@blamejs/blamejs-shop 0.3.5 → 0.3.6

package/lib/vendor/blamejs/lib/mail-srs.js

@@ -59,8 +59,8 @@ function _base32Encode(buf) {
   var bits = 0;
   var value = 0;
   for (var i = 0; i < buf.length; i += 1) {
-    value = (value << 8) | buf[i];                                                                 // allow:raw-byte-literal — byte-aligned shift
-    bits += 8;                                                                                     // allow:raw-byte-literal — bits-per-byte constant
+    value = (value << 8) | buf[i];                                                                 // byte-aligned shift
+    bits += 8;                                                                                     // bits-per-byte constant
     while (bits >= 5) {
       out += BASE32.charAt((value >>> (bits - 5)) & 31);
       bits -= 5;
@@ -72,13 +72,13 @@ function _base32Encode(buf) {
 
 function _hashTag(secret, hashInput) {
   var mac = nodeCrypto.createHmac("sha256", secret).update(hashInput.toLowerCase(), "utf8").digest();
-  return _base32Encode(mac.subarray(0, 4)).slice(0, 4);                                            // allow:raw-byte-literal — SRS spec 4-char short-tag
+  return _base32Encode(mac.subarray(0, 4)).slice(0, 4);                                            // SRS spec 4-char short-tag
 }
 
 function _dayStamp(nowMs) {
   // Days since epoch, mod 1024. Two-char base32 = 1024 possible values.
-  var days = Math.floor(nowMs / 86400000) % 1024;                                                  // allow:raw-byte-literal — ms-per-day + mod-1024 SRS rotation
-  return BASE32.charAt(days >>> 5) + BASE32.charAt(days & 31);                                     // allow:raw-byte-literal — 5-bit base32 split
+  var days = Math.floor(nowMs / 86400000) % 1024;                                                  // ms-per-day + mod-1024 SRS rotation
+  return BASE32.charAt(days >>> 5) + BASE32.charAt(days & 31);                                     // 5-bit base32 split
 }
 
 function _dayDiff(stamp, nowMs) {
@@ -86,11 +86,11 @@ function _dayDiff(stamp, nowMs) {
   var hi = BASE32.indexOf(stamp.charAt(0));
   var lo = BASE32.indexOf(stamp.charAt(1));
   if (hi < 0 || lo < 0) return Infinity;
-  var stampVal = (hi << 5) | lo;                                                                   // allow:raw-byte-literal — 5-bit base32 split
-  var nowVal = Math.floor(nowMs / 86400000) % 1024;                                                // allow:raw-byte-literal — ms-per-day + mod-1024 rotation
+  var stampVal = (hi << 5) | lo;                                                                   // 5-bit base32 split
+  var nowVal = Math.floor(nowMs / 86400000) % 1024;                                                // ms-per-day + mod-1024 rotation
   // Modular distance — assume positive (rewrites in the future are
   // refused via _dayDiff > 0 callers).
-  var diff = (nowVal - stampVal + 1024) % 1024;                                                    // allow:raw-byte-literal — mod-1024 rotation
+  var diff = (nowVal - stampVal + 1024) % 1024;                                                    // mod-1024 rotation
   return diff;
 }
 
@@ -131,13 +131,13 @@ function create(opts) {
     opts.secret, "srs.create.secret", SrsError, "srs/bad-secret");
   validateOpts.requireNonEmptyString(
     opts.forwarderDomain, "srs.create.forwarderDomain", SrsError, "srs/bad-forwarder");
-  if (opts.secret.length < 16) {                                                                   // allow:raw-byte-literal — minimum HMAC secret length
+  if (opts.secret.length < 16) {                                                                   // minimum HMAC secret length
     throw new SrsError("srs/bad-secret",
       "srs.create: secret must be >= 16 chars (operator-supplied entropy floor)");
   }
-  var expiryDays = opts.expiryDays !== undefined ? opts.expiryDays : 30;                           // allow:raw-byte-literal — default expiry window in days
+  var expiryDays = opts.expiryDays !== undefined ? opts.expiryDays : 30;                           // default expiry window in days
   if (typeof expiryDays !== "number" || !Number.isInteger(expiryDays) ||
-      expiryDays < 1 || expiryDays > 1024) {                                                       // allow:raw-byte-literal — SRS rotation cycle cap
+      expiryDays < 1 || expiryDays > 1024) {                                                       // SRS rotation cycle cap
     throw new SrsError("srs/bad-expiry",
       "srs.create: expiryDays must be an integer 1..1024 (SRS rotation cycle)");
   }
@@ -154,7 +154,7 @@ function create(opts) {
     }
     var localPart = originalAddress.slice(0, at);
     var domain    = originalAddress.slice(at + 1);
-    if (localPart.length > 64 || domain.length > 253) {                                            // allow:raw-byte-literal — RFC 5321 local-part / domain caps
+    if (localPart.length > 64 || domain.length > 253) {                                            // RFC 5321 local-part / domain caps
       throw new SrsError("srs/bad-address",
         "srs.rewrite: localPart / domain exceeds RFC 5321 length cap");
     }

package/lib/vendor/blamejs/lib/mail-store-fts.js

@@ -77,7 +77,7 @@ var MAX_TOKEN_LEN = 64;
 // millions of tokens; FTS5 row insert + index update must stay
 // bounded. The cap is applied AFTER stopword + length filter so the
 // surviving tokens are the highest-signal subset.
-var MAX_TOKENS_PER_FIELD = 8192;                                                                       // allow:raw-byte-literal — token-count cap, not bytes
+var MAX_TOKENS_PER_FIELD = 8192;                                                                       // token-count cap, not bytes
 
