@runlot/access 0.1.0-rc.73 → 0.1.0-rc.75

package/dist/index.d.ts

@@ -1,19 +1,21 @@
 export type AccessMode = "public" | "org" | "password" | "bypass";
 export type OrgRole = "admin" | "member" | "viewer";
 export interface Identity {
-    /** front 가 판정한 모드. `public` 이면 나머지는 비어 있다. */
+    /** The mode the front decided. When it is `public`, the rest is empty. */
     mode: AccessMode;
-    /** 사용자 id. `password` 모드는 `pw:…`, `bypass` 는 `bypass`. */
+    /** The user id. In `password` mode it is `pw:…`, in `bypass` it is
+     *  `bypass`. */
     subject: string | null;
     email: string | null;
     orgRole: OrgRole | null;
 }
 /**
- * 요청의 신원. 헤더가 아예 없으면(front 밖에서 돈다 — 로컬 `wrangler dev` 류)
- * `public` 으로 읽는다: front 가 Mode 를 **항상** 붙이므로, 없는 것은 "판정이
- * 없었다" 이고 그것은 열린 것과 같다.
+ * The identity of the request. When the headers are absent entirely (running
+ * outside the front — local `wrangler dev` and the like) it reads as `public`:
+ * the front **always** attaches Mode, so its absence means "there was no
+ * decision", and that is the same as open.
  */
 export declare function identity(request: Request): Identity;
-/** 로그인이 있는가 — `public` 도 `bypass` 도 아닌 사람. */
+/** Is there a login — somebody who is neither `public` nor `bypass`. */
 export declare function isSignedIn(who: Identity): boolean;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAWA,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,KAAK,GAAG,UAAU,GAAG,QAAQ,CAAC;AAClE,MAAM,MAAM,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEpD,MAAM,WAAW,QAAQ;IACvB,8CAA8C;IAC9C,IAAI,EAAE,UAAU,CAAC;IACjB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CACzB;AAKD;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,CAYnD;AAED,8CAA8C;AAC9C,wBAAgB,UAAU,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAEjD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,KAAK,GAAG,UAAU,GAAG,QAAQ,CAAC;AAClE,MAAM,MAAM,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEpD,MAAM,WAAW,QAAQ;IACvB,0EAA0E;IAC1E,IAAI,EAAE,UAAU,CAAC;IACjB;oBACgB;IAChB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CACzB;AAKD;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,CAYnD;AAED,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAEjD"}

package/dist/index.js

@@ -1,19 +1,23 @@
-// `identity(request)` — front 가 붙인 신원을 읽는다 (docs/access.md §4.2).
+// `identity(request)` — reads the identity the front attached
+// (docs/access.md §4.2).
 //
-// `env.auth` 가 아니라 요청에서 읽는 이유는 취향이 아니라 제약이다: `env` 는
-// 워커 수명 동안 고정된 묶음이고 신원은 요청마다 다른 값이다. 요청에서 읽으면
-// 암묵 저장소(AsyncLocalStorage)가 스트리밍·waitUntil 경계에서 끊기는 문제가
-// 아예 없다.
+// Reading it from the request rather than from `env.auth` is a constraint, not
+// a taste: `env` is a bundle fixed for the lifetime of the worker, and the
+// identity is a different value on every request. Reading it from the request
+// means the problem of an implicit store (AsyncLocalStorage) being cut at a
+// streaming or waitUntil boundary does not exist at all.
 //
-// 헤더는 front 가 인바운드 `Runlot-*` 를 전부 지운 뒤 붙이므로 위조가 안 된다
-// (proto/front-headers.md). 이 함수는 그것을 **믿는다** — 워커가 front 를 지나지
-// 않고 직접 열리는 배치는 없다.
+// The headers cannot be forged, because the front attaches them after erasing
+// every inbound `Runlot-*` (proto/front-headers.md). This function **trusts**
+// that — there is no deployment where a worker is opened directly without
+// passing through the front.
 const MODES = new Set(["public", "org", "password", "bypass"]);
 const ROLES = new Set(["admin", "member", "viewer"]);
 /**
- * 요청의 신원. 헤더가 아예 없으면(front 밖에서 돈다 — 로컬 `wrangler dev` 류)
- * `public` 으로 읽는다: front 가 Mode 를 **항상** 붙이므로, 없는 것은 "판정이
- * 없었다" 이고 그것은 열린 것과 같다.
+ * The identity of the request. When the headers are absent entirely (running
+ * outside the front — local `wrangler dev` and the like) it reads as `public`:
+ * the front **always** attaches Mode, so its absence means "there was no
+ * decision", and that is the same as open.
  */
 export function identity(request) {
     const h = request.headers;
@@ -29,7 +33,7 @@ export function identity(request) {
         orgRole: rawRole !== null && ROLES.has(rawRole) ? rawRole : null,
     };
 }
-/** 로그인이 있는가 — `public` 도 `bypass` 도 아닌 사람. */
+/** Is there a login — somebody who is neither `public` nor `bypass`. */
 export function isSignedIn(who) {
     return who.mode === "org";
 }

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,EAAE;AACF,qDAAqD;AACrD,8CAA8C;AAC9C,yDAAyD;AACzD,SAAS;AACT,EAAE;AACF,sDAAsD;AACtD,gEAAgE;AAChE,oBAAoB;AAcpB,MAAM,KAAK,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AACpF,MAAM,KAAK,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE1E;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAgB;IACvC,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAC1B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,QAAQ,CAAC;IACxD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAe,CAAC;IACrE,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClF,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAChD,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC;QACvC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACnC,OAAO,EAAE,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAmB,CAAC,CAAC,CAAC,IAAI;KAC9E,CAAC;AACJ,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,UAAU,CAAC,GAAa;IACtC,OAAO,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,yBAAyB;AACzB,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,8EAA8E;AAC9E,4EAA4E;AAC5E,yDAAyD;AACzD,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,0EAA0E;AAC1E,6BAA6B;AAe7B,MAAM,KAAK,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AACpF,MAAM,KAAK,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAgB;IACvC,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAC1B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,QAAQ,CAAC;IACxD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAe,CAAC;IACrE,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClF,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAChD,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC;QACvC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACnC,OAAO,EAAE,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAmB,CAAC,CAAC,CAAC,IAAI;KAC9E,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,GAAa;IACtC,OAAO,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC;AAC5B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runlot/access",
-  "version": "0.1.0-rc.73",
+  "version": "0.1.0-rc.75",
   "description": "Reads the access identity (Runlot-Access-* headers) that Runlot attaches to a request",
   "publishConfig": {
     "access": "public"
@@ -26,7 +26,7 @@
     "@types/node": "^22.10.2",
     "esbuild": "^0.24.2",
     "typescript": "^5.7.2",
-    "@runlot/config": "0.1.0-rc.73"
+    "@runlot/config": "0.1.0-rc.75"
   },
   "scripts": {
     "test": "node build.mjs",