@earendil-works/chord 1.4.0 → 1.5.0

package/dist/next-node/http/file.js

@@ -0,0 +1,94 @@
+// File responses (slice 10 §2; decision "Slice 10 fix round, three small points" (1)): a file as a `bytes` response.
+// `fileResponse` stats the file at once (with a `root`, its real path must lie inside it); the file handle is opened by
+// the first `read` and closed when the request's scope seals (its signal aborts), so a response nobody writes (`HEAD`,
+// a 416, a disconnect, a wrap that replaced it) opens nothing and leaks nothing.
+import { open, realpath, stat } from "node:fs/promises";
+import { basename, extname, sep } from "node:path";
+import { HttpFailure } from "./request.js";
+/**
+ * The file at `path` as a `bytes` response; `HttpFailure` 404 for a missing one (anyone may ask for one: no failure
+ * of the route, Fable's recheck N1), 403 for one outside `root`; throws what else `stat` throws.
+ */
+export async function fileResponse(given, options = {}) {
+    let path;
+    let size;
+    try {
+        path = options.root === undefined ? given : await inside(given, options.root);
+        ({ size } = await stat(path));
+    }
+    catch (error) {
+        const code = error.code;
+        if (code === "ENOENT" || code === "ENOTDIR")
+            throw new HttpFailure(404, "no such file");
+        throw error;
+    }
+    let handle;
+    const read = async (offset, length, context) => {
+        handle ??= opened(path, context);
+        const file = await handle;
+        // Only the bytes read are handed out.
+        const buffer = Buffer.allocUnsafe(length);
+        const { bytesRead } = await file.read(buffer, 0, length, offset);
+        return buffer.subarray(0, bytesRead);
+    };
+    return {
+        kind: "bytes",
+        mime: options.mime ?? mimeOf(path),
+        size,
+        read,
+        ...(options.download === undefined ? {} : { download: options.download }),
+        ...(options.inline === undefined ? {} : { inline: options.inline }),
+        ...(options.ranges === undefined ? {} : { ranges: options.ranges }),
+    };
+}
+/** The real path of `path` when it lies inside `root`'s real path; `HttpFailure` 403 otherwise. */
+async function inside(path, root) {
+    const [real, base] = await Promise.all([realpath(path), realpath(root)]);
+    if (real !== base && !real.startsWith(base.endsWith(sep) ? base : base + sep)) {
+        throw new HttpFailure(403, "the file lies outside its root");
+    }
+    return real;
+}
+/** Opens `path`, closed when `context` (the request's scope) aborts; at once when it aborted already. */
+async function opened(path, context) {
+    const file = await open(path, "r");
+    const close = () => void file.close().catch(() => { });
+    const signal = context.abortSignal;
+    if (signal === undefined)
+        throw new Error(`fileResponse(${basename(path)}): read outside a request's scope`);
+    if (signal.aborted)
+        close();
+    else
+        signal.addEventListener("abort", close, { once: true });
+    return file;
+}
+const MIME = {
+    ".txt": "text/plain; charset=utf-8",
+    ".log": "text/plain; charset=utf-8",
+    ".md": "text/markdown; charset=utf-8",
+    ".csv": "text/csv; charset=utf-8",
+    ".json": "application/json",
+    ".png": "image/png",
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".gif": "image/gif",
+    ".webp": "image/webp",
+    ".avif": "image/avif",
+    ".mp3": "audio/mpeg",
+    ".m4a": "audio/mp4",
+    ".ogg": "audio/ogg",
+    ".opus": "audio/ogg",
+    ".wav": "audio/wav",
+    ".flac": "audio/flac",
+    ".mp4": "video/mp4",
+    ".webm": "video/webm",
+    ".mov": "video/quicktime",
+};
+/**
+ * The type of `path` by its extension: text, images, audio and video only. Active types (HTML, SVG) never come from
+ * here: a route serving one names it (`mime`).
+ */
+function mimeOf(path) {
+    return MIME[extname(path).toLowerCase()] ?? "application/octet-stream";
+}
+//# sourceMappingURL=file.js.map

package/dist/next-node/http/file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.js","sourceRoot":"","sources":["../../../src/next-node/http/file.ts"],"names":[],"mappings":"AAAA,qHAAqH;AACrH,wHAAwH;AACxH,uHAAuH;AACvH,iFAAiF;AAEjF,OAAO,EAAmB,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAoB3C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAa,EAAE,OAAO,GAAwB,EAAE;IAClF,IAAI,IAAY,CAAC;IACjB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACJ,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9E,CAAC,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACxF,MAAM,KAAK,CAAC;IACb,CAAC;IACD,IAAI,MAAuC,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,EAAE,MAAc,EAAE,MAAc,EAAE,OAAgB,EAAuB,EAAE;QAC5F,MAAM,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC;QAC1B,sCAAsC;QACtC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACjE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACtC,CAAC,CAAC;IACF,OAAO;QACN,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC;QAClC,IAAI;QACJ,IAAI;QACJ,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;KACnE,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,IAAY;IAC/C,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzE,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,yGAAyG;AACzG,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,OAAgB;IACnD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,GAAS,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IACnC,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,QAAQ,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAC7G,IAAI,MAAM,CAAC,OAAO;QAAE,KAAK,EAAE,CAAC;;QACvB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,IAAI,GAAqC;IAC9C,MAAM,EAAE,2BAA2B;IACnC,MAAM,EAAE,2BAA2B;IACnC,KAAK,EAAE,8BAA8B;IACrC,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,iBAAiB;CACzB,CAAC;AAEF;;;GAGG;AACH,SAAS,MAAM,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC;AACxE,CAAC","sourcesContent":["// File responses (slice 10 §2; decision \"Slice 10 fix round, three small points\" (1)): a file as a `bytes` response.\n// `fileResponse` stats the file at once (with a `root`, its real path must lie inside it); the file handle is opened by\n// the first `read` and closed when the request's scope seals (its signal aborts), so a response nobody writes (`HEAD`,\n// a 416, a disconnect, a wrap that replaced it) opens nothing and leaks nothing.\n\nimport { type FileHandle, open, realpath, stat } from \"node:fs/promises\";\nimport { basename, extname, sep } from \"node:path\";\nimport type { Context } from \"../../context/index.ts\";\nimport { HttpFailure } from \"./request.ts\";\nimport type { HttpResponse } from \"./response.ts\";\n\n/** What `fileResponse` takes besides the path. */\nexport type FileResponseOptions = {\n\t/** Saved under this name. */\n\treadonly download?: string;\n\t/** Shown in the browser instead of saved (an image, a video), with a `sandbox` CSP. */\n\treadonly inline?: true;\n\t/**\n\t * The directory the file must lie in once its symbolic links are resolved: one outside it (a link out) is refused\n\t * 403. Without it the path is trusted (a plugin's own file).\n\t */\n\treadonly root?: string;\n\t/** Whether a single range is answered 206 (audio and video seek with it). */\n\treadonly ranges?: boolean;\n\t/** The type; by default from the extension (text, images, audio, video), else `application/octet-stream`. */\n\treadonly mime?: string;\n};\n\n/**\n * The file at `path` as a `bytes` response; `HttpFailure` 404 for a missing one (anyone may ask for one: no failure\n * of the route, Fable's recheck N1), 403 for one outside `root`; throws what else `stat` throws.\n */\nexport async function fileResponse(given: string, options: FileResponseOptions = {}): Promise<HttpResponse> {\n\tlet path: string;\n\tlet size: number;\n\ttry {\n\t\tpath = options.root === undefined ? given : await inside(given, options.root);\n\t\t({ size } = await stat(path));\n\t} catch (error) {\n\t\tconst code = (error as NodeJS.ErrnoException).code;\n\t\tif (code === \"ENOENT\" || code === \"ENOTDIR\") throw new HttpFailure(404, \"no such file\");\n\t\tthrow error;\n\t}\n\tlet handle: Promise<FileHandle> | undefined;\n\tconst read = async (offset: number, length: number, context: Context): Promise<Uint8Array> => {\n\t\thandle ??= opened(path, context);\n\t\tconst file = await handle;\n\t\t// Only the bytes read are handed out.\n\t\tconst buffer = Buffer.allocUnsafe(length);\n\t\tconst { bytesRead } = await file.read(buffer, 0, length, offset);\n\t\treturn buffer.subarray(0, bytesRead);\n\t};\n\treturn {\n\t\tkind: \"bytes\",\n\t\tmime: options.mime ?? mimeOf(path),\n\t\tsize,\n\t\tread,\n\t\t...(options.download === undefined ? {} : { download: options.download }),\n\t\t...(options.inline === undefined ? {} : { inline: options.inline }),\n\t\t...(options.ranges === undefined ? {} : { ranges: options.ranges }),\n\t};\n}\n\n/** The real path of `path` when it lies inside `root`'s real path; `HttpFailure` 403 otherwise. */\nasync function inside(path: string, root: string): Promise<string> {\n\tconst [real, base] = await Promise.all([realpath(path), realpath(root)]);\n\tif (real !== base && !real.startsWith(base.endsWith(sep) ? base : base + sep)) {\n\t\tthrow new HttpFailure(403, \"the file lies outside its root\");\n\t}\n\treturn real;\n}\n\n/** Opens `path`, closed when `context` (the request's scope) aborts; at once when it aborted already. */\nasync function opened(path: string, context: Context): Promise<FileHandle> {\n\tconst file = await open(path, \"r\");\n\tconst close = (): void => void file.close().catch(() => {});\n\tconst signal = context.abortSignal;\n\tif (signal === undefined) throw new Error(`fileResponse(${basename(path)}): read outside a request's scope`);\n\tif (signal.aborted) close();\n\telse signal.addEventListener(\"abort\", close, { once: true });\n\treturn file;\n}\n\nconst MIME: Readonly<Record<string, string>> = {\n\t\".txt\": \"text/plain; charset=utf-8\",\n\t\".log\": \"text/plain; charset=utf-8\",\n\t\".md\": \"text/markdown; charset=utf-8\",\n\t\".csv\": \"text/csv; charset=utf-8\",\n\t\".json\": \"application/json\",\n\t\".png\": \"image/png\",\n\t\".jpg\": \"image/jpeg\",\n\t\".jpeg\": \"image/jpeg\",\n\t\".gif\": \"image/gif\",\n\t\".webp\": \"image/webp\",\n\t\".avif\": \"image/avif\",\n\t\".mp3\": \"audio/mpeg\",\n\t\".m4a\": \"audio/mp4\",\n\t\".ogg\": \"audio/ogg\",\n\t\".opus\": \"audio/ogg\",\n\t\".wav\": \"audio/wav\",\n\t\".flac\": \"audio/flac\",\n\t\".mp4\": \"video/mp4\",\n\t\".webm\": \"video/webm\",\n\t\".mov\": \"video/quicktime\",\n};\n\n/**\n * The type of `path` by its extension: text, images, audio and video only. Active types (HTML, SVG) never come from\n * here: a route serving one names it (`mime`).\n */\nfunction mimeOf(path: string): string {\n\treturn MIME[extname(path).toLowerCase()] ?? \"application/octet-stream\";\n}\n"]}

package/dist/next-node/http/headers.d.ts

@@ -0,0 +1,37 @@
+import type { Admitted } from "./admission.ts";
+import type { Router } from "./router.ts";
+/** A response's headers as the component builds them: by lowercased name, each value checked when set. */
+export declare class AnswerHeaders {
+    #private;
+    /** The values of `name` joined with `", "`, or `null`. */
+    get(name: string): string | null;
+    has(name: string): boolean;
+    /**
+     * Sets `name` to `value` (several values: one header line each, as `Set-Cookie` needs), replacing a same-named one;
+     * throws `TypeError` for a name or value HTTP cannot carry.
+     */
+    set(name: string, value: string | readonly string[]): void;
+    delete(name: string): void;
+    /** Each header line as `[name as set, value]`. */
+    lines(): IterableIterator<readonly [string, string]>;
+}
+/** Fresh script nonces, one per response: 16 random bytes each, base64, cut from a pool filled 4 KiB at a time. */
+export declare class Nonces {
+    #private;
+    /** The next nonce (never one handed out before). */
+    next(): string;
+}
+/**
+ * The default headers of one component's responses. The CSP around the nonce is kept per router and origin for local
+ * and allowed-host requests (a bounded set: the hosts contributions name); a relayed request's origins come from its
+ * relay and are never kept (Fable's and Opus's rechecks: a cache growing with each relayed origin).
+ */
+export declare class DefaultHeaders {
+    #private;
+    /**
+     * The default headers of a response to a request admitted as `admitted` (none: refused before admission), with
+     * `router`'s framers and CSP sources (none before the router is resolved), its CSP allowing scripts with `nonce`.
+     */
+    of(admitted: Admitted | undefined, router: Router | undefined, nonce: string): AnswerHeaders;
+}
+//# sourceMappingURL=headers.d.ts.map

package/dist/next-node/http/headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../../src/next-node/http/headers.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,0GAA0G;AAC1G,qBAAa,aAAa;;IAIzB,0DAA0D;IAC1D,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE/B;IAED,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzB;IAED;;;OAGG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,IAAI,CAOzD;IAED,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAEzB;IAED,kDAAkD;IACjD,KAAK,IAAI,gBAAgB,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAEpD;CACD;AAQD,mHAAmH;AACnH,qBAAa,MAAM;;IAIlB,oDAAoD;IACpD,IAAI,IAAI,MAAM,CASb;CACD;AAED;;;;GAIG;AACH,qBAAa,cAAc;;IAI1B;;;OAGG;IACH,EAAE,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAU3F;CAiBD"}

package/dist/next-node/http/headers.js

@@ -0,0 +1,129 @@
+// The default headers (decision "The HTTP component's security baseline" (4), "A CSP nonce per response"): on every
+// response, the component's own included: no caching, no sniffing, no referrer, no framing but by the contributed
+// framers, and a CSP with the response's own script nonce. A response's own headers replace same-named ones (a route
+// widens its own CSP); they are validated as they are set, so a CR or LF never reaches the wire.
