@floegence/flowersec-core 4.0.0 → 5.0.1

package/THIRD_PARTY_NOTICES.md

@@ -3,11 +3,11 @@
 This file is generated from the canonical Flowersec source dependency inventory for flowersec-ts.
 Do not edit it manually. License decisions are reviewed by the repository source license policy.
 
-- @floegence/flowersec-node-native 4.0.0 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
-- @floegence/flowersec-node-native-darwin-arm64 4.0.0 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
-- @floegence/flowersec-node-native-darwin-x64 4.0.0 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
-- @floegence/flowersec-node-native-linux-arm64-gnu 4.0.0 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
-- @floegence/flowersec-node-native-linux-x64-gnu 4.0.0 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
+- @floegence/flowersec-node-native 5.0.1 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
+- @floegence/flowersec-node-native-darwin-arm64 5.0.1 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
+- @floegence/flowersec-node-native-darwin-x64 5.0.1 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
+- @floegence/flowersec-node-native-linux-arm64-gnu 5.0.1 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
+- @floegence/flowersec-node-native-linux-x64-gnu 5.0.1 (Declared: MIT; selected: MIT; source: https://github.com/floegence/flowersec.git)
 - @noble/ciphers 2.4.0 (Declared: MIT; selected: MIT; source: https://registry.npmjs.org/@noble/ciphers/-/ciphers-2.4.0.tgz)
 - @noble/curves 2.4.0 (Declared: MIT; selected: MIT; source: https://registry.npmjs.org/@noble/curves/-/curves-2.4.0.tgz)
 - @noble/hashes 2.4.0 (Declared: MIT; selected: MIT; source: https://registry.npmjs.org/@noble/hashes/-/hashes-2.4.0.tgz)

package/dist/proxy/index.d.ts

@@ -7,7 +7,7 @@ export { registerServiceWorkerAndEnsureControl } from "./registerServiceWorker.j
 export type { RegisterServiceWorkerOptions } from "./registerServiceWorker.js";
 export { createServiceWorkerControllerGuard } from "./controllerGuard.js";
 export type { ServiceWorkerControllerGuardConflictPolicy, ServiceWorkerControllerGuardHandle, ServiceWorkerControllerGuardMismatchContext, ServiceWorkerControllerGuardMonitorOptions, ServiceWorkerControllerGuardOptions, ServiceWorkerControllerGuardRepairOptions, } from "./controllerGuard.js";
-export { registerProxyAppWindow, registerProxyAppWindowWithServiceWorkerControl, registerProxyControllerWindow, } from "./windowBridge.js";
+export { registerProxyAppWindow, registerProxyAppWindowWithServiceWorkerControl, registerProxyAppWindowWithServiceWorkerRuntime, registerProxyControllerWindow, } from "./windowBridge.js";
 export type { ProxyAppServiceWorkerControlOptions, ProxyAppWindowHandle, ProxyControllerWindowHandle, RegisterProxyAppWindowOptions, RegisterProxyAppWindowWithServiceWorkerControlOptions, RegisterProxyControllerWindowOptions, } from "./windowBridge.js";
 export { installWebSocketPatch } from "./wsPatch.js";
 export type { WebSocketPatchOptions } from "./wsPatch.js";

package/dist/proxy/index.js

@@ -3,7 +3,7 @@ export { createProxyRuntime, ensureServiceWorkerRuntimeRegistered } from "./runt
 export { createProxyServiceWorkerScript } from "./serviceWorker.js";
 export { registerServiceWorkerAndEnsureControl } from "./registerServiceWorker.js";
 export { createServiceWorkerControllerGuard } from "./controllerGuard.js";
-export { registerProxyAppWindow, registerProxyAppWindowWithServiceWorkerControl, registerProxyControllerWindow, } from "./windowBridge.js";
+export { registerProxyAppWindow, registerProxyAppWindowWithServiceWorkerControl, registerProxyAppWindowWithServiceWorkerRuntime, registerProxyControllerWindow, } from "./windowBridge.js";
 export { installWebSocketPatch } from "./wsPatch.js";
 export { disableUpstreamServiceWorkerRegister } from "./disableUpstreamServiceWorkerRegister.js";
 export { connectProxyBrowser, connectProxyControllerBrowser, } from "./integration.js";

