feat: broaden Claude allowlist defaults

Author: alphabetc1

README.md

@@ -51,11 +51,19 @@ cp deploy/vps.example.yaml deploy/vps.yaml
 
 示例已经包含常见模型服务域名：
 
+- `.claude.ai`
+- `.claude.com`
 - `.anthropic.com`
 - `.openai.com`
 - `.openrouter.ai`
 - `.chatgpt.com`
 
+默认示例还会通过 `runtime.dest_host_allowlist` 放行精确主机 `storage.googleapis.com`，用于兼容 Claude Code 仍在迁移中的 legacy 下载路径。
+
+不建议直接把白名单放空或改成近似全放开。更稳的做法是按产品域族放行，比如 Claude 用 `.anthropic.com`、`.claude.com`、`.claude.ai`，再补必要的精确 host。
+
+如果 `Claude Code` 提示无法连接 `platform.claude.com`，说明你当前部署的白名单里还没有放行 `.claude.com`。把它加入 `runtime.dest_suffix_allowlist` 后重新执行部署。
+
 执行部署：
 
 ```bash

README_EN.md

@@ -55,11 +55,19 @@ Start with:
 
 The sample already includes common model service domains:
 
+- `.claude.ai`
+- `.claude.com`
 - `.anthropic.com`
 - `.openai.com`
 - `.openrouter.ai`
 - `.chatgpt.com`
 
+The default sample also allowlists the exact host `storage.googleapis.com` through `runtime.dest_host_allowlist` to cover Claude Code's legacy download path while that migration is still in progress.
+
+Avoid removing the allowlist entirely or approximating a wildcard. A better default is to allow vendor product domain families such as `.anthropic.com`, `.claude.com`, and `.claude.ai`, then add a small number of exact hosts only when needed.
+
+If Claude Code cannot connect to `platform.claude.com`, your current allowlist is missing `.claude.com`. Add it to `runtime.dest_suffix_allowlist` and rerun the deployment.
+
 Run the deploy:
 
 ```bash

SEND_THIS_TO_LLM.md

@@ -39,10 +39,14 @@
 - 代理监听 `127.0.0.1:8080`
 - 管理端监听 `127.0.0.1:9090`
 - 默认放行：
+  - `.claude.ai`
+  - `.claude.com`
   - `.anthropic.com`
   - `.openai.com`
   - `.openrouter.ai`
   - `.chatgpt.com`
+- 默认精确 host 放行：
+  - `storage.googleapis.com`
 - 客户端通过 SSH 隧道访问服务端
 
 ## 部署方式

deploy/vps.example.yaml

@@ -21,7 +21,11 @@ runtime:
     - ::1/128
   dest_port_allowlist:
     - 443
+  dest_host_allowlist:
+    - storage.googleapis.com
   dest_suffix_allowlist:
+    - .claude.ai
+    - .claude.com
     - .anthropic.com
     - .openai.com
     - .openrouter.ai

internal/deploy/deploy_test.go

@@ -23,6 +23,7 @@ func TestRenderVPSEnvUsesAbsoluteRuntimePaths(t *testing.T) {
 			AdminListenPort:               9090,
 			SourceAllowlistCIDRs:          []string{"127.0.0.1/32"},
 			DestPortAllowlist:             []int{443},
+			DestHostAllowlist:             []string{"storage.googleapis.com"},
 			DestSuffixAllowlist:           []string{".chatgpt.com"},
 			MaxConnsPerIP:                 16,
 			ServerReadHeaderTimeout:       "10s",
@@ -48,6 +49,9 @@ func TestRenderVPSEnvUsesAbsoluteRuntimePaths(t *testing.T) {
 	if !strings.Contains(text, "DEST_SUFFIX_ALLOWLIST=.chatgpt.com") {
 		t.Fatalf("env missing suffix allowlist: %s", text)
 	}
+	if !strings.Contains(text, "DEST_HOST_ALLOWLIST=storage.googleapis.com") {
+		t.Fatalf("env missing host allowlist: %s", text)
+	}
 }
 
 func TestRenderVPSUsersHashesPlaintextPasswords(t *testing.T) {

internal/deploy/spec.go

@@ -178,8 +178,11 @@ func normalizeVPSConfig(spec VPSConfig) (VPSConfig, error) {
 	if len(runtime.DestPortAllowlist) == 0 {
 		runtime.DestPortAllowlist = []int{443}
 	}
+	if len(runtime.DestHostAllowlist) == 0 {
+		runtime.DestHostAllowlist = []string{"storage.googleapis.com"}
+	}
 	if len(runtime.DestSuffixAllowlist) == 0 {
-		runtime.DestSuffixAllowlist = []string{".anthropic.com", ".openai.com", ".openrouter.ai", ".chatgpt.com"}
+		runtime.DestSuffixAllowlist = []string{".claude.ai", ".claude.com", ".anthropic.com", ".openai.com", ".openrouter.ai", ".chatgpt.com"}
 	}
 	if runtime.MaxConnsPerIP == 0 {
 		runtime.MaxConnsPerIP = 16

plan.md

@@ -51,7 +51,7 @@ Recommended default in v1:
 This service must not become a generic open proxy. P0 should enforce:
 - Destination port allowlist, default `443`
 - Destination hostname exact match allowlist
-- Destination suffix allowlist, for example `.anthropic.com`, `.openai.com`
+- Destination suffix allowlist, for example `.claude.ai`, `.claude.com`, `.anthropic.com`, `.openai.com`
 - Resolution-time IP blocking for private/reserved IPs
 
 Optional future expansion: