@blamejs/blamejs-shop 0.3.39 → 0.3.41

package/lib/vendor/blamejs/api-snapshot.json

@@ -1,7 +1,7 @@
 {
   "version": 1,
-  "frameworkVersion": "0.14.10",
-  "createdAt": "2026-05-31T10:40:06.680Z",
+  "frameworkVersion": "0.14.14",
+  "createdAt": "2026-05-31T19:48:38.125Z",
   "exports": {
     "a2a": {
       "type": "object",
@@ -271,6 +271,31 @@
         "idempotency": {
           "type": "object",
           "members": {
+            "AAD_ROTATION": {
+              "type": "object",
+              "members": {
+                "backend": {
+                  "type": "primitive",
+                  "valueType": "string"
+                },
+                "reseal": {
+                  "type": "function",
+                  "arity": 1
+                },
+                "rowIdField": {
+                  "type": "primitive",
+                  "valueType": "string"
+                },
+                "schemaVersion": {
+                  "type": "primitive",
+                  "valueType": "string"
+                },
+                "table": {
+                  "type": "primitive",
+                  "valueType": "string"
+                }
+              }
+            },
             "AgentIdempotencyError": {
               "type": "function",
               "arity": 4
@@ -373,12 +398,41 @@
                   }
                 }
               }
+            },
+            "reseal": {
+              "type": "function",
+              "arity": 1
             }
           }
         },
         "orchestrator": {
           "type": "object",
           "members": {
+            "AAD_ROTATION": {
+              "type": "object",
+              "members": {
+                "backend": {
+                  "type": "primitive",
+                  "valueType": "string"
+                },
+                "reseal": {
+                  "type": "function",
+                  "arity": 1
+                },
+                "rowIdField": {
+                  "type": "primitive",
+                  "valueType": "string"
+                },
+                "schemaVersion": {
+                  "type": "primitive",
+                  "valueType": "string"
+                },
+                "table": {
+                  "type": "primitive",
+                  "valueType": "string"
+                }
+              }
+            },
             "AgentOrchestratorError": {
               "type": "function",
               "arity": 4
@@ -503,6 +557,10 @@
                 }
               }
             },
+            "reseal": {
+              "type": "function",
+              "arity": 1
+            },
             "shardFor": {
               "type": "function",
               "arity": 2
@@ -748,6 +806,31 @@
         "snapshot": {
           "type": "object",
           "members": {
+            "AAD_ROTATION": {
+              "type": "object",
+              "members": {
+                "backend": {
+                  "type": "primitive",
+                  "valueType": "string"
+                },
+                "reseal": {
+                  "type": "function",
+                  "arity": 1
+                },
+                "rowIdField": {
+                  "type": "primitive",
+                  "valueType": "string"
+                },
+                "schemaVersion": {
+                  "type": "primitive",
+                  "valueType": "string"
+                },
+                "table": {
+                  "type": "primitive",
+                  "valueType": "string"
+                }
+              }
+            },
             "AgentSnapshotError": {
               "type": "function",
               "arity": 4
@@ -756,6 +839,10 @@
               "type": "primitive",
               "valueType": "number"
             },
+            "SEALED_PREFIX": {
+              "type": "primitive",
+              "valueType": "string"
+            },
             "create": {
               "type": "function",
               "arity": 1
@@ -854,6 +941,10 @@
                   }
                 }
               }
+            },
+            "reseal": {
+              "type": "function",
+              "arity": 1
             }
           }
         },
@@ -980,6 +1071,10 @@
         "tenant": {
           "type": "object",
           "members": {
+            "AAD_ROTATION": {
+              "type": "instance",
+              "ctorName": "Array"
+            },
             "AgentTenantError": {
               "type": "function",
               "arity": 4
@@ -1592,10 +1687,18 @@
               "type": "instance",
               "ctorName": "Array"
             },
+            "TRUST_TIERS": {
+              "type": "instance",
+              "ctorName": "Array"
+            },
             "classify": {
               "type": "function",
               "arity": 2
             },
+            "classifyWithSources": {
+              "type": "function",
+              "arity": 3
+            },
             "refuseIfMalicious": {
               "type": "function",
               "arity": 2
@@ -1631,6 +1734,48 @@
             }
           }
         },
+        "output": {
+          "type": "object",
+          "members": {
+            "AiOutputError": {
+              "type": "function",
+              "arity": 4
+            },
+            "ENTITIES": {
+              "type": "instance",
+              "ctorName": "Array"
+            },
+            "redact": {
+              "type": "function",
+              "arity": 2
+            },
+            "sanitize": {
+              "type": "function",
+              "arity": 2
+            }
+          }
+        },
+        "prompt": {
+          "type": "object",
+          "members": {
+            "AiPromptError": {
+              "type": "function",
+              "arity": 4
+            },
+            "ROLE_CONTROL_TOKENS": {
+              "type": "instance",
+              "ctorName": "Array"
+            },
+            "UNTRUSTED_ROLES": {
+              "type": "instance",
+              "ctorName": "Array"
+            },
+            "template": {
+              "type": "function",
+              "arity": 2
+            }
+          }
+        },
         "quota": {
           "type": "object",
           "members": {
@@ -1938,6 +2083,10 @@
             }
           }
         },
+        "rewrapTenant": {
+          "type": "function",
+          "arity": 1
+        },
         "sniffEnvelope": {
           "type": "function",
           "arity": 1
@@ -12829,10 +12978,18 @@
                   "type": "instance",
                   "ctorName": "Array"
                 },
+                "adherenceForm": {
+                  "type": "function",
+                  "arity": 1
+                },
                 "classify": {
                   "type": "function",
                   "arity": 1
                 },
+                "declareAdherence": {
+                  "type": "function",
+                  "arity": 1
+                },
                 "listObligations": {
                   "type": "function",
                   "arity": 1
@@ -12840,6 +12997,10 @@
                 "trainingDataSummary": {
                   "type": "function",
                   "arity": 1
+                },
+                "verifyAdherence": {
+                  "type": "function",
+                  "arity": 3
                 }
               }
             },
@@ -13248,6 +13409,40 @@
           "type": "instance",
           "ctorName": "Array"
         },
+        "PURPOSES": {
+          "type": "object",
+          "members": {
+            "educational-only": {
+              "type": "object",
+              "members": {
+                "citation": {
+                  "type": "primitive",
+                  "valueType": "string"
+                },
+                "commercialUseProhibited": {
+                  "type": "primitive",
+                  "valueType": "boolean"
+                },
+                "dataMinimization": {
+                  "type": "primitive",
+                  "valueType": "boolean"
+                },
+                "forbidsLawfulBasis": {
+                  "type": "instance",
+                  "ctorName": "Array"
+                },
+                "notes": {
+                  "type": "primitive",
+                  "valueType": "string"
+                },
+                "purpose": {
+                  "type": "primitive",
+                  "valueType": "string"
+                }
+              }
+            }
+          }
+        },
         "grant": {
           "type": "function",
           "arity": 1
@@ -13260,6 +13455,14 @@
           "type": "function",
           "arity": 1
         },
+        "listPurposes": {
+          "type": "function",
+          "arity": 0
+        },
+        "recognizedPurpose": {
+          "type": "function",
+          "arity": 1
+        },
         "verify": {
           "type": "function",
           "arity": 1
@@ -13509,6 +13712,10 @@
           "type": "instance",
           "ctorName": "Array"
         },
+        "attachIdentityAssertion": {
+          "type": "function",
+          "arity": 1
+        },
         "build": {
           "type": "function",
           "arity": 1
@@ -13536,6 +13743,14 @@
         "verify": {
           "type": "function",
           "arity": 3
+        },
+        "verifyCose": {
+          "type": "function",
+          "arity": 3
+        },
+        "verifyIdentityAssertion": {
+          "type": "function",
+          "arity": 3
         }
       }
     },
@@ -15857,6 +16072,14 @@
           "type": "function",
           "arity": 4
         },
+        "AiOutputError": {
+          "type": "function",
+          "arity": 4
+        },
+        "AiPromptError": {
+          "type": "function",
+          "arity": 4
+        },
         "ApiKeyError": {
           "type": "function",
           "arity": 4
@@ -16133,6 +16356,10 @@
           "type": "function",
           "arity": 4
         },
+        "PrivacyError": {
+          "type": "function",
+          "arity": 4
+        },
         "ProblemDetailsError": {
           "type": "function",
           "arity": 4
@@ -45509,6 +45736,27 @@
         }
       }
     },
+    "privacy": {
+      "type": "object",
+      "members": {
+        "PrivacyError": {
+          "type": "function",
+          "arity": 4
+        },
+        "VENDOR_REVIEW_CLAUSES": {
+          "type": "instance",
+          "ctorName": "Array"
+        },
+        "listVendorReviewClauses": {
+          "type": "function",
+          "arity": 0
+        },
+        "vendorReview": {
+          "type": "function",
+          "arity": 1
+        }
+      }
+    },
     "privacyPass": {
       "type": "object",
       "members": {
@@ -46379,6 +46627,10 @@
           "type": "function",
           "arity": 1
         },
+        "extractToMemory": {
+          "type": "function",
+          "arity": 1
+        },
         "inspect": {
           "type": "function",
           "arity": 1
@@ -49738,13 +49990,25 @@
               "type": "function",
               "arity": 3
             },
+            "resealRoot": {
+              "type": "function",
+              "arity": 4
+            },
             "seal": {
               "type": "function",
               "arity": 2
             },
+            "sealRoot": {
+              "type": "function",
+              "arity": 3
+            },
             "unseal": {
               "type": "function",
               "arity": 2
+            },
+            "unsealRoot": {
+              "type": "function",
+              "arity": 3
             }
           }
         },

