@tinyrack/tinyauth-server 0.0.7

package/dist/lib/frontend/cloudflare.d.ts

@@ -0,0 +1,12 @@
+import type { FrontendConfig } from '../config/frontend.ts';
+import type { HtmlVariables } from '../interpolate-html.ts';
+export interface CloudflareAssetsBinding {
+    fetch(input: RequestInfo | URL, init?: RequestInit): Promise<Response>;
+}
+export interface CreateCloudflareAssetsHandlerOptions {
+    assets: CloudflareAssetsBinding;
+    htmlVariables?: HtmlVariables | undefined;
+    onResponse?: ((response: Response) => Response | Promise<Response>) | undefined;
+}
+export declare function createCloudflareAssetsHandler(options: CreateCloudflareAssetsHandlerOptions): FrontendConfig;
+//# sourceMappingURL=cloudflare.d.ts.map

package/dist/lib/frontend/cloudflare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../../src/lib/frontend/cloudflare.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAM5D,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,KAAK,EAAE,WAAW,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,oCAAoC;IACnD,MAAM,EAAE,uBAAuB,CAAC;IAChC,aAAa,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IAC1C,UAAU,CAAC,EACP,CAAC,CAAC,QAAQ,EAAE,QAAQ,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,GACtD,SAAS,CAAC;CACf;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,oCAAoC,GAC5C,cAAc,CA0ChB"}

package/dist/lib/frontend/cloudflare.js

@@ -0,0 +1,34 @@
+import { interpolateHtmlResponse, resolveHtmlVariables, } from "../interpolate-html.js";
+export function createCloudflareAssetsHandler(options) {
+    return ({ branding, server }) => {
+        const htmlVariables = resolveHtmlVariables({
+            branding,
+            server,
+            overrides: options.htmlVariables,
+        });
+        async function finalizeResponse(response) {
+            if (options.onResponse) {
+                return options.onResponse(response);
+            }
+            return response;
+        }
+        return async (c) => {
+            const pathname = new URL(c.req.url).pathname;
+            const response = await options.assets.fetch(c.req.raw);
+            const isHtml = response.headers
+                .get('content-type')
+                ?.toLowerCase()
+                .includes('text/html') ?? false;
+            if (pathname !== '/index.html' &&
+                /\/[^/]+\.[^/]+$/.test(pathname) &&
+                isHtml) {
+                return finalizeResponse(c.text('Not Found', 404));
+            }
+            if (c.req.method !== 'GET') {
+                return finalizeResponse(response);
+            }
+            return finalizeResponse(await interpolateHtmlResponse(response, htmlVariables));
+        };
+    };
+}
+//# sourceMappingURL=cloudflare.js.map

package/dist/lib/frontend/cloudflare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare.js","sourceRoot":"","sources":["../../../src/lib/frontend/cloudflare.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAchC,MAAM,UAAU,6BAA6B,CAC3C,OAA6C;IAE7C,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE;QAC9B,MAAM,aAAa,GAAG,oBAAoB,CAAC;YACzC,QAAQ;YACR,MAAM;YACN,SAAS,EAAE,OAAO,CAAC,aAAa;SACjC,CAAC,CAAC;QAEH,KAAK,UAAU,gBAAgB,CAAC,QAAkB;YAChD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACvB,OAAO,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,OAAO,KAAK,EAAE,CAAC,EAAqB,EAAE;YACpC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC7C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvD,MAAM,MAAM,GACV,QAAQ,CAAC,OAAO;iBACb,GAAG,CAAC,cAAc,CAAC;gBACpB,EAAE,WAAW,EAAE;iBACd,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC;YAEpC,IACE,QAAQ,KAAK,aAAa;gBAC1B,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAChC,MAAM,EACN,CAAC;gBACD,OAAO,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;YACpD,CAAC;YAED,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC3B,OAAO,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACpC,CAAC;YAED,OAAO,gBAAgB,CACrB,MAAM,uBAAuB,CAAC,QAAQ,EAAE,aAAa,CAAC,CACvD,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/frontend/proxy.d.ts

