bjmrevilla/muse-kit:1.0

schemaVersion: "2"
kind: sandbox
name: muse
displayName: Muse Code
description: Muse Code coding agent (Meta Muse Spark) in a Docker sandbox.
sandbox:
    image: docker/sandbox-templates:shell-docker
    entrypoint:
        - muse
    command:
        default:
            - --trust-workspace
        interactive:
            - --trust-workspace
agentInstructions:
    filename: AGENTS.md
    content: |
        ## Sandbox environment

        You are running inside a Docker sandbox. The workspace is mounted at
        its absolute host path. `sudo` is passwordless; use it for package
        installs. Docker is available inside the sandbox; containers you start
        are isolated in the microVM.

        Muse Code specifics:

        - The `muse` launcher is pre-installed (see `setup.install`). The first
          invocation downloads the platform binary for Linux automatically.
        - That download, and `muse login`, need `api.meta.ai`, `auth.meta.com`,
          and `lookaside.facebook.com` — already allow-listed in this kit.
        - First run inside a fresh sandbox: `muse login` (device flow), or copy
          an existing host credential with the helper script's `inject-auth`
          command instead of logging in again.
        - The sandbox entrypoint is `muse --trust-workspace` so workspace
          skills/rules load. Approvals stay on: pass `-- --approval-mode never`
          to `sbx run` only when you want unattended execution, the microVM —
          not Muse's own sandbox — being the isolation boundary.
        - Smoke test without model access: `muse --provider echo exec "hi"`.
        - If requests to a new host get blocked, check `sbx policy log` on the
          host and add the domain to `permissions.network.allow`.
permissions:
    network:
        allow:
            - api.meta.ai:443
            - auth.meta.com:443
            - lookaside.facebook.com:443
setup:
    install:
        - command: curl -fsSL https://api.meta.ai/muse-launcher.sh -o /home/agent/.local/bin/muse && chmod +x /home/agent/.local/bin/muse
          user: "1000"
          description: Install Muse Code launcher
        - command: ln -sf /home/agent/.local/bin/muse /usr/local/bin/muse
          user: "0"
          description: Put muse on the default PATH