@whiteroom-ai/cli 2.0.1 → 2.1.0

package/dist/sandbox/run.js

@@ -0,0 +1,139 @@
+// `whiteroom sandbox run --provider <p> -- <command> [args…]`: runs the
+// user's agent once with its base URL set to their Sandbox URL, so nothing
+// has to be edited first. The Sandbox URL is pasted at a hidden prompt (or
+// read from WHITEROOM_SANDBOX_URL), so the key never lands in shell history.
+// The command runs as typed, without a shell; nothing from WhiteRoom is put
+// into it. Refuses to start while another base URL in the environment points
+// at WhiteRoom, so the agent's calls can't go to production by mistake.
+import { spawn } from "node:child_process";
+import { constants } from "node:os";
+import { hiddenPrompt, Interrupted, nodeTooOld, targetOrigin } from "../practice/preflight.js";
+import { say, warn } from "../practice/text.js";
+import { helperEnv } from "./listen.js";
+/** A Sandbox URL as the Sandbox page shows it: WhiteRoom's address, then the Sandbox key. */
+const SANDBOX_URL = /^(https?:\/\/[^/\s?#@]+)\/(sk-wr-[0-9a-f]{40})(?:\/v1|\/openai)?\/?$/;
+/** The providers a Sandbox connects, as the dashboard names them. */
+export const RUN_PROVIDERS = ["anthropic", "openai", "azure-openai", "foundry", "bedrock-mantle"];
+/** Base-URL settings agents read: one pointing at WhiteRoom other than the one this sets could send calls to production. */
+const BASE_URL_VARS = ["ANTHROPIC_BASE_URL", "OPENAI_BASE_URL", "OPENAI_API_BASE", "AZURE_OPENAI_ENDPOINT"];
+/** Without a shell, Windows can't start .cmd commands such as npx: WSL runs them as on macOS and Linux. */
+const WINDOWS = process.platform === "win32" ? " On Windows, run this in WSL." : "";
+export const runCopy = {
+    needUrl: "Paste your Sandbox URL from the Sandbox page (it won't show): ",
+    badUrl: "That isn't a Sandbox URL. Copy it again from the Sandbox page (it ends with /sk-wr-…). Nothing was run.",
+    noTerminal: "No terminal to ask for the Sandbox URL. Set WHITEROOM_SANDBOX_URL to it instead. Nothing was run.",
+    notWhiteRoom: "That Sandbox URL isn't a WhiteRoom address. Copy it again from the Sandbox page. Nothing was run.",
+    pointsAtWhiteRoom: (vars) => `${vars.join(" and ")} already ${vars.length === 1 ? "points" : "point"} at WhiteRoom, so your agent's calls could go to production instead of your Sandbox. Unset ${vars.length === 1 ? "it" : "them"}, then run this again. Nothing was run.`,
+    gotUrl: (end) => `Got your Sandbox URL (key ending …${end}).`,
+    running: (name) => `Running your agent with ${name} set to your Sandbox URL. The checks start on its first call; results are on the Sandbox page.`,
+    cancelled: "Stopped. Nothing was run.",
+    notFound: (cmd) => `Couldn't start \`${cmd}\`: no such command. Check the command, then run this again.${WINDOWS}`,
+    couldntStart: (cmd, why) => `Couldn't start \`${cmd}\`: ${why}.${WINDOWS}`,
+};
+/** The setting that points an agent at the Sandbox, as the Sandbox page's .env line has it (dashboard issuedEnvHint). */
+export function sandboxSetting(provider, url) {
+    const base = url.replace(/\/+$/, "");
+    if (provider === "azure-openai")
+        return { name: "AZURE_OPENAI_ENDPOINT", value: base };
+    if (provider === "openai")
+        return { name: "OPENAI_BASE_URL", value: `${base}/v1` };
+    return { name: "ANTHROPIC_BASE_URL", value: base };
+}
+/** Every setting the agent gets: OpenAI's also under the older OPENAI_API_BASE, which some SDKs still read, so none of them bypasses the Sandbox. */
+export function sandboxSettings(provider, url) {
+    const s = sandboxSetting(provider, url);
+    return provider === "openai" ? { [s.name]: s.value, OPENAI_API_BASE: s.value } : { [s.name]: s.value };
+}
+/** Other base-URL settings in the environment that point at WhiteRoom (whiteroom.tech; a local proxy on localhost is the user's own). */
+export function whiteRoomBaseUrls(env, except) {
+    return BASE_URL_VARS.filter((name) => {
+        if (except.includes(name) || !env[name]?.trim())
+            return false;
+        try {
+            const host = new URL(env[name].trim()).hostname;
+            return host === "whiteroom.tech" || host.endsWith(".whiteroom.tech");
+        }
+        catch {
+            return false;
+        }
+    });
+}
+/**
+ * The Sandbox URL, checked: a problem when it isn't one, or isn't on a
+ * WhiteRoom address. The Sandbox page's .env line works too
+ * (ANTHROPIC_BASE_URL=…, with or without export or quotes).
+ */
+export function sandboxUrlOf(raw, env = {}) {
+    const value = raw.trim().replace(/^export\s+/, "").replace(/^[A-Z][A-Z0-9_]*=/, "").replace(/^(["'])(.*)\1$/, "$2");
+    const m = value.trim().match(SANDBOX_URL);
+    if (!m)
+        return { problem: runCopy.badUrl };
+    // WHITEROOM_PRACTICE_DEV=1 allows another host, as for listen and practice (testing WhiteRoom itself, e.g. its staging engine).
+    if (targetOrigin(m[1], env) === null)
+        return { problem: runCopy.notWhiteRoom };
+    return { url: `${new URL(m[1]).origin}/${m[2]}` };
+}
+const fail = (line) => (warn(line), 2);
+const TERMINAL = { get terminal() { return !!process.stdin.isTTY; }, ask: (q) => hiddenPrompt(q) };
+export async function run(a, env = process.env, asker = TERMINAL) {
+    const old = nodeTooOld();
+    if (old)
+        return fail(old);
+    let raw = env.WHITEROOM_SANDBOX_URL ?? "";
+    if (!raw) {
+        if (!asker.terminal)
+            return fail(runCopy.noTerminal);
+        try {
+            raw = await asker.ask(runCopy.needUrl);
+        }
+        catch (err) {
+            if (err instanceof Interrupted)
+                return warn(runCopy.cancelled), 130;
+            throw err;
+        }
+    }
+    const checked = sandboxUrlOf(raw, env);
+    if ("problem" in checked)
+        return fail(checked.problem);
+    // The URL was hidden as it was pasted: say which one arrived (its key's last characters only).
+    if (!env.WHITEROOM_SANDBOX_URL)
+        say(runCopy.gotUrl(checked.url.slice(-6)));
+    const setting = sandboxSetting(a.provider, checked.url);
+    const settings = sandboxSettings(a.provider, checked.url);
+    const clash = whiteRoomBaseUrls(env, Object.keys(settings));
+    if (clash.length)
+        return fail(runCopy.pointsAtWhiteRoom(clash));
+    // The agent gets the user's environment (without WHITEROOM_*), with its base URL set to the Sandbox.
+    const childEnv = { ...helperEnv(env), ...settings };
+    say(runCopy.running(setting.name));
+    const [cmd, ...args] = a.command;
+    return new Promise((resolve) => {
+        // Ctrl+C already reaches the agent (it's in the same process group, whether or not stdin is a
+        // terminal): this process only waits for it, so the agent never gets a second one. A SIGINT sent
+        // to this process alone isn't passed on either (it can't be told apart); SIGTERM and SIGHUP are.
+        const handlers = new Map();
+        const done = (code) => {
+            for (const [sig, h] of handlers)
+                process.off(sig, h);
+            resolve(code);
+        };
+        let child;
+        try {
+            child = spawn(cmd, args, { stdio: "inherit", env: childEnv });
+        }
+        catch (err) {
+            // Windows refuses some commands (a .cmd without a shell) before starting them.
+            return done(fail(runCopy.couldntStart(cmd, err.message)));
+        }
+        for (const sig of ["SIGINT", "SIGTERM", "SIGHUP"]) {
+            const h = () => { if (sig !== "SIGINT")
+                child.kill(sig); };
+            handlers.set(sig, h);
+            process.on(sig, h);
+        }
+        child.on("error", (err) => done(fail(err.code === "ENOENT" ? runCopy.notFound(cmd) : runCopy.couldntStart(cmd, err.message))));
+        // The agent's own exit code; killed by a signal, 128 + its number, as a shell reports it.
+        child.on("exit", (code, signal) => done(code ?? 128 + (signal ? constants.signals[signal] ?? 0 : 0)));
+    });
+}
+//# sourceMappingURL=run.js.map

package/dist/sandbox/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/sandbox/run.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,2EAA2E;AAC3E,2EAA2E;AAC3E,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,wEAAwE;AAExE,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC/F,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,6FAA6F;AAC7F,MAAM,WAAW,GAAG,sEAAsE,CAAC;AAE3F,qEAAqE;AACrE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,gBAAgB,CAAU,CAAC;AAG3G,4HAA4H;AAC5H,MAAM,aAAa,GAAG,CAAC,oBAAoB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;AAE5G,2GAA2G;AAC3G,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,EAAE,CAAC;AAEpF,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,OAAO,EAAE,gEAAgE;IACzE,MAAM,EAAE,yGAAyG;IACjH,UAAU,EAAE,mGAAmG;IAC/G,YAAY,EAAE,mGAAmG;IACjH,iBAAiB,EAAE,CAAC,IAAc,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,8FAA8F,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,yCAAyC;IACtR,MAAM,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,qCAAqC,GAAG,IAAI;IACrE,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,2BAA2B,IAAI,gGAAgG;IAC1J,SAAS,EAAE,2BAA2B;IACtC,QAAQ,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,oBAAoB,GAAG,+DAA+D,OAAO,EAAE;IAC1H,YAAY,EAAE,CAAC,GAAW,EAAE,GAAW,EAAE,EAAE,CAAC,oBAAoB,GAAG,OAAO,GAAG,IAAI,OAAO,EAAE;CAC3F,CAAC;AAEF,yHAAyH;AACzH,MAAM,UAAU,cAAc,CAAC,QAAqB,EAAE,GAAW;IAC/D,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrC,IAAI,QAAQ,KAAK,cAAc;QAAE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACvF,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAG,IAAI,KAAK,EAAE,CAAC;IACnF,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,qJAAqJ;AACrJ,MAAM,UAAU,eAAe,CAAC,QAAqB,EAAE,GAAW;IAChE,MAAM,CAAC,GAAG,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACxC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AACzG,CAAC;AAED,yIAAyI;AACzI,MAAM,UAAU,iBAAiB,CAAC,GAAsB,EAAE,MAAyB;IACjF,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC;YACjD,OAAO,IAAI,KAAK,gBAAgB,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,GAAG,GAAsB,EAAE;IACnE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IACpH,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAC3C,gIAAgI;IAChI,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;IAC/E,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACpD,CAAC;AAOD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAI/C,MAAM,QAAQ,GAAU,EAAE,IAAI,QAAQ,KAAK,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;AAE1G,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,CAAU,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG,EAAE,KAAK,GAAU,QAAQ;IACjG,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,GAAG,GAAG,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,CAAC,KAAK,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,WAAW;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC;YACpE,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACvC,IAAI,SAAS,IAAI,OAAO;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,+FAA+F;IAC/F,IAAI,CAAC,GAAG,CAAC,qBAAqB;QAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;IAEhE,qGAAqG;IACrG,MAAM,QAAQ,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC;IACpD,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;IACjC,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QACrC,8FAA8F;QAC9F,iGAAiG;QACjG,iGAAiG;QACjG,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;QACvD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE;YAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,QAAQ;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,IAAI,KAA+B,CAAC;QACpC,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,+EAA+E;YAC/E,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAqB,EAAE,CAAC;YACtE,MAAM,CAAC,GAAG,GAAG,EAAE,GAAG,IAAI,GAAG,KAAK,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3D,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACrB,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACtJ,0FAA0F;QAC1F,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxG,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@whiteroom-ai/cli",
-  "version": "2.0.1",
+  "version": "2.1.0",
   "description": "CLI for WhiteRoom — manage AI agent fleets from the terminal",
   "type": "module",
   "bin": {

package/starters/wr-adapter.mjs

@@ -34,6 +34,10 @@ const anthropic = !["OPENAI_API_KEY", "AZURE_OPENAI_API_KEY"].includes(KEY_VAR);
 const DEFAULT_MODEL = anthropic ? "claude-haiku-4-5" : "gpt-4o-mini";
 const BLOCKED = "Stopped: one of my WhiteRoom controls blocked the model call.";
 const GONE = "Stopped: WhiteRoom closed this practice task.";
+// WhiteRoom asks for the same call again shortly: it was refused before anything was sent on.
+// This list, the pause and daily-limit messages and the UTC reset time match the CLI's own
+// (src/responses.ts); test/free-tier.test.ts checks they stay the same.
+const BUSY = ["sandbox_busy", "control_busy", "cleanup_busy", "db_unavailable"];
 
 // One model call through WhiteRoom; a final answer (text) if WhiteRoom stopped it.
 // Never follows a redirect, so the key only goes to WhiteRoom.
@@ -48,7 +52,13 @@ async function model(base_url, headers, body) {
       body: JSON.stringify(body), redirect: "error", signal: AbortSignal.timeout(180_000) });
     if (res.ok) return res.json();
     const wr = (await res.json().catch(() => null))?.whiteroom;
-    const wait = res.status === 503 && wr ? ["WhiteRoom is switching servers. Waiting, then trying again.", Number(res.headers.get("retry-after") || 1)]
+    if (wr?.reason === "free_paused") throw new Error("Sandbox is paused for Free accounts right now. Try again later.");
+    if (wr?.reason === "sandbox_daily_limit") {
+      const at = Number.isFinite(Date.parse(wr.resetAt)) ? new Date(wr.resetAt).toISOString().slice(11, 16) : "00:00";
+      throw new Error(`Your Sandbox has used all its calls for today. They reset at ${at} UTC.`);
+    }
+    const wait = res.status === 503 && BUSY.includes(wr?.reason) ? ["WhiteRoom is busy right now. Waiting, then trying again.", Number(res.headers.get("retry-after") || 1)]
+      : res.status === 503 && wr ? ["WhiteRoom is switching servers. Waiting, then trying again.", Number(res.headers.get("retry-after") || 1)]
       : res.status === 429 && wr ? ["WhiteRoom is saving a summary of your agent's memory. Waiting until it's saved.", 2]
       : res.status === 403 && wr?.retryable ? ["One of your WhiteRoom controls is limiting calls. Waiting, then trying again.", 10]
       : [429, 500, 502, 503, 529].includes(res.status) && !wr && tries < 5 ? ["Your model provider is busy. Waiting, then trying again.", 5 * tries] : null;

package/starters/wr_adapter.py

@@ -5,6 +5,7 @@
 # back) and finish with one {"type":"final","output":"..."} line. Print your
 # own logs to stderr: stdout is only for these JSON lines.
 import json, os, sys, time, urllib.error, urllib.request
+from datetime import datetime, timezone
 
 # The CLI sets only the variable of the provider the practice test uses.
 # It decides the API: chat completions for OpenAI and Azure OpenAI (where the
@@ -23,6 +24,10 @@ ANTHROPIC = KEY_VAR not in ("OPENAI_API_KEY", "AZURE_OPENAI_API_KEY")
 DEFAULT_MODEL = "claude-haiku-4-5" if ANTHROPIC else "gpt-4o-mini"
 BLOCKED = "Stopped: one of my WhiteRoom controls blocked the model call."
 GONE = "Stopped: WhiteRoom closed this practice task."
+# WhiteRoom asks for the same call again shortly: it was refused before anything was sent on.
+# This list, the pause and daily-limit messages and the UTC reset time match the CLI's own
+# (src/responses.ts); test/free-tier.test.ts checks they stay the same.
+BUSY = ("sandbox_busy", "control_busy", "cleanup_busy", "db_unavailable")
 calls = 0
 
 
@@ -71,7 +76,18 @@ def model(base_url, headers, body):
                 wr = json.load(err).get("whiteroom")
             except Exception:
                 wr = None
-            if err.code == 503 and wr:
+            reason = wr.get("reason") if isinstance(wr, dict) else None
+            if reason == "free_paused":
+                raise RuntimeError("Sandbox is paused for Free accounts right now. Try again later.") from None
+            if reason == "sandbox_daily_limit":
+                try:
+                    at = datetime.fromisoformat(str(wr.get("resetAt")).replace("Z", "+00:00")).astimezone(timezone.utc).strftime("%H:%M")
+                except ValueError:
+                    at = "00:00"
+                raise RuntimeError(f"Your Sandbox has used all its calls for today. They reset at {at} UTC.") from None
+            if err.code == 503 and reason in BUSY:
+                wait = ("WhiteRoom is busy right now. Waiting, then trying again.", float(err.headers.get("retry-after") or 1))
+            elif err.code == 503 and wr:
                 wait = ("WhiteRoom is switching servers. Waiting, then trying again.", float(err.headers.get("retry-after") or 1))
             elif err.code == 429 and wr:
                 wait = ("WhiteRoom is saving a summary of your agent's memory. Waiting until it's saved.", 2)