@sanlabs/sanbox-cli 0.0.12 → 0.0.13

package/README.md

@@ -15,7 +15,10 @@ installed_cli_version="$(sanbox --version)"
 test "$installed_cli_version" = "$latest_cli_version"
 ```
 
-Always use the latest published CLI. CLI 0.0.12 adopts the Stop, Resume, and Delete lifecycle,
+Always use the latest published CLI. CLI 0.0.13 allows service templates to start without an
+initial task, including OpenCode Computers that are ready for later SDK steering, and supports
+Custom OpenAI Proxy providers when creating templates, including Browser Use templates.
+CLI 0.0.12 adopted the Stop, Resume, and Delete lifecycle,
 separates run state from execution outcome, retains scrubbed deleted-run tombstones, and adds
 administrator-confirmed template deletion.
 CLI 0.0.11 added OpenCode Computer templates and short-lived native SDK connections for HTTP, SSE
@@ -128,7 +131,8 @@ and `--force` so scripts cannot remove a template accidentally.
 ## Create A Browser Use Template
 
 Browser Use runs local headless Chromium inside the Firecracker sandbox. It requires OpenAI,
-Anthropic, Google Gemini, or Hetzner Inference and at least one explicit browser target:
+Anthropic, Google Gemini, Hetzner Inference, or a Custom OpenAI Proxy and at least one
+explicit browser target:
 
 ```bash
 sanbox templates create \
@@ -151,6 +155,8 @@ allowed downloads. Browser Use templates are one-shot agent executions.
 
 ## Run Idempotently
 
+Task templates require a positional task or `--task`. Service templates may omit it:
+
 ```bash
 sanbox run "Review this repo and write output/report.md" \
   --input src/ \
@@ -163,8 +169,18 @@ sanbox run "Review this repo and write output/report.md" \
   --input src/ \
   --wait \
   --json
+
+sanbox run \
+  --template "<service-template-id>" \
+  --external-run-id "<stable-service-id>" \
+  --json
 ```
 
+A taskless OpenCode Computer starts `opencode serve` without making an initial model call. A
+taskless Hermes service starts its gateways and waits for WebUI or configured channel messages.
+Supplying instructions starts the initial OpenCode task or seeds Hermes's persistent operating
+context, preserving the existing behavior.
+
 Repeat `--input` for files, directories, or globs. The CLI excludes common secrets and applies `.sanboxignore`. `--include` is a deprecated compatibility alias.
 
 For a Hermes template that allows `email`, optionally request an address from one of the AgentMail
@@ -289,8 +305,9 @@ authenticated WebSocket. The temporary key is deleted when the connection closes
 user token is not passed to the OpenSSH child process.
 
 OpenCode and Browser Use runs are one-shot agent executions. OpenCode Computer keeps its private
-server running after the initial task so it can accept later steering. A persisted task workspace can
-still be fresh-booted manually for inspection after the run stops.
+server running so it can accept later steering; when an initial task is supplied, Sanbox submits it
+after the server becomes ready. A persisted task workspace can still be fresh-booted manually for
+inspection after the run stops.
 
 ## Connect The OpenCode SDK
 

package/dist/cli.js

@@ -44,6 +44,7 @@ Commands:
   sanbox templates delete <template-id> --force [--json]
   sanbox run "task" --template <template-id> [--email-address <address>] [--telegram-bot-token <token>] [--telegram-allowed-user <id>] [--input <path>] [--wait | --watch] [--json | --jsonl]
   sanbox run --task "..." --template <template-id> [--email-address <address>] [--telegram-bot-token <token>] [--telegram-allowed-user <id>] [--input <path>] [--wait | --watch] [--json | --jsonl]
+  sanbox run --template <service-template-id> [--email-address <address>] [--telegram-bot-token <token>] [--telegram-allowed-user <id>] [--json]
   sanbox batch --tasks tasks.json --template <template-id> [--input <path>] [--max-parallel 5] [--wait] [--json]
   sanbox runs list [--limit 50] [--json]
   sanbox runs get <run-id> [--json]
@@ -93,8 +94,10 @@ const runHelp = `Sanbox run
 Usage:
   sanbox run "Review these files" --template <template-id> --input report.pdf --input data/ --wait
   sanbox run --task "Review these files" --template <template-id> --input report.pdf --wait --json
+  sanbox run --template <service-template-id> --json
 
