@floegence/floe-webapp-boot 0.52.13 → 0.53.1

package/dist/acquisition-lifecycle.d.ts

@@ -1,6 +1,5 @@
-import type { ArtifactSource, ConnectionSnapshot } from '@floegence/flowersec-core';
-import type { PrivateLoopbackArtifactSourceV1 } from '@floegence/flowersec-core/browser';
-import { ConnectedAcquisition } from './acquisition';
+import type { ConnectionSnapshot } from '@floegence/flowersec-core';
+import { type AcquisitionSource, ConnectedAcquisition } from './acquisition';
 import { ProxyBootstrapOwner } from './proxy-bootstrap';
 export interface AcquisitionConnectionLifecycle {
     synchronize(snapshot: ConnectionSnapshot): void;
@@ -10,4 +9,4 @@ export type AcquisitionConnectionLifecycleOptions = Readonly<{
     proxyBootstrap?: ProxyBootstrapOwner;
     onConnected?: (acquisition: ConnectedAcquisition) => void;
 }>;
-export declare function createAcquisitionConnectionLifecycle(source: ArtifactSource | PrivateLoopbackArtifactSourceV1, options?: AcquisitionConnectionLifecycleOptions): AcquisitionConnectionLifecycle;
+export declare function createAcquisitionConnectionLifecycle(source: AcquisitionSource, options?: AcquisitionConnectionLifecycleOptions): AcquisitionConnectionLifecycle;

package/dist/acquisition.d.ts

@@ -1,5 +1,5 @@
 import { type ArtifactLease, type ArtifactSource, type ConnectionSnapshot, type JsonValue, type Session } from '@floegence/flowersec-core';
-import type { PrivateLoopbackArtifactLeaseV1, PrivateLoopbackArtifactSourceV1, SessionOptions } from '@floegence/flowersec-core/browser';
+import type { HTTPDirectArtifactLeaseV1, HTTPDirectArtifactSourceV1, PrivateLoopbackArtifactLeaseV1, PrivateLoopbackArtifactSourceV1, SessionOptions } from '@floegence/flowersec-core/browser';
 import { type ProxyRuntimeScope } from '@floegence/flowersec-core/proxy';
 export type CriticalScopeProjectionV1 = Readonly<{
     scope: 'proxy.runtime';
@@ -70,7 +70,7 @@ export declare class IsolatedOneShotAcquisition {
     static create(): IsolatedOneShotAcquisition;
     static assertAuthentic(value: IsolatedOneShotAcquisition): void;
 }
-type AcquisitionSource = ArtifactSource | PrivateLoopbackArtifactSourceV1;
+export type AcquisitionSource = ArtifactSource | PrivateLoopbackArtifactSourceV1 | HTTPDirectArtifactSourceV1;
 export type ConnectedAcquisitionDetails = Readonly<{
     session: Session;
     scope: ProxyRuntimeScope;
@@ -85,6 +85,7 @@ type MaterializeOptions = Readonly<{
 export declare function registerAcquisitionSource(source: AcquisitionSource): void;
 export declare function materializeAcquisitionForSource(source: ArtifactSource, value: unknown, options: MaterializeOptions): Promise<ArtifactLease>;
 export declare function materializePrivateLoopbackAcquisitionForSource(source: PrivateLoopbackArtifactSourceV1, value: unknown, options: MaterializeOptions): Promise<PrivateLoopbackArtifactLeaseV1>;
+export declare function materializeHTTPDirectAcquisitionForSource(source: HTTPDirectArtifactSourceV1, value: unknown, options: MaterializeOptions): Promise<HTTPDirectArtifactLeaseV1>;
 export declare function synchronizeAcquisitionSourceSnapshot(source: AcquisitionSource, snapshot: ConnectionSnapshot): ConnectedAcquisition | null;
 export declare function clearAcquisitionSource(source: AcquisitionSource): void;
 export declare function connectedAcquisitionDetails(acquisition: ConnectedAcquisition): ConnectedAcquisitionDetails;

package/dist/acquisition.js

@@ -1,9 +1,10 @@
-import { createArtifactLease as A, parseArtifact as T } from "@floegence/flowersec-core";
-import { assertProxyRuntimeScope as U } from "@floegence/flowersec-core/proxy";
-const O = 32, E = 16384, C = "#redeven=";
-class o extends Error {
-  constructor(i) {
-    super(`Floe acquisition failed (code=${i})`), this.code = i, this.name = "AcquisitionError";
+import { sha256 as x } from "@noble/hashes/sha2.js";
+import { createArtifactLease as A, parseArtifact as E } from "@floegence/flowersec-core";
+import { assertProxyRuntimeScope as C } from "@floegence/flowersec-core/proxy";
+const j = 32, L = 16384, H = "#redeven=";
+class r extends Error {
+  constructor(t) {
+    super(`Floe acquisition failed (code=${t})`), this.code = t, this.name = "AcquisitionError";
   }
 }
 class w {
@@ -14,8 +15,8 @@ class w {
   static create() {
     return new w();
   }
-  static assertAuthentic(i) {
-    i.#e;
+  static assertAuthentic(t) {
+    t.#e;
   }
 }
 class v {
@@ -26,86 +27,89 @@ class v {
   static create() {
     return new v();
   }
-  static assertAuthentic(i) {
-    i.#e;
+  static assertAuthentic(t) {
+    t.#e;
   }
 }
-const g = /* @__PURE__ */ new WeakMap(), q = /* @__PURE__ */ new WeakMap(), L = /* @__PURE__ */ new WeakMap(), I = /* @__PURE__ */ new Set();
-function K(e) {
-  if (g.has(e)) throw new o("duplicate_acquisition_source");
+const g = /* @__PURE__ */ new WeakMap(), O = /* @__PURE__ */ new WeakMap(), P = /* @__PURE__ */ new WeakMap(), D = /* @__PURE__ */ new Set();
+function ee(e) {
+  if (g.has(e)) throw new r("duplicate_acquisition_source");
   g.set(e, { pending: [] });
 }
-async function Q(e, i, t) {
-  const n = g.get(e);
-  if (n === void 0) throw new o("invalid_acquisition_source");
-  const c = await B(i, t, T);
-  return b(
-    c,
-    A,
-    t.commitSpend,
-    (r) => {
-      n.pending.push(r);
-    },
-    (r) => {
-      n.pending = n.pending.filter((a) => a !== r);
-    }
-  );
+async function te(e, t, i) {
+  return q(e, t, i, E, A);
 }
-async function ee(e, i, t) {
-  const n = g.get(e);
-  if (n === void 0) throw new o("invalid_acquisition_source");
-  const c = await import("@floegence/flowersec-core/browser"), r = await B(
+async function ie(e, t, i) {
+  const n = await import("@floegence/flowersec-core/browser");
+  return q(
+    e,
+    t,
     i,
+    n.parsePrivateLoopbackArtifactV1,
+    n.createPrivateLoopbackArtifactLeaseV1
+  );
+}
+async function ne(e, t, i) {
+  const n = await import("@floegence/flowersec-core/browser");
+  return q(
+    e,
     t,
-    c.parsePrivateLoopbackArtifactV1
+    i,
+    n.parseHTTPDirectArtifactV1,
+    n.createHTTPDirectArtifactLeaseV1
   );
-  return b(
-    r,
-    c.createPrivateLoopbackArtifactLeaseV1,
-    t.commitSpend,
-    (a) => {
-      n.pending.push(a);
+}
+async function q(e, t, i, n, c) {
+  const o = g.get(e);
+  if (o === void 0) throw new r("invalid_acquisition_source");
+  const a = await R(t, i, n);
+  return B(
+    a,
+    c,
+    i.commitSpend,
+    (d) => {
+      o.pending.push(d);
     },
-    (a) => {
-      n.pending = n.pending.filter((d) => d !== a);
+    (d) => {
+      o.pending = o.pending.filter((s) => s !== d);
     }
   );
 }
-function te(e, i) {
-  const t = g.get(e);
-  if (t === void 0) return null;
-  if (i.state !== "connected" || i.currentSession === void 0)
-    return (i.state === "idle" || i.state === "waiting" || i.state === "failed" || i.state === "closed") && (t.pending = [], t.connected = void 0, t.connectedSession = void 0), null;
-  if (t.connected !== void 0 && t.connectedSession === i.currentSession)
-    return t.connected;
-  const n = t.pending.filter((a) => a.committed);
-  if (n.length !== 1 || t.pending.length !== 1)
-    throw t.pending = [], new o("connected_acquisition_mismatch");
+function re(e, t) {
+  const i = g.get(e);
+  if (i === void 0) return null;
+  if (t.state !== "connected" || t.currentSession === void 0)
+    return (t.state === "idle" || t.state === "waiting" || t.state === "failed" || t.state === "closed") && (i.pending = [], i.connected = void 0, i.connectedSession = void 0), null;
+  if (i.connected !== void 0 && i.connectedSession === t.currentSession)
+    return i.connected;
+  const n = i.pending.filter((a) => a.committed);
+  if (n.length !== 1 || i.pending.length !== 1)
+    throw i.pending = [], new r("connected_acquisition_mismatch");
   const c = n[0];
-  if (c === void 0) throw new o("connected_acquisition_mismatch");
-  const r = w.create();
-  return q.set(
-    r,
+  if (c === void 0) throw new r("connected_acquisition_mismatch");
+  const o = w.create();
+  return O.set(
+    o,
     Object.freeze({
-      session: i.currentSession,
+      session: t.currentSession,
       scope: c.scope,
       bindingIdentity: c.bindingIdentity,
-      attempt: i.attempt
+      attempt: t.attempt
     })
-  ), t.pending = [], t.connected = r, t.connectedSession = i.currentSession, r;
+  ), i.pending = [], i.connected = o, i.connectedSession = t.currentSession, o;
 }
-function ie(e) {
-  const i = g.get(e);
-  i !== void 0 && (i.pending = [], i.connected = void 0, i.connectedSession = void 0);
+function oe(e) {
+  const t = g.get(e);
+  t !== void 0 && (t.pending = [], t.connected = void 0, t.connectedSession = void 0);
 }
-function ne(e) {
+function ce(e) {
   w.assertAuthentic(e);
-  const i = q.get(e);
-  if (i === void 0) throw new o("invalid_connected_acquisition");
-  return i;
+  const t = O.get(e);
+  if (t === void 0) throw new r("invalid_connected_acquisition");
+  return t;
 }
-async function oe(e) {
-  const i = e.rawHandoff, t = typeof i != "string" || P(`${C}${i}`) > E;
+async function ae(e) {
+  const t = e.rawHandoff, i = typeof t != "string" || V(`${H}${t}`) > L;
   let n = !1;
   try {
     n = e.clearSensitiveLocation() === !0;
@@ -113,17 +117,17 @@ async function oe(e) {
     n = !1;
   }
   if (!n)
-    throw e.navigateToLauncher(), new o("isolated_location_clear_failed");
-  if (t) throw new o("isolated_handoff_too_large");
-  const c = m(i, "invalid_isolated_handoff"), r = await W(c);
-  if (I.has(r))
-    throw new o("isolated_handoff_consumed");
-  I.add(r);
+    throw e.navigateToLauncher(), new r("isolated_location_clear_failed");
+  if (i) throw new r("isolated_handoff_too_large");
+  const c = m(t, "invalid_isolated_handoff"), o = await G(c);
+  if (D.has(o))
+    throw new r("isolated_handoff_consumed");
+  D.add(o);
   let a;
   try {
     a = JSON.parse(new TextDecoder("utf-8", { fatal: !0 }).decode(c));
   } catch {
-    throw new o("invalid_isolated_handoff");
+    throw new r("invalid_isolated_handoff");
   }
   const d = await F(
     a,
@@ -131,120 +135,120 @@ async function oe(e) {
     e.commitSpend
   );
   let s;
-  const l = b(
+  const l = B(
     d,
     A,
     e.commitSpend,
-    (u) => {
-      s = u;
+    (_) => {
+      s = _;
     },
     () => {
     }
   );
   if (s === void 0 || s.lease !== l)
-    throw new o("isolated_materialization_failed");
-  const p = v.create();
-  return L.set(p, { pending: s, state: "ready" }), p;
+    throw new r("isolated_materialization_failed");
+  const u = v.create();
+  return P.set(u, { pending: s, state: "ready" }), u;
 }
-async function F(e, i, t) {
-  const n = H(e, i), c = await B(
+async function F(e, t, i) {
+  const n = J(e, t), c = await R(
     n.acquisition,
     {
-      commitSpend: t,
+      commitSpend: i,
       expectedConsumer: "isolated",
-      validateSpendBinding: (r) => {
-        J(n, r, i);
+      validateSpendBinding: (o) => {
+        M(n, o, t);
         try {
-          i.validateTargetBinding(r.targetBinding);
+          t.validateTargetBinding(o.targetBinding);
         } catch {
-          throw new o("invalid_spend_binding");
+          throw new r("invalid_spend_binding");
         }
-        return `${r.artifactDigestB64u}.${r.projectionDigestB64u}`;
+        return `${o.artifactDigestB64u}.${o.projectionDigestB64u}`;
       }
     },
-    T
+    E
   );
   if (c.scope.appBasePath !== n.app_path)
-    throw new o("isolated_app_path_mismatch");
+    throw new r("isolated_app_path_mismatch");
   if (c.scope.mode === "controller_bridge") {
-    const r = c.scope.controllerBridge.allowedOrigins;
-    if (r.length !== 1 || r[0] !== n.app_origin)
-      throw new o("isolated_allowed_origins_mismatch");
+    const o = c.scope.controllerBridge.allowedOrigins;
+    if (o.length !== 1 || o[0] !== n.app_origin)
+      throw new r("isolated_allowed_origins_mismatch");
   }
   return c;
 }
-async function re(e, i, t) {
+async function se(e, t, i) {
   const n = g.get(e);
-  if (n === void 0) throw new o("invalid_acquisition_source");
+  if (n === void 0) throw new r("invalid_acquisition_source");
   const c = h(
-    i,
+    t,
     ["v", "runtime_origin", "runtime_handoff_b64u"],
     "invalid_isolated_handoff"
-  ), r = c.runtime_handoff_b64u;
-  if (c.v !== 6 || typeof r != "string" || P(r) > E)
-    throw new o("invalid_isolated_handoff");
-  const a = m(r, "invalid_isolated_handoff");
+  ), o = c.runtime_handoff_b64u;
+  if (c.v !== 6 || typeof o != "string" || V(o) > L)
+    throw new r("invalid_isolated_handoff");
+  const a = m(o, "invalid_isolated_handoff");
   let d;
   try {
     d = JSON.parse(new TextDecoder("utf-8", { fatal: !0 }).decode(a));
   } catch {
-    throw new o("invalid_isolated_handoff");
+    throw new r("invalid_isolated_handoff");
   }
   const s = d, l = {
-    ...t.context,
+    ...i.context,
     runtimeOrigin: f(c.runtime_origin),
     appOrigin: f(s?.app_origin)
-  }, p = await F(
+  }, u = await F(
     d,
     l,
-    t.commitSpend
-  ), u = s?.acquisition;
-  if (!u) throw new o("invalid_isolated_handoff");
-  return t.validateSpendBinding(R(u.spend_scope)), b(
-    p,
+    i.commitSpend
+  ), _ = s?.acquisition;
+  if (!_) throw new r("invalid_isolated_handoff");
+  return i.validateSpendBinding($(_.spend_scope)), B(
+    u,
     A,
-    t.commitSpend,
-    (_) => n.pending.push(_),
-    (_) => {
-      n.pending = n.pending.filter((y) => y !== _);
+    i.commitSpend,
+    (p) => n.pending.push(p),
+    (p) => {
+      n.pending = n.pending.filter((y) => y !== p);
     }
   );
 }
-async function ce(e, i = {}) {
+async function de(e, t = {}) {
   v.assertAuthentic(e);
-  const t = L.get(e);
-  if (t === void 0 || t.state !== "ready")
-    throw new o("isolated_acquisition_consumed");
-  t.state = "connecting";
+  const i = P.get(e);
+  if (i === void 0 || i.state !== "ready")
+    throw new r("isolated_acquisition_consumed");
+  i.state = "connecting";
   try {
-    const { connect: n } = await import("@floegence/flowersec-core/browser"), c = await n(t.pending.lease, i);
-    if (!t.pending.committed)
+    const { connect: n } = await import("@floegence/flowersec-core/browser"), c = await n(i.pending.lease, t);
+    if (!i.pending.committed)
       throw await c.close().catch(() => {
-      }), new o("isolated_spend_not_committed");
-    const r = w.create();
-    return q.set(
-      r,
+      }), new r("isolated_spend_not_committed");
+    const o = w.create();
+    return O.set(
+      o,
       Object.freeze({
         session: c,
-        scope: t.pending.scope,
-        bindingIdentity: t.pending.bindingIdentity,
+        scope: i.pending.scope,
+        bindingIdentity: i.pending.bindingIdentity,
         attempt: 1
       })
-    ), t.state = "consumed", r;
+    ), i.state = "consumed", o;
   } catch (n) {
-    throw t.state = "consumed", n;
+    throw i.state = "consumed", n;
   }
 }
-async function B(e, i, t) {
+async function R(e, t, i) {
   const n = h(
     e,
     ["v", "connect_artifact", "critical_scope_projection_json", "spend_scope"],
     "invalid_acquisition_envelope"
   );
   if (n.v !== 1 || typeof n.connect_artifact != "string" || n.connect_artifact.length === 0 || typeof n.critical_scope_projection_json != "string" || n.critical_scope_projection_json.length === 0)
-    throw new o("invalid_acquisition_envelope");
-  const c = V(n.spend_scope, i.expectedConsumer), r = new TextEncoder().encode(n.connect_artifact), a = new TextEncoder().encode(n.critical_scope_projection_json);
-  await D(r, c.artifact_digest_b64u, "artifact_digest_mismatch"), await D(
+    throw new r("invalid_acquisition_envelope");
+  const c = U(n.spend_scope, t.expectedConsumer), o = new TextEncoder().encode(n.connect_artifact), a = new TextEncoder().encode(n.critical_scope_projection_json);
+  await I(o, c.artifact_digest_b64u, "artifact_digest_mismatch"), await I(
     a,
     c.projection_digest_b64u,
     "projection_digest_mismatch"
@@ -253,7 +257,7 @@ async function B(e, i, t) {
   try {
     d = JSON.parse(n.critical_scope_projection_json);
   } catch {
-    throw new o("invalid_critical_scope_projection");
+    throw new r("invalid_critical_scope_projection");
   }
   const s = h(
     d,
@@ -261,51 +265,51 @@ async function B(e, i, t) {
     "invalid_critical_scope_projection"
   );
   if (s.scope !== "proxy.runtime" || s.scope_version !== 2 || s.critical !== !0)
-    throw new o("invalid_critical_scope_projection");
+    throw new r("invalid_critical_scope_projection");
   let l;
   try {
-    l = U(s.payload);
+    l = C(s.payload);
   } catch {
-    throw new o("invalid_proxy_runtime_scope");
+    throw new r("invalid_proxy_runtime_scope");
   }
-  let p;
+  let u;
   try {
-    p = t(n.connect_artifact);
+    u = i(n.connect_artifact);
   } catch {
-    throw new o("invalid_connect_artifact");
+    throw new r("invalid_connect_artifact");
   }
-  const u = R(c), _ = i.validateSpendBinding(u);
-  if (_ !== void 0 && (typeof _ != "string" || _.trim() === "" || _ !== _.trim()))
-    throw new o("invalid_spend_binding_identity");
+  const _ = $(c), p = t.validateSpendBinding(_);
+  if (p !== void 0 && (typeof p != "string" || p.trim() === "" || p !== p.trim()))
+    throw new r("invalid_spend_binding_identity");
   return Object.freeze({
-    artifact: p,
+    artifact: u,
     scope: l,
-    binding: u,
-    bindingIdentity: _ ?? `${u.artifactDigestB64u}.${u.projectionDigestB64u}`,
+    binding: _,
+    bindingIdentity: p ?? `${_.artifactDigestB64u}.${_.projectionDigestB64u}`,
     receipt: c.receipt
   });
 }
-function b(e, i, t, n, c) {
-  const r = e.artifact, a = e.scope, d = e.binding, s = e.bindingIdentity;
-  let l = e.receipt, p;
-  const u = i(r, async (_) => {
+function B(e, t, i, n, c) {
+  const o = e.artifact, a = e.scope, d = e.binding, s = e.bindingIdentity;
+  let l = e.receipt, u;
+  const _ = t(o, async (p) => {
     const y = l;
-    if (l = void 0, y === void 0) throw new o("spend_binding_consumed");
+    if (l = void 0, y === void 0) throw new r("spend_binding_consumed");
     const k = Object.freeze({
       ...d,
-      attemptId: G(),
+      attemptId: X(),
       receipt: y
     });
     try {
-      await t(k, _), p.committed = !0;
+      await i(k, p), u.committed = !0;
     } catch (N) {
-      throw c(p), N;
+      throw c(u), N;
     }
   });
-  return p = { lease: u, scope: a, bindingIdentity: s, committed: !1 }, n(p), u;
+  return u = { lease: _, scope: a, bindingIdentity: s, committed: !1 }, n(u), _;
 }
-function V(e, i) {
-  const t = h(
+function U(e, t) {
+  const i = h(
     e,
     [
       "v",
@@ -321,24 +325,24 @@ function V(e, i) {
     ],
     "invalid_spend_scope"
   );
-  if (t.v !== 1 || typeof t.receipt != "string" || !M(t.receipt) || typeof t.artifact_digest_b64u != "string" || !x(t.artifact_digest_b64u) || typeof t.projection_digest_b64u != "string" || !x(t.projection_digest_b64u) || t.consumer !== i || typeof t.expires_at != "string" || !Z(t.expires_at) || !S(t.target_binding))
-    throw new o("invalid_spend_scope");
-  const n = f(t.launcher_origin), c = f(t.runtime_origin), r = f(t.app_origin);
-  if (Date.parse(t.expires_at) <= Date.now()) throw new o("expired_spend_scope");
+  if (i.v !== 1 || typeof i.receipt != "string" || !Z(i.receipt) || typeof i.artifact_digest_b64u != "string" || !T(i.artifact_digest_b64u) || typeof i.projection_digest_b64u != "string" || !T(i.projection_digest_b64u) || i.consumer !== t || typeof i.expires_at != "string" || !W(i.expires_at) || !b(i.target_binding))
+    throw new r("invalid_spend_scope");
+  const n = f(i.launcher_origin), c = f(i.runtime_origin), o = f(i.app_origin);
+  if (Date.parse(i.expires_at) <= Date.now()) throw new r("expired_spend_scope");
   return Object.freeze({
     v: 1,
-    receipt: t.receipt,
-    artifact_digest_b64u: t.artifact_digest_b64u,
-    projection_digest_b64u: t.projection_digest_b64u,
