@kudzujs/core 0.14.0 → 0.14.2

package/PERFORMANCE.md

@@ -2,6 +2,59 @@
 
 Reproducibility classes: `npm run benchmark`, `npm run benchmark:keyed`, `npm run benchmark:native`, `npm run benchmark:module-cache`, `npm run benchmark:project-navigation`, `npm run benchmark:project-state`, and `npm run benchmark:source-scale` are maintained in this repository; `npm run benchmark:commerce` is a maintained paired runner over the public external storefront; older excluded-workspace sections are historical provenance only and are not current framework rankings.
 
+## 0.14.2 Infinite Loading Composition
+
+Measured 2026-08-26 on macOS arm64 with Node 24.14.0 and Chrome
+151.0.7922.174.
+
+The project route adds one intrinsic sentinel, an owned `IntersectionObserver`,
+cursor fetch, duplicate suppression, error/retry/end state, and immutable keyed
+append. Required Chrome proves a three-request bound across two successful pages,
+at most six retained projects, retained existing-row identity, observer cleanup,
+and route-owned fetch abort. `/help` remains 0 B JavaScript.
+
+The application emits 44 files totaling 168,037 raw / 52,955 aggregate gzip
+bytes with deploy SHA-256
+`230dea098442275e42a966ca595743a4da9c832327ba52d4d09de663c68f8f1a`.
+The two-route session remains 17 JavaScript files and totals 76,889 raw / 26,750
+aggregate gzip bytes. The authored application composition adds 3,732 raw / 770
+gzip deploy bytes and 2,063 raw / 546 gzip session bytes over `0.14.1`; no
+semantic primitive, IR kind, compiler pass, production compiler/runtime line,
+runtime concept, or public API was added.
+
+Table update samples are `[0.4, 0.5, 0.5, 0.3, 0.5, 0.4, 0.6]` ms, with a 0.5
+ms median and 0.3/0.6 ms minimum/maximum. Navigation samples are
+`[2.3, 2.3, 2.2, 2.6, 2.5, 2.5, 2.3]` ms, with a 2.3 ms median and 2.2/2.6 ms
+minimum/maximum. The environment differs from the `0.14.1` release evidence, so
+no improvement or regression claim is made.
+
+## 0.14.1 Nested Object-State Collections
+
+Measured 2026-08-26 on Linux x64 with Node 24.14.0 and Chrome
+142.0.7444.175.
+
+The project route now roots its selected project table and nested issue rows in
+one direct `projectData.projects` field. Required Chrome proves immutable
+whole-object replacement, nested insert/update/reorder/remove/re-add, retained
+identity, latest handlers, descendant state release, and fresh remount. `/help`
+remains 0 B JavaScript.
+
+The application emits 44 files totaling 164,305 raw / 52,185 aggregate gzip
+bytes with deploy SHA-256
+`0a3b7e10b3447a76a9c04ef34ad7c2bfa30400ea53c9d16fc85b1c7cbf2ea203`.
+The two-route session remains 17 JavaScript files and totals 74,826 raw / 26,204
+aggregate gzip bytes. The delta from `0.14.0` includes the authored nested issue
+controls and handlers plus one build-time validation-line edit and one production
+list-runtime line; no semantic primitive, IR kind, compiler pass, runtime concept,
+or public API was added.
+
+Table update samples are
+`[0.8, 0.8, 0.7, 0.8, 0.9, 0.8, 0.8]` ms, with a 0.8 ms median and 0.7/0.9 ms
+minimum/maximum. Navigation samples are
+`[3.7, 4.1, 4.5, 3.9, 4.2, 3.9, 4.3]` ms, with a 4.1 ms median and 3.7/4.5 ms
+minimum/maximum. The navigation ranges overlap the `0.14.0` release evidence;
+no improvement or regression claim is made.
+
 `npm run benchmark:source-scale` generates its fixture outside the repository so 50,000 lines of synthetic source are not tracked. The default topology is 50 pages plus 450 route-owned imported modules. Generation is excluded from timing; fresh-process samples separately report source reads, reachable-graph discovery, source compilation, clean production build, compiler-result and deploy digests, output files/bytes, cache counters, and peak RSS. `ROUTES`, `MODULES_PER_ROUTE`, `FILLER_LINES`, `WARMUPS`, and `RUNS` may reduce or expand the fixture without changing the default acceptance floor. `TARGET_ROOT` measures another checkout; `BASELINE_ROOT` alternates that checkout with the current tree and requires identical deploy output.
 
 The maintained 2026-08-13 comparison used Node 24.14.0 and an Intel Core i5-9500 Linux x64 host, one warm-up, and seven alternating fresh-process samples against clean `v0.8.44`. A narrow fast path skips Kudzu semantic transformation for 450 plain `.ts` modules whose runtime edges are exclusively resolvable relative TypeScript imports or exports; all other modules retain the existing transformer. Compile median fell from 2,323.9 ms to 1,413.2 ms (39.2%) and clean-build median from 3,325.3 ms to 2,382.4 ms (28.4%); every paired sample improved. Compile peak-RSS median fell from 571.2 MiB to 552.6 MiB, while build peak RSS was 570.9 MiB versus 568.8 MiB. Compiler scratch fell from 7,328,390 to 1,971,061 bytes. Both targets emitted the same 50 static HTML files, 10,980 bytes, and deploy SHA-256 `e107d78a7f55bc8a1af0ea6e53efeffa19b3d44d21c892484d103fa346e7ba7b`. This is a source-scale compiler comparison, not a cross-framework result.

package/README.md

@@ -14,7 +14,7 @@ Kudzu compiles ordinary React-shaped TypeScript and TSX into complete static HTM
 
 > Experimental `0.14.x`: the compiler API and supported TSX surface may change.
 
-**Latest release: 0.14.0 - Project table CRUD and identity.** Native table structure, ordinary state, collection selectors, and keyed ownership compose complete project CRUD with retained row identity and no data-grid runtime. Read the [release notes](./RELEASES.md#0140---project-table-crud-and-identity), open the [release page](https://github.com/kudzujs/kudzu/releases/tag/v0.14.0), or follow the [architecture packet](./docs/next-architecture/README.md).
+**Latest release: 0.14.2 - Infinite loading composition.** Native `IntersectionObserver`, owned fetch, ordinary state, and existing keyed lists now compose bounded cursor loading with duplicate suppression, retry, terminal state, retained identity, and exact cleanup. Read the [release notes](./RELEASES.md#0142---infinite-loading-composition), open the [release page](https://github.com/kudzujs/kudzu/releases/tag/v0.14.2), or follow the [architecture packet](./docs/next-architecture/README.md).
 
 - [Documentation](https://kudzujs.cloud/docs)
 - [Installation guide](https://kudzujs.cloud/docs#install)

