@procedures/http 0.28.0 → 0.28.1

package/dist/host-fetch.d.ts

@@ -0,0 +1,67 @@
+/**
+ * A `fetch` for GET requests that goes through the host policy (audit pass 2, O55).
+ *
+ * A procedure of another package that reads a URL of its caller uses this function in place of
+ * the global `fetch`: `weather.forecast`, and the modules of `@procedures/geo` and
+ * `@procedures/ics` that a host makes with it. The request has the same checks as `http.request`:
+ *
+ * - The host of the URL and of each redirect must pass the host policy. The default policy
+ *   refuses loopback, private, link-local and the other special addresses.
+ * - The connection uses only the addresses that the check allowed (DNS rebinding).
+ * - The body of the response has the size limit of the settings.
+ *
+ * A refusal is `FORBIDDEN` with the reason `host-not-allowed` (`isHostNotAllowed`). When the
+ * signal of the caller aborts, the function throws the reason of the signal, as `fetch` does.
+ *
+ * The option `warnOnRefusal` keeps the behavior before the host policy, for the default modules
+ * of 0.28: a refused host gets a deprecation notice and the global `fetch`. Version 0.29.0 removes it.
+ */
+import type { HttpModuleOptions } from "./module.js";
+/** The options of one request. */
+export interface HostFetchInit {
+    /** The headers of the request. */
+    readonly headers?: Readonly<Record<string, string>> | undefined;
+    /** The signal that stops the request. */
+    readonly signal?: AbortSignal | undefined;
+}
+/** The response of a request: the parts of a `Response` of `fetch` that the procedures use. */
+export interface HostFetchResponse {
+    readonly ok: boolean;
+    readonly status: number;
+    /** The URL of the response: the last URL after the redirects. */
+    readonly url: string;
+    text(): Promise<string>;
+    json(): Promise<unknown>;
+}
+/** A `fetch` for GET requests through the host policy. */
+export type HostFetch = (url: string, init?: HostFetchInit) => Promise<HostFetchResponse>;
+/** A deprecation notice: the code and the text of a `DeprecationWarning` of Node. */
+export interface DeprecationNotice {
+    /** The code of the warning, for example `PROCEDURES_WEATHER_PRIVATE_HOST`. The process emits each code one time. */
+    readonly code: string;
+    /** The text of the warning. It names the change that removes the notice. */
+    readonly message: string;
+}
+/** The options of `createHostFetch()`: the options of `createHttpModule()`, and the notice of a refused host. */
+export interface HostFetchOptions extends HttpModuleOptions {
+    /**
+     * The notice of a refused host. With this option, a refused host does not throw. The function
+     * emits the notice one time in each process. Then it sends the request with the global `fetch`,
+     * as before the host policy. Without this option, a refused host throws `FORBIDDEN`.
+     *
+     * @deprecated The default modules of `weather`, `geo` and `ics` use it in 0.28 only. Version
+     * 0.29.0 removes it. Then a refused host always throws.
+     */
+    readonly warnOnRefusal?: DeprecationNotice | undefined;
+}
+/**
+ * This function gives a `fetch` for GET requests through the host policy of the options. The
+ * options are the options of `createHttpModule()`. Without options, the policy is the default
+ * policy: each public host, and no other host. A bad entry of `allow` throws here.
+ *
+ * ```ts
+ * const forecast = createWeatherModule({ fetch: createHostFetch({ allow: ["localhost:8080"] }) });
+ * ```
+ */
+export declare function createHostFetch(options?: HostFetchOptions): HostFetch;
+//# sourceMappingURL=host-fetch.d.ts.map

package/dist/host-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-fetch.d.ts","sourceRoot":"","sources":["../src/host-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAQrD,kCAAkC;AAClC,MAAM,WAAW,aAAa;IAC5B,kCAAkC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IAChE,yCAAyC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CAC3C;AAED,+FAA+F;AAC/F,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1B;AAED,0DAA0D;AAC1D,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAE1F,qFAAqF;AACrF,MAAM,WAAW,iBAAiB;IAChC,oHAAoH;IACpH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,iHAAiH;AACjH,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IACzD;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;CACxD;AAsBD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,OAAO,GAAE,gBAAqB,GAAG,SAAS,CA6BzE"}

package/dist/host-fetch.js

@@ -0,0 +1,80 @@
+/**
+ * A `fetch` for GET requests that goes through the host policy (audit pass 2, O55).