+    receipt: i.receipt,
+    artifact_digest_b64u: i.artifact_digest_b64u,
+    projection_digest_b64u: i.projection_digest_b64u,
     launcher_origin: n,
     runtime_origin: c,
-    app_origin: r,
-    consumer: i,
-    target_binding: j(t.target_binding),
-    expires_at: t.expires_at
+    app_origin: o,
+    consumer: t,
+    target_binding: S(i.target_binding),
+    expires_at: i.expires_at
   });
 }
-function R(e) {
+function $(e) {
   return Object.freeze({
     artifactDigestB64u: e.artifact_digest_b64u,
     projectionDigestB64u: e.projection_digest_b64u,
@@ -350,8 +354,8 @@ function R(e) {
     expiresAt: e.expires_at
   });
 }
-function H(e, i) {
-  const t = h(
+function J(e, t) {
+  const i = h(
     e,
     [
       "v",
@@ -368,126 +372,118 @@ function H(e, i) {
     ],
     "invalid_isolated_handoff"
   );
-  if (t.v !== 6 || t.env_public_id !== i.envPublicId || t.floe_app !== i.floeApp || t.code_space_id !== i.codeSpaceId || t.app_path !== i.appPath || t.launcher_kind !== i.launcherKind || t.launcher_id !== i.launcherId || t.launcher_origin !== i.launcherOrigin || t.runtime_origin !== i.runtimeOrigin || t.app_origin !== i.appOrigin)
-    throw new o("isolated_context_mismatch");
-  return f(t.launcher_origin), f(t.runtime_origin), f(t.app_origin), t;
+  if (i.v !== 6 || i.env_public_id !== t.envPublicId || i.floe_app !== t.floeApp || i.code_space_id !== t.codeSpaceId || i.app_path !== t.appPath || i.launcher_kind !== t.launcherKind || i.launcher_id !== t.launcherId || i.launcher_origin !== t.launcherOrigin || i.runtime_origin !== t.runtimeOrigin || i.app_origin !== t.appOrigin)
+    throw new r("isolated_context_mismatch");
+  return f(i.launcher_origin), f(i.runtime_origin), f(i.app_origin), i;
 }
-function J(e, i, t) {
-  if (i.consumer !== "isolated" || i.launcherOrigin !== e.launcher_origin || i.runtimeOrigin !== e.runtime_origin || i.appOrigin !== e.app_origin || e.runtime_origin !== t.runtimeOrigin || e.app_origin !== t.appOrigin)
-    throw new o("isolated_spend_binding_mismatch");
+function M(e, t, i) {
+  if (t.consumer !== "isolated" || t.launcherOrigin !== e.launcher_origin || t.runtimeOrigin !== e.runtime_origin || t.appOrigin !== e.app_origin || e.runtime_origin !== i.runtimeOrigin || e.app_origin !== i.appOrigin)
+    throw new r("isolated_spend_binding_mismatch");
 }
-function h(e, i, t) {
+function h(e, t, i) {
   if (e === null || typeof e != "object" || Array.isArray(e))
-    throw new o(t);
-  const n = e, c = new Set(i), r = Object.keys(n);
-  if (r.length !== i.length || r.some((a) => !c.has(a)))
-    throw new o(t);
+    throw new r(i);
+  const n = e, c = new Set(t), o = Object.keys(n);
+  if (o.length !== t.length || o.some((a) => !c.has(a)))
+    throw new r(i);
   return n;
 }
 function f(e) {
-  if (typeof e != "string") throw new o("invalid_spend_scope");
-  let i;
+  if (typeof e != "string") throw new r("invalid_spend_scope");
+  let t;
   try {
-    i = new URL(e);
+    t = new URL(e);
   } catch {
-    throw new o("invalid_spend_scope");
+    throw new r("invalid_spend_scope");
   }
-  if (i.protocol !== "https:" && i.protocol !== "http:" || i.origin !== e || i.username !== "" || i.password !== "")
-    throw new o("invalid_spend_scope");
+  if (t.protocol !== "https:" && t.protocol !== "http:" || t.origin !== e || t.username !== "" || t.password !== "")
+    throw new r("invalid_spend_scope");
   return e;
 }
-function M(e) {
-  const i = /^r1\.([A-Za-z0-9_-]{1,64})\.([A-Za-z0-9_-]+)$/u.exec(e);
-  if (i === null || i[2] === void 0) return !1;
+function Z(e) {
+  const t = /^r1\.([A-Za-z0-9_-]{1,64})\.([A-Za-z0-9_-]+)$/u.exec(e);
+  if (t === null || t[2] === void 0) return !1;
   try {
-    return m(i[2], "invalid_spend_scope").length === O;
+    return m(t[2], "invalid_spend_scope").length === j;
   } catch {
     return !1;
   }
 }
-function x(e) {
+function T(e) {
   try {
-    return m(e, "invalid_spend_scope").length === O;
+    return m(e, "invalid_spend_scope").length === j;
   } catch {
     return !1;
   }
 }
-function Z(e) {
+function W(e) {
   return /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z$/u.test(e) ? Number.isFinite(Date.parse(e)) : !1;
 }
-function S(e, i = 0) {
-  return i > 32 ? !1 : e === null || typeof e == "string" || typeof e == "boolean" ? !0 : typeof e == "number" ? Number.isFinite(e) : Array.isArray(e) ? e.every((t) => S(t, i + 1)) : typeof e != "object" ? !1 : Object.values(e).every(
-    (t) => S(t, i + 1)
+function b(e, t = 0) {
+  return t > 32 ? !1 : e === null || typeof e == "string" || typeof e == "boolean" ? !0 : typeof e == "number" ? Number.isFinite(e) : Array.isArray(e) ? e.every((i) => b(i, t + 1)) : typeof e != "object" ? !1 : Object.values(e).every(
+    (i) => b(i, t + 1)
   );
 }
-function j(e) {
+function S(e) {
   if (Array.isArray(e)) {
-    for (const i of e) j(i);
+    for (const t of e) S(t);
     return Object.freeze(e);
   }
   if (e !== null && typeof e == "object") {
-    for (const i of Object.values(e)) j(i);
+    for (const t of Object.values(e)) S(t);
     return Object.freeze(e);
   }
   return e;
 }
-async function D(e, i, t) {
-  const n = await $(e), c = m(i, t);
-  if (n.length !== c.length) throw new o(t);
-  let r = 0;
+async function I(e, t, i) {
+  const n = await x(e), c = m(t, i);
+  if (n.length !== c.length) throw new r(i);
+  let o = 0;
   for (let a = 0; a < n.length; a += 1)
-    r |= n[a] ^ c[a];
-  if (r !== 0) throw new o(t);
-}
-async function W(e) {
-  return z(await $(e));
-}
-async function $(e) {
-  if (globalThis.crypto?.subtle === void 0)
-    throw new o("acquisition_crypto_unavailable");
-  const i = e.buffer.slice(
-    e.byteOffset,
-    e.byteOffset + e.byteLength
-  ), t = await globalThis.crypto.subtle.digest("SHA-256", i);
-  return new Uint8Array(t);
-}
-function G() {
+    o |= n[a] ^ c[a];
+  if (o !== 0) throw new r(i);
+}
+async function G(e) {
+  return z(await x(e));
+}
+function X() {
   if (globalThis.crypto?.getRandomValues === void 0)
-    throw new o("acquisition_entropy_unavailable");
-  return z(globalThis.crypto.getRandomValues(new Uint8Array(O)));
+    throw new r("acquisition_entropy_unavailable");
+  return z(globalThis.crypto.getRandomValues(new Uint8Array(j)));
 }
-function m(e, i) {
-  if (!/^[A-Za-z0-9_-]*$/u.test(e) || e.length % 4 === 1) throw new o(i);
-  const t = e.replace(/-/gu, "+").replace(/_/gu, "/") + "=".repeat((4 - e.length % 4) % 4);
+function m(e, t) {
+  if (!/^[A-Za-z0-9_-]*$/u.test(e) || e.length % 4 === 1) throw new r(t);
+  const i = e.replace(/-/gu, "+").replace(/_/gu, "/") + "=".repeat((4 - e.length % 4) % 4);
   let n;
   try {
-    n = atob(t);
+    n = atob(i);
   } catch {
-    throw new o(i);
+    throw new r(t);
   }
-  const c = Uint8Array.from(n, (r) => r.charCodeAt(0));
-  if (z(c) !== e) throw new o(i);
+  const c = Uint8Array.from(n, (o) => o.charCodeAt(0));
+  if (z(c) !== e) throw new r(t);
   return c;
 }
 function z(e) {
-  let i = "";
-  for (const t of e) i += String.fromCharCode(t);
-  return btoa(i).replace(/\+/gu, "-").replace(/\//gu, "_").replace(/=+$/u, "");
+  let t = "";
+  for (const i of e) t += String.fromCharCode(i);
+  return btoa(t).replace(/\+/gu, "-").replace(/\//gu, "_").replace(/=+$/u, "");
 }
-function P(e) {
+function V(e) {
   return new TextEncoder().encode(e).length;
 }
 export {
-  o as AcquisitionError,
+  r as AcquisitionError,
   w as ConnectedAcquisition,
   v as IsolatedOneShotAcquisition,
-  ie as clearAcquisitionSource,
-  ce as connectIsolatedOneShot,
-  ne as connectedAcquisitionDetails,
-  Q as materializeAcquisitionForSource,
-  oe as materializeIsolatedOneShot,
-  re as materializeNativeIsolatedAcquisitionForSource,
-  ee as materializePrivateLoopbackAcquisitionForSource,
-  K as registerAcquisitionSource,
-  te as synchronizeAcquisitionSourceSnapshot
+  oe as clearAcquisitionSource,
+  de as connectIsolatedOneShot,
+  ce as connectedAcquisitionDetails,
+  te as materializeAcquisitionForSource,
+  ne as materializeHTTPDirectAcquisitionForSource,
+  ae as materializeIsolatedOneShot,
+  se as materializeNativeIsolatedAcquisitionForSource,
+  ie as materializePrivateLoopbackAcquisitionForSource,
+  ee as registerAcquisitionSource,
+  re as synchronizeAcquisitionSourceSnapshot
 };

