toilscript 0.1.58 → 0.1.59

package/dist/importmap.json

@@ -1,7 +1,7 @@
 {
   "imports": {
-    "toilscript": "https://cdn.jsdelivr.net/npm/toilscript@0.1.58/dist/toilscript.js",
-    "toilscript/cli": "https://cdn.jsdelivr.net/npm/toilscript@0.1.58/dist/cli.js",
+    "toilscript": "https://cdn.jsdelivr.net/npm/toilscript@0.1.59/dist/toilscript.js",
+    "toilscript/cli": "https://cdn.jsdelivr.net/npm/toilscript@0.1.59/dist/cli.js",
     "binaryen": "https://cdn.jsdelivr.net/npm/binaryen@130.0.0-nightly.20260609/index.js",
     "long": "https://cdn.jsdelivr.net/npm/long@5.3.2/index.js"
   }

package/dist/web.js

@@ -1,8 +1,8 @@
-var ASSEMBLYSCRIPT_VERSION = "0.1.58";
+var ASSEMBLYSCRIPT_VERSION = "0.1.59";
   var ASSEMBLYSCRIPT_IMPORTMAP = {
   "imports": {
-    "toilscript": "https://cdn.jsdelivr.net/npm/toilscript@0.1.58/dist/toilscript.js",
-    "toilscript/cli": "https://cdn.jsdelivr.net/npm/toilscript@0.1.58/dist/cli.js",
+    "toilscript": "https://cdn.jsdelivr.net/npm/toilscript@0.1.59/dist/toilscript.js",
+    "toilscript/cli": "https://cdn.jsdelivr.net/npm/toilscript@0.1.59/dist/cli.js",
     "binaryen": "https://cdn.jsdelivr.net/npm/binaryen@130.0.0-nightly.20260609/index.js",
     "long": "https://cdn.jsdelivr.net/npm/long@5.3.2/index.js"
   }

package/package.json

@@ -8,7 +8,7 @@
     "toilscript",
     "wasm"
   ],
-  "version": "0.1.58",
+  "version": "0.1.59",
   "author": "Daniel Wirtz <dcode+assemblyscript@dcode.io>",
   "license": "Apache-2.0",
   "homepage": "https://github.com/dacely-cloud/toilscript",

package/std/assembly/toildb.ts

@@ -531,6 +531,14 @@ export enum MetricId {
 /// section.
 export const METRIC_COUNTERS: i32 = 42;
 
+/// The sustained-rate window (seconds): requests are metered over a 3-minute ROLLING window. A plan's
+/// sustained request rate `X` (rps) permits `X * BURST_WINDOW_SECS` requests across it. Instantaneous
+/// spikes ABOVE the sustained rate are NOT tier-capped (only the box firewall's global pps ceiling, the
+/// DDoS backstop, applies); throttling (HTTP 429) begins only once the window's allowance is spent.
+/// The window slides continuously rather than resetting on a boundary, so a spend does not become free
+/// all at once: it ages out gradually over the following 3 minutes.
+export const BURST_WINDOW_SECS: i32 = 180;
+
 /// A dashboard time range for `Analytics.series`. Short ranges (1h/6h) read the per-MINUTE ring; the long
 /// ranges (60d/90d) read the per-DAY ring (90-day retention); the rest read the per-HOUR ring (30-day).
 /// Append-only: never renumber (D60/D90 were added after D30, keeping the wire ids stable).
@@ -556,11 +564,14 @@ export class TenantStats {
   /// Live gauges (current level, not a total).
   connectedStreams: u64 = 0;
   committedMemory: u64 = 0;
-  /// Request windows: current bucket usage + plan cap (0 = unlimited).
-  reqMinuteUsed: u64 = 0;
-  reqMinuteCap: u64 = 0;
-  reqDayUsed: u64 = 0;
-  reqDayCap: u64 = 0;
+  /// Request meters (fleet-global, across every edge location) against the plan (cap 0 = unmetered).
+  /// Burst: requests in the trailing 3-minute ROLLING window vs its allowance
+  /// (`sustained_rps * BURST_WINDOW_SECS`). 30d: requests in the current 30-day bucket vs the quota
+  /// (the quota still tumbles: it is a billing period, not a rate).
+  reqBurstUsed: u64 = 0;
+  reqBurstCap: u64 = 0;
+  req30dUsed: u64 = 0;
+  req30dCap: u64 = 0;
   /// LIVE per-second gauges (rates), computed edge-side from the last completed minute bucket so the
   /// guest is STATELESS (no client diffing of two snapshots). Idle -> 0.0. `f64` (a rate is fractional
   /// and bounded; f64 cannot overflow for any real value).
@@ -636,6 +647,13 @@ export class TenantStats {
     const total = hits + this.cacheMisses;
     return total > 0 ? <f64>hits / <f64>total : 0.0;
   }
+
+  /// The plan's SUSTAINED request rate (requests/second), derived from the 3-minute burst cap
+  /// (`reqBurstCap / BURST_WINDOW_SECS`). 0.0 means unmetered. Spikes above this rate are allowed;
+  /// throttling only starts once `reqBurstUsed` passes `reqBurstCap` in the current bucket.
+  get sustainedRpsCap(): f64 {
+    return this.reqBurstCap == 0 ? 0.0 : <f64>this.reqBurstCap / <f64>BURST_WINDOW_SECS;
+  }
 }
 
 /// One metric's time series for a range: `points` oldest→newest (per-bucket totals, `u64` — non-negative),
@@ -678,7 +696,7 @@ export class Analytics {
     const r = new DataReader(buf);
     const stats = new TenantStats();
     const version = r.readU16();
-    if (version < 2) return stats; // pre-v2 edge: refuse rather than mis-decode
+    if (version < 3) return stats; // pre-v3 edge: refuse rather than mis-decode (clean break, no v2)
     stats.nowMs = r.readU64();
     const count = <i32>r.readU32();
     for (let i: i32 = 0; i < count && r.ok; i++) {
@@ -688,10 +706,10 @@ export class Analytics {
     }
     stats.connectedStreams = r.readU64();
     stats.committedMemory = r.readU64();
-    stats.reqMinuteUsed = r.readU64();
-    stats.reqMinuteCap = r.readU64();
-    stats.reqDayUsed = r.readU64();
-    stats.reqDayCap = r.readU64();
+    stats.reqBurstUsed = r.readU64();
+    stats.reqBurstCap = r.readU64();
+    stats.req30dUsed = r.readU64();
+    stats.req30dCap = r.readU64();
     // LIVE per-second rates (f64), appended after the windows. VERSION-GATE by LENGTH: a pre-rates
     // (shorter) frame from an older edge exhausts the buffer here, so `readF64` returns 0.0 for each
     // missing rate (DataReader is bounds-checked). No frame-version bump needed.
@@ -709,7 +727,7 @@ export class Analytics {
     const r = new DataReader(buf);
     const out = new Series();
     const version = r.readU16();
-    if (version < 2) return out;
+    if (version < 3) return out; // pre-v3 edge: refuse rather than mis-decode (clean break, no v2)
     out.metric = <MetricId>r.readU16();
     out.bucketSecs = r.readU32();
     out.headMs = r.readU64();

package/std/assembly/toilscript.d.ts

@@ -333,9 +333,14 @@ declare const enum AnalyticsRange {
   H1 = 0, H6 = 1, H12 = 2, H24 = 3, D3 = 4, D7 = 5, D14 = 6, D30 = 7, D60 = 8, D90 = 9,
 }
 
+/** The sustained-rate window (seconds): requests are metered over a 3-minute ROLLING window, so a plan's
+ *  sustained rate `X` (rps) permits `X * BURST_WINDOW_SECS` requests across it. */
+declare const BURST_WINDOW_SECS: i32;
+
 /** One tenant's analytics snapshot: lifetime totals (indexed by `MetricId`, no string keys), the two
- *  live gauge levels, and the request windows (current usage + plan cap; cap 0 = unlimited). Read a
- *  value by typed getter (`stats.requests`) or by id (`stats.metric(MetricId.Requests)`). */
+ *  live gauge levels, and the request meters (burst 3-min bucket + 30-day quota, each with its cap;
+ *  cap 0 = unmetered). Read a value by typed getter (`stats.requests`) or by id
+ *  (`stats.metric(MetricId.Requests)`). */
 declare class TenantStats {
   metric(id: MetricId): u64;
   readonly requests: u64;
@@ -385,10 +390,15 @@ declare class TenantStats {
   readonly cacheRatio: f64;
   connectedStreams: u64;
   committedMemory: u64;
-  reqMinuteUsed: u64;
-  reqMinuteCap: u64;
-  reqDayUsed: u64;
-  reqDayCap: u64;
+  /** Fleet-global requests in the trailing 3-minute ROLLING window, and its allowance
+   *  (`sustained_rps * BURST_WINDOW_SECS`; 0 = unmetered). Spikes are NOT tier-capped. */
+  reqBurstUsed: u64;
+  reqBurstCap: u64;
+  /** Fleet-global requests in the current 30-day tumbling bucket, and the 30-day quota (0 = unmetered). */
+  req30dUsed: u64;
+  req30dCap: u64;
+  /** Derived: the plan's SUSTAINED request rate (`reqBurstCap / BURST_WINDOW_SECS`), 0.0 when unmetered. */
+  readonly sustainedRpsCap: f64;
   /** LIVE per-second gauges (rates), computed edge-side from the last completed minute bucket (idle 0.0),
    *  so no client diffing is needed. `f64` cannot overflow for any real value. */
   readonly rps: f64;