sbx/pi-mixin
Pi coding agent overlay for a shell workload, with Node.js, fd, and Anthropic credentials.
8.9K
sbx/pi-mixin repository overview
Pi coding agent overlay for a shell workload, with Node.js, fd, and Anthropic credentials.
| Name | Required | Default | Description |
|---|---|---|---|
model | Optional | | pi model as provider/model or an Anthropic model ID; empty keeps the CLI default |
thinkingLevel | Optional | | Thinking level (settings.json `defaultThinkingLevel`); empty keeps pi's default of medium Options: , off, minimal, low, medium, high, xhigh, max |
version | Required | — | pi release the overlay carries |
[email protected]| Type | Required | Description | |
|---|---|---|---|
com.docker.sandbox/network-policy@1 | Required | — | |
com.docker.sandbox/credential@1 | Optional | Anthropic API access (API key or claude.ai OAuth) | |
com.docker.sandbox/lifecycle@1 | Required | — | |
com.docker.sandbox/agent-skills@1 | Optional | — | |
com.docker.sandbox/agent-context@1 | Optional | — | |
com.docker.sandbox/agent-context@2 | Optional | — | |
Apply this mixin to a sandbox
sbx run <agent> --kit sbx/pi-mixin:latestMake sure you have docker sbx installed
Run the following command to install sbx on your machine.
brew install docker/tap/sbxwinget install Docker.sbxPi mixin for Docker Sandboxes
This v3 mixin Kit packages Pi for Docker Sandboxes. It adds the agent, authentication configuration, and runtime integration to a compatible workload. The workload keeps its entrypoint.
This Kit is built on Docker Hardened Images.
Run
sbx run sbx/shell:latest --kit sbx/pi-mixin:latest /path/to/workspace
When the shell opens, run pi. This kit supplies an overlay, so it needs a workload such as
Shell.
Kit arguments
Set these arguments when creating the sandbox with --kit-arg <name>=<value>. Repeat the flag for multiple arguments.
Use --kit-arg <kit>.<name>=<value> to target one kit in a composition, as in the example below.
| Argument | Default | Description | Accepted values |
|---|---|---|---|
model | "" | pi model as provider/model or an Anthropic model ID; empty keeps the CLI default | A provider/model value or an Anthropic model ID. Letters, digits, ., _, /, :, and -. |
thinkingLevel | "" | Thinking level (settings.json defaultThinkingLevel); empty keeps pi's default of medium | Empty, off, minimal, low, medium, high, xhigh, or max. |
An empty value keeps the agent default. The model must be available to your provider account, and the selected model
must support the requested effort or thinking level. These are kit configuration inputs, separate from agent
command-line arguments passed after --.
sbx run sbx/shell:latest --kit sbx/pi-mixin:latest \
--kit-arg pi-mixin.model=anthropic/claude-sonnet-4-6 --kit-arg pi-mixin.thinkingLevel=high \
/path/to/workspace
Authentication and configuration
Bind an Anthropic API key on the host with sbx secret set anthropic. An existing Claude subscription credential on the
host can also supply authentication. Host-bound credentials remain proxy-managed.
Pi runs tool calls without approval prompts, and the kit pre-answers the workspace trust prompt. The sandbox provides the isolation for these operations.
The sandbox supplies the isolation for agent tool execution. Launch the kit through Docker Sandboxes and configure extra tool or MCP destinations in the runtime network policy as needed.
Related kits
sbx/pi provides the complete agent workload.sbx/pi-acp provides the ACP adapter for the composed agent.sbx/pi-sessions provides host-backed conversation state.
Source and security
For the Kit format and capability contracts, see the Sandbox Kit v3 specification.
For runtime setup, see the Docker Sandboxes documentation. For provenance, SBOM, VEX, and image verification, see the Docker Hardened Images documentation.
Pi is a product of Earendil Works, Inc. Product names and logos do not imply sponsorship or endorsement.