@floegence/flowersec-core 3.0.1 → 3.0.4

package/README.md

@@ -15,7 +15,7 @@ npm install @floegence/flowersec-core
 
 - `@floegence/flowersec-core` exports the portable artifact, lease, session, stream, RPC, stream-metadata, and connection-controller API, plus profile-owned unreliable messages when negotiated.
 - `@floegence/flowersec-core/browser` adds `connect(...)`, `createConnectionController(...)`, and their options.
-- `@floegence/flowersec-core/node` adds the V3 `connect(...)`, `createConnectionController(...)`, direct-only `createAcceptor(...)`, opaque `createTunnelRuntime(...)`, `AcceptedSession`, `SessionHandlers`, and `RPCHandlers` APIs. Legacy V2 server, control-plane, and `ProxyServer` APIs are available only under the explicit `node.v2` namespace.
+- `@floegence/flowersec-core/node` adds the V3 `connect(...)`, `createConnectionController(...)`, direct-only `createAcceptor(...)`, opaque `createTunnelRuntime(...)`, `AcceptedSession`, `SessionHandlers`, and `RPCHandlers` APIs. Legacy V2 server, control-plane, and `ProxyServer` APIs are available only under the explicit `node.v2` namespace; the Go control-plane remains the only v3 invitation issuer.
 - `@floegence/flowersec-core/proxy` adds the `Session`-based HTTP/WebSocket runtime, Service Worker and controller/app-window bridges, strict `proxy.runtime@2` validation, and `connectProxyBrowser(...)` composition.
 
 The root type exports are:
@@ -151,7 +151,8 @@ Flowersec-owned optional native addon wrapper and one of its supported
 prebuilt platform packages; it never loads from the browser entrypoint. The
 wrapper selects the matching optional package for macOS arm64/x64 or Linux
 arm64/x64 glibc. Windows and musl packages are not published. The V3 Node
-entrypoint keeps the control plane and `ProxyServer` behind `node.v2`; the
+entrypoint keeps the legacy control plane and `ProxyServer` behind `node.v2`; it
+does not issue v3 invitations, which are produced by the Go control-plane. The
 relay never terminates an E2EE Session. WebTransport is an optional adapter
 profile and the Node.js runtime
 does not currently expose a production adapter.

package/THIRD_PARTY_NOTICES.md

@@ -3,6 +3,11 @@
 This file is generated from the canonical Flowersec source dependency inventory for flowersec-ts.
 Do not edit it manually. License decisions are reviewed by the repository source license policy.
 
+- @floegence/flowersec-node-native 3.0.4 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
+- @floegence/flowersec-node-native-darwin-arm64 3.0.4 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
+- @floegence/flowersec-node-native-darwin-x64 3.0.4 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
+- @floegence/flowersec-node-native-linux-arm64-gnu 3.0.4 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
+- @floegence/flowersec-node-native-linux-x64-gnu 3.0.4 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
 - @noble/ciphers 2.3.0 (Declared: MIT; selected: MIT; source: https://registry.npmjs.org/@noble/ciphers/-/ciphers-2.3.0.tgz)
 - @noble/curves 2.3.0 (Declared: MIT; selected: MIT; source: https://registry.npmjs.org/@noble/curves/-/curves-2.3.0.tgz)
 - @noble/hashes 2.3.0 (Declared: MIT; selected: MIT; source: https://registry.npmjs.org/@noble/hashes/-/hashes-2.3.0.tgz)

package/dist/v2/protocol.js

@@ -385,6 +385,8 @@ export function decodeStreamKeyUpdateACKV2(raw) {
     assertLogicalStreamID(value.logicalStreamID);
     if (value.transition === 0n)
         throw new ProtocolV2Error("stream rekey transition must be non-zero");
+    if (value.epoch === 0)
+        throw new ProtocolV2Error("stream rekey epoch must be non-zero");
     return value;
 }
 export function buildRecordAAD(h3, logicalStreamID, direction, rawHeader) {

