feat: add spraay sandbox — crypto payment layer for autonomous agents

[plagtech]

Add Spraay sandbox — crypto payment layer for autonomous agents

Summary

This PR adds a Spraay sandbox image to the OpenShell Community catalog, giving any agent running inside OpenShell the ability to execute crypto payments via the [x402 protocol](https://www.x402.org).

Spraay is a multi-chain batch payment protocol with 76+ paid gateway endpoints across 13 blockchains. With this sandbox, autonomous agents (OpenClaw, Claude Code, Codex, etc.) can:

• 💧 Batch send tokens to multiple recipients in a single transaction
• 🔒 Create escrow contracts with milestone-based fund releases
• 🤖 Hire robots via the Robot Task Protocol (RTP) using USDC micropayments
• 💰 Run payroll with scheduled recurring payments
• 🔄 Swap tokens via DEX aggregation across chains

Why This Matters for OpenShell

Jensen Huang said at GTC 2026: "AI has extended beyond generation and reasoning into action." Agents that act need to pay. Every time an agent spawns a sub-agent, hires a robot, accesses premium data, or compensates a contractor — there's a payment event. The x402 protocol makes this native to HTTP: agents pay per request with USDC, no wallet UX required.

This sandbox provides the missing payment infrastructure layer for the autonomous agent stack.

What's Included

sandboxes/spraay/
├── README.md              # Documentation, quick start, use cases
├── Dockerfile             # Builds from OpenShell base image
├── spraay.sh              # CLI wrapper (17 commands)
├── policy.yaml            # Network policy (gateway + RPC egress only)
└── skills/
    ├── spraay-payments.md # Batch payment skill
    ├── spraay-escrow.md   # Escrow management skill
    ├── spraay-rtp.md      # Robot Task Protocol skill
    └── spraay-gateway.md  # Route discovery & pricing skill

Supported Chains

Base · Ethereum · Arbitrum · Polygon · BNB Chain · Avalanche · Solana · Bitcoin · Stacks · Unichain · Plasma · BOB · Bittensor

Quick Start

openshell sandbox create --from spraay -- claude

Security

• Network policy restricts egress to only the Spraay gateway and verified RPC providers
• Private keys never leave the sandbox boundary
• All payment signing happens within the isolated OpenShell environment
• x402 payments are verified on-chain before request execution

Links

• Gateway: https://gateway.spraay.app
• Docs: https://docs.spraay.app
• MCP Server: https://smithery.ai/server/@plagtech/spraay-x402-mcp
• x402 Protocol: https://www.x402.org
• RTP Spec: https://github.com/plagtech/rtp-spec

Physical AI Crossover

The RTP (Robot Task Protocol) skill directly aligns with NVIDIA's Physical AI announcements at GTC 2026. RTP enables AI agents to hire robots and IoT devices via x402 micropayments — bridging the digital agent world with physical robotics infrastructure. This complements the Isaac, Cosmos, and Physical AI Data Factory ecosystem.

Checklist

• Follows sandboxes/ directory structure
• Builds from ghcr.io/nvidia/openshell-community/sandboxes/base:latest
• Includes agent skills in skills/ directory
• Includes network policy (policy.yaml)
• README with quick start, environment variables, and use cases
• Apache 2.0 compatible

[plagtech]

Verified the Dockerfile builds from the base image and the spraay CLI connects to the live gateway at gateway.spraay.app. The health endpoint returns 200 and routes endpoint returns all 76+ paid endpoints. Happy to adjust anything based on review feedback.

[plagtech]

Heads up — the DCO check is failing with "gsactions/dco-check@v1.1.1 is not allowed in NVIDIA/OpenShell-Community." This appears to be a repo-level action permissions issue rather than a commit signoff problem. My commit is signed off. Let me know if there's anything else needed on my end.