contree-client 0.1.3 → 0.2.0

package/lib/client.d.ts

@@ -3,21 +3,24 @@
 import type { Profile } from "./profiles.js";
 import type { RequestSpec, ResponseData, RetryPolicy } from "./runtime.js";
 import type {
+  ClosableStreamRepr,
   DirectoryList,
   File,
   FileResponse,
   FileSpec,
   FilesListResponse,
+  GrepResult,
   Image,
   ImageImportRegistry,
   ImageListResponse,
+  InstanceNetworking,
   InstanceResourcesLimits,
+  InstanceResult,
   InstanceSpawnResponse,
   OperationEvent,
   OperationResponse,
   OperationStatus,
   OperationSummary,
-  StreamRepr,
   WhoAmIResponse,
 } from "./models.js";
 
@@ -135,7 +138,8 @@ export declare class ContreeClient {
       uid?: number | undefined;
       gid?: number | undefined;
       resources_limits?: InstanceResourcesLimits | undefined;
-      stdin?: StreamRepr | undefined;
+      networking?: InstanceNetworking | undefined;
+      stdin?: ClosableStreamRepr | undefined;
       timeout?: number | undefined;
       truncate_output_at?: number | undefined;
       files?: Record<string, FileSpec> | undefined;
@@ -163,6 +167,38 @@ export declare class ContreeClient {
       last_event_id?: number | null;
     },
   ): AsyncGenerator<OperationEvent>;
+  operationSubprocessCreate(
+    operationId: string,
+    command: string,
+    options?: {
+      args?: string[] | undefined;
+      shell?: boolean | undefined;
+      env?: Record<string, string> | null | undefined;
+      cwd?: string | undefined;
+      uid?: number | undefined;
+      gid?: number | undefined;
+      stdin?: ClosableStreamRepr | undefined;
+      truncate_output_at?: number | undefined;
+    },
+  ): Promise<number>;
+  operationSubprocess(
+    operationId: string,
+    spid: number,
+  ): Promise<InstanceResult>;
+  operationSubprocessKill(
+    operationId: string,
+    spid: number,
+    options?: { signal?: string | null },
+  ): Promise<null>;
+  operationSubprocessStdin(
+    operationId: string,
+    spid: number,
+    value: string,
+    options?: {
+      encoding?: "ascii" | "base64" | undefined;
+      close?: boolean | undefined;
+    },
+  ): Promise<null>;
   inspectFindImageByTag(tag: string): Promise<string>;
   inspectImage(imageUuid: string): Promise<Image>;
   inspectImageDownload(imageUuid: string, path: string): Promise<Uint8Array>;
@@ -177,5 +213,16 @@ export declare class ContreeClient {
   ): AsyncGenerator<Uint8Array>;
   checkImageArchive(imageUuid: string, path: string): Promise<boolean>;
   inspectImageList(imageUuid: string, path: string): Promise<DirectoryList>;
+  inspectImageGrep(
+    imageUuid: string,
+    pattern: string,
+    options?: {
+      path?: string | null;
+      glob?: string | null;
+      max_count?: number | null;
+      max_total?: number | null;
+      case?: "sensitive" | "insensitive" | "smart" | null;
+    },
+  ): Promise<GrepResult>;
   whoami(): Promise<WhoAmIResponse>;
 }

package/lib/client.js

@@ -216,11 +216,6 @@ export class ContreeClient {
     if (policy === null) {
       return await this._reconnecting(spec);
     }
-    if (!spec.idempotent && !policy.retryUnsafe) {
-      // a lost response after a non-idempotent request (POST) could
-      // mean a second execution server-side
-      return await this.request(spec);
-    }
     if (
       typeof ReadableStream !== "undefined" &&
       spec.body instanceof ReadableStream
@@ -228,6 +223,13 @@ export class ContreeClient {
       // a stream cannot be replayed: single attempt
       return await this.request(spec);
     }
+    // a lost response after a non-idempotent request (POST) could
+    // mean a second execution server-side: never blind-retry unless
+    // the caller explicitly opted into that risk. 425 Too Early and
+    // 429 Too Many Requests are the exceptions - the backend's
+    // contract guarantees both mean the request was rejected before
+    // any processing, so replaying is always safe.
+    const replaySafe = spec.idempotent || policy.retryUnsafe;
     const delays = retryDelays(policy.delays);
     let attempts = 0;
     for (;;) {
@@ -239,6 +241,7 @@ export class ContreeClient {
         response = await this.request(spec);
       } catch (error) {
         if (
+          !replaySafe ||
           !this._transportRetryable(error) ||
           this._transportNonretryable(error) ||
           exhausted
@@ -251,6 +254,9 @@ export class ContreeClient {
       if (!policy.retryableStatus(response.status) || exhausted) {
         return response;
       }
+      if (!replaySafe && response.status !== 425 && response.status !== 429) {
+        return response;
+      }
       const retryAfter = retryAfterDelay(response);
       await sleep(retryAfter !== null ? retryAfter : delays.next().value);
     }
@@ -730,6 +736,43 @@ export class ContreeClient {
     }
   }
 
