sbx/kernel-kit:latest

schemaVersion: "2"
kind: mixin
name: kernel
displayName: Kernel Browser
description: Cloud-hosted Chromium for AI agents with stealth, managed auth, and live session replay
sourceURL: https://github.com/docker/sbx-kits-contrib/tree/main/kernel
licenses:
    - Apache-2.0
agentInstructions:
    content: |
        The Kernel CLI is installed for cloud browser automation. Before using it,
        read /home/agent/.kernel/quickstart.md for current CLI and SDK examples.
        Delete browser sessions when work is complete.
permissions:
    network:
        allow:
            - '*.onkernel.com'
            - registry.npmjs.org
            - '*.npmjs.org'
            - pypi.org
            - files.pythonhosted.org
            - github.com
            - objects.githubusercontent.com
            - release-assets.githubusercontent.com
credentials:
    - service: kernel
      description: Kernel API key
      required: true
      apiKey:
        name: KERNEL_API_KEY
        proxyManaged: true
        inject:
            - domain: api.onkernel.com
              header: Authorization
              format: Bearer %s
setup:
    install:
        - command: npm install -g @onkernel/cli
          user: "0"
          description: Install the Kernel CLI