@mathrunet/masamune_cloudflare 3.1.5 → 3.1.7

package/CHANGELOG.md

@@ -1,4 +1,4 @@
-## 3.1.5 (2026-06-30)
+## 3.1.7 (2026-07-01)
 
 
 ### chore

package/dist/index.d.ts

@@ -13,9 +13,16 @@ import { WorkersBase, WorkersOptions } from "./lib/src/workers_base";
 export * from "@mathrunet/masamune";
 export * from "./lib/api";
 export * from "./lib/src/workers_base";
-export * from "./lib/src/workers_authentication_middleware_base";
+export * from "./lib/src/workers_auth_adapter_base";
+export * from "./lib/src/workers_rule_adapter_base";
 export * from "./lib/src/workers_data";
 export * from "./lib/src/request_process_workders_base";
+export * from "./lib/src/rules/rules_loader";
+export * from "./lib/src/rules/path_matcher";
+export * from "./lib/src/rules/rules_engine";
+export * from "./lib/adapters/firebase_auth_adapter";
+export * from "./lib/adapters/none_auth_adapter";
+export * from "./lib/adapters/rules_middleware";
 export * from "./lib/middlewares";
 /**
  * Methods for deploying to Cloudflare Workers.

package/dist/index.js

@@ -51,9 +51,16 @@ const hono = __importStar(require("hono"));
 __exportStar(require("@mathrunet/masamune"), exports);
 __exportStar(require("./lib/api"), exports);
 __exportStar(require("./lib/src/workers_base"), exports);
-__exportStar(require("./lib/src/workers_authentication_middleware_base"), exports);
+__exportStar(require("./lib/src/workers_auth_adapter_base"), exports);
+__exportStar(require("./lib/src/workers_rule_adapter_base"), exports);
 __exportStar(require("./lib/src/workers_data"), exports);
 __exportStar(require("./lib/src/request_process_workders_base"), exports);
+__exportStar(require("./lib/src/rules/rules_loader"), exports);
+__exportStar(require("./lib/src/rules/path_matcher"), exports);
+__exportStar(require("./lib/src/rules/rules_engine"), exports);
+__exportStar(require("./lib/adapters/firebase_auth_adapter"), exports);
+__exportStar(require("./lib/adapters/none_auth_adapter"), exports);
+__exportStar(require("./lib/adapters/rules_middleware"), exports);
 __exportStar(require("./lib/middlewares"), exports);
 /**
  * Methods for deploying to Cloudflare Workers.

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,wBAMC;AA1CD;;;;;;;;;GASG;AACH,2CAA6B;AAG7B,sDAAoC;AACpC,4CAA0B;AAC1B,yDAAuC;AACvC,mFAAiE;AACjE,yDAAuC;AACvC,0EAAwD;AACxD,oDAAkC;AAElC;;;;;;;;;;;;;;GAcG;AACH,SAAgB,MAAM,CAAC,cAA6B,EAAE,UAA0B,EAAE;IAC9E,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QAClC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2CA,wBAMC;AAjDD;;;;;;;;;GASG;AACH,2CAA6B;AAG7B,sDAAoC;AACpC,4CAA0B;AAC1B,yDAAuC;AACvC,sEAAoD;AACpD,sEAAoD;AACpD,yDAAuC;AACvC,0EAAwD;AACxD,+DAA6C;AAC7C,+DAA6C;AAC7C,+DAA6C;AAC7C,uEAAqD;AACrD,mEAAiD;AACjD,kEAAgD;AAChD,oDAAkC;AAElC;;;;;;;;;;;;;;GAcG;AACH,SAAgB,MAAM,CAAC,cAA6B,EAAE,UAA0B,EAAE;IAC9E,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QAClC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC"}

package/dist/lib/adapters/firebase_auth_adapter.d.ts

@@ -0,0 +1,76 @@
+import { EmulatorEnv, KeyStorer } from "firebase-auth-cloudflare-workers";
+import { Context, MiddlewareHandler } from "hono";
+import { WorkersAuthAdapterBase } from "../src/workers_auth_adapter_base";
+/**
+ * Options for Firebase Authentication adapter.
+ *
+ * Firebase Authenticationアダプターのオプション。
+ */
+export interface FirebaseAuthOptions {
+    /**
+     * Firebase project ID.
+     *
+     * FirebaseプロジェクトID。
+     */
+    projectId: string;
+    /**
+     * Store for Firebase public keys.
+     *
+     * Firebase公開鍵の保存先。
+     */
+    keyStore?: KeyStorer | undefined;
+    /**
+     * Whether to check if the ID token was revoked.
+     *
+     * IDトークンの失効を確認するかどうか。
+     */
+    checkRevoked?: boolean | undefined;
+    /**
+     * Emulator environment settings.
+     *
+     * エミュレーター環境設定。
+     */
+    emulatorEnv?: EmulatorEnv | undefined;
+    /**
+     * Seconds to tolerate clock skew.
+     *
+     * 時刻ずれを許容する秒数。
+     */
+    clockSkewSeconds?: number | undefined;
+    /**
+     * Authorization header name.
+     *
+     * Authorizationヘッダー名。
+     */
+    authorizationHeader?: string | undefined;
+    /**
+     * Response returned when authentication fails.
+     *
+     * 認証失敗時に返すレスポンス。
+     */
+    unauthorizedResponse?: (context: Context, error?: unknown) => Response | Promise<Response>;
+}
+/**
+ * Firebase public key store using the Cloudflare Cache API.
+ *
+ * Cloudflare Cache APIを利用したFirebase公開鍵ストア。
+ */
+export declare class FirebaseCacheApiKeyStorer implements KeyStorer {
+    constructor(projectId: string, cacheName?: string);
+    private readonly cacheKey;
+    private readonly cacheName;
+    get<ExpectedValue = unknown>(): Promise<ExpectedValue | null>;
+    put(value: string, expirationTtl: number): Promise<void>;
+}
+/**
+ * Middleware for Firebase Authentication.
+ *
+ * Firebase Authentication用のミドルウェア。
+ */
+export declare class FirebaseAuthAdapter extends WorkersAuthAdapterBase {
+    constructor(options: FirebaseAuthOptions);
+    private readonly options;
+    build(): MiddlewareHandler;
+    private getBearerToken;
+    private unauthorized;
+}

package/dist/lib/adapters/firebase_auth_adapter.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FirebaseAuthAdapter = exports.FirebaseCacheApiKeyStorer = void 0;
+const firebase_auth_cloudflare_workers_1 = require("firebase-auth-cloudflare-workers");
+const workers_auth_adapter_base_1 = require("../src/workers_auth_adapter_base");
+/**
+ * Firebase public key store using the Cloudflare Cache API.
+ *
+ * Cloudflare Cache APIを利用したFirebase公開鍵ストア。
+ */
+class FirebaseCacheApiKeyStorer {
+    constructor(projectId, cacheName = "firebase-pubkeys-v1") {
+        this.cacheKey = new Request(`https://cache.internal/firebase/pubkeys/${projectId}`);
+        this.cacheName = cacheName;
+    }
+    cacheKey;
+    cacheName;
+    async get() {
+        const cache = await caches.open(this.cacheName);
+        const hit = await cache.match(this.cacheKey);
+        if (!hit) {
+            return null;
+        }
+        return await hit.json();
+    }
+    async put(value, expirationTtl) {
+        const cache = await caches.open(this.cacheName);
+        await cache.put(this.cacheKey, new Response(value, {
+            headers: {
+                "content-type": "application/json",
+                "cache-control": `public, max-age=${expirationTtl}`,
+            },
+        }));
+    }
+}
+exports.FirebaseCacheApiKeyStorer = FirebaseCacheApiKeyStorer;
+/**
+ * Middleware for Firebase Authentication.
+ *
+ * Firebase Authentication用のミドルウェア。
+ */
+class FirebaseAuthAdapter extends workers_auth_adapter_base_1.WorkersAuthAdapterBase {
+    constructor(options) {
+        super();
+        this.options = options;
+    }
+    options;
+    build() {
+        return async (context, next) => {
+            const token = this.getBearerToken(context);
+            if (!token) {
+                return await this.unauthorized(context);
+            }
+            try {
+                const keyStore = this.options.keyStore ?? new FirebaseCacheApiKeyStorer(this.options.projectId);
+                const auth = firebase_auth_cloudflare_workers_1.Auth.getOrInitialize(this.options.projectId, keyStore);
+                const decoded = await auth.verifyIdToken(token, this.options.checkRevoked, this.options.emulatorEnv, this.options.clockSkewSeconds);
+                this.setAuthContext(context, {
+                    uid: decoded.uid,
+                    token: decoded,
+                });
+                await next();
+            }
+            catch (error) {
+                return await this.unauthorized(context, error);
+            }
+        };
+    }
+    getBearerToken(context) {
+        const headerName = this.options.authorizationHeader ?? "Authorization";
+        const authorization = context.req.header(headerName);
+        if (!authorization) {
+            return undefined;
+        }
+        const match = authorization.match(/^Bearer\s+(.+)$/i);
+        return match?.[1];
+    }
+    async unauthorized(context, error) {
+        if (this.options.unauthorizedResponse) {
+            return await this.options.unauthorizedResponse(context, error);
+        }
+        return context.json({ error: "Unauthorized" }, 401);
+    }
+}
+exports.FirebaseAuthAdapter = FirebaseAuthAdapter;
+//# sourceMappingURL=firebase_auth_adapter.js.map