package/dist/v2/session.d.ts

@@ -135,6 +135,7 @@ export declare class SessionV2 implements SessionV2Contract {
     private idleWatchdogStarted;
     private idleTimerCancel;
     private readonly terminationState;
+    private readonly terminationController;
     private readonly rpcRouter;
     constructor(carrier: CarrierSessionV2, control: CarrierStreamV2, controlReader: ExactReader, config: SessionConfigV2, material: HandshakeMaterial);
     openStream(kind: string, options?: InternalStreamOpenOptionsV2): Promise<ByteStreamV2>;
@@ -149,6 +150,7 @@ export declare class SessionV2 implements SessionV2Contract {
     installReceiveRoots(epoch: number, roots: EpochRootsV2): void;
     transcriptHash(): Uint8Array;
     receiveDirectionValue(): DirectionV2;
+    terminationSignal(): AbortSignal;
     sendStreamRecord(stream: EncryptedStreamV2, type: InnerTypeV2, payload: Uint8Array, signal?: AbortSignal): Promise<void>;
     readStreamRecord(stream: EncryptedStreamV2): Promise<Readonly<{
         type: InnerTypeV2;
@@ -238,6 +240,7 @@ declare class EncryptedStreamV2 implements ByteStreamV2 {
     private pendingSendRekey;
     private lastSendRekeyACK;
     private receiveRekey;
+    private receiveRekeyChanged;
     constructor(session: SessionV2, carrier: CarrierStreamV2, id: bigint, kind: string, sendEpoch: number, receiveEpoch: number, permitRelease: () => void, reader?: ExactReader);
     read(options?: OperationOptionsV2): Promise<Uint8Array | null>;
     write(payload: Uint8Array, options?: OperationOptionsV2): Promise<number>;
@@ -253,6 +256,7 @@ declare class EncryptedStreamV2 implements ByteStreamV2 {
     }>;
     waitReceiveRekey(transition: bigint, epoch: number, signal?: AbortSignal): Promise<void>;
     publishReceiveRekey(transition: bigint, epoch: number): void;
+    private notifyReceiveRekeyChanged;
     startPump(): void;
     markOpen(): void;
     markTerminal(error: Error): boolean;

package/dist/v2/session.js

@@ -140,6 +140,7 @@ export class SessionV2 {
     idleWatchdogStarted = false;
     idleTimerCancel;
     terminationState = deferred();
+    terminationController = new AbortController();
     rpcRouter;
     constructor(carrier, control, controlReader, config, material) {
         this.carrier = carrier;
@@ -269,6 +270,9 @@ export class SessionV2 {
     receiveDirectionValue() {
         return this.receiveDirection;
     }
+    terminationSignal() {
+        return this.terminationController.signal;
+    }
     async sendStreamRecord(stream, type, payload, signal) {
         this.assertOpen();
         const inner = encodeInnerRecordV2(type, payload);
@@ -1080,6 +1084,7 @@ export class SessionV2 {
     fail(error, abortCarrier = true) {
         if (this.lifecycle === "closed")
             return;
+        this.terminationController.abort(error);
         this.controlTerminalSealed = true;
         this.beginClosing();
         const normalPeerCarrierClose = this.sessionCloseCommitted && error instanceof CarrierError && error.code === "closed";
@@ -1147,6 +1152,7 @@ class EncryptedStreamV2 {
     pendingSendRekey;
     lastSendRekeyACK;
     receiveRekey;
+    receiveRekeyChanged = deferred();
     constructor(session, carrier, id, kind, sendEpoch, receiveEpoch, permitRelease, reader) {
         this.session = session;
         this.carrier = carrier;
@@ -1256,7 +1262,7 @@ class EncryptedStreamV2 {
                 await raceAbort(pending.acknowledged.promise, signal);
                 return;
             }
-            await raceAbort(new Promise((resolve) => setTimeout(resolve, 0)), signal);
+            await raceAbort(this.receiveRekeyChanged.promise, signal);
             if (this.terminalError !== undefined || this.remoteFIN)
                 return;
         }
@@ -1266,6 +1272,11 @@ class EncryptedStreamV2 {
             this.receiveRekey = undefined;
         }
     }
+    notifyReceiveRekeyChanged() {
+        const changed = this.receiveRekeyChanged;
+        this.receiveRekeyChanged = deferred();
+        changed.resolve();
+    }
     startPump() {
         if (this.pumpStarted)
             return;
@@ -1283,6 +1294,7 @@ class EncryptedStreamV2 {
         this.pendingSendRekey = undefined;
         pendingSendRekey?.armed.reject(error);
         pendingSendRekey?.done.reject(error);
+        this.notifyReceiveRekeyChanged();
         this.opened.reject(error);
         this.data.fail(error);
         return true;
@@ -1412,11 +1424,12 @@ class EncryptedStreamV2 {
         this.receiveSequence = 0n;
         const pending = { transition, epoch: nextEpoch, acknowledged: deferred() };
         this.receiveRekey = pending;
+        this.notifyReceiveRekeyChanged();
         await this.send(InnerTypeV2.StreamKeyUpdateACK, encodeStreamKeyUpdateACKV2({
             logicalStreamID: this.id,
             transition,
             epoch: nextEpoch,
-        }));
+        }), this.session.terminationSignal());
         pending.acknowledged.resolve();
     }
     receiveStreamKeyUpdateACK(payload) {