package/lib/vendor/blamejs/examples/wiki/lib/source-comment-block-validator.js

@@ -51,6 +51,7 @@ var KNOWN_POSTURES = {
   hipaa: 1, "pci-dss": 1, gdpr: 1, soc2: 1, dora: 1, nis2: 1, cra: 1,
   fapi2: 1, "21-cfr-11": 1, fdx: 1, "tcpa-10dlc": 1, "iab-tcf": 1, "iab-mspa": 1,
   "sox-404": 1, "sec-cyber": 1, ferpa: 1, glba: 1, ccpa: 1, "modpa": 1,
+  "ca-sopipa": 1, coppa: 1, "coppa-2025": 1,
   "nydfs-500": 1, "eu-data-act": 1, "eu-ai-act": 1,
   // v0.10.8 — EU AI Act Art. 50 + Art. 11 + AB-853 + CAC + AI governance
   "eu-ai-act-art-50": 1, "eu-ai-act-art-11": 1,

package/lib/vendor/blamejs/index.js

@@ -26,7 +26,7 @@ _tls.DEFAULT_MIN_VERSION = "TLSv1.3";
  *                 frameworkSchema, clusterStorage, session, atomicFile,
  *                 cookies
  *   Audit:        audit, auditChain, auditSign, auditTools, consent,
- *                 subject, events, redact
+ *                 subject, events, redact, privacy
  *   HTTP:         router, middleware (csrf, cors, rate-limit, request-id,
  *                 security-headers, bot-guard, attach-user, require-auth,
  *                 error-handler, body-parser, csp-nonce, compression,
@@ -88,6 +88,7 @@ audit.export = function (opts) {
 };
 var auditChain = require("./lib/audit-chain");
 var consent = require("./lib/consent");
+var privacy = require("./lib/privacy");
 var subject = require("./lib/subject");
 var session = require("./lib/session");
 var storage = require("./lib/storage");
@@ -139,6 +140,8 @@ var sse = require("./lib/sse");
 var mcp = require("./lib/mcp");
 var graphqlFederation = require("./lib/graphql-federation");
 var aiInput = require("./lib/ai-input");
+var aiOutput = require("./lib/ai-output");
+var aiPrompt = require("./lib/ai-prompt");
 var a2a = require("./lib/a2a");
 var darkPatterns = require("./lib/dark-patterns");
 var budr = require("./lib/budr");
@@ -457,6 +460,7 @@ module.exports = {
   auditTools:       auditTools,
   events:           events,
   consent:          consent,
+  privacy:          privacy,
   subject:          subject,
   session:          session,
   storage:          storage,
@@ -471,6 +475,8 @@ module.exports = {
   ai:               {
     adverseDecision: require("./lib/ai-adverse-decision"),
     input:           aiInput,
+    output:          aiOutput,
+    prompt:          aiPrompt,
     aiContentDetect: require("./lib/ai-content-detect"),
     modelManifest:   require("./lib/ai-model-manifest"),
     disclosure:      require("./lib/ai-disclosure"),

package/lib/vendor/blamejs/lib/agent-idempotency.js

@@ -69,6 +69,8 @@ var safeJson          = require("./safe-json");
 var guardIdempotencyKey = require("./guard-idempotency-key");
 var agentAudit        = require("./agent-audit");
 var { boundedMap }    = require("./bounded-map");
+var vaultAad          = require("./vault-aad");
+var validateOpts      = require("./validate-opts");
 
 // The default in-memory backend is keyed on (method, actorId, keyHash) —
 // the key hash comes from request-supplied idempotency keys, so a flood of
@@ -540,10 +542,121 @@ function _safeAudit(auditImpl, action, actor, metadata) {
   agentAudit.safeAudit(auditImpl, action, actor, metadata);
 }
 
+// ---- Vault-key rotation: out-of-band reseal hook -------------------------
+//
+// The cached-result column is AAD-sealed on an OPERATOR-SUPPLIED backing
+// store (opts.store / the in-memory default), NOT in the framework's db.enc.
+// The vault-key rotation pipeline (b.vaultRotate.rotate) only walks tables
+// that live inside db.enc, so it cannot reach this store — the rows would be
+// ORPHANED under the old vault root after a rotation (CWE-320 cryptographic-
+// key-management failure: ciphertext stranded under a retired key, then
+// unreadable once the old keypair is destroyed). This reseal hook lets an
+// operator rotate the store out-of-band, composing the SAME explicit-root
+// primitive the in-tree pipeline uses (vaultAad.resealRoot) and the SAME
+// AAD builder the seal path used (cryptoField._aadParts) so the re-sealed
+// AAD tuple is byte-identical — one source of truth, no drift.
+//
+// Reseal store contract (the durable SQL / Redis backend the operator
+// already wired for opts.store also exposes):
+//   - listAll()        → array of every stored row (each row carries the
+//                        sealed `resultBlob` column + its keyHash identity).
+//   - putResealed(row) → write the row back, addressed by its own stored
+//                        identity (keyHash). Distinct from the per-request
+//                        put(method, actorId, key) because reseal addresses
+//                        a row by the row identity already on disk, not by
+//                        the raw idempotency key (which is never stored —
+//                        only its namespaced keyHash is).
+/**
+ * @primitive b.agent.idempotency.reseal
+ * @signature b.agent.idempotency.reseal(opts)
+ * @since      0.14.12
+ * @status     stable
+ * @compliance gdpr, soc2
+ * @related    b.vault.getKeysJson, b.cryptoField.sealRow
+ *
+ * Re-seals every AAD-bound cached-result cell on an operator-supplied
+ * store from the OLD vault keypair to the NEW one, out-of-band. The
+ * in-tree vault-key rotation pipeline only walks tables inside `db.enc`,
+ * so an operator-supplied idempotency store is unreachable to it — after a
+ * keypair rotation its cells would otherwise be orphaned under the retired
+ * root (CWE-320). Composes the same AAD-cell re-seal the rotation pipeline
+ * uses, rebuilding each cell's AAD from the registered schema (one source
+ * of truth). Only AAD-sealed cells are touched; plain rows pass through.
+ *
+ * @opts
+ *   store:       Object,   // { listAll(): rows[], putResealed(row) } (sync or async)
+ *   oldRootJson: string,   // b.vault.getKeysJson() of the retired keypair