package/RELEASES.md

@@ -1,5 +1,103 @@
 # Kudzu Releases
 
+## 0.14.2 - Infinite Loading Composition
+
+Kudzu 0.14.2 composes bounded sentinel-driven loading from ordinary state,
+owned effects, native `IntersectionObserver`, fetch, and existing keyed lists.
+
+### Changed in 0.14.2
+
+- Added an intrinsic sentinel with an owned observer and exact disconnect.
+- Added cursor-based incremental fetch with duplicate project suppression.
+- Added accessible loading, error, retry, and terminal states.
+- Aborted in-flight incremental work when enhanced navigation releases the route.
+- Bounded successful incremental pages to two and retained projects to six.
+- Updated `create-kudzu@0.1.124` to generate projects on
+  `@kudzujs/core@^0.14.2`.
+
+### Output Evidence
+
+- The application emits 44 files totaling 168,037 raw / 52,955 aggregate gzip
+  bytes with deploy digest
+  `230dea098442275e42a966ca595743a4da9c832327ba52d4d09de663c68f8f1a`.
+- The maintained two-route session remains 17 JavaScript files and totals
+  76,889 raw / 26,750 aggregate gzip bytes; `/help` remains 0 B JavaScript.
+- No semantic primitive, IR kind, compiler pass, production compiler/runtime
+  line, normalization rule, adapter, runtime concept, public API, infinite-query
+  runtime, or observer scheduler was added.
+
+### Validation
+
+- Required Chrome proves cursor progression, duplicate trigger and record
+  suppression, HTTP error and retry, terminal state, retained row identity,
+  bounded requests/results, observer disconnect, and route-owned fetch abort.
+- The complete suite passes 274 tests, package smoke, and serialized required-
+  Chrome execution.
+- Seven fresh Chrome 151 profiles record a 0.5 ms table-update median with a
+  0.3-0.6 ms range and a 2.3 ms navigation median with a 2.2-2.6 ms range.
+
+### Limits
+
+Incremental loading is capped at two successful pages of two records and six
+retained projects. Unbounded datasets, automatic query caching, windowing, and
+virtualization remain separate measured decisions.
+
+### Upgrade
+
+```sh
+npm install @kudzujs/core@^0.14.2
+```
+
+## 0.14.1 - Nested And Object-State Collections
+
+Kudzu 0.14.1 lets one direct immutable array field of ordinary object state own
+a root keyed collection and its nested direct-property lists.
+
+### Changed in 0.14.1
+
+- Allowed compiler-proven object-state collection roots without authored field
+  state.
+- Initialized binding-backed roots before nested row ownership mounts.
+- Preserved project and issue DOM identity through immutable replacement and
+  nested update, reorder, and removal.
+- Preserved latest-item handlers and released descendant row state exactly.
+- Recreated removed and re-added nested rows with fresh local state.
+- Updated `create-kudzu@0.1.123` to generate projects on
+  `@kudzujs/core@^0.14.1`.
+
+### Output Evidence
+
+- The application emits 44 files totaling 164,305 raw / 52,185 aggregate gzip
+  bytes with deploy digest
+  `0a3b7e10b3447a76a9c04ef34ad7c2bfa30400ea53c9d16fc85b1c7cbf2ea203`.
+- The maintained two-route session remains 17 JavaScript files and totals
+  74,826 raw / 26,204 aggregate gzip bytes; `/help` remains 0 B JavaScript.
+- No semantic primitive, IR kind, compiler pass, runtime concept, or public API
+  was added. One build-time validation line changed and one list-runtime line
+  was added.
+
+### Validation
+
+- Required Chrome proves immutable whole-object replacement, nested issue
+  insert, update, reorder, removal, re-addition, retained identity, latest
+  handlers, descendant state release, and fresh remount.
+- The complete suite passes 274 tests, package smoke, and serialized required-
+  Chrome execution.
+- Seven fresh Chrome profiles record a 0.8 ms table-update median with a
+  0.7-0.9 ms range and a 4.1 ms navigation median with a 3.7-4.5 ms range.
+
+### Limits
+
+Collection roots require one direct static array field and immutable whole-
+object replacement. Dynamic or computed paths, mutation, and non-array fields
+remain unsupported.
+
+### Upgrade
+
+```sh
+npm install @kudzujs/core@^0.14.1
+```
+
 ## 0.14.0 - Project Table CRUD And Identity
 
 Kudzu 0.14.0 composes a complete native project table from ordinary state,

package/docs/next-architecture/application-capability-release-plan.md

@@ -918,6 +918,37 @@ generates projects on `@kudzujs/core@^0.14.0`.
 - **Done condition:** direct immutable paths cover the application journey and
   nearby dynamic forms fail clearly.
 
+Release evidence complete. The first failure replaced the project route's
+separate array state with one direct `projectData.projects` field and failed at
+build time because nested lists required their source ownership signal itself to
+contain an array. The compiler already emitted a binding-backed root
+`KeyedBlockIR`, its selector states, and the nested issue child block. Build-time
+list validation now allows an object-valued signal only for a compiler-proven
+`ownerField`; root lists still require arrays and nested non-array fields still
+fail. Browser mounting initializes binding-backed roots with children from their
+serialized state before the evaluator module loads, preserving the existing
+parent prototype and ownership path.
+
+Required Chrome proves immutable whole-object replacement, nested issue insert,
+update, reorder, removal, re-addition, retained project/issue identity, latest
+issue handlers, descendant state release, and fresh remount. Existing dynamic
+object-property, alias, mutation, mutating-sort, and non-array diagnostics retain
+the negative boundary, while `/help` remains complete HTML with 0 B JavaScript.
+The slice adds zero semantic primitives, IR kinds, compiler passes,
+normalization rules, adapters, runtime concepts, or public APIs. It changes one
+build-time validation line and adds one production list-runtime line.
+
+The release emits 44 files totaling 164,305 raw / 52,185 aggregate gzip bytes
+with deploy SHA-256
+`0a3b7e10b3447a76a9c04ef34ad7c2bfa30400ea53c9d16fc85b1c7cbf2ea203`.
+The two-route session remains 17 JavaScript files totaling 74,826 raw / 26,204
+aggregate gzip bytes. Seven fresh Chrome 142 profiles record table
+update samples of `[0.8, 0.8, 0.7, 0.8, 0.9, 0.8, 0.8]` ms, a 0.8 ms median and
+0.7/0.9 ms range, plus navigation samples of
+`[3.7, 4.1, 4.5, 3.9, 4.2, 3.9, 4.3]` ms, a 4.1 ms median and 3.7/4.5 ms range.
+`0.14.1` publishes this accepted packet, and `create-kudzu@0.1.123` generates
+projects on `@kudzujs/core@^0.14.1`.
+
 ### `0.14.2`: Infinite Loading Composition
 
