@hadoku/service-kernel 0.1.0 → 0.1.4

package/dist/auth/index.d.ts

@@ -114,5 +114,12 @@ export declare function accountIdOf(req: Request): string | null;
 export declare function userNameOf(req: Request): string | null;
 /** `userNameOf` for a socket's handshake, whose headers went through the same sanitizing. */
 export declare function userNameFromHeaders(headers: IncomingHttpHeaders): string | null;
+/**
+ * A header value as the text its sender meant. The edge sends a name's UTF-8
+ * bytes and Node reads every header byte as one Latin-1 character, so
+ * `王蟲様` arrives as `ç\x8e\x8bè…`. Bytes that are valid UTF-8 are read as
+ * UTF-8; anything else (plain ASCII, or a lone Latin-1 byte) is kept as it came.
+ */
+export declare function utf8HeaderValue(value: string): string;
 /** The one admin check: `rankOf(tierOf(req)) >= rankOf('admin')`. */
 export declare function isAdmin(req: Request): boolean;

package/dist/auth/index.js

@@ -163,7 +163,25 @@ export function userNameOf(req) {
 /** `userNameOf` for a socket's handshake, whose headers went through the same sanitizing. */
 export function userNameFromHeaders(headers) {
     const n = headers['x-user-name'];
-    return typeof n === 'string' && n !== '' ? n : null;
+    return typeof n === 'string' && n !== '' ? utf8HeaderValue(n) : null;
+}
+const STRICT_UTF8 = new TextDecoder('utf-8', { fatal: true });
+/**
+ * A header value as the text its sender meant. The edge sends a name's UTF-8
+ * bytes and Node reads every header byte as one Latin-1 character, so
+ * `王蟲様` arrives as `ç\x8e\x8bè…`. Bytes that are valid UTF-8 are read as
+ * UTF-8; anything else (plain ASCII, or a lone Latin-1 byte) is kept as it came.
+ */
+export function utf8HeaderValue(value) {
+    const codes = Array.from(value, (c) => c.charCodeAt(0));
+    if (!codes.some((c) => c >= 0x80) || codes.some((c) => c > 0xff))
+        return value;
+    try {
+        return STRICT_UTF8.decode(Buffer.from(value, 'latin1'));
+    }
+    catch {
+        return value;
+    }
 }
 /** The one admin check: `rankOf(tierOf(req)) >= rankOf('admin')`. */
 export function isAdmin(req) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hadoku/service-kernel",
-  "version": "0.1.0",
-  "gitHead": "25eb5a7d584ce320a079bea1ff111790bb676520",
+  "version": "0.1.4",
+  "gitHead": "d9e4fb24cfb06bd521804d51f42d2d0ded352a3e",
   "type": "module",
   "license": "MIT",
   "description": "The server parts any game keeps: edge auth and the tier gate, base path and bundle check, health and the busy probe, lifecycle, the JSON logger, the state directory, telemetry and capacity, per-caller limits, the browser relays, the erase registry, and createGameServer, which boots a game from its config and plugins. Knows no game; the app binds its service id, prefix and env names. MIT; imports only node built-ins, express, socket.io and @wolffm/*.",
@@ -56,8 +56,8 @@
     }
   },
   "dependencies": {
-    "@wolffm/rooms-protocol": "npm:@hadoku/rooms-protocol@^0.45.60",
-    "@wolffm/rooms-server": "npm:@hadoku/rooms-server@^0.45.60",
+    "@wolffm/rooms-protocol": "npm:@hadoku/rooms-protocol@^0.45.65",
+    "@wolffm/rooms-server": "npm:@hadoku/rooms-server@^0.45.65",
     "express": "^5.1.0",
     "socket.io": "^4.8.3"
   },