agentfootprint 9.114.2 → 9.115.0

package/dist/types/hosting/doorGuard.d.ts

@@ -0,0 +1,281 @@
+/**
+ * hosting/doorGuard — what a request has to be before any handler sees it.
+ *
+ *   const guard = doorGuard({ name: 'auth', allowedHosts: ['neo.corp.example'] });
+ *   const refusal = guard.check(req);          // an IncomingMessage works as-is
+ *   if (refusal) return answer(refusal.status, refusal.message, refusal.code);
+ *
+ * ── The threat, in one paragraph ────────────────────────────────────────────
+ * A door with no verifier, reachable only inside a company network, looks safe
+ * because the network is the fence. It is not: every person inside the fence
+ * runs a browser, and every web page they open can make that browser send
+ * requests to the door FROM INSIDE. Three ways, all live before this file:
+ *
+ *   1. **A forged request (CSRF).** A page on any site can make the browser
+ *      POST a JSON-shaped body as `text/plain` (or as a form, or with no
+ *      content type at all) without asking the server first — a CORS "simple"
+ *      request. The door parsed it as JSON and ran a turn: model budget spent,
+ *      tools called, a conversation stored. The attacker cannot read the reply;
+ *      they do not need to.
+ *   2. **DNS rebinding.** A page on an attacker's domain re-points its OWN name
+ *      at the door's address. The browser now treats the attacker's page as
+ *      same-origin with the door, so it may send anything and READ the answer.
+ *   3. **A cross-site WebSocket.** A WebSocket is not bound by the same-origin
+ *      policy at all; any page can open one, and only the server can say no.
+ *
+ * ── The rules, one owner ────────────────────────────────────────────────────
+ * `check()` judges a request that CHANGES something — every method but GET,
+ * HEAD and OPTIONS, plus every WebSocket upgrade (a GET that opens a channel):
+ *
+ *   - **Host** (with `allowedHosts` set, or defaulted to the loopback names on
+ *     a loopback bind; judged on EVERY method): a name this door was not
+ *     configured for is refused, 421. First, because under rebinding the other
+ *     two checks pass — the Host header, which no page can set, is the one
+ *     fact that still names the attacker. `X-Forwarded-Host` is never read for
+ *     it: a rebinding page is same-origin and may set that header itself.
+ *   - **Origin**: a browser request from a page this door does not allow is
+ *     refused, 403 — including `Origin: null`. A request WITHOUT an Origin is a
+ *     script or a server (browsers always send one on these requests) and is
+ *     not judged by it; that is what keeps every non-browser client working.
+ *   - **Fetch metadata**, as defence in depth: a request the browser itself
+ *     marked `Sec-Fetch-Site: cross-site` is refused (403) unless its Origin is
+ *     one `allowedOrigins` LISTS — so a proxy that strips `Origin` but forwards
+ *     `Sec-Fetch-*` still cannot let a forged request through. For a WebSocket
+ *     handshake these two are the whole defence: the browser API cannot set a
+ *     header, so there is no preflight to force.
+ *   - **Content type** (not for an upgrade — it has no body): anything but
+ *     `application/json` is refused, 415. A browser must ask first (a
+ *     preflight, which this host never approves) before it sends that type
+ *     across origins, so requiring it makes a forged request one the browser
+ *     refuses to send. It is the same property a required custom header buys
+ *     (RFC 10017 §6.1.3.3.2), without breaking every JSON client that already
+ *     sends the header and no other.
+ *
+ * `checkSessionId()` is the fourth bound, and it is not about browsers: a
+ * session id is caller data that rides every stored row, log line and trace
+ * span of a conversation, so a door refuses one over
+ * {@link MAX_SESSION_ID_LENGTH} or carrying a control character.
+ *
+ * Where it runs: `httpHost` calls `check()` on every request to its request
+ * door and on every conversation upgrade, and `checkSessionId()` on the id each
+ * dialect reads. An application's OWN routes beside the door (a sign-in route
+ * on `onUnhandled`, say) are the application's, and arrive untouched — so this
+ * is exported for them to call, and the rule keeps one spelling.
+ *
+ * Pure: no socket, no clock, no I/O. The design note is
+ * `docs/design/2026-09-door-hardening.md`.
+ */
+import { HostNotAllowedError, InvalidSessionIdError, OriginNotAllowedError, UnsupportedMediaTypeError } from './errors.js';
+/**
+ * The longest session id any door carries, in UTF-16 code units — JavaScript's
+ * own `string.length`.
+ *
+ * 400 is the width the reference SQL session store gives its `session_id`
+ * column (`NVARCHAR(400)`, which counts the same units), so no id this door
+ * admits is one a store refuses AFTER the model was paid for. The id formats in
+ * use fit with room to spare — a UUID is 36 — and there is deliberately no
+ * knob: a correlation handle wider than this is not one anybody needs.
+ */
+export declare const MAX_SESSION_ID_LENGTH = 400;
+/**
+ * The cross-site rules a host enforces at its doors. Every field is optional,
+ * and the defaults are the safe ones — see each field for what it costs.
+ */
+export interface CrossSiteOptions {
+    /**
+     * The page origins allowed to drive this door from a browser —
+     * `['https://app.corp.example']`: scheme, host and port, nothing after.
+     *
+     * **Unset (the default):** a browser request is served only from a page on
+     * this door's own name — its Origin must match the request's `Host`, or an
+     * `X-Forwarded-Host` a proxy added. That is every app served from the same
+     * host as its door, unchanged; an app on ANOTHER origin must be listed.
+     *
+     * **Know what the default does not do:** it does not stop DNS rebinding.
+     * There, the attacker's page and the request's Host both carry the
+     * attacker's name, so they match. {@link CrossSiteOptions.allowedHosts} is
+     * the defence for that.
+     *
+     * A listed origin may be on another SITE by design, so a request from one
+     * passes even when the browser marks it `Sec-Fetch-Site: cross-site`. Any
+     * other request marked that way is refused — the catch for a proxy that
+     * strips `Origin`. A reverse proxy must forward `Origin` and `Sec-Fetch-*`
+     * unchanged.
+     *
+     * `'any'` turns both browser checks off — for a door no browser page can
+     * reach with a user's ambient authority. `'null'` and `'*'` are refused at
+     * construction: the first is every sandboxed frame on every site, the second
+     * would read as a pattern it is not.
