withruntime 0.21.0 → 0.33.0

package/dist/cli.js

@@ -47,27 +47,47 @@ Account
   usage export --since <UTC time> --until <UTC time>
                                                Every settlement in the range as CSV; --json, each page
   limits                                       Whether this key is read-only, and its daily spending limit
+  reservations book --sandboxes <n> --from <time> --to <time> [--vcpu <n>] [--memory <MiB>]
+            [--disk <MiB>] [--region <r>]      Hold room for a burst: confirmed or declined at once
+  reservations ls | get <id> | cancel <id>     Your bookings; cancel gives the room back
   secrets set <NAME> --host <host>... [--header <name> [--format '<text {value}>']]
             [--allow '[GET,HEAD] /path/*']...  Store a secret sandboxes use without seeing it; the
             [--only-label key=value[,k=v]]...  value is read from standard input, never an argument.
             [--only-sandbox <id>]...           --allow (paid): only these methods and paths get it.
-            [--all-sandboxes]                  --only-label: only sandboxes with those labels (each
-                                               flag one selector, any may match); --only-sandbox:
-                                               only that sandbox. A new value keeps the scope;
-                                               --all-sandboxes gives it to every sandbox again
+            [--only-app <app id>]...           --only-label: only sandboxes with those labels (each
+            [--all-sandboxes] [--env <VAR>]    flag one selector, any may match); --only-sandbox:
+                                               only that sandbox; --only-app: every copy of that App,
+                                               any version. A new value keeps the scope;
+                                               --all-sandboxes gives it to every sandbox again.
+                                               --env: the variable sandboxes see it in, if not NAME;
+                                               secrets scoped to different sandboxes may share one
+  secrets set <NAME> --keep-value [--host <host>]... [--allow '[GET] /path']...
+                                               Narrow where it goes without its value: a subset of
+                                               its hosts, only requests its rules allow now.
+                                               Anything wider needs the value
   secrets set <NAME> --jobs [--host ...]       A copy scheduled jobs put in their environment
                                                (job create --secret NAME); with --host, both
-  secrets scope <NAME> --only-label k=v... | --only-sandbox <id>... | --all-sandboxes
+  secrets scope <NAME> --only-label k=v... | --only-sandbox <id>... | --only-app <id>... | --all-sandboxes
                                                Change which sandboxes get it; no value needed
   secrets ls | get <NAME>                      Names, hosts, placeholders and jobs versions, never values
   secrets rotate <NAME>                        A new version of the jobs copy, from standard input
   secrets reveal <NAME> [--version N]          Print the jobs copy's value. The sandboxes' copy is
                                                never readable, by anyone
+  secrets share <NAME> --agent <id>... | --all | --none
+                                               Which of your keys may use the jobs copy besides the one
+                                               that stored it (ids: from 'me'); --all: every key
   secrets rm <NAME>                            Delete a secret, every copy
   keys create [--name <name>] [--read-only] [--daily-limit <usd>] [--account-wide]
                                                A new API key for CI, approved by an owner in the browser
   referrals                                    Your referral link: you both get up to $1,000, then
                                                you earn 10% of what they spend for 12 months
+  plans                                        The plans you can choose and yours: a monthly fee
+                                               that comes back as usage, spent first (beta)
+  plans choose <plan> [--yearly] | cancel | resume
+                                               Start or change a plan (a first one opens a payment
+                                               page), end it at the period's end, or keep it (beta)
+  plans add-on <id> | remove-add-on <id>       Add an add-on to the plan, or stop one (beta)
+  plans auto-upgrade on|off                    Move up a plan by itself when a limit refuses (beta)
   compare --from <provider> [--days 30]        What your usage would cost at e2b, daytona, vercel,
                                                modal, cloudflare, fly, blaxel, lambda-microvms,
                                                freestyle, prime and others, and what you save
@@ -85,6 +105,7 @@ Account
   support deny <actionId> --conversation <id>
   docs [topic]                                 Print a docs page (start, cli, api, python...)
   mcp                                          Serve MCP on stdio for agents that need it
+  fly-api [--port 4280]                        Answer Fly Machines API calls here, with Runtime sandboxes
 
 Connect
   sandboxes ssh <id|name> [-- <command...>]    Log in over SSH; \`runtime sandboxes ssh help\` for editors
@@ -111,7 +132,9 @@ Products
   volumes    Persistent disks to attach to sandboxes
   jobs       A command in a fresh sandbox, once or on a cron schedule, with its logs
   apps       Your web server from an image or a build, copies started by requests (beta)
+  functions  Your HTTP handler from an image or a build, asleep until calls come (beta)
   builds     A connected repository's commits built into what an App deploys (beta)
+  ci         CI/CD: each push and pull request of a repository checked in sandboxes (beta)
   containers One OCI image's process on its own microVM, at the sandbox rates (beta)
   agents     Claude Code, Codex, Gemini CLI or your own agent in a sandbox per session (beta)
   domains    Your own hostname for a sandbox's port, with HTTPS
@@ -144,7 +167,8 @@ const SANDBOX_HELP = `runtime sandboxes <command>
                                                               Create one; prints its id
   ls [--all] [--label k=v]... [--state running]               List (live ones unless --all)
   get <id>                                                    One sandbox, in full
-  exec <id> [--cwd /workspace] [--env K[=V]]... [--timeout <s>] [--root] -- <command...>
+  exec <id> [--cwd /workspace] [--env K[=V]]... [--timeout <s>] [--root]
+       [--trace-files <file.json>] -- <command...>
                                               Run and stream output; exits with its code.
                                               --root runs it as root: no sudo needed
   spawn <id> [--pty] [--root] -- <command...> Start in the background; prints a process id
@@ -171,6 +195,7 @@ const SANDBOX_HELP = `runtime sandboxes <command>
                                               Change its size by a restart: the whole disk stays and
                                               --disk only grows it; programs stop (snapshot it first
                                               to keep memory)
+  resize <id> --disk 20480                    Grow a running sandbox's disk live, programs running
   extend <id> <seconds>                       Move a time limit on (one with none needs nothing)
   update <id> [--name n] [--label k=v]... [--env K[=V]]... [--unset-env K]... [--idle-pause <seconds>] [--auto-wake on|off]
               [--persistent on|off] [--max-total-cost <usd>|none]
@@ -202,6 +227,11 @@ const SANDBOX_HELP = `runtime sandboxes <command>
   preview rotate <id> <port>                  Refuse every token given out for a private port so
                                               far; prints the new token
   previews <id>                               Every shared port
+  link <id> <path> [--put] [--expires 1h] [--filename n] [--max-bytes n] [--archive] [--no-wake]
+                                              A link anyone can open with no key: GET downloads the
+                                              file (--archive: a folder as .tar.gz), --put uploads to it;
+                                              --expires 60s to 7d, 1h by default
+  link revoke <id>                            End every link made for the sandbox so far
   unshare <id> <port>                         Stop sharing a port
   session create <id> [--origin <url>]... [--ttl <s>] [--name <n>]
                                               A token a web page uses for this sandbox's commands,
@@ -296,7 +326,7 @@ commandAfter) {
     return { positional, flags, rest };
 }
 /** Options given once per item, which a plural takes as a comma list. */
-const LISTS = new Set(["host", "allow", "deny", "connect"]);
+const LISTS = new Set(["host", "allow", "deny", "connect", "snapshot"]);
 /** The declared option a mistyped one most likely meant. --memory-mib for
  * --memory, --timeout-seconds for --timeout: the SDK's spelling of an option is
  * the CLI's with its unit added. */
@@ -367,9 +397,19 @@ const kit = {
     table: (rows) => table(rows),
     usage: (message) => usage(message),
     unknown: (what, word, choices) => unknown(what, word, choices),
+    /** `sandboxes exec`'s run and output, for any machine that execs. */
+    execute: (machine, command, args, out, env) => execute(machine, command, args, out, integer(args, "timeout"), env),
+    copyFile: (from, to, use, side) => copyFile(from, to, use, side),
 };
 /** The product being run, so a mistake points at its own help. */
 let product = "";
+/** `90`, `90s`, `30m`, `1h` or `7d`, in seconds. */
+function durationSeconds(text) {
+    const found = /^(\d{1,7})([smhd]?)$/.exec(text.trim());
+    if (!found)
+        throw usage(`--expires takes a number of seconds or 30m, 1h, 7d; not ${text}.`);
+    return Number(found[1]) * { "": 1, s: 1, m: 60, h: 3600, d: 86_400 }[found[2]];
+}
 function usage(message) {
     return new RuntimeError({
         message,
@@ -415,7 +455,9 @@ const COMMANDS = [
     "sso",
     "secrets",
     "keys",
+    "reservations",
     "referrals",
+    "plans",
     "compare",
     "switch",
     "ls",
@@ -423,13 +465,16 @@ const COMMANDS = [
     "support",
     "docs",
     "mcp",
+    "fly-api",
     "sandboxes",
     "snapshots",
     "images",
     "volumes",
     "jobs",
     "apps",
+    "functions",
     "builds",
+    "ci",
     "containers",
     "agents",
     "domains",
@@ -451,10 +496,13 @@ const OWN_HELP = [
     "volumes",
     "jobs",
     "apps",
+    "functions",
     "builds",
+    "ci",
     "containers",
     "agents",
     "keys",
+    "reservations",
     "webhooks",
     "webhook",
     "billing",
@@ -501,6 +549,7 @@ const SANDBOX_VERBS = [
     "run-code",
     "preview",
     "previews",
+    "link",
     "unshare",
     "session",
     "network",
@@ -624,6 +673,22 @@ function describe(info) {
         ["charged", dollars(BigInt(Math.round(Number(info.chargedMicros) || 0)))],
     ]);
 }
+/** `cp` between this machine and a sandbox or an App's copy: exactly one
+ * side is `<id>:/path`. A destination ending in / (or a local directory)
+ * takes the source's own name inside it, as cp does. */
+async function copyFile(from, to, use, side) {
+    const source = remote(from);
+    const target = remote(to);
+    const inside = (dir, path) => `${dir.replace(/\/+$/, "")}/${path.replace(/\/+$/, "").split("/").pop()}`;
+    if (source && !target) {
+        const local = await import("node:fs/promises").then((fs) => fs.stat(to).catch(() => null));
+        await (await use(source.id)).files.download(source.path, to.endsWith("/") || local?.isDirectory() ? inside(to, source.path) : to);
+    }
+    else if (!source && target)
+        await (await use(target.id)).files.upload(from, target.path.endsWith("/") ? inside(target.path, from) : target.path);
+    else
+        throw usage(`Name exactly one side as ${side}:/path.`);
+}
 /** Resolves `<id>:/path` into its parts, or undefined for a local path. */
 function remote(spec) {
     const match = /^([A-Za-z0-9][A-Za-z0-9_.-]{0,127}):(\/.*)$/.exec(spec);
@@ -694,7 +759,9 @@ export async function run(argv, env = process.env, out = defaultOut(argv)) {
         return 0;
     }
     if (command === "run") {
-        const args = parse(rest, [...CREATE_FLAGS, "keep", "root"], [...CREATE_VALUES, "cwd", "env"], `${me} sandboxes run -- python3 < invoice.py`);
+        const args = parse(rest, [...CREATE_FLAGS, "keep", "root"], 
+        // execute() reads --trace-files for run as for exec.
+        [...CREATE_VALUES, "cwd", "env", "trace-files"], `${me} sandboxes run -- python3 < invoice.py`);
         const commandLine = args.rest ?? args.positional;
         if (!commandLine.length)
             throw usage(`Give the command after --: ${me} sandboxes run -- python3 < invoice.py`);
@@ -707,8 +774,8 @@ export async function run(argv, env = process.env, out = defaultOut(argv)) {
         // SIGINT and normal completion share one delete, with an absolute
         // deadline across its retries, so cleanup cannot hang. A delete, not a
         // stop: a stopped sandbox keeps its disk, billed, and an account without
-        // credit keeps at most 10, so ten runs that only stopped refused the
-        // eleventh (no_credit_kept_limit, 0685). --keep is how to keep one.
+        // credit keeps at most 5, so five runs that only stopped refused the
+        // sixth (no_credit_kept_limit). --keep is how to keep one.
         const stop = () => (cleanup ??= (async () => {
             const signal = AbortSignal.timeout(30_000);
             try {
@@ -904,6 +971,8 @@ export async function run(argv, env = process.env, out = defaultOut(argv)) {
     }
     if (command === "keys")
         return keys(rest, env, out);
+    if (command === "reservations")
+        return reservationsCommand(rest, env, out);
     if (command === "sso") {
         const status = await (await client(env)).sso.get();
         print([
@@ -1013,6 +1082,128 @@ export async function run(argv, env = process.env, out = defaultOut(argv)) {
         ].join("\n"), r);
         return 0;
     }
+    if (command === "plans") {
+        product = "plans";
+        const args = parse(rest, ["yearly"], []);
+        const [verb, id, extra] = args.positional;
+        const runtime = await client(env);
+        const usd = (micros) => `$${(Number(BigInt(micros) / 10000n) / 100).toLocaleString("en-US", { minimumFractionDigits: 2, maximumFractionDigits: 2 })}`;
+        const day = (iso) => (iso ? iso.slice(0, 10) : "-");
+        const yearly = args.flags.get("yearly")?.at(-1) === "true";
+        if (yearly && verb !== "choose")
+            throw usage("--yearly goes with plans choose <plan>.");
+        const now = (current) => !current
+            ? "No plan: you pay for what runs from your credit."
+            : [
+                `Your plan: ${current.name} (${current.planId}), ${current.status.replace("_", " ")}, ${current.interval === "year" ? "yearly" : "monthly"}.`,
+                current.status === "trialing" && current.trialEndsAt
+                    ? `The trial ends on ${day(current.trialEndsAt)}.`
+                    : undefined,
+                current.cancelAtPeriodEnd
+                    ? `It ends on ${day(current.periodEnd)}; \`${me} plans resume\` keeps it.`
+                    : current.nextPlanId
+                        ? `It moves to ${current.nextPlanId} on ${day(current.periodEnd)}.`
+                        : `Next fee on ${day(current.periodEnd)}.`,
+                current.planUsage
+                    ? `Plan usage left: ${usd(current.planUsage.leftMicros)} of ${usd(current.planUsage.grantedMicros)}, until ${day(current.planUsage.expiresAt)}.`
+                    : undefined,
+                current.addOns.length
+                    ? `Add-ons: ${current.addOns
+                        .map((a) => `${a.id}${a.quantity > 1 ? ` x${a.quantity}` : ""}${a.endsAt ? ` (ends ${day(a.endsAt)})` : ""}`)
+                        .join(", ")}.`
+                    : undefined,
+                current.autoUpgrade
+                    ? `Auto-upgrade: on; a create a limit refuses moves you up a plan. \`${me} plans auto-upgrade off\` stops it.`
+                    : "Auto-upgrade: off.",
+            ]
+                .filter((line) => line !== undefined)
+                .join("\n");
+        if (verb === undefined || verb === "ls") {
+            if (id !== undefined)
+                throw usage(`Unexpected ${id}.`);
+            const r = await runtime.plans.list();
+            const amount = (n) => (Number.isInteger(n) ? String(n) : n.toFixed(2));
+            print([
+                now(r.current),
+                "",
+                r.plans.length
+                    ? table([
+                        ["plan", "name", "fee a month", "a year", "bonus", "trial", "support"],
+                        ...r.plans.map((p) => [
+                            p.id,
+                            p.name,
+                            p.collection === "invoice" ? "invoiced" : usd(p.feeMicros),
+                            p.yearlyFeeMicros === null ? "-" : usd(p.yearlyFeeMicros),
+                            BigInt(p.bonusMicros) > 0n ? usd(p.bonusMicros) : "-",
+                            p.trialDays > 0 ? `${p.trialDays} days` : "-",
+                            p.support,
+                        ]),
+                    ])
+                    : "No plans are offered yet.",
+                ...r.plans
+                    .filter((p) => p.included.length || p.limits.length || p.addOns.length)
+                    .flatMap((p) => [
+                    "",
+                    `${p.id}:`,
+                    ...(p.included.length
+                        ? [
+                            `  includes ${p.included.map((i) => `${amount(i.quantity)} ${i.unit} of ${i.product} ${i.meter}`).join(", ")} a month`,
+                        ]
+                        : []),
+                    ...(p.limits.length
+                        ? [
+                            `  limits ${p.limits.map((l) => `${l.limit} ${l.max === null ? "unlimited" : l.max}`).join(", ")}`,
+                        ]
+                        : []),
+                    ...(p.addOns.length
+                        ? [
+                            `  add-ons ${p.addOns.map((a) => `${a.id} (${usd(a.feeMicros)} a month)`).join(", ")}`,
+                        ]
+                        : []),
+                ]),
+                "",
+                "A plan's fee comes back as plan usage, spent first each month at the same measured prices;",
+                `usage left at the period's end ends with it. Choose one: ${me} plans choose <plan> [--yearly].`,
+            ].join("\n"), r);
+            return 0;
+        }
+        if (verb === "choose" || verb === "cancel" || verb === "resume") {
+            if (verb === "choose" && !id)
+                throw usage(`Say which plan: ${me} plans choose <plan>.`);
+            if ((verb === "choose" ? extra : id) !== undefined)
+                throw usage(`Unexpected ${verb === "choose" ? extra : id}.`);
+            const r = verb === "choose"
+                ? await runtime.plans.choose(id, yearly ? { interval: "year" } : {})
+                : verb === "cancel"
+                    ? await runtime.plans.cancel()
+                    : await runtime.plans.resume();
+            print(r.checkoutUrl
+                ? `A person chooses it and pays the first month here, then the plan starts:\n${r.checkoutUrl}`
+                : now(r.current), r);
+            return 0;
+        }
+        if (verb === "add-on" || verb === "remove-add-on") {
+            if (!id)
+                throw usage(`Say which add-on: ${me} plans ${verb} <id>.`);
+            if (extra !== undefined)
+                throw usage(`Unexpected ${extra}.`);
+            const r = verb === "add-on" ? await runtime.plans.addOn(id) : await runtime.plans.removeAddOn(id);
+            print(r.checkoutUrl
+                ? `A person confirms it here, then the add-on starts:\n${r.checkoutUrl}`
+                : now(r.current), r);
+            return 0;
+        }
+        if (verb === "auto-upgrade") {
+            if (id !== "on" && id !== "off")
+                throw usage(`Say on or off: ${me} plans auto-upgrade on|off.`);
+            if (extra !== undefined)
+                throw usage(`Unexpected ${extra}.`);
+            const r = await runtime.plans.autoUpgrade(id === "on");
+            print(now(r.current), r);
+            return 0;
+        }
+        throw usage(`Unknown plans command ${verb}: ls, choose <plan> [--yearly], cancel, resume, add-on <id>, remove-add-on <id> or auto-upgrade on|off.`);
+    }
     if (command === "compare" || command === "switch")
         return switching(command, rest, env, out);
     if (command === "mcp") {
@@ -1024,6 +1215,22 @@ export async function run(argv, env = process.env, out = defaultOut(argv)) {
         await new Promise((resolve) => process.stdout.write("", () => resolve()));
         process.exit(0);
     }
+    if (command === "fly-api") {
+        const args = parse(rest, [], ["port", "host"]);
+        const { serveMachinesApi } = await import("./fly/index.js");
+        const served = await serveMachinesApi({
+            client: await client(env),
+            port: args.flags.has("port") ? portOf(flag(args, "port"), "4280") : 4280,
+            hostname: flag(args, "host") ?? "127.0.0.1",
+        });
+        out.write(`Fly Machines API on ${served.url}: point FLY_API_HOSTNAME (fly-admin's apiUrl, fly-go's FLY_FLAPS_BASE_URL) here.\nEach request runs as this login, or as the Runtime key (rtcloud_...) in its bearer token. Ctrl-C stops it.\n`);
+        await new Promise((resolve) => {
+            process.once("SIGINT", resolve);
+            process.once("SIGTERM", resolve);
+        });
+        await served.close();
+        return 0;
+    }
     if (command === "docs") {
         const topic = rest[0] ?? "index";
         const response = await envFetch(`https://withruntime.com/docs/${topic === "index" ? "start" : encodeURIComponent(topic)}.md`, { redirect: "error" });
@@ -1128,10 +1335,18 @@ export async function run(argv, env = process.env, out = defaultOut(argv)) {
         product = "apps";
         return (await import("./apps-cli.js")).appsCommand(rest, env, out, () => client(env), kit);
     }
+    if (command === "function" || command === "functions") {
+        product = "functions";
+        return (await import("./apps-cli.js")).functionsCommand(rest, env, out, () => client(env), kit);
+    }
     if (command === "build" || command === "builds") {
         product = "builds";
         return (await import("./apps-cli.js")).buildsCommand(rest, out, () => client(env), kit);
     }
+    if (command === "ci") {
+        product = "ci";
+        return (await import("./ci-cli.js")).ciCommand(rest, out, () => client(env), kit);
+    }
     if (command === "container" || command === "containers") {
         product = "containers";
         return (await import("./apps-cli.js")).containersCommand(rest, env, out, () => client(env), kit);
@@ -1466,14 +1681,29 @@ const DROP_IN = {
         js: 'import { SandboxInstance } from "withruntime/blaxel"; // was: from "@blaxel/core"',
         py: "from withruntime.blaxel import SandboxInstance  # was: from blaxel.core import SandboxInstance",
     },
+    modal: {
+        js: 'import { ModalClient } from "withruntime/modal"; // was: from "modal"',
+        py: "from withruntime import modal  # was: import modal",
+    },
     // A Worker-only SDK: no Python. More than the import changes, so say what.
