/**
 * Default network allowlist for the OS command sandbox.
 *
 * The sandbox is allowlist-only (a bare `*` is rejected), so shipping it on by
 * default is only viable if ordinary development still works untouched. These
 * are the hosts mainstream toolchains actually contact for dependency
 * resolution, source checkout and registry auth — nothing that reads user data.
 *
 * Deliberately excluded: arbitrary app/API hosts, telemetry endpoints and
 * URL shorteners. A project that needs one adds it once in Settings, which is
 * the moment the boundary earns its keep.
 */
export declare const DEFAULT_ALLOWED_DOMAINS: readonly string[];
//# sourceMappingURL=sandbox-domains.d.ts.map