@rulvar/store-sqlite 1.103.0 → 1.105.0

package/dist/index.d.ts

@@ -150,6 +150,10 @@ interface SqliteQuotaLimiterOptions {
 declare class SqliteQuotaLimiter implements QuotaLimiter {
   private readonly db;
   private readonly rules;
+  /** Matching order for the denial fold: canonical rule-key order
+  * (RV608), so permuted identical sets produce byte-identical
+  * refusals. Telemetry keeps the declared order. */
+  private readonly ordered;
   private readonly now;
   constructor(options: SqliteQuotaLimiterOptions);
   reserve(request: QuotaReservationRequest): Promise<QuotaDecision>;

package/dist/index.js

@@ -1,5 +1,5 @@
 import { DatabaseSync } from "node:sqlite";
-import { ConfigError, JournalOrderViolation, LeaseHeldError, QUOTA_WINDOW_MS, mergeQuotaDenial, metaMatchesFilter, quotaActualTokens, quotaEstimateTokens, quotaRuleAdmission, quotaRuleMatches, validateQuotaRules } from "@rulvar/core";
+import { ConfigError, JournalOrderViolation, LeaseHeldError, QUOTA_WINDOW_MS, mergeQuotaDenial, metaMatchesFilter, quotaActualTokens, quotaEstimateTokens, quotaRuleAdmission, quotaRuleKey, quotaRuleMatches, snapshotQuotaRules } from "@rulvar/core";
 import { randomUUID } from "node:crypto";
 //#region src/store.ts
 /**
@@ -406,19 +406,6 @@ function sleepSync(ms) {
 }
 const wallClock = Date.now.bind(globalThis);
 /**
-* The canonical bucket key of one rule: a fixed-field-order JSON of
-* its content, identical across processes for identical rules.
-*/
-function ruleKey(rule) {
-	return JSON.stringify({
-		provider: rule.provider ?? null,
-		model: rule.model ?? null,
-		tenant: rule.tenant ?? null,
-		requestsPerMinute: rule.requestsPerMinute ?? null,
-		tokensPerMinute: rule.tokensPerMinute ?? null
-	});
-}
-/**
 * The cross-process reference implementation of the core QuotaLimiter
 * SPI: engine processes pointing instances at ONE database file (this
 * store's file or its own) enforce one global provider quota.
@@ -439,11 +426,18 @@ function ruleKey(rule) {
 var SqliteQuotaLimiter = class {
 	db;
 	rules;
+	/** Matching order for the denial fold: canonical rule-key order
+	* (RV608), so permuted identical sets produce byte-identical
+	* refusals. Telemetry keeps the declared order. */
+	ordered;
 	now;
 	constructor(options) {
 		if (typeof options.path !== "string" || options.path === "") throw new ConfigError("SqliteQuotaLimiterOptions.path must be a nonempty string");
-		validateQuotaRules(options.rules, "SqliteQuotaLimiterOptions.rules");
-		this.rules = options.rules;
+		this.rules = snapshotQuotaRules(options.rules, "SqliteQuotaLimiterOptions.rules");
+		this.ordered = this.rules.map((rule) => ({
+			rule,
+			key: quotaRuleKey(rule)
+		})).sort((a, b) => a.key < b.key ? -1 : a.key > b.key ? 1 : 0);
 		this.now = options.now ?? wallClock;
 		this.db = new DatabaseSync(options.path);
 		const schema = `
@@ -482,9 +476,8 @@ var SqliteQuotaLimiter = class {
 			const read = this.db.prepare("SELECT requests, tokens FROM quota_buckets WHERE rule_key = ? AND window_start = ?");
 			const matched = [];
 			let denial;
-			for (const rule of this.rules) {
+			for (const { rule, key } of this.ordered) {
 				if (!quotaRuleMatches(rule, request)) continue;
-				const key = ruleKey(rule);
 				matched.push(key);
 				const verdict = quotaRuleAdmission(rule, read.get(key, windowStart) ?? {
 					requests: 0,
@@ -545,7 +538,7 @@ var SqliteQuotaLimiter = class {
 		const windowStart = at - at % QUOTA_WINDOW_MS;
 		const read = this.db.prepare("SELECT requests, tokens FROM quota_buckets WHERE rule_key = ? AND window_start = ?");
 		return this.rules.map((rule) => {
-			const row = read.get(ruleKey(rule), windowStart);
+			const row = read.get(quotaRuleKey(rule), windowStart);
 			return {
 				rule,
 				windowStart,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/store-sqlite",
-  "version": "1.103.0",
+  "version": "1.105.0",
   "description": "Rulvar SQLite store implementing JournalStore and LeasableStore with a fencing epoch.",
   "type": "module",
   "license": "Apache-2.0",
@@ -22,13 +22,13 @@
     "access": "public"
   },
   "dependencies": {
-    "@rulvar/core": "1.103.0"
+    "@rulvar/core": "1.105.0"
   },
   "devDependencies": {
     "@types/node": "^22.20.1",
     "tsdown": "^0.22.14",
     "typescript": "~6.0.3",
-    "@rulvar/store-conformance": "1.103.0"
+    "@rulvar/store-conformance": "1.105.0"
   },
   "repository": {
     "type": "git",