@kudzujs/core 0.16.3 → 0.16.5

package/MIGRATION_ROADMAP.md

@@ -51,7 +51,7 @@ Syntax compatibility does not mean reproducing React wholesale. Kudzu accepts th
 - stronger JavaScript failure resilience;
 - no remaining material large-route build-scaling weakness.
 
-The completed 0.9 plan defines the cross-framework comparison and release gate. The active application packet is `0.16.4` in the capability release plan below. Benchmark-only feature omission, unmatched accessibility, weighted scores that hide losses, and unrecorded environment differences do not count as proof.
+The completed 0.9 plan defines the cross-framework comparison and release gate. The active application packet is `0.18.0` in the capability release plan below. Benchmark-only feature omission, unmatched accessibility, weighted scores that hide losses, and unrecorded environment differences do not count as proof.
 
 ### 0.10.0 Through 0.21.x: Application Capability Release Train
 

package/PERFORMANCE.md

@@ -2,6 +2,39 @@
 
 Reproducibility classes: `npm run benchmark`, `npm run benchmark:keyed`, `npm run benchmark:native`, `npm run benchmark:module-cache`, `npm run benchmark:project-navigation`, `npm run benchmark:project-state`, and `npm run benchmark:source-scale` are maintained in this repository; `npm run benchmark:commerce` is a maintained paired runner over the public external storefront; older excluded-workspace sections are historical provenance only and are not current framework rankings.
 
+## 0.16.5 Bounded Navigation Cache
+
+Measured 2026-08-28 on Linux x64 with Node 24.14.0 and Chrome. Before the
+production fix, five held-prefetch races increased retained CDP documents from 8
+to 16 after a newer canonical navigation had pruned those URLs. Moving the
+existing revision check before the cache write restores the exact bound without
+adding an LRU, cancellation registry, runtime file, or cache abstraction.
+
+The default endurance gate runs ten batched cache races and 30 ownership cycles
+in one Chrome profile. Across 101 navigations, baseline/final documents remain
+8, browser state entries 0, DOM nodes 174, listeners 7, and editor
+mounts/disposals 71/71. Forced-GC heap moves from 1,826,244 to 2,022,160 bytes,
+below the larger of the declared 2 MiB or 15% alarm.
+
+The maintained Worker benchmark remains 907 raw / 477 gzip B for the Worker
+graph and 14,456 raw / 6,160 gzip B for the window graph. Seven clean builds
+record a 795.3 ms median on this host; timing is not compared because concurrent
+host load differs. Production runtime LOC, concepts, and files remain unchanged.
+
+## 0.16.4 Scoped GSAP Animation Lifecycle
+
+Measured 2026-08-28 on Linux x64 with Node 24.14.0 and Chrome. The real GSAP
+fixture emits 8 JavaScript files totaling 94,110 raw / 37,819 aggregate gzip
+bytes, while its static sibling emits zero JavaScript. Required Chrome proves
+scoped presentation, native reduced-motion fallback, dependency replacement,
+conditional and enhanced-route disposal, retained structure, and fresh remount.
+
+The maintained Worker benchmark remains byte-identical at 907 raw / 477 gzip B
+for the Worker graph and 14,456 raw / 6,159 gzip B for the window graph. Seven
+clean builds record a 625.9 ms median on this host. Timing is not compared with
+the prior sweep. The change adds no runtime file or animation abstraction; one
+existing package-reference ancestry helper shrinks by two lines.
+
 ## 0.16.3 State-Owned Drag And Drop
 
 Measured 2026-08-28 on Linux x64 with Node 24.14.0 and Chrome. The real

package/README.md

@@ -14,7 +14,7 @@ Kudzu compiles ordinary React-shaped TypeScript and TSX into complete static HTM
 
 > Experimental `0.16.x`: the compiler API and supported TSX surface may change.
 
