withruntime 0.11.2 → 0.14.0

package/VERCEL.md

@@ -16,9 +16,11 @@ from withruntime.vercel import sandbox  # was: from vercel import sandbox
 from withruntime.vercel.sandbox import sync as sandbox  # was: from vercel.sandbox import sync as sandbox
 ```
 
-The mapping was written against `@vercel/sandbox` 3.5.1 and `vercel-sandbox`
-0.7.0 on PyPI (the `vercel.sandbox` module of `vercel` 0.11.4), checked
-30 September 2026.
+The JavaScript mapping was checked against `@vercel/sandbox` 3.6.1 on
+8 October 2026. Python was checked against `vercel-sandbox` 0.9.0 on PyPI
+(the `vercel.sandbox` module of `vercel` 0.11.6) on 7 October 2026.
+0.9.0 adds `get_drive`, which raises `NotSupportedError` like
+the other Drive calls; `vercel` 0.11.6 only raises its `vercel-sandbox` floor.
 
 ## Keys
 
@@ -90,13 +92,13 @@ Each of these throws `NotSupportedError` before anything happens. Its
 
 | Vercel Sandbox                                             | Use instead                                                                                           |
 | ---------------------------------------------------------- | ----------------------------------------------------------------------------------------------------- |
-| An `image` with no Runtime image of that name              | Build it: `npx withruntime image build --dockerfile Dockerfile --name <image>`.                       |
+| An `image` with no Runtime image of that name              | Build it: `npx withruntime images build --dockerfile Dockerfile --name <image>`.                      |
 | Drives (`mounts`), `networkId`                             | Runtime volumes through `withruntime: { create: { volumes } }`; network rules.                        |
 | A region outside the US, `failoverRegions`                 | Runtime runs in one US region.                                                                        |
 | Network rules that transform or forward requests           | Allow the domain and store the credential as a Runtime secret for it: the sandbox sees a placeholder. |
 | A `timeout` earlier than the current lease's end           | Stop the sandbox when you are done with it.                                                           |
 | Sessions (`currentSession`, `listSessions`)                | A Runtime sandbox is its own session.                                                                 |
-| `openInteractive`                                          | `sandbox.withruntime.terminal(...)` or `npx withruntime sandbox shell <id>`.                          |
+| `openInteractive` (Python: `open_interactive`)             | `sandbox.withruntime.terminal(...)` or `npx withruntime sandboxes shell <id>`.                        |
 | `update` of tags, resources, persistence or region         | Create a new sandbox with them.                                                                       |
 | Overrides on `Sandbox.fork`                                | Fork, then change what Runtime can change.                                                            |
 | `delete({ deleteOrphanSnapshots: true })`, `Snapshot.tree` | Delete snapshots one by one; `Snapshot.list`.                                                         |
@@ -123,6 +125,42 @@ Some differences are not refusals:
   Vercel's `universal` has Python 3.14.
 - A git source is cloned into the working directory itself.
 
+## JavaScript qualification, 8 October 2026
+
+Reviewed the exact published npm tarballs for `@vercel/sandbox` 3.5.1 → 3.6.1.
+Both tarballs matched their registry SHA-512 integrities; the 3.6.1 value in
+`compatibility-lock.json` came from `npm view @vercel/sandbox@3.6.1 dist.integrity`.
+No downloaded package code was installed or executed.
+
+The distribution diff changes 31 files, representing five TypeScript source
+files in the source maps: `drive.ts`, `version.ts`, `api-client.ts`,
+`base-client.ts` and `validators.ts`. CommonJS and ES-module source-map
+contents match. The changes and their dispositions:
+
+| Upstream change                                                                                                                                                                                             | Drop-in disposition                                                                                                                                                                                                                                                                                                   |
+| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `Drive.get({ name, signal?, token?, teamId?, projectId?, fetch? })` retrieves an existing drive without creating one. Internally it sends GET to the encoded drive-name path with `projectId` in the query. | Already refused by the `Drive` export before credentials or requests, with `NotSupportedError` naming `runtime.volumes` and `withruntime: { create: { volumes } }`.                                                                                                                                                   |
+| `drive.fork({ name, signal? })` creates a drive inheriting data, maximum size and region. Its POST uses the source drive name, `projectId` query and `{ name }` body.                                       | All Drive construction and retrieval remain refused, so no unsupported Drive instance can reach this call. Use Runtime volumes; no Vercel Drive fork is claimed.                                                                                                                                                      |
+| `drive.parentDriveId` and `drive.rootDriveId`, optional strings, expose ancestry. Drive response validation now retains those fields, including list/get/create/fork/update responses.                      | The same Drive refusal applies. No ancestry or Vercel drive metadata is fabricated.                                                                                                                                                                                                                                   |
+| Streaming `runCommand` disables retry of the command POST. After receiving its command id, a cut, early EOF or incomplete final JSON record recovers logs and then waits for the same command.              | Mapped through native Runtime process ids and byte cursors: no command is restarted after its id arrives. Initial Runtime transport retries use the same idempotency key. Attached commands now throw `StreamError` with `output_truncated` when recovery reports missing bytes, as detached commands already do.     |
+| `Command.logs()` reconnects interrupted log bodies up to twice, waiting 200 ms then 400 ms, skipping previously delivered stdout/stderr characters separately.                                              | Mapped through Runtime's byte cursor across both streams. Runtime follows stream slices and connection cuts; repeated empty streams stop after four reads, and continuous failures have a five-minute recovery budget. These are Runtime's recovery limits, not Vercel's retry timing.                                |
+| `getCommand`, including waiting for completion, retries failures while reading the response body, up to twice. Parsing can consume the already-read body.                                                   | Native Runtime JSON reads already retry through the complete body, with the client's `maxRetries` (four by default). Completion comes from the native process output's exit event rather than Vercel's command-wait endpoint.                                                                                         |
+| Stream parsing now preserves UTF-8 across chunks, classifies connection cuts and incomplete final JSON, closes readers and propagates cancellation or application errors without recovery.                  | Runtime already uses a persistent `TextDecoderStream`, closes its readers and resumes at the byte cursor after a cut or partial record. Permanent structured API errors and cancellation are not replayed. Runtime also retries parse failures as stream cuts; it does not expose Vercel's private `ConnectionError`. |
+| Sandbox/snapshot declarations reorder existing status union members; the package and internal version advance.                                                                                              | No status values, package exports, dependencies or other caller signatures change. No adapter change needed.                                                                                                                                                                                                          |
+
+`tests/vercel-3-6.test.ts` exercises the real Runtime transport with controlled
+HTTP responses: attached and detached recovery, stdout/stderr ordering, one-byte
+UTF-8 chunks, incomplete JSON, no command replay, bounded empty-stream failure,
+permanent errors, Drive lookup refusal and missing-output refusal. Before the
+adapter change, both missing-output cases resolved successfully instead of
+throwing. These tests do not prove live-host recovery, isolation, performance
+superiority or full Vercel compatibility; the provider remains `partial`.
