deepline 0.1.313 → 0.1.314

package/dist/bundling-sources/sdk/src/play.ts

@@ -198,16 +198,12 @@ export type PlayBindings = {
     /** Stop the run before a billed action would push total run credits above this cap. */
     maxCreditsPerRun?: number;
   };
-  /** Requested sandbox envelope; the server enforces the final allowed limits. */
+  /** Requested prebuilt sandbox and runtime deadline. */
   runtime?: {
     /** Duration such as `"90m"` or `"2h"`. */
     timeout?: string;
-    /** Memory such as `"4GiB"`. */
-    memory?: string;
-    /** Whole vCPU count. */
-    cpu?: number;
-    /** Disk such as `"10GiB"`. */
-    disk?: string;
+    /** Deepline-managed prebuilt sandbox size. */
+    size?: 'standard';
   };
   /** Webhook trigger with optional HMAC signature verification. */
   webhook?: {
@@ -1204,7 +1200,7 @@ export type DefinePlayConfig<TInput, TOutput extends PlayReturnObject> = {
   bindings?: PlayBindings;
   /** Billing options. */
   billing?: PlayBindings['billing'];
-  /** Requested sandbox envelope; the server enforces the final allowed limits. */
+  /** Requested prebuilt sandbox and runtime deadline. */
   runtime?: PlayBindings['runtime'];
   /** Runtime compatibility override. Omit for the current typed contract. */
   compatibility?: PlayBindings['compatibility'];
@@ -1367,7 +1363,7 @@ export type DefinedPlay<TInput, TOutput extends PlayReturnObject> = ((
   DeeplineNamedPlay<TInput, TOutput> & {
     /** Optional trigger bindings (cron, webhook). */
     readonly bindings?: PlayBindings;
-    /** Requested sandbox envelope. */
+    /** Requested prebuilt sandbox and runtime deadline. */
     readonly runtime?: PlayBindings['runtime'];
     /** Runtime compatibility explicitly selected by the author. */
     readonly compatibility?: PlayBindings['compatibility'];

package/dist/bundling-sources/sdk/src/release.ts

@@ -157,7 +157,7 @@ export const SDK_RELEASE = {
   // 0.1.253 makes play-page browser opening opt-in and retires --no-open.
   // 0.1.254 removes the internal operations tree from the published SDK CLI.
   // Operators use the checkout-local deepline-admin binary instead.
-  version: '0.1.313',
+  version: '0.1.314',
   contracts: {
     api: {
       name: 'sdk-http-api',

package/dist/bundling-sources/shared_libs/play-runtime/context.ts

@@ -1291,6 +1291,12 @@ function createPacingResolver(
 export class PlayContextImpl {
   private rowStates = new Map<number, RowState>();
   private toolCallQueue: ToolCallRequest[] = [];
+  private pendingRuntimeToolOwnershipAssertions: Array<{
+    targets: Array<{ receiptKey: string; leaseId: string }>;
+    resolve: () => void;
+    reject: (error: unknown) => void;
+  }> = [];
+  private runtimeToolOwnershipAssertionFlushScheduled = false;
   /**
    * Direct durable boundaries (including ctx.fetch) arrive independently from
    * concurrent map rows. Hold one microtask's worth so they can use the bulk
@@ -2094,17 +2100,19 @@ export class PlayContextImpl {
     try {
       const receipts = await this.dispatchChunkedRuntimeReceiptRequest(
         requests,
-        (chunk) =>
-          claimReceipts({
+        (chunk) => {
+          const leaseId = `receipt-lease:${crypto.randomUUID()}`;
+          return claimReceipts({
             keys: chunk.map((request) => request.key),
-            leaseIds: chunk.map(() => `receipt-lease:${crypto.randomUUID()}`),
+            leaseIds: chunk.map(() => leaseId),
             runId: this.currentReceiptOwnerRunId,
             runAttempt: this.currentRunAttempt,
             leaseAware: true,
             ...(first.reclaimRunning ? { reclaimRunning: true } : {}),
             ...(first.forceRefresh ? { forceRefresh: true } : {}),
             ...(first.forceFailedRefresh ? { forceFailedRefresh: true } : {}),
-          }),
+          });
+        },
       );
       for (let index = 0; index < requests.length; index += 1) {
         const request = requests[index]!;
@@ -2203,59 +2211,148 @@ export class PlayContextImpl {
   private async assertRuntimeToolReceiptOwnership(
     requests: ToolCallRequest[],
   ): Promise<void> {
-    const targets = requests.flatMap((request) => {
+    const targets = this.runtimeToolReceiptOwnershipTargets(requests);
+    if (targets.length === 0) return;
+
+    return await new Promise<void>((resolve, reject) => {
+      this.pendingRuntimeToolOwnershipAssertions.push({
+        targets,
+        resolve,
+        reject,
+      });
+      if (this.runtimeToolOwnershipAssertionFlushScheduled) return;
+      this.runtimeToolOwnershipAssertionFlushScheduled = true;
+      queueMicrotask(() => void this.flushRuntimeToolOwnershipAssertionBatch());
+    });
+  }
+
+  private runtimeToolReceiptOwnershipTargets(
+    requests: ToolCallRequest[],
+  ): Array<{ receiptKey: string; leaseId: string }> {
+    return requests.flatMap((request) => {
       const receiptKey = request.receiptKey?.trim() || null;
       if (!receiptKey) return [];
       const leaseId = request.receiptLeaseId?.trim() || null;
       if (!leaseId) return [];
       return [{ receiptKey, leaseId }];
     });
-    if (targets.length === 0) return;
+  }
 
+  private async renewRuntimeToolReceiptOwnership(
+    requests: ToolCallRequest[],
+  ): Promise<void> {
+    const targets = this.runtimeToolReceiptOwnershipTargets(requests);
+    if (targets.length === 0) return;
+    if (!this.#options.heartbeatRuntimeStepReceipts) {
+      return await this.assertRuntimeToolReceiptOwnership(requests);
+    }
     const byLeaseId = new Map<string, string[]>();
     for (const target of targets) {
       const keys = byLeaseId.get(target.leaseId) ?? [];
       keys.push(target.receiptKey);
       byLeaseId.set(target.leaseId, keys);
     }
-
-    if (this.#options.heartbeatRuntimeStepReceipts) {
-      for (const [leaseId, keys] of byLeaseId) {
-        const receipts = await this.#options.heartbeatRuntimeStepReceipts({
+    await Promise.all(
+      [...byLeaseId].map(async ([leaseId, keys]) => {
+        const receipts = await this.#options.heartbeatRuntimeStepReceipts!({
           runId: this.currentReceiptOwnerRunId,
           runAttempt: this.currentRunAttempt,
           leaseId,
           keys,
         });
         this.assertRuntimeToolReceiptHeartbeatResult(keys, leaseId, receipts);
+      }),
+    );
+  }
+
+  private async flushRuntimeToolOwnershipAssertionBatch(): Promise<void> {
+    this.runtimeToolOwnershipAssertionFlushScheduled = false;
+    const assertions = this.pendingRuntimeToolOwnershipAssertions.splice(0);
+    if (assertions.length === 0) return;
+    const targets = assertions.flatMap((assertion) => assertion.targets);
+
+    if (this.#options.heartbeatRuntimeStepReceipts) {
+      try {
+        const byLeaseId = new Map<string, string[]>();
+        for (const target of targets) {
+          const keys = byLeaseId.get(target.leaseId) ?? [];
+          keys.push(target.receiptKey);
+          byLeaseId.set(target.leaseId, keys);
+        }
+        const renewed = new Map<string, RuntimeStepReceipt | null>();
+        await Promise.all(
+          [...byLeaseId].map(async ([leaseId, keys]) => {
+            const receipts = await this.#options.heartbeatRuntimeStepReceipts!({
+              runId: this.currentReceiptOwnerRunId,
+              runAttempt: this.currentRunAttempt,
+              leaseId,
+              keys,
+            });
+            for (let index = 0; index < keys.length; index += 1) {
+              renewed.set(keys[index]!, receipts[index] ?? null);
+            }
+          }),
+        );
+        for (const assertion of assertions) {
+          const lost = assertion.targets.find((target) => {
+            const receipt = renewed.get(target.receiptKey);
+            return !this.runtimeToolReceiptStillOwned(receipt, target.leaseId);
+          });
+          if (lost) {
+            assertion.reject(
+              new RuntimeReceiptLeaseLostError({
+                receiptKey: lost.receiptKey,
+                runId: this.currentReceiptOwnerRunId,
+                leaseId: lost.leaseId,
+              }),
+            );
+          } else {
+            assertion.resolve();
+          }
+        }
+      } catch (error) {
+        for (const assertion of assertions) assertion.reject(error);
       }
       return;
     }
 
