@appwarden/middleware 3.2.1 → 3.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (28) hide show
  1. package/README.md +257 -22
  2. package/chunk-3MKVGKH7.js +81 -0
  3. package/chunk-G4RRFNHY.js +332 -0
  4. package/chunk-HCGLR3Z3.js +97 -0
  5. package/{chunk-ZX5QO4Y2.js → chunk-QVRWMYGL.js} +31 -58
  6. package/{chunk-COV6SHCD.js → chunk-U3T4R5KZ.js} +2 -4
  7. package/chunk-YBWFEBZC.js +53 -0
  8. package/cloudflare/astro.d.ts +4 -0
  9. package/cloudflare/astro.js +54 -11
  10. package/cloudflare/nextjs.d.ts +4 -0
  11. package/cloudflare/nextjs.js +57 -10
  12. package/cloudflare/react-router.d.ts +5 -0
  13. package/cloudflare/react-router.js +54 -11
  14. package/cloudflare/tanstack-start.d.ts +5 -0
  15. package/cloudflare/tanstack-start.js +54 -11
  16. package/cloudflare-36BOGAYU.js +28 -0
  17. package/cloudflare.d.ts +440 -8
  18. package/cloudflare.js +44 -54
  19. package/index.d.ts +2 -1
  20. package/index.js +5 -4
  21. package/package.json +8 -3
  22. package/{use-content-security-policy-DjRTjIpm.d.ts → use-content-security-policy-DUYpyUPy.d.ts} +1 -18
  23. package/use-content-security-policy-Dvc-oObb.d.ts +17 -0
  24. package/vercel.d.ts +688 -0
  25. package/vercel.js +82 -13
  26. package/chunk-A5XGYLYS.js +0 -196
  27. package/chunk-L5EQIJZB.js +0 -54
  28. package/chunk-MDODCAA3.js +0 -232
package/cloudflare.d.ts CHANGED
@@ -1,16 +1,391 @@
1
- import { M as Middleware, B as Bindings } from './use-content-security-policy-DjRTjIpm.js';
2
- export { u as useContentSecurityPolicy } from './use-content-security-policy-DjRTjIpm.js';
1
+ import { B as Bindings } from './use-content-security-policy-DUYpyUPy.js';
3
2
  import { z } from 'zod';
3
+ export { u as useContentSecurityPolicy } from './use-content-security-policy-Dvc-oObb.js';
4
4
 
5
5
  declare const UseAppwardenInputSchema: z.ZodObject<{
6
6
  debug: z.ZodDefault<z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodBoolean]>>, boolean, string | boolean | undefined>>;
7
7
  lockPageSlug: z.ZodOptional<z.ZodString>;
8
8
  multidomainConfig: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
9
9
  lockPageSlug: z.ZodString;
10
+ contentSecurityPolicy: z.ZodOptional<z.ZodLazy<z.ZodEffects<z.ZodObject<{
11
+ mode: z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"disabled">, z.ZodLiteral<"report-only">, z.ZodLiteral<"enforced">]>>>;
12
+ directives: z.ZodEffects<z.ZodEffects<z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodObject<{
13
+ "default-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
14
+ "script-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
15
+ "style-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
16
+ "img-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
17
+ "connect-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
18
+ "font-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
19
+ "object-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
20
+ "media-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
21
+ "frame-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
22
+ sandbox: z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
23
+ "report-uri": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
24
+ "child-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
25
+ "form-action": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
26
+ "frame-ancestors": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
27
+ "plugin-types": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
28
+ "base-uri": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
29
+ "report-to": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
30
+ "worker-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
31
+ "manifest-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
32
+ "prefetch-src": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
33
+ "navigate-to": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
34
+ "require-sri-for": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
35
+ "block-all-mixed-content": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
36
+ "upgrade-insecure-requests": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
37
+ "trusted-types": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
38
+ "require-trusted-types-for": z.ZodOptional<z.ZodUnion<[z.ZodArray<z.ZodString, "many">, z.ZodString, z.ZodBoolean]>>;
39
+ }, "strip", z.ZodTypeAny, {
40
+ "default-src"?: string | boolean | string[] | undefined;
41
+ "script-src"?: string | boolean | string[] | undefined;
42
+ "style-src"?: string | boolean | string[] | undefined;
43
+ "img-src"?: string | boolean | string[] | undefined;
44
+ "connect-src"?: string | boolean | string[] | undefined;
45
+ "font-src"?: string | boolean | string[] | undefined;
46
+ "object-src"?: string | boolean | string[] | undefined;
47
+ "media-src"?: string | boolean | string[] | undefined;
48
+ "frame-src"?: string | boolean | string[] | undefined;
49
+ sandbox?: string | boolean | string[] | undefined;
50
+ "report-uri"?: string | boolean | string[] | undefined;
51
+ "child-src"?: string | boolean | string[] | undefined;
52
+ "form-action"?: string | boolean | string[] | undefined;
53
+ "frame-ancestors"?: string | boolean | string[] | undefined;
54
+ "plugin-types"?: string | boolean | string[] | undefined;
55
+ "base-uri"?: string | boolean | string[] | undefined;
56
+ "report-to"?: string | boolean | string[] | undefined;
57
+ "worker-src"?: string | boolean | string[] | undefined;
58
+ "manifest-src"?: string | boolean | string[] | undefined;
59
+ "prefetch-src"?: string | boolean | string[] | undefined;
60
+ "navigate-to"?: string | boolean | string[] | undefined;
61
+ "require-sri-for"?: string | boolean | string[] | undefined;
62
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
63
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
64
+ "trusted-types"?: string | boolean | string[] | undefined;
65
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
66
+ }, {
67
+ "default-src"?: string | boolean | string[] | undefined;
68
+ "script-src"?: string | boolean | string[] | undefined;
69
+ "style-src"?: string | boolean | string[] | undefined;
70
+ "img-src"?: string | boolean | string[] | undefined;
71
+ "connect-src"?: string | boolean | string[] | undefined;
72
+ "font-src"?: string | boolean | string[] | undefined;
73
+ "object-src"?: string | boolean | string[] | undefined;
74
+ "media-src"?: string | boolean | string[] | undefined;
75
+ "frame-src"?: string | boolean | string[] | undefined;
76
+ sandbox?: string | boolean | string[] | undefined;
77
+ "report-uri"?: string | boolean | string[] | undefined;
78
+ "child-src"?: string | boolean | string[] | undefined;
79
+ "form-action"?: string | boolean | string[] | undefined;
80
+ "frame-ancestors"?: string | boolean | string[] | undefined;
81
+ "plugin-types"?: string | boolean | string[] | undefined;
82
+ "base-uri"?: string | boolean | string[] | undefined;
83
+ "report-to"?: string | boolean | string[] | undefined;
84
+ "worker-src"?: string | boolean | string[] | undefined;
85
+ "manifest-src"?: string | boolean | string[] | undefined;
86
+ "prefetch-src"?: string | boolean | string[] | undefined;
87
+ "navigate-to"?: string | boolean | string[] | undefined;
88
+ "require-sri-for"?: string | boolean | string[] | undefined;
89
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
90
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
91
+ "trusted-types"?: string | boolean | string[] | undefined;
92
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
93
+ }>]>>, string | {
94
+ "default-src"?: string | boolean | string[] | undefined;
95
+ "script-src"?: string | boolean | string[] | undefined;
96
+ "style-src"?: string | boolean | string[] | undefined;
97
+ "img-src"?: string | boolean | string[] | undefined;
98
+ "connect-src"?: string | boolean | string[] | undefined;
99
+ "font-src"?: string | boolean | string[] | undefined;
100
+ "object-src"?: string | boolean | string[] | undefined;
101
+ "media-src"?: string | boolean | string[] | undefined;
102
+ "frame-src"?: string | boolean | string[] | undefined;
103
+ sandbox?: string | boolean | string[] | undefined;
104
+ "report-uri"?: string | boolean | string[] | undefined;
105
+ "child-src"?: string | boolean | string[] | undefined;
106
+ "form-action"?: string | boolean | string[] | undefined;
107
+ "frame-ancestors"?: string | boolean | string[] | undefined;
108
+ "plugin-types"?: string | boolean | string[] | undefined;
109
+ "base-uri"?: string | boolean | string[] | undefined;
110
+ "report-to"?: string | boolean | string[] | undefined;
111
+ "worker-src"?: string | boolean | string[] | undefined;
112
+ "manifest-src"?: string | boolean | string[] | undefined;
113
