@arker-ai/sdk 0.5.1 → 0.5.2

package/dist/{chunk-PI3H3TGC.js → chunk-YGZOUXII.js}

@@ -133,7 +133,8 @@ var Arker = class {
       memory_mib: src.memory_mib ?? null,
       max_memory_mib: src.max_memory_mib ?? null,
       disk_mib: src.disk_mib ?? null,
-      durable: src.durable ?? null
+      durable: src.durable ?? null,
+      tunnel: src.tunnel ?? null
     };
     const useBurst = sourceOrgId === ARKER_ORG_ID && src.sourceVmName !== void 0 && isBurstRef(src.sourceVmName);
     const baseUrl = useBurst && this.burstBaseUrl ? this.burstBaseUrl : this.baseUrl;
@@ -164,6 +165,33 @@ var Arker = class {
     });
     return { vms, nextCursor: resp.next_cursor ?? null };
   }
+  /**
+   * List run activity visible to the authenticated caller across VMs,
+   * providers, and regions. Admin call — routed through the control plane.
+   */
+  async listRuns(opts = {}) {
+    return this._request("GET", buildQuery("/v1/runs", {
+      since: opts.since,
+      until: opts.until,
+      vm: opts.vm,
+      vms: opts.vmIds && opts.vmIds.length > 0 ? opts.vmIds.join(",") : void 0,
+      region: opts.region,
+      provider: opts.provider,
+      source: opts.source,
+      search: opts.search,
+      limit: opts.limit,
+      offset: opts.offset,
+      lite: opts.lite === void 0 ? void 0 : opts.lite,
+      runtime: opts.runtime,
+      endpoint: opts.endpoint,
+      actions: opts.actions && opts.actions.length > 0 ? opts.actions.join(",") : void 0,
+      status: opts.status && opts.status.length > 0 ? opts.status.join(",") : void 0,
+      status_min: opts.statusMin,
+      status_max: opts.statusMax,
+      sort: opts.sort,
+      dir: opts.dir
+    }), void 0, this.controlBaseUrl);
+  }
   /** Compute call — goes direct to the backend hosting this VM (no
    * control-plane hop). Returns a fully-populated VM handle. */
   async getVm(vmId) {
@@ -278,6 +306,10 @@ var VM = class _VM {
   vcpu_count;
   memory_mib;
   disk_mib;
+  network;
+  max_vcpus;
+  max_memory_mib;
+  min_memory_mib;
   started_at;
   root_source_vm_id;
   root_source_vm_name;
@@ -463,7 +495,7 @@ var VM = class _VM {
   async deleteSession(sessionId) {
     return this._client._request("DELETE", `${vmPath(this.id)}/sessions/${pathSegment(sessionId)}`, void 0, this.baseUrl);
   }
-  // ── Tunnels: opened as a side effect of fork/run, addressed by port ─
+  // ── Tunnels: VM-scoped, addressed by recoverable tunnel key ───────
   async listTunnels(opts = {}) {
     return this._client._request("GET", buildQuery(`${vmPath(this.id)}/tunnels`, {
       cursor: opts.cursor,
@@ -471,11 +503,14 @@ var VM = class _VM {
       state: opts.state
     }), void 0, this.baseUrl);
   }
-  async getTunnel(port) {
-    return this._client._request("GET", `${vmPath(this.id)}/tunnels/${port}`, void 0, this.baseUrl);
+  async createTunnel(request = {}) {
+    return this._client._request("POST", `${vmPath(this.id)}/tunnels`, request, this.baseUrl);
+  }
+  async getTunnel(key) {
+    return this._client._request("GET", `${vmPath(this.id)}/tunnels/${pathSegment(key)}`, void 0, this.baseUrl);
   }
-  async deleteTunnel(port) {
-    return this._client._request("DELETE", `${vmPath(this.id)}/tunnels/${port}`, void 0, this.baseUrl);
+  async deleteTunnel(key) {
+    return this._client._request("DELETE", `${vmPath(this.id)}/tunnels/${pathSegment(key)}`, void 0, this.baseUrl);
   }
 };
 function buildQuery(path, params) {
@@ -576,8 +611,7 @@ function parseRunResponse(payload) {
     return {
       type: "background",
       runId: body.run_id,
-      state: typeof body.state === "string" ? body.state : "running",
-      tunnels: Array.isArray(body.tunnels) ? body.tunnels : []
+      state: typeof body.state === "string" ? body.state : "running"
     };
   }
   throw new ArkerError("internal", "unrecognized run response shape", 200);

