@prosopo/load-balancer 2.10.49 → 2.11.0

package/.turbo/turbo-build$colon$cjs.log

@@ -1,5 +1,5 @@
 
-> @prosopo/load-balancer@2.10.49 build:cjs
+> @prosopo/load-balancer@2.11.0 build:cjs
 > NODE_ENV=${NODE_ENV:-development}; vite build --config vite.cjs.config.ts --mode $NODE_ENV
 
 ViteCommonJSConfig: .
@@ -7,8 +7,8 @@ ViteCommonJSConfig: .
   tsConfigPaths: [
     '/home/runner/work/captcha/captcha/packages/common/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/locale/tsconfig.json',
-    '/home/runner/work/captcha/captcha/packages/logger/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/util/tsconfig.json',
+    '/home/runner/work/captcha/captcha/packages/logger/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/types/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/util-crypto/tsconfig.json'
   ]
@@ -17,8 +17,8 @@ ViteCommonJSConfig: .
   externals: [
     '@prosopo/common',
     '@prosopo/locale',
-    '@prosopo/logger',
     '@prosopo/util',
+    '@prosopo/logger',
     '@prosopo/types',
     '@prosopo/util-crypto'
   ]
@@ -27,13 +27,14 @@ ViteCommonJSConfig: .
 vite v8.1.5 building ssr environment for production...
 Bundle build started
 
-✓ 6 modules transformed.
+✓ 7 modules transformed.
 rendering chunks...
 computing gzip size...
 dist/cjs/retry.cjs                   1.13 kB │ gzip: 0.56 kB
-dist/cjs/index.cjs                   1.39 kB │ gzip: 0.39 kB
+dist/cjs/providerUrlOverride.cjs     1.42 kB │ gzip: 0.78 kB
+dist/cjs/index.cjs                   1.63 kB │ gzip: 0.41 kB
 dist/cjs/developmentProviderUrl.cjs  1.81 kB │ gzip: 0.88 kB
-dist/cjs/balancer.cjs                2.08 kB │ gzip: 0.97 kB
-dist/cjs/providers.cjs               5.92 kB │ gzip: 2.04 kB
+dist/cjs/balancer.cjs                4.36 kB │ gzip: 1.90 kB
+dist/cjs/providers.cjs               6.12 kB │ gzip: 2.10 kB
 
-✓ built in 78ms
+✓ built in 67ms

package/.turbo/turbo-build$colon$tsc.log

@@ -1,32 +1,32 @@
 
-> @prosopo/load-balancer@2.10.49 build:tsc
+> @prosopo/load-balancer@2.11.0 build:tsc
 > tsc --build --verbose
 
-11:04:05 AM - Projects in this build: 
+9:05:50 AM - Projects in this build: 
     * ../../dev/config/tsconfig.json
-    * ../locale/tsconfig.json
     * ../util/tsconfig.json
+    * ../locale/tsconfig.json
     * ../logger/tsconfig.json
     * ../util-crypto/tsconfig.json
     * ../types/tsconfig.json
     * ../common/tsconfig.json
     * tsconfig.json
 
-11:04:05 AM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/vite/NodejsPolarsDirnamePlugin.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
+9:05:50 AM - Project '../../dev/config/tsconfig.json' is up to date because newest input '../../dev/config/src/webpack/webpack.config.ts' is older than output '../../dev/config/tsconfig.tsbuildinfo'
 
-11:04:05 AM - Project '../locale/tsconfig.json' is up to date because newest input '../locale/src/process.ts' is older than output '../locale/tsconfig.tsbuildinfo'
+9:05:50 AM - Project '../util/tsconfig.json' is up to date because newest input '../util/src/url.ts' is older than output '../util/tsconfig.tsbuildinfo'
 
-11:04:05 AM - Project '../util/tsconfig.json' is up to date because newest input '../util/src/ofLen.ts' is older than output '../util/tsconfig.tsbuildinfo'
+9:05:50 AM - Project '../locale/tsconfig.json' is up to date because newest input '../locale/src/translationKey.ts' is older than output '../locale/tsconfig.tsbuildinfo'
 
-11:04:05 AM - Project '../logger/tsconfig.json' is up to date because newest input '../logger/src/index.ts' is older than output '../logger/tsconfig.tsbuildinfo'
+9:05:50 AM - Project '../logger/tsconfig.json' is up to date because newest input '../logger/src/index.ts' is older than output '../logger/tsconfig.tsbuildinfo'
 
-11:04:05 AM - Project '../util-crypto/tsconfig.json' is up to date because newest input '../util-crypto/src/types.ts' is older than output '../util-crypto/tsconfig.tsbuildinfo'
+9:05:50 AM - Project '../util-crypto/tsconfig.json' is up to date because newest input '../util-crypto/src/types.ts' is older than output '../util-crypto/tsconfig.tsbuildinfo'
 
-11:04:05 AM - Project '../types/tsconfig.json' is up to date because newest input '../types/src/types.test-d.ts' is older than output '../types/tsconfig.tsbuildinfo'
+9:05:50 AM - Project '../types/tsconfig.json' is up to date because newest input '../types/src/types.test-d.ts' is older than output '../types/tsconfig.tsbuildinfo'
 
-11:04:05 AM - Project '../common/tsconfig.json' is up to date because newest input '../common/src/utils/batches.ts' is older than output '../common/tsconfig.tsbuildinfo'
+9:05:50 AM - Project '../common/tsconfig.json' is up to date because newest input '../common/src/error.ts' is older than output '../common/tsconfig.tsbuildinfo'
 
-11:04:05 AM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
+9:05:50 AM - Project 'tsconfig.json' is out of date because output file 'tsconfig.tsbuildinfo' does not exist
 
-11:04:05 AM - Building project '/home/runner/work/captcha/captcha/packages/load-balancer/tsconfig.json'...
+9:05:50 AM - Building project '/home/runner/work/captcha/captcha/packages/load-balancer/tsconfig.json'...
 

package/.turbo/turbo-build.log

@@ -1,9 +1,9 @@
 
-> @prosopo/load-balancer@2.10.49 build
+> @prosopo/load-balancer@2.11.0 build
 > npm run build:cross-env -- --mode ${NODE_ENV:-development}
 
 
-> @prosopo/load-balancer@2.10.49 build:cross-env
+> @prosopo/load-balancer@2.11.0 build:cross-env
 > vite build --config vite.esm.config.ts --mode production
 
 ViteEsmConfig: .
@@ -11,8 +11,8 @@ ViteEsmConfig: .
   tsConfigPaths: [
     '/home/runner/work/captcha/captcha/packages/common/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/locale/tsconfig.json',
-    '/home/runner/work/captcha/captcha/packages/logger/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/util/tsconfig.json',
+    '/home/runner/work/captcha/captcha/packages/logger/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/types/tsconfig.json',
     '/home/runner/work/captcha/captcha/packages/util-crypto/tsconfig.json'
   ]
@@ -21,8 +21,8 @@ ViteEsmConfig: .
   externals: [
     '@prosopo/common',
     '@prosopo/locale',
-    '@prosopo/logger',
     '@prosopo/util',
+    '@prosopo/logger',
     '@prosopo/types',
     '@prosopo/util-crypto'
   ]
@@ -31,14 +31,15 @@ ViteEsmConfig: .
 vite v8.1.5 building ssr environment for production...
 Bundle build started
 
-✓ 6 modules transformed.
+✓ 7 modules transformed.
 rendering chunks...
 computing gzip size...
 dist/_virtual/_rolldown/runtime.js  0.04 kB │ gzip: 0.06 kB
-dist/index.js                       0.86 kB │ gzip: 0.30 kB
+dist/index.js                       1.00 kB │ gzip: 0.32 kB
 dist/retry.js                       1.09 kB │ gzip: 0.55 kB
+dist/providerUrlOverride.js         1.39 kB │ gzip: 0.77 kB
 dist/developmentProviderUrl.js      1.70 kB │ gzip: 0.87 kB
-dist/balancer.js                    1.88 kB │ gzip: 0.94 kB
-dist/providers.js                   5.64 kB │ gzip: 2.01 kB
+dist/balancer.js                    4.11 kB │ gzip: 1.86 kB
+dist/providers.js                   5.85 kB │ gzip: 2.07 kB
 
