disk 0.8.9 → 0.8.11

package/dist/cli.js

@@ -99,6 +99,7 @@ var Disk = class {
   metrics;
   connectedClients;
   authorizedUsers;
+  allowedIps;
   /** @internal */
   _client;
   /** @internal */
@@ -120,6 +121,7 @@ var Disk = class {
     this.metrics = data.metrics;
     this.connectedClients = data.connectedClients;
     this.authorizedUsers = data.authorizedUsers;
+    this.allowedIps = data.allowedIps;
     this._client = client;
     this._archilRegion = archilRegion;
   }
@@ -139,7 +141,8 @@ var Disk = class {
       mounts: this.mounts,
       metrics: this.metrics,
       connectedClients: this.connectedClients,
-      authorizedUsers: this.authorizedUsers
+      authorizedUsers: this.authorizedUsers,
+      allowedIps: this.allowedIps
     };
   }
   async addUser(user) {
@@ -175,6 +178,32 @@ var Disk = class {
   async removeTokenUser(identifier) {
     await this.removeUser("token", identifier);
   }
+  async getAllowedIPs() {
+    const data = await unwrap(
+      this._client.GET("/api/disks/{id}/allowed-ips", {
+        params: { path: { id: this.id } }
+      })
+    );
+    return data.allowedIps;
+  }
+  async setAllowedIPs(allowedIps) {
+    const data = await unwrap(
+      this._client.PUT("/api/disks/{id}/allowed-ips", {
+        params: { path: { id: this.id } },
+        body: { allowedIps }
+      })
+    );
+    return data.allowedIps;
+  }
+  async addAllowedIP(ip) {
+    const current = await this.getAllowedIPs();
+    if (current.includes(ip)) return current;
+    return this.setAllowedIPs([...current, ip]);
+  }
+  async removeAllowedIP(ip) {
+    const current = await this.getAllowedIPs();
+    return this.setAllowedIPs(current.filter((i) => i !== ip));
+  }
   async delete() {
     await unwrapEmpty(
       this._client.DELETE("/api/disks/{id}", {
@@ -309,9 +338,17 @@ var Tokens = class {
 };
 
 // src/archil.ts
+function isExecMountSpec(m) {
+  return typeof m === "object" && m !== null && "disk" in m;
+}
+function diskIdFromMount(m) {
+  return typeof m === "string" ? m : m.id;
+}
 var Archil = class {
   disks;
   tokens;
+  /** @internal */
+  _client;
   constructor(opts = {}) {
     const apiKey = opts.apiKey ?? process.env.ARCHIL_API_KEY;
     const region = opts.region ?? process.env.ARCHIL_REGION;
@@ -326,9 +363,35 @@ var Archil = class {
       region,
       baseUrl: opts.baseUrl
     });
+    this._client = client;
     this.disks = new Disks(client, region);
     this.tokens = new Tokens(client);
   }
+  /**
+   * Run a command in a container with multiple disks mounted simultaneously,
+   * each at its own relative path under `/mnt/archil`. Blocks until the
+   * command completes and returns its stdout, stderr, exit code, and timing.
+   */
+  async exec(opts) {
+    const disks = {};
+    for (const [relPath, mount] of Object.entries(opts.disks)) {
+      if (isExecMountSpec(mount)) {
+        const entry = {
+          disk: diskIdFromMount(mount.disk),
+          readOnly: mount.readOnly ?? false
+        };
+        if (mount.subdirectory !== void 0) entry.subdirectory = mount.subdirectory;
+        disks[relPath] = entry;
+      } else {
+        disks[relPath] = diskIdFromMount(mount);
+      }
+    }
+    return unwrap(
+      this._client.POST("/api/exec", {
+        body: { disks, command: opts.command }
+      })
+    );
+  }
 };
 