+
+`tests/compat/reference.bun.lock` has no Vercel entry. The consumer declaration
+check in `tests/compat/check-consumers.ts` reads the main compatibility lock and
+requires the extracted upstream version to match it; neither needs a separate
+Vercel version edit. The separate oracle was not run for this source review.
+
 ## Tests
 
 `bun run test` in `packages/cloud-sdk` runs the unit tests of both languages

package/compatibility-lock.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "checkedAt": "2026-10-05",
+  "checkedAt": "2026-10-11",
   "providers": [
     {
       "id": "e2b",
@@ -9,35 +9,35 @@
         {
           "registry": "npm",
           "name": "e2b",
-          "version": "2.52.1",
+          "version": "2.55.0",
           "artifacts": {
-            "2.52.1": "sha512-qbX0s6qV2gfN4/+NBTIli1hkztfH/1kL4AEAYTaP4wjx7dp2m2wnXcN35iz+8Gug0q4TPN9w4xbdw/TGJr/Bpw=="
+            "2.55.0": "sha512-viC7GLHMPqzilndlKgNXWN0ebMV8fpbI1IfDlPd+GHuNcJIcUCXKyr5HAxjcC5sDMym3rrbyUyUQ+zQVAU9oGA=="
           }
         },
         {
           "registry": "npm",
           "name": "@e2b/code-interpreter",
-          "version": "2.8.0",
+          "version": "2.8.3",
           "artifacts": {
-            "2.8.0": "sha512-tWFi8IJYV3V6jOVfQ8V5PkzockrYP+ndWB/jKiJvRATTmNAy8+S/7S+iSh2Lb2Hrul869G2adRiN2xW8peJTig=="
+            "2.8.3": "sha512-xrSwGtyEoYFZJTtOI8UzYzsNmi4SL/fsH4jxRjJYJDtIHYHLD+sFR6gxGYs5xRYLGxi56ptVMTayX/26ZzJlEA=="
           }
         },
         {
           "registry": "pypi",
           "name": "e2b",
-          "version": "2.52.1",
+          "version": "2.55.1",
           "artifacts": {
-            "e2b-2.52.1-py3-none-any.whl": "sha256-708583a37c9b797b0044bd92fa407c21aec65f101f2fd4c4a0ccd842dbe33de1",
-            "e2b-2.52.1.tar.gz": "sha256-3af5c037b971ebc89a1ef0e5ced0e1c9ecbf3d65f2c23df5db7ad9faef8f68fa"
+            "e2b-2.55.1-py3-none-any.whl": "sha256-30aec382a7cac5401e0aa0efb156422459f586101809c3e9f34a6fcf797097db",
+            "e2b-2.55.1.tar.gz": "sha256-5255f9a01dc484c343f750d13d3a9c857ef3511222a240572ddce2563dd301d9"
           }
         },
         {
           "registry": "pypi",
           "name": "e2b-code-interpreter",
-          "version": "2.10.1",
+          "version": "2.10.5",
           "artifacts": {
-            "e2b_code_interpreter-2.10.1-py3-none-any.whl": "sha256-f4c9732699ee4b1c289acedac8bff66fccecc6ab374bf0b4ef88d5ad063e333d",
-            "e2b_code_interpreter-2.10.1.tar.gz": "sha256-94e504667788c6cbb175e5deaf1f68e8df474b670343fe1d72e2496b49d5a666"
+            "e2b_code_interpreter-2.10.5-py3-none-any.whl": "sha256-ac98cd29335ae4f035b70a4eb5f6ca89dc5728d48de79cfb7d90a08d57a652b5",
+            "e2b_code_interpreter-2.10.5.tar.gz": "sha256-ea478929289d0f9936e236cf9e36b914f4df7ef58ca2e5b1e851c1f3b13bf5ca"
           }
         }
       ]
@@ -49,42 +49,42 @@
         {
           "registry": "npm",
           "name": "@daytona/sdk",
-          "version": "0.222.0",
+          "version": "0.223.1",
           "artifacts": {
-            "0.222.0": "sha512-N0hjbprttUcAQE3eBegzRNIhQTzbPOGAuS2LJvl4a6bLp3rjCY1R7G9HbE9STepiBQDAs5B08Vv1rpRTXw9PaA=="
+            "0.223.1": "sha512-Ja6bacvUBuODjKcWGczZn6k9w+7veIces4k2tdizPUndj3pjgnHrphq/TbdIvJfKtz91yQ+S4mKoKaeuKQLc7g=="
           }
         },
         {
           "registry": "pypi",
           "name": "daytona",
-          "version": "0.220.0",
+          "version": "0.223.1",
           "artifacts": {
-            "daytona-0.220.0-py3-none-any.whl": "sha256-5f71299eaf3a446e6569ada69919fc49997c1b2c587845057394aab886f113c8",
-            "daytona-0.220.0.tar.gz": "sha256-eda82eac9b3601e757b1dbe3ec2d966b46a9e3038b69ce44a0d90e01dac8417a"
+            "daytona-0.223.1-py3-none-any.whl": "sha256-768564fbbe45a91eb0ba6e5e0f36a743e17cc14b7a3a2108aae931ae820a15c1",
+            "daytona-0.223.1.tar.gz": "sha256-72a4a7a795f44aa678daad52d74bd69d11eeacd894f310895a313200ea8fec1f"
           }
         },
         {
           "registry": "npm",
           "name": "@daytona/api-client",
-          "version": "0.222.0",
+          "version": "0.223.1",
           "artifacts": {
-            "0.222.0": "sha512-KvD+k6LMaqauQBedbMPTZG3UK3oITwmI5onfqbQJOdEG3xD6Occ3dJRphPlXqfF7tdtmDiXv3yrbyyOusqjvdA=="
+            "0.223.1": "sha512-p/NaCr3NbKUKPwqDBJBHHvToUMqh7QIyHT5rENzJYSrs9RCMfsifbtTpe0nHyOokfZhIceHWFcOtT2JwJYmSKQ=="
           }
         },
         {
           "registry": "npm",
           "name": "@daytona/toolbox-api-client",
