@boatdev/sdk 1.7.0 → 1.9.0

package/dist/esm/apis/BoatApi.js

@@ -48,10 +48,14 @@ import { NamedSnapshotInfoResponseFromJSON, } from '../models/NamedSnapshotInfoR
 import { NamedSnapshotListResponseFromJSON, } from '../models/NamedSnapshotListResponse';
 import { NamedSnapshotSaveRequestToJSON, } from '../models/NamedSnapshotSaveRequest';
 import { NamedSnapshotSavingResponseFromJSON, } from '../models/NamedSnapshotSavingResponse';
+import { NamedSnapshotShareCreatedResponseFromJSON, } from '../models/NamedSnapshotShareCreatedResponse';
+import { NamedSnapshotShareListResponseFromJSON, } from '../models/NamedSnapshotShareListResponse';
+import { NamedSnapshotShareRevokedResponseFromJSON, } from '../models/NamedSnapshotShareRevokedResponse';
 import { OrgListResponseFromJSON, } from '../models/OrgListResponse';
 import { PromptRequestToJSON, } from '../models/PromptRequest';
 import { PromptResponseFromJSON, } from '../models/PromptResponse';
 import { PromptRunResponseFromJSON, } from '../models/PromptRunResponse';
+import { Recover200ResponseFromJSON, } from '../models/Recover200Response';
 import { RepoSelectionRequestToJSON, } from '../models/RepoSelectionRequest';
 import { RepoSelectionResponseFromJSON, } from '../models/RepoSelectionResponse';
 import { ReposResponseFromJSON, } from '../models/ReposResponse';
@@ -75,6 +79,7 @@ import { SshKeyRequestToJSON, } from '../models/SshKeyRequest';
 import { SshKeyResponseFromJSON, } from '../models/SshKeyResponse';
 import { SteerRequestToJSON, } from '../models/SteerRequest';
 import { SteerResponseFromJSON, } from '../models/SteerResponse';
+import { StopOperationResponseFromJSON, } from '../models/StopOperationResponse';
 import { StopRequestToJSON, } from '../models/StopRequest';
 import { UpdateSandboxEnvironmentRequestToJSON, } from '../models/UpdateSandboxEnvironmentRequest';
 import { UpdateSandboxRequestToJSON, } from '../models/UpdateSandboxRequest';
@@ -250,6 +255,7 @@ export class BoatApi extends runtime.BaseAPI {
         };
     }
     /**
+     * Downloads one file of up to 50 MiB, under /home/user or /tmp, as raw bytes.
      * Download a sandbox artifact
      */
     async artifactRaw(requestParameters, initOverrides) {
@@ -258,6 +264,7 @@ export class BoatApi extends runtime.BaseAPI {
         return new runtime.BlobApiResponse(response);
     }
     /**
+     * Downloads one file of up to 50 MiB, under /home/user or /tmp, as raw bytes.
      * Download a sandbox artifact
      */
     async artifact(requestParameters, initOverrides) {
@@ -539,6 +546,48 @@ export class BoatApi extends runtime.BaseAPI {
         const response = await this.createScopedApiKeyRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for createSnapshotShare without sending the request
+     */
+    async createSnapshotShareRequestOpts(requestParameters) {
+        if (requestParameters['name'] == null) {
+            throw new runtime.RequiredError('name', 'Required parameter "name" was null or undefined when calling createSnapshotShare().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/named-snapshots/{name}/shares`;
+        urlPath = urlPath.replace('{name}', encodeURIComponent(String(requestParameters['name'])));
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Make a secret code that lets any Boat account create a sandbox from this named snapshot (`boat snapshot share <name>` in the CLI). The response shows the code once; Boat stores only a hash. Re-saving the name changes what the code deploys. Removing the name removes its codes. Everything on the disk is shared, so do not keep secrets in files on it. Needs `snapshot.write`.
+     * Share a named snapshot
+     */
+    async createSnapshotShareRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.createSnapshotShareRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => NamedSnapshotShareCreatedResponseFromJSON(jsonValue));
+    }
+    /**
+     * Make a secret code that lets any Boat account create a sandbox from this named snapshot (`boat snapshot share <name>` in the CLI). The response shows the code once; Boat stores only a hash. Re-saving the name changes what the code deploys. Removing the name removes its codes. Everything on the disk is shared, so do not keep secrets in files on it. Needs `snapshot.write`.