 // Per-field FTS column names. Kept symmetric with the messages table
 // columns so callers can reason about which FTS column corresponds
@@ -187,7 +187,7 @@ function hashToken(table, field, token) {
   var ns = "bj-" + table + "-" + field + ":fts:";
   var salt = vault.getDerivedHashSalt();
   var saltHex = (salt && typeof salt.toString === "function") ? salt.toString("hex") : "";
-  return bCrypto.sha3Hash(saltHex + ns + token).slice(0, 16);                                          // allow:raw-byte-literal — 16-char hex prefix length, not bytes
+  return bCrypto.sha3Hash(saltHex + ns + token).slice(0, 16);                                          // 16-char hex prefix length, not bytes
 }
 
 // Hash a token array → space-separated string suitable for FTS5

package/lib/vendor/blamejs/lib/mail-store.js

@@ -275,7 +275,7 @@ function create(opts) {
       var f = filter || {};
       var sinceModseq = f.sinceModseq || 0;
       var limit = f.limit || 100;
-      if (limit > 1000) limit = 1000;                                                                  // allow:raw-byte-literal — query row cap, not bytes
+      if (limit > 1000) limit = 1000;                                                                  // query row cap, not bytes
 
       var matchClauses = [];
       function addMatch(filterKey, term) {
@@ -342,7 +342,7 @@ function create(opts) {
           "queryByModseq: folder '" + folderName + "' not found");
       }
       var sinceModseq = (queryOpts && queryOpts.sinceModseq) || 0;
-      var limit = (queryOpts && queryOpts.limit) || 1000;                                          // allow:raw-byte-literal — query row cap, not bytes
+      var limit = (queryOpts && queryOpts.limit) || 1000;                                          // query row cap, not bytes
       var rows = stmtQueryByModseq.all(folder.id, sinceModseq, limit);
       return rows.map(function (r) {
         return {
@@ -373,7 +373,7 @@ function create(opts) {
       var fo = folderOpts || {};
       var role = fo.role || null;
       var parentId = fo.parentId || null;
-      var uidvalidity = Math.floor(Date.now() / 1000);                                              // allow:raw-byte-literal — Unix timestamp, not bytes
+      var uidvalidity = Math.floor(Date.now() / 1000);                                              // Unix timestamp, not bytes
       stmtInsertFolder.run(name, role, parentId, uidvalidity);
       return stmtGetFolderByName.get(name);
     },
@@ -406,7 +406,7 @@ function create(opts) {
       });
     },
     setLegalHold:     function (objectids, holdOpts) {
-      var hold = (holdOpts && holdOpts.hold) ? 1 : 0;                                              // allow:raw-byte-literal — boolean cast for sqlite INTEGER column
+      var hold = (holdOpts && holdOpts.hold) ? 1 : 0;                                              // boolean cast for sqlite INTEGER column
       objectids.forEach(function (oid) { stmtLegalHold.run(hold, oid); });
       return { changed: objectids.length };
     },
@@ -591,7 +591,7 @@ function _appendMessage(args) {
   // token = 32-char hex = 128 bits, well above the birthday bound
   // for any plausible message corpus. The prior `.slice(0, 24)` cut
   // entropy to 96 bits; removed.
-  var objectid = "obj_" + bCrypto.generateToken(16);                                                // allow:raw-byte-literal — 16-byte token, 32-char hex JMAP objectid (RFC 8474 §1.5.1)
+  var objectid = "obj_" + bCrypto.generateToken(16);                                                // 16-byte token, 32-char hex JMAP objectid (RFC 8474 §1.5.1)
   var modseq = (folder.modseq_max || 0) + 1;
   if (!threadRootId) threadRootId = objectid;   // root of new thread
 
@@ -675,7 +675,7 @@ function _fetchByObjectId(args) {
     bodyText:       unsealed.body_text,
     bodyHtml:       unsealed.body_html,
     flags:          flags,
-    legalHold:      row.legal_hold === 1,                                                            // allow:raw-byte-literal — sqlite INTEGER column 0|1
+    legalHold:      row.legal_hold === 1,                                                            // sqlite INTEGER column 0|1
   };
 }
 
@@ -763,7 +763,7 @@ function _setFlags(args) {
     // which both leaks a prepared-statement handle per chunk and
     // doubles the SQL parse cost. Hold the stmt on a local + invoke
     // .run() directly with the bound argument list.
-    var CHUNK = 500;                                                                               // allow:raw-byte-literal — IN-clause chunk size, not bytes
+    var CHUNK = 500;                                                                               // IN-clause chunk size, not bytes
     for (var i = 0; i < args.objectids.length; i += CHUNK) {
       var chunk = args.objectids.slice(i, i + CHUNK);
       var placeholders = chunk.map(function () { return "?"; }).join(",");
@@ -915,7 +915,7 @@ function _ensureSchema(db, qMsgs, qFolders, qFlags, qQuota, qFts) {
 function _ensureDefaultFolders(db, qFolders) {
   var stmt = db.prepare("INSERT OR IGNORE INTO " + qFolders +
     " (name, role, parent_id, modseq_max, uidvalidity) VALUES (?, ?, NULL, 0, ?)");
-  var uv = Math.floor(Date.now() / 1000);                                                          // allow:raw-byte-literal — Unix timestamp, not bytes
+  var uv = Math.floor(Date.now() / 1000);                                                          // Unix timestamp, not bytes
   DEFAULT_FOLDERS.forEach(function (f) { stmt.run(f.name, f.role, uv); });
 }
 