package/dist/cli.cjs

@@ -165,7 +165,8 @@ var Arker = class {
       memory_mib: src.memory_mib ?? null,
       max_memory_mib: src.max_memory_mib ?? null,
       disk_mib: src.disk_mib ?? null,
-      durable: src.durable ?? null
+      durable: src.durable ?? null,
+      tunnel: src.tunnel ?? null
     };
     const useBurst = sourceOrgId === ARKER_ORG_ID && src.sourceVmName !== void 0 && isBurstRef(src.sourceVmName);
     const baseUrl = useBurst && this.burstBaseUrl ? this.burstBaseUrl : this.baseUrl;
@@ -196,6 +197,33 @@ var Arker = class {
     });
     return { vms, nextCursor: resp.next_cursor ?? null };
   }
+  /**
+   * List run activity visible to the authenticated caller across VMs,
+   * providers, and regions. Admin call — routed through the control plane.
+   */
+  async listRuns(opts = {}) {
+    return this._request("GET", buildQuery("/v1/runs", {
+      since: opts.since,
+      until: opts.until,
+      vm: opts.vm,
+      vms: opts.vmIds && opts.vmIds.length > 0 ? opts.vmIds.join(",") : void 0,
+      region: opts.region,
+      provider: opts.provider,
+      source: opts.source,
+      search: opts.search,
+      limit: opts.limit,
+      offset: opts.offset,
+      lite: opts.lite === void 0 ? void 0 : opts.lite,
+      runtime: opts.runtime,
+      endpoint: opts.endpoint,
+      actions: opts.actions && opts.actions.length > 0 ? opts.actions.join(",") : void 0,
+      status: opts.status && opts.status.length > 0 ? opts.status.join(",") : void 0,
+      status_min: opts.statusMin,
+      status_max: opts.statusMax,
+      sort: opts.sort,
+      dir: opts.dir
+    }), void 0, this.controlBaseUrl);
+  }
   /** Compute call — goes direct to the backend hosting this VM (no
    * control-plane hop). Returns a fully-populated VM handle. */
   async getVm(vmId) {
@@ -310,6 +338,10 @@ var VM = class _VM {
   vcpu_count;
   memory_mib;
   disk_mib;
+  network;
+  max_vcpus;
+  max_memory_mib;
+  min_memory_mib;
   started_at;
   root_source_vm_id;
   root_source_vm_name;
@@ -495,7 +527,7 @@ var VM = class _VM {
   async deleteSession(sessionId) {
     return this._client._request("DELETE", `${vmPath(this.id)}/sessions/${pathSegment(sessionId)}`, void 0, this.baseUrl);
   }
-  // ── Tunnels: opened as a side effect of fork/run, addressed by port ─
+  // ── Tunnels: VM-scoped, addressed by recoverable tunnel key ───────
   async listTunnels(opts = {}) {
     return this._client._request("GET", buildQuery(`${vmPath(this.id)}/tunnels`, {
       cursor: opts.cursor,
@@ -503,11 +535,14 @@ var VM = class _VM {
       state: opts.state
     }), void 0, this.baseUrl);
   }
-  async getTunnel(port) {
-    return this._client._request("GET", `${vmPath(this.id)}/tunnels/${port}`, void 0, this.baseUrl);
+  async createTunnel(request = {}) {
+    return this._client._request("POST", `${vmPath(this.id)}/tunnels`, request, this.baseUrl);
+  }
+  async getTunnel(key) {
+    return this._client._request("GET", `${vmPath(this.id)}/tunnels/${pathSegment(key)}`, void 0, this.baseUrl);
   }
-  async deleteTunnel(port) {
-    return this._client._request("DELETE", `${vmPath(this.id)}/tunnels/${port}`, void 0, this.baseUrl);
+  async deleteTunnel(key) {
+    return this._client._request("DELETE", `${vmPath(this.id)}/tunnels/${pathSegment(key)}`, void 0, this.baseUrl);
   }
 };
 function buildQuery(path, params) {
@@ -608,8 +643,7 @@ function parseRunResponse(payload) {
     return {
       type: "background",
       runId: body.run_id,
-      state: typeof body.state === "string" ? body.state : "running",
-      tunnels: Array.isArray(body.tunnels) ? body.tunnels : []
+      state: typeof body.state === "string" ? body.state : "running"
     };
   }
   throw new ArkerError("internal", "unrecognized run response shape", 200);
@@ -881,7 +915,7 @@ async function cmdRun(args, client) {
     process.exitCode = result.exitCode === 0 ? 0 : result.exitCode;
     return;
   }
-  out({ run_id: result.runId, tunnels: result.tunnels });
+  out({ run_id: result.runId, state: result.state });
 }
 async function cmdRuns(args, client) {
   const sub = args.positional[0];
@@ -1039,27 +1073,35 @@ async function cmdTunnels(args, client) {
       });
       if (args.flags.json) return out(res);
       for (const t of res.tunnels) {
-        out(`${t.port}	${t.state}	${t.protocol}	${t.url ?? "-"}`);
+        out(`${t.tunnel_key ?? "-"}	${t.port}	${t.state}	${t.protocol}	${t.url ?? "-"}`);
       }
       if (res.next_cursor) out(`# next_cursor=${res.next_cursor}`);
       return;
     }
+    case "create": {
+      if (!vm) die("usage: arker tunnels create <vm_id> [--ports 80,8080] [--auth-mode open|authenticated]");
+      const tunnel = await client.vm(vm).createTunnel({
+        ports: parsePorts(args.flags.ports),
+        auth_mode: args.flags["auth-mode"]
+      });
+      return out(tunnel);
+    }
     case "get": {
-      if (!vm) die("usage: arker tunnels get <vm_id> <port>");
-      const port = Number(rest[1] ?? die("missing port"));
-      out(await client.vm(vm).getTunnel(port));
+      if (!vm) die("usage: arker tunnels get <vm_id> <key>");
+      const key = rest[1] ?? die("missing key");
+      out(await client.vm(vm).getTunnel(key));
       return;
     }
     case "rm":
     case "delete": {
-      if (!vm) die("usage: arker tunnels rm <vm_id> <port>");
-      const port = Number(rest[1] ?? die("missing port"));
-      const r = await client.vm(vm).deleteTunnel(port);
-      out(r.deleted ? `deleted tunnel ${port}` : "delete failed");
+      if (!vm) die("usage: arker tunnels rm <vm_id> <key>");
+      const key = rest[1] ?? die("missing key");
+      const r = await client.vm(vm).deleteTunnel(key);
+      out(r.deleted ? `deleted tunnel ${key}` : "delete failed");
       return;
     }
     default:
-      die(`usage: arker tunnels <ls|get|rm> ...`);
+      die(`usage: arker tunnels <ls|create|get|rm> ...`);
   }
 }
 async function cmdFilesystems(args, client) {
@@ -1221,6 +1263,10 @@ function boolFlag(args, name) {
   if (v === "false" || v === "0") return false;
   return true;
 }
+function parsePorts(value) {
+  if (typeof value !== "string" || value.trim() === "") return void 0;
+  return value.split(",").map((part) => Number(part.trim())).filter((port) => Number.isFinite(port));
+}
 async function readAllStdin() {
   const chunks = [];
   for await (const chunk of import_node_process.stdin) chunks.push(chunk);

package/dist/cli.js

@@ -3,7 +3,7 @@ import {
   ARKER_ORG_ID,
   Arker,
   ArkerError
-} from "./chunk-PI3H3TGC.js";
+} from "./chunk-YGZOUXII.js";
 
 // src/cli.ts
 import { readFileSync, existsSync } from "fs";
@@ -171,7 +171,7 @@ async function cmdRun(args, client) {
     process.exitCode = result.exitCode === 0 ? 0 : result.exitCode;
     return;
   }
-  out({ run_id: result.runId, tunnels: result.tunnels });
+  out({ run_id: result.runId, state: result.state });
 }
 async function cmdRuns(args, client) {
   const sub = args.positional[0];
@@ -329,27 +329,35 @@ async function cmdTunnels(args, client) {
       });
       if (args.flags.json) return out(res);
       for (const t of res.tunnels) {
-        out(`${t.port}	${t.state}	${t.protocol}	${t.url ?? "-"}`);
+        out(`${t.tunnel_key ?? "-"}	${t.port}	${t.state}	${t.protocol}	${t.url ?? "-"}`);
       }
       if (res.next_cursor) out(`# next_cursor=${res.next_cursor}`);
       return;
     }
+    case "create": {
+      if (!vm) die("usage: arker tunnels create <vm_id> [--ports 80,8080] [--auth-mode open|authenticated]");
+      const tunnel = await client.vm(vm).createTunnel({
+        ports: parsePorts(args.flags.ports),
+        auth_mode: args.flags["auth-mode"]
+      });
+      return out(tunnel);
+    }
     case "get": {
-      if (!vm) die("usage: arker tunnels get <vm_id> <port>");
-      const port = Number(rest[1] ?? die("missing port"));
-      out(await client.vm(vm).getTunnel(port));
+      if (!vm) die("usage: arker tunnels get <vm_id> <key>");
+      const key = rest[1] ?? die("missing key");
+      out(await client.vm(vm).getTunnel(key));
       return;
     }
     case "rm":
     case "delete": {
-      if (!vm) die("usage: arker tunnels rm <vm_id> <port>");
-      const port = Number(rest[1] ?? die("missing port"));
-      const r = await client.vm(vm).deleteTunnel(port);
-      out(r.deleted ? `deleted tunnel ${port}` : "delete failed");
+      if (!vm) die("usage: arker tunnels rm <vm_id> <key>");
+      const key = rest[1] ?? die("missing key");
+      const r = await client.vm(vm).deleteTunnel(key);
+      out(r.deleted ? `deleted tunnel ${key}` : "delete failed");
       return;
     }
     default:
-      die(`usage: arker tunnels <ls|get|rm> ...`);
+      die(`usage: arker tunnels <ls|create|get|rm> ...`);
   }
 }
 async function cmdFilesystems(args, client) {
@@ -511,6 +519,10 @@ function boolFlag(args, name) {
   if (v === "false" || v === "0") return false;
   return true;
 }
+function parsePorts(value) {
+  if (typeof value !== "string" || value.trim() === "") return void 0;
+  return value.split(",").map((part) => Number(part.trim())).filter((port) => Number.isFinite(port));
+}
 async function readAllStdin() {
   const chunks = [];
   for await (const chunk of input) chunks.push(chunk);

