docker/sbx-kit-nanoclaw-mixin:latest

schemaVersion: "3"
displayName: NanoClaw (mixin)
description: NanoClaw as a mixin -- the host process and its checkout in an overlay, with the Docker Hub, OneCLI, Claude and chat-channel egress and the published webhook and OneCLI ports. Layer it onto a base that already carries a Node runtime and run `nanoclaw-start`.
sourceUrl: https://github.com/nanocoai/nanoclaw
version: 1.0.0
kind: mixin
provides:
    - nanoclaw
requires:
    - deb/docker-ce
capabilities:
    - type: com.docker.sandbox/network-policy@1
      config:
        runtime:
            allow:
                - auth.docker.io
                - index.docker.io
                - production.cloudflare.docker.com
                - registry-1.docker.io
                - api.onecli.sh
                - onecli.sh
                - www.onecli.sh
                - api.anthropic.com
                - claude.ai
                - claude.com
                - console.anthropic.com
                - downloads.claude.ai
                - platform.claude.com
                - api.github.com
                - codeload.github.com
                - ghcr.io
                - github.com
                - objects.githubusercontent.com
                - raw.githubusercontent.com
                - release-assets.githubusercontent.com
                - bun.sh
                - checkpoint.prisma.io
                - deb.debian.org
                - registry.npmjs.org
                - security.debian.org
                - api.slack.com
                - api.telegram.org
                - discord.com
                - gateway.discord.gg
                - slack.com
                - t.me
                - web.whatsapp.com
    - type: com.docker.sandbox/port@1
      config:
        container: 3000
        name: webhook
    - type: com.docker.sandbox/port@1
      config:
        container: 10254
        name: onecli-dashboard
    - type: com.docker.sandbox/port@1
      config:
        container: 10255
        name: onecli-gateway
    - type: com.docker.sandbox/agent-context@1
      config:
        contentFile: /usr/share/sandbox/kit/nanoclaw-mixin/nanoclaw-mixin-context.md