package/dist/lib/adapters/firebase_auth_adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase_auth_adapter.js","sourceRoot":"","sources":["../../../src/lib/adapters/firebase_auth_adapter.ts"],"names":[],"mappings":";;;AAAA,uFAK0C;AAE1C,gFAA0E;AA0D1E;;;;GAIG;AACH,MAAa,yBAAyB;IAClC,YACI,SAAiB,EACjB,YAAoB,qBAAqB;QAEzC,IAAI,CAAC,QAAQ,GAAG,IAAI,OAAO,CAAC,2CAA2C,SAAS,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;IAEgB,QAAQ,CAAU;IAClB,SAAS,CAAS;IAEnC,KAAK,CAAC,GAAG;QACL,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,MAAM,GAAG,CAAC,IAAI,EAAmB,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,aAAqB;QAC1C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,KAAK,CAAC,GAAG,CACX,IAAI,CAAC,QAAQ,EACb,IAAI,QAAQ,CAAC,KAAK,EAAE;YAChB,OAAO,EAAE;gBACL,cAAc,EAAE,kBAAkB;gBAClC,eAAe,EAAE,mBAAmB,aAAa,EAAE;aACtD;SACJ,CAAC,CACL,CAAC;IACN,CAAC;CACJ;AAjCD,8DAiCC;AAED;;;;GAIG;AACH,MAAa,mBAAoB,SAAQ,kDAAsB;IAC3D,YAAY,OAA4B;QACpC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;IAEgB,OAAO,CAAsB;IAE9C,KAAK;QACD,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACT,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAC5C,CAAC;YACD,IAAI,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAChG,MAAM,IAAI,GAAG,uCAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CACpC,KAAK,EACL,IAAI,CAAC,OAAO,CAAC,YAAY,EACzB,IAAI,CAAC,OAAO,CAAC,WAAW,EACxB,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAChC,CAAC;gBACF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;oBACzB,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,KAAK,EAAE,OAA0B;iBACpC,CAAC,CAAC;gBACH,MAAM,IAAI,EAAE,CAAC;YACjB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACnD,CAAC;QACL,CAAC,CAAC;IACN,CAAC;IAEO,cAAc,CAAC,OAAgB;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,eAAe,CAAC;QACvE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,OAAgB,EAAE,KAAe;QACxD,IAAI,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC;YACpC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;CACJ;AAlDD,kDAkDC"}

package/dist/lib/adapters/none_auth_adapter.d.ts

@@ -0,0 +1,10 @@
+import { MiddlewareHandler } from "hono";
+import { WorkersAuthAdapterBase } from "../src/workers_auth_adapter_base";
+/**
+ * Adapter that does not perform authentication.
+ *
+ * 認証を行わないアダプター。
+ */
+export declare class NoneAuthAdapter extends WorkersAuthAdapterBase {
+    build(): MiddlewareHandler;
+}

package/dist/lib/adapters/none_auth_adapter.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NoneAuthAdapter = void 0;
+const workers_auth_adapter_base_1 = require("../src/workers_auth_adapter_base");
+/**
+ * Adapter that does not perform authentication.
+ *
+ * 認証を行わないアダプター。
+ */
+class NoneAuthAdapter extends workers_auth_adapter_base_1.WorkersAuthAdapterBase {
+    build() {
+        return async (_, next) => {
+            await next();
+        };
+    }
+}
+exports.NoneAuthAdapter = NoneAuthAdapter;
+//# sourceMappingURL=none_auth_adapter.js.map

