Function validateCrawlDomain

server/src/utils/url-security.ts:116–123

(domain: string)

 * Returns the normalized domain on success, throws on validation failure.
 */
export async function validateCrawlDomain(domain: string): Promise<string> {
  const normalized = domain.toLowerCase().trim();
  if (!DOMAIN_RE.test(normalized)) {
    throw new Error('Invalid domain format');
  }
  await validateHostResolution(normalized);
  return normalized;
}

/**
 * Validate an externally-reachable URL the server will contact on the caller's