sbx/grok-kit:latest

schemaVersion: "2"
kind: sandbox
name: grok
displayName: Grok Build
description: xAI's terminal-based coding agent, powered by Grok models.
sandbox:
    image: docker/sandbox-templates:shell-docker
    entrypoint:
        - grok
    command:
        default:
            - --yolo
            - --no-auto-update
        interactive:
            - --yolo
            - --no-auto-update
agentInstructions:
    filename: AGENTS.md
    content: |
        ## Grok Build

        Grok Build (`grok`) is xAI's terminal-based coding agent. It is installed
        as `grok` on `PATH` and started with `--yolo`, which auto-approves tool
        calls (file edits, shell commands, etc.) without prompting — the sandbox
        itself is the safety boundary. `--no-auto-update` disables the CLI's
        background update check, since the sandbox is recreated from the kit
        rather than self-updated in place.

        Set `XAI_API_KEY` on your host (get one from https://console.x.ai) and the
        sandbox proxy injects it as `Authorization: Bearer <key>` on outbound
        requests to `api.x.ai`. Project rules go in `AGENTS.md`. See
        <https://github.com/xai-org/grok-build> and
        <https://docs.x.ai/build/overview> for usage.
permissions:
    network:
        allow:
            - x.ai:443
            - api.x.ai:443
            - auth.x.ai:443
            - cli-chat-proxy.grok.com:443
credentials:
    - service: xai
      apiKey:
        name: XAI_API_KEY
        inject:
            - domain: api.x.ai
              header: Authorization
              format: Bearer %s
setup:
    install:
        - command: |
            set -e
            mkdir -p "$HOME/.local/bin"
            curl -fsSL https://x.ai/cli/install.sh | bash
          user: "1000"
          description: Install Grok Build (grok)