@computesdk/cli 1.0.13 → 1.0.15

package/dist/index.js

@@ -23,7 +23,7 @@ import * as readline from "readline";
 import * as path2 from "path";
 import * as os from "os";
 import * as fs from "fs";
-import pc2 from "picocolors";
+import pc4 from "picocolors";
 import { compute } from "computesdk";
 async function startREPL(sandbox, provider) {
   void provider;
@@ -34,8 +34,8 @@ async function startREPL(sandbox, provider) {
   await runSession(ctx);
 }
 function buildPrompt(sandboxId) {
-  if (!sandboxId) return pc2.gray("[no sandbox] ") + pc2.bold("$ ");
-  return pc2.cyan(`[${sandboxId}] `) + pc2.bold("$ ");
+  if (!sandboxId) return pc4.gray("[no sandbox] ") + pc4.bold("$ ");
+  return pc4.cyan(`[${sandboxId}] `) + pc4.bold("$ ");
 }
 function runSession(ctx) {
   const rl = readline.createInterface({
@@ -80,13 +80,13 @@ function runSession(ctx) {
             return;
           }
         } else if (ctx.sandboxes.size === 0) {
-          console.log(pc2.yellow("No active sandbox. Use /new to create one."));
+          console.log(pc4.yellow("No active sandbox. Use /new to create one."));
         } else {
           const sandbox = ctx.sandboxes.get(ctx.activeSandboxId);
           await executeCommand(sandbox, trimmed);
         }
       } catch (error) {
-        console.log(pc2.red(`\u2717 ${error.message}`));
+        console.log(pc4.red(`\u2717 ${error.message}`));
       }
       if (!resolved) {
         rl.prompt();
@@ -104,13 +104,13 @@ async function executeCommand(sandbox, command) {
     }
   }
   if (result.stderr) {
-    process.stderr.write(pc2.red(result.stderr));
+    process.stderr.write(pc4.red(result.stderr));
     if (!result.stderr.endsWith("\n")) {
       console.log();
     }
   }
   if (result.exitCode !== 0) {
-    console.log(pc2.gray(`exit code: ${result.exitCode}`));
+    console.log(pc4.gray(`exit code: ${result.exitCode}`));
   }
 }
 async function handleSpecialCommand(ctx, input, rl) {
@@ -124,67 +124,67 @@ async function handleSpecialCommand(ctx, input, rl) {
     case "info":
     case "i": {
       if (ctx.sandboxes.size === 0) {
-        console.log(pc2.yellow("No active sandbox. Use /new to create one."));
+        console.log(pc4.yellow("No active sandbox. Use /new to create one."));
         return null;
       }
       const activeSandbox = ctx.sandboxes.get(ctx.activeSandboxId);
       console.log();
-      console.log(pc2.bold("  Sandbox Info"));
-      console.log(`  ID: ${pc2.cyan(activeSandbox.sandboxId)}`);
+      console.log(pc4.bold("  Sandbox Info"));
+      console.log(`  ID: ${pc4.cyan(activeSandbox.sandboxId)}`);
       console.log();
       return null;
     }
     case "url":
     case "u": {
       if (ctx.sandboxes.size === 0) {
-        console.log(pc2.yellow("No active sandbox. Use /new to create one."));
+        console.log(pc4.yellow("No active sandbox. Use /new to create one."));
         return null;
       }
       const activeSandbox = ctx.sandboxes.get(ctx.activeSandboxId);
       if (args.length === 0) {
-        console.log(pc2.gray("Usage: /url <port>"));
+        console.log(pc4.gray("Usage: /url <port>"));
       } else {
         const port = parseInt(args[0], 10);
         if (isNaN(port)) {
-          console.log(pc2.red("Invalid port number"));
+          console.log(pc4.red("Invalid port number"));
         } else {
           const url = await activeSandbox.getUrl({ port });
-          console.log(pc2.cyan(url));
+          console.log(pc4.cyan(url));
         }
       }
       return null;
     }
     case "new": {
-      console.log(pc2.gray("  Creating new sandbox..."));
+      console.log(pc4.gray("  Creating new sandbox..."));
       const newSandbox = await compute.sandbox.create();
       ctx.sandboxes.set(newSandbox.sandboxId, newSandbox);
       ctx.activeSandboxId = newSandbox.sandboxId;
       rl.setPrompt(buildPrompt(ctx.activeSandboxId));
-      console.log(`  Sandbox ready: ${pc2.cyan(newSandbox.sandboxId)}`);
-      console.log(`  ${pc2.gray(`Active sandboxes: ${ctx.sandboxes.size}`)}`);
+      console.log(`  Sandbox ready: ${pc4.cyan(newSandbox.sandboxId)}`);
+      console.log(`  ${pc4.gray(`Active sandboxes: ${ctx.sandboxes.size}`)}`);
       return null;
     }
     case "destroy": {
       if (args.length === 0) {
-        console.log(pc2.gray("Usage: /destroy <sandbox-id> or /destroy --all"));
-        console.log(pc2.gray("Use /list to see all sandboxes"));
+        console.log(pc4.gray("Usage: /destroy <sandbox-id> or /destroy --all"));
+        console.log(pc4.gray("Use /list to see all sandboxes"));
         return null;
       }
       if (args[0] === "--all") {
         if (ctx.sandboxes.size === 0) {
-          console.log(pc2.yellow("  No sandboxes to destroy."));
+          console.log(pc4.yellow("  No sandboxes to destroy."));
           return null;
         }
         const count = ctx.sandboxes.size;
-        console.log(pc2.gray(`  Destroying ${count} sandbox${count > 1 ? "es" : ""}...`));
+        console.log(pc4.gray(`  Destroying ${count} sandbox${count > 1 ? "es" : ""}...`));
         await Promise.all(
           Array.from(ctx.sandboxes.values()).map((s) => s.destroy())
         );
         ctx.sandboxes.clear();
         ctx.activeSandboxId = "";
         rl.setPrompt(buildPrompt(ctx.activeSandboxId));
-        console.log(`  Destroyed ${pc2.cyan(String(count))} sandbox${count > 1 ? "es" : ""}`);
-        console.log(pc2.yellow("  No sandboxes remaining. Use /new to create one or /exit to quit."));
+        console.log(`  Destroyed ${pc4.cyan(String(count))} sandbox${count > 1 ? "es" : ""}`);
+        console.log(pc4.yellow("  No sandboxes remaining. Use /new to create one or /exit to quit."));
         return null;
       }
       const targetId = args[0];
@@ -194,13 +194,13 @@ async function handleSpecialCommand(ctx, input, rl) {
         if (matches.length === 1) {
           return destroySandbox(ctx, matches[0], rl);
         } else if (matches.length > 1) {
-          console.log(pc2.yellow("  Ambiguous ID. Matches:"));
+          console.log(pc4.yellow("  Ambiguous ID. Matches:"));
           for (const id of matches) {
-            console.log(`    ${pc2.cyan(id)}`);
+            console.log(`    ${pc4.cyan(id)}`);
           }
         } else {
-          console.log(pc2.red(`  Sandbox not found: ${targetId}`));
-          console.log(pc2.gray("  Use /list to see all sandboxes"));
+          console.log(pc4.red(`  Sandbox not found: ${targetId}`));
+          console.log(pc4.gray("  Use /list to see all sandboxes"));
         }
         return null;
       }
@@ -209,10 +209,10 @@ async function handleSpecialCommand(ctx, input, rl) {
     case "list":
     case "ls": {
       console.log();
-      console.log(pc2.bold("  Sandboxes"));
+      console.log(pc4.bold("  Sandboxes"));
       for (const id of ctx.sandboxes.keys()) {
-        const marker = id === ctx.activeSandboxId ? pc2.green(" \u25CF") : "  ";
-        console.log(`  ${marker} ${pc2.cyan(id)}`);
+        const marker = id === ctx.activeSandboxId ? pc4.green(" \u25CF") : "  ";
+        console.log(`  ${marker} ${pc4.cyan(id)}`);
       }
       console.log();
       return null;
@@ -220,30 +220,30 @@ async function handleSpecialCommand(ctx, input, rl) {
     case "switch":
     case "sw": {
       if (args.length === 0) {
-        console.log(pc2.gray("Usage: /switch <sandbox-id>"));
-        console.log(pc2.gray("Use /list to see all sandboxes"));
+        console.log(pc4.gray("Usage: /switch <sandbox-id>"));
+        console.log(pc4.gray("Use /list to see all sandboxes"));
         return null;
       }
       const switchId = args[0];
       if (ctx.sandboxes.has(switchId)) {
         ctx.activeSandboxId = switchId;
         rl.setPrompt(buildPrompt(ctx.activeSandboxId));
-        console.log(`  Switched to ${pc2.cyan(switchId)}`);
+        console.log(`  Switched to ${pc4.cyan(switchId)}`);
         return null;
       }
       const matches = Array.from(ctx.sandboxes.keys()).filter((id) => id.startsWith(switchId));
       if (matches.length === 1) {
         ctx.activeSandboxId = matches[0];
         rl.setPrompt(buildPrompt(ctx.activeSandboxId));
-        console.log(`  Switched to ${pc2.cyan(matches[0])}`);
+        console.log(`  Switched to ${pc4.cyan(matches[0])}`);
       } else if (matches.length > 1) {
-        console.log(pc2.yellow("  Ambiguous ID. Matches:"));
+        console.log(pc4.yellow("  Ambiguous ID. Matches:"));
         for (const id of matches) {
-          console.log(`    ${pc2.cyan(id)}`);
+          console.log(`    ${pc4.cyan(id)}`);
         }
       } else {
-        console.log(pc2.red(`  Sandbox not found: ${switchId}`));
-        console.log(pc2.gray("  Use /list to see all sandboxes"));
+        console.log(pc4.red(`  Sandbox not found: ${switchId}`));
+        console.log(pc4.gray("  Use /list to see all sandboxes"));
       }
       return null;
     }
@@ -252,51 +252,51 @@ async function handleSpecialCommand(ctx, input, rl) {
     case "q":
       return "exit";
     default:
-      console.log(pc2.yellow(`Unknown command: /${cmd}`));
-      console.log(pc2.gray("Type /help for available commands"));
+      console.log(pc4.yellow(`Unknown command: /${cmd}`));
+      console.log(pc4.gray("Type /help for available commands"));
       return null;
   }
 }
 async function destroySandbox(ctx, sandboxId, rl) {
   const target = ctx.sandboxes.get(sandboxId);
-  console.log(pc2.gray(`  Destroying ${sandboxId}...`));
+  console.log(pc4.gray(`  Destroying ${sandboxId}...`));
   await target.destroy();
   ctx.sandboxes.delete(sandboxId);
