@floegence/flowersec-core 3.2.1 → 5.0.0

package/dist/public/streamHandlers.js

@@ -1,5 +1,5 @@
 import { SessionError, } from "./contract.js";
-import { validApplicationStreamKind } from "../v2/protocol.js";
+import { validApplicationStreamKind } from "../v3/protocol.js";
 const DEFAULT_MAX_CONCURRENT_STREAMS = 64;
 const MAX_CONCURRENT_STREAMS = 128;
 export class HandlerRegistrationError extends Error {
@@ -11,6 +11,7 @@ export class HandlerRegistrationError extends Error {
     }
 }
 const streamHandlerStates = new WeakMap();
+// The v2 identifier is denied so it cannot be repurposed as an application stream.
 const RESERVED_RPC_KINDS = new Set(["flowersec.rpc.v2", "flowersec.rpc.v3"]);
 /** Carrier-neutral application-stream handlers for any established Session. */
 export class StreamHandlers {
@@ -38,9 +39,6 @@ export class StreamHandlers {
         await serveFrozenStreamHandlers(freezeStreamHandlers(this), session, options, async () => await session.close());
     }
 }
-/** Explicit-compatibility application-stream handlers. */
-export class LegacyStreamHandlers extends StreamHandlers {
-}
 function mutableStreamHandlerState(handlers) {
     const state = streamHandlerStates.get(handlers);
     if (state === undefined)

package/dist/public/streamMetadata.js

@@ -1,4 +1,4 @@
-import { canonicalStreamMetadataJSONV2Internal } from "../v2/protocol.js";
+import { canonicalStreamMetadataJSONV3Internal } from "../v3/protocol.js";
 export class StreamMetadataError extends Error {
     constructor() {
         super("invalid Flowersec stream metadata");
@@ -18,7 +18,7 @@ export class StreamMetadata {
 }
 export function createStreamMetadata(values) {
     try {
-        const canonical = canonicalStreamMetadataJSONV2Internal(values);
+        const canonical = canonicalStreamMetadataJSONV3Internal(values);
         return StreamMetadata.fromCanonicalValues(deepFreeze(JSON.parse(canonical)));
     }
     catch {

package/dist/runtime/errors.d.ts

@@ -1,6 +1,6 @@
 export type RuntimeErrorCode = "runtime_unsupported" | "runtime_start_failed" | "runtime_crashed";
 export declare class RuntimeError extends Error {
     readonly code: RuntimeErrorCode;
-    readonly cause?: unknown | undefined;
-    constructor(code: RuntimeErrorCode, message: string, cause?: unknown | undefined);
+    readonly cause?: unknown;
+    constructor(code: RuntimeErrorCode, message: string, cause?: unknown);
 }

package/dist/testSupport/tlsFixture.d.ts

@@ -0,0 +1,2 @@
+export declare const testCertificatePEM: string;
+export declare const testPrivateKeyPEM: string;

package/dist/testSupport/tlsFixture.js

@@ -0,0 +1,8 @@
+const certificateDER = Buffer.from("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", "base64");
+const privateKeyDER = Buffer.from("MC4CAQAwBQYDK2VwBCIEICxYUWHqGoh0CBBohsaNg/NThm1n3UeWCzYuq6jS+Qi6", "base64");
+export const testCertificatePEM = pem("CERTIFICATE", certificateDER);
+export const testPrivateKeyPEM = pem("PRIVATE KEY", privateKeyDER);
+function pem(label, der) {
+    const lines = Buffer.from(der).toString("base64").match(/.{1,64}/gu) ?? [];
+    return `-----BEGIN ${label}-----\n${lines.join("\n")}\n-----END ${label}-----\n`;
+}

package/dist/utils/errors.d.ts

@@ -4,5 +4,3 @@ export declare class TimeoutError extends Error {
 export declare class AbortError extends Error {
     constructor(message?: string);
 }
-export type ConnectErrorPath = "auto" | "tunnel" | "direct";
-export type ConnectErrorStage = "validate" | "connect" | "session" | "rpc" | "close";