+ "prefetch-src"?: string | boolean | string[] | undefined;
114
+ "navigate-to"?: string | boolean | string[] | undefined;
115
+ "require-sri-for"?: string | boolean | string[] | undefined;
116
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
117
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
118
+ "trusted-types"?: string | boolean | string[] | undefined;
119
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
120
+ } | undefined, string | {
121
+ "default-src"?: string | boolean | string[] | undefined;
122
+ "script-src"?: string | boolean | string[] | undefined;
123
+ "style-src"?: string | boolean | string[] | undefined;
124
+ "img-src"?: string | boolean | string[] | undefined;
125
+ "connect-src"?: string | boolean | string[] | undefined;
126
+ "font-src"?: string | boolean | string[] | undefined;
127
+ "object-src"?: string | boolean | string[] | undefined;
128
+ "media-src"?: string | boolean | string[] | undefined;
129
+ "frame-src"?: string | boolean | string[] | undefined;
130
+ sandbox?: string | boolean | string[] | undefined;
131
+ "report-uri"?: string | boolean | string[] | undefined;
132
+ "child-src"?: string | boolean | string[] | undefined;
133
+ "form-action"?: string | boolean | string[] | undefined;
134
+ "frame-ancestors"?: string | boolean | string[] | undefined;
135
+ "plugin-types"?: string | boolean | string[] | undefined;
136
+ "base-uri"?: string | boolean | string[] | undefined;
137
+ "report-to"?: string | boolean | string[] | undefined;
138
+ "worker-src"?: string | boolean | string[] | undefined;
139
+ "manifest-src"?: string | boolean | string[] | undefined;
140
+ "prefetch-src"?: string | boolean | string[] | undefined;
141
+ "navigate-to"?: string | boolean | string[] | undefined;
142
+ "require-sri-for"?: string | boolean | string[] | undefined;
143
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
144
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
145
+ "trusted-types"?: string | boolean | string[] | undefined;
146
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
147
+ } | undefined>, {
148
+ "default-src"?: string | boolean | string[] | undefined;
149
+ "script-src"?: string | boolean | string[] | undefined;
150
+ "style-src"?: string | boolean | string[] | undefined;
151
+ "img-src"?: string | boolean | string[] | undefined;
152
+ "connect-src"?: string | boolean | string[] | undefined;
153
+ "font-src"?: string | boolean | string[] | undefined;
154
+ "object-src"?: string | boolean | string[] | undefined;
155
+ "media-src"?: string | boolean | string[] | undefined;
156
+ "frame-src"?: string | boolean | string[] | undefined;
157
+ sandbox?: string | boolean | string[] | undefined;
158
+ "report-uri"?: string | boolean | string[] | undefined;
159
+ "child-src"?: string | boolean | string[] | undefined;
160
+ "form-action"?: string | boolean | string[] | undefined;
161
+ "frame-ancestors"?: string | boolean | string[] | undefined;
162
+ "plugin-types"?: string | boolean | string[] | undefined;
163
+ "base-uri"?: string | boolean | string[] | undefined;
164
+ "report-to"?: string | boolean | string[] | undefined;
165
+ "worker-src"?: string | boolean | string[] | undefined;
166
+ "manifest-src"?: string | boolean | string[] | undefined;
167
+ "prefetch-src"?: string | boolean | string[] | undefined;
168
+ "navigate-to"?: string | boolean | string[] | undefined;
169
+ "require-sri-for"?: string | boolean | string[] | undefined;
170
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
171
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
172
+ "trusted-types"?: string | boolean | string[] | undefined;
173
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
174
+ } | undefined, string | {
175
+ "default-src"?: string | boolean | string[] | undefined;
176
+ "script-src"?: string | boolean | string[] | undefined;
177
+ "style-src"?: string | boolean | string[] | undefined;
178
+ "img-src"?: string | boolean | string[] | undefined;
179
+ "connect-src"?: string | boolean | string[] | undefined;
180
+ "font-src"?: string | boolean | string[] | undefined;
181
+ "object-src"?: string | boolean | string[] | undefined;
182
+ "media-src"?: string | boolean | string[] | undefined;
183
+ "frame-src"?: string | boolean | string[] | undefined;
184
+ sandbox?: string | boolean | string[] | undefined;
185
+ "report-uri"?: string | boolean | string[] | undefined;
186
+ "child-src"?: string | boolean | string[] | undefined;
187
+ "form-action"?: string | boolean | string[] | undefined;
188
+ "frame-ancestors"?: string | boolean | string[] | undefined;
189
+ "plugin-types"?: string | boolean | string[] | undefined;
190
+ "base-uri"?: string | boolean | string[] | undefined;
191
+ "report-to"?: string | boolean | string[] | undefined;
192
+ "worker-src"?: string | boolean | string[] | undefined;
193
+ "manifest-src"?: string | boolean | string[] | undefined;
194
+ "prefetch-src"?: string | boolean | string[] | undefined;
195
+ "navigate-to"?: string | boolean | string[] | undefined;
196
+ "require-sri-for"?: string | boolean | string[] | undefined;
197
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
198
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
199
+ "trusted-types"?: string | boolean | string[] | undefined;
200
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
201
+ } | undefined>;
202
+ }, "strip", z.ZodTypeAny, {
203
+ mode: "disabled" | "report-only" | "enforced";
204
+ directives?: {
205
+ "default-src"?: string | boolean | string[] | undefined;
206
+ "script-src"?: string | boolean | string[] | undefined;
207
+ "style-src"?: string | boolean | string[] | undefined;
208
+ "img-src"?: string | boolean | string[] | undefined;
209
+ "connect-src"?: string | boolean | string[] | undefined;
210
+ "font-src"?: string | boolean | string[] | undefined;
211
+ "object-src"?: string | boolean | string[] | undefined;
212
+ "media-src"?: string | boolean | string[] | undefined;
213
+ "frame-src"?: string | boolean | string[] | undefined;
214
+ sandbox?: string | boolean | string[] | undefined;
215
+ "report-uri"?: string | boolean | string[] | undefined;
216
+ "child-src"?: string | boolean | string[] | undefined;
217
+ "form-action"?: string | boolean | string[] | undefined;
218
+ "frame-ancestors"?: string | boolean | string[] | undefined;
219
+ "plugin-types"?: string | boolean | string[] | undefined;
220
+ "base-uri"?: string | boolean | string[] | undefined;
221
+ "report-to"?: string | boolean | string[] | undefined;
222
+ "worker-src"?: string | boolean | string[] | undefined;
223
+ "manifest-src"?: string | boolean | string[] | undefined;
224
+ "prefetch-src"?: string | boolean | string[] | undefined;
225
+ "navigate-to"?: string | boolean | string[] | undefined;
226
+ "require-sri-for"?: string | boolean | string[] | undefined;
227
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
228
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
229
+ "trusted-types"?: string | boolean | string[] | undefined;
230
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
231
+ } | undefined;
232
+ }, {
233
+ mode?: "disabled" | "report-only" | "enforced" | undefined;
234
+ directives?: string | {
235
+ "default-src"?: string | boolean | string[] | undefined;
236
+ "script-src"?: string | boolean | string[] | undefined;
237
+ "style-src"?: string | boolean | string[] | undefined;
238
+ "img-src"?: string | boolean | string[] | undefined;
239
+ "connect-src"?: string | boolean | string[] | undefined;
240
+ "font-src"?: string | boolean | string[] | undefined;
241
+ "object-src"?: string | boolean | string[] | undefined;
242
+ "media-src"?: string | boolean | string[] | undefined;
243
+ "frame-src"?: string | boolean | string[] | undefined;
244
+ sandbox?: string | boolean | string[] | undefined;
245
+ "report-uri"?: string | boolean | string[] | undefined;
246
+ "child-src"?: string | boolean | string[] | undefined;
247
+ "form-action"?: string | boolean | string[] | undefined;
248
+ "frame-ancestors"?: string | boolean | string[] | undefined;
249
+ "plugin-types"?: string | boolean | string[] | undefined;
250
+ "base-uri"?: string | boolean | string[] | undefined;
251
+ "report-to"?: string | boolean | string[] | undefined;
252
+ "worker-src"?: string | boolean | string[] | undefined;
253
+ "manifest-src"?: string | boolean | string[] | undefined;
254
+ "prefetch-src"?: string | boolean | string[] | undefined;
255
+ "navigate-to"?: string | boolean | string[] | undefined;
256
+ "require-sri-for"?: string | boolean | string[] | undefined;
257
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
258
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
259
+ "trusted-types"?: string | boolean | string[] | undefined;
260
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
261
