acrylblends 1.0.3 → 1.0.5

package/lib/html-DGExBFNg.js

@@ -0,0 +1,103 @@
+//#region ../../plugins/acryl-router/src/core/utils/html.ts
+/**
+* @module
+* HTML utility.
+*/
+const HtmlEscapedCallbackPhase = {
+	Stringify: 1,
+	BeforeStream: 2,
+	Stream: 3
+};
+const raw = (value, callbacks) => {
+	const escapedString = new String(value);
+	escapedString.isEscaped = true;
+	escapedString.callbacks = callbacks;
+	return escapedString;
+};
+const escapeRe = /[&<>'"]/;
+const stringBufferToString = async (buffer, callbacks) => {
+	let str = "";
+	callbacks ||= [];
+	const resolvedBuffer = await Promise.all(buffer);
+	for (let i = resolvedBuffer.length - 1;; i--) {
+		str += resolvedBuffer[i];
+		i--;
+		if (i < 0) break;
+		let r = resolvedBuffer[i];
+		if (typeof r === "object") callbacks.push(...r.callbacks || []);
+		const isEscaped = r.isEscaped;
+		r = await (typeof r === "object" ? r.toString() : r);
+		if (typeof r === "object") callbacks.push(...r.callbacks || []);
+		if (r.isEscaped ?? isEscaped) str += r;
+		else {
+			const buf = [str];
+			escapeToBuffer(r, buf);
+			str = buf[0];
+		}
+	}
+	return raw(str, callbacks);
+};
+const escapeToBuffer = (str, buffer) => {
+	const match = str.search(escapeRe);
+	if (match === -1) {
+		buffer[0] += str;
+		return;
+	}
+	let escape;
+	let index;
+	let lastIndex = 0;
+	for (index = match; index < str.length; index++) {
+		switch (str.charCodeAt(index)) {
+			case 34:
+				escape = "&quot;";
+				break;
+			case 39:
+				escape = "&#39;";
+				break;
+			case 38:
+				escape = "&amp;";
+				break;
+			case 60:
+				escape = "&lt;";
+				break;
+			case 62:
+				escape = "&gt;";
+				break;
+			default: continue;
+		}
+		buffer[0] += str.substring(lastIndex, index) + escape;
+		lastIndex = index + 1;
+	}
+	buffer[0] += str.substring(lastIndex, index);
+};
+const resolveCallbackSync = (str) => {
+	const callbacks = str.callbacks;
+	if (!callbacks?.length) return str;
+	const buffer = [str];
+	const context = {};
+	callbacks.forEach((c) => c({
+		phase: HtmlEscapedCallbackPhase.Stringify,
+		buffer,
+		context
+	}));
+	return buffer[0];
+};
+const resolveCallback = async (str, phase, preserveCallbacks, context, buffer) => {
+	if (typeof str === "object" && !(str instanceof String)) {
+		if (!(str instanceof Promise)) str = str.toString();
+		if (str instanceof Promise) str = await str;
+	}
+	const callbacks = str.callbacks;
+	if (!callbacks?.length) return Promise.resolve(str);
+	if (buffer) buffer[0] += str;
+	else buffer = [str];
+	const resStr = Promise.all(callbacks.map((c) => c({
+		phase,
+		buffer,
+		context
+	}))).then((res) => Promise.all(res.filter(Boolean).map((str) => resolveCallback(str, phase, false, context, buffer))).then(() => buffer[0]));
+	if (preserveCallbacks) return raw(await resStr, callbacks);
+	else return resStr;
+};
+//#endregion
+export { resolveCallbackSync as a, resolveCallback as i, escapeToBuffer as n, stringBufferToString as o, raw as r, HtmlEscapedCallbackPhase as t };

package/lib/html.d.ts

@@ -1,6 +1,3 @@
-import { c as raw, i as HtmlEscapedString } from "./html-SllAe0YT.js";
-
-//#region ../../plugins/acryl-router/src/core/helper/html/index.d.ts
-declare const html: (strings: TemplateStringsArray, ...values: unknown[]) => HtmlEscapedString | Promise<HtmlEscapedString>;
-//#endregion
+import { c as raw } from "./html-SllAe0YT.js";
+import { t as html } from "./index-dAzQsJG9.js";
 export { html, raw };

package/lib/html.js

@@ -1,31 +1,3 @@
-import { escapeToBuffer, raw, resolveCallbackSync, stringBufferToString } from "./utils/html.js";
-//#region ../../plugins/acryl-router/src/core/helper/html/index.ts
-/**
-* @module
-* html Helper for Acryl.
-*/
-const html = (strings, ...values) => {
-	const buffer = [""];
-	for (let i = 0, len = strings.length - 1; i < len; i++) {
-		buffer[0] += strings[i];
-		const children = Array.isArray(values[i]) ? values[i].flat(Infinity) : [values[i]];
-		for (let i = 0, len = children.length; i < len; i++) {
-			const child = children[i];
-			if (typeof child === "string") escapeToBuffer(child, buffer);
-			else if (typeof child === "number") buffer[0] += child;
-			else if (typeof child === "boolean" || child === null || child === void 0) continue;
-			else if (typeof child === "object" && child.isEscaped) if (child.callbacks) buffer.unshift("", child);
-			else {
-				const tmp = child.toString();
-				if (tmp instanceof Promise) buffer.unshift("", tmp);
-				else buffer[0] += tmp;
-			}
-			else if (child instanceof Promise) buffer.unshift("", child);
-			else escapeToBuffer(child.toString(), buffer);
-		}
-	}
-	buffer[0] += strings.at(-1);
-	return buffer.length === 1 ? "callbacks" in buffer ? raw(resolveCallbackSync(raw(buffer[0], buffer.callbacks))) : raw(buffer[0]) : stringBufferToString(buffer, buffer.callbacks);
-};
-//#endregion
+import { r as raw } from "./html-DGExBFNg.js";
+import { t as html } from "./html-CgNa89xw.js";
 export { html, raw };

package/lib/http-exception-MjWkT89V.js

@@ -0,0 +1,54 @@
+//#region ../../plugins/acryl-router/src/core/http-exception.ts
+/**
+* `HTTPException` must be used when a fatal error such as authentication failure occurs.
+*
+*
+* @param {StatusCode} status - status code of HTTPException
+* @param {HTTPExceptionOptions} options - options of HTTPException
+* @param {HTTPExceptionOptions["res"]} options.res - response of options of HTTPException
+* @param {HTTPExceptionOptions["message"]} options.message - message of options of HTTPException
+* @param {HTTPExceptionOptions["cause"]} options.cause - cause of options of HTTPException
+*
+* @example
+* ```ts
+* import { HTTPException } from 'acrylblends/http-exception'
+*
+* // ...
+*
+* app.post('/auth', async (c, next) => {
+*   // authentication
+*   if (authorized === false) {
+*     throw new HTTPException(401, { message: 'Custom error message' })
+*   }
+*   await next()
+* })
+* ```
+*/
+var HTTPException = class extends Error {
+	res;
+	status;
+	/**
+	* Creates an instance of `HTTPException`.
+	* @param status - HTTP status code for the exception. Defaults to 500.
+	* @param options - Additional options for the exception.
+	*/
+	constructor(status = 500, options) {
+		super(options?.message, { cause: options?.cause });
+		this.res = options?.res;
+		this.status = status;
+	}
+	/**
+	* Returns the response object associated with the exception.
+	* If a response object is not provided, a new response is created with the error message and status code.
+	* @returns The response object.
+	*/
+	getResponse() {
+		if (this.res) return new Response(this.res.body, {
+			status: this.status,
+			headers: this.res.headers
+		});
+		return new Response(this.message, { status: this.status });
+	}
+};
+//#endregion
+export { HTTPException as t };

package/lib/http-exception.js

@@ -1,54 +1,2 @@
-//#region ../../plugins/acryl-router/src/core/http-exception.ts
-/**
-* `HTTPException` must be used when a fatal error such as authentication failure occurs.
-*
-*
-* @param {StatusCode} status - status code of HTTPException
-* @param {HTTPExceptionOptions} options - options of HTTPException
-* @param {HTTPExceptionOptions["res"]} options.res - response of options of HTTPException
-* @param {HTTPExceptionOptions["message"]} options.message - message of options of HTTPException
-* @param {HTTPExceptionOptions["cause"]} options.cause - cause of options of HTTPException
-*
-* @example
-* ```ts
-* import { HTTPException } from 'acrylblends/http-exception'
-*
-* // ...
-*
-* app.post('/auth', async (c, next) => {
-*   // authentication
-*   if (authorized === false) {
-*     throw new HTTPException(401, { message: 'Custom error message' })
-*   }
-*   await next()
-* })
-* ```
-*/
-var HTTPException = class extends Error {
-	res;
-	status;
-	/**
-	* Creates an instance of `HTTPException`.
-	* @param status - HTTP status code for the exception. Defaults to 500.
-	* @param options - Additional options for the exception.
-	*/
-	constructor(status = 500, options) {
-		super(options?.message, { cause: options?.cause });
-		this.res = options?.res;
-		this.status = status;
-	}
-	/**
-	* Returns the response object associated with the exception.
-	* If a response object is not provided, a new response is created with the error message and status code.
-	* @returns The response object.
-	*/
-	getResponse() {
-		if (this.res) return new Response(this.res.body, {
-			status: this.status,
-			headers: this.res.headers
-		});
-		return new Response(this.message, { status: this.status });
-	}
-};
-//#endregion
+import { t as HTTPException } from "./http-exception-MjWkT89V.js";
 export { HTTPException };

package/lib/{index-D4nVR3wu.d.ts → index-DMOtA-NJ.d.ts}

@@ -1,4 +1,4 @@
-import { B as NotFoundHandler, y as ErrorHandler } from "./context-DS3fYyG-.js";
+import { B as NotFoundHandler, E as H, y as ErrorHandler } from "./context-DS3fYyG-.js";
 import { t as ConnectionInfo } from "./connection-ZLEso7XL.js";
 import { n as UpgradeWebSocket } from "./index-C-SklY6u.js";
 import { Context, Service } from "@deepseek-ai/cordis";
@@ -77,6 +77,12 @@ declare class Router extends Service {
    * are copied now: one the app registers after this call is not served (mount again, or finish the app first).
    */
   route(path: string, app: MountableApp): () => void;
+  /**
+   * Run `middleware` around every request the router serves, whenever the plugin that asks was mounted: a middleware in a plain mount wraps only the routes mounted after it,
+   * which is the wrong tool for a plugin that must see every page (the door adds its script to each HTML response, the pages of a plugin that loaded earlier included). It goes
+   * outside all mounts, in the order wrappers were added, and goes away when the calling plugin unloads or when the returned function is called.
+   */
+  wrap(middleware: H): () => void;
   /**
    * The mount's own copy of `app`'s routes as they are now (like the core's `app.route`), each handler wrapped so the router knows which
    * mount's code a request is in. The core's `app.route` runs first so a sub-app's own `onError` still applies to its routes.

package/lib/index-dAzQsJG9.d.ts

@@ -0,0 +1,6 @@
+import { i as HtmlEscapedString } from "./html-SllAe0YT.js";
+
+//#region ../../plugins/acryl-router/src/core/helper/html/index.d.ts
+declare const html: (strings: TemplateStringsArray, ...values: unknown[]) => HtmlEscapedString | Promise<HtmlEscapedString>;
+//#endregion
+export { html as t };

package/lib/index.js

@@ -1,4 +1,4 @@
-import { t as Context } from "./context-DDO0cfuP.js";
-import { t as Acryl } from "./app-BM0rTCp7.js";
-import "./core-CaY8XDZ6.js";
+import { t as Context } from "./context-CkOh7Ygv.js";
+import { t as Acryl } from "./app-CQcGWjrk.js";
+import "./core-BOu1jYua.js";
 export { Acryl, Context };

package/lib/ip-restriction-jKtKCRM_.js

@@ -0,0 +1,166 @@
+import { t as HTTPException } from "./http-exception-MjWkT89V.js";
+import { a as convertIPv6BinaryToString, i as convertIPv4ToBinary, l as isIPv4MappedIPv6, o as convertIPv6ToBinary, r as convertIPv4MappedIPv6ToIPv4, s as distinctRemoteAddr } from "./ipaddr-DCoIo528.js";
+//#region ../../plugins/acryl-router/src/core/middleware/ip-restriction/index.ts
+const IS_CIDR_NOTATION_REGEX = /\/[^/]*$/;
+const parseCidrPrefix = (rule, prefix, max) => {
+	if (!/^[0-9]{1,3}$/.test(prefix)) throw new TypeError(`Invalid rule: ${rule}`);
+	const parsedPrefix = parseInt(prefix);
+	if (parsedPrefix > max) throw new TypeError(`Invalid rule: ${rule}`);
+	return parsedPrefix;
+};
+const buildMatcher = (rules) => {
+	const functionRules = [];
+	const staticRules = /* @__PURE__ */ new Set();
+	const staticIPv4Rules = /* @__PURE__ */ new Set();
+	const staticIPv6Rules = /* @__PURE__ */ new Set();
+	const cidrRules = [];
+	const registerStaticRule = (rule) => {
+		const type = distinctRemoteAddr(rule);
+		if (type === void 0) throw new TypeError(`Invalid rule: ${rule}`);
+		if (type === "IPv4") {
+			const ipv4binary = convertIPv4ToBinary(rule);
+			staticRules.add(rule);
+			staticRules.add(`::ffff:${rule}`);
+			staticIPv4Rules.add(ipv4binary);
+			staticIPv6Rules.add(65535n << 32n | ipv4binary);
+		} else {
+			const ipv6binary = convertIPv6ToBinary(rule);
+			const ipv6Addr = convertIPv6BinaryToString(ipv6binary);
+			staticRules.add(ipv6Addr);
+			staticIPv6Rules.add(ipv6binary);
+			if (isIPv4MappedIPv6(ipv6binary)) {
+				staticRules.add(ipv6Addr.substring(7));
+				staticIPv4Rules.add(convertIPv4MappedIPv6ToIPv4(ipv6binary));
+			}
+		}
+	};
+	for (let rule of rules) if (rule === "*") return () => true;
+	else if (typeof rule === "function") functionRules.push(rule);
+	else {
+		if (IS_CIDR_NOTATION_REGEX.test(rule)) {
+			const separatedRule = rule.split("/");
+			const addrStr = separatedRule[0];
+			const type = distinctRemoteAddr(addrStr);
+			if (type === void 0) throw new TypeError(`Invalid rule: ${rule}`);
+			let isIPv4 = type === "IPv4";
+			let prefix = parseCidrPrefix(rule, separatedRule[1], isIPv4 ? 32 : 128);
+			if (isIPv4 ? prefix === 32 : prefix === 128) rule = addrStr;
+			else {
+				let addr = (isIPv4 ? convertIPv4ToBinary : convertIPv6ToBinary)(addrStr);
+				if (type === "IPv6" && isIPv4MappedIPv6(addr) && prefix >= 96) {
+					isIPv4 = true;
+					addr = convertIPv4MappedIPv6ToIPv4(addr);
+					prefix -= 96;
+				}
+				const mask = (1n << BigInt(prefix)) - 1n << BigInt((isIPv4 ? 32 : 128) - prefix);
+				cidrRules.push([
+					isIPv4,
+					addr & mask,
+					mask
+				]);
+				continue;
+			}
+		}
+		registerStaticRule(rule);
+	}
+	return (remote) => {
+		if (staticRules.has(remote.addr)) return true;
+		const remoteAddr = remote.binaryAddr ||= (remote.isIPv4 ? convertIPv4ToBinary : convertIPv6ToBinary)(remote.addr);
+		const remoteIPv4Addr = remote.isIPv4 || isIPv4MappedIPv6(remoteAddr) ? remote.isIPv4 ? remoteAddr : convertIPv4MappedIPv6ToIPv4(remoteAddr) : void 0;
+		if ((remote.isIPv4 ? staticIPv4Rules : staticIPv6Rules).has(remoteAddr)) return true;
+		for (const [isIPv4, addr, mask] of cidrRules) {
+			if (isIPv4) {
+				if (remoteIPv4Addr === void 0) continue;
+				if ((remoteIPv4Addr & mask) === addr) return true;
+				continue;
+			}
+			if (remote.isIPv4) continue;
+			if ((remoteAddr & mask) === addr) return true;
+		}
+		for (const rule of functionRules) if (rule({
+			addr: remote.addr,
+			type: remote.type
+		})) return true;
+		return false;
+	};
+};
+/**
+* IP Restriction Middleware for Acryl.
+*
+*
+* @param {GetConnInfo | ((c: Context) => string)} getIP - A function to retrieve the client IP address. Use `getConnInfo` from the appropriate runtime adapter.
+* @param {IPRestrictionRules} rules - An object with optional `denyList` and `allowList` arrays of IP rules. Each rule can be a static IP, a CIDR range, or a custom function.
+* @param {(remote: { addr: string; type: AddressType }, c: Context) => Response | Promise<Response>} [onError] - Optional custom handler invoked when a request is blocked. Defaults to returning a 403 Forbidden response.
+* @returns {MiddlewareHandler} The middleware handler function.
+*
+* @example
+* ```ts
+* import { Acryl } from 'acrylblends'
+* import { ipRestriction } from 'acrylblends/ip-restriction'
+* import { getConnInfo } from 'acrylblends/cloudflare-workers'
+*
+* const app = new Acryl()
+*
+* app.use(
+*   '*',
+*   ipRestriction(getConnInfo, {
+*     // Block a specific IP and an entire subnet
+*     denyList: ['192.168.0.5', '10.0.0.0/8'],
+*     // Only allow requests from localhost and a private range
+*     allowList: ['127.0.0.1', '::1', '192.168.1.0/24'],
+*   })
+* )
+*
+* // With a custom error handler
+* app.use(
+*   '/admin/*',
+*   ipRestriction(
+*     getConnInfo,
+*     { allowList: ['203.0.113.0/24'] },
+*     (remote, c) => c.text(`Access denied for ${remote.addr}`, 403)
+*   )
+* )
+*
+* app.get('/', (c) => c.text('Hello!'))
+* ```
+*/
+const ipRestriction = (getIP, { denyList = [], allowList = [] }, onError) => {
+	const allowLength = allowList.length;
+	const denyMatcher = buildMatcher(denyList);
+	const allowMatcher = buildMatcher(allowList);
+	const blockError = (c) => new HTTPException(403, { res: c.text("Forbidden", { status: 403 }) });
+	return async function ipRestriction(c, next) {
+		const connInfo = getIP(c);
+		const addr = typeof connInfo === "string" ? connInfo : connInfo.remote.address;
+		if (!addr) throw blockError(c);
+		const type = typeof connInfo !== "string" && connInfo.remote.addressType || distinctRemoteAddr(addr);
+		const remoteData = {
+			addr,
+			type,
+			isIPv4: type === "IPv4"
+		};
+		try {
+			if (denyMatcher(remoteData)) {
+				if (onError) return onError({
+					addr,
+					type
+				}, c);
+				throw blockError(c);
+			}
+			if (allowMatcher(remoteData)) return await next();
+		} catch (e) {
+			if (e instanceof TypeError && e.code === "ERR_INVALID_IP_ADDRESS") throw blockError(c);
+			throw e;
+		}
+		if (allowLength === 0) return await next();
+		else {
+			if (onError) return await onError({
+				addr,
+				type
+			}, c);
+			throw blockError(c);
+		}
+	};
+};
+//#endregion
+export { ipRestriction as t };

package/lib/ip-restriction.js

@@ -1,166 +1,2 @@
-import { HTTPException } from "./http-exception.js";
-import { convertIPv4MappedIPv6ToIPv4, convertIPv4ToBinary, convertIPv6BinaryToString, convertIPv6ToBinary, distinctRemoteAddr, isIPv4MappedIPv6 } from "./utils/ipaddr.js";
-//#region ../../plugins/acryl-router/src/core/middleware/ip-restriction/index.ts
-const IS_CIDR_NOTATION_REGEX = /\/[^/]*$/;
-const parseCidrPrefix = (rule, prefix, max) => {
-	if (!/^[0-9]{1,3}$/.test(prefix)) throw new TypeError(`Invalid rule: ${rule}`);
-	const parsedPrefix = parseInt(prefix);
-	if (parsedPrefix > max) throw new TypeError(`Invalid rule: ${rule}`);
-	return parsedPrefix;
-};
-const buildMatcher = (rules) => {
-	const functionRules = [];
-	const staticRules = /* @__PURE__ */ new Set();
-	const staticIPv4Rules = /* @__PURE__ */ new Set();
-	const staticIPv6Rules = /* @__PURE__ */ new Set();
-	const cidrRules = [];
-	const registerStaticRule = (rule) => {
-		const type = distinctRemoteAddr(rule);
-		if (type === void 0) throw new TypeError(`Invalid rule: ${rule}`);
-		if (type === "IPv4") {
-			const ipv4binary = convertIPv4ToBinary(rule);
-			staticRules.add(rule);
-			staticRules.add(`::ffff:${rule}`);
-			staticIPv4Rules.add(ipv4binary);
-			staticIPv6Rules.add(65535n << 32n | ipv4binary);
-		} else {
-			const ipv6binary = convertIPv6ToBinary(rule);
-			const ipv6Addr = convertIPv6BinaryToString(ipv6binary);
-			staticRules.add(ipv6Addr);
-			staticIPv6Rules.add(ipv6binary);
-			if (isIPv4MappedIPv6(ipv6binary)) {
-				staticRules.add(ipv6Addr.substring(7));
-				staticIPv4Rules.add(convertIPv4MappedIPv6ToIPv4(ipv6binary));
-			}
-		}
-	};
-	for (let rule of rules) if (rule === "*") return () => true;
-	else if (typeof rule === "function") functionRules.push(rule);
-	else {
-		if (IS_CIDR_NOTATION_REGEX.test(rule)) {
-			const separatedRule = rule.split("/");
-			const addrStr = separatedRule[0];
-			const type = distinctRemoteAddr(addrStr);
-			if (type === void 0) throw new TypeError(`Invalid rule: ${rule}`);
-			let isIPv4 = type === "IPv4";
-			let prefix = parseCidrPrefix(rule, separatedRule[1], isIPv4 ? 32 : 128);
-			if (isIPv4 ? prefix === 32 : prefix === 128) rule = addrStr;
-			else {
-				let addr = (isIPv4 ? convertIPv4ToBinary : convertIPv6ToBinary)(addrStr);
-				if (type === "IPv6" && isIPv4MappedIPv6(addr) && prefix >= 96) {
-					isIPv4 = true;
-					addr = convertIPv4MappedIPv6ToIPv4(addr);
-					prefix -= 96;
-				}
-				const mask = (1n << BigInt(prefix)) - 1n << BigInt((isIPv4 ? 32 : 128) - prefix);
-				cidrRules.push([
-					isIPv4,
-					addr & mask,
-					mask
-				]);
-				continue;
-			}
-		}
-		registerStaticRule(rule);
-	}
-	return (remote) => {
-		if (staticRules.has(remote.addr)) return true;
-		const remoteAddr = remote.binaryAddr ||= (remote.isIPv4 ? convertIPv4ToBinary : convertIPv6ToBinary)(remote.addr);
-		const remoteIPv4Addr = remote.isIPv4 || isIPv4MappedIPv6(remoteAddr) ? remote.isIPv4 ? remoteAddr : convertIPv4MappedIPv6ToIPv4(remoteAddr) : void 0;
-		if ((remote.isIPv4 ? staticIPv4Rules : staticIPv6Rules).has(remoteAddr)) return true;
-		for (const [isIPv4, addr, mask] of cidrRules) {
-			if (isIPv4) {
-				if (remoteIPv4Addr === void 0) continue;
-				if ((remoteIPv4Addr & mask) === addr) return true;
-				continue;
-			}
-			if (remote.isIPv4) continue;
-			if ((remoteAddr & mask) === addr) return true;
-		}
-		for (const rule of functionRules) if (rule({
-			addr: remote.addr,
-			type: remote.type
-		})) return true;
-		return false;
-	};
-};
-/**
-* IP Restriction Middleware for Acryl.
-*
-*
-* @param {GetConnInfo | ((c: Context) => string)} getIP - A function to retrieve the client IP address. Use `getConnInfo` from the appropriate runtime adapter.
-* @param {IPRestrictionRules} rules - An object with optional `denyList` and `allowList` arrays of IP rules. Each rule can be a static IP, a CIDR range, or a custom function.
-* @param {(remote: { addr: string; type: AddressType }, c: Context) => Response | Promise<Response>} [onError] - Optional custom handler invoked when a request is blocked. Defaults to returning a 403 Forbidden response.
-* @returns {MiddlewareHandler} The middleware handler function.
-*
-* @example
-* ```ts
-* import { Acryl } from 'acrylblends'
-* import { ipRestriction } from 'acrylblends/ip-restriction'
-* import { getConnInfo } from 'acrylblends/cloudflare-workers'
-*
-* const app = new Acryl()
-*
-* app.use(
-*   '*',
-*   ipRestriction(getConnInfo, {
-*     // Block a specific IP and an entire subnet
-*     denyList: ['192.168.0.5', '10.0.0.0/8'],
-*     // Only allow requests from localhost and a private range
-*     allowList: ['127.0.0.1', '::1', '192.168.1.0/24'],
-*   })
-* )
-*
-* // With a custom error handler
-* app.use(
-*   '/admin/*',
-*   ipRestriction(
-*     getConnInfo,
-*     { allowList: ['203.0.113.0/24'] },
-*     (remote, c) => c.text(`Access denied for ${remote.addr}`, 403)
-*   )
-* )
-*
-* app.get('/', (c) => c.text('Hello!'))
-* ```
-*/
-const ipRestriction = (getIP, { denyList = [], allowList = [] }, onError) => {
-	const allowLength = allowList.length;
-	const denyMatcher = buildMatcher(denyList);
-	const allowMatcher = buildMatcher(allowList);
-	const blockError = (c) => new HTTPException(403, { res: c.text("Forbidden", { status: 403 }) });
-	return async function ipRestriction(c, next) {
-		const connInfo = getIP(c);
-		const addr = typeof connInfo === "string" ? connInfo : connInfo.remote.address;
-		if (!addr) throw blockError(c);
-		const type = typeof connInfo !== "string" && connInfo.remote.addressType || distinctRemoteAddr(addr);
-		const remoteData = {
-			addr,
-			type,
-			isIPv4: type === "IPv4"
-		};
-		try {
-			if (denyMatcher(remoteData)) {
-				if (onError) return onError({
-					addr,
-					type
-				}, c);
-				throw blockError(c);
-			}
-			if (allowMatcher(remoteData)) return await next();
-		} catch (e) {
-			if (e instanceof TypeError && e.code === "ERR_INVALID_IP_ADDRESS") throw blockError(c);
-			throw e;
-		}
-		if (allowLength === 0) return await next();
-		else {
-			if (onError) return await onError({
-				addr,
-				type
-			}, c);
-			throw blockError(c);
-		}
-	};
-};
-//#endregion
+import { t as ipRestriction } from "./ip-restriction-jKtKCRM_.js";
 export { ipRestriction };