@berachain/config 0.2.8-beta.1 → 0.2.8

package/dist/internal/header-sources.cjs

@@ -1,412 +1,16 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
-
-
-var _chunkB2BTOQVPcjs = require('../chunk-B2BTOQVP.cjs');
-
-
-var _chunkYT7WZDGIcjs = require('../chunk-YT7WZDGI.cjs');
-
-
-var _chunkFEDP4MQEcjs = require('../chunk-FEDP4MQE.cjs');
-require('../chunk-CBAAKY4N.cjs');
-require('../chunk-DEP7BIPJ.cjs');
-
-
-
-
-
-
-
-
-var _chunkAU3LYJABcjs = require('../chunk-AU3LYJAB.cjs');
-require('../chunk-EYYJ2UZT.cjs');
-
-// src/internal/dedupeCspSources.ts
-function parseSource(raw) {
-  const schemeSplit = raw.indexOf("://");
-  if (schemeSplit === -1) {
-    return void 0;
-  }
-  const scheme = raw.slice(0, schemeSplit).toLowerCase();
-  const rest = raw.slice(schemeSplit + 3);
-  const pathStart = rest.indexOf("/");
-  const host = (pathStart === -1 ? rest : rest.slice(0, pathStart)).toLowerCase();
-  const path = pathStart === -1 ? "/" : rest.slice(pathStart);
-  if (!host) {
-    return void 0;
-  }
-  return { raw, scheme, host, path };
-}
-function hostMatches(patternHost, targetHost) {
-  if (!patternHost.startsWith("*.")) {
-    return patternHost === targetHost;
-  }
-  const suffix = patternHost.slice(1);
-  return targetHost.endsWith(suffix) && targetHost.length > suffix.length;
-}
-function covers(pattern, target) {
-  if (pattern.scheme !== target.scheme) {
-    return false;
-  }
-  if (!hostMatches(pattern.host, target.host)) {
-    return false;
-  }
-  if (pattern.path.endsWith("/")) {
-    return target.path.startsWith(pattern.path);
-  }
-  return target.path === pattern.path;
-}
-function dedupeCspSources(sources) {
-  const parsed = sources.map((raw) => ({ raw, parsed: parseSource(raw) }));
-  return parsed.filter(({ parsed: target }, i) => {
-    if (!target) {
-      return true;
-    }
-    return !parsed.some(({ parsed: pattern }, j) => {
-      if (i === j || !pattern) {
-        return false;
-      }
-      if (!covers(pattern, target)) {
-        return false;
-      }
-      if (covers(target, pattern)) {
-        return j < i;
-      }
-      return true;
-    });
-  }).map(({ raw }) => raw);
-}
-
-// src/internal/sentry/getSentryKeys.ts
-function getSentryKeys({
-  dsn = process.env.NEXT_PUBLIC_SENTRY_DSN
-} = {}) {
-  if (!dsn) {
-    return void 0;
-  }
-  const re = /^(?:https:\/\/)([A-z0-9]{32})(?::{0,1})([A-z0-9]*)(?:@)(o[a-z0-9]+)(?:\.ingest\.us\.sentry\.io)\/([0-9]{16})/i;
-  const match = _optionalChain([dsn, 'optionalAccess', _ => _.match, 'call', _2 => _2(re)]);
-  if (!match) {
-    return void 0;
-  }
-  const [
-    ,
-    key,
-    // this is a secret stored in a deprecated dns format
-    deprecatedSecret,
-    org,
-    projectId
-  ] = match;
-  const cspEndpoint = new URL(
-    `https://${org}.ingest.us.sentry.io/api/${projectId}/security/?sentry_key=${key}`
-  );
-  cspEndpoint.searchParams.set("sentry_key", key);
-  cspEndpoint.searchParams.set("sentry_env", _chunkB2BTOQVPcjs.sentryEnvironment);
-  cspEndpoint.searchParams.set("sentry_release", _chunkB2BTOQVPcjs.sentryRelease);
-  return {
-    dsn: match[0],
-    projectId,
-    deprecatedSecret: deprecatedSecret || void 0,
-    cspEndpoint,
-    org,
-    publicKey: match[1]
-  };
-}
-
-// src/internal/header-sources.ts
-var config = _chunkFEDP4MQEcjs.chainConfigs[_chunkAU3LYJABcjs.defaultChainId];
-var modules = {
-  berachain: {
-    connect: [
-      "https://*.berachain.com/",
-      // staging hosts are only reachable outside production
-      _chunkAU3LYJABcjs.isProduction ? null : "https://*.berachain-staging.com/",
-      "https://raw.githubusercontent.com/berachain/metadata/",
-      `${_chunkAU3LYJABcjs.imageBaseUrl}/`,
-      "https://*.quiknode.pro",
-      // Subgraph queries are served by same-origin typed REST endpoints under
-      // /api/honey/* and /api/pol/* (covered by 'self'), not direct browser
-      // requests to the upstream URLs.