@@ -0,0 +1,24 @@
+import type { FrontendConfig } from '../config/frontend.ts';
+import type { HtmlVariables } from '../interpolate-html.ts';
+export interface CreateProxyHandlerOptions {
+    /**
+     * Upstream server URL to proxy requests to.
+     * Example: 'http://localhost:8081'
+     */
+    upstream: string;
+    /**
+     * HTML variable map for `{{VAR}}` interpolation in HTML responses.
+     */
+    htmlVariables?: HtmlVariables | undefined;
+    /**
+     * Optional response interceptor.
+     * Called with the (already-interpolated) Response before it is
+     * returned. Return a modified Response or the original as-is.
+     */
+    onResponse?: ((response: Response) => Response | Promise<Response>) | undefined;
+}
+/**
+ * Create a FrontendConfig that proxies requests to an upstream server.
+ */
+export declare function createProxyHandler(options: CreateProxyHandlerOptions): FrontendConfig;
+//# sourceMappingURL=proxy.d.ts.map

package/dist/lib/frontend/proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../../src/lib/frontend/proxy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAM5D,MAAM,WAAW,yBAAyB;IACxC;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,aAAa,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IAC1C;;;;OAIG;IACH,UAAU,CAAC,EACP,CAAC,CAAC,QAAQ,EAAE,QAAQ,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,GACtD,SAAS,CAAC;CACf;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,yBAAyB,GACjC,cAAc,CA0ChB"}

package/dist/lib/frontend/proxy.js

@@ -0,0 +1,38 @@
+import { proxy } from 'hono/proxy';
+import { interpolateHtmlResponse, resolveHtmlVariables, } from "../interpolate-html.js";
+/**
+ * Create a FrontendConfig that proxies requests to an upstream server.
+ */
+export function createProxyHandler(options) {
+    return ({ branding, server }) => {
+        const htmlVariables = resolveHtmlVariables({
+            branding,
+            server,
+            overrides: options.htmlVariables,
+        });
+        function buildTargetUrl(requestUrl) {
+            const upstreamUrl = new URL(options.upstream);
+            const incomingUrl = new URL(requestUrl);
+            const upstreamPath = upstreamUrl.pathname.endsWith('/')
+                ? upstreamUrl.pathname.slice(0, -1)
+                : upstreamUrl.pathname;
+            upstreamUrl.pathname = `${upstreamPath}${incomingUrl.pathname}`;
+            upstreamUrl.search = incomingUrl.search;
+            return upstreamUrl.toString();
+        }
+        async function finalizeResponse(response) {
+            const interpolated = await interpolateHtmlResponse(response, htmlVariables);
+            if (options.onResponse) {
+                return options.onResponse(interpolated);
+            }
+            return interpolated;
+        }
+        return async (c) => {
+            const response = await proxy(buildTargetUrl(c.req.url), {
+                raw: c.req.raw,
+            });
+            return finalizeResponse(response);
+        };
+    };
+}
+//# sourceMappingURL=proxy.js.map

package/dist/lib/frontend/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../../src/lib/frontend/proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAInC,OAAO,EACL,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAsBhC;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAkC;IAElC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE;QAC9B,MAAM,aAAa,GAAG,oBAAoB,CAAC;YACzC,QAAQ;YACR,MAAM;YACN,SAAS,EAAE,OAAO,CAAC,aAAa;SACjC,CAAC,CAAC;QAEH,SAAS,cAAc,CAAC,UAAkB;YACxC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC9C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;YACxC,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACrD,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACnC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC;YAEzB,WAAW,CAAC,QAAQ,GAAG,GAAG,YAAY,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC;YAChE,WAAW,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;YAExC,OAAO,WAAW,CAAC,QAAQ,EAAE,CAAC;QAChC,CAAC;QAED,KAAK,UAAU,gBAAgB,CAAC,QAAkB;YAChD,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAChD,QAAQ,EACR,aAAa,CACd,CAAC;YAEF,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACvB,OAAO,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAC1C,CAAC;YAED,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,OAAO,KAAK,EAAE,CAAC,EAAqB,EAAE;YACpC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;gBACtD,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG;aACf,CAAC,CAAC;YAEH,OAAO,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/frontend/static.d.ts

