@solidjs/signals 2.0.0-rc.13 → 2.0.0-rc.15

package/dist/observe/core/verdict.js

@@ -1,674 +1,367 @@
-import { NOT_PENDING, REACTIVE_DISPOSED, REACTIVE_DIRTY, REACTIVE_CHECK, unwrapOverride, REACTIVE_RECOMPUTING_DEPS, STATUS_PENDING, STATUS_UNINITIALIZED, REACTIVE_OPTIMISTIC_DIRTY, REACTIVE_MANUAL_WRITE, CONFIG_OVERRIDE_SUPERSEDED, CONFIG_HAS_COMPANIONS, CONFIG_ADOPTED_UNFLUSHED, CONFIG_CHILD_COMPANIONS, STATUS_ERROR } from "./constants.js";
+import { CONFIG_VERDICT, REACTIVE_PROBED, CONFIG_INPUTS_PUBLISHED, CONFIG_HELD, REACTIVE_JOINED, REACTIVE_STAGED_READ, REACTIVE_LANE_READ, CONFIG_CHILDREN_FORBIDDEN, CONFIG_OVERRIDE, STATUS_PENDING, CONFIG_GUESS, NOT_PENDING, STATUS_UNINITIALIZED, EFFECT_RENDER, STATUS_ERROR, REACTIVE_PROBE_UNANSWERED } from "./constants.js";
 
-import { setSignal, visibleOverride, unflushedValue, context, markLateLinker, read, stale, hasActiveOverride, prepareComputed, tracking, ext, setLatestReadActive, setContextInternal, optimisticComputed, unflushed, unflushedCompanions, setPendingCheckActive, latestReadActive, optimisticSignal, pendingCheckActive } from "./core.js";
+import { context, tracking, setVerdict, bornInto, verdict, pullComputed, joinPass, markLateLinker, spectating, unflushedValue } from "./core.js";
+
+import "./dev.js";
 
 import { NotReadyError } from "./error.js";
 
 import { link } from "./graph.js";
 
-import { dispose } from "./owner.js";
-
-import { insertIntoHeap, queueFor, enqueueSub } from "./heap.js";
-
-import "./invariants.js";
-
-import { readsHeldCommitted, assignOrMergeLane } from "./lanes.js";
-
-import { installOptimisticEngine } from "./optimistic.js";
-
-import { GlobalQueue, insertSubs, schedule, activeTransition, currentTransition, runAsTransitionBatch, activeAffectsMarks } from "./scheduler.js";
-
-/**
- * The isPending()/latest() verdict layer, moved out of core.ts. Importing this
- * module installs the companion-maintenance hooks on GlobalQueue; apps that
- * never import isPending/latest never pay for any of it.
- */
-// Companions (pending signals / latest shadows) are optimistic nodes: their
-// writes go through the optimistic write path and their reversion rides the
-// same lanes, so the verdict layer brings the engine with it.
-installOptimisticEngine();
-
-let pendingProbe = null;
-
-/**
- * Probes whose verdict was suppressed by the fresh-read pairing rule while
- * the held write's fate was still undecided (see recordFreshRead /
- * wakeSuppressedProbes): held node → the wrapper computeds that probed it.
- * Entries die with the hold — the commit/revert snap clears them.
- */ const suppressedProbes = new Map;
-
-/**
- * Get or create the pending signal for a node (lazy).
- * Used by isPending() to track pending state reactively.
- */
-/** #3038: register a companion-carrying firewall child on its firewall's
- * companion set and arm the post-recompute snap (CONFIG_CHILD_COMPANIONS is
- * the one-load gate at the call sites). The snap then iterates exactly the
- * children someone asked verdicts of — O(companions) — never the full
- * `_child` chain, which carries one node per materialized leaf (the
- * O(all-leaves-ever-read)-per-update pathology). Entries live as long as the
- * store addresses the leaf — the unobserved sweep's `unlinkFirewallChild`
- * drops them (#3503); a store with no leaf-level isPending()/latest() reads
- * never allocates the set or pays the walk. */ function markFirewallChildCompanions(e) {
-    const t = e.Ne;
-    if (!t) return;
-    t.C |= CONFIG_CHILD_COMPANIONS;
-    (ext(t).xt ??= new Set).add(e);
-}
-
-function getPendingSignal(e) {
-    let t = e.o?.xe;
-    if (!t) {
-        // Start false, write true if pending - ensures reversion returns to false
-        t = optimisticSignal(false, {
-            ownedWrite: true
-        });
-        ext(e).xe = t;
-        e.C |= CONFIG_HAS_COMPANIONS;
-        markFirewallChildCompanions(e);
-        ext(t).$n = e;
-        if (computePendingState(e)) backfillCompanion(e, t, true);
-        joinUnflushedResync(e);
-    }
-    return t;
-}
-
-/**
- * A lazily created companion's first write mirrors state the owner already
- * carries — a held write, a pending verdict. The companion is created wherever
- * the first latest()/isPending() read happens to run, but the write belongs
- * to whatever HOLDS that state: written in the ambient window, the override
- * would register in the ambient batch and revert when that flush's round ends
- * — the shadow re-derived from the committed view, the verdict flipped false —
- * while the owner's hold was still on (#3336: A and B differing only in
- * whether a companion existed before the hold). A companion created lazily
- * answers as if it had always existed: its backfill is registered with the
- * owner's transaction and lives and reverts with it. A hold with no
- * transaction (a pending async, a same-flush staged write) is ambient and the
- * write stays ambient. (A28 (3), lifted from #3337.)
- */ function backfillCompanion(e, t, n) {
-    const i = e.me;
-    if (i) runAsTransitionBatch(i, () => setSignal(t, n)); else setSignal(t, n);
-}
-
-/** A28: a companion created while its source carries an UNFLUSHED write joins
- * the flush-start re-sync like a companion that existed at the write —
- * syncCompanions only reaches companions that exist at write time. Without
- * this the flush brings it current by a plain recompute instead of the
- * optimistic write: its readers are then staged under whatever transaction
- * the round entered (a memo over latest() of a held source was held with the
- * source, and its untracked reads answered the previous value until the hold
- * committed) rather than direct-committed as the optimistic view they are. */ function joinUnflushedResync(e) {
-    if (unflushed(e)) unflushedCompanions.push(e);
+import { verdictLane, laneValueOf, display } from "./lanes.js";
+
+import { GlobalQueue, txOf, globalQueue, joinFuture, queuePendingNode, staleReader, passLane, setPassLane, flushTransaction, stagedReaders } from "./scheduler.js";
+
+// Verdicts (plan sec. 28 replay, 2026-10-02; maintainer, 2026-10-01: verdicts are
+// optimistic state the system supplies). `isPending(fn)` asks whether what
+// `fn` reads is final; `latest(fn)` reads the proposal — the staged write or
+// landing, the lane's value — instead of the screen. A verdict is a guess
+// ("pending, until this lands"; "the proposal is the value") and its readers
+// break out of the hold the way a lane's do: work of the holder's verdict
+// lane (lanes.ts), shown now, re-derived at the landing, ending with it. A
+// verdict reader is a frame reader: its plain reads of held nodes see the
+// screen (core.ts `frameRead`), so `[isPending(x), x()]` never pairs the
+// fresh value with pending (A10).
+/** A verdict reader whose answer this flush could not give yet: the node it
+ * asked about is staged and not held — whether it will be is the seam's
+ * verdict. It read the staging as the screen: if the flush parks it runs
+ * again next round, as lane work that did the same does (`stagedReaders`,
+ * lanes.ts — entering the verdict lane then voids what it staged); if it
+ * commits, the answer stood. */
+function watchVerdict(e, t = false) {
+    if (t) e.R |= REACTIVE_PROBE_UNANSWERED;
+    stagedReaders.push(e);
 }
 