-**Latest release: 0.16.3 - State-owned drag and drop.** A real SortableJS effect may move DOM during a gesture while keyed Kudzu state remains the durable order and identity owner, with keyboard parity, exact disposal, and static exclusion. Read the [release notes](./RELEASES.md#0163---state-owned-drag-and-drop), open the [release page](https://github.com/kudzujs/kudzu/releases/tag/v0.16.3), or follow the [architecture packet](./docs/next-architecture/README.md).
+**Latest release: 0.16.5 - Bounded navigation cache.** Superseded navigations can no longer resurrect pruned prefetched documents, and the maintained endurance gate now covers cache races, route ownership, keyed state, dialogs, and external editors. Read the [release notes](./RELEASES.md#0165---bounded-navigation-cache), open the [release page](https://github.com/kudzujs/kudzu/releases/tag/v0.16.5), or follow the [architecture packet](./docs/next-architecture/README.md).
 
 - [Documentation](https://kudzujs.cloud/docs)
 - [Installation guide](https://kudzujs.cloud/docs#install)

package/RELEASES.md

@@ -1,5 +1,85 @@
 # Kudzu Releases
 
+## 0.16.5 - Bounded Navigation Cache
+
+Kudzu 0.16.5 prevents superseded enhanced navigations from resurrecting pruned
+prefetched documents and adds a reproducible long-session ownership gate.
+
+### Changed in 0.16.5
+
+- Checks the navigation revision before writing a completed prefetched document
+  back into the route cache.
+- Prevents stale slow navigations from retaining parsed documents after a newer
+  route has committed and pruned their URLs.
+- Adds a dedicated Chrome endurance harness with machine-readable heap, DOM,
+  listener, logical-state, resource, and navigation counters.
+- Exercises ten deterministic stale-prefetch races followed by 30 route,
+  conditional, keyed, dialog, and real CodeMirror ownership cycles.
+- Proves a layout-owned project notification WebSocket journey with validated
+  keyed updates, reconnect, stale-callback rejection, offline recovery, retained
+  navigation lifetime, and exact cleanup.
+- Adds no cache abstraction, LRU, transport runtime, ResourceIR, VDOM, hydration,
+  React runtime, or retained component tree.
+- Updates `create-kudzu@0.1.130` to generate projects on
+  `@kudzujs/core@^0.16.5`.
+
+### Output And Browser Evidence
+
+- Before the fix, five stale-prefetch races increased retained CDP documents
+  from 8 to 16 while logical state remained empty.
+- With the fix, the default 101-navigation run keeps documents at 8,
+  `browserState.size` at 0, DOM nodes at 174, listeners at 7, and editor
+  mounts/disposals balanced at 71/71.
+- Forced-GC heap moves from 1,826,244 to 2,022,160 bytes, below the declared
+  larger-of-2-MiB-or-15% alarm.
+- The maintained Worker graph remains 907 raw / 477 gzip bytes; the window graph
+  remains 14,456 raw / 6,160 gzip bytes. Static routes remain zero JavaScript.
+
+### Upgrade
+
+```sh
+npm install @kudzujs/core@^0.16.5
+```
+
+## 0.16.4 - Scoped GSAP Animation Lifecycle
+
+Kudzu 0.16.4 lets inline GSAP callbacks remain inside one owned effect while
+Kudzu retains structural DOM and exact route, conditional, and dependency
+lifetime ownership.
+
+### Changed in 0.16.4
+
+- Accepts package references inside an unbroken chain of inline callbacks passed
+  directly within an owned effect setup or cleanup.
+- Keeps named, local, imported, render-time, and mixed package indirection
+  unsupported.
+- Preserves deterministic visible HTML before GSAP applies bounded opacity and
+  transform presentation.
+- Uses native `prefers-reduced-motion` detection for a static presentation with
+  no residual inline opacity, transform, or visibility.
+- Reverts the previous GSAP context before dependency replacement and on
+  conditional or enhanced-route disposal; remount creates a fresh owner.
+- Adds no animation IR, scheduler, runtime concept, React, VDOM, hydration, or
+  retained component tree.
+- Updates `create-kudzu@0.1.129` to generate projects on
+  `@kudzujs/core@^0.16.4`.
+
+### Output And Browser Evidence
+
+- The GSAP fixture emits 8 JavaScript files totaling 94,110 raw / 37,819
+  aggregate gzip bytes; its static sibling emits zero JavaScript.
+- Required Chrome proves scoped mount, dependency replacement, reduced-motion
+  fallback, conditional and route disposal, retained structure, and fresh
+  remount.
+- The maintained Worker and window graphs remain 907 raw / 477 gzip bytes and
+  14,456 raw / 6,159 gzip bytes respectively.
+
+### Upgrade
+
+```sh
+npm install @kudzujs/core@^0.16.4
+```
+
 ## 0.16.3 - State-Owned Drag And Drop
 
 Kudzu 0.16.3 proves that a real SortableJS drag engine can remain a bounded

package/docs/next-architecture/README.md

@@ -15,7 +15,7 @@ The completed `0.9.0` milestone is recorded in [`0.9-semantic-compression.md`](.
 
