ory-e2b-sandbox

E2B sandbox with Ory agent security

You are helping the user scaffold an E2B sandbox template that preinstalls and registers the @ory/claude-code plugin. The resulting template publishes a named image; every Sandbox.create("<tag>") call from their SDK gets a runtime where the agent's tool calls are already authenticated against Ory Identities, authorized against Ory Permissions, and recorded as structured activity events — with no install step at sandbox boot.

This skill carries the full workflow and the file contents. You generate the files in the user's repo; the user runs the build.

Precondition: the user has (or will obtain) an E2B_API_KEY and has installed the E2B CLI / SDK (npm install e2b dotenv). If they haven't, point them at https://e2b.dev/docs and stop — do not fabricate credentials.

Step 1 — Confirm the target

Before writing files, confirm with the user:

1. Where in their repo should the integration live? A common choice is integrations/e2b/ at the repo root. Use that unless they say otherwise.
2. Template tag. Default to agent-ory (e.g. claude-code-ory, codex-ory). Operators will reference this string in Sandbox.create().
3. Will the sandbox have network access to Ory? It must — the plugin makes live API calls to ORY_PROJECT_URL from inside the sandbox.

If the user is targeting an in-process harness (OpenClaw, OpenCode), the host binary that loads the plugin must also be available inside the sandbox. Flag this and ask how they ship that binary today — usually npm install of a project that already depends on the harness runtime.

Step 2 — Generate the files

Create these four files at the chosen location (the example uses integrations/e2b/).

integrations/e2b/template.ts

import { Template } from "e2b";

export const template = Template()
  .fromUbuntuImage("22.04")
  .aptInstall(["curl", "ca-certificates", "git", "python3"])

  // Node.js 20 (NodeSource)
  .runCmd("curl -fsSL https://deb.nodesource.com/setup_20.x | bash -")
  .aptInstall(["nodejs"])

  // Install the harness CLI globally. Replace `@anthropic-ai/claude-code` with
  // the binary that hosts the Ory plugin in this sandbox (e.g. the Codex or
  // Gemini CLI). For in-process harnesses (openclaw, opencode), `npm install`
  // the harness runtime here instead and ensure its entrypoint is on PATH.
  .npmInstall(["@anthropic-ai/claude-code"], { g: true })

  // Install the Ory plugin into the harness's discovery location.
  .setWorkdir("/root")
  .runCmd("npx -y -p @ory/claude-code ory-claude install")

  // Sandbox runtime defaults. Per-tenant secrets (project URL, tokens, client
  // IDs) MUST be passed at Sandbox.create() time, never baked into the image.
  .setEnvs({
    ORY_PERMISSION_NAMESPACE: "AgentTool",
    ORY_AGENT_DEBUG: "true",
    ORY_AGENT_LOG_FILE: "/root/ory-agent-debug.log",
  })

  .setWorkdir("/workspace");