@blamejs/blamejs-shop 0.5.4 → 0.5.6

package/lib/vendor/blamejs/test/layer-0-primitives/agent-tenant.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 
 var fs      = require("fs");
@@ -45,6 +47,25 @@ async function testRegisterLookupUnregister() {
     tenant.register("acme-clinic", {}), "agent-tenant/duplicate");
 }
 
+async function testConcurrentRegisterRefusesDuplicate() {
+  // RED before the fix: register() is a check-then-create (await backend.get ->
+  // throw-if-exists -> await backend.set) with an await between the read and the
+  // write, so two concurrent register() for the same tenantId both observe
+  // absence and both set (duplicate-create; the second silently clobbers). The
+  // per-tenant serializer applies them sequentially so the second is refused.
+  var tenant = b.agent.tenant.create({});
+  var results = await Promise.allSettled([
+    tenant.register("race-co", { posture: ["soc2"] }),
+    tenant.register("race-co", { posture: ["hipaa"] }),
+  ]);
+  var fulfilled = results.filter(function (r) { return r.status === "fulfilled"; }).length;
+  var dupRejected = results.filter(function (r) {
+    return r.status === "rejected" && r.reason && r.reason.code === "agent-tenant/duplicate";
+  }).length;
+  check("concurrent register of one tenant: exactly one succeeds", fulfilled === 1);
+  check("concurrent register of one tenant: the other is refused as duplicate", dupRejected === 1);
+}
+
 async function testCheckCrossTenant() {
   var tenant = b.agent.tenant.create({});
   await tenant.register("acme", {});
@@ -437,6 +458,7 @@ async function run() {
     testSurface();
     await testRegistryMetadataSealedAtRest();
     await testRegisterLookupUnregister();
+    await testConcurrentRegisterRefusesDuplicate();
     await testCheckCrossTenant();
     await testCrossTenantAdminScope();
     await testDerivedKey();

package/lib/vendor/blamejs/test/layer-0-primitives/agent-trace.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 
 var helpers = require("../helpers");

package/lib/vendor/blamejs/test/layer-0-primitives/ai-adverse-decision.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 var helpers = require("../helpers");
 var b = helpers.b;

package/lib/vendor/blamejs/test/layer-0-primitives/ai-aedt-bias-audit.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Layer 0 — b.ai.aedtBiasAudit (NYC Local Law 144 AEDT bias audit).

package/lib/vendor/blamejs/test/layer-0-primitives/ai-capability.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Layer 0 — b.ai.capability registry + cheapest-satisfying-model

package/lib/vendor/blamejs/test/layer-0-primitives/ai-content-detect.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.ai.aiContentDetect + b.contentCredentials.cacImplicitLabel.

package/lib/vendor/blamejs/test/layer-0-primitives/ai-disclosure-apply-all.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Layer 0 — b.ai.disclosure.applyAll bundles Art. 50(1) +

package/lib/vendor/blamejs/test/layer-0-primitives/ai-disclosure.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Layer 0 — b.ai.disclosure.chatbot + .deepfake + .emotion

package/lib/vendor/blamejs/test/layer-0-primitives/ai-dp.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Layer 0 — b.ai.dp float-safe differential privacy. Snapping-

package/lib/vendor/blamejs/test/layer-0-primitives/ai-frontier-protocol.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Layer 0 — b.ai.frontierModelProtocol (California SB 53, Transparency in

package/lib/vendor/blamejs/test/layer-0-primitives/ai-input.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.ai.input — prompt-injection input classifier.

package/lib/vendor/blamejs/test/layer-0-primitives/ai-model-manifest.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.ai.modelManifest — CycloneDX 1.6 AIBOM emit / sign / verify.

package/lib/vendor/blamejs/test/layer-0-primitives/ai-output.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.ai.output — LLM output handling (sanitize + redact).

package/lib/vendor/blamejs/test/layer-0-primitives/ai-pref.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.aiPref — AIPREF Content-Usage + Cloudflare Content Signals.

package/lib/vendor/blamejs/test/layer-0-primitives/ai-prompt.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.ai.prompt — LLM prompt assembly with escape-by-default boundaries.