-/** The staged value the verdict channels answer for (A28): while a node
- * carries an unflushed write its `_pendingValue` is not yet part of any
- * flushed world, so the channels answer for the value the last flush left
- * staged (a held node's stash) or for nothing (NOT_PENDING). */ function flushedStaged(e) {
-    if (!unflushed(e)) return e._e;
-    // Ambient, or adopted before any flush (CONFIG_ADOPTED_UNFLUSHED): nothing
-    // a flush carried is staged for it. A held rewrite: the stash.
-        return e.me === null || e.C & CONFIG_ADOPTED_UNFLUSHED ? NOT_PENDING : e.o.Ut;
+/** The reading pass is the holder's verdict lane's — unless already lane
+ * work, or already the transaction's (it derives from the future — a held
+ * node's, or the staging of a write this flush may hold — and the verdict
+ * does not rescue it: its result shows at the landing, re-derived). A lane
+ * read, for `recompute`'s tail (REACTIVE_LANE_READ). */ function route(e, t) {
+    if (passLane === null && !(e.R & (REACTIVE_JOINED | REACTIVE_STAGED_READ))) setPassLane(verdictLane(t));
+    e.R |= REACTIVE_LANE_READ;
 }
 
-function collectPendingSources(e) {
-    if (!pendingProbe) return;
-    pendingProbe.sources.add(e);
-    const t = e.Ne || e;
-    if (t !== e) pendingProbe.sources.add(t);
-}
-
-/**
- * Adds a node to the active isPending() probe without reading it. The store's
- * untracked-probe fallback (`witnessAffectsMark`) reaches this through
- * `GlobalQueue._witnessAffects` — its callers guard on `pendingCheckActive`,
- * which only flips inside `isPending()`, so the hook is always installed by
- * the time it can fire.
- */ function witnessAffects(e) {
-    pendingProbe?.sources.add(e);
-}
-
-/**
- * The affects() coverage walk — the read half of the dedicated mark channel.
- * A node is covered by a live mark iff it carries one (`_affectsCount`) or
- * derives, through its CURRENT deps (hopping store firewalls), from a node
- * that does. Pull-based coverage means graph rewires, mid-window recomputes,
- * and probe-triggered recomputes can never strand or strip a mark — there is
- * nothing stored downstream to corrupt. Probe-created links
- * (`_pendingObserver`) are skipped so an `isPending` wrapper memo never
- * inherits the coverage it reports on.
- */ function markWalk(e, t) {
-    if (e.o?.t) return true;
-    // A real error outranks an inherited mark (A16/A24c): an errored node
-    // answers probes with its error, not a coverage verdict, and coverage does
-    // not flow through it — matching the rails' behavior, where propagation
-    // stopped at errored nodes. A DIRECT mark on an errored node still reads
-    // pending (the count check above), also matching.
-        if (e.S & STATUS_ERROR) return false;
-    if (t.has(e)) return false;
-    t.add(e);
-    const n = e.Ne;
-    if (n && markWalk(n, t)) return true;
-    // Mid-recompute (the clearStatus companion poke runs before
-    // trimStaleDeps), only the validated prefix [_deps.._depsTail] is this
-    // pass's dependency set — walking past it would read dropped deps and
-    // latch a stale verdict on the companion.
-        const i = e;
-    const r = i.oe & REACTIVE_RECOMPUTING_DEPS ? i.Je : undefined;
-    if (r !== null) {
-        for (let e = i.Ee ?? null; e !== null; e = e.Ie) {
-            if (!e.Be && markWalk(e.De, t)) return true;
-            if (e === r) break;
-        }
+/** A verdict reader served a flight's committed value (the A31 frame-reader
+ * case) still observed the flight — A15's stale reader "derives from the
+ * flight all the same": the frame holds (the flush's transaction opens if
+ * none has, as the throw would have had it), the reader is that
+ * transaction's verdict lane's (shown now, with the flight's verdict), and
+ * re-derives at the landing (REACTIVE_FRAME_READ — which is also what makes
+ * it a blocker of the hold, `blockedBy`; a probe alone is neither). The
+ * hold is on the flight: a reader served committed never goes pending, so
+ * the transaction waits on it only through the flight's node — one that
+ * went pending this flush is queued for the seam to hold; one in the air
+ * from before, held by nobody (a lane's derivation whose lane dissolved at
+ * its parent's landing with the flight still up; a flight nothing displayed,
+ * #3305), is registered by this, its first observer (A15, #3458): queued for
+ * the seam as if it had gone pending here, so the transaction has an entry
+ * for what it now shows a reader of. Held by nothing, it landed at this very
+ * seam and its `_reruns` re-derived the reader into the same observation,
+ * every flush (fuzzer F12). True when the reader is served the committed
+ * value — not over a flight committed beneath inputs already on screen (A15
+ * reveal corollary, #3305): that value would tear against them, and the
+ * reveal observes the flight. Nor for a reader born into the flight's
+ * transaction (`bornInto`, #4010): it has no screen — it waits on the flight
+ * with the rest of its frame. */ function observeFlight(e, t) {
+    if (t.i & CONFIG_INPUTS_PUBLISHED || t.i & CONFIG_HELD && bornInto(e, txOf(t))) return false;
+    if (globalQueue.X) {
+        joinFuture(null);
+        if (!(t.i & CONFIG_HELD)) queuePendingNode(t);
+        verdictRead(e, flushTransaction, true);
     }
-    return false;
+    return true;
 }
 