package/dist/proxy/runtime.js

@@ -5,6 +5,7 @@ import { readU32be, u32be } from "../utils/bin.js";
 import { SessionError } from "../public/contract.js";
 import { createStreamMetadata } from "../public/streamMetadata.js";
 import { ProxyByteReader, writeAll } from "./stream.js";
+import { registerProxyRuntimeServiceWorkerBridge, usesServiceWorkerResponseFlowControl, } from "./serviceWorkerRuntime.js";
 const PROXY_HTTP_STREAM_KIND = "flowersec-proxy/http1";
 const PROXY_WEBSOCKET_STREAM_KIND = "flowersec-proxy/ws";
 const PROXY_WIRE_VERSION = 1;
@@ -160,19 +161,6 @@ function filterHeaders(input, base, extra) {
     }
     return result;
 }
-function parseRuntimeRequest(raw) {
-    const headers = Array.isArray(raw.headers) ? raw.headers.filter((entry) => typeof entry === "object" && entry !== null && typeof entry.name === "string" && typeof entry.value === "string") : [];
-    const body = raw.body instanceof ArrayBuffer ? raw.body : undefined;
-    return {
-        id: typeof raw.id === "string" ? raw.id : "",
-        method: typeof raw.method === "string" ? raw.method : "GET",
-        path: typeof raw.path === "string" ? raw.path : "",
-        headers,
-        ...(typeof raw.external_origin === "string" ? { externalOrigin: raw.external_origin } : {}),
-        ...(raw.response_flow_control === "chunk_credit_v2" ? { responseFlowControl: "chunk_credit_v2" } : {}),
-        ...(body === undefined ? {} : { body }),
-    };
-}
 class StreamAdmission {
     concurrent;
     queued;
@@ -317,22 +305,15 @@ export function createProxyRuntime(options) {
         ...(runtimeRegistrationToken === undefined ? {} : { runtimeRegistrationToken }),
     }).catch(() => undefined);
     const serviceWorker = globalThis.navigator?.serviceWorker;
-    const onMessage = (event) => {
-        if (event.data === null || typeof event.data !== "object" || event.data.type !== "flowersec-proxy:fetch")
-            return;
-        const port = event.ports?.[0];
-        if (port === undefined)
-            return;
-        dispatchFetch(parseRuntimeRequest(event.data.req), port);
-    };
-    serviceWorker?.addEventListener("message", onMessage);
     serviceWorker?.addEventListener("controllerchange", register);
     register();
+    let serviceWorkerBridge;
     function dispatchFetch(request, port) {
         const controller = new AbortController();
         let stream;
         let release;
-        let credit = request.responseFlowControl !== "chunk_credit_v2";
+        const flowControlled = usesServiceWorkerResponseFlowControl(request);
+        let credit = !flowControlled;
         let creditWake;
         port.onmessage = (event) => {
             if (event.data?.type === "flowersec-proxy:abort") {
@@ -351,7 +332,7 @@ export function createProxyRuntime(options) {
                 await new Promise((resolve) => { creditWake = resolve; });
                 creditWake = undefined;
             }
-            credit = request.responseFlowControl !== "chunk_credit_v2";
+            credit = !flowControlled;
         };
         void (async () => {
             try {
@@ -439,7 +420,7 @@ export function createProxyRuntime(options) {
             throw error instanceof SessionError ? error : new SessionError("operation_failed");
         }
     }
-    return Object.freeze({
+    const runtime = Object.freeze({
         limits: Object.freeze({
             maxJsonFrameBytes,
             maxChunkBytes,
@@ -457,10 +438,14 @@ export function createProxyRuntime(options) {
                 return;
             disposed = true;
             admission.close();
-            serviceWorker?.removeEventListener("message", onMessage);
             serviceWorker?.removeEventListener("controllerchange", register);
+            serviceWorkerBridge?.dispose();
         },
     });
+    if (serviceWorker !== undefined) {
+        serviceWorkerBridge = registerProxyRuntimeServiceWorkerBridge(runtime, serviceWorker);
+    }
+    return runtime;
 }
 export async function ensureServiceWorkerRuntimeRegistered(options = {}) {
     const controller = globalThis.navigator?.serviceWorker?.controller;

package/dist/proxy/serviceWorkerRuntime.d.ts

@@ -0,0 +1,7 @@
+import type { ProxyFetchRequest, ProxyRuntime } from "./types.js";
+type ProxyRuntimeServiceWorkerBridgeHandle = Readonly<{
+    dispose(): void;
+}>;
+export declare function usesServiceWorkerResponseFlowControl(request: ProxyFetchRequest): boolean;
+export declare function registerProxyRuntimeServiceWorkerBridge(runtime: ProxyRuntime, serviceWorker: ServiceWorkerContainer): ProxyRuntimeServiceWorkerBridgeHandle;
+export {};

