withruntime 0.11.1 → 0.12.0

package/README.md

@@ -26,12 +26,14 @@ console.log(result.exitCode, result.stdout);
 ```
 
 `Sandbox.create()` needs no arguments and returns once the sandbox is running;
-`await using` stops it when the block ends (Node 24, Bun or TypeScript; on
-Node 22 call `await sbx.stop()`). With no arguments you get the free
-trial while it lasts (100 free hours, up to eight sandboxes running at once), 2 vCPU, 4 GiB of
+`await using` deletes it when the block ends (Node 24, Bun or TypeScript; on
+Node 22 call `await sbx.delete()`), and `keep: true` stops it instead, keeping
+its disk. With no arguments you get the
+included usage, 100 hours of a 2 vCPU, 4 GB sandbox every month with no card (up to
+eight sandboxes running at once without credit), 2 vCPU, 4 GiB of
 memory and a 4 GiB disk. The current default image includes NumPy, pandas and
 matplotlib; see the [sandbox environment](https://withruntime.com/docs/sandbox-environment).
-The trial's hours are spent first, then prepaid credit, with nothing to
+The included usage is spent first, then prepaid credit, with nothing to
 choose; `funding` is accepted and ignored.
 
 The sandbox object does the rest:
@@ -40,7 +42,7 @@ The sandbox object does the rest:
   work, with `cwd`, `env` (the place for secrets), `stdin` and `timeoutMs`;
 - `terminal()` for an interactive terminal over a WebSocket;
 - `forwardPort(5432)` to reach any TCP port in the sandbox from this machine, and
-  `tunnel()` for single connections and SSH logins (`runtime sandbox ssh` uses it);
+  `tunnel()` for single connections and SSH logins (`runtime sandboxes ssh` uses it);
 - `files` to read, write, list, glob, stat, move and remove, and to copy whole
   directories with `upload` and `download`;
 - `pause`, `wake`, `extend`, `fork` and `snapshot` (a paused sandbox also wakes
@@ -160,14 +162,14 @@ https://withruntime.com/docs/frameworks.
 
 ```bash no-run
 printf '%s\n' 'print(sum([125, 250, 375]))' > invoice.py
-npx withruntime sandbox run -- python3 - < invoice.py   # connects on first use
-npx withruntime sandbox create
+npx withruntime sandboxes run -- python3 - < invoice.py   # connects on first use
+npx withruntime sandboxes create
 npx withruntime help
 ```
 
 Installed with `npm i -g withruntime`, the command is `runtime`:
-`runtime sandbox exec <id> -- ls`, `runtime sandbox shell <id>`,
-`runtime image build --pip pandas`, and `--json` on every command.
+`runtime sandboxes exec <id> -- ls`, `runtime sandboxes shell <id>`,
+`runtime images build --pip pandas`, and `--json` on every command.
 
 ## MCP
 

package/README.src.md

@@ -28,12 +28,14 @@ console.log(result.exitCode, result.stdout);
 ```
 
 `Sandbox.create()` needs no arguments and returns once the sandbox is running;
-`await using` stops it when the block ends (Node 24, Bun or TypeScript; on
-Node 22 call `await sbx.stop()`). With no arguments you get the free
-trial while it lasts ({{trial-hours}} free hours, up to {{trial-sandboxes}} sandboxes running at once), 2 vCPU, 4 GiB of
+`await using` deletes it when the block ends (Node 24, Bun or TypeScript; on
+Node 22 call `await sbx.delete()`), and `keep: true` stops it instead, keeping
+its disk. With no arguments you get the
+included usage, {{included-machine}} every month with no card (up to
+{{trial-sandboxes}} sandboxes running at once without credit), 2 vCPU, 4 GiB of
 memory and a 4 GiB disk. The current default image includes NumPy, pandas and
 matplotlib; see the [sandbox environment](https://withruntime.com/docs/sandbox-environment).
-The trial's hours are spent first, then prepaid credit, with nothing to
+The included usage is spent first, then prepaid credit, with nothing to
 choose; `funding` is accepted and ignored.
 
 The sandbox object does the rest:
@@ -42,7 +44,7 @@ The sandbox object does the rest:
   work, with `cwd`, `env` (the place for secrets), `stdin` and `timeoutMs`;
 - `terminal()` for an interactive terminal over a WebSocket;
 - `forwardPort(5432)` to reach any TCP port in the sandbox from this machine, and
-  `tunnel()` for single connections and SSH logins (`runtime sandbox ssh` uses it);
+  `tunnel()` for single connections and SSH logins (`runtime sandboxes ssh` uses it);
 - `files` to read, write, list, glob, stat, move and remove, and to copy whole
   directories with `upload` and `download`;
 - `pause`, `wake`, `extend`, `fork` and `snapshot` (a paused sandbox also wakes
@@ -162,14 +164,14 @@ https://withruntime.com/docs/frameworks.
 
 ```bash no-run
 printf '%s\n' 'print(sum([125, 250, 375]))' > invoice.py
-npx withruntime sandbox run -- python3 - < invoice.py   # connects on first use
-npx withruntime sandbox create
+npx withruntime sandboxes run -- python3 - < invoice.py   # connects on first use
+npx withruntime sandboxes create
 npx withruntime help
 ```
 
 Installed with `npm i -g withruntime`, the command is `runtime`:
-`runtime sandbox exec <id> -- ls`, `runtime sandbox shell <id>`,
-`runtime image build --pip pandas`, and `--json` on every command.
+`runtime sandboxes exec <id> -- ls`, `runtime sandboxes shell <id>`,
+`runtime images build --pip pandas`, and `--json` on every command.
