@floegence/flowersec-core 2.3.10 → 2.4.0

package/README.md

@@ -29,7 +29,7 @@ The root type exports are:
 
 Retry ownership belongs to `ConnectionController`; applications do not classify error text or run a parallel retry scheduler. Public failures remain redacted and reveal no carrier, candidate, URL, credential, stage, key, or diagnostic details.
 
-`RpcResult<Response>` is a discriminated union. `RpcPeer.call(...)` requires a decoder for successful payloads, so the typed success value has passed application validation before it is returned. Check `result.ok` before reading either the typed success `payload` or bounded application `error`; a result cannot contain both. RPC call and notify are portable across SDKs. TypeScript `RpcPeer.onNotify(...)` receives peer outbound notifications through the local Session's inbound reserved RPC stream.
+`RpcResult<Response>` is a discriminated union. `RpcPeer.call(...)` requires a decoder for successful payloads, so the typed success value has passed application validation before it is returned. Check `result.ok` before reading either the typed success `payload` or bounded application `error`; a result cannot contain both. RPC call and notify accept only `JsonValue` payloads and reject values that cannot be represented on the wire before sending. TypeScript `RpcPeer.onNotify(typeId, decoder, handler)` receives peer outbound notifications through the local Session's inbound reserved RPC stream. A notification reaches the handler only after its decoder succeeds; decoder and handler failures are isolated from RPC serving.
 
 When connector options omit a connection timeout, browser and Node.js connectors use the shared ten-second default.
 

package/dist/public/contract.d.ts

@@ -42,9 +42,9 @@ export type RpcResult<Response = unknown> = Readonly<{
     }>;
 }>;
 export interface RpcPeer {
-    call<Request = unknown, Response = unknown>(typeId: number, payload: Request, decodeResponse: (payload: JsonValue) => Response, options?: OperationOptions): Promise<RpcResult<Response>>;
-    notify<Payload = unknown>(typeId: number, payload: Payload, options?: OperationOptions): Promise<void>;
-    onNotify<Payload = unknown>(typeId: number, handler: (payload: Payload) => void): () => void;
+    call<Request extends JsonValue = JsonValue, Response = unknown>(typeId: number, payload: Request, decodeResponse: (payload: JsonValue) => Response, options?: OperationOptions): Promise<RpcResult<Response>>;
+    notify<Payload extends JsonValue = JsonValue>(typeId: number, payload: Payload, options?: OperationOptions): Promise<void>;
+    onNotify<Payload>(typeId: number, decodePayload: (payload: JsonValue) => Payload, handler: (payload: Payload) => void | Promise<void>): () => void;
 }
 export interface ByteStream {
     readonly kind: string;

