@venizia/ignis-worker 0.4.3 → 0.4.4

package/dist/cjs/transport/shared/common/constants.d.ts

@@ -1,14 +0,0 @@
-export declare const DEFAULT_CHANNEL_NAME = "ignis.bff";
-export declare const DEFAULT_TIMEOUT_MS = 30000;
-/** Which part this tab plays. `ELECTING` is the brief window before the lock answers. */
-export declare class BffRoles {
-    static readonly ELECTING = "electing";
-    static readonly LEADER = "leader";
-    static readonly FOLLOWER = "follower";
-}
-export declare class ChannelMessageKinds {
-    static readonly REQUEST = "ignis.bff.request";
-    static readonly RESPONSE = "ignis.bff.response";
-    static readonly ERROR = "ignis.bff.error";
-}
-//# sourceMappingURL=constants.d.ts.map

package/dist/cjs/transport/shared/common/constants.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../src/transport/shared/common/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,cAAc,CAAC;AAChD,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAEzC,yFAAyF;AACzF,qBAAa,QAAQ;IACnB,MAAM,CAAC,QAAQ,CAAC,QAAQ,cAAc;IACtC,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAClC,MAAM,CAAC,QAAQ,CAAC,QAAQ,cAAc;CACvC;AAED,qBAAa,mBAAmB;IAC9B,MAAM,CAAC,QAAQ,CAAC,OAAO,uBAAuB;IAC9C,MAAM,CAAC,QAAQ,CAAC,QAAQ,wBAAwB;IAChD,MAAM,CAAC,QAAQ,CAAC,KAAK,qBAAqB;CAC3C"}

package/dist/cjs/transport/shared/common/constants.js

@@ -1,19 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ChannelMessageKinds = exports.BffRoles = exports.DEFAULT_TIMEOUT_MS = exports.DEFAULT_CHANNEL_NAME = void 0;
-exports.DEFAULT_CHANNEL_NAME = 'ignis.bff';
-exports.DEFAULT_TIMEOUT_MS = 30_000;
-/** Which part this tab plays. `ELECTING` is the brief window before the lock answers. */
-class BffRoles {
-    static { this.ELECTING = 'electing'; }
-    static { this.LEADER = 'leader'; }
-    static { this.FOLLOWER = 'follower'; }
-}
-exports.BffRoles = BffRoles;
-class ChannelMessageKinds {
-    static { this.REQUEST = 'ignis.bff.request'; }
-    static { this.RESPONSE = 'ignis.bff.response'; }
-    static { this.ERROR = 'ignis.bff.error'; }
-}
-exports.ChannelMessageKinds = ChannelMessageKinds;
-//# sourceMappingURL=constants.js.map

package/dist/cjs/transport/shared/common/constants.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../src/transport/shared/common/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,oBAAoB,GAAG,WAAW,CAAC;AACnC,QAAA,kBAAkB,GAAG,MAAM,CAAC;AAEzC,yFAAyF;AACzF,MAAa,QAAQ;aACH,aAAQ,GAAG,UAAU,CAAC;aACtB,WAAM,GAAG,QAAQ,CAAC;aAClB,aAAQ,GAAG,UAAU,CAAC;;AAHxC,4BAIC;AAED,MAAa,mBAAmB;aACd,YAAO,GAAG,mBAAmB,CAAC;aAC9B,aAAQ,GAAG,oBAAoB,CAAC;aAChC,UAAK,GAAG,iBAAiB,CAAC;;AAH5C,kDAIC","sourcesContent":["export const DEFAULT_CHANNEL_NAME = 'ignis.bff';\nexport const DEFAULT_TIMEOUT_MS = 30_000;\n\n/** Which part this tab plays. `ELECTING` is the brief window before the lock answers. */\nexport class BffRoles {\n  static readonly ELECTING = 'electing';\n  static readonly LEADER = 'leader';\n  static readonly FOLLOWER = 'follower';\n}\n\nexport class ChannelMessageKinds {\n  static readonly REQUEST = 'ignis.bff.request';\n  static readonly RESPONSE = 'ignis.bff.response';\n  static readonly ERROR = 'ignis.bff.error';\n}\n"]}

package/dist/cjs/transport/shared/common/index.d.ts

@@ -1,3 +0,0 @@
-export * from './constants';
-export * from './types';
-//# sourceMappingURL=index.d.ts.map

package/dist/cjs/transport/shared/common/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/transport/shared/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC"}

package/dist/cjs/transport/shared/common/index.js

@@ -1,19 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./constants"), exports);
-__exportStar(require("./types"), exports);
-//# sourceMappingURL=index.js.map

package/dist/cjs/transport/shared/common/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/transport/shared/common/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,0CAAwB","sourcesContent":["export * from './constants';\nexport * from './types';\n"]}

package/dist/cjs/transport/shared/common/types.d.ts

@@ -1,35 +0,0 @@
-import type { TConstValue } from '@venizia/ignis-helpers/common';
-import type { IBffErrorEnvelope, IBffRequestEnvelope, IBffResponseEnvelope } from '../../../envelope/common';
-import { type BffRoles, type ChannelMessageKinds } from './constants';
-export type TBffRole = TConstValue<typeof BffRoles>;
-/**
- * There is deliberately no "a new leader is ready" broadcast. A follower cannot act on one safely:
- * BroadcastChannel does not order messages across senders, so a request posted around the moment of
- * promotion may well be answered by the new leader - and a follower that failed its in-flight
- * requests on hearing the announcement would turn some of those successes into errors. The request
- * timeout is the one honest answer for that window.
- */
-export type TChannelMessage = {
-    kind: typeof ChannelMessageKinds.REQUEST;
-    envelope: IBffRequestEnvelope;
-} | {
-    kind: typeof ChannelMessageKinds.RESPONSE;
-    envelope: IBffResponseEnvelope;
-} | {
-    kind: typeof ChannelMessageKinds.ERROR;
-    envelope: IBffErrorEnvelope;
-};
-export interface IPendingRequest {
-    resolve: (response: Response) => void;
-    reject: (error: unknown) => void;
-    release: () => void;
-}
-export interface ISharedBffTransportOptions {
-    /** Builds the Worker. Called ONLY by whichever tab wins the election - the others never start one. */
-    createWorker: () => Worker;
-    /** Distinguishes independent BFFs on one origin. The lock name is derived from it. */
-    channelName?: string;
-    timeoutMs?: number;
-    scope?: string;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/cjs/transport/shared/common/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/transport/shared/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEtE,MAAM,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,OAAO,mBAAmB,CAAC,OAAO,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,OAAO,mBAAmB,CAAC,QAAQ,CAAC;IAAC,QAAQ,EAAE,oBAAoB,CAAA;CAAE,GAC7E;IAAE,IAAI,EAAE,OAAO,mBAAmB,CAAC,KAAK,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAE5E,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;IACtC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACjC,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,0BAA0B;IACzC,sGAAsG;IACtG,YAAY,EAAE,MAAM,MAAM,CAAC;IAC3B,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/cjs/transport/shared/common/types.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=types.js.map

package/dist/cjs/transport/shared/common/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/transport/shared/common/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { TConstValue } from '@venizia/ignis-helpers/common';\nimport type {\n  IBffErrorEnvelope,\n  IBffRequestEnvelope,\n  IBffResponseEnvelope,\n} from '@/envelope/common';\nimport { type BffRoles, type ChannelMessageKinds } from './constants';\n\nexport type TBffRole = TConstValue<typeof BffRoles>;\n\n/**\n * There is deliberately no \"a new leader is ready\" broadcast. A follower cannot act on one safely:\n * BroadcastChannel does not order messages across senders, so a request posted around the moment of\n * promotion may well be answered by the new leader - and a follower that failed its in-flight\n * requests on hearing the announcement would turn some of those successes into errors. The request\n * timeout is the one honest answer for that window.\n */\nexport type TChannelMessage =\n  | { kind: typeof ChannelMessageKinds.REQUEST; envelope: IBffRequestEnvelope }\n  | { kind: typeof ChannelMessageKinds.RESPONSE; envelope: IBffResponseEnvelope }\n  | { kind: typeof ChannelMessageKinds.ERROR; envelope: IBffErrorEnvelope };\n\nexport interface IPendingRequest {\n  resolve: (response: Response) => void;\n  reject: (error: unknown) => void;\n  release: () => void;\n}\n\nexport interface ISharedBffTransportOptions {\n  /** Builds the Worker. Called ONLY by whichever tab wins the election - the others never start one. */\n  createWorker: () => Worker;\n  /** Distinguishes independent BFFs on one origin. The lock name is derived from it. */\n  channelName?: string;\n  timeoutMs?: number;\n  scope?: string;\n}\n"]}

package/dist/cjs/transport/shared/index.d.ts

@@ -1,4 +0,0 @@
-export { BffRoles } from './common/constants';
-export type { ISharedBffTransportOptions, TBffRole } from './common/types';
-export { SharedBffTransport } from './transport';
-//# sourceMappingURL=index.d.ts.map

package/dist/cjs/transport/shared/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/transport/shared/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,YAAY,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC"}

package/dist/cjs/transport/shared/index.js

@@ -1,11 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SharedBffTransport = exports.BffRoles = void 0;
-// `export * from './common'` would also publish five module-private names - `DEFAULT_CHANNEL_NAME`,
-// `DEFAULT_TIMEOUT_MS`, `ChannelMessageKinds`, `TChannelMessage`, `IPendingRequest` - through
-// `transport/index.ts`.
-var constants_1 = require("./common/constants");
-Object.defineProperty(exports, "BffRoles", { enumerable: true, get: function () { return constants_1.BffRoles; } });
-var transport_1 = require("./transport");
-Object.defineProperty(exports, "SharedBffTransport", { enumerable: true, get: function () { return transport_1.SharedBffTransport; } });
-//# sourceMappingURL=index.js.map

package/dist/cjs/transport/shared/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/transport/shared/index.ts"],"names":[],"mappings":";;;AAAA,oGAAoG;AACpG,8FAA8F;AAC9F,wBAAwB;AACxB,gDAA8C;AAArC,qGAAA,QAAQ,OAAA;AAEjB,yCAAiD;AAAxC,+GAAA,kBAAkB,OAAA","sourcesContent":["// `export * from './common'` would also publish five module-private names - `DEFAULT_CHANNEL_NAME`,\n// `DEFAULT_TIMEOUT_MS`, `ChannelMessageKinds`, `TChannelMessage`, `IPendingRequest` - through\n// `transport/index.ts`.\nexport { BffRoles } from './common/constants';\nexport type { ISharedBffTransportOptions, TBffRole } from './common/types';\nexport { SharedBffTransport } from './transport';\n"]}

package/dist/cjs/transport/shared/transport.d.ts

@@ -1,87 +0,0 @@
-import { BaseHelper } from '@venizia/ignis-helpers/core';
-import type { IBffTransport } from '../common/types';
-import type { ISharedBffTransportOptions, TBffRole } from './common';
-/**
- * One BFF for every tab of an origin, instead of one per tab.
- *
- * The problem it solves is not a framework limitation, it is a storage one. PGlite in
- * `opfs-ahp://` mode holds an exclusive access handle on the database file, and OPFS access handles
- * are exclusive PER ORIGIN. Measured in Chromium with two tabs of the same page: the first tab
- * works, and the second never boots its database -
- * `Failed to execute 'createSyncAccessHandle' on 'FileSystemFileHandle': Access Handles cannot be
- * created if there is another open Access Handle or Writable stream associated with the same file`.
- * The first tab is unaffected, and closing it lets the second recover on reload - so the failure is
- * contained and self-healing, but the second tab is simply dead until then.
- *
- * So exactly one tab may own the database. This transport elects that tab with the Web Locks API,
- * gives it the Worker, and forwards every other tab's request to it over a `BroadcastChannel`,
- * carried in the same envelope the Worker itself speaks. When the leader's tab closes, the lock is
- * released by the browser and a follower is promoted automatically - no heartbeat, no timeout, no
- * stale-leader window to reason about.
- *
- * A host with no `navigator.locks` runs single-tab, exactly as before. That is not a compromise:
- * measured on a plain-http origin, `navigator.locks` and `navigator.storage.getDirectory` are BOTH
- * undefined, because both are secure-context only. Wherever OPFS works the lock exists, and where it
- * does not the database could not have started either.
- */
-export declare class SharedBffTransport extends BaseHelper implements IBffTransport {
-    private readonly createWorker;
-    private readonly channel;
-    private readonly lockName;
-    private readonly timeoutMs;
-    private readonly requestIdGenerator;
-    private readonly pendingRequests;
-    private role;
-    private leaderTransport?;
-    private isClosed;
-    /**
-     * Held because THIS class created it. `WorkerBffTransport.close()` deliberately leaves a worker
-     * running - it did not create the one it was handed - so without this reference the worker would
-     * outlive `close()` still holding the exclusive OPFS access handle, while the lock has already
-     * gone to another tab that opens the same database.
-     */
-    private leaderWorker?;
-    /** Set when `createWorker()` throws, so callers get that failure instead of parking forever. */
-    private leaderStartupError?;
-    /** Resolving this releases the Web Lock, which is what promotes a follower. */
-    private releaseLeadership?;
-    /** Drops this tab out of the lock QUEUE on close, so a closed transport cannot be promoted. */
-    private readonly leadershipQueueAbort;
-    /** Callers parked in `fetch()` while the election is still running. */
-    private roleWaiters;
-    constructor(opts: ISharedBffTransportOptions);
-    getRole(): TBffRole;
-    fetch(opts: {
-        request: Request;
-    }): Promise<Response>;
-    close(): void;
-    private elect;
-    private becomeLeader;
-    private becomeFollower;
-    private heldUntilClosed;
-    private whenRoleSettled;
-    private settleRoleWaiters;
-    /**
-     * The caller's `AbortSignal` is honoured HERE as well as in `WorkerBffTransport`. Without it the
-     * same page code behaves differently depending on which tab won the lock: abort works in the
-     * leader and silently does nothing in every follower, so a data provider that aborts on unmount
-     * leaves promises pending for the full timeout in every tab but one.
-     *
-     * Aborting settles the CALLER. It does not cancel the leader's work - there is no cancel message,
-     * and a write already dispatched cannot be taken back.
-     */
-    private fetchViaLeader;
-    /** `signal.reason` first, the way `globalThis.fetch` rejects, so a custom abort reason survives. */
-    private toAbortError;
-    private takePending;
-    private rejectAllPending;
-    /**
-     * A `BroadcastChannel` never delivers a message to the instance that sent it, so a leader does not
-     * hear its own answers and a follower does not hear its own requests. Every tab does hear every
-     * OTHER tab, which is why a response is matched by id and silently ignored when it belongs to
-     * someone else.
-     */
-    private readonly handleChannelMessage;
-    private serveAsLeader;
-}
-//# sourceMappingURL=transport.d.ts.map

package/dist/cjs/transport/shared/transport.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../../src/transport/shared/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAgC,MAAM,6BAA6B,CAAC;AAGvF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGrD,OAAO,KAAK,EAEV,0BAA0B,EAC1B,QAAQ,EAET,MAAM,UAAU,CAAC;AAElB;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,kBAAmB,SAAQ,UAAW,YAAW,aAAa;IACzE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmB;IAC3C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IACxD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAsC;IAEtE,OAAO,CAAC,IAAI,CAA+B;IAC3C,OAAO,CAAC,eAAe,CAAC,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAS;IAEzB;;;;;OAKG;IACH,OAAO,CAAC,YAAY,CAAC,CAAS;IAE9B,gGAAgG;IAChG,OAAO,CAAC,kBAAkB,CAAC,CAAU;IAErC,+EAA+E;IAC/E,OAAO,CAAC,iBAAiB,CAAC,CAAa;IAEvC,+FAA+F;IAC/F,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAyB;IAE9D,uEAAuE;IACvE,OAAO,CAAC,WAAW,CAAyB;gBAEhC,IAAI,EAAE,0BAA0B;IAkC5C,OAAO,IAAI,QAAQ;IAIb,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IAkC1D,KAAK,IAAI,IAAI;YA+BC,KAAK;IA4DnB,OAAO,CAAC,YAAY;IA6BpB,OAAO,CAAC,cAAc;IAKtB,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,iBAAiB;IASzB;;;;;;;;OAQG;YACW,cAAc;IAoD5B,oGAAoG;IACpG,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,WAAW;IAWnB,OAAO,CAAC,gBAAgB;IAWxB;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CA4EnC;YAEY,aAAa;CAyB5B"}