+import { randomFillSync } from "node:crypto";
+/** A response's headers as the component builds them: by lowercased name, each value checked when set. */
+export class AnswerHeaders {
+    /** By lowercased name: the name as set and its values (several only for a header sent more than once). */
+    #entries = new Map();
+    /** The values of `name` joined with `", "`, or `null`. */
+    get(name) {
+        return this.#entries.get(name.toLowerCase())?.values.join(", ") ?? null;
+    }
+    has(name) {
+        return this.#entries.has(name.toLowerCase());
+    }
+    /**
+     * Sets `name` to `value` (several values: one header line each, as `Set-Cookie` needs), replacing a same-named one;
+     * throws `TypeError` for a name or value HTTP cannot carry.
+     */
+    set(name, value) {
+        if (!TOKEN.test(name))
+            throw new TypeError(`header: invalid name ${JSON.stringify(name)}`);
+        const values = typeof value === "string" ? [value] : value;
+        for (const each of values) {
+            if (!FIELD_VALUE.test(each))
+                throw new TypeError(`header ${name}: invalid value ${JSON.stringify(each)}`);
+        }
+        this.#entries.set(name.toLowerCase(), { name, values });
+    }
+    delete(name) {
+        this.#entries.delete(name.toLowerCase());
+    }
+    /** Each header line as `[name as set, value]`. */
+    *lines() {
+        for (const { name, values } of this.#entries.values())
+            for (const value of values)
+                yield [name, value];
+    }
+}
+/** A header name: an HTTP token. */
+const TOKEN = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
+/** A header value: visible Latin-1, spaces and tabs; no CR, LF or NUL. */
+const FIELD_VALUE = /^[\t\x20-\x7e\x80-\xff]*$/;
+/** Fresh script nonces, one per response: 16 random bytes each, base64, cut from a pool filled 4 KiB at a time. */
+export class Nonces {
+    #pool = Buffer.allocUnsafe(4096);
+    #at = 4096;
+    /** The next nonce (never one handed out before). */
+    next() {
+        // One `randomFillSync` per 256 nonces: `randomBytes(16)` per response costs 1.6 µs.
+        if (this.#at === this.#pool.length) {
+            randomFillSync(this.#pool);
+            this.#at = 0;
+        }
+        const nonce = this.#pool.toString("base64", this.#at, this.#at + 16);
+        this.#at += 16;
+        return nonce;
+    }
+}
+/**
+ * The default headers of one component's responses. The CSP around the nonce is kept per router and origin for local
+ * and allowed-host requests (a bounded set: the hosts contributions name); a relayed request's origins come from its
+ * relay and are never kept (Fable's and Opus's rechecks: a cache growing with each relayed origin).
+ */
+export class DefaultHeaders {
+    /** By router (its change makes new ones), then by origin: the CSP's text before and after the nonce. */
+    #policies = new WeakMap();
+    /**
+     * The default headers of a response to a request admitted as `admitted` (none: refused before admission), with
+     * `router`'s framers and CSP sources (none before the router is resolved), its CSP allowing scripts with `nonce`.
+     */
+    of(admitted, router, nonce) {
+        const headers = new AnswerHeaders();
+        headers.set("Cache-Control", "no-store");
+        headers.set("X-Content-Type-Options", "nosniff");
+        headers.set("Referrer-Policy", "no-referrer");
+        // `X-Frame-Options` names no origin: with framers, only `frame-ancestors` speaks.
+        if ((router?.framers.size ?? 0) === 0 && admitted?.framer === undefined)
+            headers.set("X-Frame-Options", "DENY");
+        const [before, after] = this.#policy(admitted, router);
+        headers.set("Content-Security-Policy", `${before}${nonce}${after}`);
+        return headers;
+    }
+    /** The CSP's text around the nonce for `admitted` under `router`. */
+    #policy(admitted, router) {
+        if (router === undefined || admitted === undefined || admitted.relay !== undefined)
+            return csp(admitted, router);
+        let policies = this.#policies.get(router);
+        if (policies === undefined) {
+            policies = new Map();
+            this.#policies.set(router, policies);
+        }
+        let policy = policies.get(admitted.origin);
+        if (policy === undefined) {
+            policy = csp(admitted, router);
+            policies.set(admitted.origin, policy);
+        }
+        return policy;
+    }
+}
+/**
+ * The CSP's text before and after the nonce: nothing by default, scripts from this origin or with the nonce,
+ * connections to it and its WebSocket, framing by the framers, plus contributed sources.
