@berachain/config 0.2.7 → 0.2.8-beta.1

package/dist/internal/header-sources.cjs

@@ -1,16 +1,412 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }var _chunkHLFO7V5Icjs = require('../chunk-HLFO7V5I.cjs');var _chunkDUO7UEQDcjs = require('../chunk-DUO7UEQD.cjs');var _chunkX5MTSC5Tcjs = require('../chunk-X5MTSC5T.cjs');require('../chunk-MW34QRNX.cjs');require('../chunk-HJ25KNL4.cjs');var _chunk6CZTBBJTcjs = require('../chunk-6CZTBBJT.cjs');require('../chunk-2OLL4MUY.cjs');function _(t){let s=t.indexOf("://");if(s===-1)return;let e=t.slice(0,s).toLowerCase(),r=t.slice(s+3),n=r.indexOf("/"),c=(n===-1?r:r.slice(0,n)).toLowerCase(),o=n===-1?"/":r.slice(n);if(c)return{raw:t,scheme:e,host:c,path:o}}function M(t,s){if(!t.startsWith("*."))return t===s;let e=t.slice(1);return s.endsWith(e)&&s.length>e.length}function C(t,s){return t.scheme!==s.scheme||!M(t.host,s.host)?!1:t.path.endsWith("/")?s.path.startsWith(t.path):s.path===t.path}function a(t){let s=t.map(e=>({raw:e,parsed:_(e)}));return s.filter(({parsed:e},r)=>e?!s.some(({parsed:n},c)=>r===c||!n||!C(n,e)?!1:C(e,n)?c<r:!0):!0).map(({raw:e})=>e)}function $({dsn:t=process.env.NEXT_PUBLIC_SENTRY_DSN}={}){if(!t)return;let s=/^(?:https:\/\/)([A-z0-9]{32})(?::{0,1})([A-z0-9]*)(?:@)(o[a-z0-9]+)(?:\.ingest\.us\.sentry\.io)\/([0-9]{16})/i,e=_optionalChain([t, 'optionalAccess', _2 => _2.match, 'call', _3 => _3(s)]);if(!e)return;let[,r,n,c,o]=e,p=new URL(`https://${c}.ingest.us.sentry.io/api/${o}/security/?sentry_key=${r}`);return p.searchParams.set("sentry_key",r),p.searchParams.set("sentry_env",_chunkHLFO7V5Icjs.a),p.searchParams.set("sentry_release",_chunkHLFO7V5Icjs.c),{dsn:e[0],projectId:o,deprecatedSecret:n||void 0,cspEndpoint:p,org:c,publicKey:e[1]}}var u=_chunkX5MTSC5Tcjs.a[_chunk6CZTBBJTcjs.a],z={berachain:{connect:["https://*.berachain.com/",_chunk6CZTBBJTcjs.b?null:"https://*.berachain-staging.com/","https://raw.githubusercontent.com/berachain/metadata/",`${_chunk6CZTBBJTcjs.g}/`,"https://*.quiknode.pro",u.pol.bribeBoostApi,_chunkDUO7UEQDcjs.a.call(void 0, u.beep),_chunkDUO7UEQDcjs.a.call(void 0, u.api),_chunk6CZTBBJTcjs.k,_chunk6CZTBBJTcjs.j,_chunk6CZTBBJTcjs.l,"https://api.routescan.io/v2/network/"],img:[`${_chunk6CZTBBJTcjs.g}/`,"https://raw.githubusercontent.com/berachain/metadata/"]},beranames:{connect:["https://beranames-assets-berachain.s3.eu-central-003.backblazeb2.com/"],img:["https://beranames-assets-berachain.s3.eu-central-003.backblazeb2.com/"]},swapAggregators:{connect:[u.bex.aggregatorsProxyUrl?`${u.bex.aggregatorsProxyUrl}/`:null,"https://open-api.openocean.finance/","https://api.haiku.trade/","https://api.fly.trade/","https://api.enso.finance/","https://api.enso.build/","https://api.relay.link/"]},walletConnect:{connect:["wss://relay.walletconnect.com/","wss://relay.walletconnect.org/","https://verify.walletconnect.org/v3/public-key"],frame:["https://verify.walletconnect.com/","https://verify.walletconnect.org/"]},coinbaseWallet:{connect:["wss://www.walletlink.org/rpc","https://www.walletlink.org/events","https://chain-proxy.