freestyle-sandboxes 0.1.35 → 0.1.37

package/index.cjs

@@ -82,209 +82,281 @@ class GitErrorError extends Error {
   static statusCode = 500;
   static description = `{message}`;
 }
-class PartitionNotFoundError extends Error {
+class SnapshotNotFoundError extends Error {
   constructor(body) {
     super(
-      `PARTITION_NOT_FOUND: ${body.message}`
+      `SNAPSHOT_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "PartitionNotFoundError";
+    this.name = "SnapshotNotFoundError";
   }
-  static code = "PARTITION_NOT_FOUND";
+  static code = "SNAPSHOT_NOT_FOUND";
   static statusCode = 404;
-  static description = `Partition not found: {partition_id}`;
+  static description = `Snapshot not found: {snapshot_id}`;
 }
-class VmOperationDeniedDuringTransactionError extends Error {
+class ResumedVmNonResponsiveError extends Error {
   constructor(body) {
     super(
-      `VM_OPERATION_DENIED_DURING_TRANSACTION: ${body.message}`
+      `RESUMED_VM_NON_RESPONSIVE: ${body.message}`
     );
     this.body = body;
-    this.name = "VmOperationDeniedDuringTransactionError";
+    this.name = "ResumedVmNonResponsiveError";
   }
-  static code = "VM_OPERATION_DENIED_DURING_TRANSACTION";
-  static statusCode = 409;
-  static description = `VM operation denied during active transaction for VM {vm_id} in transaction {transaction_id}`;
+  static code = "RESUMED_VM_NON_RESPONSIVE";
+  static statusCode = 500;
+  static description = `Resumed VM {vm_id} is not responsive after {timeout_seconds}s`;
 }
-class VmTransactionIdMismatchError extends Error {
+class SnapshotLoadTimeoutError extends Error {
   constructor(body) {
     super(
-      `VM_TRANSACTION_ID_MISMATCH: ${body.message}`
+      `SNAPSHOT_LOAD_TIMEOUT: ${body.message}`
     );
     this.body = body;
-    this.name = "VmTransactionIdMismatchError";
+    this.name = "SnapshotLoadTimeoutError";
   }
-  static code = "VM_TRANSACTION_ID_MISMATCH";
-  static statusCode = 400;
-  static description = `Transaction ID {provided_transaction_id} does not match the current VM transaction {expected_transaction_id} for VM {vm_id}`;
+  static code = "SNAPSHOT_LOAD_TIMEOUT";
+  static statusCode = 500;
+  static description = `Snapshot load timed out after {elapsed_seconds}s for instance {vm_instance_id}, logs: {log_path}`;
 }
-class VmNotInTransactionError extends Error {
+class UffdTimeoutErrorError extends Error {
   constructor(body) {
     super(
-      `VM_NOT_IN_TRANSACTION: ${body.message}`
+      `UFFD_TIMEOUT_ERROR: ${body.message}`
     );
     this.body = body;
-    this.name = "VmNotInTransactionError";
+    this.name = "UffdTimeoutErrorError";
   }
-  static code = "VM_NOT_IN_TRANSACTION";
-  static statusCode = 404;
-  static description = `VM not in a transaction: {vm_id}`;
+  static code = "UFFD_TIMEOUT_ERROR";
+  static statusCode = 500;
+  static description = `UFFD socket timeout: {report_socket_path}, logs: {log_path}`;
 }
-class VmNotRunningError extends Error {
+class KernelPanicError extends Error {
   constructor(body) {
     super(
-      `VM_NOT_RUNNING: ${body.message}`
+      `KERNEL_PANIC: ${body.message}`
     );
     this.body = body;
-    this.name = "VmNotRunningError";
+    this.name = "KernelPanicError";
   }
-  static code = "VM_NOT_RUNNING";
-  static statusCode = 400;
-  static description = `Stopped VM not running`;
+  static code = "KERNEL_PANIC";
+  static statusCode = 500;
+  static description = `VM kernel panic detected`;
 }
-class FileNotFoundError extends Error {
+class VmDeletedError extends Error {
   constructor(body) {
     super(
-      `FILE_NOT_FOUND: ${body.message}`
+      `VM_DELETED: ${body.message}`
     );
     this.body = body;
-    this.name = "FileNotFoundError";
+    this.name = "VmDeletedError";
   }
-  static code = "FILE_NOT_FOUND";
-  static statusCode = 404;
-  static description = `File not found: {path}`;
+  static code = "VM_DELETED";
+  static statusCode = 410;
+  static description = `Cannot start VM: VM files have been deleted. This VM was ephemeral and its files were removed.`;
 }
-class FilesBadRequestError extends Error {
+class ReqwestError extends Error {
   constructor(body) {
     super(
-      `FILES_BAD_REQUEST: ${body.message}`
+      `REQWEST: ${body.message}`
     );
     this.body = body;
-    this.name = "FilesBadRequestError";
+    this.name = "ReqwestError";
   }
-  static code = "FILES_BAD_REQUEST";
-  static statusCode = 400;
-  static description = `Bad request: {message}`;
+  static code = "REQWEST";
+  static statusCode = 500;
+  static description = `Reqwest error: {details}`;
 }
-class InvalidGitRepoSpecErrorError extends Error {
+class FirecrackerPidNotFoundError extends Error {
   constructor(body) {
     super(
-      `INVALID_GIT_REPO_SPEC_ERROR: ${body.message}`
+      `FIRECRACKER_PID_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "InvalidGitRepoSpecErrorError";
+    this.name = "FirecrackerPidNotFoundError";
   }
-  static code = "INVALID_GIT_REPO_SPEC_ERROR";
-  static statusCode = 400;
-  static description = `Invalid git repository specification: {message}`;
+  static code = "FIRECRACKER_PID_NOT_FOUND";
+  static statusCode = 500;
+  static description = `Firecracker PID not found`;
 }
-class InternalErrorError extends Error {
+class FirecrackerApiSocketNotFoundError extends Error {
   constructor(body) {
     super(
-      `INTERNAL_ERROR: ${body.message}`
+      `FIRECRACKER_API_SOCKET_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "InternalErrorError";
+    this.name = "FirecrackerApiSocketNotFoundError";
   }
-  static code = "INTERNAL_ERROR";
+  static code = "FIRECRACKER_API_SOCKET_NOT_FOUND";
   static statusCode = 500;
-  static description = `Internal error: {message}`;
+  static description = `Firecracker API socket not found`;
 }
-class ForkVmNotFoundError extends Error {
+class InvalidSnapshotIdError extends Error {
   constructor(body) {
     super(
-      `FORK_VM_NOT_FOUND: ${body.message}`
+      `INVALID_SNAPSHOT_ID: ${body.message}`
     );
     this.body = body;
-    this.name = "ForkVmNotFoundError";
+    this.name = "InvalidSnapshotIdError";
   }
-  static code = "FORK_VM_NOT_FOUND";
-  static statusCode = 404;
-  static description = `Fork VM not found: {fork_vm_id}`;
+  static code = "INVALID_SNAPSHOT_ID";
+  static statusCode = 400;
+  static description = `Invalid snapshot id: {id}`;
 }
-class CreateSnapshotBadRequestError extends Error {
+class VmStartTimeoutError extends Error {
   constructor(body) {
     super(
-      `CREATE_SNAPSHOT_BAD_REQUEST: ${body.message}`
+      `VM_START_TIMEOUT: ${body.message}`
     );
     this.body = body;
-    this.name = "CreateSnapshotBadRequestError";
+    this.name = "VmStartTimeoutError";
   }
-  static code = "CREATE_SNAPSHOT_BAD_REQUEST";
-  static statusCode = 400;
-  static description = `Bad request: {message}`;
+  static code = "VM_START_TIMEOUT";
+  static statusCode = 504;
+  static description = `VM did not become ready within the specified timeout`;
 }
-class ActiveTransactionErrorError extends Error {
+class VmIsSuspendingError extends Error {
   constructor(body) {
     super(
-      `ACTIVE_TRANSACTION_ERROR: ${body.message}`
+      `VM_IS_SUSPENDING: ${body.message}`
     );
     this.body = body;
-    this.name = "ActiveTransactionErrorError";
+    this.name = "VmIsSuspendingError";
   }
-  static code = "ACTIVE_TRANSACTION_ERROR";
+  static code = "VM_IS_SUSPENDING";
+  static statusCode = 409;
+  static description = `VM is currently being suspended`;
+}
+class VmExitDuringStartError extends Error {
+  constructor(body) {
+    super(
+      `VM_EXIT_DURING_START: ${body.message}`
+    );
+    this.body = body;
+    this.name = "VmExitDuringStartError";
+  }
+  static code = "VM_EXIT_DURING_START";
   static statusCode = 500;
-  static description = `Active transaction error: {details}`;
+  static description = `VM process exited unexpectedly during start`;
 }
-class SwapVmTapError extends Error {
+class VmAccessDeniedError extends Error {
   constructor(body) {
     super(
-      `SWAP_VM_TAP: ${body.message}`
+      `VM_ACCESS_DENIED: ${body.message}`
     );
     this.body = body;
-    this.name = "SwapVmTapError";
+    this.name = "VmAccessDeniedError";
   }
-  static code = "SWAP_VM_TAP";
+  static code = "VM_ACCESS_DENIED";
+  static statusCode = 403;
+  static description = `You do not have access to this VM`;
+}
+class StdIoError extends Error {
+  constructor(body) {
+    super(
+      `STD_IO: ${body.message}`
+    );
+    this.body = body;
+    this.name = "StdIoError";
+  }
+  static code = "STD_IO";
   static statusCode = 500;
-  static description = `Failed to swap tap device: {details}`;
+  static description = `Standard IO error`;
 }
-class RootfsCopyErrorError extends Error {
+class FailedToSpawnUffdError extends Error {
   constructor(body) {
     super(
-      `ROOTFS_COPY_ERROR: ${body.message}`
+      `FAILED_TO_SPAWN_UFFD: ${body.message}`
     );
     this.body = body;
-    this.name = "RootfsCopyErrorError";
+    this.name = "FailedToSpawnUffdError";
   }
-  static code = "ROOTFS_COPY_ERROR";
+  static code = "FAILED_TO_SPAWN_UFFD";
   static statusCode = 500;
-  static description = `Failed to copy rootfs from {from} to {to}: {details}`;
+  static description = `Failed to spawn UFFD handler '{daemon_name}'`;
 }
-class VmNotFoundInFsError extends Error {
+class VmSpawnProcessError extends Error {
   constructor(body) {
     super(
-      `VM_NOT_FOUND_IN_FS: ${body.message}`
+      `VM_SPAWN_PROCESS: ${body.message}`
     );
     this.body = body;
-    this.name = "VmNotFoundInFsError";
+    this.name = "VmSpawnProcessError";
   }
-  static code = "VM_NOT_FOUND_IN_FS";
-  static statusCode = 406;
-  static description = `Vm Not found in filesystem`;
+  static code = "VM_SPAWN_PROCESS";
+  static statusCode = 500;
+  static description = `Failed to spawn process for VM`;
 }
-class DatabaseErrorError extends Error {
+class VmSubnetNotFoundError extends Error {
   constructor(body) {
     super(
-      `DATABASE_ERROR: ${body.message}`
+      `VM_SUBNET_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "DatabaseErrorError";
+    this.name = "VmSubnetNotFoundError";
   }
-  static code = "DATABASE_ERROR";
+  static code = "VM_SUBNET_NOT_FOUND";
   static statusCode = 500;
-  static description = `Database error occurred while constructing VmRecord, details: {details}`;
+  static description = `Subnet for VM not found`;
 }
-class InvalidVmIdError extends Error {
+class VmOperationDeniedDuringTransactionError extends Error {
   constructor(body) {
     super(
-      `INVALID_VM_ID: ${body.message}`
+      `VM_OPERATION_DENIED_DURING_TRANSACTION: ${body.message}`
     );
     this.body = body;
-    this.name = "InvalidVmIdError";
+    this.name = "VmOperationDeniedDuringTransactionError";
   }
-  static code = "INVALID_VM_ID";
+  static code = "VM_OPERATION_DENIED_DURING_TRANSACTION";
+  static statusCode = 409;
+  static description = `VM operation denied during active transaction for VM {vm_id} in transaction {transaction_id}`;
+}
+class VmTransactionIdMismatchError extends Error {
+  constructor(body) {
+    super(
+      `VM_TRANSACTION_ID_MISMATCH: ${body.message}`
+    );
+    this.body = body;
+    this.name = "VmTransactionIdMismatchError";
+  }
+  static code = "VM_TRANSACTION_ID_MISMATCH";
   static statusCode = 400;
-  static description = `Invalid VM ID: {vm_id}, details: {details}`;
+  static description = `Transaction ID {provided_transaction_id} does not match the current VM transaction {expected_transaction_id} for VM {vm_id}`;
+}
+class VmNotInTransactionError extends Error {
+  constructor(body) {
+    super(
+      `VM_NOT_IN_TRANSACTION: ${body.message}`
+    );
+    this.body = body;
+    this.name = "VmNotInTransactionError";
+  }
+  static code = "VM_NOT_IN_TRANSACTION";
+  static statusCode = 404;
+  static description = `VM not in a transaction: {vm_id}`;
+}
+class VmNotFoundInFsError extends Error {
+  constructor(body) {
+    super(
+      `VM_NOT_FOUND_IN_FS: ${body.message}`
+    );
+    this.body = body;
+    this.name = "VmNotFoundInFsError";
+  }
+  static code = "VM_NOT_FOUND_IN_FS";
+  static statusCode = 406;
+  static description = `Vm Not found in filesystem`;
+}
+class VmNotRunningError extends Error {
+  constructor(body) {
+    super(
+      `VM_NOT_RUNNING: ${body.message}`
+    );
+    this.body = body;
+    this.name = "VmNotRunningError";
+  }
+  static code = "VM_NOT_RUNNING";
+  static statusCode = 400;
+  static description = `VM is not running: {vm_id}`;
 }
 class VmNotFoundError extends Error {
   constructor(body) {
@@ -334,533 +406,473 @@ class InternalVmNotFoundError extends Error {
   static statusCode = 404;
   static description = `VM not found: {vm_id}`;
 }
-class SnapshotSetupFailedError extends Error {
+class UserNotFoundError extends Error {
   constructor(body) {
     super(
-      `SNAPSHOT_SETUP_FAILED: ${body.message}`
+      `USER_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "SnapshotSetupFailedError";
+    this.name = "UserNotFoundError";
   }
-  static code = "SNAPSHOT_SETUP_FAILED";
-  static statusCode = 500;
-  static description = `Snapshot setup failed: {failed_reason}`;
+  static code = "USER_NOT_FOUND";
+  static statusCode = 404;
+  static description = `User not found: {user_name}`;
 }
-class SnapshotVmBadRequestError extends Error {
+class UserAlreadyExistsError extends Error {
   constructor(body) {
     super(
-      `SNAPSHOT_VM_BAD_REQUEST: ${body.message}`
+      `USER_ALREADY_EXISTS: ${body.message}`
     );
     this.body = body;
-    this.name = "SnapshotVmBadRequestError";
+    this.name = "UserAlreadyExistsError";
   }
-  static code = "SNAPSHOT_VM_BAD_REQUEST";
-  static statusCode = 400;
-  static description = `Bad request: {message}`;
+  static code = "USER_ALREADY_EXISTS";
+  static statusCode = 409;
+  static description = `Conflict: User '{user_name}' already exists`;
 }
-class VmDeletedError extends Error {
+class ValidationErrorError extends Error {
   constructor(body) {
     super(
-      `VM_DELETED: ${body.message}`
+      `VALIDATION_ERROR: ${body.message}`
     );
     this.body = body;
-    this.name = "VmDeletedError";
+    this.name = "ValidationErrorError";
   }
-  static code = "VM_DELETED";
-  static statusCode = 500;
-  static description = `Vm {vm_id} is marked as deleted but still exists in the database`;
+  static code = "VALIDATION_ERROR";
+  static statusCode = 400;
+  static description = `Validation error: {message}`;
 }
-class NoDefaultSnapshotAvailableError extends Error {
+class GroupNotFoundError extends Error {
   constructor(body) {
     super(
-      `NO_DEFAULT_SNAPSHOT_AVAILABLE: ${body.message}`
+      `GROUP_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "NoDefaultSnapshotAvailableError";
+    this.name = "GroupNotFoundError";
   }
-  static code = "NO_DEFAULT_SNAPSHOT_AVAILABLE";
+  static code = "GROUP_NOT_FOUND";
   static statusCode = 404;
-  static description = `No default snapshot available for account {account_id}`;
+  static description = `Group not found: {group_name}`;
 }
-class DockerSnapshotFailedError extends Error {
+class GroupAlreadyExistsError extends Error {
   constructor(body) {
     super(
-      `DOCKER_SNAPSHOT_FAILED: ${body.message}`
+      `GROUP_ALREADY_EXISTS: ${body.message}`
     );
     this.body = body;
-    this.name = "DockerSnapshotFailedError";
+    this.name = "GroupAlreadyExistsError";
   }
-  static code = "DOCKER_SNAPSHOT_FAILED";
-  static statusCode = 500;
-  static description = `Failed to create snapshot from Docker image {docker_image} for account {account_id}: {details}`;
+  static code = "GROUP_ALREADY_EXISTS";
+  static statusCode = 409;
+  static description = `Conflict: Group '{group_name}' already exists`;
 }
-class SetDefaultSnapshotFailedError extends Error {
+class DuplicateUserNameError extends Error {
   constructor(body) {
     super(
-      `SET_DEFAULT_SNAPSHOT_FAILED: ${body.message}`
+      `DUPLICATE_USER_NAME: ${body.message}`
     );
     this.body = body;
-    this.name = "SetDefaultSnapshotFailedError";
+    this.name = "DuplicateUserNameError";
   }
-  static code = "SET_DEFAULT_SNAPSHOT_FAILED";
-  static statusCode = 500;
-  static description = `Failed to update default snapshot in database for account {account_id}, snapshot {snapshot_id}: {details}`;
+  static code = "DUPLICATE_USER_NAME";
+  static statusCode = 400;
+  static description = `Duplicate user name '{name}' found`;
 }
-class SnapshotLayerCreationFailedError extends Error {
+class UserGroupEmptyError extends Error {
   constructor(body) {
     super(
-      `SNAPSHOT_LAYER_CREATION_FAILED: ${body.message}`
+      `USER_GROUP_EMPTY: ${body.message}`
     );
     this.body = body;
-    this.name = "SnapshotLayerCreationFailedError";
+    this.name = "UserGroupEmptyError";
   }
-  static code = "SNAPSHOT_LAYER_CREATION_FAILED";
-  static statusCode = 500;
-  static description = `Failed to create snapshot layer for account {account_id} from {source_snapshot_dir}: {details}`;
+  static code = "USER_GROUP_EMPTY";
+  static statusCode = 400;
+  static description = `User '{user}' has empty string in groups`;
 }
-class SnapshotDirNotFoundError extends Error {
+class UserSystemFlagMismatchError extends Error {
   constructor(body) {
     super(
-      `SNAPSHOT_DIR_NOT_FOUND: ${body.message}`
+      `USER_SYSTEM_FLAG_MISMATCH: ${body.message}`
     );
     this.body = body;
-    this.name = "SnapshotDirNotFoundError";
+    this.name = "UserSystemFlagMismatchError";
   }
-  static code = "SNAPSHOT_DIR_NOT_FOUND";
-  static statusCode = 500;
-  static description = `Snapshot directory not found at {snapshot_dir} for account {account_id}, snapshot {snapshot_id}`;
+  static code = "USER_SYSTEM_FLAG_MISMATCH";
+  static statusCode = 400;
+  static description = `User '{user}' has system=true but UID {uid} is > 999 (system range)`;
 }
-class SubvolumeCreationFailedError extends Error {
+class UserUidOutOfRangeError extends Error {
   constructor(body) {
     super(
-      `SUBVOLUME_CREATION_FAILED: ${body.message}`
+      `USER_UID_OUT_OF_RANGE: ${body.message}`
     );
     this.body = body;
-    this.name = "SubvolumeCreationFailedError";
