@berachain/config 0.1.22 → 0.1.24-beta.0

package/dist/internal/flags/beraEdgeConfigAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"beraEdgeConfigAdapter.d.ts","sourceRoot":"","sources":["../../../src/internal/flags/beraEdgeConfigAdapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAGrC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAG1E;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,EAAE,OAAO,EAAE,GAAE;IAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA;CAEzD,GACA,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAapC"}

package/dist/internal/flags/flags.d.ts

@@ -0,0 +1,29 @@
+export declare const isGovernanceEnabled: import("flags/next").Flag<boolean, any>;
+export declare const hideStakeForSingleHolderVaults: import("flags/next").Flag<boolean, any>;
+export declare const enableSimulateCalls: import("flags/next").Flag<boolean, any>;
+export declare const enableBexFundsRecovery: import("flags/next").Flag<boolean, any>;
+export declare const isRefundInExplorer: import("flags/next").Flag<boolean, any>;
+export declare const isAirdropLive: import("flags/next").Flag<boolean, any>;
+export declare const isEmbeddedWalletsEnabled: import("flags/next").Flag<boolean, any>;
+export declare const sponsorGas: import("flags/next").Flag<boolean, any>;
+/**
+ * If false, EIP-5792 will be disabled.
+ * This is useful for testing purposes.
+ */
+export declare const enableEip5792: import("flags/next").Flag<boolean, any>;
+export declare const proxyAggregatorsThroughVercel: import("flags/next").Flag<boolean, any>;
+export declare const isDefaultStakingPoolEnabled: import("flags/next").Flag<boolean, any>;
+export declare const isBendVaultDataHourly: import("flags/next").Flag<boolean, any>;
+export declare const showBendVaultCap: import("flags/next").Flag<boolean, any>;
+export declare const isHoneyPythWrapperEnabled: import("flags/next").Flag<boolean, any>;
+export declare const isBendNew: import("flags/next").Flag<boolean, any>;
+export declare const isPoolsMerged: import("flags/next").Flag<boolean, any>;
+export declare const isBendLoopingEnabled: import("flags/next").Flag<boolean, any>;
+export declare const isMultiChainZapBendEnabled: import("flags/next").Flag<boolean, any>;
+export declare const isZapStakeBeraEnabled: import("flags/next").Flag<boolean, any>;
+export declare const isBgtPolRewardToken: import("flags/next").Flag<boolean, any>;
+export declare const mockValidatorOperator: import("flags/next").Flag<boolean, any>;
+export declare const mockValidatorRewardAllocator: import("flags/next").Flag<boolean, any>;
+export declare const mockRewardDurationManager: import("flags/next").Flag<boolean, any>;
+export declare const mockIncentiveManager: import("flags/next").Flag<boolean, any>;
+//# sourceMappingURL=flags.d.ts.map

package/dist/internal/flags/flags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flags.d.ts","sourceRoot":"","sources":["../../../src/internal/flags/flags.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mBAAmB,yCAK9B,CAAC;AAEH,eAAO,MAAM,8BAA8B,yCAKzC,CAAC;AAEH,eAAO,MAAM,mBAAmB,yCAM9B,CAAC;AAEH,eAAO,MAAM,sBAAsB,yCAKjC,CAAC;AAEH,eAAO,MAAM,kBAAkB,yCAK7B,CAAC;AAEH,eAAO,MAAM,aAAa,yCAKxB,CAAC;AAEH,eAAO,MAAM,wBAAwB,yCAKnC,CAAC;AAEH,eAAO,MAAM,UAAU,yCAKrB,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,aAAa,yCAMxB,CAAC;AAEH,eAAO,MAAM,6BAA6B,yCAMxC,CAAC;AAEH,eAAO,MAAM,2BAA2B,yCAKtC,CAAC;AAEH,eAAO,MAAM,qBAAqB,yCAKhC,CAAC;AAEH,eAAO,MAAM,gBAAgB,yCAM3B,CAAC;AAEH,eAAO,MAAM,yBAAyB,yCAKpC,CAAC;AAEH,eAAO,MAAM,SAAS,yCAKpB,CAAC;AAEH,eAAO,MAAM,aAAa,yCAKxB,CAAC;AAEH,eAAO,MAAM,oBAAoB,yCAK/B,CAAC;AAEH,eAAO,MAAM,0BAA0B,yCAKrC,CAAC;AAEH,eAAO,MAAM,qBAAqB,yCAKhC,CAAC;AAEH,eAAO,MAAM,mBAAmB,yCAK9B,CAAC;AASH,eAAO,MAAM,qBAAqB,yCAKhC,CAAC;AAEH,eAAO,MAAM,4BAA4B,yCAKvC,CAAC;AAEH,eAAO,MAAM,yBAAyB,yCAKpC,CAAC;AAEH,eAAO,MAAM,oBAAoB,yCAK/B,CAAC"}

