fix(security): require explicit trust for internal tool routes

apps/sim/tools/agiloft/async_status.ts

@@ -51,6 +51,7 @@ export const agiloftAsyncStatusTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/agiloft/async_status',
     method: 'POST',
     headers: () => ({ 'Content-Type': 'application/json' }),

apps/sim/tools/agiloft/attachment_info.ts

@@ -59,6 +59,7 @@ export const agiloftAttachmentInfoTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/agiloft/attachment_info',
     method: 'POST',
     headers: () => ({ 'Content-Type': 'application/json' }),

apps/sim/tools/agiloft/create_record.ts

@@ -49,6 +49,7 @@ export const agiloftCreateRecordTool: ToolConfig<AgiloftCreateRecordParams, Agil
     },
 
     request: {
+      internal: true,
       url: () => '/api/tools/agiloft/create_record',
       method: 'POST',
       headers: () => ({ 'Content-Type': 'application/json' }),

apps/sim/tools/agiloft/delete_record.ts

@@ -62,6 +62,7 @@ export const agiloftDeleteRecordTool: ToolConfig<AgiloftDeleteRecordParams, Agil
     },
 
     request: {
+      internal: true,
       url: () => '/api/tools/agiloft/delete_record',
       method: 'POST',
       headers: () => ({ 'Content-Type': 'application/json' }),

apps/sim/tools/agiloft/get_choice_line_id.ts

@@ -60,6 +60,7 @@ export const agiloftGetChoiceLineIdTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/agiloft/get_choice_line_id',
     method: 'POST',
     headers: () => ({ 'Content-Type': 'application/json' }),

apps/sim/tools/agiloft/list_tables.ts

@@ -56,6 +56,7 @@ export const agiloftListTablesTool: ToolConfig<AgiloftListTablesParams, AgiloftL
     },
 
     request: {
+      internal: true,
       url: () => '/api/tools/agiloft/list_tables',
       method: 'POST',
       headers: () => ({ 'Content-Type': 'application/json' }),

apps/sim/tools/agiloft/lock_record.ts

@@ -59,6 +59,7 @@ export const agiloftLockRecordTool: ToolConfig<AgiloftLockRecordParams, AgiloftL
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/agiloft/lock_record',
     method: 'POST',
     headers: () => ({ 'Content-Type': 'application/json' }),

apps/sim/tools/agiloft/nlp_search.ts

@@ -62,6 +62,7 @@ export const agiloftNlpSearchTool: ToolConfig<AgiloftNlpSearchParams, AgiloftNlp
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/agiloft/nlp_search',
     method: 'POST',
     headers: () => ({ 'Content-Type': 'application/json' }),

apps/sim/tools/agiloft/read_record.ts

@@ -53,6 +53,7 @@ export const agiloftReadRecordTool: ToolConfig<AgiloftReadRecordParams, AgiloftR
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/agiloft/read_record',
     method: 'POST',
     headers: () => ({ 'Content-Type': 'application/json' }),

apps/sim/tools/agiloft/remove_attachment.ts

@@ -65,6 +65,7 @@ export const agiloftRemoveAttachmentTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/agiloft/remove_attachment',
     method: 'POST',
     headers: () => ({ 'Content-Type': 'application/json' }),

apps/sim/tools/agiloft/run_action_button.ts

@@ -60,6 +60,7 @@ export const agiloftRunActionButtonTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/agiloft/run_action_button',
     method: 'POST',
     headers: () => ({ 'Content-Type': 'application/json' }),

apps/sim/tools/agiloft/saved_search.ts

@@ -44,6 +44,7 @@ export const agiloftSavedSearchTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/agiloft/saved_search',
     method: 'POST',
     headers: () => ({ 'Content-Type': 'application/json' }),

apps/sim/tools/agiloft/search_records.ts

@@ -77,6 +77,7 @@ export const agiloftSearchRecordsTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/agiloft/search_records',
     method: 'POST',
     headers: () => ({ 'Content-Type': 'application/json' }),

apps/sim/tools/agiloft/select_records.ts

@@ -51,6 +51,7 @@ export const agiloftSelectRecordsTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/agiloft/select_records',
     method: 'POST',
     headers: () => ({ 'Content-Type': 'application/json' }),

apps/sim/tools/agiloft/update_record.ts

@@ -55,6 +55,7 @@ export const agiloftUpdateRecordTool: ToolConfig<AgiloftUpdateRecordParams, Agil
     },
 
     request: {
+      internal: true,
       url: () => '/api/tools/agiloft/update_record',
       method: 'POST',
       headers: () => ({ 'Content-Type': 'application/json' }),