 // src/index.ts

package/dist/index.cjs

@@ -39,6 +39,7 @@ __export(index_exports, {
   createApiKey: () => createApiKey,
   createDisk: () => createDisk,
   deleteApiKey: () => deleteApiKey,
+  exec: () => exec,
   getDisk: () => getDisk,
   listApiKeys: () => listApiKeys,
   listDisks: () => listDisks
@@ -141,6 +142,7 @@ var Disk = class {
   metrics;
   connectedClients;
   authorizedUsers;
+  allowedIps;
   /** @internal */
   _client;
   /** @internal */
@@ -162,6 +164,7 @@ var Disk = class {
     this.metrics = data.metrics;
     this.connectedClients = data.connectedClients;
     this.authorizedUsers = data.authorizedUsers;
+    this.allowedIps = data.allowedIps;
     this._client = client;
     this._archilRegion = archilRegion;
   }
@@ -181,7 +184,8 @@ var Disk = class {
       mounts: this.mounts,
       metrics: this.metrics,
       connectedClients: this.connectedClients,
-      authorizedUsers: this.authorizedUsers
+      authorizedUsers: this.authorizedUsers,
+      allowedIps: this.allowedIps
     };
   }
   async addUser(user) {
@@ -217,6 +221,32 @@ var Disk = class {
   async removeTokenUser(identifier) {
     await this.removeUser("token", identifier);
   }
+  async getAllowedIPs() {
+    const data = await unwrap(
+      this._client.GET("/api/disks/{id}/allowed-ips", {
+        params: { path: { id: this.id } }
+      })
+    );
+    return data.allowedIps;
+  }
+  async setAllowedIPs(allowedIps) {
+    const data = await unwrap(
+      this._client.PUT("/api/disks/{id}/allowed-ips", {
+        params: { path: { id: this.id } },
+        body: { allowedIps }
+      })
+    );
+    return data.allowedIps;
+  }
+  async addAllowedIP(ip) {
+    const current = await this.getAllowedIPs();
+    if (current.includes(ip)) return current;
+    return this.setAllowedIPs([...current, ip]);
+  }
+  async removeAllowedIP(ip) {
+    const current = await this.getAllowedIPs();
+    return this.setAllowedIPs(current.filter((i) => i !== ip));
+  }
   async delete() {
     await unwrapEmpty(
       this._client.DELETE("/api/disks/{id}", {
@@ -351,9 +381,17 @@ var Tokens = class {
 };
 
 // src/archil.ts
+function isExecMountSpec(m) {
+  return typeof m === "object" && m !== null && "disk" in m;
+}
+function diskIdFromMount(m) {
+  return typeof m === "string" ? m : m.id;
+}
 var Archil = class {
   disks;
   tokens;
+  /** @internal */
+  _client;
   constructor(opts = {}) {
     const apiKey = opts.apiKey ?? process.env.ARCHIL_API_KEY;
     const region = opts.region ?? process.env.ARCHIL_REGION;
@@ -368,9 +406,35 @@ var Archil = class {
       region,
       baseUrl: opts.baseUrl
     });
+    this._client = client;
     this.disks = new Disks(client, region);
     this.tokens = new Tokens(client);
   }
+  /**
+   * Run a command in a container with multiple disks mounted simultaneously,
+   * each at its own relative path under `/mnt/archil`. Blocks until the
+   * command completes and returns its stdout, stderr, exit code, and timing.
+   */
+  async exec(opts) {
+    const disks = {};
+    for (const [relPath, mount] of Object.entries(opts.disks)) {
+      if (isExecMountSpec(mount)) {
+        const entry = {
+          disk: diskIdFromMount(mount.disk),
+          readOnly: mount.readOnly ?? false
+        };
+        if (mount.subdirectory !== void 0) entry.subdirectory = mount.subdirectory;
+        disks[relPath] = entry;
+      } else {
+        disks[relPath] = diskIdFromMount(mount);
+      }
+    }
+    return unwrap(
+      this._client.POST("/api/exec", {
+        body: { disks, command: opts.command }
+      })
+    );
+  }
 };
 
 // src/index.ts
@@ -404,6 +468,9 @@ function createApiKey(req) {
 function deleteApiKey(id) {
   return archil().tokens.delete(id);
 }
+function exec(opts) {
+  return archil().exec(opts);
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   Archil,
@@ -415,6 +482,7 @@ function deleteApiKey(id) {
   createApiKey,
   createDisk,
   deleteApiKey,
+  exec,
   getDisk,
   listApiKeys,
   listDisks