+    this.name = "UserUidOutOfRangeError";
   }
-  static code = "SUBVOLUME_CREATION_FAILED";
-  static statusCode = 500;
-  static description = `Failed to create account subvolume for account {account_id}: {details}`;
+  static code = "USER_UID_OUT_OF_RANGE";
+  static statusCode = 400;
+  static description = `User '{user}' has invalid UID {uid} (must be 0-65535)`;
 }
-class GetDefaultSnapshotFailedError extends Error {
+class UserHomeInvalidError extends Error {
   constructor(body) {
     super(
-      `GET_DEFAULT_SNAPSHOT_FAILED: ${body.message}`
+      `USER_HOME_INVALID: ${body.message}`
     );
     this.body = body;
-    this.name = "GetDefaultSnapshotFailedError";
+    this.name = "UserHomeInvalidError";
   }
-  static code = "GET_DEFAULT_SNAPSHOT_FAILED";
-  static statusCode = 500;
-  static description = `Failed to query account default snapshot for account {account_id}: {details}`;
+  static code = "USER_HOME_INVALID";
+  static statusCode = 400;
+  static description = `User '{user}' has invalid home path '{home}' (must be absolute path starting with /)`;
 }
-class SuspendFailedAndStopFailedError extends Error {
+class UserShellInvalidError extends Error {
   constructor(body) {
     super(
-      `SUSPEND_FAILED_AND_STOP_FAILED: ${body.message}`
+      `USER_SHELL_INVALID: ${body.message}`
     );
     this.body = body;
-    this.name = "SuspendFailedAndStopFailedError";
+    this.name = "UserShellInvalidError";
   }
-  static code = "SUSPEND_FAILED_AND_STOP_FAILED";
-  static statusCode = 500;
-  static description = `Failed to gracefully suspend or stop VM`;
+  static code = "USER_SHELL_INVALID";
+  static statusCode = 400;
+  static description = `User '{user}' has invalid shell path '{shell}' (must be absolute path starting with /)`;
 }
-class SuspendFailedAndStoppedError extends Error {
+class DuplicateGroupNameError extends Error {
   constructor(body) {
     super(
-      `SUSPEND_FAILED_AND_STOPPED: ${body.message}`
+      `DUPLICATE_GROUP_NAME: ${body.message}`
     );
     this.body = body;
-    this.name = "SuspendFailedAndStoppedError";
+    this.name = "DuplicateGroupNameError";
   }
-  static code = "SUSPEND_FAILED_AND_STOPPED";
-  static statusCode = 500;
-  static description = `Failed to gracefully suspend, stopped VM`;
+  static code = "DUPLICATE_GROUP_NAME";
+  static statusCode = 400;
+  static description = `Duplicate group name '{name}' found`;
 }
-class SnapshotNotFoundError extends Error {
+class GroupNameReservedError extends Error {
   constructor(body) {
     super(
-      `SNAPSHOT_NOT_FOUND: ${body.message}`
+      `GROUP_NAME_RESERVED: ${body.message}`
     );
     this.body = body;
-    this.name = "SnapshotNotFoundError";
+    this.name = "GroupNameReservedError";
   }
-  static code = "SNAPSHOT_NOT_FOUND";
-  static statusCode = 404;
-  static description = `Snapshot not found: {snapshot_id}`;
+  static code = "GROUP_NAME_RESERVED";
+  static statusCode = 400;
+  static description = `Group name '{name}' is reserved and cannot be used`;
 }
-class ResumedVmNonResponsiveError extends Error {
+class GroupNameInvalidCharsError extends Error {
   constructor(body) {
     super(
-      `RESUMED_VM_NON_RESPONSIVE: ${body.message}`
+      `GROUP_NAME_INVALID_CHARS: ${body.message}`
     );
     this.body = body;
-    this.name = "ResumedVmNonResponsiveError";
+    this.name = "GroupNameInvalidCharsError";
   }
-  static code = "RESUMED_VM_NON_RESPONSIVE";
-  static statusCode = 500;
-  static description = `Resumed VM {vm_id} is not responsive after {timeout_seconds}s`;
+  static code = "GROUP_NAME_INVALID_CHARS";
+  static statusCode = 400;
+  static description = `Group name '{name}' contains invalid characters (must match [a-z_][a-z0-9_-]*)`;
 }
-class SnapshotLoadTimeoutError extends Error {
+class GroupNameTooLongError extends Error {
   constructor(body) {
     super(
-      `SNAPSHOT_LOAD_TIMEOUT: ${body.message}`
+      `GROUP_NAME_TOO_LONG: ${body.message}`
     );
     this.body = body;
-    this.name = "SnapshotLoadTimeoutError";
+    this.name = "GroupNameTooLongError";
   }
-  static code = "SNAPSHOT_LOAD_TIMEOUT";
-  static statusCode = 500;
-  static description = `Snapshot load timed out after {elapsed_seconds}s for instance {vm_instance_id}, logs: {log_path}`;
+  static code = "GROUP_NAME_TOO_LONG";
+  static statusCode = 400;
+  static description = `Group name '{name}' is too long (max {max_length} characters)`;
 }
-class UffdTimeoutErrorError extends Error {
+class GroupNameEmptyError extends Error {
   constructor(body) {
     super(
-      `UFFD_TIMEOUT_ERROR: ${body.message}`
+      `GROUP_NAME_EMPTY: ${body.message}`
     );
     this.body = body;
-    this.name = "UffdTimeoutErrorError";
+    this.name = "GroupNameEmptyError";
   }
-  static code = "UFFD_TIMEOUT_ERROR";
-  static statusCode = 500;
-  static description = `UFFD socket timeout: {report_socket_path}, logs: {log_path}`;
+  static code = "GROUP_NAME_EMPTY";
+  static statusCode = 400;
+  static description = `Group name cannot be empty`;
 }
-class KernelPanicError extends Error {
+class NoDefaultSnapshotAvailableError extends Error {
   constructor(body) {
     super(
-      `KERNEL_PANIC: ${body.message}`
+      `NO_DEFAULT_SNAPSHOT_AVAILABLE: ${body.message}`
     );
     this.body = body;
-    this.name = "KernelPanicError";
+    this.name = "NoDefaultSnapshotAvailableError";
   }
-  static code = "KERNEL_PANIC";
-  static statusCode = 500;
-  static description = `VM kernel panic detected`;
+  static code = "NO_DEFAULT_SNAPSHOT_AVAILABLE";
+  static statusCode = 404;
+  static description = `No default snapshot available for account {account_id}`;
 }
-class ReqwestError extends Error {
+class DockerSnapshotFailedError extends Error {
   constructor(body) {
     super(
-      `REQWEST: ${body.message}`
+      `DOCKER_SNAPSHOT_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "ReqwestError";
+    this.name = "DockerSnapshotFailedError";
   }
-  static code = "REQWEST";
+  static code = "DOCKER_SNAPSHOT_FAILED";
   static statusCode = 500;
-  static description = `Reqwest error: {details}`;
+  static description = `Failed to create snapshot from Docker image {docker_image} for account {account_id}: {details}`;
 }
-class FirecrackerPidNotFoundError extends Error {
+class SetDefaultSnapshotFailedError extends Error {
   constructor(body) {
     super(
-      `FIRECRACKER_PID_NOT_FOUND: ${body.message}`
+      `SET_DEFAULT_SNAPSHOT_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "FirecrackerPidNotFoundError";
+    this.name = "SetDefaultSnapshotFailedError";
   }
-  static code = "FIRECRACKER_PID_NOT_FOUND";
+  static code = "SET_DEFAULT_SNAPSHOT_FAILED";
   static statusCode = 500;
-  static description = `Firecracker PID not found`;
+  static description = `Failed to update default snapshot in database for account {account_id}, snapshot {snapshot_id}: {details}`;
 }
-class FirecrackerApiSocketNotFoundError extends Error {
+class SnapshotLayerCreationFailedError extends Error {
   constructor(body) {
     super(
-      `FIRECRACKER_API_SOCKET_NOT_FOUND: ${body.message}`
+      `SNAPSHOT_LAYER_CREATION_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "FirecrackerApiSocketNotFoundError";
+    this.name = "SnapshotLayerCreationFailedError";
   }
-  static code = "FIRECRACKER_API_SOCKET_NOT_FOUND";
+  static code = "SNAPSHOT_LAYER_CREATION_FAILED";
   static statusCode = 500;
-  static description = `Firecracker API socket not found`;
-}
-class InvalidSnapshotIdError extends Error {
-  constructor(body) {
-    super(
-      `INVALID_SNAPSHOT_ID: ${body.message}`
-    );
-    this.body = body;
-    this.name = "InvalidSnapshotIdError";
-  }
-  static code = "INVALID_SNAPSHOT_ID";
-  static statusCode = 400;
-  static description = `Invalid snapshot id: {id}`;
-}
-class VmStartTimeoutError extends Error {
-  constructor(body) {
-    super(
-      `VM_START_TIMEOUT: ${body.message}`
-    );
-    this.body = body;
-    this.name = "VmStartTimeoutError";
-  }
-  static code = "VM_START_TIMEOUT";
-  static statusCode = 504;
-  static description = `VM did not become ready within the specified timeout`;
+  static description = `Failed to create snapshot layer for account {account_id} from {source_snapshot_dir}: {details}`;
 }
-class VmExitDuringStartError extends Error {
+class SnapshotDirNotFoundError extends Error {
   constructor(body) {
     super(
-      `VM_EXIT_DURING_START: ${body.message}`
+      `SNAPSHOT_DIR_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "VmExitDuringStartError";
+    this.name = "SnapshotDirNotFoundError";
   }
-  static code = "VM_EXIT_DURING_START";
+  static code = "SNAPSHOT_DIR_NOT_FOUND";
   static statusCode = 500;
-  static description = `VM process exited unexpectedly during start`;
+  static description = `Snapshot directory not found at {snapshot_dir} for account {account_id}, snapshot {snapshot_id}`;
 }
-class VmAccessDeniedError extends Error {
+class SubvolumeCreationFailedError extends Error {
   constructor(body) {
     super(
-      `VM_ACCESS_DENIED: ${body.message}`
+      `SUBVOLUME_CREATION_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "VmAccessDeniedError";
+    this.name = "SubvolumeCreationFailedError";
   }
-  static code = "VM_ACCESS_DENIED";
-  static statusCode = 403;
-  static description = `You do not have access to this VM`;
+  static code = "SUBVOLUME_CREATION_FAILED";
+  static statusCode = 500;
+  static description = `Failed to create account subvolume for account {account_id}: {details}`;
 }
-class StdIoError extends Error {
+class GetDefaultSnapshotFailedError extends Error {
   constructor(body) {
     super(
-      `STD_IO: ${body.message}`
+      `GET_DEFAULT_SNAPSHOT_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "StdIoError";
+    this.name = "GetDefaultSnapshotFailedError";
   }
-  static code = "STD_IO";
+  static code = "GET_DEFAULT_SNAPSHOT_FAILED";
   static statusCode = 500;
-  static description = `Standard IO error`;
+  static description = `Failed to query account default snapshot for account {account_id}: {details}`;
 }
-class FailedToSpawnUffdError extends Error {
+class SnapshotSetupFailedError extends Error {
   constructor(body) {
     super(
-      `FAILED_TO_SPAWN_UFFD: ${body.message}`
+      `SNAPSHOT_SETUP_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "FailedToSpawnUffdError";
+    this.name = "SnapshotSetupFailedError";
   }
-  static code = "FAILED_TO_SPAWN_UFFD";
+  static code = "SNAPSHOT_SETUP_FAILED";
   static statusCode = 500;
-  static description = `Failed to spawn UFFD handler '{daemon_name}'`;
+  static description = `Snapshot setup failed: {failed_reason}`;
 }
-class VmSpawnProcessError extends Error {
+class SnapshotVmBadRequestError extends Error {
   constructor(body) {
     super(
-      `VM_SPAWN_PROCESS: ${body.message}`
+      `SNAPSHOT_VM_BAD_REQUEST: ${body.message}`
     );
     this.body = body;
-    this.name = "VmSpawnProcessError";
+    this.name = "SnapshotVmBadRequestError";
   }
-  static code = "VM_SPAWN_PROCESS";
-  static statusCode = 500;
-  static description = `Failed to spawn process for VM`;
+  static code = "SNAPSHOT_VM_BAD_REQUEST";
+  static statusCode = 400;
+  static description = `Bad request: {message}`;
 }
-class VmSubnetNotFoundError extends Error {
+class DatabaseErrorError extends Error {
   constructor(body) {
     super(
-      `VM_SUBNET_NOT_FOUND: ${body.message}`
+      `DATABASE_ERROR: ${body.message}`
     );
     this.body = body;
-    this.name = "VmSubnetNotFoundError";
+    this.name = "DatabaseErrorError";
   }
-  static code = "VM_SUBNET_NOT_FOUND";
+  static code = "DATABASE_ERROR";
   static statusCode = 500;
-  static description = `Subnet for VM not found`;
+  static description = `Database error occurred while constructing VmRecord, details: {details}`;
 }
-class UserNotFoundError extends Error {
+class PartitionNotFoundError extends Error {
   constructor(body) {
     super(
-      `USER_NOT_FOUND: ${body.message}`
+      `PARTITION_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "UserNotFoundError";
+    this.name = "PartitionNotFoundError";
   }
-  static code = "USER_NOT_FOUND";
+  static code = "PARTITION_NOT_FOUND";
   static statusCode = 404;
-  static description = `User not found: {user_name}`;
-}
-class UserAlreadyExistsError extends Error {
-  constructor(body) {
-    super(
-      `USER_ALREADY_EXISTS: ${body.message}`
-    );
-    this.body = body;
-    this.name = "UserAlreadyExistsError";
-  }
-  static code = "USER_ALREADY_EXISTS";
-  static statusCode = 409;
-  static description = `Conflict: User '{user_name}' already exists`;
+  static description = `Partition not found: {partition_id}`;
 }
-class ValidationErrorError extends Error {
+class InvalidVmIdError extends Error {
   constructor(body) {
     super(
-      `VALIDATION_ERROR: ${body.message}`
+      `INVALID_VM_ID: ${body.message}`
     );
     this.body = body;
-    this.name = "ValidationErrorError";
+    this.name = "InvalidVmIdError";
   }
-  static code = "VALIDATION_ERROR";
+  static code = "INVALID_VM_ID";
   static statusCode = 400;
-  static description = `Validation error: {message}`;
-}
-class GroupNotFoundError extends Error {
-  constructor(body) {
-    super(
-      `GROUP_NOT_FOUND: ${body.message}`
-    );
-    this.body = body;
-    this.name = "GroupNotFoundError";
-  }
-  static code = "GROUP_NOT_FOUND";
-  static statusCode = 404;
-  static description = `Group not found: {group_name}`;
-}
-class GroupAlreadyExistsError extends Error {
-  constructor(body) {
-    super(
-      `GROUP_ALREADY_EXISTS: ${body.message}`
-    );
-    this.body = body;
-    this.name = "GroupAlreadyExistsError";
-  }
-  static code = "GROUP_ALREADY_EXISTS";
-  static statusCode = 409;
-  static description = `Conflict: Group '{group_name}' already exists`;
+  static description = `Invalid VM ID: {vm_id}, details: {details}`;
 }
-class DuplicateUserNameError extends Error {
+class SuspendFailedAndStopFailedError extends Error {
   constructor(body) {
     super(
-      `DUPLICATE_USER_NAME: ${body.message}`
+      `SUSPEND_FAILED_AND_STOP_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "DuplicateUserNameError";
+    this.name = "SuspendFailedAndStopFailedError";
   }
-  static code = "DUPLICATE_USER_NAME";
-  static statusCode = 400;
-  static description = `Duplicate user name '{name}' found`;
+  static code = "SUSPEND_FAILED_AND_STOP_FAILED";
+  static statusCode = 500;
+  static description = `Failed to gracefully suspend or stop VM`;
 }
-class UserGroupEmptyError extends Error {
+class SuspendFailedAndStoppedError extends Error {
   constructor(body) {
     super(
-      `USER_GROUP_EMPTY: ${body.message}`
+      `SUSPEND_FAILED_AND_STOPPED: ${body.message}`
     );
     this.body = body;
-    this.name = "UserGroupEmptyError";
+    this.name = "SuspendFailedAndStoppedError";
   }
-  static code = "USER_GROUP_EMPTY";
-  static statusCode = 400;
-  static description = `User '{user}' has empty string in groups`;
+  static code = "SUSPEND_FAILED_AND_STOPPED";
+  static statusCode = 500;
+  static description = `Failed to gracefully suspend, stopped VM`;
 }
-class UserSystemFlagMismatchError extends Error {
+class FileNotFoundError extends Error {
   constructor(body) {
     super(
-      `USER_SYSTEM_FLAG_MISMATCH: ${body.message}`
+      `FILE_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "UserSystemFlagMismatchError";
+    this.name = "FileNotFoundError";
   }
-  static code = "USER_SYSTEM_FLAG_MISMATCH";
-  static statusCode = 400;
-  static description = `User '{user}' has system=true but UID {uid} is > 999 (system range)`;
+  static code = "FILE_NOT_FOUND";
+  static statusCode = 404;
+  static description = `File not found: {path}`;
 }
-class UserUidOutOfRangeError extends Error {
+class FilesBadRequestError extends Error {
   constructor(body) {
     super(
-      `USER_UID_OUT_OF_RANGE: ${body.message}`
+      `FILES_BAD_REQUEST: ${body.message}`
     );
     this.body = body;
-    this.name = "UserUidOutOfRangeError";
+    this.name = "FilesBadRequestError";
   }
-  static code = "USER_UID_OUT_OF_RANGE";
+  static code = "FILES_BAD_REQUEST";
   static statusCode = 400;
-  static description = `User '{user}' has invalid UID {uid} (must be 0-65535)`;
+  static description = `Bad request: {message}`;
 }
-class UserHomeInvalidError extends Error {
+class InvalidGitRepoSpecErrorError extends Error {
   constructor(body) {
     super(
-      `USER_HOME_INVALID: ${body.message}`
+      `INVALID_GIT_REPO_SPEC_ERROR: ${body.message}`
     );
     this.body = body;
-    this.name = "UserHomeInvalidError";
+    this.name = "InvalidGitRepoSpecErrorError";
   }
-  static code = "USER_HOME_INVALID";
+  static code = "INVALID_GIT_REPO_SPEC_ERROR";
   static statusCode = 400;
-  static description = `User '{user}' has invalid home path '{home}' (must be absolute path starting with /)`;
+  static description = `Invalid git repository specification: {message}`;
 }
-class UserShellInvalidError extends Error {
+class InternalErrorError extends Error {
   constructor(body) {
     super(
-      `USER_SHELL_INVALID: ${body.message}`
+      `INTERNAL_ERROR: ${body.message}`
     );
     this.body = body;
-    this.name = "UserShellInvalidError";
+    this.name = "InternalErrorError";
   }
-  static code = "USER_SHELL_INVALID";
-  static statusCode = 400;
-  static description = `User '{user}' has invalid shell path '{shell}' (must be absolute path starting with /)`;
+  static code = "INTERNAL_ERROR";
+  static statusCode = 500;
+  static description = `Internal error: {message}`;
 }
-class DuplicateGroupNameError extends Error {
+class ForkVmNotFoundError extends Error {
   constructor(body) {
     super(
-      `DUPLICATE_GROUP_NAME: ${body.message}`
+      `FORK_VM_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "DuplicateGroupNameError";
+    this.name = "ForkVmNotFoundError";
   }
-  static code = "DUPLICATE_GROUP_NAME";
-  static statusCode = 400;
-  static description = `Duplicate group name '{name}' found`;
+  static code = "FORK_VM_NOT_FOUND";
+  static statusCode = 404;
+  static description = `Fork VM not found: {fork_vm_id}`;
 }
-class GroupNameReservedError extends Error {
