vmsan 0.1.0-alpha.2 → 0.1.0-alpha.21

package/dist/index.d.mts

@@ -1,3 +1,5 @@
+import { Hookable } from "hookable";
+import { ChildProcess } from "node:child_process";
 import { ErrorOptions, EvlogError, RequestLogger } from "evlog";
 import { ConsolaInstance } from "consola";
 
@@ -18,6 +20,502 @@ interface VmsanPaths {
 }
 declare function vmsanPaths(baseDir?: string): VmsanPaths;
 //#endregion
+//#region src/lib/vm-state.d.ts
+interface VmNetwork {
+  tapDevice: string;
+  hostIp: string;
+  guestIp: string;
+  subnetMask: string;
+  macAddress: string;
+  networkPolicy: string;
+  allowedDomains: string[];
+  allowedCidrs: string[];
+  deniedCidrs: string[];
+  publishedPorts: number[];
+  tunnelHostname: string | null;
+  tunnelHostnames?: string[];
+  bandwidthMbit?: number;
+  netnsName?: string;
+}
+interface VmState {
+  id: string;
+  project: string;
+  runtime: string;
+  diskSizeGb?: number;
+  status: "creating" | "running" | "stopped" | "error";
+  pid: number | null;
+  apiSocket: string;
+  chrootDir: string;
+  kernel: string;
+  rootfs: string;
+  vcpuCount: number;
+  memSizeMib: number;
+  network: VmNetwork;
+  snapshot: string | null;
+  timeoutMs: number | null;
+  timeoutAt: string | null;
+  createdAt: string;
+  error: string | null;
+  agentToken: string | null;
+  agentPort: number;
+}
+interface VmStateStore {
+  save(state: VmState): void;
+  load(id: string): VmState | null;
+  list(): VmState[];
+  update(id: string, updates: Partial<VmState>): void;
+  delete(id: string): void;
+  allocateNetworkSlot(): number;
+}
+declare function findFreeNetworkSlot(states: VmState[]): number;
+declare class FileVmStateStore implements VmStateStore {
+  private readonly dir;
+  constructor(dir: string);
+  private ensureDir;
+  save(state: VmState): void;
+  load(id: string): VmState | null;
+  list(): VmState[];
+  update(id: string, updates: Partial<VmState>): void;
+  delete(id: string): void;
+  allocateNetworkSlot(): number;
+}
+declare function getActiveTapSlots(): Set<number>;
+//#endregion
+//#region src/lib/network.d.ts
+interface NetworkConfig {
+  slot: number;
+  tapDevice: string;
+  hostIp: string;
+  guestIp: string;
+  subnetMask: string;
+  macAddress: string;
+  networkPolicy: string;
+  allowedDomains: string[];
+  allowedCidrs: string[];
+  deniedCidrs: string[];
+  publishedPorts: number[];
+  bandwidthMbit?: number;
+  netnsName?: string;
+}
+declare class NetworkManager {
+  config: NetworkConfig;
+  constructor(slot: number, networkPolicy: string, allowedDomains: string[], allowedCidrs: string[], deniedCidrs: string[], publishedPorts: number[], bandwidthMbit?: number, netnsName?: string);
+  static bootArgs(slot: number): string;
+  static fromConfig(config: NetworkConfig): NetworkManager;
+  static fromVmNetwork(network: VmNetwork): NetworkManager;
+  private nsRun;
+  setupNamespace(): void;
+  teardownNamespace(): void;
+  setupDevice(): void;
+  setupRules(): void;
+  setupThrottle(): void;
+  teardownThrottle(): void;
+  teardownRules(): void;
+  teardownDevice(): void;
+  setup(): Promise<void>;
+  teardown(): void;
+  updatePolicy(newPolicy: string, newDomains: string[], newAllowedCidrs: string[], newDeniedCidrs: string[]): void;
+}
+//#endregion
+//#region src/commands/create/types.d.ts
+declare const VALID_RUNTIMES: readonly ["base", "node22", "node22-demo", "python3.13"];
+type Runtime = (typeof VALID_RUNTIMES)[number];
+declare const VALID_NETWORK_POLICIES: readonly ["allow-all", "deny-all", "custom"];
+type NetworkPolicy = (typeof VALID_NETWORK_POLICIES)[number];
+interface CreateLifecycleState {
+  networkConfig: NetworkConfig | undefined;
+  vmId: string | undefined;
+  chrootDir: string | undefined;
+}
+interface ParsedCreateInput {
+  vcpus: number;
+  memMib: number;
+  runtime: Runtime;
+  networkPolicy: NetworkPolicy;
+  ports: number[];
+  domains: string[];
+  allowedCidrs: string[];
+  deniedCidrs: string[];
+  timeoutMs: number | null;
+  snapshotId: string | null;
+  diskSizeGb: number;
+}
+interface CreateSummaryInput {
+  vmId: string;
+  pid: number | null;
+  vcpus: number;
+  memMib: number;
+  runtime: Runtime;
+  diskSizeGb: number;
+  project: string;
+  networkPolicy: NetworkPolicy;
+  domains: string[];
+  allowedCidrs: string[];
+  deniedCidrs: string[];
+  ports: number[];
+  kernelPath: string;
+  rootfsPath: string;
+  snapshotId: string | null;
+  timeout: string | undefined;
+  socketPath: string;
+  chrootDir: string;
+  tapDevice: string;
+  hostIp: string;
+  guestIp: string;
+  macAddress: string;
+  stateFilePath: string;
+}
+interface InitialVmStateInput {
+  vmId: string;
+  project: string;
+  runtime: Runtime;
+  diskSizeGb: number;
+  kernelPath: string;
+  rootfsPath: string;
+  vcpus: number;
+  memMib: number;
+  networkPolicy: NetworkPolicy;
+  domains: string[];
+  allowedCidrs: string[];
+  deniedCidrs: string[];
+  ports: number[];
+  tapDevice: string;
+  hostIp: string;
+  guestIp: string;
+  subnetMask: string;
+  macAddress: string;
+  snapshotId: string | null;
+  timeoutMs: number | null;
+  agentToken: string | null;
+  agentPort: number;
+  bandwidthMbit?: number;
+  netnsName?: string;
+}
+//#endregion
+//#region src/commands/create/validation.d.ts
+declare function parseVcpuCount(value: string | undefined): number;
+declare function parseMemoryMib(value: string | undefined): number;
+declare function parseRuntime(value: string | undefined): Runtime;
+declare function parseNetworkPolicy(value: string | undefined): NetworkPolicy;
+declare function parsePublishedPorts(value: string | undefined): number[];
+declare function parseDomains(value: string | undefined): string[];
+declare function parseCidrList(value: string | undefined): string[];
+declare function validateCidr(cidr: string): void;
+declare function validatePublishedPortsAvailable(ports: number[], paths: VmsanPaths): void;
+interface ImageReference {
+  full: string;
+  name: string;
+  tag: string;
+  cacheKey: string;
+}
