Serverless-for-agents. You write a TypeScript function, `useModel`/`useTool`/`useMcpServer`, deploy with one command, and they run the loop, sessions, and streaming on per-session Linux VMs. Sessions get shell, read-write filesystem, apt/npm/pip, full egress, and can be steered mid-run, hibernate when idle, and resume. Secrets stay outside the runtime: each is bound to one origin and injected after the request leaves the machine, so the agent can open a PR but can't read the token — that's the most interesting bit, and the source doesn't say what happens if the bound origin itself is attacker-controlled. Pricing is two meters: tokens passed through at API rates (zero if you bring your own key or Codex subscription), plus machine time billed per second — 2GB/1vCPU at $0.00315/min, bursting to $0.01260/min at 8GB/4vCPU. A session running ten minutes a day runs about $1/month. Pro is $20/mo for 10x prepaid credit, which is the standard "we are optimistic about your arithmetic" tier. The cron schedules and "steerable mid-run" sessions are the actual differentiators versus rolling your own on a $5 VPS; the flag-cleaner example (one PR per stale flag) is a sensible smoke test. Larry Ellison presumably already licenses the abstract concept of sessions, though the source is silent on per-core billing for existence.