actly 1.1.5 → 1.2.0

package/dist/policies/cache.js

@@ -1,11 +1,31 @@
 import { isSyncStore } from '../stores/base.js';
 const NS = 'cache:';
 const INFLIGHT_NS = '__inflight:cache:';
+let generationCounter = 0;
+function nextGeneration() {
+    generationCounter = (generationCounter + 1) % Number.MAX_SAFE_INTEGER;
+    return generationCounter;
+}
 /**
  * Short-circuit the entire downstream chain on a cache hit.
  * On a miss, run `fn` and store the result with TTL.
  *
- * # Single-flight (fixes cache stampede)
+ * # Properties
+ *
+ *  - **Single-flight originator isolation**: the stored in-flight promise is
+ *    the RAW `fn(signal)` — NOT raceAbort-wrapped. An originator's signal
+ *    abort no longer causes all cache-miss joiners to reject. Each caller
+ *    races against their OWN signal only.
+ *  - **Generation-safe inflight cleanup**: stale originators don't delete
+ *    newer entries (same pattern as dedupePolicy).
+ *  - **Signal-aware async store path**: between `await store.get()` and
+ *    `await store.set()`, we re-check `signal.aborted`. The previous
+ *    version would happily return a cached value even after the caller
+ *    aborted mid-Redis-latency.
+ *  - **Cache hit honours abort**: if `signal.aborted` is true at policy
+ *    entry, we reject immediately — consistent with `act()`'s contract.
+ *
+ * # Single-flight (cache stampede prevention)
  *
  * On a sync store, the policy also stores the in-flight Promise under a
  * separate `__inflight:cache:<key>` slot. Concurrent callers that miss the
@@ -28,73 +48,148 @@ const INFLIGHT_NS = '__inflight:cache:';
  * # Cache hit semantics
  *
  * On a cache hit, `meta.source` is set to `'cache'` and `meta.attempts` is
- * set to `0` — no work was performed. (v1.1.0 reported `attempts: 1` on
- * cache hits, which was inconsistent with the documented meaning of
- * `attempts`. v1.1.5 fixes this.)
+ * set to `0` — no work was performed.
  *
  * Failures are NEVER cached. Only successful values are stored.
  */
 export function cachePolicy(opts) {
     return (fn, ctx) => async (signal) => {
+        // Honour abort on cache hit too. Consistent with act()'s
+        // "reject immediately if signal aborted" contract.
+        if (signal.aborted)
+            return Promise.reject(signal.reason);
         const key = NS + ctx.key;
         const inflightKey = INFLIGHT_NS + ctx.key;
         // ─── Sync store: fast path with single-flight ────────────────────────
         if (isSyncStore(ctx.store)) {
+            // Capture the narrowed sync store so closures (cleanup) keep the
+            // type information — TS doesn't carry `isSyncStore` narrowing
+            // into nested function bodies.
+            const store = ctx.store;
+            const obs = ctx.observability;
             // 1. Cache hit?
-            const hit = ctx.store.get(key);
+            const hit = store.get(key);
             if (hit) {
                 ctx.meta.source = 'cache';
                 ctx.meta.attempts = 0;
+                // Emit cache-hit event if hooks are registered.
+                // Compute actual age from the entry's insertion timestamp.
+                if (obs) {
+                    const ageMs = Date.now() - hit.insertedAt;
+                    obs.hooks.onCacheHit?.({
+                        type: 'cache-hit', key: ctx.key, traceId: obs.traceId,
+                        timestamp: Date.now(), ageMs: Math.max(0, ageMs),
+                    });
+                }
                 return hit.value;
             }
+            // Emit cache-miss event if hooks are registered.
+            if (obs) {
+                obs.hooks.onCacheMiss?.({
+                    type: 'cache-miss', key: ctx.key, traceId: obs.traceId,
+                    timestamp: Date.now(),
+                });
+            }
             // 2. In-flight single-flight hit? Join it.
-            const inflight = ctx.store.get(inflightKey);
-            if (inflight)
-                return inflight;
+            //
+            // The stored promise is RAW fn(signal). Joiners race it
+            // against their OWN signal only — originator abort doesn't
+            // propagate to joiners.
+            const inflight = store.get(inflightKey);
+            if (inflight) {
+                // Race the in-flight promise against OUR OWN signal. If we
+                // abort, we reject — but other joiners and the originator
+                // continue unaffected.