 - **Purpose:** prove sentinel-driven incremental loading before virtualization.
@@ -928,6 +959,36 @@ generates projects on `@kudzujs/core@^0.14.0`.
 - **Done condition:** the full journey passes with explicit network and memory
   bounds.
 
+Release candidate evidence complete. The maintained project application adds one
+intrinsic sentinel, an owned native `IntersectionObserver`, cursor and request
+primitive state, an owned fetch with `AbortController`, immutable keyed append,
+duplicate ID suppression, and explicit loading/error/retry/end UI. The authored
+policy permits two successful pages of two records and retains at most six unique
+projects. It adds no infinite-query runtime, observer scheduler, cache, retained
+component tree, or virtualization machinery.
+
+Required Chrome proves duplicate sentinel triggers issue one request, duplicate
+records do not remount retained rows, cursor progression reaches an authored
+`503`, retry reaches terminal state, post-terminal triggers issue no request, and
+enhanced navigation disconnects the observer and aborts the in-flight fetch
+signal. Exact request counts and retained DOM identity pass. `/help` remains
+complete HTML with 0 B JavaScript.
+
+The slice adds zero semantic primitives, IR kinds, compiler passes, production
+compiler/runtime lines, normalization rules, adapters, runtime concepts, or
+public APIs. The application emits 44 files totaling 168,037 raw / 52,955
+aggregate gzip bytes with deploy SHA-256
+`230dea098442275e42a966ca595743a4da9c832327ba52d4d09de663c68f8f1a`.
+The maintained two-route session remains 17 JavaScript files totaling 76,889 raw
+/ 26,750 aggregate gzip bytes.
+
+Seven fresh macOS arm64 Chrome 151 profiles record table update samples of
+`[0.4, 0.5, 0.5, 0.3, 0.5, 0.4, 0.6]` ms, a 0.5 ms median and 0.3/0.6 ms range,
+plus navigation samples of `[2.3, 2.3, 2.2, 2.6, 2.5, 2.5, 2.3]` ms, a 2.3 ms
+median and 2.2/2.6 ms range. The environment differs from `0.14.1`, so no timing
+delta is claimed. `0.14.2` publishes this accepted packet, and
+`create-kudzu@0.1.124` generates projects on `@kudzujs/core@^0.14.2`.
+
 ### `0.14.3`: 10,000-Item Browser Decision
 
 - **Purpose:** measure direct DOM, pagination, and windowing alternatives.
@@ -1395,5 +1456,6 @@ release transaction where possible or document and publish a forward-fix patch.
 | `0.13.2` | Released | Preserve multistep validation, versioned persistence, stale-save rejection, conflict retention, and reset evidence. | None |
 | `0.13.3` | Released | Preserve the published upload validation, cancellation, retry, route cleanup, and attachment mutation evidence. | None |
 | `0.14.0` | Released | Preserve native table CRUD, retained identity, keyboard access, and measured update evidence. | None |
-| `0.14.1` | Active | Add the first failing nested/object-state collection fixture. | None |
-| `0.14.2` onward | Blocked | Complete or explicitly close `0.14.1` first. | Ordered patch boundary |
+| `0.14.1` | Released | Preserve immutable object-state replacement, nested keyed identity, latest handlers, and exact row release. | None |
+| `0.14.2` | Release candidate | Complete commit, CI, tag, GitHub release, npm publication, and registry verification. | Release transaction |
+| `0.14.3` onward | Blocked | Complete or explicitly close `0.14.2` first. | Ordered patch boundary |

package/docs/next-architecture/versioning.md

@@ -66,7 +66,7 @@ Keep each patch behavior-preserving and independently reviewable. If a boundary
 
 ## Generator Versions
 
-`create-kudzu@0.1.122` retains the explicit install instructions and generates projects with `@kudzujs/core@^0.14.0`.
+`create-kudzu@0.1.124` retains the explicit install instructions and generates projects with `@kudzujs/core@^0.14.2`.
 