+declare function parseImageReference(ref: string): ImageReference;
+declare function parseBandwidth(value: string | undefined): number | undefined;
+declare function parseDiskSizeGb(value: string | undefined): number;
+//#endregion
+//#region src/errors/codes.d.ts
+type ValidationErrorCode = "ERR_VALIDATION_INTEGER" | "ERR_VALIDATION_RUNTIME" | "ERR_VALIDATION_NETWORK_POLICY" | "ERR_VALIDATION_PORT" | "ERR_VALIDATION_PORT_CONFLICT" | "ERR_VALIDATION_DOMAIN" | "ERR_VALIDATION_CIDR" | "ERR_VALIDATION_IMAGE_REF" | "ERR_VALIDATION_DISK_SIZE" | "ERR_VALIDATION_DURATION" | "ERR_VALIDATION_FLAGS" | "ERR_VALIDATION_POLICY_CONFLICT";
+type VmErrorCode = "ERR_VM_NOT_FOUND" | "ERR_VM_STATE_NOT_FOUND" | "ERR_VM_NOT_STOPPED" | "ERR_VM_NOT_RUNNING" | "ERR_VM_NO_AGENT_TOKEN" | "ERR_VM_CHROOT_NOT_FOUND" | "ERR_VM_NETWORK_SLOTS_EXHAUSTED" | "ERR_VM_SNAPSHOT_NOT_FOUND";
+type FirecrackerErrorCode = "ERR_FIRECRACKER_API";
+type NetworkErrorCode = "ERR_NETWORK_DEFAULT_INTERFACE";
+type TimeoutErrorCode = "ERR_TIMEOUT_SOCKET" | "ERR_TIMEOUT_LOCK" | "ERR_TIMEOUT_AGENT";
+type SetupErrorCode = "ERR_SETUP_MISSING_BINARY" | "ERR_SETUP_NO_KERNEL_DIR" | "ERR_SETUP_NO_KERNEL" | "ERR_SETUP_NO_ROOTFS_DIR" | "ERR_SETUP_NO_EXT4_ROOTFS";
+type VmsanErrorCode = ValidationErrorCode | VmErrorCode | FirecrackerErrorCode | NetworkErrorCode | TimeoutErrorCode | SetupErrorCode;
+//#endregion
+//#region src/errors/base.d.ts
+declare class VmsanError extends EvlogError {
+  readonly code: VmsanErrorCode;
+  constructor(code: VmsanErrorCode, options: ErrorOptions);
+  toJSON(): Record<string, unknown>;
+}
+//#endregion
+//#region src/errors/validation.d.ts
+declare class ValidationError extends VmsanError {
+  readonly flag?: string;
+  constructor(code: ValidationErrorCode, options: ErrorOptions & {
+    flag?: string;
+  });
+  toJSON(): Record<string, unknown>;
+}
+declare const invalidIntegerFlagError: (flag: string, value: string, min: number, max: number, unitSuffix?: string) => ValidationError;
+declare const invalidRuntimeError: (runtime: string, validRuntimes: readonly string[]) => ValidationError;
+declare const invalidNetworkPolicyError: (policy: string, validPolicies: readonly string[]) => ValidationError;
+declare const invalidPortError: (port: string) => ValidationError;
+declare const portConflictError: (conflictSummary: string) => ValidationError;
+declare const invalidDomainError: (domain: string) => ValidationError;
+declare const invalidDomainPatternError: (domain: string, detail?: string) => ValidationError;
+declare const invalidCidrFormatError: (cidr: string) => ValidationError;
+declare const invalidCidrPrefixError: (cidr: string) => ValidationError;
+declare const invalidCidrOctetError: (cidr: string) => ValidationError;
+declare const invalidImageRefEmptyError: () => ValidationError;
+declare const invalidImageRefTagError: (ref: string) => ValidationError;
+declare const invalidDiskSizeFormatError: (value: string) => ValidationError;
+declare const invalidDiskSizeRangeError: (value: string) => ValidationError;
+declare const invalidDurationError: (input: string) => ValidationError;
+declare const mutuallyExclusiveFlagsError: (flagA: string, flagB: string) => ValidationError;
+declare const policyConflictError: () => ValidationError;
+//#endregion
+//#region src/errors/vm.d.ts
+declare class VmError extends VmsanError {
+  readonly vmId?: string;
+  constructor(code: VmErrorCode, options: ErrorOptions & {
+    vmId?: string;
+  });
+  toJSON(): Record<string, unknown>;
+}
+declare const vmNotFoundError: (vmId: string) => VmError;
+declare const vmStateNotFoundError: (vmId: string) => VmError;
+declare const vmNotStoppedError: (vmId: string, currentStatus: string) => VmError;
+declare const chrootNotFoundError: (vmId: string) => VmError;
+declare const networkSlotsExhaustedError: () => VmError;
+declare const vmNotRunningError: (vmId: string, currentStatus?: string) => VmError;
+declare const vmNoAgentTokenError: (vmId: string) => VmError;
+declare const snapshotNotFoundError: (snapshotId: string) => VmError;
+//#endregion
+//#region src/errors/firecracker.d.ts
+declare class FirecrackerApiError extends VmsanError {
+  readonly method: string;
+  readonly path: string;
+  readonly httpStatus: number;
+  constructor(code: FirecrackerErrorCode, options: ErrorOptions & {
+    method: string;
+    path: string;
+    httpStatus: number;
+  });
+  toJSON(): Record<string, unknown>;
+}
+declare const firecrackerApiError: (method: string, path: string, httpStatus: number, body: string) => FirecrackerApiError;
+//#endregion
+//#region src/errors/network.d.ts
+declare class NetworkError extends VmsanError {
+  constructor(code: NetworkErrorCode, options: {
+    message: string;
+    fix?: string;
+  });
+}
+declare const defaultInterfaceNotFoundError: () => NetworkError;
+//#endregion
+//#region src/errors/timeout.d.ts
+declare class TimeoutError extends VmsanError {
+  readonly target?: string;
+  readonly timeoutMs?: number;
+  constructor(code: TimeoutErrorCode, options: ErrorOptions & {
+    target?: string;
+    timeoutMs?: number;
+  });
+  toJSON(): Record<string, unknown>;
+}
+declare const socketTimeoutError: (socketPath: string) => TimeoutError;
+declare const lockTimeoutError: (lockName: string) => TimeoutError;
+declare const agentTimeoutError: (guestIp: string, timeoutMs: number) => TimeoutError;
+//#endregion
+//#region src/errors/setup.d.ts
+declare class SetupError extends VmsanError {
+  constructor(code: SetupErrorCode, options: {
+    message: string;
+    fix?: string;
+  });
+}
+declare const missingBinaryError: (binary: string, path: string) => SetupError;
+declare const noKernelDirError: () => SetupError;
+declare const noKernelError: () => SetupError;
+declare const noRootfsDirError: () => SetupError;
+declare const noExt4RootfsError: () => SetupError;
+//#endregion
+//#region src/lib/logger/index.d.ts
+type OutputMode = "normal" | "json" | "verbose" | "silent";
+/**
+* Initialize both consola and evlog for the given output mode.
