modal 0.10.2-dev.1 → 0.10.2-dev.11

package/dist/index.cjs

@@ -42,6 +42,7 @@ __export(index_exports, {
   ConflictError: () => ConflictError,
   ContainerProcess: () => ContainerProcess2,
   ExecutionError: () => ExecutionError,
+  ExperimentalOutboundPolicy: () => ExperimentalOutboundPolicy,
   FunctionCall: () => FunctionCall,
   FunctionCallLogsManager: () => FunctionCallLogsManager,
   FunctionCallService: () => FunctionCallService,
@@ -63,6 +64,7 @@ __export(index_exports, {
   QueueFullError: () => QueueFullError,
   QueueService: () => QueueService,
   RemoteError: () => RemoteError,
+  ResourceExhaustedError: () => ResourceExhaustedError,
   Retries: () => Retries,
   Sandbox: () => Sandbox2,
   SandboxFilesystem: () => SandboxFilesystem,
@@ -74,6 +76,7 @@ __export(index_exports, {
   SandboxFilesystemNotFoundError: () => SandboxFilesystemNotFoundError,
   SandboxFilesystemPathAlreadyExistsError: () => SandboxFilesystemPathAlreadyExistsError,
   SandboxFilesystemPermissionError: () => SandboxFilesystemPermissionError,
+  SandboxLogsManager: () => SandboxLogsManager,
   SandboxService: () => SandboxService,
   SandboxSnapshot: () => SandboxSnapshot,
   SandboxSnapshotService: () => SandboxSnapshotService,
@@ -2349,6 +2352,76 @@ function fileDescriptorToJSON(object) {
       return "UNRECOGNIZED";
   }
 }
+function functionCallInputStatusFromJSON(object) {
+  switch (object) {
+    case 0:
+    case "FUNCTION_CALL_INPUT_STATUS_UNSPECIFIED":
+      return 0 /* FUNCTION_CALL_INPUT_STATUS_UNSPECIFIED */;
+    case 1:
+    case "FUNCTION_CALL_INPUT_STATUS_PENDING":
+      return 1 /* FUNCTION_CALL_INPUT_STATUS_PENDING */;
+    case 2:
+    case "FUNCTION_CALL_INPUT_STATUS_RUNNING":
+      return 2 /* FUNCTION_CALL_INPUT_STATUS_RUNNING */;
+    case 3:
+    case "FUNCTION_CALL_INPUT_STATUS_SUCCESS":
+      return 3 /* FUNCTION_CALL_INPUT_STATUS_SUCCESS */;
+    case 4:
+    case "FUNCTION_CALL_INPUT_STATUS_FAILURE":
+      return 4 /* FUNCTION_CALL_INPUT_STATUS_FAILURE */;
+    case 5:
+    case "FUNCTION_CALL_INPUT_STATUS_TIMEOUT":
+      return 5 /* FUNCTION_CALL_INPUT_STATUS_TIMEOUT */;
+    case 6:
+    case "FUNCTION_CALL_INPUT_STATUS_TERMINATED":
+      return 6 /* FUNCTION_CALL_INPUT_STATUS_TERMINATED */;
+    case 7:
+    case "FUNCTION_CALL_INPUT_STATUS_INIT_FAILURE":
+      return 7 /* FUNCTION_CALL_INPUT_STATUS_INIT_FAILURE */;
+    case 8:
+    case "FUNCTION_CALL_INPUT_STATUS_INTERNAL_FAILURE":
+      return 8 /* FUNCTION_CALL_INPUT_STATUS_INTERNAL_FAILURE */;
+    case 9:
+    case "FUNCTION_CALL_INPUT_STATUS_IDLE_TIMEOUT":
+      return 9 /* FUNCTION_CALL_INPUT_STATUS_IDLE_TIMEOUT */;
+    case 10:
+    case "FUNCTION_CALL_INPUT_STATUS_MEMORY_MANAGER_EVICTION":
+      return 10 /* FUNCTION_CALL_INPUT_STATUS_MEMORY_MANAGER_EVICTION */;
+    case -1:
+    case "UNRECOGNIZED":
+    default:
+      return -1 /* UNRECOGNIZED */;
+  }
+}
+function functionCallInputStatusToJSON(object) {
+  switch (object) {
+    case 0 /* FUNCTION_CALL_INPUT_STATUS_UNSPECIFIED */:
+      return "FUNCTION_CALL_INPUT_STATUS_UNSPECIFIED";
+    case 1 /* FUNCTION_CALL_INPUT_STATUS_PENDING */:
+      return "FUNCTION_CALL_INPUT_STATUS_PENDING";
+    case 2 /* FUNCTION_CALL_INPUT_STATUS_RUNNING */:
+      return "FUNCTION_CALL_INPUT_STATUS_RUNNING";
+    case 3 /* FUNCTION_CALL_INPUT_STATUS_SUCCESS */:
+      return "FUNCTION_CALL_INPUT_STATUS_SUCCESS";
+    case 4 /* FUNCTION_CALL_INPUT_STATUS_FAILURE */:
+      return "FUNCTION_CALL_INPUT_STATUS_FAILURE";
+    case 5 /* FUNCTION_CALL_INPUT_STATUS_TIMEOUT */:
+      return "FUNCTION_CALL_INPUT_STATUS_TIMEOUT";
+    case 6 /* FUNCTION_CALL_INPUT_STATUS_TERMINATED */:
+      return "FUNCTION_CALL_INPUT_STATUS_TERMINATED";
+    case 7 /* FUNCTION_CALL_INPUT_STATUS_INIT_FAILURE */:
+      return "FUNCTION_CALL_INPUT_STATUS_INIT_FAILURE";
+    case 8 /* FUNCTION_CALL_INPUT_STATUS_INTERNAL_FAILURE */:
+      return "FUNCTION_CALL_INPUT_STATUS_INTERNAL_FAILURE";
+    case 9 /* FUNCTION_CALL_INPUT_STATUS_IDLE_TIMEOUT */:
+      return "FUNCTION_CALL_INPUT_STATUS_IDLE_TIMEOUT";
+    case 10 /* FUNCTION_CALL_INPUT_STATUS_MEMORY_MANAGER_EVICTION */:
+      return "FUNCTION_CALL_INPUT_STATUS_MEMORY_MANAGER_EVICTION";
+    case -1 /* UNRECOGNIZED */:
+    default:
+      return "UNRECOGNIZED";
+  }
+}
 function functionCallInvocationTypeFromJSON(object) {
   switch (object) {
     case 0:
@@ -3610,6 +3683,9 @@ function sandboxGetExitSnapshotResponse_ErrorCodeFromJSON(object) {
     case 2:
     case "ERROR_CODE_INTERNAL":
       return 2 /* ERROR_CODE_INTERNAL */;
+    case 3:
+    case "ERROR_CODE_FILESYSTEM_INCONSISTENT":
+      return 3 /* ERROR_CODE_FILESYSTEM_INCONSISTENT */;
     case -1:
     case "UNRECOGNIZED":
     default:
@@ -3624,6 +3700,8 @@ function sandboxGetExitSnapshotResponse_ErrorCodeToJSON(object) {
       return "ERROR_CODE_TIMEOUT";
     case 2 /* ERROR_CODE_INTERNAL */:
       return "ERROR_CODE_INTERNAL";
+    case 3 /* ERROR_CODE_FILESYSTEM_INCONSISTENT */:
+      return "ERROR_CODE_FILESYSTEM_INCONSISTENT";
     case -1 /* UNRECOGNIZED */:
     default:
       return "UNRECOGNIZED";
@@ -5508,7 +5586,7 @@ var AppGetInfoResponse = {
   }
 };
 function createBaseAppGetInfoResponse_FunctionInfoSummary() {
-  return { gpuConfig: [], schedule: void 0, webFunction: false, requiresProxyAuth: void 0 };
+  return { gpuConfig: [], schedule: void 0, webFunction: false, requiresProxyAuth: void 0, isSessioned: false };
 }
 var AppGetInfoResponse_FunctionInfoSummary = {
   encode(message, writer = new BinaryWriter()) {
@@ -5524,6 +5602,9 @@ var AppGetInfoResponse_FunctionInfoSummary = {
     if (message.requiresProxyAuth !== void 0) {
       writer.uint32(32).bool(message.requiresProxyAuth);
     }
+    if (message.isSessioned !== false) {
+      writer.uint32(40).bool(message.isSessioned);
+    }
     return writer;
   },
   decode(input, length) {
@@ -5561,6 +5642,13 @@ var AppGetInfoResponse_FunctionInfoSummary = {
           message.requiresProxyAuth = reader.bool();
           continue;
         }
+        case 5: {
+          if (tag !== 40) {
+            break;
+          }
+          message.isSessioned = reader.bool();
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -5574,7 +5662,8 @@ var AppGetInfoResponse_FunctionInfoSummary = {
       gpuConfig: globalThis.Array.isArray(object?.gpuConfig) ? object.gpuConfig.map((e) => GPUConfig.fromJSON(e)) : [],
       schedule: isSet5(object.schedule) ? Schedule.fromJSON(object.schedule) : void 0,
       webFunction: isSet5(object.webFunction) ? globalThis.Boolean(object.webFunction) : false,
-      requiresProxyAuth: isSet5(object.requiresProxyAuth) ? globalThis.Boolean(object.requiresProxyAuth) : void 0
+      requiresProxyAuth: isSet5(object.requiresProxyAuth) ? globalThis.Boolean(object.requiresProxyAuth) : void 0,
+      isSessioned: isSet5(object.isSessioned) ? globalThis.Boolean(object.isSessioned) : false
     };
   },
   toJSON(message) {
@@ -5591,6 +5680,9 @@ var AppGetInfoResponse_FunctionInfoSummary = {
     if (message.requiresProxyAuth !== void 0) {
       obj.requiresProxyAuth = message.requiresProxyAuth;
     }
+    if (message.isSessioned !== false) {
+      obj.isSessioned = message.isSessioned;
+    }
     return obj;
   },
   create(base) {
@@ -5602,6 +5694,7 @@ var AppGetInfoResponse_FunctionInfoSummary = {
     message.schedule = object.schedule !== void 0 && object.schedule !== null ? Schedule.fromPartial(object.schedule) : void 0;
     message.webFunction = object.webFunction ?? false;
     message.requiresProxyAuth = object.requiresProxyAuth ?? void 0;
+    message.isSessioned = object.isSessioned ?? false;
     return message;
   }
 };
@@ -17731,7 +17824,8 @@ function createBaseEndpointCreateRequest() {
     inputModalities: [],
     environmentName: "",
     unauthenticated: false,
-    servingMode: 0
+    servingMode: 0,
+    sharedEndpointNoticeAcknowledged: false
   };
 }
 var EndpointCreateRequest = {
@@ -17770,6 +17864,9 @@ var EndpointCreateRequest = {
     if (message.servingMode !== 0) {
       writer.uint32(80).int32(message.servingMode);
     }
+    if (message.sharedEndpointNoticeAcknowledged !== false) {
+      writer.uint32(88).bool(message.sharedEndpointNoticeAcknowledged);
+    }
     return writer;
   },
   decode(input, length) {
@@ -17863,6 +17960,13 @@ var EndpointCreateRequest = {
           message.servingMode = reader.int32();
           continue;
         }
+        case 11: {
+          if (tag !== 88) {
+            break;
+          }
+          message.sharedEndpointNoticeAcknowledged = reader.bool();
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -17882,7 +17986,8 @@ var EndpointCreateRequest = {
       inputModalities: globalThis.Array.isArray(object?.inputModalities) ? object.inputModalities.map((e) => endpointInputModalityFromJSON(e)) : [],
       environmentName: isSet5(object.environmentName) ? globalThis.String(object.environmentName) : "",
       unauthenticated: isSet5(object.unauthenticated) ? globalThis.Boolean(object.unauthenticated) : false,
-      servingMode: isSet5(object.servingMode) ? endpointServingModeFromJSON(object.servingMode) : 0
+      servingMode: isSet5(object.servingMode) ? endpointServingModeFromJSON(object.servingMode) : 0,
+      sharedEndpointNoticeAcknowledged: isSet5(object.sharedEndpointNoticeAcknowledged) ? globalThis.Boolean(object.sharedEndpointNoticeAcknowledged) : false
     };
   },
   toJSON(message) {
@@ -17917,6 +18022,9 @@ var EndpointCreateRequest = {
     if (message.servingMode !== 0) {
       obj.servingMode = endpointServingModeToJSON(message.servingMode);
     }
+    if (message.sharedEndpointNoticeAcknowledged !== false) {
+      obj.sharedEndpointNoticeAcknowledged = message.sharedEndpointNoticeAcknowledged;
+    }
     return obj;
   },
   create(base) {
@@ -17934,6 +18042,7 @@ var EndpointCreateRequest = {
     message.environmentName = object.environmentName ?? "";
     message.unauthenticated = object.unauthenticated ?? false;
     message.servingMode = object.servingMode ?? 0;
+    message.sharedEndpointNoticeAcknowledged = object.sharedEndpointNoticeAcknowledged ?? false;
     return message;
   }
 };
@@ -22492,8 +22601,6 @@ function createBaseFunctionMessage() {
     cloudBucketMounts: [],
     schedulerPlacement: void 0,
     isClass: false,
-    useFunctionId: "",
-    useMethodName: "",
     classParameterInfo: void 0,
     batchMaxSize: 0,
     batchLingerMs: 0,
@@ -22506,7 +22613,6 @@ function createBaseFunctionMessage() {
     ExperimentalFabricSize: 0,
     untrusted: false,
     ExperimentalBufferContainers: 0,
-    ExperimentalProxyIp: void 0,
     runtimePerfRecord: false,
     schedule: void 0,
     snapshotDebug: false,
@@ -22664,12 +22770,6 @@ var FunctionMessage = {
     if (message.isClass !== false) {
       writer.uint32(424).bool(message.isClass);
     }
-    if (message.useFunctionId !== "") {
-      writer.uint32(434).string(message.useFunctionId);
-    }
-    if (message.useMethodName !== "") {
-      writer.uint32(442).string(message.useMethodName);
-    }
     if (message.classParameterInfo !== void 0) {
       ClassParameterInfo.encode(message.classParameterInfo, writer.uint32(450).fork()).join();
     }
@@ -22706,9 +22806,6 @@ var FunctionMessage = {
     if (message.ExperimentalBufferContainers !== 0) {
       writer.uint32(552).uint32(message.ExperimentalBufferContainers);
     }
-    if (message.ExperimentalProxyIp !== void 0) {
-      writer.uint32(562).string(message.ExperimentalProxyIp);
-    }
     if (message.runtimePerfRecord !== false) {
       writer.uint32(568).bool(message.runtimePerfRecord);
     }
@@ -23095,20 +23192,6 @@ var FunctionMessage = {
           message.isClass = reader.bool();
           continue;
         }
-        case 54: {
-          if (tag !== 434) {
-            break;
-          }
-          message.useFunctionId = reader.string();
-          continue;
-        }
-        case 55: {
-          if (tag !== 442) {
-            break;
-          }
-          message.useMethodName = reader.string();
-          continue;
-        }
         case 56: {
           if (tag !== 450) {
             break;
@@ -23193,13 +23276,6 @@ var FunctionMessage = {
           message.ExperimentalBufferContainers = reader.uint32();
           continue;
         }
-        case 70: {
-          if (tag !== 562) {
-            break;
-          }
-          message.ExperimentalProxyIp = reader.string();
-          continue;
-        }
         case 71: {
           if (tag !== 568) {
             break;
@@ -23441,8 +23517,6 @@ var FunctionMessage = {
       cloudBucketMounts: globalThis.Array.isArray(object?.cloudBucketMounts) ? object.cloudBucketMounts.map((e) => CloudBucketMount.fromJSON(e)) : [],
       schedulerPlacement: isSet5(object.schedulerPlacement) ? SchedulerPlacement.fromJSON(object.schedulerPlacement) : void 0,
       isClass: isSet5(object.isClass) ? globalThis.Boolean(object.isClass) : false,
-      useFunctionId: isSet5(object.useFunctionId) ? globalThis.String(object.useFunctionId) : "",
-      useMethodName: isSet5(object.useMethodName) ? globalThis.String(object.useMethodName) : "",
       classParameterInfo: isSet5(object.classParameterInfo) ? ClassParameterInfo.fromJSON(object.classParameterInfo) : void 0,
       batchMaxSize: isSet5(object.batchMaxSize) ? globalThis.Number(object.batchMaxSize) : 0,
       batchLingerMs: isSet5(object.batchLingerMs) ? globalThis.Number(object.batchLingerMs) : 0,
@@ -23455,7 +23529,6 @@ var FunctionMessage = {
       ExperimentalFabricSize: isSet5(object.ExperimentalFabricSize) ? globalThis.Number(object.ExperimentalFabricSize) : 0,
       untrusted: isSet5(object.untrusted) ? globalThis.Boolean(object.untrusted) : false,
       ExperimentalBufferContainers: isSet5(object.ExperimentalBufferContainers) ? globalThis.Number(object.ExperimentalBufferContainers) : 0,
-      ExperimentalProxyIp: isSet5(object.ExperimentalProxyIp) ? globalThis.String(object.ExperimentalProxyIp) : void 0,
       runtimePerfRecord: isSet5(object.runtimePerfRecord) ? globalThis.Boolean(object.runtimePerfRecord) : false,
       schedule: isSet5(object.schedule) ? Schedule.fromJSON(object.schedule) : void 0,
