feat: change whitelist bypass behaviour

bypass/bypass.go

@@ -1,6 +1,9 @@
 package bypass
 
-import "context"
+import (
+	"context"
+	"slices"
+)
 
 type Options struct {
 	Host string
@@ -24,6 +27,7 @@ func WithPathOption(path string) Option {
 // Bypass is a filter of address (IP or domain).
 type Bypass interface {
 	// Contains reports whether the bypass includes addr.
+	IsWhitelist() bool
 	Contains(ctx context.Context, network, addr string, opts ...Option) bool
 }
 
@@ -38,10 +42,33 @@ func BypassGroup(bypasses ...Bypass) Bypass {
 }
 
 func (p *bypassGroup) Contains(ctx context.Context, network, addr string, opts ...Option) bool {
+	var whitelist, blacklist []bool
 	for _, bypass := range p.bypasses {
-		if bypass != nil && bypass.Contains(ctx, network, addr, opts...) {
-			return true
+		result := bypass.Contains(ctx, network, addr, opts...)
+		if bypass.IsWhitelist() {
+			whitelist = append(whitelist, result)
+		} else {
+			blacklist = append(blacklist, result)
 		}
 	}
+	status := false
+	if len(whitelist) > 0 {
+		if slices.Contains(whitelist, false) {
+			status = false
+		} else {
+			status = true
+		}
+	}
+	if !status && len(blacklist) > 0 {
+		if slices.Contains(blacklist, true) {
+			status = true
+		} else {
+			status = false
+		}
+	}
+	return status
+}
+
+func (p *bypassGroup) IsWhitelist() bool {
 	return false
 }