+* Call once per CLI invocation, before any command runs.
+*
+* consola = human-facing CLI output (icons, colors, boxes, progress)
+* evlog   = machine-readable structured events (--json output)
+*/
+declare function initVmsanLogger(mode: OutputMode): void;
+declare function getOutputMode(): OutputMode;
+interface CommandLogger {
+  /** Add structured context to the wide event */
+  set: RequestLogger["set"];
+  /** Record an error in the wide event */
+  error: RequestLogger["error"];
+  /** Emit the wide event (only produces output in json/verbose modes) */
+  emit: () => void;
+}
+/**
+* Create a command-scoped logger backed by an evlog RequestLogger.
+* The wide event is emitted only in json/verbose modes.
+*/
+declare function createCommandLogger(command: string): CommandLogger;
+/**
+* Create a scoped consola instance with a tag prefix.
+* Output shows as `[tag] message`.
+*/
+declare function createScopedLogger(tag: string): ConsolaInstance;
+//#endregion
+//#region src/errors/display.d.ts
+declare function handleCommandError(error: unknown, cmdLog: CommandLogger): void;
+//#endregion
+//#region src/services/vm.d.ts
+interface CreateVmOptions {
+  vcpus?: number;
+  memMib?: number;
+  diskSizeGb?: number;
+  kernelPath?: string;
+  rootfsPath?: string;
+  fromImage?: ImageReference;
+  project?: string;
+  runtime?: Runtime;
+  networkPolicy?: NetworkPolicy;
+  domains?: string[];
+  allowedCidrs?: string[];
+  deniedCidrs?: string[];
+  ports?: number[];
+  bandwidthMbit?: number;
+  disableNetns?: boolean;
+  disableSeccomp?: boolean;
+  disablePidNs?: boolean;
+  disableCgroup?: boolean;
+  timeoutMs?: number;
+  snapshotId?: string;
+}
+interface CreateVmResult {
+  vmId: string;
+  pid: number | null;
+  state: VmState;
+}
+interface StartVmResult {
+  vmId: string;
+  pid: number | null;
+  state: VmState | null;
+  success: boolean;
+  error?: VmsanError;
+}
+interface StopResult {
+  vmId: string;
+  success: boolean;
+  error?: VmsanError;
+  alreadyStopped?: boolean;
+}
+interface UpdatePolicyResult {
+  vmId: string;
+  success: boolean;
+  previousPolicy: NetworkPolicy;
+  newPolicy: NetworkPolicy;
+  error?: VmsanError;
+}
+declare class VMService {
+  readonly paths: VmsanContext["paths"];
+  readonly store: VmStateStore;
+  readonly hooks: VmsanContext["hooks"];
+  readonly logger: VmsanContext["logger"];
+  constructor(ctx: VmsanContext);
+  list(): VmState[];
+  get(vmId: string): VmState | null;
+  create(opts: CreateVmOptions): Promise<CreateVmResult>;
+  start(vmId: string): Promise<StartVmResult>;
+  stop(vmId: string): Promise<StopResult>;
+  updateNetworkPolicy(vmId: string, policy: NetworkPolicy, domains: string[], allowedCidrs: string[], deniedCidrs: string[]): Promise<UpdatePolicyResult>;
+  remove(vmId: string, opts?: {
+    force?: boolean;
+  }): Promise<StopResult>;
+  private buildCgroupConfig;
+  private bootVm;
+  private markAsError;
+}
+//#endregion
+//#region src/hooks.d.ts
+type VmPhase = "create" | "start" | "stop" | "remove";
+interface VmsanHooks {
+  "vm:beforeCreate": (params: {
+    vmId: string;
+    options: CreateVmOptions;
+  }) => void | Promise<void>;
+  "vm:afterCreate": (state: VmState) => void | Promise<void>;
+  "vm:beforeStart": (params: {
+    vmId: string;
+    state: VmState;
+  }) => void | Promise<void>;
+  "vm:afterStart": (state: VmState) => void | Promise<void>;
+  "vm:beforeStop": (params: {
+    vmId: string;
+    state: VmState;
+  }) => void | Promise<void>;
+  "vm:afterStop": (params: {
+    vmId: string;
+    previousStatus: VmState["status"];
+  }) => void | Promise<void>;
+  "vm:beforeRemove": (params: {
+    vmId: string;
+    state: VmState;
+    force: boolean;
+  }) => void | Promise<void>;
+  "vm:afterRemove": (params: {
+    vmId: string;
+  }) => void | Promise<void>;
+  "vm:error": (params: {
+    vmId: string;
+    error: Error;
+    phase: VmPhase;
+  }) => void | Promise<void>;
+  "network:afterSetup": (params: {
+    vmId: string;
+    slot: number;
+    networkConfig: NetworkConfig;
+    domains: string[];
+    networkPolicy: NetworkPolicy;
+  }) => void | Promise<void>;
+  "network:afterTeardown": (params: {
+    vmId: string;
+    networkConfig: NetworkConfig;
+  }) => void | Promise<void>;
+  "network:policyChange": (params: {
+    vmId: string;
+    previousPolicy: NetworkPolicy;
+    newPolicy: NetworkPolicy;
+  }) => void | Promise<void>;
+  "state:change": (params: {
+    vmId: string;
+    field: string;
+    oldValue: unknown;
+    newValue: unknown;
+  }) => void | Promise<void>;
+}
+//#endregion
+//#region src/plugin.d.ts
+interface VmsanPlugin {
+  name: string;
+  setup: (ctx: VmsanContext) => void | Promise<void>;
+}
+declare function definePlugin(plugin: VmsanPlugin): VmsanPlugin;
+//#endregion
+//#region src/vmsan-logger.d.ts
+interface VmsanLogger {
+  debug: (...args: unknown[]) => void;
+  info: (...args: unknown[]) => void;
+  success: (...args: unknown[]) => void;
+  warn: (...args: unknown[]) => void;
+  error: (...args: unknown[]) => void;
+  start: (...args: unknown[]) => void;
+  box: (message: string) => void;
+  withTag: (tag: string) => VmsanLogger;
+}
+declare function createDefaultLogger(): VmsanLogger;
+declare function createSilentLogger(): VmsanLogger;
+//#endregion
+//#region src/context.d.ts
+interface VmsanOptions {
+  paths?: string | VmsanPaths;