 ## Release Boundary
 

package/framework/README.md

@@ -100,6 +100,6 @@ A direct setter or inline/simple `const` setter callback may cross one same-file
 
 `kudzu.config` may opt one emitted shared-layout group into same-document navigation with legacy `navigation: { routes: ["/product", "/items/[id]"] }`, or multiple groups with `navigation: { groups: [{ routes: [...] }, { routes: [...] }] }`. The forms are mutually exclusive. Identities are globally unique emitted exact paths or `runtimeParams` patterns; each group uses one page-exported layout function identity. Runtime records securely match concrete pathnames under `base`, and their cache-safe parameter initializer runs before route DOM/effects mount on every transition. Each group receives a deterministic route-hashed asset specialized to only its records, pattern decoder, and effect/parameter lifecycle needs. Cross-group and ungrouped anchors remain native and are not prefetched; overlapping path domains across groups fail the build. Route effect entries export cache-safe layout and route mount functions: layout effects, including conditional/keyed DOM-owned effects, persist for the group session; route effects receive a fresh owner registry after each route insertion; and non-persisted page disposal cleans route before layout. Direct primitive state, runtime parameter, and keyed-item property dependencies and cleanup are supported. Fragment payloads and coordinated View Transitions are not implemented.
 
-A direct object-state prop may expose one-segment static fields when its same-file or relative-imported child directly maps an array field. Scalar bindings and that selected array effect dependency reuse the parent signal, existing `Object.is` comparison, and binding-backed keyed ownership without field state or a browser component. Dynamic paths, aliases, mutation, child state/ref/ID hooks, and opaque call-site values remain unsupported.
+A direct object-state prop may expose one-segment static fields when its same-file or relative-imported child directly maps an array field. Scalar bindings and that selected array effect dependency reuse the parent signal, existing `Object.is` comparison, and binding-backed keyed ownership without field state or a browser component. A direct static array field of local object state may also root a keyed selector pipeline with nested direct-property lists; immutable whole-object replacement reuses the same binding-backed root and nested ownership. Dynamic paths, aliases, mutation, child state/ref/ID hooks, opaque call-site values, and non-array collection fields remain unsupported.
 
 Cross-framework performance tables are historical snapshots from excluded workspaces and are not current rankings. `npm run benchmark` tracks the Worker build/graph fixture; `RUNS=21 npm run benchmark:keyed` tracks large keyed restoration; `BASELINE_ROOT=... npm run benchmark:native` tracks native dispatch and exact artifact changes. Current methodology, raw arrays, external-fixture limits, and artifact deltas live in `PERFORMANCE.md` and the web docs.

package/framework/core.mjs

@@ -316,7 +316,7 @@ export function list(items, keyField, render, ownerField, selector = [], indexed
   const source = items?.[bindingMarker] ? bindingDescriptor(items) : undefined
   if (source) items = createInternalState(items.value)
   if (Array.isArray(items)) items = createInternalState(items)
-  if (!items?.[signalMarker] || !Array.isArray(items.value)) throw new Error("A keyed list must use local array state or a supported imported static array")
+  if (!items?.[signalMarker] || (!ownerField && !Array.isArray(items.value))) throw new Error("A keyed list must use local array state or a supported imported static array")
   const selectorStateMap = new Map(selectorStates)
   for (const [name, state] of selectorStateMap) if (!state?.[signalMarker]) throw new Error(`Rendered collection selector state ${JSON.stringify(name)} must be framework state`)
   let values = items.value

package/framework/list-runtime.js

@@ -96,6 +96,7 @@ function mountLists(root) {
       ownedLists.set(list.owner, lists)
       listRegistrations.set(start, { list, owner: list.owner })
     } else if (descriptor.source) {
+      if (descriptor.children) updateList(list)
       const load = {}
       listLoads.set(start, load)
       loadListEvaluator(descriptor.source).then(evaluator => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kudzujs/core",
-  "version": "0.14.0",
+  "version": "0.14.2",
   "description": "HTML-first TSX framework with synchronous state semantics and no virtual DOM",
   "type": "module",
   "license": "MIT",