-          "version": "0.222.0",
+          "version": "0.223.1",
           "artifacts": {
-            "0.222.0": "sha512-crdx4Zoxjtd7sGoURS3Dwd0xEQ+6lW6e+tu45TgUx85BpDAoTEr0z7i13HgXcEfAYMIcj8o70FOlI5JlkEJ5dw=="
+            "0.223.1": "sha512-Sl91T6kLIfilU5njZWGzU8KAeHtOfv6pw6iPO1JmX8UhjqfriOy6exPyCxSiBpmyZsQy0eL80IecdbTZPvnmcQ=="
           }
         },
         {
           "registry": "npm",
           "name": "@daytona/analytics-api-client",
-          "version": "0.222.0",
+          "version": "0.223.1",
           "artifacts": {
-            "0.222.0": "sha512-KNIk2b21pLzKMdKPnz+7cOXE9Qjvlfe9hwfiIdAatxa9jYbwJQTmbxs7BpdDB7I9GtdUionpdskxJWL+rVcWvA=="
+            "0.223.1": "sha512-LntjeNKKHpjzpCwgGbfYRvQ733b7SLfGpeM5ZTA12YK82YfvssGPDRkfo7xi88ndsbYteE+L9TpqYx3aH3WncA=="
           }
         }
       ]
@@ -96,27 +96,27 @@
         {
           "registry": "npm",
           "name": "@vercel/sandbox",
-          "version": "3.5.1",
+          "version": "3.6.1",
           "artifacts": {
-            "3.5.1": "sha512-VHItQtcv4FkSXET29b088p87MNPAIhRscF3ifrup2KkC8ix4hy4NpgCO9F3GI4yOsztgGtuV7bDx29Iufun2hQ=="
+            "3.6.1": "sha512-U6dwyadp2SmW/M96W2Bb3UjIql6TOOYwu9McUIwob209pj0A3ks/wKrMv7lCE7INx50J5zOpqLhMOnFa+Yodlg=="
           }
         },
         {
           "registry": "pypi",
           "name": "vercel",
-          "version": "0.11.4",
+          "version": "0.11.6",
           "artifacts": {
-            "vercel-0.11.4-py3-none-any.whl": "sha256-3ba3a0de2276a2b3daf590263082f6a82850dc77b35cf68f86a1e5bc9e83b6f1",
-            "vercel-0.11.4.tar.gz": "sha256-80038906615bf4182787af8354bce71b57d9fd5471a35ebca457d34ab5f50b2e"
+            "vercel-0.11.6-py3-none-any.whl": "sha256-3dfad0bfc6a6ba380246acec7346ed89020247e16e4294d88f3d9a296d2d5f43",
+            "vercel-0.11.6.tar.gz": "sha256-af96132f898e0bc8421e5ae16a0d16fd973aaebaf3f0852d3ffef076af7a22ed"
           }
         },
         {
           "registry": "pypi",
           "name": "vercel-sandbox",
-          "version": "0.7.0",
+          "version": "0.9.0",
           "artifacts": {
-            "vercel_sandbox-0.7.0-py3-none-any.whl": "sha256-f7eb897a1a5092fe8c38319ce803033b1a9ced8f414564a43a668432f91ffcd9",
-            "vercel_sandbox-0.7.0.tar.gz": "sha256-07d703790d0141dc75e0962baf35d666a6961bc1de913749137267a2550c81e2"
+            "vercel_sandbox-0.9.0-py3-none-any.whl": "sha256-eebc4ecd430ff3845f4f5a36c18d7ba80405f459533bb0d206caed9b2a3ed5ab",
+            "vercel_sandbox-0.9.0.tar.gz": "sha256-5b75e3aead43f9b9dea6c74d5fabdf5539b874c6d9e65cb6570ee0ac077848fb"
           }
         }
       ]
@@ -151,18 +151,18 @@
         {
           "registry": "npm",
           "name": "@runloop/api-client",
-          "version": "1.32.0",
+          "version": "2.0.0",
           "artifacts": {
-            "1.32.0": "sha512-aCNKjlGzLVEAFl8WA42LmgiYkdIkaocOlFK/cMGppijsM0AGS+1hkw/RxroQxyHlkIhjyRaqLv7m5ZNMGhks7Q=="
+            "2.0.0": "sha512-1npSvS5rVTUrNbtjGYoMXOb7r4OL7XhRJGPo1buu1iED5rxOXzU7+nDT0Spe+TFwDz9PL+X5frikTEYJ312PEA=="
           }
         },
         {
           "registry": "pypi",
           "name": "runloop-api-client",
-          "version": "1.32.0",
+          "version": "2.0.0",
           "artifacts": {
-            "runloop_api_client-1.32.0-py3-none-any.whl": "sha256-23c36910de7423f73aef91d4a963abea80a6b2f5b2df5bb8e439d788d5486cc7",
-            "runloop_api_client-1.32.0.tar.gz": "sha256-1f2077fb5a99b5ef30dbc1d96d47c1ca1d3f77895b9e186d985e47365fe85634"
+            "runloop_api_client-2.0.0-py3-none-any.whl": "sha256-85e22da5b7cc67dc6c4c126523800976794677ee42fa2c36ef9dd7be099f009a",
+            "runloop_api_client-2.0.0.tar.gz": "sha256-9ac246ac8003e87d616857e54965cc4b526d2fa4a815016583d74f3d2c59e390"
           }
         }
       ]
@@ -196,10 +196,10 @@
         {
           "registry": "pypi",
           "name": "sprites-py",
-          "version": "0.7.1",
+          "version": "0.7.2",
           "artifacts": {
-            "sprites_py-0.7.1-py3-none-any.whl": "sha256-23774f8111c9a4fbb7007f8e305677734eb7616bebb6c668c394788399ff38a8",
-            "sprites_py-0.7.1.tar.gz": "sha256-c45596f3994376eb25dd7c4f988b3a6893dd8218502bacd7eedf2b20888d8456"
+            "sprites_py-0.7.2-py3-none-any.whl": "sha256-b9015928cf2cab8c99f31f7fa245b088f9f26f37ce047721bcdf9c63e1f2f502",
+            "sprites_py-0.7.2.tar.gz": "sha256-bebc5aec3c1a2a7a5090b8a1efd4b0cb2ed2c10baf72c8b85ea050d59c054c8c"
           }