 
 ## MCP
 

package/VERCEL.md

@@ -16,9 +16,11 @@ from withruntime.vercel import sandbox  # was: from vercel import sandbox
 from withruntime.vercel.sandbox import sync as sandbox  # was: from vercel.sandbox import sync as sandbox
 ```
 
-The mapping was written against `@vercel/sandbox` 3.5.1 and `vercel-sandbox`
-0.7.0 on PyPI (the `vercel.sandbox` module of `vercel` 0.11.4), checked
-30 September 2026.
+The JavaScript mapping was checked against `@vercel/sandbox` 3.6.1 on
+8 October 2026. Python was checked against `vercel-sandbox` 0.9.0 on PyPI
+(the `vercel.sandbox` module of `vercel` 0.11.6) on 7 October 2026.
+0.9.0 adds `get_drive`, which raises `NotSupportedError` like
+the other Drive calls; `vercel` 0.11.6 only raises its `vercel-sandbox` floor.
 
 ## Keys
 
@@ -90,13 +92,13 @@ Each of these throws `NotSupportedError` before anything happens. Its
 
 | Vercel Sandbox                                             | Use instead                                                                                           |
 | ---------------------------------------------------------- | ----------------------------------------------------------------------------------------------------- |
-| An `image` with no Runtime image of that name              | Build it: `npx withruntime image build --dockerfile Dockerfile --name <image>`.                       |
+| An `image` with no Runtime image of that name              | Build it: `npx withruntime images build --dockerfile Dockerfile --name <image>`.                      |
 | Drives (`mounts`), `networkId`                             | Runtime volumes through `withruntime: { create: { volumes } }`; network rules.                        |
 | A region outside the US, `failoverRegions`                 | Runtime runs in one US region.                                                                        |
 | Network rules that transform or forward requests           | Allow the domain and store the credential as a Runtime secret for it: the sandbox sees a placeholder. |
 | A `timeout` earlier than the current lease's end           | Stop the sandbox when you are done with it.                                                           |
 | Sessions (`currentSession`, `listSessions`)                | A Runtime sandbox is its own session.                                                                 |
-| `openInteractive`                                          | `sandbox.withruntime.terminal(...)` or `npx withruntime sandbox shell <id>`.                          |
+| `openInteractive` (Python: `open_interactive`)             | `sandbox.withruntime.terminal(...)` or `npx withruntime sandboxes shell <id>`.                        |
 | `update` of tags, resources, persistence or region         | Create a new sandbox with them.                                                                       |
 | Overrides on `Sandbox.fork`                                | Fork, then change what Runtime can change.                                                            |
 | `delete({ deleteOrphanSnapshots: true })`, `Snapshot.tree` | Delete snapshots one by one; `Snapshot.list`.                                                         |
@@ -123,6 +125,42 @@ Some differences are not refusals:
   Vercel's `universal` has Python 3.14.
 - A git source is cloned into the working directory itself.
 
+## JavaScript qualification, 8 October 2026
+
+Reviewed the exact published npm tarballs for `@vercel/sandbox` 3.5.1 → 3.6.1.
+Both tarballs matched their registry SHA-512 integrities; the 3.6.1 value in
+`compatibility-lock.json` came from `npm view @vercel/sandbox@3.6.1 dist.integrity`.
+No downloaded package code was installed or executed.
+
+The distribution diff changes 31 files, representing five TypeScript source
+files in the source maps: `drive.ts`, `version.ts`, `api-client.ts`,
+`base-client.ts` and `validators.ts`. CommonJS and ES-module source-map
+contents match. The changes and their dispositions:
+
+| Upstream change                                                                                                                                                                                             | Drop-in disposition                                                                                                                                                                                                                                                                                                   |
+| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `Drive.get({ name, signal?, token?, teamId?, projectId?, fetch? })` retrieves an existing drive without creating one. Internally it sends GET to the encoded drive-name path with `projectId` in the query. | Already refused by the `Drive` export before credentials or requests, with `NotSupportedError` naming `runtime.volumes` and `withruntime: { create: { volumes } }`.                                                                                                                                                   |
+| `drive.fork({ name, signal? })` creates a drive inheriting data, maximum size and region. Its POST uses the source drive name, `projectId` query and `{ name }` body.                                       | All Drive construction and retrieval remain refused, so no unsupported Drive instance can reach this call. Use Runtime volumes; no Vercel Drive fork is claimed.                                                                                                                                                      |
+| `drive.parentDriveId` and `drive.rootDriveId`, optional strings, expose ancestry. Drive response validation now retains those fields, including list/get/create/fork/update responses.                      | The same Drive refusal applies. No ancestry or Vercel drive metadata is fabricated.                                                                                                                                                                                                                                   |
+| Streaming `runCommand` disables retry of the command POST. After receiving its command id, a cut, early EOF or incomplete final JSON record recovers logs and then waits for the same command.              | Mapped through native Runtime process ids and byte cursors: no command is restarted after its id arrives. Initial Runtime transport retries use the same idempotency key. Attached commands now throw `StreamError` with `output_truncated` when recovery reports missing bytes, as detached commands already do.     |
+| `Command.logs()` reconnects interrupted log bodies up to twice, waiting 200 ms then 400 ms, skipping previously delivered stdout/stderr characters separately.                                              | Mapped through Runtime's byte cursor across both streams. Runtime follows stream slices and connection cuts; repeated empty streams stop after four reads, and continuous failures have a five-minute recovery budget. These are Runtime's recovery limits, not Vercel's retry timing.                                |
+| `getCommand`, including waiting for completion, retries failures while reading the response body, up to twice. Parsing can consume the already-read body.                                                   | Native Runtime JSON reads already retry through the complete body, with the client's `maxRetries` (four by default). Completion comes from the native process output's exit event rather than Vercel's command-wait endpoint.                                                                                         |
+| Stream parsing now preserves UTF-8 across chunks, classifies connection cuts and incomplete final JSON, closes readers and propagates cancellation or application errors without recovery.                  | Runtime already uses a persistent `TextDecoderStream`, closes its readers and resumes at the byte cursor after a cut or partial record. Permanent structured API errors and cancellation are not replayed. Runtime also retries parse failures as stream cuts; it does not expose Vercel's private `ConnectionError`. |
+| Sandbox/snapshot declarations reorder existing status union members; the package and internal version advance.                                                                                              | No status values, package exports, dependencies or other caller signatures change. No adapter change needed.                                                                                                                                                                                                          |
+
+`tests/vercel-3-6.test.ts` exercises the real Runtime transport with controlled
+HTTP responses: attached and detached recovery, stdout/stderr ordering, one-byte
+UTF-8 chunks, incomplete JSON, no command replay, bounded empty-stream failure,
+permanent errors, Drive lookup refusal and missing-output refusal. Before the
+adapter change, both missing-output cases resolved successfully instead of
+throwing. These tests do not prove live-host recovery, isolation, performance
+superiority or full Vercel compatibility; the provider remains `partial`.
