Function validateConnectServerUrl

apps/sim/app/api/tools/onepassword/utils.ts:290–319

(serverUrl: string)

 * @throws Error if the URL is invalid, fails the IP policy, or DNS fails.
 */
export async function validateConnectServerUrl(serverUrl: string): Promise<string> {
  let hostname: string
  try {
    hostname = new URL(serverUrl).hostname
  } catch {
    throw new Error('1Password server URL is not a valid URL')
  }

  const clean =
    hostname.startsWith('[') && hostname.endsWith(']') ? hostname.slice(1, -1) : hostname

  if (ipaddr.isValid(clean)) {
    assertConnectIpAllowed(clean, clean)
    return clean
  }

  let address: string
  try {
    ;({ address } = await dns.lookup(clean, { verbatim: true }))
  } catch (error) {
    connectLogger.warn('DNS lookup failed for 1Password Connect server URL', {
      hostname: clean,
      error: toError(error).message,
    })
    throw new Error('1Password server URL hostname could not be resolved')
  }

  assertConnectIpAllowed(address, clean)
  return address
}

/** Minimal response shape used by all connectRequest callers. */
export interface ConnectResponse {