@blamejs/core 0.15.11 → 0.15.13

package/lib/object-store/azure-blob.js

@@ -93,14 +93,6 @@ function _encodeBlobKey(key) {
 
 var DEFAULT_API_VERSION = "2024-08-04";
 
-// Service SAS expiry bounds. Azure doesn't enforce a hard max, but
-// matching the SigV4 / V4 7-day cap keeps semantics uniform across
-// backends and reflects best practice (long-lived SAS tokens are
-// effectively credentials).
-var SAS_DEFAULT_EXPIRES_SECONDS = C.TIME.minutes(15) / C.TIME.seconds(1);
-var SAS_MAX_EXPIRES_SECONDS     = C.TIME.days(7)     / C.TIME.seconds(1);
-var SAS_MIN_EXPIRES_SECONDS     = 1;
-
 var _err = ObjectStoreError.factory;
 
 var _httpRequest = sharedRequest;
@@ -312,33 +304,13 @@ function create(config) {
   function getResponse(key, opts) {
     opts = opts || {};
     var url = _blobUrl(key);
-    var extraHeaders = {};
-    if (opts.range) {
-      extraHeaders["x-ms-range"] = "bytes=" + opts.range.start + "-" + opts.range.end;
-    }
-    if (opts.ifNoneMatch)       extraHeaders["If-None-Match"]       = opts.ifNoneMatch;
-    if (opts.ifMatch)           extraHeaders["If-Match"]            = opts.ifMatch;
-    if (opts.ifModifiedSince)   extraHeaders["If-Modified-Since"]   = opts.ifModifiedSince;
-    if (opts.ifUnmodifiedSince) extraHeaders["If-Unmodified-Since"] = opts.ifUnmodifiedSince;
+    var extraHeaders = sharedRequest.applyConditionalGetHeaders({}, opts, "x-ms-range");
     var headers = _signed("GET", url, extraHeaders);
     return _httpRequest("GET", url, headers, null, reqOpts).then(function (res) {
-      return {
-        statusCode:   res.statusCode,
-        body:         res.body,
-        etag:         res.headers && res.headers.etag,
-        lastModified: res.headers && res.headers["last-modified"]
-                      ? Date.parse(res.headers["last-modified"]) : null,
-        contentRange: res.headers && res.headers["content-range"] || null,
-        size:         res.headers && res.headers["content-length"]
-                      ? parseInt(res.headers["content-length"], 10) : null,
-        contentType:  res.headers && res.headers["content-type"] || null,
-      };
+      return sharedRequest.mapGetResponse(res);
     }, function (err) {
       if (err && err.statusCode === requestHelpers.HTTP_STATUS.NOT_MODIFIED) {
-        return {
-          statusCode: requestHelpers.HTTP_STATUS.NOT_MODIFIED,
-          body: null, etag: null, lastModified: null,
-        };
+        return sharedRequest.notModifiedGetResult();
       }
       throw err;
     });
@@ -348,11 +320,7 @@ function create(config) {
     var url = _blobUrl(key);
     var headers = _signed("HEAD", url, {});
     return _httpRequest("HEAD", url, headers, null, reqOpts).then(function (res) {
-      return {
-        size:         res.headers["content-length"] ? parseInt(res.headers["content-length"], 10) : null,
-        etag:         res.headers.etag,
-        lastModified: res.headers["last-modified"] ? Date.parse(res.headers["last-modified"]) : null,
-      };
+      return sharedRequest.mapHeadResponse(res);
     });
   }
 
@@ -415,15 +383,7 @@ function create(config) {
   // "Create a service SAS". We sign with the account key (HMAC-SHA256
   // over the canonical string) and emit the token as URL query params.
   function _buildSasToken(permissions, opts) {
-    var expiresIn = opts.expiresIn != null ? opts.expiresIn : SAS_DEFAULT_EXPIRES_SECONDS;
-    if (typeof expiresIn !== "number" ||
-        expiresIn < SAS_MIN_EXPIRES_SECONDS ||
-        expiresIn > SAS_MAX_EXPIRES_SECONDS) {
-      throw _err("INVALID_EXPIRES",
-        "presigned URL: expiresIn must be a number of seconds between " +
-        SAS_MIN_EXPIRES_SECONDS + " and " + SAS_MAX_EXPIRES_SECONDS +
-        " (7 days)", true);
-    }
+    var expiresIn = sharedRequest.resolvePresignExpires(opts, "presigned URL", "");
     var nowDate = opts.date || new Date();
     var expiry = new Date(nowDate.getTime() + C.TIME.seconds(expiresIn));
     // Azure accepts ISO 8601 with second precision; strip ms.

package/lib/object-store/gcs.js

@@ -28,7 +28,6 @@ var { Readable } = require("node:stream");
 var bCrypto = require("../crypto");
 var safeJson = require("../safe-json");
 var C = require("../constants");
-var numericBounds = require("../numeric-bounds");
 var requestHelpers = require("../request-helpers");
 var { ObjectStoreError } = require("../framework-error");
 var safeUrl = require("../safe-url");
@@ -60,11 +59,6 @@ var GCS_V4_ALGORITHM = "GOOG4-RSA-SHA256";
 var GCS_V4_SERVICE   = "storage";
 var GCS_V4_REGION    = "auto";
 
-// Same expiry bounds as SigV4 — V4 presigning shares the spec's 7-day cap.
-var PRESIGN_DEFAULT_EXPIRES_SECONDS = C.TIME.minutes(15) / C.TIME.seconds(1);
-var PRESIGN_MAX_EXPIRES_SECONDS     = C.TIME.days(7)     / C.TIME.seconds(1);
-var PRESIGN_MIN_EXPIRES_SECONDS     = 1;
-
 var SERVICE_ACCOUNT_SCHEMA = {
   type: "object",
   required: ["client_email", "private_key"],
@@ -238,32 +232,13 @@ function create(config) {
     var token = await _ensureToken();
     var url = _objectUrl(key, { alt: "media" });
     var headers = authHeader.bearer(token);
-    if (opts.range) {
-      headers["Range"] = "bytes=" + opts.range.start + "-" + opts.range.end;
-    }
-    if (opts.ifNoneMatch)       headers["If-None-Match"]       = opts.ifNoneMatch;
-    if (opts.ifMatch)           headers["If-Match"]            = opts.ifMatch;
-    if (opts.ifModifiedSince)   headers["If-Modified-Since"]   = opts.ifModifiedSince;
-    if (opts.ifUnmodifiedSince) headers["If-Unmodified-Since"] = opts.ifUnmodifiedSince;
+    sharedRequest.applyConditionalGetHeaders(headers, opts, "Range");
     try {
       var res = await _httpRequest("GET", url, headers, null, reqOpts);
-      return {
-        statusCode:   res.statusCode,
-        body:         res.body,
-        etag:         res.headers && res.headers.etag,
-        lastModified: res.headers && res.headers["last-modified"]
-                      ? Date.parse(res.headers["last-modified"]) : null,
-        contentRange: res.headers && res.headers["content-range"] || null,
-        size:         res.headers && res.headers["content-length"]
-                      ? parseInt(res.headers["content-length"], 10) : null,
-        contentType:  res.headers && res.headers["content-type"] || null,
-      };
+      return sharedRequest.mapGetResponse(res);
     } catch (err) {
       if (err && err.statusCode === requestHelpers.HTTP_STATUS.NOT_MODIFIED) {
-        return {
-          statusCode: requestHelpers.HTTP_STATUS.NOT_MODIFIED,
-          body: null, etag: null, lastModified: null,
-        };
+        return sharedRequest.notModifiedGetResult();
       }
       throw err;
     }
@@ -326,21 +301,8 @@ function create(config) {
 
   function _v4Presign(method, opts) {
     opts = opts || {};
-    if (!opts.key || typeof opts.key !== "string") {
-      throw _err("INVALID_KEY", "presigned URL: key is required", true);
-    }
-    if (opts.key.indexOf("\0") !== -1) {
-      throw _err("INVALID_KEY", "null byte in key", true);
-    }
-    var expiresIn = opts.expiresIn != null ? opts.expiresIn : PRESIGN_DEFAULT_EXPIRES_SECONDS;
-    if (typeof expiresIn !== "number" ||
-        expiresIn < PRESIGN_MIN_EXPIRES_SECONDS ||
-        expiresIn > PRESIGN_MAX_EXPIRES_SECONDS) {
-      throw _err("INVALID_EXPIRES",
-        "presigned URL: expiresIn must be a number of seconds between " +
-        PRESIGN_MIN_EXPIRES_SECONDS + " and " + PRESIGN_MAX_EXPIRES_SECONDS +
-        " (7 days, V4 hard cap)", true);
-    }
+    sharedRequest.requirePresignKey(opts, "presigned URL");
+    var expiresIn = sharedRequest.resolvePresignExpires(opts, "presigned URL", "V4");
 
     // V4 presigned URLs target the XML API path-style endpoint
     // (storage.googleapis.com/{bucket}/{key}), not the JSON API used
@@ -418,34 +380,9 @@ function create(config) {
   // declared range get a 403 from the bucket itself.
   function presignedUploadPolicy(opts) {
     opts = opts || {};
-    if (!opts.key || typeof opts.key !== "string") {
-      throw _err("INVALID_KEY", "presignedUploadPolicy: key is required", true);
-    }
-    if (opts.key.indexOf("\0") !== -1) {
-      throw _err("INVALID_KEY", "null byte in key", true);
-    }
-    if (typeof opts.maxBytes !== "number" || !Number.isFinite(opts.maxBytes) ||
-        opts.maxBytes <= 0) {
-      throw _err("INVALID_MAX_BYTES",
-        "presignedUploadPolicy: maxBytes (positive number of bytes) is required — " +
-        "POST-form policy enforces body size via the content-length-range condition; " +
-        "use presignedUploadUrl if size enforcement is not needed", true);
-    }
-    if (opts.minBytes !== undefined && !numericBounds.isNonNegativeFiniteInt(opts.minBytes)) {
-      throw _err("INVALID_MIN_BYTES",
-        "presignedUploadPolicy: minBytes must be a non-negative finite integer; got " +
-        numericBounds.shape(opts.minBytes), true);
-    }
-    var minBytes = opts.minBytes !== undefined ? opts.minBytes : 0;
-    var expiresIn = opts.expiresIn != null ? opts.expiresIn : PRESIGN_DEFAULT_EXPIRES_SECONDS;
-    if (typeof expiresIn !== "number" ||
-        expiresIn < PRESIGN_MIN_EXPIRES_SECONDS ||
-        expiresIn > PRESIGN_MAX_EXPIRES_SECONDS) {
-      throw _err("INVALID_EXPIRES",
-        "presignedUploadPolicy: expiresIn must be a number of seconds between " +
-        PRESIGN_MIN_EXPIRES_SECONDS + " and " + PRESIGN_MAX_EXPIRES_SECONDS +
-        " (7 days, V4 hard cap)", true);
-    }
+    sharedRequest.requirePresignKey(opts, "presignedUploadPolicy");
+    var minBytes = sharedRequest.resolvePresignUploadMinBytes(opts);
+    var expiresIn = sharedRequest.resolvePresignExpires(opts, "presignedUploadPolicy", "V4");
 
     var date = opts.date || new Date();
     var amzDate = sigv4.formatAmzDate(date);

package/lib/object-store/http-put.js

@@ -102,11 +102,7 @@ function create(config) {
   function head(key) {
     var url = _keyToUrl(baseUrl, key);
     return _request("HEAD", url, null, headers, reqOpts).then(function (res) {
-      return {
-        size:         res.headers["content-length"] ? parseInt(res.headers["content-length"], 10) : null,
-        etag:         res.headers.etag,
-        lastModified: res.headers["last-modified"] ? Date.parse(res.headers["last-modified"]) : null,
-      };
+      return sharedRequest.mapHeadResponse(res);
     });
   }
 

package/lib/object-store/http-request.js

@@ -17,8 +17,17 @@
  */
 
 var httpClient = require("../http-client");
+var C = require("../constants");
+var numericBounds = require("../numeric-bounds");
+var requestHelpers = require("../request-helpers");
 var { ObjectStoreError } = require("../framework-error");
 
