@ttsc/unplugin 0.31.0 → 0.31.1

package/lib/core/transform/validation/matchesCachedSource.mjs

@@ -9,6 +9,7 @@ import { pathIdentityKey } from '../filesystem/pathIdentityKey.mjs';
 import { hostInputStateHash } from '../inputs/hostInputStateHash.mjs';
 import { toProjectKey } from '../project/toProjectKey.mjs';
 import { hashText } from '../utils/hashText.mjs';
+import { TtscGenerationProof } from './TtscGenerationProof.mjs';
 import { matchesCompleteInputSnapshot } from './matchesCompleteInputSnapshot.mjs';
 import { matchesNarrowPersistentInputs } from './matchesNarrowPersistentInputs.mjs';
 import { nativeInputPredicatesHold } from './nativeInputPredicatesHold.mjs';
@@ -23,17 +24,19 @@ import { notificationsProveProgramUnchanged } from './notificationsProveProgramU
  * no source comparison. A cache with a delivery epoch can use that comparison
  * alone for a stable generation's first delivery of each module in the current
  * pass, once the pass's own first delivery has proven the whole generation
- * still matches the filesystem. An incomplete generation may not take this
- * shortcut: otherwise a sibling output captured during a filesystem race could
- * still be served once. Later graph-bearing requests validate the file's
- * derived input set and project membership. A failed result is a diagnostic of
- * the whole loaded program, so its repair cannot be proved by one delivered
- * output's dependency closure. Failed and graph-free envelopes conservatively
- * validate the complete project and out-of-walk snapshots, reusing qualified
- * signatures. A mismatch rejects this generation for the delivery; its caller
- * chooses replacement or capture. Delivered text that differs while the disk
- * still holds the bytes the generation compiled is not one: it is reported and
- * served, since the compile read the disk (samchon/ttsc#1394).
+ * still matches the filesystem. Incomplete generations cannot claim complete
+ * proof. A coherent local success admitted only because its observer was
+ * unavailable may share first deliveries in its exact nonwatching pass through
+ * TtscGenerationProof; it cannot cross passes or earn persistent authority.
+ * Later graph-bearing requests validate the file's derived input set and
+ * project membership. A failed result is a diagnostic of the whole loaded
+ * program, so its repair cannot be proved by one delivered output's dependency
+ * closure. Failed and graph-free envelopes conservatively validate the complete
+ * project and out-of-walk snapshots, reusing qualified signatures. A mismatch
+ * rejects this generation for the delivery; its caller chooses replacement or
+ * capture. Delivered text that differs while the disk still holds the bytes the
+ * generation compiled is not one: it is reported and served, since the compile
+ * read the disk (samchon/ttsc#1394).
  *
  * Its place in the adapter's invalidation model, and the units beside it, are
  * mapped in the maintainer page
@@ -41,7 +44,7 @@ import { notificationsProveProgramUnchanged } from './notificationsProveProgramU
  *
  * @evidence contracts/common.md#principled-implementation Delivered source, generation completeness, pass identity and notification authority choose between first-delivery proof, derived-input validation and complete snapshots; divergent editor text never substitutes for compiler disk inputs.
  * @evidence contracts/common.md#clear-and-simple-design This admission boundary chooses the required proof while dedicated validators own membership, universal inputs and content comparisons.
- * @evidence contracts/common.md#prohibited-implementation-shortcuts An incomplete generation cannot earn a first-delivery shortcut; inherited object members cannot invent a project baseline, and losing watcher proof falls back to recorded-state validation.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts An incomplete generation cannot claim complete snapshot authority; only separately admitted coherent local success can share first deliveries of its exact nonwatching pass; inherited object members cannot invent a project baseline, and losing watcher proof falls back to recorded-state validation.
  * @evidence contracts/common.md#meaningful-documentation Separate native paragraphs explain disk-versus-delivered authority, epoch qualification, fallback and related maintainer guidance before tags.
  * @evidence contracts/portability.md#os-neutral-implementation Project membership and path identity use recorded compiler case policy and injected native operations; OS names do not certify case sensitivity or watcher capabilities.
  * @evidence contracts/performance.md#bound-retention-and-release-resources
@@ -51,13 +54,13 @@ import { notificationsProveProgramUnchanged } from './notificationsProveProgramU
  *   while validators replace current signature/directory witnesses. No new
  *   independent handle or historical epoch collection is acquired here.
  * @evidence contracts/performance.md#efficient-algorithms Every admission first replays all generation-owned typed config predicates; this mandatory cost includes native queries, file bytes or directory membership independently of watcher/epoch qualification.
- *   Fresh-only rejection precedes native identity work. Baseline-bearing paths
+ *   Unsupported fresh-only rejection precedes source baseline work. Baseline-bearing paths
  *   hash delivered text and divergent paths read/hash host bytes; unrelated
  *   absent outputs can return before that hash after an initial K-output index.
  *   Epoch-qualified first checkpoints share the complete proof. Other paths
  *   pay derived-input or complete project/external/universal proof costs,
  *   including path/byte populations, native observations and clock refresh.
- * @evidence contracts/performance.md#reuse-equivalent-work Typed config predicate replay is not cached by this coordinator and remains mandatory even when the following existing shortcut shares other proof.  A complete generation earns one whole-snapshot proof per new delivery epoch; later first deliveries share it, while repeated or persistent deliveries revalidate their authoritative dependency scope.
+ * @evidence contracts/performance.md#reuse-equivalent-work Typed config predicate replay remains mandatory for every delivery and shares only the current synchronous transaction with nested validators; immutable membership is indexed separately.  A complete generation earns one whole-snapshot proof per new delivery epoch; later first deliveries share it, while repeated or persistent deliveries revalidate their authoritative dependency scope.
  */
 function matchesCachedSource(
 /** Generation retaining recorded baselines and distinct proof authority. */
@@ -67,10 +70,11 @@ file,
 /** Delivered text, compared with the recorded baseline rather than adopted. */
 source, 
 /** Current host pass, or undefined for persistent input validation. */
-epoch) {
-    if (!nativeInputPredicatesHold(cached))
+epoch, proof) {
+    if (!nativeInputPredicatesHold(cached, proof))
         return false;
-    if (cached.freshDeliveryOnly === true)
+    const pass = TtscGenerationProof.sharesPass(cached, file, epoch);
+    if (cached.freshDeliveryOnly === true && !pass)
         return false;
     const identities = envelopeDerivation(cached).identityContext;
     const currentKey = toProjectKey(cached.projectRoot, file, identities);
@@ -88,7 +92,7 @@ epoch) {
         if (!outputs.has(identity)) {
             // While the watchers prove the program unchanged, the module is still
             // outside it, and no walk is needed to say so (samchon/ttsc#1398).
-            if (notificationsProveProgramUnchanged(cached)) {
+            if (notificationsProveProgramUnchanged(cached, proof)) {
                 return true;
             }
             // Root discovery deliberately never hashed this unrelated module. Its
@@ -96,7 +100,7 @@ epoch) {
             // whole program must still be current before we reuse that absence: a
             // changed config or importer can bring this file into the next program.
             refreshFilesystemClockReference(TRANSFORM_CLOCK_REFERENCE_DIRECTORIES.get(cached), resultFilesystem(cached.result));
-            return matchesCompleteInputSnapshot(cached);
+            return matchesCompleteInputSnapshot(cached, proof);
         }
     }
     if (expected !== hashText(source)) {
@@ -111,6 +115,8 @@ epoch) {
         }
         reportDivergentDelivery(cached, file);
     }
+    if (pass)
+        return true;
     if (epoch !== undefined && cached.projectSnapshotComplete === true) {
         if (cached.deliveryEpoch !== epoch) {
             // The pass's first delivery. The generation was settled against an
@@ -120,7 +126,7 @@ epoch) {
             // settled against it. That proof is what a per-pass recompile used to buy
             // (samchon/ttsc#1300), at a walk instead of a compile.
             refreshFilesystemClockReference(TRANSFORM_CLOCK_REFERENCE_DIRECTORIES.get(cached), resultFilesystem(cached.result));
-            if (!matchesCompleteInputSnapshot(cached)) {
+            if (!matchesCompleteInputSnapshot(cached, proof)) {
                 return false;
             }
             cached.deliveryEpoch = epoch;
@@ -138,7 +144,7 @@ epoch) {
         cached.projectDirectories !== undefined &&
         cached.projectMutationTracker !== undefined &&
         cached.hostInputMutationTracker !== undefined) {
-        const narrow = matchesNarrowPersistentInputs(cached, file);
+        const narrow = matchesNarrowPersistentInputs(cached, file, proof);
         if (narrow !== undefined) {
             return narrow;
         }
@@ -146,7 +152,7 @@ epoch) {
         // produced. Losing the proof is not evidence of a change, so fall through
         // to the snapshot the entry still carries.
     }
-    return matchesCompleteInputSnapshot(cached);
+    return matchesCompleteInputSnapshot(cached, proof);
 }
 
 export { matchesCachedSource };

