sbx/zeroclaw-kit:latest

schemaVersion: "2"
kind: sandbox
name: zeroclaw
displayName: ZeroClaw
description: Fast, small, fully autonomous AI assistant infrastructure (Rust, single binary) — gateway with 30+ channels and ~20 providers, pre-baked at a pinned upstream release.
sandbox:
    image: docker.io/sbx/zeroclaw-image:latest
    entrypoint:
        - sh
    command:
        default:
            - /home/agent/.local/bin/zeroclaw-start.sh
        interactive:
            - /home/agent/.local/bin/zeroclaw-start.sh
permissions:
    network:
        allow:
            - api.anthropic.com
            - claude.ai
            - console.anthropic.com
            - platform.claude.com:443
            - '*.telegram.org'
            - '*.discord.com'
            - gateway.discord.gg
            - '*.matrix.org'
            - '*.slack.com'
ports:
    - container: 42617
      name: gateway
credentials:
    - service: anthropic
      apiKey:
        name: ANTHROPIC_API_KEY
        proxyManaged: true
        inject:
            - domain: api.anthropic.com
              header: x-api-key
              format: '%s'
            - domain: claude.ai
              header: x-api-key
              format: '%s'
            - domain: console.anthropic.com
              header: x-api-key
              format: '%s'
      oauth:
        tokenEndpoint:
            host: platform.claude.com
            path: /v1/oauth/token
        resourceHosts:
            - api.anthropic.com
        sentinels:
            accessToken: sk-ant-oat01-proxy-managed
            refreshToken: sk-ant-ort01-proxy-managed
        credentialFile:
            path: ~/.claude/.credentials.json
            structure:
                claudeAiOauth:
                    accessToken: '{{.AccessToken}}'
                    expiresAt: '{{.ExpiresAt}}'
                    refreshToken: '{{.RefreshToken}}'
                    scopes: '{{.Scopes}}'
environment:
    variables:
        ZEROCLAW_gateway__host: 0.0.0.0
setup:
    startup:
        - command:
            - sh
            - /home/agent/.local/bin/zeroclaw-anthropic-key.sh
          user: "1000"
          description: Resolve the host's Anthropic credential into config.toml at sandbox start