+ *   newRootJson: string,   // b.vault.getKeysJson() of the new keypair
+ *
+ * @example
+ *   await b.agent.idempotency.reseal({ store: durableStore, oldRootJson: oldKeys, newRootJson: newKeys });
+ *   // → { table: "agent_idempotency", resealed: 12 }
+ */
+function reseal(args) {
+  args = args || {};
+  validateOpts.requireNonEmptyString(args.oldRootJson,
+    "reseal: oldRootJson (b.vault.getKeysJson() of the OLD keypair)",
+    AgentIdempotencyError, "agent-idempotency/bad-root");
+  validateOpts.requireNonEmptyString(args.newRootJson,
+    "reseal: newRootJson (b.vault.getKeysJson() of the NEW keypair)",
+    AgentIdempotencyError, "agent-idempotency/bad-root");
+  var store = args.store;
+  validateOpts.requireMethods(store, ["listAll", "putResealed"],
+    "reseal: operator store (so every persisted row can be re-sealed out-of-band)",
+    AgentIdempotencyError, "agent-idempotency/bad-reseal-store");
+  _ensureSealTable();
+  var schema = cryptoField().getSchema(SEAL_TABLE);
+  // listAll / putResealed may be sync (in-memory) or async (durable SQL /
+  // Redis). Thread both through Promise.resolve so either shape works.
+  return Promise.resolve(store.listAll()).then(function (rows) {
+    if (!Array.isArray(rows)) {
+      throw new AgentIdempotencyError("agent-idempotency/bad-reseal-store",
+        "reseal: store.listAll() must resolve to an array of rows");
+    }
+    var chain = Promise.resolve();
+    var resealed = 0;
+    rows.forEach(function (row) {
+      if (!row || typeof row !== "object") return;
+      var changed = false;
+      for (var f = 0; f < schema.sealedFields.length; f += 1) {
+        var column = schema.sealedFields[f];
+        var value = row[column];
+        // Only AAD-sealed cells need rotating. Vault-less / pre-sealing rows
+        // carry plain JSON; a plain `vault:` cell would have been written by
+        // a non-AAD path that doesn't exist for this table — leave both
+        // untouched (resealRoot would throw not-sealed on a plain value).
+        if (typeof value !== "string" || !vaultAad.isAadSealed(value)) continue;
+        var aadParts = cryptoField()._aadParts(schema, SEAL_TABLE, column, row);
+        row[column] = vaultAad.resealRoot(value, aadParts, args.oldRootJson, args.newRootJson);
+        changed = true;
+      }
+      if (changed) {
+        resealed += 1;
+        chain = chain.then(function () { return store.putResealed(row); });
+      }
+    });
+    return chain.then(function () { return { table: SEAL_TABLE, resealed: resealed }; });
+  });
+}
+
 module.exports = {
   create:                 create,
+  reseal:                 reseal,
   AgentIdempotencyError:  AgentIdempotencyError,
   guards: {
     key: guardIdempotencyKey,
   },
+  // AAD_ROTATION — the vault-key rotation descriptor every framework module
+  // that seals an {aad:true} table on an OPERATOR-SUPPLIED store (outside
+  // db.enc) exports, so an operator can register it with a rotation eager-
+  // sweep and the codebase-patterns detect-and-refuse gate can confirm no
+  // such external-store table is silently orphaned. `backend: "external"`
+  // flags that the in-tree b.vaultRotate.rotate pipeline cannot reach it.
+  AAD_ROTATION: {
+    table:         SEAL_TABLE,
+    rowIdField:    "keyHash",
+    schemaVersion: "1",
+    backend:       "external",
+    reseal:        reseal,
+  },
 };