@rayselfs/cf-rule-engine 1.6.1 → 1.6.2

package/README.md

@@ -18,7 +18,7 @@ npm install @rayselfs/cf-rule-engine
 import { rule, not } from '@rayselfs/cf-rule-engine'
 import { ipCidr, methodIs } from '@rayselfs/cf-rule-engine/criteria/index'
 import { redirect, constructResponse } from '@rayselfs/cf-rule-engine/behaviors/index'
-import { defineViewerRequest } from '@rayselfs/cf-rule-engine/adapters/cf-function'
+import { defineViewerRequest } from '@rayselfs/cf-rule-engine/adapters/viewer-request'
 
 export default defineViewerRequest([
   rule(not(ipCidr(['10.0.0.0/8', '172.16.0.0/12'])), redirect(302, '/blocked')),
@@ -30,7 +30,7 @@ export default defineViewerRequest([
 
 ```typescript
 import { setSecurityHeaders, setCorsHeaders } from '@rayselfs/cf-rule-engine/behaviors/index'
-import { defineViewerResponse } from '@rayselfs/cf-rule-engine/adapters/cf-function'
+import { defineViewerResponse } from '@rayselfs/cf-rule-engine/adapters/viewer-response'
 
 export default defineViewerResponse([
   setSecurityHeaders(),
@@ -70,7 +70,9 @@ Use `chain()` when one behavior must see the request mutations (URI rewrite, hea
 
 | Adapter | Import | Use for |
 |---|---|---|
-| CF Function | `@rayselfs/cf-rule-engine/adapters/cf-function` | `viewer-request`, `viewer-response` |
+| CF Function (viewer-request) | `@rayselfs/cf-rule-engine/adapters/viewer-request` | `viewer-request` only — tree-shake-friendly |
+| CF Function (viewer-response) | `@rayselfs/cf-rule-engine/adapters/viewer-response` | `viewer-response` only — tree-shake-friendly |
+| CF Function (combined) | `@rayselfs/cf-rule-engine/adapters/cf-function` | both — backward compat |
 | Lambda@Edge | `@rayselfs/cf-rule-engine/adapters/lambda-edge` | `viewer-request`, `viewer-response` |
 
 ## Akamai → CloudFront Mapping

package/dist/adapters/cf-function.cjs

@@ -1,10 +1,14 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});require('../chunk-5ZIB3AJ7.cjs');
 
 
-var _chunkSAXDN5NScjs = require('../chunk-SAXDN5NS.cjs');
+var _chunkSGN2N3WIcjs = require('../chunk-SGN2N3WI.cjs');
 require('../chunk-WKYMSRCD.cjs');
+
+
+var _chunkN6QAQALUcjs = require('../chunk-N6QAQALU.cjs');
+require('../chunk-6NFAPLQ7.cjs');
 require('../chunk-75ZPJI57.cjs');
 
 
 
-exports.defineViewerRequest = _chunkSAXDN5NScjs.defineViewerRequest; exports.defineViewerResponse = _chunkSAXDN5NScjs.defineViewerResponse;
+exports.defineViewerRequest = _chunkSGN2N3WIcjs.defineViewerRequest; exports.defineViewerResponse = _chunkN6QAQALUcjs.defineViewerResponse;

package/dist/adapters/cf-function.d.cts

@@ -1,2 +1,3 @@
+export { defineViewerRequest } from './viewer-request.cjs';
+export { defineViewerResponse } from './viewer-response.cjs';
 import '../core/types.cjs';
-export { d as defineViewerRequest, a as defineViewerResponse } from '../viewer-response-DIQHy8L7.cjs';

package/dist/adapters/cf-function.d.ts

@@ -1,2 +1,3 @@
+export { defineViewerRequest } from './viewer-request.js';
+export { defineViewerResponse } from './viewer-response.js';
 import '../core/types.js';
-export { d as defineViewerRequest, a as defineViewerResponse } from '../viewer-response-C9eF2O9s.js';

package/dist/adapters/cf-function.js

@@ -1,8 +1,12 @@
+import "../chunk-PR5UQJCC.js";
 import {
-  defineViewerRequest,
-  defineViewerResponse
-} from "../chunk-NPMGSPNL.js";
+  defineViewerRequest
+} from "../chunk-BJZPAQHW.js";
 import "../chunk-Q4NP4C3B.js";
+import {
+  defineViewerResponse
+} from "../chunk-TURH5IFN.js";
+import "../chunk-CQ7YZ3AR.js";
 import "../chunk-MLKGABMK.js";
 export {
   defineViewerRequest,

package/dist/adapters/viewer-request.cjs

@@ -1,8 +1,9 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkSAXDN5NScjs = require('../chunk-SAXDN5NS.cjs');
+var _chunkSGN2N3WIcjs = require('../chunk-SGN2N3WI.cjs');
 require('../chunk-WKYMSRCD.cjs');
+require('../chunk-6NFAPLQ7.cjs');
 require('../chunk-75ZPJI57.cjs');
 
 
-exports.defineViewerRequest = _chunkSAXDN5NScjs.defineViewerRequest;
+exports.defineViewerRequest = _chunkSGN2N3WIcjs.defineViewerRequest;

package/dist/adapters/viewer-request.d.cts

@@ -1,2 +1,31 @@
-export { d as defineViewerRequest } from '../viewer-response-DIQHy8L7.cjs';
-import '../core/types.cjs';
+import { Rule } from '../core/types.cjs';
+
+/**
+ * Creates a CloudFront Function viewer-request handler from an ordered list of rules.
+ *
+ * The returned function is the CloudFront Function entry point. Assign it as
+ * `export default` or `var handler` depending on your runtime configuration.
+ *
+ * Rules are evaluated in order. Processing stops at the first rule whose behavior
+ * returns a response (e.g. `redirect`, `constructResponse`). If all rules continue,
+ * the (possibly mutated) request is forwarded to the origin.
+ *
+ * @param rules - Ordered array of `Rule` objects created with `rule()`.
+ * @returns A CloudFront Function handler `(event) => request | response`.
+ *
+ * @example
+ * ```ts
+ * import { rule, not } from '@rayselfs/cf-rule-engine'
+ * import { ipCidr, pathPrefix } from '@rayselfs/cf-rule-engine/criteria'
+ * import { redirect, setRequestHeader } from '@rayselfs/cf-rule-engine/behaviors'
+ * import { defineViewerRequest } from '@rayselfs/cf-rule-engine/adapters/viewer-request'
+ *
+ * export default defineViewerRequest([
+ *   rule(not(ipCidr(['10.0.0.0/8'])), redirect(302, 'https://www.example.com')),
+ *   rule(pathPrefix(['/api/']), setRequestHeader('x-forwarded-host', 'api.internal')),
+ * ])
+ * ```
+ */
+declare function defineViewerRequest(rules: Rule[]): (event: unknown) => unknown;
+
+export { defineViewerRequest };

package/dist/adapters/viewer-request.d.ts

@@ -1,2 +1,31 @@
-export { d as defineViewerRequest } from '../viewer-response-C9eF2O9s.js';
-import '../core/types.js';
+import { Rule } from '../core/types.js';
+
+/**
+ * Creates a CloudFront Function viewer-request handler from an ordered list of rules.
+ *
+ * The returned function is the CloudFront Function entry point. Assign it as
+ * `export default` or `var handler` depending on your runtime configuration.
+ *
+ * Rules are evaluated in order. Processing stops at the first rule whose behavior
+ * returns a response (e.g. `redirect`, `constructResponse`). If all rules continue,
+ * the (possibly mutated) request is forwarded to the origin.
+ *
+ * @param rules - Ordered array of `Rule` objects created with `rule()`.
+ * @returns A CloudFront Function handler `(event) => request | response`.
+ *
+ * @example
+ * ```ts
+ * import { rule, not } from '@rayselfs/cf-rule-engine'
+ * import { ipCidr, pathPrefix } from '@rayselfs/cf-rule-engine/criteria'
+ * import { redirect, setRequestHeader } from '@rayselfs/cf-rule-engine/behaviors'
+ * import { defineViewerRequest } from '@rayselfs/cf-rule-engine/adapters/viewer-request'
+ *
+ * export default defineViewerRequest([
+ *   rule(not(ipCidr(['10.0.0.0/8'])), redirect(302, 'https://www.example.com')),
+ *   rule(pathPrefix(['/api/']), setRequestHeader('x-forwarded-host', 'api.internal')),
+ * ])
+ * ```
+ */
+declare function defineViewerRequest(rules: Rule[]): (event: unknown) => unknown;
+
+export { defineViewerRequest };

package/dist/adapters/viewer-request.js

@@ -1,7 +1,8 @@
 import {
   defineViewerRequest
-} from "../chunk-NPMGSPNL.js";
+} from "../chunk-BJZPAQHW.js";
 import "../chunk-Q4NP4C3B.js";
+import "../chunk-CQ7YZ3AR.js";
 import "../chunk-MLKGABMK.js";
 export {
   defineViewerRequest

package/dist/adapters/viewer-response.cjs

@@ -1,8 +1,8 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkSAXDN5NScjs = require('../chunk-SAXDN5NS.cjs');
-require('../chunk-WKYMSRCD.cjs');
+var _chunkN6QAQALUcjs = require('../chunk-N6QAQALU.cjs');
+require('../chunk-6NFAPLQ7.cjs');
 require('../chunk-75ZPJI57.cjs');
 
 
-exports.defineViewerResponse = _chunkSAXDN5NScjs.defineViewerResponse;
+exports.defineViewerResponse = _chunkN6QAQALUcjs.defineViewerResponse;

package/dist/adapters/viewer-response.d.cts

@@ -1,2 +1,37 @@
-export { a as defineViewerResponse } from '../viewer-response-DIQHy8L7.cjs';
-import '../core/types.cjs';
+import { ResponseBehaviorFn, ResponseRule } from '../core/types.cjs';
+
+/**
+ * Creates a CloudFront Function viewer-response handler from an ordered list of
+ * response behaviors or response rules.
+ *
+ * Each entry can be either:
+ * - A bare `ResponseBehaviorFn` — runs unconditionally on every response.
+ * - A `ResponseRule` `{ criteria, behavior }` — runs only when `criteria` returns `true`
+ *   for the current request.
+ *
+ * All behaviors are applied in order; none can short-circuit the response.
+ * The final merged response object is returned to CloudFront.
