@floegence/flowersec-core 2.3.5 → 2.3.6

package/README.md

@@ -2,12 +2,12 @@
 
 `@floegence/flowersec-core` is the ESM-only Flowersec v2 SDK for browsers and Node.js. Its public package surface is limited to the root, `/browser`, `/node`, and `/proxy` entrypoints.
 
-Flowersec 2.3.5 is the published TypeScript SDK release.
+Flowersec 2.3.6 is the published TypeScript SDK release.
 
 ## Install
 
 ```bash
-npm install @floegence/flowersec-core@2.3.5
+npm install @floegence/flowersec-core@2.3.6
 ```
 
 ## Public API
@@ -36,7 +36,9 @@ When connector options omit a connection timeout, browser and Node.js connectors
 
 The Browser and Node `connect(...)` operations are one-shot and never reconnect. Long-lived applications can create the runtime-specific `ConnectionController` with a refreshable `ArtifactSource`. Every attempt must return a fresh `ArtifactLease`; a one-time artifact or lease is not a controller source.
 
-The controller has one scheduler and one in-flight attempt. Its states are `idle`, `connecting`, `connected`, `waiting`, `failed`, and `closed`; snapshots expose the current structured `retryDisposition` while waiting. Call `start()` once, observe immutable snapshots with `subscribe(...)`, await an established session with `waitForSession(...)`, and use `retryNow()` only to wake a `waiting` controller. `close()` cancels acquisition, connection, and waiting before closing the current session.
+The controller has one scheduler and one in-flight attempt. Its states are `idle`, `connecting`, `connected`, `waiting`, `failed`, and `closed`; immutable snapshots expose `ConnectionSnapshot.retryDisposition` while the corresponding retry decision applies and clear it before a new attempt, after connection, and on close. Call `start()` once, observe snapshots with `subscribe(...)`, await an established session with `waitForSession(...)`, and use `retryNow()` only to wake a `waiting` controller. `close()` cancels acquisition, connection, and waiting before closing the current session.
+
+Node `SessionHandlers` accept application stream kinds whose UTF-8 encoding is 1 through 255 bytes and reserve `flowersec.rpc.v2` for Flowersec RPC. `AcceptedSession.serve(...)` closes successfully handled streams. A rejected handler Promise resets then closes only that stream; the accept loop and unrelated streams continue.
 
 Source failures return a structured `terminal`, `retryable`, or `retry_after` disposition. Thrown or malformed source failures are terminal. Retry delay is deterministic exponential backoff from 250 ms, doubling to a 30-second maximum with no jitter; `retry_after` is never attempted before its specified Unix-millisecond boundary. Attempts are unlimited unless `maximumAttempts` is explicitly set.
 

package/dist/connectionController.d.ts

@@ -31,6 +31,7 @@ export type ConnectionSnapshot = Readonly<{
     attempt: number;
     currentSession?: Session;
     failure?: ConnectionControllerFailure;
+    retryDisposition?: RetryDisposition;
 }>;
 export type ConnectionControllerOptions = Readonly<{
     maximumAttempts?: number;

package/dist/connectionController.js

@@ -125,6 +125,7 @@ class ConnectionControllerV2Impl {
         const active = this.session;
         // A closed controller must never advertise a session that it has just retired.
         this.session = undefined;
+        this.currentRetryDisposition = undefined;
         this.lifetime.abort(new ConnectionControllerError("closed", this.lastFailure));
         this.transition("closed");
         void this.finishClose(active).then(resolveClose);
@@ -156,6 +157,7 @@ class ConnectionControllerV2Impl {
                 this.transition("failed");
                 return;
             }
+            this.currentRetryDisposition = undefined;
             this.attempt += 1;
             this.transition("connecting");
             const acquisition = await this.acquireLease();
@@ -361,6 +363,7 @@ class ConnectionControllerV2Impl {
             attempt: this.attempt,
             ...(currentSession === undefined ? {} : { currentSession }),
             ...(this.lastFailure === undefined ? {} : { failure: this.lastFailure }),
+            ...(this.currentRetryDisposition === undefined ? {} : { retryDisposition: this.currentRetryDisposition }),
         });
     }
 }

package/dist/node/acceptor.js

@@ -99,8 +99,17 @@ export class AcceptedSession {
                     await incoming.stream.reset();
                     continue;
                 }
-                const task = handler(incoming, options)
-                    .finally(() => incoming.stream.close())
+                const task = (async () => {
+                    try {
+                        await handler(incoming, options);
+                    }
+                    catch {
+                        await incoming.stream.reset().catch(() => undefined);
+                    }
+                    finally {
+                        await incoming.stream.close().catch(() => undefined);
+                    }
+                })()
                     .finally(() => active.delete(task));
                 active.add(task);
             }

package/dist/v2/retryDisposition.js

@@ -9,9 +9,9 @@ export function retryDispositionForConnectError(error) {
         case "rpc_failed":
         case "resource_exhausted":
         case "not_connected":
-            return { kind: "retryable" };
+            return Object.freeze({ kind: "retryable" });
         default:
-            return { kind: "terminal" };
+            return Object.freeze({ kind: "terminal" });
     }
 }
 export function retryDispositionForSessionError(error) {
@@ -23,8 +23,8 @@ export function retryDispositionForSessionError(error) {
         case "stream_reset":
         case "rekey_failed":
         case "liveness_failed":
-            return { kind: "retryable" };
+            return Object.freeze({ kind: "retryable" });
         default:
-            return { kind: "terminal" };
+            return Object.freeze({ kind: "terminal" });
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floegence/flowersec-core",
-  "version": "2.3.5",
+  "version": "2.3.6",
   "description": "Flowersec core TypeScript library for carrier-neutral encrypted sessions and multiplexed streams.",
   "license": "MIT",
   "repository": {

