vagrant-claude-sandbox 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0b41524c843f1c62cda68ca45015a524bfbdade5bd81d5fba9ca1b9d700cae84
-  data.tar.gz: dea52ec2514c2f0fdafa87374b5ff25b4b82381d2673d96968c72c6ee0e0b5ef
+  metadata.gz: a0c3f6d76bc6a8854641197815ae4e7a1b5685a322576d72969d8e00b82b39d7
+  data.tar.gz: 67eb291fdbefa65b04a48d684e89658955c7819d9f49df469a27d1b8b035cd38
 SHA512:
-  metadata.gz: 5df48ce7440d827876072a884ae460e4b4fdf25e88b0455799fa3ce1ab7272c30a1b2ad6f2055b36dee52acbc328c74e4dc73a822b2e2af0066b9dec453c0265
-  data.tar.gz: b6af4d17d0f8260223250ebbbf8ee5bd38dcf6f84bd929cbbdf3e0a72f6275d09fb97619a0ca9dfa94cf0c99ef38c822917fc9d17b51f86cf27425d6d78b1875
+  metadata.gz: 0da4554053ffc441c32e1f97e0be973aead1bc98b8a77d62956987b4f4f9413709e935c48731bea51740f52f20ef78f44331ca422ad86c3c082173776af26d68
+  data.tar.gz: bf1b40b5839f36a84180436c120af389eb7b3d92aadacf3172520e2f5b8ec01a4396230f7c237fb1450a79f0400ed171becf14716914fdc0be18d492d816641b

data/README.md

@@ -1,20 +1,20 @@
 # Vagrant Claude Sandbox
 
-A Vagrant plugin for running Claude Code in an isolated VM sandbox.
+A Vagrant plugin for running Claude Code in an isolated sandbox environment.
 
 ## Features
 
-- Ubuntu 24.04 LTS with Docker, Node.js, git pre-installed
+- Fast container-based sandbox using Docker
+- Ubuntu 24.04 LTS with Node.js and git pre-installed
 - Automatic Claude Code CLI installation
-- Synced workspace folder and Claude config
-- **Full Claude plugins and skills support** - automatically loads your installed plugins and skills with fixed paths
-- `claude-yolo` wrapper (runs Claude with `--dangerously-skip-permissions`)
-- Customizable VM resources
+- Synced workspace folder and Claude config (plugins and skills work automatically)
+- Customizable resources (memory, CPUs)
+- Optional VirtualBox provider for full VM isolation
 
 ## Prerequisites
 
 - [Vagrant](https://www.vagrantup.com/downloads) >= 2.2.0
-- [VirtualBox](https://www.virtualbox.org/wiki/Downloads) >= 6.1
+- [Docker](https://docs.docker.com/get-docker/) (default provider)
 
 ## Installation
 
@@ -32,12 +32,17 @@ Vagrant.configure("2") do |config|
 end
 ```
 
-Start the VM:
+Start the sandbox:
 
 ```bash
 vagrant up
-vagrant ssh
-claude-yolo  # Inside VM
+vagrant claude  # Launch Claude CLI with Chrome integration
+```
+
+Access a normal shell:
+
+```bash
+vagrant ssh  # Regular shell session
 ```
 
 ### Custom Configuration
@@ -52,31 +57,121 @@ Vagrant.configure("2") do |config|
 end
 ```
 
+### Mounting Additional Directories
+
+Mount additional directories using Vagrant's `synced_folder` directive:
+
+```ruby
+Vagrant.configure("2") do |config|
+  config.claude_sandbox.apply_to!(config) do |sandbox|
+    sandbox.memory = 8192
+    sandbox.cpus = 4
+  end
+
+  config.vm.synced_folder "~/Projects/my-project", "/my-project"
+end
+```
+
+**Note:** The workspace (`/agent-workspace`) and Claude config (`~/.claude/`) are mounted automatically.
+
 ### Options
 