+  /** Spawn an additional subprocess inside a running instance (POST /operations/{operationId}/subprocesses) */
+  async operationSubprocessCreate(operationId, command, options = {}) {
+    const spec = operations.buildOperationSubprocessCreate(
+      operationId,
+      command,
+      options,
+    );
+    return operations.parseOperationSubprocessCreate(await this.call(spec));
+  }
+
+  /** Result of one subprocess, reconstructed from its events (GET /operations/{operationId}/subprocesses/{spid}) */
+  async operationSubprocess(operationId, spid) {
+    const spec = operations.buildOperationSubprocess(operationId, spid);
+    return operations.parseOperationSubprocess(await this.call(spec));
+  }
+
+  /** Kill one subprocess (DELETE /operations/{operationId}/subprocesses/{spid}) */
+  async operationSubprocessKill(operationId, spid, options = {}) {
+    const spec = operations.buildOperationSubprocessKill(
+      operationId,
+      spid,
+      options,
+    );
+    return operations.parseOperationSubprocessKill(await this.call(spec));
+  }
+
+  /** Write to a subprocess's stdin and/or close it (POST /operations/{operationId}/subprocesses/{spid}/stdin) */
+  async operationSubprocessStdin(operationId, spid, value, options = {}) {
+    const spec = operations.buildOperationSubprocessStdin(
+      operationId,
+      spid,
+      value,
+      options,
+    );
+    return operations.parseOperationSubprocessStdin(await this.call(spec));
+  }
+
   /** Find image by tag (GET /inspect/) */
   async inspectFindImageByTag(tag) {
     const spec = operations.buildInspectFindImageByTag(tag);
@@ -778,6 +821,12 @@ export class ContreeClient {
     return operations.parseInspectImageList(await this.call(spec));
   }
 
+  /** Search file contents in image (GET /inspect/{image_uuid}/grep) */
+  async inspectImageGrep(imageUuid, pattern, options = {}) {
+    const spec = operations.buildInspectImageGrep(imageUuid, pattern, options);
+    return operations.parseInspectImageGrep(await this.call(spec));
+  }
+
   /** Get current token information (GET /whoami) */
   async whoami() {
     const spec = operations.buildWhoami();

package/lib/models.d.ts

@@ -78,6 +78,49 @@ export declare class DirectoryList {
   toWire(): Record<string, unknown>;
 }
 
+export declare class GrepSubmatch {
+  text: string;
+  start: number;
+  end: number;
+  constructor(fields?: { text?: string; start?: number; end?: number });
+  static fromWire(data: Record<string, unknown>): GrepSubmatch;
+  toWire(): Record<string, unknown>;
+}
+
+export declare class GrepMatch {
+  path: string;
+  line_number: number;
+  absolute_offset: number;
+  line_text: string;
+  line_bytes: number;
+  submatches: GrepSubmatch[];
+  constructor(fields?: {
+    path?: string;
+    line_number?: number;
+    absolute_offset?: number;
+    line_text?: string;
+    line_bytes?: number;
+    submatches?: GrepSubmatch[];
+  });
+  static fromWire(data: Record<string, unknown>): GrepMatch;
+  toWire(): Record<string, unknown>;
+}
+
+export declare class GrepResult {
+  path: string;
+  patterns: string[];
+  matches: GrepMatch[];
+  truncated: boolean;
+  constructor(fields?: {
+    path?: string;
+    patterns?: string[];
+    matches?: GrepMatch[];
+    truncated?: boolean;
+  });
+  static fromWire(data: Record<string, unknown>): GrepResult;
+  toWire(): Record<string, unknown>;
+}
+
 export declare class ImageImportRegistryCredentials {
   username?: string;
   password?: string;
@@ -186,6 +229,19 @@ export declare class StreamRepr {
   static fromText(value: string): StreamRepr;
 }
 
+export declare class ClosableStreamRepr {
+  value: string;
+  encoding?: "ascii" | "base64";
+  close?: boolean;
+  constructor(fields?: {
+    value?: string;
+    encoding?: "ascii" | "base64" | null;
+    close?: boolean | null;
+  });
+  static fromWire(data: Record<string, unknown>): ClosableStreamRepr;
+  toWire(): Record<string, unknown>;
+}
+
 export declare class InstanceResourcesLimits {
   max_layer_bytes?: number;
   constructor(fields?: { max_layer_bytes?: number | null });
@@ -193,6 +249,38 @@ export declare class InstanceResourcesLimits {
   toWire(): Record<string, unknown>;
 }
 