+     */
+    readonly allowedOrigins?: readonly string[] | 'any';
+    /**
+     * The names this door answers for — `['neo.corp.example']`. A request whose
+     * `Host` names anything else is refused with 421, which is what stops DNS
+     * rebinding. Matched case-insensitively; an entry without a port matches any
+     * port, an entry with one matches only it; IPv6 in brackets (`'[::1]'`).
+     *
+     * **Unset on a LOOPBACK bind** (`127.0.0.1`, `::1`, `localhost` — a host
+     * binding its own socket there): `localhost`, `127.0.0.1` and `[::1]`, any
+     * port, silently. Such a socket has no other name, so this refuses nobody
+     * and closes rebinding on a developer's own machine.
+     *
+     * **Unset on any other bind:** every Host is served, and the host prints
+     * ONE warning at boot naming this option. A deliberate staged default:
+     * refusing at boot would stop existing deployments starting.
+     *
+     * `'any'` serves every Host on purpose and prints nothing — for a door whose
+     * port no browser can reach (a platform's front door in front of it). An
+     * empty list is refused at construction: it could never serve anything.
+     *
+     * Health probes are not judged: a load balancer or kubelet sends the
+     * target's ADDRESS as Host, and a probe that failed on it would restart a
+     * healthy server.
+     */
+    readonly allowedHosts?: readonly string[] | 'any';
+    /**
+     * Refuse a request that changes something unless it says
+     * `content-type: application/json` (415). Default `true`.
+     *
+     * `false` is the named escape hatch for a NON-BROWSER integration that
+     * cannot send the header. It removes the half of the defence that does not
+     * depend on Origin — so set it only on a door no browser can reach, and
+     * keep `allowedOrigins` and `allowedHosts` doing their part.
+     */
+    readonly requireJsonContentType?: boolean;
+}
+/** {@link doorGuard}'s options: the rules, plus who is refusing. */
+export interface DoorGuardOptions extends CrossSiteOptions {
+    /** Who refuses — every refusal names it, as every host refusal does. */
+    readonly name: string;
+    /**
+     * The address this door's socket is bound to, when the door bound it
+     * itself. A loopback address with `allowedHosts` unset makes the loopback
+     * names the list (see {@link loopbackAllowedHosts}), and a refusal then
+     * says the list was defaulted and how to set one. Absent: nothing is
+     * inferred.
+     */
+    readonly bindHost?: string;
+}
+/**
+ * The parts of a request the guard reads. A `node:http` `IncomingMessage` is
+ * one as it stands; so is a plain `{ method, headers }`. Header names are
+ * matched case-insensitively.
+ */
+export interface DoorRequest {
+    /** The HTTP method. Absent is judged as a request that changes something. */
+    readonly method?: string;
+    readonly headers: Readonly<Record<string, string | readonly string[] | undefined>>;
+}
+/** Why a request may not enter — one of three, each carrying its own `status`. */
+export type CrossSiteRefusal = UnsupportedMediaTypeError | OriginNotAllowedError | HostNotAllowedError;
+/** A guard, built once, asked per request. */
+export interface DoorGuard {
+    /** The refusal this request earns at the door, or `undefined` to let it in. */
+    check(request: DoorRequest): CrossSiteRefusal | undefined;
+    /**
+     * `true` when `allowedHosts` was left unset — the door answers any Host and
+     * the host says so once at boot. `false` for a list or for `'any'`.
+     */
+    readonly allowedHostsUnset: boolean;
+    /**
+     * `true` when both browser rules are off (`allowedOrigins: 'any'` and
+     * `requireJsonContentType: false`) — the host says so once at boot.
+     */
+    readonly browserRulesOff: boolean;
+}
+/**
+ * Build a guard. Configuration a door could only ever misread is refused HERE,
+ * at construction, by name — never discovered as a mystery 403 in production.
+ */
+export declare function doorGuard(options: DoorGuardOptions): DoorGuard;
+/**
+ * The session-id bound — `undefined` for an id a door may carry (or none).
+ *
+ * A session id is one to {@link MAX_SESSION_ID_LENGTH} characters of VISIBLE
+ * ASCII (0x21–0x7E) — the rule MCP gives its own session ids. Why ASCII and
+ * not "Unicode minus the dangerous parts":
+ *
+ *  - **One id, one byte string, from every field.** Node reads a header value
+ *    as latin1 and a JSON body as UTF-8, so `café` in `x-session-id` and `café`
+ *    in the body were two different stored conversations. With ASCII only,
+ *    the two readings cannot differ.
+ *  - **Nothing a log, a span or a store can reinterpret.** Controls, line and
+ *    paragraph separators (U+2028/9), bidi overrides (U+202E), zero-width
+ *    characters and lone surrogates (which any UTF-8 store rewrites to U+FFFD,
+ *    merging two ids) are all outside it — no list of exceptions to keep up.
+ *  - Every id format in use already fits: UUIDs, platform runtime ids, `conv_…`.
+ *
+ * The empty string is refused too: every caller that sent `""` shared ONE
+ * conversation. The length is judged first, so an over-long id costs one
+ * comparison — after a body read that `maxBodyBytes` bounds.
+ */
+export declare function checkSessionId(sessionId: string | undefined, hostName: string): InvalidSessionIdError | undefined;
+/**
+ * The names a LOOPBACK-bound door answers to when `allowedHosts` was not set —
+ * `localhost`, `127.0.0.1`, `[::1]` (and the bound address itself when it is
+ * another `127.x`), any port: the socket already fixes the port, so a name is
+ * all a rebinding page can vary. `undefined` for any other bind.
+ *
+ * It closes DNS rebinding on the classic victim, a developer's own machine,
+ * and the MCP SDK's `createMcpExpressApp` does the same for a localhost bind.
+ * What it refuses that is legitimate, stated rather than discovered:
+ *
+ *  - **A reverse proxy on the same machine that forwards the PUBLIC name** in
+ *    `Host` (nginx `proxy_set_header Host $host`) — the common case, and the
+ *    recommended "bind 127.0.0.1 behind nginx" setup. The proxy's requests
+ *    arrive on loopback carrying `neo.corp.example`, which the socket cannot
+ *    tell from a rebinding page. List that name in `allowedHosts`; the 421
+ *    says so, naming this default (`HostNotAllowedError` · `rule`).
+ *  - A hosts-file alias for a loopback address — the same fix.
+ *
+ * Both fail loudly and in the safe direction, and the fix is the option such
+ * a deployment should set anyway.
+ *
+ * @internal — `doorGuard` asks it with the address a door bound
+ * (`DoorGuardOptions.bindHost`).
+ */
+export declare function loopbackAllowedHosts(bindHost: string | undefined): readonly string[] | undefined;
+/**
+ * `localhost`, any `127.x` literal, and `::1` or `::ffff:127.x` in ANY IPv6
+ * spelling (bracketed or not, `0:0:0:0:0:0:0:1`, leading zeros) — IPv6 is
+ * canonicalised by the WHATWG URL parser before it is compared.
+ */
+export declare function isLoopbackBind(bindHost: string | undefined): boolean;
+/**
+ * The cross-site rules for a door a PLATFORM fronts — the hosted-runtime
+ * adapters' defaults, with whatever the deployment set kept as given.
+ *
+ * Exempt by default, and why, once for every such adapter: the platform's own
+ * front door is the only way to the container's port, and the credential it
+ * demands is one no web page holds (a signed request, a bearer the caller
+ * attaches) — so a forged browser request cannot authenticate and no browser
+ * can reach the port to rebind it. The browser rules would protect nothing
+ * there, and which headers the platform forwards (its content type, Origin,
+ * Host) is not a fact this library has verified; enforcing them could refuse
+ * the platform's own forwarding. Any rule the deployment sets is enforced
+ * exactly as on every other door. The session-id bound is NOT exempt: it is
+ * not about browsers.
+ *
+ * @internal — the adapters' shared default, not a public setting.
+ */
+export declare function platformFrontedDoor(options: CrossSiteOptions, bindHost: string | undefined): CrossSiteOptions;
+/**
+ * Said once per host name per process, at boot, when a door serves with the
+ * browser rules OFF (`allowedOrigins: 'any'` and `requireJsonContentType:
+ * false` — the hosted-runtime adapters' default on a non-loopback bind). Those
+ * rules are off because a platform's front door is supposed to be the only way
+ * in; a self-hoster on `0.0.0.0` needs to hear that it is not.
+ *
+ * @internal — the words have one owner; `httpHost` decides when.
+ */
+export declare function warnBrowserRulesOff(hostName: string): void;
+/**
+ * The staged default, said out loud: a host serving with `allowedHosts` unset
+ * prints this ONCE per host name per process, at boot. A name is how every
+ * refusal identifies a host, so two hosts sharing one are one door to anyone
+ * reading the log — and once is what keeps a warning from becoming noise.
+ *
+ * @internal — the words have one owner; `httpHost` decides when.
+ */
+export declare function warnAllowedHostsUnset(hostName: string): void;
+//# sourceMappingURL=doorGuard.d.ts.map

package/dist/types/hosting/doorGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doorGuard.d.ts","sourceRoot":"","sources":["../../../src/hosting/doorGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;AAEH,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,yBAAyB,EAE1B,MAAM,aAAa,CAAC;AAErB;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAEzC;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,KAAK,CAAC;IACpD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,KAAK,CAAC;IAClD;;;;;;;;OAQG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAC3C;AAED,oEAAoE;AACpE,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB;IACxD,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;CACpF;AAED,kFAAkF;AAClF,MAAM,MAAM,gBAAgB,GACxB,yBAAyB,GACzB,qBAAqB,GACrB,mBAAmB,CAAC;AAExB,8CAA8C;AAC9C,MAAM,WAAW,SAAS;IACxB,+EAA+E;IAC/E,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,gBAAgB,GAAG,SAAS,CAAC;IAC1D;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;CACnC;AAKD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,CA6B9D;AA2CD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,QAAQ,EAAE,MAAM,GACf,qBAAqB,GAAG,SAAS,CAiBnC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAQhG;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAWpE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,gBAAgB,CAkBlB;AAKD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAY1D;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAc5D"}

package/dist/types/hosting/errors.d.ts

@@ -226,6 +226,28 @@ export declare class ArtifactNotCarriedError extends Error {
     readonly ref: string;
     constructor(ref: string, hostName?: string);
 }
+/**
+ * Refused when host code uses a turn's artifact hand-over
+ * (`HostReply.turnArtifacts`) after that turn ended.
+ *
+ * The hand-over is live only while the hook runs: the composer awaits the
+ * hook while the session's lane is held, waits for every operation the hook
+ * started, then revokes the binding before the reply ends. A verb called
+ * after that is refused by name rather than performed. The footprintjs
+ * `ScopeFacade · assertLive` law, one layer up: a handle held past its stage
+ * is refused, because a write made outside its turn lands on whatever run the
+ * instance is serving by then — in the shared shape, another person's — and
+ * makes the record lie.
+ *
+ * The fix is always the same: file INSIDE the hook (`await
+ * turn.artifacts.put(...)`), and carry the ticket onward from there.
+ */
+export declare class TurnArtifactsExpiredError extends Error {
+    readonly code: "ERR_TURN_ARTIFACTS_EXPIRED";
+    /** Which verb was called after the turn ended. */
+    readonly op: 'put' | 'head' | 'get' | 'delete' | 'list';
+    constructor(op: 'put' | 'head' | 'get' | 'delete' | 'list');
+}
 /**
  * Thrown when a store hands back something that is **present but unreadable**
  * where a `CheckpointEnvelope` should be.
@@ -523,5 +545,96 @@ export declare class WireRequestRefusal extends Error {
     /** HTTP status for this refusal. Default 400 — the request is what is wrong. */
     status?: number);
 }
+/**
+ * A request that changes something did not say `content-type: application/json`.
+ *
+ * The door is a JSON API, and that is only half the reason. The other half is
+ * the web: a page on ANY site can make a browser send `text/plain`,
+ * `application/x-www-form-urlencoded` or `multipart/form-data` — or no content
+ * type at all — without asking the server first (a CORS "simple" request). A
+ * browser must ask first (a preflight, which this host never approves) before
+ * it sends `application/json` across origins. Requiring it is what turns a
+ * forged request into one the browser refuses to send.
+ */
+export declare class UnsupportedMediaTypeError extends Error {
+    readonly code: "ERR_UNSUPPORTED_MEDIA_TYPE";
+    /** 415 Unsupported Media Type. */
+    readonly status: 415;
+    constructor(hostName: string);
+}
+/**
+ * Which browser fact refused an {@link OriginNotAllowedError}.
