syntaqxSessions g1t starts on Claude Managed Agents reach the internet, as a CI runner does: their environment's networking was limited to g1t's hosts, and limited networking also limits web_search and web_fetch to those hosts, so on flagon-io/demo #1 the session could neither look up Cloudflare Connect's start time nor open its own deploy at demo-flagonio.g1t.page, though both tools were on. The environment is unrestricted now (the person chose this over an allowlist); the token is still swapped in only on requests to g1t's hosts. An account's environment was made once and never changed, so the config hash now covers the environment too, and a changed one is updated in place (POST /v1/environments/{id}) at the account's next session. The sessions guide says so. Checked: cargo test -p g1t-integrations (76), wasm32 check of g1t-integrations.6207345History
