circuitjson-toolkit 1.1.0 → 1.1.1

package/README.md

@@ -37,6 +37,12 @@ See the [migration guide](docs/migration.md) and its generated
 [1.1.0 release notes](docs/release-notes-v1.1.0.md) provide the concise change
 summary.
 
+Version 1.1.1 makes queued worker-request ownership synchronous. Parser and
+project requests waiting behind active work can no longer observe later
+caller-buffer mutation; explicit transfers detach exact buffers immediately
+after admission. See the
+[1.1.1 release notes](docs/release-notes-v1.1.1.md).
+
 Before 1.1.0:
 
 ```js
@@ -294,6 +300,7 @@ copy while keeping sync, direct async, and worker results mutation-isolated.
 - [Model and envelope format](docs/model-format.md)
 - [Testing and downstream conformance](docs/testing.md)
 - [1.1.0 release notes](docs/release-notes-v1.1.0.md)
+- [1.1.1 release notes](docs/release-notes-v1.1.1.md)
 - [Library scope](spec/library-scope.md)
 
 ## Package scope

package/docs/api.md

@@ -80,6 +80,12 @@ Asynchronous parser and project calls accept:
 unavailable. Protocol, post-message, parser, and runtime errors stay visible.
 Worker and direct results have the same serialized shape.
 
+Requests waiting behind active worker work take ownership immediately after
+admission. The default mode clones the exact binary graph into a private queue
+snapshot and leaves caller buffers intact. `transferInput: true` detaches exact
+transferable buffers at admission; partial views, resizable buffers, and
+shared buffers are isolated without detaching unrelated caller bytes.
+
 `retainSource` is exactly `'none' | 'reference'` and defaults to `'none'`.
 `'reference'` is an in-process parser option: the returned document has a
 non-enumerable `sourceReference` property whose value is the exact caller input

package/docs/migration.md

@@ -92,6 +92,12 @@ returns either `{ ok: true, value }` or
 uses ordered `detect`, `decode`, `project`, `validate`, and `complete`
 stages. Cancellation is request-scoped.
 
+Since 1.1.1, a request waiting behind active worker work is owned immediately
+after admission. With the default `transferInput: false`, later caller
+mutations cannot alter a queued parser input, project entry, or asset. With
+`transferInput: true`, exact transferable buffers detach at admission;
+partial, resizable, and shared ranges continue to use isolated copies.
+
 ## Package subpaths
 
 - `circuitjson-toolkit/parser`

package/docs/release-notes-v1.1.1.md

@@ -0,0 +1,24 @@
+# circuitjson-toolkit 1.1.1
+
+## Synchronous queued-request ownership
+
+This patch makes the common worker client own every accepted parser and
+project request when it enters the queue behind active work.
+
+- Default `transferInput: false` requests clone their exact binary graph into
+  a private queue snapshot immediately. Later caller mutation cannot change a
+  queued parser input, project entry, or attached asset.
+- `transferInput: true` detaches exact transferable caller buffers immediately
+  after queue admission. Partial views, resizable buffers, and shared buffers
+  keep their isolated-copy behavior without detaching unrelated caller bytes.
+- Shared backing-buffer aliases remain shared in the owned request, and queued
+  snapshots transfer to the worker without another binary copy when posted.
+- Disposed, pre-cancelled, over-limit, and initial worker-construction failures
+  reject before ownership. Automatic direct fallback therefore retains valid
+  binary input.
+- Parser and project queues use the same bounded, accessor-safe traversal and
+  retain existing cancellation, error, and response behavior.
+
+Public names, parameters, package subpaths, document envelopes, and project
+envelopes are unchanged from 1.1.0. Gerber, Altium, KiCad, viewers, and ECAD
+Forge receive the corrected behavior through the shared `ParserWorkerClient`.

package/docs/testing.md

@@ -80,6 +80,11 @@ Worker checks install an in-memory `ecad-toolkit.worker.v1` loopback with real
 structured-clone and transfer boundaries, then require `worker: true`. A direct
 fallback cannot satisfy these checks.
 
+Queue regressions hold one worker operation active while parser and project
+requests wait behind it. They mutate default-mode caller buffers and require
+the original request snapshot, then verify explicit-transfer buffers detach
+only after admission and preserve shared backing-buffer aliases.
+
 Extension ownership tests use a realistic native graph above the former
 compact-metadata item ceiling. They require one bounded immutable capture,
 mutation isolation, a direct capture under two seconds, exact worker-result

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "circuitjson-toolkit",
-    "version": "1.1.0",
+    "version": "1.1.1",
     "description": "Canonical CircuitJSON parsing, project, rendering, query, manufacturing, simulation, and scene contracts",
     "keywords": [
         "circuitjson",
@@ -51,6 +51,7 @@
         "docs/model-format.md",
         "docs/provenance.md",
         "docs/release-notes-v1.1.0.md",
+        "docs/release-notes-v1.1.1.md",
         "docs/testing.md",
         "spec",
         "LICENSE",

package/src/core/worker/ParserWorkerClient.mjs

@@ -232,6 +232,8 @@ export class ParserWorkerClient {
         if (this.#pending.size >= MAX_PENDING_REQUESTS) {
             throw ParserWorkerClient.#queueError()
         }
+        const wasQueued = Boolean(this.#activeRequestId)
+        if (wasQueued) prepared = WorkerRequestData.ownForQueue(prepared)
         const requestId = `worker-${this.#nextRequestId}`
         this.#nextRequestId += 1
 
@@ -245,7 +247,7 @@ export class ParserWorkerClient {
                 onAbort: null,
                 onProgress: prepared.onProgress,
                 previousProgress: null,
-                attemptToken
+                attemptToken: wasQueued ? null : attemptToken
             }
             if (prepared.signal) {
                 pending.onAbort = () => this.cancel(requestId)

package/src/core/worker/WorkerRequestData.mjs

@@ -50,6 +50,7 @@ const DATA_VIEW_BYTE_OFFSET_GETTER = Object.getOwnPropertyDescriptor(
 const DATA_VIEW_CONSTRUCTOR = DataView
 const UINT8_ARRAY_CONSTRUCTOR = Uint8Array
 const UINT8_ARRAY_SET = Uint8Array.prototype.set
+const STRUCTURED_CLONE = globalThis.structuredClone
 const MAX_REQUEST_BYTES = 100_000_000
 const MAX_REQUEST_DEPTH = 64
 const MAX_REQUEST_VALUES = 100_000
@@ -95,6 +96,32 @@ export class WorkerRequestData {
         })
     }
 
+    /**
+     * Owns one already-prepared queued request and rebuilds its post transfer list.
+     * @param {{ payload: unknown, transfer: Transferable[] }} prepared Prepared request.
+     * @returns {Record<string, any>} Owned queued request.
+     */
+    static ownForQueue(prepared) {
+        const owned = Reflect.apply(STRUCTURED_CLONE, undefined, [
+            prepared.payload,
+            { transfer: prepared.transfer }
+        ])
+        const posted = WorkerRequestData.#prepare(owned, {
+            bytes: MAX_REQUEST_BYTES,
+            copyBinary: false,
+            output: false,
+            strictDescriptors: false,
+            transferInput: true,
+            trustProof: false,
+            values: MAX_REQUEST_VALUES
+        })
+        return {
+            ...prepared,
+            payload: posted.value,
+            transfer: posted.transfer
+        }
+    }
+
     /**
      * Prepares a bounded worker-owned result and transfers all safe buffers.
      * @param {unknown} value Worker result.