@floegence/flowersec-core 3.0.2 → 3.0.4

package/README.md

@@ -15,7 +15,7 @@ npm install @floegence/flowersec-core
 
 - `@floegence/flowersec-core` exports the portable artifact, lease, session, stream, RPC, stream-metadata, and connection-controller API, plus profile-owned unreliable messages when negotiated.
 - `@floegence/flowersec-core/browser` adds `connect(...)`, `createConnectionController(...)`, and their options.
-- `@floegence/flowersec-core/node` adds the V3 `connect(...)`, `createConnectionController(...)`, direct-only `createAcceptor(...)`, opaque `createTunnelRuntime(...)`, `AcceptedSession`, `SessionHandlers`, and `RPCHandlers` APIs. Legacy V2 server, control-plane, and `ProxyServer` APIs are available only under the explicit `node.v2` namespace.
+- `@floegence/flowersec-core/node` adds the V3 `connect(...)`, `createConnectionController(...)`, direct-only `createAcceptor(...)`, opaque `createTunnelRuntime(...)`, `AcceptedSession`, `SessionHandlers`, and `RPCHandlers` APIs. Legacy V2 server, control-plane, and `ProxyServer` APIs are available only under the explicit `node.v2` namespace; the Go control-plane remains the only v3 invitation issuer.
 - `@floegence/flowersec-core/proxy` adds the `Session`-based HTTP/WebSocket runtime, Service Worker and controller/app-window bridges, strict `proxy.runtime@2` validation, and `connectProxyBrowser(...)` composition.
 
 The root type exports are:
@@ -151,7 +151,8 @@ Flowersec-owned optional native addon wrapper and one of its supported
 prebuilt platform packages; it never loads from the browser entrypoint. The
 wrapper selects the matching optional package for macOS arm64/x64 or Linux
 arm64/x64 glibc. Windows and musl packages are not published. The V3 Node
-entrypoint keeps the control plane and `ProxyServer` behind `node.v2`; the
+entrypoint keeps the legacy control plane and `ProxyServer` behind `node.v2`; it
+does not issue v3 invitations, which are produced by the Go control-plane. The
 relay never terminates an E2EE Session. WebTransport is an optional adapter
 profile and the Node.js runtime
 does not currently expose a production adapter.

package/THIRD_PARTY_NOTICES.md

@@ -3,11 +3,11 @@
 This file is generated from the canonical Flowersec source dependency inventory for flowersec-ts.
 Do not edit it manually. License decisions are reviewed by the repository source license policy.
 
-- @floegence/flowersec-node-native 3.0.2 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
-- @floegence/flowersec-node-native-darwin-arm64 3.0.2 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
-- @floegence/flowersec-node-native-darwin-x64 3.0.2 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
-- @floegence/flowersec-node-native-linux-arm64-gnu 3.0.2 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
-- @floegence/flowersec-node-native-linux-x64-gnu 3.0.2 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
+- @floegence/flowersec-node-native 3.0.4 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
+- @floegence/flowersec-node-native-darwin-arm64 3.0.4 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
+- @floegence/flowersec-node-native-darwin-x64 3.0.4 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
+- @floegence/flowersec-node-native-linux-arm64-gnu 3.0.4 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
+- @floegence/flowersec-node-native-linux-x64-gnu 3.0.4 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
 - @noble/ciphers 2.3.0 (Declared: MIT; selected: MIT; source: https://registry.npmjs.org/@noble/ciphers/-/ciphers-2.3.0.tgz)
 - @noble/curves 2.3.0 (Declared: MIT; selected: MIT; source: https://registry.npmjs.org/@noble/curves/-/curves-2.3.0.tgz)
 - @noble/hashes 2.3.0 (Declared: MIT; selected: MIT; source: https://registry.npmjs.org/@noble/hashes/-/hashes-2.3.0.tgz)

package/dist/v2/protocol.js

@@ -385,6 +385,8 @@ export function decodeStreamKeyUpdateACKV2(raw) {
     assertLogicalStreamID(value.logicalStreamID);
     if (value.transition === 0n)
         throw new ProtocolV2Error("stream rekey transition must be non-zero");
+    if (value.epoch === 0)
+        throw new ProtocolV2Error("stream rekey epoch must be non-zero");
     return value;
 }
 export function buildRecordAAD(h3, logicalStreamID, direction, rawHeader) {

