actly 1.1.0 → 1.2.0

package/dist/policies/circuitBreaker.cjs

@@ -0,0 +1,85 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.circuitBreakerPolicy = circuitBreakerPolicy;
+const executor_js_1 = require("../core/executor.js");
+const errors_js_1 = require("../errors.js");
+const abort_js_1 = require("../utils/abort.js");
+const NS = 'cb:';
+function getState(store, key) {
+    return store.get(NS + key) ?? { failures: 0, lastFailureTime: 0, isOpen: false, openedAt: 0, halfOpen: false };
+}
+function setState(store, key, state) {
+    store.set(NS + key, state);
+}
+function circuitBreakerPolicy(opts) {
+    const threshold = Math.max(1, Math.floor(opts.threshold));
+    const cooldownMs = opts.cooldownMs;
+    const resetTimeoutMs = opts.resetTimeoutMs ?? Number.POSITIVE_INFINITY;
+    const applier = (fn, ctx) => {
+        const syncCtx = ctx;
+        return async (signal) => {
+            const key = syncCtx.key;
+            const now = Date.now();
+            // Read state synchronously and make decisions atomically
+            const state = getState(syncCtx.store, key);
+            if (state.isOpen) {
+                const elapsed = now - state.openedAt;
+                if (elapsed >= cooldownMs) {
+                    // Transition to half-open: allow only ONE probe call
+                    state.isOpen = false;
+                    state.halfOpen = true;
+                    setState(syncCtx.store, key, state);
+                }
+                else {
+                    throw new errors_js_1.CircuitBreakerOpenError(key, cooldownMs - elapsed);
+                }
+            }
+            else if (state.halfOpen) {
+                // Another call is already probing — block this one
+                throw new errors_js_1.CircuitBreakerOpenError(key, 0);
+            }
+            if (now - state.lastFailureTime > resetTimeoutMs && state.failures > 0) {
+                state.failures = 0;
+                setState(syncCtx.store, key, state);
+            }
+            try {
+                const result = await fn(signal);
+                // Re-read state (it may have changed during await) and update atomically
+                const updated = getState(syncCtx.store, key);
+                updated.failures = 0;
+                updated.isOpen = false;
+                updated.halfOpen = false;
+                setState(syncCtx.store, key, updated);
+                return result;
+            }
+            catch (err) {
+                // Signal aborts are not downstream failures — don't count them
+                if ((0, abort_js_1.isAbortError)(err) || (signal.aborted && err === signal.reason)) {
+                    const updated = getState(syncCtx.store, key);
+                    if (updated.halfOpen) {
+                        // Abort during half-open: probe didn't succeed or fail —
+                        // downstream health is still unknown. Go back to OPEN with
+                        // fresh cooldown so next call waits before probing again.
+                        updated.isOpen = true;
+                        updated.openedAt = Date.now();
+                        updated.halfOpen = false;
+                    }
+                    setState(syncCtx.store, key, updated);
+                    throw err;
+                }
+                const updated = getState(syncCtx.store, key);
+                updated.failures++;
+                updated.lastFailureTime = Date.now();
+                updated.halfOpen = false;
+                if (updated.failures >= threshold) {
+                    updated.isOpen = true;
+                    updated.openedAt = Date.now();
+                }
+                setState(syncCtx.store, key, updated);
+                throw err;
+            }
+        };
+    };
+    applier[executor_js_1.REQUIRES_SYNC_STORE] = true;
+    return applier;
+}

package/dist/policies/circuitBreaker.d.ts

@@ -0,0 +1,3 @@
+import type { PolicyApplier, CircuitBreakerOptions } from '../types/index.js';
+export declare function circuitBreakerPolicy<T>(opts: CircuitBreakerOptions): PolicyApplier<T>;
+//# sourceMappingURL=circuitBreaker.d.ts.map

package/dist/policies/circuitBreaker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuitBreaker.d.ts","sourceRoot":"","sources":["../../src/policies/circuitBreaker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAS,aAAa,EAAiB,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AAwBnG,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,GAAG,aAAa,CAAC,CAAC,CAAC,CA2ErF"}

