Skip to content

refactor: derive GlobalOutbound allowed hostname from env - #23

Merged
mattzcarey merged 1 commit into
mainfrom
feat/global-outbound-use-env-base
Feb 19, 2026
Merged

refactor: derive GlobalOutbound allowed hostname from env#23
mattzcarey merged 1 commit into
mainfrom
feat/global-outbound-use-env-base

Conversation

@mattzcarey

@mattzcarey mattzcarey commented Feb 19, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Replaces hardcoded api.cloudflare.com in GlobalOutbound with the hostname derived from this.env.CLOUDFLARE_API_BASE
  • The outbound restriction now automatically follows the configured API base URL

Test plan

  • Deploy to staging and verify execute tool still works
  • Verify requests to non-API domains are still blocked

Use this.env.CLOUDFLARE_API_BASE instead of a hardcoded hostname in
the GlobalOutbound fetch handler so the restriction follows the
configured API base URL.
@mattzcarey
mattzcarey merged commit 0268fa5 into main Feb 19, 2026
1 check passed
@mattzcarey
mattzcarey deleted the feat/global-outbound-use-env-base branch February 19, 2026 23:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant