the universal sandbox runtime for agents and humans.
pocketenv.io
sandbox
openclaw
agent
claude-code
vercel-sandbox
deno-sandbox
cloudflare-sandbox
atproto
sprites
daytona
Bump CLI to 0.5.0 and update changelog
+30
-1
+29
CHANGELOG.md
+29
CHANGELOG.md
···
2
2
3
3
All notable changes to this project will be documented in this file.
4
4
5
+
## [0.5.0] - 2026-03-30
6
+
7
+
### Added
8
+
9
+
- **Multi-provider auth system**: New auth tables and token support for Daytona, Deno, Sprite, and Vercel providers. Tokens are stored with redacted columns for safe display.
10
+
- **Sandbox provider preferences**: Users can set and persist a preferred sandbox provider via a new UI and API. API key is cleared when the provider changes.
11
+
- **Provider token handling**: Daytona and Deno provider tokens are fetched and passed through sandbox operations. Sprite token support added.
12
+
- **Daytona auth support**: Full Daytona authentication with `organizationId` and `organization_id` fields, including graceful handling when the API key is missing.
13
+
- **Terminal SSH client**: New SSH client wired into the `ssh` command, with buffered SSH output until an SSE client connects.
14
+
- **Redis-backed rate limiter**: New rate limiter middleware using Redis (500 requests per 30s).
15
+
- **`sandbox()` client**: Sandbox operations now use a unified `sandbox()` client; Daytona snapshot is set on start.
16
+
17
+
### Changed
18
+
19
+
- **`sandboxId` updated after start and SSH fetch**: Ensures the sandbox ID is kept in sync after provider start and SSH key retrieval.
20
+
- **`sandbox.start()` called before fetching params**: Provider start is now invoked earlier in the sandbox lifecycle.
21
+
- **Sandbox created if missing on start**: The `start` command now creates a sandbox if one does not already exist.
22
+
- **Increased default memory and disk sizes**: Higher resource defaults for sandboxes.
23
+
- **Rate limiter threshold raised**: Redis rate limiter now allows 500 requests per 30-second window.
24
+
25
+
### Fixed
26
+
27
+
- **Conditionally save prefs and accept masked key**: Provider preferences are only saved when changed; masked/redacted keys are accepted without overwriting.
28
+
- **`organizationId` in sandbox provider prefs**: Organization ID is now included in provider preference payloads.
29
+
- **Stray `console.log` removed** from `getPreferences`.
30
+
- **SSH session connection info logged** for easier debugging.
31
+
32
+
---
33
+
5
34
## [0.4.0] - 2026-03-29
6
35
7
36
### Added