package/dist/utils/errors.js

@@ -1,4 +1,3 @@
-import { ConnectError } from "../public/connectError.js";
 export class TimeoutError extends Error {
     constructor(message = "timeout") {
         super(message);
@@ -11,87 +10,8 @@ export class AbortError extends Error {
         this.name = "AbortError";
     }
 }
-const internalDetails = new WeakMap();
-/** @internal */
-export function createConnectErrorInternal(args) {
-    const error = new ConnectError(publicCode(args.code));
-    internalDetails.set(error, Object.freeze({
-        code: args.code,
-        stage: args.stage,
-        ...(args.cause === undefined ? {} : { cause: args.cause }),
-        diagnostics: Object.freeze((args.diagnostics ?? []).map((diagnostic) => Object.freeze({ ...diagnostic }))),
-    }));
-    return error;
-}
-/** @internal */
-export function connectErrorDetailsInternal(error) {
-    return internalDetails.get(error) ?? Object.freeze({
-        code: internalCode(error.code),
-        stage: "connect",
-        diagnostics: Object.freeze([]),
-    });
-}
-/** @internal */
-export function isTimeoutError(e) {
-    return e instanceof TimeoutError;
-}
-/** @internal */
-export function isAbortError(e) {
-    return e instanceof AbortError;
-}
-/** @internal */
-export function isConnectError(e) {
-    return e instanceof ConnectError;
-}
 /** @internal */
 export function throwIfAborted(signal, message) {
     if (signal?.aborted)
         throw new AbortError(message);
 }
-function publicCode(code) {
-    switch (code) {
-        case "timeout": return "timeout";
-        case "canceled": return "canceled";
-        case "resolve_failed": return "resolve_failed";
-        case "credential_commit_failed": return "credential_spend_failed";
-        case "handshake_failed": return "handshake_failed";
-        case "rpc_failed": return "rpc_failed";
-        case "resource_exhausted": return "resource_exhausted";
-        case "not_connected": return "not_connected";
-        case "invalid_option": return "invalid_options";
-        case "timestamp_after_init_exp": return "expired_artifact";
-        case "dial_failed":
-        case "upgrade_failed":
-        case "attach_failed":
-        case "unsupported_capability":
-        case "too_many_connections":
-        case "policy_denied":
-        case "policy_error":
-        case "replace_rate_limited":
-        case "ping_failed":
-        case "rekey_failed":
-        case "mux_failed":
-        case "accept_stream_failed":
-        case "open_stream_failed":
-        case "stream_hello_failed":
-            return "connection_failed";
-        default:
-            return "invalid_input";
-    }
-}
-function internalCode(code) {
-    switch (code) {
-        case "invalid_input": return "invalid_input";
-        case "invalid_options": return "invalid_option";
-        case "expired_artifact": return "timestamp_after_init_exp";
-        case "resolve_failed": return "resolve_failed";
-        case "credential_spend_failed": return "credential_commit_failed";
-        case "connection_failed": return "dial_failed";
-        case "timeout": return "timeout";
-        case "canceled": return "canceled";
-        case "handshake_failed": return "handshake_failed";
-        case "rpc_failed": return "rpc_failed";
-        case "resource_exhausted": return "resource_exhausted";
-        case "not_connected": return "not_connected";
-    }
-}

package/dist/v3/artifact.js

@@ -1,7 +1,8 @@
 import { sha256 } from "@noble/hashes/sha2.js";
 import { base64urlDecode, base64urlEncode } from "../utils/base64url.js";
 import { concatBytes, readU32be, u32be } from "../utils/bin.js";
-import { toASCII } from "../vendor/tr46.js";
+import { unicode151Assigned } from "../generated/unicode151.js";
+import { toASCII, toUnicode } from "../vendor/tr46.js";
 import { canonicalizeJCSV3 } from "./jcs.js";
 import { preflightJSONV3 } from "./jsonPreflight.js";
 import { FLOWERSEC_V3_CRYPTO_LABELS, FLOWERSEC_V3_PROFILE, wireProfileForPathV3, } from "./transportConstants.js";
@@ -671,14 +672,20 @@ function normalizeDNSOrIPv4(host) {
         }
         return parts.map((part) => String(Number(part))).join(".");
     }
-    const ascii = toASCII(host, {
+    const options = {
         checkHyphens: true,
         checkBidi: true,
         checkJoiners: true,
         useSTD3ASCIIRules: true,
         verifyDNSLength: true,
         transitionalProcessing: false,
-    });
+    };
+    if (!hasOnlyUnicode151Scalars(host))
+        throw invalidCandidate("DNS label");
+    const decoded = toUnicode(host, options);
+    if (decoded.error || !hasOnlyUnicode151Scalars(decoded.domain))
+        throw invalidCandidate("DNS label");
+    const ascii = toASCII(host, options);
     if (ascii === null || ascii.endsWith("."))
         throw invalidCandidate("DNS label");
     const normalized = ascii.toLowerCase();
@@ -688,6 +695,13 @@ function normalizeDNSOrIPv4(host) {
     }
     return normalized;
 }
+function hasOnlyUnicode151Scalars(value) {
+    for (const scalar of value) {
+        if (!unicode151Assigned(scalar.codePointAt(0)))
+            return false;
+    }
+    return true;
+}
 function requestFromValidatedArtifact(artifact, candidateSet, chosenCandidateID) {
     const common = {
         profile: PROFILE,

package/dist/v3/carrier.d.ts

@@ -2,8 +2,8 @@ import type { CarrierKind, OperationOptionsV3, PathKind } from "./contract.js";
 export type CarrierErrorCode = "aborted" | "closed" | "reset" | "stop_sending" | "stop_sending_unavailable" | "write_closed" | "datagram_unavailable";
 export declare class CarrierError extends Error {
     readonly code: CarrierErrorCode;
-    readonly cause?: unknown | undefined;
-    constructor(code: CarrierErrorCode, message: string, cause?: unknown | undefined);
+    readonly cause?: unknown;
+    constructor(code: CarrierErrorCode, message: string, cause?: unknown);
 }
 export interface CarrierStreamV3 {
     read(options?: OperationOptionsV3): Promise<Uint8Array | null>;

package/dist/v3/controller.js

@@ -267,17 +267,13 @@ function validateControllerWaitDisposition(value) {
     if (value.kind !== "retry_after") {
         throw new ConnectErrorV3("artifact_invalid", { kind: "terminal" });
     }
-    const deadline = value.notBeforeUnixMilliseconds ?? value.absoluteUnixMilliseconds;
-    if (deadline === undefined || !Number.isSafeInteger(deadline) || deadline < 0 ||
-        deadline > 253_402_300_799_999 || value.notBeforeUnixMilliseconds !== undefined &&
-        value.absoluteUnixMilliseconds !== undefined &&
-        value.notBeforeUnixMilliseconds !== value.absoluteUnixMilliseconds) {
+    const deadline = value.notBeforeUnixMilliseconds;
+    if (!Number.isSafeInteger(deadline) || deadline < 0 || deadline > 253_402_300_799_999) {
         throw new ConnectErrorV3("artifact_invalid", { kind: "terminal" });
     }
     return Object.freeze({
         kind: "retry_after",
         notBeforeUnixMilliseconds: deadline,
-        absoluteUnixMilliseconds: deadline,
     });
 }
 function controllerBackoffForWait(consecutiveFailure) {

package/dist/v3/protocol.js

@@ -3,6 +3,7 @@ import { chacha20poly1305 } from "@noble/ciphers/chacha.js";
 import { expand } from "@noble/hashes/hkdf.js";
 import { hmac } from "@noble/hashes/hmac.js";
 import { sha256 } from "@noble/hashes/sha2.js";
+import { unicode151Assigned } from "../generated/unicode151.js";
 import { FLOWERSEC_V3_CRYPTO_LABELS } from "./transportConstants.js";
 const encoder = new TextEncoder();
 const MAX_UINT32 = 0xffffffff;
@@ -22,81 +23,6 @@ const MAX_OPEN_METADATA_KEYS = 64;
 const MAX_OPEN_METADATA_ARRAY = 32;
 const MAX_OPEN_METADATA_KEY_BYTES = 64;
 const MAX_OPEN_METADATA_STRING_BYTES = 512;
-const UNICODE_15_1_ASSIGNED_RANGES_HEX = [
-    "00000000037700037A00037F00038400038A00038C00038C00038E0003A10003A300052F00053100055600055900058A00058D00058F0005910005C7",
-    "0005D00005EA0005EF0005F400060000070D00070F00074A00074D0007B10007C00007FA0007FD00082D00083000083E00084000085B00085E00085E",
-    "00086000086A00087000088E00089000089100089800098300098500098C00098F0009900009930009A80009AA0009B00009B20009B20009B60009B9",
-    "0009BC0009C40009C70009C80009CB0009CE0009D70009D70009DC0009DD0009DF0009E30009E60009FE000A01000A03000A05000A0A000A0F000A10",
-    "000A13000A28000A2A000A30000A32000A33000A35000A36000A38000A39000A3C000A3C000A3E000A42000A47000A48000A4B000A4D000A51000A51",
-    "000A59000A5C000A5E000A5E000A66000A76000A81000A83000A85000A8D000A8F000A91000A93000AA8000AAA000AB0000AB2000AB3000AB5000AB9",
-    "000ABC000AC5000AC7000AC9000ACB000ACD000AD0000AD0000AE0000AE3000AE6000AF1000AF9000AFF000B01000B03000B05000B0C000B0F000B10",
-    "000B13000B28000B2A000B30000B32000B33000B35000B39000B3C000B44000B47000B48000B4B000B4D000B55000B57000B5C000B5D000B5F000B63",
-    "000B66000B77000B82000B83000B85000B8A000B8E000B90000B92000B95000B99000B9A000B9C000B9C000B9E000B9F000BA3000BA4000BA8000BAA",
-    "000BAE000BB9000BBE000BC2000BC6000BC8000BCA000BCD000BD0000BD0000BD7000BD7000BE6000BFA000C00000C0C000C0E000C10000C12000C28",
-    "000C2A000C39000C3C000C44000C46000C48000C4A000C4D000C55000C56000C58000C5A000C5D000C5D000C60000C63000C66000C6F000C77000C8C",
-    "000C8E000C90000C92000CA8000CAA000CB3000CB5000CB9000CBC000CC4000CC6000CC8000CCA000CCD000CD5000CD6000CDD000CDE000CE0000CE3",
-    "000CE6000CEF000CF1000CF3000D00000D0C000D0E000D10000D12000D44000D46000D48000D4A000D4F000D54000D63000D66000D7F000D81000D83",
-    "000D85000D96000D9A000DB1000DB3000DBB000DBD000DBD000DC0000DC6000DCA000DCA000DCF000DD4000DD6000DD6000DD8000DDF000DE6000DEF",
-    "000DF2000DF4000E01000E3A000E3F000E5B000E81000E82000E84000E84000E86000E8A000E8C000EA3000EA5000EA5000EA7000EBD000EC0000EC4",
-    "000EC6000EC6000EC8000ECE000ED0000ED9000EDC000EDF000F00000F47000F49000F6C000F71000F97000F99000FBC000FBE000FCC000FCE000FDA",
-    "0010000010C50010C70010C70010CD0010CD0010D000124800124A00124D00125000125600125800125800125A00125D00126000128800128A00128D",
