setsuna-microvm 0.5.3 → 0.5.4

package/LICENSE

@@ -1,32 +1,32 @@
-SemSwitch Setsuna Research Preview Client License
-
-Copyright © 2026 SemSwitch, Inc. All rights reserved.
-
-The Setsuna client distributed in this package is proprietary software owned by SemSwitch, Inc.
-("SemSwitch"). It is provided for authorized use with the Setsuna Research Preview.
-
-1. Grant. Subject to the SemSwitch Terms of Service (https://semswitch.com/terms) and any
-   applicable Order or evaluation agreement, an authorized user receives a limited, non-exclusive
-   right to install and use the Setsuna client solely to access or evaluate the Setsuna service
-   that the user is authorized to use.
-
-2. Ownership. The Setsuna client is licensed, not sold. SemSwitch retains all ownership,
-   copyright, and other intellectual property rights in the Setsuna client. This license transfers
-   no ownership or other intellectual property rights.
-
-3. Restrictions. Except where expressly permitted by an applicable agreement with SemSwitch or by
-   non-waivable law, no right is granted to redistribute, sublicense, sell, rent, publish, modify,
-   create derivative works from, reverse engineer, decompile, or disassemble the Setsuna client.
-
-4. Third-party software. The Setsuna client uses third-party software and components that are not
-   owned by SemSwitch. They remain governed by their respective licenses and notices, which this
-   license does not modify or replace.
-
-5. Term. The right to use the Setsuna client ends when the applicable Setsuna authorization ends.
-
-6. Agreements. If an applicable signed Order or separately negotiated agreement with SemSwitch
-   expressly conflicts with this license, that Order or agreement controls.
-
-7. Warranties, liability, and service terms. Warranties, disclaimers, limitations of liability,
-   and the terms of the Setsuna service are governed by the applicable agreement and the SemSwitch
-   Terms of Service rather than by this license.
+SemSwitch Setsuna Research Preview Client License
+
+Copyright © 2026 SemSwitch, Inc. All rights reserved.
+
+The Setsuna client distributed in this package is proprietary software owned by SemSwitch, Inc.
+("SemSwitch"). It is provided for authorized use with the Setsuna Research Preview.
+
+1. Grant. Subject to the SemSwitch Terms of Service (https://semswitch.com/terms) and any
+   applicable Order or evaluation agreement, an authorized user receives a limited, non-exclusive
+   right to install and use the Setsuna client solely to access or evaluate the Setsuna service
+   that the user is authorized to use.
+
+2. Ownership. The Setsuna client is licensed, not sold. SemSwitch retains all ownership,
+   copyright, and other intellectual property rights in the Setsuna client. This license transfers
+   no ownership or other intellectual property rights.
+
+3. Restrictions. Except where expressly permitted by an applicable agreement with SemSwitch or by
+   non-waivable law, no right is granted to redistribute, sublicense, sell, rent, publish, modify,
+   create derivative works from, reverse engineer, decompile, or disassemble the Setsuna client.
+
+4. Third-party software. The Setsuna client uses third-party software and components that are not
+   owned by SemSwitch. They remain governed by their respective licenses and notices, which this
+   license does not modify or replace.
+
+5. Term. The right to use the Setsuna client ends when the applicable Setsuna authorization ends.
+
+6. Agreements. If an applicable signed Order or separately negotiated agreement with SemSwitch
+   expressly conflicts with this license, that Order or agreement controls.
+
+7. Warranties, liability, and service terms. Warranties, disclaimers, limitations of liability,
+   and the terms of the Setsuna service are governed by the applicable agreement and the SemSwitch
+   Terms of Service rather than by this license.

package/dist/cli.js

@@ -1113,6 +1113,7 @@ function parsePreviewCliArgs(args) {
       "timeout-ms": { type: "string" },
       "request-timeout-ms": { type: "string" },
       "configuration-id": { type: "string" },
+      duration: { type: "string" },
       attach: { type: "string" },
       json: { type: "boolean", default: false },
       help: { type: "boolean", short: "h", default: false },
@@ -1224,14 +1225,14 @@ function hasOnlyKeys(value, allowed) {
 }
 function parseLease(value, expectedConfigurationId) {
   const sandboxId = parseLeaseSandboxId(value);
-  if (!isRecord(value) || typeof value.expiresAt !== "string") {
+  if (!isRecord(value) || typeof value.expiresAt !== "string" || !Number.isFinite(Date.parse(value.expiresAt)) || value.duration !== "20m" && value.duration !== "1h" && value.duration !== "2h") {
     throw invalidResponse("sandbox lease");
   }
   const microvmConfiguration = parseMicrovmConfiguration(value.microvmConfiguration);
   if (expectedConfigurationId !== void 0 && microvmConfiguration.id !== expectedConfigurationId) {
     throw invalidResponse("sandbox lease");
   }
-  return { sandboxId, expiresAt: value.expiresAt, microvmConfiguration };
+  return { sandboxId, expiresAt: value.expiresAt, duration: value.duration, microvmConfiguration };
 }
 function parseLeaseSandboxId(value) {
   if (!isRecord(value) || !nonEmptyResponseString(value.sandboxId))
@@ -1339,12 +1340,16 @@ function normalizeCreateOptions(options) {
     throw new TypeError("create options must be an object.");
   }
   const unsupported = Object.keys(options).find(
-    (key) => key !== "microvmConfigurationId" && key !== "network"
+    (key) => key !== "microvmConfigurationId" && key !== "network" && key !== "duration"
   );
   if (unsupported !== void 0) throw new TypeError(`Unsupported create option: ${unsupported}.`);
+  const duration = options.duration === void 0 ? "20m" : options.duration;
+  if (duration !== "20m" && duration !== "1h" && duration !== "2h")
+    throw new TypeError("duration must be 20m, 1h, or 2h.");
   const microvmConfigurationId = options.microvmConfigurationId === void 0 ? void 0 : nonEmptyString(options.microvmConfigurationId, "microvmConfigurationId");
   const network = options.network === void 0 ? void 0 : validateRoutedNetwork(options.network);
   return {
+    duration,
     ...microvmConfigurationId === void 0 ? {} : { microvmConfigurationId },
     ...network === void 0 ? {} : { network }
   };
@@ -1829,10 +1834,11 @@ function reportRunPhase(callback, phase) {
 
 // ../setsuna/src/client.ts
 var DEFAULT_REQUEST_TIMEOUT_MS = 6e4;
-var DEFAULT_CLEANUP_TIMEOUT_MS = 1e4;
+var DEFAULT_RUN_REQUEST_TIMEOUT_MS = 6e4 + 12e4 + 6e4;
 var SetsunaClient = class {
   #serviceUrl;
   #requestTimeoutMs;
+  #explicitRequestTimeoutMs;
   #getAccessToken;
   #affinity;
   constructor(options = {}) {
@@ -1850,6 +1856,7 @@ var SetsunaClient = class {
       this.#getAccessToken = options.remote.getAccessToken;
       this.#affinity = new FrontDoorAffinity(this.#serviceUrl);
     }
+    this.#explicitRequestTimeoutMs = options.requestTimeoutMs;
     this.#requestTimeoutMs = positiveMilliseconds(
       options.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS,
       "requestTimeoutMs"
@@ -1869,20 +1876,7 @@ var SetsunaClient = class {
       method: "POST",
       body: { ...createOptions }
     });
-    const sandboxId = parseLeaseSandboxId(response);
-    try {
-      return parseLease(response, createOptions.microvmConfigurationId);
-    } catch (error) {
-      try {
-        await this.#destroy(sandboxId, DEFAULT_CLEANUP_TIMEOUT_MS);
-      } catch (cleanupFailure) {
-        throw new AggregateError(
-          [error, cleanupFailure],
-          "Sandbox lease validation and destruction both failed."
-        );
-      }
-      throw error;
-    }
+    return parseLease(response, createOptions.microvmConfigurationId);
   }
   async list() {
     return parseSandboxList(await this.#request("v1/sandboxes", { method: "GET" }));
@@ -1895,14 +1889,6 @@ var SetsunaClient = class {
       })
     );
   }
-  async renew(sandboxId) {
-    const validatedSandboxId = nonEmptyString(sandboxId, "sandboxId");
-    return parseSandboxStatus(
-      await this.#request(`v1/sandboxes/${encodeURIComponent(validatedSandboxId)}/renew`, {
-        method: "POST"
-      })
-    );
-  }
   async execute(sandboxId, command, options = {}) {
     const validatedSandboxId = nonEmptyString(sandboxId, "sandboxId");
     const validatedCommand = nonEmptyString(command, "command");
@@ -1977,44 +1963,30 @@ var SetsunaClient = class {
     });
   }
   async run(command, options = {}) {
-    let sandboxId;
-    const cleanupTimeoutMs = positiveMilliseconds(
-      options.cleanupTimeoutMs ?? DEFAULT_CLEANUP_TIMEOUT_MS,
-      "cleanupTimeoutMs"
+    const unsupported = Object.keys(options).find(
+      (key) => !["microvmConfigurationId", "timeoutMs", "requestTimeoutMs", "signal", "onPhase"].includes(
+        key
+      )
     );
-    let executionOutcome;
-    try {
-      reportRunPhase(options.onPhase, "starting-microvm");
-      const lease = await this.create({
-        ...options.microvmConfigurationId === void 0 ? {} : { microvmConfigurationId: options.microvmConfigurationId },
-        ...options.network === void 0 ? {} : { network: options.network }
-      });
-      sandboxId = lease.sandboxId;
-      reportRunPhase(options.onPhase, "microvm-ready");
-      reportRunPhase(options.onPhase, "running-command");
-      executionOutcome = { ok: true, result: await this.execute(sandboxId, command, options) };
-    } catch (error) {
-      executionOutcome = { ok: false, error };
-    }
-    if (sandboxId !== void 0) {
-      try {
-        reportRunPhase(options.onPhase, "destroying-microvm");
-        await this.#destroy(sandboxId, cleanupTimeoutMs);
-        reportRunPhase(options.onPhase, "microvm-destroyed");
-      } catch (cleanupFailure) {
-        if (!executionOutcome.ok) {
-          throw new AggregateError(
-            [executionOutcome.error, cleanupFailure],
-            "Sandbox execution and destruction both failed."
-          );
-        }
-        throw cleanupFailure;
-      }
-    }
-    if (!executionOutcome.ok) {
-      throw executionOutcome.error;
-    }
-    return executionOutcome.result;
+    if (unsupported !== void 0) throw new TypeError(`Unsupported run option: ${unsupported}.`);
+    const validatedCommand = nonEmptyString(command, "command");
+    const timeoutMs = options.timeoutMs === void 0 ? void 0 : positiveMilliseconds(options.timeoutMs, "timeoutMs");
+    const microvmConfigurationId = options.microvmConfigurationId === void 0 ? void 0 : nonEmptyString(options.microvmConfigurationId, "microvmConfigurationId");
+    reportRunPhase(options.onPhase, "running");
+    const result = parseExecutionResult(
+      await this.#request("v1/run", {
+        method: "POST",
+        body: {
+          command: validatedCommand,
+          ...microvmConfigurationId === void 0 ? {} : { microvmConfigurationId },
+          ...timeoutMs === void 0 ? {} : { timeoutMs }
+        },
+        signal: options.signal,
+        requestTimeoutMs: options.requestTimeoutMs ?? this.#explicitRequestTimeoutMs ?? Math.max(DEFAULT_RUN_REQUEST_TIMEOUT_MS, (timeoutMs ?? 0) + 12e4)
+      })
+    );
+    reportRunPhase(options.onPhase, "complete");
+    return result;
   }
   async #request(path3, options) {
     return requestJson(
@@ -2044,7 +2016,7 @@ async function runWithSignalCleanup(client, command, options, io, signalRuntime)
     const exitCode = signal === "SIGINT" ? 130 : 143;
     if (interruptedExitCode === void 0) {
       interruptedExitCode = exitCode;
-      io.errorOutput.write("Interrupt received; destroying sandbox...\n");
+      io.errorOutput.write("Interrupt received; Setsuna owns run cleanup.\n");
       controller.abort();
       return;
     }
@@ -2160,90 +2132,6 @@ async function restoreInput(input, wasRaw, wasPaused) {
   input.setRawMode?.(wasRaw);
 }
 
-// ../setsuna/src/lease-keeper.ts
-var MAX_TIMER_DELAY_MS = 2147483647;
-var SYSTEM_RUNTIME = {
-  now: Date.now,
-  setTimeout: (callback, delayMs) => setTimeout(callback, delayMs),
-  clearTimeout: (handle) => clearTimeout(handle)
-};
-var ActiveLeaseKeeper = class {
-  #client;
-  #sandboxId;
-  #runtime;
-  #expiresAtMs;
-  #failureHandler;
-  #running = false;
-  #timer;
-  constructor(client, sandboxId, runtime = SYSTEM_RUNTIME) {
-    this.#client = client;
-    this.#sandboxId = sandboxId;
-    this.#runtime = runtime;
-  }
-  async renewNow() {
-    if (this.#running) throw new TypeError("Cannot prime a running lease keeper.");
-    this.#expiresAtMs = await this.#renewExpiry();
-  }
-  start(onFailure) {
-    if (this.#running) throw new TypeError("The lease keeper is already running.");
-    if (this.#expiresAtMs === void 0) {
-      throw new TypeError("The lease keeper must renew the sandbox before it starts.");
-    }
-    this.#running = true;
-    this.#failureHandler = onFailure;
-    try {
-      this.#schedule(this.#expiresAtMs);
-    } catch (error) {
-      this.#running = false;
-      this.#failureHandler = void 0;
-      throw error;
-    }
-  }
-  stop() {
-    this.#running = false;
-    this.#failureHandler = void 0;
-    if (this.#timer !== void 0) this.#runtime.clearTimeout(this.#timer);
-    this.#timer = void 0;
-  }
-  async #renewExpiry() {
-    const { expiresAt } = await this.#client.renew(this.#sandboxId);
-    const expiresAtMs = Date.parse(expiresAt);
-    if (!Number.isFinite(expiresAtMs) || expiresAtMs <= this.#runtime.now()) {
-      throw new TypeError("Sandbox renewal returned an invalid or expired expiresAt value.");
-    }
-    return expiresAtMs;
-  }
-  #schedule(expiresAtMs) {
-    const remainingMs = expiresAtMs - this.#runtime.now();
-    if (!Number.isFinite(remainingMs) || remainingMs <= 0) {
-      throw new TypeError(
-        "The renewed sandbox lease expired before its next renewal was scheduled."