package/dist/policies/circuitBreaker.js

@@ -0,0 +1,83 @@
+import { REQUIRES_SYNC_STORE } from '../core/executor.js';
+import { CircuitBreakerOpenError } from '../errors.js';
+import { isAbortError } from '../utils/abort.js';
+const NS = 'cb:';
+function getState(store, key) {
+    return store.get(NS + key) ?? { failures: 0, lastFailureTime: 0, isOpen: false, openedAt: 0, halfOpen: false };
+}
+function setState(store, key, state) {
+    store.set(NS + key, state);
+}
+export function circuitBreakerPolicy(opts) {
+    const threshold = Math.max(1, Math.floor(opts.threshold));
+    const cooldownMs = opts.cooldownMs;
+    const resetTimeoutMs = opts.resetTimeoutMs ?? Number.POSITIVE_INFINITY;
+    const applier = (fn, ctx) => {
+        const syncCtx = ctx;
+        return async (signal) => {
+            const key = syncCtx.key;
+            const now = Date.now();
+            // Read state synchronously and make decisions atomically
+            const state = getState(syncCtx.store, key);
+            if (state.isOpen) {
+                const elapsed = now - state.openedAt;
+                if (elapsed >= cooldownMs) {
+                    // Transition to half-open: allow only ONE probe call
+                    state.isOpen = false;
+                    state.halfOpen = true;
+                    setState(syncCtx.store, key, state);
+                }
+                else {
+                    throw new CircuitBreakerOpenError(key, cooldownMs - elapsed);
+                }
+            }
+            else if (state.halfOpen) {
+                // Another call is already probing — block this one
+                throw new CircuitBreakerOpenError(key, 0);
+            }
+            if (now - state.lastFailureTime > resetTimeoutMs && state.failures > 0) {
+                state.failures = 0;
+                setState(syncCtx.store, key, state);
+            }
+            try {
+                const result = await fn(signal);
+                // Re-read state (it may have changed during await) and update atomically
+                const updated = getState(syncCtx.store, key);
+                updated.failures = 0;
+                updated.isOpen = false;
+                updated.halfOpen = false;
+                setState(syncCtx.store, key, updated);
+                return result;
+            }
+            catch (err) {
+                // Signal aborts are not downstream failures — don't count them
+                if (isAbortError(err) || (signal.aborted && err === signal.reason)) {
+                    const updated = getState(syncCtx.store, key);
+                    if (updated.halfOpen) {
+                        // Abort during half-open: probe didn't succeed or fail —
+                        // downstream health is still unknown. Go back to OPEN with
+                        // fresh cooldown so next call waits before probing again.
+                        updated.isOpen = true;
+                        updated.openedAt = Date.now();
+                        updated.halfOpen = false;
+                    }
+                    setState(syncCtx.store, key, updated);
+                    throw err;
+                }
+                const updated = getState(syncCtx.store, key);
+                updated.failures++;
+                updated.lastFailureTime = Date.now();
+                updated.halfOpen = false;
+                if (updated.failures >= threshold) {
+                    updated.isOpen = true;
+                    updated.openedAt = Date.now();
+                }
+                setState(syncCtx.store, key, updated);
+                throw err;
+            }
+        };
+    };
+    applier[REQUIRES_SYNC_STORE] = true;
+    return applier;
+}
+//# sourceMappingURL=circuitBreaker.js.map

