withruntime 0.8.4 → 0.10.0

package/VERCEL.md

@@ -16,9 +16,9 @@ from withruntime.vercel import sandbox  # was: from vercel import sandbox
 from withruntime.vercel.sandbox import sync as sandbox  # was: from vercel.sandbox import sync as sandbox
 ```
 
-The mapping was written against `@vercel/sandbox` 3.5.0 and `vercel-sandbox`
+The mapping was written against `@vercel/sandbox` 3.5.1 and `vercel-sandbox`
 0.7.0 on PyPI (the `vercel.sandbox` module of `vercel` 0.11.4), checked
-23 September 2026.
+30 September 2026.
 
 ## Keys
 
@@ -73,7 +73,7 @@ are ignored.
 | `domain(port)`, `update({ ports })`                                   | The public preview of that port; ports added or removed.                                                                                    |
 | `stop()`, `delete()`, `extendTimeout(ms)`                             | `pause` (persistent) or `stop`; `stop`; `extend`.                                                                                           |
 | `update({ timeout, networkPolicy, snapshotExpiration })`              | `extend` (later only), network rules, retention.                                                                                            |
-| `snapshot()`, `Snapshot.get`, `Snapshot.list`, `snapshot.delete()`    | A Runtime snapshot (files, memory and processes), then the sandbox stops, as in Vercel; `snapshots.get`, `list`, `delete`.                  |
+| `snapshot()`, `Snapshot.get`, `Snapshot.list`, `snapshot.delete()`    | A verified disk-only capture, then the source stops; restored snapshots start fresh processes; `snapshots.get`, `list`, `delete`.           |
 | Error classes                                                         | `APIError` with a `response` whose status is Runtime's and `json` of `{ error: { code, message } }`; also `code`, `hint` and `requestId`.   |
 | Python: `create_sandbox`, `run_process`, `create_process`, `box.fs`   | The same mapping; operations await or work as context managers, which stop and by default destroy the sandbox; readers iterate by line.     |
 
@@ -98,6 +98,16 @@ Each of these throws `NotSupportedError` before anything happens. Its
 | `Drive`, `SandboxUser`, `defineSandboxProxy`               | Runtime volumes; `sudo`; `sandbox.withruntime.previews`.                                                    |
 | Listing by time, prefix or cursor (JavaScript)             | List them all and filter the result yourself. (Python applies a name prefix and newest-first order itself.) |
 
+Explicit snapshots require the released native disk-capture capability; a server
+that does not confirm disk-only capture is refused. If capture succeeds but the
+source cannot finish stopping, the error retains `snapshotId` and
+`sourceSandboxId` so the saved filesystem remains recoverable. JavaScript exposes
+them in `error.json.error.details` for API errors and directly on other errors;
+Python exposes them in `error.data` for API errors and directly on other errors.
+`snapshot_source_stop_timeout` means the source is still stopping after its wait;
+a failed stop request keeps its original error code. These contracts remain
+partial; controlled package comparisons do not prove hosted restoration.
+
 Some differences are not refusals:
 
 - A persistent sandbox keeps its memory and processes as well as its files

package/compatibility-lock.json

@@ -0,0 +1,357 @@
+{
+  "schemaVersion": 1,
+  "checkedAt": "2026-09-29",
+  "providers": [
+    {
+      "id": "e2b",
+      "status": "partial",
+      "upstreams": [
+        {
+          "registry": "npm",
+          "name": "e2b",
+          "version": "2.51.0",
+          "artifacts": {
+            "2.51.0": "sha512-P+50lx1nOYpgCFyE1xuz6JVN/TqJivMUiH7v+RW0CUSfb4+NCu8IkC5KruT2sNPgp6aexddQQ77+OZKGpZZJ+Q=="
+          },
+          "latestReview": {
+            "version": "2.52.0",
+            "artifacts": {
+              "2.52.0": "sha512-TmUZlAvQq8BbguodpA+BBdawR/x5uILMQtHcLkdaLUqevsDjDdh46IYYU8ZRYKsQ4OhWr4xhsFIPSg1kgf+O0w=="
+            },
+            "reviewedAt": "2026-10-01",
+            "disposition": "held-for-sdk-qualification",
+            "evidence": {
+              "sourceUrls": [
+                "https://registry.npmjs.org/e2b/2.52.0",
+                "https://registry.npmjs.org/e2b/-/e2b-2.52.0.tgz"
+              ],
+              "artifactSha256": {
+                "2.52.0": "facbc53fa42757d94aa2be3433d779c7ab6b0afc780d4821a12a6d6815848c8e"
+              },
+              "changes": [
+                "dist/index.d.ts/index.mjs: HTTP1.1/2 selection, E2B_HTTP_VERSION, retry502/503 and connection failures, fork integer count 1..20, Dockerignore matching/precedence and invalid-pattern behavior changed. package.json changes protobuf/chalk/openapi-fetch floors. Installed transport/retry/fork/filesystem consumers not qualified; supported 2.51.0 unchanged.",
+                "Source digest dist/index.d.ts: 304acc9c8bbec8aeb69296719eb34986f987256e758aa7e220b551b9a7dcbd30 -> fa2e6eb09b6c6d3489056ee948248812e8879a23b6865561e5152f243bf6ca40.",
+                "Source digest dist/index.mjs: b75feeedb6543fee003533270b0f07fc1a9eb40315dfc0c44510e2dd8854b896 -> 343a41249ea8d48fe0a70fc986066d3ef97b6da2b71267211d21f77036efafea.",
+                "Source digest package.json: a2c759c4681b91b824aea7919f4661e498ec0e0b68d6cc333f4967f7b2b63f7b -> c5b699f80831b621178c83ea477d096bc1167e0083b6ba7a51d17f564207255f."
