@berachain/config 0.1.24-beta.6 → 0.1.24

package/dist/internal/header-sources.cjs

@@ -258,7 +258,8 @@ var modules = {
     img: ["https://*.posthog.com"],
     frame: ["https://*.posthog.com"],
     font: ["https://*.posthog.com"],
-    style: ["https://*.posthog.com"]
+    style: ["https://*.posthog.com"],
+    media: ["https://*.posthog.com"]
   },
   vercel: {
     // toolbar + live comments
@@ -307,18 +308,24 @@ function getContentSecurityPolicy({
   const styleSources = dedupeCspSources(
     collect("style").concat(_nullishCoalesce(args.styleSources, () => ( [])))
   );
+  const workerSources = dedupeCspSources(
+    collect("worker").concat(_nullishCoalesce(args.workerSources, () => ( [])))
+  );
+  const mediaSources = dedupeCspSources(
+    collect("media").concat(_nullishCoalesce(args.mediaSources, () => ( [])))
+  );
   let cspHeader = `
     default-src 'self' ${defaultSrc.join(" ")};
     base-uri 'self';
     frame-src 'self' ${frameSources.join(" ")};
     frame-ancestors 'self' https://*.posthog.com;
-    script-src 'self' 'sha256-k2HGvaYkGyYZxOwKGxgE1mr06tZEDcEXNZ5mdcldK0o=' 'nonce-${nonce}' https://*.posthog.com 'strict-dynamic' ${isDevelopment ? "'unsafe-eval'" : ""};
-    worker-src 'self' blob: data:;
+    script-src 'self' 'sha256-k2HGvaYkGyYZxOwKGxgE1mr06tZEDcEXNZ5mdcldK0o=' 'nonce-${nonce}' 'strict-dynamic' ${isDevelopment ? "'unsafe-eval'" : ""};
+    worker-src 'self' blob: data: ${workerSources.join(" ")};
     font-src 'self' ${fontSources.join(" ")};
     style-src 'self' ${styleSources.join(" ")} 'unsafe-inline';
     img-src 'self' data: ${pictureSources.join(" ")};
     connect-src 'self' ${connectionSources.join(" ")};
-    media-src https://*.posthog.com;
+    media-src 'self' ${mediaSources.join(" ")};
   `;
   if (cspReporting) {
     cspHeader += `
@@ -342,7 +349,7 @@ var staticPictureSources = [
 });
 function cspMiddleware({
   response,
-  modules: modules2
+  csp
 }) {
   const sentryCspEndpoint = _optionalChain([getSentryKeys, 'call', _5 => _5(), 'optionalAccess', _6 => _6.cspEndpoint]);
   const nonce = Buffer.from(crypto.randomUUID()).toString("base64");
@@ -351,10 +358,10 @@ function cspMiddleware({
     {
       key: "Content-Security-Policy",
       value: getContentSecurityPolicy({
+        ...csp,
         isDevelopment,
         cspReporting: _optionalChain([sentryCspEndpoint, 'optionalAccess', _7 => _7.toString, 'call', _8 => _8()]),
-        nonce,
-        modules: modules2
+        nonce
       })
     },
     {

