@blamejs/blamejs-shop 0.3.4 → 0.3.6

package/lib/vendor/blamejs/lib/a2a-tasks.js

@@ -62,17 +62,17 @@ var A2aTasksError = defineClass("A2aTasksError", { alwaysPermanent: true });
 var JSONRPC_VERSION = "2.0";
 
 // JSON-RPC 2.0 fixed error codes — A2A inherits these.
-var JSONRPC_PARSE_ERROR      = -32700;                                                             // allow:raw-byte-literal — JSON-RPC fixed code / allow:raw-time-literal — not seconds
-var JSONRPC_INVALID_REQUEST  = -32600;                                                             // allow:raw-byte-literal — JSON-RPC fixed code / allow:raw-time-literal — not seconds
-var JSONRPC_METHOD_NOT_FOUND = -32601;                                                             // allow:raw-byte-literal — JSON-RPC fixed code / allow:raw-time-literal — not seconds
-var JSONRPC_INVALID_PARAMS   = -32602;                                                             // allow:raw-byte-literal — JSON-RPC fixed code / allow:raw-time-literal — not seconds
-var JSONRPC_INTERNAL_ERROR   = -32603;                                                             // allow:raw-byte-literal — JSON-RPC fixed code / allow:raw-time-literal — not seconds
+var JSONRPC_PARSE_ERROR      = -32700;                                                             // allow:raw-time-literal — not seconds
+var JSONRPC_INVALID_REQUEST  = -32600;                                                             // allow:raw-time-literal — not seconds
+var JSONRPC_METHOD_NOT_FOUND = -32601;                                                             // allow:raw-time-literal — not seconds
+var JSONRPC_INVALID_PARAMS   = -32602;                                                             // allow:raw-time-literal — not seconds
+var JSONRPC_INTERNAL_ERROR   = -32603;                                                             // allow:raw-time-literal — not seconds
 
 // A2A-specific error codes per the spec's task-error vocabulary.
 // A2A_TASK_NOT_FOUND (-32002) + A2A_TASK_NOT_CANCELABLE (-32003) are
 // raised by operator handlers — they're reserved here for documentation
 // purposes only.
-var A2A_SCOPE_DENIED         = -32001;                                                             // allow:raw-byte-literal — JSON-RPC server-error range / allow:raw-time-literal — not seconds
+var A2A_SCOPE_DENIED         = -32001;                                                             // allow:raw-time-literal — not seconds
 
 var ALLOWED_METHODS = Object.freeze(["tasks/send", "tasks/get", "tasks/cancel"]);
 
@@ -80,7 +80,7 @@ var TASK_ID_RE = /^[A-Za-z0-9_-]{1,64}$/;
 // Same identifier shape as MCP tool-name; consolidating would couple
 // MCP + A2A protocol identifiers into a single primitive.
 var SKILL_NAME_RE = /^[a-zA-Z][a-zA-Z0-9._-]{0,63}$/;   // allow:duplicate-regex — RFC-3986-unreserved identifier shape, shared across mcp.js + mcp-tool-registry.js
-// allow:raw-byte-literal — RFC-3986-unreserved identifier shape (length cap inside regex), not a byte count
+// RFC-3986-unreserved identifier shape (length cap inside regex), not a byte count
 
 function _emitAudit(action, metadata, outcome) {
   try {
@@ -99,7 +99,7 @@ var bCrypto = lazyRequire(function () { return require("./crypto"); });
 // satisfies the framework's unused-var policy so the helper stays
 // available without an explicit disable directive.
 function _newTaskId() {
-  return bCrypto().generateToken(12);                                                               // allow:raw-byte-literal — 96-bit task id, not byte arithmetic on payload
+  return bCrypto().generateToken(12);                                                               // 96-bit task id, not byte arithmetic on payload
 }
 
 function _validateTaskShape(task, where) {
@@ -108,7 +108,7 @@ function _validateTaskShape(task, where) {
       where + ": task must be a non-null object", true);
   }
   validateOpts.requireNonEmptyString(task.skill, where + ".skill", A2aTasksError, "a2a-tasks/bad-skill");
-  if (task.skill.length > 64 || !SKILL_NAME_RE.test(task.skill)) {                                // allow:raw-byte-literal — A2A skill-name length cap, not byte count
+  if (task.skill.length > 64 || !SKILL_NAME_RE.test(task.skill)) {                                // A2A skill-name length cap, not byte count
 
     throw new A2aTasksError("a2a-tasks/bad-skill",
       where + ".skill '" + task.skill + "' must match " + SKILL_NAME_RE);
@@ -196,7 +196,7 @@ async function get(opts) {
   }
   validateOpts.requireNonEmptyString(opts.peerUrl, "tasks.get.peerUrl", A2aTasksError, "a2a-tasks/bad-peer-url");
   validateOpts.requireNonEmptyString(opts.taskId, "tasks.get.taskId", A2aTasksError, "a2a-tasks/bad-task-id");
-  if (opts.taskId.length > 64 || !TASK_ID_RE.test(opts.taskId)) {                                  // allow:raw-byte-literal — A2A task-id length cap, not byte count
+  if (opts.taskId.length > 64 || !TASK_ID_RE.test(opts.taskId)) {                                  // A2A task-id length cap, not byte count
     throw new A2aTasksError("a2a-tasks/bad-task-id",
       "tasks.get: taskId must match " + TASK_ID_RE);
   }
@@ -239,7 +239,7 @@ async function cancel(opts) {
   }
   validateOpts.requireNonEmptyString(opts.peerUrl, "tasks.cancel.peerUrl", A2aTasksError, "a2a-tasks/bad-peer-url");
   validateOpts.requireNonEmptyString(opts.taskId, "tasks.cancel.taskId", A2aTasksError, "a2a-tasks/bad-task-id");
-  if (opts.taskId.length > 64 || !TASK_ID_RE.test(opts.taskId)) {                                  // allow:raw-byte-literal — A2A task-id length cap, not byte count
+  if (opts.taskId.length > 64 || !TASK_ID_RE.test(opts.taskId)) {                                  // A2A task-id length cap, not byte count
     throw new A2aTasksError("a2a-tasks/bad-task-id",
       "tasks.cancel: taskId must match " + TASK_ID_RE);
   }
@@ -280,7 +280,7 @@ async function _jsonRpc(url, method, params, opts) {
     throw new A2aTasksError("a2a-tasks/transport",
       "tasks." + method.split("/")[1] + ": transport error: " + (transportErr.message || transportErr));
   }
-  if (rsp.statusCode < 200 || rsp.statusCode >= 300) {                                             // allow:raw-byte-literal — HTTP status class boundaries
+  if (rsp.statusCode < 200 || rsp.statusCode >= 300) {                                             // HTTP status class boundaries
     if (opts.audit) {
       _emitAudit("a2a.tasks.http_error",
         { method: method, url: url, statusCode: rsp.statusCode, elapsedMs: Date.now() - startMs },
@@ -395,7 +395,7 @@ function middlewareTasks(opts) {
 
