@blamejs/blamejs-shop 0.3.5 → 0.3.6

package/lib/vendor/blamejs/lib/auth/saml.js

@@ -592,10 +592,14 @@ function create(opts) {
     var nameId = _textContent(nameIdEl);
     var nameIdFormat = _attr(nameIdEl, "Format");
 
-    var nowSec = Math.floor((vopts.now || Date.now()) / 1000);                                  // allow:raw-byte-literal — ms→s
+    var nowSec = Math.floor((vopts.now || Date.now()) / 1000);                                  // ms→s
     var confirmations = _findAllChildren(subject, "SubjectConfirmation", SAML_NS.assertion);
     var bearerOk = false;
     var hokOk = false;
+    // InResponseTo of the SubjectConfirmation that actually passed bearer
+    // validation — captured so the returned value can't be sourced from a
+    // different (non-validated) confirmation when several are present.
+    var matchedInResponseTo = null;
     var hokFingerprint = null;
     // Holder-of-Key SubjectConfirmation per SAML 2.0 Profile §3.1
     // (urn:oasis:names:tc:SAML:2.0:cm:holder-of-key). The IdP binds
@@ -680,10 +684,10 @@ function create(opts) {
         // as Bearer (Profile §3.1 incorporates §3 by reference).
         var nbHok = _attr(scdHok, "NotBefore");
         var noaHok = _attr(scdHok, "NotOnOrAfter");
-        if (nbHok && isFinite(Date.parse(nbHok) / 1000) &&                                          // allow:raw-byte-literal — ms→s
-            Date.parse(nbHok) / 1000 > nowSec + clockSkewSec) continue;                             // allow:raw-byte-literal — ms→s
-        if (noaHok && isFinite(Date.parse(noaHok) / 1000) &&                                        // allow:raw-byte-literal — ms→s
-            Date.parse(noaHok) / 1000 < nowSec - clockSkewSec) continue;                            // allow:raw-byte-literal — ms→s
+        if (nbHok && isFinite(Date.parse(nbHok) / 1000) &&                                          // ms→s
+            Date.parse(nbHok) / 1000 > nowSec + clockSkewSec) continue;                             // ms→s
+        if (noaHok && isFinite(Date.parse(noaHok) / 1000) &&                                        // ms→s
+            Date.parse(noaHok) / 1000 < nowSec - clockSkewSec) continue;                            // ms→s
         var recipHok = _attr(scdHok, "Recipient");
         if (recipHok && recipHok !== opts.assertionConsumerServiceUrl) continue;
         hokOk = true;
@@ -694,14 +698,14 @@ function create(opts) {
       if (!scd) continue;
       var notOnOrAfter = _attr(scd, "NotOnOrAfter");
       if (notOnOrAfter) {
-        var t = Date.parse(notOnOrAfter) / 1000;                                                // allow:raw-byte-literal — ms→s
+        var t = Date.parse(notOnOrAfter) / 1000;                                                // ms→s
         if (!isFinite(t) || t < nowSec - clockSkewSec) {
           continue; // expired confirmation — try next
         }
       }
       var notBefore = _attr(scd, "NotBefore");
       if (notBefore) {
-        var nb = Date.parse(notBefore) / 1000;                                                  // allow:raw-byte-literal — ms→s
+        var nb = Date.parse(notBefore) / 1000;                                                  // ms→s
         if (isFinite(nb) && nb > nowSec + clockSkewSec) continue;
       }
       var recipient = _attr(scd, "Recipient");
@@ -721,6 +725,7 @@ function create(opts) {
             "AuthnRequest ID (replay defense)");
         }
       }
+      matchedInResponseTo = inResponseTo;
       bearerOk = true;
       break;
     }
@@ -736,14 +741,14 @@ function create(opts) {
       var cNotBefore = _attr(conditions, "NotBefore");
       var cNotOnOrAfter = _attr(conditions, "NotOnOrAfter");
       if (cNotBefore) {
-        var cnb = Date.parse(cNotBefore) / 1000;                                                // allow:raw-byte-literal — ms→s
+        var cnb = Date.parse(cNotBefore) / 1000;                                                // ms→s
         if (isFinite(cnb) && cnb > nowSec + clockSkewSec) {
           throw new AuthError("auth-saml/conditions-not-yet-valid",
             "Conditions NotBefore is in the future");
         }
       }
       if (cNotOnOrAfter) {
-        var cnoa = Date.parse(cNotOnOrAfter) / 1000;                                            // allow:raw-byte-literal — ms→s
+        var cnoa = Date.parse(cNotOnOrAfter) / 1000;                                            // ms→s
         if (isFinite(cnoa) && cnoa < nowSec - clockSkewSec) {
           throw new AuthError("auth-saml/conditions-expired",
             "Conditions NotOnOrAfter has passed");
@@ -787,8 +792,7 @@ function create(opts) {
       sessionIndex:    sessionIndex,
       attributes:      attributes,
       audience:        audience,
-      inResponseTo:    bearerOk ? _attr(_findChild(_findChild(subject, "SubjectConfirmation", SAML_NS.assertion),
-                                       "SubjectConfirmationData", SAML_NS.assertion), "InResponseTo") : null,
+      inResponseTo:    bearerOk ? matchedInResponseTo : null,
       issuer:          issuer,
     };
   }
@@ -884,7 +888,7 @@ function create(opts) {
       throw new AuthError("auth-saml/no-idp-slo",
         "buildLogoutRequest: opts.idpSloUrl (or sp.create's opts.idpSloUrl) required");
     }
-    var id = "_" + generateToken(20);                                                                 // allow:raw-byte-literal — 20-byte SAML ID token
