kern-sandbox 0.1.41 → 0.1.42

package/README.md

@@ -242,6 +242,11 @@ so a `runCode` claims one instead of paying for a box start plus an interpreter
 `python:3.12-slim`, six calls each: **14.2 ms p50 by default against 0.8 ms with `prewarm: 4`**, and
 30.9 ms against 0.9 for the first call.
 
+**The pool also fills on that worker thread, so the first call is fast only once it HAS filled.**
+Measured: constructing with `prewarm: 4` and calling immediately gives 13.7 ms five times over,
+while half a second later the same burst reads 0.8, 0.6, 0.5, 0.6 for the first four and then
+32.7 for the fifth, the pool empty. The table is the steady state, not the first moment.
+
 The refill runs while your agent thinks, so it is off the caller's clock. That also says when it buys
 nothing: if calls arrive faster than the pool refills, the pool empties and you are back to the
 default cost. N is the burst you want covered, not a throughput knob.

package/index.js

@@ -36,7 +36,7 @@ const crypto = require("crypto");
 const zlib = require("zlib");
 const { spawn, spawnSync } = require("child_process");
 
-const VERSION = "0.1.41";
+const VERSION = "0.1.42";
 
 const DEFAULT_IMAGE = "python:3.12-slim";
 const WORKSPACE = "/workspace"; // where the persistent workspace is mounted inside every box

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kern-sandbox",
-  "version": "0.1.41",
+  "version": "0.1.42",
   "description": "kern is a fast, rootless sandbox and virtual resource runtime for any workload, including untrusted and AI-generated code; kern-sandbox is its Node/TypeScript binding. Run untrusted or agent-generated code (Python/JS/Bash) in a real, kernel-enforced box in single-digit milliseconds, with no cloud, no account and no VM.",
   "keywords": [
     "sandbox",