@ttsc/unplugin 0.31.0 → 0.31.2

package/lib/core/transform/tracker/broker/openBrokeredWatch.mjs

@@ -3,6 +3,7 @@ import path from 'node:path';
 import { WATCH_BROKER } from './WATCH_BROKER.mjs';
 import { WATCH_PROBE_DIRECTORY_PREFIX } from './WATCH_PROBE_DIRECTORY_PREFIX.mjs';
 import { WATCH_PROBE_TIMEOUT_MS } from './WATCH_PROBE_TIMEOUT_MS.mjs';
+import { WatchBrokerTransport } from './WatchBrokerTransport.mjs';
 import { drainWatchBroker } from './drainWatchBroker.mjs';
 import { getWatchBroker } from './getWatchBroker.mjs';
 import { probeForLocation } from './probeForLocation.mjs';
@@ -12,11 +13,11 @@ import { sweepAbandonedWatchProbes } from './sweepAbandonedWatchProbes.mjs';
  * Open directory watches in the isolated watch process for one sink, and report
  * when they hear.
  *
- * On Windows, Node's fs-event backend can assert in native code when a watched
- * temporary tree is deleted. Isolation turns that unrecoverable process abort
- * into an ordinary broker exit and a conservative fallback in the host. On
- * macOS, each registration's watches are streams of their own, started before
- * the child reports ready, and a dropped event reaches the sink as a gap
+ * On Windows, ttsc's native helper owns completion-port directory subscriptions
+ * and omits access-only notifications (#1719). Native loss and failure withdraw
+ * coverage; actual change events remain authoritative even after A-B-A writes.
+ * On macOS, each registration's watches are streams of their own, started
+ * before the child reports ready, and a dropped event reaches the sink as a gap
  * (samchon/ttsc#1425). A stream that can be probed reports ready only once its
  * opening probe came back through it; the child suppresses ordinary callbacks
  * received before that probe. This is its backend protocol, not a guarantee
@@ -123,10 +124,7 @@ function openBrokeredWatch(locations, options) {
         };
     });
     broker.pendingRegistrations += 1;
-    broker.child.ref();
-    // Bun's IPC channel omits Node's Control.ref/unref methods. The child itself
-    // still owns the outstanding acknowledgement on that runtime.
-    broker.child.channel?.ref?.();
+    WatchBrokerTransport.reference(broker, true);
     const id = broker.nextId++;
     let resolveReady;
     const answered = new Promise((resolve) => {
@@ -147,7 +145,7 @@ function openBrokeredWatch(locations, options) {
         let failed = false;
         let failure;
         try {
-            broker.child.send?.({ id, op: "remove" });
+            WatchBrokerTransport.send(broker, { id, op: "remove" });
         }
         catch (error) {
             failed = true;
@@ -158,7 +156,7 @@ function openBrokeredWatch(locations, options) {
                 WATCH_BROKER.current = undefined;
             }
             try {
-                broker.child.disconnect?.();
+                WatchBrokerTransport.close(broker);
             }
             catch (error) {
                 if (!failed) {
@@ -179,7 +177,7 @@ function openBrokeredWatch(locations, options) {
         if (failed)
             throw failure;
     };
-    broker.child.send?.({
+    WatchBrokerTransport.send(broker, {
         allEvents: options.allEvents,
         locations: normalized,
         id,
@@ -212,8 +210,7 @@ function openBrokeredWatch(locations, options) {
         // a reply over an unreferenced channel lets the loop empty and the process
         // exit mid-build.
         if (broker.pendingRegistrations === 0 && broker.pendingDrains === 0) {
-            broker.child.unref();
-            broker.child.channel?.unref?.();
+            WatchBrokerTransport.reference(broker, false);
         }
     });
     return {

