import { isPublicHost } from "#lib/publicFetch.ts";

// markup renders client-side, so no renderer can hold the camo secret and
// the web route signs on demand, a public oracle by construction. this
// bounds what that oracle can aim the worker at. camo/src/index.js mirrors
// it, the two deploy independently
export const signableTarget = (url: URL): boolean => isPublicHost(url.hostname);