   return function a2aTasksMiddleware(req, res) {
     if ((req.method || "").toUpperCase() !== "POST") {
-      res.statusCode = 405;                                                                        // allow:raw-byte-literal — HTTP 405 Method Not Allowed
+      res.statusCode = 405;                                                                        // HTTP 405 Method Not Allowed
       res.setHeader("Content-Type", "application/json");
       res.setHeader("Allow", "POST");
       res.end(JSON.stringify(_jsonRpcError(null, JSONRPC_INVALID_REQUEST, "method must be POST")));
@@ -403,7 +403,7 @@ function middlewareTasks(opts) {
     }
     var ctype = (req.headers && (req.headers["content-type"] || req.headers["Content-Type"])) || "";
     if (typeof ctype === "string" && ctype.indexOf("application/json") !== 0 && ctype.indexOf("application/json") === -1) {
-      res.statusCode = 415;                                                                        // allow:raw-byte-literal — HTTP 415 Unsupported Media Type
+      res.statusCode = 415;                                                                        // HTTP 415 Unsupported Media Type
       res.setHeader("Content-Type", "application/json");
       res.end(JSON.stringify(_jsonRpcError(null, JSONRPC_INVALID_REQUEST, "Content-Type must be application/json")));
       return;
@@ -414,14 +414,14 @@ function middlewareTasks(opts) {
       try {
         body = safeJson.parse(rawBytes.toString("utf8"), { maxBytes: maxBytes });
       } catch (_parseErr) {
-        res.statusCode = 400;                                                                      // allow:raw-byte-literal — HTTP 400 Bad Request
+        res.statusCode = 400;                                                                      // HTTP 400 Bad Request
         res.setHeader("Content-Type", "application/json");
         res.end(JSON.stringify(_jsonRpcError(null, JSONRPC_PARSE_ERROR, "invalid JSON body")));
         return;
       }
       if (!body || typeof body !== "object" || body.jsonrpc !== JSONRPC_VERSION ||
           typeof body.method !== "string") {
-        res.statusCode = 400;                                                                      // allow:raw-byte-literal — HTTP 400 Bad Request
+        res.statusCode = 400;                                                                      // HTTP 400 Bad Request
         res.setHeader("Content-Type", "application/json");
         res.end(JSON.stringify(_jsonRpcError(body && body.id, JSONRPC_INVALID_REQUEST,
           "expected JSON-RPC 2.0 envelope { jsonrpc, id?, method, params? }")));
@@ -429,7 +429,7 @@ function middlewareTasks(opts) {
       }
       var reqId = body.id !== undefined ? body.id : null;
       if (ALLOWED_METHODS.indexOf(body.method) === -1) {
-        res.statusCode = 200;                                                                      // allow:raw-byte-literal — JSON-RPC errors return 200 with error envelope
+        res.statusCode = 200;                                                                      // JSON-RPC errors return 200 with error envelope
         res.setHeader("Content-Type", "application/json");
         res.end(JSON.stringify(_jsonRpcError(reqId, JSONRPC_METHOD_NOT_FOUND,
           "method '" + body.method + "' not in [" + ALLOWED_METHODS.join(", ") + "]")));
@@ -440,7 +440,7 @@ function middlewareTasks(opts) {
       // Scope enforcement for tasks/send (task references a skill).
       if (body.method === "tasks/send" && scopes) {
         if (!params.task || typeof params.task !== "object" || typeof params.task.skill !== "string") {
-          res.statusCode = 200;                                                                    // allow:raw-byte-literal — JSON-RPC error envelope returns 200
+          res.statusCode = 200;                                                                    // JSON-RPC error envelope returns 200
           res.setHeader("Content-Type", "application/json");
           res.end(JSON.stringify(_jsonRpcError(reqId, JSONRPC_INVALID_PARAMS,
             "tasks/send: params.task.skill required")));
@@ -454,7 +454,7 @@ function middlewareTasks(opts) {
               _emitAudit("a2a.tasks.scope_denied",
                 { skill: params.task.skill, requiredScope: requiredScope }, "denied");
             }
-            res.statusCode = 200;                                                                  // allow:raw-byte-literal — JSON-RPC error envelope returns 200
+            res.statusCode = 200;                                                                  // JSON-RPC error envelope returns 200
             res.setHeader("Content-Type", "application/json");
             res.end(JSON.stringify(_jsonRpcError(reqId, A2A_SCOPE_DENIED,
               "scope '" + requiredScope + "' required for skill '" + params.task.skill + "'")));
@@ -476,7 +476,7 @@ function middlewareTasks(opts) {
             _emitAudit("a2a.tasks.handled",
               { method: body.method, skill: params.task && params.task.skill, taskId: params.taskId });
           }
-          res.statusCode = 200;                                                                    // allow:raw-byte-literal — JSON-RPC 200 with result envelope
+          res.statusCode = 200;                                                                    // JSON-RPC 200 with result envelope
           res.setHeader("Content-Type", "application/json");
           res.end(JSON.stringify({
             jsonrpc: JSONRPC_VERSION,
@@ -491,12 +491,12 @@ function middlewareTasks(opts) {
             _emitAudit("a2a.tasks.handler_error",
               { method: body.method, errorMessage: msg, errorCode: code }, "warning");
           }
-          res.statusCode = 200;                                                                    // allow:raw-byte-literal — JSON-RPC error envelope returns 200
+          res.statusCode = 200;                                                                    // JSON-RPC error envelope returns 200
           res.setHeader("Content-Type", "application/json");
           res.end(JSON.stringify(_jsonRpcError(reqId, code, msg)));
         });
     }).catch(function (readErr) {
-      res.statusCode = 400;                                                                        // allow:raw-byte-literal — HTTP 400 Bad Request
+      res.statusCode = 400;                                                                        // HTTP 400 Bad Request
       res.setHeader("Content-Type", "application/json");
       res.end(JSON.stringify(_jsonRpcError(null, JSONRPC_PARSE_ERROR,
         "could not read request body: " + (readErr.message || readErr))));
@@ -573,12 +573,12 @@ function middlewareAgentCard(opts) {
   var cardJson = JSON.stringify(opts.card);
   return function a2aAgentCardMiddleware(req, res) {
     if ((req.method || "").toUpperCase() !== "GET") {
-      res.statusCode = 405;                                                                        // allow:raw-byte-literal — HTTP 405 Method Not Allowed
+      res.statusCode = 405;                                                                        // HTTP 405 Method Not Allowed
       res.setHeader("Allow", "GET");
       res.end();
       return;
     }
-    res.statusCode = 200;                                                                          // allow:raw-byte-literal — HTTP 200 OK
+    res.statusCode = 200;                                                                          // HTTP 200 OK
     res.setHeader("Content-Type", "application/json");
     res.setHeader("Cache-Control", "public, max-age=" + maxAgeSec);
     res.end(cardJson);

