@ttsc/unplugin 0.31.0 → 0.31.1

package/lib/core/transform/generation/transformProject.js

@@ -61,18 +61,20 @@ var selectTransformAttemptDisposition = require('./selectTransformAttemptDisposi
  * (samchon/ttsc#1545).
  *
  * A local success whose only lost premise is explicitly unavailable host
- * observation may qualify for its initiating delivery. The delivery coordinator
- * additionally requires an explicitly nonwatching host with cache-withdrawal
- * capability. It remains incomplete and cannot authorize resident, shared or
- * persistent caching. Actual changes, conflicts and unexplained missing proof
- * retain the stabilization gate.
+ * observation may qualify for local delivery. TtscGenerationProof additionally
+ * requires an explicitly nonwatching host and actual cache withdrawal for every
+ * delivery. It alone can share recorded first-module baselines inside the same
+ * explicit pass. This incomplete result cannot authorize ordinary resident
+ * reuse, a persistent project record or shared publication; repeated modules
+ * and later passes recapture. Actual changes, conflicts and unexplained missing
+ * proof retain the stabilization gate.
  *
  * Enabled private tracing records each computed disposition before its state is
  * applied. It does not supply proof when capture throws or tracing fails.
  *
- * @evidence contracts/common.md#principled-implementation Each capture establishes config coherence and reusable success proof or a current diagnostic verdict; a local stable success with only explicit unavailable host observations instead transfers one fresh delivery without reuse authority, while mixed mutation, missing or conflicting proof retains retry admission.
+ * @evidence contracts/common.md#principled-implementation Each capture establishes config coherence and reusable success proof or a current diagnostic verdict; a local stable success with only explicit unavailable host observations instead transfers an incomplete local result whose bounded first deliveries require the common nonwatching pass owner, while mixed mutation, missing or conflicting proof retains retry admission.
  * @evidence contracts/common.md#clear-and-simple-design The pure attempt policy selects acceptance and retry budgets; this loop owns mutable learned facts and resource handoff, capture owns proof construction, and the shared error builder owns terminal rendering and final disposal.
- * @evidence contracts/common.md#prohibited-implementation-shortcuts Retrying follows learned dependencies/case policy or refuted publication payload rather than an endless workaround chain; only lossless producer-authorized observation unavailability can permit a local fresh answer, and it never becomes a reusable success or excuses actual mutation.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts Retrying follows learned dependencies/case policy or refuted publication payload rather than an endless workaround chain; only lossless producer-authorized observation unavailability can permit a local fresh answer, and it never becomes complete or persistent/shared success proof or excuses actual mutation.
  * @evidence contracts/common.md#meaningful-documentation Native paragraphs explain movement versus absolute budgets, failed-compile diagnostics and learned facts; separated props state delivery, tracking and inherited witness meaning.
  * @evidence contracts/portability.md#os-neutral-implementation Each capture delegates native filesystem and compiler behavior to injected host boundaries; reported compiler case policy is carried between attempts rather than guessed from OS names.
  * @evidence contracts/performance.md#efficient-algorithms At most four captures bound retry count, not each capture's project/config/input bytes, native walks, compiler/plugin work, observer setup or session waiting time. Each rejected attempt copies the cumulative witnessed Set and scans its external dependencies into that copy; the next capture receives a separate array of its names; supplied spellings contribute hashing/text cost. Terminal rendering visits retained attempts/witnesses, and disposal delegates observer/probe cleanup rather than making those effects constant work. Enabled tracing serializes disposition scalars and path text through the existing bounded append sink; disabled tracing skips that payload construction.
@@ -128,10 +130,13 @@ async function transformProject(props) {
             },
         });
         if (disposition.freshDeliveryOnly) {
-            // Neither incomplete diagnostic observations nor a permitted local fresh
-            // success authorizes this generation's reuse beyond its current delivery.
+            // Missing observations never authorize persistent or shared reuse. A
+            // coherent fresh-only local success may separately earn bounded first
+            // deliveries through the common nonwatching pass owner (#1713).
             cached.freshDeliveryOnly = true;
         }
+        if (disposition.kind === "fresh-only")
+            cached.passDeliveryOnly = true;
         if (disposition.kind === "accepted" || disposition.kind === "fresh-only") {
             return cached;
         }

package/lib/core/transform/generation/transformProject.js.map

@@ -1 +1 @@
-{"version":3,"file":"transformProject.js","sources":["../../../../src/core/transform/generation/transformProject.ts"],"sourcesContent":[null],"names":["traceInvocation","captureTransformGeneration","selectTransformAttemptDisposition","TRANSFORM_GENERATION_FAILURES","TRANSFORM_ADOPTED_RESULTS","carryTransformAttemptInputs","TRANSFORM_FAILED_GENERATION_VALIDATIONS","disposeCachedTransform","createUnstableGenerationError"],"mappings":";;;;;;;;;;;;;AAgBA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmEG;AACI,eAAe,gBAAgB,CAAC,KAkEtC,EAAA;AACC,IAAA,MAAM,YAAY,GAAGA,+BAAe,EAAE;IACtC,MAAM,QAAQ,GAAkC,EAAE;AAClD,IAAA,IAAI,QAA4B;IAChC,IAAI,KAAK,GAAG,CAAC;IACb,IAAI,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC;AACpD,IAAA,IAAI,yBAAyB,GAAG,KAAK,CAAC,yBAAyB;IAC/D,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE;AACpC,QAAA,MAAM,MAAM,GAAG,MAAMC,qDAA0B,CAAC;AAC9C,YAAA,GAAG,KAAK;YACR,QAAQ;YACR,yBAAyB;AACzB,YAAA,qBAAqB,EAAE,CAAC,GAAG,SAAS,CAAC;AACtC,SAAA,CAAC;QACF,MAAM,WAAW,GAAGC,mEAAiC,CAAC;AACpD,YAAA,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YAC9B,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;YACvD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;AACzC,YAAA,oBAAoB,EAClB,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK;AACrB,kBAAE,MAAM,CAAC,MAAM,CAAC;AAChB,kBAAE,SAAS;AACf,YAAA,0BAA0B,EACxB,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK;AACrB,kBAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;AAC1D,kBAAE,CAAC;YACP,QAAQ,EAAEC,2DAA6B,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YAC1D,OAAO,EAAEC,mDAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YACrD,OAAO;YACP,KAAK;YACL,QAAQ;AACT,SAAA,CAAC;QACF,YAAY,GAAG,4BAA4B,EAAE;YAC3C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,MAAM,CAAC,WAAW;AACvB,YAAA,IAAI,EAAE;gBACJ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,OAAO;AACP,gBAAA,WAAW,EAAE,KAAK;gBAClB,cAAc,EAAE,QAAQ,IAAI,IAAI;gBAChC,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;AAChD,gBAAA,UAAU,EAAE,OAAO,IAAI,WAAW,GAAG,WAAW,CAAC,KAAK,GAAG,IAAI;AAC7D,gBAAA,aAAa,EACX,UAAU,IAAI,WAAW,IAAI,WAAW,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI;AACpE,aAAA;AACF,SAAA,CAAC;AACF,QAAA,IAAI,WAAW,CAAC,iBAAiB,EAAE;;;AAGjC,YAAA,MAAM,CAAC,iBAAiB,GAAG,IAAI;QACjC;AACA,QAAA,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY,EAAE;AACxE,YAAA,OAAO,MAAM;QACf;AACA,QAAA,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;QACnC,MAAM,UAAU,GAAGC,uDAA2B,CAC5C,SAAS,EACT,yBAAyB,EACzB,MAAM,CACP;AACD,QAAA,SAAS,GAAG,UAAU,CAAC,SAAS;AAChC,QAAA,yBAAyB,GAAG,UAAU,CAAC,yBAAyB;;;;;;;;AAQhE,QAAA,QAAQ,GAAG,WAAW,CAAC,QAAQ;AAC/B,QAAA,KAAK,GAAG,WAAW,CAAC,KAAK;;;AAGzB,QAAA,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY,EAAE;AACrC,YAAA,OAAO,MAAM;QACf;AACA,QAAA,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU,EAAE;YACnC,MAAM,UAAU,GAAGC,+EAAuC,CAAC,GAAG,CAC5D,MAAM,CAAC,MAAM,CACd;AACD,YAAA,IAAI,UAAU,KAAK,SAAS,EAAE;gBAC5BC,6CAAsB,CAAC,MAAM,CAAC;AAC9B,gBAAA,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE;YACH;AACA,YAAA,MAAMC,2DAA6B,CACjC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EACjD,QAAQ,EACR,UAAU,CACX;QACH;QACAD,6CAAsB,CAAC,MAAM,CAAC;IAChC;AACF;;;;"}
+{"version":3,"file":"transformProject.js","sources":["../../../../src/core/transform/generation/transformProject.ts"],"sourcesContent":[null],"names":["traceInvocation","captureTransformGeneration","selectTransformAttemptDisposition","TRANSFORM_GENERATION_FAILURES","TRANSFORM_ADOPTED_RESULTS","carryTransformAttemptInputs","TRANSFORM_FAILED_GENERATION_VALIDATIONS","disposeCachedTransform","createUnstableGenerationError"],"mappings":";;;;;;;;;;;;;AAgBA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqEG;AACI,eAAe,gBAAgB,CAAC,KAkEtC,EAAA;AACC,IAAA,MAAM,YAAY,GAAGA,+BAAe,EAAE;IACtC,MAAM,QAAQ,GAAkC,EAAE;AAClD,IAAA,IAAI,QAA4B;IAChC,IAAI,KAAK,GAAG,CAAC;IACb,IAAI,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC;AACpD,IAAA,IAAI,yBAAyB,GAAG,KAAK,CAAC,yBAAyB;IAC/D,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE;AACpC,QAAA,MAAM,MAAM,GAAG,MAAMC,qDAA0B,CAAC;AAC9C,YAAA,GAAG,KAAK;YACR,QAAQ;YACR,yBAAyB;AACzB,YAAA,qBAAqB,EAAE,CAAC,GAAG,SAAS,CAAC;AACtC,SAAA,CAAC;QACF,MAAM,WAAW,GAAGC,mEAAiC,CAAC;AACpD,YAAA,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YAC9B,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;YACvD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;AACzC,YAAA,oBAAoB,EAClB,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK;AACrB,kBAAE,MAAM,CAAC,MAAM,CAAC;AAChB,kBAAE,SAAS;AACf,YAAA,0BAA0B,EACxB,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK;AACrB,kBAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;AAC1D,kBAAE,CAAC;YACP,QAAQ,EAAEC,2DAA6B,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YAC1D,OAAO,EAAEC,mDAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YACrD,OAAO;YACP,KAAK;YACL,QAAQ;AACT,SAAA,CAAC;QACF,YAAY,GAAG,4BAA4B,EAAE;YAC3C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,MAAM,CAAC,WAAW;AACvB,YAAA,IAAI,EAAE;gBACJ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,OAAO;AACP,gBAAA,WAAW,EAAE,KAAK;gBAClB,cAAc,EAAE,QAAQ,IAAI,IAAI;gBAChC,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;AAChD,gBAAA,UAAU,EAAE,OAAO,IAAI,WAAW,GAAG,WAAW,CAAC,KAAK,GAAG,IAAI;AAC7D,gBAAA,aAAa,EACX,UAAU,IAAI,WAAW,IAAI,WAAW,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI;AACpE,aAAA;AACF,SAAA,CAAC;AACF,QAAA,IAAI,WAAW,CAAC,iBAAiB,EAAE;;;;AAIjC,YAAA,MAAM,CAAC,iBAAiB,GAAG,IAAI;QACjC;AACA,QAAA,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY;AAAE,YAAA,MAAM,CAAC,gBAAgB,GAAG,IAAI;AACrE,QAAA,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY,EAAE;AACxE,YAAA,OAAO,MAAM;QACf;AACA,QAAA,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;QACnC,MAAM,UAAU,GAAGC,uDAA2B,CAC5C,SAAS,EACT,yBAAyB,EACzB,MAAM,CACP;AACD,QAAA,SAAS,GAAG,UAAU,CAAC,SAAS;AAChC,QAAA,yBAAyB,GAAG,UAAU,CAAC,yBAAyB;;;;;;;;AAQhE,QAAA,QAAQ,GAAG,WAAW,CAAC,QAAQ;AAC/B,QAAA,KAAK,GAAG,WAAW,CAAC,KAAK;;;AAGzB,QAAA,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY,EAAE;AACrC,YAAA,OAAO,MAAM;QACf;AACA,QAAA,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU,EAAE;YACnC,MAAM,UAAU,GAAGC,+EAAuC,CAAC,GAAG,CAC5D,MAAM,CAAC,MAAM,CACd;AACD,YAAA,IAAI,UAAU,KAAK,SAAS,EAAE;gBAC5BC,6CAAsB,CAAC,MAAM,CAAC;AAC9B,gBAAA,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE;YACH;AACA,YAAA,MAAMC,2DAA6B,CACjC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EACjD,QAAQ,EACR,UAAU,CACX;QACH;QACAD,6CAAsB,CAAC,MAAM,CAAC;IAChC;AACF;;;;"}

package/lib/core/transform/generation/transformProject.mjs

@@ -59,18 +59,20 @@ import { selectTransformAttemptDisposition } from './selectTransformAttemptDispo
  * (samchon/ttsc#1545).
  *
  * A local success whose only lost premise is explicitly unavailable host
- * observation may qualify for its initiating delivery. The delivery coordinator
- * additionally requires an explicitly nonwatching host with cache-withdrawal
- * capability. It remains incomplete and cannot authorize resident, shared or
- * persistent caching. Actual changes, conflicts and unexplained missing proof
- * retain the stabilization gate.
+ * observation may qualify for local delivery. TtscGenerationProof additionally
+ * requires an explicitly nonwatching host and actual cache withdrawal for every
+ * delivery. It alone can share recorded first-module baselines inside the same
+ * explicit pass. This incomplete result cannot authorize ordinary resident
+ * reuse, a persistent project record or shared publication; repeated modules
+ * and later passes recapture. Actual changes, conflicts and unexplained missing
+ * proof retain the stabilization gate.
  *
  * Enabled private tracing records each computed disposition before its state is
  * applied. It does not supply proof when capture throws or tracing fails.
  *
- * @evidence contracts/common.md#principled-implementation Each capture establishes config coherence and reusable success proof or a current diagnostic verdict; a local stable success with only explicit unavailable host observations instead transfers one fresh delivery without reuse authority, while mixed mutation, missing or conflicting proof retains retry admission.
+ * @evidence contracts/common.md#principled-implementation Each capture establishes config coherence and reusable success proof or a current diagnostic verdict; a local stable success with only explicit unavailable host observations instead transfers an incomplete local result whose bounded first deliveries require the common nonwatching pass owner, while mixed mutation, missing or conflicting proof retains retry admission.
  * @evidence contracts/common.md#clear-and-simple-design The pure attempt policy selects acceptance and retry budgets; this loop owns mutable learned facts and resource handoff, capture owns proof construction, and the shared error builder owns terminal rendering and final disposal.
- * @evidence contracts/common.md#prohibited-implementation-shortcuts Retrying follows learned dependencies/case policy or refuted publication payload rather than an endless workaround chain; only lossless producer-authorized observation unavailability can permit a local fresh answer, and it never becomes a reusable success or excuses actual mutation.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts Retrying follows learned dependencies/case policy or refuted publication payload rather than an endless workaround chain; only lossless producer-authorized observation unavailability can permit a local fresh answer, and it never becomes complete or persistent/shared success proof or excuses actual mutation.
  * @evidence contracts/common.md#meaningful-documentation Native paragraphs explain movement versus absolute budgets, failed-compile diagnostics and learned facts; separated props state delivery, tracking and inherited witness meaning.
  * @evidence contracts/portability.md#os-neutral-implementation Each capture delegates native filesystem and compiler behavior to injected host boundaries; reported compiler case policy is carried between attempts rather than guessed from OS names.
  * @evidence contracts/performance.md#efficient-algorithms At most four captures bound retry count, not each capture's project/config/input bytes, native walks, compiler/plugin work, observer setup or session waiting time. Each rejected attempt copies the cumulative witnessed Set and scans its external dependencies into that copy; the next capture receives a separate array of its names; supplied spellings contribute hashing/text cost. Terminal rendering visits retained attempts/witnesses, and disposal delegates observer/probe cleanup rather than making those effects constant work. Enabled tracing serializes disposition scalars and path text through the existing bounded append sink; disabled tracing skips that payload construction.
@@ -126,10 +128,13 @@ async function transformProject(props) {
             },
         });
         if (disposition.freshDeliveryOnly) {
-            // Neither incomplete diagnostic observations nor a permitted local fresh
-            // success authorizes this generation's reuse beyond its current delivery.
+            // Missing observations never authorize persistent or shared reuse. A
+            // coherent fresh-only local success may separately earn bounded first
+            // deliveries through the common nonwatching pass owner (#1713).
             cached.freshDeliveryOnly = true;
         }
+        if (disposition.kind === "fresh-only")
+            cached.passDeliveryOnly = true;
         if (disposition.kind === "accepted" || disposition.kind === "fresh-only") {
             return cached;
         }

package/lib/core/transform/generation/transformProject.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"transformProject.mjs","sources":["../../../../src/core/transform/generation/transformProject.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;;AAgBA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmEG;AACI,eAAe,gBAAgB,CAAC,KAkEtC,EAAA;AACC,IAAA,MAAM,YAAY,GAAG,eAAe,EAAE;IACtC,MAAM,QAAQ,GAAkC,EAAE;AAClD,IAAA,IAAI,QAA4B;IAChC,IAAI,KAAK,GAAG,CAAC;IACb,IAAI,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC;AACpD,IAAA,IAAI,yBAAyB,GAAG,KAAK,CAAC,yBAAyB;IAC/D,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE;AACpC,QAAA,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;AAC9C,YAAA,GAAG,KAAK;YACR,QAAQ;YACR,yBAAyB;AACzB,YAAA,qBAAqB,EAAE,CAAC,GAAG,SAAS,CAAC;AACtC,SAAA,CAAC;QACF,MAAM,WAAW,GAAG,iCAAiC,CAAC;AACpD,YAAA,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YAC9B,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;YACvD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;AACzC,YAAA,oBAAoB,EAClB,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK;AACrB,kBAAE,MAAM,CAAC,MAAM,CAAC;AAChB,kBAAE,SAAS;AACf,YAAA,0BAA0B,EACxB,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK;AACrB,kBAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;AAC1D,kBAAE,CAAC;YACP,QAAQ,EAAE,6BAA6B,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YAC1D,OAAO,EAAE,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YACrD,OAAO;YACP,KAAK;YACL,QAAQ;AACT,SAAA,CAAC;QACF,YAAY,GAAG,4BAA4B,EAAE;YAC3C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,MAAM,CAAC,WAAW;AACvB,YAAA,IAAI,EAAE;gBACJ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,OAAO;AACP,gBAAA,WAAW,EAAE,KAAK;gBAClB,cAAc,EAAE,QAAQ,IAAI,IAAI;gBAChC,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;AAChD,gBAAA,UAAU,EAAE,OAAO,IAAI,WAAW,GAAG,WAAW,CAAC,KAAK,GAAG,IAAI;AAC7D,gBAAA,aAAa,EACX,UAAU,IAAI,WAAW,IAAI,WAAW,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI;AACpE,aAAA;AACF,SAAA,CAAC;AACF,QAAA,IAAI,WAAW,CAAC,iBAAiB,EAAE;;;AAGjC,YAAA,MAAM,CAAC,iBAAiB,GAAG,IAAI;QACjC;AACA,QAAA,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY,EAAE;AACxE,YAAA,OAAO,MAAM;QACf;AACA,QAAA,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;QACnC,MAAM,UAAU,GAAG,2BAA2B,CAC5C,SAAS,EACT,yBAAyB,EACzB,MAAM,CACP;AACD,QAAA,SAAS,GAAG,UAAU,CAAC,SAAS;AAChC,QAAA,yBAAyB,GAAG,UAAU,CAAC,yBAAyB;;;;;;;;AAQhE,QAAA,QAAQ,GAAG,WAAW,CAAC,QAAQ;AAC/B,QAAA,KAAK,GAAG,WAAW,CAAC,KAAK;;;AAGzB,QAAA,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY,EAAE;AACrC,YAAA,OAAO,MAAM;QACf;AACA,QAAA,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU,EAAE;YACnC,MAAM,UAAU,GAAG,uCAAuC,CAAC,GAAG,CAC5D,MAAM,CAAC,MAAM,CACd;AACD,YAAA,IAAI,UAAU,KAAK,SAAS,EAAE;gBAC5B,sBAAsB,CAAC,MAAM,CAAC;AAC9B,gBAAA,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE;YACH;AACA,YAAA,MAAM,6BAA6B,CACjC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EACjD,QAAQ,EACR,UAAU,CACX;QACH;QACA,sBAAsB,CAAC,MAAM,CAAC;IAChC;AACF;;;;"}
+{"version":3,"file":"transformProject.mjs","sources":["../../../../src/core/transform/generation/transformProject.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;;AAgBA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqEG;AACI,eAAe,gBAAgB,CAAC,KAkEtC,EAAA;AACC,IAAA,MAAM,YAAY,GAAG,eAAe,EAAE;IACtC,MAAM,QAAQ,GAAkC,EAAE;AAClD,IAAA,IAAI,QAA4B;IAChC,IAAI,KAAK,GAAG,CAAC;IACb,IAAI,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC;AACpD,IAAA,IAAI,yBAAyB,GAAG,KAAK,CAAC,yBAAyB;IAC/D,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE;AACpC,QAAA,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;AAC9C,YAAA,GAAG,KAAK;YACR,QAAQ;YACR,yBAAyB;AACzB,YAAA,qBAAqB,EAAE,CAAC,GAAG,SAAS,CAAC;AACtC,SAAA,CAAC;QACF,MAAM,WAAW,GAAG,iCAAiC,CAAC;AACpD,YAAA,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YAC9B,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;YACvD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;AACzC,YAAA,oBAAoB,EAClB,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK;AACrB,kBAAE,MAAM,CAAC,MAAM,CAAC;AAChB,kBAAE,SAAS;AACf,YAAA,0BAA0B,EACxB,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK;AACrB,kBAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;AAC1D,kBAAE,CAAC;YACP,QAAQ,EAAE,6BAA6B,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YAC1D,OAAO,EAAE,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YACrD,OAAO;YACP,KAAK;YACL,QAAQ;AACT,SAAA,CAAC;QACF,YAAY,GAAG,4BAA4B,EAAE;YAC3C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,MAAM,CAAC,WAAW;AACvB,YAAA,IAAI,EAAE;gBACJ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,OAAO;AACP,gBAAA,WAAW,EAAE,KAAK;gBAClB,cAAc,EAAE,QAAQ,IAAI,IAAI;gBAChC,IAAI,EAAE,WAAW,CAAC,IAAI;gBACtB,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;AAChD,gBAAA,UAAU,EAAE,OAAO,IAAI,WAAW,GAAG,WAAW,CAAC,KAAK,GAAG,IAAI;AAC7D,gBAAA,aAAa,EACX,UAAU,IAAI,WAAW,IAAI,WAAW,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI;AACpE,aAAA;AACF,SAAA,CAAC;AACF,QAAA,IAAI,WAAW,CAAC,iBAAiB,EAAE;;;;AAIjC,YAAA,MAAM,CAAC,iBAAiB,GAAG,IAAI;QACjC;AACA,QAAA,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY;AAAE,YAAA,MAAM,CAAC,gBAAgB,GAAG,IAAI;AACrE,QAAA,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY,EAAE;AACxE,YAAA,OAAO,MAAM;QACf;AACA,QAAA,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;QACnC,MAAM,UAAU,GAAG,2BAA2B,CAC5C,SAAS,EACT,yBAAyB,EACzB,MAAM,CACP;AACD,QAAA,SAAS,GAAG,UAAU,CAAC,SAAS;AAChC,QAAA,yBAAyB,GAAG,UAAU,CAAC,yBAAyB;;;;;;;;AAQhE,QAAA,QAAQ,GAAG,WAAW,CAAC,QAAQ;AAC/B,QAAA,KAAK,GAAG,WAAW,CAAC,KAAK;;;AAGzB,QAAA,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY,EAAE;AACrC,YAAA,OAAO,MAAM;QACf;AACA,QAAA,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU,EAAE;YACnC,MAAM,UAAU,GAAG,uCAAuC,CAAC,GAAG,CAC5D,MAAM,CAAC,MAAM,CACd;AACD,YAAA,IAAI,UAAU,KAAK,SAAS,EAAE;gBAC5B,sBAAsB,CAAC,MAAM,CAAC;AAC9B,gBAAA,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE;YACH;AACA,YAAA,MAAM,6BAA6B,CACjC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EACjD,QAAQ,EACR,UAAU,CACX;QACH;QACA,sBAAsB,CAAC,MAAM,CAAC;IAChC;AACF;;;;"}

package/lib/core/transform/inputs/preparePluginBuildEnvironments.d.cts

@@ -1,23 +1,30 @@
 import type { TtscCachedProjectTransform } from "../cache/TtscCachedProjectTransform.cjs";
 import type { TtscTransformFilesystemOperations } from "../filesystem/TtscTransformFilesystemOperations.cjs";
 /**
- * Prepare actual plugin toolchain authority before synchronous input proofs.
+ * Qualify actual plugin toolchain authority before synchronous input proofs.
  * Cold Go/environment/SDK work stays off the host thread. A mismatch requests
  * one fresh native environment reading; observation failure remains unavailable
  * and the following admission or replay validator retains its failure policy. A
  * resident generation can reuse its exact proven source state while healthy
  * notifications and the still-qualified environment witness both hold. Native
- * environment preparation remains mandatory; source events cannot prove it.
+ * environment authority remains mandatory; source events cannot prove it.
+ *
+ * WARNING (#1712): yield before observing queued source changes, then qualify
+ * all current readings in one synchronous batch. Missing readings require an
+ * await and a fresh batch afterward. Source comparisons may request native
+ * refreshes; the caller must establish another current proof after those
+ * awaits. Never preserve a positive batch across an await or replay the SDK
+ * witness independently for every plugin and nested validator.
  *
  * @param cached Optional resident generation whose existing source-state and
  *   environment witness may qualify source reuse. Other preparation owners
  *   retain direct source comparison.
- * @evidence contracts/common.md#principled-implementation Every reported plugin directory prepares its actual current environment. The same result's matching manifest state can share source proof only with a healthy exact-source tracker and the environment under which that tree was proven. Otherwise this operation compares source state once and a mismatch refreshes environment authority for the following owning validator to compare again; failed preparation cannot qualify an input.
+ * @evidence contracts/common.md#principled-implementation Every reported plugin directory qualifies current environment authority; only missing readings require asynchronous preparation. The same result's matching manifest state can share source proof only with a healthy exact-source tracker and the environment under which that tree was proven. Otherwise this operation compares source state once and a mismatch refreshes environment authority for the following owning validator to compare again; failed preparation cannot qualify an input.
  * @evidence contracts/common.md#clear-and-simple-design One async boundary precedes existing synchronous generation, delivery and terminal proofs.
  * @evidence contracts/common.md#prohibited-implementation-shortcuts Missing observations stay unproved; reported binary state never substitutes for native environment preparation or source comparison.
  * @evidence contracts/common.md#meaningful-documentation Native prose identifies off-thread work, mismatch refresh and preserved downstream failure ownership.
  * @evidence contracts/portability.md#os-neutral-implementation The same native toolchain/environment reader and caller filesystem source digest qualify each directory without platform guesses.
- * @evidence contracts/performance.md#efficient-algorithms The envelope selector builds its directory map once per result, and preparation visits each reported directory once. Environment requests build keys from effective variables and qualify native dependencies. A qualified source witness avoids enumeration; other source comparisons enumerate and sort files, check metadata and hash bytes when the digest cannot be reused. A mismatch requests one environment refresh rather than a second source comparison here.
+ * @evidence contracts/performance.md#efficient-algorithms The envelope selector indexes directories once per result. Linear directory passes batch-qualify current readings, prepare missing authority, compare source state and refresh mismatches. Each synchronous batch hashes variables once and shares distinct native dependencies; any preparation await requires another current batch. A qualified source witness avoids enumeration; other source comparisons enumerate and sort files, check metadata and hash bytes when the digest cannot be reused. A mismatch requests one environment refresh rather than a second source comparison here.
  * @evidence contracts/performance.md#reuse-equivalent-work The environment owner shares equivalent in-flight requests and still-qualified readings. Resident source proof is reused only for the exact result and manifest digest, unchanged qualified environment and currently healthy covered source notifications; absent, dirty, replaced or unavailable witnesses retain direct proof. No epoch or quiet watcher alone authorizes reuse, and subsequent admission still owns its current validation.
  * @evidence contracts/performance.md#bound-retention-and-release-resources This module records asynchronous execution ownership in a WeakSet before preparation, including failures, so disposed results are not retained. Requests and worker lifetimes remain with the environment owner; this sequential operation awaits each request and acquires no native observer or independent cancellation handle.
  */

package/lib/core/transform/inputs/preparePluginBuildEnvironments.d.mts

@@ -1,23 +1,30 @@
 import type { TtscCachedProjectTransform } from "../cache/TtscCachedProjectTransform.mjs";
 import type { TtscTransformFilesystemOperations } from "../filesystem/TtscTransformFilesystemOperations.mjs";
 /**
- * Prepare actual plugin toolchain authority before synchronous input proofs.
+ * Qualify actual plugin toolchain authority before synchronous input proofs.
  * Cold Go/environment/SDK work stays off the host thread. A mismatch requests
  * one fresh native environment reading; observation failure remains unavailable
  * and the following admission or replay validator retains its failure policy. A
  * resident generation can reuse its exact proven source state while healthy
  * notifications and the still-qualified environment witness both hold. Native
- * environment preparation remains mandatory; source events cannot prove it.
+ * environment authority remains mandatory; source events cannot prove it.
+ *
+ * WARNING (#1712): yield before observing queued source changes, then qualify
+ * all current readings in one synchronous batch. Missing readings require an
+ * await and a fresh batch afterward. Source comparisons may request native
+ * refreshes; the caller must establish another current proof after those
+ * awaits. Never preserve a positive batch across an await or replay the SDK
+ * witness independently for every plugin and nested validator.
  *
  * @param cached Optional resident generation whose existing source-state and
  *   environment witness may qualify source reuse. Other preparation owners
  *   retain direct source comparison.
- * @evidence contracts/common.md#principled-implementation Every reported plugin directory prepares its actual current environment. The same result's matching manifest state can share source proof only with a healthy exact-source tracker and the environment under which that tree was proven. Otherwise this operation compares source state once and a mismatch refreshes environment authority for the following owning validator to compare again; failed preparation cannot qualify an input.
+ * @evidence contracts/common.md#principled-implementation Every reported plugin directory qualifies current environment authority; only missing readings require asynchronous preparation. The same result's matching manifest state can share source proof only with a healthy exact-source tracker and the environment under which that tree was proven. Otherwise this operation compares source state once and a mismatch refreshes environment authority for the following owning validator to compare again; failed preparation cannot qualify an input.
  * @evidence contracts/common.md#clear-and-simple-design One async boundary precedes existing synchronous generation, delivery and terminal proofs.
  * @evidence contracts/common.md#prohibited-implementation-shortcuts Missing observations stay unproved; reported binary state never substitutes for native environment preparation or source comparison.
  * @evidence contracts/common.md#meaningful-documentation Native prose identifies off-thread work, mismatch refresh and preserved downstream failure ownership.
  * @evidence contracts/portability.md#os-neutral-implementation The same native toolchain/environment reader and caller filesystem source digest qualify each directory without platform guesses.
- * @evidence contracts/performance.md#efficient-algorithms The envelope selector builds its directory map once per result, and preparation visits each reported directory once. Environment requests build keys from effective variables and qualify native dependencies. A qualified source witness avoids enumeration; other source comparisons enumerate and sort files, check metadata and hash bytes when the digest cannot be reused. A mismatch requests one environment refresh rather than a second source comparison here.
+ * @evidence contracts/performance.md#efficient-algorithms The envelope selector indexes directories once per result. Linear directory passes batch-qualify current readings, prepare missing authority, compare source state and refresh mismatches. Each synchronous batch hashes variables once and shares distinct native dependencies; any preparation await requires another current batch. A qualified source witness avoids enumeration; other source comparisons enumerate and sort files, check metadata and hash bytes when the digest cannot be reused. A mismatch requests one environment refresh rather than a second source comparison here.
  * @evidence contracts/performance.md#reuse-equivalent-work The environment owner shares equivalent in-flight requests and still-qualified readings. Resident source proof is reused only for the exact result and manifest digest, unchanged qualified environment and currently healthy covered source notifications; absent, dirty, replaced or unavailable witnesses retain direct proof. No epoch or quiet watcher alone authorizes reuse, and subsequent admission still owns its current validation.
  * @evidence contracts/performance.md#bound-retention-and-release-resources This module records asynchronous execution ownership in a WeakSet before preparation, including failures, so disposed results are not retained. Requests and worker lifetimes remain with the environment owner; this sequential operation awaits each request and acquires no native observer or independent cancellation handle.
  */

package/lib/core/transform/inputs/preparePluginBuildEnvironments.d.ts

@@ -1,23 +1,30 @@
 import type { TtscCachedProjectTransform } from "../cache/TtscCachedProjectTransform";
 import type { TtscTransformFilesystemOperations } from "../filesystem/TtscTransformFilesystemOperations";
 /**
- * Prepare actual plugin toolchain authority before synchronous input proofs.
+ * Qualify actual plugin toolchain authority before synchronous input proofs.
  * Cold Go/environment/SDK work stays off the host thread. A mismatch requests
  * one fresh native environment reading; observation failure remains unavailable
  * and the following admission or replay validator retains its failure policy. A
  * resident generation can reuse its exact proven source state while healthy
  * notifications and the still-qualified environment witness both hold. Native
- * environment preparation remains mandatory; source events cannot prove it.
+ * environment authority remains mandatory; source events cannot prove it.
+ *
+ * WARNING (#1712): yield before observing queued source changes, then qualify
+ * all current readings in one synchronous batch. Missing readings require an
+ * await and a fresh batch afterward. Source comparisons may request native
+ * refreshes; the caller must establish another current proof after those
+ * awaits. Never preserve a positive batch across an await or replay the SDK
+ * witness independently for every plugin and nested validator.
  *
  * @param cached Optional resident generation whose existing source-state and
  *   environment witness may qualify source reuse. Other preparation owners
  *   retain direct source comparison.
- * @evidence contracts/common.md#principled-implementation Every reported plugin directory prepares its actual current environment. The same result's matching manifest state can share source proof only with a healthy exact-source tracker and the environment under which that tree was proven. Otherwise this operation compares source state once and a mismatch refreshes environment authority for the following owning validator to compare again; failed preparation cannot qualify an input.
+ * @evidence contracts/common.md#principled-implementation Every reported plugin directory qualifies current environment authority; only missing readings require asynchronous preparation. The same result's matching manifest state can share source proof only with a healthy exact-source tracker and the environment under which that tree was proven. Otherwise this operation compares source state once and a mismatch refreshes environment authority for the following owning validator to compare again; failed preparation cannot qualify an input.
  * @evidence contracts/common.md#clear-and-simple-design One async boundary precedes existing synchronous generation, delivery and terminal proofs.
  * @evidence contracts/common.md#prohibited-implementation-shortcuts Missing observations stay unproved; reported binary state never substitutes for native environment preparation or source comparison.
  * @evidence contracts/common.md#meaningful-documentation Native prose identifies off-thread work, mismatch refresh and preserved downstream failure ownership.
  * @evidence contracts/portability.md#os-neutral-implementation The same native toolchain/environment reader and caller filesystem source digest qualify each directory without platform guesses.
- * @evidence contracts/performance.md#efficient-algorithms The envelope selector builds its directory map once per result, and preparation visits each reported directory once. Environment requests build keys from effective variables and qualify native dependencies. A qualified source witness avoids enumeration; other source comparisons enumerate and sort files, check metadata and hash bytes when the digest cannot be reused. A mismatch requests one environment refresh rather than a second source comparison here.
+ * @evidence contracts/performance.md#efficient-algorithms The envelope selector indexes directories once per result. Linear directory passes batch-qualify current readings, prepare missing authority, compare source state and refresh mismatches. Each synchronous batch hashes variables once and shares distinct native dependencies; any preparation await requires another current batch. A qualified source witness avoids enumeration; other source comparisons enumerate and sort files, check metadata and hash bytes when the digest cannot be reused. A mismatch requests one environment refresh rather than a second source comparison here.
  * @evidence contracts/performance.md#reuse-equivalent-work The environment owner shares equivalent in-flight requests and still-qualified readings. Resident source proof is reused only for the exact result and manifest digest, unchanged qualified environment and currently healthy covered source notifications; absent, dirty, replaced or unavailable witnesses retain direct proof. No epoch or quiet watcher alone authorizes reuse, and subsequent admission still owns its current validation.
  * @evidence contracts/performance.md#bound-retention-and-release-resources This module records asynchronous execution ownership in a WeakSet before preparation, including failures, so disposed results are not retained. Requests and worker lifetimes remain with the environment owner; this sequential operation awaits each request and acquires no native observer or independent cancellation handle.
  */

package/lib/core/transform/inputs/preparePluginBuildEnvironments.js

@@ -10,32 +10,61 @@ var pluginSourceHolds = require('./pluginSourceHolds.js');
 // async proofs cannot silently fall back to it after an unavailable reading.
 const asyncResults = new WeakSet();
 /**
- * Prepare actual plugin toolchain authority before synchronous input proofs.
+ * Qualify actual plugin toolchain authority before synchronous input proofs.
  * Cold Go/environment/SDK work stays off the host thread. A mismatch requests
  * one fresh native environment reading; observation failure remains unavailable
  * and the following admission or replay validator retains its failure policy. A
  * resident generation can reuse its exact proven source state while healthy
  * notifications and the still-qualified environment witness both hold. Native
- * environment preparation remains mandatory; source events cannot prove it.
+ * environment authority remains mandatory; source events cannot prove it.
+ *
+ * WARNING (#1712): yield before observing queued source changes, then qualify
+ * all current readings in one synchronous batch. Missing readings require an
+ * await and a fresh batch afterward. Source comparisons may request native
+ * refreshes; the caller must establish another current proof after those
+ * awaits. Never preserve a positive batch across an await or replay the SDK
+ * witness independently for every plugin and nested validator.
  *
  * @param cached Optional resident generation whose existing source-state and
  *   environment witness may qualify source reuse. Other preparation owners
  *   retain direct source comparison.
- * @evidence contracts/common.md#principled-implementation Every reported plugin directory prepares its actual current environment. The same result's matching manifest state can share source proof only with a healthy exact-source tracker and the environment under which that tree was proven. Otherwise this operation compares source state once and a mismatch refreshes environment authority for the following owning validator to compare again; failed preparation cannot qualify an input.
+ * @evidence contracts/common.md#principled-implementation Every reported plugin directory qualifies current environment authority; only missing readings require asynchronous preparation. The same result's matching manifest state can share source proof only with a healthy exact-source tracker and the environment under which that tree was proven. Otherwise this operation compares source state once and a mismatch refreshes environment authority for the following owning validator to compare again; failed preparation cannot qualify an input.
  * @evidence contracts/common.md#clear-and-simple-design One async boundary precedes existing synchronous generation, delivery and terminal proofs.
  * @evidence contracts/common.md#prohibited-implementation-shortcuts Missing observations stay unproved; reported binary state never substitutes for native environment preparation or source comparison.
  * @evidence contracts/common.md#meaningful-documentation Native prose identifies off-thread work, mismatch refresh and preserved downstream failure ownership.
  * @evidence contracts/portability.md#os-neutral-implementation The same native toolchain/environment reader and caller filesystem source digest qualify each directory without platform guesses.
- * @evidence contracts/performance.md#efficient-algorithms The envelope selector builds its directory map once per result, and preparation visits each reported directory once. Environment requests build keys from effective variables and qualify native dependencies. A qualified source witness avoids enumeration; other source comparisons enumerate and sort files, check metadata and hash bytes when the digest cannot be reused. A mismatch requests one environment refresh rather than a second source comparison here.
+ * @evidence contracts/performance.md#efficient-algorithms The envelope selector indexes directories once per result. Linear directory passes batch-qualify current readings, prepare missing authority, compare source state and refresh mismatches. Each synchronous batch hashes variables once and shares distinct native dependencies; any preparation await requires another current batch. A qualified source witness avoids enumeration; other source comparisons enumerate and sort files, check metadata and hash bytes when the digest cannot be reused. A mismatch requests one environment refresh rather than a second source comparison here.
  * @evidence contracts/performance.md#reuse-equivalent-work The environment owner shares equivalent in-flight requests and still-qualified readings. Resident source proof is reused only for the exact result and manifest digest, unchanged qualified environment and currently healthy covered source notifications; absent, dirty, replaced or unavailable witnesses retain direct proof. No epoch or quiet watcher alone authorizes reuse, and subsequent admission still owns its current validation.
  * @evidence contracts/performance.md#bound-retention-and-release-resources This module records asynchronous execution ownership in a WeakSet before preparation, including failures, so disposed results are not retained. Requests and worker lifetimes remain with the environment owner; this sequential operation awaits each request and acquires no native observer or independent cancellation handle.
  */
 async function preparePluginBuildEnvironments(result, filesystem, cached) {
     asyncResults.add(result);
-    for (const [directory, state] of selectPluginSourceInputs.selectPluginSourceInputs(result)) {
+    const sources = selectPluginSourceInputs.selectPluginSourceInputs(result);
+    // Preserve the async preparation boundary even for warm environments.
+    // Events queued by the caller before awaiting preparation must participate
+    // in the source witness below. Observe the batch after this yield, never
+    // carry a positive environment observation across it (#1712).
+    await Promise.resolve();
+    const current = pluginSource.PluginBuildEnvironmentReadings.cachedAll(sources.keys());
+    let awaited = false;
+    for (const directory of sources.keys()) {
+        if (current.get(directory) !== undefined)
+            continue;
+        awaited = true;
         try {
             await pluginSource.PluginBuildEnvironmentReadings.prepare(directory);
-            const environment = pluginSource.PluginBuildEnvironmentReadings.cached(directory);
+        }
+        catch {
+            // Keep unavailable authority for admission rather than cold fallback.
+        }
+    }
+    const environments = awaited
+        ? pluginSource.PluginBuildEnvironmentReadings.cachedAll(sources.keys())
+        : current;
+    const refresh = [];
+    for (const [directory, state] of sources) {
+        try {
+            const environment = environments.get(directory);
             if (cached?.result === result &&
                 cached.hostInputValidation?.trees.get(directory) === state &&
                 environment !== undefined &&
@@ -46,13 +75,21 @@ async function preparePluginBuildEnvironments(result, filesystem, cached) {
             if (!pluginSourceHolds.pluginSourceHolds(directory, state, filesystem, {
                 environment,
             }))
-                await pluginSource.PluginBuildEnvironmentReadings.prepare(directory, true);
+                refresh.push(directory);
         }
         catch {
             // Admission and terminal recovery interpret unavailable proof in their
             // own domain; this boundary never upgrades it to a successful reading.
         }
     }
+    for (const directory of refresh) {
+        try {
+            await pluginSource.PluginBuildEnvironmentReadings.prepare(directory, true);
+        }
+        catch {
+            // Synchronous admission requalifies after this asynchronous window.
+        }
+    }
 }
 /**
  * Whether this result's owner attempted asynchronous native preparation. This

package/lib/core/transform/inputs/preparePluginBuildEnvironments.js.map

@@ -1 +1 @@
-{"version":3,"file":"preparePluginBuildEnvironments.js","sources":["../../../../src/core/transform/inputs/preparePluginBuildEnvironments.ts"],"sourcesContent":[null],"names":["selectPluginSourceInputs","PluginBuildEnvironmentReadings","trackerProvesInputUnchanged","pluginSourceHolds"],"mappings":";;;;;;;AAQA;AACA;AACA;AACA,MAAM,YAAY,GAAG,IAAI,OAAO,EAAU;AAE1C;;;;;;;;;;;;;;;;;;;;AAoBG;AACI,eAAe,8BAA8B,CAClD,MAA4C,EAC5C,UAA6C,EAC7C,MAAmC,EAAA;AAEnC,IAAA,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;AACxB,IAAA,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAIA,iDAAwB,CAAC,MAAM,CAAC,EAAE;AACjE,QAAA,IAAI;AACF,YAAA,MAAMC,2CAA8B,CAAC,OAAO,CAAC,SAAS,CAAC;YACvD,MAAM,WAAW,GAAGA,2CAA8B,CAAC,MAAM,CAAC,SAAS,CAAC;AACpE,YAAA,IACE,MAAM,EAAE,MAAM,KAAK,MAAM;gBACzB,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK;AAC1D,gBAAA,WAAW,KAAK,SAAS;gBACzB,MAAM,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,GAAG,CAAC,SAAS,CAAC;oBACzD,WAAW;AACb,gBAAAC,uDAA2B,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC;gBAEvE;YACF,IACE,CAACC,mCAAiB,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE;gBAC/C,WAAW;aACZ,CAAC;gBAEF,MAAMF,2CAA8B,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC;QACjE;AAAE,QAAA,MAAM;;;QAGR;IACF;AACF;AAEA;;;;;;;;;;;;AAYG;AACG,SAAU,mCAAmC,CACjD,MAA4C,EAAA;AAE5C,IAAA,OAAO,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;AACjC;;;;;"}
+{"version":3,"file":"preparePluginBuildEnvironments.js","sources":["../../../../src/core/transform/inputs/preparePluginBuildEnvironments.ts"],"sourcesContent":[null],"names":["selectPluginSourceInputs","PluginBuildEnvironmentReadings","trackerProvesInputUnchanged","pluginSourceHolds"],"mappings":";;;;;;;AAQA;AACA;AACA;AACA,MAAM,YAAY,GAAG,IAAI,OAAO,EAAU;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BG;AACI,eAAe,8BAA8B,CAClD,MAA4C,EAC5C,UAA6C,EAC7C,MAAmC,EAAA;AAEnC,IAAA,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;AACxB,IAAA,MAAM,OAAO,GAAGA,iDAAwB,CAAC,MAAM,CAAC;;;;;AAKhD,IAAA,MAAM,OAAO,CAAC,OAAO,EAAE;IACvB,MAAM,OAAO,GAAGC,2CAA8B,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACxE,IAAI,OAAO,GAAG,KAAK;IACnB,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE;AACtC,QAAA,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,SAAS;YAAE;QAC1C,OAAO,GAAG,IAAI;AACd,QAAA,IAAI;AACF,YAAA,MAAMA,2CAA8B,CAAC,OAAO,CAAC,SAAS,CAAC;QACzD;AAAE,QAAA,MAAM;;QAER;IACF;IACA,MAAM,YAAY,GAAG;UACjBA,2CAA8B,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE;UACvD,OAAO;IACX,MAAM,OAAO,GAAa,EAAE;IAC5B,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE;AACxC,QAAA,IAAI;YACF,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC;AAC/C,YAAA,IACE,MAAM,EAAE,MAAM,KAAK,MAAM;gBACzB,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK;AAC1D,gBAAA,WAAW,KAAK,SAAS;gBACzB,MAAM,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,GAAG,CAAC,SAAS,CAAC;oBACzD,WAAW;AACb,gBAAAC,uDAA2B,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC;gBAEvE;YACF,IACE,CAACC,mCAAiB,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE;gBAC/C,WAAW;aACZ,CAAC;AAEF,gBAAA,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;QAC3B;AAAE,QAAA,MAAM;;;QAGR;IACF;AACA,IAAA,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE;AAC/B,QAAA,IAAI;YACF,MAAMF,2CAA8B,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC;QAC/D;AAAE,QAAA,MAAM;;QAER;IACF;AACF;AAEA;;;;;;;;;;;;AAYG;AACG,SAAU,mCAAmC,CACjD,MAA4C,EAAA;AAE5C,IAAA,OAAO,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;AACjC;;;;;"}

package/lib/core/transform/inputs/preparePluginBuildEnvironments.mjs

@@ -8,32 +8,61 @@ import { pluginSourceHolds } from './pluginSourceHolds.mjs';
 // async proofs cannot silently fall back to it after an unavailable reading.
 const asyncResults = new WeakSet();
 /**
- * Prepare actual plugin toolchain authority before synchronous input proofs.
+ * Qualify actual plugin toolchain authority before synchronous input proofs.
  * Cold Go/environment/SDK work stays off the host thread. A mismatch requests
  * one fresh native environment reading; observation failure remains unavailable
  * and the following admission or replay validator retains its failure policy. A
  * resident generation can reuse its exact proven source state while healthy
  * notifications and the still-qualified environment witness both hold. Native
- * environment preparation remains mandatory; source events cannot prove it.
+ * environment authority remains mandatory; source events cannot prove it.
+ *
+ * WARNING (#1712): yield before observing queued source changes, then qualify
+ * all current readings in one synchronous batch. Missing readings require an
+ * await and a fresh batch afterward. Source comparisons may request native
+ * refreshes; the caller must establish another current proof after those
+ * awaits. Never preserve a positive batch across an await or replay the SDK
+ * witness independently for every plugin and nested validator.
  *
  * @param cached Optional resident generation whose existing source-state and
  *   environment witness may qualify source reuse. Other preparation owners
  *   retain direct source comparison.
- * @evidence contracts/common.md#principled-implementation Every reported plugin directory prepares its actual current environment. The same result's matching manifest state can share source proof only with a healthy exact-source tracker and the environment under which that tree was proven. Otherwise this operation compares source state once and a mismatch refreshes environment authority for the following owning validator to compare again; failed preparation cannot qualify an input.
+ * @evidence contracts/common.md#principled-implementation Every reported plugin directory qualifies current environment authority; only missing readings require asynchronous preparation. The same result's matching manifest state can share source proof only with a healthy exact-source tracker and the environment under which that tree was proven. Otherwise this operation compares source state once and a mismatch refreshes environment authority for the following owning validator to compare again; failed preparation cannot qualify an input.
  * @evidence contracts/common.md#clear-and-simple-design One async boundary precedes existing synchronous generation, delivery and terminal proofs.
  * @evidence contracts/common.md#prohibited-implementation-shortcuts Missing observations stay unproved; reported binary state never substitutes for native environment preparation or source comparison.
  * @evidence contracts/common.md#meaningful-documentation Native prose identifies off-thread work, mismatch refresh and preserved downstream failure ownership.
  * @evidence contracts/portability.md#os-neutral-implementation The same native toolchain/environment reader and caller filesystem source digest qualify each directory without platform guesses.
- * @evidence contracts/performance.md#efficient-algorithms The envelope selector builds its directory map once per result, and preparation visits each reported directory once. Environment requests build keys from effective variables and qualify native dependencies. A qualified source witness avoids enumeration; other source comparisons enumerate and sort files, check metadata and hash bytes when the digest cannot be reused. A mismatch requests one environment refresh rather than a second source comparison here.
+ * @evidence contracts/performance.md#efficient-algorithms The envelope selector indexes directories once per result. Linear directory passes batch-qualify current readings, prepare missing authority, compare source state and refresh mismatches. Each synchronous batch hashes variables once and shares distinct native dependencies; any preparation await requires another current batch. A qualified source witness avoids enumeration; other source comparisons enumerate and sort files, check metadata and hash bytes when the digest cannot be reused. A mismatch requests one environment refresh rather than a second source comparison here.
  * @evidence contracts/performance.md#reuse-equivalent-work The environment owner shares equivalent in-flight requests and still-qualified readings. Resident source proof is reused only for the exact result and manifest digest, unchanged qualified environment and currently healthy covered source notifications; absent, dirty, replaced or unavailable witnesses retain direct proof. No epoch or quiet watcher alone authorizes reuse, and subsequent admission still owns its current validation.
  * @evidence contracts/performance.md#bound-retention-and-release-resources This module records asynchronous execution ownership in a WeakSet before preparation, including failures, so disposed results are not retained. Requests and worker lifetimes remain with the environment owner; this sequential operation awaits each request and acquires no native observer or independent cancellation handle.
  */
 async function preparePluginBuildEnvironments(result, filesystem, cached) {
     asyncResults.add(result);
-    for (const [directory, state] of selectPluginSourceInputs(result)) {
+    const sources = selectPluginSourceInputs(result);
+    // Preserve the async preparation boundary even for warm environments.
+    // Events queued by the caller before awaiting preparation must participate
+    // in the source witness below. Observe the batch after this yield, never
+    // carry a positive environment observation across it (#1712).
+    await Promise.resolve();
+    const current = PluginBuildEnvironmentReadings.cachedAll(sources.keys());
+    let awaited = false;
+    for (const directory of sources.keys()) {
+        if (current.get(directory) !== undefined)
+            continue;
+        awaited = true;
         try {
             await PluginBuildEnvironmentReadings.prepare(directory);
-            const environment = PluginBuildEnvironmentReadings.cached(directory);
+        }
+        catch {
+            // Keep unavailable authority for admission rather than cold fallback.
+        }
+    }
+    const environments = awaited
+        ? PluginBuildEnvironmentReadings.cachedAll(sources.keys())
+        : current;
+    const refresh = [];
+    for (const [directory, state] of sources) {
+        try {
+            const environment = environments.get(directory);
             if (cached?.result === result &&
                 cached.hostInputValidation?.trees.get(directory) === state &&
                 environment !== undefined &&
@@ -44,13 +73,21 @@ async function preparePluginBuildEnvironments(result, filesystem, cached) {
             if (!pluginSourceHolds(directory, state, filesystem, {
                 environment,
             }))
-                await PluginBuildEnvironmentReadings.prepare(directory, true);
+                refresh.push(directory);
         }
         catch {
             // Admission and terminal recovery interpret unavailable proof in their
             // own domain; this boundary never upgrades it to a successful reading.
         }
     }
+    for (const directory of refresh) {
+        try {
+            await PluginBuildEnvironmentReadings.prepare(directory, true);
+        }
+        catch {
+            // Synchronous admission requalifies after this asynchronous window.
+        }
+    }
 }
 /**
  * Whether this result's owner attempted asynchronous native preparation. This

