@0k/pdf-viewer 0.2.0 → 0.2.1

package/README.md

@@ -116,9 +116,17 @@ error reason are preserved.
   Idempotent, including before loading completes.
 
 Paging and zoom methods do nothing unless the document is ready.
-Mounting again on the same host replaces its viewer and waits for the
-previous owner's teardown before creating a new worker. An old owner
-cannot destroy the replacement.
+Mounting again on the same host replaces its viewer. Across all hosts
+using this module, every worker startup waits for all pending
+loading-task teardowns to settle, whether resolved or rejected. A host
+can call an old owner's `destroy()` without awaiting it and mount on a
+new element: the new worker will not overlap that pending teardown. This
+also applies to `reload()`. Only pending teardowns are retained; settled
+ones are removed. A failed teardown is logged and does not block
+startup, but may leave its worker running. A slow teardown delays
+startup of every later viewer in the module (across all hosts); a
+teardown that never settles holds them back indefinitely. An old owner
+cannot destroy a replacement or a viewer on another host.
 
 ### Exported constants
 
@@ -212,6 +220,26 @@ To try an unreleased change in a host, link the checkout there:
 ## Changelog
 
 
+### 0.2.1 (2026-11-06)
+
+#### Fix
+
+* Start a viewer's ``PDF.js`` worker only after all pending teardowns on any host settle. [Valentin Lab]
+
+  Hosts that mount each document on a new element can switch documents
+  without awaiting the old owner: the next worker now waits for every
+  loading-task teardown already under way in the module, whatever its
+  host.  Switching documents no longer runs the old and the new worker
+  side by side, which bounds worker memory on phones.
+
+  A failed teardown is logged and does not block startup, but ``PDF.js`` may
+  leave its worker running.  A slow teardown delays every later viewer of
+  the module; one that never settles holds them back.  Settled teardowns,
+  resolved or rejected, are dropped from the module-wide tracking, and
+  reload ordering, same-host replacement and owner isolation are
+  preserved.
+
+
 ### 0.2.0 (2026-10-28)
 
 #### New

package/dist/index.d.ts

@@ -98,8 +98,12 @@ export interface PdfViewerOwner {
 /**
  * Mount a viewer into `host` and start loading `options.url`.
  *
- * Mounting twice on one host replaces the previous viewer, releasing its
- * loading task before the replacement starts its worker. The returned
- * owner acts only on the viewer it mounted.
+ * Mounting twice on one host replaces the previous viewer. On any host,
+ * worker startup waits for every pending loading-task teardown in this
+ * module to settle, including rejected teardowns. Hosts need not await
+ * an old owner's destroy() before mounting on a new element. The returned
+ * owner acts only on the viewer it mounted. A failed teardown is logged
+ * and allows startup, but may leave its worker running. A slow or never
+ * settling teardown delays or blocks startup across all hosts.
  */
 export declare function mountPdfViewer(host: HTMLElement, options: PdfViewerOptions): PdfViewerOwner;

package/dist/index.js

@@ -12,10 +12,12 @@
  * - ⚠ The LOADING TASK is the sole owner of worker/transport teardown.
  *   The runtime's `PdfDocument` has no `destroy`, so `doc.destroy()` is a
  *   compile error rather than a second path to the same worker.
- * - ⚠ Teardown → startup is SERIALIZED. A reload awaits the previous
- *   task's `destroy()` (settled, rejection tolerated) before importing
- *   the runtime or creating a worker; two workers overlapping blanks the
- *   canvas on WebView 91.
+ * - ⚠ Teardown → startup is SERIALIZED across hosts. A reload awaits its
+ *   previous task's `destroy()` before importing the runtime; every load
+ *   awaits all pending task teardowns (settled, rejection tolerated)
+ *   before creating a worker. Failed teardown is logged and does not
+ *   block startup, but may leave its worker running. Overlap can blank
+ *   the canvas on WebView 91.
  * - ⚠ The DISPLAYED page is never `cleanup()`-ed. Releasing it right
  *   after `render()` resolves can race the first compositor flush and
  *   lose the paint. Only stale, cancelled or errored renders — whose
@@ -68,6 +70,8 @@ export const DEFAULT_PDF_VIEWER_LABELS = {
     loading: "Loading…",
     failed: "Failed to load PDF: %{reason}",
 };
+/** Only unsettled task teardowns are retained, regardless of their host. */
+const pendingTaskDestructions = new Set();
 /**
  * Internal renderer state, never returned to hosts. The public owner is a
  * frozen facade whose closures call this instance with its original receiver,
@@ -637,7 +641,17 @@ class Viewer {
         if (this.taskDestructions.has(task))
             return;
         const destruction = task.destroy()
-            .catch((reason) => console.error("pdf-viewer: task.destroy failed", reason));
+            .catch((reason) => {
+            try {
+                console.error("pdf-viewer: task.destroy failed", reason);
+            }
+            catch {
+                // A throwing host logger must not reject the teardown/startup barrier.
+            }
+        });
+        pendingTaskDestructions.add(destruction);
+        const forget = () => { pendingTaskDestructions.delete(destruction); };
+        void destruction.then(forget, forget);
         this.taskDestructions.set(task, destruction);
         this.pendingDestroy = Promise.all([this.pendingDestroy, destruction]).then(() => undefined);
     }
@@ -666,6 +680,13 @@ class Viewer {
             const runtime = await loadPdfRuntime();
             if (superseded())
                 return;
+            // Check after the import and after every wait: another host may
+            // begin teardown while either await is parked.
+            while (pendingTaskDestructions.size > 0) {
+                await Promise.all(pendingTaskDestructions);
+                if (superseded())
+                    return;
+            }
             task = runtime.getDocument({
                 url: this.options.url,
                 disableAutoFetch: true,
@@ -972,9 +993,13 @@ const viewerOf = new WeakMap();
 /**
  * Mount a viewer into `host` and start loading `options.url`.
  *
- * Mounting twice on one host replaces the previous viewer, releasing its
- * loading task before the replacement starts its worker. The returned
- * owner acts only on the viewer it mounted.
+ * Mounting twice on one host replaces the previous viewer. On any host,
+ * worker startup waits for every pending loading-task teardown in this
+ * module to settle, including rejected teardowns. Hosts need not await
+ * an old owner's destroy() before mounting on a new element. The returned
+ * owner acts only on the viewer it mounted. A failed teardown is logged
+ * and allows startup, but may leave its worker running. A slow or never
+ * settling teardown delays or blocks startup across all hosts.
  */
 export function mountPdfViewer(host, options) {
     const previous = viewerOf.get(host);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@0k/pdf-viewer",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Plain-DOM PDF page viewer over the shared PDF.js legacy runtime: paging, zoom, pinch/pan, error/retry and single-owner teardown.",
   "keywords": [
     "pdf",