package/lib/vendor/blamejs/lib/mail-unsubscribe.js

@@ -75,7 +75,7 @@ var HEADER_VALUE_MAX_BYTES = C.BYTES.kib(2);
 function _isLdhListLabel(label) {
   if (typeof label !== "string" || label.length === 0) return false;
   // RFC 1035 §2.3.4 — labels bounded at 63 octets.
-  if (label.length > 63) return false;                                           // allow:raw-byte-literal — RFC 1035 §2.3.4 hostname-label limit
+  if (label.length > 63) return false;                                           // RFC 1035 §2.3.4 hostname-label limit
   var n = label.length;
   for (var i = 0; i < n; i += 1) {
     var c = label.charCodeAt(i);
@@ -108,7 +108,7 @@ function _validateListId(value, label) {
   if (bracket) inner = bracket[1];
   // Inner is dot-separated labels; each label LDH per RFC 2919 §3.
   var labels = inner.split(".");
-  if (labels.length < 2) {                                                                                // allow:raw-byte-literal — RFC 2919 §3 requires >= 2 labels
+  if (labels.length < 2) {                                                                                // RFC 2919 §3 requires >= 2 labels
     throw new MailUnsubscribeError("mailunsubscribe/invalid-list-header-shape",
       label + " '" + value + "' must contain at least two dot-separated labels (RFC 2919 §3)");
   }
@@ -144,13 +144,13 @@ function _validateHttpsUrl(value, label) {
   } catch (e) {
     throw new MailUnsubscribeError("mailunsubscribe/invalid-list-header-shape",
       label + " must be a valid https URL (got " +
-      JSON.stringify(value).slice(0, 200) + "): " +                                                               // allow:raw-byte-literal — diagnostic clamp characters
+      JSON.stringify(value).slice(0, 200) + "): " +                                                               // diagnostic clamp characters
       ((e && e.message) || String(e)));
   }
   if (!parsed) {
     throw new MailUnsubscribeError("mailunsubscribe/invalid-list-header-shape",
       label + " must be a valid https URL (got " +
-      JSON.stringify(value).slice(0, 200) + ")");                                                                 // allow:raw-byte-literal — diagnostic clamp characters
+      JSON.stringify(value).slice(0, 200) + ")");                                                                 // diagnostic clamp characters
   }
   return parsed.href;
 }

package/lib/vendor/blamejs/lib/mail.js

@@ -1003,7 +1003,7 @@ function _smtpSend(message, cfg) {
     var peerSupportsSmtpUtf8 = false;     // RFC 6531 — set from EHLO response
     var peerSupportsChunking = false;     // RFC 3030 §2 CHUNKING
     var peerSupportsBinaryMime = false;   // RFC 3030 §3 BINARYMIME
-    var peerSupports8BitMime = false;     // RFC 6152 (eight-bit MIME)                                            // allow:raw-byte-literal — RFC number, not a byte literal
+    var peerSupports8BitMime = false;     // RFC 6152 (eight-bit MIME)                                            // RFC number, not a byte literal
     var peerSizeCap = -1;                 // RFC 1870 SIZE — -1 unset, 0 = no cap, >0 = byte limit
     var upgradedToTLS = false;
     var settled = false;
@@ -1688,7 +1688,7 @@ function create(opts) {
     if (country && footerHtml.indexOf(country) === -1) {
       throw new MailError("mail/bad-footer-html",
         "mail.create({ footerHtml }): override must contain the postalAddress.country '" +
-        country + "' (CAN-SPAM §7704(a)(5)). Got: " + footerHtml.slice(0, 200),                                   // allow:raw-byte-literal — diagnostic clamp characters, not bytes
+        country + "' (CAN-SPAM §7704(a)(5)). Got: " + footerHtml.slice(0, 200),                                   // diagnostic clamp characters, not bytes
         true);
     }
     if (postalCode && footerHtml.indexOf(postalCode) === -1) {
@@ -1896,7 +1896,7 @@ function feedbackId(opts) {
       throw new MailError("mail/bad-feedback-id-field",
         "feedbackId: " + f.key + " must be a non-empty string");
     }
-    if (f.value.length > 64) {                                                                     // allow:raw-byte-literal — Gmail FBL per-field cap, not byte arithmetic
+    if (f.value.length > 64) {                                                                     // Gmail FBL per-field cap, not byte arithmetic
       throw new MailError("mail/bad-feedback-id-field",
         "feedbackId: " + f.key + " exceeds 64 chars (Gmail FBL truncation threshold)");
     }
@@ -1909,7 +1909,7 @@ function feedbackId(opts) {
     // ranges in regex literals regardless of escape form.
     for (var ci = 0; ci < f.value.length; ci += 1) {
       var code = f.value.charCodeAt(ci);
-      if (code < 32 || code === 127) {                                                             // allow:raw-byte-literal — C0 + DEL codepoint range
+      if (code < 32 || code === 127) {                                                             // C0 + DEL codepoint range
         throw new MailError("mail/bad-feedback-id-field",
           "feedbackId: " + f.key + " contains control characters");
       }

