@mathrunet/masamune_cloudflare 3.1.5 → 3.1.7

package/dist/lib/src/rules/rules_engine.d.ts

@@ -0,0 +1,72 @@
+import { WorkersAuthContext } from "../workers_auth_adapter_base";
+import { RulesAccessRule, RulesConfig, RulesOperation, RulesOperationKey } from "./rules_loader";
+/**
+ * Input for evaluating rules.
+ *
+ * rules評価入力。
+ */
+export interface RulesEvaluationInput {
+    path: string;
+    operation: RulesOperation | RulesOperationKey;
+    authentication?: WorkersAuthContext | undefined;
+    fetchDocument?: (() => Promise<Record<string, unknown> | null | undefined>) | undefined;
+}
+/**
+ * Result of evaluating rules.
+ *
+ * rules評価結果。
+ */
+export interface RulesEvaluationResult {
+    allowed: boolean;
+    rulePath?: string | undefined;
+    access?: RulesAccessRule | undefined;
+}
+/**
+ * Arguments for building a rules path.
+ *
+ * rulesパス生成引数。
+ */
+export interface RulesPathArguments {
+    database: string;
+    table: string;
+    indexKey: string;
+}
+/**
+ * Rules engine.
+ *
+ * rules評価エンジン。
+ */
+export declare class RulesEngine {
+    constructor(config: RulesConfig | unknown);
+    private readonly config;
+    /**
+     * Evaluate rules for the given path and operation.
+     *
+     * 指定したパスと操作に対してrulesを評価します。
+     */
+    evaluate(input: RulesEvaluationInput): Promise<RulesEvaluationResult>;
+}
+/**
+ * Build a normalized rules path.
+ *
+ * 正規化されたrulesパスを生成します。
+ */
+export declare function buildRulesPath({ database, table, indexKey }: RulesPathArguments): string;
+/**
+ * Normalize HTTP method to rules operation.
+ *
+ * HTTPメソッドをrules操作に正規化します。
+ */
+export declare function normalizeHttpMethodToRulesOperation(method: string): RulesOperation;
+/**
+ * Normalize rules operation aliases.
+ *
+ * rules操作エイリアスを正規化します。
+ */
+export declare function normalizeRulesOperation(operation: RulesOperation | RulesOperationKey): RulesOperation;
+/**
+ * Resolve operation lookup order.
+ *
+ * 操作の解決順を取得します。
+ */
+export declare function resolveRulesOperation(operation: RulesOperation | RulesOperationKey): RulesOperationKey[];

package/dist/lib/src/rules/rules_engine.js

@@ -0,0 +1,174 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RulesEngine = void 0;
+exports.buildRulesPath = buildRulesPath;
+exports.normalizeHttpMethodToRulesOperation = normalizeHttpMethodToRulesOperation;
+exports.normalizeRulesOperation = normalizeRulesOperation;
+exports.resolveRulesOperation = resolveRulesOperation;
+const rules_loader_1 = require("./rules_loader");
+const path_matcher_1 = require("./path_matcher");
+/**
+ * Rules engine.
+ *
+ * rules評価エンジン。
+ */
+class RulesEngine {
+    constructor(config) {
+        this.config = (0, rules_loader_1.loadRulesConfig)(config);
+    }
+    config;
+    /**
+     * Evaluate rules for the given path and operation.
+     *
+     * 指定したパスと操作に対してrulesを評価します。
+     */
+    async evaluate(input) {
+        const operation = normalizeRulesOperation(input.operation);
+        const matches = Object.keys(this.config.rules)
+            .map((rulePath) => (0, path_matcher_1.matchRulePath)(rulePath, input.path))
+            .filter((match) => match.matched);
+        if (matches.length === 0) {
+            return { allowed: false };
+        }
+        const sortedMatches = (0, path_matcher_1.sortRulePathMatches)(matches);
+        const resolved = resolveInheritedRule(sortedMatches.map((match) => {
+            return {
+                rulePath: match.rulePath,
+                entry: this.config.rules[match.rulePath],
+            };
+        }));
+        const access = resolveAccessRule(resolved.entry, operation);
+        if (!access) {
+            return {
+                allowed: false,
+                rulePath: resolved.rulePath,
+            };
+        }
+        return {
+            allowed: await evaluateAccessRule(access, input.authentication, input.fetchDocument),
+            rulePath: resolved.rulePath,
+            access,
+        };
+    }
+}
+exports.RulesEngine = RulesEngine;
+/**
+ * Build a normalized rules path.
+ *
+ * 正規化されたrulesパスを生成します。
+ */
+function buildRulesPath({ database, table, indexKey }) {
+    return [
+        "database",
+        encodeRulesPathSegment(database),
+        "table",
+        encodeRulesPathSegment(table),
+        encodeRulesPathSegment(indexKey),
+    ].join("/");
+}
+/**
+ * Normalize HTTP method to rules operation.
+ *
+ * HTTPメソッドをrules操作に正規化します。
+ */
+function normalizeHttpMethodToRulesOperation(method) {
+    switch (method.toUpperCase()) {
+        case "GET":
+            return "get";
+        case "POST":
+            return "create";
+        case "PUT":
+            return "update";
+        case "DELETE":
+            return "delete";
+        default:
+            throw new Error(`Unsupported HTTP method for rules: ${method}`);
+    }
+}
+/**
+ * Normalize rules operation aliases.
+ *
+ * rules操作エイリアスを正規化します。
+ */
+function normalizeRulesOperation(operation) {
+    switch (operation) {
+        case "read":
+            return "get";
+        case "write":
+            return "create";
+        case "get":
+        case "create":
+        case "update":
+        case "delete":
+            return operation;
+    }
+}
+/**
+ * Resolve operation lookup order.
+ *
+ * 操作の解決順を取得します。
+ */
+function resolveRulesOperation(operation) {
+    const normalized = normalizeRulesOperation(operation);
+    switch (normalized) {
+        case "get":
+            return ["get", "read"];
+        case "create":
+            return ["create", "write"];
+        case "update":
+            return ["update", "write"];
+        case "delete":
+            return ["delete", "write"];
+    }
+}
+function resolveInheritedRule(matches) {
+    const inherited = {};
+    let rulePath = matches[0]?.rulePath ?? "";
+    for (const match of [...matches].reverse()) {
+        if (!match.entry) {
+            continue;
+        }
+        rulePath = match.rulePath;
+        for (const [operation, access] of Object.entries(match.entry)) {
+            inherited[operation] = access;
+        }
+    }
+    return {
+        rulePath,
+        entry: inherited,
+    };
+}
+function resolveAccessRule(entry, operation) {
+    for (const operationKey of resolveRulesOperation(operation)) {
+        const access = entry[operationKey];
+        if (access) {
+            return access;
+        }
+    }
+    return undefined;
+}
+async function evaluateAccessRule(access, authentication, fetchDocument) {
+    switch (access) {
+        case "deny":
+            return false;
+        case "allow":
+            return true;
+        case "authenticated":
+            return !!authentication?.uid;
+        default: {
+            const uid = authentication?.uid;
+            if (!uid || !fetchDocument) {
+                return false;
+            }
+            const document = await fetchDocument();
+            return document?.[access.field] === uid;
+        }
+    }
+}
+function encodeRulesPathSegment(segment) {
+    if (segment.length === 0 || segment.includes("/")) {
+        throw new Error(`Invalid rules path segment: ${segment}`);
+    }
+    return segment;
+}
+//# sourceMappingURL=rules_engine.js.map

package/dist/lib/src/rules/rules_engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules_engine.js","sourceRoot":"","sources":["../../../../src/lib/src/rules/rules_engine.ts"],"names":[],"mappings":";;;AAkGA,wCAQC;AAOD,kFAaC;AAOD,0DAYC;AAOD,sDAYC;AAnKD,iDAOwB;AACxB,iDAAoE;AAoCpE;;;;GAIG;AACH,MAAa,WAAW;IACpB,YAAY,MAA6B;QACrC,IAAI,CAAC,MAAM,GAAG,IAAA,8BAAe,EAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAEgB,MAAM,CAAc;IAErC;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,KAA2B;QACtC,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;aACzC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAA,4BAAa,EAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;aACtD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,aAAa,GAAG,IAAA,kCAAmB,EAAC,OAAO,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAC9D,OAAO;gBACH,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;aAC3C,CAAC;QACN,CAAC,CAAC,CAAC,CAAC;QACJ,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC9B,CAAC;QACN,CAAC;QACD,OAAO;YACH,OAAO,EAAE,MAAM,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,aAAa,CAAC;YACpF,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,MAAM;SACT,CAAC;IACN,CAAC;CACJ;AAzCD,kCAyCC;AAED;;;;GAIG;AACH,SAAgB,cAAc,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAsB;IAC5E,OAAO;QACH,UAAU;QACV,sBAAsB,CAAC,QAAQ,CAAC;QAChC,OAAO;QACP,sBAAsB,CAAC,KAAK,CAAC;QAC7B,sBAAsB,CAAC,QAAQ,CAAC;KACnC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAgB,mCAAmC,CAAC,MAAc;IAC9D,QAAQ,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3B,KAAK,KAAK;YACN,OAAO,KAAK,CAAC;QACjB,KAAK,MAAM;YACP,OAAO,QAAQ,CAAC;QACpB,KAAK,KAAK;YACN,OAAO,QAAQ,CAAC;QACpB,KAAK,QAAQ;YACT,OAAO,QAAQ,CAAC;QACpB;YACI,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAgB,uBAAuB,CAAC,SAA6C;IACjF,QAAQ,SAAS,EAAE,CAAC;QAChB,KAAK,MAAM;YACP,OAAO,KAAK,CAAC;QACjB,KAAK,OAAO;YACR,OAAO,QAAQ,CAAC;QACpB,KAAK,KAAK,CAAC;QACX,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACT,OAAO,SAAS,CAAC;IACzB,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,SAA6C;IAC/E,MAAM,UAAU,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACtD,QAAQ,UAAU,EAAE,CAAC;QACjB,KAAK,KAAK;YACN,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3B,KAAK,QAAQ;YACT,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/B,KAAK,QAAQ;YACT,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/B,KAAK,QAAQ;YACT,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CACzB,OAA8D;IAE9D,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,IAAI,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACf,SAAS;QACb,CAAC;QACD,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC1B,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5D,SAAS,CAAC,SAA8B,CAAC,GAAG,MAAM,CAAC;QACvD,CAAC;IACL,CAAC;IACD,OAAO;QACH,QAAQ;QACR,KAAK,EAAE,SAAS;KACnB,CAAC;AACN,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAiB,EAAE,SAAyB;IACnE,KAAK,MAAM,YAAY,IAAI,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;QACnC,IAAI,MAAM,EAAE,CAAC;YACT,OAAO,MAAM,CAAC;QAClB,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC7B,MAAuB,EACvB,cAA+C,EAC/C,aAAuF;IAEvF,QAAQ,MAAM,EAAE,CAAC;QACb,KAAK,MAAM;YACP,OAAO,KAAK,CAAC;QACjB,KAAK,OAAO;YACR,OAAO,IAAI,CAAC;QAChB,KAAK,eAAe;YAChB,OAAO,CAAC,CAAC,cAAc,EAAE,GAAG,CAAC;QACjC,OAAO,CAAC,CAAC,CAAC;YACN,MAAM,GAAG,GAAG,cAAc,EAAE,GAAG,CAAC;YAChC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBACzB,OAAO,KAAK,CAAC;YACjB,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,aAAa,EAAE,CAAC;YACvC,OAAO,QAAQ,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC;QAC5C,CAAC;IACL,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC"}

package/dist/lib/src/rules/rules_loader.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Operation names supported by rules.json.
+ *
+ * rules.jsonでサポートする操作名。
+ */
+export type RulesOperation = "get" | "create" | "update" | "delete";
+/**
+ * Operation aliases supported by rules.json.
+ *
+ * rules.jsonでサポートする操作エイリアス。
+ */
+export type RulesOperationAlias = "read" | "write";
+/**
+ * Operation keys accepted in a rule entry.
+ *
+ * ルール内で指定可能な操作キー。
+ */
+export type RulesOperationKey = RulesOperation | RulesOperationAlias;
+/**
+ * Access rule for an operation.
+ *
+ * 操作に対するアクセスルール。
+ */
+export type RulesAccessRule = "deny" | "allow" | "authenticated" | RulesFieldMatchAccessRule;
+/**
+ * Field match access rule.
+ *
+ * フィールド一致アクセスルール。
+ */
+export interface RulesFieldMatchAccessRule {
+    type: "fieldMatch";
+    field: string;
+}
+/**
+ * Rule entry for a matched path.
+ *
+ * パスに対応するルール定義。
+ */
+export type RulesEntry = Partial<Record<RulesOperationKey, RulesAccessRule>>;
+/**
+ * Rule map keyed by path pattern.
+ *
+ * パスパターンをキーにしたルールマップ。
+ */
+export type RulesMap = Record<string, RulesEntry>;
+/**
+ * rules.json configuration.
+ *
+ * rules.json設定。
+ */
+export interface RulesConfig {
+    version: string;
+    rules: RulesMap;
+}
+/**
+ * Result of loading and validating rules.
+ *
+ * rulesの読み込み・検証結果。
+ */
+export interface LoadedRulesConfig extends RulesConfig {
+}
+/**
+ * Load and validate rules configuration.
+ *
+ * rules設定を読み込み、検証します。
+ */
+export declare function loadRulesConfig(input: unknown): LoadedRulesConfig;
+/**
+ * Validate a rule path.
+ *
+ * ルールパスを検証します。
+ */
+export declare function validateRulePath(path: string): void;

package/dist/lib/src/rules/rules_loader.js

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadRulesConfig = loadRulesConfig;
+exports.validateRulePath = validateRulePath;
+const allowedAccessValues = new Set(["deny", "allow", "authenticated"]);
+const allowedOperationKeys = new Set([
+    "get",
+    "create",
+    "update",
+    "delete",
+    "read",
+    "write",
+]);
+/**
+ * Load and validate rules configuration.
+ *
+ * rules設定を読み込み、検証します。
+ */
+function loadRulesConfig(input) {
+    if (!isRecord(input)) {
+        throw new Error("Rules config must be an object.");
+    }
+    if (typeof input.version !== "string" || input.version.length === 0) {
+        throw new Error("Rules config version must be a non-empty string.");
+    }
+    if (!isRecord(input.rules) || Array.isArray(input.rules)) {
+        throw new Error("Rules config rules must be an object map.");
+    }
+    const rules = {};
+    for (const [path, entry] of Object.entries(input.rules)) {
+        validateRulePath(path);
+        rules[path] = validateRulesEntry(path, entry);
+    }
+    return {
+        version: input.version,
+        rules,
+    };
+}
+/**
+ * Validate a rule path.
+ *
+ * ルールパスを検証します。
+ */
+function validateRulePath(path) {
+    if (path.length === 0) {
+        throw new Error("Rule path must be a non-empty string.");
+    }
+    if (path.startsWith("/") || path.endsWith("/")) {
+        throw new Error(`Rule path must not start or end with '/': ${path}`);
+    }
+    const segments = path.split("/");
+    if (segments.some((segment) => segment.length === 0)) {
+        throw new Error(`Rule path must not contain empty segments: ${path}`);
+    }
+    const deepWildcardIndex = segments.indexOf("**");
+    if (deepWildcardIndex >= 0 && deepWildcardIndex !== segments.length - 1) {
+        throw new Error(`'**' must be the last segment in rule path: ${path}`);
+    }
+}
+function validateRulesEntry(path, entry) {
+    if (!isRecord(entry) || Array.isArray(entry)) {
+        throw new Error(`Rule entry must be an object: ${path}`);
+    }
+    const result = {};
+    for (const [operation, access] of Object.entries(entry)) {
+        if (!allowedOperationKeys.has(operation)) {
+            throw new Error(`Unsupported rule operation '${operation}' in ${path}.`);
+        }
+        result[operation] = validateAccessRule(path, operation, access);
+    }
+    return result;
+}
+function validateAccessRule(path, operation, access) {
+    if (typeof access === "string") {
+        if (allowedAccessValues.has(access)) {
+            return access;
+        }
+        throw new Error(`Unsupported access rule '${access}' for ${operation} in ${path}.`);
+    }
+    if (isRecord(access)) {
+        if (access.type === "fieldMatch" && typeof access.field === "string" && access.field.length > 0) {
+            return {
+                type: "fieldMatch",
+                field: access.field,
+            };
+        }
+    }
+    throw new Error(`Invalid access rule for ${operation} in ${path}.`);
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null;
+}
+//# sourceMappingURL=rules_loader.js.map

package/dist/lib/src/rules/rules_loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules_loader.js","sourceRoot":"","sources":["../../../../src/lib/src/rules/rules_loader.ts"],"names":[],"mappings":";;AAwFA,0CAoBC;AAOD,4CAeC;AAzDD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;AACxE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACjC,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,OAAO;CACV,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAgB,eAAe,CAAC,KAAc;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;IACD,OAAO;QACH,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK;KACR,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,IAAY;IACzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,iBAAiB,IAAI,CAAC,IAAI,iBAAiB,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,KAAc;IACpD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,+BAA+B,SAAS,QAAQ,IAAI,GAAG,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,CAAC,SAA8B,CAAC,GAAG,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,SAAiB,EAAE,MAAe;IACxE,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,OAAO,MAAyB,CAAC;QACrC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,SAAS,SAAS,OAAO,IAAI,GAAG,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9F,OAAO;gBACH,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,MAAM,CAAC,KAAK;aACtB,CAAC;QACN,CAAC;IACL,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,OAAO,IAAI,GAAG,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACvD,CAAC"}

package/dist/lib/src/worker_adapter_base.d.ts

@@ -0,0 +1,14 @@
+import { MiddlewareHandler } from "hono";
+/**
+ * Base class for worker adapter for Cloudflare Workers.
+ *
+ * Cloudflare Workers用のワーカーアダプターのベースクラス。
+ */
+export declare abstract class WorkerAdapterBase {
+    /**
+     * Create Hono middleware.
+     *
+     * Honoミドルウェアを作成します。
+     */
+    abstract build(): MiddlewareHandler;
+}

package/dist/lib/src/worker_adapter_base.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkerAdapterBase = void 0;
+/**
+ * Base class for worker adapter for Cloudflare Workers.
+ *
+ * Cloudflare Workers用のワーカーアダプターのベースクラス。
+ */
+class WorkerAdapterBase {
+}
+exports.WorkerAdapterBase = WorkerAdapterBase;
+//# sourceMappingURL=worker_adapter_base.js.map

package/dist/lib/src/worker_adapter_base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker_adapter_base.js","sourceRoot":"","sources":["../../../src/lib/src/worker_adapter_base.ts"],"names":[],"mappings":";;;AAEA;;;;GAIG;AACH,MAAsB,iBAAiB;CAOtC;AAPD,8CAOC"}

package/dist/lib/src/workers_auth_adapter_base.d.ts

@@ -0,0 +1,36 @@
+import { Context } from "hono";
+import { WorkerAdapterBase } from "./worker_adapter_base";
+/**
+ * Authentication context for Cloudflare Workers.
+ *
+ * Cloudflare Workersの認証コンテキスト。
+ */
+export interface WorkersAuthContext {
+    /**
+     * User ID.
+     *
+     * ユーザーID。
+     */
+    uid?: string | undefined;
+    /**
+     * Decoded authentication token.
+     *
+     * デコード済みの認証トークン。
+     */
+    token?: {
+        [key: string]: any;
+    } | undefined;
+}
+/**
+ * Base class for authentication adapter for Cloudflare Workers.
+ *
+ * Cloudflare Workers用の認証アダプターのベースクラス。
+ */
+export declare abstract class WorkersAuthAdapterBase extends WorkerAdapterBase {
+    /**
+     * Set authentication context.
+     *
+     * 認証コンテキストを設定します。
+     */
+    protected setAuthContext(context: Context, authentication: WorkersAuthContext): void;
+}

package/dist/lib/src/workers_auth_adapter_base.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkersAuthAdapterBase = void 0;
+const worker_adapter_base_1 = require("./worker_adapter_base");
+/**
+ * Base class for authentication adapter for Cloudflare Workers.
+ *
+ * Cloudflare Workers用の認証アダプターのベースクラス。
+ */
+class WorkersAuthAdapterBase extends worker_adapter_base_1.WorkerAdapterBase {
+    /**
+     * Set authentication context.
+     *
+     * 認証コンテキストを設定します。
+     */
+    setAuthContext(context, authentication) {
+        context.set("authentication", authentication);
+    }
+}
+exports.WorkersAuthAdapterBase = WorkersAuthAdapterBase;
+//# sourceMappingURL=workers_auth_adapter_base.js.map

package/dist/lib/src/workers_auth_adapter_base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workers_auth_adapter_base.js","sourceRoot":"","sources":["../../../src/lib/src/workers_auth_adapter_base.ts"],"names":[],"mappings":";;;AACA,+DAA0D;AAuB1D;;;;GAIG;AACH,MAAsB,sBAAuB,SAAQ,uCAAiB;IAClE;;;;OAIG;IACO,cAAc,CACpB,OAAgB,EAChB,cAAkC;QAElC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IAClD,CAAC;CACJ;AAZD,wDAYC"}

package/dist/lib/src/workers_base.d.ts

@@ -1,5 +1,6 @@
 import { Hono } from "hono";
-import { WorkersAuthenticationMiddlewareBase } from "./workers_authentication_middleware_base";
+import { WorkersAuthAdapterBase } from "./workers_auth_adapter_base";
+import { WorkersRuleAdapterBase } from "./workers_rule_adapter_base";
 /**
  * Define Function data for Cloudflare Workers.
  *
@@ -77,6 +78,12 @@ export declare abstract class WorkersBase {
      * 認証ミドルウェアを適用します。
      */
     protected applyAuthentication(hono: Hono, options: WorkersOptions): Hono;
+    /**
+     * Apply rules middleware.
+     *
+     * rulesミドルウェアを適用します。
+     */
+    protected applyRules(hono: Hono, options: WorkersOptions): Hono;
 }
 /**
  * Specifies the options for the process.
@@ -85,11 +92,17 @@ export declare abstract class WorkersBase {
  */
 export interface WorkersOptions {
     /**
-     * Authentication middleware.
+     * Authentication adapter.
+     *
+     * 認証アダプター。
+     */
+    auth?: WorkersAuthAdapterBase | null | undefined;
+    /**
+     * Rules adapter.
      *
-     * 認証ミドルウェア。
+     * rulesアダプター。
      */
-    authentication?: WorkersAuthenticationMiddlewareBase | null | undefined;
+    rules?: WorkersRuleAdapterBase | null | undefined;
 }
 /**
  * Merge Workers options.

package/dist/lib/src/workers_base.js

@@ -67,8 +67,19 @@ class WorkersBase {
      * 認証ミドルウェアを適用します。
      */
     applyAuthentication(hono, options) {
-        if (options.authentication) {
-            hono.use("*", options.authentication.build());
+        if (options.auth) {
+            hono.use("*", options.auth.build());
+        }
+        return hono;
+    }
+    /**
+     * Apply rules middleware.
+     *
+     * rulesミドルウェアを適用します。
+     */
+    applyRules(hono, options) {
+        if (options.rules) {
+            hono.use("*", options.rules.build());
         }
         return hono;
     }
@@ -80,12 +91,19 @@ exports.WorkersBase = WorkersBase;
  * Workersのオプションをマージします。
  */
 function resolveWorkersOptions(defaultOptions = {}, options = {}) {
+    const defaultAuth = defaultOptions.auth;
+    const auth = options.auth;
+    const defaultRules = defaultOptions.rules;
+    const rules = options.rules;
     return {
         ...defaultOptions,
         ...options,
-        authentication: options.authentication === undefined
-            ? defaultOptions.authentication
-            : options.authentication,
+        auth: auth === undefined
+            ? defaultAuth
+            : auth,
+        rules: rules === undefined
+            ? defaultRules
+            : rules,
     };
 }
 //# sourceMappingURL=workers_base.js.map