 Options:
+  --task <instruction>          Required for task templates; optional for service templates.
   --input <path>                File, directory, or glob to upload. Repeatable.
   --template <id>               Template id or slug. Required unless SANBOX_TEMPLATE or project config sets it.
   --external-run-id <id>        Idempotency key for retries.
@@ -726,8 +729,6 @@ const commandRun = async (command, flags) => {
         throw new CliError("conflicting_arguments", "Use either --task or a positional task, not both.");
     }
     const task = runTask(command, flags);
-    if (!task)
-        throw new Error("--task or a positional task is required.");
     if (hasFlag(flags, "wait") && wantsWatch(flags)) {
         throw new Error("--wait cannot be combined with --watch or --jsonl.");
     }
@@ -771,7 +772,7 @@ const commandRun = async (command, flags) => {
     try {
         payload = await createRun(client, {
             cwd: cwd(),
-            instruction: task,
+            instruction: task || undefined,
             inputs: flagList(flags, "input"),
             externalRunId: flagString(flags, "external-run-id") || undefined,
             supabaseUserId: supabaseUserId || undefined,
@@ -1198,6 +1199,9 @@ const commandTemplates = async (command, flags) => {
         if (harness === "opencode" && mode === "computer" && llmBudgetUsd !== undefined) {
             throw new CliError("opencode_computer_budget_unsupported", "OpenCode Computer templates do not support --llm-budget-usd yet.");
         }
+        if (modelProvider === "custom" && llmBudgetUsd !== undefined) {
+            throw new CliError("custom_provider_budget_unsupported", "Custom OpenAI Proxy providers do not support --llm-budget-usd yet.");
+        }
         const channels = [...new Set(flagList(flags, "channel").map((value) => value.trim()).filter(Boolean))];
         if (channels.some((channel) => channel !== "email" && channel !== "telegram")) {
             throw new CliError("invalid_hermes_channels", "--channel must be email or telegram.");
@@ -1218,8 +1222,9 @@ const commandTemplates = async (command, flags) => {
             modelProvider !== "openai" &&
             modelProvider !== "anthropic" &&
             modelProvider !== "google" &&
-            modelProvider !== "hetzner") {
-            throw new CliError("browser_use_provider_unsupported", "Browser Use templates require --model-provider openai, anthropic, google, or hetzner.");
+            modelProvider !== "hetzner" &&
+            modelProvider !== "custom") {
+            throw new CliError("browser_use_provider_unsupported", "Browser Use templates require --model-provider openai, anthropic, google, hetzner, or custom.");
         }
         const browserDomains = harness === "browser-use"
             ? parseBrowserDomains(flagList(flags, "browser-domain"))

package/dist/runs.js

@@ -52,7 +52,7 @@ export const createRun = async (client, options) => {
     return client.createRun({
         external_run_id: options.externalRunId,
         workload_id: options.templateId,
-        instruction: options.instruction,
+        ...(options.instruction ? { instruction: options.instruction } : {}),
         ...(options.supabaseUserId ? { supabase_user_id: options.supabaseUserId } : {}),
         ...(options.emailAddress ? { email_address: options.emailAddress } : {}),
         ...(options.telegramBotToken ? {

package/dist/version.js

@@ -1 +1 @@
-export const version = "0.0.12";
+export const version = "0.0.13";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanlabs/sanbox-cli",
-  "version": "0.0.12",
+  "version": "0.0.13",
   "private": false,
   "repository": {
     "type": "git",