 | Option | Default | Description |
 |--------|---------|-------------|
+| `provider` | `"docker"` | Provider: `"docker"` or `"virtualbox"` |
 | `memory` | `4096` | RAM in MB |
 | `cpus` | `2` | Number of CPUs |
-| `box` | `"bento/ubuntu-24.04"` | Vagrant box |
-| `workspace_path` | `"/agent-workspace"` | Workspace path in VM |
+| `workspace_path` | `"/agent-workspace"` | Workspace path in container/VM |
 | `claude_config_path` | `"~/.claude/"` | Host Claude config path |
-| `skip_claude_cli_install` | `false` | Skip Claude CLI installation |
 | `additional_packages` | `[]` | Extra apt packages |
+| `skip_claude_cli_install` | `false` | Skip Claude CLI installation |
+| `ubuntu_mirror` | `nil` | Ubuntu package mirror URL (uses official mirror by default) |
+
+## VirtualBox Provider
+
+For full VM isolation or Docker-in-Docker capabilities:
+
+```ruby
+Vagrant.configure("2") do |config|
+  config.claude_sandbox.provider = "virtualbox"
+  config.claude_sandbox.apply_to!(config)
+end
+```
+
+**When to use VirtualBox:**
+- You need Docker available inside the sandbox
+- You need full VM isolation (kernel-level)
+- You're running on a system without Docker
 
-## Plugin and Skills Support
+**Prerequisites:**
+- [VirtualBox](https://www.virtualbox.org/wiki/Downloads) >= 6.1
+
+### Ubuntu Mirror Configuration
 
-This plugin automatically copies your `~/.claude/` directory to the VM and fixes absolute paths in plugin configuration files. This means:
+By default, the plugin uses Ubuntu's official mirror (`http://ports.ubuntu.com/ubuntu-ports`). If package updates are slow in your region, you can configure a faster mirror:
+
+```ruby
+Vagrant.configure("2") do |config|
+  # Choose a mirror close to your location for faster updates
+  config.claude_sandbox.ubuntu_mirror = "http://ftp.jaist.ac.jp/pub/Linux/ubuntu-ports"  # Japan
+  config.claude_sandbox.apply_to!(config)
+end
+```
+
+**Trusted mirrors for ARM (ubuntu-ports):**
+- Official Ubuntu: `http://ports.ubuntu.com/ubuntu-ports` (default, safest)
+- JAIST (Japan): `http://ftp.jaist.ac.jp/pub/Linux/ubuntu-ports` (university mirror)
+- Kakao (Korea): `http://mirror.kakao.com/ubuntu-ports` (major tech company)
+
+**Security note:** Only use mirrors from trusted sources. The official Ubuntu mirror is always the safest option.
+
+## Development and Testing
+
+### Running Tests
+
+The project includes comprehensive unit and integration tests:
+
+```bash
+# Install development dependencies
+bundle install
 
-- All your installed Claude plugins will work in the VM
-- All your custom skills will be available
-- Plugin paths are automatically updated from host paths to VM paths
+# Run unit tests
+bundle exec rake spec
 
-The plugin configuration files that are updated:
-- `~/.claude/plugins/installed_plugins.json`
-- `~/.claude/plugins/known_marketplaces.json`
+# Run integration tests
+./test-plugin.sh docker --skip-extended  # Quick test
 
-This ensures that plugins and skills that reference local file paths will work correctly inside the VM environment.
+# Run all tests
+bundle exec rake test
+```
+
+See [TESTING.md](TESTING.md) for detailed testing instructions.
+
+### Contributing
+
+1. Fork the repository
+2. Create a feature branch
+3. Add tests for your changes
+4. Ensure all tests pass: `bundle exec rake test`
+5. Submit a pull request
+
+## Troubleshooting
+
+### Docker "Permission denied" Error
+
+**This is now handled automatically by the plugin!**
+
+The plugin automatically detects and fixes PATH conflicts that could cause "Permission denied" errors with the Docker provider. If you have a directory named `docker` in your PATH before the actual Docker executable, the plugin will reorder your PATH to prioritize common Docker binary locations.
+
+You should see a message during `vagrant up` if a conflict was detected and fixed:
+```
+Detected Docker PATH conflict - automatically reordered PATH
+```
+
+If you're still experiencing issues, you can manually fix the PATH as a fallback:
+```bash
+PATH=/usr/local/bin:$PATH vagrant up
+```
 
