promigence 0.1.0-beta.6 → 0.1.0-beta.8

package/README.md

@@ -21,15 +21,13 @@ own (`npm config set prefix ~/.npm-global` and add `~/.npm-global/bin` to your `
 
 ## Create your account
 
-Promigence is in private beta: you need an invite code.
-
 ```sh
 promigence signup
 ```
 
-It asks for your invite code, then opens your browser to create the account. Your API key is saved
-in your system keychain, or in `~/.config/promigence/credentials` (mode 0600) where there is none. On
-another machine, use `promigence login`: it signs you in with a code we email you, or your password. In CI or on an
+It opens your browser to create the account. Your API key is saved in your system keychain, or in
+`~/.config/promigence/credentials` (mode 0600) where there is none.
+On another machine, use `promigence login`: it signs you in with a code we email you. In CI or on an
 agent's machine, set `PROMIGENCE_API_KEY` instead. `promigence doctor` checks the setup.
 
 ## First commands
@@ -57,7 +55,7 @@ promigence fork --snapshot py --count 5 --cap 2
 
 ## For AI agents
 
-Run `promigence agent-guide` (about 1.2k tokens) before driving the CLI: it covers the model, the
+Run `promigence agent-guide` (about 1.4k tokens) before driving the CLI: it covers the model, the
 JSON output contract, exit codes and errors. `promigence agent-guide --install` writes the same
 guidance into your repo for coding agents, and `promigence mcp` serves the CLI as an MCP server.
 Every command takes `--json`.

