@wrongstack/governance 0.319.1 → 1.0.0

package/dist/index.js

@@ -1211,6 +1211,7 @@ async function connectGovernanceProjectClient(options) {
 
 // src/sanitize.ts
 function sanitizeGovernanceMessage(message) {
+  if (typeof message !== "string") return "";
   return message.replace(/wsg_[A-Za-z0-9_-]+(?:\.[A-Za-z0-9_-]+)*/gu, "[credential]").slice(0, 512);
 }
 
@@ -4284,7 +4285,14 @@ var SqliteVerificationLedger = class {
           "Verification lease was already consumed."
         );
       }
-      if (nowMs >= Date.parse(leaseRow.expires_at)) {
+      const leaseExpiresAtMs = Date.parse(leaseRow.expires_at);
+      if (!Number.isSafeInteger(leaseExpiresAtMs)) {
+        return this.#finishConsumeFailure(
+          "expired",
+          "Verification lease expiry is unreadable; the lease is not honored."
+        );
+      }
+      if (nowMs >= leaseExpiresAtMs) {
         return this.#finishConsumeFailure("expired", "Verification lease has expired.");
       }
       let run;
@@ -4337,8 +4345,10 @@ var SqliteVerificationLedger = class {
     const consumption = consumptionRow ? this.#consumptionFromRow(consumptionRow) : null;
     const nowMs = Date.parse(this.#now());
     if (!Number.isSafeInteger(nowMs)) throw new Error("Verification store clock is invalid.");
+    const expiresAtMs = Date.parse(row.expires_at);
+    const expired = !Number.isSafeInteger(expiresAtMs) || nowMs >= expiresAtMs;
     return deepFreeze2({
-      state: consumption ? "consumed" : nowMs >= Date.parse(row.expires_at) ? "expired" : "active",
+      state: consumption ? "consumed" : expired ? "expired" : "active",
       lease: this.#leaseDescriptor(row),
       consumption
     });
@@ -4448,7 +4458,7 @@ function canonicalize2(value) {
   if (Array.isArray(value)) return value.map(canonicalize2);
   if (value && typeof value === "object") {
     return Object.fromEntries(
-      Object.entries(value).filter(([, entryValue]) => entryValue !== void 0).sort(([left], [right]) => left.localeCompare(right)).map(([key, entryValue]) => [key, canonicalize2(entryValue)])
+      Object.entries(value).filter(([, entryValue]) => entryValue !== void 0).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([key, entryValue]) => [key, canonicalize2(entryValue)])
     );
   }
   return value;
@@ -4568,7 +4578,10 @@ var SqliteGovernanceEventStore = class _SqliteGovernanceEventStore {
         aggregate: resultAggregate
       };
     } catch (error) {
-      this.db.exec("ROLLBACK");
+      try {
+        this.db.exec("ROLLBACK");
+      } catch {
+      }
       throw error;
     }
   }
@@ -4632,7 +4645,10 @@ var SqliteGovernanceEventStore = class _SqliteGovernanceEventStore {
       this.db.exec("COMMIT");
       return { handled: true, idempotentReplay: false, observation: stored };
     } catch (error) {
-      this.db.exec("ROLLBACK");
+      try {
+        this.db.exec("ROLLBACK");
+      } catch {
+      }
       throw error;
     }
   }

package/dist/project-daemon.js

@@ -489,6 +489,7 @@ async function acquireGovernanceDaemonStartupLease(options) {
 
 // src/sanitize.ts
 function sanitizeGovernanceMessage(message) {
+  if (typeof message !== "string") return "";
   return message.replace(/wsg_[A-Za-z0-9_-]+(?:\.[A-Za-z0-9_-]+)*/gu, "[credential]").slice(0, 512);
 }
 
@@ -2778,7 +2779,14 @@ var SqliteVerificationLedger = class {
           "Verification lease was already consumed."
         );
       }
-      if (nowMs >= Date.parse(leaseRow.expires_at)) {
+      const leaseExpiresAtMs = Date.parse(leaseRow.expires_at);
+      if (!Number.isSafeInteger(leaseExpiresAtMs)) {
+        return this.#finishConsumeFailure(
+          "expired",
+          "Verification lease expiry is unreadable; the lease is not honored."
+        );
+      }
+      if (nowMs >= leaseExpiresAtMs) {
         return this.#finishConsumeFailure("expired", "Verification lease has expired.");
       }
       let run2;
@@ -2831,8 +2839,10 @@ var SqliteVerificationLedger = class {
     const consumption = consumptionRow ? this.#consumptionFromRow(consumptionRow) : null;
     const nowMs = Date.parse(this.#now());
     if (!Number.isSafeInteger(nowMs)) throw new Error("Verification store clock is invalid.");
+    const expiresAtMs = Date.parse(row.expires_at);
+    const expired = !Number.isSafeInteger(expiresAtMs) || nowMs >= expiresAtMs;
     return deepFreeze2({
-      state: consumption ? "consumed" : nowMs >= Date.parse(row.expires_at) ? "expired" : "active",
+      state: consumption ? "consumed" : expired ? "expired" : "active",
       lease: this.#leaseDescriptor(row),
       consumption
     });
@@ -2942,7 +2952,7 @@ function canonicalize2(value) {
   if (Array.isArray(value)) return value.map(canonicalize2);
   if (value && typeof value === "object") {
     return Object.fromEntries(
-      Object.entries(value).filter(([, entryValue]) => entryValue !== void 0).sort(([left], [right]) => left.localeCompare(right)).map(([key, entryValue]) => [key, canonicalize2(entryValue)])
+      Object.entries(value).filter(([, entryValue]) => entryValue !== void 0).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([key, entryValue]) => [key, canonicalize2(entryValue)])
     );
   }
   return value;
@@ -3062,7 +3072,10 @@ var SqliteGovernanceEventStore = class _SqliteGovernanceEventStore {
         aggregate: resultAggregate
       };
     } catch (error) {
-      this.db.exec("ROLLBACK");
+      try {
+        this.db.exec("ROLLBACK");
+      } catch {
+      }
       throw error;
     }
   }
@@ -3126,7 +3139,10 @@ var SqliteGovernanceEventStore = class _SqliteGovernanceEventStore {
       this.db.exec("COMMIT");
       return { handled: true, idempotentReplay: false, observation: stored };
     } catch (error) {
-      this.db.exec("ROLLBACK");
+      try {
+        this.db.exec("ROLLBACK");
+      } catch {
+      }
       throw error;
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/governance",
-  "version": "0.319.1",
+  "version": "1.0.0",
   "license": "MIT",
   "description": "Deterministic workflow contracts and transition policy for WrongStack orchestration.",
   "repository": {
@@ -27,7 +27,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@wrongstack/persistence": "0.319.1"
+    "@wrongstack/persistence": "1.0.0"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",