Overview
claude-code-wsl-sandbox is a documented, reproducible setup for running an AI coding agent on Windows inside an OS-level sandbox using WSL 2, ai-jail, and Bitwarden-backed SSH signing. The agent is confined to the project directory and cannot reach ~/.ssh, the Windows filesystem, or Windows executables. Commits are signed by a key held in Bitwarden that never touches disk.
The setup uses WSL 2 because ai-jail has no native Windows support and its Linux backend is bubblewrap. Claude Code is installed inside the WSL distro, not on Windows, because ai-jail sandboxes the Linux binary. Inside the jail there is no /mnt, so reg.exe, powershell.exe, and cmd.exe are unreachable.
The project also documents a Bitwarden SSH agent bridge using npiperelay and socat, so the private key never enters WSL; only the sign request and signature cross. Commits are made outside the jail, and the agent writes code while the user commits. The sandbox constrains where the agent can act, not how much it does.
Pricing
Free
Detailed plans have not been confirmed in our catalog. Check the official website for current limits and billing terms.
Visit WebsitePrices and limits may change. Confirm the currency, billing period, seat minimum and usage caps on the official website.
Use Cases
- Developers use claude-code-wsl-sandbox to run an AI coding agent on Windows inside an OS-level sandbox.
- Developers use it to keep the agent confined to the project directory.
- Developers use it to prevent the agent from reaching ~/.ssh.
- Developers use it to keep SSH commit signing backed by Bitwarden while the key never touches disk.
- Developers use it to run Claude Code inside WSL because ai-jail sandboxes the Linux binary.
- Developers use it to drive a jailed session from the Claude desktop app while execution and filesystem access stay local.
- Developers use it to watch agent edits live in VS Code while VS Code Server runs outside the jail.
- Developers use it to commit outside the jail after the agent writes code.
Features
Run Claude Code inside WSL 2
Linux sandbox for Windows users
Restrict agent access to project
Bubblewrap and Landlock isolation
Seccomp based sandbox controls
SSH commit signing via Bitwarden
Reviews
No reviews yet. Be the first to share your experience!