@berachain/config 0.2.8-beta.0 → 0.2.8

package/dist/internal/header-sources.d.ts

@@ -24,7 +24,7 @@ interface HeaderSources {
 }
 declare const modules: {
     readonly berachain: {
-        readonly connect: ["https://*.berachain.com/", "https://*.berachain-staging.com/" | null, "https://raw.githubusercontent.com/berachain/metadata/", "https://imagedelivery.net/qNj7Q3MCke89zoKzav7eDQ/", "https://*.quiknode.pro", string | null, string, string, string, string, string | undefined, "https://api.routescan.io/v2/network/"];
+        readonly connect: ["https://*.berachain.com/", "https://*.berachain-staging.com/" | null, "https://raw.githubusercontent.com/berachain/metadata/", "https://imagedelivery.net/qNj7Q3MCke89zoKzav7eDQ/", "https://*.quiknode.pro/", string | null, string, string, string, string, string | undefined, "https://api.routescan.io/v2/network/"];
         readonly img: ["https://imagedelivery.net/qNj7Q3MCke89zoKzav7eDQ/", "https://raw.githubusercontent.com/berachain/metadata/"];
     };
     readonly beranames: {
@@ -145,5 +145,15 @@ export declare function cspMiddleware({ response, csp, }: {
     /** per-request CSP customization — toggle modules off and/or append extra sources per directive */
     csp?: CspOptions;
 }): NextResponse<unknown>;
+/**
+ * Builds static security headers. Dynamic script CSP is disabled by default;
+ * callers must provide their own nonce to opt into a nonce-based policy.
+ */
+export declare function cspHeaders(
+/** static CSP customization — toggle modules off and/or append extra sources per directive */
+csp?: CspOptions): {
+    key: string;
+    value: string;
+}[];
 export {};
 //# sourceMappingURL=header-sources.d.ts.map

package/dist/internal/header-sources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"header-sources.d.ts","sourceRoot":"","sources":["../../src/internal/header-sources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAiB7D;;;;GAIG;AACH,UAAU,aAAa;IACrB,kBAAkB;IAClB,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC;IAC3C,cAAc;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,iBAAiB;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,QAAA,MAAM,OAAO;;iBAET,OAAO;iBAkBP,GAAG;;;iBAQH,OAAO;iBAIP,GAAG;;;iBAKH,OAAO;;;iBAeP,OAAO;iBAKP,KAAK;;;iBAML,OAAO;;;iBAOP,OAAO;;;iBAMP,OAAO;iBAEP,KAAK;;;iBAGL,OAAO;;;iBAGP,OAAO;;;iBAGP,OAAO;;;iBAGP,OAAO;;;iBAMP,GAAG;;;iBAIH,OAAO;;;iBAUP,GAAG;;;iBAUH,GAAG;;;iBAGH,OAAO;;;iBAGP,IAAI;;;iBASJ,OAAO;;;iBAIP,OAAO;iBACP,GAAG;iBACH,KAAK;iBACL,IAAI;iBACJ,KAAK;iBACL,KAAK;;;iBAIL,OAAO;iBACP,GAAG;iBACH,KAAK;iBACL,IAAI;iBACJ,KAAK;;CAEyC,CAAC;AAEnD,MAAM,MAAM,kBAAkB,GAAG,MAAM,OAAO,OAAO,CAAC;AAEtD;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,wGAAwG;IACxG,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;IACvD;;;;;OAKG;IACH,gBAAgB,CAAC,EACb,UAAU,GACV;QACE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACN,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,EAAE,aAAa,CACjE,CAAC;AAEV,wBAAgB,wBAAwB,CAAC,EACvC,aAAa,EACb,YAAY,EACZ,gBAAqB,EACrB,OAAO,EAAE,cAAmB,EAC5B,GAAG,IAAI,EACR,EAAE,UAAU,GAAG;IACd,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,MAAM,CA0FT;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,EAWvC,CAAC;AAEH,wBAAgB,aAAa,CAAC,EAC5B,QAAQ,EACR,GAAG,GACJ,EAAE;IACD,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,YAAY,CAAC;IACvB,mGAAmG;IACnG,GAAG,CAAC,EAAE,UAAU,CAAC;CAClB,yBA2DA"}
