From 23c733fc12facda363f660a94e75037e8790689e Mon Sep 17 00:00:00 2001
From: Alex Clarke <alex.j.tusa@gmail.com>
Date: Fri, 28 Aug 2026 18:25:41 -0600
Subject: [PATCH] feat: upgraded to the v2 schema for sbx mixins

---
 agents/hello-agent/sbx-mixin.yaml | 15 ++++++++-------
 functions/sbx-mixin.yaml          | 15 ++++++++-------
 2 files changed, 16 insertions(+), 14 deletions(-)

diff --git a/agents/hello-agent/sbx-mixin.yaml b/agents/hello-agent/sbx-mixin.yaml
index c995329..f6d5af9 100644
--- a/agents/hello-agent/sbx-mixin.yaml
+++ b/agents/hello-agent/sbx-mixin.yaml
@@ -1,4 +1,4 @@
-schemaVersion: "1"
+schemaVersion: '2'
 kind: mixin
 name: agent-hello
 description: >
@@ -8,13 +8,14 @@ description: >
   install inside the sandbox and any network domains it needs to reach.
   Delete this file if your agent doesn't need extra sandbox setup.
 
-network:
-  allowedDomains:
-    # Replace with the domains your agent actually hits.
-    # Example: an agent that calls api.example.com would add:
-    # - "api.example.com:443"
+permissions:
+  network:
+    allowedDomains:
+      # Replace with the domains your agent actually hits.
+      # Example: an agent that calls api.example.com would add:
+      # - "api.example.com:443"
 
-commands:
+setup:
   install:
     # Replace with any binaries your agent depends on. Runs as the
     # `agent` user (UID 1000) with passwordless sudo. Example:
diff --git a/functions/sbx-mixin.yaml b/functions/sbx-mixin.yaml
index 00476e3..63c1233 100644
--- a/functions/sbx-mixin.yaml
+++ b/functions/sbx-mixin.yaml
@@ -1,4 +1,4 @@
-schemaVersion: "1"
+schemaVersion: '2'
 kind: mixin
 name: shared-custom-tools
 description: >
@@ -10,13 +10,14 @@ description: >
 
   Delete this file if your fork doesn't need extra sandbox setup.
 
-network:
-  allowedDomains:
-    # Replace with the domains your custom tools reach.
-    # Example: a tool that calls a private API:
-    # - "api.your-company.com:443"
+permissions:
+  network:
+    allow:
+      # Replace with the domains your custom tools reach.
+      # Example: a tool that calls a private API:
+      # - "api.your-company.com:443"
 
-commands:
+setup:
   install:
     # Replace with binaries your custom tools depend on. Runs as the
     # `agent` user (UID 1000) with passwordless sudo. Example: