feat: upgraded to the v2 schema for sbx mixins

agents/hello-agent/sbx-mixin.yaml

@@ -1,4 +1,4 @@
-schemaVersion: "1"
+schemaVersion: '2'
 kind: mixin
 name: agent-hello
 description: >
@@ -8,13 +8,14 @@ description: >
   install inside the sandbox and any network domains it needs to reach.
   Delete this file if your agent doesn't need extra sandbox setup.
 
-network:
+permissions:
+  network:
     allowedDomains:
       # Replace with the domains your agent actually hits.
       # Example: an agent that calls api.example.com would add:
       # - "api.example.com:443"
 
-commands:
+setup:
   install:
     # Replace with any binaries your agent depends on. Runs as the
     # `agent` user (UID 1000) with passwordless sudo. Example:

functions/sbx-mixin.yaml

@@ -1,4 +1,4 @@
-schemaVersion: "1"
+schemaVersion: '2'
 kind: mixin
 name: shared-custom-tools
 description: >
@@ -10,13 +10,14 @@ description: >
 
   Delete this file if your fork doesn't need extra sandbox setup.
 
-network:
-  allowedDomains:
+permissions:
+  network:
+    allow:
       # Replace with the domains your custom tools reach.
       # Example: a tool that calls a private API:
       # - "api.your-company.com:443"
 
-commands:
+setup:
   install:
     # Replace with binaries your custom tools depend on. Runs as the
     # `agent` user (UID 1000) with passwordless sudo. Example: