@appwarden/middleware 3.11.2 → 3.11.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (24) hide show
  1. package/README.md +1 -1
  2. package/chunk-5HCAAVK5.js +38 -0
  3. package/{chunk-6JYUNSUJ.js → chunk-AY4ZKZTF.js} +45 -3
  4. package/{chunk-VQIRZMED.js → chunk-QC2ZUZWY.js} +3 -3
  5. package/{chunk-ASH6UZ27.js → chunk-R7TXTHSG.js} +4 -27
  6. package/{chunk-RQLMO5FA.js → chunk-WBWF3PPX.js} +5 -3
  7. package/chunk-WEM7GS4M.js +29 -0
  8. package/{chunk-2WPLLVUI.js → chunk-ZTVJBORU.js} +1 -43
  9. package/cloudflare/astro.d.ts +2 -2
  10. package/cloudflare/astro.js +11 -9
  11. package/cloudflare/nextjs.d.ts +2 -2
  12. package/cloudflare/nextjs.js +11 -9
  13. package/cloudflare/react-router.d.ts +2 -2
  14. package/cloudflare/react-router.js +11 -9
  15. package/cloudflare/tanstack-start.d.ts +2 -2
  16. package/cloudflare/tanstack-start.js +11 -9
  17. package/{cloudflare-TJXWELMX.js → cloudflare-MAHYENA6.js} +2 -1
  18. package/cloudflare.d.ts +322 -7
  19. package/cloudflare.js +13 -39
  20. package/index.d.ts +729 -2
  21. package/index.js +6 -6
  22. package/package.json +2 -4
  23. package/{use-content-security-policy-DpmIa2tk.d.ts → use-content-security-policy-CvdzUPYF.d.ts} +10 -3
  24. package/vercel.js +9 -7
package/cloudflare.d.ts CHANGED
@@ -1,10 +1,262 @@
1
- import { B as Bindings } from './use-content-security-policy-DpmIa2tk.js';
2
- export { u as useContentSecurityPolicy } from './use-content-security-policy-DpmIa2tk.js';
1
+ import { R as RequestContext, U as UseCSPInput, M as Middleware, B as Bindings } from './use-content-security-policy-CvdzUPYF.js';
3
2
  import { z } from 'zod';
4
3
 
5
- declare const UseAppwardenInputSchema: z.ZodObject<{
4
+ declare const ConfigFnInputSchema: z.ZodFunction<z.ZodTuple<[z.ZodType<RequestContext, z.ZodTypeDef, RequestContext>], z.ZodUnknown>, z.ZodLazy<z.ZodEffects<z.ZodObject<{
6
5
  debug: z.ZodDefault<z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodBoolean]>>, boolean, string | boolean | undefined>>;
7
6
  lockPageSlug: z.ZodOptional<z.ZodString>;
7
+ contentSecurityPolicy: z.ZodOptional<z.ZodLazy<z.ZodObject<{
8
+ mode: z.ZodUnion<[z.ZodLiteral<"disabled">, z.ZodLiteral<"report-only">, z.ZodLiteral<"enforced">]>;
9
+ directives: z.ZodEffects<z.ZodEffects<z.ZodUnion<[z.ZodString, z.ZodObject<{
10
+ "default-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
11
+ "script-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
12
+ "style-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
13
+ "img-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
14
+ "connect-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
15
+ "font-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
16
+ "object-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
17
+ "media-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
18
+ "frame-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
19
+ sandbox: z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
20
+ "report-uri": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
21
+ "child-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
22
+ "form-action": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
23
+ "frame-ancestors": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
24
+ "plugin-types": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
25
+ "base-uri": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
26
+ "report-to": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
27
+ "worker-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
28
+ "manifest-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
29
+ "prefetch-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
30
+ "navigate-to": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
31
+ "require-sri-for": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
32
+ "block-all-mixed-content": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
33
+ "upgrade-insecure-requests": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
34
+ "trusted-types": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
35
+ "require-trusted-types-for": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
36
+ }, "strip", z.ZodTypeAny, {
37