+    var id = "_" + generateToken(20);                                                                 // 20-byte SAML ID token
     var issueInstant = new Date().toISOString();
     var c14n = xmlC14n();
     var nameIdFormatAttr = bopts.nameIdFormat
@@ -1085,7 +1089,7 @@ function create(opts) {
     validateOpts.requireNonEmptyString(bopts.inResponseTo, "inResponseTo", AuthError, "auth-saml/no-in-response-to");
     validateOpts.requireNonEmptyString(bopts.destination, "destination", AuthError, "auth-saml/no-destination");
     var statusCode = bopts.statusCode || "urn:oasis:names:tc:SAML:2.0:status:Success";
-    var id = "_" + generateToken(20);                                                                 // allow:raw-byte-literal — 20-byte SAML ID token
+    var id = "_" + generateToken(20);                                                                 // 20-byte SAML ID token
     var issueInstant = new Date().toISOString();
     var c14n = xmlC14n();
     var xml =
@@ -1288,7 +1292,7 @@ function create(opts) {
       throw new AuthError("auth-saml/no-idp-slo",
         "buildLogoutRequestPost: opts.idpSloUrl required");
     }
-    var id = "_" + generateToken(20);                                                                 // allow:raw-byte-literal — 20-byte SAML ID token
+    var id = "_" + generateToken(20);                                                                 // 20-byte SAML ID token
     var issueInstant = new Date().toISOString();
     var c14n = xmlC14n();
     var nameIdFormatAttr = bopts.nameIdFormat
@@ -1663,18 +1667,18 @@ function _decryptEncryptedAssertion(encAssertion, spPrivateKeyPem) {
   var clearBytes;
   if (contentAlg === "http://www.w3.org/2009/xmlenc11#aes128-gcm" ||
       contentAlg === "http://www.w3.org/2009/xmlenc11#aes256-gcm") {
-    var aesBits = contentAlg.indexOf("aes128") !== -1 ? 128 : 256;                                // allow:raw-byte-literal — AES key size
-    var expectedKeyBytes = aesBits / 8;                                                            // allow:raw-byte-literal — bits→bytes
+    var aesBits = contentAlg.indexOf("aes128") !== -1 ? 128 : 256;                                // AES key size
+    var expectedKeyBytes = aesBits / 8;                                                            // bits→bytes
     if (cek.length !== expectedKeyBytes) {
       throw new AuthError("auth-saml/encrypted-wrong-cek-len",
         "AES-" + aesBits + "-GCM CEK length is " + cek.length + ", expected " + expectedKeyBytes);
     }
-    if (contentBlob.length < 28) {                                                                 // allow:raw-byte-literal — 12 IV + 16 tag
+    if (contentBlob.length < 28) {                                                                 // 12 IV + 16 tag
       throw new AuthError("auth-saml/encrypted-content-too-short",
         "AES-GCM CipherValue too short to contain IV (12) + tag (16)");
     }
-    var iv  = contentBlob.subarray(0, 12);                                                          // allow:raw-byte-literal — GCM IV size
-    var tag = contentBlob.subarray(contentBlob.length - 16);                                       // allow:raw-byte-literal — GCM tag size
+    var iv  = contentBlob.subarray(0, 12);                                                          // GCM IV size
+    var tag = contentBlob.subarray(contentBlob.length - 16);                                       // GCM tag size
     var ct  = contentBlob.subarray(12, contentBlob.length - 16);
     var decipher = nodeCrypto.createDecipheriv("aes-" + aesBits + "-gcm", cek, iv);
     decipher.setAuthTag(tag);
@@ -1684,16 +1688,16 @@ function _decryptEncryptedAssertion(encAssertion, spPrivateKeyPem) {
         "AES-GCM authentication tag mismatch: " + ((eD && eD.message) || String(eD)));
     }
   } else if (contentAlg === "urn:blamejs:experimental:xmlenc:xchacha20-poly1305") {
-    if (cek.length !== 32) {                                                                       // allow:raw-byte-literal — XChaCha20 key size
+    if (cek.length !== 32) {                                                                       // XChaCha20 key size
       throw new AuthError("auth-saml/encrypted-wrong-cek-len",
         "XChaCha20-Poly1305 CEK length is " + cek.length + ", expected 32");
     }
-    if (contentBlob.length < 40) {                                                                 // allow:raw-byte-literal — 24 nonce + 16 tag
+    if (contentBlob.length < 40) {                                                                 // 24 nonce + 16 tag
       throw new AuthError("auth-saml/encrypted-content-too-short",
         "XChaCha20-Poly1305 CipherValue too short");
     }
-    var xnonce = contentBlob.subarray(0, 24);                                                       // allow:raw-byte-literal — XChaCha20 nonce size
-    var xtag   = contentBlob.subarray(contentBlob.length - 16);                                    // allow:raw-byte-literal — Poly1305 tag size
+    var xnonce = contentBlob.subarray(0, 24);                                                       // XChaCha20 nonce size
+    var xtag   = contentBlob.subarray(contentBlob.length - 16);                                    // Poly1305 tag size
     var xct    = contentBlob.subarray(24, contentBlob.length - 16);
     try {
       clearBytes = bCrypto.aeadDecrypt({
@@ -1722,8 +1726,8 @@ function _decryptEncryptedAssertion(encAssertion, spPrivateKeyPem) {
 
 // PQC SignatureMethod URIs used by the embedded XMLDSig signatures.
 // Standard XMLDSig vocabulary classical signing URIs (W3C XMLDSig
-// Core 1.1 + RFC 9231 for Ed25519) are dispatched via _sigAlgUrn /
-// _sigAlgFromUri. The framework adds two non-standard URNs for
+// Core 1.1 + RFC 9231 for Ed25519) are dispatched via _sigAlgUrn (sign
+// side) and the SUPPORTED_SIG table (verify side). The framework adds two non-standard URNs for
 // ML-DSA because no W3C/IETF XMLDSig URI registration exists for
 // post-quantum signers yet (LAMPS WG has open drafts but none final).
 // Operators integrating with PQC-aware IdPs that exchange those URNs
@@ -1971,7 +1975,7 @@ function _sigAlgUrn(alg) {
         var keyObj = (sk && typeof sk === "object" && sk.type === "private") ? sk
           : (typeof sk === "string" || (sk && sk.kty)) ? nodeCrypto.createPrivateKey(sk)
           : nodeCrypto.createPrivateKey({ key: Buffer.concat([
-              Buffer.from("302e020100300506032b657004220420", "hex"),                                 // allow:raw-byte-literal — Ed25519 PKCS#8 prefix
+              Buffer.from("302e020100300506032b657004220420", "hex"),                                 // Ed25519 PKCS#8 prefix
               Buffer.from(sk),
             ]), format: "der", type: "pkcs8" });
         return nodeCrypto.sign(null, Buffer.from(bytes), keyObj);
@@ -1980,7 +1984,7 @@ function _sigAlgUrn(alg) {
         var keyObj = (pk && typeof pk === "object" && pk.type === "public") ? pk
           : (typeof pk === "string" || (pk && pk.kty)) ? nodeCrypto.createPublicKey(pk)
           : nodeCrypto.createPublicKey({ key: Buffer.concat([
-              Buffer.from("302a300506032b6570032100", "hex"),                                         // allow:raw-byte-literal — Ed25519 SPKI prefix
+              Buffer.from("302a300506032b6570032100", "hex"),                                         // Ed25519 SPKI prefix
               Buffer.from(pk),
             ]), format: "der", type: "spki" });
         return nodeCrypto.verify(null, Buffer.from(msg), keyObj, Buffer.from(sig));
@@ -2023,22 +2027,6 @@ function _sigAlgUrn(alg) {
   return null;
 }
 
