withruntime 0.14.0 → 0.16.0

package/README.src.md

@@ -149,6 +149,21 @@ with its token. A Blaxel key is never sent anywhere. Drives, codegen, schedules
 `NotSupportedError` before anything happens, naming what to use instead.
 `BLAXEL.md` in this package lists every mapping and gap.
 
+## Code written for Morph Cloud
+
+`withruntime/morph` translates Morph's TypeScript client (`morphcloud`).
+Change the import:
+
+```ts no-run
+import { MorphCloudClient } from "withruntime/morph"; // was: from "morphcloud"
+```
+
+Instances become sandboxes, snapshots Runtime snapshots, metadata labels and
+HTTP services previews; `setup` caches by Morph's chain hash and `branch`
+copies memory and processes. `stop` deletes the sandbox, as Morph's does.
+SSH, reboot and a time limit set after start throw `CompatibilityError`
+naming the alternative. `COMPATIBILITY.md` lists every mapping.
+
 ## Agent frameworks
 
 `withruntime/openai-agents` is a sandbox client for the OpenAI Agents SDK's
@@ -185,6 +200,24 @@ connected yet, it offers `runtime_connect`, which walks you through the browser
 approval. Remote clients add `https://api.withruntime.com/mcp` and sign in through
 the browser, or send a bearer key.
 
+## How Runtime compares
+
+For typical agent work, Runtime costs {{saving-range}} less than {{rival-count}} other
+sandbox providers at their published rates. These pages show the arithmetic,
+each with the rates it used and the date they were read:
+
+- [Best sandbox for AI agents](https://withruntime.com/compare/best-sandbox-for-ai-agents)
+- Alternatives to [E2B](https://withruntime.com/compare/e2b-alternatives),
+  [Daytona](https://withruntime.com/compare/daytona-alternatives),
+  [Modal](https://withruntime.com/compare/modal-alternatives) and
+  [Vercel Sandbox](https://withruntime.com/compare/vercel-sandbox-alternatives)
+- [E2B vs Daytona](https://withruntime.com/compare/e2b-vs-daytona), and
+  [every comparison](https://withruntime.com/compare)
+- [The agent sandbox price index](https://withruntime.com/pricing/agent-sandbox-price-index):
+  every provider's rates, also as CSV and JSON
+- [Sandbox cost calculator](https://withruntime.com/calculators/sandbox-cost-calculator)
+  and [Runtime's pricing](https://withruntime.com/pricing)
+
 ## Reliability and support
 
 - **Status:** https://withruntime.com/status checks the API from outside every

package/VERCEL.md

@@ -16,11 +16,22 @@ from withruntime.vercel import sandbox  # was: from vercel import sandbox
 from withruntime.vercel.sandbox import sync as sandbox  # was: from vercel.sandbox import sync as sandbox
 ```
 
-The JavaScript mapping was checked against `@vercel/sandbox` 3.6.1 on
-8 October 2026. Python was checked against `vercel-sandbox` 0.9.0 on PyPI
-(the `vercel.sandbox` module of `vercel` 0.11.6) on 7 October 2026.
-0.9.0 adds `get_drive`, which raises `NotSupportedError` like
-the other Drive calls; `vercel` 0.11.6 only raises its `vercel-sandbox` floor.
+The JavaScript mapping was checked against `@vercel/sandbox` 3.8.0 on
+15 October 2026. Python was checked against `vercel-sandbox` 0.9.1 on PyPI
+(the `vercel.sandbox` module of `vercel` 0.12.0) on 15 October 2026.
+0.9.0 added `get_drive`, which raises `NotSupportedError` like the other
+Drive calls.
+
+Python review, 15 October 2026: each pinned wheel and sdist matched its
+SHA-256 in `compatibility-lock.json`, each new one the PyPI digest, and each
+new wheel's source its sdist; they were compared file by file, nothing
+installed or run. `vercel-sandbox` 0.9.1 changes only its version and its
+`vercel-internal-core` floor (0.2.2); no sandbox source changes. `vercel`
+0.12.0 moves `vercel.blob` into the separate `vercel-blob` package (a new
+dependency), removing its own Blob code, and raises its floors
+(`vercel-sandbox` 0.9.1). Blob is Vercel's storage product, which the
+drop-in has never offered (`withruntime.vercel` exports `sandbox` and
+`api`), so nothing changes; the inventory's 684 Python items are unchanged.
 
 ## Keys
 
@@ -125,6 +136,42 @@ Some differences are not refusals:
   Vercel's `universal` has Python 3.14.
 - A git source is cloned into the working directory itself.
 
+## JavaScript qualification, 15 October 2026
+
+Reviewed the exact published npm tarballs for `@vercel/sandbox` 3.6.1 → 3.7.0
+→ 3.8.0 (3.7.0 is the only stable release between them). 3.6.1 matched its
+SHA-512 in `compatibility-lock.json`; 3.7.0 and 3.8.0 matched
+`npm view @vercel/sandbox@<version> dist.integrity` (3.8.0:
+`sha512-2ib+Dl8W...`). No downloaded package code was installed or executed
+outside the oracle's frozen install.
+
+The source maps name six changed TypeScript files and one new one
+(`utils/pipe-stdin.ts`); CommonJS and ES-module builds match. `index.d.ts`
+exports nothing new. The changes and their dispositions:
+
+| Upstream change                                                                                                                                                                                                                                                                                                                                                                                                                                    | Drop-in disposition                                                                                                                                                                                                                                                                                                                                                               |
+| -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| 3.7.0: `runCommand({ stdin: true, detached: true })` keeps the command's stdin open; `stdin: true` without `detached` throws `TypeError` before anything runs. Unset or false, stdin is empty, as before.                                                                                                                                                                                                                                          | Followed. The process is spawned with Runtime's piped stdin (`stdinMode: "pipe"`); the same `TypeError` message is thrown before any request. Without `stdin`, nothing changes.                                                                                                                                                                                                   |
+| 3.7.0: `Command.writeStdin(data, { abortSignal })` and `closeStdin({ abortSignal })`. Writes are queued in call order, chunked, resent with byte offsets so retries never duplicate; after a write that may be partial, later writes are refused (`closeStdin` still works).                                                                                                                                                                       | Followed on Runtime's process input (`:write` with `offset` and `eof`), which already resends by offset, so no byte is written twice. Writes are queued in call order. A failed write refuses later ones with upstream's message, unless the API rejected a single request with a 4xx, which applied none of it. A `Command` from `getCommand` reads its offset from the process. |
+| 3.7.0: `CommandFinished.writeStdin`/`closeStdin` always throw: the command has exited.                                                                                                                                                                                                                                                                                                                                                             | Followed with the same messages.                                                                                                                                                                                                                                                                                                                                                  |
+| 3.7.0: `stdin` may be a `Readable`, attached or detached. It is written with backpressure and stdin closes when it ends; the stream is never ended or destroyed. Attached: a piping failure kills the command and rejects `runCommand`. Detached: `wait()` rejects (and `stdinPipe` clears). The command exiting or no longer accepting input (404, `command_stdin_unavailable`) stops piping quietly. `Command.stdinPipe` is the (internal) pipe. | Followed. An attached command with a stream starts as a process and waits on its output, streaming to `stdout`/`stderr` writers as before. Reading pauses past 512 KiB waiting. Runtime's "input closed" answer (409 `stdin_closed`) or a 404 stops piping quietly, as upstream's does. `stdinPipe` is exposed the same way.                                                      |
+| 3.7.0: `SandboxUser.runCommand` passes `stdin`; 3.8.0 also passes `onStart`.                                                                                                                                                                                                                                                                                                                                                                       | Followed: both reach the sandbox's `runCommand` through the user's `sudo -u` wrapper.                                                                                                                                                                                                                                                                                             |
+| 3.8.0: `runCommand({ onStart })`, only when not detached (the type forbids it with `detached: true`; upstream ignores it there): called with the running `Command` as soon as it starts and awaited before `runCommand` resolves.                                                                                                                                                                                                                  | Followed with the same type. The command starts as a Runtime process so its `Command` (id, `kill`, `logs`) exists before it exits; output and truncation are reported as for any attached command.                                                                                                                                                                                |
+| `APIClient.writeCommandStdin` and its stdin retry policy (429 `Retry-After`, 502/503/504 resends, offset probes); `CommandStdinResponse` validator.                                                                                                                                                                                                                                                                                                | Internal; `APIClient` is not exported. Runtime's transport and offsets cover resends.                                                                                                                                                                                                                                                                                             |
+| `@vercel/oidc` 3.2.0 → 4.0.0 (now depending on `@vercel/cli-config` and `@vercel/cli-exec`).                                                                                                                                                                                                                                                                                                                                                       | The drop-in never uses Vercel OIDC: a Vercel or OIDC token still throws `AuthenticationError`. Only the oracle's lock changes.                                                                                                                                                                                                                                                    |
+| Declarations reorder existing status union members; README documents stdin; the package and internal version advance.                                                                                                                                                                                                                                                                                                                              | No adapter change.                                                                                                                                                                                                                                                                                                                                                                |
+
+`tests/vercel-3-8.test.ts` (12 cases) runs the real Runtime transport over
+controlled HTTP: piped spawn, write order and offsets, the `TypeError`,
+empty stdin by default, finished-command refusals, partial-write refusal and
+4xx recovery, an attached and a detached `Readable` (end, failure with kill,
+quiet stop on `stdin_closed`), `onStart` ordering and `SandboxUser`
+pass-through. Eleven fail before the adapter change (the twelfth, empty stdin
+by default, guards existing behaviour). They do not prove live-host
+behaviour; the provider remains `partial`. `compat-inventory.json` now counts
+`writeStdin`, `closeStdin`, `stdinPipe` and the `stdin`/`onStart` options
+present (and `CommandFinished`'s stdin calls refused, as upstream's are).
+
 ## JavaScript qualification, 8 October 2026
 
 Reviewed the exact published npm tarballs for `@vercel/sandbox` 3.5.1 → 3.6.1.