+
+`tests/compat/reference.bun.lock` has no Vercel entry. The consumer declaration
+check in `tests/compat/check-consumers.ts` reads the main compatibility lock and
+requires the extracted upstream version to match it; neither needs a separate
+Vercel version edit. The separate oracle was not run for this source review.
+
 ## Tests
 
 `bun run test` in `packages/cloud-sdk` runs the unit tests of both languages

package/compatibility-lock.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "checkedAt": "2026-09-29",
+  "checkedAt": "2026-10-11",
   "providers": [
     {
       "id": "e2b",
@@ -9,35 +9,35 @@
         {
           "registry": "npm",
           "name": "e2b",
-          "version": "2.52.0",
+          "version": "2.55.0",
           "artifacts": {
-            "2.52.0": "sha512-TmUZlAvQq8BbguodpA+BBdawR/x5uILMQtHcLkdaLUqevsDjDdh46IYYU8ZRYKsQ4OhWr4xhsFIPSg1kgf+O0w=="
+            "2.55.0": "sha512-viC7GLHMPqzilndlKgNXWN0ebMV8fpbI1IfDlPd+GHuNcJIcUCXKyr5HAxjcC5sDMym3rrbyUyUQ+zQVAU9oGA=="
           }
         },
         {
           "registry": "npm",
           "name": "@e2b/code-interpreter",
-          "version": "2.8.0",
+          "version": "2.8.3",
           "artifacts": {
-            "2.8.0": "sha512-tWFi8IJYV3V6jOVfQ8V5PkzockrYP+ndWB/jKiJvRATTmNAy8+S/7S+iSh2Lb2Hrul869G2adRiN2xW8peJTig=="
+            "2.8.3": "sha512-xrSwGtyEoYFZJTtOI8UzYzsNmi4SL/fsH4jxRjJYJDtIHYHLD+sFR6gxGYs5xRYLGxi56ptVMTayX/26ZzJlEA=="
           }
         },
         {
           "registry": "pypi",
           "name": "e2b",
-          "version": "2.52.0",
+          "version": "2.55.1",
           "artifacts": {
-            "e2b-2.52.0-py3-none-any.whl": "sha256-6f4b5084b09986db43e99c7405bae6b14dc56984a69bbb1dc0687f1c71515cfb",
-            "e2b-2.52.0.tar.gz": "sha256-58c0042609513799341d4c1837e2581a4a5e73d3d62c9f1c57495c5e23eedee2"
+            "e2b-2.55.1-py3-none-any.whl": "sha256-30aec382a7cac5401e0aa0efb156422459f586101809c3e9f34a6fcf797097db",
+            "e2b-2.55.1.tar.gz": "sha256-5255f9a01dc484c343f750d13d3a9c857ef3511222a240572ddce2563dd301d9"
           }
         },
         {
           "registry": "pypi",
           "name": "e2b-code-interpreter",
-          "version": "2.10.1",
+          "version": "2.10.5",
           "artifacts": {
-            "e2b_code_interpreter-2.10.1-py3-none-any.whl": "sha256-f4c9732699ee4b1c289acedac8bff66fccecc6ab374bf0b4ef88d5ad063e333d",
-            "e2b_code_interpreter-2.10.1.tar.gz": "sha256-94e504667788c6cbb175e5deaf1f68e8df474b670343fe1d72e2496b49d5a666"
+            "e2b_code_interpreter-2.10.5-py3-none-any.whl": "sha256-ac98cd29335ae4f035b70a4eb5f6ca89dc5728d48de79cfb7d90a08d57a652b5",
+            "e2b_code_interpreter-2.10.5.tar.gz": "sha256-ea478929289d0f9936e236cf9e36b914f4df7ef58ca2e5b1e851c1f3b13bf5ca"
           }
         }
       ]
@@ -49,42 +49,42 @@
         {
           "registry": "npm",
           "name": "@daytona/sdk",
-          "version": "0.220.0",
+          "version": "0.223.1",
           "artifacts": {
-            "0.220.0": "sha512-PJio3vbDwRApzlsK6AGO7r4CHJcF9PI5DWuUW2yUnA2MVJSh/jotS0onKBv6boC5F+oboljTibUMxrwVPIrOlQ=="
+            "0.223.1": "sha512-Ja6bacvUBuODjKcWGczZn6k9w+7veIces4k2tdizPUndj3pjgnHrphq/TbdIvJfKtz91yQ+S4mKoKaeuKQLc7g=="
           }
         },
         {
           "registry": "pypi",
           "name": "daytona",
-          "version": "0.220.0",
+          "version": "0.223.1",
           "artifacts": {
-            "daytona-0.220.0-py3-none-any.whl": "sha256-5f71299eaf3a446e6569ada69919fc49997c1b2c587845057394aab886f113c8",
-            "daytona-0.220.0.tar.gz": "sha256-eda82eac9b3601e757b1dbe3ec2d966b46a9e3038b69ce44a0d90e01dac8417a"
+            "daytona-0.223.1-py3-none-any.whl": "sha256-768564fbbe45a91eb0ba6e5e0f36a743e17cc14b7a3a2108aae931ae820a15c1",
+            "daytona-0.223.1.tar.gz": "sha256-72a4a7a795f44aa678daad52d74bd69d11eeacd894f310895a313200ea8fec1f"
           }
         },
         {
           "registry": "npm",
           "name": "@daytona/api-client",
-          "version": "0.220.0",
+          "version": "0.223.1",
           "artifacts": {
-            "0.220.0": "sha512-XaMEtiQCaIHc3T7y3HUqx1A5eWSnd+FJvhpSHDwP3Snu9Nnhy4t+K2LHBWgJQn9dGtWXsdOsbB9K0BqpmFJtyA=="