+                try {
+                    const value = await raceWithOwnSignal(inflight.promise, signal);
+                    // Mirror originator's meta so joiner's ActResult reflects
+                    // the real effort (attempts, source).
+                    ctx.meta.attempts = inflight.meta.attempts;
+                    ctx.meta.source = inflight.meta.source;
+                    return value;
+                }
+                catch (err) {
+                    // Copy meta on failure too (same as dedupe joiners)
+                    if (signal.aborted) {
+                        ctx.meta.attempts = 0;
+                    }
+                    else {
+                        ctx.meta.attempts = inflight.meta.attempts;
+                        ctx.meta.source = inflight.meta.source;
+                    }
+                    throw err;
+                }
+            }
             // 3. Originator: launch fn, cache on success (fail-open).
-            const promise = Promise.resolve(fn(signal)).then((value) => {
+            //
+            // The stored promise is the RAW fn(signal) — NOT raceAbort-wrapped.
+            // Originator's own await is wrapped in raceWithOwnSignal so they
+            // can bail on their signal without affecting joiners.
+            const generation = nextGeneration();
+            const rawPromise = Promise.resolve(fn(signal)).then((value) => {
                 try {
-                    ctx.store.set(key, { value }, opts.ttl);
+                    store.set(key, { value, insertedAt: Date.now() }, opts.ttl);
                 }
                 catch {
                     // Fail-open: cache write failure should not surface to caller.
-                    // The value is still valid; next call will just re-run fn.
                 }
                 return value;
-            }, (err) => { throw err; });
-            // Try to publish the in-flight promise so concurrent callers can
-            // join (single-flight). If store.set throws, single-flight is
-            // disabled for this call — concurrent callers will all run fn.
-            // That's still correct, just less efficient.
+            }, 
+            // Re-throw the error so joiners see it. Don't cache failures.
+            (err) => { throw err; });
+            // Publish the in-flight entry for single-flight. If store.set
+            // throws, single-flight is disabled for this call — concurrent
+            // callers will all run fn. Still correct, just less efficient.
             try {
-                ctx.store.set(inflightKey, promise);
-                // Cleanup the in-flight slot on settle. The `.catch(() => {})`
-                // suppresses the unhandled-rejection warning that would otherwise
-                // fire on the `.finally()` chain — the original `promise` (with
-                // its rejection) is returned to the caller, which has its own
-                // try/catch via act().
-                promise.finally(() => {
-                    try {
-                        ctx.store.delete(inflightKey);
-                    }
-                    catch { /* ignore */ }
-                }).catch(() => { });
+                store.set(inflightKey, { promise: rawPromise, generation, meta: ctx.meta });
             }
             catch {
                 // Single-flight unavailable; proceed without publishing.
+                // Originator still gets their value (or error).
             }
-            return promise;
+            // Cleanup the in-flight slot on settle — generation-safe.
+            const cleanup = () => {
+                const current = store.get(inflightKey);
+                if (current && current.generation === generation) {
+                    try {
+                        store.delete(inflightKey);
+                    }
+                    catch { /* ignore */ }
+                }
+            };
+            rawPromise.then(cleanup, cleanup);
+            // Originator races the raw promise against their OWN signal.
+            return raceWithOwnSignal(rawPromise, signal);
         }
-        // ─── Async store: no single-flight (race window unavoidable) ─────────
+        // Async store: no single-flight (race window unavoidable).
+        // Re-check signal.aborted between awaits.
+        const obs = ctx.observability;
         const hit = await ctx.store.get(key);
+        if (signal.aborted)
+            return Promise.reject(signal.reason);
         if (hit) {
             ctx.meta.source = 'cache';
             ctx.meta.attempts = 0;
+            if (obs) {
+                const ageMs = Date.now() - hit.insertedAt;
+                obs.hooks.onCacheHit?.({
+                    type: 'cache-hit', key: ctx.key, traceId: obs.traceId,
+                    timestamp: Date.now(), ageMs: Math.max(0, ageMs),
+                });
+            }
             return hit.value;
         }
+        if (obs) {
+            obs.hooks.onCacheMiss?.({
+                type: 'cache-miss', key: ctx.key, traceId: obs.traceId,
+                timestamp: Date.now(),
+            });
+        }
         const value = await fn(signal);
+        if (signal.aborted)
+            return Promise.reject(signal.reason);
         try {
-            await ctx.store.set(key, { value }, opts.ttl);
+            await ctx.store.set(key, { value, insertedAt: Date.now() }, opts.ttl);
         }
         catch {
             // Fail-open: see sync path comment.
@@ -102,4 +197,46 @@ export function cachePolicy(opts) {
         return value;
     };
 }
+/**
+ * Race a promise against a signal — but if the signal aborts, mark the
+ * underlying promise as handled (so its eventual rejection doesn't surface
+ * as an unhandled rejection). The underlying promise keeps running for any
+ * other consumers (e.g. joiners in single-flight).
+ *
+ * This is `raceAbort` from `utils/abort.ts`, inlined here to avoid an import
+ * cycle (cache.ts already imports from stores, dedupe imports from abort —
+ * keeping cache independent of abort reduces the import graph depth).
+ *
+ * Internal — not exported.
+ */
+function raceWithOwnSignal(promise, signal) {
+    if (signal.aborted) {
+        promise.catch(() => { }); // mark as handled
+        return Promise.reject(signal.reason);
+    }
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const onAbort = () => {
+            if (settled)
+                return;
+            settled = true;
+            signal.removeEventListener('abort', onAbort);
+            reject(signal.reason);
+        };
+        signal.addEventListener('abort', onAbort);
+        promise.then((value) => {
+            if (settled)
+                return;
+            settled = true;
+            signal.removeEventListener('abort', onAbort);
+            resolve(value);
+        }, (error) => {
+            if (settled)
+                return;
+            settled = true;
+            signal.removeEventListener('abort', onAbort);
+            reject(error);
+        });
+    });
+}
 //# sourceMappingURL=cache.js.map

package/dist/policies/cache.js.map

@@ -1 +1 @@
-{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/policies/cache.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,MAAM,EAAE,GAAG,QAAQ,CAAA;AACnB,MAAM,WAAW,GAAG,mBAAmB,CAAA;AAQvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,UAAU,WAAW,CAAI,IAAkB;IAC/C,OAAO,CAAC,EAAY,EAAE,GAAkB,EAAY,EAAE,CACpD,KAAK,EAAE,MAAmB,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,CAAA;QACxB,MAAM,WAAW,GAAG,WAAW,GAAG,GAAG,CAAC,GAAG,CAAA;QAEzC,wEAAwE;QACxE,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,gBAAgB;YAChB,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAgB,GAAG,CAAC,CAAA;YAC7C,IAAI,GAAG,EAAE,CAAC;gBACR,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAA;gBACzB,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAA;gBACrB,OAAO,GAAG,CAAC,KAAK,CAAA;YAClB,CAAC;YAED,2CAA2C;YAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAa,WAAW,CAAC,CAAA;YACvD,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAA;YAE7B,0DAA0D;YAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAC9C,CAAC,KAAK,EAAE,EAAE;gBACR,IAAI,CAAC;oBACH,GAAG,CAAC,KAAK,CAAC,GAAG,CAAgB,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;gBACxD,CAAC;gBAAC,MAAM,CAAC;oBACP,+DAA+D;oBAC/D,2DAA2D;gBAC7D,CAAC;gBACD,OAAO,KAAK,CAAA;YACd,CAAC,EACD,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,GAAG,CAAA,CAAC,CAAC,CACvB,CAAA;YAED,iEAAiE;YACjE,8DAA8D;YAC9D,+DAA+D;YAC/D,6CAA6C;YAC7C,IAAI,CAAC;gBACH,GAAG,CAAC,KAAK,CAAC,GAAG,CAAa,WAAW,EAAE,OAAO,CAAC,CAAA;gBAC/C,+DAA+D;gBAC/D,kEAAkE;gBAClE,gEAAgE;gBAChE,8DAA8D;gBAC9D,uBAAuB;gBACvB,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;oBACnB,IAAI,CAAC;wBAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBAC9D,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAiC,CAAC,CAAC,CAAA;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,yDAAyD;YAC3D,CAAC;YAED,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,wEAAwE;QACxE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAgB,GAAG,CAAC,CAAA;QACnD,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAA;YACzB,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAA;YACrB,OAAO,GAAG,CAAC,KAAK,CAAA;QAClB,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAA;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAgB,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;AACL,CAAC"}