-    "0012900012B00012B20012B50012B80012BE0012C00012C00012C20012C50012C80012D60012D800131000131200131500131800135A00135D00137C",
-    "0013800013990013A00013F50013F80013FD00140000169C0016A00016F800170000171500171F00173600174000175300176000176C00176E001770",
-    "0017720017730017800017DD0017E00017E90017F00017F90018000018190018200018780018800018AA0018B00018F500190000191E00192000192B",
-    "00193000193B00194000194000194400196D0019700019740019800019AB0019B00019C90019D00019DA0019DE001A1B001A1E001A5E001A60001A7C",
-    "001A7F001A89001A90001A99001AA0001AAD001AB0001ACE001B00001B4C001B50001B7E001B80001BF3001BFC001C37001C3B001C49001C4D001C88",
-    "001C90001CBA001CBD001CC7001CD0001CFA001D00001F15001F18001F1D001F20001F45001F48001F4D001F50001F57001F59001F59001F5B001F5B",
-    "001F5D001F5D001F5F001F7D001F80001FB4001FB6001FC4001FC6001FD3001FD6001FDB001FDD001FEF001FF2001FF4001FF6001FFE002000002064",
-    "00206600207100207400208E00209000209C0020A00020C00020D00020F000210000218B00219000242600244000244A002460002B73002B76002B95",
-    "002B97002CF3002CF9002D25002D27002D27002D2D002D2D002D30002D67002D6F002D70002D7F002D96002DA0002DA6002DA8002DAE002DB0002DB6",
-    "002DB8002DBE002DC0002DC6002DC8002DCE002DD0002DD6002DD8002DDE002DE0002E5D002E80002E99002E9B002EF3002F00002FD5002FF000303F",
-    "0030410030960030990030FF00310500312F00313100318E0031900031E30031EF00321E00322000A48C00A49000A4C600A4D000A62B00A64000A6F7",
-    "00A70000A7CA00A7D000A7D100A7D300A7D300A7D500A7D900A7F200A82C00A83000A83900A84000A87700A88000A8C500A8CE00A8D900A8E000A953",
-    "00A95F00A97C00A98000A9CD00A9CF00A9D900A9DE00A9FE00AA0000AA3600AA4000AA4D00AA5000AA5900AA5C00AAC200AADB00AAF600AB0100AB06",
-    "00AB0900AB0E00AB1100AB1600AB2000AB2600AB2800AB2E00AB3000AB6B00AB7000ABED00ABF000ABF900AC0000D7A300D7B000D7C600D7CB00D7FB",
-    "00D80000FA6D00FA7000FAD900FB0000FB0600FB1300FB1700FB1D00FB3600FB3800FB3C00FB3E00FB3E00FB4000FB4100FB4300FB4400FB4600FBC2",
-    "00FBD300FD8F00FD9200FDC700FDCF00FE1900FE2000FE5200FE5400FE6600FE6800FE6B00FE7000FE7400FE7600FEFC00FEFF00FEFF00FF0100FFBE",
-    "00FFC200FFC700FFCA00FFCF00FFD200FFD700FFDA00FFDC00FFE000FFE600FFE800FFEE00FFF901000B01000D01002601002801003A01003C01003D",
-    "01003F01004D01005001005D0100800100FA01010001010201010701013301013701018E01019001019C0101A00101A00101D00101FD01028001029C",
-    "0102A00102D00102E00102FB01030001032301032D01034A01035001037A01038001039D01039F0103C30103C80103D501040001049D0104A00104A9",
-    "0104B00104D30104D80104FB01050001052701053001056301056F01057A01057C01058A01058C0105920105940105950105970105A10105A30105B1",
-    "0105B30105B90105BB0105BC0106000107360107400107550107600107670107800107850107870107B00107B20107BA010800010805010808010808",
-    "01080A01083501083701083801083C01083C01083F01085501085701089E0108A70108AF0108E00108F20108F40108F50108FB01091B01091F010939",
-    "01093F01093F0109800109B70109BC0109CF0109D2010A03010A05010A06010A0C010A13010A15010A17010A19010A35010A38010A3A010A3F010A48",
