@wrongstack/governance 0.320.1 → 1.0.1

package/dist/index.js

@@ -4285,7 +4285,14 @@ var SqliteVerificationLedger = class {
           "Verification lease was already consumed."
         );
       }
-      if (nowMs >= Date.parse(leaseRow.expires_at)) {
+      const leaseExpiresAtMs = Date.parse(leaseRow.expires_at);
+      if (!Number.isSafeInteger(leaseExpiresAtMs)) {
+        return this.#finishConsumeFailure(
+          "expired",
+          "Verification lease expiry is unreadable; the lease is not honored."
+        );
+      }
+      if (nowMs >= leaseExpiresAtMs) {
         return this.#finishConsumeFailure("expired", "Verification lease has expired.");
       }
       let run;
@@ -4338,8 +4345,10 @@ var SqliteVerificationLedger = class {
     const consumption = consumptionRow ? this.#consumptionFromRow(consumptionRow) : null;
     const nowMs = Date.parse(this.#now());
     if (!Number.isSafeInteger(nowMs)) throw new Error("Verification store clock is invalid.");
+    const expiresAtMs = Date.parse(row.expires_at);
+    const expired = !Number.isSafeInteger(expiresAtMs) || nowMs >= expiresAtMs;
     return deepFreeze2({
-      state: consumption ? "consumed" : nowMs >= Date.parse(row.expires_at) ? "expired" : "active",
+      state: consumption ? "consumed" : expired ? "expired" : "active",
       lease: this.#leaseDescriptor(row),
       consumption
     });
@@ -4449,7 +4458,7 @@ function canonicalize2(value) {
   if (Array.isArray(value)) return value.map(canonicalize2);
   if (value && typeof value === "object") {
     return Object.fromEntries(
-      Object.entries(value).filter(([, entryValue]) => entryValue !== void 0).sort(([left], [right]) => left.localeCompare(right)).map(([key, entryValue]) => [key, canonicalize2(entryValue)])
+      Object.entries(value).filter(([, entryValue]) => entryValue !== void 0).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([key, entryValue]) => [key, canonicalize2(entryValue)])
     );
   }
   return value;

package/dist/project-daemon.js

@@ -2779,7 +2779,14 @@ var SqliteVerificationLedger = class {
           "Verification lease was already consumed."
         );
       }
-      if (nowMs >= Date.parse(leaseRow.expires_at)) {
+      const leaseExpiresAtMs = Date.parse(leaseRow.expires_at);
+      if (!Number.isSafeInteger(leaseExpiresAtMs)) {
+        return this.#finishConsumeFailure(
+          "expired",
+          "Verification lease expiry is unreadable; the lease is not honored."
+        );
+      }
+      if (nowMs >= leaseExpiresAtMs) {
         return this.#finishConsumeFailure("expired", "Verification lease has expired.");
       }
       let run2;
@@ -2832,8 +2839,10 @@ var SqliteVerificationLedger = class {
     const consumption = consumptionRow ? this.#consumptionFromRow(consumptionRow) : null;
     const nowMs = Date.parse(this.#now());
     if (!Number.isSafeInteger(nowMs)) throw new Error("Verification store clock is invalid.");
+    const expiresAtMs = Date.parse(row.expires_at);
+    const expired = !Number.isSafeInteger(expiresAtMs) || nowMs >= expiresAtMs;
     return deepFreeze2({
-      state: consumption ? "consumed" : nowMs >= Date.parse(row.expires_at) ? "expired" : "active",
+      state: consumption ? "consumed" : expired ? "expired" : "active",
       lease: this.#leaseDescriptor(row),
       consumption
     });
@@ -2943,7 +2952,7 @@ function canonicalize2(value) {
   if (Array.isArray(value)) return value.map(canonicalize2);
   if (value && typeof value === "object") {
     return Object.fromEntries(
-      Object.entries(value).filter(([, entryValue]) => entryValue !== void 0).sort(([left], [right]) => left.localeCompare(right)).map(([key, entryValue]) => [key, canonicalize2(entryValue)])
+      Object.entries(value).filter(([, entryValue]) => entryValue !== void 0).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([key, entryValue]) => [key, canonicalize2(entryValue)])
     );
   }
   return value;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/governance",
-  "version": "0.320.1",
+  "version": "1.0.1",
   "license": "MIT",
   "description": "Deterministic workflow contracts and transition policy for WrongStack orchestration.",
   "repository": {
@@ -27,7 +27,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@wrongstack/persistence": "0.320.1"
+    "@wrongstack/persistence": "1.0.1"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",