stmt->expr && stmt->expr->kind == EXPR_BOOL) {
    then_possible = stmt->expr->bool_value;
    else_possible = !stmt->expr->bool_value;
  }
  ProvenanceScopeSnapshot *before = provenance_scope_snapshot_capture(scope);
  Scope then_scope = {.parent = scope};
  scope_add_maybe_guards_from_condition_true(ctx, program, stmt->expr, scope, &then_scope);
  bool ok = check_stmt_vec_with_loop(ctx, program, fun, &stmt->then_body, &then_scope, diag, loop_depth);
  if (!ok) {
    scope_free(&then_scope);
    provenance_scope_snapshot_restore(before);
    provenance_scope_snapshot_free(before);
    return false;
  }
  ProvenanceScopeSnapshot *then_after = provenance_scope_snapshot_capture(scope);
  provenance_scope_snapshot_restore(before);
  Scope else_scope = {.parent = scope};
  scope_add_maybe_guards_from_condition_false(ctx, program, stmt->expr, scope, &else_scope);
  ok = check_stmt_vec_with_loop(ctx, program, fun, &stmt->else_body, &else_scope, diag, loop_depth);
  if (!ok) {
    scope_free(&then_scope);
    scope_free(&else_scope);
    provenance_scope_snapshot_restore(before);
    provenance_scope_snapshot_free(then_after);
    provenance_scope_snapshot_free(before);
    return false;
  }
  ProvenanceScopeSnapshot *else_after = provenance_scope_snapshot_capture(scope);
  ProvenanceScopeSnapshot *states[] = {then_after, else_after};
  bool continues[] = {
    then_possible && !stmt_vec_guarantees_exit(&stmt->then_body, fun->raises),
    else_possible && !stmt_vec_guarantees_exit(&stmt->else_body, fun->raises),
  };
  provenance_scope_snapshot_restore_union(before, states, continues, 2);
  if (continues[0] && !continues[1]) {
    scope_add_maybe_present_all(scope, &then_scope);
  } else if (continues[1] && !continues[0]) {
    scope_add_maybe_present_all(scope, &else_scope);
  }
  scope_free(&then_scope);
  scope_free(&else_scope);
  provenance_scope_snapshot_free(then_after);
  provenance_scope_snapshot_free(else_after);
  provenance_scope_snapshot_free(before);
  return true;
}

