Networking Controls

[cooper-grc]

Summary by cubic

Add outbound networking controls for sandboxes (block all or CIDR allow list) and a runtime API to change permissions without restarting. Also update listUrls() to return URLs keyed by port.

• New Features

  • Add blockNetwork and allowList (CIDR) to sandbox/stub config; they are mutually exclusive and validated. Config is sent as block_network and allow_list during stub creation.
  • Add SandboxInstance.updateNetworkPermissions(blockNetwork, allowList?) to update rules via /network/update; rejects conflicting inputs and throws on failure.
  • listUrls() now returns Record<number, string> mapping ports to URLs.

• Migration

  • Update callers of listUrls() to handle a map keyed by port instead of an array.
  • Set either blockNetwork=true or allowList, not both.

^{Written for commit 9ef69eb. Summary will update on new commits.}

[cubic-dev-ai]

No issues found across 5 files