@kvbox/cli 0.5.21 → 0.5.23

package/dist/kvbox.js

@@ -149,7 +149,7 @@ async function spin(message, work, opts = {}) {
 }
 
 // src/program.ts
-import { Command as Command50 } from "commander";
+import { Command as Command57 } from "commander";
 
 // ../shared/src/version.ts
 import { createRequire } from "module";
@@ -164,10 +164,10 @@ function versionOf(srcFileUrl, injected) {
 }
 
 // src/version.ts
-var VERSION = versionOf(import.meta.url, true ? "0.5.21" : void 0);
+var VERSION = versionOf(import.meta.url, true ? "0.5.23" : void 0);
 
 // src/commands/vm/index.ts
-import { Command as Command25 } from "commander";
+import { Command as Command26 } from "commander";
 
 // src/commands/vm/connect.ts
 import { spawnSync as spawnSync2 } from "child_process";
@@ -241,7 +241,25 @@ function paths(home = kvboxHome()) {
         sock: join(dir, "fc.sock"),
         /** Firecracker's vsock endpoint: the host connects here to reach kvbox-agent inside the box (core/agent.ts). */
         vsock: join(dir, "vsock.sock"),
-        log: join(dir, "fc.log")
+        log: join(dir, "fc.log"),
+        /**
+         * An attached volume's drive as Firecracker sees it (#52): a symlink in the box dir to the volume's
+         * disk, given to Firecracker by its relative name (`volumeDriveRel`), so a snapshot's vmstate names
+         * it relative to whichever box dir it is restored into. There it is a same-size empty placeholder.
+         */
+        volumeDrive: (volume) => join(dir, volumeDriveRel(volume))
+      };
+    },
+    /** Volumes are filed like boxes, by owner: volumes/<owner>/<name> (#52). */
+    volumes: join(home, "volumes"),
+    ownerVolumes: (owner) => join(home, "volumes", owner),
+    volume: (owner, name) => {
+      const dir = join(home, "volumes", owner, name);
+      return {
+        dir,
+        meta: join(dir, "meta.json"),
+        /** The volume itself: a sparse ext4 the guest sees as a whole disk. */
+        disk: join(dir, "disk.ext4")
       };
     },
     snapshot: (owner, name) => {
@@ -257,6 +275,12 @@ function paths(home = kvboxHome()) {
     }
   };
 }
+function volumeDriveRel(volume) {
+  return `volume-${volume}.ext4`;
+}
+function volumeMountPath(volume) {
+  return `/mnt/${volume}`;
+}
 
 // src/session.ts
 import { chmod, mkdir, readFile, rm, writeFile } from "fs/promises";
@@ -450,7 +474,36 @@ var MachineSchema = z2.object({
   /** Whether the owner slug is a user or an org. Only the control plane knows; it fills it in on `GET /machines`. */
   ownerKind: z2.enum(["user", "org"]).optional(),
   /** Seconds without network traffic before the host hibernates the box (#47). Absent: never. */
-  autoHibernateSec: z2.number().int().positive().optional()
+  autoHibernateSec: z2.number().int().positive().optional(),
+  /** Volumes attached to the box (#52), in drive order; each is mounted at `mountPath` while the box runs. Absent: none. */
+  volumes: z2.array(z2.object({ name: z2.string(), sizeGib: z2.number().int(), mountPath: z2.string() })).optional()
+});
+var VolumeSchema = z2.object({
+  /** The host's 6-hex volume id (#91): the ledger's key, so a name removed and made again is two volumes. */
+  id: z2.string(),
+  name: z2.string(),
+  owner: z2.string(),
+  sizeGib: z2.number().int(),
+  /** What the sparse file really occupies on the host. */
+  usedBytes: z2.number().int(),
+  attachedTo: z2.string().nullable(),
+  createdAt: z2.string(),
+  /** Whether the owner slug is a user or an org. Only the control plane knows; it fills it in on `GET /volumes`. */
+  ownerKind: z2.enum(["user", "org"]).optional()
+});
+var MAX_VOLUME_GIB = 4096;
+var CreateVolumeRequest = z2.object({
+  name: z2.string(),
+  sizeGib: z2.number().int().min(1).max(MAX_VOLUME_GIB),
+  /**
+   * Through a control plane (#91): the box this volume is for, so it is made on that box's host. A
+   * volume attaches only to a box on its own host. Absent: the host with the most room for volumes.
+   * A host ignores it.
+   */
+  box: z2.string().optional()
+});
+var AttachVolumeRequest = z2.object({
+  box: z2.string()
 });
 var CreateMachineRequest = z2.object({
   name: z2.string().optional(),
@@ -512,12 +565,21 @@ var CreateSnapshotRequest = z2.object({
   box: z2.string(),
   name: z2.string()
 });
+var DiskCapacitySchema = z2.object({
+  totalGib: z2.number().int(),
+  freeGib: z2.number().int(),
+  volumesGib: z2.number().int(),
+  volumesUsedGib: z2.number().int(),
+  headroomGib: z2.number().int()
+});
 var CapacitySchema = z2.object({
   hostMemMib: z2.number().int(),
   hostCores: z2.number().int(),
   reservedMemMib: z2.number().int(),
   reservedVcpu: z2.number().int(),
-  running: z2.number().int()
+  running: z2.number().int(),
+  /** Absent on a host from before volumes (#91): it cannot take one. */
+  disk: DiskCapacitySchema.optional()
 });
 var RecoveryReportSchema = z2.object({
   at: z2.string(),
@@ -604,14 +666,33 @@ var BoxUsageSchema = MachineUsageSchema.omit({ window: true, status: true }).ext
    */
   createdBy: z2.string().optional()
 });
+var VolumeUsageSchema = z2.object({
+  /** The host's volume id; a name removed and made again appears twice, with two ids. */
+  id: z2.string(),
+  name: z2.string(),
+  owner: z2.string(),
+  ownerKind: z2.enum(["user", "org"]).optional(),
+  /** The size at the end of the window (or when removed). */
+  sizeGib: z2.number().int(),
+  status: z2.enum(["present", "removed"]),
+  volumeHours: z2.number(),
+  volumeGibHours: z2.number(),
+  cost: z2.object({ amount: z2.number(), currency: z2.string() }).optional(),
+  historyFrom: z2.string().nullable()
+});
 var UsageReportSchema = z2.object({
   window: z2.object({ from: z2.string(), to: z2.string() }),
   boxes: z2.array(BoxUsageSchema),
+  /** Absent from a side older than #91. */
+  volumes: z2.array(VolumeUsageSchema).optional(),
   totals: z2.object({
     seconds: MachineUsageSchema.shape.seconds,
     vcpuHours: z2.number(),
     ramGibHours: z2.number(),
     diskGibHours: z2.number(),
+    volumeHours: z2.number().optional(),
+    volumeGibHours: z2.number().optional(),
+    /** Boxes and volumes together. */
     cost: z2.object({ amount: z2.number(), currency: z2.string() }).optional()
   })
 });
@@ -632,6 +713,20 @@ var UsageEventsResponseSchema = z2.object({
   events: z2.array(UsageEventRowSchema),
   next: z2.number().int()
 });
+var VolumeEventRowSchema = z2.object({
+  id: z2.number().int(),
+  volumeId: z2.string(),
+  owner: z2.string(),
+  name: z2.string(),
+  at: z2.string(),
+  sizeGib: z2.number().int(),
+  by: z2.enum(["create", "resize", "rm"])
+});
+var VolumeEventsResponseSchema = z2.object({
+  ledger: z2.string().min(1),
+  events: z2.array(VolumeEventRowSchema),
+  next: z2.number().int()
+});
 var ApiErrorSchema = z2.object({
   error: z2.string()
 });
@@ -1042,6 +1137,23 @@ var ServerClient = class {
   deleteSnapshot(name) {
     return this.call("DELETE", `/snapshots/${encodeURIComponent(name)}`, z3.undefined());
   }
+  // ---- volumes (#52) ----
+  listVolumes(opts = {}) {
+    return this.call("GET", `/volumes${allQuery(opts)}`, z3.array(VolumeSchema), void 0, opts.org);
+  }
+  createVolume(req) {
+    return this.call("POST", "/volumes", VolumeSchema, req);
+  }
+  deleteVolume(name) {
+    return this.call("DELETE", `/volumes/${encodeURIComponent(name)}`, z3.undefined());
+  }
+  /** Both answer with the box as it is afterwards (restarted when it was running). */
+  attachVolume(name, req) {
+    return this.call("POST", `/volumes/${encodeURIComponent(name)}/attach`, MachineSchema, req);
+  }
+  detachVolume(name, req) {
+    return this.call("POST", `/volumes/${encodeURIComponent(name)}/detach`, MachineSchema, req);
+  }
   // ---- control plane only (`kvbox login`, `logout`, `whoami`) ----
   login(req) {
     return this.call("POST", "/login", LoginResponseSchema, req);
@@ -1441,21 +1553,11 @@ var forkCommand = new Command4("fork").description("copy a box, running or stopp
   }
 });
 
