@blamejs/core 0.6.12 → 0.6.13

package/CHANGELOG.md

@@ -8,6 +8,7 @@ upgrading across more than a few patches at a time.
 
 ## v0.6.x
 
+- **0.6.13** (2026-05-02) — wiki primitive-section docs catch up to the v0.6.12 surface (`safeUrl.parse` allowUserinfo, `session.touch` extendBy ceiling, `queue.consume` rateLimit validation, `mail.transports.console` redactBcc, `logStream` webhook-sink onDrop, `backup.create` requireFlush, `restore.create` maxPulledBytes / maxPulledFiles); restore default cap stated as `C.BYTES.gib(4)` instead of a raw byte literal; numeric-check predicates (`isPositiveInt`, `isFiniteNonNegative`, `isPositiveFinite`) consolidated into `lib/numeric-checks.js` — were duplicated across api-key, cache, notify, queue, restore, retry, slug, testing, webhook; api-snapshot.json refreshed
 - **0.6.12** (2026-05-02) — `b.safeUrl.parse` now rejects URLs with `user:pass@` userinfo by default (opt in per-call via `allowUserinfo: true`); `b.session.touch({ extendBy })` enforces the same `MAX_TTL_MS` ceiling as `create` / `rotate`; `b.queue.consume({ rateLimit })` rejects negative / zero / `NaN` / `Infinity` / fractional `max`; `b.middleware.requireAuth` no longer treats request `Content-Type: application/json` as a JSON-preference signal (only `Accept` and `X-Requested-With` count); `b.backup.create({ requireFlush: true })` opt-in fails the backup if pre-flush fails instead of producing a stale snapshot; `b.restore.create({ maxPulledBytes, maxPulledFiles })` preflight bounds bundle footprint before and after pull (defaults 4 GiB / 100K files); `b.mail.transports.console({ redactBcc: true })` opt-in prints recipient count instead of addresses; `b.logStream.transports.webhook({ onDrop })` callback fires on overflow + retry-exhausted batch drops. Wiki: admin login wired through `b.auth.lockout` (exponential-backoff after bad-cred attempts) and cookie `Secure` flag now routes through `b.requestHelpers.requestProtocol` with `WIKI_TRUST_PROXY` opt-in instead of trusting raw `x-forwarded-proto`. Wiki README documents the trust model for editable page bodies and the sanitization pattern operators should adopt before expanding the editor surface.
 - **0.6.11** (2026-05-01) — wiki example-execution validator: fixture init no longer reaches across module realms (unblocks the npm-publish workflow's wiki-e2e gate, which `npm install --install-links` copies the framework into the wiki's node_modules — two distinct singletons before this fix)
 - **0.6.10** (2026-05-01) — README / SECURITY / CONTRIBUTING / wiki: removed stale version stamps and an inaccurate vendored-dep list; SECURITY now points at `lib/vendor/MANIFEST.json` for the authoritative vendor list; supported-versions table no longer pins to a specific minor; wiki archive example names the digest variable correctly (was `sha256`, output is SHA3-512 hex)

package/lib/api-key.js

@@ -63,6 +63,7 @@ var cryptoField = require("./crypto-field");
 var requestHelpers = require("./request-helpers");
 var validateOpts = require("./validate-opts");
 var C = require("./constants");
+var numericChecks = require("./numeric-checks");
 var { ApiKeyError } = require("./framework-error");
 
 var observability = lazyRequire(function () { return require("./observability"); });
@@ -129,9 +130,7 @@ var DEFAULTS = Object.freeze({
 
 // ---- Config-time validation helpers (throw on bad input) ----
 
-function _isPositiveInt(n) {
-  return typeof n === "number" && isFinite(n) && n >= 1 && Math.floor(n) === n;
-}
+var _isPositiveInt = numericChecks.isPositiveInt;
 
 function _validateIdentifier(name, value) {
   if (typeof value !== "string" || value.length === 0) {

package/lib/cache.js

@@ -93,6 +93,7 @@
 var clusterStorage = require("./cluster-storage");
 var C = require("./constants");
 var lazyRequire = require("./lazy-require");
+var numericChecks = require("./numeric-checks");
 var requestHelpers = require("./request-helpers");
 var safeAsync = require("./safe-async");
 var validateOpts = require("./validate-opts");
@@ -116,13 +117,8 @@ var DEFAULTS = Object.freeze({
 
 // ---- Config-time validation helpers (throw on bad input) ----
 
-function _isFiniteNonNegative(n) {
-  return typeof n === "number" && isFinite(n) && n >= 0;
-}
-
-function _isPositiveInt(n) {
-  return typeof n === "number" && isFinite(n) && n >= 1 && Math.floor(n) === n;
-}
+var _isFiniteNonNegative = numericChecks.isFiniteNonNegative;
+var _isPositiveInt       = numericChecks.isPositiveInt;
 
