From 6af5180513b9b6c0f75a3ded75bfdb66e5ae7f71 Mon Sep 17 00:00:00 2001 From: Thomas Friedel Date: Sat, 18 Apr 2026 23:39:34 +0200 Subject: [PATCH] feat(sandbox): extend managed allowlist with build + dataset egress domains MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Widens the Bash-subprocess egress allowlist for common agent workflows: Anthropic direct (api, statsig), Ubuntu mirrors, NodeSource/deb for Node, crates.io (Rust), yarn, full npm + pypi groups, GitHub release assets, and wildcards for geoboundaries, googleapis, jsdelivr — covers dataset fetches and CDN-backed library assets that previously failed silently. Co-Authored-By: Claude Opus 4.7 (1M context) --- sandbox/managed-settings.json | 30 ++++++++++++++++++++++++------ 1 file changed, 24 insertions(+), 6 deletions(-) diff --git a/sandbox/managed-settings.json b/sandbox/managed-settings.json index 167b771..1d2b632 100644 --- a/sandbox/managed-settings.json +++ b/sandbox/managed-settings.json @@ -7,15 +7,33 @@ "enableWeakerNestedSandbox": true, "network": { "allowedDomains": [ - "pypi.org", - "files.pythonhosted.org", - "registry.npmjs.org", + "anthropic-proxy", + "api.anthropic.com", + "statsig.anthropic.com", "github.com", "api.github.com", - "raw.githubusercontent.com", - "objects.githubusercontent.com", "codeload.github.com", - "anthropic-proxy" + "objects.githubusercontent.com", + "raw.githubusercontent.com", + "release-assets.githubusercontent.com", + "registry.npmjs.org", + "npmjs.com", + "npmjs.org", + "yarnpkg.com", + "registry.yarnpkg.com", + "pypi.org", + "pythonhosted.org", + "files.pythonhosted.org", + "crates.io", + "index.crates.io", + "static.crates.io", + "deb.nodesource.com", + "archive.ubuntu.com", + "security.ubuntu.com", + "*.geoboundaries.org", + "www.geoboundaries.org", + "*.googleapis.com", + "*.jsdelivr.net" ] } },