-// src/commands/vm/hibernate.ts
-import { Command as Command5 } from "commander";
-var hibernateCommand = new Command5("hibernate").description("save a box's memory to disk and free its RAM (kvbox wake continues it where it left off)").argument("<name>", "box name").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
-  const client = await clientFor(cmd.optsWithGlobals());
-  try {
-    const box = await spin(`hibernating ${name} (saving its memory to disk)\u2026`, client.hibernateMachine(name));
-    if (opts.json) json(box);
-    else info(`${color.green("\u2713")} box ${name} hibernated (memory saved to disk, RAM freed; kvbox wake ${name} continues it where it left off)`);
-  } finally {
-    await client.close();
-  }
-});
+// src/commands/vm/get.ts
+import { Command as Command6 } from "commander";
 
 // src/commands/vm/ls.ts
-import { Command as Command6 } from "commander";
+import { Command as Command5 } from "commander";
 function ownerCell(b, me2) {
   const slug = slugOf(b.owner);
   if (slug === me2) return "private";
@@ -1465,7 +1567,7 @@ function addressOf(b) {
   if (b.ssh !== void 0) return b.ssh.host;
   return b.ip === "" ? "-" : b.ip;
 }
-var lsCommand = new Command6("ls").description("list boxes with status and address (yours and your orgs'; --org <slug> for one org)").option("-a, --all", "every box on the platform (platform admins only)").option("--json", "print as JSON").action(async (opts, cmd) => {
+var lsCommand = new Command5("ls").description("list boxes with status and address (yours and your orgs'; --org <slug> for one org)").option("-a, --all", "every box on the platform (platform admins only)").option("--json", "print as JSON").action(async (opts, cmd) => {
   const client = await clientFor(cmd.optsWithGlobals());
   try {
     const boxes = await spin("listing boxes\u2026", client.listMachines({ all: opts.all }));
@@ -1491,13 +1593,108 @@ function lsRows(boxes, cloud) {
     status: status(b.status),
     address: addressOf(b),
     size: b.status === "unknown" ? "-" : `${shape(b.vcpu, b.memMib, b.diskBytes)} ${color.dim(`(${gbShort(b.diskUsedBytes)} used)`)}`,
-    created: age(b.createdAt)
+    created: age(b.createdAt),
+    base: b.status === "unknown" || b.base === "" ? "-" : b.base
   }));
 }
 
-// src/commands/vm/pause.ts
+// src/commands/vm/proxy/shared.ts
+var boxOf = (sub, user) => user !== void 0 && sub.owner !== user ? `${sub.owner}/${sub.box}` : sub.box;
+function subdomainJson(sub, user) {
+  return { box: boxOf(sub, user), subdomain: sub.subdomain, port: sub.port, url: sub.url, routes: sub.routes };
+}
+function httpsRowsOf(sub, user) {
+  const box = boxOf(sub, user);
+  return [{ box, guestPort: sub.port, proto: "https", url: sub.url }, ...sub.routes.map((r) => ({ box, guestPort: r.port, proto: "https", url: r.url, name: r.name }))];
+}
+function requireCloud(client) {
+  if (client.target.kind !== "cloud") throw new KvboxError("HTTPS names need the kvbox cloud: kvbox login (this host's own socket has none)");
+}
+function rowsOf(box, user, only) {
+  return (box.ports ?? []).filter(only ?? (() => true)).map((f) => ({ box: displayName(box, user), ...f }));
+}
+function reaches(row, short = false) {
+  if (row.address !== void 0) return `${row.address}:${row.hostPort}`;
+  return short ? `:${row.hostPort}` : `port ${row.hostPort} of this host's public address`;
+}
+function parsePorts(texts) {
+  return texts.map((t) => {
+    const n = Number(t);
+    if (!/^\d+$/.test(t) || n < 1 || n > 65535) throw new KvboxError(`"${t}" is not a port (1-65535)`);
+    return n;
+  });
+}
+async function findBox(client, text2) {
+  const found = pickRef(await boxesFor(client, text2), text2, me(client));
+  if (!found) throw new KvboxError(`box ${text2}: not found (kvbox ls)`);
+  return found;
+}
+
+// src/commands/vm/get.ts
+var getCommand = new Command6("get").description("show one box in full: status, size, address, HTTPS name, ports, auto-hibernate").argument("<name>", "box name").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
+  const client = await clientFor(cmd.optsWithGlobals());
+  try {
+    const user = me(client);
+    const box = await findBox(client, name);
+    const sub = client.target.kind === "cloud" ? await subdomainOf(client, box) : void 0;
+    if (opts.json) {
+      json({ ...box, ...sub ? { subdomain: subdomainJson(sub, user) } : {} });
+      return;
+    }
+    const rows2 = getRows(box, sub, user);
+    const width2 = Math.max(...rows2.map(([k]) => k.length));
+    for (const [k, v] of rows2) info(`${color.dim(k.padStart(width2))}  ${v}`);
+  } finally {
+    await client.close();
+  }
+});
+async function subdomainOf(client, box) {
+  try {
+    const slug = slugOf(box.owner);
+    return (await client.listSubdomains()).find((s) => s.box === box.name && s.owner === slug);
+  } catch (err) {
+    warn(`HTTPS name not shown: ${err.message}`);
+    return void 0;
+  }
+}
+function getRows(box, sub, user) {
+  const rows2 = [
+    ["name", color.bold(displayName(box, user))],
+    ["status", status(box.status)]
+  ];
+  if (user !== void 0) rows2.push(["owner", ownerCell(box, user)]);
+  if (box.status !== "unknown") {
+    rows2.push(["size", `${shape(box.vcpu, box.memMib, box.diskBytes)} ${color.dim(`(${gb(box.diskUsedBytes)} used)`)}`]);
+    rows2.push(["address", box.ssh?.host ?? (box.ip === "" ? "-" : box.ip)]);
+    rows2.push(["ssh", box.ssh ? `ssh -p ${box.ssh.port} ${box.ssh.user}@${box.ssh.host}` : `kvbox connect ${displayName(box, user)}`]);
+  }
+  rows2.push(["url", sub ? [`${sub.url} ${color.dim(`(port ${sub.port})`)}`, ...sub.routes.map((r) => `${r.url} ${color.dim(`(port ${r.port})`)}`)].join(", ") : "-"]);
+  const ports = rowsOf(box, user).map((r) => `${r.guestPort}/${r.proto} \u2192 ${reaches(r, true)}`);
+  rows2.push(["ports", ports.length === 0 ? "-" : ports.join(", ")]);
+  rows2.push(["volumes", box.volumes?.length ? box.volumes.map((v) => `${v.name} ${color.dim(`(${v.sizeGib} GB at ${v.mountPath})`)}`).join(", ") : "-"]);
+  rows2.push(["auto-hibernate", box.autoHibernateSec ? `after ${duration(box.autoHibernateSec)} without network traffic` : "off"]);
+  rows2.push(["source", box.source]);
+  rows2.push(["base", box.base]);
+  rows2.push(["created", `${age(box.createdAt)} ${color.dim(`(${box.createdAt})`)}`]);
+  return rows2;
+}
+
+// src/commands/vm/hibernate.ts
 import { Command as Command7 } from "commander";
-var pauseCommand = new Command7("pause").description("freeze a box in place (memory and processes kept, no CPU used; kvbox resume continues it instantly)").argument("<name>", "box name").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
+var hibernateCommand = new Command7("hibernate").description("save a box's memory to disk and free its RAM (kvbox wake continues it where it left off)").argument("<name>", "box name").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
+  const client = await clientFor(cmd.optsWithGlobals());
+  try {
+    const box = await spin(`hibernating ${name} (saving its memory to disk)\u2026`, client.hibernateMachine(name));
+    if (opts.json) json(box);
+    else info(`${color.green("\u2713")} box ${name} hibernated (memory saved to disk, RAM freed; kvbox wake ${name} continues it where it left off)`);
+  } finally {
+    await client.close();
+  }
+});
+
+// src/commands/vm/pause.ts
+import { Command as Command8 } from "commander";
+var pauseCommand = new Command8("pause").description("freeze a box in place (memory and processes kept, no CPU used; kvbox resume continues it instantly)").argument("<name>", "box name").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
   const client = await clientFor(cmd.optsWithGlobals());
   try {
     const box = await spin(`pausing ${name}\u2026`, client.pauseMachine(name));
@@ -1509,7 +1706,7 @@ var pauseCommand = new Command7("pause").description("freeze a box in place (mem
 });
 