       snapshotDebug: isSet5(object.snapshotDebug) ? globalThis.Boolean(object.snapshotDebug) : false,
@@ -23619,12 +23692,6 @@ var FunctionMessage = {
     if (message.isClass !== false) {
       obj.isClass = message.isClass;
     }
-    if (message.useFunctionId !== "") {
-      obj.useFunctionId = message.useFunctionId;
-    }
-    if (message.useMethodName !== "") {
-      obj.useMethodName = message.useMethodName;
-    }
     if (message.classParameterInfo !== void 0) {
       obj.classParameterInfo = ClassParameterInfo.toJSON(message.classParameterInfo);
     }
@@ -23661,9 +23728,6 @@ var FunctionMessage = {
     if (message.ExperimentalBufferContainers !== 0) {
       obj.ExperimentalBufferContainers = Math.round(message.ExperimentalBufferContainers);
     }
-    if (message.ExperimentalProxyIp !== void 0) {
-      obj.ExperimentalProxyIp = message.ExperimentalProxyIp;
-    }
     if (message.runtimePerfRecord !== false) {
       obj.runtimePerfRecord = message.runtimePerfRecord;
     }
@@ -23798,8 +23862,6 @@ var FunctionMessage = {
     message.cloudBucketMounts = object.cloudBucketMounts?.map((e) => CloudBucketMount.fromPartial(e)) || [];
     message.schedulerPlacement = object.schedulerPlacement !== void 0 && object.schedulerPlacement !== null ? SchedulerPlacement.fromPartial(object.schedulerPlacement) : void 0;
     message.isClass = object.isClass ?? false;
-    message.useFunctionId = object.useFunctionId ?? "";
-    message.useMethodName = object.useMethodName ?? "";
     message.classParameterInfo = object.classParameterInfo !== void 0 && object.classParameterInfo !== null ? ClassParameterInfo.fromPartial(object.classParameterInfo) : void 0;
     message.batchMaxSize = object.batchMaxSize ?? 0;
     message.batchLingerMs = object.batchLingerMs ?? 0;
@@ -23812,7 +23874,6 @@ var FunctionMessage = {
     message.ExperimentalFabricSize = object.ExperimentalFabricSize ?? 0;
     message.untrusted = object.untrusted ?? false;
     message.ExperimentalBufferContainers = object.ExperimentalBufferContainers ?? 0;
-    message.ExperimentalProxyIp = object.ExperimentalProxyIp ?? void 0;
     message.runtimePerfRecord = object.runtimePerfRecord ?? false;
     message.schedule = object.schedule !== void 0 && object.schedule !== null ? Schedule.fromPartial(object.schedule) : void 0;
     message.snapshotDebug = object.snapshotDebug ?? false;
@@ -24508,6 +24569,193 @@ var FunctionCallCancelRequest = {
     return message;
   }
 };
+function createBaseFunctionCallFetchRequest() {
+  return { functionId: "", tail: void 0, allVariants: false };
+}
+var FunctionCallFetchRequest = {
+  encode(message, writer = new BinaryWriter()) {
+    if (message.functionId !== "") {
+      writer.uint32(10).string(message.functionId);
+    }
+    if (message.tail !== void 0) {
+      FunctionCallFetchRequest_Tail.encode(message.tail, writer.uint32(26).fork()).join();
+    }
+    if (message.allVariants !== false) {
+      writer.uint32(32).bool(message.allVariants);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseFunctionCallFetchRequest();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+          message.functionId = reader.string();
+          continue;
+        }
+        case 3: {
+          if (tag !== 26) {
+            break;
+          }
+          message.tail = FunctionCallFetchRequest_Tail.decode(reader, reader.uint32());
+          continue;
+        }
+        case 4: {
+          if (tag !== 32) {
+            break;
+          }
+          message.allVariants = reader.bool();
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return {
+      functionId: isSet5(object.functionId) ? globalThis.String(object.functionId) : "",
+      tail: isSet5(object.tail) ? FunctionCallFetchRequest_Tail.fromJSON(object.tail) : void 0,
+      allVariants: isSet5(object.allVariants) ? globalThis.Boolean(object.allVariants) : false
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.functionId !== "") {
+      obj.functionId = message.functionId;
+    }
+    if (message.tail !== void 0) {
+      obj.tail = FunctionCallFetchRequest_Tail.toJSON(message.tail);
+    }
+    if (message.allVariants !== false) {
+      obj.allVariants = message.allVariants;
+    }
+    return obj;
+  },
+  create(base) {
+    return FunctionCallFetchRequest.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseFunctionCallFetchRequest();
+    message.functionId = object.functionId ?? "";
+    message.tail = object.tail !== void 0 && object.tail !== null ? FunctionCallFetchRequest_Tail.fromPartial(object.tail) : void 0;
+    message.allVariants = object.allVariants ?? false;
+    return message;
+  }
+};
+function createBaseFunctionCallFetchRequest_Tail() {
+  return { count: 0 };
+}
+var FunctionCallFetchRequest_Tail = {
+  encode(message, writer = new BinaryWriter()) {
+    if (message.count !== 0) {
+      writer.uint32(8).uint32(message.count);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseFunctionCallFetchRequest_Tail();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 8) {
+            break;
+          }
+          message.count = reader.uint32();
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return { count: isSet5(object.count) ? globalThis.Number(object.count) : 0 };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.count !== 0) {
+      obj.count = Math.round(message.count);
+    }
+    return obj;
+  },
+  create(base) {
+    return FunctionCallFetchRequest_Tail.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseFunctionCallFetchRequest_Tail();
+    message.count = object.count ?? 0;
+    return message;
+  }
+};
+function createBaseFunctionCallFetchResponse() {
+  return { functionCallInputs: [] };
+}
+var FunctionCallFetchResponse = {
+  encode(message, writer = new BinaryWriter()) {
+    for (const v of message.functionCallInputs) {
+      FunctionCallInputInfo.encode(v, writer.uint32(10).fork()).join();
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseFunctionCallFetchResponse();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+          message.functionCallInputs.push(FunctionCallInputInfo.decode(reader, reader.uint32()));
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return {
+      functionCallInputs: globalThis.Array.isArray(object?.functionCallInputs) ? object.functionCallInputs.map((e) => FunctionCallInputInfo.fromJSON(e)) : []
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.functionCallInputs?.length) {
+      obj.functionCallInputs = message.functionCallInputs.map((e) => FunctionCallInputInfo.toJSON(e));
+    }
+    return obj;
+  },
+  create(base) {
+    return FunctionCallFetchResponse.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseFunctionCallFetchResponse();
+    message.functionCallInputs = object.functionCallInputs?.map((e) => FunctionCallInputInfo.fromPartial(e)) || [];
+    return message;
+  }
+};
 function createBaseFunctionCallFromIdRequest() {
   return { functionCallId: "" };
 }
@@ -25111,6 +25359,173 @@ var FunctionCallInfo = {
     return message;
   }
 };
+function createBaseFunctionCallInputInfo() {
+  return {
+    enqueuedAt: void 0,
+    startedAt: void 0,
+    containerId: void 0,
+    startupTimeSeconds: void 0,
+    executionTimeSeconds: void 0,
+    status: 0,
+    functionCallId: "",
+    serviceMethodName: void 0
+  };
+}
+var FunctionCallInputInfo = {
+  encode(message, writer = new BinaryWriter()) {
+    if (message.enqueuedAt !== void 0) {
+      Timestamp.encode(toTimestamp(message.enqueuedAt), writer.uint32(10).fork()).join();
+    }
+    if (message.startedAt !== void 0) {
+      Timestamp.encode(toTimestamp(message.startedAt), writer.uint32(18).fork()).join();
+    }
+    if (message.containerId !== void 0) {
+      writer.uint32(26).string(message.containerId);
+    }
+    if (message.startupTimeSeconds !== void 0) {
+      writer.uint32(33).double(message.startupTimeSeconds);
+    }
+    if (message.executionTimeSeconds !== void 0) {
+      writer.uint32(41).double(message.executionTimeSeconds);
+    }
+    if (message.status !== 0) {
+      writer.uint32(48).int32(message.status);
+    }
+    if (message.functionCallId !== "") {
+      writer.uint32(58).string(message.functionCallId);
+    }
+    if (message.serviceMethodName !== void 0) {
+      writer.uint32(66).string(message.serviceMethodName);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseFunctionCallInputInfo();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+          message.enqueuedAt = fromTimestamp(Timestamp.decode(reader, reader.uint32()));
+          continue;
+        }
+        case 2: {
+          if (tag !== 18) {
+            break;
+          }
+          message.startedAt = fromTimestamp(Timestamp.decode(reader, reader.uint32()));
+          continue;
+        }
+        case 3: {
+          if (tag !== 26) {
+            break;
+          }
+          message.containerId = reader.string();
+          continue;
+        }
+        case 4: {
+          if (tag !== 33) {
+            break;
+          }
+          message.startupTimeSeconds = reader.double();
+          continue;
+        }
+        case 5: {
+          if (tag !== 41) {
+            break;
+          }
+          message.executionTimeSeconds = reader.double();
+          continue;
+        }
+        case 6: {
+          if (tag !== 48) {
+            break;
+          }
+          message.status = reader.int32();
+          continue;
+        }
+        case 7: {
+          if (tag !== 58) {
+            break;
+          }
+          message.functionCallId = reader.string();
+          continue;
+        }
+        case 8: {
+          if (tag !== 66) {
+            break;
+          }
+          message.serviceMethodName = reader.string();
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return {
+      enqueuedAt: isSet5(object.enqueuedAt) ? fromJsonTimestamp(object.enqueuedAt) : void 0,
+      startedAt: isSet5(object.startedAt) ? fromJsonTimestamp(object.startedAt) : void 0,
+      containerId: isSet5(object.containerId) ? globalThis.String(object.containerId) : void 0,
+      startupTimeSeconds: isSet5(object.startupTimeSeconds) ? globalThis.Number(object.startupTimeSeconds) : void 0,
+      executionTimeSeconds: isSet5(object.executionTimeSeconds) ? globalThis.Number(object.executionTimeSeconds) : void 0,
+      status: isSet5(object.status) ? functionCallInputStatusFromJSON(object.status) : 0,
+      functionCallId: isSet5(object.functionCallId) ? globalThis.String(object.functionCallId) : "",
+      serviceMethodName: isSet5(object.serviceMethodName) ? globalThis.String(object.serviceMethodName) : void 0
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.enqueuedAt !== void 0) {
+      obj.enqueuedAt = message.enqueuedAt.toISOString();
+    }
+    if (message.startedAt !== void 0) {
+      obj.startedAt = message.startedAt.toISOString();
+    }
+    if (message.containerId !== void 0) {
+      obj.containerId = message.containerId;
+    }
+    if (message.startupTimeSeconds !== void 0) {
+      obj.startupTimeSeconds = message.startupTimeSeconds;
+    }
+    if (message.executionTimeSeconds !== void 0) {
+      obj.executionTimeSeconds = message.executionTimeSeconds;
+    }
+    if (message.status !== 0) {
+      obj.status = functionCallInputStatusToJSON(message.status);
+    }
+    if (message.functionCallId !== "") {
+      obj.functionCallId = message.functionCallId;
+    }
+    if (message.serviceMethodName !== void 0) {
+      obj.serviceMethodName = message.serviceMethodName;
+    }
+    return obj;
+  },
+  create(base) {
+    return FunctionCallInputInfo.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseFunctionCallInputInfo();
+    message.enqueuedAt = object.enqueuedAt ?? void 0;
+    message.startedAt = object.startedAt ?? void 0;
+    message.containerId = object.containerId ?? void 0;
+    message.startupTimeSeconds = object.startupTimeSeconds ?? void 0;
+    message.executionTimeSeconds = object.executionTimeSeconds ?? void 0;
+    message.status = object.status ?? 0;
+    message.functionCallId = object.functionCallId ?? "";
+    message.serviceMethodName = object.serviceMethodName ?? void 0;
+    return message;
+  }
+};
 function createBaseFunctionCallListRequest() {
   return { functionId: "" };
 }
@@ -25565,14 +25980,11 @@ function createBaseFunctionData() {
     webUrlInfo: void 0,
     webhookConfig: void 0,
     customDomainInfo: [],
-    ExperimentalProxyIp: void 0,
     methodDefinitions: {},
     methodDefinitionsSet: false,
     isClass: false,
     classParameterInfo: void 0,
     isMethod: false,
-    useFunctionId: "",
-    useMethodName: "",
     rankedFunctions: [],
     schedule: void 0,
     untrusted: false,
@@ -25646,9 +26058,6 @@ var FunctionData = {
     for (const v of message.customDomainInfo) {
       CustomDomainInfo.encode(v, writer.uint32(98).fork()).join();
     }
-    if (message.ExperimentalProxyIp !== void 0) {
-      writer.uint32(194).string(message.ExperimentalProxyIp);
-    }
     Object.entries(message.methodDefinitions).forEach(([key, value]) => {
       FunctionData_MethodDefinitionsEntry.encode({ key, value }, writer.uint32(202).fork()).join();
     });
@@ -25664,12 +26073,6 @@ var FunctionData = {
     if (message.isMethod !== false) {
       writer.uint32(120).bool(message.isMethod);
     }
-    if (message.useFunctionId !== "") {
-      writer.uint32(130).string(message.useFunctionId);
-    }
-    if (message.useMethodName !== "") {
-      writer.uint32(138).string(message.useMethodName);
-    }
     for (const v of message.rankedFunctions) {
       FunctionData_RankedFunction.encode(v, writer.uint32(146).fork()).join();
     }
@@ -25856,13 +26259,6 @@ var FunctionData = {
           message.customDomainInfo.push(CustomDomainInfo.decode(reader, reader.uint32()));
           continue;
         }
-        case 24: {
-          if (tag !== 194) {
-            break;
-          }
-          message.ExperimentalProxyIp = reader.string();
-          continue;
-        }
         case 25: {
           if (tag !== 202) {
             break;
@@ -25901,20 +26297,6 @@ var FunctionData = {
