@ainra/middleware 0.8.0 → 0.8.1

package/dist/index.d.ts

@@ -1,4 +1,10 @@
 import { Verifier, type LinkIndex, type StatusPublication, type LinkVerdict, type Verdict, type VerdictEvent, type DecisionLog } from "@ainra/sdk";
+/** The verdict event as an HTTP header value (2026-11-12). The event's `name` comes from the presenter's own claims,
+ *  also when the bundle is refused, and `serializeVerdictEvent` keeps non-ASCII as it is (it must byte-match the Rust
+ *  emitter). A header cannot hold most of those characters: Node's `setHeader` throws on them, which turned a refusal
+ *  into a 500 in a framework that catches, and stopped a server whose handler did not. So every character outside
+ *  printable ASCII is written as its JSON `\uXXXX` escape: still valid JSON, and it parses to exactly the same event. */
+export declare function verdictHeaderValue(e: VerdictEvent): string;
 /** Where the gate keeps bundles a running copy has sent once. Only bundles that verified VALID when they arrived
  *  are ever stored, the key is the SHA-256 of the content, and every request re-verifies what it names — so the
  *  store can lose entries (the client just sends again) but cannot make anything pass that would not. */

package/dist/index.js

@@ -9,6 +9,14 @@
 //!   * `checkRequest(verifier, bundle, opts)` → framework-agnostic `{ allow, reason?, verdict }` (edge/fetch).
 import { verdictEvent, serializeVerdictEvent, decodeInstance, verifyPresentation, isPresentationRef, splitPresentation, joinPresentation, presentationRef, POP_HEADER, PRIME_PATH, decisionRequestDigest, linkFromIndex, presentedKeyThumbprint, } from "@ainra/sdk";
 import { createHash } from "node:crypto";
+/** The verdict event as an HTTP header value (2026-11-12). The event's `name` comes from the presenter's own claims,
+ *  also when the bundle is refused, and `serializeVerdictEvent` keeps non-ASCII as it is (it must byte-match the Rust
+ *  emitter). A header cannot hold most of those characters: Node's `setHeader` throws on them, which turned a refusal
+ *  into a 500 in a framework that catches, and stopped a server whose handler did not. So every character outside
+ *  printable ASCII is written as its JSON `\uXXXX` escape: still valid JSON, and it parses to exactly the same event. */
+export function verdictHeaderValue(e) {
+    return serializeVerdictEvent(e).replace(/[^\x20-\x7e]/g, (c) => "\\u" + c.charCodeAt(0).toString(16).padStart(4, "0"));
+}
 /** The default store: in memory, bounded, oldest-first eviction, and nothing outlives the credential it holds.
  *  Bounded because whoever can mint valid bundles can otherwise fill it; eviction costs them nothing but costs an
  *  honest client one re-send, which is the right way round. One process only — behind several, share a store. */
@@ -218,7 +226,7 @@ export function ainraGate(verifier, opts = {}) {
         if (opts.decisions)
             recordDecision(opts.decisions, raw, result, req, opts);
         // Emit the canonical verdict event on every request (allow or deny) — one event shape everywhere (PRESENTATION.md).
-        res.setHeader("x-ainra-verdict", serializeVerdictEvent(result.event));
+        res.setHeader("x-ainra-verdict", verdictHeaderValue(result.event));
         if (result.allow) {
             next();
             return;
@@ -271,7 +279,7 @@ export function ainraPrime(verifier, opts) {
         if ((req.method ?? "POST").toUpperCase() !== "POST")
             return deny("schema_violation");
         const result = checkRequest(verifier, body, { now: () => now });
-        res.setHeader("x-ainra-verdict", serializeVerdictEvent(result.event));
+        res.setHeader("x-ainra-verdict", verdictHeaderValue(result.event));
         if (!result.allow)
             return deny(result.reason ?? "schema_violation");
         const bundle = body;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ainra/middleware",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "AINRA verifier middleware — a fail-closed gate (Connect/Express + framework-agnostic) that verifies an AINRA passport on a request, over @ainra/sdk. The verification wedge: local, offline, ~5-line integration.",
   "license": "Apache-2.0 OR MIT",
   "type": "module",
@@ -14,7 +14,7 @@
     "test": "node --test"
   },
   "dependencies": {
-    "@ainra/sdk": "^0.8.0"
+    "@ainra/sdk": "^0.8.1"
   },
   "devDependencies": {
     "@types/node": "^26.1.1",