withruntime 0.10.0 → 0.11.1

package/compatibility-lock.json

@@ -9,32 +9,9 @@
         {
           "registry": "npm",
           "name": "e2b",
-          "version": "2.51.0",
+          "version": "2.52.0",
           "artifacts": {
-            "2.51.0": "sha512-P+50lx1nOYpgCFyE1xuz6JVN/TqJivMUiH7v+RW0CUSfb4+NCu8IkC5KruT2sNPgp6aexddQQ77+OZKGpZZJ+Q=="
-          },
-          "latestReview": {
-            "version": "2.52.0",
-            "artifacts": {
-              "2.52.0": "sha512-TmUZlAvQq8BbguodpA+BBdawR/x5uILMQtHcLkdaLUqevsDjDdh46IYYU8ZRYKsQ4OhWr4xhsFIPSg1kgf+O0w=="
-            },
-            "reviewedAt": "2026-10-01",
-            "disposition": "held-for-sdk-qualification",
-            "evidence": {
-              "sourceUrls": [
-                "https://registry.npmjs.org/e2b/2.52.0",
-                "https://registry.npmjs.org/e2b/-/e2b-2.52.0.tgz"
-              ],
-              "artifactSha256": {
-                "2.52.0": "facbc53fa42757d94aa2be3433d779c7ab6b0afc780d4821a12a6d6815848c8e"
-              },
-              "changes": [
-                "dist/index.d.ts/index.mjs: HTTP1.1/2 selection, E2B_HTTP_VERSION, retry502/503 and connection failures, fork integer count 1..20, Dockerignore matching/precedence and invalid-pattern behavior changed. package.json changes protobuf/chalk/openapi-fetch floors. Installed transport/retry/fork/filesystem consumers not qualified; supported 2.51.0 unchanged.",
-                "Source digest dist/index.d.ts: 304acc9c8bbec8aeb69296719eb34986f987256e758aa7e220b551b9a7dcbd30 -> fa2e6eb09b6c6d3489056ee948248812e8879a23b6865561e5152f243bf6ca40.",
-                "Source digest dist/index.mjs: b75feeedb6543fee003533270b0f07fc1a9eb40315dfc0c44510e2dd8854b896 -> 343a41249ea8d48fe0a70fc986066d3ef97b6da2b71267211d21f77036efafea.",
-                "Source digest package.json: a2c759c4681b91b824aea7919f4661e498ec0e0b68d6cc333f4967f7b2b63f7b -> c5b699f80831b621178c83ea477d096bc1167e0083b6ba7a51d17f564207255f."
-              ]
-            }
+            "2.52.0": "sha512-TmUZlAvQq8BbguodpA+BBdawR/x5uILMQtHcLkdaLUqevsDjDdh46IYYU8ZRYKsQ4OhWr4xhsFIPSg1kgf+O0w=="
           }
         },
         {
@@ -48,72 +25,19 @@
         {
           "registry": "pypi",
           "name": "e2b",
-          "version": "2.51.0",
+          "version": "2.52.0",
           "artifacts": {
-            "e2b-2.51.0-py3-none-any.whl": "sha256-951d0fd069f017e760b338a435bdb83589b4bfb9574fc5203a7f777e9cb994c2",
-            "e2b-2.51.0.tar.gz": "sha256-902ee861b30c8ec3e46e7f84db8c993f30695872c7b4490efaad1627ec6e08ba"
-          },
-          "latestReview": {
-            "version": "2.52.0",
-            "artifacts": {
-              "e2b-2.52.0-py3-none-any.whl": "sha256-6f4b5084b09986db43e99c7405bae6b14dc56984a69bbb1dc0687f1c71515cfb",
-              "e2b-2.52.0.tar.gz": "sha256-58c0042609513799341d4c1837e2581a4a5e73d3d62c9f1c57495c5e23eedee2"
-            },
-            "reviewedAt": "2026-10-01",
-            "disposition": "held-for-sdk-qualification",
-            "evidence": {
-              "sourceUrls": [
-                "https://pypi.org/pypi/e2b/2.52.0/json",
-                "https://files.pythonhosted.org/packages/53/71/1a01b7e4486b5962eaade7dba7026876a1b4569e49b464e82912d8801e38/e2b-2.52.0-py3-none-any.whl",
-                "https://files.pythonhosted.org/packages/3c/c4/560e7de54cece3573086f09d304e595729964aa18593b437125d9f8bd926/e2b-2.52.0.tar.gz"
-              ],
-              "artifactSha256": {
-                "e2b-2.52.0-py3-none-any.whl": "6f4b5084b09986db43e99c7405bae6b14dc56984a69bbb1dc0687f1c71515cfb",
-                "e2b-2.52.0.tar.gz": "58c0042609513799341d4c1837e2581a4a5e73d3d62c9f1c57495c5e23eedee2"
-              },
-              "changes": [
-                "e2b/connection_config.py/retry.py: HTTP1.1/2 selection and E2B_HTTP_VERSION; retries 502/503 and eligible network failures, excluding unsafe resource-creating replay. e2b/api clients replace pool shards with bounded least-in-flight shared pools, defaults 100 streams / 200 connections.",
-                "Fork count validation1..20 and template/dockerignore/fileIgnorePatterns matching/precedence changed. Installed sync/async transport/cleanup/retry/fork/filesystem consumers not qualified; supported 2.51.0 unchanged.",
-                "Source digest e2b/api/__init__.py: 00b09a79f25d01594c4b1ec5f14d3d0cc3ccc319958a2e1ca34ba91cdbf114b3 -> 640233a615a3c68752a2f2cecb1af919aebfc5e895bd4f09003aee61da38c7c0.",