           message.isMethod = reader.bool();
           continue;
         }
-        case 16: {
-          if (tag !== 130) {
-            break;
-          }
-          message.useFunctionId = reader.string();
-          continue;
-        }
-        case 17: {
-          if (tag !== 138) {
-            break;
-          }
-          message.useMethodName = reader.string();
-          continue;
-        }
         case 18: {
           if (tag !== 146) {
             break;
@@ -26085,7 +26467,6 @@ var FunctionData = {
       webUrlInfo: isSet5(object.webUrlInfo) ? WebUrlInfo.fromJSON(object.webUrlInfo) : void 0,
       webhookConfig: isSet5(object.webhookConfig) ? WebhookConfig.fromJSON(object.webhookConfig) : void 0,
       customDomainInfo: globalThis.Array.isArray(object?.customDomainInfo) ? object.customDomainInfo.map((e) => CustomDomainInfo.fromJSON(e)) : [],
-      ExperimentalProxyIp: isSet5(object.ExperimentalProxyIp) ? globalThis.String(object.ExperimentalProxyIp) : void 0,
       methodDefinitions: isObject2(object.methodDefinitions) ? Object.entries(object.methodDefinitions).reduce((acc, [key, value]) => {
         acc[key] = MethodDefinition.fromJSON(value);
         return acc;
@@ -26094,8 +26475,6 @@ var FunctionData = {
       isClass: isSet5(object.isClass) ? globalThis.Boolean(object.isClass) : false,
       classParameterInfo: isSet5(object.classParameterInfo) ? ClassParameterInfo.fromJSON(object.classParameterInfo) : void 0,
       isMethod: isSet5(object.isMethod) ? globalThis.Boolean(object.isMethod) : false,
-      useFunctionId: isSet5(object.useFunctionId) ? globalThis.String(object.useFunctionId) : "",
-      useMethodName: isSet5(object.useMethodName) ? globalThis.String(object.useMethodName) : "",
       rankedFunctions: globalThis.Array.isArray(object?.rankedFunctions) ? object.rankedFunctions.map((e) => FunctionData_RankedFunction.fromJSON(e)) : [],
       schedule: isSet5(object.schedule) ? Schedule.fromJSON(object.schedule) : void 0,
       untrusted: isSet5(object.untrusted) ? globalThis.Boolean(object.untrusted) : false,
@@ -26172,9 +26551,6 @@ var FunctionData = {
     if (message.customDomainInfo?.length) {
       obj.customDomainInfo = message.customDomainInfo.map((e) => CustomDomainInfo.toJSON(e));
     }
-    if (message.ExperimentalProxyIp !== void 0) {
-      obj.ExperimentalProxyIp = message.ExperimentalProxyIp;
-    }
     if (message.methodDefinitions) {
       const entries = Object.entries(message.methodDefinitions);
       if (entries.length > 0) {
@@ -26196,12 +26572,6 @@ var FunctionData = {
     if (message.isMethod !== false) {
       obj.isMethod = message.isMethod;
     }
-    if (message.useFunctionId !== "") {
-      obj.useFunctionId = message.useFunctionId;
-    }
-    if (message.useMethodName !== "") {
-      obj.useMethodName = message.useMethodName;
-    }
     if (message.rankedFunctions?.length) {
       obj.rankedFunctions = message.rankedFunctions.map((e) => FunctionData_RankedFunction.toJSON(e));
     }
@@ -26286,7 +26656,6 @@ var FunctionData = {
     message.webUrlInfo = object.webUrlInfo !== void 0 && object.webUrlInfo !== null ? WebUrlInfo.fromPartial(object.webUrlInfo) : void 0;
     message.webhookConfig = object.webhookConfig !== void 0 && object.webhookConfig !== null ? WebhookConfig.fromPartial(object.webhookConfig) : void 0;
     message.customDomainInfo = object.customDomainInfo?.map((e) => CustomDomainInfo.fromPartial(e)) || [];
-    message.ExperimentalProxyIp = object.ExperimentalProxyIp ?? void 0;
     message.methodDefinitions = Object.entries(object.methodDefinitions ?? {}).reduce((acc, [key, value]) => {
       if (value !== void 0) {
         acc[key] = MethodDefinition.fromPartial(value);
@@ -26297,8 +26666,6 @@ var FunctionData = {
     message.isClass = object.isClass ?? false;
     message.classParameterInfo = object.classParameterInfo !== void 0 && object.classParameterInfo !== null ? ClassParameterInfo.fromPartial(object.classParameterInfo) : void 0;
     message.isMethod = object.isMethod ?? false;
-    message.useFunctionId = object.useFunctionId ?? "";
-    message.useMethodName = object.useMethodName ?? "";
     message.rankedFunctions = object.rankedFunctions?.map((e) => FunctionData_RankedFunction.fromPartial(e)) || [];
     message.schedule = object.schedule !== void 0 && object.schedule !== null ? Schedule.fromPartial(object.schedule) : void 0;
     message.untrusted = object.untrusted ?? false;
@@ -28931,7 +29298,6 @@ function createBaseFunctionHandleMetadata() {
     functionType: 0,
     webUrl: "",
     isMethod: false,
-    useFunctionId: "",
     useMethodName: "",
     definitionId: "",
     classParameterInfo: void 0,
@@ -28962,9 +29328,6 @@ var FunctionHandleMetadata = {
     if (message.isMethod !== false) {
       writer.uint32(312).bool(message.isMethod);
     }
-    if (message.useFunctionId !== "") {
-      writer.uint32(322).string(message.useFunctionId);
-    }
     if (message.useMethodName !== "") {
       writer.uint32(330).string(message.useMethodName);
     }
@@ -29048,13 +29411,6 @@ var FunctionHandleMetadata = {
           message.isMethod = reader.bool();
           continue;
         }
-        case 40: {
-          if (tag !== 322) {
-            break;
-          }
-          message.useFunctionId = reader.string();
-          continue;
-        }
         case 41: {
           if (tag !== 330) {
             break;
@@ -29184,7 +29540,6 @@ var FunctionHandleMetadata = {
       functionType: isSet5(object.functionType) ? function_FunctionTypeFromJSON(object.functionType) : 0,
       webUrl: isSet5(object.webUrl) ? globalThis.String(object.webUrl) : "",
       isMethod: isSet5(object.isMethod) ? globalThis.Boolean(object.isMethod) : false,
-      useFunctionId: isSet5(object.useFunctionId) ? globalThis.String(object.useFunctionId) : "",
       useMethodName: isSet5(object.useMethodName) ? globalThis.String(object.useMethodName) : "",
       definitionId: isSet5(object.definitionId) ? globalThis.String(object.definitionId) : "",
       classParameterInfo: isSet5(object.classParameterInfo) ? ClassParameterInfo.fromJSON(object.classParameterInfo) : void 0,
@@ -29221,9 +29576,6 @@ var FunctionHandleMetadata = {
     if (message.isMethod !== false) {
       obj.isMethod = message.isMethod;
     }
-    if (message.useFunctionId !== "") {
-      obj.useFunctionId = message.useFunctionId;
-    }
     if (message.useMethodName !== "") {
       obj.useMethodName = message.useMethodName;
     }
@@ -29283,7 +29635,6 @@ var FunctionHandleMetadata = {
     message.functionType = object.functionType ?? 0;
     message.webUrl = object.webUrl ?? "";
     message.isMethod = object.isMethod ?? false;
-    message.useFunctionId = object.useFunctionId ?? "";
     message.useMethodName = object.useMethodName ?? "";
     message.definitionId = object.definitionId ?? "";
     message.classParameterInfo = object.classParameterInfo !== void 0 && object.classParameterInfo !== null ? ClassParameterInfo.fromPartial(object.classParameterInfo) : void 0;
@@ -29487,6 +29838,172 @@ var FunctionInput = {
     return message;
   }
 };
+function createBaseFunctionListVariantsRequest() {
+  return { functionId: "", cursor: void 0, limit: 0 };
+}
+var FunctionListVariantsRequest = {
+  encode(message, writer = new BinaryWriter()) {
+    if (message.functionId !== "") {
+      writer.uint32(10).string(message.functionId);
+    }
+    if (message.cursor !== void 0) {
+      FunctionVariantCursor.encode(message.cursor, writer.uint32(18).fork()).join();
+    }
+    if (message.limit !== 0) {
+      writer.uint32(24).uint32(message.limit);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseFunctionListVariantsRequest();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+          message.functionId = reader.string();
+          continue;
+        }
+        case 2: {
+          if (tag !== 18) {
+            break;
+          }
+          message.cursor = FunctionVariantCursor.decode(reader, reader.uint32());
+          continue;
+        }
+        case 3: {
+          if (tag !== 24) {
+            break;
+          }
+          message.limit = reader.uint32();
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return {
+      functionId: isSet5(object.functionId) ? globalThis.String(object.functionId) : "",
+      cursor: isSet5(object.cursor) ? FunctionVariantCursor.fromJSON(object.cursor) : void 0,
+      limit: isSet5(object.limit) ? globalThis.Number(object.limit) : 0
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.functionId !== "") {
+      obj.functionId = message.functionId;
+    }
+    if (message.cursor !== void 0) {
+      obj.cursor = FunctionVariantCursor.toJSON(message.cursor);
+    }
+    if (message.limit !== 0) {
+      obj.limit = Math.round(message.limit);
+    }
+    return obj;
+  },
+  create(base) {
+    return FunctionListVariantsRequest.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseFunctionListVariantsRequest();
+    message.functionId = object.functionId ?? "";
+    message.cursor = object.cursor !== void 0 && object.cursor !== null ? FunctionVariantCursor.fromPartial(object.cursor) : void 0;
+    message.limit = object.limit ?? 0;
+    return message;
+  }
+};
+function createBaseFunctionListVariantsResponse() {
+  return { infos: [], nextCursor: void 0, orderedByTaskCount: false };
+}
+var FunctionListVariantsResponse = {
+  encode(message, writer = new BinaryWriter()) {
+    for (const v of message.infos) {
+      FunctionVariantInfo.encode(v, writer.uint32(10).fork()).join();
+    }
+    if (message.nextCursor !== void 0) {
+      FunctionVariantCursor.encode(message.nextCursor, writer.uint32(18).fork()).join();
+    }
+    if (message.orderedByTaskCount !== false) {
+      writer.uint32(24).bool(message.orderedByTaskCount);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseFunctionListVariantsResponse();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+          message.infos.push(FunctionVariantInfo.decode(reader, reader.uint32()));
+          continue;
+        }
+        case 2: {
+          if (tag !== 18) {
+            break;
+          }
+          message.nextCursor = FunctionVariantCursor.decode(reader, reader.uint32());
+          continue;
+        }
+        case 3: {
+          if (tag !== 24) {
+            break;
+          }
+          message.orderedByTaskCount = reader.bool();
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return {
+      infos: globalThis.Array.isArray(object?.infos) ? object.infos.map((e) => FunctionVariantInfo.fromJSON(e)) : [],
+      nextCursor: isSet5(object.nextCursor) ? FunctionVariantCursor.fromJSON(object.nextCursor) : void 0,
+      orderedByTaskCount: isSet5(object.orderedByTaskCount) ? globalThis.Boolean(object.orderedByTaskCount) : false
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.infos?.length) {
+      obj.infos = message.infos.map((e) => FunctionVariantInfo.toJSON(e));
+    }
+    if (message.nextCursor !== void 0) {
+      obj.nextCursor = FunctionVariantCursor.toJSON(message.nextCursor);
+    }
+    if (message.orderedByTaskCount !== false) {
+      obj.orderedByTaskCount = message.orderedByTaskCount;
+    }
+    return obj;
+  },
+  create(base) {
+    return FunctionListVariantsResponse.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseFunctionListVariantsResponse();
+    message.infos = object.infos?.map((e) => FunctionVariantInfo.fromPartial(e)) || [];
+    message.nextCursor = object.nextCursor !== void 0 && object.nextCursor !== null ? FunctionVariantCursor.fromPartial(object.nextCursor) : void 0;
+    message.orderedByTaskCount = object.orderedByTaskCount ?? false;
+    return message;
+  }
+};
 function createBaseFunctionMapRequest() {
   return {
     functionId: "",
@@ -30171,8 +30688,6 @@ function createBaseFunctionPrecreateRequest() {
     existingFunctionId: "",
     functionType: 0,
     webhookConfig: void 0,
-    useFunctionId: "",
-    useMethodName: "",
     methodDefinitions: {},
     functionSchema: void 0,
     supportedInputFormats: [],
@@ -30196,12 +30711,6 @@ var FunctionPrecreateRequest = {
     if (message.webhookConfig !== void 0) {
       WebhookConfig.encode(message.webhookConfig, writer.uint32(42).fork()).join();
     }
-    if (message.useFunctionId !== "") {
-      writer.uint32(50).string(message.useFunctionId);
-    }
-    if (message.useMethodName !== "") {
-      writer.uint32(58).string(message.useMethodName);
-    }
     Object.entries(message.methodDefinitions).forEach(([key, value]) => {
       FunctionPrecreateRequest_MethodDefinitionsEntry.encode({ key, value }, writer.uint32(66).fork()).join();
     });
@@ -30262,20 +30771,6 @@ var FunctionPrecreateRequest = {
           message.webhookConfig = WebhookConfig.decode(reader, reader.uint32());
           continue;
         }
-        case 6: {
-          if (tag !== 50) {
-            break;
-          }
-          message.useFunctionId = reader.string();
-          continue;
-        }
-        case 7: {
-          if (tag !== 58) {
-            break;
-          }
-          message.useMethodName = reader.string();
-          continue;
-        }
         case 8: {
           if (tag !== 66) {
             break;
@@ -30336,8 +30831,6 @@ var FunctionPrecreateRequest = {
       existingFunctionId: isSet5(object.existingFunctionId) ? globalThis.String(object.existingFunctionId) : "",
       functionType: isSet5(object.functionType) ? function_FunctionTypeFromJSON(object.functionType) : 0,
       webhookConfig: isSet5(object.webhookConfig) ? WebhookConfig.fromJSON(object.webhookConfig) : void 0,
-      useFunctionId: isSet5(object.useFunctionId) ? globalThis.String(object.useFunctionId) : "",
-      useMethodName: isSet5(object.useMethodName) ? globalThis.String(object.useMethodName) : "",
       methodDefinitions: isObject2(object.methodDefinitions) ? Object.entries(object.methodDefinitions).reduce((acc, [key, value]) => {
         acc[key] = MethodDefinition.fromJSON(value);
         return acc;
@@ -30364,12 +30857,6 @@ var FunctionPrecreateRequest = {
     if (message.webhookConfig !== void 0) {
       obj.webhookConfig = WebhookConfig.toJSON(message.webhookConfig);
