bug(lsp): order changes behind pending document authorization #922

Expected behavior

Authorization, open, change and close share ordered document admission. Latest admitted text must not disappear while a document is authorizing/opening.

Source finding and impact

Open registers renderer ownership before awaiting authorizeContext inside an IPC document queue. change-document sees that ownership but bypasses the queue and calls changeDocument before the corresponding manager open can exist.

Evidence and environment

Inspected source at 552914f5610518458f944fa1bdaf63f243685bd1 on 2026-09-12 in the local macOS workspace. This finding has not yet been reproduced through a running application or the package integration suite.

• src/main/ipc/lsp.ts
• src/main/lspManager.ts

Regression and acceptance

Pause authorization after ownership publication, send a change and release authorization. Real IPC+manager composition must open/synchronize the latest accepted revision, or explicitly reject the change; never acknowledge a silent loss. Include navigation and authorization failure.

The resolving PR must protect the observable contract and document any remaining uncertainty. This planning pass makes no runtime changes.

Refs #918; planning finding F09.