package/dist/lib/adapters/none_auth_adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"none_auth_adapter.js","sourceRoot":"","sources":["../../../src/lib/adapters/none_auth_adapter.ts"],"names":[],"mappings":";;;AACA,gFAA0E;AAE1E;;;;GAIG;AACH,MAAa,eAAgB,SAAQ,kDAAsB;IACvD,KAAK;QACD,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YACrB,MAAM,IAAI,EAAE,CAAC;QACjB,CAAC,CAAC;IACN,CAAC;CACJ;AAND,0CAMC"}

package/dist/lib/adapters/rules_middleware.d.ts

@@ -0,0 +1,45 @@
+import { Context, MiddlewareHandler } from "hono";
+import { RulesEngine, RulesEvaluationInput, RulesEvaluationResult } from "../src/rules/rules_engine";
+import { WorkersRuleAdapterBase } from "../src/workers_rule_adapter_base";
+/**
+ * Input builder for rules adapter.
+ *
+ * rulesアダプター用の入力生成関数。
+ */
+export type RulesEvaluationInputBuilder = (context: Context) => RulesEvaluationInput | Promise<RulesEvaluationInput>;
+/**
+ * Options for RulesEngineRuleAdapter.
+ *
+ * RulesEngineRuleAdapterのオプション。
+ */
+export interface RulesEngineRuleOptions {
+    /**
+     * Rules engine to evaluate access rules.
+     *
+     * アクセスルールを評価するrulesエンジン。
+     */
+    engine: RulesEngine;
+    /**
+     * Builder that produces rules evaluation input from the request context.
+     *
+     * リクエストコンテキストからrules評価入力を生成するビルダー。
+     */
+    getEvaluationInput: RulesEvaluationInputBuilder;
+    /**
+     * Response returned when access is denied.
+     *
+     * アクセスが拒否された場合に返すレスポンス。
+     */
+    deniedResponse?: (context: Context, result: RulesEvaluationResult) => Response | Promise<Response>;
+}
+/**
+ * Middleware adapter that evaluates rules using a RulesEngine.
+ *
+ * RulesEngineを用いてrulesを評価するミドルウェアアダプター。
+ */
+export declare class RulesEngineRuleAdapter extends WorkersRuleAdapterBase {
+    constructor(options: RulesEngineRuleOptions);
+    private readonly options;
+    build(): MiddlewareHandler;
+    private denied;
+}

package/dist/lib/adapters/rules_middleware.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RulesEngineRuleAdapter = void 0;
+const workers_rule_adapter_base_1 = require("../src/workers_rule_adapter_base");
+/**
+ * Middleware adapter that evaluates rules using a RulesEngine.
+ *
+ * RulesEngineを用いてrulesを評価するミドルウェアアダプター。
+ */
+class RulesEngineRuleAdapter extends workers_rule_adapter_base_1.WorkersRuleAdapterBase {
+    constructor(options) {
+        super();
+        this.options = options;
+    }
+    options;
+    build() {
+        return async (context, next) => {
+            const authentication = context.get("authentication");
+            const input = await this.options.getEvaluationInput(context);
+            const result = await this.options.engine.evaluate({
+                ...input,
+                authentication: input.authentication ?? authentication,
+            });
+            if (!result.allowed) {
+                return await this.denied(context, result);
+            }
+            this.setRulesContext(context, result);
+            await next();
+        };
+    }
+    async denied(context, result) {
+        if (this.options.deniedResponse) {
+            return await this.options.deniedResponse(context, result);
+        }
+        return context.json({
+            error: "denied",
+            rule: result.rulePath,
+        }, 403);
+    }
+}
+exports.RulesEngineRuleAdapter = RulesEngineRuleAdapter;
+//# sourceMappingURL=rules_middleware.js.map

