@floegence/flowersec-core 2.3.1 → 2.3.4

package/README.md

@@ -2,12 +2,12 @@
 
 `@floegence/flowersec-core` is the ESM-only Flowersec v2 SDK for browsers and Node.js. Its public package surface is limited to the root, `/browser`, `/node`, and `/proxy` entrypoints.
 
-Flowersec 2.3.1 is the coordinated TypeScript SDK patch release.
+Flowersec 2.3.4 is the published TypeScript SDK release.
 
 ## Install
 
 ```bash
-npm install @floegence/flowersec-core@2.3.1
+npm install @floegence/flowersec-core@2.3.4
 ```
 
 ## Public API
@@ -84,13 +84,13 @@ Raw QUIC and WebTransport preserve native FIN, RESET_STREAM, STOP_SENDING, flow
 
 WebSocket uses Yamux only inside its carrier adapter. Yamux has no independent STOP_SENDING primitive, so that operation is explicitly unavailable rather than emulated with a full stream reset.
 
-Browser applications receive a ready `Session` from `connect(...)`. The browser connector supports WSS and WebTransport production connections. WebTransport uses native HTTP/3 bidirectional streams and does not use Yamux.
+Browser applications receive a ready `Session` from `connect(...)`. The browser connector supports WSS, restricted plaintext loopback WebSocket direct connections, and WebTransport. WebTransport uses native HTTP/3 bidirectional streams and does not use Yamux.
 
 Chromium does not support a WebTransport pooling option; each carrier creates an independent native WebTransport connection.
 
 Cold-connection diagnostics require every independent carrier to meet the declared deadline. A `dial_failed` result remains a test failure and is not hidden by pooling, retry, or timeout relaxation.
 
-Node.js applications receive the same `Session` contract from `connect(...)`. The Node.js connector supports WSS and WebTransport production connections for direct and tunnel artifacts. It requires an absolute HTTP(S) `origin`; a custom certificate authority can be supplied through `tls.ca`. Invalid origin and TLS options fail as `ConnectError` with `invalid_options` and are terminal to the optional connection controller.
+Node.js applications receive the same `Session` contract from `connect(...)`. The Node.js connector supports WSS and WebTransport for direct and tunnel artifacts, plus restricted plaintext loopback WebSocket direct connections. It requires an absolute HTTP(S) `origin`; a custom certificate authority can be supplied through `tls.ca`. Invalid origin and TLS options fail as `ConnectError` with `invalid_options` and are terminal to the optional connection controller.
 
 The Node WebTransport direct listener/server is owned by the Node runtime and the `flowersec-ts-cli` server path. It uses the same native carrier acceptor and session engine as the client connector; it is not a second protocol implementation.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floegence/flowersec-core",
-  "version": "2.3.1",
+  "version": "2.3.4",
   "description": "Flowersec core TypeScript library for carrier-neutral encrypted sessions and multiplexed streams.",
   "license": "MIT",
   "repository": {

package/sbom/cyclonedx.json

@@ -1,20 +1,20 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:3af99ff8-79c9-5ca3-85b1-c2d7fae37ad1",
+  "serialNumber": "urn:uuid:18b319f4-70e9-5eeb-8c78-bef4b24f17df",
   "version": 1,
   "metadata": {
     "component": {
       "type": "library",
       "name": "@floegence/flowersec-core",
-      "version": "2.3.1",
-      "purl": "pkg:npm/%40floegence/flowersec-core@2.3.1",
-      "bom-ref": "pkg:npm/%40floegence/flowersec-core@2.3.1"
+      "version": "2.3.4",
+      "purl": "pkg:npm/%40floegence/flowersec-core@2.3.4",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-core@2.3.4"
     },
     "properties": [
       {
         "name": "flowersec:source-inventory-sha256",
-        "value": "0464b8df2727e54d5144bf941d437872349d0caebd4b237bb1a9bd915bdd4d36"
+        "value": "f3aeaa2c6078eba1bb7639afd68c54ab56b1d7685901e2210988a66356e9ab39"
       }
     ]
   },
@@ -2290,7 +2290,7 @@
   ],
   "dependencies": [
     {
-      "ref": "pkg:npm/%40floegence/flowersec-core@2.3.1",
+      "ref": "pkg:npm/%40floegence/flowersec-core@2.3.4",
       "dependsOn": [
         "pkg:npm/%40fails-components/webtransport-transport-http3-quiche@1.6.7",
         "pkg:npm/%40fails-components/webtransport@1.6.7",

