Claude Managed Agents

import Anthropic from "@anthropic-ai/sdk";

const client = new Anthropic();

// 1. An environment with the notte CLI baked into the image.
//    allow_package_managers covers npm and PyPI but NOT the Go module proxy,
//    so the Go toolchain hosts have to be allowed explicitly or the install
//    silently produces no binary.
const env = await client.beta.environments.create({
  name: "notte-browser-env",
  config: {
    type: "cloud",
    packages: { go: ["github.com/nottelabs/notte-cli/cmd/notte@latest"] },
    networking: {
      type: "limited",
      allow_package_managers: true,
      allowed_hosts: [
        "api.notte.cc",
        "*.notte.cc",
        "proxy.golang.org",
        "sum.golang.org",
        "storage.googleapis.com",
      ],
    },
  },
});

// 2. A vault holding NOTTE_API_KEY. The sandbox env var carries an opaque
//    placeholder; the real value is substituted into outbound requests only
//    when they are addressed to allowed_hosts, so the model never sees it.
const vault = await client.beta.vaults.create({ display_name: "Notte vault" });

const credential = await client.beta.vaults.credentials.create(vault.id, {
  display_name: "Notte API key",
  auth: {
    type: "environment_variable",
    secret_name: "NOTTE_API_KEY",
    secret_value: process.env.NOTTE_API_KEY!,
    networking: { type: "limited", allowed_hosts: ["api.notte.cc", "*.notte.cc"] },
  },
});

console.log(env.id, vault.id, credential.id);

// packages.go drops the binary in $(go env GOROOT)/bin, which is not on PATH.
// Every shell command that calls notte must prepend this.
const PATH_FIX = 'export PATH="$PATH:$(go env GOROOT)/bin:$(go env GOPATH)/bin"';

// 3. The agent: model, system prompt and tools. web_fetch and web_search are
//    disabled so the agent can only see pages through a real Notte browser.
const agent = await client.beta.agents.create({
  name: "browser-operator",
  model: "claude-haiku-4-5",
  system:
    `You drive real browsers with the notte CLI. ` +
    `Prefix every shell command with: ${PATH_FIX}`,
  tools: [
    {
      type: "agent_toolset_20260401",
      configs: [
        { name: "web_fetch", enabled: false },
        { name: "web_search", enabled: false },
      ],
    },
  ],
});

// 4. A session binds the agent to the environment and the vault.
const session = await client.beta.sessions.create({
  agent: agent.id,
  environment_id: env.id,
  vault_ids: [vault.id],
  title: "Notte browser task",
});

// 5. Open the event stream, send the task, and print the reply until idle.
const stream = await client.beta.sessions.events.stream(session.id);

await client.beta.sessions.events.send(session.id, {
  events: [
    {
      type: "user.message",
      content: [{ type: "text", text: "Open https://example.com and report its main heading." }],
    },
  ],
});

for await (const event of stream) {
  if (event.type === "agent.message") {
    for (const block of event.content) {
      if (block.type === "text") process.stdout.write(block.text);
    }
  } else if (event.type === "session.status_idle") {
    break;
  }
}

await client.beta.sessions.delete(session.id);