@@ -0,0 +1,21 @@
+import type { FrontendConfig } from '../config/frontend.ts';
+import type { HtmlVariables } from '../interpolate-html.ts';
+export interface CreateStaticHandlerOptions {
+    /**
+     * HTML variable map for `{{VAR}}` interpolation in HTML responses.
+     */
+    htmlVariables?: HtmlVariables | undefined;
+    publicPath: string;
+    /**
+     * Optional response interceptor.
+     * Called with the (already-interpolated) Response before it is
+     * returned. Return a modified Response or the original as-is.
+     */
+    onResponse?: ((response: Response) => Response | Promise<Response>) | undefined;
+}
+/**
+ * Create a FrontendConfig that serves static files from a directory.
+ * Supports HTML variable interpolation and SPA fallback to index.html.
+ */
+export declare function createStaticHandler(options: CreateStaticHandlerOptions): FrontendConfig;
+//# sourceMappingURL=static.d.ts.map

package/dist/lib/frontend/static.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static.d.ts","sourceRoot":"","sources":["../../../src/lib/frontend/static.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAG5D,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,aAAa,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,UAAU,CAAC,EACP,CAAC,CAAC,QAAQ,EAAE,QAAQ,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,GACtD,SAAS,CAAC;CACf;AAOD;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,0BAA0B,GAClC,cAAc,CAwHhB"}

package/dist/lib/frontend/static.js

@@ -0,0 +1,108 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { getMimeType } from 'hono/utils/mime';
+import { interpolateHtml, resolveHtmlVariables } from "../interpolate-html.js";
+/**
+ * Create a FrontendConfig that serves static files from a directory.
+ * Supports HTML variable interpolation and SPA fallback to index.html.
+ */
+export function createStaticHandler(options) {
+    return ({ branding, server }) => {
+        const publicPath = path.resolve(options.publicPath);
+        const rootIndexPath = path.join(publicPath, 'index.html');
+        const htmlVariables = resolveHtmlVariables({
+            branding,
+            server,
+            overrides: options.htmlVariables,
+        });
+        const htmlCache = new Map();
+        async function statIfExists(targetPath) {
+            try {
+                return await fs.promises.stat(targetPath);
+            }
+            catch {
+                return undefined;
+            }
+        }
+        async function readInterpolatedHtml(absolutePath) {
+            const cached = htmlCache.get(absolutePath);
+            if (cached !== undefined) {
+                return cached;
+            }
+            const raw = await fs.promises.readFile(absolutePath, 'utf-8');
+            const result = interpolateHtml(raw, htmlVariables);
+            htmlCache.set(absolutePath, result);
+            return result;
+        }
+        function isSafePath(resolved) {
+            return (resolved === publicPath ||
+                resolved.startsWith(`${publicPath}${path.sep}`));
+        }
+        async function applyOnResponse(response) {
+            if (options.onResponse) {
+                return options.onResponse(response);
+            }
+            return response;
+        }
+        async function serveHtml(c, absolutePath) {
+            const html = await readInterpolatedHtml(absolutePath);
+            return applyOnResponse(await c.html(html));
+        }
+        async function serveFile(absolutePath) {
+            const content = await fs.promises.readFile(absolutePath);
+            const mimeType = getMimeType(absolutePath) ?? 'application/octet-stream';
+            return applyOnResponse(new Response(content, {
+                headers: { 'Content-Type': mimeType },
+            }));
+        }
+        async function notFound(c) {
+            return applyOnResponse(await c.json({ error: 'Not Found' }, 404));
+        }
+        async function serveSpaFallback(c) {
+            try {
+                return await serveHtml(c, rootIndexPath);
+            }
+            catch {
+                return notFound(c);
+            }
+        }
+        async function resolveTarget(urlPath) {
+            const resolved = path.resolve(publicPath, `.${urlPath}`);
+            if (!isSafePath(resolved)) {
+                return { kind: 'spa' };
+            }
+            const stats = await statIfExists(resolved);
+            if (!stats) {
+                return { kind: 'spa' };
+            }
+            if (stats.isFile()) {
+                return resolved.endsWith('.html')
+                    ? { kind: 'html', absolutePath: resolved }
+                    : { kind: 'file', absolutePath: resolved };
+            }
+            if (stats.isDirectory()) {
+                const indexPath = path.join(resolved, 'index.html');
+                const indexStats = await statIfExists(indexPath);
+                if (indexStats?.isFile()) {
+                    return { kind: 'html', absolutePath: indexPath };
+                }
+            }
+            return { kind: 'spa' };
+        }
+        return async (c) => {
+            if (c.req.method !== 'GET' && c.req.method !== 'HEAD') {
+                return notFound(c);
+            }
+            const target = await resolveTarget(c.req.path);
+            switch (target.kind) {
+                case 'html':
+                    return serveHtml(c, target.absolutePath);
+                case 'file':
+                    return serveFile(target.absolutePath);
+                case 'spa':
+                    return serveSpaFallback(c);
+            }
+        };
+    };
+}
+//# sourceMappingURL=static.js.map

