Changelog
Oct 14, 2026 3 min read
Changelog — October 14, 2026
Browser terminals, faster snapshots, scoped S3 access, longer VM commands, outbound controls, and new guides.
Since our September changelog, we've added more ways to build on Freestyle VMs and control what those VMs can access. Browser apps can connect to VM terminals with scoped credentials, taking snapshots is faster, S3 access can be limited to specific objects and actions, and the wallet now shows daily usage estimates.
| Area | Change | Details |
|---|---|---|
| SDK | Browser terminals | Open a VM terminal from a browser using a scoped identity token instead of an account API key. The SDK can reconnect to the same session after a dropped connection, and connectXterm handles terminal input, resizing, and output replay. |
| SDK | Expiring client tokens | Set an expiration time when creating an identity access token. After it expires, new requests and terminal reconnections require a fresh token; an open terminal stays connected. |
| SDK | Longer-running commands | On VMs with an updated guest agent, vm.exec() supports timeouts up to 24 hours. A running command and its result can be recovered after a service interruption; older agents retain the five-minute limit. |
| Snapshots | Faster snapshots | Taking a snapshot of a running or paused VM now finishes faster. |
| Networking | Scoped S3 access | Freestyle can sign S3 requests at the edge so the VM never receives the storage key. Limit a rule to a bucket, object-key prefix, and allowed operations, including multipart uploads. |
| Networking | Domain-specific outbound access | Allow a VM to connect to selected public TLS domains without granting broad public egress. Rules without request transforms preserve end-to-end TLS and the origin's certificate. |
| Networking | Request-specific transforms | Apply outbound HTTP transforms only to selected methods and paths. JSON Patch can set or change fields in a request body while the rule injects credentials at the edge. |
| Dashboard | Domain setup | DNS verification now shows provider-specific Name / Host values and the full record name. Wildcard setup explains which ownership check, DNS records, and HTTPS steps are needed. |
| Dashboard | Daily spend | The wallet now charts estimated daily usage by vCPU, memory, storage, and data transfer, with a month-to-date total. The estimates show usage before credits and exclude plan fees. |
| Reliability | SSH on a full disk | OpenSSH access remains available when a VM's guest storage is exhausted, giving you a way to inspect and free space. |
| Reliability | Command and terminal output | Interactive terminals handle large output streams without dropping data under backpressure. vm.exec() also returns non-UTF-8 output instead of failing with a 502 response. |
New guides
We published new guides for selecting OpenAI models and injecting credentials, using S3 as a Git remote, and routing a sandbox through a user's computer. There are also migration guides for E2B and OpenShell, plus credential-injection recipes for Neon, PostHog, Keycard, Tigris, Firecrawl, Exa, and Hugging Face.