package/dist/index.d.cts

@@ -102,6 +102,30 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/disks/{id}/allowed-ips": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get IP allowlist
+         * @description Returns the current IP allowlist for a disk.
+         */
+        get: operations["getAllowedIPs"];
+        /**
+         * Set IP allowlist
+         * @description Replaces the IP allowlist for a disk. When non-empty, only clients connecting from listed IPs or CIDR ranges can mount the disk. Pass an empty array to remove all restrictions.
+         */
+        put: operations["setAllowedIPs"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/disks/{id}/exec": {
         parameters: {
             query?: never;
@@ -124,6 +148,33 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/exec": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Execute a command with multiple disks mounted
+         * @description Launches a container with the supplied set of disks each mounted at its
+         *     own relative path under `/mnt/archil`, runs the command to completion,
+         *     and shuts down the container. Activation is atomic: every disk mounts
+         *     or none of them do.
+         *
+         *     Relative paths must be non-empty, non-absolute, and contain no `.` /
+         *     `..` segments. Mounting two disks at the same relative path is an
+         *     error.
+         */
+        post: operations["exec"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/tokens": {
         parameters: {
             query?: never;
@@ -197,6 +248,14 @@ interface components {
             name: string;
             /** @description Storage mount to attach. Omit for archil-managed storage. */
             mounts?: components["schemas"]["MountConfig"][];
+            /**
+             * @description IP allowlist for mount access. When non-empty, only clients connecting from these IPs or CIDR ranges can mount the disk. An empty list (default) allows all IPs.
+             * @example [
+             *       "203.0.113.0/24",
+             *       "198.51.100.42"
+             *     ]
+             */
+            allowedIps?: string[];
             /**
              * @deprecated
              * @description Deprecated. Use AddDiskUser after creation instead. When provided, suppresses the default auto-generated token user.
@@ -438,6 +497,24 @@ interface components {
             metrics?: components["schemas"]["DiskMetrics"];
             connectedClients?: components["schemas"]["ConnectedClient"][];
             authorizedUsers?: components["schemas"]["AuthorizedUser"][];
+            /**
+             * @description IP allowlist for mount access. Empty means all IPs are allowed.
+             * @example [
+             *       "203.0.113.0/24"
+             *     ]
+             */
+            allowedIps?: string[];
+            /**
+             * @description Capabilities supported by this disk. Determined at creation
+             *     time and immutable thereafter. Defined values:
+             *
+             *     * `checkpoints` — checkpoints can be created on this disk. Not
+             *       available for disks with bring-your-own buckets.
+             * @example [
+             *       "checkpoints"
+             *     ]
+             */
+            capabilities?: "checkpoints"[];
         };
         MountResponse: {
             /** @description Mount identifier */
@@ -538,6 +615,19 @@ interface components {
             success: boolean;
             data: components["schemas"]["AuthorizedUser"];
         };
+        ApiResponse_AllowedIPs: {
+            /** @example true */
+            success: boolean;
+            data: {
+                /**
+                 * @example [
+                 *       "203.0.113.0/24",
+                 *       "198.51.100.42"
+                 *     ]
+                 */
+                allowedIps: string[];
+            };
+        };
         CreateApiTokenRequest: {
             /** @description Token name */
             name: string;
@@ -616,6 +706,58 @@ interface components {
             success: boolean;
             data: components["schemas"]["ExecDiskResult"];
         };
+        ExecRequest: {
+            /**
+             * @description Map of relative path under `/mnt/archil` to the disk to mount
+             *     there. At least one entry is required. Relative paths must be
+             *     non-empty, non-absolute, and contain no `.` or `..` segments.
+             *
+             *     Each value is either a plain disk ID string (mounts the disk's
+             *     root, read-write) or an object that additionally selects a
+             *     subdirectory of the disk and/or marks the mount as read-only.
+             * @example {
+             *       "data": "dsk-abc123",
+             *       "logs": {
+             *         "disk": "dsk-def456",
+             *         "subdirectory": "app/logs",
+             *         "readOnly": true
+             *       }
+             *     }
+             */
+            disks: {
+                [key: string]: string | components["schemas"]["ExecMount"];
+            };
+            /**
+             * @description Shell command to execute inside the container
+             * @example ls -la /mnt/archil/data /mnt/archil/logs
+             */
+            command: string;
+        };
+        ExecMount: {
+            /**
+             * @description Disk ID to mount at this relative path
+             * @example dsk-abc123
+             */
+            disk: string;
+            /**
+             * @description Subdirectory of the disk to expose at the mountpoint. Must be a
+             *     relative path with no `.` or `..` segments. When omitted, the
+             *     disk's root is exposed.
+             * @example app/logs
+             */
+            subdirectory?: string;
+            /**
+             * @description When true, the disk is mounted read-only inside the container.
+             *     Writes against the mount fail with EROFS.
+             * @default false
+             */
+            readOnly: boolean;
+        };
+        ApiResponse_Exec: {
+            /** @example true */
+            success: boolean;
+            data: components["schemas"]["ExecDiskResult"];
+        };
     };
     responses: {
         /** @description Invalid or missing authentication credentials */
@@ -871,6 +1013,72 @@ interface operations {
             500: components["responses"]["InternalError"];
         };
     };
+    getAllowedIPs: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Disk ID (format `dsk-{16 hex chars}`) */
+                id: components["parameters"]["DiskId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Current IP allowlist */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ApiResponse_AllowedIPs"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            404: components["responses"]["NotFound"];
+            500: components["responses"]["InternalError"];
+        };
+    };
+    setAllowedIPs: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Disk ID (format `dsk-{16 hex chars}`) */
+                id: components["parameters"]["DiskId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /**
+                     * @description List of IPs or CIDR ranges. Empty array removes restrictions.
+                     * @example [
+                     *       "203.0.113.0/24",
+                     *       "198.51.100.42"
+                     *     ]
+                     */
+                    allowedIps: string[];
+                };
+            };
+        };
+        responses: {
+            /** @description Allowlist updated */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ApiResponse_AllowedIPs"];
+                };
+            };
+            400: components["responses"]["ValidationError"];
+            401: components["responses"]["Unauthorized"];
+            404: components["responses"]["NotFound"];
+            500: components["responses"]["InternalError"];
+        };
+    };
     execDisk: {
         parameters: {
             query?: never;
@@ -911,6 +1119,43 @@ interface operations {
             };
         };
     };
+    exec: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ExecRequest"];
+            };
+        };
+        responses: {
+            /** @description Command completed */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ApiResponse_Exec"];
+                };
+            };
+            400: components["responses"]["ValidationError"];
+            401: components["responses"]["Unauthorized"];
+            404: components["responses"]["NotFound"];
+            500: components["responses"]["InternalError"];
+            /** @description Command timed out */
+            504: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
     listApiTokens: {
         parameters: {
             query?: {
@@ -1014,6 +1259,7 @@ type AwsStsUser = components["schemas"]["AwsStsUser"];
 type CreateApiTokenRequest = components["schemas"]["CreateApiTokenRequest"];
 type ApiTokenResponse = components["schemas"]["ApiTokenResponse"];
 type ExecDiskResult = components["schemas"]["ExecDiskResult"];
+type ExecRequest = components["schemas"]["ExecRequest"];
 type DiskStatus = DiskResponse["status"];
 
 interface MountOptions {
@@ -1039,6 +1285,7 @@ declare class Disk {
     readonly metrics?: DiskMetrics;
     readonly connectedClients?: ConnectedClient[];
     readonly authorizedUsers?: AuthorizedUser[];
+    readonly allowedIps?: string[];
     /** @internal */
     private readonly _client;
     /** @internal */
@@ -1053,6 +1300,10 @@ declare class Disk {
         identifier: string;
     }>;
     removeTokenUser(identifier: string): Promise<void>;
+    getAllowedIPs(): Promise<string[]>;
+    setAllowedIPs(allowedIps: string[]): Promise<string[]>;
+    addAllowedIP(ip: string): Promise<string[]>;
+    removeAllowedIP(ip: string): Promise<string[]>;
     delete(): Promise<void>;
     /**
      * Execute a command in a container with this disk mounted.
@@ -1120,10 +1371,57 @@ interface ArchilOptions {
     /** Override the control plane base URL (useful for testing). */
     baseUrl?: string;
 }
+/**
+ * Options that apply to a single mounted disk in an exec request.
+ * Use this object form when you need to pin the mount to a subdirectoryectory
+ * of the disk and/or mount it read-only; for the default case (mount
+ * the disk's root, read-write), pass a `Disk` or disk-id string instead.
+ */
+interface ExecMountSpec {
+    /** Disk to mount, by `Disk` instance or raw disk id string. */
+    disk: Disk | string;
+    /**
+     * Subdirectory of the disk to expose at the mountpoint. Must be a
+     * relative path with no `.` or `..` segments. When omitted, the disk's
+     * root is exposed.
+     */
+    subdirectory?: string;
+    /**
+     * When true, mount the disk read-only inside the container. Writes
+     * against the mount fail with EROFS. Defaults to false.
+     */
+    readOnly?: boolean;
+}
+/**
+ * One disk to mount in an exec request. Either a `Disk`/disk-id string
+ * (mounts the disk's root, read-write) or an `ExecMountSpec` object that
+ * additionally selects a subdirectoryectory of the disk and/or marks the mount
+ * as read-only. Used by Archil#exec — the map key is the relative path
+ * under /mnt/archil at which to mount the disk.
+ */
+type ExecMount = Disk | string | ExecMountSpec;
+interface ExecOptions {
+    /**
+     * Disks to mount, keyed by the relative path under `/mnt/archil` at which
+     * to mount each one. At least one entry is required. Paths must be
+     * non-empty, non-absolute, and contain no `.` or `..` segments.
+     */
+    disks: Record<string, ExecMount>;
+    /** Shell command to run inside the container. */
+    command: string;
+}
 declare class Archil {
     readonly disks: Disks;
     readonly tokens: Tokens;
+    /** @internal */
+    private readonly _client;
     constructor(opts?: ArchilOptions);
+    /**
+     * Run a command in a container with multiple disks mounted simultaneously,
+     * each at its own relative path under `/mnt/archil`. Blocks until the
+     * command completes and returns its stdout, stderr, exit code, and timing.
+     */
+    exec(opts: ExecOptions): Promise<ExecDiskResult>;
 }
 
 declare class ArchilApiError extends Error {
@@ -1141,5 +1439,11 @@ declare function createApiKey(req: CreateApiTokenRequest): Promise<ApiTokenRespo
     token?: string;
 }>;
 declare function deleteApiKey(id: string): Promise<void>;
+/**
+ * Run a command in a container with multiple disks mounted simultaneously,
+ * each at its own relative path under `/mnt/archil`. Blocks until the
+ * command completes and returns its stdout, stderr, exit code, and timing.
+ */
+declare function exec(opts: ExecOptions): Promise<ExecDiskResult>;
 
-export { type ApiTokenResponse, Archil, ArchilApiError, type ArchilOptions, type AuthorizedUser, type AwsStsUser, type AzureBlobMount, type ConnectedClient, type CreateApiTokenRequest, type CreateDiskRequest, type CreateDiskResult, Disk, type DiskMetrics, type DiskResponse, type DiskStatus, type DiskUser, Disks, type ExecResult, type GCSMount, type ListDisksOptions, type ListTokensOptions, type MountConfig, type MountConfigResponse, type MountOptions, type MountResponse, type R2Mount, type S3CompatibleMount, type S3Mount, type TokenUser, Tokens, configure, createApiKey, createDisk, deleteApiKey, getDisk, listApiKeys, listDisks };
+export { type ApiTokenResponse, Archil, ArchilApiError, type ArchilOptions, type AuthorizedUser, type AwsStsUser, type AzureBlobMount, type ConnectedClient, type CreateApiTokenRequest, type CreateDiskRequest, type CreateDiskResult, Disk, type DiskMetrics, type DiskResponse, type DiskStatus, type DiskUser, Disks, type ExecMount, type ExecMountSpec, type ExecOptions, type ExecRequest, type ExecResult, type GCSMount, type ListDisksOptions, type ListTokensOptions, type MountConfig, type MountConfigResponse, type MountOptions, type MountResponse, type R2Mount, type S3CompatibleMount, type S3Mount, type TokenUser, Tokens, configure, createApiKey, createDisk, deleteApiKey, exec, getDisk, listApiKeys, listDisks };

package/dist/index.d.ts

@@ -102,6 +102,30 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/disks/{id}/allowed-ips": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get IP allowlist
+         * @description Returns the current IP allowlist for a disk.
+         */
+        get: operations["getAllowedIPs"];
+        /**
+         * Set IP allowlist
+         * @description Replaces the IP allowlist for a disk. When non-empty, only clients connecting from listed IPs or CIDR ranges can mount the disk. Pass an empty array to remove all restrictions.
+         */
+        put: operations["setAllowedIPs"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/disks/{id}/exec": {
         parameters: {
             query?: never;
@@ -124,6 +148,33 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/exec": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Execute a command with multiple disks mounted
+         * @description Launches a container with the supplied set of disks each mounted at its
+         *     own relative path under `/mnt/archil`, runs the command to completion,
+         *     and shuts down the container. Activation is atomic: every disk mounts
+         *     or none of them do.
+         *
+         *     Relative paths must be non-empty, non-absolute, and contain no `.` /
+         *     `..` segments. Mounting two disks at the same relative path is an
+         *     error.
+         */
+        post: operations["exec"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/tokens": {
         parameters: {
             query?: never;
@@ -197,6 +248,14 @@ interface components {
             name: string;
             /** @description Storage mount to attach. Omit for archil-managed storage. */
             mounts?: components["schemas"]["MountConfig"][];
+            /**
+             * @description IP allowlist for mount access. When non-empty, only clients connecting from these IPs or CIDR ranges can mount the disk. An empty list (default) allows all IPs.
+             * @example [
+             *       "203.0.113.0/24",
+             *       "198.51.100.42"
+             *     ]
+             */
+            allowedIps?: string[];
             /**
              * @deprecated
              * @description Deprecated. Use AddDiskUser after creation instead. When provided, suppresses the default auto-generated token user.
@@ -438,6 +497,24 @@ interface components {
             metrics?: components["schemas"]["DiskMetrics"];
             connectedClients?: components["schemas"]["ConnectedClient"][];
             authorizedUsers?: components["schemas"]["AuthorizedUser"][];
+            /**
+             * @description IP allowlist for mount access. Empty means all IPs are allowed.
+             * @example [
+             *       "203.0.113.0/24"
+             *     ]
+             */
+            allowedIps?: string[];
+            /**
+             * @description Capabilities supported by this disk. Determined at creation
+             *     time and immutable thereafter. Defined values:
+             *
+             *     * `checkpoints` — checkpoints can be created on this disk. Not
+             *       available for disks with bring-your-own buckets.
+             * @example [
+             *       "checkpoints"
+             *     ]
+             */
+            capabilities?: "checkpoints"[];
         };
         MountResponse: {
             /** @description Mount identifier */
@@ -538,6 +615,19 @@ interface components {
             success: boolean;
             data: components["schemas"]["AuthorizedUser"];
         };
+        ApiResponse_AllowedIPs: {
+            /** @example true */
+            success: boolean;
+            data: {
+                /**
+                 * @example [
+                 *       "203.0.113.0/24",
+                 *       "198.51.100.42"
+                 *     ]
+                 */
+                allowedIps: string[];
+            };
+        };
         CreateApiTokenRequest: {
             /** @description Token name */
             name: string;
@@ -616,6 +706,58 @@ interface components {
             success: boolean;
             data: components["schemas"]["ExecDiskResult"];
         };
+        ExecRequest: {
+            /**
+             * @description Map of relative path under `/mnt/archil` to the disk to mount
+             *     there. At least one entry is required. Relative paths must be
+             *     non-empty, non-absolute, and contain no `.` or `..` segments.
+             *
+             *     Each value is either a plain disk ID string (mounts the disk's
+             *     root, read-write) or an object that additionally selects a
+             *     subdirectory of the disk and/or marks the mount as read-only.
+             * @example {
+             *       "data": "dsk-abc123",
+             *       "logs": {
+             *         "disk": "dsk-def456",
+             *         "subdirectory": "app/logs",
+             *         "readOnly": true
+             *       }
+             *     }
+             */
+            disks: {
+                [key: string]: string | components["schemas"]["ExecMount"];
+            };
+            /**
+             * @description Shell command to execute inside the container
+             * @example ls -la /mnt/archil/data /mnt/archil/logs
+             */
+            command: string;
+        };
+        ExecMount: {
+            /**
+             * @description Disk ID to mount at this relative path
+             * @example dsk-abc123
+             */
+            disk: string;
+            /**
+             * @description Subdirectory of the disk to expose at the mountpoint. Must be a
+             *     relative path with no `.` or `..` segments. When omitted, the
+             *     disk's root is exposed.
+             * @example app/logs
+             */
+            subdirectory?: string;
+            /**
+             * @description When true, the disk is mounted read-only inside the container.
+             *     Writes against the mount fail with EROFS.
+             * @default false
+             */
+            readOnly: boolean;
+        };
+        ApiResponse_Exec: {
+            /** @example true */
+            success: boolean;
+            data: components["schemas"]["ExecDiskResult"];
+        };
     };
     responses: {
         /** @description Invalid or missing authentication credentials */
@@ -871,6 +1013,72 @@ interface operations {
             500: components["responses"]["InternalError"];
         };
     };
+    getAllowedIPs: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Disk ID (format `dsk-{16 hex chars}`) */
+                id: components["parameters"]["DiskId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Current IP allowlist */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ApiResponse_AllowedIPs"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            404: components["responses"]["NotFound"];
+            500: components["responses"]["InternalError"];
+        };
+    };
+    setAllowedIPs: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Disk ID (format `dsk-{16 hex chars}`) */
+                id: components["parameters"]["DiskId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /**
+                     * @description List of IPs or CIDR ranges. Empty array removes restrictions.
+                     * @example [
+                     *       "203.0.113.0/24",
+                     *       "198.51.100.42"
+                     *     ]
+                     */
+                    allowedIps: string[];
+                };
+            };
+        };
+        responses: {
+            /** @description Allowlist updated */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ApiResponse_AllowedIPs"];
+                };
+            };
+            400: components["responses"]["ValidationError"];
+            401: components["responses"]["Unauthorized"];
+            404: components["responses"]["NotFound"];
+            500: components["responses"]["InternalError"];
+        };
+    };
     execDisk: {
         parameters: {
             query?: never;
@@ -911,6 +1119,43 @@ interface operations {
             };
         };
     };
+    exec: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ExecRequest"];
+            };
+        };
+        responses: {
+            /** @description Command completed */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ApiResponse_Exec"];
+                };
+            };
+            400: components["responses"]["ValidationError"];
+            401: components["responses"]["Unauthorized"];
+            404: components["responses"]["NotFound"];
+            500: components["responses"]["InternalError"];
+            /** @description Command timed out */
+            504: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
     listApiTokens: {
         parameters: {
             query?: {
@@ -1014,6 +1259,7 @@ type AwsStsUser = components["schemas"]["AwsStsUser"];
 type CreateApiTokenRequest = components["schemas"]["CreateApiTokenRequest"];
 type ApiTokenResponse = components["schemas"]["ApiTokenResponse"];
 type ExecDiskResult = components["schemas"]["ExecDiskResult"];
+type ExecRequest = components["schemas"]["ExecRequest"];
 type DiskStatus = DiskResponse["status"];
 
 interface MountOptions {
@@ -1039,6 +1285,7 @@ declare class Disk {
     readonly metrics?: DiskMetrics;
     readonly connectedClients?: ConnectedClient[];
     readonly authorizedUsers?: AuthorizedUser[];
+    readonly allowedIps?: string[];
     /** @internal */
     private readonly _client;
     /** @internal */
@@ -1053,6 +1300,10 @@ declare class Disk {
         identifier: string;
     }>;
     removeTokenUser(identifier: string): Promise<void>;
+    getAllowedIPs(): Promise<string[]>;
+    setAllowedIPs(allowedIps: string[]): Promise<string[]>;
+    addAllowedIP(ip: string): Promise<string[]>;
+    removeAllowedIP(ip: string): Promise<string[]>;
     delete(): Promise<void>;
     /**
      * Execute a command in a container with this disk mounted.
@@ -1120,10 +1371,57 @@ interface ArchilOptions {
     /** Override the control plane base URL (useful for testing). */
     baseUrl?: string;
 }
+/**
+ * Options that apply to a single mounted disk in an exec request.
+ * Use this object form when you need to pin the mount to a subdirectoryectory
+ * of the disk and/or mount it read-only; for the default case (mount
+ * the disk's root, read-write), pass a `Disk` or disk-id string instead.
+ */
+interface ExecMountSpec {
+    /** Disk to mount, by `Disk` instance or raw disk id string. */
+    disk: Disk | string;
+    /**
+     * Subdirectory of the disk to expose at the mountpoint. Must be a
+     * relative path with no `.` or `..` segments. When omitted, the disk's
+     * root is exposed.
+     */
+    subdirectory?: string;
+    /**
+     * When true, mount the disk read-only inside the container. Writes
+     * against the mount fail with EROFS. Defaults to false.
+     */
+    readOnly?: boolean;
+}
+/**
+ * One disk to mount in an exec request. Either a `Disk`/disk-id string
+ * (mounts the disk's root, read-write) or an `ExecMountSpec` object that
+ * additionally selects a subdirectoryectory of the disk and/or marks the mount
+ * as read-only. Used by Archil#exec — the map key is the relative path
+ * under /mnt/archil at which to mount the disk.
+ */
+type ExecMount = Disk | string | ExecMountSpec;
+interface ExecOptions {
+    /**
+     * Disks to mount, keyed by the relative path under `/mnt/archil` at which
+     * to mount each one. At least one entry is required. Paths must be
+     * non-empty, non-absolute, and contain no `.` or `..` segments.
+     */
+    disks: Record<string, ExecMount>;
+    /** Shell command to run inside the container. */
+    command: string;
+}
 declare class Archil {
     readonly disks: Disks;
     readonly tokens: Tokens;
+    /** @internal */
+    private readonly _client;
     constructor(opts?: ArchilOptions);
+    /**
+     * Run a command in a container with multiple disks mounted simultaneously,
+     * each at its own relative path under `/mnt/archil`. Blocks until the
+     * command completes and returns its stdout, stderr, exit code, and timing.
+     */
+    exec(opts: ExecOptions): Promise<ExecDiskResult>;
 }
 
 declare class ArchilApiError extends Error {
@@ -1141,5 +1439,11 @@ declare function createApiKey(req: CreateApiTokenRequest): Promise<ApiTokenRespo
     token?: string;
 }>;
 declare function deleteApiKey(id: string): Promise<void>;
+/**
+ * Run a command in a container with multiple disks mounted simultaneously,
+ * each at its own relative path under `/mnt/archil`. Blocks until the
+ * command completes and returns its stdout, stderr, exit code, and timing.
+ */
+declare function exec(opts: ExecOptions): Promise<ExecDiskResult>;
 
-export { type ApiTokenResponse, Archil, ArchilApiError, type ArchilOptions, type AuthorizedUser, type AwsStsUser, type AzureBlobMount, type ConnectedClient, type CreateApiTokenRequest, type CreateDiskRequest, type CreateDiskResult, Disk, type DiskMetrics, type DiskResponse, type DiskStatus, type DiskUser, Disks, type ExecResult, type GCSMount, type ListDisksOptions, type ListTokensOptions, type MountConfig, type MountConfigResponse, type MountOptions, type MountResponse, type R2Mount, type S3CompatibleMount, type S3Mount, type TokenUser, Tokens, configure, createApiKey, createDisk, deleteApiKey, getDisk, listApiKeys, listDisks };
+export { type ApiTokenResponse, Archil, ArchilApiError, type ArchilOptions, type AuthorizedUser, type AwsStsUser, type AzureBlobMount, type ConnectedClient, type CreateApiTokenRequest, type CreateDiskRequest, type CreateDiskResult, Disk, type DiskMetrics, type DiskResponse, type DiskStatus, type DiskUser, Disks, type ExecMount, type ExecMountSpec, type ExecOptions, type ExecRequest, type ExecResult, type GCSMount, type ListDisksOptions, type ListTokensOptions, type MountConfig, type MountConfigResponse, type MountOptions, type MountResponse, type R2Mount, type S3CompatibleMount, type S3Mount, type TokenUser, Tokens, configure, createApiKey, createDisk, deleteApiKey, exec, getDisk, listApiKeys, listDisks };