package/lib/vendor/blamejs/lib/a2a.js

@@ -39,10 +39,10 @@ var audit = require("./audit");
 var { A2aError } = require("./framework-error");
 
 var REQUIRED_CARD_FIELDS = ["issuer", "agentId", "capabilities", "version"];
-var ID_MAX     = 256;                                                                       // allow:raw-byte-literal — string-length cap, not bytes
-var SEMVER_MAX = 64;                                                                        // allow:raw-byte-literal — string-length cap, not bytes
-var CAP_NAME_MAX = 128;                                                                     // allow:raw-byte-literal — string-length cap, not bytes
-var SHAKE256_BYTES = 64;                                                                    // allow:raw-byte-literal — SHA3-512 output is 64 bytes (FIPS 202)
+var ID_MAX     = 256;                                                                       // string-length cap, not bytes
+var SEMVER_MAX = 64;                                                                        // string-length cap, not bytes
+var CAP_NAME_MAX = 128;                                                                     // string-length cap, not bytes
+var SHAKE256_BYTES = 64;                                                                    // SHA3-512 output is 64 bytes (FIPS 202)
 var ID_RE     = /^[a-zA-Z0-9._:/-]{1,256}$/;
 var SEMVER_RE = /^[0-9]+\.[0-9]+(?:\.[0-9]+)?(?:-[A-Za-z0-9.-]+)?$/;
 

package/lib/vendor/blamejs/lib/acme.js

@@ -138,7 +138,7 @@ function _signJws(privateKey, protectedHeader, payload) {
   // ECDSA from node:crypto returns DER-encoded (r,s); RFC 7515 requires
   // raw concatenation of r||s, each padded to the curve byte size (32
   // for P-256).
-  var rawSig = _ecdsaDerToRaw(derSig, 32);                                       // allow:raw-byte-literal — RFC 7518 §3.4 ES256 signature half-length (P-256 byte size)
+  var rawSig = _ecdsaDerToRaw(derSig, 32);                                       // RFC 7518 §3.4 ES256 signature half-length (P-256 byte size)
   return {
     protected: protB64,
     payload:   payloadB64,
@@ -1432,8 +1432,8 @@ function _base32lc(buf) {
   var bits = 0;
   var value = 0;
   for (var i = 0; i < buf.length; i += 1) {
-    value = (value << 8) | buf[i];   // allow:raw-byte-literal — bit-shift count, byte boundary
-    bits += 8;                       // allow:raw-byte-literal — bits-per-byte constant
+    value = (value << 8) | buf[i];   // bit-shift count, byte boundary
+    bits += 8;                       // bits-per-byte constant
     while (bits >= 5) {
       out += alphabet[(value >>> (bits - 5)) & 31];
       bits -= 5;

package/lib/vendor/blamejs/lib/agent-idempotency.js

@@ -430,7 +430,7 @@ function _actorIdHash(actorId) {
 
 function _truncHash(hash) {
   if (typeof hash !== "string") return "";
-  return hash.slice(0, 16);                                                                            // allow:raw-byte-literal — audit-log truncation length, not a size cap
+  return hash.slice(0, 16);                                                                            // audit-log truncation length, not a size cap
 }
 
 function _fingerprintArgs(args) {

package/lib/vendor/blamejs/lib/agent-orchestrator.js

@@ -117,7 +117,7 @@ function _unsealRegistryRow(row) {
 }
 
 var DEFAULT_DRAIN_TIMEOUT_MS = C.TIME.minutes(2);
-var STREAM_ID_RAND_BYTES     = 8;                                                                     // allow:raw-byte-literal — stream-id random-suffix byte length, not a size cap
+var STREAM_ID_RAND_BYTES     = 8;                                                                     // stream-id random-suffix byte length, not a size cap
 var DEFAULT_PER_CONSUMER_STOP_MS = C.TIME.seconds(5);
 // SUBSTRATE-20 — FNV-1a offset basis salted with the first 32 bits of
 // SHA3-512(vault master). Attackers who don't have read access to the
@@ -428,7 +428,7 @@ function _spawnConsumers(ctx, args) {
       "spawnConsumers: queue with .consume() required");
   }
   var shards = typeof args.shards === "number" ? args.shards : 1;
-  if (!Number.isInteger(shards) || shards < 1 || shards > 256) {                                      // allow:raw-byte-literal — shard cap
+  if (!Number.isInteger(shards) || shards < 1 || shards > 256) {                                      // shard cap
     throw new AgentOrchestratorError("agent-orchestrator/bad-shard-count",
       "spawnConsumers: shards must be an integer in 1..256");
   }
@@ -508,21 +508,21 @@ function _saltedFnvBasis() {
   var v;
   try { v = vault(); } catch (_e) { v = null; }
   if (!v || typeof v.getKeysJson !== "function") {
-    _saltedFnvBasisCache = 2166136261;                                                                  // allow:raw-byte-literal — FNV-1a offset basis (vault-less fallback)
+    _saltedFnvBasisCache = 2166136261;                                                                  // FNV-1a offset basis (vault-less fallback)
     return _saltedFnvBasisCache;
   }
   var keysJson;
   try { keysJson = v.getKeysJson(); }
   catch (_e) {
-    _saltedFnvBasisCache = 2166136261;                                                                  // allow:raw-byte-literal — FNV-1a offset basis (vault-init-pending fallback)
+    _saltedFnvBasisCache = 2166136261;                                                                  // FNV-1a offset basis (vault-init-pending fallback)
     return _saltedFnvBasisCache;
   }
   var hashHex = bCrypto.sha3Hash(keysJson);
   // Read the first 32 bits as the salt; mix into the offset basis via
   // XOR so the distribution properties of FNV are preserved.
-  var saltBuf = Buffer.from(hashHex.slice(0, 8), "hex");                                                // allow:raw-byte-literal — 32-bit prefix of SHA3-512 hex (4 bytes = 8 hex chars)
+  var saltBuf = Buffer.from(hashHex.slice(0, 8), "hex");                                                // 32-bit prefix of SHA3-512 hex (4 bytes = 8 hex chars)
   var salt = saltBuf.readUInt32BE(0);
-  _saltedFnvBasisCache = ((2166136261 ^ salt) >>> 0);                                                   // allow:raw-byte-literal — FNV-1a offset basis (vault-salted)
+  _saltedFnvBasisCache = ((2166136261 ^ salt) >>> 0);                                                   // FNV-1a offset basis (vault-salted)
   return _saltedFnvBasisCache;
 }
 
@@ -535,7 +535,7 @@ function shardFor(shardKey, shards) {
   var h = _saltedFnvBasis();
   for (var i = 0; i < shardKey.length; i += 1) {
     h ^= shardKey.charCodeAt(i);
-    h = (h * 16777619) >>> 0;                                                                         // allow:raw-byte-literal — FNV-1a prime
+    h = (h * 16777619) >>> 0;                                                                         // FNV-1a prime
   }
   return h % shards;
 }
@@ -710,7 +710,7 @@ async function _quiesceInFlight(ctx, startedAt, timeoutMs) {
     }
     if (!anyInFlight) return true;
     await new Promise(function (r) {
-      var t = setTimeout(r, 50);                                                                       // allow:raw-byte-literal — 50ms in-flight poll interval
+      var t = setTimeout(r, 50);                                                                       // 50ms in-flight poll interval
       if (t && typeof t.unref === "function") t.unref();
     });
   }

package/lib/vendor/blamejs/lib/agent-posture-chain.js

@@ -72,12 +72,12 @@ var BUILTIN_REGIMES = Object.freeze(["hipaa", "pci-dss", "gdpr", "soc2"]);
 // SHAPE, not authenticity). Defense is a keyed MAC over the canonical
 // envelope bytes, computed at appendHop and verified at validate.
 var ENVELOPE_MAC_LABEL = "blamejs.agent.postureChain/v1";
-var ENVELOPE_MAC_KEY_BYTES = 32;                                                                        // allow:raw-byte-literal — HMAC-SHA3-512 keyed bytes
+var ENVELOPE_MAC_KEY_BYTES = 32;                                                                        // HMAC-SHA3-512 keyed bytes
 // SUBSTRATE-21 — hop count cap defends infinite recursion across
 // agent delegation. 16 is the spec default; operators can lower via
 // opts.maxHopCount but never raise (audit fan-out without a cap is a
 // DoS class).
-var DEFAULT_MAX_HOP_COUNT = 16;                                                                         // allow:raw-byte-literal — hop count cap
+var DEFAULT_MAX_HOP_COUNT = 16;                                                                         // hop count cap
 var _macKeyCache = null;                                                                                // memoized per-vault-master key
 
 function _resolveMacKey() {

package/lib/vendor/blamejs/lib/agent-saga.js

@@ -80,7 +80,7 @@ var audit              = lazyRequire(function () { return require("./audit"); })
 
 var AgentSagaError = defineClass("AgentSagaError", { alwaysPermanent: true });
 
-var SAGA_ID_RAND_BYTES = 8;                                                                           // allow:raw-byte-literal — saga-id random-suffix byte length
+var SAGA_ID_RAND_BYTES = 8;                                                                           // saga-id random-suffix byte length
 
 /**
  * @primitive b.agent.saga.create

package/lib/vendor/blamejs/lib/agent-snapshot.js

@@ -71,7 +71,7 @@ var DEFAULT_DRAIN_TIMEOUT_MS     = C.TIME.minutes(2);
 var DEFAULT_SNAPSHOT_INTERVAL_MS = C.TIME.minutes(5);
 var DEFAULT_MAX_SNAPSHOT_BYTES   = C.BYTES.mib(50);
 var SCHEMA_VERSION               = 1;
-var SNAPSHOT_ID_RAND_BYTES       = 8;                                                                 // allow:raw-byte-literal — snapshot-id random suffix
+var SNAPSHOT_ID_RAND_BYTES       = 8;                                                                 // snapshot-id random suffix
 
 /**
  * @primitive b.agent.snapshot.create

package/lib/vendor/blamejs/lib/agent-stream.js

@@ -66,7 +66,7 @@ var audit             = lazyRequire(function () { return require("./audit"); });
 
 var AgentStreamError = defineClass("AgentStreamError", { alwaysPermanent: true });
 
-var DEFAULT_BATCH_SIZE = 256;                                                                          // allow:raw-byte-literal — cursor batch row count, not bytes
+var DEFAULT_BATCH_SIZE = 256;                                                                          // cursor batch row count, not bytes
 
 /**
  * @primitive b.agent.stream.create

package/lib/vendor/blamejs/lib/agent-tenant.js

@@ -121,7 +121,7 @@ var TENANT_KDF_LABEL = "blamejs.agent.tenant/v1";
 // 32 bytes — XChaCha20-Poly1305 key length. Distinct from the audit
 // truncation buffer so future key-length bumps don't have to chase a
 // magic constant.
-var TENANT_KEY_BYTES = 32;                                                                              // allow:raw-byte-literal — XChaCha20-Poly1305 key length (256 bits)
+var TENANT_KEY_BYTES = 32;                                                                              // XChaCha20-Poly1305 key length (256 bits)
 
 /**
  * @primitive b.agent.tenant.create

package/lib/vendor/blamejs/lib/agent-trace.js

@@ -78,7 +78,7 @@ function _emitFirstFailureAudit(auditImpl, kind, message) {
   if (_failureAuditEmittedFor[kind]) return;
   _failureAuditEmittedFor[kind] = true;
   agentAudit.safeAudit(auditImpl, "agent.trace.tracer_failure", null, {
-    kind: kind, message: message ? String(message).slice(0, 256) : "",                                  // allow:raw-byte-literal — audit-message char cap
+    kind: kind, message: message ? String(message).slice(0, 256) : "",                                  // audit-message char cap
     rateLimited: "first-occurrence-only",
   });
 }
@@ -249,8 +249,8 @@ function _shouldSample(globalRate, perMethod, method, traceId) {
     // Use the low 32 bits of the trace-id as the sampling roll
     // (W3C-compatible). Hash modulo 1e9 → divide by 1e9 puts the
     // result in [0,1) deterministically.
-    var lo = parseInt(traceId.slice(-8), 16);                                                          // allow:raw-byte-literal — low 32 bits of trace-id hex
-    var roll = (lo >>> 0) / 0x100000000;                                                                // allow:raw-byte-literal — 2^32 normalization divisor
+    var lo = parseInt(traceId.slice(-8), 16);                                                          // low 32 bits of trace-id hex
+    var roll = (lo >>> 0) / 0x100000000;                                                                // 2^32 normalization divisor
     return roll < rate;
   }
   // No trace-id supplied — start of a new trace. Operators wire

package/lib/vendor/blamejs/lib/ai-capability.js

@@ -74,7 +74,7 @@ var REASONING_TIERS = ["none", "basic", "standard", "advanced"];
 // descriptor fields are costPer1kInputTokens / costPer1kOutputTokens).
 // Dividing a token count by this rate unit converts a per-1k rate into
 // the per-token multiplier — a rate denominator, not a byte size.
-var COST_RATE_TOKEN_UNIT = 1000;   // allow:raw-byte-literal — per-1k-token cost-rate denominator, not a byte count
+var COST_RATE_TOKEN_UNIT = 1000;   // per-1k-token cost-rate denominator, not a byte count
 
 var DESCRIPTOR_KEYS = [
   "maxContextTokens", "maxOutputTokens", "modalitiesIn", "modalitiesOut",

package/lib/vendor/blamejs/lib/ai-dp.js

@@ -73,7 +73,7 @@ var ACCOUNTINGS = ["basic", "rdp"];
 // integer-exact discrete-Gaussian sampler. 2^32 keeps the deviation
 // from the target σ² below 2^-32 — far under the noise scale — while
 // keeping the BigInt denominators bounded.
-var SIGMA2_RATIONAL_DEN = 4294967296;          // allow:raw-byte-literal — 2^32 rational-approx denominator, not a byte size
+var SIGMA2_RATIONAL_DEN = 4294967296;          // 2^32 rational-approx denominator, not a byte size
 
 // ---- Minimal exact rational (BigInt num / den, den > 0) ----
 
@@ -105,7 +105,7 @@ function _uniformBelow(m) {
   if (m <= 0n) throw new AiDpError("ai-dp/internal", "ai.dp: _uniformBelow needs m > 0");
   if (m === 1n) return 0n;
   var bits = m.toString(2).length;
-  var bytes = Math.ceil(bits / 8);                        // allow:raw-byte-literal — bits-per-byte divisor, not a size
+  var bytes = Math.ceil(bits / 8);                        // bits-per-byte divisor, not a size
   var mask = (1n << BigInt(bits)) - 1n;
   for (;;) {
     var buf = bCrypto.generateBytes(bytes);
@@ -121,7 +121,7 @@ function _uniformBelow(m) {
 // the BigInt rejection sampler (accumulating 53 bits in a JS Number
 // would overflow the 2^53 safe-integer range and skew the draw), then
 // mapped (val + 1) / 2^53 → (0, 1].
-var TWO_POW_53 = 9007199254740992;                         // allow:raw-byte-literal — 2^53 mantissa range, not a byte size
+var TWO_POW_53 = 9007199254740992;                         // 2^53 mantissa range, not a byte size
 function _uniformOpen() {
   var v = Number(_uniformBelow(9007199254740992n));        // [0, 2^53) exact
   return (v + 1) / TWO_POW_53;                             // (0, 1]
@@ -231,7 +231,7 @@ function _snappingLaplace(value, scale, bound) {
 
 // ---- Rényi-DP costs (Mironov 2017) ----
 
-var RDP_ORDERS = [1.25, 1.5, 1.75, 2, 2.5, 3, 4, 5, 6, 8, 12, 16, 24, 32, 48, 64, 128, 256];   // allow:raw-byte-literal — Rényi DP orders (α), not byte sizes
+var RDP_ORDERS = [1.25, 1.5, 1.75, 2, 2.5, 3, 4, 5, 6, 8, 12, 16, 24, 32, 48, 64, 128, 256];   // Rényi DP orders (α), not byte sizes
 
 // Gaussian mechanism with noise-to-sensitivity z = sigma / sensitivity:
 // RDP(alpha) = alpha / (2 z^2).

package/lib/vendor/blamejs/lib/ai-input.js

@@ -25,8 +25,8 @@ var numericBounds = require("./numeric-bounds");
 var audit = require("./audit");
 var { AiInputError } = require("./framework-error");
 