+ *
+ * Note: If no behavior explicitly sets a body, the `body` field is omitted from
+ * the returned response to avoid overwriting the origin's actual content.
+ *
+ * @param responseBehaviors - Ordered array of `ResponseBehaviorFn` functions or
+ *   `ResponseRule` objects `{ criteria?, behavior }`.
+ * @returns A CloudFront Function handler `(event) => response`.
+ *
+ * @example
+ * ```ts
+ * import { setSecurityHeaders, setCorsHeaders, setResponseHeader } from '@rayselfs/cf-rule-engine/behaviors'
+ * import { pathPrefix } from '@rayselfs/cf-rule-engine/criteria'
+ * import { defineViewerResponse } from '@rayselfs/cf-rule-engine/adapters/viewer-response'
+ *
+ * export default defineViewerResponse([
+ *   setSecurityHeaders(),
+ *   setCorsHeaders({ allowedOrigins: ['https://www.example.com'] }),
+ *   { criteria: pathPrefix(['/api/']), behavior: setResponseHeader('cache-control', 'no-store') },
+ * ])
+ * ```
+ */
+declare function defineViewerResponse(responseBehaviors: Array<ResponseBehaviorFn | ResponseRule>): (event: unknown) => unknown;
+
+export { defineViewerResponse };

package/dist/adapters/viewer-response.d.ts

@@ -1,2 +1,37 @@
-export { a as defineViewerResponse } from '../viewer-response-C9eF2O9s.js';
-import '../core/types.js';
+import { ResponseBehaviorFn, ResponseRule } from '../core/types.js';
+
+/**
+ * Creates a CloudFront Function viewer-response handler from an ordered list of
+ * response behaviors or response rules.
+ *
+ * Each entry can be either:
+ * - A bare `ResponseBehaviorFn` — runs unconditionally on every response.
+ * - A `ResponseRule` `{ criteria, behavior }` — runs only when `criteria` returns `true`
+ *   for the current request.
+ *
+ * All behaviors are applied in order; none can short-circuit the response.
+ * The final merged response object is returned to CloudFront.
+ *
+ * Note: If no behavior explicitly sets a body, the `body` field is omitted from
+ * the returned response to avoid overwriting the origin's actual content.
+ *
+ * @param responseBehaviors - Ordered array of `ResponseBehaviorFn` functions or
+ *   `ResponseRule` objects `{ criteria?, behavior }`.
+ * @returns A CloudFront Function handler `(event) => response`.
+ *
+ * @example
+ * ```ts
+ * import { setSecurityHeaders, setCorsHeaders, setResponseHeader } from '@rayselfs/cf-rule-engine/behaviors'
+ * import { pathPrefix } from '@rayselfs/cf-rule-engine/criteria'
+ * import { defineViewerResponse } from '@rayselfs/cf-rule-engine/adapters/viewer-response'
+ *
+ * export default defineViewerResponse([
+ *   setSecurityHeaders(),
+ *   setCorsHeaders({ allowedOrigins: ['https://www.example.com'] }),
+ *   { criteria: pathPrefix(['/api/']), behavior: setResponseHeader('cache-control', 'no-store') },
+ * ])
+ * ```
+ */
+declare function defineViewerResponse(responseBehaviors: Array<ResponseBehaviorFn | ResponseRule>): (event: unknown) => unknown;
+
+export { defineViewerResponse };

package/dist/adapters/viewer-response.js

@@ -1,7 +1,7 @@
 import {
   defineViewerResponse
-} from "../chunk-NPMGSPNL.js";
-import "../chunk-Q4NP4C3B.js";
+} from "../chunk-TURH5IFN.js";
+import "../chunk-CQ7YZ3AR.js";
 import "../chunk-MLKGABMK.js";
 export {
   defineViewerResponse

package/dist/cf-function-BkfWpTfl.d.cts

@@ -0,0 +1,10 @@
+import { defineViewerRequest } from './adapters/viewer-request.cjs';
+import { defineViewerResponse } from './adapters/viewer-response.cjs';
+
+declare const cfFunction_defineViewerRequest: typeof defineViewerRequest;
+declare const cfFunction_defineViewerResponse: typeof defineViewerResponse;
+declare namespace cfFunction {
+  export { cfFunction_defineViewerRequest as defineViewerRequest, cfFunction_defineViewerResponse as defineViewerResponse };
+}
+
+export { cfFunction as c };

package/dist/cf-function-CZwCWch-.d.ts

@@ -0,0 +1,10 @@
+import { defineViewerRequest } from './adapters/viewer-request.js';
+import { defineViewerResponse } from './adapters/viewer-response.js';
+
+declare const cfFunction_defineViewerRequest: typeof defineViewerRequest;
+declare const cfFunction_defineViewerResponse: typeof defineViewerResponse;
+declare namespace cfFunction {
+  export { cfFunction_defineViewerRequest as defineViewerRequest, cfFunction_defineViewerResponse as defineViewerResponse };
+}
+
+export { cfFunction as c };

package/dist/chunk-5ZIB3AJ7.cjs

@@ -0,0 +1,20 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkSGN2N3WIcjs = require('./chunk-SGN2N3WI.cjs');
+
+
+var _chunkN6QAQALUcjs = require('./chunk-N6QAQALU.cjs');
+
+
+var _chunk75ZPJI57cjs = require('./chunk-75ZPJI57.cjs');
+
+// src/adapters/cf-function.ts
+var cf_function_exports = {};
+_chunk75ZPJI57cjs.__export.call(void 0, cf_function_exports, {
+  defineViewerRequest: () => _chunkSGN2N3WIcjs.defineViewerRequest,
+  defineViewerResponse: () => _chunkN6QAQALUcjs.defineViewerResponse
+});
+
+
+
+exports.cf_function_exports = cf_function_exports;

package/dist/chunk-6NFAPLQ7.cjs

@@ -0,0 +1,39 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }// src/adapters/_normalize.ts
+function normalizeRequest(event) {
+  const ev = event;
+  const req = ev.request;
+  const viewer = ev.viewer;
+  const headers = _nullishCoalesce(req.headers, () => ( {}));
+  return {
+    uri: req.uri,
+    method: req.method,
+    protocol: "https",
+    querystring: _nullishCoalesce(req.querystring, () => ( {})),
+    headers,
+    clientIp: _nullishCoalesce(_optionalChain([viewer, 'optionalAccess', _ => _.ip]), () => ( "")),
+    country: _optionalChain([headers, 'access', _2 => _2["cloudfront-viewer-country"], 'optionalAccess', _3 => _3.value])
+  };
+}
+function denormalizeRequest(req, cookies) {
+  return {
+    method: req.method,
+    uri: req.uri,
+    querystring: req.querystring,
+    headers: req.headers,
+    cookies
+  };
+}
+function denormalizeResponse(res) {
+  return {
+    statusCode: res.statusCode,
+    statusDescription: res.statusDescription,
+    headers: res.headers,
+    body: _nullishCoalesce(res.body, () => ( ""))
+  };
+}
+
+
+
+
+
+exports.normalizeRequest = normalizeRequest; exports.denormalizeRequest = denormalizeRequest; exports.denormalizeResponse = denormalizeResponse;

package/dist/chunk-BJZPAQHW.js

@@ -0,0 +1,25 @@
+import {
+  runRules
+} from "./chunk-Q4NP4C3B.js";
+import {
+  denormalizeRequest,
+  denormalizeResponse,
+  normalizeRequest
+} from "./chunk-CQ7YZ3AR.js";
+
+// src/adapters/viewer-request.ts
+function defineViewerRequest(rules) {
+  return (event) => {
+    const ev = event;
+    const evReq = ev.request;
+    const originalCookies = evReq.cookies ?? {};
+    const req = normalizeRequest(event);
+    const result = runRules(rules, req);
+    if (result.action === "respond") return denormalizeResponse(result.response);
+    return denormalizeRequest(result.request, originalCookies);
+  };
+}
+
+export {
+  defineViewerRequest
+};

package/dist/chunk-CQ7YZ3AR.js

@@ -0,0 +1,39 @@
+// src/adapters/_normalize.ts
+function normalizeRequest(event) {
+  const ev = event;
+  const req = ev.request;
+  const viewer = ev.viewer;
+  const headers = req.headers ?? {};
+  return {
+    uri: req.uri,
+    method: req.method,
+    protocol: "https",
+    querystring: req.querystring ?? {},
+    headers,
+    clientIp: viewer?.ip ?? "",
+    country: headers["cloudfront-viewer-country"]?.value
+  };
+}
+function denormalizeRequest(req, cookies) {
+  return {
+    method: req.method,
+    uri: req.uri,
+    querystring: req.querystring,
+    headers: req.headers,
+    cookies
+  };
+}
+function denormalizeResponse(res) {
+  return {
+    statusCode: res.statusCode,
+    statusDescription: res.statusDescription,
+    headers: res.headers,
+    body: res.body ?? ""
+  };
+}
+
+export {
+  normalizeRequest,
+  denormalizeRequest,
+  denormalizeResponse
+};

package/dist/chunk-N6QAQALU.cjs

@@ -0,0 +1,36 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+
+var _chunk6NFAPLQ7cjs = require('./chunk-6NFAPLQ7.cjs');
+
+// src/adapters/viewer-response.ts
+function defineViewerResponse(responseBehaviors) {
+  return (event) => {
+    const ev = event;
+    const evRes = ev.response;
+    const req = _chunk6NFAPLQ7cjs.normalizeRequest.call(void 0, event);
+    let response = {
+      statusCode: _nullishCoalesce(_optionalChain([evRes, 'optionalAccess', _ => _.statusCode]), () => ( 200)),
+      statusDescription: _optionalChain([evRes, 'optionalAccess', _2 => _2.statusDescription]),
+      headers: _nullishCoalesce(_optionalChain([evRes, 'optionalAccess', _3 => _3.headers]), () => ( {})),
+      body: _optionalChain([evRes, 'optionalAccess', _4 => _4.body])
+    };
+    for (let i = 0; i < responseBehaviors.length; i++) {
+      const entry = responseBehaviors[i];
+      if (typeof entry === "function") {
+        response = entry(req, response);
+      } else if (!entry.criteria || entry.criteria(req)) {
+        response = entry.behavior(req, response);
+      }
+    }
+    const normalized = _chunk6NFAPLQ7cjs.denormalizeResponse.call(void 0, response);