+ */
+function csp(admitted, router) {
+    const framers = [...(router?.framers ?? [])];
+    if (admitted?.framer !== undefined)
+        framers.push(admitted.framer);
+    const directives = new Map([
+        ["default-src", ["'none'"]],
+        ["script-src", ["'self'", NONCE]],
+        ["connect-src", ["'self'", ...(admitted === undefined ? [] : [admitted.origin.replace(/^http/, "ws")])]],
+        ["base-uri", ["'none'"]],
+        ["form-action", ["'self'"]],
+        ["frame-ancestors", framers.length === 0 ? ["'none'"] : framers],
+    ]);
+    for (const [directive, sources] of router?.csp ?? []) {
+        const current = directives.get(directive);
+        // A directive the baseline sets to 'none' is replaced by the sources given for it.
+        directives.set(directive, current === undefined || current[0] === "'none'" ? [...sources] : [...current, ...sources]);
+    }
+    const text = [...directives].map(([directive, sources]) => `${directive} ${sources.join(" ")}`).join("; ");
+    const at = text.indexOf(NONCE);
+    return [`${text.slice(0, at)}'nonce-`, `'${text.slice(at + NONCE.length)}`];
+}
+/** Where the nonce goes in the CSP's text while it is made. */
+const NONCE = "\0nonce\0";
+//# sourceMappingURL=headers.js.map

package/dist/next-node/http/headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.js","sourceRoot":"","sources":["../../../src/next-node/http/headers.ts"],"names":[],"mappings":"AAAA,oHAAoH;AACpH,kHAAkH;AAClH,qHAAqH;AACrH,iGAAiG;AAEjG,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAI7C,0GAA0G;AAC1G,MAAM,OAAO,aAAa;IACzB,0GAA0G;IACjG,QAAQ,GAAG,IAAI,GAAG,EAAyE,CAAC;IAErG,0DAA0D;IAC1D,GAAG,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IACzE,CAAC;IAED,GAAG,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACH,GAAG,CAAC,IAAY,EAAE,KAAiC;QAClD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC3D,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,IAAI,mBAAmB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,CAAC,IAAY;QAClB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,kDAAkD;IAClD,CAAC,KAAK;QACL,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxG,CAAC;CACD;AAED,oCAAoC;AACpC,MAAM,KAAK,GAAG,gCAAgC,CAAC;AAE/C,0EAA0E;AAC1E,MAAM,WAAW,GAAG,2BAA2B,CAAC;AAEhD,mHAAmH;AACnH,MAAM,OAAO,MAAM;IACT,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC1C,GAAG,GAAG,IAAI,CAAC;IAEX,oDAAoD;IACpD,IAAI;QACH,oFAAoF;QACpF,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACd,CAAC;CACD;AAED;;;;GAIG;AACH,MAAM,OAAO,cAAc;IAC1B,wGAAwG;IAC/F,SAAS,GAAG,IAAI,OAAO,EAAkD,CAAC;IAEnF;;;OAGG;IACH,EAAE,CAAC,QAA8B,EAAE,MAA0B,EAAE,KAAa;QAC3E,MAAM,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAC9C,kFAAkF;QAClF,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,QAAQ,EAAE,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QAChH,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC;QACpE,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,qEAAqE;IACrE,OAAO,CAAC,QAA8B,EAAE,MAA0B;QACjE,IAAI,MAAM,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjH,IAAI,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5B,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC/B,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;CACD;AAED;;;GAGG;AACH,SAAS,GAAG,CAAC,QAA8B,EAAE,MAA0B;IACtE,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,IAAI,QAAQ,EAAE,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAmB;QAC5C,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC,YAAY,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxG,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC,iBAAiB,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;KAChE,CAAC,CAAC;IACH,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,mFAAmF;QACnF,UAAU,CAAC,GAAG,CACb,SAAS,EACT,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC,CAC1F,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3G,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,+DAA+D;AAC/D,MAAM,KAAK,GAAG,WAAW,CAAC","sourcesContent":["// The default headers (decision \"The HTTP component's security baseline\" (4), \"A CSP nonce per response\"): on every\n// response, the component's own included: no caching, no sniffing, no referrer, no framing but by the contributed\n// framers, and a CSP with the response's own script nonce. A response's own headers replace same-named ones (a route\n// widens its own CSP); they are validated as they are set, so a CR or LF never reaches the wire.