@appwarden/middleware 3.11.1 → 3.11.2

package/README.md

@@ -4,7 +4,7 @@
 [![GitHub](https://img.shields.io/badge/GitHub-appwarden%2Fmiddleware-181717?logo=github&logoColor=white)](https://github.com/appwarden/middleware)
 [![npm version](https://img.shields.io/npm/v/@appwarden/middleware.svg)](https://www.npmjs.com/package/@appwarden/middleware)
 [![npm provenance](https://img.shields.io/badge/npm-provenance-green)](https://docs.npmjs.com/generating-provenance-statements)
-![Test Coverage](https://img.shields.io/badge/coverage-93.04%25-brightgreen)
+![Test Coverage](https://img.shields.io/badge/coverage-93.05%25-brightgreen)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
 
 ## Core Features

package/{chunk-KE2UVIYR.js → chunk-6JYUNSUJ.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2WPLLVUI.js";
 import {
   printMessage
-} from "./chunk-QUVGY2YI.js";
+} from "./chunk-ASH6UZ27.js";
 
 // src/utils/build-lock-page-url.ts
 function normalizeLockPageSlug(lockPageSlug) {

package/{chunk-QUVGY2YI.js → chunk-ASH6UZ27.js}

@@ -113,6 +113,11 @@ var BooleanSchema = BoolOrStringSchema.transform((val) => {
   throw new Error("Invalid value");
 });
 var AppwardenApiTokenSchema = z.string().refine((val) => !!val, { message: "appwardenApiToken is required" });
+var AppwardenApiHostnameSchema = z.string().url({
+  message: "Invalid `appwardenApiHostname`. Please provide an absolute URL (e.g. https://api.appwarden.io)."
+}).refine((value) => value.startsWith("https://"), {
+  message: "`appwardenApiHostname` must use the https:// scheme (e.g. https://api.appwarden.io)."
+});
 var LockValue = z.object({
   isLocked: z.number(),
   isLockedTest: z.number(),
@@ -306,6 +311,7 @@ export {
   getErrors,
   BooleanSchema,
   AppwardenApiTokenSchema,
+  AppwardenApiHostnameSchema,
   LockValue,
   store,
   CSP_KEYWORDS,

package/{chunk-K7ZIT3FM.js → chunk-RQLMO5FA.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-2WPLLVUI.js";
 import {
   makeCSPHeader
-} from "./chunk-QUVGY2YI.js";
+} from "./chunk-ASH6UZ27.js";
 
 // src/middlewares/use-content-security-policy.ts
 var AppendAttribute = (attribute, nonce) => ({

package/{chunk-ZOYE6D3A.js → chunk-VQIRZMED.js}

@@ -1,7 +1,7 @@
 import {
   MemoryCache,
   debug
-} from "./chunk-KE2UVIYR.js";
+} from "./chunk-6JYUNSUJ.js";
 import {
   APPWARDEN_CACHE_KEY,
   APPWARDEN_TEST_ROUTE
@@ -11,7 +11,7 @@ import {
   getLockValue,
   store,
   syncEdgeValue
-} from "./chunk-QUVGY2YI.js";
+} from "./chunk-ASH6UZ27.js";
 
 // src/core/check-lock-status.ts
 var createContext = async (config) => {

package/cloudflare/astro.d.ts

@@ -12,7 +12,7 @@ declare const AstroCloudflareConfigSchema: z.ZodObject<{
     /** The Appwarden API token for authentication */
     appwardenApiToken: z.ZodEffects<z.ZodString, string, string>;
     /** Optional custom API hostname (defaults to https://api.appwarden.io) */
-    appwardenApiHostname: z.ZodOptional<z.ZodString>;
+    appwardenApiHostname: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
     /** Enable debug logging */
     debug: z.ZodDefault<z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodBoolean]>>, boolean, string | boolean | undefined>>;
     /** Optional Content Security Policy configuration */

package/cloudflare/astro.js

@@ -3,29 +3,30 @@ import {
 } from "../chunk-XFG6SUSV.js";
 import {
   useContentSecurityPolicy
-} from "../chunk-K7ZIT3FM.js";
+} from "../chunk-RQLMO5FA.js";
 import {
   getNowMs
 } from "../chunk-X7WZVYQS.js";
 import {
   checkLockStatus
-} from "../chunk-ZOYE6D3A.js";
+} from "../chunk-VQIRZMED.js";
 import {
   TEMPORARY_REDIRECT_STATUS,
   buildLockPageUrl,
   createRedirect,
   debug,
   isOnLockPage
-} from "../chunk-KE2UVIYR.js";
+} from "../chunk-6JYUNSUJ.js";
 import {
   UseCSPInputSchema,
   isHTMLRequest
 } from "../chunk-2WPLLVUI.js";
 import {
+  AppwardenApiHostnameSchema,
   AppwardenApiTokenSchema,
   BooleanSchema,
   printMessage
-} from "../chunk-QUVGY2YI.js";
+} from "../chunk-ASH6UZ27.js";
 