package/lib/core/transform/inputs/preparePluginBuildEnvironments.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"preparePluginBuildEnvironments.mjs","sources":["../../../../src/core/transform/inputs/preparePluginBuildEnvironments.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;AAQA;AACA;AACA;AACA,MAAM,YAAY,GAAG,IAAI,OAAO,EAAU;AAE1C;;;;;;;;;;;;;;;;;;;;AAoBG;AACI,eAAe,8BAA8B,CAClD,MAA4C,EAC5C,UAA6C,EAC7C,MAAmC,EAAA;AAEnC,IAAA,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;AACxB,IAAA,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,wBAAwB,CAAC,MAAM,CAAC,EAAE;AACjE,QAAA,IAAI;AACF,YAAA,MAAM,8BAA8B,CAAC,OAAO,CAAC,SAAS,CAAC;YACvD,MAAM,WAAW,GAAG,8BAA8B,CAAC,MAAM,CAAC,SAAS,CAAC;AACpE,YAAA,IACE,MAAM,EAAE,MAAM,KAAK,MAAM;gBACzB,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK;AAC1D,gBAAA,WAAW,KAAK,SAAS;gBACzB,MAAM,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,GAAG,CAAC,SAAS,CAAC;oBACzD,WAAW;AACb,gBAAA,2BAA2B,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC;gBAEvE;YACF,IACE,CAAC,iBAAiB,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE;gBAC/C,WAAW;aACZ,CAAC;gBAEF,MAAM,8BAA8B,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC;QACjE;AAAE,QAAA,MAAM;;;QAGR;IACF;AACF;AAEA;;;;;;;;;;;;AAYG;AACG,SAAU,mCAAmC,CACjD,MAA4C,EAAA;AAE5C,IAAA,OAAO,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;AACjC;;;;"}
+{"version":3,"file":"preparePluginBuildEnvironments.mjs","sources":["../../../../src/core/transform/inputs/preparePluginBuildEnvironments.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;AAQA;AACA;AACA;AACA,MAAM,YAAY,GAAG,IAAI,OAAO,EAAU;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BG;AACI,eAAe,8BAA8B,CAClD,MAA4C,EAC5C,UAA6C,EAC7C,MAAmC,EAAA;AAEnC,IAAA,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;AACxB,IAAA,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC;;;;;AAKhD,IAAA,MAAM,OAAO,CAAC,OAAO,EAAE;IACvB,MAAM,OAAO,GAAG,8BAA8B,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACxE,IAAI,OAAO,GAAG,KAAK;IACnB,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE;AACtC,QAAA,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,SAAS;YAAE;QAC1C,OAAO,GAAG,IAAI;AACd,QAAA,IAAI;AACF,YAAA,MAAM,8BAA8B,CAAC,OAAO,CAAC,SAAS,CAAC;QACzD;AAAE,QAAA,MAAM;;QAER;IACF;IACA,MAAM,YAAY,GAAG;UACjB,8BAA8B,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE;UACvD,OAAO;IACX,MAAM,OAAO,GAAa,EAAE;IAC5B,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE;AACxC,QAAA,IAAI;YACF,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC;AAC/C,YAAA,IACE,MAAM,EAAE,MAAM,KAAK,MAAM;gBACzB,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK;AAC1D,gBAAA,WAAW,KAAK,SAAS;gBACzB,MAAM,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,GAAG,CAAC,SAAS,CAAC;oBACzD,WAAW;AACb,gBAAA,2BAA2B,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC;gBAEvE;YACF,IACE,CAAC,iBAAiB,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE;gBAC/C,WAAW;aACZ,CAAC;AAEF,gBAAA,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;QAC3B;AAAE,QAAA,MAAM;;;QAGR;IACF;AACA,IAAA,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE;AAC/B,QAAA,IAAI;YACF,MAAM,8BAA8B,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC;QAC/D;AAAE,QAAA,MAAM;;QAER;IACF;AACF;AAEA;;;;;;;;;;;;AAYG;AACG,SAAU,mCAAmC,CACjD,MAA4C,EAAA;AAE5C,IAAA,OAAO,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;AACjC;;;;"}

package/lib/core/transform/tracker/broker/WatchBroker.d.cts

@@ -4,10 +4,11 @@ import type { WatchBrokerRegistration } from "./WatchBrokerRegistration.cjs";
  * The live state of the isolated watch process.
  *
  * The broker multiplexes every Windows and macOS watch of the process over one
- * IPC channel, a tracker's and an input observer's scope's alike. Registrations
- * and drains are counted so the channel is referenced only while a reply is
- * outstanding, and each registration keeps the sink its messages go to and the
- * spelling map that translates the child's canonical paths back to its own.
+ * ordered transport, a tracker's and an input observer's scope's alike. Windows
+ * uses the native helper's stdio; macOS uses Node IPC. Registrations and drains
+ * are counted so the channel is referenced only while a reply is outstanding,
+ * and each registration keeps the sink its messages go to and the spelling map
+ * that translates the child's canonical paths back to its own.
  *
  * @evidence contracts/common.md#principled-implementation
  *   Registration and request ids distinguish multiplexed owners; drain scopes
@@ -35,6 +36,15 @@ import type { WatchBrokerRegistration } from "./WatchBrokerRegistration.cjs";
 export interface WatchBroker {
     /** The isolated watch process; unreferenced whenever no reply is outstanding. */
     child: ChildProcess;
+    /**
+     * Native stdio transport on Windows; absent for the macOS IPC broker and
+     * explicit test transports.
+     */
+    transport?: {
+        send(message: unknown): boolean;
+        reference(active: boolean): void;
+        close(): void;
+    };
     /**
      * Round-trips awaiting the child's reply, by request id, each released with
      * whether the child answered it.

package/lib/core/transform/tracker/broker/WatchBroker.d.mts

@@ -4,10 +4,11 @@ import type { WatchBrokerRegistration } from "./WatchBrokerRegistration.mjs";
  * The live state of the isolated watch process.
  *
  * The broker multiplexes every Windows and macOS watch of the process over one
- * IPC channel, a tracker's and an input observer's scope's alike. Registrations
- * and drains are counted so the channel is referenced only while a reply is
- * outstanding, and each registration keeps the sink its messages go to and the
- * spelling map that translates the child's canonical paths back to its own.
+ * ordered transport, a tracker's and an input observer's scope's alike. Windows
+ * uses the native helper's stdio; macOS uses Node IPC. Registrations and drains
+ * are counted so the channel is referenced only while a reply is outstanding,
+ * and each registration keeps the sink its messages go to and the spelling map
+ * that translates the child's canonical paths back to its own.
  *
  * @evidence contracts/common.md#principled-implementation
  *   Registration and request ids distinguish multiplexed owners; drain scopes
@@ -35,6 +36,15 @@ import type { WatchBrokerRegistration } from "./WatchBrokerRegistration.mjs";
 export interface WatchBroker {
     /** The isolated watch process; unreferenced whenever no reply is outstanding. */
     child: ChildProcess;
+    /**
+     * Native stdio transport on Windows; absent for the macOS IPC broker and
+     * explicit test transports.
+     */
+    transport?: {
+        send(message: unknown): boolean;
+        reference(active: boolean): void;
+        close(): void;
+    };
     /**
      * Round-trips awaiting the child's reply, by request id, each released with
      * whether the child answered it.

package/lib/core/transform/tracker/broker/WatchBroker.d.ts

@@ -4,10 +4,11 @@ import type { WatchBrokerRegistration } from "./WatchBrokerRegistration";
  * The live state of the isolated watch process.
  *
  * The broker multiplexes every Windows and macOS watch of the process over one
- * IPC channel, a tracker's and an input observer's scope's alike. Registrations
- * and drains are counted so the channel is referenced only while a reply is
- * outstanding, and each registration keeps the sink its messages go to and the
- * spelling map that translates the child's canonical paths back to its own.
+ * ordered transport, a tracker's and an input observer's scope's alike. Windows
+ * uses the native helper's stdio; macOS uses Node IPC. Registrations and drains
+ * are counted so the channel is referenced only while a reply is outstanding,
+ * and each registration keeps the sink its messages go to and the spelling map
+ * that translates the child's canonical paths back to its own.
  *
  * @evidence contracts/common.md#principled-implementation
  *   Registration and request ids distinguish multiplexed owners; drain scopes
@@ -35,6 +36,15 @@ import type { WatchBrokerRegistration } from "./WatchBrokerRegistration";
 export interface WatchBroker {
     /** The isolated watch process; unreferenced whenever no reply is outstanding. */
     child: ChildProcess;
+    /**
+     * Native stdio transport on Windows; absent for the macOS IPC broker and
+     * explicit test transports.
+     */
+    transport?: {
+        send(message: unknown): boolean;
+        reference(active: boolean): void;
+        close(): void;
+    };
     /**
      * Round-trips awaiting the child's reply, by request id, each released with
      * whether the child answered it.