package/dist/lib/frontend/static.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static.js","sourceRoot":"","sources":["../../../src/lib/frontend/static.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG9C,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAuB/E;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAmC;IAEnC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,oBAAoB,CAAC;YACzC,QAAQ;YACR,MAAM;YACN,SAAS,EAAE,OAAO,CAAC,aAAa;SACjC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;QAE5C,KAAK,UAAU,YAAY,CAAC,UAAkB;YAC5C,IAAI,CAAC;gBACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QAED,KAAK,UAAU,oBAAoB,CAAC,YAAoB;YACtD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YACnD,SAAS,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,SAAS,UAAU,CAAC,QAAgB;YAClC,OAAO,CACL,QAAQ,KAAK,UAAU;gBACvB,QAAQ,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAChD,CAAC;QACJ,CAAC;QAED,KAAK,UAAU,eAAe,CAAC,QAAkB;YAC/C,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACvB,OAAO,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,KAAK,UAAU,SAAS,CACtB,CAAU,EACV,YAAoB;YAEpB,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;YACtD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,KAAK,UAAU,SAAS,CAAC,YAAoB;YAC3C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,0BAA0B,CAAC;YACzE,OAAO,eAAe,CACpB,IAAI,QAAQ,CAAC,OAAO,EAAE;gBACpB,OAAO,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE;aACtC,CAAC,CACH,CAAC;QACJ,CAAC;QAED,KAAK,UAAU,QAAQ,CAAC,CAAU;YAChC,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QACpE,CAAC;QAED,KAAK,UAAU,gBAAgB,CAAC,CAAU;YACxC,IAAI,CAAC;gBACH,OAAO,MAAM,SAAS,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,KAAK,UAAU,aAAa,CAAC,OAAe;YAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;YACzD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACzB,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACzB,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnB,OAAO,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAC/B,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE;oBAC1C,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;YAC/C,CAAC;YAED,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;gBACpD,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;gBACjD,IAAI,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC;oBACzB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;gBACnD,CAAC;YACH,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACzB,CAAC;QAED,OAAO,KAAK,EAAE,CAAC,EAAqB,EAAE;YACpC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtD,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;YACrB,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAE/C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,MAAM;oBACT,OAAO,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC3C,KAAK,MAAM;oBACT,OAAO,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBACxC,KAAK,KAAK;oBACR,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/interpolate-html.d.ts

@@ -0,0 +1,34 @@
+import type { BrandingConfig } from './config/branding.ts';
+import type { ServerConfig } from './config/server.ts';
+export type HtmlVariables = Record<string, string>;
+export declare const DEFAULT_HTML_VARIABLES: {
+    readonly TITLE: "Tinyrack";
+    readonly DESCRIPTION: "OIDC Provider for everyone";
+    readonly FAVICON_URL: "/vite.svg";
+    readonly COLOR_SCHEME: "light dark";
+    readonly THEME_COLOR: "#570df8";
+    readonly OG_IMAGE_URL: "";
+    readonly OG_URL: "";
+    readonly APPLE_TOUCH_ICON_URL: "/vite.svg";
+};
+export type BuiltInHtmlVariables = typeof DEFAULT_HTML_VARIABLES;
+export type BuiltInHtmlVariableKey = keyof BuiltInHtmlVariables;
+export interface ResolveHtmlVariablesOptions {
+    branding?: BrandingConfig | undefined;
+    server?: ServerConfig | undefined;
+    overrides?: HtmlVariables | undefined;
+}
+export declare function resolveHtmlVariables(options: ResolveHtmlVariablesOptions): HtmlVariables;
+/**
+ * Replace {{KEY}} placeholders in HTML with corresponding variable values.
+ * Only matches keys that follow identifier naming rules
+ * (start with a letter or underscore, followed by alphanumerics or underscores).
+ * Unmatched placeholders are left as-is.
+ */
+export declare function interpolateHtml(html: string, variables: Readonly<HtmlVariables>): string;
+/**
+ * Interpolate HTML variables in a Response if its content-type is text/html.
+ * Non-HTML responses are returned unchanged.
+ */
+export declare function interpolateHtmlResponse(response: Response, variables: Readonly<HtmlVariables>): Promise<Response>;
+//# sourceMappingURL=interpolate-html.d.ts.map

package/dist/lib/interpolate-html.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interpolate-html.d.ts","sourceRoot":"","sources":["../../src/lib/interpolate-html.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAKnD,eAAO,MAAM,sBAAsB;;;;;;;;;CASD,CAAC;AAEnC,MAAM,MAAM,oBAAoB,GAAG,OAAO,sBAAsB,CAAC;AACjE,MAAM,MAAM,sBAAsB,GAAG,MAAM,oBAAoB,CAAC;AAEhE,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IACtC,MAAM,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IAClC,SAAS,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;CACvC;AAwBD,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,2BAA2B,GACnC,aAAa,CAMf;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,GACjC,MAAM,CAKR;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,GACjC,OAAO,CAAC,QAAQ,CAAC,CAkBnB"}

package/dist/lib/interpolate-html.js

@@ -0,0 +1,63 @@
+const HTML_PLACEHOLDER_PATTERN = /\{\{([A-Za-z_][A-Za-z0-9_]*)\}\}/g;
+const TEXT_ENCODER = new TextEncoder();
+export const DEFAULT_HTML_VARIABLES = {
+    TITLE: 'Tinyrack',
+    DESCRIPTION: 'OIDC Provider for everyone',
+    FAVICON_URL: '/vite.svg',
+    COLOR_SCHEME: 'light dark',
+    THEME_COLOR: '#570df8',
+    OG_IMAGE_URL: '',
+    OG_URL: '',
+    APPLE_TOUCH_ICON_URL: '/vite.svg',
+};
+function deriveHtmlVariablesFromRuntime(options) {
+    const derived = {};
+    if (options.branding) {
+        const { theme_mode, icon_url } = options.branding;
+        derived['COLOR_SCHEME'] =
+            theme_mode === 'system' ? 'light dark' : theme_mode;
+        if (icon_url) {
+            derived['FAVICON_URL'] = icon_url;
+            derived['APPLE_TOUCH_ICON_URL'] = icon_url;
+        }
+    }
+    if (options.server?.public_origin) {
+        derived['OG_URL'] = options.server.public_origin;
+    }
+    return derived;
+}
+export function resolveHtmlVariables(options) {
+    return {
+        ...DEFAULT_HTML_VARIABLES,
+        ...deriveHtmlVariablesFromRuntime(options),
+        ...options.overrides,
+    };
+}
+/**
+ * Replace {{KEY}} placeholders in HTML with corresponding variable values.
+ * Only matches keys that follow identifier naming rules
+ * (start with a letter or underscore, followed by alphanumerics or underscores).
+ * Unmatched placeholders are left as-is.
+ */
+export function interpolateHtml(html, variables) {
+    return html.replace(HTML_PLACEHOLDER_PATTERN, (match, key) => variables[key] ?? match);
+}
+/**
+ * Interpolate HTML variables in a Response if its content-type is text/html.
+ * Non-HTML responses are returned unchanged.
+ */
+export async function interpolateHtmlResponse(response, variables) {
+    const contentType = response.headers.get('content-type') ?? '';
+    if (!contentType.toLowerCase().includes('text/html')) {
+        return response;
+    }
+    const interpolated = interpolateHtml(await response.text(), variables);
+    const headers = new Headers(response.headers);
+    headers.set('content-length', String(TEXT_ENCODER.encode(interpolated).byteLength));
+    return new Response(interpolated, {
+        status: response.status,
+        statusText: response.statusText,
+        headers,
+    });
+}
+//# sourceMappingURL=interpolate-html.js.map