package/lib/vendor/blamejs/lib/mcp-tool-registry.js

@@ -114,7 +114,7 @@ function _validateTool(tool, where) {
       where + ": tool must be a non-null object", true);
   }
   validateOpts.requireNonEmptyString(tool.name, where + ".name", McpError, "mcp/bad-tool-name");
-  if (tool.name.length > 64 || !TOOL_NAME_RE.test(tool.name)) {                                    // allow:raw-byte-literal — MCP tool-name length cap, not byte count
+  if (tool.name.length > 64 || !TOOL_NAME_RE.test(tool.name)) {                                    // MCP tool-name length cap, not byte count
     throw new McpError("mcp/bad-tool-name",
       where + ".name '" + tool.name + "' must match " + TOOL_NAME_RE);
   }
@@ -185,7 +185,7 @@ function create(opts) {
     opts.verifyingKey, "toolRegistry.create.verifyingKey", McpError, "mcp/bad-verifying-key");
   var alg = _validateAlg(opts.alg, "toolRegistry.create.alg");
   var defaultTtlMs = opts.ttlMs !== undefined ? opts.ttlMs : C.TIME.minutes(5);
-  if (typeof defaultTtlMs !== "number" || !isFinite(defaultTtlMs) || defaultTtlMs < 1000) {        // allow:raw-byte-literal — minimum-ttl threshold (1 second), not bytes
+  if (typeof defaultTtlMs !== "number" || !isFinite(defaultTtlMs) || defaultTtlMs < 1000) {        // minimum-ttl threshold (1 second), not bytes
     throw new McpError("mcp/bad-ttl",
       "toolRegistry.create.ttlMs must be >= 1000 ms", true);
   }
@@ -303,13 +303,13 @@ function create(opts) {
         "signCall: tool '" + callOpts.toolName + "' not registered", true);
     }
     var ttlMs = callOpts.ttlMs !== undefined ? callOpts.ttlMs : defaultTtlMs;
-    if (typeof ttlMs !== "number" || !isFinite(ttlMs) || ttlMs < 1000) {                          // allow:raw-byte-literal — minimum-ttl threshold (1 second), not bytes
+    if (typeof ttlMs !== "number" || !isFinite(ttlMs) || ttlMs < 1000) {                          // minimum-ttl threshold (1 second), not bytes
       throw new McpError("mcp/bad-ttl",
         "signCall: ttlMs must be >= 1000 ms", true);
     }
     var nonce = typeof callOpts.nonce === "string" && callOpts.nonce.length > 0
       ? callOpts.nonce
-      : bCrypto().generateToken(16);                                                                // allow:raw-byte-literal — 128-bit nonce, not byte arithmetic on a payload
+      : bCrypto().generateToken(16);                                                                // 128-bit nonce, not byte arithmetic on a payload
     var iat = new Date();
     var exp = new Date(iat.getTime() + ttlMs);
     var envelope = {

package/lib/vendor/blamejs/lib/mcp.js

@@ -39,18 +39,18 @@ var requestHelpers = require("./request-helpers");
 var audit = require("./audit");
 var { McpError } = require("./framework-error");
 
-var TOOL_NAME_MAX     = 64;                                                                  // allow:raw-byte-literal — string-length cap, not bytes
-var RESOURCE_NAME_MAX = 256;                                                                 // allow:raw-byte-literal — string-length cap, not bytes
-var METHOD_NAME_MAX   = 256;                                                                 // allow:raw-byte-literal — string-length cap, not bytes
+var TOOL_NAME_MAX     = 64;                                                                  // string-length cap, not bytes
+var RESOURCE_NAME_MAX = 256;                                                                 // string-length cap, not bytes
+var METHOD_NAME_MAX   = 256;                                                                 // string-length cap, not bytes
 // JSON-RPC 2.0 error codes (https://www.jsonrpc.org/specification#error_object).
 // Negative numerics by spec; mapped to HTTP status for the framework's
 // HTTP-shaped reply envelope.
-var JSONRPC_PARSE_ERROR     = -32700;                                                        // allow:raw-byte-literal — JSON-RPC 2.0 fixed error code / allow:raw-time-literal — not seconds
-var JSONRPC_INVALID_REQUEST = -32600;                                                        // allow:raw-byte-literal — JSON-RPC 2.0 fixed error code / allow:raw-time-literal — not seconds
-var JSONRPC_METHOD_NOT_FOUND= -32601;                                                        // allow:raw-byte-literal — JSON-RPC 2.0 fixed error code / allow:raw-time-literal — not seconds
-var JSONRPC_INVALID_PARAMS  = -32602;                                                        // allow:raw-byte-literal — JSON-RPC 2.0 fixed error code / allow:raw-time-literal — not seconds
-var JSONRPC_INTERNAL_ERROR  = -32603;                                                        // allow:raw-byte-literal — JSON-RPC 2.0 fixed error code / allow:raw-time-literal — not seconds
-var JSONRPC_AUTH_REQUIRED   = -32001;                                                        // allow:raw-byte-literal — JSON-RPC server-error reserved range / allow:raw-time-literal — not seconds
+var JSONRPC_PARSE_ERROR     = -32700;                                                        // allow:raw-time-literal — not seconds
+var JSONRPC_INVALID_REQUEST = -32600;                                                        // allow:raw-time-literal — not seconds
+var JSONRPC_METHOD_NOT_FOUND= -32601;                                                        // allow:raw-time-literal — not seconds
+var JSONRPC_INVALID_PARAMS  = -32602;                                                        // allow:raw-time-literal — not seconds
+var JSONRPC_INTERNAL_ERROR  = -32603;                                                        // allow:raw-time-literal — not seconds
+var JSONRPC_AUTH_REQUIRED   = -32001;                                                        // allow:raw-time-literal — not seconds
 var TOOL_NAME_RE     = /^[a-zA-Z][a-zA-Z0-9._-]{0,63}$/;
 var RESOURCE_NAME_RE = /^[a-zA-Z][a-zA-Z0-9._/-]{0,255}$/;
 