package/dist/account.js

@@ -4,6 +4,21 @@ import { duration } from "./report.js";
 import { emit, ms, okEnvelope, overMost, parseCount, parseDuration, parseUsd, usageError } from "./io.js";
 import { sh } from "./term.js";
 const usd = (n) => n === undefined ? "—" : `$${n.toFixed(n < 0.01 && n > 0 ? 4 : 2)}`;
+export const PAYMENT_METHOD_NAMES = {
+    apple_pay: "Apple Pay",
+    google_pay: "Google Pay",
+    samsung_pay: "Samsung Pay",
+    link: "Link",
+    cashapp: "Cash App Pay",
+    amazon_pay: "Amazon Pay",
+};
+export function paymentMethodText(card) {
+    const key = card?.brand ?? "";
+    const named = Object.prototype.hasOwnProperty.call(PAYMENT_METHOD_NAMES, key) ? PAYMENT_METHOD_NAMES[key] : undefined;
+    if (named)
+        return card?.last4 ? `${named} •••• ${card.last4}` : named;
+    return `${card?.brand ?? "card"} ••${card?.last4 ?? "??"}`;
+}
 function limitOf(ctx, fallback, most) {
     const raw = str(ctx, "--limit");
     if (raw === undefined)
@@ -208,6 +223,7 @@ const billingUsage = async (ctx) => {
         usage,
         card_on_file: b.card_on_file ?? false,
         ...(b.card ? { card: b.card } : {}),
+        ...(b.card_note ? { card_note: b.card_note } : {}),
         ...(b.trial ? { trial: b.trial } : {}),
         ...(b.suspended ? { suspended: true, suspend_reason: b.suspend_reason ?? null } : {}),
         upcoming_invoice: b.upcoming_invoice ?? null,
@@ -244,7 +260,9 @@ const billingUsage = async (ctx) => {
     const trial = b.trial;
     if (trial?.credits_remaining !== undefined)
         lines.push(`  trial credits left: ${usd(trial.credits_remaining)}`);
-    lines.push(`  card: ${b.card_on_file ? `${b.card?.brand ?? "card"} ••${b.card?.last4 ?? "??"}` : `none on file${billingOff ? " (card payments are not open yet)" : ""}`}`);
+    lines.push(`  card: ${b.card_on_file ? paymentMethodText(b.card) : `none on file${billingOff ? " (card payments are not open yet)" : ""}`}`);
+    if (b.card_note)
+        lines.push(`  ${b.card_note}`);
     if (b.upcoming_invoice?.amount_due !== undefined && b.upcoming_invoice?.amount_due !== null) {
         lines.push(`  next invoice: ${usd(b.upcoming_invoice.amount_due)}`);
     }
@@ -267,6 +285,86 @@ const billingPortal = async (ctx) => {
     const next = nexts(["promigence billing usage", "this month's spend without leaving the terminal"]);
     return emit(ctx.mode, okEnvelope(ctx.cmd.name, { url: res.url }, next), ["promigence billing portal: open this page to manage the card and past invoices:", `  ${res.url}`], 0, ctx.pointer);
 };
+const HISTORY_KINDS = ["all", "credits", "payments"];
+const CREDIT_WHAT = {
+    free_credit: "Free credit",
+    card_bonus: "Card bonus",
+    referral: "Referral reward",
+    plan: "Included with your plan",
+    from_promigence: "Credit from Promigence",
+    service_restart: "Credit for a service restart",
+    confirmation_credit: "Credit for the $1 confirmation",
+};
+const CREDIT_ENDED = { used: "used", expired: "expired", taken_back: "taken back" };
+const PAYMENT_WHAT = {
+    invoice_paid: "Invoice paid",
+    payment_failed: "Payment failed",
+    refund: "Refund",
+};
+const PAYMENT_STATUS = {
+    paid: "paid",
+    retrying: "will be retried",
+    failed: "not paid",
+    refunded: "refunded",
+    confirmed: "confirmed",
+};
+const wordFor = (m, k) => k && Object.prototype.hasOwnProperty.call(m, k) ? m[k] : undefined;
+const unpaid = (status) => status === "retrying" || status === "failed";
+export function historyLines(entries) {
+    return entries.map((e) => {
+        const day = (e.at ?? "").slice(0, 10);
+        const c = e.credit;
+        if (c) {
+            const state = wordFor(CREDIT_ENDED, c.status) ??
+                `${usd(c.remaining_usd)} left, ${c.expires_at ? `expires ${c.expires_at.slice(0, 10)}` : "no expiry"}`;
+            return `  ${day}  ${wordFor(CREDIT_WHAT, c.kind) ?? "Credit"}  ${usd(c.granted_usd)}  ${state}`;
+        }
+        const p = e.payment;
+        if (!p)
+            return `  ${day}  (a row this version cannot show: see --json)`;
+        const check = p.kind === "method_check";
+        const what = check
+            ? `$${Number.isInteger(p.amount_usd) ? String(p.amount_usd) : p.amount_usd.toFixed(2)} to confirm ${p.method || "your payment method"}`
+            : (wordFor(PAYMENT_WHAT, p.kind) ?? "Payment");
+        const detail = [p.plan ? `${p.plan} plan` : null, p.invoice_number ? `invoice ${p.invoice_number}` : null]
+            .filter(Boolean)
+            .join(", ");
+        const status = check && p.status === "failed" ? "failed" : (wordFor(PAYMENT_STATUS, p.status) ?? p.status);
+        const url = typeof p.invoice_url === "string" && p.invoice_url.startsWith("https://") ? p.invoice_url : null;
+        const link = url && !check ? ` · ${unpaid(p.status) ? "pay at" : "receipt"} ${url}` : "";
+        return `  ${day}  ${what}${detail ? ` (${detail})` : ""}  ${usd(p.amount_usd)}  ${status}${link}`;
+    });
+}
+const billingHistory = async (ctx) => {
+    const kind = str(ctx, "--kind") ?? "all";
+    if (!HISTORY_KINDS.includes(kind)) {
+        throw usageError(`--kind: '${kind}' is not a kind`, `Pass one of ${HISTORY_KINDS.join(" | ")}.`);
+    }
+    const limit = limitOf(ctx, 50, 100);
+    const cursor = str(ctx, "--cursor");
+    const page = await client(ctx).billing.historyPage({
+        kind: kind,
+        limit,
+        ...(cursor === undefined ? {} : { cursor }),
+    });
+    const entries = page.items;
+    const more = page.nextCursor;
+    const owed = entries.some((e) => e.payment && e.payment.kind !== "method_check" && unpaid(e.payment.status));
+    const next = nexts(...(more
+        ? [[`${sh `promigence billing history --limit ${String(limit)}`}${kind === "all" ? "" : sh ` --kind ${kind}`}${sh ` --cursor ${more}`}`, "the next page"]]
+        : []), ...(owed
+        ? [["promigence billing portal", "pay the open invoice, or update the card on file"]]
+        : [["promigence billing usage", "this month's spend and credit"]]));
+    const empty = { all: "no credits or payments yet", credits: "no credit yet", payments: "no payments yet" };
+    const noun = kind === "all" ? "" : ` ${entries.length === 1 ? kind.slice(0, -1) : kind}`;
+    const lines = [
+        `promigence billing history: ${entries.length}${noun}, newest first`,
+        ...historyLines(entries),
+        ...(entries.length ? [] : [`  (${empty[kind]})`]),
+        ...(more ? [`  more: --cursor ${more}`] : []),
+    ];
+    return emit(ctx.mode, okEnvelope(ctx.cmd.name, { kind, entries, count: entries.length, next_cursor: more }, next), lines, 0, ctx.pointer);
+};
 const referrals = async (ctx) => {
     const r = await client(ctx).billing.referrals();
     const next = r.code
@@ -520,6 +618,12 @@ export function sandboxFactLines(s, facts, nowMs = Date.now()) {
     }
     return out;
 }
+export function supportStopLines(s) {
+    if (s.outcome !== "stopped_by_support")
+        return [];
+    const message = s.failure?.message;
+    return [`  ${typeof message === "string" && message.trim() ? message : "Stopped by Promigence support"}`];
+}
 const sandboxInfo = async (ctx) => {
     const sid = positional(ctx, "a sandbox id", "promigence sandbox info sbx_01");
     const c = client(ctx);
@@ -539,6 +643,7 @@ const sandboxInfo = async (ctx) => {
         : why ? [] : [[sh `promigence exec --sandbox ${sid} -- CMD`, "run something in it"]]));
     const lines = [
         `sandbox ${sid}: ${s.state}${why ? ` (${why})` : ""}${s.outcome ? ` (${s.outcome})` : ""}${s.run_id ? ` · run ${s.run_id}` : ""}`,
+        ...supportStopLines(s),
         ...(why ? ["  its files and state are kept, and paused time is not billed"] : []),
         ...queuedLines([s]),
         ...(s.snapshot_id ? [`  snapshot ${s.snapshot_id}`] : []),
@@ -723,6 +828,7 @@ export const ACCOUNT_HANDLERS = {
     status,
     "billing usage": billingUsage,
     "billing portal": billingPortal,
+    "billing history": billingHistory,
     referrals,
     "referrals apply": referralsApply,
     "snapshot delete": snapshotDelete,