package/dist/lib/interpolate-html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interpolate-html.js","sourceRoot":"","sources":["../../src/lib/interpolate-html.ts"],"names":[],"mappings":"AAKA,MAAM,wBAAwB,GAAG,mCAAmC,CAAC;AACrE,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC;AAEvC,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,KAAK,EAAE,UAAU;IACjB,WAAW,EAAE,4BAA4B;IACzC,WAAW,EAAE,WAAW;IACxB,YAAY,EAAE,YAAY;IAC1B,WAAW,EAAE,SAAS;IACtB,YAAY,EAAE,EAAE;IAChB,MAAM,EAAE,EAAE;IACV,oBAAoB,EAAE,WAAW;CACD,CAAC;AAWnC,SAAS,8BAA8B,CACrC,OAAoC;IAEpC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClD,OAAO,CAAC,cAAc,CAAC;YACrB,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;QACtD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,aAAa,CAAC,GAAG,QAAQ,CAAC;YAClC,OAAO,CAAC,sBAAsB,CAAC,GAAG,QAAQ,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC;QAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;IACnD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAoC;IAEpC,OAAO;QACL,GAAG,sBAAsB;QACzB,GAAG,8BAA8B,CAAC,OAAO,CAAC;QAC1C,GAAG,OAAO,CAAC,SAAS;KACrB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,SAAkC;IAElC,OAAO,IAAI,CAAC,OAAO,CACjB,wBAAwB,EACxB,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,KAAK,CAChD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAkB,EAClB,SAAkC;IAElC,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC/D,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACrD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CACT,gBAAgB,EAChB,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,UAAU,CAAC,CACrD,CAAC;IAEF,OAAO,IAAI,QAAQ,CAAC,YAAY,EAAE;QAChC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO;KACR,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/ip-utils.d.ts

@@ -0,0 +1,61 @@
+/**
+ * IP address utilities for validating and matching IP addresses against CIDR ranges.
+ * Supports both IPv4 and IPv6 addresses.
+ */
+/**
+ * Parses an IPv4 address string into a 32-bit integer.
+ * @param ip - IPv4 address string (e.g., "192.168.1.1")
+ * @returns 32-bit integer representation, or null if invalid
+ */
+export declare function parseIPv4(ip: string): number | null;
+/**
+ * Parses an IPv6 address string into a BigInt.
+ * Supports full and compressed (::) notation.
+ * @param ip - IPv6 address string (e.g., "2001:db8::1")
+ * @returns BigInt representation, or null if invalid
+ */
+export declare function parseIPv6(ip: string): bigint | null;
+/**
+ * Checks if an IP address is an IPv4 address.
+ * @param ip - IP address string
+ * @returns true if the address is IPv4
+ */
+export declare function isIPv4(ip: string): boolean;
+/**
+ * Checks if an IP address is an IPv6 address.
+ * @param ip - IP address string
+ * @returns true if the address is IPv6
+ */
+export declare function isIPv6(ip: string): boolean;
+/**
+ * Checks if an IPv4 address is within a CIDR range.
+ * @param ip - IPv4 address to check
+ * @param cidr - CIDR notation (e.g., "10.0.0.0/8")
+ * @returns true if the IP is within the range
+ */
+export declare function isIPv4InCIDR(ip: string, cidr: string): boolean;
+/**
+ * Checks if an IPv6 address is within a CIDR range.
+ * @param ip - IPv6 address to check
+ * @param cidr - CIDR notation (e.g., "2001:db8::/32")
+ * @returns true if the IP is within the range
+ */
+export declare function isIPv6InCIDR(ip: string, cidr: string): boolean;
+/**
+ * Checks if an IP address matches a given pattern.
+ * The pattern can be:
+ * - A single IP address (e.g., "192.168.1.1")
+ * - A CIDR range (e.g., "10.0.0.0/8")
+ * @param ip - IP address to check
+ * @param pattern - Pattern to match against
+ * @returns true if the IP matches the pattern
+ */
+export declare function isIPInRange(ip: string, pattern: string): boolean;
+/**
+ * Checks if an IP address is trusted based on trust_proxy configuration.
+ * @param ip - IP address to check
+ * @param trustProxy - Trust proxy configuration value
+ * @returns true if the IP should be trusted
+ */
+export declare function isTrustedProxy(ip: string, trustProxy: boolean | string | string[] | number): boolean;
+//# sourceMappingURL=ip-utils.d.ts.map

