@kontsedal/olas-cross-tab 0.0.1-rc.1 → 0.0.2

package/dist/index.cjs

@@ -94,9 +94,18 @@ function crossTabPlugin(options) {
 	probe.close();
 	const sourceId = makeSourceId();
 	let msgIdCounter = 0;
+	const MAX_PEERS = 64;
 	const seenByPeer = /* @__PURE__ */ new Map();
 	let api = null;
 	let channel = null;
+	const recordPeerMsg = (peerId, msgId) => {
+		if (seenByPeer.has(peerId)) seenByPeer.delete(peerId);
+		seenByPeer.set(peerId, msgId);
+		if (seenByPeer.size > MAX_PEERS) {
+			const oldest = seenByPeer.keys().next().value;
+			if (oldest !== void 0) seenByPeer.delete(oldest);
+		}
+	};
 	const listener = (event) => {
 		const msg = event.data;
 		if (!msg || typeof msg !== "object") return;
@@ -105,7 +114,7 @@ function crossTabPlugin(options) {
 		if (typeof msg.sourceId !== "string" || typeof msg.msgId !== "number") return;
 		const last = seenByPeer.get(msg.sourceId) ?? -1;
 		if (msg.msgId <= last) return;
-		seenByPeer.set(msg.sourceId, msg.msgId);
+		recordPeerMsg(msg.sourceId, msg.msgId);
 		if (msg.type === "setData") {
 			if (typeof msg.queryId !== "string" || !Array.isArray(msg.keyArgs)) {
 				onWarn("[olas/cross-tab] malformed setData message");
@@ -131,14 +140,18 @@ function crossTabPlugin(options) {
 			onWarn(`[olas/cross-tab] failed to broadcast ${msg.type} for queryId="${msg.queryId}": data is not structured-cloneable`, cause);
 		}
 	};
+	let initialized = false;
 	return {
 		init(a) {
+			if (initialized) throw new Error("[olas/cross-tab] crossTabPlugin instance reused across multiple roots. Each root must get its own `crossTabPlugin({ ... })`.");
+			initialized = true;
 			api = a;
 			channel = factory(channelName) ?? null;
 			channel?.addEventListener("message", listener);
 		},
 		onSetData(event) {
 			if (event.isRemote) return;
+			if (event.source === "fetch") return;
 			if (event.kind !== "data") return;
 			if (!shouldBroadcast(event.queryId)) return;
 			send({
@@ -172,6 +185,8 @@ function crossTabPlugin(options) {
 				channel = null;
 			}
 			api = null;
+			seenByPeer.clear();
+			initialized = false;
 		}
 	};
 }

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":[],"sources":["../src/channel.ts","../src/protocol.ts","../src/plugin.ts"],"sourcesContent":["/**\n * Tiny `BroadcastChannel`-shaped abstraction. Lets tests inject a fake\n * (a shared in-memory bus across multiple \"tabs\" in the same process) and\n * keeps SSR-safety in one place — when `BroadcastChannel` is absent and\n * no `channelFactory` override is supplied, the plugin returns a no-op\n * variant up the stack.\n */\n\nexport type ChannelLike = {\n  postMessage(data: unknown): void\n  addEventListener(type: 'message', listener: (event: { data: unknown }) => void): void\n  removeEventListener(type: 'message', listener: (event: { data: unknown }) => void): void\n  close(): void\n}\n\n/**\n * Default factory: wraps the platform `BroadcastChannel`. Returns\n * `undefined` when `BroadcastChannel` is not defined (SSR / Node without\n * `--experimental-broadcastchannel`, older browsers).\n */\nexport function defaultChannelFactory(name: string): ChannelLike | undefined {\n  if (typeof BroadcastChannel === 'undefined') return undefined\n  const ch = new BroadcastChannel(name)\n  return {\n    postMessage(data) {\n      ch.postMessage(data)\n    },\n    addEventListener(type, listener) {\n      // The platform BroadcastChannel typing wants a `MessageEvent`\n      // listener, but we only care about `event.data` — cast through\n      // `unknown` since the shapes don't structurally overlap.\n      ch.addEventListener(type, listener as unknown as EventListener)\n    },\n    removeEventListener(type, listener) {\n      ch.removeEventListener(type, listener as unknown as EventListener)\n    },\n    close() {\n      ch.close()\n    },\n  }\n}\n","/**\n * Wire protocol for `@kontsedal/olas-cross-tab` messages. SPEC §13.2.\n *\n * `v` (protocol version) and `sourceId` (per-plugin-instance unique tag)\n * combine to make the three-layer echo prevention work:\n *\n * 1. Sender skips broadcast when `SetDataEvent.isRemote === true` (the\n *    write originated from `applyRemoteSetData`).\n * 2. Receiver filters its own `sourceId` (catches the case where the\n *    transport echoes the message back to the sender).\n * 3. Receiver dedupes by `(sourceId, msgId)` — duplicate or out-of-order\n *    messages from the same peer are dropped.\n *\n * Receivers also drop messages with a `v` they don't understand. The\n * channel name itself is user-supplied; consumers who want clean\n * cross-deploy isolation should embed a version in their `channelName`.\n */\n\nexport const PROTOCOL_VERSION = 1\n\nexport type SetDataMessage = {\n  v: typeof PROTOCOL_VERSION\n  type: 'setData'\n  sourceId: string\n  msgId: number\n  queryId: string\n  keyArgs: readonly unknown[]\n  data: unknown\n}\n\nexport type InvalidateMessage = {\n  v: typeof PROTOCOL_VERSION\n  type: 'invalidate'\n  sourceId: string\n  msgId: number\n  queryId: string\n  keyArgs: readonly unknown[]\n}\n\nexport type Message = SetDataMessage | InvalidateMessage\n","import {\n  type GcEvent,\n  type InvalidateEvent,\n  lookupRegisteredQuery,\n  type QueryClientPlugin,\n  type QueryClientPluginApi,\n  type SetDataEvent,\n} from '@kontsedal/olas-core'\nimport { type ChannelLike, defaultChannelFactory } from './channel'\nimport { type Message, PROTOCOL_VERSION } from './protocol'\n\n/**\n * Options accepted by `crossTabPlugin(...)`. SPEC §13.2.\n *\n * - `channelName` — name of the `BroadcastChannel`. Required. Users who\n *   want clean cross-deploy isolation should include a version suffix\n *   (e.g. `'my-app/cache/v2'`).\n * - `onWarn` — called for non-fatal conditions: a `DataCloneError` while\n *   posting (the data isn't structured-cloneable), or a malformed\n *   inbound message. Default: `console.warn`.\n * - `channelFactory` — override the channel constructor. Mainly for\n *   tests that share an in-memory bus across two QueryClients.\n */\nexport type CrossTabOptions = {\n  channelName: string\n  onWarn?: (message: string, cause?: unknown) => void\n  channelFactory?: (name: string) => ChannelLike | undefined\n}\n\n/**\n * Generate a unique-enough source id for a plugin instance. Combines\n * `Date.now()` with `Math.random()` — collisions across same-millisecond\n * tab-opens are negligible at one-decimal-place randomness, and even a\n * collision only loses dedup, not correctness.\n */\nfunction makeSourceId(): string {\n  const rand = Math.random().toString(36).slice(2, 10)\n  return `${Date.now().toString(36)}-${rand}`\n}\n\nconst NOOP_PLUGIN: QueryClientPlugin = {}\n\n/**\n * Cross-tab cache sync over `BroadcastChannel`. Mirrors `setData` /\n * `invalidate` writes across tabs of the same origin.\n *\n * Wire it up via `RootOptions.plugins`:\n *\n * ```ts\n * createRoot(appController, {\n *   deps,\n *   plugins: [crossTabPlugin({ channelName: 'my-app/cache/v1' })],\n * })\n * ```\n *\n * Queries must opt in via `defineQuery({ queryId: '<unique>', crossTab: true })`\n * — the `queryId` routes inbound messages back to the right query, and\n * `crossTab: true` is the per-query opt-in (queries that don't set it are\n * ignored by the sender so module-internal queries don't leak).\n *\n * **SSR safety.** When `BroadcastChannel` is not defined (Node, older\n * browsers without the feature) and no `channelFactory` override is\n * supplied, the function returns a no-op plugin object. The root still\n * boots cleanly; cross-tab is just disabled.\n *\n * **Non-cloneable data.** `BroadcastChannel` uses structured clone. Cache\n * data containing functions, class instances, or symbols throws a\n * `DataCloneError` at `postMessage`. The plugin catches the throw, calls\n * `onWarn(...)`, and drops the message — the sender's cache is unaffected.\n */\nexport function crossTabPlugin(options: CrossTabOptions): QueryClientPlugin {\n  const channelName = options.channelName\n  const onWarn = options.onWarn ?? defaultWarn\n  const factory = options.channelFactory ?? defaultChannelFactory\n\n  // Cheap probe — if the environment can't produce a channel at all we can\n  // return a no-op plugin without opening anything. The real channel opens\n  // lazily in `init` so a plugin that's constructed but never passed to a\n  // root doesn't leak a BroadcastChannel.