wallet.coinbase.com/"]},metamask:{connect:["wss://metamask-sdk.api.cx.metamask.io/socket.io/","https://metamask-sdk.api.cx.metamask.io"]},thirdweb:{connect:["https://*.thirdweb.com/"],frame:["https://embedded-wallet.thirdweb.com/"]},dynamic:{connect:["https://app.dynamicauth.com/api"]},binance:{connect:["https://wallet.binance.com/tonbridge/"]},tron:{connect:["https://api.trongrid.io/"]},layerZero:{connect:["https://*.layerzero-scan.com/","https://scan.layerzero-api.com/"]},pelagus:{img:["https://pelaguswallet.io/docs/img"]},externalRpcs:{connect:["https://api.avax.network/ext/bc/C/rpc","https://polygon-rpc.com","https://mainnet.optimism.io/","https://arb1.arbitrum.io/rpc","https://mainnet.base.org/","https://eth.merkle.io"]},tokenIcons:{img:["https://assets.coingecko.com/coins/images/","https://coin-images.coingecko.com/coins/images/","https://icons.llama.fi/","https://icons.llamao.fi/","https://static.debank.com/","https://raw.githubusercontent.com/trustwallet/assets/"]},bend:{img:["https://cdn.morpho.org/"]},pyth:{connect:["https://hermes.pyth.network/v2/"]},fonts:{font:["https://cdn.jsdelivr.net/npm/@fontsource/","https://fonts.gstatic.com","https://use.typekit.net/"]},sentry:{connect:["https://*.sentry.io/"]},posthog:{connect:["https://*.posthog.com"],img:["https://*.posthog.com"],frame:["https://*.posthog.com"],font:["https://*.posthog.com"],style:["https://*.posthog.com"],media:["https://*.posthog.com"]},vercel:{connect:["https://vercel.live","wss://ws-us3.pusher.com"],img:["https://vercel.live","https://vercel.com"],frame:["https://vercel.live/"],font:["https://vercel.live","https://assets.vercel.com"],style:["https://vercel.live"]}},D= exports.headerSourceModules =z;function B({isDevelopment:t,cspReporting:s,dynamicScriptCsp:e={},modules:r={},...n}){let c=[];function o(l){return Object.entries(D).filter(([i])=>r[i]!==!1).flatMap(([,i])=>_nullishCoalesce(i[l], () => ([]))).filter(i=>!!_optionalChain([i, 'optionalAccess', _4 => _4.trim, 'call', _5 => _5()]))}let p=a(o("connect").concat(_nullishCoalesce(n.connectionSources, () => ([]))).filter(l=>{let i=_chunkDUO7UEQDcjs.a.call(void 0, l);return!(!i||i.trim()===""||i.startsWith(_chunk6CZTBBJTcjs.h)&&i!==_chunk6CZTBBJTcjs.h)})),R=a(o("img").concat(_nullishCoalesce(n.pictureSources, () => ([])))),P=a(o("frame").concat(_nullishCoalesce(n.frameSources, () => ([])))),E=a(o("font").concat(_nullishCoalesce(n.fontSources, () => ([])))),j=a(o("style").concat(_nullishCoalesce(n.styleSources, () => ([])))),N=a(o("worker").concat(_nullishCoalesce(n.workerSources, () => ([])))),U=a(o("media").concat(_nullishCoalesce(n.mediaSources, () => ([])))),O=e==="disabled"?a(o("script").concat(_nullishCoalesce(n.scriptSources, () => ([])))):a([e.nonce?`'nonce-${e.nonce}'`:"","'strict-dynamic'","'sha256-k2HGvaYkGyYZxOwKGxgE1mr06tZEDcEXNZ5mdcldK0o='",..._nullishCoalesce(e.sha, () => ([]))].filter(l=>l!=="")),f=`
-    default-src 'self' ${c.join(" ")};
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+
+var _chunkB2BTOQVPcjs = require('../chunk-B2BTOQVP.cjs');
