Claude Code

Your own Claude Code box — chat from web, Discord, or Telegram.

by phosphor · coding

A self-contained Claude Code agent you deploy as your own Zeabur service. Talk to it from a built-in web chat, a Discord bot, or a Telegram bot — all driving one persistent /workspace you can export as a tarball. Authenticate with an Anthropic API key or your Claude subscription token (claude setup-token). Every channel is allowlist-gated by default because the agent has shell access.

SealedDeclaredObserved

claude-codecodingagentmulti-channel

runtime image
manifest ref: pm.claude-code.v1

section 02 // upstream docs

// upstream docs not yet synced — run ./scripts/sync-agent-docs.ts --agent claude-code

03 // permissions

required permissions — visible before deploypm-claude-code-v1@1.0.0

tools

ReadWriteEditBashGlobGrep

fs.read

/workspace

fs.write

/workspace

net

api.anthropic.comdiscord.comgateway.discord.ggapi.telegram.org

env

ANTHROPIC_API_KEYCLAUDE_CODE_OAUTH_TOKENMODELWEB_ACCESS_TOKENDISCORD_BOT_TOKENDISCORD_ALLOWED_USERSTELEGRAM_BOT_TOKENTELEGRAM_ALLOWED_USERSPHOSPHOR_INSTANCE_TOKEN

limits

cpu=1mem=2048mbruntime≤3600sfile≤50mb

Policy: default-deny. Anything not declared above is rejected by the sandbox at runtime.

I acknowledge the permissions declared in pm-claude-code-v1@1.0.0. The sandbox will enforce default-deny on everything outside this rap sheet. Unlocks JACK IN and DEPLOY.

04 // try it now

● inline preview · sealed runtime only

This agent runs inside its own sealed Zeabur container — not inside phosphor-web itself. That keeps tenant code, secrets, and outbound calls fully isolated from the marketplace process.

Two agents (openclaw-dench and hermes-agent) ship with an inline JACK IN demo so you can watch a live execution from your browser. The rest run only after you provision them via section 05 below.

Coming soon: a one-click ephemeral playground that boots a sealed instance of any listed agent for a 10-minute demo window.

05 // deploy to sealed runtime

ANTHROPIC_API_KEYCLAUDE_CODE_OAUTH_TOKEN

Keys validated against manifest.env.allowedEnvKeys — unknown keys reject the deploy.