+export declare class InstanceNetworking {
+  enabled?: boolean;
+  constructor(fields?: { enabled?: boolean | null });
+  static fromWire(data: Record<string, unknown>): InstanceNetworking;
+  toWire(): Record<string, unknown>;
+}
+
+export declare class ExecSpec {
+  command: string;
+  args?: string[];
+  shell?: boolean;
+  env?: Record<string, string> | null;
+  cwd?: string;
+  uid?: number;
+  gid?: number;
+  stdin?: ClosableStreamRepr;
+  truncate_output_at?: number;
+  constructor(fields?: {
+    command?: string;
+    args?: string[] | null;
+    shell?: boolean | null;
+    env?: Record<string, string> | null;
+    cwd?: string | null;
+    uid?: number | null;
+    gid?: number | null;
+    stdin?: ClosableStreamRepr | null;
+    truncate_output_at?: number | null;
+  });
+  static fromWire(data: Record<string, unknown>): ExecSpec;
+  toWire(): Record<string, unknown>;
+}
+
 export declare class FileSpec {
   uuid?: string;
   uid?: number;
@@ -221,7 +309,8 @@ export declare class InstanceSpawnRequest {
   uid?: number;
   gid?: number;
   resources_limits?: InstanceResourcesLimits;
-  stdin?: StreamRepr;
+  networking?: InstanceNetworking;
+  stdin?: ClosableStreamRepr;
   timeout?: number;
   truncate_output_at?: number;
   files?: Record<string, FileSpec>;
@@ -238,7 +327,8 @@ export declare class InstanceSpawnRequest {
     uid?: number | null;
     gid?: number | null;
     resources_limits?: InstanceResourcesLimits | null;
-    stdin?: StreamRepr | null;
+    networking?: InstanceNetworking | null;
+    stdin?: ClosableStreamRepr | null;
     timeout?: number | null;
     truncate_output_at?: number | null;
     files?: Record<string, FileSpec> | null;
@@ -335,7 +425,8 @@ export declare class InstanceSpawnResponse {
   uid?: number;
   gid?: number;
   resources_limits?: InstanceResourcesLimits;
-  stdin?: StreamRepr;
+  networking?: InstanceNetworking;
+  stdin?: ClosableStreamRepr;
   timeout?: number;
   truncate_output_at?: number;
   disposable?: boolean;
@@ -354,7 +445,8 @@ export declare class InstanceSpawnResponse {
     uid?: number | null;
     gid?: number | null;
     resources_limits?: InstanceResourcesLimits | null;
-    stdin?: StreamRepr | null;
+    networking?: InstanceNetworking | null;
+    stdin?: ClosableStreamRepr | null;
     timeout?: number | null;
     truncate_output_at?: number | null;
     disposable?: boolean | null;
@@ -407,7 +499,8 @@ export declare class OperationInstanceMetadata {
   uid?: number;
   gid?: number;
   resources_limits?: InstanceResourcesLimits;
-  stdin?: StreamRepr;
+  networking?: InstanceNetworking;
+  stdin?: ClosableStreamRepr;
   timeout?: number;
   truncate_output_at?: number;
   files?: Record<string, FileSpec>;
@@ -425,7 +518,8 @@ export declare class OperationInstanceMetadata {
     uid?: number | null;
     gid?: number | null;
     resources_limits?: InstanceResourcesLimits | null;
-    stdin?: StreamRepr | null;
+    networking?: InstanceNetworking | null;
+    stdin?: ClosableStreamRepr | null;
     timeout?: number | null;
     truncate_output_at?: number | null;
     files?: Record<string, FileSpec> | null;
@@ -668,6 +762,7 @@ export declare class EventDataExit {
   timed_out: boolean;
   duration_ms: number;
   resources: EventResources;
+  core_dump?: boolean;
   constructor(fields?: {
     pid?: number;
     code?: number;
@@ -675,6 +770,7 @@ export declare class EventDataExit {
     timed_out?: boolean;
     duration_ms?: number;
     resources?: EventResources;
+    core_dump?: boolean | null;
   });
   static fromWire(data: Record<string, unknown>): EventDataExit;
   toWire(): Record<string, unknown>;

