withruntime 0.34.0 → 0.35.0

package/dist/cli-words.js

@@ -21,6 +21,7 @@ const OPTIONS = {
     onLeaseEnd: { flag: "--on-timeout" },
     idlePauseSeconds: { flag: "--idle-pause" },
     autoWake: { flag: "--no-auto-wake / --auto-wake" },
+    user: { flag: "--user" },
     persistent: { flag: "--persistent" },
     funding: { flag: "--trial / --paid" },
     image: { flag: "--image" },

package/dist/cli.js

@@ -168,6 +168,8 @@ const SANDBOX_HELP = `runtime sandboxes <command>
          [--image <name:tag|imageId> | --snapshot <snapshotId>] [--volume <volumeId>:/data[:snapshot]]...
          [--spread-from <id>]... [--secret NAME]... [--no-secrets]
          [--idle-pause <seconds>] [--no-auto-wake] [--persistent] [--get-or-create]
+         [--user root|sandbox]                                --user root: its commands, processes and
+                                                              shells run as root unless one says otherwise
                                                               Create one; prints its id
   ls [--all] [--label k=v]... [--state running]               List (live ones unless --all)
   get <id>                                                    One sandbox, in full
@@ -202,7 +204,7 @@ const SANDBOX_HELP = `runtime sandboxes <command>
   resize <id> --disk 20480                    Grow a running sandbox's disk live, programs running
   extend <id> <seconds>                       Move a time limit on (one with none needs nothing)
   update <id> [--name n] [--label k=v]... [--env K[=V]]... [--unset-env K]... [--idle-pause <seconds>] [--auto-wake on|off]
-              [--persistent on|off] [--max-total-cost <usd>|none]
+              [--persistent on|off] [--max-total-cost <usd>|none] [--user root|sandbox]
               [--timeout <60-86400 from now>|0] [--on-timeout pause|stop|delete]
                                               Change its settings; persistent keeps it running until stopped;
                                               --env K alone sends K's value from your own environment,
@@ -651,6 +653,7 @@ function describe(info) {
         ...(info.endedAt ? [["ended", info.endedAt]] : []),
         ...(info.stopReason ? [["stop reason", info.stopReason]] : []),
         ["auto wake", info.autoWake === false ? "off" : "on"],
+        ["runs as", info.user === "root" ? "root" : "sandbox user"],
         [
             "idle pause",
             info.idlePauseSeconds
@@ -2218,6 +2221,7 @@ async function sandbox(argv, env, out) {
                 "max-total-cost",
                 "timeout",
                 "on-timeout",
+                "user",
             ]);
             const sbx = await get(args.positional[0]);
             const onOff = (name) => {
@@ -2247,6 +2251,7 @@ async function sandbox(argv, env, out) {
                     : {}),
                 ...(onOff("auto-wake") === undefined ? {} : { autoWake: onOff("auto-wake") }),
                 ...(onOff("persistent") === undefined ? {} : { persistent: onOff("persistent") }),
+                ...(flag(args, "user") ? { user: oneOf(args, "user", ["sandbox", "root"]) } : {}),
                 ...(cost === undefined
                     ? {}
                     : {
@@ -2258,7 +2263,7 @@ async function sandbox(argv, env, out) {
                 ...(onTimeout === undefined ? {} : { onTimeout }),
             };
             if (!Object.keys(settings).length)
-                throw usage("Say what to change: --name, --label, --env, --unset-env, --idle-pause, --auto-wake, --persistent, --max-total-cost, --timeout or --on-timeout.");
+                throw usage("Say what to change: --name, --label, --env, --unset-env, --idle-pause, --auto-wake, --persistent, --user, --max-total-cost, --timeout or --on-timeout.");
             await sbx.update(settings);
             print(describe(sbx.info), sbx.info);
             return 0;
@@ -4708,6 +4713,7 @@ const CREATE_VALUES = [
     "secret",
     "volume",
     "env",
+    "user",
 ];
 /** Dollars from the command line as integer microdollars: 25, 2.50 or 0.000001. */
 function usdMicros(args, name) {
@@ -4804,6 +4810,7 @@ function createInput(args, env) {
             ? { idlePauseSeconds: integer(args, "idle-pause") }
             : {}),
         ...(has(args, "no-auto-wake") ? { autoWake: false } : {}),
+        ...(flag(args, "user") ? { user: oneOf(args, "user", ["sandbox", "root"]) } : {}),
         ...(has(args, "persistent") ? { persistent: true } : {}),
         ...(has(args, "get-or-create") ? { getOrCreate: true } : {}),
         ...(has(args, "trial")