package/dist/v3/connectionController.js

@@ -38,6 +38,7 @@ export class ConnectionControllerV3 {
     #disposition;
     #scheduler;
     #closeOperation;
+    #transitionGeneration = 0;
     constructor(source, connector, options) {
         if (source === null || typeof source !== "object" || typeof source.acquire !== "function") {
             throw new TypeError("Flowersec v3 artifact source must provide acquire()");
@@ -131,8 +132,9 @@ export class ConnectionControllerV3 {
         this.#closeOperation = closeOperation;
         const active = this.#session;
         this.#session = undefined;
+        this.#failure = undefined;
         this.#disposition = undefined;
-        this.#lifetime.abort(new ConnectionControllerV3Error("closed", this.#failure));
+        this.#lifetime.abort(new ConnectionControllerV3Error("closed"));
         this.#transition("closed");
         void Promise.allSettled([
             this.#scheduler ?? Promise.resolve(),
@@ -154,21 +156,29 @@ export class ConnectionControllerV3 {
                     return;
                 pendingDisposition = undefined;
             }
-            if (!this.#cycle.beginAcquisition()) {
-                this.#forceTerminalDisposition();
-                return;
-            }
             this.#disposition = undefined;
             this.#transition("connecting");
             if (this.#lifetime.signal.aborted)
                 return;
+            if (this.#maximumAttempts !== 0 && this.#cycle.snapshot().attempts >= this.#maximumAttempts) {
+                this.#forceTerminalDisposition();
+                return;
+            }
             let capability;
             try {
                 capability = this.#capabilitySnapshot();
                 validateRuntimeCapabilityDescriptorV3(capability);
             }
             catch {
-                this.#recordFailure("artifact", "artifact_invalid", { kind: "terminal" });
+                if (this.#lifetime.signal.aborted)
+                    return;
+                this.#recordFailure("connect", "artifact_invalid", { kind: "terminal" });
+                return;
+            }
+            if (this.#lifetime.signal.aborted)
+                return;
+            if (!this.#cycle.beginAcquisition()) {
+                this.#forceTerminalDisposition();
                 return;
             }
             const acquisition = await this.#acquire();
@@ -212,7 +222,7 @@ export class ConnectionControllerV3 {
                 await retireArtifactLeaseV3(claim);
                 this.#cycle.recordFailedAcquisitionOrLease();
                 const error = new ConnectErrorV3("artifact_invalid", { kind: "terminal" });
-                this.#recordFailure("artifact", error.code, error.disposition);
+                this.#recordFailure("connect", error.code, error.disposition);
                 return;
             }
             try {
@@ -222,7 +232,7 @@ export class ConnectionControllerV3 {
                 await retireArtifactLeaseV3(claim);
                 this.#cycle.recordFailedAcquisitionOrLease();
                 const error = new ConnectErrorV3("expired_artifact", { kind: "retryable" });
-                this.#recordFailure("artifact", error.code, error.disposition);
+                this.#recordFailure("connect", error.code, error.disposition);
                 if (this.#attemptBudgetExhausted())
                     return;
                 next = "primary";
@@ -523,8 +533,13 @@ export class ConnectionControllerV3 {
         if (this.#state === "closed" && state !== "closed")
             return;
         this.#state = state;
+        const generation = ++this.#transitionGeneration;
         const snapshot = this.#snapshot();
-        for (const listener of this.#listeners) {
+        for (const listener of [...this.#listeners]) {
+            if (generation !== this.#transitionGeneration)
+                return;
+            if (!this.#listeners.has(listener))
+                continue;
             try {
                 listener(snapshot);
             }

