Blink (v2.0)

Blink rents hardware-isolated sandboxes for AI agents — built on BoxLite's libkrun VM core.

Product summary: Ephemeral one-shot runs are for try/debug (free tier). Paid tier covers persistent sessions, snapshots, export/import, and warm sessions. Users bring their own Agent and API keys (BYOK). See docs/PRODUCT.md for the full product definition.

Architecture role: Blink is the execution plane. User login, quotas, and Agent consoles live in the control plane (e.g. XEnsemble). See docs/XENSEMBLE.md for integration.

Architecture

• blink-sdk: Rust library for agent execution via BoxLite LiteBox + BLIN V-Hub protocol (crates.io)
• blink-cli: Host CLI (run, session, serve)
• blink-server: Sandbox REST API for control-plane consumers (:8787)
• V-Hub: 20-byte BLIN header over vsock port 10000 (see docs/COMMUNICATION_ARCH.md)

Prerequisites

• Rust 1.88+
• macOS: brew install llvm lld (libkrun cross-compilation); build with PATH="/opt/homebrew/opt/llvm/bin:$PATH"

BoxLite is pulled from crates.io automatically. For local BoxLite development, add a [patch.crates-io] section in Cargo.toml.

Build

cargo build

Binaries: target/debug/blink-cli, target/debug/blink-server

Usage

# Free tier: one-shot ephemeral run (agent binary or script on host)
./target/debug/blink-cli run /path/to/agent

# Paid tier: named session with persistent disk + snapshots
./target/debug/blink-cli session open --name my-agent
./target/debug/blink-cli session open --name my-agent --warm   # keep VM alive
./target/debug/blink-cli session run --name my-agent /path/to/agent
./target/debug/blink-cli session checkpoint --name my-agent --snapshot step-1
./target/debug/blink-cli session list --name my-agent
./target/debug/blink-cli session ls
./target/debug/blink-cli session export --name my-agent
./target/debug/blink-cli session import archive.boxlite --name my-agent

# V-Hub (vsock bridge wiring)
./target/debug/blink-cli serve --socket /tmp/blink-vhub.sock

Rust SDK

Add to Cargo.toml:

blink-sdk = "0.2"

use blink_sdk::{run_agent_script_default, open_session, run_in_session};

#[tokio::main]
async fn main() -> anyhow::Result<()> {
    let result = run_agent_script_default("/path/to/agent".as_ref()).await?;
    println!("exit={}", result.exit_code);

    let (box_id, _created) = open_session("my-agent", "alpine:3.20").await?;
    let result = run_in_session("my-agent", "/path/to/agent".as_ref()).await?;
    Ok(())
}

Sandbox API (for control planes)

PATH="/opt/homebrew/opt/llvm/bin:$PATH" cargo run -p blink-server
# http://127.0.0.1:8787 — service status page + REST API

XEnsemble integration: docs/XENSEMBLE.md

Blink 不做 API 鉴权。用户身份与配额由控制面（XEnsemble）负责；Blink 默认只监听 127.0.0.1，生产环境通过内网或 sidecar 暴露：

# 默认 localhost:8787
cargo run -p blink-server

# 内网暴露（需确保网络隔离）
BLINK_BIND=0.0.0.0 cargo run -p blink-server -- --port 8787

REST endpoints

Publishing to crates.io

# Publish shared types first, then the SDK
cargo publish -p blink-shared
cargo publish -p blink-sdk

CI publishes both crates on git tags matching v* (see .github/workflows/publish.yml).