@ryusenkei/maezae 0.1.0 → 0.2.0

package/README.md

@@ -10,6 +10,7 @@ maezae の SDK（導入先のサイト向け）
 | `@ryusenkei/maezae/body` | 本文のブロックの型と描画の補助 |
 | `@ryusenkei/maezae/model` | コンテンツスキーマの型・ページのパス・画像の切り抜き |
 | `@ryusenkei/maezae/preview` | プレビューと下書きの取得の署名（ヘッダー `x-preview-signature`） |
+| `@ryusenkei/maezae/integrations` | 外の関数・Webhook が受け取る本文の型と署名の検証（ヘッダー `x-cms-signature`） |
 
 ## 取得（Cloudflare Workers の service binding）
 
@@ -35,3 +36,14 @@ import { SIGNED_HEADERS, verifyRequest } from '@ryusenkei/maezae/preview';
 
 const isPreview = await verifyRequest(env.PREVIEW_TOKEN, request, { header: SIGNED_HEADERS.preview });
 ```
+
+## 外の関数・Webhook の受け手
+
+- 鍵: 媒体の管理画面の「設定 → 連携」の登録ごとの署名の鍵
+
+```ts
+import { type PublishCheckRequest, SIGNED_HEADERS, verifyRequest } from '@ryusenkei/maezae/integrations';
+
+if (!(await verifyRequest(env.CMS_FUNCTION_SECRET, request, { header: SIGNED_HEADERS.outbound }))) return new Response(null, { status: 401 });
+const body = (await request.json()) as PublishCheckRequest;
+```

package/dist/body.d.ts

@@ -1,4 +1,4 @@
-import { a as ComponentBlock, c as InlineComponent, d as ListItem, f as Mark, h as Text, i as Body, l as Link, m as StandardBlock, o as HeadingLevel, p as Rich, r as Block, s as Inline, t as blockSchemaOf, u as List } from "./index-D11fUsoi.js";
+import { _ as Rich, a as PropType, c as Body, d as Inline, f as InlineComponent, g as Mark, h as ListItem, i as PropSchema, l as ComponentBlock, m as List, o as PropsSchema, p as Link, r as DeclaredComponent, s as Block, t as blockSchemaOf, u as HeadingLevel, v as StandardBlock, y as Text } from "./index-C8duwjns.js";
 /** meta description の長さの上限（検索結果で省略されにくい字数の目安） */
 export declare const DESCRIPTION_MAX = 120;
 /**
@@ -21,4 +21,4 @@ export declare const readMinOf: <M>(body: Body<M>, speed?: number) => number;
 export declare const linksOf: <M>(body: Body<M>) => string[];
 /** 本文のリンク先として許可する形か（保存の検査とサイトの出力で共通） */
 export declare const isSafeHref: (href: string) => boolean;
-export { type Block, type Body, type ComponentBlock, type HeadingLevel, type Inline, type InlineComponent, type Link, type List, type ListItem, type Mark, type Rich, type StandardBlock, type Text, blockSchemaOf };
+export { type Block, type Body, type ComponentBlock, type DeclaredComponent, type HeadingLevel, type Inline, type InlineComponent, type Link, type List, type ListItem, type Mark, type PropSchema, type PropType, type PropsSchema, type Rich, type StandardBlock, type Text, blockSchemaOf };

package/dist/body.js

@@ -1,18 +1,14 @@
 import { z } from "zod";
-// ../body/src/description.ts
-/** meta description の長さの上限（検索結果で省略されにくい字数の目安） */
-const DESCRIPTION_MAX = 120;
-/**
-* 説明を meta description の長さに調整
-* - 上限を超える場合: 上限までの最後の句点まで
-* - 句点がない場合: 上限で切って省略の記号
-*/
-function descriptionOf(excerpt, max = 120) {
-	if ([...excerpt].length <= max) return excerpt;
-	const head = [...excerpt].slice(0, max).join("");
-	const end = head.lastIndexOf("。");
-	return end > 0 ? head.slice(0, end + 1) : `${[...head].slice(0, max - 1).join("")}…`;
-}
+// ../body/src/components.ts
+/** 予約の名前（ブロック） */
+const RESERVED_BLOCK_NAMES = /* @__PURE__ */ new Set(["block"]);
+/** 予約の名前（インライン） */
+const RESERVED_INLINE_NAMES = /* @__PURE__ */ new Set([
+	"mark",
+	"sup",
+	"sub",
+	"link"
+]);
 // ../body/src/library.ts
 /** 注のコンポーネントの名前（本文からの算出 citesOf が参照） */
 const CITE = "cite";
@@ -231,6 +227,125 @@ const CORE_COMPONENTS = [
 ];
 /** 名前から核のコンポーネント（なければ undefined） */
 const coreComponentOf = (name) => CORE_COMPONENTS.find((c) => c.name === name);
+// ../body/src/declared.ts
+const NAME = /^[A-Za-z][A-Za-z0-9-]*$/;
+const KEY = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const propSchema = z.lazy(() => z.object({
+	type: z.enum([
+		"string",
+		"number",
+		"integer",
+		"boolean",
+		"array",
+		"object"
+	]),
+	title: z.string().min(1).optional(),
+	description: z.string().optional(),
+	enum: z.array(z.string().min(1)).min(1).optional(),
+	items: propSchema.optional(),
+	properties: z.record(z.string().regex(KEY, "引数の名前は英字で始まる英数字"), propSchema).optional(),
+	required: z.array(z.string()).optional()
+}).strict().superRefine((p, ctx) => {
+	if (p.enum && p.type !== "string") ctx.addIssue({
+		code: "custom",
+		message: "選択肢 enum は文字列の引数だけ",
+		path: ["enum"]
+	});
+	if (p.type === "array" !== (p.items !== void 0)) ctx.addIssue({
+		code: "custom",
+		message: "配列の引数は items が必要（ほかの型は不可）",
+		path: ["items"]
+	});
+	if ((p.properties || p.required) && p.type !== "object") ctx.addIssue({
+		code: "custom",
+		message: "properties・required はオブジェクトの引数だけ",
+		path: ["properties"]
+	});
+	for (const key of p.required ?? []) if (!p.properties?.[key]) ctx.addIssue({
+		code: "custom",
+		message: `必須の引数 ${key} が properties にない`,
+		path: ["required"]
+	});
+}));
+const declaredComponent = z.object({
+	name: z.string().regex(NAME, "部品の名前は英字で始まる英数字とハイフン"),
+	label: z.string().min(1, "部品の表示名が未入力"),
+	description: z.string().optional(),
+	inline: z.boolean().optional(),
+	props: z.object({
+		type: z.literal("object"),
+		properties: z.record(z.string().regex(KEY, "引数の名前は英字で始まる英数字"), propSchema),
+		required: z.array(z.string()).optional()
+	}).strict()
+}).strict().superRefine((d, ctx) => {
+	if (coreComponentOf(d.name) || RESERVED_BLOCK_NAMES.has(d.name) || RESERVED_INLINE_NAMES.has(d.name)) ctx.addIssue({
+		code: "custom",
+		message: `部品の名前 ${d.name} はコアの部品・予約の名前と重複`,
+		path: ["name"]
+	});
+	for (const key of d.props.required ?? []) if (!d.props.properties[key]) ctx.addIssue({
+		code: "custom",
+		message: `必須の引数 ${key} が properties にない`,
+		path: ["props", "required"]
+	});
+	if (d.inline) {
+		for (const [key, p] of Object.entries(d.props.properties)) if (p.type !== "string") ctx.addIssue({
+			code: "custom",
+			message: `インラインの部品の引数は文字列だけ: ${key}`,
+			path: [
+				"props",
+				"properties",
+				key
+			]
+		});
+	}
+});
+z.array(declaredComponent).superRefine((list, ctx) => {
+	const seen = /* @__PURE__ */ new Set();
+	list.forEach((d, i) => {
+		if (seen.has(d.name)) ctx.addIssue({
+			code: "custom",
+			message: `部品の名前 ${d.name} が重複`,
+			path: [i, "name"]
+		});
+		seen.add(d.name);
+	});
+});
+/** 1つの引数の検査（label はメッセージの項目名） */
+function propZod(p, label) {
+	const wrong = { error: (iss) => iss.input === void 0 ? `${label}が未入力` : `${label}の形が不正` };
+	switch (p.type) {
+		case "string": return p.enum ? z.enum(p.enum, wrong) : z.string(wrong);
+		case "number": return z.number(wrong);
+		case "integer": return z.number(wrong).int(`${label}は整数`);
+		case "boolean": return z.boolean(wrong);
+		case "array": return z.array(propZod(p.items, label), wrong);
+		case "object": return objectZod(p.properties ?? {}, p.required ?? [], wrong);
+	}
+}
+/** オブジェクトの引数の検査（必須でない引数は省略可、宣言にない引数は除去） */
+const objectZod = (properties, required, error) => z.object(Object.fromEntries(Object.entries(properties).map(([key, p]) => [key, required.includes(key) ? propZod(p, p.title ?? key) : propZod(p, p.title ?? key).optional()])), error);
+const propsCache = /* @__PURE__ */ new WeakMap();
+/** 宣言した部品の引数の検査（宣言ごとに作成を再利用） */
+function declaredPropsZod(d) {
+	let schema = propsCache.get(d);
+	if (!schema) propsCache.set(d, schema = objectZod(d.props.properties, d.props.required ?? [], { error: () => `${d.label}の引数の形が不正` }));
+	return schema;
+}
+// ../body/src/description.ts
+/** meta description の長さの上限（検索結果で省略されにくい字数の目安） */
+const DESCRIPTION_MAX = 120;
+/**
+* 説明を meta description の長さに調整
+* - 上限を超える場合: 上限までの最後の句点まで
+* - 句点がない場合: 上限で切って省略の記号
+*/
+function descriptionOf(excerpt, max = 120) {
+	if ([...excerpt].length <= max) return excerpt;
+	const head = [...excerpt].slice(0, max).join("");
+	const end = head.lastIndexOf("。");
+	return end > 0 ? head.slice(0, end + 1) : `${[...head].slice(0, max - 1).join("")}…`;
+}
 // ../body/src/derive.ts
 /** 読了時間の既定の分速（字/分） */
 const READING_SPEED = 500;
@@ -412,42 +527,61 @@ const text = z.object({
 	marks: z.array(z.enum(MARKS)).optional(),
 	link: link.optional()
 });
-const inlineComponent = z.object({
+/** 部品の props の検査（名前で核のコンポーネント、なければ宣言した部品、どちらもないか種類が違えば null） */
+function propsOf(name, inline, media, declared) {
+	const core = coreComponentOf(name);
+	if (core) return Boolean(core.inline) === inline ? core.props(media) : null;
+	const d = declared.find((c) => c.name === name);
+	return d && Boolean(d.inline) === inline ? declaredPropsZod(d) : null;
+}
+const inlineComponentOf = (declared) => z.object({
 	component: z.string().min(1),
 	props: z.record(z.string(), z.string()).optional(),
 	text: z.string().optional()
 }).superRefine((c, ctx) => {
-	const def = coreComponentOf(c.component);
-	if (!def?.inline) return void ctx.addIssue({
+	const props = propsOf(c.component, true, z.never(), declared);
+	if (!props) return void ctx.addIssue({
 		code: "custom",
 		message: `インラインのコンポーネント ${c.component} はない`
 	});
-	const r = def.props(z.never()).safeParse(c.props ?? {});
+	const r = props.safeParse(c.props ?? {});
 	if (!r.success) for (const issue of r.error.issues) ctx.addIssue({
 		code: "custom",
 		message: issue.message,
 		path: ["props", ...issue.path]
 	});
 });
-const inline = z.union([
-	z.string(),
-	inlineComponent,
-	text
-]);
-const richOf = (cites) => z.array(inline).transform((items) => cites ? items.flatMap((item) => typeof item === "string" ? liftCites(item) : [item]) : items);
+/** インラインの1要素（component を持つ要素は部品としてだけ検査、union で文字の形に落ちて部品の検査を素通りしないため） */
+function inlineItemOf(declared) {
+	const component = inlineComponentOf(declared);
+	const plain = z.union([z.string(), text]);
+	return z.unknown().transform((value, ctx) => {
+		const r = (typeof value === "object" && value !== null && "component" in value ? component : plain).safeParse(value);
+		if (r.success) return r.data;
+		for (const issue of r.error.issues) ctx.addIssue({
+			code: "custom",
+			message: issue.message,
+			path: issue.path
+		});
+		return z.NEVER;
+	});
+}
+const richOf = (cites, declared) => z.array(inlineItemOf(declared)).transform((items) => cites ? items.flatMap((item) => typeof item === "string" ? liftCites(item) : [item]) : items);
 const variant = z.string().optional();
-/** 本文の1ブロックの検査（profile は本文の設定、media は画像の参照の検査） */
-function blockSchemaOf(profile, media) {
-	const rich = richOf(profile.components.includes(CITE));
-	const list = z.lazy(() => z.object({
+/** 本文の1ブロックの検査（profile は本文の設定、media は画像の参照の検査、declared は導入先が宣言した部品） */
+function blockSchemaOf(profile, media, declared = []) {
+	const rich = richOf(profile.components.includes(CITE), declared);
+	const list = z.object({
 		type: z.literal("list"),
 		ordered: z.boolean().optional(),
 		items: z.array(z.object({
 			content: rich,
-			children: list.optional()
+			get children() {
+				return list.optional();
+			}
 		})),
 		variant
-	}));
+	});
 	const heading = z.object({
 		type: z.literal("heading"),
 		level: z.union([
@@ -462,7 +596,7 @@ function blockSchemaOf(profile, media) {
 		id: z.string().optional(),
 		variant
 	});
-	return z.union([