package/dist/proxy/serviceWorkerRuntime.js

@@ -0,0 +1,75 @@
+const responseFlowControl = new WeakSet();
+function record(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function parseRuntimeRequest(value) {
+    const raw = record(value);
+    if (raw === undefined || typeof raw.id !== "string" || typeof raw.method !== "string" ||
+        typeof raw.path !== "string" || !Array.isArray(raw.headers)) {
+        throw new TypeError("invalid proxy service worker request");
+    }
+    const headers = raw.headers.map((value) => {
+        const header = record(value);
+        if (header === undefined || typeof header.name !== "string" || typeof header.value !== "string") {
+            throw new TypeError("invalid proxy service worker request headers");
+        }
+        return Object.freeze({ name: header.name, value: header.value });
+    });
+    if (raw.body !== undefined && !(raw.body instanceof ArrayBuffer)) {
+        throw new TypeError("invalid proxy service worker request body");
+    }
+    if (raw.external_origin !== undefined && typeof raw.external_origin !== "string") {
+        throw new TypeError("invalid proxy service worker request origin");
+    }
+    if (raw.response_flow_control !== undefined && raw.response_flow_control !== "chunk_credit_v2") {
+        throw new TypeError("invalid proxy service worker response flow control");
+    }
+    const request = Object.freeze({
+        id: raw.id,
+        method: raw.method,
+        path: raw.path,
+        headers: Object.freeze(headers),
+        ...(typeof raw.external_origin === "string" ? { externalOrigin: raw.external_origin } : {}),
+        ...(raw.body instanceof ArrayBuffer ? { body: raw.body } : {}),
+    });
+    if (raw.response_flow_control === "chunk_credit_v2")
+        responseFlowControl.add(request);
+    return request;
+}
+export function usesServiceWorkerResponseFlowControl(request) {
+    return responseFlowControl.has(request);
+}
+export function registerProxyRuntimeServiceWorkerBridge(runtime, serviceWorker) {
+    let disposed = false;
+    const onMessage = (event) => {
+        const message = record(event.data);
+        if (message?.type !== "flowersec-proxy:fetch")
+            return;
+        const port = event.ports?.[0];
+        if (port === undefined)
+            return;
+        try {
+            runtime.dispatchFetch(parseRuntimeRequest(message.req), port);
+        }
+        catch {
+            port.postMessage({
+                type: "flowersec-proxy:response_error",
+                status: 400,
+                code: "invalid_request",
+                message: "invalid proxy request",
+            });
+            port.close();
+        }
+    };
+    serviceWorker.addEventListener("message", onMessage);
+    return Object.freeze({
+        dispose: () => {
+            if (disposed)
+                return;
+            disposed = true;
+            serviceWorker.removeEventListener("message", onMessage);
+        },
+    });
+}

package/dist/proxy/types.d.ts

@@ -43,7 +43,6 @@ export type ProxyFetchRequest = Readonly<{
     path: string;
     headers: readonly ProxyHeader[];
     externalOrigin?: string;
-    responseFlowControl?: "chunk_credit_v2";
     body?: ArrayBuffer;
 }>;
 export type ProxyRuntime = Readonly<{

package/dist/proxy/windowBridge.d.ts

@@ -38,6 +38,7 @@ export type ProxyAppWindowHandle = Readonly<{
     dispose(): void;
 }>;
 export declare function registerProxyAppWindow(options: RegisterProxyAppWindowOptions): ProxyAppWindowHandle;
+export declare function registerProxyAppWindowWithServiceWorkerRuntime(options: RegisterProxyAppWindowOptions): ProxyAppWindowHandle;
 export type RegisterProxyControllerWindowOptions = Readonly<{
     runtime: ProxyRuntime;
     allowedOrigins: readonly string[];
@@ -56,6 +57,7 @@ export type ProxyAppServiceWorkerControlOptions = Readonly<{
     repair?: ServiceWorkerControllerGuardRepairOptions;
     monitor?: ServiceWorkerControllerGuardMonitorOptions;
     conflicts?: ServiceWorkerControllerGuardConflictPolicy;
+    runtimeRegistrationToken?: string;
 }>;
 export type RegisterProxyAppWindowWithServiceWorkerControlOptions = RegisterProxyAppWindowOptions & Readonly<{
     serviceWorker: ProxyAppServiceWorkerControlOptions;

