Use Sandboxes with Claude Managed Agents

import { createSandboxClientFromEnv } from "@coreweave/cwsandbox/node";

const token = process.env.ANTHROPIC_ENVIRONMENT_KEY;
if (!token) throw new Error("Set ANTHROPIC_ENVIRONMENT_KEY.");
const environmentId = process.env.ANTHROPIC_ENVIRONMENT_ID;
if (!environmentId) throw new Error("Set ANTHROPIC_ENVIRONMENT_ID.");

const worker = `
set -o pipefail
case "$(uname -m)" in
    x86_64) arch=amd64 ;;
    aarch64) arch=arm64 ;;
    *) echo "Unsupported architecture" >&2; exit 1 ;;
esac
version=1.33.0
curl -fsSL "https://github.com/anthropics/anthropic-cli/releases/download/v\${version}/ant_\${version}_linux_\${arch}.tar.gz" \\
    | tar -xz -C /usr/local/bin ant
mkdir -p /workspace
exec ant beta:worker poll --workdir /workspace
`;

const client = createSandboxClientFromEnv();
const sandbox = await client.run(["bash", "-ec", worker], {
  containerImage: "python:3.12-bookworm",
  environmentVariables: {
    ANTHROPIC_ENVIRONMENT_KEY: token,
    ANTHROPIC_ENVIRONMENT_ID: environmentId,
  },
  resources: { cpu: "2", memory: "4Gi" },
  maxLifetimeSeconds: 8 * 3600,
  waitUntilRunning: false,
  tags: ["claude-managed-agents-worker"],
});
try {
  await sandbox.wait();
} catch (error) {
  await sandbox.stop();
  throw error;
}
console.log(`Worker sandbox ID: ${sandbox.sandboxId}`);

import { randomUUID } from "node:crypto";
import Anthropic from "@anthropic-ai/sdk";

const agent = process.env.ANTHROPIC_AGENT_ID;
const environmentId = process.env.ANTHROPIC_ENVIRONMENT_ID;
if (!agent || !environmentId) {
  throw new Error("Set ANTHROPIC_AGENT_ID and ANTHROPIC_ENVIRONMENT_ID.");
}
const client = new Anthropic();
const proof = randomUUID().replaceAll("-", "");
const session = await client.beta.sessions.create({
  agent,
  environment_id: environmentId,
  title: "CoreWeave worker verification",
});
console.log(`Session ID: ${session.id}`);
console.log(`Expected file contents: ${proof}`);
const allowedEvents = new Map<string, boolean>();

await client.beta.sessions.events.send(session.id, {
  events: [{
    type: "user.message",
    content: [{
      type: "text",
      text: `Write exactly ${proof} to managed-agent-proof.txt in your working directory and read it back.`,
    }],
  }],
});

const events = await client.beta.sessions.events.stream(session.id);
try {
  for await (const event of events) {
    console.log(JSON.stringify(event));
    if ("id" in event) {
      allowedEvents.set(event.id,
        "evaluated_permission" in event && event.evaluated_permission === "allow");
    }
    if (event.type === "session.status_idle") {
      const reason = event.stop_reason;
      if (reason?.type === "requires_action" && reason.event_ids.length > 0 &&
          reason.event_ids.every((id) => allowedEvents.get(id) === true)) {
        continue;
      }
      break;
    }
  }
} finally {
  events.controller.abort();
}