+	return z.discriminatedUnion("type", [
 		z.object({
 			type: z.literal("paragraph"),
 			content: rich,
@@ -513,15 +647,15 @@ function blockSchemaOf(profile, media) {
 	]).transform((block, ctx) => {
 		let out = block;
 		if (out.type === "component") {
-			const def = coreComponentOf(out.name);
-			if (!def || def.inline) {
+			const props = propsOf(out.name, false, media, declared);
+			if (!props) {
 				ctx.addIssue({
 					code: "custom",
 					message: `コンポーネント ${out.name} はない`
 				});
 				return z.NEVER;
 			}
-			const r = def.props(media).safeParse(out.props);
+			const r = props.safeParse(out.props);
 			if (!r.success) {
 				for (const issue of r.error.issues) ctx.addIssue({
 					code: "custom",

package/dist/delivery.d.ts

@@ -1,5 +1,5 @@
-import { C as FieldDef, D as PageEntry, E as PageDef, S as CountDef, _ as Media, a as CropRect, b as ContentModel, h as Hotspot, m as Crop, n as DateString, t as Clock, w as Publishing, x as ContentType, y as ContentFormat } from "./index-57nirXxn.js";
-import { i as Body } from "./index-D11fUsoi.js";
+import { C as ContentType, E as Publishing, O as PageDef, S as ContentModel, T as FieldDef, _ as Hotspot, g as Crop, k as PageEntry, n as DateString, s as CropRect, t as Clock, w as CountDef, x as ContentFormat, y as Media } from "./index-CLDe_wBc.js";
+import { c as Body } from "./index-C8duwjns.js";
 /** 配信 API の1件の値（項目の key と id・updated_at） */
 type Item = Readonly<Record<string, unknown>>;
 /** 配信 API が解決した実体（hotspot・crop は元の画像に対する割合） */

package/dist/{index-D11fUsoi.d.ts → index-C8duwjns.d.ts}

@@ -90,6 +90,32 @@ type ComponentBlock = Readonly<{
 type Block<M> = StandardBlock<M> | ComponentBlock;
 /** 本文 */
 type Body<M> = readonly Block<M>[];
+/** 引数の型 */
+type PropType = 'string' | 'number' | 'integer' | 'boolean' | 'array' | 'object';
+/** 1つの引数の形（title は管理画面の項目名、enum は文字列の選択肢、items は配列の要素、properties・required はオブジェクトの中） */
+type PropSchema = Readonly<{
+  type: PropType;
+  title?: string;
+  description?: string;
+  enum?: readonly string[];
+  items?: PropSchema;
+  properties?: Readonly<Record<string, PropSchema>>;
+  required?: readonly string[];
+}>;
+/** 引数の全体の形（最上位はオブジェクト） */
+type PropsSchema = Readonly<{
+  type: 'object';
+  properties: Readonly<Record<string, PropSchema>>;
+  required?: readonly string[];
+}>;
+/** 導入先が宣言する部品（label は管理画面の表示名、inline の省略はブロック） */
+type DeclaredComponent = Readonly<{
+  name: string;
+  label: string;
+  description?: string;
+  inline?: boolean;
+  props: PropsSchema;
+}>;
 /** 本文の設定 */
 type BodyProfile = Readonly<{
   headings: readonly HeadingLevel[];
@@ -126,6 +152,6 @@ type BodyProfile = Readonly<{
   /** 使用できるコンポーネントの名前（ブロック・インライン） */
   components: readonly string[];
 }>;
-/** 本文の1ブロックの検査（profile は本文の設定、media は画像の参照の検査） */
-declare function blockSchemaOf<M>(profile: BodyProfile, media: z.ZodType<M>): z.ZodType<Block<M>>;
-export { ComponentBlock as a, InlineComponent as c, ListItem as d, Mark as f, Text as h, Body as i, Link as l, StandardBlock as m, BodyProfile as n, HeadingLevel as o, Rich as p, Block as r, Inline as s, blockSchemaOf as t, List as u };
+/** 本文の1ブロックの検査（profile は本文の設定、media は画像の参照の検査、declared は導入先が宣言した部品） */
+declare function blockSchemaOf<M>(profile: BodyProfile, media: z.ZodType<M>, declared?: readonly DeclaredComponent[]): z.ZodType<Block<M>>;
+export { Rich as _, PropType as a, Body as c, Inline as d, InlineComponent as f, Mark as g, ListItem as h, PropSchema as i, ComponentBlock as l, List as m, BodyProfile as n, PropsSchema as o, Link as p, DeclaredComponent as r, Block as s, blockSchemaOf as t, HeadingLevel as u, StandardBlock as v, Text as y };

package/dist/{index-57nirXxn.d.ts → index-CLDe_wBc.d.ts}

@@ -1,4 +1,4 @@
-import { n as BodyProfile } from "./index-D11fUsoi.js";
+import { n as BodyProfile, r as DeclaredComponent } from "./index-C8duwjns.js";
 import { z } from "zod";
 /** ページの行の値（項目の key と値、表の列・集計の値も含む） */
 type PageEntry = Readonly<Record<string, unknown>>;
@@ -188,6 +188,7 @@ type ContentType = Readonly<{
 /** コンテンツスキーマ（導入先ごとに1つ） */
 type ContentModel = Readonly<{
   types: readonly ContentType[];
+  components?: readonly DeclaredComponent[];
 }>;
 /** コンテンツスキーマの型（id から、なければ例外: 導入先の設定の誤り） */
 declare function typeOf(model: ContentModel, id: string): ContentType;
@@ -309,6 +310,10 @@ type CropRect = Readonly<{
 declare function cropRect(width: number, height: number, crop: Crop): CropRect;
 /** 元の画像に対する見せたい点を、切り抜いた後の画像に対する割合に変換（範囲の外は端に寄せる） */
 declare function croppedHotspot(hotspot: Hotspot, crop: Crop): Hotspot;
+/** 画像の型 */
+declare const IMAGE_TYPE: ContentType;
+/** 動画の型（配信と再生は最初に使用する場所が決まったときに実装） */
+declare const VIDEO_TYPE: ContentType;
 /** 暦の日付（`YYYY-MM-DD`） */
 type DateString = `${number}-${number}-${number}`;
 /** 日付だけの値（`YYYY-MM-DD`）か */
@@ -332,4 +337,4 @@ type Clock = Readonly<{
 }>;
 /** タイムゾーンの日時の変換を作成 */
 declare function createClock(timeZone: string): Clock;
-export { FieldDef as C, PageEntry as D, PageDef as E, pagePathOf as O, CountDef as S, typeOf as T, Media as _, CropRect as a, ContentModel as b, cropRect as c, stillOf as d, Asset as f, LocalImage as g, Hotspot as h, isDateOnly as i, publicPathOf as k, croppedHotspot as l, Crop as m, DateString as n, coverPosition as o, AssetRef as p, createClock as r, coverStart as s, Clock as t, objectPosition as u, mediaSchema as v, Publishing as w, ContentType as x, ContentFormat as y };
