[{"data":1,"prerenderedAt":307},["ShallowReactive",2],{"docs-\u002Fdocs\u002Fv2\u002Fapi\u002Fconfig\u002Fpolicy\u002Fnetwork":3},{"id":4,"title":5,"body":6,"description":299,"extension":300,"meta":301,"navigation":302,"path":303,"seo":304,"stem":305,"__hash__":306},"docs\u002Fdocs\u002Fv2\u002Fapi\u002Fconfig\u002Fpolicy\u002Fnetwork.md","network",{"type":7,"value":8,"toc":296},"minimark",[9,12,21,89,99,188,197,210,215,237,292],[10,11,5],"h1",{"id":5},[13,14,15,16,20],"p",{},"Controls outbound ",[17,18,19],"code",{},"fetch()"," calls made from within the capsule. Patterns match against\nthe request hostname.",[22,23,28],"pre",{"className":24,"code":25,"language":26,"meta":27,"style":27},"language-ts shiki shiki-themes dark-plus","type NetworkPolicy = {\n    allow?: string[]   \u002F\u002F permitted hostnames or patterns\n    deny?:  string[]   \u002F\u002F blocked hostnames or patterns\n}\n","ts","",[17,29,30,47,67,83],{"__ignoreMap":27},[31,32,35,39,43],"span",{"class":33,"line":34},"line",1,[31,36,38],{"class":37},"scz_3","type",[31,40,42],{"class":41},"sNl3T"," NetworkPolicy",[31,44,46],{"class":45},"sTNBD"," = {\n",[31,48,50,54,57,60,63],{"class":33,"line":49},2,[31,51,53],{"class":52},"s3F5K","    allow",[31,55,56],{"class":45},"?: ",[31,58,59],{"class":41},"string",[31,61,62],{"class":45},"[]   ",[31,64,66],{"class":65},"sOLPB","\u002F\u002F permitted hostnames or patterns\n",[31,68,70,73,76,78,80],{"class":33,"line":69},3,[31,71,72],{"class":52},"    deny",[31,74,75],{"class":45},"?:  ",[31,77,59],{"class":41},[31,79,62],{"class":45},[31,81,82],{"class":65},"\u002F\u002F blocked hostnames or patterns\n",[31,84,86],{"class":33,"line":85},4,[31,87,88],{"class":45},"}\n",[13,90,91,94,95,98],{},[17,92,93],{},"deny"," is checked before ",[17,96,97],{},"allow",". Subdomains must be listed explicitly or use a wildcard.",[22,100,102],{"className":24,"code":101,"language":26,"meta":27,"style":27},"export default defineAgent({\n    policy: {\n        network: {\n            allow: [\"api.github.com\", \"*.linear.app\"],\n            deny:  [\"*\"],\n        },\n    },\n})\n",[17,103,104,120,128,135,156,170,176,182],{"__ignoreMap":27},[31,105,106,110,113,117],{"class":33,"line":34},[31,107,109],{"class":108},"sYbnZ","export",[31,111,112],{"class":108}," default",[31,114,116],{"class":115},"sCudf"," defineAgent",[31,118,119],{"class":45},"({\n",[31,121,122,125],{"class":33,"line":49},[31,123,124],{"class":52},"    policy:",[31,126,127],{"class":45}," {\n",[31,129,130,133],{"class":33,"line":69},[31,131,132],{"class":52},"        network:",[31,134,127],{"class":45},[31,136,137,140,143,147,150,153],{"class":33,"line":85},[31,138,139],{"class":52},"            allow:",[31,141,142],{"class":45}," [",[31,144,146],{"class":145},"sKc5r","\"api.github.com\"",[31,148,149],{"class":45},", ",[31,151,152],{"class":145},"\"*.linear.app\"",[31,154,155],{"class":45},"],\n",[31,157,159,162,165,168],{"class":33,"line":158},5,[31,160,161],{"class":52},"            deny:",[31,163,164],{"class":45},"  [",[31,166,167],{"class":145},"\"*\"",[31,169,155],{"class":45},[31,171,173],{"class":33,"line":172},6,[31,174,175],{"class":45},"        },\n",[31,177,179],{"class":33,"line":178},7,[31,180,181],{"class":45},"    },\n",[31,183,185],{"class":33,"line":184},8,[31,186,187],{"class":45},"})\n",[13,189,190,193,194,196],{},[17,191,192],{},"deny: [\"*\"]"," with a specific ",[17,195,97],{}," list is the recommended pattern for agents that\nonly need to reach known endpoints. It blocks everything not explicitly allowed.",[13,198,199,200,202,203,206,207,209],{},"No ",[17,201,5],{}," block means unrestricted outbound access. An empty ",[17,204,205],{},"allow: []"," with no\n",[17,208,93],{}," blocks all network access.",[211,212,214],"h2",{"id":213},"wildcard-patterns","Wildcard patterns",[13,216,217,220,221,224,225,228,229,232,233,236],{},[17,218,219],{},"*"," matches within a hostname segment. ",[17,222,223],{},"*.github.com"," matches ",[17,226,227],{},"api.github.com"," and\n",[17,230,231],{},"raw.github.com"," but not ",[17,234,235],{},"github.com"," itself. To allow a domain and all subdomains, list\nboth:",[22,238,240],{"className":24,"code":239,"language":26,"meta":27,"style":27},"export default defineAgent({\n    policy: {\n        network: {\n            allow: [\"github.com\", \"*.github.com\"],\n        },\n    },\n})\n",[17,241,242,252,258,264,280,284,288],{"__ignoreMap":27},[31,243,244,246,248,250],{"class":33,"line":34},[31,245,109],{"class":108},[31,247,112],{"class":108},[31,249,116],{"class":115},[31,251,119],{"class":45},[31,253,254,256],{"class":33,"line":49},[31,255,124],{"class":52},[31,257,127],{"class":45},[31,259,260,262],{"class":33,"line":69},[31,261,132],{"class":52},[31,263,127],{"class":45},[31,265,266,268,270,273,275,278],{"class":33,"line":85},[31,267,139],{"class":52},[31,269,142],{"class":45},[31,271,272],{"class":145},"\"github.com\"",[31,274,149],{"class":45},[31,276,277],{"class":145},"\"*.github.com\"",[31,279,155],{"class":45},[31,281,282],{"class":33,"line":158},[31,283,175],{"class":45},[31,285,286],{"class":33,"line":172},[31,287,181],{"class":45},[31,289,290],{"class":33,"line":178},[31,291,187],{"class":45},[293,294,295],"style",{},"html pre.shiki code .scz_3, html code.shiki .scz_3{--shiki-default:#569CD6}html pre.shiki code .sNl3T, html code.shiki .sNl3T{--shiki-default:#4EC9B0}html pre.shiki code .sTNBD, html code.shiki .sTNBD{--shiki-default:#D4D4D4}html pre.shiki code .s3F5K, html code.shiki .s3F5K{--shiki-default:#9CDCFE}html pre.shiki code .sOLPB, html code.shiki .sOLPB{--shiki-default:#6A9955}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html pre.shiki code .sYbnZ, html code.shiki .sYbnZ{--shiki-default:#C586C0}html pre.shiki code .sCudf, html code.shiki .sCudf{--shiki-default:#DCDCAA}html pre.shiki code .sKc5r, html code.shiki .sKc5r{--shiki-default:#CE9178}",{"title":27,"searchDepth":49,"depth":49,"links":297},[298],{"id":213,"depth":49,"text":214},"Controls outbound fetch() calls made from within the capsule. Patterns match against\nthe request hostname.","md",{},true,"\u002Fdocs\u002Fv2\u002Fapi\u002Fconfig\u002Fpolicy\u002Fnetwork",{"title":5,"description":299},"docs\u002Fv2\u002Fapi\u002Fconfig\u002Fpolicy\u002Fnetwork","lAAtSjDeRz7MzPmcFRV_12O10XDCffXT2tdkj3sm81Q",1786529563268]