@auspex-ai/next 0.0.0-stage → 1.4.2

package/dist/register-names-cli.mjs

@@ -0,0 +1,390 @@
+#!/usr/bin/env node
+import { createHash, randomBytes } from "node:crypto";
+import { promises } from "node:fs";
+import path from "node:path";
+//#region ../build-names/src/element-ref.ts
+/** sha256(ビルド鍵)の先頭 16 文字(16 進)。秘密ではなく(先頭 64 bit から鍵は戻せない)、キャッシュやオプションに残ってよい */
+function keyIdOf(key) {
+	return createHash("sha256").update(key, "utf8").digest("hex").slice(0, 16);
+}
+//#endregion
+//#region ../build-names/src/host.ts
+function isValidHost(host) {
+	let u;
+	try {
+		u = new URL(host);
+	} catch {
+		return false;
+	}
+	if (u.username || u.password) return false;
+	if (u.protocol === "https:") return true;
+	return u.protocol === "http:" && (u.hostname === "localhost" || u.hostname === "127.0.0.1");
+}
+/** セルフホスト版で /api/names を受ける internal の面の URL。あれば通常の host より優先する(ビルド時だけ読む) */
+const INTERNAL_HOST_ENV = "AUSPEX_INTERNAL_HOST";
+/**
+* 名前の登録の送り先。環境変数 AUSPEX_INTERNAL_HOST が空でなければそれ(不正な値でも通常の host に
+* 落とさない。落とすと 404 になる面へビルド鍵を送るため、呼び出し側の isValidHost で弾く)。無ければ通常の host
+*/
+function registrationHost(host, internal = process.env[INTERNAL_HOST_ENV]) {
+	return internal?.trim() ? internal.trim() : host;
+}
+//#endregion
+//#region ../build-names/src/iap-token.ts
+const IAP_SERVICE_ACCOUNT_ENV = "AUSPEX_IAP_SERVICE_ACCOUNT";
+const TOKEN_LIFETIME_SECONDS = 3600;
+/** IAP が検証する aud。host の origin 全体(`<origin>/*`) */
+function iapAudience(host) {
+	return `${new URL(host).origin}/*`;
+}
+function iapPayload(serviceAccount, host, nowMs = Date.now()) {
+	const iat = Math.floor(nowMs / 1e3);
+	return JSON.stringify({
+		iss: serviceAccount,
+		sub: serviceAccount,
+		aud: iapAudience(host),
+		iat,
+		exp: iat + TOKEN_LIFETIME_SECONDS
+	});
+}
+/** 既定の署名: google-auth-library(任意の依存)で ADC を読み、IAM Credentials の signJwt を呼ぶ */
+const signJwtWithAdc = async (serviceAccount, payload) => {
+	let lib;
+	try {
+		lib = await import("google-auth-library");
+	} catch {
+		throw new Error(`${IAP_SERVICE_ACCOUNT_ENV} が設定されているが google-auth-library が入っていない。ビルドの環境に google-auth-library を入れる(例: pnpm add -D google-auth-library)`);
+	}
+	const res = await new lib.GoogleAuth({ scopes: ["https://www.googleapis.com/auth/cloud-platform"] }).request({
+		url: `https://iamcredentials.googleapis.com/v1/projects/-/serviceAccounts/${encodeURIComponent(serviceAccount)}:signJwt`,
+		method: "POST",
+		data: { payload },
+		timeout: 2e4
+	});
+	if (!res.data.signedJwt) throw new Error("signJwt の応答に signedJwt が無い");
+	return res.data.signedJwt;
+};
+/** `Proxy-Authorization` の値(`Bearer <JWT>`)。失敗は投げる(呼び出し側が警告にする) */
+async function iapProxyAuthorization(host, serviceAccount, sign = signJwtWithAdc) {
+	return `Bearer ${await sign(serviceAccount, iapPayload(serviceAccount, host))}`;
+}
+//#endregion
+//#region ../build-names/src/log.ts
+const PREFIX = "[auspex]";
+const consoleLogger = {
+	info: (m) => console.log(`${PREFIX} ${m}`),
+	warn: (m) => console.warn(`${PREFIX} ${m}`)
+};
+const MAX_BUILD_ID = 128;
+const MAX_RETRIES = 3;