 // src/commands/vm/proxy/claim.ts
-import { Command as Command8 } from "commander";
+import { Command as Command9 } from "commander";
 
 // ../shared/src/names.ts
 import { createHmac } from "crypto";
@@ -1562,40 +1759,8 @@ function assertRouteName(text2) {
   return text2;
 }
 
-// src/commands/vm/proxy/shared.ts
-var boxOf = (sub, user) => user !== void 0 && sub.owner !== user ? `${sub.owner}/${sub.box}` : sub.box;
-function subdomainJson(sub, user) {
-  return { box: boxOf(sub, user), subdomain: sub.subdomain, port: sub.port, url: sub.url, routes: sub.routes };
-}
-function httpsRowsOf(sub, user) {
-  const box = boxOf(sub, user);
-  return [{ box, guestPort: sub.port, proto: "https", url: sub.url }, ...sub.routes.map((r) => ({ box, guestPort: r.port, proto: "https", url: r.url, name: r.name }))];
-}
-function requireCloud(client) {
-  if (client.target.kind !== "cloud") throw new KvboxError("HTTPS names need the kvbox cloud: kvbox login (this host's own socket has none)");
-}
-function rowsOf(box, user, only) {
-  return (box.ports ?? []).filter(only ?? (() => true)).map((f) => ({ box: displayName(box, user), ...f }));
-}
-function reaches(row, short = false) {
-  if (row.address !== void 0) return `${row.address}:${row.hostPort}`;
-  return short ? `:${row.hostPort}` : `port ${row.hostPort} of this host's public address`;
-}
-function parsePorts(texts) {
-  return texts.map((t) => {
-    const n = Number(t);
-    if (!/^\d+$/.test(t) || n < 1 || n > 65535) throw new KvboxError(`"${t}" is not a port (1-65535)`);
-    return n;
-  });
-}
-async function findBox(client, text2) {
-  const found = pickRef(await boxesFor(client, text2), text2, me(client));
-  if (!found) throw new KvboxError(`box ${text2}: not found (kvbox ls)`);
-  return found;
-}
-
 // src/commands/vm/proxy/claim.ts
-var claimCommand = new Command8("claim").description("give a box its HTTPS address, https://<subdomain>.kvbox.app, serving one of its ports").argument("<box>", "box name").argument("<subdomain>", "3-63 lowercase letters, digits and '-'; must be free").requiredOption("--port <port>", "the box port the address serves").option("--json", "print the subdomain as JSON").action(async (name, subdomain, opts, cmd) => {
+var claimCommand = new Command9("claim").description("give a box its HTTPS address, https://<subdomain>.kvbox.app, serving one of its ports").argument("<box>", "box name").argument("<subdomain>", "3-63 lowercase letters, digits and '-'; must be free").requiredOption("--port <port>", "the box port the address serves").option("--json", "print the subdomain as JSON").action(async (name, subdomain, opts, cmd) => {
   assertSubdomain(subdomain);
   const [port] = parsePorts([opts.port]);
   const client = await clientFor(cmd.optsWithGlobals());
@@ -1618,11 +1783,11 @@ var claimCommand = new Command8("claim").description("give a box its HTTPS addre
 });
 
 // src/commands/vm/proxy/index.ts
-import { Command as Command14 } from "commander";
+import { Command as Command15 } from "commander";
 
 // src/commands/vm/proxy/add.ts
-import { Command as Command9 } from "commander";
-var addCommand = new Command9("add").description("publish box ports on the internet; each gets a random public port, or an HTTPS name with --name").argument("<box>", "box name").argument("<port...>", "ports inside the box, e.g. 3000 8080").option("--udp", "UDP instead of TCP").option("--name <name>", "serve the port at https://<name>.<subdomain>.kvbox.app (one port; needs kvbox vm proxy claim first)").option("--json", "print the new forwards as JSON").action(async (name, portTexts, opts, cmd) => {
+import { Command as Command10 } from "commander";
+var addCommand = new Command10("add").description("publish box ports on the internet; each gets a random public port, or an HTTPS name with --name").argument("<box>", "box name").argument("<port...>", "ports inside the box, e.g. 3000 8080").option("--udp", "UDP instead of TCP").option("--name <name>", "serve the port at https://<name>.<subdomain>.kvbox.app (one port; needs kvbox vm proxy claim first)").option("--json", "print the new forwards as JSON").action(async (name, portTexts, opts, cmd) => {
   const guestPorts = parsePorts(portTexts);
   if (opts.name !== void 0) {
     assertRouteName(opts.name);
@@ -1663,7 +1828,7 @@ var addCommand = new Command9("add").description("publish box ports on the inter
 });
 
 // src/commands/vm/proxy/ls.ts
-import { Command as Command10 } from "commander";
+import { Command as Command11 } from "commander";
 async function subdomainsOf(client) {
   try {
     return await client.listSubdomains();
@@ -1672,7 +1837,7 @@ async function subdomainsOf(client) {
     return [];
   }
 }
-var lsCommand2 = new Command10("ls").description("list the box ports published on the internet").argument("[box]", "only this box").option("--json", "print as JSON").action(async (name, opts, cmd) => {
+var lsCommand2 = new Command11("ls").description("list the box ports published on the internet").argument("[box]", "only this box").option("--json", "print as JSON").action(async (name, opts, cmd) => {
   const client = await clientFor(cmd.optsWithGlobals());
   try {
     const user = me(client);
@@ -1698,8 +1863,8 @@ var lsCommand2 = new Command10("ls").description("list the box ports published o
 });
 
 // src/commands/vm/proxy/release.ts
-import { Command as Command11 } from "commander";
-var releaseCommand = new Command11("release").description("give up a box's HTTPS address and every name under it").argument("<box>", "box name").option("-y, --yes", "do not ask for confirmation").action(async (name, opts, cmd) => {
+import { Command as Command12 } from "commander";
+var releaseCommand = new Command12("release").description("give up a box's HTTPS address and every name under it").argument("<box>", "box name").option("-y, --yes", "do not ask for confirmation").action(async (name, opts, cmd) => {
   const client = await clientFor(cmd.optsWithGlobals());
   try {
     requireCloud(client);
@@ -1718,8 +1883,8 @@ var releaseCommand = new Command11("release").description("give up a box's HTTPS
 });
 
 // src/commands/vm/proxy/rm.ts
-import { Command as Command12 } from "commander";
-var rmCommand = new Command12("rm").description("stop publishing box ports, or an HTTPS name with --name").argument("<box>", "box name").argument("[port...]", "ports inside the box, as given to add").option("--udp", "the UDP forwards of those ports").option("--name <name>", "the HTTPS name to free (kvbox vm proxy release frees the whole subdomain)").option("-y, --yes", "do not ask for confirmation").action(async (name, portTexts, opts, cmd) => {
+import { Command as Command13 } from "commander";
+var rmCommand = new Command13("rm").description("stop publishing box ports, or an HTTPS name with --name").argument("<box>", "box name").argument("[port...]", "ports inside the box, as given to add").option("--udp", "the UDP forwards of those ports").option("--name <name>", "the HTTPS name to free (kvbox vm proxy release frees the whole subdomain)").option("-y, --yes", "do not ask for confirmation").action(async (name, portTexts, opts, cmd) => {
   if (opts.name !== void 0) {
     assertRouteName(opts.name);
     if (portTexts.length > 0) throw new KvboxError("--name frees a name, not ports: kvbox vm proxy rm <box> --name <name>");
@@ -1751,8 +1916,8 @@ var rmCommand = new Command12("rm").description("stop publishing box ports, or a
 });
 
 // src/commands/vm/proxy/set-port.ts
-import { Command as Command13 } from "commander";
-var setPortCommand = new Command13("set-port").description("point a box's HTTPS address at another of its ports").argument("<box>", "box name").argument("<port>", "the box port https://<subdomain>.kvbox.app serves from now on").option("--json", "print the subdomain as JSON").action(async (name, portText, opts, cmd) => {
+import { Command as Command14 } from "commander";
+var setPortCommand = new Command14("set-port").description("point a box's HTTPS address at another of its ports").argument("<box>", "box name").argument("<port>", "the box port https://<subdomain>.kvbox.app serves from now on").option("--json", "print the subdomain as JSON").action(async (name, portText, opts, cmd) => {
   const [port] = parsePorts([portText]);
   const client = await clientFor(cmd.optsWithGlobals());
   try {
@@ -1770,12 +1935,12 @@ var setPortCommand = new Command13("set-port").description("point a box's HTTPS
 });
 