+            "0.223.1": "sha512-p/NaCr3NbKUKPwqDBJBHHvToUMqh7QIyHT5rENzJYSrs9RCMfsifbtTpe0nHyOokfZhIceHWFcOtT2JwJYmSKQ=="
           }
         },
         {
           "registry": "npm",
           "name": "@daytona/toolbox-api-client",
-          "version": "0.220.0",
+          "version": "0.223.1",
           "artifacts": {
-            "0.220.0": "sha512-Kn94AOxhGQil0XygOOR26SaCkndE4dOtxYS0hLbqrTxcP3H1uq1HGFGSRkHFQNkaR8eL9QwFUPSMqd0Vr3A64A=="
+            "0.223.1": "sha512-Sl91T6kLIfilU5njZWGzU8KAeHtOfv6pw6iPO1JmX8UhjqfriOy6exPyCxSiBpmyZsQy0eL80IecdbTZPvnmcQ=="
           }
         },
         {
           "registry": "npm",
           "name": "@daytona/analytics-api-client",
-          "version": "0.220.0",
+          "version": "0.223.1",
           "artifacts": {
-            "0.220.0": "sha512-3BGYILzjo2aFTJhLd6XBXlNEQBSo9Zr2Nj31OdX9o50fMRVUwVydF6ekIGkPGSLwskz6b6xxg5BSS+f9dbrxCQ=="
+            "0.223.1": "sha512-LntjeNKKHpjzpCwgGbfYRvQ733b7SLfGpeM5ZTA12YK82YfvssGPDRkfo7xi88ndsbYteE+L9TpqYx3aH3WncA=="
           }
         }
       ]
@@ -96,27 +96,27 @@
         {
           "registry": "npm",
           "name": "@vercel/sandbox",
-          "version": "3.5.1",
+          "version": "3.6.1",
           "artifacts": {
-            "3.5.1": "sha512-VHItQtcv4FkSXET29b088p87MNPAIhRscF3ifrup2KkC8ix4hy4NpgCO9F3GI4yOsztgGtuV7bDx29Iufun2hQ=="
+            "3.6.1": "sha512-U6dwyadp2SmW/M96W2Bb3UjIql6TOOYwu9McUIwob209pj0A3ks/wKrMv7lCE7INx50J5zOpqLhMOnFa+Yodlg=="
           }
         },
         {
           "registry": "pypi",
           "name": "vercel",
-          "version": "0.11.4",
+          "version": "0.11.6",
           "artifacts": {
-            "vercel-0.11.4-py3-none-any.whl": "sha256-3ba3a0de2276a2b3daf590263082f6a82850dc77b35cf68f86a1e5bc9e83b6f1",
-            "vercel-0.11.4.tar.gz": "sha256-80038906615bf4182787af8354bce71b57d9fd5471a35ebca457d34ab5f50b2e"
+            "vercel-0.11.6-py3-none-any.whl": "sha256-3dfad0bfc6a6ba380246acec7346ed89020247e16e4294d88f3d9a296d2d5f43",
+            "vercel-0.11.6.tar.gz": "sha256-af96132f898e0bc8421e5ae16a0d16fd973aaebaf3f0852d3ffef076af7a22ed"
           }
         },
         {
           "registry": "pypi",
           "name": "vercel-sandbox",
-          "version": "0.7.0",
+          "version": "0.9.0",
           "artifacts": {
-            "vercel_sandbox-0.7.0-py3-none-any.whl": "sha256-f7eb897a1a5092fe8c38319ce803033b1a9ced8f414564a43a668432f91ffcd9",
-            "vercel_sandbox-0.7.0.tar.gz": "sha256-07d703790d0141dc75e0962baf35d666a6961bc1de913749137267a2550c81e2"
+            "vercel_sandbox-0.9.0-py3-none-any.whl": "sha256-eebc4ecd430ff3845f4f5a36c18d7ba80405f459533bb0d206caed9b2a3ed5ab",
+            "vercel_sandbox-0.9.0.tar.gz": "sha256-5b75e3aead43f9b9dea6c74d5fabdf5539b874c6d9e65cb6570ee0ac077848fb"
           }
         }
       ]
@@ -151,18 +151,18 @@
         {
           "registry": "npm",
           "name": "@runloop/api-client",
-          "version": "1.32.0",
+          "version": "2.0.0",
           "artifacts": {
-            "1.32.0": "sha512-aCNKjlGzLVEAFl8WA42LmgiYkdIkaocOlFK/cMGppijsM0AGS+1hkw/RxroQxyHlkIhjyRaqLv7m5ZNMGhks7Q=="
+            "2.0.0": "sha512-1npSvS5rVTUrNbtjGYoMXOb7r4OL7XhRJGPo1buu1iED5rxOXzU7+nDT0Spe+TFwDz9PL+X5frikTEYJ312PEA=="
           }
         },
         {
           "registry": "pypi",
           "name": "runloop-api-client",
-          "version": "1.32.0",
+          "version": "2.0.0",
           "artifacts": {
-            "runloop_api_client-1.32.0-py3-none-any.whl": "sha256-23c36910de7423f73aef91d4a963abea80a6b2f5b2df5bb8e439d788d5486cc7",
-            "runloop_api_client-1.32.0.tar.gz": "sha256-1f2077fb5a99b5ef30dbc1d96d47c1ca1d3f77895b9e186d985e47365fe85634"
+            "runloop_api_client-2.0.0-py3-none-any.whl": "sha256-85e22da5b7cc67dc6c4c126523800976794677ee42fa2c36ef9dd7be099f009a",
+            "runloop_api_client-2.0.0.tar.gz": "sha256-9ac246ac8003e87d616857e54965cc4b526d2fa4a815016583d74f3d2c59e390"
           }
         }
       ]
@@ -196,10 +196,10 @@
         {
           "registry": "pypi",
           "name": "sprites-py",
-          "version": "0.7.1",
+          "version": "0.7.2",
           "artifacts": {
-            "sprites_py-0.7.1-py3-none-any.whl": "sha256-23774f8111c9a4fbb7007f8e305677734eb7616bebb6c668c394788399ff38a8",