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/policies/cache.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,MAAM,EAAE,GAAG,QAAQ,CAAA;AACnB,MAAM,WAAW,GAAG,mBAAmB,CAAA;AAoBvC,IAAI,iBAAiB,GAAG,CAAC,CAAA;AACzB,SAAS,cAAc;IACrB,iBAAiB,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAA;IACrE,OAAO,iBAAiB,CAAA;AAC1B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,MAAM,UAAU,WAAW,CAAI,IAAkB;IAC/C,OAAO,CAAC,EAAY,EAAE,GAAkB,EAAY,EAAE,CACpD,KAAK,EAAE,MAAmB,EAAE,EAAE;QAC5B,yDAAyD;QACzD,mDAAmD;QACnD,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAExD,MAAM,GAAG,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,CAAA;QACxB,MAAM,WAAW,GAAG,WAAW,GAAG,GAAG,CAAC,GAAG,CAAA;QAEzC,wEAAwE;QACxE,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,iEAAiE;YACjE,8DAA8D;YAC9D,+BAA+B;YAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAA;YACvB,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,CAAA;YAC7B,gBAAgB;YAChB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAgB,GAAG,CAAC,CAAA;YACzC,IAAI,GAAG,EAAE,CAAC;gBACR,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAA;gBACzB,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAA;gBACrB,gDAAgD;gBAChD,2DAA2D;gBAC3D,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,CAAA;oBACzC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;wBACrB,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO;wBACrD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC;qBACjD,CAAC,CAAA;gBACJ,CAAC;gBACD,OAAO,GAAG,CAAC,KAAK,CAAA;YAClB,CAAC;YAED,iDAAiD;YACjD,IAAI,GAAG,EAAE,CAAC;gBACR,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;oBACtB,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO;oBACtD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CAAA;YACJ,CAAC;YAED,2CAA2C;YAC3C,EAAE;YACF,wDAAwD;YACxD,2DAA2D;YAC3D,wBAAwB;YACxB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAmB,WAAW,CAAC,CAAA;YACzD,IAAI,QAAQ,EAAE,CAAC;gBACb,2DAA2D;gBAC3D,0DAA0D;gBAC1D,uBAAuB;gBACvB,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;oBAC/D,0DAA0D;oBAC1D,sCAAsC;oBACtC,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAA;oBAC1C,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAA;oBACtC,OAAO,KAAK,CAAA;gBACd,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,oDAAoD;oBACpD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBACnB,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAA;oBACvB,CAAC;yBAAM,CAAC;wBACN,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAA;wBAC1C,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAA;oBACxC,CAAC;oBACD,MAAM,GAAG,CAAA;gBACX,CAAC;YACH,CAAC;YAED,0DAA0D;YAC1D,EAAE;YACF,oEAAoE;YACpE,iEAAiE;YACjE,sDAAsD;YACtD,MAAM,UAAU,GAAG,cAAc,EAAE,CAAA;YACnC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CACjD,CAAC,KAAK,EAAE,EAAE;gBACR,IAAI,CAAC;oBACH,KAAK,CAAC,GAAG,CAAgB,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;gBAC5E,CAAC;gBAAC,MAAM,CAAC;oBACP,+DAA+D;gBACjE,CAAC;gBACD,OAAO,KAAK,CAAA;YACd,CAAC;YACD,8DAA8D;YAC9D,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,GAAG,CAAA,CAAC,CAAC,CACvB,CAAA;YAED,8DAA8D;YAC9D,+DAA+D;YAC/D,+DAA+D;YAC/D,IAAI,CAAC;gBACH,KAAK,CAAC,GAAG,CAAmB,WAAW,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;YAC/F,CAAC;YAAC,MAAM,CAAC;gBACP,yDAAyD;gBACzD,gDAAgD;YAClD,CAAC;YAED,0DAA0D;YAC1D,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAmB,WAAW,CAAC,CAAA;gBACxD,IAAI,OAAO,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;oBACjD,IAAI,CAAC;wBAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC,CAAA;YACD,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAEjC,6DAA6D;YAC7D,OAAO,iBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QAC9C,CAAC;QAED,2DAA2D;QAC3D,0CAA0C;QAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,CAAA;QAC7B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAgB,GAAG,CAAC,CAAA;QACnD,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACxD,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAA;YACzB,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAA;YACrB,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,CAAA;gBACzC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;oBACrB,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO;oBACrD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC;iBACjD,CAAC,CAAA;YACJ,CAAC;YACD,OAAO,GAAG,CAAC,