Skip to main content
Version: v0.1 (Stable)

Web Terminal & Sandboxed CLI

The Web Terminal gives operators and agents an interactive, sandboxed command-line shell directly within the browser interface.

1. Sandbox Isolation Architectureโ€‹

To ensure safety, commands executed in the terminal do not run with root privileges directly on the host OS:

Bare-Metal MiniPC Modeโ€‹

  • Powered by Bubblewrap (bwrap) and Linux Cgroups v2.
  • Operates inside an unprivileged user namespace with a private mount table.
  • System root directories (/usr, /lib, /bin) are mounted Read-Only.
  • The only writable partition is /data/workspace.
  • Strictly capped at 512 MB RAM, 50% CPU quota, and a maximum of 30 concurrent PIDs.

Docker Container Modeโ€‹

  • Operates as a non-root unprivileged user (acton, UID 1000).
  • Encapsulated within a restricted subshell execution jail.

2. Interactive Featuresโ€‹

  • Full ANSI Color & xterm Emulation: Supports vim, nano, htop, tmux, git, and standard terminal utilities.
  • Copy & Paste: Native clipboard integration with right-click context menu.
  • History & Session Persistence: Command history persists across page reloads.