package/dist/lib/ip-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ip-utils.d.ts","sourceRoot":"","sources":["../../src/lib/ip-utils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiBnD;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAyDnD;AAED;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAE1C;AAED;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAE1C;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAsB9D;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CA2B9D;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CA2BhE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,GAC/C,OAAO,CA2BT"}

package/dist/lib/ip-utils.js

@@ -0,0 +1,213 @@
+/**
+ * IP address utilities for validating and matching IP addresses against CIDR ranges.
+ * Supports both IPv4 and IPv6 addresses.
+ */
+/**
+ * Parses an IPv4 address string into a 32-bit integer.
+ * @param ip - IPv4 address string (e.g., "192.168.1.1")
+ * @returns 32-bit integer representation, or null if invalid
+ */
+export function parseIPv4(ip) {
+    const parts = ip.split('.');
+    if (parts.length !== 4) {
+        return null;
+    }
+    let result = 0;
+    for (const part of parts) {
+        const num = Number.parseInt(part, 10);
+        if (Number.isNaN(num) || num < 0 || num > 255) {
+            return null;
+        }
+        result = (result << 8) | num;
+    }
+    // Convert to unsigned 32-bit integer
+    return result >>> 0;
+}
+/**
+ * Parses an IPv6 address string into a BigInt.
+ * Supports full and compressed (::) notation.
+ * @param ip - IPv6 address string (e.g., "2001:db8::1")
+ * @returns BigInt representation, or null if invalid
+ */
+export function parseIPv6(ip) {
+    // Handle IPv4-mapped IPv6 addresses (::ffff:192.168.1.1)
+    const ipv4MappedMatch = ip.match(/^::ffff:(\d+\.\d+\.\d+\.\d+)$/i);
+    if (ipv4MappedMatch) {
+        const ipv4Part = ipv4MappedMatch[1];
+        if (ipv4Part === undefined) {
+            return null;
+        }
+        const ipv4 = parseIPv4(ipv4Part);
+        if (ipv4 === null) {
+            return null;
+        }
+        return BigInt('0xffff00000000') | BigInt(ipv4);
+    }
+    // Reject multiple :: (only one :: is allowed)
+    const doubleColonCount = (ip.match(/::/g) ?? []).length;
+    if (doubleColonCount > 1) {
+        return null;
+    }
+    // Reject ::: (triple colon is invalid)
+    if (ip.includes(':::')) {
+        return null;
+    }
+    let parts = ip.split(':');
+    // Handle :: compression
+    const doubleColonIndex = ip.indexOf('::');
+    if (doubleColonIndex !== -1) {
+        const left = ip.slice(0, doubleColonIndex).split(':').filter(Boolean);
+        const right = ip
+            .slice(doubleColonIndex + 2)
+            .split(':')
+            .filter(Boolean);
+        const missing = 8 - left.length - right.length;
+        if (missing < 0) {
+            return null;
+        }
+        parts = [...left, ...Array(missing).fill('0'), ...right];
+    }
+    if (parts.length !== 8) {
+        return null;
+    }
+    let result = BigInt(0);
+    for (const part of parts) {
+        const num = Number.parseInt(part, 16);
+        if (Number.isNaN(num) || num < 0 || num > 0xffff) {
+            return null;
+        }
+        result = (result << BigInt(16)) | BigInt(num);
+    }
+    return result;
+}
+/**
+ * Checks if an IP address is an IPv4 address.
+ * @param ip - IP address string
+ * @returns true if the address is IPv4
+ */
+export function isIPv4(ip) {
+    return /^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(ip);
+}
+/**
+ * Checks if an IP address is an IPv6 address.
+ * @param ip - IP address string
+ * @returns true if the address is IPv6
+ */
+export function isIPv6(ip) {
+    return ip.includes(':');
+}
+/**
+ * Checks if an IPv4 address is within a CIDR range.
+ * @param ip - IPv4 address to check
+ * @param cidr - CIDR notation (e.g., "10.0.0.0/8")
+ * @returns true if the IP is within the range
