[smolyn]

Summary

Adds an optional network.allowAllDomains: boolean field to the config schema. When set, filterNetworkRequest short-circuits to allow after the existing deniedDomains check runs, so explicit denies still take effect.

Motivation

Today the config schema requires allowedDomains and rejects "*" / "*.com"-style wildcards (sandbox-config.ts:43-44). For setups that rely on filesystem restrictions as the primary boundary, this means enumerating every domain that might be reached during normal work — for example, looking up docs for a random library — which becomes whack-a-mole. There's already an internal "no network restriction" branch in sandbox-manager.ts:670, but it's unreachable from the CLI because the schema mandates allowedDomains as an array, and any settings file gives hasNetworkConfig === true.

This flag provides an explicit, schema-validated way to opt into allow-all egress while keeping deniedDomains as an enforced denylist.

Behavior

• allowAllDomains: undefined or false (default): unchanged
• allowAllDomains: true: every host passes filterNetworkRequest after the deniedDomains check, so an explicit deny still wins

{
  "network": {
    "allowedDomains": [],
    "deniedDomains": ["gist.github.com"],
    "allowAllDomains": true
  }
}

Changes

• src/sandbox/sandbox-config.ts — add the optional field to NetworkConfigSchema with a description that calls out the deny precedence
• src/sandbox/sandbox-manager.ts — add an early-return in filterNetworkRequest after the deny loop
• test/config-validation.test.ts — schema test verifying allowAllDomains: true validates alongside deniedDomains

+35 lines total, all additive — existing configs are unaffected.

Test plan

• pnpm exec tsc --noEmit clean
• test/config-validation.test.ts (schema-level): new test passes
• End-to-end verification on macOS with srt --settings:
  • https://www.npmjs.com/ → reaches origin (403 from npm, not a sandbox block) ✓
  • https://stackoverflow.com/ → 302 ✓
  • https://docs.rs/ → 200 ✓
  • https://gist.github.com/ (in deniedDomains) → blocked at proxy ✓
  • Filesystem reads under denyRead still blocked ✓
• Linux integration verification (not run locally — proxy filter is platform-agnostic; would appreciate CI confirmation)

🤖 Generated with Claude Code