Unified sandbox API for isolated code execution on Vercel and Cloudflare.

pnpm install

nuxt.config.ts enables zero-config sandboxing:

export default defineNuxtConfig({
  modules: ['@nuxthub/core', '@nuxt/ui'],
  hub: { sandbox: true },
  compatibilityDate: '2024-09-19',
})

hubSandbox(options) > NUXT_HUB_SANDBOX_* > hub.sandbox > auto-detect

You can configure sandbox defaults in nuxt.config.ts and override per request via hubSandbox(options).

export default defineNuxtConfig({
  hub: {
    sandbox: {
      provider: 'vercel', // or 'cloudflare'
      runtime: 'node24',  // Vercel only
      timeout: 300000,    // ms
      cpu: 2,             // Vercel only
      ports: [3000],      // Vercel only
      sandboxId: 'demo',  // Cloudflare only
      cloudflare: {
        sleepAfter: 600,
        keepAlive: true,
        normalizeId: true,
      },
    },
  },
})

hubSandbox(options) accepts the same shape at runtime. For Cloudflare, you can also pass namespace to override the Durable Object binding (it is auto-injected when running on Workers).

• provider: vercel or cloudflare (omit for auto-detect)
• runtime: Vercel runtime (e.g. node24)
• timeout: execution timeout (ms)
• cpu: Vercel CPU allocation
• ports: Vercel exposed ports
• sandboxId: Cloudflare sandbox identifier
• cloudflare.sleepAfter: idle timeout (seconds)
• cloudflare.keepAlive: keep sandbox warm
• cloudflare.normalizeId: normalize sandbox IDs

• Local development requires OIDC tokens (vercel link + vercel env pull).
• Longer timeouts and CPU/port limits depend on your Vercel plan.

• Sandboxes run as Durable Objects and sleep after idle (sleepAfter).
• normalizeId may change sandbox IDs if you previously used mixed-case IDs.

• GET /api/health — provider detection, availability, resolved config
• GET /api/sandbox — basic exec + file operations
• GET /api/sandbox/features — provider-specific checks
• GET /api/sandbox/stream — streaming stdout/stderr
• GET /api/sandbox/process — background process + log wait

import { hubSandbox } from 'hub:sandbox'

export default defineEventHandler(async () => {
  const sandbox = await hubSandbox()
  try {
    const exec = await sandbox.exec('echo', ['hello'])
    await sandbox.writeFile('/tmp/test.txt', 'content')
    const content = await sandbox.readFile('/tmp/test.txt')
    return { exec, content }
  }
  finally {
    await sandbox.stop()
  }
})

Playground UX and feature coverage mirror the local reference at: ~/unjs/unagent

• Live (Vercel)
• Live (Cloudflare)
• Vercel Sandbox Docs
• Vercel Sandbox SDK Reference
• Cloudflare Sandbox SDK Docs
• Cloudflare Sandbox API Reference
• Cloudflare Sandbox Options
• unagent docs
• NuxtHub
• unagent