package/dist/functions/index.d.ts

@@ -0,0 +1,10 @@
+/** `withruntime/functions`: Functions alone. An HTTP handler on copies that
+ * start when calls come and sleep a second after the last. In a private beta.
+ *
+ *   import { functions } from "withruntime/functions";
+ *   const client = functions(); // RUNTIME_API_KEY, or this machine's saved connection
+ */
+import { Runtime, type RuntimeOptions } from "../client.js";
+export type * from "../products/functions.js";
+/** `runtime.functions` of a client made with `options`. */
+export declare function functions(options?: RuntimeOptions): Runtime["functions"];

package/dist/functions/index.js

@@ -0,0 +1,11 @@
+/** `withruntime/functions`: Functions alone. An HTTP handler on copies that
+ * start when calls come and sleep a second after the last. In a private beta.
+ *
+ *   import { functions } from "withruntime/functions";
+ *   const client = functions(); // RUNTIME_API_KEY, or this machine's saved connection
+ */
+import { Runtime } from "../client.js";
+/** `runtime.functions` of a client made with `options`. */
+export function functions(options) {
+    return new Runtime(options).functions;
+}

package/dist/products/functions.d.ts

@@ -0,0 +1,2 @@
+export { functions } from "./apps.js";
+export type { CreateFunction, RuntimeFunction, UpdateFunction } from "./apps.js";

package/dist/products/functions.js

@@ -0,0 +1,5 @@
+/* runtime.functions: Apps whose copies all sleep when idle, on the same
+ * calls under /v1/functions (apps.ts holds both kinds). A private beta
+ * (PRODUCT_BETAS): an account outside it is refused with product_in_beta
+ * until Functions launches. */
+export { functions } from "./apps.js";

package/dist/products/index.d.ts

@@ -30,6 +30,7 @@ import { containers } from "./containers.js";
 import { browsers } from "./browsers.js";
 import { desktops } from "./desktops.js";
 import { apps } from "./apps.js";
+import { functions } from "./functions.js";
 export declare const clientExtensions: {
     images: typeof images;
     volumes: typeof volumes;
@@ -59,6 +60,7 @@ export declare const clientExtensions: {
     browsers: typeof browsers;
     desktops: typeof desktops;
     apps: typeof apps;
+    functions: typeof functions;
 };
 export declare const sandboxExtensions: {
     interpreter: typeof sandboxInterpreter;

package/dist/products/index.js

@@ -32,6 +32,7 @@ import { desktops } from "./desktops.js";
 // imports of files the hub loads, so importing them runs nothing in the hub
 // (agents/hub-sdk-products.test.ts parses every product file the hub loads).
 import { apps } from "./apps.js";
+import { functions } from "./functions.js";
 /* HOW A LANE ADDS A PRODUCT TO THE SDK
  *
  * 1. Write src/products/<name>.ts exporting a factory:
@@ -81,6 +82,8 @@ export const clientExtensions = {
     // A private beta (PRODUCT_BETAS): an account outside it is refused with
     // product_in_beta until Apps launches.
     apps,
+    // The same until Functions launches.
+    functions,
 };
 export const sandboxExtensions = {
     interpreter: sandboxInterpreter,

package/dist/transport.d.ts

@@ -1,5 +1,5 @@
 import { RuntimeError } from "./errors.js";
-export declare const VERSION = "0.34.0";
+export declare const VERSION = "0.35.0";
 export declare const DEFAULT_BASE_URL = "https://api.withruntime.com";
 /** Runtime's API as code inside a Runtime sandbox reaches it: the sandbox's
  * own host sends each request on to DEFAULT_BASE_URL over HTTPS. The API runs