package/dist/index.js

@@ -93,6 +93,7 @@ var Disk = class {
   metrics;
   connectedClients;
   authorizedUsers;
+  allowedIps;
   /** @internal */
   _client;
   /** @internal */
@@ -114,6 +115,7 @@ var Disk = class {
     this.metrics = data.metrics;
     this.connectedClients = data.connectedClients;
     this.authorizedUsers = data.authorizedUsers;
+    this.allowedIps = data.allowedIps;
     this._client = client;
     this._archilRegion = archilRegion;
   }
@@ -133,7 +135,8 @@ var Disk = class {
       mounts: this.mounts,
       metrics: this.metrics,
       connectedClients: this.connectedClients,
-      authorizedUsers: this.authorizedUsers
+      authorizedUsers: this.authorizedUsers,
+      allowedIps: this.allowedIps
     };
   }
   async addUser(user) {
@@ -169,6 +172,32 @@ var Disk = class {
   async removeTokenUser(identifier) {
     await this.removeUser("token", identifier);
   }
+  async getAllowedIPs() {
+    const data = await unwrap(
+      this._client.GET("/api/disks/{id}/allowed-ips", {
+        params: { path: { id: this.id } }
+      })
+    );
+    return data.allowedIps;
+  }
+  async setAllowedIPs(allowedIps) {
+    const data = await unwrap(
+      this._client.PUT("/api/disks/{id}/allowed-ips", {
+        params: { path: { id: this.id } },
+        body: { allowedIps }
+      })
+    );
+    return data.allowedIps;
+  }
+  async addAllowedIP(ip) {
+    const current = await this.getAllowedIPs();
+    if (current.includes(ip)) return current;
+    return this.setAllowedIPs([...current, ip]);
+  }
+  async removeAllowedIP(ip) {
+    const current = await this.getAllowedIPs();
+    return this.setAllowedIPs(current.filter((i) => i !== ip));
+  }
   async delete() {
     await unwrapEmpty(
       this._client.DELETE("/api/disks/{id}", {
@@ -303,9 +332,17 @@ var Tokens = class {
 };
 
 // src/archil.ts
+function isExecMountSpec(m) {
+  return typeof m === "object" && m !== null && "disk" in m;
+}
+function diskIdFromMount(m) {
+  return typeof m === "string" ? m : m.id;
+}
 var Archil = class {
   disks;
   tokens;
+  /** @internal */
+  _client;
   constructor(opts = {}) {
     const apiKey = opts.apiKey ?? process.env.ARCHIL_API_KEY;
     const region = opts.region ?? process.env.ARCHIL_REGION;
@@ -320,9 +357,35 @@ var Archil = class {
       region,
       baseUrl: opts.baseUrl
     });
+    this._client = client;
     this.disks = new Disks(client, region);
     this.tokens = new Tokens(client);
   }
+  /**
+   * Run a command in a container with multiple disks mounted simultaneously,
+   * each at its own relative path under `/mnt/archil`. Blocks until the
+   * command completes and returns its stdout, stderr, exit code, and timing.
+   */
+  async exec(opts) {
+    const disks = {};
+    for (const [relPath, mount] of Object.entries(opts.disks)) {
+      if (isExecMountSpec(mount)) {
+        const entry = {
+          disk: diskIdFromMount(mount.disk),
+          readOnly: mount.readOnly ?? false
+        };
+        if (mount.subdirectory !== void 0) entry.subdirectory = mount.subdirectory;
+        disks[relPath] = entry;
+      } else {
+        disks[relPath] = diskIdFromMount(mount);
+      }
+    }
+    return unwrap(
+      this._client.POST("/api/exec", {
+        body: { disks, command: opts.command }
+      })
+    );
+  }
 };
 
 // src/index.ts
@@ -356,6 +419,9 @@ function createApiKey(req) {
 function deleteApiKey(id) {
   return archil().tokens.delete(id);
 }
+function exec(opts) {
+  return archil().exec(opts);
+}
 export {
   Archil,
   ArchilApiError,
@@ -366,6 +432,7 @@ export {
   createApiKey,
   createDisk,
   deleteApiKey,
+  exec,
   getDisk,
   listApiKeys,
   listDisks

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "disk",
-  "version": "0.8.9",
+  "version": "0.8.11",
   "description": "Pure-JS client and CLI for Archil disks",
   "type": "module",
   "main": "dist/index.cjs",