-      );
-    }
-    const delayMs = Math.min(MAX_TIMER_DELAY_MS, Math.max(1, Math.floor(remainingMs / 2)));
-    this.#timer = this.#runtime.setTimeout(() => {
-      this.#timer = void 0;
-      void this.#renewAndSchedule().catch((error) => this.#fail(error));
-    }, delayMs);
-  }
-  async #renewAndSchedule() {
-    const expiresAtMs = await this.#renewExpiry();
-    if (!this.#running) return;
-    this.#expiresAtMs = expiresAtMs;
-    this.#schedule(expiresAtMs);
-  }
-  #fail(error) {
-    if (!this.#running) return;
-    this.#running = false;
-    const handler = this.#failureHandler;
-    this.#failureHandler = void 0;
-    try {
-      handler?.(error);
-    } catch {
-    }
-  }
-};
-
 // ../setsuna/src/cli-shell.ts
 var DETACH_BYTE = 29;
 var DEFAULT_TERM = "xterm-256color";
@@ -2264,7 +2152,7 @@ async function runShellCliCommand(commandName, commandArguments, attachProcessId
   );
   return true;
 }
-async function runShellCommand(commandArguments, attachProcessId, client, io, terminal, leaseRuntime) {
+async function runShellCommand(commandArguments, attachProcessId, client, io, terminal) {
   if (commandArguments.length !== 1 || commandArguments[0] === "") {
     throw new TypeError("setsuna shell requires exactly one sandbox ID.");
   }
@@ -2273,21 +2161,9 @@ async function runShellCommand(commandArguments, attachProcessId, client, io, te
   }
   if (attachProcessId === "") throw new TypeError("--attach requires a process ID.");
   const sandboxId = commandArguments[0];
-  const leaseKeeper = new ActiveLeaseKeeper(client, sandboxId, leaseRuntime);
-  await leaseKeeper.renewNow();
-  try {
-    const size = terminal.size();
-    const processId = await resolveProcess(
-      client,
-      sandboxId,
-      attachProcessId,
-      size,
-      terminal.term()
-    );
-    await attachTerminal(client, sandboxId, processId, io, terminal, leaseKeeper);
-  } finally {
-    leaseKeeper.stop();
-  }
+  const size = terminal.size();
+  const processId = await resolveProcess(client, sandboxId, attachProcessId, size, terminal.term());
+  await attachTerminal(client, sandboxId, processId, io, terminal);
 }
 async function resolveProcess(client, sandboxId, attachProcessId, size, localTerm) {
   if (attachProcessId === void 0) {
@@ -2310,21 +2186,12 @@ async function resolveProcess(client, sandboxId, attachProcessId, size, localTer
   if (process2.state === "running") await client.resizeProcess(sandboxId, attachProcessId, size);
   return attachProcessId;
 }
-async function attachTerminal(client, sandboxId, processId, io, terminal, leaseKeeper) {
+async function attachTerminal(client, sandboxId, processId, io, terminal) {
   const controller = new AbortController();
-  const session = createAttachedSession(
-    client,
-    sandboxId,
-    processId,
-    io,
-    terminal,
-    controller,
-    () => leaseKeeper.stop()
-  );
+  const session = createAttachedSession(client, sandboxId, processId, io, terminal, controller);
   let exitFrame;
   let attachError;
   try {
-    leaseKeeper.start(session.fail);
     for await (const frame of client.attachProcess(sandboxId, processId, {
       maxStreamBytes: Number.MAX_SAFE_INTEGER,
       signal: controller.signal
@@ -2351,7 +2218,7 @@ async function attachTerminal(client, sandboxId, processId, io, terminal, leaseK
   }
   if (exitFrame.exitCode !== null) terminal.setExitCode(exitFrame.exitCode);
 }
-function createAttachedSession(client, sandboxId, processId, io, terminal, controller, stopLeaseKeeper) {
+function createAttachedSession(client, sandboxId, processId, io, terminal, controller) {
   let detached = false;
   let failure;
   let cleaned = false;
@@ -2364,7 +2231,6 @@ function createAttachedSession(client, sandboxId, processId, io, terminal, contr
     cleaned = true;
     io.input.off("data", onInput);
     terminal.offResize(onResize);
-    stopLeaseKeeper();
     restored = restoreRawMode();
   };
   const fail = (error) => {
@@ -2455,11 +2321,12 @@ function isDetachAbort(error) {
 // ../setsuna/src/cli-interactive-persistent-actions.ts
 function createPersistentInteractiveActions(client, io, shellTerminal) {
   return {
-    async startMicrovm(microvmConfigurationId) {
-      const lease = await client.create({ microvmConfigurationId });
+    async startMicrovm(microvmConfigurationId, duration) {
+      const lease = await client.create({ microvmConfigurationId, duration });
       return {
         sandboxId: lease.sandboxId,
         expiresAt: lease.expiresAt,
+        duration: lease.duration,
         vcpuCount: lease.microvmConfiguration.vcpuCount,
         memoryMiB: lease.microvmConfiguration.memoryMiB
       };
@@ -2476,13 +2343,11 @@ function createPersistentInteractiveActions(client, io, shellTerminal) {
       return (await client.listProcesses(sandboxId)).filter((process2) => process2.state === "running" && process2.terminal !== void 0).map(({ processId, pid }) => ({ processId, pid }));
     },
     async runPersistentCommand(sandboxId, command, timeoutMs) {
-      await client.renew(sandboxId);
       const result = await client.execute(sandboxId, command, {
         ...timeoutMs === void 0 ? {} : { timeoutMs }
       });
       return interactiveRunResult(result);
     },
-    renewMicrovm: (sandboxId) => client.renew(sandboxId),
     destroyMicrovm: (sandboxId) => client.destroy(sandboxId)
   };
 }
@@ -2543,18 +2408,7 @@ var DEFAULT_SIGNAL_RUNTIME = {
 var STANDALONE_BOX = { withGuide: false, width: "auto" };
 var EXIT_MESSAGE = "Sayonara!";
 function formatRunPhase(phase) {
-  switch (phase) {
-    case "starting-microvm":
-      return "Starting microVM";
-    case "microvm-ready":
-      return "microVM ready";
-    case "running-command":
-      return "Running command";
-    case "destroying-microvm":
-      return "Cleaning up";
-    case "microvm-destroyed":
-      return "microVM destroyed";
-  }
+  return phase === "running" ? "Running on Setsuna" : "Complete";
 }
 function formatRunResult(result) {
   const facts = [`Exit status ${result.exitStatus}`, `${result.durationMs} ms`];
@@ -2593,6 +2447,10 @@ function formatMicrovmState(microvm, now) {
   if (microvm.vcpuCount !== void 0 && microvm.memoryMiB !== void 0) {
     lines.push(`Compute     ${formatMicrovmShape(microvm.vcpuCount, microvm.memoryMiB)}`);
   }
+  if (microvm.duration !== void 0) {
+    lines.push(`Duration    ${microvm.duration}`);
+    return lines.join("\n");
+  }
   const remaining = remainingTime(microvm.expiresAt, now);
   lines.push(remaining === void 0 ? "Expired" : `Expires in  ${remaining}`);
   return lines.join("\n");
@@ -2908,12 +2766,25 @@ async function startMicrovmMenu(io, actions, promptUi) {
   const configurations = (await actions.microvmConfigurations()).configurations;
   const configuration = await promptForMicrovmConfiguration(io, promptUi, configurations);
   if (configuration === null) return;
-  const sandbox = await startSandbox(io, actions, promptUi, configuration.id);
+  const duration = await promptUi.select(
+    {
+      message: "Duration",
+      options: [
+        { value: "20m", label: "20 minutes" },
+        { value: "1h", label: "1 hour" },
+        { value: "2h", label: "2 hours" }
+      ],
+      initialValue: "20m"
+    },
+    io
+  );
+  if (duration === TUI_CANCEL) return;
+  const sandbox = await startSandbox(io, actions, promptUi, configuration.id, duration);
   if (sandbox === void 0) return;
   promptUi.box(formatMicrovmState(sandbox, Date.now()), "microVM ready", io, STANDALONE_BOX);
   await manageSandbox(io, actions, promptUi, sandbox);
 }
-async function startSandbox(io, actions, promptUi, microvmConfigurationId) {
+async function startSandbox(io, actions, promptUi, microvmConfigurationId, duration) {
   let interrupted = false;
   const spinner = promptUi.spinner(io, {
     indicator: "timer",