 // src/adapters/astro-cloudflare.ts
 import { waitUntil } from "cloudflare:workers";
@@ -38,7 +39,7 @@ var AstroCloudflareConfigSchema = z.object({
   /** The Appwarden API token for authentication */
   appwardenApiToken: AppwardenApiTokenSchema,
   /** Optional custom API hostname (defaults to https://api.appwarden.io) */
-  appwardenApiHostname: z.string().optional(),
+  appwardenApiHostname: AppwardenApiHostnameSchema.optional(),
   /** Enable debug logging */
   debug: BooleanSchema.default(false),
   /** Optional Content Security Policy configuration */

package/cloudflare/nextjs.d.ts

@@ -11,7 +11,7 @@ declare const NextJsCloudflareConfigSchema: z.ZodObject<{
     /** The Appwarden API token for authentication */
     appwardenApiToken: z.ZodEffects<z.ZodString, string, string>;
     /** Optional custom API hostname (defaults to https://api.appwarden.io) */
-    appwardenApiHostname: z.ZodOptional<z.ZodString>;
+    appwardenApiHostname: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
     /** Enable debug logging */
     debug: z.ZodDefault<z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodBoolean]>>, boolean, string | boolean | undefined>>;
     /** Optional Content Security Policy configuration (headers only, no HTML rewriting; '{{nonce}}' is not supported) */

package/cloudflare/nextjs.js

@@ -3,22 +3,23 @@ import {
 } from "../chunk-X7WZVYQS.js";
 import {
   checkLockStatus
-} from "../chunk-ZOYE6D3A.js";
+} from "../chunk-VQIRZMED.js";
 import {
   TEMPORARY_REDIRECT_STATUS,
   buildLockPageUrl,
   debug,
   isOnLockPage
-} from "../chunk-KE2UVIYR.js";
+} from "../chunk-6JYUNSUJ.js";
 import {
   UseCSPInputSchema,
   isHTMLRequest
 } from "../chunk-2WPLLVUI.js";
 import {
+  AppwardenApiHostnameSchema,
   AppwardenApiTokenSchema,
   BooleanSchema,
   printMessage
-} from "../chunk-QUVGY2YI.js";
+} from "../chunk-ASH6UZ27.js";
 
 // src/adapters/nextjs-cloudflare.ts
 import {
@@ -44,7 +45,7 @@ var NextJsCloudflareConfigSchema = z.object({
   /** The Appwarden API token for authentication */
   appwardenApiToken: AppwardenApiTokenSchema,
   /** Optional custom API hostname (defaults to https://api.appwarden.io) */
-  appwardenApiHostname: z.string().optional(),
+  appwardenApiHostname: AppwardenApiHostnameSchema.optional(),
   /** Enable debug logging */
   debug: BooleanSchema.default(false),
   /** Optional Content Security Policy configuration (headers only, no HTML rewriting; '{{nonce}}' is not supported) */
@@ -101,7 +102,7 @@ function createAppwardenMiddleware(configFn) {
         debugFn(
           `Applying CSP headers in ${config.contentSecurityPolicy.mode} mode`
         );
-        const { makeCSPHeader } = await import("../cloudflare-JVRRPVRP.js");
+        const { makeCSPHeader } = await import("../cloudflare-TJXWELMX.js");
         const [headerName, headerValue] = makeCSPHeader(
           "",
           config.contentSecurityPolicy.directives,

package/cloudflare/react-router.d.ts

@@ -10,7 +10,7 @@ declare const ReactRouterCloudflareConfigSchema: z.ZodObject<{
     /** The Appwarden API token for authentication */
     appwardenApiToken: z.ZodEffects<z.ZodString, string, string>;
     /** Optional custom API hostname (defaults to https://api.appwarden.io) */
-    appwardenApiHostname: z.ZodOptional<z.ZodString>;
+    appwardenApiHostname: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
     /** Enable debug logging */
     debug: z.ZodDefault<z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodBoolean]>>, boolean, string | boolean | undefined>>;
     /** Optional Content Security Policy configuration */

