I started with a firewall on the Incus container but every time the agent needed access to something new, I was poking more holes in it - and it didn't differentiate between HTTP verbs.
I've been using Claude Code auto mode too but I wanted to be able to guide the LLM, not just hand over control completely. I also want some flat allow and deny rules.
So, I built Trollbridge: an HTTP/S proxy that runs in front of your coding agent and lets you set up allow or deny lists, realtime approve or deny in the TUI, or wire up an LLM that makes calls based on your prior decisions.
Would love to hear what you think - give it a shot, leave a comment, file a bug. Thanks!
Website: https://trollbridge.dev Github: https://github.com/dandriscoll/trollbridge