+ *
+ *  - `'same-host'` — `allowedOrigins` is unset and the page's Origin is not
+ *    this door's own name.
+ *  - `'listed'` — the page's Origin is not in `allowedOrigins`.
+ *  - `'fetch-metadata'` — the browser marked the request `Sec-Fetch-Site:
+ *    cross-site` and its Origin is not one `allowedOrigins` lists. This is the
+ *    one that still fires when a proxy strips `Origin` but forwards the Fetch
+ *    metadata beside it.
+ */
+export type OriginRefusalRule = 'same-host' | 'listed' | 'fetch-metadata';
+/**
+ * A browser request came from a page whose origin this door does not allow —
+ * or from an opaque origin (`Origin: null`), which any sandboxed frame on any
+ * site can produce and which is therefore never allowed — or the browser said
+ * outright that it was sent cross-site.
+ *
+ * Only BROWSERS send `Origin` (on every request that changes something, and on
+ * every WebSocket handshake), so a request without one is a script or a
+ * server — unless the same request carries the browser's own `Sec-Fetch-Site:
+ * cross-site`, which is how a stripped `Origin` still gets caught.
+ */
+export declare class OriginNotAllowedError extends Error {
+    readonly code: "ERR_ORIGIN_NOT_ALLOWED";
+    /** 403 Forbidden. */
+    readonly status: 403;
+    /** Which browser fact refused it. */
+    readonly rule: OriginRefusalRule;
+    constructor(hostName: string, rule: OriginRefusalRule);
+}
+/**
+ * A request named a Host this door was not configured to answer for.
+ *
+ * The DNS-rebinding defence: a page on an attacker's domain re-points its OWN
+ * name at this server's address, and from then on the browser treats it as
+ * same-origin with the door — so every other check passes, and the Host header
+ * (which no page can set) is the one fact that still names the attacker.
+ * 421 is the status HTTP defines for exactly this (RFC 9110 §15.5.20: a target
+ * "that does not match an origin for which the server has been configured").
+ */
+export declare class HostNotAllowedError extends Error {
+    readonly code: "ERR_HOST_NOT_ALLOWED";
+    /** 421 Misdirected Request. */
+    readonly status: 421;
+    /**
+     * Where the list came from: `'listed'` — the deployment's own
+     * `allowedHosts`; `'loopback-default'` — nobody set one, and the door is
+     * bound to a loopback address, so it answers the loopback names only.
+     */
+    readonly rule: 'listed' | 'loopback-default';
+    constructor(hostName: string, rule?: 'listed' | 'loopback-default');
+}
+/**
+ * A session id the door will not carry: empty, longer than the ceiling, or
+ * holding anything but visible ASCII (0x21–0x7E).
+ *
+ * A session id is caller data that travels everywhere the conversation does —
+ * the store's key, every log line, every exported trace span of every turn.
+ * Unbounded, one caller with no credentials could make every span of a turn
+ * carry megabytes; with a control, a line separator or a bidi override, it
+ * could forge or disguise a line in any log that prints it; with non-ASCII,
+ * the same id read from a header (latin1) and from a body (UTF-8) would be two
+ * different conversations. So it is bounded at the door, before any of that
+ * happens. The refusal says how long the id was, never what it said.
+ */
+export declare class InvalidSessionIdError extends Error {
+    readonly code: "ERR_INVALID_SESSION_ID";
+    /** 400 Bad Request — the caller can send a valid id and continue. */
+    readonly status: 400;
+    /** Which rule the id broke. Never the id. */
+    readonly reason: 'empty' | 'too-long' | 'invalid-character';
+    constructor(reason: 'empty' | 'too-long' | 'invalid-character', hostName: string, length: number, limit: number);
+}
 export declare function requireCapability(host: AgentHost | ConversationHost, capability: HostCapability): void;
 //# sourceMappingURL=errors.d.ts.map

package/dist/types/hosting/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/hosting/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE1F;;;;;GAKG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,oBAA8B;IAC3C,6BAA6B;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,QAAQ,EAAE,MAAM;CAS7B;AAED;;;;;;;;GAQG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,uBAAiC;IAC9C,gDAAgD;IAChD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,mEAAmE;IACnE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;gBAElB,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM;CAapD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,0BAAoC;IACjD,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;gBAEb,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,UAAQ;CAsBlE;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,0BAAoC;IACjD,mCAAmC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;gBAEjB,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU;CAgBnD;AAED;;;;;;;;GAQG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,uBAAiC;IAC9C,iDAAiD;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,SAAS,EAAE,MAAM;CAW9B;AAED;;;;;;;;;GASG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,4BAAsC;IACnD,qCAAqC;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;gBAEhB,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM;CAajD;AAED;;;;;;;;;GASG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,wBAAkC;IAC/C,oCAAoC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,gDAAgD;IAChD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,uCAAuC;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBAEnB,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM;CAanE;AAED;;;;;;;;;;GAUG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,wBAAkC;gBAEnC,MAAM,EAAE,MAAM;CAI3B;AAED;;;;;;;;;;GAUG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,QAAQ,CAAC,IAAI,kCAA4C;gBAE7C,EAAE,EAAE,MAAM,GAAG,KAAK;CAU/B;AAED;;;;;;;;GAQG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,0BAAoC;gBAErC,EAAE,EAAE,MAAM,GAAG,KAAK;CAU/B;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,2BAAqC;IAClD,oCAAoC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBAET,GAAG,EAAE,MAAM;CAUxB;AAED;;;;;;;;;;GAUG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,6BAAuC;IACpD,wDAAwD;IACxD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBAET,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM;CAa3C;AAWD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,uBAAwB,SAAQ,SAAS;IACpD,QAAQ,CAAC,IAAI,4BAAsC;IACnD,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBAEnB,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM;IAsB/C;;;;;;;OAOG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,uBAAuB;CAMxD;AAID;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,MAAM,oBAAoB,GAC5B,UAAU,GACV,SAAS,GACT,eAAe,GACf,gBAAgB,GAChB,cAAc,GACd,cAAc,GACd,sBAAsB,CAAC;AAE3B;;;;;;;;;GASG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,8BAAwC;IACrD,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC;mEAC+D;IAC/D,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;gBAElB,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,OAAO;CAMhE;AAmDD;;;;;;;;GAQG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,sCAAgD;IAC7D,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;CAU9C;AAID;;;;;;;GAOG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,0BAAoC;IACjD,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBAEb,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;CAK5C;AAID;;;;;;;GAOG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,IAAI,kCAA4C;IACzD,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;gBAER,EAAE,EAAE,MAAM;CAWvB;AAED;;;;;;;;;GASG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,QAAQ,CAAC,IAAI,kCAA4C;IACzD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;gBAER,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAWxC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