-function quietPending(e) {
-    if (e.o?.ue) {
-        for (const t of e.o.ue) if (!t.o?.ve) return false;
-        return true;
-    }
-    return e.o?.ve ?? false;
-}
-
-// NOTE: a loadingValue node's open loading window (_loading) is verdict-quiet
-// on purpose: commit #0 answers the question by declaration, so the window
-// reads NOT pending — first-load affordances live in the value channel
-// (null / skeleton provenance the author encoded), and isPending stays what
-// it always was: refetch truth for an answered question. This keeps the
-// verdict fully correlated with transition-class machinery and keeps server
-// (always false) and client hydration trivially consistent.
-function newQuestionInFlight(e) {
-    return !!(e.S & STATUS_PENDING) && !(e.S & STATUS_UNINITIALIZED) && !quietPending(e);
+/** Verdict windows. Inside `latest(fn)` a read of a held node serves the
+ * proposal (above the async, the held write; below it, the committed value
+ * — nothing newer exists) instead of joining or throwing; inside
+ * `isPending(fn)` a read records whether what it saw is final. Either way
+ * the reader breaks out: work of the holder's verdict lane, shown now and
+ * re-derived at the landing. */ let latestActive = false;
+
+let probing = false;
+
+let probeFound = false;
+
+/** A verdict read of a node a transaction (or lane) holds: the reading pass
+ * is the holder's verdict lane's and re-derives at the holder's landing
+ * (`_reruns`, as a stale reader). `isPending` flips at the landing with no
+ * value notifying anyone (a held write's commit; a held landing's): its
+ * reader re-derives there. `latest` shows the proposal that lands — a
+ * rewrite or a landing reaches its reader through the link it holds — so a
+ * re-run would only repeat the frame. */ function verdictRead(e, t, n) {
+    route(e, t);
+    if (n) staleReader(e, t); else if (probing && t.an[t.an.length - 1] !== e) t.an.push(e);
 }
 
-function computePendingState(e) {
-    const t = e;
-    if (t.oe & REACTIVE_DISPOSED) return false;
-    // Mark coverage is transitive by dep-graph reachability: a latest() shadow
-    // reaches its owner (and a store leaf its firewall) through its own deps,
-    // so the one walk covers direct marks, derivation, and companion chains.
-    // Gated: apps with no live mark pay one integer compare.
-        if (activeAffectsMarks !== 0 && markWalk(e, new Set)) return true;
-    const n = e.Ne;
-    if (e.o?.$n) {
-        const t = e.o?.$n;
-        const n = t.Ne || t;
-        return newQuestionInFlight(n);
-    }
-    const i = flushedStaged(e);
-    if (n && i !== NOT_PENDING && !hasActiveOverride(e)) {
-        return !!(n.oe & REACTIVE_MANUAL_WRITE) || !n.o?.pe && !(n.S & STATUS_PENDING) || !!(n.S & STATUS_PENDING) && quietPending(n);
+/** A verdict read of a node staged or in flight but not held yet: whether it
+ * will be is the seam's.
+ *
+ * `isPending` asks exactly that — final unless the flush parks — so its
+ * reader cannot be answered before the seam: a flush that has joined a
+ * transaction parks, and the node with it — the reader is that
+ * transaction's verdict lane's now; before anything joined, the reader
+ * watches the seam and runs again if the flush parks (a plain sync write
+ * never glitches it true).
+ *
+ * `latest` has its answer either way — the proposal — and only the reader's
+ * membership was open, so it is settled now: the frame gets its transaction
+ * (`joinFuture(null)`; nothing holds it at the seam and it lands there, the
+ * lane dissolving into it — a plain commit) and the reader is its verdict
+ * lane's. One pass: a provisional pass re-derived at the seam ran everything
+ * downstream of it twice (#3540 web). A pass that also read the frame's own
+ * stagings plainly (REACTIVE_STAGED_READ) stays the frame's (`route` does
+ * not move it); a verdict reader's plain read AFTER the window sees the
+ * screen (`read`: `stagedScreen`). */ function provisionalVerdict(e, t) {
+    if (!probing) {
+        joinFuture(null);
+        verdictRead(e, flushTransaction);
+        return;
     }
-    // `!comp._loading`: a hold created while the loading window is still open is
-    // the window's own landing in flight to its commit — verdict-quiet like the
-    // rest of the window (the UNINITIALIZED check suppresses exactly this frame
-    // for windowless first loads; born-committed nodes need their own gate, #2990).
-    // A18 (d) for a body-end supersession (#3427): the truth at hand is the
-    // COMMITTED value — nothing staged — yet the display still shows the
-    // override; pending iff they differ, as for a staged arrival below.
-        if (e.C & CONFIG_OVERRIDE_SUPERSEDED && e._e === NOT_PENDING && visibleOverride(e)) return !e.Fe || !e.Fe(e.ce, unwrapOverride(e.o?.we));
-    // A28 (2): an unflushed write is not yet observable — the verdict answers
-    // for the flushed staged value.
-        if (i !== NOT_PENDING && !t.ye) {
-        // A18 (d): under a displayed override the observable value is the
-        // override, so the verdict is "the arrived truth differs from it" —
-        // even before the node's first commit. The UNINITIALIZED suppression
-        // below is A19 exception (1), "no observable value exists to be
-        // non-final"; an override is one (a node whose first landing was held
-        // by a reveal it never got to commit, then superseded under its
-        // override, read false here).
-        if (visibleOverride(e)) return !e.Fe || !e.Fe(i, unwrapOverride(e.o?.we));
-        // A quiet re-ask's held landing still answers the same question: the
-        // classification survives the landing (asyncWrite) and dies with the
-        // commit (commitPendingNode) — verdict-quiet through the reveal, like
-        // the loading window above (#3178).
-        // A staged value equal to the committed one is no proposal (A34, #3494): the
-        // observable value IS final (A19). The coalesced `setShow(false);
-        // setShow(true)` read pending through the flush that carried it — and,
-        // stamped into a hold that flush opened, until the hold settled.
-                if (!(t.S & STATUS_UNINITIALIZED) && !t.o?.ve && (!e.Fe || !e.Fe(e.ce, i))) return true;
+    if (flushTransaction !== null) {
+        if (t) probeFound = true;
+        verdictRead(e, flushTransaction);
+        if (e.R & REACTIVE_STAGED_READ) watchVerdict(e);
+        return;
     }
-    return newQuestionInFlight(t);
+    // Before anything joined, a staging that would not be final held has no
+    // answer yet: whatever the seam decides, the pass runs again — a later
+    // plain read of the same pass may route it into the verdict lane
+    // (`observeFlight`), which the seam must not take as this probe's answer.
+        watchVerdict(e, t);
 }
 