\n\nimport { randomFillSync } from \"node:crypto\";\nimport type { Admitted } from \"./admission.ts\";\nimport type { Router } from \"./router.ts\";\n\n/** A response's headers as the component builds them: by lowercased name, each value checked when set. */\nexport class AnswerHeaders {\n\t/** By lowercased name: the name as set and its values (several only for a header sent more than once). */\n\treadonly #entries = new Map<string, { readonly name: string; readonly values: readonly string[] }>();\n\n\t/** The values of `name` joined with `\", \"`, or `null`. */\n\tget(name: string): string | null {\n\t\treturn this.#entries.get(name.toLowerCase())?.values.join(\", \") ?? null;\n\t}\n\n\thas(name: string): boolean {\n\t\treturn this.#entries.has(name.toLowerCase());\n\t}\n\n\t/**\n\t * Sets `name` to `value` (several values: one header line each, as `Set-Cookie` needs), replacing a same-named one;\n\t * throws `TypeError` for a name or value HTTP cannot carry.\n\t */\n\tset(name: string, value: string | readonly string[]): void {\n\t\tif (!TOKEN.test(name)) throw new TypeError(`header: invalid name ${JSON.stringify(name)}`);\n\t\tconst values = typeof value === \"string\" ? [value] : value;\n\t\tfor (const each of values) {\n\t\t\tif (!FIELD_VALUE.test(each)) throw new TypeError(`header ${name}: invalid value ${JSON.stringify(each)}`);\n\t\t}\n\t\tthis.#entries.set(name.toLowerCase(), { name, values });\n\t}\n\n\tdelete(name: string): void {\n\t\tthis.#entries.delete(name.toLowerCase());\n\t}\n\n\t/** Each header line as `[name as set, value]`. */\n\t*lines(): IterableIterator<readonly [string, string]> {\n\t\tfor (const { name, values } of this.#entries.values()) for (const value of values) yield [name, value];\n\t}\n}\n\n/** A header name: an HTTP token. */\nconst TOKEN = /^[!#$%&'*+\\-.^_`|~0-9A-Za-z]+$/;\n\n/** A header value: visible Latin-1, spaces and tabs; no CR, LF or NUL. */\nconst FIELD_VALUE = /^[\\t\\x20-\\x7e\\x80-\\xff]*$/;\n\n/** Fresh script nonces, one per response: 16 random bytes each, base64, cut from a pool filled 4 KiB at a time. */\nexport class Nonces {\n\treadonly #pool = Buffer.allocUnsafe(4096);\n\t#at = 4096;\n\n\t/** The next nonce (never one handed out before). */\n\tnext(): string {\n\t\t// One `randomFillSync` per 256 nonces: `randomBytes(16)` per response costs 1.6 µs.\n\t\tif (this.#at === this.#pool.length) {\n\t\t\trandomFillSync(this.#pool);\n\t\t\tthis.#at = 0;\n\t\t}\n\t\tconst nonce = this.#pool.toString(\"base64\", this.#at, this.#at + 16);\n\t\tthis.#at += 16;\n\t\treturn nonce;\n\t}\n}\n\n/**\n * The default headers of one component's responses. The CSP around the nonce is kept per router and origin for local\n * and allowed-host requests (a bounded set: the hosts contributions name); a relayed request's origins come from its\n * relay and are never kept (Fable's and Opus's rechecks: a cache growing with each relayed origin).\n */\nexport class DefaultHeaders {\n\t/** By router (its change makes new ones), then by origin: the CSP's text before and after the nonce. */\n\treadonly #policies = new WeakMap<Router, Map<string, readonly [string, string]>>();\n\n\t/**\n\t * The default headers of a response to a request admitted as `admitted` (none: refused before admission), with\n\t * `router`'s framers and CSP sources (none before the router is resolved), its CSP allowing scripts with `nonce`.\n\t */\n\tof(admitted: Admitted | undefined, router: Router | undefined, nonce: string): AnswerHeaders {\n\t\tconst headers = new AnswerHeaders();\n\t\theaders.set(\"Cache-Control\", \"no-store\");\n\t\theaders.set(\"X-Content-Type-Options\", \"nosniff\");\n\t\theaders.set(\"Referrer-Policy\", \"no-referrer\");\n\t\t// `X-Frame-Options` names no origin: with framers, only `frame-ancestors` speaks.\n\t\tif ((router?.framers.size ?? 0) === 0 && admitted?.framer === undefined) headers.set(\"X-Frame-Options\", \"DENY\");\n\t\tconst [before, after] = this.#policy(admitted, router);\n\t\theaders.set(\"Content-Security-Policy\", `${before}${nonce}${after}`);\n\t\treturn headers;\n\t}\n\n\t/** The CSP's text around the nonce for `admitted` under `router`. */\n\t#policy(admitted: Admitted | undefined, router: Router | undefined): readonly [string, string] {\n\t\tif (router === undefined || admitted === undefined || admitted.relay !== undefined) return csp(admitted, router);\n\t\tlet policies = this.#policies.get(router);\n\t\tif (policies === undefined) {\n\t\t\tpolicies = new Map();\n\t\t\tthis.