@rayselfs/cf-rule-engine 1.9.0 → 1.9.2

package/dist/helpers/preflight-request.cjs

@@ -1,10 +1,10 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkEMDI676Gcjs = require('../chunk-EMDI676G.cjs');
+var _chunkCLGM2TGTcjs = require('../chunk-CLGM2TGT.cjs');
 require('../chunk-OTFDML3K.cjs');
-require('../chunk-IHVOAORH.cjs');
-require('../chunk-ULICUDDH.cjs');
+require('../chunk-TJ2POKWD.cjs');
+require('../chunk-YNKZGZ7I.cjs');
 require('../chunk-75ZPJI57.cjs');
 
 
-exports.preflightRequest = _chunkEMDI676Gcjs.preflightRequest;
+exports.preflightRequest = _chunkCLGM2TGTcjs.preflightRequest;

package/dist/helpers/preflight-request.js

@@ -1,9 +1,9 @@
 import {
   preflightRequest
-} from "../chunk-7EA7GFWX.js";
+} from "../chunk-VRSD6YHP.js";
 import "../chunk-PY3JMRDG.js";
-import "../chunk-H3RK4USR.js";
-import "../chunk-EEZ7NUJG.js";
+import "../chunk-GKE3YDHR.js";
+import "../chunk-NJD4L4Q3.js";
 import "../chunk-MLKGABMK.js";
 export {
   preflightRequest

package/dist/helpers/whitelist.cjs

@@ -1,14 +1,16 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkISXKMJCNcjs = require('../chunk-ISXKMJCN.cjs');
-require('../chunk-ZEFLAOTL.cjs');
-require('../chunk-LVOM5GJ6.cjs');
+var _chunkHMQIXEFJcjs = require('../chunk-HMQIXEFJ.cjs');
+require('../chunk-7T4G7UF7.cjs');
+require('../chunk-G7JGTBTT.cjs');
+require('../chunk-WUFGMLE7.cjs');
 require('../chunk-MK4QBCD5.cjs');
 require('../chunk-WZKRNMF2.cjs');
-require('../chunk-ULICUDDH.cjs');
+require('../chunk-VEEOQ7TS.cjs');
+require('../chunk-YNKZGZ7I.cjs');
 require('../chunk-WWSRNCUP.cjs');
 require('../chunk-WKYMSRCD.cjs');
 require('../chunk-75ZPJI57.cjs');
 
 
-exports.whitelist = _chunkISXKMJCNcjs.whitelist;
+exports.whitelist = _chunkHMQIXEFJcjs.whitelist;

package/dist/helpers/whitelist.d.cts

@@ -3,7 +3,7 @@ import { Rule } from '../core/types.cjs';
 /**
  * Configuration options for the IP/User-Agent access whitelist.
  */
-interface WhitelistOptions {
+type WhitelistOptions = {
     /**
      * CIDR ranges to allow (e.g. office IPs, VPN, stage VPCs).
      * At least one of `cidrs` or `userAgents` must be non-empty, otherwise
@@ -32,42 +32,7 @@ interface WhitelistOptions {
      * @example `['/api/health', '/public/*']`
      */
     bypassPaths?: string[];
-}
-/**
- * Creates a `Rule` that restricts access by IP CIDR range and/or User-Agent
- * pattern. Any request that does not match an allowed CIDR or User-Agent
- * (and is not on a bypassed path) is redirected with HTTP 302 to
- * `options.redirectUrl`.
- *
- * No default allowlists are included — callers must supply all allowed
- * CIDRs and User-Agent patterns explicitly.
- *
- * @param options - Whitelist configuration.
- * @returns A `Rule` ready to pass as an element of `defineViewerRequest`.
- *
- * @example
- * ```ts
- * import { whitelist } from '@rayselfs/cf-rule-engine/helpers'
- * import { defineViewerRequest } from '@rayselfs/cf-rule-engine/adapters/cf-function'
- *
- * export default defineViewerRequest([
- *   whitelist({
- *     cidrs: ['203.0.113.0/24', '10.0.0.0/8'],
- *     userAgents: ['*InternalBot*'],
- *     redirectUrl: 'https://www.example.com',
- *   }),
- * ])
- *
- * // With bypass paths:
- * export default defineViewerRequest([
- *   whitelist({
- *     cidrs: ['203.0.113.0/24'],
- *     redirectUrl: 'https://www.example.com',
- *     bypassPaths: ['/api/health', '/robots.txt'],
- *   }),
- * ])
- * ```
- */
+};
 declare function whitelist(options: WhitelistOptions): Rule;
 
