@foldrun/core 2.13.0 → 2.13.1

package/dist/src/run-container.d.ts

@@ -425,6 +425,11 @@ export declare function dockerMemory(value: string): string;
  *  than the engine has. Null when the figure is not a number, so the flag is
  *  left off rather than failing the step on an install's typo. */
 export declare function dockerCpus(cpus: string, available?: number): string | null;
+/** The cores a step's sandbox actually holds, for its record (the bill and
+ *  the compute in use): the asked-for figure, except on the docker
+ *  executor, which lowers --cpus to what the engine has (dockerCpus). Until
+ *  26 Oct 2026 the record said heavy's 4 on a two-core machine that gave 2. */
+export declare function heldCores(cpus: string, isolation: string | undefined, available?: number): number;
 export interface RunInContainerArgs {
     workspaceRoot: string;
     libraryRoot: string;

package/dist/src/run-container.js

@@ -1300,6 +1300,17 @@ export function dockerCpus(cpus, available = engineCpus()) {
         return null;
     return String(Math.min(n, available));
 }
+/** The cores a step's sandbox actually holds, for its record (the bill and
+ *  the compute in use): the asked-for figure, except on the docker
+ *  executor, which lowers --cpus to what the engine has (dockerCpus). Until
+ *  26 Oct 2026 the record said heavy's 4 on a two-core machine that gave 2. */
+export function heldCores(cpus, isolation, available) {
+    const asked = Number(cpus) || 2;
+    if (isolation !== "container")
+        return asked;
+    const given = Number(available === undefined ? dockerCpus(cpus) : dockerCpus(cpus, available));
+    return Number.isFinite(given) && given > 0 ? given : asked;
+}
 /**
  * What crosses into the container as its environment, and how.
  *

package/dist/src/runner.js

@@ -16,7 +16,7 @@ import { cascadeLimits, toolOwners } from "./limits.js";
 import { resolveAgentPath } from "./confine.js";
 import { browserPodLine, podLossDecision, RERAN_ON_FULL } from "./browser-pod.js";
 import { eventUrl } from "./webhook.js";
-import { runStepInContainer, resolveResources, memoryGiB, killRunSandboxes } from "./run-container.js";
+import { runStepInContainer, resolveResources, memoryGiB, heldCores, killRunSandboxes } from "./run-container.js";
 import { readResources, hasOverride } from "./resources.js";
 import { hostSafeEnv, platformApiUrl } from "./host-env.js";
 import { resolveModelCredential, credentialLine, accountModelBlock, isClaudeLoginToken, isModelEnvName, DECLARED_ENV_PREFIX } from "./model-credential.js";
@@ -2129,7 +2129,7 @@ delegateJob) {
         const limits = resolveResources(size, asked.value, { atLeastClass: !!step.sizeUp });
         // What the sandbox holds while it exists — `step.holding`, what the
         // account's compute in use sums (Settings, `foldrun usage compute`).
-        const held = { cpus: Number(limits.cpus) || 2, memGiB: memoryGiB(limits.memory) };
+        const held = { cpus: heldCores(limits.cpus, process.env.FOLDRUN_RUN_ISOLATION), memGiB: memoryGiB(limits.memory) };
         // oauth2 secrets become live access tokens here — the one async moment
         // in secret resolution, at the last host-side point before anything is
         // injected or substituted. The refresh recipes never leave this process:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@foldrun/core",
-  "version": "2.13.0",
+  "version": "2.13.1",
   "description": "Agents are just folders. The format, the runner, the checks.",
   "license": "FSL-1.1-ALv2",
   "type": "module",

package/src/run-container.ts

@@ -1473,6 +1473,17 @@ export function dockerCpus(cpus: string, available: number = engineCpus()): stri
   return String(Math.min(n, available));
 }
 
+/** The cores a step's sandbox actually holds, for its record (the bill and
+ *  the compute in use): the asked-for figure, except on the docker
+ *  executor, which lowers --cpus to what the engine has (dockerCpus). Until
+ *  26 Oct 2026 the record said heavy's 4 on a two-core machine that gave 2. */
+export function heldCores(cpus: string, isolation: string | undefined, available?: number): number {
+  const asked = Number(cpus) || 2;
+  if (isolation !== "container") return asked;
+  const given = Number(available === undefined ? dockerCpus(cpus) : dockerCpus(cpus, available));
+  return Number.isFinite(given) && given > 0 ? given : asked;
+}
+
 export interface RunInContainerArgs {
   workspaceRoot: string;
   libraryRoot: string;

package/src/runner.ts

@@ -19,7 +19,7 @@ import { cascadeLimits, toolOwners } from "./limits.ts";
 import { resolveAgentPath } from "./confine.ts";
 import { browserPodLine, podLossDecision, RERAN_ON_FULL } from "./browser-pod.ts";
 import { eventUrl } from "./webhook.ts";
-import { runStepInContainer, resolveResources, memoryGiB, killRunSandboxes, type StepTiming } from "./run-container.ts";
+import { runStepInContainer, resolveResources, memoryGiB, heldCores, killRunSandboxes, type StepTiming } from "./run-container.ts";
 import { readResources, hasOverride } from "./resources.ts";
 import { hostSafeEnv, platformApiUrl } from "./host-env.ts";
 import { resolveModelCredential, credentialLine, accountModelBlock, isClaudeLoginToken, isModelEnvName, DECLARED_ENV_PREFIX } from "./model-credential.ts";
@@ -2322,7 +2322,7 @@ async function runStep(
     const limits = resolveResources(size, asked.value, { atLeastClass: !!step.sizeUp });
     // What the sandbox holds while it exists — `step.holding`, what the
     // account's compute in use sums (Settings, `foldrun usage compute`).
-    const held = { cpus: Number(limits.cpus) || 2, memGiB: memoryGiB(limits.memory) };
+    const held = { cpus: heldCores(limits.cpus, process.env.FOLDRUN_RUN_ISOLATION), memGiB: memoryGiB(limits.memory) };
 
     // oauth2 secrets become live access tokens here — the one async moment
     // in secret resolution, at the last host-side point before anything is