Retry transient GET requests

[Dingway98]

Summary

Changes

Validation

• ruff check
• pytest

---

Note

Medium Risk
Touches shared HTTP/error paths for all control and sandbox API calls; GET-only retries limit duplicate-write risk, but behavior on failures and cancellations changes client-wide.

Overview
Adds automatic retries for idempotent GETs on the control API (sync/async Transport.get and sandbox manager _request), up to 3 attempts with jittered exponential backoff when the failure is marked retryable (transient HTTP statuses like 429/502/503/504 or httpx network/timeouts). POST and other mutating calls are not retried.

Error handling is tightened in sandbox_common: request_context tags failures like [GET /sandbox] (paths only, no query secrets), empty httpx errors include the exception type, and cancellation/interrupt/control-flow errors are re-raised instead of being wrapped as network errors. Runtime sandbox transport paths now pass that context into normalized errors.

Control transport responses also set retryable, service, and request_id on more HyperbrowserError cases so retry logic and debugging stay consistent. New pytest coverage exercises GET retry/stop conditions, POST no-retry, and normalization behavior.

^{Reviewed by Cursor Bugbot for commit a660c1c. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit a660c1c. Configure here.}