-  console.log(`  Destroyed ${pc2.cyan(sandboxId)}`);
+  console.log(`  Destroyed ${pc4.cyan(sandboxId)}`);
   if (ctx.activeSandboxId === sandboxId && ctx.sandboxes.size > 0) {
     ctx.activeSandboxId = ctx.sandboxes.keys().next().value;
     rl.setPrompt(buildPrompt(ctx.activeSandboxId));
-    console.log(`  Switched to ${pc2.cyan(ctx.activeSandboxId)}`);
+    console.log(`  Switched to ${pc4.cyan(ctx.activeSandboxId)}`);
   } else if (ctx.sandboxes.size === 0) {
     ctx.activeSandboxId = "";
     rl.setPrompt(buildPrompt(ctx.activeSandboxId));
-    console.log(pc2.yellow("  No sandboxes remaining. Use /new to create one or /exit to quit."));
+    console.log(pc4.yellow("  No sandboxes remaining. Use /new to create one or /exit to quit."));
   }
   return null;
 }
 function showHelp() {
   console.log();
-  console.log(pc2.bold("  Shell Mode"));
-  console.log(pc2.gray("  Just type commands - they run in the active sandbox"));
+  console.log(pc4.bold("  Shell Mode"));
+  console.log(pc4.gray("  Just type commands - they run in the active sandbox"));
   console.log();
-  console.log(pc2.white("    ls -la"));
-  console.log(pc2.white("    cat /etc/os-release"));
-  console.log(pc2.white("    npm install lodash"));
+  console.log(pc4.white("    ls -la"));
+  console.log(pc4.white("    cat /etc/os-release"));
+  console.log(pc4.white("    npm install lodash"));
   console.log();
-  console.log(pc2.bold("  Sandbox Commands") + pc2.gray(" (prefix with /)"));
+  console.log(pc4.bold("  Sandbox Commands") + pc4.gray(" (prefix with /)"));
   console.log();
-  console.log(pc2.cyan("    /new") + pc2.gray("              Create a new sandbox and switch to it"));
-  console.log(pc2.cyan("    /list") + pc2.gray("             List all sandboxes"));
-  console.log(pc2.cyan("    /switch <id>") + pc2.gray("      Switch active sandbox"));
-  console.log(pc2.cyan("    /destroy <id>") + pc2.gray("     Destroy a sandbox by ID"));
-  console.log(pc2.cyan("    /destroy --all") + pc2.gray("    Destroy all sandboxes"));
+  console.log(pc4.cyan("    /new") + pc4.gray("              Create a new sandbox and switch to it"));
+  console.log(pc4.cyan("    /list") + pc4.gray("             List all sandboxes"));
+  console.log(pc4.cyan("    /switch <id>") + pc4.gray("      Switch active sandbox"));
+  console.log(pc4.cyan("    /destroy <id>") + pc4.gray("     Destroy a sandbox by ID"));
+  console.log(pc4.cyan("    /destroy --all") + pc4.gray("    Destroy all sandboxes"));
   console.log();
-  console.log(pc2.bold("  Other Commands"));
+  console.log(pc4.bold("  Other Commands"));
   console.log();
-  console.log(pc2.cyan("    /info") + pc2.gray("             Show active sandbox info"));
-  console.log(pc2.cyan("    /url <port>") + pc2.gray("       Get public URL for port"));
-  console.log(pc2.cyan("    /help") + pc2.gray("             Show this help"));
-  console.log(pc2.cyan("    /exit") + pc2.gray("             Exit the REPL"));
+  console.log(pc4.cyan("    /info") + pc4.gray("             Show active sandbox info"));
+  console.log(pc4.cyan("    /url <port>") + pc4.gray("       Get public URL for port"));
+  console.log(pc4.cyan("    /help") + pc4.gray("             Show this help"));
+  console.log(pc4.cyan("    /exit") + pc4.gray("             Exit the REPL"));
   console.log();
 }
 function loadHistory(rl) {
@@ -343,7 +343,7 @@ import * as fs3 from "fs";
 import * as path4 from "path";
 import * as os3 from "os";
 import * as p3 from "@clack/prompts";
-import pc5 from "picocolors";
+import pc7 from "picocolors";
 function shellEscape(arg) {
   if (/^[a-zA-Z0-9._\-/:=@]+$/.test(arg)) return arg;
   return `'${arg.replace(/'/g, "'\\''")}'`;
@@ -382,7 +382,7 @@ async function workspaceCreate(options) {
       }
       existing.lastUsed = (/* @__PURE__ */ new Date()).toISOString();
       saveState(state);
-      p3.log.info(`Attaching to existing workspace: ${pc5.cyan(id)}`);
+      p3.log.info(`Attaching to existing workspace: ${pc7.cyan(id)}`);
       return existing;
     } catch {
       delete state.workspaces[id];
@@ -394,9 +394,9 @@ async function workspaceCreate(options) {
   let sandbox;
   try {
     sandbox = await compute3.sandbox.create();
-    spinner4.stop(`Sandbox ready: ${pc5.cyan(sandbox.sandboxId)}`);
+    spinner4.stop(`Sandbox ready: ${pc7.cyan(sandbox.sandboxId)}`);
   } catch (error) {
-    spinner4.stop(pc5.red("Failed to create sandbox"));
+    spinner4.stop(pc7.red("Failed to create sandbox"));
     throw error;
   }
   spinner4.start("Bootstrapping workspace (installing gh CLI, cloning repo)...");
@@ -436,12 +436,12 @@ async function workspaceCreate(options) {
     };
     state.workspaces[id] = workspace;
     saveState(state);
-    p3.log.success(`Workspace ready: ${pc5.cyan(id)}`);
-    p3.log.info(`Sandbox: ${pc5.dim(sandbox.sandboxId)}`);
-    p3.log.info(`Worktree: ${pc5.dim(worktreePath)}`);
+    p3.log.success(`Workspace ready: ${pc7.cyan(id)}`);
+    p3.log.info(`Sandbox: ${pc7.dim(sandbox.sandboxId)}`);
+    p3.log.info(`Worktree: ${pc7.dim(worktreePath)}`);
     return workspace;
   } catch (error) {
-    spinner4.stop(pc5.red("Bootstrap failed"));
+    spinner4.stop(pc7.red("Bootstrap failed"));
     try {
       await sandbox.destroy();
     } catch {
@@ -466,9 +466,9 @@ async function workspaceAttach(id) {
   }
   workspace.lastUsed = (/* @__PURE__ */ new Date()).toISOString();
   saveState(state);
-  p3.log.info(`Attaching to workspace: ${pc5.cyan(id)}`);
-  p3.log.info(`Worktree: ${pc5.dim(workspace.worktreePath)}`);
-  console.log(pc5.gray(`Tip: commands run at sandbox root; use { cwd: "${workspace.worktreePath}" } on runCommand to scope them.`));
+  p3.log.info(`Attaching to workspace: ${pc7.cyan(id)}`);
+  p3.log.info(`Worktree: ${pc7.dim(workspace.worktreePath)}`);
+  console.log(pc7.gray(`Tip: commands run at sandbox root; use { cwd: "${workspace.worktreePath}" } on runCommand to scope them.`));
   try {
     await startREPL(sandbox, workspace.provider);
   } catch (error) {
@@ -485,19 +485,19 @@ async function sandboxList() {
     return;
   }
   console.log();
-  console.log(pc5.bold("Sandboxes"));
+  console.log(pc7.bold("Sandboxes"));
   console.log();
   for (const ws of workspaces) {
     const age = Math.round((Date.now() - new Date(ws.lastUsed).getTime()) / (1e3 * 60 * 60 * 24));
     const ageStr = age === 0 ? "today" : age === 1 ? "1 day ago" : `${age} days ago`;
-    const status = age > 7 ? pc5.red("stale") : age > 1 ? pc5.yellow("idle") : pc5.green("active");
-    console.log(`  ${status} ${pc5.cyan(ws.sandboxId)}`);
-    console.log(`    Workspace: ${pc5.dim(ws.id)}`);
+    const status = age > 7 ? pc7.red("stale") : age > 1 ? pc7.yellow("idle") : pc7.green("active");
+    console.log(`  ${status} ${pc7.cyan(ws.sandboxId)}`);
+    console.log(`    Workspace: ${pc7.dim(ws.id)}`);
     console.log(`    Provider: ${ws.provider}`);
-    console.log(`    Last active: ${pc5.gray(ageStr)}`);
+    console.log(`    Last active: ${pc7.gray(ageStr)}`);
     console.log();
   }
-  console.log(pc5.gray('Tip: Use "compute workspaces" to see full workspace details'));
+  console.log(pc7.gray('Tip: Use "compute workspaces" to see full workspace details'));
 }
 async function workspaceList() {
   const state = loadState();
@@ -508,15 +508,15 @@ async function workspaceList() {
     return;
   }
   console.log();
-  console.log(pc5.bold("Workspaces"));
+  console.log(pc7.bold("Workspaces"));
   console.log();
   for (const ws of workspaces) {
     const age = Math.round((Date.now() - new Date(ws.lastUsed).getTime()) / (1e3 * 60 * 60 * 24));
     const ageStr = age === 0 ? "today" : `${age}d ago`;
-    console.log(`  ${pc5.cyan(ws.id)}`);
-    console.log(`    Sandbox: ${pc5.dim(ws.sandboxId)} (${ws.provider})`);
-    console.log(`    Path: ${pc5.dim(ws.worktreePath)}`);
-    console.log(`    Last used: ${pc5.gray(ageStr)}`);
+    console.log(`  ${pc7.cyan(ws.id)}`);
+    console.log(`    Sandbox: ${pc7.dim(ws.sandboxId)} (${ws.provider})`);
+    console.log(`    Path: ${pc7.dim(ws.worktreePath)}`);
+    console.log(`    Last used: ${pc7.gray(ageStr)}`);
     console.log();
   }
 }
@@ -542,7 +542,7 @@ async function workspaceDestroy(id) {
       p3.log.error(`Workspace not found: ${id}`);
       return;
     }
-    p3.log.info(`Destroying workspace: ${pc5.cyan(id)}`);
+    p3.log.info(`Destroying workspace: ${pc7.cyan(id)}`);
     try {
       await compute3.sandbox.destroy(workspace.sandboxId);
       delete state.workspaces[id];
@@ -586,7 +586,7 @@ init_esm_shims();
 import "dotenv/config";
 import { Command } from "commander";
 import * as p4 from "@clack/prompts";
-import pc6 from "picocolors";
+import pc8 from "picocolors";
 import { readFileSync as readFileSync5 } from "fs";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { dirname as dirname2, join as join5 } from "path";
@@ -842,13 +842,35 @@ var ActionsClient = class {
       if (value === void 0) continue;
       for (const v of Array.isArray(value) ? value : [value]) url.searchParams.append(key, v);
     }
-    const res = await this.fetchImpl(url, { headers: this.headers() });
+    const res = await this.fetchImpl(url, {
+      headers: { ...this.headers(), accept: "text/event-stream" }
+    });
     if (!res.ok) {
       await this.parse(res);
     }
     if (!res.body) throw new Error("SSE response has no body");
     yield* readSseEvents(res.body);
   }
+  /**
+   * `sse()` with the frame's `event:` name preserved — for streams whose
+   * events are distinguished by name rather than payload shape (process
+   * follow: stdout/stderr share a `{chunk}` payload).
+   */
+  async *sseNamed(path5, params) {
+    const url = new URL(`${this.auth.baseUrl}${path5}`);
+    for (const [key, value] of Object.entries(params ?? {})) {
+      if (value === void 0) continue;
+      for (const v of Array.isArray(value) ? value : [value]) url.searchParams.append(key, v);
+    }
+    const res = await this.fetchImpl(url, {
+      headers: { ...this.headers(), accept: "text/event-stream" }
+    });
+    if (!res.ok) {
+      await this.parse(res);
+    }
+    if (!res.body) throw new Error("SSE response has no body");
+    yield* readSseNamedEvents(res.body);
+  }
   /** Download bytes following redirects (artifact URLs 302 to storage). */
   async download(path5) {
     const res = await this.fetchImpl(`${this.auth.baseUrl}${path5}`, {
@@ -862,7 +884,7 @@ var ActionsClient = class {
     return new Uint8Array(await res.arrayBuffer());
   }
   headers() {
-    return { authorization: `Bearer ${this.auth.apiKey}` };
+    return { authorization: `Bearer ${this.auth.apiKey}`, accept: "application/json" };
   }
   async parse(res) {
     const body = await res.json().catch(() => void 0);
@@ -900,6 +922,34 @@ async function* readSseEvents(body) {
     reader.releaseLock();
   }
 }
+async function* readSseNamedEvents(body) {
+  const reader = body.getReader();
+  const decoder = new TextDecoder();
+  let buffer = "";
+  try {
+    for (; ; ) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      buffer += decoder.decode(value, { stream: true });
+      let idx;
+      while ((idx = buffer.indexOf("\n\n")) !== -1) {
+        const frame = buffer.slice(0, idx);
+        buffer = buffer.slice(idx + 2);
+        let event = "message";
+        const dataLines = [];
+        for (const line of frame.split("\n")) {
+          if (line.startsWith("event: ")) event = line.slice(7);
+          else if (line.startsWith("data: ")) dataLines.push(line.slice(6));
+        }
+        if (dataLines.length > 0) {
+          yield { event, data: JSON.parse(dataLines.join("\n")) };
+        }
+      }
+    }
+  } finally {
+    reader.releaseLock();
+  }
+}
 function encodeWatchCursor(id, jobId, step, offset) {
   const stepPart = step === null ? "-" : step === "runner" ? "runner" : String(step);
   return `${id}:${jobId}:${stepPart}:${offset}`;
@@ -981,19 +1031,22 @@ function sanitizePathPart(name) {
 async function client(opts) {
   return new ActionsClient(await resolveActionsAuth(opts));
 }
-function assertVaultValueHost(auth) {
+function assertSecretValueHost(auth, what) {
   if (!isTrustedActionsHost(auth.baseUrl)) {
     throw new ActionsCliError(
       "untrusted_host",
-      `Refusing to send or read vault values at ${auth.baseUrl} \u2014 only computesdk.com and localhost hosts are allowed, even with --allow-untrusted-host.`
+      `Refusing to send or read ${what} at ${auth.baseUrl} \u2014 only computesdk.com and localhost hosts are allowed, even with --allow-untrusted-host.`
     );
   }
 }
-async function vaultValueClient(opts) {
+async function secretValueClient(opts, what) {
   const auth = await resolveActionsAuth(opts);
-  assertVaultValueHost(auth);
+  assertSecretValueHost(auth, what);
   return new ActionsClient(auth);
 }
+async function vaultValueClient(opts) {
+  return secretValueClient(opts, "vault values");
+}
 function output(opts, data, render) {
   if (opts.json) {
     process.stdout.write(JSON.stringify(data, null, 2) + "\n");
@@ -1386,6 +1439,7 @@ function dispatchBody(workflow, opts) {
   if (opts.providerRegion !== void 0 && opts.provider === void 0) {
     throw new ActionsCliError("invalid_argument", "--provider-region requires --provider.");
   }
+  const maxPrice = maxPriceFields(opts.maxBid, opts.maxBidPer);
   return {
     workflowId: workflow.id,
     ref,
@@ -1394,9 +1448,25 @@ function dispatchBody(workflow, opts) {
     ...opts.provider !== void 0 && {
       provider: opts.provider,
       ...opts.providerRegion !== void 0 && { providerRegion: opts.providerRegion }
-    }
+    },
+    ...maxPrice !== void 0 && maxPrice
   };
 }
+function maxPriceFields(maxBid, maxBidPer) {
+  if (maxBidPer !== void 0 && maxBid === void 0) {
+    throw new ActionsCliError("invalid_argument", "--max-bid-per requires --max-bid.");
+  }
+  if (maxBid === void 0) return void 0;
+  const usd = Number(maxBid);
+  if (!/^\d+(\.\d+)?([eE][+-]?\d+)?$/.test(maxBid) || !Number.isFinite(usd) || usd <= 0) {
+    throw new ActionsCliError("invalid_argument", `Invalid --max-bid "${maxBid}". Expected a positive dollar amount (e.g. 0.12).`);
+  }
+  const per = maxBidPer ?? "second";
+  if (per !== "second" && per !== "minute" && per !== "hour") {
+    throw new ActionsCliError("invalid_argument", `--max-bid-per must be second, minute, or hour, got "${maxBidPer}".`);
+  }
+  return { maxPriceUsd: usd, maxPricePer: per };
+}
 function parseVaultKind(kind) {
   if (kind === void 0 || kind === "secret" || kind === "variable") return kind ?? "secret";
   throw new ActionsCliError("invalid_argument", `--kind must be secret or variable, got "${kind}".`);
@@ -1437,7 +1507,7 @@ function registerActionsCommands(program2) {
   const actions = program2.command("actions").alias("ci").description("Drive the benchmarks-platform Actions API").configureOutput({ outputError: usageErrorOutput });
   const common = (cmd) => cmd.option("--api-key <key>", "API key (default: $COMPUTE_API_KEY)").option("--base-url <url>", "API base URL (default: https://platform.computesdk.com)").option("--allow-untrusted-host", "send an explicit --api-key/env key to a non-computesdk, non-localhost --base-url (stored login credentials are never sent)").option("--json", "print machine-readable JSON");
   common(
-    actions.command("dispatch").description("Dispatch a workflow_dispatch run (or any workflow with --manual)").argument("<repo>", "repository in owner/repo format").requiredOption("--workflow <path|name>", "workflow path or name").option("--ref <ref>", "git ref to run (default: the workflow's first watched ref)").option("--inputs <pairs...>", "workflow inputs as key=value (workflow_dispatch inputs only)").option("--manual", "run a workflow even if it does not declare workflow_dispatch (such runs take no --inputs)").option("--provider <id>", "place the run on one provider (e.g. namespace, vercel:sfo1) instead of the org provider order").option("--provider-region <region>", "region for --provider (same as --provider <id>:<region>)")
+    actions.command("dispatch").description("Dispatch a workflow_dispatch run (or any workflow with --manual)").argument("<repo>", "repository in owner/repo format").requiredOption("--workflow <path|name>", "workflow path or name").option("--ref <ref>", "git ref to run (default: the workflow's first watched ref)").option("--inputs <pairs...>", "workflow inputs as key=value (workflow_dispatch inputs only)").option("--manual", "run a workflow even if it does not declare workflow_dispatch (such runs take no --inputs)").option("--provider <id>", "place the run on one provider (e.g. namespace, vercel:sfo1) instead of the org provider order").option("--provider-region <region>", "region for --provider (same as --provider <id>:<region>)").option("--max-bid <usd>", "max price per vCPU for a market fill (e.g. 0.12); unfilled jobs fall through to the next provider").option("--max-bid-per <unit>", "time unit --max-bid is priced in: second, minute, or hour (default: second)")
   ).action(async (repo, opts) => {
     try {
       const c = await client(opts);
@@ -1921,6 +1991,863 @@ function registerActionsCommands(program2) {
   });
 }
 
+// src/market.ts
+init_esm_shims();
+import pc2 from "picocolors";
+var USD_RE = /^\d+(\.\d+)?([eE][+-]?\d+)?$/;
+var RATE_UNITS = ["second", "minute", "hour"];
+function parseRate(price, per) {
+  if (price === void 0) {
+    throw new ActionsCliError("invalid_argument", "A price is required \u2014 pass --price <usd>.");
+  }
+  const usd = Number(price);
+  if (!USD_RE.test(price) || !Number.isFinite(usd) || usd <= 0) {
+    throw new ActionsCliError(
+      "invalid_argument",
+      `Invalid --price "${price}". Expected a positive dollar amount (e.g. 0.12).`
+    );
+  }
+  const unit = per ?? "second";
+  if (!RATE_UNITS.includes(unit)) {
+    throw new ActionsCliError(
+      "invalid_argument",
+      `--per must be second, minute, or hour, got "${per}".`
+    );
+  }
+  return { usd, per: unit };
+}
+function parseCapacity(value) {
+  if (value === void 0) return void 0;
+  const n = Number(value);
+  if (!Number.isInteger(n) || n <= 0) {
+    throw new ActionsCliError(
+      "invalid_argument",
+      `Invalid --capacity "${value}". Expected a positive integer.`
+    );
+  }
+  return n;
+}
+function parseExpiresIn(value) {
+  if (value === void 0) return void 0;
+  const hours = Number(value);
+  if (!Number.isFinite(hours) || hours <= 0) {
+    throw new ActionsCliError(
+      "invalid_argument",
+      `Invalid --expires-in "${value}". Expected a positive number of hours.`
+    );
+  }
+  return hours;
+}
+function sellBody(opts) {
+  const rate = parseRate(opts.price, opts.per);
+  const maxConcurrent = parseCapacity(opts.capacity);
+  const expiresInHours = parseExpiresIn(opts.expiresIn);
+  if (opts.renew && expiresInHours === void 0) {
+    throw new ActionsCliError(
+      "invalid_argument",
+      "--renew requires --expires-in \u2014 a standing listing never expires."
+    );
+  }
+  return {
+    size: opts.size,
+    ...opts.region !== void 0 && { region: opts.region },
+    usd: rate.usd,
+    per: rate.per,
+    ...maxConcurrent !== void 0 && { maxConcurrent },
+    ...expiresInHours !== void 0 && { expiresInHours },
+    ...opts.renew && { rollover: true }
+  };
+}
+function listingPatchBody(listingId, change) {
+  const body = { askId: listingId };
+  if (change.price !== void 0 || change.per !== void 0) {
+    const rate = parseRate(change.price, change.per);
+    body.usd = rate.usd;
+    body.per = rate.per;
+  }
+  const maxConcurrent = parseCapacity(change.capacity);
+  if (maxConcurrent !== void 0) body.maxConcurrent = maxConcurrent;
+  if (change.status !== void 0) body.status = change.status;
+  if (body.usd === void 0 && body.maxConcurrent === void 0 && body.status === void 0) {
+    throw new ActionsCliError(
+      "invalid_argument",
+      "Nothing to change \u2014 pass --price, --capacity, or a status command."