package/lib/core/transform/validation/matchesCachedSource.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"matchesCachedSource.mjs","sources":["../../../../src/core/transform/validation/matchesCachedSource.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;;;;;;;AAiBA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CG;SACa,mBAAmB;AACjC;AACA,MAAkC;AAClC;AACA,IAAY;AACZ;AACA,MAAc;AACd;AACA,KAAyB,EAAA;AAEzB,IAAA,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC;AAAE,QAAA,OAAO,KAAK;AACpD,IAAA,IAAI,MAAM,CAAC,iBAAiB,KAAK,IAAI;AAAE,QAAA,OAAO,KAAK;IACnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,eAAe;AAC7D,IAAA,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,UAAU,CAAC;IACrE,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC;IAClD,MAAM,QAAQ,GACZ,MAAM,CAAC,YAAY,GAAG,QAAQ,CAAC;AAC/B,SAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU;AAClE,cAAE,MAAM,CAAC,WAAW,CAAC,UAAU;cAC7B,SAAS,CAAC;AACd,QAAA,MAAM,CAAC,mBAAmB,GAAG,QAAQ,CAAC;IACxC,IACE,QAAQ,KAAK,SAAS;AACtB,QAAA,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;QAChC,CAAC,sBAAsB,CACrB,IAAI,EACJ,MAAM,CAAC,gBAAgB,EACvB,KAAK,EACL,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CACzC,EACD;AACA,QAAA,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC;QACxC,MAAM,OAAO,IAAI,KAAK,CAAC,WAAW,KAAK,sBAAsB,CAC3D,KAAK,EACL,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CACrE,CACF,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;;;AAG1B,YAAA,IAAI,kCAAkC,CAAC,MAAM,CAAC,EAAE;AAC9C,gBAAA,OAAO,IAAI;YACb;;;;;AAKA,YAAA,+BAA+B,CAC7B,qCAAqC,CAAC,GAAG,CAAC,MAAM,CAAC,EACjD,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAChC;AACD,YAAA,OAAO,4BAA4B,CAAC,MAAM,CAAC;QAC7C;IACF;AACA,IAAA,IAAI,QAAQ,KAAK,QAAQ,CAAC,MAAM,CAAC,EAAE;;;;;;QAMjC,IACE,QAAQ,KAAK,SAAS;AACtB,YAAA,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,QAAQ,EACtE;AACA,YAAA,OAAO,KAAK;QACd;AACA,QAAA,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC;IACvC;IACA,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,uBAAuB,KAAK,IAAI,EAAE;AAClE,QAAA,IAAI,MAAM,CAAC,aAAa,KAAK,KAAK,EAAE;;;;;;;AAOlC,YAAA,+BAA+B,CAC7B,qCAAqC,CAAC,GAAG,CAAC,MAAM,CAAC,EACjD,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAChC;AACD,YAAA,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,EAAE;AACzC,gBAAA,OAAO,KAAK;YACd;AACA,YAAA,MAAM,CAAC,aAAa,GAAG,KAAK;AAC5B,YAAA,MAAM,CAAC,WAAW,EAAE,KAAK,EAAE;AAC3B,YAAA,OAAO,IAAI;QACb;QACA,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE;AACtC,YAAA,OAAO,IAAI;QACb;IACF;AACA,IAAA,+BAA+B,CAC7B,qCAAqC,CAAC,GAAG,CAAC,MAAM,CAAC,EACjD,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAChC;AACD,IAAA,IACE,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;AAChC,QAAA,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS;QACjC,MAAM,CAAC,uBAAuB,KAAK,IAAI;QACvC,MAAM,CAAC,kBAAkB,KAAK,SAAS;QACvC,MAAM,CAAC,sBAAsB,KAAK,SAAS;AAC3C,QAAA,MAAM,CAAC,wBAAwB,KAAK,SAAS,EAC7C;QACA,MAAM,MAAM,GAAG,6BAA6B,CAAC,MAAM,EAAE,IAAI,CAAC;AAC1D,QAAA,IAAI,MAAM,KAAK,SAAS,EAAE;AACxB,YAAA,OAAO,MAAM;QACf;;;;IAIF;AACA,IAAA,OAAO,4BAA4B,CAAC,MAAM,CAAC;AAC7C;;;;"}
+{"version":3,"file":"matchesCachedSource.mjs","sources":["../../../../src/core/transform/validation/matchesCachedSource.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAkBA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8CG;SACa,mBAAmB;AACjC;AACA,MAAkC;AAClC;AACA,IAAY;AACZ;AACA,MAAc;AACd;AACA,KAAyB,EACzB,KAAuC,EAAA;AAEvC,IAAA,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC;AAAE,QAAA,OAAO,KAAK;AAC3D,IAAA,MAAM,IAAI,GAAG,mBAAmB,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;AAChE,IAAA,IAAI,MAAM,CAAC,iBAAiB,KAAK,IAAI,IAAI,CAAC,IAAI;AAAE,QAAA,OAAO,KAAK;IAC5D,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,eAAe;AAC7D,IAAA,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,UAAU,CAAC;IACrE,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC;IAClD,MAAM,QAAQ,GACZ,MAAM,CAAC,YAAY,GAAG,QAAQ,CAAC;AAC/B,SAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU;AAClE,cAAE,MAAM,CAAC,WAAW,CAAC,UAAU;cAC7B,SAAS,CAAC;AACd,QAAA,MAAM,CAAC,mBAAmB,GAAG,QAAQ,CAAC;IACxC,IACE,QAAQ,KAAK,SAAS;AACtB,QAAA,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;QAChC,CAAC,sBAAsB,CACrB,IAAI,EACJ,MAAM,CAAC,gBAAgB,EACvB,KAAK,EACL,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CACzC,EACD;AACA,QAAA,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC;QACxC,MAAM,OAAO,IAAI,KAAK,CAAC,WAAW,KAAK,sBAAsB,CAC3D,KAAK,EACL,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CACrE,CACF,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;;;AAG1B,YAAA,IAAI,kCAAkC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;AACrD,gBAAA,OAAO,IAAI;YACb;;;;;AAKA,YAAA,+BAA+B,CAC7B,qCAAqC,CAAC,GAAG,CAAC,MAAM,CAAC,EACjD,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAChC;AACD,YAAA,OAAO,4BAA4B,CAAC,MAAM,EAAE,KAAK,CAAC;QACpD;IACF;AACA,IAAA,IAAI,QAAQ,KAAK,QAAQ,CAAC,MAAM,CAAC,EAAE;;;;;;QAMjC,IACE,QAAQ,KAAK,SAAS;AACtB,YAAA,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,QAAQ,EACtE;AACA,YAAA,OAAO,KAAK;QACd;AACA,QAAA,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC;IACvC;AACA,IAAA,IAAI,IAAI;AAAE,QAAA,OAAO,IAAI;IACrB,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,uBAAuB,KAAK,IAAI,EAAE;AAClE,QAAA,IAAI,MAAM,CAAC,aAAa,KAAK,KAAK,EAAE;;;;;;;AAOlC,YAAA,+BAA+B,CAC7B,qCAAqC,CAAC,GAAG,CAAC,MAAM,CAAC,EACjD,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAChC;YACD,IAAI,CAAC,4BAA4B,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;AAChD,gBAAA,OAAO,KAAK;YACd;AACA,YAAA,MAAM,CAAC,aAAa,GAAG,KAAK;AAC5B,YAAA,MAAM,CAAC,WAAW,EAAE,KAAK,EAAE;AAC3B,YAAA,OAAO,IAAI;QACb;QACA,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE;AACtC,YAAA,OAAO,IAAI;QACb;IACF;AACA,IAAA,+BAA+B,CAC7B,qCAAqC,CAAC,GAAG,CAAC,MAAM,CAAC,EACjD,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAChC;AACD,IAAA,IACE,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS;AAChC,QAAA,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS;QACjC,MAAM,CAAC,uBAAuB,KAAK,IAAI;QACvC,MAAM,CAAC,kBAAkB,KAAK,SAAS;QACvC,MAAM,CAAC,sBAAsB,KAAK,SAAS;AAC3C,QAAA,MAAM,CAAC,wBAAwB,KAAK,SAAS,EAC7C;QACA,MAAM,MAAM,GAAG,6BAA6B,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;AACjE,QAAA,IAAI,MAAM,KAAK,SAAS,EAAE;AACxB,YAAA,OAAO,MAAM;QACf;;;;IAIF;AACA,IAAA,OAAO,4BAA4B,CAAC,MAAM,EAAE,KAAK,CAAC;AACpD;;;;"}

package/lib/core/transform/validation/matchesCompleteInputSnapshot.d.cts

@@ -1,4 +1,5 @@
 import type { TtscCachedProjectTransform } from "../cache/TtscCachedProjectTransform.cjs";
+import type { TtscGenerationProof } from "./TtscGenerationProof.cjs";
 /**
  * Prove one generation from its own recorded snapshot, with no help from live
  * notifications.
@@ -29,11 +30,11 @@ import type { TtscCachedProjectTransform } from "../cache/TtscCachedProjectTrans
  *   target scans, signature entry materialization/adoption and native identity
  *   work add population/path/digit costs; unresolved content and predicate
  *   replay add bytes/listings. Early rejection skips subsequent domains.
- * @evidence contracts/performance.md#reuse-equivalent-work Typed config predicate replay is not cached by this coordinator and remains mandatory even when the following existing shortcut shares other proof.  Qualified separable signatures avoid repeated content reads under the caller's refreshed clock. Successful aggregate proof adopts earned project/external signatures and clears unverified flags; it neither clears recorded changes/failed flags nor makes later quiet notifications sufficient without their other admission conditions.
+ * @evidence contracts/performance.md#reuse-equivalent-work Typed config predicates remain mandatory on every delivery. An exact-generation synchronous transaction may share their current replay across nested validators, but no pass or notification shortcut authorizes a later delivery to skip them.  Qualified separable signatures avoid repeated content reads under the caller's refreshed clock. Successful aggregate proof adopts earned project/external signatures and clears unverified flags; it neither clears recorded changes/failed flags nor makes later quiet notifications sufficient without their other admission conditions.
  */
 export declare function matchesCompleteInputSnapshot(
 /**
  * Generation with a complete capture baseline and caller-refreshed clock
  * proof.
  */
-cached: TtscCachedProjectTransform): boolean;
+cached: TtscCachedProjectTransform, proof?: TtscGenerationProof.Transaction): boolean;

package/lib/core/transform/validation/matchesCompleteInputSnapshot.d.mts

@@ -1,4 +1,5 @@
 import type { TtscCachedProjectTransform } from "../cache/TtscCachedProjectTransform.mjs";
+import type { TtscGenerationProof } from "./TtscGenerationProof.mjs";
 /**
  * Prove one generation from its own recorded snapshot, with no help from live
  * notifications.
@@ -29,11 +30,11 @@ import type { TtscCachedProjectTransform } from "../cache/TtscCachedProjectTrans
  *   target scans, signature entry materialization/adoption and native identity
  *   work add population/path/digit costs; unresolved content and predicate
  *   replay add bytes/listings. Early rejection skips subsequent domains.
- * @evidence contracts/performance.md#reuse-equivalent-work Typed config predicate replay is not cached by this coordinator and remains mandatory even when the following existing shortcut shares other proof.  Qualified separable signatures avoid repeated content reads under the caller's refreshed clock. Successful aggregate proof adopts earned project/external signatures and clears unverified flags; it neither clears recorded changes/failed flags nor makes later quiet notifications sufficient without their other admission conditions.
+ * @evidence contracts/performance.md#reuse-equivalent-work Typed config predicates remain mandatory on every delivery. An exact-generation synchronous transaction may share their current replay across nested validators, but no pass or notification shortcut authorizes a later delivery to skip them.  Qualified separable signatures avoid repeated content reads under the caller's refreshed clock. Successful aggregate proof adopts earned project/external signatures and clears unverified flags; it neither clears recorded changes/failed flags nor makes later quiet notifications sufficient without their other admission conditions.
  */
 export declare function matchesCompleteInputSnapshot(
 /**
  * Generation with a complete capture baseline and caller-refreshed clock
  * proof.
  */
-cached: TtscCachedProjectTransform): boolean;
+cached: TtscCachedProjectTransform, proof?: TtscGenerationProof.Transaction): boolean;

package/lib/core/transform/validation/matchesCompleteInputSnapshot.d.ts

@@ -1,4 +1,5 @@
 import type { TtscCachedProjectTransform } from "../cache/TtscCachedProjectTransform";
+import type { TtscGenerationProof } from "./TtscGenerationProof";
 /**
  * Prove one generation from its own recorded snapshot, with no help from live
  * notifications.
@@ -29,11 +30,11 @@ import type { TtscCachedProjectTransform } from "../cache/TtscCachedProjectTrans
  *   target scans, signature entry materialization/adoption and native identity
  *   work add population/path/digit costs; unresolved content and predicate
  *   replay add bytes/listings. Early rejection skips subsequent domains.
- * @evidence contracts/performance.md#reuse-equivalent-work Typed config predicate replay is not cached by this coordinator and remains mandatory even when the following existing shortcut shares other proof.  Qualified separable signatures avoid repeated content reads under the caller's refreshed clock. Successful aggregate proof adopts earned project/external signatures and clears unverified flags; it neither clears recorded changes/failed flags nor makes later quiet notifications sufficient without their other admission conditions.
+ * @evidence contracts/performance.md#reuse-equivalent-work Typed config predicates remain mandatory on every delivery. An exact-generation synchronous transaction may share their current replay across nested validators, but no pass or notification shortcut authorizes a later delivery to skip them.  Qualified separable signatures avoid repeated content reads under the caller's refreshed clock. Successful aggregate proof adopts earned project/external signatures and clears unverified flags; it neither clears recorded changes/failed flags nor makes later quiet notifications sufficient without their other admission conditions.
  */
 export declare function matchesCompleteInputSnapshot(
 /**
  * Generation with a complete capture baseline and caller-refreshed clock
  * proof.
  */
-cached: TtscCachedProjectTransform): boolean;
+cached: TtscCachedProjectTransform, proof?: TtscGenerationProof.Transaction): boolean;

package/lib/core/transform/validation/matchesCompleteInputSnapshot.js

@@ -44,15 +44,15 @@ var walkSnapshotComplete = require('./walkSnapshotComplete.js');
  *   target scans, signature entry materialization/adoption and native identity
  *   work add population/path/digit costs; unresolved content and predicate
  *   replay add bytes/listings. Early rejection skips subsequent domains.
- * @evidence contracts/performance.md#reuse-equivalent-work Typed config predicate replay is not cached by this coordinator and remains mandatory even when the following existing shortcut shares other proof.  Qualified separable signatures avoid repeated content reads under the caller's refreshed clock. Successful aggregate proof adopts earned project/external signatures and clears unverified flags; it neither clears recorded changes/failed flags nor makes later quiet notifications sufficient without their other admission conditions.
+ * @evidence contracts/performance.md#reuse-equivalent-work Typed config predicates remain mandatory on every delivery. An exact-generation synchronous transaction may share their current replay across nested validators, but no pass or notification shortcut authorizes a later delivery to skip them.  Qualified separable signatures avoid repeated content reads under the caller's refreshed clock. Successful aggregate proof adopts earned project/external signatures and clears unverified flags; it neither clears recorded changes/failed flags nor makes later quiet notifications sufficient without their other admission conditions.
  */
 function matchesCompleteInputSnapshot(
 /**
  * Generation with a complete capture baseline and caller-refreshed clock
  * proof.
  */
-cached) {
-    if (!nativeInputPredicatesHold.nativeInputPredicatesHold(cached))
+cached, proof) {
+    if (!nativeInputPredicatesHold.nativeInputPredicatesHold(cached, proof))
         return false;
     if (cached.projectSnapshotComplete !== true ||
         cached.projectDirectories === undefined) {
@@ -70,7 +70,7 @@ cached) {
     if (hostValidation === undefined ||
         !matchesUniversalHostInputEntries.matchesUniversalHostInputEntries(cached, hostValidation) ||
         !matchesUniversalHostInputProbes.matchesUniversalHostInputProbes(cached, hostValidation) ||
-        !matchesUniversalHostInputTrees.matchesUniversalHostInputTrees(cached, hostValidation)) {
+        !matchesUniversalHostInputTrees.matchesUniversalHostInputTrees(cached, hostValidation, proof)) {
         return false;
     }
     const declaredInputs = declaredProjectInputKeys.declaredProjectInputKeys(state, cached);

