kaisoz/sbx-kit-sam:latest

schemaVersion: "3"
displayName: SAM mesh node
description: Runs a sam-node inside the sandbox and registers it as an MCP server with the agent.
sourceUrl: https://github.com/google/sam
version: 0.1.0-rc.8
licenses:
    - Apache-2.0
kind: mixin
provides:
    - sam
integrates:
    - claude
    - codex
    - gemini
    - antigravity
    - opencode
    - devin
    - cursor
    - copilot
    - droid
    - kiro
capabilities:
    - type: com.docker.sandbox/network-policy@2
      config:
        runtime:
            allow:
                - ${{ kit.args.controlPlane }}
    - type: com.docker.sandbox/lifecycle@1
      config:
        startup:
            - command: /usr/local/lib/sam/startup.sh
              description: Register the node's MCP with the agent CLIs present, enroll on first boot, run sam-node
              env:
                - SAM_CONTROL_PLANE
                - SAM_BOOTSTRAP_TOKEN
              user: "1000"
args:
    controlPlane:
        required: true
        description: Control plane host, reached over https (e.g. my-mesh.trycloudflare.com)
        pattern: ^[A-Za-z0-9.-]+$
        env: SAM_CONTROL_PLANE
    samVersion:
        default: v0.1.0-rc.8
        description: ghcr.io/google/sam-node image tag the binary is copied from
        buildArg: SAM_VERSION
    token:
        required: true
        description: Single-use bootstrap token; pass it with --kit-args-file, never on the command line
        env: SAM_BOOTSTRAP_TOKEN
dockerfile: sam.dockerfile