-    "010A50010A58010A60010A9F010AC0010AE6010AEB010AF6010B00010B35010B39010B55010B58010B72010B78010B91010B99010B9C010BA9010BAF",
-    "010C00010C48010C80010CB2010CC0010CF2010CFA010D27010D30010D39010E60010E7E010E80010EA9010EAB010EAD010EB0010EB1010EFD010F27",
-    "010F30010F59010F70010F89010FB0010FCB010FE0010FF601100001104D01105201107501107F0110C20110CD0110CD0110D00110E80110F00110F9",
-    "0111000111340111360111470111500111760111800111DF0111E10111F401120001121101121301124101128001128601128801128801128A01128D",
-    "01128F01129D01129F0112A90112B00112EA0112F00112F901130001130301130501130C01130F01131001131301132801132A011330011332011333",
-    "01133501133901133B01134401134701134801134B01134D01135001135001135701135701135D01136301136601136C01137001137401140001145B",
-    "01145D0114610114800114C70114D00114D90115800115B50115B80115DD01160001164401165001165901166001166C0116800116B90116C00116C9",
-    "01170001171A01171D01172B01173001174601180001183B0118A00118F20118FF01190601190901190901190C011913011915011916011918011935",
-    "01193701193801193B0119460119500119590119A00119A70119AA0119D70119DA0119E4011A00011A47011A50011AA2011AB0011AF8011B00011B09",
-    "011C00011C08011C0A011C36011C38011C45011C50011C6C011C70011C8F011C92011CA7011CA9011CB6011D00011D06011D08011D09011D0B011D36",
-    "011D3A011D3A011D3C011D3D011D3F011D47011D50011D59011D60011D65011D67011D68011D6A011D8E011D90011D91011D93011D98011DA0011DA9",
-    "011EE0011EF8011F00011F10011F12011F3A011F3E011F59011FB0011FB0011FC0011FF1011FFF01239901240001246E012470012474012480012543",
-    "012F90012FF2013000013455014400014646016800016A38016A40016A5E016A60016A69016A6E016ABE016AC0016AC9016AD0016AED016AF0016AF5",
-    "016B00016B45016B50016B59016B5B016B61016B63016B77016B7D016B8F016E40016E9A016F00016F4A016F4F016F87016F8F016F9F016FE0016FE4",
-    "016FF0016FF10170000187F7018800018CD5018D00018D0801AFF001AFF301AFF501AFFB01AFFD01AFFE01B00001B12201B13201B13201B15001B152",
-    "01B15501B15501B16401B16701B17001B2FB01BC0001BC6A01BC7001BC7C01BC8001BC8801BC9001BC9901BC9C01BCA301CF0001CF2D01CF3001CF46",
-    "01CF5001CFC301D00001D0F501D10001D12601D12901D1EA01D20001D24501D2C001D2D301D2E001D2F301D30001D35601D36001D37801D40001D454",
-    "01D45601D49C01D49E01D49F01D4A201D4A201D4A501D4A601D4A901D4AC01D4AE01D4B901D4BB01D4BB01D4BD01D4C301D4C501D50501D50701D50A",
-    "01D50D01D51401D51601D51C01D51E01D53901D53B01D53E01D54001D54401D54601D54601D54A01D55001D55201D6A501D6A801D7CB01D7CE01DA8B",
-    "01DA9B01DA9F01DAA101DAAF01DF0001DF1E01DF2501DF2A01E00001E00601E00801E01801E01B01E02101E02301E02401E02601E02A01E03001E06D",
-    "01E08F01E08F01E10001E12C01E13001E13D01E14001E14901E14E01E14F01E29001E2AE01E2C001E2F901E2FF01E2FF01E4D001E4F901E7E001E7E6",
-    "01E7E801E7EB01E7ED01E7EE01E7F001E7FE01E80001E8C401E8C701E8D601E90001E94B01E95001E95901E95E01E95F01EC7101ECB401ED0101ED3D",