package/dist/v2/session.d.ts

@@ -135,6 +135,7 @@ export declare class SessionV2 implements SessionV2Contract {
     private idleWatchdogStarted;
     private idleTimerCancel;
     private readonly terminationState;
+    private readonly terminationController;
     private readonly rpcRouter;
     constructor(carrier: CarrierSessionV2, control: CarrierStreamV2, controlReader: ExactReader, config: SessionConfigV2, material: HandshakeMaterial);
     openStream(kind: string, options?: InternalStreamOpenOptionsV2): Promise<ByteStreamV2>;
@@ -149,6 +150,7 @@ export declare class SessionV2 implements SessionV2Contract {
     installReceiveRoots(epoch: number, roots: EpochRootsV2): void;
     transcriptHash(): Uint8Array;
     receiveDirectionValue(): DirectionV2;
+    terminationSignal(): AbortSignal;
     sendStreamRecord(stream: EncryptedStreamV2, type: InnerTypeV2, payload: Uint8Array, signal?: AbortSignal): Promise<void>;
     readStreamRecord(stream: EncryptedStreamV2): Promise<Readonly<{
         type: InnerTypeV2;
@@ -238,6 +240,7 @@ declare class EncryptedStreamV2 implements ByteStreamV2 {
     private pendingSendRekey;
     private lastSendRekeyACK;
     private receiveRekey;
+    private receiveRekeyChanged;
     constructor(session: SessionV2, carrier: CarrierStreamV2, id: bigint, kind: string, sendEpoch: number, receiveEpoch: number, permitRelease: () => void, reader?: ExactReader);
     read(options?: OperationOptionsV2): Promise<Uint8Array | null>;
     write(payload: Uint8Array, options?: OperationOptionsV2): Promise<number>;
@@ -253,6 +256,7 @@ declare class EncryptedStreamV2 implements ByteStreamV2 {
     }>;
     waitReceiveRekey(transition: bigint, epoch: number, signal?: AbortSignal): Promise<void>;
     publishReceiveRekey(transition: bigint, epoch: number): void;
+    private notifyReceiveRekeyChanged;
     startPump(): void;
     markOpen(): void;
     markTerminal(error: Error): boolean;

package/dist/v2/session.js

@@ -140,6 +140,7 @@ export class SessionV2 {
     idleWatchdogStarted = false;
     idleTimerCancel;
     terminationState = deferred();
+    terminationController = new AbortController();
     rpcRouter;
     constructor(carrier, control, controlReader, config, material) {
         this.carrier = carrier;
@@ -269,6 +270,9 @@ export class SessionV2 {
     receiveDirectionValue() {
         return this.receiveDirection;
     }
+    terminationSignal() {
+        return this.terminationController.signal;
+    }
     async sendStreamRecord(stream, type, payload, signal) {
         this.assertOpen();
         const inner = encodeInnerRecordV2(type, payload);
@@ -1080,6 +1084,7 @@ export class SessionV2 {
     fail(error, abortCarrier = true) {
         if (this.lifecycle === "closed")
             return;
+        this.terminationController.abort(error);
         this.controlTerminalSealed = true;
         this.beginClosing();
         const normalPeerCarrierClose = this.sessionCloseCommitted && error instanceof CarrierError && error.code === "closed";
@@ -1147,6 +1152,7 @@ class EncryptedStreamV2 {
     pendingSendRekey;
     lastSendRekeyACK;
     receiveRekey;
+    receiveRekeyChanged = deferred();
     constructor(session, carrier, id, kind, sendEpoch, receiveEpoch, permitRelease, reader) {
         this.session = session;
         this.carrier = carrier;
@@ -1256,7 +1262,7 @@ class EncryptedStreamV2 {
                 await raceAbort(pending.acknowledged.promise, signal);
                 return;
             }
-            await raceAbort(new Promise((resolve) => setTimeout(resolve, 0)), signal);
+            await raceAbort(this.receiveRekeyChanged.promise, signal);
             if (this.terminalError !== undefined || this.remoteFIN)
                 return;
         }
@@ -1266,6 +1272,11 @@ class EncryptedStreamV2 {
             this.receiveRekey = undefined;
         }
     }
+    notifyReceiveRekeyChanged() {
+        const changed = this.receiveRekeyChanged;
+        this.receiveRekeyChanged = deferred();
+        changed.resolve();
+    }
     startPump() {
         if (this.pumpStarted)
             return;
@@ -1283,6 +1294,7 @@ class EncryptedStreamV2 {
         this.pendingSendRekey = undefined;
         pendingSendRekey?.armed.reject(error);
         pendingSendRekey?.done.reject(error);
+        this.notifyReceiveRekeyChanged();
         this.opened.reject(error);
         this.data.fail(error);
         return true;
@@ -1412,11 +1424,12 @@ class EncryptedStreamV2 {
         this.receiveSequence = 0n;
         const pending = { transition, epoch: nextEpoch, acknowledged: deferred() };
         this.receiveRekey = pending;
+        this.notifyReceiveRekeyChanged();
         await this.send(InnerTypeV2.StreamKeyUpdateACK, encodeStreamKeyUpdateACKV2({
             logicalStreamID: this.id,
             transition,
             epoch: nextEpoch,
-        }));
+        }), this.session.terminationSignal());
         pending.acknowledged.resolve();
     }
     receiveStreamKeyUpdateACK(payload) {

package/dist/v3/protocol.js

@@ -405,6 +405,8 @@ export function decodeStreamKeyUpdateACKV3(raw) {
     assertLogicalStreamID(value.logicalStreamID);
     if (value.transition === 0n)
         throw new ProtocolV3Error("stream rekey transition must be non-zero");
+    if (value.epoch === 0)
+        throw new ProtocolV3Error("stream rekey epoch must be non-zero");
     return value;
 }
 export function buildRecordAAD(h3, logicalStreamID, direction, rawHeader) {

package/dist/v3/session.d.ts

@@ -136,6 +136,7 @@ export declare class SessionV3 implements SessionV3Contract {
     private idleDeadlineMs;
     private idleTimerCancel;
     private readonly terminationState;
+    private readonly terminationController;
     private readonly rpcRouter;
     constructor(carrier: CarrierSessionV3, control: CarrierStreamV3, controlReader: ExactReader, config: SessionConfigV3, material: HandshakeMaterial);
     openStream(kind: string, options?: InternalStreamOpenOptionsV3): Promise<ByteStreamV3>;
@@ -150,6 +151,7 @@ export declare class SessionV3 implements SessionV3Contract {
     installReceiveRoots(epoch: number, roots: EpochRootsV3): void;
     transcriptHash(): Uint8Array;
     receiveDirectionValue(): DirectionV3;
+    terminationSignal(): AbortSignal;
     sendStreamRecord(stream: EncryptedStreamV3, type: InnerTypeV3, payload: Uint8Array, signal?: AbortSignal): Promise<void>;
     readStreamRecord(stream: EncryptedStreamV3): Promise<Readonly<{
         type: InnerTypeV3;
@@ -244,6 +246,7 @@ declare class EncryptedStreamV3 implements ByteStreamV3 {
     private receiveRekey;
     private readonly sendMaterials;
     private readonly receiveMaterials;
+    private receiveRekeyChanged;
     constructor(session: SessionV3, carrier: CarrierStreamV3, id: bigint, kind: string, sendEpoch: number, receiveEpoch: number, permitRelease: () => void, reader?: ExactReader);
     read(options?: OperationOptionsV3): Promise<Uint8Array | null>;
     write(payload: Uint8Array, options?: OperationOptionsV3): Promise<number>;
@@ -259,6 +262,7 @@ declare class EncryptedStreamV3 implements ByteStreamV3 {
     }>;
     waitReceiveRekey(transition: bigint, epoch: number, signal?: AbortSignal): Promise<void>;
     publishReceiveRekey(transition: bigint, epoch: number): void;
+    private notifyReceiveRekeyChanged;
     startPump(): void;
     markOpen(): void;
     markTerminal(error: Error): boolean;