+// Same code-first error factory the object-store backends use; the bare
+// cloud-provider-style codes (INVALID_KEY / INVALID_EXPIRES / ...) are the
+// existing object-store convention, swept to namespace/kebab-case for the
+// whole family in the v1.0 error-code pass.
+var _err = ObjectStoreError.factory;
+
 function request(method, url, headers, body, opts) {
   opts = opts || {};
   var req = {
@@ -35,4 +44,123 @@ function request(method, url, headers, body, opts) {
   return httpClient.request(req);
 }
 
+// ---- Shared presign opts validation (gcs / sigv4) ----
+// Every presigning entry point (presigned GET/PUT URLs and the POST-form
+// upload policy) opened with the same key + expiry bounds checks, varying
+// only in the message prefix and the signature-version label in the
+// hard-cap text. Centralized so the bounds are enforced identically and a
+// future change (a new cap, a different default) is one edit.
+var PRESIGN_DEFAULT_EXPIRES_SECONDS = C.TIME.minutes(15) / C.TIME.seconds(1);   // 15 minutes
+var PRESIGN_MAX_EXPIRES_SECONDS     = C.TIME.days(7)     / C.TIME.seconds(1);   // 7 days
+var PRESIGN_MIN_EXPIRES_SECONDS     = 1;
+
+function requirePresignKey(opts, msgPrefix) {
+  if (!opts.key || typeof opts.key !== "string") {
+    throw _err("INVALID_KEY", msgPrefix + ": key is required", true);
+  }
+  if (opts.key.indexOf("\0") !== -1) {
+    throw _err("INVALID_KEY", "null byte in key", true);
+  }
+}
+
+// hardCapLabel names the signing version in the cap text ("V4" / "SigV4"
+// → "(7 days, V4 hard cap)"); an empty / omitted label yields the plain
+// "(7 days)" tail used by the Azure SAS path, whose cap is the same 7 days
+// but is not a SigV4 family limit.
+function resolvePresignExpires(opts, msgPrefix, hardCapLabel) {
+  var expiresIn = opts.expiresIn != null ? opts.expiresIn : PRESIGN_DEFAULT_EXPIRES_SECONDS;
+  if (typeof expiresIn !== "number" ||
+      expiresIn < PRESIGN_MIN_EXPIRES_SECONDS ||
+      expiresIn > PRESIGN_MAX_EXPIRES_SECONDS) {
+    var capTail = hardCapLabel ? " (7 days, " + hardCapLabel + " hard cap)" : " (7 days)";
+    throw _err("INVALID_EXPIRES",
+      msgPrefix + ": expiresIn must be a number of seconds between " +
+      PRESIGN_MIN_EXPIRES_SECONDS + " and " + PRESIGN_MAX_EXPIRES_SECONDS +
+      capTail, true);
+  }
+  return expiresIn;
+}
+
+// POST-form upload policy size bounds — returns the resolved minBytes
+// (defaulting to 0). maxBytes is validated here but consumed by the
+// caller (it becomes the content-length-range upper bound).
+function resolvePresignUploadMinBytes(opts) {
+  if (typeof opts.maxBytes !== "number" || !Number.isFinite(opts.maxBytes) ||
+      opts.maxBytes <= 0) {
+    throw _err("INVALID_MAX_BYTES",
+      "presignedUploadPolicy: maxBytes (positive number of bytes) is required — " +
+      "POST-form policy enforces body size via the content-length-range condition; " +
+      "use presignedUploadUrl if size enforcement is not needed", true);
+  }
+  if (opts.minBytes !== undefined && !numericBounds.isNonNegativeFiniteInt(opts.minBytes)) {
+    throw _err("INVALID_MIN_BYTES",
+      "presignedUploadPolicy: minBytes must be a non-negative finite integer; got " +
+      numericBounds.shape(opts.minBytes), true);