static bool check_stmt(CheckContext *ctx, const Program *program, const Function *fun, const Stmt *stmt, Scope *scope, ZDiag *diag, int loop_depth) {
  diag = check_context_diag(ctx, diag);
  if (stmt->kind == STMT_LET) {
    for (size_t i = 0; i < scope->len; i++) {
      if (strcmp(scope->names[i], stmt->name) == 0) {
        return set_diag_detail(diag, 3002, "duplicate local binding", stmt->line, stmt->column, "fresh local name", "name is already visible", "rename this binding");
      }
    }
    if (!validate_type_form(stmt->type, diag, stmt->line, stmt->column)) return false;
    if (!validate_local_type_names(program, fun, scope, stmt->type, diag, stmt->line, stmt->column)) return false;
    if (!check_expr_expected(ctx, program, stmt->expr, scope, diag, stmt->type)) return false;
    const char *actual = expr_type(ctx, program, stmt->expr, scope);
    if (stmt->type && !types_compatible_in_scope(program, scope, stmt->type, actual)) {
      return set_diag_detail(diag, 3006, "let binding type does not match initializer", stmt->line, stmt->column, stmt->type, actual, "change the annotation or initializer");
    }
    const char *binding_type = stmt->type ? stmt->type : actual;
    mark_owned_move_if_needed(program, stmt->expr, scope, binding_type);
    set_stmt_resolved_type(stmt, binding_type);
    scope_add_decl(scope, stmt->name, binding_type, stmt->mutable_binding, stmt->line, stmt->column);
    register_borrow_binding(ctx, program, stmt, scope);
    return true;
  }
  if (stmt->kind == STMT_ASSIGN) {
    const Expr *target = stmt->target;
    char expected[128];
    if (!check_lvalue_target(ctx, program, target, scope, diag, expected, sizeof(expected))) return false;
    if (!check_assignment_not_borrowed(target, scope, diag)) return false;
    AssignmentProvenanceSnapshot provenance_snapshot = {0};
    assignment_provenance_snapshot_clear(target, scope, &provenance_snapshot);
    if (!check_expr_expected(ctx, program, stmt->expr, scope, diag, expected)) {
      assignment_provenance_snapshot_restore(scope, &provenance_snapshot);
      return false;
    }
    assignment_provenance_snapshot_restore(scope, &provenance_snapshot);
    const char *actual = expr_type(ctx, program, stmt->expr, scope);
    if (!types_compatible_in_scope(program, scope, expected, actual)) {
      return set_diag_detail(diag, 3006, "assignment type does not match binding", stmt->line, stmt->column, expected, actual, "assign a compatible value");
    }
    mark_owned_move_if_needed(program, stmt->expr, scope, expected);
    mark_owned_target_live_if_needed(program, target, scope, expected);
    if (!update_borrow_assignment(ctx, program, target, stmt->expr, scope, diag)) return false;
    char assigned_root[128];
    char assigned_path[256];
    if (expr_binding_path(target, assigned_root, sizeof(assigned_root), assigned_path, sizeof(assigned_path)) && scope_has(scope, assigned_root)) {
      scope_clear_maybe_present_for_place(scope, assigned_root, assigned_path);
    }
    PlaceVec assigned_places = {0};
    if (collect_assignment_target_places(target, scope, &assigned_places)) {
      for (size_t i = 0; i < assigned_places.len; i++) {
        Place *place = &assigned_places.items[i];
        scope_clear_maybe_present_for_resolved_place(scope, place);
      }
    }
    place_vec_free(&assigned_places);
    return true;
  }
  if (stmt->kind == STMT_CHECK) {
    if (!fun->raises) return set_diag_detail(diag, 1001, "`check` requires function to be marked fallible", stmt->line, stmt->column, "function signature with `raises` or `raises [...]`", "function is not marked fallible", "add `raises` to the function signature");
    ctx->allow_fallible_call++;
    bool checked_ok = check_expr(ctx, program, stmt->expr, scope, diag);
    ctx->allow_fallible_call--;
    if (!checked_ok) return false;
    const Function *callee = fallible_callee_in_context(ctx, program, fun, scope, stmt->expr);
    if (callee && !function_error_sets_compatible(ctx, fun, callee, diag, stmt->expr)) return false;
    const char *stdlib_type = stdlib_fallible_return_type(stmt->expr);
    if (stdlib_type && !stdlib_call_error_sets_covered(fun, diag, stmt->expr, stmt->expr)) return false;
    const char *checked_type = expr_type(ctx, program, stmt->expr, scope);
    bool world_stream_write = is_world_stream_write_call(stmt->expr, scope);
    const char *inner = NULL;
    size_t inner_len = 0;
    bool maybe_value = type_has_generic_arg(checked_type, "Maybe", &inner, &inner_len);
    if (!callee && !stdlib_type && !world_stream_write && !maybe_value) {
      return set_diag_detail(diag, 1001, "`check` expects Maybe<T> or a fallible function call", stmt->line, stmt->column, "Maybe<T> value or fallible call", checked_type, "check a Maybe value or a named-error fallible function");
    }
    if (type_is_named_generic(checked_type, "Maybe") && !type_is_named_generic(fun->return_type, "Maybe")) {
      return set_diag_detail(diag, 1001, "`check` on Maybe<T> requires a Maybe return type", stmt->line, stmt->column, "function returning Maybe<T>", fun->return_type ? fun->return_type : "Void", "return Maybe<T> from this function or handle the Maybe value explicitly");
    }
    if (maybe_value) {
      char *inner_type = z_strndup(inner, inner_len);
      if (type_contains_owned(program, inner_type, 0)) mark_owned_payload_move_from_maybe_expr(stmt->expr, scope);
      free(inner_type);
    }
    return true;
  }
  if (stmt->kind == STMT_RAISE) {
    if (!fun->raises) return set_diag_detail(diag, 1001, "`raise` requires function to be marked fallible", stmt->line, stmt->column, "function signature with `raises` or `raises [...]`", "function is not marked fallible", "add `raises` to the function signature or use `return` with an explicit value");
    if (!stmt->name) return set_diag_detail(diag, 1001, "raise requires an error name", stmt->line, stmt->column, "raise ErrorName", "missing error name", "name the error being raised");
    if (fun->has_error_set && !function_error_contains(fun, stmt->name)) {
      char actual[160];
      snprintf(actual, sizeof(actual), "raise %s", stmt->name);
      return set_diag_detail(diag, 1002, "raised error is not declared by this function", stmt->line, stmt->column, "error listed in `raises [...]`", actual, "add the error name to this function's `raises [...]` set");
    }
    return true;
  }
  if (stmt->kind == STMT_DEFER) return check_expr(ctx, program, stmt->expr, scope, diag);
  if (stmt->kind == STMT_RETURN) {
    if (!check_expr_expected(ctx, program, stmt->expr, scope, diag, fun->return_type)) return false;
    const char *actual = stmt->expr ? expr_type(ctx, program, stmt->expr, scope) : "Void";
    if (!types_compatible_in_scope(program, scope, fun->return_type, actual) && !maybe_type_accepts_present_value(program, scope, fun->return_type, actual)) {
      return set_diag_detail(diag, 3007, "return type does not match function return type", stmt->line, stmt->column, fun->return_type, actual, "return a value compatible with the function signature");
    }
    if (!check_return_reference_escape(ctx, program, stmt->expr, scope, fun->return_type, diag)) return false;
    mark_owned_move_if_needed(program, stmt->expr, scope, fun->return_type);
    return true;
  }
  if (stmt->kind == STMT_EXPR) return check_expr(ctx, program, stmt->expr, scope, diag);
  if (stmt->kind == STMT_IF) return check_if_stmt(ctx, program, fun, stmt, scope, diag, loop_depth);
  if (stmt->kind == STMT_WHILE) {
    if (!check_expr_expected(ctx, program, stmt->expr, scope, diag, "Bool")) return false;
    const char *condition_type = expr_type(ctx, program, stmt->expr, scope);
    if (!is_bool_type(condition_type)) return set_diag_detail(diag, 3016, "condition must be Bool", stmt->expr->line, stmt->expr->column, "Bool", condition_type, "compare explicitly or produce a Bool value");
    ProvenanceScopeSnapshot *before = provenance_scope_snapshot_capture(scope);
    Scope body_scope = {.parent = scope};
    scope_add_maybe_guards_from_condition_true(ctx, program, stmt->expr, scope, &body_scope);
    bool ok = check_stmt_vec_with_loop(ctx, program, fun, &stmt->then_body, &body_scope, diag, loop_depth + 1);
    scope_free(&body_scope);
    if (!ok) {
      provenance_scope_snapshot_restore(before);
      provenance_scope_snapshot_free(before);
      return false;
    }
    ProvenanceScopeSnapshot *body_after = provenance_scope_snapshot_capture(scope);
    bool body_possible = !(stmt->expr && stmt->expr->kind == EXPR_BOOL && !stmt->expr->bool_value);
    ProvenanceScopeSnapshot *states[] = {before, body_after};
    bool continues[] = {true, body_possible && !stmt_vec_guarantees_exit(&stmt->then_body, fun->raises)};
    provenance_scope_snapshot_restore_union(before, states, continues, 2);
    provenance_scope_snapshot_free(body_after);
    provenance_scope_snapshot_free(before);
    return true;
  }
  if (stmt->kind == STMT_FOR) {
    if (!check_expr(ctx, program, stmt->expr, scope, diag)) return false;
    const char *start_type = expr_type(ctx, program, stmt->expr, scope);
    if (!check_expr_expected(ctx, program, stmt->range_end, scope, diag, is_int_type(start_type) ? start_type : NULL)) return false;
    const char *end_type = expr_type(ctx, program, stmt->range_end, scope);
    if (!is_int_type(start_type) || !is_int_type(end_type)) return set_diag_detail(diag, 3020, "range loop bounds must be integers", stmt->line, stmt->column, "integer-compatible range bounds", "non-integer bound", "use integer start and end expressions");
    if (!types_compatible(program, start_type, end_type)) return set_diag_detail(diag, 3020, "range loop bounds must have matching integer types", stmt->line, stmt->column, start_type, end_type, "use matching integer bounds until explicit casts are supported");
    set_stmt_resolved_type(stmt, start_type);
    ProvenanceScopeSnapshot *before = provenance_scope_snapshot_capture(scope);
    Scope body_scope = {.parent = scope};
    scope_add(&body_scope, stmt->name, start_type, false);
    bool ok = check_stmt_vec_with_loop(ctx, program, fun, &stmt->then_body, &body_scope, diag, loop_depth + 1);
    scope_free(&body_scope);
    if (!ok) {
      provenance_scope_snapshot_restore(before);
      provenance_scope_snapshot_free(before);
      return false;
    }
    ProvenanceScopeSnapshot *body_after = provenance_scope_snapshot_capture(scope);
    ProvenanceScopeSnapshot *states[] = {before, body_after};
    bool continues[] = {true, !stmt_vec_guarantees_exit(&stmt->then_body, fun->raises)};
    provenance_scope_snapshot_restore_union(before, states, continues, 2);
    provenance_scope_snapshot_free(body_after);
    provenance_scope_snapshot_free(before);
    return true;
  }
  if (stmt->kind == STMT_BREAK) {
    if (loop_depth <= 0) return set_diag_detail(diag, 3018, "break is only valid inside a loop", stmt->line, stmt->column, "enclosing while or for loop", "no enclosing loop", "move this break inside a loop or use return");
    return true;
  }
  if (stmt->kind == STMT_CONTINUE) {
    if (loop_depth <= 0) return set_diag_detail(diag, 3019, "continue is only valid inside a loop", stmt->line, stmt->column, "enclosing while or for loop", "no enclosing loop", "move this continue inside a loop");
    return true;
  }
  if (stmt->kind == STMT_MATCH) {
    if (!check_expr(ctx, program, stmt->expr, scope, diag)) return false;
    const char *match_type = expr_type(ctx, program, stmt->expr, scope);
    set_stmt_resolved_type(stmt, match_type);
    const EnumDecl *item_enum = find_enum(program, match_type);
    const Choice *item_choice = find_choice(program, match_type);
    const ParamVec *cases = item_enum ? &item_enum->cases : (item_choice ? &item_choice->cases : NULL);
    if (!cases) {
      if (is_bool_type(match_type) || is_int_type(match_type)) return check_scalar_match(ctx, program, fun, stmt, scope, diag, loop_depth, match_type);
      return set_diag_detail(diag, 3105, "match expects enum, choice, Bool, or integer value", stmt->line, stmt->column, "enum, choice, Bool, or integer value", match_type, "match on a supported scalar or variant binding");
    }
    bool has_fallback = false;
    for (size_t arm_index = 0; arm_index < stmt->match_arms.len; arm_index++) {
      MatchArm *arm = &stmt->match_arms.items[arm_index];
      if (arm->range_end) return set_diag_detail(diag, 3111, "variant match arm cannot be an integer range", arm->line, arm->column, "variant case name", arm->case_name, "use ranges only when matching integer values");
      if (strcmp(arm->case_name, "_") == 0) {
        if (arm->payload_name) return set_diag_detail(diag, 3110, "fallback match arm cannot bind a payload", arm->line, arm->column, "._ { ... }", "payload binding on fallback", "remove the payload binding from the fallback arm");
        if (arm->guard) return set_diag_detail(diag, 3111, "fallback match arm cannot have a guard", arm->line, arm->column, "unguarded ._ fallback", "guarded fallback", "move the condition to a concrete arm before the fallback");
        if (has_fallback) return set_diag_detail(diag, 3107, "duplicate match fallback arm", arm->line, arm->column, "one fallback arm", "duplicate fallback", "remove the duplicate fallback arm");
        has_fallback = true;
        continue;
      }
      const Param *item_case = find_case(cases, arm->case_name);
      if (!item_case) return set_diag_detail(diag, item_enum ? 3103 : 3104, "unknown match case", arm->line, arm->column, "declared variant case", arm->case_name, "rename the match arm");
      if (arm->payload_name && (!item_choice || !item_case->type)) return set_diag_detail(diag, 3110, "match arm cannot bind a payload for this case", arm->line, arm->column, "choice case with payload", arm->case_name, "remove the payload binding or add a payload to the choice case");
      for (size_t previous = 0; previous < arm_index; previous++) {
        if (!arm->guard && !stmt->match_arms.items[previous].guard && strcmp(stmt->match_arms.items[previous].case_name, arm->case_name) == 0) return set_diag_detail(diag, 3107, "duplicate match arm", arm->line, arm->column, "one unguarded arm per variant case", arm->case_name, "remove the duplicate arm");
      }
    }
    for (size_t case_index = 0; case_index < cases->len; case_index++) {
      bool seen = false;
      for (size_t arm_index = 0; arm_index < stmt->match_arms.len; arm_index++) {
        if (!stmt->match_arms.items[arm_index].guard && strcmp(cases->items[case_index].name, stmt->match_arms.items[arm_index].case_name) == 0) seen = true;
      }
      if (!seen && !has_fallback) return set_diag_detail(diag, 3106, "non-exhaustive match", stmt->line, stmt->column, "one arm for every variant case", cases->items[case_index].name, "add the missing match arm or a fallback `._` arm");
    }
    ProvenanceScopeSnapshot *before = provenance_scope_snapshot_capture(scope);
    ProvenanceScopeSnapshot **arm_states = z_checked_calloc(stmt->match_arms.len, sizeof(ProvenanceScopeSnapshot *));
    bool *arm_continues = z_checked_calloc(stmt->match_arms.len, sizeof(bool));
    PlaceVec *arm_maybe_present = z_checked_calloc(stmt->match_arms.len, sizeof(PlaceVec));
    for (size_t arm_index = 0; arm_index < stmt->match_arms.len; arm_index++) {
      provenance_scope_snapshot_restore(before);
      if (!apply_prior_variant_match_guard_fallthroughs(ctx, program, stmt, arm_index, scope, diag, item_choice)) {
        provenance_scope_snapshot_restore(before);
        for (size_t i = 0; i < stmt->match_arms.len; i++) {
          provenance_scope_snapshot_free(arm_states[i]);
          place_vec_free(&arm_maybe_present[i]);
        }
        free(arm_states);
        free(arm_continues);
        free(arm_maybe_present);
        provenance_scope_snapshot_free(before);
        return false;
      }
      Scope arm_scope = {.parent = scope};
      MatchArm *arm = &stmt->match_arms.items[arm_index];
      seed_variant_match_payload_scope(ctx, program, stmt->expr, scope, &arm_scope, arm, item_choice);
      if (!check_match_guard(ctx, program, arm, &arm_scope, diag)) {
        scope_free(&arm_scope);
        provenance_scope_snapshot_restore(before);
        for (size_t i = 0; i < stmt->match_arms.len; i++) {
          provenance_scope_snapshot_free(arm_states[i]);
          place_vec_free(&arm_maybe_present[i]);
        }
        free(arm_states);
        free(arm_continues);
        free(arm_maybe_present);
        provenance_scope_snapshot_free(before);
        return false;
      }
      scope_clear_maybe_guards_for_expr_mutations(ctx, program, arm->guard, &arm_scope, &arm_scope);
      scope_add_maybe_guards_from_condition_true(ctx, program, arm->guard, &arm_scope, &arm_scope);
      bool ok = check_stmt_vec_with_loop(ctx, program, fun, &arm->body, &arm_scope, diag, loop_depth);
      place_vec_add_all(&arm_maybe_present[arm_index], &arm_scope.maybe_present);
      scope_free(&arm_scope);
      if (!ok) {
        provenance_scope_snapshot_restore(before);
        for (size_t i = 0; i < stmt->match_arms.len; i++) {
          provenance_scope_snapshot_free(arm_states[i]);
          place_vec_free(&arm_maybe_present[i]);
        }
        free(arm_states);
        free(arm_continues);
        free(arm_maybe_present);
        provenance_scope_snapshot_free(before);
        return false;
      }
      arm_states[arm_index] = provenance_scope_snapshot_capture(scope);
      arm_continues[arm_index] = !stmt_vec_guarantees_exit(&arm->body, fun->raises);
    }
    provenance_scope_snapshot_restore_union(before, arm_states, arm_continues, stmt->match_arms.len);
    size_t continuing_arm = stmt->match_arms.len;
    size_t continuing_count = 0;
    for (size_t i = 0; i < stmt->match_arms.len; i++) {
      if (arm_continues[i]) {
        continuing_arm = i;
        continuing_count++;
      }
    }
    if (continuing_count == 1) {
      Scope guard_source = {.parent = scope, .maybe_present = arm_maybe_present[continuing_arm]};
      scope_add_maybe_present_all(scope, &guard_source);
    }
    for (size_t i = 0; i < stmt->match_arms.len; i++) {
      provenance_scope_snapshot_free(arm_states[i]);
      place_vec_free(&arm_maybe_present[i]);
    }
    free(arm_states);
    free(arm_continues);
    free(arm_maybe_present);
    provenance_scope_snapshot_free(before);
    return true;
  }
  return true;
}

static bool check_stmt_vec_with_loop(CheckContext *ctx, const Program *program, const Function *fun, const StmtVec *body, Scope *scope, ZDiag *diag, int loop_depth) {
  diag = check_context_diag(ctx, diag);
  for (size_t i = 0; i < body->len; i++) {
    if (!check_stmt(ctx, program, fun, body->items[i], scope, diag, loop_depth)) return false;
  }
  return true;
}

static bool check_stmt_vec(CheckContext *ctx, const Program *program, const Function *fun, const StmtVec *body, Scope *scope, ZDiag *diag) {
  diag = check_context_diag(ctx, diag);
  return check_stmt_vec_with_loop(ctx, program, fun, body, scope, diag, 0);
}

static bool stmt_vec_guarantees_exit(const StmtVec *body, bool function_raises);

static bool stmt_guarantees_exit(const Stmt *stmt, bool function_raises) {
  if (!stmt) return false;
  if (stmt->kind == STMT_RETURN) return true;
  if (stmt->kind == STMT_RAISE) return function_raises;
  if (stmt->kind == STMT_IF) {
    return stmt_vec_guarantees_exit(&stmt->then_body, function_raises) &&
           stmt_vec_guarantees_exit(&stmt->else_body, function_raises);
  }
  if (stmt->kind == STMT_MATCH) {
    if (stmt->match_arms.len == 0) return false;
    for (size_t i = 0; i < stmt->match_arms.len; i++) {
      if (!stmt_vec_guarantees_exit(&stmt->match_arms.items[i].body, function_raises)) return false;
    }
    return true;
  }
  return false;
}

static bool stmt_vec_guarantees_exit(const StmtVec *body, bool function_raises) {
  if (!body) return false;
  for (size_t i = 0; i < body->len; i++) {
    if (stmt_guarantees_exit(body->items[i], function_raises)) return true;
  }
  return false;
}

static bool check_function_frame_limit(const Program *program, const Function *fun, ZDiag *diag) {
  size_t frame_total = 0;
  const Stmt *frame_over = NULL;
  if (z_function_frame_locals_within_limit(program, fun, Z_DIRECT_FRAME_LOCAL_LIMIT_BYTES, &frame_total, &frame_over)) return true;
  char expected_text[96];
  char actual_text[192];
  snprintf(expected_text, sizeof(expected_text), "at most %u bytes of locals per function frame", (unsigned)Z_DIRECT_FRAME_LOCAL_LIMIT_BYTES);
  snprintf(actual_text, sizeof(actual_text), "function '%s' declares %zu bytes of locals", fun->name ? fun->name : "<function>", frame_total);
  return set_diag_detail(diag, 3052, "stack frame locals exceed the supported limit",
                         frame_over ? frame_over->line : fun->line, frame_over ? frame_over->column : fun->column,
                         expected_text, actual_text,
                         "split the buffer into smaller buffers in helper functions so each frame stays within the limit, or process the data in fixed-size chunks");
}

static bool check_function_has_required_return(const Function *fun, ZDiag *diag) {
  if (!fun || !fun->return_type || strcmp(fun->return_type, "Void") == 0) return true;
  if (stmt_vec_guarantees_exit(&fun->body, fun->raises)) return true;
  return set_diag_detail(diag, 3007, "non-void function must return a value on every path", fun->line, fun->column, fun->return_type, "function body may fall through", "add explicit `ret` or `raise` on every path");
}

static bool validate_drop_method(const Shape *shape, const Function *method, ZDiag *diag) {
  if (strcmp(method->name, "drop") != 0) return true;
  if (method->raises) {
    return set_diag_detail(diag, 3014, "drop method must not raise", method->line, method->column, "fn drop Void self mutref<Self>", "fallible drop method", "make cleanup infallible or use an explicit fallible cleanup function");
  }
  if (!method->return_type || strcmp(method->return_type, "Void") != 0) {
    return set_diag_detail(diag, 3014, "drop method must return Void", method->line, method->column, "-> Void", method->return_type ? method->return_type : "missing return type", "use the canonical drop signature");
  }
  if (method->params.len != 1) {
    return set_diag_detail(diag, 3014, "drop method must take exactly self", method->line, method->column, "fn drop Void self mutref<Self>", "wrong parameter count", "use exactly one self parameter");
  }
  Param *self = &method->params.items[0];
  if (!self->name || strcmp(self->name, "self") != 0 || !self->type || strcmp(self->type, "mutref<Self>") != 0) {
    return set_diag_detail(diag, 3014, "drop method must use self: mutref<Self>", self->line, self->column, "self: mutref<Self>", self->type ? self->type : "missing self type", "use the canonical drop receiver");
  }
  (void)shape;
  return true;
}

static bool check_shape_method_body(CheckContext *ctx, const Program *program, const Shape *shape, const Function *method, ZDiag *diag) {
  diag = check_context_diag(ctx, diag);
  Scope scope = {0};
  size_t binding_len = shape_method_binding_count(shape, method);
  GenericBinding *bindings = z_checked_calloc(binding_len, sizeof(GenericBinding));
  shape_method_init_bindings(shape, method, bindings);
  bindings[0].type = shape_open_instance_type(shape);
  for (size_t i = 0; i < shape->type_params.len; i++) {
    bindings[i + 1].type = z_strdup(shape->type_params.items[i].name);
    if (shape->type_params.items[i].is_static) {
      scope_add_static_param(&scope, shape->type_params.items[i].name, shape->type_params.items[i].type);
    } else {
      scope_add_type_param(&scope, shape->type_params.items[i].name);
    }
  }
  size_t method_offset = shape_method_method_binding_offset(shape);
  for (size_t i = 0; i < method->type_params.len; i++) {
    bindings[method_offset + i].type = z_strdup(method->type_params.items[i].name);
    if (method->type_params.items[i].is_static) {
      scope_add_static_param(&scope, method->type_params.items[i].name, method->type_params.items[i].type);
    } else {
      scope_add_type_param(&scope, method->type_params.items[i].name);
    }
  }
  for (size_t i = 0; i < method->params.len; i++) {
    char *param_type = type_substitute_generic_signature(program, method->params.items[i].type, bindings, binding_len);
    scope_add_param_decl(&scope, method->params.items[i].name, param_type, method->params.items[i].line, method->params.items[i].column);
    free(param_type);
  }
  for (size_t shape_index = 0; shape_index < program->shapes.len; shape_index++) scope_add(&scope, program->shapes.items[shape_index].name, "Type", false);
  for (size_t interface_index = 0; interface_index < program->interfaces.len; interface_index++) scope_add(&scope, program->interfaces.items[interface_index].name, "Type", false);
  for (size_t enum_index = 0; enum_index < program->enums.len; enum_index++) scope_add(&scope, program->enums.items[enum_index].name, "Type", false);
  for (size_t choice_index = 0; choice_index < program->choices.len; choice_index++) scope_add(&scope, program->choices.items[choice_index].name, "Type", false);
  for (size_t alias_index = 0; alias_index < program->aliases.len; alias_index++) scope_add(&scope, program->aliases.items[alias_index].name, "Type", false);
  Function checking_method = *method;
  checking_method.return_type = type_substitute_generic_signature(program, method->return_type, bindings, binding_len);
  CheckContext method_ctx = ctx ? *ctx : (CheckContext){0};
  method_ctx.function = &checking_method;
  method_ctx.shape = shape;
  method_ctx.allow_fallible_call = 0;
  method_ctx.return_provenance_expr_bindings = NULL;
  method_ctx.return_provenance_expr_binding_len = 0;
  bool ok = check_stmt_vec(&method_ctx, program, &checking_method, &method->body, &scope, diag);
  if (ok) ok = check_function_has_required_return(&checking_method, diag);
  free(checking_method.return_type);
  generic_bindings_free(bindings, binding_len);
  free(bindings);
  scope_free(&scope);
  return ok;
}

static bool validate_shape_layout(const Shape *shape, ZDiag *diag) {
  if (!shape || !shape->layout || strcmp(shape->layout, "auto") == 0) return true;
  bool is_extern = strcmp(shape->layout, "extern") == 0;
  bool is_packed = strcmp(shape->layout, "packed") == 0;
  if (!is_extern && !is_packed) return true;
  for (size_t field_index = 0; field_index < shape->fields.len; field_index++) {
    Param *field = &shape->fields.items[field_index];
    bool ok = is_extern ? is_abi_scalar_type(field->type) : is_packed_scalar_type(field->type);
    if (!ok) {
      char actual[160];
      snprintf(actual, sizeof(actual), "%s field '%s': %s", shape->layout, field->name ? field->name : "<field>", field->type ? field->type : "Unknown");
      return set_diag_detail(diag, 3031, is_extern ? "extern type field is not ABI-safe" : "packed type field must be scalar integer-like data", field->line, field->column, is_extern ? "primitive scalar or explicit ref/mutref field" : "integer, Bool, or char field", actual, is_extern ? "use explicit scalar fields at C ABI boundaries" : "use fixed-width integer fields for packed layout");
    }
  }
  return true;
}

static bool type_references_generic_param(const char *type, const Shape *shape) {
  if (!type || !shape) return false;
  for (size_t i = 0; i < shape->type_params.len; i++)
    if (type_text_references_name(type, shape->type_params.items[i].name)) return true;
  return false;
}

static bool validate_generic_owned_fields(const Shape *shape, ZDiag *diag) {
  if (!shape || shape->type_params.len == 0) return true;
  for (size_t field_index = 0; field_index < shape->fields.len; field_index++) {
    Param *field = &shape->fields.items[field_index];
    if (field->type && strstr(field->type, "owned<") && type_references_generic_param(field->type, shape)) {
      return set_diag_detail(diag, 3013, "generic containers cannot own generic payloads in this compiler", field->line, field->column, "non-owned generic field or concrete owned field", field->type, "store a concrete owned type or keep ownership outside the generic container until generic drop specialization lands");
    }
  }
  return true;
}

static bool validate_export_c_function(const Function *fun, ZDiag *diag) {
  if (!fun || !fun->export_c) return true;
  if (fun->raises) return set_diag_detail(diag, 3031, "export c function must not raise", fun->line, fun->column, "non-raising C ABI function", "fallible export", "return an explicit status value across C ABI boundaries");
  if (!is_c_abi_type(fun->return_type)) {
    return set_diag_detail(diag, 3031, "export c return type is not ABI-safe", fun->line, fun->column, "Void or primitive scalar return type", fun->return_type ? fun->return_type : "Unknown", "use explicit scalar C ABI return types");
  }
  for (size_t i = 0; i < fun->params.len; i++) {
    const Param *param = &fun->params.items[i];
    if (!is_c_abi_type(param->type)) {
      return set_diag_detail(diag, 3031, "export c parameter type is not ABI-safe", param->line, param->column, "primitive scalar or explicit ref/mutref parameter", param->type ? param->type : "Unknown", "use explicit scalar C ABI parameter types");
    }
  }
  return true;
}

static bool validate_function_error_set(const Function *fun, ZDiag *diag) {
  if (!fun || !fun->has_error_set) return true;
  if (!fun->raises) {
    return set_diag_detail(diag, 1001, "error set requires fallible marker", fun->line, fun->column, "`raises [Error]`", "error set without `raises`", "add `raises` before the error set");
  }
  for (size_t i = 0; i < fun->errors.len; i++) {
    const Param *error = &fun->errors.items[i];
    if (!error->name || !isupper((unsigned char)error->name[0])) {
      return set_diag_detail(diag, 1002, "error names must be UpperCamelCase symbols", error->line, error->column, "ErrorName", error->name ? error->name : "<error>", "start error names with an uppercase letter");
    }
    for (size_t previous = 0; previous < i; previous++) {
      if (strcmp(fun->errors.items[previous].name, error->name) == 0) {
        return set_diag_detail(diag, 1002, "duplicate error in `raises [...]` set", error->line, error->column, "unique error names", error->name, "remove the duplicate error");
      }
    }
  }
  return true;
}

static bool validate_static_type_param_decls(const Program *program, const ParamVec *params, ZDiag *diag) {
  if (!params) return true;
  for (size_t i = 0; i < params->len; i++) {
    const Param *param = &params->items[i];
    if (!param->is_static) continue;
    if (!validate_type_names(program, param->type, NULL, NULL, false, diag, param->line, param->column)) return false;
    if (!is_static_value_param_type(program, param->type)) {
      return set_diag_detail(diag, 3043, "static value parameter type is not supported", param->line, param->column, "integer, Bool, or enum static parameter", param->type ? param->type : "Unknown", "use a concrete integer, Bool, or enum type for this static parameter");
    }
  }
  return true;
}