+{"version":3,"file":"header-sources.d.ts","sourceRoot":"","sources":["../../src/internal/header-sources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAiB7D;;;;GAIG;AACH,UAAU,aAAa;IACrB,kBAAkB;IAClB,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC;IAC3C,cAAc;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,iBAAiB;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,QAAA,MAAM,OAAO;;iBAET,OAAO;iBAkBP,GAAG;;;iBAQH,OAAO;iBAIP,GAAG;;;iBAKH,OAAO;;;iBAeP,OAAO;iBAKP,KAAK;;;iBAML,OAAO;;;iBAOP,OAAO;;;iBAMP,OAAO;iBAEP,KAAK;;;iBAGL,OAAO;;;iBAGP,OAAO;;;iBAGP,OAAO;;;iBAGP,OAAO;;;iBAMP,GAAG;;;iBAIH,OAAO;;;iBAUP,GAAG;;;iBAUH,GAAG;;;iBAGH,OAAO;;;iBAGP,IAAI;;;iBASJ,OAAO;;;iBAIP,OAAO;iBACP,GAAG;iBACH,KAAK;iBACL,IAAI;iBACJ,KAAK;iBACL,KAAK;;;iBAIL,OAAO;iBACP,GAAG;iBACH,KAAK;iBACL,IAAI;iBACJ,KAAK;;CAEyC,CAAC;AAEnD,MAAM,MAAM,kBAAkB,GAAG,MAAM,OAAO,OAAO,CAAC;AAEtD;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,wGAAwG;IACxG,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;IACvD;;;;;OAKG;IACH,gBAAgB,CAAC,EACb,UAAU,GACV;QACE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACN,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,EAAE,aAAa,CACjE,CAAC;AAEV,wBAAgB,wBAAwB,CAAC,EACvC,aAAa,EACb,YAAY,EACZ,gBAAqB,EACrB,OAAO,EAAE,cAAmB,EAC5B,GAAG,IAAI,EACR,EAAE,UAAU,GAAG;IACd,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,MAAM,CA0FT;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,EAWvC,CAAC;AAEH,wBAAgB,aAAa,CAAC,EAC5B,QAAQ,EACR,GAAG,GACJ,EAAE;IACD,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,YAAY,CAAC;IACvB,mGAAmG;IACnG,GAAG,CAAC,EAAE,UAAU,CAAC;CAClB,yBAyBA;AAED;;;GAGG;AACH,wBAAgB,UAAU;AACxB,8FAA8F;AAC9F,GAAG,CAAC,EAAE,UAAU;;;IAoDjB"}

package/dist/internal/header-sources.mjs

@@ -1,412 +1,16 @@
-import {
-  sentryEnvironment,
-  sentryRelease
-} from "../chunk-OWAB24JG.mjs";
-import {
-  getUriFromLink
-} from "../chunk-LALEUPWL.mjs";
-import {
-  chainConfigs
-} from "../chunk-GFHZDTK3.mjs";
-import "../chunk-UKXTPLZ5.mjs";
-import "../chunk-4DGMTEOQ.mjs";
-import {
-  alchemyJsonRpcUrl,
-  defaultChainId,
-  goldskyBaseUrl,
-  imageBaseUrl,
-  isProduction,
-  jsonRpcUrl,
-  publicJsonRpcUrl
-} from "../chunk-VWRKCGMU.mjs";
-import "../chunk-KJXYSGNH.mjs";
-
-// src/internal/dedupeCspSources.ts
-function parseSource(raw) {
-  const schemeSplit = raw.indexOf("://");
-  if (schemeSplit === -1) {
-    return void 0;
-  }
-  const scheme = raw.slice(0, schemeSplit).toLowerCase();
-  const rest = raw.slice(schemeSplit + 3);
-  const pathStart = rest.indexOf("/");
-  const host = (pathStart === -1 ? rest : rest.slice(0, pathStart)).toLowerCase();
-  const path = pathStart === -1 ? "/" : rest.slice(pathStart);
-  if (!host) {
-    return void 0;
-  }
-  return { raw, scheme, host, path };
-}
-function hostMatches(patternHost, targetHost) {
-  if (!patternHost.startsWith("*.")) {
-    return patternHost === targetHost;
-  }
-  const suffix = patternHost.slice(1);
-  return targetHost.endsWith(suffix) && targetHost.length > suffix.length;
-}
-function covers(pattern, target) {
-  if (pattern.scheme !== target.scheme) {
-    return false;
-  }
-  if (!hostMatches(pattern.host, target.host)) {
-    return false;
-  }
-  if (pattern.path.endsWith("/")) {
-    return target.path.startsWith(pattern.path);
-  }
-  return target.path === pattern.path;
-}
-function dedupeCspSources(sources) {
-  const parsed = sources.map((raw) => ({ raw, parsed: parseSource(raw) }));
-  return parsed.filter(({ parsed: target }, i) => {
-    if (!target) {
-      return true;
-    }
-    return !parsed.some(({ parsed: pattern }, j) => {
-      if (i === j || !pattern) {
-        return false;
-      }
-      if (!covers(pattern, target)) {
-        return false;
-      }
-      if (covers(target, pattern)) {
-        return j < i;
-      }
-      return true;
-    });
-  }).map(({ raw }) => raw);
-}
-
-// src/internal/sentry/getSentryKeys.ts
-function getSentryKeys({
-  dsn = process.env.NEXT_PUBLIC_SENTRY_DSN
-} = {}) {
-  if (!dsn) {
-    return void 0;
-  }
