fix(security): require explicit trust for internal tool routes

[icecrasher321]

Summary

• require explicit trust policies for dynamic internal tool routes
• reject relative and non-HTTP(S) URLs on the external tool transport before credentials are generated
• enforce registry coverage with a static audit and runtime branch probes

Type of Change

• Bug fix

Testing

• bunx vitest run tools (4,743 passed)
• bunx vitest run executor/handlers/api/api-handler.test.ts executor/utils/http.test.ts providers/utils.test.ts (184 passed)
• bun run type-check
• bun run lint
• bun run check:audits
• bun run apps/sim/scripts/check-block-registry.ts origin/staging

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs	Ready	Preview	Aug 26, 2026 2:32am

[cubic-dev-ai]

All reported issues were addressed across 118 files

<sub>Reply with feedback, questions, or to request a fix.

Re-trigger cubic</sub>

[icecrasher321]

@cubic-dev-ai review this PR

[icecrasher321]

@greptile-apps review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@icecrasher321 I have started the AI code review. It will take a few minutes to complete.

[greptile-apps]

Greptile Summary

The PR replaces inferred trust for dynamic tool URLs with explicit internal-route policies and validates resolved URLs before request credentials are generated.

• Marks trusted dynamic Sim API routes as internal and encodes interpolated path segments.
• Rejects relative and non-HTTP(S) URLs on the external transport.
• Adds static auditing and runtime probes for registry-wide request-boundary coverage.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
apps/sim/tools/request-transport.ts	Introduces definition-owned route trust and validates internal and external URLs before preparing requests.
apps/sim/tools/types.ts	Extends tool request definitions with an explicit static or parameter-dependent internal trust policy.
scripts/check-tool-request-boundary.ts	Adds a static audit for missing trust policies and unsafe interpolation in dynamic internal tool routes.
apps/sim/tools/request-transport.test.ts	Adds registry-wide probes and focused tests for internal-route canonicalization and external URL restrictions.

_{Reviews (4): Last reviewed commit: "fix(tools): validate request trust polic..." | Re-trigger Greptile}

[icecrasher321]

@greptile-apps review this PR

[cubic-dev-ai]

All reported issues were addressed across 118 files

<sub>Reply with feedback, questions, or to request a fix.

Re-trigger cubic</sub>

[icecrasher321]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@icecrasher321 I have started the AI code review. It will take a few minutes to complete.

[icecrasher321]

@greptile-apps review this PR

[cubic-dev-ai]

All reported issues were addressed across 118 files

<sub>Reply with feedback, questions, or to request a fix.

Re-trigger cubic</sub>

[icecrasher321]

@greptile-apps review this PR

[icecrasher321]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@icecrasher321 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 118 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}