+     * Share a named snapshot
+     */
+    async createSnapshotShare(requestParameters, initOverrides) {
+        const response = await this.createSnapshotShareRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for createWebhook without sending the request
      */
@@ -1520,6 +1569,52 @@ export class BoatApi extends runtime.BaseAPI {
         const response = await this.getSnapshotTreeRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for getStop without sending the request
+     */
+    async getStopRequestOpts(requestParameters) {
+        if (requestParameters['sandboxId'] == null) {
+            throw new runtime.RequiredError('sandboxId', 'Required parameter "sandboxId" was null or undefined when calling getStop().');
+        }
+        if (requestParameters['stopId'] == null) {
+            throw new runtime.RequiredError('stopId', 'Required parameter "stopId" was null or undefined when calling getStop().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/sandboxes/{sandboxId}/stops/{stopId}`;
+        urlPath = urlPath.replace('{sandboxId}', encodeURIComponent(String(requestParameters['sandboxId'])));
+        urlPath = urlPath.replace('{stopId}', encodeURIComponent(String(requestParameters['stopId'])));
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Returns one stop of this sandbox by the id that `POST /sandboxes/{sandboxId}/stop` returned. Old stops stay readable after a resume or a later stop. Returns 404 when the id is unknown or belongs to another sandbox.
+     * Get a stop by id
+     */
+    async getStopRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.getStopRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => StopOperationResponseFromJSON(jsonValue));
+    }
+    /**
+     * Returns one stop of this sandbox by the id that `POST /sandboxes/{sandboxId}/stop` returned. Old stops stay readable after a resume or a later stop. Returns 404 when the id is unknown or belongs to another sandbox.
+     * Get a stop by id
+     */
+    async getStop(requestParameters, initOverrides) {
+        const response = await this.getStopRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for getWebhook without sending the request
      */
@@ -1829,6 +1924,48 @@ export class BoatApi extends runtime.BaseAPI {
         const response = await this.listSandboxSnapshotsRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for listSnapshotShares without sending the request
+     */
+    async listSnapshotSharesRequestOpts(requestParameters) {
+        if (requestParameters['name'] == null) {
+            throw new runtime.RequiredError('name', 'Required parameter "name" was null or undefined when calling listSnapshotShares().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/named-snapshots/{name}/shares`;
+        urlPath = urlPath.replace('{name}', encodeURIComponent(String(requestParameters['name'])));
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * List the share codes of a named snapshot, active and revoked (`boat snapshot shares <name>` in the CLI). The full codes are not returned. Needs `snapshot.read`.
+     * List share codes of a named snapshot
+     */
+    async listSnapshotSharesRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.listSnapshotSharesRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => NamedSnapshotShareListResponseFromJSON(jsonValue));
+    }
+    /**
+     * List the share codes of a named snapshot, active and revoked (`boat snapshot shares <name>` in the CLI). The full codes are not returned. Needs `snapshot.read`.
+     * List share codes of a named snapshot
+     */
+    async listSnapshotShares(requestParameters, initOverrides) {
+        const response = await this.listSnapshotSharesRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for listSnapshots without sending the request
      */
@@ -2081,6 +2218,7 @@ export class BoatApi extends runtime.BaseAPI {
         };
     }
     /**
+     * Files up to 5 MiB. Use `GET /sandboxes/{sandboxId}/artifacts` for files up to 50 MiB, and SCP over SSH for larger ones.
      * Read a file from a sandbox
      */
     async readFileRaw(requestParameters, initOverrides) {
@@ -2089,12 +2227,55 @@ export class BoatApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => FileReadResponseFromJSON(jsonValue));
     }
     /**
+     * Files up to 5 MiB. Use `GET /sandboxes/{sandboxId}/artifacts` for files up to 50 MiB, and SCP over SSH for larger ones.