+export { pagePathOf as A, ContentType as C, typeOf as D, Publishing as E, PageDef as O, ContentModel as S, FieldDef as T, Hotspot as _, IMAGE_TYPE as a, mediaSchema as b, coverPosition as c, croppedHotspot as d, objectPosition as f, Crop as g, AssetRef as h, isDateOnly as i, publicPathOf as j, PageEntry as k, coverStart as l, Asset as m, DateString as n, VIDEO_TYPE as o, stillOf as p, createClock as r, CropRect as s, Clock as t, cropRect as u, LocalImage as v, CountDef as w, ContentFormat as x, Media as y };

package/dist/integrations.d.ts

@@ -0,0 +1,72 @@
+import { r as VerifyRequestOptions, s as verifyRequest, t as SIGNED_HEADERS } from "./signed-B_58gV21.js";
+/** 依頼する時点（save_check は型の保存前、publish_check は提出・公開の前の検査） */
+export declare const FUNCTION_HOOKS: readonly ["save_check", "publish_check"];
+/** 依頼する時点 */
+type FunctionHook = (typeof FUNCTION_HOOKS)[number];
+/** 保存前の検査の本文（id は作成なら null、values は宣言と拡張機能で補正した後の項目の値、user は操作した人のアカウントの ID とロール） */
+type SaveCheckRequest = Readonly<{
+  hook: 'save_check';
+  type: string;
+  id: string | null;
+  values: Readonly<Record<string, unknown>>;
+  user: Readonly<{
+    id: string;
+    role: string;
+  }>;
+  at: string;
+}>;
+/**
+ * 保存前の検査の応答（HTTP の状態は 2xx）
+ * - problems: 1件でもあれば保存を拒否（path は項目の key、message は画面に表示する理由）
+ * - values: 補正する項目だけの値（入力に重ねる、なしは補正なし）
+ */
+type SaveCheckResponse = Readonly<{
+  problems?: readonly Readonly<{
+    path: string;
+    message: string;
+  }>[];
+  values?: Readonly<Record<string, unknown>>;
+}>;
+/** 提出・公開前の検査の本文（stage は submit か publish、values は保存済みの行の値、id はテストの呼び出しだけ null） */
+type PublishCheckRequest = Readonly<{
+  hook: 'publish_check';
+  type: string;
+  id: string | null;
+  stage: 'submit' | 'publish';
+  values: Readonly<Record<string, unknown>>;
+  user: Readonly<{
+    id: string;
+    role: string;
+  }>;
+  at: string;
+}>;
+/** 提出・公開前の検査の応答（HTTP の状態は 2xx、problems が1件でもあれば提出・公開を拒否、値の補正はなし） */
+type PublishCheckResponse = Readonly<{
+  problems?: readonly Readonly<{
+    path: string;
+    message: string;
+  }>[];
+}>;
+/** 外の関数への依頼の本文 */
+type FunctionRequest = SaveCheckRequest | PublishCheckRequest;
+/** 送れる操作（レビューの依頼・公開・非公開・差し戻し） */
+declare const WEBHOOK_ACTIONS: readonly ["submitted", "published", "unpublished", "rejected"];
+/** 送れる操作 */
+type WebhookAction = (typeof WEBHOOK_ACTIONS)[number];
+/** 送れる出来事（編集機能を持つ型の <型の id>.<操作> と、拡張機能が宣言した出来事） */
+type WebhookEvent = `${string}.${string}`;
+/**
+ * json の形式の本文（編集機能を持つ型の出来事、署名はヘッダー x-cms-signature で登録ごとの鍵）
+ * - item: 行の ID と題、by: 操作した人の表示名、at: 送信の日時（ISO 8601）
+ */
+type WebhookBody = Readonly<{
+  event: WebhookEvent;
+  type: string;
+  item: Readonly<{
+    id: string;
+    title: string;
+  }>;
+  by: string;
+  at: string;
+}>;
+export { type FunctionHook, type FunctionRequest, type PublishCheckRequest, type PublishCheckResponse, SIGNED_HEADERS, type SaveCheckRequest, type SaveCheckResponse, type VerifyRequestOptions, type WebhookAction, type WebhookBody, type WebhookEvent, verifyRequest };

package/dist/integrations.js

@@ -0,0 +1,6 @@
+import { a as verifyRequest, t as SIGNED_HEADERS } from "./src-CA_67dWy.js";
+import "./src-BrLwIWaT.js";
+// ../cms-contract/src/functions.ts
+/** 依頼する時点（save_check は型の保存前、publish_check は提出・公開の前の検査） */
+const FUNCTION_HOOKS = ["save_check", "publish_check"];
+export { FUNCTION_HOOKS, SIGNED_HEADERS, verifyRequest };

package/dist/model.d.ts

@@ -1,2 +1,82 @@
-import { C as FieldDef, D as PageEntry, E as PageDef, O as pagePathOf, T as typeOf, _ as Media, a as CropRect, b as ContentModel, c as cropRect, d as stillOf, f as Asset, g as LocalImage, h as Hotspot, i as isDateOnly, k as publicPathOf, l as croppedHotspot, m as Crop, n as DateString, o as coverPosition, p as AssetRef, r as createClock, s as coverStart, t as Clock, u as objectPosition, v as mediaSchema, x as ContentType } from "./index-57nirXxn.js";
-export { type Asset, type AssetRef, type Clock, type ContentModel, type ContentType, type Crop, type CropRect, type DateString, type FieldDef, type Hotspot, type LocalImage, type Media, type PageDef, type PageEntry, coverPosition, coverStart, createClock, cropRect, croppedHotspot, isDateOnly, mediaSchema, objectPosition, pagePathOf, publicPathOf, stillOf, typeOf };
+import { A as pagePathOf, C as ContentType, D as typeOf, O as PageDef, S as ContentModel, T as FieldDef, _ as Hotspot, a as IMAGE_TYPE, b as mediaSchema, c as coverPosition, d as croppedHotspot, f as objectPosition, g as Crop, h as AssetRef, i as isDateOnly, j as publicPathOf, k as PageEntry, l as coverStart, m as Asset, n as DateString, o as VIDEO_TYPE, p as stillOf, r as createClock, s as CropRect, t as Clock, u as cropRect, v as LocalImage, y as Media } from "./index-CLDe_wBc.js";
+/** メニューのグループ（collapsed は既定で折りたたむ） */
+type MenuGroup = Readonly<{
+  id: string;
+  label: string;
+  collapsed?: boolean;
+  items: readonly string[];
+}>;
+/** メニューの1段（項目の id かグループ） */
+type MenuEntry = string | MenuGroup;
+/** 編集画面のセクション（label が空は見出しなし、collapsed は既定で折りたたむ） */
+type EditorSection = Readonly<{
+  id: string;
+  label: string;
+  collapsed?: boolean;
+  items: readonly string[];
+}>;
+/** コンテンツタイプの編集画面の配置（hidden は配置しない項目） */
+type EditorLayout = Readonly<{
+  sections: readonly EditorSection[];
+  hidden?: readonly string[];
+}>;
+/** 画面の設定（editors・columns のキーはコンテンツタイプの id） */
+type ScreenSettings = Readonly<{
+  menu: readonly MenuEntry[];
+  editors: Readonly<Record<string, EditorLayout>>;
+  columns: Readonly<Record<string, readonly string[]>>;
+}>;
+/** 操作 */
+declare const ACTIONS: readonly ["read", "create", "update", "publish", "delete"];
