matchesHostnameAllowlist,

normalizeHostname,

} from "openclaw/plugin-sdk/browser-security-runtime";

import { hasProxyEnvConfigured } from "../infra/net/proxy-env.js";

import {

isPrivateNetworkAllowedByPolicy,

resolvePinnedHostnameWithPolicy,

export type BrowserNavigationPolicyOptions = {

ssrfPolicy?: SsrFPolicy;

browserProxyMode?: BrowserNavigationProxyMode;

};

export type BrowserNavigationProxyMode = "direct" | "explicit-browser-proxy";

export type BrowserNavigationRequestLike = {

url(): string;

redirectedFrom(): BrowserNavigationRequestLike | null;

};

export function withBrowserNavigationPolicy(

ssrfPolicy?: SsrFPolicy,

opts?: { browserProxyMode?: BrowserNavigationProxyMode },

): BrowserNavigationPolicyOptions {

return ssrfPolicy ? { ssrfPolicy } : {};

return {

...(ssrfPolicy ? { ssrfPolicy } : {}),

...(opts?.browserProxyMode && opts.browserProxyMode !== "direct"

? { browserProxyMode: opts.browserProxyMode }

: {}),

};

}

export function requiresInspectableBrowserNavigationRedirects(ssrfPolicy?: SsrFPolicy): boolean {

);

}

// Browser network stacks may apply env proxy routing at connect-time, which

// can bypass strict destination-binding intent from pre-navigation DNS checks.

// In strict mode, fail closed unless private-network navigation is explicitly

// enabled by policy.

if (hasProxyEnvConfigured() && !isPrivateNetworkAllowedByPolicy(opts.ssrfPolicy)) {

// Browser proxy routing hides the final connect target from this process.

// Only block when the browser profile is known to be proxy-routed; Gateway

// provider proxy env alone is not proof of browser page proxy behavior.

if (

opts.browserProxyMode === "explicit-browser-proxy" &&

!isPrivateNetworkAllowedByPolicy(opts.ssrfPolicy)

) {

throw new InvalidBrowserNavigationUrlError(

"Navigation blocked: strict browser SSRF policy cannot be enforced while env proxy variables are set",

"Navigation blocked: strict browser SSRF policy cannot be enforced while this browser profile is proxy-routed",

);

}

url,

lookupFn: opts.lookupFn,

ssrfPolicy: opts.ssrfPolicy,

browserProxyMode: opts.browserProxyMode,

});

}

}