-                "Source digest e2b/connection_config.py: 284aa3e7cc319432ca9147ddb7d9ab8cd315cf35283da7699eebe877375758a4 -> c165948133a2f174b5a490afa9502301d038d8097f91203b2c2174f451accf83.",
-                "Source digest e2b/retry.py: aa54aa8873fd44027a9c3ff790594d4583d2f415c0d3bd858566d2f0e15fa71f -> 40b1d7ea0732a721d77b31483e54f9f190e444cb798c54fc141856f52685e208.",
-                "Source digest e2b/template/dockerignore.py: None -> cba4ff9d7efa5ae987c4c0114770c114b5aefe2c18847e55d2bd811b9a1a088c."
-              ]
-            }
+            "e2b-2.52.0-py3-none-any.whl": "sha256-6f4b5084b09986db43e99c7405bae6b14dc56984a69bbb1dc0687f1c71515cfb",
+            "e2b-2.52.0.tar.gz": "sha256-58c0042609513799341d4c1837e2581a4a5e73d3d62c9f1c57495c5e23eedee2"
           }
         },
         {
           "registry": "pypi",
           "name": "e2b-code-interpreter",
-          "version": "2.10.0",
+          "version": "2.10.1",
           "artifacts": {
-            "e2b_code_interpreter-2.10.0-py3-none-any.whl": "sha256-6ba776122086261875bc6033ef2dc42ac6b6e22cefdffdfd19d30e93bb09786f",
-            "e2b_code_interpreter-2.10.0.tar.gz": "sha256-57fb7f9b9ad99ebbdf407619786fdb84e31537c2fbc8358c394aa0f0cbc1af28"
-          },
-          "latestReview": {
-            "version": "2.10.1",
-            "artifacts": {
-              "e2b_code_interpreter-2.10.1-py3-none-any.whl": "sha256-f4c9732699ee4b1c289acedac8bff66fccecc6ab374bf0b4ef88d5ad063e333d",
-              "e2b_code_interpreter-2.10.1.tar.gz": "sha256-94e504667788c6cbb175e5deaf1f68e8df474b670343fe1d72e2496b49d5a666"
-            },
-            "reviewedAt": "2026-10-01",
-            "disposition": "held-for-sdk-qualification",
-            "evidence": {
-              "sourceUrls": [
-                "https://pypi.org/pypi/e2b-code-interpreter/2.10.1/json",
-                "https://files.pythonhosted.org/packages/27/1f/0f9a4c4d9669afd5389e91bd96099a8eb1d1a32f9c67871cc56c4a8556b7/e2b_code_interpreter-2.10.1-py3-none-any.whl",
-                "https://files.pythonhosted.org/packages/38/e6/b01e60524e7e4d2e8ce634b3be6d00fe09c606f3d24a448b4a5c087d3bda/e2b_code_interpreter-2.10.1.tar.gz"
-              ],
-              "artifactSha256": {
-                "e2b_code_interpreter-2.10.1-py3-none-any.whl": "f4c9732699ee4b1c289acedac8bff66fccecc6ab374bf0b4ef88d5ad063e333d",
-                "e2b_code_interpreter-2.10.1.tar.gz": "94e504667788c6cbb175e5deaf1f68e8df474b670343fe1d72e2496b49d5a666"
-              },
-              "changes": [
-                "code_interpreter_{sync,async}.py: Jupyter get_transport argument changes from http2=False to http_version=\"1.1\". pyproject.toml and PKG-INFO raise e2b floor to 2.52.0,<3.0.0. Installed Jupyter cancellation/base SDK consumers not qualified; supported 2.10.0 unchanged.",
-                "Source digest e2b_code_interpreter/code_interpreter_sync.py: 298d832fe93e488300ac3174f2de590cc16d3563bdcc4ec31439d28265b66426 -> a88ff6a0df5163bceea545d077be090dbc78c96e48354e304677b02799eec17e.",
-                "Source digest pyproject.toml: 6c395fdf75ddc89acabb94fd0e419fc31317e6f3fa297894cbe7e766f090322c -> ef2b569a82f2e6edf722939ab27ca476a292886655c2af8f9e75eb9cae287941."
-              ]
-            }
+            "e2b_code_interpreter-2.10.1-py3-none-any.whl": "sha256-f4c9732699ee4b1c289acedac8bff66fccecc6ab374bf0b4ef88d5ad063e333d",
+            "e2b_code_interpreter-2.10.1.tar.gz": "sha256-94e504667788c6cbb175e5deaf1f68e8df474b670343fe1d72e2496b49d5a666"
           }
         }
       ]
@@ -305,6 +229,34 @@
           "artifacts": {
             "prime_sandboxes-0.4.1-py3-none-any.whl": "sha256-1a1bb96afacc66d690815be82c0b7af180ea141421b7d180b4a0adbada4f38f0",
             "prime_sandboxes-0.4.1.tar.gz": "sha256-53f7577dc9070e3b8e30db360f9e3cce3bcc35f8765b26f24f64dbc3c7763b06"
+          },
+          "latestReview": {
+            "version": "0.4.2",
+            "artifacts": {
+              "prime_sandboxes-0.4.2-py3-none-any.whl": "sha256-ed59f001c7575339d6c903166c5468f783eda0997586ec6476fd8b35f65746f9",
+              "prime_sandboxes-0.4.2.tar.gz": "sha256-4990a724cac0a662fde6e12e7eccfee092a78679cc568653b8ef52008dfa28e4"
+            },
+            "reviewedAt": "2026-10-02",
+            "disposition": "held-for-sdk-qualification",
+            "evidence": {
+              "sourceUrls": [
+                "https://pypi.org/pypi/prime-sandboxes/0.4.2/json",