package/dist/proxy/windowBridge.js

@@ -2,6 +2,8 @@ import { SDK_DEFAULTS } from "../defaults.js";
 import { SessionError } from "../public/contract.js";
 import { createServiceWorkerControllerGuard, } from "./controllerGuard.js";
 import { registerServiceWorkerAndEnsureControl } from "./registerServiceWorker.js";
+import { ensureServiceWorkerRuntimeRegistered } from "./runtime.js";
+import { registerProxyRuntimeServiceWorkerBridge } from "./serviceWorkerRuntime.js";
 const FETCH_MESSAGE = "flowersec-proxy:window_fetch_v2";
 const WEBSOCKET_OPEN_MESSAGE = "flowersec-proxy:window_ws_open_v2";
 const WEBSOCKET_ACK_MESSAGE = "flowersec-proxy:window_ws_open_ack_v2";
@@ -292,6 +294,31 @@ export function registerProxyAppWindow(options) {
         dispose: () => { disposed = true; },
     });
 }
+export function registerProxyAppWindowWithServiceWorkerRuntime(options) {
+    const target = options.targetWindow ?? globalThis.window;
+    const serviceWorker = target.navigator?.serviceWorker;
+    if (serviceWorker === undefined)
+        throw new Error("proxy service worker is unavailable");
+    const app = registerProxyAppWindow(options);
+    try {
+        const serviceWorkerBridge = registerProxyRuntimeServiceWorkerBridge(app.runtime, serviceWorker);
+        let disposed = false;
+        return Object.freeze({
+            runtime: app.runtime,
+            dispose: () => {
+                if (disposed)
+                    return;
+                disposed = true;
+                serviceWorkerBridge.dispose();
+                app.dispose();
+            },
+        });
+    }
+    catch (error) {
+        app.dispose();
+        throw error;
+    }
+}
 async function bridgeStreams(runtimeStream, port, signal) {
     const bridge = new MessagePortByteStream(port);
     const controller = new AbortController();
@@ -436,10 +463,30 @@ export async function registerProxyAppWindowWithServiceWorkerControl(options) {
         ...(options.serviceWorker.monitor === undefined ? {} : { monitor: options.serviceWorker.monitor }),
         ...(options.serviceWorker.conflicts === undefined ? {} : { conflicts: options.serviceWorker.conflicts }),
     });
-    await guard.ensure();
-    const app = registerProxyAppWindow(options);
-    return Object.freeze({
-        runtime: app.runtime,
-        dispose: () => { app.dispose(); guard.dispose(); },
-    });
+    let app;
+    try {
+        await guard.ensure();
+        app = registerProxyAppWindowWithServiceWorkerRuntime(options);
+        await ensureServiceWorkerRuntimeRegistered({
+            ...(options.serviceWorker.runtimeRegistrationToken === undefined
+                ? {}
+                : { runtimeRegistrationToken: options.serviceWorker.runtimeRegistrationToken }),
+        });
+        let disposed = false;
+        return Object.freeze({
+            runtime: app.runtime,
+            dispose: () => {
+                if (disposed)
+                    return;
+                disposed = true;
+                app?.dispose();
+                guard.dispose();
+            },
+        });
+    }
+    catch (error) {
+        app?.dispose();
+        guard.dispose();
+        throw error;
+    }
 }

package/dist/public/contract.d.ts

@@ -26,9 +26,7 @@ export declare class UnreliableMessageError extends Error {
 export type StreamOpenOptions = OperationOptions & Readonly<{
     metadata?: StreamMetadata;
 }>;
-/** @deprecated Unreliable-message operations use UnreliableMessageErrorCode. */
-export type LegacyUnreliableSessionErrorCode = "unreliable_unavailable" | "unreliable_too_large" | "unreliable_dropped";
-export type SessionErrorCode = "canceled" | "timeout" | "closed" | "going_away" | "resource_exhausted" | "stream_rejected" | "stream_reset" | "rekey_failed" | "liveness_failed" | LegacyUnreliableSessionErrorCode | "operation_failed";
+export type SessionErrorCode = "canceled" | "timeout" | "closed" | "going_away" | "resource_exhausted" | "stream_rejected" | "stream_reset" | "rekey_failed" | "liveness_failed" | "operation_failed";
 /** A closed, carrier-neutral session failure with no internal cause or peer detail. */
 export declare class SessionError extends Error {
     readonly code: SessionErrorCode;

package/dist/v3/controller.js

@@ -267,17 +267,13 @@ function validateControllerWaitDisposition(value) {
     if (value.kind !== "retry_after") {
         throw new ConnectErrorV3("artifact_invalid", { kind: "terminal" });
     }
-    const deadline = value.notBeforeUnixMilliseconds ?? value.absoluteUnixMilliseconds;
-    if (deadline === undefined || !Number.isSafeInteger(deadline) || deadline < 0 ||
-        deadline > 253_402_300_799_999 || value.notBeforeUnixMilliseconds !== undefined &&
-        value.absoluteUnixMilliseconds !== undefined &&
-        value.notBeforeUnixMilliseconds !== value.absoluteUnixMilliseconds) {
+    const deadline = value.notBeforeUnixMilliseconds;
+    if (!Number.isSafeInteger(deadline) || deadline < 0 || deadline > 253_402_300_799_999) {
         throw new ConnectErrorV3("artifact_invalid", { kind: "terminal" });
     }
     return Object.freeze({
         kind: "retry_after",
         notBeforeUnixMilliseconds: deadline,
-        absoluteUnixMilliseconds: deadline,
     });
 }
 function controllerBackoffForWait(consecutiveFailure) {

package/dist/v3/security.d.ts

@@ -14,21 +14,12 @@ export type RetryDispositionV3 = Readonly<{
 }> | Readonly<{
     kind: "retry_after";
     notBeforeUnixMilliseconds: number;
-    /** @deprecated Use notBeforeUnixMilliseconds. */
-    absoluteUnixMilliseconds?: number;
-}>;
-type RetryDispositionInputV3 = RetryDispositionV3 | Readonly<{
-    kind: "retry_after";
-    /** @deprecated Use notBeforeUnixMilliseconds. */
-    absoluteUnixMilliseconds: number;
-    notBeforeUnixMilliseconds?: number;
 }>;
+type RetryDispositionInputV3 = RetryDispositionV3;
 export declare class ConnectErrorV3 extends Error {
     readonly code: PublicConnectErrorCodeV3;
     readonly retryDisposition: RetryDispositionV3;
     constructor(code: PublicConnectErrorCodeV3, disposition: RetryDispositionInputV3);
-    /** @deprecated Use retryDisposition. */
-    get disposition(): RetryDispositionV3;
 }
 export type TransportSecuritySnapshotV3 = Readonly<{
     mode: "ca";

package/dist/v3/security.js

@@ -18,8 +18,6 @@ export class ConnectErrorV3 extends Error {
         this.name = "ConnectError";
         this.retryDisposition = validateRetryDispositionValueV3(disposition);
     }
-    /** @deprecated Use retryDisposition. */
-    get disposition() { return this.retryDisposition; }
 }
 export function snapshotTransportSecurityPolicyV3(policy, attemptNowUnixSeconds, supportedModes) {
     if (!Number.isSafeInteger(attemptNowUnixSeconds) || attemptNowUnixSeconds < 0) {
@@ -101,19 +99,14 @@ const retryable = () => Object.freeze({ kind: "retryable" });
 const retryAfter = (notBeforeUnixMilliseconds) => Object.freeze({
     kind: "retry_after",
     notBeforeUnixMilliseconds,
-    absoluteUnixMilliseconds: notBeforeUnixMilliseconds,
 });
 function validateRetryDispositionValueV3(value) {
     if (value.kind === "terminal")
         return terminal();
     if (value.kind === "retryable")
         return retryable();
-    const legacy = value.absoluteUnixMilliseconds;
-    const canonical = value.notBeforeUnixMilliseconds;
-    const deadline = canonical ?? legacy;
-    if (deadline === undefined ||
-        canonical !== undefined && legacy !== undefined && canonical !== legacy ||
-        !Number.isSafeInteger(deadline) || deadline < 0 || deadline > 253_402_300_799_999) {
+    const deadline = value.notBeforeUnixMilliseconds;
+    if (!Number.isSafeInteger(deadline) || deadline < 0 || deadline > 253_402_300_799_999) {
         throw new TypeError("invalid Flowersec retry-after deadline");
     }
     return retryAfter(deadline);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floegence/flowersec-core",
-  "version": "4.0.0",
+  "version": "5.0.1",
   "description": "Flowersec core TypeScript library for carrier-neutral encrypted sessions and multiplexed streams.",
   "license": "MIT",
   "repository": {
@@ -95,7 +95,7 @@
     "vitest": "4.1.11"
   },
   "optionalDependencies": {
-    "@floegence/flowersec-node-native": "4.0.0"
+    "@floegence/flowersec-node-native": "5.0.1"
   },
-  "flowersecSourceCommit": "fee2992682713833f6d8ee1139a567e29446dd12"
+  "flowersecSourceCommit": "55703862eaca41ad2955cdacc8c07b8c8bf54a25"
 }

package/sbom/cyclonedx.json

@@ -1,20 +1,20 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:875836f8-913d-539a-8e3d-fdd8957a4018",
+  "serialNumber": "urn:uuid:971dbc25-07fd-5919-8a85-44acdd022886",
   "version": 1,
   "metadata": {
     "component": {
       "type": "library",
       "name": "@floegence/flowersec-core",
-      "version": "4.0.0",
-      "purl": "pkg:npm/%40floegence/flowersec-core@4.0.0",
-      "bom-ref": "pkg:npm/%40floegence/flowersec-core@4.0.0"
+      "version": "5.0.1",
+      "purl": "pkg:npm/%40floegence/flowersec-core@5.0.1",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-core@5.0.1"
     },
     "properties": [
       {
         "name": "flowersec:source-inventory-sha256",
-        "value": "3a2d59d3f7676d053eafa979e8e2ba785a5a54cff487e70ed584fb34f4caf372"
+        "value": "defe64cdc0f7455c71897dd768ebe609b2c00aea6aa8f104fc24acb05723315d"
       }
     ]
   },
@@ -22,9 +22,9 @@
     {
       "type": "library",
       "name": "@floegence/flowersec-node-native",
-      "version": "4.0.0",
-      "purl": "pkg:npm/%40floegence/flowersec-node-native@4.0.0",
-      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native@4.0.0",
+      "version": "5.0.1",
+      "purl": "pkg:npm/%40floegence/flowersec-node-native@5.0.1",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native@5.0.1",
       "licenses": [
         {
           "expression": "MIT"
@@ -50,9 +50,9 @@
     {
       "type": "library",
       "name": "@floegence/flowersec-node-native-darwin-arm64",
-      "version": "4.0.0",
-      "purl": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@4.0.0",
-      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@4.0.0",
+      "version": "5.0.1",
+      "purl": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@5.0.1",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@5.0.1",
       "licenses": [
         {
           "expression": "MIT"
@@ -78,9 +78,9 @@
     {
       "type": "library",
       "name": "@floegence/flowersec-node-native-darwin-x64",
-      "version": "4.0.0",
-      "purl": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@4.0.0",
-      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@4.0.0",
+      "version": "5.0.1",
+      "purl": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@5.0.1",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@5.0.1",
       "licenses": [
         {
           "expression": "MIT"
@@ -106,9 +106,9 @@
     {
       "type": "library",
       "name": "@floegence/flowersec-node-native-linux-arm64-gnu",
-      "version": "4.0.0",
-      "purl": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@4.0.0",
-      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@4.0.0",
+      "version": "5.0.1",
+      "purl": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@5.0.1",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@5.0.1",
       "licenses": [
         {
           "expression": "MIT"
@@ -134,9 +134,9 @@
     {
       "type": "library",
       "name": "@floegence/flowersec-node-native-linux-x64-gnu",
-      "version": "4.0.0",
-      "purl": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@4.0.0",
-      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@4.0.0",
+      "version": "5.0.1",
+      "purl": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@5.0.1",
+      "bom-ref": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@5.0.1",
       "licenses": [
         {
           "expression": "MIT"
@@ -330,9 +330,9 @@
   ],
   "dependencies": [
     {
-      "ref": "pkg:npm/%40floegence/flowersec-core@4.0.0",
+      "ref": "pkg:npm/%40floegence/flowersec-core@5.0.1",
       "dependsOn": [
-        "pkg:npm/%40floegence/flowersec-node-native@4.0.0",
+        "pkg:npm/%40floegence/flowersec-node-native@5.0.1",
         "pkg:npm/%40noble/ciphers@2.4.0",
         "pkg:npm/%40noble/curves@2.4.0",
         "pkg:npm/%40noble/hashes@2.4.0",
@@ -341,28 +341,28 @@
       ]
     },
     {
-      "ref": "pkg:npm/%40floegence/flowersec-node-native@4.0.0",
+      "ref": "pkg:npm/%40floegence/flowersec-node-native@5.0.1",
       "dependsOn": [
-        "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@4.0.0",
-        "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@4.0.0",
-        "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@4.0.0",
-        "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@4.0.0"
+        "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@5.0.1",
+        "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@5.0.1",
+        "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@5.0.1",
+        "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@5.0.1"
       ]
     },
     {
-      "ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@4.0.0",
+      "ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@5.0.1",
       "dependsOn": []
     },
     {
-      "ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@4.0.0",
+      "ref": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@5.0.1",
       "dependsOn": []
     },
     {
-      "ref": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@4.0.0",
+      "ref": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@5.0.1",
       "dependsOn": []
     },
     {
-      "ref": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@4.0.0",
+      "ref": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@5.0.1",
       "dependsOn": []
     },
     {