 [`1.0-large-application-compatibility-audit.md`](./1.0-large-application-compatibility-audit.md) records the first post-0.9 probes against Memos, Apache Answer, and Actual Budget. The audit finds that reduced slices build but whole-application source retention and behavior parity do not yet pass.
 
-[`application-capability-release-plan.md`](./application-capability-release-plan.md) is the authoritative post-0.9 execution queue, currently at `0.16.4`. It assigns one application-capability section to each minor release and one independently accepted evidence packet to each patch release from `0.10.0` through the `1.0.0` gate. It supersedes the provisional 0.10/0.11/0.12 tool-first ordering in the completed 0.9 handoff without rewriting that historical record.
+[`application-capability-release-plan.md`](./application-capability-release-plan.md) is the authoritative post-0.9 execution queue, currently at `0.18.0`. It assigns one application-capability section to each minor release and one independently accepted evidence packet to each patch release from `0.10.0` through the `1.0.0` gate. It supersedes the provisional 0.10/0.11/0.12 tool-first ordering in the completed 0.9 handoff without rewriting that historical record.
 
 ## Required Invariants
 

package/docs/next-architecture/application-capability-release-plan.md

@@ -1277,9 +1277,32 @@ differs from the published baseline.
 - **Done condition:** GSAP owns only bounded presentation changes and exact
   cleanup while Kudzu retains document structure and lifetime ownership.
 
-## `0.17.x`: Long-Lived Applications
+**Result:** complete. A reduction of the MIT-licensed
+Magic Modal landing page at revision
+`ab3df864de5b01d604d26345165ea5f7900eae14` reproduced one compiler failure:
+GSAP's root-scoped `context()` receives an inline callback whose direct package
+calls were rejected because package-reference validation stopped at the nearest
+function. The existing ancestry check now accepts only an unbroken chain of
+inline call arguments back to the owned effect; named, local, and imported helper
+indirection remains rejected. Required Chrome proves deterministic visible HTML,
+root-scoped presentation, native reduced-motion fallback without residual inline
+opacity/transform, dependency replacement with retained DOM identity,
+conditional and enhanced-route disposal, and fresh remount. GSAP owns only
+bounded opacity and transform changes; Kudzu retains structural DOM and lifetime
+ownership. The interactive graph is 94,110 raw / 37,819 aggregate gzip bytes
+across eight JavaScript files; the static sibling emits zero. Its normalized
+deploy archive SHA-256 is
+`2b6467f04452c51878ea81d5e80db21c60286e191e1e49ac482556dbf7c713c3`.
+Semantic primitives, IR kinds, compiler passes, normalization rules, runtime
+concepts, runtime files, animation abstractions, schedulers, and public APIs
+change by zero; one existing compiler ancestry helper shrinks by two LOC. One
+positive fixture and one two-scenario browser contract were added. The maintained
+Worker/effect benchmark remains 907 raw / 477 gzip bytes for the Worker graph and
+14,456 raw / 6,159 gzip bytes for the window graph; its seven-run Linux median was
+625.9 ms, recorded without a timing comparison because the host differs from the
+published baseline.
 
-### `0.17.0`: Endurance Harness
+### `0.16.5`: Endurance Harness
 
 - **Purpose:** make long-session correctness locally reproducible.
 - **Expected files:** a dedicated browser soak harness and machine-readable heap,
@@ -1289,7 +1312,30 @@ differs from the published baseline.
 - **Stop condition:** only a short synthetic timing loop is measured.
 - **Done condition:** failures identify the owner that retained memory or work.
 