static bool validate_type_param_constraints_in_scope(const Program *program, const Function *fun, const ParamVec *outer_params, ZDiag *diag) {
  if (!fun) return true;
  for (size_t i = 0; i < fun->type_params.len; i++) {
    const Param *param = &fun->type_params.items[i];
    if (!param->type || strcmp(param->type, "Type") == 0) continue;
    if (param->is_static) {
      if (!is_static_value_param_type(program, param->type)) {
        return set_diag_detail(diag, 3043, "static value parameter type is not supported", param->line, param->column, "integer, Bool, or enum static parameter", param->type, "use a concrete integer, Bool, or enum type for this static parameter");
      }
      continue;
    }
    const InterfaceDecl *interface = NULL;
    char **args = NULL;
    size_t arg_len = 0;
    if (!interface_constraint_parts(program, param->type, &interface, &args, &arg_len) || !interface) {
      free_type_arg_list(args, arg_len);
      return set_diag_detail(diag, 3038, "unknown interface constraint", param->line, param->column, "declared interface constraint", param->type, "declare the interface or change the generic parameter bound to Type");
    }
    for (size_t arg_index = 0; arg_index < arg_len; arg_index++) {
      const Param *interface_param = &interface->type_params.items[arg_index];
      if (interface_param->is_static) {
        const char *static_type = interface_param->type ? interface_param->type : "usize";
        if (!is_static_value_param_type(program, static_type)) {
          free_type_arg_list(args, arg_len);
          return set_diag_detail(diag, 3043, "static value parameter type is not supported", interface_param->line, interface_param->column, "integer, Bool, or enum static parameter", static_type, "use a concrete integer, Bool, or enum type for this static parameter");
        }
        bool shadowed = static_value_name_shadowed_by_type_param(&fun->type_params, outer_params, args[arg_index]);
        char *canonical = shadowed ? NULL : canonical_static_arg_for_type(program, args[arg_index], static_type);
        bool ok = !shadowed && (canonical || static_type_param_name_known_for_type(program, &fun->type_params, outer_params, args[arg_index], static_type));
        free(canonical);
        if (!ok) {
          char actual[160];
          snprintf(actual, sizeof(actual), "%s", args[arg_index] ? args[arg_index] : "Unknown");
          free_type_arg_list(args, arg_len);
          return set_diag_detail(diag, 3044, "static value argument must be deterministic and concrete", param->line, param->column, static_value_expected_label(program, static_type), actual, "pass an explicit literal, top-level const, or supported meta value with the static parameter type");
        }
        continue;
      }
      if (!validate_type_names(program, args[arg_index], &fun->type_params, outer_params, false, diag, param->line, param->column)) {
        free_type_arg_list(args, arg_len);
        return false;
      }
    }
    free_type_arg_list(args, arg_len);
  }
  return true;
}

static bool validate_type_param_constraints(const Program *program, const Function *fun, ZDiag *diag) {
  return validate_type_param_constraints_in_scope(program, fun, NULL, diag);
}

static bool is_builtin_type_name(const char *name) {
  if (!name) return false;
  const char *names[] = {
    "Void", "Bool", "bool", "String", "char", "Type",
    "World", "WorldStream", "Fs", "File", "ByteBuf", "NullAlloc", "FixedBufAlloc", "PageAlloc", "GeneralAlloc",
    "Vec", "FixedSet", "FixedDeque", "FixedRingBuffer", "FixedMap", "Duration", "RandSource", "ProcStatus", "ProcChild", "Address", "Net", "Conn", "Listener",
    "HttpMethod", "HttpClient", "HttpServer", "HttpResult", "HttpError", "HttpHeaderValue", "JsonDoc", "BufferedReader", "BufferedWriter", "FixedReader", "FixedWriter",
    "Env", "Args", "Clock", "Rand", "Proc", "Alloc",
    "Maybe", "Span", "MutSpan", "ref", "mutref", "owned",
    NULL
  };
  for (size_t i = 0; names[i]; i++) {
    if (strcmp(name, names[i]) == 0) return true;
  }
  return is_int_type(name) || is_float_type(name);
}

static bool type_param_name_known(const ParamVec *primary, const ParamVec *secondary, const char *name) {
  const ParamVec *sets[] = {primary, secondary, NULL};
  for (size_t set_index = 0; sets[set_index]; set_index++) {
    const ParamVec *params = sets[set_index];
    for (size_t i = 0; i < params->len; i++) {
      if (!params->items[i].is_static && params->items[i].name && strcmp(params->items[i].name, name) == 0) return true;
    }
  }
  return false;
}

static bool static_value_name_shadowed_by_type_param(const ParamVec *primary, const ParamVec *secondary, const char *name) {
  return type_param_name_known(primary, secondary, name);
}

static bool static_type_param_name_known_for_type(const Program *program, const ParamVec *primary, const ParamVec *secondary, const char *name, const char *expected_type) {
  const ParamVec *sets[] = {primary, secondary, NULL};
  for (size_t set_index = 0; sets[set_index]; set_index++) {
    const ParamVec *params = sets[set_index];
    for (size_t i = 0; i < params->len; i++) {
      const Param *param = &params->items[i];
      if (!param->is_static || !param->name || strcmp(param->name, name) != 0) continue;
      return types_compatible(program, expected_type ? expected_type : "usize", param->type ? param->type : "usize");
    }
  }
  return false;
}

static bool static_type_param_name_known_for_integer(const ParamVec *primary, const ParamVec *secondary, const char *name) {
  const ParamVec *sets[] = {primary, secondary, NULL};
  for (size_t set_index = 0; sets[set_index]; set_index++) {
    const ParamVec *params = sets[set_index];
    for (size_t i = 0; i < params->len; i++) {
      const Param *param = &params->items[i];
      if (!param->is_static || !param->name || strcmp(param->name, name) != 0) continue;
      return is_static_int_param_type(param->type ? param->type : "usize");
    }
  }
  return false;
}

static const char *visible_concrete_type_name_kind(const Program *program, const char *name) {
  if (!name || !name[0]) return NULL;
  if (is_builtin_type_name(name)) return "built-in type";
  if (!program) return NULL;
  if (find_shape(program, name)) return "shape";
  if (find_enum(program, name)) return "enum";
  if (find_choice(program, name)) return "choice";
  if (find_alias(program, name)) return "type alias";
  for (size_t i = 0; i < program->interfaces.len; i++) {
    if (strcmp(program->interfaces.items[i].name, name) == 0) return "interface";
  }
  return NULL;
}

static bool validate_type_param_names_unique(const ParamVec *params, ZDiag *diag) {
  if (!params) return true;
  for (size_t i = 0; i < params->len; i++) {
    const Param *param = &params->items[i];
    if (!param->name) continue;
    for (size_t previous = 0; previous < i; previous++) {
      const Param *existing = &params->items[previous];
      if (!existing->name || strcmp(existing->name, param->name) != 0) continue;
      return set_diag_detail(diag, 3008, "duplicate generic parameter", param->line, param->column, "unique generic parameter name", param->name, "rename one generic parameter");
    }
  }
  return true;
}

static bool validate_type_param_names_do_not_shadow(const Program *program, const ParamVec *params, const ParamVec *outer_params, ZDiag *diag) {
  if (!params) return true;
  for (size_t i = 0; i < params->len; i++) {
    const Param *param = &params->items[i];
    if (!param->name) continue;
    if (outer_params && param->is_static) {
      for (size_t previous = 0; previous < outer_params->len; previous++) {
        const Param *outer = &outer_params->items[previous];
        if (!outer->name || strcmp(outer->name, param->name) != 0) continue;
        char actual[160];
        snprintf(actual, sizeof(actual), "generic parameter '%s' already exists in the outer generic scope", param->name);
        return set_diag_detail(diag, 3008, "generic parameter shadows outer generic parameter", param->line, param->column, "distinct generic parameter name", actual, "rename the inner generic parameter");
      }
    }
    if (outer_params && !param->is_static) {
      for (size_t previous = 0; previous < outer_params->len; previous++) {
        const Param *outer = &outer_params->items[previous];
        if (!outer->name) continue;
        if (strcmp(outer->name, param->name) == 0) {
          char actual[160];
          if (outer->is_static) {
            snprintf(actual, sizeof(actual), "generic parameter '%s' already exists in the outer generic scope", param->name);
            return set_diag_detail(diag, 3008, "generic parameter shadows outer generic parameter", param->line, param->column, "distinct generic parameter name", actual, "rename the inner generic parameter");
          }
          snprintf(actual, sizeof(actual), "type parameter '%s' already exists in the outer generic scope", param->name);
          return set_diag_detail(diag, 3008, "generic type parameter shadows outer type parameter", param->line, param->column, "distinct generic type parameter name", actual, "rename the inner generic parameter");
        }
      }
    }
    if (strcmp(param->name, "Self") == 0) {
      return set_diag_detail(diag, 3008, "generic type parameter shadows Self type", param->line, param->column, "generic type parameter name other than Self", "'Self' is reserved for method Self types", "rename the generic parameter");
    }
    const char *kind = visible_concrete_type_name_kind(program, param->name);
    if (kind) {
      char actual[160];
      snprintf(actual, sizeof(actual), "'%s' already names a %s", param->name, kind);
      return set_diag_detail(diag, 3008, param->is_static ? "generic static parameter shadows concrete type name" : "generic type parameter shadows concrete type name", param->line, param->column, "generic parameter name that does not reuse a visible type", actual, "rename the generic parameter or the concrete type");
    }
  }
  return true;
}