+
+
+var _chunkYT7WZDGIcjs = require('../chunk-YT7WZDGI.cjs');
+
+
+var _chunkFEDP4MQEcjs = require('../chunk-FEDP4MQE.cjs');
+require('../chunk-CBAAKY4N.cjs');
+require('../chunk-DEP7BIPJ.cjs');
+
+
+
+
+
+
+
+
+var _chunkAU3LYJABcjs = require('../chunk-AU3LYJAB.cjs');
+require('../chunk-EYYJ2UZT.cjs');
+
+// src/internal/dedupeCspSources.ts
+function parseSource(raw) {
+  const schemeSplit = raw.indexOf("://");
+  if (schemeSplit === -1) {
+    return void 0;
+  }
+  const scheme = raw.slice(0, schemeSplit).toLowerCase();
+  const rest = raw.slice(schemeSplit + 3);
+  const pathStart = rest.indexOf("/");
+  const host = (pathStart === -1 ? rest : rest.slice(0, pathStart)).toLowerCase();
+  const path = pathStart === -1 ? "/" : rest.slice(pathStart);
+  if (!host) {
+    return void 0;
+  }
+  return { raw, scheme, host, path };
+}
+function hostMatches(patternHost, targetHost) {
+  if (!patternHost.startsWith("*.")) {
+    return patternHost === targetHost;
+  }
+  const suffix = patternHost.slice(1);
+  return targetHost.endsWith(suffix) && targetHost.length > suffix.length;
+}
+function covers(pattern, target) {
+  if (pattern.scheme !== target.scheme) {
+    return false;
+  }
+  if (!hostMatches(pattern.host, target.host)) {
+    return false;
+  }
+  if (pattern.path.endsWith("/")) {
+    return target.path.startsWith(pattern.path);
+  }
+  return target.path === pattern.path;
+}
+function dedupeCspSources(sources) {
+  const parsed = sources.map((raw) => ({ raw, parsed: parseSource(raw) }));
+  return parsed.filter(({ parsed: target }, i) => {
+    if (!target) {
+      return true;
+    }
+    return !parsed.some(({ parsed: pattern }, j) => {
+      if (i === j || !pattern) {
+        return false;
+      }
+      if (!covers(pattern, target)) {
+        return false;
+      }
+      if (covers(target, pattern)) {
+        return j < i;
+      }
+      return true;
+    });
+  }).map(({ raw }) => raw);
+}
+
+// src/internal/sentry/getSentryKeys.ts
+function getSentryKeys({
+  dsn = process.env.NEXT_PUBLIC_SENTRY_DSN
+} = {}) {
+  if (!dsn) {
+    return void 0;
+  }
+  const re = /^(?:https:\/\/)([A-z0-9]{32})(?::{0,1})([A-z0-9]*)(?:@)(o[a-z0-9]+)(?:\.ingest\.us\.sentry\.io)\/([0-9]{16})/i;
+  const match = _optionalChain([dsn, 'optionalAccess', _ => _.match, 'call', _2 => _2(re)]);
+  if (!match) {
+    return void 0;
+  }
+  const [
+    ,
+    key,
+    // this is a secret stored in a deprecated dns format
+    deprecatedSecret,
+    org,
+    projectId
+  ] = match;
+  const cspEndpoint = new URL(
+    `https://${org}.ingest.us.sentry.io/api/${projectId}/security/?sentry_key=${key}`
+  );
+  cspEndpoint.searchParams.set("sentry_key", key);
+  cspEndpoint.searchParams.set("sentry_env", _chunkB2BTOQVPcjs.sentryEnvironment);
+  cspEndpoint.searchParams.set("sentry_release", _chunkB2BTOQVPcjs.sentryRelease);
+  return {
+    dsn: match[0],
+    projectId,
+    deprecatedSecret: deprecatedSecret || void 0,
+    cspEndpoint,
+    org,
+    publicKey: match[1]
+  };
+}
+