-  const re = /^(?:https:\/\/)([A-z0-9]{32})(?::{0,1})([A-z0-9]*)(?:@)(o[a-z0-9]+)(?:\.ingest\.us\.sentry\.io)\/([0-9]{16})/i;
-  const match = dsn?.match(re);
-  if (!match) {
-    return void 0;
-  }
-  const [
-    ,
-    key,
-    // this is a secret stored in a deprecated dns format
-    deprecatedSecret,
-    org,
-    projectId
-  ] = match;
-  const cspEndpoint = new URL(
-    `https://${org}.ingest.us.sentry.io/api/${projectId}/security/?sentry_key=${key}`
-  );
-  cspEndpoint.searchParams.set("sentry_key", key);
-  cspEndpoint.searchParams.set("sentry_env", sentryEnvironment);
-  cspEndpoint.searchParams.set("sentry_release", sentryRelease);
-  return {
-    dsn: match[0],
-    projectId,
-    deprecatedSecret: deprecatedSecret || void 0,
-    cspEndpoint,
-    org,
-    publicKey: match[1]
-  };
-}
-
-// src/internal/header-sources.ts
-var config = chainConfigs[defaultChainId];
-var modules = {
-  berachain: {
-    connect: [
-      "https://*.berachain.com/",
-      // staging hosts are only reachable outside production
-      isProduction ? null : "https://*.berachain-staging.com/",
-      "https://raw.githubusercontent.com/berachain/metadata/",
-      `${imageBaseUrl}/`,
-      "https://*.quiknode.pro",
-      // Subgraph queries are served by same-origin typed REST endpoints under
-      // /api/honey/* and /api/pol/* (covered by 'self'), not direct browser
-      // requests to the upstream URLs.
-      config.pol.bribeBoostApi,
-      getUriFromLink(config.beep),
-      getUriFromLink(config.api),
-      jsonRpcUrl,
-      publicJsonRpcUrl,
-      alchemyJsonRpcUrl,
-      "https://api.routescan.io/v2/network/"
-    ],
-    img: [
-      // trailing slash so sub-paths (e.g. /bend-curators/x.png/public) match;
-      // CSP path-matches exactly without it
-      `${imageBaseUrl}/`,
-      "https://raw.githubusercontent.com/berachain/metadata/"
-    ]
-  },
-  beranames: {
-    connect: [
-      // avatars
-      "https://beranames-assets-berachain.s3.eu-central-003.backblazeb2.com/"
-    ],
-    img: [
-      "https://beranames-assets-berachain.s3.eu-central-003.backblazeb2.com/"
-    ]
-  },
-  swapAggregators: {
-    connect: [
-      // empty on chains without a proxy — omit rather than emit a bare "/"
-      config.bex.aggregatorsProxyUrl ? `${config.bex.aggregatorsProxyUrl}/` : null,
-      "https://open-api.openocean.finance/",
-      "https://api.haiku.trade/",
-      "https://api.fly.trade/",
-      "https://api.enso.finance/",
-      "https://api.enso.build/",
-      // zaps
-      "https://api.relay.link/"
-    ]
-  },
-  walletConnect: {
-    connect: [
-      "wss://relay.walletconnect.com/",
-      "wss://relay.walletconnect.org/",
-      "https://verify.walletconnect.org/v3/public-key"
-    ],
-    frame: [
-      "https://verify.walletconnect.com/",
-      "https://verify.walletconnect.org/"
-    ]
-  },
-  coinbaseWallet: {
-    connect: [
-      "wss://www.walletlink.org/rpc",
-      "https://www.walletlink.org/events",
-      "https://chain-proxy.wallet.coinbase.com/"
-    ]
-  },
-  metamask: {
-    connect: [
-      "wss://metamask-sdk.api.cx.metamask.io/socket.io/",
-      "https://metamask-sdk.api.cx.metamask.io"
-    ]
-  },
-  thirdweb: {
-    connect: ["https://*.thirdweb.com/"],
-    // export pk iframe
-    frame: ["https://embedded-wallet.thirdweb.com/"]
-  },
-  dynamic: {
-    connect: ["https://app.dynamicauth.com/api"]
-  },
-  binance: {
-    connect: ["https://wallet.binance.com/tonbridge/"]
-  },
-  tron: {
-    connect: ["https://api.trongrid.io/"]
-  },
-  layerZero: {
-    connect: [
-      "https://*.layerzero-scan.com/",
-      "https://scan.layerzero-api.com/"
-    ]
-  },
-  pelagus: {
-    img: ["https://pelaguswallet.io/docs/img"]