,QAAQ,CAAC,IAAI,sCAAgD;IAC7D,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBAEb,OAAO,EAAE,MAAM;CAe5B;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,0BAAoC;IACjD,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,SAAS,EAAE,MAAM;CAU9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,QAAQ,CAAC,IAAI,mCAA6C;IAC1D,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,SAAS,EAAE,MAAM;CAgB9B;AAED;;;;GAIG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,6BAAuC;IACpD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;gBAER,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM;CAa1C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH;;;;;;;;;;GAUG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAGjC,QAAQ,CAAC,UAAU,EAAE,MAAM;IAFvC,QAAQ,CAAC,IAAI,0BAAoC;gBAE5B,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAO1D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,IAAI,EAAE,MAAM;IAErB,gFAAgF;IAChF,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAHd,IAAI,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM;IACd,gFAAgF;IACvE,MAAM,GAAE,MAAY;CAKhC;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,SAAS,GAAG,gBAAgB,EAClC,UAAU,EAAE,cAAc,GACzB,IAAI,CASN"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/hosting/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE1F;;;;;GAKG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,oBAA8B;IAC3C,6BAA6B;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,QAAQ,EAAE,MAAM;CAS7B;AAED;;;;;;;;GAQG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,uBAAiC;IAC9C,gDAAgD;IAChD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,mEAAmE;IACnE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;gBAElB,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM;CAapD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,0BAAoC;IACjD,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;gBAEb,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,UAAQ;CAsBlE;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,0BAAoC;IACjD,mCAAmC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;gBAEjB,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU;CAgBnD;AAED;;;;;;;;GAQG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,uBAAiC;IAC9C,iDAAiD;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,SAAS,EAAE,MAAM;CAW9B;AAED;;;;;;;;;GASG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,4BAAsC;IACnD,qCAAqC;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;gBAEhB,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM;CAajD;AAED;;;;;;;;;GASG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,wBAAkC;IAC/C,oCAAoC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,gDAAgD;IAChD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,uCAAuC;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBAEnB,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM;CAanE;AAED;;;;;;;;;;GAUG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,wBAAkC;gBAEnC,MAAM,EAAE,MAAM;CAI3B;AAED;;;;;;;;;;GAUG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,QAAQ,CAAC,IAAI,kCAA4C;gBAE7C,EAAE,EAAE,MAAM,GAAG,KAAK;CAU/B;AAED;;;;;;;;GAQG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,0BAAoC;gBAErC,EAAE,EAAE,MAAM,GAAG,KAAK;CAU/B;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,2BAAqC;IAClD,oCAAoC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBAET,GAAG,EAAE,MAAM;CAUxB;AAED;;;;;;;;;;GAUG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,6BAAuC;IACpD,wDAAwD;IACxD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBAET,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM;CAa3C;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,IAAI,+BAAyC;IACtD,kDAAkD;IAClD,QAAQ,CAAC,EAAE,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;gBAE5C,EAAE,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM;CAY3D;AAWD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,uBAAwB,SAAQ,SAAS;IACpD,QAAQ,CAAC,IAAI,4BAAsC;IACnD,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBAEnB,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM;IAsB/C;;;;;;;OAOG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,uBAAuB;CAMxD;AAID;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,MAAM,oBAAoB,GAC5B,UAAU,GACV,SAAS,GACT,eAAe,GACf,gBAAgB,GAChB,cAAc,GACd,cAAc,GACd,sBAAsB,CAAC;AAE3B;;;;;;;;;GASG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,8BAAwC;IACrD,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC;mEAC+D;IAC/D,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;gBAElB,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,OAAO;CAMhE;AAmDD;;;;;;;;GAQG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,sCAAgD;IAC7D,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;CAU9C;AAID;;;;;;;GAOG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,0BAAoC;IACjD,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBAEb,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;CAK5C;AAID;;;;;;;GAOG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,IAAI,kCAA4C;IACzD,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;gBAER,EAAE,EAAE,MAAM;CAWvB;AAED;;;;;;;;;GASG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,QAAQ,CAAC,IAAI,kCAA4C;IACzD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;gBAER,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAWxC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,QAAQ,CAAC,IAAI,sCAAgD;IAC7D,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBAEb,OAAO,EAAE,MAAM;CAe5B;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,0BAAoC;IACjD,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,SAAS,EAAE,MAAM;CAU9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,QAAQ,CAAC,IAAI,mCAA6C;IAC1D,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,SAAS,EAAE,MAAM;CAgB9B;AAED;;;;GAIG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,6BAAuC;IACpD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;gBAER,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM;CAa1C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH;;;;;;;;;;GAUG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAGjC,QAAQ,CAAC,UAAU,EAAE,MAAM;IAFvC,QAAQ,CAAC,IAAI,0BAAoC;gBAE5B,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAO1D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,IAAI,EAAE,MAAM;IAErB,gFAAgF;IAChF,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAHd,IAAI,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM;IACd,gFAAgF;IACvE,MAAM,GAAE,MAAY;CAKhC;AAiBD;;;;;;;;;;GAUG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,IAAI,+BAAyC;IACtD,kCAAkC;IAClC,QAAQ,CAAC,MAAM,MAAgB;gBAEnB,QAAQ,EAAE,MAAM;CAU7B;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,QAAQ,GAAG,gBAAgB,CAAC;AAE1E;;;;;;;;;;GAUG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,2BAAqC;IAClD,qBAAqB;IACrB,QAAQ,CAAC,MAAM,MAAgB;IAC/B,qCAAqC;IACrC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;gBAErB,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB;CAmBtD;AAED;;;;;;;;;GASG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,yBAAmC;IAChD,+BAA+B;IAC/B,QAAQ,CAAC,MAAM,MAAgB;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,kBAAkB,CAAC;gBAEjC,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,QAAQ,GAAG,kBAA6B;CAiB7E;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,2BAAqC;IAClD,qEAAqE;IACrE,QAAQ,CAAC,MAAM,MAAgB;IAC/B,6CAA6C;IAC7C,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,mBAAmB,CAAC;gBAG1D,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,mBAAmB,EAClD,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM;CAoBhB;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,SAAS,GAAG,gBAAgB,EAClC,UAAU,EAAE,cAAc,GACzB,IAAI,CASN"}

package/dist/types/hosting/httpHost.d.ts

@@ -63,12 +63,28 @@
  * whichever closes last; on a caller-owned one each door attaches and detaches
  * its own listener and neither touches the socket.