+// src/internal/header-sources.ts
+var config = _chunkFEDP4MQEcjs.chainConfigs[_chunkAU3LYJABcjs.defaultChainId];
+var modules = {
+  berachain: {
+    connect: [
+      "https://*.berachain.com/",
+      // staging hosts are only reachable outside production
+      _chunkAU3LYJABcjs.isProduction ? null : "https://*.berachain-staging.com/",
+      "https://raw.githubusercontent.com/berachain/metadata/",
+      `${_chunkAU3LYJABcjs.imageBaseUrl}/`,
+      "https://*.quiknode.pro",
+      // Subgraph queries are served by same-origin typed REST endpoints under
+      // /api/honey/* and /api/pol/* (covered by 'self'), not direct browser
+      // requests to the upstream URLs.
+      config.pol.bribeBoostApi,
+      _chunkYT7WZDGIcjs.getUriFromLink.call(void 0, config.beep),
+      _chunkYT7WZDGIcjs.getUriFromLink.call(void 0, config.api),
+      _chunkAU3LYJABcjs.jsonRpcUrl,
+      _chunkAU3LYJABcjs.publicJsonRpcUrl,
+      _chunkAU3LYJABcjs.alchemyJsonRpcUrl,
+      "https://api.routescan.io/v2/network/"
+    ],
+    img: [
+      // trailing slash so sub-paths (e.g. /bend-curators/x.png/public) match;
+      // CSP path-matches exactly without it
+      `${_chunkAU3LYJABcjs.imageBaseUrl}/`,
+      "https://raw.githubusercontent.com/berachain/metadata/"
+    ]
+  },
+  beranames: {
+    connect: [
+      // avatars
+      "https://beranames-assets-berachain.s3.eu-central-003.backblazeb2.com/"
+    ],
+    img: [
+      "https://beranames-assets-berachain.s3.eu-central-003.backblazeb2.com/"
+    ]
+  },
+  swapAggregators: {
+    connect: [
+      // empty on chains without a proxy — omit rather than emit a bare "/"
+      config.bex.aggregatorsProxyUrl ? `${config.bex.aggregatorsProxyUrl}/` : null,
+      "https://open-api.openocean.finance/",
+      "https://api.haiku.trade/",
+      "https://api.fly.trade/",
+      "https://api.enso.finance/",
+      "https://api.enso.build/",
+      // zaps
+      "https://api.relay.link/"
+    ]
+  },
+  walletConnect: {
+    connect: [
+      "wss://relay.walletconnect.com/",
+      "wss://relay.walletconnect.org/",
+      "https://verify.walletconnect.org/v3/public-key"
+    ],
+    frame: [
+      "https://verify.walletconnect.com/",
+      "https://verify.walletconnect.org/"
+    ]
+  },
+  coinbaseWallet: {
+    connect: [
+      "wss://www.walletlink.org/rpc",
+      "https://www.walletlink.org/events",
+      "https://chain-proxy.wallet.coinbase.com/"
+    ]
+  },
+  metamask: {
+    connect: [
+      "wss://metamask-sdk.api.cx.metamask.io/socket.io/",
+      "https://metamask-sdk.api.cx.metamask.io"
+    ]
+  },
+  thirdweb: {
+    connect: ["https://*.thirdweb.com/"],
+    // export pk iframe
+    frame: ["https://embedded-wallet.thirdweb.com/"]
+  },
+  dynamic: {
+    connect: ["https://app.dynamicauth.com/api"]
+  },
+  binance: {
+    connect: ["https://wallet.binance.com/tonbridge/"]
+  },
+  tron: {
+    connect: ["https://api.trongrid.io/"]
+  },
+  layerZero: {
+    connect: [
+      "https://*.layerzero-scan.com/",
+      "https://scan.layerzero-api.com/"
