withruntime 0.17.1 → 0.17.2

package/DAYTONA.md

@@ -17,8 +17,8 @@ from withruntime.daytona import AsyncDaytona  # was: from daytona import AsyncDa
 ```
 
 The mapping was written against `@daytona/sdk` 0.220.0 and `daytona` 0.220.0
-on PyPI, and checked against `@daytona/sdk` and `daytona` 0.224.1 on
-15 October 2026 (below, "0.224.1"). The exact releases and artifact hashes
+on PyPI, and checked against `@daytona/sdk` and `daytona` 0.225.0 on
+18 October 2026 (below, "0.225.0"). The exact releases and artifact hashes
 are kept in `compatibility-lock.json`.
 
 ## Keys
@@ -126,6 +126,37 @@ Some differences are not refusals:
 - `autoArchiveInterval` is recorded only: Runtime has no archive tier.
 - Runtime's stock image is Ubuntu 24.04 with Python 3.12, Node.js 24 and Bun.
 
+## 0.225.0, 18 October 2026
+
+Reviewed the published npm tarballs for `@daytona/sdk`, `@daytona/api-client`,
+`@daytona/toolbox-api-client` and `@daytona/analytics-api-client` 0.224.1 →
+0.225.0, and the PyPI wheel and sdist for `daytona` 0.224.1 → 0.225.0, each its
+registry's latest when checked. Every pinned file matched the hash already in
+`compatibility-lock.json`, every new file its registry's SHA-512 integrity or
+SHA-256 digest, and the wheel's Python source is byte for byte its sdist's.
+Nothing was installed, imported or run. No declaration of `@daytona/sdk` and no
+Python source of `daytona` changed: only versions and the exact pins on the
+three API clients. The one API change is in `@daytona/api-client` (and its
+PyPI twins): `GpuType` gains `B200`.
+
+| Upstream change | Drop-in disposition                                                                                                                                            |
+| --------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `GpuType.B200`  | Exported, with every other `GpuType`. A create naming any GPU type is refused (`NotSupportedError`, "Runtime runs sandboxes on CPUs") before anything is made. |
+
+Two gaps near it are closed with the review. `@daytona/sdk` re-exports
+`GpuType`, `SnapshotState`, `SandboxListSortField`, `SandboxListSortDirection`,
+`SandboxClass`, `ListSecretsPaginatedSortEnum` and
+`ListSecretsPaginatedOrderEnum`, and `daytona` exports `GpuType`,
+`SandboxClass`, `SandboxListSortField` and `SandboxListSortDirection`; the
+drop-ins exported none of them, so code importing one failed. They are exported
+now with upstream's values, and the sort enums drive `list`. Python refused
+`Resources(gpu=...)` but made a CPU sandbox for `Resources(gpu_type=...)`
+alone, which Daytona sends as a GPU request; it is refused now, as in
+TypeScript. `tests/daytona/daytona-0-225-0.test.ts` and
+`sdks/python/tests/test_daytona_0_225_0.py` fail without this change. The
+oracle was not run against the new release, since it executes Daytona's code;
+the provider remains marked `partial`.
+
 ## 0.224.1, 15 October 2026
 
 Reviewed the published npm tarballs for `@daytona/sdk`, `@daytona/api-client`,

package/compatibility-lock.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "checkedAt": "2026-10-11",
+  "checkedAt": "2026-10-18",
   "providers": [
     {
       "id": "e2b",
@@ -49,42 +49,42 @@
         {
           "registry": "npm",
           "name": "@daytona/sdk",
-          "version": "0.224.1",
+          "version": "0.225.0",
           "artifacts": {
-            "0.224.1": "sha512-ZQCY9qOXnAXpYD8KhMzn27VNk6KYfBYCpHhij5Th36+fMXfG8qpxvnb3xau/H7ZWN1HPBhlzjaHHn/J+ZhH/OQ=="
+            "0.225.0": "sha512-PeE4INyipIP6HzSNAZTfR+As2u+rwddCAniCk9a/gEjEh4JpvyCyTNASjikpsTcZSn1XvksmxhxKFodv6x0YYQ=="
           }
         },
         {
           "registry": "pypi",
           "name": "daytona",
-          "version": "0.224.1",
+          "version": "0.225.0",
           "artifacts": {
-            "daytona-0.224.1-py3-none-any.whl": "sha256-2dedf1ef0c5f98dd0c3a70ab130284abdd7414a3b8a6f6452842c4f5dcc2a583",
-            "daytona-0.224.1.tar.gz": "sha256-02d5a2fa8099f18503310a80b6b807c5fb18863738c13026ea4dad21a454a831"
+            "daytona-0.225.0-py3-none-any.whl": "sha256-8cdeb78e5d34b08c4818bd9dfa67fb693152c37eb0907067980fc1bd031256e5",
+            "daytona-0.225.0.tar.gz": "sha256-7fd2e9422360ca2d3b393af137231f4fd9d9a128c9a4070d231f8c776e446dc8"
           }
         },
         {
           "registry": "npm",
           "name": "@daytona/api-client",
-          "version": "0.224.1",
+          "version": "0.225.0",
           "artifacts": {
-            "0.224.1": "sha512-RFsDcGuifpyKnUHlfTLC9jDXXg7ZwciKlzmy0MBGcG5VKSRdwlRyqCaM9g6/k7m5eQ+N1ieQR2JAjZnVWn23YQ=="
+            "0.225.0": "sha512-P0HJOfLc3LGzeRdRhIogaA2q4+Of84UBCMWCFfnDeJ91pxQ4FExJ2KY5uF631MoNx1F+u2tc7fl0z0JuBNa/Uw=="
           }
         },
         {
           "registry": "npm",
           "name": "@daytona/toolbox-api-client",
-          "version": "0.224.1",
+          "version": "0.225.0",
           "artifacts": {
-            "0.224.1": "sha512-fiuBJedfubBMoLh1Z7VdAWsgnQaYGsQMZoAGV12IZ3R5D/ELFATd4tq/jW1mhSl7X27lxqSmtkHvaQt3ELRNPA=="
+            "0.225.0": "sha512-+LGQtqZTY0SBGMut3bhCPNU/cvfwKQcU1tAoVStZD9mM7EHWPey2TkMF+ZW0Fq2waWPEH2g7JhWWz9YFBUBQeQ=="
           }
         },
         {
           "registry": "npm",
           "name": "@daytona/analytics-api-client",
-          "version": "0.224.1",
+          "version": "0.225.0",
           "artifacts": {
-            "0.224.1": "sha512-CDW5CWbf5Ql0h31uZDD0vcOjJ8T0KimARqgni6gc9YICAoN0tx3getO4CDySTgjJpiYwH1qw4zlJs+h36L0T8w=="
+            "0.225.0": "sha512-zsj9YjBpXmQ2owhJF7+LEpKnekYy9D4wA52U6P7jsB7ng5KeSQ+3+0MFR3Bj3Cy3HIcKNW96e30F6olbiK/q+A=="
           }
         }
       ]
@@ -248,10 +248,10 @@
         {
           "registry": "pypi",
           "name": "prime-sandboxes",
-          "version": "0.4.5",
+          "version": "0.4.6",
           "artifacts": {
-            "prime_sandboxes-0.4.5-py3-none-any.whl": "sha256-3f24ed4830d2d823169fdb2df75de3b8355224bf867c0208d47eab0d3b33bb33",
-            "prime_sandboxes-0.4.5.tar.gz": "sha256-4f7b7e50d3d60d3b459fb3ace5713e7d9eb136ac0aa79cf0e7ee7c75c63b0d82"
+            "prime_sandboxes-0.4.6-py3-none-any.whl": "sha256-e97c6e70c032e0b6d7defdb26d6192a02643ad279af1a4726ebceb35ee89d70c",
+            "prime_sandboxes-0.4.6.tar.gz": "sha256-23204a465500e9c20639e3043e92d703712d8c80b94d6434bfeb82c787102915"
           }
         }
       ]

package/dist/billing-cli.d.ts

@@ -1,5 +1,5 @@
 import type { Runtime } from "./client.js";
-import type { claimWalletAccount, openWalletAccount } from "./wallet.js";
+import type { claimWalletAccount, openWalletAccount, rekeyWalletAccount } from "./wallet.js";
 type Out = {
     json: boolean;
     write: (text: string) => void;
@@ -9,11 +9,13 @@ type Args = {
     positional: string[];
     flags: Map<string, string[]>;
 };
