oiradoc/sbx-vscode-kit:latest

schemaVersion: "2"
kind: sandbox
name: claude-vscode
displayName: VSCode with Claude Code
description: Runs VS Code inside a Docker Sandbox with the Claude Code extension pre-installed and exposed over a VS Code tunnel, so you can attach from your local desktop VS Code (Remote - Tunnels) or vscode.dev.
sandbox:
    image: oiradoc/sbx-vscode
    entrypoint:
        - code
    command:
        default:
            - tunnel
            - --accept-server-license-terms
        interactive:
            - tunnel
            - --accept-server-license-terms
agentInstructions:
    filename: CLAUDE.md
    content: |
        ## VS Code tunnel sandbox

        This sandbox runs `code tunnel`. The Claude Code VS Code extension
        (`anthropic.claude-code`) is already installed on the server, so you don't
        need to install it again.

        Connect from your desktop VS Code via the **Remote - Tunnels** extension, or
        open the printed `https://vscode.dev/tunnel/<name>/...` URL in a browser. The
        first time you use Claude Code in a fresh sandbox you'll be asked to log in
        with your Claude account.
permissions:
    network:
        allow:
            - claude.com:443
            - api.anthropic.com:443
            - go.microsoft.com:443
            - update.code.visualstudio.com:443
            - vscode.download.prss.microsoft.com:443
            - main.vscode-cdn.net:443
            - anthropic.gallery.vsassets.io:443
            - anthropic.gallerycdn.vsassets.io:443
            - vscode.dev:443
            - global.rel.tunnels.api.visualstudio.com:443
            - '*.rel.tunnels.api.visualstudio.com:443'
            - github.com:443
credentials:
    - service: anthropic
      apiKey:
        name: ANTHROPIC_API_KEY
        inject:
            - domain: api.anthropic.com
              header: x-api-key
              format: '%s'