+    );
+  }
+  return body;
+}
+function credentialEnvVar(providerId, fieldName) {
+  const snake = (s) => s.replace(/([a-z0-9])([A-Z])/g, "$1_$2").replace(/[^A-Za-z0-9]+/g, "_").toUpperCase();
+  return `${snake(providerId)}_${snake(fieldName)}`;
+}
+function credentialValues(providerId, fields, overrides, env = process.env) {
+  const declared = new Set(fields.map((f) => f.name));
+  const unknown = Object.keys(overrides).filter((name) => !declared.has(name));
+  if (unknown.length > 0) {
+    throw new ActionsCliError(
+      "invalid_argument",
+      `${providerId} takes no credential field "${unknown.join('", "')}" \u2014 expected one of ${fields.map((f) => f.name).join(", ")}.`
+    );
+  }
+  const values = {};
+  const fromFlag = [];
+  const missing = [];
+  const envNames = {};
+  for (const field of fields) {
+    envNames[field.name] = credentialEnvVar(providerId, field.name);
+    const fromOverride = overrides[field.name];
+    if (fromOverride !== void 0 && fromOverride.trim() !== "") {
+      values[field.name] = fromOverride.trim();
+      fromFlag.push(field.name);
+      continue;
+    }
+    const fromEnv = env[envNames[field.name]];
+    if (fromEnv !== void 0 && fromEnv.trim() !== "") {
+      values[field.name] = fromEnv.trim();
+      continue;
+    }
+    if (field.required !== false) missing.push(field);
+  }
+  return { values, missing, fromFlag, envNames };
+}
+function credentialBody(fields, values) {
+  if (fields.length === 1) {
+    return { key: values[fields[0].name] };
+  }
+  return { fields: values };
+}
+function formatUsd(usd) {
+  return `$${usd.toFixed(6).replace(/\.?0+$/, "")}`;
+}
+function formatRate(usd, per) {
+  return `${formatUsd(usd)}/${per}`;
+}
+function formatListingStatus(ask) {
+  let label;
+  if (ask.status === "withdrawn") label = pc2.gray("withdrawn");
+  else if (ask.status === "paused") label = pc2.yellow("paused");
+  else if (!ask.live) label = pc2.gray("expired");
+  else label = pc2.green("live");
+  if (ask.pendingUsd !== null && ask.pendingPer !== null) {
+    label += pc2.dim(` \u2192 ${formatRate(ask.pendingUsd, ask.pendingPer)} next window`);
+  }
+  return label;
+}
+function formatListingRow(ask) {
+  const expiry = ask.expiresAt ? ask.rollover ? `renews ${ask.expiresAt}` : `expires ${ask.expiresAt}` : "standing";
+  return [
+    ask.id,
+    formatListingStatus(ask),
+    safeTerm(ask.size),
+    safeTerm(ask.region ?? "-"),
+    formatRate(ask.usd, ask.per),
+    pc2.dim(`\xD7${ask.maxConcurrent}`),
+    pc2.dim(expiry)
+  ].join("  ");
+}
+function formatProviderStatus(p5) {
+  const lines = [];
+  lines.push(`${pc2.bold(safeTerm(p5.name))}  ${pc2.dim(`selling ${safeTerm(p5.provider)}`)}`);
+  lines.push(`id:          ${p5.id}`);
+  lines.push(
+    `credential:  ${p5.executorCredentialConnected ? pc2.green("connected") : pc2.yellow("not connected \u2014 your listings cannot fill until `compute market credential connect`")}`
+  );
+  if (p5.revokedAt) lines.push(pc2.red(`revoked:     ${p5.revokedAt}`));
+  lines.push(
+    `sizes:       ${p5.sizes.map((s) => `${s.name} (${s.label})`).join(", ") || "-"}`
+  );
+  lines.push(`regions:     ${p5.regions.join(", ") || "-"}`);
+  if (p5.credentialFields.length > 0) {
+    lines.push(
+      `credential fields: ${p5.credentialFields.map((f) => `${f.name}${f.secret ? " (secret)" : ""}`).join(", ")}`
+    );
+  }
+  lines.push(`created:     ${p5.createdAt}`);
+  return lines.join("\n");
+}
+function formatBook(book) {
+  const lines = [];
+  lines.push(pc2.bold("sellers' asking prices"));
+  if (book.asks.length === 0) lines.push(pc2.dim("  no listings are live"));
+  for (const ask of book.asks) {
+    const where = ask.region ? safeTerm(ask.region) : "any region";
+    const expiry = ask.expiresAt ? pc2.dim(ask.rollover ? `  renews ${ask.expiresAt}` : `  until ${ask.expiresAt}`) : "";
+    lines.push(
+      `  ${formatRate(ask.usd, ask.per)}  ${safeTerm(ask.providerName)}  ${safeTerm(ask.size)}  ${where}  up to ${ask.maxConcurrent} at once${expiry}`
+    );
+  }
+  lines.push("");
+  lines.push(pc2.bold("buyer offers"));
+  if (book.bids.length === 0) lines.push(pc2.dim("  no open offers"));
+  for (const bid of book.bids) {
+    const where = bid.region ? safeTerm(bid.region) : "anywhere";
+    lines.push(
+      `  pays up to ${formatRate(bid.maxUsd, bid.per)}  ${safeTerm(bid.size)}  ${where}  ${pc2.dim(`posted ${bid.createdAt}`)}`
+    );
+  }
+  lines.push("");
+  lines.push(pc2.bold("recent sales"));
+  if (book.fills.length === 0) lines.push(pc2.dim("  nothing has sold yet"));
+  for (const fill of book.fills) {
+    const statusNote = fill.status === "replaced" ? pc2.yellow("  replaced") : fill.status === "closed" ? pc2.gray("  closed") : "";
+    lines.push(
+      `  ${pc2.dim(fill.id)}  ${formatRate(fill.usd, fill.per)}  ${safeTerm(fill.provider)}  ${safeTerm(fill.size)}  ${safeTerm(fill.region ?? "-")}  ${pc2.dim(fill.createdAt)}${statusNote}`
+    );
+  }
+  return lines.join("\n");
+}
+function formatReplacedFill(fill) {
+  const settled = formatUsd(fill.settledMicroUsd / 1e6);
+  const job = fill.jobRequeued ? pc2.dim(" \u2014 job re-places on the buyer's next provider") : "";
+  return `replaced  ${pc2.cyan(fill.fillId)}  settled ${settled}${job}`;
+}
+function replaceTarget(listingId, fillId) {
+  if (fillId !== void 0) {
+    return {
+      path: `/api/v1/market/fills/${encodeURIComponent(fillId)}/replace`,
+      scope: "fill"
+    };
+  }
+  if (listingId === void 0) {
+    throw new ActionsCliError(
+      "invalid_argument",
+      "Nothing to replace \u2014 pass a listing ID or --fill <fill-id>."
+    );
+  }
+  return {
+    path: `/api/v1/market/listings/${encodeURIComponent(listingId)}/replace`,
+    scope: "listing"
+  };
+}
+function formatSettlementRow(s) {
+  const period = `${s.periodStart.slice(0, 10)} \u2192 ${s.periodEnd.slice(0, 10)}`;
+  const paid = s.paidAt ? pc2.green(`paid ${s.paidAt.slice(0, 10)}`) : s.invoiceRef ? pc2.yellow(`invoiced ${safeTerm(s.invoiceRef)}`) : pc2.dim("unpaid");
+  return [
+    pc2.dim(period),
+    `${s.vcpuSeconds.toLocaleString("en-US")} vCPU\xB7s`,
+    `gross ${formatUsd(s.grossUsd)}`,
+    `net ${formatUsd(s.netUsd)}`,
+    paid
+  ].join("  ");
+}
+function registerMarketCommands(program2) {
+  const market = program2.command("market").description("Sell compute capacity on the compute market").configureOutput({ outputError: usageErrorOutput });
+  const common = (cmd) => cmd.option("--api-key <key>", "API key (default: $COMPUTE_API_KEY)").option("--base-url <url>", "API base URL (default: https://platform.computesdk.com)").option("--allow-untrusted-host", "send an explicit --api-key/env key to a non-computesdk, non-localhost --base-url (stored login credentials are never sent)").option("--json", "print machine-readable JSON");
+  common(
+    market.command("listings").alias("list").description("Your listings \u2014 live, paused, expired, and withdrawn")
+  ).action(async (opts) => {
+    try {
+      const { asks } = await (await client(opts)).get(
+        "/api/v1/market/asks"
+      );
+      output(opts, asks, (rows) => {
+        if (rows.length === 0) {
+          console.log("No listings yet \u2014 post one with `compute market sell`.");
+          return;
+        }
+        for (const ask of rows) console.log(formatListingRow(ask));
+      });
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  common(
+    market.command("sell").description("Post a listing: sell capacity at a price").requiredOption("--price <usd>", "price per unit of time (e.g. 0.12)").option("--per <unit>", "time unit the price is per: second, minute, or hour (default: second)").option("--size <tier>", "size tier to sell (default: medium, else the provider's first tier)").option("--region <region>", "region to sell in (default: anywhere the provider runs)").option("--capacity <n>", "max simultaneous fills (default: 1)").option("--expires-in <hours>", "delist after this many hours (default: standing)").option("--renew", "re-list for the same window each time it expires (requires --expires-in)")
+  ).action(async (opts) => {
+    try {
+      const c = await client(opts);
+      let size = opts.size;
+      if (size === void 0) {
+        const { provider } = await c.get(
+          "/api/v1/market/provider"
+        );
+        const preset = provider.sizes.find((s) => s.name === "medium") ?? provider.sizes[0];
+        if (!preset) {
+          throw new ActionsCliError(
+            "invalid_argument",
+            `--size is required \u2014 ${provider.provider} advertises no size tiers.`
+          );
+        }
+        size = preset.name;
+        console.error(pc2.dim(`no --size given \u2014 listing at "${size}"`));
+      }
+      const result = await c.post(
+        "/api/v1/market/asks",
+        sellBody({ ...opts, size })
+      );
+      output(opts, result, (r) => {
+        console.log(`listed  ${pc2.cyan(r.ask.id)}`);
+        console.log(formatListingRow(r.ask));
+      });
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  common(
+    market.command("price").description("Reprice a listing").argument("<listing-id>", "listing ID").requiredOption("--price <usd>", "new price per unit of time (e.g. 0.08)").option("--per <unit>", "time unit the price is per: second, minute, or hour (default: second)")
+  ).action(async (listingId, opts) => {
+    try {
+      const result = await (await client(opts)).post(
+        "/api/v1/market/asks",
+        listingPatchBody(listingId, { price: opts.price, per: opts.per })
+      );
+      output(opts, result, (r) => {
+        const rate = r.ask.pendingUsd !== null && r.ask.pendingPer !== null ? `${formatRate(r.ask.pendingUsd, r.ask.pendingPer)} ${pc2.dim("(applies next window)")}` : formatRate(r.ask.usd, r.ask.per);
+        console.log(`repriced  ${pc2.cyan(r.ask.id)}  ${rate}`);
+      });
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  const setStatus = async (listingId, status, opts) => {
+    try {
+      const result = await (await client(opts)).post(
+        "/api/v1/market/asks",
+        listingPatchBody(listingId, { status })
+      );
+      output(opts, result, (r) => {
+        console.log(`${status === "live" ? "resumed" : "paused"}  ${pc2.cyan(r.ask.id)}`);
+      });
+    } catch (e) {
+      fail(e, opts);
+    }
+  };
+  common(
+    market.command("pause").description("Pause a listing \u2014 it stays posted but cannot fill").argument("<listing-id>", "listing ID")
+  ).action((listingId, opts) => setStatus(listingId, "paused", opts));
+  common(
+    market.command("resume").description("Resume a paused listing").argument("<listing-id>", "listing ID")
+  ).action((listingId, opts) => setStatus(listingId, "live", opts));
+  common(
+    market.command("withdraw").description("Withdraw a listing \u2014 it leaves the book for good").argument("<listing-id>", "listing ID")
+  ).action(async (listingId, opts) => {
+    try {
+      const result = await (await client(opts)).del(
+        `/api/v1/market/asks?id=${encodeURIComponent(listingId)}`
+      );
+      output(opts, result, (r) => {
+        console.log(`withdrew  ${pc2.cyan(r.ask.id)}`);
+      });
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  common(
+    market.command("replace").description(
+      "Take capacity back: evict a sale, or pause a listing and evict every sale on it.\nAn evicted Actions job restarts on the buyer's next provider; the buyer pays\nonly for the seconds the sale actually ran."
+    ).argument("[listing-id]", "listing to pause and evict every sale on").option("--fill <fill-id>", "evict one sale without touching the listing")
+  ).action(
+    async (listingId, opts) => {
+      try {
+        const target = replaceTarget(listingId, opts.fill);
+        const c = await client(opts);
+        if (target.scope === "fill") {
+          const result = await c.post(target.path, {});
+          output(opts, result, (r) => console.log(formatReplacedFill(r.fill)));
+        } else {
+          const result = await c.post(target.path, {});
+          output(opts, result, (r) => {
+            console.log(`paused  ${pc2.cyan(r.listing.id)}`);
+            if (r.fills.length === 0) {
+              console.log(pc2.dim("  no live sales to evict"));
+              return;
+            }
+            for (const f of r.fills) {
+              if (f.ok) console.log(formatReplacedFill(f.fill));
+              else console.log(pc2.red(`  could not evict a sale \u2014 ${f.error}`));
+            }
+          });
+          if (result.fills.some((f) => !f.ok)) process.exitCode = 1;
+        }
+      } catch (e) {
+        fail(e, opts);
+      }
+    }
+  );
+  common(
+    market.command("book").description("Live prices: sellers' asking prices, buyer offers, recent sales")
+  ).action(async (opts) => {
+    try {
+      const book = await (await client(opts)).get(
+        "/api/v1/market/book"
+      );
+      output(opts, book, (b) => console.log(formatBook(b)));
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  common(
+    market.command("settlements").description("Your monthly payout reports")
+  ).action(async (opts) => {
+    try {
+      const { settlements } = await (await client(opts)).get("/api/v1/market/settlements");
+      output(opts, settlements, (rows) => {
+        if (rows.length === 0) {
+          console.log("No settlements yet.");
+          return;
+        }
+        for (const s of rows) console.log(formatSettlementRow(s));
+      });
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  common(
+    market.command("status").description("Who you are on the market: seller identity, credential, sizes, regions")
+  ).action(async (opts) => {
+    try {
+      const { provider } = await (await client(opts)).get("/api/v1/market/provider");
+      output(opts, provider, (p5) => console.log(formatProviderStatus(p5)));
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  const credential = market.command("credential").description("Connect the credential your listings fill under");
+  common(
+    credential.command("connect").description(
+      "Save the executor credential your sold capacity runs under. Each field is read from\na <PROVIDER>_<FIELD> env var (e.g. TENSORLAKE_API_KEY) \u2014 never pass secrets in argv;\n--field name=value overrides a field (visible in shell history)"
+    ).option("--field <pairs...>", "credential fields as name=value (prefer env vars for secrets)")
+  ).action(async (opts) => {
+    try {
+      const c = await secretValueClient(opts, "credential values");
+      const { provider } = await c.get(
+        "/api/v1/market/provider"
+      );
+      if (provider.credentialFields.length === 0) {
+        throw new ActionsCliError(
+          "invalid_argument",
+          `${provider.provider} authenticates with the deployment's own identity \u2014 there is no credential to connect.`
+        );
+      }
+      const resolved = credentialValues(
+        provider.provider,
+        provider.credentialFields,
+        parseInputs(opts.field)
+      );
+      if (resolved.missing.length > 0) {
+        const hints = resolved.missing.map((f) => `  export ${resolved.envNames[f.name]}=\u2026   # ${f.label}`).join("\n");
+        throw new ActionsCliError(
+          "invalid_argument",
+          `Missing credential field${resolved.missing.length === 1 ? "" : "s"}. Set:
+${hints}`
+        );
+      }
+      if (resolved.fromFlag.some((name) => provider.credentialFields.find((f) => f.name === name)?.secret)) {
+        console.error(
+          pc2.yellow("note: a secret passed via --field stays in your shell history \u2014 prefer the env vars.")
+        );
+      }
+      const result = await c.post(
+        "/api/v1/market/provider/credential",
+        credentialBody(provider.credentialFields, resolved.values)
+      );
+      output(opts, result, (r) => {
+        console.log(`connected  ${pc2.cyan(safeTerm(r.provider.name))}  credential saved`);
+      });
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  common(
+    credential.command("disconnect").description("Remove the stored credential \u2014 listings stop filling until a new one connects")
+  ).action(async (opts) => {
+    try {
+      const result = await (await client(opts)).del(
+        "/api/v1/market/provider/credential"
+      );
+      output(opts, result, (r) => {
+        console.log(`disconnected  ${pc2.cyan(safeTerm(r.provider.name))}  credential removed`);
+      });
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+}
+
+// src/sandboxes.ts
+init_esm_shims();
+import pc3 from "picocolors";
+function shellQuote(arg) {
+  return `'${arg.replace(/'/g, `'\\''`)}'`;
+}
+function printSandbox(s) {
+  const attach = "attach" in s ? s.attach : void 0;
+  console.log(`${pc3.cyan(s.id)}  ${s.status}  ${s.provider ?? "\u2014"}  ${s.providerSandboxId ?? "\u2014"}`);
+  console.log(`  label: ${s.label ?? "\u2014"}   commands: ${s.commandCount}   created: ${s.createdAt}`);
+  if (s.image !== void 0) {
+    console.log(`  image: ${s.image ?? "\u2014"}${s.requestedImage !== null && s.requestedImage !== s.image ? `  ${pc3.dim(`(requested: ${s.requestedImage})`)}` : ""}`);
+  }
+  if (s.destroyError) console.log(`  destroyError: ${pc3.red(s.destroyError)}`);
+  if (attach !== void 0) {
+    console.log(
+      attach === null ? "  attach: none (market fill or ambient provider \u2014 platform drive only)" : `  attach: ${attach.provider} / ${attach.providerSandboxId}${attach.region ? ` (${attach.region})` : ""}`
+    );
+  }
+}
+function printProcess(p5) {
+  const exit = p5.status === "exited" ? `exit=${p5.exitCode ?? "?"}${p5.signal ? ` (${p5.signal})` : ""}` : "";
+  const stdin = p5.stdin && p5.status === "running" ? "  [stdin open]" : "";
+  console.log(`${pc3.cyan(p5.jobId)}  ${p5.status}${exit ? "  " + exit : ""}${stdin}  ${p5.command}`);
+}
+function printSnapshot(s) {
+  const state = s.deletedAt !== null ? `  ${pc3.dim(`(deleted ${s.deletedAt})`)}` : "";
+  console.log(`${pc3.cyan(s.id)}  ${s.providerSnapshotId}${state}`);
+  console.log(
+    `  provider: ${s.provider}${s.region ? ` (${s.region})` : ""}   label: ${s.label ?? "\u2014"}   created: ${s.createdAt}${s.expiresAt ? `   expires: ${s.expiresAt}` : ""}`
+  );
+}
+function registerSandboxesCommands(program2) {
+  const cmd = program2.command("sandboxes").alias("sbx").description("Create and drive sandboxes through the platform").configureOutput({ outputError: usageErrorOutput });
+  cmd.command("create").description('Place a sandbox (provider order walks 1,2,3; "market" bids first)').option("--order <providers>", 'provider order, comma-separated (e.g. "market,blaxel,vercel")').option("--label <label>", "label for the sandbox").option("--image <image>", "container image to boot").option("--snapshot-id <id>", "provider snapshot to resume").option("--cpus <n>", "CPU cores").option("--memory-mb <n>", "memory in MB").option("--disk-mb <n>", "ephemeral disk in MB").option("--timeout-ms <ms>", "sandbox timeout in ms").option("--secret <name>", "vault secret name to inject (repeatable)", (v, a) => a.concat(v), []).option("--api-key <key>", "platform API key (or COMPUTE_API_KEY)").option("--base-url <url>", "platform base URL").option("--allow-untrusted-host", "allow non-computesdk.com base URLs").option("--json", "print the raw response").action(async (opts) => {
+    try {
+      const c = await client(opts);
+      const resources = {};
+      if (opts.cpus) resources.cpus = Number(opts.cpus);
+      if (opts.memoryMb) resources.memoryMb = Number(opts.memoryMb);
+      if (opts.diskMb) resources.ephemeralDiskMb = Number(opts.diskMb);
+      const body = {};
+      if (opts.order) body.providerOrder = opts.order.split(",").map((s) => s.trim());
+      if (opts.label) body.label = opts.label;
+      if (opts.image) body.image = opts.image;
+      if (opts.snapshotId) body.snapshotId = opts.snapshotId;
+      if (opts.timeoutMs) body.timeoutMs = Number(opts.timeoutMs);
+      if (opts.secret && opts.secret.length > 0) body.secrets = opts.secret;
+      if (Object.keys(resources).length > 0) body.resources = resources;
+      const res = await c.post("/api/v1/sandboxes", body);
+      output(opts, res.sandbox, printSandbox);
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("list").description("List sandboxes").option("--status <status>", "creating | running | destroyed").option("--limit <n>", "page size").option("--cursor <cursor>", "page cursor from a previous response").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (opts) => {
+    try {
+      const c = await client(opts);
+      const res = await c.get(
+        "/api/v1/sandboxes",
+        { status: opts.status, limit: opts.limit, cursor: opts.cursor }
+      );
+      output(opts, res, (page) => {
+        page.sandboxes.forEach(printSandbox);
+        if (page.nextCursor) console.log(pc3.dim(`nextCursor: ${page.nextCursor}`));
+      });
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("get <sandboxId>").description("Show one sandbox (includes the BYOK attach descriptor)").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, opts) => {
+    try {
+      const c = await client(opts);
+      const res = await c.get(`/api/v1/sandboxes/${sandboxId}`);
+      output(opts, res.sandbox, printSandbox);
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("destroy <sandboxId>").description("Destroy a sandbox (verified teardown + cost settle)").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, opts) => {
+    try {
+      const c = await client(opts);
+      const res = await c.del(`/api/v1/sandboxes/${sandboxId}`);
+      output(opts, res.sandbox, printSandbox);
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("exec <sandboxId> <command...>").description("Run a one-shot command and print its result").option("--timeout-ms <ms>", "command timeout in ms").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, command, opts) => {
+    try {
+      const c = await client(opts);
+      const res = await c.post(
+        `/api/v1/sandboxes/${sandboxId}/commands`,
+        {
+          command: command.map(shellQuote).join(" "),
+          ...opts.timeoutMs ? { timeoutMs: Number(opts.timeoutMs) } : {}
+        }
+      );
+      output(opts, res, (r) => {
+        process.stdout.write(r.stdout);
+        if (r.stderr) process.stderr.write(r.stderr);
+        if (!r.stdout) console.log(`exit ${r.exitCode} (${r.durationMs}ms)`);
+      });
+      if (res.exitCode !== 0) process.exitCode = res.exitCode;