     if (
-      !this.#options.getRuntimeStepReceipt &&
-      !this.#options.getRuntimeStepReceipts
+      this.#options.getRuntimeStepReceipt ||
+      this.#options.getRuntimeStepReceipts
     ) {
-      throw new RuntimeReceiptLeaseLostError({
-        receiptKey: targets[0]?.receiptKey ?? 'unknown',
-        runId: this.currentReceiptOwnerRunId,
-        leaseId: targets[0]?.leaseId ?? 'unknown',
-      });
-    }
-
-    const latest = await this.getRuntimeStepReceipts(
-      targets.map((target) => target.receiptKey),
-    );
-    for (const target of targets) {
-      const receipt = latest.get(target.receiptKey);
-      if (!this.runtimeToolReceiptStillOwned(receipt, target.leaseId)) {
-        throw new RuntimeReceiptLeaseLostError({
-          receiptKey: target.receiptKey,
-          runId: this.currentReceiptOwnerRunId,
-          leaseId: target.leaseId,
-        });
+      try {
+        const latest = await this.getRuntimeStepReceipts(
+          targets.map((target) => target.receiptKey),
+        );
+        for (const assertion of assertions) {
+          const lost = assertion.targets.find((target) => {
+            const receipt = latest.get(target.receiptKey);
+            return !this.runtimeToolReceiptStillOwned(receipt, target.leaseId);
+          });
+          if (lost) {
+            assertion.reject(
+              new RuntimeReceiptLeaseLostError({
+                receiptKey: lost.receiptKey,
+                runId: this.currentReceiptOwnerRunId,
+                leaseId: lost.leaseId,
+              }),
+            );
+          } else {
+            assertion.resolve();
+          }
+        }
+      } catch (error) {
+        for (const assertion of assertions) assertion.reject(error);
       }
+      return;
     }
+
+    const error = new RuntimeReceiptLeaseLostError({
+      receiptKey: targets[0]?.receiptKey ?? 'unknown',
+      runId: this.currentReceiptOwnerRunId,
+      leaseId: targets[0]?.leaseId ?? 'unknown',
+    });
+    for (const assertion of assertions) assertion.reject(error);
   }
 
   private assertRuntimeToolReceiptHeartbeatResult(
@@ -2458,22 +2555,23 @@ export class PlayContextImpl {
     if (uniqueKeys.length === 0) return new Map();
     const claimReceipts = this.#options.claimRuntimeStepReceipts;
     const receipts = claimReceipts
-      ? await this.dispatchChunkedRuntimeReceiptRequest(uniqueKeys, (chunk) =>
-          claimReceipts({
+      ? await this.dispatchChunkedRuntimeReceiptRequest(uniqueKeys, (chunk) => {
+          const leaseId = `receipt-lease:${crypto.randomUUID()}`;
+          return claimReceipts({
             keys: chunk,
             // A transport retry can replay this mutation after the store
             // committed but before the response body was consumed. Stable
             // caller-owned tokens distinguish that replay from a concurrent
             // claimant without weakening the provider-call execution fence.
-            leaseIds: chunk.map(() => `receipt-lease:${crypto.randomUUID()}`),
+            leaseIds: chunk.map(() => leaseId),
             runId: this.currentReceiptOwnerRunId,
             runAttempt: this.currentRunAttempt,
             leaseAware: true,
             ...(reclaimRunning ? { reclaimRunning: true } : {}),
             ...(forceRefresh ? { forceRefresh: true } : {}),
             ...(forceFailedRefresh ? { forceFailedRefresh: true } : {}),
-          }),
-        )
+          });
+        })
       : await Promise.all(
           uniqueKeys.map((key) =>
             this.claimRuntimeStepReceipt(
@@ -8286,7 +8384,7 @@ export class PlayContextImpl {
                     executionAuthScopeDigest: owner.executionAuthScopeDigest,
                     receiptLeaseExpiresAt: owner.receiptLeaseExpiresAt,
                     heartbeatReceipt: () =>
-                      this.assertRuntimeToolReceiptOwnership([owner]),
+                      this.renewRuntimeToolReceiptOwnership([owner]),
                     providerIdempotencyKey:
                       this.providerIdempotencyKeyForToolCall({
                         cacheKey: owner.cacheKey,
@@ -8563,7 +8661,7 @@ export class PlayContextImpl {
                         batch.memberRequests,
                       ),
                     heartbeatReceipt: () =>
-                      this.assertRuntimeToolReceiptOwnership(
+                      this.renewRuntimeToolReceiptOwnership(
                         batch.memberRequests,
                       ),
                   },
@@ -8726,7 +8824,7 @@ export class PlayContextImpl {
                             }),
                           receiptLeaseExpiresAt: request.receiptLeaseExpiresAt,
                           heartbeatReceipt: () =>
-                            this.assertRuntimeToolReceiptOwnership([request]),
+                            this.renewRuntimeToolReceiptOwnership([request]),
                         }
                       : {}),
                     timeoutMs: resolveRuntimeTimeoutMsForClaimedOwners([

package/dist/bundling-sources/shared_libs/play-runtime/runner-backends/backends/daytona-lifecycle.ts

@@ -1,33 +1,29 @@
-import {
-  Image,
-  type CreateSandboxFromImageParams,
-  type Daytona,
-} from '@daytonaio/sdk';
-import { DAYTONA_DEFAULT_WORKDIR } from '@shared_libs/play-runtime/daytona-runtime-config';
+import { type Daytona } from '@daytonaio/sdk';
 import type {
   PlayRunnerExecutionConfig,
   PlayRunnerResult,
 } from '@shared_libs/play-runtime/protocol';
 import { isIsolatedRuntimeSchedulerSchema } from '@shared_libs/play-runtime/runtime-scheduler-topology';
 import { PLAY_RUNNER_TIMEOUT_SECONDS } from '@shared_libs/play-runtime/runtime-constants';
-import { resolvePlaySandboxRuntimeLimits } from '@shared_libs/play-runtime/sandbox-runtime-limits';
+import {
+  STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS,
+  validatePlaySandboxRuntimeLimits,
+} from '@shared_libs/play-runtime/sandbox-runtime-limits';
 
