buildEgressAllowlist

buildEgressAllowlist(opts): string[]

Defined in: src/egress.ts:394

Build the deduped, sorted egress allowlist of domains for an agent spawn.

• Anthropic base set: always included.
• Forge hosts: every map KEY (the host); for type === "github" entries the GitHub well-known set is also added; for a baseUrl, its hostname is extracted. When forges is EMPTY (no entries), the GitHub well-known set is added as the default forge (Shepherd defaults to github.com via the gh CLI).
• extraHosts: operator additions, appended verbatim (after normalization).

Invalid hosts (empty, non-hostname characters, no dot) are silently dropped.

Parameters

opts

extraHosts?

string[]

forges

ForgeMap

Returns

string[]