Skip to content

Product and System Overview

Product purpose

Nexus Sandbox turns a session request into a controlled workspace where an agent can run commands, manipulate files, export artifacts, and optionally save a resumable microVM state.

sequenceDiagram
  %%{init: {"theme":"base","themeVariables":{"primaryColor":"#1e293b","primaryTextColor":"#f8fafc","primaryBorderColor":"#38bdf8","lineColor":"#64748b","actorBackground":"#1e293b","actorBorder":"#38bdf8","actorTextColor":"#f8fafc","noteBorderColor":"#fbbf24","noteBkgColor":"#78350f","noteTextColor":"#fffbeb"}}}%%
  actor Agent
  participant API
  participant Meta as SQLite
  participant Runtime
  participant FS as Workspace
  Agent->>API: Create session
  API->>Meta: Store session and TTL
  API->>Runtime: Create local process or VM
  Runtime-->>API: Ready
  Agent->>API: Exec / file / artifact request
  API->>Runtime: Perform bounded operation
  Runtime->>FS: Read or write workspace
  API-->>Agent: Result, hash, or log
  Agent->>API: Stop or snapshot
  API->>Meta: Persist final state

User workflows

  • Create a session for a workspace/run with limits and backend choice.
  • Keep it alive with heartbeats; execute commands and poll logs.
  • Upload source/data archives and inspect generated files.
  • Sync selected paths into an artifact destination.
  • Stop, delete, garbage-collect, or snapshot a microsandbox session.
  • Restore a snapshot into a new session for resumable work.

The service deliberately separates control-plane metadata from data-plane bytes and runtime state.