feat(http): rebuild bounded HTTP/1.1 authority on current main

.github/workflows/ci.yml

@@ -87,12 +87,14 @@ jobs:
           --json
           --output-path coverage.json
       - name: Record uncovered production lines
-        run: >-
-          cargo +nightly-2026-08-01 llvm-cov report
-          --branch
-          --text
-          --show-missing-lines
-          > missing-lines.txt
+        shell: bash
+        run: |
+          set -o pipefail
+          cargo +nightly-2026-08-01 llvm-cov report \
+            --branch \
+            --text \
+            --show-missing-lines \
+            | tee missing-lines.txt
       - name: Upload exact coverage diagnostics
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:

CHANGELOG.md

@@ -17,6 +17,8 @@ All notable changes to OriginWeave are documented in this file. The format follo
 - Authenticated `originweave-tls` service-identity boundary that consumes an existing verified TCP stream, requires exact TLS-origin and transport-origin equality, derives RFC 9525 DNS or literal-IP reference identity only from the canonical HTTPS origin, validates WebPKI with explicit roots and fixed time, permits only TLS 1.2 and TLS 1.3, and never reconnects or resolves.
 - Bounded TLS policy for total handshake time, ALPN identifiers, trust-root count and bytes, and server-presented certificate count and bytes, with explicit optional-versus-required ALPN behavior and `NotConfigured` revocation evidence.
 - Credential-free TLS evidence containing canonical origin, requested and observed peer, DNS/IP reference identity, TLS version, cipher-suite identifier, selected ALPN or explicit absence, leaf certificate and SPKI hashes, server-presented certificate hashes and bounds, trust-bundle identity and hash, validity interval, fixed verification time, revocation configuration, and measured handshake duration.
+- Bounded single-use `originweave-http` HTTP/1.1 `GET`/`HEAD` authority over the already authenticated TLS stream, with strict RFC 9110/9112 framing, one monotonic exchange deadline, encoded/decoded/chunk/trailer budgets, RFC 9530 digest validation, conservative MIME/disposition handling, redirect metadata without automatic follow, and immutable credential-free evidence.
+- Exact HTTP/1.1 reason-phrase octets retained separately on `AuthenticatedHttpResponse` for bounded diagnostics, including obs-text, while remaining excluded from credential-free evidence and all semantic decisions.
 - Credential-free connection and redirect evidence containing canonical addresses, destination classes, target digests, hop numbers, and approved-address counts.
 - Credential-free verified TCP evidence containing the logical origin, requested socket, observed peer, destination class, successful attempt number, and per-attempt timeout.
 - Standard `Display` and `std::error::Error` contracts for destination, redirect, digest, direct-network, and TLS failures, including preserved destination-policy, rustls, and operating-system sources where applicable.
@@ -36,9 +38,16 @@ All notable changes to OriginWeave are documented in this file. The format follo
 - Separated logical origin authority from resolved network destination authority; an origin grant no longer implies permission to connect to every resolver result.
 - Separated resolved-address authorization from direct transport evidence; an approved IP now becomes a usable stream only after the operating system reports the exact requested IP and port.
 - Separated exact TCP peer proof from authenticated TLS service identity; an observed peer becomes an authenticated HTTPS stream only after explicit-root, fixed-time, SAN-bound WebPKI verification over that same stream.
+- Reserved HTTP response-coding negotiation to the serializer that owns the gzip and zlib-deflate decoder set; caller `Accept-Encoding` fields now fail closed instead of combining with the fixed negotiation and advertising unsupported codings.
+- Tightened HTTP/1.1 duplicate `Content-Length` handling so comma-separated or repeated decimal members must be byte-identical after optional whitespace is trimmed; numerically equal but differently spelled members such as `042` and `42` now fail closed as conflicting framing evidence.
+- Restricted raw ASCII in HTTP origin-form request targets to RFC 3986 path/query characters; disallowed delimiters and unsafe punctuation now fail closed unless supplied through a valid percent escape, while non-ASCII UTF-8 remains percent-encoded.
+- Chunked HTTP/1.1 responses now complete at the terminal zero chunk plus bounded trailer terminator instead of waiting for peer TLS closure; close-delimited responses still require authenticated TLS EOF, and the stream remains single-use.
+- Overlong chunked trailer lines now fail as `TrailerSectionTooLarge` against the trailer-section budget, while malformed trailer line endings retain their chunked-syntax error classification.
+- MIME essence construction now enforces its parameter-free contract: reviewed type/subtype inputs that introduce MIME parameters fail closed instead of manufacturing a parameterized `MimeType`.
+- Invalid `X-Content-Type-Options` metadata now fails with the dedicated `InvalidNoSniffDirective` error instead of being misclassified as malformed `Content-Type` MIME syntax.
 - Replaced single resource-pressure directives with a cumulative mitigation plan so simultaneous RAM, VRAM, frame, model, and admission pressure cannot discard required actions.
 - Changed generic network capture from finite deny-lists or safe-name allow-lists to unconditional value redaction. Typed metadata values and bodies now require a separate schema-specific capture contract.
-- Updated the first Chromium slice to distinguish implemented origin, destination, direct TCP, and TLS identity kernels from the remaining trusted DNS adapter, proxy/PAC, HTTP budget, MIME, download, and Chromium integration required before safe navigation can be claimed.
+- Updated the first Chromium slice to distinguish implemented origin, destination, direct TCP, TLS identity, and bounded HTTP/MIME kernels from the remaining trusted DNS adapter, proxy/PAC execution, browser download handoff, and Chromium integration required before safe navigation can be claimed.
 - Separated hourly product PR publication authority from the organization review and merge system, and added live default-branch and release-blocker rechecks immediately before publication.
 - Made the agent-development contract work-conserving: completing one bounded slice, RCA, review request, check, merge, or documentation change is an intermediate state; maintenance must return to the live queue, treat waits as item-local, and perform a mandatory exit sweep before terminating while executable OriginWeave work remains.
 - Moved autonomous-agent Cargo targets and Python bytecode caches outside the proposed source tree and prefetched locked Cargo dependencies for offline verification.
@@ -69,6 +78,8 @@ All notable changes to OriginWeave are documented in this file. The format follo
 - The operating-system peer is rechecked before, during, and after the deadline-bound TLS handshake.
 - ALPN selection is restricted to the caller's bounded allow-list, while absence is either explicitly recorded or rejected by policy.
 - Revocation is reported as not configured; the product makes no OCSP or CRL validation claim without supplied revocation evidence.
+- HTTP/1.1 status, framing, content coding, integrity, MIME, disposition, and redirect decisions never depend on the untrusted reason phrase; exact reason bytes are available only as bounded diagnostics and are not copied into credential-free evidence.
+- Safe `Content-Disposition` filename metadata rejects Windows reserved device names using both ASCII digits and the Windows-recognized ISO/IEC 8859-1 superscript digits in `COM`/`LPT` names before any later download handoff.
 - Every generic network header and query value is redacted before evidence leaves the trusted boundary, including conventionally benign field names containing attacker-controlled bytes.
 - Evidence capture enforces count and byte bounds and rejects credential-bearing source URLs, query strings, fragments, controls, whitespace, malformed percent escapes, encoded separators, dot segments, and backslash paths.
 - Hard RAM and VRAM pressure pauses the active agent and rejects new admission; hard VRAM pressure also offloads a resident local model.