-// Reverse lookup — SignatureMethod URI on the inbound wire → alg
-// shorthand for _sigAlgUrn dispatch. Used by _verifyEmbeddedXmlDsig
-// to pick the right verifier when an IdP signs with a classical alg.
-function _sigAlgFromUri(uri) {
-  if (uri === "urn:blamejs:experimental:saml-sig-alg:ml-dsa-65") return "ml-dsa-65";
-  if (uri === "urn:blamejs:experimental:saml-sig-alg:ml-dsa-87") return "ml-dsa-87";
-  if (uri === "http://www.w3.org/2021/04/xmldsig-more#ed25519") return "ed25519";
-  if (uri === "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256")   return "rsa-sha256";
-  if (uri === "http://www.w3.org/2001/04/xmldsig-more#rsa-sha384")   return "rsa-sha384";
-  if (uri === "http://www.w3.org/2001/04/xmldsig-more#rsa-sha512")   return "rsa-sha512";
-  if (uri === "http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256") return "ecdsa-sha256";
-  if (uri === "http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384") return "ecdsa-sha384";
-  if (uri === "http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512") return "ecdsa-sha512";
-  return null;
-}
-
 /**
  * @primitive b.auth.saml.fetchMdq
  * @signature b.auth.saml.fetchMdq(opts)

package/lib/vendor/blamejs/lib/auth/sd-jwt-vc-disclosure.js

@@ -17,7 +17,7 @@ var nodeCrypto = require("node:crypto");
 var safeJson = require("../safe-json");
 var { AuthError } = require("../framework-error");
 
-var DEFAULT_SALT_BYTES = 16;          // allow:raw-byte-literal — 128-bit salt per spec recommendation
+var DEFAULT_SALT_BYTES = 16;          // 128-bit salt per spec recommendation
 
 function _newSalt(opts) {
   if (opts && opts.saltSource && typeof opts.saltSource === "function") {

package/lib/vendor/blamejs/lib/auth/sd-jwt-vc.js

@@ -239,8 +239,8 @@ function issue(opts) {
   sdDigests.sort();
 
   var now = (typeof opts.issuedAt === "number" && isFinite(opts.issuedAt))
-    ? Math.floor(opts.issuedAt / 1000) : Math.floor(Date.now() / 1000);             // allow:raw-byte-literal — ms→s conversion factor
-  var ttlSec = opts.ttlMs ? Math.floor(opts.ttlMs / 1000) : 30 * 24 * 60 * 60;       // allow:raw-byte-literal — ms→s conversion + 30-day default in seconds
+    ? Math.floor(opts.issuedAt / 1000) : Math.floor(Date.now() / 1000);             // ms→s conversion factor
+  var ttlSec = opts.ttlMs ? Math.floor(opts.ttlMs / 1000) : 30 * 24 * 60 * 60;       // ms→s conversion + 30-day default in seconds
 
   var payload = Object.assign({}, plainClaims, {
     iss:       opts.issuer,
@@ -355,7 +355,7 @@ function present(opts) {
         "present: algorithm must be one of " + SUPPORTED_ALGS.join(", "));
     }
     var now = (typeof opts.issuedAt === "number" && isFinite(opts.issuedAt))
-      ? Math.floor(opts.issuedAt / 1000) : Math.floor(Date.now() / 1000);           // allow:raw-byte-literal — ms→s conversion factor
+      ? Math.floor(opts.issuedAt / 1000) : Math.floor(Date.now() / 1000);           // ms→s conversion factor
     // The KB-JWT's hash binds it to the specific SD-JWT + presentation
     var kbHashInput = presentation;     // jwt~d1~d2~ (without KB)
     // sd_hash uses the SAME hash algorithm the credential's _sd
@@ -505,7 +505,7 @@ async function verify(presentation, opts) {
 