static bool program_type_name_known(const Program *program, const ParamVec *primary, const ParamVec *secondary, const char *name, bool allow_self) {
  if (!name || !name[0]) return false;
  if (allow_self && strcmp(name, "Self") == 0) return true;
  if (is_builtin_type_name(name) || type_param_name_known(primary, secondary, name)) return true;
  if (find_shape(program, name) || find_enum(program, name) || find_choice(program, name) || find_alias(program, name)) return true;
  for (size_t i = 0; program && i < program->interfaces.len; i++) {
    if (strcmp(program->interfaces.items[i].name, name) == 0) return true;
  }
  return false;
}

static bool validate_type_names_inner(const Program *program, const char *type, const ParamVec *primary, const ParamVec *secondary, bool allow_self, ZDiag *diag, int line, int column) {
  if (!type) return true;
  type = type_strip_const(type);
  if (strcmp(type, "Self") == 0 && allow_self) return true;
  if (type[0] == '[') {
    const char *close = strchr(type, ']');
    if (!close || !close[1]) return true;
    char *length = z_strndup(type + 1, (size_t)(close - type - 1));
    bool shadowed = static_value_name_shadowed_by_type_param(primary, secondary, length);
    char *canonical = shadowed ? NULL : canonical_static_arg_for_type(program, length, "usize");
    bool length_ok = !shadowed && (canonical || static_type_param_name_known_for_integer(primary, secondary, length));
    free(canonical);
    if (!length_ok) {
      char actual[160];
      snprintf(actual, sizeof(actual), "%s", length ? length : "Unknown");
      free(length);
      return set_diag_detail(diag, 3044, "fixed array length must be a deterministic integer static value", line, column, static_value_expected_label(program, "usize"), actual, "use an integer literal, integer const, or integer static parameter for the array length");
    }
    free(length);
    return validate_type_names_inner(program, close + 1, primary, secondary, allow_self, diag, line, column);
  }
  const char *open = strchr(type, '<');
  if (open && open > type) {
    char *name = z_strndup(type, (size_t)(open - type));
    if (!program_type_name_known(program, primary, secondary, name, allow_self)) {
      char actual[160];
      snprintf(actual, sizeof(actual), "unknown type '%s'", name);
      free(name);
      return set_diag_detail(diag, 3003, "unknown type name", line, column, "declared type name", actual, "declare the type or correct the annotation");
    }
    char **args = NULL;
    size_t arg_len = 0;
    bool parsed = type_generic_arg_list(type, name, &args, &arg_len);
    const Shape *shape = find_shape(program, name);
    const InterfaceDecl *interface = shape ? NULL : find_interface(program, name);
    const ParamVec *type_params = shape ? &shape->type_params : (interface ? &interface->type_params : NULL);
    if (parsed && type_params) {
      if (arg_len != type_params->len) {
        char actual[160];
        snprintf(actual, sizeof(actual), "%zu type argument(s)", arg_len);
        free_type_arg_list(args, arg_len);
        free(name);
        return set_diag_detail(diag, 3032, shape ? "shape type argument count mismatch" : "interface type argument count mismatch", line, column, shape ? "one argument per shape type parameter" : "one argument per interface type parameter", actual, "match the declaration's type parameter list");
      }
      for (size_t i = 0; i < arg_len; i++) {
        if (type_params->items[i].is_static) {
          const char *static_type = type_params->items[i].type ? type_params->items[i].type : "usize";
          if (!is_static_value_param_type(program, static_type)) {
            free_type_arg_list(args, arg_len);
            free(name);
            return set_diag_detail(diag, 3043, "static value parameter type is not supported", line, column, "integer, Bool, or enum static parameter", static_type, "use a concrete integer, Bool, or enum type for this static parameter");
          }
          bool shadowed = static_value_name_shadowed_by_type_param(primary, secondary, args[i]);
          char *canonical = shadowed ? NULL : canonical_static_arg_for_type(program, args[i], static_type);
          bool ok = !shadowed && (canonical || static_type_param_name_known_for_type(program, primary, secondary, args[i], static_type));
          free(canonical);
          if (!ok) {
            char actual[160];
            snprintf(actual, sizeof(actual), "%s", args[i] ? args[i] : "Unknown");
            free_type_arg_list(args, arg_len);
            free(name);
            return set_diag_detail(diag, 3044, "static value argument must be deterministic and concrete", line, column, static_value_expected_label(program, static_type), actual, "pass an explicit literal, top-level const, or supported meta value with the static parameter type");
          }
          continue;
        }
        if (!validate_type_names_inner(program, args[i], primary, secondary, allow_self, diag, line, column)) {
          free_type_arg_list(args, arg_len);
          free(name);
          return false;
        }
      }
    } else if (parsed) {
      for (size_t i = 0; i < arg_len; i++) {
        if (!validate_type_names_inner(program, args[i], primary, secondary, allow_self, diag, line, column)) {
          free_type_arg_list(args, arg_len);
          free(name);
          return false;
        }
      }
    }
    free_type_arg_list(args, arg_len);
    free(name);
    return true;
  }
  if (program_type_name_known(program, primary, secondary, type, allow_self)) return true;
  char actual[160];
  snprintf(actual, sizeof(actual), "unknown type '%s'", type);
  return set_diag_detail(diag, 3003, "unknown type name", line, column, "declared type name", actual, "declare the type or correct the annotation");
}

static bool validate_type_names(const Program *program, const char *type, const ParamVec *primary, const ParamVec *secondary, bool allow_self, ZDiag *diag, int line, int column) {
  return validate_type_names_inner(program, type, primary, secondary, allow_self, diag, line, column);
}

static bool validate_interface_decl(const Program *program, const InterfaceDecl *interface, ZDiag *diag) {
  if (!interface) return true;
  for (size_t previous = 0; previous < program->interfaces.len; previous++) {
    if (&program->interfaces.items[previous] == interface) break;
    if (strcmp(program->interfaces.items[previous].name, interface->name) == 0) {
      return set_diag_detail(diag, 3008, "duplicate interface declaration", interface->line, interface->column, "unique interface name", "interface name already declared", "rename one interface");
    }
  }
  if (!validate_type_param_names_unique(&interface->type_params, diag)) return false;
  if (!validate_type_param_names_do_not_shadow(program, &interface->type_params, NULL, diag)) return false;
  if (!validate_static_type_param_decls(program, &interface->type_params, diag)) return false;
  for (size_t method_index = 0; method_index < interface->methods.len; method_index++) {
    const Function *method = &interface->methods.items[method_index];
    if (method->body.len > 0) {
      return set_diag_detail(diag, 3038, "interface methods cannot have bodies", method->line, method->column, "method signature only", "method body", "move implementation to a concrete shape static method");
    }
    if (!validate_type_param_names_unique(&method->type_params, diag)) return false;
    if (!validate_type_param_names_do_not_shadow(program, &method->type_params, &interface->type_params, diag)) return false;
    if (!validate_static_type_param_decls(program, &method->type_params, diag)) return false;
    if (!validate_type_param_constraints_in_scope(program, method, &interface->type_params, diag)) return false;
    if (!validate_type_form(method->return_type, diag, method->line, method->column)) return false;
    if (!validate_type_names(program, method->return_type, &interface->type_params, &method->type_params, true, diag, method->line, method->column)) return false;
    if (!validate_function_error_set(method, diag)) return false;
    for (size_t param_index = 0; param_index < method->params.len; param_index++) {
      const Param *param = &method->params.items[param_index];
      if (!validate_type_form(param->type, diag, param->line, param->column)) return false;
      if (!validate_type_names(program, param->type, &interface->type_params, &method->type_params, true, diag, param->line, param->column)) return false;
    }
    for (size_t previous = 0; previous < method_index; previous++) {
      if (strcmp(interface->methods.items[previous].name, method->name) == 0) {
        return set_diag_detail(diag, 3039, "duplicate interface method declaration", method->line, method->column, "unique method name inside interface", method->name, "rename one required method");
      }
    }
  }
  return true;
}