     }
-    if (message.useFunctionId !== "") {
-      obj.useFunctionId = message.useFunctionId;
-    }
-    if (message.useMethodName !== "") {
-      obj.useMethodName = message.useMethodName;
-    }
     if (message.methodDefinitions) {
       const entries = Object.entries(message.methodDefinitions);
       if (entries.length > 0) {
@@ -30400,8 +30887,6 @@ var FunctionPrecreateRequest = {
     message.existingFunctionId = object.existingFunctionId ?? "";
     message.functionType = object.functionType ?? 0;
     message.webhookConfig = object.webhookConfig !== void 0 && object.webhookConfig !== null ? WebhookConfig.fromPartial(object.webhookConfig) : void 0;
-    message.useFunctionId = object.useFunctionId ?? "";
-    message.useMethodName = object.useMethodName ?? "";
     message.methodDefinitions = Object.entries(object.methodDefinitions ?? {}).reduce((acc, [key, value]) => {
       if (value !== void 0) {
         acc[key] = MethodDefinition.fromPartial(value);
@@ -31752,6 +32237,157 @@ var FunctionUpdateSchedulingParamsResponse = {
     return message;
   }
 };
+function createBaseFunctionVariantCursor() {
+  return { createdBefore: 0, functionId: "" };
+}
+var FunctionVariantCursor = {
+  encode(message, writer = new BinaryWriter()) {
+    if (message.createdBefore !== 0) {
+      writer.uint32(9).double(message.createdBefore);
+    }
+    if (message.functionId !== "") {
+      writer.uint32(18).string(message.functionId);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseFunctionVariantCursor();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 9) {
+            break;
+          }
+          message.createdBefore = reader.double();
+          continue;
+        }
+        case 2: {
+          if (tag !== 18) {
+            break;
+          }
+          message.functionId = reader.string();
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return {
+      createdBefore: isSet5(object.createdBefore) ? globalThis.Number(object.createdBefore) : 0,
+      functionId: isSet5(object.functionId) ? globalThis.String(object.functionId) : ""
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.createdBefore !== 0) {
+      obj.createdBefore = message.createdBefore;
+    }
+    if (message.functionId !== "") {
+      obj.functionId = message.functionId;
+    }
+    return obj;
+  },
+  create(base) {
+    return FunctionVariantCursor.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseFunctionVariantCursor();
+    message.createdBefore = object.createdBefore ?? 0;
+    message.functionId = object.functionId ?? "";
+    return message;
+  }
+};
+function createBaseFunctionVariantInfo() {
+  return { functionId: "", serializedParams: new Uint8Array(0), functionOptions: void 0 };
+}
+var FunctionVariantInfo = {
+  encode(message, writer = new BinaryWriter()) {
+    if (message.functionId !== "") {
+      writer.uint32(10).string(message.functionId);
+    }
+    if (message.serializedParams.length !== 0) {
+      writer.uint32(18).bytes(message.serializedParams);
+    }
+    if (message.functionOptions !== void 0) {
+      FunctionOptions.encode(message.functionOptions, writer.uint32(26).fork()).join();
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseFunctionVariantInfo();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+          message.functionId = reader.string();
+          continue;
+        }
+        case 2: {
+          if (tag !== 18) {
+            break;
+          }
+          message.serializedParams = reader.bytes();
+          continue;
+        }
+        case 3: {
+          if (tag !== 26) {
+            break;
+          }
+          message.functionOptions = FunctionOptions.decode(reader, reader.uint32());
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return {
+      functionId: isSet5(object.functionId) ? globalThis.String(object.functionId) : "",
+      serializedParams: isSet5(object.serializedParams) ? bytesFromBase642(object.serializedParams) : new Uint8Array(0),
+      functionOptions: isSet5(object.functionOptions) ? FunctionOptions.fromJSON(object.functionOptions) : void 0
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.functionId !== "") {
+      obj.functionId = message.functionId;
+    }
+    if (message.serializedParams.length !== 0) {
+      obj.serializedParams = base64FromBytes2(message.serializedParams);
+    }
+    if (message.functionOptions !== void 0) {
+      obj.functionOptions = FunctionOptions.toJSON(message.functionOptions);
+    }
+    return obj;
+  },
+  create(base) {
+    return FunctionVariantInfo.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseFunctionVariantInfo();
+    message.functionId = object.functionId ?? "";
+    message.serializedParams = object.serializedParams ?? new Uint8Array(0);
+    message.functionOptions = object.functionOptions !== void 0 && object.functionOptions !== null ? FunctionOptions.fromPartial(object.functionOptions) : void 0;
+    return message;
+  }
+};
 function createBaseGPUConfig() {
   return { type: 0, count: 0, gpuType: "" };
 }
@@ -32145,7 +32781,8 @@ function createBaseHTTPConfig() {
     exitGracePeriod: 0,
     h2Enabled: false,
     targetConcurrency: 0,
-    unauthenticated: false
+    unauthenticated: false,
+    liftAndShiftConfig: void 0
   };
 }
 var HTTPConfig = {
@@ -32171,6 +32808,9 @@ var HTTPConfig = {
     if (message.unauthenticated !== false) {
       writer.uint32(56).bool(message.unauthenticated);
     }
+    if (message.liftAndShiftConfig !== void 0) {
+      LiftAndShiftConfig.encode(message.liftAndShiftConfig, writer.uint32(66).fork()).join();
+    }
     return writer;
   },
   decode(input, length) {
@@ -32229,6 +32869,13 @@ var HTTPConfig = {
           message.unauthenticated = reader.bool();
           continue;
         }
+        case 8: {
+          if (tag !== 66) {
+            break;
+          }
+          message.liftAndShiftConfig = LiftAndShiftConfig.decode(reader, reader.uint32());
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -32245,7 +32892,8 @@ var HTTPConfig = {
       exitGracePeriod: isSet5(object.exitGracePeriod) ? globalThis.Number(object.exitGracePeriod) : 0,
       h2Enabled: isSet5(object.h2Enabled) ? globalThis.Boolean(object.h2Enabled) : false,
       targetConcurrency: isSet5(object.targetConcurrency) ? globalThis.Number(object.targetConcurrency) : 0,
-      unauthenticated: isSet5(object.unauthenticated) ? globalThis.Boolean(object.unauthenticated) : false
+      unauthenticated: isSet5(object.unauthenticated) ? globalThis.Boolean(object.unauthenticated) : false,
+      liftAndShiftConfig: isSet5(object.liftAndShiftConfig) ? LiftAndShiftConfig.fromJSON(object.liftAndShiftConfig) : void 0
     };
   },
   toJSON(message) {
@@ -32271,6 +32919,9 @@ var HTTPConfig = {
     if (message.unauthenticated !== false) {
       obj.unauthenticated = message.unauthenticated;
     }
+    if (message.liftAndShiftConfig !== void 0) {
+      obj.liftAndShiftConfig = LiftAndShiftConfig.toJSON(message.liftAndShiftConfig);
+    }
     return obj;
   },
   create(base) {
@@ -32285,6 +32936,7 @@ var HTTPConfig = {
     message.h2Enabled = object.h2Enabled ?? false;
     message.targetConcurrency = object.targetConcurrency ?? 0;
     message.unauthenticated = object.unauthenticated ?? false;
+    message.liftAndShiftConfig = object.liftAndShiftConfig !== void 0 && object.liftAndShiftConfig !== null ? LiftAndShiftConfig.fromPartial(object.liftAndShiftConfig) : void 0;
     return message;
   }
 };
@@ -35060,6 +35712,43 @@ var InputInfo = {
     return message;
   }
 };
+function createBaseLiftAndShiftConfig() {
+  return {};
+}
+var LiftAndShiftConfig = {
+  encode(_, writer = new BinaryWriter()) {
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseLiftAndShiftConfig();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(_) {
+    return {};
+  },
+  toJSON(_) {
+    const obj = {};
+    return obj;
+  },
+  create(base) {
+    return LiftAndShiftConfig.fromPartial(base ?? {});
+  },
+  fromPartial(_) {
+    const message = createBaseLiftAndShiftConfig();
+    return message;
+  }
+};
 function createBaseListPagination() {
   return { maxObjects: 0, createdBefore: 0 };
 }
@@ -47363,6 +48052,108 @@ var SecretDeleteRequest = {
     return message;
   }
 };
+function createBaseSecretGetInfoRequest() {
+  return { secretId: "" };
+}
+var SecretGetInfoRequest = {
+  encode(message, writer = new BinaryWriter()) {
+    if (message.secretId !== "") {
+      writer.uint32(10).string(message.secretId);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseSecretGetInfoRequest();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+          message.secretId = reader.string();
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return { secretId: isSet5(object.secretId) ? globalThis.String(object.secretId) : "" };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.secretId !== "") {
+      obj.secretId = message.secretId;
+    }
+    return obj;
+  },
+  create(base) {
+    return SecretGetInfoRequest.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseSecretGetInfoRequest();
+    message.secretId = object.secretId ?? "";
+    return message;
+  }
+};
+function createBaseSecretGetInfoResponse() {
+  return { metadata: void 0 };
+}
+var SecretGetInfoResponse = {
+  encode(message, writer = new BinaryWriter()) {
+    if (message.metadata !== void 0) {
+      SecretMetadata.encode(message.metadata, writer.uint32(10).fork()).join();
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseSecretGetInfoResponse();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+          message.metadata = SecretMetadata.decode(reader, reader.uint32());
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return { metadata: isSet5(object.metadata) ? SecretMetadata.fromJSON(object.metadata) : void 0 };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.metadata !== void 0) {
+      obj.metadata = SecretMetadata.toJSON(message.metadata);
+    }
+    return obj;
+  },
+  create(base) {
+    return SecretGetInfoResponse.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseSecretGetInfoResponse();
+    message.metadata = object.metadata !== void 0 && object.metadata !== null ? SecretMetadata.fromPartial(object.metadata) : void 0;
+    return message;
+  }
+};
 function createBaseSecretGetOrCreateRequest() {
   return { deploymentName: "", environmentName: "", objectCreationType: 0, envDict: {}, appId: "", requiredKeys: [] };
 }
@@ -47909,7 +48700,7 @@ var SecretListResponse = {
   }
 };
 function createBaseSecretMetadata() {
-  return { name: "", creationInfo: void 0 };
+  return { name: "", creationInfo: void 0, keys: [], environmentName: "" };
 }
 var SecretMetadata = {
   encode(message, writer = new BinaryWriter()) {
@@ -47919,6 +48710,12 @@ var SecretMetadata = {
     if (message.creationInfo !== void 0) {
       CreationInfo.encode(message.creationInfo, writer.uint32(18).fork()).join();
     }
+    for (const v of message.keys) {
+      writer.uint32(26).string(v);
+    }
+    if (message.environmentName !== "") {
+      writer.uint32(34).string(message.environmentName);
+    }
     return writer;
   },
   decode(input, length) {
@@ -47942,6 +48739,20 @@ var SecretMetadata = {
           message.creationInfo = CreationInfo.decode(reader, reader.uint32());
           continue;
         }
+        case 3: {
+          if (tag !== 26) {
+            break;
+          }
+          message.keys.push(reader.string());
+          continue;
+        }
+        case 4: {
+          if (tag !== 34) {
+            break;
+          }
+          message.environmentName = reader.string();
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -47953,7 +48764,9 @@ var SecretMetadata = {
   fromJSON(object) {
     return {
       name: isSet5(object.name) ? globalThis.String(object.name) : "",
-      creationInfo: isSet5(object.creationInfo) ? CreationInfo.fromJSON(object.creationInfo) : void 0
+      creationInfo: isSet5(object.creationInfo) ? CreationInfo.fromJSON(object.creationInfo) : void 0,
+      keys: globalThis.Array.isArray(object?.keys) ? object.keys.map((e) => globalThis.String(e)) : [],
+      environmentName: isSet5(object.environmentName) ? globalThis.String(object.environmentName) : ""
     };
   },
   toJSON(message) {
@@ -47964,6 +48777,12 @@ var SecretMetadata = {
     if (message.creationInfo !== void 0) {
       obj.creationInfo = CreationInfo.toJSON(message.creationInfo);
     }
+    if (message.keys?.length) {
+      obj.keys = message.keys;
+    }
+    if (message.environmentName !== "") {
+      obj.environmentName = message.environmentName;
+    }
     return obj;
   },
   create(base) {
@@ -47973,6 +48792,8 @@ var SecretMetadata = {
     const message = createBaseSecretMetadata();
     message.name = object.name ?? "";
     message.creationInfo = object.creationInfo !== void 0 && object.creationInfo !== null ? CreationInfo.fromPartial(object.creationInfo) : void 0;
+    message.keys = object.keys?.map((e) => e) || [];
+    message.environmentName = object.environmentName ?? "";
     return message;
   }
 };
@@ -48969,6 +49790,291 @@ var ServerGetTimeRangeStatsResponse_ContainerPercentileStatsEntry = {
     return message;
   }
 };
+function createBaseServerRequestFetchRequest() {
+  return { functionId: "", tail: void 0 };
+}
+var ServerRequestFetchRequest = {
+  encode(message, writer = new BinaryWriter()) {
+    if (message.functionId !== "") {
+      writer.uint32(10).string(message.functionId);
+    }
+    if (message.tail !== void 0) {
+      ServerRequestFetchRequest_Tail.encode(message.tail, writer.uint32(26).fork()).join();
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseServerRequestFetchRequest();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+          message.functionId = reader.string();
+          continue;
+        }
+        case 3: {
+          if (tag !== 26) {
+            break;
+          }
+          message.tail = ServerRequestFetchRequest_Tail.decode(reader, reader.uint32());
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return {
+      functionId: isSet5(object.functionId) ? globalThis.String(object.functionId) : "",