package/cloudflare/react-router.js

@@ -3,28 +3,29 @@ import {
 } from "../chunk-XFG6SUSV.js";
 import {
   useContentSecurityPolicy
-} from "../chunk-K7ZIT3FM.js";
+} from "../chunk-RQLMO5FA.js";
 import {
   getNowMs
 } from "../chunk-X7WZVYQS.js";
 import {
   checkLockStatus
-} from "../chunk-ZOYE6D3A.js";
+} from "../chunk-VQIRZMED.js";
 import {
   buildLockPageUrl,
   createRedirect,
   debug,
   isOnLockPage
-} from "../chunk-KE2UVIYR.js";
+} from "../chunk-6JYUNSUJ.js";
 import {
   UseCSPInputSchema,
   isHTMLRequest
 } from "../chunk-2WPLLVUI.js";
 import {
+  AppwardenApiHostnameSchema,
   AppwardenApiTokenSchema,
   BooleanSchema,
   printMessage
-} from "../chunk-QUVGY2YI.js";
+} from "../chunk-ASH6UZ27.js";
 
 // src/adapters/react-router-cloudflare.ts
 import { waitUntil } from "cloudflare:workers";
@@ -37,7 +38,7 @@ var ReactRouterCloudflareConfigSchema = z.object({
   /** The Appwarden API token for authentication */
   appwardenApiToken: AppwardenApiTokenSchema,
   /** Optional custom API hostname (defaults to https://api.appwarden.io) */
-  appwardenApiHostname: z.string().optional(),
+  appwardenApiHostname: AppwardenApiHostnameSchema.optional(),
   /** Enable debug logging */
   debug: BooleanSchema.default(false),
   /** Optional Content Security Policy configuration */

package/cloudflare/tanstack-start.d.ts

@@ -10,7 +10,7 @@ declare const TanStackStartCloudflareConfigSchema: z.ZodObject<{
     /** The Appwarden API token for authentication */
     appwardenApiToken: z.ZodEffects<z.ZodString, string, string>;
     /** Optional custom API hostname (defaults to https://api.appwarden.io) */
-    appwardenApiHostname: z.ZodOptional<z.ZodString>;
+    appwardenApiHostname: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
     /** Enable debug logging */
     debug: z.ZodDefault<z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodBoolean]>>, boolean, string | boolean | undefined>>;
     /** Optional Content Security Policy configuration */

package/cloudflare/tanstack-start.js

@@ -3,28 +3,29 @@ import {
 } from "../chunk-XFG6SUSV.js";
 import {
   useContentSecurityPolicy
-} from "../chunk-K7ZIT3FM.js";
+} from "../chunk-RQLMO5FA.js";
 import {
   getNowMs
 } from "../chunk-X7WZVYQS.js";
 import {
   checkLockStatus
-} from "../chunk-ZOYE6D3A.js";
+} from "../chunk-VQIRZMED.js";
 import {
   buildLockPageUrl,
   createRedirect,
   debug,
   isOnLockPage
-} from "../chunk-KE2UVIYR.js";
+} from "../chunk-6JYUNSUJ.js";
 import {
   UseCSPInputSchema,
   isHTMLRequest
 } from "../chunk-2WPLLVUI.js";
 import {
+  AppwardenApiHostnameSchema,
   AppwardenApiTokenSchema,
   BooleanSchema,
   printMessage
-} from "../chunk-QUVGY2YI.js";
+} from "../chunk-ASH6UZ27.js";
 
 // src/adapters/tanstack-start-cloudflare.ts
 import { waitUntil } from "cloudflare:workers";
@@ -37,7 +38,7 @@ var TanStackStartCloudflareConfigSchema = z.object({
   /** The Appwarden API token for authentication */
   appwardenApiToken: AppwardenApiTokenSchema,
   /** Optional custom API hostname (defaults to https://api.appwarden.io) */
-  appwardenApiHostname: z.string().optional(),
+  appwardenApiHostname: AppwardenApiHostnameSchema.optional(),
   /** Enable debug logging */
   debug: BooleanSchema.default(false),
   /** Optional Content Security Policy configuration */

package/{cloudflare-JVRRPVRP.js → cloudflare-TJXWELMX.js}

@@ -11,7 +11,7 @@ import {
   makeCSPHeader,
   store,
   syncEdgeValue
-} from "./chunk-QUVGY2YI.js";
+} from "./chunk-ASH6UZ27.js";
 export {
   CSP_KEYWORDS,
   autoQuoteCSPDirectiveArray,

package/cloudflare.d.ts

@@ -331,7 +331,7 @@ declare const UseAppwardenInputSchema: z.ZodObject<{
         } | undefined;
     }>>>;
     appwardenApiToken: z.ZodEffects<z.ZodString, string, string>;
-    appwardenApiHostname: z.ZodOptional<z.ZodString>;
+    appwardenApiHostname: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
 }, "strip", z.ZodTypeAny, {
     debug: boolean;
     appwardenApiToken: string;