package/dist/internal/flags/index.d.ts

@@ -1,60 +1,2 @@
-import * as flags_next from 'flags/next';
-
-declare const isGovernanceEnabled: flags_next.Flag<boolean, any>;
-declare const hideStakeForSingleHolderVaults: flags_next.Flag<boolean, any>;
-declare const enableSimulateCalls: flags_next.Flag<boolean, any>;
-declare const enableBexFundsRecovery: flags_next.Flag<boolean, any>;
-declare const isRefundInExplorer: flags_next.Flag<boolean, any>;
-declare const isAirdropLive: flags_next.Flag<boolean, any>;
-declare const isEmbeddedWalletsEnabled: flags_next.Flag<boolean, any>;
-declare const sponsorGas: flags_next.Flag<boolean, any>;
-/**
- * If false, EIP-5792 will be disabled.
- * This is useful for testing purposes.
- */
-declare const enableEip5792: flags_next.Flag<boolean, any>;
-declare const proxyAggregatorsThroughVercel: flags_next.Flag<boolean, any>;
-declare const isDefaultStakingPoolEnabled: flags_next.Flag<boolean, any>;
-declare const isBendVaultDataHourly: flags_next.Flag<boolean, any>;
-declare const showBendVaultCap: flags_next.Flag<boolean, any>;
-declare const isHoneyPythWrapperEnabled: flags_next.Flag<boolean, any>;
-declare const isBendNew: flags_next.Flag<boolean, any>;
-declare const isPoolsMerged: flags_next.Flag<boolean, any>;
-declare const isBendLoopingEnabled: flags_next.Flag<boolean, any>;
-declare const isMultiChainZapBendEnabled: flags_next.Flag<boolean, any>;
-declare const isZapStakeBeraEnabled: flags_next.Flag<boolean, any>;
-declare const isBgtPolRewardToken: flags_next.Flag<boolean, any>;
-declare const mockValidatorOperator: flags_next.Flag<boolean, any>;
-declare const mockValidatorRewardAllocator: flags_next.Flag<boolean, any>;
-declare const mockRewardDurationManager: flags_next.Flag<boolean, any>;
-declare const mockIncentiveManager: flags_next.Flag<boolean, any>;
-
-declare const flags_enableBexFundsRecovery: typeof enableBexFundsRecovery;
-declare const flags_enableEip5792: typeof enableEip5792;
-declare const flags_enableSimulateCalls: typeof enableSimulateCalls;
-declare const flags_hideStakeForSingleHolderVaults: typeof hideStakeForSingleHolderVaults;
-declare const flags_isAirdropLive: typeof isAirdropLive;
-declare const flags_isBendLoopingEnabled: typeof isBendLoopingEnabled;
-declare const flags_isBendNew: typeof isBendNew;
-declare const flags_isBendVaultDataHourly: typeof isBendVaultDataHourly;
-declare const flags_isBgtPolRewardToken: typeof isBgtPolRewardToken;
-declare const flags_isDefaultStakingPoolEnabled: typeof isDefaultStakingPoolEnabled;
-declare const flags_isEmbeddedWalletsEnabled: typeof isEmbeddedWalletsEnabled;
-declare const flags_isGovernanceEnabled: typeof isGovernanceEnabled;
-declare const flags_isHoneyPythWrapperEnabled: typeof isHoneyPythWrapperEnabled;
-declare const flags_isMultiChainZapBendEnabled: typeof isMultiChainZapBendEnabled;
-declare const flags_isPoolsMerged: typeof isPoolsMerged;
-declare const flags_isRefundInExplorer: typeof isRefundInExplorer;
-declare const flags_isZapStakeBeraEnabled: typeof isZapStakeBeraEnabled;
-declare const flags_mockIncentiveManager: typeof mockIncentiveManager;
-declare const flags_mockRewardDurationManager: typeof mockRewardDurationManager;
-declare const flags_mockValidatorOperator: typeof mockValidatorOperator;
-declare const flags_mockValidatorRewardAllocator: typeof mockValidatorRewardAllocator;
-declare const flags_proxyAggregatorsThroughVercel: typeof proxyAggregatorsThroughVercel;
-declare const flags_showBendVaultCap: typeof showBendVaultCap;
-declare const flags_sponsorGas: typeof sponsorGas;
-declare namespace flags {
-  export { flags_enableBexFundsRecovery as enableBexFundsRecovery, flags_enableEip5792 as enableEip5792, flags_enableSimulateCalls as enableSimulateCalls, flags_hideStakeForSingleHolderVaults as hideStakeForSingleHolderVaults, flags_isAirdropLive as isAirdropLive, flags_isBendLoopingEnabled as isBendLoopingEnabled, flags_isBendNew as isBendNew, flags_isBendVaultDataHourly as isBendVaultDataHourly, flags_isBgtPolRewardToken as isBgtPolRewardToken, flags_isDefaultStakingPoolEnabled as isDefaultStakingPoolEnabled, flags_isEmbeddedWalletsEnabled as isEmbeddedWalletsEnabled, flags_isGovernanceEnabled as isGovernanceEnabled, flags_isHoneyPythWrapperEnabled as isHoneyPythWrapperEnabled, flags_isMultiChainZapBendEnabled as isMultiChainZapBendEnabled, flags_isPoolsMerged as isPoolsMerged, flags_isRefundInExplorer as isRefundInExplorer, flags_isZapStakeBeraEnabled as isZapStakeBeraEnabled, flags_mockIncentiveManager as mockIncentiveManager, flags_mockRewardDurationManager as mockRewardDurationManager, flags_mockValidatorOperator as mockValidatorOperator, flags_mockValidatorRewardAllocator as mockValidatorRewardAllocator, flags_proxyAggregatorsThroughVercel as proxyAggregatorsThroughVercel, flags_showBendVaultCap as showBendVaultCap, flags_sponsorGas as sponsorGas };
-}
-
-export { flags };
+export * as flags from "./flags";
+//# sourceMappingURL=index.d.ts.map

