@blamejs/core 0.7.23 → 0.7.38

package/lib/network.js

@@ -6,6 +6,7 @@ var dns      = require("./network-dns");
 var proxy    = require("./network-proxy");
 var trust    = require("./network-tls");
 var heartbeat = require("./network-heartbeat");
+var smtpPolicy = require("./network-smtp-policy");
 
 var validateOpts = require("./validate-opts");
 var lazyRequire = require("./lazy-require");
@@ -219,6 +220,12 @@ module.exports = {
   proxy:      proxy,
   tls:        trust,
   heartbeat:  heartbeat,
+  smtp: {
+    policy:    smtpPolicy,
+    mtaSts:    smtpPolicy.mtaSts,
+    dane:      smtpPolicy.dane,
+    tlsRpt:    smtpPolicy.tlsRpt,
+  },
   socket: {
     setDefaultNoDelay:   _setSocketNoDelay,
     setDefaultKeepAlive: _setSocketKeepAlive,

package/lib/retention.js

@@ -55,6 +55,7 @@
  * write. This is the escape hatch; the table+ageField+ttlMs shape
  * covers the common case.
  */
+var C = require("./constants");
 var lazyRequire = require("./lazy-require");
 var validateOpts = require("./validate-opts");
 var { defineClass } = require("./framework-error");
@@ -433,7 +434,47 @@ function create(opts) {
   return { declare: declare, run: run, runAll: runAll, preview: preview, list: list };
 }
 
+// Audit-log retention floors per regulatory posture. These are the
+// MINIMUMS — operators may declare longer windows but cannot declare
+// shorter ones. Operator-facing helper for compliance audit.
+//
+//   PCI-DSS Requirement 10.7.1   — 12 months online (active accessible)
+//   HIPAA 45 CFR §164.316(b)(2)  — 6 years from creation
+//   SOX (Sarbanes-Oxley) §802     — 7 years for audit-relevant records
+//   GDPR Art. 5(1)(e)             — no fixed minimum; operator declares
+//   SOC 2 (CC1–CC9)              — 1 year typical; auditor-driven
+//   DORA Art. 17 (incident logs) — 5 years
+var COMPLIANCE_RETENTION_FLOOR_MS = Object.freeze({
+  "pci-dss":  C.TIME.days(365),       // 12 months
+  "hipaa":    C.TIME.days(365 * 6),   // 6 years
+  "sox":      C.TIME.days(365 * 7),   // 7 years
+  "soc2":     C.TIME.days(365),       // 1 year
+  "dora":     C.TIME.days(365 * 5),   // 5 years (Article 17 incident logs)
+});
+
+// Operator passes a posture name + a candidate ttlMs; returns the
+// effective ttl that meets-or-exceeds the floor. Throws if posture is
+// unknown so typos surface at config time.
+function complianceFloor(posture, candidateTtlMs) {
+  if (typeof posture !== "string") {
+    throw new RetentionError("retention/bad-posture",
+      "complianceFloor: posture must be a string, got " + JSON.stringify(posture));
+  }
+  var floor = COMPLIANCE_RETENTION_FLOOR_MS[posture];
+  if (floor === undefined) {
+    throw new RetentionError("retention/unknown-posture",
+      "complianceFloor: unknown posture '" + posture + "'; expected one of " +
+      Object.keys(COMPLIANCE_RETENTION_FLOOR_MS).join(", "));
+  }
+  if (typeof candidateTtlMs !== "number" || !isFinite(candidateTtlMs) || candidateTtlMs <= 0) {
+    return floor;
+  }
+  return candidateTtlMs > floor ? candidateTtlMs : floor;
+}
+
 module.exports = {
-  create:         create,
-  RetentionError: RetentionError,
+  create:                         create,
+  complianceFloor:                complianceFloor,
+  COMPLIANCE_RETENTION_FLOOR_MS:  COMPLIANCE_RETENTION_FLOOR_MS,
+  RetentionError:                 RetentionError,
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/core",
-  "version": "0.7.23",
+  "version": "0.7.38",
   "description": "The Node framework that owns its stack.",
   "license": "Apache-2.0",
   "author": "blamejs contributors",

package/sbom.cyclonedx.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:2ed35351-9ec7-4e19-9471-f35604ba988a",
+  "serialNumber": "urn:uuid:3adb7877-ed69-4d8b-8275-eccb0ef99166",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-05-05T06:39:17.238Z",
+    "timestamp": "2026-05-05T19:15:46.191Z",
     "lifecycles": [
       {
         "phase": "build"
@@ -19,14 +19,14 @@
       }
     ],
     "component": {
-      "bom-ref": "@blamejs/core@0.7.23",
+      "bom-ref": "@blamejs/core@0.7.38",
       "type": "library",
       "name": "blamejs",
-      "version": "0.7.23",
+      "version": "0.7.38",
       "scope": "required",
       "author": "blamejs contributors",
       "description": "The Node framework that owns its stack.",
-      "purl": "pkg:npm/%40blamejs/core@0.7.23",
+      "purl": "pkg:npm/%40blamejs/core@0.7.38",
       "properties": [],
       "externalReferences": [
         {
@@ -54,7 +54,7 @@
   "components": [],
   "dependencies": [
     {
-      "ref": "@blamejs/core@0.7.23",
+      "ref": "@blamejs/core@0.7.38",
       "dependsOn": []
     }
   ]