+    if (!response.body) {
+      delete normalized.body;
+    }
+    return Object.assign({}, evRes, normalized);
+  };
+}
+
+
+
+exports.defineViewerResponse = defineViewerResponse;

package/dist/chunk-PR5UQJCC.js

@@ -0,0 +1,20 @@
+import {
+  defineViewerRequest
+} from "./chunk-BJZPAQHW.js";
+import {
+  defineViewerResponse
+} from "./chunk-TURH5IFN.js";
+import {
+  __export
+} from "./chunk-MLKGABMK.js";
+
+// src/adapters/cf-function.ts
+var cf_function_exports = {};
+__export(cf_function_exports, {
+  defineViewerRequest: () => defineViewerRequest,
+  defineViewerResponse: () => defineViewerResponse
+});
+
+export {
+  cf_function_exports
+};

package/dist/chunk-SGN2N3WI.cjs

@@ -0,0 +1,25 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
+
+var _chunkWKYMSRCDcjs = require('./chunk-WKYMSRCD.cjs');
+
+
+
+
+var _chunk6NFAPLQ7cjs = require('./chunk-6NFAPLQ7.cjs');
+
+// src/adapters/viewer-request.ts
+function defineViewerRequest(rules) {
+  return (event) => {
+    const ev = event;
+    const evReq = ev.request;
+    const originalCookies = _nullishCoalesce(evReq.cookies, () => ( {}));
+    const req = _chunk6NFAPLQ7cjs.normalizeRequest.call(void 0, event);
+    const result = _chunkWKYMSRCDcjs.runRules.call(void 0, rules, req);
+    if (result.action === "respond") return _chunk6NFAPLQ7cjs.denormalizeResponse.call(void 0, result.response);
+    return _chunk6NFAPLQ7cjs.denormalizeRequest.call(void 0, result.request, originalCookies);
+  };
+}
+
+
+
+exports.defineViewerRequest = defineViewerRequest;

package/dist/chunk-TURH5IFN.js

@@ -0,0 +1,36 @@
+import {
+  denormalizeResponse,
+  normalizeRequest
+} from "./chunk-CQ7YZ3AR.js";
+
+// src/adapters/viewer-response.ts
+function defineViewerResponse(responseBehaviors) {
+  return (event) => {
+    const ev = event;
+    const evRes = ev.response;
+    const req = normalizeRequest(event);
+    let response = {
+      statusCode: evRes?.statusCode ?? 200,
+      statusDescription: evRes?.statusDescription,
+      headers: evRes?.headers ?? {},
+      body: evRes?.body
+    };
+    for (let i = 0; i < responseBehaviors.length; i++) {
+      const entry = responseBehaviors[i];
+      if (typeof entry === "function") {
+        response = entry(req, response);
+      } else if (!entry.criteria || entry.criteria(req)) {
+        response = entry.behavior(req, response);
+      }
+    }
+    const normalized = denormalizeResponse(response);
+    if (!response.body) {
+      delete normalized.body;
+    }
+    return Object.assign({}, evRes, normalized);
+  };
+}
+
+export {
+  defineViewerResponse
+};

package/dist/index.cjs

@@ -1,10 +1,11 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});require('./chunk-MEHWLQLR.cjs');
 
 
-var _chunk3BBLG4IXcjs = require('./chunk-3BBLG4IX.cjs');
+var _chunk5ZIB3AJ7cjs = require('./chunk-5ZIB3AJ7.cjs');
 
 
-var _chunkSAXDN5NScjs = require('./chunk-SAXDN5NS.cjs');
+var _chunk3BBLG4IXcjs = require('./chunk-3BBLG4IX.cjs');
+require('./chunk-SGN2N3WI.cjs');
 
 
 
@@ -13,6 +14,8 @@ var _chunkSAXDN5NScjs = require('./chunk-SAXDN5NS.cjs');
 
 
 var _chunkWKYMSRCDcjs = require('./chunk-WKYMSRCD.cjs');
+require('./chunk-N6QAQALU.cjs');
+require('./chunk-6NFAPLQ7.cjs');
 require('./chunk-75ZPJI57.cjs');
 
 
@@ -23,4 +26,4 @@ require('./chunk-75ZPJI57.cjs');
 
 
 
-exports.all = _chunkWKYMSRCDcjs.all; exports.any = _chunkWKYMSRCDcjs.any; exports.cfFunction = _chunkSAXDN5NScjs.cf_function_exports; exports.chain = _chunkWKYMSRCDcjs.chain; exports.lambdaEdge = _chunk3BBLG4IXcjs.lambda_edge_exports; exports.not = _chunkWKYMSRCDcjs.not; exports.rule = _chunkWKYMSRCDcjs.rule; exports.runRules = _chunkWKYMSRCDcjs.runRules;
+exports.all = _chunkWKYMSRCDcjs.all; exports.any = _chunkWKYMSRCDcjs.any; exports.cfFunction = _chunk5ZIB3AJ7cjs.cf_function_exports; exports.chain = _chunkWKYMSRCDcjs.chain; exports.lambdaEdge = _chunk3BBLG4IXcjs.lambda_edge_exports; exports.not = _chunkWKYMSRCDcjs.not; exports.rule = _chunkWKYMSRCDcjs.rule; exports.runRules = _chunkWKYMSRCDcjs.runRules;

package/dist/index.d.cts

@@ -1,4 +1,6 @@
 export { BehaviorFn, BehaviorResult, CriteriaFn, HttpRequest, HttpResponse, ResponseBehaviorFn, ResponseRule, Rule, ViewerRequestHandler, ViewerResponseHandler } from './core/types.cjs';
 export { all, any, chain, not, rule, runRules } from './core/rule.cjs';
-export { c as cfFunction } from './viewer-response-DIQHy8L7.cjs';
+export { c as cfFunction } from './cf-function-BkfWpTfl.cjs';
 export { l as lambdaEdge } from './lambda-edge-9xiONGmR.cjs';
+import './adapters/viewer-request.cjs';
+import './adapters/viewer-response.cjs';

package/dist/index.d.ts

@@ -1,4 +1,6 @@
 export { BehaviorFn, BehaviorResult, CriteriaFn, HttpRequest, HttpResponse, ResponseBehaviorFn, ResponseRule, Rule, ViewerRequestHandler, ViewerResponseHandler } from './core/types.js';
 export { all, any, chain, not, rule, runRules } from './core/rule.js';
-export { c as cfFunction } from './viewer-response-C9eF2O9s.js';
+export { c as cfFunction } from './cf-function-CZwCWch-.js';
 export { l as lambdaEdge } from './lambda-edge-BK3-bFx8.js';
+import './adapters/viewer-request.js';
+import './adapters/viewer-response.js';

package/dist/index.js

@@ -1,10 +1,11 @@
 import "./chunk-KZ72PI2A.js";
+import {
+  cf_function_exports
+} from "./chunk-PR5UQJCC.js";
 import {
   lambda_edge_exports
 } from "./chunk-WEBU4R5C.js";
-import {
-  cf_function_exports
-} from "./chunk-NPMGSPNL.js";
+import "./chunk-BJZPAQHW.js";
 import {
   all,
   any,
@@ -13,6 +14,8 @@ import {
   rule,
   runRules
 } from "./chunk-Q4NP4C3B.js";
+import "./chunk-TURH5IFN.js";
+import "./chunk-CQ7YZ3AR.js";
 import "./chunk-MLKGABMK.js";
 export {
   all,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rayselfs/cf-rule-engine",
-  "version": "1.6.1",
+  "version": "1.6.2",
   "description": "Composable, tree-shakeable CloudFront Function rules",
   "license": "MIT",
   "sideEffects": false,

package/dist/chunk-NPMGSPNL.js

@@ -1,88 +0,0 @@
-import {
-  runRules
-} from "./chunk-Q4NP4C3B.js";
-import {
-  __export
-} from "./chunk-MLKGABMK.js";
-
-// src/adapters/cf-function.ts
-var cf_function_exports = {};
-__export(cf_function_exports, {
-  defineViewerRequest: () => defineViewerRequest,
-  defineViewerResponse: () => defineViewerResponse
-});
-function normalizeRequest(event) {
-  const ev = event;
-  const req = ev.request;
-  const viewer = ev.viewer;
-  const headers = req.headers ?? {};
-  return {
-    uri: req.uri,
-    method: req.method,
-    protocol: "https",
-    querystring: req.querystring ?? {},
-    headers,
-    clientIp: viewer?.ip ?? "",
-    country: headers["cloudfront-viewer-country"]?.value
-  };
-}
-function denormalizeRequest(req, cookies) {
-  return {
-    method: req.method,
-    uri: req.uri,
-    querystring: req.querystring,
-    headers: req.headers,
-    cookies
-  };
-}
-function denormalizeResponse(res) {
-  return {
-    statusCode: res.statusCode,
-    statusDescription: res.statusDescription,
-    headers: res.headers,
-    body: res.body ?? ""
-  };
-}
-function defineViewerRequest(rules) {
-  return (event) => {
-    const ev = event;
-    const evReq = ev.request;
-    const originalCookies = evReq.cookies ?? {};
-    const req = normalizeRequest(event);
-    const result = runRules(rules, req);
-    if (result.action === "respond") return denormalizeResponse(result.response);
-    return denormalizeRequest(result.request, originalCookies);
-  };
-}
-function defineViewerResponse(responseBehaviors) {
-  return (event) => {
-    const ev = event;
-    const evRes = ev.response;
-    const req = normalizeRequest(event);
-    let response = {
-      statusCode: evRes?.statusCode ?? 200,
-      statusDescription: evRes?.statusDescription,
-      headers: evRes?.headers ?? {},
-      body: evRes?.body
-    };
-    for (let i = 0; i < responseBehaviors.length; i++) {
-      const entry = responseBehaviors[i];
-      if (typeof entry === "function") {
-        response = entry(req, response);
-      } else if (!entry.criteria || entry.criteria(req)) {
-        response = entry.behavior(req, response);
-      }
-    }
-    const normalized = denormalizeResponse(response);
-    if (!response.body) {
-      delete normalized.body;
-    }
-    return Object.assign({}, evRes, normalized);
-  };
-}
-
-export {
-  defineViewerRequest,
-  defineViewerResponse,
-  cf_function_exports
-};

package/dist/chunk-SAXDN5NS.cjs

@@ -1,88 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
-
-var _chunkWKYMSRCDcjs = require('./chunk-WKYMSRCD.cjs');
-
-
-var _chunk75ZPJI57cjs = require('./chunk-75ZPJI57.cjs');
-
-// src/adapters/cf-function.ts
-var cf_function_exports = {};
-_chunk75ZPJI57cjs.__export.call(void 0, cf_function_exports, {
-  defineViewerRequest: () => defineViewerRequest,
-  defineViewerResponse: () => defineViewerResponse
-});
-function normalizeRequest(event) {
-  const ev = event;
-  const req = ev.request;
-  const viewer = ev.viewer;
