vladthenvoi/jam-managed-workspace:1.0.14

schemaVersion: "2"
kind: mixin
name: jam-managed-workspace
displayName: Jam managed workspace workflow
description: Installs the versioned native Codex skill, bounded local-platform bridge helper, and Docker proxy-managed GitHub access for Jam-managed, zero-to-many-repository workspaces. Jam supplies exact-session tools at runtime.
permissions:
    network:
        allow:
            - app.band.ai:443
            - auth.band.ai:443
            - api.openai.com:443
            - chatgpt.com:443
            - '*.chatgpt.com:443'
            - '*.openai.com:443'
            - '*.oaistatic.com:443'
            - '*.oaiusercontent.com:443'
            - github.com:443
            - api.github.com:443
            - raw.githubusercontent.com:443
            - codeload.github.com:443
            - objects.githubusercontent.com:443
            - ghcr.io:443
            - registry.npmjs.org:443
            - pypi.org:443
            - files.pythonhosted.org:443
            - crates.io:443
            - index.crates.io:443
            - static.crates.io:443
            - hex.pm:443
            - repo.hex.pm:443
            - repo.maven.apache.org:443
            - proxy.golang.org:443
            - sum.golang.org:443
            - pub.dev:443
            - rubygems.org:443
            - nuget.org:443
            - packagist.org:443
            - docker.io:443
            - registry-1.docker.io:443
            - production.cloudflare.docker.com:443
            - registry.k8s.io:443
            - quay.io:443
credentials:
    - service: github
      description: GitHub token for authenticated Git and gh operations
      apiKey:
        name: GITHUB_TOKEN
        proxyManaged: true
        inject:
            - domain: api.github.com
              header: Authorization
              format: Bearer %s
            - domain: raw.githubusercontent.com
              header: Authorization
              format: Bearer %s
            - domain: github.com
              header: Authorization
              format: Basic %s
              username: x-access-token