package/compatibility-lock.json

@@ -9,35 +9,35 @@
         {
           "registry": "npm",
           "name": "e2b",
-          "version": "2.55.0",
+          "version": "2.56.0",
           "artifacts": {
-            "2.55.0": "sha512-viC7GLHMPqzilndlKgNXWN0ebMV8fpbI1IfDlPd+GHuNcJIcUCXKyr5HAxjcC5sDMym3rrbyUyUQ+zQVAU9oGA=="
+            "2.56.0": "sha512-67vAYTERArdKrPujKnAVZuiIKLFX3vQT2gh1+TFphwEmYcXfU2iGKraRxpwn9qWIdUPFVym+KOo+QFhnySWYNQ=="
           }
         },
         {
           "registry": "npm",
           "name": "@e2b/code-interpreter",
-          "version": "2.8.3",
+          "version": "2.9.0",
           "artifacts": {
-            "2.8.3": "sha512-xrSwGtyEoYFZJTtOI8UzYzsNmi4SL/fsH4jxRjJYJDtIHYHLD+sFR6gxGYs5xRYLGxi56ptVMTayX/26ZzJlEA=="
+            "2.9.0": "sha512-ZLO3ayZ0N5kMbKFtgfMSiTa3ppzkybEZgI89XJa55gTv+AvuddO17oFUioeJty3aefhVOnMYiALWfCSxeCKhVA=="
           }
         },
         {
           "registry": "pypi",
           "name": "e2b",
-          "version": "2.55.1",
+          "version": "2.56.0",
           "artifacts": {
-            "e2b-2.55.1-py3-none-any.whl": "sha256-30aec382a7cac5401e0aa0efb156422459f586101809c3e9f34a6fcf797097db",
-            "e2b-2.55.1.tar.gz": "sha256-5255f9a01dc484c343f750d13d3a9c857ef3511222a240572ddce2563dd301d9"
+            "e2b-2.56.0-py3-none-any.whl": "sha256-acfb77c56a33daf1542362cab8048f062b578dffe7a48f32f87a4a3e0bef1e14",
+            "e2b-2.56.0.tar.gz": "sha256-942a5b0a915e4125bb4cad0aaa17fb3dc891d3b43e31fb8e2fb5ac24b0fef394"
           }
         },
         {
           "registry": "pypi",
           "name": "e2b-code-interpreter",
-          "version": "2.10.5",
+          "version": "2.11.0",
           "artifacts": {
-            "e2b_code_interpreter-2.10.5-py3-none-any.whl": "sha256-ac98cd29335ae4f035b70a4eb5f6ca89dc5728d48de79cfb7d90a08d57a652b5",
-            "e2b_code_interpreter-2.10.5.tar.gz": "sha256-ea478929289d0f9936e236cf9e36b914f4df7ef58ca2e5b1e851c1f3b13bf5ca"
+            "e2b_code_interpreter-2.11.0-py3-none-any.whl": "sha256-33dd24820da40343ae262344fd92f825b3410ad54ebb94c4d92773dae12d1713",
+            "e2b_code_interpreter-2.11.0.tar.gz": "sha256-f5ef15c8fdc9079541b01f574d231727bdc1b842c515b506bb6335fbab657a3b"
           }
         }
       ]
@@ -49,42 +49,42 @@
         {
           "registry": "npm",
           "name": "@daytona/sdk",
-          "version": "0.223.1",
+          "version": "0.224.1",
           "artifacts": {
-            "0.223.1": "sha512-Ja6bacvUBuODjKcWGczZn6k9w+7veIces4k2tdizPUndj3pjgnHrphq/TbdIvJfKtz91yQ+S4mKoKaeuKQLc7g=="
+            "0.224.1": "sha512-ZQCY9qOXnAXpYD8KhMzn27VNk6KYfBYCpHhij5Th36+fMXfG8qpxvnb3xau/H7ZWN1HPBhlzjaHHn/J+ZhH/OQ=="
           }
         },
         {
           "registry": "pypi",
           "name": "daytona",
-          "version": "0.223.1",
+          "version": "0.224.1",
           "artifacts": {
-            "daytona-0.223.1-py3-none-any.whl": "sha256-768564fbbe45a91eb0ba6e5e0f36a743e17cc14b7a3a2108aae931ae820a15c1",
-            "daytona-0.223.1.tar.gz": "sha256-72a4a7a795f44aa678daad52d74bd69d11eeacd894f310895a313200ea8fec1f"
+            "daytona-0.224.1-py3-none-any.whl": "sha256-2dedf1ef0c5f98dd0c3a70ab130284abdd7414a3b8a6f6452842c4f5dcc2a583",
+            "daytona-0.224.1.tar.gz": "sha256-02d5a2fa8099f18503310a80b6b807c5fb18863738c13026ea4dad21a454a831"
           }
         },
         {
           "registry": "npm",
           "name": "@daytona/api-client",
-          "version": "0.223.1",
+          "version": "0.224.1",
           "artifacts": {
-            "0.223.1": "sha512-p/NaCr3NbKUKPwqDBJBHHvToUMqh7QIyHT5rENzJYSrs9RCMfsifbtTpe0nHyOokfZhIceHWFcOtT2JwJYmSKQ=="
+            "0.224.1": "sha512-RFsDcGuifpyKnUHlfTLC9jDXXg7ZwciKlzmy0MBGcG5VKSRdwlRyqCaM9g6/k7m5eQ+N1ieQR2JAjZnVWn23YQ=="
           }
         },
         {
           "registry": "npm",
           "name": "@daytona/toolbox-api-client",
-          "version": "0.223.1",
+          "version": "0.224.1",
           "artifacts": {
-            "0.223.1": "sha512-Sl91T6kLIfilU5njZWGzU8KAeHtOfv6pw6iPO1JmX8UhjqfriOy6exPyCxSiBpmyZsQy0eL80IecdbTZPvnmcQ=="
+            "0.224.1": "sha512-fiuBJedfubBMoLh1Z7VdAWsgnQaYGsQMZoAGV12IZ3R5D/ELFATd4tq/jW1mhSl7X27lxqSmtkHvaQt3ELRNPA=="
           }
         },
         {
           "registry": "npm",
           "name": "@daytona/analytics-api-client",
-          "version": "0.223.1",
+          "version": "0.224.1",
           "artifacts": {
-            "0.223.1": "sha512-LntjeNKKHpjzpCwgGbfYRvQ733b7SLfGpeM5ZTA12YK82YfvssGPDRkfo7xi88ndsbYteE+L9TpqYx3aH3WncA=="
+            "0.224.1": "sha512-CDW5CWbf5Ql0h31uZDD0vcOjJ8T0KimARqgni6gc9YICAoN0tx3getO4CDySTgjJpiYwH1qw4zlJs+h36L0T8w=="
           }
         }
       ]
@@ -96,27 +96,27 @@
         {
           "registry": "npm",
           "name": "@vercel/sandbox",
-          "version": "3.6.1",
+          "version": "3.8.0",
           "artifacts": {
-            "3.6.1": "sha512-U6dwyadp2SmW/M96W2Bb3UjIql6TOOYwu9McUIwob209pj0A3ks/wKrMv7lCE7INx50J5zOpqLhMOnFa+Yodlg=="
+            "3.8.0": "sha512-2ib+Dl8WG898OBmtep33UtE6pGbvNA9WClT7NHqQ0tch1Lq1OjQ/gmfjDT32C3HvyPA4YBXoLiJDVWZXURQW8w=="
           }
         },
         {
           "registry": "pypi",
           "name": "vercel",
-          "version": "0.11.6",
+          "version": "0.12.0",
           "artifacts": {
-            "vercel-0.11.6-py3-none-any.whl": "sha256-3dfad0bfc6a6ba380246acec7346ed89020247e16e4294d88f3d9a296d2d5f43",
-            "vercel-0.11.6.tar.gz": "sha256-af96132f898e0bc8421e5ae16a0d16fd973aaebaf3f0852d3ffef076af7a22ed"
+            "vercel-0.12.0-py3-none-any.whl": "sha256-1075d70fb0da3a62469360f8ee08da93e8c6aef7bfb125e4df33cee27c182c8d",
+            "vercel-0.12.0.tar.gz": "sha256-88f21af66e0ddd39bf640994366a4a327dc581abd3824482abe64be38f5e5fa7"
           }
         },
         {
           "registry": "pypi",
           "name": "vercel-sandbox",
-          "version": "0.9.0",
+          "version": "0.9.1",
           "artifacts": {
-            "vercel_sandbox-0.9.0-py3-none-any.whl": "sha256-eebc4ecd430ff3845f4f5a36c18d7ba80405f459533bb0d206caed9b2a3ed5ab",
-            "vercel_sandbox-0.9.0.tar.gz": "sha256-5b75e3aead43f9b9dea6c74d5fabdf5539b874c6d9e65cb6570ee0ac077848fb"
+            "vercel_sandbox-0.9.1-py3-none-any.whl": "sha256-ff4d51d66e5d4ab5a37559d7828706ea5f77c95cc7d34ba3590d590d71fb7f92",
+            "vercel_sandbox-0.9.1.tar.gz": "sha256-3aa377e771acdac99d2370a8586fef354b732a73e944fc8de434ddab8e169970"
           }
         }
       ]
@@ -128,18 +128,18 @@
         {
           "registry": "npm",
           "name": "@blaxel/core",
-          "version": "0.3.25",
+          "version": "0.3.30",
           "artifacts": {
-            "0.3.25": "sha512-K6aGUyIpgrPnkpwMOI/U/gbZwveOMu1Am04pkawZQjkp7NUa/roG0HC6NJPBp3AVVJY3CQtkGSWpAJ2DV4ZKpw=="
+            "0.3.30": "sha512-By64a1IAd68RSZNgBuTlt7sh+V9iKwyCh9KoAzEbsWoKvf/wfD5s9rLSV4Nf0DLgAOyVqEGES8NTxgoqTHNM/g=="
           }
         },
         {
           "registry": "pypi",
           "name": "blaxel",
-          "version": "0.4.13",
+          "version": "0.4.18",
           "artifacts": {
-            "blaxel-0.4.13-py3-none-any.whl": "sha256-b8817718ca63a2b31a5026f98c7191d5ed8f2f4c1aafc2d4aa57491a560a2146",
-            "blaxel-0.4.13.tar.gz": "sha256-a036256792e85238724b8bce38fb7c0b4f661fe4c3ac576258a8be1736ac8483"
+            "blaxel-0.4.18-py3-none-any.whl": "sha256-a6ed0c49798c21933e842cb9baba268a242bf7a4db6ecd411f48457f47933095",
+            "blaxel-0.4.18.tar.gz": "sha256-77f23b3b5771e0bfc512c94692c8d1b6d10845d7cac1ae24a66bedd08c25a146"
           }
         }
       ]
@@ -211,9 +211,32 @@
         {
           "registry": "npm",
           "name": "freestyle",
-          "version": "0.2.17",
+          "version": "0.2.20",
           "artifacts": {
-            "0.2.17": "sha512-SQRRJAP+y56/nIDwmqJG5Y5IqqKYAmABqv/gjyzANy0wUe3cqnV1iD14nU9lQAYWtQ5UCl+lnE38nXZFKO0J9Q=="
+            "0.2.20": "sha512-IElfZHSGQO93RUUd9rqluWF69xyp5Kp0GII3JvrlZJpkZ/2nInFoDkfObOT6e2yyt+2hOdPR75BV9HqNwLCvkA=="
+          }
+        }
+      ]
+    },
+    {
+      "id": "morph",
+      "status": "partial",
+      "upstreams": [
+        {
+          "registry": "npm",
+          "name": "morphcloud",
+          "version": "0.0.20",
+          "artifacts": {
+            "0.0.20": "sha512-zcExVlRmQCcOz7pjcLXTSy2caNrRGx/b1DCz7r9YfzYfThA6IHO4Wafd6KFKtsubm6U5Ag/67cjoa7FDOk5T5g=="
+          }
+        },
+        {
+          "registry": "pypi",
+          "name": "morphcloud",
+          "version": "0.1.115",
+          "artifacts": {
+            "morphcloud-0.1.115-py3-none-any.whl": "sha256-f41f9e51dae3b7837c5a932c0e8e720d0722429f7bfd261ade89a14bbebdbff6",
+            "morphcloud-0.1.115.tar.gz": "sha256-ffd08a4cb906c5b188728e4d3e9e0cf60d9596dcdc7a9a57591a62399691cdcc"
           }
         }
       ]
@@ -225,47 +248,10 @@
         {
           "registry": "pypi",
           "name": "prime-sandboxes",
-          "version": "0.4.1",
+          "version": "0.4.5",
           "artifacts": {
-            "prime_sandboxes-0.4.1-py3-none-any.whl": "sha256-1a1bb96afacc66d690815be82c0b7af180ea141421b7d180b4a0adbada4f38f0",
-            "prime_sandboxes-0.4.1.tar.gz": "sha256-53f7577dc9070e3b8e30db360f9e3cce3bcc35f8765b26f24f64dbc3c7763b06"
-          },
-          "latestReview": {
-            "version": "0.4.3",
-            "artifacts": {
-              "prime_sandboxes-0.4.3-py3-none-any.whl": "sha256-dd26007838c25b5d38a8b7af0514c07027b783406c0ea5b9fcf0eb74a45139bd",
-              "prime_sandboxes-0.4.3.tar.gz": "sha256-a2169182f74307485c73f897e224c978eba3276133ddb40715be4d346594c487"
-            },
-            "reviewedAt": "2026-10-08",
-            "disposition": "held-for-sdk-qualification",
-            "evidence": {
-              "sourceUrls": [
-                "https://pypi.org/pypi/prime-sandboxes/0.4.3/json",
-                "https://files.pythonhosted.org/packages/d8/1b/01e02c9d2346956f5ed77d269f836905a017ad796a4b4c719debd8942dc4/prime_sandboxes-0.4.3.tar.gz",
-                "https://files.pythonhosted.org/packages/e1/5f/d0b5cd1dabdb6e5cb1ab5d84c8ba9a96e2a9a0be8913ec9db9177c9645fb/prime_sandboxes-0.4.3-py3-none-any.whl",
-                "https://github.com/PrimeIntellect-ai/prime/tree/main/packages/prime-sandboxes"
-              ],
-              "artifactSha256": {
-                "prime_sandboxes-0.4.3-py3-none-any.whl": "dd26007838c25b5d38a8b7af0514c07027b783406c0ea5b9fcf0eb74a45139bd",
-                "prime_sandboxes-0.4.3.tar.gz": "a2169182f74307485c73f897e224c978eba3276133ddb40715be4d346594c487"
-              },
-              "changes": [
-                "Source diff of the 0.4.1 and 0.4.2 sdists, downloaded and hashed on the Mac, nothing installed or run: README, __init__, models.py, sandbox.py, one test changed; tests/test_checkpoints.py added.",
-                "Adds filesystem checkpoints: SandboxCheckpoint, CheckpointLookupError and BatchCheckpointResponse models; checkpoint, get_checkpoint, get_checkpoints (batch of up to 100 ids), wait_for_checkpoint and list_checkpoints on the sync and async clients; CreateSandboxRequest takes checkpoint_id with a validate_restore_source check.",
-                "CreateSandboxRequest.docker_image becomes Optional (None when restoring from a checkpoint) and disk_size_gb's default 5.0 becomes None.",
-                "Background job launch: the working_dir prefix is 'cd DIR || exit 1;' instead of 'cd DIR &&', and the launch cwd is / for an absolute working_dir.",
-                "Source diff of the 0.4.2 and 0.4.3 sdists, downloaded and hashed on the Mac, nothing installed or run; the wheel's package source matched the sdist's: __init__, core/client.py, models.py, sandbox.py and tests/test_checkpoints.py changed.",
-                "Adds checkpoint deletion: delete_checkpoint (DELETE /sandbox/checkpoints/{id}, 409 while pending or the active tip) and delete_sandbox_checkpoints (DELETE /sandbox/{id}/checkpoints) on the sync and async clients, with DeleteSandboxCheckpointsResponse and CheckpointDeleteError (NOT_FOUND or CONFLICT) models exported.",
-                "The core client returns {} for an HTTP 204 instead of parsing an empty body.",
-                "No existing method was removed or renamed. Installed consumer qualification against withruntime/prime is not run; the supported pin stays 0.4.1."
-              ]
-            },
-            "between": {
-              "0.4.2": {
-                "prime_sandboxes-0.4.2-py3-none-any.whl": "sha256-ed59f001c7575339d6c903166c5468f783eda0997586ec6476fd8b35f65746f9",
-                "prime_sandboxes-0.4.2.tar.gz": "sha256-4990a724cac0a662fde6e12e7eccfee092a78679cc568653b8ef52008dfa28e4"
-              }
-            }
+            "prime_sandboxes-0.4.5-py3-none-any.whl": "sha256-3f24ed4830d2d823169fdb2df75de3b8355224bf867c0208d47eab0d3b33bb33",
+            "prime_sandboxes-0.4.5.tar.gz": "sha256-4f7b7e50d3d60d3b459fb3ace5713e7d9eb136ac0aa79cf0e7ee7c75c63b0d82"
           }
         }
       ]
@@ -277,45 +263,18 @@
         {
           "registry": "npm",
           "name": "modal",
-          "version": "0.11.0",
+          "version": "0.11.1",
           "artifacts": {
-            "0.11.0": "sha512-Kvy2nejPkice2FI82p5e8TJrFDy0BaSYZjJVmvnTnu51bOH9Ok7IRtp8NavBQqMuXhbpbj6gRULwxsjNkweF6A=="
+            "0.11.1": "sha512-RVb84wPZGG4zd3q2Fuww/ku5kZbp9sDkSUVqIc2VdKa+2QQyuqM/puVDbeVze8XN9tdUp9IJZRbdECJmz56TeQ=="
           }
         },
         {
           "registry": "pypi",
           "name": "modal",
-          "version": "1.6.0",
+          "version": "1.6.2",
           "artifacts": {
-            "modal-1.6.0-py3-none-any.whl": "sha256-2f5981ba656570ad96379d29f0ddff876880708c84966024ce130e9e1794fa68",
-            "modal-1.6.0.tar.gz": "sha256-c5dd551b5e0a283f3c764476c0a4ebe5bdef1e4a69432fa27e1b1ad8ca5e0817"
-          },
-          "latestReview": {
-            "version": "1.6.1",
-            "artifacts": {
-              "modal-1.6.1-py3-none-any.whl": "sha256-f408ef88563003a83e491a6be09d4221eaa6e038fa4faa2ad8b15b25afe949a4",
-              "modal-1.6.1.tar.gz": "sha256-ff17768f67a65595aa7882e893e6cb78e2e001b3653aa52cfe98d4051d8d9e9e"
-            },
-            "reviewedAt": "2026-10-03",
-            "disposition": "held-for-sdk-qualification",
-            "evidence": {
-              "sourceUrls": [
-                "https://pypi.org/pypi/modal/1.6.1/json",
-                "https://files.pythonhosted.org/packages/65/ba/2b36899ea5633bf101e6ba6f7e95a4da3e4b1f57f52bd0ba8f4cfd12e808/modal-1.6.1.tar.gz",
-                "https://files.pythonhosted.org/packages/d2/3c/6b7d9a15dab9af2833ce674bbc72b5654d4099d5b088f1cc1eda3f8249ca/modal-1.6.1-py3-none-any.whl"
-              ],
-              "artifactSha256": {
-                "modal-1.6.1-py3-none-any.whl": "f408ef88563003a83e491a6be09d4221eaa6e038fa4faa2ad8b15b25afe949a4",
-                "modal-1.6.1.tar.gz": "ff17768f67a65595aa7882e893e6cb78e2e001b3653aa52cfe98d4051d8d9e9e"
-              },
-              "changes": [
-                "Source diff of the 1.6.0 and 1.6.1 sdists, downloaded and hashed on the Mac, nothing installed or run; the 1.6.0 hashes match the pin. No file added or removed; 37 files changed, most in sandbox.py, the CLI and the generated protos.",
-                "Sandbox v2 calls send a per-sandbox token (x-modal-sandbox-token, from the create response) beside the auth token through a new _v2_metadata helper, including command router access.",
-                "Experimental sidecars take include_oidc_identity_token and proxy, refused for GPU sandboxes. Server sessions retry start with an idempotency key for up to 25 minutes; the CLI gains endpoint commands; stats types gain container_total_count; agent detection reads tool variables before AGENT and AI_AGENT.",
-                "Requirements: protobuf below 8.0 instead of 7.0, synchronicity ~=0.12.6 instead of ~=0.12.5. Some iterator return types become AsyncGenerator.",
-                "No public Sandbox, ContainerProcess, Image, App or file method used by withruntime/modal was removed or renamed; that drop-in does not import modal. Installed consumer qualification is not run; the supported pin stays 1.6.0."
-              ]
-            }
+            "modal-1.6.2-py3-none-any.whl": "sha256-1a6c8409e315785137615601cac940de3d72462c0059b9cd0faf5d17615bacf0",
+            "modal-1.6.2.tar.gz": "sha256-f96bcd2de02abb74ac8ec3ff7d62400403633867a42c9c7b43f69f75ea00b952"
           }
         }
       ]
@@ -332,11 +291,12 @@
             "0.12.10": "sha512-245s6xEdR1v0Jti0YYd8ORWcTG/f/ksjJfpubvnbky0KxFC/ZDOpbpNKdtyiRBYZqmJGtEncYW7Cwge47tDrpg=="
           },
           "unsupported": {
-            "version": "1.0.0",
+            "version": "1.0.1",
             "artifacts": {
-              "1.0.0": "sha512-+TZVuCey6OBDTvPLWisq4Ie7/R5Zy3zFyYOFCNRpdEIyQsKq3xwzpctonE43DfZ+wYZvvu6QYpR138PayDjF+A=="
+              "1.0.0": "sha512-+TZVuCey6OBDTvPLWisq4Ie7/R5Zy3zFyYOFCNRpdEIyQsKq3xwzpctonE43DfZ+wYZvvu6QYpR138PayDjF+A==",
+              "1.0.1": "sha512-8Qvv2SbMGfDW+zo0AkwaDna+b+IbXPgMKjelu6UZla1jyTwt1Ye0Z4LEahwoXtIMbpQvopr9NvXtLm+abA7+Tw=="
             },
-            "reason": "1.0 removes getSandbox, the Sandbox class, exec, processes, sessions and preview proxying and keeps only Files, S3Mount and DirectoryBackup for the caller's own Durable Object; withruntime/cloudflare implements the 0.x API"
+            "reason": "1.0 removes getSandbox, the Sandbox class, exec, processes, sessions and preview proxying and keeps only Files, S3Mount and DirectoryBackup for the caller's own Durable Object; withruntime/cloudflare implements the 0.x API. 1.0.1 keeps that API: the same runtime code, its declarations export the same names inline, zod moves from 4.5.4 to 4.6.5, and README example links change"
           }
         }
       ]

package/dist/blaxel/client.d.ts

@@ -28,8 +28,19 @@ export interface Config {
         clientId: string;
         clientSecret: string;
     };
+    /** Blaxel's product token for an integration built on the SDK
+     * (`<name>/<semver>`), which Blaxel appends to its User-Agent. Kept and
+     * checked as Blaxel does; never sent, as Runtime does not attribute traffic
+     * by it. */
+    integration?: string;
     [key: string]: unknown;
 }
+/** Blaxel's `settings.integration`: the token given to `initialize` or set,
+ * then BL_INTEGRATION; `""` when none, or when it is not `<name>/<semver>`
+ * (warned once per value, as Blaxel does). */
+export declare function integrationToken(): string;
+/** Sets Blaxel's `settings.integration`; undefined goes back to BL_INTEGRATION. */
+export declare function setIntegrationToken(value: string | undefined): void;
 /** Blaxel's `initialize(config)`: a Runtime key given as `apikey` is used from
  * then on. A Blaxel key is refused while RUNTIME_API_KEY is not set, and never
  * sent. `workspace` means nothing on Runtime and is ignored. */

package/dist/blaxel/client.js

@@ -3,12 +3,38 @@ import { CredentialsError, NotSupportedError } from "./errors.js";
 const env = (name) => typeof process === "undefined" ? undefined : process.env[name];
 const isRuntimeKey = (key) => key.startsWith("rtcloud_");
 let configured;
+let integration;
+let warnedIntegration;
+/** Blaxel's check of an integration token: `<name>/<semver>`, lowercase name. */
+const INTEGRATION_TOKEN = /^[a-z0-9][a-z0-9._-]*\/\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
+/** Blaxel's `settings.integration`: the token given to `initialize` or set,
+ * then BL_INTEGRATION; `""` when none, or when it is not `<name>/<semver>`
+ * (warned once per value, as Blaxel does). */
+export function integrationToken() {
+    const value = integration ?? env("BL_INTEGRATION") ?? "";
+    if (!value)
+        return "";
+    if (!INTEGRATION_TOKEN.test(value)) {
+        if (warnedIntegration !== value) {
+            warnedIntegration = value;
+            console.warn(`Ignoring invalid Blaxel integration token ${JSON.stringify(value)}: expected <name>/<semver> with a lowercase name`);
+        }
+        return "";
+    }
+    return value;
+}
+/** Sets Blaxel's `settings.integration`; undefined goes back to BL_INTEGRATION. */
+export function setIntegrationToken(value) {
+    integration = value;
+}
 /** Blaxel's `initialize(config)`: a Runtime key given as `apikey` is used from
  * then on. A Blaxel key is refused while RUNTIME_API_KEY is not set, and never
  * sent. `workspace` means nothing on Runtime and is ignored. */
 export function initialize(config = {}) {
     if (config.clientCredentials !== undefined)
         throw new NotSupportedError("Blaxel client credentials (clientCredentials)", "Use a Runtime key: set RUNTIME_API_KEY, or run `npx withruntime login` once.");
+    if ("integration" in config)
+        integration = config.integration;
     const key = config.apikey ?? config.apiKey;
     if (key === undefined || key === "")
         return;
@@ -51,6 +77,8 @@ export function clientFor(options = {}) {
 export function resetClients() {
     clients.clear();
     configured = undefined;
+    integration = undefined;
+    warnedIntegration = undefined;
 }
 /** Blaxel's default region, from BL_REGION. */
 export function defaultRegion() {