package/lib/models.js

@@ -157,6 +157,122 @@ export class DirectoryList {
   }
 }
 
+export class GrepSubmatch {
+  constructor(fields = {}) {
+    this.text = fields.text;
+    this.start = fields.start;
+    this.end = fields.end;
+  }
+
+  static fromWire(data) {
+    return new GrepSubmatch({
+      text: data["text"],
+      start: data["start"],
+      end: data["end"],
+    });
+  }
+
+  toWire() {
+    const data = {};
+    if (this.text !== undefined) {
+      data["text"] = this.text;
+    }
+    if (this.start !== undefined) {
+      data["start"] = this.start;
+    }
+    if (this.end !== undefined) {
+      data["end"] = this.end;
+    }
+    return data;
+  }
+}
+
+export class GrepMatch {
+  constructor(fields = {}) {
+    this.path = fields.path;
+    this.line_number = fields.line_number;
+    this.absolute_offset = fields.absolute_offset;
+    this.line_text = fields.line_text;
+    this.line_bytes = fields.line_bytes;
+    this.submatches = fields.submatches;
+  }
+
+  static fromWire(data) {
+    return new GrepMatch({
+      path: data["path"],
+      line_number: data["line_number"],
+      absolute_offset: data["absolute_offset"],
+      line_text: data["line_text"],
+      line_bytes: data["line_bytes"],
+      submatches: data["submatches"].map((item) => GrepSubmatch.fromWire(item)),
+    });
+  }
+
+  toWire() {
+    const data = {};
+    if (this.path !== undefined) {
+      data["path"] = this.path;
+    }
+    if (this.line_number !== undefined) {
+      data["line_number"] = this.line_number;
+    }
+    if (this.absolute_offset !== undefined) {
+      data["absolute_offset"] = this.absolute_offset;
+    }
+    if (this.line_text !== undefined) {
+      data["line_text"] = this.line_text;
+    }
+    if (this.line_bytes !== undefined) {
+      data["line_bytes"] = this.line_bytes;
+    }
+    if (this.submatches !== undefined) {
+      data["submatches"] =
+        this.submatches === null
+          ? null
+          : this.submatches.map((item) => item.toWire());
+    }
+    return data;
+  }
+}
+
+export class GrepResult {
+  constructor(fields = {}) {
+    this.path = fields.path;
+    this.patterns = fields.patterns;
+    this.matches = fields.matches;
+    this.truncated = fields.truncated;
+  }
+
+  static fromWire(data) {
+    return new GrepResult({
+      path: data["path"],
+      patterns: data["patterns"],
+      matches: data["matches"].map((item) => GrepMatch.fromWire(item)),
+      truncated: data["truncated"],
+    });
+  }
+
+  toWire() {
+    const data = {};
+    if (this.path !== undefined) {
+      data["path"] = this.path;
+    }
+    if (this.patterns !== undefined) {
+      data["patterns"] = this.patterns;
+    }
+    if (this.matches !== undefined) {
+      data["matches"] =
+        this.matches === null
+          ? null
+          : this.matches.map((item) => item.toWire());
+    }
+    if (this.truncated !== undefined) {
+      data["truncated"] = this.truncated;
+    }
+    return data;
+  }
+}
+
 export class ImageImportRegistryCredentials {
   constructor(fields = {}) {
     this.username = fields.username;
@@ -464,6 +580,37 @@ export class StreamRepr {
   }
 }
 
+/** Stdin payload.  Unlike output streams it is never truncated; */
+export class ClosableStreamRepr {
+  constructor(fields = {}) {
+    this.value = fields.value;
+    this.encoding = fields.encoding;
+    this.close = fields.close;
+  }
+
+  static fromWire(data) {
+    return new ClosableStreamRepr({
+      value: data["value"],
+      encoding: data["encoding"],
+      close: data["close"],
+    });
+  }
+
+  toWire() {
+    const data = {};
+    if (this.value !== undefined) {
+      data["value"] = this.value;
+    }
+    if (this.encoding !== undefined) {
+      data["encoding"] = this.encoding;
+    }
+    if (this.close !== undefined) {
+      data["close"] = this.close;
+    }
+    return data;
+  }
+}
+
 export class InstanceResourcesLimits {
   constructor(fields = {}) {
     this.max_layer_bytes = fields.max_layer_bytes;
@@ -484,6 +631,90 @@ export class InstanceResourcesLimits {
   }
 }
 
