masterfinancial/sbx-v3-kit:1.1.1

schemaVersion: "3"
displayName: Frontend design tools
description: Frontend tools plus Higgsfield API, Figma OAuth and an inactive Higgsfield subscription MCP, with five native harness adapters.
version: 1.1.1
kind: mixin
provides:
    - [email protected]
capabilities:
    - type: com.docker.sandbox/network-policy@1
      config:
        runtime:
            allow:
                - stitch.googleapis.com:443
                - 21st.dev:443
                - api.higgsfield.ai:443
                - dash.higgsfield.ai:443
                - open.higgsfield.ai:443
                - docs.higgsfield.ai:443
                - mcp.higgsfield.ai:443
                - higgsfield.ai:443
                - '*.higgsfield.ai:443'
                - mcp.figma.com:443
                - figma.com:443
                - www.figma.com:443
                - '*.figma.com:443'
                - fnf-api-input-prod-20250414194641741400000002.s3.amazonaws.com:443
                - d3snorpfx4xhv8.cloudfront.net:443
                - registry.npmjs.org:443
                - fonts.googleapis.com:443
                - fonts.gstatic.com:443
                - github.com:443
                - raw.githubusercontent.com:443
                - objects.githubusercontent.com:443
                - release-assets.githubusercontent.com:443
    - type: com.docker.sandbox/credential@1
      config:
        apiKey:
            inject:
                - domain: stitch.googleapis.com
                  format: '%s'
                  header: X-Goog-Api-Key
            name: STITCH_API_KEY
            proxyManaged: true
        phase: runtime
        service: stitch
    - type: com.docker.sandbox/credential@1
      config:
        apiKey:
            inject:
                - domain: 21st.dev
                  format: '%s'
                  header: x-api-key
            name: API_KEY_21ST
            proxyManaged: true
        phase: runtime
        service: twentyfirst
    - type: com.docker.sandbox/credential@1
      config:
        apiKey:
            inject:
                - domain: api.higgsfield.ai
                  format: Key %s
                  header: Authorization
            name: HIGGSFIELD_API_KEY
            proxyManaged: true
        phase: runtime
        service: higgsfield
    - type: com.docker.sandbox/lifecycle@1
      config:
        install:
            - command:
                - /sbin/ldconfig
              description: Populate the workload linker cache so VS Code Server can discover its existing C++ runtime.
              user: "0"
            - command:
                - /usr/local/bin/design-kit
                - setup
                - --harness
                - all
              description: Prepare sandbox-user configurations and skill links without modifying projects.
              env:
                - HOME
                - PATH
                - HTTP_PROXY
                - HTTPS_PROXY
                - http_proxy
                - https_proxy
                - ALL_PROXY
                - all_proxy
                - NO_PROXY
                - no_proxy
                - NODE_EXTRA_CA_CERTS
              user: "1000"
dockerfile: sbx-v3-kit.dockerfile