#policies.set(router, policies);\n\t\t}\n\t\tlet policy = policies.get(admitted.origin);\n\t\tif (policy === undefined) {\n\t\t\tpolicy = csp(admitted, router);\n\t\t\tpolicies.set(admitted.origin, policy);\n\t\t}\n\t\treturn policy;\n\t}\n}\n\n/**\n * The CSP's text before and after the nonce: nothing by default, scripts from this origin or with the nonce,\n * connections to it and its WebSocket, framing by the framers, plus contributed sources.\n */\nfunction csp(admitted: Admitted | undefined, router: Router | undefined): readonly [string, string] {\n\tconst framers = [...(router?.framers ?? [])];\n\tif (admitted?.framer !== undefined) framers.push(admitted.framer);\n\tconst directives = new Map<string, string[]>([\n\t\t[\"default-src\", [\"'none'\"]],\n\t\t[\"script-src\", [\"'self'\", NONCE]],\n\t\t[\"connect-src\", [\"'self'\", ...(admitted === undefined ? [] : [admitted.origin.replace(/^http/, \"ws\")])]],\n\t\t[\"base-uri\", [\"'none'\"]],\n\t\t[\"form-action\", [\"'self'\"]],\n\t\t[\"frame-ancestors\", framers.length === 0 ? [\"'none'\"] : framers],\n\t]);\n\tfor (const [directive, sources] of router?.csp ?? []) {\n\t\tconst current = directives.get(directive);\n\t\t// A directive the baseline sets to 'none' is replaced by the sources given for it.\n\t\tdirectives.set(\n\t\t\tdirective,\n\t\t\tcurrent === undefined || current[0] === \"'none'\" ? [...sources] : [...current, ...sources],\n\t\t);\n\t}\n\tconst text = [...directives].map(([directive, sources]) => `${directive} ${sources.join(\" \")}`).join(\"; \");\n\tconst at = text.indexOf(NONCE);\n\treturn [`${text.slice(0, at)}'nonce-`, `'${text.slice(at + NONCE.length)}`];\n}\n\n/** Where the nonce goes in the CSP's text while it is made. */\nconst NONCE = \"\\0nonce\\0\";\n"]}

package/dist/next-node/http/http.d.ts

@@ -0,0 +1,100 @@
+import type { IncomingMessage } from "node:http";
+import type { Duplex } from "node:stream";
+import { type Context } from "../../context/index.ts";
+import { type Principal } from "../../next/data/index.ts";
+import { type Facet, type Host } from "../../next/host/index.ts";
+import { type Connection } from "./admission.ts";
+import { type ListenAddress } from "./node.ts";
+import { type HttpRequest } from "./request.ts";
+import { type LinkOptions } from "./upgrades.ts";
+/** What `createHttp` takes: the app's settings, fixed for the component's life (changing one is a restart). */
+export type HttpOptions = {
+    /** Where Chord's own listener listens; none: no listener (an app mounting `fetch`). Port 0 picks one. */
+    readonly listen?: ListenAddress;
+    /** The links endpoint: its path, and each socket's options, a value or per request and principal. */
+    readonly links?: LinksOptions;
+    /** How long `close` waits for running requests and closing sockets: 30 s by default. */
+    readonly closeTimeout?: number;
+    readonly onError: (error: HttpError) => void;
+};
+/** The links endpoint's path and what it gives each socket (`maxPayload` 1 MiB by default). */
+export type LinksOptions = {
+    readonly path: string;
+    readonly options?: LinkOptions | ((request: HttpRequest, principal: Principal) => LinkOptions);
+};
+/** What the component reports. */
+export type HttpError = {
+    readonly kind: "route_failed";
+    readonly pattern: string;
+    readonly plugin: string;
+    readonly error: unknown;
+} | {
+    readonly kind: "wrap_failed";
+    readonly name: string;
+    readonly plugin: string;
+    readonly error: unknown;
+} | {
+    readonly kind: "socket_failed";
+    readonly pattern: string;
+    readonly plugin: string;
+    readonly error: unknown;
+}
+/** A response that could not be made (an invalid header, no JSON) or read whole (a `bytes` read that threw). */
+ | {
+    readonly kind: "response_failed";
+    readonly pattern: string;
+    readonly error: unknown;
+}
+/** A contributed hook threw (`plugin`), or the app's `links.options` (no plugin). */
+ | {
+    readonly kind: "hook_failed";
+    readonly hook: HookName;
+    readonly plugin?: string;
+    readonly error: unknown;
+};
+/** The hooks the component calls. */
+export type HookName = "authenticate" | "relay" | "links.options";
+/** The running component. */
+export interface HttpComponent<P extends Principal> {
+    /**
+     * Its facet (plugin `chord.http`): serves `Http` and `Authenticators`, and with `listen` the listener, a
+     * host-lifetime object. The app loads it among its core facets, the same object at every reload.