+export class InstanceNetworking {
+  constructor(fields = {}) {
+    this.enabled = fields.enabled;
+  }
+
+  static fromWire(data) {
+    return new InstanceNetworking({
+      enabled: data["enabled"],
+    });
+  }
+
+  toWire() {
+    const data = {};
+    if (this.enabled !== undefined) {
+      data["enabled"] = this.enabled;
+    }
+    return data;
+  }
+}
+
+/** Process-execution surface shared between `InstanceSpawnRequest` */
+export class ExecSpec {
+  constructor(fields = {}) {
+    this.command = fields.command;
+    this.args = fields.args;
+    this.shell = fields.shell;
+    this.env = fields.env;
+    this.cwd = fields.cwd;
+    this.uid = fields.uid;
+    this.gid = fields.gid;
+    this.stdin = fields.stdin;
+    this.truncate_output_at = fields.truncate_output_at;
+  }
+
+  static fromWire(data) {
+    return new ExecSpec({
+      command: data["command"],
+      args: data["args"],
+      shell: data["shell"],
+      env: data["env"],
+      cwd: data["cwd"],
+      uid: data["uid"],
+      gid: data["gid"],
+      stdin:
+        data["stdin"] == null
+          ? data["stdin"]
+          : ClosableStreamRepr.fromWire(data["stdin"]),
+      truncate_output_at: data["truncate_output_at"],
+    });
+  }
+
+  toWire() {
+    const data = {};
+    if (this.command !== undefined) {
+      data["command"] = this.command;
+    }
+    if (this.args !== undefined) {
+      data["args"] = this.args;
+    }
+    if (this.shell !== undefined) {
+      data["shell"] = this.shell;
+    }
+    if (this.env !== undefined) {
+      data["env"] = this.env;
+    }
+    if (this.cwd !== undefined) {
+      data["cwd"] = this.cwd;
+    }
+    if (this.uid !== undefined) {
+      data["uid"] = this.uid;
+    }
+    if (this.gid !== undefined) {
+      data["gid"] = this.gid;
+    }
+    if (this.stdin !== undefined) {
+      data["stdin"] = this.stdin === null ? null : this.stdin.toWire();
+    }
+    if (this.truncate_output_at !== undefined) {
+      data["truncate_output_at"] = this.truncate_output_at;
+    }
+    return data;
+  }
+}
+
 export class FileSpec {
   constructor(fields = {}) {
     this.uuid = fields.uuid;
@@ -538,6 +769,7 @@ export class InstanceSpawnRequest {
     this.uid = fields.uid;
     this.gid = fields.gid;
     this.resources_limits = fields.resources_limits;
+    this.networking = fields.networking;
     this.stdin = fields.stdin;
     this.timeout = fields.timeout;
     this.truncate_output_at = fields.truncate_output_at;
@@ -561,10 +793,14 @@ export class InstanceSpawnRequest {
         data["resources_limits"] == null
           ? data["resources_limits"]
           : InstanceResourcesLimits.fromWire(data["resources_limits"]),
+      networking:
+        data["networking"] == null
+          ? data["networking"]
+          : InstanceNetworking.fromWire(data["networking"]),
       stdin:
         data["stdin"] == null
           ? data["stdin"]
-          : StreamRepr.fromWire(data["stdin"]),
+          : ClosableStreamRepr.fromWire(data["stdin"]),
       timeout: data["timeout"],
       truncate_output_at: data["truncate_output_at"],
       files:
@@ -618,6 +854,10 @@ export class InstanceSpawnRequest {
       data["resources_limits"] =
         this.resources_limits === null ? null : this.resources_limits.toWire();
     }
+    if (this.networking !== undefined) {
+      data["networking"] =
+        this.networking === null ? null : this.networking.toWire();
+    }
     if (this.stdin !== undefined) {
       data["stdin"] = this.stdin === null ? null : this.stdin.toWire();
     }
@@ -850,6 +1090,7 @@ export class InstanceSpawnResponse {
     this.uid = fields.uid;
     this.gid = fields.gid;
     this.resources_limits = fields.resources_limits;
+    this.networking = fields.networking;
     this.stdin = fields.stdin;
     this.timeout = fields.timeout;
     this.truncate_output_at = fields.truncate_output_at;
@@ -875,10 +1116,14 @@ export class InstanceSpawnResponse {
         data["resources_limits"] == null
           ? data["resources_limits"]
           : InstanceResourcesLimits.fromWire(data["resources_limits"]),
+      networking:
+        data["networking"] == null
+          ? data["networking"]
+          : InstanceNetworking.fromWire(data["networking"]),
       stdin:
         data["stdin"] == null
           ? data["stdin"]
-          : StreamRepr.fromWire(data["stdin"]),
+          : ClosableStreamRepr.fromWire(data["stdin"]),
       timeout: data["timeout"],
       truncate_output_at: data["truncate_output_at"],
       disposable: data["disposable"],
@@ -937,6 +1182,10 @@ export class InstanceSpawnResponse {
       data["resources_limits"] =
         this.resources_limits === null ? null : this.resources_limits.toWire();
     }
+    if (this.networking !== undefined) {
+      data["networking"] =
+        this.networking === null ? null : this.networking.toWire();
+    }
     if (this.stdin !== undefined) {
       data["stdin"] = this.stdin === null ? null : this.stdin.toWire();
     }
@@ -1051,6 +1300,7 @@ export class OperationInstanceMetadata {
     this.uid = fields.uid;
     this.gid = fields.gid;
     this.resources_limits = fields.resources_limits;
+    this.networking = fields.networking;
     this.stdin = fields.stdin;
     this.timeout = fields.timeout;
     this.truncate_output_at = fields.truncate_output_at;
@@ -1075,10 +1325,14 @@ export class OperationInstanceMetadata {
         data["resources_limits"] == null
           ? data["resources_limits"]
           : InstanceResourcesLimits.fromWire(data["resources_limits"]),
+      networking:
+        data["networking"] == null
+          ? data["networking"]
+          : InstanceNetworking.fromWire(data["networking"]),
       stdin:
         data["stdin"] == null
           ? data["stdin"]
-          : StreamRepr.fromWire(data["stdin"]),
+          : ClosableStreamRepr.fromWire(data["stdin"]),
       timeout: data["timeout"],
       truncate_output_at: data["truncate_output_at"],
       files:
@@ -1136,6 +1390,10 @@ export class OperationInstanceMetadata {
       data["resources_limits"] =
         this.resources_limits === null ? null : this.resources_limits.toWire();
     }
+    if (this.networking !== undefined) {
+      data["networking"] =
+        this.networking === null ? null : this.networking.toWire();
+    }
     if (this.stdin !== undefined) {
       data["stdin"] = this.stdin === null ? null : this.stdin.toWire();
     }
@@ -1788,6 +2046,7 @@ export class EventDataExit {
     this.timed_out = fields.timed_out;
     this.duration_ms = fields.duration_ms;
     this.resources = fields.resources;
+    this.core_dump = fields.core_dump;
   }
 
