ryantaylor31937/memory-host:0.1.1

schemaVersion: "2"
kind: sandbox
name: memory-host
version: 0.1.1
displayName: Agent memory host
description: Long-lived sandbox running TencentDB Agent Memory's memory-core on port 8420 for every agent in this account
sandbox:
    image: docker.io/ryantaylor31937/memory-host-image:0.1.1@sha256:72c275554e5013bf8fa8c80675dabaad3fb2d80efdb38dba5d99c8b1532a3e0a
    entrypoint:
        - bash
    command:
        default:
            - -l
        interactive:
            - -l
    resources:
        cpu: 2
        memory: 4096m
agentInstructions:
    filename: AGENTS.md
    content: |
        This sandbox is the account's agent memory host. memory-core answers on
        port 8420. Status is in /home/agent/.memory/status and the log in
        /home/agent/.memory/startup.log. Never print /home/agent/.memory/api-key.
permissions:
    network:
        allow:
            - hub.docker.com
            - registry-1.docker.io
            - auth.docker.io
            - index.docker.io
            - production.cloudfront.docker.com
            - api.openai.com
            - '*.sbx.sandboxes-cloud.docker.com'
ports:
    - container: 8420
      protocol: tcp
      name: memory-api
credentials:
    - service: openai
      description: OpenAI-compatible endpoint for L1 to L3 extraction and embeddings
      apiKey:
        name: TDAI_LLM_API_KEY
        proxyManaged: true
        inject:
            - domain: api.openai.com
              header: Authorization
              format: Bearer %s
setup:
    startup:
        - command:
            - /home/agent/tools/memory-host-startup.sh
          user: "1000"
          background: true
          description: Wait for the gateway key, restore the latest Hub snapshot on a fresh disk, start memory-core on this sandbox's engine, write status
    files:
        - path: /home/agent/.memory/config.env
          content: |
            TDAI_INSTANCE_ID=memory
            TDAI_LLM_BASE_URL=https://api.openai.com/v1
            TDAI_LLM_MODEL=gpt-4o-mini
            MEMORY_EMBEDDING_MODEL=text-embedding-3-small
            MEMORY_EMBEDDING_DIMS=1536
            MEMORY_SCOPE=personal
            # private (the script default) or public. public pushes snapshots to a repository anyone can read.
            SNAPSHOT_VISIBILITY=public
            # Verified on Hub 2026-10-15: index digest of agentmemory/memory-core:latest
            MEMORY_CORE_IMAGE=docker.io/agentmemory/memory-core@sha256:b37fa9f2e1e4993ab69e2b4522ec5897f075a7031e01e31fed080acdcaf96c98
          mode: "0600"
          description: Values the startup and snapshot scripts source. No Hub account here. HUB_NAMESPACE and HUB_USER come from the sandbox environment at runtime