package/lib/core/transform/tracker/broker/openBrokeredWatch.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"openBrokeredWatch.mjs","sources":["../../../../../src/core/transform/tracker/broker/openBrokeredWatch.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;AAcA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2EG;AACG,SAAU,iBAAiB,CAC/B,SAAyC,EACzC,OAMC,EAAA;AAMD,IAAA,MAAM,MAAM,GAAG,cAAc,EAAE;;;;;;;AAO/B,IAAA,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB;IAC3C,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAI;AAC5C,QAAA,IAAI,SAAiB;AACrB,QAAA,IAAI;YACF,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC7D;AAAE,QAAA,MAAM;YACN,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC9C;QACA,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC;;;;;AAK5C,QAAA,IAAI,KAA0C;AAC9C,QAAA,IAAI;YACF,KAAK,GAAG,MAAM,CAAC;AACb,kBAAE,gBAAgB,CACd,SAAS,EACT,OAAO,CAAC,SAAS,EACjB,cAAc,EACd,OAAO,CAAC,UAAU;kBAEpB,SAAS;QACf;AAAE,QAAA,MAAM;YACN,KAAK,GAAG,SAAS;QACnB;QACA,OAAO;YACL,SAAS;YACT,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AAClE,YAAA,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAC3D,YAAA,IAAI,KAAK,KAAK,SAAS,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SAC1C;AACH,IAAA,CAAC,CAAC;AACF,IAAA,MAAM,CAAC,oBAAoB,IAAI,CAAC;AAChC,IAAA,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;;;IAGlB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI;AAC7B,IAAA,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE;AAC1B,IAAA,IAAI,YAAyB;IAC7B,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,KAAI;QAC7C,YAAY,GAAG,OAAO;AACxB,IAAA,CAAC,CAAC;AACF,IAAA,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE;QAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;AACtB,QAAA,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS;AACV,KAAA,CAAC;IACF,MAAM,KAAK,GAAG,MAAW;QACvB,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS;YAAE;AAC1B,QAAA,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,KAAK,EAAE;QACd,IAAI,MAAM,GAAG,KAAK;AAClB,QAAA,IAAI,OAAgB;AACpB,QAAA,IAAI;AACF,YAAA,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;QAC3C;QAAE,OAAO,KAAK,EAAE;YACd,MAAM,GAAG,IAAI;YACb,OAAO,GAAG,KAAK;QACjB;QACA,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,EAAE;AACnC,YAAA,IAAI,YAAY,CAAC,OAAO,KAAK,MAAM,EAAE;AACnC,gBAAA,YAAY,CAAC,OAAO,GAAG,SAAS;YAClC;AACA,YAAA,IAAI;AACF,gBAAA,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI;YAC7B;YAAE,OAAO,KAAK,EAAE;gBACd,IAAI,CAAC,MAAM,EAAE;oBACX,MAAM,GAAG,IAAI;oBACb,OAAO,GAAG,KAAK;gBACjB;YACF;AACA,YAAA,IAAI;AACF,gBAAA,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;YACrB;YAAE,OAAO,KAAK,EAAE;gBACd,IAAI,CAAC,MAAM,EAAE;oBACX,MAAM,GAAG,IAAI;oBACb,OAAO,GAAG,KAAK;gBACjB;YACF;QACF;AACA,QAAA,IAAI,MAAM;AAAE,YAAA,MAAM,OAAO;AAC3B,IAAA,CAAC;AACD,IAAA,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG;QAClB,SAAS,EAAE,OAAO,CAAC,SAAS;AAC5B,QAAA,SAAS,EAAE,UAAU;QACrB,EAAE;AACF,QAAA,EAAE,EAAE,KAAK;AACV,KAAA,CAAC;AACF,IAAA,IAAI,KAAiC;AACrC,IAAA,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,QAAQ;AACR,QAAA,IAAI,OAAO,CAAO,CAAC,OAAO,KAAI;AAC5B,YAAA,KAAK,GAAG,UAAU,CAAC,MAAK;;;gBAGtB,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,SAAS,EAAE;AAC9C,oBAAA,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE;AACrB,oBAAA,IAAI;AACF,wBAAA,KAAK,EAAE;oBACT;AAAE,oBAAA,MAAM;;oBAER;gBACF;AACA,gBAAA,OAAO,EAAE;YACX,CAAC,EAAE,sBAAsB,CAAC;AAC5B,QAAA,CAAC,CAAC;AACH,KAAA,CAAC,CAAC,OAAO,CAAC,MAAK;QACd,YAAY,CAAC,KAAK,CAAC;AACnB,QAAA,MAAM,CAAC,oBAAoB,IAAI,CAAC;;;;;AAKhC,QAAA,IAAI,MAAM,CAAC,oBAAoB,KAAK,CAAC,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,EAAE;AACnE,YAAA,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;YACpB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,IAAI;QACjC;AACF,IAAA,CAAC,CAAC;IACF,OAAO;QACL,KAAK;QACL,KAAK,EAAE,MAAM,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;QACpD,KAAK;KACN;AACH;AAEA;AACA,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB;AAEnD;;;;;;;;;AASG;AACH,SAAS,cAAc,CAAC,SAAiB,EAAA;IACvC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC;IACjD,IAAI,QAAQ,KAAK,SAAS;AAAE,QAAA,OAAO,QAAQ;AAC3C,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,CAAC;IACrE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACzC,yBAAyB,CAAC,MAAM,CAAC;AACjC,IAAA,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,MAAM,EACN,CAAA,EAAG,4BAA4B,GAAG,OAAO,CAAC,GAAG,CAAA,CAAE,CAChD;AACD,IAAA,IAAI,iBAAiB,CAAC,IAAI,KAAK,CAAC,EAAE;AAChC,QAAA,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAK;YACxB,KAAK,MAAM,MAAM,IAAI,iBAAiB,CAAC,MAAM,EAAE,EAAE;AAC/C,gBAAA,IAAI;AACF,oBAAA,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;gBACrD;AAAE,gBAAA,MAAM;;gBAER;YACF;AACF,QAAA,CAAC,CAAC;IACJ;AACA,IAAA,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC;AAC3C,IAAA,OAAO,SAAS;AAClB;;;;"}
+{"version":3,"file":"openBrokeredWatch.mjs","sources":["../../../../../src/core/transform/tracker/broker/openBrokeredWatch.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;;AAeA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2EG;AACG,SAAU,iBAAiB,CAC/B,SAAyC,EACzC,OAMC,EAAA;AAMD,IAAA,MAAM,MAAM,GAAG,cAAc,EAAE;;;;;;;AAO/B,IAAA,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB;IAC3C,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAI;AAC5C,QAAA,IAAI,SAAiB;AACrB,QAAA,IAAI;YACF,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC7D;AAAE,QAAA,MAAM;YACN,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC9C;QACA,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC;;;;;AAK5C,QAAA,IAAI,KAA0C;AAC9C,QAAA,IAAI;YACF,KAAK,GAAG,MAAM,CAAC;AACb,kBAAE,gBAAgB,CACd,SAAS,EACT,OAAO,CAAC,SAAS,EACjB,cAAc,EACd,OAAO,CAAC,UAAU;kBAEpB,SAAS;QACf;AAAE,QAAA,MAAM;YACN,KAAK,GAAG,SAAS;QACnB;QACA,OAAO;YACL,SAAS;YACT,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AAClE,YAAA,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAC3D,YAAA,IAAI,KAAK,KAAK,SAAS,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SAC1C;AACH,IAAA,CAAC,CAAC;AACF,IAAA,MAAM,CAAC,oBAAoB,IAAI,CAAC;AAChC,IAAA,oBAAoB,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC;AAC5C,IAAA,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE;AAC1B,IAAA,IAAI,YAAyB;IAC7B,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,KAAI;QAC7C,YAAY,GAAG,OAAO;AACxB,IAAA,CAAC,CAAC;AACF,IAAA,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE;QAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;AACtB,QAAA,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS;AACV,KAAA,CAAC;IACF,MAAM,KAAK,GAAG,MAAW;QACvB,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS;YAAE;AAC1B,QAAA,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,KAAK,EAAE;QACd,IAAI,MAAM,GAAG,KAAK;AAClB,QAAA,IAAI,OAAgB;AACpB,QAAA,IAAI;AACF,YAAA,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;QACzD;QAAE,OAAO,KAAK,EAAE;YACd,MAAM,GAAG,IAAI;YACb,OAAO,GAAG,KAAK;QACjB;QACA,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,EAAE;AACnC,YAAA,IAAI,YAAY,CAAC,OAAO,KAAK,MAAM,EAAE;AACnC,gBAAA,YAAY,CAAC,OAAO,GAAG,SAAS;YAClC;AACA,YAAA,IAAI;AACF,gBAAA,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC;YACpC;YAAE,OAAO,KAAK,EAAE;gBACd,IAAI,CAAC,MAAM,EAAE;oBACX,MAAM,GAAG,IAAI;oBACb,OAAO,GAAG,KAAK;gBACjB;YACF;AACA,YAAA,IAAI;AACF,gBAAA,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;YACrB;YAAE,OAAO,KAAK,EAAE;gBACd,IAAI,CAAC,MAAM,EAAE;oBACX,MAAM,GAAG,IAAI;oBACb,OAAO,GAAG,KAAK;gBACjB;YACF;QACF;AACA,QAAA,IAAI,MAAM;AAAE,YAAA,MAAM,OAAO;AAC3B,IAAA,CAAC;AACD,IAAA,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE;QAChC,SAAS,EAAE,OAAO,CAAC,SAAS;AAC5B,QAAA,SAAS,EAAE,UAAU;QACrB,EAAE;AACF,QAAA,EAAE,EAAE,KAAK;AACV,KAAA,CAAC;AACF,IAAA,IAAI,KAAiC;AACrC,IAAA,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,QAAQ;AACR,QAAA,IAAI,OAAO,CAAO,CAAC,OAAO,KAAI;AAC5B,YAAA,KAAK,GAAG,UAAU,CAAC,MAAK;;;gBAGtB,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,SAAS,EAAE;AAC9C,oBAAA,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE;AACrB,oBAAA,IAAI;AACF,wBAAA,KAAK,EAAE;oBACT;AAAE,oBAAA,MAAM;;oBAER;gBACF;AACA,gBAAA,OAAO,EAAE;YACX,CAAC,EAAE,sBAAsB,CAAC;AAC5B,QAAA,CAAC,CAAC;AACH,KAAA,CAAC,CAAC,OAAO,CAAC,MAAK;QACd,YAAY,CAAC,KAAK,CAAC;AACnB,QAAA,MAAM,CAAC,oBAAoB,IAAI,CAAC;;;;;AAKhC,QAAA,IAAI,MAAM,CAAC,oBAAoB,KAAK,CAAC,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,EAAE;AACnE,YAAA,oBAAoB,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC;QAC/C;AACF,IAAA,CAAC,CAAC;IACF,OAAO;QACL,KAAK;QACL,KAAK,EAAE,MAAM,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;QACpD,KAAK;KACN;AACH;AAEA;AACA,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB;AAEnD;;;;;;;;;AASG;AACH,SAAS,cAAc,CAAC,SAAiB,EAAA;IACvC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC;IACjD,IAAI,QAAQ,KAAK,SAAS;AAAE,QAAA,OAAO,QAAQ;AAC3C,IAAA,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,CAAC;IACrE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACzC,yBAAyB,CAAC,MAAM,CAAC;AACjC,IAAA,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,MAAM,EACN,CAAA,EAAG,4BAA4B,GAAG,OAAO,CAAC,GAAG,CAAA,CAAE,CAChD;AACD,IAAA,IAAI,iBAAiB,CAAC,IAAI,KAAK,CAAC,EAAE;AAChC,QAAA,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAK;YACxB,KAAK,MAAM,MAAM,IAAI,iBAAiB,CAAC,MAAM,EAAE,EAAE;AAC/C,gBAAA,IAAI;AACF,oBAAA,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;gBACrD;AAAE,gBAAA,MAAM;;gBAER;YACF;AACF,QAAA,CAAC,CAAC;IACJ;AACA,IAAA,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC;AAC3C,IAAA,OAAO,SAAS;AAClB;;;;"}