-            "sprites_py-0.7.1.tar.gz": "sha256-c45596f3994376eb25dd7c4f988b3a6893dd8218502bacd7eedf2b20888d8456"
+            "sprites_py-0.7.2-py3-none-any.whl": "sha256-b9015928cf2cab8c99f31f7fa245b088f9f26f37ce047721bcdf9c63e1f2f502",
+            "sprites_py-0.7.2.tar.gz": "sha256-bebc5aec3c1a2a7a5090b8a1efd4b0cb2ed2c10baf72c8b85ea050d59c054c8c"
           }
         }
       ]
@@ -211,9 +211,9 @@
         {
           "registry": "npm",
           "name": "freestyle",
-          "version": "0.2.16",
+          "version": "0.2.17",
           "artifacts": {
-            "0.2.16": "sha512-8pC7lh/R2PDanbs9Noc1Q7YlPl8Be8hHaQA/rpwFmELrcLTUAuCuxpoZ1Xm+7fuxqhJqJzO83bTTeLcSUoJ9SA=="
+            "0.2.17": "sha512-SQRRJAP+y56/nIDwmqJG5Y5IqqKYAmABqv/gjyzANy0wUe3cqnV1iD14nU9lQAYWtQ5UCl+lnE38nXZFKO0J9Q=="
           }
         }
       ]
@@ -231,31 +231,40 @@
             "prime_sandboxes-0.4.1.tar.gz": "sha256-53f7577dc9070e3b8e30db360f9e3cce3bcc35f8765b26f24f64dbc3c7763b06"
           },
           "latestReview": {
-            "version": "0.4.2",
+            "version": "0.4.3",
             "artifacts": {
-              "prime_sandboxes-0.4.2-py3-none-any.whl": "sha256-ed59f001c7575339d6c903166c5468f783eda0997586ec6476fd8b35f65746f9",
-              "prime_sandboxes-0.4.2.tar.gz": "sha256-4990a724cac0a662fde6e12e7eccfee092a78679cc568653b8ef52008dfa28e4"
+              "prime_sandboxes-0.4.3-py3-none-any.whl": "sha256-dd26007838c25b5d38a8b7af0514c07027b783406c0ea5b9fcf0eb74a45139bd",
+              "prime_sandboxes-0.4.3.tar.gz": "sha256-a2169182f74307485c73f897e224c978eba3276133ddb40715be4d346594c487"
             },
-            "reviewedAt": "2026-10-02",
+            "reviewedAt": "2026-10-08",
             "disposition": "held-for-sdk-qualification",
             "evidence": {
               "sourceUrls": [
-                "https://pypi.org/pypi/prime-sandboxes/0.4.2/json",
-                "https://files.pythonhosted.org/packages/3f/4d/a379cdf82d6f06c970bd4f0333c2360c08aba65c809d7492f49aece84c66/prime_sandboxes-0.4.2.tar.gz",
-                "https://files.pythonhosted.org/packages/da/b5/6a9fe6ae1342872c1c0cc45072cc0c58a5fa2783c4c45770e585f2535c8f/prime_sandboxes-0.4.2-py3-none-any.whl",
+                "https://pypi.org/pypi/prime-sandboxes/0.4.3/json",
+                "https://files.pythonhosted.org/packages/d8/1b/01e02c9d2346956f5ed77d269f836905a017ad796a4b4c719debd8942dc4/prime_sandboxes-0.4.3.tar.gz",
+                "https://files.pythonhosted.org/packages/e1/5f/d0b5cd1dabdb6e5cb1ab5d84c8ba9a96e2a9a0be8913ec9db9177c9645fb/prime_sandboxes-0.4.3-py3-none-any.whl",
                 "https://github.com/PrimeIntellect-ai/prime/tree/main/packages/prime-sandboxes"
               ],
               "artifactSha256": {
-                "prime_sandboxes-0.4.2-py3-none-any.whl": "ed59f001c7575339d6c903166c5468f783eda0997586ec6476fd8b35f65746f9",
-                "prime_sandboxes-0.4.2.tar.gz": "4990a724cac0a662fde6e12e7eccfee092a78679cc568653b8ef52008dfa28e4"
+                "prime_sandboxes-0.4.3-py3-none-any.whl": "dd26007838c25b5d38a8b7af0514c07027b783406c0ea5b9fcf0eb74a45139bd",
+                "prime_sandboxes-0.4.3.tar.gz": "a2169182f74307485c73f897e224c978eba3276133ddb40715be4d346594c487"
               },
               "changes": [
                 "Source diff of the 0.4.1 and 0.4.2 sdists, downloaded and hashed on the Mac, nothing installed or run: README, __init__, models.py, sandbox.py, one test changed; tests/test_checkpoints.py added.",
                 "Adds filesystem checkpoints: SandboxCheckpoint, CheckpointLookupError and BatchCheckpointResponse models; checkpoint, get_checkpoint, get_checkpoints (batch of up to 100 ids), wait_for_checkpoint and list_checkpoints on the sync and async clients; CreateSandboxRequest takes checkpoint_id with a validate_restore_source check.",
                 "CreateSandboxRequest.docker_image becomes Optional (None when restoring from a checkpoint) and disk_size_gb's default 5.0 becomes None.",
                 "Background job launch: the working_dir prefix is 'cd DIR || exit 1;' instead of 'cd DIR &&', and the launch cwd is / for an absolute working_dir.",
+                "Source diff of the 0.4.2 and 0.4.3 sdists, downloaded and hashed on the Mac, nothing installed or run; the wheel's package source matched the sdist's: __init__, core/client.py, models.py, sandbox.py and tests/test_checkpoints.py changed.",
+                "Adds checkpoint deletion: delete_checkpoint (DELETE /sandbox/checkpoints/{id}, 409 while pending or the active tip) and delete_sandbox_checkpoints (DELETE /sandbox/{id}/checkpoints) on the sync and async clients, with DeleteSandboxCheckpointsResponse and CheckpointDeleteError (NOT_FOUND or CONFLICT) models exported.",
+                "The core client returns {} for an HTTP 204 instead of parsing an empty body.",
                 "No existing method was removed or renamed. Installed consumer qualification against withruntime/prime is not run; the supported pin stays 0.4.1."
               ]
+            },
+            "between": {
+              "0.4.2": {
+                "prime_sandboxes-0.4.2-py3-none-any.whl": "sha256-ed59f001c7575339d6c903166c5468f783eda0997586ec6476fd8b35f65746f9",
+                "prime_sandboxes-0.4.2.tar.gz": "sha256-4990a724cac0a662fde6e12e7eccfee092a78679cc568653b8ef52008dfa28e4"
+              }
             }
           }
         }

package/dist/billing-cli.d.ts

@@ -9,7 +9,7 @@ type Args = {
     positional: string[];
     flags: Map<string, string[]>;
 };
-export declare const BILLING_HELP = "runtime billing <command>\n\n  topup <usd> [--wait]      Buy credit with stablecoins (USDC on Base, Solana or Tempo).\n                            Prints an address per network and the exact amount to send.\n                            Send exactly that, from any wallet, before the time shown.\n                            --wait keeps checking until the credit lands.\n  status <id> [--wait]      Whether a top-up's payment has arrived\n\n  No account yet? An agent can open one with a wallet alone:\n  topup <usd> --new-account --accept-terms [--wait]\n                            Opens an account and its first top-up. Prints a claim code,\n                            shown once. --wait saves the key here once the money lands.\n  claim <code> [--wait]     Exchange a paid account's claim code for its key, saved here\n\n  $10 to $10,000 a top-up; $500 in an account's first week. By card:\n  https://withruntime.com/account/billing\n";
+export declare const BILLING_HELP = "runtime billing <command>\n\n  topup <usd> [--wait]      Buy credit with stablecoins (USDC on Base, Solana or Tempo).\n                            Prints an address per network and the exact amount to send.\n                            Send exactly that, from any wallet, before the time shown.\n                            --wait keeps checking until the credit lands.\n  status <id> [--wait]      Whether a top-up's payment has arrived\n\n  auto-top-up               Show auto top-up: the card is charged when credit runs low\n  auto-top-up on [--below <usd>] [--amount <usd>] [--monthly <usd>]\n                            Charge <amount> plus tax when credit falls below <below>,\n                            at most <monthly> a month: $10, $20 and $500 unless given,\n                            or as last set. At least $10, $20 and $100. 5% more as\n                            credit each time, and 200 sandboxes at once while on.\n                            A person saves the card at\n                            https://withruntime.com/account/billing\n  auto-top-up off           Turn it off. Running sandboxes are never stopped.\n\n  No account yet? An agent can open one with a wallet alone:\n  topup <usd> --new-account --accept-terms [--wait]\n                            Opens an account and its first top-up. Prints a claim code,\n                            shown once. --wait saves the key here once the money lands.\n  claim <code> [--wait]     Exchange a paid account's claim code for its key, saved here\n\n  $10 to $10,000 a top-up; $500 in an account's first week. By card:\n  https://withruntime.com/account/billing\n";
 /** Wallet-account commands need no key, and the claim saves the one they get. */
 export type WalletDeps = {
     open: typeof openWalletAccount;

package/dist/billing-cli.js

@@ -8,6 +8,16 @@ export const BILLING_HELP = `runtime billing <command>
                             --wait keeps checking until the credit lands.