-function syncCompanions(e, t) {
-    if (e.o?.xe) updatePendingSignal(e);
-    if (e.o?.Me) setSignal(e.o?.Me, t);
-}
-
-function updatePendingSignal(e) {
-    if (e.o?.xe) {
-        setSignal(e.o?.xe, computePendingState(e));
+/** A19 exc. 2 / A24: a flight that re-asks the question already answered
+ * (a `refresh()`, a poll) is quiet; a node pending through others is quiet
+ * when every flight it waits on is. */ function quietPending(e) {
+    const t = e.m;
+    if (t === null) return false;
+    if (t.Se !== undefined) {
+        for (const e of t.Se) if (!e.m?.It) return false;
+        return true;
     }
-    if (e.o?.Me) updatePendingSignal(e.o?.Me);
+    return t.It;
 }
 
-function updateChildCompanions(e) {
-    const t = e.o?.xt;
-    if (t === undefined) return;
-    for (const e of t) updatePendingSignal(e);
+/** `isPending`'s answer for a held node (A19), relative to what the reader
+ * sees — a verdict reader is a frame reader and sees the committed value: a
+ * flight still up (cause ii) is not final unless quiet; a held write or
+ * landing (staged — cause i/iii) is not final unless it answers the question
+ * already shown (a quiet re-ask, through its reveal), is the node's first
+ * landing (commit #0: loading, not pending), or the probe sits inside a
+ * `latest` window, whose view of the node IS the proposal (A10: a reader
+ * that observed the fresh value is not told it is pending; inside `latest`,
+ * `isPending` asks whether the latest view is final). A member of a held
+ * frame with neither is final. A24: pending iff a value change is in
+ * flight — a staging equal to what is displayed changes nothing when it
+ * lands: final now (maintainer, 2026-10-02). */ function heldNotFinal(e) {
+    if ((e.S & STATUS_PENDING) !== 0 && !quietPending(e)) return true;
+    return e.Oe !== NOT_PENDING && !latestActive && !e.m.It && !(e.S & STATUS_UNINITIALIZED) && (!e.en || !e.en(e.Ae, e.Oe));
 }
 
-/**
- * Re-derive every verdict companion downstream of `el` (subs + firewall
- * children, dedup'd). The affects() channel's poke walk: registration and
- * re-ask flips use the live write path (companion setSignal — its own lane
- * lets the wake escape an incomplete transition's effect stash, #2887);
- * mark release passes `snap` because it runs inside queue finalization,
- * where companion writes must land committed (a setSignal there would open
- * a fresh override window that nothing settles).
- */ function repollDownstreamVerdicts(e, t = false) {
-    const n = t ? snapCompanionsToState : updatePendingSignal;
-    const i = new Set;
-    const visit = e => {
-        if (i.has(e)) return;
-        i.add(e);
-        if (e.o?.xe || e.o?.Me) n(e);
-        for (let t = e.u; t !== null; t = t.Pe) visit(t.Ae);
-        for (let t = e.o?.i ?? null; t !== null; t = t.ge) {
-            visit(t);
+/** `isPending`'s answer for an unheld node whose flight is up (cause ii). */ function pendingVerdict(e, t) {
+    if (t.S & STATUS_UNINITIALIZED) return;
+    if (probing && !quietPending(t)) probeFound = true;
+    if (e !== null && tracking) {
+        if (t.i & CONFIG_HELD) verdictRead(e, txOf(t)); else if (globalQueue.X) provisionalVerdict(e, false);
+ // decided above
         }
-    };
-    visit(e);
 }
 
-/**
- * The correction half of the provisional fresh-read suppression (see
- * collectPending): fired from the sanctioned async-registration site
- * (GlobalQueue.notify) when a transaction gains an in-flight async blocker.
- * Every probe that returned "not pending" purely because it read a held
- * value belonging to that transaction re-runs — its re-probe now sees the
- * live blocker through heldAwaitingAsync and lands the true verdict. The
- * wake mirrors a companion write's own notification (optimistic-dirty on the
- * companion's lane) so the corrected verdict commits and flushes immediately
- * instead of being held with the transaction it reports on.
- */ function wakeSuppressedProbes(e) {
-    if (suppressedProbes.size === 0) return;
-    let t = false;
-    for (const [n, i] of suppressedProbes) {
-        const r = n.me;
-        const s = r ? currentTransition(r) : null;
-        if (!s) {
-            suppressedProbes.delete(n);
-            continue;
-        }
-        if (s !== e) continue;
-        suppressedProbes.delete(n);
-        const o = n.o?.xe?.o?.Ce;
-        for (const e of i) {
-            if (e.oe & REACTIVE_DISPOSED) continue;
-            e.oe |= REACTIVE_OPTIMISTIC_DIRTY;
-            if (o) assignOrMergeLane(e, o); else if (e.o !== null) e.o.Ce = undefined;
-            enqueueSub(e);
-            t = true;
-        }
+/** The pass entering a verdict window is a verdict reader (CONFIG_VERDICT):
+ * a dependency going pending re-derives it, the verdict having changed. Not
+ * an untracked window: that is a snapshot, like any untracked read (#3946 —
+ * a router's link claim probing inside the computation that creates the
+ * anchor). A throw still reaches the pass through `untrack`. */ function markVerdictReader(e) {
+    let t = context;
+    if (t?.Ht) t = t.gt;
+    if (t !== null && tracking) {
+        t.i |= CONFIG_VERDICT;
+        t.R |= REACTIVE_PROBED;
+        // Observe tier: which windows this pass entered (1 `isPending`, 2
+        // `latest`) — the hold census names the affordance (attribution.ts).
+                t.Ze = (t.Ze ?? 0) | e;
     }
-    if (t) schedule();
 }
 