package/dist/v3/session.js

@@ -143,6 +143,7 @@ export class SessionV3 {
     idleDeadlineMs;
     idleTimerCancel;
     terminationState = deferred();
+    terminationController = new AbortController();
     rpcRouter;
     constructor(carrier, control, controlReader, config, material) {
         this.carrier = carrier;
@@ -279,6 +280,9 @@ export class SessionV3 {
     receiveDirectionValue() {
         return this.receiveDirection;
     }
+    terminationSignal() {
+        return this.terminationController.signal;
+    }
     async sendStreamRecord(stream, type, payload, signal) {
         this.assertOpen();
         const inner = encodeInnerRecordV3(type, payload);
@@ -1192,6 +1196,7 @@ export class SessionV3 {
     fail(error, abortCarrier = true) {
         if (this.lifecycle === "closed")
             return;
+        this.terminationController.abort(error);
         this.controlTerminalSealed = true;
         this.beginClosing();
         const pendingSessionRekey = this.pendingSessionRekey;
@@ -1265,6 +1270,7 @@ class EncryptedStreamV3 {
     receiveRekey;
     sendMaterials = new Map();
     receiveMaterials = new Map();
+    receiveRekeyChanged = deferred();
     constructor(session, carrier, id, kind, sendEpoch, receiveEpoch, permitRelease, reader) {
         this.session = session;
         this.carrier = carrier;
@@ -1374,7 +1380,7 @@ class EncryptedStreamV3 {
                 await raceAbort(pending.acknowledged.promise, signal);
                 return;
             }
-            await raceAbort(new Promise((resolve) => setTimeout(resolve, 0)), signal);
+            await raceAbort(this.receiveRekeyChanged.promise, signal);
             if (this.terminalError !== undefined || this.remoteFIN)
                 return;
         }
@@ -1384,6 +1390,11 @@ class EncryptedStreamV3 {
             this.receiveRekey = undefined;
         }
     }
+    notifyReceiveRekeyChanged() {
+        const changed = this.receiveRekeyChanged;
+        this.receiveRekeyChanged = deferred();
+        changed.resolve();
+    }
     startPump() {
         if (this.pumpStarted)
             return;
@@ -1401,6 +1412,7 @@ class EncryptedStreamV3 {
         this.pendingSendRekey = undefined;
         pendingSendRekey?.armed.reject(error);
         pendingSendRekey?.done.reject(error);
+        this.notifyReceiveRekeyChanged();
         this.opened.reject(error);
         this.data.fail(error);
         return true;
@@ -1558,11 +1570,12 @@ class EncryptedStreamV3 {
         pruneRecordMaterials(this.receiveMaterials, new Set(this.priorACK === undefined ? [nextEpoch] : [header.epoch, nextEpoch]));
         const pending = { transition, epoch: nextEpoch, acknowledged: deferred() };
         this.receiveRekey = pending;
+        this.notifyReceiveRekeyChanged();
         await this.send(InnerTypeV3.StreamKeyUpdateACK, encodeStreamKeyUpdateACKV3({
             logicalStreamID: this.id,
             transition,
             epoch: nextEpoch,
-        }));
+        }), this.session.terminationSignal());
         pending.acknowledged.resolve();
     }
     receiveStreamKeyUpdateACK(payload) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floegence/flowersec-core",
-  "version": "3.0.2",
+  "version": "3.0.4",
   "description": "Flowersec core TypeScript library for carrier-neutral encrypted sessions and multiplexed streams.",
   "license": "MIT",
   "repository": {
@@ -76,9 +76,6 @@
     "tr46": "5.0.0",
     "ws": "^8.21.2"
   },
-  "optionalDependencies": {
-    "@floegence/flowersec-node-native": "3.0.2"
-  },
   "devDependencies": {
     "@playwright/test": "1.62.1",
     "@types/node": "^26.1.2",
@@ -95,5 +92,8 @@
     "vite": "^8.2.1",
     "vitest": "4.1.10"
   },
-  "flowersecSourceCommit": "998295bcfd9c7f96cc96444ec0d48e268366363e"
+  "optionalDependencies": {
+    "@floegence/flowersec-node-native": "3.0.4"
+  },
+  "flowersecSourceCommit": "35dbe22a6aa1b10d53587e19a18232e2dfb2bbf4"
 }