 export { type WhitelistOptions, whitelist };

package/dist/helpers/whitelist.d.ts

@@ -3,7 +3,7 @@ import { Rule } from '../core/types.js';
 /**
  * Configuration options for the IP/User-Agent access whitelist.
  */
-interface WhitelistOptions {
+type WhitelistOptions = {
     /**
      * CIDR ranges to allow (e.g. office IPs, VPN, stage VPCs).
      * At least one of `cidrs` or `userAgents` must be non-empty, otherwise
@@ -32,42 +32,7 @@ interface WhitelistOptions {
      * @example `['/api/health', '/public/*']`
      */
     bypassPaths?: string[];
-}
-/**
- * Creates a `Rule` that restricts access by IP CIDR range and/or User-Agent
- * pattern. Any request that does not match an allowed CIDR or User-Agent
- * (and is not on a bypassed path) is redirected with HTTP 302 to
- * `options.redirectUrl`.
- *
- * No default allowlists are included — callers must supply all allowed
- * CIDRs and User-Agent patterns explicitly.
- *
- * @param options - Whitelist configuration.
- * @returns A `Rule` ready to pass as an element of `defineViewerRequest`.
- *
- * @example
- * ```ts
- * import { whitelist } from '@rayselfs/cf-rule-engine/helpers'
- * import { defineViewerRequest } from '@rayselfs/cf-rule-engine/adapters/cf-function'
- *
- * export default defineViewerRequest([
- *   whitelist({
- *     cidrs: ['203.0.113.0/24', '10.0.0.0/8'],
- *     userAgents: ['*InternalBot*'],
- *     redirectUrl: 'https://www.example.com',
- *   }),
- * ])
- *
- * // With bypass paths:
- * export default defineViewerRequest([
- *   whitelist({
- *     cidrs: ['203.0.113.0/24'],
- *     redirectUrl: 'https://www.example.com',
- *     bypassPaths: ['/api/health', '/robots.txt'],
- *   }),
- * ])
- * ```
- */
+};
 declare function whitelist(options: WhitelistOptions): Rule;
 
 export { type WhitelistOptions, whitelist };

package/dist/helpers/whitelist.js

@@ -1,11 +1,13 @@
 import {
   whitelist
-} from "../chunk-IHDSTTO2.js";
-import "../chunk-Y7TIDVVC.js";
-import "../chunk-VQGBRWJK.js";
+} from "../chunk-SC6UPQYF.js";
+import "../chunk-I7YELJ2P.js";
+import "../chunk-XLSZ5RB7.js";
+import "../chunk-HWJFOKZX.js";
 import "../chunk-YHTUV2SA.js";
 import "../chunk-NWRGD3AH.js";
-import "../chunk-EEZ7NUJG.js";
+import "../chunk-UD456E4I.js";
+import "../chunk-NJD4L4Q3.js";
 import "../chunk-DSSFFJWL.js";
 import "../chunk-Q4NP4C3B.js";
 import "../chunk-MLKGABMK.js";

package/dist/shared/kvs.d.cts

@@ -1,5 +1,10 @@
-interface KvsHandle {
+/**
+ * Minimal interface for a CloudFront KeyValueStore handle.
+ * Compatible with the handle returned by `CloudFront.createKeyValueStore(event)`
+ * in the CF Function runtime.
+ */
+type KvsHandle = {
     get(key: string): Promise<string | undefined>;
-}
+};
 
 export type { KvsHandle };

package/dist/shared/kvs.d.ts

@@ -1,5 +1,10 @@
-interface KvsHandle {
+/**
+ * Minimal interface for a CloudFront KeyValueStore handle.
+ * Compatible with the handle returned by `CloudFront.createKeyValueStore(event)`
+ * in the CF Function runtime.
+ */
+type KvsHandle = {
     get(key: string): Promise<string | undefined>;
-}
+};
 
 export type { KvsHandle };

package/dist/shared/wildcard.cjs

@@ -3,11 +3,11 @@
 
 
 