-      config.pol.bribeBoostApi,
-      _chunkYT7WZDGIcjs.getUriFromLink.call(void 0, config.beep),
-      _chunkYT7WZDGIcjs.getUriFromLink.call(void 0, config.api),
-      _chunkAU3LYJABcjs.jsonRpcUrl,
-      _chunkAU3LYJABcjs.publicJsonRpcUrl,
-      _chunkAU3LYJABcjs.alchemyJsonRpcUrl,
-      "https://api.routescan.io/v2/network/"
-    ],
-    img: [
-      // trailing slash so sub-paths (e.g. /bend-curators/x.png/public) match;
-      // CSP path-matches exactly without it
-      `${_chunkAU3LYJABcjs.imageBaseUrl}/`,
-      "https://raw.githubusercontent.com/berachain/metadata/"
-    ]
-  },
-  beranames: {
-    connect: [
-      // avatars
-      "https://beranames-assets-berachain.s3.eu-central-003.backblazeb2.com/"
-    ],
-    img: [
-      "https://beranames-assets-berachain.s3.eu-central-003.backblazeb2.com/"
-    ]
-  },
-  swapAggregators: {
-    connect: [
-      // empty on chains without a proxy — omit rather than emit a bare "/"
-      config.bex.aggregatorsProxyUrl ? `${config.bex.aggregatorsProxyUrl}/` : null,
-      "https://open-api.openocean.finance/",
-      "https://api.haiku.trade/",
-      "https://api.fly.trade/",
-      "https://api.enso.finance/",
-      "https://api.enso.build/",
-      // zaps
-      "https://api.relay.link/"
-    ]
-  },
-  walletConnect: {
-    connect: [
-      "wss://relay.walletconnect.com/",
-      "wss://relay.walletconnect.org/",
-      "https://verify.walletconnect.org/v3/public-key"
-    ],
-    frame: [
-      "https://verify.walletconnect.com/",
-      "https://verify.walletconnect.org/"
-    ]
-  },
-  coinbaseWallet: {
-    connect: [
-      "wss://www.walletlink.org/rpc",
-      "https://www.walletlink.org/events",
-      "https://chain-proxy.wallet.coinbase.com/"
-    ]
-  },
-  metamask: {
-    connect: [
-      "wss://metamask-sdk.api.cx.metamask.io/socket.io/",
-      "https://metamask-sdk.api.cx.metamask.io"
-    ]
-  },
-  thirdweb: {
-    connect: ["https://*.thirdweb.com/"],
-    // export pk iframe
-    frame: ["https://embedded-wallet.thirdweb.com/"]
-  },
-  dynamic: {
-    connect: ["https://app.dynamicauth.com/api"]
-  },
-  binance: {
-    connect: ["https://wallet.binance.com/tonbridge/"]
-  },
-  tron: {
-    connect: ["https://api.trongrid.io/"]
-  },
-  layerZero: {
-    connect: [
-      "https://*.layerzero-scan.com/",
-      "https://scan.layerzero-api.com/"
-    ]
-  },
-  pelagus: {
-    img: ["https://pelaguswallet.io/docs/img"]
-  },
-  externalRpcs: {
-    // non-Berachain chains read by wallets/bridges
-    connect: [
-      "https://api.avax.network/ext/bc/C/rpc",
-      "https://polygon-rpc.com",
-      "https://mainnet.optimism.io/",
-      "https://arb1.arbitrum.io/rpc",
-      "https://mainnet.base.org/",
-      "https://eth.merkle.io"
-    ]
-  },
-  tokenIcons: {
-    img: [
-      "https://assets.coingecko.com/coins/images/",
-      "https://coin-images.coingecko.com/coins/images/",
-      "https://icons.llama.fi/",
-      "https://icons.llamao.fi/",
-      "https://static.debank.com/",
-      "https://raw.githubusercontent.com/trustwallet/assets/"
-    ]
-  },
-  bend: {
-    img: ["https://cdn.morpho.org/"]
-  },
