Blink (v2.0)

Blink rents hardware-isolated sandboxes for AI agents — built on BoxLite's libkrun VM core.

Product: Ephemeral one-shot runs for try/debug (free tier). Paid tier covers persistent sessions, snapshots, export/import, and warm sessions. Users bring their own Agent and API keys (BYOK). Full definition → docs/PRODUCT.md

Role: Blink is the execution plane. User login, quotas, and Agent consoles live in the control plane (e.g. XEnsemble). Integration contract → docs/XENSEMBLE.md

Documentation

Architecture

Blink is library + service + CLI, not a single binary:

Control-plane integration: run blink-server as a sidecar; the control plane's Runtime Provider calls REST — no Rust linking required. See docs/XENSEMBLE.md.

Execution modes (see STREAMING.md):

Prerequisites

• Rust 1.88+
• macOS: brew install llvm lld (libkrun cross-compilation); build with PATH="/opt/homebrew/opt/llvm/bin:$PATH"

BoxLite is pulled from crates.io automatically. For local BoxLite development, add a [patch.crates-io] section in Cargo.toml.

Build

cargo build

Binaries: target/debug/blink-cli, target/debug/blink-server

Usage

# Free tier: one-shot ephemeral run (agent binary or script on host)
./target/debug/blink-cli run /path/to/agent

# Paid tier: named session with persistent disk + snapshots
./target/debug/blink-cli session open --name my-agent
./target/debug/blink-cli session open --name my-agent --warm   # keep VM alive
./target/debug/blink-cli session run --name my-agent /path/to/agent
./target/debug/blink-cli session checkpoint --name my-agent --snapshot step-1
./target/debug/blink-cli session list --name my-agent
./target/debug/blink-cli session ls
./target/debug/blink-cli session export --name my-agent
./target/debug/blink-cli session import archive.boxlite --name my-agent

# PTY: interactive shell in session (see docs/PTY.md)
./target/debug/blink-cli session spawn --name my-agent --tty -- sh -i

# V-Hub (vsock bridge wiring — see docs/VHUB.md)
./target/debug/blink-cli serve --socket /tmp/blink-vhub.sock

Agent memory persists under /var/blink/memory/ on the session disk. Details → docs/PRODUCT.md

Rust SDK

Add to Cargo.toml:

blinkvm-sdk = "0.3"

use blink_sdk::{run_agent_script_default, open_session, run_in_session};

#[tokio::main]
async fn main() -> anyhow::Result<()> {
    let result = run_agent_script_default("/path/to/agent".as_ref()).await?;
    println!("exit={}", result.exit_code);

    let (box_id, _created) = open_session("my-agent", "alpine:3.20").await?;
    let result = run_in_session("my-agent", "/path/to/agent".as_ref()).await?;
    Ok(())
}

Sandbox API (for control planes)

控制面（如 XEnsemble）通过 HTTP 调用 blink-server，不链接 Rust lib。完整集成与 sidecar 部署 → docs/XENSEMBLE.md。

cargo build --release -p blink-server
./target/release/blink-server          # 默认 http://127.0.0.1:8787
curl -sf http://127.0.0.1:8787/api/health

Blink 不做 API 鉴权。用户身份与配额由控制面负责；默认只监听 127.0.0.1，生产环境同机 sidecar 或内网暴露（BLINK_BIND=0.0.0.0 时需网络隔离）。

Blink 仓库内快速迭代可用 cargo run -p blink-server；对接控制面时请用 release 二进制，见 XENSEMBLE.md。

Release deployment

Deployers should use the published artifacts:

docker pull ghcr.io/eeroeternal/blink-server:vX.Y.Z
docker run --rm --device /dev/kvm -p 8787:8787 ghcr.io/eeroeternal/blink-server:vX.Y.Z
curl -sf http://127.0.0.1:8787/api/health

The image binds 0.0.0.0:8787 by default. No crates.io patch, local BoxLite checkout, or libkrun build is required on the deploy host; point XEnsemble at BLINK_API_URL=http://127.0.0.1:8787.

REST endpoints

Publishing to crates.io

# Publish shared types first, then the SDK
cargo publish -p blinkvm-shared
cargo publish -p blinkvm-sdk

CI publishes both crates on git tags matching v* (see .github/workflows/publish.yml).