@blamejs/core 0.7.1 → 0.7.4

package/lib/validate-opts.js

@@ -219,6 +219,53 @@ function requireNonEmptyString(value, label, errorClass, code) {
   return value;
 }
 
+// optionalNonEmptyStringArray — required-shape validator for optional
+// array-of-non-empty-strings opts (scopes / allowedFileTypes / dependsOn /
+// rtlLanguages / eagerLocales / etc.). Replaces the recurring four-line
+// cascade `if (opts.X !== undefined) { if (!Array.isArray) throw; for
+// (i...) if (typeof !== "string" || === "") throw }` that 5+ primitives
+// previously rolled by hand.
+//
+// undefined / null → returns the value unchanged (caller can default).
+// non-array → throws via errorClass with the provided code.
+// any non-string or empty-string element → throws with index-pointing message.
+function optionalNonEmptyStringArray(value, label, errorClass, code) {
+  if (value === undefined || value === null) return value;
+  if (!Array.isArray(value)) {
+    _throw(errorClass, code, (label || "opt") +
+           " must be an array of non-empty strings, got " + typeof value,
+           "validate-opts/bad-string-array");
+  }
+  for (var i = 0; i < value.length; i += 1) {
+    if (typeof value[i] !== "string" || value[i].length === 0) {
+      _throw(errorClass, code, (label || "opt") +
+             "[" + i + "] must be a non-empty string",
+             "validate-opts/bad-string-array-element");
+    }
+  }
+  return value;
+}
+
+// optionalObjectWithMethod — required-shape validator for optional opts
+// that accept a "duck-typed handle": an object that exposes a specific
+// method. Replaces the recurring `if (opts.X !== undefined && opts.X !==
+// null) { if (typeof opts.X !== "object" || typeof opts.X.method !==
+// "function") throw ... }` cascade shared by file-upload (permissions),
+// notify (queue), seeders (db), webhook (nonceStore), and others.
+//
+// undefined / null → returns the value unchanged (caller can default).
+// non-object OR missing method → throws via errorClass with the operator-
+// facing description (e.g. "must be a b.permissions instance (check fn)").
+function optionalObjectWithMethod(value, method, label, errorClass, code, description) {
+  if (value === undefined || value === null) return value;
+  if (typeof value !== "object" || typeof value[method] !== "function") {
+    _throw(errorClass, code, (label || "opt") + " " +
+           (description || ("must expose " + method + "() method")),
+           "validate-opts/bad-shaped-handle");
+  }
+  return value;
+}
+
 // makeAuditEmitter — closure factory parallel to safeAsync.makeDropCallback.
 // Replaces the per-file `function _emit(action, info) { if (!audit) return;
 // try { audit.safeEmit(Object.assign({ action: action }, info || {})); }
@@ -263,6 +310,8 @@ module.exports.optionalFiniteNonNegative = optionalFiniteNonNegative;
 module.exports.optionalPositiveFinite = optionalPositiveFinite;
 module.exports.optionalFunction = optionalFunction;
 module.exports.optionalNonEmptyString = optionalNonEmptyString;
+module.exports.optionalNonEmptyStringArray = optionalNonEmptyStringArray;
+module.exports.optionalObjectWithMethod = optionalObjectWithMethod;
 module.exports.requireNonEmptyString = requireNonEmptyString;
 module.exports.observabilityShape = observabilityShape;
 module.exports.requireObject = requireObject;

package/lib/webhook.js

@@ -408,12 +408,9 @@ function _validateVerifierOpts(opts) {
   validateOpts.optionalFiniteNonNegative(opts.toleranceMs, "webhook.verifier: toleranceMs", WebhookError);
   validateOpts.optionalFiniteNonNegative(opts.clockSkewMs, "webhook.verifier: clockSkewMs", WebhookError);
   validateOpts.optionalNonEmptyString(opts.signatureHeader, "webhook.verifier: signatureHeader", WebhookError);
-  if (opts.nonceStore !== undefined && opts.nonceStore !== null) {
-    if (typeof opts.nonceStore !== "object" ||
-        typeof opts.nonceStore.checkAndInsert !== "function") {
-      throw _err("BAD_OPT", "webhook.verifier: nonceStore must implement checkAndInsert(nonce, expireAt)");
-    }
-  }
+  validateOpts.optionalObjectWithMethod(opts.nonceStore, "checkAndInsert",
+    "webhook.verifier: nonceStore", WebhookError, "BAD_OPT",
+    "must implement checkAndInsert(nonce, expireAt)");
   validateOpts.optionalFunction(opts.now, "webhook.verifier: now", WebhookError);
   validateOpts.auditShape(opts.audit, "webhook.verifier", WebhookError);
   validateOpts.optionalBoolean(opts.auditFailures, "webhook.verifier: auditFailures", WebhookError);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/core",
-  "version": "0.7.1",
+  "version": "0.7.4",
   "description": "The Node framework that owns its stack.",
   "license": "Apache-2.0",
   "author": "blamejs contributors",

package/sbom.cyclonedx.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:818ba232-b5b3-42aa-9167-55dbae7228f0",
+  "serialNumber": "urn:uuid:ddc45497-46e6-4b4b-94ee-8cb0849c82cd",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-05-04T03:26:40.519Z",
+    "timestamp": "2026-05-04T16:54:01.026Z",
     "lifecycles": [
       {
         "phase": "build"
@@ -19,14 +19,14 @@
       }
     ],
     "component": {
-      "bom-ref": "@blamejs/core@0.7.1",
+      "bom-ref": "@blamejs/core@0.7.4",
       "type": "library",
       "name": "blamejs",
-      "version": "0.7.1",
+      "version": "0.7.4",
       "scope": "required",
       "author": "blamejs contributors",
       "description": "The Node framework that owns its stack.",
-      "purl": "pkg:npm/%40blamejs/core@0.7.1",
+      "purl": "pkg:npm/%40blamejs/core@0.7.4",
       "properties": [],
       "externalReferences": [
         {
@@ -54,7 +54,7 @@
   "components": [],
   "dependencies": [
     {
-      "ref": "@blamejs/core@0.7.1",
+      "ref": "@blamejs/core@0.7.4",
       "dependsOn": []
     }
   ]