@@ -79,7 +79,7 @@ function parseRequest(body, opts) {
   var errorClass = opts.errorClass || McpError;
   var parsed;
   try {
-    parsed = typeof body === "string" ? safeJson.parse(body, { maxBytes: C.BYTES.mib(1) }) : body;                                  // allow:JSON.parse — routed via safeJson.parse
+    parsed = typeof body === "string" ? safeJson.parse(body, { maxBytes: C.BYTES.mib(1) }) : body;                                  // routed via safeJson.parse
   } catch (_e) {
     throw errorClass.factory("mcp/bad-json",
       "mcp.parseRequest: body is not valid JSON");
@@ -143,9 +143,9 @@ function refuse(res, code, message, id) {
     res.setHeader("Content-Type", "application/json");
   }
   // HTTP status mapping for the JSON-RPC error code we reply with.
-  res.statusCode = code === JSONRPC_PARSE_ERROR || code === JSONRPC_INVALID_REQUEST ? 400 :  // allow:raw-byte-literal — HTTP status code (RFC 9110)
-                   code === JSONRPC_METHOD_NOT_FOUND ? 404 :                                  // allow:raw-byte-literal — HTTP status code (RFC 9110)
-                   code === JSONRPC_INTERNAL_ERROR ? 500 : 400;                              // allow:raw-byte-literal — HTTP status code (RFC 9110)
+  res.statusCode = code === JSONRPC_PARSE_ERROR || code === JSONRPC_INVALID_REQUEST ? 400 :  // HTTP status code (RFC 9110)
+                   code === JSONRPC_METHOD_NOT_FOUND ? 404 :                                  // HTTP status code (RFC 9110)
+                   code === JSONRPC_INTERNAL_ERROR ? 500 : 400;                              // HTTP status code (RFC 9110)
   res.end(body);
 }
 
@@ -617,7 +617,7 @@ function _validateValueAgainstSchema(value, schema, path) {
       // time, not request-controlled. Cap value length first per the
       // codebase-patterns regex-bound rule so a 10MB string doesn't
       // ReDoS the validator.
-      if (value.length > 4096) return path + ": value exceeds 4 KiB cap before regex test";    // allow:raw-byte-literal — 4 KiB regex-input cap
+      if (value.length > 4096) return path + ": value exceeds 4 KiB cap before regex test";    // 4 KiB regex-input cap
       try {
         var pat = new RegExp(schema.pattern);                                                    // allow:dynamic-regex — schema.pattern from registered tool author, not request input; bounded above
         if (!pat.test(value)) return path + ": does not match pattern";
@@ -752,7 +752,7 @@ function _assertProtocolVersion(req, opts) {
 var SAMPLING_DEFAULTS = {
   maxRequestsPerSession:   10,
   maxMessagesPerRequest:   20,
-  maxTokensPerRequest:     4096,                  // allow:raw-byte-literal — LLM token count, not bytes
+  maxTokensPerRequest:     4096,                  // LLM token count, not bytes
   allowedModelHint:        null,    // null = allow all
   refuseStopSequences:     false,
 };

package/lib/vendor/blamejs/lib/mdoc.js

@@ -58,8 +58,8 @@ var { defineClass } = require("./framework-error");
 
 var MdocError = defineClass("MdocError", { alwaysPermanent: true });
 
-var HDR_X5CHAIN = 33;                                  // allow:raw-byte-literal allow:raw-time-literal — x5chain COSE header label (RFC 9360 is a spec number, not a size/duration)
-var TAG_ENCODED_CBOR = 24;                             // allow:raw-byte-literal — RFC 8949 §3.4.5.1 embedded-CBOR tag
+var HDR_X5CHAIN = 33;                                  // allow:raw-time-literal — x5chain COSE header label (RFC 9360 is a spec number, not a size/duration)
+var TAG_ENCODED_CBOR = 24;                             // RFC 8949 §3.4.5.1 embedded-CBOR tag
 // Tags ISO 18013-5 uses in issuer data: tdate(0), epoch(1), embedded
 // CBOR(24), full-date(1004, RFC 8943). Bounded — others are refused.
 var ALLOWED_TAGS = [0, 1, TAG_ENCODED_CBOR, 1004];

package/lib/vendor/blamejs/lib/metrics.js

@@ -161,8 +161,8 @@ function _normalizeLabelArg(callLabels, value, defaultValue) {
 //     a heuristic fallback so unknown-issuer tokens still get caught
 var _CRED_PREFIX_RE = /^(?:Bearer|Basic|Negotiate|Token|Digest)\s+\S/i;
 var _CRED_ISSUER_RE = /^(?:sk-|pk-|rk-|ghp_|ghs_|gho_|github_pat_|xoxb-|xoxa-|xoxp-|xoxr-|xapp-)/;
-var _CRED_JWT_RE    = /^[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}$/;                   // allow:raw-byte-literal — JWT segment min length
-var _CRED_ENTROPY_RE = /^[A-Za-z0-9_+/=-]{40,}$/;                                                    // allow:raw-byte-literal — high-entropy length floor
+var _CRED_JWT_RE    = /^[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}$/;                   // JWT segment min length
+var _CRED_ENTROPY_RE = /^[A-Za-z0-9_+/=-]{40,}$/;                                                    // high-entropy length floor
 
