modal 0.10.0 → 0.10.2-dev.0

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { Client, Status, ClientMiddleware } from 'nice-grpc';
+import { createChannel, Client, Status, ClientMiddleware } from 'nice-grpc';
 import { BinaryWriter, BinaryReader } from '@bufbuild/protobuf/wire';
 
 /**
@@ -86,6 +86,13 @@ declare enum AppStopSource {
     APP_STOP_SOURCE_WEB = 3,
     UNRECOGNIZED = -1
 }
+/** CPU architecture an image is built for and must run on. */
+declare enum Arch {
+    ARCH_UNSPECIFIED = 0,
+    ARCH_X86_64 = 1,
+    ARCH_AARCH64 = 2,
+    UNRECOGNIZED = -1
+}
 declare enum CertificateStatus {
     CERTIFICATE_STATUS_PENDING = 0,
     CERTIFICATE_STATUS_ISSUED = 1,
@@ -184,6 +191,17 @@ declare enum EndpointStopSource {
     ENDPOINT_STOP_SOURCE_WEB = 2,
     UNRECOGNIZED = -1
 }
+/**
+ * Partial-update signal for EnvironmentUpdateRequest. Omitted means no-op.
+ * INHERIT clears the environment override so the workspace default applies.
+ */
+declare enum EnvironmentBlockUnauthenticatedResources {
+    ENVIRONMENT_BLOCK_UNAUTHENTICATED_RESOURCES_UNSPECIFIED = 0,
+    ENVIRONMENT_BLOCK_UNAUTHENTICATED_RESOURCES_INHERIT = 1,
+    ENVIRONMENT_BLOCK_UNAUTHENTICATED_RESOURCES_BLOCK = 2,
+    ENVIRONMENT_BLOCK_UNAUTHENTICATED_RESOURCES_ALLOW = 3,
+    UNRECOGNIZED = -1
+}
 declare enum EnvironmentRole {
     ENVIRONMENT_ROLE_UNSPECIFIED = 0,
     ENVIRONMENT_ROLE_VIEWER = 1,
@@ -249,10 +267,16 @@ declare enum GPUType {
 declare enum IdentityProviderType {
     IDENTITY_PROVIDER_TYPE_UNSPECIFIED = 0,
     IDENTITY_PROVIDER_TYPE_GITHUB = 1,
-    IDENTITY_PROVIDER_TYPE_OKTA = 2,
+    IDENTITY_PROVIDER_TYPE_SAML = 2,
     IDENTITY_PROVIDER_TYPE_GOOGLE_OAUTH = 3,
     UNRECOGNIZED = -1
 }
+declare enum LLMEngine {
+    LLM_ENGINE_UNSPECIFIED = 0,
+    LLM_ENGINE_SGLANG = 1,
+    LLM_ENGINE_VLLM = 2,
+    UNRECOGNIZED = -1
+}
 declare enum MemberRole {
     MEMBER_ROLE_UNSPECIFIED = 0,
     MEMBER_ROLE_USER = 1,
@@ -322,6 +346,13 @@ declare enum SeekWhence {
     SEEK_END = 2,
     UNRECOGNIZED = -1
 }
+declare enum ServerInferenceStatsStatus {
+    SERVER_INFERENCE_STATS_STATUS_UNSPECIFIED = 0,
+    SERVER_INFERENCE_STATS_STATUS_AVAILABLE = 1,
+    SERVER_INFERENCE_STATS_STATUS_NO_DATA = 2,
+    SERVER_INFERENCE_STATS_STATUS_UNAVAILABLE = 3,
+    UNRECOGNIZED = -1
+}
 declare enum SystemErrorCode {
     SYSTEM_ERROR_CODE_UNSPECIFIED = 0,
     /** SYSTEM_ERROR_CODE_PERM - EPERM: Operation not permitted */
@@ -404,6 +435,12 @@ declare enum WebhookType {
     WEBHOOK_TYPE_WEB_SERVER = 4,
     UNRECOGNIZED = -1
 }
+declare enum BlobUploadResult_Outcome {
+    OUTCOME_UNSPECIFIED = 0,
+    OUTCOME_SUCCESS = 1,
+    OUTCOME_FAILURE = 2,
+    UNRECOGNIZED = -1
+}
 declare enum ClassParameterInfo_ParameterSerializationFormat {
     PARAM_SERIALIZATION_FORMAT_UNSPECIFIED = 0,
     /** PARAM_SERIALIZATION_FORMAT_PICKLE - legacy format - pickle of (args, kwargs) tuple */
@@ -525,6 +562,8 @@ interface AppCountLogsRequest {
     until: Date | undefined;
     bucketSecs: number;
     source: FileDescriptor;
+    /** Restrict logs to this exact Function ID, including when it is the base Function. */
+    parametrizedFunctionId: string;
 }
 declare const AppCountLogsRequest: MessageFns$1<AppCountLogsRequest>;
 interface AppCountLogsResponse {
@@ -603,6 +642,8 @@ interface AppFetchLogsRequest {
     taskId: string;
     sandboxId: string;
     searchText: string;
+    /** Restrict logs to this exact Function ID, including when it is the base Function. */
+    parametrizedFunctionId: string;
 }
 declare const AppFetchLogsRequest: MessageFns$1<AppFetchLogsRequest>;
 interface AppFetchLogsResponse {
@@ -625,6 +666,25 @@ interface AppGetByDeploymentNameResponse {
     lifecycle: AppLifecycle | undefined;
 }
 declare const AppGetByDeploymentNameResponse: MessageFns$1<AppGetByDeploymentNameResponse>;
+interface AppGetInfoRequest {
+    appId: string;
+}
+declare const AppGetInfoRequest: MessageFns$1<AppGetInfoRequest>;
+interface AppGetInfoResponse {
+    info: AppHandleMetadata | undefined;
+    functionInfoSummaries: {
+        [key: string]: AppGetInfoResponse_FunctionInfoSummary;
+    };
+}
+declare const AppGetInfoResponse: MessageFns$1<AppGetInfoResponse>;
+interface AppGetInfoResponse_FunctionInfoSummary {
+    gpuConfig: GPUConfig[];
+    schedule: Schedule | undefined;
+    /** True for Web Functions and classes with web methods; false for Servers. */
+    webFunction: boolean;
+    requiresProxyAuth?: boolean | undefined;
+}
+declare const AppGetInfoResponse_FunctionInfoSummary: MessageFns$1<AppGetInfoResponse_FunctionInfoSummary>;
 interface AppGetLayoutRequest {
     appId: string;
 }
@@ -679,6 +739,7 @@ interface AppGetOrCreateRequest {
 declare const AppGetOrCreateRequest: MessageFns$1<AppGetOrCreateRequest>;
 interface AppGetOrCreateResponse {
     appId: string;
+    handleMetadata: AppHandleMetadata | undefined;
 }
 declare const AppGetOrCreateResponse: MessageFns$1<AppGetOrCreateResponse>;
 interface AppGetTagsRequest {
@@ -691,6 +752,21 @@ interface AppGetTagsResponse {
     };
 }
 declare const AppGetTagsResponse: MessageFns$1<AppGetTagsResponse>;
+interface AppHandleMetadata {
+    description: string;
+    appId: string;
+    environmentName: string;
+    lifecycle: AppLifecycle | undefined;
+    /** tag -> function id */
+    functions: {
+        [key: string]: string;
+    };
+    /** tag -> function id */
+    servers: {
+        [key: string]: string;
+    };
+}
+declare const AppHandleMetadata: MessageFns$1<AppHandleMetadata>;
 interface AppHeartbeatRequest {
     appId: string;
 }
@@ -891,6 +967,25 @@ interface AuthTokenGetResponse {
     token: string;
 }
 declare const AuthTokenGetResponse: MessageFns$1<AuthTokenGetResponse>;
+/**
+ * Message representing the current (coalesced) state of the autoscaler configuration
+ * As well as the different sources that were used to create it.