apps/sim/tools/agiloft/upsert_record.ts

@@ -66,6 +66,7 @@ export const agiloftUpsertRecordTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/agiloft/upsert_record',
     method: 'POST',
     headers: () => ({ 'Content-Type': 'application/json' }),

apps/sim/tools/confluence/add_label.ts

@@ -75,6 +75,7 @@ export const confluenceAddLabelTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/labels',
     method: 'POST',
     headers: (params: ConfluenceAddLabelParams) => ({

apps/sim/tools/confluence/create_blogpost.ts

@@ -91,6 +91,7 @@ export const confluenceCreateBlogPostTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/blogposts',
     method: 'POST',
     headers: (params: ConfluenceCreateBlogPostParams) => ({

apps/sim/tools/confluence/create_comment.ts

@@ -66,6 +66,7 @@ export const confluenceCreateCommentTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/comments',
     method: 'POST',
     headers: (params: ConfluenceCreateCommentParams) => {

apps/sim/tools/confluence/create_page.ts

@@ -87,6 +87,7 @@ export const confluenceCreatePageTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/create-page',
     method: 'POST',
     headers: (params: ConfluenceCreatePageParams) => {

apps/sim/tools/confluence/create_page_property.ts

@@ -79,6 +79,7 @@ export const confluenceCreatePagePropertyTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/page-properties',
     method: 'POST',
     headers: (params: ConfluenceCreatePagePropertyParams) => ({

apps/sim/tools/confluence/create_space.ts

@@ -80,6 +80,7 @@ export const confluenceCreateSpaceTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/space',
     method: 'POST',
     headers: (params: ConfluenceCreateSpaceParams) => ({

apps/sim/tools/confluence/create_space_property.ts

@@ -76,6 +76,7 @@ export const confluenceCreateSpacePropertyTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/space-properties',
     method: 'POST',
     headers: (params: ConfluenceCreateSpacePropertyParams) => ({

apps/sim/tools/confluence/delete_attachment.ts

@@ -59,6 +59,7 @@ export const confluenceDeleteAttachmentTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/attachment',
     method: 'DELETE',
     headers: (params: ConfluenceDeleteAttachmentParams) => {

apps/sim/tools/confluence/delete_blogpost.ts

@@ -60,6 +60,7 @@ export const confluenceDeleteBlogPostTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/blogposts',
     method: 'DELETE',
     headers: (params: ConfluenceDeleteBlogPostParams) => ({

apps/sim/tools/confluence/delete_comment.ts

@@ -59,6 +59,7 @@ export const confluenceDeleteCommentTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/comment',
     method: 'DELETE',
     headers: (params: ConfluenceDeleteCommentParams) => {

apps/sim/tools/confluence/delete_label.ts

@@ -68,6 +68,7 @@ export const confluenceDeleteLabelTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/labels',
     method: 'DELETE',
     headers: (params: ConfluenceDeleteLabelParams) => ({

apps/sim/tools/confluence/delete_page.ts

@@ -68,6 +68,7 @@ export const confluenceDeletePageTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: (params: ConfluenceDeletePageParams) => '/api/tools/confluence/page',
     method: 'DELETE',
     headers: (params: ConfluenceDeletePageParams) => {

apps/sim/tools/confluence/delete_page_property.ts

@@ -68,6 +68,7 @@ export const confluenceDeletePagePropertyTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/page-properties',
     method: 'DELETE',
     headers: (params: ConfluenceDeletePagePropertyParams) => ({

apps/sim/tools/confluence/delete_space.ts

@@ -62,6 +62,7 @@ export const confluenceDeleteSpaceTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/space',
     method: 'DELETE',
     headers: (params: ConfluenceDeleteSpaceParams) => ({

apps/sim/tools/confluence/delete_space_property.ts

@@ -68,6 +68,7 @@ export const confluenceDeleteSpacePropertyTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/space-properties',
     method: 'POST',
     headers: (params: ConfluenceDeleteSpacePropertyParams) => ({

apps/sim/tools/confluence/get_blogpost.ts

@@ -84,6 +84,7 @@ export const confluenceGetBlogPostTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/blogposts',
     method: 'POST',
     headers: (params: ConfluenceGetBlogPostParams) => ({

apps/sim/tools/confluence/get_page_ancestors.ts

@@ -74,6 +74,7 @@ export const confluenceGetPageAncestorsTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/page-ancestors',
     method: 'POST',
     headers: (params: ConfluenceGetPageAncestorsParams) => ({