 ## Credits
 

data/lib/docker/Dockerfile

@@ -0,0 +1,33 @@
+FROM ubuntu:24.04
+
+ENV DEBIAN_FRONTEND=noninteractive
+
+# Install SSH and basic packages
+RUN apt-get update && apt-get install -y \
+    openssh-server \
+    sudo \
+    curl \
+    git \
+    && rm -rf /var/lib/apt/lists/*
+
+# Configure SSH
+RUN mkdir /var/run/sshd
+RUN sed -i 's/#PermitRootLogin prohibit-password/PermitRootLogin yes/' /etc/ssh/sshd_config
+RUN sed -i 's/#PasswordAuthentication yes/PasswordAuthentication yes/' /etc/ssh/sshd_config
+
+# Create vagrant user (Vagrant expects this)
+RUN useradd -m -s /bin/bash vagrant && \
+    echo "vagrant:vagrant" | chpasswd && \
+    echo "vagrant ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers
+
+# Set up SSH key directory and install Vagrant insecure key
+RUN mkdir -p /home/vagrant/.ssh && \
+    chmod 700 /home/vagrant/.ssh && \
+    curl -fsSL https://raw.githubusercontent.com/hashicorp/vagrant/main/keys/vagrant.pub \
+      -o /home/vagrant/.ssh/authorized_keys && \
+    chmod 600 /home/vagrant/.ssh/authorized_keys && \
+    chown -R vagrant:vagrant /home/vagrant/.ssh
+
+EXPOSE 22
+
+CMD ["/usr/sbin/sshd", "-D"]

data/lib/vagrant-claude-sandbox/command.rb

@@ -0,0 +1,41 @@
+module VagrantPlugins
+  module ClaudeSandbox
+    class Command < Vagrant.plugin("2", :command)
+      def self.synopsis
+        "SSH into the VM and launch Claude CLI"
+      end
+
+      def execute
+        options = {}
+        opts = OptionParser.new do |o|
+          o.banner = "Usage: vagrant claude [-- extra ssh args]"
+          o.separator ""
+          o.separator self.class.synopsis
+          o.separator ""
+          o.separator "This will SSH into the VM, cd to the workspace, and launch Claude CLI"
+          o.separator "with Chrome integration enabled."
+        end
+
+        # Parse the options
+        argv = parse_options(opts)
+        return if !argv
+
+        # Get the machine
+        with_target_vms(argv, single_target: true) do |machine|
+          # Get workspace path from config
+          config = machine.config.claude_sandbox
+          workspace_path = config.workspace_path || "/agent-workspace"
+
+          # Build the command to run
+          command = "cd #{workspace_path}; . ~/.nvm/nvm.sh && exec claude --dangerously-skip-permissions --chrome"
+
+          # Execute SSH with the command
+          machine.action(:ssh_run, ssh_run_command: command, ssh_opts: { extra_args: ["-t"] })
+        end
+
+        # Success
+        0
+      end
+    end
+  end
+end

data/lib/vagrant-claude-sandbox/config.rb

@@ -8,6 +8,9 @@ module VagrantPlugins
       attr_accessor :claude_config_path
       attr_accessor :skip_claude_cli_install
       attr_accessor :additional_packages
+      attr_accessor :provider          # "virtualbox" or "docker"
+      attr_accessor :docker_image      # Docker image (default: build from Dockerfile)
+      attr_accessor :ubuntu_mirror     # Ubuntu mirror URL (default: nil, uses official mirror)
 
       def initialize
         @memory = UNSET_VALUE
@@ -17,6 +20,9 @@ module VagrantPlugins
         @claude_config_path = UNSET_VALUE
         @skip_claude_cli_install = UNSET_VALUE
         @additional_packages = UNSET_VALUE
+        @provider = UNSET_VALUE
+        @docker_image = UNSET_VALUE
+        @ubuntu_mirror = UNSET_VALUE
       end
 
       def finalize!
@@ -27,6 +33,9 @@ module VagrantPlugins
         @claude_config_path = File.expand_path("~/.claude/") if @claude_config_path == UNSET_VALUE
         @skip_claude_cli_install = false if @skip_claude_cli_install == UNSET_VALUE
         @additional_packages = [] if @additional_packages == UNSET_VALUE
+        @provider = "virtualbox" if @provider == UNSET_VALUE
+        @docker_image = nil if @docker_image == UNSET_VALUE
+        @ubuntu_mirror = nil if @ubuntu_mirror == UNSET_VALUE
       end
 
       def validate(machine)
@@ -44,6 +53,10 @@ module VagrantPlugins
           errors << "additional_packages must be an array"
         end
 
+        if @provider != UNSET_VALUE && !["virtualbox", "docker"].include?(@provider)
+          errors << "provider must be 'virtualbox' or 'docker'"
+        end
+
         { "Claude Sandbox" => errors }
       end
 
@@ -52,9 +65,24 @@ module VagrantPlugins
         # Ensure values are finalized before use
         finalize!
 
-        # Set the box
-        root_config.vm.box = @box
+        # Common configuration
+        apply_common_config!(root_config)
+
+        # Always configure both providers
+        # Vagrant will choose the appropriate one based on:
+        # 1. --provider flag from command line
+        # 2. Existing .vagrant directory state
+        # 3. Default provider (VirtualBox)
+        apply_virtualbox_config!(root_config)
+        apply_docker_config!(root_config)
 
+        # Provisioning (with provider awareness)
+        apply_provisioning!(root_config)
+      end
+
+      private
+
+      def apply_common_config!(root_config)
         # Configure synced folder for workspace
         root_config.vm.synced_folder ".", @workspace_path,
           create: true,
@@ -68,33 +96,70 @@ module VagrantPlugins
             destination: "/tmp/claude-config"
         end
 
-        # Configure provider (VirtualBox)
-        root_config.vm.provider "virtualbox" do |vb|
+        # Configure SSH port with auto-correction for conflicts
+        root_config.vm.network :forwarded_port, guest: 22, host: 2200, id: "ssh", auto_correct: true
+      end
+
+      def apply_virtualbox_config!(root_config)
+        root_config.vm.provider "virtualbox" do |vb, override|
+          # Set box only for VirtualBox provider
+          override.vm.box = @box
           vb.memory = @memory
           vb.cpus = @cpus
           vb.customize ["modifyvm", :id, "--audio", "none"]
           vb.customize ["modifyvm", :id, "--usb", "off"]
         end
+      end
+
+      def apply_docker_config!(root_config)
+        root_config.vm.provider "docker" do |d|
+          if @docker_image
+            d.image = @docker_image
+          else
+            d.build_dir = File.expand_path("../../docker", __FILE__)
+          end
+          d.has_ssh = true
+          d.remains_running = true
+          d.create_args = ["--memory=#{@memory}m", "--cpus=#{@cpus}"]
+        end
+      end
 
-        # Provision the VM
+      def apply_provisioning!(root_config)
         unless @skip_claude_cli_install
           root_config.vm.provision "shell",
             inline: generate_provision_script,
             env: {"HOST_CLAUDE_PATH" => @claude_config_path}
         end
-
-        # Configure SSH to auto-cd to workspace
-        root_config.ssh.extra_args = ["-t", "cd #{@workspace_path}; bash --login"]
       end
 
-      private
-
       def generate_provision_script
         additional_packages = @additional_packages.join(" ")
+        skip_docker = @provider == "docker"
+
+        docker_install_script = skip_docker ? "" : <<-DOCKER
+          # Install Docker
+          if ! command -v docker &> /dev/null; then
+            echo "Installing Docker..."
+            curl -fsSL https://get.docker.com -o get-docker.sh
+            sh get-docker.sh
+            usermod -aG docker vagrant
+            rm get-docker.sh
+          else
+            echo "Docker already installed"
+          fi
+        DOCKER
+
+        mirror_config = @ubuntu_mirror ? <<-MIRROR
+          # Switch to faster Ubuntu mirror
+          echo "Configuring Ubuntu mirror: #{@ubuntu_mirror}"
+          sed -i 's|http://ports.ubuntu.com/ubuntu-ports|#{@ubuntu_mirror}|g' /etc/apt/sources.list.d/ubuntu.sources 2>/dev/null || true
+          sed -i 's|http://ports.ubuntu.com/ubuntu-ports|#{@ubuntu_mirror}|g' /etc/apt/sources.list 2>/dev/null || true
+        MIRROR
+        : ""
 
         script = <<-SHELL
           set -e
-
+#{mirror_config}
           echo "Updating package lists..."
           apt-get update
 
@@ -109,30 +174,33 @@ module VagrantPlugins
             unzip \
             #{additional_packages}
 
-          # Install Docker
-          if ! command -v docker &> /dev/null; then
-            echo "Installing Docker..."
-            curl -fsSL https://get.docker.com -o get-docker.sh
-            sh get-docker.sh
-            usermod -aG docker vagrant
-            rm get-docker.sh
-          else
-            echo "Docker already installed"
-          fi
+          #{docker_install_script}
+
+          # Install nvm for the vagrant user
+          if [ ! -d "/home/vagrant/.nvm" ]; then
+            echo "Installing nvm..."
+            # Install nvm as vagrant user
+            sudo -u vagrant bash -c 'curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash'
+
+            # Load nvm in this script
+            export NVM_DIR="/home/vagrant/.nvm"
+            [ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh"
 
-          # Install Node.js and npm
-          if ! command -v node &> /dev/null; then
-            echo "Installing Node.js..."
-            curl -fsSL https://deb.nodesource.com/setup_20.x | bash -
-            apt-get install -y nodejs
+            # Install Node.js LTS version
+            echo "Installing Node.js LTS via nvm..."
+            sudo -u vagrant bash -c '. /home/vagrant/.nvm/nvm.sh && nvm install --lts && nvm use --lts'
           else
-            echo "Node.js already installed"
+            echo "nvm already installed"
           fi
 
+          # Ensure nvm is loaded for subsequent commands
+          export NVM_DIR="/home/vagrant/.nvm"
+          [ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh"
+
           # Install Claude Code CLI
-          if ! command -v claude &> /dev/null; then
+          if ! sudo -u vagrant bash -c '. /home/vagrant/.nvm/nvm.sh && command -v claude' &> /dev/null; then
             echo "Installing Claude Code CLI..."
-            npm install -g @anthropic-ai/claude-code --no-audit
+            sudo -u vagrant bash -c '. /home/vagrant/.nvm/nvm.sh && npm install -g @anthropic-ai/claude-code --no-audit'
           else
             echo "Claude Code CLI already installed"
           fi
@@ -155,16 +223,7 @@ module VagrantPlugins
             echo "Claude plugins and skills loaded successfully!"
           fi
 
-          # Create claude-yolo wrapper
-          echo "Creating claude-yolo command..."
-          cat > /usr/local/bin/claude-yolo << 'EOF'
-#!/bin/bash
-claude --dangerously-skip-permissions "$@"
-EOF
-          chmod +x /usr/local/bin/claude-yolo
-
           echo "Claude sandbox environment setup complete!"
-          echo "You can now run 'claude-yolo' to start Claude Code with permissions disabled"
         SHELL
 