-  pyth: {
-    connect: ["https://hermes.pyth.network/v2/"]
-  },
-  fonts: {
-    font: [
-      "https://cdn.jsdelivr.net/npm/@fontsource/",
-      // collected by sentry (needed by browser extensions)
-      "https://fonts.gstatic.com",
-      "https://use.typekit.net/"
-    ]
-  },
-  sentry: {
-    // csp reporting
-    connect: ["https://*.sentry.io/"]
-  },
-  posthog: {
-    // toolbar + heatmaps
-    connect: ["https://*.posthog.com"],
-    img: ["https://*.posthog.com"],
-    frame: ["https://*.posthog.com"],
-    font: ["https://*.posthog.com"],
-    style: ["https://*.posthog.com"],
-    media: ["https://*.posthog.com"]
-  },
-  vercel: {
-    // toolbar + live comments
-    connect: ["https://vercel.live", "wss://ws-us3.pusher.com"],
-    img: ["https://vercel.live", "https://vercel.com"],
-    frame: ["https://vercel.live/"],
-    font: ["https://vercel.live", "https://assets.vercel.com"],
-    style: ["https://vercel.live"]
-  }
-};
-var headerSourceModules = modules;
-function getContentSecurityPolicy({
-  isDevelopment,
-  cspReporting,
-  dynamicScriptCsp = {},
-  modules: enabledModules = {},
-  ...args
-}) {
-  const defaultSrc = [];
-  function collect(directive) {
-    return Object.entries(headerSourceModules).filter(
-      ([module]) => enabledModules[module] !== false
-    ).flatMap(([, sources]) => _nullishCoalesce(sources[directive], () => ( []))).filter((url) => Boolean(_optionalChain([url, 'optionalAccess', _3 => _3.trim, 'call', _4 => _4()])));
-  }
-  const connectionSources = dedupeCspSources(
-    collect("connect").concat(_nullishCoalesce(args.connectionSources, () => ( []))).filter((link) => {
-      const url = _chunkYT7WZDGIcjs.getUriFromLink.call(void 0, link);
-      if (!url || url.trim() === "") {
-        return false;
-      }
-      if (url.startsWith(_chunkAU3LYJABcjs.goldskyBaseUrl) && url !== _chunkAU3LYJABcjs.goldskyBaseUrl) {
-        return false;
-      }
-      return true;
-    })
-  );
-  const pictureSources = dedupeCspSources(
-    collect("img").concat(_nullishCoalesce(args.pictureSources, () => ( [])))
-  );
-  const frameSources = dedupeCspSources(
-    collect("frame").concat(_nullishCoalesce(args.frameSources, () => ( [])))
-  );
-  const fontSources = dedupeCspSources(
-    collect("font").concat(_nullishCoalesce(args.fontSources, () => ( [])))
-  );
-  const styleSources = dedupeCspSources(
-    collect("style").concat(_nullishCoalesce(args.styleSources, () => ( [])))
-  );
-  const workerSources = dedupeCspSources(
-    collect("worker").concat(_nullishCoalesce(args.workerSources, () => ( [])))
-  );
-  const mediaSources = dedupeCspSources(
-    collect("media").concat(_nullishCoalesce(args.mediaSources, () => ( [])))
-  );
-  const scriptSources = dynamicScriptCsp === "disabled" ? dedupeCspSources(collect("script").concat(_nullishCoalesce(args.scriptSources, () => ( [])))) : dedupeCspSources(
-    [
-      dynamicScriptCsp.nonce ? `'nonce-${dynamicScriptCsp.nonce}'` : "",
-      "'strict-dynamic'",
-      "'sha256-k2HGvaYkGyYZxOwKGxgE1mr06tZEDcEXNZ5mdcldK0o='",
-      ..._nullishCoalesce(dynamicScriptCsp.sha, () => ( []))
-    ].filter((source) => source !== "")