+ "default-src"?: string | boolean | string[] | undefined;
38
+ "script-src"?: string | boolean | string[] | undefined;
39
+ "style-src"?: string | boolean | string[] | undefined;
40
+ "img-src"?: string | boolean | string[] | undefined;
41
+ "connect-src"?: string | boolean | string[] | undefined;
42
+ "font-src"?: string | boolean | string[] | undefined;
43
+ "object-src"?: string | boolean | string[] | undefined;
44
+ "media-src"?: string | boolean | string[] | undefined;
45
+ "frame-src"?: string | boolean | string[] | undefined;
46
+ sandbox?: string | boolean | string[] | undefined;
47
+ "report-uri"?: string | boolean | string[] | undefined;
48
+ "child-src"?: string | boolean | string[] | undefined;
49
+ "form-action"?: string | boolean | string[] | undefined;
50
+ "frame-ancestors"?: string | boolean | string[] | undefined;
51
+ "plugin-types"?: string | boolean | string[] | undefined;
52
+ "base-uri"?: string | boolean | string[] | undefined;
53
+ "report-to"?: string | boolean | string[] | undefined;
54
+ "worker-src"?: string | boolean | string[] | undefined;
55
+ "manifest-src"?: string | boolean | string[] | undefined;
56
+ "prefetch-src"?: string | boolean | string[] | undefined;
57
+ "navigate-to"?: string | boolean | string[] | undefined;
58
+ "require-sri-for"?: string | boolean | string[] | undefined;
59
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
60
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
61
+ "trusted-types"?: string | boolean | string[] | undefined;
62
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
63
+ }, {
64
+ "default-src"?: string | boolean | string[] | undefined;
65
+ "script-src"?: string | boolean | string[] | undefined;
66
+ "style-src"?: string | boolean | string[] | undefined;
67
+ "img-src"?: string | boolean | string[] | undefined;
68
+ "connect-src"?: string | boolean | string[] | undefined;
69
+ "font-src"?: string | boolean | string[] | undefined;
70
+ "object-src"?: string | boolean | string[] | undefined;
71
+ "media-src"?: string | boolean | string[] | undefined;
72
+ "frame-src"?: string | boolean | string[] | undefined;
73
+ sandbox?: string | boolean | string[] | undefined;
74
+ "report-uri"?: string | boolean | string[] | undefined;
75
+ "child-src"?: string | boolean | string[] | undefined;
76
+ "form-action"?: string | boolean | string[] | undefined;
77
+ "frame-ancestors"?: string | boolean | string[] | undefined;
78
+ "plugin-types"?: string | boolean | string[] | undefined;
79
+ "base-uri"?: string | boolean | string[] | undefined;
80
+ "report-to"?: string | boolean | string[] | undefined;
81
+ "worker-src"?: string | boolean | string[] | undefined;
82
+ "manifest-src"?: string | boolean | string[] | undefined;
83
+ "prefetch-src"?: string | boolean | string[] | undefined;
84
+ "navigate-to"?: string | boolean | string[] | undefined;
85
+ "require-sri-for"?: string | boolean | string[] | undefined;
86
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
87
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
88
+ "trusted-types"?: string | boolean | string[] | undefined;
89
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
90
+ }>]>, string | {
91
+ "default-src"?: string | boolean | string[] | undefined;
92
+ "script-src"?: string | boolean | string[] | undefined;
93
+ "style-src"?: string | boolean | string[] | undefined;
94
+ "img-src"?: string | boolean | string[] | undefined;
95
+ "connect-src"?: string | boolean | string[] | undefined;
96
+ "font-src"?: string | boolean | string[] | undefined;
97
+ "object-src"?: string | boolean | string[] | undefined;
98
+ "media-src"?: string | boolean | string[] | undefined;
99
+ "frame-src"?: string | boolean | string[] | undefined;
100
+ sandbox?: string | boolean | string[] | undefined;
101
+ "report-uri"?: string | boolean | string[] | undefined;
102
+ "child-src"?: string | boolean | string[] | undefined;
103
+ "form-action"?: string | boolean | string[] | undefined;
104
+ "frame-ancestors"?: string | boolean | string[] | undefined;
105
+ "plugin-types"?: string | boolean | string[] | undefined;
106
+ "base-uri"?: string | boolean | string[] | undefined;
107
+ "report-to"?: string | boolean | string[] | undefined;
108
