create-ampless 1.0.0-alpha.64 → 1.0.0-alpha.68

package/dist/index.js

@@ -1757,7 +1757,9 @@ var AMPLESS_PACKAGES = /* @__PURE__ */ new Set([
   "@ampless/plugin-rss",
   "@ampless/plugin-webhook",
   "@ampless/plugin-og-image",
-  "@ampless/plugin-analytics-ga4"
+  "@ampless/plugin-analytics-ga4",
+  "@ampless/plugin-gtm",
+  "@ampless/plugin-plausible"
 ]);
 var AMPLESS_MANAGED_SCRIPTS = /* @__PURE__ */ new Set([
   "sandbox",

package/dist/templates/_shared/cms.config.ts

@@ -2,6 +2,8 @@ import { defineConfig } from 'ampless'
 import seoPlugin from '@ampless/plugin-seo'
 import rssPlugin from '@ampless/plugin-rss'
 // import analyticsGa4Plugin from '@ampless/plugin-analytics-ga4'
+// import gtmPlugin from '@ampless/plugin-gtm'
+// import plausiblePlugin from '@ampless/plugin-plausible'
 // import webhookPlugin from '@ampless/plugin-webhook'
 // import ogImagePlugin, { loadFontFromUrl } from '@ampless/plugin-og-image'
 
@@ -78,6 +80,21 @@ export default defineConfig({
     //   measurementId: '', // 'G-XXXXXXXX' to enable
     // }),
     //
+    // Google Tag Manager. Like GA4, the container ID is editable from
+    // `/admin/plugins` after deploy. Tags fire via GTM's own trigger model.
+    //
+    // gtmPlugin({
+    //   containerId: '', // 'GTM-XXXXXXX' to enable
+    // }),
+    //
+    // Plausible Analytics (privacy-focused, typically no cookie consent
+    // required). `domain` matches the registered Plausible site.
+    // `scriptUrl` defaults to plausible.io; override for self-hosted.
+    //
+    // plausiblePlugin({
+    //   domain: '', // 'example.com' to enable
+    // }),
+    //
     // Per-post OG images: SNS crawlers hit `/og/<slug>` and we render
     // a JSX card → PNG via Next.js `ImageResponse`. Requires at least one
     // font — ship a .ttf from your CDN or `/public` directory.

package/dist/templates/_shared/docs/plugin-author-guide.ja.md

@@ -139,7 +139,7 @@ analyticsGa4Plugin({ instanceId: 'product' })
 | 階層 | IAM | 用途 |
 |---|---|---|
 | `untrusted` | なし (SQS consume のみ) | head/body descriptor、webhook 配送、コンテンツ変換 |
-| `trusted` | 投稿読み出し、`public/plugins/<name>/...` への書き込み | RSS フィード、sitemap、計算済み JSON インデックス |
+| `trusted` | 投稿読み出し、`public/plugins/<instanceId ?? name>/...` への書き込み | RSS フィード、sitemap、計算済み JSON インデックス |
 | `privileged` | 予約 | 将来: SES、secret、private S3 |
 
 決め方の目安:
@@ -273,6 +273,26 @@ hooks: {
 }
 ```
 
+### `writePublicAsset`
+
+公開生成ファイルを書き出す trusted plugin は capability を宣言してください:
+
+```ts
+capabilities: ['eventHooks', 'writePublicAsset']
+```
+
+同じ plugin が `metadata()` または `siteMetadata()` も実装する場合は、`metadata` も宣言します。この capability 名は両方の metadata 関数をまとめて表し、別個の `siteMetadata` capability はありません。
+
+trusted processor は次の場所に書き込みます:
+
+```txt
+public/plugins/<instanceId ?? name>/<key>
+```
+
+`key` は相対 asset key である必要があります。空文字、絶対パス、`.` / `..` path segment、backslash、制御文字、256 文字超の key は S3 呼び出し前に拒否されます。`indexes/posts.json` のような nested path は許可されます。戻り値は書き込まれた object の public URL です。
+
+移行期間中、`capabilities` フィールドが無い plugin はそのまま動きます。`capabilities` を宣言しているのに `writePublicAsset` を省いた plugin は、実際に `ctx.writePublicAsset()` を呼んだ時に 1 回だけ warn します。
+
 ### ベストプラクティス
 
 - **冪等にする**。SQS は at-least-once 配送 — 同じイベントが 2 回 fire する可能性があります。同じ入力で同じ出力 (決定論的なフィード等) を生成するようにしてください
@@ -467,6 +487,8 @@ it('admin が空文字保存した場合は空配列', () => {
 参考実装:
 
 - [`packages/plugin-analytics-ga4`](https://github.com/heavymoons/ampless/tree/main/packages/plugin-analytics-ga4) — descriptor ベース、Phase 2 settings
+- [`packages/plugin-gtm`](https://github.com/heavymoons/ampless/tree/main/packages/plugin-gtm) — `publicHead`（ローダーインラインスクリプト）+ `publicBodyEnd`（`<noscript>` iframe フォールバック）を両方使用、コンテナ ID は admin 編集可能
+- [`packages/plugin-plausible`](https://github.com/heavymoons/ampless/tree/main/packages/plugin-plausible) — `data-*` attrs 付きの単一 `<script>` descriptor、`required` な URL field（self-hosted Plausible 上書き対応）
 - [`packages/plugin-rss`](https://github.com/heavymoons/ampless/tree/main/packages/plugin-rss) — trusted、非同期 hooks + `writePublicAsset`
 - [`packages/plugin-seo`](https://github.com/heavymoons/ampless/tree/main/packages/plugin-seo) — `metadata()` + `siteMetadata()`
 - [`packages/plugin-webhook`](https://github.com/heavymoons/ampless/tree/main/packages/plugin-webhook) — untrusted hook + 外向き HTTP

package/dist/templates/_shared/docs/plugin-author-guide.md

@@ -168,7 +168,7 @@ touch IAM):
 | Tier | IAM | Used by |
 |---|---|---|
 | `untrusted` | none (SQS consume only) | head/body descriptors, webhook delivery, content transforms |
-| `trusted` | read posts, write `public/plugins/<name>/...` | RSS feed, sitemap, computed JSON indexes |
+| `trusted` | read posts, write `public/plugins/<instanceId ?? name>/...` | RSS feed, sitemap, computed JSON indexes |
 | `privileged` | reserved | future: SES, secrets, private S3 |
 
 Rule of thumb:
@@ -332,6 +332,36 @@ hooks: {
 }
 ```
 
+### `writePublicAsset`
+
+Trusted plugins that write public generated files should declare the
+capability:
+
+```ts
+capabilities: ['eventHooks', 'writePublicAsset']
+```
+
+If the same plugin implements `metadata()` or `siteMetadata()`, also
+declare `metadata`. That capability name covers both metadata
+functions; there is no separate `siteMetadata` capability.
+
+The trusted processor writes under:
+
+```txt
+public/plugins/<instanceId ?? name>/<key>
+```
+
+`key` must be a relative asset key. Empty strings, absolute paths,
+`.` / `..` path segments, backslashes, control characters, and keys
+over 256 characters are rejected before S3 is called. Nested paths
+such as `indexes/posts.json` are allowed. The return value is the
+public URL for the written object.
+
+During the migration period, plugins with no `capabilities` field
+keep working. Plugins that do declare `capabilities` but omit
+`writePublicAsset` warn once when they actually call
+`ctx.writePublicAsset()`.
+
 ### Best practices
 
 - **Be idempotent.** SQS delivery is at-least-once: the same event
@@ -575,6 +605,8 @@ a normal npm package:
 Worked examples to crib from:
 
 - [`packages/plugin-analytics-ga4`](https://github.com/heavymoons/ampless/tree/main/packages/plugin-analytics-ga4) — descriptor-based, Phase 2 settings.
+- [`packages/plugin-gtm`](https://github.com/heavymoons/ampless/tree/main/packages/plugin-gtm) — uses both `publicHead` (loader inline script) and `publicBodyEnd` (`<noscript>` iframe fallback) with the container ID admin-edited.
+- [`packages/plugin-plausible`](https://github.com/heavymoons/ampless/tree/main/packages/plugin-plausible) — single `<script>` descriptor with `data-*` attrs and a required URL field (self-hosted Plausible override).
 - [`packages/plugin-rss`](https://github.com/heavymoons/ampless/tree/main/packages/plugin-rss) — trusted, async event hooks + `writePublicAsset`.
 - [`packages/plugin-seo`](https://github.com/heavymoons/ampless/tree/main/packages/plugin-seo) — `metadata()` + `siteMetadata()`.
 - [`packages/plugin-webhook`](https://github.com/heavymoons/ampless/tree/main/packages/plugin-webhook) — untrusted hook with outbound HTTP.

package/dist/templates/_shared/package.json

@@ -25,16 +25,18 @@
     "@tiptap/pm": "^3.23.6",
     "@tiptap/react": "^3.23.6",
     "@tiptap/starter-kit": "^3.23.6",
-    "@ampless/plugin-analytics-ga4": "^0.2.0-alpha.1",
-    "@ampless/plugin-og-image": "^0.2.0-alpha.18",
-    "@ampless/plugin-rss": "^0.2.0-alpha.18",
-    "@ampless/plugin-seo": "^0.2.0-alpha.18",
-    "@ampless/plugin-webhook": "^0.2.0-alpha.18",
-    "@ampless/admin": "^1.0.0-alpha.42",
-    "@ampless/backend": "^1.0.0-alpha.33",
-    "@ampless/runtime": "^1.0.0-alpha.24",
+    "@ampless/plugin-analytics-ga4": "^0.2.0-alpha.2",
+    "@ampless/plugin-gtm": "^0.1.1-alpha.1",
+    "@ampless/plugin-og-image": "^0.2.0-alpha.19",
+    "@ampless/plugin-plausible": "^0.1.1-alpha.1",
+    "@ampless/plugin-rss": "^0.2.0-alpha.19",
+    "@ampless/plugin-seo": "^0.2.0-alpha.19",
+    "@ampless/plugin-webhook": "^0.2.0-alpha.19",
+    "@ampless/admin": "^1.0.0-alpha.43",
+    "@ampless/backend": "^1.0.0-alpha.34",
+    "@ampless/runtime": "^1.0.0-alpha.25",
     "@digital-go-jp/tailwind-theme-plugin": "^0.3.4",
-    "ampless": "^1.0.0-alpha.18",
+    "ampless": "^1.0.0-alpha.19",
     "aws-amplify": "^6.17.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-ampless",
-  "version": "1.0.0-alpha.64",
+  "version": "1.0.0-alpha.68",
   "description": "Create a new ampless project",
   "license": "MIT",
   "type": "module",