+      tail: isSet5(object.tail) ? ServerRequestFetchRequest_Tail.fromJSON(object.tail) : void 0
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.functionId !== "") {
+      obj.functionId = message.functionId;
+    }
+    if (message.tail !== void 0) {
+      obj.tail = ServerRequestFetchRequest_Tail.toJSON(message.tail);
+    }
+    return obj;
+  },
+  create(base) {
+    return ServerRequestFetchRequest.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseServerRequestFetchRequest();
+    message.functionId = object.functionId ?? "";
+    message.tail = object.tail !== void 0 && object.tail !== null ? ServerRequestFetchRequest_Tail.fromPartial(object.tail) : void 0;
+    return message;
+  }
+};
+function createBaseServerRequestFetchRequest_Tail() {
+  return { count: 0 };
+}
+var ServerRequestFetchRequest_Tail = {
+  encode(message, writer = new BinaryWriter()) {
+    if (message.count !== 0) {
+      writer.uint32(8).uint32(message.count);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseServerRequestFetchRequest_Tail();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 8) {
+            break;
+          }
+          message.count = reader.uint32();
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return { count: isSet5(object.count) ? globalThis.Number(object.count) : 0 };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.count !== 0) {
+      obj.count = Math.round(message.count);
+    }
+    return obj;
+  },
+  create(base) {
+    return ServerRequestFetchRequest_Tail.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseServerRequestFetchRequest_Tail();
+    message.count = object.count ?? 0;
+    return message;
+  }
+};
+function createBaseServerRequestFetchResponse() {
+  return { requests: [] };
+}
+var ServerRequestFetchResponse = {
+  encode(message, writer = new BinaryWriter()) {
+    for (const v of message.requests) {
+      ServerRequestInfo.encode(v, writer.uint32(10).fork()).join();
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseServerRequestFetchResponse();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+          message.requests.push(ServerRequestInfo.decode(reader, reader.uint32()));
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return {
+      requests: globalThis.Array.isArray(object?.requests) ? object.requests.map((e) => ServerRequestInfo.fromJSON(e)) : []
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.requests?.length) {
+      obj.requests = message.requests.map((e) => ServerRequestInfo.toJSON(e));
+    }
+    return obj;
+  },
+  create(base) {
+    return ServerRequestFetchResponse.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseServerRequestFetchResponse();
+    message.requests = object.requests?.map((e) => ServerRequestInfo.fromPartial(e)) || [];
+    return message;
+  }
+};
+function createBaseServerRequestInfo() {
+  return { route: "", timestamp: void 0, containerId: "", durationSeconds: 0, status: 0 };
+}
+var ServerRequestInfo = {
+  encode(message, writer = new BinaryWriter()) {
+    if (message.route !== "") {
+      writer.uint32(10).string(message.route);
+    }
+    if (message.timestamp !== void 0) {
+      Timestamp.encode(toTimestamp(message.timestamp), writer.uint32(18).fork()).join();
+    }
+    if (message.containerId !== "") {
+      writer.uint32(26).string(message.containerId);
+    }
+    if (message.durationSeconds !== 0) {
+      writer.uint32(33).double(message.durationSeconds);
+    }
+    if (message.status !== 0) {
+      writer.uint32(40).int32(message.status);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseServerRequestInfo();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+          message.route = reader.string();
+          continue;
+        }
+        case 2: {
+          if (tag !== 18) {
+            break;
+          }
+          message.timestamp = fromTimestamp(Timestamp.decode(reader, reader.uint32()));
+          continue;
+        }
+        case 3: {
+          if (tag !== 26) {
+            break;
+          }
+          message.containerId = reader.string();
+          continue;
+        }
+        case 4: {
+          if (tag !== 33) {
+            break;
+          }
+          message.durationSeconds = reader.double();
+          continue;
+        }
+        case 5: {
+          if (tag !== 40) {
+            break;
+          }
+          message.status = reader.int32();
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return {
+      route: isSet5(object.route) ? globalThis.String(object.route) : "",
+      timestamp: isSet5(object.timestamp) ? fromJsonTimestamp(object.timestamp) : void 0,
+      containerId: isSet5(object.containerId) ? globalThis.String(object.containerId) : "",
+      durationSeconds: isSet5(object.durationSeconds) ? globalThis.Number(object.durationSeconds) : 0,
+      status: isSet5(object.status) ? globalThis.Number(object.status) : 0
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.route !== "") {
+      obj.route = message.route;
+    }
+    if (message.timestamp !== void 0) {
+      obj.timestamp = message.timestamp.toISOString();
+    }
+    if (message.containerId !== "") {
+      obj.containerId = message.containerId;
+    }
+    if (message.durationSeconds !== 0) {
+      obj.durationSeconds = message.durationSeconds;
+    }
+    if (message.status !== 0) {
+      obj.status = Math.round(message.status);
+    }
+    return obj;
+  },
+  create(base) {
+    return ServerRequestInfo.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseServerRequestInfo();
+    message.route = object.route ?? "";
+    message.timestamp = object.timestamp ?? void 0;
+    message.containerId = object.containerId ?? "";
+    message.durationSeconds = object.durationSeconds ?? 0;
+    message.status = object.status ?? 0;
+    return message;
+  }
+};
 function createBaseServiceUser() {
   return {
     name: "",
@@ -51685,7 +52791,8 @@ function createBaseTaskLogsBatch() {
     eof: false,
     ptyExecId: "",
     rootFunctionId: "",
-    ttlDays: 0
+    ttlDays: 0,
+    sandboxId: ""
   };
 }
 var TaskLogsBatch = {
@@ -51723,6 +52830,9 @@ var TaskLogsBatch = {
     if (message.ttlDays !== 0) {
       writer.uint32(136).uint32(message.ttlDays);
     }
+    if (message.sandboxId !== "") {
+      writer.uint32(146).string(message.sandboxId);
+    }
     return writer;
   },
   decode(input, length) {
@@ -51809,6 +52919,13 @@ var TaskLogsBatch = {
           message.ttlDays = reader.uint32();
           continue;
         }
+        case 18: {
+          if (tag !== 146) {
+            break;
+          }
+          message.sandboxId = reader.string();
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -51829,7 +52946,8 @@ var TaskLogsBatch = {
       eof: isSet5(object.eof) ? globalThis.Boolean(object.eof) : false,
       ptyExecId: isSet5(object.ptyExecId) ? globalThis.String(object.ptyExecId) : "",
       rootFunctionId: isSet5(object.rootFunctionId) ? globalThis.String(object.rootFunctionId) : "",
-      ttlDays: isSet5(object.ttlDays) ? globalThis.Number(object.ttlDays) : 0
+      ttlDays: isSet5(object.ttlDays) ? globalThis.Number(object.ttlDays) : 0,
+      sandboxId: isSet5(object.sandboxId) ? globalThis.String(object.sandboxId) : ""
     };
   },
   toJSON(message) {
@@ -51867,6 +52985,9 @@ var TaskLogsBatch = {
     if (message.ttlDays !== 0) {
       obj.ttlDays = Math.round(message.ttlDays);
     }
+    if (message.sandboxId !== "") {
+      obj.sandboxId = message.sandboxId;
+    }
     return obj;
   },
   create(base) {
@@ -51885,6 +53006,7 @@ var TaskLogsBatch = {
     message.ptyExecId = object.ptyExecId ?? "";
     message.rootFunctionId = object.rootFunctionId ?? "";
     message.ttlDays = object.ttlDays ?? 0;
+    message.sandboxId = object.sandboxId ?? "";
     return message;
   }
 };
@@ -52556,7 +53678,7 @@ var TokenDeleteRequest = {
   }
 };
 function createBaseTokenFlowCreateRequest() {
-  return { utmSource: "", localhostPort: 0, nextUrl: "" };
+  return { utmSource: "", localhostPort: 0, nextUrl: "", expiresInSeconds: 0 };
 }
 var TokenFlowCreateRequest = {
   encode(message, writer = new BinaryWriter()) {
@@ -52569,6 +53691,9 @@ var TokenFlowCreateRequest = {
     if (message.nextUrl !== "") {
       writer.uint32(42).string(message.nextUrl);
     }
+    if (message.expiresInSeconds !== 0) {
+      writer.uint32(48).uint32(message.expiresInSeconds);
+    }
     return writer;
   },
   decode(input, length) {
@@ -52599,6 +53724,13 @@ var TokenFlowCreateRequest = {
           message.nextUrl = reader.string();
           continue;
         }
+        case 6: {
+          if (tag !== 48) {
+            break;
+          }
+          message.expiresInSeconds = reader.uint32();
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -52611,7 +53743,8 @@ var TokenFlowCreateRequest = {
     return {
       utmSource: isSet5(object.utmSource) ? globalThis.String(object.utmSource) : "",
       localhostPort: isSet5(object.localhostPort) ? globalThis.Number(object.localhostPort) : 0,
-      nextUrl: isSet5(object.nextUrl) ? globalThis.String(object.nextUrl) : ""
+      nextUrl: isSet5(object.nextUrl) ? globalThis.String(object.nextUrl) : "",
+      expiresInSeconds: isSet5(object.expiresInSeconds) ? globalThis.Number(object.expiresInSeconds) : 0
     };
   },
   toJSON(message) {
@@ -52625,6 +53758,9 @@ var TokenFlowCreateRequest = {
     if (message.nextUrl !== "") {
       obj.nextUrl = message.nextUrl;
     }
+    if (message.expiresInSeconds !== 0) {
+      obj.expiresInSeconds = Math.round(message.expiresInSeconds);
+    }
     return obj;
   },
   create(base) {
@@ -52635,6 +53771,7 @@ var TokenFlowCreateRequest = {
     message.utmSource = object.utmSource ?? "";
     message.localhostPort = object.localhostPort ?? 0;
     message.nextUrl = object.nextUrl ?? "";
+    message.expiresInSeconds = object.expiresInSeconds ?? 0;
     return message;
   }
 };
@@ -57511,6 +58648,74 @@ var WebhookTokenListResponse = {
     return message;
   }
 };
+function createBaseWebhookTokenUpdateRequest() {
+  return { tokenId: "", name: void 0 };
+}
+var WebhookTokenUpdateRequest = {
+  encode(message, writer = new BinaryWriter()) {
+    if (message.tokenId !== "") {
+      writer.uint32(10).string(message.tokenId);
+    }
+    if (message.name !== void 0) {
+      writer.uint32(18).string(message.name);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseWebhookTokenUpdateRequest();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+          message.tokenId = reader.string();
+          continue;
+        }
+        case 2: {
+          if (tag !== 18) {
+            break;
+          }
+          message.name = reader.string();
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return {
+      tokenId: isSet5(object.tokenId) ? globalThis.String(object.tokenId) : "",
+      name: isSet5(object.name) ? globalThis.String(object.name) : void 0
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.tokenId !== "") {
+      obj.tokenId = message.tokenId;
+    }
+    if (message.name !== void 0) {
+      obj.name = message.name;
+    }
+    return obj;
+  },
+  create(base) {
+    return WebhookTokenUpdateRequest.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseWebhookTokenUpdateRequest();
+    message.tokenId = object.tokenId ?? "";
+    message.name = object.name ?? void 0;
+    return message;
+  }
+};
 function createBaseWorkspaceBillingRatesRequest() {
   return {};
 }
@@ -60236,6 +61441,14 @@ var ModalClientDefinition = {
       responseStream: false,
       options: {}
     },
+    functionCallFetch: {
+      name: "FunctionCallFetch",
+      requestType: FunctionCallFetchRequest,
+      requestStream: false,
+      responseType: FunctionCallFetchResponse,
+      responseStream: false,
+      options: {}
+    },
     functionCallFromId: {
       name: "FunctionCallFromId",
       requestType: FunctionCallFromIdRequest,
@@ -60391,6 +61604,14 @@ var ModalClientDefinition = {
       responseStream: false,
       options: {}
     },
+    functionListVariants: {
+      name: "FunctionListVariants",
+      requestType: FunctionListVariantsRequest,
+      requestStream: false,
+      responseType: FunctionListVariantsResponse,
+      responseStream: false,
+      options: {}
+    },
     functionMap: {
       name: "FunctionMap",
       requestType: FunctionMapRequest,
@@ -61025,6 +62246,14 @@ var ModalClientDefinition = {
       responseStream: false,
       options: {}
     },
+    secretGetInfo: {
+      name: "SecretGetInfo",
+      requestType: SecretGetInfoRequest,
+      requestStream: false,
+      responseType: SecretGetInfoResponse,
+      responseStream: false,
+      options: {}
+    },
     secretGetOrCreate: {
       name: "SecretGetOrCreate",
       requestType: SecretGetOrCreateRequest,
@@ -61058,6 +62287,14 @@ var ModalClientDefinition = {
       responseStream: false,
       options: {}
     },
+    serverRequestFetch: {
+      name: "ServerRequestFetch",
+      requestType: ServerRequestFetchRequest,
+      requestStream: false,
+      responseType: ServerRequestFetchResponse,
+      responseStream: false,
+      options: {}
+    },
     /** Service users */
     serviceUserList: {
       name: "ServiceUserList",
@@ -61451,6 +62688,14 @@ var ModalClientDefinition = {
       responseStream: false,
       options: {}
     },
+    webhookTokenUpdate: {
+      name: "WebhookTokenUpdate",
+      requestType: WebhookTokenUpdateRequest,
+      requestStream: false,
+      responseType: WebhookToken,
+      responseStream: false,
+      options: {}
+    },
     /** Workspaces */
     workspaceBillingRates: {
       name: "WorkspaceBillingRates",
@@ -61660,6 +62905,12 @@ var QueueFullError = class extends Error {
     this.name = "QueueFullError";
   }
 };
+var ResourceExhaustedError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "ResourceExhaustedError";
+  }
+};
 var SandboxFilesystemError = class extends Error {
   constructor(message) {
     super(message);
@@ -64101,7 +65352,8 @@ function createBaseTaskContainerCreateRequest() {
     secretIds: [],
     volumeMounts: [],
     networkAccess: void 0,
-    ptyInfo: void 0
+    ptyInfo: void 0,
+    memoryReserveConsumeMib: void 0
   };
 }
 var TaskContainerCreateRequest = {
@@ -64136,6 +65388,9 @@ var TaskContainerCreateRequest = {
     if (message.ptyInfo !== void 0) {
       PTYInfo.encode(message.ptyInfo, writer.uint32(90).fork()).join();
     }
+    if (message.memoryReserveConsumeMib !== void 0) {
+      writer.uint32(96).uint32(message.memoryReserveConsumeMib);
+    }
     return writer;
   },
   decode(input, length) {
@@ -64218,6 +65473,13 @@ var TaskContainerCreateRequest = {
           message.ptyInfo = PTYInfo.decode(reader, reader.uint32());
           continue;
         }
+        case 12: {
+          if (tag !== 96) {
+            break;
+          }
+          message.memoryReserveConsumeMib = reader.uint32();
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -64240,7 +65502,8 @@ var TaskContainerCreateRequest = {
       secretIds: globalThis.Array.isArray(object?.secretIds) ? object.secretIds.map((e) => globalThis.String(e)) : [],
       volumeMounts: globalThis.Array.isArray(object?.volumeMounts) ? object.volumeMounts.map((e) => VolumeMount.fromJSON(e)) : [],
       networkAccess: isSet6(object.networkAccess) ? NetworkAccess.fromJSON(object.networkAccess) : void 0,
-      ptyInfo: isSet6(object.ptyInfo) ? PTYInfo.fromJSON(object.ptyInfo) : void 0
+      ptyInfo: isSet6(object.ptyInfo) ? PTYInfo.fromJSON(object.ptyInfo) : void 0,
+      memoryReserveConsumeMib: isSet6(object.memoryReserveConsumeMib) ? globalThis.Number(object.memoryReserveConsumeMib) : void 0
     };
   },
   toJSON(message) {
@@ -64281,6 +65544,9 @@ var TaskContainerCreateRequest = {
     if (message.ptyInfo !== void 0) {
       obj.ptyInfo = PTYInfo.toJSON(message.ptyInfo);
     }
+    if (message.memoryReserveConsumeMib !== void 0) {
+      obj.memoryReserveConsumeMib = Math.round(message.memoryReserveConsumeMib);
+    }
     return obj;
   },
   create(base) {
@@ -64303,6 +65569,7 @@ var TaskContainerCreateRequest = {
     message.volumeMounts = object.volumeMounts?.map((e) => VolumeMount.fromPartial(e)) || [];
     message.networkAccess = object.networkAccess !== void 0 && object.networkAccess !== null ? NetworkAccess.fromPartial(object.networkAccess) : void 0;
     message.ptyInfo = object.ptyInfo !== void 0 && object.ptyInfo !== null ? PTYInfo.fromPartial(object.ptyInfo) : void 0;
+    message.memoryReserveConsumeMib = object.memoryReserveConsumeMib ?? void 0;
     return message;
   }
 };
@@ -67593,6 +68860,41 @@ function isSet6(value) {
 var import_promises = require("timers/promises");
 var import_nice_grpc7 = require("nice-grpc");
 
+// src/server_warnings.ts
+var SERVER_WARNING_HEADER = "x-modal-warning";
+var SERVER_WARNING_REGISTRY_LIMIT = 2048;
+function logServerWarnings(logger2, trailer, seen) {
+  const joined = trailer.get(SERVER_WARNING_HEADER);
+  if (typeof joined !== "string") return;
+  for (const encoded of joined.split(",")) {
+    let message;
+    try {
+      message = decodeURIComponent(encoded.trim());
+    } catch {
+      message = encoded.trim();
+    }
+    if (seen.size > SERVER_WARNING_REGISTRY_LIMIT) {
+      seen.clear();
+    }
+    if (seen.has(message)) continue;
+    seen.add(message);
+    logger2.warn(message);
+  }
+}
+function serverWarningMiddleware(logger2) {
+  const seen = /* @__PURE__ */ new Set();
+  return async function* serverWarningMiddleware2(call, options) {
+    const { onTrailer, ...restOptions } = options;
+    return yield* call.next(call.request, {
+      ...restOptions,
+      onTrailer: (trailer) => {
+        logServerWarnings(logger2, trailer, seen);
+        onTrailer?.(trailer);
+      }
+    });
+  };
+}
+
 // src/config.ts
 var import_node_console = require("console");
 var import_node_fs = require("fs");
@@ -67684,7 +68986,7 @@ function getProfile(profileName) {
       const ms = Math.round(parsed * 1e3);
       return parsed > 0 && ms === 0 ? 1 : ms;
     })(),
-    sandboxV2: process.env["MODAL_SANDBOX_V2"] ? parseBooleanFlag(process.env["MODAL_SANDBOX_V2"]) : parseBooleanFlag(profileData.sandbox_v2)
+    sandboxV2: process.env["MODAL_SANDBOX_V2"] ? parseBooleanFlag(process.env["MODAL_SANDBOX_V2"]) : profileData.sandbox_v2 !== void 0 ? parseBooleanFlag(profileData.sandbox_v2) : true
   };
   return profile;
 }
@@ -67906,7 +69208,7 @@ var TaskCommandRouterClientImpl = class _TaskCommandRouterClientImpl {
       options.metadata ??= new import_nice_grpc7.Metadata();
       options.metadata.set("authorization", `Bearer ${self.jwt}`);
       return yield* call.next(call.request, options);
-    });
+    }).use(serverWarningMiddleware(logger2));
     this.factory = factory;
     this.stub = factory.create(TaskCommandRouterDefinition, this.channel);
     this.armIdleTimer();
@@ -68311,6 +69613,9 @@ var TaskCommandRouterClientImpl = class _TaskCommandRouterClientImpl {
   async setNetworkAccess(request) {
     await this.callUnary(() => this.stub.taskSetNetworkAccess(request));
   }
+  async setOutboundPolicy(request) {
+    await this.callUnary(() => this.stub.taskSetOutboundPolicy(request));
+  }
   /**
    * Reload all Volumes mounted in the task to reflect their latest committed state.
    *
@@ -69493,8 +70798,151 @@ var SandboxFilesystem = class {
 };
 
 // src/sandbox_sidecar.ts
-var import_nice_grpc10 = require("nice-grpc");
+var import_nice_grpc11 = require("nice-grpc");
 var import_uuid = require("uuid");
+
+// src/volume.ts
+var import_nice_grpc10 = require("nice-grpc");
+var VolumeService = class {
+  #client;
+  constructor(client) {
+    this.#client = client;
+  }
+  /**
+   * Reference a {@link Volume} by its name.
+   */
+  async fromName(name, params) {
+    try {
+      const resp = await this.#client.cpClient.volumeGetOrCreate({
+        deploymentName: name,
+        environmentName: this.#client.environmentName(params?.environment),
+        objectCreationType: params?.createIfMissing ? 1 /* OBJECT_CREATION_TYPE_CREATE_IF_MISSING */ : 0 /* OBJECT_CREATION_TYPE_UNSPECIFIED */
+      });
+      this.#client.logger.debug(
+        "Retrieved Volume",
+        "volume_id",
+        resp.volumeId,
+        "volume_name",
+        name
+      );
+      return new Volume(resp.volumeId, name);
+    } catch (err) {
+      if (err instanceof import_nice_grpc10.ClientError && err.code === import_nice_grpc10.Status.NOT_FOUND)
+        throw new NotFoundError(err.details);
+      throw err;
+    }
+  }
+  /**
+   * Create a nameless, temporary {@link Volume}.
+   * It persists until closeEphemeral() is called, or the process exits.
+   */
+  async ephemeral(params = {}) {
+    const resp = await this.#client.cpClient.volumeGetOrCreate({
+      objectCreationType: 5 /* OBJECT_CREATION_TYPE_EPHEMERAL */,
+      environmentName: this.#client.environmentName(params.environment)
+    });
+    this.#client.logger.debug(
+      "Created ephemeral Volume",
+      "volume_id",
+      resp.volumeId
+    );
+    const ephemeralHbManager = new EphemeralHeartbeatManager(
+      () => this.#client.cpClient.volumeHeartbeat({ volumeId: resp.volumeId })
+    );
+    return new Volume(resp.volumeId, void 0, void 0, ephemeralHbManager);
+  }
+  /**
+   * Delete a named {@link Volume}.
+   *
+   * Warning: Deletion is irreversible and will affect any Apps currently using the Volume.
+   */
+  async delete(name, params) {
+    try {
+      const volume = await this.fromName(name, {
+        environment: params?.environment,
+        createIfMissing: false
+      });
+      await this.#client.cpClient.volumeDelete({
+        volumeId: volume.volumeId
+      });
+      this.#client.logger.debug(
+        "Deleted Volume",
+        "volume_name",
+        name,
+        "volume_id",
+        volume.volumeId
+      );
+    } catch (err) {
+      const isNotFound = err instanceof NotFoundError || err instanceof import_nice_grpc10.ClientError && err.code === import_nice_grpc10.Status.NOT_FOUND;
+      if (isNotFound && params?.allowMissing) {
+        return;
+      }
+      throw err;
+    }
+  }
+};
+var DEFAULT_MOUNT_OPTIONS = {
+  readOnly: false,
+  subPath: void 0
+};
+var Volume = class _Volume {
+  volumeId;
+  name;
+  /**
+   * @hidden
+   * @internal
+   */
+  _mountOptions = DEFAULT_MOUNT_OPTIONS;
+  #ephemeralHbManager;
+  /** @ignore */
+  constructor(volumeId, name, mountOptions, ephemeralHbManager) {
+    this.volumeId = volumeId;
+    this.name = name;
+    if (mountOptions) {
+      this._mountOptions = mountOptions;
+    }
+    this.#ephemeralHbManager = ephemeralHbManager;
+  }
+  /**
+   * Configure options used when mounting this Volume. Fields left undefined preserve their value
+   * from any previous withMountOptions call on the same Volume (stacking).
+   */
+  withMountOptions(params = {}) {
+    let subPath = this._mountOptions.subPath;
+    if (params.subPath !== void 0) {
+      subPath = params.subPath === "/" ? void 0 : params.subPath;
+    }
+    return new _Volume(
+      this.volumeId,
+      this.name,
+      {
+        readOnly: params.readOnly ?? this._mountOptions.readOnly,
+        subPath
+      },
+      this.#ephemeralHbManager
+    );
+  }
+  /** Delete the ephemeral Volume. Only usable with emphemeral Volumes. */
+  closeEphemeral() {
+    if (this.#ephemeralHbManager) {
+      this.#ephemeralHbManager.stop();
+    } else {
+      throw new InvalidError("Volume is not ephemeral.");
+    }
+  }
+};
+function volumeToMountProto(mountPath, volume) {
+  const opts = volume._mountOptions ?? DEFAULT_MOUNT_OPTIONS;
+  return {
+    volumeId: volume.volumeId,
+    mountPath,
+    allowBackgroundCommits: true,
+    readOnly: opts.readOnly,
+    subPath: opts.subPath
+  };
+}
+
+// src/sandbox_sidecar.ts
 var MAIN_CONTAINER_NAME = "main";
 var CONTAINER_WAIT_POLL_TIMEOUT_SECONDS = 10;
 var CONTROL_PLANE_SIDECAR_CREATE_ENV_VAR = "MODAL_USE_CONTROL_PLANE_SIDECAR_CREATE";
@@ -69511,6 +70959,29 @@ function validateSidecarName(name) {
     );
   }
 }
+function buildSidecarVolumeMounts(volumes) {
+  const mountPathsByVolumeId = /* @__PURE__ */ new Map();
+  const volumeMounts = [];
+  for (const [mountPath, volume] of Object.entries(volumes ?? {})) {
+    if (!volume) {
+      throw new InvalidError(
+        `Volume mounted at "${mountPath}" must not be null or undefined`
+      );
+    }
+    const mountPaths = mountPathsByVolumeId.get(volume.volumeId) ?? [];
+    mountPaths.push(mountPath);
+    mountPathsByVolumeId.set(volume.volumeId, mountPaths);
+    volumeMounts.push(volumeToMountProto(mountPath, volume));
+  }
+  for (const mountPaths of mountPathsByVolumeId.values()) {
+    if (mountPaths.length > 1) {
+      throw new InvalidError(
+        "The same Volume cannot be mounted at multiple paths in a sidecar: " + mountPaths.sort().join(", ")
+      );
+    }
+  }
+  return volumeMounts;
+}
 function sidecarContainerFromProto(access, info) {
   return new SidecarContainer(
     access,
@@ -69541,6 +71012,11 @@ var SidecarService = class {
     const command = params?.command ?? [];
     validateExecArgs(command);
     validateWorkdir(params?.workdir);
+    if (params?.experimentalMemoryReserveConsumeMiB !== void 0 && (!Number.isInteger(params.experimentalMemoryReserveConsumeMiB) || params.experimentalMemoryReserveConsumeMiB <= 0)) {
+      throw new InvalidError(
+        `experimentalMemoryReserveConsumeMiB must be a positive integer number of MiB, got: ${params.experimentalMemoryReserveConsumeMiB}`
+      );
+    }
     validateEnvVarKeys(params?.env ?? {});
     const [envDict, resolvableSecrets] = splitEnvDictAndResolvableSecrets(
       params?.secrets ?? []
@@ -69548,6 +71024,7 @@ var SidecarService = class {
     Object.assign(envDict, params?.env ?? {});
     await hydrateSecrets(this.#access.client, resolvableSecrets);
     const secretIds = collectSecretIds(resolvableSecrets);
+    const volumeMounts = buildSidecarVolumeMounts(params?.volumes);
     const ptyInfo = params?.pty ? defaultSandboxPTYInfo() : void 0;
     const networkAccess = buildOutboundNetworkAccess(
       false,
@@ -69567,8 +71044,12 @@ var SidecarService = class {
               entrypointArgs: command,
               workdir: params?.workdir ?? void 0,
               secretIds,
+              volumeMounts,
               networkAccess,
-              ptyInfo
+              ptyInfo,
+              resources: params?.experimentalMemoryReserveConsumeMiB !== void 0 ? Resources.create({
+                memoryMb: params.experimentalMemoryReserveConsumeMiB
+              }) : void 0
             }),
             ephemeralSecrets
           })
@@ -69584,17 +71065,19 @@ var SidecarService = class {
             env: envDict,
             workdir: params?.workdir ?? "",
             secretIds,
+            volumeMounts,
             networkAccess,
-            ptyInfo
+            ptyInfo,
+            memoryReserveConsumeMib: params?.experimentalMemoryReserveConsumeMiB
           })
         );
       }
     } catch (err) {
-      if (err instanceof import_nice_grpc10.ClientError) {
-        if (err.code === import_nice_grpc10.Status.ALREADY_EXISTS) {
+      if (err instanceof import_nice_grpc11.ClientError) {
+        if (err.code === import_nice_grpc11.Status.ALREADY_EXISTS) {
           throw new AlreadyExistsError(err.details || err.message);
         }
-        if (err.code === import_nice_grpc10.Status.INVALID_ARGUMENT) {
+        if (err.code === import_nice_grpc11.Status.INVALID_ARGUMENT) {
           throw new InvalidError(err.details || err.message);
         }
       }
@@ -69620,7 +71103,7 @@ var SidecarService = class {
         })
       );
     } catch (err) {
-      if (err instanceof import_nice_grpc10.ClientError && err.code === import_nice_grpc10.Status.NOT_FOUND) {
+      if (err instanceof import_nice_grpc11.ClientError && err.code === import_nice_grpc11.Status.NOT_FOUND) {
         throw new NotFoundError(`Sidecar container "${name}" not found`);
       }
       throw err;
@@ -69991,151 +71474,19 @@ var SandboxSnapshotService = class {
   }
 };
 
-// src/volume.ts
-var import_nice_grpc11 = require("nice-grpc");
-var VolumeService = class {
-  #client;
-  constructor(client) {
-    this.#client = client;
-  }
-  /**
-   * Reference a {@link Volume} by its name.