+ } | undefined;
262
+ }>, {
263
+ mode: "disabled" | "report-only" | "enforced";
264
+ directives?: {
265
+ "default-src"?: string | boolean | string[] | undefined;
266
+ "script-src"?: string | boolean | string[] | undefined;
267
+ "style-src"?: string | boolean | string[] | undefined;
268
+ "img-src"?: string | boolean | string[] | undefined;
269
+ "connect-src"?: string | boolean | string[] | undefined;
270
+ "font-src"?: string | boolean | string[] | undefined;
271
+ "object-src"?: string | boolean | string[] | undefined;
272
+ "media-src"?: string | boolean | string[] | undefined;
273
+ "frame-src"?: string | boolean | string[] | undefined;
274
+ sandbox?: string | boolean | string[] | undefined;
275
+ "report-uri"?: string | boolean | string[] | undefined;
276
+ "child-src"?: string | boolean | string[] | undefined;
277
+ "form-action"?: string | boolean | string[] | undefined;
278
+ "frame-ancestors"?: string | boolean | string[] | undefined;
279
+ "plugin-types"?: string | boolean | string[] | undefined;
280
+ "base-uri"?: string | boolean | string[] | undefined;
281
+ "report-to"?: string | boolean | string[] | undefined;
282
+ "worker-src"?: string | boolean | string[] | undefined;
283
+ "manifest-src"?: string | boolean | string[] | undefined;
284
+ "prefetch-src"?: string | boolean | string[] | undefined;
285
+ "navigate-to"?: string | boolean | string[] | undefined;
286
+ "require-sri-for"?: string | boolean | string[] | undefined;
287
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
288
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
289
+ "trusted-types"?: string | boolean | string[] | undefined;
290
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
291
+ } | undefined;
292
+ }, {
293
+ mode?: "disabled" | "report-only" | "enforced" | undefined;
294
+ directives?: string | {
295
+ "default-src"?: string | boolean | string[] | undefined;
296
+ "script-src"?: string | boolean | string[] | undefined;
297
+ "style-src"?: string | boolean | string[] | undefined;
298
+ "img-src"?: string | boolean | string[] | undefined;
299
+ "connect-src"?: string | boolean | string[] | undefined;
300
+ "font-src"?: string | boolean | string[] | undefined;
301
+ "object-src"?: string | boolean | string[] | undefined;
302
+ "media-src"?: string | boolean | string[] | undefined;
303
+ "frame-src"?: string | boolean | string[] | undefined;
304
+ sandbox?: string | boolean | string[] | undefined;
305
+ "report-uri"?: string | boolean | string[] | undefined;
306
+ "child-src"?: string | boolean | string[] | undefined;
307
+ "form-action"?: string | boolean | string[] | undefined;
308
+ "frame-ancestors"?: string | boolean | string[] | undefined;
309
+ "plugin-types"?: string | boolean | string[] | undefined;
310
+ "base-uri"?: string | boolean | string[] | undefined;
311
+ "report-to"?: string | boolean | string[] | undefined;
312
+ "worker-src"?: string | boolean | string[] | undefined;
313
+ "manifest-src"?: string | boolean | string[] | undefined;
314
+ "prefetch-src"?: string | boolean | string[] | undefined;
315
+ "navigate-to"?: string | boolean | string[] | undefined;
316
+ "require-sri-for"?: string | boolean | string[] | undefined;
317
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
318
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
319
+ "trusted-types"?: string | boolean | string[] | undefined;
320
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
321
+ } | undefined;
322
+ }>>>;
10
323
  }, "strip", z.ZodTypeAny, {
11
324
  lockPageSlug: string;
325
+ contentSecurityPolicy?: {
326
+ mode: "disabled" | "report-only" | "enforced";
327
+ directives?: {
328
+ "default-src"?: string | boolean | string[] | undefined;
329
+ "script-src"?: string | boolean | string[] | undefined;
330
+ "style-src"?: string | boolean | string[] | undefined;
331
+ "img-src"?: string | boolean | string[] | undefined;
332
+ "connect-src"?: string | boolean | string[] | undefined;
333
+ "font-src"?: string | boolean | string[] | undefined;
334
+ "object-src"?: string | boolean | string[] | undefined;
335
+ "media-src"?: string | boolean | string[] | undefined;
336
+ "frame-src"?: string | boolean | string[] | undefined;
337
+ sandbox?: string | boolean | string[] | undefined;
338
+ "report-uri"?: string | boolean | string[] | undefined;
339
+ "child-src"?: string | boolean | string[] | undefined;
340
+ "form-action"?: string | boolean | string[] | undefined;
341
+ "frame-ancestors"?: string | boolean | string[] | undefined;
342
+ "plugin-types"?: string | boolean | string[] | undefined;
343
+ "base-uri"?: string | boolean | string[] | undefined;
344
+ "report-to"?: string | boolean | string[] | undefined;
345
+ "worker-src"?: string | boolean | string[] | undefined;
346
+ "manifest-src"?: string | boolean | string[] | undefined;
347
+ "prefetch-src"?: string | boolean | string[] | undefined;
348
+ "navigate-to"?: string | boolean | string[] | undefined;
349
+ "require-sri-for"?: string | boolean | string[] | undefined;
350
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
351
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
352
+ "trusted-types"?: string | boolean | string[] | undefined;
353
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
354
+ } | undefined;
355
+ } | undefined;
12
356
  }, {
13
357
  lockPageSlug: string;
358
+ contentSecurityPolicy?: {
359
+ mode?: "disabled" | "report-only" | "enforced" | undefined;
360
+ directives?: string | {
361
+ "default-src"?: string | boolean | string[] | undefined;
362
+ "script-src"?: string | boolean | string[] | undefined;
363
+ "style-src"?: string | boolean | string[] | undefined;
364
+ "img-src"?: string | boolean | string[] | undefined;
365
+ "connect-src"?: string | boolean | string[] | undefined;
366
+ "font-src"?: string | boolean | string[] | undefined;
367
+ "object-src"?: string | boolean | string[] | undefined;
368
+ "media-src"?: string | boolean | string[] | undefined;
369
+ "frame-src"?: string | boolean | string[] | undefined;
370
+ sandbox?: string | boolean | string[] | undefined;
371
+ "report-uri"?: string | boolean | string[] | undefined;
372
+ "child-src"?: string | boolean | string[] | undefined;
373
+ "form-action"?: string | boolean | string[] | undefined;
374
+ "frame-ancestors"?: string | boolean | string[] | undefined;
375
+ "plugin-types"?: string | boolean | string[] | undefined;
376
+ "base-uri"?: string | boolean | string[] | undefined;
377
+ "report-to"?: string | boolean | string[] | undefined;
378
+ "worker-src"?: string | boolean | string[] | undefined;
379
+ "manifest-src"?: string | boolean | string[] | undefined;
380
+ "prefetch-src"?: string | boolean | string[] | undefined;
381
+ "navigate-to"?: string | boolean | string[] | undefined;
382
+ "require-sri-for"?: string | boolean | string[] | undefined;
383
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
384
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
385
+ "trusted-types"?: string | boolean | string[] | undefined;
386
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
387
+ } | undefined;
388
+ } | undefined;
14
389
  }>>>;
15
390
  appwardenApiToken: z.ZodEffects<z.ZodString, string, string>;
16
391
  appwardenApiHostname: z.ZodOptional<z.ZodString>;
@@ -20,6 +395,37 @@ declare const UseAppwardenInputSchema: z.ZodObject<{
20
395
  lockPageSlug?: string | undefined;
21
396
  multidomainConfig?: Record<string, {
22
397
  lockPageSlug: string;
398
+ contentSecurityPolicy?: {
399
+ mode: "disabled" | "report-only" | "enforced";
400
+ directives?: {
401
+ "default-src"?: string | boolean | string[] | undefined;
402
+ "script-src"?: string | boolean | string[] | undefined;
403
+ "style-src"?: string | boolean | string[] | undefined;
404
+ "img-src"?: string | boolean | string[] | undefined;
405
+ "connect-src"?: string | boolean | string[] | undefined;
406
+ "font-src"?: string | boolean | string[] | undefined;
407
+ "object-src"?: string | boolean | string[] | undefined;
408
+ "media-src"?: string | boolean | string[] | undefined;
409
+ "frame-src"?: string | boolean | string[] | undefined;
410
+ sandbox?: string | boolean | string[] | undefined;
411
+ "report-uri"?: string | boolean | string[] | undefined;
412
+ "child-src"?: string | boolean | string[] | undefined;
413
+ "form-action"?: string | boolean | string[] | undefined;
414
+ "frame-ancestors"?: string | boolean | string[] | undefined;
415
+ "plugin-types"?: string | boolean | string[] | undefined;
416
+ "base-uri"?: string | boolean | string[] | undefined;
417
+ "report-to"?: string | boolean | string[] | undefined;
418
+ "worker-src"?: string | boolean | string[] | undefined;
419
+ "manifest-src"?: string | boolean | string[] | undefined;
420
+ "prefetch-src"?: string | boolean | string[] | undefined;