         }
       ]
@@ -211,9 +211,9 @@
         {
           "registry": "npm",
           "name": "freestyle",
-          "version": "0.2.16",
+          "version": "0.2.17",
           "artifacts": {
-            "0.2.16": "sha512-8pC7lh/R2PDanbs9Noc1Q7YlPl8Be8hHaQA/rpwFmELrcLTUAuCuxpoZ1Xm+7fuxqhJqJzO83bTTeLcSUoJ9SA=="
+            "0.2.17": "sha512-SQRRJAP+y56/nIDwmqJG5Y5IqqKYAmABqv/gjyzANy0wUe3cqnV1iD14nU9lQAYWtQ5UCl+lnE38nXZFKO0J9Q=="
           }
         }
       ]
@@ -231,31 +231,40 @@
             "prime_sandboxes-0.4.1.tar.gz": "sha256-53f7577dc9070e3b8e30db360f9e3cce3bcc35f8765b26f24f64dbc3c7763b06"
           },
           "latestReview": {
-            "version": "0.4.2",
+            "version": "0.4.3",
             "artifacts": {
-              "prime_sandboxes-0.4.2-py3-none-any.whl": "sha256-ed59f001c7575339d6c903166c5468f783eda0997586ec6476fd8b35f65746f9",
-              "prime_sandboxes-0.4.2.tar.gz": "sha256-4990a724cac0a662fde6e12e7eccfee092a78679cc568653b8ef52008dfa28e4"
+              "prime_sandboxes-0.4.3-py3-none-any.whl": "sha256-dd26007838c25b5d38a8b7af0514c07027b783406c0ea5b9fcf0eb74a45139bd",
+              "prime_sandboxes-0.4.3.tar.gz": "sha256-a2169182f74307485c73f897e224c978eba3276133ddb40715be4d346594c487"
             },
-            "reviewedAt": "2026-10-02",
+            "reviewedAt": "2026-10-08",
             "disposition": "held-for-sdk-qualification",
             "evidence": {
               "sourceUrls": [
-                "https://pypi.org/pypi/prime-sandboxes/0.4.2/json",
-                "https://files.pythonhosted.org/packages/3f/4d/a379cdf82d6f06c970bd4f0333c2360c08aba65c809d7492f49aece84c66/prime_sandboxes-0.4.2.tar.gz",
-                "https://files.pythonhosted.org/packages/da/b5/6a9fe6ae1342872c1c0cc45072cc0c58a5fa2783c4c45770e585f2535c8f/prime_sandboxes-0.4.2-py3-none-any.whl",
+                "https://pypi.org/pypi/prime-sandboxes/0.4.3/json",
+                "https://files.pythonhosted.org/packages/d8/1b/01e02c9d2346956f5ed77d269f836905a017ad796a4b4c719debd8942dc4/prime_sandboxes-0.4.3.tar.gz",
+                "https://files.pythonhosted.org/packages/e1/5f/d0b5cd1dabdb6e5cb1ab5d84c8ba9a96e2a9a0be8913ec9db9177c9645fb/prime_sandboxes-0.4.3-py3-none-any.whl",
                 "https://github.com/PrimeIntellect-ai/prime/tree/main/packages/prime-sandboxes"
               ],
               "artifactSha256": {
-                "prime_sandboxes-0.4.2-py3-none-any.whl": "ed59f001c7575339d6c903166c5468f783eda0997586ec6476fd8b35f65746f9",
-                "prime_sandboxes-0.4.2.tar.gz": "4990a724cac0a662fde6e12e7eccfee092a78679cc568653b8ef52008dfa28e4"
+                "prime_sandboxes-0.4.3-py3-none-any.whl": "dd26007838c25b5d38a8b7af0514c07027b783406c0ea5b9fcf0eb74a45139bd",
+                "prime_sandboxes-0.4.3.tar.gz": "a2169182f74307485c73f897e224c978eba3276133ddb40715be4d346594c487"
               },
               "changes": [
                 "Source diff of the 0.4.1 and 0.4.2 sdists, downloaded and hashed on the Mac, nothing installed or run: README, __init__, models.py, sandbox.py, one test changed; tests/test_checkpoints.py added.",
                 "Adds filesystem checkpoints: SandboxCheckpoint, CheckpointLookupError and BatchCheckpointResponse models; checkpoint, get_checkpoint, get_checkpoints (batch of up to 100 ids), wait_for_checkpoint and list_checkpoints on the sync and async clients; CreateSandboxRequest takes checkpoint_id with a validate_restore_source check.",
                 "CreateSandboxRequest.docker_image becomes Optional (None when restoring from a checkpoint) and disk_size_gb's default 5.0 becomes None.",
                 "Background job launch: the working_dir prefix is 'cd DIR || exit 1;' instead of 'cd DIR &&', and the launch cwd is / for an absolute working_dir.",
+                "Source diff of the 0.4.2 and 0.4.3 sdists, downloaded and hashed on the Mac, nothing installed or run; the wheel's package source matched the sdist's: __init__, core/client.py, models.py, sandbox.py and tests/test_checkpoints.py changed.",
+                "Adds checkpoint deletion: delete_checkpoint (DELETE /sandbox/checkpoints/{id}, 409 while pending or the active tip) and delete_sandbox_checkpoints (DELETE /sandbox/{id}/checkpoints) on the sync and async clients, with DeleteSandboxCheckpointsResponse and CheckpointDeleteError (NOT_FOUND or CONFLICT) models exported.",
+                "The core client returns {} for an HTTP 204 instead of parsing an empty body.",