   // 2. Validate iss / iat / exp / vct
   var nowSec = (typeof opts.now === "number" && isFinite(opts.now))
-    ? Math.floor(opts.now / 1000) : Math.floor(Date.now() / 1000);                  // allow:raw-byte-literal — ms→s conversion factor
+    ? Math.floor(opts.now / 1000) : Math.floor(Date.now() / 1000);                  // ms→s conversion factor
   var skew = (typeof opts.maxClockSkewSec === "number") ? opts.maxClockSkewSec : 60; // allow:raw-time-literal — default 60s clock-skew tolerance
   if (typeof jwtParsed.payload.iat === "number" && jwtParsed.payload.iat > nowSec + skew) {
     throw new AuthError("auth-sd-jwt-vc/iat-future",
@@ -597,7 +597,7 @@ async function verify(presentation, opts) {
     }
     // Verify KB-JWT signature
     var kbHeaderObj;
-    try { kbHeaderObj = safeJson.parse(_b64uDecodeStr(maybeKbJwt.split(".")[0]), { maxBytes: 4096 }); }  // allow:bare-json-parse — kb header from validated KB-JWT; signature verifies // allow:raw-byte-literal — kb-header cap (4 KB)
+    try { kbHeaderObj = safeJson.parse(_b64uDecodeStr(maybeKbJwt.split(".")[0]), { maxBytes: 4096 }); }  // allow:bare-json-parse — kb header from validated KB-JWT; signature verifies
     catch (e) {
       throw new AuthError("auth-sd-jwt-vc/bad-kb-header",
         "verify: malformed KB-JWT header: " + e.message);

package/lib/vendor/blamejs/lib/auth/status-list.js

@@ -55,7 +55,7 @@ var { defineClass } = require("../framework-error");
 
 var StatusListError = defineClass("StatusListError", { alwaysPermanent: true });
 
-var SUPPORTED_BIT_SIZES = { 1: 1, 2: 1, 4: 1, 8: 1 };                            // allow:raw-byte-literal — bit-size enum (1/2/4/8 bits per status), not bytes
+var SUPPORTED_BIT_SIZES = { 1: 1, 2: 1, 4: 1, 8: 1 };                            // bit-size enum (1/2/4/8 bits per status), not bytes
 var STATUS_VALID                = 0;
 var STATUS_INVALID              = 1;
 var STATUS_SUSPENDED            = 2;
@@ -107,7 +107,7 @@ function create(opts) {
   var bits = opts.bits === undefined ? 1 : opts.bits;
   _validateBits(bits);
   // Allocate the bit-packed buffer up front. byteCount = ceil(size*bits/8).
-  var bitBytes = Math.ceil((size * bits) / 8);                                   // allow:raw-byte-literal — bits-per-byte conversion
+  var bitBytes = Math.ceil((size * bits) / 8);                                   // bits-per-byte conversion
   var bytes = Buffer.alloc(bitBytes);
   if (opts.fill !== undefined && opts.fill !== 0) {
     _validateStatus(opts.fill, bits);
@@ -184,19 +184,19 @@ function create(opts) {
 // ---- bit-packed helpers ----
 
 function _setAt(bytes, bits, idx, status) {
-  if (bits === 8) { bytes[idx] = status & 0xff; return; }                        // allow:raw-byte-literal — byte mask
+  if (bits === 8) { bytes[idx] = status & 0xff; return; }                        // byte mask
   var bitOffset = idx * bits;
-  var byteIdx   = Math.floor(bitOffset / 8);                                     // allow:raw-byte-literal — bits-per-byte
-  var bitInByte = bitOffset % 8;                                                 // allow:raw-byte-literal — bits-per-byte
+  var byteIdx   = Math.floor(bitOffset / 8);                                     // bits-per-byte
+  var bitInByte = bitOffset % 8;                                                 // bits-per-byte
   var mask      = ((1 << bits) - 1) << bitInByte;
   bytes[byteIdx] = (bytes[byteIdx] & ~mask) | ((status << bitInByte) & mask);
 }
 
 function _getAt(bytes, bits, idx) {
-  if (bits === 8) return bytes[idx];                                             // allow:raw-byte-literal — 8-bit fast path
+  if (bits === 8) return bytes[idx];                                             // 8-bit fast path
   var bitOffset = idx * bits;
-  var byteIdx   = Math.floor(bitOffset / 8);                                     // allow:raw-byte-literal — bits-per-byte
-  var bitInByte = bitOffset % 8;                                                 // allow:raw-byte-literal — bits-per-byte
+  var byteIdx   = Math.floor(bitOffset / 8);                                     // bits-per-byte
+  var bitInByte = bitOffset % 8;                                                 // bits-per-byte
   var mask      = (1 << bits) - 1;
   return (bytes[byteIdx] >> bitInByte) & mask;
 }
@@ -238,13 +238,13 @@ async function fromJwt(token, opts) {
       "statusList.fromJwt: compressed list exceeds " + MAX_LIST_BYTES + " bytes");
   }
   var inflated;
-  try { inflated = zlib.inflateRawSync(deflated, { maxOutputLength: MAX_LIST_BYTES * 8 }); }      // allow:raw-byte-literal — 8x compression-ratio cap
+  try { inflated = zlib.inflateRawSync(deflated, { maxOutputLength: MAX_LIST_BYTES * 8 }); }      // 8x compression-ratio cap
   catch (e) {
     throw new StatusListError("status-list/inflate-failed",
       "statusList.fromJwt: zlib inflate failed: " + ((e && e.message) || String(e)));
   }
   // Reconstruct the list object pointing at the inflated bytes.
-  var size = (inflated.length * 8) / bits;                                       // allow:raw-byte-literal — bits-per-byte
+  var size = (inflated.length * 8) / bits;                                       // bits-per-byte
   return {
     list: {
       size:     size,

package/lib/vendor/blamejs/lib/auth/step-up.js

@@ -86,7 +86,7 @@ function _quote(value) {
   // Reject CTLs and quote-injecting characters.
   for (var i = 0; i < value.length; i += 1) {
     var code = value.charCodeAt(i);
-    if (code < 32 || code === 127) {                                    // allow:raw-byte-literal — ASCII control codepoints
+    if (code < 32 || code === 127) {                                    // ASCII control codepoints
       throw new AuthError("auth-step-up/bad-challenge",
         "challenge value contains control character at index " + i);
     }

package/lib/vendor/blamejs/lib/auth-bot-challenge.js

@@ -270,7 +270,7 @@ function create(opts) {
   function _runBotGuardCheck(req) {
     return new Promise(function (resolve) {
       var capturedRes = {
-        statusCode: 200, // allow:raw-byte-literal — HTTP 200 status code, not bytes
+        statusCode: 200, // HTTP 200 status code, not bytes
         writableEnded: false,
         writeHead: function (status) { capturedRes.statusCode = status; },
         end: function () { capturedRes.writableEnded = true; },

package/lib/vendor/blamejs/lib/backup/index.js

@@ -1118,7 +1118,7 @@ function bundleAdapterStorage(opts) {
   var passphraseMinEntropyBits;
   if (opts.passphraseMinEntropyBits === undefined ||
       opts.passphraseMinEntropyBits === null) {
-    passphraseMinEntropyBits = 80;                                                    // allow:raw-byte-literal — entropy-bits default floor, not byte count
+    passphraseMinEntropyBits = 80;                                                    // entropy-bits default floor, not byte count
   } else if (Number.isFinite(opts.passphraseMinEntropyBits) &&
              opts.passphraseMinEntropyBits >= 0) {
     passphraseMinEntropyBits = Math.floor(opts.passphraseMinEntropyBits);
@@ -1164,8 +1164,8 @@ function bundleAdapterStorage(opts) {
     // v0.12.11 — passphrase strategy under HIPAA / PCI-DSS raises
     // the entropy floor to 128 bits (matches the framework's
     // existing crypto-grade-password discipline for sealed-storage).
-    if (cryptoStrategy === "passphrase" && passphraseMinEntropyBits < 128) {          // allow:raw-byte-literal — entropy-bits floor, not byte count
-      passphraseMinEntropyBits = 128;                                                  // allow:raw-byte-literal — entropy-bits floor, not byte count
+    if (cryptoStrategy === "passphrase" && passphraseMinEntropyBits < 128) {          // entropy-bits floor, not byte count
+      passphraseMinEntropyBits = 128;                                                  // entropy-bits floor, not byte count
     }
   }
   // Codex P2 on v0.12.8 PR #159 — tar mode builds the whole archive
@@ -1754,7 +1754,7 @@ function bundleAdapterStorage(opts) {
     // per-bundle rewrap.
     async rewrapAllBundles(opts) {
       opts = opts || {};
-      var concurrency = 4;                                                            // allow:raw-byte-literal — default fan-out, not byte count
+      var concurrency = 4;                                                            // default fan-out, not byte count
       if (typeof opts.concurrency === "number" && Number.isFinite(opts.concurrency) &&
           opts.concurrency > 0) {
         concurrency = Math.max(1, Math.floor(opts.concurrency));
@@ -1855,7 +1855,7 @@ function bundleAdapterStorage(opts) {
       // a silent ok=0/failed=0 report on non-empty storage. Default
       // 4; minimum 1; non-finite / non-positive falls back to
       // default.
-      var concurrency = 4;                                                            // allow:raw-byte-literal — default fan-out, not byte count
+      var concurrency = 4;                                                            // default fan-out, not byte count
       if (typeof vOpts.concurrency === "number" && Number.isFinite(vOpts.concurrency) &&
           vOpts.concurrency > 0) {
         concurrency = Math.max(1, Math.floor(vOpts.concurrency));
@@ -2096,7 +2096,7 @@ function bundleAdapterStorage(opts) {
         // capped 16-byte readFile via the fallback path (still
         // bounded; better than full payload).
         if (typeof adapter.readPartial === "function") {
-          var probe = await adapter.readPartial(payloadKey, 16);                      // allow:raw-byte-literal — 16-byte probe head, magic comparison
+          var probe = await adapter.readPartial(payloadKey, 16);                      // 16-byte probe head, magic comparison
           envelopeKind = archiveLazy().sniffEnvelope(probe);
         } else {
           // Legacy adapter — readPartial missing. Operators using
@@ -2389,7 +2389,7 @@ bundleAdapterStorage.objectStoreAdapter = function (client, osOpts) {
       // is consumed. PAGINATION_CAP guards against a runaway
       // server returning truncated:true forever (defense-in-depth;
       // shipped backends honour the contract).
-      var PAGINATION_CAP = 1000;                                                      // allow:raw-byte-literal — page count cap, not byte count
+      var PAGINATION_CAP = 1000;                                                      // page count cap, not byte count
       var out = [];
       var token = null;
       var pages = 0;

package/lib/vendor/blamejs/lib/base32.js

@@ -42,7 +42,7 @@ Object.keys(ALPHABETS).forEach(function (v) {
   LOOKUPS[v] = map;
 });
 
-var GROUP = 8;                                              // allow:raw-byte-literal — Base32 emits 8 chars per 5 input bytes (RFC 4648 §6)
+var GROUP = 8;                                              // Base32 emits 8 chars per 5 input bytes (RFC 4648 §6)
 var BITS = 5;                                               // 5 bits per Base32 symbol
 