  *
+ * ── The door guard, on both doors ────────────────────────────────────────────
+ * Being able to reach the port is not permission: every browser inside the
+ * network can be steered by any page it opens. So before any handler sees a
+ * request, the request door and the conversation door ask one guard
+ * (`doorGuard.ts`): a Host this door was not configured for (421), a browser
+ * origin it does not allow (403), a state-changing request that does not say
+ * it is JSON (415) — and, once a dialect has read it, a session id over the
+ * bound (400). Judged on the headers alone — a refused body is never parsed,
+ * only drained when small so its sender reads the answer — and never invited
+ * with a `100 Continue` on a socket this host owns. Answered with the
+ * refusal's own sentence, reported to `onRefusal` listeners. Probes (the
+ * health GET, the HEAD probe) are never asked; routes handed to `onUnhandled`
+ * are the caller's. A loopback bind with `allowedHosts` unset answers the
+ * loopback names only.
+ *
  * Pattern: Template method via configuration (Strategy on the wire format).
  * Everything HTTP lives here and in the wires; `types.ts` knows none of it.
  */
 /// <reference types="node" />
 import type { IncomingMessage, Server, ServerResponse } from 'node:http';
 import type { ArtifactWireRequest, ArtifactWireResult } from './artifactWire.js';
+import { type CrossSiteOptions } from './doorGuard.js';
 import type { SessionWireRequest, SessionWireResult } from './sessionWire.js';
 import type { AgentHost, ConversationHandler, ConversationHost, ConversationLimits, HostCapability, HostHandle, HostHandler, PendingAsk } from './types.js';
 import { type ConversationHandshake, type HandshakeFacts } from './webSocketConversation.js';
@@ -305,8 +321,16 @@ export interface HttpWire {
      */
     readConversation?(facts: HandshakeFacts): ConversationHandshake;
 }
-/** Options for {@link httpHost}. */
-export interface HttpHostOptions {
+/**
+ * Options for {@link httpHost}.
+ *
+ * The three cross-site fields — `allowedOrigins`, `allowedHosts`,
+ * `requireJsonContentType` — come from {@link CrossSiteOptions} and are
+ * enforced by this host's door guard on its request door and its conversation
+ * door alike, before any handler sees a request. Their defaults are the safe
+ * ones; see `doorGuard.ts` for what each costs.
+ */
+export interface HttpHostOptions extends CrossSiteOptions {
     /**
      * Which adapter this is. Every refusal names it, so a caller reading an error
      * learns which adapter said no rather than which file it came from.
@@ -331,7 +355,12 @@ export interface HttpHostOptions {
      * not bind.
      */
     readonly port?: number;
-    /** Interface to bind. Default `'0.0.0.0'`. Refused together with `server`, for the same reason. */
+    /**
+     * Interface to bind. Default `'0.0.0.0'`. Refused together with `server`, for the same reason.
+     *
+     * Every interface means every name that resolves to one of them — which is
+     * why a host serving with `allowedHosts` unset says so once at boot.
+     */
     readonly hostname?: string;
     /** What this adapter claims beyond the baseline. Default `['streaming']`. */
     readonly capabilities?: readonly HostCapability[];

package/dist/types/hosting/httpHost.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"httpHost.d.ts","sourceRoot":"","sources":["../../../src/hosting/httpHost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAIzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AASjF,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG9E,OAAO,KAAK,EACV,SAAS,EACT,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,UAAU,EACV,WAAW,EAEX,UAAU,EACX,MAAM,YAAY,CAAC;AACpB,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAC;AAEpC,YAAY,EAAE,qBAAqB,EAAE,cAAc,EAAE,CAAC;AAEtD,2EAA2E;AAC3E,MAAM,WAAW,gBAAgB;IAC/B,sDAAsD;IACtD,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjD,oFAAoF;IACpF,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,wCAAwC;IACxC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;CACjC;AAED;;;;;;;GAOG;AACH;;;GAGG;AACH;;;;;;;;;;GAUG;AACH,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,OAAO,CAAC;AAEhD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,IAAI,CAAC,IAAI,SAAS,WAAW,EAAE,CAAC;IAChC,+CAA+C;IAC/C,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;IAC5C,mDAAmD;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;IACjD,gDAAgD;IAChD,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,SAAS,WAAW,EAAE,CAAC;IACxF;;;;OAIG;IACH,QAAQ,CAAC,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS,WAAW,EAAE,CAAC;IACvD,QAAQ,CAAC,CAAC,MAAM,EAAE,kBAAkB,GAAG,SAAS,WAAW,EAAE,CAAC;IAC9D,QAAQ,CAAC,CAAC,MAAM,EAAE,iBAAiB,GAAG,SAAS,WAAW,EAAE,CAAC;CAC9D;AAED,MAAM,WAAW,QAAQ;IACvB;;;;;;OAMG;IACH,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG;QACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B;;;;;;;;WAQG;QACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB;;;;WAIG;QACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAC5B;;;;;;;;WAQG;QACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;QACxC;;;;;;;WAOG;QACH,QAAQ,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC;QACtC;;;;;;;;;;;;WAYG;QACH,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;KAC7D,CAAC;IACF;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAC/C;;;;;;;OAOG;IACH,MAAM,CAAC,CAAC,KAAK,EAAE,gBAAgB,GAAG,aAAa,CAAC;IAChD,kFAAkF;IAClF,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAClC;;;;;;;OAOG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAC1D;;;;;OAKG;IACH,OAAO,CACL,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,gBAAgB,EACxB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC;IACX,iFAAiF;IACjF,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC;IACxC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC;IAC/C;;;;;;;;;OASG;IACH,QAAQ,CAAC,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC;IAC9C;;;;;;;;;OASG;IACH,gBAAgB,CAAC,CAAC,KAAK,EAAE,cAAc,GAAG,qBAAqB,CAAC;CACjE;AAED,oCAAoC;AACpC,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,yCAAyC;IACzC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,uEAAuE;IACvE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,mGAAmG;IACnG,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAClD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAyCG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmDG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC;IAC3E;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;OASG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,2DAA2D;AAC3D,MAAM,WAAW,cAAe,SAAQ,UAAU;IAChD;;;;;OAKG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,QAAS,SAAQ,SAAS,EAAE,gBAAgB;IAC3D,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACrD,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC3E;AAuFD;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,QAAQ,CAiW3D;AAqbD;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAAE,EAC7D,IAAI,EAAE,MAAM,EACZ,GAAG,SAAS,EAAE,MAAM,EAAE,GACrB,MAAM,GAAG,SAAS,CAMpB"}
+{"version":3,"file":"httpHost.d.ts","sourceRoot":"","sources":["../../../src/hosting/httpHost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkFG;;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAIzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACjF,OAAO,EAKL,KAAK,gBAAgB,EAEtB,MAAM,gBAAgB,CAAC;AASxB,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAI9E,OAAO,KAAK,EACV,SAAS,EACT,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,UAAU,EACV,WAAW,EAGX,UAAU,EAEX,MAAM,YAAY,CAAC;AACpB,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAC;AAEpC,YAAY,EAAE,qBAAqB,EAAE,cAAc,EAAE,CAAC;AAEtD,2EAA2E;AAC3E,MAAM,WAAW,gBAAgB;IAC/B,sDAAsD;IACtD,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjD,oFAAoF;IACpF,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,wCAAwC;IACxC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;CACjC;AAED;;;;;;;GAOG;AACH;;;GAGG;AACH;;;;;;;;;;GAUG;AACH,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,OAAO,CAAC;AAEhD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,IAAI,CAAC,IAAI,SAAS,WAAW,EAAE,CAAC;IAChC,+CAA+C;IAC/C,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;IAC5C,mDAAmD;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,WAAW,EAAE,CAAC;IACjD,gDAAgD;IAChD,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,SAAS,WAAW,EAAE,CAAC;IACxF;;;;OAIG;IACH,QAAQ,CAAC,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS,WAAW,EAAE,CAAC;IACvD,QAAQ,CAAC,CAAC,MAAM,EAAE,kBAAkB,GAAG,SAAS,WAAW,EAAE,CAAC;IAC9D,QAAQ,CAAC,CAAC,MAAM,EAAE,iBAAiB,GAAG,SAAS,WAAW,EAAE,CAAC;CAC9D;AAED,MAAM,WAAW,QAAQ;IACvB;;;;;;OAMG;IACH,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG;QACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B;;;;;;;;WAQG;QACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB;;;;WAIG;QACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAC5B;;;;;;;;WAQG;QACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;QACxC;;;;;;;WAOG;QACH,QAAQ,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC;QACtC;;;;;;;;;;;;WAYG;QACH,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;KAC7D,CAAC;IACF;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAC/C;;;;;;;OAOG;IACH,MAAM,CAAC,CAAC,KAAK,EAAE,gBAAgB,GAAG,aAAa,CAAC;IAChD,kFAAkF;IAClF,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAClC;;;;;;;OAOG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAC1D;;;;;OAKG;IACH,OAAO,CACL,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,gBAAgB,EACxB,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC;IACX,iFAAiF;IACjF,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC;IACxC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC;IAC/C;;;;;;;;;OASG;IACH,QAAQ,CAAC,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC;IAC9C;;;;;;;;;OASG;IACH,gBAAgB,CAAC,CAAC,KAAK,EAAE,cAAc,GAAG,qBAAqB,CAAC;CACjE;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAgB,SAAQ,gBAAgB;IACvD;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,yCAAyC;IACzC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,uEAAuE;IACvE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAClD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAyCG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmDG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC;IAC3E;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;;;;OASG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,2DAA2D;AAC3D,MAAM,WAAW,cAAe,SAAQ,UAAU;IAChD;;;;;OAKG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,QAAS,SAAQ,SAAS,EAAE,gBAAgB;IAC3D,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACrD,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC3E;AAkGD;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,QAAQ,CA+d3D;AAwfD;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAAE,EAC7D,IAAI,EAAE,MAAM,EACZ,GAAG,SAAS,EAAE,MAAM,EAAE,GACrB,MAAM,GAAG,SAAS,CAMpB"}

package/dist/types/hosting/index.d.ts

@@ -92,7 +92,7 @@
  *   });
  *   process.on('SIGTERM', () => void handle.close());
  */
-export { nodeHost, jsonWire, jsonWireWith, DEFAULT_SESSION_HEADER } from './nodeHost.js';
+export { nodeHost, jsonWire, jsonWireWith, DEFAULT_SESSION_HEADER, DEFAULT_NODE_MAX_BODY_BYTES, } from './nodeHost.js';
 export type { NodeHost, NodeHostHandle, NodeHostOptions, JsonWireOptions } from './nodeHost.js';
 export { httpHost, headerValue } from './httpHost.js';
 export type { ConversationHandshake, HandshakeFacts, HttpHost, HttpHostHandle, HttpHostOptions, FailureOrigin, HttpRequestFacts, HttpWire, StreamFrame, StreamFraming, } from './httpHost.js';
@@ -101,9 +101,11 @@ export { sqliteSessions, SqliteUnavailableError, UnreadableSessionFileError, } f
 export type { SqliteSessions, SqliteSessionsOptions } from './sqliteSessions.js';
 export { toEnvelope, envelopeOwner, envelopeTranscript, toPausedEnvelope, readEnvelope, readPausedRun, checkEnvelope, } from './envelope.js';
 export { standingAgent } from './standingAgent.js';
-export { DEFAULT_MAX_ACTIVE_SESSIONS, DEFAULT_SWEEP_LIMIT } from './types.js';
-export { requireCapability, HostClosedError, ConcurrentRunError, PauseNotCarriedError, AwaitingDecisionError, NoPendingAskError, UnreadableEnvelopeError, ConversationClosedError, FrameTooLargeError, InvalidWireOpError, ArtifactSessionRequiredError, NoArtifactStoreError, ArtifactNotFoundError, ArtifactNotCarriedError, IdentityNotVerifiedError, VerifierUnavailableError, AdmissionRefusedError, SessionOpNeedsIdentityError, SessionIndexUnavailableError, SessionRetentionUnavailableError, SessionNotFoundError, SessionOwnershipConflictError, SessionsNotCarriedError, RequestTooLargeError, WireRequestRefusal, } from './errors.js';
-export type { IdentityFailureClass } from './errors.js';
+export { DEFAULT_MAX_ACTIVE_SESSIONS, DEFAULT_SWEEP_LIMIT, TURN_ARTIFACTS_TIMEOUT_MS, } from './types.js';