\n  const probe = factory(channelName)\n  if (!probe) {\n    // SSR / unsupported environment. Caller's plugin slot still receives a\n    // valid plugin object; it just does nothing.\n    return NOOP_PLUGIN\n  }\n  probe.close()\n\n  const sourceId = makeSourceId()\n  let msgIdCounter = 0\n  const seenByPeer = new Map<string, number>()\n  let api: QueryClientPluginApi | null = null\n  let channel: ChannelLike | null = null\n\n  const listener = (event: { data: unknown }) => {\n    const msg = event.data as Partial<Message> | null\n    if (!msg || typeof msg !== 'object') return\n    // Layer 1 — protocol version drop.\n    if (msg.v !== PROTOCOL_VERSION) return\n    // Layer 2 — own-source drop (transport echoed our own message back).\n    if (msg.sourceId === sourceId) return\n    // Layer 3 — out-of-order / duplicate drop.\n    if (typeof msg.sourceId !== 'string' || typeof msg.msgId !== 'number') return\n    const last = seenByPeer.get(msg.sourceId) ?? -1\n    if (msg.msgId <= last) return\n    seenByPeer.set(msg.sourceId, msg.msgId)\n\n    if (msg.type === 'setData') {\n      if (typeof msg.queryId !== 'string' || !Array.isArray(msg.keyArgs)) {\n        onWarn('[olas/cross-tab] malformed setData message')\n        return\n      }\n      api?.applyRemoteSetData(msg.queryId, msg.keyArgs, msg.data)\n      return\n    }\n    if (msg.type === 'invalidate') {\n      if (typeof msg.queryId !== 'string' || !Array.isArray(msg.keyArgs)) {\n        onWarn('[olas/cross-tab] malformed invalidate message')\n        return\n      }\n      api?.applyRemoteInvalidate(msg.queryId, msg.keyArgs)\n      return\n    }\n  }\n\n  const send = (msg: Message): void => {\n    if (channel === null) return\n    try {\n      channel.postMessage(msg)\n    } catch (cause) {\n      // Structured clone failed — most likely non-cloneable data on a\n      // setData payload. Warn and drop.\n      onWarn(\n        `[olas/cross-tab] failed to broadcast ${msg.type} for queryId=\"${msg.queryId}\": data is not structured-cloneable`,\n        cause,\n      )\n    }\n  }\n\n  return {\n    init(a) {\n      api = a\n      channel = factory(channelName) ?? null\n      channel?.addEventListener('message', listener)\n    },\n\n    onSetData(event: SetDataEvent) {\n      // Don't echo inbound writes — Layer-1 sender-side echo prevention.\n      if (event.isRemote) return\n      // Infinite queries are deferred for v1 — see SPEC §13.2.\n      if (event.kind !== 'data') return\n      if (!shouldBroadcast(event.queryId)) return\n\n      send({\n        v: PROTOCOL_VERSION,\n        type: 'setData',\n        sourceId,\n        msgId: ++msgIdCounter,\n        queryId: event.queryId,\n        keyArgs: event.keyArgs,\n        data: event.data,\n      })\n    },\n\n    onInvalidate(event: InvalidateEvent) {\n      if (event.isRemote) return\n      if (event.kind !== 'data') return\n      if (!shouldBroadcast(event.queryId)) return\n\n      send({\n        v: PROTOCOL_VERSION,\n        type: 'invalidate',\n        sourceId,\n        msgId: ++msgIdCounter,\n        queryId: event.queryId,\n        keyArgs: event.keyArgs,\n      })\n    },\n\n    onGc(_event: GcEvent) {\n      // GC is local — we don't propagate it. Each tab gc's its own entries\n      // when its own subscribers drop.\n    },\n\n    dispose() {\n      if (channel !== null) {\n        channel.removeEventListener('message', listener)\n        channel.close()\n        channel = null\n      }\n      api = null\n    },\n  }\n}\n\nfunction defaultWarn(message: string, cause?: unknown): void {\n  if (cause !== undefined) {\n    console.warn(message, cause)\n  } else {\n    console.warn(message)\n  }\n}\n\n/**\n * Per-query gate. `crossTab: true` is a static opt-in on the spec; the\n * QueryClient doesn't filter on it (its events fire for every query that\n * has a `queryId`), so the plugin checks here. We look it up from the\n * core's query registry on every event — no caching, since the registry\n * lookup is a Map.get.\n */\nfunction shouldBroadcast(queryId: string): boolean {\n  const registered = lookupRegisteredQuery(queryId)\n  if (!registered) return false\n  return registered.__spec.crossTab === true\n}\n"],"mappings":";;;;;;;;AAoBA,SAAgB,sBAAsB,MAAuC;CAC3E,IAAI,OAAO,qBAAqB,aAAa,OAAO,KAAA;CACpD,MAAM,KAAK,IAAI,iBAAiB,IAAI;CACpC,OAAO;EACL,YAAY,MAAM;GAChB,GAAG,YAAY,IAAI;EACrB;EACA,iBAAiB,MAAM,UAAU;GAI/B,GAAG,iBAAiB,MAAM,QAAoC;EAChE;EACA,oBAAoB,MAAM,UAAU;GAClC,GAAG,oBAAoB,MAAM,QAAoC;EACnE;EACA,QAAQ;GACN,GAAG,MAAM;EACX;CACF;AACF;;;;;;;;;;;;;;;;;;;;ACtBA,MAAa,mBAAmB;;;;;;;;;ACiBhC,SAAS,eAAuB;CAC9B,MAAM,OAAO,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE;CACnD,OAAO,GAAG,KAAK,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG;AACvC;AAEA,MAAM,cAAiC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BxC,SAAgB,eAAe,SAA6C;CAC1E,MAAM,cAAc,QAAQ;CAC5B,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,UAAU,QAAQ,kBAAkB;CAM1C,MAAM,QAAQ,QAAQ,WAAW;CACjC,IAAI,CAAC,OAGH,OAAO;CAET,MAAM,MAAM;CAEZ,MAAM,WAAW,aAAa;CAC9B,IAAI,eAAe;CACnB,MAAM,6BAAa,IAAI,IAAoB;CAC3C,IAAI,MAAmC;CACvC,IAAI,UAA8B;CAElC,MAAM,YAAY,UAA6B;EAC7C,MAAM,MAAM,MAAM;EAClB,IAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;EAErC,IAAI,IAAI,MAAA,GAAwB;EAEhC,IAAI,IAAI,aAAa,UAAU;EAE/B,IAAI,OAAO,IAAI,aAAa,YAAY,OAAO,IAAI,UAAU,UAAU;EACvE,MAAM,OAAO,WAAW,IAAI,IAAI,QAAQ,KAAK;EAC7C,IAAI,IAAI,SAAS,MAAM;EACvB,WAAW,IAAI,IAAI,UAAU,IAAI,KAAK;EAEtC,IAAI,IAAI,SAAS,WAAW;GAC1B,IAAI,OAAO,IAAI,YAAY,YAAY,CAAC,MAAM,QAAQ,IAAI,OAAO,GAAG;IAClE,OAAO,4CAA4C;IACnD;GACF;GACA,KAAK,mBAAmB,IAAI,SAAS,IAAI,SAAS,IAAI,IAAI;GAC1D;EACF;EACA,IAAI,IAAI,SAAS,cAAc;GAC7B,IAAI,OAAO,IAAI,YAAY,YAAY,CAAC,MAAM,QAAQ,IAAI,OAAO,GAAG;IAClE,OAAO,+CAA+C;IACtD;GACF;GACA,KAAK,sBAAsB,IAAI,SAAS,IAAI,OAAO;GACnD;EACF;CACF;CAEA,MAAM,QAAQ,QAAuB;EACnC,IAAI,YAAY,MAAM;EACtB,IAAI;GACF,QAAQ,YAAY,GAAG;EACzB,SAAS,OAAO;GAGd,OACE,wCAAwC,IAAI,KAAK,gBAAgB,IAAI,QAAQ,sCAC7E,KACF;EACF;CACF;CAEA,OAAO;EACL,KAAK,GAAG;GACN,MAAM;GACN,UAAU,QAAQ,WAAW,KAAK;GAClC,SAAS,iBAAiB,WAAW,QAAQ;EAC/C;EAEA,UAAU,OAAqB;GAE7B,IAAI,MAAM,UAAU;GAEpB,IAAI,MAAM,SAAS,QAAQ;GAC3B,IAAI,CAAC,gBAAgB,MAAM,OAAO,GAAG;GAErC,KAAK;IACH,GAAA;IACA,MAAM;IACN;IACA,OAAO,EAAE;IACT,SAAS,MAAM;IACf,SAAS,MAAM;IACf,MAAM,MAAM;GACd,CAAC;EACH;EAEA,aAAa,OAAwB;GACnC,IAAI,MAAM,UAAU;GACpB,IAAI,MAAM,SAAS,QAAQ;GAC3B,IAAI,CAAC,gBAAgB,MAAM,OAAO,GAAG;GAErC,KAAK;IACH,GAAA;IACA,MAAM;IACN;IACA,OAAO,EAAE;IACT,SAAS,MAAM;IACf,SAAS,MAAM;GACjB,CAAC;EACH;EAEA,KAAK,QAAiB,CAGtB;EAEA,UAAU;GACR,IAAI,YAAY,MAAM;IACpB,QAAQ,oBAAoB,WAAW,QAAQ;IAC/C,QAAQ,MAAM;IACd,UAAU;GACZ;GACA,MAAM;EACR;CACF;AACF;AAEA,SAAS,YAAY,SAAiB,OAAuB;CAC3D,IAAI,UAAU,KAAA,GACZ,QAAQ,KAAK,SAAS,KAAK;MAE3B,QAAQ,KAAK,OAAO;AAExB;;;;;;;;AASA,SAAS,gBAAgB,SAA0B;CACjD,MAAM,cAAA,GAAA,qBAAA,uBAAmC,OAAO;CAChD,IAAI,CAAC,YAAY,OAAO;CACxB,OAAO,WAAW,OAAO,aAAa;AACxC"}
+{"version":3,"file":"index.cjs","names":[],"sources":["../src/channel.ts","../src/protocol.ts","../src/plugin.ts"],"sourcesContent":["/**\n * Tiny `BroadcastChannel`-shaped abstraction. Lets tests inject a fake\n * (a shared in-memory bus across multiple \"tabs\" in the same process) and\n * keeps SSR-safety in one place — when `BroadcastChannel` is absent and\n * no `channelFactory` override is supplied, the plugin returns a no-op\n * variant up the stack.\n */\n\nexport type ChannelLike = {\n  postMessage(data: unknown): void\n  addEventListener(type: 'message', listener: (event: { data: unknown }) => void): void\n  removeEventListener(type: 'message', listener: (event: { data: unknown }) => void): void\n  close(): void\n}\n\n/**\n * Default factory: wraps the platform `BroadcastChannel`. Returns\n * `undefined` when `BroadcastChannel` is not defined (SSR / Node without\n * `--experimental-broadcastchannel`, older browsers).\n */\nexport function defaultChannelFactory(name: string): ChannelLike | undefined {\n  if (typeof BroadcastChannel === 'undefined') return undefined\n  const ch = new BroadcastChannel(name)\n  return {\n    postMessage(data) {\n      ch.postMessage(data)\n    },\n    addEventListener(type, listener) {\n      // The platform BroadcastChannel typing wants a `MessageEvent`\n      // listener, but we only care about `event.data` — cast through\n      // `unknown` since the shapes don't structurally overlap.