fix(member): mountEdge recovers a page its ServiceWorker does not control (hard reload hang)

[mkotelnikov]

Problem

llm-chat's mesh.html hangs forever at "Joining… (mounting-edge)" after a hard reload (Ctrl+Shift+R). A hard reload loads the page bypassing its ServiceWorker; the worker is already active and ran clients.claim() long ago, so no controllerchange ever fires, and SwHttpAdapter.start() (webrun-http-browser) waits for navigator.serviceWorker.controller with no timeout.

Fix (page side, works with the published webrun-http-browser 0.4.2)

mountEdge now calls ensureControlled (packages/httpeers-member/src/edge-control.ts) before starting the adapter:

• controlled, or no active worker yet (first visit) → carry on as before;
• uncontrolled under an active worker → reload once, guarded by a timestamped sessionStorage flag so it cannot loop;
• still uncontrolled with the guard spent, or sessionStorage unusable → throw UncontrolledPageError ("…close the tab and reopen it"), which the join widget shows as "Could not join".

The adapter's wait is also bounded (controlTimeoutMs, default 30 s), so an unforeseen case fails with a message instead of hanging.

Why a reload and not a claim: I measured that clients.claim() from the worker does take over a hard-reloaded page in Chromium, but the stock sw-worker only claims on activate and gives a page no way to ask again (a byte-identical register()/update() installs nothing). An ordinary reload comes back controlled in both Chromium and Firefox.

Tests

• tests/edge-control.test.ts: 15 unit tests for the decision, including "a sequence of loads can never reload twice in a row" and storage that is missing or throws.
• packages/httpeers-browser-conformance/scripts/edge-reload.mjs (pnpm run test:reload): real Chromium and Firefox. First visit, normal reload, hard reload, a second tab, a spent guard (must show the error), then a normal reload. The hard reload is CDP Page.reload({ignoreCache:true}) in Chromium and location.reload(true) in Firefox; Playwright's keyboard can't press the browser's own Ctrl+Shift+R. Before the fix: 6 FAIL (hard reload stays at "mounting" in both browsers). After: all pass.
• The built llm-chat against a local relay + hub (throwaway stack) in Chromium and Firefox. First visit (join), reload, hard reload, second tab and first tab all reach Connected (direct). The pre-fix bundle, which is the one currently live, stays at Joining… (mounting-edge) after the hard reload in both browsers.
• Workspace lint:check, build, typecheck and test are green, and so is the browser-conformance test:browser suite.

🤖 Generated with Claude Code