@blamejs/blamejs-shop 0.1.37 → 0.2.0

package/lib/vendor/blamejs/test/layer-0-primitives/sandbox.test.js

@@ -26,7 +26,7 @@ async function testHappyPath() {
   var r = await b.sandbox.run({
     source: "return { upper: input.name.toUpperCase(), len: input.name.length };",
     input:  { name: "alice" },
-    timeoutMs: 5000,
+    timeoutMs: 10000,
   });
   check("happy path returns wrapped result",       typeof r === "object");
   check("happy path produces result.result.upper", r.result && r.result.upper === "ALICE");
@@ -40,7 +40,7 @@ async function testAllowedBuiltins() {
     source:    "return { ts: Date.now() > 0, sqrt: Math.sqrt(16) };",
     input:     {},
     allowed:   ["Date", "Math"],
-    timeoutMs: 5000,
+    timeoutMs: 10000,
   });
   check("allowed Date works",   r.result.ts === true);
   check("allowed Math works",   r.result.sqrt === 4);
@@ -51,7 +51,7 @@ async function testBadAllowedRejected() {
     await b.sandbox.run({
       source:    "return null;",
       allowed:   ["process"],
-      timeoutMs: 5000,
+      timeoutMs: 10000,
     });
     check("bad-allowed should have refused", false);
   } catch (e) {
@@ -62,13 +62,13 @@ async function testBadAllowedRejected() {
 
 async function testBadSourceRejected() {
   try {
-    await b.sandbox.run({ source: "", timeoutMs: 5000 });
+    await b.sandbox.run({ source: "", timeoutMs: 10000 });
     check("empty source should refuse", false);
   } catch (e) {
     check("empty source refused", e && e.code === "sandbox/bad-source");
   }
   try {
-    await b.sandbox.run({ source: 42, timeoutMs: 5000 });
+    await b.sandbox.run({ source: 42, timeoutMs: 10000 });
     check("non-string source should refuse", false);
   } catch (e) {
     check("non-string source refused", e && e.code === "sandbox/bad-source");
@@ -92,7 +92,7 @@ async function testBadTimeoutRejected() {
 
 async function testBadMaxBytesRejected() {
   try {
-    await b.sandbox.run({ source: "return 1;", maxBytes: 100, timeoutMs: 5000 });
+    await b.sandbox.run({ source: "return 1;", maxBytes: 100, timeoutMs: 10000 });
     check("under-floor maxBytes should refuse", false);
   } catch (e) {
     check("under-floor maxBytes refused", e && e.code === "sandbox/bad-max-bytes");
@@ -113,7 +113,7 @@ async function testTimeoutEnforced() {
 
 async function testParseError() {
   try {
-    await b.sandbox.run({ source: "this is not valid javascript ((", timeoutMs: 5000 });
+    await b.sandbox.run({ source: "this is not valid javascript ((", timeoutMs: 10000 });
     check("malformed source should refuse", false);
   } catch (e) {
     check("parse-error returned", e && e.code === "sandbox/parse-error");
@@ -124,7 +124,7 @@ async function testRuntimeError() {
   try {
     await b.sandbox.run({
       source:    "throw new Error('boom');",
-      timeoutMs: 5000,
+      timeoutMs: 10000,
     });
     check("throwing source should reject", false);
   } catch (e) {
@@ -138,7 +138,7 @@ async function testBadInput() {
   var circular = {};
   circular.self = circular;
   try {
-    await b.sandbox.run({ source: "return 1;", input: circular, timeoutMs: 5000 });
+    await b.sandbox.run({ source: "return 1;", input: circular, timeoutMs: 10000 });
     check("circular input should refuse", false);
   } catch (e) {
     check("bad-input refused", e && e.code === "sandbox/bad-input");
@@ -151,7 +151,7 @@ async function testContainment() {
   try {
     await b.sandbox.run({
       source:    "var x = require; return typeof x;",
-      timeoutMs: 5000,
+      timeoutMs: 10000,
     });
     check("require should not be reachable", false);
   } catch (e) {
@@ -163,7 +163,7 @@ async function testProcessUnreachable() {
   try {
     await b.sandbox.run({
       source:    "return process.env.HOME;",
-      timeoutMs: 5000,
+      timeoutMs: 10000,
     });
     check("process should not be reachable", false);
   } catch (e) {
@@ -176,7 +176,7 @@ async function testNoNetworkAccess() {
   try {
     await b.sandbox.run({
       source:    "var http = require('http'); return 1;",
-      timeoutMs: 5000,
+      timeoutMs: 10000,
     });
     check("network access should refuse", false);
   } catch (e) {

package/lib/vendor/blamejs/test/layer-0-primitives/scheduler-exactly-once.test.js