package/lib/core/transform/tracker/broker/usesWatchBroker.d.cts

@@ -3,13 +3,13 @@ import type { TtscTransformFilesystemOperations } from "../../filesystem/TtscTra
  * Whether a tracker over `filesystem` opens its watches in the isolated watch
  * broker rather than in this process.
  *
- * The host filesystem on Windows and macOS does: Windows so that a native
- * fs-event abort cannot take the host down, and macOS so that each watch is its
- * own FSEventStream, whose dropped events are reported, rather than one libuv
- * re-creates whenever any watch in the host opens or closes, and whose drops it
- * discards (samchon/ttsc#1418, samchon/ttsc#1425). An embedder that supplies
- * its own `watch` retains that capability, including for a host-filesystem
- * view.
+ * The host filesystem on Windows and macOS does: Windows so that native
+ * mutation filters exclude access-time noise without a Node fs-event handle,
+ * and macOS so that each watch is its own FSEventStream, whose dropped events
+ * are reported, rather than one libuv re-creates whenever any watch in the host
+ * opens or closes, and whose drops it discards (samchon/ttsc#1418,
+ * samchon/ttsc#1425). An embedder that supplies its own `watch` retains that
+ * capability, including for a host-filesystem view.
  *
  * @evidence contracts/common.md#principled-implementation
  *   A supplied filesystem watcher is authoritative; only the native host

