withruntime 0.3.0 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 53b4e63218b0587cacbd8e0ad8ec583ba4ce9b32ec0b792208b8f70750b5acd5
-  data.tar.gz: 3461a8000fc4817de3f06c6f6f40b6e5d29b49312a4e1f9c9dc94a649e91b8ae
+  metadata.gz: f471d00ffe082a8a507a514dda86ce4062342e2b5f0e27153309d094a27fb35b
+  data.tar.gz: 988ff09e0b418238acb50eba94f81bfa59c579e8103a81bd8b43e551c692f70e
 SHA512:
-  metadata.gz: b1bb2aea12c2959b3afcd694ad90124d1c04fcf60201fdece3f5f1264b40bfa3b3f8deec865c5265d806b6e8c389ebacfd4da833648133fdba93b9ece3d7352f
-  data.tar.gz: d0238775905bea2408a2d930a402f49a4001bf900c3a8c13acbd511aaf5c486b7b01da8b5f93dfc188e50b696e135b8b92dfd75a7f9c74f5d4dcbdfcce63b668
+  metadata.gz: e4e8625a16d34f127de6bda5733b2645b733cb7a06ec3af65d87fc48a6b804d17c6d22f03cc657bd3cb64d8c29e3269cc42047aed28b0cf084f25a6cba9a048e
+  data.tar.gz: 33311be1f0d80a9ff3fd613acd21a02e0535945271e08af9cdf4b83d1021310479681bb7f07e8acb36663654d130fa29c635dcf796b1489cb9fbeec73d1f9a25

data/lib/withruntime/sandbox.rb

@@ -241,19 +241,20 @@ module WithRuntime
     # Runs a command and returns its exit code and output. A String runs under
     # +bash -c+; an Array runs the program directly, with no shell.
     #
-    # +cwd+ (default /workspace), +env+ (merged over the sandbox's; put secrets
-    # here), +stdin+, +timeout+ (seconds, default 60, up to a day; a timeout is
-    # a result, not an error), +on_stdout+ and +on_stderr+ (stream the command;
-    # the result keeps everything), and +check+ (raise CommandError on a
-    # non-zero exit or a timeout).
-    def exec(command, cwd: nil, env: nil, stdin: nil, timeout: nil, on_stdout: nil, on_stderr: nil,
+    # +cwd+ (default /workspace), +user+ ("sandbox", the default, or "root",
+    # through the sandbox's passwordless sudo), +env+ (merged over the
+    # sandbox's; put secrets here), +stdin+, +timeout+ (seconds, default 60, up
+    # to a day; a timeout is a result, not an error), +on_stdout+ and
+    # +on_stderr+ (stream the command; the result keeps everything), and
+    # +check+ (raise CommandError on a non-zero exit or a timeout).
+    def exec(command, cwd: nil, user: nil, env: nil, stdin: nil, timeout: nil, on_stdout: nil, on_stderr: nil,
              check: false, idempotency_key: nil)
       streamed = on_stdout || on_stderr || (timeout && timeout > 60)
       result = if streamed
-                 collect(exec_stream(command, cwd: cwd, env: env, stdin: stdin, timeout: timeout,
+                 collect(exec_stream(command, cwd: cwd, user: user, env: env, stdin: stdin, timeout: timeout,
                                               idempotency_key: idempotency_key), on_stdout, on_stderr)
                else
-                 body = command_body(command, cwd, env, stdin, timeout)
+                 body = command_body(command, cwd, env, stdin, timeout, user)
                  CommandResult.new(@t.json("POST", path(":exec"), body: body, key: idempotency_key,
                                                                   timeout: timeout && (timeout + 60)))
                end
@@ -265,14 +266,14 @@ module WithRuntime
     # Runs a command and yields its events as they happen: start, stdout,
     # stderr, exit (each a Hash). Resumes by itself when the server ends a long
     # stream, so it never drops output. Without a block, an Enumerator.
-    def exec_stream(command, cwd: nil, env: nil, stdin: nil, timeout: nil, idempotency_key: nil, &block)
+    def exec_stream(command, cwd: nil, user: nil, env: nil, stdin: nil, timeout: nil, idempotency_key: nil, &block)
       unless block
-        return enum_for(:exec_stream, command, cwd: cwd, env: env, stdin: stdin, timeout: timeout,
+        return enum_for(:exec_stream, command, cwd: cwd, user: user, env: env, stdin: stdin, timeout: timeout,
                                                idempotency_key: idempotency_key)
       end
 
       longest = ApiDefaults::STREAMED_EXEC_TIMEOUT_SECONDS
-      body = command_body(command, cwd, env, stdin, timeout || longest).merge("stream" => true)
+      body = command_body(command, cwd, env, stdin, timeout || longest, user).merge("stream" => true)
       handed_over = nil
       process_id = nil
       cursor = 0
@@ -361,8 +362,8 @@ module WithRuntime
     # once. It outlives your connection; +process(id)+ gets it back.
     # +pipe_stdin: true+ keeps input open for +write+; +pty: { cols:, rows: }+
     # gives it a terminal.
-    def spawn(command, cwd: nil, env: nil, timeout: nil, stdin: nil, pipe_stdin: false, pty: nil, idempotency_key: nil)
-      body = command_body(command, cwd, env, pipe_stdin ? nil : stdin, timeout)
+    def spawn(command, cwd: nil, user: nil, env: nil, timeout: nil, stdin: nil, pipe_stdin: false, pty: nil, idempotency_key: nil)
+      body = command_body(command, cwd, env, pipe_stdin ? nil : stdin, timeout, user)
       body["stdinMode"] = "pipe" if pipe_stdin
       body["pty"] = Fields.body(pty) if pty
       SandboxProcess.new(self, @t.json("POST", path("/processes"), body: body, key: idempotency_key))
@@ -385,9 +386,10 @@ module WithRuntime
 
     def room_for(wait_for_capacity) = wait_for_capacity.nil? ? @t.wait_for_capacity : [0, wait_for_capacity].max
 
-    def command_body(command, cwd, env, stdin, timeout)
+    def command_body(command, cwd, env, stdin, timeout, user)
       body = command.is_a?(Array) ? { "argv" => command.map(&:to_s) } : { "command" => command.to_s }
       body["cwd"] = cwd if cwd
+      body["user"] = user.to_s if user
       body["env"] = env.to_h { |key, value| [key.to_s, value.to_s] } if env
       body["stdinBase64"] = [stdin.to_s.b].pack("m0") unless stdin.nil?
       body["timeoutMs"] = (timeout * 1000).round if timeout

data/lib/withruntime/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module WithRuntime
-  VERSION = "0.3.0"
+  VERSION = "0.4.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: withruntime
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.4.0
 platform: ruby
 authors:
 - Runtime
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-10-17 00:00:00.000000000 Z
+date: 2026-10-18 00:00:00.000000000 Z
 dependencies: []
 description: 'Linux sandboxes for agents, and every other Runtime Cloud product: streaming
   commands and terminals, files and watches, images, durable volumes and backups,