@sandboxrouter/sdk 0.3.4 → 0.3.5

package/README.md

@@ -41,39 +41,39 @@ List price while running, 2 vCPU / 4 GB, cheapest first; waitlisted sign-ups fol
 
 | Provider | $/hr | Plan needed | Real-account check | Source |
 |---|---|---|---|---|
-| [Agent37](https://sandboxrouter.vercel.app/providers/agent37) | $0.007 | none | not run yet | [pricing](https://www.agent37.com/docs/agents-api/billing) |
+| [Agent37](https://sandboxrouter.vercel.app/providers/agent37) | $0.007 | none | passed (2026-11-11) | [pricing](https://www.agent37.com/docs/agents-api/billing) |
 | [Boat](https://sandboxrouter.vercel.app/providers/boat) | $0.018 | $20/mo (credited) | not run yet | [pricing](https://docs.boat.dev/pricing.md) |
-| [Maritime](https://sandboxrouter.vercel.app/providers/maritime) | $0.022 | $20/mo (credited) | passed (2026-11-10) | [pricing](https://maritime.sh/pricing) |
-| [Sailboxes (Sail Research)](https://sandboxrouter.vercel.app/providers/sail) | up to $0.062 | none | passed (2026-11-10) | [pricing](https://docs.sailresearch.com/sailboxes-pricing.md) |
+| [Maritime](https://sandboxrouter.vercel.app/providers/maritime) | $0.022 | $20/mo (credited) | passed (2026-11-11) | [pricing](https://maritime.sh/pricing) |
+| [Sailboxes (Sail Research)](https://sandboxrouter.vercel.app/providers/sail) | up to $0.062 | none | passed (2026-11-11) | [pricing](https://docs.sailresearch.com/sailboxes-pricing.md) |
 | [Northflank](https://sandboxrouter.vercel.app/providers/northflank) | $0.067 | none | not run yet | [pricing](https://northflank.com/pricing) |
 | [Morph Cloud](https://sandboxrouter.vercel.app/providers/morph) | $0.100 | none | not run yet | [pricing](https://cloud.morph.so/web/pricing) |
 | [exe.dev](https://sandboxrouter.vercel.app/providers/exedev) | $0.105 | $15/mo | not run yet | [pricing](https://exe.dev/docs/standalone-vms.md) |
-| [Novita AI Agent Sandbox](https://sandboxrouter.vercel.app/providers/novita) | $0.117 | none | not run yet | [pricing](https://docs.novita.ai/guides/sandbox-pricing) |
-| [Freestyle](https://sandboxrouter.vercel.app/providers/freestyle) | $0.134 | none | not run yet | [pricing](https://www.freestyle.sh/docs/vms/pricing-and-limits) |
+| [Novita AI Agent Sandbox](https://sandboxrouter.vercel.app/providers/novita) | $0.117 | none | passed (2026-11-11) | [pricing](https://docs.novita.ai/guides/sandbox-pricing) |
+| [Freestyle](https://sandboxrouter.vercel.app/providers/freestyle) | $0.134 | none | passed (2026-11-11) | [pricing](https://www.freestyle.sh/docs/vms/pricing-and-limits) |
 | [Beam](https://sandboxrouter.vercel.app/providers/beam) | $0.140 | $20/mo (credited) | not run yet | [pricing](https://www.beam.cloud/pricing) |
 | [CodeSandbox SDK (Together)](https://sandboxrouter.vercel.app/providers/codesandbox) | $0.149 | none | not run yet | [pricing](https://docs.together.ai/docs/together-code-sandbox-legacy) |
-| [Fly.io Sprites](https://sandboxrouter.vercel.app/providers/sprites) | up to $0.164 | none | not run yet | [pricing](https://fly.io/sprites) |
-| [Blaxel](https://sandboxrouter.vercel.app/providers/blaxel) | $0.166 | none | passed (2026-11-10) | [pricing](https://blaxel.ai/pricing) |
+| [Fly.io Sprites](https://sandboxrouter.vercel.app/providers/sprites) | up to $0.164 | none | passed (2026-11-11) | [pricing](https://fly.io/sprites) |
+| [Blaxel](https://sandboxrouter.vercel.app/providers/blaxel) | $0.166 | none | passed (2026-11-11) | [pricing](https://blaxel.ai/pricing) |
 | [HOPX](https://sandboxrouter.vercel.app/providers/hopx) | $0.166 | none | not run yet | [pricing](https://hopx.ai/pricing) |
-| [Superserve](https://sandboxrouter.vercel.app/providers/superserve) | $0.166 | maybe $20/mo (credited) | not run yet | [pricing](https://superserve.ai/pricing) |
+| [Superserve](https://sandboxrouter.vercel.app/providers/superserve) | $0.166 | maybe $20/mo (credited) | passed (2026-11-11) | [pricing](https://superserve.ai/pricing) |
 | [Tensorlake](https://sandboxrouter.vercel.app/providers/tensorlake) | up to $0.200 | none | not run yet | [pricing](https://www.tensorlake.ai/pricing) |
 | [Upstash Box](https://sandboxrouter.vercel.app/providers/upstash) | up to $0.200 | none | not run yet | [pricing](https://upstash.com/pricing/box) |
-| [Cloudflare Sandbox](https://sandboxrouter.vercel.app/providers/cloudflare) | up to $0.216 | $5/mo | not run yet | [pricing](https://developers.cloudflare.com/containers/platform/pricing/) |
-| [Amazon Bedrock AgentCore Code Interpreter](https://sandboxrouter.vercel.app/providers/agentcore) | up to $0.217 | none | not run yet | [pricing](https://aws.amazon.com/bedrock/agentcore/pricing/) |
-| [Modal](https://sandboxrouter.vercel.app/providers/modal) | up to $0.238 | none | not run yet | [pricing](https://modal.com/pricing) |
-| [AWS Lambda MicroVMs](https://sandboxrouter.vercel.app/providers/lambda) | $0.252 | none | not run yet | [pricing](https://aws.amazon.com/lambda/pricing/) |
+| [Cloudflare Sandbox](https://sandboxrouter.vercel.app/providers/cloudflare) | up to $0.216 | $5/mo | passed (2026-11-11) | [pricing](https://developers.cloudflare.com/containers/platform/pricing/) |
+| [Amazon Bedrock AgentCore Code Interpreter](https://sandboxrouter.vercel.app/providers/agentcore) | up to $0.217 | none | passed (2026-11-11) | [pricing](https://aws.amazon.com/bedrock/agentcore/pricing/) |
+| [Modal](https://sandboxrouter.vercel.app/providers/modal) | up to $0.238 | none | passed (2026-11-11) | [pricing](https://modal.com/pricing) |
+| [AWS Lambda MicroVMs](https://sandboxrouter.vercel.app/providers/lambda) | $0.252 | none | passed (2026-11-11) | [pricing](https://aws.amazon.com/lambda/pricing/) |
 | [Deno Sandbox](https://sandboxrouter.vercel.app/providers/deno) | up to $0.300 | $20/mo | not run yet | [pricing](https://deno.com/sandbox) |
 | [Runloop](https://sandboxrouter.vercel.app/providers/runloop) | $0.317 | none | not run yet | [pricing](https://www.runloop.ai/pricing) |