package/dist/v3/protocol.js

@@ -405,6 +405,8 @@ export function decodeStreamKeyUpdateACKV3(raw) {
     assertLogicalStreamID(value.logicalStreamID);
     if (value.transition === 0n)
         throw new ProtocolV3Error("stream rekey transition must be non-zero");
+    if (value.epoch === 0)
+        throw new ProtocolV3Error("stream rekey epoch must be non-zero");
     return value;
 }
 export function buildRecordAAD(h3, logicalStreamID, direction, rawHeader) {

package/dist/v3/session.d.ts

@@ -136,6 +136,7 @@ export declare class SessionV3 implements SessionV3Contract {
     private idleDeadlineMs;
     private idleTimerCancel;
     private readonly terminationState;
+    private readonly terminationController;
     private readonly rpcRouter;
     constructor(carrier: CarrierSessionV3, control: CarrierStreamV3, controlReader: ExactReader, config: SessionConfigV3, material: HandshakeMaterial);
     openStream(kind: string, options?: InternalStreamOpenOptionsV3): Promise<ByteStreamV3>;
@@ -150,6 +151,7 @@ export declare class SessionV3 implements SessionV3Contract {
     installReceiveRoots(epoch: number, roots: EpochRootsV3): void;
     transcriptHash(): Uint8Array;
     receiveDirectionValue(): DirectionV3;
+    terminationSignal(): AbortSignal;
     sendStreamRecord(stream: EncryptedStreamV3, type: InnerTypeV3, payload: Uint8Array, signal?: AbortSignal): Promise<void>;
     readStreamRecord(stream: EncryptedStreamV3): Promise<Readonly<{
         type: InnerTypeV3;
@@ -244,6 +246,7 @@ declare class EncryptedStreamV3 implements ByteStreamV3 {
     private receiveRekey;
     private readonly sendMaterials;
     private readonly receiveMaterials;
+    private receiveRekeyChanged;
     constructor(session: SessionV3, carrier: CarrierStreamV3, id: bigint, kind: string, sendEpoch: number, receiveEpoch: number, permitRelease: () => void, reader?: ExactReader);
     read(options?: OperationOptionsV3): Promise<Uint8Array | null>;
     write(payload: Uint8Array, options?: OperationOptionsV3): Promise<number>;
@@ -259,6 +262,7 @@ declare class EncryptedStreamV3 implements ByteStreamV3 {
     }>;
     waitReceiveRekey(transition: bigint, epoch: number, signal?: AbortSignal): Promise<void>;
     publishReceiveRekey(transition: bigint, epoch: number): void;
+    private notifyReceiveRekeyChanged;
     startPump(): void;
     markOpen(): void;
     markTerminal(error: Error): boolean;