\n      ch.addEventListener(type, listener as unknown as EventListener)\n    },\n    removeEventListener(type, listener) {\n      ch.removeEventListener(type, listener as unknown as EventListener)\n    },\n    close() {\n      ch.close()\n    },\n  }\n}\n","/**\n * Wire protocol for `@kontsedal/olas-cross-tab` messages. SPEC §13.2.\n *\n * `v` (protocol version) and `sourceId` (per-plugin-instance unique tag)\n * combine to make the three-layer echo prevention work:\n *\n * 1. Sender skips broadcast when `SetDataEvent.isRemote === true` (the\n *    write originated from `applyRemoteSetData`).\n * 2. Receiver filters its own `sourceId` (catches the case where the\n *    transport echoes the message back to the sender).\n * 3. Receiver dedupes by `(sourceId, msgId)` — duplicate or out-of-order\n *    messages from the same peer are dropped.\n *\n * Receivers also drop messages with a `v` they don't understand. The\n * channel name itself is user-supplied; consumers who want clean\n * cross-deploy isolation should embed a version in their `channelName`.\n */\n\nexport const PROTOCOL_VERSION = 1\n\nexport type SetDataMessage = {\n  v: typeof PROTOCOL_VERSION\n  type: 'setData'\n  sourceId: string\n  msgId: number\n  queryId: string\n  keyArgs: readonly unknown[]\n  data: unknown\n}\n\nexport type InvalidateMessage = {\n  v: typeof PROTOCOL_VERSION\n  type: 'invalidate'\n  sourceId: string\n  msgId: number\n  queryId: string\n  keyArgs: readonly unknown[]\n}\n\nexport type Message = SetDataMessage | InvalidateMessage\n","import {\n  type GcEvent,\n  type InvalidateEvent,\n  lookupRegisteredQuery,\n  type QueryClientPlugin,\n  type QueryClientPluginApi,\n  type SetDataEvent,\n} from '@kontsedal/olas-core'\nimport { type ChannelLike, defaultChannelFactory } from './channel'\nimport { type Message, PROTOCOL_VERSION } from './protocol'\n\n/**\n * Options accepted by `crossTabPlugin(...)`. SPEC §13.2.\n *\n * - `channelName` — name of the `BroadcastChannel`. Required. Users who\n *   want clean cross-deploy isolation should include a version suffix\n *   (e.g. `'my-app/cache/v2'`).\n * - `onWarn` — called for non-fatal conditions: a `DataCloneError` while\n *   posting (the data isn't structured-cloneable), or a malformed\n *   inbound message. Default: `console.warn`.\n * - `channelFactory` — override the channel constructor. Mainly for\n *   tests that share an in-memory bus across two QueryClients.\n */\nexport type CrossTabOptions = {\n  channelName: string\n  onWarn?: (message: string, cause?: unknown) => void\n  channelFactory?: (name: string) => ChannelLike | undefined\n}\n\n/**\n * Generate a unique-enough source id for a plugin instance. Combines\n * `Date.now()` with `Math.random()` — collisions across same-millisecond\n * tab-opens are negligible at one-decimal-place randomness, and even a\n * collision only loses dedup, not correctness.\n */\nfunction makeSourceId(): string {\n  const rand = Math.random().toString(36).slice(2, 10)\n  return `${Date.now().toString(36)}-${rand}`\n}\n\nconst NOOP_PLUGIN: QueryClientPlugin = {}\n\n/**\n * Cross-tab cache sync over `BroadcastChannel`. Mirrors `setData` /\n * `invalidate` writes across tabs of the same origin.\n *\n * Wire it up via `RootOptions.plugins`:\n *\n * ```ts\n * createRoot(appController, {\n *   deps,\n *   plugins: [crossTabPlugin({ channelName: 'my-app/cache/v1' })],\n * })\n * ```\n *\n * Queries must opt in via `defineQuery({ queryId: '<unique>', crossTab: true })`\n * — the `queryId` routes inbound messages back to the right query, and\n * `crossTab: true` is the per-query opt-in (queries that don't set it are\n * ignored by the sender so module-internal queries don't leak).\n *\n * **SSR safety.** When `BroadcastChannel` is not defined (Node, older\n * browsers without the feature) and no `channelFactory` override is\n * supplied, the function returns a no-op plugin object. The root still\n * boots cleanly; cross-tab is just disabled.\n *\n * **Non-cloneable data.** `BroadcastChannel` uses structured clone. Cache\n * data containing functions, class instances, or symbols throws a\n * `DataCloneError` at `postMessage`. The plugin catches the throw, calls\n * `onWarn(...)`, and drops the message — the sender's cache is unaffected.\n */\nexport function crossTabPlugin(options: CrossTabOptions): QueryClientPlugin {\n  const channelName = options.channelName\n  const onWarn = options.onWarn ?? defaultWarn\n  const factory = options.channelFactory ?? defaultChannelFactory\n\n  // Cheap probe — if the environment can't produce a channel at all we can\n  // return a no-op plugin without opening anything. The real channel opens\n  // lazily in `init` so a plugin that's constructed but never passed to a\n  // root doesn't leak a BroadcastChannel.\n  const probe = factory(channelName)\n  if (!probe) {\n    // SSR / unsupported environment. Caller's plugin slot still receives a\n    // valid plugin object; it just does nothing.\n    return NOOP_PLUGIN\n  }\n  probe.close()\n\n  const sourceId = makeSourceId()\n  let msgIdCounter = 0\n  // Per-peer monotonic-id cursor for out-of-order / duplicate drops. We cap\n  // the number of distinct peers we remember so a long-lived root that sees\n  // many short-lived peers (tabs that open, write once, and close) doesn't\n  // grow this Map without bound. When the cap is hit we evict in insertion-\n  // order (LRU-ish — peers we haven't heard from in the longest time go\n  // first). A peer we later hear from again will simply start with `last=-1`\n  // and accept its next message; the only cost of eviction is a one-message\n  // dedup miss in the rare case the transport actually echoes that exact\n  // peer's last-seen message back to us, which `BroadcastChannel` does not.\n  const MAX_PEERS = 64\n  const seenByPeer = new Map<string, number>()\n  let api: QueryClientPluginApi | null = null\n  let channel: ChannelLike | null = null\n\n  const recordPeerMsg = (peerId: string, msgId: number): void => {\n    // LRU touch — delete + set re-inserts at the tail so the oldest peers\n    // sit at the head of the iterator.\n    if (seenByPeer.has(peerId)) seenByPeer.delete(peerId)\n    seenByPeer.set(peerId, msgId)\n    if (seenByPeer.size > MAX_PEERS) {\n      const oldest = seenByPeer.keys().next().value\n      if (oldest !== undefined) seenByPeer.delete(oldest)\n    }\n  }\n\n  const listener = (event: { data: unknown }) => {\n    const msg = event.data as Partial<Message> | null\n    if (!msg || typeof msg !== 'object') return\n    // Layer 1 — protocol version drop.\n    if (msg.v !== PROTOCOL_VERSION) return\n    // Layer 2 — own-source drop (transport echoed our own message back).\n    if (msg.sourceId === sourceId) return\n    // Layer 3 — out-of-order / duplicate drop.\n    if (typeof msg.sourceId !== 'string' || typeof msg.msgId !== 'number') return\n    const last = seenByPeer.get(msg.sourceId) ?? -1\n    if (msg.msgId <= last) return\n    recordPeerMsg(msg.sourceId, msg.msgId)\n\n    if (msg.type === 'setData') {\n      if (typeof msg.queryId !== 'string' || !Array.isArray(msg.keyArgs)) {\n        onWarn('[olas/cross-tab] malformed setData message')\n        return\n      }\n      api?.applyRemoteSetData(msg.queryId, msg.keyArgs, msg.data)\n      return\n    }\n    if (msg.type === 'invalidate') {\n      if (typeof msg.queryId !== 'string' || !Array.isArray(msg.keyArgs)) {\n        onWarn('[olas/cross-tab] malformed invalidate message')\n        return\n      }\n      api?.applyRemoteInvalidate(msg.queryId, msg.keyArgs)\n      return\n    }\n  }\n\n  const send = (msg: Message): void => {\n    if (channel === null) return\n    try {\n      channel.postMessage(msg)\n    } catch (cause) {\n      // Structured clone failed — most likely non-cloneable data on a\n      // setData payload. Warn and drop.\n      onWarn(\n        `[olas/cross-tab] failed to broadcast ${msg.type} for queryId=\"${msg.queryId}\": data is not structured-cloneable`,\n        cause,\n      )\n    }\n  }\n\n  let initialized = false\n  return {\n    init(a) {\n      // The plugin instance owns one `sourceId`, one channel, and one\n      // listener Map. Sharing it across two roots would clobber that state\n      // on the second `init` and leak the first channel. Construct a fresh\n      // `crossTabPlugin({ ... })` per root.\n      if (initialized) {\n        throw new Error(\n          '[olas/cross-tab] crossTabPlugin instance reused across multiple roots. ' +\n            'Each root must get its own `crossTabPlugin({ ... })`.',\n        )\n      }\n      initialized = true\n      api = a\n      channel = factory(channelName) ?? null\n      channel?.addEventListener('message', listener)\n    },\n\n    onSetData(event: SetDataEvent) {\n      // Don't echo inbound writes — Layer-1 sender-side echo prevention.\n      if (event.isRemote) return\n      // Fetch-success writes are a per-tab concern: every tab runs its own\n      // fetcher and would otherwise rebroadcast results to peers that just\n      // fetched the same data themselves. We only echo explicit `setData`\n      // calls (mutations, optimistic patches, entity backprop) cross-tab.\n      if (event.source === 'fetch') return\n      // Infinite queries are deferred for v1 — see SPEC §13.2.\n      if (event.kind !== 'data') return\n      if (!shouldBroadcast(event.queryId)) return\n\n      send({\n        v: PROTOCOL_VERSION,\n        type: 'setData',\n        sourceId,\n        msgId: ++msgIdCounter,\n        queryId: event.queryId,\n        keyArgs: event.keyArgs,\n        data: event.data,\n      })\n    },\n\n    onInvalidate(event: InvalidateEvent) {\n      if (event.isRemote) return\n      if (event.kind !== 'data') return\n      if (!shouldBroadcast(event.queryId)) return\n\n      send({\n        v: PROTOCOL_VERSION,\n        type: 'invalidate',\n        sourceId,\n        msgId: ++msgIdCounter,\n        queryId: event.queryId,\n        keyArgs: event.keyArgs,\n      })\n    },\n\n    onGc(_event: GcEvent) {\n      // GC is local — we don't propagate it. Each tab gc's its own entries\n      // when its own subscribers drop.\n    },\n\n    dispose() {\n      if (channel !== null) {\n        channel.removeEventListener('message', listener)\n        channel.close()\n        channel = null\n      }\n      api = null\n      seenByPeer.clear()\n      // Allow re-`init` only if a future runtime explicitly reattaches; today\n      // `QueryClient.dispose` is final, so this is mostly defensive.\n      initialized = false\n    },\n  }\n}\n\nfunction defaultWarn(message: string, cause?: unknown): void {\n  if (cause !== undefined) {\n    console.warn(message, cause)\n  } else {\n    console.warn(message)\n  }\n}\n\n/**\n * Per-query gate. `crossTab: true` is a static opt-in on the spec; the\n * QueryClient doesn't filter on it (its events fire for every query that\n * has a `queryId`), so the plugin checks here. We look it up from the\n * core's query registry on every event — no caching, since the registry\n * lookup is a Map.get.\n */\nfunction shouldBroadcast(queryId: string): boolean {\n  const registered = lookupRegisteredQuery(queryId)\n  if (!registered) return false\n  return registered.__spec.crossTab === true\n}\n"],"mappings":";;;;;;;;AAoBA,SAAgB,sBAAsB,MAAuC;CAC3E,IAAI,OAAO,qBAAqB,aAAa,OAAO,KAAA;CACpD,MAAM,KAAK,IAAI,iBAAiB,IAAI;CACpC,OAAO;EACL,YAAY,MAAM;GAChB,GAAG,YAAY,IAAI;EACrB;EACA,iBAAiB,MAAM,UAAU;GAI/B,GAAG,iBAAiB,MAAM,QAAoC;EAChE;EACA,oBAAoB,MAAM,UAAU;GAClC,GAAG,oBAAoB,MAAM,QAAoC;EACnE;EACA,QAAQ;GACN,GAAG,MAAM;EACX;CACF;AACF;;;;;;;;;;;;;;;;;;;;ACtBA,MAAa,mBAAmB;;;;;;;;;ACiBhC,SAAS,eAAuB;CAC9B,MAAM,OAAO,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE;CACnD,OAAO,GAAG,KAAK,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG;AACvC;AAEA,MAAM,cAAiC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BxC,SAAgB,eAAe,SAA6C;CAC1E,MAAM,cAAc,QAAQ;CAC5B,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,UAAU,QAAQ,kBAAkB;CAM1C,MAAM,QAAQ,QAAQ,WAAW;CACjC,IAAI,CAAC,OAGH,OAAO;CAET,MAAM,MAAM;CAEZ,MAAM,WAAW,aAAa;CAC9B,IAAI,eAAe;CAUnB,MAAM,YAAY;CAClB,MAAM,6BAAa,IAAI,IAAoB;CAC3C,IAAI,MAAmC;CACvC,IAAI,UAA8B;CAElC,MAAM,iBAAiB,QAAgB,UAAwB;EAG7D,IAAI,WAAW,IAAI,MAAM,GAAG,WAAW,OAAO,MAAM;EACpD,WAAW,IAAI,QAAQ,KAAK;EAC5B,IAAI,WAAW,OAAO,WAAW;GAC/B,MAAM,SAAS,WAAW,KAAK,EAAE,KAAK,EAAE;GACxC,IAAI,WAAW,KAAA,GAAW,WAAW,OAAO,MAAM;EACpD;CACF;CAEA,MAAM,YAAY,UAA6B;EAC7C,MAAM,MAAM,MAAM;EAClB,IAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;EAErC,IAAI,IAAI,MAAA,GAAwB;EAEhC,IAAI,IAAI,aAAa,UAAU;EAE/B,IAAI,OAAO,IAAI,aAAa,YAAY,OAAO,IAAI,UAAU,UAAU;EACvE,MAAM,OAAO,WAAW,IAAI,IAAI,QAAQ,KAAK;EAC7C,IAAI,IAAI,SAAS,MAAM;EACvB,cAAc,IAAI,UAAU,IAAI,KAAK;EAErC,IAAI,IAAI,SAAS,WAAW;GAC1B,IAAI,OAAO,IAAI,YAAY,YAAY,CAAC,MAAM,QAAQ,IAAI,OAAO,GAAG;IAClE,OAAO,4CAA4C;IACnD;GACF;GACA,KAAK,mBAAmB,IAAI,SAAS,IAAI,SAAS,IAAI,IAAI;GAC1D;EACF;EACA,IAAI,IAAI,SAAS,cAAc;GAC7B,IAAI,OAAO,IAAI,YAAY,YAAY,CAAC,MAAM,QAAQ,IAAI,OAAO,GAAG;IAClE,OAAO,+CAA+C;IACtD;GACF;GACA,KAAK,sBAAsB,IAAI,SAAS,IAAI,OAAO;GACnD;EACF;CACF;CAEA,MAAM,QAAQ,QAAuB;EACnC,IAAI,YAAY,MAAM;EACtB,IAAI;GACF,QAAQ,YAAY,GAAG;EACzB,SAAS,OAAO;GAGd,OACE,wCAAwC,IAAI,KAAK,gBAAgB,IAAI,QAAQ,sCAC7E,KACF;EACF;CACF;CAEA,IAAI,cAAc;CAClB,OAAO;EACL,KAAK,GAAG;GAKN,IAAI,aACF,MAAM,IAAI,MACR,8HAEF;GAEF,cAAc;GACd,MAAM;GACN,UAAU,QAAQ,WAAW,KAAK;GAClC,SAAS,iBAAiB,WAAW,QAAQ;EAC/C;EAEA,UAAU,OAAqB;GAE7B,IAAI,MAAM,UAAU;GAKpB,IAAI,MAAM,WAAW,SAAS;GAE9B,IAAI,MAAM,SAAS,QAAQ;GAC3B,IAAI,CAAC,gBAAgB,MAAM,OAAO,GAAG;GAErC,KAAK;IACH,GAAA;IACA,MAAM;IACN;IACA,OAAO,EAAE;IACT,SAAS,MAAM;IACf,SAAS,MAAM;IACf,MAAM,MAAM;GACd,CAAC;EACH;EAEA,aAAa,OAAwB;GACnC,IAAI,MAAM,UAAU;GACpB,IAAI,MAAM,SAAS,QAAQ;GAC3B,IAAI,CAAC,gBAAgB,MAAM,OAAO,GAAG;GAErC,KAAK;IACH,GAAA;IACA,MAAM;IACN;IACA,OAAO,EAAE;IACT,SAAS,MAAM;IACf,SAAS,MAAM;GACjB,CAAC;EACH;EAEA,KAAK,QAAiB,CAGtB;EAEA,UAAU;GACR,IAAI,YAAY,MAAM;IACpB,QAAQ,oBAAoB,WAAW,QAAQ;IAC/C,QAAQ,MAAM;IACd,UAAU;GACZ;GACA,MAAM;GACN,WAAW,MAAM;GAGjB,cAAc;EAChB;CACF;AACF;AAEA,SAAS,YAAY,SAAiB,OAAuB;CAC3D,IAAI,UAAU,KAAA,GACZ,QAAQ,KAAK,SAAS,KAAK;MAE3B,QAAQ,KAAK,OAAO;AAExB;;;;;;;;AASA,SAAS,gBAAgB,SAA0B;CACjD,MAAM,cAAA,GAAA,qBAAA,uBAAmC,OAAO;CAChD,IAAI,CAAC,YAAY,OAAO;CACxB,OAAO,WAAW,OAAO,aAAa;AACxC"}

package/dist/index.mjs

@@ -93,9 +93,18 @@ function crossTabPlugin(options) {
 	probe.close();
 	const sourceId = makeSourceId();
 	let msgIdCounter = 0;
+	const MAX_PEERS = 64;
 	const seenByPeer = /* @__PURE__ */ new Map();
 	let api = null;
 	let channel = null;
+	const recordPeerMsg = (peerId, msgId) => {
+		if (seenByPeer.has(peerId)) seenByPeer.delete(peerId);
+		seenByPeer.set(peerId, msgId);
+		if (seenByPeer.size > MAX_PEERS) {
+			const oldest = seenByPeer.keys().next().value;
+			if (oldest !== void 0) seenByPeer.delete(oldest);
+		}
+	};
 	const listener = (event) => {
 		const msg = event.data;
 		if (!msg || typeof msg !== "object") return;
@@ -104,7 +113,7 @@ function crossTabPlugin(options) {
 		if (typeof msg.sourceId !== "string" || typeof msg.msgId !== "number") return;
 		const last = seenByPeer.get(msg.sourceId) ?? -1;
 		if (msg.msgId <= last) return;
-		seenByPeer.set(msg.sourceId, msg.msgId);
+		recordPeerMsg(msg.sourceId, msg.msgId);
 		if (msg.type === "setData") {
 			if (typeof msg.queryId !== "string" || !Array.isArray(msg.keyArgs)) {
 				onWarn("[olas/cross-tab] malformed setData message");
@@ -130,14 +139,18 @@ function crossTabPlugin(options) {
 			onWarn(`[olas/cross-tab] failed to broadcast ${msg.type} for queryId="${msg.queryId}": data is not structured-cloneable`, cause);
 		}
 	};
+	let initialized = false;
 	return {
 		init(a) {
+			if (initialized) throw new Error("[olas/cross-tab] crossTabPlugin instance reused across multiple roots. Each root must get its own `crossTabPlugin({ ... })`.");
+			initialized = true;
 			api = a;
 			channel = factory(channelName) ?? null;
 			channel?.addEventListener("message", listener);
 		},
 		onSetData(event) {
 			if (event.isRemote) return;
+			if (event.source === "fetch") return;
 			if (event.kind !== "data") return;
 			if (!shouldBroadcast(event.queryId)) return;
 			send({
@@ -171,6 +184,8 @@ function crossTabPlugin(options) {
 				channel = null;
 			}
 			api = null;
+			seenByPeer.clear();
+			initialized = false;
 		}
 	};
 }

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../src/channel.ts","../src/protocol.ts","../src/plugin.ts"],"sourcesContent":["/**\n * Tiny `BroadcastChannel`-shaped abstraction. Lets tests inject a fake\n * (a shared in-memory bus across multiple \"tabs\" in the same process) and\n * keeps SSR-safety in one place — when `BroadcastChannel` is absent and\n * no `channelFactory` override is supplied, the plugin returns a no-op\n * variant up the stack.\n */\n\nexport type ChannelLike = {\n  postMessage(data: unknown): void\n  addEventListener(type: 'message', listener: (event: { data: unknown }) => void): void\n  removeEventListener(type: 'message', listener: (event: { data: unknown }) => void): void\n  close(): void\n}\n\n/**\n * Default factory: wraps the platform `BroadcastChannel`. Returns\n * `undefined` when `BroadcastChannel` is not defined (SSR / Node without\n * `--experimental-broadcastchannel`, older browsers).\n */\nexport function defaultChannelFactory(name: string): ChannelLike | undefined {\n  if (typeof BroadcastChannel === 'undefined') return undefined\n  const ch = new BroadcastChannel(name)\n  return {\n    postMessage(data) {\n      ch.postMessage(data)\n    },\n    addEventListener(type, listener) {\n      // The platform BroadcastChannel typing wants a `MessageEvent`\n      // listener, but we only care about `event.data` — cast through\n      // `unknown` since the shapes don't structurally overlap.\n      ch.addEventListener(type, listener as unknown as EventListener)\n    },\n    removeEventListener(type, listener) {\n      ch.removeEventListener(type, listener as unknown as EventListener)\n    },\n    close() {\n      ch.close()\n    },\n  }\n}\n","/**\n * Wire protocol for `@kontsedal/olas-cross-tab` messages. SPEC §13.2.\n *\n * `v` (protocol version) and `sourceId` (per-plugin-instance unique tag)\n * combine to make the three-layer echo prevention work:\n *\n * 1. Sender skips broadcast when `SetDataEvent.isRemote === true` (the\n *    write originated from `applyRemoteSetData`).\n * 2. Receiver filters its own `sourceId` (catches the case where the\n *    transport echoes the message back to the sender).\n * 3. Receiver dedupes by `(sourceId, msgId)` — duplicate or out-of-order\n *    messages from the same peer are dropped.\n *\n * Receivers also drop messages with a `v` they don't understand. The\n * channel name itself is user-supplied; consumers who want clean\n * cross-deploy isolation should embed a version in their `channelName`.\n */\n\nexport const PROTOCOL_VERSION = 1\n\nexport type SetDataMessage = {\n  v: typeof PROTOCOL_VERSION\n  type: 'setData'\n  sourceId: string\n  msgId: number\n  queryId: string\n  keyArgs: readonly unknown[]\n  data: unknown\n}\n\nexport type InvalidateMessage = {\n  v: typeof PROTOCOL_VERSION\n  type: 'invalidate'\n  sourceId: string\n  msgId: number\n  queryId: string\n  keyArgs: readonly unknown[]\n}\n\nexport type Message = SetDataMessage | InvalidateMessage\n","import {\n  type GcEvent,\n  type InvalidateEvent,\n  lookupRegisteredQuery,\n  type QueryClientPlugin,\n  type QueryClientPluginApi,\n  type SetDataEvent,\n} from '@kontsedal/olas-core'\nimport { type ChannelLike, defaultChannelFactory } from './channel'\nimport { type Message, PROTOCOL_VERSION } from './protocol'\n\n/**\n * Options accepted by `crossTabPlugin(...)`. SPEC §13.2.\n *\n * - `channelName` — name of the `BroadcastChannel`. Required. Users who\n *   want clean cross-deploy isolation should include a version suffix\n *   (e.g. `'my-app/cache/v2'`).\n * - `onWarn` — called for non-fatal conditions: a `DataCloneError` while\n *   posting (the data isn't structured-cloneable), or a malformed\n *   inbound message. Default: `console.warn`.\n * - `channelFactory` — override the channel constructor. Mainly for\n *   tests that share an in-memory bus across two QueryClients.\n */\nexport type CrossTabOptions = {\n  channelName: string\n  onWarn?: (message: string, cause?: unknown) => void\n  channelFactory?: (name: string) => ChannelLike | undefined\n}\n\n/**\n * Generate a unique-enough source id for a plugin instance. Combines\n * `Date.now()` with `Math.random()` — collisions across same-millisecond\n * tab-opens are negligible at one-decimal-place randomness, and even a\n * collision only loses dedup, not correctness.\n */\nfunction makeSourceId(): string {\n  const rand = Math.random().toString(36).slice(2, 10)\n  return `${Date.now().toString(36)}-${rand}`\n}\n\nconst NOOP_PLUGIN: QueryClientPlugin = {}\n\n/**\n * Cross-tab cache sync over `BroadcastChannel`. Mirrors `setData` /\n * `invalidate` writes across tabs of the same origin.\n *\n * Wire it up via `RootOptions.plugins`:\n *\n * ```ts\n * createRoot(appController, {\n *   deps,\n *   plugins: [crossTabPlugin({ channelName: 'my-app/cache/v1' })],\n * })\n * ```\n *\n * Queries must opt in via `defineQuery({ queryId: '<unique>', crossTab: true })`\n * — the `queryId` routes inbound messages back to the right query, and\n * `crossTab: true` is the per-query opt-in (queries that don't set it are\n * ignored by the sender so module-internal queries don't leak).\n *\n * **SSR safety.** When `BroadcastChannel` is not defined (Node, older\n * browsers without the feature) and no `channelFactory` override is\n * supplied, the function returns a no-op plugin object. The root still\n * boots cleanly; cross-tab is just disabled.\n *\n * **Non-cloneable data.** `BroadcastChannel` uses structured clone. Cache\n * data containing functions, class instances, or symbols throws a\n * `DataCloneError` at `postMessage`. The plugin catches the throw, calls\n * `onWarn(...)`, and drops the message — the sender's cache is unaffected.\n */\nexport function crossTabPlugin(options: CrossTabOptions): QueryClientPlugin {\n  const channelName = options.channelName\n  const onWarn = options.onWarn ?? defaultWarn\n  const factory = options.channelFactory ?? defaultChannelFactory\n\n  // Cheap probe — if the environment can't produce a channel at all we can\n  // return a no-op plugin without opening anything. The real channel opens\n  // lazily in `init` so a plugin that's constructed but never passed to a\n  // root doesn't leak a BroadcastChannel.\n  const probe = factory(channelName)\n  if (!probe) {\n    // SSR / unsupported environment. Caller's plugin slot still receives a\n    // valid plugin object; it just does nothing.\n    return NOOP_PLUGIN\n  }\n  probe.close()\n\n  const sourceId = makeSourceId()\n  let msgIdCounter = 0\n  const seenByPeer = new Map<string, number>()\n  let api: QueryClientPluginApi | null = null\n  let channel: ChannelLike | null = null\n\n  const listener = (event: { data: unknown }) => {\n    const msg = event.data as Partial<Message> | null\n    if (!msg || typeof msg !== 'object') return\n    // Layer 1 — protocol version drop.\n    if (msg.v !== PROTOCOL_VERSION) return\n    // Layer 2 — own-source drop (transport echoed our own message back).\n    if (msg.sourceId === sourceId) return\n    // Layer 3 — out-of-order / duplicate drop.\n    if (typeof msg.sourceId !== 'string' || typeof msg.msgId !== 'number') return\n    const last = seenByPeer.get(msg.sourceId) ?? -1\n    if (msg.msgId <= last) return\n    seenByPeer.set(msg.sourceId, msg.msgId)\n\n    if (msg.type === 'setData') {\n      if (typeof msg.queryId !== 'string' || !Array.isArray(msg.keyArgs)) {\n        onWarn('[olas/cross-tab] malformed setData message')\n        return\n      }\n      api?.applyRemoteSetData(msg.queryId, msg.keyArgs, msg.data)\n      return\n    }\n    if (msg.type === 'invalidate') {\n      if (typeof msg.queryId !== 'string' || !Array.isArray(msg.keyArgs)) {\n        onWarn('[olas/cross-tab] malformed invalidate message')\n        return\n      }\n      api?.applyRemoteInvalidate(msg.queryId, msg.keyArgs)\n      return\n    }\n  }\n\n  const send = (msg: Message): void => {\n    if (channel === null) return\n    try {\n      channel.postMessage(msg)\n    } catch (cause) {\n      // Structured clone failed — most likely non-cloneable data on a\n      // setData payload. Warn and drop.\n      onWarn(\n        `[olas/cross-tab] failed to broadcast ${msg.type} for queryId=\"${msg.queryId}\": data is not structured-cloneable`,\n        cause,\n      )\n    }\n  }\n\n  return {\n    init(a) {\n      api = a\n      channel = factory(channelName) ?? null\n      channel?.addEventListener('message', listener)\n    },\n\n    onSetData(event: SetDataEvent) {\n      // Don't echo inbound writes — Layer-1 sender-side echo prevention.\n      if (event.isRemote) return\n      // Infinite queries are deferred for v1 — see SPEC §13.2.\n      if (event.kind !== 'data') return\n      if (!shouldBroadcast(event.queryId)) return\n\n      send({\n        v: PROTOCOL_VERSION,\n        type: 'setData',\n        sourceId,\n        msgId: ++msgIdCounter,\n        queryId: event.queryId,\n        keyArgs: event.keyArgs,\n        data: event.data,\n      })\n    },\n\n    onInvalidate(event: InvalidateEvent) {\n      if (event.isRemote) return\n      if (event.kind !== 'data') return\n      if (!shouldBroadcast(event.queryId)) return\n\n      send({\n        v: PROTOCOL_VERSION,\n        type: 'invalidate',\n        sourceId,\n        msgId: ++msgIdCounter,\n        queryId: event.queryId,\n        keyArgs: event.keyArgs,\n      })\n    },\n\n    onGc(_event: GcEvent) {\n      // GC is local — we don't propagate it. Each tab gc's its own entries\n      // when its own subscribers drop.\n    },\n\n    dispose() {\n      if (channel !== null) {\n        channel.removeEventListener('message', listener)\n        channel.close()\n        channel = null\n      }\n      api = null\n    },\n  }\n}\n\nfunction defaultWarn(message: string, cause?: unknown): void {\n  if (cause !== undefined) {\n    console.warn(message, cause)\n  } else {\n    console.warn(message)\n  }\n}\n\n/**\n * Per-query gate. `crossTab: true` is a static opt-in on the spec; the\n * QueryClient doesn't filter on it (its events fire for every query that\n * has a `queryId`), so the plugin checks here. We look it up from the\n * core's query registry on every event — no caching, since the registry\n * lookup is a Map.get.\n */\nfunction shouldBroadcast(queryId: string): boolean {\n  const registered = lookupRegisteredQuery(queryId)\n  if (!registered) return false\n  return registered.__spec.crossTab === true\n}\n"],"mappings":";;;;;;;AAoBA,SAAgB,sBAAsB,MAAuC;CAC3E,IAAI,OAAO,qBAAqB,aAAa,OAAO,KAAA;CACpD,MAAM,KAAK,IAAI,iBAAiB,IAAI;CACpC,OAAO;EACL,YAAY,MAAM;GAChB,GAAG,YAAY,IAAI;EACrB;EACA,iBAAiB,MAAM,UAAU;GAI/B,GAAG,iBAAiB,MAAM,QAAoC;EAChE;EACA,oBAAoB,MAAM,UAAU;GAClC,GAAG,oBAAoB,MAAM,QAAoC;EACnE;EACA,QAAQ;GACN,GAAG,MAAM;EACX;CACF;AACF;;;;;;;;;;;;;;;;;;;;ACtBA,MAAa,mBAAmB;;;;;;;;;ACiBhC,SAAS,eAAuB;CAC9B,MAAM,OAAO,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE;CACnD,OAAO,GAAG,KAAK,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG;AACvC;AAEA,MAAM,cAAiC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BxC,SAAgB,eAAe,SAA6C;CAC1E,MAAM,cAAc,QAAQ;CAC5B,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,UAAU,QAAQ,kBAAkB;CAM1C,MAAM,QAAQ,QAAQ,WAAW;CACjC,IAAI,CAAC,OAGH,OAAO;CAET,MAAM,MAAM;CAEZ,MAAM,WAAW,aAAa;CAC9B,IAAI,eAAe;CACnB,MAAM,6BAAa,IAAI,IAAoB;CAC3C,IAAI,MAAmC;CACvC,IAAI,UAA8B;CAElC,MAAM,YAAY,UAA6B;EAC7C,MAAM,MAAM,MAAM;EAClB,IAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;EAErC,IAAI,IAAI,MAAA,GAAwB;EAEhC,IAAI,IAAI,aAAa,UAAU;EAE/B,IAAI,OAAO,IAAI,aAAa,YAAY,OAAO,IAAI,UAAU,UAAU;EACvE,MAAM,OAAO,WAAW,IAAI,IAAI,QAAQ,KAAK;EAC7C,IAAI,IAAI,SAAS,MAAM;EACvB,WAAW,IAAI,IAAI,UAAU,IAAI,KAAK;EAEtC,IAAI,IAAI,SAAS,WAAW;GAC1B,IAAI,OAAO,IAAI,YAAY,YAAY,CAAC,MAAM,QAAQ,IAAI,OAAO,GAAG;IAClE,OAAO,4CAA4C;IACnD;GACF;GACA,KAAK,mBAAmB,IAAI,SAAS,IAAI,SAAS,IAAI,IAAI;GAC1D;EACF;EACA,IAAI,IAAI,SAAS,cAAc;GAC7B,IAAI,OAAO,IAAI,YAAY,YAAY,CAAC,MAAM,QAAQ,IAAI,OAAO,GAAG;IAClE,OAAO,+CAA+C;IACtD;GACF;GACA,KAAK,sBAAsB,IAAI,SAAS,IAAI,OAAO;GACnD;EACF;CACF;CAEA,MAAM,QAAQ,QAAuB;EACnC,IAAI,YAAY,MAAM;EACtB,IAAI;GACF,QAAQ,YAAY,GAAG;EACzB,SAAS,OAAO;GAGd,OACE,wCAAwC,IAAI,KAAK,gBAAgB,IAAI,QAAQ,sCAC7E,KACF;EACF;CACF;CAEA,OAAO;EACL,KAAK,GAAG;GACN,MAAM;GACN,UAAU,QAAQ,WAAW,KAAK;GAClC,SAAS,iBAAiB,WAAW,QAAQ;EAC/C;EAEA,UAAU,OAAqB;GAE7B,IAAI,MAAM,UAAU;GAEpB,IAAI,MAAM,SAAS,QAAQ;GAC3B,IAAI,CAAC,gBAAgB,MAAM,OAAO,GAAG;GAErC,KAAK;IACH,GAAA;IACA,MAAM;IACN;IACA,OAAO,EAAE;IACT,SAAS,MAAM;IACf,SAAS,MAAM;IACf,MAAM,MAAM;GACd,CAAC;EACH;EAEA,aAAa,OAAwB;GACnC,IAAI,MAAM,UAAU;GACpB,IAAI,MAAM,SAAS,QAAQ;GAC3B,IAAI,CAAC,gBAAgB,MAAM,OAAO,GAAG;GAErC,KAAK;IACH,GAAA;IACA,MAAM;IACN;IACA,OAAO,EAAE;IACT,SAAS,MAAM;IACf,SAAS,MAAM;GACjB,CAAC;EACH;EAEA,KAAK,QAAiB,CAGtB;EAEA,UAAU;GACR,IAAI,YAAY,MAAM;IACpB,QAAQ,oBAAoB,WAAW,QAAQ;IAC/C,QAAQ,MAAM;IACd,UAAU;GACZ;GACA,MAAM;EACR;CACF;AACF;AAEA,SAAS,YAAY,SAAiB,OAAuB;CAC3D,IAAI,UAAU,KAAA,GACZ,QAAQ,KAAK,SAAS,KAAK;MAE3B,QAAQ,KAAK,OAAO;AAExB;;;;;;;;AASA,SAAS,gBAAgB,SAA0B;CACjD,MAAM,aAAa,sBAAsB,OAAO;CAChD,IAAI,CAAC,YAAY,OAAO;CACxB,OAAO,WAAW,OAAO,aAAa;AACxC"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../src/channel.ts","../src/protocol.ts","../src/plugin.ts"],"sourcesContent":["/**\n * Tiny `BroadcastChannel`-shaped abstraction. Lets tests inject a fake\n * (a shared in-memory bus across multiple \"tabs\" in the same process) and\n * keeps SSR-safety in one place — when `BroadcastChannel` is absent and\n * no `channelFactory` override is supplied, the plugin returns a no-op\n * variant up the stack.\n */\n\nexport type ChannelLike = {\n  postMessage(data: unknown): void\n  addEventListener(type: 'message', listener: (event: { data: unknown }) => void): void\n  removeEventListener(type: 'message', listener: (event: { data: unknown }) => void): void\n  close(): void\n}\n\n/**\n * Default factory: wraps the platform `BroadcastChannel`. Returns\n * `undefined` when `BroadcastChannel` is not defined (SSR / Node without\n * `--experimental-broadcastchannel`, older browsers).\n */\nexport function defaultChannelFactory(name: string): ChannelLike | undefined {\n  if (typeof BroadcastChannel === 'undefined') return undefined\n  const ch = new BroadcastChannel(name)\n  return {\n    postMessage(data) {\n      ch.postMessage(data)\n    },\n    addEventListener(type, listener) {\n      // The platform BroadcastChannel typing wants a `MessageEvent`\n      // listener, but we only care about `event.data` — cast through\n      // `unknown` since the shapes don't structurally overlap.\n      ch.addEventListener(type, listener as unknown as EventListener)\n    },\n    removeEventListener(type, listener) {\n      ch.removeEventListener(type, listener as unknown as EventListener)\n    },\n    close() {\n      ch.close()\n    },\n  }\n}\n","/**\n * Wire protocol for `@kontsedal/olas-cross-tab` messages. SPEC §13.2.\n *\n * `v` (protocol version) and `sourceId` (per-plugin-instance unique tag)\n * combine to make the three-layer echo prevention work:\n *\n * 1. Sender skips broadcast when `SetDataEvent.isRemote === true` (the\n *    write originated from `applyRemoteSetData`).\n * 2. Receiver filters its own `sourceId` (catches the case where the\n *    transport echoes the message back to the sender).\n * 3. Receiver dedupes by `(sourceId, msgId)` — duplicate or out-of-order\n *    messages from the same peer are dropped.\n *\n * Receivers also drop messages with a `v` they don't understand. The\n * channel name itself is user-supplied; consumers who want clean\n * cross-deploy isolation should embed a version in their `channelName`.\n */\n\nexport const PROTOCOL_VERSION = 1\n\nexport type SetDataMessage = {\n  v: typeof PROTOCOL_VERSION\n  type: 'setData'\n  sourceId: string\n  msgId: number\n  queryId: string\n  keyArgs: readonly unknown[]\n  data: unknown\n}\n\nexport type InvalidateMessage = {\n  v: typeof PROTOCOL_VERSION\n  type: 'invalidate'\n  sourceId: string\n  msgId: number\n  queryId: string\n  keyArgs: readonly unknown[]\n}\n\nexport type Message = SetDataMessage | InvalidateMessage\n","import {\n  type GcEvent,\n  type InvalidateEvent,\n  lookupRegisteredQuery,\n  type QueryClientPlugin,\n  type QueryClientPluginApi,\n  type SetDataEvent,\n} from '@kontsedal/olas-core'\nimport { type ChannelLike, defaultChannelFactory } from './channel'\nimport { type Message, PROTOCOL_VERSION } from './protocol'\n\n/**\n * Options accepted by `crossTabPlugin(...)`. SPEC §13.2.\n *\n * - `channelName` — name of the `BroadcastChannel`. Required. Users who\n *   want clean cross-deploy isolation should include a version suffix\n *   (e.g. `'my-app/cache/v2'`).\n * - `onWarn` — called for non-fatal conditions: a `DataCloneError` while\n *   posting (the data isn't structured-cloneable), or a malformed\n *   inbound message. Default: `console.warn`.