      * Read a file from a sandbox
      */
     async readFile(requestParameters, initOverrides) {
         const response = await this.readFileRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for recover without sending the request
+     */
+    async recoverRequestOpts(requestParameters) {
+        if (requestParameters['sandboxId'] == null) {
+            throw new runtime.RequiredError('sandboxId', 'Required parameter "sandboxId" was null or undefined when calling recover().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/sandboxes/{sandboxId}/recover`;
+        urlPath = urlPath.replace('{sandboxId}', encodeURIComponent(String(requestParameters['sandboxId'])));
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Power-cycle the machine of a sandbox that stopped answering. The disk is not touched. The sandbox usually answers again within 1-2 minutes and then saves your work by itself; `sandbox.recovered` fires when it does.  Refused with `409`: - `sandbox_is_reachable`: the sandbox answers normally. - `too_soon`: a recover started less than 10 minutes ago. - `no_machine`: the sandbox has no machine. Resume it instead. - `recover_unsupported`: its machine cannot be power-cycled. Wait for it to   answer, or resume it from its last snapshot. - `reset_failed`: the power-cycle failed. Reply to the incident email.
+     * Recover a sandbox that stopped responding
+     */
+    async recoverRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.recoverRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => Recover200ResponseFromJSON(jsonValue));
+    }
+    /**
+     * Power-cycle the machine of a sandbox that stopped answering. The disk is not touched. The sandbox usually answers again within 1-2 minutes and then saves your work by itself; `sandbox.recovered` fires when it does.  Refused with `409`: - `sandbox_is_reachable`: the sandbox answers normally. - `too_soon`: a recover started less than 10 minutes ago. - `no_machine`: the sandbox has no machine. Resume it instead. - `recover_unsupported`: its machine cannot be power-cycled. Wait for it to   answer, or resume it from its last snapshot. - `reset_failed`: the power-cycle failed. Reply to the incident email.
+     * Recover a sandbox that stopped responding
+     */
+    async recover(requestParameters, initOverrides) {
+        const response = await this.recoverRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for repos without sending the request
      */
@@ -2236,6 +2417,52 @@ export class BoatApi extends runtime.BaseAPI {
         const response = await this.revokeApiKeyRaw(requestParameters, initOverrides);
         return await response.value();
     }
+    /**
+     * Creates request options for revokeSnapshotShare without sending the request
+     */
+    async revokeSnapshotShareRequestOpts(requestParameters) {
+        if (requestParameters['name'] == null) {
+            throw new runtime.RequiredError('name', 'Required parameter "name" was null or undefined when calling revokeSnapshotShare().');
+        }
+        if (requestParameters['shareId'] == null) {
+            throw new runtime.RequiredError('shareId', 'Required parameter "shareId" was null or undefined when calling revokeSnapshotShare().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("BoatBearerAuth", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/named-snapshots/{name}/shares/{shareId}`;
+        urlPath = urlPath.replace('{name}', encodeURIComponent(String(requestParameters['name'])));
+        urlPath = urlPath.replace('{shareId}', encodeURIComponent(String(requestParameters['shareId'])));
+        return {
+            path: urlPath,
+            method: 'DELETE',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Revoke a share code (`boat snapshot unshare <name> <share-id>` in the CLI). The code stops creating new sandboxes. Sandboxes already created from it keep their own copy. Needs `snapshot.write`.
+     * Revoke a share code
+     */
+    async revokeSnapshotShareRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.revokeSnapshotShareRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => NamedSnapshotShareRevokedResponseFromJSON(jsonValue));
+    }
+    /**
+     * Revoke a share code (`boat snapshot unshare <name> <share-id>` in the CLI). The code stops creating new sandboxes. Sandboxes already created from it keep their own copy. Needs `snapshot.write`.
+     * Revoke a share code
+     */
+    async revokeSnapshotShare(requestParameters, initOverrides) {
+        const response = await this.revokeSnapshotShareRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
     /**
      * Creates request options for rotateApiKey without sending the request
      */
@@ -2771,7 +2998,7 @@ export class BoatApi extends runtime.BaseAPI {
         };
     }
     /**
-     * Send a new message to a turn that is already running, without losing what the agent is doing. This is what typing into a coding agent while it works does: the instruction is taken into account and the work continues.  Where the harness has a native mid-turn primitive (Claude Code, Codex, pi, Prime Agent) nothing is interrupted and the response has `native: true`. Where it does not (OpenCode), Boat interrupts that turn and immediately continues the SAME conversation with the instruction, keeping the session and its memory, and the response has `native: false`.  Refused with **409 `no_running_turn`** when the conversation has nothing in flight; queue work with `POST /prompt` instead. The steer shows up in `GET /events` as a `steer` event. See [Integrated agents](/integrated-agents).