     cloudflare: {
         js: 'import { getSandbox } from "withruntime/cloudflare"; // was: from "@cloudflare/sandbox"',
         also: "Change the `export { Sandbox }` line the same way, delete the `containers` block from the Wrangler config and run `npx wrangler secret put RUNTIME_API_KEY`.",
     },
 };
-/** How to move a rival's code across, when one import does it. */
-export function dropInLines(provider) {
+/** Fly's Machines API moves by its address, not an import: the lines of the
+ * Fly guide's "From Machines". */
+const FLY_MACHINES = [
+    "Your Fly Machines code runs on Runtime with one address changed:",
+    "  npx withruntime fly-api   # answers on http://127.0.0.1:4280 as your Runtime login",
+    "  export FLY_API_HOSTNAME=http://127.0.0.1:4280     # Fly's curl examples",
+    "  export FLY_FLAPS_BASE_URL=http://127.0.0.1:4280   # fly-go, Fly's Go client",
+];
+/** How to move a rival's code across, when one import (or, for Fly's
+ * Machines, one address) does it. `from` is the name the caller gave. */
+export function dropInLines(provider, from) {
+    if (from === "fly-machines")
+        return FLY_MACHINES;
     const drop = provider && DROP_IN[provider];
     if (!drop)
         return [];
@@ -1593,13 +1823,13 @@ async function switching(command, argv, env, out) {
                 "A switch is recorded before the first top-up, and this organization has made one already.", summary);
             return 0;
         }
-        const provider = SWITCH_FROM[from];
-        if (!provider || from === "fly-machines")
-            throw unknown("provider", from, Object.keys(RIVAL_NAMES));
+        const provider = Object.hasOwn(SWITCH_FROM, from) ? SWITCH_FROM[from] : undefined;
+        if (!provider)
+            throw unknown("provider", from, Object.keys(SWITCH_FROM));
         const summary = await api.record({ provider });
         print([
             `Recorded: switching from ${RIVAL_NAMES[provider]}. ${welcomeLine(summary) ?? ""}`.trim(),
-            ...dropInLines(provider),
+            ...dropInLines(provider, from),
         ].join("\n"), summary);
         return 0;
     }
@@ -1646,7 +1876,7 @@ async function switching(command, argv, env, out) {
     const line = switchingLine(c.switching, rival);
     if (line)
         lines.push("", line);
-    const drop = dropInLines(rival);
+    const drop = dropInLines(rival, from);
     if (drop.length)
         lines.push("", ...drop);
     print(lines.join("\n"), c);
@@ -1811,9 +2041,11 @@ async function sandbox(argv, env, out) {
             };
             if (size.vcpu === undefined && size.memoryMiB === undefined && size.diskMiB === undefined)
                 throw usage(`Name a new size, e.g. ${me} sandboxes resize ${sbx.id} --memory 4096 --restart`);
-            if (!args.flags.has("restart"))
+            // A disk alone grows live, or is refused saying it needs --restart.
+            const live = size.vcpu === undefined && size.memoryMiB === undefined;
+            if (!live && !args.flags.has("restart"))
                 throw usage(`A resize restarts it: its whole disk stays and its programs stop. Add --restart to say so, or snapshot it first (${me} sandboxes snapshot ${sbx.id}) to keep its memory too.`);
-            await sbx.resize(size, { restart: true });
+            await sbx.resize(size, { restart: args.flags.has("restart") });
             print(describe(sbx.info), sbx.info);
             return 0;
         }
@@ -2007,7 +2239,7 @@ async function sandbox(argv, env, out) {
             return 0;
         }
         case "exec": {
-            const args = parse(rest, ["root"], ["cwd", "env", "timeout"], `${me} sandboxes exec <id> -- ls -la`);
+            const args = parse(rest, ["root"], ["cwd", "env", "timeout", "trace-files"], `${me} sandboxes exec <id> -- ls -la`);
             const command = args.rest ?? args.positional.slice(1);
             if (!command.length)
                 throw usage("Give the command after --: runtime sandboxes exec <id> -- ls -la");
@@ -2133,19 +2365,7 @@ async function sandbox(argv, env, out) {
         }
         case "cp": {
             const [from, to] = parse(rest, ["r", "recursive"], []).positional;
-            const source = remote(need(from, "a source"));
-            const target = remote(need(to, "a destination"));
-            // A destination ending in / (or a local directory) takes the source's
-            // own name inside it, as cp does.
-            const inside = (dir, path) => `${dir.replace(/\/+$/, "")}/${path.replace(/\/+$/, "").split("/").pop()}`;
-            if (source && !target) {
-                const local = await import("node:fs/promises").then((fs) => fs.stat(to).catch(() => null));
-                await (await use(source.id)).files.download(source.path, to.endsWith("/") || local?.isDirectory() ? inside(to, source.path) : to);
-            }
-            else if (!source && target)
-                await (await use(target.id)).files.upload(from, target.path.endsWith("/") ? inside(target.path, from) : target.path);
-            else
-                throw usage("Name exactly one side as <sandbox-id>:/path.");
+            await copyFile(need(from, "a source"), need(to, "a destination"), use, "<sandbox-id>");
             print(`Copied ${from} to ${to}.`, { from, to });
             return 0;
         }
@@ -2175,6 +2395,35 @@ async function sandbox(argv, env, out) {
                 : `${preview.urlWithToken ?? preview.url}\nPrivate: send the header x-runtime-preview-token: ${preview.token} (expires ${preview.tokenExpiresAt}).`, preview);
             return 0;
         }
+        case "link": {
+            if (rest[0] === "revoke") {
+                const sbx = await use(need(rest[1], "runtime sandboxes link revoke <id>"));
+                const revoked = await sbx.files.revokeLinks();
+                print(`Every link made for ${sbx.id} until now is refused.`, revoked);
+                return 0;
+            }
+            const args = parse(rest, ["put", "archive", "no-wake"], ["expires", "filename", "max-bytes"]);
+            const example = "runtime sandboxes link <id> /workspace/report.pdf";
+            const path = need(args.positional[1], example);
+            const sbx = await use(need(args.positional[0], example));
+            const expires = flag(args, "expires");
+            const expiresInSeconds = expires === undefined ? undefined : durationSeconds(expires);
+            const wake = has(args, "no-wake") ? false : undefined;
+            const link = has(args, "put")
+                ? await sbx.files.uploadUrl(path, {
+                    expiresInSeconds,
+                    maxBytes: integer(args, "max-bytes"),
+                    wake,
+                })
+                : await sbx.files.downloadUrl(path, {
+                    expiresInSeconds,
+                    filename: flag(args, "filename"),
+                    archive: has(args, "archive") || undefined,
+                    wake,
+                });
+            print(`${link.url}\n${link.method === "PUT" ? `Upload: curl -T <file> '${link.url}'` : `Download: curl -fLo ${JSON.stringify(link.filename ?? link.path.split("/").pop() ?? "file")}${link.archive ? ".tar.gz" : ""} '${link.url}'`} (works until ${link.expiresAt}).`, link);
+            return 0;
+        }
         case "previews": {
             const list = await (await use(rest[0])).previews.list();
             print(list.length
@@ -2371,16 +2620,17 @@ export function parseSecretRules(values) {
     }
     return [...byMethods.values()];
 }
-/** `--only-label role=hub,tier=x --only-sandbox <id>`: a sandbox whose labels
- * hold every pair of any one --only-label gets the secret, and so does each
- * --only-sandbox. `--all-sandboxes`: every sandbox again. Nothing: undefined,
- * so a replacement keeps the scope it has. */
-export function parseSecretScope(labels, sandboxes, all) {
-    if (all && (labels?.length || sandboxes?.length))
-        throw usage("--all-sandboxes gives the secret to every sandbox; leave out --only-label and --only-sandbox.");
+/** `--only-label role=hub,tier=x --only-sandbox <id> --only-app <id>`: a
+ * sandbox whose labels hold every pair of any one --only-label gets the
+ * secret, and so does each --only-sandbox and every copy of each --only-app.