-function snapCompanionsToState(e) {
-    suppressedProbes.size !== 0 && suppressedProbes.delete(e);
-    const t = e.o?.xe;
-    if (t && (t.o?.we === undefined || t.o?.we === NOT_PENDING)) {
-        const n = computePendingState(e);
-        if (t.ce !== n || t._e !== NOT_PENDING) {
-            t.ce = n;
-            t._e = NOT_PENDING;
-            insertSubs(t);
-            schedule();
-        }
-    }
-    const n = e.o?.Me;
-    if (n && !(n.oe & REACTIVE_DISPOSED)) {
-        // A leaf whose firewall is disposed (the projection's teardown snaps its
-        // companion-bearing leaves): the shadow's compute reads through a
-        // disposed, possibly still-pending projection and would sit
-        // NotReady/uninitialized forever — never derived, its backfilled override
-        // dropped at the settle — against a leaf whose committed value differs
-        // (INV-4 at the next quiescence; spec O5). It dies with its source;
-        // getLatestValueComputed treats a disposed shadow as absent, so a later
-        // read recreates it from the committed view.
-        if (e.Ne?.oe & REACTIVE_DISPOSED) {
-            dispose(n);
-            return;
-        }
-        if ((n.o?.we === undefined || n.o?.we === NOT_PENDING) && n._e === NOT_PENDING && !Object.is(n.ce, e.ce) && !(n.oe & (REACTIVE_DIRTY | REACTIVE_CHECK))) {
-            n.oe |= REACTIVE_DIRTY;
-            insertIntoHeap(n, queueFor(n));
-            insertSubs(n);
-            schedule();
-        }
-        snapCompanionsToState(n);
-    }
-}
-
-function getLatestValueComputed(e) {
-    let t = e.o?.Me;
-    // A shadow disposed while unobserved (its gated reader unmounted at a
-    // landing) is a corpse: sync writes into it equality-swallow against its
-    // frozen _value, and a later read revives it via recompute — clearing
-    // DISPOSED and re-deriving from the committed view, so the banner showed
-    // the previous transition's target (#3041 follow-up). Treat it as absent;
-    // recreation backfills from the in-flight write below.
-        if (t && t.oe & REACTIVE_DISPOSED) t = undefined;
-    if (!t) {
-        const n = latestReadActive;
-        setLatestReadActive(false);
-        const i = pendingCheckActive;
-        setPendingCheckActive(false);
-        const r = context;
-        setContextInternal(null);
- // Detach from owner so it isn't disposed with effects
-                GlobalQueue.Tn = true;
-        try {
-            t = optimisticComputed(() => read(e), {
-                ownedWrite: true
-            });
-        } finally {
-            GlobalQueue.Tn = false;
-        }
-        ext(e).Me = t;
-        e.C |= CONFIG_HAS_COMPANIONS;
-        markFirewallChildCompanions(e);
-        ext(t).$n = e;
- // Parent-child lane relationship
-        // Backfill an in-flight write (mirrors getPendingSignal): the companion is
-        // created lazily, possibly after the write was processed — syncCompanions
-        // only pushes into companions that already exist, so the first latest()
-        // read inside a held transition showed the committed value (#3041).
-                const s = flushedStaged(e);
-        if (s !== NOT_PENDING && !hasActiveOverride(e)) backfillCompanion(e, t, s);
-        joinUnflushedResync(e);
-        setContextInternal(r);
-        setPendingCheckActive(i);
-        setLatestReadActive(n);
+/** The windows. `read` dispatches to `verdictValue` while one is open; each
+ * restores the dispatch it found — none inside a memo's pass a window
+ * pulled (`verdictValue`). */ function latest(e) {
+    markVerdictReader(2);
+    const t = latestActive, n = verdict;
+    latestActive = true;
+    setVerdict(verdictValue);
+    try {
+        return e();
+    } finally {
+        latestActive = t;
+        setVerdict(n);
     }
-    return t;
 }
 
-/** The latest()-mode read path, installed as GlobalQueue._latestRead. */
-/** A7: the source has no visible value yet — judged on the OWNER, as read()
- * does: a store leaf behind a projection's firewall is a plain signal whose
- * `_value` is the seed (A25: a draft, never a value), and read() routes a
- * latest() read here before its own firewall/status logic. An override
- * displays a value even before the first commit (A17). */ function uninitializedSource(e) {
-    const t = e.Ne || e;
-    return !!(t.S & STATUS_UNINITIALIZED) && !hasActiveOverride(e);
-}
-
-function latestRead(e) {
-    // A leaf of a DISPOSED projection has no flushed world left to mirror: a
-    // shadow created for it now would read through the dead firewall, sit
-    // NotReady/uninitialized forever, and no teardown would ever retire it (the
-    // firewall's already ran — spec O5). Serve the committed value; create
-    // nothing. (A read of a disposed node freezes at its last commit, #3024.)
-    if (e.Ne?.oe & REACTIVE_DISPOSED) return e.ce;
-    const t = getLatestValueComputed(e);
-    const n = latestReadActive;
-    setLatestReadActive(false);
-    const i = visibleOverride(e) ? unwrapOverride(e.o?.we) : e.ce;
-    // A28: an unflushed write is not the staged value latest() serves. The
-    // shadow was written at the source's write to mirror it (A8) — consult it
-    // only once a flush has carried the write.
-        const r = unflushedValue(e);
-    if (r !== NOT_PENDING) {
-        // The reader derived from the flushed world because of an unflushed
-        // write: it runs again in the flush that carries it (late linker) —
-        // a pull may have cleared the mark the write's walk set.
-        if (context !== null && context.oe & REACTIVE_RECOMPUTING_DEPS) markLateLinker(context);
-        // Link the reader to the shadow so the flush that carries the write
-        // updates it (the shadow itself already mirrors the write, A8).
-                try {
-            read(t);
-        } catch {
-            /* the flushed value answers */} finally {
-            setLatestReadActive(n);
-        }
-        // An ambient write: the visible value (override or committed). A rewrite
-        // of a held node: the staged value the last flush left.
-                return e.me === null ? i : r;
-    }
-    let s;
+function isPending(e) {
+    markVerdictReader(1);
+    const t = probing;
+    const n = probeFound;
+    const r = verdict;
+    probing = true;
+    probeFound = false;
+    setVerdict(verdictValue);
     try {
-        // No mid-tick pull: writes become visible at flush (A28), so before the
-        // flush the shadow is exactly as current as the flushed world — the read
-        // below serves it as is. (#2922's pull, which brought the shadow current
-        // against the unflushed write, is superseded: `flush()` first to read
-        // your own write.)
-        s = read(t);
-    } catch (t) {
-        // A NotReady from the shadow of an INITIALIZED source means the shadow
-        // is mid-flight: serve the visible (committed / override) value. An
-        // uninitialized source has no visible value — latest() throws in every
-        // scope rather than fabricate `undefined` for a `T` that excludes it
-        // (A7; the unowned scope used to return undefined here).
-        if (t instanceof NotReadyError && !uninitializedSource(e)) return i;
-        throw t;
+        e();
+        return probeFound;
+    } catch (e) {
+        // A pending node is served inside the probe; what still throws is an
+        // uninitialized one — loading, not pending (A19 exc. 1) — whose NotReady
+        // propagates to boundaries from inside an owner (B5a; a component body
+        // suspends on it like any read, #2928) and is swallowed outside one. A
+        // verdict never throws anything else: a thunk that errors is simply not
+        // pending.
+        if (e instanceof NotReadyError && !probeFound && context !== null) throw e;
+        return probeFound;
     } finally {
-        setLatestReadActive(n);
-    }
-    if (t.S & STATUS_PENDING) {
-        if (uninitializedSource(e)) throw new NotReadyError(e);
-        return i;
+        probing = t;
+        probeFound = n;
+        setVerdict(r);
     }
-    // A render effect off the shadow's HELD lane sees the committed value and
-    // re-runs at the release (#3460; lanes mirror transitions — see
-    // readsHeldCommitted). Was: only a reader under ANOTHER lane; a mainline
-    // reader, mounted or re-run by a sync write mid-hold, showed the
-    // speculative value beside the lane's deferred readers.
-        if (stale && context !== null && readsHeldCommitted(t, context)) return e.ce;
-    // A shadow recomputed by the pull above (not at creation) holds its fresh
-    // speculative value in _pendingValue; a contextless read() only surfaces
-    // _value. Overrides stay authoritative (A17), and stale readers keep the
-    // other transition's committed view, matching read()'s own selection.
-        if (t._e !== NOT_PENDING && !hasActiveOverride(t) && !(stale && t.me && activeTransition !== t.me)) return t._e;
-    return s;
 }
 
-/**
- * A latest() shadow that is uninitialized only because it was CREATED during
- * an active flight — its parent source already has a committed value, so
- * latest() serves that as the visible value and a tracked reader has
- * something to pair a verdict with (#3166). Same parent resolution as
- * computePendingState. The pending signal companion also carries
- * `_parentSource` but is a plain signal (no `_fn`) that never goes pending,
- * so the `_fn` check is belt-and-braces for this call site.
- */ function latestShadowWithInitializedParent(e) {
-    if (typeof e.Se !== "function") return false;
-    const t = e.o?.$n;
-    if (t === undefined) return false;
-    const n = t.Ne || t;
-    return !(n.S & STATUS_UNINITIALIZED);
+/** `latest()` of a held node: the flushed staging — the proposal — and, for
+ * a tracked reader of a rewrite not yet flushed, the late-linker re-run in
+ * the flush that carries it. */ function heldLatest(e, t) {
+    const n = unflushedValue(e);
+    if (n === NOT_PENDING) return e.Oe;
+    if (t !== null) markLateLinker(t);
+    return n;
 }
 