-export declare const BILLING_HELP = "runtime billing <command>\n\n  topup <usd> [--wait]      Buy credit with stablecoins (USDC on Base, Solana or Tempo).\n                            Prints an address per network and the exact amount to send.\n                            Send exactly that, from any wallet, before the time shown.\n                            --wait keeps checking until the credit lands.\n  status <id> [--wait]      Whether a top-up's payment has arrived\n\n  auto-top-up               Show auto top-up: the card is charged when credit runs low\n  auto-top-up on [--below <usd>] [--amount <usd>] [--monthly <usd>]\n                            Charge <amount> plus tax when credit falls below <below>,\n                            at most <monthly> a month: $10, $20 and $500 unless given,\n                            or as last set. At least $10, $20 and $100. 5% more as\n                            credit each time, and 200 sandboxes at once while on.\n                            A person saves the card at\n                            https://withruntime.com/account/billing\n  auto-top-up off           Turn it off. Running sandboxes are never stopped.\n\n  No account yet? An agent can open one with a wallet alone:\n  topup <usd> --new-account --accept-terms [--wait]\n                            Opens an account and its first top-up. Prints a claim code,\n                            shown once. --wait saves the key here once the money lands.\n  claim <code> [--wait]     Exchange a paid account's claim code for its key, saved here\n\n  $10 to $10,000 a top-up; $500 in an account's first week. By card:\n  https://withruntime.com/account/billing\n";
+export declare const BILLING_HELP = "runtime billing <command>\n\n  topup <usd> [--wait]      Buy credit with stablecoins (USDC on Base, Solana or Tempo).\n                            Prints an address per network and the exact amount to send.\n                            Send exactly that, from any wallet, before the time shown.\n                            --wait keeps checking until the credit lands.\n  status <id> [--wait]      Whether a top-up's payment has arrived\n\n  auto-top-up               Show auto top-up: the card is charged when credit runs low\n  auto-top-up on [--below <usd>] [--amount <usd>] [--monthly <usd>]\n                            Charge <amount> plus tax when credit falls below <below>,\n                            at most <monthly> a month: $10, $20 and $500 unless given,\n                            or as last set. At least $10, $20 and $100. 5% more as\n                            credit each time, and 200 sandboxes at once while on.\n                            A person saves the card at\n                            https://withruntime.com/account/billing\n  auto-top-up off           Turn it off. Running sandboxes are never stopped.\n\n  No account yet? An agent can open one with a wallet alone:\n  topup <usd> --new-account --accept-terms [--wait]\n                            Opens an account and its first top-up. Prints a claim code,\n                            shown once. --wait saves the key here once the money lands.\n  claim <code> [--wait]     Exchange a paid account's claim code for its key, saved here\n  claim <code> --new-key    Lost the key? Replace it with the claim code. The new key is\n                            saved here; every other key stops working.\n\n  $10 to $10,000 a top-up; $500 in an account's first week. By card:\n  https://withruntime.com/account/billing\n";
 /** Wallet-account commands need no key, and the claim saves the one they get. */
 export type WalletDeps = {
     open: typeof openWalletAccount;
     claim: typeof claimWalletAccount;
+    /** Replaces a lost key with the claim code. */
+    rekey: typeof rekeyWalletAccount;
     /** Saves a claimed key as this machine's connection, as `login --with-key` does. */
     save: (key: string, orgId: string) => Promise<void>;
 };

package/dist/billing-cli.js

@@ -23,6 +23,8 @@ export const BILLING_HELP = `runtime billing <command>
                             Opens an account and its first top-up. Prints a claim code,
                             shown once. --wait saves the key here once the money lands.
   claim <code> [--wait]     Exchange a paid account's claim code for its key, saved here
+  claim <code> --new-key    Lost the key? Replace it with the claim code. The new key is
+                            saved here; every other key stops working.
 
   $10 to $10,000 a top-up; $500 in an account's first week. By card:
   https://withruntime.com/account/billing
@@ -53,7 +55,15 @@ function describe(topup) {
     lines.push("", ...(topup.payBy ? [`Send before ${topup.payBy}.`] : []), "A different amount, token or network cannot be matched or returned automatically.", `The credit lands a few minutes after the transfer: \`${me} billing status ${topup.purchaseId}\`.`);
     return lines.join("\n");
 }
-const FLAGS = new Set(["wait", "new-account", "accept-terms", "below", "amount", "monthly"]);
+const FLAGS = new Set([
+    "wait",
+    "new-account",
+    "accept-terms",
+    "below",
+    "amount",
+    "monthly",
+    "new-key",
+]);
 export async function billingCommand(argv, args, out, client, sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms)), wallet) {
     const [verb, value] = args.positional;
     const has = (name) => args.flags.get(name)?.at(-1) === "true";
@@ -68,6 +78,11 @@ export async function billingCommand(argv, args, out, client, sleep = (ms) => ne
     if ((verb === "topup" && has("new-account")) || verb === "claim") {
         if (!wallet)
             throw usage("Wallet accounts are not available here.");
+        if (has("new-key")) {
+            if (verb !== "claim")
+                throw usage("--new-key is for `billing claim <code> --new-key`.");
+            return rekeyCommand(value, out, wallet);
+        }
         return walletCommand(verb, value, has("accept-terms"), wait, out, sleep, wallet);
     }
     if (verb === "auto-top-up")
@@ -177,6 +192,17 @@ function dollarsOf(value) {
         throw usage("Say how many dollars of credit to buy, such as `billing topup 20`.");
     return usd;
 }
+/** `claim <code> --new-key`: the key was lost; the claim code makes a new one. */
+async function rekeyCommand(code, out, wallet) {
+    if (!code)
+        throw usage("Give the claim code.");
+    const replaced = await wallet.rekey(code);
+    await wallet.save(replaced.apiKey, replaced.orgId);
+    out.write(out.json
+        ? JSON.stringify({ status: "replaced", orgId: replaced.orgId, connected: true })
+        : "Replaced. This machine is connected with the new key, saved and not shown. Every other key of this account no longer works.");
+    return 0;
+}
 /** `topup <usd> --new-account` and `claim <code>`: an account with no key. */
 async function walletCommand(verb, value, acceptTerms, wait, out, sleep, wallet) {
     const me = named("runtime");

package/dist/cli.js

@@ -837,6 +837,7 @@ export async function run(argv, env = process.env, out = defaultOut(argv)) {
             ],
             ["used, last 24 hours", usd(l.daily.usedMicros)],
             ...(l.daily.remainingMicros === null ? [] : [["left", usd(l.daily.remainingMicros)]]),
+            ...(l.credit ? [["credit", creditLine(l.credit, usd)]] : []),
             ...(l.trial ? [["free time", trialLeft(l.trial)]] : []),
             ...(spend?.pilot
                 ? [
@@ -845,6 +846,8 @@ export async function run(argv, env = process.env, out = defaultOut(argv)) {
                 ]
                 : []),
         ]), l);
+        if (l.credit?.addedBy === "agent" && !out.json)
+            out.write(`No person pays for this account, so add credit yourself: \`${me} billing topup <usd>\`.`);
         return 0;
     }
     if (command === "secrets")
@@ -929,8 +932,8 @@ export async function run(argv, env = process.env, out = defaultOut(argv)) {
     if (command === "billing") {
         product = "billing";
         const origins = connectionOrigins(env);
-        const { claimWalletAccount, openWalletAccount } = await import("./wallet.js");
-        return billingCommand(rest, parse(rest, ["wait", "new-account", "accept-terms"], ["below", "amount", "monthly"]), out, () => client(env), undefined, {
+        const { claimWalletAccount, openWalletAccount, rekeyWalletAccount } = await import("./wallet.js");
+        return billingCommand(rest, parse(rest, ["wait", "new-account", "accept-terms", "new-key"], ["below", "amount", "monthly"]), out, () => client(env), undefined, {
             open: (input) => {
                 checkBrowserOrigins(origins);
                 return openWalletAccount(input, { authUrl: origins.auth });
@@ -939,6 +942,10 @@ export async function run(argv, env = process.env, out = defaultOut(argv)) {
                 checkBrowserOrigins(origins);
                 return claimWalletAccount(code, { authUrl: origins.auth });
             },
+            rekey: (code) => {
+                checkBrowserOrigins(origins);
+                return rekeyWalletAccount(code, { authUrl: origins.auth });
+            },
             save: (key, orgId) => {
                 checkBrowserOrigins(origins);
                 return connectionStore(env).save({
@@ -1356,6 +1363,14 @@ export function outOfMemoryLines(memory) {
 /** Dollars from integer microdollars: cents from a dollar up, four places
  * below one, and every place below a hundredth of a cent, so a short trial
  * test never reads as $0.0000. */
+function creditLine(c, usd) {
+    if (c.state === "empty")
+        return "none left: add credit to keep going";
+    const days = c.runwayDays === null
+        ? "nothing is being spent"
+        : `lasts about ${Math.max(1, Math.round(c.runwayDays))} ${Math.round(c.runwayDays) <= 1 ? "day" : "days"} at this month's pace`;
+    return `${usd(c.availableMicros)} left, ${days}${c.state === "low" ? " (low)" : ""}`;
+}
 function dollars(micros) {
     const value = BigInt(micros);
     const sign = value < 0n ? "-" : "";

package/dist/daytona/index.d.ts

@@ -19,6 +19,67 @@ export declare const SandboxState: {
     readonly DESTROYED: "destroyed";
 };
 export type SandboxState = (typeof SandboxState)[keyof typeof SandboxState];
+export declare const GpuType: {
+    readonly H100: "H100";
+    readonly H200: "H200";
+    readonly B200: "B200";
+    readonly B300: "B300";
+    readonly RTX_PRO_6000: "RTX-PRO-6000";
+    readonly RTX_4090: "RTX-4090";
+    readonly RTX_5090: "RTX-5090";
+    readonly MI355X: "MI355X";
+    readonly UNKNOWN_DEFAULT_OPEN_API: "11184809";
+};
+export type GpuType = (typeof GpuType)[keyof typeof GpuType];
+export declare const SnapshotState: {
+    readonly BUILDING: "building";
+    readonly PENDING: "pending";
+    readonly PULLING: "pulling";
+    readonly SNAPSHOTTING: "snapshotting";
+    readonly ACTIVE: "active";
+    readonly INACTIVE: "inactive";
+    readonly ERROR: "error";
+    readonly BUILD_FAILED: "build_failed";
+    readonly REMOVING: "removing";
+    readonly UNKNOWN_DEFAULT_OPEN_API: "11184809";
+};
+export type SnapshotState = (typeof SnapshotState)[keyof typeof SnapshotState];
+export declare const SandboxListSortField: {
+    readonly NAME: "name";
+    readonly CPU: "cpu";
+    readonly MEMORY_GIB: "memoryGib";
+    readonly DISK_GIB: "diskGib";
+    readonly LAST_ACTIVITY_AT: "lastActivityAt";
+    readonly CREATED_AT: "createdAt";
+    readonly UNKNOWN_DEFAULT_OPEN_API: "11184809";
+};
+export type SandboxListSortField = (typeof SandboxListSortField)[keyof typeof SandboxListSortField];
+export declare const SandboxListSortDirection: {
+    readonly ASC: "asc";
+    readonly DESC: "desc";
+    readonly UNKNOWN_DEFAULT_OPEN_API: "11184809";
+};
+export type SandboxListSortDirection = (typeof SandboxListSortDirection)[keyof typeof SandboxListSortDirection];
+export declare const SandboxClass: {
+    readonly LINUX_VM: "linux-vm";
+    readonly CONTAINER: "container";
+    readonly WINDOWS: "windows";
+    readonly UNKNOWN_DEFAULT_OPEN_API: "11184809";
+};
+export type SandboxClass = (typeof SandboxClass)[keyof typeof SandboxClass];
+export declare const ListSecretsPaginatedSortEnum: {
+    readonly NAME: "name";
+    readonly CREATED_AT: "createdAt";
+    readonly UPDATED_AT: "updatedAt";
+    readonly UNKNOWN_DEFAULT_OPEN_API: "11184809";
+};
+export type ListSecretsPaginatedSortEnum = (typeof ListSecretsPaginatedSortEnum)[keyof typeof ListSecretsPaginatedSortEnum];
+export declare const ListSecretsPaginatedOrderEnum: {
+    readonly ASC: "asc";
+    readonly DESC: "desc";
+    readonly UNKNOWN_DEFAULT_OPEN_API: "11184809";
+};
+export type ListSecretsPaginatedOrderEnum = (typeof ListSecretsPaginatedOrderEnum)[keyof typeof ListSecretsPaginatedOrderEnum];
 export declare const LspLanguageId: {
     (...args: unknown[]): never;
     new (...args: unknown[]): never;

package/dist/daytona/index.js

@@ -26,6 +26,63 @@ export const SandboxState = {
     DESTROYING: "destroying",
     DESTROYED: "destroyed",
 };
+/* Daytona's other enums, re-exported by @daytona/sdk from its API client, so
+   code importing them loads. A GPU type on create is refused (Runtime runs
+   sandboxes on CPUs); the sort field and direction drive daytona.list. */
+export const GpuType = {
+    H100: "H100",
+    H200: "H200",
+    B200: "B200",
+    B300: "B300",
+    RTX_PRO_6000: "RTX-PRO-6000",
+    RTX_4090: "RTX-4090",
+    RTX_5090: "RTX-5090",
+    MI355X: "MI355X",
+    UNKNOWN_DEFAULT_OPEN_API: "11184809",
+};
+export const SnapshotState = {
+    BUILDING: "building",
+    PENDING: "pending",
+    PULLING: "pulling",
+    SNAPSHOTTING: "snapshotting",
+    ACTIVE: "active",
+    INACTIVE: "inactive",
+    ERROR: "error",
+    BUILD_FAILED: "build_failed",
+    REMOVING: "removing",
+    UNKNOWN_DEFAULT_OPEN_API: "11184809",
+};
+export const SandboxListSortField = {
+    NAME: "name",
+    CPU: "cpu",
+    MEMORY_GIB: "memoryGib",
+    DISK_GIB: "diskGib",
+    LAST_ACTIVITY_AT: "lastActivityAt",
+    CREATED_AT: "createdAt",
+    UNKNOWN_DEFAULT_OPEN_API: "11184809",
+};
+export const SandboxListSortDirection = {
+    ASC: "asc",
+    DESC: "desc",
+    UNKNOWN_DEFAULT_OPEN_API: "11184809",
+};
+export const SandboxClass = {
+    LINUX_VM: "linux-vm",
+    CONTAINER: "container",
+    WINDOWS: "windows",
+    UNKNOWN_DEFAULT_OPEN_API: "11184809",
+};
+export const ListSecretsPaginatedSortEnum = {
+    NAME: "name",
+    CREATED_AT: "createdAt",
+    UPDATED_AT: "updatedAt",
+    UNKNOWN_DEFAULT_OPEN_API: "11184809",
+};
+export const ListSecretsPaginatedOrderEnum = {
+    ASC: "asc",
+    DESC: "desc",
+    UNKNOWN_DEFAULT_OPEN_API: "11184809",
+};
 /** A stand-in for a Daytona export Runtime has no counterpart for. Importing
  * it works; using it throws NotSupportedError naming the alternative. */
 function unsupportedExport(name, alternative) {

package/dist/index.d.ts

@@ -72,7 +72,7 @@ export declare class Sandbox extends SandboxClass {
 }
 export type { RuntimeOptions as ClientOptions };
 export { identityToken, type IdentityToken } from "./identity.js";
-export { openWalletAccount, claimWalletAccount, type OpenedWalletAccount, type WalletClaim, type WalletOptions, } from "./wallet.js";
+export { openWalletAccount, claimWalletAccount, rekeyWalletAccount, type OpenedWalletAccount, type WalletClaim, type WalletRekey, type WalletOptions, } from "./wallet.js";
 export type { Topup } from "./products/billing.js";
 export type { NewKey, LimitedKey, LimitedKeyAction, MadeKey, ListedKey, KeyUsage, } from "./products/api-keys.js";
 export type { SsoConnection, SsoStatus } from "./products/sso.js";

package/dist/index.js

@@ -47,4 +47,4 @@ export class Sandbox extends SandboxClass {
     }
 }
 export { identityToken } from "./identity.js";
-export { openWalletAccount, claimWalletAccount, } from "./wallet.js";
+export { openWalletAccount, claimWalletAccount, rekeyWalletAccount, } from "./wallet.js";

package/dist/products/apps.d.ts

@@ -82,6 +82,8 @@ export type AppDeploy = {
         lastOutput: string;
     };
 });
+/** `image`: an image of this account (id, name, name:tag or name@version),
+ * ready; the version records its id. */
 export type DeployApp = ({
     image: string;
     build?: never;
@@ -93,8 +95,10 @@ export type DeployApp = ({
     /** Carry the last deploy's environment, still sealed. With env, that
      * environment with env's names set: change one value without sending the rest
      * (needs a key that may reveal the App's secrets, secrets_reveal; else 403).
-     * Only for a build a push to the production branch made, from the repository the
-     * environment came with; otherwise refused with keep_env_refused (409). */
+     * For a build: only one a push to the production branch made, from the
+     * repository the environment came with. For an image: only from a key that
+     * may reveal the App's secrets, and only an environment named with an image
+     * deploy. Otherwise refused with keep_env_refused (409). */
     keepEnv?: boolean;
     port?: number;
     healthPath?: string;

package/dist/products/browser.d.ts

@@ -37,8 +37,10 @@ export type BrowserStartOptions = {
  *
  * Inside the sandbox the same browser is at http://127.0.0.1:9222. */
 export declare function sandboxBrowser(t: Transport, sandbox: Sandbox): {
-    /** Starts Chromium and returns its CDP address. The first start in a
-     * sandbox installs Chromium, about a minute; this waits for it (up to 10
+    /** Starts Chromium and returns its CDP address. A start in a new
+     * sandbox takes about 1 to 2 seconds: Chromium comes from the host. A
+     * sandbox from a custom image that is not Ubuntu 24.04 x86_64 installs it
+     * on the first start, about a minute; this waits for it (up to 10
      * minutes, or the call's timeoutMs). Starting a running browser returns it
      * as it is. */
     start(input?: BrowserStartOptions, options?: RequestOptions): Promise<{

package/dist/products/browser.js

@@ -8,8 +8,10 @@ import { whileInstalling } from "../wait.js";
 export function sandboxBrowser(t, sandbox) {
     const base = () => `/v1/sandboxes/${encodeURIComponent(sandbox.id)}/browser`;
     return {
-        /** Starts Chromium and returns its CDP address. The first start in a
-         * sandbox installs Chromium, about a minute; this waits for it (up to 10
+        /** Starts Chromium and returns its CDP address. A start in a new
+         * sandbox takes about 1 to 2 seconds: Chromium comes from the host. A
+         * sandbox from a custom image that is not Ubuntu 24.04 x86_64 installs it
+         * on the first start, about a minute; this waits for it (up to 10
          * minutes, or the call's timeoutMs). Starting a running browser returns it
          * as it is. */
         async start(input = {}, options) {

package/dist/products/limits.d.ts

@@ -22,6 +22,24 @@ export type KeyLimits = {
      * numbers a create past one is refused `quota_exceeded` by (its
      * `details.limit` names the row). Null when they can't be read. */
     account: AccountLimit[] | null;
+    /** The account's prepaid credit and how long it lasts. */
+    credit: {
+        /** Credit left to spend now, in microdollars. */
+        availableMicros: string;
+        /** What the account spends in a day at this month's pace, or null when
+         * nothing has been spent yet. */
+        dailyPaceMicros: string | null;
+        /** Days the credit lasts at that pace, or null when nothing is being spent. */
+        runwayDays: number | null;
+        /** `state` is "low" when the runway is under this many days. */
+        lowBelowDays: number;
+        /** ok: enough. low: under `lowBelowDays` of runway. empty: none left. */
+        state: "ok" | "low" | "empty";
+        /** owner: a person pays for this account. agent: it was opened with a
+         * wallet and no person pays, so its own agent adds credit with
+         * `runtime billing topup <usd>`. */
+        addedBy: "owner" | "agent";
+    };
 };
 /** One of the account's limits, as https://withruntime.com/account/limits shows it. */
 export type AccountLimit = {

package/dist/products/observability.d.ts

@@ -35,7 +35,7 @@ export type SandboxMetrics = {
     latest: MetricPoint | null;
     points: MetricPoint[];
 };
-export type WebhookEventType = "sandbox.created" | "sandbox.running" | "sandbox.paused" | "sandbox.woken" | "sandbox.stopped" | "sandbox.start_failed" | "sandbox.wake_failed" | "sandbox.host_unreachable" | "sandbox.host_reachable" | "sandbox.recovered" | "sandbox.recovery_failed" | "sandbox.files.changed" | "sandbox.out_of_memory" | "sandbox.secret_not_applied" | "snapshot.ready" | "snapshot.failed" | "snapshot.deleted" | "volume.ready" | "volume.failed" | "volume.deleted" | "volume.recovered" | "egress_secret.created" | "egress_secret.updated" | "egress_secret.deleted" | "upstream_proxy.set" | "upstream_proxy.removed";