package/dist/agent.js

@@ -42,9 +42,17 @@ export const SETUP_SCRIPT = [
     'if [ -n "$3" ] && [ ! -d "$4/.git" ]; then',
     '  mkdir -p "$(dirname "$4")"',
     '  git clone --quiet -- "$3" "$4" >&2',
+    '  if [ -n "${5:-}" ]; then chown -R -- "$5" "$4"; fi',
     "fi",
     '"$1" --version',
 ].join("\n");
+async function snapshotUser(c, snapshot) {
+    if (snapshot === DEFAULT_SNAPSHOT)
+        return undefined;
+    const rec = await c.snapshots.get(snapshot).catch(() => undefined);
+    const u = rec?.user;
+    return typeof u === "string" && u !== "" && u !== "root" && u !== "0" ? u : undefined;
+}
 export function repoDir(url) {
     const last = url.replace(/[/]+$/, "").split(/[/:]/).pop() ?? "";
     const name = last.replace(/\.git$/, "").replace(/[^A-Za-z0-9._-]/g, "") || "repo";
@@ -269,8 +277,10 @@ const agentStart = async (ctx) => {
             throw e;
         }
     };
+    const runAs = await snapshotUser(c, snapshot);
     const setup = await endOnThrow(c.sandboxes.exec(sid, {
-        argv: ["sh", "-c", SETUP_SCRIPT, "agent-setup", agent.bin, agent.pkg, repo ?? "", cwd ?? ""],
+        argv: ["sh", "-c", SETUP_SCRIPT, "agent-setup", agent.bin, agent.pkg, repo ?? "", cwd ?? "", runAs ?? ""],
+        user: "root",
         timeoutMs: 10 * 60_000,
     }));
     if (setup.exit_code !== 0) {

package/dist/commands.d.ts

@@ -99,6 +99,10 @@ export declare function outputTails(c: PromigenceClient, sandboxes: ReadonlyArra
     }>;
 }>): Promise<Map<string, OutputTail>>;
 export declare function positional(ctx: Ctx, what: string, example: string): string;
+export declare function supportStoppedLines(sandboxes: ReadonlyArray<{
+    sandbox_id: string;
+    outcome?: string | null;
+}>): string[];
 export declare function filesPutTarArgs(out: string, parent: string, base: string, noMetadata?: string[]): string[];
 export declare const HANDLERS: Readonly<Record<string, Handler>>;
 export {};

package/dist/commands.js

@@ -6,7 +6,7 @@ import { basename, dirname, join, resolve } from "node:path";
 import { DEFAULT_API_URL, DEFAULT_SNAPSHOT, ERRORS_DOCS_URL, MAX_OUTPUT_BYTES_DEFAULT, CONTEXT_GIT_RE, PromigenceClient, checkRepoUrl, withoutPin, PromigenceError, SpendCapError, TimeoutError, checkImageRef, contextRelative, credentialsPath, FILE_PUT_CHUNK_BYTES, imageSnapshot, isWaiting, execOutputBytes, listContext, packContext, readCredentials, } from "./sdk/index.js";
 import { fmtMs, recordTiming } from "./timing.js";
 import { capacityLine, queuedClause, queuedLines, statusLine } from "./capacity.js";
-import { DevcontainerError, detectOne, load, planJson, planLines, planSetup, resolveGiven, snapshotEnv, translate, workspaceRootFor, wrapCommand, } from "./devcontainer.js";
+import { DevcontainerError, detectOne, load, planJson, planLines, planSetup, resolveGiven, snapshotEnv, snapshotUsers, translate, workspaceRootFor, wrapCommand, } from "./devcontainer.js";
 import { detect, ecosystemOfCommands, imageCreateCommand, readConfig } from "./init.js";
 import { CREDENTIAL_REMEDY, confirmOverride, credentialRefusal, emitUploadList, localTarNoMetadataArgs } from "./uploadguard.js";
 import { emit, errorEnvelope, errorTextLines, exitWith, forkLine, forkSummary, gradeLine, ms, noCommandFix, okEnvelope, parseMaxOutput, recordNotice, sandboxGrade, parseCommandTimeout, parseCount, parseDuration, parseUsd, pickExit, reportSummaryLines, toPromigenceError, totalsLine, usageError, write, writeBytes, } from "./io.js";
@@ -212,7 +212,7 @@ function reportExits(report) {
         return codes;
     if (t.env_failed > 0 || (t.grader_failed ?? 0) > 0)
         codes.push(3);
-    if (t.not_started > 0 || t.cap_killed > 0 || t.expired > 0)
+    if (t.not_started > 0 || t.cap_killed > 0 || t.expired > 0 || (t.stopped_by_support ?? 0) > 0)
         codes.push(12);
     if (t.task_failed > 0 || t.snapshot_failed > 0)
         codes.push(4);
@@ -385,7 +385,7 @@ function boundUseLines(res) {
         "  requests the sandbox sends to this address are authenticated with it:",
         ...urls.map((u) => `    ${urlLine(u, res.env)}`),
         `  a request sent straight to ${hosts.map((h) => `https://${h}`).join(" or ")} is not authenticated: send it to the address above`,
-        ...(res.scan_responses === false ? [] : ["  the host's answers never show the value: an echo service shows asterisks instead"]),
+        ...(res.scan_responses === true ? ["  the host's answers never show the value: an echo service shows asterisks instead"] : []),
     ];
     return lines;
 }
@@ -723,7 +723,10 @@ async function devcontainerCreate(ctx, plan) {
     }
     const setup = planSetup(plan, { repo, commit, userSetup: list(ctx, "--setup") });
     const env = snapshotEnv(plan);
-    const opts = { ...source, ...(setup.length ? { setup } : {}), ...(env ? { env } : {}) };
+    const users = snapshotUsers(plan);
+    const opts = {
+        ...source, ...(setup.length ? { setup } : {}), ...(env ? { env } : {}), ...(users ?? {}),
+    };
     const verify = str(ctx, "--verify");
     if (verify !== undefined)
         opts.verify = { cmd: wrapCommand(plan, verify) };
@@ -762,7 +765,6 @@ const snapshotCreate = async (ctx) => {
     const plan = gh ? undefined : devcontainerPlan(ctx, form);
     const setup = list(ctx, "--setup");
     const alias = str(ctx, "--alias");
-    const cpuClass = str(ctx, "--cpu-class");
     let opts;
     let label;
     let submitted;
@@ -833,8 +835,6 @@ const snapshotCreate = async (ctx) => {
     const c = client(ctx);
     if (alias !== undefined)
         opts.alias = alias;
-    if (cpuClass !== undefined)
-        opts.cpuClass = cpuClass;
     const grade = gradeOpts(ctx);
     if (grade)
         opts.grade = grade;
@@ -1472,8 +1472,6 @@ const exec = async (ctx) => {
             stdout: res.stdout ?? "",
             stderr: res.stderr ?? "",
             truncated: res.truncated ?? false,
-            ...(res.stdout_ref === undefined ? {} : { stdout_ref: res.stdout_ref }),
-            ...(res.stderr_ref === undefined ? {} : { stderr_ref: res.stderr_ref }),
             ...(res.stdout_b64 === undefined ? {} : { stdout_b64: res.stdout_b64 }),
             ...(res.stderr_b64 === undefined ? {} : { stderr_b64: res.stderr_b64 }),
             ...(res["idempotent_replay"] === true ? { idempotent_replay: true } : {}),
@@ -1598,7 +1596,7 @@ async function runImageSnapshot(ctx, c) {
     if (cap < price + (quoted ?? 0)) {
         const existing = (quoted ?? 0) <= cap ? await existingImageSnapshot(c, image) : undefined;
         throw new SpendCapError(`a new image's snapshot build costs ${moneyUsd(price)} on top of the run` +
-            `${quoted === undefined ? "" : ` (about ${moneyUsd(quoted)})`}, over --cap ${moneyUsd(cap)}; nothing was built or started`, (existing === undefined ? "" : `This image already has snapshot ${existing}: run it under this cap with ${sh `promigence run --snapshot ${existing}`} instead of --image. Or `) +