-### `0.17.1`: WebSocket Application Journey
+**Result:** closed through existing document, route, conditional, keyed, and
+effect ownership. A dedicated application fixture repeatedly opens and closes a
+native dialog, removes and recreates keyed row state, conditionally disposes and
+remounts a real CodeMirror editor, and navigates to a canonical released route.
+The standalone Chrome harness keeps one browser profile alive, runs five warm-up
+and 30 measured cycles by default, forces GC only before five-cycle checkpoints,
+and retains machine-readable `samples.jsonl`, `summary.json`, and
+`environment.json` artifacts under the ignored `test-results/endurance/` path.
+The required default run completed 71 enhanced navigations with 71 editor mounts
+and 71 disposals. Every released checkpoint had zero active editors, dialogs,
+and keyed rows, 29 route elements, six documents, 141 DOM nodes, and seven event
+listeners. Forced-GC heap moved from 1,820,132 to 2,005,572 bytes, below the
+larger of the declared 2 MiB or 15% observation alarm. A deterministic failure
+reports `route:/plain` and the mismatched counters; browser exceptions and failed
+requests are retained with the same owner. The interactive route graph is
+242,928 raw / 81,792 aggregate gzip bytes across 11 JavaScript files. Semantic
+primitives, IR kinds, compiler passes, core/compiler LOC, runtime concepts,
+runtime files, and public APIs change by zero; one test fixture and one browser
+harness were added. This evidence changed no production source by itself and was
+published with the later stale-prefetch fix in the actual `0.16.5` patch.
+
+## `0.17.x`: Long-Lived Applications
+
+### `0.17.0`: WebSocket Application Journey
 
 - **Purpose:** move from isolated fake socket ownership to project notifications.
 - **Acceptance:** connect, message, keyed update, reconnect, stale socket
@@ -1298,7 +1344,31 @@ differs from the published baseline.
 - **Done condition:** repeated navigation balances every listener, timer, and
   socket handle.
 
-### `0.17.2`: Shared SSE/Transport Decision
+**Result:** closed through existing layout state, `EffectIR`, keyed-list, and
+enhanced-navigation ownership. The first project-application browser extension
+failed at `websocket-connect`; one inline layout effect now owns a native
+WebSocket, four socket listeners, native online/offline listeners, generation
+and socket-identity stale guards, and one 50 ms reconnect timer. Incoming
+snapshots are validated before replacing the existing notification array, so a
+same-key server update retains its DOM node and live-region ownership. Required
+Chrome proves connect, message, keyed update, visible error, reconnect, stale
+message/error rejection, offline cancellation, online recovery, and eight
+list/detail enhanced transitions with one retained layout socket. The journey
+creates three sockets total; while connected it has one active socket, four
+socket listeners, and two online/offline listeners. Of two reconnect timers,
+one fires and one is cleared. Final document disposal leaves zero active sockets,
+socket listeners, window listeners, and reconnect timers, and repeated disposal
+changes no counter. The project deploy grows by 2,908 raw / 652 aggregate gzip
+bytes; the list-route JavaScript graph grows by 1,755 raw / 460 aggregate gzip
+bytes, while `/help` remains zero JavaScript. Semantic primitives, IR kinds,
+compiler passes, core/compiler LOC, runtime concepts, runtime files, transport
+abstractions, and public APIs change by zero; one existing application fixture
+and one browser scenario grow. The maintained Worker/effect graph remains 907
+raw / 477 gzip bytes for Worker and 14,456 raw / 6,159 gzip bytes for window;
+its seven-run Linux median was 605.6 ms. No production source changed, so no
+release was consumed.
+
+### `0.17.1`: Shared SSE/Transport Decision
 
 - **Purpose:** test multiple independently mounted consumers, replay, and
   reconnect against existing layout effects/shared state.
@@ -1309,7 +1379,20 @@ differs from the published baseline.
 - **Done condition:** existing composition passes or a minimal transport owner is
   architecture-approved.
 
-### `0.17.3`: Memory And Disposal Gate
+**Result:** closed by the stop condition with zero qualifying applications.
+Mattermost and Twenty remain external research candidates, but neither has a
+repository-owned reduction proving the complete shared-consumer, ordered replay,
+reconnect, independent removal, final close, and bounded-history contract. The
+project application has one layout consumer; all Lupin reductions belong to one
+application and each owns its socket in one page effect; the route WebSocket,
+navigation telemetry, Worker dashboard, Memos audit, and development EventSource
+also lack the complete shared transport shape. Existing layout state and
+independent `EffectIR` owners remain authoritative. Semantic primitives, IR
+kinds, compiler passes, core/compiler LOC, runtime concepts, runtime files,
+fixtures, browser bytes, and public APIs change by zero. No production source
+changed, so no release was consumed.
+
+### `0.17.2`: Memory And Disposal Gate
 
 - **Purpose:** close document/layout/route/range/external-instance memory risks.
 - **Acceptance:** long repeated journeys show bounded heap, DOM, prefetch cache,
@@ -1318,6 +1401,29 @@ differs from the published baseline.
 - **Done condition:** retained growth has a declared bound and repeated samples
   pass the agreed threshold.
 
+**Result:** complete with one navigation-cache ownership fix. A deterministic
+race holds unique prefetched documents, starts navigation to each, commits a
+canonical route that prunes them, and then releases the stale responses. Before
+the fix, five races left `browserState.size` at zero but increased CDP documents
+from 8 to 16 under owner `navigation:documents`: stale `navigate()` calls wrote
+their parsed documents back into the cache before checking the navigation
+revision. `navigation-runtime.js` now checks revision before the existing cache
+write; no cache type, LRU, cancellation registry, or public instrumentation was
+added. The default gate batches ten races within browser connection limits, then
+runs 30 route, conditional, keyed, dialog, and editor cycles in one Chrome
+profile. Across 101 navigations, baseline/final documents remain 8, browser state
+entries 0, DOM nodes 174, listeners 7, and editor mounts/disposals 71/71. Forced-
+GC heap moves from 1,826,244 to 2,022,160 bytes, below the declared larger-of-2-
+MiB-or-15% alarm. Semantic primitives, IR kinds, compiler passes, runtime
+concepts, runtime files, cache abstractions, and public APIs change by zero; one
+production runtime reorders one existing statement with zero LOC growth. The
+maintained Worker graph remains 907 raw / 477 gzip bytes and the window graph
+remains 14,456 raw bytes with gzip moving from 6,159 to 6,160 bytes; its seven-
+run Linux median was 795.3 ms, recorded without a timing comparison because the
+host load differs. One endurance fixture and browser gate grow, while static
+routes remain zero JavaScript. This packet ships as the actual `0.16.5` patch to
+retain the public `0.16.x` version line.
+
 ## `0.18.x`: Lazy Loading And Code Splitting
 
 ### `0.18.0`: Route And Feature Artifact Baseline
@@ -1653,4 +1759,9 @@ release transaction where possible or document and publish a forward-fix patch.
 | `0.16.1` | Released | Preserve the retained CodeMirror instance boundary, bidirectional updates, error recovery, accessibility, and exact cleanup. | None |
 | `0.16.2` | Closed by existing effect ownership | Preserve retained Chart.js data/resize updates, listener and route cleanup, fresh remount, accessibility, and static exclusion. | No production change; no release consumed |
 | `0.16.3` | Released | Preserve state-owned order, keyed identity, keyboard parity, invalid-input recovery, package disposal, and static exclusion. | None |
-| `0.16.4` | Active | Validate one real GSAP landing-page animation through bounded effect ownership. | None |
+| `0.16.4` | Released | Preserve scoped GSAP presentation, reduced-motion fallback, dependency/owner cleanup, fresh remount, and static exclusion. | None |
+| `0.16.5` | Released | Preserve the reproducible endurance evidence, project notification ownership, and bounded stale-prefetch cache disposal. | None |
+| `0.17.0` | Closed by existing layout effect ownership | Preserve project notification connect, keyed update, reconnect, stale rejection, offline recovery, retained navigation, and exact cleanup evidence. | No production change; no release consumed |
+| `0.17.1` | Closed by stop condition | Preserve independent effect ownership until three applications prove the complete shared transport and bounded replay contract. | Zero qualifying applications; no release consumed |
+| `0.17.2` | Released as `0.16.5` | Preserve stale-prefetch rejection and bounded document, state, resource, listener, DOM, and external-instance ownership. | Patch release retained the `0.16.x` public version line |
+| `0.18.0` | Active | Record exact current route and feature artifact ownership before adding lazy loading. | None |

package/docs/next-architecture/compiler-current-architecture.md

@@ -1,6 +1,6 @@
 # Current Compiler Architecture
 
-This maps the current `0.16.3` architecture, built on the completed `0.9.0` semantic-compression release and `0.8.23` Goal A compiler foundation. The active application packet is `0.16.4`; file and function names are the stable references, while line numbers are intentionally omitted because later work may still move code.
+This maps the current `0.16.5` architecture, built on the completed `0.9.0` semantic-compression release and `0.8.23` Goal A compiler foundation. The active application packet is `0.18.0`; file and function names are the stable references, while line numbers are intentionally omitted because later work may still move code.
 
 ## Responsibility Map
 

package/docs/next-architecture/large-application-ai-native-roadmap.md

@@ -2,9 +2,9 @@
 
 ## Status
 
-Completed compiler-foundation record and longer-term plan after `0.8.35`. The [`0.9-semantic-compression.md`](./0.9-semantic-compression.md) execution queue is complete. The active queue for current work is [`application-capability-release-plan.md`](./application-capability-release-plan.md) at packet `0.16.4`. This document does not mark any remaining planned capability as supported and does not authorize a React runtime, VDOM, hydration, retained browser component tree, generic rerenderer, public store/query/resource API, SPA router, or islands.
+Completed compiler-foundation record and longer-term plan after `0.8.35`. The [`0.9-semantic-compression.md`](./0.9-semantic-compression.md) execution queue is complete. The active queue for current work is [`application-capability-release-plan.md`](./application-capability-release-plan.md) at packet `0.18.0`. This document does not mark any remaining planned capability as supported and does not authorize a React runtime, VDOM, hydration, retained browser component tree, generic rerenderer, public store/query/resource API, SPA router, or islands.
 
-[`MIGRATION_ROADMAP.md`](../../MIGRATION_ROADMAP.md) remains the product authority for product invariants and fixture-driven feature selection. [`application-capability-release-plan.md`](./application-capability-release-plan.md) is authoritative for current work order and evidence at packet `0.16.4`; this plan retains the completed foundation, deferred program, and long-term production gates. If implementation evidence changes either boundary, update the relevant document before broadening a patch.
+[`MIGRATION_ROADMAP.md`](../../MIGRATION_ROADMAP.md) remains the product authority for product invariants and fixture-driven feature selection. [`application-capability-release-plan.md`](./application-capability-release-plan.md) is authoritative for current work order and evidence at packet `0.18.0`; this plan retains the completed foundation, deferred program, and long-term production gates. If implementation evidence changes either boundary, update the relevant document before broadening a patch.
 
 ## Product Outcome
 
@@ -483,4 +483,4 @@ The first comparison is Kudzu versus React + Vite using the same agent, model, t
 
 ## Immediate Decision
 
-All listed foundation and `0.9` slices are complete. Current work continues at `0.16.4` GSAP Animation Lifecycle under the [`application-capability-release-plan.md`](./application-capability-release-plan.md); keep ResourceIR limited to qualifying independent fixtures, and do not add range ownership, virtualization, optimistic transactions, a public adapter/store API, or a router before evidence justifies them.
+All listed foundation and `0.9` slices are complete. Current work continues at `0.18.0` Route And Feature Artifact Baseline under the [`application-capability-release-plan.md`](./application-capability-release-plan.md); keep ResourceIR limited to qualifying independent fixtures, and do not add range ownership, virtualization, optimistic transactions, a public adapter/store API, or a router before evidence justifies them.

package/docs/next-architecture/versioning.md

@@ -1,6 +1,6 @@
 # Planned Version Sequence
 
-This is an execution sequence, not release history. `0.8.16` through `0.8.62` are completed scopes represented by package/release records. The `0.10.0` through `1.0.0` minor/patch sequence is maintained in [`application-capability-release-plan.md`](./application-capability-release-plan.md), currently at `0.16.4`; that plan supersedes the provisional tool-first 0.10/0.11/0.12 ordering in the completed 0.9 handoff.
+This is an execution sequence, not release history. `0.8.16` through `0.8.62` are completed scopes represented by package/release records. The `0.10.0` through `1.0.0` minor/patch sequence is maintained in [`application-capability-release-plan.md`](./application-capability-release-plan.md), currently at `0.18.0`; that plan supersedes the provisional tool-first 0.10/0.11/0.12 ordering in the completed 0.9 handoff.
 
 Keep each patch behavior-preserving and independently reviewable. If a boundary proves inseparable, revise this plan before combining releases; do not silently broaden a patch.
 
@@ -66,7 +66,7 @@ Keep each patch behavior-preserving and independently reviewable. If a boundary
 
 ## Generator Versions
 
-`create-kudzu@0.1.128` retains the explicit install instructions and generates projects with `@kudzujs/core@^0.16.3`.
+`create-kudzu@0.1.130` retains the explicit install instructions and generates projects with `@kudzujs/core@^0.16.5`.
 
 ## Release Boundary
 

package/framework/compiler/source-compiler.mjs

@@ -2630,19 +2630,17 @@ function insideJsxEventHandler(node, root) {
 }
 
 function insideOwnedEffectCallback(node, root) {
-  let callback
   for (let current = node.parent; current && current !== root.parent; current = current.parent) {
     if (!isFunctionLike(current)) continue
-    callback = current
-    break
-  }
-  if (!callback) return false
-  if (ts.isCallExpression(callback.parent) && callback.parent.arguments[0] === callback && ts.isIdentifier(callback.parent.expression) && callback.parent.expression.text === "useEffect") return true
-  const returned = callback.parent
-  if (!ts.isReturnStatement(returned)) return false
-  for (let current = returned.parent; current && current !== root.parent; current = current.parent) {
-    if (!isFunctionLike(current)) continue
-    return ts.isCallExpression(current.parent) && current.parent.arguments[0] === current && ts.isIdentifier(current.parent.expression) && current.parent.expression.text === "useEffect"
+    if (ts.isCallExpression(current.parent) && current.parent.arguments[0] === current && ts.isIdentifier(current.parent.expression) && current.parent.expression.text === "useEffect") return true
+    if (ts.isReturnStatement(current.parent)) {
+      for (let owner = current.parent.parent; owner && owner !== root.parent; owner = owner.parent) {
+        if (!isFunctionLike(owner)) continue
+        return ts.isCallExpression(owner.parent) && owner.parent.arguments[0] === owner && ts.isIdentifier(owner.parent.expression) && owner.parent.expression.text === "useEffect"
+      }
+      return false
+    }
+    if (!ts.isCallExpression(current.parent) || !current.parent.arguments.includes(current)) return false
   }
   return false
 }

package/framework/navigation-runtime.js

@@ -129,9 +129,9 @@ async function navigate(url, push, source) {
       try { documentResult = await cached }
       catch { documentResult = await fetchDocument(url, record, request.signal) }
     } else documentResult = await fetchDocument(url, record, request.signal)
-    documents.set(url.href, Promise.resolve(documentResult))
     const { incoming, parsed, capabilities } = documentResult
     if (current !== revision) return
+    documents.set(url.href, Promise.resolve(documentResult))
     styleUpdate = prepareStyles(parsed.styles)
     pendingStyleUpdate = styleUpdate
     await styleUpdate.ready

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kudzujs/core",
-  "version": "0.16.3",
+  "version": "0.16.5",
   "description": "HTML-first TSX framework with synchronous state semantics and no virtual DOM",
   "type": "module",
   "license": "MIT",
@@ -53,7 +53,8 @@
     "build": "node ./bin/kudzu.mjs build",
     "dev": "node ./bin/kudzu.mjs dev",
     "check": "tsc --noEmit && tsc -p test/fixtures/tsconfig.json --noEmit && node ./bin/kudzu.mjs build",
-    "test": "node --test test/project-application.test.mjs && node --test --test-skip-pattern='^establishes the 0\\.15\\.2 notification ownership contract$' test/*.test.mjs",
+    "test": "node --test test/project-application.test.mjs && node --test --test-skip-pattern='^establishes the 0\\.17\\.0 notification WebSocket ownership contract$' test/*.test.mjs",
+    "test:endurance": "node test/endurance.mjs",
     "test:package": "node test/package-smoke.mjs",
     "benchmark": "node test/performance.mjs",
     "benchmark:keyed": "node test/keyed-performance.mjs",
@@ -76,6 +77,7 @@
     "@codemirror/view": "^6.43.9",
     "@types/sortablejs": "^1.15.9",
     "chart.js": "^3.8.2",
+    "gsap": "^3.15.0",
     "sortablejs": "^1.15.7",
     "typed.js": "^3.0.0",
     "wrangler": "^4.112.0"