-    "01EE0001EE0301EE0501EE1F01EE2101EE2201EE2401EE2401EE2701EE2701EE2901EE3201EE3401EE3701EE3901EE3901EE3B01EE3B01EE4201EE42",
-    "01EE4701EE4701EE4901EE4901EE4B01EE4B01EE4D01EE4F01EE5101EE5201EE5401EE5401EE5701EE5701EE5901EE5901EE5B01EE5B01EE5D01EE5D",
-    "01EE5F01EE5F01EE6101EE6201EE6401EE6401EE6701EE6A01EE6C01EE7201EE7401EE7701EE7901EE7C01EE7E01EE7E01EE8001EE8901EE8B01EE9B",
-    "01EEA101EEA301EEA501EEA901EEAB01EEBB01EEF001EEF101F00001F02B01F03001F09301F0A001F0AE01F0B101F0BF01F0C101F0CF01F0D101F0F5",
-    "01F10001F1AD01F1E601F20201F21001F23B01F24001F24801F25001F25101F26001F26501F30001F6D701F6DC01F6EC01F6F001F6FC01F70001F776",
-    "01F77B01F7D901F7E001F7EB01F7F001F7F001F80001F80B01F81001F84701F85001F85901F86001F88701F89001F8AD01F8B001F8B101F90001FA53",
-    "01FA6001FA6D01FA7001FA7C01FA8001FA8801FA9001FABD01FABF01FAC501FACE01FADB01FAE001FAE801FAF001FAF801FB0001FB9201FB9401FBCA",
-    "01FBF001FBF901FFFE02A6DF02A70002B73902B74002B81D02B82002CEA102CEB002EBE002EBF002EE5D02F80002FA1D02FFFE03134A0313500323AF",
-    "03FFFE03FFFF04FFFE04FFFF05FFFE05FFFF06FFFE06FFFF07FFFE07FFFF08FFFE08FFFF09FFFE09FFFF0AFFFE0AFFFF0BFFFE0BFFFF0CFFFE0CFFFF",
-    "0DFFFE0DFFFF0E00010E00010E00200E007F0E01000E01EF0EFFFE10FFFF",
-].join("");
-const UNICODE_15_1_ASSIGNED_RANGES = decodeUnicodeRanges(UNICODE_15_1_ASSIGNED_RANGES_HEX);
 const strictDecoder = new TextDecoder("utf-8", { fatal: true });
 export class ProtocolV3Error extends Error {
 }
@@ -724,39 +650,12 @@ function validOpenUnicodeString(value, maxBytes, allowEmpty) {
         if ((codePoint >= 0xd800 && codePoint <= 0xdfff) ||
             codePoint <= 0x1f ||
             (codePoint >= 0x7f && codePoint <= 0x9f) ||
-            !unicode15_1Assigned(codePoint)) {
+            !unicode151Assigned(codePoint)) {
             return false;
         }
     }
     return true;
 }
-function unicode15_1Assigned(codePoint) {
-    let low = 0;
-    let high = UNICODE_15_1_ASSIGNED_RANGES.length - 1;
-    while (low <= high) {
-        const middle = (low + high) >>> 1;
-        const [start, end] = UNICODE_15_1_ASSIGNED_RANGES[middle];
-        if (codePoint < start)
-            high = middle - 1;
-        else if (codePoint > end)
-            low = middle + 1;
-        else
-            return true;
-    }
-    return false;
-}
-function decodeUnicodeRanges(value) {
-    if (value.length % 12 !== 0)
-        throw new Error("invalid committed Unicode range table");
-    const ranges = [];
-    for (let offset = 0; offset < value.length; offset += 12) {
-        ranges.push([
-            Number.parseInt(value.slice(offset, offset + 6), 16),
-            Number.parseInt(value.slice(offset + 6, offset + 12), 16),
-        ]);
-    }
-    return ranges;
-}
 function isUnicodeWhitespace(codePoint) {
     return ((codePoint >= 0x0009 && codePoint <= 0x000d) ||
         codePoint === 0x0020 ||