+                "https://files.pythonhosted.org/packages/3f/4d/a379cdf82d6f06c970bd4f0333c2360c08aba65c809d7492f49aece84c66/prime_sandboxes-0.4.2.tar.gz",
+                "https://files.pythonhosted.org/packages/da/b5/6a9fe6ae1342872c1c0cc45072cc0c58a5fa2783c4c45770e585f2535c8f/prime_sandboxes-0.4.2-py3-none-any.whl",
+                "https://github.com/PrimeIntellect-ai/prime/tree/main/packages/prime-sandboxes"
+              ],
+              "artifactSha256": {
+                "prime_sandboxes-0.4.2-py3-none-any.whl": "ed59f001c7575339d6c903166c5468f783eda0997586ec6476fd8b35f65746f9",
+                "prime_sandboxes-0.4.2.tar.gz": "4990a724cac0a662fde6e12e7eccfee092a78679cc568653b8ef52008dfa28e4"
+              },
+              "changes": [
+                "Source diff of the 0.4.1 and 0.4.2 sdists, downloaded and hashed on the Mac, nothing installed or run: README, __init__, models.py, sandbox.py, one test changed; tests/test_checkpoints.py added.",
+                "Adds filesystem checkpoints: SandboxCheckpoint, CheckpointLookupError and BatchCheckpointResponse models; checkpoint, get_checkpoint, get_checkpoints (batch of up to 100 ids), wait_for_checkpoint and list_checkpoints on the sync and async clients; CreateSandboxRequest takes checkpoint_id with a validate_restore_source check.",
+                "CreateSandboxRequest.docker_image becomes Optional (None when restoring from a checkpoint) and disk_size_gb's default 5.0 becomes None.",
+                "Background job launch: the working_dir prefix is 'cd DIR || exit 1;' instead of 'cd DIR &&', and the launch cwd is / for an absolute working_dir.",
+                "No existing method was removed or renamed. Installed consumer qualification against withruntime/prime is not run; the supported pin stays 0.4.1."
+              ]
+            }
           }
         }
       ]
@@ -328,6 +280,33 @@
           "artifacts": {
             "modal-1.6.0-py3-none-any.whl": "sha256-2f5981ba656570ad96379d29f0ddff876880708c84966024ce130e9e1794fa68",
             "modal-1.6.0.tar.gz": "sha256-c5dd551b5e0a283f3c764476c0a4ebe5bdef1e4a69432fa27e1b1ad8ca5e0817"
+          },
+          "latestReview": {
+            "version": "1.6.1",
+            "artifacts": {
+              "modal-1.6.1-py3-none-any.whl": "sha256-f408ef88563003a83e491a6be09d4221eaa6e038fa4faa2ad8b15b25afe949a4",
+              "modal-1.6.1.tar.gz": "sha256-ff17768f67a65595aa7882e893e6cb78e2e001b3653aa52cfe98d4051d8d9e9e"
+            },
+            "reviewedAt": "2026-10-03",
+            "disposition": "held-for-sdk-qualification",
+            "evidence": {
+              "sourceUrls": [
+                "https://pypi.org/pypi/modal/1.6.1/json",
+                "https://files.pythonhosted.org/packages/65/ba/2b36899ea5633bf101e6ba6f7e95a4da3e4b1f57f52bd0ba8f4cfd12e808/modal-1.6.1.tar.gz",
+                "https://files.pythonhosted.org/packages/d2/3c/6b7d9a15dab9af2833ce674bbc72b5654d4099d5b088f1cc1eda3f8249ca/modal-1.6.1-py3-none-any.whl"
+              ],
+              "artifactSha256": {
+                "modal-1.6.1-py3-none-any.whl": "f408ef88563003a83e491a6be09d4221eaa6e038fa4faa2ad8b15b25afe949a4",
+                "modal-1.6.1.tar.gz": "ff17768f67a65595aa7882e893e6cb78e2e001b3653aa52cfe98d4051d8d9e9e"
+              },
+              "changes": [
+                "Source diff of the 1.6.0 and 1.6.1 sdists, downloaded and hashed on the Mac, nothing installed or run; the 1.6.0 hashes match the pin. No file added or removed; 37 files changed, most in sandbox.py, the CLI and the generated protos.",
+                "Sandbox v2 calls send a per-sandbox token (x-modal-sandbox-token, from the create response) beside the auth token through a new _v2_metadata helper, including command router access.",
+                "Experimental sidecars take include_oidc_identity_token and proxy, refused for GPU sandboxes. Server sessions retry start with an idempotency key for up to 25 minutes; the CLI gains endpoint commands; stats types gain container_total_count; agent detection reads tool variables before AGENT and AI_AGENT.",
+                "Requirements: protobuf below 8.0 instead of 7.0, synchronicity ~=0.12.6 instead of ~=0.12.5. Some iterator return types become AsyncGenerator.",
+                "No public Sandbox, ContainerProcess, Image, App or file method used by withruntime/modal was removed or renamed; that drop-in does not import modal. Installed consumer qualification is not run; the supported pin stays 1.6.0."
+              ]
+            }
           }
         }
       ]