-/** The isPending()-probe read path, installed as GlobalQueue._pendingCheck. */ function pendingCheckRead(e, t, n, i) {
-    setPendingCheckActive(false);
-    if (typeof e.Se === "function") {
-        GlobalQueue.Tn = true;
-        try {
-            prepareComputed(e, true);
-        } finally {
-            GlobalQueue.Tn = false;
+/** The verdict windows' read — `latest(fn)` and `isPending(fn)` — in one
+ * cold path off `read`'s. It links and pulls like a plain read, then answers
+ * for what the reader sees (a verdict reader is a frame reader):
+ * - a lane's node: the reader is the holder's verdict lane's (not the
+ *   lane's — a lane blocked on its own flight would hold the reader's run,
+ *   the opposite of a verdict's display-ahead). A guess is the value (A17),
+ *   not final while its own question flies or a truth held beneath it
+ *   differs (A24, A18 provenance). A derivation: `latest` sees the lane's
+ *   latest (a landing a blocked lane holds has answered its question — the
+ *   checkout's shipping text updates independently of the tax in flight),
+ *   `isPending` the screen; not final while its own flight is up;
+ * - a held node: the reader breaks out as the holder's verdict lane's and
+ *   re-derives at the landing; `latest` serves the proposal (`heldLatest`),
+ *   `isPending` answers `heldNotFinal`;
+ * - a node staged this flush and not yet held: the seam's verdict
+ *   (`provisionalVerdict`) — or, with a newer question already in flight
+ *   (#3376, the stale first hop of a chain), its flight's;
+ * - a flight (cause ii): `isPending` records it (`pendingVerdict`), `latest`
+ *   serves the committed value — below the async nothing newer exists; an
+ *   uninitialized one throws NotReady: loading, not pending (A19 exc. 1);
+ * - an errored derivation throws for every reader (#2897). */ function verdictValue(e, t) {
+    const n = e;
+    const r = t !== null && !(t.i & CONFIG_CHILDREN_FORBIDDEN);
+    const i = r && tracking;
+    if (t !== null && tracking) {
+        link(e, t);
+        if (n.ee !== undefined) {
+            // A31: the pulled memo's pass is its own, not the probe's — it reads
+            // outside the window, and the probe's read below answers for what
+            // the pass produced.
+            setVerdict(null);
+            pullComputed(n, t);
+            setVerdict(verdictValue);
         }
     }
-    const r = n.S;
-    if (t && r & STATUS_PENDING && r & STATUS_UNINITIALIZED && 
-    // The suspend-throw is for a genuinely-first-load source: the tracked
-    // reader has nothing to pair a verdict with, so it parks on the source.
-    // A latest() SHADOW created lazily mid-flight is born uninitialized even
-    // though its parent has a committed value latest() will serve — throwing
-    // here (swallowed by latestRead's fallback) dropped the shadow from the
-    // probe, so a tracked latest(isPending()) probe created during a
-    // new-question flight cached `false` for that whole flight (#3166).
-    // Defer to the PARENT's initialization state and fall through to normal
-    // collection; the plain pending throw downstream still links the reader.
-    !latestShadowWithInitializedParent(n)) {
-        if (tracking && e !== t) link(e, t);
-        setPendingCheckActive(true);
-        throw n.o?._;
-    }
-    collectPendingSources(e);
-    if (i) collectPendingSources(i);
-    setPendingCheckActive(true);
-}
-
-/**
- * A held node whose transaction still has an async question in flight. The
- * probe's fresh-read pairing rule (#2831 — "a reader that sees the fresh
- * value must not also be told it is pending") only applies to LANDED answers
- * awaiting reveal; while the answer is still computing, the fresh value the
- * reader saw is an input, and pending remains the truth for every reader
- * (#3028).
- */ function heldAwaitingAsync(e) {
-    const t = e.me;
-    const n = t ? currentTransition(t) : activeTransition;
-    if (!n || n.Dt) return false;
-    // A plain staged write (a signal/store leaf — no _fn) held while an action
-    // is still running is an INPUT to a computation still in flight (#3078):
-    // the pairing rule must not suppress the verdict, or a memo recomputing
-    // mid-action reads the staged value, gets told "not pending", and
-    // disagrees with a direct isPending() probe for the whole action window.
-    // A computed's staged value is the opposite case — a LANDED answer
-    // awaiting reveal — where the pairing rule stands even inside an open
-    // action (#2831: a reader that saw the new value must not also see
-    // pending); still-computing answers are covered by the reporter scan.
-        if (n.tt.length && !e.Se) return true;
-    // The reporter scan runs for an unstamped node too (#3457): a node staged
-    // AFTER the transaction opened is pushed straight into the transaction's
-    // batch (queuePendingNode, once initTransition adopted it) and only gets
-    // its `_transition` stamp when the flush stashes the hold, but its staged
-    // value is already the transaction's, and `t` resolved to that very
-    // transaction above. Gating on the stamp let a memo whose recompute read
-    // a sync memo's fresh staged value mid-flush pair "not pending" with it
-    // (A10) while the transaction's async source was still computing, so a
-    // memo-wrapped isPending() read false where a direct probe read true.
-        for (const [e, t] of n.ae) {
-        if (t.size && e.S & STATUS_PENDING && e.o?._?.source === e) return true;
-    }
-    return false;
-}
-
-function recordFreshRead(e, t) {
-    if (pendingProbe !== null && e._e !== NOT_PENDING && t === e._e) {
-        if (heldAwaitingAsync(e)) return;
-        pendingProbe.freshReads.add(e);
-    }
-}
-
-function applyReask(e, t) {
-    const n = !!(e.S & STATUS_PENDING);
-    const i = t && !(n && !e.o?.ve);
-    const r = n && (e.o?.ve ?? false) !== i;
-    // Allocation-free for the quiet case: false is the extension default.
-        if (i) ext(e).ve = true; else if (e.o !== null) e.o.ve = false;
-    return r;
-}
-
-function latest(e) {
-    const t = latestReadActive;
-    setLatestReadActive(true);
-    try {
-        return e();
-    } finally {
-        setLatestReadActive(t);
+    // A live `affects()` mark on the node or a dependency (affects.ts): not
+    // final by declaration — the value itself is read as below. The verdict is
+    // display-ahead like any: in a transaction's flush (the declaring action's
+    // body) the reader is its verdict lane's, not a staging the frame parks.
+        if (probing && GlobalQueue.N !== undefined && GlobalQueue.N(n)) {
+        probeFound = true;
+        if (i && flushTransaction !== null) verdictRead(t, flushTransaction);
     }
-}
-
-function isPending(e) {
-    const t = pendingCheckActive;
-    const n = pendingProbe;
-    setPendingCheckActive(true);
-    const i = pendingProbe = {
-        found: false,
-        sources: new Set,
-        freshReads: new Set,
-        suppressed: []
-    };
-    const collectPending = () => {
-        setPendingCheckActive(false);
-        // Companion reads are mode-neutral plumbing: under an outer latest()
-        // (isPending inside a latest window — #3104's memo shape) leaving latest
-        // mode active dispatched these reads through latestRead, which built a
-        // SHADOW OF THE PENDING SIGNAL itself. The next updatePendingSignal then
-        // wrote that companion-on-companion from inside a recompute
-        // (syncCompanions → setSignal on a shadow created without ownedWrite)
-        // and halted dev with the owned-scope write guard. The creation paths
-        // (getLatestValueComputed / getPendingSignal) already suspend both
-        // modes; this read site must too.
-                const e = latestReadActive;
-        setLatestReadActive(false);
-        try {
-            i.sources.forEach(e => {
-                if (read(getPendingSignal(e))) {
-                    if (!i.freshReads.has(e)) i.found = true; else i.suppressed.push(e);
-                }
-            });
-        } finally {
-            setLatestReadActive(e);
-            setPendingCheckActive(true);
+    if (e.i & CONFIG_OVERRIDE) {
+        const r = txOf(e);
+        if (i) verdictRead(t, r._parent ?? r);
+        const u = (n.S & STATUS_PENDING) !== 0 && !quietPending(n);
+        if (e.i & CONFIG_GUESS) {
+            if (probing && (u || e.Oe !== NOT_PENDING && (!e.en || !e.en(e.m.B, e.Oe)))) probeFound = true;
+            return e.m.B;
         }
-        // A "not pending" verdict that exists only because this reader saw the
-        // fresh held value is provisional: if the write turns out NOT to commit
-        // this flush (a downstream async pends and holds it), the suppression was
-        // wrong and the wrapper must re-ask (#3028). Remember who to wake — the
-        // async registration (GlobalQueue.notify) triggers wakeSuppressedProbes.
-        // A TRACKED probe only (#3648): an `untrack(() => isPending(x))` inside a
-        // memo asked for a one-shot answer and declined the re-run its tracked
-        // form would get — enrolling its host anyway marked the memo OPT-dirty on
-        // the companion's lane and re-ran it (a router `query()` refetched, its
-        // first flight abandoned mid-air) for a verdict it never depended on.
-                if (tracking && !i.found && i.suppressed.length && context && typeof context.Se === "function") {
-            for (const e of i.suppressed) {
-                let t = suppressedProbes.get(e);
-                if (!t) suppressedProbes.set(e, t = new Set);
-                t.add(context);
+        if (probing && u) probeFound = true;
+        return latestActive && !u ? laneValueOf(e) : display(e);
+    }
+    const u = (n.S & STATUS_UNINITIALIZED) !== 0;
+    if (e.i & CONFIG_HELD) {
+        if (!u) {
+            const r = txOf(e);
+            // A render effect re-run (or mounted) outside the verdict lane's flush
+            // while the lane is blocked — its display held on its own derivation
+            // in flight — is a stale reader of the lane (#3460, as `laneRead`): the
+            // committed value now, re-derived at the reveal. Not inside a probe:
+            // `isPending` is answered below either way.
+                        if (i && !probing && t.u === EFFECT_RENDER && passLane === null && r.rt !== null && r.rt.fn && flushTransaction !== r) {
+                staleReader(t, r.rt);
+                return e.Ae;
+            }
+            if (i) verdictRead(t, r);
+            if (probing && heldNotFinal(n)) probeFound = true;
+            if (latestActive && e.Oe !== NOT_PENDING) {
+                // An action body reading another transaction's proposal derives
+                // from it: the two settle as one (A15; posture C, 2026-09-15). An
+                // untracked read elsewhere has no transaction to entangle.
+                if (!i && flushTransaction !== null && !globalQueue.X) joinFuture(txOf(e));
+                return heldLatest(e, i ? t : null);
             }
+            return e.Ae;
         }
-    };
-    try {
-        e();
-        collectPending();
-        return i.found;
-    } catch (e) {
-        collectPending();
-        if (e instanceof NotReadyError) {
-            const t = !!(e.source?.S & STATUS_UNINITIALIZED);
-            if (i.found && !t) return true;
-            if (context && t) throw e;
+        // Born into the future: its staging is its only value. It has no
+        // committed value, so no verdict: `isPending` reads it as its read does —
+        // the owner joins the hold (held with it, or caught by a boundary that
+        // has not shown content) and answers for the commit, where it is final.
+                if (e.Oe !== NOT_PENDING && !(n.S & STATUS_PENDING)) {
+            if (probing && r) joinPass(t, e);
+            return e.Oe;
         }
-        return i.found;
-    } finally {
-        setPendingCheckActive(t);
-        pendingProbe = n;
+    } else if (e.Oe !== NOT_PENDING) {
+        if (n.S & STATUS_PENDING && !u) pendingVerdict(i ? t : null, n); else if (i && globalQueue.X) provisionalVerdict(t, !latestActive && !u);
+        // Outside a flush, the staging is an unflushed write (A28): the probe
+        // answers for the flushed world, and watches the seam of the flush that
+        // carries the write — a memo of `isPending(x)` created after the write
+        // flips if that flush parks (#3078). (The write's own fan-out ran before
+        // the reader existed; nothing else would re-derive it.)
+         else if (i && probing) watchVerdict(t);
+        if (latestActive) {
+            // A28: an unflushed write is not what `latest` serves; a tracked
+            // reader derived from the flushed world runs again in the carrying
+            // flush.
+            if (globalQueue.X) return e.Oe;
+            if (t !== null) markLateLinker(t);
+        }
+        return e.Ae;
     }
+    if (n.S & STATUS_PENDING) {
+        if (!u) {
+            pendingVerdict(i ? t : null, n);
+            return e.Ae;
+        }
+        // As `read()`: an untracked read of a pending node still re-runs its
+        // reader when the node settles (a projection's pull reads its firewall
+        // untracked, store/store.ts).
+                if (t !== null && !tracking && !spectating && e !== t) link(e, t);
+        throw n.m?.F;
+    }
+    if (n.ee !== undefined && n.S & STATUS_ERROR) throw n.m.F;
+    return e.Ae;
 }
 
