@floegence/flowersec-core 2.2.0 → 2.3.0

package/README.md

@@ -2,12 +2,12 @@
 
 `@floegence/flowersec-core` is the ESM-only Flowersec v2 SDK for browsers and Node.js. Its public package surface is limited to the root, `/browser`, `/node`, and `/proxy` entrypoints.
 
-Flowersec 2.2.0 is the coordinated TypeScript SDK release.
+Flowersec 2.3.0 is the coordinated TypeScript SDK release.
 
 ## Install
 
 ```bash
-npm install @floegence/flowersec-core@2.2.0
+npm install @floegence/flowersec-core@2.3.0
 ```
 
 ## Public API

package/dist/v2/artifact.js

@@ -454,12 +454,17 @@ function normalizeCandidateURL(kind, carrier, raw) {
         default:
             throw invalidCandidate("carrier registry");
     }
-    if (scheme !== expectedScheme)
+    const loopbackPlaintext = carrier === "websocket" && scheme === "ws" && kind === "direct" && isLoopbackHost(normalizedAuthority);
+    if (scheme !== expectedScheme && !loopbackPlaintext)
         throw invalidCandidate("carrier scheme");
     if (carrier !== "raw_quic" && path !== expectedPath)
         throw invalidCandidate("carrier URL path");
     return `${scheme}://${normalizedAuthority}${path}`;
 }
+function isLoopbackHost(authority) {
+    const host = authority.startsWith("[") ? authority.slice(1, authority.indexOf("]")) : authority.split(":")[0];
+    return host === "127.0.0.1" || host === "::1";
+}
 function normalizeAuthority(authority) {
     let host;
     let portText = "";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floegence/flowersec-core",
-  "version": "2.2.0",
+  "version": "2.3.0",
   "description": "Flowersec core TypeScript library for carrier-neutral encrypted sessions and multiplexed streams.",
   "license": "MIT",
   "repository": {

package/sbom/cyclonedx.json

@@ -1,20 +1,20 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:bc52a8d0-b65e-526a-8c9c-99b53b08194a",
+  "serialNumber": "urn:uuid:cf8e8ff3-da93-5d33-8d7d-3757e60b3f70",
   "version": 1,
   "metadata": {
     "component": {
       "type": "library",
       "name": "@floegence/flowersec-core",
-      "version": "2.2.0",
-      "purl": "pkg:npm/%40floegence/flowersec-core@2.2.0",
-      "bom-ref": "pkg:npm/%40floegence/flowersec-core@2.2.0"
+      "version": "2.3.0",
+      "purl": "pkg:npm/%40floegence/flowersec-core@2.3.0",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-core@2.3.0"
     },
     "properties": [
       {
         "name": "flowersec:source-inventory-sha256",
-        "value": "230e833276df3ab620d06a6d76b6db45f0dd7ad16f5085e9bc60fba0384c5313"
+        "value": "ff5c9ce47b84ad4cc8a7e9ca5d1605dbaaeaae54743cb071442e146cbc1ca912"
       }
     ]
   },
@@ -2290,7 +2290,7 @@
   ],
   "dependencies": [
     {
-      "ref": "pkg:npm/%40floegence/flowersec-core@2.2.0",
+      "ref": "pkg:npm/%40floegence/flowersec-core@2.3.0",
       "dependsOn": [
         "pkg:npm/%40fails-components/webtransport-transport-http3-quiche@1.6.7",
         "pkg:npm/%40fails-components/webtransport@1.6.7",

package/sbom/spdx.json

@@ -3,7 +3,7 @@
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "name": "flowersec-ts",
-  "documentNamespace": "https://github.com/floegence/flowersec/sbom/flowersec-ts/230e833276df3ab620d06a6d76b6db45f0dd7ad16f5085e9bc60fba0384c5313",
+  "documentNamespace": "https://github.com/floegence/flowersec/sbom/flowersec-ts/ff5c9ce47b84ad4cc8a7e9ca5d1605dbaaeaae54743cb071442e146cbc1ca912",
   "creationInfo": {
     "created": "1970-01-01T00:00:00Z",
     "creators": [
@@ -13,19 +13,19 @@
   "packages": [
     {
       "name": "@floegence/flowersec-core",
-      "SPDXID": "SPDXRef-Package-45974058f041ba37d617",
-      "versionInfo": "2.2.0",
+      "SPDXID": "SPDXRef-Package-7a598ff0897002980d8f",
+      "versionInfo": "2.3.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
       "licenseDeclared": "NOASSERTION",
       "copyrightText": "NOASSERTION",
-      "comment": "Flowersec source inventory SHA-256: 230e833276df3ab620d06a6d76b6db45f0dd7ad16f5085e9bc60fba0384c5313",
+      "comment": "Flowersec source inventory SHA-256: ff5c9ce47b84ad4cc8a7e9ca5d1605dbaaeaae54743cb071442e146cbc1ca912",
       "externalRefs": [
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40floegence/flowersec-core@2.2.0"
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-core@2.3.0"
         }
       ]
     },
@@ -1411,7 +1411,7 @@
     {
       "spdxElementId": "SPDXRef-DOCUMENT",
       "relationshipType": "DESCRIBES",
-      "relatedSpdxElement": "SPDXRef-Package-45974058f041ba37d617"
+      "relatedSpdxElement": "SPDXRef-Package-7a598ff0897002980d8f"
     },
     {
       "spdxElementId": "SPDXRef-Package-789c0f508771e385c5e8",
@@ -1459,37 +1459,37 @@
       "relatedSpdxElement": "SPDXRef-Package-1a7f123f21a1eaf4fd69"
     },
     {
-      "spdxElementId": "SPDXRef-Package-45974058f041ba37d617",
+      "spdxElementId": "SPDXRef-Package-7a598ff0897002980d8f",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-789c0f508771e385c5e8"
     },
     {
-      "spdxElementId": "SPDXRef-Package-45974058f041ba37d617",
+      "spdxElementId": "SPDXRef-Package-7a598ff0897002980d8f",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-4b35e4821b43dc47a168"
     },
     {
-      "spdxElementId": "SPDXRef-Package-45974058f041ba37d617",
+      "spdxElementId": "SPDXRef-Package-7a598ff0897002980d8f",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-24f128c8779cacb70e46"
     },
     {
-      "spdxElementId": "SPDXRef-Package-45974058f041ba37d617",
+      "spdxElementId": "SPDXRef-Package-7a598ff0897002980d8f",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-6a42d288421aaee354ff"
     },
     {
-      "spdxElementId": "SPDXRef-Package-45974058f041ba37d617",
+      "spdxElementId": "SPDXRef-Package-7a598ff0897002980d8f",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-d976986d5d79eddc7789"
     },
     {
-      "spdxElementId": "SPDXRef-Package-45974058f041ba37d617",
+      "spdxElementId": "SPDXRef-Package-7a598ff0897002980d8f",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-f8b45a289df643042b94"
     },
     {
-      "spdxElementId": "SPDXRef-Package-45974058f041ba37d617",
+      "spdxElementId": "SPDXRef-Package-7a598ff0897002980d8f",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-38fe7b92bdac2a86fb61"
     },