421
+ "navigate-to"?: string | boolean | string[] | undefined;
422
+ "require-sri-for"?: string | boolean | string[] | undefined;
423
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
424
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
425
+ "trusted-types"?: string | boolean | string[] | undefined;
426
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
427
+ } | undefined;
428
+ } | undefined;
23
429
  }> | undefined;
24
430
  appwardenApiHostname?: string | undefined;
25
431
  }, {
@@ -28,16 +434,42 @@ declare const UseAppwardenInputSchema: z.ZodObject<{
28
434
  lockPageSlug?: string | undefined;
29
435
  multidomainConfig?: Record<string, {
30
436
  lockPageSlug: string;
437
+ contentSecurityPolicy?: {
438
+ mode?: "disabled" | "report-only" | "enforced" | undefined;
439
+ directives?: string | {
440
+ "default-src"?: string | boolean | string[] | undefined;
441
+ "script-src"?: string | boolean | string[] | undefined;
442
+ "style-src"?: string | boolean | string[] | undefined;
443
+ "img-src"?: string | boolean | string[] | undefined;
444
+ "connect-src"?: string | boolean | string[] | undefined;
445
+ "font-src"?: string | boolean | string[] | undefined;
446
+ "object-src"?: string | boolean | string[] | undefined;
447
+ "media-src"?: string | boolean | string[] | undefined;
448
+ "frame-src"?: string | boolean | string[] | undefined;
449
+ sandbox?: string | boolean | string[] | undefined;
450
+ "report-uri"?: string | boolean | string[] | undefined;
451
+ "child-src"?: string | boolean | string[] | undefined;
452
+ "form-action"?: string | boolean | string[] | undefined;
453
+ "frame-ancestors"?: string | boolean | string[] | undefined;
454
+ "plugin-types"?: string | boolean | string[] | undefined;
455
+ "base-uri"?: string | boolean | string[] | undefined;
456
+ "report-to"?: string | boolean | string[] | undefined;
457
+ "worker-src"?: string | boolean | string[] | undefined;
458
+ "manifest-src"?: string | boolean | string[] | undefined;
459
+ "prefetch-src"?: string | boolean | string[] | undefined;
460
+ "navigate-to"?: string | boolean | string[] | undefined;
461
+ "require-sri-for"?: string | boolean | string[] | undefined;
462
+ "block-all-mixed-content"?: string | boolean | string[] | undefined;
463
+ "upgrade-insecure-requests"?: string | boolean | string[] | undefined;
464
+ "trusted-types"?: string | boolean | string[] | undefined;
465
+ "require-trusted-types-for"?: string | boolean | string[] | undefined;
466
+ } | undefined;
467
+ } | undefined;
31
468
  }> | undefined;
32
469
  appwardenApiHostname?: string | undefined;
33
470
  }>;
34
471
 
35
- type CloudflareConfigType = z.infer<typeof UseAppwardenInputSchema> & {
36
- middleware: {
37
- before: Middleware[];
38
- after: Middleware[];
39
- };
40
- };
472
+ type CloudflareConfigType = z.infer<typeof UseAppwardenInputSchema>;
41
473
 
42
474
  declare const createAppwardenMiddleware: (inputFn: CloudflareConfigType) => ExportedHandlerFetchHandler<Bindings>;
43
475
 
package/cloudflare.js CHANGED
@@ -1,24 +1,28 @@
1
1
  import {
2
2
  useContentSecurityPolicy
3
- } from "./chunk-A5XGYLYS.js";
3
+ } from "./chunk-YBWFEBZC.js";
4
4
  import {
5
- checkLockStatus,
6
- getLockValue,
7
- store
8
- } from "./chunk-MDODCAA3.js";
5
+ checkLockStatus
6
+ } from "./chunk-3MKVGKH7.js";
9
7
  import {
10
- AppwardenApiTokenSchema,
11
- BooleanSchema,
12
8
  buildLockPageUrl,
13
9
  createRedirect,
14
- getErrors,
10
+ debug,
15
11
  isOnLockPage
16
- } from "./chunk-ZX5QO4Y2.js";
12
+ } from "./chunk-QVRWMYGL.js";
17
13
  import {
18
14
  APPWARDEN_CACHE_KEY,
19
- isHTMLRequest,
20
- printMessage
21
- } from "./chunk-L5EQIJZB.js";
15
+ UseCSPInputSchema,
16
+ isHTMLRequest
17
+ } from "./chunk-HCGLR3Z3.js";
18
+ import {
19
+ AppwardenApiTokenSchema,
20
+ BooleanSchema,
21
+ getLockValue,
22
+ insertErrorLogs,
23
+ printMessage,
24
+ store
25
+ } from "./chunk-G4RRFNHY.js";
22
26
 
23
27
  // src/runners/appwarden-on-cloudflare.ts
24
28
  import { ZodError } from "zod";
@@ -31,7 +35,8 @@ import { z } from "zod";
31
35
  var AppwardenMultidomainConfigSchema = z.record(
32
36
  z.string(),
33
37
  z.object({
34
- lockPageSlug: z.string()
38
+ lockPageSlug: z.string(),
39
+ contentSecurityPolicy: z.lazy(() => UseCSPInputSchema).optional()
35
40
  })
36
41
  );
37
42
  var UseAppwardenInputSchema = z.object({