+ * `--all-sandboxes`: every sandbox again. Nothing: undefined, so a
+ * replacement keeps the scope it has. */
+export function parseSecretScope(labels, sandboxes, all, apps) {
+    if (all && (labels?.length || sandboxes?.length || apps?.length))
+        throw usage("--all-sandboxes gives the secret to every sandbox; leave out --only-label, --only-sandbox and --only-app.");
     if (all)
         return {};
-    if (!labels?.length && !sandboxes?.length)
+    if (!labels?.length && !sandboxes?.length && !apps?.length)
         return undefined;
     const selectors = (labels ?? []).map((text) => {
         const selector = {};
@@ -2394,23 +2644,28 @@ export function parseSecretScope(labels, sandboxes, all) {
             throw usage(`--only-label takes key=value pairs, such as role=hub; got "${text}".`);
         return selector;
     });
+    const uuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
     for (const id of sandboxes ?? [])
-        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(id))
+        if (!uuid.test(id))
             throw usage(`--only-sandbox takes a sandbox id; "${id}" is not one.`);
+    for (const id of apps ?? [])
+        if (!uuid.test(id))
+            throw usage(`--only-app takes an App's id (GET /v1/apps lists them); "${id}" is not one.`);
+    const ids = (list) => [...new Set(list.map((id) => id.toLowerCase()))];
     return {
         ...(selectors.length ? { labels: selectors } : {}),
-        ...(sandboxes?.length
-            ? { sandboxes: [...new Set(sandboxes.map((id) => id.toLowerCase()))] }
-            : {}),
+        ...(sandboxes?.length ? { sandboxes: ids(sandboxes) } : {}),
+        ...(apps?.length ? { apps: ids(apps) } : {}),
     };
 }
 /** Who gets a secret, in a few words. */
-export const scopeText = (only) => only && (only.labels?.length || only.sandboxes?.length)
+export const scopeText = (only) => only && (only.labels?.length || only.sandboxes?.length || only.apps?.length)
     ? [
         ...(only.labels ?? []).map((selector) => Object.entries(selector)
             .map(([key, value]) => `${key}=${value}`)
             .join(",")),
         ...(only.sandboxes ?? []),
+        ...(only.apps ?? []).map((id) => `app ${id}`),
     ].join(" | ")
     : "all";
 const ruleText = (rules) => rules?.length
@@ -2422,13 +2677,25 @@ export async function secretsCommand(argv, env, out,
 /** Tests give the value here; the CLI reads standard input. */
 read = readSecret) {
     const [verb, ...rest] = argv;
-    const args = parse(rest, ["jobs", "all-sandboxes"], ["host", "header", "format", "allow", "value", "version", "only-label", "only-sandbox"]);
+    const args = parse(rest, ["jobs", "all-sandboxes", "keep-value", "all", "none"], [
+        "host",
+        "header",
+        "format",
+        "allow",
+        "value",
+        "version",
+        "only-label",
+        "only-sandbox",
+        "only-app",
+        "agent",
+        "env",
+    ]);
     const print = (human, value) => out.write(out.json ? JSON.stringify(value) : human);
     const rows = (list) => list.length
         ? table([
             ["name", "hosts", "header", "placeholder", "allow", "sandboxes", "jobs"],
             ...list.map(({ name, sandboxes: secret, jobs }) => [
-                name,
+                secret?.env ? `${name} (as ${secret.env})` : name,
                 secret ? secret.hosts.join(",") : "-",
                 secret?.header ? `${secret.header}: ${secret.format ?? "{value}"}` : "-",
                 secret ? secret.placeholder : "-",
@@ -2462,15 +2729,44 @@ read = readSecret) {
                 args.flags.has("allow") ||
                 args.flags.has("only-label") ||
                 args.flags.has("only-sandbox") ||
-                args.flags.has("all-sandboxes")))
+                args.flags.has("only-app") ||
+                args.flags.has("all-sandboxes") ||
+                args.flags.has("env")))
             throw usage(`rotate replaces the copy for jobs. ${jobsOnly}; to change the sandboxes' copy, set it again with --host.`);
+        if (verb === "set" && has(args, "keep-value")) {
+            // Narrowing needs no value: it only takes places away (secrets.narrow).
+            if (jobs ||
+                args.flags.has("value") ||
+                args.flags.has("header") ||
+                args.flags.has("format") ||
+                args.flags.has("only-label") ||
+                args.flags.has("only-sandbox") ||
+                args.flags.has("only-app") ||
+                args.flags.has("all-sandboxes") ||
+                args.flags.has("env"))
+                throw usage(`--keep-value changes only --host and --allow, and only to narrower ones. Change who gets it with \`${me} secrets scope\`; anything else needs the value.`);
+            const allow = args.flags.get("allow");
+            if (!hosts.length && !allow)
+                throw usage("With --keep-value, give the narrower --host and/or --allow it keeps.");
+            const saved = await (await client(env)).secrets.narrow(name, {
+                ...(hosts.length ? { hosts } : {}),
+                ...(allow ? { rules: parseSecretRules(allow) } : {}),
+            });
+            print([
+                `Narrowed ${saved.name}; its value is unchanged. It goes only to ${saved.hosts.join(", ")}${saved.rules?.length ? `, only in these requests: ${ruleText(saved.rules)}` : ""}.`,
+                ...(saved.enforced
+                    ? []
+                    : ["A host is catching up; running sandboxes have it within a minute."]),
+            ].join("\n"), saved);
+            return 0;
+        }
         if (!hosts.length && !jobs)
             throw usage("Give --host once for each host the value may go to, such as --host api.openai.com, and/or --jobs to let scheduled jobs use it.");
         if (args.flags.has("value"))
             throw usage('The value is read from standard input, never an argument: printf %s "$KEY" | runtime secrets set NAME --host ...');
         const value = await read();
         if (!value)
-            throw usage('The value is empty. Pipe it in: printf %s "$KEY" | runtime secrets set NAME --host ...');
+            throw usage('The value is empty. Pipe it in: printf %s "$KEY" | runtime secrets set NAME --host ...; or, to narrow its hosts and rules without it, add --keep-value.');
         const runtime = await client(env);
         if (verb === "rotate") {
             const rotated = await runtime.secrets.rotate(name, value);
@@ -2478,15 +2774,18 @@ read = readSecret) {
             return 0;
         }
         if (!hosts.length) {
+            if (args.flags.has("env"))
+                throw usage("--env names the variable sandboxes see the secret in, so it needs --host; a job names its variable on jobs create (--secret NAME=VAR).");
             const saved = await runtime.secrets.set(name, { value, jobs: true });
             print(`Stored ${name} for jobs, version ${saved.jobs.version}. Bind it: ${me} jobs create ... --secret ${name}`, saved);
             return 0;
         }
         const header = flag(args, "header");
         const format = flag(args, "format");
+        const variable = flag(args, "env");
         const allow = args.flags.get("allow");
         const rules = allow ? parseSecretRules(allow) : undefined;
-        const only = parseSecretScope(args.flags.get("only-label"), args.flags.get("only-sandbox"), has(args, "all-sandboxes"));
+        const only = parseSecretScope(args.flags.get("only-label"), args.flags.get("only-sandbox"), has(args, "all-sandboxes"), args.flags.get("only-app"));
         const saved = await runtime.secrets.set(name, {
             value,
             hosts,
@@ -2494,12 +2793,14 @@ read = readSecret) {
             ...(format ? { format } : {}),
             ...(rules ? { rules } : {}),
             ...(only ? { only } : {}),
+            ...(variable ? { env: variable } : {}),
             ...(jobs ? { jobs: true } : {}),
         });
+        const sees = `${saved.env ?? saved.name}=${saved.placeholder}`;
         print([
             saved.only
-                ? `Stored ${saved.name}. Only these sandboxes get it and see ${saved.name}=${saved.placeholder}: ${scopeText(saved.only)}.`
-                : `Stored ${saved.name}. Every sandbox sees ${saved.name}=${saved.placeholder}.`,
+                ? `Stored ${saved.name}. Only these sandboxes get it and see ${sees}: ${scopeText(saved.only)}.`
+                : `Stored ${saved.name}. Every sandbox sees ${sees}.`,
             saved.header
                 ? `Requests to ${saved.hosts.join(", ")} get ${saved.header}: ${saved.format ?? "{value}"} over HTTPS.`
                 : `Over HTTPS to ${saved.hosts.join(", ")}, the placeholder becomes the value in the Authorization header or another credential header (x-api-key, x-goog-api-key); in the URL it stays a placeholder.`,
@@ -2517,13 +2818,24 @@ read = readSecret) {
     }
     if (verb === "scope") {
         const name = need(args.positional[0], "the secret's name");
-        const only = parseSecretScope(args.flags.get("only-label"), args.flags.get("only-sandbox"), has(args, "all-sandboxes"));
+        const only = parseSecretScope(args.flags.get("only-label"), args.flags.get("only-sandbox"), has(args, "all-sandboxes"), args.flags.get("only-app"));
         if (!only)
-            throw usage("Say who gets it: --only-label key=value (once per selector), --only-sandbox <id>, or --all-sandboxes.");
+            throw usage("Say who gets it: --only-label key=value (once per selector), --only-sandbox <id>, --only-app <app id>, or --all-sandboxes.");
         const saved = await (await client(env)).secrets.scope(name, only);
         print(`${saved.name}: ${saved.only ? `only ${scopeText(saved.only)}` : "every sandbox"}.${saved.enforced ? "" : " A host is catching up; running sandboxes have it within a minute."}`, saved);
         return 0;
     }
+    if (verb === "share") {
+        const name = need(args.positional[0], "the secret's name");
+        const named = args.flags.get("agent") ?? [];
+        if (Number(named.length > 0) + Number(has(args, "all")) + Number(has(args, "none")) !== 1)
+            throw usage("Say who may use it: --agent <id> (once per agent), --all for every key of yours, or --none for only the key that stored it.");
+        const saved = await (await client(env)).secrets.share(name, has(args, "all") ? "all" : named);
+        print(`${saved.name}: ${saved.usableBy === "all"
+            ? "every key of yours"
+            : `only the key that stored it${saved.usableBy.length ? `, and ${saved.usableBy.length} named agent${saved.usableBy.length === 1 ? "" : "s"}` : ""}`}.`, saved);
+        return 0;
+    }
     if (verb === "reveal") {
         const name = need(args.positional[0], "the secret's name");
         const version = flag(args, "version");
@@ -2539,7 +2851,7 @@ read = readSecret) {
         print(`Deleted ${name}${removed.from.length > 1 ? " for sandboxes and jobs" : removed.from[0] === "jobs" ? " for jobs" : ""}.`, removed);
         return 0;
     }
-    throw usage("secrets takes set, scope, ls, get, rotate, reveal or rm. Run `runtime help`.");
+    throw usage("secrets takes set, scope, ls, get, rotate, share, reveal or rm. Run `runtime help`.");
 }
 async function readInput(source) {
     if (source !== "-")
@@ -2701,9 +3013,11 @@ const KEYS_HELP = `runtime keys <command>
       stdout, and lasts until revoked. --json prints it as JSON, still alone on
       stdout. --account-wide makes a key that sees and uses every sandbox and
       other resource in the account; without it, a key sees only what it makes.
-  create --sandbox <id,...> --actions <action,...> [--name <name>] [--daily-limit <usd>]
-      A key limited to those sandboxes (up to 20, by id) and those actions on
-      them, made by the saved key: get reads them; create starts, wakes and
+  create --sandbox <id,...> --actions <action,...> [--name <name>] [--daily-limit <usd>] [--browser]
+      A key limited to those sandboxes (up to 20, by id, whichever key made
+      them) and those actions on them, made by the saved key, or with no saved
+      key (or --browser) approved by an owner or admin in the browser, as
+      above: get reads them; create starts, wakes and
       restarts them, and needs --daily-limit when the making key has one; stop
       stops and pauses them; exec runs commands; read_file and write_file reach
       their files. It is served nothing else: no list, no other sandbox, no
@@ -2715,6 +3029,7 @@ const KEYS_HELP = `runtime keys <command>
   runtime keys create --name worker-1 --daily-limit 5
   runtime keys create --name ci --daily-limit 25 --browser | gh secret set RUNTIME_API_KEY
   runtime keys create --name watcher --sandbox sbx_id --actions get,create --daily-limit 2
+  runtime keys create --name helper --sandbox sbx_a,sbx_b --actions get,exec,read_file,write_file --browser
 
 Making, listing and revoking keys with a key needs one an owner or admin made.
 Every key is also at https://withruntime.com/account/keys.
@@ -2848,6 +3163,209 @@ async function nameSaved(env) {
             await store.save({ ...again, orgName: who.orgName });
     }
 }
+const RESERVATIONS_HELP = `runtime reservations <command>
+
+  book --sandboxes <n> --from <time> --to <time> [--vcpu <n>] [--memory <MiB>]
+       [--disk <MiB>] [--region <region>]
+      Hold room for n sandboxes of one size for a window of up to 24 hours that
+      starts within 14 days. The answer is at once: booked, or declined with
+      the most that fits and the nearest window that fits all of them (exit
+      code 1). In the window, creates are never refused for room or limits up
+      to what you booked. Sandboxes you run bill as usual; booked room none
+      of them uses costs a quarter of the memory rate, and the answer says the
+      most that comes to if none run. A time is an ISO time, now, or HH:MM on this machine's clock: today, or tomorrow when it
+      has passed. --to before --from means the next day.
+  keep --sandboxes <n> [--snapshot <id>]... [--for-key] [--vcpu <n>]
+       [--memory <MiB>] [--disk <MiB>] [--region <region>]
+      Standing room: hold room for n sandboxes from now until you cancel it,
+      for a pool that deletes a sandbox after each use and makes another.
+      With --snapshot, on the servers holding those snapshots, at their size.
+      --for-key keeps it for this key's sandboxes alone. Room none of them
+      uses costs a quarter of the memory rate every hour it is held.
+  change <id> [--sandboxes <n>] [--snapshot <id>]...
+      Change standing room in place; it moves or grows only when all of it fits.
+  ls [--limit <n>] [--before <next>]
+                          Your bookings, newest first
+  get <id>                One booking, with how much of it is in use
+  cancel <id>             Give the room back
+
+  runtime reservations book --sandboxes 300 --from 21:00 --to 23:00
+  runtime reservations book --sandboxes 50 --vcpu 4 --memory 8192 --from now --to 02:00
+  runtime reservations keep --sandboxes 40 --snapshot <id> --for-key
+
+A booking is the whole account's: a compartment's key cannot book or read one.
+`;
+/** A booking's time on the command line: an ISO time, `now`, or HH:MM on this
+ * machine's clock. HH:MM is the next such time at or after `after` (the
+ * window's start for `--to`, so an end before the start is the next day, and
+ * `now` for `--from`: today, or tomorrow once it has passed). */
+export function bookingTime(name, value, now, after = now) {
+    if (value === "now")
+        return new Date(now);
+    const clock = /^(\d{1,2}):(\d{2})$/.exec(value);
+    if (clock) {
+        const [hours, minutes] = [Number(clock[1]), Number(clock[2])];
+        if (hours > 23 || minutes > 59)
+            throw usage(`--${name} ${value} is not a time of day.`);
+        const at = new Date(after);
+        at.setHours(hours, minutes, 0, 0);
+        // A start a minute or less ago still reads as now; the server treats it so.
+        if (at.getTime() < after - (after === now ? 60_000 : 0))
+            at.setDate(at.getDate() + 1);
+        return at;
+    }
+    const at = Date.parse(value);
+    if (Number.isNaN(at))
+        throw usage(`--${name} takes an ISO time such as 2026-10-17T21:00:00Z, HH:MM or now; got ${value}.`);
+    return new Date(at);
+}
+/** The words for a booking: the line for a confirmed one, the server's message
+ * and what would fit for a declined one. */
+function bookingText(b) {
+    if (b.standing) {
+        const where = b.snapshots.length ? " on the servers holding its snapshots" : "";
+        const whose = b.forKey ? " for this key" : "";
+        if (b.status === "confirmed") {
+            const unused = b.unusedRateMicros !== "0"
+                ? ` Room none of your sandboxes uses costs $${Number(b.unusedRateMicros) / 1e6} per GiB-hour: at most $${(Math.ceil(Number(b.unusedPerHourMicros) / 10_000) / 100).toFixed(2)} an hour if none run.`
+                : "";
+            return `Holding ${b.sandboxes} sandboxes (${b.vcpu} vCPU, ${b.memoryMiB} MiB) in ${b.region}${where}${whose} until you cancel; ${b.inUse} in use. Creates up to that are never refused for room or limits.${unused} id ${b.id}`;
+        }
+        if (b.status === "cancelled")
+            return `Cancelled the standing room for ${b.sandboxes} sandboxes in ${b.region}. id ${b.id}`;
+        return [b.message, `Largest that fits: ${b.largestSandboxes} sandboxes.`].join("\n");
+    }
+    const window = `from ${new Date(b.startsAt).toLocaleString()} to ${new Date(b.endsAt).toLocaleString()}`;
+    if (b.status === "confirmed") {
+        const booked = `Booked ${b.sandboxes} sandboxes (${b.vcpu} vCPU, ${b.memoryMiB} MiB) in ${b.region} ${window}. Creates in the window are never refused for room or limits up to that.`;
+        // Bookings made before unused room had a price are never charged for it.
+        const unused = b.unusedRateMicros && b.unusedRateMicros !== "0"
+            ? ` Room none of your sandboxes uses costs $${Number(b.unusedRateMicros) / 1e6} per GiB-hour: at most $${(Math.ceil(Number(b.unusedMaxMicros) / 10_000) / 100).toFixed(2)} if none run, nothing if cancelled at least an hour before the start.`
+            : "";
+        return `${booked}${unused} id ${b.id}`;
+    }
+    if (b.status === "cancelled")
+        return `Cancelled the booking of ${b.sandboxes} sandboxes in ${b.region} ${window}. id ${b.id}`;
+    return [
+        b.message,
+        `Largest that fits: ${b.largestSandboxes} sandboxes.`,
+        b.nearestWindow
+            ? `Nearest window for all ${b.sandboxes}: from ${new Date(b.nearestWindow.startsAt).toLocaleString()} to ${new Date(b.nearestWindow.endsAt).toLocaleString()}.`
+            : `No window in the next 14 days holds all ${b.sandboxes}.`,
+    ].join("\n");
+}
+async function reservationsCommand(argv, env, out) {
+    product = "reservations";
+    const [verb, ...rest] = argv;
+    const print = (human, value) => out.write(out.json ? JSON.stringify(value) : human);
+    if (!verb || verb === "help" || verb === "--help" || verb === "-h") {
+        print(named(RESERVATIONS_HELP), { usage: named(RESERVATIONS_HELP) });
+        return 0;
+    }
+    if (verb === "book") {
+        const args = parse(rest, [], ["sandboxes", "from", "to", "vcpu", "memory", "disk", "region"]);
+        const count = integer(args, "sandboxes");
+        const from = flag(args, "from");
+        const to = flag(args, "to");
+        if (count === undefined || !from || !to || args.positional.length)
+            throw usage(`Usage: ${named("runtime reservations book --sandboxes <n> --from <time> --to <time>")}`);
+        const now = Date.now();
+        const startsAt = bookingTime("from", from, now);
+        const endsAt = bookingTime("to", to, now, startsAt.getTime());
+        const vcpu = integer(args, "vcpu");
+        const memoryMiB = integer(args, "memory");
+        const diskMiB = integer(args, "disk");
+        const region = flag(args, "region");
+        const booking = await (await client(env)).reservations.create({
+            sandboxes: count,
+            startsAt,
+            endsAt,
+            ...(vcpu !== undefined ? { vcpu } : {}),
+            ...(memoryMiB !== undefined ? { memoryMiB } : {}),
+            ...(diskMiB !== undefined ? { diskMiB } : {}),
+            ...(region ? { region } : {}),
+        });
+        print(bookingText(booking), booking);
+        return booking.status === "declined" ? 1 : 0;
+    }
+    if (verb === "keep") {
+        const args = parse(rest, ["for-key"], ["sandboxes", "snapshot", "vcpu", "memory", "disk", "region"]);
+        const count = integer(args, "sandboxes");
+        if (count === undefined || args.positional.length)
+            throw usage(`Usage: ${named("runtime reservations keep --sandboxes <n> [--snapshot <id>]...")}`);
+        const vcpu = integer(args, "vcpu");
+        const memoryMiB = integer(args, "memory");
+        const diskMiB = integer(args, "disk");
+        const region = flag(args, "region");
+        const snapshots = args.flags.get("snapshot") ?? [];
+        const booking = await (await client(env)).reservations.keep({
+            sandboxes: count,
+            ...(snapshots.length ? { snapshots } : {}),