                 "No existing method was removed or renamed. Installed consumer qualification against withruntime/prime is not run; the supported pin stays 0.4.1."
               ]
+            },
+            "between": {
+              "0.4.2": {
+                "prime_sandboxes-0.4.2-py3-none-any.whl": "sha256-ed59f001c7575339d6c903166c5468f783eda0997586ec6476fd8b35f65746f9",
+                "prime_sandboxes-0.4.2.tar.gz": "sha256-4990a724cac0a662fde6e12e7eccfee092a78679cc568653b8ef52008dfa28e4"
+              }
             }
           }
         }

package/dist/billing-cli.d.ts

@@ -9,7 +9,7 @@ type Args = {
     positional: string[];
     flags: Map<string, string[]>;
 };
-export declare const BILLING_HELP = "runtime billing <command>\n\n  topup <usd> [--wait]      Buy credit with stablecoins (USDC on Base, Solana or Tempo).\n                            Prints an address per network and the exact amount to send.\n                            Send exactly that, from any wallet, before the time shown.\n                            --wait keeps checking until the credit lands.\n  status <id> [--wait]      Whether a top-up's payment has arrived\n\n  No account yet? An agent can open one with a wallet alone:\n  topup <usd> --new-account --accept-terms [--wait]\n                            Opens an account and its first top-up. Prints a claim code,\n                            shown once. --wait saves the key here once the money lands.\n  claim <code> [--wait]     Exchange a paid account's claim code for its key, saved here\n\n  $10 to $10,000 a top-up; $500 in an account's first week. By card:\n  https://withruntime.com/account/billing\n";
+export declare const BILLING_HELP = "runtime billing <command>\n\n  topup <usd> [--wait]      Buy credit with stablecoins (USDC on Base, Solana or Tempo).\n                            Prints an address per network and the exact amount to send.\n                            Send exactly that, from any wallet, before the time shown.\n                            --wait keeps checking until the credit lands.\n  status <id> [--wait]      Whether a top-up's payment has arrived\n\n  auto-top-up               Show auto top-up: the card is charged when credit runs low\n  auto-top-up on [--below <usd>] [--amount <usd>] [--monthly <usd>]\n                            Charge <amount> plus tax when credit falls below <below>,\n                            at most <monthly> a month: $10, $20 and $500 unless given,\n                            or as last set. At least $10, $20 and $100. 5% more as\n                            credit each time, and 200 sandboxes at once while on.\n                            A person saves the card at\n                            https://withruntime.com/account/billing\n  auto-top-up off           Turn it off. Running sandboxes are never stopped.\n\n  No account yet? An agent can open one with a wallet alone:\n  topup <usd> --new-account --accept-terms [--wait]\n                            Opens an account and its first top-up. Prints a claim code,\n                            shown once. --wait saves the key here once the money lands.\n  claim <code> [--wait]     Exchange a paid account's claim code for its key, saved here\n\n  $10 to $10,000 a top-up; $500 in an account's first week. By card:\n  https://withruntime.com/account/billing\n";
 /** Wallet-account commands need no key, and the claim saves the one they get. */
 export type WalletDeps = {
     open: typeof openWalletAccount;

package/dist/billing-cli.js

@@ -8,6 +8,16 @@ export const BILLING_HELP = `runtime billing <command>
                             --wait keeps checking until the credit lands.
   status <id> [--wait]      Whether a top-up's payment has arrived
 
+  auto-top-up               Show auto top-up: the card is charged when credit runs low
+  auto-top-up on [--below <usd>] [--amount <usd>] [--monthly <usd>]
+                            Charge <amount> plus tax when credit falls below <below>,
+                            at most <monthly> a month: $10, $20 and $500 unless given,
+                            or as last set. At least $10, $20 and $100. 5% more as
+                            credit each time, and 200 sandboxes at once while on.
+                            A person saves the card at
+                            https://withruntime.com/account/billing
+  auto-top-up off           Turn it off. Running sandboxes are never stopped.
+
   No account yet? An agent can open one with a wallet alone:
   topup <usd> --new-account --accept-terms [--wait]
                             Opens an account and its first top-up. Prints a claim code,
@@ -43,7 +53,7 @@ function describe(topup) {
     lines.push("", ...(topup.payBy ? [`Send before ${topup.payBy}.`] : []), "A different amount, token or network cannot be matched or returned automatically.", `The credit lands a few minutes after the transfer: \`${me} billing status ${topup.purchaseId}\`.`);
     return lines.join("\n");
 }
-const FLAGS = new Set(["wait", "new-account", "accept-terms"]);
+const FLAGS = new Set(["wait", "new-account", "accept-terms", "below", "amount", "monthly"]);
 export async function billingCommand(argv, args, out, client, sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms)), wallet) {
     const [verb, value] = args.positional;
     const has = (name) => args.flags.get(name)?.at(-1) === "true";
@@ -60,6 +70,11 @@ export async function billingCommand(argv, args, out, client, sleep = (ms) => ne
             throw usage("Wallet accounts are not available here.");
         return walletCommand(verb, value, has("accept-terms"), wait, out, sleep, wallet);
     }
+    if (verb === "auto-top-up")
+        return autoTopUpCommand(value, args, out, client);
+    for (const name of ["below", "amount", "monthly"])
+        if (args.flags.has(name))
+            throw usage(`--${name} is for \`billing auto-top-up on\`.`);
     const api = (await client()).billing;
     let topup;
     if (verb === "topup") {
@@ -95,6 +110,67 @@ export async function billingCommand(argv, args, out, client, sleep = (ms) => ne
     }
     return topup.status === "paid" ? 0 : 1;
 }
+const OFF_REASONS = {
+    declined: "the bank declined the last charge",
+    authentication_required: "the bank asked its holder to confirm the last charge",
+    card_removed: "the card was removed",
+    no_address: "Stripe had no billing address to work out tax",
+    blocked: "a payment on this account is under review",
+    failed: "the last charge did not go through",
+};
+function describeAuto(auto) {
+    const figures = auto.below !== null && auto.amount !== null && auto.monthlyLimit !== null
+        ? `adds $${auto.amount} when credit falls below $${auto.below}, up to $${auto.monthlyLimit} a month`
+        : null;
+    const lines = [
+        auto.enabled
+            ? `Auto top-up is on: it ${figures}. $${auto.thisMonth} added this month.`
+            : auto.waitingForCard
+                ? `Auto top-up turns on once a card is saved: it will ${figures}.`
+                : auto.offReason
+                    ? `Auto top-up is off: ${OFF_REASONS[auto.offReason]}.`
+                    : "Auto top-up is off.",
+    ];
+    if (auto.saveCardAt)
+        lines.push(`A person saves the card at ${auto.saveCardAt}`);
+    return lines.join("\n");
+}
+/** `billing auto-top-up [on|off]`. */
+async function autoTopUpCommand(verb, args, out, client) {
+    const flag = (name) => args.flags.get(name)?.at(-1);
+    const api = (await client()).billing.autoTopUp;
+    const options = { idempotencyKey: crypto.randomUUID() };
+    let auto;
+    if (!verb || verb === "show")
+        auto = await api.get();
+    else if (verb === "off")
+        auto = await api.off(options);
+    else if (verb === "on") {
+        // A figure not given keeps the one saved, or takes its default.
+        const figure = (name) => {
+            const value = flag(name);
+            if (value === undefined)
+                return undefined;
+            const usd = Number(value.replace(/^\$/, ""));
+            if (!value || !Number.isFinite(usd) || usd <= 0)
+                throw usage(`Give --${name} in dollars, such as --${name} 20.`);
+            return usd;
+        };
+        const below = figure("below");
+        const amount = figure("amount");
+        const monthlyLimit = figure("monthly");
+        auto = await api.set({
+            enabled: true,
+            ...(below === undefined ? {} : { below }),
+            ...(amount === undefined ? {} : { amount }),
+            ...(monthlyLimit === undefined ? {} : { monthlyLimit }),
+        }, options);
+    }
+    else
+        throw usage(`Unknown auto-top-up command ${verb}: show, on or off.`);
+    out.write(out.json ? JSON.stringify(auto) : describeAuto(auto));
+    return 0;
+}
 function dollarsOf(value) {
     const usd = Number(value?.replace(/^\$/, ""));
     if (!value || !Number.isFinite(usd) || usd <= 0)
@@ -108,7 +184,7 @@ async function walletCommand(verb, value, acceptTerms, wait, out, sleep, wallet)
     let payBy = null;
     if (verb === "topup") {
         if (!acceptTerms)
-            throw usage("Opening an account means agreeing to https://withruntime.com/legal/terms. Add --accept-terms once the person you work for agrees.");
+            throw usage("Opening an account means agreeing to https://withruntime.com/legal/terms. Add --accept-terms to agree to them for whoever you act for.");
         const opened = await wallet.open({ usd: dollarsOf(value), acceptTerms: true });
         code = opened.claimCode;
         payBy = opened.payBy;
@@ -148,11 +224,15 @@ async function walletCommand(verb, value, acceptTerms, wait, out, sleep, wallet)
                 : `The top-up ${claim.status}: nothing was credited. Open a new one with \`${me} billing topup <usd> --new-account --accept-terms\`.`);
             return 1;
         }
-        if (!wait || Date.now() >= until) {
+        // A top-up that never reached Stripe has no address: waiting cannot help.
+        const noAddress = claim.topup?.status === "open" && !claim.topup.networks.length;
+        if (noAddress || !wait || Date.now() >= until) {
             out.write(out.json
                 ? JSON.stringify(claim)
-                : `Not paid yet (${claim.status}). Run \`${me} billing claim ${code}\` again once the transfer has gone through.`);
-            return wait ? 1 : 0;
+                : noAddress
+                    ? (claim.next ?? "This top-up has no address to pay to yet.")