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("spawn <sandboxId> <command...>").description("Start a detached process that outlives this request").option("--cwd <dir>", "working directory").option("-e, --env <key=value>", "environment variable (repeatable)", (v, a) => a.concat(v), []).option("--stdin", "keep the process's stdin pipe open for `stdin`/`close-stdin`").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, command, opts) => {
+    try {
+      const c = await client(opts);
+      const res = await c.post(
+        `/api/v1/sandboxes/${sandboxId}/processes`,
+        {
+          command: command.map(shellQuote).join(" "),
+          ...opts.cwd ? { cwd: opts.cwd } : {},
+          ...opts.env && opts.env.length > 0 ? { env: parseInputs(opts.env) } : {},
+          ...opts.stdin ? { stdin: true } : {}
+        }
+      );
+      output(opts, res.process, printProcess);
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("ps <sandboxId>").description("List the sandbox's tracked processes").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, opts) => {
+    try {
+      const c = await client(opts);
+      const res = await c.get(
+        `/api/v1/sandboxes/${sandboxId}/processes`
+      );
+      output(opts, res.processes, (list) => list.forEach(printProcess));
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("logs <sandboxId> <jobId>").description("Show a process's buffered output (--follow streams until exit)").option("-f, --follow", "stream output until the process exits").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, jobId, opts) => {
+    try {
+      const c = await client(opts);
+      if (opts.follow) {
+        await followProcess(c, sandboxId, jobId);
+        return;
+      }
+      const res = await c.get(
+        `/api/v1/sandboxes/${sandboxId}/processes/${jobId}`
+      );
+      output(opts, res.process, (p5) => {
+        if (p5.stdout) process.stdout.write(p5.stdout);
+        if (p5.stderr) process.stderr.write(p5.stderr);
+        if (!p5.stdout && !p5.stderr) printProcess(p5);
+      });
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("wait <sandboxId> <jobId>").description("Block until a process exits").option("--timeout-ms <ms>", "bound the wait (job keeps running on timeout)").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, jobId, opts) => {
+    try {
+      const c = await client(opts);
+      const res = await c.post(
+        `/api/v1/sandboxes/${sandboxId}/processes/${jobId}/wait`,
+        opts.timeoutMs ? { timeoutMs: Number(opts.timeoutMs) } : {}
+      );
+      output(opts, res.process, printProcess);
+      if (res.process.status === "exited") {
+        process.exitCode = res.process.exitCode ?? 128;
+      }
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("kill <sandboxId> <jobId>").description("Signal a process (default SIGTERM)").option("--signal <signal>", "signal name or number, e.g. SIGKILL or 9").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, jobId, opts) => {
+    try {
+      const c = await client(opts);
+      const res = await c.post(
+        `/api/v1/sandboxes/${sandboxId}/processes/${jobId}/kill`,
+        opts.signal ? { signal: opts.signal } : {}
+      );
+      output(opts, res.process, printProcess);
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("stdin <sandboxId> <jobId>").description("Write to a process's stdin pipe (spawn with --stdin; --data, --file, or piped)").option("--data <text>", "data to write").option("--file <local>", "read data from a local file").option("--base64", "base64-encode the input before sending (binary-safe)").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, jobId, opts) => {
+    try {
+      let data = opts.data;
+      if (data === void 0 && opts.file) {
+        const { readFile } = await import("fs/promises");
+        data = opts.base64 ? (await readFile(opts.file)).toString("base64") : await readFile(opts.file, "utf8");
+      }
+      if (data === void 0 && !process.stdin.isTTY) {
+        const piped = await new Promise((resolve) => {
+          const chunks = [];
+          process.stdin.on("data", (chunk) => chunks.push(chunk));
+          process.stdin.on("end", () => resolve(Buffer.concat(chunks)));
+        });
+        data = opts.base64 ? piped.toString("base64") : piped.toString("utf8");
+      }
+      if (data === void 0 || data === "") {
+        console.error(pc3.red("Pass --data, --file, or pipe stdin"));
+        process.exit(1);
+      }
+      if (opts.base64 && opts.data !== void 0) {
+        data = Buffer.from(data).toString("base64");
+      }
+      const c = await client(opts);
+      const res = await c.post(
+        `/api/v1/sandboxes/${sandboxId}/processes/${jobId}/stdin`,
+        { data, ...opts.base64 ? { encoding: "base64" } : {} }
+      );
+      output(opts, res, () => console.log(`wrote ${data.length} chars to ${jobId}`));
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("close-stdin <sandboxId> <jobId>").description("Close a process's stdin pipe").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, jobId, opts) => {
+    try {
+      const c = await client(opts);
+      const res = await c.post(
+        `/api/v1/sandboxes/${sandboxId}/processes/${jobId}/close-stdin`,
+        {}
+      );
+      output(opts, res, () => console.log(`closed stdin on ${jobId}`));
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("ls <sandboxId> [path]").description("List a directory (or stat a path) inside the sandbox").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, path5, opts) => {
+    try {
+      const c = await client(opts);
+      const res = await c.get(`/api/v1/sandboxes/${sandboxId}/files`, {
+        path: path5 ?? "/"
+      });
+      output(opts, res, (view) => {
+        if (view.type === "directory") {
+          for (const e of view.entries) {
+            console.log(`${e.type === "directory" ? pc3.blue("d") : " "} ${e.name}${e.size !== void 0 ? `  ${pc3.dim(String(e.size))}` : ""}`);
+          }
+        } else {
+          console.log(`${view.path}  file  ${view.content.length} chars`);
+        }
+      });
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("cat <sandboxId> <path>").description("Print a file's contents").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, path5, opts) => {
+    try {
+      const c = await client(opts);
+      const res = await c.get(`/api/v1/sandboxes/${sandboxId}/files`, { path: path5 });
+      output(opts, res, (view) => {
+        if (view.type !== "file") {
+          console.error(pc3.red(`${view.path} is a directory`));
+          process.exit(1);
+        }
+        process.stdout.write(view.content);
+        if (!view.content.endsWith("\n")) process.stdout.write("\n");
+      });
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("write <sandboxId> <path>").description("Write a file inside the sandbox (--content or --file <local>, else stdin)").option("--content <text>", "file contents").option("--file <local>", "read contents from a local file").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, path5, opts) => {
+    try {
+      let content = opts.content;
+      if (content === void 0 && opts.file) {
+        const { readFile } = await import("fs/promises");
+        content = await readFile(opts.file, "utf8");
+      }
+      if (content === void 0 && !process.stdin.isTTY) {
+        content = await new Promise((resolve) => {
+          let data = "";
+          process.stdin.setEncoding("utf8");
+          process.stdin.on("data", (chunk) => data += chunk);
+          process.stdin.on("end", () => resolve(data));
+        });
+      }
+      if (content === void 0) {
+        console.error(pc3.red("Pass --content, --file, or pipe stdin"));
+        process.exit(1);
+      }
+      const c = await client(opts);
+      const res = await c.post(
+        `/api/v1/sandboxes/${sandboxId}/files`,
+        { path: path5, content }
+      );
+      output(opts, res, (r) => console.log(`wrote ${r.path}`));
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("mkdir <sandboxId> <path>").description("Create a directory (parents included)").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, path5, opts) => {
+    try {
+      const c = await client(opts);
+      const res = await c.post(`/api/v1/sandboxes/${sandboxId}/files`, {
+        path: path5,
+        mkdir: true
+      });
+      output(opts, res, (r) => console.log(`created ${r.path}`));
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("rm <sandboxId> <path>").description("Remove a file or directory inside the sandbox").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, path5, opts) => {
+    try {
+      const c = await client(opts);
+      const res = await c.del(
+        `/api/v1/sandboxes/${sandboxId}/files?path=${encodeURIComponent(path5)}`
+      );
+      output(opts, res, (r) => console.log(`removed ${r.path}`));
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("url <sandboxId>").description("Resolve the provider's public URL for a port").requiredOption("--port <n>", "port the service listens on").option("--protocol <protocol>", "protocol (default provider-chosen)").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, opts) => {
+    try {
+      const c = await client(opts);
+      const res = await c.get(`/api/v1/sandboxes/${sandboxId}/urls`, {
+        port: opts.port,
+        protocol: opts.protocol
+      });
+      output(opts, res, (r) => console.log(safeTerm(r.url)));
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("snapshots <sandboxId>").description("List the sandbox's snapshots").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, opts) => {
+    try {
+      const c = await client(opts);
+      const res = await c.get(
+        `/api/v1/sandboxes/${sandboxId}/snapshots`
+      );
+      output(opts, res.snapshots, (list) => list.forEach(printSnapshot));
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("snapshot <sandboxId>").description("Snapshot a running sandbox through its provider").option("--label <label>", "label for the snapshot").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, opts) => {
+    try {
+      const c = await client(opts);
+      const res = await c.post(
+        `/api/v1/sandboxes/${sandboxId}/snapshots`,
+        opts.label ? { label: opts.label } : {}
+      );
+      output(opts, res.snapshot, printSnapshot);
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+  cmd.command("snapshot-delete <sandboxId> <snapshotId>").description("Delete a snapshot's provider artifact").option("--api-key <key>").option("--base-url <url>").option("--allow-untrusted-host").option("--json", "print the raw response").action(async (sandboxId, snapshotId, opts) => {
+    try {
+      const c = await client(opts);
+      const res = await c.del(
+        `/api/v1/sandboxes/${sandboxId}/snapshots/${snapshotId}`
+      );
+      output(opts, res, () => console.log(`deleted snapshot ${snapshotId}`));
+    } catch (e) {
+      fail(e, opts);
+    }