 // src/commands/vm/proxy/index.ts
-var proxyCommand = new Command14("proxy").description("publish box ports on the internet").addCommand(addCommand).addCommand(lsCommand2).addCommand(rmCommand).addCommand(claimCommand).addCommand(setPortCommand).addCommand(releaseCommand);
+var proxyCommand = new Command15("proxy").description("publish box ports on the internet").addCommand(addCommand).addCommand(lsCommand2).addCommand(rmCommand).addCommand(claimCommand).addCommand(setPortCommand).addCommand(releaseCommand);
 for (const cmd of proxyCommand.commands) cmd.option("--org <slug>", "act in this org (- for your personal boxes)");
 
 // src/commands/vm/rescale.ts
-import { Command as Command15, Option as Option3 } from "commander";
-var rescaleCommand = new Command15("rescale").description("change a box's vCPUs, memory or disk (e.g. --vcpu 4 --mem 16GB); a running box restarts").argument("<name>", "box name").addOption(new Option3("-s, --size <size>", "a preset to start from").choices(SIZE_NAMES)).option("--vcpu <n>", "number of vCPUs").option("--mem <size>", "memory, e.g. 16GB or 4096MB").option("--disk <size>", "disk size, e.g. 32GB (grow only)").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
+import { Command as Command16, Option as Option3 } from "commander";
+var rescaleCommand = new Command16("rescale").description("change a box's vCPUs, memory or disk (e.g. --vcpu 4 --mem 16GB); a running box restarts").argument("<name>", "box name").addOption(new Option3("-s, --size <size>", "a preset to start from").choices(SIZE_NAMES)).option("--vcpu <n>", "number of vCPUs").option("--mem <size>", "memory, e.g. 16GB or 4096MB").option("--disk <size>", "disk size, e.g. 32GB (grow only)").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
   const req = {
     ...opts.size !== void 0 ? { size: opts.size } : {},
     ...opts.vcpu !== void 0 ? { vcpu: parseCount(opts.vcpu) } : {},
@@ -1820,8 +1985,8 @@ function parseGib(flag, text2) {
 }
 
 // src/commands/vm/resume.ts
-import { Command as Command16 } from "commander";
-var resumeCommand = new Command16("resume").description("continue a box that is in standby (kvbox pause)").argument("<name>", "box name").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
+import { Command as Command17 } from "commander";
+var resumeCommand = new Command17("resume").description("continue a box that is in standby (kvbox pause)").argument("<name>", "box name").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
   const client = await clientFor(cmd.optsWithGlobals());
   try {
     const box = await spin(`resuming ${name}\u2026`, client.resumeMachine(name));
@@ -1833,8 +1998,8 @@ var resumeCommand = new Command16("resume").description("continue a box that is
 });
 
 // src/commands/vm/rm.ts
-import { Command as Command17 } from "commander";
-var rmCommand2 = new Command17("rm").description("destroy a box (its disk is deleted; snapshots are kept)").argument("<name>", "box name").option("-y, --yes", "do not ask for confirmation").action(async (name, opts, cmd) => {
+import { Command as Command18 } from "commander";
+var rmCommand2 = new Command18("rm").description("destroy a box (its disk is deleted; snapshots are kept)").argument("<name>", "box name").option("-y, --yes", "do not ask for confirmation").action(async (name, opts, cmd) => {
   const client = await clientFor(cmd.optsWithGlobals());
   try {
     const box = pickRef(await boxesFor(client, name), name, me(client));
@@ -1846,15 +2011,16 @@ var rmCommand2 = new Command17("rm").description("destroy a box (its disk is del
       return;
     }
     await spin(`destroying ${ref}\u2026`, client.deleteMachine(ref));
-    info(`${color.green("\u2713")} box ${ref} destroyed`);
+    const volumes = box.volumes?.map((v) => v.name) ?? [];
+    info(`${color.green("\u2713")} box ${ref} destroyed${volumes.length > 0 ? `; its volume${volumes.length > 1 ? "s" : ""} ${volumes.join(", ")} ${volumes.length > 1 ? "are" : "is"} kept, detached` : ""}`);
   } finally {
     await client.close();
   }
 });
 
 // src/commands/vm/set.ts
-import { Command as Command18 } from "commander";
-var setCommand = new Command18("set").description("change a box's settings, e.g. --auto-hibernate 30m (off: never)").argument("<name>", "box name").option("--auto-hibernate <duration>", "hibernate the box after this long without network traffic (30m, 4h, 1d; off: never)").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
+import { Command as Command19 } from "commander";
+var setCommand = new Command19("set").description("change a box's settings, e.g. --auto-hibernate 30m (off: never)").argument("<name>", "box name").option("--auto-hibernate <duration>", "hibernate the box after this long without network traffic (30m, 4h, 1d; off: never)").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
   if (opts.autoHibernate === void 0) throw new KvboxError("nothing to change: give --auto-hibernate");
   const autoHibernateSec = parseIdleTimeout(opts.autoHibernate);
   const client = await clientFor(cmd.optsWithGlobals());
@@ -1873,8 +2039,8 @@ var setCommand = new Command18("set").description("change a box's settings, e.g.
 });
 
 // src/commands/vm/start.ts
-import { Command as Command19 } from "commander";
-var startCommand = new Command19("start").description("boot a stopped box again (same name, IP and disk)").argument("<name>", "box name").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
+import { Command as Command20 } from "commander";
+var startCommand = new Command20("start").description("boot a stopped box again (same name, IP and disk)").argument("<name>", "box name").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
   const client = await clientFor(cmd.optsWithGlobals());
   try {
     const box = await spin(`booting ${name}\u2026`, client.startMachine(name));
@@ -1886,8 +2052,8 @@ var startCommand = new Command19("start").description("boot a stopped box again
 });
 
 // src/commands/vm/stop.ts
-import { Command as Command20 } from "commander";
-var stopCommand = new Command20("stop").description("shut a box down (its disk is kept; start it again with kvbox start)").argument("<name>", "box name").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
+import { Command as Command21 } from "commander";
+var stopCommand = new Command21("stop").description("shut a box down (its disk is kept; start it again with kvbox start)").argument("<name>", "box name").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
   const client = await clientFor(cmd.optsWithGlobals());
   try {
     const box = await spin(`shutting ${name} down\u2026`, client.stopMachine(name));
@@ -1899,8 +2065,8 @@ var stopCommand = new Command20("stop").description("shut a box down (its disk i
 });
 
 // src/commands/vm/top.ts
-import { Command as Command21 } from "commander";
-var topCommand = new Command21("top").description("load, memory and disk of each running box, as the box itself sees them").option("-a, --all", "every running box on the platform (platform admins only)").option("--json", "print as JSON").action(async (opts, cmd) => {
+import { Command as Command22 } from "commander";
+var topCommand = new Command22("top").description("load, memory and disk of each running box, as the box itself sees them").option("-a, --all", "every running box on the platform (platform admins only)").option("--json", "print as JSON").action(async (opts, cmd) => {
   const client = await clientFor(cmd.optsWithGlobals());
   try {
     const running = (await client.listMachines({ all: opts.all })).filter((b) => b.status === "running");
@@ -1960,8 +2126,8 @@ function topRows(entries, cloud) {
 }
 
 // src/commands/vm/update.ts
-import { Command as Command22 } from "commander";
-var updateCommand = new Command22("update").description("move a box onto the current base image (its files stay; a running box restarts)").argument("<name>", "box name").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
+import { Command as Command23 } from "commander";
+var updateCommand = new Command23("update").description("move a box onto the current base image (its files stay; a running box restarts)").argument("<name>", "box name").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
   const client = await clientFor(cmd.optsWithGlobals());
   try {
     const before = pickRef(await boxesFor(client, name), name, me(client));
@@ -1983,8 +2149,8 @@ var updateCommand = new Command22("update").description("move a box onto the cur
 });
 
 // src/commands/vm/usage.ts
-import { Command as Command23 } from "commander";
-var usageCommand = new Command23("usage").description("how long a box ran, slept and sat stopped, as vCPU-hours, RAM and disk GiB-hours (and cost, when the host prices them)").argument("<name>", "box name").option("--since <date>", "count from this date instead of the box's creation, e.g. 2026-10-01").option("--json", "print as JSON").action(async (name, opts, cmd) => {
+import { Command as Command24 } from "commander";
+var usageCommand = new Command24("usage").description("how long a box ran, slept and sat stopped, as vCPU-hours, RAM and disk GiB-hours (and cost, when the host prices them)").argument("<name>", "box name").option("--since <date>", "count from this date instead of the box's creation, e.g. 2026-10-01").option("--json", "print as JSON").action(async (name, opts, cmd) => {
   let since;
   if (opts.since !== void 0) {
     const t = Date.parse(opts.since);
@@ -2031,8 +2197,8 @@ function block(u) {
 }
 