KAAK,CAAA;QAClB,CAAC;QACD,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;gBACtB,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO;gBACtD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC,CAAA;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAA;QAC9B,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACxD,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAgB,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,iBAAiB,CAAI,OAAmB,EAAE,MAAmB;IACpE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA,CAAE,kBAAkB;QAC3C,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACtC,CAAC;IAED,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACvB,CAAC,CAAA;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAEzC,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE;YACR,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC5C,OAAO,CAAC,KAAK,CAAC,CAAA;QAChB,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;YACR,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC5C,MAAM,CAAC,KAAK,CAAC,CAAA;QACf,CAAC,CACF,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/policies/circuitBreaker.cjs

@@ -0,0 +1,85 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.circuitBreakerPolicy = circuitBreakerPolicy;
+const executor_js_1 = require("../core/executor.js");
+const errors_js_1 = require("../errors.js");
+const abort_js_1 = require("../utils/abort.js");
+const NS = 'cb:';
+function getState(store, key) {
+    return store.get(NS + key) ?? { failures: 0, lastFailureTime: 0, isOpen: false, openedAt: 0, halfOpen: false };
+}
+function setState(store, key, state) {
+    store.set(NS + key, state);
+}
+function circuitBreakerPolicy(opts) {
+    const threshold = Math.max(1, Math.floor(opts.threshold));
+    const cooldownMs = opts.cooldownMs;
+    const resetTimeoutMs = opts.resetTimeoutMs ?? Number.POSITIVE_INFINITY;
+    const applier = (fn, ctx) => {
+        const syncCtx = ctx;
+        return async (signal) => {
+            const key = syncCtx.key;
+            const now = Date.now();
+            // Read state synchronously and make decisions atomically
+            const state = getState(syncCtx.store, key);
+            if (state.isOpen) {
+                const elapsed = now - state.openedAt;
+                if (elapsed >= cooldownMs) {
+                    // Transition to half-open: allow only ONE probe call
+                    state.isOpen = false;
+                    state.halfOpen = true;
+                    setState(syncCtx.store, key, state);
+                }
+                else {
+                    throw new errors_js_1.CircuitBreakerOpenError(key, cooldownMs - elapsed);
+                }
+            }
+            else if (state.halfOpen) {
+                // Another call is already probing — block this one
+                throw new errors_js_1.CircuitBreakerOpenError(key, 0);
+            }
+            if (now - state.lastFailureTime > resetTimeoutMs && state.failures > 0) {
+                state.failures = 0;
+                setState(syncCtx.store, key, state);
+            }
+            try {
+                const result = await fn(signal);
+                // Re-read state (it may have changed during await) and update atomically
+                const updated = getState(syncCtx.store, key);
+                updated.failures = 0;
+                updated.isOpen = false;
+                updated.halfOpen = false;
+                setState(syncCtx.store, key, updated);
+                return result;
+            }
+            catch (err) {
+                // Signal aborts are not downstream failures — don't count them
+                if ((0, abort_js_1.isAbortError)(err) || (signal.aborted && err === signal.reason)) {
+                    const updated = getState(syncCtx.store, key);
+                    if (updated.halfOpen) {
+                        // Abort during half-open: probe didn't succeed or fail —
+                        // downstream health is still unknown. Go back to OPEN with
+                        // fresh cooldown so next call waits before probing again.
+                        updated.isOpen = true;
+                        updated.openedAt = Date.now();
+                        updated.halfOpen = false;
+                    }
+                    setState(syncCtx.store, key, updated);
+                    throw err;
+                }
+                const updated = getState(syncCtx.store, key);
+                updated.failures++;
+                updated.lastFailureTime = Date.now();
+                updated.halfOpen = false;
+                if (updated.failures >= threshold) {
+                    updated.isOpen = true;
+                    updated.openedAt = Date.now();
+                }
+                setState(syncCtx.store, key, updated);
+                throw err;
+            }
+        };
+    };
+    applier[executor_js_1.REQUIRES_SYNC_STORE] = true;
+    return applier;
+}

package/dist/policies/circuitBreaker.d.ts

@@ -0,0 +1,3 @@
+import type { PolicyApplier, CircuitBreakerOptions } from '../types/index.js';
+export declare function circuitBreakerPolicy<T>(opts: CircuitBreakerOptions): PolicyApplier<T>;
+//# sourceMappingURL=circuitBreaker.d.ts.map

package/dist/policies/circuitBreaker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuitBreaker.d.ts","sourceRoot":"","sources":["../../src/policies/circuitBreaker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAS,aAAa,EAAiB,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AAwBnG,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,GAAG,aAAa,CAAC,CAAC,CAAC,CA2ErF"}

package/dist/policies/circuitBreaker.js

@@ -0,0 +1,83 @@
+import { REQUIRES_SYNC_STORE } from '../core/executor.js';
+import { CircuitBreakerOpenError } from '../errors.js';
+import { isAbortError } from '../utils/abort.js';
+const NS = 'cb:';
+function getState(store, key) {
+    return store.get(NS + key) ?? { failures: 0, lastFailureTime: 0, isOpen: false, openedAt: 0, halfOpen: false };
+}
+function setState(store, key, state) {
+    store.set(NS + key, state);
+}
+export function circuitBreakerPolicy(opts) {
+    const threshold = Math.max(1, Math.floor(opts.threshold));
+    const cooldownMs = opts.cooldownMs;
+    const resetTimeoutMs = opts.resetTimeoutMs ?? Number.POSITIVE_INFINITY;
+    const applier = (fn, ctx) => {
+        const syncCtx = ctx;
+        return async (signal) => {
+            const key = syncCtx.key;
+            const now = Date.now();
+            // Read state synchronously and make decisions atomically
+            const state = getState(syncCtx.store, key);
+            if (state.isOpen) {
+                const elapsed = now - state.openedAt;
+                if (elapsed >= cooldownMs) {
+                    // Transition to half-open: allow only ONE probe call
+                    state.isOpen = false;
+                    state.halfOpen = true;
+                    setState(syncCtx.store, key, state);
+                }
+                else {
+                    throw new CircuitBreakerOpenError(key, cooldownMs - elapsed);
+                }
+            }
+            else if (state.halfOpen) {
+                // Another call is already probing — block this one
+                throw new CircuitBreakerOpenError(key, 0);
+            }
+            if (now - state.lastFailureTime > resetTimeoutMs && state.failures > 0) {
+                state.failures = 0;
+                setState(syncCtx.store, key, state);
+            }
+            try {
+                const result = await fn(signal);
+                // Re-read state (it may have changed during await) and update atomically
+                const updated = getState(syncCtx.store, key);
+                updated.failures = 0;
+                updated.isOpen = false;
+                updated.halfOpen = false;
+                setState(syncCtx.store, key, updated);
+                return result;
+            }
+            catch (err) {
+                // Signal aborts are not downstream failures — don't count them
+                if (isAbortError(err) || (signal.aborted && err === signal.reason)) {
+                    const updated = getState(syncCtx.store, key);
+                    if (updated.halfOpen) {
+                        // Abort during half-open: probe didn't succeed or fail —
+                        // downstream health is still unknown. Go back to OPEN with
+                        // fresh cooldown so next call waits before probing again.
+                        updated.isOpen = true;
+                        updated.openedAt = Date.now();
+                        updated.halfOpen = false;
+                    }
+                    setState(syncCtx.store, key, updated);
+                    throw err;
+                }
+                const updated = getState(syncCtx.store, key);
+                updated.failures++;
+                updated.lastFailureTime = Date.now();
+                updated.halfOpen = false;
+                if (updated.failures >= threshold) {
+                    updated.isOpen = true;
+                    updated.openedAt = Date.now();
+                }
+                setState(syncCtx.store, key, updated);
+                throw err;
+            }
+        };
+    };
+    applier[REQUIRES_SYNC_STORE] = true;
+    return applier;
+}
+//# sourceMappingURL=circuitBreaker.js.map