 const DAYTONA_CREATE_TIMEOUT_SECONDS = 10;
-const DAYTONA_CUSTOM_RESOURCE_CREATE_TIMEOUT_SECONDS = 120;
 const DAYTONA_CREATE_RETRY_DELAYS_MS = [0, 500, 1_500] as const;
 // Explicit runner deadline + scheduler GC own the normal lifecycle. Daytona's
 // inactivity stop is a wider crash backstop measured from sandbox creation, so
 // setup time cannot consume the terminal-flush grace.
 const DAYTONA_AUTO_ARCHIVE_INTERVAL_MINUTES = 15;
 const DAYTONA_SANDBOX_LABEL_SOURCE = 'deepline-play-runner';
-const DAYTONA_CUSTOM_RESOURCE_IMAGE = Image.base(
-  'node:20-bookworm-slim',
-).workdir(DAYTONA_DEFAULT_WORKDIR);
-// Daytona's default image is the fast path. Resources are pinned at creation
-// and verified during acquisition, before customer code or billing starts.
-export const DAYTONA_SANDBOX_CPU = 1;
-export const DAYTONA_SANDBOX_MEMORY_GIB = 1;
-export const DAYTONA_SANDBOX_DISK_GIB = 3;
+// Daytona's Deepline-managed default snapshot is the only admitted prebuilt.
+// Resources are verified during acquisition, before customer code or billing.
+export const DAYTONA_SANDBOX_CPU = STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS.cpu;
+export const DAYTONA_SANDBOX_MEMORY_GIB =
+  STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS.memoryGiB;
+export const DAYTONA_SANDBOX_DISK_GIB =
+  STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS.diskGiB;
 export const DAYTONA_SANDBOX_GPU = 0;
 const DAYTONA_NETWORK_ALLOW_LIST_ENV = 'DEEPLINE_DAYTONA_NETWORK_ALLOW_LIST';
 
@@ -182,15 +178,10 @@ async function createOneShotDaytonaSandbox(input: {
   orgId: string;
   context: DaytonaExecutionContext;
 }): Promise<DaytonaSandbox> {
-  const limits = resolvePlaySandboxRuntimeLimits(
-    input.context.sandboxRuntimeLimits
-      ? {
-          timeout: `${input.context.sandboxRuntimeLimits.timeoutSeconds / 60}m`,
-          memory: `${input.context.sandboxRuntimeLimits.memoryGiB}GiB`,
-          cpu: input.context.sandboxRuntimeLimits.cpu,
-          disk: `${input.context.sandboxRuntimeLimits.diskGiB}GiB`,
-        }
-      : null,
+  const limits = validatePlaySandboxRuntimeLimits(
+    input.context.sandboxRuntimeLimits ?? {
+      ...STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS,
+    },
   );
   const orgId = normalizeLabelValue(input.orgId);
   const workflowId = normalizeLabelValue(input.context.workflowId);
@@ -213,10 +204,6 @@ async function createOneShotDaytonaSandbox(input: {
     runtimeSchedulerSchema: input.context.runtimeSchedulerSchema ?? null,
   });
 
-  const hasCustomResources =
-    limits.cpu !== DAYTONA_SANDBOX_CPU ||
-    limits.memoryGiB !== DAYTONA_SANDBOX_MEMORY_GIB ||
-    limits.diskGiB !== DAYTONA_SANDBOX_DISK_GIB;
   const commonParams = {
     labels,
     ephemeral: true,
@@ -232,25 +219,6 @@ async function createOneShotDaytonaSandbox(input: {
     // contradictory flag.
     ...(networkAllowList ? { networkAllowList } : {}),
   };
-  if (hasCustomResources) {
-    // Daytona fixes resources into snapshots and rejects a resources field on
-    // snapshot/default-image creates. Its supported custom-resource path
-    // builds from an OCI image and applies CPU, memory, and disk at creation.
-    const createParams: CreateSandboxFromImageParams = {
-      ...commonParams,
-      image: DAYTONA_CUSTOM_RESOURCE_IMAGE,
-      resources: {
-        cpu: limits.cpu,
-        memory: limits.memoryGiB,
-        disk: limits.diskGiB,
-      },
-    };
-    return input.daytona.create(createParams, {
-      timeout: DAYTONA_CUSTOM_RESOURCE_CREATE_TIMEOUT_SECONDS,
-    });
-  }
-  // Keep the fast default snapshot for standard resources, including plays
-  // that override timeout only.
   return input.daytona.create(commonParams, {
     timeout: DAYTONA_CREATE_TIMEOUT_SECONDS,
   });
@@ -316,15 +284,10 @@ async function acquireOneShotDaytonaSandbox(input: {
   emitStage: DaytonaStageEmitter;
   startedAt: number;
 }): Promise<AcquiredDaytonaSandbox> {
-  const limits = resolvePlaySandboxRuntimeLimits(
-    input.context.sandboxRuntimeLimits
-      ? {
-          timeout: `${input.context.sandboxRuntimeLimits.timeoutSeconds / 60}m`,
-          memory: `${input.context.sandboxRuntimeLimits.memoryGiB}GiB`,
-          cpu: input.context.sandboxRuntimeLimits.cpu,
-          disk: `${input.context.sandboxRuntimeLimits.diskGiB}GiB`,
-        }
-      : null,
+  const limits = validatePlaySandboxRuntimeLimits(
+    input.context.sandboxRuntimeLimits ?? {
+      ...STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS,
+    },
   );
   input.emitStage('create:start');
   const result = await createRetriedOneShotDaytonaSandbox(input);
@@ -334,42 +297,6 @@ async function acquireOneShotDaytonaSandbox(input: {
     diskGiB: result.sandbox.disk,
     gpu: result.sandbox.gpu ?? 0,
   };
-  // Compatibility fallback for Daytona targets that ignore create-time
-  // resources but still support resize. The hosted target should normally
-  // match immediately; either path is verified before code or billing starts.
-  if (
-    typeof result.sandbox.resize === 'function' &&
-    (granted.cpu !== limits.cpu ||
-      granted.memoryGiB !== limits.memoryGiB ||
-      granted.diskGiB !== limits.diskGiB)
-  ) {
-    try {
-      if (granted.diskGiB !== limits.diskGiB) {
-        await result.sandbox.stop(60);
-        await result.sandbox.resize({
-          cpu: limits.cpu,
-          memory: limits.memoryGiB,
-          disk: limits.diskGiB,
-        });
-        await result.sandbox.start(60);
-      } else {
-        await result.sandbox.resize({
-          cpu: limits.cpu,
-          memory: limits.memoryGiB,
-          disk: limits.diskGiB,
-        });
-      }
-    } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      return await rejectAcquiredSandbox(
-        result.sandbox,
-        `Daytona sandbox resize failed before execution: ${message}.`,
-      );
-    }
-    granted.cpu = result.sandbox.cpu;
-    granted.memoryGiB = result.sandbox.memory;
-    granted.diskGiB = result.sandbox.disk;
-  }
   if (
     granted.cpu !== limits.cpu ||
     granted.memoryGiB !== limits.memoryGiB ||

package/dist/bundling-sources/shared_libs/play-runtime/sandbox-runtime-limits.ts

@@ -5,36 +5,38 @@ export type PlaySandboxRuntimeLimits = {
   diskGiB: number;
 };
 
+export type PlaySandboxSize = 'standard';
+
+export const PLAY_SANDBOX_SIZE_LIMITS = {
+  standard: {
+    memoryGiB: 1,
+    cpu: 1,
+    diskGiB: 3,
+  },
+} as const satisfies Record<
+  PlaySandboxSize,
+  Omit<PlaySandboxRuntimeLimits, 'timeoutSeconds'>
+>;
+
 export const STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS: PlaySandboxRuntimeLimits = {
   timeoutSeconds: 30 * 60,
-  memoryGiB: 1,
-  cpu: 1,
-  diskGiB: 3,
+  ...PLAY_SANDBOX_SIZE_LIMITS.standard,
 };
 