package/dist/internal/flags/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/internal/flags/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC"}

package/dist/internal/header-sources.cjs

@@ -208,7 +208,7 @@ function getContentSecurityPolicy({
     base-uri 'self';
     frame-src 'self' ${frameSources.join(" ")};
     frame-ancestors 'self' https://*.posthog.com;
-    script-src 'self' 'sha256-k2HGvaYkGyYZxOwKGxgE1mr06tZEDcEXNZ5mdcldK0o=' 'nonce-${nonce}' https://*.posthog.com 'strict-dynamic' ${isDevelopment ? "'unsafe-eval'" : ""};
+    script-src 'self' 'sha256-k2HGvaYkGyYZxOwKGxgE1mr06tZEDcEXNZ5mdcldK0o=' ${nonce ? `'nonce-${nonce}'` : ""} https://*.posthog.com 'strict-dynamic' ${isDevelopment ? "'unsafe-eval'" : ""};
     worker-src 'self' blob: data:;
     font-src 'self' ${fontSources.join(" ")};
     style-src 'self' ${styleSources.join(" ")} 'unsafe-inline';
@@ -237,10 +237,11 @@ var staticPictureSources = [
   return true;
 });
 function cspMiddleware({
+  useDynamicCsp = true,
   response
 }) {
   const sentryCspEndpoint = _optionalChain([getSentryKeys, 'call', _3 => _3(), 'optionalAccess', _4 => _4.cspEndpoint]);
-  const nonce = Buffer.from(crypto.randomUUID()).toString("base64");
+  const nonce = useDynamicCsp ? Buffer.from(crypto.randomUUID()).toString("base64") : void 0;
   const isDevelopment = process.env.NODE_ENV === "development";
   const headers = [
     {
@@ -259,10 +260,7 @@ function cspMiddleware({
       key: "X-Content-Type-Options",
       value: "nosniff"
     },
-    {
-      key: "X-Nonce",
-      value: nonce
-    }
+    ...nonce ? [{ key: "X-Nonce", value: nonce }] : []
   ];
   if (sentryCspEndpoint) {
     headers.push({

package/dist/internal/header-sources.d.ts

@@ -1,8 +1,14 @@
-import { NextRequest, NextResponse } from 'next/server';
-
-declare function getContentSecurityPolicy({ isDevelopment, nonce, cspReporting, ...args }: {
+import type { NextRequest, NextResponse } from "next/server";
+/** Builds the Content-Security-Policy header value. */
+export declare function getContentSecurityPolicy({ isDevelopment, nonce, cspReporting, ...args }: {
     isDevelopment: boolean;
-    nonce: string;
+    /**
+     * Per-request nonce for `script-src`. Required for dynamic CSP; omit it for
+     * static CSP (no per-request header), in which case the `'nonce-...'` token
+     * is dropped and scripts are gated by `'strict-dynamic'` plus the inlined
+     * sha256 hash instead.
+     */
+    nonce?: string;
     frameSources?: string[];
     fontSources?: string[];
     pictureSources?: string[];
@@ -13,10 +19,10 @@ declare function getContentSecurityPolicy({ isDevelopment, nonce, cspReporting,
 /**
  * Static picture sources that are used in static-monobera.
  */
-declare const staticPictureSources: string[];
-declare function cspMiddleware({ response, }: {
+export declare const staticPictureSources: string[];
+export declare function cspMiddleware({ useDynamicCsp, response, }: {
+    useDynamicCsp?: boolean;
     request: NextRequest;
     response: NextResponse;
 }): NextResponse<unknown>;
-
-export { cspMiddleware, getContentSecurityPolicy, staticPictureSources };
+//# sourceMappingURL=header-sources.d.ts.map

package/dist/internal/header-sources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"header-sources.d.ts","sourceRoot":"","sources":["../../src/internal/header-sources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAa7D,uDAAuD;AACvD,wBAAgB,wBAAwB,CAAC,EACvC,aAAa,EACb,KAAK,EACL,YAAY,EACZ,GAAG,IAAI,EACR,EAAE;IACD,aAAa,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,MAAM,CA2LT;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,EAWvC,CAAC;AAEH,wBAAgB,aAAa,CAAC,EAC5B,aAAoB,EACpB,QAAQ,GACT,EAAE;IACD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,YAAY,CAAC;CACxB,yBA4CA"}

package/dist/internal/header-sources.mjs

@@ -208,7 +208,7 @@ function getContentSecurityPolicy({
     base-uri 'self';
     frame-src 'self' ${frameSources.join(" ")};
     frame-ancestors 'self' https://*.posthog.com;
-    script-src 'self' 'sha256-k2HGvaYkGyYZxOwKGxgE1mr06tZEDcEXNZ5mdcldK0o=' 'nonce-${nonce}' https://*.posthog.com 'strict-dynamic' ${isDevelopment ? "'unsafe-eval'" : ""};
+    script-src 'self' 'sha256-k2HGvaYkGyYZxOwKGxgE1mr06tZEDcEXNZ5mdcldK0o=' ${nonce ? `'nonce-${nonce}'` : ""} https://*.posthog.com 'strict-dynamic' ${isDevelopment ? "'unsafe-eval'" : ""};
     worker-src 'self' blob: data:;
     font-src 'self' ${fontSources.join(" ")};
     style-src 'self' ${styleSources.join(" ")} 'unsafe-inline';
@@ -237,10 +237,11 @@ var staticPictureSources = [
   return true;
 });
 function cspMiddleware({
+  useDynamicCsp = true,
   response
 }) {
   const sentryCspEndpoint = getSentryKeys()?.cspEndpoint;
-  const nonce = Buffer.from(crypto.randomUUID()).toString("base64");
+  const nonce = useDynamicCsp ? Buffer.from(crypto.randomUUID()).toString("base64") : void 0;
   const isDevelopment = process.env.NODE_ENV === "development";
   const headers = [
     {
@@ -259,10 +260,7 @@ function cspMiddleware({
       key: "X-Content-Type-Options",
       value: "nosniff"
     },
-    {
-      key: "X-Nonce",
-      value: nonce
-    }
+    ...nonce ? [{ key: "X-Nonce", value: nonce }] : []
   ];
   if (sentryCspEndpoint) {
     headers.push({