-  const headers = _nullishCoalesce(req.headers, () => ( {}));
-  return {
-    uri: req.uri,
-    method: req.method,
-    protocol: "https",
-    querystring: _nullishCoalesce(req.querystring, () => ( {})),
-    headers,
-    clientIp: _nullishCoalesce(_optionalChain([viewer, 'optionalAccess', _ => _.ip]), () => ( "")),
-    country: _optionalChain([headers, 'access', _2 => _2["cloudfront-viewer-country"], 'optionalAccess', _3 => _3.value])
-  };
-}
-function denormalizeRequest(req, cookies) {
-  return {
-    method: req.method,
-    uri: req.uri,
-    querystring: req.querystring,
-    headers: req.headers,
-    cookies
-  };
-}
-function denormalizeResponse(res) {
-  return {
-    statusCode: res.statusCode,
-    statusDescription: res.statusDescription,
-    headers: res.headers,
-    body: _nullishCoalesce(res.body, () => ( ""))
-  };
-}
-function defineViewerRequest(rules) {
-  return (event) => {
-    const ev = event;
-    const evReq = ev.request;
-    const originalCookies = _nullishCoalesce(evReq.cookies, () => ( {}));
-    const req = normalizeRequest(event);
-    const result = _chunkWKYMSRCDcjs.runRules.call(void 0, rules, req);
-    if (result.action === "respond") return denormalizeResponse(result.response);
-    return denormalizeRequest(result.request, originalCookies);
-  };
-}
-function defineViewerResponse(responseBehaviors) {
-  return (event) => {
-    const ev = event;
-    const evRes = ev.response;
-    const req = normalizeRequest(event);
-    let response = {
-      statusCode: _nullishCoalesce(_optionalChain([evRes, 'optionalAccess', _4 => _4.statusCode]), () => ( 200)),
-      statusDescription: _optionalChain([evRes, 'optionalAccess', _5 => _5.statusDescription]),
-      headers: _nullishCoalesce(_optionalChain([evRes, 'optionalAccess', _6 => _6.headers]), () => ( {})),
-      body: _optionalChain([evRes, 'optionalAccess', _7 => _7.body])
-    };
-    for (let i = 0; i < responseBehaviors.length; i++) {
-      const entry = responseBehaviors[i];
-      if (typeof entry === "function") {
-        response = entry(req, response);
-      } else if (!entry.criteria || entry.criteria(req)) {
-        response = entry.behavior(req, response);
-      }
-    }
-    const normalized = denormalizeResponse(response);
-    if (!response.body) {
-      delete normalized.body;
-    }
-    return Object.assign({}, evRes, normalized);
-  };
-}
-
-
-
-
-
-exports.defineViewerRequest = defineViewerRequest; exports.defineViewerResponse = defineViewerResponse; exports.cf_function_exports = cf_function_exports;

package/dist/viewer-response-C9eF2O9s.d.ts

@@ -1,70 +0,0 @@
-import { Rule, ResponseBehaviorFn, ResponseRule } from './core/types.js';
-
-/**
- * Creates a CloudFront Function viewer-request handler from an ordered list of rules.
- *
- * The returned function is the CloudFront Function entry point. Assign it as
- * `export default` or `var handler` depending on your runtime configuration.
- *
- * Rules are evaluated in order. Processing stops at the first rule whose behavior
- * returns a response (e.g. `redirect`, `constructResponse`). If all rules continue,
- * the (possibly mutated) request is forwarded to the origin.
- *
- * @param rules - Ordered array of `Rule` objects created with `rule()`.
- * @returns A CloudFront Function handler `(event) => request | response`.
- *
- * @example
- * ```ts
- * import { rule, not } from '@rayselfs/cf-rule-engine'
- * import { ipCidr, pathPrefix } from '@rayselfs/cf-rule-engine/criteria'
- * import { redirect, setRequestHeader } from '@rayselfs/cf-rule-engine/behaviors'
- * import { defineViewerRequest } from '@rayselfs/cf-rule-engine/adapters/cf-function'
- *
- * export default defineViewerRequest([
- *   rule(not(ipCidr(['10.0.0.0/8'])), redirect(302, 'https://www.example.com')),
- *   rule(pathPrefix(['/api/']), setRequestHeader('x-forwarded-host', 'api.internal')),
- * ])
- * ```
- */
-declare function defineViewerRequest(rules: Rule[]): (event: unknown) => unknown;
-/**
- * Creates a CloudFront Function viewer-response handler from an ordered list of
- * response behaviors or response rules.
- *
- * Each entry can be either:
- * - A bare `ResponseBehaviorFn` — runs unconditionally on every response.
- * - A `ResponseRule` `{ criteria, behavior }` — runs only when `criteria` returns `true`
- *   for the current request.
- *
- * All behaviors are applied in order; none can short-circuit the response.
- * The final merged response object is returned to CloudFront.