+    ]
+  },
+  pelagus: {
+    img: ["https://pelaguswallet.io/docs/img"]
+  },
+  externalRpcs: {
+    // non-Berachain chains read by wallets/bridges
+    connect: [
+      "https://api.avax.network/ext/bc/C/rpc",
+      "https://polygon-rpc.com",
+      "https://mainnet.optimism.io/",
+      "https://arb1.arbitrum.io/rpc",
+      "https://mainnet.base.org/",
+      "https://eth.merkle.io"
+    ]
+  },
+  tokenIcons: {
+    img: [
+      "https://assets.coingecko.com/coins/images/",
+      "https://coin-images.coingecko.com/coins/images/",
+      "https://icons.llama.fi/",
+      "https://icons.llamao.fi/",
+      "https://static.debank.com/",
+      "https://raw.githubusercontent.com/trustwallet/assets/"
+    ]
+  },
+  bend: {
+    img: ["https://cdn.morpho.org/"]
+  },
+  pyth: {
+    connect: ["https://hermes.pyth.network/v2/"]
+  },
+  fonts: {
+    font: [
+      "https://cdn.jsdelivr.net/npm/@fontsource/",
+      // collected by sentry (needed by browser extensions)
+      "https://fonts.gstatic.com",
+      "https://use.typekit.net/"
+    ]
+  },
+  sentry: {
+    // csp reporting
+    connect: ["https://*.sentry.io/"]
+  },
+  posthog: {
+    // toolbar + heatmaps
+    connect: ["https://*.posthog.com"],
+    img: ["https://*.posthog.com"],
+    frame: ["https://*.posthog.com"],
+    font: ["https://*.posthog.com"],
+    style: ["https://*.posthog.com"],
+    media: ["https://*.posthog.com"]
+  },
+  vercel: {
+    // toolbar + live comments
+    connect: ["https://vercel.live", "wss://ws-us3.pusher.com"],
+    img: ["https://vercel.live", "https://vercel.com"],
+    frame: ["https://vercel.live/"],
+    font: ["https://vercel.live", "https://assets.vercel.com"],
+    style: ["https://vercel.live"]
+  }
+};
+var headerSourceModules = modules;
+function getContentSecurityPolicy({
+  isDevelopment,
+  cspReporting,
+  dynamicScriptCsp = {},
+  modules: enabledModules = {},
+  ...args
+}) {
+  const defaultSrc = [];
+  function collect(directive) {
+    return Object.entries(headerSourceModules).filter(
+      ([module]) => enabledModules[module] !== false
+    ).flatMap(([, sources]) => _nullishCoalesce(sources[directive], () => ( []))).filter((url) => Boolean(_optionalChain([url, 'optionalAccess', _3 => _3.trim, 'call', _4 => _4()])));
+  }
+  const connectionSources = dedupeCspSources(
+    collect("connect").concat(_nullishCoalesce(args.connectionSources, () => ( []))).filter((link) => {
+      const url = _chunkYT7WZDGIcjs.getUriFromLink.call(void 0, link);
+      if (!url || url.trim() === "") {
+        return false;
+      }
+      if (url.startsWith(_chunkAU3LYJABcjs.goldskyBaseUrl) && url !== _chunkAU3LYJABcjs.goldskyBaseUrl) {
+        return false;
+      }
+      return true;
+    })
+  );
+  const pictureSources = dedupeCspSources(
+    collect("img").concat(_nullishCoalesce(args.pictureSources, () => ( [])))
+  );
+  const frameSources = dedupeCspSources(
+    collect("frame").concat(_nullishCoalesce(args.frameSources, () => ( [])))
+  );
