@ultimat3/action 16.0.0 → 18.0.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ultimat3/action",
-  "version": "16.0.0",
+  "version": "18.0.0",
   "description": "The action primitive: one declaration projected to route, OpenAPI, client, MCP tool, job handle, tests",
   "license": "MIT",
   "type": "module",
@@ -27,17 +27,17 @@
     "LICENSE"
   ],
   "engines": {
-    "bun": ">=1.3.0"
+    "bun": ">=1.4.0"
   },
   "scripts": {
     "typecheck": "tsc --noEmit -p tsconfig.json",
     "test": "bun test"
   },
   "dependencies": {
-    "@ultimat3/cache": "16.0.0",
-    "@ultimat3/core": "16.0.0",
-    "@ultimat3/http": "16.0.0",
-    "@ultimat3/policy": "16.0.0",
-    "@ultimat3/schema": "16.0.0"
+    "@ultimat3/cache": "18.0.0",
+    "@ultimat3/core": "18.0.0",
+    "@ultimat3/http": "18.0.0",
+    "@ultimat3/policy": "18.0.0",
+    "@ultimat3/schema": "18.0.0"
   }
 }

package/src/idempotency-memory.ts

@@ -3,7 +3,7 @@
  * and for tests, and refused at registration under a `shared` declaration — its `scope` says so.
  * Shaped after `@ultimat3/http`'s `memoryRateLimitStore`, including the deliberate eviction order.
  */
-import { uuid } from '@ultimat3/core';
+import { finiteCount, uuid } from '@ultimat3/core';
 import type {
   IdempotencyFailure,
   IdempotencyRecord,
@@ -47,8 +47,21 @@ export class MemoryIdempotencyStore implements IdempotencyStore {
   #lastSweepMs = Number.NEGATIVE_INFINITY;
 
   constructor(options: MemoryIdempotencyStoreOptions = {}) {
-    this.windowMs = Math.max(1, Math.floor(options.windowMs ?? DEFAULT_IDEMPOTENCY_WINDOW_MS));
-    this.#maxKeys = Math.max(1, Math.floor(options.maxKeys ?? DEFAULT_MAX_IDEMPOTENCY_KEYS));
+    // Screened, not clamped: `Math.floor(NaN)` is `NaN`, so `size > maxKeys` is false for every
+    // size and `now - at > windowMs` is false for every record — a table with no cap, holding keys
+    // that never expire, out of a `Math.max` that reads like a guard.
+    this.windowMs = finiteCount(
+      'MemoryIdempotencyStore',
+      'windowMs',
+      options.windowMs ?? DEFAULT_IDEMPOTENCY_WINDOW_MS,
+      1,
+    );
+    this.#maxKeys = finiteCount(
+      'MemoryIdempotencyStore',
+      'maxKeys',
+      options.maxKeys ?? DEFAULT_MAX_IDEMPOTENCY_KEYS,
+      1,
+    );
     // Batched down to 90% so the eviction sort is paid once per 10% of the cap, not per write.
     this.#evictTo = Math.max(1, Math.floor(this.#maxKeys * 0.9));
     this.#now = options.now ?? ((): number => Date.now());

package/src/idempotency-postgres.ts

@@ -4,7 +4,7 @@
  * without it, `replicas: 3` means a retry that lands elsewhere re-runs a committed handler.
  * Statements are spelled out so an agent can run the exact one it saw in a log.
  */
-import { logger, uuid } from '@ultimat3/core';
+import { finiteCount, logger, uuid } from '@ultimat3/core';
 import { IdempotencyStatusUnknownError } from './errors';
 import type {
   IdempotencyFailure,
@@ -172,7 +172,14 @@ export interface PostgresIdempotencyStore extends IdempotencyStore {
 export function postgresIdempotencyStore(
   options: PostgresIdempotencyStoreOptions,
 ): PostgresIdempotencyStore {
-  const windowMs = Math.max(1, Math.floor(options.windowMs ?? DEFAULT_IDEMPOTENCY_WINDOW_MS));
+  // The same screen as the memory store's, on the number that becomes `windowSecs` and is bound
+  // into every statement below: `Math.floor(NaN)` is `NaN`, and NaN/1000 is what reaches Postgres.
+  const windowMs = finiteCount(
+    'postgresIdempotencyStore',
+    'windowMs',
+    options.windowMs ?? DEFAULT_IDEMPOTENCY_WINDOW_MS,
+    1,
+  );
   const windowSecs = windowMs / 1000;
   const exec = options.executor;
   const now = options.now ?? ((): number => Date.now());