package/dist/v3/session.js

@@ -143,6 +143,7 @@ export class SessionV3 {
     idleDeadlineMs;
     idleTimerCancel;
     terminationState = deferred();
+    terminationController = new AbortController();
     rpcRouter;
     constructor(carrier, control, controlReader, config, material) {
         this.carrier = carrier;
@@ -279,6 +280,9 @@ export class SessionV3 {
     receiveDirectionValue() {
         return this.receiveDirection;
     }
+    terminationSignal() {
+        return this.terminationController.signal;
+    }
     async sendStreamRecord(stream, type, payload, signal) {
         this.assertOpen();
         const inner = encodeInnerRecordV3(type, payload);
@@ -1192,6 +1196,7 @@ export class SessionV3 {
     fail(error, abortCarrier = true) {
         if (this.lifecycle === "closed")
             return;
+        this.terminationController.abort(error);
         this.controlTerminalSealed = true;
         this.beginClosing();
         const pendingSessionRekey = this.pendingSessionRekey;
@@ -1265,6 +1270,7 @@ class EncryptedStreamV3 {
     receiveRekey;
     sendMaterials = new Map();
     receiveMaterials = new Map();
+    receiveRekeyChanged = deferred();
     constructor(session, carrier, id, kind, sendEpoch, receiveEpoch, permitRelease, reader) {
         this.session = session;
         this.carrier = carrier;
@@ -1374,7 +1380,7 @@ class EncryptedStreamV3 {
                 await raceAbort(pending.acknowledged.promise, signal);
                 return;
             }
-            await raceAbort(new Promise((resolve) => setTimeout(resolve, 0)), signal);
+            await raceAbort(this.receiveRekeyChanged.promise, signal);
             if (this.terminalError !== undefined || this.remoteFIN)
                 return;
         }
@@ -1384,6 +1390,11 @@ class EncryptedStreamV3 {
             this.receiveRekey = undefined;
         }
     }
+    notifyReceiveRekeyChanged() {
+        const changed = this.receiveRekeyChanged;
+        this.receiveRekeyChanged = deferred();
+        changed.resolve();
+    }
     startPump() {
         if (this.pumpStarted)
             return;
@@ -1401,6 +1412,7 @@ class EncryptedStreamV3 {
         this.pendingSendRekey = undefined;
         pendingSendRekey?.armed.reject(error);
         pendingSendRekey?.done.reject(error);
+        this.notifyReceiveRekeyChanged();
         this.opened.reject(error);
         this.data.fail(error);
         return true;
@@ -1558,11 +1570,12 @@ class EncryptedStreamV3 {
         pruneRecordMaterials(this.receiveMaterials, new Set(this.priorACK === undefined ? [nextEpoch] : [header.epoch, nextEpoch]));
         const pending = { transition, epoch: nextEpoch, acknowledged: deferred() };
         this.receiveRekey = pending;
+        this.notifyReceiveRekeyChanged();
         await this.send(InnerTypeV3.StreamKeyUpdateACK, encodeStreamKeyUpdateACKV3({
             logicalStreamID: this.id,
             transition,
             epoch: nextEpoch,
-        }));
+        }), this.session.terminationSignal());
         pending.acknowledged.resolve();
     }
     receiveStreamKeyUpdateACK(payload) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floegence/flowersec-core",
-  "version": "3.0.1",
+  "version": "3.0.4",
   "description": "Flowersec core TypeScript library for carrier-neutral encrypted sessions and multiplexed streams.",
   "license": "MIT",
   "repository": {
@@ -76,9 +76,6 @@
     "tr46": "5.0.0",
     "ws": "^8.21.2"
   },
-  "optionalDependencies": {
-    "@floegence/flowersec-node-native": "3.0.1"
-  },
   "devDependencies": {
     "@playwright/test": "1.62.1",
     "@types/node": "^26.1.2",
@@ -95,5 +92,8 @@
     "vite": "^8.2.1",
     "vitest": "4.1.10"
   },
-  "flowersecSourceCommit": "88d8064370733ca512b7994479d52fae33d91665"
+  "optionalDependencies": {
+    "@floegence/flowersec-node-native": "3.0.4"
+  },
+  "flowersecSourceCommit": "35dbe22a6aa1b10d53587e19a18232e2dfb2bbf4"
 }