 // ttlMs accepts: any non-negative finite number OR Infinity. NaN, negative,
 // or non-number is rejected.

package/lib/notify.js

@@ -49,6 +49,7 @@
 
 var lazyRequire = require("./lazy-require");
 var bootLog = require("./log");
+var numericChecks = require("./numeric-checks");
 var requestHelpers = require("./request-helpers");
 var safeAsync = require("./safe-async");
 var safeUrl = require("./safe-url");
@@ -76,9 +77,7 @@ var DEFAULTS = Object.freeze({
 
 // ---- Call-site validation (throw on bad input) ----
 
-function _isFiniteNonNegative(n) {
-  return typeof n === "number" && isFinite(n) && n >= 0;
-}
+var _isFiniteNonNegative = numericChecks.isFiniteNonNegative;
 
 function _validateTransport(name, t) {
   if (!t || typeof t !== "object") {

package/lib/numeric-checks.js

@@ -0,0 +1,40 @@
+"use strict";
+/**
+ * numeric-checks — predicate helpers for opts / arg validation.
+ *
+ * Existed previously as private `_isPositiveInt` / `_isFiniteNonNegative`
+ * / `_isNonNegFinite` copies inside api-key, cache, notify, retry, slug,
+ * testing, webhook, and (new in v0.6.12) inline checks in queue and
+ * restore. Same shape, different file — that's the repeat-means-primitive
+ * rule. Everything routes through here now so adding (e.g.) NaN-or-
+ * Infinity-string handling is a one-file change.
+ *
+ * Predicates only — callers throw with their own framework-error class.
+ *
+ *   isPositiveInt(n)        n is a finite integer >= 1
+ *   isFiniteNonNegative(n)  n is a finite number >= 0
+ *   isPositiveFinite(n)     n is a finite number > 0
+ *
+ * All return false for non-numbers, NaN, Infinity, -Infinity, null,
+ * undefined, strings, etc. — operators get one consistent gate against
+ * the silent-NaN-cap class of bug regardless of which primitive they're
+ * configuring.
+ */
+
+function isPositiveInt(n) {
+  return typeof n === "number" && isFinite(n) && n >= 1 && Math.floor(n) === n;
+}
+
+function isFiniteNonNegative(n) {
+  return typeof n === "number" && isFinite(n) && n >= 0;
+}
+
+function isPositiveFinite(n) {
+  return typeof n === "number" && isFinite(n) && n > 0;
+}
+
+module.exports = {
+  isPositiveInt:        isPositiveInt,
+  isFiniteNonNegative:  isFiniteNonNegative,
+  isPositiveFinite:     isPositiveFinite,
+};

package/lib/queue.js

@@ -34,6 +34,7 @@ var C = require("./constants");
 var clusterStorage = require("./cluster-storage");
 var crypto = require("./crypto");
 var lazyRequire = require("./lazy-require");
+var numericChecks = require("./numeric-checks");
 var observability = require("./observability");
 var protocolDispatcher = require("./protocol-dispatcher");
 var localProto = require("./queue-local");
@@ -190,11 +191,10 @@ function consume(queueName, handler, opts) {
   if (opts.rateLimit) {
     var rlMax = opts.rateLimit.max;
     var rlPer = opts.rateLimit.perSeconds;
-    // Strict positive-finite on both: NaN, Infinity, 0, and negatives
-    // all produce undefined throttling math (NaN deque comparisons,
-    // perma-locked queues, perma-open windows). Reject at config time.
-    if (typeof rlMax !== "number" || !isFinite(rlMax) || rlMax <= 0 || Math.floor(rlMax) !== rlMax ||
-        typeof rlPer !== "number" || !isFinite(rlPer) || rlPer <= 0) {
+    // NaN, Infinity, 0, negatives, fractional max all produce undefined
+    // throttling math (NaN deque comparisons, perma-locked queues,
+    // perma-open windows). Reject at config time.
+    if (!numericChecks.isPositiveInt(rlMax) || !numericChecks.isPositiveFinite(rlPer)) {
       throw _err("BAD_RATE_LIMIT",
         "consume({ rateLimit }): expected { max: positive integer, perSeconds: positive finite number }, got " +
         JSON.stringify(opts.rateLimit), true);

package/lib/restore.js

@@ -54,7 +54,9 @@
 var fs = require("fs");
 var os = require("os");
 var path = require("path");
+var C = require("./constants");
 var crypto = require("./crypto");
+var numericChecks = require("./numeric-checks");
 var restoreBundle = require("./restore-bundle");
 var restoreRollback = require("./restore-rollback");
 var lazyRequire = require("./lazy-require");
@@ -113,9 +115,9 @@ function create(opts) {
   // (defense-in-depth in case the backend lied). Default 4 GiB / 100K
   // files keeps the small-bundle path uncapped while bounding the
   // pathological case.
-  var maxPulledBytes = typeof opts.maxPulledBytes === "number" && isFinite(opts.maxPulledBytes) && opts.maxPulledBytes > 0
-    ? opts.maxPulledBytes : 4 * 1024 * 1024 * 1024;
-  var maxPulledFiles = typeof opts.maxPulledFiles === "number" && isFinite(opts.maxPulledFiles) && opts.maxPulledFiles > 0
+  var maxPulledBytes = numericChecks.isPositiveFinite(opts.maxPulledBytes)
+    ? opts.maxPulledBytes : C.BYTES.gib(4);
+  var maxPulledFiles = numericChecks.isPositiveInt(opts.maxPulledFiles)
     ? opts.maxPulledFiles : 100000;
 