package/lib/core/transform/validation/matchesCompleteInputSnapshot.js.map

@@ -1 +1 @@
-{"version":3,"file":"matchesCompleteInputSnapshot.js","sources":["../../../../src/core/transform/validation/matchesCompleteInputSnapshot.ts"],"sourcesContent":[null],"names":["nativeInputPredicatesHold","envelopeDerivation","matchesUniversalHostInputEntries","matchesUniversalHostInputProbes","matchesUniversalHostInputTrees","declaredProjectInputKeys","collectProjectInputSnapshot","resultFilesystem","walkSnapshotComplete","sameProjectDirectories","sameHashes","matchesCachedExternalInputs","matchesExternalInputRealpaths"],"mappings":";;;;;;;;;;;;;;;;AAeA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BG;SACa,4BAA4B;AAC1C;;;AAGG;AACH,MAAkC,EAAA;AAElC,IAAA,IAAI,CAACA,mDAAyB,CAAC,MAAM,CAAC;AAAE,QAAA,OAAO,KAAK;AACpD,IAAA,IACE,MAAM,CAAC,uBAAuB,KAAK,IAAI;AACvC,QAAA,MAAM,CAAC,kBAAkB,KAAK,SAAS,EACvC;AACA,QAAA,OAAO,KAAK;IACd;;;;;;;;AAQA,IAAA,MAAM,KAAK,GAAGC,qCAAkB,CAAC,MAAM,CAAC;AACxC,IAAA,MAAM,cAAc,GAAG,MAAM,CAAC,mBAAmB;IACjD,IACE,cAAc,KAAK,SAAS;AAC5B,QAAA,CAACC,iEAAgC,CAAC,MAAM,EAAE,cAAc,CAAC;AACzD,QAAA,CAACC,+DAA+B,CAAC,MAAM,EAAE,cAAc,CAAC;AACxD,QAAA,CAACC,6DAA8B,CAAC,MAAM,EAAE,cAAc,CAAC,EACvD;AACA,QAAA,OAAO,KAAK;IACd;IACA,MAAM,cAAc,GAAGC,iDAAwB,CAAC,KAAK,EAAE,MAAM,CAAC;IAC9D,MAAM,OAAO,GAAGC,uDAA2B,CACzC,MAAM,CAAC,WAAW,EAClB,KAAK,CAAC,eAAe,EACrBC,iCAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,EAC/B,MAAM,CAAC,eAAe,KAAK;AACzB,UAAE;AACF,UAAE,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,eAAe,EAAE,EACtE;;;AAGE,QAAA,YAAY,EAAE,cAAc;QAC5B,MAAM,EAAE,MAAM,CAAC,gBAAgB;AAChC,KAAA,CACF;IACD,IAAI,CAACC,yCAAoB,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE;AAClD,QAAA,OAAO,KAAK;IACd;AACA,IAAA,IACE,CAACC,6CAAsB,CACrB,MAAM,CAAC,kBAAkB,EACzB,OAAO,CAAC,kBAAkB,CAC3B,EACD;AACA,QAAA,OAAO,KAAK;IACd;AACA,IAAA,IAAI,CAACC,qBAAU,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE;AACnE,QAAA,OAAO,KAAK;IACd;;;;;;;;;AASA,IAAA,MAAM,eAAe,GAAGC,uDAA2B,CAAC,MAAM,CAAC;IAC3D,IAAI,CAAC,eAAe,CAAC,OAAO,IAAI,CAACC,2DAA6B,CAAC,MAAM,CAAC,EAAE;AACtE,QAAA,OAAO,KAAK;IACd;IACA,qBAAqB,CAAC,MAAM,EAAE;QAC5B,QAAQ,EAAE,eAAe,CAAC,UAAU;QACpC,OAAO,EAAE,OAAO,CAAC,gBAAgB;AAClC,KAAA,CAAC;;;;AAIF,IAAA,MAAM,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB;;;;IAItD,KAAK,MAAM,OAAO,IAAI;AACpB,QAAA,MAAM,CAAC,sBAAsB;AAC7B,QAAA,MAAM,CAAC,wBAAwB;AAC/B,QAAA,MAAM,CAAC,wBAAwB;AAChC,KAAA,EAAE;QACD,IAAI,OAAO,KAAK,SAAS;AAAE,YAAA,OAAO,CAAC,UAAU,GAAG,KAAK;IACvD;AACA,IAAA,OAAO,IAAI;AACb;AAEA;;;;;;;;;;;;;AAaG;AACH,SAAS,qBAAqB,CAC5B,MAAkC,EAClC,MAGC,EAAA;IAED,MAAM,iBAAiB,IAAI,MAAM,CAAC,eAAe,KAAK,EAAE,CAAC;AACzD,IAAA,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;AAC7D,QAAA,iBAAiB,CAAC,GAAG,CAAC,GAAG,SAAS;IACpC;IACA,MAAM,kBAAkB,IAAI,MAAM,CAAC,uBAAuB,KAAK,EAAE,CAAC;AAClE,IAAA,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;AACnE,QAAA,kBAAkB,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC1C;AACF;;;;"}
+{"version":3,"file":"matchesCompleteInputSnapshot.js","sources":["../../../../src/core/transform/validation/matchesCompleteInputSnapshot.ts"],"sourcesContent":[null],"names":["nativeInputPredicatesHold","envelopeDerivation","matchesUniversalHostInputEntries","matchesUniversalHostInputProbes","matchesUniversalHostInputTrees","declaredProjectInputKeys","collectProjectInputSnapshot","resultFilesystem","walkSnapshotComplete","sameProjectDirectories","sameHashes","matchesCachedExternalInputs","matchesExternalInputRealpaths"],"mappings":";;;;;;;;;;;;;;;;AAgBA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BG;SACa,4BAA4B;AAC1C;;;AAGG;AACH,MAAkC,EAClC,KAAuC,EAAA;AAEvC,IAAA,IAAI,CAACA,mDAAyB,CAAC,MAAM,EAAE,KAAK,CAAC;AAAE,QAAA,OAAO,KAAK;AAC3D,IAAA,IACE,MAAM,CAAC,uBAAuB,KAAK,IAAI;AACvC,QAAA,MAAM,CAAC,kBAAkB,KAAK,SAAS,EACvC;AACA,QAAA,OAAO,KAAK;IACd;;;;;;;;AAQA,IAAA,MAAM,KAAK,GAAGC,qCAAkB,CAAC,MAAM,CAAC;AACxC,IAAA,MAAM,cAAc,GAAG,MAAM,CAAC,mBAAmB;IACjD,IACE,cAAc,KAAK,SAAS;AAC5B,QAAA,CAACC,iEAAgC,CAAC,MAAM,EAAE,cAAc,CAAC;AACzD,QAAA,CAACC,+DAA+B,CAAC,MAAM,EAAE,cAAc,CAAC;QACxD,CAACC,6DAA8B,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,EAC9D;AACA,QAAA,OAAO,KAAK;IACd;IACA,MAAM,cAAc,GAAGC,iDAAwB,CAAC,KAAK,EAAE,MAAM,CAAC;IAC9D,MAAM,OAAO,GAAGC,uDAA2B,CACzC,MAAM,CAAC,WAAW,EAClB,KAAK,CAAC,eAAe,EACrBC,iCAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,EAC/B,MAAM,CAAC,eAAe,KAAK;AACzB,UAAE;AACF,UAAE,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,eAAe,EAAE,EACtE;;;AAGE,QAAA,YAAY,EAAE,cAAc;QAC5B,MAAM,EAAE,MAAM,CAAC,gBAAgB;AAChC,KAAA,CACF;IACD,IAAI,CAACC,yCAAoB,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE;AAClD,QAAA,OAAO,KAAK;IACd;AACA,IAAA,IACE,CAACC,6CAAsB,CACrB,MAAM,CAAC,kBAAkB,EACzB,OAAO,CAAC,kBAAkB,CAC3B,EACD;AACA,QAAA,OAAO,KAAK;IACd;AACA,IAAA,IAAI,CAACC,qBAAU,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE;AACnE,QAAA,OAAO,KAAK;IACd;;;;;;;;;AASA,IAAA,MAAM,eAAe,GAAGC,uDAA2B,CAAC,MAAM,CAAC;IAC3D,IAAI,CAAC,eAAe,CAAC,OAAO,IAAI,CAACC,2DAA6B,CAAC,MAAM,CAAC,EAAE;AACtE,QAAA,OAAO,KAAK;IACd;IACA,qBAAqB,CAAC,MAAM,EAAE;QAC5B,QAAQ,EAAE,eAAe,CAAC,UAAU;QACpC,OAAO,EAAE,OAAO,CAAC,gBAAgB;AAClC,KAAA,CAAC;;;;AAIF,IAAA,MAAM,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB;;;;IAItD,KAAK,MAAM,OAAO,IAAI;AACpB,QAAA,MAAM,CAAC,sBAAsB;AAC7B,QAAA,MAAM,CAAC,wBAAwB;AAC/B,QAAA,MAAM,CAAC,wBAAwB;AAChC,KAAA,EAAE;QACD,IAAI,OAAO,KAAK,SAAS;AAAE,YAAA,OAAO,CAAC,UAAU,GAAG,KAAK;IACvD;AACA,IAAA,OAAO,IAAI;AACb;AAEA;;;;;;;;;;;;;AAaG;AACH,SAAS,qBAAqB,CAC5B,MAAkC,EAClC,MAGC,EAAA;IAED,MAAM,iBAAiB,IAAI,MAAM,CAAC,eAAe,KAAK,EAAE,CAAC;AACzD,IAAA,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;AAC7D,QAAA,iBAAiB,CAAC,GAAG,CAAC,GAAG,SAAS;IACpC;IACA,MAAM,kBAAkB,IAAI,MAAM,CAAC,uBAAuB,KAAK,EAAE,CAAC;AAClE,IAAA,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;AACnE,QAAA,kBAAkB,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC1C;AACF;;;;"}

package/lib/core/transform/validation/matchesCompleteInputSnapshot.mjs

@@ -42,15 +42,15 @@ import { walkSnapshotComplete } from './walkSnapshotComplete.mjs';
  *   target scans, signature entry materialization/adoption and native identity
  *   work add population/path/digit costs; unresolved content and predicate
  *   replay add bytes/listings. Early rejection skips subsequent domains.
- * @evidence contracts/performance.md#reuse-equivalent-work Typed config predicate replay is not cached by this coordinator and remains mandatory even when the following existing shortcut shares other proof.  Qualified separable signatures avoid repeated content reads under the caller's refreshed clock. Successful aggregate proof adopts earned project/external signatures and clears unverified flags; it neither clears recorded changes/failed flags nor makes later quiet notifications sufficient without their other admission conditions.
+ * @evidence contracts/performance.md#reuse-equivalent-work Typed config predicates remain mandatory on every delivery. An exact-generation synchronous transaction may share their current replay across nested validators, but no pass or notification shortcut authorizes a later delivery to skip them.  Qualified separable signatures avoid repeated content reads under the caller's refreshed clock. Successful aggregate proof adopts earned project/external signatures and clears unverified flags; it neither clears recorded changes/failed flags nor makes later quiet notifications sufficient without their other admission conditions.
  */
 function matchesCompleteInputSnapshot(
 /**
  * Generation with a complete capture baseline and caller-refreshed clock
  * proof.
  */
-cached) {
-    if (!nativeInputPredicatesHold(cached))
+cached, proof) {
+    if (!nativeInputPredicatesHold(cached, proof))
         return false;
     if (cached.projectSnapshotComplete !== true ||
         cached.projectDirectories === undefined) {
@@ -68,7 +68,7 @@ cached) {
     if (hostValidation === undefined ||
         !matchesUniversalHostInputEntries(cached, hostValidation) ||
         !matchesUniversalHostInputProbes(cached, hostValidation) ||
-        !matchesUniversalHostInputTrees(cached, hostValidation)) {
+        !matchesUniversalHostInputTrees(cached, hostValidation, proof)) {
         return false;
     }
     const declaredInputs = declaredProjectInputKeys(state, cached);