package/dist/cjs/transport/shared/transport.js

@@ -1,384 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SharedBffTransport = void 0;
-const core_1 = require("@venizia/ignis-helpers/core");
-const encode_1 = require("../../envelope/encode");
-const worker_1 = require("../worker");
-const common_1 = require("./common");
-/**
- * One BFF for every tab of an origin, instead of one per tab.
- *
- * The problem it solves is not a framework limitation, it is a storage one. PGlite in
- * `opfs-ahp://` mode holds an exclusive access handle on the database file, and OPFS access handles
- * are exclusive PER ORIGIN. Measured in Chromium with two tabs of the same page: the first tab
- * works, and the second never boots its database -
- * `Failed to execute 'createSyncAccessHandle' on 'FileSystemFileHandle': Access Handles cannot be
- * created if there is another open Access Handle or Writable stream associated with the same file`.
- * The first tab is unaffected, and closing it lets the second recover on reload - so the failure is
- * contained and self-healing, but the second tab is simply dead until then.
- *
- * So exactly one tab may own the database. This transport elects that tab with the Web Locks API,
- * gives it the Worker, and forwards every other tab's request to it over a `BroadcastChannel`,
- * carried in the same envelope the Worker itself speaks. When the leader's tab closes, the lock is
- * released by the browser and a follower is promoted automatically - no heartbeat, no timeout, no
- * stale-leader window to reason about.
- *
- * A host with no `navigator.locks` runs single-tab, exactly as before. That is not a compromise:
- * measured on a plain-http origin, `navigator.locks` and `navigator.storage.getDirectory` are BOTH
- * undefined, because both are secure-context only. Wherever OPFS works the lock exists, and where it
- * does not the database could not have started either.
- */
-class SharedBffTransport extends core_1.BaseHelper {
-    constructor(opts) {
-        super({ scope: opts.scope ?? SharedBffTransport.name });
-        this.pendingRequests = new Map();
-        this.role = common_1.BffRoles.ELECTING;
-        this.isClosed = false;
-        /** Drops this tab out of the lock QUEUE on close, so a closed transport cannot be promoted. */
-        this.leadershipQueueAbort = new AbortController();
-        /** Callers parked in `fetch()` while the election is still running. */
-        this.roleWaiters = [];
-        /**
-         * A `BroadcastChannel` never delivers a message to the instance that sent it, so a leader does not
-         * hear its own answers and a follower does not hear its own requests. Every tab does hear every
-         * OTHER tab, which is why a response is matched by id and silently ignored when it belongs to
-         * someone else.
-         */
-        this.handleChannelMessage = (event) => {
-            const message = event.data;
-            switch (message?.kind) {
-                case common_1.ChannelMessageKinds.REQUEST: {
-                    if (this.role !== common_1.BffRoles.LEADER) {
-                        return;
-                    }
-                    // `serveAsLeader` answers its own failures on the channel; this catch is for the one case
-                    // it cannot - the channel itself refusing the message, e.g. a body that will not clone.
-                    this.serveAsLeader({ envelope: message.envelope }).catch((error) => {
-                        this.logger
-                            .for(this.serveAsLeader.name)
-                            .error('Could not answer a follower at all | id: %s | error: %s', message.envelope.id, error);
-                    });
-                    return;
-                }
-                // Both decodes are guarded. The channel is origin-wide and its name is the application's, not
-                // a secret, and version skew is the realistic trigger: a long-lived tab on v1 and a new tab
-                // on v2 share the same channel and lock BY DESIGN. An envelope this build cannot read must
-                // fail its caller, never leave the promise unsettled for the full timeout.
-                case common_1.ChannelMessageKinds.RESPONSE: {
-                    const pending = this.takePending({ id: message.envelope.id });
-                    if (!pending) {
-                        return;
-                    }
-                    try {
-                        pending.resolve(encode_1.BffEnvelope.decodeResponse({ envelope: message.envelope }));
-                    }
-                    catch (error) {
-                        this.logger
-                            .for(this.handleChannelMessage.name)
-                            .error('Undecodable response envelope | id: %s | error: %s', message.envelope.id, error);