@@ -2924,7 +2795,7 @@ async function startSandbox(io, actions, promptUi, microvmConfigurationId) {
   spinner.start("Starting microVM");
   let sandbox;
   try {
-    sandbox = await actions.startMicrovm(microvmConfigurationId);
+    sandbox = await actions.startMicrovm(microvmConfigurationId, duration);
   } catch (error) {
     spinner.error(formatTuiError(error));
     return void 0;
@@ -2978,7 +2849,6 @@ async function manageSandbox(io, actions, promptUi, initial) {
           { value: "open-terminal", label: "Open terminal" },
           { value: "reattach-terminal", label: "Reattach terminal" },
           { value: "run-command", label: "Run command" },
-          { value: "renew", label: "Renew" },
           { value: "destroy", label: "Destroy microVM" },
           { value: "back", label: "Back" }
         ],
@@ -2999,33 +2869,17 @@ async function manageSandbox(io, actions, promptUi, initial) {
 async function dispatchSandboxChoice(choice, microvm, io, actions, promptUi) {
   if (choice === "open-terminal") {
     await actions.openTerminal(microvm.sandboxId);
-    return refreshExpiry(actions, microvm);
+    return microvm;
   }
   if (choice === "reattach-terminal") {
-    const attached = await reattachTerminal(io, actions, promptUi, microvm.sandboxId);
-    return attached ? refreshExpiry(actions, microvm) : microvm;
+    await reattachTerminal(io, actions, promptUi, microvm.sandboxId);
+    return microvm;
   }
   if (choice === "run-command") {
-    const ran = await runPersistentCommand(io, actions, promptUi, microvm.sandboxId);
-    return ran ? refreshExpiry(actions, microvm) : microvm;
-  }
-  if (choice === "renew") return renewSandbox(io, actions, promptUi, microvm);
-  return await destroySandbox(io, actions, promptUi, microvm.sandboxId) ? void 0 : microvm;
-}
-async function renewSandbox(io, actions, promptUi, microvm) {
-  const status = await actions.renewMicrovm(microvm.sandboxId);
-  promptUi.success(`Renewed \xB7 ${formatExpiry(status.expiresAt, Date.now())}`, io);
-  return { ...microvm, expiresAt: status.expiresAt };
-}
-async function refreshExpiry(actions, microvm) {
-  try {
-    const current = (await actions.activeMicrovms()).find(
-      ({ sandboxId }) => sandboxId === microvm.sandboxId
-    );
-    return current === void 0 ? microvm : { ...microvm, expiresAt: current.expiresAt };
-  } catch {
+    await runPersistentCommand(io, actions, promptUi, microvm.sandboxId);
     return microvm;
   }
+  return await destroySandbox(io, actions, promptUi, microvm.sandboxId) ? void 0 : microvm;
 }
 async function reattachTerminal(io, actions, promptUi, sandboxId) {
   const processes = await actions.terminalProcesses(sandboxId);
@@ -3164,68 +3018,18 @@ async function dispatchMainChoice(choice, io, actions, promptUi, session) {
   return await accountMenu(io, actions.auth, promptUi, session) === "signed-out" ? "signed-out" : "continue";
 }
 
-// ../setsuna/src/cli-network-options.ts
-var NETWORK_OPTION_NAMES = [
-  "network-mode",
-  "host-ip",
-  "guest-ip",
-  "prefix-length",
-  "uplink-interface",
-  "dns-resolvers",
-  "mtu"
-];
-function routedNetworkFromCli(parsed) {
-  if (!NETWORK_OPTION_NAMES.some((name) => parsed.values[name] !== void 0)) return void 0;
-  if (parsed.values["network-mode"] !== "routed") {
-    throw new TypeError("--network-mode must be routed.");
-  }
-  const hostIp = required(parsed.values["host-ip"], "--host-ip");
-  const guestIp = required(parsed.values["guest-ip"], "--guest-ip");
-  const prefixLength = integer(parsed.values["prefix-length"], "--prefix-length");
-  if (prefixLength !== 30) throw new TypeError("--prefix-length must be 30.");
-  const uplinkInterface = required(parsed.values["uplink-interface"], "--uplink-interface");
-  const dnsResolvers = parsed.values["dns-resolvers"]?.split(",");
-  const mtu = optionalInteger2(parsed.values.mtu, "--mtu");
-  return {
-    mode: "routed",
-    hostIp,
-    guestIp,
-    prefixLength: 30,
