augur/augur.conf at main · h1d3mun3/augur · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
# augur egress allowlist — managed baseline
#
# This is augur's managed baseline, installed to ~/.augur/augur.conf.default and
# refreshed on EVERY install. Only the domains listed here (plus your global
# ~/.augur/augur.conf and a project's ./.augur/allowlist.conf) are reachable from the
# container/VM; everything else is blocked by the host-side augur-proxy.
#
# Syntax (one pattern per line, '#' starts a comment):
#   example.com     exact host only (the apex). Does NOT match subdomains.
#   *.example.com   subdomains only (api.example.com yes; example.com no).
#   .example.com    the apex AND every subdomain.
#
# Do NOT add your own domains here — this file is overwritten on install. Put global
# domains in ~/.augur/augur.conf and per-project ones in ./.augur/allowlist.conf instead.

# AUGUR_AGENT_SEAM | agent runtime egress baseline (Claude Code). Swap these domains per agent.
# ── Claude Code runtime ───────────────────────────────────────────────────────
api.anthropic.com
.claude.ai
.claude.com
*.anthropic.com
statsig.anthropic.com
statsig.com
*.statsig.com
sentry.io
*.sentry.io

# ── GitHub (gh / git over HTTPS) ──────────────────────────────────────────────
github.com
api.github.com
codeload.github.com
objects.githubusercontent.com
raw.githubusercontent.com
*.githubusercontent.com

# ── Homebrew (macOS VM mode) ──────────────────────────────────────────────────
formulae.brew.sh
ghcr.io
*.ghcr.io