nucleus-core-ts 0.9.714 → 0.9.715

package/dist/src/Utils/headerList.d.ts

@@ -0,0 +1,28 @@
+/**
+ * HTTP-header-safe encoding for lists of possibly-Unicode values (role names,
+ * claim actions) carried in the `x-user-roles` / `x-user-claims` headers.
+ *
+ * HTTP header values must be ISO-8859-1 (latin1). Role names are user-defined and
+ * may contain arbitrary Unicode — e.g. a Turkish role "Günlük Kısıtlı Deneme"
+ * contains `ı`/`ş`/`ğ` which are outside latin1. Passing such a value to
+ * `Headers.set` throws ("Header 'x-user-roles' has invalid value") and 500s EVERY
+ * request for any user holding that role — which silently breaks login, entity
+ * access, and impersonation enter/exit for that user.
+ *
+ * Per-item percent-encoding fixes this generically:
+ *  - ASCII values (`godmin`, `user-free`, `llm.conversations.list`) are left
+ *    byte-identical, so readers that don't decode still match them correctly.
+ *  - Unicode values become transport-safe and round-trip losslessly via decode.
+ *
+ * The comma separator is preserved (encodeURIComponent never emits `,`), so
+ * existing `header.split(',')` readers keep working.
+ */
+/** Encode a list of role/claim names into a header-safe comma-joined string. */
+export declare function encodeHeaderList(items: string[]): string;
+/**
+ * Inverse of {@link encodeHeaderList}: split a header value and restore the
+ * original (possibly Unicode) items. Tolerant of legacy/plain values —
+ * `decodeURIComponent` is the identity for un-encoded ASCII, and a malformed
+ * percent-sequence is returned verbatim rather than throwing.
+ */
+export declare function decodeHeaderList(header: string | null | undefined): string[];

package/dist/src/Utils/headerList.test.d.ts

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "nucleus-core-ts",
-	"version": "0.9.714",
+	"version": "0.9.715",
 	"description": "Production-ready, enterprise-grade TypeScript framework for building multi-tenant APIs",
 	"author": "Hidayet Can Özcan <hidayetcan@gmail.com>",
 	"license": "SEE LICENSE IN LICENSE",