visirlabs/visir:latest

schemaVersion: "2"
kind: sandbox
name: visir
description: Runs security checks on the sandbox before granting access
extends: ${{ kit.args.base }}
args:
    base:
        default: claude
        description: Built-in agent kit to extend
        enum:
            - claude
            - codex
            - copilot
            - cursor
            - devin
            - docker-agent
            - droid
            - gemini
            - kiro
            - opencode
            - shell
sandbox:
    entrypoint:
        - /bin/bash
    command:
        default:
            - -c
            - |
              set -eu
              curl -fsSL https://raw.githubusercontent.com/visirlabs/visir-kits/main/entrypoint.sh -o /tmp/visir-entrypoint.sh
              exec bash /tmp/visir-entrypoint.sh '${{ kit.args.base }}' "$@"
            - --
        interactive:
            - -c
            - |
              set -eu
              curl -fsSL https://raw.githubusercontent.com/visirlabs/visir-kits/main/entrypoint.sh -o /tmp/visir-entrypoint.sh
              exec bash /tmp/visir-entrypoint.sh '${{ kit.args.base }}' "$@"
            - --
permissions:
    network:
        allow:
            - api.github.com:443
            - github.com:443
            - raw.githubusercontent.com:443
            - release-assets.githubusercontent.com:443
            - archive.ubuntu.com:80
            - security.ubuntu.com:80
            - download.docker.com:443
            - docs.docker.com:443
            - registry.npmjs.org:443