+ */
+interface AutoscalerConfiguration {
+    /** The settings that are currently in effect. */
+    settings: AutoscalerSettings | undefined;
+    /** For tracking the source of the overridden value; keys correspond to fields in `settings`. */
+    overrideEvents: {
+        [key: string]: UserActionInfo;
+    };
+    /** The default settings that are used when no static settings are provided and no overrides are in effect. */
+    defaultSettings: AutoscalerSettings | undefined;
+    /** The static settings that were used to initialize the configuration. */
+    staticSettings: AutoscalerSettings | undefined;
+    /** The merge of all overrides that were used to create the current configuration. */
+    overrideSettings: AutoscalerSettings | undefined;
+}
+declare const AutoscalerConfiguration: MessageFns$1<AutoscalerConfiguration>;
 /**
  * A collection of user-configurable settings for Function autoscaling
  * These are used for static configuration and for dynamic autoscaler updates
@@ -949,6 +1044,13 @@ interface BlobGetResponse {
     downloadUrl: string;
 }
 declare const BlobGetResponse: MessageFns$1<BlobGetResponse>;
+interface BlobUploadResult {
+    /** The blob id (from BlobCreateResponse) that this upload attempt targeted. */
+    blobId: string;
+    outcome: BlobUploadResult_Outcome;
+    throughputBytesS: number;
+}
+declare const BlobUploadResult: MessageFns$1<BlobUploadResult>;
 interface BuildFunction {
     definition: string;
     globals: Uint8Array;
@@ -1560,6 +1662,7 @@ interface EndpointListItem {
     provisioningStatus: EndpointProvisioningStatus;
     status: string;
     servingMode: EndpointServingMode;
+    unauthenticated: boolean;
 }
 declare const EndpointListItem: MessageFns$1<EndpointListItem>;
 interface EndpointListRequest {
@@ -1718,6 +1821,7 @@ interface EnvironmentListItem {
     spendLimitReached: boolean;
     environmentType: EnvironmentType;
     defaultMemberRole?: EnvironmentRole | undefined;
+    blockUnauthenticatedResources?: boolean | undefined;
 }
 declare const EnvironmentListItem: MessageFns$1<EnvironmentListItem>;
 interface EnvironmentListResponse {
@@ -1766,6 +1870,12 @@ interface EnvironmentSettings {
     webhookSuffix: string;
     maxConcurrentGpus?: number | undefined;
     maxConcurrentTasks?: number | undefined;
+    /**
+     * When true, new unauthenticated web functions, Servers, tunnels, and
+     * Endpoints in this environment are rejected. Unset inherits the workspace
+     * default.
+     */
+    blockUnauthenticatedResources?: boolean | undefined;
 }
 declare const EnvironmentSettings: MessageFns$1<EnvironmentSettings>;
 interface EnvironmentUpdateRequest {
@@ -1774,6 +1884,7 @@ interface EnvironmentUpdateRequest {
     webSuffix: string | undefined;
     maxConcurrentTasks?: number | undefined;
     maxConcurrentGpus?: number | undefined;
+    blockUnauthenticatedResources?: EnvironmentBlockUnauthenticatedResources | undefined;
 }
 declare const EnvironmentUpdateRequest: MessageFns$1<EnvironmentUpdateRequest>;
 /** A file entry when listing files in a volume or network file system. */
@@ -2208,6 +2319,15 @@ interface FunctionFinishInputsRequest {
     numInputs: number;
 }
 declare const FunctionFinishInputsRequest: MessageFns$1<FunctionFinishInputsRequest>;
+interface FunctionGetByIdRequest {
+    functionId: string;
+}
+declare const FunctionGetByIdRequest: MessageFns$1<FunctionGetByIdRequest>;
+interface FunctionGetByIdResponse {
+    function: FunctionData | undefined;
+    handleMetadata: FunctionHandleMetadata | undefined;
+}
+declare const FunctionGetByIdResponse: MessageFns$1<FunctionGetByIdResponse>;
 interface FunctionGetCallGraphRequest {
     functionCallId: string;
 }
@@ -2215,6 +2335,8 @@ declare const FunctionGetCallGraphRequest: MessageFns$1<FunctionGetCallGraphRequ
 interface FunctionGetCallGraphResponse {
     inputs: InputCallGraphInfo[];
     functionCalls: FunctionCallCallGraphInfo[];
+    /** Set by the server when the graph has more nodes than it will return, so `inputs` is a prefix of the graph. */
+    truncated: boolean;
 }
 declare const FunctionGetCallGraphResponse: MessageFns$1<FunctionGetCallGraphResponse>;
 interface FunctionGetCurrentStatsRequest {
@@ -2231,6 +2353,14 @@ interface FunctionGetDynamicConcurrencyResponse {
     concurrency: number;
 }
 declare const FunctionGetDynamicConcurrencyResponse: MessageFns$1<FunctionGetDynamicConcurrencyResponse>;
+interface FunctionGetFlashAuthTokenRequest {
+    functionId: string;
+}
+declare const FunctionGetFlashAuthTokenRequest: MessageFns$1<FunctionGetFlashAuthTokenRequest>;
+interface FunctionGetFlashAuthTokenResponse {
+    token: string;
+}
+declare const FunctionGetFlashAuthTokenResponse: MessageFns$1<FunctionGetFlashAuthTokenResponse>;
 interface FunctionGetInputsItem {
     inputId: string;
     input: FunctionInput | undefined;
@@ -2312,6 +2442,14 @@ interface FunctionGetResponse {
     function: FunctionData | undefined;
 }
 declare const FunctionGetResponse: MessageFns$1<FunctionGetResponse>;
+interface FunctionGetSchedulingParamsRequest {
+    functionId: string;
+}
+declare const FunctionGetSchedulingParamsRequest: MessageFns$1<FunctionGetSchedulingParamsRequest>;
+interface FunctionGetSchedulingParamsResponse {
+    autoscalerConfiguration: AutoscalerConfiguration | undefined;
+}
+declare const FunctionGetSchedulingParamsResponse: MessageFns$1<FunctionGetSchedulingParamsResponse>;
 interface FunctionGetSerializedRequest {
     functionId: string;
 }
@@ -2329,6 +2467,8 @@ interface FunctionGetTimeRangeStatsRequest {
     until: Date | undefined;
     /** Aggregate the root Function pool and its non-version-pinned variant pools. */
     rollup: boolean;
+    /** Filter stats for a specific container */
+    containerId?: string | undefined;
 }
 declare const FunctionGetTimeRangeStatsRequest: MessageFns$1<FunctionGetTimeRangeStatsRequest>;
 interface FunctionGetTimeRangeStatsResponse {
@@ -2336,32 +2476,34 @@ interface FunctionGetTimeRangeStatsResponse {
     since: Date | undefined;
     /** Exclusive. */
     until: Date | undefined;
-    /**
-     * Per-input latency distributions.