package/lib/core/transform/tracker/broker/usesWatchBroker.d.mts

@@ -3,13 +3,13 @@ import type { TtscTransformFilesystemOperations } from "../../filesystem/TtscTra
  * Whether a tracker over `filesystem` opens its watches in the isolated watch
  * broker rather than in this process.
  *
- * The host filesystem on Windows and macOS does: Windows so that a native
- * fs-event abort cannot take the host down, and macOS so that each watch is its
- * own FSEventStream, whose dropped events are reported, rather than one libuv
- * re-creates whenever any watch in the host opens or closes, and whose drops it
- * discards (samchon/ttsc#1418, samchon/ttsc#1425). An embedder that supplies
- * its own `watch` retains that capability, including for a host-filesystem
- * view.
+ * The host filesystem on Windows and macOS does: Windows so that native
+ * mutation filters exclude access-time noise without a Node fs-event handle,
+ * and macOS so that each watch is its own FSEventStream, whose dropped events
+ * are reported, rather than one libuv re-creates whenever any watch in the host
+ * opens or closes, and whose drops it discards (samchon/ttsc#1418,
+ * samchon/ttsc#1425). An embedder that supplies its own `watch` retains that
+ * capability, including for a host-filesystem view.
  *
  * @evidence contracts/common.md#principled-implementation
  *   A supplied filesystem watcher is authoritative; only the native host

package/lib/core/transform/tracker/broker/usesWatchBroker.d.ts

@@ -3,13 +3,13 @@ import type { TtscTransformFilesystemOperations } from "../../filesystem/TtscTra
  * Whether a tracker over `filesystem` opens its watches in the isolated watch
  * broker rather than in this process.
  *
- * The host filesystem on Windows and macOS does: Windows so that a native
- * fs-event abort cannot take the host down, and macOS so that each watch is its
- * own FSEventStream, whose dropped events are reported, rather than one libuv
- * re-creates whenever any watch in the host opens or closes, and whose drops it
- * discards (samchon/ttsc#1418, samchon/ttsc#1425). An embedder that supplies
- * its own `watch` retains that capability, including for a host-filesystem
- * view.
+ * The host filesystem on Windows and macOS does: Windows so that native
+ * mutation filters exclude access-time noise without a Node fs-event handle,
+ * and macOS so that each watch is its own FSEventStream, whose dropped events
+ * are reported, rather than one libuv re-creates whenever any watch in the host
+ * opens or closes, and whose drops it discards (samchon/ttsc#1418,
+ * samchon/ttsc#1425). An embedder that supplies its own `watch` retains that
+ * capability, including for a host-filesystem view.
  *
  * @evidence contracts/common.md#principled-implementation
  *   A supplied filesystem watcher is authoritative; only the native host

package/lib/core/transform/tracker/broker/usesWatchBroker.js

@@ -4,13 +4,13 @@
  * Whether a tracker over `filesystem` opens its watches in the isolated watch
  * broker rather than in this process.
  *
- * The host filesystem on Windows and macOS does: Windows so that a native
- * fs-event abort cannot take the host down, and macOS so that each watch is its
- * own FSEventStream, whose dropped events are reported, rather than one libuv
- * re-creates whenever any watch in the host opens or closes, and whose drops it
- * discards (samchon/ttsc#1418, samchon/ttsc#1425). An embedder that supplies
- * its own `watch` retains that capability, including for a host-filesystem
- * view.
+ * The host filesystem on Windows and macOS does: Windows so that native
+ * mutation filters exclude access-time noise without a Node fs-event handle,
+ * and macOS so that each watch is its own FSEventStream, whose dropped events
+ * are reported, rather than one libuv re-creates whenever any watch in the host
+ * opens or closes, and whose drops it discards (samchon/ttsc#1418,
+ * samchon/ttsc#1425). An embedder that supplies its own `watch` retains that
+ * capability, including for a host-filesystem view.
  *
  * @evidence contracts/common.md#principled-implementation
  *   A supplied filesystem watcher is authoritative; only the native host

package/lib/core/transform/tracker/broker/usesWatchBroker.mjs

@@ -2,13 +2,13 @@
  * Whether a tracker over `filesystem` opens its watches in the isolated watch
  * broker rather than in this process.
  *
- * The host filesystem on Windows and macOS does: Windows so that a native
- * fs-event abort cannot take the host down, and macOS so that each watch is its
- * own FSEventStream, whose dropped events are reported, rather than one libuv
- * re-creates whenever any watch in the host opens or closes, and whose drops it
- * discards (samchon/ttsc#1418, samchon/ttsc#1425). An embedder that supplies
- * its own `watch` retains that capability, including for a host-filesystem
- * view.
+ * The host filesystem on Windows and macOS does: Windows so that native
+ * mutation filters exclude access-time noise without a Node fs-event handle,
+ * and macOS so that each watch is its own FSEventStream, whose dropped events
+ * are reported, rather than one libuv re-creates whenever any watch in the host
+ * opens or closes, and whose drops it discards (samchon/ttsc#1418,
+ * samchon/ttsc#1425). An embedder that supplies its own `watch` retains that
+ * capability, including for a host-filesystem view.
  *
  * @evidence contracts/common.md#principled-implementation
  *   A supplied filesystem watcher is authoritative; only the native host