+ *
+ * A procedure of another package that reads a URL of its caller uses this function in place of
+ * the global `fetch`: `weather.forecast`, and the modules of `@procedures/geo` and
+ * `@procedures/ics` that a host makes with it. The request has the same checks as `http.request`:
+ *
+ * - The host of the URL and of each redirect must pass the host policy. The default policy
+ *   refuses loopback, private, link-local and the other special addresses.
+ * - The connection uses only the addresses that the check allowed (DNS rebinding).
+ * - The body of the response has the size limit of the settings.
+ *
+ * A refusal is `FORBIDDEN` with the reason `host-not-allowed` (`isHostNotAllowed`). When the
+ * signal of the caller aborts, the function throws the reason of the signal, as `fetch` does.
+ *
+ * The option `warnOnRefusal` keeps the behavior before the host policy, for the default modules
+ * of 0.28: a refused host gets a deprecation notice and the global `fetch`. Version 0.29.0 removes it.
+ */
+import { httpSettings } from "./module.js";
+import { isHostNotAllowed } from "./policy.js";
+import { httpRequest } from "./procedures/http/request.js";
+/** The longest time of a request of `http.request`: the signal of the caller is the real limit. */
+const LONGEST_MS = 86_400_000;
+/** The codes of the notices that this process emitted. */
+const emitted = new Set();
+/** This function emits a deprecation notice one time in each process, with its code. */
+function emitOnce(notice) {
+    if (emitted.has(notice.code))
+        return;
+    emitted.add(notice.code);
+    if (typeof process !== "undefined" && typeof process.emitWarning === "function") {
+        process.emitWarning(notice.message, { type: "DeprecationWarning", code: notice.code });
+    }
+    else {
+        console.warn(`[${notice.code}] ${notice.message}`);
+    }
+}
+/** This function gives the parts of a `Response` of the global `fetch` that the procedures use. */
+async function globalFetch(url, init) {
+    const response = await fetch(url, { ...(init.headers !== undefined ? { headers: { ...init.headers } } : {}), ...(init.signal !== undefined ? { signal: init.signal } : {}) });
+    return response;
+}
+/**
+ * This function gives a `fetch` for GET requests through the host policy of the options. The
+ * options are the options of `createHttpModule()`. Without options, the policy is the default
+ * policy: each public host, and no other host. A bad entry of `allow` throws here.
+ *
+ * ```ts
+ * const forecast = createWeatherModule({ fetch: createHostFetch({ allow: ["localhost:8080"] }) });
+ * ```
+ */
+export function createHostFetch(options = {}) {
+    const { warnOnRefusal, ...policyOptions } = options;
+    const settings = httpSettings(policyOptions);
+    return async (url, init = {}) => {
+        let output;
+        try {
+            output = await httpRequest({ url, method: "GET", ...(init.headers !== undefined ? { headers: { ...init.headers } } : {}), responseType: "text", timeoutMs: LONGEST_MS }, { signal: init.signal }, settings);
+        }
+        catch (error) {
+            if (init.signal?.aborted)
+                throw init.signal.reason;
+            // Before the host policy, the request went to each host (O55). The notice names the change.
+            if (warnOnRefusal !== undefined && isHostNotAllowed(error)) {
+                emitOnce(warnOnRefusal);
+                return globalFetch(url, init);
+            }
+            throw error;
+        }
+        const text = typeof output.body === "string" ? output.body : "";
+        return {
+            ok: output.ok,
+            status: output.status,
+            url: output.url,
+            text: async () => text,
+            json: async () => JSON.parse(text),
+        };
+    };
+}
+//# sourceMappingURL=host-fetch.js.map

package/dist/host-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-fetch.js","sourceRoot":"","sources":["../src/host-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,mGAAmG;AACnG,MAAM,UAAU,GAAG,UAAU,CAAC;AA4C9B,0DAA0D;AAC1D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;AAElC,wFAAwF;AACxF,SAAS,QAAQ,CAAC,MAAyB;IACzC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO;IACrC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAChF,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACzF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,IAAmB;IACzD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9K,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,OAAO,GAAqB,EAAE;IAC5D,MAAM,EAAE,aAAa,