-var _chunkULICUDDHcjs = require('../chunk-ULICUDDH.cjs');
+var _chunkYNKZGZ7Icjs = require('../chunk-YNKZGZ7I.cjs');
 require('../chunk-75ZPJI57.cjs');
 
 
 
 
 
-exports.matchesAnyWildcard = _chunkULICUDDHcjs.matchesAnyWildcard; exports.matchesOriginPattern = _chunkULICUDDHcjs.matchesOriginPattern; exports.matchesWildcard = _chunkULICUDDHcjs.matchesWildcard; exports.wildcardToRegex = _chunkULICUDDHcjs.wildcardToRegex;
+exports.matchesAnyWildcard = _chunkYNKZGZ7Icjs.matchesAnyWildcard; exports.matchesOriginPattern = _chunkYNKZGZ7Icjs.matchesOriginPattern; exports.matchesWildcard = _chunkYNKZGZ7Icjs.matchesWildcard; exports.wildcardToRegex = _chunkYNKZGZ7Icjs.wildcardToRegex;

package/dist/shared/wildcard.js

@@ -3,7 +3,7 @@ import {
   matchesOriginPattern,
   matchesWildcard,
   wildcardToRegex
-} from "../chunk-EEZ7NUJG.js";
+} from "../chunk-NJD4L4Q3.js";
 import "../chunk-MLKGABMK.js";
 export {
   matchesAnyWildcard,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rayselfs/cf-rule-engine",
-  "version": "1.9.0",
+  "version": "1.9.2",
   "description": "Composable, tree-shakeable CloudFront Function rules",
   "license": "MIT",
   "sideEffects": false,

package/dist/chunk-IHDSTTO2.js

@@ -1,32 +0,0 @@
-import {
-  pathMatches
-} from "./chunk-Y7TIDVVC.js";
-import {
-  userAgentMatches
-} from "./chunk-VQGBRWJK.js";
-import {
-  ipCidr
-} from "./chunk-YHTUV2SA.js";
-import {
-  redirect
-} from "./chunk-DSSFFJWL.js";
-import {
-  all,
-  not,
-  rule
-} from "./chunk-Q4NP4C3B.js";
-
-// src/helpers/whitelist.ts
-function whitelist(options) {
-  const userAgents = options.userAgents ?? [];
-  const bypassPaths = options.bypassPaths ?? [];
-  const criteria = [not(ipCidr(options.cidrs)), not(userAgentMatches(userAgents))];
-  if (bypassPaths.length > 0) {
-    criteria.push(not(pathMatches(bypassPaths)));
-  }
-  return rule(all(criteria), redirect(302, options.redirectUrl));
-}
-
-export {
-  whitelist
-};

package/dist/chunk-ISXKMJCN.cjs

@@ -1,32 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
-
-var _chunkZEFLAOTLcjs = require('./chunk-ZEFLAOTL.cjs');
-
-
-var _chunkLVOM5GJ6cjs = require('./chunk-LVOM5GJ6.cjs');
-
-
-var _chunkMK4QBCD5cjs = require('./chunk-MK4QBCD5.cjs');
-
-
-var _chunkWWSRNCUPcjs = require('./chunk-WWSRNCUP.cjs');
-
-
-
-
-var _chunkWKYMSRCDcjs = require('./chunk-WKYMSRCD.cjs');
-
-// src/helpers/whitelist.ts
-function whitelist(options) {
-  const userAgents = _nullishCoalesce(options.userAgents, () => ( []));
-  const bypassPaths = _nullishCoalesce(options.bypassPaths, () => ( []));
-  const criteria = [_chunkWKYMSRCDcjs.not.call(void 0, _chunkMK4QBCD5cjs.ipCidr.call(void 0, options.cidrs)), _chunkWKYMSRCDcjs.not.call(void 0, _chunkLVOM5GJ6cjs.userAgentMatches.call(void 0, userAgents))];
-  if (bypassPaths.length > 0) {
-    criteria.push(_chunkWKYMSRCDcjs.not.call(void 0, _chunkZEFLAOTLcjs.pathMatches.call(void 0, bypassPaths)));
-  }
-  return _chunkWKYMSRCDcjs.rule.call(void 0, _chunkWKYMSRCDcjs.all.call(void 0, criteria), _chunkWWSRNCUPcjs.redirect.call(void 0, 302, options.redirectUrl));
-}
-
-
-
-exports.whitelist = whitelist;