Muse Code in Docker Sandboxes

Muse Code is not a built-in sbx agent. This repo defines it as a
sandbox kit:
muse-kit/spec.yaml.
Verified with sbx v0.39.0 on macOS arm64.

$ cd my-repo
$ musex # safely use `muse` in YOLO mode inside a Docker Sandbox

Prerequisites

• Install sbx and start the daemon:
  brew install docker/tap/sbx and sbx daemon start.
• Sign in with sbx login. Then set a global network policy:
  sbx policy init balanced.
• One-time step: allow this kit publisher:
  sbx settings set kit.allowedSources '["docker.io/","github.com/gosukiwi/"]'.
• No clone needed. sbx fetches the kit from git. Set once in ~/.zshrc:

export MUSE_KIT="git+https://github.com/gosukiwi/sbx-muse-kit.git#dir=muse-kit"

Daily use

Add this wrapper to ~/.zshrc (or ~/.bashrc if you use bash). It starts one
sandbox per directory. It names the sandbox muse-<directory>. It leaves the
sandbox running when you quit. Stop it by hand when you finish:

# musex: sandboxed `muse --yolo` scoped to $PWD (one VM per directory)
musex() {
  local proj="$(basename "$PWD")"
  local name="muse-$proj"
  local args=()
  if sbx ls -q 2>/dev/null | grep -qx "$name"; then
    args=(--name "$name")
  else
    args=(--kit "$MUSE_KIT" muse --name "$name")
    if [ -d "$HOME/.agents" ]; then
      args+=("$PWD" "$HOME/.agents:ro")
    else
      args+=("$PWD")
    fi
  fi
  if [ -d "$HOME/.agents" ]; then
    args+=(-e "MUSEX_SKILLS_SRC=$HOME/.agents")
  fi
  local tok
  tok="$(gh auth token 2>/dev/null)" && args+=(-e "GH_TOKEN=$tok")
  local conf="$HOME/.config/musex/$proj.sh"
  [ -f "$conf" ] && source "$conf"
  sbx run "${args[@]}"
}

Run musex from any project directory. The first run pulls the image.
It installs tools. It logs in. Each sandbox needs its own login. Only sbx rm
deletes a sandbox and its login. To stop a sandbox, run sbx stop muse-<directory>.

Configuration: general and per-project

Two layers exist. The published kit holds generic items only. Host items
live outside this repo:

• General defaults live in musex. Each project gets them: a
  read-only ~/.agents mount for user skills, and GH_TOKEN from host
  auth.
• Per-project flags live in ~/.config/musex/<project>.sh. The file
  name must match the directory name. The wrapper so