cloudflare-expression-lint 0.1.0

package/dist/schemas/fields.js

@@ -0,0 +1,282 @@
+/**
+ * Cloudflare expression fields registry.
+ *
+ * Reference: https://developers.cloudflare.com/ruleset-engine/rules-language/fields/reference/
+ *
+ * MAINTAINER NOTE: To add a new field, add it to the FIELDS array below.
+ * To deprecate a field, set `deprecated: true` and `replacement` to the new field name.
+ */
+/**
+ * Master field registry.
+ *
+ * Phases key:
+ *   - Empty phases array or undefined = available in all phases
+ *   - Specific phase names = only available in those phases
+ *
+ * Response fields are only available in response phases.
+ */
+export const FIELDS = [
+    // ── HTTP Request URI Fields ──────────────────────────────────────────
+    { name: 'http.request.uri', type: 'String' },
+    { name: 'http.request.uri.path', type: 'String' },
+    { name: 'http.request.uri.path.extension', type: 'String' },
+    { name: 'http.request.uri.query', type: 'String' },
+    { name: 'http.request.uri.args', type: 'Map' },
+    { name: 'http.request.uri.args.names', type: 'Array' },
+    { name: 'http.request.uri.args.values', type: 'Array' },
+    { name: 'http.request.full_uri', type: 'String' },
+    { name: 'http.request.method', type: 'String' },
+    { name: 'http.request.version', type: 'String' },
+    // ── HTTP Request Header Fields ───────────────────────────────────────
+    { name: 'http.request.headers', type: 'Map' },
+    { name: 'http.request.headers.names', type: 'Array' },
+    { name: 'http.request.headers.values', type: 'Array' },
+    { name: 'http.request.headers.truncated', type: 'Boolean' },
+    { name: 'http.request.accepted_languages', type: 'Array' },
+    // ── HTTP Request Cookie Fields ───────────────────────────────────────
+    { name: 'http.request.cookies', type: 'Map' },
+    // ── HTTP Request Body Fields ─────────────────────────────────────────
+    { name: 'http.request.body.raw', type: 'String' },
+    { name: 'http.request.body.size', type: 'Integer' },
+    { name: 'http.request.body.truncated', type: 'Boolean' },
+    { name: 'http.request.body.mime', type: 'String' },
+    { name: 'http.request.body.form', type: 'Map' },
+    { name: 'http.request.body.form.names', type: 'Array' },
+    { name: 'http.request.body.form.values', type: 'Array' },
+    { name: 'http.request.body.multipart', type: 'Map' },
+    { name: 'http.request.body.multipart.content_dispositions', type: 'Array' },
+    { name: 'http.request.body.multipart.content_transfer_encodings', type: 'Array' },
+    { name: 'http.request.body.multipart.content_types', type: 'Array' },
+    { name: 'http.request.body.multipart.filenames', type: 'Array' },
+    { name: 'http.request.body.multipart.names', type: 'Array' },
+    { name: 'http.request.body.multipart.values', type: 'Array' },
+    // ── HTTP Request Timestamp Fields ────────────────────────────────────
+    { name: 'http.request.timestamp.sec', type: 'Integer' },
+    { name: 'http.request.timestamp.msec', type: 'Integer' },
+    // ── HTTP Request JWT Fields ──────────────────────────────────────────
+    { name: 'http.request.jwt.claims.aud', type: 'Array' },
+    { name: 'http.request.jwt.claims.aud.names', type: 'Array' },
+    { name: 'http.request.jwt.claims.aud.values', type: 'Array' },
+    { name: 'http.request.jwt.claims.iat.sec', type: 'Array' },
+    { name: 'http.request.jwt.claims.iat.sec.names', type: 'Array' },
+    { name: 'http.request.jwt.claims.iat.sec.values', type: 'Array' },
+    { name: 'http.request.jwt.claims.iss', type: 'Array' },
+    { name: 'http.request.jwt.claims.iss.names', type: 'Array' },
+    { name: 'http.request.jwt.claims.iss.values', type: 'Array' },
+    { name: 'http.request.jwt.claims.jti', type: 'Array' },
+    { name: 'http.request.jwt.claims.jti.names', type: 'Array' },
+    { name: 'http.request.jwt.claims.jti.values', type: 'Array' },
+    { name: 'http.request.jwt.claims.nbf.sec', type: 'Array' },
+    { name: 'http.request.jwt.claims.nbf.sec.names', type: 'Array' },
+    { name: 'http.request.jwt.claims.nbf.sec.values', type: 'Array' },
+    { name: 'http.request.jwt.claims.sub', type: 'Array' },
+    { name: 'http.request.jwt.claims.sub.names', type: 'Array' },
+    { name: 'http.request.jwt.claims.sub.values', type: 'Array' },
+    // ── HTTP Convenience Fields ──────────────────────────────────────────
+    { name: 'http.cookie', type: 'String' },
+    { name: 'http.host', type: 'String' },
+    { name: 'http.referer', type: 'String' },
+    { name: 'http.user_agent', type: 'String' },
+    { name: 'http.x_forwarded_for', type: 'String' },
+    // ── HTTP Response Fields (response phases only) ──────────────────────
+    { name: 'http.response.code', type: 'Integer', phases: [
+            'http_response_headers_transform', 'http_custom_errors',
+            'http_response_compression', 'http_response_firewall_managed',
+            'http_log_custom_fields',
+        ] },
+    { name: 'http.response.content_type.media_type', type: 'String', phases: [