package/lib/core/transform/validation/matchesCompleteInputSnapshot.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"matchesCompleteInputSnapshot.mjs","sources":["../../../../src/core/transform/validation/matchesCompleteInputSnapshot.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;;;;;AAeA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BG;SACa,4BAA4B;AAC1C;;;AAGG;AACH,MAAkC,EAAA;AAElC,IAAA,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC;AAAE,QAAA,OAAO,KAAK;AACpD,IAAA,IACE,MAAM,CAAC,uBAAuB,KAAK,IAAI;AACvC,QAAA,MAAM,CAAC,kBAAkB,KAAK,SAAS,EACvC;AACA,QAAA,OAAO,KAAK;IACd;;;;;;;;AAQA,IAAA,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC;AACxC,IAAA,MAAM,cAAc,GAAG,MAAM,CAAC,mBAAmB;IACjD,IACE,cAAc,KAAK,SAAS;AAC5B,QAAA,CAAC,gCAAgC,CAAC,MAAM,EAAE,cAAc,CAAC;AACzD,QAAA,CAAC,+BAA+B,CAAC,MAAM,EAAE,cAAc,CAAC;AACxD,QAAA,CAAC,8BAA8B,CAAC,MAAM,EAAE,cAAc,CAAC,EACvD;AACA,QAAA,OAAO,KAAK;IACd;IACA,MAAM,cAAc,GAAG,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC;IAC9D,MAAM,OAAO,GAAG,2BAA2B,CACzC,MAAM,CAAC,WAAW,EAClB,KAAK,CAAC,eAAe,EACrB,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,EAC/B,MAAM,CAAC,eAAe,KAAK;AACzB,UAAE;AACF,UAAE,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,eAAe,EAAE,EACtE;;;AAGE,QAAA,YAAY,EAAE,cAAc;QAC5B,MAAM,EAAE,MAAM,CAAC,gBAAgB;AAChC,KAAA,CACF;IACD,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE;AAClD,QAAA,OAAO,KAAK;IACd;AACA,IAAA,IACE,CAAC,sBAAsB,CACrB,MAAM,CAAC,kBAAkB,EACzB,OAAO,CAAC,kBAAkB,CAC3B,EACD;AACA,QAAA,OAAO,KAAK;IACd;AACA,IAAA,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE;AACnE,QAAA,OAAO,KAAK;IACd;;;;;;;;;AASA,IAAA,MAAM,eAAe,GAAG,2BAA2B,CAAC,MAAM,CAAC;IAC3D,IAAI,CAAC,eAAe,CAAC,OAAO,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,EAAE;AACtE,QAAA,OAAO,KAAK;IACd;IACA,qBAAqB,CAAC,MAAM,EAAE;QAC5B,QAAQ,EAAE,eAAe,CAAC,UAAU;QACpC,OAAO,EAAE,OAAO,CAAC,gBAAgB;AAClC,KAAA,CAAC;;;;AAIF,IAAA,MAAM,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB;;;;IAItD,KAAK,MAAM,OAAO,IAAI;AACpB,QAAA,MAAM,CAAC,sBAAsB;AAC7B,QAAA,MAAM,CAAC,wBAAwB;AAC/B,QAAA,MAAM,CAAC,wBAAwB;AAChC,KAAA,EAAE;QACD,IAAI,OAAO,KAAK,SAAS;AAAE,YAAA,OAAO,CAAC,UAAU,GAAG,KAAK;IACvD;AACA,IAAA,OAAO,IAAI;AACb;AAEA;;;;;;;;;;;;;AAaG;AACH,SAAS,qBAAqB,CAC5B,MAAkC,EAClC,MAGC,EAAA;IAED,MAAM,iBAAiB,IAAI,MAAM,CAAC,eAAe,KAAK,EAAE,CAAC;AACzD,IAAA,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;AAC7D,QAAA,iBAAiB,CAAC,GAAG,CAAC,GAAG,SAAS;IACpC;IACA,MAAM,kBAAkB,IAAI,MAAM,CAAC,uBAAuB,KAAK,EAAE,CAAC;AAClE,IAAA,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;AACnE,QAAA,kBAAkB,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC1C;AACF;;;;"}
+{"version":3,"file":"matchesCompleteInputSnapshot.mjs","sources":["../../../../src/core/transform/validation/matchesCompleteInputSnapshot.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;;;;;AAgBA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BG;SACa,4BAA4B;AAC1C;;;AAGG;AACH,MAAkC,EAClC,KAAuC,EAAA;AAEvC,IAAA,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC;AAAE,QAAA,OAAO,KAAK;AAC3D,IAAA,IACE,MAAM,CAAC,uBAAuB,KAAK,IAAI;AACvC,QAAA,MAAM,CAAC,kBAAkB,KAAK,SAAS,EACvC;AACA,QAAA,OAAO,KAAK;IACd;;;;;;;;AAQA,IAAA,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC;AACxC,IAAA,MAAM,cAAc,GAAG,MAAM,CAAC,mBAAmB;IACjD,IACE,cAAc,KAAK,SAAS;AAC5B,QAAA,CAAC,gCAAgC,CAAC,MAAM,EAAE,cAAc,CAAC;AACzD,QAAA,CAAC,+BAA+B,CAAC,MAAM,EAAE,cAAc,CAAC;QACxD,CAAC,8BAA8B,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,EAC9D;AACA,QAAA,OAAO,KAAK;IACd;IACA,MAAM,cAAc,GAAG,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC;IAC9D,MAAM,OAAO,GAAG,2BAA2B,CACzC,MAAM,CAAC,WAAW,EAClB,KAAK,CAAC,eAAe,EACrB,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,EAC/B,MAAM,CAAC,eAAe,KAAK;AACzB,UAAE;AACF,UAAE,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,eAAe,EAAE,EACtE;;;AAGE,QAAA,YAAY,EAAE,cAAc;QAC5B,MAAM,EAAE,MAAM,CAAC,gBAAgB;AAChC,KAAA,CACF;IACD,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE;AAClD,QAAA,OAAO,KAAK;IACd;AACA,IAAA,IACE,CAAC,sBAAsB,CACrB,MAAM,CAAC,kBAAkB,EACzB,OAAO,CAAC,kBAAkB,CAC3B,EACD;AACA,QAAA,OAAO,KAAK;IACd;AACA,IAAA,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE;AACnE,QAAA,OAAO,KAAK;IACd;;;;;;;;;AASA,IAAA,MAAM,eAAe,GAAG,2BAA2B,CAAC,MAAM,CAAC;IAC3D,IAAI,CAAC,eAAe,CAAC,OAAO,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,EAAE;AACtE,QAAA,OAAO,KAAK;IACd;IACA,qBAAqB,CAAC,MAAM,EAAE;QAC5B,QAAQ,EAAE,eAAe,CAAC,UAAU;QACpC,OAAO,EAAE,OAAO,CAAC,gBAAgB;AAClC,KAAA,CAAC;;;;AAIF,IAAA,MAAM,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB;;;;IAItD,KAAK,MAAM,OAAO,IAAI;AACpB,QAAA,MAAM,CAAC,sBAAsB;AAC7B,QAAA,MAAM,CAAC,wBAAwB;AAC/B,QAAA,MAAM,CAAC,wBAAwB;AAChC,KAAA,EAAE;QACD,IAAI,OAAO,KAAK,SAAS;AAAE,YAAA,OAAO,CAAC,UAAU,GAAG,KAAK;IACvD;AACA,IAAA,OAAO,IAAI;AACb;AAEA;;;;;;;;;;;;;AAaG;AACH,SAAS,qBAAqB,CAC5B,MAAkC,EAClC,MAGC,EAAA;IAED,MAAM,iBAAiB,IAAI,MAAM,CAAC,eAAe,KAAK,EAAE,CAAC;AACzD,IAAA,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;AAC7D,QAAA,iBAAiB,CAAC,GAAG,CAAC,GAAG,SAAS;IACpC;IACA,MAAM,kBAAkB,IAAI,MAAM,CAAC,uBAAuB,KAAK,EAAE,CAAC;AAClE,IAAA,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;AACnE,QAAA,kBAAkB,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC1C;AACF;;;;"}

package/lib/core/transform/validation/matchesNarrowPersistentInputs.d.cts

@@ -1,4 +1,5 @@
 import type { TtscCachedProjectTransform } from "../cache/TtscCachedProjectTransform.cjs";
+import type { TtscGenerationProof } from "./TtscGenerationProof.cjs";
 /**
  * Validate one graph-bearing cached output against only the inputs that can
  * affect that file. The delivery validator establishes its complete baseline
@@ -39,4 +40,4 @@ export declare function matchesNarrowPersistentInputs(
  */
 cached: TtscCachedProjectTransform, 
 /** Delivered file spelling selecting this envelope's dependency closure. */
-file: string): boolean | undefined;
+file: string, proof?: TtscGenerationProof.Transaction): boolean | undefined;

package/lib/core/transform/validation/matchesNarrowPersistentInputs.d.mts

@@ -1,4 +1,5 @@
 import type { TtscCachedProjectTransform } from "../cache/TtscCachedProjectTransform.mjs";
+import type { TtscGenerationProof } from "./TtscGenerationProof.mjs";
 /**
  * Validate one graph-bearing cached output against only the inputs that can
  * affect that file. The delivery validator establishes its complete baseline
@@ -39,4 +40,4 @@ export declare function matchesNarrowPersistentInputs(
  */
 cached: TtscCachedProjectTransform, 
 /** Delivered file spelling selecting this envelope's dependency closure. */
-file: string): boolean | undefined;
+file: string, proof?: TtscGenerationProof.Transaction): boolean | undefined;

package/lib/core/transform/validation/matchesNarrowPersistentInputs.d.ts

@@ -1,4 +1,5 @@
 import type { TtscCachedProjectTransform } from "../cache/TtscCachedProjectTransform";
+import type { TtscGenerationProof } from "./TtscGenerationProof";
 /**
  * Validate one graph-bearing cached output against only the inputs that can
  * affect that file. The delivery validator establishes its complete baseline
@@ -39,4 +40,4 @@ export declare function matchesNarrowPersistentInputs(
  */
 cached: TtscCachedProjectTransform, 
 /** Delivered file spelling selecting this envelope's dependency closure. */
-file: string): boolean | undefined;
+file: string, proof?: TtscGenerationProof.Transaction): boolean | undefined;

package/lib/core/transform/validation/matchesNarrowPersistentInputs.js

@@ -48,7 +48,7 @@ function matchesNarrowPersistentInputs(
  */
 cached, 
 /** Delivered file spelling selecting this envelope's dependency closure. */
-file) {
+file, proof) {
     if (reportsMembershipChange.reportsMembershipChange(cached)) {
         return false;
     }
@@ -60,7 +60,7 @@ file) {
     if (hostValidation === undefined) {
         return undefined;
     }
-    if (!matchesUniversalHostInputs.matchesUniversalHostInputs(cached, hostValidation)) {
+    if (!matchesUniversalHostInputs.matchesUniversalHostInputs(cached, hostValidation, proof)) {
         return false;
     }
     const inputs = selectWatchInputs.selectWatchInputs({

package/lib/core/transform/validation/matchesNarrowPersistentInputs.js.map

@@ -1 +1 @@
-{"version":3,"file":"matchesNarrowPersistentInputs.js","sources":["../../../../src/core/transform/validation/matchesNarrowPersistentInputs.ts"],"sourcesContent":[null],"names":["reportsMembershipChange","notificationsProveMembership","envelopeDerivation","matchesUniversalHostInputs","selectWatchInputs","matchesProvenInput"],"mappings":";;;;;;;;;;AAUA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCG;SACa,6BAA6B;AAC3C;;;AAGG;AACH,MAAkC;AAClC;AACA,IAAY,EAAA;AAEZ,IAAA,IAAIA,+CAAuB,CAAC,MAAM,CAAC,EAAE;AACnC,QAAA,OAAO,KAAK;IACd;AACA,IAAA,IAAI,CAACC,yDAA4B,CAAC,MAAM,CAAC,EAAE;AACzC,QAAA,OAAO,SAAS;IAClB;AACA,IAAA,MAAM,KAAK,GAAGC,qCAAkB,CAAC,MAAM,CAAC;AACxC,IAAA,MAAM,cAAc,GAAG,MAAM,CAAC,mBAAmB;AACjD,IAAA,IAAI,cAAc,KAAK,SAAS,EAAE;AAChC,QAAA,OAAO,SAAS;IAClB;IACA,IAAI,CAACC,qDAA0B,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE;AACvD,QAAA,OAAO,KAAK;IACd;IACA,MAAM,MAAM,GAAGC,mCAAiB,CAAC;QAC/B,IAAI;QACJ,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;AAC5C,KAAA,CAAC;AACF,IAAA,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE;;;;AAI1B,QAAA,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE;YACnD;QACF;QACA,IAAI,CAACC,qCAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE;AAC7C,YAAA,OAAO,KAAK;QACd;IACF;AACA,IAAA,OAAO,IAAI;AACb;;;;"}
+{"version":3,"file":"matchesNarrowPersistentInputs.js","sources":["../../../../src/core/transform/validation/matchesNarrowPersistentInputs.ts"],"sourcesContent":[null],"names":["reportsMembershipChange","notificationsProveMembership","envelopeDerivation","matchesUniversalHostInputs","selectWatchInputs","matchesProvenInput"],"mappings":";;;;;;;;;;AAWA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCG;SACa,6BAA6B;AAC3C;;;AAGG;AACH,MAAkC;AAClC;AACA,IAAY,EACZ,KAAuC,EAAA;AAEvC,IAAA,IAAIA,+CAAuB,CAAC,MAAM,CAAC,EAAE;AACnC,QAAA,OAAO,KAAK;IACd;AACA,IAAA,IAAI,CAACC,yDAA4B,CAAC,MAAM,CAAC,EAAE;AACzC,QAAA,OAAO,SAAS;IAClB;AACA,IAAA,MAAM,KAAK,GAAGC,qCAAkB,CAAC,MAAM,CAAC;AACxC,IAAA,MAAM,cAAc,GAAG,MAAM,CAAC,mBAAmB;AACjD,IAAA,IAAI,cAAc,KAAK,SAAS,EAAE;AAChC,QAAA,OAAO,SAAS;IAClB;IACA,IAAI,CAACC,qDAA0B,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE;AAC9D,QAAA,OAAO,KAAK;IACd;IACA,MAAM,MAAM,GAAGC,mCAAiB,CAAC;QAC/B,IAAI;QACJ,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;AAC5C,KAAA,CAAC;AACF,IAAA,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE;;;;AAI1B,QAAA,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE;YACnD;QACF;QACA,IAAI,CAACC,qCAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE;AAC7C,YAAA,OAAO,KAAK;QACd;IACF;AACA,IAAA,OAAO,IAAI;AACb;;;;"}