-     * Execution time derived from inputs that finish in the window
-     */
-    executionTimeSeconds: FunctionStatsPercentiles | undefined;
-    /**
-     * Purposely omitted for now since it can't be computed
-     * from the desired tables without caveats that are confusing
-     * to explain to users
-     */
-    queueTimeSeconds: FunctionStatsPercentiles | undefined;
-    endToEndLatencySeconds: FunctionStatsPercentiles | undefined;
-    /** Container startup is measured from enqueue to start. */
-    containerStartupTimeSeconds: FunctionStatsPercentiles | undefined;
     /** Counts of inputs that finish in the requested time range. */
     inputSuccessCount: number;
     inputFailureCount: number;
     inputTimeoutCount: number;
+    /** Number of inputs assigned but not finished at the exclusive end of the time range. */
+    inputRunningAtEndCount: number;
+    /**
+     * Metrics include execution_time, end_to_end_latency, subject to change
+     * as requirements evolve
+     */
+    inputPercentileStats: {
+        [key: string]: StatsPercentileDistribution;
+    };
     /**
-     * Resource distributions are computed from normalized container heartbeat
-     * observations and expressed as fractions, where 1.0 represents 100% utilization.
-     * A missing message indicates that no observations were available.
+     * Container lifecycle counts. Started and errored containers are counted when
+     * the corresponding event occurs in the requested time range. Creating containers
+     * were enqueued but had not started or finished at the exclusive end of the range.
      */
-    cpuUtilization: FunctionStatsPercentiles | undefined;
-    memoryUtilization: FunctionStatsPercentiles | undefined;
-    gpuUtilization: FunctionStatsPercentiles | undefined;
+    containerStartedCount: number;
+    containerErrorCount: number;
+    containerCreatingAtEndCount: number;
+    /**
+     * Metrics include cpu_usage, memory_usage, gpu_utilization subject to change
+     * as requirements evolve
+     */
+    containerPercentileStats: {
+        [key: string]: StatsPercentileDistribution;
+    };
     /**
      * Number of direct non-version-pinned variants included in the roll-up.
      * Zero when roll-up is disabled or the base Function has no variants.
@@ -2401,6 +2543,8 @@ interface FunctionHandleMetadata {
     supportedInputFormats: DataFormat[];
     supportedOutputFormats: DataFormat[];
     appId: string;
+    /** The base Function ID for a variant, or the Function's own ID otherwise. */
+    baseFunctionId: string;
 }
 declare const FunctionHandleMetadata: MessageFns$1<FunctionHandleMetadata>;
 interface FunctionInput {
@@ -2488,6 +2632,7 @@ interface FunctionPutInputsItem {
     input: FunctionInput | undefined;
     r2Failed: boolean;
     r2ThroughputBytesS: number;
+    blobUploadResults: BlobUploadResult[];
 }
 declare const FunctionPutInputsItem: MessageFns$1<FunctionPutInputsItem>;
 interface FunctionPutInputsRequest {
@@ -2565,11 +2710,6 @@ interface FunctionStats$1 {
     inputHeadroom: number;
 }
 declare const FunctionStats$1: MessageFns$1<FunctionStats$1>;
-interface FunctionStatsPercentiles {
-    p50: number;
-    p90: number;
-}
-declare const FunctionStatsPercentiles: MessageFns$1<FunctionStatsPercentiles>;
 interface FunctionUpdateSchedulingParamsRequest {
     functionId: string;
     warmPoolSizeOverride: number;
@@ -2653,6 +2793,11 @@ interface Image$1 {
     };
     /** Volume mount for RUN commands */
     volumeMounts: VolumeMount[];
+    /**
+     * CPU architecture the image is built for. Images with an unspecified
+     * arch predate this field and are treated as x86_64.
+     */
+    arch: Arch;
 }
 declare const Image$1: MessageFns$1<Image$1>;
 interface ImageBuildChainGetRequest {
@@ -3096,6 +3241,35 @@ interface ObjectDependency {
     objectId: string;
 }
 declare const ObjectDependency: MessageFns$1<ObjectDependency>;
+/** Policy for outbound traffic from a sandbox. */
+interface OutboundPolicy {
+    /** Replace headers in outbound HTTPS requests, potentially with secret values. */
+    headerReplacements: OutboundPolicy_HeaderReplacement[];
+}
+declare const OutboundPolicy: MessageFns$1<OutboundPolicy>;
+interface OutboundPolicy_HeaderReplacement {
+    /**
+     * Domain that the header replacements are scoped to. Supports wildcards in
+     * subdomain positions.
+     */
+    domain: string;
+    /**
+     * Reference to a secret usable in the header value templates. Can be
+     * empty if no secret value is used.
+     */
+    secretId: string;
+    /**
+     * Header name -> header value.
+     *
+     * Values support templating with keys in the stanza's secret_id: a
+     * $-prefixed key name in the secret will be replaced with the secret
+     * value. Literal $ characters can be represented by two dollars: `$$`.
+     */
+    headers: {
+        [key: string]: string;
+    };
+}
+declare const OutboundPolicy_HeaderReplacement: MessageFns$1<OutboundPolicy_HeaderReplacement>;
 interface PTYInfo {
     /** Soon deprecated */
     enabled: boolean;
@@ -3467,8 +3641,37 @@ interface Sandbox$1 {
      */
     inboundCidrAllowlist: string[];
     environmentVariables: StringMap | undefined;
+    outboundPolicy?: OutboundPolicy | undefined;
+    /**
+     * If set, the sandbox's main container is served an X.509-SVID over a
+     * SPIFFE Workload API socket, addressed by SPIFFE_ENDPOINT_SOCKET. The
+     * certificate federates into a cloud account (AWS IAM Roles Anywhere).
+     * Sidecars are not served one.
