Muse Code Docker Sandbox kit

# Muse Code Sandbox Kit

Docker Sandboxes kit for running [Meta's Muse Code](https://dev.meta.ai/docs/muse-code) terminal coding agent inside an isolated sandbox.

The kit installs the official `muse` binary and permits only the Meta services needed for installation, updates, authentication, and model requests. Muse configuration, credentials, and sessions live under the sandbox user's persistent home directory.

> Docker Sandbox kits are currently experimental and their schema and CLI may change.

## Prerequisites

- The standalone [`sbx` CLI](https://docs.docker.com/ai/sandboxes/get-started/) with kit-spec V2 support (Docker Sandboxes 0.38 or later)
- Access to Muse Code (currently beta)

On macOS, install `sbx` from Docker's Homebrew tap and sign in:

```bash
brew trust docker/tap
brew install docker/tap/sbx
sbx login
```

On Ubuntu, install it from Docker's apt repository:

```bash
curl -fsSL https://get.docker.com | sudo REPO_ONLY=1 sh
sudo apt-get install docker-sbx
sudo usermod -aG kvm "$USER"
newgrp kvm
sbx login
```

See Docker's [Get started with Docker Sandboxes](https://docs.docker.com/ai/sandboxes/get-started/) page for supported operating systems, hardware requirements, Windows installation, and manual downloads.

## Quick start

Run the published kit directly from Docker Hub:

```bash
sbx run --kit docker.io/olegselajev241/muse-code-sbx-kit:latest muse-code .
```

Docker Hub is an allowed kit source by default. To run the kit directly from GitHub instead, allow this repository as a source once:

```bash
sbx settings set kit.allowedSources '["docker.io/", "github.com/shelajev/"]'
sbx run --kit git+https://github.com/shelajev/muse-code-sbx-kit.git muse-code .
```

On first use, Muse asks you to sign in. Follow the URL it prints in your terminal and finish authentication in your local browser. The resulting `~/.config/muse/auth.json` remains in the sandbox's persistent home directory.

Muse also supports API-key authentication through `META_API_KEY`. Do not place a key in `spec.yaml` or commit it to this repository.

## Named sandbox

Create a sandbox that you can reattach to later:

```bash
sbx create --name muse-current \
  --kit docker.io/olegselajev241/muse-code-sbx-kit:latest muse-code .

sbx run muse-current
```

When working from a local clone, the wrapper uses the local kit directory:

```bash
./run.sh muse-current
```

## How it works

-