+ "worker-src"?: string | boolean | string[] | undefined;
109
+ "manifest-src"?: string | boolean | string[] | undefined;
110
+ "prefetch-src"?: string | boolean | string[] | undefined;
111
+ "navigate-to"?: string | boolean | string[] | undefined;
112
+ "require-sri-for"?: string | boolean | string[] | undefined;
113
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
114
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
115
+ "trusted-types"?: string | boolean | string[] | undefined;
116
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
117
+ }, string | {
118
+ "default-src"?: string | boolean | string[] | undefined;
119
+ "script-src"?: string | boolean | string[] | undefined;
120
+ "style-src"?: string | boolean | string[] | undefined;
121
+ "img-src"?: string | boolean | string[] | undefined;
122
+ "connect-src"?: string | boolean | string[] | undefined;
123
+ "font-src"?: string | boolean | string[] | undefined;
124
+ "object-src"?: string | boolean | string[] | undefined;
125
+ "media-src"?: string | boolean | string[] | undefined;
126
+ "frame-src"?: string | boolean | string[] | undefined;
127
+ sandbox?: string | boolean | string[] | undefined;
128
+ "report-uri"?: string | boolean | string[] | undefined;
129
+ "child-src"?: string | boolean | string[] | undefined;
130
+ "form-action"?: string | boolean | string[] | undefined;
131
+ "frame-ancestors"?: string | boolean | string[] | undefined;
132
+ "plugin-types"?: string | boolean | string[] | undefined;
133
+ "base-uri"?: string | boolean | string[] | undefined;
134
+ "report-to"?: string | boolean | string[] | undefined;
135
+ "worker-src"?: string | boolean | string[] | undefined;
136
+ "manifest-src"?: string | boolean | string[] | undefined;
137
+ "prefetch-src"?: string | boolean | string[] | undefined;
138
+ "navigate-to"?: string | boolean | string[] | undefined;
139
+ "require-sri-for"?: string | boolean | string[] | undefined;
140
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
141
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
142
+ "trusted-types"?: string | boolean | string[] | undefined;
143
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
144
+ }>, {
145
+ "default-src"?: string | boolean | string[] | undefined;
146
+ "script-src"?: string | boolean | string[] | undefined;
147
+ "style-src"?: string | boolean | string[] | undefined;
148
+ "img-src"?: string | boolean | string[] | undefined;
149
+ "connect-src"?: string | boolean | string[] | undefined;
150
+ "font-src"?: string | boolean | string[] | undefined;
151
+ "object-src"?: string | boolean | string[] | undefined;
152
+ "media-src"?: string | boolean | string[] | undefined;
153
+ "frame-src"?: string | boolean | string[] | undefined;
154
+ sandbox?: string | boolean | string[] | undefined;
155
+ "report-uri"?: string | boolean | string[] | undefined;
156
+ "child-src"?: string | boolean | string[] | undefined;
157
+ "form-action"?: string | boolean | string[] | undefined;
158
+ "frame-ancestors"?: string | boolean | string[] | undefined;
159
+ "plugin-types"?: string | boolean | string[] | undefined;
160
+ "base-uri"?: string | boolean | string[] | undefined;
161
+ "report-to"?: string | boolean | string[] | undefined;
162
+ "worker-src"?: string | boolean | string[] | undefined;
163
+ "manifest-src"?: string | boolean | string[] | undefined;
164
+ "prefetch-src"?: string | boolean | string[] | undefined;
165
+ "navigate-to"?: string | boolean | string[] | undefined;
166
+ "require-sri-for"?: string | boolean | string[] | undefined;
167
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
168
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
169
+ "trusted-types"?: string | boolean | string[] | undefined;
170
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
171
+ } | undefined, string | {
172
+ "default-src"?: string | boolean | string[] | undefined;
173
+ "script-src"?: string | boolean | string[] | undefined;
174
+ "style-src"?: string | boolean | string[] | undefined;
175
+ "img-src"?: string | boolean | string[] | undefined;
176
+ "connect-src"?: string | boolean | string[] | undefined;
177
+ "font-src"?: string | boolean | string[] | undefined;
178
+ "object-src"?: string | boolean | string[] | undefined;