+                    : `Not paid yet (${claim.status}). Run \`${me} billing claim ${code}\` again once the transfer has gone through.`);
+            return noAddress || wait ? 1 : 0;
         }
     }
 }

package/dist/blaxel/errors.d.ts

@@ -35,6 +35,20 @@ export declare class NotSupportedError extends Error {
     readonly alternative: string;
     constructor(feature: string, alternative: string, message?: string);
 }
+/** Thrown by SandboxInstance.create / createIfNotExists when the sandbox was
+ * not running within the `timeout` asked for. The sandbox is deleted first,
+ * so its name is free and the creation can simply be started over, as on
+ * Blaxel. */
+export declare class SandboxCreationTimeoutError extends Error {
+    readonly sandboxName: string | undefined;
+    readonly timeout: number | undefined;
+    readonly code = "CREATION_TIMEOUT";
+    readonly status = 408;
+    readonly data: unknown;
+    constructor(sandboxName: string | undefined, timeout: number | undefined, data: unknown);
+}
+/** True when `err` is a sandbox creation timeout (408 CREATION_TIMEOUT). */
+export declare function isCreationTimeoutError(err: unknown): err is SandboxCreationTimeoutError;
 /** A ResponseError of this status and message, made here rather than by
  * Runtime: a process or preview that is not there, a wait that ran out. */
 export declare function responseError(status: number, message: string): ResponseError;

package/dist/blaxel/errors.js

@@ -72,6 +72,35 @@ export class NotSupportedError extends Error {
         this.alternative = alternative;
     }
 }
+/** Thrown by SandboxInstance.create / createIfNotExists when the sandbox was
+ * not running within the `timeout` asked for. The sandbox is deleted first,
+ * so its name is free and the creation can simply be started over, as on
+ * Blaxel. */
+export class SandboxCreationTimeoutError extends Error {
+    sandboxName;
+    timeout;
+    code = "CREATION_TIMEOUT";
+    status = 408;
+    data;
+    constructor(sandboxName, timeout, data) {
+        const detail = typeof data === "object" &&
+            data !== null &&
+            typeof data.message === "string"
+            ? data.message
+            : undefined;
+        const target = sandboxName ? `Sandbox ${sandboxName}` : "Sandbox";
+        const deadline = timeout !== undefined ? ` within ${timeout}s` : " within the creation deadline";
+        super(`${target} was not ready${deadline}; the creation was cancelled.${detail ? ` ${detail}` : ""}`);
+        this.name = "SandboxCreationTimeoutError";
+        this.sandboxName = sandboxName;
+        this.timeout = timeout;
+        this.data = data;
+    }
+}
+/** True when `err` is a sandbox creation timeout (408 CREATION_TIMEOUT). */
+export function isCreationTimeoutError(err) {
+    return err instanceof SandboxCreationTimeoutError;
+}
 /** A ResponseError of this status and message, made here rather than by
  * Runtime: a process or preview that is not there, a wait that ran out. */
 export function responseError(status, message) {

package/dist/blaxel/index.d.ts

@@ -1,11 +1,11 @@
 import { type Config } from "./client.js";
-export { SandboxInstance, DEFAULT_IMAGE, DEFAULT_MEMORY, MEMORY_PER_VCPU, durationMs, imageRef, lifetimeOf, networkRules, type SandboxListQuery, type SandboxForkOptions, type SandboxArchiveOptions, } from "./sandbox.js";
+export { SandboxInstance, DEFAULT_IMAGE, DEFAULT_MEMORY, MEMORY_PER_VCPU, durationMs, imageRef, lifetimeOf, networkRules, type SandboxListQuery, type SandboxForkOptions, type SandboxArchiveOptions, MAX_CREATION_TIMEOUT_SECONDS, type SandboxCreateOptions, } from "./sandbox.js";
 export { CodeInterpreter } from "./interpreter.js";
 export { SandboxFileSystem, retryOnTransient, type File, type FileWithContent, type Subdirectory, type Directory, type SuccessResponse, type FindMatch, type FindResponse, type FuzzySearchMatch, type FuzzySearchResponse, type ContentSearchMatch, type ContentSearchResponse, type CopyResponse, type WatchEvent, type SandboxFilesystemFile, type FilesystemSearchOptions, type FilesystemFindOptions, type FilesystemGrepOptions, } from "./filesystem.js";
 export { SandboxProcess, type ProcessRequest, type ProcessResponse, type ProcessRequestWithLog, type ProcessResponseWithLog, type PostProcessResponse, type GetProcessResponse, type GetProcessByIdentifierResponse, type DeleteProcessByIdentifierResponse, type DeleteProcessByIdentifierKillResponse, type ProcessLogs, } from "./process.js";
 export { SandboxPreview, SandboxPreviews, SandboxPreviewToken, SandboxPreviewTokens, type Preview, type PreviewMetadata, type PreviewSpec, type PreviewToken, } from "./preview.js";
 export { Snapshot, SandboxSnapshotsResource, type Env, type SandboxSnapshot, type SandboxSnapshotSource, type SandboxSnapshotSpec, type SandboxForkResponse, type SandboxRestoreResponse, type SnapshotCreateConfiguration, type SnapshotForkOptions, type SnapshotListQuery, } from "./snapshot.js";
-export { ResponseError, SandboxGatewayError, isGatewayError, isGatewayTimeout, CredentialsError, NotSupportedError, } from "./errors.js";
+export { ResponseError, SandboxCreationTimeoutError, isCreationTimeoutError, SandboxGatewayError, isGatewayError, isGatewayTimeout, CredentialsError, NotSupportedError, } from "./errors.js";