package/dist/lib/src/workers_base.js.map

@@ -1 +1 @@
-{"version":3,"file":"workers_base.js","sourceRoot":"","sources":["../../../src/lib/src/workers_base.ts"],"names":[],"mappings":";;;AA6HA,sDAWC;AArID;;;;;;;;GAQG;AACH,MAAsB,WAAW;IAC7B;;;;;;;;OAQG;IACH,YAAY,EACR,IAAI,EACJ,IAAI,EACJ,IAAI,GAAG,EAAE,EACT,OAAO,GAUV;QACG,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACM,IAAI,CAAS;IAEtB;;;;;OAKG;IACM,IAAI,CAIiB;IAE9B;;;;OAIG;IACM,IAAI,CAAyB;IAEtC;;;;OAIG;IACM,OAAO,CAAiB;IASjC;;;;OAIG;IACO,cAAc,CAAC,iBAAiC,EAAE;QACxD,OAAO,qBAAqB,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACO,mBAAmB,CAAC,IAAU,EAAE,OAAuB;QAC7D,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AA5FD,kCA4FC;AAgBD;;;;GAIG;AACH,SAAgB,qBAAqB,CACjC,iBAAiC,EAAE,EACnC,UAA0B,EAAE;IAE5B,OAAO;QACH,GAAG,cAAc;QACjB,GAAG,OAAO;QACV,cAAc,EAAE,OAAO,CAAC,cAAc,KAAK,SAAS;YAChD,CAAC,CAAC,cAAc,CAAC,cAAc;YAC/B,CAAC,CAAC,OAAO,CAAC,cAAc;KAC/B,CAAC;AACN,CAAC"}
+{"version":3,"file":"workers_base.js","sourceRoot":"","sources":["../../../src/lib/src/workers_base.ts"],"names":[],"mappings":";;;AAiJA,sDAkBC;AA/JD;;;;;;;;GAQG;AACH,MAAsB,WAAW;IAC7B;;;;;;;;OAQG;IACH,YAAY,EACR,IAAI,EACJ,IAAI,EACJ,IAAI,GAAG,EAAE,EACT,OAAO,GAUV;QACG,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACM,IAAI,CAAS;IAEtB;;;;;OAKG;IACM,IAAI,CAIiB;IAE9B;;;;OAIG;IACM,IAAI,CAAyB;IAEtC;;;;OAIG;IACM,OAAO,CAAiB;IASjC;;;;OAIG;IACO,cAAc,CAAC,iBAAiC,EAAE;QACxD,OAAO,qBAAqB,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACO,mBAAmB,CAAC,IAAU,EAAE,OAAuB;QAC7D,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACO,UAAU,CAAC,IAAU,EAAE,OAAuB;QACpD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AAxGD,kCAwGC;AAuBD;;;;GAIG;AACH,SAAgB,qBAAqB,CACjC,iBAAiC,EAAE,EACnC,UAA0B,EAAE;IAE5B,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,OAAO;QACH,GAAG,cAAc;QACjB,GAAG,OAAO;QACV,IAAI,EAAE,IAAI,KAAK,SAAS;YACpB,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,IAAI;QACV,KAAK,EAAE,KAAK,KAAK,SAAS;YACtB,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,KAAK;KACd,CAAC;AACN,CAAC"}

package/dist/lib/src/workers_rule_adapter_base.d.ts

@@ -0,0 +1,27 @@
+import { Context, MiddlewareHandler } from "hono";
+import { RulesEvaluationResult } from "./rules/rules_engine";
+/**
+ * Base class for rules adapter for Cloudflare Workers.
+ *
+ * Cloudflare Workers用のrulesアダプターのベースクラス。
+ */
+export declare abstract class WorkersRuleAdapterBase {
+    /**
+     * Create Hono middleware.
+     *
+     * Honoミドルウェアを作成します。
+     */
+    abstract build(): MiddlewareHandler;
+    /**
+     * Set rules evaluation result to context.
+     *
+     * rules評価結果をコンテキストに設定します。
+     */
+    protected setRulesContext(context: Context, result: RulesEvaluationResult): void;
+    /**
+     * Get rules evaluation result from context.
+     *
+     * コンテキストからrules評価結果を取得します。
+     */
+    protected getRulesContext(context: Context): RulesEvaluationResult | undefined;
+}

package/dist/lib/src/workers_rule_adapter_base.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkersRuleAdapterBase = void 0;
+/**
+ * Base class for rules adapter for Cloudflare Workers.
+ *
+ * Cloudflare Workers用のrulesアダプターのベースクラス。
+ */
+class WorkersRuleAdapterBase {
+    /**
+     * Set rules evaluation result to context.
+     *
+     * rules評価結果をコンテキストに設定します。
+     */
+    setRulesContext(context, result) {
+        context.set("rules", result);
+    }
+    /**
+     * Get rules evaluation result from context.
+     *
+     * コンテキストからrules評価結果を取得します。
+     */
+    getRulesContext(context) {
+        return context.get("rules");
+    }
+}
+exports.WorkersRuleAdapterBase = WorkersRuleAdapterBase;
+//# sourceMappingURL=workers_rule_adapter_base.js.map