@ryusenkei/maezae 0.2.0 → 0.3.1

package/dist/model.d.ts

@@ -1,82 +1 @@
-import { A as pagePathOf, C as ContentType, D as typeOf, O as PageDef, S as ContentModel, T as FieldDef, _ as Hotspot, a as IMAGE_TYPE, b as mediaSchema, c as coverPosition, d as croppedHotspot, f as objectPosition, g as Crop, h as AssetRef, i as isDateOnly, j as publicPathOf, k as PageEntry, l as coverStart, m as Asset, n as DateString, o as VIDEO_TYPE, p as stillOf, r as createClock, s as CropRect, t as Clock, u as cropRect, v as LocalImage, y as Media } from "./index-CLDe_wBc.js";
-/** メニューのグループ（collapsed は既定で折りたたむ） */
-type MenuGroup = Readonly<{
-  id: string;
-  label: string;
-  collapsed?: boolean;
-  items: readonly string[];
-}>;
-/** メニューの1段（項目の id かグループ） */
-type MenuEntry = string | MenuGroup;
-/** 編集画面のセクション（label が空は見出しなし、collapsed は既定で折りたたむ） */
-type EditorSection = Readonly<{
-  id: string;
-  label: string;
-  collapsed?: boolean;
-  items: readonly string[];
-}>;
-/** コンテンツタイプの編集画面の配置（hidden は配置しない項目） */
-type EditorLayout = Readonly<{
-  sections: readonly EditorSection[];
-  hidden?: readonly string[];
-}>;
-/** 画面の設定（editors・columns のキーはコンテンツタイプの id） */
-type ScreenSettings = Readonly<{
-  menu: readonly MenuEntry[];
-  editors: Readonly<Record<string, EditorLayout>>;
-  columns: Readonly<Record<string, readonly string[]>>;
-}>;
-/** 操作 */
-declare const ACTIONS: readonly ["read", "create", "update", "publish", "delete"];
-/** 操作 */
-type Action = (typeof ACTIONS)[number];
-/** 段階 */
-declare const LEVELS: readonly ["all", "own", "approval", "none"];
-/** 段階 */
-type Level = (typeof LEVELS)[number];
-/** 権限の表（キーは対象の id、'*' は表にない対象の既定、操作がなければ不可） */
-type Permissions = Readonly<Record<string, Readonly<Partial<Record<Action, Level>>>>>;
-/** ビューで許可できる一括操作（assign: 担当者の割り当て、publish: 公開） */
-declare const VIEW_ACTIONS: readonly ["assign", "publish"];
-/** ビューで許可できる一括操作 */
-type ViewAction = (typeof VIEW_ACTIONS)[number];
-/** ビューの内容（filters は列の id ごとの絞り込みの値、query は検索の文、columns は表示する列、editable は一覧で編集する列） */
-type ViewDefinition = Readonly<{
-  filters: Readonly<Record<string, string>>;
-  query: string;
-  columns: readonly string[];
-  editable: readonly string[];
-  actions: readonly ViewAction[];
-}>;
-/** スキーマと設定の形式の名前 */
-export declare const CONFIG_FORMAT = "cms-config";
-/** スキーマと設定（schema はコンテンツスキーマ ContentModel・screens は画面設定 ScreenSettings の形、roles は管理者以外、views はチームのビュー） */
-type ConfigBundle = Readonly<{
-  format: typeof CONFIG_FORMAT;
-  version: 1;
-  exported_at: string;
-  schema: unknown;
-  screens: unknown;
-  roles: readonly Readonly<{
-    id: string;
-    label: string;
-    permissions: Permissions;
-  }>[];
-  views: readonly Readonly<{
-    id: string;
-    type: string;
-    label: string;
-    definition: ViewDefinition;
-    roles: readonly string[];
-  }>[];
-  extensions: readonly Readonly<{
-    id: string;
-    enabled: boolean;
-    settings: Readonly<Record<string, unknown>>;
-  }>[];
-}>;
-/** 中立の既定のスキーマ（新しい媒体の作成で適用する型: post・author・tag・image・video、設定の移入の土台） */
-export declare const DEFAULT_SCHEMA: ContentModel;
-/** 既定の画面設定（新しい媒体の作成で適用する中立の値、移入する screens の土台） */
-export declare const DEFAULT_SCREENS: ScreenSettings;
-export { type Asset, type AssetRef, type Clock, type ConfigBundle, type ContentModel, type ContentType, type Crop, type CropRect, type DateString, type FieldDef, type Hotspot, IMAGE_TYPE, type LocalImage, type Media, type PageDef, type PageEntry, type ScreenSettings, VIDEO_TYPE, coverPosition, coverStart, createClock, cropRect, croppedHotspot, isDateOnly, mediaSchema, objectPosition, pagePathOf, publicPathOf, stillOf, typeOf };
+export * from './types/sdk/src/model.js';

package/dist/model.js

@@ -1,4 +1,5 @@
 import { a as coverPosition, c as croppedHotspot, d as createClock, f as isDateOnly, i as typeOf, l as objectPosition, n as publicPathOf, o as coverStart, s as cropRect, t as pagePathOf, u as stillOf } from "./page-UEKb7_gu.js";
+import { i as CORE_COMPONENTS, t as declaredComponentsSchema } from "./declared-9_jI3JXH.js";
 import "./src-BrLwIWaT.js";
 import { z } from "zod";
 // ../model/src/asset.ts
@@ -96,6 +97,343 @@ const VIDEO_TYPE = {
 	],
 	fields: []
 };
+// ../model/src/capabilities.ts
+const NONE = {
+	editorial: false,
+	derived: false,
+	sources: false,
+	shared: false
+};
+const CORE_TABLES = {
+	articles: {
+		...NONE,
+		editorial: true,
+		derived: true,
+		sources: true
+	},
+	sources: {
+		...NONE,
+		shared: true
+	}
+};
+/** 表の性質（コアの表にない表はすべてなし） */
+const tableTraitsOf = (table) => table && Object.hasOwn(CORE_TABLES, table) ? CORE_TABLES[table] : NONE;
+// ../model/src/schema.ts
+const key = z.string().regex(/^[a-z][a-z0-9_]*$/, "id は英小文字で始まり、英小文字・数字・アンダーラインだけ");
+const fieldKey = z.string().regex(/^[a-z][a-zA-Z0-9_-]*$/, "key は英小文字で始まり、英字・数字・アンダーライン・ハイフンだけ");
+const condition = z.object({
+	key: fieldKey,
+	in: z.array(z.string().min(1)).min(1)
+});
+const base = {
+	key: fieldKey,
+	label: z.string().min(1),
+	description: z.string().optional(),
+	required: z.union([
+		z.literal("save"),
+		z.literal("submit"),
+		z.literal("page"),
+		z.literal(false)
+	]).optional(),
+	when: condition.optional(),
+	private: z.boolean().optional(),
+	adminOnly: z.boolean().optional(),
+	pendingUntil: fieldKey.optional()
+};
+const frame = z.object({
+	when: condition.optional(),
+	ratio: z.string().min(1),
+	size: z.object({
+		width: z.number().int().positive(),
+		height: z.number().int().positive()
+	}),
+	label: z.string().min(1)
+});
+const pageRule = z.union([
+	z.object({
+		key: z.string().min(1),
+		in: z.array(z.string())
+	}),
+	z.object({
+		key: z.string().min(1),
+		notIn: z.array(z.string())
+	}),
+	z.object({
+		key: z.string().min(1),
+		truthy: z.literal(true)
+	}),
+	z.object({
+		key: z.string().min(1),
+		notFuture: z.literal(true)
+	})
+]);
+const page = z.object({
+	when: condition.optional(),
+	path: z.string().startsWith("/", "ページの雛形は / で始まる"),
+	public: z.array(pageRule).optional()
+});
+const field = z.lazy(() => fieldUnion);
+const counts = {
+	minItems: z.number().int().nonnegative().optional(),
+	maxItems: z.number().int().positive().optional()
+};
+const regex = z.string().refine((p) => {
+	try {
+		new RegExp(p, "u");
+		return true;
+	} catch {
+		return false;
+	}
+}, "形式の正規表現が不正");
+const fieldUnion = z.discriminatedUnion("type", [
+	z.object({
+		...base,
+		...counts,
+		type: z.enum(["text", "textarea"]),
+		maxLength: z.number().int().positive().optional(),
+		minLength: z.number().int().positive().optional(),
+		pattern: regex.optional(),
+		guideLength: z.number().int().positive().optional(),
+		multiple: z.boolean().optional()
+	}),
+	z.object({
+		...base,
+		type: z.literal("number"),
+		min: z.number().optional(),
+		max: z.number().optional()
+	}),
+	z.object({
+		...base,
+		type: z.literal("checkbox")
+	}),
+	z.object({
+		...base,
+		type: z.enum(["date", "datetime"])