-  },
-  externalRpcs: {
-    // non-Berachain chains read by wallets/bridges
-    connect: [
-      "https://api.avax.network/ext/bc/C/rpc",
-      "https://polygon-rpc.com",
-      "https://mainnet.optimism.io/",
-      "https://arb1.arbitrum.io/rpc",
-      "https://mainnet.base.org/",
-      "https://eth.merkle.io"
-    ]
-  },
-  tokenIcons: {
-    img: [
-      "https://assets.coingecko.com/coins/images/",
-      "https://coin-images.coingecko.com/coins/images/",
-      "https://icons.llama.fi/",
-      "https://icons.llamao.fi/",
-      "https://static.debank.com/",
-      "https://raw.githubusercontent.com/trustwallet/assets/"
-    ]
-  },
-  bend: {
-    img: ["https://cdn.morpho.org/"]
-  },
-  pyth: {
-    connect: ["https://hermes.pyth.network/v2/"]
-  },
-  fonts: {
-    font: [
-      "https://cdn.jsdelivr.net/npm/@fontsource/",
-      // collected by sentry (needed by browser extensions)
-      "https://fonts.gstatic.com",
-      "https://use.typekit.net/"
-    ]
-  },
-  sentry: {
-    // csp reporting
-    connect: ["https://*.sentry.io/"]
-  },
-  posthog: {
-    // toolbar + heatmaps
-    connect: ["https://*.posthog.com"],
-    img: ["https://*.posthog.com"],
-    frame: ["https://*.posthog.com"],
-    font: ["https://*.posthog.com"],
-    style: ["https://*.posthog.com"],
-    media: ["https://*.posthog.com"]
-  },
-  vercel: {
-    // toolbar + live comments
-    connect: ["https://vercel.live", "wss://ws-us3.pusher.com"],
-    img: ["https://vercel.live", "https://vercel.com"],
-    frame: ["https://vercel.live/"],
-    font: ["https://vercel.live", "https://assets.vercel.com"],
-    style: ["https://vercel.live"]
-  }
-};
-var headerSourceModules = modules;
-function getContentSecurityPolicy({
-  isDevelopment,
-  cspReporting,
-  dynamicScriptCsp = {},
-  modules: enabledModules = {},
-  ...args
-}) {
-  const defaultSrc = [];
-  function collect(directive) {
-    return Object.entries(headerSourceModules).filter(
-      ([module]) => enabledModules[module] !== false
-    ).flatMap(([, sources]) => sources[directive] ?? []).filter((url) => Boolean(url?.trim()));
-  }
-  const connectionSources = dedupeCspSources(
-    collect("connect").concat(args.connectionSources ?? []).filter((link) => {
-      const url = getUriFromLink(link);
-      if (!url || url.trim() === "") {
-        return false;
-      }
-      if (url.startsWith(goldskyBaseUrl) && url !== goldskyBaseUrl) {
-        return false;
-      }
-      return true;
-    })
-  );
-  const pictureSources = dedupeCspSources(
-    collect("img").concat(args.pictureSources ?? [])
-  );
-  const frameSources = dedupeCspSources(
-    collect("frame").concat(args.frameSources ?? [])
-  );
-  const fontSources = dedupeCspSources(
-    collect("font").concat(args.fontSources ?? [])
-  );
-  const styleSources = dedupeCspSources(
-    collect("style").concat(args.styleSources ?? [])
-  );
-  const workerSources = dedupeCspSources(
-    collect("worker").concat(args.workerSources ?? [])
-  );
-  const mediaSources = dedupeCspSources(
-    collect("media").concat(args.mediaSources ?? [])
-  );
-  const scriptSources = dynamicScriptCsp === "disabled" ? dedupeCspSources(collect("script").concat(args.scriptSources ?? [])) : dedupeCspSources(
-    [
-      dynamicScriptCsp.nonce ? `'nonce-${dynamicScriptCsp.nonce}'` : "",
-      "'strict-dynamic'",
-      "'sha256-k2HGvaYkGyYZxOwKGxgE1mr06tZEDcEXNZ5mdcldK0o='",
-      ...dynamicScriptCsp.sha ?? []
-    ].filter((source) => source !== "")
-  );
-  let cspHeader = `
-    default-src 'self' ${defaultSrc.join(" ")};
+import{a as v,c as x}from"../chunk-N45AQAIZ.mjs";import{a as m}from"../chunk-O243TIHY.mjs";import{a as w}from"../chunk-QHBQ2EN5.mjs";import"../chunk-QYM6VRYU.mjs";import"../chunk-2GCBWNKH.mjs";import{a as g,b as y,g as h,h as d,j as b,k as S,l as k}from"../chunk-2RLHVELA.mjs";import"../chunk-MS6UGFXI.mjs";function _(t){let e=t.indexOf("://");if(e===-1)return;let s=t.slice(0,e).toLowerCase(),o=t.slice(e+3),n=o.indexOf("/"),r=(n===-1?o:o.slice(0,n)).toLowerCase(),c=n===-1?"/":o.slice(n);if(r)return{raw:t,scheme:s,host:r,path:c}}function M(t,e){if(!t.startsWith("*."))return t===e;let s=t.slice(1);return e.endsWith(s)&&e.length>s.length}function C(t,e){return t.scheme!==e.scheme||!M(t.host,e.host)?!1:t.path.endsWith("/")?e.path.startsWith(t.path):e.path===t.path}function a(t){let e=t.map(s=>({raw:s,parsed:_(s)}));return e.filter(({parsed:s},o)=>s?!e.some(({parsed:n},r)=>o===r||!n||!C(n,s)?!1:C(s,n)?r<o:!0):!0).map(({raw:s})=>s)}function $({dsn:t=process.env.NEXT_PUBLIC_SENTRY_DSN}={}){if(!t)return;let e=/^(?:https:\/\/)([A-z0-9]{32})(?::{0,1})([A-z0-9]*)(?:@)(o[a-z0-9]+)(?:\.ingest\.us\.sentry\.io)\/([0-9]{16})/i,s=t?.match(e);if(!s)return;let[,o,n,r,c]=s,p=new URL(`https://${r}.ingest.us.sentry.io/api/${c}/security/?sentry_key=${o}`);return p.searchParams.set("sentry_key",o),p.searchParams.set("sentry_env",v),p.searchParams.set("sentry_release",x),{dsn:s[0],projectId:c,deprecatedSecret:n||void 0,cspEndpoint:p,org:r,publicKey:s[1]}}var u=w[g],z={berachain:{connect:["https://*.berachain.com/",y?null:"https://*.berachain-staging.com/","https://raw.githubusercontent.com/berachain/metadata/",`${h}/`,"https://*.quiknode.pro/",u.pol.bribeBoostApi,m(u.beep),m(u.api),S,b,k,"https://api.routescan.io/v2/network/"],img:[`${h}/`,"https://raw.githubusercontent.com/berachain/metadata/"]},beranames:{connect:["https://beranames-assets-berachain.s3.eu-central-003.backblazeb2.com/"],img:["https://beranames-assets-berachain.s3.eu-central-003.backblazeb2.com/"]},swapAggregators:{connect:[u.bex.aggregatorsProxyUrl?`${u.bex.aggregatorsProxyUrl}/`:null,"https://open-api.openocean.finance/","https://api.haiku.trade/","https://api.fly.trade/","https://api.enso.finance/","https://api.enso.build/","https://api.relay.link/"]},walletConnect:{connect:["wss://relay.walletconnect.com/","wss://relay.walletconnect.org/","https://verify.walletconnect.org/v3/public-key"],frame:["https://verify.walletconnect.com/","https://verify.walletconnect.org/"]},coinbaseWallet:{connect:["wss://www.walletlink.org/rpc","https://www.walletlink.org/events","https://chain-proxy.wallet.coinbase.com/"]},metamask:{connect:["wss://metamask-sdk.api.cx.metamask.io/socket.io/","https://metamask-sdk.api.cx.metamask.io"]},thirdweb:{connect:["https://*.thirdweb.com/"],frame:["https://embedded-wallet.thirdweb.com/"]},dynamic:{connect:["https://app.dynamicauth.com/api"]},binance:{connect:["https://wallet.binance.com/tonbridge/"]},tron:{connect:["https://api.trongrid.io/"]},layerZero:{connect:["https://*.layerzero-scan.com/","https://scan.layerzero-api.com/"]},pelagus:{img:["https://pelaguswallet.io/docs/img"]},externalRpcs:{connect:["https://api.avax.network/ext/bc/C/rpc","https://polygon-rpc.com","https://mainnet.optimism.io/","https://arb1.arbitrum.io/rpc","https://mainnet.base.org/","https://eth.merkle.io"]},tokenIcons:{img:["https://assets.coingecko.com/coins/images/","https://coin-images.coingecko.com/coins/images/","https://icons.llama.fi/","https://icons.llamao.fi/","https://static.debank.com/","https://raw.githubusercontent.com/trustwallet/assets/"]},bend:{img:["https://cdn.morpho.org/"]},pyth:{connect:["https://hermes.pyth.network/v2/"]},fonts:{font:["https://cdn.jsdelivr.net/npm/@fontsource/","https://fonts.gstatic.com","https://use.typekit.net/"]},sentry:{connect:["https://*.sentry.io/"]},posthog:{connect:["https://*.posthog.com"],img:["https://*.posthog.com"],frame:["https://*.posthog.com"],font:["https://*.posthog.com"],style:["https://*.posthog.com"],media:["https://*.posthog.com"]},vercel:{connect:["https://vercel.live","wss://ws-us3.pusher.com"],img:["https://vercel.live","https://vercel.com"],frame:["https://vercel.live/"],font:["https://vercel.live","https://assets.vercel.com"],style:["https://vercel.live"]}},D=z;function H({isDevelopment:t,cspReporting:e,dynamicScriptCsp:s={},modules:o={},...n}){let r=[];function c(l){return Object.entries(D).filter(([i])=>o[i]!==!1).flatMap(([,i])=>i[l]??[]).filter(i=>!!i?.trim())}let p=a(c("connect").concat(n.connectionSources??[]).filter(l=>{let i=m(l);return!(!i||i.trim()===""||i.startsWith(d)&&i!==d)})),R=a(c("img").concat(n.pictureSources??[])),P=a(c("frame").concat(n.frameSources??[])),E=a(c("font").concat(n.fontSources??[])),N=a(c("style").concat(n.styleSources??[])),j=a(c("worker").concat(n.workerSources??[])),O=a(c("media").concat(n.mediaSources??[])),U=s==="disabled"?a(c("script").concat(n.scriptSources??[])):a([s.nonce?`'nonce-${s.nonce}'`:"","'strict-dynamic'","'sha256-k2HGvaYkGyYZxOwKGxgE1mr06tZEDcEXNZ5mdcldK0o='",...s.sha??[]].filter(l=>l!=="")),f=`
+    default-src 'self' ${r.join(" ")};
     base-uri 'self';
-    frame-src 'self' ${frameSources.join(" ")};
+    frame-src 'self' ${P.join(" ")};
     frame-ancestors 'self' https://*.posthog.com;
-    script-src 'self' ${scriptSources.concat([isDevelopment ? "'unsafe-eval'" : ""]).join(" ")};
-    worker-src 'self' blob: data: ${workerSources.join(" ")};
-    font-src 'self' ${fontSources.join(" ")};
-    style-src 'self' ${styleSources.join(" ")} 'unsafe-inline';
-    img-src 'self' data: ${pictureSources.join(" ")};
-    connect-src 'self' ${connectionSources.join(" ")};
-    media-src 'self' ${mediaSources.join(" ")};
-  `;
-  if (cspReporting) {
-    cspHeader += `
-    report-uri ${cspReporting};
+    script-src 'self' ${U.concat([t?"'unsafe-eval'":""]).join(" ")};
+    worker-src 'self' blob: data: ${j.join(" ")};
+    font-src 'self' ${E.join(" ")};
+    style-src 'self' ${N.join(" ")} 'unsafe-inline';
+    img-src 'self' data: ${R.join(" ")};
+    connect-src 'self' ${p.join(" ")};
+    media-src 'self' ${O.join(" ")};
+  `;return e&&(f+=`
+    report-uri ${e};
     report-to csp-endpoint;
-    `;
-  }
-  return cspHeader.replace(/\s{2,}/g, " ").trim();
-}
-var staticPictureSources = [
-  // Only add image delivery URL if it exists and can be processed
-  `${imageBaseUrl}/`,
-  "https://raw.githubusercontent.com/berachain/metadata/",
-  "https://assets.coingecko.com/coins/images/",
-  "https://berachain.ghost.io/content/images/"
-].filter((url) => {
-  if (!url || url.trim() === "") {
-    return false;
-  }
-  return true;
-});
-function cspMiddleware({
-  response,
-  csp
-}) {
-  const sentryCspEndpoint = getSentryKeys()?.cspEndpoint;
-  const nonce = csp?.dynamicScriptCsp !== "disabled" ? csp?.dynamicScriptCsp?.nonce ?? Buffer.from(crypto.randomUUID()).toString("base64") : void 0;
-  const isDevelopment = process.env.NODE_ENV === "development";
-  const headers = [
-    {
-      key: "Content-Security-Policy",
-      value: getContentSecurityPolicy({
-        ...csp,
-        dynamicScriptCsp: csp?.dynamicScriptCsp === "disabled" ? csp.dynamicScriptCsp : {
-          ...csp?.dynamicScriptCsp,
-          nonce
-        },
-        isDevelopment,
-        cspReporting: sentryCspEndpoint?.toString()
-      })
-    },
-    {
-      key: "X-Frame-Options",
-      value: "DENY"
-    },
-    {
-      key: "X-Content-Type-Options",
-      value: "nosniff"
-    },
-    {
-      key: "X-Nonce",
-      value: nonce
-    }
-  ];
-  if (sentryCspEndpoint) {