+  const fontSources = dedupeCspSources(
+    collect("font").concat(_nullishCoalesce(args.fontSources, () => ( [])))
+  );
+  const styleSources = dedupeCspSources(
+    collect("style").concat(_nullishCoalesce(args.styleSources, () => ( [])))
+  );
+  const workerSources = dedupeCspSources(
+    collect("worker").concat(_nullishCoalesce(args.workerSources, () => ( [])))
+  );
+  const mediaSources = dedupeCspSources(
+    collect("media").concat(_nullishCoalesce(args.mediaSources, () => ( [])))
+  );
+  const scriptSources = dynamicScriptCsp === "disabled" ? dedupeCspSources(collect("script").concat(_nullishCoalesce(args.scriptSources, () => ( [])))) : dedupeCspSources(
+    [
+      dynamicScriptCsp.nonce ? `'nonce-${dynamicScriptCsp.nonce}'` : "",
+      "'strict-dynamic'",
+      "'sha256-k2HGvaYkGyYZxOwKGxgE1mr06tZEDcEXNZ5mdcldK0o='",
+      ..._nullishCoalesce(dynamicScriptCsp.sha, () => ( []))
+    ].filter((source) => source !== "")
+  );
+  let cspHeader = `
+    default-src 'self' ${defaultSrc.join(" ")};
     base-uri 'self';
-    frame-src 'self' ${P.join(" ")};
+    frame-src 'self' ${frameSources.join(" ")};
     frame-ancestors 'self' https://*.posthog.com;
-    script-src 'self' ${O.concat([t?"'unsafe-eval'":""]).join(" ")};
-    worker-src 'self' blob: data: ${N.join(" ")};
-    font-src 'self' ${E.join(" ")};
-    style-src 'self' ${j.join(" ")} 'unsafe-inline';
-    img-src 'self' data: ${R.join(" ")};
-    connect-src 'self' ${p.join(" ")};
-    media-src 'self' ${U.join(" ")};
-  `;return s&&(f+=`
-    report-uri ${s};
+    script-src 'self' ${scriptSources.concat([isDevelopment ? "'unsafe-eval'" : ""]).join(" ")};
+    worker-src 'self' blob: data: ${workerSources.join(" ")};
+    font-src 'self' ${fontSources.join(" ")};
+    style-src 'self' ${styleSources.join(" ")} 'unsafe-inline';
+    img-src 'self' data: ${pictureSources.join(" ")};
+    connect-src 'self' ${connectionSources.join(" ")};
+    media-src 'self' ${mediaSources.join(" ")};
+  `;
+  if (cspReporting) {
+    cspHeader += `
+    report-uri ${cspReporting};
     report-to csp-endpoint;
-    `),f.replace(/\s{2,}/g," ").trim()}var Y=[`${_chunk6CZTBBJTcjs.g}/`,"https://raw.githubusercontent.com/berachain/metadata/","https://assets.coingecko.com/coins/images/","https://berachain.ghost.io/content/images/"].filter(t=>!(!t||t.trim()===""));function Z({response:t,csp:s}){let e=_optionalChain([$, 'call', _6 => _6(), 'optionalAccess', _7 => _7.cspEndpoint]),r=_optionalChain([s, 'optionalAccess', _8 => _8.dynamicScriptCsp])!=="disabled"?_nullishCoalesce(_optionalChain([s, 'optionalAccess', _9 => _9.dynamicScriptCsp, 'optionalAccess', _10 => _10.nonce]), () => (Buffer.from(crypto.randomUUID()).toString("base64"))):void 0,n=process.env.NODE_ENV==="development",c=[{key:"Content-Security-Policy",value:B({...s,dynamicScriptCsp:_optionalChain([s, 'optionalAccess', _11 => _11.dynamicScriptCsp])==="disabled"?s.dynamicScriptCsp:{..._optionalChain([s, 'optionalAccess', _12 => _12.dynamicScriptCsp]),nonce:r},isDevelopment:n,cspReporting:_optionalChain([e, 