package/lib/vendor/blamejs/test/layer-0-primitives/ai-quota.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Layer 0 — b.ai.quota per-tenant AI usage budgets. Defends OWASP

package/lib/vendor/blamejs/test/layer-0-primitives/api-encrypt-rejection-envelope.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * api-encrypt — protocol-level rejection bodies must ride the session

package/lib/vendor/blamejs/test/layer-0-primitives/api-encrypt.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * api-encrypt — end-to-end PQC payload encryption middleware.

package/lib/vendor/blamejs/test/layer-0-primitives/app-shutdown.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * app-shutdown — graceful-shutdown orchestrator.

package/lib/vendor/blamejs/test/layer-0-primitives/archive-gz.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Layer 0 — b.archive.gz write + b.archive.read.gz read +

package/lib/vendor/blamejs/test/layer-0-primitives/archive-read.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Layer 0 — b.archive read substrate + safe-extract orchestrator +

package/lib/vendor/blamejs/test/layer-0-primitives/archive-sniff-envelope.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Layer 0 — b.archive.sniffEnvelope — magic-byte identification

package/lib/vendor/blamejs/test/layer-0-primitives/archive-tar-hardening.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.archive.read.tar hardening — uncapped random-access read + PAX `size`
@@ -145,11 +147,31 @@ async function testPaxBodyRespectsPerEntryCap() {
   check("read.tar still accepts a small PAX body under the cap", entries.length >= 1);
 }
 
+function testTarNameRejectsCrlfInjection() {
+  function threw(fn) { try { fn(); return null; } catch (e) { return e; } }
+  var t = b.archive.tar();
+
+  // A tar entry name must never carry CR / LF. A bare LF is especially
+  // dangerous for a long name: it flows into the POSIX pax extended header
+  // (`len key=value\n`), where a crafted name can forge a
+  // `path=/absolute/target` record that OVERRIDES the ustar name and
+  // escapes the extraction root — the `..` segment check does not catch an
+  // absolute-path pax injection.
+  var longName = "a".repeat(101);   // > 100 chars → triggers a pax `path` header
+  var e1 = threw(function () { t.addFile(longName + "\n20 path=/etc/evil\n", "x"); });
+  check("tar addFile: LF in name throws archive-tar/bad-name (pax-record injection)",
+    e1 && e1.code === "archive-tar/bad-name");
+  var e2 = threw(function () { t.addFile("a\r\nb.txt", "x"); });
+  check("tar addFile: CRLF in name throws archive-tar/bad-name",
+    e2 && e2.code === "archive-tar/bad-name");
+}
+
 async function run() {
   await testRandomAccessReadIsCapped();
   await testPaxMalformedSizeRefused();
   await testPaxValidSizeAccepted();
   await testPaxBodyRespectsPerEntryCap();
+  testTarNameRejectsCrlfInjection();
 }
 
 module.exports = { run: run };

package/lib/vendor/blamejs/test/layer-0-primitives/archive-tar.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Layer 0 — b.archive.tar write + b.archive.read.tar +

package/lib/vendor/blamejs/test/layer-0-primitives/archive-wrap-passphrase.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Layer 0 — b.archive.wrapWithPassphrase + b.archive.unwrapWithPassphrase

package/lib/vendor/blamejs/test/layer-0-primitives/archive-wrap.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Layer 0 — b.archive.wrap + b.archive.unwrap + bundleAdapterStorage

package/lib/vendor/blamejs/test/layer-0-primitives/archive-zip-stream.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.archive — streaming ZIP creation (toStream + Readable addFile content).