   status <id> [--wait]      Whether a top-up's payment has arrived
 
+  auto-top-up               Show auto top-up: the card is charged when credit runs low
+  auto-top-up on [--below <usd>] [--amount <usd>] [--monthly <usd>]
+                            Charge <amount> plus tax when credit falls below <below>,
+                            at most <monthly> a month: $10, $20 and $500 unless given,
+                            or as last set. At least $10, $20 and $100. 5% more as
+                            credit each time, and 200 sandboxes at once while on.
+                            A person saves the card at
+                            https://withruntime.com/account/billing
+  auto-top-up off           Turn it off. Running sandboxes are never stopped.
+
   No account yet? An agent can open one with a wallet alone:
   topup <usd> --new-account --accept-terms [--wait]
                             Opens an account and its first top-up. Prints a claim code,
@@ -43,7 +53,7 @@ function describe(topup) {
     lines.push("", ...(topup.payBy ? [`Send before ${topup.payBy}.`] : []), "A different amount, token or network cannot be matched or returned automatically.", `The credit lands a few minutes after the transfer: \`${me} billing status ${topup.purchaseId}\`.`);
     return lines.join("\n");
 }
-const FLAGS = new Set(["wait", "new-account", "accept-terms"]);
+const FLAGS = new Set(["wait", "new-account", "accept-terms", "below", "amount", "monthly"]);
 export async function billingCommand(argv, args, out, client, sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms)), wallet) {
     const [verb, value] = args.positional;
     const has = (name) => args.flags.get(name)?.at(-1) === "true";
@@ -60,6 +70,11 @@ export async function billingCommand(argv, args, out, client, sleep = (ms) => ne
             throw usage("Wallet accounts are not available here.");
         return walletCommand(verb, value, has("accept-terms"), wait, out, sleep, wallet);
     }
+    if (verb === "auto-top-up")
+        return autoTopUpCommand(value, args, out, client);
+    for (const name of ["below", "amount", "monthly"])
+        if (args.flags.has(name))
+            throw usage(`--${name} is for \`billing auto-top-up on\`.`);
     const api = (await client()).billing;
     let topup;
     if (verb === "topup") {
@@ -95,6 +110,67 @@ export async function billingCommand(argv, args, out, client, sleep = (ms) => ne
     }
     return topup.status === "paid" ? 0 : 1;
 }
+const OFF_REASONS = {
+    declined: "the bank declined the last charge",
+    authentication_required: "the bank asked its holder to confirm the last charge",
+    card_removed: "the card was removed",
+    no_address: "Stripe had no billing address to work out tax",
+    blocked: "a payment on this account is under review",
+    failed: "the last charge did not go through",
+};
+function describeAuto(auto) {
+    const figures = auto.below !== null && auto.amount !== null && auto.monthlyLimit !== null
+        ? `adds $${auto.amount} when credit falls below $${auto.below}, up to $${auto.monthlyLimit} a month`
+        : null;
+    const lines = [
+        auto.enabled
+            ? `Auto top-up is on: it ${figures}. $${auto.thisMonth} added this month.`
+            : auto.waitingForCard
+                ? `Auto top-up turns on once a card is saved: it will ${figures}.`
+                : auto.offReason
+                    ? `Auto top-up is off: ${OFF_REASONS[auto.offReason]}.`
+                    : "Auto top-up is off.",
+    ];
+    if (auto.saveCardAt)
+        lines.push(`A person saves the card at ${auto.saveCardAt}`);
+    return lines.join("\n");
+}
+/** `billing auto-top-up [on|off]`. */
+async function autoTopUpCommand(verb, args, out, client) {
+    const flag = (name) => args.flags.get(name)?.at(-1);
+    const api = (await client()).billing.autoTopUp;
+    const options = { idempotencyKey: crypto.randomUUID() };
+    let auto;
+    if (!verb || verb === "show")
+        auto = await api.get();
+    else if (verb === "off")
+        auto = await api.off(options);
+    else if (verb === "on") {
+        // A figure not given keeps the one saved, or takes its default.