package/dist/api-defaults.d.ts

@@ -2,7 +2,7 @@
 export declare const WAIT_FOR_TIMEOUT_SECONDS = 60;
 /** A streamed exec's command limit when none is given: the API's longest. */
 export declare const STREAMED_EXEC_TIMEOUT_MS = 86400000;
-/** The lease keepAlive keeps ahead of now, and so the most it extends by. */
+/** The time keepAlive keeps ahead of a time limit, and so the most it extends by. */
 export declare const KEEP_ALIVE_MARGIN_SECONDS = 600;
 /** A webhook watch runs until stopped. */
 export declare const WEBHOOK_WATCH_TIMEOUT_MS = 0;

package/dist/api-defaults.js

@@ -7,7 +7,7 @@
 export const WAIT_FOR_TIMEOUT_SECONDS = 60;
 /** A streamed exec's command limit when none is given: the API's longest. */
 export const STREAMED_EXEC_TIMEOUT_MS = 86_400_000;
-/** The lease keepAlive keeps ahead of now, and so the most it extends by. */
+/** The time keepAlive keeps ahead of a time limit, and so the most it extends by. */
 export const KEEP_ALIVE_MARGIN_SECONDS = 600;
 /** A webhook watch runs until stopped. */
 export const WEBHOOK_WATCH_TIMEOUT_MS = 0;

package/dist/blaxel/lookup.d.ts

@@ -23,7 +23,8 @@ export declare const STANDBY: {
     idlePauseSeconds: number;
     autoWake: true;
 };
-/** Runtime's longest lease. The adapter renews it while the sandbox is used. */
+/** Runtime's longest time limit. A sandbox made before 0300 has it, and the
+ * adapter renews it while the sandbox is used; one made since has none. */
 export declare const LEASE_SECONDS = 3600;
 /** The live sandbox with this name (or Runtime id): one call. A 404 when
  * there is none, as Blaxel answers. */

package/dist/blaxel/lookup.js

@@ -30,7 +30,8 @@ export const STANDBY = {
     idlePauseSeconds: 60,
     autoWake: true,
 };
-/** Runtime's longest lease. The adapter renews it while the sandbox is used. */
+/** Runtime's longest time limit. A sandbox made before 0300 has it, and the
+ * adapter renews it while the sandbox is used; one made since has none. */
 export const LEASE_SECONDS = 3600;
 const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 /** The live sandbox with this name (or Runtime id): one call. A 404 when

package/dist/blaxel/sandbox.d.ts

@@ -58,16 +58,18 @@ type Resolved = {
 };
 /** A duration as Blaxel writes it ("30m", "24h", "7d", "1w", "1h30m"). */
 export declare function durationMs(value: string): number;
-/** The lease and the paused retention that honour Blaxel's TTL, expiry and
- * lifecycle: never deleted before Blaxel would delete it. A fixed deadline
- * within the hour is a lease that ends the sandbox; any other deadline keeps
- * a paused sandbox that many days, rounded up; none keeps it 365 days. */
+/** The time limit and the paused retention that honour Blaxel's TTL, expiry
+ * and lifecycle: never deleted before Blaxel would delete it. A fixed
+ * deadline within the hour is a time limit that ends the sandbox; past that
+ * there is none, so it runs while it works and pauses when idle (0300), and
+ * a paused sandbox is kept that many days, rounded up; none keeps it 365
+ * days. */
 export declare function lifetimeOf(asked: {
     ttl?: string | null;
     expires?: Date;
     lifecycle?: SandboxLifecycle | null;
 }): {
-    timeoutSeconds: number;
+    timeoutSeconds?: number;
     onLeaseEnd: "pause" | "stop";
     days: number;
 };