+  });
+}
+async function followProcess(c, sandboxId, jobId) {
+  let exitCode = 0;
+  for await (const { event, data } of c.sseNamed(
+    `/api/v1/sandboxes/${sandboxId}/processes/${jobId}`
+  )) {
+    const payload = data;
+    if (event === "stdout") process.stdout.write(String(payload.chunk ?? ""));
+    else if (event === "stderr") process.stderr.write(String(payload.chunk ?? ""));
+    else if (event === "exit") {
+      exitCode = typeof payload.exitCode === "number" ? payload.exitCode : 128;
+      return finish();
+    } else if (event === "error") {
+      console.error(pc3.red(`Error: ${String(payload.error ?? "stream error")}`));
+      return finish(1);
+    }
+  }
+  console.error(pc3.yellow("stream ended before the process exited"));
+  return finish(2);
+  function finish(code) {
+    if (code !== void 0) exitCode = code;
+    if (exitCode !== 0) process.exitCode = exitCode;
+  }
+}
+
 // src/index.ts
 init_repl();
 
@@ -1933,7 +2860,7 @@ import * as fs2 from "fs";
 import * as path3 from "path";
 import * as os2 from "os";
 import * as p from "@clack/prompts";
-import pc3 from "picocolors";
+import pc5 from "picocolors";
 function getCredentialsDir() {
   return path3.join(os2.homedir(), ".computesdk");
 }
@@ -1991,7 +2918,7 @@ function openBrowser(url) {
     if (err) {
       p.log.warn("Could not open browser automatically.");
       p.log.info(`Open this URL manually:
-  ${pc3.cyan(url)}`);
+  ${pc5.cyan(url)}`);
     }
   });
 }
@@ -2062,7 +2989,7 @@ async function resolveApiKey(options) {
     const stored = loadStoredCredentials();
     if (stored) {
       p.log.info(
-        `Using stored credentials from ${pc3.dim("~/.computesdk/credentials.json")}`
+        `Using stored credentials from ${pc5.dim("~/.computesdk/credentials.json")}`
       );
       return stored;
     }
@@ -2076,14 +3003,14 @@ async function resolveApiKey(options) {
     try {
       storeCredentials(apiKey);
       p.log.success(
-        `Credentials saved to ${pc3.dim("~/.computesdk/credentials.json")}`
+        `Credentials saved to ${pc5.dim("~/.computesdk/credentials.json")}`
       );
     } catch {
       p.log.warn("Could not save credentials to disk. You may need to authenticate again next time.");
     }
     return apiKey;
   } catch (error) {
-    spinner4.stop(pc3.red("Authentication failed"));
+    spinner4.stop(pc5.red("Authentication failed"));
     throw error;
   }
 }
@@ -2091,7 +3018,7 @@ async function resolveApiKey(options) {
 // src/setup.ts
 init_esm_shims();
 import * as p2 from "@clack/prompts";
-import pc4 from "picocolors";
+import pc6 from "picocolors";
 import { compute as compute2 } from "computesdk";
 async function ensureAuth(options) {
   try {
@@ -2099,8 +3026,8 @@ async function ensureAuth(options) {
     process.env.COMPUTESDK_API_KEY = apiKey;
   } catch (error) {
     p2.log.error(error.message);
-    p2.log.info(`Get your API key at ${pc4.cyan("https://console.computesdk.com")}`);
-    p2.outro(pc4.red("Setup incomplete"));
+    p2.log.info(`Get your API key at ${pc6.cyan("https://console.computesdk.com")}`);
+    p2.outro(pc6.red("Setup incomplete"));
     process.exit(1);
   }
 }
@@ -2129,7 +3056,7 @@ async function resolveProvider(providerFlag, options) {
   if (available.length === 0) {
     p2.log.error("No provider credentials detected");
     p2.log.info("Set one of: E2B_API_KEY, MODAL_TOKEN_ID, RAILWAY_API_KEY, etc.");
-    p2.outro(pc4.red("Setup incomplete"));
+    p2.outro(pc6.red("Setup incomplete"));
     process.exit(1);
   }
   if (available.length === 1) {
@@ -2173,24 +3100,24 @@ program.name("compute").description("Cloud-native workspace management").version
 program.option("--login", "force re-authentication").option("--logout", "clear stored credentials").action(async (opts) => {
   if (opts.logout) {
     console.log();
-    p4.intro(pc6.cyan(`@computesdk/cli v${VERSION}`));
+    p4.intro(pc8.cyan(`@computesdk/cli v${VERSION}`));
     clearStoredCredentials();
     p4.log.success("Logged out. Stored credentials removed.");
-    p4.outro(pc6.green("Done!"));
+    p4.outro(pc8.green("Done!"));
     process.exit(0);
   }
   if (opts.login) {
     console.log();
-    p4.intro(pc6.cyan(`@computesdk/cli v${VERSION}`));
+    p4.intro(pc8.cyan(`@computesdk/cli v${VERSION}`));
     await ensureAuth({ forceLogin: true });
-    p4.outro(pc6.green("Authenticated!"));
+    p4.outro(pc8.green("Authenticated!"));
     process.exit(0);
   }
   program.help();
 });
 program.command("create").description("Create a new workspace (same as create-compute)").argument("[repo]", "Repository in owner/repo format").option("-b, --branch <branch>", "Branch name", "main").option("-p, --provider <provider>", "provider to use").option("--no-attach", "Create workspace but do not attach").action(async (repo, options) => {
   console.log();
-  p4.intro(pc6.cyan(`@computesdk/cli v${VERSION}`));
+  p4.intro(pc8.cyan(`@computesdk/cli v${VERSION}`));
   await ensureAuth();
   if (!repo) {
     const state = loadWorkspaceState();
@@ -2211,7 +3138,7 @@ program.command("create").description("Create a new workspace (same as create-co
         message: "Select workspace to attach (or create new)",
         options: [
           ...choices,
-          { value: "__new__", label: pc6.gray("+ Create new workspace") }
+          { value: "__new__", label: pc8.gray("+ Create new workspace") }
         ]
       });
       if (p4.isCancel(selected)) {
@@ -2252,15 +3179,15 @@ program.command("create").description("Create a new workspace (same as create-co
       branch: options.branch,
       provider
     });
-    spinner4.stop(`Workspace ready: ${pc6.cyan(workspace.id)}`);
+    spinner4.stop(`Workspace ready: ${pc8.cyan(workspace.id)}`);
     if (options.attach !== false) {
       console.log();
       await workspaceAttach(workspace.id);
     } else {
-      p4.outro(pc6.green("Workspace created!"));
+      p4.outro(pc8.green("Workspace created!"));
     }
   } catch (error) {
-    spinner4.stop(pc6.red("Failed to create workspace"));
+    spinner4.stop(pc8.red("Failed to create workspace"));
     p4.log.error(error.message);
     process.exit(1);
   }
@@ -2269,7 +3196,7 @@ var sandboxCmd = program.command("sandbox").alias("sb").description("Manage raw
 sandboxCmd.command("create").description("Create a new sandbox").option("-p, --provider <provider>", "provider to use").option("--timeout <duration>", "sandbox timeout (e.g. 5m, 1h)").option("--name <name>", "sandbox name").option("--connect", "drop into the REPL after creation").option("--silent", "only output the sandbox ID").action(async (opts) => {
   if (!opts.silent) {
     console.log();
-    p4.intro(pc6.cyan(`@computesdk/cli v${VERSION}`));
+    p4.intro(pc8.cyan(`@computesdk/cli v${VERSION}`));
   }
   await ensureAuth();
   const provider = await resolveProvider(opts.provider);
@@ -2281,7 +3208,7 @@ sandboxCmd.command("create").description("Create a new sandbox").option("-p, --p
       const sandbox = await compute4.sandbox.create(
         buildCreateOptions(opts)
       );
-      spinner4.stop(`Sandbox ready: ${pc6.cyan(sandbox.sandboxId)}`);
+      spinner4.stop(`Sandbox ready: ${pc8.cyan(sandbox.sandboxId)}`);
       const { saveSandbox: saveSandbox2 } = await Promise.resolve().then(() => (init_workspace_cli(), workspace_cli_exports));
       await saveSandbox2({
         id: sandbox.sandboxId,
@@ -2294,7 +3221,7 @@ sandboxCmd.command("create").description("Create a new sandbox").option("-p, --p
         await startREPL(sandbox, provider);
       }
     } catch (error) {
-      spinner4.stop(pc6.red("Failed to create sandbox"));
+      spinner4.stop(pc8.red("Failed to create sandbox"));
       p4.log.error(error.message);
       process.exit(1);
     }
@@ -2323,14 +3250,14 @@ sandboxCmd.command("create").description("Create a new sandbox").option("-p, --p
 });
 sandboxCmd.command("destroy").description("Destroy one or more sandboxes").aliases(["rm", "stop"]).argument("[sandbox_id...]", "sandbox IDs to destroy (optional - will show picker if not provided)").option("-p, --provider <provider>", "provider to use").action(async (sandboxIds, opts) => {
   console.log();
-  p4.intro(pc6.cyan(`@computesdk/cli v${VERSION}`));
+  p4.intro(pc8.cyan(`@computesdk/cli v${VERSION}`));
   const { loadState: loadState2, saveState: saveState2 } = await Promise.resolve().then(() => (init_workspace_cli(), workspace_cli_exports));
   const state = loadState2();
   if (!sandboxIds || sandboxIds.length === 0) {
     const workspaces = Object.values(state.workspaces);
     if (workspaces.length === 0) {
       p4.log.info("No sandboxes to destroy.");
-      p4.outro(pc6.green("Done!"));
+      p4.outro(pc8.green("Done!"));
       return;
     }
     const choices = workspaces.map((ws) => {
@@ -2338,7 +3265,7 @@ sandboxCmd.command("destroy").description("Destroy one or more sandboxes").alias
         (Date.now() - new Date(ws.lastUsed).getTime()) / (1e3 * 60 * 60 * 24)
       );
       const ageStr = age === 0 ? "today" : age === 1 ? "1 day ago" : `${age} days ago`;
-      const status = age > 7 ? pc6.red("stale") : age > 1 ? pc6.yellow("idle") : pc6.green("active");
+      const status = age > 7 ? pc8.red("stale") : age > 1 ? pc8.yellow("idle") : pc8.green("active");
       return {
         value: ws.sandboxId,
         label: `${status} ${ws.sandboxId} (${ws.provider}, last active ${ageStr})`
@@ -2366,7 +3293,7 @@ sandboxCmd.command("destroy").description("Destroy one or more sandboxes").alias
   for (const result of results) {
     if (result.status === "fulfilled") {
       const sandboxId = result.value;
-      console.log(pc6.green(`Destroyed ${sandboxId}`));
+      console.log(pc8.green(`Destroyed ${sandboxId}`));
       const workspaceId = Object.keys(state.workspaces).find(
         (key) => state.workspaces[key].sandboxId === sandboxId
       );
@@ -2374,19 +3301,19 @@ sandboxCmd.command("destroy").description("Destroy one or more sandboxes").alias
         delete state.workspaces[workspaceId];
       }
     } else {
-      console.error(pc6.red(`Failed to destroy: ${result.reason?.message || result.reason}`));
+      console.error(pc8.red(`Failed to destroy: ${result.reason?.message || result.reason}`));
     }
   }
   saveState2(state);
 });
 sandboxCmd.command("list").alias("ls").description("List all sandboxes").action(async () => {
   console.log();
-  p4.intro(pc6.cyan(`@computesdk/cli v${VERSION}`));
+  p4.intro(pc8.cyan(`@computesdk/cli v${VERSION}`));
   await sandboxList();
 });
 sandboxCmd.command("connect").description("Connect to a sandbox (opens REPL; same as compute connect)").aliases(["ssh", "shell"]).argument("[sandbox_id]", "sandbox ID (optional - will show picker if not provided)").option("-p, --provider <provider>", "provider to use").action(async (sandboxId, opts) => {
   console.log();
-  p4.intro(pc6.cyan(`@computesdk/cli v${VERSION}`));
+  p4.intro(pc8.cyan(`@computesdk/cli v${VERSION}`));
   await ensureAuth();
   const provider = await resolveProvider(opts.provider);
   configureCompute(provider);
@@ -2397,7 +3324,7 @@ sandboxCmd.command("connect").description("Connect to a sandbox (opens REPL; sam
     if (workspaces.length === 0) {
       p4.log.info("No sandboxes found.");
       p4.log.info("Create one with: compute sandbox create");
-      p4.outro(pc6.green("Done!"));
+      p4.outro(pc8.green("Done!"));
       return;
     }
     const choices = workspaces.map((ws) => {
@@ -2405,7 +3332,7 @@ sandboxCmd.command("connect").description("Connect to a sandbox (opens REPL; sam
         (Date.now() - new Date(ws.lastUsed).getTime()) / (1e3 * 60 * 60 * 24)
       );
       const ageStr = age === 0 ? "today" : age === 1 ? "1 day ago" : `${age} days ago`;
-      const status = age > 7 ? pc6.red("stale") : age > 1 ? pc6.yellow("idle") : pc6.green("active");
+      const status = age > 7 ? pc8.red("stale") : age > 1 ? pc8.yellow("idle") : pc8.green("active");
       return {
         value: ws.sandboxId,
         label: `${status} ${ws.sandboxId} (${ws.provider}, last active ${ageStr})`
@@ -2425,7 +3352,7 @@ sandboxCmd.command("connect").description("Connect to a sandbox (opens REPL; sam
   spinner4.start("Connecting...");
   const sandbox = await compute4.sandbox.getById(sandboxId);
   if (!sandbox) {
-    spinner4.stop(pc6.red(`Sandbox not found: ${sandboxId}`));
+    spinner4.stop(pc8.red(`Sandbox not found: ${sandboxId}`));
     process.exit(1);
   }
   spinner4.stop("");
@@ -2437,7 +3364,7 @@ sandboxCmd.command("exec").description("Execute a command in a sandbox").argumen
   configureCompute(provider);
   const sandbox = await compute4.sandbox.getById(sandboxId);
   if (!sandbox) {
-    console.error(pc6.red(`Sandbox not found: ${sandboxId}`));
+    console.error(pc8.red(`Sandbox not found: ${sandboxId}`));
     process.exit(1);
   }
   const cmd = buildExecCommand(command, opts);
@@ -2452,7 +3379,7 @@ sandboxCmd.command("exec").description("Execute a command in a sandbox").argumen
 });
 program.command("connect").description("Connect to a sandbox (opens REPL)").aliases(["ssh", "shell"]).argument("[sandbox_id]", "sandbox ID (optional - will show picker if not provided)").option("-p, --provider <provider>", "provider to use").action(async (sandboxId, opts) => {
   console.log();
-  p4.intro(pc6.cyan(`@computesdk/cli v${VERSION}`));
+  p4.intro(pc8.cyan(`@computesdk/cli v${VERSION}`));
   await ensureAuth();
   const provider = await resolveProvider(opts.provider);
   configureCompute(provider);
@@ -2463,7 +3390,7 @@ program.command("connect").description("Connect to a sandbox (opens REPL)").alia
     if (workspaces.length === 0) {
       p4.log.info("No sandboxes found.");
       p4.log.info("Create one with: compute sandbox create");
-      p4.outro(pc6.green("Done!"));
+      p4.outro(pc8.green("Done!"));
       return;
     }
     const choices = workspaces.map((ws) => {
@@ -2471,7 +3398,7 @@ program.command("connect").description("Connect to a sandbox (opens REPL)").alia
         (Date.now() - new Date(ws.lastUsed).getTime()) / (1e3 * 60 * 60 * 24)
       );
       const ageStr = age === 0 ? "today" : age === 1 ? "1 day ago" : `${age} days ago`;
-      const status = age > 7 ? pc6.red("stale") : age > 1 ? pc6.yellow("idle") : pc6.green("active");
+      const status = age > 7 ? pc8.red("stale") : age > 1 ? pc8.yellow("idle") : pc8.green("active");
       return {
         value: ws.sandboxId,
         label: `${status} ${ws.sandboxId} (${ws.provider}, last active ${ageStr})`
@@ -2491,7 +3418,7 @@ program.command("connect").description("Connect to a sandbox (opens REPL)").alia
   spinner4.start("Connecting...");
   const sandbox = await compute4.sandbox.getById(sandboxId);
   if (!sandbox) {
-    spinner4.stop(pc6.red(`Sandbox not found: ${sandboxId}`));
+    spinner4.stop(pc8.red(`Sandbox not found: ${sandboxId}`));
     process.exit(1);
   }
   spinner4.stop("");
@@ -2500,11 +3427,11 @@ program.command("connect").description("Connect to a sandbox (opens REPL)").alia
 var workspaceCmd = program.command("workspace").alias("ws").description("Manage workspaces (sandbox + git + worktree)");
 workspaceCmd.command("create").description("Create a new workspace").argument("[repo]", "Repository in owner/repo format").option("-b, --branch <branch>", "Branch name", "main").option("-p, --provider <provider>", "provider to use").option("--no-attach", "Create workspace but do not attach").action(async (repo, options) => {
   console.log();
-  p4.intro(pc6.cyan(`@computesdk/cli v${VERSION}`));
+  p4.intro(pc8.cyan(`@computesdk/cli v${VERSION}`));
   await ensureAuth();
   if (!repo) {
     p4.log.info("Usage: compute workspace create owner/repo --branch main");
-    p4.outro(pc6.green("Done!"));
+    p4.outro(pc8.green("Done!"));
     return;
   }
   const provider = await resolveProvider(options.provider, { interactive: true });
@@ -2517,33 +3444,33 @@ workspaceCmd.command("create").description("Create a new workspace").argument("[
       branch: options.branch,
       provider
     });
-    spinner4.stop(`Workspace ready: ${pc6.cyan(workspace.id)}`);
+    spinner4.stop(`Workspace ready: ${pc8.cyan(workspace.id)}`);
     if (options.attach !== false) {
       console.log();
       await workspaceAttach(workspace.id);
     } else {
-      p4.outro(pc6.green("Workspace created!"));
+      p4.outro(pc8.green("Workspace created!"));
     }
   } catch (error) {
-    spinner4.stop(pc6.red("Failed to create workspace"));
+    spinner4.stop(pc8.red("Failed to create workspace"));
     p4.log.error(error.message);
     process.exit(1);
   }
 });
 workspaceCmd.command("list").alias("ls").description("List all workspaces").action(async () => {
   console.log();
-  p4.intro(pc6.cyan(`@computesdk/cli v${VERSION}`));
+  p4.intro(pc8.cyan(`@computesdk/cli v${VERSION}`));
   await workspaceList();
 });
 workspaceCmd.command("destroy").alias("rm").description("Destroy a workspace").argument("[id]", "Workspace ID (repo:branch format, optional - will show picker if not provided)").action(async (id) => {
   console.log();
-  p4.intro(pc6.cyan(`@computesdk/cli v${VERSION}`));
+  p4.intro(pc8.cyan(`@computesdk/cli v${VERSION}`));
   if (!id) {
     const state = loadWorkspaceState();
     const workspaceIds = Object.keys(state.workspaces);
     if (workspaceIds.length === 0) {
       p4.log.info("No workspaces to destroy.");
-      p4.outro(pc6.green("Done!"));
+      p4.outro(pc8.green("Done!"));
       return;
     }
     const choices = workspaceIds.map((key) => {
@@ -2554,7 +3481,7 @@ workspaceCmd.command("destroy").alias("rm").description("Destroy a workspace").a
       const ageStr = age === 0 ? "today" : age === 1 ? "1 day ago" : `${age} days ago`;
       return {
         value: key,
-        label: `${pc6.cyan(key)} (${ws.provider}, last used ${ageStr})`
+        label: `${pc8.cyan(key)} (${ws.provider}, last used ${ageStr})`
       };
     });
     const selected = await p4.multiselect({
@@ -2574,14 +3501,14 @@ workspaceCmd.command("destroy").alias("rm").description("Destroy a workspace").a
 });
 workspaceCmd.command("connect").alias("attach").description("Connect to an existing workspace (with git context)").argument("[id]", "Workspace ID (optional - will show picker if not provided)").action(async (id) => {
   console.log();
-  p4.intro(pc6.cyan(`@computesdk/cli v${VERSION}`));
+  p4.intro(pc8.cyan(`@computesdk/cli v${VERSION}`));
   if (!id) {
     const state = loadWorkspaceState();
     const workspaceIds = Object.keys(state.workspaces);
     if (workspaceIds.length === 0) {
       p4.log.info("No workspaces found.");
       p4.log.info("Create one with: compute create owner/repo");
-      p4.outro(pc6.green("Done!"));
+      p4.outro(pc8.green("Done!"));
       return;
     }
     const choices = workspaceIds.map((key) => {
@@ -2592,7 +3519,7 @@ workspaceCmd.command("connect").alias("attach").description("Connect to an exist
       const ageStr = age === 0 ? "today" : age === 1 ? "1 day ago" : `${age} days ago`;
       return {
         value: key,
-        label: `${pc6.cyan(key)} (${ws.provider}, last used ${ageStr})`
+        label: `${pc8.cyan(key)} (${ws.provider}, last used ${ageStr})`
       };
     });
     const selected = await p4.select({
@@ -2617,7 +3544,7 @@ program.command("run").description("Create a sandbox, run a command, then option
       buildCreateOptions(opts)
     );
   } catch (error) {
-    console.error(pc6.red(`Failed to create sandbox: ${error.message}`));
+    console.error(pc8.red(`Failed to create sandbox: ${error.message}`));
     process.exit(1);
   }
   try {
@@ -2640,37 +3567,39 @@ program.command("run").description("Create a sandbox, run a command, then option
       } catch {
       }
     }
-    console.error(pc6.red(error.message));
+    console.error(pc8.red(error.message));
     process.exit(1);
   }
 });
 program.command("providers").description("List all providers and their configuration status").action(async () => {
   console.log();
-  p4.intro(pc6.cyan(`@computesdk/cli v${VERSION}`));
+  p4.intro(pc8.cyan(`@computesdk/cli v${VERSION}`));
   const statuses = getProviderStatus();
   console.log();
   for (const status of statuses) {
-    const icon = status.ready ? pc6.green("\u25CF") : pc6.gray("\u25CB");
-    const name = status.ready ? pc6.white(status.name) : pc6.gray(status.name);
-    const detail = status.ready ? pc6.green("ready") : pc6.gray(`missing: ${status.missing.join(", ")}`);
+    const icon = status.ready ? pc8.green("\u25CF") : pc8.gray("\u25CB");
+    const name = status.ready ? pc8.white(status.name) : pc8.gray(status.name);
+    const detail = status.ready ? pc8.green("ready") : pc8.gray(`missing: ${status.missing.join(", ")}`);
     console.log(`  ${icon} ${name}  ${detail}`);
   }
   console.log();
 });
 program.command("login").description("Authenticate with ComputeSDK").action(async () => {
   console.log();
-  p4.intro(pc6.cyan(`@computesdk/cli v${VERSION}`));
+  p4.intro(pc8.cyan(`@computesdk/cli v${VERSION}`));
   await ensureAuth({ forceLogin: true });
-  p4.outro(pc6.green("Authenticated!"));
+  p4.outro(pc8.green("Authenticated!"));
 });
 program.command("logout").description("Clear stored credentials").action(() => {
   console.log();
-  p4.intro(pc6.cyan(`@computesdk/cli v${VERSION}`));
+  p4.intro(pc8.cyan(`@computesdk/cli v${VERSION}`));
   clearStoredCredentials();
   p4.log.success("Logged out. Stored credentials removed.");
-  p4.outro(pc6.green("Done!"));
+  p4.outro(pc8.green("Done!"));
 });
 registerActionsCommands(program);
+registerMarketCommands(program);
+registerSandboxesCommands(program);
 program.command("bench").description("Benchmarks platform CLI (run, auth, org, benchmarks, runs, results, artifacts, export, ...)").allowUnknownOption().helpOption(false).action(() => {
 });
 function buildCreateOptions(opts) {
@@ -2748,7 +3677,7 @@ async function main() {
   await program.parseAsync(process.argv);
 }
 main().catch((error) => {
-  console.error(pc6.red(`
+  console.error(pc8.red(`
 Error: ${error.message}`));
   process.exit(1);
 });