EAAE,GAAG,aAAa,EAAE,GAAG,OAAO,CAAC;IACpD,MAAM,QAAQ,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;IAC7C,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE;QAC9B,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,WAAW,CACxB,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,EAC5I,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EACvB,QAAQ,CACT,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACnD,4FAA4F;YAC5F,IAAI,aAAa,KAAK,SAAS,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3D,QAAQ,CAAC,aAAa,CAAC,CAAC;gBACxB,OAAO,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAChC,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;YACtB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY;SAC9C,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -2,6 +2,7 @@ export * from "./module.js";
 export * from "./types.js";
 export { httpRequest, httpJson, httpNdjson, httpSse } from "./procedures/http/index.js";
 export { HOST_NOT_ALLOWED, DEFAULT_HOST_POLICY, createHostPolicy, checkHost, isHostNotAllowed, systemResolver } from "./policy.js";
+export { createHostFetch, type DeprecationNotice, type HostFetch, type HostFetchInit, type HostFetchOptions, type HostFetchResponse } from "./host-fetch.js";
 export type { AllowedTarget, HostPolicy, HostPolicyOptions, HostResolver, ResolvedAddress } from "./policy.js";
 export { isPublicAddress, parseAddress, specialClass } from "./address.js";
 export { HttpError, type HttpErrorCode } from "./errors.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAExF,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACnI,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC/G,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAC/H,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,UAAU,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAExF,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEnI,OAAO,EAAE,eAAe,EAAE,KAAK,iBAAiB,EAAE,KAAK,SAAS,EAAE,KAAK,aAAa,EAAE,KAAK,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAC7J,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC/G,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAC/H,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,UAAU,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -4,6 +4,8 @@ export * from "./types.js";
 export { httpRequest, httpJson, httpNdjson, httpSse } from "./procedures/http/index.js";
 // The host policy (roadmap R38)
 export { HOST_NOT_ALLOWED, DEFAULT_HOST_POLICY, createHostPolicy, checkHost, isHostNotAllowed, systemResolver } from "./policy.js";
+// A fetch for GET requests through the host policy, for the procedures of other packages (O55)
+export { createHostFetch } from "./host-fetch.js";
 export { isPublicAddress, parseAddress, specialClass } from "./address.js";
 export { HttpError } from "./errors.js";
 export { DEFAULT_MAX_BYTES, DEFAULT_ITEM_BYTES, DEFAULT_TIMEOUT_MS, DEFAULT_SETTINGS } from "./exchange.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AACxF,gCAAgC;AAChC,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEnI,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAsB,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAqB,MAAM,eAAe,CAAC;AAC/H,OAAO,EAAE,WAAW,EAAE,SAAS,EAAyC,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AACxF,gCAAgC;AAChC,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACnI,+FAA+F;AAC/F,OAAO,EAAE,eAAe,EAA6G,MAAM,iBAAiB,CAAC;AAE7J,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAsB,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAqB,MAAM,eAAe,CAAC;AAC/H,OAAO,EAAE,WAAW,EAAE,SAAS,EAAyC,MAAM,cAAc,CAAC"}

package/dist/module.d.ts

@@ -7,6 +7,7 @@
  * gives the same procedures with another host policy or other size limits (roadmap R38).
  */
 import { type ProcedureModule, type ProcedureRegistry } from "@procedures/client";
+import { type HttpSettings } from "./exchange.js";
 import { type HostPolicyOptions } from "./policy.js";
 /**
  * The module of this package, for `createRegistry()`: its procedures as data. It reaches each
@@ -33,6 +34,8 @@ export interface HttpModuleOptions extends HostPolicyOptions {
  * ```
  */
 export declare function createHttpModule(options?: HttpModuleOptions): ProcedureModule;
+/** This function gives the settings of the options: the host policy and the size limits. A bad entry of `allow` throws. */
+export declare function httpSettings(options?: HttpModuleOptions): HttpSettings;
 /**
  * This function registers the procedures of @procedures/http in a registry. The default is the
  * global registry. The options are the options of `createHttpModule()`.

package/dist/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../src/module.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EASL,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACvB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAiMvE;;;;GAIG;AACH,eAAO,MAAM,UAAU,EAAE,eAAoF,CAAC;eAE/F,UAAU;AAEzB,4FAA4F;AAC5F,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC1D,sEAAsE;IACtE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,kGAAkG;IAClG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,iBAAsB,GAAG,eAAe,CAQjF;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,GAAE,iBAAsC,EAAE,OAAO,GAAE,iBAAsB,GAAG,IAAI,CAE9H"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../src/module.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EASL,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAuC,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AACvF,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAiMvE;;;;GAIG;AACH,eAAO,MAAM,UAAU,EAAE,eAAoF,CAAC;eAE/F,UAAU;AAEzB,4FAA4F;AAC5F,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC1D,sEAAsE;IACtE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,kGAAkG;IAClG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,iBAAsB,GAAG,eAAe,CAGjF;AAED,2HAA2H;AAC3H,wBAAgB,YAAY,CAAC,OAAO,GAAE,iBAAsB,GAAG,YAAY,CAO1E;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,GAAE,iBAAsC,EAAE,OAAO,GAAE,iBAAsB,GAAG,IAAI,CAE9H"}

package/dist/module.js

@@ -192,12 +192,17 @@ export default httpModule;
 export function createHttpModule(options = {}) {
     if (Object.values(options).every((value) => value === undefined))
         return httpModule;
-    const settings = {
+    return defineModule("@procedures/http", httpProcedures(httpSettings(options)));
+}
+/** This function gives the settings of the options: the host policy and the size limits. A bad entry of `allow` throws. */
+export function httpSettings(options = {}) {
+    if (Object.values(options).every((value) => value === undefined))
+        return DEFAULT_SETTINGS;
+    return {
         policy: createHostPolicy(options),
         maxRequestBytes: options.maxRequestBytes ?? DEFAULT_MAX_BYTES,
         maxResponseBytes: options.maxResponseBytes ?? DEFAULT_MAX_BYTES,
     };
-    return defineModule("@procedures/http", httpProcedures(settings));
 }
 /**
  * This function registers the procedures of @procedures/http in a registry. The default is the

package/dist/module.js.map

@@ -1 +1 @@
-{"version":3,"file":"module.js","sourceRoot":"","sources":["../src/module.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,UAAU,GAMX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAqB,MAAM,eAAe,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAA0B,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAYnD,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC;AACjF,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC;AACnG,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAClE,MAAM,KAAK,GAAG,CAAC;KACZ,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;KAC9D,QAAQ,EAAE;KACV,QAAQ,CAAC,yFAAyF,CAAC,CAAC;AACvG,gDAAgD;AAChD,MAAM,YAAY,GAAG,CAAC,WAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC3H,MAAM,SAAS,GAAG,CAAC,WAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACxG,MAAM,gBAAgB,GAAG,SAAS,CAAC,6GAA6G,CAAC,CAAC;AAClJ,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC,CAAC;AAEvJ,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,GAAG;IACH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC7H,OAAO;IACP,KAAK;IACL,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACtD,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IAC1G,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACvE,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gFAAgF,CAAC;IACrJ,SAAS,EAAE,YAAY,CAAC,8DAA8D,CAAC;IACvF,gBAAgB;IAChB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oFAAoF,CAAC;IACzJ,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;CAC3H,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC/D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAClE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC3D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;IACrF,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC1E,OAAO,EAAE,YAAY;IACrB,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IAC/F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;CAC9F,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,GAAG;IACH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IAC5G,OAAO;IACP,KAAK;IACL,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAChE,SAAS,EAAE,YAAY,CAAC,8DAA8D,CAAC;IACvF,gBAAgB;IAChB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2FAA2F,CAAC;CAC3I,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC/D,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC3D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;IACrF,