package/dist/policies/circuitBreaker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuitBreaker.js","sourceRoot":"","sources":["../../src/policies/circuitBreaker.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD,MAAM,EAAE,GAAG,KAAK,CAAA;AAUhB,SAAS,QAAQ,CAAC,KAAqB,EAAE,GAAW;IAClD,OAAO,KAAK,CAAC,GAAG,CAAe,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;AAC9H,CAAC;AAED,SAAS,QAAQ,CAAC,KAAqB,EAAE,GAAW,EAAE,KAAmB;IACvE,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,EAAE,KAAK,CAAC,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAI,IAA2B;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;IAClC,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,iBAAiB,CAAA;IAEtE,MAAM,OAAO,GAAG,CAAC,EAAY,EAAE,GAAkB,EAAY,EAAE;QAC7D,MAAM,OAAO,GAAG,GAA+D,CAAA;QAE/E,OAAO,KAAK,EAAE,MAAmB,EAAE,EAAE;YACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;YACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAEtB,yDAAyD;YACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YAE1C,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,OAAO,GAAG,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAA;gBACpC,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;oBAC1B,qDAAqD;oBACrD,KAAK,CAAC,MAAM,GAAG,KAAK,CAAA;oBACpB,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAA;oBACrB,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;gBACrC,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,uBAAuB,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,CAAA;gBAC9D,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC1B,mDAAmD;gBACnD,MAAM,IAAI,uBAAuB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YAC3C,CAAC;YAED,IAAI,GAAG,GAAG,KAAK,CAAC,eAAe,GAAG,cAAc,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACvE,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAA;gBAClB,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;YACrC,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAA;gBAC/B,yEAAyE;gBACzE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;gBAC5C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;gBACpB,OAAO,CAAC,MAAM,GAAG,KAAK,CAAA;gBACtB,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAA;gBACxB,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;gBACrC,OAAO,MAAM,CAAA;YACf,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,+DAA+D;gBAC/D,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;oBAC5C,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;wBACrB,yDAAyD;wBACzD,2DAA2D;wBAC3D,0DAA0D;wBAC1D,OAAO,CAAC,MAAM,GAAG,IAAI,CAAA;wBACrB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;wBAC7B,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAA;oBAC1B,CAAC;oBACD,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;oBACrC,MAAM,GAAG,CAAA;gBACX,CAAC;gBACD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;gBAC5C,OAAO,CAAC,QAAQ,EAAE,CAAA;gBAClB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBACpC,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAA;gBACxB,IAAI,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC;oBAClC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAA;oBACrB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBAC/B,CAAC;gBACD,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;gBACrC,MAAM,GAAG,CAAA;YACX,CAAC;QACH,CAAC,CAAA;IACH,CAAC,CAEA;IAAC,OAA+D,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAA;IAC7F,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/policies/dedupe.cjs

@@ -2,38 +2,115 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.dedupePolicy = dedupePolicy;
 const executor_js_1 = require("../core/executor.js");
-// Namespace so dedupe keys never collide with cache keys in the shared store
+const abort_js_1 = require("../utils/abort.js");
+// Namespace so dedupe keys never collide with cache keys in the shared store.
 const NS = 'dedupe:';
 /**
- * Collapses concurrent calls that share the same key into one in-flight Promise.
+ * Module-level generation counter. Monotonic — guarantees uniqueness
+ * across the lifetime of the process. Wraps at `Number.MAX_SAFE_INTEGER`
+ * (which would take ~285 000 years at 1M increments/sec).
+ */
+let generationCounter = 0;
+function nextGeneration() {
+    generationCounter = (generationCounter + 1) % Number.MAX_SAFE_INTEGER;
+    return generationCounter;
+}
+/**
+ * Collapse concurrent calls that share the same key into one in-flight Promise.
  *
- * The first caller starts the work. Every subsequent caller that arrives before
- * the first resolves gets the same Promise back — no duplicate work.
+ * # Properties
  *
- * INVARIANT: requires a SyncStateStore — see stores/base.ts.
- * The read-then-write that makes deduplication work must happen in a single
- * synchronous frame. An async store would introduce an await between get() and
- * set(), letting two concurrent callers both see a miss and both launch work.
- * The REQUIRES_SYNC_STORE symbol on the returned PolicyApplier lets execute()
- * enforce this at runtime for JS callers that bypass TypeScript.
+ *  - **Generation-safe cleanup**: stale originators never delete newer
+ *    entries when `inflightTtl` triggers replacement.
+ *  - **Joiner isolation**: originator's caller-signal abort does NOT
+ *    propagate to joiners. Each joiner races the shared in-flight promise
+ *    against their OWN signal only.
+ *  - **Truthful joiner attempts**: joiners that abort before the originator
+ *    settles report `attempts: 0` (they did no work), not the originator's
+ *    in-progress count.
+ *
+ * # INVARIANT: requires SyncStateStore
  *
- * Known tradeoff (v1): deduped callers see attempts=1 in their ActResult because
- * the retry counter belongs to the originating call's meta object.
+ * The read-then-write that makes deduplication work must happen in a single
+ * synchronous frame. An async store would introduce an `await` between
+ * `get()` and `set()`, letting two concurrent callers both see a miss and
+ * both launch work. The `REQUIRES_SYNC_STORE` symbol on the returned
+ * `PolicyApplier` lets `execute()` enforce this at runtime for JS callers
+ * that bypass TypeScript.
  */
-function dedupePolicy() {
+function dedupePolicy(opts = { enabled: true }) {
+    const inflightTtl = opts.inflightTtl;
     const applier = (fn, ctx) => {
         // Cast is safe: execute() verifies isSyncStore(ctx.store) before calling
         // any policy tagged with REQUIRES_SYNC_STORE.
         const syncCtx = ctx;
-        return async () => {
+        return async (signal) => {
             const key = NS + syncCtx.key;
-            const inflight = syncCtx.store.get(key);
-            if (inflight)
-                return inflight;
-            // No TTL — .finally() cleans up regardless of outcome
-            const promise = fn().finally(() => syncCtx.store.delete(key));
-            syncCtx.store.set(key, promise);
-            return promise;
+            // ─── Fast path: an in-flight promise already exists. Join it. ──────
+            //
+            // The joiner races the in-flight promise against THEIR OWN signal.
+            // They do NOT inherit the originator's signal state — if the
+            // originator's caller cancels, joiners continue waiting (or get
+            // the eventual settled value).
+            const existing = syncCtx.store.get(key);
+            if (existing) {
+                try {
+                    const value = await (0, abort_js_1.raceAbort)(existing.promise, signal);
+                    // Success — copy originator's final meta (attempts, source)
+                    // so the joiner's ActResult reflects the real effort.
+                    syncCtx.meta.attempts = existing.meta.attempts;
+                    syncCtx.meta.source = existing.meta.source;
+                    return value;
+                }
+                catch (err) {
+                    // Joiner either aborted (their own signal) or got the
+                    // originator's settled error.
+                    if (signal.aborted) {
+                        // Joiner's own signal aborted before originator settled.
+                        // They did no work — report `attempts: 0` (truthful).
+                        syncCtx.meta.attempts = 0;
+                        // source stays 'fresh' (default) — joiner didn't read from cache
+                    }
+                    else {
+                        // Originator settled with failure — copy its final meta.
+                        syncCtx.meta.attempts = existing.meta.attempts;
+                        syncCtx.meta.source = existing.meta.source;
+                    }
+                    throw err;
+                }
+            }
+            // ─── Originator path: start the work and publish the promise. ──────
+            //
+            // The stored promise is the RAW fn(signal) — NOT raceAbort-wrapped.
+            // This is critical: if we stored raceAbort(fn, signal), an
+            // originator signal abort would cause the stored promise to reject,
+            // which would propagate to all joiners. Instead:
+            //   - stored: raw fn(signal) — joiners await this
+            //   - originator's await: raceAbort(stored, signal) — originator
+            //     can bail out on their own signal without affecting joiners
+            const generation = nextGeneration();
+            const rawPromise = Promise.resolve(fn(signal));
+            const entry = {
+                promise: rawPromise,
+                meta: syncCtx.meta,
+                generation,
+            };
+            syncCtx.store.set(key, entry, inflightTtl);
+            // Cleanup on settle: only delete if generation matches. If a newer
+            // originator has replaced this entry (because inflightTtl expired),
+            // our cleanup is a no-op — the newer entry stays.
+            const cleanup = () => {
+                const current = syncCtx.store.get(key);
+                if (current && current.generation === generation) {
+                    syncCtx.store.delete(key);
+                }
+            };
+            // Attach cleanup to the RAW promise (not the raceAbort-wrapped one)
+            // so cleanup runs whenever fn settles, regardless of originator abort.
+            rawPromise.then(cleanup, cleanup);
+            // Originator races the raw promise against their own signal —
+            // they can bail out without affecting joiners.
+            return (0, abort_js_1.raceAbort)(rawPromise, signal);
         };
     };
     applier[executor_js_1.REQUIRES_SYNC_STORE] = true;