+	}),
+	z.object({
+		...base,
+		...counts,
+		type: z.literal("select"),
+		options: z.array(z.object({
+			value: z.string().min(1),
+			label: z.string().min(1),
+			tone: z.enum([
+				"positive",
+				"caution",
+				"neutral"
+			]).optional(),
+			restricted: z.boolean().optional()
+		})).min(1),
+		initial: z.string().optional(),
+		multiple: z.boolean().optional(),
+		derive: z.object({
+			from: fieldKey,
+			map: z.record(z.string(), z.string()),
+			otherwise: z.string()
+		}).optional(),
+		fixedBy: z.object({
+			ref: fieldKey,
+			key: fieldKey,
+			map: z.record(z.string(), z.string())
+		}).optional()
+	}).refine((f) => f.initial === void 0 || f.options.some((o) => o.value === f.initial), {
+		message: "初期値が選択肢にない",
+		path: ["initial"]
+	}).refine((f) => !f.derive || [...Object.values(f.derive.map), f.derive.otherwise].every((v) => f.options.some((o) => o.value === v)), {
+		message: "決まる値が選択肢にない",
+		path: ["derive"]
+	}).refine((f) => !f.fixedBy || Object.values(f.fixedBy.map).every((v) => f.options.some((o) => o.value === v)), {
+		message: "固定する値が選択肢にない",
+		path: ["fixedBy"]
+	}),
+	z.object({
+		...base,
+		...counts,
+		type: z.literal("reference"),
+		to: z.string().min(1),
+		multiple: z.boolean().optional(),
+		where: z.record(z.string(), z.string()).optional(),
+		requests: z.boolean().optional(),
+		emptyLabel: z.string().min(1).optional(),
+		unique: z.boolean().optional(),
+		published: z.boolean().optional(),
+		linkedBy: fieldKey.optional()
+	}),
+	z.object({
+		...base,
+		...counts,
+		type: z.literal("media"),
+		accept: z.array(z.enum(["image", "video"])).optional(),
+		multiple: z.boolean().optional(),
+		frames: z.array(frame).optional()
+	}),
+	z.object({
+		...base,
+		type: z.literal("body"),
+		profile: z.object({
+			headings: z.array(z.number()),
+			marks: z.array(z.string()),
+			components: z.array(z.string())
+		}).passthrough()
+	}),
+	z.object({
+		...base,
+		...counts,
+		type: z.literal("group"),
+		fields: z.array(field),
+		multiple: z.boolean().optional()
+	})
+]);
+/** 条件が一覧にある選択肢の項目と値を指すか */
+const conditionValid = (when, fields) => {
+	const target = when && fields.find((g) => g.key === when.key && g.type === "select");
+	return !when || target !== void 0 && when.in.every((v) => target.options.some((o) => o.value === v));
+};
+/** 条件が同じ階層の選択肢の項目と値を指すか（まとまりの中も） */
+const conditionsValid = (fields) => fields.every((f) => conditionValid(f.when, fields) && (!f.derive || fields.some((g) => g.key === f.derive.from && g.type === "select")) && (!f.fixedBy || fields.some((g) => g.key === f.fixedBy.ref && g.type === "reference" && !g.multiple)) && (f.frames ?? []).every((fr) => conditionValid(fr.when, fields)) && conditionsValid(f.fields ?? []));
+/** まとまりの中で決まる値・参照先で固定を持つ項目の key（宣言の適用 rules.ts が最上位の項目だけのため） */
+const nestedRules = (fields) => fields.flatMap((f) => (f.fields ?? []).flatMap((c) => [...c.derive || c.fixedBy ? [`${f.key}.${c.key}`] : [], ...nestedRules([c]).map((k) => `${f.key}.${k}`)]));
+/**
+* システムの値と同じ名前で、項目の key に使用できない名前（API・配信が項目の値を上書きするため）
+* - すべての型: 行の ID・作成と更新の日時・作成者、管理画面の一覧で参照する行の数 uses
+* - 公開の管理がある型と、コアの表を持つ型の追加の項目: 編集の機能の列
+* - 本文から作成する列を持つ表の型: excerpt・read_min・links
+* - 対象外: API・配信の値に出ない列 type、導入先の設定で決まるアカウントの email・account_role
+*/
+const RESERVED = [
+	"id",
+	"created_at",
+	"created_by",
+	"updated_at",
+	"uses"
+];
+const RESERVED_EDITORIAL = [
+	"status",
+	"published_at",
+	"visibility",
+	"version",
+	"review_note",
+	"assignee"
+];
+const RESERVED_DERIVED = [
+	"excerpt",
+	"read_min",
+	"links"
+];
+/** 予約の名前と同じ最上位の key（コアの項目は表の列そのものなので、編集の機能の列は対象外） */
+function reservedKeysOf(t) {
+	const derived = tableTraitsOf(t.table).derived ? RESERVED_DERIVED : [];
+	const editorial = (t.publishing ?? "none") !== "none" || t.table ? RESERVED_EDITORIAL : [];
+	const core = t.core ?? [];
+	const extra = [...t.fields.map((f) => f.key), ...(t.counts ?? []).map((c) => c.key)];
+	return [...core.map((f) => f.key).filter((k) => [...RESERVED, ...derived].includes(k)), ...extra.filter((k) => [
+		...RESERVED,
+		...derived,
+		...editorial
+	].includes(k))];
+}
+/** 本文の項目が使用する部品の名前（まとまりの中も、key は項目の key） */
+const bodyComponents = (fields) => fields.flatMap((f) => f.type === "body" ? f.profile.components.map((name) => ({
+	key: f.key,
+	name
+})) : bodyComponents(f.fields ?? []));
+/** 参照の項目の参照先（まとまりの中も） */
+const referenceTargets = (fields) => fields.flatMap((f) => f.type === "reference" ? [f.to] : referenceTargets(f.fields ?? []));
+const contentType = z.object({
+	id: key,
+	label: z.string().min(1),
+	description: z.string().optional(),
+	format: z.enum(["list", "object"]).optional(),
+	publishing: z.enum([
+		"none",
+		"draft",
+		"review"
+	]).optional(),
+	table: key.optional(),
+	core: z.array(field).optional(),
+	fields: z.array(field),
+	pages: z.array(page).optional(),
+	counts: z.array(z.object({
+		key: fieldKey,
+		from: key,
+		field: fieldKey
+	})).optional(),
+	og: z.string().startsWith("/", "OG 画像の雛形は / で始まる").optional(),
+	idInput: z.boolean().optional()
+}).refine((t) => t.format !== "object" || !t.core?.length, { message: "オブジェクト形式の型はコアの項目なし" }).refine((t) => new Set([...t.core ?? [], ...t.fields].map((f) => f.key)).size === (t.core?.length ?? 0) + t.fields.length, { message: "項目の key が重複（コアの項目を含む）" }).refine((t) => conditionsValid([...t.core ?? [], ...t.fields]), { message: "項目の条件が同じ階層の選択肢の項目と値を指していない" }).refine((t) => (t.pages ?? []).every((p) => conditionValid(p.when, [...t.core ?? [], ...t.fields])), { message: "ページの条件が型の選択肢の項目と値を指していない" }).superRefine((t, ctx) => {
+	for (const k of reservedKeysOf(t)) ctx.addIssue({
+		code: "custom",
+		message: `型 ${t.id} の key ${k} はシステムの値と同じ名前（別の key に）`
+	});
+	for (const k of nestedRules([...t.core ?? [], ...t.fields])) ctx.addIssue({
+		code: "custom",
+		message: `型 ${t.id} の項目 ${k}: まとまりの中の項目は決まる値 derive・参照先で固定 fixedBy なし`
+	});
+});
+const modelSchema = z.object({
+	components: declaredComponentsSchema.optional(),
+	types: z.array(contentType).refine((ts) => new Set(ts.map((t) => t.id)).size === ts.length, { message: "型の id が重複" }).superRefine((ts, ctx) => {
+		const ids = new Set(ts.map((t) => t.id));
+		for (const t of ts) for (const to of referenceTargets([...t.core ?? [], ...t.fields])) if (!ids.has(to)) ctx.addIssue({
+			code: "custom",
+			message: `型 ${t.id} の参照先 ${to} がスキーマにない`
+		});
+		for (const t of ts) {
+			const keys = new Set([...t.core ?? [], ...t.fields].map((f) => f.key));