package/dist/policies/circuitBreaker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuitBreaker.js","sourceRoot":"","sources":["../../src/policies/circuitBreaker.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD,MAAM,EAAE,GAAG,KAAK,CAAA;AAUhB,SAAS,QAAQ,CAAC,KAAqB,EAAE,GAAW;IAClD,OAAO,KAAK,CAAC,GAAG,CAAe,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;AAC9H,CAAC;AAED,SAAS,QAAQ,CAAC,KAAqB,EAAE,GAAW,EAAE,KAAmB;IACvE,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,EAAE,KAAK,CAAC,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAI,IAA2B;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;IAClC,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,iBAAiB,CAAA;IAEtE,MAAM,OAAO,GAAG,CAAC,EAAY,EAAE,GAAkB,EAAY,EAAE;QAC7D,MAAM,OAAO,GAAG,GAA+D,CAAA;QAE/E,OAAO,KAAK,EAAE,MAAmB,EAAE,EAAE;YACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;YACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAEtB,yDAAyD;YACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YAE1C,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,OAAO,GAAG,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAA;gBACpC,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;oBAC1B,qDAAqD;oBACrD,KAAK,CAAC,MAAM,GAAG,KAAK,CAAA;oBACpB,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAA;oBACrB,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;gBACrC,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,uBAAuB,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,CAAA;gBAC9D,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC1B,mDAAmD;gBACnD,MAAM,IAAI,uBAAuB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YAC3C,CAAC;YAED,IAAI,GAAG,GAAG,KAAK,CAAC,eAAe,GAAG,cAAc,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACvE,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAA;gBAClB,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;YACrC,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAA;gBAC/B,yEAAyE;gBACzE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;gBAC5C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;gBACpB,OAAO,CAAC,MAAM,GAAG,KAAK,CAAA;gBACtB,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAA;gBACxB,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;gBACrC,OAAO,MAAM,CAAA;YACf,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,+DAA+D;gBAC/D,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;oBAC5C,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;wBACrB,yDAAyD;wBACzD,2DAA2D;wBAC3D,0DAA0D;wBAC1D,OAAO,CAAC,MAAM,GAAG,IAAI,CAAA;wBACrB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;wBAC7B,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAA;oBAC1B,CAAC;oBACD,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;oBACrC,MAAM,GAAG,CAAA;gBACX,CAAC;gBACD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;gBAC5C,OAAO,CAAC,QAAQ,EAAE,CAAA;gBAClB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBACpC,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAA;gBACxB,IAAI,OAAO,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC;oBAClC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAA;oBACrB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBAC/B,CAAC;gBACD,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;gBACrC,MAAM,GAAG,CAAA;YACX,CAAC;QACH,CAAC,CAAA;IACH,CAAC,CAEA;IAAC,OAA+D,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAA;IAC7F,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/policies/dedupe.cjs

@@ -5,37 +5,29 @@ const executor_js_1 = require("../core/executor.js");
 const abort_js_1 = require("../utils/abort.js");
 // Namespace so dedupe keys never collide with cache keys in the shared store.
 const NS = 'dedupe:';
+/**
+ * Module-level generation counter. Monotonic — guarantees uniqueness
+ * across the lifetime of the process. Wraps at `Number.MAX_SAFE_INTEGER`
+ * (which would take ~285 000 years at 1M increments/sec).
+ */
+let generationCounter = 0;
+function nextGeneration() {
+    generationCounter = (generationCounter + 1) % Number.MAX_SAFE_INTEGER;
+    return generationCounter;
+}
 /**
  * Collapse concurrent calls that share the same key into one in-flight Promise.
  *
- * # How it works
- *
- * The first caller (originator) starts the work and stores
- * `{ promise, meta }` in the store under `dedupe:<key>`. Every subsequent
- * caller that arrives before the promise settles receives the SAME promise
- * — no duplicate work.
- *
- * # Shared `meta` (fixes v1.0 trade-off)
- *
- * The originator's `ctx.meta` reference is stored alongside the promise.
- * Inner policies (e.g. `retryPolicy`) mutate it as they run. After the
- * promise settles, joiners copy `attempts` and `source` from the shared
- * meta into their own `ctx.meta`. This means a joiner's `ActResult.attempts`
- * reflects the real effort (e.g. `3` if the originator retried twice), not
- * the misleading default of `1`.
- *
- * # Abort safety (fixes hung-fn block)
+ * # Properties
  *
- * Joiners race the in-flight promise against their own AbortSignal via
- * `raceAbort`. If a joiner's signal aborts (e.g. their `totalTimeout`
- * fires), they reject immediately — they don't have to wait for the
- * originator to finish. The originator's promise continues in the
- * background for any other joiners that haven't aborted.
- *
- * If `inflightTtl` is set, the store entry is also TTL'd: if the
- * originator never settles, new callers can start fresh after the TTL
- * expires (the original promise still leaks unless an outer timeout
- * fires, but new callers aren't blocked).
+ *  - **Generation-safe cleanup**: stale originators never delete newer
+ *    entries when `inflightTtl` triggers replacement.
+ *  - **Joiner isolation**: originator's caller-signal abort does NOT
+ *    propagate to joiners. Each joiner races the shared in-flight promise
+ *    against their OWN signal only.
+ *  - **Truthful joiner attempts**: joiners that abort before the originator
+ *    settles report `attempts: 0` (they did no work), not the originator's
+ *    in-progress count.
  *
  * # INVARIANT: requires SyncStateStore
  *
@@ -54,34 +46,71 @@ function dedupePolicy(opts = { enabled: true }) {
         const syncCtx = ctx;
         return async (signal) => {
             const key = NS + syncCtx.key;
-            // Fast path: an in-flight promise already exists. Join it.
-            // raceAbort ensures we don't block on a hung originator if our own
-            // signal aborts.
+            // ─── Fast path: an in-flight promise already exists. Join it. ──────
+            //
+            // The joiner races the in-flight promise against THEIR OWN signal.
+            // They do NOT inherit the originator's signal state — if the
+            // originator's caller cancels, joiners continue waiting (or get
+            // the eventual settled value).
             const existing = syncCtx.store.get(key);
             if (existing) {
                 try {
                     const value = await (0, abort_js_1.raceAbort)(existing.promise, signal);
-                    return value;
-                }
-                finally {
-                    // Copy the originator's final meta into our own, regardless of
-                    // success or failure. By the time `existing.promise` has settled
-                    // (or our signal aborted), the originator's retry loop has set
-                    // the final attempt count.
+                    // Success — copy originator's final meta (attempts, source)
+                    // so the joiner's ActResult reflects the real effort.
                     syncCtx.meta.attempts = existing.meta.attempts;
                     syncCtx.meta.source = existing.meta.source;
+                    return value;
+                }
+                catch (err) {
+                    // Joiner either aborted (their own signal) or got the
+                    // originator's settled error.
+                    if (signal.aborted) {
+                        // Joiner's own signal aborted before originator settled.
+                        // They did no work — report `attempts: 0` (truthful).
+                        syncCtx.meta.attempts = 0;
+                        // source stays 'fresh' (default) — joiner didn't read from cache
+                    }
+                    else {
+                        // Originator settled with failure — copy its final meta.
+                        syncCtx.meta.attempts = existing.meta.attempts;
+                        syncCtx.meta.source = existing.meta.source;
+                    }
+                    throw err;
                 }
             }
-            // Originator path: start the work and publish the promise.
+            // ─── Originator path: start the work and publish the promise. ──────
             //
-            // We race fn against `signal` so that if our own signal aborts while
-            // fn is pending, we reject (and the .finally cleans up the store).
-            // The stored promise is the RACED one — joiners see the same
-            // rejection if they join before cleanup.
-            const promise = (0, abort_js_1.raceAbort)(Promise.resolve(fn(signal)), signal).finally(() => syncCtx.store.delete(key));
-            const entry = { promise, meta: syncCtx.meta };
+            // The stored promise is the RAW fn(signal) — NOT raceAbort-wrapped.
+            // This is critical: if we stored raceAbort(fn, signal), an
+            // originator signal abort would cause the stored promise to reject,
+            // which would propagate to all joiners. Instead:
+            //   - stored: raw fn(signal) — joiners await this
+            //   - originator's await: raceAbort(stored, signal) — originator
+            //     can bail out on their own signal without affecting joiners
+            const generation = nextGeneration();
+            const rawPromise = Promise.resolve(fn(signal));
+            const entry = {
+                promise: rawPromise,
+                meta: syncCtx.meta,
+                generation,
+            };
             syncCtx.store.set(key, entry, inflightTtl);
-            return promise;
+            // Cleanup on settle: only delete if generation matches. If a newer
+            // originator has replaced this entry (because inflightTtl expired),
+            // our cleanup is a no-op — the newer entry stays.
+            const cleanup = () => {
+                const current = syncCtx.store.get(key);
+                if (current && current.generation === generation) {
+                    syncCtx.store.delete(key);
+                }
+            };
+            // Attach cleanup to the RAW promise (not the raceAbort-wrapped one)
+            // so cleanup runs whenever fn settles, regardless of originator abort.
+            rawPromise.then(cleanup, cleanup);
+            // Originator races the raw promise against their own signal —
+            // they can bail out without affecting joiners.
+            return (0, abort_js_1.raceAbort)(rawPromise, signal);
         };
     };
     applier[executor_js_1.REQUIRES_SYNC_STORE] = true;