+     * Send a new message to a turn that is already running, without losing what the agent is doing. This is what typing into a coding agent while it works does: the instruction is taken into account and the work continues.  Where the harness has a native mid-turn primitive (Claude Code, Codex, pi, Prime Agent) nothing is interrupted and the response has `native: true`. Where it does not (OpenCode), Boat interrupts that turn and immediately continues the SAME conversation with the instruction, keeping the session and its memory, and the response has `native: false`.  Refused with **409 `no_running_turn`** when the conversation has nothing in flight; queue work with `POST /prompt` instead. `error.details.reason` says why: `turn_ended` (with `error.details.lastTurn.status` and `.error` of the newest turn), `turn_not_started` (the turn is starting; retry in a moment), `no_turn`, `not_running` (the sandbox is not running) or `delivery_failed` (the sandbox did not accept the steer; check the turn before sending more work). The steer shows up in `GET /events` as a `steer` event. See [Integrated agents](/integrated-agents).
      * Steer a running turn
      */
     async steerRaw(requestParameters, initOverrides) {
@@ -2780,7 +3007,7 @@ export class BoatApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => SteerResponseFromJSON(jsonValue));
     }
     /**
-     * Send a new message to a turn that is already running, without losing what the agent is doing. This is what typing into a coding agent while it works does: the instruction is taken into account and the work continues.  Where the harness has a native mid-turn primitive (Claude Code, Codex, pi, Prime Agent) nothing is interrupted and the response has `native: true`. Where it does not (OpenCode), Boat interrupts that turn and immediately continues the SAME conversation with the instruction, keeping the session and its memory, and the response has `native: false`.  Refused with **409 `no_running_turn`** when the conversation has nothing in flight; queue work with `POST /prompt` instead. The steer shows up in `GET /events` as a `steer` event. See [Integrated agents](/integrated-agents).
+     * Send a new message to a turn that is already running, without losing what the agent is doing. This is what typing into a coding agent while it works does: the instruction is taken into account and the work continues.  Where the harness has a native mid-turn primitive (Claude Code, Codex, pi, Prime Agent) nothing is interrupted and the response has `native: true`. Where it does not (OpenCode), Boat interrupts that turn and immediately continues the SAME conversation with the instruction, keeping the session and its memory, and the response has `native: false`.  Refused with **409 `no_running_turn`** when the conversation has nothing in flight; queue work with `POST /prompt` instead. `error.details.reason` says why: `turn_ended` (with `error.details.lastTurn.status` and `.error` of the newest turn), `turn_not_started` (the turn is starting; retry in a moment), `no_turn`, `not_running` (the sandbox is not running) or `delivery_failed` (the sandbox did not accept the steer; check the turn before sending more work). The steer shows up in `GET /events` as a `steer` event. See [Integrated agents](/integrated-agents).
      * Steer a running turn
      */
     async steer(requestParameters, initOverrides) {
@@ -2816,7 +3043,7 @@ export class BoatApi extends runtime.BaseAPI {
         };
     }
     /**
-     * Stop active work and archive/snapshot the sandbox for later resume or fork.  A stop always saves the sandbox\'s disk first. If that save is failing, the stop is refused and the sandbox keeps running so your work is not discarded, we retry automatically and email you. You are not billed for time spent in that state.  The stop is an operation: the response and the sandbox carry it as `stop`, with an `id` and a `status`. Poll `GET /sandboxes/{sandboxId}` until `stop.status` is `completed`. A failed attempt shows `failing` with its `error` and is retried until the sandbox archives; commands and prompts you send meanwhile do not cancel it. Only a resume ends it early (`superseded`). Calling stop again while one is pending returns the same `id`.  Set `force: true` to stop anyway, accepting the loss of everything written since the last successful snapshot. This is irreversible; only reach for it after a stop has already failed.
+     * Stop active work and archive/snapshot the sandbox for later resume or fork.  A stop always saves the sandbox\'s disk first. If that save is failing, the stop is refused and the sandbox keeps running so your work is not discarded, we retry automatically and email you. You are not billed for time spent in that state.  The stop is an operation: the response and the sandbox carry it as `stop`, with an `id` and a `status`. Poll `GET /sandboxes/{sandboxId}` until `stop.status` is `completed`. A failed attempt shows `failing` with its `error` and is retried until the sandbox archives; commands and prompts you send meanwhile do not cancel it. Only a resume ends it early (`superseded`). Calling stop again while one is pending returns the same `id`.  Set `force: true` to stop anyway, keeping the last successful snapshot and losing everything written since then. This is irreversible; only reach for it after a stop has already failed. A force on a stop that is already pending escalates that stop.