-✓ built in 61ms
+✓ built in 62ms

package/CHANGELOG.md

@@ -1,5 +1,87 @@
 # @prosopo/load-balancer
 
+## 2.11.0
+### Minor Changes
+
+- f13bea8: Let a deployment supply its own provider list with `PROSOPO_PROVIDER_LIST`.
+  
+  There was no supported way to point the widget at providers you run. The only lever was
+  `PROSOPO_PROVIDER_URL_DEVELOPMENT`, which is read solely when the environment is `development`, and the widget takes
+  that environment from `NODE_ENV` at build time. So redirecting a bundle meant building it as a development bundle:
+  unminified, ~1.9 MB across chunks instead of ~1.4 MB, with rate limiting implications if anyone copied the same setting
+  onto their provider. Building with `NODE_ENV=production` silently ignored the variable and sent the widget back to
+  Prosopo's fleet, with nothing in the output to say so.
+  
+  `PROSOPO_PROVIDER_LIST` is environment-independent, so `production` stays correct everywhere. It short-circuits both
+  halves of discovery — the `/healthz` call that picks a node, and the list `@prosopo/server` matches a token against —
+  so a self-hosted deployment makes no request to Prosopo at all.
+  
+  Two forms, because one node and several have different needs:
+  
+  ```bash
+  PROSOPO_PROVIDER_LIST=https://captcha1.example.com,https://captcha2.example.com
+  PROSOPO_PROVIDER_LIST='{"one":{"address":"5Abc...","url":"https://captcha1.example.com","datasetId":"","weight":3}}'
+  ```
+  
+  The JSON form is the exact shape `provider-list.prosopo.io` serves, parsed by the same `convertHostedProvider`, so
+  weights and the `ipv4` / `ipv6` sub-lists behave identically. The bare-URL form fills in placeholder `address` and
+  `datasetId`, neither of which is load-bearing on this path — the DNS-routed production path already passes a constant
+  for `address`, and clients stopped sending `datasetId`.
+  
+  Because it returns a list rather than one URL, a multi-provider override gets weighted selection and real failover:
+  `getRandomProviderFromList` can now exclude a node that just errored and pick a different one, which with a single
+  development URL degraded to retrying the same node.
+  
+  Details worth knowing:
+  
+  - Trailing slashes are stripped. A token embeds the provider URL it was minted against and the verifier matches by
+    exact string, so `https://host/` and `https://host` must not disagree.
+  - A malformed value is ignored and normal discovery resumes rather than throwing, so a deployment-time typo cannot
+    take every captcha on a page down with it.
+  - The env read lives in its own module holding nothing else. Parsing needs `convertHostedProvider` from `balancer.ts`,
+    and `balancer.ts` needs the read — putting both in one file would create an import cycle, which this package has
+    already lost a release to when a cycle between chunks broke the widget at load.
+  - `PROSOPO_PROVIDER_URL_DEVELOPMENT` is untouched and still works for local development.
+  
+  Verified by building a production bundle with the override set: `defaultEnvironment` stays `production`, the bundle is
+  minified, and the override is baked in.
+
+### Patch Changes
+
+- Updated dependencies [4c9b84b]
+  - @prosopo/types@5.10.1
+
+## 2.10.50
+### Patch Changes
+
+- a9141c3: Stop loading zod before the widget can draw itself. Takes another 13KB gzipped off the critical path.
+  
+  zod is 14KB gzipped and it was being downloaded and parsed before the checkbox appeared, because six small things on the startup path happened to use it:
+  
+  - two lists of strings in `@prosopo/logger` (log levels, output format)
+  - two lists of strings in `@prosopo/locale` (language codes, translation keys)
+  - two lists of two strings in `@prosopo/types` (start mode, challenge placement)
+  - one four-field object in `@prosopo/load-balancer` (a provider entry)
+  - an `instanceof ZodError` check in `@prosopo/common`
+  - `INPUT_LIMITS`, a plain table of numbers, that happened to live in the same file as zod-based string builders
+  
+  None of these need a validation library. They are now plain TypeScript: a list, a type, and where input is untrusted, a one-line guard. `INPUT_LIMITS` moved to its own file so reading it no longer drags the builders along.
+  
+  zod has not gone anywhere — the real request and response schemas in `@prosopo/types` still use it, and still validate exactly as before. It now arrives with the code that needs it, after the widget is on screen, rather than in front of it.
+  
+  Two API changes for anyone importing these directly:
+  
+  - `LanguageSchema`, `TranslationKeysSchema`, `StartModeSchema` and `Placement` are no longer exported as zod schemas. Use `isLanguage()`, `isStartMode()`, `isPlacement()` to check a value, and `LanguageCodes`, `translationKeys`, `StartModes`, `Placements` for the lists.
+  - `isZodError()` now recognises a zod error by its name rather than `instanceof`. That is strictly more tolerant: the name still matches when an error crosses a realm boundary or comes from a second copy of zod, which `instanceof` misses — it was already the fallback arm of the same check.
+  
+  Two behaviour notes: a malformed entry in the fetched provider list now throws a plain `Error` naming the entry, where it used to throw an untranslated zod error; and the language codes accepted are unchanged.
+  
+  Covered by the existing suites for every package touched (types, types-database, locale, logger, common, load-balancer, all five procaptcha packages, api, cli, api-express-router, server, and the provider's 1322 unit tests), all passing. The built bundle was also loaded in a real browser: the widget renders from the first eight chunks, zod arrives in the second wave, and the provider's error came back translated into German.
+- Updated dependencies [a9141c3]
+- Updated dependencies [a9141c3]
+  - @prosopo/common@3.1.59
+  - @prosopo/types@5.10.0
+
 ## 2.10.49
 ### Patch Changes
 

package/README.md

@@ -47,3 +47,37 @@ In this example:
 - Total weight = 4
 - Provider 1 receives ~25% of traffic
 - Provider 2 receives ~75% of traffic
+
+## Overriding the provider list
+
+By default the list is fetched from `provider-list.prosopo.io` for `staging` and `production`, and hardcoded to a local
+provider for `development`. `PROSOPO_PROVIDER_LIST` replaces all of that with providers you name, in every environment.
+
+This is what a [self-hosted](https://docs.prosopo.io/en/self-hosting/) deployment uses. It short-circuits both halves of
+discovery — the `/healthz` call the widget makes to pick a node, and the list a verifier matches a token against — so
+nothing reaches Prosopo.
+
+Two forms are accepted. One or more comma-separated URLs:
+
+```bash
+PROSOPO_PROVIDER_LIST=https://captcha1.example.com,https://captcha2.example.com
+```
+
+...or the same JSON shape documented above, when you want to set weights or the `ipv4` / `ipv6` sub-lists:
+
+```bash
+PROSOPO_PROVIDER_LIST='{"one":{"address":"5Abc...","url":"https://captcha1.example.com","datasetId":"","weight":3}}'
+```
+
+Notes:
+
+- Trailing slashes are stripped. A token embeds the provider URL it was minted against and `@prosopo/server` finds the
+  issuer by exact string match, so `https://host/` and `https://host` must not be able to disagree.
+- A malformed value is ignored and normal discovery resumes, rather than throwing. A deployment-time typo should not
+  take down every captcha on the page — check your logs if an override seems to have no effect.
+- The bare-URL form ignores `ipMode`. The `ipv4.` / `ipv6.` labels are a property of Prosopo's own DNS and prefixing
+  them onto another host would resolve to nothing. Use the JSON form's sub-lists if you run single-stack sub-zones.
+- Frontend builds bake the value in at bundle time; Node reads it at runtime.
+
+`PROSOPO_PROVIDER_URL_DEVELOPMENT` still exists and still only applies when the environment is `development`. Prefer
+`PROSOPO_PROVIDER_LIST`, which works in a production build.

