@rulvar/store-conformance 1.252.0 → 1.253.0

package/dist/index.js

@@ -475,6 +475,7 @@ function journalStoreConformance(mk) {
 						maxRatesAgeDays: 30,
 						allowUnpriced: ["local:llama"]
 					},
+					clampTurnToExposure: true,
 					segments: 3,
 					argsProvided: true,
 					argsHash: "a".repeat(64),
@@ -497,6 +498,7 @@ function journalStoreConformance(mk) {
 				ensure(roundTripped?.scope?.tenant === "acme" && roundTripped.scope.account === "prod-billing" && roundTripped.scope.project === "audit", "meta-separation", "putMeta/listRuns must round-trip optional RunMeta fields (scope)");
 				ensure(roundTripped?.scopeNormalize?.version === 1 && roundTripped.scopeNormalize.fields.tenant?.length === 2 && roundTripped.scopeNormalize.fields.tenant[0] === "trim" && roundTripped.scopeNormalize.fields.tenant[1] === "lowercase", "meta-separation", "putMeta/listRuns must round-trip optional RunMeta fields (scopeNormalize)");
 				ensure(roundTripped?.strictPricing?.maxRatesAgeDays === 30 && roundTripped.strictPricing.allowUnpriced?.[0] === "local:llama", "meta-separation", "putMeta/listRuns must round-trip optional RunMeta fields (strictPricing)");
+				ensure(roundTripped?.clampTurnToExposure === true, "meta-separation", "putMeta/listRuns must round-trip optional RunMeta fields (clampTurnToExposure)");
 				ensure(roundTripped?.segments === 3, "meta-separation", "putMeta/listRuns must round-trip optional RunMeta fields (segments)");
 				ensure(roundTripped?.argsProvided === true && roundTripped.argsHash === "a".repeat(64), "meta-separation", "putMeta/listRuns must round-trip optional RunMeta fields (argsProvided, argsHash)");
 				ensure(roundTripped?.genesis === "g".repeat(26), "meta-separation", "putMeta/listRuns must round-trip optional RunMeta fields (genesis)");
@@ -1124,7 +1126,7 @@ function effectLaneStoreConformance(factory) {
 //#region src/admission-matrix.ts
 /**
 * The durable admission conformance matrix (plan 45, rfcs/admission.md
-* section 7): all twelve rows as named executable checks over a
+* section 7): all thirteen rows as named executable checks over a
 * scheduler factory, so a deployment proves ITS durable admission
 * behaves like the reference. The fairness rows measure GRANTED RAW
 * SERVICE, which is what the algorithm actually guarantees; wait times
@@ -1316,20 +1318,30 @@ function admissionConformance(options) {
 		},
 		{
 			id: "admission.crash.granted-lease-expiry-settles-conservatively",
-			title: "expiry refunds reservation minus the fenced cover; a late settlement lands as debt",
+			title: "expiry refunds reservation minus the fenced cover and parks the slot; a late settlement lands as debt and returns it",
 			async run() {
 				const now = { ms: 0 };
 				const fixture = await options.make({
-					levels: { tenant: {
-						algorithm: "sliding-window",
-						capWires: 4,
-						windowMs: 36e5
-					} },
+					levels: {
+						tenant: {
+							algorithm: "sliding-window",
+							capWires: 4,
+							windowMs: 36e5
+						},
+						providerAccount: {
+							algorithm: "sliding-window",
+							capWires: 100,
+							concurrency: 1
+						}
+					},
 					leaseTtlMs: 3e4
 				}, () => now.ms);
 				await fixture.scheduler.enqueue(request("holder", {
 					reservation: { wires: 4 },
-					scope: { tenant: "acme" }
+					scope: {
+						tenant: "acme",
+						providerAccount: "acct-h"
+					}
 				}), "op-h");
 				await fixture.scheduler.checkpointCover("holder", "g1", { wires: 2 }, "op-c");
 				now.ms = 31e3;
@@ -1341,16 +1353,32 @@ function admissionConformance(options) {
 					fenced = true;
 				}
 				ensure(fenced, "admission.crash.5", "the expired lease cover write is fenced off");
+				ensure((await fixture.scheduler.enqueue(request("slot-waiter", {
+					reservation: { wires: 1 },
+					scope: {
+						tenant: "acme",
+						providerAccount: "acct-h"
