imoyanagi/dev-network:1.2

schemaVersion: "2"
kind: mixin
name: dev-network
description: Allow GitHub and npm egress; keep Claude on subscription OAuth; default model Opus 5.5
permissions:
    network:
        allow:
            - github.com
            - api.github.com
            - codeload.github.com
            - release-assets.githubusercontent.com
            - registry.npmjs.org
setup:
    install:
        - command: |
            f=/home/agent/.claude/settings.json
            [ -f "$f" ] || exit 0
            jq 'del(.apiKeyHelper) | .model = "claude-opus-5-5"' "$f" > "$f.tmp" && mv "$f.tmp" "$f"
          user: agent
          description: Drop apiKeyHelper (use subscription OAuth) and default to Opus 5.5
    startup:
        - command:
            - sh
            - -c
            - f=/home/agent/.claude/settings.json; [ -f "$f" ] || exit 0; jq 'del(.apiKeyHelper) | .model = "claude-opus-5-5"' "$f" > "$f.tmp" && mv "$f.tmp" "$f"
          user: agent
          description: Re-apply on every start