 // CRED_MAX_SCAN — upper bound on the byte slice the credential
 // detector inspects. Operator-supplied label values longer than this
@@ -170,11 +170,11 @@ var _CRED_ENTROPY_RE = /^[A-Za-z0-9_+/=-]{40,}$/;
 // still a credential), but the regex tests run on the prefix slice so
 // a 1 GB string can't ReDoS the scanner. Counter cardinality stays
 // stable: the same long string always maps to the same prefix slice.
-var CRED_MAX_SCAN = 256;                                                                             // allow:raw-byte-literal — prefix-scan length cap
+var CRED_MAX_SCAN = 256;                                                                             // prefix-scan length cap
 
 function _looksLikeCredential(str) {
   if (typeof str !== "string") return false;
-  if (str.length < 8) return false;                                                                  // allow:raw-byte-literal — minimum credential length floor
+  if (str.length < 8) return false;                                                                  // minimum credential length floor
   // Clamp to the prefix slice so a hostile label value can't push the
   // regex into superlinear time. All four credential shapes have
   // signature in the first ~256 bytes; Stripe / GitHub / OpenAI tokens
@@ -185,7 +185,7 @@ function _looksLikeCredential(str) {
   // enough entropy to be real tokens; hoisted to a named constant so
   // every test() has its length floor visible at the call site
   // (testFormatValidatorLengthCap convention).
-  var CRED_MIN_LEN = 8;                                                                              // allow:raw-byte-literal — minimum credential length floor
+  var CRED_MIN_LEN = 8;                                                                              // minimum credential length floor
   if (clamped.length >= CRED_MIN_LEN && _CRED_PREFIX_RE.test(clamped)) return true;
   if (clamped.length >= CRED_MIN_LEN && _CRED_ISSUER_RE.test(clamped)) return true;
   if (clamped.length >= CRED_MIN_LEN && _CRED_JWT_RE.test(clamped)) return true;
@@ -990,7 +990,7 @@ function snapshotStartWriter(opts) {
   // (owner rw, group r, world none). Operators with a sidecar
   // reader in a different group override to 0o644; multi-tenant
   // hosts may even tighten to 0o600.
-  var fileMode = opts.fileMode !== undefined ? opts.fileMode : 0o640;                                // allow:raw-byte-literal — POSIX file mode octal
+  var fileMode = opts.fileMode !== undefined ? opts.fileMode : 0o640;                                // POSIX file mode octal
   if (typeof fileMode !== "number" || !isFinite(fileMode) ||
       fileMode < 0 || fileMode > 0o777 || Math.floor(fileMode) !== fileMode) {
     throw new MetricsError("metrics-snapshot/bad-file-mode",
@@ -1263,7 +1263,7 @@ function snapshotRender(snap, opts) {
       var kd = keys2[jd];
       var vd = fields[kd];
       if (typeof vd !== "string") continue;
-      if (vd.length > 64) continue;                                                                  // allow:raw-byte-literal — ISO 8601 max length cap, not bytes
+      if (vd.length > 64) continue;                                                                  // ISO 8601 max length cap, not bytes
       if (!ISO_DATE_RE.test(vd)) continue;                                                           // allow:regex-no-length-cap — length-bounded immediately above
       if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(kd)) continue;                                            // allow:regex-no-length-cap — field-name shape, length-bounded by snap field naming
       var ms = Date.parse(vd);
@@ -1311,7 +1311,7 @@ function snapshotRender(snap, opts) {
  *   shadow.set("queue_depth", 42);
  *   shadow.snapshot();
  */
-var SHADOW_DEFAULT_CARDINALITY = 10000;                                                              // allow:raw-byte-literal — cardinality cap, not bytes
+var SHADOW_DEFAULT_CARDINALITY = 10000;                                                              // cardinality cap, not bytes
 function shadowRegistry(opts) {
   if (!opts || typeof opts !== "object") {
     throw new MetricsError("metrics-shadow/bad-opts",

package/lib/vendor/blamejs/lib/middleware/age-gate.js

@@ -70,6 +70,7 @@ var AgeGateError = defineClass("AgeGateError", { alwaysPermanent: true });
  *     hasParentalConsent: function(req): boolean,
  *     skipPaths:          string[],
  *     errorMessage:       string,
+ *     privacyPostureHeader: string,                     // default "X-Privacy-Posture"; null/false to suppress
  *     audit:              boolean,                      // default true
  *   }
  *
@@ -87,7 +88,7 @@ function create(opts) {
   opts = opts || {};
   validateOpts(opts, [
     "audit", "getAge", "requireAge", "consentRequired",
-    "hasParentalConsent", "skipPaths", "errorMessage",
+    "hasParentalConsent", "skipPaths", "errorMessage", "privacyPostureHeader",
   ], "middleware.ageGate");
 