+            `${quoted === undefined ? "" : ` (about ${moneyUsd(quoted)})`}, over --cap ${moneyUsd(cap)}; nothing was built or started`, (existing === undefined ? "" : `This image already has snapshot ${existing}: run it under this cap with ${sh `promigence run --snapshot ${existing}`} instead of --image (any start command or settings it was made with come with it). Or `) +
             `${existing === undefined ? "Pass" : "pass"} --cap ${needed.toFixed(2)} or more (a build is charged once, only when this image has no snapshot yet, and reused free after), ` +
             `or build it first, ${sh `promigence snapshot create --image ${image} --wait`}, and run its snapshot with --snapshot.`);
     }
@@ -1633,7 +1631,7 @@ async function existingImageSnapshot(c, image) {
         for (let page = 0; page < 5; page++) {
             const p = await c.snapshots.listPage({ limit: 100, ...(cursor === undefined ? {} : { cursor }) });
             const hit = p.items.find((s) => s.source?.kind === "image" && typeof s.source.digest === "string" && digests.has(s.source.digest) &&
-                s.source["from_sandbox"] === undefined && !s.unavailable && !(s.setup?.length) && !s.start && !s.verify?.cmd &&
+                s.source["from_sandbox"] === undefined && !s.unavailable && !(s.setup?.length) && !s.verify?.cmd &&
                 (s.tier === undefined || s.tier === "small"));
             if (hit)
                 return hit.snapshot_id;
@@ -1967,11 +1965,12 @@ function settledWhy(report, keep) {
     return `${open.length} sandbox${open.length === 1 ? " has" : "es have"} not ended yet, so ${open.length === 1 ? "its" : "their"} last charge is still to land`;
 }
 const OUTCOME_EXIT = {
-    env_failed: 3, grader_failed: 3, not_started: 12, cap_killed: 12, expired: 12, task_failed: 4, snapshot_failed: 4,
+    env_failed: 3, grader_failed: 3, not_started: 12, cap_killed: 12, expired: 12, stopped_by_support: 12,
+    task_failed: 4, snapshot_failed: 4,
 };
 const OUTCOME_CODE = {
     env_failed: "env_failed", grader_failed: "grader_failed", not_started: "not_started", cap_killed: "cap_killed",
-    expired: "expired", task_failed: "nonzero_exit", snapshot_failed: "snapshot_failed",
+    expired: "expired", stopped_by_support: "stopped_by_support", task_failed: "nonzero_exit", snapshot_failed: "snapshot_failed",
 };
 function failureFix(runId, s) {
     const f = s.failure;
@@ -2005,7 +2004,7 @@ export function runHeadline(report, count) {
     const t = (report.totals ?? {});
     const others = Object.entries(t)
         .filter(([k, v]) => !["completed", "env_verified", "evidence_missing"].includes(k) && typeof v === "number" && v > 0)
-        .map(([k, v]) => `${v} ${k}`);
+        .map(([k, v]) => `${v} ${k === "stopped_by_support" ? "stopped by Promigence support" : k}`);
     const done = typeof t["completed"] === "number" ? t["completed"] : 0;
     return `run ${report.run_id}: ${done} of ${count} completed${others.length ? ` · ${others.join(" · ")}` : ""}` +
         `${report.cost ? ` · charged ${moneyUsd(report.cost.charged)}` : ""}`;
@@ -2125,6 +2124,12 @@ const runReport = async (ctx) => {
     const next = nexts([sh `promigence run status ${runId}`, "the run's current state"]);
     return emit(ctx.mode, okEnvelope(ctx.cmd.name, { run_id: runId, report }, next), reportLines(report, view), 0, ctx.pointer);
 };
+export function supportStoppedLines(sandboxes) {
+    const stopped = sandboxes.filter((s) => s.outcome === "stopped_by_support");
+    if (!stopped.length)
+        return [];
+    return [`  ${stopped.length} stopped by Promigence support; ${sh `promigence sandbox info ${stopped[0].sandbox_id}`} says why`];
+}
 const runStatus = async (ctx) => {
     const runId = positional(ctx, "a run id", "promigence run status run_01 --wait");
     const c = client(ctx);
@@ -2141,7 +2146,7 @@ const runStatus = async (ctx) => {
         states[s.state] = (states[s.state] ?? 0) + 1;
     const next = nexts([sh `promigence run report ${runId} --json`, "the validity report"]);
     const tail = Object.keys(states).length ? ` - ${Object.entries(states).map(([k, v]) => `${k} ${v}`).join(" - ")}` : "";
-    return emit(ctx.mode, okEnvelope(ctx.cmd.name, { run_id: runId, state: run.state, sandbox_states: states, run }, next), [`run ${runId}: ${run.state}${tail}`, ...queuedLines(run.sandboxes ?? [])], 0, ctx.pointer);
+    return emit(ctx.mode, okEnvelope(ctx.cmd.name, { run_id: runId, state: run.state, sandbox_states: states, run }, next), [`run ${runId}: ${run.state}${tail}`, ...supportStoppedLines(run.sandboxes ?? []), ...queuedLines(run.sandboxes ?? [])], 0, ctx.pointer);
 };
 const runKill = async (ctx) => {
     const runId = positional(ctx, "a run id", "promigence run kill run_01");