+/** ディレクトリのプロジェクトからの相対パス(ローダーが this.rootContext に対して解決する)。POSIX の区切りで書く */
+const fragmentsSubdir = (keyId) => `cache/auspex/names/${keyId}`;
+const KIND_ORDER = {
+	element: 0,
+	icon: 1,
+	label: 2
+};
+const defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
+/**
+* 断片を読んで要素名・アイコン名の集合(それぞれ辞書順)にする。壊れた断片は警告して飛ばす。
+* `icons` の無い段階 1 の断片も読める
+*/
+async function readFragments(dir, logger) {
+	let files;
+	try {
+		files = (await promises.readdir(dir)).filter((f) => f.endsWith(".json"));
+	} catch {
+		return {
+			names: [],
+			icons: [],
+			labels: []
+		};
+	}
+	const names = /* @__PURE__ */ new Set();
+	const icons = /* @__PURE__ */ new Set();
+	const labels = /* @__PURE__ */ new Set();
+	for (const f of files) try {
+		const parsed = JSON.parse(await promises.readFile(path.join(dir, f), "utf8"));
+		if (!Array.isArray(parsed.names)) throw new Error("names が配列ではない");
+		if (parsed.icons !== void 0 && !Array.isArray(parsed.icons)) throw new Error("icons が配列ではない");
+		if (parsed.labels !== void 0 && !Array.isArray(parsed.labels)) throw new Error("labels が配列ではない");
+		for (const n of parsed.names) if (typeof n === "string") names.add(n);
+		for (const n of parsed.icons ?? []) if (typeof n === "string") icons.add(n);
+		for (const n of parsed.labels ?? []) if (typeof n === "string") labels.add(n);
+	} catch (e) {
+		logger.warn(`壊れた断片を飛ばした: ${path.join(dir, f)}(${e.message})`);
+	}
+	return {
+		names: [...names].sort(),
+		icons: [...icons].sort(),
+		labels: [...labels].sort()
+	};
+}
+/** build_id: `<distDir>/BUILD_ID`(か --build-id)。無い・128 文字超は自前の id(1 回の実行で 1 度だけ作る) */
+async function resolveBuildId(distDirAbs, override, logger, readFile = true) {
+	let raw = override;
+	if (raw === void 0 && readFile) try {
+		raw = (await promises.readFile(path.join(distDirAbs, "BUILD_ID"), "utf8")).trim();
+	} catch {}
+	if (raw && raw.length <= MAX_BUILD_ID) return raw;
+	const own = `local-${Date.now()}-${randomBytes(4).toString("hex")}`;
+	logger.info(raw ? `build_id が長すぎる(${raw.length} 文字。上限 ${MAX_BUILD_ID})ので、自前の id を使う: ${own}` : `build_id(${path.join(distDirAbs, "BUILD_ID")})が無いので、自前の id を使う: ${own}`);
+	return own;
+}
+async function post(o, buildId, names, icons, labels) {
+	const url = `${o.host.replace(/\/+$/, "")}/api/names`;
+	let reason = "";
+	for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
+		if (attempt > 0) await o.sleep(500 * 2 ** (attempt - 1));
+		try {
+			const res = await o.fetch(url, {
+				method: "POST",
+				headers: {
+					"content-type": "application/json",
+					authorization: `Bearer ${o.key}`,
+					...o.proxyAuthorization ? { "proxy-authorization": o.proxyAuthorization } : {}
+				},
+				body: JSON.stringify({
+					build_id: buildId,
+					names,
+					...icons.length > 0 ? { icons } : {},
+					...labels.length > 0 ? { labels } : {}
+				}),
+				signal: AbortSignal.timeout(2e4),
+				redirect: "error"
+			});
+			if (res.status === 401) return { kind: "unauthorized" };
+			if (res.status >= 500) {
+				reason = `HTTP ${res.status}`;
