feat(network): add organization outbound routing by waleedlatif1 · Pull Request #7786 · simstudioai/sim

waleedlatif1 · 2026-09-11T21:01:14Z

Summary

Add organization outbound routing to the existing validated HTTP helpers and guarded SDK transports, with isolated pools, TLS CONNECT, canonical ownership and fail-closed routing.
Remove the additional fetch entry point and migrate callers to explicit destination profiles. Preserve streaming, multipart uploads, retry budgets, configured private model endpoints and supported deployment proxies. Extend the existing audit to reject native fetch aliases and SDK handoffs.
Combine session policies and outbound IP addresses in Security settings using shared components. Preserve the existing session URL and feature gates, keep SSO separate, and document connection coverage.
Keep gateway credentials and organization assignments in operator configuration. Configured routes reject unsupported transports, including remote sandbox execution and raw database connections; initial account OAuth and SDK-owned control traffic remain outside coverage. Production activation is separate.

Type of Change

New feature

Testing

20,889 regression tests passed; 98 skipped. Includes real Node and Bun gateway/proxy connections, TLS identity, destination pinning, organization isolation, redirects, streaming, decompression limits, cancellation and self-hosted model endpoints.
All 26 workspace type checks, lint, 46 repository audits, block registry and docs manifest checks passed. Nine boundary-audit tests passed.
Security settings were verified locally with synthetic data. Production app/worker acceptance and connection coverage remain release gates; local tests do not establish deployed routing.

Checklist

Code follows project style guidelines
Self-reviewed my changes
Tests added/updated and passing
No new warnings introduced
I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

vercel · 2026-09-11T21:01:23Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs	Ready	Preview	Sep 12, 2026 12:08am UTC

waleedlatif1 · 2026-09-11T21:01:41Z

@greptile

waleedlatif1 · 2026-09-11T21:01:42Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-11T21:01:47Z

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

waleedlatif1 · 2026-09-11T21:02:34Z

@greptile-apps please review this PR.

greptile-apps · 2026-09-11T21:06:56Z

Confidence Score: 5/5

The PR appears safe to merge; no actionable new issue or outstanding previous finding remains.

Summary

Routes supported outbound requests through organization-scoped gateway transports with fail-closed enforcement.
Propagates canonical organization ownership through authorized operations, background work, OAuth enrollment, and custom-block execution.
Adds bounded configuration snapshot caching and isolates gateway connection pools.
Combines session policies and read-only outbound IP information under Security settings while retaining legacy URL aliases.
Documents feature availability, routing limitations, and outbound allowlisting guidance.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  Operation[Authorized operation or background job] --> Scope[Canonical organization scope]
  Scope --> Policy[Resolve outbound routing policy]
  Policy -->|Direct or unconfigured| Direct[Existing network path]
  Policy -->|Gateway required| Gateway[Organization-isolated gateway transport]
  Policy -->|Blocked or unsupported| Reject[Fail closed]
  Gateway --> External[External HTTP service]
  Admin[Organization administrator] --> Security[Security settings]
  Security --> Status[Routing state and outbound IPs]

_{Reviews (7) · Last reviewed commit: "improvement(settings): document organiza..."}

waleedlatif1 · 2026-09-11T21:23:29Z

@greptile-apps please review this PR.

waleedlatif1 · 2026-09-11T21:23:30Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-11T21:23:35Z

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

waleedlatif1 · 2026-09-11T21:37:30Z

@greptile-apps please review this PR.

waleedlatif1 · 2026-09-11T21:37:31Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-11T21:37:39Z

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

waleedlatif1 · 2026-09-11T21:46:55Z

@greptile-apps please review this PR.

waleedlatif1 · 2026-09-11T21:46:56Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-11T21:47:01Z

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

waleedlatif1 · 2026-09-11T21:59:13Z

@greptile-apps please review this PR.

waleedlatif1 · 2026-09-11T21:59:14Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-11T21:59:21Z

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

waleedlatif1 · 2026-09-11T22:24:46Z

@greptile

waleedlatif1 · 2026-09-11T22:24:52Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-11T22:24:59Z

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

waleedlatif1 · 2026-09-11T22:37:59Z

@greptile

waleedlatif1 · 2026-09-11T22:38:03Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-09-11T22:38:10Z

