sbx/nanoclaw-kit:20260828-2121f50cbf929602a6f0305feed51acb3f872980

schemaVersion: "2"
kind: sandbox
name: nanoclaw
displayName: NanoClaw
description: NanoClaw host + nested per-session agent containers inside a Docker Sandbox micro-VM.
sandbox:
    image: docker.io/nanoco/nanoclaw:sbx-claude-alpha
    entrypoint:
        - /usr/local/bin/nanoclaw-start
agentInstructions:
    filename: CLAUDE.md
    content: |
        ## Sandbox environment

        You are NanoClaw running inside a Docker Sandbox micro-VM. The host process
        spawns one nested agent container per session via the VM's own Docker daemon.
        Credentials go through OneCLI like a normal NanoClaw deployment. Never ask for
        or print raw keys. `sudo` is passwordless.

        ## Network policy errors

        If an HTTP/HTTPS request fails with `502 Bad Gateway`, the request may be
        blocked by Docker Sandbox network policy rather than by the target service.
        Network access is controlled by the sbx kit `spec.yaml`.

        Ask the user to inspect the sandbox policy from their host terminal:

        `sbx policy ls <sandbox-name>`
        `sbx policy ls <sandbox-name> --type network`

        For NanoClaw, the sandbox name is usually `nanoclaw` unless the user supplied
        a different `--name`.
permissions:
    network:
        allow:
            - auth.docker.io:443
            - index.docker.io:443
            - production.cloudflare.docker.com:443
            - registry-1.docker.io:443
            - api.onecli.sh:443
            - onecli.sh:443
            - www.onecli.sh:443
            - api.anthropic.com:443
            - claude.ai:443
            - claude.com:443
            - console.anthropic.com:443
            - downloads.claude.ai:443
            - platform.claude.com:443
            - api.github.com:443
            - codeload.github.com:443
            - ghcr.io:443
            - github.com:443
            - objects.githubusercontent.com:443
            - raw.githubusercontent.com:443
            - release-assets.githubusercontent.com:443
            - bun.sh:443
            - checkpoint.prisma.io:443
            - deb.debian.org:443
            - registry.npmjs.org:443
            - security.debian.org:443
            - api.slack.com:443
            - api.telegram.org:443
            - discord.com:443
            - gateway.discord.gg:443
            - slack.com:443
            - t.me:443
            - web.whatsapp.com:443
ports:
    - container: 3000
      name: webhook
    - container: 10254
      name: onecli-dashboard
    - container: 10255
      name: onecli-gateway
environment:
    variables:
        IS_SANDBOX: "1"
        NANOCLAW_AGENT_PROVIDER: claude
        NANOCLAW_NO_DIAGNOSTICS: "1"
        NO_PROXY: 127.0.0.1,localhost
        NODE_NO_WARNINGS: "1"
        ONECLI_BIND_HOST: 0.0.0.0
        ONECLI_GATEWAY_URL: http://127.0.0.1:10255
        ONECLI_URL: http://127.0.0.1:10254
        TZ: UTC
        no_proxy: 127.0.0.1,localhost