sbx/shell-kit:latest

schemaVersion: "2"
kind: sandbox
name: shell
version: 1.0.1
displayName: Shell sandbox
description: An agentless sandbox launched as a login shell, with provider credentials routed by the proxy.
sandbox:
    image: docker.io/sbx/shell-image:latest
    command:
        default:
            - -l
        interactive:
            - -l
permissions:
    network:
        allow:
            - api.anthropic.com
            - claude.ai
            - console.anthropic.com
            - api.github.com
            - copilot.github.com
            - github.com
            - raw.githubusercontent.com
            - aiplatform.googleapis.com
            - generativelanguage.googleapis.com
            - oauth2.googleapis.com
            - vertexai.googleapis.com
            - api.mistral.ai
            - api.studio.nebius.com
            - api.tokenfactory.nebius.com
            - api.openai.com
            - openai.com
            - openrouter.ai
            - api.x.ai
            - archive.ubuntu.com
            - security.ubuntu.com
            - ports.ubuntu.com
            - download.docker.com
            - cli.github.com
credentials:
    - service: anthropic
      apiKey:
        name: ANTHROPIC_API_KEY
        proxyManaged: true
        inject:
            - domain: api.anthropic.com
              header: x-api-key
              format: '%s'
            - domain: claude.ai
              header: x-api-key
              format: '%s'
            - domain: console.anthropic.com
              header: x-api-key
              format: '%s'
    - service: github
      apiKey:
        name: GH_TOKEN
        inject:
            - domain: api.github.com
              header: Authorization
              format: Bearer %s
            - domain: copilot.github.com
              header: Authorization
              format: Bearer %s
            - domain: github.com
              header: Authorization
              format: '%s'
              username: x-access-token
            - domain: raw.githubusercontent.com
              header: Authorization
              format: Bearer %s
    - service: google
      apiKey:
        name: GOOGLE_API_KEY
        proxyManaged: true
        inject:
            - domain: aiplatform.googleapis.com
              header: x-goog-api-key
              format: '%s'
            - domain: generativelanguage.googleapis.com
              header: x-goog-api-key
              format: '%s'
            - domain: oauth2.googleapis.com
              header: x-goog-api-key
              format: '%s'
            - domain: vertexai.googleapis.com
              header: x-goog-api-key
              format: '%s'
    - service: mistral
      apiKey:
        name: MISTRAL_API_KEY
        proxyManaged: true
        inject:
            - domain: api.mistral.ai
              header: Authorization
              format: Bearer %s
    - service: nebius
      apiKey:
        name: NEBIUS_API_KEY
        proxyManaged: true
        inject:
            - domain: api.studio.nebius.com
              header: Authorization
              format: Bearer %s
            - domain: api.tokenfactory.nebius.com
              header: Authorization
              format: Bearer %s
    - service: openai
      apiKey:
        name: OPENAI_API_KEY
        proxyManaged: true
        inject:
            - domain: api.openai.com
              header: Authorization
              format: Bearer %s
            - domain: openai.com
              header: Authorization
              format: Bearer %s
    - service: openrouter
      apiKey:
        name: OPENROUTER_API_KEY
        proxyManaged: true
        inject:
            - domain: openrouter.ai
              header: Authorization
              format: Bearer %s
    - service: xai
      apiKey:
        name: XAI_API_KEY
        proxyManaged: true
        inject:
            - domain: api.x.ai
              header: Authorization
              format: Bearer %s