+  }
+  return opts.minBytes !== undefined ? opts.minBytes : 0;
+}
+
+// ---- Shared conditional-GET request + response mapping (gcs / sigv4 / azure) ----
+// Every backend's getResponse() set the same RFC 7232/7233 conditional
+// headers (Range + If-Match family), mapped the HTTP response into the same
+// { statusCode, body, etag, lastModified, contentRange, size, contentType }
+// shape, and turned a 304 into the same short-circuit result. Only the Range
+// header NAME differs (S3/GCS "Range" vs Azure "x-ms-range"), so it is a
+// parameter; the rest is identical.
+function applyConditionalGetHeaders(target, opts, rangeHeaderName) {
+  if (opts.range) {
+    target[rangeHeaderName] = "bytes=" + opts.range.start + "-" + opts.range.end;
+  }
+  if (opts.ifNoneMatch)       target["If-None-Match"]       = opts.ifNoneMatch;
+  if (opts.ifMatch)           target["If-Match"]            = opts.ifMatch;
+  if (opts.ifModifiedSince)   target["If-Modified-Since"]   = opts.ifModifiedSince;
+  if (opts.ifUnmodifiedSince) target["If-Unmodified-Since"] = opts.ifUnmodifiedSince;
+  return target;
+}
+
+function mapGetResponse(res) {
+  return {
+    statusCode:   res.statusCode,
+    body:         res.body,
+    etag:         res.headers && res.headers.etag,
+    lastModified: res.headers && res.headers["last-modified"]
+                  ? Date.parse(res.headers["last-modified"]) : null,
+    contentRange: res.headers && res.headers["content-range"] || null,
+    size:         res.headers && res.headers["content-length"]
+                  ? parseInt(res.headers["content-length"], 10) : null,
+    contentType:  res.headers && res.headers["content-type"] || null,
+  };
+}
+
+// HEAD response projection — { size, etag, lastModified } from the response
+// headers. Shared by the header-driven backends (azure / sigv4 / http-put);
+// gcs.head is NOT a member (it reads a JSON metadata body, not headers).
+function mapHeadResponse(res) {
+  return {
+    size:         res.headers["content-length"] ? parseInt(res.headers["content-length"], 10) : null,
+    etag:         res.headers.etag,
+    lastModified: res.headers["last-modified"] ? Date.parse(res.headers["last-modified"]) : null,
+  };
+}
+
+// The structured result a conditional GET returns when the server answers
+// 304 Not Modified (httpClient surfaces it as a non-2xx error each backend
+// catches and maps here).
+function notModifiedGetResult() {
+  return {
+    statusCode: requestHelpers.HTTP_STATUS.NOT_MODIFIED,
+    body: null, etag: null, lastModified: null,
+  };
+}
+
 module.exports = request;
+module.exports.applyConditionalGetHeaders = applyConditionalGetHeaders;
+module.exports.mapGetResponse = mapGetResponse;
+module.exports.mapHeadResponse = mapHeadResponse;
+module.exports.notModifiedGetResult = notModifiedGetResult;
+module.exports.PRESIGN_DEFAULT_EXPIRES_SECONDS = PRESIGN_DEFAULT_EXPIRES_SECONDS;
+module.exports.PRESIGN_MAX_EXPIRES_SECONDS = PRESIGN_MAX_EXPIRES_SECONDS;
+module.exports.PRESIGN_MIN_EXPIRES_SECONDS = PRESIGN_MIN_EXPIRES_SECONDS;
+module.exports.requirePresignKey = requirePresignKey;
+module.exports.resolvePresignExpires = resolvePresignExpires;
+module.exports.resolvePresignUploadMinBytes = resolvePresignUploadMinBytes;