   function _walkPullDirFootprint(dir) {

package/lib/retry.js

@@ -34,6 +34,7 @@
 
 var C = require("./constants");
 var lazyRequire = require("./lazy-require");
+var numericChecks = require("./numeric-checks");
 // safe-async re-exports withRetry + CircuitBreaker from this module, so a
 // direct top-level require would create a cycle. Lazy-require defers the
 // resolution until the first sleep() call, by which point both modules
@@ -82,12 +83,8 @@ var DEFAULT_BREAKER = Object.freeze({
 
 // ---- Call-site validation helpers (throw on bad input) ----
 
-function _isPositiveInt(n) {
-  return typeof n === "number" && isFinite(n) && n >= 1 && Math.floor(n) === n;
-}
-function _isNonNegFinite(n) {
-  return typeof n === "number" && isFinite(n) && n >= 0;
-}
+var _isPositiveInt  = numericChecks.isPositiveInt;
+var _isNonNegFinite = numericChecks.isFiniteNonNegative;
 function _isAbortSignal(s) {
   // Duck-typed: AbortSignal exposes .aborted (bool) and .addEventListener (fn)
   return s != null && typeof s === "object" &&

package/lib/slug.js

@@ -34,6 +34,7 @@
  *   - HTML-tag stripping (sanitize textually before slugging).
  */
 
+var numericChecks = require("./numeric-checks");
 var { SlugError } = require("./framework-error");
 var _err = SlugError.factory;
 
@@ -63,9 +64,7 @@ var _RESERVED = Object.freeze([
 
 // ---- Call-site validation helpers (throw on bad input) ----
 
-function _isPositiveInt(n) {
-  return typeof n === "number" && isFinite(n) && n >= 1 && Math.floor(n) === n;
-}
+var _isPositiveInt = numericChecks.isPositiveInt;
 
 function _validateOpts(name, opts) {
   if (typeof opts.separator !== "string" || opts.separator.length !== 1) {

package/lib/testing.js

@@ -65,6 +65,7 @@ var os = require("node:os");
 var nodePath = require("node:path");
 var EventEmitter = require("node:events").EventEmitter;
 var lazyRequire = require("./lazy-require");
+var numericChecks = require("./numeric-checks");
 var safeAsync = require("./safe-async");
 var { TestingError } = require("./framework-error");
 
@@ -84,13 +85,8 @@ var DEFAULTS = Object.freeze({
 
 // ---- Call-site validation helpers (throw on bad input) ----
 
-function _isPositiveInt(n) {
-  return typeof n === "number" && isFinite(n) && n >= 1 && Math.floor(n) === n;
-}
-
-function _isFiniteNonNegative(n) {
-  return typeof n === "number" && isFinite(n) && n >= 0;
-}
+var _isPositiveInt       = numericChecks.isPositiveInt;
+var _isFiniteNonNegative = numericChecks.isFiniteNonNegative;
 
 // ---- HTTP mocks (standalone — no framework primitive overlap) ----
 // These mimic Node's `http` module's request/response shapes. They're

package/lib/webhook.js

@@ -72,6 +72,7 @@ var safeUrl = require("./safe-url");
 var retry = require("./retry");
 var C = require("./constants");
 var lazyRequire = require("./lazy-require");
+var numericChecks = require("./numeric-checks");
 var requestHelpers = require("./request-helpers");
 var { WebhookError } = require("./framework-error");
 
@@ -113,12 +114,8 @@ var DEFAULTS = Object.freeze({
 
 // ---- Call-site validation helpers (throw on bad input) ----
 
-function _isPositiveInt(n) {
-  return typeof n === "number" && isFinite(n) && n >= 1 && Math.floor(n) === n;
-}
-function _isNonNegFinite(n) {
-  return typeof n === "number" && isFinite(n) && n >= 0;
-}
+var _isPositiveInt  = numericChecks.isPositiveInt;
+var _isNonNegFinite = numericChecks.isFiniteNonNegative;
 function _hasOwn(obj, k) { return Object.prototype.hasOwnProperty.call(obj, k); }
 function _objectKeys(obj) { return Object.keys(obj); }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/core",
-  "version": "0.6.12",
+  "version": "0.6.13",
   "description": "The Node framework that owns its stack.",
   "license": "Apache-2.0",
   "author": "blamejs contributors",