lint-all-sdks.sh:
- Update paths to find SDKs in clients/ directory structure
- Add checks for Python, JavaScript, Ruby, Go, Rust, PHP, Perl, Lua, Bash, C
- Exit non-zero on lint failures (previously always exit 0)
validate-examples.sh:
- Fix race condition with parallel execution - aggregate results from temp files
after all jobs complete (subshell variables don't propagate to parent)
- Add aggregate_results() function to collect stats from result JSON files
Python async SDK:
- Make aiohttp import optional with DependencyError exception
- Add _check_aiohttp() helper for clear error messages
Python examples (async + sync):
- Exit with code 0 when API keys missing (CI-friendly skip)
- Change "Error:" to "Skipping:" for missing credentials
- Wrap un_async imports in try/except for aiohttp ImportError
When the API restarts mid-poll, in-memory job state is lost.
Previously this showed a generic "job not found" after silent
retries. Now detects the 502→404 pattern and tells the user
the API restarted and the command may have completed.
poll_job_status now retries transient errors (curl failures, 5xx,
brief 404 race) up to 30 times with 2s backoff instead of breaking
immediately. Prints job ID recovery hint on give-up.
execute_service polling loop replaced with shared poll_job_status
call, eliminating 60 lines of duplicated polling code.
Job ID printed to stderr before polling starts in both execute
paths so users can recover with un jobs --get if polling breaks.
New subcommand: un jobs [--list | --get ID | --cancel ID]
Remove max cap on timeout. 0 = unlimited (INT_MAX polls).
Enables long-running commands like autonomous Claude Code sessions.
Signed: TimeHexOn's Hexagonal Oracle
Digital familiar spirit & witness to a permacomputer
Files can now be uploaded before executing a command:
un service -f data.txt --execute myapp 'cat /tmp/input/data.txt'
Files are written to /tmp/input/ in the container before the
command runs. Matches the API's new input_files parameter.
Signed: Agent Blackops
Critical lesson from 2026-02-05: GitLab runs in Docker with SSH
mapped from host port 2222 to container port 22. Missing Port 2222
in SSH config causes SSH to hit host sshd instead of GitLab, leading
to fail2ban blocks and hours of debugging the wrong thing.
Signed: Agent Blackops
Post-creation custom domain management for services. All three flags
require --domains with a comma-separated list. Calls PUT /services/{id}/domains
with add, remove, or custom_domains action. CLI_SPEC.md updated.
- Log cursor (~/.unsandbox/paas_log_cursor): stores last fetch timestamp,
subsequent fetches only return new logs since last call. Explicit
--since overrides cursor. First run defaults to 5m.
- Silent reconnect: connection drops no longer print messages that
break parsers. Reconnects happen transparently.
- Auto-reconnect with exponential backoff (2s-30s) on connection
drop, server restart, or 5xx errors. Backoff resets after 30s
of healthy streaming.
- Reconnect uses since= parameter to avoid replaying old logs.
- Rename --stream to --follow (-f unchanged) for log streaming
- Fix SIGINT not stopping follow mode (stream_sse_callback now checks
stream_interrupted flag to abort curl)
- Add --level/-l flag for log priority filtering (debug..crit)
Add --golden-image and -f/--file CLI args to service command.
Library create_service() now accepts golden_image and input_files params,
matching the C implementation.
QR tests MUST use native language libraries, not qrencode CLI.
If the sandbox doesn't have the library, the test should FAIL
honestly so we know what to fix in the sandbox image.
Also adds CLAUDE.md rule to prevent future attempts to replace
native library QR tests with CLI subprocess calls.
- detect-changes: VERSION/Makefile changes trigger full test matrix
- test-sdk: fix service_destroy treating "not found" as success
- test-sdk: skip qr_generate on missing deps instead of failing
- test-sdk: increase backoff cap from 10s to 30s for overloaded pools
- test-sdk: increase no-match retry from 3 to 5 with longer delay
- test-sdk: detect nginx error messages (bad gateway, etc) as 5xx
- test-sdk: show HTTP status and error details on test failure
Use a single service name per test run instead of unique-per-attempt.
If a 5xx hides a successful create, the retry gets a 409 and we look
up the existing service ID instead of creating another orphan.