         script

data/lib/vagrant-claude-sandbox/path_fixer.rb

@@ -0,0 +1,73 @@
+module VagrantPlugins
+  module ClaudeSandbox
+    class PathFixer
+      def self.fix_docker_path!
+        # Always check for PATH conflicts and fix them
+        # This is necessary because commands like 'vagrant destroy' don't have --provider flag
+        # but still need the correct PATH to interact with Docker containers
+
+        # Check if there's a PATH conflict
+        path_dirs = ENV['PATH'].split(':')
+        docker_binary_path = find_docker_binary
+
+        return unless docker_binary_path
+
+        docker_dir = File.dirname(docker_binary_path)
+
+        # Check if there's a directory named 'docker' appearing before the real docker binary
+        conflict_detected = false
+        path_dirs.each_with_index do |dir, index|
+          # If we find the real docker directory, stop checking
+          break if dir == docker_dir
+
+          # Check if this directory has a 'docker' subdirectory or file that would conflict
+          potential_conflict = File.join(dir, 'docker')
+          if File.exist?(potential_conflict) && File.directory?(potential_conflict)
+            conflict_detected = true
+            break
+          end
+        end
+
+        if conflict_detected
+          # Reorder PATH to put common Docker binary locations first
+          prioritized_paths = ['/usr/local/bin', '/usr/bin', docker_dir].uniq
+          other_paths = path_dirs - prioritized_paths
+          new_path = (prioritized_paths + other_paths).join(':')
+
+          ENV['PATH'] = new_path
+          # Only show message for commands that actually use Docker
+          if using_docker_related_command?
+            puts "Detected Docker PATH conflict - automatically reordered PATH"
+          end
+        end
+      end
+
+      private
+
+      def self.using_docker_related_command?
+        # Check if this is a Docker-related command
+        ARGV.include?('--provider=docker') ||
+        ARGV.include?('--provider docker') ||
+        ENV['VAGRANT_DEFAULT_PROVIDER'] == 'docker' ||
+        ARGV.include?('up') ||
+        ARGV.include?('destroy') ||
+        ARGV.include?('halt') ||
+        ARGV.include?('reload') ||
+        ARGV.include?('ssh')
+      end
+
+      def self.find_docker_binary
+        # Try common Docker installation paths
+        ['/usr/local/bin/docker', '/usr/bin/docker', '/opt/homebrew/bin/docker'].each do |path|
+          return path if File.executable?(path)
+        end
+
+        # Fall back to using 'which' if available
+        result = `which docker 2>/dev/null`.strip
+        result.empty? ? nil : result
+      rescue
+        nil
+      end
+    end
+  end
+end

data/lib/vagrant-claude-sandbox/plugin.rb

@@ -1,3 +1,8 @@
+require_relative "path_fixer"
+
+# Fix Docker PATH issues immediately when plugin loads (before Vagrant initialization)
+VagrantPlugins::ClaudeSandbox::PathFixer.fix_docker_path!
+
 module VagrantPlugins
   module ClaudeSandbox
     class Plugin < Vagrant.plugin("2")
@@ -8,6 +13,11 @@ module VagrantPlugins
         require_relative "config"
         Config
       end
+
+      command "claude" do
+        require_relative "command"
+        Command
+      end
     end
   end
 end

data/lib/vagrant-claude-sandbox/version.rb

@@ -1,5 +1,5 @@
 module VagrantPlugins
   module ClaudeSandbox
-    VERSION = "0.1.0"
+    VERSION = "0.2.0"
   end
 end

metadata

@@ -1,43 +1,43 @@
 --- !ruby/object:Gem::Specification
 name: vagrant-claude-sandbox
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Bero
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-01-22 00:00:00.000000000 Z
+date: 2026-01-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: bundler
+  name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: '13.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: '13.0'
 - !ruby/object:Gem::Dependency
-  name: rake
+  name: rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '13.0'
+        version: '3.12'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '13.0'
+        version: '3.12'
 description: Provides a pre-configured sandbox environment for running Claude Code
   in an isolated VM with full plugin and skills support
 email: 
@@ -47,8 +47,11 @@ extra_rdoc_files: []
 files:
 - LICENSE
 - README.md
+- lib/docker/Dockerfile
 - lib/vagrant-claude-sandbox.rb
+- lib/vagrant-claude-sandbox/command.rb
 - lib/vagrant-claude-sandbox/config.rb
+- lib/vagrant-claude-sandbox/path_fixer.rb
 - lib/vagrant-claude-sandbox/plugin.rb
 - lib/vagrant-claude-sandbox/version.rb
 homepage: https://github.com/bgrgicak/vagrant-claude-sandbox