package/lib/object-store/sigv4-bucket-ops.js

@@ -50,6 +50,7 @@
  * BUCKET_ALREADY_OWNED, BUCKET_NOT_EMPTY, etc.).
  */
 var nodeCrypto = require("node:crypto");
+var safeBuffer = require("../safe-buffer");
 var C = require("../constants");
 var requestHelpers = require("../request-helpers");
 var sigv4 = require("./sigv4");
@@ -403,7 +404,7 @@ function _validateObjectKey(key) {
   if (typeof key !== "string" || key.length === 0) {
     throw _err("INVALID_KEY", "object key must be a non-empty string", true);
   }
-  if (key.length > C.BYTES.kib(1)) {
+  if (safeBuffer.byteLengthOf(key) > C.BYTES.kib(1)) {
     throw _err("INVALID_KEY", "object key exceeds 1024 bytes (S3 limit)", true);
   }
 }

package/lib/object-store/sigv4.js

@@ -29,7 +29,6 @@ var { Readable } = require("node:stream");
 var safeXml = require("../parsers/safe-xml");
 var sharedRequest = require("./http-request");
 var C = require("../constants");
-var numericBounds = require("../numeric-bounds");
 var requestHelpers = require("../request-helpers");
 var { ObjectStoreError } = require("../framework-error");
 var safeUrl = require("../safe-url");
@@ -66,12 +65,6 @@ function _arrayify(value) {
 var SERVICE = "s3";
 var ALGORITHM = "AWS4-HMAC-SHA256";
 
-// Presigned-URL expiry bounds. The SigV4 spec caps query-string-signed
-// URLs at 7 days; below 1 second is effectively unsignable.
-var PRESIGN_DEFAULT_EXPIRES_SECONDS = C.TIME.minutes(15) / C.TIME.seconds(1); // 15 minutes
-var PRESIGN_MAX_EXPIRES_SECONDS     = C.TIME.days(7)     / C.TIME.seconds(1); // 7 days (SigV4 hard cap)
-var PRESIGN_MIN_EXPIRES_SECONDS     = 1;
-
 var _err = ObjectStoreError.factory;
 
 // ---- SigV4 primitives ----
@@ -658,35 +651,16 @@ function create(config) {
     // param is in the SigV4 canonical request.
     if (opts.versionId) url.searchParams.set("versionId", opts.versionId);
     var headers = _makeSigned("GET", url, sha256Hex(Buffer.alloc(0)));
-    if (opts.range) {
-      headers["Range"] = "bytes=" + opts.range.start + "-" + opts.range.end;
-    }
-    if (opts.ifNoneMatch)      headers["If-None-Match"]      = opts.ifNoneMatch;
-    if (opts.ifMatch)          headers["If-Match"]           = opts.ifMatch;
-    if (opts.ifModifiedSince)  headers["If-Modified-Since"]  = opts.ifModifiedSince;
-    if (opts.ifUnmodifiedSince) headers["If-Unmodified-Since"] = opts.ifUnmodifiedSince;
+    sharedRequest.applyConditionalGetHeaders(headers, opts, "Range");
     var localReqOpts = Object.assign({}, reqOpts, { _resolveOnRedirect: false });
     return _request("GET", url, headers, null, localReqOpts).then(function (res) {
-      return {
-        statusCode:   res.statusCode,
-        body:         res.body,
-        etag:         res.headers && res.headers.etag,
-        lastModified: res.headers && res.headers["last-modified"]
-                      ? Date.parse(res.headers["last-modified"]) : null,
-        contentRange: res.headers && res.headers["content-range"] || null,
-        size:         res.headers && res.headers["content-length"]
-                      ? parseInt(res.headers["content-length"], 10) : null,
-        contentType:  res.headers && res.headers["content-type"] || null,
-      };
+      return sharedRequest.mapGetResponse(res);
     }, function (err) {
       // 304 surfaces as a "non-2xx error" via httpClient; propagate it
       // as a structured 304 result instead so operator routes get
       // the conditional-GET short-circuit they expect.
       if (err && err.statusCode === requestHelpers.HTTP_STATUS.NOT_MODIFIED) {
-        return {
-          statusCode: requestHelpers.HTTP_STATUS.NOT_MODIFIED,
-          body: null, etag: null, lastModified: null,
-        };
+        return sharedRequest.notModifiedGetResult();
       }
       throw err;
     });
@@ -698,11 +672,7 @@ function create(config) {
     if (opts.versionId) url.searchParams.set("versionId", opts.versionId);
     var headers = _makeSigned("HEAD", url, sha256Hex(Buffer.alloc(0)));
     return _request("HEAD", url, headers, null, reqOpts).then(function (res) {
-      return {
-        size:         res.headers["content-length"] ? parseInt(res.headers["content-length"], 10) : null,
-        etag:         res.headers.etag,
-        lastModified: res.headers["last-modified"] ? Date.parse(res.headers["last-modified"]) : null,
-      };
+      return sharedRequest.mapHeadResponse(res);
     }, function (e) {
       // A missing key surfaces as the framework NOT_FOUND code — the same
       // contract local.js head() exposes and that deleteKey already maps 404
@@ -758,21 +728,8 @@ function create(config) {
 