+ */
+export function isIPv4InCIDR(ip, cidr) {
+    const [network, prefixStr] = cidr.split('/');
+    if (network === undefined) {
+        return false;
+    }
+    const prefix = prefixStr !== undefined ? Number.parseInt(prefixStr, 10) : 32;
+    if (Number.isNaN(prefix) || prefix < 0 || prefix > 32) {
+        return false;
+    }
+    const ipNum = parseIPv4(ip);
+    const networkNum = parseIPv4(network);
+    if (ipNum === null || networkNum === null) {
+        return false;
+    }
+    // Create mask: all 1s for prefix length, then 0s
+    const mask = prefix === 0 ? 0 : (~0 << (32 - prefix)) >>> 0;
+    return (ipNum & mask) === (networkNum & mask);
+}
+/**
+ * Checks if an IPv6 address is within a CIDR range.
+ * @param ip - IPv6 address to check
+ * @param cidr - CIDR notation (e.g., "2001:db8::/32")
+ * @returns true if the IP is within the range
+ */
+export function isIPv6InCIDR(ip, cidr) {
+    const [network, prefixStr] = cidr.split('/');
+    if (network === undefined) {
+        return false;
+    }
+    const prefix = prefixStr !== undefined ? Number.parseInt(prefixStr, 10) : 128;
+    if (Number.isNaN(prefix) || prefix < 0 || prefix > 128) {
+        return false;
+    }
+    const ipNum = parseIPv6(ip);
+    const networkNum = parseIPv6(network);
+    if (ipNum === null || networkNum === null) {
+        return false;
+    }
+    // Create mask: all 1s for prefix length, then 0s
+    const mask = prefix === 0
+        ? BigInt(0)
+        : (BigInt(1) << BigInt(128)) -
+            BigInt(1) -
+            ((BigInt(1) << BigInt(128 - prefix)) - BigInt(1));
+    return (ipNum & mask) === (networkNum & mask);
+}
+/**
+ * Checks if an IP address matches a given pattern.
+ * The pattern can be:
+ * - A single IP address (e.g., "192.168.1.1")
+ * - A CIDR range (e.g., "10.0.0.0/8")
+ * @param ip - IP address to check
+ * @param pattern - Pattern to match against
+ * @returns true if the IP matches the pattern
+ */
+export function isIPInRange(ip, pattern) {
+    // Normalize IPv4-mapped IPv6 addresses for comparison
+    const normalizedIp = ip.startsWith('::ffff:') ? ip.slice(7) : ip;
+    const normalizedPattern = pattern.startsWith('::ffff:')
+        ? pattern.slice(7)
+        : pattern;
+    const isCIDR = normalizedPattern.includes('/');
+    if (isIPv4(normalizedIp)) {
+        if (isCIDR) {
+            return isIPv4InCIDR(normalizedIp, normalizedPattern);
+        }
+        return normalizedIp === normalizedPattern;
+    }
+    if (isIPv6(normalizedIp)) {
+        if (isCIDR) {
+            return isIPv6InCIDR(normalizedIp, normalizedPattern);
+        }
+        // For exact match, normalize both addresses
+        const ipNum = parseIPv6(normalizedIp);
+        const patternNum = parseIPv6(normalizedPattern);
+        return ipNum !== null && patternNum !== null && ipNum === patternNum;
+    }
+    return false;
+}
+/**
+ * Checks if an IP address is trusted based on trust_proxy configuration.
+ * @param ip - IP address to check
+ * @param trustProxy - Trust proxy configuration value
+ * @returns true if the IP should be trusted
+ */
+export function isTrustedProxy(ip, trustProxy) {
+    // true = trust all proxies
+    if (trustProxy === true) {
+        return true;
+    }
+    // false = trust no proxies (direct connection expected)
+    if (trustProxy === false) {
+        return true; // Allow all requests in direct connection mode
+    }
+    // number = hop count mode (not IP-based filtering)
+    if (typeof trustProxy === 'number') {
+        return true; // Allow all requests in hop count mode
+    }
+    // string = single IP or CIDR
+    if (typeof trustProxy === 'string') {
+        return isIPInRange(ip, trustProxy);
+    }
+    // array = multiple IPs or CIDRs
+    if (Array.isArray(trustProxy)) {
+        return trustProxy.some((pattern) => isIPInRange(ip, pattern));
+    }
+    return false;
+}
+//# sourceMappingURL=ip-utils.js.map