sbx/droid-kit:20260820-8124bf90eefe51143968174f6b9cd1e307a9b1c1

schemaVersion: "2"
kind: sandbox
name: droid
version: 1.0.0
displayName: Droid
description: Droid CLI by Factory, an agentic coding CLI.
sandbox:
    image: docker.io/sbx/droid-image:latest
    entrypoint:
        - droid
agentInstructions:
    filename: AGENTS.md
permissions:
    network:
        allow:
            - api.factory.ai
            - app.factory.ai
            - relay.factory.ai
            - api.workos.com
            - archive.ubuntu.com
            - security.ubuntu.com
            - ports.ubuntu.com
            - download.docker.com
credentials:
    - service: droid
      apiKey:
        name: FACTORY_API_KEY
        proxyManaged: true
        inject:
            - domain: api.factory.ai
              header: Authorization
              format: Bearer %s
            - domain: app.factory.ai
              header: Authorization
              format: Bearer %s
            - domain: relay.factory.ai
              header: Authorization
              format: Bearer %s
      oauth:
        tokenEndpoint:
            host: api.workos.com
            path: /user_management/authenticate
        sentinels:
            accessToken: droid-oat-proxy-managed
            refreshToken: droid-ort-proxy-managed
        skipIfEnv:
            - FACTORY_API_KEY
setup:
    install:
        - command: mkdir -p /home/agent/.factory && chown agent:agent /home/agent/.factory
          user: "0"
          description: Ensure .factory is owned by agent before bind mounts run
    startup:
        - command:
            - sh
            - -c
            - command -v apt-get > /dev/null 2>&1 && (apt-get update -qq -y > /dev/null 2>&1 || true) &
          user: root
          description: Update apt package cache in background