-| [Vercel Sandbox](https://sandboxrouter.vercel.app/providers/vercel) | up to $0.341 | none | not run yet | [pricing](https://vercel.com/docs/vercel-sandbox/pricing) |
+| [Vercel Sandbox](https://sandboxrouter.vercel.app/providers/vercel) | up to $0.341 | none | passed (2026-11-11) | [pricing](https://vercel.com/docs/vercel-sandbox/pricing) |
 | [InstaBox (sign-up waitlisted)](https://sandboxrouter.vercel.app/providers/instabox) | $0.017 | none | not run yet | [pricing](https://instabox.sh/docs/pricing.md) |
 | [Koyeb Sandboxes (not taking new accounts)](https://sandboxrouter.vercel.app/providers/koyeb) | $0.058 | $29/mo | not run yet | [pricing](https://www.koyeb.com/docs/reference/instances) |
 | [Dedalus Machines (sign-up waitlisted)](https://sandboxrouter.vercel.app/providers/dedalus) | $0.149 | none | not run yet | [pricing](https://docs.dedaluslabs.ai/dcs/dm/pricing) |
 | [LangSmith Sandboxes (sign-up waitlisted)](https://sandboxrouter.vercel.app/providers/langsmith) | $0.189 | none | not run yet | [pricing](https://www.langchain.com/pricing) |
-| [OpenScale Sandboxes](https://sandboxrouter.vercel.app/providers/openscale) | skipped (default image is 2 vCPU / 1 GB; a bigger size needs image.openscale) | none | failed 1 step (2026-11-10) | [pricing](https://openscale.so/sandboxes) |
+| [OpenScale Sandboxes](https://sandboxrouter.vercel.app/providers/openscale) | skipped (default image is 2 vCPU / 1 GB; a bigger size needs image.openscale) | none | passed (2026-11-11) | [pricing](https://openscale.so/sandboxes) |
 | [Azure Container Apps dynamic sessions](https://sandboxrouter.vercel.app/providers/azure) | skipped (max 1 vCPU) | none | not run yet | [pricing](https://learn.microsoft.com/en-us/azure/container-apps/billing#dynamic-sessions) |
-| [Daytona](https://sandboxrouter.vercel.app/providers/daytona) | skipped (default image is 1 vCPU / 1 GB; a bigger size needs image.daytona) | none | passed (2026-11-10) | [pricing](https://www.daytona.io/pricing) |
+| [Daytona](https://sandboxrouter.vercel.app/providers/daytona) | skipped (default image is 1 vCPU / 1 GB; a bigger size needs image.daytona) | none | passed (2026-11-11) | [pricing](https://www.daytona.io/pricing) |
 | [Alibaba Cloud Agent Sandbox](https://sandboxrouter.vercel.app/providers/alibaba) | skipped (max 2 GB memory) | none | not run yet | [pricing](https://www.alibabacloud.com/help/en/agent-sandbox/product-overview/billing-overview) |
-| [E2B](https://sandboxrouter.vercel.app/providers/e2b) | skipped (default image is 2 vCPU / 0.5 GB; a bigger size needs image.e2b) | none | passed (2026-11-10) | [pricing](https://e2b.dev/pricing) |
+| [E2B](https://sandboxrouter.vercel.app/providers/e2b) | skipped (default image is 2 vCPU / 0.5 GB; a bigger size needs image.e2b) | none | passed (2026-11-11) | [pricing](https://e2b.dev/pricing) |
 | [Docker (local)](https://sandboxrouter.vercel.app/providers/docker) | free | none | passed (2026-11-09) | [pricing](https://docs.docker.com/engine/) |
 
 Checked 2026-11-04 to 2026-11-06.

package/dist/providers/agentcore.d.ts

@@ -69,3 +69,12 @@ export declare class AgentCoreProvider implements Provider {
     create(spec: SandboxSpec): Promise<ProviderSandbox>;
     connect(nativeId: string): Promise<ProviderSandbox>;
 }
+/**
+ * Splits exec's combined terminal output at the stderr marker: the command's stdout comes before
+ * it, its stderr (base64) after. If the terminal still translated newlines (stty unavailable), the
+ * marker is preceded by \r\n and stdout's \r\n are turned back into \n.
+ */
+export declare function splitOutput(combined: string, marker: string): {
+    stdout: string;
+    stderr: string;
+};

package/dist/providers/agentcore.js

@@ -386,14 +386,39 @@ class AgentCoreSandbox {
         const timeout = Math.max(1, Math.round(opts.timeoutSeconds ?? 60));
         const full = wrapCommand(cmd, { cwd: opts.cwd, env: { ...this.env, ...opts.env } });
         const b64 = Buffer.from(full).toString("base64");
+        // The service runs commands in a terminal: stdout and stderr come back as one stream (labelled
+        // "stdout" on exit 0 and "stderr" otherwise), with \n turned into \r\n. So stderr goes to a file
+        // and is printed base64-encoded after a marker, and `stty -onlcr` keeps newlines as they are.
+        const nonce = randomBytes(6).toString("hex");
+        const errFile = `/tmp/.sbr-stderr-${nonce}`;
+        const marker = `__SBR_STDERR_${nonce}__`;
         // base64 keeps the user's command intact through whatever quoting the service applies.
-        const command = `timeout -k 5 ${timeout} bash -c "$(echo ${b64} | base64 -d)"`;
-        const r = await this.command(command, { onStdout: opts.onStdout, onStderr: opts.onStderr, timeoutMs: (timeout + 60) * 1000 });
+        const command = `stty -onlcr 2>/dev/null; timeout -k 5 ${timeout} bash -c "$(echo ${b64} | base64 -d)" 2>${errFile}; c=$?; ` +
+            `printf '\\n${marker}\\n'; base64 < ${errFile} | tr -d '\\r\\n'; rm -f ${errFile}; exit $c`;
+        // Stream stdout as it arrives, holding back only what could be the start of the marker.
+        let combined = "";
+        let sent = 0;
+        const feed = (chunk) => {
+            combined += chunk;
+            if (!opts.onStdout)
+                return;
+            const at = combined.indexOf(`\n${marker}`);
+            const safe = at >= 0 ? at : Math.max(sent, combined.length - marker.length - 2);
+            if (safe > sent)
+                opts.onStdout(combined.slice(sent, safe));
+            sent = Math.max(sent, safe);
+        };
+        const r = await this.command(command, { onStdout: feed, onStderr: feed, timeoutMs: (timeout + 60) * 1000 });
         const durationMs = Date.now() - t0;
+        const { stdout, stderr } = splitOutput(combined || r.stdout + r.stderr, marker);
+        if (opts.onStdout && stdout.length > sent)
+            opts.onStdout(stdout.slice(sent));
+        if (stderr)
+            opts.onStderr?.(stderr);
         // `timeout` leaves exit 124 (or 137 after SIGKILL) when it had to stop the command.
         if (killedByTimeout(r.exitCode, durationMs, timeout))
             throw timeoutError(ID, timeout);
-        return { ...r, durationMs };
+        return { stdout, stderr, exitCode: r.exitCode, durationMs };
     }
     async writeFile(path, content) {
         const bytes = toBytes(content);
@@ -426,6 +451,22 @@ class AgentCoreSandbox {
         }
     }
 }
+/**
+ * Splits exec's combined terminal output at the stderr marker: the command's stdout comes before
+ * it, its stderr (base64) after. If the terminal still translated newlines (stty unavailable), the
+ * marker is preceded by \r\n and stdout's \r\n are turned back into \n.
+ */
+export function splitOutput(combined, marker) {
+    const at = combined.lastIndexOf(`\n${marker}`);
+    if (at < 0)
+        return { stdout: combined, stderr: "" };
+    const translated = combined[at - 1] === "\r";
+    let stdout = combined.slice(0, translated ? at - 1 : at);
+    if (translated)
+        stdout = stdout.replace(/\r\n/g, "\n");
+    const b64 = combined.slice(at + marker.length + 1).replace(/\s/g, "");
+    return { stdout, stderr: Buffer.from(b64, "base64").toString("utf8") };
+}
 function exceptionStatus(name) {
     const n = name.toLowerCase();
     if (n.startsWith("accessdenied"))

package/dist/providers/freestyle.js

@@ -1,6 +1,6 @@
 import { createHash } from "node:crypto";
 import { ProviderError } from "../types.js";
-import { dirname, toBytes, wrapCommand } from "../util.js";
+import { dirname, shq, toBytes, wrapCommand } from "../util.js";
 /**
  * Freestyle VMs over the public REST API (no SDK needed). Auth: Authorization: Bearer
  * <FREESTYLE_API_KEY>, base https://api.freestyle.sh. Errors are {code, message}.
@@ -230,11 +230,18 @@ class FreestyleBox {
     }
     async writeFile(path, content) {
         const bytes = toBytes(content);
-        // Best effort (whether mkdir of an existing directory errors is not documented); the write
+        // The file API runs as root, so a folder it creates belongs to root and commands (which run as
+        // the image's user) can't write in it. Make the folder with a command instead, as that user;
+        // fall back to the file API where the user can't (e.g. under /root). Best effort: the write
         // itself reports any real problem.
         const dir = dirname(path);
-        if (dir !== "/")
-            await this.p.request("POST", `${this.path}/fs/mkdir`, { json: { path: dir }, background: true }).catch(() => { });
+        if (dir !== "/") {
+            const r = await this.p
+                .json("POST", `${this.path}/exec-await`, { json: { command: `mkdir -p ${shq(dir)}`, timeoutMs: 30_000 }, background: true })
+                .catch(() => undefined);
+            if (r?.statusCode !== 0)
+                await this.p.request("POST", `${this.path}/fs/mkdir`, { json: { path: dir }, background: true }).catch(() => { });
+        }
         const q = new URLSearchParams({ path, sha256: createHash("sha256").update(bytes).digest("hex") });
         await this.p.request("PUT", `${this.path}/fs/write?${q}`, { bytes, background: true });
     }