   static fromWire(data) {
@@ -1798,6 +2057,7 @@ export class EventDataExit {
       timed_out: data["timed_out"],
       duration_ms: data["duration_ms"],
       resources: EventResources.fromWire(data["resources"]),
+      core_dump: data["core_dump"],
     });
   }
 
@@ -1822,6 +2082,9 @@ export class EventDataExit {
       data["resources"] =
         this.resources === null ? null : this.resources.toWire();
     }
+    if (this.core_dump !== undefined) {
+      data["core_dump"] = this.core_dump;
+    }
     return data;
   }
 }

package/lib/operations.d.ts

@@ -3,20 +3,23 @@
 import type { RequestSpec, ResponseData } from "./runtime.js";
 
 import type {
+  ClosableStreamRepr,
   DirectoryList,
   File,
   FileResponse,
   FileSpec,
   FilesListResponse,
+  GrepResult,
   Image,
   ImageImportRegistry,
   ImageListResponse,
+  InstanceNetworking,
   InstanceResourcesLimits,
+  InstanceResult,
   InstanceSpawnResponse,
   OperationResponse,
   OperationStatus,
   OperationSummary,
-  StreamRepr,
   WhoAmIResponse,
 } from "./models.js";
 
@@ -94,7 +97,8 @@ export declare function buildSpawnInstance(
     uid?: number | undefined;
     gid?: number | undefined;
     resources_limits?: InstanceResourcesLimits | undefined;
-    stdin?: StreamRepr | undefined;
+    networking?: InstanceNetworking | undefined;
+    stdin?: ClosableStreamRepr | undefined;
     timeout?: number | undefined;
     truncate_output_at?: number | undefined;
     files?: Record<string, FileSpec> | undefined;
@@ -141,6 +145,58 @@ export declare function buildIterOperationEvents(
   },
 ): RequestSpec;
 
+export declare function buildOperationSubprocessCreate(
+  operationId: string,
+  command: string,
+  options?: {
+    args?: string[] | undefined;
+    shell?: boolean | undefined;
+    env?: Record<string, string> | null | undefined;
+    cwd?: string | undefined;
+    uid?: number | undefined;
+    gid?: number | undefined;
+    stdin?: ClosableStreamRepr | undefined;
+    truncate_output_at?: number | undefined;
+  },
+): RequestSpec;
+
+export declare function parseOperationSubprocessCreate(
+  response: ResponseData,
+): number;
+
+export declare function buildOperationSubprocess(
+  operationId: string,
+  spid: number,
+): RequestSpec;
+
+export declare function parseOperationSubprocess(
+  response: ResponseData,
+): InstanceResult;
+
+export declare function buildOperationSubprocessKill(
+  operationId: string,
+  spid: number,
+  options?: { signal?: string | null },
+): RequestSpec;
+
+export declare function parseOperationSubprocessKill(
+  response: ResponseData,
+): null;
+
+export declare function buildOperationSubprocessStdin(
+  operationId: string,
+  spid: number,
+  value: string,
+  options?: {
+    encoding?: "ascii" | "base64" | undefined;
+    close?: boolean | undefined;
+  },
+): RequestSpec;
+
+export declare function parseOperationSubprocessStdin(
+  response: ResponseData,
+): null;
+
 export declare function buildInspectFindImageByTag(tag: string): RequestSpec;
 
 export declare function parseInspectFindImageByTag(
@@ -188,6 +244,22 @@ export declare function parseInspectImageList(
   response: ResponseData,
 ): DirectoryList;
 