package/sbom/spdx.json

@@ -3,7 +3,7 @@
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "name": "flowersec-ts",
-  "documentNamespace": "https://github.com/floegence/flowersec/sbom/flowersec-ts/0464b8df2727e54d5144bf941d437872349d0caebd4b237bb1a9bd915bdd4d36",
+  "documentNamespace": "https://github.com/floegence/flowersec/sbom/flowersec-ts/f3aeaa2c6078eba1bb7639afd68c54ab56b1d7685901e2210988a66356e9ab39",
   "creationInfo": {
     "created": "1970-01-01T00:00:00Z",
     "creators": [
@@ -13,19 +13,19 @@
   "packages": [
     {
       "name": "@floegence/flowersec-core",
-      "SPDXID": "SPDXRef-Package-2164c344fddf0568500c",
-      "versionInfo": "2.3.1",
+      "SPDXID": "SPDXRef-Package-224d05cf020a104e91ec",
+      "versionInfo": "2.3.4",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
       "licenseDeclared": "NOASSERTION",
       "copyrightText": "NOASSERTION",
-      "comment": "Flowersec source inventory SHA-256: 0464b8df2727e54d5144bf941d437872349d0caebd4b237bb1a9bd915bdd4d36",
+      "comment": "Flowersec source inventory SHA-256: f3aeaa2c6078eba1bb7639afd68c54ab56b1d7685901e2210988a66356e9ab39",
       "externalRefs": [
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40floegence/flowersec-core@2.3.1"
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-core@2.3.4"
         }
       ]
     },
@@ -1411,7 +1411,7 @@
     {
       "spdxElementId": "SPDXRef-DOCUMENT",
       "relationshipType": "DESCRIBES",
-      "relatedSpdxElement": "SPDXRef-Package-2164c344fddf0568500c"
+      "relatedSpdxElement": "SPDXRef-Package-224d05cf020a104e91ec"
     },
     {
       "spdxElementId": "SPDXRef-Package-789c0f508771e385c5e8",
@@ -1459,37 +1459,37 @@
       "relatedSpdxElement": "SPDXRef-Package-1a7f123f21a1eaf4fd69"
     },
     {
-      "spdxElementId": "SPDXRef-Package-2164c344fddf0568500c",
+      "spdxElementId": "SPDXRef-Package-224d05cf020a104e91ec",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-789c0f508771e385c5e8"
     },
     {
-      "spdxElementId": "SPDXRef-Package-2164c344fddf0568500c",
+      "spdxElementId": "SPDXRef-Package-224d05cf020a104e91ec",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-4b35e4821b43dc47a168"
     },
     {
-      "spdxElementId": "SPDXRef-Package-2164c344fddf0568500c",
+      "spdxElementId": "SPDXRef-Package-224d05cf020a104e91ec",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-24f128c8779cacb70e46"
     },
     {
-      "spdxElementId": "SPDXRef-Package-2164c344fddf0568500c",
+      "spdxElementId": "SPDXRef-Package-224d05cf020a104e91ec",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-6a42d288421aaee354ff"
     },
     {
-      "spdxElementId": "SPDXRef-Package-2164c344fddf0568500c",
+      "spdxElementId": "SPDXRef-Package-224d05cf020a104e91ec",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-d976986d5d79eddc7789"
     },
     {
-      "spdxElementId": "SPDXRef-Package-2164c344fddf0568500c",
+      "spdxElementId": "SPDXRef-Package-224d05cf020a104e91ec",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-f8b45a289df643042b94"
     },
     {
-      "spdxElementId": "SPDXRef-Package-2164c344fddf0568500c",
+      "spdxElementId": "SPDXRef-Package-224d05cf020a104e91ec",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-38fe7b92bdac2a86fb61"
     },