docker/sbx-kit-junie-mixin:latest

schemaVersion: "3"
displayName: Junie (mixin)
description: JetBrains' AI coding agent as a mixin — the stable-channel install in an overlay, with the six model-provider credentials Junie can route through and the egress policy they need. Layer it onto a shell base and run `junie`.
version: 26.9.21
kind: mixin
provides:
    - [email protected]
capabilities:
    - type: com.docker.sandbox/network-policy@1
      config:
        runtime:
            allow:
                - junie.jetbrains.com
                - api.jetbrains.ai
                - api.anthropic.com
                - api.openai.com
                - generativelanguage.googleapis.com
                - api.x.ai
                - openrouter.ai
    - type: com.docker.sandbox/credential@1
      optional: true
      config:
        apiKey:
            inject:
                - domain: api.anthropic.com
                  format: '%s'
                  header: x-api-key
            name: ANTHROPIC_API_KEY
            proxyManaged: true
        phase: runtime
        service: anthropic
      description: Anthropic API access
    - type: com.docker.sandbox/credential@1
      optional: true
      config:
        apiKey:
            inject:
                - domain: generativelanguage.googleapis.com
                  format: '%s'
                  header: x-goog-api-key
            name: GEMINI_API_KEY
            proxyManaged: true
        phase: runtime
        service: google
      description: Google Gemini API access
    - type: com.docker.sandbox/credential@1
      optional: true
      config:
        apiKey:
            inject:
                - domain: junie.jetbrains.com
                  format: Bearer %s
                  header: Authorization
            name: JUNIE_API_KEY
            proxyManaged: true
        phase: runtime
        service: junie
      description: JetBrains AI / Junie service access
    - type: com.docker.sandbox/credential@1
      optional: true
      config:
        apiKey:
            inject:
                - domain: api.openai.com
                  format: Bearer %s
                  header: Authorization
            name: OPENAI_API_KEY
            proxyManaged: true
        phase: runtime
        service: openai
      description: OpenAI API access
    - type: com.docker.sandbox/credential@1
      optional: true
      config:
        apiKey:
            inject:
                - domain: openrouter.ai
                  format: Bearer %s
                  header: Authorization
            name: OPENROUTER_API_KEY
            proxyManaged: true
        phase: runtime
        service: openrouter
      description: OpenRouter API access
    - type: com.docker.sandbox/credential@1
      optional: true
      config:
        apiKey:
            inject:
                - domain: api.x.ai
                  format: Bearer %s
                  header: Authorization
            name: XAI_API_KEY
            proxyManaged: true
        phase: runtime
        service: xai
      description: xAI API access
    - type: com.docker.sandbox/agent-context@1
      config:
        contentFile: /usr/share/sandbox/kit/junie-mixin/junie-mixin-context.md
args:
    build:
        default: "3294.5"
        description: JetBrains build number for that release, the installer's own pin
        pattern: ^[0-9]+\.[0-9]+$
        buildArg: JUNIE_VERSION
    version:
        default: 26.9.21
        description: Junie marketing release, the version the binary reports
        pattern: ^[0-9]+\.[0-9]+\.[0-9]+$
        buildArg: JUNIE_MARKETING_VERSION