+            'http_response_headers_transform', 'http_custom_errors',
+            'http_response_compression', 'http_response_firewall_managed',
+            'http_log_custom_fields',
+        ] },
+    { name: 'http.response.headers', type: 'Map', phases: [
+            'http_response_headers_transform', 'http_custom_errors',
+            'http_response_compression', 'http_response_firewall_managed',
+            'http_log_custom_fields',
+        ] },
+    { name: 'http.response.headers.names', type: 'Array', phases: [
+            'http_response_headers_transform', 'http_custom_errors',
+            'http_response_compression', 'http_response_firewall_managed',
+            'http_log_custom_fields',
+        ] },
+    { name: 'http.response.headers.values', type: 'Array', phases: [
+            'http_response_headers_transform', 'http_custom_errors',
+            'http_response_compression', 'http_response_firewall_managed',
+            'http_log_custom_fields',
+        ] },
+    // ── IP / Geolocation Fields ──────────────────────────────────────────
+    { name: 'ip.src', type: 'IP' },
+    { name: 'ip.src.asnum', type: 'Integer' },
+    { name: 'ip.src.city', type: 'String' },
+    { name: 'ip.src.continent', type: 'String' },
+    { name: 'ip.src.country', type: 'String' },
+    { name: 'ip.src.is_in_european_union', type: 'Boolean' },
+    { name: 'ip.src.lat', type: 'Float' },
+    { name: 'ip.src.lon', type: 'Float' },
+    { name: 'ip.src.metro_code', type: 'Integer' },
+    { name: 'ip.src.postal_code', type: 'String' },
+    { name: 'ip.src.region', type: 'String' },
+    { name: 'ip.src.region_code', type: 'String' },
+    { name: 'ip.src.subdivision_1_iso_code', type: 'String' },
+    { name: 'ip.src.subdivision_2_iso_code', type: 'String' },
+    { name: 'ip.src.timezone.name', type: 'String' },
+    // ── Deprecated ip.geoip.* aliases ────────────────────────────────────
+    { name: 'ip.geoip.asnum', type: 'Integer', deprecated: true, replacement: 'ip.src.asnum' },
+    { name: 'ip.geoip.city', type: 'String', deprecated: true, replacement: 'ip.src.city' },
+    { name: 'ip.geoip.continent', type: 'String', deprecated: true, replacement: 'ip.src.continent' },
+    { name: 'ip.geoip.country', type: 'String', deprecated: true, replacement: 'ip.src.country' },
+    { name: 'ip.geoip.is_in_european_union', type: 'Boolean', deprecated: true, replacement: 'ip.src.is_in_european_union' },
+    { name: 'ip.geoip.subdivision_1_iso_code', type: 'String', deprecated: true, replacement: 'ip.src.subdivision_1_iso_code' },
+    { name: 'ip.geoip.subdivision_2_iso_code', type: 'String', deprecated: true, replacement: 'ip.src.subdivision_2_iso_code' },
+    // ── SSL/TLS Fields ───────────────────────────────────────────────────
+    { name: 'ssl', type: 'Boolean' },
+    { name: 'cf.tls_version', type: 'String' },
+    { name: 'cf.tls_cipher', type: 'String' },
+    { name: 'cf.tls_ciphers_sha1', type: 'String' },
+    { name: 'cf.tls_client_hello_length', type: 'Integer' },
+    { name: 'cf.tls_client_random', type: 'String' },
+    { name: 'cf.tls_client_extensions_sha1', type: 'String' },
+    { name: 'cf.tls_client_extensions_sha1_le', type: 'String' },
+    // ── mTLS Client Auth Fields ──────────────────────────────────────────
+    { name: 'cf.tls_client_auth.cert_fingerprint_sha1', type: 'String' },
+    { name: 'cf.tls_client_auth.cert_fingerprint_sha256', type: 'String' },
+    { name: 'cf.tls_client_auth.cert_issuer_dn', type: 'String' },
+    { name: 'cf.tls_client_auth.cert_issuer_dn_legacy', type: 'String' },
+    { name: 'cf.tls_client_auth.cert_issuer_dn_rfc2253', type: 'String' },
+    { name: 'cf.tls_client_auth.cert_issuer_serial', type: 'String' },
+    { name: 'cf.tls_client_auth.cert_issuer_ski', type: 'String' },
+    { name: 'cf.tls_client_auth.cert_not_after', type: 'String' },
+    { name: 'cf.tls_client_auth.cert_not_before', type: 'String' },
+    { name: 'cf.tls_client_auth.cert_presented', type: 'Boolean' },
+    { name: 'cf.tls_client_auth.cert_revoked', type: 'Boolean' },
+    { name: 'cf.tls_client_auth.cert_serial', type: 'String' },
+    { name: 'cf.tls_client_auth.cert_ski', type: 'String' },
+    { name: 'cf.tls_client_auth.cert_subject_dn', type: 'String' },
+    { name: 'cf.tls_client_auth.cert_subject_dn_legacy', type: 'String' },
+    { name: 'cf.tls_client_auth.cert_subject_dn_rfc2253', type: 'String' },
+    { name: 'cf.tls_client_auth.cert_verified', type: 'Boolean' },
+    // ── Bot Management Fields ────────────────────────────────────────────
+    { name: 'cf.bot_management.corporate_proxy', type: 'Boolean' },
+    { name: 'cf.bot_management.detection_ids', type: 'Array' },
+    { name: 'cf.bot_management.ja3_hash', type: 'String' },
+    { name: 'cf.bot_management.ja4', type: 'String' },
+    { name: 'cf.bot_management.js_detection.passed', type: 'Boolean' },
+    { name: 'cf.bot_management.score', type: 'Integer' },
+    { name: 'cf.bot_management.static_resource', type: 'Boolean' },
+    { name: 'cf.bot_management.verified_bot', type: 'Boolean' },
+    { name: 'cf.client.bot', type: 'Boolean' },
+    { name: 'cf.verified_bot_category', type: 'String' },
+    // ── WAF Fields ───────────────────────────────────────────────────────
+    { name: 'cf.waf.auth_detected', type: 'Boolean' },
+    { name: 'cf.waf.content_scan.has_failed', type: 'Boolean' },
+    { name: 'cf.waf.content_scan.has_malicious_obj', type: 'Boolean' },
+    { name: 'cf.waf.content_scan.has_obj', type: 'Boolean' },
+    { name: 'cf.waf.content_scan.num_malicious_obj', type: 'Integer' },
+    { name: 'cf.waf.content_scan.num_obj', type: 'Integer' },
+    { name: 'cf.waf.content_scan.obj_results', type: 'Array' },
+    { name: 'cf.waf.content_scan.obj_sizes', type: 'Array' },
+    { name: 'cf.waf.content_scan.obj_types', type: 'Array' },
+    { name: 'cf.waf.credential_check.password_leaked', type: 'Boolean' },
+    { name: 'cf.waf.credential_check.username_and_password_leaked', type: 'Boolean' },
+    { name: 'cf.waf.credential_check.username_leaked', type: 'Boolean' },
+    { name: 'cf.waf.credential_check.username_password_similar', type: 'Boolean' },
+    { name: 'cf.waf.score', type: 'Integer' },
+    { name: 'cf.waf.score.class', type: 'String' },
+    { name: 'cf.waf.score.rce', type: 'Integer' },
+    { name: 'cf.waf.score.sqli', type: 'Integer' },
+    { name: 'cf.waf.score.xss', type: 'Integer' },
+    // ── Edge / Network Fields ────────────────────────────────────────────
+    { name: 'cf.edge.server_ip', type: 'IP' },
+    { name: 'cf.edge.server_port', type: 'Integer' },
+    { name: 'cf.edge.client_port', type: 'Integer' },
+    { name: 'cf.edge.client_tcp', type: 'Boolean' },
+    // ── Cloudflare Metadata Fields ───────────────────────────────────────
+    { name: 'cf.hostname.metadata', type: 'String' },
+    { name: 'cf.ray_id', type: 'String' },
+    { name: 'cf.random_seed', type: 'Bytes' },
+    { name: 'cf.zone.name', type: 'String' },
+    { name: 'cf.zone.plan', type: 'String' },
+    { name: 'cf.metal.id', type: 'String' },
+    // ── Threat / Timing Fields ───────────────────────────────────────────
+    { name: 'cf.threat_score', type: 'Integer' },
+    { name: 'cf.timings.client_tcp_rtt_msec', type: 'Integer' },
+    { name: 'cf.timings.edge_msec', type: 'Integer' },
+    { name: 'cf.timings.origin_ttfb_msec', type: 'Integer' },
+    // ── Response Error Fields ────────────────────────────────────────────
+    { name: 'cf.response.1xxx_code', type: 'Integer', phases: [
+            'http_custom_errors', 'http_response_headers_transform',
+        ] },
+    { name: 'cf.response.error_type', type: 'String', phases: [
+            'http_custom_errors', 'http_response_headers_transform',
+        ] },
+    // ── API Gateway Fields ───────────────────────────────────────────────
+    { name: 'cf.api_gateway.auth_id_present', type: 'Boolean' },
+    { name: 'cf.api_gateway.fallthrough_detected', type: 'Boolean' },
+    { name: 'cf.api_gateway.request_violates_schema', type: 'Boolean' },
+    // ── LLM Security Fields ──────────────────────────────────────────────
+    { name: 'cf.llm.prompt.custom_topic_categories', type: 'Map' },
+    { name: 'cf.llm.prompt.detected', type: 'Boolean' },
+    { name: 'cf.llm.prompt.injection_score', type: 'Integer' },
+    { name: 'cf.llm.prompt.pii_categories', type: 'Array' },
+    { name: 'cf.llm.prompt.pii_detected', type: 'Boolean' },
+    { name: 'cf.llm.prompt.token_count', type: 'Integer' },
+    { name: 'cf.llm.prompt.unsafe_topic_categories', type: 'Array' },
+    { name: 'cf.llm.prompt.unsafe_topic_detected', type: 'Boolean' },
+    // ── Worker Fields ────────────────────────────────────────────────────
+    { name: 'cf.worker.upstream_zone', type: 'Boolean' },
+    // ── Raw (untransformed) Fields ───────────────────────────────────────
+    { name: 'raw.http.request.full_uri', type: 'String' },
+    { name: 'raw.http.request.uri', type: 'String' },
+    { name: 'raw.http.request.uri.path', type: 'String' },
+    { name: 'raw.http.request.uri.path.extension', type: 'String' },
+    { name: 'raw.http.request.uri.query', type: 'String' },
+    { name: 'raw.http.request.uri.args', type: 'Map' },
+    { name: 'raw.http.request.uri.args.names', type: 'Array' },
+    { name: 'raw.http.request.uri.args.values', type: 'Array' },
+    { name: 'raw.http.request.headers', type: 'Map' },
+    { name: 'raw.http.request.headers.names', type: 'Array' },
+    { name: 'raw.http.request.headers.values', type: 'Array' },
+    { name: 'raw.http.response.headers', type: 'Map', phases: [
+            'http_response_headers_transform',
+        ] },
+    { name: 'raw.http.response.headers.names', type: 'Array', phases: [
+            'http_response_headers_transform',
+        ] },
+    { name: 'raw.http.response.headers.values', type: 'Array', phases: [
+            'http_response_headers_transform',
+        ] },
+];
+/** Build a lookup map for fast field resolution */
+const fieldMap = new Map();
+for (const field of FIELDS) {
+    fieldMap.set(field.name, field);
+}
+/**
+ * Look up a field by name.