179
+ "media-src"?: string | boolean | string[] | undefined;
180
+ "frame-src"?: string | boolean | string[] | undefined;
181
+ sandbox?: string | boolean | string[] | undefined;
182
+ "report-uri"?: string | boolean | string[] | undefined;
183
+ "child-src"?: string | boolean | string[] | undefined;
184
+ "form-action"?: string | boolean | string[] | undefined;
185
+ "frame-ancestors"?: string | boolean | string[] | undefined;
186
+ "plugin-types"?: string | boolean | string[] | undefined;
187
+ "base-uri"?: string | boolean | string[] | undefined;
188
+ "report-to"?: string | boolean | string[] | undefined;
189
+ "worker-src"?: string | boolean | string[] | undefined;
190
+ "manifest-src"?: string | boolean | string[] | undefined;
191
+ "prefetch-src"?: string | boolean | string[] | undefined;
192
+ "navigate-to"?: string | boolean | string[] | undefined;
193
+ "require-sri-for"?: string | boolean | string[] | undefined;
194
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
195
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
196
+ "trusted-types"?: string | boolean | string[] | undefined;
197
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
198
+ }>;
199
+ }, "strip", z.ZodTypeAny, {
200
+ mode: "disabled" | "report-only" | "enforced";
201
+ directives?: {
202
+ "default-src"?: string | boolean | string[] | undefined;
203
+ "script-src"?: string | boolean | string[] | undefined;
204
+ "style-src"?: string | boolean | string[] | undefined;
205
+ "img-src"?: string | boolean | string[] | undefined;
206
+ "connect-src"?: string | boolean | string[] | undefined;
207
+ "font-src"?: string | boolean | string[] | undefined;
208
+ "object-src"?: string | boolean | string[] | undefined;
209
+ "media-src"?: string | boolean | string[] | undefined;
210
+ "frame-src"?: string | boolean | string[] | undefined;
211
+ sandbox?: string | boolean | string[] | undefined;
212
+ "report-uri"?: string | boolean | string[] | undefined;
213
+ "child-src"?: string | boolean | string[] | undefined;
214
+ "form-action"?: string | boolean | string[] | undefined;
215
+ "frame-ancestors"?: string | boolean | string[] | undefined;
216
+ "plugin-types"?: string | boolean | string[] | undefined;
217
+ "base-uri"?: string | boolean | string[] | undefined;
218
+ "report-to"?: string | boolean | string[] | undefined;
219
+ "worker-src"?: string | boolean | string[] | undefined;
220
+ "manifest-src"?: string | boolean | string[] | undefined;
221
+ "prefetch-src"?: string | boolean | string[] | undefined;
222
+ "navigate-to"?: string | boolean | string[] | undefined;
223
+ "require-sri-for"?: string | boolean | string[] | undefined;
224
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
225
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
226
+ "trusted-types"?: string | boolean | string[] | undefined;
227
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
228
+ } | undefined;
229
+ }, {
230
+ mode: "disabled" | "report-only" | "enforced";
231
+ directives: string | {
232
+ "default-src"?: string | boolean | string[] | undefined;
233
+ "script-src"?: string | boolean | string[] | undefined;
234
+ "style-src"?: string | boolean | string[] | undefined;
235
+ "img-src"?: string | boolean | string[] | undefined;
236
+ "connect-src"?: string | boolean | string[] | undefined;
237
+ "font-src"?: string | boolean | string[] | undefined;
238
+ "object-src"?: string | boolean | string[] | undefined;
239
+ "media-src"?: string | boolean | string[] | undefined;
240
+ "frame-src"?: string | boolean | string[] | undefined;
241
+ sandbox?: string | boolean | string[] | undefined;
242
+ "report-uri"?: string | boolean | string[] | undefined;
243
+ "child-src"?: string | boolean | string[] | undefined;
244
+ "form-action"?: string | boolean | string[] | undefined;
245
+ "frame-ancestors"?: string | boolean | string[] | undefined;
246
+ "plugin-types"?: string | boolean | string[] | undefined;
247
+ "base-uri"?: string | boolean | string[] | undefined;
248
+ "report-to"?: string | boolean | string[] | undefined;
249
+ "worker-src"?: string | boolean | string[] | undefined;
250
+ "manifest-src"?: string | boolean | string[] | undefined;
251
