@blamejs/blamejs-shop 0.5.19 → 0.5.21

package/lib/vendor/blamejs/lib/object-store/azure-blob.js

@@ -341,7 +341,7 @@ function create(config) {
     var headers = _signed("DELETE", url, {});
     return _httpRequest("DELETE", url, headers, null, reqOpts).then(
       function () { return true; },
-      function (e) { if (e.statusCode === 404) return false; throw e; }
+      function (e) { if (e.statusCode === C.HTTP.STATUS.NOT_FOUND) return false; throw e; }
     );
   }
 

package/lib/vendor/blamejs/lib/object-store/gcs.js

@@ -278,7 +278,7 @@ function create(config) {
       await _httpRequest("DELETE", url, authHeader.bearer(token), null, reqOpts);
       return true;
     } catch (e) {
-      if (e.statusCode === 404) return false;
+      if (e.statusCode === C.HTTP.STATUS.NOT_FOUND) return false;
       throw e;
     }
   }

package/lib/vendor/blamejs/lib/object-store/http-put.js

@@ -18,6 +18,7 @@
  * Errors are surfaced as object-store errors with statusCode set so the
  * retry layer can classify retryable vs permanent.
  */
+var C = require("../constants");
 var { ObjectStoreError } = require("../framework-error");
 var safeUrl = require("../safe-url");
 var sharedRequest = require("./http-request");
@@ -122,7 +123,7 @@ function create(config) {
     return _request("DELETE", url, null, headers, reqOpts).then(
       function () { return true; },
       function (e) {
-        if (e.statusCode === 404) return false;
+        if (e.statusCode === C.HTTP.STATUS.NOT_FOUND) return false;
         throw e;
       }
     );

package/lib/vendor/blamejs/lib/object-store/sigv4-bucket-ops.js

@@ -396,7 +396,7 @@ function _buildLegalHoldXml(status) {
 // `get*` methods can surface a clean default instead of throwing.
 function _isLockNotConfigured(err) {
   if (!err) return false;
-  if (err.statusCode !== 404 && err.statusCode !== 400) return false;
+  if (err.statusCode !== C.HTTP.STATUS.NOT_FOUND && err.statusCode !== C.HTTP.STATUS.BAD_REQUEST) return false;
   var msg = String(err.message || "");
   return msg.indexOf("ObjectLockConfigurationNotFoundError") !== -1 ||
          msg.indexOf("NoSuchObjectLockConfiguration") !== -1;
@@ -617,10 +617,10 @@ function create(config) {
       function (e) {
         // Map S3 conflict response codes into stable framework codes.
         var mapped = e;
-        if (e.statusCode === 409 && /BucketAlreadyOwnedByYou/.test(e.message || "")) {
+        if (e.statusCode === C.HTTP.STATUS.CONFLICT && /BucketAlreadyOwnedByYou/.test(e.message || "")) {
           mapped = _err("BUCKET_ALREADY_OWNED",
             "bucket '" + name + "' already exists and is owned by this account", true);
-        } else if (e.statusCode === 409) {
+        } else if (e.statusCode === C.HTTP.STATUS.CONFLICT) {
           mapped = _err("BUCKET_NAME_TAKEN",
             "bucket name '" + name + "' is taken in S3's global namespace", true);
         }
@@ -663,7 +663,7 @@ function create(config) {
         return true;
       },
       function (e) {
-        if (e.statusCode === 404) {
+        if (e.statusCode === C.HTTP.STATUS.NOT_FOUND) {
           // Idempotent: missing bucket → false. Audit as success-with-noop
           // so the trail still records "operator attempted delete".
           if (auditSuccess) {
@@ -678,7 +678,7 @@ function create(config) {
           return false;
         }
         var mapped = e;
-        if (e.statusCode === 409 && /BucketNotEmpty/.test(e.message || "")) {
+        if (e.statusCode === C.HTTP.STATUS.CONFLICT && /BucketNotEmpty/.test(e.message || "")) {
           mapped = _err("BUCKET_NOT_EMPTY",
             "bucket '" + name + "' is not empty; delete all objects + " +
             "noncurrent versions + delete-markers first", true);

package/lib/vendor/blamejs/lib/object-store/sigv4.js

@@ -788,7 +788,7 @@ function create(config) {
       // to — so existence probes via head() (e.g. the backup objectStore
       // adapter's hasKey / statKey) get the uniform missing-key signal instead
       // of a raw HTTP 404 they don't recognize.
-      if (e && e.statusCode === 404) {
+      if (e && e.statusCode === C.HTTP.STATUS.NOT_FOUND) {
         throw _err("NOT_FOUND", "key not found: " + key, true);
       }
       throw e;
@@ -816,7 +816,7 @@ function create(config) {
     var headers = _makeSigned("DELETE", url, sha256Hex(Buffer.alloc(0)), extra);
     return _request("DELETE", url, headers, null, reqOpts).then(
       function () { return true; },
-      function (e) { if (e.statusCode === 404) return false; throw e; }
+      function (e) { if (e.statusCode === C.HTTP.STATUS.NOT_FOUND) return false; throw e; }
     );
   }
 