-var SAMPLE_TRUNC = 80;                                                                       // allow:raw-byte-literal — sample truncation length, not bytes
-var CONFIDENCE_BASE = 60;                                                                    // allow:raw-byte-literal — confidence percentage base / allow:raw-time-literal — not seconds
+var SAMPLE_TRUNC = 80;                                                                       // sample truncation length, not bytes
+var CONFIDENCE_BASE = 60;                                                                    // allow:raw-time-literal — not seconds
 
 var PATTERNS = [
   { id: "ignore-prior-instructions", severity: 3, re:
@@ -44,7 +44,7 @@ var PATTERNS = [
   { id: "exfil-callback",            severity: 3, re:
     /\b(?:send|post|fetch|exfil|leak|paste|forward)\b[\s\S]{0,40}(?:secret|key|token|password|cred|env|\.ssh|private)/i },
   { id: "base64-marker-around-instructions", severity: 2, re:
-    /(?:[A-Za-z0-9+/]{40,}={0,2})\s+(?:means|decodes?\s+to|=)/i },                          // allow:raw-byte-literal — regex repetition floor, not bytes
+    /(?:[A-Za-z0-9+/]{40,}={0,2})\s+(?:means|decodes?\s+to|=)/i },                          // regex repetition floor, not bytes
   { id: "rot13-shape",               severity: 2, re:
     /\b(?:rot13|rotcipher|cipher|caesar)\s*[:=]\s*[a-zA-Z]{20,}/i },
   { id: "markdown-injection",        severity: 2, re:
@@ -138,7 +138,7 @@ function classify(input, opts) {
     else if (signals[j].severity === 2) sev2++;
   }
   var verdict = sev3 > 0 ? "malicious" : (sev2 >= 2 ? "suspicious" : "clean");
-  var confidence = sev3 === 0 && sev2 === 0 ? 0 : Math.min(100, CONFIDENCE_BASE + sev3 * 15 + sev2 * 5);                                // allow:raw-byte-literal — confidence ceiling 100, not bytes/seconds
+  var confidence = sev3 === 0 && sev2 === 0 ? 0 : Math.min(100, CONFIDENCE_BASE + sev3 * 15 + sev2 * 5);                                // confidence ceiling 100, not bytes/seconds
 
   if (auditOn && verdict !== "clean") {
     audit.safeEmit({

package/lib/vendor/blamejs/lib/ai-model-manifest.js

@@ -50,7 +50,7 @@ var VALID_DATA_TYPES = Object.freeze({
   patch: true, platform: true, "test-case": true,
 });
 var ISO8601_RE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z$/;                                // allow:duplicate-regex — ISO-8601 instant shape ships in three primitives (metrics text-render, content-credentials, mail-server-imap APPEND); each is bounded by its own caller and the regex itself is 50 bytes — extracting into a cross-module dep wouldn't carry its weight
-var BOM_REF_RE = /^[A-Za-z0-9._:/+-]{1,256}$/;                                                  // allow:raw-byte-literal — CycloneDX bom-ref string-length cap, not bytes
+var BOM_REF_RE = /^[A-Za-z0-9._:/+-]{1,256}$/;                                                  // CycloneDX bom-ref string-length cap, not bytes
 
 function _requireString(obj, key, ownerName) {
   if (typeof obj[key] !== "string" || obj[key].length === 0) {
@@ -67,7 +67,7 @@ function _validateModelComponent(c) {
   _requireString(c, "name", "build.model");
   _requireString(c, "version", "build.model");
   if (c["bom-ref"] !== undefined) {
-    if (typeof c["bom-ref"] !== "string" || c["bom-ref"].length > 256) {                         // allow:raw-byte-literal — bom-ref string-length cap, not bytes
+    if (typeof c["bom-ref"] !== "string" || c["bom-ref"].length > 256) {                         // bom-ref string-length cap, not bytes
       throw new AiModelManifestError("aibom/bad-bom-ref",
         "build.model: bom-ref must be a string of length 1-256");
     }
@@ -332,12 +332,12 @@ function verify(envelope, publicKeyPem, opts) {
 // UUIDv4 via the framework's CSPRNG path. Used for `serialNumber`
 // defaults — operators may supply their own for cross-build stability.
 function _uuidUrn() {
-  var b = bCrypto.generateBytes(16);                                                            // allow:raw-byte-literal — RFC 9562 §4.1 UUIDv4 is a 16-byte (128-bit) primitive
-  b[6] = (b[6] & 0x0f) | 0x40;                                                                  // allow:raw-byte-literal — UUIDv4 version nibble (RFC 9562 §4.4)
-  b[8] = (b[8] & 0x3f) | 0x80;                                                                  // allow:raw-byte-literal — UUIDv4 variant nibble (RFC 9562 §4.4)
+  var b = bCrypto.generateBytes(16);                                                            // RFC 9562 §4.1 UUIDv4 is a 16-byte (128-bit) primitive
+  b[6] = (b[6] & 0x0f) | 0x40;                                                                  // UUIDv4 version nibble (RFC 9562 §4.4)
+  b[8] = (b[8] & 0x3f) | 0x80;                                                                  // UUIDv4 variant nibble (RFC 9562 §4.4)
   var h = b.toString("hex");
-  return "urn:uuid:" + h.slice(0, 8) + "-" + h.slice(8, 12) + "-" +                              // allow:raw-byte-literal — RFC 9562 §4 UUID text representation hex offsets (8-4-4-4-12)
-         h.slice(12, 16) + "-" + h.slice(16, 20) + "-" + h.slice(20);                            // allow:raw-byte-literal — RFC 9562 §4 UUID hex offsets
+  return "urn:uuid:" + h.slice(0, 8) + "-" + h.slice(8, 12) + "-" +                              // RFC 9562 §4 UUID text representation hex offsets (8-4-4-4-12)
+         h.slice(12, 16) + "-" + h.slice(16, 20) + "-" + h.slice(20);                            // RFC 9562 §4 UUID hex offsets
 }
 