+     */
+    includeX509Svid: boolean;
 }
 declare const Sandbox$1: MessageFns$1<Sandbox$1>;
+interface SandboxContainerCreateV2Request {
+    /** Sandbox the container joins; it runs inside that sandbox's task. */
+    sandboxId: string;
+    /** Logical container name, unique within the sandbox. */
+    containerName: string;
+    /**
+     * Same definition type as SandboxCreateV2. Fields a container cannot honor
+     * (resources, timeouts, scheduling constraints, ...) are rejected.
+     */
+    definition: Sandbox$1 | undefined;
+    ephemeralSecrets: StringMap | undefined;
+    cloudBucketMountCredentials: {
+        [key: string]: StringMap;
+    };
+}
+declare const SandboxContainerCreateV2Request: MessageFns$1<SandboxContainerCreateV2Request>;
+interface SandboxContainerCreateV2Response {
+    containerId: string;
+    containerName: string;
+}
+declare const SandboxContainerCreateV2Response: MessageFns$1<SandboxContainerCreateV2Response>;
 interface SandboxCreateConnectTokenRequest {
     sandboxId: string;
     userMetadata: string;
@@ -3886,6 +4089,71 @@ interface SecretUpdateRequest_Update {
     value?: string | undefined;
 }
 declare const SecretUpdateRequest_Update: MessageFns$1<SecretUpdateRequest_Update>;
+interface ServerGetTimeRangeStatsRequest {
+    functionId: string;
+    /** Inclusive. */
+    since: Date | undefined;
+    /** Exclusive. */
+    until: Date | undefined;
+    /** Filter stats for a specific container */
+    containerId?: string | undefined;
+}
+declare const ServerGetTimeRangeStatsRequest: MessageFns$1<ServerGetTimeRangeStatsRequest>;
+interface ServerGetTimeRangeStatsResponse {
+    /** Inclusive. */
+    since: Date | undefined;
+    /** Exclusive. */
+    until: Date | undefined;
+    requestCount: number;
+    requestCountByStatusCode: ServerGetTimeRangeStatsResponse_ServerStatusCodeCount[];
+    requestRatePerSecond: number;
+    /** Metrics include request_latency, subject to change as requirements evolve. */
+    requestPercentileStats: {
+        [key: string]: StatsPercentileDistribution;
+    };
+    /**
+     * Metrics include startup_time, cpu_usage, memory_usage, and
+     * gpu_utilization, subject to change as requirements evolve.
+     */
+    containerPercentileStats: {
+        [key: string]: StatsPercentileDistribution;
+    };
+    /** Absent when the image does not contain a supported inference engine. */
+    inference: ServerGetTimeRangeStatsResponse_ServerInferenceStats | undefined;
+    /**
+     * Container lifecycle counts. Started and errored containers are counted when
+     * the corresponding event occurs in the requested time range. Creating containers
+     * were enqueued but had not started or finished at the exclusive end of the range.
+     */
+    containerStartedCount: number;
+    containerErrorCount: number;
+    containerCreatingAtEndCount: number;
+}
+declare const ServerGetTimeRangeStatsResponse: MessageFns$1<ServerGetTimeRangeStatsResponse>;
+interface ServerGetTimeRangeStatsResponse_ServerInferenceStats {
+    engine: LLMEngine;
+    status: ServerInferenceStatsStatus;
+    /**
+     * Metrics include time_to_first_token, inter_token_latency, and
+     * end_to_end_latency, subject to change as requirements evolve.
+     */
+    percentileStats: {
+        [key: string]: StatsPercentileDistribution;
+    };
+    /**
+     * Metrics include input_tokens_per_second, cached_input_tokens_per_second,
+     * and output_tokens_per_second, subject to change as requirements evolve.
+     */
+    scalarStats: {
+        [key: string]: number;
+    };
+}
+declare const ServerGetTimeRangeStatsResponse_ServerInferenceStats: MessageFns$1<ServerGetTimeRangeStatsResponse_ServerInferenceStats>;
+interface ServerGetTimeRangeStatsResponse_ServerStatusCodeCount {
+    statusCode: number;
+    count: number;
+}
+declare const ServerGetTimeRangeStatsResponse_ServerStatusCodeCount: MessageFns$1<ServerGetTimeRangeStatsResponse_ServerStatusCodeCount>;
 interface ServiceUser {
     name: string;
     tokenId: string;
@@ -3988,6 +4256,18 @@ interface SharedVolumeRemoveFileRequest {
     recursive: boolean;
 }
 declare const SharedVolumeRemoveFileRequest: MessageFns$1<SharedVolumeRemoveFileRequest>;
+interface StatsPercentile {
+    /** The percentile expressed in basis points: 5000 is p50 and 9990 is p99.9. */
+    percentileBasisPoints: number;
+    value: number;
+}
+declare const StatsPercentile: MessageFns$1<StatsPercentile>;
+interface StatsPercentileDistribution {
+    /** Unit identifier such as "seconds", "cores", "gibibytes", or "fraction". */
+    unit: string;
+    percentiles: StatsPercentile[];
+}
+declare const StatsPercentileDistribution: MessageFns$1<StatsPercentileDistribution>;
 interface StringMap {
     contents: {
         [key: string]: string;
@@ -4225,6 +4505,15 @@ interface UploadUrlList {
     items: string[];
 }
 declare const UploadUrlList: MessageFns$1<UploadUrlList>;
+/** Used for capturing context about an action performed by a user */
+interface UserActionInfo {
+    userId: string;
+    serviceUserId: string;
+    timestamp: number;
+    /** Resolved display name, could be a user or service user. */
+    requestedBy: string;
+}
+declare const UserActionInfo: MessageFns$1<UserActionInfo>;
 interface UserGroupEnvironmentSetRequest {
     environmentId: string;
     userGroupId: string;
@@ -4295,6 +4584,11 @@ interface VolumeGetFile2Request {
     start: number;
     /** 0 is interpreted as 'read to end' */
     len: number;
+    /**
+     * The client extends each block body it downloads with zero bytes up to the
+     * block's expected length, so responses may omit trailing zero bytes.
+     */
+    clientPadsBlocks: boolean;
 }
 declare const VolumeGetFile2Request: MessageFns$1<VolumeGetFile2Request>;
 interface VolumeGetFile2Response {
@@ -4541,10 +4835,13 @@ interface WebhookToken {
     tokenId: string;
     createdAt: number;
     scoped: boolean;
+    name: string;
+    createdBy: UserIdentity | undefined;
 }
 declare const WebhookToken: MessageFns$1<WebhookToken>;
 interface WebhookTokenCreateRequest {
     scoped: boolean;
+    name: string;
 }
 declare const WebhookTokenCreateRequest: MessageFns$1<WebhookTokenCreateRequest>;
 interface WebhookTokenEnvironmentAddRequest {
@@ -4671,6 +4968,18 @@ interface WorkspaceSetDefaultEnvironmentRequest {
     environmentName: string;
 }
 declare const WorkspaceSetDefaultEnvironmentRequest: MessageFns$1<WorkspaceSetDefaultEnvironmentRequest>;
+interface WorkspaceSetDefaultEnvironmentSettingsRequest {
+    /**
+     * Omitted = no-op. INHERIT clears the workspace default so environments
+     * with no override have no block. Rejects UNSPECIFIED.