 export { createPaginatedList, unwrapListData, type PaginatedList, type PaginatedListMeta, type ListResponse, type CursorPaginationQuery, type AutoPagingEachCallback, type AutoPagingToArrayOptions, } from "./pagination.js";
 export { normalizePorts, normalizeEnvs, normalizeVolumes, type Status, type Port, type EnvVar, type ExpirationPolicy, type SandboxLifecycle, type SandboxNetwork, type VolumeBinding, type VolumeAttachment, type Metadata, type SandboxRuntime, type SandboxSpec, type CoreEvent, type Sandbox, type SandboxConfiguration, type SandboxCreateConfiguration, type SandboxUpdateMetadata, type SandboxUpdateNetwork, type SessionCreateOptions, type SessionWithToken, } from "./types.js";
 export { initialize, type Config, type WithRuntime, type RuntimeOptions } from "./client.js";

package/dist/blaxel/index.js

@@ -4,20 +4,20 @@
  *   import { SandboxInstance } from "withruntime/blaxel"; // was: from "@blaxel/core"
  *
  * and set RUNTIME_API_KEY, or run `npx withruntime login` once. A Blaxel key
- * (BL_API_KEY) is never sent anywhere. Every name `@blaxel/core` 0.3.23
+ * (BL_API_KEY) is never sent anywhere. Every name `@blaxel/core` 0.3.25
  * exports can be imported; what Runtime cannot do the way Blaxel does throws
  * NotSupportedError, naming what to use. */
 import { RuntimeError } from "../errors.js";
 import { initialize } from "./client.js";
 import { NotSupportedError } from "./errors.js";
 import { CODEGEN, DRIVES, SCHEDULES, SYSTEM, unsupportedExport } from "./unsupported.js";
-export { SandboxInstance, DEFAULT_IMAGE, DEFAULT_MEMORY, MEMORY_PER_VCPU, durationMs, imageRef, lifetimeOf, networkRules, } from "./sandbox.js";
+export { SandboxInstance, DEFAULT_IMAGE, DEFAULT_MEMORY, MEMORY_PER_VCPU, durationMs, imageRef, lifetimeOf, networkRules, MAX_CREATION_TIMEOUT_SECONDS, } from "./sandbox.js";
 export { CodeInterpreter } from "./interpreter.js";
 export { SandboxFileSystem, retryOnTransient, } from "./filesystem.js";
 export { SandboxProcess, } from "./process.js";
 export { SandboxPreview, SandboxPreviews, SandboxPreviewToken, SandboxPreviewTokens, } from "./preview.js";
 export { Snapshot, SandboxSnapshotsResource, } from "./snapshot.js";
-export { ResponseError, SandboxGatewayError, isGatewayError, isGatewayTimeout, CredentialsError, NotSupportedError, } from "./errors.js";
+export { ResponseError, SandboxCreationTimeoutError, isCreationTimeoutError, SandboxGatewayError, isGatewayError, isGatewayTimeout, CredentialsError, NotSupportedError, } from "./errors.js";
 export { createPaginatedList, unwrapListData, } from "./pagination.js";
 export { normalizePorts, normalizeEnvs, normalizeVolumes, } from "./types.js";
 export { initialize } from "./client.js";
@@ -88,7 +88,7 @@ const MODELS = "Call your model provider's SDK directly; Runtime does not proxy
 const TOOLS = "Give your agent Runtime's sandbox tools: `import { tools } from \"withruntime/tools\"`, or Runtime's MCP server (`npx withruntime mcp`).";
 const MCP = "Serve MCP from a sandbox and share its port with sandbox.previews.create, or use Runtime's own MCP server (`npx withruntime mcp`).";
 const JOBS = "Run the batch as processes in sandboxes: SandboxInstance.create, then sandbox.process.exec for each task.";
-const IMAGES = "Build a Runtime image and create sandboxes from it by name: `npx withruntime image build --dockerfile Dockerfile --name <image>` or runtime.images.build({ name, dockerfile | image }).";
+const IMAGES = "Build a Runtime image and create sandboxes from it by name: `npx withruntime images build --dockerfile Dockerfile --name <image>` or runtime.images.build({ name, dockerfile | image }).";
 const VOLUMES = 'Use Runtime volumes: runtime.volumes.create({ name }) (`import { Runtime } from "withruntime"`), then pass volumes: [{ name, mountPath }] at create.';
 const HOSTING = "Serve it from a sandbox and share its port with sandbox.previews.create.";
 const TELEMETRY = "Send your own traces; Runtime exports sandbox metrics and events with runtime.otel (OpenTelemetry).";

package/dist/blaxel/interpreter.d.ts

@@ -1,4 +1,4 @@
-import { SandboxInstance } from "./sandbox.js";
+import { SandboxInstance, type SandboxCreateOptions } from "./sandbox.js";
 import type { Port, Sandbox as SandboxModel, SandboxCreateConfiguration, SandboxLifecycle } from "./types.js";
 declare class OutputMessage {
     text: string;
@@ -45,10 +45,7 @@ export declare class CodeInterpreter extends SandboxInstance {
     static readonly Context: typeof Context;
     /** Blaxel's defaults for a code interpreter: its image, port 8888, and
      * deletion after 30 idle minutes (a paused sandbox kept one day). */
-    static create<T extends typeof SandboxInstance>(this: T, sandbox?: SandboxCreateConfiguration | SandboxModel | Record<string, unknown> | null, options?: {
-        safe?: boolean;
-        createIfNotExist?: boolean;
-    }): Promise<InstanceType<T>>;
+    static create<T extends typeof SandboxInstance>(this: T, sandbox?: SandboxCreateConfiguration | SandboxModel | Record<string, unknown> | null, options?: SandboxCreateOptions): Promise<InstanceType<T>>;
     get _jupyterUrl(): string;
     /** Runs code in a stateful context. Errors in the code come back in
      * `execution.error`; a run past `timeout` seconds (default 60, 0 for none)