package/dist/balancer.d.ts

@@ -1,27 +1,16 @@
 import type { EnvironmentTypes } from "@prosopo/types";
-import { z } from "zod";
-declare const HardcodedProviderSchema: z.ZodObject<{
-    address: z.ZodString;
-    url: z.ZodString;
-    datasetId: z.ZodString;
-    weight: z.ZodEffects<z.ZodDefault<z.ZodOptional<z.ZodNumber>>, number, number | undefined>;
-}, "strip", z.ZodTypeAny, {
+export interface HardcodedProvider {
     address: string;
     url: string;
     datasetId: string;
     weight: number;
-}, {
-    address: string;
-    url: string;
-    datasetId: string;
-    weight?: number | undefined;
-}>;
-export type HardcodedProvider = z.infer<typeof HardcodedProviderSchema>;
+}
 export type IpMode = "ipv4" | "ipv6";
 type hostedProviders = Record<string, unknown>;
 export declare const convertHostedProvider: (provider: hostedProviders, ipMode?: IpMode) => HardcodedProvider[];
 export declare const stripIpModeLabel: (hostname: string) => string;
 export declare const getProviderHostname: (provider: HardcodedProvider) => string;
+export declare const getProviderListOverride: (raw?: string | undefined, ipMode?: IpMode) => HardcodedProvider[];
 export declare const getLoadBalancerUrl: (environment: EnvironmentTypes) => string;
 export declare const loadBalancer: (environment: EnvironmentTypes, ipMode?: IpMode) => Promise<HardcodedProvider[]>;
 export {};

package/dist/balancer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"balancer.d.ts","sourceRoot":"","sources":["../src/balancer.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,QAAA,MAAM,uBAAuB;;;;;;;;;;;;;;;EAa3B,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAQrC,KAAK,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAK/C,eAAO,MAAM,qBAAqB,aACvB,eAAe,WAChB,MAAM,KACb,iBAAiB,EAUnB,CAAC;AAKF,eAAO,MAAM,gBAAgB,aAAc,MAAM,KAAG,MACjB,CAAC;AAEpC,eAAO,MAAM,mBAAmB,aAAc,iBAAiB,KAAG,MACjB,CAAC;AAElD,eAAO,MAAM,kBAAkB,gBAAiB,gBAAgB,KAAG,MAUlE,CAAC;AAEF,eAAO,MAAM,YAAY,gBACX,gBAAgB,WACpB,MAAM,KACb,OAAO,CAAC,iBAAiB,EAAE,CAyB7B,CAAC"}
+{"version":3,"file":"balancer.d.ts","sourceRoot":"","sources":["../src/balancer.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAIvD,MAAM,WAAW,iBAAiB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CACf;AAkCD,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAQrC,KAAK,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAK/C,eAAO,MAAM,qBAAqB,aACvB,eAAe,WAChB,MAAM,KACb,iBAAiB,EAUnB,CAAC;AAKF,eAAO,MAAM,gBAAgB,aAAc,MAAM,KAAG,MACjB,CAAC;AAEpC,eAAO,MAAM,mBAAmB,aAAc,iBAAiB,KAAG,MACjB,CAAC;AA0ClD,eAAO,MAAM,uBAAuB,SAC9B,MAAM,GAAG,SAAS,WACd,MAAM,KACb,iBAAiB,EAiBnB,CAAC;AAEF,eAAO,MAAM,kBAAkB,gBAAiB,gBAAgB,KAAG,MAUlE,CAAC;AAEF,eAAO,MAAM,YAAY,gBACX,gBAAgB,WACpB,MAAM,KACb,OAAO,CAAC,iBAAiB,EAAE,CAmC7B,CAAC"}

package/dist/balancer.js

@@ -1,29 +1,79 @@
 import { getDevelopmentProviderUrl } from "./developmentProviderUrl.js";
+import { readProviderListOverride } from "./providerUrlOverride.js";
 import { ProsopoEnvError } from "@prosopo/common";
-import { z } from "zod";
 //#region src/balancer.ts
-var HardcodedProviderSchema = z.object({
-	address: z.string(),
-	url: z.string(),
-	datasetId: z.string(),
-	weight: z.number().optional().default(1).transform((val) => {
-		return Math.max(1, Math.min(100, Math.round(val)));
-	})
-});
+/**
+* The provider list is fetched JSON, so entries are checked rather than
+* trusted. Hand-written rather than a zod schema: this module is on the
+* widget's critical path and zod costs 14KB gzipped to validate three strings
+* and a number.
+*/
+var parseHardcodedProvider = (value) => {
+	const entry = value;
+	if (!isProviderRecord(value) || typeof entry.address !== "string" || typeof entry.url !== "string" || typeof entry.datasetId !== "string" || entry.weight !== void 0 && typeof entry.weight !== "number") throw new Error(`Malformed provider entry in the provider list: ${JSON.stringify(value)}`);
+	return {
+		address: entry.address,
+		url: entry.url,
+		datasetId: entry.datasetId,
+		weight: Math.max(1, Math.min(100, Math.round(entry.weight ?? 1)))
+	};
+};
 var IP_MODE_KEYS = ["ipv4", "ipv6"];
 var isProviderRecord = (value) => typeof value === "object" && value !== null;
 var convertHostedProvider = (provider, ipMode) => {
 	const source = ipMode && isProviderRecord(provider[ipMode]) ? provider[ipMode] : provider;
-	return Object.entries(source).filter(([key]) => !IP_MODE_KEYS.includes(key)).map(([, value]) => HardcodedProviderSchema.parse(value)).sort((a, b) => a.url.localeCompare(b.url));
+	return Object.entries(source).filter(([key]) => !IP_MODE_KEYS.includes(key)).map(([, value]) => parseHardcodedProvider(value)).sort((a, b) => a.url.localeCompare(b.url));
 };
 var stripIpModeLabel = (hostname) => hostname.replace(/^ipv[46]\./, "");
 var getProviderHostname = (provider) => stripIpModeLabel(new URL(provider.url).hostname);
+var SELF_HOSTED_ADDRESS = "self-hosted";
+var SELF_HOSTED_DATASET_ID = "";
+var stripTrailingSlash = (url) => url.replace(/\/$/, "");
+var providersFromUrlList = (raw) => raw.split(",").map((url) => stripTrailingSlash(url.trim())).filter((url) => url.length > 0).map((url) => ({
+	address: SELF_HOSTED_ADDRESS,
+	url,
+	datasetId: SELF_HOSTED_DATASET_ID,
+	weight: 1
+}));
+/**
+* Parses `PROSOPO_PROVIDER_LIST` into providers, or returns empty when unset.
+*
+* Two accepted forms:
+*
+*   - The same JSON the hosted provider list serves, so weights and the
+*     `ipv4` / `ipv6` sub-lists behave identically. See the README.
+*   - One or more bare URLs, comma-separated, for a deployment that has
+*     nothing to say about weights or addresses.
+*
+* Trailing slashes are stripped throughout: a token embeds the provider URL
+* it was minted against and `@prosopo/server` finds the issuer by exact
+* string match, so `https://host/` and `https://host` must not disagree.
+*
+* A malformed override returns empty rather than throwing, falling back to
+* normal discovery. Throwing would take every captcha on the page down over
+* what is a deployment-time typo.
+*/
+var getProviderListOverride = (raw = readProviderListOverride(), ipMode) => {
+	const trimmed = raw?.trim();
+	if (!trimmed) return [];
+	if (!trimmed.startsWith("{")) return providersFromUrlList(trimmed);
+	try {
+		return convertHostedProvider(JSON.parse(trimmed), ipMode).map((provider) => ({
+			...provider,
+			url: stripTrailingSlash(provider.url)
+		}));
+	} catch {
+		return [];
+	}
+};
 var getLoadBalancerUrl = (environment) => {
 	if (environment === "production") return "https://provider-list.prosopo.io/";
 	if (environment === "staging") return "https://provider-list.prosopo.io/staging.json";
 	throw new ProsopoEnvError("CONFIG.UNKNOWN_ENVIRONMENT", { context: { environment } });
 };
 var loadBalancer = async (environment, ipMode) => {
+	const override = getProviderListOverride(void 0, ipMode);
+	if (override.length > 0) return override;
 	if (environment === "development") return [{
 		address: "5EjTA28bKSbFPPyMbUjNtArxyqjwq38r1BapVmLZShaqEedV",
 		url: getDevelopmentProviderUrl(),
@@ -36,4 +86,4 @@ var loadBalancer = async (environment, ipMode) => {
 	}).then((res) => res.json()), ipMode);
 };
 //#endregion
-export { convertHostedProvider, getLoadBalancerUrl, getProviderHostname, loadBalancer, stripIpModeLabel };
+export { convertHostedProvider, getLoadBalancerUrl, getProviderHostname, getProviderListOverride, loadBalancer, stripIpModeLabel };