package/sbom/spdx.json

@@ -3,9 +3,9 @@
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
   "name": "flowersec-ts",
-  "documentNamespace": "https://github.com/floegence/flowersec/sbom/flowersec-ts/3a2d59d3f7676d053eafa979e8e2ba785a5a54cff487e70ed584fb34f4caf372",
+  "documentNamespace": "https://github.com/floegence/flowersec/sbom/flowersec-ts/defe64cdc0f7455c71897dd768ebe609b2c00aea6aa8f104fc24acb05723315d",
   "creationInfo": {
-    "created": "2026-08-31T12:07:14Z",
+    "created": "2026-09-02T09:13:34Z",
     "creators": [
       "Tool: flowersec-source-inventory-1"
     ]
@@ -13,26 +13,26 @@
   "packages": [
     {
       "name": "@floegence/flowersec-core",
-      "SPDXID": "SPDXRef-Package-1b4c974150322dae970f",
-      "versionInfo": "4.0.0",
+      "SPDXID": "SPDXRef-Package-75e0bf315de60f5c22bf",
+      "versionInfo": "5.0.1",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
       "licenseDeclared": "NOASSERTION",
       "copyrightText": "NOASSERTION",
-      "comment": "Flowersec source inventory SHA-256: 3a2d59d3f7676d053eafa979e8e2ba785a5a54cff487e70ed584fb34f4caf372",
+      "comment": "Flowersec source inventory SHA-256: defe64cdc0f7455c71897dd768ebe609b2c00aea6aa8f104fc24acb05723315d",
       "externalRefs": [
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40floegence/flowersec-core@4.0.0"
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-core@5.0.1"
         }
       ]
     },
     {
       "name": "@floegence/flowersec-node-native",
-      "SPDXID": "SPDXRef-Package-2b2ee5204e97a8bdfee4",
-      "versionInfo": "4.0.0",
+      "SPDXID": "SPDXRef-Package-83fe1f071de804c59aa4",
+      "versionInfo": "5.0.1",
       "downloadLocation": "https://github.com/floegence/flowersec.git",
       "filesAnalyzed": false,
       "licenseConcluded": "MIT",
@@ -42,14 +42,14 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native@4.0.0"
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native@5.0.1"
         }
       ]
     },
     {
       "name": "@floegence/flowersec-node-native-darwin-arm64",
-      "SPDXID": "SPDXRef-Package-85d2ca9f2d855c9d9247",
-      "versionInfo": "4.0.0",
+      "SPDXID": "SPDXRef-Package-5441bdd1f4fdc324f948",
+      "versionInfo": "5.0.1",
       "downloadLocation": "https://github.com/floegence/flowersec.git",
       "filesAnalyzed": false,
       "licenseConcluded": "MIT",
@@ -59,14 +59,14 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@4.0.0"
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-darwin-arm64@5.0.1"
         }
       ]
     },
     {
       "name": "@floegence/flowersec-node-native-darwin-x64",
-      "SPDXID": "SPDXRef-Package-00ca5fe6b25c0d7afe2d",
-      "versionInfo": "4.0.0",
+      "SPDXID": "SPDXRef-Package-7124483ad61693fd91eb",
+      "versionInfo": "5.0.1",
       "downloadLocation": "https://github.com/floegence/flowersec.git",
       "filesAnalyzed": false,
       "licenseConcluded": "MIT",
@@ -76,14 +76,14 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@4.0.0"
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-darwin-x64@5.0.1"
         }
       ]
     },
     {
       "name": "@floegence/flowersec-node-native-linux-arm64-gnu",
-      "SPDXID": "SPDXRef-Package-57bf3b48995eb86ad67b",
-      "versionInfo": "4.0.0",
+      "SPDXID": "SPDXRef-Package-9e37124bb06ade37d24c",
+      "versionInfo": "5.0.1",
       "downloadLocation": "https://github.com/floegence/flowersec.git",
       "filesAnalyzed": false,
       "licenseConcluded": "MIT",
@@ -93,14 +93,14 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@4.0.0"
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-linux-arm64-gnu@5.0.1"