static bool c_header_has_function_like_macro(const char *header) {
  const char *cursor = header ? header : "";
  while ((cursor = strstr(cursor, "#define")) != NULL) {
    cursor += strlen("#define");
    while (*cursor == ' ' || *cursor == '\t') cursor++;
    while ((*cursor >= 'A' && *cursor <= 'Z') || (*cursor >= 'a' && *cursor <= 'z') || (*cursor >= '0' && *cursor <= '9') || *cursor == '_') cursor++;
    if (*cursor == '(') return true;
  }
  return false;
}

static bool validate_c_imports(const Program *program, const ZTargetInfo *target, ZDiag *diag) {
  for (size_t i = 0; program && i < program->c_imports.len; i++) {
    const CImport *import = &program->c_imports.items[i];
    ZDiag read_diag = {0};
    const char *read_path = import->resolved_header && import->resolved_header[0] ? import->resolved_header : import->header;
    char *header = z_read_file(read_path, &read_diag);
    if (!header) {
      return set_diag_detail(diag, 8001, "extern c header could not be read", import->line, import->column, "readable C header path", import->header ? import->header : "<missing>", "make the header path package-relative and target-specific");
    }
    char *surface = z_c_header_strip_comments(header);
    bool unsupported = false;
    const char *reason = NULL;
    if (strstr(surface ? surface : header, "...")) {
      unsupported = true;
      reason = "variadic function";
    } else if (c_header_has_function_like_macro(surface ? surface : header)) {
      unsupported = true;
      reason = "function-like macro";
    } else if (strstr(surface ? surface : header, "[]")) {
      unsupported = true;
      reason = "flexible array";
    } else if (strstr(surface ? surface : header, ":")) {
      unsupported = true;
      reason = "bitfield";
    } else {
      ZCImportFunctionVec functions = {0};
      z_c_header_parse_functions_for_target(surface ? surface : header, target, &functions);
      for (size_t fn = 0; fn < functions.len; fn++) {
        if (functions.items[fn].old_style_params) {
          unsupported = true;
          reason = "old-style empty parameter list";
          break;
        }
      }
      z_c_import_function_vec_free(&functions);
    }
    free(surface);
    free(header);
    if (unsupported) {
      return set_diag_detail(diag, 8002, "extern c header contains unsupported C surface", import->line, import->column, "functions, constants, structs, enums, and typedefs", reason, "wrap unsupported C behind a small C shim or remove it from this imported header");
    }
  }
  return true;
}

static bool check_program_internal_body(const Program *program, bool require_entrypoint, ZDiag *diag) {
  meta_cache_free(&default_meta_cache);
  DiagSink diag_sink = {.diag = diag};
  CheckContext check_ctx = {.program = program, .target = check_context_target(NULL), .meta_cache = &default_meta_cache, .diags = &diag_sink};
  CheckContext *ctx = &check_ctx;
  const Function *main_fun = NULL;
  bool has_test = false;
  if (!validate_c_imports(program, check_ctx.target, diag)) return false;
  for (size_t i = 0; i < program->aliases.len; i++) {
    const TypeAlias *alias = &program->aliases.items[i];
    if (!validate_type_form(alias->target, diag, alias->line, alias->column)) return false;
    if (!validate_type_names(program, alias->target, NULL, NULL, false, diag, alias->line, alias->column)) return false;
    for (size_t previous = 0; previous < i; previous++) {
      if (strcmp(program->aliases.items[previous].name, alias->name) == 0) {
        return set_diag_detail(diag, 3036, "duplicate type alias declaration", alias->line, alias->column, "unique type alias name", "type alias already declared", "rename one alias");
      }
    }
    const char *cursor = alias->target;
    for (size_t depth = 0; depth < program->aliases.len; depth++) {
      const TypeAlias *next = find_alias(program, cursor);
      if (!next) break;
      if (strcmp(next->name, alias->name) == 0) {
        return set_diag_detail(diag, 3036, "type alias cycle is not allowed", alias->line, alias->column, "alias to a concrete existing type", alias->target ? alias->target : "Unknown", "point the alias at a non-cyclic concrete type");
      }
      cursor = next->target;
    }
  }
  for (size_t i = 0; i < program->interfaces.len; i++) {
    if (!validate_interface_decl(program, &program->interfaces.items[i], diag)) return false;
  }
  Scope const_scope = {0};
  for (size_t i = 0; i < program->consts.len; i++) {
    const ConstDecl *item = &program->consts.items[i];
    const char *declared_type = item->type;
    if (item->is_public && !declared_type) {
      scope_free(&const_scope);
      return set_diag_detail(diag, 3037, "public const requires an explicit type", item->line, item->column, "pub const name: Type = value", "public const without annotation", "add a concrete public type annotation");
    }
    if (declared_type && !validate_type_form(declared_type, diag, item->line, item->column)) {
      scope_free(&const_scope);
      return false;
    }
    if (declared_type && !validate_type_names(program, declared_type, NULL, NULL, false, diag, item->line, item->column)) {
      scope_free(&const_scope);
      return false;
    }
    if (!check_expr_expected(ctx, program, item->expr, &const_scope, diag, declared_type)) {
      scope_free(&const_scope);
      return false;
    }
    const char *actual = expr_type(ctx, program, item->expr, &const_scope);
    if (declared_type && !types_compatible_in_scope(program, &const_scope, declared_type, actual)) {
      bool ok = set_diag_detail(diag, 3006, "const initializer type does not match annotation", item->line, item->column, declared_type, actual, "change the literal or update the const annotation");
      scope_free(&const_scope);
      return ok;
    }
    for (size_t previous = 0; previous < i; previous++) {
      if (strcmp(program->consts.items[previous].name, item->name) == 0) {
        bool ok = set_diag_detail(diag, 3008, "duplicate const declaration", item->line, item->column, "unique const name", "const name already declared", "rename one const");
        scope_free(&const_scope);
        return ok;
      }
    }
    scope_add(&const_scope, item->name, declared_type ? declared_type : actual, false);
  }
  scope_free(&const_scope);
  for (size_t i = 0; i < program->shapes.len; i++) {
    if (!validate_type_param_names_do_not_shadow(program, &program->shapes.items[i].type_params, NULL, diag)) return false;
    for (size_t type_param_index = 0; type_param_index < program->shapes.items[i].type_params.len; type_param_index++) {
      Param *type_param = &program->shapes.items[i].type_params.items[type_param_index];
      for (size_t previous = 0; previous < type_param_index; previous++) {
        if (strcmp(program->shapes.items[i].type_params.items[previous].name, type_param->name) == 0) {
          return set_diag_detail(diag, 3008, "duplicate shape type parameter", type_param->line, type_param->column, "unique type parameter name", type_param->name, "rename one type parameter");
        }
      }
      if (type_param->is_static && !validate_type_names(program, type_param->type, NULL, NULL, false, diag, type_param->line, type_param->column)) return false;
      if (type_param->is_static && !is_static_value_param_type(program, type_param->type)) {
        return set_diag_detail(diag, 3043, "static value parameter type is not supported", type_param->line, type_param->column, "integer, Bool, or enum static parameter", type_param->type ? type_param->type : "Unknown", "use a concrete integer, Bool, or enum type for this static parameter");
      }
    }
    for (size_t field_index = 0; field_index < program->shapes.items[i].fields.len; field_index++) {
      Param *field = &program->shapes.items[i].fields.items[field_index];
      if (!validate_type_form(field->type, diag, field->line, field->column)) return false;
      if (!validate_type_names(program, field->type, &program->shapes.items[i].type_params, NULL, false, diag, field->line, field->column)) return false;
      for (size_t previous = 0; previous < field_index; previous++) {
        if (strcmp(program->shapes.items[i].fields.items[previous].name, field->name) == 0) {
          return set_diag_detail(diag, 3008, "duplicate shape field", field->line, field->column, "unique field name", field->name, "rename or remove one field");
        }
      }
    }
    if (!validate_generic_owned_fields(&program->shapes.items[i], diag)) return false;
    if (!validate_shape_layout(&program->shapes.items[i], diag)) return false;
    for (size_t method_index = 0; method_index < program->shapes.items[i].methods.len; method_index++) {
      Function *method = &program->shapes.items[i].methods.items[method_index];
      if (!validate_type_param_names_unique(&method->type_params, diag)) return false;
      if (!validate_type_param_names_do_not_shadow(program, &method->type_params, &program->shapes.items[i].type_params, diag)) return false;
      if (!validate_static_type_param_decls(program, &method->type_params, diag)) return false;
      if (!validate_type_param_constraints_in_scope(program, method, &program->shapes.items[i].type_params, diag)) return false;
      if (!validate_shape_method_type_form(method->return_type, diag, method->line, method->column)) return false;
      if (!validate_type_names(program, method->return_type, &program->shapes.items[i].type_params, &method->type_params, true, diag, method->line, method->column)) return false;
      for (size_t param_index = 0; param_index < method->params.len; param_index++) {
        Param *param = &method->params.items[param_index];
        if (!validate_shape_method_type_form(param->type, diag, param->line, param->column)) return false;
        if (!validate_type_names(program, param->type, &program->shapes.items[i].type_params, &method->type_params, true, diag, param->line, param->column)) return false;
      }
      if (!validate_drop_method(&program->shapes.items[i], method, diag)) return false;
      if (!check_shape_method_body(ctx, program, &program->shapes.items[i], method, diag)) return false;
    }
    for (size_t other = i + 1; other < program->shapes.len; other++) {
      if (strcmp(program->shapes.items[i].name, program->shapes.items[other].name) == 0) {
        return set_diag_detail(diag, 3008, "duplicate type declaration", program->shapes.items[other].line, program->shapes.items[other].column, "unique type name", "type name already declared", "rename one type");
      }
    }
  }
  for (size_t i = 0; i < program->enums.len; i++) {
    for (size_t case_index = 0; case_index < program->enums.items[i].cases.len; case_index++) {
      Param *item_case = &program->enums.items[i].cases.items[case_index];
      if (!validate_type_form(item_case->type, diag, item_case->line, item_case->column)) return false;
      if (!validate_type_names(program, item_case->type, NULL, NULL, false, diag, item_case->line, item_case->column)) return false;
      for (size_t previous = 0; previous < case_index; previous++) {
        if (strcmp(program->enums.items[i].cases.items[previous].name, item_case->name) == 0) {
          return set_diag_detail(diag, 3008, "duplicate enum case", item_case->line, item_case->column, "unique enum case name", item_case->name, "rename or remove one case");
        }
      }
    }
    for (size_t other = i + 1; other < program->enums.len; other++) {
      if (strcmp(program->enums.items[i].name, program->enums.items[other].name) == 0) {
        return set_diag_detail(diag, 3008, "duplicate type declaration", program->enums.items[other].line, program->enums.items[other].column, "unique type name", "type name already declared", "rename one type");
      }
    }
  }
  for (size_t i = 0; i < program->choices.len; i++) {
    for (size_t case_index = 0; case_index < program->choices.items[i].cases.len; case_index++) {
      Param *item_case = &program->choices.items[i].cases.items[case_index];
      if (!validate_type_form(item_case->type, diag, item_case->line, item_case->column)) return false;
      if (!validate_type_names(program, item_case->type, NULL, NULL, false, diag, item_case->line, item_case->column)) return false;
      for (size_t previous = 0; previous < case_index; previous++) {
        if (strcmp(program->choices.items[i].cases.items[previous].name, item_case->name) == 0) {
          return set_diag_detail(diag, 3008, "duplicate choice case", item_case->line, item_case->column, "unique choice case name", item_case->name, "rename or remove one case");
        }
      }
    }
    for (size_t other = i + 1; other < program->choices.len; other++) {
      if (strcmp(program->choices.items[i].name, program->choices.items[other].name) == 0) {
        return set_diag_detail(diag, 3008, "duplicate type declaration", program->choices.items[other].line, program->choices.items[other].column, "unique type name", "type name already declared", "rename one type");
      }
    }
  }
  for (size_t i = 0; i < program->functions.len; i++) {
    const Function *fun = &program->functions.items[i];
    for (size_t other = i + 1; other < program->functions.len; other++) {
      if (strcmp(fun->name, program->functions.items[other].name) == 0) {
        return set_diag_detail(diag, 3008, "duplicate function declaration", program->functions.items[other].line, program->functions.items[other].column, "unique function name", "function name already declared", "rename one function");
      }
    }
    if (strcmp(fun->name, "main") == 0) main_fun = fun;
    if (fun->is_test) has_test = true;
    if (!validate_type_param_names_unique(&fun->type_params, diag)) return false;
    if (!validate_type_param_names_do_not_shadow(program, &fun->type_params, NULL, diag)) return false;
    if (!validate_type_form(fun->return_type, diag, fun->line, fun->column)) return false;
    if (!validate_type_names(program, fun->return_type, &fun->type_params, NULL, false, diag, fun->line, fun->column)) return false;
    if (!validate_type_param_constraints(program, fun, diag)) return false;
    if (!validate_function_error_set(fun, diag)) return false;
    if (!validate_export_c_function(fun, diag)) return false;
  }
  if (require_entrypoint && !main_fun && !has_test) return set_diag_detail(diag, 2001, "missing main function", 1, 1, "function named main", "no main function", "add `pub fn main Void`");
  for (size_t i = 0; i < program->functions.len; i++) {
    const Function *fun = &program->functions.items[i];
    Scope scope = {0};
    for (size_t const_index = 0; const_index < program->consts.len; const_index++) {
      const ConstDecl *item = &program->consts.items[const_index];
      scope_add(&scope, item->name, item->type ? item->type : expr_type(ctx, program, item->expr, &scope), false);
    }
    for (size_t type_param_index = 0; type_param_index < fun->type_params.len; type_param_index++) {
      const Param *type_param = &fun->type_params.items[type_param_index];
      if (type_param->is_static) scope_add_static_param(&scope, type_param->name, type_param->type);
      else scope_add_type_param(&scope, type_param->name);
    }
    for (size_t param_index = 0; param_index < fun->params.len; param_index++) {
      Param *param = &fun->params.items[param_index];
      if (!validate_type_form(param->type, diag, param->line, param->column)) {
        scope_free(&scope);
        return false;
      }
      if (!validate_type_names(program, param->type, &fun->type_params, NULL, false, diag, param->line, param->column)) {
        scope_free(&scope);
        return false;
      }
      for (size_t previous = 0; previous < param_index; previous++) {
        if (strcmp(fun->params.items[previous].name, param->name) == 0) {
          scope_free(&scope);
          return set_diag_detail(diag, 3001, "duplicate parameter", param->line, param->column, "unique parameter name", "parameter name already declared", "rename one parameter");
        }
      }
      scope_add_param_decl(&scope, param->name, param->type, param->line, param->column);
    }
    for (size_t shape_index = 0; shape_index < program->shapes.len; shape_index++) scope_add(&scope, program->shapes.items[shape_index].name, "Type", false);
    for (size_t interface_index = 0; interface_index < program->interfaces.len; interface_index++) scope_add(&scope, program->interfaces.items[interface_index].name, "Type", false);
    for (size_t enum_index = 0; enum_index < program->enums.len; enum_index++) scope_add(&scope, program->enums.items[enum_index].name, "Type", false);
    for (size_t choice_index = 0; choice_index < program->choices.len; choice_index++) scope_add(&scope, program->choices.items[choice_index].name, "Type", false);
    for (size_t alias_index = 0; alias_index < program->aliases.len; alias_index++) scope_add(&scope, program->aliases.items[alias_index].name, "Type", false);
    ctx->function = fun;
    ctx->allow_fallible_call = 0;
    ctx->return_provenance_expr_bindings = NULL;
    ctx->return_provenance_expr_binding_len = 0;
    bool ok = check_stmt_vec(ctx, program, fun, &fun->body, &scope, diag);
    if (ok) ok = check_function_has_required_return(fun, diag);
    if (ok) ok = check_function_frame_limit(program, fun, diag);
    ctx->function = NULL;
    scope_free(&scope);
    if (!ok) return false;
  }
  return true;
}

static bool check_program_internal(const Program *program, bool require_entrypoint, ZDiag *diag) {
  provenance_summary_state_reset();
  bool ok = check_program_internal_body(program, require_entrypoint, diag);
  if (provenance_summary_budget_exceeded) {
    char actual[256];
    snprintf(actual, sizeof(actual), "provenance analysis work budget exceeded while summarizing '%s'", provenance_summary_budget_function);
    return set_diag_detail(diag, 3053, "borrow provenance analysis did not converge", provenance_summary_budget_line, provenance_summary_budget_column, "recursive call cycle analyzable within the provenance work budget", actual, "simplify the recursive call cycle around this function and report this compiler defect with the source program");
  }
  return ok;
}

bool z_check_program(const Program *program, ZDiag *diag) {
  return check_program_internal(program, true, diag);
}

bool z_check_program_library(const Program *program, ZDiag *diag) {
  return check_program_internal(program, false, diag);
}