package/lib/core/transform/validation/matchesNarrowPersistentInputs.mjs

@@ -46,7 +46,7 @@ function matchesNarrowPersistentInputs(
  */
 cached, 
 /** Delivered file spelling selecting this envelope's dependency closure. */
-file) {
+file, proof) {
     if (reportsMembershipChange(cached)) {
         return false;
     }
@@ -58,7 +58,7 @@ file) {
     if (hostValidation === undefined) {
         return undefined;
     }
-    if (!matchesUniversalHostInputs(cached, hostValidation)) {
+    if (!matchesUniversalHostInputs(cached, hostValidation, proof)) {
         return false;
     }
     const inputs = selectWatchInputs({

package/lib/core/transform/validation/matchesNarrowPersistentInputs.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"matchesNarrowPersistentInputs.mjs","sources":["../../../../src/core/transform/validation/matchesNarrowPersistentInputs.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;AAUA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCG;SACa,6BAA6B;AAC3C;;;AAGG;AACH,MAAkC;AAClC;AACA,IAAY,EAAA;AAEZ,IAAA,IAAI,uBAAuB,CAAC,MAAM,CAAC,EAAE;AACnC,QAAA,OAAO,KAAK;IACd;AACA,IAAA,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,EAAE;AACzC,QAAA,OAAO,SAAS;IAClB;AACA,IAAA,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC;AACxC,IAAA,MAAM,cAAc,GAAG,MAAM,CAAC,mBAAmB;AACjD,IAAA,IAAI,cAAc,KAAK,SAAS,EAAE;AAChC,QAAA,OAAO,SAAS;IAClB;IACA,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE;AACvD,QAAA,OAAO,KAAK;IACd;IACA,MAAM,MAAM,GAAG,iBAAiB,CAAC;QAC/B,IAAI;QACJ,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;AAC5C,KAAA,CAAC;AACF,IAAA,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE;;;;AAI1B,QAAA,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE;YACnD;QACF;QACA,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE;AAC7C,YAAA,OAAO,KAAK;QACd;IACF;AACA,IAAA,OAAO,IAAI;AACb;;;;"}
+{"version":3,"file":"matchesNarrowPersistentInputs.mjs","sources":["../../../../src/core/transform/validation/matchesNarrowPersistentInputs.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;AAWA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCG;SACa,6BAA6B;AAC3C;;;AAGG;AACH,MAAkC;AAClC;AACA,IAAY,EACZ,KAAuC,EAAA;AAEvC,IAAA,IAAI,uBAAuB,CAAC,MAAM,CAAC,EAAE;AACnC,QAAA,OAAO,KAAK;IACd;AACA,IAAA,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,EAAE;AACzC,QAAA,OAAO,SAAS;IAClB;AACA,IAAA,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC;AACxC,IAAA,MAAM,cAAc,GAAG,MAAM,CAAC,mBAAmB;AACjD,IAAA,IAAI,cAAc,KAAK,SAAS,EAAE;AAChC,QAAA,OAAO,SAAS;IAClB;IACA,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE;AAC9D,QAAA,OAAO,KAAK;IACd;IACA,MAAM,MAAM,GAAG,iBAAiB,CAAC;QAC/B,IAAI;QACJ,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;AAC5C,KAAA,CAAC;AACF,IAAA,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE;;;;AAI1B,QAAA,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE;YACnD;QACF;QACA,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE;AAC7C,YAAA,OAAO,KAAK;QACd;IACF;AACA,IAAA,OAAO,IAAI;AACb;;;;"}

package/lib/core/transform/validation/matchesUniversalHostInputTrees.d.cts

@@ -1,4 +1,5 @@
 import type { TtscCachedProjectTransform } from "../cache/TtscCachedProjectTransform.cjs";
+import type { TtscGenerationProof } from "./TtscGenerationProof.cjs";
 import type { TtscHostInputValidation } from "./TtscHostInputValidation.cjs";
 /**
  * Whether every plugin source directory of a generation still holds the state
@@ -31,7 +32,7 @@ import type { TtscHostInputValidation } from "./TtscHostInputValidation.cjs";
  * @evidence contracts/common.md#meaningful-documentation Native paragraphs distinguish source notification, environment authority and metadata-qualified digest reuse before param tags.
  * @evidence contracts/portability.md#os-neutral-implementation Supported plugin-source APIs and capability-qualified native trackers own source/toolchain observation without OS-wide watcher assumptions.
  * @evidence contracts/performance.md#bound-retention-and-release-resources One environment witness per current manifest tree is replaced in place; no delivery history is retained.
- * @evidence contracts/performance.md#efficient-algorithms Each tree first pays the shared environment reader's variable-key construction and native dependency qualification. Qualified silent sources avoid enumeration; other trees enumerate and sort the selected file population, inspect metadata and hash source bytes whenever population, metadata or clock evidence cannot qualify reuse. The synchronous owner can also refresh native environment authority after a mismatch.
+ * @evidence contracts/performance.md#efficient-algorithms An exact-generation synchronous transaction supplies one current batched environment qualification; otherwise each tree pays the shared environment reader's variable-key construction and native dependency qualification. Qualified silent sources avoid enumeration; other trees enumerate and sort the selected file population, inspect metadata and hash source bytes whenever population, metadata or clock evidence cannot qualify reuse. The synchronous owner can also refresh native environment authority after a mismatch.
  * @evidence contracts/performance.md#reuse-equivalent-work Generation environment witnesses and the owning digest cache share prior proof only while source and toolchain identities remain valid.
  */
-export declare function matchesUniversalHostInputTrees(cached: TtscCachedProjectTransform, validation: TtscHostInputValidation): boolean;
+export declare function matchesUniversalHostInputTrees(cached: TtscCachedProjectTransform, validation: TtscHostInputValidation, proof?: TtscGenerationProof.Transaction): boolean;

package/lib/core/transform/validation/matchesUniversalHostInputTrees.d.mts

@@ -1,4 +1,5 @@
 import type { TtscCachedProjectTransform } from "../cache/TtscCachedProjectTransform.mjs";
+import type { TtscGenerationProof } from "./TtscGenerationProof.mjs";
 import type { TtscHostInputValidation } from "./TtscHostInputValidation.mjs";
 /**
  * Whether every plugin source directory of a generation still holds the state
@@ -31,7 +32,7 @@ import type { TtscHostInputValidation } from "./TtscHostInputValidation.mjs";
  * @evidence contracts/common.md#meaningful-documentation Native paragraphs distinguish source notification, environment authority and metadata-qualified digest reuse before param tags.
  * @evidence contracts/portability.md#os-neutral-implementation Supported plugin-source APIs and capability-qualified native trackers own source/toolchain observation without OS-wide watcher assumptions.
  * @evidence contracts/performance.md#bound-retention-and-release-resources One environment witness per current manifest tree is replaced in place; no delivery history is retained.
- * @evidence contracts/performance.md#efficient-algorithms Each tree first pays the shared environment reader's variable-key construction and native dependency qualification. Qualified silent sources avoid enumeration; other trees enumerate and sort the selected file population, inspect metadata and hash source bytes whenever population, metadata or clock evidence cannot qualify reuse. The synchronous owner can also refresh native environment authority after a mismatch.
+ * @evidence contracts/performance.md#efficient-algorithms An exact-generation synchronous transaction supplies one current batched environment qualification; otherwise each tree pays the shared environment reader's variable-key construction and native dependency qualification. Qualified silent sources avoid enumeration; other trees enumerate and sort the selected file population, inspect metadata and hash source bytes whenever population, metadata or clock evidence cannot qualify reuse. The synchronous owner can also refresh native environment authority after a mismatch.
  * @evidence contracts/performance.md#reuse-equivalent-work Generation environment witnesses and the owning digest cache share prior proof only while source and toolchain identities remain valid.
  */
-export declare function matchesUniversalHostInputTrees(cached: TtscCachedProjectTransform, validation: TtscHostInputValidation): boolean;
+export declare function matchesUniversalHostInputTrees(cached: TtscCachedProjectTransform, validation: TtscHostInputValidation, proof?: TtscGenerationProof.Transaction): boolean;