OAAO,EAAE,YAAY;IACrB,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,wGAAwG,CAAC;CACrI,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG;IACnB,GAAG;IACH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;IACtH,OAAO;IACP,KAAK;IACL,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACjE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACrH,SAAS,EAAE,YAAY,CAAC,mEAAmE,CAAC;IAC5F,aAAa,EAAE,YAAY,CAAC,oEAAoE,CAAC;CAClG,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,GAAG,YAAY;IACf,YAAY,EAAE,SAAS,CAAC,6CAA6C,CAAC;CACvE,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC;AAElF,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,GAAG,YAAY;IACf,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;IAC9G,aAAa,EAAE,SAAS,CAAC,8CAA8C,CAAC;CACzE,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACtE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;IACjF,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACrE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;CAC1G,CAAC,CAAC;AAEH,gFAAgF;AAChF,aAAa;AACb,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,aAAa,GAAY,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;AAE3E,gEAAgE;AAChE,SAAS,cAAc,CAAC,QAAsB;IAC5C,MAAM,oBAAoB,GAAG,eAAe,EAAE;SAC3C,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;SACzB,KAAK,CAAC,UAAU,CAAmB,sBAAsB,CAAC,CAAC;SAC3D,MAAM,CAAC,UAAU,CAAoB,uBAAuB,CAAC,CAAC;SAC9D,IAAI,CAAC;QACJ,WAAW,EAAE,oEAAoE;QACjF,IAAI,EAAE,CAAC,KAAK,CAAC;QACb,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE;QAC1D,MAAM,EAAE,MAAM;QACd,0EAA0E;QAC1E,OAAO,EAAE,aAAa;KACvB,CAAC;SACD,OAAO,CAAC,KAAK,EAAE,KAAuB,EAAE,GAAG,EAA8B,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;SAC9G,KAAK,EAAE,CAAC;IAEX,MAAM,iBAAiB,GAAG,eAAe,EAAE;SACxC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SACtB,KAAK,CAAC,UAAU,CAAgB,mBAAmB,CAAC,CAAC;SACrD,MAAM,CAAC,UAAU,CAAiB,oBAAoB,CAAC,CAAC;SACxD,IAAI,CAAC;QACJ,WAAW,EAAE,gEAAgE;QAC7E,IAAI,EAAE,CAAC,KAAK,CAAC;QACb,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,gCAAgC;QAChC,OAAO,EAAE,aAAa;KACvB,CAAC;SACD,OAAO,CAAC,KAAK,EAAE,KAAoB,EAAE,GAAG,EAA2B,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;SACrG,KAAK,EAAE,CAAC;IAEX,MAAM,mBAAmB,GAAG,eAAe,EAAE;SAC1C,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;SACxB,KAAK,CAAC,UAAU,CAAkB,qBAAqB,CAAC,CAAC;SACzD,MAAM,CAAC,UAAU,CAAmB,sBAAsB,CAAC,CAAC;SAC5D,IAAI,CAAC;QACJ,WAAW,EAAE,wEAAwE;QACrF,IAAI,EAAE,CAAC,KAAK,CAAC;QACb,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,SAAS,EAAE,IAAI;QACf,wEAAwE;QACxE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;QAC3B,gCAAgC;QAChC,OAAO,EAAE,aAAa;KACvB,CAAC;QACF,wFAAwF;QACxF,oFAAoF;SACnF,OAAO,CAAC,CAAC,CAAC,KAAsB,EAAE,GAAiB,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAmE,CAAC;SAC5J,KAAK,EAAE,CAAC;IAEX,MAAM,gBAAgB,GAAG,eAAe,EAAE;SACvC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;SACrB,KAAK,CAAC,UAAU,CAAe,kBAAkB,CAAC,CAAC;SACnD,MAAM,CAAC,UAAU,CAAgB,mBAAmB,CAAC,CAAC;SACtD,IAAI,CAAC;QACJ,WAAW,EAAE,4DAA4D;QACzE,IAAI,EAAE,CAAC,KAAK,CAAC;QACb,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,SAAS,EAAE,IAAI;QACf,sDAAsD;QACtD,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;QAC3B,yEAAyE;QACzE,OAAO,EAAE,aAAa;KACvB,CAAC;SACD,OAAO,CAAC,CAAC,CAAC,KAAmB,EAAE,GAAiB,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,CAA6D,CAAC;SAChJ,KAAK,EAAE,CAAC;IAEX,OAAO,CAAC,oBAAoB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;AAC1F,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAoB,YAAY,CAAC,kBAAkB,EAAE,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAE9G,eAAe,UAAU,CAAC;AAU1B;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAO,GAAsB,EAAE;IAC9D,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;QAAE,OAAO,UAAU,CAAC;IACpF,MAAM,QAAQ,GAAiB;QAC7B,MAAM,EAAE,gBAAgB,CAAC,OAAO,CAAC;QACjC,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,iBAAiB;QAC7D,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,iBAAiB;KAChE,CAAC;IACF,OAAO,YAAY,CAAC,kBAAkB,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAQ,GAAsB,kBAAkB,EAAE,OAAO,GAAsB,EAAE;IACtH,eAAe,CAAC,QAAQ,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC"}
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../src/module.