@@ -21,12 +21,6 @@ var check          = helpers.check;
 var setupTestDb    = helpers.setupTestDb;
 var teardownTestDb = helpers.teardownTestDb;
 
-function _waitMicrotasks(n) {
-  var p = Promise.resolve();
-  for (var i = 0; i < (n || 5); i++) p = p.then(function () { return new Promise(function (r) { setImmediate(r); }); });
-  return p;
-}
-
 async function testSingleNodeNoTickClaim() {
   // No opts.cluster wired → tick-claim path skipped entirely. fires
   // increments normally, tickClaimLost stays 0, no rows in the ticks
@@ -38,7 +32,10 @@ async function testSingleNodeNoTickClaim() {
     var sched = b.scheduler.create({ audit: false });
     sched.schedule({ name: "single", every: 60000, run: async function () { fired++; } });
     sched._fireOnce("single");
-    await _waitMicrotasks(5);
+    await helpers.waitUntil(function () {
+      var t = sched.list()[0];
+      return t && t.fires === 1;
+    }, { timeoutMs: 5000, label: "scheduler single-node: fire callback completed" });
     var listed = sched.list()[0];
     check("single-node: fires increments",         listed.fires === 1);
     check("single-node: tickClaimLost stays 0",    listed.tickClaimLost === 0);
@@ -69,7 +66,10 @@ async function testClusterWinnerInsertsTickRow() {
     var nominalRun = task.nextRun;
 
     sched._fireOnce("winner");
-    await _waitMicrotasks(10);
+    await helpers.waitUntil(function () {
+      var t = sched.list()[0];
+      return t && t.fires === 1;
+    }, { timeoutMs: 5000, label: "scheduler winner: tick-claim won + fire completed" });
 
     var listed = sched.list()[0];
     check("winner: fires increments",              listed.fires === 1);
@@ -116,7 +116,13 @@ async function testClusterLoserSkipsAndCounts() {
     );
 
     sched._fireOnce("loser");
-    await _waitMicrotasks(10);
+    // The lost tick-claim is observable as tickClaimLost incrementing —
+    // poll on that rather than a fixed tick budget. Once it lands, the
+    // skipped run (fires stays 0) is guaranteed.
+    await helpers.waitUntil(function () {
+      var t = sched.list()[0];
+      return t && t.tickClaimLost === 1;
+    }, { timeoutMs: 5000, label: "scheduler loser: tick-claim lost recorded" });
 
     var listed = sched.list()[0];
     check("loser: fires stays 0",                  listed.fires === 0);

package/lib/vendor/blamejs/test/layer-0-primitives/websocket-channels.test.js

@@ -16,12 +16,6 @@ var check          = helpers.check;
 var setupTestDb    = helpers.setupTestDb;
 var teardownTestDb = helpers.teardownTestDb;
 
-function _waitMicrotasks(n) {
-  var p = Promise.resolve();
-  for (var i = 0; i < (n || 5); i++) p = p.then(function () { return new Promise(function (r) { setImmediate(r); }); });
-  return p;
-}
-
 // Minimal connection mock — EventEmitter with .send() that captures
 // what was sent. Mirrors the WebSocketConnection surface that
 // websocket-channels actually touches (.send + .on('close')).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/blamejs-shop",
-  "version": "0.1.37",
+  "version": "0.2.0",
   "description": "Open-source framework built on blamejs. Vendored stack, zero npm runtime deps, PQC-first crypto, security-on by default.",
   "main": "lib/index.js",
   "scripts": {