- *
- * Note: If no behavior explicitly sets a body, the `body` field is omitted from
- * the returned response to avoid overwriting the origin's actual content.
- *
- * @param responseBehaviors - Ordered array of `ResponseBehaviorFn` functions or
- *   `ResponseRule` objects `{ criteria?, behavior }`.
- * @returns A CloudFront Function handler `(event) => response`.
- *
- * @example
- * ```ts
- * import { setSecurityHeaders, setCorsHeaders, setResponseHeader } from '@rayselfs/cf-rule-engine/behaviors'
- * import { pathPrefix } from '@rayselfs/cf-rule-engine/criteria'
- * import { defineViewerResponse } from '@rayselfs/cf-rule-engine/adapters/cf-function'
- *
- * export default defineViewerResponse([
- *   setSecurityHeaders(),
- *   setCorsHeaders({ allowedOrigins: ['https://www.example.com'] }),
- *   { criteria: pathPrefix(['/api/']), behavior: setResponseHeader('cache-control', 'no-store') },
- * ])
- * ```
- */
-declare function defineViewerResponse(responseBehaviors: Array<ResponseBehaviorFn | ResponseRule>): (event: unknown) => unknown;
-
-declare const cfFunction_defineViewerRequest: typeof defineViewerRequest;
-declare const cfFunction_defineViewerResponse: typeof defineViewerResponse;
-declare namespace cfFunction {
-  export { cfFunction_defineViewerRequest as defineViewerRequest, cfFunction_defineViewerResponse as defineViewerResponse };
-}
-
-export { defineViewerResponse as a, cfFunction as c, defineViewerRequest as d };

package/dist/viewer-response-DIQHy8L7.d.cts

@@ -1,70 +0,0 @@
-import { Rule, ResponseBehaviorFn, ResponseRule } from './core/types.cjs';
-
-/**
- * Creates a CloudFront Function viewer-request handler from an ordered list of rules.
- *
- * The returned function is the CloudFront Function entry point. Assign it as
- * `export default` or `var handler` depending on your runtime configuration.
- *
- * Rules are evaluated in order. Processing stops at the first rule whose behavior
- * returns a response (e.g. `redirect`, `constructResponse`). If all rules continue,
- * the (possibly mutated) request is forwarded to the origin.
- *
- * @param rules - Ordered array of `Rule` objects created with `rule()`.
- * @returns A CloudFront Function handler `(event) => request | response`.
- *
- * @example
- * ```ts
- * import { rule, not } from '@rayselfs/cf-rule-engine'
- * import { ipCidr, pathPrefix } from '@rayselfs/cf-rule-engine/criteria'
- * import { redirect, setRequestHeader } from '@rayselfs/cf-rule-engine/behaviors'
- * import { defineViewerRequest } from '@rayselfs/cf-rule-engine/adapters/cf-function'
- *
- * export default defineViewerRequest([
- *   rule(not(ipCidr(['10.0.0.0/8'])), redirect(302, 'https://www.example.com')),
- *   rule(pathPrefix(['/api/']), setRequestHeader('x-forwarded-host', 'api.internal')),
- * ])
- * ```
- */
-declare function defineViewerRequest(rules: Rule[]): (event: unknown) => unknown;
-/**
- * Creates a CloudFront Function viewer-response handler from an ordered list of
- * response behaviors or response rules.
- *
- * Each entry can be either:
- * - A bare `ResponseBehaviorFn` — runs unconditionally on every response.
- * - A `ResponseRule` `{ criteria, behavior }` — runs only when `criteria` returns `true`
- *   for the current request.
- *
- * All behaviors are applied in order; none can short-circuit the response.
- * The final merged response object is returned to CloudFront.
- *
- * Note: If no behavior explicitly sets a body, the `body` field is omitted from
- * the returned response to avoid overwriting the origin's actual content.
- *
- * @param responseBehaviors - Ordered array of `ResponseBehaviorFn` functions or
- *   `ResponseRule` objects `{ criteria?, behavior }`.
- * @returns A CloudFront Function handler `(event) => response`.
- *
- * @example
- * ```ts
- * import { setSecurityHeaders, setCorsHeaders, setResponseHeader } from '@rayselfs/cf-rule-engine/behaviors'
- * import { pathPrefix } from '@rayselfs/cf-rule-engine/criteria'
- * import { defineViewerResponse } from '@rayselfs/cf-rule-engine/adapters/cf-function'
- *
- * export default defineViewerResponse([
- *   setSecurityHeaders(),
- *   setCorsHeaders({ allowedOrigins: ['https://www.example.com'] }),
- *   { criteria: pathPrefix(['/api/']), behavior: setResponseHeader('cache-control', 'no-store') },
- * ])
- * ```
- */
-declare function defineViewerResponse(responseBehaviors: Array<ResponseBehaviorFn | ResponseRule>): (event: unknown) => unknown;
-
-declare const cfFunction_defineViewerRequest: typeof defineViewerRequest;
-declare const cfFunction_defineViewerResponse: typeof defineViewerResponse;
-declare namespace cfFunction {
-  export { cfFunction_defineViewerRequest as defineViewerRequest, cfFunction_defineViewerResponse as defineViewerResponse };
-}
-
-export { defineViewerResponse as a, cfFunction as c, defineViewerRequest as d };