sbx/droid-mixin:latest

schemaVersion: "3"
displayName: Droid (mixin)
description: Factory's Droid CLI as a mixin — the upstream install in an overlay, with the Factory credential (API key or WorkOS OAuth), the egress policy the agent needs, and the hooks that prepare its state directory. Layer it onto a shell base and run `droid`.
version: 0.223.0
kind: mixin
provides:
    - [email protected]
capabilities:
    - type: com.docker.sandbox/network-policy@1
      config:
        runtime:
            allow:
                - api.factory.ai
                - app.factory.ai
                - relay.factory.ai
                - api.workos.com
                - archive.ubuntu.com
                - security.ubuntu.com
                - ports.ubuntu.com
                - download.docker.com
                - cli.github.com
    - type: com.docker.sandbox/credential@1
      config:
        apiKey:
            inject:
                - domain: api.factory.ai
                  format: Bearer %s
                  header: Authorization
                - domain: app.factory.ai
                  format: Bearer %s
                  header: Authorization
                - domain: relay.factory.ai
                  format: Bearer %s
                  header: Authorization
            name: FACTORY_API_KEY
            proxyManaged: true
        oauth:
            sentinels:
                accessToken: droid-oat-proxy-managed
                refreshToken: droid-ort-proxy-managed
            tokenEndpoint:
                host: api.workos.com
                path: /user_management/authenticate
        phase: runtime
        service: droid
      description: Factory API access for Droid (API key or WorkOS OAuth)
    - type: com.docker.sandbox/lifecycle@1
      config:
        install:
            - command: mkdir -p /home/agent/.factory && chown agent:agent /home/agent/.factory
              description: Ensure .factory is owned by agent before bind mounts run
              user: "0"
        startup:
            - background: true
              command:
                - sh
                - -c
                - command -v apt-get > /dev/null 2>&1 && (apt-get update -qq -y > /dev/null 2>&1 || true)
              description: Update apt package cache in background
              user: root
    - type: com.docker.sandbox/agent-context@1
      config:
        contentFile: /usr/share/sandbox/kit/droid-mixin/droid-mixin-context.md
args:
    version:
        default: 0.223.0
        description: Droid release to install
        pattern: ^[0-9]+\.[0-9]+\.[0-9]+$
        buildArg: DROID_VERSION