+ "prefetch-src"?: string | boolean | string[] | undefined;
252
+ "navigate-to"?: string | boolean | string[] | undefined;
253
+ "require-sri-for"?: string | boolean | string[] | undefined;
254
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
255
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
256
+ "trusted-types"?: string | boolean | string[] | undefined;
257
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
258
+ };
259
+ }>>>;
8
260
  multidomainConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
9
261
  lockPageSlug: z.ZodString;
10
262
  contentSecurityPolicy: z.ZodOptional<z.ZodLazy<z.ZodObject<{
@@ -336,6 +588,37 @@ declare const UseAppwardenInputSchema: z.ZodObject<{
336
588
  debug: boolean;
337
589
  appwardenApiToken: string;
338
590
  lockPageSlug?: string | undefined;
591
+ contentSecurityPolicy?: {
592
+ mode: "disabled" | "report-only" | "enforced";
593
+ directives?: {
594
+ "default-src"?: string | boolean | string[] | undefined;
595
+ "script-src"?: string | boolean | string[] | undefined;
596
+ "style-src"?: string | boolean | string[] | undefined;
597
+ "img-src"?: string | boolean | string[] | undefined;
598
+ "connect-src"?: string | boolean | string[] | undefined;
599
+ "font-src"?: string | boolean | string[] | undefined;
600
+ "object-src"?: string | boolean | string[] | undefined;
601
+ "media-src"?: string | boolean | string[] | undefined;
602
+ "frame-src"?: string | boolean | string[] | undefined;
603
+ sandbox?: string | boolean | string[] | undefined;
604
+ "report-uri"?: string | boolean | string[] | undefined;
605
+ "child-src"?: string | boolean | string[] | undefined;
606
+ "form-action"?: string | boolean | string[] | undefined;
607
+ "frame-ancestors"?: string | boolean | string[] | undefined;
608
+ "plugin-types"?: string | boolean | string[] | undefined;
609
+ "base-uri"?: string | boolean | string[] | undefined;
610
+ "report-to"?: string | boolean | string[] | undefined;
611
+ "worker-src"?: string | boolean | string[] | undefined;
612
+ "manifest-src"?: string | boolean | string[] | undefined;
613
+ "prefetch-src"?: string | boolean | string[] | undefined;
614
+ "navigate-to"?: string | boolean | string[] | undefined;
615
+ "require-sri-for"?: string | boolean | string[] | undefined;
616
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
617
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
618
+ "trusted-types"?: string | boolean | string[] | undefined;
619
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
620
+ } | undefined;
621
+ } | undefined;
339
622
  multidomainConfig?: Record<string, {
340
623
  lockPageSlug: string;
341
624
  debug?: boolean | undefined;
@@ -376,6 +659,37 @@ declare const UseAppwardenInputSchema: z.ZodObject<{
376
659
  appwardenApiToken: string;
377
660
  debug?: string | boolean | undefined;
378
661
  lockPageSlug?: string | undefined;
662
+ contentSecurityPolicy?: {
663
+ mode: "disabled" | "report-only" | "enforced";
664
+ directives: string | {
665
+ "default-src"?: string | boolean | string[] | undefined;
666
+ "script-src"?: string | boolean | string[] | undefined;
667
+ "style-src"?: string | boolean | string[] | undefined;
668
+ "img-src"?: string | boolean | string[] | undefined;
669
+ "connect-src"?: string | boolean | string[] | undefined;
670
+ "font-src"?: string | boolean | string[] | undefined;
671
+ "object-src"?: string | boolean | string[] | undefined;
672
+ "media-src"?: string | boolean | string[] | undefined;
673
+ "frame-src"?: string | boolean | string[] | undefined;
674
+ sandbox?: string | boolean | string[] | undefined;
675
+ "report-uri"?: string | boolean | string[] | undefined;
676
+ "child-src"?: string | boolean | string[] | undefined;
677
+ "form-action"?: string | boolean | string[] | undefined;
678
+ "frame-ancestors"?: string | boolean | string[] | undefined;
679
+ "plugin-types"?: string | boolean | string[] | undefined;
680
+ "base-uri"?: string | boolean | string[] | undefined;
681
+ "report-to"?: string | boolean | string[] | undefined;
682
+ "worker-src"?: string | boolean | string[] | undefined;
683
+ "manifest-src"?: string | boolean | string[] | undefined;
684
+ "prefetch-src"?: string | boolean | string[] | undefined;
685
+ "navigate-to"?: string | boolean | string[] | undefined;
686
+ "require-sri-for"?: string | boolean | string[] | undefined;
687
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
688
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
689
+ "trusted-types"?: string | boolean | string[] | undefined;
690
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
691
+ };
692
+ } | undefined;
379
693
  multidomainConfig?: Record<string, {
380
694
  lockPageSlug: string;
381
695
  debug?: string | boolean | undefined;
@@ -412,10 +726,11 @@ declare const UseAppwardenInputSchema: z.ZodObject<{
412
726
  } | undefined;
413
727
  }> | undefined;
414
728
  appwardenApiHostname?: string | undefined;
415
- }>;
729
+ }>, any, any>>>;
730
+ type CloudflareConfigFnType = z.input<typeof ConfigFnInputSchema>;
416
731
 
417
- type CloudflareConfigType = z.infer<typeof UseAppwardenInputSchema>;
732
+ declare const useContentSecurityPolicy: (input: UseCSPInput) => Middleware;
418
733
 
419
- declare const createAppwardenMiddleware: (inputFn: CloudflareConfigType) => ExportedHandlerFetchHandler<Bindings>;
734
+ declare const createAppwardenMiddleware: (inputFn: CloudflareConfigFnType) => ExportedHandlerFetchHandler<Bindings>;
420
735
 
421
- export { createAppwardenMiddleware };
736
+ export { createAppwardenMiddleware, useContentSecurityPolicy };
package/cloudflare.js CHANGED
@@ -1,59 +1,33 @@
1
+ import {
2
+ UseAppwardenInputSchema,
3
+ lockPageSlugRefinement
4
+ } from "./chunk-5HCAAVK5.js";
1
5
  import {
2
6
  useContentSecurityPolicy
3
- } from "./chunk-RQLMO5FA.js";
7
+ } from "./chunk-WBWF3PPX.js";
4
8
  import {
5
9
  checkLockStatus
6
- } from "./chunk-VQIRZMED.js";
10
+ } from "./chunk-QC2ZUZWY.js";
7
11
  import {
8
12
  buildLockPageUrl,
9
13
  createRedirect,
10
14
  debug,
15
+ isHTMLRequest,
11
16
  isOnLockPage
12
- } from "./chunk-6JYUNSUJ.js";
13
- import {
14
- UseCSPInputSchema,
15
- isHTMLRequest
16
- } from "./chunk-2WPLLVUI.js";
17
+ } from "./chunk-AY4ZKZTF.js";
18
+ import "./chunk-ZTVJBORU.js";
17
19
  import {
18
- AppwardenApiHostnameSchema,
19
- AppwardenApiTokenSchema,
20
- BooleanSchema,
21
20
  insertErrorLogs,
22
21
  printMessage
23
- } from "./chunk-ASH6UZ27.js";
22
+ } from "./chunk-R7TXTHSG.js";
23
+ import "./chunk-WEM7GS4M.js";
24
24
 
25
25
  // src/runners/appwarden-on-cloudflare.ts
26
26
  import { ZodError } from "zod";
27
27
 
28
28
  // src/schemas/cloudflare.ts
29
- import { z as z2 } from "zod";
30
-
31
- // src/schemas/use-appwarden.ts
32
29
  import { z } from "zod";
33
- var AppwardenMultidomainConfigSchema = z.record(
34
- z.string(),
35
- z.object({
36
- lockPageSlug: z.string(),
37
- contentSecurityPolicy: z.lazy(() => UseCSPInputSchema).optional(),
38
- debug: BooleanSchema.optional()
39
- })
40
- );
41
- var UseAppwardenInputSchema = z.object({
42
- debug: BooleanSchema.default(false),
43
- lockPageSlug: z.string().optional(),
44
- multidomainConfig: AppwardenMultidomainConfigSchema.optional(),
45
- appwardenApiToken: AppwardenApiTokenSchema,
46
- appwardenApiHostname: AppwardenApiHostnameSchema.optional()
47
- });
48
- var lockPageSlugRefinement = (schema) => schema.refine(
49
- (data) => data.lockPageSlug || data.multidomainConfig,
50
- {
51
- message: "lockPageSlug must be provided"
52
- }
53
- );
54
-
55
- // src/schemas/cloudflare.ts
56
- var ConfigFnInputSchema = z2.function().args(z2.custom()).returns(z2.lazy(() => lockPageSlugRefinement(UseAppwardenInputSchema)));
30
+ var ConfigFnInputSchema = z.function().args(z.custom()).returns(z.lazy(() => lockPageSlugRefinement(UseAppwardenInputSchema)));
57
31
 
58
32
  // src/utils/middleware.ts
59
33
  var usePipeline = (...initMiddlewares) => {
@@ -162,7 +136,7 @@ var appwardenOnCloudflare = (inputFn) => async (request, env, ctx) => {
162
136
  useAppwarden({ ...input, debug: domainDebug }),
163
137
  useFetchOrigin()
164
138
  ];
165
- const cspConfig = input.multidomainConfig?.[requestUrl.hostname]?.contentSecurityPolicy;
139
+ const cspConfig = input.multidomainConfig?.[requestUrl.hostname]?.contentSecurityPolicy ?? input.contentSecurityPolicy;
166
140
  if (cspConfig) {
167
141
  pipeline.push(useContentSecurityPolicy(cspConfig));
168
142
  }