package/dist/index.cjs

@@ -161,7 +161,8 @@ var Arker = class {
       memory_mib: src.memory_mib ?? null,
       max_memory_mib: src.max_memory_mib ?? null,
       disk_mib: src.disk_mib ?? null,
-      durable: src.durable ?? null
+      durable: src.durable ?? null,
+      tunnel: src.tunnel ?? null
     };
     const useBurst = sourceOrgId === ARKER_ORG_ID && src.sourceVmName !== void 0 && isBurstRef(src.sourceVmName);
     const baseUrl = useBurst && this.burstBaseUrl ? this.burstBaseUrl : this.baseUrl;
@@ -192,6 +193,33 @@ var Arker = class {
     });
     return { vms, nextCursor: resp.next_cursor ?? null };
   }
+  /**
+   * List run activity visible to the authenticated caller across VMs,
+   * providers, and regions. Admin call — routed through the control plane.
+   */
+  async listRuns(opts = {}) {
+    return this._request("GET", buildQuery("/v1/runs", {
+      since: opts.since,
+      until: opts.until,
+      vm: opts.vm,
+      vms: opts.vmIds && opts.vmIds.length > 0 ? opts.vmIds.join(",") : void 0,
+      region: opts.region,
+      provider: opts.provider,
+      source: opts.source,
+      search: opts.search,
+      limit: opts.limit,
+      offset: opts.offset,
+      lite: opts.lite === void 0 ? void 0 : opts.lite,
+      runtime: opts.runtime,
+      endpoint: opts.endpoint,
+      actions: opts.actions && opts.actions.length > 0 ? opts.actions.join(",") : void 0,
+      status: opts.status && opts.status.length > 0 ? opts.status.join(",") : void 0,
+      status_min: opts.statusMin,
+      status_max: opts.statusMax,
+      sort: opts.sort,
+      dir: opts.dir
+    }), void 0, this.controlBaseUrl);
+  }
   /** Compute call — goes direct to the backend hosting this VM (no
    * control-plane hop). Returns a fully-populated VM handle. */
   async getVm(vmId) {
@@ -306,6 +334,10 @@ var VM = class _VM {
   vcpu_count;
   memory_mib;
   disk_mib;
+  network;
+  max_vcpus;
+  max_memory_mib;
+  min_memory_mib;
   started_at;
   root_source_vm_id;
   root_source_vm_name;
@@ -491,7 +523,7 @@ var VM = class _VM {
   async deleteSession(sessionId) {
     return this._client._request("DELETE", `${vmPath(this.id)}/sessions/${pathSegment(sessionId)}`, void 0, this.baseUrl);
   }
-  // ── Tunnels: opened as a side effect of fork/run, addressed by port ─
+  // ── Tunnels: VM-scoped, addressed by recoverable tunnel key ───────
   async listTunnels(opts = {}) {
     return this._client._request("GET", buildQuery(`${vmPath(this.id)}/tunnels`, {
       cursor: opts.cursor,
@@ -499,11 +531,14 @@ var VM = class _VM {
       state: opts.state
     }), void 0, this.baseUrl);
   }
-  async getTunnel(port) {
-    return this._client._request("GET", `${vmPath(this.id)}/tunnels/${port}`, void 0, this.baseUrl);
+  async createTunnel(request = {}) {
+    return this._client._request("POST", `${vmPath(this.id)}/tunnels`, request, this.baseUrl);
+  }
+  async getTunnel(key) {
+    return this._client._request("GET", `${vmPath(this.id)}/tunnels/${pathSegment(key)}`, void 0, this.baseUrl);
   }
-  async deleteTunnel(port) {
-    return this._client._request("DELETE", `${vmPath(this.id)}/tunnels/${port}`, void 0, this.baseUrl);
+  async deleteTunnel(key) {
+    return this._client._request("DELETE", `${vmPath(this.id)}/tunnels/${pathSegment(key)}`, void 0, this.baseUrl);
   }
 };
 function buildQuery(path, params) {
@@ -604,8 +639,7 @@ function parseRunResponse(payload) {
     return {
       type: "background",
       runId: body.run_id,
-      state: typeof body.state === "string" ? body.state : "running",
-      tunnels: Array.isArray(body.tunnels) ? body.tunnels : []
+      state: typeof body.state === "string" ? body.state : "running"
     };
   }
   throw new ArkerError("internal", "unrecognized run response shape", 200);

package/dist/index.d.cts

@@ -16,7 +16,13 @@ interface components {
         VmState: "idle" | "running";
         SessionState: components["schemas"]["VmState"];
         /**
-         * @description Lifecycle state for a Run. `running` = command in flight. `completed` = ran to completion; `exit_code` conveys success (0) or a non-zero program exit (still `completed`). `failed` = the platform could not run/finish the command (worker died, evicted mid-run); `fail_reason` explains why, distinct from the program's `stderr`. `cancelled` = cancelled by the client.
+         * @description Lifecycle state for a Run. `running` = command in flight.
+         *     `completed` = the command ran to completion; `exit_code` conveys
+         *     success (0) or a non-zero program exit (a non-zero exit is still
+         *     `completed`). `failed` = the platform could not run or finish the
+         *     command (host died, evicted mid-run, exec error); `fail_reason`
+         *     explains why, distinct from the program's `stderr`. `cancelled` =
+         *     cancelled by the client.
          * @enum {string}
          */
         RunState: "running" | "completed" | "failed" | "cancelled";
@@ -67,6 +73,8 @@ interface components {
             max_memory_mib?: number | null;
             disk_mib?: number | null;
             durable?: boolean | null;
+            /** @description Optional VM-scoped tunnel customization. Omitting it allocates an open any-port tunnel where supported. */
+            tunnel?: components["schemas"]["TunnelRequest"] | null;
         };
         Session: {
             session_id: string;
@@ -111,6 +119,14 @@ interface components {
             vcpu_count?: number | null;
             memory_mib?: number | null;
             disk_mib?: number | null;
+            /** @description Effective VM fork-time egress policy. */
+            network?: components["schemas"]["NetworkPolicy"];
+            /** @description Hard vCPU ceiling for a fork of this VM (KVM slot count). Requesting more fails the run. */
+            max_vcpus?: number | null;
+            /** @description Hard memory ceiling (MiB) a fork can hotplug up to. */
+            max_memory_mib?: number | null;
+            /** @description Non-hotpluggable base memory (MiB). */
+            min_memory_mib?: number | null;
             /** @description Worker host that owns this VM. Used by routers to populate caches without a fresh PlanetScale lookup. */
             worker_id?: string | null;
             sessions: components["schemas"]["Session"][];
@@ -172,6 +188,10 @@ interface components {
         };
         RunResponse: components["schemas"]["CompletedRunResponse"] | components["schemas"]["BackgroundRunResponse"];
         CompletedRunResponse: {
+            /** @description The run's own id. Present for executed runs; absent for operation acks (release/signal) with no run record. */
+            run_id?: string | null;
+            /** @description Lifecycle state — "completed" for this shape. Read this (not the variant) for completion, uniformly with the run-status (`Run`) shape. */
+            state?: string;
             stdout: string;
             /**
              * @description TODO(encoding-normalize): goal is to always emit utf-8 from
@@ -186,8 +206,8 @@ interface components {
         };
         BackgroundRunResponse: {
             run_id: string;
-            /** @default [] */
-            tunnels?: components["schemas"]["Tunnel"][];
+            /** @description Lifecycle state — "running" for a backgrounded run. */
+            state?: string;
         };
         Run: {
             run_id: string;
@@ -197,13 +217,12 @@ interface components {
             started_at: string;
             completed_at?: string | null;
             exit_code: number | null;
-            /** @description System failure explanation when `state` is `failed` (e.g. "worker died: <id>"). Distinct from `stderr`, which is the program's own output. */
+            /** @description System failure explanation when `state` is `failed` (e.g. "host died:&nbsp;<id>", "evicted mid-run"). Distinct from `stderr`, which is the program's own error output. Null for runs that ran to completion. */
             fail_reason?: string | null;
             stdout: string;
             stdout_encoding: string;
             stderr: string;
             stderr_encoding: string;
-            tunnels: components["schemas"]["Tunnel"][];
             /** @default 0 */
             retry_count?: number;
             vm_id?: string | null;
@@ -221,7 +240,7 @@ interface components {
             started_at: string;
             completed_at?: string | null;
             exit_code: number | null;
-            /** @description System failure explanation when `state` is `failed` (e.g. "worker died: <id>"). Distinct from `stderr`, which is the program's own output. */
+            /** @description System failure explanation when `state` is `failed` — see `Run.fail_reason`. Distinct from the program's `stderr`. */
             fail_reason?: string | null;
             vm_id?: string | null;
             vm_name?: string | null;
@@ -234,6 +253,48 @@ interface components {
             runs: components["schemas"]["RunSummary"][];
             next_cursor?: string | null;
         };
+        OrgRunListRow: {
+            /** @enum {string} */
+            source: "cf" | "arkerd";
+            t_ms: number;
+            request_id: string;
+            run_id: string;
+            vm_id: string;
+            session_id: string;
+            region: string;
+            status: number;
+            total_ms: number;
+            queue_ms: number;
+            lambda_call_ms: number;
+            lambda_duration_ms: number;
+            executor_duration_ms: number;
+            executor_kind: string;
+            executor_cpu_ms: number;
+            executor_mem_mb: number;
+            lambda_cpu_ms: number;
+            lambda_mem_mb: number;
+            vm_vcpus: number;
+            vm_memory_mib: number;
+            path: string;
+            method: string;
+            command: string;
+            source_vm_id: string;
+            exit_code: number | null;
+            endpoint: string;
+            api_key_prefix: string;
+            body_bytes_in: number;
+            body_bytes_out: number;
+            body_in: string;
+            body_out: string;
+        };
+        ListOrgRunsResponse: {
+            since: number;
+            until: number;
+            limit: number;
+            offset: number;
+            lite: boolean;
+            rows: components["schemas"]["OrgRunListRow"][];
+        };
         NetworkStatus: {
             inbound: components["schemas"]["InboundStatus"];
         };
@@ -250,11 +311,11 @@ interface components {
             url?: string | null;
         };
         Tunnel: {
-            /** @description The VM this tunnel belongs to. Always populated, including when embedded in `Run.tunnels`. */
+            /** @description The VM this tunnel belongs to. Always populated so flat tunnel listings work without restructuring. */
             vm_id: string;
             /** @description Unique-per-VM identifier. */
             port: number;
-            /** @description The Run that opened this tunnel, if any. Tunnels allocated at fork time have `run_id: null`. */
+            /** @description The Run that opened this tunnel, if any. VM-scoped tunnels created at fork time or via `POST /vms/{id}/tunnels` have `run_id: null`. */
             run_id?: string | null;
             visibility: string;
             protocol: string;
@@ -267,6 +328,15 @@ interface components {
             region?: string | null;
             /** @enum {string|null} */
             provider?: "aws" | "aws-burst" | null;
+            /** @description Recoverable tunnel identity embedded in URLs (`p{port}-{key}`). Not a secret. Present on VM-scoped tunnel responses. */
+            tunnel_key?: string | null;
+            /**
+             * @description `open` or `authenticated` for VM-scoped tunnels.
+             * @enum {string|null}
+             */
+            auth_mode?: "open" | "authenticated" | null;
+            /** @description One-time bearer secret returned only when allocating an authenticated tunnel; never echoed on listings. */
+            auth_token?: string | null;
         };
         ListTunnelsResponse: {
             tunnels: components["schemas"]["Tunnel"][];
@@ -298,16 +368,7 @@ interface components {
             filesystem_id: string;
             /** @description VM-side path where the filesystem is mounted. Same field name as used by `SyncReadRequest.path`. */
             path: string;
-            created_at: string;
-            vm_name?: string | null;
-            filesystem_name?: string | null;
-            source_org_id?: string | null;
             region?: string | null;
-            /** @enum {string|null} */
-            provider?: "aws" | "aws-burst" | null;
-            live?: boolean;
-            live_error?: string;
-            idempotent?: boolean;
         };
         ListSyncsResponse: {
             syncs: components["schemas"]["Sync"][];
@@ -318,17 +379,12 @@ interface components {
         };
         SyncCreateRequest: {
             filesystem_id: string;
-            /** @description VM-side path. Returns `ErrorResponse` code `conflict` if a sync already exists at this path. */
             path?: string;
         };
         SyncReadRequest: {
-            /** @constant */
-            op: "read";
             path: string;
         };
         SyncWriteRequest: {
-            /** @constant */
-            op: "write";
             writes: components["schemas"]["SyncWriteEntry"][];
         };
         SyncWriteEntry: components["schemas"]["SyncChunkWrite"] | components["schemas"]["SyncPresignedWriteRequest"] | components["schemas"]["SyncPresignedWriteCommit"];
@@ -433,6 +489,19 @@ interface components {
         FilesystemCreateRequest: {
             name: string;
         };
+        TunnelRequest: {
+            /**
+             * @description Allowed VM ports for this tunnel. Omitted, null, or empty means any port.
+             * @default []
+             */
+            ports?: number[] | null;
+            /**
+             * @description `open` allows unauthenticated tunnel requests. `authenticated` returns a one-time bearer `auth_token` and requires it on tunnel requests.
+             * @default open
+             * @enum {string|null}
+             */
+            auth_mode?: "open" | "authenticated" | null;
+        };
     };
     responses: {
         /** @description API error. */
@@ -459,12 +528,13 @@ interface components {
         RunId: string;
         SessionId: string;
         SyncId: string;
-        TunnelPort: number;
         FilesystemId: string;
         /** @description Opaque pagination cursor returned by the previous page's `next_cursor`. */
         Cursor: string | null;
         /** @description Max items per page. Backend caps may apply. */
         Limit: number;
+        /** @description Recoverable tunnel identity returned as `Tunnel.tunnel_key` and embedded in tunnel URLs. */
+        TunnelKey: string;
     };
     requestBodies: never;
     headers: never;
@@ -564,6 +634,7 @@ type RunOptions = Partial<Omit<RunRequest, "command">> & {
 };
 type InboundPortRequest = ApiSchema<"InboundPortRequest">;
 type NetworkRequest = ApiSchema<"NetworkRequest">;
+type TunnelRequest = ApiSchema<"TunnelRequest">;
 type Tunnel = ApiSchema<"Tunnel">;
 type ListTunnelsResponse = ApiSchema<"ListTunnelsResponse">;
 type DeleteTunnelResponse = ApiSchema<"DeleteTunnelResponse">;
@@ -574,6 +645,9 @@ type BackgroundRunResponse = ApiSchema<"BackgroundRunResponse">;
 type Run = ApiSchema<"Run">;
 type RunSummary = ApiSchema<"RunSummary">;
 type ListRunsResponse = ApiSchema<"ListRunsResponse">;
+type OrgRunListRow = ApiSchema<"OrgRunListRow">;
+type ListOrgRunsResponse = ApiSchema<"ListOrgRunsResponse">;
+type RunListRow = OrgRunListRow;
 type CancelRunResponse = ApiSchema<"CancelRunResponse">;
 type CreateSessionRequest = ApiSchema<"CreateSessionRequest">;
 type ResizeRequest = ApiSchema<"ResizeRequest">;
@@ -611,9 +685,29 @@ interface BackgroundRunResult {
     runId: string;
     /** Lifecycle state — "running". */
     state: string;
-    tunnels: Tunnel[];
 }
 type RunResult = CompletedRunResult | BackgroundRunResult;
+interface ListOrgRunsOptions {
+    since?: number;
+    until?: number;
+    vm?: string;
+    vmIds?: string[];
+    region?: string;
+    provider?: "aws" | "aws-burst";
+    source?: "cf" | "arkerd";
+    search?: string;
+    limit?: number;
+    offset?: number;
+    lite?: boolean;
+    runtime?: string;
+    endpoint?: "run" | "fork" | "sync";
+    actions?: string[];
+    status?: string[];
+    statusMin?: number;
+    statusMax?: number;
+    sort?: "when" | "status" | "path" | "total" | "queue" | "your_code" | "runtime";
+    dir?: "asc" | "desc";
+}
 declare class ArkerError extends Error {
     readonly code: string;
     readonly status: number;
@@ -687,6 +781,11 @@ declare class Arker {
         vms: VM[];
         nextCursor: string | null;
     }>;
+    /**
+     * List run activity visible to the authenticated caller across VMs,
+     * providers, and regions. Admin call — routed through the control plane.
+     */
+    listRuns(opts?: ListOrgRunsOptions): Promise<ListOrgRunsResponse>;
     /** Compute call — goes direct to the backend hosting this VM (no
      * control-plane hop). Returns a fully-populated VM handle. */
     getVm(vmId: string): Promise<VM>;
@@ -729,6 +828,10 @@ declare class VM {
     readonly vcpu_count?: number | null;
     readonly memory_mib?: number | null;
     readonly disk_mib?: number | null;
+    readonly network?: NetworkPolicy;
+    readonly max_vcpus?: number | null;
+    readonly max_memory_mib?: number | null;
+    readonly min_memory_mib?: number | null;
     readonly started_at?: string | null;
     readonly root_source_vm_id?: string | null;
     readonly root_source_vm_name?: string | null;
@@ -790,8 +893,9 @@ declare class VM {
     listTunnels(opts?: ListOpts & {
         state?: TunnelState;
     }): Promise<ListTunnelsResponse>;
-    getTunnel(port: number): Promise<Tunnel>;
-    deleteTunnel(port: number): Promise<DeleteTunnelResponse>;
+    createTunnel(request?: TunnelRequest): Promise<Tunnel>;
+    getTunnel(key: string): Promise<Tunnel>;
+    deleteTunnel(key: string): Promise<DeleteTunnelResponse>;
 }
 
-export { ARKER_ORG_ID, Arker, ArkerError, type ArkerOptions, type BackgroundRunResponse, type BackgroundRunResult, CHUNK_SIZE, type CancelRunResponse, type CompletedRunResponse, type CompletedRunResult, type CreateSessionRequest, type DeleteFilesystemResponse, type DeleteSessionResponse, type DeleteSyncResponse, type DeleteTunnelResponse, type DeleteVmResponse, type ErrorCode, type ErrorResponse, type Filesystem, type FilesystemCreateRequest, type ForkOptions, type ForkRequest, type ForkSource, type InboundPortRequest, type ListFilesystemsResponse, type ListOpts, type ListRunsResponse, type ListSessionsResponse, type ListSyncsResponse, type ListTunnelsResponse, type ListVmsResponse, type NetworkPolicy, type NetworkPolicyInput, type NetworkRequest, type NetworkStatus, type ResizeRequest, type ResizeResponse, type ResourceKind, type RetryOptions, type Run, type RunInboundPortRequest, type RunNetworkRequest, type RunNetworkStatus, type RunOptions, type RunRequest, type RunResponse, type RunResult, type RunState, type RunStatusResponse, type RunSummary, type RunTunnelStatus, type Session, type SessionInfo, type SessionState, type Sync, type SyncByteRange, type SyncChunkWriteResult, type SyncCommitWriteResult, type SyncCreateRequest, type SyncPresignedWriteRequestResult, type SyncReadInlineResponse, type SyncReadPresignedResponse, type SyncReadRequest, type SyncReadResponse, type SyncWriteRequest, type SyncWriteResponse, type SyncWriteResult, type Tunnel, type TunnelState, VM, type Vm, type VmState };
+export { ARKER_ORG_ID, Arker, ArkerError, type ArkerOptions, type BackgroundRunResponse, type BackgroundRunResult, CHUNK_SIZE, type CancelRunResponse, type CompletedRunResponse, type CompletedRunResult, type CreateSessionRequest, type DeleteFilesystemResponse, type DeleteSessionResponse, type DeleteSyncResponse, type DeleteTunnelResponse, type DeleteVmResponse, type ErrorCode, type ErrorResponse, type Filesystem, type FilesystemCreateRequest, type ForkOptions, type ForkRequest, type ForkSource, type InboundPortRequest, type ListFilesystemsResponse, type ListOpts, type ListOrgRunsOptions, type ListOrgRunsResponse, type ListRunsResponse, type ListSessionsResponse, type ListSyncsResponse, type ListTunnelsResponse, type ListVmsResponse, type NetworkPolicy, type NetworkPolicyInput, type NetworkRequest, type NetworkStatus, type OrgRunListRow, type ResizeRequest, type ResizeResponse, type ResourceKind, type RetryOptions, type Run, type RunInboundPortRequest, type RunListRow, type RunNetworkRequest, type RunNetworkStatus, type RunOptions, type RunRequest, type RunResponse, type RunResult, type RunState, type RunStatusResponse, type RunSummary, type RunTunnelStatus, type Session, type SessionInfo, type SessionState, type Sync, type SyncByteRange, type SyncChunkWriteResult, type SyncCommitWriteResult, type SyncCreateRequest, type SyncPresignedWriteRequestResult, type SyncReadInlineResponse, type SyncReadPresignedResponse, type SyncReadRequest, type SyncReadResponse, type SyncWriteRequest, type SyncWriteResponse, type SyncWriteResult, type Tunnel, type TunnelRequest, type TunnelState, VM, type Vm, type VmState };

