sbx/devin-enterprise-mixin:latest

schemaVersion: "3"
displayName: Devin Enterprise (mixin)
description: Devin CLI by Cognition, pinned to a Devin Enterprise deployment (<org>.devinenterprise.com). Layer onto a shell workload and run devin.
sourceUrl: https://devin.ai
version: 3000.10.31
kind: mixin
provides:
    - [email protected]
capabilities:
    - type: com.docker.sandbox/network-policy@1
      config:
        runtime:
            allow:
                - '*.devinenterprise.com'
                - '*.enterprise.windsurf.com'
                - windsurf.com
                - server.codeium.com
                - unleash.codeium.com
                - cli.devin.ai
                - static.devin.ai
    - type: com.docker.sandbox/lifecycle@1
      config:
        files:
            - content: '{"auto_update": false}'
              description: Disable Devin background updates
              overwrite: false
              path: /home/agent/.config/devin/config.json
        startup:
            - command: |
                set -e
                mkdir -p /etc/devin
                cat > /etc/devin/system.json <<'EOF'
                {"enterprise_host": "${{ kit.args.org }}.devinenterprise.com"}
                EOF
              description: Pin Devin enterprise host via system.json
              user: root
            - command: |
                set -e
                [ -n "$MCP_GATEWAY_URL" ] || exit 0
                mkdir -p "$HOME/.config/devin"
                cat > "$HOME/.config/devin/mcp_config.json" <<EOF
                {
                  "mcpServers": {
                    "mcp-gateway": {
                      "url": "$MCP_GATEWAY_URL",
                      "transport": "http",
                      "headers": {
                        "Authorization": "Bearer $MCP_SENTINEL_TOKEN_NAME"
                      }
                    }
                  }
                }
                EOF
              description: Register the sandbox MCP gateway
              env:
                - MCP_GATEWAY_URL
                - MCP_SENTINEL_TOKEN_NAME
              user: agent
    - type: com.docker.sandbox/agent-context@1
      config:
        contentFile: /usr/share/sandbox/kit/devin-enterprise-mixin/devin-enterprise-mixin-context.md
args:
    org:
        required: true
        description: Enterprise org slug — "acme" for acme.devinenterprise.com
        pattern: ^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$
    version:
        default: 3000.10.31
        description: Devin CLI release to install
        pattern: ^[0-9]+\.[0-9]+\.[0-9]+(-[0-9]+)?$
        buildArg: DEVIN_VERSION