+        const figure = (name) => {
+            const value = flag(name);
+            if (value === undefined)
+                return undefined;
+            const usd = Number(value.replace(/^\$/, ""));
+            if (!value || !Number.isFinite(usd) || usd <= 0)
+                throw usage(`Give --${name} in dollars, such as --${name} 20.`);
+            return usd;
+        };
+        const below = figure("below");
+        const amount = figure("amount");
+        const monthlyLimit = figure("monthly");
+        auto = await api.set({
+            enabled: true,
+            ...(below === undefined ? {} : { below }),
+            ...(amount === undefined ? {} : { amount }),
+            ...(monthlyLimit === undefined ? {} : { monthlyLimit }),
+        }, options);
+    }
+    else
+        throw usage(`Unknown auto-top-up command ${verb}: show, on or off.`);
+    out.write(out.json ? JSON.stringify(auto) : describeAuto(auto));
+    return 0;
+}
 function dollarsOf(value) {
     const usd = Number(value?.replace(/^\$/, ""));
     if (!value || !Number.isFinite(usd) || usd <= 0)

package/dist/blaxel/errors.d.ts

@@ -35,6 +35,20 @@ export declare class NotSupportedError extends Error {
     readonly alternative: string;
     constructor(feature: string, alternative: string, message?: string);
 }
+/** Thrown by SandboxInstance.create / createIfNotExists when the sandbox was
+ * not running within the `timeout` asked for. The sandbox is deleted first,
+ * so its name is free and the creation can simply be started over, as on
+ * Blaxel. */
+export declare class SandboxCreationTimeoutError extends Error {
+    readonly sandboxName: string | undefined;
+    readonly timeout: number | undefined;
+    readonly code = "CREATION_TIMEOUT";
+    readonly status = 408;
+    readonly data: unknown;
+    constructor(sandboxName: string | undefined, timeout: number | undefined, data: unknown);
+}
+/** True when `err` is a sandbox creation timeout (408 CREATION_TIMEOUT). */
+export declare function isCreationTimeoutError(err: unknown): err is SandboxCreationTimeoutError;
 /** A ResponseError of this status and message, made here rather than by
  * Runtime: a process or preview that is not there, a wait that ran out. */
 export declare function responseError(status: number, message: string): ResponseError;

package/dist/blaxel/errors.js

@@ -72,6 +72,35 @@ export class NotSupportedError extends Error {
         this.alternative = alternative;
     }
 }
+/** Thrown by SandboxInstance.create / createIfNotExists when the sandbox was
+ * not running within the `timeout` asked for. The sandbox is deleted first,
+ * so its name is free and the creation can simply be started over, as on
+ * Blaxel. */
+export class SandboxCreationTimeoutError extends Error {
+    sandboxName;
+    timeout;
+    code = "CREATION_TIMEOUT";
+    status = 408;
+    data;
+    constructor(sandboxName, timeout, data) {
+        const detail = typeof data === "object" &&
+            data !== null &&
+            typeof data.message === "string"
+            ? data.message
+            : undefined;
+        const target = sandboxName ? `Sandbox ${sandboxName}` : "Sandbox";
+        const deadline = timeout !== undefined ? ` within ${timeout}s` : " within the creation deadline";
+        super(`${target} was not ready${deadline}; the creation was cancelled.${detail ? ` ${detail}` : ""}`);
+        this.name = "SandboxCreationTimeoutError";
+        this.sandboxName = sandboxName;
+        this.timeout = timeout;
+        this.data = data;
+    }
+}
+/** True when `err` is a sandbox creation timeout (408 CREATION_TIMEOUT). */
+export function isCreationTimeoutError(err) {
+    return err instanceof SandboxCreationTimeoutError;
+}
 /** A ResponseError of this status and message, made here rather than by
  * Runtime: a process or preview that is not there, a wait that ran out. */
 export function responseError(status, message) {
@@ -94,15 +123,15 @@ const BLAXEL_HINTS = {
     cwd_not_found: "Make the directory with sandbox.fs.mkdir(path), or pass an existing workingDir to sandbox.process.exec.",
     sandbox_paused: "Call sandbox.unarchive(), then try again.",
     not_running: "The sandbox is not running: call sandbox.unarchive() if it was archived, or make a new one with SandboxInstance.create if it was deleted.",
-    trial_busy: "The trial's sandboxes are all in use: delete one you no longer need (sandbox.delete()) or archive it (sandbox.archive()), then try again. Moving to paid credit is the account owner's decision.",
-    public_preview_not_allowed: "On the trial, share the port privately: sandbox.previews.create({ metadata: { name }, spec: { port, public: false } }) and a token from preview.tokens.create(expiresAt) on a server supporting absolute preview deadlines. A public preview needs a paid sandbox, which is the account owner's decision.",
+    no_credit_running_limit: "The sandboxes an account without credit runs at once are all in use: delete one you no longer need (sandbox.delete()) or archive it (sandbox.archive()), then try again. Moving to paid credit is the account owner's decision.",
+    public_preview_not_allowed: "Without credit, share the port privately: sandbox.previews.create({ metadata: { name }, spec: { port, public: false } }) and a token from preview.tokens.create(expiresAt) on a server supporting absolute preview deadlines. A public preview needs a paid sandbox, which is the account owner's decision.",
     busy: AGAIN,
     guest_busy: AGAIN,
     rate_limited: AGAIN,
     unauthorized: "Set RUNTIME_API_KEY to a Runtime key (https://withruntime.com/account/keys), or run `npx withruntime login` once. A Blaxel key (BL_API_KEY) is never sent.",
 };
 /** A trial create over the trial's size, in Blaxel's field. */
-const TRIAL_CAP = "A trial sandbox has at most 4096 MB of memory (2 vCPUs); pass memory 4096 or add credit.";
+const TRIAL_CAP = "Without credit, a sandbox has at most 4096 MB of memory (2 vCPUs); pass memory 4096 or add credit.";
 /** A Runtime SDK error as Blaxel's: ResponseError (SandboxGatewayError for a
  * 502, 503 or 504), NotSupportedError for a product Runtime has switched off,
  * CredentialsError when there is no Runtime key. Anything else passes through
@@ -118,7 +147,7 @@ export function translate(error) {
         return new NotSupportedError(error.code.replace(/_unavailable$/, ""), error.hint ?? "", error.message);
     if (error.status < 200 || error.status > 599)
         return error;
-    const trialCap = error.code === "invalid_trial";
+    const trialCap = error.code === "no_credit_size_limit";
     const hint = trialCap ? undefined : (BLAXEL_HINTS[error.code] ?? error.hint);
     const message = [
         trialCap ? TRIAL_CAP : error.message,