package/sbom/cyclonedx.json

@@ -1,24 +1,164 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:7c0074af-2a58-5394-8572-4c22fd177e8a",
+  "serialNumber": "urn:uuid:cff299ba-9035-5c07-8271-4cad66e78e07",
   "version": 1,
   "metadata": {
     "component": {
       "type": "library",
       "name": "@floegence/flowersec-core",
-      "version": "3.0.1",
-      "purl": "pkg:npm/%40floegence/flowersec-core@3.0.1",
-      "bom-ref": "pkg:npm/%40floegence/flowersec-core@3.0.1"
+      "version": "3.0.4",
+      "purl": "pkg:npm/%40floegence/flowersec-core@3.0.4",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-core@3.0.4"
     },
     "properties": [
       {
         "name": "flowersec:source-inventory-sha256",
-        "value": "428d40c24d97553e640a89f6e0397fed24c3106752eb8397571157fb9ea19172"
+        "value": "af5a7b36732531ffcf37270c1412322cd50ddf095686ccd1bf28d2d95703edca"
       }
     ]
   },
   "components": [
+    {
+      "type": "library",
+      "name": "@floegence/flowersec-node-native",
+      "version": "3.0.4",
+      "purl": "pkg:npm/%40floegence/flowersec-node-native@3.0.4",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native@3.0.4",
+      "licenses": [
+        {
+          "expression": "MIT"
+        }
+      ],
+      "externalReferences": [
+        {
+          "type": "distribution",
+          "url": "https://github.com/floegence/flowersec.git"
+        }
+      ],
+      "properties": [
+        {
+          "name": "flowersec:declared-license",
+          "value": "MIT"
+        },
+        {
+          "name": "flowersec:source-offer-required",
+          "value": "false"
+        }
+      ]
+    },
+    {
+      "type": "library",
+      "name": "@floegence/flowersec-node-native-darwin-arm64",
+      "version": "3.0.4",
+      "purl": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@3.0.4",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@3.0.4",
+      "licenses": [
+        {
+          "expression": "MIT"
+        }
+      ],
+      "externalReferences": [
+        {
+          "type": "distribution",
+          "url": "https://github.com/floegence/flowersec.git"
+        }
+      ],
+      "properties": [
+        {
+          "name": "flowersec:declared-license",
+          "value": "MIT"
+        },
+        {
+          "name": "flowersec:source-offer-required",
+          "value": "false"
+        }
+      ]
+    },
+    {
+      "type": "library",
+      "name": "@floegence/flowersec-node-native-darwin-x64",
+      "version": "3.0.4",
+      "purl": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@3.0.4",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@3.0.4",
+      "licenses": [
+        {
+          "expression": "MIT"
+        }
+      ],
+      "externalReferences": [
+        {
+          "type": "distribution",
+          "url": "https://github.com/floegence/flowersec.git"
+        }
+      ],
+      "properties": [
+        {
+          "name": "flowersec:declared-license",
+          "value": "MIT"
+        },
+        {
+          "name": "flowersec:source-offer-required",
+          "value": "false"
+        }
+      ]
+    },
+    {
+      "type": "library",
+      "name": "@floegence/flowersec-node-native-linux-arm64-gnu",
+      "version": "3.0.4",
+      "purl": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@3.0.4",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@3.0.4",
+      "licenses": [
+        {
+          "expression": "MIT"
+        }
+      ],
+      "externalReferences": [
+        {
+          "type": "distribution",
+          "url": "https://github.com/floegence/flowersec.git"
+        }
+      ],
+      "properties": [
+        {
+          "name": "flowersec:declared-license",
+          "value": "MIT"
+        },
+        {
+          "name": "flowersec:source-offer-required",
+          "value": "false"
+        }
+      ]
+    },
+    {
+      "type": "library",
+      "name": "@floegence/flowersec-node-native-linux-x64-gnu",
+      "version": "3.0.4",
+      "purl": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@3.0.4",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@3.0.4",
+      "licenses": [
+        {
+          "expression": "MIT"
+        }
+      ],
+      "externalReferences": [
+        {
+          "type": "distribution",
+          "url": "https://github.com/floegence/flowersec.git"
+        }
+      ],
+      "properties": [
+        {
+          "name": "flowersec:declared-license",
+          "value": "MIT"
+        },
+        {
+          "name": "flowersec:source-offer-required",
+          "value": "false"
+        }
+      ]
+    },
     {
       "type": "library",
       "name": "@noble/ciphers",
@@ -190,8 +330,9 @@
   ],
   "dependencies": [
     {
-      "ref": "pkg:npm/%40floegence/flowersec-core@3.0.1",
+      "ref": "pkg:npm/%40floegence/flowersec-core@3.0.4",
       "dependsOn": [
+        "pkg:npm/%40floegence/flowersec-node-native@3.0.4",
         "pkg:npm/%40noble/ciphers@2.3.0",
         "pkg:npm/%40noble/curves@2.3.0",
         "pkg:npm/%40noble/hashes@2.3.0",
@@ -199,6 +340,31 @@
         "pkg:npm/ws@8.21.3"
       ]
     },
+    {
+      "ref": "pkg:npm/%40floegence/flowersec-node-native@3.0.4",
+      "dependsOn": [
+        "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@3.0.4",
+        "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@3.0.4",
+        "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@3.0.4",
+        "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@3.0.4"
+      ]
+    },
+    {
+      "ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@3.0.4",
+      "dependsOn": []
+    },
+    {
+      "ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@3.0.4",
+      "dependsOn": []
+    },
+    {
+      "ref": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@3.0.4",
+      "dependsOn": []
+    },
+    {
+      "ref": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@3.0.4",
+      "dependsOn": []
+    },
     {
       "ref": "pkg:npm/%40noble/ciphers@2.3.0",
       "dependsOn": []

package/sbom/spdx.json

@@ -3,7 +3,7 @@
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "name": "flowersec-ts",
-  "documentNamespace": "https://github.com/floegence/flowersec/sbom/flowersec-ts/428d40c24d97553e640a89f6e0397fed24c3106752eb8397571157fb9ea19172",
+  "documentNamespace": "https://github.com/floegence/flowersec/sbom/flowersec-ts/af5a7b36732531ffcf37270c1412322cd50ddf095686ccd1bf28d2d95703edca",
   "creationInfo": {
     "created": "1970-01-01T00:00:00Z",
     "creators": [
@@ -13,19 +13,104 @@
   "packages": [
     {
       "name": "@floegence/flowersec-core",
-      "SPDXID": "SPDXRef-Package-ceebb46445ec0583ce86",
-      "versionInfo": "3.0.1",
+      "SPDXID": "SPDXRef-Package-b0bcf794da04b4bb0d33",
+      "versionInfo": "3.0.4",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
       "licenseDeclared": "NOASSERTION",
       "copyrightText": "NOASSERTION",
-      "comment": "Flowersec source inventory SHA-256: 428d40c24d97553e640a89f6e0397fed24c3106752eb8397571157fb9ea19172",
+      "comment": "Flowersec source inventory SHA-256: af5a7b36732531ffcf37270c1412322cd50ddf095686ccd1bf28d2d95703edca",
       "externalRefs": [
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40floegence/flowersec-core@3.0.1"
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-core@3.0.4"
+        }
+      ]
+    },
+    {
+      "name": "@floegence/flowersec-node-native",
+      "SPDXID": "SPDXRef-Package-e02218f14f5d8e6d4c39",
+      "versionInfo": "3.0.4",
+      "downloadLocation": "https://github.com/floegence/flowersec.git",
+      "filesAnalyzed": false,
+      "licenseConcluded": "MIT",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native@3.0.4"
+        }
+      ]
+    },
+    {
+      "name": "@floegence/flowersec-node-native-darwin-arm64",
+      "SPDXID": "SPDXRef-Package-0172623f618b3a03e11f",
+      "versionInfo": "3.0.4",
+      "downloadLocation": "https://github.com/floegence/flowersec.git",
+      "filesAnalyzed": false,
+      "licenseConcluded": "MIT",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@3.0.4"
+        }
+      ]
+    },
+    {
+      "name": "@floegence/flowersec-node-native-darwin-x64",
+      "SPDXID": "SPDXRef-Package-413ba6178e801251e1ee",
+      "versionInfo": "3.0.4",
+      "downloadLocation": "https://github.com/floegence/flowersec.git",
+      "filesAnalyzed": false,
+      "licenseConcluded": "MIT",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@3.0.4"
+        }
+      ]
+    },
+    {
+      "name": "@floegence/flowersec-node-native-linux-arm64-gnu",
+      "SPDXID": "SPDXRef-Package-ec8a15951af6659e94c7",
+      "versionInfo": "3.0.4",
+      "downloadLocation": "https://github.com/floegence/flowersec.git",
+      "filesAnalyzed": false,
+      "licenseConcluded": "MIT",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@3.0.4"
