Summary

Adds a Kiro CLI sandbox image for running Kiro — an AI-powered agentic CLI for code generation, review, and infrastructure management — within OpenShell's sandboxed execution environment.

What's included

sandboxes/kiro/
├── Dockerfile          # Installs Kiro CLI on the community base image
├── policy.yaml         # Network policies for kiro.dev, GitHub, PyPI, npm
├── README.md           # Usage, auth, build instructions
└── examples/
    └── ecs/            # ECS Fargate deployment example
        ├── Dockerfile.ecs
        ├── server.py
        ├── task-definition.json
        └── README.md

Testing

• ✅ docker build completes successfully (tested via AWS CodeBuild and Colima)
• ✅ kiro --version returns kiro-cli 2.3.0 inside the container
• ✅ openshell sandbox create --from ./sandboxes/kiro -- kiro --version works end-to-end
• ✅ ECS deployment tested — HTTP API responds with clean JSON
• ✅ Policy YAML structure matches the accepted Gemini sandbox pattern

Network policies

Notes

• Kiro CLI installer does not support version pinning — installs latest at build time
• Requires unzip (not in base image) as a build dependency
• API key auth requires Kiro Pro/Pro+/Power subscription
• The examples/ecs/ directory shows how to run Kiro as a headless HTTP service on AWS Fargate