+              ]
+            }
+          }
+        },
+        {
+          "registry": "npm",
+          "name": "@e2b/code-interpreter",
+          "version": "2.8.0",
+          "artifacts": {
+            "2.8.0": "sha512-tWFi8IJYV3V6jOVfQ8V5PkzockrYP+ndWB/jKiJvRATTmNAy8+S/7S+iSh2Lb2Hrul869G2adRiN2xW8peJTig=="
+          }
+        },
+        {
+          "registry": "pypi",
+          "name": "e2b",
+          "version": "2.51.0",
+          "artifacts": {
+            "e2b-2.51.0-py3-none-any.whl": "sha256-951d0fd069f017e760b338a435bdb83589b4bfb9574fc5203a7f777e9cb994c2",
+            "e2b-2.51.0.tar.gz": "sha256-902ee861b30c8ec3e46e7f84db8c993f30695872c7b4490efaad1627ec6e08ba"
+          },
+          "latestReview": {
+            "version": "2.52.0",
+            "artifacts": {
+              "e2b-2.52.0-py3-none-any.whl": "sha256-6f4b5084b09986db43e99c7405bae6b14dc56984a69bbb1dc0687f1c71515cfb",
+              "e2b-2.52.0.tar.gz": "sha256-58c0042609513799341d4c1837e2581a4a5e73d3d62c9f1c57495c5e23eedee2"
+            },
+            "reviewedAt": "2026-10-01",
+            "disposition": "held-for-sdk-qualification",
+            "evidence": {
+              "sourceUrls": [
+                "https://pypi.org/pypi/e2b/2.52.0/json",
+                "https://files.pythonhosted.org/packages/53/71/1a01b7e4486b5962eaade7dba7026876a1b4569e49b464e82912d8801e38/e2b-2.52.0-py3-none-any.whl",
+                "https://files.pythonhosted.org/packages/3c/c4/560e7de54cece3573086f09d304e595729964aa18593b437125d9f8bd926/e2b-2.52.0.tar.gz"
+              ],
+              "artifactSha256": {
+                "e2b-2.52.0-py3-none-any.whl": "6f4b5084b09986db43e99c7405bae6b14dc56984a69bbb1dc0687f1c71515cfb",
+                "e2b-2.52.0.tar.gz": "58c0042609513799341d4c1837e2581a4a5e73d3d62c9f1c57495c5e23eedee2"
+              },
+              "changes": [
+                "e2b/connection_config.py/retry.py: HTTP1.1/2 selection and E2B_HTTP_VERSION; retries 502/503 and eligible network failures, excluding unsafe resource-creating replay. e2b/api clients replace pool shards with bounded least-in-flight shared pools, defaults 100 streams / 200 connections.",
+                "Fork count validation1..20 and template/dockerignore/fileIgnorePatterns matching/precedence changed. Installed sync/async transport/cleanup/retry/fork/filesystem consumers not qualified; supported 2.51.0 unchanged.",
+                "Source digest e2b/api/__init__.py: 00b09a79f25d01594c4b1ec5f14d3d0cc3ccc319958a2e1ca34ba91cdbf114b3 -> 640233a615a3c68752a2f2cecb1af919aebfc5e895bd4f09003aee61da38c7c0.",
+                "Source digest e2b/connection_config.py: 284aa3e7cc319432ca9147ddb7d9ab8cd315cf35283da7699eebe877375758a4 -> c165948133a2f174b5a490afa9502301d038d8097f91203b2c2174f451accf83.",
+                "Source digest e2b/retry.py: aa54aa8873fd44027a9c3ff790594d4583d2f415c0d3bd858566d2f0e15fa71f -> 40b1d7ea0732a721d77b31483e54f9f190e444cb798c54fc141856f52685e208.",
+                "Source digest e2b/template/dockerignore.py: None -> cba4ff9d7efa5ae987c4c0114770c114b5aefe2c18847e55d2bd811b9a1a088c."