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

waleedlatif1 · 2026-09-12T00:07:31Z

@greptile

waleedlatif1 · 2026-09-12T00:07:32Z

@cubic-dev-ai review this PR

greptile-apps · 2026-09-12T00:07:36Z

Too many files changed for review (529 files, 500 file limit).

cubic-dev-ai · 2026-09-12T00:07:40Z

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

waleedlatif1 · 2026-09-12T00:09:14Z

@greptile

feat(network): add organization outbound routing

58b0b45

waleedlatif1 requested a review from a team as a code owner September 11, 2026 21:01

vercel Bot deployed to Preview September 11, 2026 21:02 View deployment

greptile-apps Bot reviewed Sep 11, 2026

View reviewed changes

Comment thread apps/sim/lib/credential-groups/standard-oauth-provider.ts Outdated

Comment thread apps/sim/lib/workflows/executor/execution-core.ts

fix(network): scope callbacks and nested execution

94c5382

vercel Bot temporarily deployed to Preview September 11, 2026 21:22 Inactive

greptile-apps Bot reviewed Sep 11, 2026

View reviewed changes

Comment thread apps/sim/lib/core/config/appconfig.ts Outdated

fix(network): bound configuration cache and handle nested TLS sockets

2565109

vercel Bot temporarily deployed to Preview September 11, 2026 21:37 Inactive

fix(network): isolate local tunnel verification

cdd2ed0

vercel Bot deployed to Preview September 11, 2026 21:48 View deployment

improvement(network): consolidate outbound HTTP helpers

738d2d9

vercel Bot temporarily deployed to Preview September 11, 2026 21:58 Inactive

improvement(settings): combine session and network security settings

0cdcc40

vercel Bot temporarily deployed to Preview September 11, 2026 22:24 Inactive

improvement(settings): document organization security settings

cfc24f3

vercel Bot deployed to Preview September 11, 2026 22:38 View deployment

waleedlatif1 added 2 commits September 11, 2026 16:18

improvement(network): consolidate scoped request lifecycles

848b187

improvement(network): reuse validated HTTP transports

94d423e

vercel Bot deployed to Preview September 12, 2026 00:08 View deployment

Uh oh!

Conversation

waleedlatif1 commented Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Type of Change

Testing

Checklist

Uh oh!

vercel Bot commented Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

waleedlatif1 commented Sep 11, 2026

Uh oh!

waleedlatif1 commented Sep 11, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 11, 2026

Uh oh!

waleedlatif1 commented Sep 11, 2026

Uh oh!

greptile-apps Bot commented Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Confidence Score: 5/5

Summary

Diagram

Uh oh!

Uh oh!

Uh oh!

waleedlatif1 commented Sep 11, 2026

Uh oh!

waleedlatif1 commented Sep 11, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 11, 2026

Uh oh!

Uh oh!

waleedlatif1 commented Sep 11, 2026

Uh oh!

waleedlatif1 commented Sep 11, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 11, 2026

Uh oh!

waleedlatif1 commented Sep 11, 2026

Uh oh!

waleedlatif1 commented Sep 11, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 11, 2026

Uh oh!

waleedlatif1 commented Sep 11, 2026

Uh oh!

waleedlatif1 commented Sep 11, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 11, 2026

Uh oh!

waleedlatif1 commented Sep 11, 2026

Uh oh!

waleedlatif1 commented Sep 11, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 11, 2026

Uh oh!

waleedlatif1 commented Sep 11, 2026

Uh oh!

waleedlatif1 commented Sep 11, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 11, 2026

Uh oh!

waleedlatif1 commented Sep 12, 2026

Uh oh!

waleedlatif1 commented Sep 12, 2026

Uh oh!

greptile-apps Bot commented Sep 12, 2026

Uh oh!

cubic-dev-ai Bot commented Sep 12, 2026

Uh oh!

waleedlatif1 commented Sep 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

waleedlatif1 commented Sep 11, 2026 •

edited

Loading

vercel Bot commented Sep 11, 2026 •

edited

Loading

greptile-apps Bot commented Sep 11, 2026 •

edited

Loading