Secure microVM sandboxes for untrusted code

1234567891011// Run each customer's agent in its own sandbox, isolated from the rest
const { data: agent } = await apiClient.create.service.deployment({
  parameters: { projectId: 'support-agents' },
  data: {
    name: `agent-${customer.id}`,
    billing: { deploymentPlan: 'nf-compute-200' },
    deployment: { instances: 1, external: { imagePath: 'acme/support-agent:2.4' } },
    runtimeEnvironment: { TENANT_ID: customer.id },
    ports: [{ name: 'api', internalPort: 8080, public: false, protocol: 'HTTP' }],
  },
});

12345678910111213141516// Give the agent a database for memory that outlives any one run
await apiClient.create.addon({
  parameters: { projectId: 'research-agents' },
  data: {
    name: `memory-${agent.id}`,
    type: 'postgresql',
    version: '16',
    billing: { deploymentPlan: 'nf-compute-50', storage: 16384, replicas: 1 },
  },
});

// Resume its session against that memory and its workspace volume
await apiClient.exec.execServiceCommand(
  { projectId: 'research-agents', serviceId: agent.id },
  { command: ['python', 'agent.py', '--resume', session.id] },
);

1234567891011121314const { data: sandbox } = await apiClient.create.service.deployment({
  parameters: { projectId: 'agents' },
  data: {
    name: `task-${task.id}`,
    billing: { deploymentPlan: 'nf-compute-400' },
    deployment: { instances: 1, external: { imagePath: 'acme/agent-runtime:latest' } },
  },
});

// Clone, build with Docker, and run the tests the agent changed
await apiClient.exec.execServiceCommand(
  { projectId: 'agents', serviceId: sandbox.id },
  { command: ['sh', '-c', 'git clone $REPO app && cd app && docker build . && npm test'] },
);

1234567891011121314const { data: browser } = await apiClient.create.service.deployment({
  parameters: { projectId: 'agents' },
  data: {
    name: `browser-${session.id}`,
    billing: { deploymentPlan: 'nf-compute-200' },
    deployment: { instances: 1, external: { imagePath: 'ghcr.io/browserless/chromium' } },
    ports: [{ name: 'cdp', internalPort: 3000, public: false, protocol: 'HTTP' }],
  },
});

// The agent drives Chrome over the private network
const page = await puppeteer.connect({
  browserWSEndpoint: `ws://${browser.id}:3000`,
});

12345678910// LLM-written analysis, run against a bucket mounted with FUSE
const { stdOut } = await apiClient.exec.execServiceCommand(
  { projectId: 'analysis', serviceId: sandbox.id },
  { command: ['python', '-c', completion.code] },
);

// Nothing persists after the answer is back
await apiClient.delete.service({
  parameters: { projectId: 'analysis', serviceId: sandbox.id },
});

12345678910// Each user's generated app, live on its own URL
const { data: app } = await apiClient.create.service.deployment({
  parameters: { projectId: 'builder' },
  data: {
    name: `app-${user.id}`,
    billing: { deploymentPlan: 'nf-compute-100-2' },
    deployment: { instances: 1, external: { imagePath: 'node:22' } },
    ports: [{ name: 'web', internalPort: 3000, public: true, protocol: 'HTTP' }],
  },
});

12345678910111213// One sandbox per rollout, 50,000 at a time
const environments = await Promise.all(
  episodes.map((episode) =>
    apiClient.create.service.deployment({
      parameters: { projectId: 'rl' },
      data: {
        name: `env-${episode.id}`,
        billing: { deploymentPlan: 'nf-compute-50' },
        deployment: { instances: 1, external: { imagePath: 'acme/swe-env:v3' } },
      },
    }),
  ),
);

1234567891011121314151617181920// A full environment per pull request: a database, then the app
await apiClient.create.addon({
  parameters: { projectId: 'previews' },
  data: {
    name: `pr-${pr.number}-db`,
    type: 'postgresql',
    version: '16',
    billing: { deploymentPlan: 'nf-compute-50', storage: 4096, replicas: 1 },
  },
});

await apiClient.create.service.deployment({
  parameters: { projectId: 'previews' },
  data: {
    name: `pr-${pr.number}`,
    billing: { deploymentPlan: 'nf-compute-100-2' },
    deployment: { instances: 1, external: { imagePath: `acme/web:${pr.sha}` } },
    ports: [{ name: 'web', internalPort: 3000, public: true, protocol: 'HTTP' }],
  },
});