release: v2.8.0

.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "tensorlake",
-  "version": "2.7.1",
+  "version": "2.8.0",
   "description": "Tensorlake SDK for agent sandboxes and sandbox-native orchestration. Use when building AI agents that need sandboxed execution environments, isolated tool calls, or durable workflow orchestration.",
   "author": "TensorLake",
   "homepage": "https://github.com/tensorlakeai/tensorlake-skills",

.github/scripts/sources.yaml

@@ -32,21 +32,21 @@ sandbox_sdk.md:
     - https://docs.tensorlake.ai/sandboxes/docker.md
     - https://docs.tensorlake.ai/sandboxes/async.md
     - https://docs.tensorlake.ai/sandboxes/tunnels.md
-  sdk_version: "0.5.8"
-  last_verified: "2026-05-06"
+  sdk_version: "0.5.17"
+  last_verified: "2026-05-23"
 
 computer_use.md:
   sources:
     - https://docs.tensorlake.ai/sandboxes/computer-use.md
-  sdk_version: "0.5.5"
-  last_verified: "2026-04-30"
+  sdk_version: "0.5.17"
+  last_verified: "2026-05-23"
 
 sandbox_persistence.md:
   sources:
     - https://docs.tensorlake.ai/sandboxes/lifecycle.md
     - https://docs.tensorlake.ai/sandboxes/snapshots.md
-  sdk_version: "0.5.5"
-  last_verified: "2026-04-30"
+  sdk_version: "0.5.17"
+  last_verified: "2026-05-23"
 
 applications_sdk.md:
   sources:
@@ -118,8 +118,9 @@ sandbox_usecases.md:
     - https://docs.tensorlake.ai/sandboxes/gspo-agentic-rl.md
     - https://docs.tensorlake.ai/sandboxes/chrome-cdp.md
     - https://docs.tensorlake.ai/sandboxes/harbor.md
-  sdk_version: "0.5.8"
-  last_verified: "2026-05-06"
+    - https://docs.tensorlake.ai/sandboxes/remote-dev.md
+  sdk_version: "0.5.17"
+  last_verified: "2026-05-23"
 
 troubleshooting.md:
   sources:

AGENTS.md

@@ -1,7 +1,7 @@
 # Tensorlake SDK
-<!-- version: 2.7.1 -->
+<!-- version: 2.8.0 -->
 
-Tensorlake SDK — sandboxes for AI agents and applications. Use when the user mentions tensorlake or sandboxes, or asks about Tensorlake APIs/docs/capabilities. Also use when building an application, coding agent, or agentic system that needs a sandbox to run code — e.g., executing LLM-generated or untrusted code, persistence via suspend/resume, snapshots/checkpoints for forking parallel workers, custom images, exposing ports, egress allowlists, PTY/interactive shells, computer-use / desktop automation, browser automation (Chrome CDP, Playwright), local tunnels for non-HTTP protocols, async parallel sandboxes, Harbor evals or RL rollouts, or file transfer. Also covers Tensorlake's sandbox-native durable workflow orchestration. Works alongside any LLM provider (OpenAI, Anthropic), agent framework (Claude/OpenAI agents SDK, LangChain), database, or API. When this skill applies, ALWAYS WebFetch https://docs.tensorlake.ai/llms.txt first.
+Tensorlake SDK — sandboxes for AI agents and applications. Use when the user mentions tensorlake or sandboxes, or asks about Tensorlake APIs/docs/capabilities. Also use when building an application, coding agent, or agentic system that needs a sandbox to run code — e.g., executing LLM-generated or untrusted code, persistence via suspend/resume, snapshots/checkpoints for forking parallel workers, custom images, exposing ports, egress allowlists, PTY/interactive shells, computer-use / desktop automation, browser automation (Chrome CDP, Playwright), local tunnels for non-HTTP protocols, async parallel sandboxes, Harbor evals or RL rollouts, file transfer, SSH access, remote-dev (VS Code Remote-SSH), or OCI base images. Also covers Tensorlake's sandbox-native durable workflow orchestration. Works alongside any LLM provider (OpenAI, Anthropic), agent framework (Claude/OpenAI agents SDK, LangChain), database, or API. When this skill applies, ALWAYS WebFetch https://docs.tensorlake.ai/llms.txt first.
 
 ## What can you do with Tensorlake SDK
 

CHANGELOG.md

@@ -2,6 +2,28 @@
 
 All notable changes to the TensorLake skill are documented here.
 
+## [2.8.0] — SDK 0.5.17 — 2026-05-23
+
+### Added
+- **`references/sandbox_sdk.md`** — new "SSH" subsection covering one-time key registration via `tl sbx ssh keys add`, connection through `ssh <sandbox-id>@sandbox.tensorlake.ai`, file transfer (`scp`/`sftp`/`rsync`), port forwarding (`-L` / `-D` / `-R`), `~/.ssh/config` block from `tl sbx describe`, and VS Code Remote-SSH / JetBrains Gateway / Cursor usage. New "Resource Limits and Timeouts" table covering `cpus`, `memory_mb` (1024–8192 MB per CPU core), `disk_mb` (10240–102400 MiB, growth-only on restore), and `timeout_secs` semantics (idle threshold, `0` requests plan max, named → suspend / ephemeral → terminate). New "OCI base images" coverage under "Base Images" — any standard OCI reference (`python:3.12-slim`, `node:22-alpine`, `ghcr.io/...`, `public.ecr.aws/...`) plus private-registry auth via `~/.docker/config.json`.
+- **`references/sandbox_persistence.md`** — new "Resource Limits and Timeouts" section (mirrors the SDK reference) covering create-time-only resources, idle-threshold timeout semantics, plan-max table, and named-vs-ephemeral timeout outcomes.
+- **`references/computer_use.md`** — new "Connect with a VNC Client" subsection covering `tl sbx tunnel <sandbox-id> 5901 --listen-port 15901` plus macOS Screen Sharing / TigerVNC / Remmina / KRDC client commands. Added complete JavaScript/TypeScript examples for Quickstart and "Reconnect to an Existing Desktop Sandbox" (was Python-only). Expanded methods table to call out `doubleClick`, `typeText`, `scrollDown`, `keyDown`.
+- **`references/sandbox_usecases.md`** — new "Sandbox as a Dev Environment" section (named sandbox as portable cloud workstation): one-time SSH key registration, named-sandbox create with `--disk_mb` / `--timeout`, `~/.ssh/config` entry, VS Code Remote-SSH walkthrough on `/home/tl-user/workspace`, day-to-day flow including long-job vs. SSH disconnect tradeoffs and explicit suspend/resume. Added `remote-dev.md` to the source list.
+- **`references/feature_lookup.md`** — new entries for SSH access, Sandbox as a dev environment, and OCI base images.
+
+### Changed
+- **`references/sandbox_sdk.md`** — bumped SDK version 0.5.8 → 0.5.17 and `Last verified:` to 2026-05-23. Rewrote List/Rename → "List, Inspect, Rename": listing now uses `Sandbox.list()`, with `sandbox.info()` for per-sandbox metadata; `SandboxClient` flagged as fully deprecated with `Sandbox`-level equivalents for every operation. Image names in the base-image table and the intro paragraph qualified to `tensorlake/ubuntu-minimal` / `tensorlake/ubuntu-systemd` / `tensorlake/ubuntu-vnc` / `tensorlake/debian-minimal`. Noted that TS `sandbox.status()` is an async method (not a getter) and that `sandbox.update(...)` is the canonical handle for rename / port exposure.
+- **`references/sandbox_persistence.md`** — bumped SDK version 0.5.5 → 0.5.17 and `Last verified:` to 2026-05-23. Promote-ephemeral example now uses `sandbox.update(name=...)` (returns `Traced[SandboxInfo]`; original handle is renamed in place) and the legacy `SandboxClient().update_sandbox(...)` form is noted as deprecated. Added cross-links to the new SSH / dev-environment / computer-use sections.
+- **`references/computer_use.md`** — bumped SDK version 0.5.5 → 0.5.17 and `Last verified:` to 2026-05-23. All image references updated to `tensorlake/ubuntu-vnc`. Startup-delay guidance bumped to ≈5s with a snapshot-restore caveat (vncserver up before XFCE settles → first `Ctrl+Alt+T` can drop). Clarified that `sandbox.close()` on a `Sandbox.connect(...)` handle closes the client only; `sandbox.terminate()` is required to stop the VM.
+- **`references/sandbox_usecases.md`** — bumped SDK version 0.5.8 → 0.5.17 and `Last verified:` to 2026-05-23. Chrome-CDP launch command updated to the fully-qualified `tensorlake/ubuntu-vnc` image.
+- **`.github/scripts/sources.yaml`** — bumped `sdk_version` and `last_verified` for `sandbox_sdk.md`, `computer_use.md`, `sandbox_persistence.md`, and `sandbox_usecases.md` to `0.5.17` / `2026-05-23`. Added `https://docs.tensorlake.ai/sandboxes/remote-dev.md` to `sandbox_usecases.md` sources.
+- **`SKILL.md` / `AGENTS.md`** — extended the trigger description with "file transfer, SSH access, remote-dev (VS Code Remote-SSH), or OCI base images" so the skill activates on SSH-into-a-sandbox / remote-dev-environment / OCI-base-image phrasing. Description length 1009 chars, under the 1024-char loader limit.
+- **`README.md`** — illustrative source-header example bumped to `tensorlake 0.5.17` / `2026-05-23`. Added three new bullets to "When It Triggers": SSH access (with `scp`/`sftp`/`rsync` + port forwarding), named sandbox as a remote dev environment (VS Code Remote-SSH / JetBrains Gateway / Cursor), and OCI base images for `tl sbx image create`.
+
+### Fixed
+- **`references/sandbox_sdk.md`** — corrected three API claims surfaced during the 0.5.17 audit: (1) TypeScript `Sandbox.connect(...)` only accepts an options object (`{ sandboxId: "..." }`) — bare-string examples removed; the TS runtime reads `options.sandboxId` and would throw on a bare string. (2) `sandbox.update(...)` returns `Traced[SandboxInfo]` in Python and `Promise<Traced<SandboxInfo>>` in TS, not a renamed `Sandbox` handle — example restored to the original `info = sandbox.update(name="my-env")` form with `info.value.name` access. (3) `SandboxStatus` string values are lowercase in both Python and TypeScript (`"suspended"`, `"running"`, …), not capitalized — example filter switched to `SandboxStatus.SUSPENDED` and the trailing prose corrected.
+- **`references/sandbox_persistence.md`** — same `sandbox.update(name=...)` return-type correction (was incorrectly described as returning a renamed `Sandbox`).
+
 ## [2.7.1] — 2026-05-06
 