+export { requireCapability, HostClosedError, ConcurrentRunError, PauseNotCarriedError, AwaitingDecisionError, NoPendingAskError, UnreadableEnvelopeError, ConversationClosedError, FrameTooLargeError, InvalidWireOpError, ArtifactSessionRequiredError, NoArtifactStoreError, ArtifactNotFoundError, ArtifactNotCarriedError, TurnArtifactsExpiredError, IdentityNotVerifiedError, VerifierUnavailableError, AdmissionRefusedError, SessionOpNeedsIdentityError, SessionIndexUnavailableError, SessionRetentionUnavailableError, SessionNotFoundError, SessionOwnershipConflictError, SessionsNotCarriedError, RequestTooLargeError, WireRequestRefusal, UnsupportedMediaTypeError, OriginNotAllowedError, HostNotAllowedError, InvalidSessionIdError, } from './errors.js';
+export type { IdentityFailureClass, OriginRefusalRule } from './errors.js';
+export { checkSessionId, doorGuard, MAX_SESSION_ID_LENGTH } from './doorGuard.js';
+export type { CrossSiteOptions, CrossSiteRefusal, DoorGuard, DoorGuardOptions, DoorRequest, } from './doorGuard.js';
 export { sessionRetention } from './sessionRetention.js';
 export { resolveSessionOwner } from './sessionOwnership.js';
 export { formatConformanceReport, runSessionLifecycleCase, runSessionLifecycleConformance, sessionLifecycleConformance, } from './conformance/index.js';
@@ -119,5 +121,5 @@ export { ALL_WIRE_OPS, isWireOp, refuseUnknownWireOp, WIRE_OPS } from './wireOps
 export type { WireOpName } from './wireOps.js';
 export { readArtifactWireOp, artifactWireBody, ARTIFACT_HEAD_OP, ARTIFACT_GET_OP, } from './artifactWire.js';
 export type { ArtifactWireRequest, ArtifactWireResult } from './artifactWire.js';
-export type { AgentHost, CheckpointEnvelope, ConcurrentInvokePolicy, ConversationClose, ConversationEnvelope, ConversationHandler, ConversationHost, ConversationLimits, DurabilityMode, HostCapability, HostConversation, HostHandle, HostHandler, HostReply, HostRequest, PausedRun, PausedRunEnvelope, PendingAsk, SessionExpiryPolicy, SessionLifecycle, SessionListOptions, SessionListPage, SessionRetention, SessionSweep, SessionSweepOptions, SessionSweepResult, StandingAgentBaseOptions, StandingAgentOptions, StandingAgentPoolOptions, StandingAgentSharedOptions, Unsubscribe, WakeReason, } from './types.js';
+export type { AgentHost, CheckpointEnvelope, ConcurrentInvokePolicy, ConversationClose, ConversationEnvelope, ConversationHandler, ConversationHost, ConversationLimits, DurabilityMode, HostCapability, HostConversation, HostHandle, HostHandler, HostRefusal, HostReply, HostRequest, PausedRun, PausedRunEnvelope, PendingAsk, SessionExpiryPolicy, SessionLifecycle, SessionListOptions, SessionListPage, SessionRetention, SessionSweep, SessionSweepOptions, SessionSweepResult, StandingAgentBaseOptions, StandingAgentOptions, StandingAgentPoolOptions, StandingAgentSharedOptions, TurnArtifacts, Unsubscribe, WakeReason, } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/hosting/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/hosting/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6FG;AAEH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACzF,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAQhG,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACtD,YAAY,EACV,qBAAqB,EACrB,cAAc,EACd,QAAQ,EACR,cAAc,EACd,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,QAAQ,EACR,WAAW,EACX,aAAa,GACd,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAI7B,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EACL,UAAU,EACV,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE9E,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,4BAA4B,EAC5B,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,EACrB,2BAA2B,EAC3B,4BAA4B,EAC5B,gCAAgC,EAChC,oBAAoB,EACpB,6BAA6B,EAC7B,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAOxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAMzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAM5D,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAMhC,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAC/E,YAAY,EACV,2BAA2B,EAC3B,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AAKnC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACxE,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AAMxB,YAAY,EACV,uBAAuB,EACvB,WAAW,EACX,cAAc,EACd,aAAa,EACb,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAK5B,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACrF,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAQ/C,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEjF,YAAY,EACV,SAAS,EACT,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,SAAS,EACT,WAAW,EACX,SAAS,EACT,iBAAiB,EACjB,UAAU,EACV,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,wBAAwB,EACxB,0BAA0B,EAC1B,WAAW,EACX,UAAU,GACX,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/hosting/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6FG;AAEH,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAQhG,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACtD,YAAY,EACV,qBAAqB,EACrB,cAAc,EACd,QAAQ,EACR,cAAc,EACd,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,QAAQ,EACR,WAAW,EACX,aAAa,GACd,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAI7B,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EACL,UAAU,EACV,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,4BAA4B,EAC5B,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,EACrB,2BAA2B,EAC3B,4BAA4B,EAC5B,gCAAgC,EAChC,oBAAoB,EACpB,6BAA6B,EAC7B,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAQ3E,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAClF,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,SAAS,EACT,gBAAgB,EAChB,WAAW,GACZ,MAAM,gBAAgB,CAAC;AAOxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAMzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAM5D,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAMhC,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAC/E,YAAY,EACV,2BAA2B,EAC3B,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AAKnC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACxE,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AAMxB,YAAY,EACV,uBAAuB,EACvB,WAAW,EACX,cAAc,EACd,aAAa,EACb,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAK5B,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACrF,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAQ/C,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEjF,YAAY,EACV,SAAS,EACT,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,WAAW,EACX,SAAS,EACT,WAAW,EACX,SAAS,EACT,iBAAiB,EACjB,UAAU,EACV,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,wBAAwB,EACxB,0BAA0B,EAC1B,aAAa,EACb,WAAW,EACX,UAAU,GACX,MAAM,YAAY,CAAC"}