package/dist/credits.js

@@ -150,18 +150,21 @@ export async function claimOnRefusal(ctx, io = {}) {
     const opened = maybeOpen(ctx, link.url);
     return [...claimLines(o, link, opened), "Once it is claimed, run the command again."];
 }
-async function cardsOff(c, o) {
+async function cardState(c, o) {
+    const none = { off: false, onFile: false };
     if (!(typeof o.card_bonus_usd === "number" && o.card_bonus_usd > 0) || o.state === "none")
-        return false;
-    return c.billing.usage().then((b) => b.billing_enabled === false).catch(() => false);
+        return none;
+    return c.billing.usage().then((b) => ({ off: b.billing_enabled === false, onFile: b.card_on_file === true })).catch(() => none);
 }
-function offerLines(head, o, off = false) {
+function offerLines(head, o, st = { off: false, onFile: false }) {
     const lines = [`${head}: ${say(o)}`];
     if (o.state !== "none") {
         if (typeof o.credit_usd === "number")
             lines.push(`  credit: ${dollars(o.credit_usd)}`);
         if (typeof o.card_bonus_usd === "number" && o.card_bonus_usd > 0) {
-            lines.push(`  card bonus: ${dollars(o.card_bonus_usd)} more when you add a card${off ? " (card payments are not open yet)" : " (promigence billing card)"}`);
+            lines.push(st.onFile
+                ? `  card bonus: ${dollars(o.card_bonus_usd)} more with your first paid invoice`
+                : `  card bonus: ${dollars(o.card_bonus_usd)} more when you add a card${st.off ? " (card payments are not open yet)" : " (promigence billing card)"}`);
         }
         if (o.expires_at)
             lines.push(`  expires: ${o.expires_at}`);
@@ -174,14 +177,14 @@ function offerLines(head, o, off = false) {
 const credits = async (ctx) => {
     const c = new PromigenceClient({ ...clientOpts(ctx), onNotice: recordNotice });
     const o = await getOffer(c);
-    return emit(ctx.mode, okEnvelope(ctx.cmd.name, { ...o }, offerNext(o)), offerLines("promigence credits", o, await cardsOff(c, o)), 0, ctx.pointer);
+    return emit(ctx.mode, okEnvelope(ctx.cmd.name, { ...o }, offerNext(o)), offerLines("promigence credits", o, await cardState(c, o)), 0, ctx.pointer);
 };
 const creditsClaim = async (ctx) => {
     const opts = { ...clientOpts(ctx), onNotice: recordNotice };
     const c = new PromigenceClient(opts);
     const o = await getOffer(c);
     if (o.state !== "claimable") {
-        return emit(ctx.mode, okEnvelope(ctx.cmd.name, { ...o, claim_url: null }, offerNext(o)), offerLines("promigence credits claim", o, await cardsOff(c, o)), 0, ctx.pointer);
+        return emit(ctx.mode, okEnvelope(ctx.cmd.name, { ...o, claim_url: null }, offerNext(o)), offerLines("promigence credits claim", o, await cardState(c, o)), 0, ctx.pointer);
     }
     const link = await getClaimLink(claimClient(opts));
     const opened = maybeOpen(ctx, link.url);

package/dist/devcontainer.d.ts

@@ -62,6 +62,7 @@ export interface Plan {
     env: Record<string, string>;
     workspaceFolder: string;
     user: string | undefined;
+    remoteUser?: string | undefined;
     lifecycle: LifecycleStep[];
     ports: number[];
     tier: string | undefined;
@@ -84,6 +85,10 @@ export declare function lifecycleSteps(v: unknown, field: string, ctx: Substitut
 export declare function shellQuote(s: string): string;
 export declare function wrapCommand(plan: Plan, command: string): string;
 export declare function snapshotEnv(plan: Plan): Record<string, string> | undefined;
+export declare function snapshotUsers(plan: Plan): {
+    user: string;
+    setupUser: string;
+} | undefined;
 export interface SetupOptions {
     repo?: string | undefined;
     commit?: string | undefined;

package/dist/devcontainer.js

@@ -462,6 +462,7 @@ export function translate(loaded, opts) {
         env,
         workspaceFolder,
         user,
+        ...(remoteUser === undefined ? {} : { remoteUser }),
         lifecycle,
         ports,
         tier,
@@ -682,6 +683,10 @@ export function wrapCommand(plan, command) {
 export function snapshotEnv(plan) {
     return Object.keys(plan.env).length ? { ...plan.env } : undefined;
 }
+export function snapshotUsers(plan) {
+    const user = plan.remoteUser ?? plan.user;
+    return user === undefined ? undefined : { user, setupUser: "root" };
+}
 export function planSetup(plan, opts = {}) {
     const steps = [];
     if (opts.repo && opts.commit) {

package/dist/dirsnap.js

@@ -25,7 +25,7 @@ const INTERRUPTED = {
 };
 const NOT_WITH_DIR = [
     "--repo", "--commit", "--ref", "--track", "--also-repo", "--image", "--dockerfile", "--context",
-    "--devcontainer", "--start", "--cpu-class", "--grade", "--holdout", "--grade-score", "--grade-timeout",
+    "--devcontainer", "--start", "--grade", "--holdout", "--grade-score", "--grade-timeout",
     "--grade-output", "--tier",
 ];
 export { secretLike };

package/dist/errfix.js

@@ -106,6 +106,7 @@ function notFoundFor(kind, ctx, apiFix) {
 const BILLING_CMD = /`promigence billing (?:card|portal)`/;
 export function withoutBilling(text) {
     return text
+        .replace(/Owners: update the card with `promigence billing portal`; the hold lifts once the invoice is paid\.(?: For a disputed payment, write to support@promigence\.ai\.)?/, `To lift it, email ${SUPPORT}.`)
         .replace(/,? or move to a plan that allows it: `promigence billing (?:card|portal)`\.?/, `, or email ${SUPPORT} for a plan that allows it.`)
         .replace(/or add a card to lift it: `promigence billing (?:card|portal)`/, `or email ${SUPPORT} to lift it`)
         .replace(/adding a card raises it \(owners: `promigence billing (?:card|portal)`\)\.?/, `to raise it, email ${SUPPORT}.`)