package/dist/blaxel/sandbox.js

@@ -71,10 +71,12 @@ export function durationMs(value) {
         total += Number(count) * unit[letter];
     return total;
 }
-/** The lease and the paused retention that honour Blaxel's TTL, expiry and
- * lifecycle: never deleted before Blaxel would delete it. A fixed deadline
- * within the hour is a lease that ends the sandbox; any other deadline keeps
- * a paused sandbox that many days, rounded up; none keeps it 365 days. */
+/** The time limit and the paused retention that honour Blaxel's TTL, expiry
+ * and lifecycle: never deleted before Blaxel would delete it. A fixed
+ * deadline within the hour is a time limit that ends the sandbox; past that
+ * there is none, so it runs while it works and pauses when idle (0300), and
+ * a paused sandbox is kept that many days, rounded up; none keeps it 365
+ * days. */
 export function lifetimeOf(asked) {
     const now = Date.now();
     const fixed = [];
@@ -110,7 +112,7 @@ export function lifetimeOf(asked) {
         : KEEP_DAYS;
     return soonest <= LEASE_SECONDS * 1000
         ? { timeoutSeconds: Math.max(60, Math.ceil(soonest / 1000)), onLeaseEnd: "stop", days }
-        : { timeoutSeconds: LEASE_SECONDS, onLeaseEnd: "pause", days };
+        : { onLeaseEnd: "pause", days };
 }
 /** Blaxel's network settings as Runtime's rules: allowed and forbidden
  * domains, from the network itself or from its proxy (Blaxel's current
@@ -402,9 +404,10 @@ export class SandboxInstance {
     }
     // ---- the live sandbox ---------------------------------------------------
     /** The sandbox, ready for a call. A paused one wakes by itself on the call
-     * (autoWake); one made without autoWake is woken here. A lease nearing its
-     * end is renewed in the background, so a sandbox in use is not paused by
-     * its lease. */
+     * (autoWake); one made without autoWake is woken here. A time limit
+     * nearing its end (an hour, on a sandbox made before 0300) is renewed in
+     * the background, so a sandbox in use is not paused by it; one with no
+     * time limit renews itself. */
     async #live() {
         if (this.#deleted)
             throw responseError(404, `Sandbox ${this.name} was deleted.`);
@@ -414,6 +417,8 @@ export class SandboxInstance {
             await this.#wake();
         else if (state === "running" &&
             rt.info.onLeaseEnd === "pause" &&
+            // One with no time limit renews itself (0300).
+            rt.info.endsAt !== null &&
             !this.#renewing &&
             Date.parse(rt.info.expiresAt) - Date.now() < RENEW_BELOW_MS)
             this.#renewing = rt
@@ -461,7 +466,7 @@ export class SandboxInstance {
                     labels: { ...labels, [IDLE_PAUSE]: labels[IDLE_PAUSE] ?? String(current ?? 0) },
                 }))
                 : undefined,
-            rt.info.onLeaseEnd === "pause" && need >= 1
+            rt.info.onLeaseEnd === "pause" && rt.info.endsAt !== null && need >= 1
                 ? rt.extend(Math.ceil(need)).catch(() => undefined)
                 : undefined,
         ]);
@@ -545,7 +550,7 @@ export class SandboxInstance {
             vcpu: Math.min(MAX_VCPU, Math.max(1, Math.round(memory / MEMORY_PER_VCPU))),
             memoryMiB: memory,
             ...STANDBY,
-            timeoutSeconds: lifetime.timeoutSeconds,
+            ...(lifetime.timeoutSeconds === undefined ? {} : { timeoutSeconds: lifetime.timeoutSeconds }),
             onLeaseEnd: lifetime.onLeaseEnd,
             ...(config.name ? { name: config.name } : {}),
             labels,

package/dist/cli.js

@@ -88,7 +88,7 @@ Observability
                                                Events and metrics to an OpenTelemetry endpoint
 
 Products
-  sandbox   Linux microVMs: exec, shell, files, code, previews, network, desktop
+  sandbox   Linux microVMs: exec, shell, files, code, previews, network, desktop, browser
   snapshot  Saved sandboxes, disk and memory, to start or fork from
   image     Custom images from a Dockerfile, any public or private image, or a package list
   volume    Persistent disks to attach to sandboxes
@@ -97,7 +97,7 @@ Products
   port      A public TCP port to a sandbox: databases, game servers
   address   A dedicated outbound address, for allow-lists
   tunnel    A WireGuard tunnel from your own network into your sandboxes
-  network   Account-wide network settings: send outbound traffic through your own proxy
+  network   Account-wide network settings: your own proxy, sandboxes reaching each other by name
   Each has its own help: \`runtime sandbox help\`, \`runtime image help\`...
 