+  store?: VmStateStore;
+  logger?: VmsanLogger;
+  plugins?: VmsanPlugin[];
+}
+interface VmsanContext {
+  readonly paths: VmsanPaths;
+  readonly store: VmStateStore;
+  readonly hooks: Hookable<VmsanHooks>;
+  readonly logger: VmsanLogger;
+}
+declare function createVmsan(options?: VmsanOptions): Promise<VMService>;
+//#endregion
 //#region src/generated/firecracker-api.d.ts
 /* eslint-disable */
 /* prettier-ignore */
@@ -2281,6 +2779,76 @@ declare class FirecrackerClient {
   static getVersion(baseDir: string): Promise<string | undefined>;
 }
 //#endregion
+//#region src/lib/command.d.ts
+interface LogEntry {
+  stream: "stdout" | "stderr";
+  data: string;
+}
+interface CommandInit {
+  agent: AgentClient;
+  cmdId: string;
+  startedAt: Date;
+  stream: AsyncIterable<RunEvent>;
+  signal?: AbortSignal;
+  onStdout?: (line: string) => void;
+  onStderr?: (line: string) => void;
+}
+declare class CommandFinished {
+  readonly cmdId: string;
+  readonly exitCode: number;
+  readonly stdout: string;
+  readonly stderr: string;
+  readonly output: string;
+  readonly timedOut: boolean;
+  readonly startedAt: Date;
+  constructor(opts: {
+    cmdId: string;
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+    output: string;
+    timedOut: boolean;
+    startedAt: Date;
+  });
+  get ok(): boolean;
+}
+declare class Command {
+  readonly cmdId: string;
+  private _startedAt;
+  private _exitCode;
+  private _timedOut;
+  private _logEntries;
+  private _logTruncated;
+  private _eventQueue;
+  private _completion;
+  private _stdoutPromise;
+  private _stderrPromise;
+  private _outputPromise;
+  private _agent;
+  constructor(init: CommandInit);
+  get startedAt(): Date;
+  get exitCode(): number | null;
+  logs(opts?: {
+    signal?: AbortSignal;
+  }): AsyncGenerator<LogEntry>;
+  stdout(opts?: {
+    signal?: AbortSignal;
+  }): Promise<string>;
+  stderr(opts?: {
+    signal?: AbortSignal;
+  }): Promise<string>;
+  output(stream?: "stdout" | "stderr" | "both", opts?: {
+    signal?: AbortSignal;
+  }): Promise<string>;
+  wait(opts?: {
+    signal?: AbortSignal;
+  }): Promise<CommandFinished>;
+  kill(signal?: string, opts?: {
+    abortSignal?: AbortSignal;
+  }): Promise<void>;
+  private _withSignal;
+}
+//#endregion
 //#region src/services/agent.d.ts
 interface RunParams {
   cmd: string;
@@ -2289,6 +2857,7 @@ interface RunParams {
   env?: Record<string, string>;
   timeoutMs?: number;
   detached?: boolean;
+  user?: string;
 }
 type RunEventType = "started" | "stdout" | "stderr" | "exit" | "timeout" | "error";
 interface RunEvent {
@@ -2305,289 +2874,109 @@ interface WriteFileEntry {
   content: Buffer;
 }
 interface SessionInfo {
-  sessionId: string;
-  shell: string;
-  createdAt: string;
-  subscriberCount: number;
-}
-declare class AgentClient {
-  private baseUrl;
-  private token;
-  constructor(baseUrl: string, token: string);
-  health(): Promise<{
-    status: string;
-    version: string;
-  }>;
-  run(params: RunParams): AsyncGenerator<RunEvent>;
-  killCommand(cmdId: string, signal?: string): Promise<void>;
-  writeFiles(files: WriteFileEntry[], extractDir?: string): Promise<void>;
-  listShellSessions(): Promise<SessionInfo[]>;
-  killShellSession(sessionId: string): Promise<void>;
-  readFile(path: string): Promise<Buffer | null>;
-}
-//#endregion
-//#region src/lib/vm-state.d.ts
-interface VmNetwork {
-  tapDevice: string;
-  hostIp: string;
-  guestIp: string;
-  subnetMask: string;
-  macAddress: string;
-  networkPolicy: string;
-  allowedDomains: string[];
-  allowedCidrs: string[];
-  deniedCidrs: string[];
-  publishedPorts: number[];
-  tunnelHostname: string | null;
-  tunnelHostnames?: string[];
-  bandwidthMbit?: number;
-  netnsName?: string;
-}
-interface VmState {
-  id: string;
-  project: string;
-  runtime: string;
-  diskSizeGb?: number;
-  status: "creating" | "running" | "stopped" | "error";
-  pid: number | null;
-  apiSocket: string;
-  chrootDir: string;
-  kernel: string;
-  rootfs: string;
-  vcpuCount: number;
-  memSizeMib: number;
-  network: VmNetwork;
-  snapshot: string | null;
-  timeoutMs: number | null;
-  timeoutAt: string | null;
-  createdAt: string;
-  error: string | null;
-  agentToken: string | null;
-  agentPort: number;
-}
-interface VmStateStore {
-  save(state: VmState): void;
-  load(id: string): VmState | null;
-  list(): VmState[];
-  update(id: string, updates: Partial<VmState>): void;
-  delete(id: string): void;
-  allocateNetworkSlot(): number;
-}
-declare class FileVmStateStore implements VmStateStore {
-  private readonly dir;
-  constructor(dir: string);
-  private ensureDir;
-  save(state: VmState): void;
-  load(id: string): VmState | null;
-  list(): VmState[];
-  update(id: string, updates: Partial<VmState>): void;
-  delete(id: string): void;
-  allocateNetworkSlot(): number;
-  private static getActiveTapSlots;
-}
-//#endregion
-//#region src/errors/codes.d.ts
-type ValidationErrorCode = "ERR_VALIDATION_INTEGER" | "ERR_VALIDATION_RUNTIME" | "ERR_VALIDATION_NETWORK_POLICY" | "ERR_VALIDATION_PORT" | "ERR_VALIDATION_PORT_CONFLICT" | "ERR_VALIDATION_DOMAIN" | "ERR_VALIDATION_CIDR" | "ERR_VALIDATION_IMAGE_REF" | "ERR_VALIDATION_DISK_SIZE" | "ERR_VALIDATION_DURATION" | "ERR_VALIDATION_FLAGS" | "ERR_VALIDATION_POLICY_CONFLICT";
-type VmErrorCode = "ERR_VM_NOT_FOUND" | "ERR_VM_STATE_NOT_FOUND" | "ERR_VM_NOT_STOPPED" | "ERR_VM_NOT_RUNNING" | "ERR_VM_CHROOT_NOT_FOUND" | "ERR_VM_NETWORK_SLOTS_EXHAUSTED" | "ERR_VM_SNAPSHOT_NOT_FOUND";
-type FirecrackerErrorCode = "ERR_FIRECRACKER_API";
-type NetworkErrorCode = "ERR_NETWORK_DEFAULT_INTERFACE";
-type TimeoutErrorCode = "ERR_TIMEOUT_SOCKET" | "ERR_TIMEOUT_LOCK" | "ERR_TIMEOUT_AGENT";
-type SetupErrorCode = "ERR_SETUP_MISSING_BINARY" | "ERR_SETUP_NO_KERNEL_DIR" | "ERR_SETUP_NO_KERNEL" | "ERR_SETUP_NO_ROOTFS_DIR" | "ERR_SETUP_NO_EXT4_ROOTFS";
-type VmsanErrorCode = ValidationErrorCode | VmErrorCode | FirecrackerErrorCode | NetworkErrorCode | TimeoutErrorCode | SetupErrorCode;
-//#endregion
-//#region src/errors/base.d.ts
-declare class VmsanError extends EvlogError {
-  readonly code: VmsanErrorCode;
-  constructor(code: VmsanErrorCode, options: ErrorOptions);
-  toJSON(): Record<string, unknown>;
-}
-//#endregion
-//#region src/errors/validation.d.ts
-declare class ValidationError extends VmsanError {
-  readonly flag?: string;
-  constructor(code: ValidationErrorCode, options: ErrorOptions & {
-    flag?: string;
-  });
-  toJSON(): Record<string, unknown>;
-}
-declare const invalidIntegerFlagError: (flag: string, value: string, min: number, max: number, unitSuffix?: string) => ValidationError;
-declare const invalidRuntimeError: (runtime: string, validRuntimes: readonly string[]) => ValidationError;
-declare const invalidNetworkPolicyError: (policy: string, validPolicies: readonly string[]) => ValidationError;
-declare const invalidPortError: (port: string) => ValidationError;
-declare const portConflictError: (conflictSummary: string) => ValidationError;
-declare const invalidDomainError: (domain: string) => ValidationError;
-declare const invalidDomainPatternError: (domain: string, detail?: string) => ValidationError;
-declare const invalidCidrFormatError: (cidr: string) => ValidationError;
-declare const invalidCidrPrefixError: (cidr: string) => ValidationError;
-declare const invalidCidrOctetError: (cidr: string) => ValidationError;
-declare const invalidImageRefEmptyError: () => ValidationError;
-declare const invalidImageRefTagError: (ref: string) => ValidationError;
-declare const invalidDiskSizeFormatError: (value: string) => ValidationError;
-declare const invalidDiskSizeRangeError: (value: string) => ValidationError;
-declare const invalidDurationError: (input: string) => ValidationError;
-declare const mutuallyExclusiveFlagsError: (flagA: string, flagB: string) => ValidationError;
-declare const policyConflictError: () => ValidationError;
-//#endregion
-//#region src/errors/vm.d.ts
-declare class VmError extends VmsanError {
-  readonly vmId?: string;
-  constructor(code: VmErrorCode, options: ErrorOptions & {
-    vmId?: string;
-  });
-  toJSON(): Record<string, unknown>;
+  sessionId: string;
+  shell: string;
+  createdAt: string;
+  subscriberCount: number;
 }
-declare const vmNotFoundError: (vmId: string) => VmError;
-declare const vmStateNotFoundError: (vmId: string) => VmError;
-declare const vmNotStoppedError: (vmId: string, currentStatus: string) => VmError;
-declare const chrootNotFoundError: (vmId: string) => VmError;
-declare const networkSlotsExhaustedError: () => VmError;
-declare const vmNotRunningError: (vmId: string) => VmError;
-declare const snapshotNotFoundError: (snapshotId: string) => VmError;
-//#endregion
-//#region src/errors/firecracker.d.ts
-declare class FirecrackerApiError extends VmsanError {
-  readonly method: string;
-  readonly path: string;
-  readonly httpStatus: number;
-  constructor(code: FirecrackerErrorCode, options: ErrorOptions & {
-    method: string;
-    path: string;
-    httpStatus: number;
-  });
-  toJSON(): Record<string, unknown>;
+interface RunCommandParams extends RunParams {
+  signal?: AbortSignal;
+  onStdout?: (line: string) => void;
+  onStderr?: (line: string) => void;
 }
-declare const firecrackerApiError: (method: string, path: string, httpStatus: number, body: string) => FirecrackerApiError;
-//#endregion
-//#region src/errors/network.d.ts
-declare class NetworkError extends VmsanError {
-  constructor(code: NetworkErrorCode, options: {
-    message: string;
-    fix?: string;
-  });
+declare class AgentClient {
+  private baseUrl;
+  private token;
+  constructor(baseUrl: string, token: string);
+  health(): Promise<{
+    status: string;
+    version: string;
+  }>;
+  run(params: RunParams, signal?: AbortSignal): AsyncGenerator<RunEvent>;
+  killCommand(cmdId: string, signal?: string, abortSignal?: AbortSignal): Promise<void>;
+  writeFiles(files: WriteFileEntry[], extractDir?: string): Promise<void>;
+  listShellSessions(): Promise<SessionInfo[]>;
+  killShellSession(sessionId: string): Promise<void>;
+  exec(params: RunParams, opts?: {
+    signal?: AbortSignal;
+    onStdout?: (line: string) => void;
+    onStderr?: (line: string) => void;
+  }): Promise<Command>;
+  runCommand(cmd: string, args?: string[], opts?: {
+    signal?: AbortSignal;
+  }): Promise<CommandFinished>;
+  runCommand(params: RunCommandParams & {
+    detached: true;
+  }): Promise<Command>;
+  runCommand(params: RunCommandParams): Promise<CommandFinished>;
+  readFile(path: string): Promise<Buffer | null>;
 }
-declare const defaultInterfaceNotFoundError: () => NetworkError;
 //#endregion
-//#region src/errors/timeout.d.ts
-declare class TimeoutError extends VmsanError {
-  readonly target?: string;
-  readonly timeoutMs?: number;
-  constructor(code: TimeoutErrorCode, options: ErrorOptions & {
-    target?: string;
-    timeoutMs?: number;
-  });
-  toJSON(): Record<string, unknown>;
+//#region src/lib/timeout-extender.d.ts
+interface TimeoutExtenderOptions {
+  vmId: string;
+  store: VmStateStore;
+  paths: VmsanPaths;
+  intervalMs?: number;
+  signal?: AbortSignal;
 }
-declare const socketTimeoutError: (socketPath: string) => TimeoutError;
-declare const lockTimeoutError: (lockName: string) => TimeoutError;
-declare const agentTimeoutError: (guestIp: string, timeoutMs: number) => TimeoutError;
-//#endregion
-//#region src/errors/setup.d.ts
-declare class SetupError extends VmsanError {
-  constructor(code: SetupErrorCode, options: {
-    message: string;
-    fix?: string;
-  });
+declare class TimeoutExtender {
+  private _timer;
+  private _previousKillerPid;
+  private readonly _vmId;
+  private readonly _store;
+  private readonly _paths;
+  private readonly _intervalMs;
+  private readonly _signal?;
+  constructor(opts: TimeoutExtenderOptions);
+  start(): void;
+  stop(): void;
+  private _extendSafe;
+  private _extend;
 }
-declare const missingBinaryError: (binary: string, path: string) => SetupError;
-declare const noKernelDirError: () => SetupError;
-declare const noKernelError: () => SetupError;
-declare const noRootfsDirError: () => SetupError;
-declare const noExt4RootfsError: () => SetupError;
 //#endregion
-//#region src/lib/logger/index.d.ts
-type OutputMode = "normal" | "json" | "verbose" | "silent";
+//#region src/lib/timeout-killer.d.ts
+interface SpawnTimeoutKillerOpts {
+  vmId: string;
+  pid: number;
+  timeoutMs: number;
+  stateFile: string;
+}
 /**
-* Initialize both consola and evlog for the given output mode.
-* Call once per CLI invocation, before any command runs.
-*
-* consola = human-facing CLI output (icons, colors, boxes, progress)
-* evlog   = machine-readable structured events (--json output)
+* Spawn a detached bash process that kills the VM after timeout.
+* The process sleeps for the timeout duration, then verifies the VM
+* is still running with the expected PID before sending SIGTERM.
 */
-declare function initVmsanLogger(mode: OutputMode): void;
-declare function getOutputMode(): OutputMode;
-interface CommandLogger {
-  /** Add structured context to the wide event */
-  set: RequestLogger["set"];
-  /** Record an error in the wide event */
-  error: RequestLogger["error"];
-  /** Emit the wide event (only produces output in json/verbose modes) */
-  emit: () => void;
+declare function spawnTimeoutKiller(opts: SpawnTimeoutKillerOpts): ChildProcess;
+//#endregion
+//#region src/lib/vm-context.d.ts
+interface RunningVmContext {
+  state: VmState & {
+    agentToken: string;
+  };
+  guestIp: string;
+  port: number;
+  store: FileVmStateStore;
 }
 /**
-* Create a command-scoped logger backed by an evlog RequestLogger.
-* The wide event is emitted only in json/verbose modes.
+* Load VM state and validate it's running with an agent token.
+* Throws VmError on failure (handled by handleCommandError in the caller).
 */
-declare function createCommandLogger(command: string): CommandLogger;
+declare function resolveVmState(vmId: string, paths: VmsanPaths): RunningVmContext;
 /**
-* Create a scoped consola instance with a tag prefix.
-* Output shows as `[tag] message`.
+* Poll the agent health endpoint until it responds OK.
 */
-declare function createScopedLogger(tag: string): ConsolaInstance;
-//#endregion
-//#region src/errors/display.d.ts
-declare function handleCommandError(error: unknown, cmdLog: CommandLogger): void;
+declare function waitForAgent(guestIp: string, port: number, timeoutMs?: number): Promise<void>;
 //#endregion
-//#region src/services/vm.d.ts
-interface StopResult {
-  vmId: string;
-  success: boolean;
-  error?: VmsanError;
-  alreadyStopped?: boolean;
-}
-interface UpdatePolicyResult {
-  vmId: string;
-  success: boolean;
-  previousPolicy: string;
-  newPolicy: string;
-  error?: VmsanError;
-}
-declare class VMService {
-  protected readonly paths: VmsanPaths;
-  protected store: FileVmStateStore;
-  constructor(paths: VmsanPaths);
+//#region src/stores/memory.d.ts
+declare class MemoryVmStateStore implements VmStateStore {
+  private states;
+  save(state: VmState): void;
+  load(id: string): VmState | null;
   list(): VmState[];
-  get(vmId: string): VmState | null;
-  stop(vmId: string): Promise<StopResult>;
-  updateNetworkPolicy(vmId: string, policy: string, domains: string[], allowedCidrs: string[], deniedCidrs: string[]): Promise<UpdatePolicyResult>;
-  remove(vmId: string, opts?: {
-    force?: boolean;
-  }): Promise<StopResult>;
-}
-//#endregion
-//#region src/lib/network.d.ts
-interface NetworkConfig {
-  slot: number;
-  tapDevice: string;
-  hostIp: string;
-  guestIp: string;
-  subnetMask: string;
-  macAddress: string;
-  networkPolicy: string;
-  allowedDomains: string[];
-  allowedCidrs: string[];
-  deniedCidrs: string[];
-  publishedPorts: number[];
-  bandwidthMbit?: number;
-  netnsName?: string;
-}
-declare class NetworkManager {
-  config: NetworkConfig;
-  constructor(slot: number, networkPolicy: string, allowedDomains: string[], allowedCidrs: string[], deniedCidrs: string[], publishedPorts: number[], bandwidthMbit?: number, netnsName?: string);
-  static bootArgs(slot: number): string;
-  static fromConfig(config: NetworkConfig): NetworkManager;
-  static fromVmNetwork(network: VmNetwork): NetworkManager;
-  private nsRun;
-  setupNamespace(): void;
-  teardownNamespace(): void;
-  setupDevice(): void;
-  setupRules(): void;
-  setupThrottle(): void;
-  teardownThrottle(): void;
-  teardownRules(): void;
-  teardownDevice(): void;
-  setup(): Promise<void>;
-  teardown(): void;
-  updatePolicy(newPolicy: string, newDomains: string[], newAllowedCidrs: string[], newDeniedCidrs: string[]): void;
+  update(id: string, updates: Partial<VmState>): void;
+  delete(id: string): void;
+  allocateNetworkSlot(): number;
 }
 //#endregion
 //#region src/lib/jailer.d.ts
@@ -2654,6 +3043,8 @@ interface ShellSessionOptions {
   token: string;
   shell?: string;
   sessionId?: string;
+  initialCommand?: string;
+  user?: string;
 }
 interface ShellCloseInfo {
   /** true when the shell process exited (e.g. user typed `exit`) */
@@ -2706,6 +3097,7 @@ declare class PidFile {
 }
 //#endregion
 //#region src/lib/utils.d.ts
+declare function toError(err: unknown): Error;
 /**
 * Send a signal to a process. Returns true if delivered, false if
 * the process is already dead (ESRCH). Falls back to sudo for
@@ -2732,81 +3124,6 @@ declare function table<T>(opts: {
   }>;
 }): string;
 //#endregion
-//#region src/commands/create/types.d.ts
-declare const VALID_RUNTIMES: readonly ["base", "node22", "node22-demo", "python3.13"];
-type Runtime = (typeof VALID_RUNTIMES)[number];
-declare const VALID_NETWORK_POLICIES: readonly ["allow-all", "deny-all", "custom"];
-type NetworkPolicy = (typeof VALID_NETWORK_POLICIES)[number];
-interface CreateLifecycleState {
-  networkConfig: NetworkConfig | undefined;
-  vmId: string | undefined;
-  chrootDir: string | undefined;
-}
-interface ParsedCreateInput {
-  vcpus: number;
-  memMib: number;
-  runtime: Runtime;
-  networkPolicy: NetworkPolicy;
-  ports: number[];
-  domains: string[];
-  allowedCidrs: string[];
-  deniedCidrs: string[];
-  timeoutMs: number | null;
-  snapshotId: string | null;
-  diskSizeGb: number;
-}
-interface CreateSummaryInput {
-  vmId: string;
-  pid: number | null;
-  vcpus: number;
-  memMib: number;
-  runtime: Runtime;
-  diskSizeGb: number;
-  project: string;
-  networkPolicy: NetworkPolicy;
-  domains: string[];
-  allowedCidrs: string[];
-  deniedCidrs: string[];
-  ports: number[];
-  kernelPath: string;
-  rootfsPath: string;
-  snapshotId: string | null;
-  timeout: string | undefined;
-  socketPath: string;
-  chrootDir: string;
-  tapDevice: string;
-  hostIp: string;
-  guestIp: string;
-  macAddress: string;
-  stateFilePath: string;
-}
-interface InitialVmStateInput {
-  vmId: string;
-  project: string;
-  runtime: Runtime;
-  diskSizeGb: number;
-  kernelPath: string;
-  rootfsPath: string;
-  vcpus: number;
-  memMib: number;
-  networkPolicy: NetworkPolicy;
-  domains: string[];
-  allowedCidrs: string[];
-  deniedCidrs: string[];
-  ports: number[];
-  tapDevice: string;
-  hostIp: string;
-  guestIp: string;
-  subnetMask: string;
-  macAddress: string;
-  snapshotId: string | null;
-  timeoutMs: number | null;
-  agentToken: string | null;
-  agentPort: number;
-  bandwidthMbit?: number;
-  netnsName?: string;
-}
-//#endregion
 //#region src/commands/create/input.d.ts
 interface CreateCommandRuntimeArgs {
   vcpus?: string;
@@ -2837,35 +3154,12 @@ declare function waitForSocket(socketPath: string, timeoutMs?: number): Promise<
 declare function getVmPid(vmId: string): number | null;
 declare function getVmJailerPid(vmId: string): number | null;
 //#endregion
-//#region src/commands/create/connect.d.ts
-declare function waitForAgent(guestIp: string, port: number, timeoutMs?: number): Promise<void>;
-//#endregion
 //#region src/commands/create/cleanup.d.ts
 declare function killOrphanVmProcess(vmId: string): void;
 declare function markVmAsError(vmId: string, error: unknown, paths: VmsanPaths): void;
 declare function cleanupNetwork(networkConfig: NetworkConfig | undefined): void;
 declare function cleanupChroot(chrootDir: string | undefined): void;
 //#endregion
-//#region src/commands/create/validation.d.ts
-declare function parseVcpuCount(value: string | undefined): number;
-declare function parseMemoryMib(value: string | undefined): number;
-declare function parseRuntime(value: string | undefined): Runtime;
-declare function parseNetworkPolicy(value: string | undefined): NetworkPolicy;
-declare function parsePublishedPorts(value: string | undefined): number[];
-declare function parseDomains(value: string | undefined): string[];
-declare function parseCidrList(value: string | undefined): string[];
-declare function validateCidr(cidr: string): void;
-declare function validatePublishedPortsAvailable(ports: number[], paths: VmsanPaths): void;
-interface ImageReference {
-  full: string;
-  name: string;
-  tag: string;
-  cacheKey: string;
-}
-declare function parseImageReference(ref: string): ImageReference;
-declare function parseBandwidth(value: string | undefined): number | undefined;
-declare function parseDiskSizeGb(value: string | undefined): number;
-//#endregion
 //#region src/lib/seccomp.d.ts
 /**
 * Compile a Firecracker seccomp JSON filter to BPF using seccompiler-bin.