package/dist/artifact-source.d.ts

@@ -1,5 +1,5 @@
 import type { ArtifactSource, JsonObject, RetryDisposition } from '@floegence/flowersec-core';
-import type { PrivateLoopbackArtifactSourceV1 } from '@floegence/flowersec-core/browser';
+import type { HTTPDirectArtifactSourceV1, PrivateLoopbackArtifactSourceV1 } from '@floegence/flowersec-core/browser';
 import { type NativeIsolatedAcquisitionContext, type CommitSpend, type ValidateSpendBinding } from './acquisition';
 export type ControlplaneArtifactSourceOptions = Readonly<{
     baseUrl: string;
@@ -16,6 +16,7 @@ export type ControlplaneArtifactSourceOptions = Readonly<{
     retryableBusinessCodes?: readonly string[];
 }>;
 export type PrivateLoopbackControlplaneArtifactSourceOptions = Omit<ControlplaneArtifactSourceOptions, 'allowLoopbackHTTP' | 'entryTicket'>;
+export type HTTPDirectControlplaneArtifactSourceOptions = Omit<ControlplaneArtifactSourceOptions, 'allowLoopbackHTTP' | 'entryTicket'>;
 export declare class ControlplaneRequestError extends Error {
     readonly status: number;
     readonly code: string;
@@ -42,3 +43,7 @@ export declare function createIsolatedControlplaneArtifactSource(options: Contro
     isolatedContext: NativeIsolatedAcquisitionContext;
 }>): ArtifactSource;
 export declare function createPrivateLoopbackControlplaneArtifactSource(options: PrivateLoopbackControlplaneArtifactSourceOptions): PrivateLoopbackArtifactSourceV1;
+/** Explicit HTTP acquisition; the HTTP Direct controller validates the session origin.
+ * This never changes the transport policy of the TLS or private-loopback sources.
+ */
+export declare function createHTTPDirectControlplaneArtifactSource(options: HTTPDirectControlplaneArtifactSourceOptions): HTTPDirectArtifactSourceV1;

package/dist/artifact-source.js

@@ -1,6 +1,6 @@
-import { registerAcquisitionSource as u, materializeNativeIsolatedAcquisitionForSource as S, AcquisitionError as m, materializeAcquisitionForSource as k, materializePrivateLoopbackAcquisitionForSource as _ } from "./acquisition.js";
-const h = /^[a-z][a-z0-9_]{0,63}$/u;
-class s extends Error {
+import { registerAcquisitionSource as d, materializeHTTPDirectAcquisitionForSource as S, materializeNativeIsolatedAcquisitionForSource as _, AcquisitionError as h, materializeAcquisitionForSource as k, materializePrivateLoopbackAcquisitionForSource as z } from "./acquisition.js";
+const m = /^[a-z][a-z0-9_]{0,63}$/u;
+class c extends Error {
   constructor(r, t) {
     super(`Floe controlplane request failed (code=${t})`), this.status = r, this.code = t, this.name = "ControlplaneRequestError";
   }
@@ -9,23 +9,23 @@ function v(e) {
   const r = e.toLowerCase();
   return r === "localhost" || r === "::1" || r === "127.0.0.1" || r.startsWith("127.");
 }
-function z(e, r) {
+function j(e, r) {
   let t;
   try {
     t = new URL(e);
   } catch {
-    throw new s(0, "transport_policy_denied");
+    throw new c(0, "transport_policy_denied");
   }
   if (t.protocol !== "https:" && !(r && t.protocol === "http:" && v(t.hostname)))
-    throw new s(0, "transport_policy_denied");
+    throw new c(0, "transport_policy_denied");
   return t.pathname = t.pathname.replace(/\/+$/u, ""), t;
 }
-function j(e, r) {
+function A(e, r) {
   const t = r === void 0 ? "/v1/connect/artifact" : "/v1/connect/artifact/entry", o = e.pathname === "/" ? "" : e.pathname;
   return new URL(`${o}${t}`, e).toString();
 }
 function O(e) {
-  if (!h.test(e.code))
+  if (!m.test(e.code))
     return Object.freeze({
       code: "invalid_error_code",
       disposition: Object.freeze({ kind: "terminal" })
@@ -33,7 +33,7 @@ function O(e) {
   if (new Set(e.retryableBusinessCodes ?? []).has(e.code))
     return Object.freeze({ code: e.code, disposition: Object.freeze({ kind: "retryable" }) });
   if (e.status === 429) {
-    const t = T(e.retryAfter, e.nowUnixMilliseconds ?? Date.now());
+    const t = L(e.retryAfter, e.nowUnixMilliseconds ?? Date.now());
     return Object.freeze({
       code: e.code,
       disposition: Object.freeze(t === void 0 ? { kind: "retryable" } : { kind: "retry_after", notBeforeUnixMilliseconds: t })
@@ -41,42 +41,59 @@ function O(e) {
   }
   return e.status === 408 || e.status === 425 || e.status >= 500 ? Object.freeze({ code: e.code, disposition: Object.freeze({ kind: "retryable" }) }) : Object.freeze({ code: e.code, disposition: Object.freeze({ kind: "terminal" }) });
 }
-function L(e) {
-  const r = p(e, k);
-  return u(r), r;
+function U(e) {
+  const r = l(e, k);
+  return d(r), r;
 }
 function I(e) {
-  const r = p(
+  const r = l(
     e,
-    (t, o, i) => S(t, o, {
+    (t, o, i) => _(t, o, {
       ...i,
       context: e.isolatedContext
     }),
     "isolated"
   );
-  return u(r), r;
+  return d(r), r;
 }
 function N(e) {
-  const r = A(e.baseUrl), t = p(
+  const r = T(e.baseUrl), t = l(
     { ...e, baseUrl: r.origin, allowLoopbackHTTP: !0 },
-    _
+    z
+  );
+  return d(t), t;
+}
+function P(e) {
+  let r;
+  try {
+    r = new URL(e.baseUrl);
+  } catch {
+    throw new c(0, "transport_policy_denied");
+  }
+  if (e.baseUrl !== r.origin || r.protocol !== "http:")
+    throw new c(0, "transport_policy_denied");
+  const t = l(
+    e,
+    S,
+    "trusted",
+    r
   );
-  return u(t), t;
+  return d(t), t;
 }
-function p(e, r, t = "trusted") {
+function l(e, r, t = "trusted", o = j(e.baseUrl, e.allowLoopbackHTTP === !0)) {
   if (typeof e.commitSpend != "function") throw new TypeError("commitSpend is required");
   if (typeof e.validateSpendBinding != "function")
     throw new TypeError("validateSpendBinding is required");
-  const o = e.fetch ?? globalThis.fetch;
-  if (typeof o != "function") throw new TypeError("fetch is required");
-  const i = z(e.baseUrl, e.allowLoopbackHTTP === !0), c = j(i, e.entryTicket), b = {
-    acquire: async ({ signal: d }) => {
+  const i = e.fetch ?? globalThis.fetch;
+  if (typeof i != "function") throw new TypeError("fetch is required");
+  const a = A(o, e.entryTicket), y = {
+    acquire: async ({ signal: u }) => {
       try {
         const n = {
           endpoint_id: e.endpointId,
           ...e.payload === void 0 ? {} : { payload: e.payload },
           ...e.entryTicket === void 0 && e.correlation !== void 0 ? { correlation: { trace_id: e.correlation.traceId } } : {}
-        }, a = await o(c, {
+        }, s = await i(a, {
           method: "POST",
           headers: {
             accept: "application/json",
@@ -86,39 +103,39 @@ function p(e, r, t = "trusted") {
           body: JSON.stringify(n),
           credentials: "omit",
           redirect: "error",
-          signal: d
+          signal: u
         });
-        if (!a.ok) {
-          const l = await g(a);
+        if (!s.ok) {
+          const f = await E(s);
           return { kind: "failure", ...O({
-            status: a.status,
-            code: l,
-            retryAfter: a.headers.get("retry-after"),
+            status: s.status,
+            code: f,
+            retryAfter: s.headers.get("retry-after"),
             retryableBusinessCodes: e.retryableBusinessCodes
           }) };
         }
-        let y;
+        let b;
         try {
-          y = await a.json();
+          b = await s.json();
         } catch {
-          return f("invalid_controlplane_response");
+          return p("invalid_controlplane_response");
         }
-        const w = await r(b, y, {
+        const w = await r(y, b, {
           commitSpend: e.commitSpend,
-          validateSpendBinding: (l) => {
+          validateSpendBinding: (f) => {
             try {
-              return e.validateSpendBinding(l);
+              return e.validateSpendBinding(f);
             } catch {
-              throw new m("invalid_spend_binding");
+              throw new h("invalid_spend_binding");
             }
           },
           expectedConsumer: t
         });
         return Object.freeze({ kind: "lease", lease: w });
       } catch (n) {
-        if (d.aborted) throw d.reason ?? new DOMException("Aborted", "AbortError");
+        if (u.aborted) throw u.reason ?? new DOMException("Aborted", "AbortError");
         if (n instanceof DOMException && n.name === "AbortError") throw n;
-        return n instanceof m || n instanceof s ? f(n.code) : Object.freeze({
+        return n instanceof h || n instanceof c ? p(n.code) : Object.freeze({
           kind: "failure",
           code: "network_error",
           disposition: Object.freeze({ kind: "retryable" })
@@ -126,17 +143,17 @@ function p(e, r, t = "trusted") {
       }
     }
   };
-  return b;
+  return y;
 }
-function A(e) {
+function T(e) {
   let r;
   try {
     r = new URL(e);
   } catch {
-    throw new s(0, "transport_policy_denied");
+    throw new c(0, "transport_policy_denied");
   }
-  if (e !== r.origin || r.protocol !== "http:" || r.username !== "" || r.password !== "" || !C(r.port) || !E(r.hostname))
-    throw new s(0, "transport_policy_denied");
+  if (e !== r.origin || r.protocol !== "http:" || r.username !== "" || r.password !== "" || !C(r.port) || !g(r.hostname))
+    throw new c(0, "transport_policy_denied");
   return r;
 }
 function C(e) {
@@ -144,10 +161,10 @@ function C(e) {
   const r = Number(e);
   return Number.isSafeInteger(r) && r >= 1024 && r <= 65535;
 }
-function E(e) {
+function g(e) {
   return e === "127.0.0.1" || e === "[::1]";
 }
-async function g(e) {
+async function E(e) {
   try {
     const r = await e.json();
     if (r !== null && typeof r == "object" && !Array.isArray(r)) {
@@ -161,29 +178,30 @@ async function g(e) {
   }
   return "request_failed";
 }
-function T(e, r) {
+function L(e, r) {
   if (e == null) return;
   const t = e.trim();
   if (/^\d+$/u.test(t)) {
     const i = Number(t);
     if (!Number.isSafeInteger(i)) return;
-    const c = r + i * 1e3;
-    return Number.isSafeInteger(c) && c > r ? c : void 0;
+    const a = r + i * 1e3;
+    return Number.isSafeInteger(a) && a > r ? a : void 0;
   }
   const o = Date.parse(t);
   return Number.isSafeInteger(o) && o > r ? o : void 0;
 }
-function f(e) {
+function p(e) {
   return Object.freeze({
     kind: "failure",
-    code: h.test(e) ? e : "invalid_error_code",
+    code: m.test(e) ? e : "invalid_error_code",
     disposition: Object.freeze({ kind: "terminal" })
   });
 }
 export {
-  s as ControlplaneRequestError,
+  c as ControlplaneRequestError,
   O as classifyControlplaneFailure,
-  L as createControlplaneArtifactSource,
+  U as createControlplaneArtifactSource,
+  P as createHTTPDirectControlplaneArtifactSource,
   I as createIsolatedControlplaneArtifactSource,
   N as createPrivateLoopbackControlplaneArtifactSource
 };