+			for (const c of t.counts ?? []) {
+				const from = ts.find((x) => x.id === c.from);
+				const ref = from && [...from.core ?? [], ...from.fields].find((f) => f.key === c.field);
+				if (ref?.type !== "reference" || ref.to !== t.id) ctx.addIssue({
+					code: "custom",
+					message: `型 ${t.id} の被参照の件数 ${c.key}: 型 ${c.from} の参照の項目 ${c.field} がこの型を指していない`
+				});
+				if (keys.has(c.key)) ctx.addIssue({
+					code: "custom",
+					message: `型 ${t.id} の被参照の件数 ${c.key} が項目の key と重複`
+				});
+			}
+		}
+	})
+}).superRefine((m, ctx) => {
+	const known = /* @__PURE__ */ new Set([...CORE_COMPONENTS.map((c) => c.name), ...(m.components ?? []).map((c) => c.name)]);
+	for (const t of m.types) for (const { key, name } of bodyComponents([...t.core ?? [], ...t.fields])) if (!known.has(name)) ctx.addIssue({
+		code: "custom",
+		message: `型 ${t.id} の本文の項目 ${key} の部品 ${name} がコアの部品にも宣言 components にもない`
+	});
+});
+/** コンテンツスキーマの JSON を検査して返却（形が合わなければ例外、理由は zod の issues） */
+const parseModel = (json) => modelSchema.parse(json);
+// ../model/src/screens.ts
+/** メニューにある全項目の id（グループの中も、上から順） */
+const menuItemsOf = (menu) => menu.flatMap((e) => typeof e === "string" ? [e] : e.items);
+/** 編集画面に配置した項目の id（セクションの順） */
+const placedItemsOf = (layout) => layout.sections.flatMap((s) => s.items);
+const id = z.string().regex(/^[a-z][a-z0-9_:-]*$/, "id は英小文字で始まり、英小文字・数字・アンダーライン・コロン・ハイフンだけ");
+const item = z.string().min(1);
+const unique = (values) => new Set(values).size === values.length;
+const group = z.object({
+	id,
+	label: z.string().trim().min(1),
+	collapsed: z.boolean().optional(),
+	items: z.array(item)
+});
+const section = z.object({
+	id,
+	label: z.string().trim(),
+	collapsed: z.boolean().optional(),
+	items: z.array(item)
+});
+const layout = z.object({
+	sections: z.array(section),
+	hidden: z.array(item).optional()
+}).refine((l) => unique(l.sections.map((s) => s.id)), { message: "セクションの id が重複" }).refine((l) => unique([...placedItemsOf(l), ...l.hidden ?? []]), { message: "同じ項目を2か所に配置" });
+const screensSchema = z.object({
+	menu: z.array(z.union([item, group])).refine((m) => unique(m.flatMap((e) => typeof e === "string" ? [] : [e.id])), { message: "メニューのグループの id が重複" }).refine((m) => unique(menuItemsOf(m)), { message: "メニューに同じ項目が2つ" }),
+	editors: z.record(z.string(), layout).default({}),
+	columns: z.record(z.string(), z.array(item).refine(unique, { message: "一覧に同じ列が2つ" })).default({})
+});
+/** 画面の設定の JSON を検査（形の誤りは ZodError） */
+const parseScreens = (json) => screensSchema.parse(json);
 // ../cms-contract/src/transfer.ts
 /** スキーマと設定の形式の名前 */
 const CONFIG_FORMAT = "cms-config";
@@ -366,4 +704,4 @@ const DEFAULT_SCREENS = {
 		"updated_at"
 	] }
 };
-export { CONFIG_FORMAT, DEFAULT_SCHEMA, DEFAULT_SCREENS, IMAGE_TYPE, VIDEO_TYPE, coverPosition, coverStart, createClock, cropRect, croppedHotspot, isDateOnly, mediaSchema, objectPosition, pagePathOf, publicPathOf, stillOf, typeOf };
+export { CONFIG_FORMAT, DEFAULT_SCHEMA, DEFAULT_SCREENS, IMAGE_TYPE, VIDEO_TYPE, coverPosition, coverStart, createClock, cropRect, croppedHotspot, isDateOnly, mediaSchema, objectPosition, pagePathOf, parseModel, parseScreens, publicPathOf, stillOf, typeOf };