package/dist/generated.js

@@ -83,6 +83,9 @@ export const ERRORS = [
     { code: "aborted_by_client", category: "other", http: 200, exit: 130, billed: "yes",
         message: "sandbox killed by the client",
         fix: "Nothing to fix; billed for the seconds used." },
+    { code: "stopped_by_support", category: "other", http: 200, exit: 12, billed: "unless_ours",
+        message: "Stopped by Promigence support: {reason}",
+        fix: "Billed for the seconds it ran, as a kill is, unless support found the cause was on our side; then that time is credited back. Questions: tell support@promigence.ai the sandbox id." },
     { code: "expired", category: "other", http: 200, exit: 12, billed: "yes",
         message: "sandbox timeout reached (counted from hand-off)",
         fix: "Raise `--timeout` if the task needs longer." },
@@ -103,7 +106,7 @@ export const ERRORS = [
         fix: "Set PROMIGENCE_API_KEY or run `promigence auth login --from-env VAR`. No key yet: `promigence login` (sign in) or https://promigence.ai." },
     { code: "forbidden", category: "other", http: 403, exit: 7, billed: "no",
         message: "{detail}",
-        fix: "Do what the message names: sign in (`promigence login`), use a key from that org, or ask an owner." },
+        fix: "Do what the message names: sign in (`promigence login`), use a full-access key (`promigence keys create`) or one from that org, or ask an owner." },
     { code: "not_found", category: "other", http: 404, exit: 8, billed: "no",
         message: "{kind} `{id}` not found",
         fix: "Check the id; aliases resolve in your org first, then public snapshots (`promigence examples`)." },
@@ -176,6 +179,9 @@ export const ERRORS = [
     { code: "credit_unclaimed", category: "other", http: 402, exit: 5, billed: "no",
         message: "this account has free credit waiting to be claimed",
         fix: "Claim it in your browser: `promigence credits claim` (owners; members ask an owner). Or add a card: `promigence billing card`. Nothing was started or charged." },
+    { code: "setup_required", category: "other", http: 403, exit: 7, billed: "no",
+        message: "finish setting up your account before starting new work",
+        fix: "Open {setup_url} and answer the setup questions (under a minute), then run this again. Nothing was started or charged." },
     { code: "card_required", category: "other", http: 402, exit: 5, billed: "no",
         message: "a card is required for new work since {effective_at}",
         fix: "Add a card (owners: `promigence billing card`, or POST /v1/billing/checkout; members ask an owner). Your trial credits are kept and used first; reads and results stay available." },
@@ -185,7 +191,7 @@ export const ERRORS = [
     { code: "concurrency_limit", category: "other", http: 409, exit: 5, billed: "no",
         message: "{live} live + {requested} requested sandboxes is over your limit of {limit}",
         fix: "Wait for sandboxes to end or lower `--count` (`--allow-partial` covers the spend cap only); a retry of the same request fails the same way. Trial orgs get {trial_limit}; to raise it, email support@promigence.ai." },
-    { code: "egress_cap_reached", category: "other", http: 403, exit: 10, billed: "no",
+    { code: "egress_cap_reached", category: "other", http: 403, exit: 5, billed: "no",
         message: "monthly data-out cap reached: {used_gb} of {cap_gb} GB",
         fix: "Use `--network none` (still allowed) or wait for the 1st (UTC). For more data out a month, email support@promigence.ai." },
     { code: "project_cap_reached", category: "cap", http: 403, exit: 5, billed: "no",
@@ -193,7 +199,10 @@ export const ERRORS = [
         fix: "Ask for less (`--count`, `--cap`, a shorter extension), wait for the 1st (UTC), or have an owner raise it: `promigence project cap {project} <usd>`." },
     { code: "spend_limit_reached", category: "cap", http: 402, exit: 5, billed: "no",
         message: "today's spend limit {limit} has {remaining} left; this needs {needed}",
-        fix: "Running sandboxes finish. The limit resets at 00:00 UTC and grows with each paid invoice; ask for less, or email support@promigence.ai. After a failed payment, new work waits until it is paid (owners: `promigence billing portal`)." },
+        fix: "Running sandboxes finish. The limit resets at 00:00 UTC and grows with each paid invoice; ask for less, or email support@promigence.ai." },
+    { code: "billing_hold", category: "other", http: 402, exit: 5, billed: "no",
+        message: "new work is on hold: {reason}",
+        fix: "Running sandboxes finish. Owners: update the card with `promigence billing portal`; the hold lifts once the invoice is paid. For a disputed payment, write to support@promigence.ai." },
     { code: "tier_over_plan", category: "other", http: 403, exit: 2, billed: "no",
         message: "the {tier} tier ({vcpus} vCPU) is over the {limit} vCPU per-sandbox limit of your {plan} plan",
         fix: "Use a tier of at most {limit} vCPU (`promigence snapshot create … --tier {max_tier}` is the largest; a fork runs on its snapshot's), or move to a plan that allows it: `promigence billing portal`." },
@@ -233,6 +242,9 @@ export const ERRORS = [
     { code: "key_expired", category: "other", http: 401, exit: 7, billed: "no",
         message: "this API key expired at {expired_at}",
         fix: "Create a new key (`promigence keys create`, or sign in again with `promigence login`) and replace this one wherever it is used." },
+    { code: "account_blocked", category: "other", http: 401, exit: 7, billed: "no",
+        message: "this account is blocked",
+        fix: "Write to support@promigence.ai to have it reviewed." },
 ];
 export const ERROR_BY_CODE = Object.fromEntries(ERRORS.map((e) => [e.code, e]));
 export const CLIENT_ERRORS = [
@@ -257,6 +269,9 @@ export const CLIENT_ERRORS = [
     { code: "build_failed", category: "env", http: 0, exit: 3, billed: "no",
         message: "the build could not finish; nothing was stored",
         fix: "Not charged. Build again; if it repeats, email support@promigence.ai with the build id." },
+    { code: "service_restart", category: "env", http: 0, exit: 3, billed: "no",
+        message: "a service restart stopped the command while its output was streaming",
+        fix: "Not billed: the time the command ran is credited back. The sandbox kept running; the command may have done part of its work before it stopped: run it again if that is safe." },
     { code: "not_connected", category: "other", http: 0, exit: 7, billed: "no",
         message: "the connection request ended without connecting anything",
         fix: "Nothing was connected. Do what the message names, then run the connect command again; `promigence github status` (or `gitlab status`) lists what is connected." },