 // Product-wide ceilings. Organisation entitlements may lower these, but a
 // customer-authored Play can never ask Daytona for an unbounded resource.
 export const MAX_PLAY_SANDBOX_RUNTIME_LIMITS: PlaySandboxRuntimeLimits = {
   timeoutSeconds: 4 * 60 * 60,
-  memoryGiB: 16,
-  cpu: 4,
-  diskGiB: 50,
+  memoryGiB: STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS.memoryGiB,
+  cpu: STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS.cpu,
+  diskGiB: STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS.diskGiB,
 };
 
 export type PlaySandboxRuntimeDeclaration = {
   timeout?: string;
-  memory?: string;
-  cpu?: number;
-  disk?: string;
+  size?: PlaySandboxSize;
 };
 
-function parsePositiveInteger(value: string, unit: string): number | null {
-  const match = new RegExp(`^(\\d+)\\s*${unit}$`, 'i').exec(value.trim());
-  if (!match) return null;
-  const parsed = Number(match[1]);
-  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : null;
-}
-
 function parseTimeout(value: string): number | null {
   const match = /^(\d+)\s*([mh])$/i.exec(value.trim());
   if (!match) return null;
@@ -43,60 +45,65 @@ function parseTimeout(value: string): number | null {
   return amount * (match[2].toLowerCase() === 'h' ? 3600 : 60);
 }
 
-export function resolvePlaySandboxRuntimeLimits(
-  declaration: PlaySandboxRuntimeDeclaration | null | undefined,
+export function validatePlaySandboxRuntimeLimits(
+  value: PlaySandboxRuntimeLimits,
 ): PlaySandboxRuntimeLimits {
   const base = STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS;
-  if (!declaration) return { ...base };
-  const timeoutSeconds = declaration.timeout
-    ? parseTimeout(declaration.timeout)
-    : base.timeoutSeconds;
-  const memoryGiB = declaration.memory
-    ? parsePositiveInteger(declaration.memory, 'GiB')
-    : base.memoryGiB;
-  const diskGiB = declaration.disk
-    ? parsePositiveInteger(declaration.disk, 'GiB')
-    : base.diskGiB;
-  const cpu = declaration.cpu ?? base.cpu;
-  if (
-    timeoutSeconds === null ||
-    memoryGiB === null ||
-    diskGiB === null ||
-    !Number.isSafeInteger(cpu) ||
-    cpu <= 0
-  ) {
-    throw new Error(
-      'Invalid runtime sandbox declaration. Use timeout like "90m" or "2h", memory/disk like "4GiB", and a positive integer cpu.',
-    );
-  }
-  const resolved = { timeoutSeconds, memoryGiB, cpu, diskGiB };
   for (const key of ['memoryGiB', 'cpu', 'diskGiB'] as const) {
-    if (resolved[key] < base[key]) {
+    if (value[key] !== base[key]) {
       throw new Error(
-        `Requested runtime ${key}=${resolved[key]} is below the supported minimum ${base[key]}.`,
+        `Unsupported runtime sandbox resources: ${key}=${value[key]}. ` +
+          `Use runtime.size with a Deepline prebuilt sandbox. Supported sizes: "standard" ` +
+          `(${base.cpu} CPU, ${base.memoryGiB}GiB memory, ${base.diskGiB}GiB disk).`,
       );
     }
   }
-  for (const key of Object.keys(
-    resolved,
-  ) as (keyof PlaySandboxRuntimeLimits)[]) {
-    if (resolved[key] > MAX_PLAY_SANDBOX_RUNTIME_LIMITS[key]) {
-      throw new Error(
-        `Requested runtime ${key}=${resolved[key]} exceeds this organisation's maximum ${MAX_PLAY_SANDBOX_RUNTIME_LIMITS[key]}.`,
-      );
-    }
+  if (
+    !Number.isSafeInteger(value.timeoutSeconds) ||
+    value.timeoutSeconds <= 0
+  ) {
+    throw new Error(
+      'Invalid runtime sandbox timeout. Use timeout like "90m" or "2h".',
+    );
+  }
+  if (value.timeoutSeconds > MAX_PLAY_SANDBOX_RUNTIME_LIMITS.timeoutSeconds) {
+    throw new Error(
+      `Requested runtime timeoutSeconds=${value.timeoutSeconds} exceeds this organisation's maximum ${MAX_PLAY_SANDBOX_RUNTIME_LIMITS.timeoutSeconds}.`,
+    );
   }
-  return resolved;
+  return { ...value };
 }
 
-export function hasNonStandardPlaySandboxRuntimeLimits(
-  value: PlaySandboxRuntimeLimits,
-): boolean {
-  return Object.keys(value).some(
-    (key) =>
-      value[key as keyof PlaySandboxRuntimeLimits] !==
-      STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS[
-        key as keyof PlaySandboxRuntimeLimits
-      ],
+export function resolvePlaySandboxRuntimeLimits(
+  declaration: PlaySandboxRuntimeDeclaration | null | undefined,
+): PlaySandboxRuntimeLimits {
+  const base = STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS;
+  if (!declaration) return { ...base };
+  const unsupportedProperties = Object.keys(declaration).filter(
+    (key) => key !== 'timeout' && key !== 'size',
   );
+  if (unsupportedProperties.length > 0) {
+    throw new Error(
+      `Unsupported runtime sandbox option${unsupportedProperties.length === 1 ? '' : 's'}: ${unsupportedProperties.join(', ')}. ` +
+        'Use runtime.size with a Deepline prebuilt sandbox. Supported sizes: "standard".',
+    );
+  }
+  if (declaration.size !== undefined && declaration.size !== 'standard') {
+    throw new Error(
+      `Unsupported runtime sandbox size "${String(declaration.size)}". Supported sizes: "standard".`,
+    );
+  }
+  const timeoutSeconds = declaration.timeout
+    ? parseTimeout(declaration.timeout)
+    : base.timeoutSeconds;
+  if (timeoutSeconds === null) {
+    throw new Error(
+      'Invalid runtime sandbox timeout. Use timeout like "90m" or "2h".',
+    );
+  }
+  const size = declaration.size ?? 'standard';
+  return validatePlaySandboxRuntimeLimits({
+    timeoutSeconds,
+    ...PLAY_SANDBOX_SIZE_LIMITS[size],
+  });
 }

package/dist/bundling-sources/shared_libs/plays/bundling/index.ts

@@ -887,6 +887,35 @@ function resolveStaticProperty(
   return resolution;
 }
 
+function staticPropertyNames(
+  node: AstNode | null | undefined,
+  context: PlayMetadataExtractionContext,
+  ancestors = new Set<AstNode>(),
+): Set<string> | null {
+  if (!node) return new Set();
+  const object = objectExpressionFromNode(node, context);
+  if (!object || ancestors.has(object)) return null;
+  const nextAncestors = new Set(ancestors).add(object);
+  const names = new Set<string>();
+  for (const property of astArray(object.properties)) {
+    if (property.type === 'SpreadElement') {
+      const spreadNames = staticPropertyNames(
+        isAstNode(property.argument) ? property.argument : null,
+        context,
+        nextAncestors,
+      );
+      if (!spreadNames) return null;
+      for (const name of spreadNames) names.add(name);
+      continue;
+    }
+    if (property.type !== 'Property') return null;
+    const name = propertyNameFromKey(property);
+    if (name === null) return null;
+    names.add(name);
+  }
+  return names;
+}
+
 function staticNumberFromExpression(
   node: AstNode | null | undefined,
   context: PlayMetadataExtractionContext,
@@ -957,30 +986,30 @@ function sandboxRuntimeDeclarationFromOptions(
     directRuntime.kind === 'found' ? directRuntime : bindingRuntime;
   if (runtime.kind !== 'found') return null;
 
