saveRemoteMedia,

} from "openclaw/plugin-sdk/media-runtime";

import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";

import { getDefaultSsrFPolicy } from "../urbit/context.js";

const MAX_IMAGES_PER_MESSAGE = 8;

const TLON_MEDIA_DOWNLOAD_IDLE_TIMEOUT_MS = 30_000;

url,

maxBytes: MAX_IMAGE_BYTES,

readIdleTimeoutMs: TLON_MEDIA_DOWNLOAD_IDLE_TIMEOUT_MS,

ssrfPolicy: getDefaultSsrFPolicy(),

ssrfPolicy: undefined,

requestInit: { method: "GET" },

};

ship: normalizeUrbitShip(ship, validated.hostname),

};

}

/**

* Get the default SSRF policy for image uploads.

* Uses a restrictive policy that blocks private networks by default.

*/

export function getDefaultSsrFPolicy(): undefined {

// Default: block private networks for image uploads (safer default)

return undefined;

}

*/

import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";

import { uploadFile } from "../tlon-api.js";

import { getDefaultSsrFPolicy } from "./context.js";

/**

* Fetch an image from a URL and upload it to Tlon storage.

const { response, release } = await fetchWithSsrFGuard({

url: imageUrl,

init: { method: "GET" },

policy: getDefaultSsrFPolicy(),

policy: undefined,

auditContext: "tlon-upload-image",

});