 function _alphabet(variant) {
@@ -82,14 +82,14 @@ function encode(input, opts) {
   var out = "";
   var value = 0, bits = 0;
   for (var i = 0; i < buf.length; i++) {
-    value = (value << 8) | buf[i];                          // allow:raw-byte-literal — shift in one input byte
-    bits += 8;                                              // allow:raw-byte-literal — eight bits per input byte
+    value = (value << 8) | buf[i];                          // shift in one input byte
+    bits += 8;                                              // eight bits per input byte
     while (bits >= BITS) {
-      out += alphabet.charAt((value >>> (bits - BITS)) & 31);   // allow:raw-byte-literal — low 5 bits mask (2^5 - 1)
+      out += alphabet.charAt((value >>> (bits - BITS)) & 31);   // low 5 bits mask (2^5 - 1)
       bits -= BITS;
     }
   }
-  if (bits > 0) out += alphabet.charAt((value << (BITS - bits)) & 31);   // allow:raw-byte-literal — final partial group, low 5 bits
+  if (bits > 0) out += alphabet.charAt((value << (BITS - bits)) & 31);   // final partial group, low 5 bits
   if (pad) while (out.length % GROUP !== 0) out += "=";
   return out;
 }
@@ -138,9 +138,9 @@ function decode(str, opts) {
     if (idx === undefined) throw new Base32Error("base32/bad-char", "base32.decode: invalid Base32 character '" + str.charAt(i) + "' at index " + i);
     value = (value << BITS) | idx;
     bits += BITS;
-    if (bits >= 8) {                                        // allow:raw-byte-literal — emit a full output byte
-      bytes.push((value >>> (bits - 8)) & 0xff);            // allow:raw-byte-literal — eight-bit output byte mask
-      bits -= 8;                                            // allow:raw-byte-literal — consumed eight bits
+    if (bits >= 8) {                                        // emit a full output byte
+      bytes.push((value >>> (bits - 8)) & 0xff);            // eight-bit output byte mask
+      bits -= 8;                                            // consumed eight bits
     }
   }
   return Buffer.from(bytes);

package/lib/vendor/blamejs/lib/budr.js

@@ -30,8 +30,8 @@ var audit = require("./audit");
 var { defineClass } = require("./framework-error");
 var BudrError = defineClass("BudrError", { alwaysPermanent: true });
 
-var SERVICE_MAX = 128;                                                                        // allow:raw-byte-literal — string-length cap, not bytes
-var SERVICE_RE = /^[a-zA-Z0-9._:/-]{1,128}$/;                                                 // allow:raw-byte-literal — string-length cap; not bytes
+var SERVICE_MAX = 128;                                                                        // string-length cap, not bytes
+var SERVICE_RE = /^[a-zA-Z0-9._:/-]{1,128}$/;                                                 // string-length cap; not bytes
 var TIERS = ["platinum", "gold", "silver", "bronze"];
 var CRITICALITIES = ["critical", "high", "medium", "low"];
 

package/lib/vendor/blamejs/lib/cache-status.js

@@ -47,7 +47,7 @@ var CacheStatusError = defineClass("CacheStatusError", { alwaysPermanent: true }
 // per RFC 8941: starts with ALPHA or "*", continues with tchar / ":"
 // / "/". tchar excludes `, ; " \ space and all controls.
 var CACHE_NAME_RE   = /^[A-Za-z*][!#$%&'*+\-.^_`|~0-9A-Za-z:/]*$/;                                 // allow:duplicate-regex — sf-token shape per RFC 8941 §3.3.4
-var CACHE_NAME_MAX  = 128;                                                                         // allow:raw-byte-literal — cache-name length cap, not bytes
+var CACHE_NAME_MAX  = 128;                                                                         // cache-name length cap, not bytes
 var FWD_VALUES = Object.freeze(["bypass", "method", "uri-miss", "vary-miss", "miss", "request", "stale", "partial"]);
 var BOOLEAN_PARAMS = Object.freeze(["hit", "stored", "collapsed"]);
 // Reserved parameter names per RFC 9211 §2 — the framework knows their
@@ -153,7 +153,7 @@ function entryString(entry) {
   }
   if (entry.fwdStatus !== undefined && entry.fwdStatus !== null) {
     if (typeof entry.fwdStatus !== "number" || !Number.isInteger(entry.fwdStatus) ||
-        entry.fwdStatus < 100 || entry.fwdStatus > 599) {                                          // allow:raw-byte-literal — HTTP status range
+        entry.fwdStatus < 100 || entry.fwdStatus > 599) {                                          // HTTP status range
       throw new CacheStatusError("cache-status/bad-fwd-status",
         "entry.fwdStatus must be an integer 100..599");
     }