+					}
+				}), "op-slot")).state === "queued", "admission.crash.5", "the expired slot is parked, never handed out under the holder");
 				ensure((await fixture.scheduler.enqueue(request("two", {
 					reservation: { wires: 2 },
-					scope: { tenant: "acme" }
+					scope: {
+						tenant: "acme",
+						providerAccount: "acct-f1"
+					}
 				}), "op-2")).state === "granted", "admission.crash.5", "the provable refund admits");
 				ensure((await fixture.scheduler.enqueue(request("probe", {
 					reservation: { wires: 1 },
-					scope: { tenant: "acme" }
+					scope: {
+						tenant: "acme",
+						providerAccount: "acct-f2"
+					}
 				}), "op-probe")).state === "queued", "admission.crash.5", "the refund was exactly the uncovered half, never a blind full refund");
 				await fixture.scheduler.release("holder", "g1", { wires: 3 }, "op-late");
 				await fixture.scheduler.release("holder", "g1", { wires: 3 }, "op-late");
+				await fixture.scheduler.release("two", "g1", { wires: 0 }, "op-two-done");
+				const seated = await fixture.scheduler.pump("op-seat");
+				ensure(seated.length === 1 && seated[0]?.unitId === "slot-waiter", "admission.crash.5", "the parked slot returned through the holder late settlement");
 				await fixture.close?.();
 			}
 		},
@@ -1576,6 +1604,44 @@ function admissionConformance(options) {
 				}), "op-u2")).state === "queued", "admission.tenant.12", "the SAME identity debits the SAME bucket, whatever the project");
 				await fixture.close?.();
 			}
+		},
+		{
+			id: "admission.concurrency.any-level-semaphore",
+			title: "a tenant level concurrency caps active runs across provider accounts; an expired slot parks until its holder settles or an operator cancels",
+			async run() {
+				const now = { ms: 0 };
+				const fixture = await options.make({
+					levels: { tenant: {
+						algorithm: "sliding-window",
+						capWires: 100,
+						concurrency: 1
+					} },
+					leaseTtlMs: 3e4
+				}, () => now.ms);
+				ensure((await fixture.scheduler.enqueue(request("a", { scope: {
+					tenant: "acme",
+					providerAccount: "acct-1"
+				} }), "op-a")).state === "granted", "admission.concurrency.13", "a holds the tenant slot");
+				ensure((await fixture.scheduler.enqueue(request("b", { scope: {
+					tenant: "acme",
+					providerAccount: "acct-2"
+				} }), "op-b")).state === "queued", "admission.concurrency.13", "b queues on the TENANT semaphore: wires are plentiful and the account differs");
+				ensure((await fixture.scheduler.enqueue(request("c", {
+					resolvedTenant: "globex",
+					scope: {
+						tenant: "globex",
+						providerAccount: "acct-1"
+					}
+				}), "op-c")).state === "granted", "admission.concurrency.13", "another tenant holds its own slot");
+				now.ms = 31e3;
+				const successor = await fixture.reopen();
+				await successor.pump("op-expire");
+				ensure((await successor.recover("a", "g1", "op-ra")).state === "unknown", "admission.concurrency.13", "the holder expired");
+				ensure((await successor.pump("op-p1")).length === 0, "admission.concurrency.13", "the expired slot is parked, never handed out under a possibly live holder");
+				await successor.cancel("a", "g1", "op-operator");
+				ensure((await successor.pump("op-p2")).some((ticket) => ticket.unitId === "b"), "admission.concurrency.13", "the operator cancel by identity returns the parked slot");
+				await fixture.close?.();
+			}
 		}
 	]);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/store-conformance",
-  "version": "1.252.0",
+  "version": "1.253.0",
   "description": "Rulvar executable store conformance kit (DEF-4).",
   "type": "module",
   "license": "Apache-2.0",
@@ -22,7 +22,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@rulvar/core": "1.252.0"
+    "@rulvar/core": "1.253.0"
   },
   "devDependencies": {
     "@types/node": "^22.20.1",