How agent-desktop works with sandboxes
From top to bottom: the calling agent picks one of two independent routes to a desktop. On the left, agent-desktop sandbox exec runs on your Mac and sends the command over SSH to agent-desktop in a macOS VM. On the right, the @vercel/sandbox SDK calls sandbox.runCommand in a hosted Linux microVM, where agent-desktop drives that desktop. The sandbox commands manage local VMs only, and the Vercel SDK creates and drives its own sandbox.
calling agent
picks a command to run
agent-desktop sandbox exec
runs on your Mac
@vercel/sandbox
SDK called from your code
over SSH
sandbox.runCommand
Your Mac
macOS VM
agent-desktop in the guest
Vercel Sandbox
Linux microVM
agent-desktop in the guest
these commands manage local VMs only
the SDK creates and drives this sandbox