@blamejs/core 0.16.0 → 0.16.2

package/lib/keychain.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module b.keychain
@@ -647,9 +649,20 @@ async function store(opts) {
   }
 
   _validateFallbackFile(opts.fallbackFile, "keychain.store");
-  var doc = await _readFile(opts.fallbackFile, opts.passphrase);
-  doc.entries[_bindingKey(opts.service, opts.account)] = String(opts.password);
-  await _writeFile(opts.fallbackFile, doc, opts.passphrase);
+  // The lock sentinel lives beside fallbackFile, so its parent directory must
+  // exist before the FIRST writer can lock — otherwise the lock (added to
+  // serialize the RMW below) fails where the pre-lock atomicFile.write used to
+  // create the directory lazily on first store.
+  atomicFile.ensureDir(nodePath.dirname(opts.fallbackFile), 0o700);
+  // Serialize the read-modify-write so concurrent stores to the same
+  // fallbackFile can't each read the pre-update document and clobber one
+  // another's binding on write. atomicFile.lock is a cross-process file
+  // mutex; _removeFromFile serializes its RMW through the same lock.
+  await atomicFile.lock(opts.fallbackFile, async function () {
+    var doc = await _readFile(opts.fallbackFile, opts.passphrase);
+    doc.entries[_bindingKey(opts.service, opts.account)] = String(opts.password);
+    await _writeFile(opts.fallbackFile, doc, opts.passphrase);
+  });
   _emit("keychain.stored", "success", {
     service: opts.service, account: opts.account, backend: "file",
   }, auditOn);
@@ -816,13 +829,18 @@ async function remove(opts) {
     }
   }
 
+  // Validate a supplied fallbackFile (reject a relative path) BEFORE the
+  // exists check, so a relative path throws keychain/relative-fallback-file
+  // consistently with store/retrieve instead of silently no-op'ing.
+  if (opts.fallbackFile) {
+    _validateFallbackFile(opts.fallbackFile, "keychain.remove");
+  }
   if (!opts.fallbackFile || !atomicFile.exists(opts.fallbackFile)) {
     _emit("keychain.removed", "no-op", {
       service: opts.service, account: opts.account, backend: "file",
     }, auditOn);
     return false;
   }
-  _validateFallbackFile(opts.fallbackFile, "keychain.remove");
   var existed = await _removeFromFile(opts.fallbackFile, opts.service, opts.account, opts.passphrase);
   _emit("keychain.removed", existed ? "success" : "no-op", {
     service: opts.service, account: opts.account, backend: "file",
@@ -831,12 +849,16 @@ async function remove(opts) {
 }
 
 async function _removeFromFile(fallbackFile, service, account, passphrase) {
-  var doc = await _readFile(fallbackFile, passphrase);
-  var bindingKey = _bindingKey(service, account);
-  if (!Object.prototype.hasOwnProperty.call(doc.entries, bindingKey)) return false;
-  delete doc.entries[bindingKey];
-  await _writeFile(fallbackFile, doc, passphrase);
-  return true;
+  // Same serialized read-modify-write as store: hold the file mutex across
+  // read -> delete -> write so a concurrent store/remove can't lose the edit.
+  return await atomicFile.lock(fallbackFile, async function () {
+    var doc = await _readFile(fallbackFile, passphrase);
+    var bindingKey = _bindingKey(service, account);
+    if (!Object.prototype.hasOwnProperty.call(doc.entries, bindingKey)) return false;
+    delete doc.entries[bindingKey];
+    await _writeFile(fallbackFile, doc, passphrase);
+    return true;
+  });
 }
 
 // ---- Test seam -------------------------------------------------------------

package/lib/lazy-require.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Lazy-require — cached deferred-load helper.

package/lib/legal-hold.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * legal-hold — subject-level litigation/regulatory hold registry.

package/lib/link-header.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module b.linkHeader

package/lib/local-db-thin.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.localDb.thin — lightweight node:sqlite wrapper for desktop-daemon-

package/lib/log-stream-cloudwatch.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * AWS CloudWatch Logs sink — PutLogEvents over HTTPS with SigV4.

package/lib/log-stream-local.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Local file-based log sink with append-only journaling + rotation.

package/lib/log-stream-otlp-grpc.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * OTLP gRPC log sink — OpenTelemetry Protocol logs over gRPC.

package/lib/log-stream-otlp.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * OTLP/HTTP-JSON log sink — OpenTelemetry Protocol logs over HTTP/JSON.

package/lib/log-stream-syslog.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Syslog log-stream sink — RFC 5424 framing over UDP / TCP / TLS.

package/lib/log-stream-webhook.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Generic webhook log sink — HTTP POST one event (or a batch) at a time.

package/lib/log-stream.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module b.logStream

package/lib/log.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module b.log

package/lib/lro.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module b.lro

package/lib/mail-agent.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mail.agent

package/lib/mail-arc-reuse-token.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Internal handshake token shared between the DKIM verifier (mail-dkim) and

package/lib/mail-arc-sign.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.mail.arc.sign — RFC 8617 ARC chain construction.

package/lib/mail-arf.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module b.mailArf

package/lib/mail-auth.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.mail.spf + b.mail.dmarc + b.mail.arc — inbound mail authentication
@@ -292,7 +294,7 @@ function _ipv4InCidr(ip, cidr) {
   var slash = cidr.indexOf("/");
   var net = slash === -1 ? cidr : cidr.slice(0, slash);
   var mask = slash === -1 ? 32 : parseInt(cidr.slice(slash + 1), 10);             // IPv4 max prefix
-  if (mask < 0 || mask > 32) return false;                                       // IPv4 max prefix
+  if (!isFinite(mask) || mask < 0 || mask > 32) return false;                     // IPv4 max prefix
   var ipInt = _ipv4ToInt(ip);
   var netInt = _ipv4ToInt(net);
   if (ipInt === null || netInt === null) return false;
@@ -2121,6 +2123,10 @@ function authResultsEmit(opts) {
 
   var version = (opts.version === undefined || opts.version === null)
     ? "1" : String(opts.version);
+  if (/[\r\n\0]/.test(version)) {
+    throw new MailAuthError("mail-auth/ar-bad-version",
+      "authResults.emit: version contains forbidden control characters");
+  }
   var head = opts.authservId + (version === "1" ? "" : " " + version);
 
   if (opts.results.length === 0) {

package/lib/mail-bimi.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module b.mail.bimi

package/lib/mail-bounce.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module b.mailBounce

package/lib/mail-crypto-pgp.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 // codebase-patterns:allow-file raw-byte-literal — RFC 9580 OpenPGP packet
 // framing carries protocol-mandated byte-shape constants throughout (32-byte

package/lib/mail-crypto-smime.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mail.crypto.smime

package/lib/mail-crypto.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mail.crypto

package/lib/mail-dav.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 // codebase-patterns:allow-file raw-byte-literal — DAV is HTTP-shaped; every
 // numeric in this file is an HTTP status code (200 / 201 / 207 / 400 / 401

package/lib/mail-deploy.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 
 /**

package/lib/mail-dkim.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * mail-dkim — DKIM-Signature header generation for outbound mail.

package/lib/mail-greylist.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mail.greylist

package/lib/mail-helo.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mail.helo

package/lib/mail-journal.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 
 /**

package/lib/mail-mdn.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module b.mailMdn

package/lib/mail-rbl.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mail.rbl

package/lib/mail-require-tls.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mail.requireTls

package/lib/mail-scan.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mail.scan

package/lib/mail-send-deliver.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module b.mail.send.deliver

package/lib/mail-server-imap.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mail.server.imap

package/lib/mail-server-jmap.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mail.server.jmap

package/lib/mail-server-managesieve.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mail.server.managesieve

package/lib/mail-server-mx.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mail.server.mx

package/lib/mail-server-net.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 
 // mail-server-net — the TCP-listener lifecycle shared by the mailbox / transfer

package/lib/mail-server-pop3.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mail.server.pop3

package/lib/mail-server-rate-limit.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mail.server.rateLimit

package/lib/mail-server-registry.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module b.mail.serverRegistry

package/lib/mail-server-submission.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mail.server.submission

package/lib/mail-server-tls.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mail.server.tls

package/lib/mail-sieve.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 
 /**

package/lib/mail-spam-score.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mail.spamScore

package/lib/mail-srs.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mail.srs

package/lib/mail-store-fts.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module    b.mailStore.fts

package/lib/mail-store.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mailStore

package/lib/mail-unsubscribe.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * mail-unsubscribe — RFC 8058 / RFC 2369 / RFC 2919 List-* support.

package/lib/mail.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module b.mail

package/lib/markup-escape.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 
 // markup-escape — the shared XML/HTML text + attribute escaper used wherever

package/lib/markup-tokenizer.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 
 // markup-tokenizer — neutral lexing helpers shared by the markup sanitizers

package/lib/mcp-tool-registry.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.mcp.toolRegistry

package/lib/mcp.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module b.mcp

package/lib/mdoc.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module b.mdoc

package/lib/metrics.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module b.metrics

package/lib/middleware/age-gate.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * ageGate middleware — request-level age classification + high-privacy

package/lib/middleware/ai-act-disclosure.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * ai-act-disclosure middleware — auto-inject the EU AI Act Article 50

package/lib/middleware/api-encrypt.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * api-encrypt — end-to-end PQC payload encryption for operator-

package/lib/middleware/assetlinks.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * assetlinks middleware — emits Digital Asset Links at

package/lib/middleware/asyncapi-serve.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * asyncapi-serve middleware — expose an AsyncAPI 3.0 document at a

package/lib/middleware/attach-user.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * attach-user middleware — populates req.user (and req.session) from a

package/lib/middleware/bearer-auth.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * bearer-auth middleware — extracts `Authorization: Bearer <token>`,

package/lib/middleware/body-parser.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * body-parser — request-body buffering + parsing middleware.

package/lib/middleware/bot-disclose.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * botDisclose middleware — California SB 1001 bot-disclosure.

package/lib/middleware/bot-guard.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * Bot-guard middleware — fingerprint-based detection of obviously-non-

package/lib/middleware/clear-site-data.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.middleware.clearSiteData

package/lib/middleware/compose-pipeline.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * @module     b.middleware.composePipeline

package/lib/middleware/compression.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * compression — gzip + brotli response compression.

package/lib/middleware/cookies.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.middleware.cookies — inbound cookie-header threat detection.

package/lib/middleware/cors.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * CORS middleware — allow-list-only by default. No '*' wildcard support

package/lib/middleware/csp-nonce.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * csp-nonce — per-request CSP nonce + render integration.

package/lib/middleware/csp-report.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * b.middleware.cspReport — Reporting-API endpoint for CSP / COEP /

package/lib/middleware/csrf-protect.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) blamejs contributors
 "use strict";
 /**
  * csrf-protect — middleware that issues CSRF tokens to safe-method