@blamejs/core 0.14.10 → 0.14.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +2 -0
- package/README.md +5 -2
- package/index.js +4 -0
- package/lib/ai-input.js +167 -3
- package/lib/ai-output.js +463 -0
- package/lib/ai-prompt.js +304 -0
- package/lib/audit.js +2 -0
- package/lib/codepoint-class.js +18 -0
- package/lib/compliance-ai-act.js +446 -0
- package/lib/content-credentials.js +851 -41
- package/lib/framework-error.js +16 -0
- package/package.json +1 -1
- package/sbom.cdx.json +6 -6
package/lib/framework-error.js
CHANGED
|
@@ -412,6 +412,20 @@ var McpError = defineClass("McpError", { alwaysPermane
|
|
|
412
412
|
// input shape, classifier-result-shape errors, oversized input bypass.
|
|
413
413
|
// Permanent — caller-shape errors.
|
|
414
414
|
var AiInputError = defineClass("AiInputError", { alwaysPermanent: true });
|
|
415
|
+
// AiOutputError covers LLM output-handling violations raised by
|
|
416
|
+
// b.ai.output.sanitize / b.ai.output.redact: malformed input shape
|
|
417
|
+
// (non-string), oversized output bypass (exceeds maxBytes cap), bad
|
|
418
|
+
// maxBytes opt, unknown redaction entity. Permanent — caller-shape
|
|
419
|
+
// errors that retry will not recover. OWASP LLM05:2025 (Improper
|
|
420
|
+
// Output Handling) + LLM02:2025 (Sensitive Information Disclosure).
|
|
421
|
+
var AiOutputError = defineClass("AiOutputError", { alwaysPermanent: true });
|
|
422
|
+
// AiPromptError covers LLM prompt-assembly violations raised by
|
|
423
|
+
// b.ai.prompt.template: malformed segment shape (non-string system /
|
|
424
|
+
// context / user), bad maxBytes / nonceBytes opt, oversized assembled
|
|
425
|
+
// prompt. Permanent — caller-shape errors that retry will not recover.
|
|
426
|
+
// OWASP LLM01:2025 (Prompt Injection — indirect / data-plane injection
|
|
427
|
+
// from untrusted context).
|
|
428
|
+
var AiPromptError = defineClass("AiPromptError", { alwaysPermanent: true });
|
|
415
429
|
// A2aError covers A2A (Agent-to-Agent) protocol violations: signed-
|
|
416
430
|
// agent-card signature mismatch, expired card, unknown card id,
|
|
417
431
|
// malformed card shape, signature-algorithm allowlist drift.
|
|
@@ -691,6 +705,8 @@ module.exports = {
|
|
|
691
705
|
SseError: SseError,
|
|
692
706
|
McpError: McpError,
|
|
693
707
|
AiInputError: AiInputError,
|
|
708
|
+
AiOutputError: AiOutputError,
|
|
709
|
+
AiPromptError: AiPromptError,
|
|
694
710
|
A2aError: A2aError,
|
|
695
711
|
GraphqlFederationError: GraphqlFederationError,
|
|
696
712
|
Fda21Cfr11Error: Fda21Cfr11Error,
|
package/package.json
CHANGED
package/sbom.cdx.json
CHANGED
|
@@ -2,10 +2,10 @@
|
|
|
2
2
|
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
|
|
3
3
|
"bomFormat": "CycloneDX",
|
|
4
4
|
"specVersion": "1.5",
|
|
5
|
-
"serialNumber": "urn:uuid:
|
|
5
|
+
"serialNumber": "urn:uuid:51d93d1b-aac7-4b5a-b94b-b60595c0eba0",
|
|
6
6
|
"version": 1,
|
|
7
7
|
"metadata": {
|
|
8
|
-
"timestamp": "2026-05-
|
|
8
|
+
"timestamp": "2026-05-31T14:46:52.063Z",
|
|
9
9
|
"lifecycles": [
|
|
10
10
|
{
|
|
11
11
|
"phase": "build"
|
|
@@ -19,14 +19,14 @@
|
|
|
19
19
|
}
|
|
20
20
|
],
|
|
21
21
|
"component": {
|
|
22
|
-
"bom-ref": "@blamejs/core@0.14.
|
|
22
|
+
"bom-ref": "@blamejs/core@0.14.11",
|
|
23
23
|
"type": "application",
|
|
24
24
|
"name": "blamejs",
|
|
25
|
-
"version": "0.14.
|
|
25
|
+
"version": "0.14.11",
|
|
26
26
|
"scope": "required",
|
|
27
27
|
"author": "blamejs contributors",
|
|
28
28
|
"description": "The Node framework that owns its stack.",
|
|
29
|
-
"purl": "pkg:npm/%40blamejs/core@0.14.
|
|
29
|
+
"purl": "pkg:npm/%40blamejs/core@0.14.11",
|
|
30
30
|
"properties": [],
|
|
31
31
|
"externalReferences": [
|
|
32
32
|
{
|
|
@@ -54,7 +54,7 @@
|
|
|
54
54
|
"components": [],
|
|
55
55
|
"dependencies": [
|
|
56
56
|
{
|
|
57
|
-
"ref": "@blamejs/core@0.14.
|
|
57
|
+
"ref": "@blamejs/core@0.14.11",
|
|
58
58
|
"dependsOn": []
|
|
59
59
|
}
|
|
60
60
|
]
|