package/dist/preview.d.ts

@@ -1,2 +1 @@
-import { a as signedHeaders, i as signParts, n as SignedParts, o as verifyParts, r as VerifyRequestOptions, s as verifyRequest, t as SIGNED_HEADERS } from "./signed-B_58gV21.js";
-export { SIGNED_HEADERS, type SignedParts, type VerifyRequestOptions, signParts, signedHeaders, verifyParts, verifyRequest };
+export * from './types/sdk/src/preview.js';

package/dist/preview.js

@@ -1 +1 @@
-export { t as SIGNED_HEADERS, n as signParts, r as signedHeaders, i as verifyParts, a as verifyRequest } from "./src-CA_67dWy.js";
+export { i as SIGNED_HEADERS, o as signParts, s as signedHeaders, c as verifyParts, l as verifyRequest } from "./src-Baj-EC2G.js";

package/dist/{src-CA_67dWy.js → src-Baj-EC2G.js}

@@ -98,6 +98,108 @@ async function verifyRequest(secret, request, { header, subjectHeader, now }) {
 		subject: subjectHeader ? request.headers.get(subjectHeader) : null
 	}, now === void 0 ? {} : { now });
 }
-"0".repeat(32);
-"0".repeat(16);
-export { verifyRequest as a, verifyParts as i, signParts as n, signedHeaders as r, SIGNED_HEADERS as t };
+/** 封印した値（署名の不一致・期限切れ・形の誤りは null） */
+async function openValue(secret, token, now = Date.now()) {
+	const [body, sig] = token?.split(".") ?? [];
+	if (!secret || !body || !sig) return null;
+	try {
+		if (!await crypto.subtle.verify("HMAC", await hmacKey(secret), decodeBase64Url(sig), enc.encode(body))) return null;
+		const { v, exp } = JSON.parse(new TextDecoder().decode(decodeBase64Url(body)));
+		return typeof exp === "number" && exp * 1e3 > now ? v : null;
+	} catch {
+		return null;
+	}
+}
+// ../access/src/traceparent.ts
+/** traceparent のヘッダーの名前 */
+const TRACEPARENT_HEADER = "traceparent";
+const PATTERN = /^([0-9a-f]{2})-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})(-.*)?$/;
+const ZERO_TRACE = "0".repeat(32);
+const ZERO_SPAN = "0".repeat(16);
+/** 受け取った traceparent の解釈（なし・形の違反は null） */
+function parseTraceparent(value) {
+	const m = value ? PATTERN.exec(value.trim()) : null;
+	if (!m) return null;
+	const [, version, traceId, spanId, flags, rest] = m;
+	if (version === "ff" || version === "00" && rest !== void 0) return null;
+	if (traceId === ZERO_TRACE || spanId === ZERO_SPAN) return null;
+	return {
+		traceId,
+		spanId,
+		sampled: (parseInt(flags, 16) & 1) === 1
+	};
+}
+/** traceparent の値（版は00） */
+const formatTraceparent = (ctx) => `00-${ctx.traceId}-${ctx.spanId}-${ctx.sampled ? "01" : "00"}`;
+function randomHexId(bytes) {
+	const values = crypto.getRandomValues(new Uint8Array(bytes));
+	let hex = "";
+	for (const b of values) hex += b.toString(16).padStart(2, "0");
+	return hex;
+}
+/** 新しいトレースの ID（32桁） */
+const newTraceId = () => randomHexId(16);
+/** 新しい区間の ID（16桁） */
+const newSpanId = () => randomHexId(8);
+// ../access/src/span.ts
+/** 記録の割合（0〜1、なし・範囲の外・数でない値は1） */
+const sampleRateOf = (value) => {
+	const rate = value === void 0 || value.trim() === "" ? NaN : Number(value);
+	return rate >= 0 && rate <= 1 ? rate : 1;
+};
+/** エントリポイントの区間の開始（受け取った traceparent の子か、新しいトレースの根） */
+function startEdgeSpan({ name, request, sampleRate = 1, write = (line) => console.info(line) }) {
+	const parent = parseTraceparent(request.headers.get(TRACEPARENT_HEADER));
+	const context = {
+		traceId: parent?.traceId ?? newTraceId(),
+		spanId: newSpanId(),
+		sampled: parent ? parent.sampled : Math.random() < sampleRate
+	};
+	const attributes = {
+		method: request.method,
+		path: new URL(request.url).pathname
+	};
+	const started = performance.now();
+	let ended = false;
+	return {
+		context,
+		traceparent: formatTraceparent(context),
+		end(result) {
+			if (ended) return;
+			ended = true;
+			if (!context.sampled) return;
+			const status = result === "error" || result >= 500 ? "error" : "ok";
+			const durationMs = Math.round((performance.now() - started) * 10) / 10;
+			const span = {
+				traceId: context.traceId,
+				spanId: context.spanId,
+				parentSpanId: parent?.spanId ?? null,
+				name,
+				durationMs,
+				status,
+				attributes: {
+					...attributes,
+					...result !== "error" && { status: result }
+				}
+			};
+			write(JSON.stringify({
+				level: "info",
+				msg: "span",
+				...span
+			}));
+		}
+	};
+}
+/** 処理をエントリポイントの区間で包む（応答のステータスか例外で終了、例外は再送出） */
+async function withEdgeSpan(options, handle) {
+	const span = startEdgeSpan(options);
+	try {
+		const res = await handle(span);
+		span.end(res.status);
+		return res;
+	} catch (e) {
+		span.end("error");
+		throw e;
+	}
+}
+export { openValue as a, verifyParts as c, SIGNED_HEADERS as i, verifyRequest as l, withEdgeSpan as n, signParts as o, TRACEPARENT_HEADER as r, signedHeaders as s, sampleRateOf as t };