+            ...(has(args, "for-key") ? { forKey: true } : {}),
+            ...(vcpu !== undefined ? { vcpu } : {}),
+            ...(memoryMiB !== undefined ? { memoryMiB } : {}),
+            ...(diskMiB !== undefined ? { diskMiB } : {}),
+            ...(region ? { region } : {}),
+        });
+        print(bookingText(booking), booking);
+        return booking.status === "declined" ? 1 : 0;
+    }
+    if (verb === "change") {
+        const args = parse(rest, [], ["sandboxes", "snapshot"]);
+        const id = args.positional[0];
+        const count = integer(args, "sandboxes");
+        const snapshots = args.flags.get("snapshot");
+        if (!id || args.positional.length > 1 || (count === undefined && !snapshots?.length))
+            throw usage(`Usage: ${named("runtime reservations change <id> [--sandboxes <n>] [--snapshot <id>]...")}`);
+        const booking = await (await client(env)).reservations.update(id, {
+            ...(count !== undefined ? { sandboxes: count } : {}),
+            ...(snapshots?.length ? { snapshots } : {}),
+        });
+        print(bookingText(booking), booking);
+        return 0;
+    }
+    if (verb === "ls" || verb === "list") {
+        const args = parse(rest, [], ["limit", "before"]);
+        if (args.positional.length)
+            throw usage(`Usage: ${named("runtime reservations ls")}`);
+        const limit = integer(args, "limit");
+        const cursor = flag(args, "before");
+        const page = await (await client(env)).reservations.list({
+            ...(limit !== undefined ? { limit } : {}),
+            ...(cursor ? { cursor } : {}),
+        });
+        print(page.items.length
+            ? table([
+                ["ID", "STATE", "SANDBOXES", "SIZE", "REGION", "FROM", "TO", "IN USE"],
+                ...page.items.map((b) => [
+                    b.id,
+                    b.status === "confirmed" ? (b.phase ?? "confirmed") : b.status,
+                    String(b.sandboxes),
+                    `${b.vcpu} vCPU, ${b.memoryMiB} MiB`,
+                    b.region,
+                    new Date(b.startsAt).toLocaleString(),
+                    b.endsAt ? new Date(b.endsAt).toLocaleString() : "until cancelled",
+                    b.status === "confirmed" ? `${b.inUse} (peak ${b.peakInUse})` : "-",
+                ]),
+            ]) + (page.nextCursor ? `\nMore: ${me} reservations ls --before ${page.nextCursor}` : "")
+            : "No bookings.", page);
+        return 0;
+    }
+    if (verb === "get" || verb === "cancel") {
+        const args = parse(rest, [], []);
+        const id = args.positional[0];
+        if (!id || args.positional.length > 1)
+            throw usage(`Usage: ${named(`runtime reservations ${verb} <id>`)}`);
+        const api = (await client(env)).reservations;
+        const booking = await (verb === "get" ? api.get(id) : api.cancel(id));
+        print(bookingText(booking) +
+            (verb === "get" && booking.status === "confirmed"
+                ? `\nIn use now: ${booking.inUse} (peak ${booking.peakInUse}). Estimate at most ${usdOf(booking.estimateMicros)}.`
+                : ""), booking);
+        return 0;
+    }
+    throw unknown("reservations command", verb, ["book", "keep", "change", "ls", "get", "cancel"]);
+}
 /** Dollars from integer microdollars, for a person to read: "$5.00". */
 const usdOf = (micros) => `$${(Number(BigInt(micros) / 10000n) / 100).toLocaleString("en-US", { minimumFractionDigits: 2, maximumFractionDigits: 2 })}`;
 async function keys(argv, env, out) {
@@ -2972,12 +3490,14 @@ async function keys(argv, env, out) {
     return 0;
 }
 /** `runtime keys create --sandbox ... --actions ...`: a key limited to
- * sandboxes, made by the saved key (never in the browser: the keys page
- * makes none). */
+ * sandboxes, made by the saved key, or, with no key on this machine or with
+ * --browser, asked for and approved by an owner or admin in the browser
+ * (0921): an agent whose person reaches Runtime only through a connector
+ * holds no key to make one with. */
 async function limitedKey(args, env, out, limit) {
-    for (const refused of ["read-only", "account-wide", "browser"])
+    for (const refused of ["read-only", "account-wide"])
         if (has(args, refused))
-            throw usage(`A key limited to sandboxes reaches only them and is made by this machine's key, so it takes no --${refused}.`);
+            throw usage(`A key limited to sandboxes reaches only them, so it takes no --${refused}.`);
     const list = (name) => (flag(args, name) ?? "")
         .split(",")
         .map((each) => each.trim())
@@ -2986,15 +3506,30 @@ async function limitedKey(args, env, out, limit) {
     const actions = list("actions");
     if (!sandboxes.length || !actions.length)
         throw usage(`Usage: ${named("runtime keys create --sandbox <id,...> --actions <get,create,stop,exec,read_file,write_file> [--daily-limit <usd>]")}`);
-    const { dailyLimitMicros } = await import("./keys.js");
-    const made = await (await client(env)).keys.create({
+    const { createKey, dailyLimitMicros } = await import("./keys.js");
+    const request = {
         name: flag(args, "name") ?? "Sandbox key",
         sandboxes,
         actions: actions,
         dailyLimitMicros: limit === null ? null : dailyLimitMicros(limit),
-    });
-    out.write(out.json ? JSON.stringify(made) : made.key);
-    out.error(`Created key "${made.name}", limited to ${made.sandboxes?.length === 1 ? "sandbox" : "sandboxes"} ${(made.sandboxes ?? []).join(", ")} for ${(made.actions ?? []).join(", ")}${made.dailyLimitMicros === null ? "" : `, daily limit ${usdOf(made.dailyLimitMicros)}`}, made by this machine's key. Store it now: it is not shown again.\nIt calls those sandboxes by id and nothing else; revoke it with ${named("runtime keys revoke")} ${made.keyId}.`);
+    };
+    const saved = has(args, "browser")
+        ? null
+        : env.RUNTIME_API_KEY || (await connectionStore(env).read())?.key || null;
+    const asked = saved
+        ? null
+        : await createKey({ ...request, access: "full" }, env, { notify: out.error });
+    const made = asked
+        ? { ...asked, sandboxes, actions }
+        : await new Runtime({
+            apiKey: saved,
+            baseUrl: env.RUNTIME_API_URL,
+            maxRetries: 4,
+        }).keys.create(request);
+    const { confirm, ...shown } = made;
+    out.write(out.json ? JSON.stringify(shown) : shown.key);
+    out.error(`Created key "${shown.name}", limited to ${shown.sandboxes?.length === 1 ? "sandbox" : "sandboxes"} ${(shown.sandboxes ?? []).join(", ")} for ${(shown.actions ?? []).join(", ")}${shown.dailyLimitMicros === null ? "" : `, daily limit ${usdOf(shown.dailyLimitMicros)}`}, ${saved ? "made by this machine's key" : "approved in the browser"}. Store it now: it is not shown again.\nIt calls those sandboxes by id and nothing else; revoke it at https://withruntime.com/account/keys${saved ? ` or with ${named("runtime keys revoke")} ${shown.keyId}` : ""}.`);
+    await confirm?.();
     return 0;
 }
 const SNAPSHOT_HELP = `runtime snapshots <command>
@@ -3066,13 +3601,17 @@ const IMAGE_HELP = `runtime images <command>
   build [<folder>] [--dockerfile|-f <Dockerfile>] | --from <image> | --pip <pkg>... --apt <pkg>... --npm <pkg>...
         [--name <name>] [--tag|-t name[:tag]]... [--target <stage>] [--build-arg K=V]... [--no-cache]
         [--start <command>] [--ready-port <port> | --ready-command <command>]
-        [--max-image-mib 8192] [--disk-mib <1024-32768>] [--timeout <seconds>]
+        [--max-image-mib 8192] [--disk-mib <1024-32768>] [--timeout <seconds>] [--keep <n>]
                         Build and stream the log; prints the image id when ready.
                         --disk-mib sizes the build's scratch disk, where earlier
-                        stages and the context live.
-                        A Dockerfile's folder is the context: everything its
-                        .dockerignore leaves in (100 MiB compressed at most) is
-                        sent, and a rebuild sends only what changed.
+                        stages and the context live. --keep, once it is ready,
+                        deletes the name's older versions but the newest n
+                        (this one among them) and any an App still needs.
+                        The folder is the context (without one, the
+                        Dockerfile's own folder): everything its .dockerignore
+                        leaves in (100 MiB compressed at most) is sent, and a
+                        rebuild sends only what changed. -f is read from where
+                        you run the command, as docker build reads it.
   ls                    Your images
   versions <name>       Every version of a name, newest first
   get <image>           One image: an id, name, name:tag or name@version
@@ -3112,7 +3651,42 @@ const IMAGE_BUILD_VALUES = [
     "max-image-mib",
     "disk-mib",
     "timeout",
+    "keep",
 ];
+/** `images build --keep n`: the name's versions older than its newest n,
+ * deleted once `built` is ready, so a name rebuilt on each merge does not keep
+ * every version (21 October 2026: our website's App, rebuilt from main on
+ * each merge, held 221 images on one server, 24 GiB more a day). A
+ * version an App still needs is refused by the API (image_in_use) and kept; a
+ * build still running is never touched; any other failure is said and kept,
+ * since the build itself is done. */
+async function keepNewest(api, built, keep, out) {
+    // Newest first; the build just made is never among those deleted, even when
+    // a later build of the name finished first.
+    const older = (await (await api.list({ name: built.name, limit: 100 })).toArray(Infinity))
+        .sort((a, b) => (b.version ?? 0) - (a.version ?? 0))
+        .slice(keep)
+        .filter((image) => image.id !== built.id && (image.state === "ready" || image.state === "failed"));
+    const deleted = [];
+    const kept = [];
+    for (const image of older) {
+        const named = `${image.name}@${image.version}`;
+        try {
+            await api.delete(image.id);
+            deleted.push(image.id);
+            if (!out.json)
+                out.error(`Deleted ${named}`);
+        }
+        catch (error) {
+            if (!(error instanceof RuntimeError))
+                throw error;
+            kept.push({ id: image.id, code: error.code });
+            if (!out.json)
+                out.error(`Kept ${named}: ${error.message}`);
+        }
+    }
+    return { deleted, kept };
+}
 export async function imageCommand(argv, env, out, 
 /** Tests give the registry secret here; the CLI reads standard input. */
 read = readSecret) {
@@ -3177,10 +3751,26 @@ read = readSecret) {
             let input;
             if (fromDockerfile) {
                 const context = resolve(folder ?? dirname(dockerfile));
-                const file = resolve(context, dockerfile ?? "Dockerfile");
-                const text = await readFile(file, "utf8").catch(() => {
-                    throw usage(`No Dockerfile at ${file}.`);
-                });
+                // -f is read from where the command runs, as `docker build` reads it;
+                // a path inside the folder still works, as it always has. Before, a
+                // relative -f was read inside the folder only, and without a folder
+                // twice over: apps/web/apps/web/Dockerfile (18 October 2026).
+                const files = dockerfile
+                    ? [...new Set([resolve(dockerfile), resolve(context, dockerfile)])]
+                    : [join(context, "Dockerfile")];
+                let file = files[0];
+                let text;
+                for (const candidate of files) {
+                    text = await readFile(candidate, "utf8").catch(() => undefined);
+                    if (text !== undefined) {
+                        file = candidate;
+                        break;
+                    }
+                }
+                if (text === undefined)
+                    throw usage(`No Dockerfile at ${files.join(" or ")}.`);
+                if (!out.json && file !== join(context, "Dockerfile"))
+                    out.error(`Using the Dockerfile ${file}`);
                 input = {
                     ...common,
                     dockerfile: text,
@@ -3198,10 +3788,18 @@ read = readSecret) {
                     ...common,
                     recipe: Object.fromEntries(Object.entries(recipe).filter(([, v]) => v.length)),
                 };
+            const keep = integer(args, "keep");
+            if (keep !== undefined && (keep < 1 || !name))
+                throw usage("--keep takes 1 or more, and a --name or -t for the versions it keeps.");
             const built = await api.build(input, {
                 ...(out.json ? {} : { onLog: (line) => out.error(line.text) }),
             });
-            print(built.id, built);
+            if (keep === undefined) {
+                print(built.id, built);
+                return 0;
+            }
+            const kept = await keepNewest(api, built, keep, out);
+            print(built.id, { ...built, ...kept });
             return 0;
         }
         case "ls":
@@ -3327,16 +3925,33 @@ const JOB_HELP = `runtime jobs <command>
   create <name> (--cron "<min hour day month weekday>" [--timezone Europe/Berlin] | --at <time|now>)
          [--vcpu 2] [--memory 4096] [--disk 4096] [--cpu shared|reserved] [--cpu-floor <thousandths>]
          [--timeout 1800] [--attempts 1] [--backoff 30] [--secret NAME[=ENV_NAME]]...
-         [--cwd /workspace/dir] [--max-cost <usd>] [--max-total-cost <usd>] [--region r] -- <command...>
+         [--cwd /workspace/dir] [--max-cost <usd>] [--max-total-cost <usd>] [--region r]
+         [--image <name[:tag]|name@version|id>] [--alert-webhook <https url> [--alert-secret NAME]]
+         [--alert-email] [--alert-after <runs>] [--volume <volumeId>:/data[:snapshot]]...
+         -- <command...>
                                               Schedule it; prints its id. Nothing runs until its time.
                                               --at takes an ISO time (2026-10-01T03:00:00Z) or now.
                                               The command runs as given, no shell: -- bash -lc '...'
                                               --attempts: tries per occurrence when it exits non-zero, 1 to 5.
                                               --secret: a secret stored with --jobs, in the run's
                                               environment as ENV_NAME (NAME by default)
+                                              --image: an image of yours each run starts from
+                                              --alert-*: when --alert-after runs in a row (1) fail, POST
+                                              the webhook (signed with the jobs secret NAME) or email
+                                              you; once more when a run succeeds again
+                                              --volume: a volume every run attaches, read-write one
+                                              run at a time (or :snapshot, a read-only copy), so what
+                                              one run writes there the next one reads; the job runs
+                                              in the volume's region unless --region says otherwise
+  update <id> [--image <ref> | --standard-image] [--vcpu ..] [--memory ..] [--disk ..] [--timeout ..]
+         [--attempts ..] [--backoff ..] [--secret NAME[=ENV_NAME]]... [--cwd ..] [--max-total-cost <usd>]
+         [--volume <volumeId>:/data[:snapshot]]... [--no-volumes]
+         [--alert-webhook <url> [--alert-secret NAME]] [--alert-email] [--alert-after <runs>] [--no-alert]
+         [-- <command...>]                    Change it in place: the next run uses it; history stays.
+                                              --secret and --volume replace the whole list
   ls                                          Your jobs: state, schedule and next run
   get <id>                                    One job, in full
-  runs <id>                                   Its runs: state, exit code, when
+  runs <id> [--all]                           Its newest 100 runs (--all: every one, oldest first)
   logs <runId|jobId> [-f] [--raw]             A run's output (a job id: its latest run); -f follows it;
                                               on a terminal control characters show as \\uXXXX
                                               unless --raw
@@ -3350,9 +3965,51 @@ const JOB_HELP = `runtime jobs <command>
 Examples
   runtime jobs create nightly --cron "0 3 * * *" --timezone Europe/Berlin -- python3 /workspace/report.py
   runtime jobs create once --at now -- bash -lc 'echo hello from a job'
+  runtime jobs create count --cron "0 * * * *" --volume <volumeId>:/data -- bash -lc 'date >> /data/runs'
   runtime jobs trigger <jobId> && runtime jobs logs <jobId> -f
   runtime jobs reschedule <jobId> --cron "30 4 * * 1-5" --timezone Europe/Berlin
+  runtime jobs update <jobId> --image hub:latest --alert-webhook https://example.com/hook --alert-after 3
 `;
+/** The `--alert-*` flags of create and update, as a job's alert; undefined
+ * when none is given. The secret is a jobs secret, by name. */
+async function alertFlags(args, runtime) {
+    const url = flag(args, "alert-webhook");
+    const secret = flag(args, "alert-secret");
+    const email = has(args, "alert-email");
+    const after = integer(args, "alert-after");
+    if (secret !== undefined && url === undefined)
+        throw usage("--alert-secret signs the --alert-webhook: give the webhook's URL too.");
+    if (url === undefined && !email) {
+        if (after !== undefined)
+            throw usage("--alert-after says when to alert: give --alert-webhook <url> or --alert-email.");
+        return undefined;
+    }
+    let secretId;
+    if (secret !== undefined) {
+        secretId = (await runtime.secrets.all()).find((s) => s.name === secret)?.jobs?.id;
+        if (!secretId)
+            throw usage(`${secret} has no copy for jobs. Store one: printf %s "$VALUE" | ${me} secrets set ${secret} --jobs`);
+    }
+    return {
+        ...(after !== undefined ? { afterFailures: after } : {}),
+        ...(url !== undefined ? { webhook: { url, ...(secretId ? { secretId } : {}) } } : {}),
+        ...(email ? { email: true } : {}),
+    };
+}
+/** `--secret NAME[=ENV_NAME]`, each a jobs secret by name. */
+async function secretFlags(args, runtime) {
+    const bindings = args.flags.get("secret") ?? [];
+    if (!bindings.length)
+        return undefined;
+    const known = await runtime.secrets.all();
+    return bindings.map((binding) => {
+        const [secret, env = secret] = binding.split("=", 2);
+        const found = known.find((s) => s.name === secret)?.jobs;
+        if (!found)
+            throw usage(`${secret} has no copy for jobs. Store one: printf %s "$VALUE" | ${me} secrets set ${secret} --jobs`);
+        return { name: env, secretId: found.id };
+    });
+}
 const when = (ms) => (ms == null ? "-" : new Date(ms).toISOString());
 function scheduleText(job) {
     const s = job.definition.schedule;
@@ -3382,7 +4039,7 @@ async function jobCommand(argv, env, out) {
     const api = runtime.jobs;
     switch (verb) {
         case "create": {
-            const args = parse(rest, [], [
+            const args = parse(rest, ["alert-email"], [
                 "cron",
                 "timezone",
                 "at",
@@ -3399,6 +4056,11 @@ async function jobCommand(argv, env, out) {
                 "max-cost",
                 "max-total-cost",
                 "region",
+                "image",
+                "alert-webhook",
+                "alert-secret",
+                "alert-after",
+                "volume",
             ], `${me} jobs create <name> --cron "0 3 * * *" -- python3 -c '...'`);
             const name = need(args.positional[0], "the job's name, such as nightly-report");
             if (args.positional.length > 1)
@@ -3416,19 +4078,14 @@ async function jobCommand(argv, env, out) {
             const backoff = integer(args, "backoff");
             if (backoff !== undefined && attempts === undefined)
                 throw usage("--backoff goes with --attempts: the seconds between tries.");
-            const bindings = args.flags.get("secret") ?? [];
-            let secrets;
-            if (bindings.length) {
-                const known = await runtime.secrets.all();
-                secrets = bindings.map((binding) => {
-                    const [secret, env = secret] = binding.split("=", 2);
-                    const found = known.find((s) => s.name === secret)?.jobs;
-                    if (!found)
-                        throw usage(`${secret} has no copy for jobs. Store one: printf %s "$VALUE" | ${me} secrets set ${secret} --jobs`);
-                    return { name: env, secretId: found.id };
-                });
-            }
+            const secrets = await secretFlags(args, runtime);
+            const alert = await alertFlags(args, runtime);
             const cwd = flag(args, "cwd");
+            const volumes = (args.flags.get("volume") ?? []).map(attachment);
+            // A run starts on its volumes' server, so the job is in their region
+            // unless --region says otherwise (and the API names the mismatch).
+            const region = flag(args, "region") ??