-    uplinkInterface,
-    ...dnsResolvers === void 0 ? {} : { dnsResolvers },
-    ...mtu === void 0 ? {} : { mtu }
-  };
-}
-function required(value, name) {
-  if (value === void 0 || value === "") throw new TypeError(`${name} is required.`);
-  return value;
-}
-function integer(value, name) {
-  if (value === void 0 || !/^[0-9]+$/u.test(value)) {
-    throw new TypeError(`${name} must be an integer.`);
-  }
-  const parsed = Number(value);
-  if (!Number.isSafeInteger(parsed)) throw new TypeError(`${name} is too large.`);
-  return parsed;
-}
-function optionalInteger2(value, name) {
-  return value === void 0 ? void 0 : integer(value, name);
-}
-
 // ../setsuna/src/cli-commands.ts
 async function runRunCommand(commandName, commandArguments, parsed, client, requestTimeoutMs, io, options) {
   if (commandName !== "run") throw new TypeError(`Unknown command: ${commandName ?? ""}`);
   if (commandArguments.length === 0)
     throw new TypeError("setsuna run requires a command after --.");
-  const network = routedNetworkFromCli(parsed);
   const result = await runWithSignalCleanup(
     client,
     commandArguments.map(shellQuote).join(" "),
     {
       timeoutMs: optionalInteger(parsed.values["timeout-ms"], "--timeout-ms"),
       requestTimeoutMs,
-      ...parsed.values["configuration-id"] === void 0 ? {} : { microvmConfigurationId: parsed.values["configuration-id"] },
-      ...network === void 0 ? {} : { network }
+      ...parsed.values["configuration-id"] === void 0 ? {} : { microvmConfigurationId: parsed.values["configuration-id"] }
     },
     io,
     options.signalRuntime ?? DEFAULT_SIGNAL_RUNTIME
@@ -3368,8 +3172,56 @@ function exactly(arguments_, count, message) {
   return arguments_;
 }
 
+// ../setsuna/src/cli-network-options.ts
+var NETWORK_OPTION_NAMES = [
+  "network-mode",
+  "host-ip",
+  "guest-ip",
+  "prefix-length",
+  "uplink-interface",
+  "dns-resolvers",
+  "mtu"
+];
+function routedNetworkFromCli(parsed) {
+  if (!NETWORK_OPTION_NAMES.some((name) => parsed.values[name] !== void 0)) return void 0;
+  if (parsed.values["network-mode"] !== "routed") {
+    throw new TypeError("--network-mode must be routed.");
+  }
+  const hostIp = required(parsed.values["host-ip"], "--host-ip");
+  const guestIp = required(parsed.values["guest-ip"], "--guest-ip");
+  const prefixLength = integer(parsed.values["prefix-length"], "--prefix-length");
+  if (prefixLength !== 30) throw new TypeError("--prefix-length must be 30.");
+  const uplinkInterface = required(parsed.values["uplink-interface"], "--uplink-interface");
+  const dnsResolvers = parsed.values["dns-resolvers"]?.split(",");
+  const mtu = optionalInteger2(parsed.values.mtu, "--mtu");
+  return {
+    mode: "routed",
+    hostIp,
+    guestIp,
+    prefixLength: 30,
+    uplinkInterface,
+    ...dnsResolvers === void 0 ? {} : { dnsResolvers },
+    ...mtu === void 0 ? {} : { mtu }
+  };
+}
+function required(value, name) {
+  if (value === void 0 || value === "") throw new TypeError(`${name} is required.`);
+  return value;
+}
+function integer(value, name) {
+  if (value === void 0 || !/^[0-9]+$/u.test(value)) {
+    throw new TypeError(`${name} must be an integer.`);
+  }
+  const parsed = Number(value);
+  if (!Number.isSafeInteger(parsed)) throw new TypeError(`${name} is too large.`);
+  return parsed;
+}
+function optionalInteger2(value, name) {
+  return value === void 0 ? void 0 : integer(value, name);
+}
+
 // ../setsuna/src/cli-sandbox-commands.ts
-var SANDBOX_COMMANDS = /* @__PURE__ */ new Set(["create", "list", "status", "renew", "exec", "destroy"]);
+var SANDBOX_COMMANDS = /* @__PURE__ */ new Set(["create", "list", "status", "exec", "destroy"]);
 async function runSandboxCommand(commandName, commandArguments, parsed, client, requestTimeoutMs, io, options) {
   if (commandName === void 0 || !SANDBOX_COMMANDS.has(commandName)) return false;
   if (commandName === "create") {
