Docker Sandbox for Agent Tools

Isolated execution of claude, codex, and other agent tools using Docker Desktop's docker sandbox (v0.11.0+). Uses existing Claude Max and ChatGPT Pro subscriptions — no API key billing.

ADR: ADR-0023

Prerequisites

• Docker Desktop running (OrbStack works)
• docker sandbox version returns ≥0.11.0
• Auth secrets stored in agent-secrets:
  • claude_setup_token — from claude setup-token (1-year token, Max subscription)
  • codex_auth_json — contents of ~/.codex/auth.json (ChatGPT Pro subscription)

Quick Reference

# Create a sandbox
docker sandbox create --name my-sandbox claude /path/to/project