package/dist/connection.d.ts

@@ -1,5 +1,5 @@
 import type { ArtifactSource } from '@floegence/flowersec-core';
-import type { ConnectionControllerOptions, PrivateLoopbackArtifactSourceV1, PrivateLoopbackConnectionControllerOptionsV1 } from '@floegence/flowersec-core/browser';
+import type { ConnectionControllerOptions, HTTPDirectArtifactSourceV1, HTTPDirectConnectionControllerOptionsV1, PrivateLoopbackArtifactSourceV1, PrivateLoopbackConnectionControllerOptionsV1 } from '@floegence/flowersec-core/browser';
 import { type AcquisitionConnectionLifecycle } from './acquisition-lifecycle';
 import type { ConnectedAcquisition } from './acquisition';
 import type { ProxyBootstrapOwner } from './proxy-bootstrap';
@@ -10,9 +10,16 @@ export type FlowersecConnectionConfig = SharedFlowersecConnectionConfig & (Reado
     source: ArtifactSource;
     controller?: ConnectionControllerOptions;
     privateLoopback?: never;
+    httpDirect?: never;
 }> | Readonly<{
     source: PrivateLoopbackArtifactSourceV1;
     privateLoopback: PrivateLoopbackConnectionControllerOptionsV1;
+    httpDirect?: never;
+    controller?: never;
+}> | Readonly<{
+    source: HTTPDirectArtifactSourceV1;
+    httpDirect: HTTPDirectConnectionControllerOptionsV1;
+    privateLoopback?: never;
     controller?: never;
 }>);
 type AcquisitionConnectionOptions = Readonly<{
@@ -27,6 +34,12 @@ export type PrivateLoopbackDirectConnectionOptions = Readonly<{
     privateLoopback: PrivateLoopbackConnectionControllerOptionsV1;
     onConnected?: (acquisition: ConnectedAcquisition) => void;
 }>;
+export type HTTPDirectConnectionOptions = Readonly<{
+    source: HTTPDirectArtifactSourceV1;
+    httpDirect: HTTPDirectConnectionControllerOptionsV1;
+    onConnected?: (acquisition: ConnectedAcquisition) => void;
+}>;
+export declare function createHTTPDirectConnectionConfig(options: HTTPDirectConnectionOptions): FlowersecConnectionConfig;
 export type ProxyRuntimeTunnelConnectionOptions = AcquisitionConnectionOptions & Readonly<{
     proxyBootstrap: ProxyBootstrapOwner;
 }>;

package/dist/connection.js

@@ -1,35 +1,45 @@
-import { createAcquisitionConnectionLifecycle as r } from "./acquisition-lifecycle.js";
-function t(e) {
-  return n(e);
+import { createAcquisitionConnectionLifecycle as c } from "./acquisition-lifecycle.js";
+function o(e) {
+  return Object.freeze({
+    source: e.source,
+    httpDirect: e.httpDirect,
+    lifecycle: c(e.source, {
+      ...e.onConnected === void 0 ? {} : { onConnected: e.onConnected }
+    })
+  });
 }
 function i(e) {
-  return n(e, e.proxyBootstrap);
+  return n(e);
 }
 function u(e) {
-  return n(e);
+  return n(e, e.proxyBootstrap);
 }
 function f(e) {
+  return n(e);
+}
+function C(e) {
   return Object.freeze({
     source: e.source,
     privateLoopback: e.privateLoopback,
-    lifecycle: r(e.source, {
+    lifecycle: c(e.source, {
       ...e.onConnected === void 0 ? {} : { onConnected: e.onConnected }
     })
   });
 }
-function n(e, c) {
+function n(e, r) {
   return Object.freeze({
     source: e.source,
     ...e.controller === void 0 ? {} : { controller: e.controller },
-    lifecycle: r(e.source, {
-      ...c === void 0 ? {} : { proxyBootstrap: c },
+    lifecycle: c(e.source, {
+      ...r === void 0 ? {} : { proxyBootstrap: r },
       ...e.onConnected === void 0 ? {} : { onConnected: e.onConnected }
     })
   });
 }
 export {
-  u as createArtifactDirectConnectionConfig,
-  t as createArtifactTunnelConnectionConfig,
-  f as createPrivateLoopbackDirectConnectionConfig,
-  i as createProxyRuntimeTunnelConnectionConfig
+  f as createArtifactDirectConnectionConfig,
+  i as createArtifactTunnelConnectionConfig,
+  o as createHTTPDirectConnectionConfig,
+  C as createPrivateLoopbackDirectConnectionConfig,
+  u as createProxyRuntimeTunnelConnectionConfig
 };

package/dist/index.d.ts

@@ -3,15 +3,15 @@ export type { WaitForMessageOptions } from './messaging';
 export { postMessageToOrigins, waitForMessage } from './messaging';
 export { getSessionStorage, removeSessionStorage, setSessionStorage } from './storage';
 export type { ArtifactSource, ArtifactSourceResult } from '@floegence/flowersec-core';
-export { createControlplaneArtifactSource, createIsolatedControlplaneArtifactSource, createPrivateLoopbackControlplaneArtifactSource, ControlplaneRequestError, } from './artifact-source';
+export { createControlplaneArtifactSource, createHTTPDirectControlplaneArtifactSource, createIsolatedControlplaneArtifactSource, createPrivateLoopbackControlplaneArtifactSource, ControlplaneRequestError, } from './artifact-source';
 export { classifyControlplaneFailure } from './artifact-source';
-export type { ClassifiedControlplaneFailure, ControlplaneArtifactSourceOptions, ControlplaneFailureInput, PrivateLoopbackControlplaneArtifactSourceOptions, } from './artifact-source';
-export { AcquisitionError, clearAcquisitionSource, connectIsolatedOneShot, ConnectedAcquisition, IsolatedOneShotAcquisition, materializePrivateLoopbackAcquisitionForSource, materializeIsolatedOneShot, synchronizeAcquisitionSourceSnapshot, } from './acquisition';
+export type { ClassifiedControlplaneFailure, ControlplaneArtifactSourceOptions, HTTPDirectControlplaneArtifactSourceOptions, ControlplaneFailureInput, PrivateLoopbackControlplaneArtifactSourceOptions, } from './artifact-source';
+export { AcquisitionError, clearAcquisitionSource, connectIsolatedOneShot, ConnectedAcquisition, IsolatedOneShotAcquisition, materializePrivateLoopbackAcquisitionForSource, materializeHTTPDirectAcquisitionForSource, materializeIsolatedOneShot, synchronizeAcquisitionSourceSnapshot, } from './acquisition';
 export type { CommitSpend, CriticalScopeProjectionV1, IsolatedHandoffValidationContext, MaterializeIsolatedOneShotOptions, RuntimeBootInitPayloadV6, SerializedAcquisitionEnvelopeV1, SpendBindingView, SpendCommitRequest, SpendScopeV1, ValidateSpendBinding, } from './acquisition';
 export { createAcquisitionConnectionLifecycle } from './acquisition-lifecycle';
 export type { AcquisitionConnectionLifecycle, AcquisitionConnectionLifecycleOptions, } from './acquisition-lifecycle';
-export type { DirectArtifactConnectionOptions, FlowersecConnectionConfig, PrivateLoopbackDirectConnectionOptions, ProxyRuntimeTunnelConnectionOptions, TunnelArtifactConnectionOptions, } from './connection';
-export { createArtifactDirectConnectionConfig, createArtifactTunnelConnectionConfig, createPrivateLoopbackDirectConnectionConfig, createProxyRuntimeTunnelConnectionConfig, } from './connection';
+export type { DirectArtifactConnectionOptions, HTTPDirectConnectionOptions, FlowersecConnectionConfig, PrivateLoopbackDirectConnectionOptions, ProxyRuntimeTunnelConnectionOptions, TunnelArtifactConnectionOptions, } from './connection';
+export { createArtifactDirectConnectionConfig, createHTTPDirectConnectionConfig, createArtifactTunnelConnectionConfig, createPrivateLoopbackDirectConnectionConfig, createProxyRuntimeTunnelConnectionConfig, } from './connection';
 export type { FetchServerSentEventsOptions, ServerSentEvent, ServerSentEventStreamErrorCode, } from './server-sent-events';
 export { fetchServerSentEvents, ServerSentEventStreamError } from './server-sent-events';
 export { closeProxyBootstrap, createProxyBootstrapOwner, ProxyBootstrapOwner, synchronizeProxyBootstrap, } from './proxy-bootstrap';

package/dist/index.js

@@ -1,42 +1,45 @@
 import { clearLocationHash as r, parseHashParam as t } from "./hash.js";
 import { postMessageToOrigins as i, waitForMessage as a } from "./messaging.js";
 import { getSessionStorage as s, removeSessionStorage as l, setSessionStorage as p } from "./storage.js";
-import { ControlplaneRequestError as S, classifyControlplaneFailure as u, createControlplaneArtifactSource as m, createIsolatedControlplaneArtifactSource as C, createPrivateLoopbackControlplaneArtifactSource as x } from "./artifact-source.js";
-import { AcquisitionError as g, ConnectedAcquisition as h, IsolatedOneShotAcquisition as y, clearAcquisitionSource as P, connectIsolatedOneShot as q, materializeIsolatedOneShot as v, materializePrivateLoopbackAcquisitionForSource as O, synchronizeAcquisitionSourceSnapshot as d } from "./acquisition.js";
-import { createAcquisitionConnectionLifecycle as L } from "./acquisition-lifecycle.js";
-import { createArtifactDirectConnectionConfig as B, createArtifactTunnelConnectionConfig as I, createPrivateLoopbackDirectConnectionConfig as b, createProxyRuntimeTunnelConnectionConfig as k } from "./connection.js";
-import { ServerSentEventStreamError as F, fetchServerSentEvents as T } from "./server-sent-events.js";
-import { ProxyBootstrapOwner as H, closeProxyBootstrap as M, createProxyBootstrapOwner as R, synchronizeProxyBootstrap as j } from "./proxy-bootstrap.js";
+import { ControlplaneRequestError as S, classifyControlplaneFailure as u, createControlplaneArtifactSource as C, createHTTPDirectControlplaneArtifactSource as m, createIsolatedControlplaneArtifactSource as x, createPrivateLoopbackControlplaneArtifactSource as A } from "./artifact-source.js";
+import { AcquisitionError as P, ConnectedAcquisition as h, IsolatedOneShotAcquisition as q, clearAcquisitionSource as y, connectIsolatedOneShot as T, materializeHTTPDirectAcquisitionForSource as v, materializeIsolatedOneShot as O, materializePrivateLoopbackAcquisitionForSource as d, synchronizeAcquisitionSourceSnapshot as z } from "./acquisition.js";
+import { createAcquisitionConnectionLifecycle as E } from "./acquisition-lifecycle.js";
+import { createArtifactDirectConnectionConfig as L, createArtifactTunnelConnectionConfig as B, createHTTPDirectConnectionConfig as F, createPrivateLoopbackDirectConnectionConfig as I, createProxyRuntimeTunnelConnectionConfig as b } from "./connection.js";
+import { ServerSentEventStreamError as w, fetchServerSentEvents as M } from "./server-sent-events.js";
+import { ProxyBootstrapOwner as j, closeProxyBootstrap as G, createProxyBootstrapOwner as J, synchronizeProxyBootstrap as K } from "./proxy-bootstrap.js";
 export {
-  g as AcquisitionError,
+  P as AcquisitionError,
   h as ConnectedAcquisition,
   S as ControlplaneRequestError,
-  y as IsolatedOneShotAcquisition,
-  H as ProxyBootstrapOwner,
-  F as ServerSentEventStreamError,
+  q as IsolatedOneShotAcquisition,
+  j as ProxyBootstrapOwner,
+  w as ServerSentEventStreamError,
   u as classifyControlplaneFailure,
-  P as clearAcquisitionSource,
+  y as clearAcquisitionSource,
   r as clearLocationHash,
-  M as closeProxyBootstrap,
-  q as connectIsolatedOneShot,
-  L as createAcquisitionConnectionLifecycle,
-  B as createArtifactDirectConnectionConfig,
-  I as createArtifactTunnelConnectionConfig,
-  m as createControlplaneArtifactSource,
-  C as createIsolatedControlplaneArtifactSource,
-  x as createPrivateLoopbackControlplaneArtifactSource,
-  b as createPrivateLoopbackDirectConnectionConfig,
-  R as createProxyBootstrapOwner,
-  k as createProxyRuntimeTunnelConnectionConfig,
-  T as fetchServerSentEvents,
+  G as closeProxyBootstrap,
+  T as connectIsolatedOneShot,
+  E as createAcquisitionConnectionLifecycle,
+  L as createArtifactDirectConnectionConfig,
+  B as createArtifactTunnelConnectionConfig,
+  C as createControlplaneArtifactSource,
+  F as createHTTPDirectConnectionConfig,
+  m as createHTTPDirectControlplaneArtifactSource,
+  x as createIsolatedControlplaneArtifactSource,
+  A as createPrivateLoopbackControlplaneArtifactSource,
+  I as createPrivateLoopbackDirectConnectionConfig,
+  J as createProxyBootstrapOwner,
+  b as createProxyRuntimeTunnelConnectionConfig,
+  M as fetchServerSentEvents,
   s as getSessionStorage,
-  v as materializeIsolatedOneShot,
-  O as materializePrivateLoopbackAcquisitionForSource,
+  v as materializeHTTPDirectAcquisitionForSource,
+  O as materializeIsolatedOneShot,
+  d as materializePrivateLoopbackAcquisitionForSource,
   t as parseHashParam,
   i as postMessageToOrigins,
   l as removeSessionStorage,
   p as setSessionStorage,
-  d as synchronizeAcquisitionSourceSnapshot,
-  j as synchronizeProxyBootstrap,
+  z as synchronizeAcquisitionSourceSnapshot,
+  K as synchronizeProxyBootstrap,
   a as waitForMessage
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floegence/floe-webapp-boot",
-  "version": "0.52.13",
+  "version": "0.53.1",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -35,7 +35,8 @@
     "clean": "rm -rf dist *.tsbuildinfo"
   },
   "dependencies": {
-    "@floegence/flowersec-core": "5.1.0"
+    "@floegence/flowersec-core": "5.2.0",
+    "@noble/hashes": "2.4.0"
   },
   "devDependencies": {
     "typescript": "^5.9.3",