+/** 操作 */
+type Action = (typeof ACTIONS)[number];
+/** 段階 */
+declare const LEVELS: readonly ["all", "own", "approval", "none"];
+/** 段階 */
+type Level = (typeof LEVELS)[number];
+/** 権限の表（キーは対象の id、'*' は表にない対象の既定、操作がなければ不可） */
+type Permissions = Readonly<Record<string, Readonly<Partial<Record<Action, Level>>>>>;
+/** ビューで許可できる一括操作（assign: 担当者の割り当て、publish: 公開） */
+declare const VIEW_ACTIONS: readonly ["assign", "publish"];
+/** ビューで許可できる一括操作 */
+type ViewAction = (typeof VIEW_ACTIONS)[number];
+/** ビューの内容（filters は列の id ごとの絞り込みの値、query は検索の文、columns は表示する列、editable は一覧で編集する列） */
+type ViewDefinition = Readonly<{
+  filters: Readonly<Record<string, string>>;
+  query: string;
+  columns: readonly string[];
+  editable: readonly string[];
+  actions: readonly ViewAction[];
+}>;
+/** スキーマと設定の形式の名前 */
+export declare const CONFIG_FORMAT = "cms-config";
+/** スキーマと設定（schema はコンテンツスキーマ ContentModel・screens は画面設定 ScreenSettings の形、roles は管理者以外、views はチームのビュー） */
+type ConfigBundle = Readonly<{
+  format: typeof CONFIG_FORMAT;
+  version: 1;
+  exported_at: string;
+  schema: unknown;
+  screens: unknown;
+  roles: readonly Readonly<{
+    id: string;
+    label: string;
+    permissions: Permissions;
+  }>[];
+  views: readonly Readonly<{
+    id: string;
+    type: string;
+    label: string;
+    definition: ViewDefinition;
+    roles: readonly string[];
+  }>[];
+  extensions: readonly Readonly<{
+    id: string;
+    enabled: boolean;
+    settings: Readonly<Record<string, unknown>>;
+  }>[];
+}>;
+/** 中立の既定のスキーマ（新しい媒体の作成で適用する型: post・author・tag・image・video、設定の移入の土台） */
+export declare const DEFAULT_SCHEMA: ContentModel;
+/** 既定の画面設定（新しい媒体の作成で適用する中立の値、移入する screens の土台） */
+export declare const DEFAULT_SCREENS: ScreenSettings;
+export { type Asset, type AssetRef, type Clock, type ConfigBundle, type ContentModel, type ContentType, type Crop, type CropRect, type DateString, type FieldDef, type Hotspot, IMAGE_TYPE, type LocalImage, type Media, type PageDef, type PageEntry, type ScreenSettings, VIDEO_TYPE, coverPosition, coverStart, createClock, cropRect, croppedHotspot, isDateOnly, mediaSchema, objectPosition, pagePathOf, publicPathOf, stillOf, typeOf };

package/dist/model.js

@@ -1,4 +1,5 @@
 import { a as coverPosition, c as croppedHotspot, d as createClock, f as isDateOnly, i as typeOf, l as objectPosition, n as publicPathOf, o as coverStart, s as cropRect, t as pagePathOf, u as stillOf } from "./page-UEKb7_gu.js";
+import "./src-BrLwIWaT.js";
 import { z } from "zod";
 // ../model/src/asset.ts
 const unit = z.number().min(0).max(1);
@@ -28,4 +29,341 @@ const mediaSchema = z.union([mediaBase.extend({ kind: z.literal("image") }), med
 	poster: mediaBase
 })]);
 z.object({ asset: z.string().min(1) });
-export { coverPosition, coverStart, createClock, cropRect, croppedHotspot, isDateOnly, mediaSchema, objectPosition, pagePathOf, publicPathOf, stillOf, typeOf };
+// ../model/src/media.ts
+const file = [
+	{
+		key: "mime_type",
+		label: "形式",
+		type: "text",
+		required: "save",
+		description: "MIME タイプ"
+	},
+	{
+		key: "size",
+		label: "サイズ",
+		type: "number",
+		required: "save",
+		description: "バイト数"
+	},
+	{
+		key: "width",
+		label: "幅",
+		type: "number",
+		required: "save",
+		description: "px"
+	},
+	{
+		key: "height",
+		label: "高さ",
+		type: "number",
+		required: "save",
+		description: "px"
+	},
+	{
+		key: "alt",
+		label: "代替テキスト",
+		type: "text",
+		description: "使用する側の既定の値、使用する場所ごとに上書き可"
+	}
+];
+/** 画像の型 */
+const IMAGE_TYPE = {
+	id: "image",
+	label: "画像",
+	description: "見せたい点（hotspot）と切り抜き（crop）を画像ごとに1つ保持、切り抜く場所すべてで共通",
+	core: file,
+	fields: []
+};
+/** 動画の型（配信と再生は最初に使用する場所が決まったときに実装） */
+const VIDEO_TYPE = {
+	id: "video",
+	label: "動画",
+	core: [
+		...file,
+		{
+			key: "duration",
+			label: "長さ",
+			type: "number",
+			description: "秒"
+		},
+		{
+			key: "poster",
+			label: "ポスター画像",
+			type: "media",
+			accept: ["image"],
+			description: "読み込み前・動きを抑える設定・OG で代わりに表示"
+		}
+	],
+	fields: []
+};
+// ../cms-contract/src/transfer.ts
+/** スキーマと設定の形式の名前 */
+const CONFIG_FORMAT = "cms-config";
+// src/defaults.ts
+/** 中立の既定のスキーマ（新しい媒体の作成で適用する型: post・author・tag・image・video、設定の移入の土台） */
+const DEFAULT_SCHEMA = { "types": [
+	{
+		"id": "post",
+		"label": "投稿",
+		"table": "articles",
+		"publishing": "review",
+		"core": [
+			{
+				"key": "title",
+				"label": "タイトル",
+				"type": "text",
+				"required": "save"
+			},
+			{
+				"key": "writers",
+				"label": "著者",
+				"type": "reference",
+				"to": "author",
+				"multiple": true
+			},
+			{
+				"key": "image",
+				"label": "メインの画像",
+				"type": "media",
+				"accept": ["image"]
+			},
+			{
+				"key": "body",
+				"label": "本文",
+				"type": "body",
+				"profile": {
+					"headings": [
+						2,
+						3,
+						4
+					],
+					"marks": [
+						"strong",
+						"em",
+						"code",
+						"strike"
+					],
+					"list": {
+						"ordered": true,
+						"nested": true
+					},
+					"quote": {
+						"multiple": true,
+						"cite": true
+					},
+					"code": { "caption": false },
+					"table": {
+						"head": "optional",
+						"caption": "optional"
+					},
+					"divider": true,
+					"components": ["gallery", "link-card"]
+				}
+			},
+			{
+				"key": "published_at",
+				"label": "公開日時",
+				"type": "datetime"
+			},
+			{
+				"key": "revised_at",
+				"label": "更新日時",
+				"type": "datetime"
+			}
+		],
+		"fields": [{
+			"key": "tags",
+			"label": "タグ",
+			"type": "reference",
+			"to": "tag",
+			"multiple": true
+		}],
+		"pages": [{
+			"path": "/posts/{id}",
+			"public": [{
+				"key": "status",
+				"in": ["published"]
+			}, {
+				"key": "published_at",
+				"notFuture": true
+			}]
+		}]
+	},
+	{
+		"id": "author",
+		"label": "著者",
+		"fields": [
+			{
+				"key": "name",
+				"label": "名前",
+				"type": "text",
+				"required": "save"
+			},
+			{
+				"key": "bio",
+				"label": "紹介",
+				"type": "textarea"
+			},
+			{
+				"key": "portrait",
+				"label": "顔の画像",
+				"type": "media",
+				"accept": ["image"]
+			}
+		],
+		"pages": [{ "path": "/authors/{id}" }]
+	},
+	{
+		"id": "tag",
+		"label": "タグ",
+		"fields": [{
+			"key": "label",
+			"label": "名前",
+			"type": "text",
+			"required": "save"
+		}]
+	},
+	{
+		"id": "image",
+		"label": "画像",
+		"description": "見せたい点（hotspot）と切り抜き（crop）を画像ごとに1つ保持、切り抜く場所すべてで共通",
+		"core": [
+			{
+				"key": "mime_type",
+				"label": "形式",
+				"type": "text",
+				"required": "save",
+				"description": "MIME タイプ"
+			},
+			{
+				"key": "size",
+				"label": "サイズ",
+				"type": "number",
+				"required": "save",
+				"description": "バイト数"
+			},
+			{
+				"key": "width",
+				"label": "幅",
+				"type": "number",
+				"required": "save",
+				"description": "px"
+			},
+			{
+				"key": "height",
+				"label": "高さ",
+				"type": "number",
+				"required": "save",
+				"description": "px"
+			},
+			{
+				"key": "alt",
+				"label": "代替テキスト",
+				"type": "text",
+				"description": "使用する側の既定の値、使用する場所ごとに上書き可"
+			}
+		],
+		"fields": []
+	},
+	{
+		"id": "video",
+		"label": "動画",
+		"core": [
+			{
+				"key": "mime_type",
+				"label": "形式",
+				"type": "text",
+				"required": "save",
+				"description": "MIME タイプ"
+			},
+			{
+				"key": "size",
+				"label": "サイズ",
+				"type": "number",
+				"required": "save",
+				"description": "バイト数"
+			},
+			{
+				"key": "width",
+				"label": "幅",
+				"type": "number",
+				"required": "save",
+				"description": "px"
+			},
+			{
+				"key": "height",
+				"label": "高さ",
+				"type": "number",
+				"required": "save",
+				"description": "px"
+			},
+			{
+				"key": "alt",
+				"label": "代替テキスト",
+				"type": "text",
+				"description": "使用する側の既定の値、使用する場所ごとに上書き可"
+			},
+			{
+				"key": "duration",
+				"label": "長さ",
+				"type": "number",
+				"description": "秒"
+			},
+			{
+				"key": "poster",
+				"label": "ポスター画像",
+				"type": "media",
+				"accept": ["image"],
+				"description": "読み込み前・動きを抑える設定・OG で代わりに表示"
+			}
+		],
+		"fields": []
+	}
+] };
+/** 既定の画面設定（新しい媒体の作成で適用する中立の値、移入する screens の土台） */
+const DEFAULT_SCREENS = {
+	"menu": [
+		"dashboard",
+		"calendar",
+		{
+			"id": "content",
+			"label": "コンテンツ",
+			"items": ["type:post", "media"]
+		},
+		{
+			"id": "masters",
+			"label": "マスタ",
+			"items": ["type:tag", "type:author"]
+		}
+	],
+	"editors": { "post": { "sections": [
+		{
+			"id": "classify",
+			"label": "分類",
+			"items": ["writers", "tags"]
+		},
+		{
+			"id": "publish",
+			"label": "公開",
+			"items": ["published_at", "revised_at"]
+		},
+		{
+			"id": "excerpt",
+			"label": "説明",
+			"items": ["excerpt"]
+		},
+		{
+			"id": "image",
+			"label": "メインの画像",
+			"items": ["image"]
+		}
+	] } },
+	"columns": { "post": [
+		"status",
+		"writers",
+		"assignee",
+		"published_at",
+		"updated_at"
+	] }
+};
+export { CONFIG_FORMAT, DEFAULT_SCHEMA, DEFAULT_SCREENS, IMAGE_TYPE, VIDEO_TYPE, coverPosition, coverStart, createClock, cropRect, croppedHotspot, isDateOnly, mediaSchema, objectPosition, pagePathOf, publicPathOf, stillOf, typeOf };

package/dist/preview.d.ts

@@ -1,44 +1,2 @@
-/** 経路ごとのヘッダーの名前（署名と主体） */
-export declare const SIGNED_HEADERS: {
-  /** MCP → CMS の署名（鍵は MCP_TOKEN） */
-  readonly mcp: "x-mcp-signature";
-  /** MCP → CMS のログインのメールアドレス（署名の主体） */
-  readonly mcpEmail: "x-mcp-email";
-  /** CMS ⇄ サイトのプレビューと下書きの署名（鍵は PREVIEW_TOKEN） */
-  readonly preview: "x-preview-signature";
-  /** CMS → 外の送信先の Webhook・外の関数の署名（鍵は登録ごと、受け手は verifyParts と同じ手順で照合） */
-  readonly outbound: "x-cms-signature";
-};
-/** 署名の対象（body は本文、なしは空） */
-type SignedParts = Readonly<{
-  method: string;
-  url: string;
-  body?: string | ArrayBuffer | Uint8Array | null;
-  /** 主体（MCP のログインのメールアドレスなど、なしは空） */
-  subject?: string | null;
-}>;
-/** 署名のヘッダーの値（t=<秒>,v1=<署名>） */
-export declare function signParts(secret: string, parts: SignedParts, now?: number): Promise<string>;
-/** 署名の照合（形の誤り・時刻のずれの超過・不一致は false） */
-export declare function verifyParts(secret: string, header: string | null | undefined, parts: SignedParts, { now, maxSkewSec }?: {
-  now?: number;
-  maxSkewSec?: number;
-}): Promise<boolean>;
-/** 署名を付けたヘッダー（init のヘッダーに署名と主体を追加した新しい Headers） */
-export declare function signedHeaders(secret: string, { method, url, body, subject }: SignedParts, { header, subjectHeader, init, now }: Readonly<{
-  header: string;
-  subjectHeader?: string;
-  init?: HeadersInit;
-  now?: number;
-}>): Promise<Headers>;
-/** 署名つきのリクエストを照合する設定 */
-type VerifyRequestOptions = Readonly<{
-  /** 署名のヘッダーの名前 */
-  header: string;
-  /** 主体のヘッダーの名前（なしは主体なしで照合） */
-  subjectHeader?: string;
-  now?: number;
-}>;
-/** リクエストの署名の照合（本文は複製から読み込み、元のリクエストの本文は残す） */
-export declare function verifyRequest(secret: string | undefined, request: Request, { header, subjectHeader, now }: VerifyRequestOptions): Promise<boolean>;
-export type { SignedParts, VerifyRequestOptions };