package/lib/vendor/blamejs/test/layer-0-primitives/archive.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.archive — ZIP creation.
@@ -60,6 +62,8 @@ async function run() {
   rejects("non-string name",function () { b.archive.zip().addFile(42, "x"); }, /archive\/bad-name/);
   rejects("null byte",      function () { b.archive.zip().addFile("a\0b", "x"); }, /archive\/bad-name/);
   rejects(".. segment",     function () { b.archive.zip().addFile("../etc/passwd", "x"); }, /archive\/bad-name/);
+  rejects("CR/LF in name",  function () { b.archive.zip().addFile("a\r\nb.txt", "x"); }, /archive\/bad-name/);
+  rejects("bare LF in name",function () { b.archive.zip().addFile("a\nb.txt", "x"); }, /archive\/bad-name/);
   rejects("non-buffer-non-string content",
                             function () { b.archive.zip().addFile("a.txt", 42); }, /archive\/bad-content/);
 

package/lib/vendor/blamejs/test/layer-0-primitives/arg-parser.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 
 var helpers = require("../helpers");

package/lib/vendor/blamejs/test/layer-0-primitives/asn1-der.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b._internal asn1-der walker — minimal DER parser used by the OCSP

package/lib/vendor/blamejs/test/layer-0-primitives/asyncapi.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.asyncapi — AsyncAPI 3.0 schema-document builder.

package/lib/vendor/blamejs/test/layer-0-primitives/atomic-file-conflict-path.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.atomicFile.conflictPath — last-write-wins conflict-suffix builder.

package/lib/vendor/blamejs/test/layer-0-primitives/atomic-file-exclusive-temp.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.atomicFile temp-file create hardening (CWE-377 insecure temporary

package/lib/vendor/blamejs/test/layer-0-primitives/atomic-file-fd-read-errorfor-bypass.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.atomicFile.fdSafeReadSync — errorFor must own EVERY failure KIND (#358).

package/lib/vendor/blamejs/test/layer-0-primitives/atomic-file-fd-read.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.atomicFile.fdSafeReadSync — TOCTOU-safe fd read (CWE-367 /

package/lib/vendor/blamejs/test/layer-0-primitives/atomic-file-open-append-nofollow.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 // b.atomicFile.openAppendNoFollowSync — O_NOFOLLOW append open for long-lived
 // append sinks (active log file kept open across appends + reopened on

package/lib/vendor/blamejs/test/layer-0-primitives/atomic-file-open-nofollow.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 // b.atomicFile.openNoFollowSync — O_NOFOLLOW read-only open for streaming reads
 // that cannot buffer (static-serve range / SRI hashing, object-store download).

package/lib/vendor/blamejs/test/layer-0-primitives/atomic-file-rename-retry.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 // b.atomicFile.renameWithRetry — the bounded retry on a Windows-transient
 // destination lock (EPERM/EACCES/EBUSY from AV / search indexer / Dropbox /

package/lib/vendor/blamejs/test/layer-0-primitives/atomic-file-write-excl.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.atomicFile.writeExclSync — staged exclusive, symlink-refusing write

package/lib/vendor/blamejs/test/layer-0-primitives/atomic-file-write-stream.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.atomicFile.writeStream — streaming sibling of writeSync (CWE-377

package/lib/vendor/blamejs/test/layer-0-primitives/attach-user-bearer-scheme.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * attach-user — configurable Authorization scheme + token extractor.

package/lib/vendor/blamejs/test/layer-0-primitives/audit-chain-corrupted-anchor.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.auditChain.verifyChain — a corrupted / tampered purge anchor must fail

package/lib/vendor/blamejs/test/layer-0-primitives/audit-chain-incremental-verify.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.auditChain.verifyChain({ from, to }) — incremental audit-chain verify.

package/lib/vendor/blamejs/test/layer-0-primitives/audit-checkpoint-false-rollback.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 
 // SMOKE_RUN_SOLO — the smoke runner (test/smoke.js) runs this file ALONE

package/lib/vendor/blamejs/test/layer-0-primitives/audit-cve-defensive.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * January 2026 Node.js security release CVE class — defense-in-depth.

package/lib/vendor/blamejs/test/layer-0-primitives/audit-daily-review.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.auditDailyReview — PCI DSS 4.0 Req 10.4.1.1 daily-review primitive.

package/lib/vendor/blamejs/test/layer-0-primitives/audit-export-cadf.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.audit.export({ format: "cadf" }) / b.auditTools.exportCadf —

package/lib/vendor/blamejs/test/layer-0-primitives/audit-framework-namespaces.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * audit FRAMEWORK_NAMESPACES — coverage check across lib/.