 // src/commands/vm/wake.ts
-import { Command as Command24 } from "commander";
-var wakeCommand = new Command24("wake").description("continue a hibernated box where it left off (same name, IP and disk)").argument("<name>", "box name").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
+import { Command as Command25 } from "commander";
+var wakeCommand = new Command25("wake").description("continue a hibernated box where it left off (same name, IP and disk)").argument("<name>", "box name").option("--json", "print the box as JSON").action(async (name, opts, cmd) => {
   const client = await clientFor(cmd.optsWithGlobals());
   try {
     const box = await spin(`waking ${name} (loading its memory from disk)\u2026`, client.wakeMachine(name));
@@ -2044,15 +2210,15 @@ var wakeCommand = new Command24("wake").description("continue a hibernated box w
 });
 
 // src/commands/vm/index.ts
-var vmCommand = new Command25("vm").enablePositionalOptions().description("manage boxes (each one is a Firecracker microVM)").addCommand(newCommand).addCommand(forkCommand).addCommand(lsCommand).addCommand(connectCommand).addCommand(execCommand).addCommand(stopCommand).addCommand(startCommand).addCommand(pauseCommand).addCommand(resumeCommand).addCommand(hibernateCommand).addCommand(wakeCommand).addCommand(updateCommand).addCommand(rescaleCommand).addCommand(setCommand).addCommand(usageCommand).addCommand(topCommand).addCommand(proxyCommand).addCommand(rmCommand2);
+var vmCommand = new Command26("vm").enablePositionalOptions().description("manage boxes (each one is a Firecracker microVM)").addCommand(newCommand).addCommand(forkCommand).addCommand(lsCommand).addCommand(getCommand).addCommand(connectCommand).addCommand(execCommand).addCommand(stopCommand).addCommand(startCommand).addCommand(pauseCommand).addCommand(resumeCommand).addCommand(hibernateCommand).addCommand(wakeCommand).addCommand(updateCommand).addCommand(rescaleCommand).addCommand(setCommand).addCommand(usageCommand).addCommand(topCommand).addCommand(proxyCommand).addCommand(rmCommand2);
 for (const cmd of vmCommand.commands) if (cmd !== proxyCommand) cmd.option("--org <slug>", "act in this org (- for your personal boxes)");
-var vmAliases = [newCommand, lsCommand, connectCommand, execCommand, stopCommand, startCommand, pauseCommand, resumeCommand, hibernateCommand, wakeCommand, rmCommand2, claimCommand];
+var vmAliases = [newCommand, lsCommand, getCommand, connectCommand, execCommand, stopCommand, startCommand, pauseCommand, resumeCommand, hibernateCommand, wakeCommand, rmCommand2, claimCommand];
 
 // src/commands/server/index.ts
-import { Command as Command33 } from "commander";
+import { Command as Command34 } from "commander";
 
 // src/commands/server/join.ts
-import { Command as Command26 } from "commander";
+import { Command as Command27 } from "commander";
 
 // src/commands/server/daemon.ts
 import { spawn as spawn3 } from "child_process";
@@ -2106,7 +2272,7 @@ function runKvboxServer(args) {
 }
 
 // src/commands/server/join.ts
-var joinCommand = new Command26("join").description("put this machine behind a control plane (needs a one-time token minted there) and restart its server").argument("<control-plane-url>", "the control plane, e.g. https://api.kvbox.sh").requiredOption("--token <token>", "one-time join token from the control plane").option("--advertise <host-or-ip>", "address the control plane reaches this machine at (default: its default-route address)").option("--name <name>", "how the control plane lists this machine (default: hostname)").action(async (url, opts) => {
+var joinCommand = new Command27("join").description("put this machine behind a control plane (needs a one-time token minted there) and restart its server").argument("<control-plane-url>", "the control plane, e.g. https://api.kvbox.sh").requiredOption("--token <token>", "one-time join token from the control plane").option("--advertise <host-or-ip>", "address the control plane reaches this machine at (default: its default-route address)").option("--name <name>", "how the control plane lists this machine (default: hostname)").action(async (url, opts) => {
   const args = ["join", url, "--token", opts.token];
   if (opts.advertise !== void 0) args.push("--advertise", opts.advertise);
   if (opts.name !== void 0) args.push("--name", opts.name);
@@ -2116,8 +2282,8 @@ var joinCommand = new Command26("join").description("put this machine behind a c
 });
 
 // src/commands/server/leave.ts
-import { Command as Command27 } from "commander";
-var leaveCommand = new Command27("leave").description("take this machine out from behind its control plane and restart its server").action(async () => {
+import { Command as Command28 } from "commander";
+var leaveCommand = new Command28("leave").description("take this machine out from behind its control plane and restart its server").action(async () => {
   const p = paths();
   for (const line of (await runKvboxServer(["leave"])).split("\n")) info(line);
   if (await runningPid(p) === null) return;
@@ -2126,14 +2292,14 @@ var leaveCommand = new Command27("leave").description("take this machine out fro
 });
 
 // src/commands/server/relay.ts
-import { Command as Command28 } from "commander";
-var relayCommand = new Command28("relay").description("reach the internet through a relay (paste what `kvbox-relay add` printed on the relay VM); `off` takes the tunnel down").argument("<join-string>", "the line `kvbox-relay add` printed, or `off`").action(async (joinString) => {
+import { Command as Command29 } from "commander";
+var relayCommand = new Command29("relay").description("reach the internet through a relay (paste what `kvbox-relay add` printed on the relay VM); `off` takes the tunnel down").argument("<join-string>", "the line `kvbox-relay add` printed, or `off`").action(async (joinString) => {
   for (const line of (await runKvboxServer(["relay", joinString])).split("\n")) info(line);
 });
 
 // src/commands/server/start.ts
-import { Command as Command29 } from "commander";
-var startCommand2 = new Command29("start").description("start the local kvbox-server in the background").action(async (_opts, cmd) => {
+import { Command as Command30 } from "commander";
+var startCommand2 = new Command30("start").description("start the local kvbox-server in the background").action(async (_opts, cmd) => {
   const client = await clientFor({ ...cmd.optsWithGlobals(), local: true }, { autoStart: false });
   try {
     const health = await client.health();
@@ -2149,8 +2315,8 @@ var startCommand2 = new Command29("start").description("start the local kvbox-se
 });
 
 // src/commands/server/status.ts
-import { Command as Command30 } from "commander";
-var statusCommand = new Command30("status").description("show whether this machine's server is running, its control plane and which base image new boxes get").option("--json", "print as JSON").action(async (opts, cmd) => {
+import { Command as Command31 } from "commander";
+var statusCommand = new Command31("status").description("show whether this machine's server is running, its control plane and which base image new boxes get").option("--json", "print as JSON").action(async (opts, cmd) => {
   const client = await clientFor({ ...cmd.optsWithGlobals(), local: true });
   try {
     const health = await client.health();
@@ -2182,8 +2348,8 @@ var statusCommand = new Command30("status").description("show whether this machi
 });
 
 // src/commands/server/stop.ts
-import { Command as Command31 } from "commander";
-var stopCommand2 = new Command31("stop").description("stop the local server (running boxes are not affected)").action(async () => {
+import { Command as Command32 } from "commander";
+var stopCommand2 = new Command32("stop").description("stop the local server (running boxes are not affected)").action(async () => {
   const pid = await runningPid(paths());
   if (pid === null) throw new KvboxError("kvbox-server is not running");
   await stopLocalServer(pid);
@@ -2191,8 +2357,8 @@ var stopCommand2 = new Command31("stop").description("stop the local server (run
 });
 
 // src/commands/server/trust-ca.ts
-import { Command as Command32 } from "commander";
-var trustCaCommand = new Command32("trust-ca").description("make every cloud box on this machine trust a new SSH CA (after `ca rotate` on the control plane)").argument("[public-key]", "the CA public key (or its cert-authority line); or --from-cloud").option("--from-cloud", "ask the control plane this host joined for its current CA, show the fingerprint, then ask").option("-y, --yes", "do not ask for confirmation").option("--json", "print the report as JSON").action(async (publicKey, opts, cmd) => {
+import { Command as Command33 } from "commander";
+var trustCaCommand = new Command33("trust-ca").description("make every cloud box on this machine trust a new SSH CA (after `ca rotate` on the control plane)").argument("[public-key]", "the CA public key (or its cert-authority line); or --from-cloud").option("--from-cloud", "ask the control plane this host joined for its current CA, show the fingerprint, then ask").option("-y, --yes", "do not ask for confirmation").option("--json", "print the report as JSON").action(async (publicKey, opts, cmd) => {
   if (publicKey === void 0 && !opts.fromCloud) throw new KvboxError("give the CA public key, or --from-cloud to fetch it from the control plane this host joined");
   if (publicKey !== void 0 && opts.fromCloud) throw new KvboxError("either a public key or --from-cloud, not both");
   const client = await clientFor({ ...cmd.optsWithGlobals(), local: true });
@@ -2230,7 +2396,7 @@ function describeReport(report) {
 }
 
