Check typestate calls made directly on a constructor call (#361)

Fixes #336.

## Problem
`new Token(1).use()` passed although `Token(int)` leaves the object in
`used` and `use()` requires `fresh`; the same call through a local was
reported. `prepareInvocationTarget` only knew variable reads and targets
that already had an instance, so a constructor-call receiver had none
and `checkTargetChanges` skipped it. Real code does this often (`new
ServerSocket(port).accept()`, `new IOException(msg).initCause(e)`).

## Change
`AuxStateHandler.prepareInvocationTarget`: when the target is a
constructor call carrying its state (the constructor's to-state, or the
class's default state, as `getConstructorInvocationRefinements` already
records), it creates a fresh variable instance in that state, records
the type's supertypes on it (so a spec on a supertype applies), and
makes it the invocation's target. The usual from-state check and
transition then apply.

## Tests
- `ErrorConstructorReceiver`: `new ErrorReceiverToken(1).use()` gives
`found used(#fresh) but expected fresh(#fresh)`; passed on main.
- `CorrectConstructorReceiver`: `new …().use()` and `new …(1).report()`
pass.
- `mvn test` passes.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Author: CatarinaGamboa

liquidjava-example/src/main/java/testSuite/CorrectConstructorReceiver.java

@@ -0,0 +1,26 @@
+package testSuite;
+
+import liquidjava.specification.StateRefinement;
+import liquidjava.specification.StateSet;
+
+@StateSet({"fresh", "used"})
+class CorrectReceiverToken {
+    @StateRefinement(to = "fresh(this)")
+    public CorrectReceiverToken() {}
+
+    @StateRefinement(to = "used(this)")
+    public CorrectReceiverToken(int spent) {}
+
+    @StateRefinement(from = "fresh(this)", to = "used(this)")
+    public void use() {}
+
+    @StateRefinement(from = "used(this)")
+    public void report() {}
+}
+
+public class CorrectConstructorReceiver {
+    static void chained() {
+        new CorrectReceiverToken().use();
+        new CorrectReceiverToken(1).report();
+    }
+}

liquidjava-example/src/main/java/testSuite/ErrorConstructorReceiver.java

@@ -0,0 +1,25 @@
+package testSuite;
+
+import liquidjava.specification.StateRefinement;
+import liquidjava.specification.StateSet;
+
+@StateSet({"fresh", "used"})
+class ErrorReceiverToken {
+    @StateRefinement(to = "fresh(this)")
+    public ErrorReceiverToken() {}
+
+    @StateRefinement(to = "used(this)")
+    public ErrorReceiverToken(int spent) {}
+
+    @StateRefinement(from = "fresh(this)", to = "used(this)")
+    public void use() {}
+
+    @StateRefinement(from = "used(this)")
+    public void report() {}
+}
+
+public class ErrorConstructorReceiver {
+    static void chained() {
+        new ErrorReceiverToken(1).use(); // Expect: State Refinement Error
+    }
+}

liquidjava-verifier/src/main/java/liquidjava/processor/refinement_checker/object_checkers/AuxStateHandler.java

@@ -719,6 +719,17 @@ public static String prepareInvocationTarget(TypeChecker tc, CtElement target2,
             Optional<Variable> v = target2Vi.getParent();
             invocation.putMetadata(Keys.TARGET, target2Vi);
             return v.map(Refined::getName).orElse(target2Vi.getName());
+        } else if (target2 instanceof CtConstructorCall<?> newCall
+                && newCall.getMetadata(Keys.REFINEMENT)instanceof Predicate state) {
+            // `new T(args).method()`: the receiver is a fresh object in the state the constructor gives
+            String name = String.format(Formats.FRESH, tc.getContext().getCounter());
+            CtTypeReference<?> type = newCall.getType();
+            RefinedVariable receiver = tc.getContext().addInstanceToContext(name, type,
+                    state.substituteVariable(Keys.THIS, name).substituteVariable(Keys.WILDCARD, name), newCall);
+            receiver.addSuperTypes(type.getSuperclass(), type.getSuperInterfaces());
+            newCall.putMetadata(Keys.TARGET, receiver);
+            invocation.putMetadata(Keys.TARGET, receiver);
+            return name;
         }
         return null;
     }