sha256:8dfb10e4f9acbe05634ad3fd579823fbbb84d09d7615d50dfa6cadaa10eff48e
Last pushed
about 1 hour by dhibot
Type
Sandbox Kit
Manifest digest
sha256:8dfb10e4f9acbe05634ad3fd579823fbbb84d09d7615d50dfa6cadaa10eff48e
schemaVersion: "3"
displayName: Droid
author: Docker, Inc. https://docker.com
description: Droid CLI by Factory, an agentic coding CLI.
sourceUrl: https://github.com/docker-hardened-images/definitions
version: 1.8.0
licenses:
- LicenseRef-Proprietary
kind: workload
provides:
- [email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/ca-certificates@20250419
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/iputils-ping@20240905
- deb/[email protected]
- deb/less@668
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
- deb/[email protected]
capabilities:
- type: com.docker.sandbox/sbx@1
- type: com.docker.sandbox/network-policy@1
config:
runtime:
allow:
- api.factory.ai:443
- app.factory.ai:443
- relay.factory.ai:443
- api.workos.com:443
- deb.debian.org:80
- dhi.io:80
- type: com.docker.sandbox/credential@1
optional: true
config:
apiKey:
inject:
- domain: api.factory.ai
format: Bearer %s
header: Authorization
- domain: app.factory.ai
format: Bearer %s
header: Authorization
- domain: relay.factory.ai
format: Bearer %s
header: Authorization
name: FACTORY_API_KEY
proxyManaged: true
oauth:
sentinels:
accessToken: droid-oat-proxy-managed
refreshToken: droid-ort-proxy-managed
tokenEndpoint:
host: api.workos.com
path: /user_management/authenticate
phase: runtime
service: droid
description: Factory API access for Droid (API key or WorkOS OAuth)
- type: com.docker.sandbox/lifecycle@1
config:
install:
- command: mkdir -p /home/agent/.factory && chown agent:agent /home/agent/.factory
description: Ensure .factory is owned by agent before bind mounts run
user: "0"
- type: com.docker.sandbox/agent-context@1
optional: true
config:
content: |
Factory Droid is installed as `droid`. Authentication and network access follow this Kit's capability declarations.
filename: AGENTS.md
- type: com.docker.sandbox/agent-context@2
optional: true
config:
content: |
Factory Droid is installed as `droid`. Authentication and network access follow this Kit's capability declarations.
filename: AGENTS.md
- type: com.docker.sandbox/agent-sessions@1
config:
prompt:
- exec
- --skip-permissions-unsafe
- --
- '{{.Prompt}}'
- type: com.docker.sandbox/agent-interactive-sessions@1
optional: true
config:
continue:
- --resume
- --last
prompt:
- --
- '{{.Prompt}}'
resume:
- --resume
- '{{.SessionID}}'
sessionPicker:
- --resume
- type: com.docker.sandbox/acp@1
optional: true
config:
agent: droid
command:
- droid
- exec
- --output-format
- acp
args:
version:
required: true
description: Factory Droid release carried by the image
pattern: ^[0-9]+\.[0-9]+\.[0-9]+$
buildArg: VERSION