+              ]
+            }
+          }
+        },
+        {
+          "registry": "pypi",
+          "name": "e2b-code-interpreter",
+          "version": "2.10.0",
+          "artifacts": {
+            "e2b_code_interpreter-2.10.0-py3-none-any.whl": "sha256-6ba776122086261875bc6033ef2dc42ac6b6e22cefdffdfd19d30e93bb09786f",
+            "e2b_code_interpreter-2.10.0.tar.gz": "sha256-57fb7f9b9ad99ebbdf407619786fdb84e31537c2fbc8358c394aa0f0cbc1af28"
+          },
+          "latestReview": {
+            "version": "2.10.1",
+            "artifacts": {
+              "e2b_code_interpreter-2.10.1-py3-none-any.whl": "sha256-f4c9732699ee4b1c289acedac8bff66fccecc6ab374bf0b4ef88d5ad063e333d",
+              "e2b_code_interpreter-2.10.1.tar.gz": "sha256-94e504667788c6cbb175e5deaf1f68e8df474b670343fe1d72e2496b49d5a666"
+            },
+            "reviewedAt": "2026-10-01",
+            "disposition": "held-for-sdk-qualification",
+            "evidence": {
+              "sourceUrls": [
+                "https://pypi.org/pypi/e2b-code-interpreter/2.10.1/json",
+                "https://files.pythonhosted.org/packages/27/1f/0f9a4c4d9669afd5389e91bd96099a8eb1d1a32f9c67871cc56c4a8556b7/e2b_code_interpreter-2.10.1-py3-none-any.whl",
+                "https://files.pythonhosted.org/packages/38/e6/b01e60524e7e4d2e8ce634b3be6d00fe09c606f3d24a448b4a5c087d3bda/e2b_code_interpreter-2.10.1.tar.gz"
+              ],
+              "artifactSha256": {
+                "e2b_code_interpreter-2.10.1-py3-none-any.whl": "f4c9732699ee4b1c289acedac8bff66fccecc6ab374bf0b4ef88d5ad063e333d",
+                "e2b_code_interpreter-2.10.1.tar.gz": "94e504667788c6cbb175e5deaf1f68e8df474b670343fe1d72e2496b49d5a666"
+              },
+              "changes": [
+                "code_interpreter_{sync,async}.py: Jupyter get_transport argument changes from http2=False to http_version=\"1.1\". pyproject.toml and PKG-INFO raise e2b floor to 2.52.0,<3.0.0. Installed Jupyter cancellation/base SDK consumers not qualified; supported 2.10.0 unchanged.",
+                "Source digest e2b_code_interpreter/code_interpreter_sync.py: 298d832fe93e488300ac3174f2de590cc16d3563bdcc4ec31439d28265b66426 -> a88ff6a0df5163bceea545d077be090dbc78c96e48354e304677b02799eec17e.",
+                "Source digest pyproject.toml: 6c395fdf75ddc89acabb94fd0e419fc31317e6f3fa297894cbe7e766f090322c -> ef2b569a82f2e6edf722939ab27ca476a292886655c2af8f9e75eb9cae287941."