   function _presign(method, opts) {
     opts = opts || {};
-    if (!opts.key || typeof opts.key !== "string") {
-      throw _err("INVALID_KEY", "presigned URL: key is required", true);
-    }
-    if (opts.key.indexOf("\0") !== -1) {
-      throw _err("INVALID_KEY", "null byte in key", true);
-    }
-    var expiresIn = opts.expiresIn != null ? opts.expiresIn : PRESIGN_DEFAULT_EXPIRES_SECONDS;
-    if (typeof expiresIn !== "number" ||
-        expiresIn < PRESIGN_MIN_EXPIRES_SECONDS ||
-        expiresIn > PRESIGN_MAX_EXPIRES_SECONDS) {
-      throw _err("INVALID_EXPIRES",
-        "presigned URL: expiresIn must be a number of seconds between " +
-        PRESIGN_MIN_EXPIRES_SECONDS + " and " + PRESIGN_MAX_EXPIRES_SECONDS +
-        " (7 days, SigV4 hard cap)", true);
-    }
+    sharedRequest.requirePresignKey(opts, "presigned URL");
+    var expiresIn = sharedRequest.resolvePresignExpires(opts, "presigned URL", "SigV4");
 
     // Validate opts.responseHeaders shape — operators pass camelCase
     // keys; refuse unknown keys at config-time so a typo surfaces at
@@ -876,34 +833,9 @@ function create(config) {
   // Reference: AWS S3 "Browser-Based Uploads Using POST".
   function presignedUploadPolicy(opts) {
     opts = opts || {};
-    if (!opts.key || typeof opts.key !== "string") {
-      throw _err("INVALID_KEY", "presignedUploadPolicy: key is required", true);
-    }
-    if (opts.key.indexOf("\0") !== -1) {
-      throw _err("INVALID_KEY", "null byte in key", true);
-    }
-    if (typeof opts.maxBytes !== "number" || !Number.isFinite(opts.maxBytes) ||
-        opts.maxBytes <= 0) {
-      throw _err("INVALID_MAX_BYTES",
-        "presignedUploadPolicy: maxBytes (positive number of bytes) is required — " +
-        "POST-form policy enforces body size via the content-length-range condition; " +
-        "use presignedUploadUrl if size enforcement is not needed", true);
-    }
-    if (opts.minBytes !== undefined && !numericBounds.isNonNegativeFiniteInt(opts.minBytes)) {
-      throw _err("INVALID_MIN_BYTES",
-        "presignedUploadPolicy: minBytes must be a non-negative finite integer; got " +
-        numericBounds.shape(opts.minBytes), true);
-    }
-    var minBytes = opts.minBytes !== undefined ? opts.minBytes : 0;
-    var expiresIn = opts.expiresIn != null ? opts.expiresIn : PRESIGN_DEFAULT_EXPIRES_SECONDS;
-    if (typeof expiresIn !== "number" ||
-        expiresIn < PRESIGN_MIN_EXPIRES_SECONDS ||
-        expiresIn > PRESIGN_MAX_EXPIRES_SECONDS) {
-      throw _err("INVALID_EXPIRES",
-        "presignedUploadPolicy: expiresIn must be a number of seconds between " +
-        PRESIGN_MIN_EXPIRES_SECONDS + " and " + PRESIGN_MAX_EXPIRES_SECONDS +
-        " (7 days, SigV4 hard cap)", true);
-    }
+    sharedRequest.requirePresignKey(opts, "presignedUploadPolicy");
+    var minBytes = sharedRequest.resolvePresignUploadMinBytes(opts);
+    var expiresIn = sharedRequest.resolvePresignExpires(opts, "presignedUploadPolicy", "SigV4");
 
     var date = opts.date || new Date();
     var amzDate = _formatAmzDate(date);

package/lib/observability-otlp-exporter.js

@@ -37,6 +37,7 @@ var safeBuffer = require("./safe-buffer");
 var validateOpts = require("./validate-opts");
 var safeUrl = require("./safe-url");
 var pb = require("./protobuf-encoder");
+var boundedMap = require("./bounded-map");
 var { defineClass } = require("./framework-error");
 
 var OtlpExporterError = defineClass("OtlpExporterError", { alwaysPermanent: true });
@@ -167,15 +168,13 @@ function _bundleSpans(spans) {
   for (var i = 0; i < spans.length; i++) {
     var s = spans[i];
     var resKey = JSON.stringify(s.resource || {});
-    var bucket = byResource.get(resKey);
-    if (!bucket) {
-      bucket = {
+    var bucket = boundedMap.getOrInsert(byResource, resKey, function () {
+      return {
         resource: s.resource || {},
         scope:    s.scope || { name: "blamejs", version: null },
         spans:    [],
       };
-      byResource.set(resKey, bucket);
-    }
+    });
     bucket.spans.push(s);
   }
   var resourceSpans = [];
@@ -380,15 +379,13 @@ function _bundleSpansToProto(spansArray) {
   for (var i = 0; i < spansArray.length; i += 1) {
     var s = spansArray[i];
     var resKey = JSON.stringify(s.resource || {});
-    var bucket = byResource.get(resKey);
-    if (!bucket) {
-      bucket = {
+    var bucket = boundedMap.getOrInsert(byResource, resKey, function () {
+      return {
         resource: s.resource || {},
         scope:    s.scope || { name: "blamejs", version: null },
         spans:    [],
       };
-      byResource.set(resKey, bucket);
-    }
+    });
     bucket.spans.push(s);
   }
   var resourceSpansPieces = [];
@@ -493,21 +490,8 @@ function create(opts) {
   var inFlight = false;
   var stopping = false;
 
-  var auditOn = opts.audit !== false;
-  function _emitMetric(verb, n, labels) {
-    try { observability().safeEvent("otlp.exporter." + verb, n || 1, labels || {}); }
-    catch (_e) { /* drop-silent */ }
-  }
-  function _emitAudit(action, outcome, metadata) {
-    if (!auditOn) return;
-    try {
-      audit().safeEmit({
-        action:   "system.observability.otlp_exporter." + action,
-        outcome:  outcome,
-        metadata: metadata || {},
-      });
-    } catch (_e) { /* drop-silent — audit is best-effort, never crashes the exporter */ }
-  }
+  var _emitMetric = observability().namespaced("otlp.exporter");
+  var _emitAudit = audit().namespaced("system.observability.otlp_exporter", opts.audit);
 
   function queue_(span) {
     if (stopping) { droppedExportFailed += 1; return; }