package/lib/vendor/blamejs/test/layer-0-primitives/audit-query-self-log.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.audit.query self-logging (PCI DSS 10.2.3) — every read of audit_log

package/lib/vendor/blamejs/test/layer-0-primitives/audit-safeemit-redacts-secrets.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.audit.safeEmit scrubs secrets before the tamper-evident signed chain.

package/lib/vendor/blamejs/test/layer-0-primitives/audit-segregation.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.audit.bindActor / generateActorBindingTriggerSql / assertSegregation —

package/lib/vendor/blamejs/test/layer-0-primitives/audit-sign-anchor.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.auditSign.anchor / verifyAnchor / verifyAnchorChain — the chain-checkpoint

package/lib/vendor/blamejs/test/layer-0-primitives/audit-sign-ml-dsa-65.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.auditSign + b.webhook — FIPS 204 ML-DSA-65 opt-in.

package/lib/vendor/blamejs/test/layer-0-primitives/audit-signing-key-rotation.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 
 // SMOKE_RUN_SOLO — the smoke runner (test/smoke.js) runs this file ALONE

package/lib/vendor/blamejs/test/layer-0-primitives/audit-tools-dual-control.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.auditTools.purge dual-control gate.

package/lib/vendor/blamejs/test/layer-0-primitives/audit-tools-return-bytes.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.auditTools export verbs — `returnBytes` (serverless / read-only fs)

package/lib/vendor/blamejs/test/layer-0-primitives/audit-use-store.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.audit.useStore — operator-supplied shadow store for the audit

package/lib/vendor/blamejs/test/layer-0-primitives/audit-verifybundle-tamper.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.auditTools.verifyBundle — tamper detection on a REAL archive bundle.

package/lib/vendor/blamejs/test/layer-0-primitives/auth-bot-challenge-verifier.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.auth.botChallenge — server-side Turnstile / hCaptcha / reCAPTCHA-v3

package/lib/vendor/blamejs/test/layer-0-primitives/auth-bot-challenge.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.authBotChallenge — adaptive bot-challenge gate for auth paths.

package/lib/vendor/blamejs/test/layer-0-primitives/auth-jar.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Layer 0 — b.auth.jar: RFC 9101 JWT-Secured Authorization Request.
@@ -308,19 +310,20 @@ async function testBuildExpWindow() {
   var shortClaims = JSON.parse(Buffer.from(shortRo.split(".")[1], "base64url").toString("utf8"));
   check("build: expiresInMs override honored (60s)", shortClaims.exp - shortClaims.iat === 60);
 
-  // The minted window is a live exp parse enforces: a fresh object inside
-  // the window verifies, and the same object handed to parse with a NEGATIVE
-  // skew that pushes "now" past the exp is refused on the expired path —
-  // proves the builder's exp reaches the verifier and is checked, not cosmetic.
+  // The minted window is a live exp parse enforces: a fresh object inside the
+  // window verifies, and the same object evaluated as-of an instant past its
+  // exp (via opts.now) is refused on the expired path — proves the builder's
+  // exp reaches the verifier and is checked, not cosmetic.
   var liveRo = b.auth.jar.build(_buildParams(), {
     clientId: CLIENT, audience: AS, key: ec.privateKey, kid: "c1", expiresInMs: 60 * 1000 });
   var liveOut = await b.auth.jar.parse(liveRo, _parseOpts({ algorithms: ["ES256"], jwks: [ec.jwk], clockSkewMs: 0 }));
   check("build: object inside its exp window verifies", liveOut.params.response_type === "code");
   var eExp = null;
   try {
-    await b.auth.jar.parse(liveRo, _parseOpts({ algorithms: ["ES256"], jwks: [ec.jwk], clockSkewMs: -120 * 1000 }));
+    // 2 minutes in the future — past the 60s exp + default skew.
+    await b.auth.jar.parse(liveRo, _parseOpts({ algorithms: ["ES256"], jwks: [ec.jwk], clockSkewMs: 0, now: Date.now() + 120 * 1000 }));
   } catch (e) { eExp = e; }
-  check("build: exp is enforced by parse (skew past exp refuses)", eExp && /expired/.test(eExp.code || ""));
+  check("build: exp is enforced by parse (now past exp refuses)", eExp && /expired/.test(eExp.code || ""));
 }
 