package/dist/internal/header-sources.d.ts

@@ -1,6 +1,8 @@
 import type { NextRequest, NextResponse } from "next/server";
 /**
- * CSP allowlists contributed by one integration, keyed by directive.
+ * CSP allowlists contributed by one integration, keyed by directive. Each
+ * directive's fixed policy tokens (`'self'`, `data:`, nonces, …) live in the
+ * template; these are the integration-specific hosts appended to them.
  */
 interface HeaderSources {
     /** connect-src */
@@ -13,6 +15,10 @@ interface HeaderSources {
     font?: string[];
     /** style-src */
     style?: string[];
+    /** worker-src */
+    worker?: string[];
+    /** media-src */
+    media?: string[];
 }
 declare const modules: {
     readonly berachain: {
@@ -84,6 +90,7 @@ declare const modules: {
         readonly frame: ["https://*.posthog.com"];
         readonly font: ["https://*.posthog.com"];
         readonly style: ["https://*.posthog.com"];
+        readonly media: ["https://*.posthog.com"];
     };
     readonly vercel: {
         readonly connect: ["https://vercel.live", "wss://ws-us3.pusher.com"];
@@ -95,14 +102,11 @@ declare const modules: {
 };
 export type HeaderSourceModule = keyof typeof modules;
 /**
- * CSP sources grouped by the integration that needs them. All modules are
- * enabled by default; consumers opt out per module via `modules` on
- * {@link getContentSecurityPolicy} / {@link cspMiddleware}.
+ * Per-request CSP customization a consumer can pass to
+ * {@link getContentSecurityPolicy} / {@link cspMiddleware}: toggle whole
+ * integration modules off, and/or append extra allowlist entries per directive.
  */
-export declare const headerSourceModules: Record<HeaderSourceModule, HeaderSources>;
-export declare function getContentSecurityPolicy({ isDevelopment, nonce, cspReporting, modules: enabledModules, ...args }: {
-    isDevelopment: boolean;
-    nonce: string;
+export interface CspOptions {
     /** per-module toggle; all modules default to `true`, set `false` to exclude one from every directive */
     modules?: Partial<Record<HeaderSourceModule, boolean>>;
     frameSources?: string[];
@@ -110,17 +114,29 @@ export declare function getContentSecurityPolicy({ isDevelopment, nonce, cspRepo
     pictureSources?: string[];
     connectionSources?: string[];
     styleSources?: string[];
+    workerSources?: string[];
+    mediaSources?: string[];
+}
+/**
+ * CSP sources grouped by the integration that needs them. All modules are
+ * enabled by default; consumers opt out per module via `modules` on
+ * {@link getContentSecurityPolicy} / {@link cspMiddleware}.
+ */
+export declare const headerSourceModules: Record<HeaderSourceModule, HeaderSources>;
+export declare function getContentSecurityPolicy({ isDevelopment, nonce, cspReporting, modules: enabledModules, ...args }: CspOptions & {
+    isDevelopment: boolean;
+    nonce: string;
     cspReporting?: string;
 }): string;
 /**
  * Static picture sources that are used in static-monobera.
  */
 export declare const staticPictureSources: string[];
-export declare function cspMiddleware({ response, modules, }: {
+export declare function cspMiddleware({ response, csp, }: {
     request: NextRequest;
     response: NextResponse;
-    /** per-module toggle; all modules default to `true`, set `false` to exclude one from the CSP */
-    modules?: Partial<Record<HeaderSourceModule, boolean>>;
+    /** per-request CSP customization — toggle modules off and/or append extra sources per directive */
+    csp?: CspOptions;
 }): NextResponse<unknown>;
 export {};
 //# sourceMappingURL=header-sources.d.ts.map

package/dist/internal/header-sources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"header-sources.d.ts","sourceRoot":"","sources":["../../src/internal/header-sources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAgB7D;;GAEG;AACH,UAAU,aAAa;IACrB,kBAAkB;IAClB,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpC,cAAc;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,QAAA,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0JqC,CAAC;AAEnD,MAAM,MAAM,kBAAkB,GAAG,MAAM,OAAO,OAAO,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,EAAE,aAAa,CACjE,CAAC;AAEV,wBAAgB,wBAAwB,CAAC,EACvC,aAAa,EACb,KAAK,EACL,YAAY,EACZ,OAAO,EAAE,cAAmB,EAC5B,GAAG,IAAI,EACR,EAAE;IACD,aAAa,EAAE,OAAO,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,wGAAwG;IACxG,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;IACvD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,MAAM,CAwET;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,EAWvC,CAAC;AAEH,wBAAgB,aAAa,CAAC,EAC5B,QAAQ,EACR,OAAO,GACR,EAAE;IACD,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,YAAY,CAAC;IACvB,gGAAgG;IAChG,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;CACxD,yBA8CA"}
+{"version":3,"file":"header-sources.d.ts","sourceRoot":"","sources":["../../src/internal/header-sources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAgB7D;;;;GAIG;AACH,UAAU,aAAa;IACrB,kBAAkB;IAClB,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpC,cAAc;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,iBAAiB;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,QAAA,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2JqC,CAAC;AAEnD,MAAM,MAAM,kBAAkB,GAAG,MAAM,OAAO,OAAO,CAAC;AAEtD;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,wGAAwG;IACxG,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;IACvD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,EAAE,aAAa,CACjE,CAAC;AAEV,wBAAgB,wBAAwB,CAAC,EACvC,aAAa,EACb,KAAK,EACL,YAAY,EACZ,OAAO,EAAE,cAAmB,EAC5B,GAAG,IAAI,EACR,EAAE,UAAU,GAAG;IACd,aAAa,EAAE,OAAO,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,MAAM,CA8ET;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,EAWvC,CAAC;AAEH,wBAAgB,aAAa,CAAC,EAC5B,QAAQ,EACR,GAAG,GACJ,EAAE;IACD,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,YAAY,CAAC;IACvB,mGAAmG;IACnG,GAAG,CAAC,EAAE,UAAU,CAAC;CAClB,yBA8CA"}