+import { a as signedHeaders, i as signParts, n as SignedParts, o as verifyParts, r as VerifyRequestOptions, s as verifyRequest, t as SIGNED_HEADERS } from "./signed-B_58gV21.js";
+export { SIGNED_HEADERS, type SignedParts, type VerifyRequestOptions, signParts, signedHeaders, verifyParts, verifyRequest };

package/dist/preview.js

@@ -1,103 +1 @@
-// ../access/src/jwt.ts
-const CERTS_TTL_MS = 3e5;
-const REFRESH_INTERVAL_MS = 3e4;
-/** 公開鍵の一覧を保持する取得（取得の失敗は保持しない） */
-function cachedCerts(fetcher, clock = Date.now) {
-	const cache = /* @__PURE__ */ new Map();
-	return async (url, refresh = false) => {
-		const hit = cache.get(url);
-		const age = hit ? clock() - hit.at : Infinity;
-		if (hit && age < (refresh ? REFRESH_INTERVAL_MS : CERTS_TTL_MS)) return hit;
-		const fresh = await fetcher(url);
-		cache.set(url, {
-			keys: fresh.keys,
-			at: clock()
-		});
-		return fresh;
-	};
-}
-cachedCerts(async (url) => {
-	const res = await fetch(url);
-	if (!res.ok) throw new Error(`JWKS の取得に失敗（${res.status}）`);
-	return res.json();
-});
-/** base64url の復号 */
-const decodeBase64Url = (s) => Uint8Array.from(atob(s.replace(/-/g, "+").replace(/_/g, "/").padEnd(Math.ceil(s.length / 4) * 4, "=")), (c) => c.charCodeAt(0));
-// ../access/src/signed.ts
-const enc = new TextEncoder();
-/** 既定で許す時刻のずれ（秒） */
-const MAX_SKEW_SEC = 300;
-/** 経路ごとのヘッダーの名前（署名と主体） */
-const SIGNED_HEADERS = {
-	/** MCP → CMS の署名（鍵は MCP_TOKEN） */
-	mcp: "x-mcp-signature",
-	/** MCP → CMS のログインのメールアドレス（署名の主体） */
-	mcpEmail: "x-mcp-email",
-	/** CMS ⇄ サイトのプレビューと下書きの署名（鍵は PREVIEW_TOKEN） */
-	preview: "x-preview-signature",
-	/** CMS → 外の送信先の Webhook・外の関数の署名（鍵は登録ごと、受け手は verifyParts と同じ手順で照合） */
-	outbound: "x-cms-signature"
-};
-const base64Url = (bytes) => btoa(String.fromCharCode(...new Uint8Array(bytes))).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-const hmacKey = (secret) => crypto.subtle.importKey("raw", enc.encode(secret), {
-	name: "HMAC",
-	hash: "SHA-256"
-}, false, ["sign", "verify"]);
-async function messageOf(t, { method, url, body, subject }) {
-	const { pathname, search } = new URL(url);
-	const bytes = typeof body === "string" ? enc.encode(body) : body ? Uint8Array.from(new Uint8Array(body)) : /* @__PURE__ */ new Uint8Array();
-	const digest = base64Url(await crypto.subtle.digest("SHA-256", bytes));
-	return enc.encode([
-		"v1",
-		t,
-		method.toUpperCase(),
-		`${pathname}${search}`,
-		subject ?? "",
-		digest
-	].join("\n"));
-}
-/** 署名のヘッダーの値（t=<秒>,v1=<署名>） */
-async function signParts(secret, parts, now = Date.now()) {
-	const t = Math.floor(now / 1e3);
-	const sig = await crypto.subtle.sign("HMAC", await hmacKey(secret), await messageOf(t, parts));
-	return `t=${t},v1=${base64Url(sig)}`;
-}
-/** 署名の照合（形の誤り・時刻のずれの超過・不一致は false） */
-async function verifyParts(secret, header, parts, { now = Date.now(), maxSkewSec = MAX_SKEW_SEC } = {}) {
-	if (!secret || !header) return false;
-	const fields = Object.fromEntries(header.split(",").map((f) => f.trim().split("=", 2)));
-	const t = Number(fields.t);
-	if (!Number.isInteger(t) || !fields.v1 || Math.abs(now / 1e3 - t) > maxSkewSec) return false;
-	try {
-		return await crypto.subtle.verify("HMAC", await hmacKey(secret), decodeBase64Url(fields.v1), await messageOf(t, parts));
-	} catch {
-		return false;
-	}
-}
-/** 署名を付けたヘッダー（init のヘッダーに署名と主体を追加した新しい Headers） */
-async function signedHeaders(secret, { method, url, body, subject }, { header, subjectHeader, init, now }) {
-	const headers = new Headers(init);
-	if (subjectHeader && subject) headers.set(subjectHeader, subject);
-	headers.set(header, await signParts(secret, {
-		method,
-		url,
-		body: body ?? null,
-		subject: subjectHeader ? subject : null
-	}, now));
-	return headers;
-}
-/** リクエストの署名の照合（本文は複製から読み込み、元のリクエストの本文は残す） */
-async function verifyRequest(secret, request, { header, subjectHeader, now }) {
-	const value = request.headers.get(header);
-	if (!secret || !value) return false;
-	const body = request.body ? await request.clone().arrayBuffer() : null;
-	return verifyParts(secret, value, {
-		method: request.method,
-		url: request.url,
-		body,
-		subject: subjectHeader ? request.headers.get(subjectHeader) : null
-	}, now === void 0 ? {} : { now });
-}
-"0".repeat(32);
-"0".repeat(16);
-export { SIGNED_HEADERS, signParts, signedHeaders, verifyParts, verifyRequest };
+export { t as SIGNED_HEADERS, n as signParts, r as signedHeaders, i as verifyParts, a as verifyRequest } from "./src-CA_67dWy.js";

package/dist/signed-B_58gV21.d.ts

@@ -0,0 +1,44 @@
+/** 経路ごとのヘッダーの名前（署名と主体） */
+declare const SIGNED_HEADERS: {
+  /** MCP → CMS の署名（鍵は MCP_TOKEN） */
+  readonly mcp: "x-mcp-signature";
+  /** MCP → CMS のログインのメールアドレス（署名の主体） */
+  readonly mcpEmail: "x-mcp-email";
+  /** CMS ⇄ サイトのプレビューと下書きの署名（鍵は PREVIEW_TOKEN） */
+  readonly preview: "x-preview-signature";
+  /** CMS → 外の送信先の Webhook・外の関数の署名（鍵は登録ごと、受け手は verifyParts と同じ手順で照合） */
+  readonly outbound: "x-cms-signature";
+};
+/** 署名の対象（body は本文、なしは空） */
+type SignedParts = Readonly<{
+  method: string;
+  url: string;
+  body?: string | ArrayBuffer | Uint8Array | null;
+  /** 主体（MCP のログインのメールアドレスなど、なしは空） */
+  subject?: string | null;
+}>;
+/** 署名のヘッダーの値（t=<秒>,v1=<署名>） */
+declare function signParts(secret: string, parts: SignedParts, now?: number): Promise<string>;
+/** 署名の照合（形の誤り・時刻のずれの超過・不一致は false） */
+declare function verifyParts(secret: string, header: string | null | undefined, parts: SignedParts, { now, maxSkewSec }?: {
+  now?: number;
+  maxSkewSec?: number;
+}): Promise<boolean>;
+/** 署名を付けたヘッダー（init のヘッダーに署名と主体を追加した新しい Headers） */
+declare function signedHeaders(secret: string, { method, url, body, subject }: SignedParts, { header, subjectHeader, init, now }: Readonly<{
+  header: string;
+  subjectHeader?: string;
+  init?: HeadersInit;
+  now?: number;
+}>): Promise<Headers>;
+/** 署名つきのリクエストを照合する設定 */
+type VerifyRequestOptions = Readonly<{
+  /** 署名のヘッダーの名前 */
+  header: string;
+  /** 主体のヘッダーの名前（なしは主体なしで照合） */
+  subjectHeader?: string;
+  now?: number;
+}>;
+/** リクエストの署名の照合（本文は複製から読み込み、元のリクエストの本文は残す） */
+declare function verifyRequest(secret: string | undefined, request: Request, { header, subjectHeader, now }: VerifyRequestOptions): Promise<boolean>;
+export { signedHeaders as a, signParts as i, SignedParts as n, verifyParts as o, VerifyRequestOptions as r, verifyRequest as s, SIGNED_HEADERS as t };

package/dist/src-BrLwIWaT.js

@@ -0,0 +1,7 @@
+Object.fromEntries([
+	"read",
+	"create",
+	"update",
+	"publish",
+	"delete"
+].map((a) => [a, "all"]));

package/dist/src-CA_67dWy.js

@@ -0,0 +1,103 @@
+// ../access/src/jwt.ts
+const CERTS_TTL_MS = 3e5;
+const REFRESH_INTERVAL_MS = 3e4;
+/** 公開鍵の一覧を保持する取得（取得の失敗は保持しない） */
+function cachedCerts(fetcher, clock = Date.now) {
+	const cache = /* @__PURE__ */ new Map();
+	return async (url, refresh = false) => {
+		const hit = cache.get(url);
+		const age = hit ? clock() - hit.at : Infinity;
+		if (hit && age < (refresh ? REFRESH_INTERVAL_MS : CERTS_TTL_MS)) return hit;
+		const fresh = await fetcher(url);
+		cache.set(url, {
+			keys: fresh.keys,
+			at: clock()
+		});
+		return fresh;
+	};
+}
+cachedCerts(async (url) => {
+	const res = await fetch(url);
+	if (!res.ok) throw new Error(`JWKS の取得に失敗（${res.status}）`);
+	return res.json();
+});
+/** base64url の復号 */
+const decodeBase64Url = (s) => Uint8Array.from(atob(s.replace(/-/g, "+").replace(/_/g, "/").padEnd(Math.ceil(s.length / 4) * 4, "=")), (c) => c.charCodeAt(0));
+// ../access/src/signed.ts
+const enc = new TextEncoder();
+/** 既定で許す時刻のずれ（秒） */
+const MAX_SKEW_SEC = 300;
+/** 経路ごとのヘッダーの名前（署名と主体） */
+const SIGNED_HEADERS = {
+	/** MCP → CMS の署名（鍵は MCP_TOKEN） */
+	mcp: "x-mcp-signature",
+	/** MCP → CMS のログインのメールアドレス（署名の主体） */
+	mcpEmail: "x-mcp-email",
+	/** CMS ⇄ サイトのプレビューと下書きの署名（鍵は PREVIEW_TOKEN） */
+	preview: "x-preview-signature",
+	/** CMS → 外の送信先の Webhook・外の関数の署名（鍵は登録ごと、受け手は verifyParts と同じ手順で照合） */
+	outbound: "x-cms-signature"
+};
+const base64Url = (bytes) => btoa(String.fromCharCode(...new Uint8Array(bytes))).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+const hmacKey = (secret) => crypto.subtle.importKey("raw", enc.encode(secret), {
+	name: "HMAC",
+	hash: "SHA-256"
+}, false, ["sign", "verify"]);
+async function messageOf(t, { method, url, body, subject }) {
+	const { pathname, search } = new URL(url);
+	const bytes = typeof body === "string" ? enc.encode(body) : body ? Uint8Array.from(new Uint8Array(body)) : /* @__PURE__ */ new Uint8Array();
+	const digest = base64Url(await crypto.subtle.digest("SHA-256", bytes));
+	return enc.encode([
+		"v1",
+		t,
+		method.toUpperCase(),
+		`${pathname}${search}`,
+		subject ?? "",
+		digest
+	].join("\n"));
+}
+/** 署名のヘッダーの値（t=<秒>,v1=<署名>） */
+async function signParts(secret, parts, now = Date.now()) {
+	const t = Math.floor(now / 1e3);
+	const sig = await crypto.subtle.sign("HMAC", await hmacKey(secret), await messageOf(t, parts));
+	return `t=${t},v1=${base64Url(sig)}`;
+}
+/** 署名の照合（形の誤り・時刻のずれの超過・不一致は false） */
+async function verifyParts(secret, header, parts, { now = Date.now(), maxSkewSec = MAX_SKEW_SEC } = {}) {
+	if (!secret || !header) return false;
+	const fields = Object.fromEntries(header.split(",").map((f) => f.trim().split("=", 2)));
+	const t = Number(fields.t);
+	if (!Number.isInteger(t) || !fields.v1 || Math.abs(now / 1e3 - t) > maxSkewSec) return false;
+	try {
+		return await crypto.subtle.verify("HMAC", await hmacKey(secret), decodeBase64Url(fields.v1), await messageOf(t, parts));
+	} catch {
+		return false;
+	}
+}
+/** 署名を付けたヘッダー（init のヘッダーに署名と主体を追加した新しい Headers） */
+async function signedHeaders(secret, { method, url, body, subject }, { header, subjectHeader, init, now }) {
+	const headers = new Headers(init);
+	if (subjectHeader && subject) headers.set(subjectHeader, subject);
+	headers.set(header, await signParts(secret, {
+		method,
+		url,
+		body: body ?? null,
+		subject: subjectHeader ? subject : null
+	}, now));
+	return headers;
+}
+/** リクエストの署名の照合（本文は複製から読み込み、元のリクエストの本文は残す） */
+async function verifyRequest(secret, request, { header, subjectHeader, now }) {
+	const value = request.headers.get(header);
+	if (!secret || !value) return false;
+	const body = request.body ? await request.clone().arrayBuffer() : null;
+	return verifyParts(secret, value, {
+		method: request.method,
+		url: request.url,
+		body,
+		subject: subjectHeader ? request.headers.get(subjectHeader) : null
+	}, now === void 0 ? {} : { now });
+}
+"0".repeat(32);
+"0".repeat(16);
+export { verifyRequest as a, verifyParts as i, signParts as n, signedHeaders as r, SIGNED_HEADERS as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ryusenkei/maezae",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "maezae の導入先のサイト向けの SDK（配信 API の取得・本文の型・プレビューの署名）",
   "license": "UNLICENSED",
   "author": "RYUSENKEI",
@@ -27,6 +27,10 @@
     "./preview": {
       "types": "./dist/preview.d.ts",
       "default": "./dist/preview.js"
+    },
+    "./integrations": {
+      "types": "./dist/integrations.d.ts",
+      "default": "./dist/integrations.js"
     }
   },
   "files": [