+export declare function buildInspectImageGrep(
+  imageUuid: string,
+  pattern: string,
+  options?: {
+    path?: string | null;
+    glob?: string | null;
+    max_count?: number | null;
+    max_total?: number | null;
+    case?: "sensitive" | "insensitive" | "smart" | null;
+  },
+): RequestSpec;
+
+export declare function parseInspectImageGrep(
+  response: ResponseData,
+): GrepResult;
+
 export declare function buildWhoami(): RequestSpec;
 
 export declare function parseWhoami(response: ResponseData): WhoAmIResponse;

package/lib/operations.js

@@ -9,13 +9,17 @@ import {
 } from "./runtime.js";
 
 import {
+  ClosableStreamRepr,
   DirectoryList,
+  ExecSpec,
   File,
   FileResponse,
   FilesListResponse,
+  GrepResult,
   Image,
   ImageImportRequest,
   ImageListResponse,
+  InstanceResult,
   InstanceSpawnRequest,
   InstanceSpawnResponse,
   OperationResponse,
@@ -111,11 +115,7 @@ export function parseUpdateImageTag(response) {
 
 /** Build the request for `POST /images/import`. */
 export function buildImportImage(registry, { tag, timeout } = {}) {
-  const payload = new ImageImportRequest({
-    registry: registry,
-    tag,
-    timeout,
-  }).toWire();
+  const payload = new ImageImportRequest({ registry, tag, timeout }).toWire();
   return {
     method: "POST",
     path: `/images/import`,
@@ -235,6 +235,7 @@ export function buildSpawnInstance(
     uid,
     gid,
     resources_limits,
+    networking,
     stdin,
     timeout,
     truncate_output_at,
@@ -242,8 +243,8 @@ export function buildSpawnInstance(
   } = {},
 ) {
   const payload = new InstanceSpawnRequest({
-    command: command,
-    image: image,
+    command,
+    image,
     disposable,
     hostname,
     args,
@@ -254,6 +255,7 @@ export function buildSpawnInstance(
     uid,
     gid,
     resources_limits,
+    networking,
     stdin,
     timeout,
     truncate_output_at,
@@ -386,6 +388,115 @@ export function buildIterOperationEvents(
   };
 }
 
+/** Build the request for `POST /operations/{operationId}/subprocesses`. */
+export function buildOperationSubprocessCreate(
+  operationId,
+  command,
+  { args, shell, env, cwd, uid, gid, stdin, truncate_output_at } = {},
+) {
+  const payload = new ExecSpec({
+    operation_id: operationId,
+    command,
+    args,
+    shell,
+    env,
+    cwd,
+    uid,
+    gid,
+    stdin,
+    truncate_output_at,
+  }).toWire();
+  return {
+    method: "POST",
+    path: `/operations/${quotePath(operationId)}/subprocesses`,
+    idempotent: false,
+    body: JSON.stringify(payload),
+    contentType: "application/json",
+  };
+}
+
+/** Parse the response of `POST /operations/{operationId}/subprocesses`. */
+export function parseOperationSubprocessCreate(response) {
+  if (response.status >= 200 && response.status < 300) {
+    return Number(jsonObject(response)["spid"]);
+  }
+  throw errorForResponse(response);
+}
+
+/** Build the request for `GET /operations/{operationId}/subprocesses/{spid}`. */
+export function buildOperationSubprocess(operationId, spid) {
+  return {
+    method: "GET",
+    path: `/operations/${quotePath(operationId)}/subprocesses/${quotePath(spid)}`,
+    idempotent: true,
+  };
+}
+
+/** Parse the response of `GET /operations/{operationId}/subprocesses/{spid}`. */
+export function parseOperationSubprocess(response) {
+  if (response.status >= 200 && response.status < 300) {
+    return InstanceResult.fromWire(jsonObject(response));
+  }
+  throw errorForResponse(response);
+}
+
+/** Build the request for `DELETE /operations/{operationId}/subprocesses/{spid}`. */
+export function buildOperationSubprocessKill(
+  operationId,
+  spid,
+  { signal = null } = {},
+) {
+  const query = {};
+  if (signal != null) {
+    query["signal"] = signal;
+  }
+  return {
+    method: "DELETE",
+    path: `/operations/${quotePath(operationId)}/subprocesses/${quotePath(spid)}`,
+    idempotent: true,
+    query,
+  };
+}
+
+/** Parse the response of `DELETE /operations/{operationId}/subprocesses/{spid}`. */
+export function parseOperationSubprocessKill(response) {
+  if (response.status >= 200 && response.status < 300) {
+    return null;
+  }
+  throw errorForResponse(response);
+}
+
+/** Build the request for `POST /operations/{operationId}/subprocesses/{spid}/stdin`. */
+export function buildOperationSubprocessStdin(
+  operationId,
+  spid,
+  value,
+  { encoding, close } = {},
+) {
+  const payload = new ClosableStreamRepr({
+    operation_id: operationId,
+    spid,
+    value,
+    encoding,
+    close,
+  }).toWire();
+  return {
+    method: "POST",
+    path: `/operations/${quotePath(operationId)}/subprocesses/${quotePath(spid)}/stdin`,
+    idempotent: false,
+    body: JSON.stringify(payload),
+    contentType: "application/json",
+  };
+}
+
+/** Parse the response of `POST /operations/{operationId}/subprocesses/{spid}/stdin`. */
+export function parseOperationSubprocessStdin(response) {
+  if (response.status >= 200 && response.status < 300) {
+    return null;
+  }
+  throw errorForResponse(response);
+}
+
 /** Build the request for `GET /inspect/`. */
 export function buildInspectFindImageByTag(tag) {
   const query = {};
@@ -529,6 +640,51 @@ export function parseInspectImageList(response) {
   throw errorForResponse(response);
 }
 
+/** Build the request for `GET /inspect/{image_uuid}/grep`. */
+export function buildInspectImageGrep(
+  imageUuid,
+  pattern,
+  {
+    path = null,
+    glob = null,
+    max_count = null,
+    max_total = null,
+    case: case_ = null,
+  } = {},
+) {
+  const query = {};
+  query["pattern"] = pattern;
+  if (path != null) {
+    query["path"] = path;
+  }
+  if (glob != null) {
+    query["glob"] = glob;
+  }
+  if (max_count != null) {
+    query["max_count"] = String(max_count);
+  }
+  if (max_total != null) {
+    query["max_total"] = String(max_total);
+  }
+  if (case_ != null) {
+    query["case"] = case_;
+  }
+  return {
+    method: "GET",
+    path: `/inspect/${quotePath(imageUuid)}/grep`,
+    idempotent: true,
+    query,
+  };
+}
+
+/** Parse the response of `GET /inspect/{image_uuid}/grep`. */
+export function parseInspectImageGrep(response) {
+  if (response.status >= 200 && response.status < 300) {
+    return GrepResult.fromWire(jsonObject(response));
+  }
+  throw errorForResponse(response);
+}
+
 /** Build the request for `GET /whoami`. */
 export function buildWhoami() {
   return { method: "GET", path: `/whoami`, idempotent: true };

package/lib/runtime.js

@@ -14,7 +14,7 @@ import {
 
 export const CHUNK_SIZE = 65536;
 
-export const PACKAGE_VERSION = "0.1.3";
+export const PACKAGE_VERSION = "0.2.0";
 export const UA_PRODUCT = `contree-client-js/${PACKAGE_VERSION}`;
 
 const NODE_VERSION =
@@ -47,10 +47,15 @@ export function* retryDelays(delays = RETRY_DELAYS) {
   }
 }
 
-/** Opt-in retries for transient failures of buffered requests. */
+/** Opt-in retries for transient failures of buffered requests.
+ *
+ * 425 (Too Early) and 429 (Too Many Requests) are a backend contract:
+ * both mean the request was rejected before any processing, so
+ * replaying them is always safe - even for a POST the caller hasn't
+ * opted into unsafe retries for (see `call()`). */
 export class RetryPolicy {
   constructor({
-    statuses = [410, 425],
+    statuses = [410, 425, 429],
     serverErrors = true,
     delays = RETRY_DELAYS,
     maxAttempts = 10,

package/lib/specInfo.js

@@ -5,4 +5,4 @@ export const DEFAULT_BASE_URL = "https://api.tokenfactory.nebius.com/sandboxes";
 // sha256 of the exact OpenAPI document this package was built
 // from - the build input provenance
 export const SPEC_SHA256 =
-  "3782df855d7ae14556e221f4f37a67fb6aeb65121396cb009a5e7a0995abd06b";
+  "bf17dbf27d28bebe3e23b295835bbdb2927ab9de5e9ae581af675e90986acc56";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "contree-client",
-  "version": "0.1.3",
+  "version": "0.2.0",
   "description": "JavaScript client for the Contree API, generated from the OpenAPI spec",
   "homepage": "https://contree.dev/",
   "repository": {