package/lib/core/transform/tracker/broker/watchBrokerSource.d.cts

@@ -6,13 +6,10 @@
  * frontier described below; a reply alone does not certify every scope, since
  * probe-dependent streams can be named unproven and gaps withdraw authority.
  *
- * On Windows the watches are `fs.watch`. A drain yields through two immediate
- * turns to allow the loop to poll and deliver queued callbacks before replying.
- * The real Windows scenario checks two hundred synchronous write/drain pairs;
- * the scripted unit checks this scheduling boundary separately. These checks
- * are not a universal kernel-order proof: FIFO completion-port queueing alone
- * does not guarantee dequeue order or establish when notification completion
- * becomes observable relative to a write and IPC request.
+ * Windows production registrations use ttsc's native helper, not this program
+ * (#1719). The optional fs.watch backend remains an explicit direct program
+ * capability used by its scripted protocol tests; it never supplies Windows
+ * production cache proof. Its drain yields through two immediate turns.
  *
  * On macOS the watches go through the `fsevents` binding, one FSEventStream per
  * location, instead of relying on `fs.watch` for stream and loss authority
@@ -57,11 +54,13 @@
  *   The child protocol keeps per-registration streams and ordered drains;
  *   macOS proof requires clean probe delivery. Loss flags withdraw coverage
  *   before probe recognition, so matching a probe name cannot erase that warning.
- *   The Windows two-turn frontier retains its runtime/backend ordering premise;
+ *   The optional fs.watch two-turn frontier retains its runtime/backend ordering premise;
  *   this source does not independently prove kernel completeness.
  * @evidence contracts/common.md#clear-and-simple-design
- *   One maintained child program serves both native backends; this function only
- *   injects resolved capability and the shared timeout, with JSON-safe path encoding.
+ *   One maintained child program serves macOS and the explicitly selected
+ *   fs.watch protocol capability; Windows production uses its native helper.
+ *   This function injects resolved capability and the shared timeout with
+ *   JSON-safe path encoding.
  * @evidence contracts/common.md#prohibited-implementation-shortcuts
  *   Native flags and deadlines express backend contracts, not fixture-specific
  *   repairs. Missing bindings and probes report uncertainty rather than silent success.

package/lib/core/transform/tracker/broker/watchBrokerSource.d.mts

@@ -6,13 +6,10 @@
  * frontier described below; a reply alone does not certify every scope, since
  * probe-dependent streams can be named unproven and gaps withdraw authority.
  *
- * On Windows the watches are `fs.watch`. A drain yields through two immediate
- * turns to allow the loop to poll and deliver queued callbacks before replying.
- * The real Windows scenario checks two hundred synchronous write/drain pairs;
- * the scripted unit checks this scheduling boundary separately. These checks
- * are not a universal kernel-order proof: FIFO completion-port queueing alone
- * does not guarantee dequeue order or establish when notification completion
- * becomes observable relative to a write and IPC request.
+ * Windows production registrations use ttsc's native helper, not this program
+ * (#1719). The optional fs.watch backend remains an explicit direct program
+ * capability used by its scripted protocol tests; it never supplies Windows
+ * production cache proof. Its drain yields through two immediate turns.
  *
  * On macOS the watches go through the `fsevents` binding, one FSEventStream per
  * location, instead of relying on `fs.watch` for stream and loss authority
@@ -57,11 +54,13 @@
  *   The child protocol keeps per-registration streams and ordered drains;
  *   macOS proof requires clean probe delivery. Loss flags withdraw coverage
  *   before probe recognition, so matching a probe name cannot erase that warning.
- *   The Windows two-turn frontier retains its runtime/backend ordering premise;
+ *   The optional fs.watch two-turn frontier retains its runtime/backend ordering premise;
  *   this source does not independently prove kernel completeness.
  * @evidence contracts/common.md#clear-and-simple-design
- *   One maintained child program serves both native backends; this function only
- *   injects resolved capability and the shared timeout, with JSON-safe path encoding.
+ *   One maintained child program serves macOS and the explicitly selected
+ *   fs.watch protocol capability; Windows production uses its native helper.
+ *   This function injects resolved capability and the shared timeout with
+ *   JSON-safe path encoding.
  * @evidence contracts/common.md#prohibited-implementation-shortcuts
  *   Native flags and deadlines express backend contracts, not fixture-specific
  *   repairs. Missing bindings and probes report uncertainty rather than silent success.

package/lib/core/transform/tracker/broker/watchBrokerSource.d.ts

@@ -6,13 +6,10 @@
  * frontier described below; a reply alone does not certify every scope, since
  * probe-dependent streams can be named unproven and gaps withdraw authority.
  *
- * On Windows the watches are `fs.watch`. A drain yields through two immediate
- * turns to allow the loop to poll and deliver queued callbacks before replying.
- * The real Windows scenario checks two hundred synchronous write/drain pairs;
- * the scripted unit checks this scheduling boundary separately. These checks
- * are not a universal kernel-order proof: FIFO completion-port queueing alone
- * does not guarantee dequeue order or establish when notification completion
- * becomes observable relative to a write and IPC request.
+ * Windows production registrations use ttsc's native helper, not this program
+ * (#1719). The optional fs.watch backend remains an explicit direct program
+ * capability used by its scripted protocol tests; it never supplies Windows
+ * production cache proof. Its drain yields through two immediate turns.
  *
  * On macOS the watches go through the `fsevents` binding, one FSEventStream per
  * location, instead of relying on `fs.watch` for stream and loss authority
@@ -57,11 +54,13 @@
  *   The child protocol keeps per-registration streams and ordered drains;
  *   macOS proof requires clean probe delivery. Loss flags withdraw coverage
  *   before probe recognition, so matching a probe name cannot erase that warning.
- *   The Windows two-turn frontier retains its runtime/backend ordering premise;
+ *   The optional fs.watch two-turn frontier retains its runtime/backend ordering premise;
  *   this source does not independently prove kernel completeness.
  * @evidence contracts/common.md#clear-and-simple-design
- *   One maintained child program serves both native backends; this function only
- *   injects resolved capability and the shared timeout, with JSON-safe path encoding.
+ *   One maintained child program serves macOS and the explicitly selected
+ *   fs.watch protocol capability; Windows production uses its native helper.
+ *   This function injects resolved capability and the shared timeout with
+ *   JSON-safe path encoding.
  * @evidence contracts/common.md#prohibited-implementation-shortcuts
  *   Native flags and deadlines express backend contracts, not fixture-specific
  *   repairs. Missing bindings and probes report uncertainty rather than silent success.