+class CreateSnapshotBadRequestError extends Error {
   constructor(body) {
     super(
-      `GROUP_NAME_RESERVED: ${body.message}`
+      `CREATE_SNAPSHOT_BAD_REQUEST: ${body.message}`
     );
     this.body = body;
-    this.name = "GroupNameReservedError";
+    this.name = "CreateSnapshotBadRequestError";
   }
-  static code = "GROUP_NAME_RESERVED";
+  static code = "CREATE_SNAPSHOT_BAD_REQUEST";
   static statusCode = 400;
-  static description = `Group name '{name}' is reserved and cannot be used`;
+  static description = `Bad request: {message}`;
 }
-class GroupNameInvalidCharsError extends Error {
+class ActiveTransactionErrorError extends Error {
   constructor(body) {
     super(
-      `GROUP_NAME_INVALID_CHARS: ${body.message}`
+      `ACTIVE_TRANSACTION_ERROR: ${body.message}`
     );
     this.body = body;
-    this.name = "GroupNameInvalidCharsError";
+    this.name = "ActiveTransactionErrorError";
   }
-  static code = "GROUP_NAME_INVALID_CHARS";
-  static statusCode = 400;
-  static description = `Group name '{name}' contains invalid characters (must match [a-z_][a-z0-9_-]*)`;
+  static code = "ACTIVE_TRANSACTION_ERROR";
+  static statusCode = 500;
+  static description = `Active transaction error: {details}`;
 }
-class GroupNameTooLongError extends Error {
+class SwapVmTapError extends Error {
   constructor(body) {
     super(
-      `GROUP_NAME_TOO_LONG: ${body.message}`
+      `SWAP_VM_TAP: ${body.message}`
     );
     this.body = body;
-    this.name = "GroupNameTooLongError";
+    this.name = "SwapVmTapError";
   }
-  static code = "GROUP_NAME_TOO_LONG";
-  static statusCode = 400;
-  static description = `Group name '{name}' is too long (max {max_length} characters)`;
+  static code = "SWAP_VM_TAP";
+  static statusCode = 500;
+  static description = `Failed to swap tap device: {details}`;
 }
-class GroupNameEmptyError extends Error {
+class RootfsCopyErrorError extends Error {
   constructor(body) {
     super(
-      `GROUP_NAME_EMPTY: ${body.message}`
+      `ROOTFS_COPY_ERROR: ${body.message}`
     );
     this.body = body;
-    this.name = "GroupNameEmptyError";
+    this.name = "RootfsCopyErrorError";
   }
-  static code = "GROUP_NAME_EMPTY";
-  static statusCode = 400;
-  static description = `Group name cannot be empty`;
+  static code = "ROOTFS_COPY_ERROR";
+  static statusCode = 500;
+  static description = `Failed to copy rootfs from {from} to {to}: {details}`;
 }
 class CreateVmBadRequestError extends Error {
   constructor(body) {
@@ -1208,31 +1220,79 @@ class ForbiddenError extends Error {
   }
   static code = "FORBIDDEN";
   static statusCode = 403;
-  static description = `Forbidden: {message}`;
+  static description = `You do not have permission to push to this repository`;
 }
-class UnsupportedTransferError extends Error {
+class UnauthorizedError extends Error {
   constructor(body) {
     super(
-      `UNSUPPORTED_TRANSFER: ${body.message}`
+      `UNAUTHORIZED: ${body.message}`
     );
     this.body = body;
-    this.name = "UnsupportedTransferError";
+    this.name = "UnauthorizedError";
   }
-  static code = "UNSUPPORTED_TRANSFER";
-  static statusCode = 400;
-  static description = `Unsupported LFS transfer protocol(s)`;
+  static code = "UNAUTHORIZED";
+  static statusCode = 401;
+  static description = `Unauthorized`;
 }
-class TreeNotFoundError extends Error {
+class BlobNotFoundError extends Error {
   constructor(body) {
     super(
-      `TREE_NOT_FOUND: ${body.message}`
+      `BLOB_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "TreeNotFoundError";
+    this.name = "BlobNotFoundError";
   }
-  static code = "TREE_NOT_FOUND";
+  static code = "BLOB_NOT_FOUND";
   static statusCode = 404;
-  static description = `Tree not found: {hash}`;
+  static description = `Blob not found: {hash}`;
+}
+class InvalidRangeError extends Error {
+  constructor(body) {
+    super(
+      `INVALID_RANGE: ${body.message}`
+    );
+    this.body = body;
+    this.name = "InvalidRangeError";
+  }
+  static code = "INVALID_RANGE";
+  static statusCode = 400;
+  static description = `Invalid range: 'until' commit ({until}) must be a descendant of 'since' commit ({since}). In other words, 'until' must be newer than 'since' in the commit graph.`;
+}
+class OffsetWithSelectorError extends Error {
+  constructor(body) {
+    super(
+      `OFFSET_WITH_SELECTOR: ${body.message}`
+    );
+    this.body = body;
+    this.name = "OffsetWithSelectorError";
+  }
+  static code = "OFFSET_WITH_SELECTOR";
+  static statusCode = 400;
+  static description = `Cannot use 'offset' parameter together with 'since' or 'until'. Use 'since' for cursor-based pagination.`;
+}
+class CommitNotInBranchError extends Error {
+  constructor(body) {
+    super(
+      `COMMIT_NOT_IN_BRANCH: ${body.message}`
+    );
+    this.body = body;
+    this.name = "CommitNotInBranchError";
+  }
+  static code = "COMMIT_NOT_IN_BRANCH";
+  static statusCode = 400;
+  static description = `Commit {sha} is not in the history of branch {branch}`;
+}
+class CommitNotFoundError extends Error {
+  constructor(body) {
+    super(
+      `COMMIT_NOT_FOUND: ${body.message}`
+    );
+    this.body = body;
+    this.name = "CommitNotFoundError";
+  }
+  static code = "COMMIT_NOT_FOUND";
+  static statusCode = 400;
+  static description = `Commit not found: {sha}`;
 }
 class BranchNotFoundError extends Error {
   constructor(body) {
@@ -1246,6 +1306,126 @@ class BranchNotFoundError extends Error {
   static statusCode = 404;
   static description = `Branch not found: {branch}`;
 }
+class NoDefaultBranchError extends Error {
+  constructor(body) {
+    super(
+      `NO_DEFAULT_BRANCH: ${body.message}`
+    );
+    this.body = body;
+    this.name = "NoDefaultBranchError";
+  }
+  static code = "NO_DEFAULT_BRANCH";
+  static statusCode = 404;
+  static description = `Repository has no default branch configured`;
+}
+class InvalidBase64ContentError extends Error {
+  constructor(body) {
+    super(
+      `INVALID_BASE64_CONTENT: ${body.message}`
+    );
+    this.body = body;
+    this.name = "InvalidBase64ContentError";
+  }
+  static code = "INVALID_BASE64_CONTENT";
+  static statusCode = 400;
+  static description = `Invalid base64 content for file: {path}`;
+}
+class InvalidFileChangeError extends Error {
+  constructor(body) {
+    super(
+      `INVALID_FILE_CHANGE: ${body.message}`
+    );
+    this.body = body;
+    this.name = "InvalidFileChangeError";
+  }
+  static code = "INVALID_FILE_CHANGE";
+  static statusCode = 400;
+  static description = `File change must have either content or deleted flag, not both: {path}`;
+}
+class InvalidFilePathError extends Error {
+  constructor(body) {
+    super(
+      `INVALID_FILE_PATH: ${body.message}`
+    );
+    this.body = body;
+    this.name = "InvalidFilePathError";
+  }
+  static code = "INVALID_FILE_PATH";
+  static statusCode = 400;
+  static description = `Invalid file path: {path}`;
+}
+class ConflictingParentError extends Error {
+  constructor(body) {
+    super(
+      `CONFLICTING_PARENT: ${body.message}`
+    );
+    this.body = body;
+    this.name = "ConflictingParentError";
+  }
+  static code = "CONFLICTING_PARENT";
+  static statusCode = 409;
+  static description = `Conflict: expected parent SHA {expected} but current is {actual:?}`;
+}
+class AmbiguousError extends Error {
+  constructor(body) {
+    super(
+      `AMBIGUOUS: ${body.message}`
+    );
+    this.body = body;
+    this.name = "AmbiguousError";
+  }
+  static code = "AMBIGUOUS";
+  static statusCode = 400;
+  static description = `rev is ambiguous: {rev}`;
+}
+class NotFoundError extends Error {
+  constructor(body) {
+    super(
+      `NOT_FOUND: ${body.message}`
+    );
+    this.body = body;
+    this.name = "NotFoundError";
+  }
+  static code = "NOT_FOUND";
+  static statusCode = 404;
+  static description = `rev not found: {rev}`;
+}
+class InvalidError extends Error {
+  constructor(body) {
+    super(
+      `INVALID: ${body.message}`
+    );
+    this.body = body;
+    this.name = "InvalidError";
+  }
+  static code = "INVALID";
+  static statusCode = 400;
+  static description = `invalid rev syntax: {rev}`;
+}
+class UnsupportedTransferError extends Error {
+  constructor(body) {
+    super(
+      `UNSUPPORTED_TRANSFER: ${body.message}`
+    );
+    this.body = body;
+    this.name = "UnsupportedTransferError";
+  }
+  static code = "UNSUPPORTED_TRANSFER";
+  static statusCode = 400;
+  static description = `Unsupported LFS transfer protocol(s)`;
+}
+class TreeNotFoundError extends Error {
+  constructor(body) {
+    super(
+      `TREE_NOT_FOUND: ${body.message}`
+    );
+    this.body = body;
+    this.name = "TreeNotFoundError";
+  }
+  static code = "TREE_NOT_FOUND";
+  static statusCode = 404;
+  static description = `Tree not found: {hash}`;
+}
 class ParentNotFoundError extends Error {
   constructor(body) {
     super(
@@ -1273,26 +1453,74 @@ class InvalidServiceError extends Error {
 class ExpectedServiceError extends Error {
   constructor(body) {
     super(
-      `EXPECTED_SERVICE: ${body.message}`
+      `EXPECTED_SERVICE: ${body.message}`
+    );
+    this.body = body;
+    this.name = "ExpectedServiceError";
+  }
+  static code = "EXPECTED_SERVICE";
+  static statusCode = 403;
+  static description = `Expected 'service' query parameter`;
+}
+class PathNotFoundError extends Error {
+  constructor(body) {
+    super(
+      `PATH_NOT_FOUND: ${body.message}`
+    );
+    this.body = body;
+    this.name = "PathNotFoundError";
+  }
+  static code = "PATH_NOT_FOUND";
+  static statusCode = 404;
+  static description = `Path not found: {path}`;
+}
+class ReferenceNotFoundError extends Error {
+  constructor(body) {
+    super(
+      `REFERENCE_NOT_FOUND: ${body.message}`
+    );
+    this.body = body;
+    this.name = "ReferenceNotFoundError";
+  }
+  static code = "REFERENCE_NOT_FOUND";
+  static statusCode = 404;
+  static description = `Reference not found: {reference}`;
+}
+class TagNotFoundError extends Error {
+  constructor(body) {
+    super(
+      `TAG_NOT_FOUND: ${body.message}`
+    );
+    this.body = body;
+    this.name = "TagNotFoundError";
+  }
+  static code = "TAG_NOT_FOUND";
+  static statusCode = 404;
+  static description = `Tag not found: {hash}`;
+}
+class InvalidRevisionError extends Error {
+  constructor(body) {
+    super(
+      `INVALID_REVISION: ${body.message}`
     );
     this.body = body;
-    this.name = "ExpectedServiceError";
+    this.name = "InvalidRevisionError";
   }
-  static code = "EXPECTED_SERVICE";
-  static statusCode = 403;
-  static description = `Expected 'service' query parameter`;
+  static code = "INVALID_REVISION";
+  static statusCode = 400;
+  static description = `Invalid revision: {revision}`;
 }
-class NotFoundError extends Error {
+class PackfileError extends Error {
   constructor(body) {
     super(
-      `NOT_FOUND: ${body.message}`
+      `PACKFILE: ${body.message}`
     );
     this.body = body;
-    this.name = "NotFoundError";
+    this.name = "PackfileError";
   }
-  static code = "NOT_FOUND";
-  static statusCode = 404;
-  static description = `Repository not found`;
+  static code = "PACKFILE";
+  static statusCode = 500;
+  static description = `Error building packfile`;
 }
 class SendErrorError extends Error {
   constructor(body) {
@@ -1306,18 +1534,6 @@ class SendErrorError extends Error {
   static statusCode = 500;
   static description = `Stream receiver dropped`;
 }
-class UnauthorizedError extends Error {
-  constructor(body) {
-    super(
-      `UNAUTHORIZED: ${body.message}`
-    );
-    this.body = body;
-    this.name = "UnauthorizedError";
-  }
-  static code = "UNAUTHORIZED";
-  static statusCode = 401;
-  static description = `Unauthorized: admin key and account id are required`;
-}
 class InvalidAccountIdError extends Error {
   constructor(body) {
     super(
@@ -1390,545 +1606,497 @@ class RepoAlreadyExistsError extends Error {
   static statusCode = 409;
   static description = `Repo '{repo_id}' already exists`;
 }
-class TagNotFoundError extends Error {
+class ConflictError extends Error {
   constructor(body) {
     super(
-      `TAG_NOT_FOUND: ${body.message}`
+      `CONFLICT: ${body.message}`
     );
     this.body = body;
-    this.name = "TagNotFoundError";
+    this.name = "ConflictError";
   }
-  static code = "TAG_NOT_FOUND";
-  static statusCode = 404;
-  static description = `Tag not found: {tag}`;
+  static code = "CONFLICT";
+  static statusCode = 409;
+  static description = `Sync conflict: {message}`;
 }
-class InvalidRangeError extends Error {
+class BranchAlreadyExistsError extends Error {
   constructor(body) {
     super(
-      `INVALID_RANGE: ${body.message}`
+      `BRANCH_ALREADY_EXISTS: ${body.message}`
     );
     this.body = body;
-    this.name = "InvalidRangeError";
+    this.name = "BranchAlreadyExistsError";
   }
-  static code = "INVALID_RANGE";
-  static statusCode = 400;
-  static description = `Invalid range: 'until' commit ({until}) must be a descendant of 'since' commit ({since}). In other words, 'until' must be newer than 'since' in the commit graph.`;
+  static code = "BRANCH_ALREADY_EXISTS";
+  static statusCode = 409;
+  static description = `Branch already exists: {branch}`;
 }
-class OffsetWithSelectorError extends Error {
+class GitHubSyncConflictError extends Error {
   constructor(body) {
     super(
-      `OFFSET_WITH_SELECTOR: ${body.message}`
+      `GIT_HUB_SYNC_CONFLICT: ${body.message}`
     );
     this.body = body;
-    this.name = "OffsetWithSelectorError";
+    this.name = "GitHubSyncConflictError";
   }
-  static code = "OFFSET_WITH_SELECTOR";
-  static statusCode = 400;
-  static description = `Cannot use 'offset' parameter together with 'since' or 'until'. Use 'since' for cursor-based pagination.`;
+  static code = "GIT_HUB_SYNC_CONFLICT";
+  static statusCode = 409;
+  static description = `GitHub Sync Conflict: {message}`;
 }
-class CommitNotInBranchError extends Error {
+class InvalidObjectIdError extends Error {
   constructor(body) {
     super(
-      `COMMIT_NOT_IN_BRANCH: ${body.message}`
+      `INVALID_OBJECT_ID: ${body.message}`
     );
     this.body = body;
-    this.name = "CommitNotInBranchError";
+    this.name = "InvalidObjectIdError";
   }
-  static code = "COMMIT_NOT_IN_BRANCH";
+  static code = "INVALID_OBJECT_ID";
   static statusCode = 400;
-  static description = `Commit {sha} is not in the history of branch {branch}`;
+  static description = `Invalid object ID: {hash}`;
 }
-class CommitNotFoundError extends Error {
+class UnavailableError extends Error {
   constructor(body) {
     super(
-      `COMMIT_NOT_FOUND: ${body.message}`
+      `UNAVAILABLE: ${body.message}`
     );
     this.body = body;
-    this.name = "CommitNotFoundError";
+    this.name = "UnavailableError";
   }
-  static code = "COMMIT_NOT_FOUND";
-  static statusCode = 400;
-  static description = `Commit not found: {sha}`;
+  static code = "UNAVAILABLE";
+  static statusCode = 503;
+  static description = `Cron service unavailable`;
 }
-class NoDefaultBranchError extends Error {
+class ScheduleNotFoundError extends Error {
   constructor(body) {
     super(
-      `NO_DEFAULT_BRANCH: ${body.message}`
+      `SCHEDULE_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "NoDefaultBranchError";
+    this.name = "ScheduleNotFoundError";
   }
-  static code = "NO_DEFAULT_BRANCH";
+  static code = "SCHEDULE_NOT_FOUND";
   static statusCode = 404;
-  static description = `Repository has no default branch configured`;
-}
-class InvalidBase64ContentError extends Error {
-  constructor(body) {
-    super(
-      `INVALID_BASE64_CONTENT: ${body.message}`
-    );
-    this.body = body;
-    this.name = "InvalidBase64ContentError";
-  }
-  static code = "INVALID_BASE64_CONTENT";
-  static statusCode = 400;
-  static description = `Invalid base64 content for file: {path}`;
-}
-class InvalidFileChangeError extends Error {
-  constructor(body) {
-    super(
-      `INVALID_FILE_CHANGE: ${body.message}`
-    );
-    this.body = body;
-    this.name = "InvalidFileChangeError";
-  }
-  static code = "INVALID_FILE_CHANGE";
-  static statusCode = 400;
-  static description = `File change must have either content or deleted flag, not both: {path}`;
-}
-class InvalidFilePathError extends Error {
-  constructor(body) {
-    super(
-      `INVALID_FILE_PATH: ${body.message}`
-    );
-    this.body = body;
-    this.name = "InvalidFilePathError";
-  }
-  static code = "INVALID_FILE_PATH";
-  static statusCode = 400;
-  static description = `Invalid file path: {path}`;
-}
-class ConflictingParentError extends Error {
-  constructor(body) {
-    super(
-      `CONFLICTING_PARENT: ${body.message}`
-    );
-    this.body = body;
-    this.name = "ConflictingParentError";
-  }
-  static code = "CONFLICTING_PARENT";
-  static statusCode = 409;
-  static description = `Conflict: expected parent SHA {expected} but current is {actual:?}`;
+  static description = `Schedule not found`;
 }
-class AmbiguousError extends Error {
+class ServiceUnavailableError extends Error {
   constructor(body) {
     super(
-      `AMBIGUOUS: ${body.message}`
+      `SERVICE_UNAVAILABLE: ${body.message}`
     );
     this.body = body;
-    this.name = "AmbiguousError";
+    this.name = "ServiceUnavailableError";
   }
-  static code = "AMBIGUOUS";
-  static statusCode = 400;
-  static description = `rev is ambiguous: {rev}`;
+  static code = "SERVICE_UNAVAILABLE";
+  static statusCode = 503;
+  static description = `Cron service not configured`;
 }
-class InvalidError extends Error {
+class ExecuteLimitExceededError extends Error {
   constructor(body) {
     super(
-      `INVALID: ${body.message}`
+      `EXECUTE_LIMIT_EXCEEDED: ${body.message}`
     );
     this.body = body;
-    this.name = "InvalidError";
+    this.name = "ExecuteLimitExceededError";
   }
-  static code = "INVALID";
-  static statusCode = 400;
-  static description = `invalid rev syntax: {rev}`;
+  static code = "EXECUTE_LIMIT_EXCEEDED";
+  static statusCode = 403;
+  static description = `Execute runs limit exceeded: your plan allows {limit} runs per month, you have used {current}`;
 }
-class PathNotFoundError extends Error {
+class ObservabilityDatabaseErrorError extends Error {
   constructor(body) {
     super(
-      `PATH_NOT_FOUND: ${body.message}`
+      `OBSERVABILITY_DATABASE_ERROR: ${body.message}`
     );
     this.body = body;
-    this.name = "PathNotFoundError";
+    this.name = "ObservabilityDatabaseErrorError";
   }
-  static code = "PATH_NOT_FOUND";
-  static statusCode = 404;
-  static description = `Path not found: {path}`;
+  static code = "OBSERVABILITY_DATABASE_ERROR";
+  static statusCode = 500;
+  static description = `Database operation failed: {message}`;
 }
-class ReferenceNotFoundError extends Error {
+class ObservabilityAccessDeniedError extends Error {
   constructor(body) {
     super(
-      `REFERENCE_NOT_FOUND: ${body.message}`
+      `OBSERVABILITY_ACCESS_DENIED: ${body.message}`
     );
     this.body = body;
-    this.name = "ReferenceNotFoundError";
+    this.name = "ObservabilityAccessDeniedError";
   }
-  static code = "REFERENCE_NOT_FOUND";
-  static statusCode = 404;
-  static description = `Reference not found: {reference}`;
+  static code = "OBSERVABILITY_ACCESS_DENIED";
+  static statusCode = 403;
+  static description = `Access denied to logs for deployment: {deployment_id}`;
 }
-class BlobNotFoundError extends Error {
+class ParseLogsFailedError extends Error {
   constructor(body) {
     super(
-      `BLOB_NOT_FOUND: ${body.message}`
+      `PARSE_LOGS_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "BlobNotFoundError";
+    this.name = "ParseLogsFailedError";
   }
-  static code = "BLOB_NOT_FOUND";
-  static statusCode = 404;
-  static description = `Blob not found: {hash}`;
+  static code = "PARSE_LOGS_FAILED";
+  static statusCode = 500;
+  static description = `Failed to parse logs: {message}`;
 }
-class PackfileError extends Error {
+class RetrieveLogsFailedError extends Error {
   constructor(body) {
     super(
-      `PACKFILE: ${body.message}`
+      `RETRIEVE_LOGS_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "PackfileError";
+    this.name = "RetrieveLogsFailedError";
   }
-  static code = "PACKFILE";
+  static code = "RETRIEVE_LOGS_FAILED";
   static statusCode = 500;
-  static description = `Error building packfile`;
+  static description = `Failed to retrieve logs: {message}`;
 }
-class InvalidRevisionError extends Error {
+class InvalidQueryError extends Error {
   constructor(body) {
     super(
-      `INVALID_REVISION: ${body.message}`
+      `INVALID_QUERY: ${body.message}`
     );
     this.body = body;
-    this.name = "InvalidRevisionError";
+    this.name = "InvalidQueryError";
   }
-  static code = "INVALID_REVISION";
+  static code = "INVALID_QUERY";
   static statusCode = 400;
-  static description = `Invalid revision: {revision}`;
+  static description = `Invalid log query: {message}`;
 }
-class ConflictError extends Error {
+class LogsNotFoundError extends Error {
   constructor(body) {
     super(
-      `CONFLICT: ${body.message}`
+      `LOGS_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "ConflictError";
+    this.name = "LogsNotFoundError";
   }
-  static code = "CONFLICT";
-  static statusCode = 409;
-  static description = `Sync conflict: {message}`;
+  static code = "LOGS_NOT_FOUND";
+  static statusCode = 404;
+  static description = `Logs not found for deployment: {deployment_id}`;
 }
-class BranchAlreadyExistsError extends Error {
+class ExecuteInternalErrorError extends Error {
   constructor(body) {
     super(
-      `BRANCH_ALREADY_EXISTS: ${body.message}`
+      `EXECUTE_INTERNAL_ERROR: ${body.message}`
     );
     this.body = body;
-    this.name = "BranchAlreadyExistsError";
+    this.name = "ExecuteInternalErrorError";
   }
-  static code = "BRANCH_ALREADY_EXISTS";
-  static statusCode = 409;
-  static description = `Branch already exists: {branch}`;
+  static code = "EXECUTE_INTERNAL_ERROR";
+  static statusCode = 500;
+  static description = `Internal error: {message}`;
 }
-class GitHubSyncConflictError extends Error {
+class ExecuteAccessDeniedError extends Error {
   constructor(body) {
     super(
-      `GIT_HUB_SYNC_CONFLICT: ${body.message}`
+      `EXECUTE_ACCESS_DENIED: ${body.message}`
     );
     this.body = body;
-    this.name = "GitHubSyncConflictError";
+    this.name = "ExecuteAccessDeniedError";
   }
-  static code = "GIT_HUB_SYNC_CONFLICT";
-  static statusCode = 409;
-  static description = `GitHub Sync Conflict: {message}`;
+  static code = "EXECUTE_ACCESS_DENIED";
+  static statusCode = 403;
+  static description = `Access denied to execute run`;
 }
-class InvalidObjectIdError extends Error {
+class ListRunsFailedError extends Error {
   constructor(body) {
     super(
-      `INVALID_OBJECT_ID: ${body.message}`
+      `LIST_RUNS_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "InvalidObjectIdError";
+    this.name = "ListRunsFailedError";
   }
-  static code = "INVALID_OBJECT_ID";
-  static statusCode = 400;
-  static description = `Invalid object ID: {hash}`;
+  static code = "LIST_RUNS_FAILED";
+  static statusCode = 500;
+  static description = `Failed to list execute runs: {message}`;
 }
-class UnavailableError extends Error {
+class ExecutionErrorError extends Error {
   constructor(body) {
     super(
-      `UNAVAILABLE: ${body.message}`
+      `EXECUTION_ERROR: ${body.message}`
     );
     this.body = body;
-    this.name = "UnavailableError";
+    this.name = "ExecutionErrorError";
   }
-  static code = "UNAVAILABLE";
-  static statusCode = 503;
-  static description = `Cron service unavailable`;
+  static code = "EXECUTION_ERROR";
+  static statusCode = 500;
+  static description = `Script execution error: {message}`;
 }
-class ScheduleNotFoundError extends Error {
+class ConnectionFailedError extends Error {
   constructor(body) {
     super(
-      `SCHEDULE_NOT_FOUND: ${body.message}`
+      `CONNECTION_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "ScheduleNotFoundError";
+    this.name = "ConnectionFailedError";
   }
-  static code = "SCHEDULE_NOT_FOUND";
-  static statusCode = 404;
-  static description = `Schedule not found`;
+  static code = "CONNECTION_FAILED";
+  static statusCode = 500;
+  static description = `Failed to connect to execute server: {message}`;
 }
-class ServiceUnavailableError extends Error {
+class MetadataWriteFailedError extends Error {
   constructor(body) {
     super(
-      `SERVICE_UNAVAILABLE: ${body.message}`
+      `METADATA_WRITE_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "ServiceUnavailableError";
+    this.name = "MetadataWriteFailedError";
   }
-  static code = "SERVICE_UNAVAILABLE";
-  static statusCode = 503;
-  static description = `Cron service not configured`;
+  static code = "METADATA_WRITE_FAILED";
+  static statusCode = 500;
+  static description = `Failed to write metadata file: {message}`;
 }
-class PermissionAlreadyExistsError extends Error {
+class NodeModulesInstallFailedError extends Error {
   constructor(body) {
     super(
-      `PERMISSION_ALREADY_EXISTS: ${body.message}`
+      `NODE_MODULES_INSTALL_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "PermissionAlreadyExistsError";
+    this.name = "NodeModulesInstallFailedError";
   }
-  static code = "PERMISSION_ALREADY_EXISTS";
-  static statusCode = 409;
-  static description = `Permission already exists`;
+  static code = "NODE_MODULES_INSTALL_FAILED";
+  static statusCode = 500;
+  static description = `Failed to install node modules: {message}`;
 }
-class ListTokensFailedError extends Error {
+class NodeModulesDownloadFailedError extends Error {
   constructor(body) {
     super(
-      `LIST_TOKENS_FAILED: ${body.message}`
+      `NODE_MODULES_DOWNLOAD_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "ListTokensFailedError";
+    this.name = "NodeModulesDownloadFailedError";
   }
-  static code = "LIST_TOKENS_FAILED";
+  static code = "NODE_MODULES_DOWNLOAD_FAILED";
   static statusCode = 500;
-  static description = `Failed to list tokens: {message}`;
+  static description = `Failed to download node modules: {message}`;
 }
-class RevokeTokenFailedError extends Error {
+class LockGenerationFailedError extends Error {
   constructor(body) {
     super(
-      `REVOKE_TOKEN_FAILED: ${body.message}`
+      `LOCK_GENERATION_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "RevokeTokenFailedError";
+    this.name = "LockGenerationFailedError";
   }
-  static code = "REVOKE_TOKEN_FAILED";
+  static code = "LOCK_GENERATION_FAILED";
   static statusCode = 500;
-  static description = `Failed to revoke token: {message}`;
+  static description = `Failed to generate lock file: {message}`;
 }
-class CreateTokenFailedError extends Error {
+class WriteScriptFailedError extends Error {
   constructor(body) {
     super(
-      `CREATE_TOKEN_FAILED: ${body.message}`
+      `WRITE_SCRIPT_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "CreateTokenFailedError";
+    this.name = "WriteScriptFailedError";
   }
-  static code = "CREATE_TOKEN_FAILED";
+  static code = "WRITE_SCRIPT_FAILED";
   static statusCode = 500;
-  static description = `Failed to create token: {message}`;
+  static description = `Failed to write script file: {message}`;
 }
-class ListPermissionsFailedError extends Error {
+class DirectoryCreationFailedError extends Error {
   constructor(body) {
     super(
-      `LIST_PERMISSIONS_FAILED: ${body.message}`
+      `DIRECTORY_CREATION_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "ListPermissionsFailedError";
+    this.name = "DirectoryCreationFailedError";
   }
-  static code = "LIST_PERMISSIONS_FAILED";
+  static code = "DIRECTORY_CREATION_FAILED";
   static statusCode = 500;
-  static description = `Failed to list permissions: {message}`;
+  static description = `Failed to create script directory: {message}`;
 }
-class GetPermissionFailedError extends Error {
+class NetworkPermissionsFailedError extends Error {
   constructor(body) {
     super(
-      `GET_PERMISSION_FAILED: ${body.message}`
+      `NETWORK_PERMISSIONS_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "GetPermissionFailedError";
+    this.name = "NetworkPermissionsFailedError";
   }
-  static code = "GET_PERMISSION_FAILED";
+  static code = "NETWORK_PERMISSIONS_FAILED";
   static statusCode = 500;
-  static description = `Failed to get permission: {message}`;
+  static description = `Failed to insert network permissions: {message}`;
 }
-class UpdatePermissionFailedError extends Error {
+class LoggingFailedError extends Error {
   constructor(body) {
     super(
-      `UPDATE_PERMISSION_FAILED: ${body.message}`
+      `LOGGING_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "UpdatePermissionFailedError";
+    this.name = "LoggingFailedError";
   }
-  static code = "UPDATE_PERMISSION_FAILED";
+  static code = "LOGGING_FAILED";
   static statusCode = 500;
-  static description = `Failed to update permission: {message}`;
+  static description = `Failed to log execute run: {message}`;
 }
-class RevokePermissionFailedError extends Error {
+class RunNotFoundError extends Error {
   constructor(body) {
     super(
-      `REVOKE_PERMISSION_FAILED: ${body.message}`
+      `RUN_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "RevokePermissionFailedError";
+    this.name = "RunNotFoundError";
   }
-  static code = "REVOKE_PERMISSION_FAILED";
-  static statusCode = 500;
-  static description = `Failed to revoke permission: {message}`;
+  static code = "RUN_NOT_FOUND";
+  static statusCode = 404;
+  static description = `Execute run not found: {run_id}`;
 }
-class GrantPermissionFailedError extends Error {
+class LimitExceededError extends Error {
   constructor(body) {
     super(
-      `GRANT_PERMISSION_FAILED: ${body.message}`
+      `LIMIT_EXCEEDED: ${body.message}`
     );
     this.body = body;
-    this.name = "GrantPermissionFailedError";
+    this.name = "LimitExceededError";
   }
-  static code = "GRANT_PERMISSION_FAILED";
-  static statusCode = 500;
-  static description = `Failed to grant permission: {message}`;
+  static code = "LIMIT_EXCEEDED";
+  static statusCode = 403;
+  static description = `Managed domains limit exceeded: your plan allows {limit} verified domains, you have {current}`;
 }
-class ListIdentitiesFailedError extends Error {
+class FailedToProvisionCertificateError extends Error {
   constructor(body) {
     super(
-      `LIST_IDENTITIES_FAILED: ${body.message}`
+      `FAILED_TO_PROVISION_CERTIFICATE: ${body.message}`
     );
     this.body = body;
-    this.name = "ListIdentitiesFailedError";
+    this.name = "FailedToProvisionCertificateError";
   }
-  static code = "LIST_IDENTITIES_FAILED";
-  static statusCode = 500;
-  static description = `Failed to list identities: {message}`;
+  static code = "FAILED_TO_PROVISION_CERTIFICATE";
+  static statusCode = 422;
+  static description = `Failed to provision certificate: {message}`;
 }
-class DeleteIdentityFailedError extends Error {
+class FailedToInsertDomainMappingError extends Error {
   constructor(body) {
     super(
-      `DELETE_IDENTITY_FAILED: ${body.message}`
+      `FAILED_TO_INSERT_DOMAIN_MAPPING: ${body.message}`
     );
     this.body = body;
-    this.name = "DeleteIdentityFailedError";
+    this.name = "FailedToInsertDomainMappingError";
   }
-  static code = "DELETE_IDENTITY_FAILED";
+  static code = "FAILED_TO_INSERT_DOMAIN_MAPPING";
   static statusCode = 500;
-  static description = `Failed to delete identity: {message}`;
+  static description = `Failed to insert domain mapping: {message}`;
 }
-class CreateIdentityFailedError extends Error {
+class PermissionDeniedError extends Error {
   constructor(body) {
     super(
-      `CREATE_IDENTITY_FAILED: ${body.message}`
+      `PERMISSION_DENIED: ${body.message}`
     );
     this.body = body;
-    this.name = "CreateIdentityFailedError";
+    this.name = "PermissionDeniedError";
   }
-  static code = "CREATE_IDENTITY_FAILED";
-  static statusCode = 500;
-  static description = `Failed to create identity: {message}`;
+  static code = "PERMISSION_DENIED";
+  static statusCode = 401;
+  static description = `Permission denied: {message}`;
 }
-class VmPermissionNotFoundError extends Error {
+class FailedToCheckPermissionsError extends Error {
   constructor(body) {
     super(
-      `VM_PERMISSION_NOT_FOUND: ${body.message}`
+      `FAILED_TO_CHECK_PERMISSIONS: ${body.message}`
     );
     this.body = body;
-    this.name = "VmPermissionNotFoundError";
+    this.name = "FailedToCheckPermissionsError";
   }
-  static code = "VM_PERMISSION_NOT_FOUND";
-  static statusCode = 404;
-  static description = `VM permission not found`;
+  static code = "FAILED_TO_CHECK_PERMISSIONS";
+  static statusCode = 502;
+  static description = `Failed to check permissions: {message}`;
 }
-class PermissionNotFoundError extends Error {
+class FailedToListDomainsError extends Error {
   constructor(body) {
     super(
-      `PERMISSION_NOT_FOUND: ${body.message}`
+      `FAILED_TO_LIST_DOMAINS: ${body.message}`
     );
     this.body = body;
-    this.name = "PermissionNotFoundError";
+    this.name = "FailedToListDomainsError";
   }
-  static code = "PERMISSION_NOT_FOUND";
-  static statusCode = 404;
-  static description = `Permission not found`;
+  static code = "FAILED_TO_LIST_DOMAINS";
+  static statusCode = 500;
+  static description = `Failed to list domains: {message}`;
 }
-class GitRepositoryAccessDeniedError extends Error {
+class FailedToListVerificationsError extends Error {
   constructor(body) {
     super(
-      `GIT_REPOSITORY_ACCESS_DENIED: ${body.message}`
+      `FAILED_TO_LIST_VERIFICATIONS: ${body.message}`
     );
     this.body = body;
-    this.name = "GitRepositoryAccessDeniedError";
+    this.name = "FailedToListVerificationsError";
   }
-  static code = "GIT_REPOSITORY_ACCESS_DENIED";
-  static statusCode = 403;
-  static description = `You are not allowed to access this repository`;
+  static code = "FAILED_TO_LIST_VERIFICATIONS";
+  static statusCode = 500;
+  static description = `Failed to list verifications: {message}`;
 }
-class GitRepositoryNotFoundError extends Error {
+class FailedToVerifyDomainError extends Error {
   constructor(body) {
     super(
-      `GIT_REPOSITORY_NOT_FOUND: ${body.message}`
+      `FAILED_TO_VERIFY_DOMAIN: ${body.message}`
     );
     this.body = body;
-    this.name = "GitRepositoryNotFoundError";
+    this.name = "FailedToVerifyDomainError";
   }
-  static code = "GIT_REPOSITORY_NOT_FOUND";
-  static statusCode = 404;
-  static description = `Repository not found`;
+  static code = "FAILED_TO_VERIFY_DOMAIN";
+  static statusCode = 500;
+  static description = `Failed to verify domain: {message}`;
 }
-class CannotDeleteManagedIdentityError extends Error {
+class VerificationFailedError extends Error {
   constructor(body) {
     super(
-      `CANNOT_DELETE_MANAGED_IDENTITY: ${body.message}`
+      `VERIFICATION_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "CannotDeleteManagedIdentityError";
+    this.name = "VerificationFailedError";
   }
-  static code = "CANNOT_DELETE_MANAGED_IDENTITY";
-  static statusCode = 403;
-  static description = `Cannot delete managed identities`;
+  static code = "VERIFICATION_FAILED";
+  static statusCode = 400;
+  static description = `Domain verification failed: {message}`;
 }
-class CannotModifyManagedIdentityError extends Error {
+class FailedToDeleteVerificationError extends Error {
   constructor(body) {
     super(
-      `CANNOT_MODIFY_MANAGED_IDENTITY: ${body.message}`
+      `FAILED_TO_DELETE_VERIFICATION: ${body.message}`
     );
     this.body = body;
-    this.name = "CannotModifyManagedIdentityError";
-  }
-  static code = "CANNOT_MODIFY_MANAGED_IDENTITY";
-  static statusCode = 403;
-  static description = `Cannot modify managed identities`;
+    this.name = "FailedToDeleteVerificationError";
+  }
+  static code = "FAILED_TO_DELETE_VERIFICATION";
+  static statusCode = 400;
+  static description = `Failed to delete verification: {message}`;
 }
-class IdentityAccessDeniedError extends Error {
+class VerificationNotFoundError extends Error {
   constructor(body) {
     super(
-      `IDENTITY_ACCESS_DENIED: ${body.message}`
+      `VERIFICATION_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "IdentityAccessDeniedError";
+    this.name = "VerificationNotFoundError";
   }
-  static code = "IDENTITY_ACCESS_DENIED";
-  static statusCode = 403;
-  static description = `You are not allowed to access this identity`;
+  static code = "VERIFICATION_NOT_FOUND";
+  static statusCode = 404;
+  static description = `Verification request not found for domain: {domain}`;
 }
-class IdentityNotFoundError extends Error {
+class FailedToCreateVerificationCodeError extends Error {
   constructor(body) {
     super(
-      `IDENTITY_NOT_FOUND: ${body.message}`
+      `FAILED_TO_CREATE_VERIFICATION_CODE: ${body.message}`
     );
     this.body = body;
-    this.name = "IdentityNotFoundError";
+    this.name = "FailedToCreateVerificationCodeError";
   }
-  static code = "IDENTITY_NOT_FOUND";
-  static statusCode = 404;
-  static description = `Identity not found`;
+  static code = "FAILED_TO_CREATE_VERIFICATION_CODE";
+  static statusCode = 400;
+  static description = `Failed to create verification code: {message}`;
 }
-class UnauthorizedErrorError extends Error {
+class InvalidDomainError extends Error {
   constructor(body) {
     super(
-      `UNAUTHORIZED_ERROR: ${body.message}`
+      `INVALID_DOMAIN: ${body.message}`
     );
     this.body = body;
-    this.name = "UnauthorizedErrorError";
+    this.name = "InvalidDomainError";
   }
-  static code = "UNAUTHORIZED_ERROR";
-  static statusCode = 401;
-  static description = `Unauthorized request to {route}`;
+  static code = "INVALID_DOMAIN";
+  static statusCode = 400;
+  static description = `Invalid domain: {domain}`;
 }
 class BuildFailedError extends Error {
   constructor(body) {
@@ -2062,6 +2230,18 @@ class WebDeploymentBadRequestError extends Error {
   static statusCode = 400;
   static description = `Bad request: {message}`;
 }
+class TimeoutLimitExceededError extends Error {
+  constructor(body) {
+    super(
+      `TIMEOUT_LIMIT_EXCEEDED: ${body.message}`
+    );
+    this.body = body;
+    this.name = "TimeoutLimitExceededError";
+  }
+  static code = "TIMEOUT_LIMIT_EXCEEDED";
+  static statusCode = 403;
+  static description = `Timeout exceeds plan limit: requested {requested_ms}ms but your plan allows a maximum of {max_ms}ms`;
+}
 class DeploymentLimitExceededError extends Error {
   constructor(body) {
     super(
@@ -2110,41 +2290,41 @@ class InternalResizeVmNotFoundError extends Error {
   static statusCode = 404;
   static description = `VM not found`;
 }
-class BranchNameEmptyError extends Error {
+class AccessDeniedError extends Error {
   constructor(body) {
     super(
-      `BRANCH_NAME_EMPTY: ${body.message}`
+      `ACCESS_DENIED: ${body.message}`
     );
     this.body = body;
-    this.name = "BranchNameEmptyError";
+    this.name = "AccessDeniedError";
   }
-  static code = "BRANCH_NAME_EMPTY";
-  static statusCode = 400;
-  static description = `Branch name cannot be empty`;
+  static code = "ACCESS_DENIED";
+  static statusCode = 403;
+  static description = `VM access denied`;
 }
-class ExecuteLimitExceededError extends Error {
+class BranchNameEmptyError extends Error {
   constructor(body) {
     super(
-      `EXECUTE_LIMIT_EXCEEDED: ${body.message}`
+      `BRANCH_NAME_EMPTY: ${body.message}`
     );
     this.body = body;
-    this.name = "ExecuteLimitExceededError";
+    this.name = "BranchNameEmptyError";
   }
-  static code = "EXECUTE_LIMIT_EXCEEDED";
-  static statusCode = 403;
-  static description = `Execute runs limit exceeded: your plan allows {limit} runs per month, you have used {current}`;
+  static code = "BRANCH_NAME_EMPTY";
+  static statusCode = 400;
+  static description = `Branch name cannot be empty`;
 }
-class VmLimitExceededError extends Error {
+class UnauthorizedErrorError extends Error {
   constructor(body) {
     super(
-      `VM_LIMIT_EXCEEDED: ${body.message}`
+      `UNAUTHORIZED_ERROR: ${body.message}`
     );
     this.body = body;
-    this.name = "VmLimitExceededError";
+    this.name = "UnauthorizedErrorError";
   }
-  static code = "VM_LIMIT_EXCEEDED";
-  static statusCode = 403;
-  static description = `VM limit exceeded: your plan allows {limit} VMs, you currently have {current}`;
+  static code = "UNAUTHORIZED_ERROR";
+  static statusCode = 401;
+  static description = `Unauthorized request to {route}`;
 }
 class TriggerErrorError extends Error {
   constructor(body) {
@@ -2476,191 +2656,23 @@ class FailedPermissionsCheckError extends Error {
       `FAILED_PERMISSIONS_CHECK: ${body.message}`
     );
     this.body = body;
-    this.name = "FailedPermissionsCheckError";
-  }
-  static code = "FAILED_PERMISSIONS_CHECK";
-  static statusCode = 401;
-  static description = `You do not have permission to delete the domain mapping for: {domain}`;
-}
-class FailedToCheckDomainMappingPermissionsError extends Error {
-  constructor(body) {
-    super(
-      `FAILED_TO_CHECK_DOMAIN_MAPPING_PERMISSIONS: ${body.message}`
-    );
-    this.body = body;
-    this.name = "FailedToCheckDomainMappingPermissionsError";
-  }
-  static code = "FAILED_TO_CHECK_DOMAIN_MAPPING_PERMISSIONS";
-  static statusCode = 502;
-  static description = `Failed to check permissions: {message}`;
-}
-class DomainOwnershipVerificationFailedError extends Error {
-  constructor(body) {
-    super(
-      `DOMAIN_OWNERSHIP_VERIFICATION_FAILED: ${body.message}`
-    );
-    this.body = body;
-    this.name = "DomainOwnershipVerificationFailedError";
-  }
-  static code = "DOMAIN_OWNERSHIP_VERIFICATION_FAILED";
-  static statusCode = 403;
-  static description = `Domain ownership verification failed`;
-}
-class ErrorDeletingRecordError extends Error {
-  constructor(body) {
-    super(
-      `ERROR_DELETING_RECORD: ${body.message}`
-    );
-    this.body = body;
-    this.name = "ErrorDeletingRecordError";
-  }
-  static code = "ERROR_DELETING_RECORD";
-  static statusCode = 500;
-  static description = `Error deleting DNS record for {domain}/{name}: {message}`;
-}
-class RecordOwnershipErrorError extends Error {
-  constructor(body) {
-    super(
-      `RECORD_OWNERSHIP_ERROR: ${body.message}`
-    );
-    this.body = body;
-    this.name = "RecordOwnershipErrorError";
-  }
-  static code = "RECORD_OWNERSHIP_ERROR";
-  static statusCode = 403;
-  static description = `Account {account_id} does not own record {record_id}`;
-}
-class ErrorCreatingRecordError extends Error {
-  constructor(body) {
-    super(
-      `ERROR_CREATING_RECORD: ${body.message}`
-    );
-    this.body = body;
-    this.name = "ErrorCreatingRecordError";
-  }
-  static code = "ERROR_CREATING_RECORD";
-  static statusCode = 500;
-  static description = `Error creating DNS record: {message}`;
-}
-class DomainOwnershipErrorError extends Error {
-  constructor(body) {
-    super(
-      `DOMAIN_OWNERSHIP_ERROR: ${body.message}`
-    );
-    this.body = body;
-    this.name = "DomainOwnershipErrorError";
-  }
-  static code = "DOMAIN_OWNERSHIP_ERROR";
-  static statusCode = 403;
-  static description = `Account {account_id} does not own domain {domain}`;
-}
-class CloudstateInternalErrorError extends Error {
-  constructor(body) {
-    super(
-      `CLOUDSTATE_INTERNAL_ERROR: ${body.message}`
-    );
-    this.body = body;
-    this.name = "CloudstateInternalErrorError";
-  }
-  static code = "CLOUDSTATE_INTERNAL_ERROR";
-  static statusCode = 500;
-  static description = `Internal error: {message}`;
-}
-class CloudstateDatabaseErrorError extends Error {
-  constructor(body) {
-    super(
-      `CLOUDSTATE_DATABASE_ERROR: ${body.message}`
-    );
-    this.body = body;
-    this.name = "CloudstateDatabaseErrorError";
-  }
-  static code = "CLOUDSTATE_DATABASE_ERROR";
-  static statusCode = 500;
-  static description = `Database operation failed: {message}`;
-}
-class CloudstateAccessDeniedError extends Error {
-  constructor(body) {
-    super(
-      `CLOUDSTATE_ACCESS_DENIED: ${body.message}`
-    );
-    this.body = body;
-    this.name = "CloudstateAccessDeniedError";
-  }
-  static code = "CLOUDSTATE_ACCESS_DENIED";
-  static statusCode = 403;
-  static description = `Access denied to project: {project_id}`;
-}
-class RestoreFailedError extends Error {
-  constructor(body) {
-    super(
-      `RESTORE_FAILED: ${body.message}`
-    );
-    this.body = body;
-    this.name = "RestoreFailedError";
-  }
-  static code = "RESTORE_FAILED";
-  static statusCode = 500;
-  static description = `Failed to restore from backup: {message}`;
-}
-class CreateBackupFailedError extends Error {
-  constructor(body) {
-    super(
-      `CREATE_BACKUP_FAILED: ${body.message}`
-    );
-    this.body = body;
-    this.name = "CreateBackupFailedError";
-  }
-  static code = "CREATE_BACKUP_FAILED";
-  static statusCode = 500;
-  static description = `Failed to create backup: {message}`;
-}
-class BackupFailedError extends Error {
-  constructor(body) {
-    super(
-      `BACKUP_FAILED: ${body.message}`
-    );
-    this.body = body;
-    this.name = "BackupFailedError";
-  }
-  static code = "BACKUP_FAILED";
-  static statusCode = 500;
-  static description = `Backup failed: {message}`;
-}
-class DeploymentFailedError extends Error {
-  constructor(body) {
-    super(
-      `DEPLOYMENT_FAILED: ${body.message}`
-    );
-    this.body = body;
-    this.name = "DeploymentFailedError";
-  }
-  static code = "DEPLOYMENT_FAILED";
-  static statusCode = 500;
-  static description = `Deployment failed: {message}`;
-}
-class InvalidDeploymentRequestError extends Error {
-  constructor(body) {
-    super(
-      `INVALID_DEPLOYMENT_REQUEST: ${body.message}`
-    );
-    this.body = body;
-    this.name = "InvalidDeploymentRequestError";
-  }
-  static code = "INVALID_DEPLOYMENT_REQUEST";
-  static statusCode = 400;
-  static description = `Invalid deployment request: {message}`;
+    this.name = "FailedPermissionsCheckError";
+  }
+  static code = "FAILED_PERMISSIONS_CHECK";
+  static statusCode = 401;
+  static description = `You do not have permission to delete the domain mapping for: {domain}`;
 }
-class ProjectNotFoundError extends Error {
+class FailedToCheckDomainMappingPermissionsError extends Error {
   constructor(body) {
     super(
-      `PROJECT_NOT_FOUND: ${body.message}`
+      `FAILED_TO_CHECK_DOMAIN_MAPPING_PERMISSIONS: ${body.message}`
     );
     this.body = body;
-    this.name = "ProjectNotFoundError";
+    this.name = "FailedToCheckDomainMappingPermissionsError";
   }
-  static code = "PROJECT_NOT_FOUND";
-  static statusCode = 404;
-  static description = `Project not found: {project_id}`;
+  static code = "FAILED_TO_CHECK_DOMAIN_MAPPING_PERMISSIONS";
+  static statusCode = 502;
+  static description = `Failed to check permissions: {message}`;
 }
 class GitRepoLimitExceededError extends Error {
   constructor(body) {
@@ -2686,413 +2698,449 @@ class EmptyTagError extends Error {
   static statusCode = 400;
   static description = `Invalid request: tag cannot be empty`;
 }
-class LimitExceededError extends Error {
+class PersistentVmsNotAllowedError extends Error {
   constructor(body) {
     super(
-      `LIMIT_EXCEEDED: ${body.message}`
+      `PERSISTENT_VMS_NOT_ALLOWED: ${body.message}`
     );
     this.body = body;
-    this.name = "LimitExceededError";
+    this.name = "PersistentVmsNotAllowedError";
   }
-  static code = "LIMIT_EXCEEDED";
+  static code = "PERSISTENT_VMS_NOT_ALLOWED";
   static statusCode = 403;
-  static description = `Managed domains limit exceeded: your plan allows {limit} verified domains, you have {current}`;
+  static description = `Your plan does not allow persistent VMs. Use sticky or ephemeral persistence instead, or upgrade your plan.`;
 }
-class FailedToProvisionCertificateError extends Error {
+class TotalVmLimitExceededError extends Error {
   constructor(body) {
     super(
-      `FAILED_TO_PROVISION_CERTIFICATE: ${body.message}`
+      `TOTAL_VM_LIMIT_EXCEEDED: ${body.message}`
     );
     this.body = body;
-    this.name = "FailedToProvisionCertificateError";
+    this.name = "TotalVmLimitExceededError";
   }
-  static code = "FAILED_TO_PROVISION_CERTIFICATE";
-  static statusCode = 422;
-  static description = `Failed to provision certificate: {message}`;
+  static code = "TOTAL_VM_LIMIT_EXCEEDED";
+  static statusCode = 403;
+  static description = `Total VM limit exceeded: your plan allows {limit} total VMs, you currently have {current}`;
 }
-class FailedToInsertDomainMappingError extends Error {
+class VmLimitExceededError extends Error {
   constructor(body) {
     super(
-      `FAILED_TO_INSERT_DOMAIN_MAPPING: ${body.message}`
+      `VM_LIMIT_EXCEEDED: ${body.message}`
     );
     this.body = body;
-    this.name = "FailedToInsertDomainMappingError";
+    this.name = "VmLimitExceededError";
   }
-  static code = "FAILED_TO_INSERT_DOMAIN_MAPPING";
-  static statusCode = 500;
-  static description = `Failed to insert domain mapping: {message}`;
+  static code = "VM_LIMIT_EXCEEDED";
+  static statusCode = 403;
+  static description = `VM limit exceeded: your plan allows {limit} VMs, you currently have {current}`;
 }
-class PermissionDeniedError extends Error {
+class PermissionAlreadyExistsError extends Error {
   constructor(body) {
     super(
-      `PERMISSION_DENIED: ${body.message}`
+      `PERMISSION_ALREADY_EXISTS: ${body.message}`
     );
     this.body = body;
-    this.name = "PermissionDeniedError";
+    this.name = "PermissionAlreadyExistsError";
   }
-  static code = "PERMISSION_DENIED";
-  static statusCode = 401;
-  static description = `Permission denied: {message}`;
+  static code = "PERMISSION_ALREADY_EXISTS";
+  static statusCode = 409;
+  static description = `Permission already exists`;
 }
-class FailedToCheckPermissionsError extends Error {
+class ListTokensFailedError extends Error {
   constructor(body) {
     super(
-      `FAILED_TO_CHECK_PERMISSIONS: ${body.message}`
+      `LIST_TOKENS_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "FailedToCheckPermissionsError";
+    this.name = "ListTokensFailedError";
   }
-  static code = "FAILED_TO_CHECK_PERMISSIONS";
-  static statusCode = 502;
-  static description = `Failed to check permissions: {message}`;
+  static code = "LIST_TOKENS_FAILED";
+  static statusCode = 500;
+  static description = `Failed to list tokens: {message}`;
 }
-class FailedToListDomainsError extends Error {
+class RevokeTokenFailedError extends Error {
   constructor(body) {
     super(
-      `FAILED_TO_LIST_DOMAINS: ${body.message}`
+      `REVOKE_TOKEN_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "FailedToListDomainsError";
+    this.name = "RevokeTokenFailedError";
   }
-  static code = "FAILED_TO_LIST_DOMAINS";
+  static code = "REVOKE_TOKEN_FAILED";
   static statusCode = 500;
-  static description = `Failed to list domains: {message}`;
+  static description = `Failed to revoke token: {message}`;
 }
-class FailedToListVerificationsError extends Error {
+class CreateTokenFailedError extends Error {
   constructor(body) {
     super(
-      `FAILED_TO_LIST_VERIFICATIONS: ${body.message}`
+      `CREATE_TOKEN_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "FailedToListVerificationsError";
+    this.name = "CreateTokenFailedError";
   }
-  static code = "FAILED_TO_LIST_VERIFICATIONS";
+  static code = "CREATE_TOKEN_FAILED";
   static statusCode = 500;
-  static description = `Failed to list verifications: {message}`;
+  static description = `Failed to create token: {message}`;
 }
-class FailedToVerifyDomainError extends Error {
+class ListPermissionsFailedError extends Error {
   constructor(body) {
     super(
-      `FAILED_TO_VERIFY_DOMAIN: ${body.message}`
+      `LIST_PERMISSIONS_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "FailedToVerifyDomainError";
+    this.name = "ListPermissionsFailedError";
   }
-  static code = "FAILED_TO_VERIFY_DOMAIN";
+  static code = "LIST_PERMISSIONS_FAILED";
   static statusCode = 500;
-  static description = `Failed to verify domain: {message}`;
+  static description = `Failed to list permissions: {message}`;
 }
-class VerificationFailedError extends Error {
+class GetPermissionFailedError extends Error {
   constructor(body) {
     super(
-      `VERIFICATION_FAILED: ${body.message}`
+      `GET_PERMISSION_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "VerificationFailedError";
+    this.name = "GetPermissionFailedError";
   }
-  static code = "VERIFICATION_FAILED";
-  static statusCode = 400;
-  static description = `Domain verification failed: {message}`;
+  static code = "GET_PERMISSION_FAILED";
+  static statusCode = 500;
+  static description = `Failed to get permission: {message}`;
 }
-class FailedToDeleteVerificationError extends Error {
+class UpdatePermissionFailedError extends Error {
   constructor(body) {
     super(
-      `FAILED_TO_DELETE_VERIFICATION: ${body.message}`
+      `UPDATE_PERMISSION_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "FailedToDeleteVerificationError";
+    this.name = "UpdatePermissionFailedError";
   }
-  static code = "FAILED_TO_DELETE_VERIFICATION";
-  static statusCode = 400;
-  static description = `Failed to delete verification: {message}`;
+  static code = "UPDATE_PERMISSION_FAILED";
+  static statusCode = 500;
+  static description = `Failed to update permission: {message}`;
 }
-class VerificationNotFoundError extends Error {
+class RevokePermissionFailedError extends Error {
   constructor(body) {
     super(
-      `VERIFICATION_NOT_FOUND: ${body.message}`
+      `REVOKE_PERMISSION_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "VerificationNotFoundError";
+    this.name = "RevokePermissionFailedError";
   }
-  static code = "VERIFICATION_NOT_FOUND";
-  static statusCode = 404;
-  static description = `Verification request not found for domain: {domain}`;
+  static code = "REVOKE_PERMISSION_FAILED";
+  static statusCode = 500;
+  static description = `Failed to revoke permission: {message}`;
 }
-class FailedToCreateVerificationCodeError extends Error {
+class GrantPermissionFailedError extends Error {
   constructor(body) {
     super(
-      `FAILED_TO_CREATE_VERIFICATION_CODE: ${body.message}`
+      `GRANT_PERMISSION_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "FailedToCreateVerificationCodeError";
+    this.name = "GrantPermissionFailedError";
   }
-  static code = "FAILED_TO_CREATE_VERIFICATION_CODE";
-  static statusCode = 400;