+              ]
+            }
+          }
+        }
+      ]
+    },
+    {
+      "id": "daytona",
+      "status": "partial",
+      "upstreams": [
+        {
+          "registry": "npm",
+          "name": "@daytona/sdk",
+          "version": "0.220.0",
+          "artifacts": {
+            "0.220.0": "sha512-PJio3vbDwRApzlsK6AGO7r4CHJcF9PI5DWuUW2yUnA2MVJSh/jotS0onKBv6boC5F+oboljTibUMxrwVPIrOlQ=="
+          }
+        },
+        {
+          "registry": "pypi",
+          "name": "daytona",
+          "version": "0.220.0",
+          "artifacts": {
+            "daytona-0.220.0-py3-none-any.whl": "sha256-5f71299eaf3a446e6569ada69919fc49997c1b2c587845057394aab886f113c8",
+            "daytona-0.220.0.tar.gz": "sha256-eda82eac9b3601e757b1dbe3ec2d966b46a9e3038b69ce44a0d90e01dac8417a"
+          }
+        },
+        {
+          "registry": "npm",
+          "name": "@daytona/api-client",
+          "version": "0.220.0",
+          "artifacts": {
+            "0.220.0": "sha512-XaMEtiQCaIHc3T7y3HUqx1A5eWSnd+FJvhpSHDwP3Snu9Nnhy4t+K2LHBWgJQn9dGtWXsdOsbB9K0BqpmFJtyA=="
+          }
+        },
+        {
+          "registry": "npm",
+          "name": "@daytona/toolbox-api-client",
+          "version": "0.220.0",
+          "artifacts": {
+            "0.220.0": "sha512-Kn94AOxhGQil0XygOOR26SaCkndE4dOtxYS0hLbqrTxcP3H1uq1HGFGSRkHFQNkaR8eL9QwFUPSMqd0Vr3A64A=="
+          }
+        },
+        {
+          "registry": "npm",
+          "name": "@daytona/analytics-api-client",
+          "version": "0.220.0",
+          "artifacts": {
+            "0.220.0": "sha512-3BGYILzjo2aFTJhLd6XBXlNEQBSo9Zr2Nj31OdX9o50fMRVUwVydF6ekIGkPGSLwskz6b6xxg5BSS+f9dbrxCQ=="
+          }
+        }
+      ]
+    },
+    {
+      "id": "vercel",
+      "status": "partial",
+      "upstreams": [
+        {
+          "registry": "npm",
+          "name": "@vercel/sandbox",
+          "version": "3.5.1",
+          "artifacts": {
+            "3.5.1": "sha512-VHItQtcv4FkSXET29b088p87MNPAIhRscF3ifrup2KkC8ix4hy4NpgCO9F3GI4yOsztgGtuV7bDx29Iufun2hQ=="
+          }
+        },
+        {
+          "registry": "pypi",
+          "name": "vercel",
+          "version": "0.11.4",
+          "artifacts": {
+            "vercel-0.11.4-py3-none-any.whl": "sha256-3ba3a0de2276a2b3daf590263082f6a82850dc77b35cf68f86a1e5bc9e83b6f1",
+            "vercel-0.11.4.tar.gz": "sha256-80038906615bf4182787af8354bce71b57d9fd5471a35ebca457d34ab5f50b2e"
+          }
+        },
+        {
+          "registry": "pypi",
+          "name": "vercel-sandbox",
+          "version": "0.7.0",
+          "artifacts": {
+            "vercel_sandbox-0.7.0-py3-none-any.whl": "sha256-f7eb897a1a5092fe8c38319ce803033b1a9ced8f414564a43a668432f91ffcd9",
+            "vercel_sandbox-0.7.0.tar.gz": "sha256-07d703790d0141dc75e0962baf35d666a6961bc1de913749137267a2550c81e2"
+          }
+        }
+      ]
+    },
+    {
+      "id": "blaxel",
+      "status": "partial",
+      "upstreams": [
+        {
+          "registry": "npm",
+          "name": "@blaxel/core",
+          "version": "0.3.25",
+          "artifacts": {
+            "0.3.25": "sha512-K6aGUyIpgrPnkpwMOI/U/gbZwveOMu1Am04pkawZQjkp7NUa/roG0HC6NJPBp3AVVJY3CQtkGSWpAJ2DV4ZKpw=="
+          }
+        },
+        {
+          "registry": "pypi",
+          "name": "blaxel",
+          "version": "0.4.13",
+          "artifacts": {
+            "blaxel-0.4.13-py3-none-any.whl": "sha256-b8817718ca63a2b31a5026f98c7191d5ed8f2f4c1aafc2d4aa57491a560a2146",
+            "blaxel-0.4.13.tar.gz": "sha256-a036256792e85238724b8bce38fb7c0b4f661fe4c3ac576258a8be1736ac8483"
+          }
+        }
+      ]
+    },
+    {
+      "id": "runloop",
+      "status": "partial",
+      "upstreams": [
+        {
+          "registry": "npm",
+          "name": "@runloop/api-client",
+          "version": "1.32.0",
+          "artifacts": {
+            "1.32.0": "sha512-aCNKjlGzLVEAFl8WA42LmgiYkdIkaocOlFK/cMGppijsM0AGS+1hkw/RxroQxyHlkIhjyRaqLv7m5ZNMGhks7Q=="
+          }
+        },
+        {
+          "registry": "pypi",
+          "name": "runloop-api-client",
+          "version": "1.32.0",