\n * - `channelFactory` — override the channel constructor. Mainly for\n *   tests that share an in-memory bus across two QueryClients.\n */\nexport type CrossTabOptions = {\n  channelName: string\n  onWarn?: (message: string, cause?: unknown) => void\n  channelFactory?: (name: string) => ChannelLike | undefined\n}\n\n/**\n * Generate a unique-enough source id for a plugin instance. Combines\n * `Date.now()` with `Math.random()` — collisions across same-millisecond\n * tab-opens are negligible at one-decimal-place randomness, and even a\n * collision only loses dedup, not correctness.\n */\nfunction makeSourceId(): string {\n  const rand = Math.random().toString(36).slice(2, 10)\n  return `${Date.now().toString(36)}-${rand}`\n}\n\nconst NOOP_PLUGIN: QueryClientPlugin = {}\n\n/**\n * Cross-tab cache sync over `BroadcastChannel`. Mirrors `setData` /\n * `invalidate` writes across tabs of the same origin.\n *\n * Wire it up via `RootOptions.plugins`:\n *\n * ```ts\n * createRoot(appController, {\n *   deps,\n *   plugins: [crossTabPlugin({ channelName: 'my-app/cache/v1' })],\n * })\n * ```\n *\n * Queries must opt in via `defineQuery({ queryId: '<unique>', crossTab: true })`\n * — the `queryId` routes inbound messages back to the right query, and\n * `crossTab: true` is the per-query opt-in (queries that don't set it are\n * ignored by the sender so module-internal queries don't leak).\n *\n * **SSR safety.** When `BroadcastChannel` is not defined (Node, older\n * browsers without the feature) and no `channelFactory` override is\n * supplied, the function returns a no-op plugin object. The root still\n * boots cleanly; cross-tab is just disabled.\n *\n * **Non-cloneable data.** `BroadcastChannel` uses structured clone. Cache\n * data containing functions, class instances, or symbols throws a\n * `DataCloneError` at `postMessage`. The plugin catches the throw, calls\n * `onWarn(...)`, and drops the message — the sender's cache is unaffected.\n */\nexport function crossTabPlugin(options: CrossTabOptions): QueryClientPlugin {\n  const channelName = options.channelName\n  const onWarn = options.onWarn ?? defaultWarn\n  const factory = options.channelFactory ?? defaultChannelFactory\n\n  // Cheap probe — if the environment can't produce a channel at all we can\n  // return a no-op plugin without opening anything. The real channel opens\n  // lazily in `init` so a plugin that's constructed but never passed to a\n  // root doesn't leak a BroadcastChannel.\n  const probe = factory(channelName)\n  if (!probe) {\n    // SSR / unsupported environment. Caller's plugin slot still receives a\n    // valid plugin object; it just does nothing.\n    return NOOP_PLUGIN\n  }\n  probe.close()\n\n  const sourceId = makeSourceId()\n  let msgIdCounter = 0\n  // Per-peer monotonic-id cursor for out-of-order / duplicate drops. We cap\n  // the number of distinct peers we remember so a long-lived root that sees\n  // many short-lived peers (tabs that open, write once, and close) doesn't\n  // grow this Map without bound. When the cap is hit we evict in insertion-\n  // order (LRU-ish — peers we haven't heard from in the longest time go\n  // first). A peer we later hear from again will simply start with `last=-1`\n  // and accept its next message; the only cost of eviction is a one-message\n  // dedup miss in the rare case the transport actually echoes that exact\n  // peer's last-seen message back to us, which `BroadcastChannel` does not.\n  const MAX_PEERS = 64\n  const seenByPeer = new Map<string, number>()\n  let api: QueryClientPluginApi | null = null\n  let channel: ChannelLike | null = null\n\n  const recordPeerMsg = (peerId: string, msgId: number): void => {\n    // LRU touch — delete + set re-inserts at the tail so the oldest peers\n    // sit at the head of the iterator.\n    if (seenByPeer.has(peerId)) seenByPeer.delete(peerId)\n    seenByPeer.set(peerId, msgId)\n    if (seenByPeer.size > MAX_PEERS) {\n      const oldest = seenByPeer.keys().next().value\n      if (oldest !== undefined) seenByPeer.delete(oldest)\n    }\n  }\n\n  const listener = (event: { data: unknown }) => {\n    const msg = event.data as Partial<Message> | null\n    if (!msg || typeof msg !== 'object') return\n    // Layer 1 — protocol version drop.\n    if (msg.v !== PROTOCOL_VERSION) return\n    // Layer 2 — own-source drop (transport echoed our own message back).\n    if (msg.sourceId === sourceId) return\n    // Layer 3 — out-of-order / duplicate drop.\n    if (typeof msg.sourceId !== 'string' || typeof msg.msgId !== 'number') return\n    const last = seenByPeer.get(msg.sourceId) ?? -1\n    if (msg.msgId <= last) return\n    recordPeerMsg(msg.sourceId, msg.msgId)\n\n    if (msg.type === 'setData') {\n      if (typeof msg.queryId !== 'string' || !Array.isArray(msg.keyArgs)) {\n        onWarn('[olas/cross-tab] malformed setData message')\n        return\n      }\n      api?.applyRemoteSetData(msg.queryId, msg.keyArgs, msg.data)\n      return\n    }\n    if (msg.type === 'invalidate') {\n      if (typeof msg.queryId !== 'string' || !Array.isArray(msg.keyArgs)) {\n        onWarn('[olas/cross-tab] malformed invalidate message')\n        return\n      }\n      api?.applyRemoteInvalidate(msg.queryId, msg.keyArgs)\n      return\n    }\n  }\n\n  const send = (msg: Message): void => {\n    if (channel === null) return\n    try {\n      channel.postMessage(msg)\n    } catch (cause) {\n      // Structured clone failed — most likely non-cloneable data on a\n      // setData payload. Warn and drop.\n      onWarn(\n        `[olas/cross-tab] failed to broadcast ${msg.type} for queryId=\"${msg.queryId}\": data is not structured-cloneable`,\n        cause,\n      )\n    }\n  }\n\n  let initialized = false\n  return {\n    init(a) {\n      // The plugin instance owns one `sourceId`, one channel, and one\n      // listener Map. Sharing it across two roots would clobber that state\n      // on the second `init` and leak the first channel. Construct a fresh\n      // `crossTabPlugin({ ... })` per root.\n      if (initialized) {\n        throw new Error(\n          '[olas/cross-tab] crossTabPlugin instance reused across multiple roots. ' +\n            'Each root must get its own `crossTabPlugin({ ... })`.',\n        )\n      }\n      initialized = true\n      api = a\n      channel = factory(channelName) ?? null\n      channel?.addEventListener('message', listener)\n    },\n\n    onSetData(event: SetDataEvent) {\n      // Don't echo inbound writes — Layer-1 sender-side echo prevention.\n      if (event.isRemote) return\n      // Fetch-success writes are a per-tab concern: every tab runs its own\n      // fetcher and would otherwise rebroadcast results to peers that just\n      // fetched the same data themselves. We only echo explicit `setData`\n      // calls (mutations, optimistic patches, entity backprop) cross-tab.\n      if (event.source === 'fetch') return\n      // Infinite queries are deferred for v1 — see SPEC §13.2.\n      if (event.kind !== 'data') return\n      if (!shouldBroadcast(event.queryId)) return\n\n      send({\n        v: PROTOCOL_VERSION,\n        type: 'setData',\n        sourceId,\n        msgId: ++msgIdCounter,\n        queryId: event.queryId,\n        keyArgs: event.keyArgs,\n        data: event.data,\n      })\n    },\n\n    onInvalidate(event: InvalidateEvent) {\n      if (event.isRemote) return\n      if (event.kind !== 'data') return\n      if (!shouldBroadcast(event.queryId)) return\n\n      send({\n        v: PROTOCOL_VERSION,\n        type: 'invalidate',\n        sourceId,\n        msgId: ++msgIdCounter,\n        queryId: event.queryId,\n        keyArgs: event.keyArgs,\n      })\n    },\n\n    onGc(_event: GcEvent) {\n      // GC is local — we don't propagate it. Each tab gc's its own entries\n      // when its own subscribers drop.\n    },\n\n    dispose() {\n      if (channel !== null) {\n        channel.removeEventListener('message', listener)\n        channel.close()\n        channel = null\n      }\n      api = null\n      seenByPeer.clear()\n      // Allow re-`init` only if a future runtime explicitly reattaches; today\n      // `QueryClient.dispose` is final, so this is mostly defensive.\n      initialized = false\n    },\n  }\n}\n\nfunction defaultWarn(message: string, cause?: unknown): void {\n  if (cause !== undefined) {\n    console.warn(message, cause)\n  } else {\n    console.warn(message)\n  }\n}\n\n/**\n * Per-query gate. `crossTab: true` is a static opt-in on the spec; the\n * QueryClient doesn't filter on it (its events fire for every query that\n * has a `queryId`), so the plugin checks here. We look it up from the\n * core's query registry on every event — no caching, since the registry\n * lookup is a Map.get.\n */\nfunction shouldBroadcast(queryId: string): boolean {\n  const registered = lookupRegisteredQuery(queryId)\n  if (!registered) return false\n  return registered.__spec.crossTab === true\n}\n"],"mappings":";;;;;;;AAoBA,SAAgB,sBAAsB,MAAuC;CAC3E,IAAI,OAAO,qBAAqB,aAAa,OAAO,KAAA;CACpD,MAAM,KAAK,IAAI,iBAAiB,IAAI;CACpC,OAAO;EACL,YAAY,MAAM;GAChB,GAAG,YAAY,IAAI;EACrB;EACA,iBAAiB,MAAM,UAAU;GAI/B,GAAG,iBAAiB,MAAM,QAAoC;EAChE;EACA,oBAAoB,MAAM,UAAU;GAClC,GAAG,oBAAoB,MAAM,QAAoC;EACnE;EACA,QAAQ;GACN,GAAG,MAAM;EACX;CACF;AACF;;;;;;;;;;;;;;;;;;;;ACtBA,MAAa,mBAAmB;;;;;;;;;ACiBhC,SAAS,eAAuB;CAC9B,MAAM,OAAO,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE;CACnD,OAAO,GAAG,KAAK,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG;AACvC;AAEA,MAAM,cAAiC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BxC,SAAgB,eAAe,SAA6C;CAC1E,MAAM,cAAc,QAAQ;CAC5B,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,UAAU,QAAQ,kBAAkB;CAM1C,MAAM,QAAQ,QAAQ,WAAW;CACjC,IAAI,CAAC,OAGH,OAAO;CAET,MAAM,MAAM;CAEZ,MAAM,WAAW,aAAa;CAC9B,IAAI,eAAe;CAUnB,MAAM,YAAY;CAClB,MAAM,6BAAa,IAAI,IAAoB;CAC3C,IAAI,MAAmC;CACvC,IAAI,UAA8B;CAElC,MAAM,iBAAiB,QAAgB,UAAwB;EAG7D,IAAI,WAAW,IAAI,MAAM,GAAG,WAAW,OAAO,MAAM;EACpD,WAAW,IAAI,QAAQ,KAAK;EAC5B,IAAI,WAAW,OAAO,WAAW;GAC/B,MAAM,SAAS,WAAW,KAAK,EAAE,KAAK,EAAE;GACxC,IAAI,WAAW,KAAA,GAAW,WAAW,OAAO,MAAM;EACpD;CACF;CAEA,MAAM,YAAY,UAA6B;EAC7C,MAAM,MAAM,MAAM;EAClB,IAAI,CAAC,OAAO,OAAO,QAAQ,UAAU;EAErC,IAAI,IAAI,MAAA,GAAwB;EAEhC,IAAI,IAAI,aAAa,UAAU;EAE/B,IAAI,OAAO,IAAI,aAAa,YAAY,OAAO,IAAI,UAAU,UAAU;EACvE,MAAM,OAAO,WAAW,IAAI,IAAI,QAAQ,KAAK;EAC7C,IAAI,IAAI,SAAS,MAAM;EACvB,cAAc,IAAI,UAAU,IAAI,KAAK;EAErC,IAAI,IAAI,SAAS,WAAW;GAC1B,IAAI,OAAO,IAAI,YAAY,YAAY,CAAC,MAAM,QAAQ,IAAI,OAAO,GAAG;IAClE,OAAO,4CAA4C;IACnD;GACF;GACA,KAAK,mBAAmB,IAAI,SAAS,IAAI,SAAS,IAAI,IAAI;GAC1D;EACF;EACA,IAAI,IAAI,SAAS,cAAc;GAC7B,IAAI,OAAO,IAAI,YAAY,YAAY,CAAC,MAAM,QAAQ,IAAI,OAAO,GAAG;IAClE,OAAO,+CAA+C;IACtD;GACF;GACA,KAAK,sBAAsB,IAAI,SAAS,IAAI,OAAO;GACnD;EACF;CACF;CAEA,MAAM,QAAQ,QAAuB;EACnC,IAAI,YAAY,MAAM;EACtB,IAAI;GACF,QAAQ,YAAY,GAAG;EACzB,SAAS,OAAO;GAGd,OACE,wCAAwC,IAAI,KAAK,gBAAgB,IAAI,QAAQ,sCAC7E,KACF;EACF;CACF;CAEA,IAAI,cAAc;CAClB,OAAO;EACL,KAAK,GAAG;GAKN,IAAI,aACF,MAAM,IAAI,MACR,8HAEF;GAEF,cAAc;GACd,MAAM;GACN,UAAU,QAAQ,WAAW,KAAK;GAClC,SAAS,iBAAiB,WAAW,QAAQ;EAC/C;EAEA,UAAU,OAAqB;GAE7B,IAAI,MAAM,UAAU;GAKpB,IAAI,MAAM,WAAW,SAAS;GAE9B,IAAI,MAAM,SAAS,QAAQ;GAC3B,IAAI,CAAC,gBAAgB,MAAM,OAAO,GAAG;GAErC,KAAK;IACH,GAAA;IACA,MAAM;IACN;IACA,OAAO,EAAE;IACT,SAAS,MAAM;IACf,SAAS,MAAM;IACf,MAAM,MAAM;GACd,CAAC;EACH;EAEA,aAAa,OAAwB;GACnC,IAAI,MAAM,UAAU;GACpB,IAAI,MAAM,SAAS,QAAQ;GAC3B,IAAI,CAAC,gBAAgB,MAAM,OAAO,GAAG;GAErC,KAAK;IACH,GAAA;IACA,MAAM;IACN;IACA,OAAO,EAAE;IACT,SAAS,MAAM;IACf,SAAS,MAAM;GACjB,CAAC;EACH;EAEA,KAAK,QAAiB,CAGtB;EAEA,UAAU;GACR,IAAI,YAAY,MAAM;IACpB,QAAQ,oBAAoB,WAAW,QAAQ;IAC/C,QAAQ,MAAM;IACd,UAAU;GACZ;GACA,MAAM;GACN,WAAW,MAAM;GAGjB,cAAc;EAChB;CACF;AACF;AAEA,SAAS,YAAY,SAAiB,OAAuB;CAC3D,IAAI,UAAU,KAAA,GACZ,QAAQ,KAAK,SAAS,KAAK;MAE3B,QAAQ,KAAK,OAAO;AAExB;;;;;;;;AASA,SAAS,gBAAgB,SAA0B;CACjD,MAAM,aAAa,sBAAsB,OAAO;CAChD,IAAI,CAAC,YAAY,OAAO;CACxB,OAAO,WAAW,OAAO,aAAa;AACxC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kontsedal/olas-cross-tab",
-  "version": "0.0.1-rc.1",
+  "version": "0.0.2",
   "description": "Olas cross-tab cache sync — BroadcastChannel-backed QueryClientPlugin keeping every browser tab in lockstep.",
   "keywords": [
     "olas",
@@ -45,10 +45,10 @@
   ],
   "sideEffects": false,
   "peerDependencies": {
-    "@kontsedal/olas-core": "^0.0.1-rc.1"
+    "@kontsedal/olas-core": "^0.0.2"
   },
   "devDependencies": {
-    "@kontsedal/olas-core": "^0.0.1-rc.1"
+    "@kontsedal/olas-core": "^0.0.2"
   },
   "publishConfig": {
     "access": "public"

package/src/plugin.ts

@@ -87,10 +87,31 @@ export function crossTabPlugin(options: CrossTabOptions): QueryClientPlugin {
 
   const sourceId = makeSourceId()
   let msgIdCounter = 0
+  // Per-peer monotonic-id cursor for out-of-order / duplicate drops. We cap
+  // the number of distinct peers we remember so a long-lived root that sees
+  // many short-lived peers (tabs that open, write once, and close) doesn't
+  // grow this Map without bound. When the cap is hit we evict in insertion-
+  // order (LRU-ish — peers we haven't heard from in the longest time go
+  // first). A peer we later hear from again will simply start with `last=-1`
+  // and accept its next message; the only cost of eviction is a one-message
+  // dedup miss in the rare case the transport actually echoes that exact
+  // peer's last-seen message back to us, which `BroadcastChannel` does not.
+  const MAX_PEERS = 64
   const seenByPeer = new Map<string, number>()
   let api: QueryClientPluginApi | null = null
   let channel: ChannelLike | null = null
 
+  const recordPeerMsg = (peerId: string, msgId: number): void => {
+    // LRU touch — delete + set re-inserts at the tail so the oldest peers
+    // sit at the head of the iterator.
+    if (seenByPeer.has(peerId)) seenByPeer.delete(peerId)
+    seenByPeer.set(peerId, msgId)
+    if (seenByPeer.size > MAX_PEERS) {
+      const oldest = seenByPeer.keys().next().value
+      if (oldest !== undefined) seenByPeer.delete(oldest)
+    }
+  }
+
   const listener = (event: { data: unknown }) => {
     const msg = event.data as Partial<Message> | null
     if (!msg || typeof msg !== 'object') return
@@ -102,7 +123,7 @@ export function crossTabPlugin(options: CrossTabOptions): QueryClientPlugin {
     if (typeof msg.sourceId !== 'string' || typeof msg.msgId !== 'number') return
     const last = seenByPeer.get(msg.sourceId) ?? -1
     if (msg.msgId <= last) return
-    seenByPeer.set(msg.sourceId, msg.msgId)
+    recordPeerMsg(msg.sourceId, msg.msgId)
 
     if (msg.type === 'setData') {
       if (typeof msg.queryId !== 'string' || !Array.isArray(msg.keyArgs)) {
@@ -136,8 +157,20 @@ export function crossTabPlugin(options: CrossTabOptions): QueryClientPlugin {
     }
   }
 
+  let initialized = false
   return {
     init(a) {
+      // The plugin instance owns one `sourceId`, one channel, and one
+      // listener Map. Sharing it across two roots would clobber that state
+      // on the second `init` and leak the first channel. Construct a fresh
+      // `crossTabPlugin({ ... })` per root.
+      if (initialized) {
+        throw new Error(
+          '[olas/cross-tab] crossTabPlugin instance reused across multiple roots. ' +
+            'Each root must get its own `crossTabPlugin({ ... })`.',
+        )
+      }
+      initialized = true
       api = a
       channel = factory(channelName) ?? null
       channel?.addEventListener('message', listener)
@@ -146,6 +179,11 @@ export function crossTabPlugin(options: CrossTabOptions): QueryClientPlugin {
     onSetData(event: SetDataEvent) {
       // Don't echo inbound writes — Layer-1 sender-side echo prevention.
       if (event.isRemote) return
+      // Fetch-success writes are a per-tab concern: every tab runs its own
+      // fetcher and would otherwise rebroadcast results to peers that just
+      // fetched the same data themselves. We only echo explicit `setData`
+      // calls (mutations, optimistic patches, entity backprop) cross-tab.
+      if (event.source === 'fetch') return
       // Infinite queries are deferred for v1 — see SPEC §13.2.
       if (event.kind !== 'data') return
       if (!shouldBroadcast(event.queryId)) return
@@ -188,6 +226,10 @@ export function crossTabPlugin(options: CrossTabOptions): QueryClientPlugin {
         channel = null
       }
       api = null
+      seenByPeer.clear()
+      // Allow re-`init` only if a future runtime explicitly reattaches; today
+      // `QueryClient.dispose` is final, so this is mostly defensive.
+      initialized = false
     },
   }
 }