package/sbom/cyclonedx.json

@@ -1,20 +1,20 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:83a8f008-e5ff-522d-8fc3-eccb503674cd",
+  "serialNumber": "urn:uuid:cff299ba-9035-5c07-8271-4cad66e78e07",
   "version": 1,
   "metadata": {
     "component": {
       "type": "library",
       "name": "@floegence/flowersec-core",
-      "version": "3.0.2",
-      "purl": "pkg:npm/%40floegence/flowersec-core@3.0.2",
-      "bom-ref": "pkg:npm/%40floegence/flowersec-core@3.0.2"
+      "version": "3.0.4",
+      "purl": "pkg:npm/%40floegence/flowersec-core@3.0.4",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-core@3.0.4"
     },
     "properties": [
       {
         "name": "flowersec:source-inventory-sha256",
-        "value": "e8ae21231918c515d87037589e2479d87b894cc7347dda3205213a8415069678"
+        "value": "af5a7b36732531ffcf37270c1412322cd50ddf095686ccd1bf28d2d95703edca"
       }
     ]
   },
@@ -22,9 +22,9 @@
     {
       "type": "library",
       "name": "@floegence/flowersec-node-native",
-      "version": "3.0.2",
-      "purl": "pkg:npm/%40floegence/flowersec-node-native@3.0.2",
-      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native@3.0.2",
+      "version": "3.0.4",
+      "purl": "pkg:npm/%40floegence/flowersec-node-native@3.0.4",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native@3.0.4",
       "licenses": [
         {
           "expression": "MIT"
@@ -50,9 +50,9 @@
     {
       "type": "library",
       "name": "@floegence/flowersec-node-native-darwin-arm64",
-      "version": "3.0.2",
-      "purl": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@3.0.2",
-      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@3.0.2",
+      "version": "3.0.4",
+      "purl": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@3.0.4",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@3.0.4",
       "licenses": [
         {
           "expression": "MIT"
@@ -78,9 +78,9 @@
     {
       "type": "library",
       "name": "@floegence/flowersec-node-native-darwin-x64",
-      "version": "3.0.2",
-      "purl": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@3.0.2",
-      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@3.0.2",
+      "version": "3.0.4",
+      "purl": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@3.0.4",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@3.0.4",
       "licenses": [
         {
           "expression": "MIT"
@@ -106,9 +106,9 @@
     {
       "type": "library",
       "name": "@floegence/flowersec-node-native-linux-arm64-gnu",
-      "version": "3.0.2",
-      "purl": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@3.0.2",
-      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@3.0.2",
+      "version": "3.0.4",
+      "purl": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@3.0.4",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@3.0.4",
       "licenses": [
         {
           "expression": "MIT"
@@ -134,9 +134,9 @@
     {
       "type": "library",
       "name": "@floegence/flowersec-node-native-linux-x64-gnu",
-      "version": "3.0.2",
-      "purl": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@3.0.2",
-      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@3.0.2",
+      "version": "3.0.4",
+      "purl": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@3.0.4",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@3.0.4",
       "licenses": [
         {
           "expression": "MIT"
@@ -330,9 +330,9 @@
   ],
   "dependencies": [
     {
-      "ref": "pkg:npm/%40floegence/flowersec-core@3.0.2",
+      "ref": "pkg:npm/%40floegence/flowersec-core@3.0.4",
       "dependsOn": [
-        "pkg:npm/%40floegence/flowersec-node-native@3.0.2",
+        "pkg:npm/%40floegence/flowersec-node-native@3.0.4",
         "pkg:npm/%40noble/ciphers@2.3.0",
         "pkg:npm/%40noble/curves@2.3.0",
         "pkg:npm/%40noble/hashes@2.3.0",
@@ -341,28 +341,28 @@
       ]
     },
     {
-      "ref": "pkg:npm/%40floegence/flowersec-node-native@3.0.2",
+      "ref": "pkg:npm/%40floegence/flowersec-node-native@3.0.4",
       "dependsOn": [
-        "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@3.0.2",
-        "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@3.0.2",
-        "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@3.0.2",
-        "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@3.0.2"
+        "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@3.0.4",
+        "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@3.0.4",
+        "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@3.0.4",
+        "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@3.0.4"
       ]
     },
     {
-      "ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@3.0.2",
+      "ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@3.0.4",
       "dependsOn": []
     },
     {
-      "ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@3.0.2",
+      "ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@3.0.4",
       "dependsOn": []
     },
     {
-      "ref": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@3.0.2",
+      "ref": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@3.0.4",
       "dependsOn": []
     },
     {
-      "ref": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@3.0.2",
+      "ref": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@3.0.4",
       "dependsOn": []
     },
     {