package/dist/transport.js

@@ -1,7 +1,7 @@
 import { ConnectionError, DELIBERATE, errorFor, NOTHING_RAN, RuntimeError, WAITS_FOR_ROOM, } from "./errors.js";
 import { describeRoute, envFetch, openWebSocket, untrustedCertificate } from "./proxy.js";
 import { warningText } from "./product-renames.js";
-export const VERSION = "0.34.0";
+export const VERSION = "0.35.0";
 export const DEFAULT_BASE_URL = "https://api.withruntime.com";
 /** Runtime's API as code inside a Runtime sandbox reaches it: the sandbox's
  * own host sends each request on to DEFAULT_BASE_URL over HTTPS. The API runs

package/dist/types.d.ts

@@ -28,6 +28,9 @@ export type SandboxInfo = {
     idlePauseUnusedOnly?: boolean;
     /** A request (exec, files, terminal, a visit to a shared port) wakes it when paused. */
     autoWake?: boolean;
+    /** Who its commands, processes and terminals run as when one names no
+     * user: "sandbox" (uid 1000) or "root". Absent from APIs before 25 October 2026. */
+    user?: "sandbox" | "root";
     /** Runs until stopped while credit lasts, never paused for idleness or a
      * time limit, and its disk is kept after a stop. */
     persistent?: boolean;
@@ -139,6 +142,11 @@ export type CreateSandbox = {
     idlePauseSeconds?: number;
     /** A request to a paused sandbox wakes it. Default true. */
     autoWake?: boolean;
+    /** "root": its commands, processes and terminals run as root, through the
+     * sandbox's passwordless sudo, unless one says `user: "sandbox"`. Default
+     * "sandbox"; a sandbox made from a snapshot runs as its source did. Files
+     * written through `files` stay the sandbox user's. */
+    user?: "sandbox" | "root";
     /** Keep it running until you stop it, while credit lasts, with no idle
      * pause unless idlePauseSeconds asks for one. Its disk is billed as any
      * sandbox's, and kept after a stop, for restart(), as any sandbox's is.
@@ -224,9 +232,10 @@ export type CommandResult = {
 };
 export type ExecOptions = {
     cwd?: string;
-    /** Who runs it: "sandbox" (the default, uid 1000, HOME=/workspace) or
-     * "root", through the sandbox's passwordless sudo with the same
-     * environment and PATH and HOME=/root: no need to prefix it with sudo. */
+    /** Who runs it: "sandbox" (uid 1000, HOME=/workspace) or "root", through
+     * the sandbox's passwordless sudo with the same environment and PATH and
+     * HOME=/root: no need to prefix it with sudo. Default: the sandbox's own
+     * `user`, the sandbox user unless it was made with "root". */
     user?: "sandbox" | "root";
     /** Merged over the sandbox's environment. Put secrets here, never in the command. */
     env?: Record<string, string>;
@@ -487,6 +496,9 @@ export type SandboxSettings = {
     env?: Record<string, string | null>;
     /** A request to a paused sandbox wakes it. */
     autoWake?: boolean;
+    /** Who later commands, processes and terminals run as when one names no
+     * user; running ones keep theirs. */
+    user?: "sandbox" | "root";
     /** Pause after this many seconds with no activity, counted from now; 0
      * never, otherwise 60 to 86400 (a shorter time is raised to 60). */
     idlePauseSeconds?: number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "withruntime",
-  "version": "0.34.0",
+  "version": "0.35.0",
   "license": "Apache-2.0",
   "mcpName": "com.withruntime/runtime",
   "type": "module",
@@ -91,6 +91,11 @@
       "import": "./dist/apps/index.js",
       "default": "./dist/apps/index.js"
     },
+    "./functions": {
+      "types": "./dist/functions/index.d.ts",
+      "import": "./dist/functions/index.js",
+      "default": "./dist/functions/index.js"
+    },
     "./e2b": {
       "types": "./dist/e2b/index.d.ts",
       "import": "./dist/e2b/index.js",