Let a containerized coder reach a dev server on its host

http is allowed only for loopback, and inside a local Docker container
the host machine's loopback is reachable only as host.docker.internal —
the Gym's Harbor lane runs the coder in benchmark containers against
the dev forge on the host. Reaching anything beyond the developer's own
machine still requires HTTPS.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GoYpb8FEmdxVErsv7ABCYi

Co-Authored-By

Claude Fable 5 <noreply@anthropic.com>

Claude-Session

https://claude.ai/code/session_01GoYpb8FEmdxVErsv7ABCYi

Deploy story

What this commit did to the running system — joined from the forge receipt chain, the part a commit page elsewhere cannot show.

Changed files

• modified packages/openagents-cli/src/endpoint.ts
• modified packages/openagents-cli/test/endpoint.test.ts

Diff

2 files changed, +14 -1

    normalized === "127.0.0.1" ||

    normalized.startsWith("127.") ||

    normalized === "[::1]" ||

    normalized === "::1"

    normalized === "::1" ||

    // The container-to-host development path: inside a local Docker

    // container, the host machine's loopback is reachable only by this

    // name. A benchmark container running the coder against a dev server

    // on the host (the Gym's Harbor lane) has no other address for it.

    // Reaching anything beyond the developer's own machine still requires

    // HTTPS.

    normalized === "host.docker.internal"

  );

};

    );

  });

  it("allows the container-to-host development name over HTTP", async () => {

    await expect(

      Effect.runPromise(normalizeApiOrigin("http://host.docker.internal:4000")),

    ).resolves.toBe("http://host.docker.internal:4000");

  });

  it("refuses non-loopback HTTP and URL paths", async () => {

    const insecure = await Effect.runPromiseExit(normalizeApiOrigin("http://openagents.com"));

    const path = await Effect.runPromiseExit(normalizeApiOrigin("https://openagents.com/api"));