 Every command takes --json. Keys: RUNTIME_API_KEY, or the connection from \`runtime login\`.
@@ -131,15 +131,19 @@ const SANDBOX_HELP = `runtime sandbox <command>
   cat <id> <path>                             Print a file
   files <id> [path] [--depth 1] [--glob '**/*.py']
   stop <id> | pause <id> | wake <id> | restart <id>
+  stop --label k=v [--label k=v]...           Stop every live sandbox with all those labels
   rm <id>                                     Delete it for good: stops it, deletes its disk and
                                               paused memory, revokes its previews; snapshots stay
   switch-image <id> <image> --keep-workspace  Move it to another image, keeping /workspace (your home),
                                               volumes, env and previews; processes restart, the rest of
                                               its disk is lost (snapshot it first to keep everything)
-  extend <id> <seconds>                       More time before the lease ends
+  resize <id> [--vcpu 2] [--memory 4096] --restart
+                                              Change its size by a restart: the whole disk stays,
+                                              programs stop (snapshot it first to keep memory)
+  extend <id> <seconds>                       Move a time limit on (one with none needs nothing)
   update <id> [--name n] [--label k=v]... [--env K=V]... [--unset-env K]... [--idle-pause <seconds>] [--auto-wake on|off]
               [--persistent on|off] [--max-total-cost <usd>|none]
-                                              Change its settings; persistent keeps it running
+                                              Change its settings; persistent keeps it running until stopped
   snapshot <id> [--name n] [--retention days] Keep its whole machine; prints the snapshot id
   mount <id> <s3|r2|gcs>://<bucket>[/prefix] <path> [--secret NAME] [--region r]
         [--endpoint https://...] [--account-id id] [--read-only]
@@ -180,6 +184,8 @@ const SANDBOX_HELP = `runtime sandbox <command>
                | type <text> | press <keys> | windows
   desktop <id> record start [--fps 10] [--max-seconds 1800] [--max-mib 512] | record stop <recId>
                | record ls | record fetch <recId> [file.mp4] | record rm <recId>
+  browser <id> start [--headed] [--width 1280] [--height 800] | get | stop
+                                              Chromium for CDP agents: prints its cdpUrl
 