package/dist/index.d.ts

@@ -16,7 +16,13 @@ interface components {
         VmState: "idle" | "running";
         SessionState: components["schemas"]["VmState"];
         /**
-         * @description Lifecycle state for a Run. `running` = command in flight. `completed` = ran to completion; `exit_code` conveys success (0) or a non-zero program exit (still `completed`). `failed` = the platform could not run/finish the command (worker died, evicted mid-run); `fail_reason` explains why, distinct from the program's `stderr`. `cancelled` = cancelled by the client.
+         * @description Lifecycle state for a Run. `running` = command in flight.
+         *     `completed` = the command ran to completion; `exit_code` conveys
+         *     success (0) or a non-zero program exit (a non-zero exit is still
+         *     `completed`). `failed` = the platform could not run or finish the
+         *     command (host died, evicted mid-run, exec error); `fail_reason`
+         *     explains why, distinct from the program's `stderr`. `cancelled` =
+         *     cancelled by the client.
          * @enum {string}
          */
         RunState: "running" | "completed" | "failed" | "cancelled";
@@ -67,6 +73,8 @@ interface components {
             max_memory_mib?: number | null;
             disk_mib?: number | null;
             durable?: boolean | null;
+            /** @description Optional VM-scoped tunnel customization. Omitting it allocates an open any-port tunnel where supported. */
+            tunnel?: components["schemas"]["TunnelRequest"] | null;
         };
         Session: {
             session_id: string;
@@ -111,6 +119,14 @@ interface components {
             vcpu_count?: number | null;
             memory_mib?: number | null;
             disk_mib?: number | null;
+            /** @description Effective VM fork-time egress policy. */
+            network?: components["schemas"]["NetworkPolicy"];
+            /** @description Hard vCPU ceiling for a fork of this VM (KVM slot count). Requesting more fails the run. */
+            max_vcpus?: number | null;
+            /** @description Hard memory ceiling (MiB) a fork can hotplug up to. */
+            max_memory_mib?: number | null;
+            /** @description Non-hotpluggable base memory (MiB). */
+            min_memory_mib?: number | null;
             /** @description Worker host that owns this VM. Used by routers to populate caches without a fresh PlanetScale lookup. */
             worker_id?: string | null;
             sessions: components["schemas"]["Session"][];
@@ -172,6 +188,10 @@ interface components {
         };
         RunResponse: components["schemas"]["CompletedRunResponse"] | components["schemas"]["BackgroundRunResponse"];
         CompletedRunResponse: {
+            /** @description The run's own id. Present for executed runs; absent for operation acks (release/signal) with no run record. */
+            run_id?: string | null;
+            /** @description Lifecycle state — "completed" for this shape. Read this (not the variant) for completion, uniformly with the run-status (`Run`) shape. */
+            state?: string;
             stdout: string;
             /**
              * @description TODO(encoding-normalize): goal is to always emit utf-8 from
@@ -186,8 +206,8 @@ interface components {
         };
         BackgroundRunResponse: {
             run_id: string;
-            /** @default [] */
-            tunnels?: components["schemas"]["Tunnel"][];
+            /** @description Lifecycle state — "running" for a backgrounded run. */
+            state?: string;
         };
         Run: {
             run_id: string;
@@ -197,13 +217,12 @@ interface components {
             started_at: string;
             completed_at?: string | null;
             exit_code: number | null;
-            /** @description System failure explanation when `state` is `failed` (e.g. "worker died: <id>"). Distinct from `stderr`, which is the program's own output. */
+            /** @description System failure explanation when `state` is `failed` (e.g. "host died:&nbsp;<id>", "evicted mid-run"). Distinct from `stderr`, which is the program's own error output. Null for runs that ran to completion. */
             fail_reason?: string | null;
             stdout: string;
             stdout_encoding: string;
             stderr: string;
             stderr_encoding: string;
-            tunnels: components["schemas"]["Tunnel"][];
             /** @default 0 */
             retry_count?: number;
             vm_id?: string | null;
@@ -221,7 +240,7 @@ interface components {
             started_at: string;
             completed_at?: string | null;
             exit_code: number | null;
-            /** @description System failure explanation when `state` is `failed` (e.g. "worker died: <id>"). Distinct from `stderr`, which is the program's own output. */
+            /** @description System failure explanation when `state` is `failed` — see `Run.fail_reason`. Distinct from the program's `stderr`. */
             fail_reason?: string | null;
             vm_id?: string | null;
             vm_name?: string | null;
@@ -234,6 +253,48 @@ interface components {
             runs: components["schemas"]["RunSummary"][];
             next_cursor?: string | null;
         };
+        OrgRunListRow: {
+            /** @enum {string} */
+            source: "cf" | "arkerd";
+            t_ms: number;
+            request_id: string;
+            run_id: string;
+            vm_id: string;
+            session_id: string;
+            region: string;
+            status: number;
+            total_ms: number;
+            queue_ms: number;
+            lambda_call_ms: number;
+            lambda_duration_ms: number;
+            executor_duration_ms: number;
+            executor_kind: string;
+            executor_cpu_ms: number;
+            executor_mem_mb: number;
+            lambda_cpu_ms: number;
+            lambda_mem_mb: number;
+            vm_vcpus: number;
+            vm_memory_mib: number;
+            path: string;
+            method: string;
+            command: string;
+            source_vm_id: string;
+            exit_code: number | null;
+            endpoint: string;
+            api_key_prefix: string;
+            body_bytes_in: number;
+            body_bytes_out: number;
+            body_in: string;
+            body_out: string;
+        };
+        ListOrgRunsResponse: {
+            since: number;
+            until: number;
+            limit: number;
+            offset: number;
+            lite: boolean;
+            rows: components["schemas"]["OrgRunListRow"][];
+        };
         NetworkStatus: {
             inbound: components["schemas"]["InboundStatus"];
         };
@@ -250,11 +311,11 @@ interface components {
             url?: string | null;
         };
         Tunnel: {
-            /** @description The VM this tunnel belongs to. Always populated, including when embedded in `Run.tunnels`. */
+            /** @description The VM this tunnel belongs to. Always populated so flat tunnel listings work without restructuring. */
             vm_id: string;
             /** @description Unique-per-VM identifier. */
             port: number;
-            /** @description The Run that opened this tunnel, if any. Tunnels allocated at fork time have `run_id: null`. */
+            /** @description The Run that opened this tunnel, if any. VM-scoped tunnels created at fork time or via `POST /vms/{id}/tunnels` have `run_id: null`. */
             run_id?: string | null;
             visibility: string;
             protocol: string;
@@ -267,6 +328,15 @@ interface components {
             region?: string | null;
             /** @enum {string|null} */
             provider?: "aws" | "aws-burst" | null;
+            /** @description Recoverable tunnel identity embedded in URLs (`p{port}-{key}`). Not a secret. Present on VM-scoped tunnel responses. */
+            tunnel_key?: string | null;
+            /**
+             * @description `open` or `authenticated` for VM-scoped tunnels.
+             * @enum {string|null}
+             */
+            auth_mode?: "open" | "authenticated" | null;
+            /** @description One-time bearer secret returned only when allocating an authenticated tunnel; never echoed on listings. */
+            auth_token?: string | null;
         };
         ListTunnelsResponse: {
             tunnels: components["schemas"]["Tunnel"][];
@@ -298,16 +368,7 @@ interface components {
             filesystem_id: string;
             /** @description VM-side path where the filesystem is mounted. Same field name as used by `SyncReadRequest.path`. */
             path: string;
-            created_at: string;
-            vm_name?: string | null;
-            filesystem_name?: string | null;
-            source_org_id?: string | null;
             region?: string | null;
-            /** @enum {string|null} */
-            provider?: "aws" | "aws-burst" | null;
-            live?: boolean;
-            live_error?: string;
-            idempotent?: boolean;
         };
         ListSyncsResponse: {
             syncs: components["schemas"]["Sync"][];
@@ -318,17 +379,12 @@ interface components {
         };
         SyncCreateRequest: {
             filesystem_id: string;
-            /** @description VM-side path. Returns `ErrorResponse` code `conflict` if a sync already exists at this path. */
             path?: string;
         };
         SyncReadRequest: {
-            /** @constant */
-            op: "read";
             path: string;
         };
         SyncWriteRequest: {
-            /** @constant */
-            op: "write";
             writes: components["schemas"]["SyncWriteEntry"][];
         };
         SyncWriteEntry: components["schemas"]["SyncChunkWrite"] | components["schemas"]["SyncPresignedWriteRequest"] | components["schemas"]["SyncPresignedWriteCommit"];
@@ -433,6 +489,19 @@ interface components {
         FilesystemCreateRequest: {
             name: string;
         };
+        TunnelRequest: {
+            /**
+             * @description Allowed VM ports for this tunnel. Omitted, null, or empty means any port.
+             * @default []
+             */
+            ports?: number[] | null;
+            /**
+             * @description `open` allows unauthenticated tunnel requests. `authenticated` returns a one-time bearer `auth_token` and requires it on tunnel requests.
+             * @default open
+             * @enum {string|null}
+             */
+            auth_mode?: "open" | "authenticated" | null;
+        };
     };
     responses: {
         /** @description API error. */
@@ -459,12 +528,13 @@ interface components {
         RunId: string;
         SessionId: string;
         SyncId: string;
-        TunnelPort: number;
         FilesystemId: string;
         /** @description Opaque pagination cursor returned by the previous page's `next_cursor`. */
         Cursor: string | null;
         /** @description Max items per page. Backend caps may apply. */
         Limit: number;
+        /** @description Recoverable tunnel identity returned as `Tunnel.tunnel_key` and embedded in tunnel URLs. */
+        TunnelKey: string;
     };
     requestBodies: never;
     headers: never;
@@ -564,6 +634,7 @@ type RunOptions = Partial<Omit<RunRequest, "command">> & {
 };
 type InboundPortRequest = ApiSchema<"InboundPortRequest">;
 type NetworkRequest = ApiSchema<"NetworkRequest">;
+type TunnelRequest = ApiSchema<"TunnelRequest">;
 type Tunnel = ApiSchema<"Tunnel">;
 type ListTunnelsResponse = ApiSchema<"ListTunnelsResponse">;
 type DeleteTunnelResponse = ApiSchema<"DeleteTunnelResponse">;
@@ -574,6 +645,9 @@ type BackgroundRunResponse = ApiSchema<"BackgroundRunResponse">;
 type Run = ApiSchema<"Run">;
 type RunSummary = ApiSchema<"RunSummary">;
 type ListRunsResponse = ApiSchema<"ListRunsResponse">;
+type OrgRunListRow = ApiSchema<"OrgRunListRow">;
+type ListOrgRunsResponse = ApiSchema<"ListOrgRunsResponse">;
+type RunListRow = OrgRunListRow;
 type CancelRunResponse = ApiSchema<"CancelRunResponse">;
 type CreateSessionRequest = ApiSchema<"CreateSessionRequest">;
 type ResizeRequest = ApiSchema<"ResizeRequest">;
@@ -611,9 +685,29 @@ interface BackgroundRunResult {
     runId: string;
     /** Lifecycle state — "running". */
     state: string;
-    tunnels: Tunnel[];
 }
 type RunResult = CompletedRunResult | BackgroundRunResult;
+interface ListOrgRunsOptions {
+    since?: number;
+    until?: number;
+    vm?: string;
+    vmIds?: string[];
+    region?: string;
+    provider?: "aws" | "aws-burst";
+    source?: "cf" | "arkerd";
+    search?: string;
+    limit?: number;
+    offset?: number;
+    lite?: boolean;
+    runtime?: string;
+    endpoint?: "run" | "fork" | "sync";
+    actions?: string[];
+    status?: string[];
+    statusMin?: number;
+    statusMax?: number;
+    sort?: "when" | "status" | "path" | "total" | "queue" | "your_code" | "runtime";
+    dir?: "asc" | "desc";
+}
 declare class ArkerError extends Error {
     readonly code: string;
     readonly status: number;
@@ -687,6 +781,11 @@ declare class Arker {
         vms: VM[];
         nextCursor: string | null;
     }>;
+    /**
+     * List run activity visible to the authenticated caller across VMs,
+     * providers, and regions. Admin call — routed through the control plane.
+     */
+    listRuns(opts?: ListOrgRunsOptions): Promise<ListOrgRunsResponse>;
     /** Compute call — goes direct to the backend hosting this VM (no
      * control-plane hop). Returns a fully-populated VM handle. */
     getVm(vmId: string): Promise<VM>;
@@ -729,6 +828,10 @@ declare class VM {
     readonly vcpu_count?: number | null;
     readonly memory_mib?: number | null;
     readonly disk_mib?: number | null;
+    readonly network?: NetworkPolicy;
+    readonly max_vcpus?: number | null;
+    readonly max_memory_mib?: number | null;
+    readonly min_memory_mib?: number | null;
     readonly started_at?: string | null;
     readonly root_source_vm_id?: string | null;
     readonly root_source_vm_name?: string | null;
@@ -790,8 +893,9 @@ declare class VM {
     listTunnels(opts?: ListOpts & {
         state?: TunnelState;
     }): Promise<ListTunnelsResponse>;
-    getTunnel(port: number): Promise<Tunnel>;
-    deleteTunnel(port: number): Promise<DeleteTunnelResponse>;
+    createTunnel(request?: TunnelRequest): Promise<Tunnel>;
+    getTunnel(key: string): Promise<Tunnel>;
+    deleteTunnel(key: string): Promise<DeleteTunnelResponse>;
 }
 