-    headers.push({
-      key: "Reporting-To",
-      value: `{"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"${sentryCspEndpoint}"}],"include_subdomains":true}"`
-    });
-    headers.push({
-      key: "Reporting-Endpoints",
-      value: `csp-endpoint="${sentryCspEndpoint}"`
-    });
-  }
-  for (const header of headers) {
-    if (!header.value) {
-      continue;
-    }
-    response.headers.set(header.key, header.value);
-  }
-  return response;
-}
-export {
-  cspMiddleware,
-  getContentSecurityPolicy,
-  headerSourceModules,
-  staticPictureSources
-};
+    `),f.replace(/\s{2,}/g," ").trim()}var Z=[`${h}/`,"https://raw.githubusercontent.com/berachain/metadata/","https://assets.coingecko.com/coins/images/","https://berachain.ghost.io/content/images/"].filter(t=>!(!t||t.trim()===""));function G({response:t,csp:e}){let s=e?.dynamicScriptCsp!=="disabled"?e?.dynamicScriptCsp?.nonce??Buffer.from(crypto.randomUUID()).toString("base64"):void 0,o=B({...e,dynamicScriptCsp:e?.dynamicScriptCsp==="disabled"?e.dynamicScriptCsp:{...e?.dynamicScriptCsp,nonce:s}});for(let n of o)n.value&&t.headers.set(n.key,n.value);return t}function B(t){let e=$()?.cspEndpoint,s=t?.dynamicScriptCsp??"disabled",o=s==="disabled"?void 0:s.nonce,n=process.env.NODE_ENV==="development",r=[{key:"Content-Security-Policy",value:H({...t,dynamicScriptCsp:s,isDevelopment:n,cspReporting:e?.toString()})},{key:"X-Frame-Options",value:"DENY"},{key:"X-Content-Type-Options",value:"nosniff"}];return o&&r.push({key:"X-Nonce",value:o}),e&&(r.push({key:"Report-To",value:JSON.stringify({group:"csp-endpoint",max_age:10886400,endpoints:[{url:e}],include_subdomains:!0})}),r.push({key:"Reporting-Endpoints",value:`csp-endpoint="${e}"`})),r}export{B as cspHeaders,G as cspMiddleware,H as getContentSecurityPolicy,D as headerSourceModules,Z as staticPictureSources};

package/dist/internal/index.cjs

@@ -1,37 +1 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});
-
-
-
-var _chunkG446M2AVcjs = require('../chunk-G446M2AV.cjs');
-require('../chunk-MNIORAK3.cjs');
-require('../chunk-4AMLYLHZ.cjs');
-
-
-
-
-
-
-
-
-
-
-var _chunkAU3LYJABcjs = require('../chunk-AU3LYJAB.cjs');
-
-
-var _chunkEYYJ2UZTcjs = require('../chunk-EYYJ2UZT.cjs');
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-exports.ChainId = _chunkEYYJ2UZTcjs.ChainId; exports.alchemyJsonRpcUrl = _chunkAU3LYJABcjs.alchemyJsonRpcUrl; exports.appConfig = _chunkG446M2AVcjs.appConfig; exports.chainConfigs = _chunkG446M2AVcjs.chainConfigs; exports.chainId = _chunkAU3LYJABcjs.defaultChainId; exports.config = _chunkG446M2AVcjs.config; exports.currentDapp = _chunkAU3LYJABcjs.currentDapp; exports.defaultChainId = _chunkAU3LYJABcjs.defaultChainId; exports.getRpcUrls = _chunkAU3LYJABcjs.getRpcUrls; exports.goldskyBaseUrl = _chunkAU3LYJABcjs.goldskyBaseUrl; exports.imageBaseUrl = _chunkAU3LYJABcjs.imageBaseUrl; exports.jsonRpcUrl = _chunkAU3LYJABcjs.jsonRpcUrl; exports.privateRcpUrl = _chunkAU3LYJABcjs.privateRcpUrl; exports.publicJsonRpcUrl = _chunkAU3LYJABcjs.publicJsonRpcUrl;
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});var _chunkX5MTSC5Tcjs = require('../chunk-X5MTSC5T.cjs');require('../chunk-MW34QRNX.cjs');require('../chunk-HJ25KNL4.cjs');var _chunk6CZTBBJTcjs = require('../chunk-6CZTBBJT.cjs');var _chunk2OLL4MUYcjs = require('../chunk-2OLL4MUY.cjs');exports.ChainId = _chunk2OLL4MUYcjs.a; exports.alchemyJsonRpcUrl = _chunk6CZTBBJTcjs.l; exports.appConfig = _chunkX5MTSC5Tcjs.b; exports.chainConfigs = _chunkX5MTSC5Tcjs.a; exports.chainId = _chunk6CZTBBJTcjs.a; exports.config = _chunkX5MTSC5Tcjs.c; exports.currentDapp = _chunk6CZTBBJTcjs.f; exports.defaultChainId = _chunk6CZTBBJTcjs.a; exports.getRpcUrls = _chunk6CZTBBJTcjs.i; exports.goldskyBaseUrl = _chunk6CZTBBJTcjs.h; exports.imageBaseUrl = _chunk6CZTBBJTcjs.g; exports.jsonRpcUrl = _chunk6CZTBBJTcjs.k; exports.privateRcpUrl = _chunk6CZTBBJTcjs.m; exports.publicJsonRpcUrl = _chunk6CZTBBJTcjs.j;

