Claude Managed Agents

import Anthropic from "@anthropic-ai/sdk";

const client = new Anthropic();
const KERNEL_HOSTS = ["api.onkernel.com", "*.onkernel.com"];

const env = await client.beta.environments.create({
  name: "kernel-env",
  config: {
    type: "cloud",
    packages: { npm: ["@onkernel/cli"] },
    networking: {
      type: "limited",
      allow_package_managers: true,
      allow_mcp_servers: false,
      allowed_hosts: KERNEL_HOSTS,
    },
  },
});

const vault = await client.beta.vaults.create({
  display_name: "Kernel vault",
});

const credential = await client.beta.vaults.credentials.create(vault.id, {
  display_name: "Kernel API key",
  auth: {
    type: "environment_variable",
    secret_name: "KERNEL_API_KEY",
    secret_value: process.env.KERNEL_API_KEY!,
    networking: {
      type: "limited",
      allowed_hosts: KERNEL_HOSTS,
    },
  },
  // Enables environment_variable credentials during early access.
  betas: ["managed-agents-2026-06-11-research-preview"],
});

const WORKER_SYSTEM_PROMPT = `You are a browser-automation engineer in a Linux sandbox.
The Kernel CLI (@onkernel/cli, binary "kernel") is preinstalled and reads KERNEL_API_KEY
automatically. KERNEL_API_KEY is an opaque placeholder — never echo, print, or log it.

Create browsers with stealth and NEVER headless:
  kernel browsers create --stealth -o json
Drive the page with Playwright + computer-use + screenshots, then clean up:
  kernel browsers playwright execute <id> -o json 'await page.goto("https://example.com",{waitUntil:"load"}); return { title: await page.title() };'
  kernel browsers computer screenshot <id> --to shot.png
  kernel browsers delete <id>`;

const worker = await client.beta.agents.create({
  name: "browser-operator",
  model: "claude-haiku-4-5",
  system: WORKER_SYSTEM_PROMPT,
  tools: [
    { type: "agent_toolset_20260401", configs: [{ name: "web_fetch", enabled: false }] },
  ],
});

const coordinator = await client.beta.agents.create({
  name: "coordinator",
  model: "claude-haiku-4-5",
  system: "You lead a team of browser-operator subagents. Do light recon yourself, " +
    "then delegate exactly one page per operator and run them all in parallel. " +
    "Synthesize their findings into one report. Never print KERNEL_API_KEY.",
  tools: [
    { type: "agent_toolset_20260401", configs: [{ name: "web_fetch", enabled: false }] },
  ],
  multiagent: { type: "coordinator", agents: [{ type: "agent", id: worker.id }] },
});

const session = await client.beta.sessions.create({
  agent: coordinator.id,
  environment_id: env.id,
  vault_ids: [vault.id],
  title: "UX audit",
});

console.log(`Watch: https://platform.claude.com/workspaces/default/sessions/${session.id}`);

const stream = await client.beta.sessions.events.stream(session.id);
await client.beta.sessions.events.send(session.id, {
  events: [
    {
      type: "user.message",
      content: [{ type: "text", text: "Run a parallel UX audit of https://example.com." }],
    },
  ],
});

for await (const event of stream) {
  if (event.type === "agent.message") {
    for (const block of event.content) {
      if (block.type === "text") process.stdout.write(block.text);
    }
  } else if (event.type === "agent.tool_use") {
    console.log(`\n[tool: ${event.name}]`);
  } else if (event.type === "session.status_idle") {
    if (event.stop_reason.type === "requires_action") continue;
    break;
  }
}

// Wait for the session to leave "running", then delete it.
for (let i = 0; i < 15; i++) {
  const s = await client.beta.sessions.retrieve(session.id);
  if (s.status !== "running") break;
  await new Promise((r) => setTimeout(r, 1000));
}
await client.beta.sessions.delete(session.id);

await client.beta.vaults.delete(vault.id);          // cascades to credentials
await client.beta.environments.delete(env.id);
await client.beta.agents.archive(coordinator.id);
await client.beta.agents.archive(worker.id);