package/dist/v2/publicSession.js

@@ -2,8 +2,18 @@ import { SessionError } from "./contract.js";
 import { createStreamMetadataV2, streamMetadataValuesV2 } from "./streamMetadata.js";
 /** @internal */
 export function projectSessionV2(session) {
-    const rpc = projectRpcPeerV2(session.rpc);
+    const notificationOwner = {
+        subscriptions: new Set(),
+        closed: false,
+    };
+    const clearNotificationSubscriptions = () => {
+        notificationOwner.closed = true;
+        for (const unsubscribe of [...notificationOwner.subscriptions])
+            unsubscribe();
+    };
+    const rpc = projectRpcPeerV2(session.rpc, notificationOwner);
     const unreliable = session.unreliableMessages;
+    void session.termination.then(clearNotificationSubscriptions, clearNotificationSubscriptions);
     return Object.freeze({
         rpc,
         ...(unreliable === undefined ? {} : { unreliableMessages: unreliable }),
@@ -64,6 +74,9 @@ export function projectSessionV2(session) {
             catch (error) {
                 throw redactSessionError(error);
             }
+            finally {
+                clearNotificationSubscriptions();
+            }
         },
     });
 }
@@ -115,14 +128,16 @@ function projectByteStreamV2(stream) {
         },
     });
 }
-function projectRpcPeerV2(peer) {
+function projectRpcPeerV2(peer, notificationOwner) {
     return Object.freeze({
         async call(typeId, payload, decodeResponse, options) {
             try {
+                assertJsonValue(payload);
                 const result = await peer.call(typeId, payload, options?.signal);
                 if (result.error !== undefined) {
                     return Object.freeze({ ok: false, error: Object.freeze({ ...result.error }) });
                 }
+                assertJsonValue(result.payload);
                 return Object.freeze({ ok: true, payload: decodeResponse(result.payload) });
             }
             catch (error) {
@@ -131,6 +146,7 @@ function projectRpcPeerV2(peer) {
         },
         async notify(typeId, payload, options) {
             try {
+                assertJsonValue(payload);
                 if (options?.signal?.aborted)
                     throw options.signal.reason ?? new DOMException("The operation was aborted", "AbortError");
                 await raceWithSignal(peer.notify(typeId, payload), options?.signal);
@@ -139,11 +155,75 @@ function projectRpcPeerV2(peer) {
                 throw redactSessionError(error);
             }
         },
-        onNotify(typeId, handler) {
-            return peer.onNotify(typeId, (payload) => handler(payload));
+        onNotify(typeId, decodePayload, handler) {
+            if (notificationOwner.closed)
+                return () => undefined;
+            const unsubscribe = peer.onNotify(typeId, (payload) => {
+                let decoded;
+                try {
+                    assertJsonValue(payload);
+                    decoded = decodePayload(payload);
+                }
+                catch {
+                    return;
+                }
+                try {
+                    void Promise.resolve(handler(decoded)).catch(() => undefined);
+                }
+                catch {
+                    // Notification handlers are isolated from RPC serving.
+                }
+            });
+            let subscribed = true;
+            const cancel = () => {
+                if (!subscribed)
+                    return;
+                subscribed = false;
+                notificationOwner.subscriptions.delete(cancel);
+                unsubscribe();
+            };
+            notificationOwner.subscriptions.add(cancel);
+            return cancel;
         },
     });
 }
+function assertJsonValue(value) {
+    validateJsonValue(value, new Set());
+}
+function validateJsonValue(value, ancestors) {
+    if (value === null || typeof value === "string" || typeof value === "boolean")
+        return;
+    if (typeof value === "number") {
+        if (Number.isFinite(value))
+            return;
+        throw new TypeError("RPC payload contains a non-finite number");
+    }
+    if (typeof value !== "object")
+        throw new TypeError("RPC payload is not a JSON value");
+    if (ancestors.has(value))
+        throw new TypeError("RPC payload contains a cycle");
+    ancestors.add(value);
+    try {
+        if (Array.isArray(value)) {
+            for (let index = 0; index < value.length; index += 1) {
+                if (!(index in value))
+                    throw new TypeError("RPC payload contains a sparse array");
+                validateJsonValue(value[index], ancestors);
+            }
+            return;
+        }
+        const prototype = Object.getPrototypeOf(value);
+        if (prototype !== Object.prototype && prototype !== null) {
+            throw new TypeError("RPC payload contains a non-JSON object");
+        }
+        for (const key of Object.keys(value)) {
+            validateJsonValue(value[key], ancestors);
+        }
+    }
+    finally {
+        ancestors.delete(value);
+    }
+}
 async function raceWithSignal(operation, signal) {
     if (signal === undefined)
         return await operation;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floegence/flowersec-core",
-  "version": "2.3.10",
+  "version": "2.4.0",
   "description": "Flowersec core TypeScript library for carrier-neutral encrypted sessions and multiplexed streams.",
   "license": "MIT",
   "repository": {
@@ -77,7 +77,7 @@
     "ws": "^8.21.2"
   },
   "optionalDependencies": {
-    "@floegence/flowersec-node-native": "2.3.10"
+    "@floegence/flowersec-node-native": "2.4.0"
   },
   "devDependencies": {
     "@playwright/test": "1.62.1",
@@ -95,5 +95,5 @@
     "vite": "^8.2.1",
     "vitest": "4.1.10"
   },
-  "flowersecSourceCommit": "67e5ff521e77982e4f57e8ba5eb858df3e48c886"
+  "flowersecSourceCommit": "0849589d3516564cc2f32ce51f15a1bba4aa3aa6"
 }

package/sbom/cyclonedx.json

@@ -1,20 +1,20 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:2ff806a3-4e32-5ae7-867b-3dc94826ed55",
+  "serialNumber": "urn:uuid:c502284d-2e30-5f97-8204-2cdd20d4483a",
   "version": 1,
   "metadata": {
     "component": {
       "type": "library",
       "name": "@floegence/flowersec-core",
-      "version": "2.3.10",
-      "purl": "pkg:npm/%40floegence/flowersec-core@2.3.10",
-      "bom-ref": "pkg:npm/%40floegence/flowersec-core@2.3.10"
+      "version": "2.4.0",
+      "purl": "pkg:npm/%40floegence/flowersec-core@2.4.0",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-core@2.4.0"
     },
     "properties": [
       {
         "name": "flowersec:source-inventory-sha256",
-        "value": "36475d4f06355a764285462713f086777546ed34fe2ea5911961d9bb9a3037f1"
+        "value": "1c377fd1fb5ea77eadd418a3990b5ae9585edf1a740a95901287df743cc2ec9c"
       }
     ]
   },
@@ -190,7 +190,7 @@
   ],
   "dependencies": [
     {
-      "ref": "pkg:npm/%40floegence/flowersec-core@2.3.10",
+      "ref": "pkg:npm/%40floegence/flowersec-core@2.4.0",
       "dependsOn": [
         "pkg:npm/%40noble/ciphers@2.3.0",
         "pkg:npm/%40noble/curves@2.3.0",

package/sbom/spdx.json

@@ -3,7 +3,7 @@
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "name": "flowersec-ts",
-  "documentNamespace": "https://github.com/floegence/flowersec/sbom/flowersec-ts/36475d4f06355a764285462713f086777546ed34fe2ea5911961d9bb9a3037f1",
+  "documentNamespace": "https://github.com/floegence/flowersec/sbom/flowersec-ts/1c377fd1fb5ea77eadd418a3990b5ae9585edf1a740a95901287df743cc2ec9c",
   "creationInfo": {
     "created": "1970-01-01T00:00:00Z",
     "creators": [
@@ -13,19 +13,19 @@
   "packages": [
     {
       "name": "@floegence/flowersec-core",
-      "SPDXID": "SPDXRef-Package-bd5ff7d2005890830d32",
-      "versionInfo": "2.3.10",
+      "SPDXID": "SPDXRef-Package-d5c0c7bb3c27968de167",
+      "versionInfo": "2.4.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
       "licenseDeclared": "NOASSERTION",
       "copyrightText": "NOASSERTION",
-      "comment": "Flowersec source inventory SHA-256: 36475d4f06355a764285462713f086777546ed34fe2ea5911961d9bb9a3037f1",
+      "comment": "Flowersec source inventory SHA-256: 1c377fd1fb5ea77eadd418a3990b5ae9585edf1a740a95901287df743cc2ec9c",
       "externalRefs": [
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40floegence/flowersec-core@2.3.10"
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-core@2.4.0"
         }
       ]
     },
@@ -136,30 +136,30 @@
     {
       "spdxElementId": "SPDXRef-DOCUMENT",
       "relationshipType": "DESCRIBES",
-      "relatedSpdxElement": "SPDXRef-Package-bd5ff7d2005890830d32"
+      "relatedSpdxElement": "SPDXRef-Package-d5c0c7bb3c27968de167"
     },
     {
-      "spdxElementId": "SPDXRef-Package-bd5ff7d2005890830d32",
+      "spdxElementId": "SPDXRef-Package-d5c0c7bb3c27968de167",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-5ce913a03239b02770fb"
     },
     {
-      "spdxElementId": "SPDXRef-Package-bd5ff7d2005890830d32",
+      "spdxElementId": "SPDXRef-Package-d5c0c7bb3c27968de167",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-01009adf60db02c13634"
     },
     {
-      "spdxElementId": "SPDXRef-Package-bd5ff7d2005890830d32",
+      "spdxElementId": "SPDXRef-Package-d5c0c7bb3c27968de167",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-8815b117c8a1d5f7eeb0"
     },
     {
-      "spdxElementId": "SPDXRef-Package-bd5ff7d2005890830d32",
+      "spdxElementId": "SPDXRef-Package-d5c0c7bb3c27968de167",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-f8b45a289df643042b94"
     },
     {
-      "spdxElementId": "SPDXRef-Package-bd5ff7d2005890830d32",
+      "spdxElementId": "SPDXRef-Package-d5c0c7bb3c27968de167",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-b779412f685822663496"
     },