+export type WebhookEventType = "sandbox.created" | "sandbox.running" | "sandbox.paused" | "sandbox.woken" | "sandbox.stopped" | "sandbox.start_failed" | "sandbox.wake_failed" | "sandbox.host_unreachable" | "sandbox.host_reachable" | "sandbox.recovered" | "sandbox.recovery_failed" | "sandbox.files.changed" | "sandbox.out_of_memory" | "sandbox.secret_not_applied" | "snapshot.ready" | "snapshot.failed" | "snapshot.deleted" | "volume.ready" | "volume.failed" | "volume.deleted" | "volume.recovered" | "egress_secret.created" | "egress_secret.updated" | "egress_secret.deleted" | "upstream_proxy.set" | "upstream_proxy.removed" | "credit.low" | "credit.empty";
 /** An event as /v1/events lists it and a webhook delivers it. */
 export type RuntimeEvent = {
     id: string;

package/dist/transport.d.ts

@@ -1,5 +1,5 @@
 import { RuntimeError } from "./errors.js";
-export declare const VERSION = "0.17.1";
+export declare const VERSION = "0.17.2";
 export declare const DEFAULT_BASE_URL = "https://api.withruntime.com";
 /** Runtime's API as code inside a Runtime sandbox reaches it: the sandbox's
  * own host sends each request on to DEFAULT_BASE_URL over HTTPS. The API runs

package/dist/transport.js

@@ -1,7 +1,7 @@
 import { ConnectionError, DELIBERATE, errorFor, NOTHING_RAN, RuntimeError, WAITS_FOR_ROOM, } from "./errors.js";
 import { describeRoute, envFetch, openWebSocket } from "./proxy.js";
 import { warningText } from "./product-renames.js";
-export const VERSION = "0.17.1";
+export const VERSION = "0.17.2";
 export const DEFAULT_BASE_URL = "https://api.withruntime.com";
 /** Runtime's API as code inside a Runtime sandbox reaches it: the sandbox's
  * own host sends each request on to DEFAULT_BASE_URL over HTTPS. The API runs

package/dist/wallet.d.ts

@@ -20,6 +20,14 @@ export type WalletClaim = {
     /** What to do now, such as sending the top-up again when it has no address. */
     next?: string;
 };
+export type WalletRekey = {
+    status: "replaced";
+    orgId: string;
+    /** The new key, shown once. The old one no longer works. */
+    apiKey: string;
+    /** The id of the key this replaced, or null when there was none to revoke. */
+    revokedKeyId: string | null;
+};
 /** Opens an account and a stablecoin top-up of `usd` dollars ($10 to $500,
  *  a new account's first week).
  *  `acceptTerms` must be true: opening one means agreeing to
@@ -31,3 +39,7 @@ export declare function openWalletAccount(input: {
 /** Exchanges a paid account's claim code for its API key, once. Until the
  *  payment arrives it answers the top-up's status instead; call it again. */
 export declare function claimWalletAccount(claimCode: string, options?: WalletOptions): Promise<WalletClaim>;
+/** Replaces a lost API key with a new one, using the account's claim code. The
+ *  account's every other key stops working. Refused (409) when the first key was never claimed or
+ *  a person took the account over, and (429) past 3 times in 24 hours. */
+export declare function rekeyWalletAccount(claimCode: string, options?: WalletOptions): Promise<WalletRekey>;

package/dist/wallet.js

@@ -47,3 +47,10 @@ export async function claimWalletAccount(claimCode, options = {}) {
     const [, claim] = await post(options, "/api/wallet/claim", { claimCode });
     return claim;
 }
+/** Replaces a lost API key with a new one, using the account's claim code. The
+ *  account's every other key stops working. Refused (409) when the first key was never claimed or
+ *  a person took the account over, and (429) past 3 times in 24 hours. */
+export async function rekeyWalletAccount(claimCode, options = {}) {
+    const [, rekey] = await post(options, "/api/wallet/rekey", { claimCode });
+    return rekey;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "withruntime",
-  "version": "0.17.1",
+  "version": "0.17.2",
   "license": "Apache-2.0",
   "mcpName": "com.withruntime/runtime",
   "type": "module",