+  const propertyNames = staticPropertyNames(runtime.value, context);
+  const unsupportedProperties = propertyNames
+    ? [...propertyNames].filter(
+        (propertyName) => propertyName !== 'timeout' && propertyName !== 'size',
+      )
+    : [];
+  if (unsupportedProperties.length > 0) {
+    throw new Error(
+      `Unsupported runtime sandbox option${unsupportedProperties.length === 1 ? '' : 's'} "${unsupportedProperties.join('", "')}". ` +
+        'Use runtime.size with a Deepline prebuilt sandbox. Supported sizes: "standard".',
+    );
+  }
   const timeout = resolveStaticProperty(runtime.value, 'timeout', context);
-  const memory = resolveStaticProperty(runtime.value, 'memory', context);
-  const cpu = resolveStaticProperty(runtime.value, 'cpu', context);
-  const disk = resolveStaticProperty(runtime.value, 'disk', context);
+  const size = resolveStaticProperty(runtime.value, 'size', context);
   const declaration: PlaySandboxRuntimeDeclaration = {};
   if (timeout.kind === 'found') {
     const value = staticStringFromExpression(timeout.value, context);
     if (value === null) return null;
     declaration.timeout = value;
   }
-  if (memory.kind === 'found') {
-    const value = staticStringFromExpression(memory.value, context);
-    if (value === null) return null;
-    declaration.memory = value;
-  }
-  if (cpu.kind === 'found') {
-    const value = staticNumberFromExpression(cpu.value, context);
-    if (value === null) return null;
-    declaration.cpu = value;
-  }
-  if (disk.kind === 'found') {
-    const value = staticStringFromExpression(disk.value, context);
+  if (size.kind === 'found') {
+    const value = staticStringFromExpression(size.value, context);
     if (value === null) return null;
-    declaration.disk = value;
+    declaration.size = value as PlaySandboxRuntimeDeclaration['size'];
   }
   return declaration;
 }
@@ -1596,8 +1625,7 @@ async function analyzeSourceGraph(
   }
   const playName = metadata?.name ?? null;
   const playDescription = metadata?.description ?? null;
-  const sandboxRuntimeDeclaration =
-    metadata?.sandboxRuntimeDeclaration ?? null;
+  const sandboxRuntimeDeclaration = metadata?.sandboxRuntimeDeclaration ?? null;
 
   return {
     sourceCode,

package/dist/cli/index.js

@@ -1037,7 +1037,7 @@ var SDK_RELEASE = {
   // 0.1.253 makes play-page browser opening opt-in and retires --no-open.
   // 0.1.254 removes the internal operations tree from the published SDK CLI.
   // Operators use the checkout-local deepline-admin binary instead.
-  version: "0.1.313",
+  version: "0.1.314",
   contracts: {
     api: {
       name: "sdk-http-api",
@@ -12143,24 +12143,23 @@ function resolveEnabledExecutionProfile(override) {
 }
 
 // ../shared_libs/play-runtime/sandbox-runtime-limits.ts
+var PLAY_SANDBOX_SIZE_LIMITS = {
+  standard: {
+    memoryGiB: 1,
+    cpu: 1,
+    diskGiB: 3
+  }
+};
 var STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS = {
   timeoutSeconds: 30 * 60,
-  memoryGiB: 1,
-  cpu: 1,
-  diskGiB: 3
+  ...PLAY_SANDBOX_SIZE_LIMITS.standard
 };
 var MAX_PLAY_SANDBOX_RUNTIME_LIMITS = {
   timeoutSeconds: 4 * 60 * 60,
-  memoryGiB: 16,
-  cpu: 4,
-  diskGiB: 50
+  memoryGiB: STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS.memoryGiB,
+  cpu: STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS.cpu,
+  diskGiB: STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS.diskGiB
 };
-function parsePositiveInteger3(value, unit) {
-  const match = new RegExp(`^(\\d+)\\s*${unit}$`, "i").exec(value.trim());
-  if (!match) return null;
-  const parsed = Number(match[1]);
-  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : null;
-}
 function parseTimeout(value) {
   const match = /^(\d+)\s*([mh])$/i.exec(value.trim());
   if (!match) return null;
@@ -12168,41 +12167,54 @@ function parseTimeout(value) {
   if (!Number.isSafeInteger(amount) || amount <= 0) return null;
   return amount * (match[2].toLowerCase() === "h" ? 3600 : 60);
 }
-function resolvePlaySandboxRuntimeLimits(declaration) {
+function validatePlaySandboxRuntimeLimits(value) {
   const base = STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS;
-  if (!declaration) return { ...base };
-  const timeoutSeconds = declaration.timeout ? parseTimeout(declaration.timeout) : base.timeoutSeconds;
-  const memoryGiB = declaration.memory ? parsePositiveInteger3(declaration.memory, "GiB") : base.memoryGiB;
-  const diskGiB = declaration.disk ? parsePositiveInteger3(declaration.disk, "GiB") : base.diskGiB;
-  const cpu = declaration.cpu ?? base.cpu;
-  if (timeoutSeconds === null || memoryGiB === null || diskGiB === null || !Number.isSafeInteger(cpu) || cpu <= 0) {
-    throw new Error(
-      'Invalid runtime sandbox declaration. Use timeout like "90m" or "2h", memory/disk like "4GiB", and a positive integer cpu.'
-    );
-  }
-  const resolved = { timeoutSeconds, memoryGiB, cpu, diskGiB };
   for (const key of ["memoryGiB", "cpu", "diskGiB"]) {
-    if (resolved[key] < base[key]) {
+    if (value[key] !== base[key]) {
       throw new Error(
-        `Requested runtime ${key}=${resolved[key]} is below the supported minimum ${base[key]}.`
+        `Unsupported runtime sandbox resources: ${key}=${value[key]}. Use runtime.size with a Deepline prebuilt sandbox. Supported sizes: "standard" (${base.cpu} CPU, ${base.memoryGiB}GiB memory, ${base.diskGiB}GiB disk).`
       );
     }
   }
-  for (const key of Object.keys(
-    resolved
-  )) {
-    if (resolved[key] > MAX_PLAY_SANDBOX_RUNTIME_LIMITS[key]) {
-      throw new Error(
-        `Requested runtime ${key}=${resolved[key]} exceeds this organisation's maximum ${MAX_PLAY_SANDBOX_RUNTIME_LIMITS[key]}.`
-      );
-    }
+  if (!Number.isSafeInteger(value.timeoutSeconds) || value.timeoutSeconds <= 0) {
+    throw new Error(
+      'Invalid runtime sandbox timeout. Use timeout like "90m" or "2h".'
+    );
   }
-  return resolved;
+  if (value.timeoutSeconds > MAX_PLAY_SANDBOX_RUNTIME_LIMITS.timeoutSeconds) {
+    throw new Error(
+      `Requested runtime timeoutSeconds=${value.timeoutSeconds} exceeds this organisation's maximum ${MAX_PLAY_SANDBOX_RUNTIME_LIMITS.timeoutSeconds}.`
+    );
+  }
+  return { ...value };
 }
-function hasNonStandardPlaySandboxRuntimeLimits(value) {
-  return Object.keys(value).some(
-    (key) => value[key] !== STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS[key]
+function resolvePlaySandboxRuntimeLimits(declaration) {
+  const base = STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS;
+  if (!declaration) return { ...base };
+  const unsupportedProperties = Object.keys(declaration).filter(
+    (key) => key !== "timeout" && key !== "size"
   );
+  if (unsupportedProperties.length > 0) {
+    throw new Error(
+      `Unsupported runtime sandbox option${unsupportedProperties.length === 1 ? "" : "s"}: ${unsupportedProperties.join(", ")}. Use runtime.size with a Deepline prebuilt sandbox. Supported sizes: "standard".`
+    );
+  }
+  if (declaration.size !== void 0 && declaration.size !== "standard") {
+    throw new Error(
+      `Unsupported runtime sandbox size "${String(declaration.size)}". Supported sizes: "standard".`
+    );
+  }
+  const timeoutSeconds = declaration.timeout ? parseTimeout(declaration.timeout) : base.timeoutSeconds;
+  if (timeoutSeconds === null) {
+    throw new Error(
+      'Invalid runtime sandbox timeout. Use timeout like "90m" or "2h".'
+    );
+  }
+  const size = declaration.size ?? "standard";
+  return validatePlaySandboxRuntimeLimits({
+    timeoutSeconds,
+    ...PLAY_SANDBOX_SIZE_LIMITS[size]
+  });
 }
 
 // ../shared_libs/play-runtime/worker-api-types.ts
@@ -12265,9 +12277,11 @@ function estimateDaytonaMaximumComputeCredits(limits) {
   );
 }
 function formatNonStandardSandboxRuntimeWarning(limits) {
-  if (!hasNonStandardPlaySandboxRuntimeLimits(limits)) return null;
+  if (limits.timeoutSeconds <= STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS.timeoutSeconds) {
+    return null;
+  }
   const maximumComputeCredits = estimateDaytonaMaximumComputeCredits(limits);
-  return `This Play requests a non-standard sandbox (${limits.timeoutSeconds}s, ${limits.memoryGiB}GiB memory, ${limits.cpu} CPU, ${limits.diskGiB}GiB disk). Maximum compute estimate: ${maximumComputeCredits.toFixed(2)} Deepline credits. It may queue longer.`;
+  return `This Play requests the standard sandbox for up to ${limits.timeoutSeconds}s (${limits.memoryGiB}GiB memory, ${limits.cpu} CPU, ${limits.diskGiB}GiB disk). Maximum compute estimate: ${maximumComputeCredits.toFixed(2)} Deepline credits. Longer runtimes are risky.`;
 }
 
 // ../shared_libs/play-runtime/internal-step-ids.ts
@@ -12829,7 +12843,7 @@ function looksLikeFilePath(target) {
   }
   return target.includes("\\") || /\.(ts|js|mjs|play\.ts)$/.test(target);
 }
-function parsePositiveInteger4(value, flagName) {
+function parsePositiveInteger3(value, flagName) {
   const parsed = Number.parseInt(value, 10);
   if (!Number.isFinite(parsed) || parsed <= 0) {
     throw new Error(`${flagName} must be a positive integer.`);
@@ -16349,7 +16363,7 @@ function parsePlayRunOptions(args) {
       );
     }
     if ((arg === "--tail-timeout-ms" || arg === "--timeout-ms") && args[index + 1]) {
-      waitTimeoutMs = parsePositiveInteger4(args[++index], arg);
+      waitTimeoutMs = parsePositiveInteger3(args[++index], arg);
       continue;
     }
     if (PLAY_RUN_RESERVED_BOOLEAN_FLAGS.has(arg)) {
@@ -17510,7 +17524,7 @@ async function handleRunLogs(args) {
   for (let index = 0; index < args.length; index += 1) {
     const arg = args[index];
     if (arg === "--limit" && args[index + 1]) {
-      limit = parsePositiveInteger4(args[++index], "--limit");
+      limit = parsePositiveInteger3(args[++index], "--limit");
       continue;
     }
     if (arg === "--out" && args[index + 1]) {

package/dist/cli/index.mjs

@@ -1022,7 +1022,7 @@ var SDK_RELEASE = {
   // 0.1.253 makes play-page browser opening opt-in and retires --no-open.
   // 0.1.254 removes the internal operations tree from the published SDK CLI.
   // Operators use the checkout-local deepline-admin binary instead.
-  version: "0.1.313",
+  version: "0.1.314",
   contracts: {
     api: {
       name: "sdk-http-api",
@@ -12172,24 +12172,23 @@ function resolveEnabledExecutionProfile(override) {
 }
 
 // ../shared_libs/play-runtime/sandbox-runtime-limits.ts
+var PLAY_SANDBOX_SIZE_LIMITS = {
+  standard: {
+    memoryGiB: 1,
+    cpu: 1,
+    diskGiB: 3
+  }
+};
 var STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS = {
   timeoutSeconds: 30 * 60,
-  memoryGiB: 1,
-  cpu: 1,
-  diskGiB: 3
+  ...PLAY_SANDBOX_SIZE_LIMITS.standard
 };
 var MAX_PLAY_SANDBOX_RUNTIME_LIMITS = {
   timeoutSeconds: 4 * 60 * 60,
-  memoryGiB: 16,
-  cpu: 4,
-  diskGiB: 50
+  memoryGiB: STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS.memoryGiB,
+  cpu: STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS.cpu,
+  diskGiB: STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS.diskGiB
 };
-function parsePositiveInteger3(value, unit) {
-  const match = new RegExp(`^(\\d+)\\s*${unit}$`, "i").exec(value.trim());
-  if (!match) return null;
-  const parsed = Number(match[1]);
-  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : null;
-}
 function parseTimeout(value) {
   const match = /^(\d+)\s*([mh])$/i.exec(value.trim());
   if (!match) return null;
@@ -12197,41 +12196,54 @@ function parseTimeout(value) {
   if (!Number.isSafeInteger(amount) || amount <= 0) return null;
   return amount * (match[2].toLowerCase() === "h" ? 3600 : 60);
 }
-function resolvePlaySandboxRuntimeLimits(declaration) {
+function validatePlaySandboxRuntimeLimits(value) {
   const base = STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS;
-  if (!declaration) return { ...base };
-  const timeoutSeconds = declaration.timeout ? parseTimeout(declaration.timeout) : base.timeoutSeconds;
-  const memoryGiB = declaration.memory ? parsePositiveInteger3(declaration.memory, "GiB") : base.memoryGiB;
-  const diskGiB = declaration.disk ? parsePositiveInteger3(declaration.disk, "GiB") : base.diskGiB;
-  const cpu = declaration.cpu ?? base.cpu;
-  if (timeoutSeconds === null || memoryGiB === null || diskGiB === null || !Number.isSafeInteger(cpu) || cpu <= 0) {
-    throw new Error(
-      'Invalid runtime sandbox declaration. Use timeout like "90m" or "2h", memory/disk like "4GiB", and a positive integer cpu.'
-    );
-  }
-  const resolved = { timeoutSeconds, memoryGiB, cpu, diskGiB };
   for (const key of ["memoryGiB", "cpu", "diskGiB"]) {
-    if (resolved[key] < base[key]) {
+    if (value[key] !== base[key]) {
       throw new Error(
-        `Requested runtime ${key}=${resolved[key]} is below the supported minimum ${base[key]}.`
+        `Unsupported runtime sandbox resources: ${key}=${value[key]}. Use runtime.size with a Deepline prebuilt sandbox. Supported sizes: "standard" (${base.cpu} CPU, ${base.memoryGiB}GiB memory, ${base.diskGiB}GiB disk).`
       );
     }
   }
-  for (const key of Object.keys(
-    resolved
-  )) {
-    if (resolved[key] > MAX_PLAY_SANDBOX_RUNTIME_LIMITS[key]) {
-      throw new Error(
-        `Requested runtime ${key}=${resolved[key]} exceeds this organisation's maximum ${MAX_PLAY_SANDBOX_RUNTIME_LIMITS[key]}.`
-      );
-    }
+  if (!Number.isSafeInteger(value.timeoutSeconds) || value.timeoutSeconds <= 0) {
+    throw new Error(
+      'Invalid runtime sandbox timeout. Use timeout like "90m" or "2h".'
+    );
   }
-  return resolved;
+  if (value.timeoutSeconds > MAX_PLAY_SANDBOX_RUNTIME_LIMITS.timeoutSeconds) {
+    throw new Error(
+      `Requested runtime timeoutSeconds=${value.timeoutSeconds} exceeds this organisation's maximum ${MAX_PLAY_SANDBOX_RUNTIME_LIMITS.timeoutSeconds}.`
+    );
+  }
+  return { ...value };
 }
-function hasNonStandardPlaySandboxRuntimeLimits(value) {
-  return Object.keys(value).some(
-    (key) => value[key] !== STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS[key]
+function resolvePlaySandboxRuntimeLimits(declaration) {
+  const base = STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS;
+  if (!declaration) return { ...base };
+  const unsupportedProperties = Object.keys(declaration).filter(
+    (key) => key !== "timeout" && key !== "size"
   );
+  if (unsupportedProperties.length > 0) {
+    throw new Error(
+      `Unsupported runtime sandbox option${unsupportedProperties.length === 1 ? "" : "s"}: ${unsupportedProperties.join(", ")}. Use runtime.size with a Deepline prebuilt sandbox. Supported sizes: "standard".`
+    );
+  }
+  if (declaration.size !== void 0 && declaration.size !== "standard") {
+    throw new Error(
+      `Unsupported runtime sandbox size "${String(declaration.size)}". Supported sizes: "standard".`
+    );
+  }
+  const timeoutSeconds = declaration.timeout ? parseTimeout(declaration.timeout) : base.timeoutSeconds;
+  if (timeoutSeconds === null) {
+    throw new Error(
+      'Invalid runtime sandbox timeout. Use timeout like "90m" or "2h".'
+    );
+  }
+  const size = declaration.size ?? "standard";
+  return validatePlaySandboxRuntimeLimits({
+    timeoutSeconds,
+    ...PLAY_SANDBOX_SIZE_LIMITS[size]
+  });
 }
 
