@middlewr/contracts 0.0.27 → 0.0.29

package/src/rules.schema.ts

@@ -0,0 +1,98 @@
+import { z } from 'zod';
+
+const RULE_OPERATORS = ['eq', 'neq', 'in', 'not_in', 'contains', 'not_contains', 'gt', 'lt', 'gte', 'lte', 'regex'] as const;
+const VALID_FIELD_PREFIXES = ['cf.', 'request.', 'edge.', 'time.'];
+
+const PositionSchema = z.object({
+    x: z.number(),
+    y: z.number(),
+});
+
+const ConditionNodeSchema = z.object({
+    id: z.string(),
+    type: z.literal('condition'),
+    position: PositionSchema,
+    field: z.string().refine((f) => VALID_FIELD_PREFIXES.some((p) => f.startsWith(p)), {
+        message: 'Field must start with cf., request., edge., or time.',
+    }),
+    operator: z.enum(RULE_OPERATORS),
+    value: z.union([z.string(), z.array(z.string()), z.number()]),
+    outputs: z.object({
+        true: z.string().nullable(),
+        false: z.string().nullable(),
+    }),
+});
+
+const SplitNodeSchema = z.object({
+    id: z.string(),
+    type: z.literal('split'),
+    position: PositionSchema,
+    variants: z
+        .array(
+            z.object({
+                weight: z.number().min(1).max(100),
+                target: z.string().nullable(),
+            }),
+        )
+        .min(2),
+});
+
+const DestinationNodeSchema = z.object({
+    id: z.string(),
+    type: z.literal('destination'),
+    position: PositionSchema,
+    url: z.string().url(),
+});
+
+const FORBIDDEN_HEADERS = ['set-cookie', 'authorization', 'host', 'transfer-encoding'];
+
+const TransformNodeSchema = z.object({
+    id: z.string(),
+    type: z.literal('transform'),
+    position: PositionSchema,
+    transforms: z.object({
+        query_params: z
+            .array(
+                z.object({
+                    key: z.string().min(1),
+                    value: z.string(),
+                    mode: z.enum(['set', 'append']),
+                }),
+            )
+            .optional(),
+        redirect_status: z.union([z.literal(301), z.literal(302), z.literal(307), z.literal(308)]).optional(),
+        response_headers: z
+            .array(
+                z.object({
+                    key: z
+                        .string()
+                        .min(1)
+                        .refine((k) => !FORBIDDEN_HEADERS.includes(k.toLowerCase()), {
+                            message: 'This header is not allowed',
+                        }),
+                    value: z.string().regex(/^[^\r\n]*$/, 'Header value must not contain newlines'),
+                    mode: z.enum(['set', 'append']),
+                }),
+            )
+            .optional(),
+    }),
+    next: z.string().nullable(),
+});
+
+export const RuleGraphNodeSchema = z.discriminatedUnion('type', [
+    ConditionNodeSchema,
+    SplitNodeSchema,
+    DestinationNodeSchema,
+    TransformNodeSchema,
+]);
+
+export const RuleGraphSchema = z
+    .object({
+        entry: z.string(),
+        nodes: z.record(z.string(), RuleGraphNodeSchema),
+    })
+    .refine((data) => data.nodes[data.entry] !== undefined, {
+        message: 'Entry node must reference an existing node in the graph',
+        path: ['entry'],
+    })
+    .nullable();