package/lib/core/transform/validation/matchesUniversalHostInputTrees.d.ts

@@ -1,4 +1,5 @@
 import type { TtscCachedProjectTransform } from "../cache/TtscCachedProjectTransform";
+import type { TtscGenerationProof } from "./TtscGenerationProof";
 import type { TtscHostInputValidation } from "./TtscHostInputValidation";
 /**
  * Whether every plugin source directory of a generation still holds the state
@@ -31,7 +32,7 @@ import type { TtscHostInputValidation } from "./TtscHostInputValidation";
  * @evidence contracts/common.md#meaningful-documentation Native paragraphs distinguish source notification, environment authority and metadata-qualified digest reuse before param tags.
  * @evidence contracts/portability.md#os-neutral-implementation Supported plugin-source APIs and capability-qualified native trackers own source/toolchain observation without OS-wide watcher assumptions.
  * @evidence contracts/performance.md#bound-retention-and-release-resources One environment witness per current manifest tree is replaced in place; no delivery history is retained.
- * @evidence contracts/performance.md#efficient-algorithms Each tree first pays the shared environment reader's variable-key construction and native dependency qualification. Qualified silent sources avoid enumeration; other trees enumerate and sort the selected file population, inspect metadata and hash source bytes whenever population, metadata or clock evidence cannot qualify reuse. The synchronous owner can also refresh native environment authority after a mismatch.
+ * @evidence contracts/performance.md#efficient-algorithms An exact-generation synchronous transaction supplies one current batched environment qualification; otherwise each tree pays the shared environment reader's variable-key construction and native dependency qualification. Qualified silent sources avoid enumeration; other trees enumerate and sort the selected file population, inspect metadata and hash source bytes whenever population, metadata or clock evidence cannot qualify reuse. The synchronous owner can also refresh native environment authority after a mismatch.
  * @evidence contracts/performance.md#reuse-equivalent-work Generation environment witnesses and the owning digest cache share prior proof only while source and toolchain identities remain valid.
  */
-export declare function matchesUniversalHostInputTrees(cached: TtscCachedProjectTransform, validation: TtscHostInputValidation): boolean;
+export declare function matchesUniversalHostInputTrees(cached: TtscCachedProjectTransform, validation: TtscHostInputValidation, proof?: TtscGenerationProof.Transaction): boolean;

package/lib/core/transform/validation/matchesUniversalHostInputTrees.js

@@ -37,16 +37,18 @@ var trackerProvesInputUnchanged = require('./trackerProvesInputUnchanged.js');
  * @evidence contracts/common.md#meaningful-documentation Native paragraphs distinguish source notification, environment authority and metadata-qualified digest reuse before param tags.
  * @evidence contracts/portability.md#os-neutral-implementation Supported plugin-source APIs and capability-qualified native trackers own source/toolchain observation without OS-wide watcher assumptions.
  * @evidence contracts/performance.md#bound-retention-and-release-resources One environment witness per current manifest tree is replaced in place; no delivery history is retained.
- * @evidence contracts/performance.md#efficient-algorithms Each tree first pays the shared environment reader's variable-key construction and native dependency qualification. Qualified silent sources avoid enumeration; other trees enumerate and sort the selected file population, inspect metadata and hash source bytes whenever population, metadata or clock evidence cannot qualify reuse. The synchronous owner can also refresh native environment authority after a mismatch.
+ * @evidence contracts/performance.md#efficient-algorithms An exact-generation synchronous transaction supplies one current batched environment qualification; otherwise each tree pays the shared environment reader's variable-key construction and native dependency qualification. Qualified silent sources avoid enumeration; other trees enumerate and sort the selected file population, inspect metadata and hash source bytes whenever population, metadata or clock evidence cannot qualify reuse. The synchronous owner can also refresh native environment authority after a mismatch.
  * @evidence contracts/performance.md#reuse-equivalent-work Generation environment witnesses and the owning digest cache share prior proof only while source and toolchain identities remain valid.
  */
-function matchesUniversalHostInputTrees(cached, validation) {
+function matchesUniversalHostInputTrees(cached, validation, proof) {
     for (const [directory, digest] of validation.trees) {
         // Read before any proof, so the environment recorded below is one the
         // proof saw or older, never a newer one it did not prove.
         const prepared = preparePluginBuildEnvironments.usesPreparedPluginBuildEnvironments(cached.result);
         const environment = prepared
-            ? pluginSource.PluginBuildEnvironmentReadings.cached(directory)
+            ? proof?.cached === cached && proof.environments !== undefined
+                ? proof.environments.get(directory)
+                : pluginSource.PluginBuildEnvironmentReadings.cached(directory)
             : pluginSource.processPluginBuildEnvironment(directory);
         if (environment === undefined)
             return false;

package/lib/core/transform/validation/matchesUniversalHostInputTrees.js.map

@@ -1 +1 @@
-{"version":3,"file":"matchesUniversalHostInputTrees.js","sources":["../../../../src/core/transform/validation/matchesUniversalHostInputTrees.ts"],"sourcesContent":[null],"names":["usesPreparedPluginBuildEnvironments","PluginBuildEnvironmentReadings","processPluginBuildEnvironment","trackerProvesInputUnchanged","pluginSourceHolds","resultFilesystem"],"mappings":";;;;;;;;AAYA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCG;AACG,SAAU,8BAA8B,CAC5C,MAAkC,EAClC,UAAmC,EAAA;IAEnC,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,UAAU,CAAC,KAAK,EAAE;;;QAGlD,MAAM,QAAQ,GAAGA,kEAAmC,CAAC,MAAM,CAAC,MAAM,CAAC;QACnE,MAAM,WAAW,GAAG;AAClB,cAAEC,2CAA8B,CAAC,MAAM,CAAC,SAAS;AACjD,cAAEC,0CAA6B,CAAC,SAAS,CAAC;QAC5C,IAAI,WAAW,KAAK,SAAS;AAAE,YAAA,OAAO,KAAK;AAC3C,QAAA,IACEC,uDAA2B,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC;YACvE,UAAU,CAAC,gBAAgB,EAAE,GAAG,CAAC,SAAS,CAAC,KAAK,WAAW;YAE3D;QACF,IACE,CAACC,mCAAiB,CAChB,SAAS,EACT,MAAM,EACNC,iCAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,EAC/B,QAAQ,GAAG,EAAE,WAAW,EAAE,GAAG,SAAS,CACvC;AAED,YAAA,OAAO,KAAK;AACd,QAAA,CAAC,UAAU,CAAC,gBAAgB,KAAK,IAAI,GAAG,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC;IACzE;AACA,IAAA,OAAO,IAAI;AACb;;;;"}
+{"version":3,"file":"matchesUniversalHostInputTrees.js","sources":["../../../../src/core/transform/validation/matchesUniversalHostInputTrees.ts"],"sourcesContent":[null],"names":["usesPreparedPluginBuildEnvironments","PluginBuildEnvironmentReadings","processPluginBuildEnvironment","trackerProvesInputUnchanged","pluginSourceHolds","resultFilesystem"],"mappings":";;;;;;;;AAaA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCG;SACa,8BAA8B,CAC5C,MAAkC,EAClC,UAAmC,EACnC,KAAuC,EAAA;IAEvC,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,UAAU,CAAC,KAAK,EAAE;;;QAGlD,MAAM,QAAQ,GAAGA,kEAAmC,CAAC,MAAM,CAAC,MAAM,CAAC;QACnE,MAAM,WAAW,GAAG;cAChB,KAAK,EAAE,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK;kBACjD,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS;AAClC,kBAAEC,2CAA8B,CAAC,MAAM,CAAC,SAAS;AACnD,cAAEC,0CAA6B,CAAC,SAAS,CAAC;QAC5C,IAAI,WAAW,KAAK,SAAS;AAAE,YAAA,OAAO,KAAK;AAC3C,QAAA,IACEC,uDAA2B,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC;YACvE,UAAU,CAAC,gBAAgB,EAAE,GAAG,CAAC,SAAS,CAAC,KAAK,WAAW;YAE3D;QACF,IACE,CAACC,mCAAiB,CAChB,SAAS,EACT,MAAM,EACNC,iCAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,EAC/B,QAAQ,GAAG,EAAE,WAAW,EAAE,GAAG,SAAS,CACvC;AAED,YAAA,OAAO,KAAK;AACd,QAAA,CAAC,UAAU,CAAC,gBAAgB,KAAK,IAAI,GAAG,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC;IACzE;AACA,IAAA,OAAO,IAAI;AACb;;;;"}

package/lib/core/transform/validation/matchesUniversalHostInputTrees.mjs

@@ -35,16 +35,18 @@ import { trackerProvesInputUnchanged } from './trackerProvesInputUnchanged.mjs';
  * @evidence contracts/common.md#meaningful-documentation Native paragraphs distinguish source notification, environment authority and metadata-qualified digest reuse before param tags.
  * @evidence contracts/portability.md#os-neutral-implementation Supported plugin-source APIs and capability-qualified native trackers own source/toolchain observation without OS-wide watcher assumptions.
  * @evidence contracts/performance.md#bound-retention-and-release-resources One environment witness per current manifest tree is replaced in place; no delivery history is retained.
- * @evidence contracts/performance.md#efficient-algorithms Each tree first pays the shared environment reader's variable-key construction and native dependency qualification. Qualified silent sources avoid enumeration; other trees enumerate and sort the selected file population, inspect metadata and hash source bytes whenever population, metadata or clock evidence cannot qualify reuse. The synchronous owner can also refresh native environment authority after a mismatch.
+ * @evidence contracts/performance.md#efficient-algorithms An exact-generation synchronous transaction supplies one current batched environment qualification; otherwise each tree pays the shared environment reader's variable-key construction and native dependency qualification. Qualified silent sources avoid enumeration; other trees enumerate and sort the selected file population, inspect metadata and hash source bytes whenever population, metadata or clock evidence cannot qualify reuse. The synchronous owner can also refresh native environment authority after a mismatch.
  * @evidence contracts/performance.md#reuse-equivalent-work Generation environment witnesses and the owning digest cache share prior proof only while source and toolchain identities remain valid.
  */
-function matchesUniversalHostInputTrees(cached, validation) {
+function matchesUniversalHostInputTrees(cached, validation, proof) {
     for (const [directory, digest] of validation.trees) {
         // Read before any proof, so the environment recorded below is one the
         // proof saw or older, never a newer one it did not prove.
         const prepared = usesPreparedPluginBuildEnvironments(cached.result);
         const environment = prepared
-            ? PluginBuildEnvironmentReadings.cached(directory)
+            ? proof?.cached === cached && proof.environments !== undefined
+                ? proof.environments.get(directory)
+                : PluginBuildEnvironmentReadings.cached(directory)
             : processPluginBuildEnvironment(directory);
         if (environment === undefined)
             return false;

package/lib/core/transform/validation/matchesUniversalHostInputTrees.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"matchesUniversalHostInputTrees.mjs","sources":["../../../../src/core/transform/validation/matchesUniversalHostInputTrees.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;AAYA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCG;AACG,SAAU,8BAA8B,CAC5C,MAAkC,EAClC,UAAmC,EAAA;IAEnC,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,UAAU,CAAC,KAAK,EAAE;;;QAGlD,MAAM,QAAQ,GAAG,mCAAmC,CAAC,MAAM,CAAC,MAAM,CAAC;QACnE,MAAM,WAAW,GAAG;AAClB,cAAE,8BAA8B,CAAC,MAAM,CAAC,SAAS;AACjD,cAAE,6BAA6B,CAAC,SAAS,CAAC;QAC5C,IAAI,WAAW,KAAK,SAAS;AAAE,YAAA,OAAO,KAAK;AAC3C,QAAA,IACE,2BAA2B,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC;YACvE,UAAU,CAAC,gBAAgB,EAAE,GAAG,CAAC,SAAS,CAAC,KAAK,WAAW;YAE3D;QACF,IACE,CAAC,iBAAiB,CAChB,SAAS,EACT,MAAM,EACN,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,EAC/B,QAAQ,GAAG,EAAE,WAAW,EAAE,GAAG,SAAS,CACvC;AAED,YAAA,OAAO,KAAK;AACd,QAAA,CAAC,UAAU,CAAC,gBAAgB,KAAK,IAAI,GAAG,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC;IACzE;AACA,IAAA,OAAO,IAAI;AACb;;;;"}
+{"version":3,"file":"matchesUniversalHostInputTrees.mjs","sources":["../../../../src/core/transform/validation/matchesUniversalHostInputTrees.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;AAaA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCG;SACa,8BAA8B,CAC5C,MAAkC,EAClC,UAAmC,EACnC,KAAuC,EAAA;IAEvC,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,UAAU,CAAC,KAAK,EAAE;;;QAGlD,MAAM,QAAQ,GAAG,mCAAmC,CAAC,MAAM,CAAC,MAAM,CAAC;QACnE,MAAM,WAAW,GAAG;cAChB,KAAK,EAAE,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK;kBACjD,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS;AAClC,kBAAE,8BAA8B,CAAC,MAAM,CAAC,SAAS;AACnD,cAAE,6BAA6B,CAAC,SAAS,CAAC;QAC5C,IAAI,WAAW,KAAK,SAAS;AAAE,YAAA,OAAO,KAAK;AAC3C,QAAA,IACE,2BAA2B,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC;YACvE,UAAU,CAAC,gBAAgB,EAAE,GAAG,CAAC,SAAS,CAAC,KAAK,WAAW;YAE3D;QACF,IACE,CAAC,iBAAiB,CAChB,SAAS,EACT,MAAM,EACN,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,EAC/B,QAAQ,GAAG,EAAE,WAAW,EAAE,GAAG,SAAS,CACvC;AAED,YAAA,OAAO,KAAK;AACd,QAAA,CAAC,UAAU,CAAC,gBAAgB,KAAK,IAAI,GAAG,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC;IACzE;AACA,IAAA,OAAO,IAAI;AACb;;;;"}

package/lib/core/transform/validation/matchesUniversalHostInputs.d.cts

@@ -1,4 +1,5 @@
 import type { TtscCachedProjectTransform } from "../cache/TtscCachedProjectTransform.cjs";
+import type { TtscGenerationProof } from "./TtscGenerationProof.cjs";
 import type { TtscHostInputValidation } from "./TtscHostInputValidation.cjs";
 /**
  * Validate universal descriptor/config inputs. Versioned native config
@@ -23,6 +24,6 @@ import type { TtscHostInputValidation } from "./TtscHostInputValidation.cjs";
  * @evidence contracts/portability.md#os-neutral-implementation Filesystem-aware validators use actual tracker delivery capability and exact lexical coverage rather than platform-wide assumptions.
  * @evidenceExclude contracts/performance.md#bound-retention-and-release-resources The coordinator borrows generation manifests and trackers without retaining a result or acquiring a handle.
  * @evidence contracts/performance.md#efficient-algorithms Every admission first replays all generation-owned typed config predicates; this mandatory cost includes native queries, file bytes or directory membership independently of watcher/epoch qualification.  The coverage scan stops at the first unproved input. Each coverage query checks overlapping unproven scopes and sampled events with native path comparisons; fallback adds unresolved bytes, native candidate probes and plugin tree enumeration. Mandatory environment qualification pays its owning dependency and environment-key costs on either route.
- * @evidence contracts/performance.md#reuse-equivalent-work Typed config predicate replay is not cached by this coordinator and remains mandatory even when the following existing shortcut shares other proof.  Shared manifests and qualified silent sources avoid repeated content reads only while the owning tree validator also proves unchanged build environment.
+ * @evidence contracts/performance.md#reuse-equivalent-work Typed config predicates remain mandatory on every delivery. An exact-generation synchronous transaction may share their current replay across nested validators, but no pass or notification shortcut authorizes a later delivery to skip them.  Shared manifests and qualified silent sources avoid repeated content reads only while the owning tree validator also proves unchanged build environment.
  */
-export declare function matchesUniversalHostInputs(cached: TtscCachedProjectTransform, validation: TtscHostInputValidation): boolean;
+export declare function matchesUniversalHostInputs(cached: TtscCachedProjectTransform, validation: TtscHostInputValidation, proof?: TtscGenerationProof.Transaction): boolean;

package/lib/core/transform/validation/matchesUniversalHostInputs.d.mts

@@ -1,4 +1,5 @@
 import type { TtscCachedProjectTransform } from "../cache/TtscCachedProjectTransform.mjs";
+import type { TtscGenerationProof } from "./TtscGenerationProof.mjs";
 import type { TtscHostInputValidation } from "./TtscHostInputValidation.mjs";
 /**
  * Validate universal descriptor/config inputs. Versioned native config
@@ -23,6 +24,6 @@ import type { TtscHostInputValidation } from "./TtscHostInputValidation.mjs";
  * @evidence contracts/portability.md#os-neutral-implementation Filesystem-aware validators use actual tracker delivery capability and exact lexical coverage rather than platform-wide assumptions.
  * @evidenceExclude contracts/performance.md#bound-retention-and-release-resources The coordinator borrows generation manifests and trackers without retaining a result or acquiring a handle.
  * @evidence contracts/performance.md#efficient-algorithms Every admission first replays all generation-owned typed config predicates; this mandatory cost includes native queries, file bytes or directory membership independently of watcher/epoch qualification.  The coverage scan stops at the first unproved input. Each coverage query checks overlapping unproven scopes and sampled events with native path comparisons; fallback adds unresolved bytes, native candidate probes and plugin tree enumeration. Mandatory environment qualification pays its owning dependency and environment-key costs on either route.
- * @evidence contracts/performance.md#reuse-equivalent-work Typed config predicate replay is not cached by this coordinator and remains mandatory even when the following existing shortcut shares other proof.  Shared manifests and qualified silent sources avoid repeated content reads only while the owning tree validator also proves unchanged build environment.
+ * @evidence contracts/performance.md#reuse-equivalent-work Typed config predicates remain mandatory on every delivery. An exact-generation synchronous transaction may share their current replay across nested validators, but no pass or notification shortcut authorizes a later delivery to skip them.  Shared manifests and qualified silent sources avoid repeated content reads only while the owning tree validator also proves unchanged build environment.
  */
-export declare function matchesUniversalHostInputs(cached: TtscCachedProjectTransform, validation: TtscHostInputValidation): boolean;
+export declare function matchesUniversalHostInputs(cached: TtscCachedProjectTransform, validation: TtscHostInputValidation, proof?: TtscGenerationProof.Transaction): boolean;

package/lib/core/transform/validation/matchesUniversalHostInputs.d.ts

@@ -1,4 +1,5 @@
 import type { TtscCachedProjectTransform } from "../cache/TtscCachedProjectTransform";
+import type { TtscGenerationProof } from "./TtscGenerationProof";
 import type { TtscHostInputValidation } from "./TtscHostInputValidation";
 /**
  * Validate universal descriptor/config inputs. Versioned native config
@@ -23,6 +24,6 @@ import type { TtscHostInputValidation } from "./TtscHostInputValidation";
  * @evidence contracts/portability.md#os-neutral-implementation Filesystem-aware validators use actual tracker delivery capability and exact lexical coverage rather than platform-wide assumptions.
  * @evidenceExclude contracts/performance.md#bound-retention-and-release-resources The coordinator borrows generation manifests and trackers without retaining a result or acquiring a handle.
  * @evidence contracts/performance.md#efficient-algorithms Every admission first replays all generation-owned typed config predicates; this mandatory cost includes native queries, file bytes or directory membership independently of watcher/epoch qualification.  The coverage scan stops at the first unproved input. Each coverage query checks overlapping unproven scopes and sampled events with native path comparisons; fallback adds unresolved bytes, native candidate probes and plugin tree enumeration. Mandatory environment qualification pays its owning dependency and environment-key costs on either route.
- * @evidence contracts/performance.md#reuse-equivalent-work Typed config predicate replay is not cached by this coordinator and remains mandatory even when the following existing shortcut shares other proof.  Shared manifests and qualified silent sources avoid repeated content reads only while the owning tree validator also proves unchanged build environment.
+ * @evidence contracts/performance.md#reuse-equivalent-work Typed config predicates remain mandatory on every delivery. An exact-generation synchronous transaction may share their current replay across nested validators, but no pass or notification shortcut authorizes a later delivery to skip them.  Shared manifests and qualified silent sources avoid repeated content reads only while the owning tree validator also proves unchanged build environment.
  */
-export declare function matchesUniversalHostInputs(cached: TtscCachedProjectTransform, validation: TtscHostInputValidation): boolean;
+export declare function matchesUniversalHostInputs(cached: TtscCachedProjectTransform, validation: TtscHostInputValidation, proof?: TtscGenerationProof.Transaction): boolean;