+     */
+    blockUnauthenticatedResources?: EnvironmentBlockUnauthenticatedResources | undefined;
+}
+declare const WorkspaceSetDefaultEnvironmentSettingsRequest: MessageFns$1<WorkspaceSetDefaultEnvironmentSettingsRequest>;
+interface WorkspaceSetDefaultEnvironmentSettingsResponse {
+    defaultEnvironmentSettings: EnvironmentSettings | undefined;
+}
+declare const WorkspaceSetDefaultEnvironmentSettingsResponse: MessageFns$1<WorkspaceSetDefaultEnvironmentSettingsResponse>;
 interface WorkspaceSetImageBuilderVersionRequest {
     newImageBuilderVersion: string;
 }
@@ -4746,6 +5055,14 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly appGetInfo: {
+            readonly name: "AppGetInfo";
+            readonly requestType: MessageFns$1<AppGetInfoRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<AppGetInfoResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly appGetLayout: {
             readonly name: "AppGetLayout";
             readonly requestType: MessageFns$1<AppGetLayoutRequest>;
@@ -5481,6 +5798,14 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly functionGetById: {
+            readonly name: "FunctionGetById";
+            readonly requestType: MessageFns$1<FunctionGetByIdRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<FunctionGetByIdResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly functionGetCallGraph: {
             readonly name: "FunctionGetCallGraph";
             readonly requestType: MessageFns$1<FunctionGetCallGraphRequest>;
@@ -5505,6 +5830,14 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly functionGetFlashAuthToken: {
+            readonly name: "FunctionGetFlashAuthToken";
+            readonly requestType: MessageFns$1<FunctionGetFlashAuthTokenRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<FunctionGetFlashAuthTokenResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         /** For containers to request next call */
         readonly functionGetInputs: {
             readonly name: "FunctionGetInputs";
@@ -5523,6 +5856,14 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly functionGetSchedulingParams: {
+            readonly name: "FunctionGetSchedulingParams";
+            readonly requestType: MessageFns$1<FunctionGetSchedulingParamsRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<FunctionGetSchedulingParamsResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly functionGetSerialized: {
             readonly name: "FunctionGetSerialized";
             readonly requestType: MessageFns$1<FunctionGetSerializedRequest>;
@@ -5867,6 +6208,14 @@ declare const ModalClientDefinition: {
             readonly options: {};
         };
         /** Sandboxes */
+        readonly sandboxContainerCreateV2: {
+            readonly name: "SandboxContainerCreateV2";
+            readonly requestType: MessageFns$1<SandboxContainerCreateV2Request>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<SandboxContainerCreateV2Response>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly sandboxCreate: {
             readonly name: "SandboxCreate";
             readonly requestType: MessageFns$1<SandboxCreateRequest>;
@@ -6189,6 +6538,15 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        /** Servers */
+        readonly serverGetTimeRangeStats: {
+            readonly name: "ServerGetTimeRangeStats";
+            readonly requestType: MessageFns$1<ServerGetTimeRangeStatsRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<ServerGetTimeRangeStatsResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         /** Service users */
         readonly serviceUserList: {
             readonly name: "ServiceUserList";
@@ -6639,6 +6997,14 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly workspaceSetDefaultEnvironmentSettings: {
+            readonly name: "WorkspaceSetDefaultEnvironmentSettings";
+            readonly requestType: MessageFns$1<WorkspaceSetDefaultEnvironmentSettingsRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<WorkspaceSetDefaultEnvironmentSettingsResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly workspaceSetImageBuilderVersion: {
             readonly name: "WorkspaceSetImageBuilderVersion";
             readonly requestType: MessageFns$1<WorkspaceSetImageBuilderVersionRequest>;
@@ -7632,6 +7998,14 @@ declare enum TaskExecStdoutConfig {
     TASK_EXEC_STDOUT_CONFIG_PIPE = 1,
     UNRECOGNIZED = -1
 }
+interface SandboxStdinWriteV2Response {
+}
+declare const SandboxStdinWriteV2Response: MessageFns<SandboxStdinWriteV2Response>;
+interface SandboxStdioReadV2Response {
+    data: Uint8Array;
+    startingOffset: number;
+}
+declare const SandboxStdioReadV2Response: MessageFns<SandboxStdioReadV2Response>;
 interface SandboxWaitUntilReadyTcrResponse {
     readyAt: number;
 }
@@ -7918,11 +8292,26 @@ interface Profile {
     serverUrl: string;
     tokenId?: string;
     tokenSecret?: string;
+    oauthRefreshToken?: string;
+    oauthClientId?: string;
+    oauthClientSecret?: string;
+    oauthJwtKey?: string;
     environment?: string;
     imageBuilderVersion?: string;
     logLevel?: string;
     /** Parsed from MODAL_MAX_THROTTLE_WAIT. null means unlimited. */
     maxThrottleWaitSecs?: number;
+    /**
+     * How long a Sandbox connection may sit idle before the client gives it up.
+     * The Sandbox stays usable: the next operation reconnects. Zero keeps
+     * connections open until the client closes.
+     */
+    sandboxChannelIdleTimeoutMs: number;
+    /**
+     * Set by the MODAL_SANDBOX_V2 environment variable or the sandbox_v2
+     * profile key in .modal.toml.
+     */
+    sandboxV2: boolean;
 }
 
 /**
@@ -7949,7 +8338,37 @@ interface StdinSource {
 /** @ignore */
 declare class TaskCommandRouterClientImpl {
     private stub;
+    /**
+     * The connection, absent while it is released. It is dialled again by the
+     * next operation, so nothing may hold `stub` across one.
+     */
     private channel;
+    private dial;
+    private factory;
+    /**
+     * How many operations are using the connection. A count rather than a flag
+     * because operations overlap: only the last one out starts the idle clock.
+     */
+    private inFlight;
+    private idle;
+    /**
+     * Bumped every time a connection is dialled. A stream opened on an earlier
+     * one is stale: the connection under it has since been given up.
+     */
+    private generation;
+    /**
+     * Streams open right now, tracked so they can be ended on release.
+     *
+     * grpc-js does not cancel a call in flight when its channel is closed, and a
+     * subchannel with a live call on it is never collected - so closing alone
+     * leaves the socket up. Aborting the calls first is what actually frees it.
+     */
+    private liveStreams;
+    /**
+     * How long the client may go unused before its connection is given up. Zero
+     * keeps it up until the client is closed. Overridable in tests.