package/sbom/cyclonedx.json

@@ -1,20 +1,20 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:3400c69b-8cbe-5509-8b3e-e52a56f2135d",
+  "serialNumber": "urn:uuid:026dc73d-e708-55ea-8dd3-f116a0087846",
   "version": 1,
   "metadata": {
     "component": {
       "type": "library",
       "name": "@floegence/flowersec-core",
-      "version": "2.3.5",
-      "purl": "pkg:npm/%40floegence/flowersec-core@2.3.5",
-      "bom-ref": "pkg:npm/%40floegence/flowersec-core@2.3.5"
+      "version": "2.3.6",
+      "purl": "pkg:npm/%40floegence/flowersec-core@2.3.6",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-core@2.3.6"
     },
     "properties": [
       {
         "name": "flowersec:source-inventory-sha256",
-        "value": "0ab98241dfe33a677cf1e6726296a7db34a9f0a77e1eb4c9d21784b4581fccd1"
+        "value": "ed04be96860a13b4c2a53cd400072b7658237118c281fd955adf5f8e39f7678d"
       }
     ]
   },
@@ -2290,7 +2290,7 @@
   ],
   "dependencies": [
     {
-      "ref": "pkg:npm/%40floegence/flowersec-core@2.3.5",
+      "ref": "pkg:npm/%40floegence/flowersec-core@2.3.6",
       "dependsOn": [
         "pkg:npm/%40fails-components/webtransport-transport-http3-quiche@1.6.7",
         "pkg:npm/%40fails-components/webtransport@1.6.7",

package/sbom/spdx.json

@@ -3,7 +3,7 @@
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "name": "flowersec-ts",
-  "documentNamespace": "https://github.com/floegence/flowersec/sbom/flowersec-ts/0ab98241dfe33a677cf1e6726296a7db34a9f0a77e1eb4c9d21784b4581fccd1",
+  "documentNamespace": "https://github.com/floegence/flowersec/sbom/flowersec-ts/ed04be96860a13b4c2a53cd400072b7658237118c281fd955adf5f8e39f7678d",
   "creationInfo": {
     "created": "1970-01-01T00:00:00Z",
     "creators": [
@@ -13,19 +13,19 @@
   "packages": [
     {
       "name": "@floegence/flowersec-core",
-      "SPDXID": "SPDXRef-Package-4c55f673934ca9f855ad",
-      "versionInfo": "2.3.5",
+      "SPDXID": "SPDXRef-Package-4be78b4f0b851da93d5b",
+      "versionInfo": "2.3.6",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
       "licenseDeclared": "NOASSERTION",
       "copyrightText": "NOASSERTION",
-      "comment": "Flowersec source inventory SHA-256: 0ab98241dfe33a677cf1e6726296a7db34a9f0a77e1eb4c9d21784b4581fccd1",
+      "comment": "Flowersec source inventory SHA-256: ed04be96860a13b4c2a53cd400072b7658237118c281fd955adf5f8e39f7678d",
       "externalRefs": [
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40floegence/flowersec-core@2.3.5"
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-core@2.3.6"
         }
       ]
     },
@@ -1411,7 +1411,7 @@
     {
       "spdxElementId": "SPDXRef-DOCUMENT",
       "relationshipType": "DESCRIBES",
-      "relatedSpdxElement": "SPDXRef-Package-4c55f673934ca9f855ad"
+      "relatedSpdxElement": "SPDXRef-Package-4be78b4f0b851da93d5b"
     },
     {
       "spdxElementId": "SPDXRef-Package-789c0f508771e385c5e8",
@@ -1459,37 +1459,37 @@
       "relatedSpdxElement": "SPDXRef-Package-1a7f123f21a1eaf4fd69"
     },
     {
-      "spdxElementId": "SPDXRef-Package-4c55f673934ca9f855ad",
+      "spdxElementId": "SPDXRef-Package-4be78b4f0b851da93d5b",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-789c0f508771e385c5e8"
     },
     {
-      "spdxElementId": "SPDXRef-Package-4c55f673934ca9f855ad",
+      "spdxElementId": "SPDXRef-Package-4be78b4f0b851da93d5b",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-4b35e4821b43dc47a168"
     },
     {
-      "spdxElementId": "SPDXRef-Package-4c55f673934ca9f855ad",
+      "spdxElementId": "SPDXRef-Package-4be78b4f0b851da93d5b",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-24f128c8779cacb70e46"
     },
     {
-      "spdxElementId": "SPDXRef-Package-4c55f673934ca9f855ad",
+      "spdxElementId": "SPDXRef-Package-4be78b4f0b851da93d5b",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-6a42d288421aaee354ff"
     },
     {
-      "spdxElementId": "SPDXRef-Package-4c55f673934ca9f855ad",
+      "spdxElementId": "SPDXRef-Package-4be78b4f0b851da93d5b",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-d976986d5d79eddc7789"
     },
     {
-      "spdxElementId": "SPDXRef-Package-4c55f673934ca9f855ad",
+      "spdxElementId": "SPDXRef-Package-4be78b4f0b851da93d5b",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-f8b45a289df643042b94"
     },
     {
-      "spdxElementId": "SPDXRef-Package-4c55f673934ca9f855ad",
+      "spdxElementId": "SPDXRef-Package-4be78b4f0b851da93d5b",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-38fe7b92bdac2a86fb61"
     },