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,UAAU,GAMX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAqB,MAAM,eAAe,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAA0B,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAYnD,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC;AACjF,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC;AACnG,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAClE,MAAM,KAAK,GAAG,CAAC;KACZ,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;KAC9D,QAAQ,EAAE;KACV,QAAQ,CAAC,yFAAyF,CAAC,CAAC;AACvG,gDAAgD;AAChD,MAAM,YAAY,GAAG,CAAC,WAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC3H,MAAM,SAAS,GAAG,CAAC,WAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACxG,MAAM,gBAAgB,GAAG,SAAS,CAAC,6GAA6G,CAAC,CAAC;AAClJ,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC,CAAC;AAEvJ,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,GAAG;IACH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC7H,OAAO;IACP,KAAK;IACL,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACtD,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IAC1G,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACvE,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gFAAgF,CAAC;IACrJ,SAAS,EAAE,YAAY,CAAC,8DAA8D,CAAC;IACvF,gBAAgB;IAChB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oFAAoF,CAAC;IACzJ,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;CAC3H,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC/D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAClE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC3D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;IACrF,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC1E,OAAO,EAAE,YAAY;IACrB,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IAC/F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;CAC9F,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,GAAG;IACH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IAC5G,OAAO;IACP,KAAK;IACL,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAChE,SAAS,EAAE,YAAY,CAAC,8DAA8D,CAAC;IACvF,gBAAgB;IAChB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2FAA2F,CAAC;CAC3I,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAC/D,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC3D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;IACrF,OAAO,EAAE,YAAY;IACrB,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,wGAAwG,CAAC;CACrI,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG;IACnB,GAAG;IACH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;IACtH,OAAO;IACP,KAAK;IACL,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACjE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IACrH,SAAS,EAAE,YAAY,CAAC,mEAAmE,CAAC;IAC5F,aAAa,EAAE,YAAY,CAAC,oEAAoE,CAAC;CAClG,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,GAAG,YAAY;IACf,YAAY,EAAE,SAAS,CAAC,6CAA6C,CAAC;CACvE,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC;AAElF,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,GAAG,YAAY;IACf,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;IAC9G,aAAa,EAAE,SAAS,CAAC,8CAA8C,CAAC;CACzE,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACtE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;IACjF,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACrE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;CAC1G,CAAC,CAAC;AAEH,gFAAgF;AAChF,aAAa;AACb,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,aAAa,GAAY,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;AAE3E,gEAAgE;AAChE,SAAS,cAAc,CAAC,QAAsB;IAC5C,MAAM,oBAAoB,GAAG,eAAe,EAAE;SAC3C,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;SACzB,KAAK,CAAC,UAAU,CAAmB,sBAAsB,CAAC,CAAC;SAC3D,MAAM,CAAC,UAAU,CAAoB,uBAAuB,CAAC,CAAC;SAC9D,IAAI,CAAC;QACJ,WAAW,EAAE,oEAAoE;QACjF,IAAI,EAAE,CAAC,KAAK,CAAC;QACb,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE;QAC1D,MAAM,EAAE,MAAM;QACd,0EAA0E;QAC1E,OAAO,EAAE,aAAa;KACvB,CAAC;SACD,OAAO,CAAC,KAAK,EAAE,KAAuB,EAAE,GAAG,EAA8B,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;SAC9G,KAAK,EAAE,CAAC;IAEX,MAAM,iBAAiB,GAAG,eAAe,EAAE;SACxC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SACtB,KAAK,CAAC,UAAU,CAAgB,mBAAmB,CAAC,CAAC;SACrD,MAAM,CAAC,UAAU,CAAiB,oBAAoB,CAAC,CAAC;SACxD,IAAI,CAAC;QACJ,WAAW,EAAE,gEAAgE;QAC7E,IAAI,EAAE,CAAC,KAAK,CAAC;QACb,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,gCAAgC;QAChC,OAAO,EAAE,aAAa;KACvB,CAAC;SACD,OAAO,CAAC,KAAK,EAAE,KAAoB,EAAE,GAAG,EAA2B,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;SACrG,KAAK,EAAE,CAAC;IAEX,MAAM,mBAAmB,GAAG,eAAe,EAAE;SAC1C,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;SACxB,KAAK,CAAC,UAAU,CAAkB,qBAAqB,CAAC,CAAC;SACzD,MAAM,CAAC,UAAU,CAAmB,sBAAsB,CAAC,CAAC;SAC5D,IAAI,CAAC;QACJ,WAAW,EAAE,wEAAwE;QACrF,IAAI,EAAE,CAAC,KAAK,CAAC;QACb,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,SAAS,EAAE,IAAI;QACf,wEAAwE;QACxE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;QAC3B,gCAAgC;QAChC,OAAO,EAAE,aAAa;KACvB,CAAC;QACF,wFAAwF;QACxF,oFAAoF;SACnF,OAAO,CAAC,CAAC,CAAC,KAAsB,EAAE,GAAiB,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAmE,CAAC;SAC5J,KAAK,EAAE,CAAC;IAEX,MAAM,gBAAgB,GAAG,eAAe,EAAE;SACvC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;SACrB,KAAK,CAAC,UAAU,CAAe,kBAAkB,CAAC,CAAC;SACnD,MAAM,CAAC,UAAU,CAAgB,mBAAmB,CAAC,CAAC;SACtD,IAAI,CAAC;QACJ,WAAW,EAAE,4DAA4D;QACzE,IAAI,EAAE,CAAC,KAAK,CAAC;QACb,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,SAAS,EAAE,IAAI;QACf,sDAAsD;QACtD,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;QAC3B,yEAAyE;QACzE,OAAO,EAAE,aAAa;KACvB,CAAC;SACD,OAAO,CAAC,CAAC,CAAC,KAAmB,EAAE,GAAiB,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,CAA6D,CAAC;SAChJ,KAAK,EAAE,CAAC;IAEX,OAAO,CAAC,oBAAoB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;AAC1F,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAoB,YAAY,CAAC,kBAAkB,EAAE,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAE9G,eAAe,UAAU,CAAC;AAU1B;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAO,GAAsB,EAAE;IAC9D,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;QAAE,OAAO,UAAU,CAAC;IACpF,OAAO,YAAY,CAAC,kBAAkB,EAAE,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,2HAA2H;AAC3H,MAAM,UAAU,YAAY,CAAC,OAAO,GAAsB,EAAE;IAC1D,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAC1F,OAAO;QACL,MAAM,EAAE,gBAAgB,CAAC,OAAO,CAAC;QACjC,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,iBAAiB;QAC7D,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,iBAAiB;KAChE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAQ,GAAsB,kBAAkB,EAAE,OAAO,GAAsB,EAAE;IACtH,eAAe,CAAC,QAAQ,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package",
   "name": "@procedures/http",
-  "version": "0.28.0",
+  "version": "0.28.1",
   "description": "HTTP as procedures: request, JSON, NDJSON and server-sent events, with a host allowlist that refuses private addresses, size limits and the deadline of the call.",
   "keywords": [
     "procedures",
@@ -69,7 +69,7 @@
     "procedures": "./dist/register.js"
   },
   "dependencies": {
-    "@procedures/client": "0.28.0",
+    "@procedures/client": "0.28.1",
     "zod": "^4.6.5"
   },
   "scripts": {

package/src/host-fetch.ts

@@ -0,0 +1,128 @@
+/**
+ * A `fetch` for GET requests that goes through the host policy (audit pass 2, O55).
+ *
+ * A procedure of another package that reads a URL of its caller uses this function in place of
+ * the global `fetch`: `weather.forecast`, and the modules of `@procedures/geo` and
+ * `@procedures/ics` that a host makes with it. The request has the same checks as `http.request`:
+ *
+ * - The host of the URL and of each redirect must pass the host policy. The default policy
+ *   refuses loopback, private, link-local and the other special addresses.
+ * - The connection uses only the addresses that the check allowed (DNS rebinding).
+ * - The body of the response has the size limit of the settings.
+ *
+ * A refusal is `FORBIDDEN` with the reason `host-not-allowed` (`isHostNotAllowed`). When the
+ * signal of the caller aborts, the function throws the reason of the signal, as `fetch` does.
+ *
+ * The option `warnOnRefusal` keeps the behavior before the host policy, for the default modules
+ * of 0.28: a refused host gets a deprecation notice and the global `fetch`. Version 0.29.0 removes it.
+ */
+
+import type { HttpModuleOptions } from "./module.js";
+import { httpSettings } from "./module.js";
+import { isHostNotAllowed } from "./policy.js";
+import { httpRequest } from "./procedures/http/request.js";
+
+/** The longest time of a request of `http.request`: the signal of the caller is the real limit. */
+const LONGEST_MS = 86_400_000;
+
+/** The options of one request. */
+export interface HostFetchInit {
+  /** The headers of the request. */
+  readonly headers?: Readonly<Record<string, string>> | undefined;
+  /** The signal that stops the request. */
+  readonly signal?: AbortSignal | undefined;
+}
+
+/** The response of a request: the parts of a `Response` of `fetch` that the procedures use. */
+export interface HostFetchResponse {
+  readonly ok: boolean;
+  readonly status: number;
+  /** The URL of the response: the last URL after the redirects. */
+  readonly url: string;
+  text(): Promise<string>;
+  json(): Promise<unknown>;
+}
+
+/** A `fetch` for GET requests through the host policy. */
+export type HostFetch = (url: string, init?: HostFetchInit) => Promise<HostFetchResponse>;
+
+/** A deprecation notice: the code and the text of a `DeprecationWarning` of Node. */
+export interface DeprecationNotice {
+  /** The code of the warning, for example `PROCEDURES_WEATHER_PRIVATE_HOST`. The process emits each code one time. */
+  readonly code: string;
+  /** The text of the warning. It names the change that removes the notice. */
+  readonly message: string;
+}
+
+/** The options of `createHostFetch()`: the options of `createHttpModule()`, and the notice of a refused host. */
+export interface HostFetchOptions extends HttpModuleOptions {
+  /**
+   * The notice of a refused host. With this option, a refused host does not throw. The function
+   * emits the notice one time in each process. Then it sends the request with the global `fetch`,
+   * as before the host policy. Without this option, a refused host throws `FORBIDDEN`.
+   *
+   * @deprecated The default modules of `weather`, `geo` and `ics` use it in 0.28 only. Version
+   * 0.29.0 removes it. Then a refused host always throws.