package/dist/lib/adapters/rules_middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules_middleware.js","sourceRoot":"","sources":["../../../src/lib/adapters/rules_middleware.ts"],"names":[],"mappings":";;;AAOA,gFAA0E;AA0C1E;;;;GAIG;AACH,MAAa,sBAAuB,SAAQ,kDAAsB;IAC9D,YAAY,OAA+B;QACvC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;IAEgB,OAAO,CAAyB;IAEjD,KAAK;QACD,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC3B,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAmC,CAAC;YACvF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAC9C,GAAG,KAAK;gBACR,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,cAAc;aACzD,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC9C,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACtC,MAAM,IAAI,EAAE,CAAC;QACjB,CAAC,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,MAAM,CAChB,OAAgB,EAChB,MAA6B;QAE7B,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YAC9B,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC;YAChB,KAAK,EAAE,QAAQ;YACf,IAAI,EAAE,MAAM,CAAC,QAAQ;SACxB,EAAE,GAAG,CAAC,CAAC;IACZ,CAAC;CACJ;AApCD,wDAoCC"}

package/dist/lib/middlewares/index.d.ts

@@ -1,2 +1,3 @@
-export * from "./firebase_authentication_middleware";
-export * from "./no_authentication_middleware";
+export * from "../adapters/rules_middleware";
+export { FirebaseAuthAdapter as FirebaseAuthenticationMiddleware, FirebaseAuthOptions as FirebaseAuthenticationMiddlewareOptions, FirebaseCacheApiKeyStorer, } from "../adapters/firebase_auth_adapter";
+export { NoneAuthAdapter as NoAuthenticationMiddleware, } from "../adapters/none_auth_adapter";

package/dist/lib/middlewares/index.js

@@ -14,6 +14,11 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./firebase_authentication_middleware"), exports);
-__exportStar(require("./no_authentication_middleware"), exports);
+exports.NoAuthenticationMiddleware = exports.FirebaseCacheApiKeyStorer = exports.FirebaseAuthenticationMiddleware = void 0;
+__exportStar(require("../adapters/rules_middleware"), exports);
+var firebase_auth_adapter_1 = require("../adapters/firebase_auth_adapter");
+Object.defineProperty(exports, "FirebaseAuthenticationMiddleware", { enumerable: true, get: function () { return firebase_auth_adapter_1.FirebaseAuthAdapter; } });
+Object.defineProperty(exports, "FirebaseCacheApiKeyStorer", { enumerable: true, get: function () { return firebase_auth_adapter_1.FirebaseCacheApiKeyStorer; } });
+var none_auth_adapter_1 = require("../adapters/none_auth_adapter");
+Object.defineProperty(exports, "NoAuthenticationMiddleware", { enumerable: true, get: function () { return none_auth_adapter_1.NoneAuthAdapter; } });
 //# sourceMappingURL=index.js.map

package/dist/lib/middlewares/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/middlewares/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uEAAqD;AACrD,iEAA+C"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/middlewares/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,+DAA6C;AAC7C,2EAI2C;AAHvC,yIAAA,mBAAmB,OAAoC;AAEvD,kIAAA,yBAAyB,OAAA;AAE7B,mEAEuC;AADnC,+HAAA,eAAe,OAA8B"}

package/dist/lib/middlewares/rules_middleware.d.ts

@@ -0,0 +1,29 @@
+import { Context, MiddlewareHandler } from "hono";
+import { RulesEngine, RulesEvaluationInput, RulesEvaluationResult } from "../src/rules/rules_engine";
+/**
+ * Input builder for rules middleware.
+ *
+ * rulesミドルウェア用の入力生成関数。
+ */
+export type RulesMiddlewareInputBuilder = (context: Context) => RulesEvaluationInput | Promise<RulesEvaluationInput>;
+/**
+ * Options for rules middleware.
+ *
+ * rulesミドルウェアのオプション。
+ */
+export interface RulesMiddlewareOptions {
+    engine: RulesEngine;
+    getEvaluationInput: RulesMiddlewareInputBuilder;
+}
+/**
+ * Create rules middleware.
+ *
+ * rulesミドルウェアを作成します。
+ */
+export declare function rulesMiddleware(options: RulesMiddlewareOptions): MiddlewareHandler;
+/**
+ * Get rules evaluation result from Hono context.
+ *
+ * Hono contextからrules評価結果を取得します。
+ */
+export declare function getRulesEvaluationResult(context: Context): RulesEvaluationResult | undefined;