-export { ARKER_ORG_ID, Arker, ArkerError, type ArkerOptions, type BackgroundRunResponse, type BackgroundRunResult, CHUNK_SIZE, type CancelRunResponse, type CompletedRunResponse, type CompletedRunResult, type CreateSessionRequest, type DeleteFilesystemResponse, type DeleteSessionResponse, type DeleteSyncResponse, type DeleteTunnelResponse, type DeleteVmResponse, type ErrorCode, type ErrorResponse, type Filesystem, type FilesystemCreateRequest, type ForkOptions, type ForkRequest, type ForkSource, type InboundPortRequest, type ListFilesystemsResponse, type ListOpts, type ListRunsResponse, type ListSessionsResponse, type ListSyncsResponse, type ListTunnelsResponse, type ListVmsResponse, type NetworkPolicy, type NetworkPolicyInput, type NetworkRequest, type NetworkStatus, type ResizeRequest, type ResizeResponse, type ResourceKind, type RetryOptions, type Run, type RunInboundPortRequest, type RunNetworkRequest, type RunNetworkStatus, type RunOptions, type RunRequest, type RunResponse, type RunResult, type RunState, type RunStatusResponse, type RunSummary, type RunTunnelStatus, type Session, type SessionInfo, type SessionState, type Sync, type SyncByteRange, type SyncChunkWriteResult, type SyncCommitWriteResult, type SyncCreateRequest, type SyncPresignedWriteRequestResult, type SyncReadInlineResponse, type SyncReadPresignedResponse, type SyncReadRequest, type SyncReadResponse, type SyncWriteRequest, type SyncWriteResponse, type SyncWriteResult, type Tunnel, type TunnelState, VM, type Vm, type VmState };
+export { ARKER_ORG_ID, Arker, ArkerError, type ArkerOptions, type BackgroundRunResponse, type BackgroundRunResult, CHUNK_SIZE, type CancelRunResponse, type CompletedRunResponse, type CompletedRunResult, type CreateSessionRequest, type DeleteFilesystemResponse, type DeleteSessionResponse, type DeleteSyncResponse, type DeleteTunnelResponse, type DeleteVmResponse, type ErrorCode, type ErrorResponse, type Filesystem, type FilesystemCreateRequest, type ForkOptions, type ForkRequest, type ForkSource, type InboundPortRequest, type ListFilesystemsResponse, type ListOpts, type ListOrgRunsOptions, type ListOrgRunsResponse, type ListRunsResponse, type ListSessionsResponse, type ListSyncsResponse, type ListTunnelsResponse, type ListVmsResponse, type NetworkPolicy, type NetworkPolicyInput, type NetworkRequest, type NetworkStatus, type OrgRunListRow, type ResizeRequest, type ResizeResponse, type ResourceKind, type RetryOptions, type Run, type RunInboundPortRequest, type RunListRow, type RunNetworkRequest, type RunNetworkStatus, type RunOptions, type RunRequest, type RunResponse, type RunResult, type RunState, type RunStatusResponse, type RunSummary, type RunTunnelStatus, type Session, type SessionInfo, type SessionState, type Sync, type SyncByteRange, type SyncChunkWriteResult, type SyncCommitWriteResult, type SyncCreateRequest, type SyncPresignedWriteRequestResult, type SyncReadInlineResponse, type SyncReadPresignedResponse, type SyncReadRequest, type SyncReadResponse, type SyncWriteRequest, type SyncWriteResponse, type SyncWriteResult, type Tunnel, type TunnelRequest, type TunnelState, VM, type Vm, type VmState };

package/dist/index.js

@@ -4,7 +4,7 @@ import {
   ArkerError,
   CHUNK_SIZE,
   VM
-} from "./chunk-PI3H3TGC.js";
+} from "./chunk-YGZOUXII.js";
 export {
   ARKER_ORG_ID,
   Arker,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arker-ai/sdk",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "TypeScript SDK for the Arker virtual computer platform — spawn sandboxed VMs, run code, sync files.",
   "type": "module",
   "main": "./dist/index.cjs",