Run Claude Managed Agents in Prized Sandboxes

export ANTHROPIC_ENVIRONMENT_ID=env_…
export ANTHROPIC_ENVIRONMENT_KEY=sk-ant-oat01-…
export PRIZED_API_KEY=dcp_…

#!/bin/bash
# spawn.sh: `ant beta:worker poll --on-work ./spawn.sh` runs this once per work item (a session's run until it goes idle), with the session's ids and the environment key in ANTHROPIC_* variables and the work item as JSON on stdin.
set -euo pipefail
ANT_VERSION=1.40.0
MAX_MIN=60  # the sandbox's lifetime in minutes: up to 1440 after a top-up or a plan
ANTHROPIC_WORK_SECRET=$(jq -r '.secret // empty')
DIR="sessions/$ANTHROPIC_SESSION_ID"  # the session's working directory as work.tgz, and a log per work item
OUT="$DIR/$ANTHROPIC_WORK_ID"
mkdir -p "$DIR"

# Run the session in the background, so the poller can claim the next one now.
(
  # One run of a session at a time, so a follow-up starts from the files the run before it saved.
  # A run ends with its sandbox, so a lock older than that was left by a run that was killed.
  until mkdir "$DIR/lock" 2>/dev/null; do
    find "$DIR/lock" -maxdepth 0 -mmin +$((MAX_MIN + 10)) -exec rmdir {} \; 2>/dev/null || true
    sleep 5
  done
  trap 'rmdir "$DIR/lock"' EXIT

  SECONDS=0  # from here, the sandbox's lifetime
  SBX=$(prized sandbox create --no-wait --template prized-base-v1 --max-runtime "$MAX_MIN" --label "anthropic-session=$ANTHROPIC_SESSION_ID")
  echo "sandbox: $SBX"
  trap 'prized sandbox rm "$SBX" || true; rmdir "$DIR/lock"' EXIT  # until the session is over, a failed step deletes the sandbox

  # Hand the worker its keys in a file, through stdin: other users of this machine can read a command line.
  for v in ANTHROPIC_ENVIRONMENT_ID ANTHROPIC_ENVIRONMENT_KEY ANTHROPIC_SESSION_ID ANTHROPIC_WORK_ID ANTHROPIC_WORK_SECRET; do printf 'export %s=%q\n' "$v" "${!v}"; done |
    prized sandbox cp - "$SBX:~/worker.env"

  # A session that went idle and woke again carries on with its files.
  if [ -e "$DIR/work.tgz" ]; then
    prized sandbox cp "$DIR/work.tgz" "$SBX:~/work.tgz"
    prized sandbox exec "$SBX" -- 'tar xzf ~/work.tgz -C ~/work'
  fi

  # Install the ant CLI without root, and start the worker. It stops 5 minutes before the sandbox's lifetime ends, to leave time to save its output.
  prized sandbox exec "$SBX" -- "mkdir -p ~/.local/bin && curl -fsSL https://github.com/anthropics/anthropic-cli/releases/download/v$ANT_VERSION/ant_${ANT_VERSION}_linux_amd64.tar.gz | tar -xz -C ~/.local/bin ant"
  prized sandbox exec "$SBX" -- "nohup bash -c '. ~/worker.env; timeout $((MAX_MIN * 60 - 300 - SECONDS)) ~/.local/bin/ant beta:worker run --workdir /home/prized/work; touch ~/worker.done' > ~/worker.log 2>&1 &"

  # The worker exits a minute after the session goes idle, and leaves ~/worker.done behind. Check every 30 seconds.
  until prized sandbox exec "$SBX" -- 'test -e ~/worker.done' || [ "$SECONDS" -ge $((MAX_MIN * 60 - 240)) ]; do sleep 30; done

  # Save the working directory and the worker's log, then delete the sandbox. If saving fails, the sandbox and the session's lock stay until its lifetime ends.
  trap - EXIT
  prized sandbox exec "$SBX" -- 'tar czf ~/work.tgz -C ~/work .'
  prized sandbox cp "$SBX:~/work.tgz" "$DIR/work.tgz"
  prized sandbox cp "$SBX:~/worker.log" "$OUT.worker.log"
  prized sandbox rm "$SBX" || true
  rmdir "$DIR/lock"  # after the delete, so a follow-up's create finds the sandbox's slot free
) > "$OUT.log" 2>&1 < /dev/null &

ant beta:worker poll --on-work ./spawn.sh