   if (typeof opts.getAge !== "function") {
@@ -104,6 +105,17 @@ function create(opts) {
   var auditOn = opts.audit !== false;
   var errorMessage = typeof opts.errorMessage === "string" && opts.errorMessage.length > 0
     ? opts.errorMessage : "service unavailable without parental consent";
+  // privacyPostureHeader (default "X-Privacy-Posture") names the response
+  // header carrying the below-threshold classification. Pass null/false to
+  // suppress it, or a string to rename it for a downstream convention.
+  var privacyPostureHeader;
+  if (opts.privacyPostureHeader === null || opts.privacyPostureHeader === false) {
+    privacyPostureHeader = null;
+  } else if (typeof opts.privacyPostureHeader === "string" && opts.privacyPostureHeader.length > 0) {
+    privacyPostureHeader = opts.privacyPostureHeader;
+  } else {
+    privacyPostureHeader = "X-Privacy-Posture";
+  }
 
   function _shouldSkip(req) {
     if (skipPaths.length === 0) return false;
@@ -148,7 +160,7 @@ function create(opts) {
       if (typeof res.setHeader === "function") {
         res.setHeader("Cache-Control",   "private, no-store");
         res.setHeader("Referrer-Policy", "no-referrer");
-        res.setHeader("X-Privacy-Posture", classification);
+        if (privacyPostureHeader) res.setHeader(privacyPostureHeader, classification);
       }
     }
 
@@ -157,7 +169,7 @@ function create(opts) {
       if (!hasConsent) {
         _emitAudit("refused", "denied", { age: age, classification: classification, requireAge: requireAge });
         if (!res.writableEnded && typeof res.writeHead === "function") {
-          res.writeHead(451, {                                                            // allow:raw-byte-literal — HTTP 451 Unavailable For Legal Reasons
+          res.writeHead(451, {                                                            // HTTP 451 Unavailable For Legal Reasons
             "Content-Type":  "application/json; charset=utf-8",
             "Cache-Control": "no-store, private",
           });

package/lib/vendor/blamejs/lib/middleware/ai-act-disclosure.js

@@ -66,6 +66,7 @@ var audit     = lazyRequire(function () { return require("../audit"); });
  *     mode:         "header"|"html",   // default "header"
  *     lang:         string,            // default "en"
  *     skipHeader:   string,            // default "x-skip-ai-act"
+ *     headerPrefix: string,            // default "AI-Act-" — prefixes the Notice/Article/Policy disclosure headers
  *     audit:        boolean,           // default true
  *   }
  *
@@ -83,7 +84,7 @@ function create(opts) {
   opts = opts || {};
   validateOpts(opts, [
     "kind", "deployerName", "policyUri", "mode",
-    "audit", "lang", "skipHeader",
+    "audit", "lang", "skipHeader", "headerPrefix",
   ], "middleware.aiActDisclosure");
 
   var mode = (opts.mode === "html") ? "html" : "header";
@@ -99,6 +100,12 @@ function create(opts) {
   var skipHeader = (typeof opts.skipHeader === "string" && opts.skipHeader.length > 0)
     ? opts.skipHeader.toLowerCase()
     : "x-skip-ai-act";
+  // headerPrefix (default "AI-Act-") names the emitted disclosure headers as
+  // <prefix>Notice / <prefix>Article / <prefix>Policy. The EU AI Act mandates
+  // the disclosure, not the HTTP spelling — operators matching a downstream
+  // convention pass their own prefix (e.g. "X-AI-").
+  var headerPrefix = (typeof opts.headerPrefix === "string" && opts.headerPrefix.length > 0)
+    ? opts.headerPrefix : "AI-Act-";
 
   return function aiActDisclosureMiddleware(req, res, next) {
     var headers = req.headers || {};
@@ -118,10 +125,10 @@ function create(opts) {
         return origWriteHead.apply(res, arguments);
       }
       var article = _articleFor(opts.kind || "ai-interaction");
-      _setHeader(res, "AI-Act-Notice",  opts.kind || "ai-interaction");
-      _setHeader(res, "AI-Act-Article", article);
+      _setHeader(res, headerPrefix + "Notice",  opts.kind || "ai-interaction");
+      _setHeader(res, headerPrefix + "Article", article);
       if (typeof opts.policyUri === "string" && opts.policyUri.length > 0) {
-        _setHeader(res, "AI-Act-Policy", opts.policyUri);
+        _setHeader(res, headerPrefix + "Policy", opts.policyUri);
       }
       injected = true;
       return origWriteHead.apply(res, arguments);

package/lib/vendor/blamejs/lib/middleware/api-encrypt.js

@@ -855,18 +855,18 @@ function client(opts) {
 // _generateUuidV4 — UUID v4 from 16 random bytes, formatted dash-separated.
 // Used for client-side session-id generation in per-session keying.
 // Slice offsets are RFC 4122 UUID hex-byte boundaries (`xxxxxxxx-xxxx-Mxxx-Nxxx-xxxxxxxxxxxx`)
-// — protocol-fixed values, not byte sizes. allow:raw-byte-literal
+// — protocol-fixed values, not byte sizes.
 function _generateUuidV4() {
-  var b = bCrypto.generateBytes(16);                     // allow:raw-byte-literal — UUID is exactly 16 bytes
+  var b = bCrypto.generateBytes(16);                     // UUID is exactly 16 bytes
   // Set version (4) and variant (10x) bits per RFC 4122.
   b[6] = (b[6] & 0x0f) | 0x40;
   b[8] = (b[8] & 0x3f) | 0x80;
   var hex = b.toString("hex");
-  return hex.slice(0, 8) + "-" +                        // allow:raw-byte-literal — RFC 4122 hex offsets
-         hex.slice(8, 12) + "-" +                       // allow:raw-byte-literal
-         hex.slice(12, 16) + "-" +                      // allow:raw-byte-literal
-         hex.slice(16, 20) + "-" +                      // allow:raw-byte-literal
-         hex.slice(20, 32);                             // allow:raw-byte-literal
+  return hex.slice(0, 8) + "-" +                        // RFC 4122 hex offsets
+         hex.slice(8, 12) + "-" +
+         hex.slice(12, 16) + "-" +
+         hex.slice(16, 20) + "-" +
+         hex.slice(20, 32);
 }
 