package/dist/v3/retryDisposition.d.ts

@@ -1,5 +1,5 @@
 import type { SessionErrorCode } from "./contract.js";
-import type { ConnectErrorCode } from "../public/connectError.js";
+import type { PublicConnectErrorCodeV3 } from "./security.js";
 export type RetryDisposition = Readonly<{
     kind: "terminal";
 }> | Readonly<{
@@ -9,7 +9,7 @@ export type RetryDisposition = Readonly<{
     notBeforeUnixMilliseconds: number;
 }>;
 export declare function retryDispositionForConnectError(error: Readonly<{
-    code: ConnectErrorCode;
+    code: PublicConnectErrorCodeV3;
 }>): RetryDisposition;
 export declare function retryDispositionForSessionError(error: Readonly<{
     code: SessionErrorCode;

package/dist/v3/retryDisposition.js

@@ -1,14 +1,7 @@
 export function retryDispositionForConnectError(error) {
     switch (error.code) {
         case "expired_artifact":
-        case "resolve_failed":
-        case "credential_spend_failed":
         case "connection_failed":
-        case "timeout":
-        case "handshake_failed":
-        case "rpc_failed":
-        case "resource_exhausted":
-        case "not_connected":
             return Object.freeze({ kind: "retryable" });
         default:
             return Object.freeze({ kind: "terminal" });

package/dist/v3/security.d.ts

@@ -14,21 +14,12 @@ export type RetryDispositionV3 = Readonly<{
 }> | Readonly<{
     kind: "retry_after";
     notBeforeUnixMilliseconds: number;
-    /** @deprecated Use notBeforeUnixMilliseconds. */
-    absoluteUnixMilliseconds?: number;
-}>;
-type RetryDispositionInputV3 = RetryDispositionV3 | Readonly<{
-    kind: "retry_after";
-    /** @deprecated Use notBeforeUnixMilliseconds. */
-    absoluteUnixMilliseconds: number;
-    notBeforeUnixMilliseconds?: number;
 }>;
+type RetryDispositionInputV3 = RetryDispositionV3;
 export declare class ConnectErrorV3 extends Error {
     readonly code: PublicConnectErrorCodeV3;
     readonly retryDisposition: RetryDispositionV3;
     constructor(code: PublicConnectErrorCodeV3, disposition: RetryDispositionInputV3);
-    /** @deprecated Use retryDisposition. */
-    get disposition(): RetryDispositionV3;
 }
 export type TransportSecuritySnapshotV3 = Readonly<{
     mode: "ca";

package/dist/v3/security.js

@@ -18,8 +18,6 @@ export class ConnectErrorV3 extends Error {
         this.name = "ConnectError";
         this.retryDisposition = validateRetryDispositionValueV3(disposition);
     }
-    /** @deprecated Use retryDisposition. */
-    get disposition() { return this.retryDisposition; }
 }
 export function snapshotTransportSecurityPolicyV3(policy, attemptNowUnixSeconds, supportedModes) {
     if (!Number.isSafeInteger(attemptNowUnixSeconds) || attemptNowUnixSeconds < 0) {
@@ -101,19 +99,14 @@ const retryable = () => Object.freeze({ kind: "retryable" });
 const retryAfter = (notBeforeUnixMilliseconds) => Object.freeze({
     kind: "retry_after",
     notBeforeUnixMilliseconds,
-    absoluteUnixMilliseconds: notBeforeUnixMilliseconds,
 });
 function validateRetryDispositionValueV3(value) {
     if (value.kind === "terminal")
         return terminal();
     if (value.kind === "retryable")
         return retryable();
-    const legacy = value.absoluteUnixMilliseconds;
-    const canonical = value.notBeforeUnixMilliseconds;
-    const deadline = canonical ?? legacy;
-    if (deadline === undefined ||
-        canonical !== undefined && legacy !== undefined && canonical !== legacy ||
-        !Number.isSafeInteger(deadline) || deadline < 0 || deadline > 253_402_300_799_999) {
+    const deadline = value.notBeforeUnixMilliseconds;
+    if (!Number.isSafeInteger(deadline) || deadline < 0 || deadline > 253_402_300_799_999) {
         throw new TypeError("invalid Flowersec retry-after deadline");
     }
     return retryAfter(deadline);

package/dist/vendor/tr46.d.ts

@@ -8,3 +8,7 @@ export type TR46Options = Readonly<{
     ignoreInvalidPunycode?: boolean;
 }>;
 export declare function toASCII(domainName: string, options?: TR46Options): string | null;
+export declare function toUnicode(domainName: string, options?: TR46Options): Readonly<{
+    domain: string;
+    error: boolean;
+}>;