      * Stop and archive sandbox
      */
     async stopRaw(requestParameters, initOverrides) {
@@ -2825,7 +3052,7 @@ export class BoatApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => SandboxActionResponseFromJSON(jsonValue));
     }
     /**
-     * Stop active work and archive/snapshot the sandbox for later resume or fork.  A stop always saves the sandbox\'s disk first. If that save is failing, the stop is refused and the sandbox keeps running so your work is not discarded, we retry automatically and email you. You are not billed for time spent in that state.  The stop is an operation: the response and the sandbox carry it as `stop`, with an `id` and a `status`. Poll `GET /sandboxes/{sandboxId}` until `stop.status` is `completed`. A failed attempt shows `failing` with its `error` and is retried until the sandbox archives; commands and prompts you send meanwhile do not cancel it. Only a resume ends it early (`superseded`). Calling stop again while one is pending returns the same `id`.  Set `force: true` to stop anyway, accepting the loss of everything written since the last successful snapshot. This is irreversible; only reach for it after a stop has already failed.
+     * Stop active work and archive/snapshot the sandbox for later resume or fork.  A stop always saves the sandbox\'s disk first. If that save is failing, the stop is refused and the sandbox keeps running so your work is not discarded, we retry automatically and email you. You are not billed for time spent in that state.  The stop is an operation: the response and the sandbox carry it as `stop`, with an `id` and a `status`. Poll `GET /sandboxes/{sandboxId}` until `stop.status` is `completed`. A failed attempt shows `failing` with its `error` and is retried until the sandbox archives; commands and prompts you send meanwhile do not cancel it. Only a resume ends it early (`superseded`). Calling stop again while one is pending returns the same `id`.  Set `force: true` to stop anyway, keeping the last successful snapshot and losing everything written since then. This is irreversible; only reach for it after a stop has already failed. A force on a stop that is already pending escalates that stop.
      * Stop and archive sandbox
      */
     async stop(requestParameters, initOverrides) {
@@ -3185,6 +3412,7 @@ export class BoatApi extends runtime.BaseAPI {
         };
     }
     /**
+     * Files up to 5 MiB after decoding. Use SCP over SSH for larger files.
      * Write a file in a sandbox
      */
     async writeFileRaw(requestParameters, initOverrides) {
@@ -3193,6 +3421,7 @@ export class BoatApi extends runtime.BaseAPI {
         return new runtime.JSONApiResponse(response, (jsonValue) => FileWriteResponseFromJSON(jsonValue));
     }
     /**
+     * Files up to 5 MiB after decoding. Use SCP over SSH for larger files.
      * Write a file in a sandbox
      */
     async writeFile(requestParameters, initOverrides) {

package/dist/esm/http2-fetch.d.ts

@@ -0,0 +1 @@
+export declare const defaultFetch: typeof fetch;

package/dist/esm/http2-fetch.js

@@ -0,0 +1,203 @@
+// The SDK's default fetch. On Node it sends every request to an https origin over
+// ONE shared HTTP/2 connection. Node's global fetch speaks HTTP/1.1 only, so N
+// concurrent calls opened N TLS connections: a burst of 200 calls from a laptop
+// made 200 handshakes (measured 2026-10-08), and 250 creates arrived at the API
+// over 8-14 s. Elsewhere (browsers, Deno, Bun, an origin without HTTP/2), and for
+// any body this does not handle, it is the global fetch.
+// Pass `fetchApi` in the Configuration to use your own fetch instead.
+const sessions = new Map();
+const http1Only = new Set();
+const slots = new WeakMap();
+// A server caps the streams open at once on a connection (boat.dev: 250; this uses
+// at most 100). A stream past the cap is refused, so the excess waits here. Requests open
+// or waiting keep the process alive; an idle shared connection does not.
+async function streamSlot(s, signal) {
+    var _a;
+    let st = slots.get(s);
+    if (!st) {
+        st = { active: 0, waiting: [] };
+        slots.set(s, st);
+    }
+    const state = st;
+    const cap = Math.max(1, Math.min(Number((_a = s.remoteSettings) === null || _a === void 0 ? void 0 : _a.maxConcurrentStreams) || 100, 100));
+    // Already aborted: take no stream, never queue (an abort listener added now never fires).
