fix: complete Node TLS parity and finish the class-semantics follow-up

Cargo.toml

@@ -343,6 +343,7 @@ not_unsafe_ptr_arg_deref = "allow"
 # SWC for TypeScript parsing
 swc_ecma_parser = "32.0"
 swc_ecma_ast = "19.0"
+swc_ecma_visit = "19.0"
 swc_common = "18.0"
 swc_ecma_codegen = "21.0"
 swc_ecma_transforms_base = "32.0"

changelog.d/8663-node-tls-parity.md

@@ -0,0 +1,6 @@
+Completed `node:tls` compatibility across the full node-suite inventory. TLS
+servers and sockets now support real loopback handshakes, ALPN and SNI
+selection, certificate and secure-context rotation, custom trust stores,
+client certificates, identity callbacks, negotiated state, orderly shutdown,
+and Node-compatible validation and error shapes in both bundled and optimized
+external-net builds. The current TLS inventory passes 100/100 fixtures.

crates/perry-api-manifest/src/entries/part_1.rs

@@ -778,6 +778,13 @@ pub(crate) const API_MANIFEST_PART_1: &[ApiEntry] = &[
     method("net", "isSessionReused", true, Some("Socket")),
     method("net", "exportKeyingMaterial", true, Some("Socket")),
     method("net", "setMaxSendFragment", true, Some("Socket")),
+    method("net", "getEphemeralKeyInfo", true, Some("Socket")),
+    method("net", "getFinished", true, Some("Socket")),
+    method("net", "getPeerFinished", true, Some("Socket")),
+    method("net", "getSharedSigalgs", true, Some("Socket")),
+    method("net", "getX509Certificate", true, Some("Socket")),
+    method("net", "getPeerX509Certificate", true, Some("Socket")),
+    method("net", "setKeyCert", true, Some("Socket")),
     // Issue #1123 followup — `net.Server` instance methods backing
     // `createServer(...).listen/.close/.address/.on`. Mirrors the
     // shape of the http-server rows at entries.rs:2298. The
@@ -861,6 +868,7 @@ pub(crate) const API_MANIFEST_PART_1: &[ApiEntry] = &[
         TypeSpec::Any,
     ),
     method("tls", "getCiphers", false, None),
+    method("tls", "getCertificateCompressionAlgorithms", false, None),
     method_sig(
         "tls",
         "setDefaultCACertificates",

crates/perry-codegen/src/codegen/method.rs

@@ -1048,7 +1048,16 @@ pub(super) fn compile_method(
             // .pathname` threw. Forward this synthesized ctor's params to the
             // runtime dynamic-parent super dispatcher, mirroring the explicit
             // `Expr::SuperCall` dynamic-parent path in `expr/this_super_call.rs`.
-            if builtin_parent_runtime.is_none() && class.extends_expr.is_some() {
+            let parent_is_uncallable_builtin = class
+                .extends_name
+                .as_deref()
+                .map(crate::expr::is_other_builtin_constructor_name)
+                .unwrap_or(false)
+                && class.extends_name.as_deref() != Some("SharedArrayBuffer");
+            if builtin_parent_runtime.is_none()
+                && class.extends_expr.is_some()
+                && !parent_is_uncallable_builtin
+            {
                 if let Some(cid) = ctx.class_ids.get(&class.name).copied().filter(|c| *c != 0) {
                     let undef_lit =
                         crate::nanbox::double_literal(f64::from_bits(crate::nanbox::TAG_UNDEFINED));

crates/perry-codegen/src/codegen/mod.rs

@@ -213,6 +213,7 @@ mod spec_preserve_none_tests;
 mod spec_return_proof;
 #[cfg(test)]
 mod spec_self_recursion_tests;
+pub(crate) mod static_fields;
 mod string_pool;
 #[cfg(test)]
 mod testing_feature_gate_tests;