-  );
-  let cspHeader = `
-    default-src 'self' ${defaultSrc.join(" ")};
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }var _chunkHLFO7V5Icjs = require('../chunk-HLFO7V5I.cjs');var _chunkDUO7UEQDcjs = require('../chunk-DUO7UEQD.cjs');var _chunkX5MTSC5Tcjs = require('../chunk-X5MTSC5T.cjs');require('../chunk-MW34QRNX.cjs');require('../chunk-HJ25KNL4.cjs');var _chunk6CZTBBJTcjs = require('../chunk-6CZTBBJT.cjs');require('../chunk-2OLL4MUY.cjs');function _(t){let e=t.indexOf("://");if(e===-1)return;let s=t.slice(0,e).toLowerCase(),o=t.slice(e+3),n=o.indexOf("/"),r=(n===-1?o:o.slice(0,n)).toLowerCase(),c=n===-1?"/":o.slice(n);if(r)return{raw:t,scheme:s,host:r,path:c}}function M(t,e){if(!t.startsWith("*."))return t===e;let s=t.slice(1);return e.endsWith(s)&&e.length>s.length}function C(t,e){return t.scheme!==e.scheme||!M(t.host,e.host)?!1:t.path.endsWith("/")?e.path.startsWith(t.path):e.path===t.path}function a(t){let e=t.map(s=>({raw:s,parsed:_(s)}));return e.filter(({parsed:s},o)=>s?!e.some(({parsed:n},r)=>o===r||!n||!C(n,s)?!1:C(s,n)?r<o:!0):!0).map(({raw:s})=>s)}function $({dsn:t=process.env.NEXT_PUBLIC_SENTRY_DSN}={}){if(!t)return;let e=/^(?:https:\/\/)([A-z0-9]{32})(?::{0,1})([A-z0-9]*)(?:@)(o[a-z0-9]+)(?:\.ingest\.us\.sentry\.io)\/([0-9]{16})/i,s=_optionalChain([t, 'optionalAccess', _2 => _2.match, 'call', _3 => _3(e)]);if(!s)return;let[,o,n,r,c]=s,p=new URL(`https://${r}.ingest.us.sentry.io/api/${c}/security/?sentry_key=${o}`);return p.searchParams.set("sentry_key",o),p.searchParams.set("sentry_env",_chunkHLFO7V5Icjs.a),p.searchParams.set("sentry_release",_chunkHLFO7V5Icjs.c),{dsn:s[0],projectId:c,deprecatedSecret:n||void 0,cspEndpoint:p,org:r,publicKey:s[1]}}var u=_chunkX5MTSC5Tcjs.a[_chunk6CZTBBJTcjs.a],z={berachain:{connect:["https://*.berachain.com/",_chunk6CZTBBJTcjs.b?null:"https://*.berachain-staging.com/","https://raw.githubusercontent.com/berachain/metadata/",`${_chunk6CZTBBJTcjs.g}/`,"https://*.quiknode.pro/",u.pol.bribeBoostApi,_chunkDUO7UEQDcjs.a.call(void 0, u.beep),_chunkDUO7UEQDcjs.a.call(void 0, u.api),_chunk6CZTBBJTcjs.k,_chunk6CZTBBJTcjs.j,_chunk6CZTBBJTcjs.l,"https://api.routescan.io/v2/network/"],img:[`${_chunk6CZTBBJTcjs.g}/`,"https://raw.githubusercontent.com/berachain/metadata/"]},beranames:{connect:["https://beranames-assets-berachain.s3.eu-central-003.backblazeb2.com/"],img:["https://beranames-assets-berachain.s3.eu-central-003.backblazeb2.com/"]},swapAggregators:{connect:[u.bex.aggregatorsProxyUrl?`${u.bex.aggregatorsProxyUrl}/`:null,"https://open-api.openocean.finance/","https://api.haiku.trade/","https://api.fly.trade/","https://api.enso.finance/","https://api.enso.build/","https://api.relay.link/"]},walletConnect:{connect:["wss://relay.walletconnect.com/","wss://relay.walletconnect.org/","https://verify.walletconnect.org/v3/public-key"],frame:["https://verify.walletconnect.com/","https://verify.walletconnect.org/"]},coinbaseWallet:{connect:["wss://www.walletlink.org/rpc","https://www.walletlink.org/events","https://chain-proxy.wallet.coinbase.com/"]},metamask:{connect:["wss://metamask-sdk.api.cx.metamask.io/socket.io/","https://metamask-sdk.api.cx.metamask.io"]},thirdweb:{connect:["https://*.thirdweb.com/"],frame:["https://embedded-wallet.thirdweb.com/"]},dynamic:{connect:["https://app.dynamicauth.com/api"]},binance:{connect:["https://wallet.binance.com/tonbridge/"]},tron:{connect:["https://api.trongrid.io/"]},layerZero:{connect:["https://*.layerzero-scan.com/","https://scan.layerzero-api.com/"]},pelagus:{img:["https://pelaguswallet.io/docs/img"]},externalRpcs:{connect:["https://api.avax.network/ext/bc/C/rpc","https://polygon-rpc.com","https://mainnet.optimism.io/","https://arb1.arbitrum.io/rpc","https://mainnet.base.org/","https://eth.merkle.io"]},tokenIcons:{img:["https://assets.coingecko.com/coins/images/","https://coin-images.coingecko.com/coins/images/","https://icons.llama.fi/","https://icons.llamao.fi/","https://static.debank.com/","https://raw.githubusercontent.com/trustwallet/assets/"]},bend:{img:["https://cdn.morpho.org/"]},pyth:{connect:["https://hermes.pyth.network/v2/"]},fonts:{font:["https://cdn.jsdelivr.net/npm/@fontsource/","https://fonts.gstatic.com","https://use.typekit.net/"]},sentry:{connect:["https://*.sentry.io/"]},posthog:{connect:["https://*.posthog.com"],img:["https://*.posthog.com"],frame:["https://*.posthog.com"],font:["https://*.posthog.com"],style:["https://*.posthog.com"],media:["https://*.posthog.com"]},vercel:{connect:["https://vercel.live","wss://ws-us3.pusher.com"],img:["https://vercel.live","https://vercel.com"],frame:["https://vercel.live/"],font:["https://vercel.live","https://assets.vercel.com"],style:["https://vercel.live"]}},D= exports.headerSourceModules =z;function H({isDevelopment:t,cspReporting:e,dynamicScriptCsp:s={},modules:o={},...n}){let r=[];function c(l){return Object.entries(D).filter(([i])=>o[i]!==!1).flatMap(([,i])=>_nullishCoalesce(i[l], () => ([]))).filter(i=>!!_optionalChain([i, 'optionalAccess', _4 => _4.trim, 'call', _5 => _5()]))}let p=a(c("connect").concat(_nullishCoalesce(n.connectionSources, () => ([]))).filter(l=>{let i=_chunkDUO7UEQDcjs.a.call(void 0, l);return!(!i||i.trim()===""||i.startsWith(_chunk6CZTBBJTcjs.h)&&i!==_chunk6CZTBBJTcjs.h)})),R=a(c("img").concat(_nullishCoalesce(n.pictureSources, () => ([])))),P=a(c("frame").concat(_nullishCoalesce(n.frameSources, () => ([])))),E=a(c("font").concat(_nullishCoalesce(n.fontSources, () => ([])))),N=a(c("style").concat(_nullishCoalesce(n.styleSources, () => ([])))),j=a(c("worker").concat(_nullishCoalesce(n.workerSources, () => ([])))),O=a(c("media").concat(_nullishCoalesce(n.mediaSources, () => ([])))),U=s==="disabled"?a(c("script").concat(_nullishCoalesce(n.scriptSources, () => ([])))):a([s.nonce?`'nonce-${s.nonce}'`:"","'strict-dynamic'","'sha256-k2HGvaYkGyYZxOwKGxgE1mr06tZEDcEXNZ5mdcldK0o='",..._nullishCoalesce(s.sha, () => ([]))].filter(l=>l!=="")),f=`
+    default-src 'self' ${r.join(" ")};
     base-uri 'self';
-    frame-src 'self' ${frameSources.join(" ")};
+    frame-src 'self' ${P.join(" ")};
     frame-ancestors 'self' https://*.posthog.com;
-    script-src 'self' ${scriptSources.concat([isDevelopment ? "'unsafe-eval'" : ""]).join(" ")};
-    worker-src 'self' blob: data: ${workerSources.join(" ")};
-    font-src 'self' ${fontSources.join(" ")};