package/dist/policies/dedupe.d.ts

@@ -1,19 +1,26 @@
-import type { PolicyApplier } from '../types/index.js';
+import type { PolicyApplier, DedupeOptions } from '../types/index.js';
 /**
- * Collapses concurrent calls that share the same key into one in-flight Promise.
+ * Collapse concurrent calls that share the same key into one in-flight Promise.
  *
- * The first caller starts the work. Every subsequent caller that arrives before
- * the first resolves gets the same Promise back — no duplicate work.
+ * # Properties
  *
- * INVARIANT: requires a SyncStateStore — see stores/base.ts.
- * The read-then-write that makes deduplication work must happen in a single
- * synchronous frame. An async store would introduce an await between get() and
- * set(), letting two concurrent callers both see a miss and both launch work.
- * The REQUIRES_SYNC_STORE symbol on the returned PolicyApplier lets execute()
- * enforce this at runtime for JS callers that bypass TypeScript.
+ *  - **Generation-safe cleanup**: stale originators never delete newer
+ *    entries when `inflightTtl` triggers replacement.
+ *  - **Joiner isolation**: originator's caller-signal abort does NOT
+ *    propagate to joiners. Each joiner races the shared in-flight promise
+ *    against their OWN signal only.
+ *  - **Truthful joiner attempts**: joiners that abort before the originator
+ *    settles report `attempts: 0` (they did no work), not the originator's
+ *    in-progress count.
+ *
+ * # INVARIANT: requires SyncStateStore
  *
- * Known tradeoff (v1): deduped callers see attempts=1 in their ActResult because
- * the retry counter belongs to the originating call's meta object.
+ * The read-then-write that makes deduplication work must happen in a single
+ * synchronous frame. An async store would introduce an `await` between
+ * `get()` and `set()`, letting two concurrent callers both see a miss and
+ * both launch work. The `REQUIRES_SYNC_STORE` symbol on the returned
+ * `PolicyApplier` lets `execute()` enforce this at runtime for JS callers
+ * that bypass TypeScript.
  */
-export declare function dedupePolicy<T>(): PolicyApplier<T>;
+export declare function dedupePolicy<T>(opts?: DedupeOptions): PolicyApplier<T>;
 //# sourceMappingURL=dedupe.d.ts.map

package/dist/policies/dedupe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dedupe.d.ts","sourceRoot":"","sources":["../../src/policies/dedupe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAS,aAAa,EAAiB,MAAM,mBAAmB,CAAA;AAY5E;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,YAAY,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,CAuBlD"}
+{"version":3,"file":"dedupe.d.ts","sourceRoot":"","sources":["../../src/policies/dedupe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAS,aAAa,EAAiB,aAAa,EAAE,MAAM,mBAAmB,CAAA;AA6D3F;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,IAAI,GAAE,aAAiC,GAAG,aAAa,CAAC,CAAC,CAAC,CAqFzF"}

package/dist/policies/dedupe.js

@@ -1,36 +1,113 @@
 import { REQUIRES_SYNC_STORE } from '../core/executor.js';
-// Namespace so dedupe keys never collide with cache keys in the shared store
+import { raceAbort } from '../utils/abort.js';
+// Namespace so dedupe keys never collide with cache keys in the shared store.
 const NS = 'dedupe:';
 /**
- * Collapses concurrent calls that share the same key into one in-flight Promise.
+ * Module-level generation counter. Monotonic — guarantees uniqueness
+ * across the lifetime of the process. Wraps at `Number.MAX_SAFE_INTEGER`
+ * (which would take ~285 000 years at 1M increments/sec).
+ */
+let generationCounter = 0;
+function nextGeneration() {
+    generationCounter = (generationCounter + 1) % Number.MAX_SAFE_INTEGER;
+    return generationCounter;
+}
+/**
+ * Collapse concurrent calls that share the same key into one in-flight Promise.
  *
- * The first caller starts the work. Every subsequent caller that arrives before
- * the first resolves gets the same Promise back — no duplicate work.
+ * # Properties
  *
- * INVARIANT: requires a SyncStateStore — see stores/base.ts.
- * The read-then-write that makes deduplication work must happen in a single
- * synchronous frame. An async store would introduce an await between get() and
- * set(), letting two concurrent callers both see a miss and both launch work.
- * The REQUIRES_SYNC_STORE symbol on the returned PolicyApplier lets execute()
- * enforce this at runtime for JS callers that bypass TypeScript.
+ *  - **Generation-safe cleanup**: stale originators never delete newer
+ *    entries when `inflightTtl` triggers replacement.
+ *  - **Joiner isolation**: originator's caller-signal abort does NOT
+ *    propagate to joiners. Each joiner races the shared in-flight promise
+ *    against their OWN signal only.
+ *  - **Truthful joiner attempts**: joiners that abort before the originator
+ *    settles report `attempts: 0` (they did no work), not the originator's
+ *    in-progress count.
+ *
+ * # INVARIANT: requires SyncStateStore
  *
- * Known tradeoff (v1): deduped callers see attempts=1 in their ActResult because
- * the retry counter belongs to the originating call's meta object.
+ * The read-then-write that makes deduplication work must happen in a single
+ * synchronous frame. An async store would introduce an `await` between
+ * `get()` and `set()`, letting two concurrent callers both see a miss and
+ * both launch work. The `REQUIRES_SYNC_STORE` symbol on the returned
+ * `PolicyApplier` lets `execute()` enforce this at runtime for JS callers
+ * that bypass TypeScript.
  */
-export function dedupePolicy() {
+export function dedupePolicy(opts = { enabled: true }) {
+    const inflightTtl = opts.inflightTtl;
     const applier = (fn, ctx) => {
         // Cast is safe: execute() verifies isSyncStore(ctx.store) before calling
         // any policy tagged with REQUIRES_SYNC_STORE.
         const syncCtx = ctx;
-        return async () => {
+        return async (signal) => {
             const key = NS + syncCtx.key;
-            const inflight = syncCtx.store.get(key);
-            if (inflight)
-                return inflight;
-            // No TTL — .finally() cleans up regardless of outcome
-            const promise = fn().finally(() => syncCtx.store.delete(key));
-            syncCtx.store.set(key, promise);
-            return promise;
+            // ─── Fast path: an in-flight promise already exists. Join it. ──────
+            //
+            // The joiner races the in-flight promise against THEIR OWN signal.
+            // They do NOT inherit the originator's signal state — if the
+            // originator's caller cancels, joiners continue waiting (or get
+            // the eventual settled value).
+            const existing = syncCtx.store.get(key);
+            if (existing) {
+                try {
+                    const value = await raceAbort(existing.promise, signal);
+                    // Success — copy originator's final meta (attempts, source)
+                    // so the joiner's ActResult reflects the real effort.
+                    syncCtx.meta.attempts = existing.meta.attempts;
+                    syncCtx.meta.source = existing.meta.source;
+                    return value;
+                }
+                catch (err) {
+                    // Joiner either aborted (their own signal) or got the
+                    // originator's settled error.
+                    if (signal.aborted) {
+                        // Joiner's own signal aborted before originator settled.
+                        // They did no work — report `attempts: 0` (truthful).
+                        syncCtx.meta.attempts = 0;
+                        // source stays 'fresh' (default) — joiner didn't read from cache
+                    }
+                    else {
+                        // Originator settled with failure — copy its final meta.
+                        syncCtx.meta.attempts = existing.meta.attempts;
+                        syncCtx.meta.source = existing.meta.source;
+                    }
+                    throw err;
+                }
+            }
+            // ─── Originator path: start the work and publish the promise. ──────
+            //
+            // The stored promise is the RAW fn(signal) — NOT raceAbort-wrapped.
+            // This is critical: if we stored raceAbort(fn, signal), an
+            // originator signal abort would cause the stored promise to reject,
+            // which would propagate to all joiners. Instead:
+            //   - stored: raw fn(signal) — joiners await this
+            //   - originator's await: raceAbort(stored, signal) — originator
+            //     can bail out on their own signal without affecting joiners
+            const generation = nextGeneration();
+            const rawPromise = Promise.resolve(fn(signal));
+            const entry = {
+                promise: rawPromise,
+                meta: syncCtx.meta,
+                generation,
+            };
+            syncCtx.store.set(key, entry, inflightTtl);
+            // Cleanup on settle: only delete if generation matches. If a newer
+            // originator has replaced this entry (because inflightTtl expired),
+            // our cleanup is a no-op — the newer entry stays.
+            const cleanup = () => {
+                const current = syncCtx.store.get(key);
+                if (current && current.generation === generation) {
+                    syncCtx.store.delete(key);
+                }
+            };
+            // Attach cleanup to the RAW promise (not the raceAbort-wrapped one)
+            // so cleanup runs whenever fn settles, regardless of originator abort.
+            rawPromise.then(cleanup, cleanup);
+            // Originator races the raw promise against their own signal —
+            // they can bail out without affecting joiners.
+            return raceAbort(rawPromise, signal);
         };
     };
     applier[REQUIRES_SYNC_STORE] = true;