package/dist/internal/index.mjs

@@ -1,37 +1 @@
-import {
-  appConfig,
-  chainConfigs,
-  config
-} from "../chunk-GFHZDTK3.mjs";
-import "../chunk-UKXTPLZ5.mjs";
-import "../chunk-4DGMTEOQ.mjs";
-import {
-  alchemyJsonRpcUrl,
-  currentDapp,
-  defaultChainId,
-  getRpcUrls,
-  goldskyBaseUrl,
-  imageBaseUrl,
-  jsonRpcUrl,
-  privateRcpUrl,
-  publicJsonRpcUrl
-} from "../chunk-VWRKCGMU.mjs";
-import {
-  ChainId
-} from "../chunk-KJXYSGNH.mjs";
-export {
-  ChainId,
-  alchemyJsonRpcUrl,
-  appConfig,
-  chainConfigs,
-  defaultChainId as chainId,
-  config,
-  currentDapp,
-  defaultChainId,
-  getRpcUrls,
-  goldskyBaseUrl,
-  imageBaseUrl,
-  jsonRpcUrl,
-  privateRcpUrl,
-  publicJsonRpcUrl
-};
+import{a as k,b as l,c as m}from"../chunk-QHBQ2EN5.mjs";import"../chunk-QYM6VRYU.mjs";import"../chunk-2GCBWNKH.mjs";import{a as b,f as c,g as d,h as e,i as f,j as g,k as h,l as i,m as j}from"../chunk-2RLHVELA.mjs";import{a}from"../chunk-MS6UGFXI.mjs";export{a as ChainId,i as alchemyJsonRpcUrl,l as appConfig,k as chainConfigs,b as chainId,m as config,c as currentDapp,b as defaultChainId,f as getRpcUrls,e as goldskyBaseUrl,d as imageBaseUrl,h as jsonRpcUrl,j as privateRcpUrl,g as publicJsonRpcUrl};

package/dist/internal/maintenance.cjs

@@ -1,24 +1 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/internal/maintenance.ts
-var _server = require('next/server');
-var DEFAULT_MAINTENANCE_EXEMPT_PATHS = [
-  "/maintenance",
-  "/_next",
-  "/api"
-];
-function checkMaintenanceMode(req, config) {
-  const {
-    isMaintenance,
-    exemptPaths = DEFAULT_MAINTENANCE_EXEMPT_PATHS,
-    maintenancePath = "/maintenance"
-  } = config;
-  if (isMaintenance && !exemptPaths.some((path) => req.nextUrl.pathname.startsWith(path))) {
-    return _server.NextResponse.redirect(new URL(maintenancePath, req.url), {
-      status: 307
-    });
-  }
-  return null;
-}
-
-
-
-exports.DEFAULT_MAINTENANCE_EXEMPT_PATHS = DEFAULT_MAINTENANCE_EXEMPT_PATHS; exports.checkMaintenanceMode = checkMaintenanceMode;
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});var _server = require('next/server');var o=["/maintenance","/_next","/api"];function p(e,n){let{isMaintenance:t,exemptPaths:a=o,maintenancePath:i="/maintenance"}=n;return t&&!a.some(s=>e.nextUrl.pathname.startsWith(s))?_server.NextResponse.redirect(new URL(i,e.url),{status:307}):null}exports.DEFAULT_MAINTENANCE_EXEMPT_PATHS = o; exports.checkMaintenanceMode = p;

package/dist/internal/maintenance.mjs

@@ -1,24 +1 @@
-// src/internal/maintenance.ts
-import { NextResponse } from "next/server";
-var DEFAULT_MAINTENANCE_EXEMPT_PATHS = [
-  "/maintenance",
-  "/_next",
-  "/api"
-];
-function checkMaintenanceMode(req, config) {
-  const {
-    isMaintenance,
-    exemptPaths = DEFAULT_MAINTENANCE_EXEMPT_PATHS,
-    maintenancePath = "/maintenance"
-  } = config;
-  if (isMaintenance && !exemptPaths.some((path) => req.nextUrl.pathname.startsWith(path))) {
-    return NextResponse.redirect(new URL(maintenancePath, req.url), {
-      status: 307
-    });
-  }
-  return null;
-}
-export {
-  DEFAULT_MAINTENANCE_EXEMPT_PATHS,
-  checkMaintenanceMode
-};
+import{NextResponse as c}from"next/server";var o=["/maintenance","/_next","/api"];function p(e,n){let{isMaintenance:t,exemptPaths:a=o,maintenancePath:i="/maintenance"}=n;return t&&!a.some(s=>e.nextUrl.pathname.startsWith(s))?c.redirect(new URL(i,e.url),{status:307}):null}export{o as DEFAULT_MAINTENANCE_EXEMPT_PATHS,p as checkMaintenanceMode};