+                (volumes.length ? (await runtime.volumes.get(volumes[0].volumeId)).region : undefined);
             const job = await api.create({
                 name,
                 schedule: cron !== undefined
@@ -3448,10 +4105,11 @@ async function jobCommand(argv, env, out) {
                     ...(integer(args, "cpu-floor") !== undefined
                         ? { cpuFloorMillis: integer(args, "cpu-floor") }
                         : {}),
-                    ...(flag(args, "region") ? { region: flag(args, "region") } : {}),
+                    ...(region ? { region } : {}),
                     ...(usdMicros(args, "max-cost") !== undefined
                         ? { maxCostMicros: usdMicros(args, "max-cost") }
                         : {}),
+                    ...(volumes.length ? { volumes } : {}),
                 },
                 ...(attempts !== undefined
                     ? { retry: { maxAttempts: attempts, backoffSeconds: backoff ?? 30 } }
@@ -3460,6 +4118,8 @@ async function jobCommand(argv, env, out) {
                 ...(usdMicros(args, "max-total-cost") !== undefined
                     ? { maxTotalCostMicros: usdMicros(args, "max-total-cost") }
                     : {}),
+                ...(flag(args, "image") ? { image: flag(args, "image") } : {}),
+                ...(alert ? { alert } : {}),
             });
             if (!out.json)
                 out.error(`Scheduled ${job.name}: ${scheduleText(job)}. Next run ${when(job.nextRunAt)}. Follow it: ${me} jobs logs ${job.id} -f`);
@@ -3491,8 +4151,13 @@ async function jobCommand(argv, env, out) {
             return 0;
         }
         case "runs": {
-            const jobId = need(rest[0], "a job id");
-            const all = await (await api.runs(jobId, { limit: 100 })).toArray(Infinity);
+            // The newest hundred, newest first: a job every minute holds thousands.
+            // --all: every run, oldest first.
+            const args = parse(rest, ["all"], []);
+            const jobId = need(args.positional[0], "a job id");
+            const all = has(args, "all")
+                ? await (await api.runs(jobId, { limit: 100 })).toArray(Infinity)
+                : (await api.runs(jobId, { limit: 100, order: "newest" })).data;
             print(all.length
                 ? table([
                     ["RUN", "ATTEMPT", "STATE", "EXIT", "SCHEDULED", "STARTED", "ENDED", "REASON"],
@@ -3526,8 +4191,7 @@ async function jobCommand(argv, env, out) {
                 if (!(error instanceof NotFoundError))
                     throw error;
                 // A job's id: its latest run.
-                const runs = await (await api.runs(id, { limit: 100 })).toArray(Infinity);
-                const latest = runs.at(-1);
+                const [latest] = (await api.runs(id, { limit: 1, order: "newest" })).data;
                 if (!latest) {
                     const job = await api.get(id);
                     print(`${job.name} has not run yet. Next run ${when(job.nextRunAt)}.`, {
@@ -3585,6 +4249,86 @@ async function jobCommand(argv, env, out) {
             print(`${job.name} runs now${job.state === "paused" ? ", once; it stays paused" : ""}. Follow it: ${me} jobs logs ${job.id} -f`, job);
             return 0;
         }
+        case "update": {
+            const args = parse(rest, ["alert-email", "no-alert", "standard-image", "no-volumes"], [
+                "image",
+                "vcpu",
+                "memory",
+                "disk",
+                "cpu",
+                "cpu-floor",
+                "timeout",
+                "attempts",
+                "backoff",
+                "secret",
+                "cwd",
+                "max-cost",
+                "max-total-cost",
+                "alert-webhook",
+                "alert-secret",
+                "alert-after",
+                "volume",
+            ], `${me} jobs update <id> --image hub:latest`);
+            const id = need(args.positional[0], "a job id");
+            if (flag(args, "image") !== undefined && has(args, "standard-image"))
+                throw usage("Give --image <ref> or --standard-image, not both.");
+            const volumes = (args.flags.get("volume") ?? []).map(attachment);
+            if (volumes.length && has(args, "no-volumes"))
+                throw usage("Give --volume to set the volumes or --no-volumes to remove them, not both.");
+            const alert = await alertFlags(args, runtime);
+            if (alert && has(args, "no-alert"))
+                throw usage("Give --alert-* to set the alert or --no-alert to remove it, not both.");
+            const argv = args.rest ?? [];
+            const cwd = flag(args, "cwd");
+            if (cwd !== undefined && !argv.length)
+                throw usage(`--cwd goes with the command: ${me} jobs update ${id} --cwd ${cwd} -- <command...>`);
+            const compute = {
+                ...(integer(args, "vcpu") !== undefined ? { vcpu: integer(args, "vcpu") } : {}),
+                ...(integer(args, "memory") !== undefined ? { memoryMiB: integer(args, "memory") } : {}),
+                ...(integer(args, "disk") !== undefined ? { diskMiB: integer(args, "disk") } : {}),
+                ...(flag(args, "cpu")
+                    ? { cpuMode: oneOf(args, "cpu", ["shared", "reserved"]) }
+                    : {}),
+                ...(integer(args, "cpu-floor") !== undefined
+                    ? { cpuFloorMillis: integer(args, "cpu-floor") }
+                    : {}),
+                ...(usdMicros(args, "max-cost") !== undefined
+                    ? { maxCostMicros: usdMicros(args, "max-cost") }
+                    : {}),
+                ...(volumes.length ? { volumes } : {}),
+                ...(has(args, "no-volumes") ? { volumes: [] } : {}),
+            };
+            const retry = {
+                ...(integer(args, "attempts") !== undefined
+                    ? { maxAttempts: integer(args, "attempts") }
+                    : {}),
+                ...(integer(args, "backoff") !== undefined
+                    ? { backoffSeconds: integer(args, "backoff") }
+                    : {}),
+            };
+            const secrets = await secretFlags(args, runtime);
+            const changes = {
+                ...(argv.length ? { command: cwd ? { argv, cwd } : argv } : {}),
+                ...(flag(args, "image") ? { image: flag(args, "image") } : {}),
+                ...(has(args, "standard-image") ? { image: null } : {}),
+                ...(Object.keys(compute).length ? { compute } : {}),
+                ...(Object.keys(retry).length ? { retry } : {}),
+                ...(integer(args, "timeout") !== undefined
+                    ? { timeoutSeconds: integer(args, "timeout") }
+                    : {}),
+                ...(secrets ? { secrets } : {}),
+                ...(usdMicros(args, "max-total-cost") !== undefined
+                    ? { maxTotalCostMicros: usdMicros(args, "max-total-cost") }
+                    : {}),
+                ...(alert ? { alert } : {}),
+                ...(has(args, "no-alert") ? { alert: null } : {}),
+            };
+            if (!Object.keys(changes).length)
+                throw usage(`Say what changes: ${me} jobs update ${id} --image hub:latest, --timeout 600, --alert-email, or -- <new command...>`);
+            const job = await api.update(id, changes);
+            print(`${job.name} updated (version ${job.version}); its next run uses it.${job.alert ? ` Alerts after ${job.alert.afterFailures} failing run${job.alert.afterFailures === 1 ? "" : "s"}.` : ""}`, job);
+            return 0;
+        }
         case "reschedule": {
             const args = parse(rest, [], ["cron", "timezone", "at"], `${me} jobs reschedule <id> --cron "0 3 * * *" [--timezone Europe/Berlin]`);
             const id = need(args.positional[0], "a job id");
@@ -3611,6 +4355,7 @@ async function jobCommand(argv, env, out) {
         "resume",
         "trigger",
         "reschedule",
+        "update",
         "cancel",
     ]);
 }
@@ -3991,6 +4736,11 @@ async function execute(sbx, command, args, out, timeout, env,
 /** `run` stops its whole sandbox on Ctrl-C, so it handles the signal itself. */
 ownInterrupt = true) {
     const target = command.length === 1 ? command[0] : command;
+    // Only `sandboxes exec` takes --trace-files; `run`, `apps exec` and the
+    // drop-in machines' exec share this runner without it.
+    const traced = !(args.flags instanceof Flags) || args.flags.known.has("trace-files")
+        ? flag(args, "trace-files")
+        : undefined;
     const extras = await import("./cli-extras.js");
     const stdin = await extras.pipedStdin();
     const options = {
@@ -3999,6 +4749,7 @@ ownInterrupt = true) {
         ...(args.flags.has("env") ? { env: envPairs(args, env) } : {}),
         ...(has(args, "root") ? { user: "root" } : {}),
         ...(timeout !== undefined ? { timeoutMs: timeout * 1000 } : {}),
+        ...(traced ? { traceFiles: true } : {}),
     };
     // Ctrl-C stops the command in the sandbox too, and says so; without this
     // the CLI exited and the command ran on unseen.
@@ -4026,6 +4777,9 @@ ownInterrupt = true) {
     finally {
         process.off("SIGINT", onInterrupt);
     }
+    // What it read and wrote, as JSON, for a cache keyed by what a test read.
+    if (traced)
+        await writeFile(traced, `${JSON.stringify(result.files ?? null)}\n`);
     if (out.json)
         out.write(JSON.stringify(result));
     // Here the output streamed, whose timeout is 24 hours unless one was given
@@ -4094,11 +4848,20 @@ export function describeError(error, json) {
                     requestId: error.requestId,
                     idempotencyKey: error.idempotencyKey,
                     details: error.details,
+                    retryable: error.retryable,
+                    ...(error.retryAfterMs !== undefined ? { retryAfterMs: error.retryAfterMs } : {}),
                 },
             });
         // In the command line's words: the option, not the request's field.
         const { message, hint } = cliRefusal(error);
-        return `Error [${error.code}]: ${message}${hint ? `\nHint: ${hint}` : ""}${error.requestId
+        // Said only when the same command, run again, may work: and when, if the
+        // API named it (a daily cap's hour).
+        const again = error.retryable
+            ? `\nRetryable: yes${error.retryAfterMs !== undefined
+                ? `, after ${Math.max(1, Math.ceil(error.retryAfterMs / 1000))} s`
+                : ""}`
+            : "";
+        return `Error [${error.code}]: ${message}${hint ? `\nHint: ${hint}` : ""}${again}${error.requestId
             ? // A refusal of what was sent is the caller's to fix; only a failure
                 // of ours is worth a report.
                 error.status >= 400 && error.status < 500