+				continue;
+			}
+			if (res.status !== 200) return {
+				kind: "rejected",
+				status: res.status
+			};
+			const body = await res.json();
+			if (!Array.isArray(body.results)) return {
+				kind: "rejected",
+				status: res.status
+			};
+			return {
+				kind: "ok",
+				results: body.results
+			};
+		} catch (e) {
+			reason = e.message;
+		}
+	}
+	return {
+		kind: "failed",
+		reason
+	};
+}
+/**
+* 断片の名前を登録する。例外は投げない(ネットワーク・5xx・401・400・413 のどれでもビルドを落とさず警告する)
+*/
+async function registerNames(options) {
+	const logger = options.logger ?? consoleLogger;
+	const summary = {
+		buildId: null,
+		names: 0,
+		icons: 0,
+		labels: 0,
+		registered: 0,
+		already: 0,
+		dropped: [],
+		collisions: [],
+		unregistered: []
+	};
+	try {
+		let names;
+		let icons;
+		let labels;
+		let buildId;
+		if ("names" in options) {
+			names = [...new Set(options.names)].sort();
+			icons = [...new Set(options.icons)].sort();
+			summary.names = names.length;
+			labels = [...new Set(options.labels ?? [])].sort();
+			summary.icons = icons.length;
+			summary.labels = labels.length;
+			if (names.length + icons.length + labels.length === 0) logger.info("登録する名前が無い");
+			buildId = await resolveBuildId("", options.buildId, logger, false);
+		} else {
+			const distDirAbs = path.resolve(options.projectDir ?? process.cwd(), options.distDir);
+			const dir = path.join(distDirAbs, fragmentsSubdir(options.keyId));
+			({names, icons, labels} = await readFragments(dir, logger));
+			summary.names = names.length;
+			summary.icons = icons.length;
+			summary.labels = labels.length;
+			if (names.length + icons.length + labels.length === 0) logger.info(`登録する名前が無い(断片: ${dir})`);
+			buildId = await resolveBuildId(distDirAbs, options.buildId, logger, options.readBuildIdFile ?? true);
+		}
+		summary.buildId = buildId;
+		const iapServiceAccount = options.iapServiceAccount ?? process.env["AUSPEX_IAP_SERVICE_ACCOUNT"];
+		const proxyAuthorization = iapServiceAccount ? await iapProxyAuthorization(options.host, iapServiceAccount, options.iapSigner).catch((e) => {
+			throw new Error(`IAP 用のトークンを作れなかった: ${e.message}`);
+		}) : void 0;
+		const o = {
+			key: options.key,
+			host: options.host,
+			proxyAuthorization,
+			fetch: options.fetch ?? fetch,
+			sleep: options.sleep ?? defaultSleep
+		};
+		const items = (ns, is, ls) => [
+			...ns.map((name) => ({
+				kind: "element",
+				name
+			})),
+			...is.map((name) => ({
+				kind: "icon",
+				name
+			})),
+			...ls.map((name) => ({
+				kind: "label",
+				name
+			}))
+		];
+		const chunks = (list) => {
+			const out = [];
+			for (let i = 0; i < list.length; i += 100) out.push(list.slice(i, i + 100));
+			return out;
+		};
+		const retry = [];
+		const unregistered = /* @__PURE__ */ new Map();
+		const markUnregistered = (item, reason) => {
+			unregistered.set(`${item.kind}\0${item.name}`, {
+				item,
+				reason
+			});
+		};
+		const label = (kind) => kind === "icon" ? "アイコン名" : kind === "label" ? "ラベル" : "名前";
+		const send = async (list, second) => {
+			const all = list.length === 0 ? [[]] : chunks(list);
+			for (const [ci, chunk] of all.entries()) {
+				const out = await post(o, buildId, chunk.filter((i) => i.kind === "element").map((i) => i.name), chunk.filter((i) => i.kind === "icon").map((i) => i.name), chunk.filter((i) => i.kind === "label").map((i) => i.name));
+				if (out.kind === "unauthorized") {
+					logger.warn("ビルド鍵が受け付けられなかった(401)。鍵が違うか、再発行された可能性がある。登録せずに続ける(名前なしのクリックとして入る)");
+					for (const n of all.slice(ci).flat()) markUnregistered(n, "401");
+					return "stop";
+				}
+				if (out.kind === "rejected") {
+					logger.warn(`登録が拒否された(HTTP ${out.status}、${chunk.length} 件のチャンク)。再送しない`);
+					for (const n of chunk) markUnregistered(n, `HTTP ${out.status}`);
+					continue;
+				}
+				if (out.kind === "failed") {
+					logger.warn(`登録を送れなかった(${MAX_RETRIES} 回送り直した。${out.reason})。ビルドは続ける。次のビルドで再登録される`);
+					for (const n of chunk) markUnregistered(n, out.reason);
+					continue;
+				}
+				for (const r of out.results) {
+					const kind = r.kind === "icon" ? "icon" : r.kind === "label" ? "label" : "element";
+					if (r.status === "registered") summary.registered++;
+					else if (r.status === "already") summary.already++;
+					else if (r.status === "collision") {
+						summary.collisions.push({
+							kind,
+							name: r.name,
+							winner: r.winner
+						});
+						logger.warn(`${label(kind)} "${r.name}" は登録済みの "${r.winner}" と同じ参照になった。"${r.name}" の${kind === "icon" ? "アイコン" : kind === "label" ? "ラベル" : "要素"}は "${r.winner}" の名前で記録される`);
+					} else if (r.status === "retry") {
+						if (second) markUnregistered({
+							kind,
+							name: r.name
+						}, "retry");
+						else retry.push({
+							kind,
+							name: r.name
+						});
+					} else {
+						summary.dropped.push({
+							kind,
+							name: r.name,
+							status: r.status
+						});
+						logger.warn(`${label(kind)} "${r.name}" は登録されなかった(${r.status})`);
+					}
+				}
+			}
+			return "go";
+		};
+		if (await send(items(names, icons, labels), false) === "go" && retry.length > 0) await send(retry.sort((a, b) => KIND_ORDER[a.kind] - KIND_ORDER[b.kind] || (a.name < b.name ? -1 : a.name > b.name ? 1 : 0)), true);
+		for (const { item, reason } of unregistered.values()) {
+			summary.unregistered.push(item);
+			if (reason !== "401") logger.warn(`${label(item.kind)} "${item.name}" は未登録(${reason})。次のビルドで再登録される`);
+		}
+		logger.info(`名前の登録: 要素名 ${summary.names} 件・アイコン名 ${summary.icons} 件・ラベル ${summary.labels} 件中 新規 ${summary.registered}・登録済み ${summary.already}・捨てた ${summary.dropped.length}・衝突 ${summary.collisions.length}・未登録 ${summary.unregistered.length}(build_id ${buildId})`);
+	} catch (e) {
+		logger.warn(`名前の登録に失敗した(ビルドは続ける): ${e.message}`);
+	}
+	return summary;
+}
+//#endregion
+//#region src/register-names-cli.ts
+const USAGE = `auspex-register-names [--host <https://...>] [--dist-dir <dir>] [--build-id <id>]
+  AUSPEX_BUILD_KEY   ビルド鍵(必須)