-                        pending.reject((0, core_1.getError)({
-                            message: `[SharedBffTransport] The leader's response could not be decoded | id: ${message.envelope.id}`,
-                            cause: error,
-                        }));
-                    }
-                    return;
-                }
-                case common_1.ChannelMessageKinds.ERROR: {
-                    const pending = this.takePending({ id: message.envelope.id });
-                    if (!pending) {
-                        return;
-                    }
-                    try {
-                        pending.reject(encode_1.BffEnvelope.decodeError({ envelope: message.envelope }));
-                    }
-                    catch (error) {
-                        pending.reject((0, core_1.getError)({
-                            message: `[SharedBffTransport] The leader's error envelope could not be decoded | id: ${message.envelope.id}`,
-                            cause: error,
-                        }));
-                    }
-                    return;
-                }
-                default: {
-                    return;
-                }
-            }
-        };
-        const channelName = opts.channelName ?? common_1.DEFAULT_CHANNEL_NAME;
-        this.createWorker = opts.createWorker;
-        this.timeoutMs = opts.timeoutMs ?? common_1.DEFAULT_TIMEOUT_MS;
-        this.lockName = `${channelName}.leader`;
-        this.requestIdGenerator = new core_1.RequestIdGenerator({ scope: SharedBffTransport.name });
-        // Attached BEFORE the election starts: a tab that becomes leader a moment later must not miss a
-        // request a follower posted while it was still deciding.
-        this.channel = new BroadcastChannel(channelName);
-        this.channel.addEventListener('message', this.handleChannelMessage);
-        // A failed election must not leave `fetch()` parked forever waiting for a role that never
-        // arrives: this tab falls back to serving itself, which is the pre-election behaviour.
-        this.elect().catch((error) => {
-            // `close()` aborts the queued lock request, and the rejection that produces is the expected
-            // end of the election - not a failure to report.
-            if (this.isClosed) {
-                return;
-            }
-            this.logger
-                .for(this.elect.name)
-                .error('Leader election failed, falling back to single-tab | error: %s', error);
-            if (this.role === common_1.BffRoles.ELECTING) {
-                this.becomeLeader();
-            }
-        });
-    }
-    getRole() {
-        return this.role;
-    }
-    async fetch(opts) {
-        if (this.isClosed) {
-            throw (0, core_1.getError)({
-                message: '[SharedBffTransport] The transport is closed | open a new one to make requests',
-            });
-        }
-        await this.whenRoleSettled();
-        // Re-checked AFTER the await: `close()` can land while the election is still running, and
-        // posting then reaches a channel that is already closed - the caller would get a raw
-        // `DOMException` instead of this error, and a pending entry plus a live timer would be left
-        // behind on a transport nothing can settle.
-        if (this.isClosed) {
-            throw (0, core_1.getError)({
-                message: '[SharedBffTransport] The transport is closed | open a new one to make requests',
-            });
-        }
-        if (this.leaderStartupError) {
-            throw (0, core_1.getError)({
-                message: '[SharedBffTransport] This tab leads but its BFF worker never started | reload the page',
-                cause: this.leaderStartupError,
-            });
-        }
-        if (this.role === common_1.BffRoles.LEADER && this.leaderTransport) {
-            return this.leaderTransport.fetch(opts);
-        }
-        return this.fetchViaLeader(opts);
-    }
-    close() {
-        this.isClosed = true;
-        // A follower is parked in the lock QUEUE rather than holding anything. Without this it stays
-        // queued after close, and the browser would eventually hand leadership to a dead transport -
-        // which returns straight away, but only after the tab that could have served was skipped.
-        this.leadershipQueueAbort.abort();
-        // ORDER IS THE POINT, and it is the opposite of the obvious one. The worker has to be GONE
-        // before the lock is released: releasing first promotes another tab, which opens the same OPFS
-        // database while this worker still holds the exclusive access handle - the exact failure this
-        // transport exists to prevent, reintroduced by its own teardown.
-        //
