Docs/Sandboxes

Sandboxes

Basecamp is the environment bootstrap layer that runs before the sandbox workload. It prepares what runs inside the sandbox; it does not provide the isolation boundary itself.

New to Basecamp?Start with the quickstart →

The mental model

Basecamp lifecycle from repository through environment bootstrap to a ready sandbox
Basecamp prepares the environment before the engineer or coding agent starts useful work.
01Repositorynative project
02Basecamp setupbasecamp sync
03Ready sandboxenvironment materialized
04Agent / engineernative tools
repository
  → sandbox setup phase
  → basecamp sync
  → environment ready
  → agent / engineer phase
  → cargo / pnpm / uv / go / ...

“Before the sandbox” is a lifecycle concept. Basecamp can run inside an already-created sandbox during its setup phase, outside the sandbox while building a reusable template, or on another connected machine before importing an offline bundle.

Three integration patterns

Setup hookrun inside the sandbox before the workload
Template / snapshotmaterialize while building the reusable base
Offline importpack elsewhere, restore with network off

1. Setup hook

When a managed sandbox provides a setup command or initialization phase, run basecamp sync there before handing the environment to the coding agent.

2. Template or snapshot build

When a sandbox platform supports reusable images, templates, or VM snapshots, synchronize Basecamp while producing that reusable base.

3. Offline import

When the execution sandbox is intentionally disconnected from the network, prepare the environment elsewhere and transport it with a Basecamp bundle.

Managed coding-agent sandboxes

Modern coding agents already execute commands inside isolated environments. For example, OpenAI documents a cloud setup stage that runs before the agent stage, and Claude Code on the web runs sessions in isolated sandboxes. Basecamp is designed to occupy the environment-preparation part of that lifecycle, without taking over the sandbox provider's security model.

These names describe the integration pattern; Basecamp v0.5 does not claim first-party adapters for every provider.

Network-off agent phase

# connected preparation environment
basecamp sync
basecamp bundle pack

# isolated sandbox
basecamp bundle unpack project.basecamp
basecamp shell
cargo build --offline --locked

The Rust / Cargo implementation is already tested with an intentionally unreachable Basecamp endpoint after bundle import.

Responsibility boundary

Basecamp ownsSandbox owns
Environment identity and lockIsolation and tenancy
Runtime / package materializationCPU, memory, disk limits
Verified resources and shared storeFilesystem and network policy
Offline bundles and activationSession lifecycle and execution boundary