 // ---- Server-to-server convenience ----

package/lib/vendor/blamejs/lib/middleware/assetlinks.js

@@ -109,7 +109,7 @@ function create(opts) {
     if (path !== "/.well-known/assetlinks.json") return next();
     if (req.method !== "GET" && req.method !== "HEAD") {
       var bodyMsg = "Method Not Allowed";
-      res.writeHead(405, {                                                       // allow:raw-byte-literal — HTTP 405 status
+      res.writeHead(405, {                                                       // HTTP 405 status
         "Allow":          "GET, HEAD",
         "Content-Type":   "text/plain; charset=utf-8",
         "Content-Length": Buffer.byteLength(bodyMsg),
@@ -117,7 +117,7 @@ function create(opts) {
       res.end(bodyMsg);
       return;
     }
-    res.writeHead(200, {                                                         // allow:raw-byte-literal — HTTP 200 status
+    res.writeHead(200, {                                                         // HTTP 200 status
       "Content-Type":     "application/json; charset=utf-8",
       "Content-Length":   bodyBuf.length,
       "Cache-Control":    "public, max-age=86400",

package/lib/vendor/blamejs/lib/middleware/asyncapi-serve.js

@@ -107,7 +107,7 @@ function create(opts) {
   function _writeBody(req, res, body, etag, contentType) {
     var requestEtag = (req.headers && req.headers["if-none-match"]) || null;
     if (requestEtag && requestEtag === etag) {
-      res.writeHead(304, { "ETag": etag, "Cache-Control": cacheControl });           // allow:raw-byte-literal — HTTP 304
+      res.writeHead(304, { "ETag": etag, "Cache-Control": cacheControl });           // HTTP 304
       res.end();
       return;
     }
@@ -120,7 +120,7 @@ function create(opts) {
     if (accessControl === "public") {
       headers["Access-Control-Allow-Origin"] = "*";
     }
-    res.writeHead(200, headers);                                                     // allow:raw-byte-literal — HTTP 200
+    res.writeHead(200, headers);                                                     // HTTP 200
     res.end(body);
   }
 

package/lib/vendor/blamejs/lib/middleware/bearer-auth.js

@@ -46,7 +46,7 @@ function _writeUnauthorized(res, scheme, message, realm) {
   if (res.headersSent) return;
   var body = JSON.stringify({ error: message });
   var challenge = scheme + (realm ? ' realm="' + realm + '"' : "");
-  res.writeHead(401, {                                                           // allow:raw-byte-literal — HTTP 401 status
+  res.writeHead(401, {                                                           // HTTP 401 status
     "Content-Type":     "application/json; charset=utf-8",
     "Content-Length":   Buffer.byteLength(body),
     "WWW-Authenticate": challenge,
@@ -146,7 +146,7 @@ function create(opts) {
     }
     for (var ri = 0; ri < realm.length; ri += 1) {
       var rcode = realm.charCodeAt(ri);
-      if (rcode < 32 || rcode === 127) {                                  // allow:raw-byte-literal — ASCII control codepoints
+      if (rcode < 32 || rcode === 127) {                                  // ASCII control codepoints
         throw new AuthError("auth-bearer/bad-realm",
           "realm contains control character at index " + ri);
       }
@@ -198,7 +198,7 @@ function create(opts) {
         var malformedChallenge = scheme + ' error="invalid_request"' +
           (realm ? ', realm="' + realm + '"' : "");
         var malformedBody = JSON.stringify({ error: errorMessage });
-        res.writeHead(401, {                                                     // allow:raw-byte-literal — HTTP 401 status
+        res.writeHead(401, {                                                     // HTTP 401 status
           "Content-Type":     "application/json; charset=utf-8",
           "Content-Length":   Buffer.byteLength(malformedBody),
           "WWW-Authenticate": malformedChallenge,
@@ -222,7 +222,7 @@ function create(opts) {
         (realm ? ', realm="' + realm + '"' : "");
       if (!res.headersSent) {
         var body = JSON.stringify({ error: errorMessage });
-        res.writeHead(401, {                                                     // allow:raw-byte-literal — HTTP 401 status
+        res.writeHead(401, {                                                     // HTTP 401 status
           "Content-Type":     "application/json; charset=utf-8",
           "Content-Length":   Buffer.byteLength(body),
           "WWW-Authenticate": challenge,
@@ -264,7 +264,7 @@ function create(opts) {
             error: "insufficient_scope",
             required: opts.requiredScopes.slice(),
           });
-          res.writeHead(403, {                                                     // allow:raw-byte-literal — HTTP 403 status
+          res.writeHead(403, {                                                     // HTTP 403 status
             "Content-Type":     "application/json; charset=utf-8",
             "Content-Length":   Buffer.byteLength(scopeBody),
             "WWW-Authenticate": scopeChallenge,