@@ -3377,6 +3229,7 @@ async function runSandboxCommand(commandName, commandArguments, parsed, client,
     const network = routedNetworkFromCli(parsed);
     writeLease(
       await client.create({
+        duration: parsed.values.duration ?? "20m",
         ...parsed.values["configuration-id"] === void 0 ? {} : { microvmConfigurationId: parsed.values["configuration-id"] },
         ...network === void 0 ? {} : { network }
       }),
@@ -3390,9 +3243,6 @@ async function runSandboxCommand(commandName, commandArguments, parsed, client,
   } else if (commandName === "status") {
     const sandboxId = requireSandboxId(commandName, commandArguments);
     writeStatus(await client.status(sandboxId), parsed.values.json, io.output, "Sandbox");
-  } else if (commandName === "renew") {
-    const sandboxId = requireSandboxId(commandName, commandArguments);
-    writeStatus(await client.renew(sandboxId), parsed.values.json, io.output, "Renewed sandbox");
   } else if (commandName === "destroy") {
     const sandboxId = requireSandboxId(commandName, commandArguments);
     await client.destroy(sandboxId);
@@ -3474,7 +3324,7 @@ function writeLease(lease, json, output, verb) {
 `);
   else {
     output.write(
-      `${verb} sandbox ${lease.sandboxId} with configuration ${lease.microvmConfiguration.id}; lease expires at ${lease.expiresAt}.
+      `${verb} sandbox ${lease.sandboxId} with configuration ${lease.microvmConfiguration.id}; duration ${lease.duration}, expires at ${lease.expiresAt}.
 `
     );
   }
@@ -3507,6 +3357,8 @@ function writeDestroyed(sandboxId, json, output) {
 
 // ../setsuna/src/cli-client.ts
 async function runClientCli(commandName, commandArguments, parsed, authenticated, io, options) {
+  if (parsed.values.duration !== void 0 && commandName !== "create")
+    throw new TypeError("--duration is supported only by setsuna create.");
   const requestTimeoutMs = optionalInteger(
     parsed.values["request-timeout-ms"],
     "--request-timeout-ms"
@@ -3721,7 +3573,6 @@ function customerSafeSandboxActions(actions) {
     openTerminal: customerSafe(actions.openTerminal),
     terminalProcesses: customerSafe(actions.terminalProcesses),
     runPersistentCommand: customerSafe(actions.runPersistentCommand),
-    renewMicrovm: customerSafe(actions.renewMicrovm),
     destroyMicrovm: customerSafe(actions.destroyMicrovm)
   };
 }
@@ -3750,10 +3601,9 @@ var PREVIEW_HELP = `Usage:
   setsuna auth logout [--json]
   setsuna health [--json]
   setsuna configurations [--json]
-  setsuna create [--configuration-id ID] [--request-timeout-ms MS] [--json]
+  setsuna create [--duration 20m|1h|2h] [--configuration-id ID] [--request-timeout-ms MS] [--json]
   setsuna list [--request-timeout-ms MS] [--json]
   setsuna status SANDBOX_ID [--request-timeout-ms MS] [--json]
-  setsuna renew SANDBOX_ID [--request-timeout-ms MS] [--json]
   setsuna exec SANDBOX_ID [--timeout-ms MS] [--request-timeout-ms MS] [--json] -- COMMAND [ARG...]
   setsuna destroy SANDBOX_ID [--request-timeout-ms MS] [--json]
   setsuna shell SANDBOX_ID [--attach PROCESS_ID] [--request-timeout-ms MS]
@@ -3770,8 +3620,7 @@ Commands:
   configurations List available microVM configurations.
   create  Create a persistent sandbox with a selected or default configuration.
   list    List active persistent sandboxes.
-  status  Inspect an active persistent sandbox lease.
-  renew   Extend an active persistent sandbox lease.
+  status  Inspect an active persistent sandbox.
   exec    Execute a command without destroying the persistent sandbox.
   destroy Explicitly destroy a persistent sandbox.
   shell   Open an interactive shell in a persistent sandbox, or reattach to one.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "setsuna-microvm",
-  "version": "0.5.3",
+  "version": "0.5.4",
   "description": "Command-line interface for the Setsuna Research Preview.",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://semswitch.com/setsuna",