package/dist/internal/header-sources.mjs

@@ -258,7 +258,8 @@ var modules = {
     img: ["https://*.posthog.com"],
     frame: ["https://*.posthog.com"],
     font: ["https://*.posthog.com"],
-    style: ["https://*.posthog.com"]
+    style: ["https://*.posthog.com"],
+    media: ["https://*.posthog.com"]
   },
   vercel: {
     // toolbar + live comments
@@ -307,18 +308,24 @@ function getContentSecurityPolicy({
   const styleSources = dedupeCspSources(
     collect("style").concat(args.styleSources ?? [])
   );
+  const workerSources = dedupeCspSources(
+    collect("worker").concat(args.workerSources ?? [])
+  );
+  const mediaSources = dedupeCspSources(
+    collect("media").concat(args.mediaSources ?? [])
+  );
   let cspHeader = `
     default-src 'self' ${defaultSrc.join(" ")};
     base-uri 'self';
     frame-src 'self' ${frameSources.join(" ")};
     frame-ancestors 'self' https://*.posthog.com;
-    script-src 'self' 'sha256-k2HGvaYkGyYZxOwKGxgE1mr06tZEDcEXNZ5mdcldK0o=' 'nonce-${nonce}' https://*.posthog.com 'strict-dynamic' ${isDevelopment ? "'unsafe-eval'" : ""};
-    worker-src 'self' blob: data:;
+    script-src 'self' 'sha256-k2HGvaYkGyYZxOwKGxgE1mr06tZEDcEXNZ5mdcldK0o=' 'nonce-${nonce}' 'strict-dynamic' ${isDevelopment ? "'unsafe-eval'" : ""};
+    worker-src 'self' blob: data: ${workerSources.join(" ")};
     font-src 'self' ${fontSources.join(" ")};
     style-src 'self' ${styleSources.join(" ")} 'unsafe-inline';
     img-src 'self' data: ${pictureSources.join(" ")};
     connect-src 'self' ${connectionSources.join(" ")};
-    media-src https://*.posthog.com;
+    media-src 'self' ${mediaSources.join(" ")};
   `;
   if (cspReporting) {
     cspHeader += `
@@ -342,7 +349,7 @@ var staticPictureSources = [
 });
 function cspMiddleware({
   response,
-  modules: modules2
+  csp
 }) {
   const sentryCspEndpoint = getSentryKeys()?.cspEndpoint;
   const nonce = Buffer.from(crypto.randomUUID()).toString("base64");
@@ -351,10 +358,10 @@ function cspMiddleware({
     {
       key: "Content-Security-Policy",
       value: getContentSecurityPolicy({
+        ...csp,
         isDevelopment,
         cspReporting: sentryCspEndpoint?.toString(),
-        nonce,
-        modules: modules2
+        nonce
       })
     },
     {

package/dist/internal/nextjs/index.cjs

@@ -1,8 +1,5 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
-var _chunkZTYHPIUWcjs = require('../../chunk-ZTYHPIUW.cjs');
-
-
 var _chunkOA5M6XYFcjs = require('../../chunk-OA5M6XYF.cjs');
 
 
@@ -12,6 +9,9 @@ require('../../chunk-ZJEZCW5Z.cjs');
 require('../../chunk-AU3LYJAB.cjs');
 require('../../chunk-EYYJ2UZT.cjs');
 
+
+var _chunkZTYHPIUWcjs = require('../../chunk-ZTYHPIUW.cjs');
+
 // src/internal/nextjs/index.ts
 var _dotenv = require('dotenv'); var _dotenv2 = _interopRequireDefault(_dotenv);
 _dotenv2.default.config({ path: ["../../.env.local", "../../.env"] });

package/dist/internal/nextjs/index.mjs

@@ -1,6 +1,3 @@
-import {
-  withSentryConfig
-} from "../../chunk-XA5DMTFW.mjs";
 import {
   IMAGE_REMOTE_PATTERNS
 } from "../../chunk-4WAGOEXT.mjs";
@@ -11,6 +8,9 @@ import "../../chunk-KPZI7IXR.mjs";
 import "../../chunk-5SH7AT43.mjs";
 import "../../chunk-VWRKCGMU.mjs";
 import "../../chunk-KJXYSGNH.mjs";
+import {
+  withSentryConfig
+} from "../../chunk-XA5DMTFW.mjs";
 
 // src/internal/nextjs/index.ts
 import dotenv from "dotenv";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@berachain/config",
-  "version": "0.1.24-beta.6",
+  "version": "0.1.24",
   "type": "module",
   "files": [
     "dist",