package/lib/core/transform/tracker/broker/watchBrokerSource.js

@@ -10,13 +10,10 @@ var WATCH_PROBE_TIMEOUT_MS = require('./WATCH_PROBE_TIMEOUT_MS.js');
  * frontier described below; a reply alone does not certify every scope, since
  * probe-dependent streams can be named unproven and gaps withdraw authority.
  *
- * On Windows the watches are `fs.watch`. A drain yields through two immediate
- * turns to allow the loop to poll and deliver queued callbacks before replying.
- * The real Windows scenario checks two hundred synchronous write/drain pairs;
- * the scripted unit checks this scheduling boundary separately. These checks
- * are not a universal kernel-order proof: FIFO completion-port queueing alone
- * does not guarantee dequeue order or establish when notification completion
- * becomes observable relative to a write and IPC request.
+ * Windows production registrations use ttsc's native helper, not this program
+ * (#1719). The optional fs.watch backend remains an explicit direct program
+ * capability used by its scripted protocol tests; it never supplies Windows
+ * production cache proof. Its drain yields through two immediate turns.
  *
  * On macOS the watches go through the `fsevents` binding, one FSEventStream per
  * location, instead of relying on `fs.watch` for stream and loss authority
@@ -61,11 +58,13 @@ var WATCH_PROBE_TIMEOUT_MS = require('./WATCH_PROBE_TIMEOUT_MS.js');
  *   The child protocol keeps per-registration streams and ordered drains;
  *   macOS proof requires clean probe delivery. Loss flags withdraw coverage
  *   before probe recognition, so matching a probe name cannot erase that warning.
- *   The Windows two-turn frontier retains its runtime/backend ordering premise;
+ *   The optional fs.watch two-turn frontier retains its runtime/backend ordering premise;
  *   this source does not independently prove kernel completeness.
  * @evidence contracts/common.md#clear-and-simple-design
- *   One maintained child program serves both native backends; this function only
- *   injects resolved capability and the shared timeout, with JSON-safe path encoding.
+ *   One maintained child program serves macOS and the explicitly selected
+ *   fs.watch protocol capability; Windows production uses its native helper.
+ *   This function injects resolved capability and the shared timeout with
+ *   JSON-safe path encoding.
  * @evidence contracts/common.md#prohibited-implementation-shortcuts
  *   Native flags and deadlines express backend contracts, not fixture-specific
  *   repairs. Missing bindings and probes report uncertainty rather than silent success.
@@ -352,7 +351,7 @@ function drain(requestId) {
       entry.abandon();
     }
   }
-  // Windows watches, and streams already proven, answer after two turns: the
+  // Explicit fs.watch watches, and streams already proven, answer after two turns: the
   // first lets the loop poll for completions the kernel had already queued,
   // the second answers after their callbacks.
   outstanding += 1;

package/lib/core/transform/tracker/broker/watchBrokerSource.js.map

@@ -1 +1 @@
-{"version":3,"file":"watchBrokerSource.js","sources":["../../../../../src/core/transform/tracker/broker/watchBrokerSource.ts"],"sourcesContent":[null],"names":["WATCH_PROBE_TIMEOUT_MS"],"mappings":";;;;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmGG;AACG,SAAU,iBAAiB,CAAC,QAAwB,EAAA;IACxD,OAAO,CAAA,qBAAA,EAAwB,QAAQ,KAAK,SAAS,GAAG,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,6BAA6BA,6CAAsB,CAAA,GAAA,EAAM,oBAAoB,CAAA,CAAE;AAC/K;AAEA;;;AAGG;AACH,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoQtC;;;;"}
+{"version":3,"file":"watchBrokerSource.js","sources":["../../../../../src/core/transform/tracker/broker/watchBrokerSource.ts"],"sourcesContent":[null],"names":["WATCH_PROBE_TIMEOUT_MS"],"mappings":";;;;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkGG;AACG,SAAU,iBAAiB,CAAC,QAAwB,EAAA;IACxD,OAAO,CAAA,qBAAA,EAAwB,QAAQ,KAAK,SAAS,GAAG,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,6BAA6BA,6CAAsB,CAAA,GAAA,EAAM,oBAAoB,CAAA,CAAE;AAC/K;AAEA;;;AAGG;AACH,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoQtC;;;;"}

package/lib/core/transform/tracker/broker/watchBrokerSource.mjs

@@ -8,13 +8,10 @@ import { WATCH_PROBE_TIMEOUT_MS } from './WATCH_PROBE_TIMEOUT_MS.mjs';
  * frontier described below; a reply alone does not certify every scope, since
  * probe-dependent streams can be named unproven and gaps withdraw authority.
  *
- * On Windows the watches are `fs.watch`. A drain yields through two immediate
- * turns to allow the loop to poll and deliver queued callbacks before replying.
- * The real Windows scenario checks two hundred synchronous write/drain pairs;
- * the scripted unit checks this scheduling boundary separately. These checks
- * are not a universal kernel-order proof: FIFO completion-port queueing alone
- * does not guarantee dequeue order or establish when notification completion
- * becomes observable relative to a write and IPC request.
+ * Windows production registrations use ttsc's native helper, not this program
+ * (#1719). The optional fs.watch backend remains an explicit direct program
+ * capability used by its scripted protocol tests; it never supplies Windows
+ * production cache proof. Its drain yields through two immediate turns.
  *
  * On macOS the watches go through the `fsevents` binding, one FSEventStream per
  * location, instead of relying on `fs.watch` for stream and loss authority
@@ -59,11 +56,13 @@ import { WATCH_PROBE_TIMEOUT_MS } from './WATCH_PROBE_TIMEOUT_MS.mjs';
  *   The child protocol keeps per-registration streams and ordered drains;
  *   macOS proof requires clean probe delivery. Loss flags withdraw coverage
  *   before probe recognition, so matching a probe name cannot erase that warning.
- *   The Windows two-turn frontier retains its runtime/backend ordering premise;
+ *   The optional fs.watch two-turn frontier retains its runtime/backend ordering premise;
  *   this source does not independently prove kernel completeness.
  * @evidence contracts/common.md#clear-and-simple-design
- *   One maintained child program serves both native backends; this function only
- *   injects resolved capability and the shared timeout, with JSON-safe path encoding.
+ *   One maintained child program serves macOS and the explicitly selected
+ *   fs.watch protocol capability; Windows production uses its native helper.
+ *   This function injects resolved capability and the shared timeout with
+ *   JSON-safe path encoding.
  * @evidence contracts/common.md#prohibited-implementation-shortcuts
  *   Native flags and deadlines express backend contracts, not fixture-specific
  *   repairs. Missing bindings and probes report uncertainty rather than silent success.
@@ -350,7 +349,7 @@ function drain(requestId) {
       entry.abandon();
     }
   }
-  // Windows watches, and streams already proven, answer after two turns: the
+  // Explicit fs.watch watches, and streams already proven, answer after two turns: the
   // first lets the loop poll for completions the kernel had already queued,
   // the second answers after their callbacks.
   outstanding += 1;