+     */
+    readonly facet: Facet<P>;
+    /**
+     * Answers a Web `Request` (an app's own server mounts it: `hono.all("/*", (c) => http.fetch(c.req.raw, …))`);
+     * `connection` is what the server knows of the socket: without `localAddress` and `localPort` no request is local.
+     * Requests before the publication wait for it (503 past the host's `readyTimeout`).
+     */
+    fetch(request: Request, connection?: Connection): Promise<Response>;
+    /** Node's upgrade adapter (`server.on("upgrade", http.upgrade)`): the links endpoint and plugin sockets. */
+    readonly upgrade: (message: IncomingMessage, socket: Duplex, head: Buffer) => void;
+    /** Where the listener listens, once it does (the real port when `listen.port` was 0). */
+    listening(context: Context): Promise<ListenAddress>;
+    /**
+     * Refuses new requests and upgrades (503), closes sockets and links (1001, terminated at `closeTimeout`), waits for
+     * running requests up to `closeTimeout` (an aborted `context`: not at all), then seals them. Run it before
+     * `host.close`, which seals every request's scope at once (the listener's close runs it then, too late to drain).
+     */
+    close(context: Context): Promise<void>;
+}
+/** Builds the HTTP component on `host` (a request's scope is a `host.root` with its principal). */
+export declare function createHttp<P extends Principal>(host: Host<P>, options: HttpOptions, context: Context): HttpComponent<P>;
+/** The listener: a host-lifetime object of plugin `chord.http` whose native is Chord's own Node server. */
+export declare const HttpListener: import("../../next/contracts/contract.ts").Contract<{
+    kind: "local";
+    name: "chord.http.listener";
+    params: {};
+    history: [{
+        version: "1";
+        variants: {
+            members: {
+                state: {};
+                methods: {};
+                keyed: {};
+            };
+        };
+        changes: never;
+    }];
+}>;
+//# sourceMappingURL=http.d.ts.map

package/dist/next-node/http/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../src/next-node/http/http.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAoB,KAAK,OAAO,EAAuC,MAAM,wBAAwB,CAAC;AAE7G,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAyB,KAAK,KAAK,EAAE,KAAK,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAExF,OAAO,EAGN,KAAK,UAAU,EAKf,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAA8B,KAAK,aAAa,EAA2C,MAAM,WAAW,CAAC;AACpH,OAAO,EAAe,KAAK,WAAW,EAAc,MAAM,cAAc,CAAC;AAGzE,OAAO,EAAE,KAAK,WAAW,EAAY,MAAM,eAAe,CAAC;AAE3D,+GAA+G;AAC/G,MAAM,MAAM,WAAW,GAAG;IACzB,yGAAyG;IACzG,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC,qGAAqG;IACrG,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,wFAAwF;IACxF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;CAC7C,CAAC;AAEF,+FAA+F;AAC/F,MAAM,MAAM,YAAY,GAAG;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,KAAK,WAAW,CAAC,CAAC;CAC/F,CAAC;AAEF,kCAAkC;AAClC,MAAM,MAAM,SAAS,GAClB;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC7G;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACzG;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE;AAChH,gHAAgH;GAC9G;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE;AACzF,qFAAqF;GACnF;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAEhH,qCAAqC;AACrC,MAAM,MAAM,QAAQ,GAAG,cAAc,GAAG,OAAO,GAAG,eAAe,CAAC;AAElE,6BAA6B;AAC7B,MAAM,WAAW,aAAa,CAAC,CAAC,SAAS,SAAS;IACjD;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB;;;;OAIG;IACH,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpE,4GAA4G;IAC5G,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnF,yFAAyF;IACzF,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpD;;;;OAIG;IACH,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,mGAAmG;AACnG,wBAAgB,UAAU,CAAC,CAAC,SAAS,SAAS,EAC7C,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EACb,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,OAAO,GACd,aAAa,CAAC,CAAC,CAAC,CAElB;AAED,2GAA2G;AAC3G,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;EAAwE,CAAC"}