 Examples
   id=$(runtime sandbox create)
@@ -410,6 +416,7 @@ const SANDBOX_VERBS = [
     "rm",
     "delete",
     "switch-image",
+    "resize",
     "pause",
     "wake",
     "restart",
@@ -437,6 +444,7 @@ const SANDBOX_VERBS = [
     "session",
     "network",
     "desktop",
+    "browser",
     "metrics",
     "watch",
     "mcp",
@@ -509,8 +517,18 @@ function describe(info) {
         ],
         ["funding", info.funding],
         ["region", info.region],
-        ["expires", info.expiresAt ?? "-"],
-        ["at lease end", info.onLeaseEnd ?? "-"],
+        // A sandbox with no time limit runs while it works (0300): endsAt is
+        // null. An older server sends no endsAt; its expiresAt was the end.
+        ["time limit", info.timeoutSeconds ? `${info.timeoutSeconds} s` : "none"],
+        [
+            "ends",
+            info.endsAt === null
+                ? info.state === "running"
+                    ? "when idle, stopped or out of credit"
+                    : "-"
+                : (info.endsAt ?? info.expiresAt ?? "-"),
+        ],
+        ["at its end", info.onLeaseEnd ?? "-"],
         // Why a sandbox is no longer running (troubleshooting.md, "A sandbox
         // stopped on its own"); `get` left both out until 30 September 2026.
         ...(info.pausedAt ? [["paused at", info.pausedAt]] : []),
@@ -1063,10 +1081,18 @@ export function usageCsv(u) {
         .join(","));
     return [head.join(","), ...rows].join("\n");
 }
+/** Milliseconds as hours, to a tenth: "8,731.2". */
+const hours = (ms) => (ms / 3_600_000).toLocaleString("en-US", { maximumFractionDigits: 1 });
 /** The free trial's time left, as `runtime usage` and `runtime limits` say it. */
 function trialLeft(trial) {
-    const hours = (ms) => (ms / 3_600_000).toLocaleString("en-US", { maximumFractionDigits: 1 });
-    return `${hours(trial.availableMs)} of ${hours(trial.totalMs)} hours left${trial.reservedMs > 0 ? `, ${hours(trial.reservedMs)} held by running sandboxes` : ""}`;
+    return `${hours(trial.availableMs)} of ${hours(trial.totalMs)} hours left`;
+}
+/** A pilot's sandbox hours left, as `runtime usage` says them. */
+function pilotLeft(pilot) {
+    const left = `${hours(pilot.leftMs)} of ${pilot.hours.toLocaleString("en-US")} left`;
+    return pilot.leftMs > 0
+        ? `${left}; new pilot sandboxes until ${pilot.endsAt.slice(0, 16).replace("T", " ")} UTC`
+        : "This pilot's sandbox hours are used.";
 }
 function usageSummary(u) {
     const micros = (value) => typeof value === "string" || typeof value === "number" || typeof value === "bigint"
@@ -1080,15 +1106,17 @@ function usageSummary(u) {
         // its own line, so "spent" reads as what was used.
         ["used", dollars(micros(u.spent) - takenBack)],
         ...(takenBack > 0n ? [["returned by refunds and disputes", dollars(takenBack)]] : []),
-        // Holds cover running sandboxes and the hour ahead of stored snapshots,
-        // images and volumes (pricing guide), so an account with nothing running
-        // can still show one.
-        ["held for running sandboxes and this hour's storage", dollars(micros(u.held))],
+        // What running sandboxes and the hour ahead of stored snapshots, images
+        // and volumes are about to use, so an account with nothing running can
+        // still show some. Said without "held": no guide teaches holds.
+        ["set aside for running sandboxes and this hour's storage", dollars(micros(u.held))],
     ];
     if (micros(u.expired) > 0n)
         rows.push(["expired or taken back", dollars(micros(u.expired))]);
     if (u.trial)
         rows.push(["free trial", trialLeft(u.trial)]);
+    if (u.pilot)
+        rows.push(["pilot sandbox hours", pilotLeft(u.pilot)]);
     if (u.outbound) {
         const gib = (bytes) => `${(bytes / 1_073_741_824).toLocaleString("en-US", { maximumFractionDigits: 1 })} GiB`;
         const left = Math.max(0, u.outbound.allowanceBytes - u.outbound.freeBytes);
@@ -1466,11 +1494,13 @@ async function sandbox(argv, env, out) {
                 s.state,
                 `${s.info.vcpu}/${s.info.memoryMiB}`,
                 s.info.funding,
-                s.info.expiresAt ?? "-",
+                // When it stops or pauses by itself (0381): its time limit's end, or
+                // "-" when it never will. An older server sends no endsAt.
+                (s.info.endsAt === undefined ? s.info.expiresAt : s.info.endsAt) ?? "-",
             ]);
             print([
                 rows.length
-                    ? table([["ID", "NAME", "STATE", "CPU/MIB", "FUNDING", "EXPIRES"], ...rows])
+                    ? table([["ID", "NAME", "STATE", "CPU/MIB", "FUNDING", "ENDS"], ...rows])
                     : stopped
                         ? "No live sandboxes."
                         : "No sandboxes. Create one: runtime sandbox create",
@@ -1495,6 +1525,21 @@ async function sandbox(argv, env, out) {
             print(describe(sbx.info), sbx.info);
             return 0;
         }
+        case "resize": {
+            const args = parse(rest, ["restart"], ["vcpu", "memory"]);
+            const sbx = await use(need(args.positional[0], `a sandbox, e.g. ${me} sandbox resize <id> --memory 4096 --restart`));
+            const size = {
+                ...(integer(args, "vcpu") !== undefined ? { vcpu: integer(args, "vcpu") } : {}),
+                ...(integer(args, "memory") !== undefined ? { memoryMiB: integer(args, "memory") } : {}),
+            };
+            if (size.vcpu === undefined && size.memoryMiB === undefined)
+                throw usage(`Name a new size, e.g. ${me} sandbox resize ${sbx.id} --memory 4096 --restart`);
+            if (!args.flags.has("restart"))
+                throw usage(`A resize restarts it: its whole disk stays and its programs stop. Add --restart to say so, or snapshot it first (${me} sandbox snapshot ${sbx.id}) to keep its memory too.`);
+            await sbx.resize(size, { restart: true });
+            print(describe(sbx.info), sbx.info);
+            return 0;
+        }
         case "rm":
         case "delete": {
             const sbx = await use(need(rest[0], `a sandbox, e.g. ${me} sandbox rm <id>`));
@@ -1506,6 +1551,23 @@ async function sandbox(argv, env, out) {
         case "pause":
         case "wake":
         case "restart": {
+            if (verb === "stop" && rest.some((word) => /^--label(=|$)/.test(word))) {
+                const args = parse(rest, [], ["label"]);
+                if (args.positional.length)
+                    throw usage("Give a sandbox id or --label, not both.");
+                const { stopped, failed } = await runtime.sandboxes.stopAll({
+                    labels: pairs(args, "label"),
+                });
+                const said = (error) => (error instanceof Error ? error.message : String(error));
+                print([
+                    stopped.length || failed.length
+                        ? `${stopped.length} stopped${failed.length ? `, ${failed.length} failed` : ""}.`
+                        : "No live sandbox has those labels.",
+                    ...stopped.map((id) => `${id} stopped`),
+                    ...failed.map((f) => `${f.id} failed: ${said(f.error)}`),
+                ].join("\n"), { stopped, failed: failed.map((f) => ({ id: f.id, error: said(f.error) })) });
+                return failed.length ? 1 : 0;
+            }
             const sbx = await get(rest[0]);
             await sbx[verb]();
             print(`${sbx.id} ${sbx.state}`, sbx.info);
@@ -1664,7 +1726,9 @@ async function sandbox(argv, env, out) {
             const sbx = await get(rest[0]);
             const seconds = Number(need(rest[1], "seconds, e.g. runtime sandbox extend <id> 600"));
             await sbx.extend(seconds);
-            print(`${sbx.id} now ends at ${sbx.info.expiresAt}`, sbx.info);
+            print(sbx.info.endsAt === null
+                ? `${sbx.id} has no time limit: it runs while it works, so nothing was extended`
+                : `${sbx.id} now ends at ${sbx.info.endsAt ?? sbx.info.expiresAt}`, sbx.info);
             return 0;
         }
         case "exec": {
@@ -1893,6 +1957,8 @@ async function sandbox(argv, env, out) {
         }
         case "desktop":
             return desktop(await use(rest[0]), rest.slice(1), out);
+        case "browser":
+            return browser(await use(rest[0]), rest.slice(1), out);
         case "watch":
             return (await import("./cli-extras.js")).watchCommand(await use(rest[0]), rest.slice(1), out, kit);
         case "mcp":
@@ -2227,6 +2293,35 @@ async function desktop(sbx, argv, out) {
     }
     throw usage(`${me} sandbox desktop <id> start|stop|screenshot|open|click|type|press|windows|record`);
 }
+async function browser(sbx, argv, out) {
+    const [action, ...rest] = argv;
+    const print = (human, value) => out.write(out.json ? JSON.stringify(value) : human);
+    switch (action) {
+        case "start": {
+            const args = parse(rest, ["headed"], ["width", "height"]);
+            const started = await sbx.browser.start({
+                ...(args.flags.has("headed") ? { headless: false } : {}),
+                ...(integer(args, "width") !== undefined ? { width: integer(args, "width") } : {}),
+                ...(integer(args, "height") !== undefined ? { height: integer(args, "height") } : {}),
+            });
+            print(`${started.version}${started.headless ? "" : `, on the desktop: ${started.streamUrl}`}\n` +
+                `CDP: ${started.cdpUrl}\n(private; it expires ${started.expiresAt ?? "never"})`, started);
+            return 0;
+        }
+        case "get":
+        case undefined: {
+            const state = await sbx.browser.get();
+            print(state.running ? `${state.version}\nCDP: ${state.cdpUrl}` : "No browser running.", state);
+            return 0;
+        }
+        case "stop": {
+            const stopped = await sbx.browser.stop();
+            print(stopped.stopped ? "Browser stopped." : "No browser was running.", stopped);
+            return 0;
+        }
+    }
+    throw usage(`${me} sandbox browser <id> start [--headed]|get|stop`);
+}
 const KEYS_HELP = `runtime keys <command>
 