package/lib/core/transform/tracker/broker/watchBrokerSource.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"watchBrokerSource.mjs","sources":["../../../../../src/core/transform/tracker/broker/watchBrokerSource.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmGG;AACG,SAAU,iBAAiB,CAAC,QAAwB,EAAA;IACxD,OAAO,CAAA,qBAAA,EAAwB,QAAQ,KAAK,SAAS,GAAG,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,6BAA6B,sBAAsB,CAAA,GAAA,EAAM,oBAAoB,CAAA,CAAE;AAC/K;AAEA;;;AAGG;AACH,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoQtC;;;;"}
+{"version":3,"file":"watchBrokerSource.mjs","sources":["../../../../../src/core/transform/tracker/broker/watchBrokerSource.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkGG;AACG,SAAU,iBAAiB,CAAC,QAAwB,EAAA;IACxD,OAAO,CAAA,qBAAA,EAAwB,QAAQ,KAAK,SAAS,GAAG,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,6BAA6B,sBAAsB,CAAA,GAAA,EAAM,oBAAoB,CAAA,CAAE;AAC/K;AAEA;;;AAGG;AACH,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoQtC;;;;"}

package/lib/core/transform/transformTtsc.d.cts

@@ -37,7 +37,7 @@ import type { TtscTransformHooks } from "./watch/TtscTransformHooks.cjs";
  *   per build, not per compilation.
  * @evidence contracts/common.md#principled-implementation Project selection and generation-qualified cache admission preserve compiler disk authority; fresh-only success additionally needs an explicit nonwatching lifecycle, coherent project declaration and actual host-cache withdrawal, because incomplete observation cannot support watch invalidation.
  * @evidence contracts/common.md#clear-and-simple-design One delivery coordinator composes project selection, cache admission, compilation, output selection and host notifications; dedicated owners handle proof and lifetime internals.
- * @evidence contracts/common.md#prohibited-implementation-shortcuts Wrapper modules cannot poison source baselines and incomplete generations cannot authorize reuse; a separately admitted fresh-only result is evicted before capability checks, unknown or watching lifecycles fail explicitly, and unsupported withdrawal cannot be replaced by a fake record or guessed dependency closure.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts Wrapper modules cannot poison source baselines; incomplete local results can share only explicitly nonwatching first deliveries in their exact pass. Unknown/watching lifecycles or unsupported withdrawal reject and evict them rather than invent persistent records or dependency closure.
  * @evidence contracts/common.md#meaningful-documentation Native paragraphs and argument tags explain project scope, no-transform outcomes, cache epochs and per-build notification responsibilities with links to maintained reference context.
  * @evidence contracts/performance.md#efficient-algorithms
  *   Selection/key construction pays ancestor/config/alias/option/path text work.
@@ -45,15 +45,18 @@ import type { TtscTransformHooks } from "./watch/TtscTransformHooks.cjs";
  *   replay source/project/external/universal proofs before selecting output.
  *   In-flight/valid completed reuse avoids compilation, not those checks or
  *   output/map/notification/record work. Capture misses pay whole native compile
- *   and input populations; concurrent supersession can repeat the outer loop
+ *   and input populations. The common proof owner skips redundant environment
+ *   preparation for proven first deliveries and shares synchronous native proof
+ *   queries; persistent/repeated delivery establishes fresh authority. Concurrent supersession can repeat the outer loop
  *   without a delivery-level retry/time bound here.
  * @evidence contracts/performance.md#reuse-equivalent-work Cache identity covers config/options/plugins/aliases; current generations, pass-qualified terminal verdicts and in-flight Promises are shared only while their source and dependency proof remains valid.
  * @evidence contracts/performance.md#bound-retention-and-release-resources
  *   Optional cache state retains current generation Promises/results and
  *   per-key dependency/case facts without a byte/key cap here. Native tasks
  *   belong to compiler/capture owners; uncached captures retain no notification
- *   or persistent clock probe. Fresh-only delivery detaches its generation
- *   before host callbacks; eviction/disposal attempt independent resource release
+ *   or persistent clock probe. Fresh-only delivery releases capture resources,
+ *   retaining only an explicitly admitted local pass result; rejected or failed
+ *   incomplete handoff detaches its generation. Eviction/disposal attempt independent resource release
  *   and native failures need not close every handle or remove every probe.
  * @evidence contracts/portability.md#os-neutral-implementation Native module paths and project coordinates use supported path/filesystem abstractions, while actual case policy and watcher capability come from generation proof rather than OS-name assumptions.
  */

package/lib/core/transform/transformTtsc.d.mts

@@ -37,7 +37,7 @@ import type { TtscTransformHooks } from "./watch/TtscTransformHooks.mjs";
  *   per build, not per compilation.
  * @evidence contracts/common.md#principled-implementation Project selection and generation-qualified cache admission preserve compiler disk authority; fresh-only success additionally needs an explicit nonwatching lifecycle, coherent project declaration and actual host-cache withdrawal, because incomplete observation cannot support watch invalidation.
  * @evidence contracts/common.md#clear-and-simple-design One delivery coordinator composes project selection, cache admission, compilation, output selection and host notifications; dedicated owners handle proof and lifetime internals.
- * @evidence contracts/common.md#prohibited-implementation-shortcuts Wrapper modules cannot poison source baselines and incomplete generations cannot authorize reuse; a separately admitted fresh-only result is evicted before capability checks, unknown or watching lifecycles fail explicitly, and unsupported withdrawal cannot be replaced by a fake record or guessed dependency closure.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts Wrapper modules cannot poison source baselines; incomplete local results can share only explicitly nonwatching first deliveries in their exact pass. Unknown/watching lifecycles or unsupported withdrawal reject and evict them rather than invent persistent records or dependency closure.
  * @evidence contracts/common.md#meaningful-documentation Native paragraphs and argument tags explain project scope, no-transform outcomes, cache epochs and per-build notification responsibilities with links to maintained reference context.
  * @evidence contracts/performance.md#efficient-algorithms
  *   Selection/key construction pays ancestor/config/alias/option/path text work.
@@ -45,15 +45,18 @@ import type { TtscTransformHooks } from "./watch/TtscTransformHooks.mjs";
  *   replay source/project/external/universal proofs before selecting output.
  *   In-flight/valid completed reuse avoids compilation, not those checks or
  *   output/map/notification/record work. Capture misses pay whole native compile
- *   and input populations; concurrent supersession can repeat the outer loop
+ *   and input populations. The common proof owner skips redundant environment
+ *   preparation for proven first deliveries and shares synchronous native proof
+ *   queries; persistent/repeated delivery establishes fresh authority. Concurrent supersession can repeat the outer loop
  *   without a delivery-level retry/time bound here.
  * @evidence contracts/performance.md#reuse-equivalent-work Cache identity covers config/options/plugins/aliases; current generations, pass-qualified terminal verdicts and in-flight Promises are shared only while their source and dependency proof remains valid.
  * @evidence contracts/performance.md#bound-retention-and-release-resources
  *   Optional cache state retains current generation Promises/results and
  *   per-key dependency/case facts without a byte/key cap here. Native tasks
  *   belong to compiler/capture owners; uncached captures retain no notification
- *   or persistent clock probe. Fresh-only delivery detaches its generation
- *   before host callbacks; eviction/disposal attempt independent resource release
+ *   or persistent clock probe. Fresh-only delivery releases capture resources,
+ *   retaining only an explicitly admitted local pass result; rejected or failed
+ *   incomplete handoff detaches its generation. Eviction/disposal attempt independent resource release
  *   and native failures need not close every handle or remove every probe.
  * @evidence contracts/portability.md#os-neutral-implementation Native module paths and project coordinates use supported path/filesystem abstractions, while actual case policy and watcher capability come from generation proof rather than OS-name assumptions.
  */

package/lib/core/transform/transformTtsc.d.ts

@@ -37,7 +37,7 @@ import type { TtscTransformHooks } from "./watch/TtscTransformHooks";
  *   per build, not per compilation.
  * @evidence contracts/common.md#principled-implementation Project selection and generation-qualified cache admission preserve compiler disk authority; fresh-only success additionally needs an explicit nonwatching lifecycle, coherent project declaration and actual host-cache withdrawal, because incomplete observation cannot support watch invalidation.
  * @evidence contracts/common.md#clear-and-simple-design One delivery coordinator composes project selection, cache admission, compilation, output selection and host notifications; dedicated owners handle proof and lifetime internals.
- * @evidence contracts/common.md#prohibited-implementation-shortcuts Wrapper modules cannot poison source baselines and incomplete generations cannot authorize reuse; a separately admitted fresh-only result is evicted before capability checks, unknown or watching lifecycles fail explicitly, and unsupported withdrawal cannot be replaced by a fake record or guessed dependency closure.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts Wrapper modules cannot poison source baselines; incomplete local results can share only explicitly nonwatching first deliveries in their exact pass. Unknown/watching lifecycles or unsupported withdrawal reject and evict them rather than invent persistent records or dependency closure.
  * @evidence contracts/common.md#meaningful-documentation Native paragraphs and argument tags explain project scope, no-transform outcomes, cache epochs and per-build notification responsibilities with links to maintained reference context.
  * @evidence contracts/performance.md#efficient-algorithms
  *   Selection/key construction pays ancestor/config/alias/option/path text work.
@@ -45,15 +45,18 @@ import type { TtscTransformHooks } from "./watch/TtscTransformHooks";
  *   replay source/project/external/universal proofs before selecting output.
  *   In-flight/valid completed reuse avoids compilation, not those checks or
  *   output/map/notification/record work. Capture misses pay whole native compile
- *   and input populations; concurrent supersession can repeat the outer loop
+ *   and input populations. The common proof owner skips redundant environment
+ *   preparation for proven first deliveries and shares synchronous native proof
+ *   queries; persistent/repeated delivery establishes fresh authority. Concurrent supersession can repeat the outer loop
  *   without a delivery-level retry/time bound here.
  * @evidence contracts/performance.md#reuse-equivalent-work Cache identity covers config/options/plugins/aliases; current generations, pass-qualified terminal verdicts and in-flight Promises are shared only while their source and dependency proof remains valid.
  * @evidence contracts/performance.md#bound-retention-and-release-resources
  *   Optional cache state retains current generation Promises/results and
  *   per-key dependency/case facts without a byte/key cap here. Native tasks
  *   belong to compiler/capture owners; uncached captures retain no notification
- *   or persistent clock probe. Fresh-only delivery detaches its generation
- *   before host callbacks; eviction/disposal attempt independent resource release
+ *   or persistent clock probe. Fresh-only delivery releases capture resources,
+ *   retaining only an explicitly admitted local pass result; rejected or failed
+ *   incomplete handoff detaches its generation. Eviction/disposal attempt independent resource release
  *   and native failures need not close every handle or remove every probe.
  * @evidence contracts/portability.md#os-neutral-implementation Native module paths and project coordinates use supported path/filesystem abstractions, while actual case policy and watcher capability come from generation proof rather than OS-name assumptions.
  */