Cloudflare のセットアップ

const CONCIERGE_ENDPOINT = 'https://concierge.tryprofound.com/v1/concierge';

// Keep this list in sync with the supported assistants in the Profound docs.
const BOT_RE = /duckassistbot|chatgpt-user|gemini-deep-research|perplexity-user|amzn-user|mistralai-user|claude-user|claude-code|codex/i;

// Explicit public pages only. Review each path before extending this list.
const PUBLIC_PATHS = new Set(['/', '/pricing', '/docs', '/docs/getting-started']);
const UPSTREAM_TIMEOUT_MS = 2000; // Example header deadline; leave time for origin fallback.
const FORWARDED_HEADERS = ['user-agent', 'accept', 'accept-encoding', 'accept-language'];

// Statuses that mean "Profound could not serve this" rather than "the origin
// said so". 404 is deliberately absent: Profound fails open internally and
// returns your origin's own status, so a 404 is your real 404.
const FAILOVER_STATUSES = new Set([400, 401, 403, 500, 502, 503, 504]);

async function failOpen(request) {
  // A subrequest to the same zone goes to the origin without re-running this Worker.
  const originResponse = await fetch(request);
  const response = new Response(originResponse.body, originResponse);
  response.headers.set('x-concierge-cdn-failover', '1');
  return response;
}

export default {
  async fetch(request, env) {
    const url = new URL(request.url);
    const userAgent = request.headers.get('user-agent') || '';

    // Loop protection: Profound stamps this on its own origin fetches.
    // Passing it through means those fetches reach the origin directly.
    if (request.headers.has('x-concierge-request')) return fetch(request);

    if (request.method !== 'GET') return fetch(request);
    if (request.headers.has('cookie') || request.headers.has('authorization')) return fetch(request);

    const isAssistant = BOT_RE.test(userAgent);
    if (!isAssistant || !PUBLIC_PATHS.has(url.pathname)) return fetch(request);

    // Copy only required negotiation headers, never viewer credentials or identity.
    const headers = new Headers();
    for (const name of FORWARDED_HEADERS) {
      const value = request.headers.get(name);
      if (value !== null) headers.set(name, value);
    }

    headers.set('x-concierge-api-key', env.PROFOUND_CONCIERGE_KEY);
    headers.set('x-concierge-host', url.hostname);
    headers.set('x-concierge-url', url.pathname + url.search);

    const controller = new AbortController();
    const timeout = setTimeout(() => controller.abort(), UPSTREAM_TIMEOUT_MS);
    try {
      const response = await fetch(CONCIERGE_ENDPOINT, {
        method: 'GET',
        headers,
        redirect: 'manual', // pass redirects through instead of following them
        cache: 'no-store', // also verify the endpoint owner's cache policy
        signal: controller.signal,
      });

      if (FAILOVER_STATUSES.has(response.status)) {
        if (response.body) void response.body.cancel().catch(() => {});
        controller.abort();
        return failOpen(request);
      }
      const result = new Response(response.body, response);
      result.headers.set('cache-control', 'no-store');
      return result;
    } catch {
      return failOpen(request);
    } finally {
      clearTimeout(timeout);
    }
  },
};

npx wrangler secret put PROFOUND_CONCIERGE_KEY

www.example.com/*

curl -sD - -o /dev/null https://www.example.com/pricing -A 'chatgpt-user'