first commit

backend/app/services/outbound.py

@@ -0,0 +1,10 @@
+from urllib.parse import urlparse
+
+ALLOWED_SCHEMES = {"http", "https"}
+
+
+def validate_outbound_url(url: str) -> str:
+    parsed = urlparse(url.strip())
+    if parsed.scheme not in ALLOWED_SCHEMES or not parsed.netloc:
+        raise ValueError("Only http and https URLs are allowed")
+    return url.strip()