   create [--name <name>] [--read-only] [--daily-limit <usd>] [--account-wide]
@@ -2712,8 +2807,8 @@ read = readSecret) {
 }
 const JOB_HELP = `runtime job <command>
 
-  A job runs a command in a fresh sandbox, once or on a schedule. Each run is a
-  paid sandbox billed at the sandbox rates; the trial's hours do not fund jobs.
+  A job runs a command in a fresh sandbox, once or on a schedule. Each run spends
+  the free trial's hours first, then credit at the sandbox rates.
 
   create <name> (--cron "<min hour day month weekday>" [--timezone Europe/Berlin] | --at <time|now>)
          [--vcpu 2] [--memory 4096] [--disk 4096] [--cpu shared|reserved] [--cpu-floor <thousandths>]

package/dist/client.d.ts

@@ -16,7 +16,11 @@ export type RuntimeOptions = {
     timeoutMs?: number;
     /** Retries of transport failures, 429, 502, 503 and 504. Default 4. */
     maxRetries?: number;
-    /** Calls in flight at once; more wait their turn and reuse connections. Default 32. */
+    /** Connections held at once, calls and streams (a command's output, a
+     * download) together; more wait their turn, first come first served, and
+     * reuse them. Default 48: one address may hold 64 connections to the API
+     * before it has used a valid key. 8 are kept for calls whatever the
+     * streams hold. */
     maxConnections?: number;
     /** How long `sandboxes.create` keeps retrying, with the same key and input,
      * when the trial's slots, the account's quota or the region is full
@@ -118,6 +122,18 @@ export declare class Sandboxes {
         name?: string;
         limit?: number;
     }, options?: RequestOptions): Promise<Page<Sandbox>>;
+    /** Stops every live sandbox whose labels all match, eight at a time, and
+     * says which stopped and which failed; one failure does not stop the rest.
+     * Needs at least one label, so stopping everything is never one call. */
+    stopAll(filter: {
+        labels: Record<string, string>;
+    }, options?: RequestOptions): Promise<{
+        stopped: string[];
+        failed: {
+            id: string;
+            error: unknown;
+        }[];
+    }>;
 }
 export declare class FeedbackApi {
     private readonly t;