package/lib/vendor/blamejs/lib/observability-otlp-exporter.js

@@ -68,7 +68,7 @@ function _defaultFetchImpl(endpoint, init) {
   }).then(function (res) {
     var status = res && res.statusCode;
     return {
-      ok:     status >= 200 && status < 300,                                       // HTTP status ranges
+      ok:     typeof status === "number" && C.HTTP.success(status),
       status: status,
     };
   });
@@ -553,7 +553,9 @@ function create(opts) {
       if (res && res.ok) return { ok: true, status: res.status };
       var status = res && res.status;
       // 5xx + 408/429 → retryable; everything else permanent
-      var retryable = (status >= 500 && status < 600) || status === 408 || status === 429;  // HTTP status ranges
+      var retryable = typeof status === "number" &&
+        (C.HTTP.serverError(status) || status === C.HTTP.STATUS.REQUEST_TIMEOUT ||
+         status === C.HTTP.STATUS.TOO_MANY_REQUESTS);
       if (retryable && attempt < maxAttempts) {
         await _sleep(_backoffMs(attempt));
         return await _post(payload, attempt + 1);

package/lib/vendor/blamejs/lib/openapi.js

@@ -407,7 +407,7 @@ function create(opts) {
       var mw = function (req, res, next) {
         if (typeof res.writeHead !== "function") return next();
         var body = cachedString;
-        res.writeHead(200, {                                                                                  // HTTP 200 status
+        res.writeHead(C.HTTP.STATUS.OK, {                                                                                  // HTTP 200 status
           "Content-Type":   "application/json; charset=utf-8",
           "Content-Length": Buffer.byteLength(body),
           "Cache-Control":  cacheControl,

package/lib/vendor/blamejs/lib/pqc-agent.js

@@ -225,13 +225,10 @@ function _buildAgentOpts(opts) {
     // handshake obeyed the policy and the other did not, decided by ALPN.
     merged.ecdhCurve = networkTls.outboundPosture().ecdhCurve;
   }
-  // Mirror the resolved ecdhCurve into `groups` from one string (same
-  // shape as network-tls.buildOptions). `applyToContext` only fills
-  // `groups` when it is undefined, so setting it here preserves the
-  // caller's narrowed/reordered selection instead of letting the
-  // context filler re-derive `groups` from STATE.tlsKeyShares — a
-  // different ordering that would ignore the caller's ecdhCurve.
-  merged.groups = merged.ecdhCurve;
+  // `applyToContext` fills the group preference only when the base does not
+  // already carry one, so the resolved ecdhCurve above stands as the caller's
+  // narrowed or reordered selection rather than being re-derived from the
+  // configured key shares in a different order.
   merged.minVersion = "TLSv1.3";
   if (networkTls && typeof networkTls.applyToContext === "function") {
     merged = networkTls.applyToContext({ base: merged });

package/lib/vendor/blamejs/lib/problem-details.js

@@ -40,6 +40,7 @@
  *   RFC 9457 Problem Details for HTTP APIs — standardized error response envelope with `application/problem+json` content type, supersedes RFC 7807.
  */
 
+var C            = require("./constants");
 var pick         = require("./pick");
 var validateOpts = require("./validate-opts");
 var { defineClass } = require("./framework-error");
@@ -387,7 +388,7 @@ function respond(res, problem, req) {
       "respond: problem must be a non-null object", true);
   }
   var status = (typeof problem.status === "number" && Number.isInteger(problem.status) &&
-                problem.status >= 100 && problem.status <= 599) ? problem.status : 500;            // HTTP status range + default 500
+                problem.status >= 100 && problem.status <= 599) ? problem.status : C.HTTP.STATUS.INTERNAL_SERVER_ERROR;            // HTTP status range + default 500
   var body = JSON.stringify(problem);
   // Seal the problem body when an encrypted session is active — the
   // encoder is present only after a request body decrypted, so its

package/lib/vendor/blamejs/lib/redis-client.js

@@ -467,7 +467,18 @@ function create(opts) {
         } else {
           sock = net.connect({ host: host, port: port }, onOk);
         }
-        sock.once("error", onErr);
+        sock.once("error", function (err) {
+          // rediss:// negotiates on the shared posture, so a refusal here is
+          // usually the posture rather than Redis; say which part of it.
+          if (useTls) {
+            networkTls().annotateOutboundFailure(err, {
+              host:    host,
+              port:    port,
+              tlsOpts: tlsConnectOpts,
+            });
+          }
+          onErr(err);
+        });
       });
       socket = newSocket;
       socket.setNoDelay(true);