Nathan 和团队正在创造美好的东西。我一直关注着 AgentOS，超酷的是它兼容 Eve 和/或 Flue。
PH 用户
agentOS 是 8 个月的心血结晶，我们相信它是以轻量库实现安全智能体隔离的未来。
我们很兴奋终于把它分享给大家！
PH 用户
便宜 254 倍的沙箱太疯狂了 🔥 它扛得住长时间运行的智能体任务吗？
PH 用户
@nathanflurry — the UDS process-isolation answer is a lot more convincing than "trust the sandbox," and +1 to @rabnoor_s 's compatibility-page idea below — that's the first thing I'd go looking for too.
Curious about the 22MB-per-agent number at real scale: for a single Node backend process, is there a practical ceiling on concurrent agents before something contends — CPU, syscall dispatch, memory — or does it scale close to linearly until you hit host RAM?
On checkpointing — if the host process itself restarts or redeploys mid-workflow, does the durable workflow resume exactly where it left off, and where does that state actually live: local disk, or something external?
And for the Claude Code / Codex integrations specifically — is agentOS exposed as an MCP server any client could drive, or does each one need its own adapter? 👌
agentOS 把这一切打包成单个库。每个智能体都有自己的轻量级虚拟操作系统，运行在你现有的后端进程里：
执行：原生 V8 上的 Node.js（完整 JIT，不是编译成 WASM 的 JS）、Python、Bash，以及带 Linux 语义的子进程。智能体直接写一个程序，而不是把工具调用串在一起。
文件系统：持久的 POSIX 文件系统。把 S3、Google Drive 或宿主机目录挂载到普通路径，就能用常规文件和 shell 工具。
编排：持久化工作流、cron 任务、共享会话、人在环审批、智能体间通信。用普通应用代码编写，自动打检查点。
控制：向智能体暴露带类型的后端函数，而无需交出凭证；在你自己的 UI 里审查权限请求；限制每个 VM 的资源。
它运行在 WebAssembly 上，所以很小：冷启动约 4.8ms，每个智能体约 22MB，而不是每个智能体一个专用 VM。如果某个工作负载需要更多，你可以挂载一个沙箱。
兼容 Claude Code、Codex、OpenCode 和 Pi，也可以自带智能体。Apache 2.0 许可，一条 npm install 命令，部署在你后端已经运行的任何地方。
很乐意回答关于架构的问题。
另外，这个团队走在前沿，而且开源。我甚至有一两个贡献在一天内就被 merge 了！
我们很兴奋终于把它分享给大家！
Curious about the 22MB-per-agent number at real scale: for a single Node backend process, is there a practical ceiling on concurrent agents before something contends — CPU, syscall dispatch, memory — or does it scale close to linearly until you hit host RAM?
On checkpointing — if the host process itself restarts or redeploys mid-workflow, does the durable workflow resume exactly where it left off, and where does that state actually live: local disk, or something external?
And for the Claude Code / Codex integrations specifically — is agentOS exposed as an MCP server any client could drive, or does each one need its own adapter? 👌