package/dist/lib/middlewares/rules_middleware.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rulesMiddleware = rulesMiddleware;
+exports.getRulesEvaluationResult = getRulesEvaluationResult;
+/**
+ * Create rules middleware.
+ *
+ * rulesミドルウェアを作成します。
+ */
+function rulesMiddleware(options) {
+    return async (context, next) => {
+        const authentication = context.get("authentication");
+        const input = await options.getEvaluationInput(context);
+        const result = await options.engine.evaluate({
+            ...input,
+            authentication: input.authentication ?? authentication,
+        });
+        if (!result.allowed) {
+            return context.json({
+                error: "denied",
+                rule: result.rulePath,
+            }, 403);
+        }
+        context.set("rules", result);
+        await next();
+    };
+}
+/**
+ * Get rules evaluation result from Hono context.
+ *
+ * Hono contextからrules評価結果を取得します。
+ */
+function getRulesEvaluationResult(context) {
+    return context.get("rules");
+}
+//# sourceMappingURL=rules_middleware.js.map

package/dist/lib/middlewares/rules_middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules_middleware.js","sourceRoot":"","sources":["../../../src/lib/middlewares/rules_middleware.ts"],"names":[],"mappings":";;AAgCA,0CAiBC;AAOD,4DAEC;AA/BD;;;;GAIG;AACH,SAAgB,eAAe,CAAC,OAA+B;IAC3D,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAmC,CAAC;QACvF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;YACzC,GAAG,KAAK;YACR,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,cAAc;SACzD,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC,IAAI,CAAC;gBAChB,KAAK,EAAE,QAAQ;gBACf,IAAI,EAAE,MAAM,CAAC,QAAQ;aACxB,EAAE,GAAG,CAAC,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,EAAE,CAAC;IACjB,CAAC,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,SAAgB,wBAAwB,CAAC,OAAgB;IACrD,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,CAAsC,CAAC;AACrE,CAAC"}

package/dist/lib/src/rules/path_matcher.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Result of matching a rule path against a request path.
+ *
+ * ルールパスとリクエストパスのマッチ結果。
+ */
+export interface RulePathMatch {
+    matched: boolean;
+    rulePath: string;
+    literalSegments: number;
+    wildcardSegments: number;
+    deepWildcardSegments: number;
+    matchedSegments: number;
+}
+/**
+ * Match rule path to request path.
+ *
+ * ルールパスをリクエストパスに照合します。
+ */
+export declare function matchRulePath(rulePath: string, requestPath: string): RulePathMatch;
+/**
+ * Compare matches by specificity.
+ *
+ * マッチ結果を具体度で比較します。
+ */
+export declare function compareRulePathMatch(a: RulePathMatch, b: RulePathMatch): number;
+/**
+ * Sort matches from the most specific to the least specific.
+ *
+ * マッチ結果を具体度の高い順に並べます。
+ */
+export declare function sortRulePathMatches(matches: RulePathMatch[]): RulePathMatch[];