-// Hook installation (same late-binding pattern as GlobalQueue._update /
-// _propagateAffects): core call sites fire these behind the same guards the
-// direct calls used, so behavior is identical once this module loads.
-GlobalQueue.Le = syncCompanions;
-
-GlobalQueue.Ue = updatePendingSignal;
-
-GlobalQueue.qe = updateChildCompanions;
-
-GlobalQueue.Qn = snapCompanionsToState;
-
-GlobalQueue.Cn = latestRead;
-
-GlobalQueue.Rn = pendingCheckRead;
-
-GlobalQueue.Hn = recordFreshRead;
-
-GlobalQueue.At = applyReask;
-
-GlobalQueue.k = repollDownstreamVerdicts;
-
-GlobalQueue.ri = witnessAffects;
+// Installed at module evaluation — present exactly when something imports
+// `latest` or `isPending`. (`read` dispatches to `verdictValue` through
+// `verdict`, set while a window is open.)
+GlobalQueue.vt = observeFlight;
 
-GlobalQueue.si = wakeSuppressedProbes;
+/** A store read inside an untracked `isPending` probe found a live mark on
+ * a record with no node to carry it (store/affects.ts): not final. */ GlobalQueue.Bt = () => {
+    if (probing) probeFound = true;
+};
 
 export { isPending, latest };