package/dist/trace.d.ts

@@ -0,0 +1 @@
+export * from './types/sdk/src/trace.js';

package/dist/trace.js

@@ -0,0 +1 @@
+export { r as TRACEPARENT_HEADER, t as sampleRateOf, n as withEdgeSpan } from "./src-Baj-EC2G.js";

package/dist/types/access/src/index.d.ts

@@ -0,0 +1,5 @@
+export { accessJwtOptions, type FetchCerts, type JwtClaims, type JwtOptions, verifyAccessJwt, verifyJwt } from './jwt.js';
+export { emailOfClaims, type LoginAuth, oidcLogin, type OidcLoginOptions, tokenAuth, type TokenAuthOptions } from './oidc.js';
+export { type EdgeSpan, type EdgeSpanOptions, type EdgeSpanStatus, sampleRateOf, startEdgeSpan, withEdgeSpan } from './span.js';
+export { openValue, sealValue, SIGNED_HEADERS, signedHeaders, signParts, type SignedParts, verifyParts, verifyRequest, type VerifyRequestOptions } from './signed.js';
+export { childTraceContext, formatTraceparent, newSpanId, newTraceId, parseTraceparent, type TraceContext, TRACEPARENT_HEADER } from './traceparent.js';

package/dist/types/access/src/jwt.d.ts

@@ -0,0 +1,42 @@
+type Jwk = JsonWebKey & {
+    kid?: string;
+};
+/** 公開鍵の一覧の取得（引数は JWKS の URL、refresh は保持した値を使用せずに再取得、テストで差し替え） */
+export type FetchCerts = (jwksUrl: string, refresh?: boolean) => Promise<{
+    keys: Jwk[];
+}>;
+/** JWT のクレーム（検証を通った値） */
+export type JwtClaims = Readonly<Record<string, unknown>>;
+/** JWT の検証の設定 */
+export type JwtOptions = Readonly<{
+    /** 発行元（iss と完全に一致） */
+    issuer: string;
+    /** 宛先（aud のどれかと一致、一覧はどれか1つと一致） */
+    audience: string | readonly string[];
+    /** 公開鍵の一覧の URL */
+    jwksUrl: string;
+    now?: number;
+    certs?: FetchCerts;
+}>;
+/** 公開鍵の一覧を保持する取得（取得の失敗は保持しない） */
+export declare function cachedCerts(fetcher: FetchCerts, clock?: () => number): FetchCerts;
+/** base64url の復号 */
+export declare const decodeBase64Url: (s: string) => Uint8Array<ArrayBuffer>;
+/** 検証を通った JWT のクレーム（署名・発行元・宛先・期限のどれかが違えば null） */
+export declare function verifyJwt(token: string, { issuer, audience, jwksUrl, now, certs }: JwtOptions): Promise<JwtClaims | null>;
+/**
+ * Cloudflare Access の JWT を検証する設定（teamDomain は <チーム>.cloudflareaccess.com、aud はアプリの AUD）
+ * - aud: カンマ区切りで複数のアプリ（ホスト名ごとにアプリが分かれる管理画面、どのアプリを通すかは Access がホスト名で判定）
+ */
+export declare const accessJwtOptions: ({ teamDomain, aud }: Readonly<{
+    teamDomain: string;