 // package.json read lives behind the call to dodge a circular-load

package/lib/vendor/blamejs/lib/ai-pref.js

@@ -142,7 +142,7 @@ function parseHeader(value) {
   if (typeof value !== "string" || value.length === 0) {
     throw AiPrefError.factory("ai-pref/bad-header", "aiPref.parseHeader: value required");
   }
-  if (value.length > 1024) {                                                                   // allow:raw-byte-literal — header value cap, not bytes
+  if (value.length > 1024) {                                                                   // header value cap, not bytes
     throw AiPrefError.factory("ai-pref/header-too-large",
       "aiPref.parseHeader: value exceeds 1024 chars");
   }
@@ -205,7 +205,7 @@ function parseHeader(value) {
 function robotsBlock(opts) {
   var v = _validate(opts);
   var ua = opts.userAgent || "*";
-  if (typeof ua !== "string" || ua.length === 0 || ua.length > 256) {                          // allow:raw-byte-literal — UA-string cap, not bytes
+  if (typeof ua !== "string" || ua.length === 0 || ua.length > 256) {                          // UA-string cap, not bytes
     throw AiPrefError.factory("ai-pref/bad-user-agent",
       "aiPref.robotsBlock: userAgent must be 1-256 char string (or omit for *)");
   }
@@ -314,7 +314,7 @@ function refusePaidCrawl(req, res, opts) {
     res.setHeader("Content-Type", "application/json");
     res.setHeader("Cache-Control", "no-store");
   }
-  res.statusCode = 402;                                                                        // allow:raw-byte-literal — HTTP 402 Payment Required (RFC 9110)
+  res.statusCode = 402;                                                                        // HTTP 402 Payment Required (RFC 9110)
   res.end(body);
   audit.safeEmit({
     action:   "aipref.paid_crawl_refused",

package/lib/vendor/blamejs/lib/archive-gz.js

@@ -25,8 +25,8 @@ var archiveRead = lazyRequire(function () { return require("./archive-read"); })
 var archiveTarRead = lazyRequire(function () { return require("./archive-tar-read"); });
 
 // gzip magic — RFC 1952 §2.2 ("ID1=0x1f, ID2=0x8b").
-var GZIP_MAGIC_0 = 0x1f;                                                              // allow:raw-byte-literal — RFC 1952 §2.2 ID1
-var GZIP_MAGIC_1 = 0x8b;                                                              // allow:raw-byte-literal — RFC 1952 §2.2 ID2
+var GZIP_MAGIC_0 = 0x1f;                                                              // RFC 1952 §2.2 ID1
+var GZIP_MAGIC_1 = 0x8b;                                                              // RFC 1952 §2.2 ID2
 
 var DEFAULT_MAX_OUTPUT_BYTES = C.BYTES.gib(1);
 var DEFAULT_MAX_RATIO = 100;

package/lib/vendor/blamejs/lib/archive-read.js

@@ -58,12 +58,12 @@ var archiveAdapters = lazyRequire(function () { return require("./archive-adapte
 // Aligned with the write-side `lib/archive.js`. APPNOTE.TXT § references
 // follow each signature so a future spec bump is mechanical.
 
-var SIG_LFH                 = 0x04034b50;       // allow:raw-byte-literal — APPNOTE §4.3.7 LFH magic dword (wire-format-fixed)
-var SIG_CFH                 = 0x02014b50;       // allow:raw-byte-literal — APPNOTE §4.3.12 CFH magic dword (wire-format-fixed)
-var SIG_EOCD                = 0x06054b50;       // allow:raw-byte-literal — APPNOTE §4.3.16 EOCD magic dword (wire-format-fixed)
-var SIG_EOCD64              = 0x06064b50;       // allow:raw-byte-literal — APPNOTE §4.3.14 ZIP64 EOCD magic dword (wire-format-fixed)
-var SIG_EOCD64_LOCATOR      = 0x07064b50;       // allow:raw-byte-literal — APPNOTE §4.3.15 ZIP64 EOCD locator magic dword (wire-format-fixed)
-var SIG_DATA_DESCRIPTOR     = 0x08074b50;       // allow:raw-byte-literal — APPNOTE §4.3.9 data-descriptor magic dword (wire-format-fixed)
+var SIG_LFH                 = 0x04034b50;       // APPNOTE §4.3.7 LFH magic dword (wire-format-fixed)
+var SIG_CFH                 = 0x02014b50;       // APPNOTE §4.3.12 CFH magic dword (wire-format-fixed)
+var SIG_EOCD                = 0x06054b50;       // APPNOTE §4.3.16 EOCD magic dword (wire-format-fixed)
+var SIG_EOCD64              = 0x06064b50;       // APPNOTE §4.3.14 ZIP64 EOCD magic dword (wire-format-fixed)
+var SIG_EOCD64_LOCATOR      = 0x07064b50;       // APPNOTE §4.3.15 ZIP64 EOCD locator magic dword (wire-format-fixed)
+var SIG_DATA_DESCRIPTOR     = 0x08074b50;       // APPNOTE §4.3.9 data-descriptor magic dword (wire-format-fixed)
 void SIG_EOCD64; void SIG_EOCD64_LOCATOR;
 
 var METHOD_STORE_ID         = 0;
@@ -94,7 +94,7 @@ var MSDOS_EPOCH_YEAR        = 1980;
 // ---- Default zip-bomb / entry caps ---------------------------------------
 
 var DEFAULT_BOMB_POLICY = Object.freeze({
-  maxEntries:                65535,                                   // allow:raw-byte-literal — APPNOTE §4.4.21 16-bit entry-count field's max (ZIP64 deferred)
+  maxEntries:                65535,                                   // APPNOTE §4.4.21 16-bit entry-count field's max (ZIP64 deferred)
   maxEntryDecompressedBytes: C.BYTES.mib(128),                  // per-entry cap
   maxTotalDecompressedBytes: C.BYTES.gib(4),                    // archive-wide cap
   maxExpansionRatio:         100,                                     // compressed → decompressed ratio cap
@@ -193,10 +193,10 @@ async function _locateEocd(adapter) {
           eocdOffset:           scanOffset + i,
           diskNumber:           tail.readUInt16LE(i + 4),
           cdDiskNumber:         tail.readUInt16LE(i + 6),
-          entriesOnThisDisk:    tail.readUInt16LE(i + 8),            // allow:raw-byte-literal — APPNOTE §4.3.16 EOCD field offset
-          totalEntries:         tail.readUInt16LE(i + 10),           // allow:raw-byte-literal — APPNOTE §4.3.16 EOCD field offset
-          cdSize:               tail.readUInt32LE(i + 12),           // allow:raw-byte-literal — APPNOTE §4.3.16 EOCD field offset
-          cdOffset:             tail.readUInt32LE(i + 16),           // allow:raw-byte-literal — APPNOTE §4.3.16 EOCD field offset
+          entriesOnThisDisk:    tail.readUInt16LE(i + 8),            // APPNOTE §4.3.16 EOCD field offset
+          totalEntries:         tail.readUInt16LE(i + 10),           // APPNOTE §4.3.16 EOCD field offset
+          cdSize:               tail.readUInt32LE(i + 12),           // APPNOTE §4.3.16 EOCD field offset
+          cdOffset:             tail.readUInt32LE(i + 16),           // APPNOTE §4.3.16 EOCD field offset
           commentLength:        commentLen,
         };
       }
@@ -234,20 +234,20 @@ async function _readCentralDirectory(adapter, eocd) {
     if (cdBytes.readUInt32LE(pos) !== SIG_CFH) {
       throw new ArchiveReadError("archive-read/bad-cd-signature",
         "central directory entry " + n + " has bad signature " +
-        "0x" + cdBytes.readUInt32LE(pos).toString(16));                    // allow:raw-byte-literal — radix=16 for hex parse, not byte count
+        "0x" + cdBytes.readUInt32LE(pos).toString(16));                    // radix=16 for hex parse, not byte count
     }
-    var generalFlags     = cdBytes.readUInt16LE(pos + 8);                  // allow:raw-byte-literal — APPNOTE §4.3.12 CFH field offset
-    var method           = cdBytes.readUInt16LE(pos + 10);                 // allow:raw-byte-literal — APPNOTE §4.3.12 CFH field offset
-    var dosTime          = cdBytes.readUInt16LE(pos + 12);                 // allow:raw-byte-literal — APPNOTE §4.3.12 CFH field offset
-    var dosDate          = cdBytes.readUInt16LE(pos + 14);                 // allow:raw-byte-literal — APPNOTE §4.3.12 CFH field offset
-    var crc32            = cdBytes.readUInt32LE(pos + 16);                 // allow:raw-byte-literal — APPNOTE §4.3.12 CFH field offset
-    var compressedSize   = cdBytes.readUInt32LE(pos + 20);                 // allow:raw-byte-literal — APPNOTE §4.3.12 CFH field offset
-    var uncompressedSize = cdBytes.readUInt32LE(pos + 24);                 // allow:raw-byte-literal — APPNOTE §4.3.12 CFH field offset
-    var nameLen          = cdBytes.readUInt16LE(pos + 28);                 // allow:raw-byte-literal — APPNOTE §4.3.12 CFH field offset
-    var extraLen         = cdBytes.readUInt16LE(pos + 30);                 // allow:raw-byte-literal — APPNOTE §4.3.12 CFH field offset
-    var commentLen       = cdBytes.readUInt16LE(pos + 32);                 // allow:raw-byte-literal — APPNOTE §4.3.12 CFH field offset
-    var externalAttrs    = cdBytes.readUInt32LE(pos + 38);                 // allow:raw-byte-literal — APPNOTE §4.3.12 CFH field offset
-    var lfhOffset        = cdBytes.readUInt32LE(pos + 42);                 // allow:raw-byte-literal — APPNOTE §4.3.12 CFH field offset
+    var generalFlags     = cdBytes.readUInt16LE(pos + 8);                  // APPNOTE §4.3.12 CFH field offset
+    var method           = cdBytes.readUInt16LE(pos + 10);                 // APPNOTE §4.3.12 CFH field offset
+    var dosTime          = cdBytes.readUInt16LE(pos + 12);                 // APPNOTE §4.3.12 CFH field offset
+    var dosDate          = cdBytes.readUInt16LE(pos + 14);                 // APPNOTE §4.3.12 CFH field offset
+    var crc32            = cdBytes.readUInt32LE(pos + 16);                 // APPNOTE §4.3.12 CFH field offset
+    var compressedSize   = cdBytes.readUInt32LE(pos + 20);                 // APPNOTE §4.3.12 CFH field offset
+    var uncompressedSize = cdBytes.readUInt32LE(pos + 24);                 // APPNOTE §4.3.12 CFH field offset
+    var nameLen          = cdBytes.readUInt16LE(pos + 28);                 // APPNOTE §4.3.12 CFH field offset
+    var extraLen         = cdBytes.readUInt16LE(pos + 30);                 // APPNOTE §4.3.12 CFH field offset
+    var commentLen       = cdBytes.readUInt16LE(pos + 32);                 // APPNOTE §4.3.12 CFH field offset
+    var externalAttrs    = cdBytes.readUInt32LE(pos + 38);                 // APPNOTE §4.3.12 CFH field offset
+    var lfhOffset        = cdBytes.readUInt32LE(pos + 42);                 // APPNOTE §4.3.12 CFH field offset
     var nameStart        = pos + CFH_FIXED_BYTES;
     var extraStart       = nameStart + nameLen;
     var totalLen         = CFH_FIXED_BYTES + nameLen + extraLen + commentLen;
@@ -292,7 +292,7 @@ async function _verifyLfhMatchesCd(adapter, entry) {
   if (lfhPrefix.readUInt32LE(0) !== SIG_LFH) {
     throw new ArchiveReadError("archive-read/bad-lfh-signature",
       "local file header for " + JSON.stringify(entry.name) +
-      " has bad signature 0x" + lfhPrefix.readUInt32LE(0).toString(16));                    // allow:raw-byte-literal — radix=16 for hex parse, not byte count
+      " has bad signature 0x" + lfhPrefix.readUInt32LE(0).toString(16));                    // radix=16 for hex parse, not byte count
   }
   var lfhMethod  = lfhPrefix.readUInt16LE(8);
   var lfhCrc     = lfhPrefix.readUInt32LE(14);