package/dist/balancer.js.map

@@ -1 +1 @@
-{"version":3,"file":"balancer.js","sourceRoot":"","sources":["../src/balancer.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAExE,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,MAAM,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,CAAC,CAAC;SACV,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE;QAElB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC;CACH,CAAC,CAAC;AAUH,MAAM,YAAY,GAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAI7D,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAA4B,EAAE,CACrE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AAE7C,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACpC,QAAyB,EACzB,MAAe,EACO,EAAE;IACxB,MAAM,MAAM,GACX,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC,CAAE,QAAQ,CAAC,MAAM,CAAqB;QACvC,CAAC,CAAC,QAAQ,CAAC;IAEb,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SACtC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAa,CAAC,CAAC;SACxD,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3D,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7D,CAAC,CAAC;AAKF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAU,EAAE,CAC5D,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAEpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAA2B,EAAU,EAAE,CAC1E,gBAAgB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;AAElD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,WAA6B,EAAU,EAAE;IAC3E,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QAClC,OAAO,mCAAmC,CAAC;IAC5C,CAAC;IACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,+CAA+C,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,eAAe,CAAC,4BAA4B,EAAE;QACvD,OAAO,EAAE,EAAE,WAAW,EAAE;KACxB,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAChC,WAA6B,EAC7B,MAAe,EACgB,EAAE;IACjC,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;QACnC,OAAO;YACN;gBACC,OAAO,EAAE,kDAAkD;gBAC3D,GAAG,EAAE,yBAAyB,EAAE;gBAChC,SAAS,EACR,oEAAoE;gBACrE,MAAM,EAAE,CAAC;aACT;SACD,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAoB,MAAM,KAAK,CAC7C,kBAAkB,CAAC,WAAW,CAAC,EAC/B;QACC,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,MAAM;KACZ,CACD,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAK5B,OAAO,qBAAqB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC,CAAC"}
+{"version":3,"file":"balancer.js","sourceRoot":"","sources":["../src/balancer.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAepE,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAqB,EAAE;IACpE,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,IACC,CAAC,gBAAgB,CAAC,KAAK,CAAC;QACxB,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,EAC/D,CAAC;QAIF,MAAM,IAAI,KAAK,CACd,kDAAkD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CACzE,CAAC;IACH,CAAC;IAED,OAAO;QACN,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAE1B,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;KACjE,CAAC;AACH,CAAC,CAAC;AAQF,MAAM,YAAY,GAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAI7D,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAA4B,EAAE,CACrE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AAE7C,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACpC,QAAyB,EACzB,MAAe,EACO,EAAE;IACxB,MAAM,MAAM,GACX,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC,CAAE,QAAQ,CAAC,MAAM,CAAqB;QACvC,CAAC,CAAC,QAAQ,CAAC;IAEb,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SACtC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAa,CAAC,CAAC;SACxD,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC;IACpD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7D,CAAC,CAAC;AAKF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAU,EAAE,CAC5D,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAEpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,QAA2B,EAAU,EAAE,CAC1E,gBAAgB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;AAOlD,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAC1C,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAElC,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAE3E,MAAM,oBAAoB,GAAG,CAAC,GAAW,EAAuB,EAAE,CACjE,GAAG;KACD,KAAK,CAAC,GAAG,CAAC;KACV,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;KAC5C,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;KAC/B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACd,OAAO,EAAE,mBAAmB;IAC5B,GAAG;IACH,SAAS,EAAE,sBAAsB;IACjC,MAAM,EAAE,CAAC;CACT,CAAC,CAAC,CAAC;AAoBN,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACtC,MAA0B,wBAAwB,EAAE,EACpD,MAAe,EACO,EAAE;IACxB,MAAM,OAAO,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAGxB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAEnE,IAAI,CAAC;QACJ,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,GAAG,CAC5D,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACd,GAAG,QAAQ;YACX,GAAG,EAAE,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC;SACrC,CAAC,CACF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;AACF,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,WAA6B,EAAU,EAAE;IAC3E,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QAClC,OAAO,mCAAmC,CAAC;IAC5C,CAAC;IACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,+CAA+C,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,eAAe,CAAC,4BAA4B,EAAE;QACvD,OAAO,EAAE,EAAE,WAAW,EAAE;KACxB,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAChC,WAA6B,EAC7B,MAAe,EACgB,EAAE;IAQjC,MAAM,QAAQ,GAAG,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAEzC,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;QACnC,OAAO;YACN;gBACC,OAAO,EAAE,kDAAkD;gBAC3D,GAAG,EAAE,yBAAyB,EAAE;gBAChC,SAAS,EACR,oEAAoE;gBACrE,MAAM,EAAE,CAAC;aACT;SACD,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAoB,MAAM,KAAK,CAC7C,kBAAkB,CAAC,WAAW,CAAC,EAC/B;QACC,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,MAAM;KACZ,CACD,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAK5B,OAAO,qBAAqB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC,CAAC"}

package/dist/cjs/balancer.cjs

@@ -1,29 +1,79 @@
 const require_developmentProviderUrl = require("./developmentProviderUrl.cjs");
+const require_providerUrlOverride = require("./providerUrlOverride.cjs");
 let _prosopo_common = require("@prosopo/common");
-let zod = require("zod");
 //#region src/balancer.ts
-var HardcodedProviderSchema = zod.z.object({
-	address: zod.z.string(),
-	url: zod.z.string(),
-	datasetId: zod.z.string(),
-	weight: zod.z.number().optional().default(1).transform((val) => {
-		return Math.max(1, Math.min(100, Math.round(val)));
-	})
-});
+/**
+* The provider list is fetched JSON, so entries are checked rather than
+* trusted. Hand-written rather than a zod schema: this module is on the
+* widget's critical path and zod costs 14KB gzipped to validate three strings
+* and a number.
+*/
+var parseHardcodedProvider = (value) => {
+	const entry = value;
+	if (!isProviderRecord(value) || typeof entry.address !== "string" || typeof entry.url !== "string" || typeof entry.datasetId !== "string" || entry.weight !== void 0 && typeof entry.weight !== "number") throw new Error(`Malformed provider entry in the provider list: ${JSON.stringify(value)}`);
+	return {
+		address: entry.address,
+		url: entry.url,
+		datasetId: entry.datasetId,
+		weight: Math.max(1, Math.min(100, Math.round(entry.weight ?? 1)))
+	};
+};
 var IP_MODE_KEYS = ["ipv4", "ipv6"];
 var isProviderRecord = (value) => typeof value === "object" && value !== null;
 var convertHostedProvider = (provider, ipMode) => {
 	const source = ipMode && isProviderRecord(provider[ipMode]) ? provider[ipMode] : provider;
-	return Object.entries(source).filter(([key]) => !IP_MODE_KEYS.includes(key)).map(([, value]) => HardcodedProviderSchema.parse(value)).sort((a, b) => a.url.localeCompare(b.url));
+	return Object.entries(source).filter(([key]) => !IP_MODE_KEYS.includes(key)).map(([, value]) => parseHardcodedProvider(value)).sort((a, b) => a.url.localeCompare(b.url));
 };
 var stripIpModeLabel = (hostname) => hostname.replace(/^ipv[46]\./, "");
 var getProviderHostname = (provider) => stripIpModeLabel(new URL(provider.url).hostname);
+var SELF_HOSTED_ADDRESS = "self-hosted";
+var SELF_HOSTED_DATASET_ID = "";
+var stripTrailingSlash = (url) => url.replace(/\/$/, "");
+var providersFromUrlList = (raw) => raw.split(",").map((url) => stripTrailingSlash(url.trim())).filter((url) => url.length > 0).map((url) => ({
+	address: SELF_HOSTED_ADDRESS,
+	url,
+	datasetId: SELF_HOSTED_DATASET_ID,
+	weight: 1
+}));
+/**
+* Parses `PROSOPO_PROVIDER_LIST` into providers, or returns empty when unset.
+*
+* Two accepted forms:
+*
+*   - The same JSON the hosted provider list serves, so weights and the
+*     `ipv4` / `ipv6` sub-lists behave identically. See the README.
+*   - One or more bare URLs, comma-separated, for a deployment that has
+*     nothing to say about weights or addresses.
+*
+* Trailing slashes are stripped throughout: a token embeds the provider URL
+* it was minted against and `@prosopo/server` finds the issuer by exact
+* string match, so `https://host/` and `https://host` must not disagree.
+*
+* A malformed override returns empty rather than throwing, falling back to
+* normal discovery. Throwing would take every captcha on the page down over
+* what is a deployment-time typo.
+*/
+var getProviderListOverride = (raw = require_providerUrlOverride.readProviderListOverride(), ipMode) => {
+	const trimmed = raw?.trim();
+	if (!trimmed) return [];
+	if (!trimmed.startsWith("{")) return providersFromUrlList(trimmed);
+	try {
+		return convertHostedProvider(JSON.parse(trimmed), ipMode).map((provider) => ({
+			...provider,
+			url: stripTrailingSlash(provider.url)
+		}));
+	} catch {
+		return [];
+	}
+};
 var getLoadBalancerUrl = (environment) => {
 	if (environment === "production") return "https://provider-list.prosopo.io/";
 	if (environment === "staging") return "https://provider-list.prosopo.io/staging.json";
 	throw new _prosopo_common.ProsopoEnvError("CONFIG.UNKNOWN_ENVIRONMENT", { context: { environment } });
 };
 var loadBalancer = async (environment, ipMode) => {
+	const override = getProviderListOverride(void 0, ipMode);
+	if (override.length > 0) return override;
 	if (environment === "development") return [{
 		address: "5EjTA28bKSbFPPyMbUjNtArxyqjwq38r1BapVmLZShaqEedV",
 		url: require_developmentProviderUrl.getDevelopmentProviderUrl(),
@@ -39,5 +89,6 @@ var loadBalancer = async (environment, ipMode) => {
 exports.convertHostedProvider = convertHostedProvider;
 exports.getLoadBalancerUrl = getLoadBalancerUrl;
 exports.getProviderHostname = getProviderHostname;
+exports.getProviderListOverride = getProviderListOverride;
 exports.loadBalancer = loadBalancer;
 exports.stripIpModeLabel = stripIpModeLabel;

package/dist/cjs/index.cjs

@@ -1,5 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_developmentProviderUrl = require("./developmentProviderUrl.cjs");
+const require_providerUrlOverride = require("./providerUrlOverride.cjs");
 const require_balancer = require("./balancer.cjs");
 const require_providers = require("./providers.cjs");
 exports.DEFAULT_DEVELOPMENT_PROVIDER_URL = require_developmentProviderUrl.DEFAULT_DEVELOPMENT_PROVIDER_URL;
@@ -11,9 +12,11 @@ exports.convertHostedProvider = require_balancer.convertHostedProvider;
 exports.getDevelopmentProviderUrl = require_developmentProviderUrl.getDevelopmentProviderUrl;
 exports.getLoadBalancerUrl = require_balancer.getLoadBalancerUrl;
 exports.getProviderHostname = require_balancer.getProviderHostname;
+exports.getProviderListOverride = require_balancer.getProviderListOverride;
 exports.getProviders = require_providers.getProviders;
 exports.getRandomActiveProvider = require_providers.getRandomActiveProvider;
 exports.getRandomProviderFromList = require_providers.getRandomProviderFromList;
 exports.loadBalancer = require_balancer.loadBalancer;
 exports.readDevelopmentProviderUrlOverride = require_developmentProviderUrl.readDevelopmentProviderUrlOverride;
+exports.readProviderListOverride = require_providerUrlOverride.readProviderListOverride;
 exports.stripIpModeLabel = require_balancer.stripIpModeLabel;