+        }
+      ]
+    },
+    {
+      "name": "@floegence/flowersec-node-native-linux-x64-gnu",
+      "SPDXID": "SPDXRef-Package-9ac371e45870cc2a2296",
+      "versionInfo": "3.0.4",
+      "downloadLocation": "https://github.com/floegence/flowersec.git",
+      "filesAnalyzed": false,
+      "licenseConcluded": "MIT",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@3.0.4"
         }
       ]
     },
@@ -136,33 +221,58 @@
     {
       "spdxElementId": "SPDXRef-DOCUMENT",
       "relationshipType": "DESCRIBES",
-      "relatedSpdxElement": "SPDXRef-Package-ceebb46445ec0583ce86"
+      "relatedSpdxElement": "SPDXRef-Package-b0bcf794da04b4bb0d33"
     },
     {
-      "spdxElementId": "SPDXRef-Package-ceebb46445ec0583ce86",
+      "spdxElementId": "SPDXRef-Package-b0bcf794da04b4bb0d33",
+      "relationshipType": "DEPENDS_ON",
+      "relatedSpdxElement": "SPDXRef-Package-e02218f14f5d8e6d4c39"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-b0bcf794da04b4bb0d33",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-5ce913a03239b02770fb"
     },
     {
-      "spdxElementId": "SPDXRef-Package-ceebb46445ec0583ce86",
+      "spdxElementId": "SPDXRef-Package-b0bcf794da04b4bb0d33",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-01009adf60db02c13634"
     },
     {
-      "spdxElementId": "SPDXRef-Package-ceebb46445ec0583ce86",
+      "spdxElementId": "SPDXRef-Package-b0bcf794da04b4bb0d33",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-8815b117c8a1d5f7eeb0"
     },
     {
-      "spdxElementId": "SPDXRef-Package-ceebb46445ec0583ce86",
+      "spdxElementId": "SPDXRef-Package-b0bcf794da04b4bb0d33",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-f8b45a289df643042b94"
     },
     {
-      "spdxElementId": "SPDXRef-Package-ceebb46445ec0583ce86",
+      "spdxElementId": "SPDXRef-Package-b0bcf794da04b4bb0d33",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-b779412f685822663496"
     },
+    {
+      "spdxElementId": "SPDXRef-Package-e02218f14f5d8e6d4c39",
+      "relationshipType": "DEPENDS_ON",
+      "relatedSpdxElement": "SPDXRef-Package-0172623f618b3a03e11f"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-e02218f14f5d8e6d4c39",
+      "relationshipType": "DEPENDS_ON",
+      "relatedSpdxElement": "SPDXRef-Package-413ba6178e801251e1ee"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-e02218f14f5d8e6d4c39",
+      "relationshipType": "DEPENDS_ON",
+      "relatedSpdxElement": "SPDXRef-Package-ec8a15951af6659e94c7"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package-e02218f14f5d8e6d4c39",
+      "relationshipType": "DEPENDS_ON",
+      "relatedSpdxElement": "SPDXRef-Package-9ac371e45870cc2a2296"
+    },
     {
       "spdxElementId": "SPDXRef-Package-01009adf60db02c13634",
       "relationshipType": "DEPENDS_ON",