+     */
+    idleTimeoutMs: number;
     private serverClient;
     private taskId;
     private sandboxId;
@@ -7960,14 +8379,36 @@ declare class TaskCommandRouterClientImpl {
     private jwtRefreshLock;
     private logger;
     private closed;
+    private draining;
     /**
      * `access` is the router access returned by SandboxCreateV2, which lets a
      * freshly created sandbox connect without a round-trip. Pass undefined to look
      * it up — a re-attached sandbox, or the server could not mint a token.
      */
     static tryInit(serverClient: ModalGrpcClient, taskId: string, sandboxId: string, isV2: boolean, access: CommandRouterAccess | undefined, logger: Logger, profile: Profile): Promise<TaskCommandRouterClientImpl | null>;
-    private constructor();
+    /**
+     * Builds a client around an already-resolved connection. Public so a test can
+     * construct one without the control-plane round trip `tryInit` makes; the
+     * class is not exported from the package, so this is not API surface.
+     */
+    constructor(serverClient: ModalGrpcClient, taskId: string, sandboxId: string, isV2: boolean, serverUrl: string, jwt: string, dial: () => ReturnType<typeof createChannel>, logger: Logger, idleTimeoutMs: number);
+    /**
+     * Says the client is about to be used: holds off the idle timer, and dials
+     * again if the connection was already given up. Returns the generation being
+     * used; pair every call with endOp.
+     */
+    private beginOp;
+    /** Says the caller is done. The last one out starts the clock. */
+    private endOp;
+    /**
+     * Starts the countdown to giving the connection back. Call it with nothing
+     * in flight.
+     */
+    private armIdleTimer;
+    /** Refuse new operations and release resources after current operations finish. */
+    closeWhenIdle(): void;
     close(): void;
+    private callWithRetries;
     /** Run a unary RPC against the command router with the default retry policy. */
     private callUnary;
     execStart(request: TaskExecStartRequest): Promise<TaskExecStartResponse>;
@@ -7976,7 +8417,7 @@ declare class TaskCommandRouterClientImpl {
     containerList(request: TaskContainerListRequest): Promise<TaskContainerListResponse>;
     containerTerminate(request: TaskContainerTerminateRequest): Promise<void>;
     containerWait(request: TaskContainerWaitRequest): Promise<TaskContainerWaitResponse>;
-    execStdioRead(taskId: string, execId: string, fileDescriptor: FileDescriptor, deadline?: number | null): AsyncGenerator<TaskExecStdioReadResponse>;
+    execStdioRead(taskId: string, execId: string, fileDescriptor: FileDescriptor, deadline?: number | null, signal?: AbortSignal): AsyncGenerator<TaskExecStdioReadResponse>;
     execStdinWrite(taskId: string, execId: string, offset: number, data: Uint8Array, eof: boolean): Promise<TaskExecStdinWriteResponse>;
     /**
      * Read the current stdin write status for an exec'd command.
@@ -8010,10 +8451,20 @@ declare class TaskCommandRouterClientImpl {
      * within this window, the call is cancelled and a TimeoutError is thrown.
      */
     reloadVolumes(request: TaskReloadVolumesRequest, options?: TimeoutOptions): Promise<void>;
+    sandboxStdioReadV2(taskId: string, fileDescriptor: FileDescriptor, signal?: AbortSignal): AsyncGenerator<SandboxStdioReadV2Response>;
+    sandboxStdinWriteV2(taskId: string, offset: number, data: Uint8Array, eof: boolean): Promise<SandboxStdinWriteV2Response>;
     sandboxWaitUntilReady(taskId: string, timeoutMs: number): Promise<SandboxWaitUntilReadyTcrResponse>;
     private refreshJwt;
+    /** The caller holds an operation lease across authentication and all retries. */
     private callWithAuthRetry;
-    private streamStdio;
+    /**
+     * Yields the next chunk of stdio, opening or reopening the stream as it needs
+     * to, and determining whether or not to retry a failed open or read. It waits
+     * out the backoff itself.
+     */
+    private streamStdioWithRetries;
+    private streamExecStdio;
+    private streamSandboxStdio;
 }
 
 /** Type of a filesystem entry. */
@@ -8228,12 +8679,15 @@ declare class SandboxFilesystem {
     writeText(data: string, remotePath: string): Promise<void>;
 }
 
-type SandboxSidecarCommandRouter = Pick<TaskCommandRouterClientImpl, "containerCreate" | "containerGet" | "containerList" | "containerTerminate" | "containerWait">;
+type SandboxSidecarCommandRouter = Pick<TaskCommandRouterClientImpl, "containerCreate" | "containerGet" | "containerList" | "containerTerminate" | "containerWait" | "mountDirectory" | "snapshotDirectory" | "unmountDirectory">;
 type SandboxSidecarAccess = {
     client: ModalClient;
+    sandboxId: string;
+    ensureAttached(): void;
     exec(command: string[], params: SandboxExecParams | undefined, containerId: string): Promise<ContainerProcess>;
     commandRouter(): Promise<[string, SandboxSidecarCommandRouter]>;
     reloadVolumes(containerId: string, params: SidecarReloadVolumesParams | undefined): Promise<void>;
+    snapshotFilesystem(containerId: string, params: SidecarSnapshotFilesystemParams | undefined): Promise<Image>;
 };
 /** Options for {@link SidecarService#create SidecarService.create()}. */
 type SidecarCreateParams = {
@@ -8276,11 +8730,24 @@ type SidecarTerminateParams = {
     /** If true, wait for the sidecar container to terminate. */
     wait?: boolean;
 };
+/** Optional parameters for {@link SidecarContainer#snapshotFilesystem SidecarContainer.snapshotFilesystem()}. */
+type SidecarSnapshotFilesystemParams = {
+    /** Overall budget for the snapshot call, in milliseconds. Defaults to 55000. */
+    timeoutMs?: number;
+    /** Lifetime of the resulting image in milliseconds. Defaults to 30 days. Pass `null` for no expiry. */
+    ttlMs?: number | null;
+};
 /** Optional parameters for {@link SidecarContainer#reloadVolumes SidecarContainer.reloadVolumes()}. */
 type SidecarReloadVolumesParams = {
     /** Overall budget in milliseconds. Defaults to 55000. */
     timeoutMs?: number;
 };
+/** Optional parameters for {@link SidecarContainer#mountImage SidecarContainer.mountImage()}. */
+type SidecarMountImageParams = SandboxMountImageParams;
+/** Optional parameters for {@link SidecarContainer#unmountImage SidecarContainer.unmountImage()}. */
+type SidecarUnmountImageParams = Record<string, never>;
+/** Optional parameters for {@link SidecarContainer#snapshotDirectory SidecarContainer.snapshotDirectory()}. */
+type SidecarSnapshotDirectoryParams = SandboxSnapshotDirectoryParams;
 /**
  * Creates and manages sidecar containers inside a Sandbox.
  *
@@ -8334,6 +8801,8 @@ declare class SidecarContainer {
     terminate(params: {
         wait: true;
     }): Promise<number>;
+    /** Snapshot this Sidecar container's filesystem into an Image. */
+    snapshotFilesystem(params?: SidecarSnapshotFilesystemParams): Promise<Image>;
     /**
      * Reload all Volumes mounted in this sidecar container.