 // ../shared_libs/play-runtime/worker-api-types.ts
@@ -12294,9 +12306,11 @@ function estimateDaytonaMaximumComputeCredits(limits) {
   );
 }
 function formatNonStandardSandboxRuntimeWarning(limits) {
-  if (!hasNonStandardPlaySandboxRuntimeLimits(limits)) return null;
+  if (limits.timeoutSeconds <= STANDARD_PLAY_SANDBOX_RUNTIME_LIMITS.timeoutSeconds) {
+    return null;
+  }
   const maximumComputeCredits = estimateDaytonaMaximumComputeCredits(limits);
-  return `This Play requests a non-standard sandbox (${limits.timeoutSeconds}s, ${limits.memoryGiB}GiB memory, ${limits.cpu} CPU, ${limits.diskGiB}GiB disk). Maximum compute estimate: ${maximumComputeCredits.toFixed(2)} Deepline credits. It may queue longer.`;
+  return `This Play requests the standard sandbox for up to ${limits.timeoutSeconds}s (${limits.memoryGiB}GiB memory, ${limits.cpu} CPU, ${limits.diskGiB}GiB disk). Maximum compute estimate: ${maximumComputeCredits.toFixed(2)} Deepline credits. Longer runtimes are risky.`;
 }
 
 // ../shared_libs/play-runtime/internal-step-ids.ts
@@ -12858,7 +12872,7 @@ function looksLikeFilePath(target) {
   }
   return target.includes("\\") || /\.(ts|js|mjs|play\.ts)$/.test(target);
 }
-function parsePositiveInteger4(value, flagName) {
+function parsePositiveInteger3(value, flagName) {
   const parsed = Number.parseInt(value, 10);
   if (!Number.isFinite(parsed) || parsed <= 0) {
     throw new Error(`${flagName} must be a positive integer.`);
@@ -16378,7 +16392,7 @@ function parsePlayRunOptions(args) {
       );
     }
     if ((arg === "--tail-timeout-ms" || arg === "--timeout-ms") && args[index + 1]) {
-      waitTimeoutMs = parsePositiveInteger4(args[++index], arg);
+      waitTimeoutMs = parsePositiveInteger3(args[++index], arg);
       continue;
     }
     if (PLAY_RUN_RESERVED_BOOLEAN_FLAGS.has(arg)) {
@@ -17539,7 +17553,7 @@ async function handleRunLogs(args) {
   for (let index = 0; index < args.length; index += 1) {
     const arg = args[index];
     if (arg === "--limit" && args[index + 1]) {
-      limit = parsePositiveInteger4(args[++index], "--limit");
+      limit = parsePositiveInteger3(args[++index], "--limit");
       continue;
     }
     if (arg === "--out" && args[index + 1]) {

package/dist/index.d.mts

@@ -3844,16 +3844,12 @@ type PlayBindings = {
         /** Stop the run before a billed action would push total run credits above this cap. */
         maxCreditsPerRun?: number;
     };
-    /** Requested sandbox envelope; the server enforces the final allowed limits. */
+    /** Requested prebuilt sandbox and runtime deadline. */
     runtime?: {
         /** Duration such as `"90m"` or `"2h"`. */
         timeout?: string;
-        /** Memory such as `"4GiB"`. */
-        memory?: string;
-        /** Whole vCPU count. */
-        cpu?: number;
-        /** Disk such as `"10GiB"`. */
-        disk?: string;
+        /** Deepline-managed prebuilt sandbox size. */
+        size?: 'standard';
     };
     /** Webhook trigger with optional HMAC signature verification. */
     webhook?: {
@@ -4669,7 +4665,7 @@ type DefinePlayConfig<TInput, TOutput extends PlayReturnObject> = {
     bindings?: PlayBindings;
     /** Billing options. */
     billing?: PlayBindings['billing'];
-    /** Requested sandbox envelope; the server enforces the final allowed limits. */
+    /** Requested prebuilt sandbox and runtime deadline. */
     runtime?: PlayBindings['runtime'];
     /** Runtime compatibility override. Omit for the current typed contract. */
     compatibility?: PlayBindings['compatibility'];
@@ -4713,7 +4709,7 @@ declare function runIf<Row, Value>(predicate: (row: Row, index: number) => boole
 type DefinedPlay<TInput, TOutput extends PlayReturnObject> = ((ctx: DeeplinePlayRuntimeContext, input: TInput) => Promise<TOutput>) & DeeplineNamedPlay<TInput, TOutput> & {
     /** Optional trigger bindings (cron, webhook). */
     readonly bindings?: PlayBindings;
-    /** Requested sandbox envelope. */
+    /** Requested prebuilt sandbox and runtime deadline. */
     readonly runtime?: PlayBindings['runtime'];
     /** Runtime compatibility explicitly selected by the author. */
     readonly compatibility?: PlayBindings['compatibility'];

package/dist/index.d.ts

@@ -3844,16 +3844,12 @@ type PlayBindings = {
         /** Stop the run before a billed action would push total run credits above this cap. */
         maxCreditsPerRun?: number;
     };
-    /** Requested sandbox envelope; the server enforces the final allowed limits. */
+    /** Requested prebuilt sandbox and runtime deadline. */
     runtime?: {
         /** Duration such as `"90m"` or `"2h"`. */
         timeout?: string;
-        /** Memory such as `"4GiB"`. */
-        memory?: string;
-        /** Whole vCPU count. */
-        cpu?: number;
-        /** Disk such as `"10GiB"`. */
-        disk?: string;
+        /** Deepline-managed prebuilt sandbox size. */
+        size?: 'standard';
     };
     /** Webhook trigger with optional HMAC signature verification. */
     webhook?: {
@@ -4669,7 +4665,7 @@ type DefinePlayConfig<TInput, TOutput extends PlayReturnObject> = {
     bindings?: PlayBindings;
     /** Billing options. */
     billing?: PlayBindings['billing'];
-    /** Requested sandbox envelope; the server enforces the final allowed limits. */
+    /** Requested prebuilt sandbox and runtime deadline. */
     runtime?: PlayBindings['runtime'];
     /** Runtime compatibility override. Omit for the current typed contract. */
     compatibility?: PlayBindings['compatibility'];
@@ -4713,7 +4709,7 @@ declare function runIf<Row, Value>(predicate: (row: Row, index: number) => boole
 type DefinedPlay<TInput, TOutput extends PlayReturnObject> = ((ctx: DeeplinePlayRuntimeContext, input: TInput) => Promise<TOutput>) & DeeplineNamedPlay<TInput, TOutput> & {
     /** Optional trigger bindings (cron, webhook). */
     readonly bindings?: PlayBindings;
-    /** Requested sandbox envelope. */
+    /** Requested prebuilt sandbox and runtime deadline. */
     readonly runtime?: PlayBindings['runtime'];
     /** Runtime compatibility explicitly selected by the author. */
     readonly compatibility?: PlayBindings['compatibility'];

package/dist/index.js

@@ -760,7 +760,7 @@ var SDK_RELEASE = {
   // 0.1.253 makes play-page browser opening opt-in and retires --no-open.
   // 0.1.254 removes the internal operations tree from the published SDK CLI.
   // Operators use the checkout-local deepline-admin binary instead.
-  version: "0.1.313",
+  version: "0.1.314",
   contracts: {
     api: {
       name: "sdk-http-api",

package/dist/index.mjs

@@ -686,7 +686,7 @@ var SDK_RELEASE = {
   // 0.1.253 makes play-page browser opening opt-in and retires --no-open.
   // 0.1.254 removes the internal operations tree from the published SDK CLI.
   // Operators use the checkout-local deepline-admin binary instead.
-  version: "0.1.313",
+  version: "0.1.314",
   contracts: {
     api: {
       name: "sdk-http-api",

package/dist/plays/bundle-play-file.d.mts

@@ -40,11 +40,10 @@ type PlayBundleArtifact = {
     cacheHit: boolean;
 };
 
+type PlaySandboxSize = 'standard';
 type PlaySandboxRuntimeDeclaration = {
     timeout?: string;
-    memory?: string;
-    cpu?: number;
-    disk?: string;
+    size?: PlaySandboxSize;
 };
 
 type ImportedPlayDependency = {

package/dist/plays/bundle-play-file.d.ts

@@ -40,11 +40,10 @@ type PlayBundleArtifact = {
     cacheHit: boolean;
 };
 
+type PlaySandboxSize = 'standard';
 type PlaySandboxRuntimeDeclaration = {
     timeout?: string;
-    memory?: string;
-    cpu?: number;
-    disk?: string;
+    size?: PlaySandboxSize;
 };
 
 type ImportedPlayDependency = {

package/dist/plays/bundle-play-file.mjs

@@ -556,6 +556,30 @@ function resolveStaticProperty(node, propertyName, context, ancestors = /* @__PU
   }
   return resolution;
 }
+function staticPropertyNames(node, context, ancestors = /* @__PURE__ */ new Set()) {
+  if (!node) return /* @__PURE__ */ new Set();
+  const object = objectExpressionFromNode(node, context);
+  if (!object || ancestors.has(object)) return null;
+  const nextAncestors = new Set(ancestors).add(object);
+  const names = /* @__PURE__ */ new Set();
+  for (const property of astArray(object.properties)) {
+    if (property.type === "SpreadElement") {
+      const spreadNames = staticPropertyNames(
+        isAstNode(property.argument) ? property.argument : null,
+        context,
+        nextAncestors
+      );
+      if (!spreadNames) return null;
+      for (const name2 of spreadNames) names.add(name2);
+      continue;
+    }
+    if (property.type !== "Property") return null;
+    const name = propertyNameFromKey(property);
+    if (name === null) return null;
+    names.add(name);
+  }
+  return names;
+}
 function staticNumberFromExpression(node, context, seen = /* @__PURE__ */ new Set()) {
   const expression = unwrapStaticExpression(node);
   if (!expression) return null;
@@ -600,30 +624,27 @@ function sandboxRuntimeDeclarationFromOptions(node, context) {
   const bindingRuntime = bindings.kind === "found" ? resolveStaticProperty(bindings.value, "runtime", context) : { kind: "absent" };
   const runtime = directRuntime.kind === "found" ? directRuntime : bindingRuntime;
   if (runtime.kind !== "found") return null;
+  const propertyNames = staticPropertyNames(runtime.value, context);
+  const unsupportedProperties = propertyNames ? [...propertyNames].filter(
+    (propertyName) => propertyName !== "timeout" && propertyName !== "size"
+  ) : [];
+  if (unsupportedProperties.length > 0) {
+    throw new Error(
+      `Unsupported runtime sandbox option${unsupportedProperties.length === 1 ? "" : "s"} "${unsupportedProperties.join('", "')}". Use runtime.size with a Deepline prebuilt sandbox. Supported sizes: "standard".`
+    );
+  }
   const timeout = resolveStaticProperty(runtime.value, "timeout", context);
-  const memory = resolveStaticProperty(runtime.value, "memory", context);
-  const cpu = resolveStaticProperty(runtime.value, "cpu", context);
-  const disk = resolveStaticProperty(runtime.value, "disk", context);
+  const size = resolveStaticProperty(runtime.value, "size", context);
   const declaration = {};
   if (timeout.kind === "found") {
     const value = staticStringFromExpression(timeout.value, context);
     if (value === null) return null;
     declaration.timeout = value;
   }
-  if (memory.kind === "found") {
-    const value = staticStringFromExpression(memory.value, context);
-    if (value === null) return null;
-    declaration.memory = value;
-  }
-  if (cpu.kind === "found") {
-    const value = staticNumberFromExpression(cpu.value, context);
-    if (value === null) return null;
-    declaration.cpu = value;
-  }
-  if (disk.kind === "found") {
-    const value = staticStringFromExpression(disk.value, context);
+  if (size.kind === "found") {
+    const value = staticStringFromExpression(size.value, context);
     if (value === null) return null;
-    declaration.disk = value;
+    declaration.size = value;
   }
   return declaration;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepline",
-  "version": "0.1.313",
+  "version": "0.1.314",
   "description": "Deepline SDK + CLI — B2B data enrichment powered by durable cloud execution",
   "license": "MIT",
   "repository": {