 // config-time opt validation.

package/lib/vendor/blamejs/test/layer-0-primitives/auth-jwt-defenses.test.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Cross-cutting JWT defenses landed in 0.9.57:
@@ -351,7 +353,61 @@ async function testNullJoseHeaderTypedError() {
         dpopThrew && dpopThrew.code === "auth-dpop/malformed");
 }
 
+async function testJwtExternalNonFiniteSkewRejected() {
+  // A present clockSkewMs of Infinity / NaN would make `exp + skewSec < now`
+  // (and the nbf/iat-future gates) always false — silently accepting an expired
+  // or not-yet-valid token. verifyExternal must reject a non-finite skew as a
+  // bad value, never use it to disable the expiry gate. RED before the guard:
+  // the expired token verifies. (jar.js threads this same opt to verifyExternal,
+  // so fixing it here closes the signed-request-object path too.)
+  var keys = _ecPair("P-256");
+  var jwk = Object.assign({}, keys.publicKey, { kid: "k1" });
+  var nowSec = Math.floor(Date.now() / 1000);
+  var hp = _b64url(JSON.stringify({ alg: "ES256", kid: "k1" })) + "." +
+           _b64url(JSON.stringify({ sub: "u1", exp: nowSec - 100000 }));   // expired
+  var sig = nodeCrypto.sign("sha256", Buffer.from(hp, "ascii"),
+    { key: keys.privateKey, dsaEncoding: "ieee-p1363" });
+  var token = hp + "." + _b64url(sig);
+  var bad = [Infinity, NaN, -1];
+  for (var i = 0; i < bad.length; i++) {
+    var threw = null;
+    try {
+      await b.auth.jwt.verifyExternal(token, { algorithms: ["ES256"], jwks: [jwk], clockSkewMs: bad[i] });
+    } catch (e) { threw = e; }
+    check("jwt-external: non-finite/negative clockSkewMs (" + String(bad[i]) + ") rejected, expiry gate not disabled",
+          threw && /bad-clock-skew/.test(threw.code || ""));
+  }
+  // A sane finite skew still works: the same expired token is rejected as
+  // expired (not bad-skew), proving the guard didn't break the happy path.
+  var expiredThrew = null;
+  try {
+    await b.auth.jwt.verifyExternal(token, { algorithms: ["ES256"], jwks: [jwk], clockSkewMs: 30000 });
+  } catch (e) { expiredThrew = e; }
+  check("jwt-external: finite skew still rejects an expired token (as expired)",
+        expiredThrew && /expired/.test(expiredThrew.code || ""));
+}
+
+async function testOauthCreateNonFiniteSkewRejected() {
+  // oauth.create runs no finiteness check on clockSkewMs, which flows into
+  // verifyIdToken's exp gate; Infinity/NaN would disable ID-token expiry.
+  // Config-time rejection (operator catches the typo at boot).
+  var bad = [Infinity, NaN, -5];
+  for (var i = 0; i < bad.length; i++) {
+    var threw = null;
+    try {
+      b.auth.oauth.create({
+        issuer: "https://idp.example", clientId: "c1", clientSecret: "s1",
+        redirectUri: "https://app.example/cb", clockSkewMs: bad[i],
+      });
+    } catch (e) { threw = e; }
+    check("oauth.create: non-finite/negative clockSkewMs (" + String(bad[i]) + ") refused at config time",
+          threw && /bad-clock-skew/.test(threw.code || ""));
+  }
+}
+
 async function run() {
+  await testJwtExternalNonFiniteSkewRejected();
+  await testOauthCreateNonFiniteSkewRejected();
   await testNullJoseHeaderTypedError();
   await testAlgKtyMismatchRsaWithEs256();
   await testAlgKtyMismatchEcCurveConfusion();