      *
@@ -8341,6 +8810,39 @@ declare class SidecarContainer {
      * (the reload may still complete in the background).
      */
     reloadVolumes(params?: SidecarReloadVolumesParams): Promise<void>;
+    /**
+     * Mount an {@link Image} at a path in this Sidecar container's filesystem.
+     *
+     * @param path - The path where the directory should be mounted
+     * @param image - Optional {@link Image} to mount. If undefined, mounts an empty directory.
+     * @param params - Optional parameters; see {@link SidecarMountImageParams}.
+     */
+    mountImage(path: string, image?: Image, params?: SidecarMountImageParams): Promise<void>;
+    /**
+     * Unmounts an {@link Image} previously mounted at a path in this Sidecar container's filesystem.
+     *
+     * @param path - The mount path to unmount
+     */
+    unmountImage(path: string, _params?: SidecarUnmountImageParams): Promise<void>;
+    /**
+     * Snapshots and creates a new {@link Image} from a directory in the running Sidecar container.
+     *
+     * The resulting Image is retained for `ttlMs` (default: 30 days),
+     * as a hard cutoff measured from creation — usage does not extend
+     * the lifetime. Pass `ttlMs: null` to retain indefinitely.
+     *
+     * The call has an overall `timeoutMs` budget (default: 55000). If it
+     * elapses before a snapshot completes, the call is cancelled and an
+     * error is thrown.
+     *
+     * The Image can be used anywhere an Image is accepted, including as a mount
+     * or as the base filesystem for another container.
+     *
+     * @param path - The path of the directory to snapshot
+     * @param params - Optional parameters; see {@link SidecarSnapshotDirectoryParams}.
+     * @returns Promise that resolves to an {@link Image}
+     */
+    snapshotDirectory(path: string, params?: SidecarSnapshotDirectoryParams): Promise<Image>;
 }
 
 /**
@@ -8514,7 +9016,9 @@ type SandboxCreateParams = {
     name?: string;
     /** Tags to attach to the Sandbox. Filterable via {@link SandboxService#list client.sandboxes.list}. */
     tags?: Record<string, string>;
-    /** Optional experimental options. */
+    /**
+     * Optional experimental options. Values must be booleans or strings.
+     */
     experimentalOptions?: Record<string, any>;
     /** If set, connections to this Sandbox will be subdomains of this domain rather than the default.
      * This requires prior manual setup by Modal and is only available for Enterprise customers.
@@ -8851,6 +9355,9 @@ declare class Sandbox {
      * Disconnect from the Sandbox, cleaning up local resources.
      * The Sandbox continues running on Modal's infrastructure.
      * After calling detach(), most operations on this Sandbox object will throw.
+     *
+     * This does not block on or interrupt ongoing reads or calls. Connection
+     * resources are closed promptly once those operations finish.
      */
     detach(): void;
     wait(): Promise<number>;
@@ -8887,13 +9394,39 @@ declare class Sandbox {
     /**
      * Get the exit filesystem snapshot image.
      *
+     * An exit snapshot captures the Sandbox filesystem when the Sandbox exits,
+     * whether its entrypoint finishes gracefully, abruptly, or it is stopped with
+     * {@link Sandbox#terminate}. The resulting {@link Image} can be passed to
+     * {@link SandboxService#create client.sandboxes.create()} to start a new
+     * Sandbox from the saved filesystem.
+     *
+     * Exit snapshots are opt-in: the Sandbox must have been created with
+     * `experimentalOptions: { enable_exit_snapshot: true }`. Calling this on a
+     * Sandbox created without that option throws an {@link InvalidError}.
+     *
+     * @example
+     * ```ts
+     * const sb = await modal.sandboxes.create(app, image, {
+     *   experimentalOptions: { enable_exit_snapshot: true },
+     * });
+     * // ... use the Sandbox ...
+     * await sb.terminate();
+     * const image = await sb.experimentalGetExitSnapshot();
+     * const sb2 = await modal.sandboxes.create(app, image);
+     * ```
+     *
      * EXPERIMENTAL: the API is subject to change.
      *
      * @param params - Optional parameters; see SandboxExperimentalGetExitSnapshotParams.
      * @returns The exit snapshot Image.
+     * @throws {InvalidError} If `timeoutMs` is negative, or if exit snapshots
+     *   were not enabled when the Sandbox was created.
      * @throws {TimeoutError} If `timeoutMs` elapses before the snapshot
      *   reaches a terminal state. This includes `timeoutMs = 0` when the
      *   snapshot is still pending.
+     * @throws {SnapshotCreationError} Snapshot operation is done and failed.
+     *   Polling again will not produce an Image; filesystem state is gone.
+     * @throws {NotFoundError} If the Sandbox does not exist.
      */
     experimentalGetExitSnapshot(params?: SandboxExperimentalGetExitSnapshotParams): Promise<Image>;
     /**
@@ -8999,6 +9532,14 @@ declare class ContainerProcess<R extends string | Uint8Array = any> {
 interface ModalClientParams {
     tokenId?: string;
     tokenSecret?: string;
+    /** OAuth refresh token returned by Modal's token endpoint. */
+    oauthRefreshToken?: string;
+    /** Modal-issued OAuth client ID, with an `oc-` prefix. */
+    oauthClientId?: string;
+    /** Modal-issued OAuth client secret, with an `ov-` prefix. */
+    oauthClientSecret?: string;
+    /** Unencrypted RSA private key encoded as PEM, with literal or escaped newlines. */
+    oauthJwtKey?: string;
     environment?: string;
     endpoint?: string;
     timeoutMs?: number;
@@ -9059,8 +9600,10 @@ declare class ModalClient {
     private authTokenManager;
     private customMiddleware;
     private environmentManager;
+    private oauthJwtKey?;
     constructor(params?: ModalClientParams);
     environmentName(environment?: string): string;
+    private validateProfileCredentials;
     /**
      * Returns the image builder version by querying the server where the local profile takes
      * precedence.
@@ -9207,7 +9750,7 @@ declare class SandboxFilesystemPermissionError extends SandboxFilesystemError {
 declare class SandboxTimeoutError extends Error {
     constructor(message?: string);
 }
-/** No snapshot image will be produced for a Sandbox. */
+/** Snapshot operation is done and failed. Polling again will not produce an Image; filesystem state is gone. */
 declare class SnapshotCreationError extends Error {
     constructor(message: string);
 }
@@ -9218,4 +9761,4 @@ declare class ClientClosedError extends Error {
 
 declare function checkForRenamedParams(params: any, renames: Record<string, string>): void;
 
-export { AlreadyExistsError, App, type AppFromNameParams, AppService, ClientClosedError, CloudBucketMount, CloudBucketMountService, Cls, type ClsFromNameParams, ClsInstance, ClsService, type ClsWithBatchingParams, type ClsWithConcurrencyParams, type ClsWithOptionsParams, ConflictError, ContainerProcess, ExecutionError, type FileInfo, type FileType, type FileWatchEvent, type FileWatchEventType, type FunctionAutoscalerSettings, FunctionCall, type FunctionCallCancelParams, type FunctionCallGetParams, type FunctionCallLogFetchParams, type FunctionCallLogStreamParams, type FunctionCallLogTailParams, FunctionCallLogsManager, FunctionCallService, type FunctionFromNameParams, type FunctionLogFetchParams, type FunctionLogStreamParams, type FunctionLogTailParams, FunctionLogsManager, FunctionService, type FunctionStats, FunctionTimeoutError, type FunctionUpdateAutoscalerParams, type FunctionWithBatchingParams, type FunctionWithConcurrencyParams, type FunctionWithOptionsParams, Function_, Image, type ImageDeleteParams, type ImageDockerfileCommandsParams, type ImageFromNameParams, type ImagePublishParams, ImageService, InternalFailure, InvalidError, type LogEntry, type FunctionLogFetchParams as LogFetchParams, type LogLevel, type LogSource, type Logger, ModalClient, type ModalClientParams, type ModalReadStream, type ModalWriteStream, NotFoundError, Probe, type ProbeParams, type Profile, Proxy, type ProxyFromNameParams, ProxyService, Queue, type QueueClearParams, type QueueDeleteParams, QueueEmptyError, type QueueEphemeralParams, type QueueFromNameParams, QueueFullError, type QueueGetParams, type QueueIterateParams, type QueueLenParams, type QueuePutParams, QueueService, RemoteError, Retries, Sandbox, type SandboxCreateConnectCredentials, type SandboxCreateConnectTokenParams, type SandboxCreateParams, type SandboxExecParams, type SandboxExperimentalFromNameParams, type SandboxExperimentalFromSnapshotParams, type SandboxExperimentalGetExitSnapshotParams, type SandboxExperimentalListParams, SandboxFilesystem, SandboxFilesystemDirectoryNotEmptyError, SandboxFilesystemError, SandboxFilesystemFileTooLargeError, SandboxFilesystemIsADirectoryError, SandboxFilesystemNotADirectoryError, SandboxFilesystemNotFoundError, SandboxFilesystemPathAlreadyExistsError, SandboxFilesystemPermissionError, type SandboxFromNameParams, type SandboxListParams, type SandboxMountImageParams, type SandboxReloadVolumesParams, SandboxService, SandboxSnapshot, type SandboxSnapshotDirectoryParams, type SandboxSnapshotFilesystemParams, SandboxSnapshotService, type SandboxTerminateParams, SandboxTimeoutError, type SandboxUpdateNetworkPolicyParams, Secret, type SecretDeleteParams, type SecretFromNameParams, type SecretFromObjectParams, SecretService, SidecarContainer, type SidecarCreateParams, type SidecarExecParams, type SidecarGetParams, type SidecarListParams, SidecarService, type SidecarTerminateParams, SnapshotCreationError, type StdioBehavior, type StreamMode, TimeoutError, Tunnel, Volume, type VolumeDeleteParams, type VolumeEphemeralParams, type VolumeFromNameParams, type VolumeMountOptionsParams, VolumeService, checkForRenamedParams };
+export { AlreadyExistsError, App, type AppFromNameParams, AppService, ClientClosedError, CloudBucketMount, CloudBucketMountService, Cls, type ClsFromNameParams, ClsInstance, ClsService, type ClsWithBatchingParams, type ClsWithConcurrencyParams, type ClsWithOptionsParams, ConflictError, ContainerProcess, ExecutionError, type FileInfo, type FileType, type FileWatchEvent, type FileWatchEventType, type FunctionAutoscalerSettings, FunctionCall, type FunctionCallCancelParams, type FunctionCallGetParams, type FunctionCallLogFetchParams, type FunctionCallLogStreamParams, type FunctionCallLogTailParams, FunctionCallLogsManager, FunctionCallService, type FunctionFromNameParams, type FunctionLogFetchParams, type FunctionLogStreamParams, type FunctionLogTailParams, FunctionLogsManager, FunctionService, type FunctionStats, FunctionTimeoutError, type FunctionUpdateAutoscalerParams, type FunctionWithBatchingParams, type FunctionWithConcurrencyParams, type FunctionWithOptionsParams, Function_, Image, type ImageDeleteParams, type ImageDockerfileCommandsParams, type ImageFromNameParams, type ImagePublishParams, ImageService, InternalFailure, InvalidError, type LogEntry, type FunctionLogFetchParams as LogFetchParams, type LogLevel, type LogSource, type Logger, ModalClient, type ModalClientParams, type ModalReadStream, type ModalWriteStream, NotFoundError, Probe, type ProbeParams, type Profile, Proxy, type ProxyFromNameParams, ProxyService, Queue, type QueueClearParams, type QueueDeleteParams, QueueEmptyError, type QueueEphemeralParams, type QueueFromNameParams, QueueFullError, type QueueGetParams, type QueueIterateParams, type QueueLenParams, type QueuePutParams, QueueService, RemoteError, Retries, Sandbox, type SandboxCreateConnectCredentials, type SandboxCreateConnectTokenParams, type SandboxCreateParams, type SandboxExecParams, type SandboxExperimentalFromNameParams, type SandboxExperimentalFromSnapshotParams, type SandboxExperimentalGetExitSnapshotParams, type SandboxExperimentalListParams, SandboxFilesystem, SandboxFilesystemDirectoryNotEmptyError, SandboxFilesystemError, SandboxFilesystemFileTooLargeError, SandboxFilesystemIsADirectoryError, SandboxFilesystemNotADirectoryError, SandboxFilesystemNotFoundError, SandboxFilesystemPathAlreadyExistsError, SandboxFilesystemPermissionError, type SandboxFromNameParams, type SandboxListParams, type SandboxMountImageParams, type SandboxReloadVolumesParams, SandboxService, SandboxSnapshot, type SandboxSnapshotDirectoryParams, type SandboxSnapshotFilesystemParams, SandboxSnapshotService, type SandboxTerminateParams, SandboxTimeoutError, type SandboxUpdateNetworkPolicyParams, Secret, type SecretDeleteParams, type SecretFromNameParams, type SecretFromObjectParams, SecretService, SidecarContainer, type SidecarCreateParams, type SidecarExecParams, type SidecarGetParams, type SidecarListParams, type SidecarMountImageParams, SidecarService, type SidecarSnapshotDirectoryParams, type SidecarSnapshotFilesystemParams, type SidecarTerminateParams, type SidecarUnmountImageParams, SnapshotCreationError, type StdioBehavior, type StreamMode, TimeoutError, Tunnel, Volume, type VolumeDeleteParams, type VolumeEphemeralParams, type VolumeFromNameParams, type VolumeMountOptionsParams, VolumeService, checkForRenamedParams };