-        // `terminate()` is abrupt by design. It is no worse than the tab-close path the browser already
-        // takes on every leader, and leaving the worker alive is strictly worse than an abrupt stop.
-        this.leaderTransport?.close();
-        this.leaderTransport = undefined;
-        this.leaderWorker?.terminate();
-        this.leaderWorker = undefined;
-        // Only now: the next tab may open the database.
-        this.releaseLeadership?.();
-        this.releaseLeadership = undefined;
-        this.channel.removeEventListener('message', this.handleChannelMessage);
-        this.channel.close();
-        this.rejectAllPending({ reason: 'the transport was closed' });
-        this.settleRoleWaiters();
-    }
-    async elect() {
-        const locks = globalThis.navigator?.locks;
-        if (!locks) {
-            this.logger
-                .for(this.elect.name)
-                .warn('navigator.locks is unavailable - running single-tab | a second tab cannot open the same OPFS database');
-            this.becomeLeader();
-            return;
-        }
-        // `ifAvailable` answers NOW instead of queueing, which is what lets this tab find out it is a
-        // follower rather than hanging until the current leader goes away.
-        const hasWon = await locks.request(this.lockName, { ifAvailable: true }, async (lock) => {
-            if (!lock) {
-                return false;
-            }
-            // Symmetric with the queued branch below, and not defensive padding. A real `LockManager`
-            // grants from a queued task - it never runs this callback synchronously inside `request()` -
-            // so `close()` can land between the constructor and this line. Without the guard a CLOSED
-            // transport starts a worker, reports itself leader, and then holds the lock for the lifetime
-            // of the page: `close()` has already read and cleared `releaseLeadership`, so the assignment
-            // `heldUntilClosed()` makes below can never be resolved by anything. No other tab is ever
-            // promoted, and this one answers nobody - its channel listener is already detached.
-            //
-            // Returning true, not false: this tab DID hold the lock. Returning releases it immediately,
-            // which is exactly what a closed transport should do with it.
-            if (this.isClosed) {
-                return true;
-            }
-            this.becomeLeader();
-            await this.heldUntilClosed();
-            return true;
-        });
-        if (hasWon || this.isClosed) {
-            return;
-        }
-        this.becomeFollower();
-        // Queues behind the current leader. The browser releases its lock when that tab goes away - a
-        // crash included - so this resolves without anything having to detect the death.
-        await locks.request(this.lockName, { signal: this.leadershipQueueAbort.signal }, async () => {
-            if (this.isClosed) {
-                return;
-            }
-            this.logger
-                .for(this.elect.name)
-                .info('Promoted to leader | previous leader released the lock');
-            this.becomeLeader();
-            await this.heldUntilClosed();
-        });
-    }
-    becomeLeader() {
-        // Anything this tab had in flight was addressed to the leader that just went away. It cannot be
-        // replayed - a write may well have been applied - so it is failed explicitly rather than left
-        // to run out its timeout under a leader that will never answer it.
-        this.rejectAllPending({
-            reason: 'the leader serving it went away before this tab was promoted',
-        });
-        try {
-            this.leaderWorker = this.createWorker();
-            this.leaderTransport = new worker_1.WorkerBffTransport({
-                worker: this.leaderWorker,
-                timeoutMs: this.timeoutMs,
-            });
-        }
-        catch (error) {
-            // A CSP refusal or a bad worker URL must still SETTLE the role. `whenRoleSettled()` has no
-            // timeout of its own and the per-request timer is armed only inside `fetchViaLeader()`, which
-            // this tab never reaches - so leaving the role unsettled hangs every caller forever, with no
-            // error and no log per request.
-            this.leaderStartupError = error;
-            this.logger
-                .for(this.becomeLeader.name)
-                .error('Could not start the BFF worker | error: %s', error);
-        }
-        this.role = common_1.BffRoles.LEADER;
-        this.settleRoleWaiters();
-    }
-    becomeFollower() {
-        this.role = common_1.BffRoles.FOLLOWER;
-        this.settleRoleWaiters();
-    }
-    heldUntilClosed() {
-        return new Promise((resolve) => {
-            this.releaseLeadership = resolve;
-        });
-    }
-    whenRoleSettled() {
-        if (this.role !== common_1.BffRoles.ELECTING) {
-            return Promise.resolve();
-        }
-        return new Promise((resolve) => {
-            this.roleWaiters.push(resolve);
-        });
-    }
-    settleRoleWaiters() {
-        const waiters = this.roleWaiters;
-        this.roleWaiters = [];
-        for (const waiter of waiters) {
-            waiter();
-        }
-    }
-    /**
-     * The caller's `AbortSignal` is honoured HERE as well as in `WorkerBffTransport`. Without it the
-     * same page code behaves differently depending on which tab won the lock: abort works in the
-     * leader and silently does nothing in every follower, so a data provider that aborts on unmount
-     * leaves promises pending for the full timeout in every tab but one.
-     *
-     * Aborting settles the CALLER. It does not cancel the leader's work - there is no cancel message,
-     * and a write already dispatched cannot be taken back.
-     */
-    async fetchViaLeader(opts) {
-        const { signal } = opts.request;
-        if (signal?.aborted) {
-            throw this.toAbortError({ signal });
-        }
-        const id = this.requestIdGenerator.nextId();
-        const envelope = await encode_1.BffEnvelope.encodeRequest({
-            request: opts.request,
-            id,
-            url: encode_1.BffEnvelope.toSyntheticUrl({ url: opts.request.url }),
-        });
-        return new Promise((resolve, reject) => {
-            const timer = setTimeout(() => {
-                this.takePending({ id })?.reject((0, core_1.getError)({
-                    message: `[SharedBffTransport] Timed out waiting for the leader tab | id: ${id} | timeoutMs: ${this.timeoutMs}`,
-                }));
-            }, this.timeoutMs);
-            const handleAbort = () => {
-                this.takePending({ id })?.reject(this.toAbortError({ signal }));
-            };
-            signal?.addEventListener('abort', handleAbort);
-            this.pendingRequests.set(id, {
-                resolve,
-                reject,
-                release: () => {
-                    clearTimeout(timer);
-                    signal?.removeEventListener('abort', handleAbort);
-                },
-            });
-            // Buffering the body took an await, and `addEventListener('abort')` never fires on a signal
-            // that aborted before it was attached - without this re-read that window loses the abort.
-            if (signal?.aborted) {
-                handleAbort();
-                return;
-            }
-            this.channel.postMessage({
-                kind: common_1.ChannelMessageKinds.REQUEST,
-                envelope,
-            });
-        });
-    }
-    /** `signal.reason` first, the way `globalThis.fetch` rejects, so a custom abort reason survives. */
-    toAbortError(opts) {
-        return (opts.signal?.reason ??
-            (0, core_1.getError)({ message: '[SharedBffTransport] The request was aborted by its caller' }));
-    }
-    takePending(opts) {
-        const pending = this.pendingRequests.get(opts.id);
-        if (!pending) {
-            return undefined;
-        }
-        this.pendingRequests.delete(opts.id);
-        pending.release();
-        return pending;
-    }
-    rejectAllPending(opts) {
-        const pendingRequestsKeys = [...this.pendingRequests.keys()];
-        for (const id of pendingRequestsKeys) {
-            this.takePending({ id })?.reject((0, core_1.getError)({
-                message: `[SharedBffTransport] Request abandoned | id: ${id} | reason: ${opts.reason}`,
-            }));
-        }
-    }
-    async serveAsLeader(opts) {
-        const { envelope } = opts;
-        try {
-            const response = await this.leaderTransport.fetch({
-                request: encode_1.BffEnvelope.decodeRequest({ envelope }),
-            });
-            this.channel.postMessage({
-                kind: common_1.ChannelMessageKinds.RESPONSE,
-                envelope: await encode_1.BffEnvelope.encodeResponse({ response, id: envelope.id }),
-            });
-        }
-        catch (error) {
-            // The follower gets the failure as a failure, rather than waiting out a timeout that would
-            // tell it nothing about what went wrong.
-            this.logger
-                .for(this.serveAsLeader.name)
-                .error('Failed to serve a follower request | id: %s | error: %s', envelope.id, error);
-            this.channel.postMessage({
-                kind: common_1.ChannelMessageKinds.ERROR,
-                envelope: encode_1.BffEnvelope.encodeError({ id: envelope.id, error }),
-            });
-        }
-    }
-}
-exports.SharedBffTransport = SharedBffTransport;
-//# sourceMappingURL=transport.js.map