package/cloudflare.js

@@ -1,25 +1,26 @@
 import {
   useContentSecurityPolicy
-} from "./chunk-K7ZIT3FM.js";
+} from "./chunk-RQLMO5FA.js";
 import {
   checkLockStatus
-} from "./chunk-ZOYE6D3A.js";
+} from "./chunk-VQIRZMED.js";
 import {
   buildLockPageUrl,
   createRedirect,
   debug,
   isOnLockPage
-} from "./chunk-KE2UVIYR.js";
+} from "./chunk-6JYUNSUJ.js";
 import {
   UseCSPInputSchema,
   isHTMLRequest
 } from "./chunk-2WPLLVUI.js";
 import {
+  AppwardenApiHostnameSchema,
   AppwardenApiTokenSchema,
   BooleanSchema,
   insertErrorLogs,
   printMessage
-} from "./chunk-QUVGY2YI.js";
+} from "./chunk-ASH6UZ27.js";
 
 // src/runners/appwarden-on-cloudflare.ts
 import { ZodError } from "zod";
@@ -42,7 +43,7 @@ var UseAppwardenInputSchema = z.object({
   lockPageSlug: z.string().optional(),
   multidomainConfig: AppwardenMultidomainConfigSchema.optional(),
   appwardenApiToken: AppwardenApiTokenSchema,
-  appwardenApiHostname: z.string().optional()
+  appwardenApiHostname: AppwardenApiHostnameSchema.optional()
 });
 var lockPageSlugRefinement = (schema) => schema.refine(
   (data) => data.lockPageSlug || data.multidomainConfig,

package/index.js

@@ -5,14 +5,14 @@ import {
 } from "./chunk-QEFORWCW.js";
 import {
   useContentSecurityPolicy
-} from "./chunk-K7ZIT3FM.js";
+} from "./chunk-RQLMO5FA.js";
 import {
   APPWARDEN_CACHE_KEY,
   CSPDirectivesSchema,
   CSPModeSchema,
   LOCKDOWN_TEST_EXPIRY_MS
 } from "./chunk-2WPLLVUI.js";
-import "./chunk-QUVGY2YI.js";
+import "./chunk-ASH6UZ27.js";
 export {
   APPWARDEN_CACHE_KEY,
   CSPDirectivesSchema,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@appwarden/middleware",
-  "version": "3.11.1",
+  "version": "3.11.2",
   "description": "Instantly disable all user interaction with your app deployed on Cloudflare or Vercel",
   "type": "module",
   "license": "MIT",

package/vercel.d.ts

@@ -3,7 +3,7 @@ import { z } from 'zod';
 declare const AppwardenConfigSchema: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
     cacheUrl: z.ZodString;
     appwardenApiToken: z.ZodString;
-    appwardenApiHostname: z.ZodOptional<z.ZodString>;
+    appwardenApiHostname: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
     vercelApiToken: z.ZodOptional<z.ZodString>;
     debug: z.ZodOptional<z.ZodBoolean>;
     lockPageSlug: z.ZodEffects<z.ZodDefault<z.ZodString>, string, string | undefined>;

package/vercel.js

@@ -8,7 +8,7 @@ import {
   buildLockPageUrl,
   debug,
   isOnLockPage
-} from "./chunk-KE2UVIYR.js";
+} from "./chunk-6JYUNSUJ.js";
 import {
   APPWARDEN_CACHE_KEY,
   CSPDirectivesSchema,
@@ -18,11 +18,12 @@ import {
   isHTMLRequest
 } from "./chunk-2WPLLVUI.js";
 import {
+  AppwardenApiHostnameSchema,
   LockValue,
   getErrors,
   makeCSPHeader,
   printMessage
-} from "./chunk-QUVGY2YI.js";
+} from "./chunk-ASH6UZ27.js";
 
 // src/runners/appwarden-on-vercel.ts
 import { waitUntil } from "@vercel/functions";
@@ -183,7 +184,7 @@ var VercelCSPSchema = z.object({
 var BaseNextJsConfigSchema = z.object({
   cacheUrl: z.string(),
   appwardenApiToken: z.string(),
-  appwardenApiHostname: z.string().optional(),
+  appwardenApiHostname: AppwardenApiHostnameSchema.optional(),
   vercelApiToken: z.string().optional(),
   debug: z.boolean().optional(),
   lockPageSlug: z.string().default("").transform((val) => val.replace(/^\/?/, "/")),