@@ -49,16 +54,7 @@ var lockPageSlugRefinement = (schema) => schema.refine(
49
54
  );
50
55
 
51
56
  // src/schemas/cloudflare.ts
52
- var ConfigFnInputSchema = z2.function().args(z2.custom()).returns(
53
- lockPageSlugRefinement(
54
- UseAppwardenInputSchema.extend({
55
- middleware: z2.object({
56
- before: z2.custom().array().default([]),
57
- after: z2.custom().array().default([])
58
- }).default({})
59
- })
60
- )
61
- );
57
+ var ConfigFnInputSchema = z2.function().args(z2.custom()).returns(z2.lazy(() => lockPageSlugRefinement(UseAppwardenInputSchema)));
62
58
 
63
59
  // src/utils/middleware.ts
64
60
  var usePipeline = (...initMiddlewares) => {
@@ -82,24 +78,6 @@ var usePipeline = (...initMiddlewares) => {
82
78
  };
83
79
  };
84
80
 
85
- // src/utils/cloudflare/insert-errors-logs.ts
86
- var insertErrorLogs = async (context, error) => {
87
- const errors = getErrors(error);
88
- for (const err of errors) {
89
- console.log(printMessage(err));
90
- }
91
- return new HTMLRewriter().on("body", {
92
- element: (elem) => {
93
- elem.append(
94
- `<script>
95
- ${errors.map((err) => `console.error(\`${printMessage(err)}\`)`).join("\n")}
96
- </script>`,
97
- { html: true }
98
- );
99
- }
100
- }).transform(await fetch(context.request));
101
- };
102
-
103
81
  // src/handlers/reset-cache.ts
104
82
  var isResetCacheRequest = (request) => request.method === "POST" && new URL(request.url).pathname === "/__appwarden/reset-cache" && request.headers.get("content-type") === "application/json";
105
83
  var handleResetCache = async (keyName, provider, edgeCache, request) => {
@@ -129,7 +107,8 @@ var useAppwarden = (input) => async (context, next) => {
129
107
  const edgeCache = store.json(
130
108
  {
131
109
  serviceOrigin: requestUrl.origin,
132
- cache: await caches.open("appwarden:lock")
110
+ cache: await caches.open("appwarden:lock"),
111
+ debug: context.debug
133
112
  },
134
113
  keyName
135
114
  );
@@ -188,24 +167,35 @@ var useFetchOrigin = () => async (context, next) => {
188
167
  // src/runners/appwarden-on-cloudflare.ts
189
168
  var appwardenOnCloudflare = (inputFn) => async (request, env, ctx) => {
190
169
  ctx.passThroughOnException();
170
+ const requestUrl = new URL(request.url);
171
+ const parsedInput = ConfigFnInputSchema.safeParse(inputFn);
172
+ if (!parsedInput.success) {
173
+ const tempContext = {
174
+ request,
175
+ hostname: requestUrl.hostname,
176
+ response: new Response("Unhandled response"),
177
+ waitUntil: (fn) => ctx.waitUntil(fn),
178
+ debug: () => {
179
+ }
180
+ // no-op debug for error case
181
+ };
182
+ return insertErrorLogs(tempContext, parsedInput.error);
183
+ }
184
+ const input = parsedInput.data({ env, ctx, cf: {} });
191
185
  const context = {
192
186
  request,
193
- hostname: new URL(request.url).host,
187
+ hostname: requestUrl.hostname,
194
188
  response: new Response("Unhandled response"),
195
189
  // https://developers.cloudflare.com/workers/observability/errors/#illegal-invocation-errors
196
- waitUntil: (fn) => ctx.waitUntil(fn)
190
+ waitUntil: (fn) => ctx.waitUntil(fn),
191
+ debug: debug(input.debug ?? false)
197
192
  };
198
- const parsedInput = ConfigFnInputSchema.safeParse(inputFn);
199
- if (!parsedInput.success) {
200
- return insertErrorLogs(context, parsedInput.error);
201
- }
202
193
  try {
203
- const input = parsedInput.data({ env, ctx, cf: {} });
204
- const pipeline = [
205
- ...input.middleware.before,
206
- useAppwarden(input),
207
- useFetchOrigin()
208
- ];
194
+ const pipeline = [useAppwarden(input), useFetchOrigin()];
195
+ const cspConfig = input.multidomainConfig?.[requestUrl.hostname]?.contentSecurityPolicy;
196
+ if (cspConfig) {
197
+ pipeline.push(useContentSecurityPolicy(cspConfig));
198
+ }
209
199
  await usePipeline(...pipeline).execute(context);
210
200
  } catch (error) {
211
201
  if (error instanceof ZodError) {
package/index.d.ts CHANGED
@@ -1,4 +1,5 @@
1
- export { B as Bindings, C as CSPDirectivesSchema, a as CSPModeSchema, M as Middleware, u as useContentSecurityPolicy } from './use-content-security-policy-DjRTjIpm.js';
1
+ export { B as Bindings, C as CSPDirectivesSchema, a as CSPModeSchema } from './use-content-security-policy-DUYpyUPy.js';
2
+ export { M as Middleware, u as useContentSecurityPolicy } from './use-content-security-policy-Dvc-oObb.js';
2
3
  import { z } from 'zod';
3
4
 
4
5
  declare const LOCKDOWN_TEST_EXPIRY_MS: number;