docker/sbx-kit-paperclip-mixin:latest

schemaVersion: "3"
displayName: Paperclip (mixin)
description: Paperclip as a mixin — Node 22, the pinned paperclipai CLI and its built UI in an overlay, with the Anthropic credential and the published web port. Layer it onto a shell base and run `paperclip`.
kind: mixin
provides:
    - [email protected]
capabilities:
    - type: com.docker.sandbox/network-policy@1
      config:
        runtime:
            allow:
                - api.anthropic.com
                - claude.ai
                - console.anthropic.com
                - platform.claude.com
                - registry.npmjs.org
                - '*.npmjs.org'
                - github.com
                - raw.githubusercontent.com
                - objects.githubusercontent.com
                - paperclip.ing
    - type: com.docker.sandbox/credential@1
      optional: true
      config:
        apiKey:
            inject:
                - domain: api.anthropic.com
                  format: '%s'
                  header: x-api-key
                - domain: claude.ai
                  format: '%s'
                  header: x-api-key
                - domain: console.anthropic.com
                  format: '%s'
                  header: x-api-key
            name: ANTHROPIC_API_KEY
            proxyManaged: true
        oauth:
            credentialFile:
                path: ~/.claude/.credentials.json
                structure:
                    claudeAiOauth:
                        accessToken: '{{.AccessToken}}'
                        expiresAt: '{{.ExpiresAt}}'
                        refreshToken: '{{.RefreshToken}}'
                        scopes: '{{.Scopes}}'
            resourceHosts:
                - api.anthropic.com
            sentinels:
                accessToken: sk-ant-oat01-proxy-managed
                refreshToken: sk-ant-ort01-proxy-managed
            tokenEndpoint:
                host: platform.claude.com
                path: /v1/oauth/token
        phase: runtime
        service: anthropic
      description: Anthropic API access (API key or claude.ai subscription login)
    - type: com.docker.sandbox/port@1
      config:
        container: 3100
        name: web
    - type: com.docker.sandbox/lifecycle@1
      config:
        startup:
            - command:
                - sh
                - /home/agent/.local/bin/paperclip-anthropic-auth.sh
              description: Resolve whether Anthropic auth is an API key, a subscription login, or absent, and record it for `paperclip` and `sbx exec` shells
              env:
                - PAPERCLIP_HOME
                - SBX_CRED_ANTHROPIC_MODE
              user: "1000"
    - type: com.docker.sandbox/agent-context@1
      config:
        contentFile: /usr/share/sandbox/kit/paperclip-mixin/paperclip-mixin-context.md
args:
    version:
        default: 2026.609.0
        description: paperclipai release to install
        pattern: ^[0-9]{4}\.[0-9]+\.[0-9]+$
        buildArg: PAPERCLIP_VERSION