-    style-src 'self' ${styleSources.join(" ")} 'unsafe-inline';
-    img-src 'self' data: ${pictureSources.join(" ")};
-    connect-src 'self' ${connectionSources.join(" ")};
-    media-src 'self' ${mediaSources.join(" ")};
-  `;
-  if (cspReporting) {
-    cspHeader += `
-    report-uri ${cspReporting};
+    script-src 'self' ${U.concat([t?"'unsafe-eval'":""]).join(" ")};
+    worker-src 'self' blob: data: ${j.join(" ")};
+    font-src 'self' ${E.join(" ")};
+    style-src 'self' ${N.join(" ")} 'unsafe-inline';
+    img-src 'self' data: ${R.join(" ")};
+    connect-src 'self' ${p.join(" ")};
+    media-src 'self' ${O.join(" ")};
+  `;return e&&(f+=`
+    report-uri ${e};
     report-to csp-endpoint;
-    `;
-  }
-  return cspHeader.replace(/\s{2,}/g, " ").trim();
-}
-var staticPictureSources = [
-  // Only add image delivery URL if it exists and can be processed
-  `${_chunkAU3LYJABcjs.imageBaseUrl}/`,
-  "https://raw.githubusercontent.com/berachain/metadata/",
-  "https://assets.coingecko.com/coins/images/",
-  "https://berachain.ghost.io/content/images/"
-].filter((url) => {
-  if (!url || url.trim() === "") {
-    return false;
-  }
-  return true;
-});
-function cspMiddleware({
-  response,
-  csp
-}) {
-  const sentryCspEndpoint = _optionalChain([getSentryKeys, 'call', _5 => _5(), 'optionalAccess', _6 => _6.cspEndpoint]);
-  const nonce = _optionalChain([csp, 'optionalAccess', _7 => _7.dynamicScriptCsp]) !== "disabled" ? _nullishCoalesce(_optionalChain([csp, 'optionalAccess', _8 => _8.dynamicScriptCsp, 'optionalAccess', _9 => _9.nonce]), () => ( Buffer.from(crypto.randomUUID()).toString("base64"))) : void 0;
-  const isDevelopment = process.env.NODE_ENV === "development";
-  const headers = [
-    {
-      key: "Content-Security-Policy",
-      value: getContentSecurityPolicy({
-        ...csp,
-        dynamicScriptCsp: _optionalChain([csp, 'optionalAccess', _10 => _10.dynamicScriptCsp]) === "disabled" ? csp.dynamicScriptCsp : {
-          ..._optionalChain([csp, 'optionalAccess', _11 => _11.dynamicScriptCsp]),
-          nonce
-        },
-        isDevelopment,
-        cspReporting: _optionalChain([sentryCspEndpoint, 'optionalAccess', _12 => _12.toString, 'call', _13 => _13()])
-      })
-    },
-    {
-      key: "X-Frame-Options",
-      value: "DENY"
-    },
-    {
-      key: "X-Content-Type-Options",
-      value: "nosniff"
-    },
-    {
-      key: "X-Nonce",
-      value: nonce
-    }
-  ];
-  if (sentryCspEndpoint) {
-    headers.push({
-      key: "Reporting-To",
-      value: `{"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"${sentryCspEndpoint}"}],"include_subdomains":true}"`
-    });
-    headers.push({
-      key: "Reporting-Endpoints",
-      value: `csp-endpoint="${sentryCspEndpoint}"`
-    });
-  }
-  for (const header of headers) {
-    if (!header.value) {
-      continue;
-    }
-    response.headers.set(header.key, header.value);
-  }
-  return response;
-}
-
-
-
-
-
-exports.cspMiddleware = cspMiddleware; exports.getContentSecurityPolicy = getContentSecurityPolicy; exports.headerSourceModules = headerSourceModules; exports.staticPictureSources = staticPictureSources;
+    `),f.replace(/\s{2,}/g," ").trim()}var Z=[`${_chunk6CZTBBJTcjs.g}/`,"https://raw.githubusercontent.com/berachain/metadata/","https://assets.coingecko.com/coins/images/","https://berachain.ghost.io/content/images/"].filter(t=>!(!t||t.trim()===""));function G({response:t,csp:e}){let s=_optionalChain([e, 'optionalAccess', _6 => _6.dynamicScriptCsp])!=="disabled"?_nullishCoalesce(_optionalChain([e, 'optionalAccess', _7 => _7.dynamicScriptCsp, 'optionalAccess', _8 => _8.nonce]), () => (Buffer.from(crypto.randomUUID()).toString("base64"))):void 0,o=B({...e,dynamicScriptCsp:_optionalChain([e, 'optionalAccess', _9 => _9.dynamicScriptCsp])==="disabled"?e.dynamicScriptCsp:{..._optionalChain([e, 'optionalAccess', _10 => _10.dynamicScriptCsp]),nonce:s}});for(let n of o)n.value&&t.headers.set(n.key,n.value);return t}function B(t){let e=_optionalChain([$, 'call', _11 => _11(), 'optionalAccess', _12 => _12.cspEndpoint]),s=_nullishCoalesce(_optionalChain([t, 'optionalAccess', _13 => _13.dynamicScriptCsp]), () => ("disabled")),o=s==="disabled"?void 0:s.nonce,n=process.env.NODE_ENV==="development",r=[{key:"Content-Security-Policy",value:H({...t,dynamicScriptCsp:s,isDevelopment:n,cspReporting:_optionalChain([e, 'optionalAccess', _14 => _14.toString, 'call', _15 => _15()])})},{key:"X-Frame-Options",value:"DENY"},{key:"X-Content-Type-Options",value:"nosniff"}];return o&&r.push({key:"X-Nonce",value:o}),e&&(r.push({key:"Report-To",value:JSON.stringify({group:"csp-endpoint",max_age:10886400,endpoints:[{url:e}],include_subdomains:!0})}),r.push({key:"Reporting-Endpoints",value:`csp-endpoint="${e}"`})),r}exports.cspHeaders = B; exports.cspMiddleware = G; exports.getContentSecurityPolicy = H; exports.headerSourceModules = D; exports.staticPictureSources = Z;

package/dist/internal/header-sources.d.ts

@@ -24,7 +24,7 @@ interface HeaderSources {
 }
 declare const modules: {
     readonly berachain: {
-        readonly connect: ["https://*.berachain.com/", "https://*.berachain-staging.com/" | null, "https://raw.githubusercontent.com/berachain/metadata/", "https://imagedelivery.net/qNj7Q3MCke89zoKzav7eDQ/", "https://*.quiknode.pro", string | null, string, string, string, string, string | undefined, "https://api.routescan.io/v2/network/"];
+        readonly connect: ["https://*.berachain.com/", "https://*.berachain-staging.com/" | null, "https://raw.githubusercontent.com/berachain/metadata/", "https://imagedelivery.net/qNj7Q3MCke89zoKzav7eDQ/", "https://*.quiknode.pro/", string | null, string, string, string, string, string | undefined, "https://api.routescan.io/v2/network/"];
         readonly img: ["https://imagedelivery.net/qNj7Q3MCke89zoKzav7eDQ/", "https://raw.githubusercontent.com/berachain/metadata/"];
     };
     readonly beranames: {
@@ -145,5 +145,15 @@ export declare function cspMiddleware({ response, csp, }: {
     /** per-request CSP customization — toggle modules off and/or append extra sources per directive */
     csp?: CspOptions;
 }): NextResponse<unknown>;
+/**
+ * Builds static security headers. Dynamic script CSP is disabled by default;
+ * callers must provide their own nonce to opt into a nonce-based policy.
+ */
+export declare function cspHeaders(
+/** static CSP customization — toggle modules off and/or append extra sources per directive */
+csp?: CspOptions): {
+    key: string;
+    value: string;
+}[];
 export {};
 //# sourceMappingURL=header-sources.d.ts.map

package/dist/internal/header-sources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"header-sources.d.ts","sourceRoot":"","sources":["../../src/internal/header-sources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAiB7D;;;;GAIG;AACH,UAAU,aAAa;IACrB,kBAAkB;IAClB,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC;IAC3C,cAAc;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,iBAAiB;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,QAAA,MAAM,OAAO;;iBAET,OAAO;iBAkBP,GAAG;;;iBAQH,OAAO;iBAIP,GAAG;;;iBAKH,OAAO;;;iBAeP,OAAO;iBAKP,KAAK;;;iBAML,OAAO;;;iBAOP,OAAO;;;iBAMP,OAAO;iBAEP,KAAK;;;iBAGL,OAAO;;;iBAGP,OAAO;;;iBAGP,OAAO;;;iBAGP,OAAO;;;iBAMP,GAAG;;;iBAIH,OAAO;;;iBAUP,GAAG;;;iBAUH,GAAG;;;iBAGH,OAAO;;;iBAGP,IAAI;;;iBASJ,OAAO;;;iBAIP,OAAO;iBACP,GAAG;iBACH,KAAK;iBACL,IAAI;iBACJ,KAAK;iBACL,KAAK;;;iBAIL,OAAO;iBACP,GAAG;iBACH,KAAK;iBACL,IAAI;iBACJ,KAAK;;CAEyC,CAAC;AAEnD,MAAM,MAAM,kBAAkB,GAAG,MAAM,OAAO,OAAO,CAAC;AAEtD;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,wGAAwG;IACxG,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;IACvD;;;;;OAKG;IACH,gBAAgB,CAAC,EACb,UAAU,GACV;QACE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACN,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,EAAE,aAAa,CACjE,CAAC;AAEV,wBAAgB,wBAAwB,CAAC,EACvC,aAAa,EACb,YAAY,EACZ,gBAAqB,EACrB,OAAO,EAAE,cAAmB,EAC5B,GAAG,IAAI,EACR,EAAE,UAAU,GAAG;IACd,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,MAAM,CA0FT;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,EAWvC,CAAC;AAEH,wBAAgB,aAAa,CAAC,EAC5B,QAAQ,EACR,GAAG,GACJ,EAAE;IACD,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,YAAY,CAAC;IACvB,mGAAmG;IACnG,GAAG,CAAC,EAAE,UAAU,CAAC;CAClB,yBA2DA"}
+{"version":3,"file":"header-sources.d.ts","sourceRoot":"","sources":["../../src/internal/header-sources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAiB7D;;;;GAIG;AACH,UAAU,aAAa;IACrB,kBAAkB;IAClB,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC;IAC3C,cAAc;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,iBAAiB;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,QAAA,MAAM,OAAO;;iBAET,OAAO;iBAkBP,GAAG;;;iBAQH,OAAO;iBAIP,GAAG;;;iBAKH,OAAO;;;iBAeP,OAAO;iBAKP,KAAK;;;iBAML,OAAO;;;iBAOP,OAAO;;;iBAMP,OAAO;iBAEP,KAAK;;;iBAGL,OAAO;;;iBAGP,OAAO;;;iBAGP,OAAO;;;iBAGP,OAAO;;;iBAMP,GAAG;;;iBAIH,OAAO;;;iBAUP,GAAG;;;iBAUH,GAAG;;;iBAGH,OAAO;;;iBAGP,IAAI;;;iBASJ,OAAO;;;iBAIP,OAAO;iBACP,GAAG;iBACH,KAAK;iBACL,IAAI;iBACJ,KAAK;iBACL,KAAK;;;iBAIL,OAAO;iBACP,GAAG;iBACH,KAAK;iBACL,IAAI;iBACJ,KAAK;;CAEyC,CAAC;AAEnD,MAAM,MAAM,kBAAkB,GAAG,MAAM,OAAO,OAAO,CAAC;AAEtD;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,wGAAwG;IACxG,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;IACvD;;;;;OAKG;IACH,gBAAgB,CAAC,EACb,UAAU,GACV;QACE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACN,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,EAAE,aAAa,CACjE,CAAC;AAEV,wBAAgB,wBAAwB,CAAC,EACvC,aAAa,EACb,YAAY,EACZ,gBAAqB,EACrB,OAAO,EAAE,cAAmB,EAC5B,GAAG,IAAI,EACR,EAAE,UAAU,GAAG;IACd,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,MAAM,CA0FT;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,EAWvC,CAAC;AAEH,wBAAgB,aAAa,CAAC,EAC5B,QAAQ,EACR,GAAG,GACJ,EAAE;IACD,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,YAAY,CAAC;IACvB,mGAAmG;IACnG,GAAG,CAAC,EAAE,UAAU,CAAC;CAClB,yBAyBA;AAED;;;GAGG;AACH,wBAAgB,UAAU;AACxB,8FAA8F;AAC9F,GAAG,CAAC,EAAE,UAAU;;;IAoDjB"}