+          "artifacts": {
+            "runloop_api_client-1.32.0-py3-none-any.whl": "sha256-23c36910de7423f73aef91d4a963abea80a6b2f5b2df5bb8e439d788d5486cc7",
+            "runloop_api_client-1.32.0.tar.gz": "sha256-1f2077fb5a99b5ef30dbc1d96d47c1ca1d3f77895b9e186d985e47365fe85634"
+          }
+        }
+      ]
+    },
+    {
+      "id": "codesandbox",
+      "status": "partial",
+      "upstreams": [
+        {
+          "registry": "npm",
+          "name": "@codesandbox/sdk",
+          "version": "2.4.2",
+          "artifacts": {
+            "2.4.2": "sha512-pwz/+xNPLiCEvIYLxk2VJwiAFuy28V3J6FuO+xIB5U3AV/EylHlm77Lsi/WNYeXoSljIlaLLU7IemAjw3ojNfg=="
+          }
+        }
+      ]
+    },
+    {
+      "id": "sprites",
+      "status": "partial",
+      "upstreams": [
+        {
+          "registry": "npm",
+          "name": "@fly/sprites",
+          "version": "0.2.3",
+          "artifacts": {
+            "0.2.3": "sha512-LB3xmHpHLdVECTQej+Vyi/aFFTc/Otf8bZ8GwVe/Hhlx4kIFS0K+9O5B8ru8Llg+cEwvYmzyeV69vNZPpCt0fw=="
+          }
+        },
+        {
+          "registry": "pypi",
+          "name": "sprites-py",
+          "version": "0.7.1",
+          "artifacts": {
+            "sprites_py-0.7.1-py3-none-any.whl": "sha256-23774f8111c9a4fbb7007f8e305677734eb7616bebb6c668c394788399ff38a8",
+            "sprites_py-0.7.1.tar.gz": "sha256-c45596f3994376eb25dd7c4f988b3a6893dd8218502bacd7eedf2b20888d8456"
+          }
+        }
+      ]
+    },
+    {
+      "id": "freestyle",
+      "status": "partial",
+      "upstreams": [
+        {
+          "registry": "npm",
+          "name": "freestyle",
+          "version": "0.2.16",
+          "artifacts": {
+            "0.2.16": "sha512-8pC7lh/R2PDanbs9Noc1Q7YlPl8Be8hHaQA/rpwFmELrcLTUAuCuxpoZ1Xm+7fuxqhJqJzO83bTTeLcSUoJ9SA=="
+          }
+        }
+      ]
+    },
+    {
+      "id": "prime",
+      "status": "partial",
+      "upstreams": [
+        {
+          "registry": "pypi",
+          "name": "prime-sandboxes",
+          "version": "0.4.1",
+          "artifacts": {
+            "prime_sandboxes-0.4.1-py3-none-any.whl": "sha256-1a1bb96afacc66d690815be82c0b7af180ea141421b7d180b4a0adbada4f38f0",
+            "prime_sandboxes-0.4.1.tar.gz": "sha256-53f7577dc9070e3b8e30db360f9e3cce3bcc35f8765b26f24f64dbc3c7763b06"
+          }
+        }
+      ]
+    },
+    {
+      "id": "modal",
+      "status": "partial",
+      "upstreams": [
+        {
+          "registry": "npm",
+          "name": "modal",
+          "version": "0.11.0",
+          "artifacts": {
+            "0.11.0": "sha512-Kvy2nejPkice2FI82p5e8TJrFDy0BaSYZjJVmvnTnu51bOH9Ok7IRtp8NavBQqMuXhbpbj6gRULwxsjNkweF6A=="
+          }
+        },
+        {
+          "registry": "pypi",
+          "name": "modal",
+          "version": "1.6.0",
+          "artifacts": {
+            "modal-1.6.0-py3-none-any.whl": "sha256-2f5981ba656570ad96379d29f0ddff876880708c84966024ce130e9e1794fa68",
+            "modal-1.6.0.tar.gz": "sha256-c5dd551b5e0a283f3c764476c0a4ebe5bdef1e4a69432fa27e1b1ad8ca5e0817"
+          }
+        }
+      ]
+    },
+    {
+      "id": "cloudflare",
+      "status": "partial",
+      "upstreams": [
+        {
+          "registry": "npm",
+          "name": "@cloudflare/sandbox",
+          "version": "0.12.10",
+          "artifacts": {
+            "0.12.10": "sha512-245s6xEdR1v0Jti0YYd8ORWcTG/f/ksjJfpubvnbky0KxFC/ZDOpbpNKdtyiRBYZqmJGtEncYW7Cwge47tDrpg=="
+          },
+          "unsupported": {
+            "version": "1.0.0",
+            "artifacts": {
+              "1.0.0": "sha512-+TZVuCey6OBDTvPLWisq4Ie7/R5Zy3zFyYOFCNRpdEIyQsKq3xwzpctonE43DfZ+wYZvvu6QYpR138PayDjF+A=="
+            },
+            "reason": "1.0 removes getSandbox, the Sandbox class, exec, processes, sessions and preview proxying and keeps only Files, S3Mount and DirectoryBackup for the caller's own Durable Object; withruntime/cloudflare implements the 0.x API"
+          }
+        }
+      ]
+    }
+  ]
+}

package/dist/ai-harness/index.js

@@ -19,6 +19,7 @@
  * token. The key comes from RUNTIME_API_KEY or this machine's `runtime login`.
  * Needs `@ai-sdk/harness` 1.x beside this package. */
 import { HarnessCapabilityUnsupportedError, HarnessSandboxAuthenticationError, } from "@ai-sdk/harness";
+import { AI_HARNESS_COMMAND_TIMEOUT_MS } from "../api-defaults.js";
 import { Runtime } from "../client.js";
 import { AuthenticationError, NotFoundError, PermissionDeniedError, RuntimeError, } from "../errors.js";
 export const PROVIDER_ID = "runtime-sandbox";
@@ -27,7 +28,6 @@ export const PREVIEW_TOKEN_HEADER = "x-runtime-preview-token";
 const TOKEN_QUERY = "runtime_preview_token";
 const SESSION_NAME_PREFIX = "ai-harness-";
 const MAX_COMMAND_MS = 86_400_000;
-const DEFAULT_COMMAND_MS = 3_600_000;
 /** Exit codes for a command that ended without one, as coreutils `timeout` and SIGKILL give. */
 const TIMED_OUT_EXIT = 124;
 const KILLED_EXIT = 137;
@@ -161,7 +161,7 @@ export class RuntimeSandboxSession {
                 ? {}
                 : { cwd: this.#path(options.workingDirectory) }),
             ...(Object.keys(env).length ? { env } : {}),
-            timeoutMs: Math.min(MAX_COMMAND_MS, options.timeoutMs ?? this.settings.commandTimeoutMs ?? DEFAULT_COMMAND_MS),
+            timeoutMs: Math.min(MAX_COMMAND_MS, options.timeoutMs ?? this.settings.commandTimeoutMs ?? AI_HARNESS_COMMAND_TIMEOUT_MS),
         };
     }
     /** Runs `command` under `bash -c` and returns once it exits, with all of

package/dist/api-defaults.d.ts

@@ -0,0 +1,17 @@
+/** A server-side wait for a state (`GET /v1/sandboxes/{id}?waitFor=`). */
+export declare const WAIT_FOR_TIMEOUT_SECONDS = 60;
+/** A streamed exec's command limit when none is given: the API's longest. */
+export declare const STREAMED_EXEC_TIMEOUT_MS = 86400000;
+/** The lease keepAlive keeps ahead of now, and so the most it extends by. */
+export declare const KEEP_ALIVE_MARGIN_SECONDS = 600;
+/** A webhook watch runs until stopped. */
+export declare const WEBHOOK_WATCH_TIMEOUT_MS = 0;
+/** A job run's limit, and the time added to it for its sandbox to start. */
+export declare const JOB_TIMEOUT_SECONDS = 1800;
+export declare const JOB_START_SECONDS = 60;
+/** A command the framework-free tools run without a timeout of its own. */
+export declare const TOOL_EXEC_TIMEOUT_SECONDS = 300;
+/** A command the AI SDK harness runs without a timeout of its own. */
+export declare const AI_HARNESS_COMMAND_TIMEOUT_MS = 3600000;
+/** A command the OpenAI Agents sandbox runs without a timeout of its own. */
+export declare const OPENAI_AGENTS_EXEC_TIMEOUT_MS = 3600000;

package/dist/api-defaults.js

@@ -0,0 +1,22 @@
+/* Every value this SDK sends the API for a bounded time field when the caller
+ * names none, in one place. packages/cloud/tests/sdk-defaults.test.ts holds
+ * each inside the range the API's registry gives that field, and the same
+ * names in the Python, Go, Java and Ruby SDKs to theirs. The suffix is the
+ * unit; a new default goes here, under a name that test maps to its field. */
+/** A server-side wait for a state (`GET /v1/sandboxes/{id}?waitFor=`). */
+export const WAIT_FOR_TIMEOUT_SECONDS = 60;
+/** A streamed exec's command limit when none is given: the API's longest. */
+export const STREAMED_EXEC_TIMEOUT_MS = 86_400_000;
+/** The lease keepAlive keeps ahead of now, and so the most it extends by. */
+export const KEEP_ALIVE_MARGIN_SECONDS = 600;
+/** A webhook watch runs until stopped. */
+export const WEBHOOK_WATCH_TIMEOUT_MS = 0;
+/** A job run's limit, and the time added to it for its sandbox to start. */
+export const JOB_TIMEOUT_SECONDS = 1800;
+export const JOB_START_SECONDS = 60;
+/** A command the framework-free tools run without a timeout of its own. */
+export const TOOL_EXEC_TIMEOUT_SECONDS = 300;
+/** A command the AI SDK harness runs without a timeout of its own. */
+export const AI_HARNESS_COMMAND_TIMEOUT_MS = 3_600_000;
+/** A command the OpenAI Agents sandbox runs without a timeout of its own. */
+export const OPENAI_AGENTS_EXEC_TIMEOUT_MS = 3_600_000;

package/dist/blaxel/errors.js

@@ -95,7 +95,7 @@ const BLAXEL_HINTS = {
     sandbox_paused: "Call sandbox.unarchive(), then try again.",
     not_running: "The sandbox is not running: call sandbox.unarchive() if it was archived, or make a new one with SandboxInstance.create if it was deleted.",
     trial_busy: "The trial's sandboxes are all in use: delete one you no longer need (sandbox.delete()) or archive it (sandbox.archive()), then try again. Moving to paid credit is the account owner's decision.",
-    public_preview_not_allowed: "On the trial, share the port privately: sandbox.previews.create({ metadata: { name }, spec: { port, public: false } }) and a token from preview.tokens.create(expiresAt). A public preview needs a paid sandbox, which is the account owner's decision.",
+    public_preview_not_allowed: "On the trial, share the port privately: sandbox.previews.create({ metadata: { name }, spec: { port, public: false } }) and a token from preview.tokens.create(expiresAt) on a server supporting absolute preview deadlines. A public preview needs a paid sandbox, which is the account owner's decision.",
     busy: AGAIN,
     guest_busy: AGAIN,
     rate_limited: AGAIN,

package/dist/blaxel/lookup.d.ts

@@ -32,6 +32,7 @@ export declare function findSandbox(client: Runtime, name: string): Promise<Runt
 export declare function findByExternalId(client: Runtime, externalId: string): Promise<RuntimeSandbox>;
 /** Runs a create or fork that names a sandbox. When the name is still held
  * by a sandbox that is stopping (deleted a moment ago, by this client or
- * another), waits for it to stop, up to 30 seconds, and runs it once more, as
- * Blaxel's createIfNotExists waits out a sandbox being deleted. */
+ * another), waits for it to stop, up to 30 seconds, and runs it once more.
+ * This reconciles Runtime's stopping-name conflicts. Blaxel 0.3.25 delegates
+ * createIfNotExists reconciliation to its control plane without client polling. */
 export declare function whenNameFree<T>(client: Runtime, work: () => Promise<T>): Promise<T>;

package/dist/blaxel/lookup.js

@@ -54,8 +54,9 @@ export async function findByExternalId(client, externalId) {
 }
 /** Runs a create or fork that names a sandbox. When the name is still held
  * by a sandbox that is stopping (deleted a moment ago, by this client or
- * another), waits for it to stop, up to 30 seconds, and runs it once more, as
- * Blaxel's createIfNotExists waits out a sandbox being deleted. */
+ * another), waits for it to stop, up to 30 seconds, and runs it once more.
+ * This reconciles Runtime's stopping-name conflicts. Blaxel 0.3.25 delegates
+ * createIfNotExists reconciliation to its control plane without client polling. */
 export async function whenNameFree(client, work) {
     try {
         return await work();

package/dist/blaxel/pagination.d.ts

@@ -28,7 +28,7 @@ export type PaginatedList<T, TQuery extends CursorPaginationQuery = CursorPagina
 /** Blaxel's own helper: the items of a list answer in any of its shapes. */
 export declare function unwrapListData<T>(response: ListResponse<T>): T[];
 /** Blaxel's own helper, for a list fetched by `fetchPage`. */
-export declare function createPaginatedList<TRaw, TItem, TQuery extends CursorPaginationQuery>({ response, fetchPage, mapItem, query, }: {
+export declare function createPaginatedList<TRaw, TItem, TQuery extends CursorPaginationQuery>({ response, fetchPage, mapItem, query, seenCursors, }: {
     response: ListResponse<TRaw>;
     fetchPage: (query?: TQuery) => Promise<ListResponse<TRaw>>;
     mapItem: (item: TRaw) => TItem | Promise<TItem>;
@@ -36,4 +36,4 @@ export declare function createPaginatedList<TRaw, TItem, TQuery extends CursorPa
     seenCursors?: Set<string>;
 }): Promise<PaginatedList<TItem, TQuery>>;
 /** A Runtime page, each item mapped, as Blaxel's paginated list. */
-export declare function paginate<TRaw, TItem>(page: Page<TRaw>, map: (item: TRaw) => TItem): PaginatedList<TItem>;
+export declare function paginate<TRaw, TItem>(page: Page<TRaw>, map: (item: TRaw) => TItem, seenCursors?: Set<string>): PaginatedList<TItem>;

package/dist/blaxel/pagination.js

@@ -8,30 +8,58 @@ export function unwrapListData(response) {
     return response.data ?? [];
 }
 /** Blaxel's own helper, for a list fetched by `fetchPage`. */
-export async function createPaginatedList({ response, fetchPage, mapItem, query, }) {
-    const meta = !response || Array.isArray(response) ? {} : (response.meta ?? {});
+export async function createPaginatedList({ response, fetchPage, mapItem, query, seenCursors, }) {
+    const meta = !response || Array.isArray(response)
+        ? { hasMore: false }
+        : (response.meta ?? { hasMore: false });
     const data = await Promise.all(unwrapListData(response).map(mapItem));
-    return build(data, meta.nextCursor || undefined, async (cursor) => createPaginatedList({
-        response: await fetchPage({ ...(query ?? {}), cursor }),
-        fetchPage,
-        mapItem,
-        ...(query ? { query: { ...query, cursor } } : {}),
-    }));
+    const cursors = new Set(seenCursors);
+    if (query?.cursor)
+        cursors.add(query.cursor);
+    return build(data, meta.nextCursor || undefined, async (cursor) => {
+        if (cursors.has(cursor))
+            throw new Error("Pagination returned a repeated cursor");
+        const nextQuery = { ...(query ?? {}), cursor };
+        const nextSeenCursors = new Set(cursors);
+        nextSeenCursors.add(cursor);
+        return createPaginatedList({
+            response: await fetchPage(nextQuery),
+            fetchPage,
+            mapItem,
+            query: nextQuery,
+            seenCursors: nextSeenCursors,
+        });
+    }, meta);
 }
 /** A Runtime page, each item mapped, as Blaxel's paginated list. */
-export function paginate(page, map) {
-    return build(page.data.map(map), page.nextCursor ?? undefined, async () => {
-        const next = await guard(() => page.next());
-        return next ? paginate(next, map) : null;
+export function paginate(page, map, seenCursors = new Set()) {
+    return build(page.data.map(map), page.nextCursor ?? undefined, async (cursor) => {
+        if (cursor && seenCursors.has(cursor))
+            throw new Error("Pagination returned a repeated cursor");
+        const nextSeenCursors = new Set(seenCursors);
+        if (cursor)
+            nextSeenCursors.add(cursor);
+        const next = await guard(() => page.next(cursor));
+        return next ? paginate(next, map, nextSeenCursors) : null;
     });
 }
-function build(data, nextCursor, more) {
+function build(data, nextCursor, more, meta = {
+    hasMore: nextCursor !== undefined,
+    ...(nextCursor ? { nextCursor } : {}),
+}) {
     const list = {
         data,
-        meta: { hasMore: nextCursor !== undefined, ...(nextCursor ? { nextCursor } : {}) },
-        hasMore: nextCursor !== undefined,
-        ...(nextCursor ? { nextCursor } : {}),
-        nextPage: async () => (nextCursor ? more(nextCursor) : null),
+        meta,
+        get hasMore() {
+            return Boolean(list.nextCursor);
+        },
+        get nextCursor() {
+            return meta.nextCursor || undefined;
+        },
+        nextPage: async () => {
+            const cursor = list.nextCursor;
+            return cursor ? more(cursor) : null;
+        },
         async autoPagingEach(onItem) {
             for await (const item of list)
                 if ((await onItem(item)) === false)

package/dist/blaxel/preview.d.ts

@@ -67,7 +67,8 @@ export declare class SandboxPreviewTokens {
     constructor(preview: SandboxPreview, ctx: PreviewContext);
     get previewName(): string;
     get resourceName(): string;
-    /** A token that lasts until `expiresAt` (at least a minute, at most a week). */
+    /** A token bounded by `expiresAt`; native signing floors milliseconds and
+     * caps it to the caller's session. Older servers refuse without a TTL fallback. */
     create(expiresAt: Date): Promise<SandboxPreviewToken>;
     list(): Promise<never>;
     /** Revokes the preview's tokens. Runtime cannot revoke one token alone, so
@@ -98,7 +99,7 @@ export declare class SandboxPreviews {
     /** The named preview, or a new one when there is none. */
     createIfNotExists(preview: Preview, force?: boolean): Promise<SandboxPreview>;
     get(previewName: string): Promise<SandboxPreview>;
-    /** Stops sharing the port; open connections close within seconds. */
+    /** Stops sharing the port; its open connections are closed before this returns. */
     delete(previewName: string): Promise<Preview>;
 }
 /** A private preview of `port` with a token that lasts a while, for