-   */
-  async fromName(name, params) {
-    try {
-      const resp = await this.#client.cpClient.volumeGetOrCreate({
-        deploymentName: name,
-        environmentName: this.#client.environmentName(params?.environment),
-        objectCreationType: params?.createIfMissing ? 1 /* OBJECT_CREATION_TYPE_CREATE_IF_MISSING */ : 0 /* OBJECT_CREATION_TYPE_UNSPECIFIED */
-      });
-      this.#client.logger.debug(
-        "Retrieved Volume",
-        "volume_id",
-        resp.volumeId,
-        "volume_name",
-        name
-      );
-      return new Volume(resp.volumeId, name);
-    } catch (err) {
-      if (err instanceof import_nice_grpc11.ClientError && err.code === import_nice_grpc11.Status.NOT_FOUND)
-        throw new NotFoundError(err.details);
-      throw err;
-    }
-  }
-  /**
-   * Create a nameless, temporary {@link Volume}.
-   * It persists until closeEphemeral() is called, or the process exits.
-   */
-  async ephemeral(params = {}) {
-    const resp = await this.#client.cpClient.volumeGetOrCreate({
-      objectCreationType: 5 /* OBJECT_CREATION_TYPE_EPHEMERAL */,
-      environmentName: this.#client.environmentName(params.environment)
-    });
-    this.#client.logger.debug(
-      "Created ephemeral Volume",
-      "volume_id",
-      resp.volumeId
-    );
-    const ephemeralHbManager = new EphemeralHeartbeatManager(
-      () => this.#client.cpClient.volumeHeartbeat({ volumeId: resp.volumeId })
-    );
-    return new Volume(resp.volumeId, void 0, void 0, ephemeralHbManager);
-  }
-  /**
-   * Delete a named {@link Volume}.
-   *
-   * Warning: Deletion is irreversible and will affect any Apps currently using the Volume.
-   */
-  async delete(name, params) {
-    try {
-      const volume = await this.fromName(name, {
-        environment: params?.environment,
-        createIfMissing: false
-      });
-      await this.#client.cpClient.volumeDelete({
-        volumeId: volume.volumeId
-      });
-      this.#client.logger.debug(
-        "Deleted Volume",
-        "volume_name",
-        name,
-        "volume_id",
-        volume.volumeId
-      );
-    } catch (err) {
-      const isNotFound = err instanceof NotFoundError || err instanceof import_nice_grpc11.ClientError && err.code === import_nice_grpc11.Status.NOT_FOUND;
-      if (isNotFound && params?.allowMissing) {
-        return;
-      }
-      throw err;
-    }
-  }
-};
-var DEFAULT_MOUNT_OPTIONS = {
-  readOnly: false,
-  subPath: void 0
-};
-var Volume = class _Volume {
-  volumeId;
-  name;
-  /**
-   * @hidden
-   * @internal
-   */
-  _mountOptions = DEFAULT_MOUNT_OPTIONS;
-  #ephemeralHbManager;
-  /** @ignore */
-  constructor(volumeId, name, mountOptions, ephemeralHbManager) {
-    this.volumeId = volumeId;
-    this.name = name;
-    if (mountOptions) {
-      this._mountOptions = mountOptions;
-    }
-    this.#ephemeralHbManager = ephemeralHbManager;
-  }
-  /**
-   * Configure options used when mounting this Volume. Fields left undefined preserve their value
-   * from any previous withMountOptions call on the same Volume (stacking).
-   */
-  withMountOptions(params = {}) {
-    let subPath = this._mountOptions.subPath;
-    if (params.subPath !== void 0) {
-      subPath = params.subPath === "/" ? void 0 : params.subPath;
-    }
-    return new _Volume(
-      this.volumeId,
-      this.name,
-      {
-        readOnly: params.readOnly ?? this._mountOptions.readOnly,
-        subPath
-      },
-      this.#ephemeralHbManager
-    );
-  }
-  /** Delete the ephemeral Volume. Only usable with emphemeral Volumes. */
-  closeEphemeral() {
-    if (this.#ephemeralHbManager) {
-      this.#ephemeralHbManager.stop();
-    } else {
-      throw new InvalidError("Volume is not ephemeral.");
-    }
-  }
-};
-function volumeToMountProto(mountPath, volume) {
-  const opts = volume._mountOptions ?? DEFAULT_MOUNT_OPTIONS;
-  return {
-    volumeId: volume.volumeId,
-    mountPath,
-    allowBackgroundCommits: true,
-    readOnly: opts.readOnly,
-    subPath: opts.subPath
-  };
-}
-
 // src/sandbox.ts
 var SB_LOGS_INITIAL_DELAY_MS = 10;
 var SB_LOGS_DELAY_FACTOR = 2;
 var SB_LOGS_MAX_RETRIES = 10;
+var SB_LOGS_TASK_ID_TIMEOUT_SECONDS = 0.5;
+var SANDBOX_SCHEDULING_TIMEOUT_MS = 21 * 60 * 1e3;
+var GET_TASK_ID_TIMEOUT_MS = 5 * 60 * 1e3;
+function isTransientTaskIDLookupError(err) {
+  if (!(err instanceof import_nice_grpc12.ClientError)) {
+    return false;
+  }
+  return err.code === import_nice_grpc12.Status.UNAVAILABLE || err.code === import_nice_grpc12.Status.DEADLINE_EXCEEDED || err.code === import_nice_grpc12.Status.INTERNAL;
+}
 var TTL_NO_EXPIRY_SENTINEL = -1;
 var CUSTOMER_SUPPLIED_ENCRYPTION_KEY_MIN_LENGTH = 16;
 var CUSTOMER_SUPPLIED_ENCRYPTION_KEY_MAX_LENGTH = 512;
@@ -70185,6 +71536,19 @@ function getSandboxVersion(sandboxId) {
   }
   return "V2" /* V2 */;
 }
+function sandboxRuntimeToProto(runtime) {
+  switch (runtime) {
+    case void 0:
+      return void 0;
+    case "gvisor":
+    case "vm":
+      return runtime;
+    default:
+      throw new Error(
+        `runtime must be "gvisor" or "vm", got ${JSON.stringify(runtime)}`
+      );
+  }
+}
 var Probe2 = class _Probe {
   #tcpPort;
   #execArgv;
@@ -70318,6 +71682,7 @@ async function buildSandboxCreateRequestProto(appId, imageId, params = {}) {
   if (params.workdir && !params.workdir.startsWith("/")) {
     throw new Error(`workdir must be an absolute path, got: ${params.workdir}`);
   }
+  const runtime = sandboxRuntimeToProto(params.runtime);
   const volumeMounts = params.volumes ? Object.entries(params.volumes).map(
     ([mountPath, volume]) => volumeToMountProto(mountPath, volume)
   ) : [];
@@ -70369,6 +71734,19 @@ async function buildSandboxCreateRequestProto(appId, imageId, params = {}) {
       );
     }
   }
+  if (params.experimentalOutboundPolicy !== void 0) {
+    params.experimentalOutboundPolicy._validate();
+    if (params.blockNetwork) {
+      throw new InvalidError(
+        "experimentalOutboundPolicy cannot be used when blockNetwork is enabled"
+      );
+    }
+    if (params.outboundDomainAllowlist && params.outboundDomainAllowlist.length > 0) {
+      throw new InvalidError(
+        "experimentalOutboundPolicy cannot be used with outboundDomainAllowlist"
+      );
+    }
+  }
   const networkAccess = buildOutboundNetworkAccess(
     params.blockNetwork,
     params.outboundCidrAllowlist,
@@ -70449,6 +71827,7 @@ async function buildSandboxCreateRequestProto(appId, imageId, params = {}) {
       idleTimeoutSecs: params.idleTimeoutMs != void 0 ? params.idleTimeoutMs / 1e3 : void 0,
       workdir: params.workdir ?? void 0,
       networkAccess,
+      outboundPolicy: params.experimentalOutboundPolicy?._toProto(),
       resources: Resources.create({
         milliCpu,
         milliCpuMax,
@@ -70472,7 +71851,8 @@ async function buildSandboxCreateRequestProto(appId, imageId, params = {}) {
       includeOidcIdentityToken: params.includeOidcIdentityToken ?? false,
       inboundCidrAllowlist: params.inboundCidrAllowlist ?? [],
       i6pnEnabled: params.i6pn ?? false,
-      enableSnapshot: params.experimentalEnableSnapshot ?? false
+      enableSnapshot: params.experimentalEnableSnapshot ?? false,
+      runtime
     }
   });
 }
@@ -70509,7 +71889,10 @@ var SandboxService = class {
     );
     await hydrateSandboxSecrets(
       this.#client,
-      mergedSecrets,
+      [
+        ...mergedSecrets,
+        ...params.experimentalOutboundPolicy?._secrets() ?? []
+      ],
       params.cloudBucketMounts
     );
     const mergedParams = {
@@ -70537,7 +71920,9 @@ var SandboxService = class {
       "sandbox_id",
       createResp.sandboxId
     );
-    return new Sandbox2(this.#client, createResp.sandboxId);
+    const sb = new Sandbox2(this.#client, createResp.sandboxId);
+    await sb._waitForScheduling(SANDBOX_SCHEDULING_TIMEOUT_MS);
+    return sb;
   }
   /**
    * Create a new {@link Sandbox} using the experimental V2 backend.
@@ -70570,7 +71955,10 @@ var SandboxService = class {
     Object.assign(envDict, params.env ?? {});
     await hydrateSandboxSecrets(
       this.#client,
-      resolvableSecrets,
+      [
+        ...resolvableSecrets,
+        ...params.experimentalOutboundPolicy?._secrets() ?? []
+      ],
       params.cloudBucketMounts
     );
     const mergedParams = {
@@ -70976,9 +72364,10 @@ function buildTaskSnapshotDirectoryRequestProto(taskId, path2, snapshotId, ttlSe
     containerId
   });
 }
-var Sandbox2 = class _Sandbox {
+var Sandbox2 = class {
   #client;
   sandboxId;
+  #appId;
   #stdin;
   #stdout;
   #stderr;
@@ -71025,6 +72414,25 @@ var Sandbox2 = class _Sandbox {
     }
     return this.#stderr;
   }
+  /**
+   * Access persisted entrypoint logs emitted by this Sandbox.
+   *
+   * Use {@link SandboxLogsManager#fetch fetch()} to read logs from a UTC time
+   * range and {@link SandboxLogsManager#tail tail()} to read the most recent
+   * logs.
+   *
+   * This is separate from {@link Sandbox#stdout stdout} and
+   * {@link Sandbox#stderr stderr}, which expose the Sandbox's live output
+   * streams.
+   */
+  get logs() {
+    return new SandboxLogsManager(
+      this.#client,
+      this.sandboxId,
+      () => this.#getAppId(),
+      () => this.#resolveTaskIdForLogs()
+    );
+  }
   #outputStream(fileDescriptor) {
     if (this.#isV2) {
       this.#ensureAttached();
@@ -71257,12 +72665,15 @@ var Sandbox2 = class _Sandbox {
     }
     return this.#client.cpClient.sandboxWait(req);
   }
-  #sandboxGetTaskId(signal) {
-    const req = { sandboxId: this.sandboxId };
+  #sandboxGetTaskId(timeoutSecs, options) {
+    const req = SandboxGetTaskIdRequest.create({
+      sandboxId: this.sandboxId,
+      timeout: timeoutSecs
+    });
     if (this.#isV2) {
-      return this.#client.cpClient.sandboxGetTaskIdV2(req, { signal });
+      return this.#client.cpClient.sandboxGetTaskIdV2(req, options);
     }
-    return this.#client.cpClient.sandboxGetTaskId(req, { signal });
+    return this.#client.cpClient.sandboxGetTaskId(req, options);
   }
   #sandboxGetTunnels(timeoutMs) {
     const req = { sandboxId: this.sandboxId, timeout: timeoutMs / 1e3 };
@@ -71286,31 +72697,127 @@ var Sandbox2 = class _Sandbox {
     }
     await this.#client.cpClient.sandboxTerminate(req);
   }
-  static #maxGetTaskIdAttempts = 600;
-  // 5 minutes at 500ms intervals
+  async #getAppId() {
+    if (this.#appId !== void 0) {
+      return this.#appId;
+    }
+    const resp = await this.#sandboxWait(0);
+    const appId = resp.metadata?.appId;
+    if (!appId) {
+      throw new ExecutionError(
+        "Sandbox app ID should have been set during hydration"
+      );
+    }
+    this.#appId = appId;
+    return appId;
+  }
+  async #resolveTaskIdForLogs() {
+    if (this.#taskId !== void 0) {
+      return this.#taskId;
+    }
+    let resp;
+    try {
+      resp = await this.#sandboxGetTaskId(SB_LOGS_TASK_ID_TIMEOUT_SECONDS);
+    } catch (error) {
+      if (error instanceof import_nice_grpc12.ClientError && error.code === import_nice_grpc12.Status.DEADLINE_EXCEEDED) {
+        throw new ExecutionError("Sandbox task ID is not available yet.");
+      }
+      throw error;
+    }
+    if (!resp.taskId) {
+      throw new ExecutionError("Sandbox task ID is not available.");
+    }
+    this.#taskId = resp.taskId;
+    return this.#taskId;
+  }
   async #getTaskId(signal) {
+    return await this.#waitForTaskId(GET_TASK_ID_TIMEOUT_MS, false, signal);
+  }
+  /**
+   * Blocks until the Sandbox has a task. If the wait fails, the Sandbox is
+   * terminated so a queued one cannot start later with no caller. A timeout
+   * surfaces as a ResourceExhaustedError.
+   *
+   * @internal
+   * @hidden
+   */
+  async _waitForScheduling(timeoutMs) {
+    try {
+      await this.#waitForTaskId(timeoutMs, true);
+    } catch (err) {
+      if (err instanceof ConflictError) {
+        throw err;
+      }
+      try {
+        await this.#sandboxTerminate();
+      } catch (terminateErr) {
+        this.#client.logger.debug(
+          "Failed to terminate unscheduled Sandbox",
+          "sandbox_id",
+          this.sandboxId,
+          "error",
+          terminateErr
+        );
+      }
+      if (err instanceof TimeoutError) {
+        throw new ResourceExhaustedError(
+          "Insufficient capacity to create sandbox."
+        );
+      }
+      throw err;
+    }
+  }
+  /**
+   * Polls until the Sandbox has been assigned a task. Throws a ConflictError
+   * if the Sandbox finished before that happened and a TimeoutError once
+   * timeoutMs elapses. With retryTransient, lookups that fail with a
+   * transient error keep polling until the deadline instead of failing.
+   */
+  async #waitForTaskId(timeoutMs, retryTransient, signal) {
     if (this.#taskId !== void 0) {
       return this.#taskId;
     }
-    for (let i = 0; i < _Sandbox.#maxGetTaskIdAttempts; i++) {
-      const resp = await this.#sandboxGetTaskId(signal);
+    const deadline = Date.now() + timeoutMs;
+    const timedOut = () => new TimeoutError(
+      `Timed out waiting for task ID for Sandbox ${this.sandboxId}`
+    );
+    const backoff = () => (0, import_promises3.setTimeout)(Math.max(0, Math.min(500, deadline - Date.now())), void 0, {
+      signal
+    });
+    while (true) {
+      if (Date.now() >= deadline) {
+        throw timedOut();
+      }
+      let resp;
+      try {
+        resp = await this.#sandboxGetTaskId(void 0, { signal });
+      } catch (err) {
+        if (signal?.aborted || !isTransientTaskIDLookupError(err)) {
+          throw err;
+        }
+        if (Date.now() >= deadline) {
+          if (err instanceof import_nice_grpc12.ClientError && err.code === import_nice_grpc12.Status.INTERNAL) {
+            throw err;
+          }
+          throw timedOut();
+        }
+        if (!retryTransient) {
+          throw err;
+        }
+        await backoff();
+        continue;
+      }
       if (resp.taskId) {
         this.#taskId = resp.taskId;
         return this.#taskId;
       }
       if (resp.taskResult) {
-        if (resp.taskResult.status === 1 /* GENERIC_STATUS_SUCCESS */ || !resp.taskResult.exception) {
-          throw new Error(`Sandbox ${this.sandboxId} has already completed`);
-        }
-        throw new Error(
-          `Sandbox ${this.sandboxId} has already completed with result: exception:"${resp.taskResult.exception}"`
+        throw new ConflictError(
+          resp.taskResult.exception || `Sandbox ${this.sandboxId} has already finished`
         );
       }
-      await (0, import_promises3.setTimeout)(500, void 0, { signal });
+      await backoff();
     }
-    throw new Error(
-      `Timed out waiting for task ID for Sandbox ${this.sandboxId}`
-    );
   }
   async #getOrCreateCommandRouterClient(taskId) {
     if (this.#commandRouterClient !== void 0) {
@@ -71602,7 +73109,7 @@ var Sandbox2 = class _Sandbox {
         return new Image2(this.#client, resp.success.imageId, "");
       }
       if (resp.error) {
-        if (resp.error.errorCode === 1 /* ERROR_CODE_TIMEOUT */) {
+        if (resp.error.errorCode === 1 /* ERROR_CODE_TIMEOUT */ || resp.error.errorCode === 3 /* ERROR_CODE_FILESYSTEM_INCONSISTENT */) {
           throw new SnapshotCreationError(
             resp.error.message || "No exit snapshot image will be produced"
           );
@@ -71716,6 +73223,31 @@ var Sandbox2 = class _Sandbox {
     });
     await commandRouterClient.setNetworkAccess(request);
   }
+  /**
+   * Replace the outbound policy of a running Sandbox.
+   *
+   * EXPERIMENTAL: the API is subject to change.
+   *
+   * The new policy replaces all existing policy configuration on the
+   * Sandbox; build a policy including any existing rules you want to keep.
+   *
+   * Only Sandboxes created with an `experimentalOutboundPolicy` can be updated this
+   * way; for Sandboxes created without one this fails, since header
+   * replacement is only set up at creation time.
+   */
+  async experimentalUpdateOutboundPolicy(outboundPolicy) {
+    this.#ensureAttached();
+    outboundPolicy._validate();
+    const [, [taskId, commandRouterClient]] = await Promise.all([
+      hydrateSecrets(this.#client, outboundPolicy._secrets()),
+      this.#getCommandRouter()
+    ]);
+    const request = TaskSetOutboundPolicyRequest.create({
+      taskId,
+      outboundPolicy: outboundPolicy._toProto()
+    });
+    await commandRouterClient.setOutboundPolicy(request);
+  }
   /**
    * Reload all Volumes mounted in the Sandbox.
    *
@@ -72273,7 +73805,7 @@ var AuthTokenManager = class {
 };
 
 // src/version.ts
-var SDK_VERSION = "0.10.2-dev.1";
+var SDK_VERSION = "0.10.2-dev.11";
 function getSDKVersion() {
   return SDK_VERSION;
 }
@@ -72540,7 +74072,7 @@ var ModalClient = class {
       "grpc.keepalive_timeout_ms": 1e4,
       "grpc.keepalive_permit_without_calls": 1
     });
-    let factory = (0, import_nice_grpc14.createClientFactory)().use(this.authMiddleware(profile)).use(this.retryMiddleware()).use(timeoutMiddleware);
+    let factory = (0, import_nice_grpc14.createClientFactory)().use(this.authMiddleware(profile)).use(this.retryMiddleware()).use(serverWarningMiddleware(this.logger)).use(timeoutMiddleware);
     for (const middleware of this.customMiddleware) {
       factory = factory.use(middleware);
     }
@@ -72713,6 +74245,7 @@ var ModalClient = class {
       return this.authTokenManager;
     };
     const oauthJwtKey = this.oauthJwtKey;
+    const host = new URL(profile.serverUrl).hostname;
     return async function* authMiddleware(call, options) {
       const hasOAuthCredentials = Boolean(
         profile.oauthRefreshToken && profile.oauthClientId && (profile.oauthClientSecret || oauthJwtKey)
@@ -72753,6 +74286,7 @@ var ModalClient = class {
         options.metadata.set("x-modal-token-id", profile.tokenId);
         options.metadata.set("x-modal-token-secret", profile.tokenSecret);
       }
+      options.metadata.set("x-modal-host", host);
       if (call.method.path !== "/modal.client.ModalClient/AuthTokenGet") {
         const tokenManager = getOrCreateAuthTokenManager();
         const token = await tokenManager.getToken();
@@ -73012,6 +74546,8 @@ function contextIds(batch, item, ObjectId) {
         item.inputId || batch.inputId,
         item.containerId || batch.taskId
       ].filter((id) => id);
+    case "sb":
+      return [item.containerId || batch.taskId].filter((id) => id);
     default:
       return [];
   }
@@ -73832,6 +75368,97 @@ var FunctionCallLogsManager = class extends LogsManager {
     );
   }
 };
+var SandboxLogsManager = class {
+  /** @ignore */
+  constructor(client, sandboxId, getAppId, getTaskId) {
+    this.client = client;
+    this.sandboxId = sandboxId;
+    this.getAppId = getAppId;
+    this.getTaskId = getTaskId;
+  }
+  /**
+   * Fetch Sandbox entrypoint logs corresponding to a UTC time range and
+   * optional filters.
+   *
+   * Entries are returned in chronological order.
+   *
+   * @returns An async iterable of {@link LogEntry} objects.
+   *
+   * @example
+   * ```typescript
+   * import { ModalClient } from "modal";
+   *
+   * const modal = new ModalClient();
+   * const sandbox = await modal.sandboxes.fromId("sb-...");
+   *
+   * for await (const entry of sandbox.logs.fetch({
+   *   since: new Date(Date.now() - 60 * 60 * 1_000),
+   *   source: "stdout",
+   * })) {
+   *   process.stdout.write(entry.message);
+   * }
+   * ```
+   */
+  async *fetch(params) {
+    const [appId, taskId] = await Promise.all([
+      this.getAppId(),
+      this.getTaskId()
+    ]);
+    if (!taskId) {
+      throw new ExecutionError(
+        "Cannot resolve Sandbox metadata needed for fetching logs. Wait for the Sandbox to be scheduled."
+      );
+    }
+    yield* fetchLogs(
+      this.client,
+      {
+        appId,
+        objectId: this.sandboxId,
+        taskId,
+        source: sourceToFileDescriptor(params.source),
+        searchText: params.searchText
+      },
+      params.since,
+      params.until
+    );
+  }
+  /**
+   * Fetch the most recent Sandbox entrypoint logs.
+   *
+   * Entries are returned in chronological order.
+   *
+   * @returns An async iterable of {@link LogEntry} objects.
+   *
+   * @example
+   * ```typescript
+   * import { ModalClient } from "modal";
+   *
+   * const modal = new ModalClient();
+   * const sandbox = await modal.sandboxes.fromId("sb-...");
+   *
+   * for await (const entry of sandbox.logs.tail({ entries: 20 })) {
+   *   process.stdout.write(entry.message);
+   * }
+   * ```
+   */
+  async *tail(params = {}) {
+    const [appId, taskId] = await Promise.all([
+      this.getAppId(),
+      this.getTaskId()
+    ]);
+    if (!taskId) {
+      throw new ExecutionError(
+        "Sandbox task ID cannot be empty when fetching logs. Wait for the Sandbox to be scheduled."
+      );
+    }
+    yield* tailLogs(this.client, params.entries ?? 100, {
+      appId,
+      objectId: this.sandboxId,
+      taskId,
+      source: sourceToFileDescriptor(params.source)
+    });
+  }
+};
 
 // src/function_call.ts
 var FunctionCallService = class {
@@ -74599,6 +76226,129 @@ var ClsInstance = class {
     return method;
   }
 };
+
+// src/outbound_policy.ts
+var DOMAIN_RE = /^(\*\.)?([a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?$/;
+var HEADER_NAME_RE = /^[A-Za-z0-9!#$%&'*+.^_`|~-]+$/;
+var MAX_HEADER_REPLACEMENTS = 25;
+function hasInvalidHeaderValueChar(value) {
+  for (const c of value) {
+    const code = c.codePointAt(0);
+    if (code < 32 && c !== "	" || code === 127) {
+      return true;
+    }
+  }
+  return false;
+}
+function templateReferencesKey(template) {
+  const isKeyStart = (c) => /[a-zA-Z_]/.test(c);
+  let i = template.indexOf("$");
+  while (i !== -1 && i + 1 < template.length) {
+    const c = template[i + 1];
+    if (c === "$") {
+      i = template.indexOf("$", i + 2);
+      continue;
+    }
+    if (isKeyStart(c)) {
+      return true;
+    }
+    i = template.indexOf("$", i + 1);
+  }
+  return false;
+}
+var ExperimentalOutboundPolicy = class _ExperimentalOutboundPolicy {
+  /** @internal */
+  _replacements;
+  /** @internal */
+  constructor(_replacements = []) {
+    this._replacements = _replacements;
+  }
+  /**
+   * Return a new {@link ExperimentalOutboundPolicy} with an added header replacement.
+   *
+   * @param params.domain Domain the replacements are scoped to. Supports `*.` wildcard
+   *   prefixes (matching the apex domain and subdomains) and a bare `"*"`.
+   * @param params.headers Header name -> header value. Values support `$KEY` templates
+   *   referencing keys in the replacement's `secret`.
+   * @param params.secret Named {@link Secret} (e.g. from `client.secrets.fromName`) whose
+   *   keys may be referenced in the header value templates. Static replacements pass no secret.
+   */
+  withHeaderReplacement(params) {
+    const { domain, headers, secret } = params;
+    return new _ExperimentalOutboundPolicy([
+      ...this._replacements,
+      { domain, headers: { ...headers }, secret }
+    ]);
+  }
+  /** Check all replacements, throwing `InvalidError` on the first violation found.
+   * @internal
+   */
+  _validate() {
+    let total = 0;
+    for (const replacement of this._replacements) {
+      const { domain, headers, secret } = replacement;
+      if (domain !== "*" && !DOMAIN_RE.test(domain)) {
+        throw new InvalidError(`Invalid domain: ${JSON.stringify(domain)}`);
+      }
+      const entries = Object.entries(headers);
+      if (entries.length === 0) {
+        throw new InvalidError("`headers` must contain at least one header");
+      }
+      for (const [name, value] of entries) {
+        if (!HEADER_NAME_RE.test(name)) {
+          throw new InvalidError(
+            `Invalid header name: ${JSON.stringify(name)}`
+          );
+        }
+        if (hasInvalidHeaderValueChar(value)) {
+          throw new InvalidError(
+            `Header value for ${JSON.stringify(name)} must not contain control characters (except tab)`
+          );
+        }
+        if (secret === void 0 && templateReferencesKey(value)) {
+          throw new InvalidError(
+            `Header value for ${JSON.stringify(name)} references a secret key, but no \`secret\` was passed`
+          );
+        }
+      }
+      if (secret !== void 0 && secretEnvDictHydrator(secret) !== void 0) {
+        throw new InvalidError(
+          "Outbound policies only support named secrets (e.g. `client.secrets.fromName`); ephemeral secrets (e.g. `client.secrets.fromObject`) are not yet supported"
+        );
+      }
+      total += entries.length;
+    }
+    if (total > MAX_HEADER_REPLACEMENTS) {
+      throw new InvalidError(
+        `Outbound policy cannot have more than ${MAX_HEADER_REPLACEMENTS} header replacements`
+      );
+    }
+  }
+  /** Deduplicated list of secrets referenced by the policy's replacements.
+   * @internal
+   */
+  _secrets() {
+    return [
+      ...new Set(
+        this._replacements.map((s) => s.secret).filter((s) => s !== void 0)
+      )
+    ];
+  }
+  /** Convert to the wire format. Referenced secrets must be hydrated first.
+   * @internal
+   */
+  _toProto() {
+    return OutboundPolicy.create({
+      headerReplacements: this._replacements.map(
+        (replacement) => OutboundPolicy_HeaderReplacement.create({
+          domain: replacement.domain,
+          secretId: replacement.secret?.secretId ?? "",
+          headers: replacement.headers
+        })
+      )
+    });
+  }
+};
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AlreadyExistsError,
@@ -74613,6 +76363,7 @@ var ClsInstance = class {
   ConflictError,
   ContainerProcess,
   ExecutionError,
+  ExperimentalOutboundPolicy,
   FunctionCall,
   FunctionCallLogsManager,
   FunctionCallService,
@@ -74634,6 +76385,7 @@ var ClsInstance = class {
   QueueFullError,
   QueueService,
   RemoteError,
+  ResourceExhaustedError,
   Retries,
   Sandbox,
   SandboxFilesystem,
@@ -74645,6 +76397,7 @@ var ClsInstance = class {
   SandboxFilesystemNotFoundError,
   SandboxFilesystemPathAlreadyExistsError,
   SandboxFilesystemPermissionError,
+  SandboxLogsManager,
   SandboxService,
   SandboxSnapshot,
   SandboxSnapshotService,