+  AUSPEX_IAP_SERVICE_ACCOUNT  IAP の背後の受信口(セルフホスト)に入るサービスアカウント(任意。google-auth-library と Google の認証情報が要る)
+  AUSPEX_INTERNAL_HOST  セルフホストの internal の面の URL(任意。あれば --host・NEXT_PUBLIC_AUSPEX_HOST より優先。https)
+  --host             登録の受け口(既定は NEXT_PUBLIC_AUSPEX_HOST)
+  --dist-dir         Next の distDir(既定 .next)
+  --build-id         build_id(既定は <distDir>/BUILD_ID)`;
+function parseArgs(argv) {
+	const out = {
+		host: void 0,
+		distDir: void 0,
+		buildId: void 0
+	};
+	const names = {
+		"--host": "host",
+		"--dist-dir": "distDir",
+		"--build-id": "buildId"
+	};
+	for (let i = 0; i < argv.length; i++) {
+		const [flag, inline] = (argv[i] ?? "").split(/=(.*)/s, 2);
+		const field = flag ? names[flag] : void 0;
+		if (!field) return null;
+		const value = inline ?? argv[++i];
+		if (value === void 0) return null;
+		out[field] = value;
+	}
+	return out;
+}
+async function main() {
+	const argv = process.argv.slice(2);
+	if (argv.includes("--help") || argv.includes("-h")) {
+		console.log(USAGE);
+		return 0;
+	}
+	const args = parseArgs(argv);
+	if (!args) {
+		console.error(USAGE);
+		return 2;
+	}
+	const key = process.env.AUSPEX_BUILD_KEY;
+	const host = registrationHost(args.host ?? process.env.NEXT_PUBLIC_AUSPEX_HOST);
+	if (!key) {
+		consoleLogger.warn("AUSPEX_BUILD_KEY が無いので、要素名を登録しない(CI の秘密に置く。NEXT_PUBLIC_ は付けない)");
+		return 0;
+	}
+	if (!host || !isValidHost(host)) {
+		consoleLogger.warn(`登録の受け口 host が無い、または https ではないので、要素名を登録しない(--host か NEXT_PUBLIC_AUSPEX_HOST か AUSPEX_INTERNAL_HOST。${host ?? "未設定"})`);
+		return 0;
+	}
+	await registerNames({
+		key,
+		host,
+		keyId: keyIdOf(key),
+		distDir: args.distDir ?? ".next",
+		...args.buildId === void 0 ? {} : { buildId: args.buildId }
+	});
+	return 0;
+}
+main().then((code) => process.exit(code), (e) => {
+	consoleLogger.warn(`要素名の登録に失敗した: ${e.message}`);
+	process.exit(0);
+});
+//#endregion
+export {};

package/dist/rolldown-runtime-VH7oDXx4.cjs

@@ -0,0 +1,28 @@
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+//#endregion
+Object.defineProperty(exports, "__toESM", {
+	enumerable: true,
+	get: function() {
+		return __toESM;
+	}
+});

package/dist/svg-name-loader.cjs

@@ -0,0 +1,18 @@
+const require_transform = require("./transform-Dc5diC_P.cjs");
+let node_path = require("node:path");
+node_path = require_transform.__toESM(node_path, 1);
+//#region src/icon-name/svg-loader.ts
+function svgNameLoader(source) {
+	const options = this.getOptions?.() ?? {};
+	const dev = (this.mode ?? process.env.NODE_ENV) === "development";
+	const refOf = options.iconNames === false || dev ? null : require_transform.refOfFromEnv(options);
+	const out = require_transform.transformSvgFile(source, this.resourcePath, refOf ? (name) => refOf(name, "icon") : void 0);
+	if (!out) return source;
+	if (out.name && options.fragmentsDir) require_transform.writeFragment(node_path.default.resolve(this.rootContext ?? process.cwd(), options.fragmentsDir), this.resourcePath, {
+		names: [],
+		icons: [out.name]
+	});
+	return out.code;
+}
+//#endregion
+module.exports = svgNameLoader;