package/dist/providers/modal.js

@@ -75,7 +75,11 @@ class ModalBox {
         catch (err) {
             if (err instanceof ProviderError)
                 throw err;
-            throw new ProviderError("modal", err?.message ?? String(err));
+            const message = err?.message ?? String(err);
+            // Newer SDKs end the output streams with "Deadline exceeded" at timeoutMs instead of a signal exit.
+            if (/deadline exceeded/i.test(message) && killedByTimeout(-1, Date.now() - t0, seconds))
+                throw timeoutError("modal", seconds);
+            throw new ProviderError("modal", message);
         }
     }
     async writeFile(path, content) {

package/dist/providers/sprites.js

@@ -1,7 +1,7 @@
 import { randomUUID } from "node:crypto";
 import { StringDecoder } from "node:string_decoder";
 import { ProviderError } from "../types.js";
-import { optionalImport, toBytes } from "../util.js";
+import { optionalImport, timeoutError, toBytes } from "../util.js";
 /**
  * Fly.io Sprites via `@fly/sprites`. A sprite is a persistent machine named by the caller, so the
  * name is the native id. Sprites idle on their own and have no lifetime knob: kill() deletes it.
@@ -78,9 +78,10 @@ class SpritesBox {
         try {
             const exitCode = await new Promise((resolve, reject) => {
                 const timer = setTimeout(() => {
+                    // Reject first: killing can report an exit (-1) right away, and that must not count as the result.
+                    reject(timeoutError("sprites", limit / 1000));
                     proc.kill("SIGKILL");
                     proc.close();
-                    reject(new ProviderError("sprites", `command timed out after ${limit / 1000}s`));
                 }, limit);
                 timer.unref();
                 proc.on("exit", (code) => {
@@ -89,8 +90,8 @@ class SpritesBox {
                 });
                 proc.on("error", (e) => {
                     clearTimeout(timer);
-                    proc.close();
                     reject(e);
+                    proc.close();
                 });
             });
             const so = out.end();

package/dist/providers/vercel.js

@@ -27,6 +27,9 @@ export class VercelProvider {
             resources: { vcpus },
             env: spec.env,
             tags: spec.metadata,
+            // v3 keeps sandboxes by default and restarts a stopped one on the next command; a router
+            // sandbox is single-use, so nothing should outlive kill().
+            persistent: false,
         });
         return new VercelBox(sbx);
     }
@@ -93,6 +96,7 @@ class VercelBox {
         return new Uint8Array(buf);
     }
     async kill() {
-        await this.sbx.stop();
+        // stop() only ends the session: the next SDK call would start it again. delete() makes it inert.
+        await this.sbx.delete({ deleteOrphanSnapshots: true });
     }
 }

package/dist/server.d.ts

@@ -2,7 +2,7 @@ import { type IncomingMessage, type ServerResponse } from "node:http";
 import { Router, type RoutedSandbox } from "./router.js";
 import { type RouteOptions, type SandboxSpec } from "./types.js";
 /**
- * Hooks for running this API for many users, as the hosted service does (hosted/). With none set,
+ * Hooks for running this API for many users (accounts, billing, per-user sandboxes). With none set,
  * the server is single-user: one SANDBOXROUTER_TOKEN, every sandbox reachable by anyone holding it.
  */
 export interface ServerHooks {

package/dist/verified.js

@@ -1,7 +1,18 @@
 export const VERIFIED = {
-    blaxel: "2026-11-10",
-    daytona: "2026-11-10",
-    e2b: "2026-11-10",
-    maritime: "2026-11-10",
-    sail: "2026-11-10",
+    agent37: "2026-11-11",
+    agentcore: "2026-11-11",
+    lambda: "2026-11-11",
+    blaxel: "2026-11-11",
+    cloudflare: "2026-11-11",
+    daytona: "2026-11-11",
+    e2b: "2026-11-11",
+    sprites: "2026-11-11",
+    freestyle: "2026-11-11",
+    maritime: "2026-11-11",
+    modal: "2026-11-11",
+    novita: "2026-11-11",
+    openscale: "2026-11-11",
+    sail: "2026-11-11",
+    superserve: "2026-11-11",
+    vercel: "2026-11-11",
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sandboxrouter/sdk",
-  "version": "0.3.4",
+  "version": "0.3.5",
   "description": "One API for every sandbox provider: route AI agents' code by price, speed or capability, with automatic fallback. Free and open source.",
   "type": "module",
   "main": "dist/index.js",