package/dist/cjs/providerUrlOverride.cjs

@@ -0,0 +1,33 @@
+//#region src/providerUrlOverride.ts
+/**
+* Supplies the provider list directly instead of fetching Prosopo's.
+*
+* A self-hosted deployment has its own providers and no hosted list to
+* discover them from. Setting this replaces both halves of discovery — the
+* endpoint the widget calls and the list a verifier matches a token against —
+* with whatever it names. See `getProviderListOverride` in `balancer.ts` for
+* the accepted forms.
+*
+* Distinct from `PROSOPO_PROVIDER_URL_DEVELOPMENT`, which only applies when
+* the environment is `development`. That coupling forced self-hosters to ship
+* a development build of the widget purely to redirect it; this override is
+* environment-independent, so `production` stays correct everywhere.
+*
+* Kept in its own module, holding nothing but the read, so that parsing can
+* live next to `convertHostedProvider` in `balancer.ts` without the two
+* modules importing each other. A cycle here would be bundled into the widget
+* and this package has already lost a release to one.
+*
+* Written as a static `process.env.X` access for the same reason as the
+* development override: frontend bundlers substitute that exact expression
+* for a literal, which a computed lookup would not match.
+*/
+var readProviderListOverride = () => {
+	try {
+		return process.env.PROSOPO_PROVIDER_LIST;
+	} catch {
+		return;
+	}
+};
+//#endregion
+exports.readProviderListOverride = readProviderListOverride;

package/dist/cjs/providers.cjs

@@ -47,6 +47,11 @@ var resolveBaseUrl = (env) => {
 	return endpoints[env] ?? endpoints.development;
 };
 var resolvePinnedUrl = async (env, ipMode) => {
+	const override = require_balancer.getProviderListOverride(void 0, ipMode);
+	if (override.length > 0) {
+		const chosen = pickWeightedProvider(override, Math.random);
+		if (chosen) return chosen.url;
+	}
 	const base = applyIpModeToUrl(resolveBaseUrl(env), ipMode);
 	if (env === "development") return base;
 	const key = cacheKey(env, ipMode);

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 export * from "./providers.js";
 export * from "./balancer.js";
 export * from "./developmentProviderUrl.js";
+export * from "./providerUrlOverride.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,6BAA6B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC"}

package/dist/index.js

@@ -1,5 +1,6 @@
 import "./_virtual/_rolldown/runtime.js";
 import { DEFAULT_DEVELOPMENT_PROVIDER_URL, getDevelopmentProviderUrl, readDevelopmentProviderUrlOverride } from "./developmentProviderUrl.js";
-import { convertHostedProvider, getLoadBalancerUrl, getProviderHostname, loadBalancer, stripIpModeLabel } from "./balancer.js";
+import { readProviderListOverride } from "./providerUrlOverride.js";
+import { convertHostedProvider, getLoadBalancerUrl, getProviderHostname, getProviderListOverride, loadBalancer, stripIpModeLabel } from "./balancer.js";
 import { _resetHealthzRetryPolicy, _resetPinCache, _resetProviderListCache, _setHealthzRetryPolicy, getProviders, getRandomActiveProvider, getRandomProviderFromList } from "./providers.js";
-export { DEFAULT_DEVELOPMENT_PROVIDER_URL, _resetHealthzRetryPolicy, _resetPinCache, _resetProviderListCache, _setHealthzRetryPolicy, convertHostedProvider, getDevelopmentProviderUrl, getLoadBalancerUrl, getProviderHostname, getProviders, getRandomActiveProvider, getRandomProviderFromList, loadBalancer, readDevelopmentProviderUrlOverride, stripIpModeLabel };
+export { DEFAULT_DEVELOPMENT_PROVIDER_URL, _resetHealthzRetryPolicy, _resetPinCache, _resetProviderListCache, _setHealthzRetryPolicy, convertHostedProvider, getDevelopmentProviderUrl, getLoadBalancerUrl, getProviderHostname, getProviderListOverride, getProviders, getRandomActiveProvider, getRandomProviderFromList, loadBalancer, readDevelopmentProviderUrlOverride, readProviderListOverride, stripIpModeLabel };

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,6BAA6B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC"}

package/dist/providerUrlOverride.d.ts

@@ -0,0 +1,2 @@
+export declare const readProviderListOverride: () => string | undefined;
+//# sourceMappingURL=providerUrlOverride.d.ts.map

package/dist/providerUrlOverride.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerUrlOverride.d.ts","sourceRoot":"","sources":["../src/providerUrlOverride.ts"],"names":[],"mappings":"AAqCA,eAAO,MAAM,wBAAwB,QAAO,MAAM,GAAG,SAMpD,CAAC"}