         }
       ]
     },
     {
       "name": "@floegence/flowersec-node-native-linux-x64-gnu",
-      "SPDXID": "SPDXRef-Package-88146e67bd9342245b4e",
-      "versionInfo": "4.0.0",
+      "SPDXID": "SPDXRef-Package-c5c47617fd9236d6f5d1",
+      "versionInfo": "5.0.1",
       "downloadLocation": "https://github.com/floegence/flowersec.git",
       "filesAnalyzed": false,
       "licenseConcluded": "MIT",
@@ -110,7 +110,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@4.0.0"
+          "referenceLocator": "pkg:npm/%40floegence/flowersec-node-native-linux-x64-gnu@5.0.1"
         }
       ]
     },
@@ -221,57 +221,57 @@
     {
       "spdxElementId": "SPDXRef-DOCUMENT",
       "relationshipType": "DESCRIBES",
-      "relatedSpdxElement": "SPDXRef-Package-1b4c974150322dae970f"
+      "relatedSpdxElement": "SPDXRef-Package-75e0bf315de60f5c22bf"
     },
     {
-      "spdxElementId": "SPDXRef-Package-1b4c974150322dae970f",
+      "spdxElementId": "SPDXRef-Package-75e0bf315de60f5c22bf",
       "relationshipType": "DEPENDS_ON",
-      "relatedSpdxElement": "SPDXRef-Package-2b2ee5204e97a8bdfee4"
+      "relatedSpdxElement": "SPDXRef-Package-83fe1f071de804c59aa4"
     },
     {
-      "spdxElementId": "SPDXRef-Package-1b4c974150322dae970f",
+      "spdxElementId": "SPDXRef-Package-75e0bf315de60f5c22bf",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-6cdb8b3664bfb0d67b6a"
     },
     {
-      "spdxElementId": "SPDXRef-Package-1b4c974150322dae970f",
+      "spdxElementId": "SPDXRef-Package-75e0bf315de60f5c22bf",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-e0e2cb449dffb239a794"
     },
     {
-      "spdxElementId": "SPDXRef-Package-1b4c974150322dae970f",
+      "spdxElementId": "SPDXRef-Package-75e0bf315de60f5c22bf",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-2e6e3840217975457b7a"
     },
     {
-      "spdxElementId": "SPDXRef-Package-1b4c974150322dae970f",
+      "spdxElementId": "SPDXRef-Package-75e0bf315de60f5c22bf",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-5b9d78698ec0a5c8f86f"
     },
     {
-      "spdxElementId": "SPDXRef-Package-1b4c974150322dae970f",
+      "spdxElementId": "SPDXRef-Package-75e0bf315de60f5c22bf",
       "relationshipType": "DEPENDS_ON",
       "relatedSpdxElement": "SPDXRef-Package-320dd9f8ed00f90837e2"
     },
     {
-      "spdxElementId": "SPDXRef-Package-2b2ee5204e97a8bdfee4",
+      "spdxElementId": "SPDXRef-Package-83fe1f071de804c59aa4",
       "relationshipType": "DEPENDS_ON",
-      "relatedSpdxElement": "SPDXRef-Package-85d2ca9f2d855c9d9247"
+      "relatedSpdxElement": "SPDXRef-Package-5441bdd1f4fdc324f948"
     },
     {
-      "spdxElementId": "SPDXRef-Package-2b2ee5204e97a8bdfee4",
+      "spdxElementId": "SPDXRef-Package-83fe1f071de804c59aa4",
       "relationshipType": "DEPENDS_ON",
-      "relatedSpdxElement": "SPDXRef-Package-00ca5fe6b25c0d7afe2d"
+      "relatedSpdxElement": "SPDXRef-Package-7124483ad61693fd91eb"
     },
     {
-      "spdxElementId": "SPDXRef-Package-2b2ee5204e97a8bdfee4",
+      "spdxElementId": "SPDXRef-Package-83fe1f071de804c59aa4",
       "relationshipType": "DEPENDS_ON",
-      "relatedSpdxElement": "SPDXRef-Package-57bf3b48995eb86ad67b"
+      "relatedSpdxElement": "SPDXRef-Package-9e37124bb06ade37d24c"
     },
     {
-      "spdxElementId": "SPDXRef-Package-2b2ee5204e97a8bdfee4",
+      "spdxElementId": "SPDXRef-Package-83fe1f071de804c59aa4",
       "relationshipType": "DEPENDS_ON",
-      "relatedSpdxElement": "SPDXRef-Package-88146e67bd9342245b4e"
+      "relatedSpdxElement": "SPDXRef-Package-c5c47617fd9236d6f5d1"
     },
     {
       "spdxElementId": "SPDXRef-Package-e0e2cb449dffb239a794",