Default Fence "code" configuration

config.json

{
  "allowPty": true,
  "network": {
    "allowedDomains": [
      "api.openai.com",
      "*.anthropic.com",
      "api.githubcopilot.com",
      "generativelanguage.googleapis.com",
      "api.mistral.ai",
      "api.cohere.ai",
      "api.together.xyz",
      "openrouter.ai",
      "api.morphllm.com",
      "api.minimax.io",
      "api.minimaxi.com",
      "*.amazonaws.com",
      "opencode.ai",
      "api.opencode.ai",
      "ampcode.com",
      "*.ampcode.com",
      "*.factory.ai",
      "api.workos.com",
      "*.cursor.sh",
      "data.charm.land",
      "catwalk.charm.sh",
      "*.githubcopilot.com",
      "github.com",
      "api.github.com",
      "raw.githubusercontent.com",
      "codeload.github.com",
      "objects.githubusercontent.com",
      "release-assets.githubusercontent.com",
      "gitlab.com",
      "registry.npmjs.org",
      "*.npmjs.org",
      "registry.yarnpkg.com",
      "pypi.org",
      "files.pythonhosted.org",
      "crates.io",
      "static.crates.io",
      "index.crates.io",
      "proxy.golang.org",
      "sum.golang.org",
      "formulae.brew.sh",
      "models.dev",
    ],
    "deniedDomains": [
      "169.254.169.254",
      "metadata.google.internal",
      "instance-data.ec2.internal",
      "statsig.anthropic.com",
      "*.sentry.io"
    ],
    "allowLocalOutbound": false,
  },
  "filesystem": {
    "denyRead": [
      "~/.ssh/id_*",
      "~/.ssh/config",
      "~/.ssh/*.pem",
      "~/.gnupg/**",
      "~/.aws/**",
      "~/.config/gcloud/**",
      "~/.kube/**",
      "~/.docker/**",
      "~/.pypirc",
      "~/.netrc",
      "~/.git-credentials",
      "~/.cargo/credentials",
      "~/.cargo/credentials.toml"
    ],
    "allowWrite": [
      ".",
      "/tmp",
      "~/.cache/**",
      "~/.claude*",
      "~/.claude/**",
      "~/.amp",
      "~/.codex/**",
      "~/.cursor/**",
      "~/.opencode/**",
      "~/.local/state/**",
      "~/.gemini/**",
      "~/.factory/**",
      "~/.pi/**",
      "~/.copilot/**",
      "~/.kiro/**",
      "~/Library/Application Support/kiro-cli/**",
      "~/.npm/_cacache",
      "~/.npm/_npx",
      "~/.cache",
      "~/.bun/**",
      "~/.cargo/registry/**",
      "~/.cargo/git/**",
      "~/.cargo/.package-cache",
      "~/.zcompdump*",
      "~/.local/share/**",
      "~/.config/**"
    ],
    "denyWrite": [
      "**/.env",
      "**/.env.*",
      "**/*.key",
      "**/*.pem",
      "**/*.p12",
      "**/*.pfx"
    ]
  },
  "command": {
    "deny": [
      "git push",
      "git reset",
      "git clean",
      "git checkout --",
      "git rebase",
      "git merge",
      "npm publish",
      "pnpm publish",
      "yarn publish",
      "cargo publish",
      "twine upload",
      "gem push",
      "sudo",
      "gh pr create",
      "gh pr merge",
      "gh pr close",
      "gh pr reopen",
      "gh pr review",
      "gh pr comment",
      "gh release create",
      "gh release delete",
      "gh repo create",
      "gh repo fork",
      "gh repo delete",
      "gh issue create",
      "gh issue close",
      "gh issue comment",
      "gh gist create",
      "gh workflow run",
      "gh api",
      "gh auth login",
      "gh secret set",
      "gh secret delete",
      "gh variable set",
      "gh variable delete",
    ],
    "useDefaults": true
  }
}