-  static description = `Failed to create verification code: {message}`;
+  static code = "GRANT_PERMISSION_FAILED";
+  static statusCode = 500;
+  static description = `Failed to grant permission: {message}`;
 }
-class InvalidDomainError extends Error {
+class ListIdentitiesFailedError extends Error {
   constructor(body) {
     super(
-      `INVALID_DOMAIN: ${body.message}`
+      `LIST_IDENTITIES_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "InvalidDomainError";
+    this.name = "ListIdentitiesFailedError";
   }
-  static code = "INVALID_DOMAIN";
-  static statusCode = 400;
-  static description = `Invalid domain: {domain}`;
+  static code = "LIST_IDENTITIES_FAILED";
+  static statusCode = 500;
+  static description = `Failed to list identities: {message}`;
 }
-class AccessDeniedError extends Error {
+class DeleteIdentityFailedError extends Error {
   constructor(body) {
     super(
-      `ACCESS_DENIED: ${body.message}`
+      `DELETE_IDENTITY_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "AccessDeniedError";
+    this.name = "DeleteIdentityFailedError";
   }
-  static code = "ACCESS_DENIED";
-  static statusCode = 403;
-  static description = `VM access denied`;
+  static code = "DELETE_IDENTITY_FAILED";
+  static statusCode = 500;
+  static description = `Failed to delete identity: {message}`;
 }
-class ObservabilityDatabaseErrorError extends Error {
+class CreateIdentityFailedError extends Error {
   constructor(body) {
     super(
-      `OBSERVABILITY_DATABASE_ERROR: ${body.message}`
+      `CREATE_IDENTITY_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "ObservabilityDatabaseErrorError";
+    this.name = "CreateIdentityFailedError";
   }
-  static code = "OBSERVABILITY_DATABASE_ERROR";
+  static code = "CREATE_IDENTITY_FAILED";
   static statusCode = 500;
-  static description = `Database operation failed: {message}`;
+  static description = `Failed to create identity: {message}`;
 }
-class ObservabilityAccessDeniedError extends Error {
+class VmPermissionNotFoundError extends Error {
   constructor(body) {
     super(
-      `OBSERVABILITY_ACCESS_DENIED: ${body.message}`
+      `VM_PERMISSION_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "ObservabilityAccessDeniedError";
+    this.name = "VmPermissionNotFoundError";
   }
-  static code = "OBSERVABILITY_ACCESS_DENIED";
+  static code = "VM_PERMISSION_NOT_FOUND";
+  static statusCode = 404;
+  static description = `VM permission not found`;
+}
+class PermissionNotFoundError extends Error {
+  constructor(body) {
+    super(
+      `PERMISSION_NOT_FOUND: ${body.message}`
+    );
+    this.body = body;
+    this.name = "PermissionNotFoundError";
+  }
+  static code = "PERMISSION_NOT_FOUND";
+  static statusCode = 404;
+  static description = `Permission not found`;
+}
+class GitRepositoryAccessDeniedError extends Error {
+  constructor(body) {
+    super(
+      `GIT_REPOSITORY_ACCESS_DENIED: ${body.message}`
+    );
+    this.body = body;
+    this.name = "GitRepositoryAccessDeniedError";
+  }
+  static code = "GIT_REPOSITORY_ACCESS_DENIED";
   static statusCode = 403;
-  static description = `Access denied to logs for deployment: {deployment_id}`;
+  static description = `You are not allowed to access this repository`;
 }
-class ParseLogsFailedError extends Error {
+class GitRepositoryNotFoundError extends Error {
   constructor(body) {
     super(
-      `PARSE_LOGS_FAILED: ${body.message}`
+      `GIT_REPOSITORY_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "ParseLogsFailedError";
+    this.name = "GitRepositoryNotFoundError";
   }
-  static code = "PARSE_LOGS_FAILED";
-  static statusCode = 500;
-  static description = `Failed to parse logs: {message}`;
+  static code = "GIT_REPOSITORY_NOT_FOUND";
+  static statusCode = 404;
+  static description = `Repository not found`;
 }
-class RetrieveLogsFailedError extends Error {
+class CannotDeleteManagedIdentityError extends Error {
   constructor(body) {
     super(
-      `RETRIEVE_LOGS_FAILED: ${body.message}`
+      `CANNOT_DELETE_MANAGED_IDENTITY: ${body.message}`
     );
     this.body = body;
-    this.name = "RetrieveLogsFailedError";
+    this.name = "CannotDeleteManagedIdentityError";
   }
-  static code = "RETRIEVE_LOGS_FAILED";
-  static statusCode = 500;
-  static description = `Failed to retrieve logs: {message}`;
+  static code = "CANNOT_DELETE_MANAGED_IDENTITY";
+  static statusCode = 403;
+  static description = `Cannot delete managed identities`;
 }
-class InvalidQueryError extends Error {
+class CannotModifyManagedIdentityError extends Error {
   constructor(body) {
     super(
-      `INVALID_QUERY: ${body.message}`
+      `CANNOT_MODIFY_MANAGED_IDENTITY: ${body.message}`
     );
     this.body = body;
-    this.name = "InvalidQueryError";
+    this.name = "CannotModifyManagedIdentityError";
   }
-  static code = "INVALID_QUERY";
-  static statusCode = 400;
-  static description = `Invalid log query: {message}`;
+  static code = "CANNOT_MODIFY_MANAGED_IDENTITY";
+  static statusCode = 403;
+  static description = `Cannot modify managed identities`;
+}
+class IdentityAccessDeniedError extends Error {
+  constructor(body) {
+    super(
+      `IDENTITY_ACCESS_DENIED: ${body.message}`
+    );
+    this.body = body;
+    this.name = "IdentityAccessDeniedError";
+  }
+  static code = "IDENTITY_ACCESS_DENIED";
+  static statusCode = 403;
+  static description = `You are not allowed to access this identity`;
 }
-class LogsNotFoundError extends Error {
+class IdentityNotFoundError extends Error {
   constructor(body) {
     super(
-      `LOGS_NOT_FOUND: ${body.message}`
+      `IDENTITY_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "LogsNotFoundError";
+    this.name = "IdentityNotFoundError";
   }
-  static code = "LOGS_NOT_FOUND";
+  static code = "IDENTITY_NOT_FOUND";
   static statusCode = 404;
-  static description = `Logs not found for deployment: {deployment_id}`;
+  static description = `Identity not found`;
 }
-class ExecuteInternalErrorError extends Error {
+class DomainOwnershipVerificationFailedError extends Error {
   constructor(body) {
     super(
-      `EXECUTE_INTERNAL_ERROR: ${body.message}`
+      `DOMAIN_OWNERSHIP_VERIFICATION_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "ExecuteInternalErrorError";
+    this.name = "DomainOwnershipVerificationFailedError";
   }
-  static code = "EXECUTE_INTERNAL_ERROR";
-  static statusCode = 500;
-  static description = `Internal error: {message}`;
+  static code = "DOMAIN_OWNERSHIP_VERIFICATION_FAILED";
+  static statusCode = 403;
+  static description = `Domain ownership verification failed`;
 }
-class ExecuteAccessDeniedError extends Error {
+class ErrorDeletingRecordError extends Error {
   constructor(body) {
     super(
-      `EXECUTE_ACCESS_DENIED: ${body.message}`
+      `ERROR_DELETING_RECORD: ${body.message}`
     );
     this.body = body;
-    this.name = "ExecuteAccessDeniedError";
+    this.name = "ErrorDeletingRecordError";
   }
-  static code = "EXECUTE_ACCESS_DENIED";
-  static statusCode = 403;
-  static description = `Access denied to execute run`;
+  static code = "ERROR_DELETING_RECORD";
+  static statusCode = 500;
+  static description = `Error deleting DNS record for {domain}/{name}: {message}`;
 }
-class ListRunsFailedError extends Error {
+class RecordOwnershipErrorError extends Error {
   constructor(body) {
     super(
-      `LIST_RUNS_FAILED: ${body.message}`
+      `RECORD_OWNERSHIP_ERROR: ${body.message}`
     );
     this.body = body;
-    this.name = "ListRunsFailedError";
+    this.name = "RecordOwnershipErrorError";
   }
-  static code = "LIST_RUNS_FAILED";
-  static statusCode = 500;
-  static description = `Failed to list execute runs: {message}`;
+  static code = "RECORD_OWNERSHIP_ERROR";
+  static statusCode = 403;
+  static description = `Account {account_id} does not own record {record_id}`;
 }
-class ExecutionErrorError extends Error {
+class ErrorCreatingRecordError extends Error {
   constructor(body) {
     super(
-      `EXECUTION_ERROR: ${body.message}`
+      `ERROR_CREATING_RECORD: ${body.message}`
     );
     this.body = body;
-    this.name = "ExecutionErrorError";
+    this.name = "ErrorCreatingRecordError";
   }
-  static code = "EXECUTION_ERROR";
+  static code = "ERROR_CREATING_RECORD";
   static statusCode = 500;
-  static description = `Script execution error: {message}`;
+  static description = `Error creating DNS record: {message}`;
 }
-class ConnectionFailedError extends Error {
+class DomainOwnershipErrorError extends Error {
   constructor(body) {
     super(
-      `CONNECTION_FAILED: ${body.message}`
+      `DOMAIN_OWNERSHIP_ERROR: ${body.message}`
     );
     this.body = body;
-    this.name = "ConnectionFailedError";
+    this.name = "DomainOwnershipErrorError";
   }
-  static code = "CONNECTION_FAILED";
-  static statusCode = 500;
-  static description = `Failed to connect to execute server: {message}`;
+  static code = "DOMAIN_OWNERSHIP_ERROR";
+  static statusCode = 403;
+  static description = `Account {account_id} does not own domain {domain}`;
 }
-class MetadataWriteFailedError extends Error {
+class CloudstateInternalErrorError extends Error {
   constructor(body) {
     super(
-      `METADATA_WRITE_FAILED: ${body.message}`
+      `CLOUDSTATE_INTERNAL_ERROR: ${body.message}`
     );
     this.body = body;
-    this.name = "MetadataWriteFailedError";
+    this.name = "CloudstateInternalErrorError";
   }
-  static code = "METADATA_WRITE_FAILED";
+  static code = "CLOUDSTATE_INTERNAL_ERROR";
   static statusCode = 500;
-  static description = `Failed to write metadata file: {message}`;
+  static description = `Internal error: {message}`;
 }
-class NodeModulesInstallFailedError extends Error {
+class CloudstateDatabaseErrorError extends Error {
   constructor(body) {
     super(
-      `NODE_MODULES_INSTALL_FAILED: ${body.message}`
+      `CLOUDSTATE_DATABASE_ERROR: ${body.message}`
     );
     this.body = body;
-    this.name = "NodeModulesInstallFailedError";
+    this.name = "CloudstateDatabaseErrorError";
   }
-  static code = "NODE_MODULES_INSTALL_FAILED";
+  static code = "CLOUDSTATE_DATABASE_ERROR";
   static statusCode = 500;
-  static description = `Failed to install node modules: {message}`;
+  static description = `Database operation failed: {message}`;
 }
-class NodeModulesDownloadFailedError extends Error {
+class CloudstateAccessDeniedError extends Error {
   constructor(body) {
     super(
-      `NODE_MODULES_DOWNLOAD_FAILED: ${body.message}`
+      `CLOUDSTATE_ACCESS_DENIED: ${body.message}`
     );
     this.body = body;
-    this.name = "NodeModulesDownloadFailedError";
+    this.name = "CloudstateAccessDeniedError";
   }
-  static code = "NODE_MODULES_DOWNLOAD_FAILED";
-  static statusCode = 500;
-  static description = `Failed to download node modules: {message}`;
+  static code = "CLOUDSTATE_ACCESS_DENIED";
+  static statusCode = 403;
+  static description = `Access denied to project: {project_id}`;
 }
-class LockGenerationFailedError extends Error {
+class RestoreFailedError extends Error {
   constructor(body) {
     super(
-      `LOCK_GENERATION_FAILED: ${body.message}`
+      `RESTORE_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "LockGenerationFailedError";
+    this.name = "RestoreFailedError";
   }
-  static code = "LOCK_GENERATION_FAILED";
+  static code = "RESTORE_FAILED";
   static statusCode = 500;
-  static description = `Failed to generate lock file: {message}`;
+  static description = `Failed to restore from backup: {message}`;
 }
-class WriteScriptFailedError extends Error {
+class CreateBackupFailedError extends Error {
   constructor(body) {
     super(
-      `WRITE_SCRIPT_FAILED: ${body.message}`
+      `CREATE_BACKUP_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "WriteScriptFailedError";
+    this.name = "CreateBackupFailedError";
   }
-  static code = "WRITE_SCRIPT_FAILED";
+  static code = "CREATE_BACKUP_FAILED";
   static statusCode = 500;
-  static description = `Failed to write script file: {message}`;
+  static description = `Failed to create backup: {message}`;
 }
-class DirectoryCreationFailedError extends Error {
+class BackupFailedError extends Error {
   constructor(body) {
     super(
-      `DIRECTORY_CREATION_FAILED: ${body.message}`
+      `BACKUP_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "DirectoryCreationFailedError";
+    this.name = "BackupFailedError";
   }
-  static code = "DIRECTORY_CREATION_FAILED";
+  static code = "BACKUP_FAILED";
   static statusCode = 500;
-  static description = `Failed to create script directory: {message}`;
+  static description = `Backup failed: {message}`;
 }
-class NetworkPermissionsFailedError extends Error {
+class DeploymentFailedError extends Error {
   constructor(body) {
     super(
-      `NETWORK_PERMISSIONS_FAILED: ${body.message}`
+      `DEPLOYMENT_FAILED: ${body.message}`
     );
     this.body = body;
-    this.name = "NetworkPermissionsFailedError";
+    this.name = "DeploymentFailedError";
   }
-  static code = "NETWORK_PERMISSIONS_FAILED";
+  static code = "DEPLOYMENT_FAILED";
   static statusCode = 500;
-  static description = `Failed to insert network permissions: {message}`;
+  static description = `Deployment failed: {message}`;
 }
-class LoggingFailedError extends Error {
+class InvalidDeploymentRequestError extends Error {
   constructor(body) {
     super(
-      `LOGGING_FAILED: ${body.message}`
+      `INVALID_DEPLOYMENT_REQUEST: ${body.message}`
     );
     this.body = body;
-    this.name = "LoggingFailedError";
+    this.name = "InvalidDeploymentRequestError";
   }
-  static code = "LOGGING_FAILED";
-  static statusCode = 500;
-  static description = `Failed to log execute run: {message}`;
+  static code = "INVALID_DEPLOYMENT_REQUEST";
+  static statusCode = 400;
+  static description = `Invalid deployment request: {message}`;
 }
-class RunNotFoundError extends Error {
+class ProjectNotFoundError extends Error {
   constructor(body) {
     super(
-      `RUN_NOT_FOUND: ${body.message}`
+      `PROJECT_NOT_FOUND: ${body.message}`
     );
     this.body = body;
-    this.name = "RunNotFoundError";
+    this.name = "ProjectNotFoundError";
   }
-  static code = "RUN_NOT_FOUND";
+  static code = "PROJECT_NOT_FOUND";
   static statusCode = 404;
-  static description = `Execute run not found: {run_id}`;
+  static description = `Project not found: {project_id}`;
 }
 const FREESTYLE_ERROR_CODE_MAP = {
   "BAD_PARSE": BadParseError,
@@ -3101,55 +3149,33 @@ const FREESTYLE_ERROR_CODE_MAP = {
   "BAD_HEADER": BadHeaderError,
   "BAD_KEY": BadKeyError,
   "GIT_ERROR": GitErrorError,
-  "PARTITION_NOT_FOUND": PartitionNotFoundError,
-  "VM_OPERATION_DENIED_DURING_TRANSACTION": VmOperationDeniedDuringTransactionError,
-  "VM_TRANSACTION_ID_MISMATCH": VmTransactionIdMismatchError,
-  "VM_NOT_IN_TRANSACTION": VmNotInTransactionError,
-  "VM_NOT_RUNNING": VmNotRunningError,
-  "FILE_NOT_FOUND": FileNotFoundError,
-  "FILES_BAD_REQUEST": FilesBadRequestError,
-  "INVALID_GIT_REPO_SPEC_ERROR": InvalidGitRepoSpecErrorError,
-  "INTERNAL_ERROR": InternalErrorError,
-  "FORK_VM_NOT_FOUND": ForkVmNotFoundError,
-  "CREATE_SNAPSHOT_BAD_REQUEST": CreateSnapshotBadRequestError,
-  "ACTIVE_TRANSACTION_ERROR": ActiveTransactionErrorError,
-  "SWAP_VM_TAP": SwapVmTapError,
-  "ROOTFS_COPY_ERROR": RootfsCopyErrorError,
-  "VM_NOT_FOUND_IN_FS": VmNotFoundInFsError,
-  "DATABASE_ERROR": DatabaseErrorError,
-  "INVALID_VM_ID": InvalidVmIdError,
-  "VM_NOT_FOUND": VmNotFoundError,
-  "INTERNAL_FORK_VM_NOT_FOUND": InternalForkVmNotFoundError,
-  "BAD_REQUEST": BadRequestError,
-  "INTERNAL_VM_NOT_FOUND": InternalVmNotFoundError,
-  "SNAPSHOT_SETUP_FAILED": SnapshotSetupFailedError,
-  "SNAPSHOT_VM_BAD_REQUEST": SnapshotVmBadRequestError,
-  "VM_DELETED": VmDeletedError,
-  "NO_DEFAULT_SNAPSHOT_AVAILABLE": NoDefaultSnapshotAvailableError,
-  "DOCKER_SNAPSHOT_FAILED": DockerSnapshotFailedError,
-  "SET_DEFAULT_SNAPSHOT_FAILED": SetDefaultSnapshotFailedError,
-  "SNAPSHOT_LAYER_CREATION_FAILED": SnapshotLayerCreationFailedError,
-  "SNAPSHOT_DIR_NOT_FOUND": SnapshotDirNotFoundError,
-  "SUBVOLUME_CREATION_FAILED": SubvolumeCreationFailedError,
-  "GET_DEFAULT_SNAPSHOT_FAILED": GetDefaultSnapshotFailedError,
-  "SUSPEND_FAILED_AND_STOP_FAILED": SuspendFailedAndStopFailedError,
-  "SUSPEND_FAILED_AND_STOPPED": SuspendFailedAndStoppedError,
   "SNAPSHOT_NOT_FOUND": SnapshotNotFoundError,
   "RESUMED_VM_NON_RESPONSIVE": ResumedVmNonResponsiveError,
   "SNAPSHOT_LOAD_TIMEOUT": SnapshotLoadTimeoutError,
   "UFFD_TIMEOUT_ERROR": UffdTimeoutErrorError,
   "KERNEL_PANIC": KernelPanicError,
+  "VM_DELETED": VmDeletedError,
   "REQWEST": ReqwestError,
   "FIRECRACKER_PID_NOT_FOUND": FirecrackerPidNotFoundError,
   "FIRECRACKER_API_SOCKET_NOT_FOUND": FirecrackerApiSocketNotFoundError,
   "INVALID_SNAPSHOT_ID": InvalidSnapshotIdError,
   "VM_START_TIMEOUT": VmStartTimeoutError,
+  "VM_IS_SUSPENDING": VmIsSuspendingError,
   "VM_EXIT_DURING_START": VmExitDuringStartError,
   "VM_ACCESS_DENIED": VmAccessDeniedError,
   "STD_IO": StdIoError,
   "FAILED_TO_SPAWN_UFFD": FailedToSpawnUffdError,
   "VM_SPAWN_PROCESS": VmSpawnProcessError,
   "VM_SUBNET_NOT_FOUND": VmSubnetNotFoundError,
+  "VM_OPERATION_DENIED_DURING_TRANSACTION": VmOperationDeniedDuringTransactionError,
+  "VM_TRANSACTION_ID_MISMATCH": VmTransactionIdMismatchError,
+  "VM_NOT_IN_TRANSACTION": VmNotInTransactionError,
+  "VM_NOT_FOUND_IN_FS": VmNotFoundInFsError,
+  "VM_NOT_RUNNING": VmNotRunningError,
+  "VM_NOT_FOUND": VmNotFoundError,
+  "INTERNAL_FORK_VM_NOT_FOUND": InternalForkVmNotFoundError,
+  "BAD_REQUEST": BadRequestError,
+  "INTERNAL_VM_NOT_FOUND": InternalVmNotFoundError,
   "USER_NOT_FOUND": UserNotFoundError,
   "USER_ALREADY_EXISTS": UserAlreadyExistsError,
   "VALIDATION_ERROR": ValidationErrorError,
@@ -3166,6 +3192,29 @@ const FREESTYLE_ERROR_CODE_MAP = {
   "GROUP_NAME_INVALID_CHARS": GroupNameInvalidCharsError,
   "GROUP_NAME_TOO_LONG": GroupNameTooLongError,
   "GROUP_NAME_EMPTY": GroupNameEmptyError,
+  "NO_DEFAULT_SNAPSHOT_AVAILABLE": NoDefaultSnapshotAvailableError,
+  "DOCKER_SNAPSHOT_FAILED": DockerSnapshotFailedError,
+  "SET_DEFAULT_SNAPSHOT_FAILED": SetDefaultSnapshotFailedError,
+  "SNAPSHOT_LAYER_CREATION_FAILED": SnapshotLayerCreationFailedError,
+  "SNAPSHOT_DIR_NOT_FOUND": SnapshotDirNotFoundError,
+  "SUBVOLUME_CREATION_FAILED": SubvolumeCreationFailedError,
+  "GET_DEFAULT_SNAPSHOT_FAILED": GetDefaultSnapshotFailedError,
+  "SNAPSHOT_SETUP_FAILED": SnapshotSetupFailedError,
+  "SNAPSHOT_VM_BAD_REQUEST": SnapshotVmBadRequestError,
+  "DATABASE_ERROR": DatabaseErrorError,
+  "PARTITION_NOT_FOUND": PartitionNotFoundError,
+  "INVALID_VM_ID": InvalidVmIdError,
+  "SUSPEND_FAILED_AND_STOP_FAILED": SuspendFailedAndStopFailedError,
+  "SUSPEND_FAILED_AND_STOPPED": SuspendFailedAndStoppedError,
+  "FILE_NOT_FOUND": FileNotFoundError,
+  "FILES_BAD_REQUEST": FilesBadRequestError,
+  "INVALID_GIT_REPO_SPEC_ERROR": InvalidGitRepoSpecErrorError,
+  "INTERNAL_ERROR": InternalErrorError,
+  "FORK_VM_NOT_FOUND": ForkVmNotFoundError,
+  "CREATE_SNAPSHOT_BAD_REQUEST": CreateSnapshotBadRequestError,
+  "ACTIVE_TRANSACTION_ERROR": ActiveTransactionErrorError,
+  "SWAP_VM_TAP": SwapVmTapError,
+  "ROOTFS_COPY_ERROR": RootfsCopyErrorError,
   "CREATE_VM_BAD_REQUEST": CreateVmBadRequestError,
   "VM_SETUP_FAILED": VmSetupFailedError,
   "WANTED_BY_EMPTY": WantedByEmptyError,
@@ -3195,38 +3244,38 @@ const FREESTYLE_ERROR_CODE_MAP = {
   "MAX_USES_EXCEEDED": MaxUsesExceededError,
   "EXPIRED": ExpiredError,
   "FORBIDDEN": ForbiddenError,
-  "UNSUPPORTED_TRANSFER": UnsupportedTransferError,
-  "TREE_NOT_FOUND": TreeNotFoundError,
-  "BRANCH_NOT_FOUND": BranchNotFoundError,
-  "PARENT_NOT_FOUND": ParentNotFoundError,
-  "INVALID_SERVICE": InvalidServiceError,
-  "EXPECTED_SERVICE": ExpectedServiceError,
-  "NOT_FOUND": NotFoundError,
-  "SEND_ERROR": SendErrorError,
   "UNAUTHORIZED": UnauthorizedError,
-  "INVALID_ACCOUNT_ID": InvalidAccountIdError,
-  "SOURCE_IMPORT_CONFLICT": SourceImportConflictError,
-  "SOURCE_UNAUTHORIZED": SourceUnauthorizedError,
-  "SOURCE_NOT_FOUND": SourceNotFoundError,
-  "IMPORT_SUBDIR_NOT_FOUND": ImportSubdirNotFoundError,
-  "REPO_ALREADY_EXISTS": RepoAlreadyExistsError,
-  "TAG_NOT_FOUND": TagNotFoundError,
+  "BLOB_NOT_FOUND": BlobNotFoundError,
   "INVALID_RANGE": InvalidRangeError,
   "OFFSET_WITH_SELECTOR": OffsetWithSelectorError,
   "COMMIT_NOT_IN_BRANCH": CommitNotInBranchError,
   "COMMIT_NOT_FOUND": CommitNotFoundError,
+  "BRANCH_NOT_FOUND": BranchNotFoundError,
   "NO_DEFAULT_BRANCH": NoDefaultBranchError,
   "INVALID_BASE64_CONTENT": InvalidBase64ContentError,
   "INVALID_FILE_CHANGE": InvalidFileChangeError,
   "INVALID_FILE_PATH": InvalidFilePathError,
   "CONFLICTING_PARENT": ConflictingParentError,
   "AMBIGUOUS": AmbiguousError,
+  "NOT_FOUND": NotFoundError,
   "INVALID": InvalidError,
+  "UNSUPPORTED_TRANSFER": UnsupportedTransferError,
+  "TREE_NOT_FOUND": TreeNotFoundError,
+  "PARENT_NOT_FOUND": ParentNotFoundError,
+  "INVALID_SERVICE": InvalidServiceError,
+  "EXPECTED_SERVICE": ExpectedServiceError,
   "PATH_NOT_FOUND": PathNotFoundError,
   "REFERENCE_NOT_FOUND": ReferenceNotFoundError,
-  "BLOB_NOT_FOUND": BlobNotFoundError,
-  "PACKFILE": PackfileError,
+  "TAG_NOT_FOUND": TagNotFoundError,
   "INVALID_REVISION": InvalidRevisionError,
+  "PACKFILE": PackfileError,
+  "SEND_ERROR": SendErrorError,
+  "INVALID_ACCOUNT_ID": InvalidAccountIdError,
+  "SOURCE_IMPORT_CONFLICT": SourceImportConflictError,
+  "SOURCE_UNAUTHORIZED": SourceUnauthorizedError,
+  "SOURCE_NOT_FOUND": SourceNotFoundError,
+  "IMPORT_SUBDIR_NOT_FOUND": ImportSubdirNotFoundError,
+  "REPO_ALREADY_EXISTS": RepoAlreadyExistsError,
   "CONFLICT": ConflictError,
   "BRANCH_ALREADY_EXISTS": BranchAlreadyExistsError,
   "GIT_HUB_SYNC_CONFLICT": GitHubSyncConflictError,
@@ -3234,27 +3283,40 @@ const FREESTYLE_ERROR_CODE_MAP = {
   "UNAVAILABLE": UnavailableError,
   "SCHEDULE_NOT_FOUND": ScheduleNotFoundError,
   "SERVICE_UNAVAILABLE": ServiceUnavailableError,
-  "PERMISSION_ALREADY_EXISTS": PermissionAlreadyExistsError,
-  "LIST_TOKENS_FAILED": ListTokensFailedError,
-  "REVOKE_TOKEN_FAILED": RevokeTokenFailedError,
-  "CREATE_TOKEN_FAILED": CreateTokenFailedError,
-  "LIST_PERMISSIONS_FAILED": ListPermissionsFailedError,
-  "GET_PERMISSION_FAILED": GetPermissionFailedError,
-  "UPDATE_PERMISSION_FAILED": UpdatePermissionFailedError,
-  "REVOKE_PERMISSION_FAILED": RevokePermissionFailedError,
-  "GRANT_PERMISSION_FAILED": GrantPermissionFailedError,
-  "LIST_IDENTITIES_FAILED": ListIdentitiesFailedError,
-  "DELETE_IDENTITY_FAILED": DeleteIdentityFailedError,
-  "CREATE_IDENTITY_FAILED": CreateIdentityFailedError,
-  "VM_PERMISSION_NOT_FOUND": VmPermissionNotFoundError,
-  "PERMISSION_NOT_FOUND": PermissionNotFoundError,
-  "GIT_REPOSITORY_ACCESS_DENIED": GitRepositoryAccessDeniedError,
-  "GIT_REPOSITORY_NOT_FOUND": GitRepositoryNotFoundError,
-  "CANNOT_DELETE_MANAGED_IDENTITY": CannotDeleteManagedIdentityError,
-  "CANNOT_MODIFY_MANAGED_IDENTITY": CannotModifyManagedIdentityError,
-  "IDENTITY_ACCESS_DENIED": IdentityAccessDeniedError,
-  "IDENTITY_NOT_FOUND": IdentityNotFoundError,
-  "UNAUTHORIZED_ERROR": UnauthorizedErrorError,
+  "EXECUTE_LIMIT_EXCEEDED": ExecuteLimitExceededError,
+  "OBSERVABILITY_DATABASE_ERROR": ObservabilityDatabaseErrorError,
+  "OBSERVABILITY_ACCESS_DENIED": ObservabilityAccessDeniedError,
+  "PARSE_LOGS_FAILED": ParseLogsFailedError,
+  "RETRIEVE_LOGS_FAILED": RetrieveLogsFailedError,
+  "INVALID_QUERY": InvalidQueryError,
+  "LOGS_NOT_FOUND": LogsNotFoundError,
+  "EXECUTE_INTERNAL_ERROR": ExecuteInternalErrorError,
+  "EXECUTE_ACCESS_DENIED": ExecuteAccessDeniedError,
+  "LIST_RUNS_FAILED": ListRunsFailedError,
+  "EXECUTION_ERROR": ExecutionErrorError,
+  "CONNECTION_FAILED": ConnectionFailedError,
+  "METADATA_WRITE_FAILED": MetadataWriteFailedError,
+  "NODE_MODULES_INSTALL_FAILED": NodeModulesInstallFailedError,
+  "NODE_MODULES_DOWNLOAD_FAILED": NodeModulesDownloadFailedError,
+  "LOCK_GENERATION_FAILED": LockGenerationFailedError,
+  "WRITE_SCRIPT_FAILED": WriteScriptFailedError,
+  "DIRECTORY_CREATION_FAILED": DirectoryCreationFailedError,
+  "NETWORK_PERMISSIONS_FAILED": NetworkPermissionsFailedError,
+  "LOGGING_FAILED": LoggingFailedError,
+  "RUN_NOT_FOUND": RunNotFoundError,
+  "LIMIT_EXCEEDED": LimitExceededError,
+  "FAILED_TO_PROVISION_CERTIFICATE": FailedToProvisionCertificateError,
+  "FAILED_TO_INSERT_DOMAIN_MAPPING": FailedToInsertDomainMappingError,
+  "PERMISSION_DENIED": PermissionDeniedError,
+  "FAILED_TO_CHECK_PERMISSIONS": FailedToCheckPermissionsError,
+  "FAILED_TO_LIST_DOMAINS": FailedToListDomainsError,
+  "FAILED_TO_LIST_VERIFICATIONS": FailedToListVerificationsError,
+  "FAILED_TO_VERIFY_DOMAIN": FailedToVerifyDomainError,
+  "VERIFICATION_FAILED": VerificationFailedError,
+  "FAILED_TO_DELETE_VERIFICATION": FailedToDeleteVerificationError,
+  "VERIFICATION_NOT_FOUND": VerificationNotFoundError,
+  "FAILED_TO_CREATE_VERIFICATION_CODE": FailedToCreateVerificationCodeError,
+  "INVALID_DOMAIN": InvalidDomainError,
   "BUILD_FAILED": BuildFailedError,
   "SERVER_DEPLOYMENT_FAILED": ServerDeploymentFailedError,
   "LOCKFILE_ERROR": LockfileErrorError,
@@ -3266,13 +3328,14 @@ const FREESTYLE_ERROR_CODE_MAP = {
   "NO_DOMAIN_OWNERSHIP": NoDomainOwnershipError,
   "INVALID_DOMAINS": InvalidDomainsError,
   "WEB_DEPLOYMENT_BAD_REQUEST": WebDeploymentBadRequestError,
+  "TIMEOUT_LIMIT_EXCEEDED": TimeoutLimitExceededError,
   "DEPLOYMENT_LIMIT_EXCEEDED": DeploymentLimitExceededError,
   "DEPLOYMENT_NOT_FOUND": DeploymentNotFoundError,
   "RESIZE_FAILED": ResizeFailedError,
   "INTERNAL_RESIZE_VM_NOT_FOUND": InternalResizeVmNotFoundError,
+  "ACCESS_DENIED": AccessDeniedError,
   "BRANCH_NAME_EMPTY": BranchNameEmptyError,
-  "EXECUTE_LIMIT_EXCEEDED": ExecuteLimitExceededError,
-  "VM_LIMIT_EXCEEDED": VmLimitExceededError,
+  "UNAUTHORIZED_ERROR": UnauthorizedErrorError,
   "TRIGGER_ERROR": TriggerErrorError,
   "TOKEN_ERROR": TokenErrorError,
   "PERMISSION_ERROR": PermissionErrorError,
@@ -3302,6 +3365,31 @@ const FREESTYLE_ERROR_CODE_MAP = {
   "FAILED_REMOVE_DOMAIN_MAPPING": FailedRemoveDomainMappingError,
   "FAILED_PERMISSIONS_CHECK": FailedPermissionsCheckError,
   "FAILED_TO_CHECK_DOMAIN_MAPPING_PERMISSIONS": FailedToCheckDomainMappingPermissionsError,
+  "GIT_REPO_LIMIT_EXCEEDED": GitRepoLimitExceededError,
+  "EMPTY_TAG": EmptyTagError,
+  "PERSISTENT_VMS_NOT_ALLOWED": PersistentVmsNotAllowedError,
+  "TOTAL_VM_LIMIT_EXCEEDED": TotalVmLimitExceededError,
+  "VM_LIMIT_EXCEEDED": VmLimitExceededError,
+  "PERMISSION_ALREADY_EXISTS": PermissionAlreadyExistsError,
+  "LIST_TOKENS_FAILED": ListTokensFailedError,
+  "REVOKE_TOKEN_FAILED": RevokeTokenFailedError,
+  "CREATE_TOKEN_FAILED": CreateTokenFailedError,
+  "LIST_PERMISSIONS_FAILED": ListPermissionsFailedError,
+  "GET_PERMISSION_FAILED": GetPermissionFailedError,
+  "UPDATE_PERMISSION_FAILED": UpdatePermissionFailedError,
+  "REVOKE_PERMISSION_FAILED": RevokePermissionFailedError,
+  "GRANT_PERMISSION_FAILED": GrantPermissionFailedError,
+  "LIST_IDENTITIES_FAILED": ListIdentitiesFailedError,
+  "DELETE_IDENTITY_FAILED": DeleteIdentityFailedError,
+  "CREATE_IDENTITY_FAILED": CreateIdentityFailedError,
+  "VM_PERMISSION_NOT_FOUND": VmPermissionNotFoundError,
+  "PERMISSION_NOT_FOUND": PermissionNotFoundError,
+  "GIT_REPOSITORY_ACCESS_DENIED": GitRepositoryAccessDeniedError,
+  "GIT_REPOSITORY_NOT_FOUND": GitRepositoryNotFoundError,
+  "CANNOT_DELETE_MANAGED_IDENTITY": CannotDeleteManagedIdentityError,
+  "CANNOT_MODIFY_MANAGED_IDENTITY": CannotModifyManagedIdentityError,
+  "IDENTITY_ACCESS_DENIED": IdentityAccessDeniedError,
+  "IDENTITY_NOT_FOUND": IdentityNotFoundError,
   "DOMAIN_OWNERSHIP_VERIFICATION_FAILED": DomainOwnershipVerificationFailedError,
   "ERROR_DELETING_RECORD": ErrorDeletingRecordError,
   "RECORD_OWNERSHIP_ERROR": RecordOwnershipErrorError,
@@ -3315,43 +3403,7 @@ const FREESTYLE_ERROR_CODE_MAP = {
   "BACKUP_FAILED": BackupFailedError,
   "DEPLOYMENT_FAILED": DeploymentFailedError,
   "INVALID_DEPLOYMENT_REQUEST": InvalidDeploymentRequestError,
-  "PROJECT_NOT_FOUND": ProjectNotFoundError,
-  "GIT_REPO_LIMIT_EXCEEDED": GitRepoLimitExceededError,
-  "EMPTY_TAG": EmptyTagError,
-  "LIMIT_EXCEEDED": LimitExceededError,
-  "FAILED_TO_PROVISION_CERTIFICATE": FailedToProvisionCertificateError,
-  "FAILED_TO_INSERT_DOMAIN_MAPPING": FailedToInsertDomainMappingError,
-  "PERMISSION_DENIED": PermissionDeniedError,
-  "FAILED_TO_CHECK_PERMISSIONS": FailedToCheckPermissionsError,
-  "FAILED_TO_LIST_DOMAINS": FailedToListDomainsError,
-  "FAILED_TO_LIST_VERIFICATIONS": FailedToListVerificationsError,
-  "FAILED_TO_VERIFY_DOMAIN": FailedToVerifyDomainError,
-  "VERIFICATION_FAILED": VerificationFailedError,
-  "FAILED_TO_DELETE_VERIFICATION": FailedToDeleteVerificationError,
-  "VERIFICATION_NOT_FOUND": VerificationNotFoundError,
-  "FAILED_TO_CREATE_VERIFICATION_CODE": FailedToCreateVerificationCodeError,
-  "INVALID_DOMAIN": InvalidDomainError,
-  "ACCESS_DENIED": AccessDeniedError,
-  "OBSERVABILITY_DATABASE_ERROR": ObservabilityDatabaseErrorError,
-  "OBSERVABILITY_ACCESS_DENIED": ObservabilityAccessDeniedError,
-  "PARSE_LOGS_FAILED": ParseLogsFailedError,
-  "RETRIEVE_LOGS_FAILED": RetrieveLogsFailedError,
-  "INVALID_QUERY": InvalidQueryError,
-  "LOGS_NOT_FOUND": LogsNotFoundError,
-  "EXECUTE_INTERNAL_ERROR": ExecuteInternalErrorError,
-  "EXECUTE_ACCESS_DENIED": ExecuteAccessDeniedError,
-  "LIST_RUNS_FAILED": ListRunsFailedError,
-  "EXECUTION_ERROR": ExecutionErrorError,
-  "CONNECTION_FAILED": ConnectionFailedError,
-  "METADATA_WRITE_FAILED": MetadataWriteFailedError,
-  "NODE_MODULES_INSTALL_FAILED": NodeModulesInstallFailedError,
-  "NODE_MODULES_DOWNLOAD_FAILED": NodeModulesDownloadFailedError,
-  "LOCK_GENERATION_FAILED": LockGenerationFailedError,
-  "WRITE_SCRIPT_FAILED": WriteScriptFailedError,
-  "DIRECTORY_CREATION_FAILED": DirectoryCreationFailedError,
-  "NETWORK_PERMISSIONS_FAILED": NetworkPermissionsFailedError,
-  "LOGGING_FAILED": LoggingFailedError,
-  "RUN_NOT_FOUND": RunNotFoundError
+  "PROJECT_NOT_FOUND": ProjectNotFoundError
 };
 
 var errors = /*#__PURE__*/Object.freeze({
@@ -3525,6 +3577,7 @@ var errors = /*#__PURE__*/Object.freeze({
   PermissionDeniedError: PermissionDeniedError,
   PermissionErrorError: PermissionErrorError,
   PermissionNotFoundError: PermissionNotFoundError,
+  PersistentVmsNotAllowedError: PersistentVmsNotAllowedError,
   ProjectNotFoundError: ProjectNotFoundError,
   RecordOwnershipErrorError: RecordOwnershipErrorError,
   ReferenceNotFoundError: ReferenceNotFoundError,
@@ -3572,7 +3625,9 @@ var errors = /*#__PURE__*/Object.freeze({
   SwapVmTapError: SwapVmTapError,
   SyntaxErrorError: SyntaxErrorError,
   TagNotFoundError: TagNotFoundError,
+  TimeoutLimitExceededError: TimeoutLimitExceededError,
   TokenErrorError: TokenErrorError,
+  TotalVmLimitExceededError: TotalVmLimitExceededError,
   TreeNotFoundError: TreeNotFoundError,
   TriggerErrorError: TriggerErrorError,
   UffdTimeoutErrorError: UffdTimeoutErrorError,
@@ -3598,6 +3653,7 @@ var errors = /*#__PURE__*/Object.freeze({
   VmAccessDeniedForMappingError: VmAccessDeniedForMappingError,
   VmDeletedError: VmDeletedError,
   VmExitDuringStartError: VmExitDuringStartError,
+  VmIsSuspendingError: VmIsSuspendingError,
   VmLimitExceededError: VmLimitExceededError,
   VmNotFoundError: VmNotFoundError,
   VmNotFoundInFsError: VmNotFoundInFsError,
@@ -5527,6 +5583,7 @@ class VmWithInstance {
 }
 class VmWith {
   instance;
+  defaultField;
   /**
    * Helper method to compose multiple configurations together.
    * Uses the same merging strategy as the main compose function.
@@ -5583,11 +5640,14 @@ function composeCreateVmOptions(arr) {
     if (options.workdir !== void 0) result.workdir = options.workdir;
     if (options.snapshotId !== void 0)
       result.snapshotId = options.snapshotId;
+    if (options.baseImage !== void 0) result.baseImage = options.baseImage;
     if (options.recreate !== void 0) result.recreate = options.recreate;
     if (options.aptDeps !== void 0) result.aptDeps = options.aptDeps;
     if (options.domains !== void 0) result.domains = options.domains;
     if (options.activityThresholdBytes !== void 0)
       result.activityThresholdBytes = options.activityThresholdBytes;
+    if (options.discriminator !== void 0)
+      result.discriminator = options.discriminator;
     if (options.persistence !== void 0)
       result.persistence = options.persistence;
     if (options.ports !== void 0) {
@@ -5729,6 +5789,7 @@ function composeCreateVmOptions(arr) {
         result.template = {
           // Simple overrides - start with base, override with new
           snapshotId: newTemplate.snapshotId !== void 0 ? newTemplate.snapshotId : baseTemplate.snapshotId,
+          baseImage: newTemplate.baseImage !== void 0 ? newTemplate.baseImage : baseTemplate.baseImage,
           rootfsSizeGb: newTemplate.rootfsSizeGb !== void 0 ? newTemplate.rootfsSizeGb : baseTemplate.rootfsSizeGb,
           memSizeGb: newTemplate.memSizeGb !== void 0 ? newTemplate.memSizeGb : baseTemplate.memSizeGb,
           aptDeps: newTemplate.aptDeps ?? baseTemplate.aptDeps,
@@ -5920,11 +5981,14 @@ function composeVmSpecs(specs) {
     rawConfigs
   );
   const mergedWith = {};
+  const mergedWithDiscriminators = {};
   for (const spec of specs) {
-    for (const key in spec.with) {
-      const builder = spec.with[key];
+    const builderDiscriminators = spec.getBuilderDiscriminators();
+    for (const key in spec.builders) {
+      const builder = spec.builders[key];
       if (builder) {
         mergedWith[key] = builder;
+        mergedWithDiscriminators[key] = builderDiscriminators[key];
       }
     }
   }
@@ -5936,11 +6000,13 @@ function composeVmSpecs(specs) {
   const result = new VmSpec({
     ...composedRaw,
     snapshot: nestedSpec,
-    with: mergedWith
+    with: mergedWith,
+    __withDiscriminators: mergedWithDiscriminators
   });
   return result;
 }
 
+const DEFAULT_CONFIGURE_BASE_IMAGE = "FROM debian:trixie-slim";
 function processSystemdServices(services, existingFiles = {}) {
   const additionalFiles = { ...existingFiles };
   const processedServices = [];
@@ -6043,6 +6109,7 @@ class Vm {
   fs;
   terminals;
   systemd;
+  _withInstances = {};
   /** @internal */
   _linux_username;
   constructor({ vmId, freestyle }) {
@@ -6069,6 +6136,13 @@ class Vm {
     vm._linux_username = username;
     return vm;
   }
+  with(name) {
+    return this._withInstances[name];
+  }
+  /** @internal */
+  _attachWith(name, instance) {
+    this._withInstances[name] = instance;
+  }
   /**
    * Start the VM.
    * @param options Optional startup configuration
@@ -6205,6 +6279,64 @@ class Vm {
     });
   }
 }
+class VmBaseImage {
+  layers;
+  constructor(base) {
+    if (!base) {
+      this.layers = [];
+      return;
+    }
+    if (typeof base === "string") {
+      this.layers = [base.trimEnd()];
+      return;
+    }
+    this.layers = base.dockerfileContent ? [base.dockerfileContent.trimEnd()] : [];
+  }
+  from(baseImage) {
+    if (typeof baseImage === "string") {
+      const line = /^\s*FROM\b/i.test(baseImage) ? baseImage.trimEnd() : `FROM ${baseImage.trim()}`;
+      this.layers.push(line);
+      return this;
+    }
+    if (baseImage instanceof VmBaseImage) {
+      this.layers.push(...baseImage.layers);
+      return this;
+    }
+    this.layers.push((baseImage.dockerfileContent || "").trimEnd());
+    return this;
+  }
+  runCommands(...commands) {
+    for (const command of commands) {
+      const trimmed = command.trim();
+      if (!trimmed) continue;
+      this.layers.push(`RUN <<'FREESTYLE_EOF'
+${trimmed}
+FREESTYLE_EOF`);
+    }
+    return this;
+  }
+  appendDockerfile(dockerfile) {
+    const trimmed = dockerfile.trim();
+    if (trimmed) {
+      this.layers.push(trimmed);
+    }
+    return this;
+  }
+  hasFromInstruction() {
+    return this.layers.some((layer) => /^\s*FROM\b/m.test(layer));
+  }
+  toRaw() {
+    const dockerfileContent = this.layers.filter((layer) => layer.trim().length > 0).join("\n\n");
+    if (dockerfileContent && !/^\s*FROM\b/m.test(dockerfileContent)) {
+      throw new Error(
+        'VmBaseImage must include a FROM instruction before adding Dockerfile layers. Add .baseImage(new VmBaseImage("FROM ...")) on the spec.'