'optionalAccess', _13 => _13.toString, 'call', _14 => _14()])})},{key:"X-Frame-Options",value:"DENY"},{key:"X-Content-Type-Options",value:"nosniff"},{key:"X-Nonce",value:r}];e&&(c.push({key:"Reporting-To",value:`{"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"${e}"}],"include_subdomains":true}"`}),c.push({key:"Reporting-Endpoints",value:`csp-endpoint="${e}"`}));for(let o of c)o.value&&t.headers.set(o.key,o.value);return t}exports.cspMiddleware = Z; exports.getContentSecurityPolicy = B; exports.headerSourceModules = D; exports.staticPictureSources = Y;
+    `;
+  }
+  return cspHeader.replace(/\s{2,}/g, " ").trim();
+}
+var staticPictureSources = [
+  // Only add image delivery URL if it exists and can be processed
+  `${_chunkAU3LYJABcjs.imageBaseUrl}/`,
+  "https://raw.githubusercontent.com/berachain/metadata/",
+  "https://assets.coingecko.com/coins/images/",
+  "https://berachain.ghost.io/content/images/"
+].filter((url) => {
+  if (!url || url.trim() === "") {
+    return false;
+  }
+  return true;
+});
+function cspMiddleware({
+  response,
+  csp
+}) {
+  const sentryCspEndpoint = _optionalChain([getSentryKeys, 'call', _5 => _5(), 'optionalAccess', _6 => _6.cspEndpoint]);
+  const nonce = _optionalChain([csp, 'optionalAccess', _7 => _7.dynamicScriptCsp]) !== "disabled" ? _nullishCoalesce(_optionalChain([csp, 'optionalAccess', _8 => _8.dynamicScriptCsp, 'optionalAccess', _9 => _9.nonce]), () => ( Buffer.from(crypto.randomUUID()).toString("base64"))) : void 0;
+  const isDevelopment = process.env.NODE_ENV === "development";
+  const headers = [
+    {
+      key: "Content-Security-Policy",
+      value: getContentSecurityPolicy({
+        ...csp,
+        dynamicScriptCsp: _optionalChain([csp, 'optionalAccess', _10 => _10.dynamicScriptCsp]) === "disabled" ? csp.dynamicScriptCsp : {
+          ..._optionalChain([csp, 'optionalAccess', _11 => _11.dynamicScriptCsp]),
+          nonce
+        },
+        isDevelopment,
+        cspReporting: _optionalChain([sentryCspEndpoint, 'optionalAccess', _12 => _12.toString, 'call', _13 => _13()])
+      })
+    },
+    {
+      key: "X-Frame-Options",
+      value: "DENY"
+    },
+    {
+      key: "X-Content-Type-Options",
+      value: "nosniff"
+    },
+    {
+      key: "X-Nonce",
+      value: nonce
+    }
+  ];
+  if (sentryCspEndpoint) {
+    headers.push({
+      key: "Reporting-To",
+      value: `{"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"${sentryCspEndpoint}"}],"include_subdomains":true}"`
+    });
+    headers.push({
+      key: "Reporting-Endpoints",
+      value: `csp-endpoint="${sentryCspEndpoint}"`
+    });
+  }
+  for (const header of headers) {
+    if (!header.value) {
+      continue;
+    }
+    response.headers.set(header.key, header.value);
+  }
+  return response;
+}
+
+
+
+
+
+exports.cspMiddleware = cspMiddleware; exports.getContentSecurityPolicy = getContentSecurityPolicy; exports.headerSourceModules = headerSourceModules; exports.staticPictureSources = staticPictureSources;