apps/sim/tools/confluence/get_page_children.ts

@@ -83,6 +83,7 @@ export const confluenceGetPageChildrenTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/page-children',
     method: 'POST',
     headers: (params: ConfluenceGetPageChildrenParams) => ({

apps/sim/tools/confluence/get_page_descendants.ts

@@ -84,6 +84,7 @@ export const confluenceGetPageDescendantsTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/page-descendants',
     method: 'POST',
     headers: (params: ConfluenceGetPageDescendantsParams) => ({

apps/sim/tools/confluence/get_page_version.ts

@@ -89,6 +89,7 @@ export const confluenceGetPageVersionTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/page-versions',
     method: 'POST',
     headers: (params: ConfluenceGetPageVersionParams) => ({

apps/sim/tools/confluence/get_pages_by_label.ts

@@ -88,6 +88,7 @@ export const confluenceGetPagesByLabelTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: (params: ConfluenceGetPagesByLabelParams) => {
       const query = new URLSearchParams({
         domain: params.domain,

apps/sim/tools/confluence/get_space.ts

@@ -71,6 +71,7 @@ export const confluenceGetSpaceTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: (params: ConfluenceGetSpaceParams) => {
       const query = new URLSearchParams({
         domain: params.domain,

apps/sim/tools/confluence/get_task.ts

@@ -70,6 +70,7 @@ export const confluenceGetTaskTool: ToolConfig<ConfluenceGetTaskParams, Confluen
     },
 
     request: {
+      internal: true,
       url: () => '/api/tools/confluence/tasks',
       method: 'POST',
       headers: (params: ConfluenceGetTaskParams) => ({

apps/sim/tools/confluence/get_user.ts

@@ -62,6 +62,7 @@ export const confluenceGetUserTool: ToolConfig<ConfluenceGetUserParams, Confluen
     },
 
     request: {
+      internal: true,
       url: () => '/api/tools/confluence/user',
       method: 'POST',
       headers: (params: ConfluenceGetUserParams) => ({

apps/sim/tools/confluence/list_attachments.ts

@@ -80,6 +80,7 @@ export const confluenceListAttachmentsTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: (params: ConfluenceListAttachmentsParams) => {
       const query = new URLSearchParams({
         domain: params.domain,

apps/sim/tools/confluence/list_blogposts.ts

@@ -95,6 +95,7 @@ export const confluenceListBlogPostsTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: (params: ConfluenceListBlogPostsParams) => {
       const query = new URLSearchParams({
         domain: params.domain,

apps/sim/tools/confluence/list_blogposts_in_space.ts

@@ -108,6 +108,7 @@ export const confluenceListBlogPostsInSpaceTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/space-blogposts',
     method: 'POST',
     headers: (params: ConfluenceListBlogPostsInSpaceParams) => ({

apps/sim/tools/confluence/list_comments.ts

@@ -87,6 +87,7 @@ export const confluenceListCommentsTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: (params: ConfluenceListCommentsParams) => {
       const query = new URLSearchParams({
         domain: params.domain,

apps/sim/tools/confluence/list_labels.ts

@@ -78,6 +78,7 @@ export const confluenceListLabelsTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: (params: ConfluenceListLabelsParams) => {
       const query = new URLSearchParams({
         domain: params.domain,

apps/sim/tools/confluence/list_page_properties.ts

@@ -84,6 +84,7 @@ export const confluenceListPagePropertiesTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: (params: ConfluenceListPagePropertiesParams) => {
       const query = new URLSearchParams({
         domain: params.domain,

apps/sim/tools/confluence/list_page_versions.ts

@@ -81,6 +81,7 @@ export const confluenceListPageVersionsTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/page-versions',
     method: 'POST',
     headers: (params: ConfluenceListPageVersionsParams) => ({

apps/sim/tools/confluence/list_pages_in_space.ts

@@ -111,6 +111,7 @@ export const confluenceListPagesInSpaceTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/space-pages',
     method: 'POST',
     headers: (params: ConfluenceListPagesInSpaceParams) => ({

apps/sim/tools/confluence/list_space_labels.ts

@@ -79,6 +79,7 @@ export const confluenceListSpaceLabelsTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: (params: ConfluenceListSpaceLabelsParams) => {
       const query = new URLSearchParams({
         domain: params.domain,

apps/sim/tools/confluence/list_space_permissions.ts

@@ -83,6 +83,7 @@ export const confluenceListSpacePermissionsTool: ToolConfig<
   },
 
   request: {
+    internal: true,
     url: () => '/api/tools/confluence/space-permissions',
     method: 'POST',
     headers: (params: ConfluenceListSpacePermissionsParams) => ({