package/dist/github.js

@@ -14,7 +14,7 @@ function pollMs() {
 }
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 function notConfigured(s) {
-    return usageError(s.message ?? "GitHub connection is not configured on this deployment", "Bring the code in another way: `promigence snapshot create --dir .` uploads the files git tracks here, or clone a public repository in a --setup step.");
+    return usageError(s.message ?? "Connecting GitHub isn't available here yet", "Bring the code in another way: `promigence snapshot create --dir .` uploads the files git tracks here, or clone a public repository in a --setup step.");
 }
 function connectionLine(c) {
     return `  ${c.account}  ${c.account_type} · ${c.repository_selection} repositories · installation ${c.installation_id}${c.suspended ? "  SUSPENDED on GitHub" : ""}`;
@@ -107,7 +107,7 @@ const githubStatus = async (ctx) => {
     const s = await client(ctx).github.status();
     if (!s.configured) {
         const next = nexts(["promigence snapshot create --dir . --alias app --wait", "bring the files git tracks here instead"]);
-        return emit(ctx.mode, okEnvelope(ctx.cmd.name, { ...s }, next), [`github: ${s.message ?? "GitHub connection is not configured on this deployment"}`], 0, ctx.pointer);
+        return emit(ctx.mode, okEnvelope(ctx.cmd.name, { ...s }, next), [`github: ${s.message ?? "Connecting GitHub isn't available here yet"}`], 0, ctx.pointer);
     }
     const lines = [
         s.connections.length
@@ -215,7 +215,6 @@ const NOT_WITH_GITHUB = [
     ["--devcontainer", "it is not read for a connected repository; use --setup steps"],
     ["--start", "a background process is part of an image snapshot"],
     ["--also-repo", "clone further repositories in a --setup step"],
-    ["--cpu-class", "the build goes wherever there is room"],
     ["--dir", "--dir uploads a local tree instead; pass one of them"],
 ];
 const GITHUB_ONLY = ["--ref", "--from", "--track"];

package/dist/gitlab.js

@@ -12,7 +12,7 @@ function pollMs() {
 }
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 function notConfigured(s) {
-    return usageError(s.message ?? "GitLab connection is not configured on this deployment", "Bring the code in another way: `promigence snapshot create --dir .` uploads the files git tracks here, or clone in a --setup step.");
+    return usageError(s.message ?? "Connecting GitLab isn't available here yet", "Bring the code in another way: `promigence snapshot create --dir .` uploads the files git tracks here, or clone in a --setup step.");
 }
 function connectionLine(c) {
     return `  ${c.username}  on ${c.gitlab_url} · ${c.connection_id}${c.broken ? `  BROKEN: ${c.broken_reason ?? "connect again"}` : ""}`;
@@ -108,7 +108,7 @@ const gitlabStatus = async (ctx) => {
     const s = await client(ctx).gitlab.status();
     if (!s.configured) {
         const next = nexts(["promigence snapshot create --dir . --alias app --wait", "bring the files git tracks here instead"]);
-        return emit(ctx.mode, okEnvelope(ctx.cmd.name, { ...s }, next), [`gitlab: ${s.message ?? "GitLab connection is not configured on this deployment"}`], 0, ctx.pointer);
+        return emit(ctx.mode, okEnvelope(ctx.cmd.name, { ...s }, next), [`gitlab: ${s.message ?? "Connecting GitLab isn't available here yet"}`], 0, ctx.pointer);
     }
     const lines = [
         s.connections.length