feat(python): add network= constructor kwarg (phase 1 of #1348)

[chaliy]

Summary

Phase 1 of #1348. Exposes the existing Rust NetworkAllowlist through Python:

• Bash(network=...) and BashTool(network=...) accept {"allow": [...], "block_private_ips": True} or {"allow_all": True}
• Omitting network= keeps outbound HTTP disabled (unchanged secure default)
• Empty {"allow": []} still blocks every URL but is distinct from omitted network=
• Config persists across reset() and from_snapshot()
• bashkit-python now compiles bashkit with the http_client feature so reqwest is built unconditionally; gating happens at the Python API layer
• block_private_ips defaults to True (Rust parity)

Why

bashkit-python previously had no surface for outbound HTTP and the crate compiled without http_client, even though the Rust core has shipped NetworkAllowlist, credential injection, callbacks, and bot-auth for some time. This PR closes the easiest part of that gap (allowlist) so Python users can actually call curl/wget/http against allowlisted hosts.

Out of scope (later phases of #1348)

• Credential injection (credentials, credential_placeholders)
• Request/response callbacks (http_handler, before_http, after_http)
• bot_auth

Tests

crates/bashkit-python/tests/test_network_config.py (15 tests, all green):

• Default-deny on Bash and BashTool
• Allowlist still blocks unlisted hosts
• allow_all removes allowlist-block stderr
• Empty allow blocks everything
• Validation: unknown key, missing allow/allow_all, mutually exclusive, wrong type
• reset() preserves both allowlist and allow_all
• from_snapshot() accepts network= for both Bash and BashTool
• block_private_ips default-true blocks loopback even when allowlisted; block_private_ips=False is accepted

Test plan

• cargo fmt --check
• cargo clippy --all-targets -- -D warnings
• cargo test --features http_client (full workspace, all green)
• pytest crates/bashkit-python/tests/ (623 pass, 2 skipped)
• ruff check && ruff format --check (all green)
• Manual smoke test of allowlist + reset + allow_all

Part of #1348

---

Generated by Claude Code

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	bashkit	3b6b15d	Commit Preview URL Branch Preview URL	Apr 30 2026, 09:27 AM

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!