 // src/commands/server/index.ts
-var serverCommand = new Command33("server").description("run or manage the kvbox server").addCommand(startCommand2).addCommand(statusCommand).addCommand(stopCommand2).addCommand(joinCommand).addCommand(leaveCommand).addCommand(relayCommand).addCommand(trustCaCommand);
+var serverCommand = new Command34("server").description("run or manage the kvbox server").addCommand(startCommand2).addCommand(statusCommand).addCommand(stopCommand2).addCommand(joinCommand).addCommand(leaveCommand).addCommand(relayCommand).addCommand(trustCaCommand);
 
 // src/commands/login.ts
 import { spawnSync as spawnSync3 } from "child_process";
@@ -2238,7 +2404,7 @@ import { mkdir as mkdir3, readFile as readFile5, writeFile as writeFile3 } from
 import { hostname as osHostname } from "os";
 import { createInterface as createInterface2 } from "readline/promises";
 import { Writable } from "stream";
-import { Command as Command34 } from "commander";
+import { Command as Command35 } from "commander";
 
 // src/prompt.ts
 import { createInterface } from "readline/promises";
@@ -2363,7 +2529,7 @@ function abortIsCancel(err) {
 }
 
 // src/commands/login.ts
-var loginCommand = new Command34("login").description("log in to the kvbox cloud (or your own control plane) and target it from now on").argument("[url]", `control plane URL (default: ${DEFAULT_CLOUD_URL})`).option("-e, --email <email>", "account email (prompted otherwise)").option("--password-stdin", "read the password from the first line of stdin (for scripts)").action(async (urlArg, opts) => {
+var loginCommand = new Command35("login").description("log in to the kvbox cloud (or your own control plane) and target it from now on").argument("[url]", `control plane URL (default: ${DEFAULT_CLOUD_URL})`).option("-e, --email <email>", "account email (prompted otherwise)").option("--password-stdin", "read the password from the first line of stdin (for scripts)").action(async (urlArg, opts) => {
   const url = normalizeUrl(urlArg ?? DEFAULT_CLOUD_URL);
   const creds = await readCredentials(opts);
   const session = await runLogin(url, creds, paths());
@@ -2443,8 +2609,8 @@ async function firstLine(stream) {
 }
 
 // src/commands/logout.ts
-import { Command as Command35 } from "commander";
-var logoutCommand = new Command35("logout").description("log out of the control plane; commands target this machine's kvbox-server again").action(async () => {
+import { Command as Command36 } from "commander";
+var logoutCommand = new Command36("logout").description("log out of the control plane; commands target this machine's kvbox-server again").action(async () => {
   const p = paths();
   const session = await readSession(p).catch(() => null);
   switch (await runLogout(p)) {
@@ -2481,8 +2647,8 @@ async function runLogout(p = paths()) {
 }
 
 // src/commands/whoami.ts
-import { Command as Command36 } from "commander";
-var whoamiCommand = new Command36("whoami").description("show which account and control plane commands target (or local mode)").option("--json", "print as JSON").action(async (opts) => {
+import { Command as Command37 } from "commander";
+var whoamiCommand = new Command37("whoami").description("show which account and control plane commands target (or local mode)").option("--json", "print as JSON").action(async (opts) => {
   const session = await readSession();
   if (opts.json) {
     json(session ? { user: session.user, url: session.url, sshCertExpires: session.sshCertExpires ?? null } : null);
@@ -2498,11 +2664,11 @@ function describeSession(session) {
 }
 
 // src/commands/snapshots/index.ts
-import { Command as Command40 } from "commander";
+import { Command as Command41 } from "commander";
 
 // src/commands/snapshots/ls.ts
-import { Command as Command37 } from "commander";
-var lsCommand3 = new Command37("ls").description("list snapshots (yours and your orgs'; --org <slug> for one org)").option("-a, --all", "every snapshot on the platform (platform admins only)").option("--json", "print as JSON").action(async (opts, cmd) => {
+import { Command as Command38 } from "commander";
+var lsCommand3 = new Command38("ls").description("list snapshots (yours and your orgs'; --org <slug> for one org)").option("-a, --all", "every snapshot on the platform (platform admins only)").option("--json", "print as JSON").action(async (opts, cmd) => {
   const client = await clientFor(cmd.optsWithGlobals());
   try {
     const cloud = client.target.kind === "cloud";
@@ -2533,8 +2699,8 @@ var lsCommand3 = new Command37("ls").description("list snapshots (yours and your
 });
 
 // src/commands/snapshots/new.ts
-import { Command as Command38 } from "commander";
-var newCommand2 = new Command38("new").description("freeze a running box (memory + disk) into a snapshot; the box keeps running").argument("<box>", "box name").argument("<name>", "snapshot name").option("--json", "print the snapshot as JSON").action(async (box, name, opts, cmd) => {
+import { Command as Command39 } from "commander";
+var newCommand2 = new Command39("new").description("freeze a running box (memory + disk) into a snapshot; the box keeps running").argument("<box>", "box name").argument("<name>", "snapshot name").option("--json", "print the snapshot as JSON").action(async (box, name, opts, cmd) => {
   const client = await clientFor(cmd.optsWithGlobals());
   try {
     const snap = await spin(`saving snapshot ${name} from box ${box} (memory + disk)\u2026`, client.createSnapshot({ box, name }));
@@ -2546,8 +2712,8 @@ var newCommand2 = new Command38("new").description("freeze a running box (memory
 });
 
 // src/commands/snapshots/rm.ts
-import { Command as Command39 } from "commander";
-var rmCommand3 = new Command39("rm").description("delete a snapshot (boxes made from it are not affected)").argument("<name>", "snapshot name").option("-y, --yes", "do not ask for confirmation").action(async (name, opts, cmd) => {
+import { Command as Command40 } from "commander";
+var rmCommand3 = new Command40("rm").description("delete a snapshot (boxes made from it are not affected)").argument("<name>", "snapshot name").option("-y, --yes", "do not ask for confirmation").action(async (name, opts, cmd) => {
   if (!await confirm(`Delete snapshot ${name}?`, opts.yes ?? false)) {
     info("cancelled");
     process.exitCode = 1;
@@ -2563,14 +2729,14 @@ var rmCommand3 = new Command39("rm").description("delete a snapshot (boxes made
 });
 
 // src/commands/snapshots/index.ts
-var snapshotsCommand = new Command40("snapshots").aliases(["snapshot", "snap"]).description("freeze running boxes into snapshots and manage them").addCommand(newCommand2).addCommand(lsCommand3).addCommand(rmCommand3);
+var snapshotsCommand = new Command41("snapshots").aliases(["snapshot", "snap"]).description("freeze running boxes into snapshots and manage them").addCommand(newCommand2).addCommand(lsCommand3).addCommand(rmCommand3);
 for (const cmd of snapshotsCommand.commands) cmd.option("--org <slug>", "act in this org (- for your personal boxes)");
 
 // src/commands/org/index.ts
-import { Command as Command46 } from "commander";
+import { Command as Command47 } from "commander";
 
 // src/commands/org/ls.ts
-import { Command as Command41 } from "commander";
+import { Command as Command42 } from "commander";
 
 // src/commands/org/context.ts
 var NOT_LOGGED_IN = "orgs live on the control plane: kvbox login first";
@@ -2590,7 +2756,7 @@ function orgFor(opts, target) {
 }
 
 // src/commands/org/ls.ts
-var lsCommand4 = new Command41("ls").description("list the orgs you belong to and your role in each").option("--json", "print as JSON").action(async (opts, cmd) => {
+var lsCommand4 = new Command42("ls").description("list the orgs you belong to and your role in each").option("--json", "print as JSON").action(async (opts, cmd) => {
   const client = await cloudClientFor(cmd.optsWithGlobals());
   try {
     const orgs = await client.listOrgs();
@@ -2612,8 +2778,8 @@ function orgRows(orgs) {
 }
 