+    if (signal === null || signal === void 0 ? void 0 : signal.aborted)
+        return () => { };
+    if (state.active === 0 && state.waiting.length === 0)
+        s.ref();
+    if (state.active >= cap) {
+        const turn = await new Promise((wake) => {
+            const w = () => wake(true);
+            state.waiting.push(w);
+            // An aborted waiter leaves the queue without a stream; the caller rejects it.
+            signal === null || signal === void 0 ? void 0 : signal.addEventListener('abort', () => {
+                const i = state.waiting.indexOf(w);
+                if (i !== -1) {
+                    state.waiting.splice(i, 1);
+                    wake(false);
+                }
+            }, { once: true });
+        });
+        if (!turn)
+            return () => { };
+    }
+    state.active++;
+    let released = false;
+    return () => {
+        if (released)
+            return;
+        released = true;
+        state.active--;
+        const next = state.waiting.shift();
+        if (next)
+            next();
+        else if (state.active === 0)
+            s.unref();
+    };
+}
+let nodeHttp2;
+function loadNode() {
+    var _a;
+    if (!nodeHttp2) {
+        const versions = (_a = globalThis.process) === null || _a === void 0 ? void 0 : _a.versions;
+        const isNode = !!(versions === null || versions === void 0 ? void 0 : versions.node) && !versions.bun && typeof globalThis.Deno === 'undefined';
+        // A variable, not a literal: a browser bundler must not try to resolve it.
+        const h2 = 'node:http2';
+        nodeHttp2 = isNode
+            ? import(/* webpackIgnore: true */ /* @vite-ignore */ h2).catch(() => null)
+            : Promise.resolve(null);
+    }
+    return nodeHttp2;
+}
+function session(origin, http2) {
+    const open = sessions.get(origin);
+    if (open)
+        return open;
+    const pending = new Promise((resolve) => {
+        let s;
+        try {
+            s = http2.connect(origin);
+        }
+        catch (_a) {
+            resolve(null);
+            return;
+        }
+        const drop = () => { if (sessions.get(origin) === pending)
+            sessions.delete(origin); };
+        s.once('connect', () => {
+            // An origin that answered without h2 never gets here: the TLS layer fails the connect.
+            s.unref(); // an idle shared connection must not keep the process alive
+            resolve(s);
+        });
+        // `on`, not `once`: a session can emit more than one error, and an unhandled one kills the process.
+        s.on('error', () => { drop(); resolve(null); });
+        s.once('close', drop);
+        s.once('goaway', drop);
+    });
+    sessions.set(origin, pending);
+    return pending;
+}
+function sendableBody(body) {
+    if (body == null)
+        return null;
+    if (typeof body === 'string')
+        return body;
+    if (body instanceof Uint8Array)
+        return body;
+    if (body instanceof ArrayBuffer)
+        return new Uint8Array(body);
+    if (typeof URLSearchParams !== 'undefined' && body instanceof URLSearchParams)
+        return body.toString();
+    return undefined; // FormData, Blob, streams: the global fetch encodes these
+}
+const HOP_BY_HOP = new Set(['connection', 'host', 'keep-alive', 'proxy-connection', 'transfer-encoding', 'upgrade']);
+async function http2Fetch(input, init = {}) {
+    const url = new URL(typeof input === 'string' ? input : input instanceof URL ? input.href : input.url);
+    const body = sendableBody(init.body);
+    const node = await loadNode();
+    const isRequest = typeof input !== 'string' && !(input instanceof URL);
+    if (!node || isRequest || body === undefined || url.protocol !== 'https:' || http1Only.has(url.origin)) {
+        return fetch(input, init);
+    }
+    const s = await session(url.origin, node);
+    if (!s || s.closed || s.destroyed) {
+        if (!s)
+            http1Only.add(url.origin);
+        return fetch(input, init);
+    }
+    const headers = { ':method': (init.method || 'GET').toUpperCase(), ':path': url.pathname + url.search };
+    new Headers(init.headers).forEach((value, key) => { if (!HOP_BY_HOP.has(key))
+        headers[key] = value; });
+    const signal = init.signal;
+    const aborted = () => { var _a; return (_a = signal.reason) !== null && _a !== void 0 ? _a : new DOMException('This operation was aborted', 'AbortError'); };
+    const release = await streamSlot(s, signal);
+    return new Promise((resolve, reject) => {
+        if (signal === null || signal === void 0 ? void 0 : signal.aborted) {
+            release();
+            reject(aborted());
+            return;
+        }
+        let req;
+        try {
+            req = s.request(headers, { endStream: body === null });
+        }
+        catch (e) {
+            // The connection closed (GOAWAY) while this call waited for a stream.