+ * Returns undefined if the field is not recognized.
+ */
+export function findField(name) {
+    return fieldMap.get(name);
+}
+/**
+ * Check if a field name could be a dynamic map/array access.
+ * E.g., "http.request.headers" is a Map field, so "http.request.headers["host"]" is valid.
+ * Returns the base field if found.
+ */
+export function findBaseField(name) {
+    // Direct match first
+    const direct = fieldMap.get(name);
+    if (direct)
+        return direct;
+    // Try progressively shorter prefixes for map/array access
+    const parts = name.split('.');
+    for (let i = parts.length - 1; i >= 1; i--) {
+        const prefix = parts.slice(0, i).join('.');
+        const field = fieldMap.get(prefix);
+        if (field && (field.type === 'Map' || field.type === 'Array')) {
+            return field;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=fields.js.map

package/dist/schemas/fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fields.js","sourceRoot":"","sources":["../../src/schemas/fields.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAmBH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,MAAM,GAAe;IAChC,wEAAwE;IACxE,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC5C,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,QAAQ,EAAE;IACjD,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC3D,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAClD,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,KAAK,EAAE;IAC9C,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,OAAO,EAAE;IACtD,EAAE,IAAI,EAAE,8BAA8B,EAAE,IAAI,EAAE,OAAO,EAAE;IACvD,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,QAAQ,EAAE;IACjD,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC/C,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAEhD,wEAAwE;IACxE,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,KAAK,EAAE;IAC7C,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,OAAO,EAAE;IACrD,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,OAAO,EAAE;IACtD,EAAE,IAAI,EAAE,gCAAgC,EAAE,IAAI,EAAE,SAAS,EAAE;IAC3D,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,OAAO,EAAE;IAE1D,wEAAwE;IACxE,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,KAAK,EAAE;IAE7C,wEAAwE;IACxE,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,QAAQ,EAAE;IACjD,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,SAAS,EAAE;IACnD,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,SAAS,EAAE;IACxD,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAClD,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,KAAK,EAAE;IAC/C,EAAE,IAAI,EAAE,8BAA8B,EAAE,IAAI,EAAE,OAAO,EAAE;IACvD,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,OAAO,EAAE;IACxD,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,KAAK,EAAE;IACpD,EAAE,IAAI,EAAE,kDAAkD,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3E,EAAE,IAAI,EAAE,wDAAwD,EAAE,IAAI,EAAE,OAAO,EAAE;IACjF,EAAE,IAAI,EAAE,2CAA2C,EAAE,IAAI,EAAE,OAAO,EAAE;IACpE,EAAE,IAAI,EAAE,uCAAuC,EAAE,IAAI,EAAE,OAAO,EAAE;IAChE,EAAE,IAAI,EAAE,mCAAmC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5D,EAAE,IAAI,EAAE,oCAAoC,EAAE,IAAI,EAAE,OAAO,EAAE;IAE7D,wEAAwE;IACxE,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,SAAS,EAAE;IACvD,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,SAAS,EAAE;IAExD,wEAAwE;IACxE,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,OAAO,EAAE;IACtD,EAAE,IAAI,EAAE,mCAAmC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5D,EAAE,IAAI,EAAE,oCAAoC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC7D,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC1D,EAAE,IAAI,EAAE,uCAAuC,EAAE,IAAI,EAAE,OAAO,EAAE;IAChE,EAAE,IAAI,EAAE,wCAAwC,EAAE,IAAI,EAAE,OAAO,EAAE;IACjE,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,OAAO,EAAE;IACtD,EAAE,IAAI,EAAE,mCAAmC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5D,EAAE,IAAI,EAAE,oCAAoC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC7D,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,OAAO,EAAE;IACtD,EAAE,IAAI,EAAE,mCAAmC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5D,EAAE,IAAI,EAAE,oCAAoC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC7D,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC1D,EAAE,IAAI,EAAE,uCAAuC,EAAE,IAAI,EAAE,OAAO,EAAE;IAChE,EAAE,IAAI,EAAE,wCAAwC,EAAE,IAAI,EAAE,OAAO,EAAE;IACjE,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,OAAO,EAAE;IACtD,EAAE,IAAI,EAAE,mCAAmC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5D,EAAE,IAAI,EAAE,oCAAoC,EAAE,IAAI,EAAE,OAAO,EAAE;IAE7D,wEAAwE;IACxE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE;IACvC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;IACrC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE;IACxC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC3C,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAEhD,wEAAwE;IACxE,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE;YACrD,iCAAiC,EAAE,oBAAoB;YACvD,2BAA2B,EAAE,gCAAgC;YAC7D,wBAAwB;SACzB,EAAC;IACF,EAAE,IAAI,EAAE,uCAAuC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE;YACvE,iCAAiC,EAAE,oBAAoB;YACvD,2BAA2B,EAAE,gCAAgC;YAC7D,wBAAwB;SACzB,EAAC;IACF,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE;YACpD,iCAAiC,EAAE,oBAAoB;YACvD,2BAA2B,EAAE,gCAAgC;YAC7D,wBAAwB;SACzB,EAAC;IACF,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE;YAC5D,iCAAiC,EAAE,oBAAoB;YACvD,2BAA2B,EAAE,gCAAgC;YAC7D,wBAAwB;SACzB,EAAC;IACF,EAAE,IAAI,EAAE,8BAA8B,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE;YAC7D,iCAAiC,EAAE,oBAAoB;YACvD,2BAA2B,EAAE,gCAAgC;YAC7D,wBAAwB;SACzB,EAAC;IAEF,wEAAwE;IACxE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;IAC9B,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE;IACzC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE;IACvC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC5C,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC1C,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,SAAS,EAAE;IACxD,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;IACrC