package/sbom/spdx.json

@@ -3,7 +3,7 @@
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "name": "flowersec-ts",
-  "documentNamespace": "https://github.com/floegence/flowersec/sbom/flowersec-ts/e8ae21231918c515d87037589e2479d87b894cc7347dda3205213a8415069678",
+  "documentNamespace": "https://github.com/floegence/flowersec/sbom/flowersec-ts/af5a7b36732531ffcf37270c1412322cd50ddf095686ccd1bf28d2d95703edca",
   "creationInfo": {
     "created": "1970-01-01T00:00:00Z",
     "creators": [
@@ -13,26 +13,26 @@
   "packages": [
     {
       "name": "@floegence/flowersec-core",
-      "SPDXID": "SPDXRef-Package-dbf050f7aea8ed6130d9",
-      "versionInfo": "3.0.2",
+      "SPDXID": "SPDXRef-Package-b0bcf794da04b4bb0d33",
+      "versionInfo": "3.0.4",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
       "licenseDeclared": "NOASSERTION",
       "copyrightText": "NOASSERTION",
-      "comment": "Flowersec source inventory SHA-256: e8ae21231918c515d87037589e2479d87b894cc7347dda3205213a8415069678",
+      "comment": "Flowersec source inventory SHA-256: af5a7b36732531ffcf37270c1412322cd50ddf095686ccd1bf28d2d95703edca",
       "externalRefs": [
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40floegence/flowersec-core@3.0.2"
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-core@3.0.4"
         }
       ]
     },
     {
       "name": "@floegence/flowersec-node-native",
-      "SPDXID": "SPDXRef-Package-16fa3227c088ca725b00",
-      "versionInfo": "3.0.2",
+      "SPDXID": "SPDXRef-Package-e02218f14f5d8e6d4c39",
+      "versionInfo": "3.0.4",
       "downloadLocation": "https://github.com/floegence/flowersec.git",
       "filesAnalyzed": false,
       "licenseConcluded": "MIT",
@@ -42,14 +42,14 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native@3.0.2"
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native@3.0.4"
         }
       ]
     },
     {
       "name": "@floegence/flowersec-node-native-darwin-arm64",
-      "SPDXID": "SPDXRef-Package-caeafda50d3a551d90e0",
-      "versionInfo": "3.0.2",
+      "SPDXID": "SPDXRef-Package-0172623f618b3a03e11f",
+      "versionInfo": "3.0.4",
       "downloadLocation": "https://github.com/floegence/flowersec.git",
       "filesAnalyzed": false,
       "licenseConcluded": "MIT",
@@ -59,14 +59,14 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@3.0.2"
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@3.0.4"
         }
       ]
     },
     {
       "name": "@floegence/flowersec-node-native-darwin-x64",
-      "SPDXID": "SPDXRef-Package-79f8dd2de6e6db1eceb0",
-      "versionInfo": "3.0.2",
+      "SPDXID": "SPDXRef-Package-413ba6178e801251e1ee",
+      "versionInfo": "3.0.4",
       "downloadLocation": "https://github.com/floegence/flowersec.git",
       "filesAnalyzed": false,
       "licenseConcluded": "MIT",
@@ -76,14 +76,14 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@3.0.2"
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@3.0.4"
         }
       ]
     },
     {
       "name": "@floegence/flowersec-node-native-linux-arm64-gnu",
-      "SPDXID": "SPDXRef-Package-a9533873018bd175ddef",
-      "versionInfo": "3.0.2",
+      "SPDXID": "SPDXRef-Package-ec8a15951af6659e94c7",
+      "versionInfo": "3.0.4",
       "downloadLocation": "https://github.com/floegence/flowersec.git",
       "filesAnalyzed": false,
       "licenseConcluded": "MIT",
@@ -93,14 +93,14 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@3.0.2"
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@3.0.4"
         }
       ]
     },
     {