Cargo.toml

@@ -7,20 +7,22 @@ members = [
     "crates/originweave-destination",
     "crates/originweave-network",
     "crates/originweave-tls",
+    "crates/originweave-http",
 ]
 resolver = "3"
 
 [workspace.package]
 version = "0.1.0"
 edition = "2024"
-rust-version = "1.97"
+rust-version = "1.97.1"
 license = "Apache-2.0"
 authors = ["Contextual Wisdom Lab"]
 repository = "https://github.com/ContextualWisdomLab/OriginWeave"
 homepage = "https://github.com/ContextualWisdomLab/OriginWeave"
 
 [workspace.lints.rust]
 unsafe_code = "forbid"
+unexpected_cfgs = { level = "warn", check-cfg = ["cfg(coverage_nightly)"] }
 
 [workspace.lints.clippy]
 dbg_macro = "deny"

crates/originweave-http/Cargo.toml

@@ -0,0 +1,25 @@
+[package]
+name = "originweave-http"
+version.workspace = true
+edition.workspace = true
+rust-version.workspace = true
+license.workspace = true
+authors.workspace = true
+repository.workspace = true
+homepage.workspace = true
+
+[dependencies]
+base64 = "=0.22.1"
+flate2 = { version = "=1.1.9", default-features = false, features = ["rust_backend"] }
+originweave-core = { path = "../originweave-core" }
+originweave-tls = { path = "../originweave-tls" }
+sha2 = "=0.10.9"
+
+[dev-dependencies]
+originweave-destination = { path = "../originweave-destination" }
+originweave-network = { path = "../originweave-network" }
+rcgen = "=0.14.8"
+rustls = { version = "=0.23.42", default-features = false, features = ["ring", "std", "tls12"] }
+
+[lints]
+workspace = true