+            release();
+            reject(e);
+            return;
+        }
+        const onAbort = () => { req.close(); reject(aborted()); };
+        signal === null || signal === void 0 ? void 0 : signal.addEventListener('abort', onAbort, { once: true });
+        req.once('close', () => { release(); signal === null || signal === void 0 ? void 0 : signal.removeEventListener('abort', onAbort); });
+        req.on('error', reject); // after the response this errors its body stream; a no-op here
+        req.once('response', (h) => {
+            const status = Number(h[':status']);
+            const out = new Headers();
+            for (const [k, v] of Object.entries(h)) {
+                if (k.startsWith(':') || v === undefined)
+                    continue;
+                for (const one of Array.isArray(v) ? v : [v])
+                    out.append(k, String(one));
+            }
+            const empty = status === 204 || status === 205 || status === 304 || headers[':method'] === 'HEAD';
+            if (empty)
+                req.resume();
+            // Fed from 'data' events, not Readable.toWeb: an HTTP/2 stream the server has
+            // already closed is destroyed with its unread data, and toWeb's backpressure
+            // turned that into "Premature close" on 25 of 250 calls (prod, 2026-10-08).
+            // A slow reader (streamCommand between frames) must not let a fast command
+            // fill memory: past 4 MiB unread the stream pauses until the reader pulls.
+            const bodyStream = empty ? null : new ReadableStream({
+                start(controller) {
+                    req.on('data', (chunk) => {
+                        var _a;
+                        controller.enqueue(new Uint8Array(chunk));
+                        if (((_a = controller.desiredSize) !== null && _a !== void 0 ? _a : 1) <= 0)
+                            req.pause();
+                    });
+                    req.once('end', () => controller.close());
+                    req.once('error', (e) => controller.error(e));
+                    req.once('close', () => {
+                        if (!req.readableEnded) {
+                            try {
+                                controller.error(new Error(`HTTP/2 stream closed before its end (code ${req.rstCode})`));
+                            }
+                            catch (_a) { }
+                        }
+                    });
+                },
+                pull() { if (req.isPaused())
+                    req.resume(); },
+                cancel() { req.close(); },
+            }, { highWaterMark: 4 * 1024 * 1024, size: (chunk) => { var _a; return (_a = chunk === null || chunk === void 0 ? void 0 : chunk.byteLength) !== null && _a !== void 0 ? _a : 0; } });
+            const response = new Response(bodyStream, { status, headers: out });
+            // Response.url is read-only; the generated client never reads it, but keep it right.
+            Object.defineProperty(response, 'url', { value: url.href });
+            resolve(response);
+        });
+        if (body !== null)
+            req.end(body);
+    });
+}
+export const defaultFetch = http2Fetch;

package/dist/esm/models/CreateSandboxRequest.d.ts

@@ -16,7 +16,7 @@
  */
 export interface CreateSandboxRequest {
     /**
-     * Machine size. `small` consumes machine time at half rate and `large` at twice the default rate (see the Billing guide). A fork inherits the source sandbox's type unless the fork request passes its own, and resume and fork can move a sandbox between sizes.
+     * Machine size. `small` consumes machine time at half rate and `large` at twice the default rate (see the Billing guide). `xlarge` needs the $100/month plan or higher; lower plans get a 403 `machine_class_plan_required` on create, resume and fork. A fork inherits the source sandbox's type unless the fork request passes its own, and resume and fork can move a sandbox between sizes.