package/dist/policies/dedupe.js.map

@@ -1 +1 @@
-{"version":3,"file":"dedupe.js","sourceRoot":"","sources":["../../src/policies/dedupe.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAEzD,6EAA6E;AAC7E,MAAM,EAAE,GAAG,SAAS,CAAA;AAOpB;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,OAAO,GAAG,CAAC,EAAY,EAAE,GAAkB,EAAY,EAAE;QAC7D,yEAAyE;QACzE,8CAA8C;QAC9C,MAAM,OAAO,GAAG,GAAoB,CAAA;QAEpC,OAAO,KAAK,IAAI,EAAE;YAChB,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAA;YAE5B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAa,GAAG,CAAC,CAAA;YACnD,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,sDAAsD;YACtD,MAAM,OAAO,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;YAC7D,OAAO,CAAC,KAAK,CAAC,GAAG,CAAa,GAAG,EAAE,OAAO,CAAC,CAAA;YAC3C,OAAO,OAAO,CAAA;QAChB,CAAC,CAAA;IACH,CAAC,CAGA;IAAC,OAA+D,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAA;IAE7F,OAAO,OAAO,CAAA;AAChB,CAAC"}
+{"version":3,"file":"dedupe.js","sourceRoot":"","sources":["../../src/policies/dedupe.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAE7C,8EAA8E;AAC9E,MAAM,EAAE,GAAG,SAAS,CAAA;AA2CpB;;;;GAIG;AACH,IAAI,iBAAiB,GAAG,CAAC,CAAA;AAEzB,SAAS,cAAc;IACrB,iBAAiB,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAA;IACrE,OAAO,iBAAiB,CAAA;AAC1B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,YAAY,CAAI,OAAsB,EAAE,OAAO,EAAE,IAAI,EAAE;IACrE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;IAEpC,MAAM,OAAO,GAAG,CAAC,EAAY,EAAE,GAAkB,EAAY,EAAE;QAC7D,yEAAyE;QACzE,8CAA8C;QAC9C,MAAM,OAAO,GAAG,GAAoB,CAAA;QAEpC,OAAO,KAAK,EAAE,MAAmB,EAAE,EAAE;YACnC,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAA;YAE5B,sEAAsE;YACtE,EAAE;YACF,mEAAmE;YACnE,6DAA6D;YAC7D,gEAAgE;YAChE,+BAA+B;YAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAiB,GAAG,CAAC,CAAA;YACvD,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;oBACvD,4DAA4D;oBAC5D,sDAAsD;oBACtD,OAAO,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAA;oBAC9C,OAAO,CAAC,IAAI,CAAC,MAAM,GAAK,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAA;oBAC5C,OAAO,KAAK,CAAA;gBACd,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,sDAAsD;oBACtD,8BAA8B;oBAC9B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBACnB,yDAAyD;wBACzD,sDAAsD;wBACtD,OAAO,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAA;wBACzB,iEAAiE;oBACnE,CAAC;yBAAM,CAAC;wBACN,yDAAyD;wBACzD,OAAO,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAA;wBAC9C,OAAO,CAAC,IAAI,CAAC,MAAM,GAAK,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAA;oBAC9C,CAAC;oBACD,MAAM,GAAG,CAAA;gBACX,CAAC;YACH,CAAC;YAED,sEAAsE;YACtE,EAAE;YACF,oEAAoE;YACpE,2DAA2D;YAC3D,oEAAoE;YACpE,iDAAiD;YACjD,kDAAkD;YAClD,iEAAiE;YACjE,iEAAiE;YACjE,MAAM,UAAU,GAAG,cAAc,EAAE,CAAA;YACnC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;YAE9C,MAAM,KAAK,GAAmB;gBAC5B,OAAO,EAAE,UAAU;gBACnB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,UAAU;aACX,CAAA;YACD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAiB,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,CAAA;YAE1D,mEAAmE;YACnE,oEAAoE;YACpE,kDAAkD;YAClD,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAiB,GAAG,CAAC,CAAA;gBACtD,IAAI,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;oBACjD,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBAC3B,CAAC;YACH,CAAC,CAAA;YACD,oEAAoE;YACpE,uEAAuE;YACvE,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAEjC,8DAA8D;YAC9D,+CAA+C;YAC/C,OAAO,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QACtC,CAAC,CAAA;IACH,CAAC,CAGA;IAAC,OAA+D,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAA;IAE7F,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/policies/rateLimit.cjs

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rateLimitPolicy = rateLimitPolicy;
+const executor_js_1 = require("../core/executor.js");
+const errors_js_1 = require("../errors.js");
+const NS = 'rl:';
+function getState(store, key) {
+    return store.get(NS + key) ?? { timestamps: [] };
+}
+function setState(store, key, state) {
+    store.set(NS + key, state);
+}
+function rateLimitPolicy(opts) {
+    const maxCalls = Math.max(1, Math.floor(opts.maxCalls));
+    const windowMs = opts.windowMs;
+    const applier = (fn, ctx) => {
+        const syncCtx = ctx;
+        return async (signal) => {
+            const key = syncCtx.key;
+            const now = Date.now();
+            const state = getState(syncCtx.store, key);
+            const cutoff = now - windowMs;
+            state.timestamps = state.timestamps.filter(t => t > cutoff);
+            if (state.timestamps.length >= maxCalls) {
+                setState(syncCtx.store, key, state);
+                throw new errors_js_1.RateLimitError(key, maxCalls, windowMs);
+            }
+            state.timestamps.push(now);
+            setState(syncCtx.store, key, state);
+            return fn(signal);
+        };
+    };
+    applier[executor_js_1.REQUIRES_SYNC_STORE] = true;
+    return applier;
+}

package/dist/policies/rateLimit.d.ts

@@ -0,0 +1,3 @@
+import type { PolicyApplier, RateLimitOptions } from '../types/index.js';
+export declare function rateLimitPolicy<T>(opts: RateLimitOptions): PolicyApplier<T>;
+//# sourceMappingURL=rateLimit.d.ts.map

package/dist/policies/rateLimit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimit.d.ts","sourceRoot":"","sources":["../../src/policies/rateLimit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAS,aAAa,EAAiB,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAmB9F,wBAAgB,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,GAAG,aAAa,CAAC,CAAC,CAAC,CA6B3E"}

package/dist/policies/rateLimit.js

@@ -0,0 +1,33 @@
+import { REQUIRES_SYNC_STORE } from '../core/executor.js';
+import { RateLimitError } from '../errors.js';
+const NS = 'rl:';
+function getState(store, key) {
+    return store.get(NS + key) ?? { timestamps: [] };
+}
+function setState(store, key, state) {
+    store.set(NS + key, state);
+}
+export function rateLimitPolicy(opts) {
+    const maxCalls = Math.max(1, Math.floor(opts.maxCalls));
+    const windowMs = opts.windowMs;
+    const applier = (fn, ctx) => {
+        const syncCtx = ctx;
+        return async (signal) => {
+            const key = syncCtx.key;
+            const now = Date.now();
+            const state = getState(syncCtx.store, key);
+            const cutoff = now - windowMs;
+            state.timestamps = state.timestamps.filter(t => t > cutoff);
+            if (state.timestamps.length >= maxCalls) {
+                setState(syncCtx.store, key, state);
+                throw new RateLimitError(key, maxCalls, windowMs);
+            }
+            state.timestamps.push(now);
+            setState(syncCtx.store, key, state);
+            return fn(signal);
+        };
+    };
+    applier[REQUIRES_SYNC_STORE] = true;
+    return applier;
+}
+//# sourceMappingURL=rateLimit.js.map

package/dist/policies/rateLimit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimit.js","sourceRoot":"","sources":["../../src/policies/rateLimit.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAE7C,MAAM,EAAE,GAAG,KAAK,CAAA;AAMhB,SAAS,QAAQ,CAAC,KAAqB,EAAE,GAAW;IAClD,OAAO,KAAK,CAAC,GAAG,CAAiB,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;AAClE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAqB,EAAE,GAAW,EAAE,KAAqB;IACzE,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,EAAE,KAAK,CAAC,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,eAAe,CAAI,IAAsB;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;IAE9B,MAAM,OAAO,GAAG,CAAC,EAAY,EAAE,GAAkB,EAAY,EAAE;QAC7D,MAAM,OAAO,GAAG,GAA+D,CAAA;QAE/E,OAAO,KAAK,EAAE,MAAmB,EAAE,EAAE;YACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;YACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YAE1C,MAAM,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAA;YAC7B,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAA;YAE3D,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;gBACxC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;gBACnC,MAAM,IAAI,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;YACnD,CAAC;YAED,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC1B,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;YAEnC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAA;QACnB,CAAC,CAAA;IACH,CAAC,CAEA;IAAC,OAA+D,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAA;IAC7F,OAAO,OAAO,CAAA;AAChB,CAAC"}