+    aud: string;
+}>) => Pick<JwtOptions, "issuer" | "audience" | "jwksUrl">;
+/** Access の検証を通ったログインのメールアドレス、サービストークンは service:<クライアントの ID>（通らなければ null） */
+export declare function verifyAccessJwt(token: string, { teamDomain, aud, now, certs }: {
+    teamDomain: string;
+    aud: string;
+    now?: number;
+    certs?: FetchCerts;
+}): Promise<string | null>;
+export {};

package/dist/types/access/src/oidc.d.ts

@@ -0,0 +1,47 @@
+import { type FetchCerts, type JwtClaims, type JwtOptions } from './jwt.js';
+/** ログイン（Auth のポートと同じ形） */
+export type LoginAuth = {
+    emailOf(request: Request): Promise<string | null>;
+    /** ログインの入り口の応答（対象外のパスは null） */
+    handle?(request: Request): Promise<Response | null>;
+    /** ログアウトの応答 */
+    logout?(request: Request): Promise<Response>;
+};
+/** クレームのメールアドレス（なし・未検証は null、小文字に統一） */
+export declare function emailOfClaims(claims: JwtClaims | null, claim?: string): string | null;
+/** ヘッダーの JWT で判定するログインの設定 */
+export type TokenAuthOptions = Readonly<{
+    issuer: string;
+    audience: JwtOptions['audience'];
+    /** 公開鍵の一覧の URL（なしは発行元の OIDC の設定から） */
+    jwksUrl?: string;
+    /** JWT のヘッダー（既定 authorization、authorization は Bearer を除外） */
+    header?: string;
+    /** メールアドレスのクレーム（既定 email） */
+    emailClaim?: string;
+    certs?: FetchCerts;
+    fetch?: typeof fetch;
+}>;
+/** ヘッダーの JWT を検証するログイン */
+export declare function tokenAuth({ issuer, audience, jwksUrl, header, emailClaim, certs, fetch: fetcher }: TokenAuthOptions): LoginAuth;
+/** アプリ自身が行う OIDC のログインの設定 */
+export type OidcLoginOptions = Readonly<{
+    issuer: string;
+    clientId: string;
+    /** クライアントの秘密の値（公開のクライアントは なし、PKCE だけ） */
+    clientSecret?: string;
+    /** Cookie の署名の鍵 */
+    secret: string;
+    /** 入り口のパスの頭（既定 /auth） */
+    basePath?: string;
+    /** 要求するスコープ（既定 openid email） */
+    scope?: string;
+    /** セッションの秒数（既定は8時間） */
+    sessionTtlSec?: number;
+    certs?: FetchCerts;
+    fetch?: typeof fetch;
+}>;
+/** 同じオリジンの戻り先（外のオリジンへの転送を防ぐ） */
+export declare const safeNext: (next: string | null) => string;
+/** アプリ自身の OIDC のログイン（認可コードのフローと署名つきの Cookie のセッション） */
+export declare function oidcLogin({ issuer, clientId, clientSecret, secret, basePath, scope, sessionTtlSec, certs, fetch: fetcher }: OidcLoginOptions): LoginAuth;