      * @type {CreateSandboxRequestTypeEnum}
      * @memberof CreateSandboxRequest
      */
@@ -60,7 +60,7 @@ export interface CreateSandboxRequest {
      */
     failFast?: boolean;
     /**
-     * Shell script that runs on the sandbox after it is ready. Ready means "ready to accept the user", not "setup done": the script starts in the background once provisioning completes and never blocks the sandbox becoming usable. It runs as the sandbox user via `bash`, with the sandbox's environment applied, and its output goes to a log file on the sandbox. Observe the outcome as `setupStatus` (pending/running/done/failed) and `setupError` on the sandbox. Rejected with a 400 `invalid_setup_script` error when it is not a string or exceeds 64KB.
+     * Shell script that runs on the sandbox after it is ready. Ready means "ready to accept the user", not "setup done": the script starts in the background once provisioning completes and never blocks the sandbox becoming usable. It runs as the sandbox user (`user`, not root; `sudo` needs no password) via `bash`, with the sandbox's environment applied, and its output goes to a log file on the sandbox. Observe the outcome as `setupStatus` (pending/running/done/failed) and `setupError` on the sandbox. Rejected with a 400 `invalid_setup_script` error when it is not a string or exceeds 64KB.
      * @type {string}
      * @memberof CreateSandboxRequest
      */
@@ -78,7 +78,7 @@ export interface CreateSandboxRequest {
      */
     teamId?: string;
     /**
-     * Create the sandbox from a named snapshot (saved with `POST /named-snapshots`, or `boat snapshot <id> <name>` in the CLI). The sandbox starts from that exact frozen state. Omitting `type` inherits the type the snapshot was saved from; env and no-env inherit from the snapshot's source sandbox unless the request passes its own, with the same rules as forking.
+     * Create the sandbox from a named snapshot (saved with `POST /named-snapshots`, or `boat snapshot <id> <name>` in the CLI). The sandbox starts from that exact frozen state. Omitting `type` inherits the type the snapshot was saved from; env and no-env inherit from the snapshot's source sandbox unless the request passes its own, with the same rules as forking. Also accepts a share code (`bsh_...`) that another account made with `POST /named-snapshots/{name}/shares`. The new sandbox lives in and is billed to your account. It does not get the owner's per-sandbox env; your own environment applies normally. A wrong or revoked code returns `404 snapshot_not_found`.
      * @type {string}
      * @memberof CreateSandboxRequest
      */
@@ -91,6 +91,7 @@ export declare const CreateSandboxRequestTypeEnum: {
     readonly Small: 'small';
     readonly Default: 'default';
     readonly Large: 'large';
+    readonly Xlarge: 'xlarge';
 };
 export type CreateSandboxRequestTypeEnum = typeof CreateSandboxRequestTypeEnum[keyof typeof CreateSandboxRequestTypeEnum];
 /**

package/dist/esm/models/CreateSandboxRequest.js

@@ -17,7 +17,8 @@
 export const CreateSandboxRequestTypeEnum = {
     Small: 'small',
     Default: 'default',
-    Large: 'large'
+    Large: 'large',
+    Xlarge: 'xlarge'
 };
 /**
  * Check if a given object implements the CreateSandboxRequest interface.

package/dist/esm/models/ForkRequest.d.ts

@@ -42,7 +42,7 @@ export interface ForkRequest {
      */
     noEnv?: boolean;
     /**
-     * Machine size for the fork. Omit to inherit the source sandbox's type. The source sandbox is never modified. Shrinking is rejected with `type_too_small` when the source's data would not fit the smaller disk.
+     * Machine size for the fork. Omit to inherit the source sandbox's type. `xlarge` needs the $100/month plan or higher (403 `machine_class_plan_required`). The source sandbox is never modified. Shrinking is rejected with `type_too_small` when the source's data would not fit the smaller disk.
      * @type {ForkRequestTypeEnum}
      * @memberof ForkRequest
      */
@@ -61,6 +61,7 @@ export declare const ForkRequestTypeEnum: {
     readonly Small: 'small';
     readonly Default: 'default';
     readonly Large: 'large';
+    readonly Xlarge: 'xlarge';
 };
 export type ForkRequestTypeEnum = typeof ForkRequestTypeEnum[keyof typeof ForkRequestTypeEnum];
 /**

package/dist/esm/models/ForkRequest.js

@@ -17,7 +17,8 @@
 export const ForkRequestTypeEnum = {
     Small: 'small',
     Default: 'default',
-    Large: 'large'
+    Large: 'large',
+    Xlarge: 'xlarge'
 };
 /**
  * Check if a given object implements the ForkRequest interface.