 ### Changed

README.md

@@ -48,6 +48,9 @@ The skill activates when the user mentions Tensorlake or sandboxes, or asks the
 - Open **local tunnels** to a sandbox for non-HTTP protocols (VNC, Postgres, Redis, custom binary)
 - Drive **Chrome over CDP** with Playwright or `chrome-devtools-mcp` (browser automation, scraping)
 - Drive PTY/interactive shells or computer-use / desktop automation
+- **SSH** into a sandbox, transfer files via `scp`/`sftp`/`rsync`, or set up port forwarding (`-L` / `-D` / `-R`)
+- Use a named sandbox as a **remote dev environment** (VS Code Remote-SSH, JetBrains Gateway, Cursor) with idle-suspend and resume-by-name
+- Build sandbox images from **OCI base images** (`python:3.12-slim`, `node:22-alpine`, `ghcr.io/...`) in addition to `tensorlake/*` bases
 - Run **Harbor** evaluations (Terminal-Bench, SWE-Bench, Aider Polyglot) or RL rollouts in per-trial sandboxes
 - Bundle agent skills (Claude Code, Codex, Cursor, Cline, Windsurf, Copilot, Google ADK) inside a sandbox image
 - Build durable workflows or multi-agent orchestration with the Applications SDK
@@ -177,8 +180,8 @@ Each reference file has a source header that tracks which doc pages it was built
 Source:
   - https://docs.tensorlake.ai/sandboxes/lifecycle.md
   - https://docs.tensorlake.ai/sandboxes/commands.md
-SDK version: tensorlake 0.5.8
-Last verified: 2026-05-06
+SDK version: tensorlake 0.5.17
+Last verified: 2026-05-23
 -->
 ```
 

SKILL.md

@@ -11,14 +11,15 @@ description: >
   exposing ports, egress allowlists, PTY/interactive shells, computer-use /
   desktop automation, browser automation (Chrome CDP, Playwright), local
   tunnels for non-HTTP protocols, async parallel sandboxes, Harbor evals or
-  RL rollouts, or file transfer. Also covers Tensorlake's sandbox-native
+  RL rollouts, file transfer, SSH access, remote-dev (VS Code Remote-SSH),
+  or OCI base images. Also covers Tensorlake's sandbox-native
   durable workflow orchestration. Works alongside any LLM provider (OpenAI,
   Anthropic), agent framework (Claude/OpenAI agents SDK, LangChain),
   database, or API. When this skill applies, ALWAYS WebFetch
   https://docs.tensorlake.ai/llms.txt first.
 metadata:
   author: tensorlake
-  version: 2.7.1
+  version: 2.8.0
 ---
 
 # What can you do with Tensorlake SDK