package/dist/blaxel/errors.d.ts

@@ -63,3 +63,68 @@ export declare function guard<T>(work: () => Promise<T>): Promise<T>;
 export declare function isNotFound(error: unknown): boolean;
 /** Runtime's error code on either shape. */
 export declare function codeOf(error: unknown): string | undefined;
+/** Codes Blaxel's edge gateway returns. */
+export type BlaxelGatewayErrorCode = "ROUTE_NOT_FOUND" | "WORKLOAD_NOT_FOUND" | "WORKSPACE_NOT_FOUND" | "WORKLOAD_UNAVAILABLE" | "WORKLOAD_FAILED" | "ROUTING_UNAVAILABLE" | "AUTHENTICATION_REQUIRED" | "AUTHENTICATION_FAILED" | "TOKEN_REVOKED" | "FORBIDDEN" | "BAD_REQUEST" | "USAGE_LIMIT_EXCEEDED" | "POLICY_VIOLATION" | "UPSTREAM_CONNECT_FAILED" | "UPSTREAM_CONNECT_TIMEOUT" | "UPSTREAM_ERROR" | "UPSTREAM_TIMEOUT" | "GATEWAY_INTERNAL_ERROR";
+/** Blaxel's authentication codes from sandbox creation and fork. */
+export type BlaxelAuthErrorCode = "TOKEN_REVOKED" | "UNAUTHORIZED" | "UNAUTHORIZED_WORKSPACE" | "AUTHENTICATION_UNAVAILABLE" | "WORKSPACE_REQUIRED";
+/** Blaxel's codes for creating or forking a sandbox. */
+export type BlaxelSandboxCreationErrorCode = "READ_FAILED" | "PARSE_FAILED" | "VALIDATION_FAILED" | "VALIDATION_ERROR" | "INVALID_INPUT" | "INVALID_IMAGE" | "IMAGE_NOT_FOUND" | "UPLOAD_NOT_SUPPORTED" | "UNSUPPORTED_GENERATION" | "KERNEL_GENERATION_MISMATCH" | "INVALID_PORTS" | "INVALID_REGION" | "REGION_MISMATCH" | "INVALID_VOLUME" | "INVALID_VOLUME_COUNT" | "INVALID_VOLUME_REGION" | "VOLUME_ALREADY_ATTACHED" | "VOLUME_PROVIDER_MISMATCH" | "VOLUME_NOT_FOUND" | "WORKSPACE_NOT_FOUND" | "ACCOUNT_NOT_FOUND" | "SANDBOX_ALREADY_EXISTS" | "SANDBOX_DELETION_IN_PROGRESS" | "SANDBOX_DELETED" | "VOLUME_DELETED" | "CREATION_TIMEOUT" | "QUOTA_EXCEEDED" | "RATE_LIMIT_EXCEEDED" | "WORKSPACE_RATE_LIMIT_EXCEEDED" | "SERVICE_UNAVAILABLE" | "DATABASE_ERROR" | "LOCK_ACQUISITION_FAILED" | "VOLUME_LOOKUP_FAILED" | "BUILD_TRIGGER_ERROR" | "PRESIGNED_URL_ERROR" | "UPLOAD_UNAVAILABLE" | "DEPLOYMENT_FAILED" | "CLUSTER_GATEWAY_ERROR" | "LOCKDOWN_ERROR" | "PROXY_CONFIG_ERROR" | "VALIDATED_DATA_ERROR" | "WORKSPACE_DATA_MISSING" | "CALLBACK_SEND_FAILED" | "FORK_FAILED" | "HANDLER_ERROR" | "INTERNAL_ERROR" | "UNKNOWN_ERROR";
+export type BlaxelErrorCode = BlaxelGatewayErrorCode | BlaxelAuthErrorCode | BlaxelSandboxCreationErrorCode;
+export type BlaxelErrorCodeValue = BlaxelErrorCode | (string & Record<never, never>) | number;
+export type BlaxelApiErrorBody = {
+    error: string;
+    code: number;
+};
+export type BlaxelActionErrorBody = {
+    code: BlaxelSandboxCreationErrorCode | BlaxelAuthErrorCode | (string & Record<never, never>);
+    message: string;
+    status_code: number;
+    reason?: string;
+    step?: string;
+    workspace?: string;
+    sandbox_name?: string;
+    timestamp?: string;
+    cause?: string;
+    details?: Record<string, unknown>;
+};
+export type BlaxelPlatformErrorBody = {
+    error: {
+        code: BlaxelGatewayErrorCode | (string & Record<never, never>);
+        message: string;
+        status: number;
+        origin?: "platform";
+        retryable?: boolean;
+        dispatch_state?: "not_dispatched" | "dispatched_unknown";
+        safe_to_retry_request?: boolean;
+        action?: string;
+        do_not?: string;
+        docs_url?: string;
+        timestamp?: string;
+    };
+};
+export type BlaxelSandboxApiErrorBody = {
+    error: string;
+};
+export type BlaxelErrorLike = ResponseError | SandboxCreationTimeoutError | BlaxelApiErrorBody | Pick<BlaxelActionErrorBody, "code" | "message" | "status_code"> | {
+    error: Pick<BlaxelPlatformErrorBody["error"], "code" | "message" | "status">;
+};
+/** True for an error this package throws for an API failure (ResponseError,
+ * SandboxGatewayError, SandboxCreationTimeoutError) or a raw Blaxel error body
+ * (`{ error, code }`, `{ code, message, status_code }`,
+ * `{ error: { code, message, status } }`). False for plain errors, strings and
+ * NotSupportedError, which is a refusal made here, not an API failure. Never
+ * throws. */
+export declare function isBlaxelError(err: unknown): err is BlaxelErrorLike;
+/** The error's code, then its body's, then the X-Blaxel-Error-Code header. A
+ * ResponseError from Runtime answers its HTTP status (its `code`); Runtime's
+ * own code is `runtimeCode`. Never throws. */
+export declare function getBlaxelErrorCode(err: unknown): BlaxelErrorCodeValue | undefined;
+/** The HTTP status: the error's, its response's, then its body's (`status`,
+ * `status_code` or a numeric `code`). Never throws. */
+export declare function getBlaxelErrorStatus(err: unknown): number | undefined;
+/** The error's message, else its body's message or error text. Never throws. */
+export declare function getBlaxelErrorMessage(err: unknown): string | undefined;
+/** Blaxel's request id headers (X-Cf-Request-Id, X-Amz-Cf-Id, CF-Ray) on the
+ * error's response, else the Runtime request id a ResponseError carries
+ * (`requestId`). Never throws. */
+export declare function getBlaxelErrorRequestId(err: unknown): string | undefined;