       "name": "@floegence/flowersec-node-native-linux-x64-gnu",
-      "SPDXID": "SPDXRef-Package-46c53b352dd101157f70",
-      "versionInfo": "3.0.2",
+      "SPDXID": "SPDXRef-Package-9ac371e45870cc2a2296",
+      "versionInfo": "3.0.4",
       "downloadLocation": "https://github.com/floegence/flowersec.git",
       "filesAnalyzed": false,
       "licenseConcluded": "MIT",
@@ -110,7 +110,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@3.0.2"
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@3.0.4"
         }
       ]
     },
@@ -221,57 +221,57 @@
     {
       "spdxElementId": "SPDXRef-DOCUMENT",
       "relationshipType": "DESCRIBES",
-      "relatedSpdxElement": "SPDXRef-Package-dbf050f7aea8ed6130d9"
+      "relatedSpdxElement": "SPDXRef-Package-b0bcf794da04b4bb0d33"
     },
     {
-      "spdxElementId": "SPDXRef-Package-dbf050f7aea8ed6130d9",
+      "spdxElementId": "SPDXRef-Package-b0bcf794da04b4bb0d33",
       "relationshipType": "DEPENDS_ON",
-      "relatedSpdxElement": "SPDXRef-Package-16fa3227c088ca725b00"
+      "relatedSpdxElement": "SPDXRef-Package-e02218f14f5d8e6d4c39"
     },
     {
-      "spdxElementId": "SPDXRef-Package-dbf050f7aea8ed6130d9",
+      "spdxElementId": "SPDXRef-Package-b0bcf794da04b4bb0d33",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-5ce913a03239b02770fb"
     },
     {
-      "spdxElementId": "SPDXRef-Package-dbf050f7aea8ed6130d9",
+      "spdxElementId": "SPDXRef-Package-b0bcf794da04b4bb0d33",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-01009adf60db02c13634"
     },
     {
-      "spdxElementId": "SPDXRef-Package-dbf050f7aea8ed6130d9",
+      "spdxElementId": "SPDXRef-Package-b0bcf794da04b4bb0d33",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-8815b117c8a1d5f7eeb0"
     },
     {
-      "spdxElementId": "SPDXRef-Package-dbf050f7aea8ed6130d9",
+      "spdxElementId": "SPDXRef-Package-b0bcf794da04b4bb0d33",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-f8b45a289df643042b94"
     },
     {
-      "spdxElementId": "SPDXRef-Package-dbf050f7aea8ed6130d9",
+      "spdxElementId": "SPDXRef-Package-b0bcf794da04b4bb0d33",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-b779412f685822663496"
     },
     {
-      "spdxElementId": "SPDXRef-Package-16fa3227c088ca725b00",
+      "spdxElementId": "SPDXRef-Package-e02218f14f5d8e6d4c39",
       "relationshipType": "DEPENDS_ON",
-      "relatedSpdxElement": "SPDXRef-Package-caeafda50d3a551d90e0"
+      "relatedSpdxElement": "SPDXRef-Package-0172623f618b3a03e11f"
     },
     {
-      "spdxElementId": "SPDXRef-Package-16fa3227c088ca725b00",
+      "spdxElementId": "SPDXRef-Package-e02218f14f5d8e6d4c39",
       "relationshipType": "DEPENDS_ON",
-      "relatedSpdxElement": "SPDXRef-Package-79f8dd2de6e6db1eceb0"
+      "relatedSpdxElement": "SPDXRef-Package-413ba6178e801251e1ee"
     },
     {
-      "spdxElementId": "SPDXRef-Package-16fa3227c088ca725b00",
+      "spdxElementId": "SPDXRef-Package-e02218f14f5d8e6d4c39",
       "relationshipType": "DEPENDS_ON",
-      "relatedSpdxElement": "SPDXRef-Package-a9533873018bd175ddef"
+      "relatedSpdxElement": "SPDXRef-Package-ec8a15951af6659e94c7"
     },
     {
-      "spdxElementId": "SPDXRef-Package-16fa3227c088ca725b00",
+      "spdxElementId": "SPDXRef-Package-e02218f14f5d8e6d4c39",
       "relationshipType": "DEPENDS_ON",
-      "relatedSpdxElement": "SPDXRef-Package-46c53b352dd101157f70"
+      "relatedSpdxElement": "SPDXRef-Package-9ac371e45870cc2a2296"
     },
     {
       "spdxElementId": "SPDXRef-Package-01009adf60db02c13634",