package/dist/lib/src/rules/path_matcher.js

@@ -0,0 +1,105 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.matchRulePath = matchRulePath;
+exports.compareRulePathMatch = compareRulePathMatch;
+exports.sortRulePathMatches = sortRulePathMatches;
+const rules_loader_1 = require("./rules_loader");
+/**
+ * Match rule path to request path.
+ *
+ * ルールパスをリクエストパスに照合します。
+ */
+function matchRulePath(rulePath, requestPath) {
+    (0, rules_loader_1.validateRulePath)(rulePath);
+    const ruleSegments = splitPath(rulePath);
+    const requestSegments = splitPath(requestPath);
+    let literalSegments = 0;
+    let wildcardSegments = 0;
+    let deepWildcardSegments = 0;
+    for (let i = 0; i < ruleSegments.length; i++) {
+        const ruleSegment = ruleSegments[i];
+        if (ruleSegment === "**") {
+            deepWildcardSegments = 1;
+            return {
+                matched: true,
+                rulePath,
+                literalSegments,
+                wildcardSegments,
+                deepWildcardSegments,
+                matchedSegments: requestSegments.length,
+            };
+        }
+        const requestSegment = requestSegments[i];
+        if (requestSegment === undefined) {
+            return createUnmatched(rulePath);
+        }
+        if (ruleSegment === "*") {
+            wildcardSegments++;
+            continue;
+        }
+        if (ruleSegment !== requestSegment) {
+            return createUnmatched(rulePath);
+        }
+        literalSegments++;
+    }
+    if (ruleSegments.length !== requestSegments.length) {
+        return createUnmatched(rulePath);
+    }
+    return {
+        matched: true,
+        rulePath,
+        literalSegments,
+        wildcardSegments,
+        deepWildcardSegments,
+        matchedSegments: requestSegments.length,
+    };
+}
+/**
+ * Compare matches by specificity.
+ *
+ * マッチ結果を具体度で比較します。
+ */
+function compareRulePathMatch(a, b) {
+    if (a.literalSegments !== b.literalSegments) {
+        return b.literalSegments - a.literalSegments;
+    }
+    if (a.deepWildcardSegments !== b.deepWildcardSegments) {
+        return a.deepWildcardSegments - b.deepWildcardSegments;
+    }
+    if (a.wildcardSegments !== b.wildcardSegments) {
+        return a.wildcardSegments - b.wildcardSegments;
+    }
+    if (a.matchedSegments !== b.matchedSegments) {
+        return b.matchedSegments - a.matchedSegments;
+    }
+    return a.rulePath.localeCompare(b.rulePath);
+}
+/**
+ * Sort matches from the most specific to the least specific.
+ *
+ * マッチ結果を具体度の高い順に並べます。
+ */
+function sortRulePathMatches(matches) {
+    return [...matches].sort(compareRulePathMatch);
+}
+function splitPath(path) {
+    if (path.length === 0 || path.startsWith("/") || path.endsWith("/")) {
+        return [];
+    }
+    const segments = path.split("/");
+    if (segments.some((segment) => segment.length === 0)) {
+        return [];
+    }
+    return segments;
+}
+function createUnmatched(rulePath) {
+    return {
+        matched: false,
+        rulePath,
+        literalSegments: 0,
+        wildcardSegments: 0,
+        deepWildcardSegments: 0,
+        matchedSegments: 0,
+    };
+}
+//# sourceMappingURL=path_matcher.js.map

package/dist/lib/src/rules/path_matcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path_matcher.js","sourceRoot":"","sources":["../../../../src/lib/src/rules/path_matcher.ts"],"names":[],"mappings":";;AAqBA,sCA6CC;AAOD,oDAcC;AAOD,kDAEC;AAhGD,iDAAkD;AAgBlD;;;;GAIG;AACH,SAAgB,aAAa,CAAC,QAAgB,EAAE,WAAmB;IAC/D,IAAA,+BAAgB,EAAC,QAAQ,CAAC,CAAC;IAC3B,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,eAAe,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAE7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACvB,oBAAoB,GAAG,CAAC,CAAC;YACzB,OAAO;gBACH,OAAO,EAAE,IAAI;gBACb,QAAQ;gBACR,eAAe;gBACf,gBAAgB;gBAChB,oBAAoB;gBACpB,eAAe,EAAE,eAAe,CAAC,MAAM;aAC1C,CAAC;QACN,CAAC;QACD,MAAM,cAAc,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;YACtB,gBAAgB,EAAE,CAAC;YACnB,SAAS;QACb,CAAC;QACD,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;YACjC,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QACD,eAAe,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;QACjD,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,OAAO;QACH,OAAO,EAAE,IAAI;QACb,QAAQ;QACR,eAAe;QACf,gBAAgB;QAChB,oBAAoB;QACpB,eAAe,EAAE,eAAe,CAAC,MAAM;KAC1C,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,CAAgB,EAAE,CAAgB;IACnE,IAAI,CAAC,CAAC,eAAe,KAAK,CAAC,CAAC,eAAe,EAAE,CAAC;QAC1C,OAAO,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,CAAC,oBAAoB,KAAK,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACpD,OAAO,CAAC,CAAC,oBAAoB,GAAG,CAAC,CAAC,oBAAoB,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC5C,OAAO,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,gBAAgB,CAAC;IACnD,CAAC;IACD,IAAI,CAAC,CAAC,eAAe,KAAK,CAAC,CAAC,eAAe,EAAE,CAAC;QAC1C,OAAO,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,CAAC;IACjD,CAAC;IACD,OAAO,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,SAAgB,mBAAmB,CAAC,OAAwB;IACxD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC3B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACrC,OAAO;QACH,OAAO,EAAE,KAAK;QACd,QAAQ;QACR,eAAe,EAAE,CAAC;QAClB,gBAAgB,EAAE,CAAC;QACnB,oBAAoB,EAAE,CAAC;QACvB,eAAe,EAAE,CAAC;KACrB,CAAC;AACN,CAAC"}