import { UserError } from 'n8n-workflow';

import { markNonRetryable } from '../http/retryability';

/**
 * Error thrown when a destination hostname is denied by SSRF hostname policy.
 *
 * This is an egress-governance control (deny by name), distinct from the
 * IP-based {@link SsrfBlockedIpError} that backs the robust SSRF guarantees.
 */
export class SsrfBlockedHostnameError extends UserError {
	readonly hostname: string;

	constructor(hostname: string) {
		super('The request was blocked because the destination hostname is restricted', {
			description:
				`The hostname '${hostname}' is on the configured deny-list. ` +
				'If you need to reach this destination, ask your n8n administrator to remove it from ' +
				'the blocked hostnames or add it to the allowed hostnames in the environment configuration.',
			extra: { hostname },
		});

		this.name = 'SsrfBlockedHostnameError';
		this.hostname = hostname;
		markNonRetryable(this);
	}
}