+      );
+    }
+    return {
+      dockerfileContent
+    };
+  }
+}
 class VmTemplate {
   raw;
   with;
@@ -6217,20 +6349,156 @@ class VmTemplate {
 class VmSpec {
   raw;
   with;
-  constructor(spec) {
-    const { with: withBuilders, ...rest } = spec;
+  withDiscriminators;
+  get builders() {
+    return this.with;
+  }
+  constructor(spec = {}) {
+    const {
+      with: withBuilders,
+      __withDiscriminators: existingWithDiscriminators,
+      ...rest
+    } = spec;
     this.raw = rest;
-    this.with = withBuilders ?? {};
+    this.withDiscriminators = { ...existingWithDiscriminators ?? {} };
+    const withFn = ((nameOrBuilder, maybeBuilder) => {
+      const key = typeof nameOrBuilder === "string" ? nameOrBuilder : defaultVmWithName(nameOrBuilder);
+      const builder = typeof nameOrBuilder === "string" ? maybeBuilder : nameOrBuilder;
+      if (!builder) {
+        throw new Error("VmSpec.with requires a VmWith instance");
+      }
+      this.with[key] = builder;
+      this.withDiscriminators[key] = this.raw.discriminator;
+      return this;
+    });
+    this.with = withFn;
+    for (const [key, builder] of Object.entries(withBuilders ?? {})) {
+      if (builder) {
+        this.with[key] = builder;
+        if (!(key in this.withDiscriminators)) {
+          this.withDiscriminators[key] = void 0;
+        }
+      }
+    }
+  }
+  getBuilderDiscriminator(key) {
+    return this.withDiscriminators[key];
+  }
+  getBuilderDiscriminators() {
+    return { ...this.withDiscriminators };
+  }
+  mergeRaw(options) {
+    this.raw = composeCreateVmOptions([
+      this.raw,
+      options
+    ]);
+    return this;
+  }
+  clearBuilders() {
+    for (const key of Object.keys(this.with)) {
+      delete this.with[key];
+      delete this.withDiscriminators[key];
+    }
+  }
+  snapshot() {
+    const { snapshot: existingSnapshot, ...currentLayer } = this.raw;
+    const currentBuilders = { ...this.builders };
+    const currentWithDiscriminators = this.getBuilderDiscriminators();
+    const innerSnapshot = new VmSpec({
+      ...currentLayer,
+      with: currentBuilders,
+      __withDiscriminators: currentWithDiscriminators
+    });
+    if (isVmSpecLike$1(existingSnapshot)) {
+      innerSnapshot.raw.snapshot = existingSnapshot;
+    }
+    this.raw = {
+      snapshot: innerSnapshot
+    };
+    this.clearBuilders();
+    return this;
+  }
+  ensureSnapshot() {
+    if (!isVmSpecLike$1(this.raw.snapshot)) {
+      this.raw.snapshot = this.raw.discriminator !== void 0 ? new VmSpec({ discriminator: this.raw.discriminator }) : new VmSpec();
+    }
+    return this.raw.snapshot;
+  }
+  baseImage(baseImage) {
+    this.raw.baseImage = baseImage;
+    return this;
+  }
+  rootfsSizeGb(value) {
+    return this.mergeRaw({ rootfsSizeGb: value });
+  }
+  memSizeGb(value) {
+    return this.mergeRaw({ memSizeGb: value });
+  }
+  vcpuCount(value) {
+    return this.mergeRaw({ vcpuCount: value });
+  }
+  idleTimeoutSeconds(value) {
+    return this.mergeRaw({ idleTimeoutSeconds: value });
+  }
+  readySignalTimeoutSeconds(value) {
+    return this.mergeRaw({ readySignalTimeoutSeconds: value });
+  }
+  waitForReadySignal(value) {
+    return this.mergeRaw({ waitForReadySignal: value });
+  }
+  discriminator(value) {
+    return this.mergeRaw({ discriminator: value });
+  }
+  workdir(path) {
+    return this.mergeRaw({ workdir: path });
+  }
+  aptDeps(...deps) {
+    const existing = this.raw.aptDeps ?? [];
+    return this.mergeRaw({ aptDeps: [...existing, ...deps] });
+  }
+  additionalFiles(files) {
+    const existing = this.raw.additionalFiles ?? {};
+    this.raw.additionalFiles = {
+      ...existing,
+      ...files
+    };
+    return this;
+  }
+  runCommands(...commands) {
+    const image = normalizeBaseImage(this.raw.baseImage) ?? new VmBaseImage();
+    image.runCommands(...commands);
+    this.raw.baseImage = image;
+    return this;
+  }
+  repo(repo, path) {
+    const existingGit = this.raw.git ?? { config: {}, repos: [] };
+    const existingRepos = existingGit.repos ?? [];
+    return this.mergeRaw({
+      git: {
+        ...existingGit,
+        config: existingGit.config ?? {},
+        repos: [...existingRepos, { repo, path }]
+      }
+    });
+  }
+  systemdService(service) {
+    const existingSystemd = this.raw.systemd ?? {};
+    const services = existingSystemd.services ?? [];
+    this.raw.systemd = {
+      ...existingSystemd,
+      services: [...services, service]
+    };
+    return this;
   }
 }
-function isVmSpecLike(value) {
+function isVmSpecLike$1(value) {
   return !!value && typeof value === "object" && "raw" in value && "with" in value;
 }
 function isVmTemplateLike(value) {
   return !!value && typeof value === "object" && "raw" in value && "with" in value;
 }
 async function convertSpecSnapshotsToTemplates(spec, processBuilders = true) {
-  if (!isVmSpecLike(spec.raw.snapshot)) {
+  if (!isVmSpecLike$1(spec.raw.snapshot)) {
     return void 0;
   }
   let innerSpec = spec.raw.snapshot;
@@ -6239,28 +6507,35 @@ async function convertSpecSnapshotsToTemplates(spec, processBuilders = true) {
   }
   const { snapshot: nestedSnapshot, ...innerRaw } = innerSpec.raw;
   let nestedTemplate;
-  if (isVmSpecLike(nestedSnapshot)) {
+  if (isVmSpecLike$1(nestedSnapshot)) {
     nestedTemplate = await convertSpecSnapshotsToTemplates(innerSpec, false);
   }
   return new VmTemplate({
     ...innerRaw,
     template: nestedTemplate,
-    with: innerSpec.with
+    with: innerSpec.builders
   });
 }
 async function processOuterSpecBuilders(spec) {
-  for (const key in spec.with) {
-    const builder = spec.with[key];
+  const builders = spec.builders ?? {} ?? {};
+  for (const key in builders) {
+    const builder = builders[key];
     if (builder) {
       if (builder.configureSpec) {
         spec = await builder.configureSpec(spec);
       }
+      if (builder.configureBaseImage) {
+        spec.raw.baseImage = await builder.configureBaseImage(
+          prepareBaseImageForConfigure(spec.raw.baseImage)
+        );
+      }
       if (builder.configureSnapshotSpec) {
         let snapshotSpec;
-        if (isVmSpecLike(spec.raw.snapshot)) {
+        if (isVmSpecLike$1(spec.raw.snapshot)) {
           snapshotSpec = spec.raw.snapshot;
         } else {
-          snapshotSpec = new VmSpec({});
+          const inheritedDiscriminator = spec.getBuilderDiscriminator(key) ?? spec.raw.discriminator;
+          snapshotSpec = inheritedDiscriminator !== void 0 ? new VmSpec({ discriminator: inheritedDiscriminator }) : new VmSpec({});
           spec.raw.snapshot = snapshotSpec;
         }
         spec.raw.snapshot = await builder.configureSnapshotSpec(snapshotSpec);
@@ -6270,39 +6545,44 @@ async function processOuterSpecBuilders(spec) {
   return spec;
 }
 async function processSpecTree(spec) {
-  for (const key in spec.with) {
-    const builder = spec.with[key];
+  const builders = spec.builders ?? {} ?? {};
+  for (const [key, builder] of Object.entries(builders)) {
     if (builder) {
       if (builder.configureSpec) {
         spec = await builder.configureSpec(spec);
       }
+      if (builder.configureBaseImage) {
+        spec.raw.baseImage = await builder.configureBaseImage(
+          prepareBaseImageForConfigure(spec.raw.baseImage)
+        );
+      }
       if (builder.configureSnapshotSpec) {
         let snapshotSpec;
-        if (isVmSpecLike(spec.raw.snapshot)) {
+        if (isVmSpecLike$1(spec.raw.snapshot)) {
           snapshotSpec = spec.raw.snapshot;
         } else {
-          snapshotSpec = new VmSpec({});
+          const inheritedDiscriminator = spec.getBuilderDiscriminator(key) ?? spec.raw.discriminator;
+          snapshotSpec = inheritedDiscriminator !== void 0 ? new VmSpec({ discriminator: inheritedDiscriminator }) : new VmSpec({});
           spec.raw.snapshot = snapshotSpec;
         }
         spec.raw.snapshot = await builder.configureSnapshotSpec(snapshotSpec);
       }
     }
   }
-  if (isVmSpecLike(spec.raw.snapshot)) {
+  if (isVmSpecLike$1(spec.raw.snapshot)) {
     spec.raw.snapshot = await processSpecTree(spec.raw.snapshot);
   }
   return spec;
 }
 function collectSpecBuilders(spec) {
   let builders = {};
-  if (isVmSpecLike(spec.raw.snapshot)) {
+  if (isVmSpecLike$1(spec.raw.snapshot)) {
     builders = collectSpecBuilders(spec.raw.snapshot);
   }
-  if (spec.with) {
-    for (const [key, builder] of Object.entries(spec.with)) {
-      if (builder) {
-        builders[key] = builder;
-      }
+  const specBuilders = spec.builders ?? {} ?? {};
+  for (const [key, builder] of Object.entries(specBuilders)) {
+    if (builder) {
+      builders[key] = builder;
     }
   }
   return builders;
@@ -6314,9 +6594,10 @@ function mergeWithBuildersIntoSpec(spec, withBuilders) {
   return new VmSpec({
     ...spec.raw,
     with: {
-      ...spec.with,
+      ...spec.builders,
       ...withBuilders
-    }
+    },
+    __withDiscriminators: spec.getBuilderDiscriminators()
   });
 }
 class VmsNamespace {
@@ -6325,14 +6606,12 @@ class VmsNamespace {
     this.snapshots = new VmSnapshotsNamespace(freestyle._apiClient);
   }
   snapshots;
-  /**
-   * Create a new VM.
-   * @param options Optional VM configuration
-   * @returns A VM instance representing the created VM
-   */
   async create(options = {}) {
-    if (isVmSpecLike(options.snapshot)) {
-      if (isVmSpecLike(options.spec)) {
+    if (isVmSpecLike$1(options)) {
+      options = { spec: options };
+    }
+    if (isVmSpecLike$1(options.snapshot)) {
+      if (isVmSpecLike$1(options.spec)) {
         if (!options.spec.raw.snapshot) {
           options.spec.raw.snapshot = options.snapshot;
         }
@@ -6341,20 +6620,22 @@ class VmsNamespace {
       }
     }
     if (options.systemd?.services) {
-      const normalizedServices = options.systemd.services.map((service) => {
-        return {
-          ...service,
-          after: service.after?.map(
-            (s) => s.includes(".") ? s : `${s}.service`
-          ),
-          requires: service.requires?.map(
-            (s) => s.includes(".") ? s : `${s}.service`
-          ),
-          wantedBy: service.wantedBy?.map(
-            (s) => s.includes(".") ? s : `${s}.service`
-          )
-        };
-      });
+      const normalizedServices = options.systemd.services.map(
+        (service) => {
+          return {
+            ...service,
+            after: service.after?.map(
+              (s) => s.includes(".") ? s : `${s}.service`
+            ),
+            requires: service.requires?.map(
+              (s) => s.includes(".") ? s : `${s}.service`
+            ),
+            wantedBy: service.wantedBy?.map(
+              (s) => s.includes(".") ? s : `${s}.service`
+            )
+          };
+        }
+      );
       const { services: processedServices, additionalFiles: bashFiles } = processSystemdServices(
         normalizedServices,
         options.additionalFiles ?? {}
@@ -6382,10 +6663,10 @@ class VmsNamespace {
       const { snapshot: _snapshot, ...rest } = options;
       options = rest;
     }
-    if (isVmSpecLike(options.spec) && options.with) {
+    if (isVmSpecLike$1(options.spec) && options.with) {
       options.spec = mergeWithBuildersIntoSpec(options.spec, options.with);
     }
-    if (isVmSpecLike(options.spec)) {
+    if (isVmSpecLike$1(options.spec)) {
       let spec = options.spec;
       spec = await processOuterSpecBuilders(spec);
       const { snapshot, ...outerSpecOptions } = spec.raw;
@@ -6401,11 +6682,13 @@ class VmsNamespace {
         ...options,
         ...mergedOptions
       };
-      if (!options.with && spec.with) {
-        options.with = spec.with;
+      if (!options.with && spec.builders) {
+        options.with = spec.builders;
       }
     }
-    const specBuilders = isVmSpecLike(options.spec) ? collectSpecBuilders(options.spec) : void 0;
+    const specBuilders = isVmSpecLike$1(
+      options.spec
+    ) ? collectSpecBuilders(options.spec) : void 0;
     const templateBuilders = isVmTemplateLike(options.template) ? options.template.with : void 0;
     const builders = {
       ...templateBuilders || {},
@@ -6467,10 +6750,17 @@ class VmsNamespace {
       );
     }
     config.git = normalizeGitOptions(config.git);
+    const serializedBaseImage = normalizeBaseImage(config.baseImage)?.toRaw();
+    const rawTemplate = isVmTemplateLike(config.template) ? config.template.raw : config.template;
+    const requestTemplate = serializedBaseImage ? {
+      ...rawTemplate ?? {},
+      baseImage: serializedBaseImage
+    } : rawTemplate;
+    const { baseImage: _baseImage, template: _template, ...requestConfig } = config;
     const response = await this.freestyle._apiClient.post("/v1/vms", {
       body: {
-        ...config,
-        template: isVmTemplateLike(config.template) ? config.template["raw"] : config.template,
+        ...requestConfig,
+        template: requestTemplate,
         // Cast systemd since we've processed SystemdServiceInput[] to RawSystemdService[]
         systemd: config.systemd,
         // Normalize git options - default config to {}
@@ -6487,6 +6777,7 @@ class VmsNamespace {
       if (builder) {
         const instance = builder.createInstance();
         instance._init(vm);
+        vm._attachWith(key, instance);
         vm[key] = instance;
       }
     }
@@ -6525,6 +6816,7 @@ class VmsNamespace {
         if (builder) {
           const instance = builder.createInstance();
           instance._init(vm);
+          vm._attachWith(key, instance);
           vm[key] = instance;
         }
       }
@@ -6545,6 +6837,7 @@ class VmsNamespace {
         if (builder) {
           const instance = builder.createInstance();
           instance._init(vm);
+          vm._attachWith(key, instance);
           vm[key] = instance;
         }
       }
@@ -6565,14 +6858,44 @@ function enhanceError(e) {
   }
   return e;
 }
+function defaultVmWithName(builder) {
+  if (builder.defaultField) {
+    return builder.defaultField;
+  }
+  const constructorWithDefaults = builder.constructor;
+  if (constructorWithDefaults.defaultField) {
+    return constructorWithDefaults.defaultField;
+  }
+  if (constructorWithDefaults.defaultName) {
+    return constructorWithDefaults.defaultName;
+  }
+  const className = constructorWithDefaults.name ?? "";
+  const stripped = className.startsWith("Vm") ? className.slice(2) : className;
+  return stripped ? stripped.toLowerCase() : "with";
+}
+function normalizeBaseImage(image) {
+  if (!image) return void 0;
+  if (image instanceof VmBaseImage) return image;
+  return new VmBaseImage(image);
+}
+function prepareBaseImageForConfigure(image) {
+  const normalized = normalizeBaseImage(image);
+  if (!normalized) {
+    return new VmBaseImage(DEFAULT_CONFIGURE_BASE_IMAGE);
+  }
+  if (normalized.hasFromInstruction()) {
+    return normalized;
+  }
+  return new VmBaseImage(DEFAULT_CONFIGURE_BASE_IMAGE).from(normalized);
+}
 class VmSnapshotsNamespace {
   constructor(apiClient) {
     this.apiClient = apiClient;
   }
   async ensure(options) {
     let requestOptions = options;
-    if (isVmSpecLike(requestOptions.snapshot)) {
-      if (isVmSpecLike(requestOptions.spec)) {
+    if (isVmSpecLike$1(requestOptions.snapshot)) {
+      if (isVmSpecLike$1(requestOptions.spec)) {
         if (!requestOptions.spec.raw.snapshot) {
           requestOptions.spec.raw.snapshot = requestOptions.snapshot;
         }
@@ -6584,7 +6907,7 @@ class VmSnapshotsNamespace {
       const { snapshot: _snapshot, ...rest } = requestOptions;
       requestOptions = rest;
     }
-    if (isVmSpecLike(requestOptions.spec)) {
+    if (isVmSpecLike$1(requestOptions.spec)) {
       let spec = requestOptions.spec;
       spec = await processSpecTree(spec);
       const { snapshot: _snapshotSpec, ...outerSpecOptions } = spec.raw;
@@ -6592,7 +6915,7 @@ class VmSnapshotsNamespace {
       requestOptions.template = new VmTemplate({
         ...outerSpecOptions,
         template: innerTemplate,
-        with: spec.with
+        with: spec.builders
       });
     }
     if ("spec" in requestOptions) {
@@ -6628,6 +6951,11 @@ class VmSnapshotsNamespace {
   }
 }
 async function processTemplateTree(template) {
+  if (template.raw.baseImage) {
+    template.raw.baseImage = normalizeBaseImage(
+      template.raw.baseImage
+    )?.toRaw();
+  }
   if (template.raw.git) {
     template.raw.git = normalizeGitOptions(
       template.raw.git
@@ -6659,6 +6987,11 @@ async function processTemplateTree(template) {
           template
         );
       }
+      if (builder.configureBaseImage) {
+        template.raw.baseImage = await builder.configureBaseImage(
+          prepareBaseImageForConfigure(template.raw.baseImage)
+        );
+      }
       if (builder.configureNestedTemplate) {
         let nestedTemplate;
         if (isVmTemplateLike(template.raw.template)) {
@@ -6673,6 +7006,11 @@ async function processTemplateTree(template) {
       }
     }
   }
+  if (template.raw.baseImage) {
+    template.raw.baseImage = normalizeBaseImage(
+      template.raw.baseImage
+    )?.toRaw();
+  }
   if (template.raw.git) {
     template.raw.git = normalizeGitOptions(
       template.raw.git
@@ -6697,20 +7035,18 @@ async function processTemplateTree(template) {
     template.raw.additionalFiles = bashFiles;
   }
   if (template.raw.systemd?.patchedServices) {
-    template.raw.systemd.patchedServices = template.raw.systemd.patchedServices.map(
-      (service) => ({
-        ...service,
-        after: service.after?.map(
-          (s) => s.includes(".") ? s : `${s}.service`
-        ),
-        requires: service.requires?.map(
-          (s) => s.includes(".") ? s : `${s}.service`
-        ),
-        wantedBy: service.wantedBy?.map(
-          (s) => s.includes(".") ? s : `${s}.service`
-        )
-      })
-    );
+    template.raw.systemd.patchedServices = template.raw.systemd.patchedServices.map((service) => ({
+      ...service,
+      after: service.after?.map(
+        (s) => s.includes(".") ? s : `${s}.service`
+      ),
+      requires: service.requires?.map(
+        (s) => s.includes(".") ? s : `${s}.service`
+      ),
+      wantedBy: service.wantedBy?.map(
+        (s) => s.includes(".") ? s : `${s}.service`
+      )
+    }));
   }
   if (isVmTemplateLike(template.raw.template)) {
     template.raw.template = await processTemplateTree(
@@ -6729,21 +7065,18 @@ async function ensureNestedTemplates(template, snapshots) {
   return await layerTemplates(templates, snapshots);
 }
 async function layerTemplates(templates, snapshots) {
-  let lastTemplate = templates.pop();
-  const { snapshotId } = await snapshots.ensure({
-    template: lastTemplate
-  });
-  let lastSnapshotId = snapshotId;
-  while (templates.length > 0) {
+  if (templates.length === 1) {
+    return templates[0];
+  }
+  let lastSnapshotId = (await snapshots.ensure({ template: templates.pop() })).snapshotId;
+  while (templates.length > 1) {
     const template = templates.pop();
     template.raw.snapshotId = lastSnapshotId;
-    const { snapshotId: snapshotId2 } = await snapshots.ensure({
-      template
-    });
-    lastSnapshotId = snapshotId2;
-    lastTemplate = template;
+    lastSnapshotId = (await snapshots.ensure({ template })).snapshotId;
   }
-  return lastTemplate;
+  const outermost = templates.pop();
+  outermost.raw.snapshotId = lastSnapshotId;
+  return outermost;
 }
 function linuxUsernameHeader(linux_username) {
   return linux_username ? { "X-Freestyle-Vm-Linux-User-Id": linux_username } : void 0;
@@ -6908,7 +7241,8 @@ async function readFiles(directory) {
   return files;
 }
 
-async function debugCreateRequests(freestyle, options = {}) {
+async function debugCreateRequests(freestyle, optionsOrSpec = {}) {
+  const options = isVmSpecLike(optionsOrSpec) ? { spec: optionsOrSpec } : optionsOrSpec;
   const requests = [];
   let snapshotCounter = 0;
   let vmCounter = 0;
@@ -6952,6 +7286,9 @@ async function debugCreateRequests(freestyle, options = {}) {
   }
   return requests;
 }
+function isVmSpecLike(value) {
+  return !!value && typeof value === "object" && "raw" in value && "with" in value;
+}
 
 class Freestyle {
   /**
@@ -7000,7 +7337,9 @@ class Freestyle {
   async whoami() {
     const response = await this._apiClient.fetch("/auth/v1/whoami");
     if (!response.ok) {
-      throw new Error(`Failed to get whoami: ${response.status} ${await response.text()}`);
+      throw new Error(
+        `Failed to get whoami: ${response.status} ${await response.text()}`
+      );
     }
     return response.json();
   }
@@ -7042,6 +7381,7 @@ exports.Identity = Identity;
 exports.Systemd = Systemd;
 exports.SystemdService = SystemdService;
 exports.Vm = Vm;
+exports.VmBaseImage = VmBaseImage;
 exports.VmBuilder = VmBuilder;
 exports.VmService = VmService;
 exports.VmSpec = VmSpec;