@agilesyndrome/cf-genai-base 0.1.2 → 0.1.4

package/CONTRACT.md

@@ -4,8 +4,7 @@ Every site built from this foundation follows the same edge contract.
 
 ## Worker entrypoint
 
-`createWorker({ fetch, auth?, scheduled?, security? })` owns the Worker lifecycle.
-The site router owns pages, APIs, D1 queries, and R2 object keys. `scheduled`
+`createWorker({ fetch, features?, middleware?, auth?, scheduled?, security? })` owns the Worker lifecycle. Features run in declaration order and may call `next()` or return a response. The site router owns pages, APIs, D1 queries, and R2 object keys. `scheduled`
 is optional and must use `ctx.waitUntil` for background work.
 
 ## Routes

package/README.md

@@ -1,18 +1,17 @@
-# `@easleyowl/cf-genai-base`
+# `@agilesyndrome/cf-genai-base`
 
 Opinionated startup boilerplate for small Cloudflare Workers.
 
 The base is deliberately small: a site still owns its router, HTML, D1
-queries, R2 keys, and scheduled jobs. `createWorker` composes an optional auth
-handler, normalizes uncaught failures, and applies baseline response headers.
+queries, R2 keys, and scheduled jobs. `createWorker` composes ordered feature middleware, normalizes uncaught failures, and applies baseline response headers.
 Use D1 bindings for durable application data and R2 bindings for binary assets;
 do not put either into module-level state.
 
 ```js
-import { createWorker, healthResponse } from "@easleyowl/cf-genai-base";
+import { createWorker, healthResponse } from "@agilesyndrome/cf-genai-base";
 
 export default createWorker({
-  auth: (request, env) => auth.handle(request, env),
+  features: [auth],
   fetch: async (request, env) => {
     if (new URL(request.url).pathname === "/health") return healthResponse(env);
     return router(request, env);
@@ -20,6 +19,8 @@ export default createWorker({
 });
 ```
 
+Features expose `middleware(request, env, ctx, next, state)` and may short-circuit reserved routes, attach request state, or call `next()`.
+
 ## Shared platform helpers
 
 `createWorker` can own `/health` and `/api/health`, run a boot validator before

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agilesyndrome/cf-genai-base",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "type": "module",
   "exports": {
     ".": "./src/index.js"
@@ -8,7 +8,8 @@
   "description": "Lean Worker lifecycle and security helpers for Cloudflare sites.",
   "license": "MIT",
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "files": [
     "src",
@@ -20,5 +21,10 @@
     "type": "git",
     "url": "git+https://github.com/agilesyndrome/cf-genai-base.git"
   },
-  "homepage": "https://github.com/agilesyndrome/cf-genai-base#readme"
+  "homepage": "https://github.com/agilesyndrome/cf-genai-base#readme",
+  "scripts": {
+    "check": "node --check src/index.js",
+    "test": "node --check src/index.js",
+    "build": "npm run check && npm test && npm pack --dry-run"
+  }
 }

package/src/index.js

@@ -2,23 +2,32 @@
  * Lean, opinionated Worker composition for Cloudflare sites.
  * Site code owns domain routes and data; this owns lifecycle and edge concerns.
  */
-export function createWorker({ fetch, scheduled, auth, health, boot, metrics, security = true }) {
+export function createWorker({ fetch, scheduled, auth, middleware = [], features = [], health, boot, metrics, security = true }) {
   if (typeof fetch !== "function") throw new TypeError("createWorker requires a fetch handler");
+  const chain = [
+    ...features.flatMap((feature) => feature?.middleware ? [feature.middleware.bind(feature)] : []),
+    ...middleware,
+    ...(auth ? [(request, env, ctx, next) => auth(request, env, ctx, next)] : []),
+  ].filter(Boolean);
   return {
     async fetch(request, env, ctx) {
       try {
         if (boot) await boot(env, { request, ctx });
         const url = new URL(request.url);
-        const authResponse = auth ? await auth(request, env, ctx) : null;
-        let response = authResponse;
-        if (!response) {
-          if (url.pathname === "/health" || url.pathname === "/api/health") {
-            const details = health ? await health(env, { request, ctx }) : {};
-            response = healthResponse(env, details);
-          } else {
-            response = await fetch(request, env, ctx);
+        const state = Object.create(null);
+        const dispatch = async (index, currentRequest = request) => {
+          const layer = chain[index];
+          if (!layer) {
+            if (url.pathname === "/health" || url.pathname === "/api/health") {
+              const details = health ? await health(env, { request: currentRequest, ctx, state }) : {};
+              return healthResponse(env, details);
+            }
+            return fetch(currentRequest, env, ctx, state);
           }
-        }
+          if (typeof layer !== "function") throw new TypeError("Worker middleware must be a function");
+          return layer(currentRequest, env, ctx, (nextRequest = currentRequest) => dispatch(index + 1, nextRequest), state);
+        };
+        const response = await dispatch(0);
         if (metrics) metrics.request(request, response, env, ctx);
         return security ? secureResponse(response) : response;
       } catch (error) {