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;IACrC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE;IAC9C,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC9C,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE;IACzC,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC9C,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,QAAQ,EAAE;IACzD,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,QAAQ,EAAE;IACzD,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAEhD,wEAAwE;IACxE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE;IAC1F,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE;IACvF,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,kBAAkB,EAAE;IACjG,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE;IAC7F,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,6BAA6B,EAAE;IACxH,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,+BAA+B,EAAE;IAC3H,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,+BAA+B,EAAE;IAE3H,wEAAwE;IACxE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE;IAChC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC1C,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE;IACzC,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC/C,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,SAAS,EAAE;IACvD,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAChD,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,QAAQ,EAAE;IACzD,EAAE,IAAI,EAAE,kCAAkC,EAAE,IAAI,EAAE,QAAQ,EAAE;IAE5D,wEAAwE;IACxE,EAAE,IAAI,EAAE,0CAA0C,EAAE,IAAI,EAAE,QAAQ,EAAE;IACpE,EAAE,IAAI,EAAE,4CAA4C,EAAE,IAAI,EAAE,QAAQ,EAAE;IACtE,EAAE,IAAI,EAAE,mCAAmC,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC7D,EAAE,IAAI,EAAE,0CAA0C,EAAE,IAAI,EAAE,QAAQ,EAAE;IACpE,EAAE,IAAI,EAAE,2CAA2C,EAAE,IAAI,EAAE,QAAQ,EAAE;IACrE,EAAE,IAAI,EAAE,uCAAuC,EAAE,IAAI,EAAE,QAAQ,EAAE;IACjE,EAAE,IAAI,EAAE,oCAAoC,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC9D,EAAE,IAAI,EAAE,mCAAmC,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC7D,EAAE,IAAI,EAAE,oCAAoC,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC9D,EAAE,IAAI,EAAE,mCAAmC,EAAE,IAAI,EAAE,SAAS,EAAE;IAC9D,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,SAAS,EAAE;IAC5D,EAAE,IAAI,EAAE,gCAAgC,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC1D,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,QAAQ,EAAE;IACvD,EAAE,IAAI,EAAE,oCAAoC,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC9D,EAAE,IAAI,EAAE,2CAA2C,EAAE,IAAI,EAAE,QAAQ,EAAE;IACrE,EAAE,IAAI,EAAE,4CAA4C,EAAE,IAAI,EAAE,QAAQ,EAAE;IACtE,EAAE,IAAI,EAAE,kCAAkC,EAAE,IAAI,EAAE,SAAS,EAAE;IAE7D,wEAAwE;IACxE,EAAE,IAAI,EAAE,mCAAmC,EAAE,IAAI,EAAE,SAAS,EAAE;IAC9D,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC1D,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,QAAQ,EAAE;IACtD,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,QAAQ,EAAE;IACjD,EAAE,IAAI,EAAE,uCAAuC,EAAE,IAAI,EAAE,SAAS,EAAE;IAClE,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,SAAS,EAAE;IACpD,EAAE,IAAI,EAAE,mCAAmC,EAAE,IAAI,EAAE,SAAS,EAAE;IAC9D,EAAE,IAAI,EAAE,gCAAgC,EAAE,IAAI,EAAE,SAAS,EAAE;IAC3D,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE;IAC1C,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,QAAQ,EAAE;IAEpD,wEAAwE;IACxE,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,EAAE;IACjD,EAAE,IAAI,EAAE,gCAAgC,EAAE,IAAI,EAAE,SAAS,EAAE;IAC3D,EAAE,IAAI,EAAE,uCAAuC,EAAE,IAAI,EAAE,SAAS,EAAE;IAClE,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,SAAS,EAAE;IACxD,EAAE,IAAI,EAAE,uCAAuC,EAAE,IAAI,EAAE,SAAS,EAAE;IAClE,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,SAAS,EAAE;IACxD,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC1D,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,OAAO,EAAE;IACxD,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,OAAO,EAAE;IACxD,EAAE,IAAI,EAAE,yCAAyC,EAAE,IAAI,EAAE,SAAS,EAAE;IACpE,EAAE,IAAI,EAAE,sDAAsD,EAAE,IAAI,EAAE,SAAS,EAAE;IACjF,EAAE,IAAI,EAAE,yCAAyC,EAAE,IAAI,EAAE,SAAS,EAAE;IACpE,EAAE,IAAI,EAAE,mDAAmD,EAAE,IAAI,EAAE,SAAS,EAAE;IAC9E,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE;IACzC,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC9C,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE;IAC7C,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE;IAC9C,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE;IAE7C,wEAAwE;IACxE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,IAAI,EAAE;IACzC,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,EAAE;IAChD,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,EAAE;IAChD,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,EAAE;IAE/C,wEAAwE;IACxE,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAChD,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;IACrC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE;IACzC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE;IACxC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE;IACxC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE;IAEvC,wEAAwE;IACxE,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE;IAC5C,EAAE,IAAI,EAAE,gCAAgC,EAAE,IAAI,EAAE,SAAS,EAAE;IAC3D,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,SAAS,EAAE;IACjD,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,SAAS,EAAE;IAExD,wEAAwE;IACxE,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE;YACxD,oBAAoB,EAAE,iCAAiC;SACxD,EAAC;IACF,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE;YACxD,oBAAoB,EAAE,iCAAiC;SACxD,EAAC;IAEF,wEAAwE;IACxE,EAAE,IAAI,EAAE,gCAAgC,EAAE,IAAI,EAAE,SAAS,EAAE;IAC3D,EAAE,IAAI,EAAE,qCAAqC,EAAE,IAAI,EAAE,SAAS,EAAE;IAChE,EAAE,IAAI,EAAE,wCAAwC,EAAE,IAAI,EAAE,SAAS,EAAE;IAEnE,wEAAwE;IACxE,EAAE,IAAI,EAAE,uCAAuC,EAAE,IAAI,EAAE,KAAK,EAAE;IAC9D,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,SAAS,EAAE;IACnD,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,SAAS,EAAE;IAC1D,EAAE,IAAI,EAAE,8BAA8B,EAAE,IAAI,EAAE,OAAO,EAAE;IACvD,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,SAAS,EAAE;IACvD,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,SAAS,EAAE;IACtD,EAAE,IAAI,EAAE,uCAAuC,EAAE,IAAI,EAAE,OAAO,EAAE;IAChE,EAAE,IAAI,EAAE,qCAAqC,EAAE,IAAI,EAAE,SAAS,EAAE;IAEhE,wEAAwE;IACxE,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,SAAS,EAAE;IAEpD,wEAAwE;IACxE,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,QAAQ,EAAE;IACrD,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAChD,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,QAAQ,EAAE;IACrD,EAAE,IAAI,EAAE,qCAAqC,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC/D,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,QAAQ,EAAE;IACtD,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,KAAK,EAAE;IAClD,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC1D,EAAE,IAAI,EAAE,kCAAkC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3D,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,KAAK,EAAE;IACjD,EAAE,IAAI,EAAE,gCAAgC,EAAE,IAAI,EAAE,OAAO,EAAE;IACzD,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC1D,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE;YACxD,iCAAiC;SAClC,EAAC;IACF,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE;YAChE,iCAAiC;SAClC,EAAC;IACF,EAAE,IAAI,EAAE,kCAAkC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE;YACjE,iCAAiC;SAClC,EAAC;CACH,CAAC;AAEF,mDAAmD;AACnD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;AAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,qBAAqB;IACrB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,0DAA0D;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;YAC9D,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/schemas/functions.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Cloudflare expression functions registry.
+ *
+ * Reference: https://developers.cloudflare.com/ruleset-engine/rules-language/functions/
+ *
+ * MAINTAINER NOTE: To add a new function, add it to the FUNCTIONS array below.
+ */
+import type { FieldType } from './operators.js';
+export type ExpressionContext = 'filter' | 'rewrite_url' | 'rewrite_header' | 'redirect_target' | 'all';
+export interface FunctionParam {
+    name: string;
+    type: FieldType | 'Any';
+    optional?: boolean;
+    variadic?: boolean;
+}
+export interface FunctionDef {
+    /** Function name (e.g., "lower") */
+    name: string;
+    /** Parameter definitions */
+    params: FunctionParam[];
+    /** Return type */
+    returnType: FieldType;
+    /** Which expression contexts this function is available in */
+    contexts: ExpressionContext[];
+    /** Maximum number of times this function can appear in a single expression */
+    maxPerExpression?: number;
+    /** Whether this function cannot be nested inside certain other functions */
+    noNestIn?: string[];
+    /** Human-readable notes */
+    notes?: string;
+}
+export declare const FUNCTIONS: FunctionDef[];
+export declare function findFunction(name: string): FunctionDef | undefined;

package/dist/schemas/functions.js

@@ -0,0 +1,261 @@
+/**
+ * Cloudflare expression functions registry.
+ *
+ * Reference: https://developers.cloudflare.com/ruleset-engine/rules-language/functions/
+ *
+ * MAINTAINER NOTE: To add a new function, add it to the FUNCTIONS array below.
+ */
+export const FUNCTIONS = [
+    // ── Universally Available Functions ──────────────────────────────────
+    {
+        name: 'any',
+        params: [{ name: 'values', type: 'Array' }],
+        returnType: 'Boolean',
+        contexts: ['all'],
+    },
+    {
+        name: 'all',
+        params: [{ name: 'values', type: 'Array' }],
+        returnType: 'Boolean',
+        contexts: ['all'],
+    },
+    {
+        name: 'concat',
+        params: [{ name: 'values', type: 'Any', variadic: true }],
+        returnType: 'String',
+        contexts: ['all'],
+    },
+    {
+        name: 'ends_with',
+        params: [
+            { name: 'source', type: 'String' },
+            { name: 'substring', type: 'String' },
+        ],
+        returnType: 'Boolean',
+        contexts: ['all'],
+    },
+    {
+        name: 'starts_with',
+        params: [
+            { name: 'source', type: 'String' },
+            { name: 'substring', type: 'String' },
+        ],
+        returnType: 'Boolean',
+        contexts: ['all'],
+    },
+    {
+        name: 'has_key',
+        params: [
+            { name: 'map', type: 'Map' },
+            { name: 'key', type: 'String' },
+        ],
+        returnType: 'Boolean',
+        contexts: ['all'],
+    },
+    {
+        name: 'has_value',
+        params: [
+            { name: 'collection', type: 'Any' },
+            { name: 'value', type: 'Any' },
+        ],
+        returnType: 'Boolean',
+        contexts: ['all'],
+    },
+    {
+        name: 'len',
+        params: [{ name: 'value', type: 'Any' }],
+        returnType: 'Integer',
+        contexts: ['all'],
+    },
+    {
+        name: 'lookup_json_integer',
+        params: [
+            { name: 'field', type: 'String' },
+            { name: 'key', type: 'Any', variadic: true },
+        ],
+        returnType: 'Integer',
+        contexts: ['all'],
+    },
+    {
+        name: 'lookup_json_string',
+        params: [
+            { name: 'field', type: 'String' },
+            { name: 'key', type: 'Any', variadic: true },
+        ],
+        returnType: 'String',
+        contexts: ['all'],
+    },
+    {
+        name: 'lower',
+        params: [{ name: 'value', type: 'String' }],
+        returnType: 'String',
+        contexts: ['all'],
+    },
+    {
+        name: 'upper',
+        params: [{ name: 'value', type: 'String' }],
+        returnType: 'String',
+        contexts: ['all'],
+    },
+    {
+        name: 'remove_bytes',
+        params: [
+            { name: 'value', type: 'Bytes' },
+            { name: 'bytes_to_remove', type: 'Bytes' },
+        ],
+        returnType: 'Bytes',
+        contexts: ['all'],
+    },
+    {
+        name: 'substring',
+        params: [
+            { name: 'value', type: 'String' },
+            { name: 'start', type: 'Integer' },
+            { name: 'end', type: 'Integer', optional: true },
+        ],
+        returnType: 'String',
+        contexts: ['all'],
+    },
+    {
+        name: 'url_decode',
+        params: [
+            { name: 'source', type: 'String' },
+            { name: 'options', type: 'String', optional: true },
+        ],
+        returnType: 'String',
+        contexts: ['all'],
+    },
+    // ── Transform / Redirect-Only Functions ──────────────────────────────
+    {
+        name: 'regex_replace',
+        params: [
+            { name: 'source', type: 'String' },
+            { name: 'regex', type: 'String' },
+            { name: 'replacement', type: 'String' },
+        ],
+        returnType: 'String',
+        contexts: ['rewrite_url', 'rewrite_header', 'redirect_target'],
+        maxPerExpression: 1,
+        noNestIn: ['wildcard_replace'],
+        notes: 'Supports capture group references ${1} through ${8}',
+    },
+    {
+        name: 'wildcard_replace',
+        params: [
+            { name: 'source', type: 'String' },
+            { name: 'pattern', type: 'String' },
+            { name: 'replacement', type: 'String' },
+            { name: 'flags', type: 'String', optional: true },
+        ],
+        returnType: 'String',
+        contexts: ['rewrite_url', 'redirect_target'],
+        maxPerExpression: 1,
+        noNestIn: ['regex_replace'],
+    },
+    {
+        name: 'to_string',
+        params: [{ name: 'value', type: 'Any' }],
+        returnType: 'String',
+        contexts: ['rewrite_url', 'rewrite_header', 'redirect_target'],
+    },
+    {
+        name: 'encode_base64',
+        params: [
+            { name: 'input', type: 'Any' },
+            { name: 'flags', type: 'String', optional: true },
+        ],
+        returnType: 'String',
+        contexts: ['rewrite_header'],
+    },
+    {
+        name: 'decode_base64',
+        params: [{ name: 'source', type: 'String' }],
+        returnType: 'String',
+        contexts: ['rewrite_url', 'rewrite_header', 'filter'],
+    },
+    {
+        name: 'remove_query_args',
+        params: [
+            { name: 'field', type: 'String' },
+            { name: 'query_param', type: 'String', variadic: true },
+        ],
+        returnType: 'String',
+        contexts: ['rewrite_url'],
+    },
+    {
+        name: 'sha256',
+        params: [{ name: 'input', type: 'Any' }],
+        returnType: 'Bytes',
+        contexts: ['rewrite_url', 'rewrite_header'],
+    },
+    {
+        name: 'uuidv4',
+        params: [{ name: 'source', type: 'Bytes' }],
+        returnType: 'String',
+        contexts: ['rewrite_url', 'rewrite_header'],
+    },
+    {
+        name: 'split',
+        params: [
+            { name: 'input', type: 'String' },
+            { name: 'separator', type: 'String' },
+            { name: 'limit', type: 'Integer' },
+        ],
+        returnType: 'Array',
+        contexts: ['rewrite_header'],
+        notes: 'Limit must be 1-128',
+    },
+    {
+        name: 'join',
+        params: [
+            { name: 'items', type: 'Array' },
+            { name: 'separator', type: 'String' },
+        ],
+        returnType: 'String',
+        contexts: ['rewrite_url', 'rewrite_header', 'filter'],
+    },
+    // ── Rate Limiting / Custom Rule Functions ────────────────────────────
+    {
+        name: 'cidr',
+        params: [
+            { name: 'address', type: 'IP' },
+            { name: 'ipv4_network_bits', type: 'Integer' },
+            { name: 'ipv6_network_bits', type: 'Integer' },
+        ],
+        returnType: 'IP',
+        contexts: ['filter'],
+        notes: 'IPv4 bits: 1-32, IPv6 bits: 1-128',
+    },
+    {
+        name: 'cidr6',
+        params: [
+            { name: 'address', type: 'IP' },
+            { name: 'ipv6_network_bits', type: 'Integer' },
+        ],
+        returnType: 'IP',
+        contexts: ['filter'],
+    },
+    // ── HMAC Validation ──────────────────────────────────────────────────
+    {
+        name: 'is_timed_hmac_valid_v0',
+        params: [
+            { name: 'key', type: 'String' },
+            { name: 'messageMac', type: 'String' },
+            { name: 'ttl', type: 'Integer' },
+            { name: 'timestamp', type: 'Integer' },
+            { name: 'separator', type: 'Integer', optional: true },
+            { name: 'flags', type: 'String', optional: true },
+        ],
+        returnType: 'Boolean',
+        contexts: ['filter'],
+    },
+];
+/** Build lookup map */
+const functionMap = new Map();
+for (const fn of FUNCTIONS) {
+    functionMap.set(fn.name, fn);
+}
+export function findFunction(name) {
+    return functionMap.get(name);
+}
+//# sourceMappingURL=functions.js.map

package/dist/schemas/functions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"functions.js","sourceRoot":"","sources":["../../src/schemas/functions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAmCH,MAAM,CAAC,MAAM,SAAS,GAAkB;IACtC,wEAAwE;IACxE;QACE,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3C,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,CAAC,KAAK,CAAC;KAClB;IACD;QACE,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3C,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,CAAC,KAAK,CAAC;KAClB;IACD;QACE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACzD,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,CAAC,KAAK,CAAC;KAClB;IACD;QACE,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;SACtC;QACD,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,CAAC,KAAK,CAAC;KAClB;IACD;QACE,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;SACtC;QACD,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,CAAC,KAAK,CAAC;KAClB;IACD;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;YAC5B,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE;SAChC;QACD,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,CAAC,KAAK,CAAC;KAClB;IACD;QACE,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE;YACnC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE;SAC/B;QACD,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,CAAC,KAAK,CAAC;KAClB;IACD;QACE,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACxC,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,CAAC,KAAK,CAAC;KAClB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC7C;QACD,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,CAAC,KAAK,CAAC;KAClB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC7C;QACD,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,CAAC,KAAK,CAAC;KAClB;IACD;QACE,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3C,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,CAAC,KAAK,CAAC;KAClB;IACD;QACE,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3C,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,CAAC,KAAK,CAAC;KAClB;IACD;QACE,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;YAChC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE;SAC3C;QACD,UAAU,EAAE,OAAO;QACnB,QAAQ,EAAE,CAAC,KAAK,CAAC;KAClB;IACD;QACE,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;YAClC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;SACjD;QACD,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,CAAC,KAAK,CAAC;KAClB;IACD;QACE,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;SACpD;QACD,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,CAAC,KAAK,CAAC;KAClB;IAED,wEAAwE;IACxE;QACE,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE;SACxC;QACD,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,CAAC,aAAa,EAAE,gBAAgB,EAAE,iBAAiB,CAAC;QAC9D,gBAAgB,EAAE,CAAC;QACnB,QAAQ,EAAE,CAAC,kBAAkB,CAAC;QAC9B,KAAK,EAAE,qDAAqD;KAC7D;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;YACnC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE;YACvC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;SAClD;QACD,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,CAAC,aAAa,EAAE,iBAAiB,CAAC;QAC5C,gBAAgB,EAAE,CAAC;QACnB,QAAQ,EAAE,CAAC,eAAe,CAAC;KAC5B;IACD;QACE,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACxC,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,CAAC,aAAa,EAAE,gBAAgB,EAAE,iBAAiB,CAAC;KAC/D;IACD;QACE,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE;YAC9B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;SAClD;QACD,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,CAAC,gBAAgB,CAAC;KAC7B;IACD;QACE,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5C,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,CAAC,aAAa,EAAE,gBAAgB,EAAE,QAAQ,CAAC;KACtD;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;SACxD;QACD,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,CAAC,aAAa,CAAC;KAC1B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACxC,UAAU,EAAE,OAAO;QACnB,QAAQ,EAAE,CAAC,aAAa,EAAE,gBAAgB,CAAC;KAC5C;IACD;QACE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3C,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,CAAC,aAAa,EAAE,gBAAgB,CAAC;KAC5C;IACD;QACE,IAAI,EAAE,OAAO;QACb,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;YACjC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;YACrC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;SACnC;QACD,UAAU,EAAE,OAAO;QACnB,QAAQ,EAAE,CAAC,gBAAgB,CAAC;QAC5B,KAAK,EAAE,qBAAqB;KAC7B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;YAChC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;SACtC;QACD,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,CAAC,aAAa,EAAE,gBAAgB,EAAE,QAAQ,CAAC;KACtD;IAED,wEAAwE;IACxE;QACE,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE;YAC/B,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE;YAC9C,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/C;QACD,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,KAAK,EAAE,mCAAmC;KAC3C;IACD;QACE,IAAI,EAAE,OAAO;QACb,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE;YAC/B,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/C;QACD,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,CAAC,QAAQ,CAAC;KACrB;IAED,wEAAwE;IACxE;QACE,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC/B,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE;YACtC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE;YAChC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;YACtC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;YACtD,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;SAClD;QACD,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,CAAC,QAAQ,CAAC;KACrB;CACF,CAAC;AAEF,uBAAuB;AACvB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;AACnD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;IAC3B,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC"}

package/dist/schemas/operators.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Cloudflare expression operators.
+ *
+ * Reference: https://developers.cloudflare.com/ruleset-engine/rules-language/operators/
+ */
+export type FieldType = 'String' | 'Integer' | 'Boolean' | 'IP' | 'Bytes' | 'Float' | 'Array' | 'Map';
+export interface OperatorDef {
+    /** The canonical name (english notation) */
+    name: string;
+    /** Symbol aliases (C-like notation) */
+    symbols: string[];
+    /** Which field types this operator supports */
+    supportedTypes: FieldType[];
+    /** Whether this is a logical operator */
+    isLogical?: boolean;
+    /** Operator precedence (lower = binds tighter). Only for logical operators. */
+    precedence?: number;
+}
+/** Comparison operators */
+export declare const COMPARISON_OPERATORS: OperatorDef[];
+/** Logical operators with precedence */
+export declare const LOGICAL_OPERATORS: OperatorDef[];
+/** All operator names and symbols for quick lookup */
+export declare const ALL_COMPARISON_NAMES: Set<string>;
+export declare const ALL_LOGICAL_NAMES: Set<string>;
+/** Look up operator def by name or symbol */
+export declare function findComparisonOperator(nameOrSymbol: string): OperatorDef | undefined;
+export declare function findLogicalOperator(nameOrSymbol: string): OperatorDef | undefined;