imoyanagi/dev-network:1.1

schemaVersion: "2"
kind: mixin
name: dev-network
description: Allow GitHub and npm egress; keep Claude on subscription OAuth
permissions:
    network:
        allow:
            - github.com
            - api.github.com
            - codeload.github.com
            - release-assets.githubusercontent.com
            - registry.npmjs.org
setup:
    install:
        - command: |
            f=/home/agent/.claude/settings.json
            [ -f "$f" ] || exit 0
            jq 'del(.apiKeyHelper)' "$f" > "$f.tmp" && mv "$f.tmp" "$f"
          user: agent
          description: Drop apiKeyHelper so Claude Code uses subscription OAuth
    startup:
        - command:
            - sh
            - -c
            - f=/home/agent/.claude/settings.json; [ -f "$f" ] || exit 0; jq 'del(.apiKeyHelper)' "$f" > "$f.tmp" && mv "$f.tmp" "$f"
          user: agent
          description: Drop apiKeyHelper on every start