+   */
+  readonly warnOnRefusal?: DeprecationNotice | undefined;
+}
+
+/** The codes of the notices that this process emitted. */
+const emitted = new Set<string>();
+
+/** This function emits a deprecation notice one time in each process, with its code. */
+function emitOnce(notice: DeprecationNotice): void {
+  if (emitted.has(notice.code)) return;
+  emitted.add(notice.code);
+  if (typeof process !== "undefined" && typeof process.emitWarning === "function") {
+    process.emitWarning(notice.message, { type: "DeprecationWarning", code: notice.code });
+  } else {
+    console.warn(`[${notice.code}] ${notice.message}`);
+  }
+}
+
+/** This function gives the parts of a `Response` of the global `fetch` that the procedures use. */
+async function globalFetch(url: string, init: HostFetchInit): Promise<HostFetchResponse> {
+  const response = await fetch(url, { ...(init.headers !== undefined ? { headers: { ...init.headers } } : {}), ...(init.signal !== undefined ? { signal: init.signal } : {}) });
+  return response;
+}
+
+/**
+ * This function gives a `fetch` for GET requests through the host policy of the options. The
+ * options are the options of `createHttpModule()`. Without options, the policy is the default
+ * policy: each public host, and no other host. A bad entry of `allow` throws here.
+ *
+ * ```ts
+ * const forecast = createWeatherModule({ fetch: createHostFetch({ allow: ["localhost:8080"] }) });
+ * ```
+ */
+export function createHostFetch(options: HostFetchOptions = {}): HostFetch {
+  const { warnOnRefusal, ...policyOptions } = options;
+  const settings = httpSettings(policyOptions);
+  return async (url, init = {}) => {
+    let output;
+    try {
+      output = await httpRequest(
+        { url, method: "GET", ...(init.headers !== undefined ? { headers: { ...init.headers } } : {}), responseType: "text", timeoutMs: LONGEST_MS },
+        { signal: init.signal },
+        settings,
+      );
+    } catch (error) {
+      if (init.signal?.aborted) throw init.signal.reason;
+      // Before the host policy, the request went to each host (O55). The notice names the change.
+      if (warnOnRefusal !== undefined && isHostNotAllowed(error)) {
+        emitOnce(warnOnRefusal);
+        return globalFetch(url, init);
+      }
+      throw error;
+    }
+    const text = typeof output.body === "string" ? output.body : "";
+    return {
+      ok: output.ok,
+      status: output.status,
+      url: output.url,
+      text: async () => text,
+      json: async () => JSON.parse(text) as unknown,
+    };
+  };
+}

package/src/index.ts

@@ -4,6 +4,8 @@ export * from "./types.js";
 export { httpRequest, httpJson, httpNdjson, httpSse } from "./procedures/http/index.js";
 // The host policy (roadmap R38)
 export { HOST_NOT_ALLOWED, DEFAULT_HOST_POLICY, createHostPolicy, checkHost, isHostNotAllowed, systemResolver } from "./policy.js";
+// A fetch for GET requests through the host policy, for the procedures of other packages (O55)
+export { createHostFetch, type DeprecationNotice, type HostFetch, type HostFetchInit, type HostFetchOptions, type HostFetchResponse } from "./host-fetch.js";
 export type { AllowedTarget, HostPolicy, HostPolicyOptions, HostResolver, ResolvedAddress } from "./policy.js";
 export { isPublicAddress, parseAddress, specialClass } from "./address.js";
 export { HttpError, type HttpErrorCode } from "./errors.js";

package/src/module.ts

@@ -243,12 +243,17 @@ export interface HttpModuleOptions extends HostPolicyOptions {
  */
 export function createHttpModule(options: HttpModuleOptions = {}): ProcedureModule {
   if (Object.values(options).every((value) => value === undefined)) return httpModule;
-  const settings: HttpSettings = {
+  return defineModule("@procedures/http", httpProcedures(httpSettings(options)));
+}
+
+/** This function gives the settings of the options: the host policy and the size limits. A bad entry of `allow` throws. */
+export function httpSettings(options: HttpModuleOptions = {}): HttpSettings {
+  if (Object.values(options).every((value) => value === undefined)) return DEFAULT_SETTINGS;
+  return {
     policy: createHostPolicy(options),
     maxRequestBytes: options.maxRequestBytes ?? DEFAULT_MAX_BYTES,
     maxResponseBytes: options.maxResponseBytes ?? DEFAULT_MAX_BYTES,
   };
-  return defineModule("@procedures/http", httpProcedures(settings));
 }
 
 /**