sbx/vibe-kit:latest

schemaVersion: "2"
kind: sandbox
name: vibe
version: 0.1.0
displayName: Mistral Vibe
description: Mistral AI's open source coding agent, with its API key injected by the sandbox proxy
licenses:
    - Apache-2.0
args:
    agent:
        default: auto-approve
        description: 'Vibe agent to start: a builtin (ask, plan, accept-edits, auto-approve) or a custom agent declared in ~/.vibe/agents/NAME.toml.'
        pattern: ^[A-Za-z0-9_-]+$
sandbox:
    image: docker.io/sbx/vibe-image:latest
    entrypoint:
        - vibe
    command:
        default:
            - --trust
            - --agent
            - ${{ kit.args.agent }}
        interactive:
            - --trust
            - --agent
            - ${{ kit.args.agent }}
agentInstructions:
    filename: AGENTS.md
    content: |
        ## Sandbox

        You are running inside a Docker sandbox (sbx). The working directory is the
        user's project, mounted from the host.

        MISTRAL_API_KEY holds a sentinel value, not the real key: the sandbox proxy
        swaps it for the real one on requests to Mistral. Do not read, print or
        reconfigure it.
permissions:
    network:
        allow:
            - api.mistral.ai:443
            - chat.mistral.ai:443
            - console.mistral.ai:443
            - experiments.mistral.services:443
volumes:
    - path: /home/agent/.vibe
      size: 1g
credentials:
    - service: mistral
      description: Mistral API key (https://console.mistral.ai/api-keys)
      apiKey:
        name: MISTRAL_API_KEY
        proxyManaged: true
        inject:
            - domain: api.mistral.ai
              header: Authorization
              format: Bearer %s
            - domain: chat.mistral.ai
              header: Authorization
              format: Bearer %s
            - domain: console.mistral.ai
              header: Authorization
              format: Bearer %s
environment:
    variables:
        GIT_TERMINAL_PROMPT: "0"
        VIBE_ENABLE_AUTO_UPDATE: "false"
        VIBE_ENABLE_TELEMETRY: "false"
setup:
    startup:
        - command:
            - sh
            - -c
            - mkdir -p /home/agent/.vibe && chown agent:agent /home/agent/.vibe
          user: "0"
          description: Hand ~/.vibe (persistent volume) back to the agent user