@@ -2889,4 +3183,4 @@ declare function resolveImageRootfs(imageRef: ImageReference, registryDir: strin
 //#region src/index.d.ts
 declare function getFirecrackerVersion(dir?: string): Promise<string | undefined>;
 //#endregion
-export { AgentClient, type CgroupConfig, type CommandLogger, type CreateCommandRuntimeArgs, type CreateLifecycleState, type CreateSummaryInput, FileLock, FileVmStateStore, FirecrackerApiError, FirecrackerClient, type components as FirecrackerComponents, type FirecrackerErrorCode, type paths as FirecrackerPaths, type ImageReference, type InitialVmStateInput, Jailer, type JailerPaths, type NetworkConfig, NetworkError, type NetworkErrorCode, NetworkManager, type NetworkPolicy, type OutputMode, type ParsedCreateInput, PidFile, type PrepareChrootConfig, type RunEvent, type RunParams, type Runtime, type SessionInfo, SetupError, type SetupErrorCode, ShellSession, type ShellSessionOptions, type SpawnJailerConfig, type StopResult, TimeoutError, type TimeoutErrorCode, type UpdatePolicyResult, type VALID_NETWORK_POLICIES, type VALID_RUNTIMES, VMService, ValidationError, type ValidationErrorCode, VmError, type VmErrorCode, type VmNetwork, type VmState, type VmStateStore, VmsanError, type VmsanErrorCode, type VmsanPaths, type WriteFileEntry, agentTimeoutError, buildCreateSummaryLines, buildInitialVmState, chrootNotFoundError, cleanupChroot, cleanupNetwork, compileSeccompFilter, connectShell, createCommandLogger, createScopedLogger, defaultInterfaceNotFoundError, detectCgroupVersion, ensureSeccompFilter, findKernel, findRootfs, firecrackerApiError, firecrackerFetch, generateVmId, getFirecrackerVersion, getOutputMode, getVmJailerPid, getVmPid, handleCommandError, initVmsanLogger, invalidCidrFormatError, invalidCidrOctetError, invalidCidrPrefixError, invalidDiskSizeFormatError, invalidDiskSizeRangeError, invalidDomainError, invalidDomainPatternError, invalidDurationError, invalidImageRefEmptyError, invalidImageRefTagError, invalidIntegerFlagError, invalidNetworkPolicyError, invalidPortError, invalidRuntimeError, isProcessAlive, killOrphanVmProcess, lockTimeoutError, markVmAsError, missingBinaryError, mkdirSecure, mutuallyExclusiveFlagsError, networkSlotsExhaustedError, noExt4RootfsError, noKernelDirError, noKernelError, noRootfsDirError, parseBandwidth, parseCidrList, parseCreateInput, parseDiskSizeGb, parseDomains, parseDuration, parseImageReference, parseMemoryMib, parseNetworkPolicy, parsePublishedPorts, parseRuntime, parseVcpuCount, policyConflictError, portConflictError, resolveImageRootfs, safeKill, snapshotNotFoundError, socketTimeoutError, table, timeAgo, timeRemaining, validateCidr, validateEnvironment, validatePublishedPortsAvailable, vmNotFoundError, vmNotRunningError, vmNotStoppedError, vmStateNotFoundError, vmsanPaths, waitForAgent, waitForSocket, writeSecure };
+export { AgentClient, type CgroupConfig, type CommandLogger, type CreateCommandRuntimeArgs, type CreateLifecycleState, type CreateSummaryInput, type CreateVmOptions, type CreateVmResult, FileLock, FileVmStateStore, FirecrackerApiError, FirecrackerClient, type components as FirecrackerComponents, type FirecrackerErrorCode, type paths as FirecrackerPaths, type ImageReference, type InitialVmStateInput, Jailer, type JailerPaths, MemoryVmStateStore, type NetworkConfig, NetworkError, type NetworkErrorCode, NetworkManager, type NetworkPolicy, type OutputMode, type ParsedCreateInput, PidFile, type PrepareChrootConfig, type RunEvent, type RunParams, type RunningVmContext, type Runtime, type SessionInfo, SetupError, type SetupErrorCode, ShellSession, type ShellSessionOptions, type SpawnJailerConfig, type SpawnTimeoutKillerOpts, type StartVmResult, type StopResult, TimeoutError, type TimeoutErrorCode, TimeoutExtender, type TimeoutExtenderOptions, type UpdatePolicyResult, type VALID_NETWORK_POLICIES, type VALID_RUNTIMES, VMService, ValidationError, type ValidationErrorCode, VmError, type VmErrorCode, type VmNetwork, type VmPhase, type VmState, type VmStateStore, type VmsanContext, VmsanError, type VmsanErrorCode, type VmsanHooks, type VmsanLogger, type VmsanOptions, type VmsanPaths, type VmsanPlugin, type WriteFileEntry, agentTimeoutError, buildCreateSummaryLines, buildInitialVmState, chrootNotFoundError, cleanupChroot, cleanupNetwork, compileSeccompFilter, connectShell, createCommandLogger, createDefaultLogger, createScopedLogger, createSilentLogger, createVmsan, defaultInterfaceNotFoundError, definePlugin, detectCgroupVersion, ensureSeccompFilter, findFreeNetworkSlot, findKernel, findRootfs, firecrackerApiError, firecrackerFetch, generateVmId, getActiveTapSlots, getFirecrackerVersion, getOutputMode, getVmJailerPid, getVmPid, handleCommandError, initVmsanLogger, invalidCidrFormatError, invalidCidrOctetError, invalidCidrPrefixError, invalidDiskSizeFormatError, invalidDiskSizeRangeError, invalidDomainError, invalidDomainPatternError, invalidDurationError, invalidImageRefEmptyError, invalidImageRefTagError, invalidIntegerFlagError, invalidNetworkPolicyError, invalidPortError, invalidRuntimeError, isProcessAlive, killOrphanVmProcess, lockTimeoutError, markVmAsError, missingBinaryError, mkdirSecure, mutuallyExclusiveFlagsError, networkSlotsExhaustedError, noExt4RootfsError, noKernelDirError, noKernelError, noRootfsDirError, parseBandwidth, parseCidrList, parseCreateInput, parseDiskSizeGb, parseDomains, parseDuration, parseImageReference, parseMemoryMib, parseNetworkPolicy, parsePublishedPorts, parseRuntime, parseVcpuCount, policyConflictError, portConflictError, resolveImageRootfs, resolveVmState, safeKill, snapshotNotFoundError, socketTimeoutError, spawnTimeoutKiller, table, timeAgo, timeRemaining, toError, validateCidr, validateEnvironment, validatePublishedPortsAvailable, vmNoAgentTokenError, vmNotFoundError, vmNotRunningError, vmNotStoppedError, vmStateNotFoundError, vmsanPaths, waitForAgent, waitForSocket, writeSecure };