 // src/commands/org/members.ts
-import { Command as Command42, Option as Option4 } from "commander";
-var lsCommand5 = new Command42("ls").description("list an org's members and their roles").option("-o, --org <slug>", "the org (or --org before the command)").option("--json", "print as JSON").action(async (opts, cmd) => {
+import { Command as Command43, Option as Option4 } from "commander";
+var lsCommand5 = new Command43("ls").description("list an org's members and their roles").option("-o, --org <slug>", "the org (or --org before the command)").option("--json", "print as JSON").action(async (opts, cmd) => {
   const client = await cloudClientFor(cmd.optsWithGlobals());
   try {
     const org = await client.getOrg(orgFor(opts, client.target));
@@ -2627,7 +2793,7 @@ var lsCommand5 = new Command42("ls").description("list an org's members and thei
     await client.close();
   }
 });
-var addCommand2 = new Command42("add").description("add a user to an org (admins and owners; only an owner can add an owner)").argument("<user>", "their username").addOption(new Option4("-r, --role <role>", "their role").choices(ORG_ROLES).default("member")).option("-o, --org <slug>", "the org (or --org before the command)").action(async (user, opts, cmd) => {
+var addCommand2 = new Command43("add").description("add a user to an org (admins and owners; only an owner can add an owner)").argument("<user>", "their username").addOption(new Option4("-r, --role <role>", "their role").choices(ORG_ROLES).default("member")).option("-o, --org <slug>", "the org (or --org before the command)").action(async (user, opts, cmd) => {
   const client = await cloudClientFor(cmd.optsWithGlobals());
   try {
     const slug = orgFor(opts, client.target);
@@ -2637,7 +2803,7 @@ var addCommand2 = new Command42("add").description("add a user to an org (admins
     await client.close();
   }
 });
-var rmCommand4 = new Command42("rm").description("remove a member (or leave: remove yourself)").argument("<user>", "their username").option("-o, --org <slug>", "the org (or --org before the command)").option("-y, --yes", "do not ask for confirmation").action(async (user, opts, cmd) => {
+var rmCommand4 = new Command43("rm").description("remove a member (or leave: remove yourself)").argument("<user>", "their username").option("-o, --org <slug>", "the org (or --org before the command)").option("-y, --yes", "do not ask for confirmation").action(async (user, opts, cmd) => {
   const client = await cloudClientFor(cmd.optsWithGlobals());
   try {
     const slug = orgFor(opts, client.target);
@@ -2653,11 +2819,11 @@ var rmCommand4 = new Command42("rm").description("remove a member (or leave: rem
     await client.close();
   }
 });
-var membersCommand = new Command42("members").description("who is in an org and what they may do").addCommand(lsCommand5).addCommand(addCommand2).addCommand(rmCommand4);
+var membersCommand = new Command43("members").description("who is in an org and what they may do").addCommand(lsCommand5).addCommand(addCommand2).addCommand(rmCommand4);
 
 // src/commands/org/new.ts
-import { Command as Command43 } from "commander";
-var newCommand3 = new Command43("new").description("create an org; you become its owner (the slug is permanent, the name is not)").argument("<slug>", "the org's slug: lowercase, like a username (acme)").option("-n, --name <name>", "display name (default: the slug)").option("--json", "print the org as JSON").action(async (slug, opts, cmd) => {
+import { Command as Command44 } from "commander";
+var newCommand3 = new Command44("new").description("create an org; you become its owner (the slug is permanent, the name is not)").argument("<slug>", "the org's slug: lowercase, like a username (acme)").option("-n, --name <name>", "display name (default: the slug)").option("--json", "print the org as JSON").action(async (slug, opts, cmd) => {
   const client = await cloudClientFor(cmd.optsWithGlobals());
   try {
     const org = await client.createOrg({ slug, name: opts.name ?? slug });
@@ -2673,8 +2839,8 @@ var newCommand3 = new Command43("new").description("create an org; you become it
 });
 
 // src/commands/org/rm.ts
-import { Command as Command44 } from "commander";
-var rmCommand5 = new Command44("rm").description("delete an org (owners only; remove its boxes and snapshots first)").argument("<slug>", "the org").option("-y, --yes", "do not ask for confirmation").action(async (slug, opts, cmd) => {
+import { Command as Command45 } from "commander";
+var rmCommand5 = new Command45("rm").description("delete an org (owners only; remove its boxes and snapshots first)").argument("<slug>", "the org").option("-y, --yes", "do not ask for confirmation").action(async (slug, opts, cmd) => {
   if (!await confirm(`Delete org ${slug}? Its members lose access; its slug stays taken.`, opts.yes ?? false)) {
     info("cancelled");
     process.exitCode = 1;
@@ -2690,8 +2856,8 @@ var rmCommand5 = new Command44("rm").description("delete an org (owners only; re
 });
 
 // src/commands/org/role.ts
-import { Argument, Command as Command45 } from "commander";
-var roleCommand = new Command45("role").description("change a member's role (owners only)").argument("<user>", "their username").addArgument(new Argument("<role>", "owner, admin or member").choices(ORG_ROLES)).option("-o, --org <slug>", "the org (default: the current context)").action(async (user, role, opts, cmd) => {
+import { Argument, Command as Command46 } from "commander";
+var roleCommand = new Command46("role").description("change a member's role (owners only)").argument("<user>", "their username").addArgument(new Argument("<role>", "owner, admin or member").choices(ORG_ROLES)).option("-o, --org <slug>", "the org (default: the current context)").action(async (user, role, opts, cmd) => {
   const client = await cloudClientFor(cmd.optsWithGlobals());
   try {
     const slug = orgFor(opts, client.target);
@@ -2703,10 +2869,10 @@ var roleCommand = new Command45("role").description("change a member's role (own
 });
 
 // src/commands/org/index.ts
-var orgCommand = new Command46("org").description("orgs: shared slugs that own boxes, with owners, admins and members").addCommand(lsCommand4).addCommand(newCommand3).addCommand(membersCommand).addCommand(roleCommand).addCommand(rmCommand5);
+var orgCommand = new Command47("org").description("orgs: shared slugs that own boxes, with owners, admins and members").addCommand(lsCommand4).addCommand(newCommand3).addCommand(membersCommand).addCommand(roleCommand).addCommand(rmCommand5);
 
 // src/commands/usage.ts
-import { Command as Command47 } from "commander";
+import { Command as Command48 } from "commander";
 
 // ../shared/src/usage.ts
 import { z as z4 } from "zod";
@@ -2714,7 +2880,9 @@ var PricingSchema = z4.object({
   currency: z4.string().min(1),
   vcpuHour: z4.number().nonnegative(),
   ramGibHour: z4.number().nonnegative(),
-  diskGibHour: z4.number().nonnegative()
+  diskGibHour: z4.number().nonnegative(),
+  volumeHour: z4.number().nonnegative().default(0),
+  volumeGibHour: z4.number().nonnegative().default(0)
 });
 var round = (n, places) => Math.round(n * 10 ** places) / 10 ** places;
 function costOf(t, pricing) {
@@ -2741,7 +2909,7 @@ function sumUsage(items, pricing) {
 }
 
 // src/commands/usage.ts
-var usageCommand2 = new Command47("usage").description("what your boxes used this month (or --since/--until): running time, vCPU-h, RAM and disk GiB-h, cost").option("--since <date>", "count from this date, e.g. 2026-10-01 (default: the 1st of this month)").option("--until <date>", "count up to this date (default: now)").option("--org <slug>", "one org's boxes only").option("-a, --all", "every box on the platform (platform admins only)").option("--by-user", "one line per user who made the boxes (e.g. who spent what in --org)").option("--json", "print as JSON").action(async (opts, cmd) => {
+var usageCommand2 = new Command48("usage").description("what your boxes and volumes used this month (or --since/--until): running time, vCPU-h, RAM and disk GiB-h, cost").option("--since <date>", "count from this date, e.g. 2026-10-01 (default: the 1st of this month)").option("--until <date>", "count up to this date (default: now)").option("--org <slug>", "one org's boxes only").option("-a, --all", "every box on the platform (platform admins only)").option("--by-user", "one line per user who made the boxes (e.g. who spent what in --org)").option("--json", "print as JSON").action(async (opts, cmd) => {
   for (const [name, value] of [
     ["since", opts.since],
     ["until", opts.until]
@@ -2760,8 +2928,14 @@ var usageCommand2 = new Command47("usage").description("what your boxes used thi
     }
     const cloud = client.target.kind === "cloud" ? { me: client.target.user } : void 0;
     info(`${day2(report.window.from)} to ${day2(report.window.to)}`);
-    if (report.boxes.length === 0) info("no usage in this window");
-    else table(perUser ? userRows(perUser) : usageRows(report, cloud));
+    const volumes = report.volumes ?? [];
+    if (report.boxes.length === 0 && volumes.length === 0) info("no usage in this window");
+    else if (report.boxes.length > 0) table(perUser ? userRows(perUser) : usageRows(report, cloud));
+    if (volumes.length > 0) {
+      info(volumes.length === 1 ? "1 volume" : `${volumes.length} volumes`);
+      table(volumeRows(report, cloud));
+    }
+    if (volumes.length > 0 && report.totals.cost !== void 0) info(`total: ${money(report.totals.cost.amount, report.totals.cost.currency)} ${color.dim("(boxes and volumes, estimated)")}`);
     if (cloud) {
       const line = await creditLine(client, cloud.me);
       if (line !== void 0) info(line);
@@ -2810,7 +2984,32 @@ function usageRows(report, cloud) {
     "vcpu-h": hours(t.vcpuHours),
     "ram GiB-h": hours(t.ramGibHours),
     "disk GiB-h": hours(t.diskGibHours),
-    ...priced ? { cost: `${money(t.cost.amount, t.cost.currency)} ${color.dim("(estimated)")}` } : {}
+    ...priced ? { cost: `${money(sumCost(report.boxes), t.cost.currency)} ${color.dim("(estimated)")}` } : {}
+  });
+  return rows2;
+}
+var sumCost = (rows2) => round(rows2.reduce((n, r) => n + (r.cost?.amount ?? 0), 0), 4);
+function volumeRows(report, cloud) {
+  const priced = report.totals.cost !== void 0;
+  const volumes = report.volumes ?? [];
+  const currency = report.totals.cost?.currency ?? "";
+  const rows2 = volumes.map((v) => ({
+    ...cloud ? { owner: ownerCell2(v, cloud.me) } : {},
+    volume: boxName(v.name),
+    status: v.status === "removed" ? color.dim("removed") : "present",
+    size: `${v.sizeGib}GB`,
+    hours: hours(v.volumeHours),
+    "GiB-h": hours(v.volumeGibHours),
+    ...priced ? { cost: money(v.cost?.amount ?? 0, currency) } : {}
+  }));
+  rows2.push({
+    ...cloud ? { owner: "" } : {},
+    volume: color.bold("total"),
+    status: "",
+    size: "",
+    hours: hours(report.totals.volumeHours ?? 0),
+    "GiB-h": hours(report.totals.volumeGibHours ?? 0),
+    ...priced ? { cost: money(sumCost(volumes), currency) } : {}
   });
   return rows2;
 }
@@ -2830,7 +3029,7 @@ function byUser(report) {
     return u;
   });
   users.sort((a, b) => a.user === null ? 1 : b.user === null ? -1 : a.user.localeCompare(b.user));
-  return { window: report.window, users, totals: report.totals };
+  return { window: report.window, users, ...report.volumes === void 0 ? {} : { volumes: report.volumes }, totals: report.totals };
 }
 function userRows(r) {
   const priced = r.totals.cost !== void 0;
@@ -2850,14 +3049,14 @@ function userRows(r) {
     user: color.bold("total"),
     boxes: String(r.users.reduce((n, u) => n + u.boxes, 0)),
     ...cells(r.totals),
-    ...priced ? { cost: `${money(r.totals.cost.amount, r.totals.cost.currency)} ${color.dim("(estimated)")}` } : {}
+    ...priced ? { cost: `${money(sumCost(r.users), r.totals.cost.currency)} ${color.dim("(estimated)")}` } : {}
   });
   return rows2;
 }
 
 // src/commands/credit.ts
-import { Command as Command48 } from "commander";
-var creditCommand = new Command48("credit").description("the prepaid credit left on your account and on each of your orgs").option("--org <slug>", "one org only").option("--json", "print as JSON").action(async (opts, cmd) => {
+import { Command as Command49 } from "commander";
+var creditCommand = new Command49("credit").description("the prepaid credit left on your account and on each of your orgs").option("--org <slug>", "one org only").option("--json", "print as JSON").action(async (opts, cmd) => {
   const client = await clientFor(cmd.optsWithGlobals(), { autoStart: false });
   try {
     if (client.target.kind === "local") throw new KvboxError("credit lives on the control plane: kvbox login first");
@@ -2887,7 +3086,7 @@ function creditRow(b, me2) {
 // src/commands/deploy/index.ts
 import { readFile as readFile7 } from "fs/promises";
 import { basename, resolve as resolve2 } from "path";
-import { Command as Command49, Option as Option5 } from "commander";
+import { Command as Command50, Option as Option5 } from "commander";
 
 // src/commands/deploy/config.ts
 import { readFile as readFile6, writeFile as writeFile4 } from "fs/promises";
@@ -2973,7 +3172,8 @@ var nextjsTemplate = {
       "mkdir -p /srv/app/.incoming",
       "tar -xf - -C /srv/app/.incoming",
       "cd /srv/app/.incoming",
-      "export CI=1 NEXT_TELEMETRY_DISABLED=1 NODE_ENV=production",
+      // Not NODE_ENV=production here: the install would skip devDependencies, which the build needs (TypeScript, Tailwind).
+      "export CI=1 NEXT_TELEMETRY_DISABLED=1",
       ...c.setup,
       c.install,
       c.build,
@@ -3173,7 +3373,7 @@ async function ship(ep, dir, remote, exclude = []) {
 var shipping = { ship, measure, waitForSsh };
 
 // src/commands/deploy/index.ts
-var deployCommand = new Command49("deploy").description("put the app in this directory (React or Next.js) on a box with its own HTTPS address; redeploy by running it again").argument("[dir]", "the app's directory (default: the current one)").addOption(new Option5("-t, --template <template>", "what kind of app it is (detected from package.json when not given)").choices(TEMPLATE_IDS)).option("-n, --name <name>", "the box's name (default: the directory's name)").option("--sub <subdomain>", "its HTTPS name, https://<subdomain>.kvbox.app (default: the box's name)").addOption(new Option5("-s, --size <size>", "size of the box when it has to be made").choices(SIZE_NAMES)).option("-y, --yes", "ask nothing: take the defaults for whatever the flags and kvbox.json leave open").option("--json", "print the result as JSON").option("--org <slug>", "deploy into this org's boxes (saved to kvbox.json)").action(async (dirArg, opts, cmd) => {
+var deployCommand = new Command50("deploy").description("put the app in this directory (React or Next.js) on a box with its own HTTPS address; redeploy by running it again").argument("[dir]", "the app's directory (default: the current one)").addOption(new Option5("-t, --template <template>", "what kind of app it is (detected from package.json when not given)").choices(TEMPLATE_IDS)).option("-n, --name <name>", "the box's name (default: the directory's name)").option("--sub <subdomain>", "its HTTPS name, https://<subdomain>.kvbox.app (default: the box's name)").addOption(new Option5("-s, --size <size>", "size of the box when it has to be made").choices(SIZE_NAMES)).option("-y, --yes", "ask nothing: take the defaults for whatever the flags and kvbox.json leave open").option("--json", "print the result as JSON").option("--org <slug>", "deploy into this org's boxes (saved to kvbox.json)").action(async (dirArg, opts, cmd) => {
   const dir = resolve2(dirArg ?? ".");
   const pkg = await readPackageJson(dir);
   const saved = await readConfig(dir);
@@ -3351,11 +3551,123 @@ the app is on box ${ref} but has no address yet: pick another with kvbox deploy
   }
 }
 
+// src/commands/volume/index.ts
+import { Command as Command56 } from "commander";
+
+// src/commands/volume/attach.ts
+import { Command as Command51 } from "commander";
+var attachCommand = new Command51("attach").description("attach a volume to a box at /mnt/<volume> (a running box is restarted to take it)").argument("<volume>", "volume name").argument("<box>", "box name").option("--json", "print the box as JSON").action(async (volume, box, opts, cmd) => {
+  const client = await clientFor(cmd.optsWithGlobals());
+  try {
+    const machine = await spin(`attaching volume ${volume} to box ${box} (a running box is restarted)\u2026`, client.attachVolume(volume, { box }));
+    if (opts.json) {
+      json(machine);
+      return;
+    }
+    const path = machine.volumes?.find((v) => volume === v.name || volume.endsWith(`/${v.name}`))?.mountPath ?? volumeMountPath(volume.slice(volume.lastIndexOf("/") + 1));
+    info(`${color.green("\u2713")} volume ${volume} attached to box ${box}`);
+    info(machine.status === "running" ? `  the box was restarted; the volume is at ${path} inside it` : `  box ${box} is ${machine.status}; the volume is at ${path} once it runs`);
+  } finally {
+    await client.close();
+  }
+});
+
+// src/commands/volume/create.ts
+import { Command as Command52 } from "commander";
+function parseGib2(text2) {
+  const mib = parseMib(text2);
+  if (mib === void 0 || mib % 1024 !== 0) throw new KvboxError(`--size ${text2}: write whole GB, like 50 or 50GB`);
+  const gib = mib / 1024;
+  if (gib > MAX_VOLUME_GIB) throw new KvboxError(`--size ${text2}: a volume is at most ${MAX_VOLUME_GIB} GB`);
+  return gib;
+}
+var createCommand = new Command52("create").alias("new").description("create a volume: an empty disk of its own, ready to attach to a box").argument("<name>", "volume name (1-12 chars; the box mounts it at /mnt/<name>)").requiredOption("--size <gb>", "size in GB, like 50 or 50GB (whole GB; it only occupies what is written)").option("--box <box>", "the box it is for: made on that box's host (a volume attaches only to a box on its own host)").option("--json", "print the volume as JSON").action(async (name, opts, cmd) => {
+  const sizeGib = parseGib2(opts.size);
+  const client = await clientFor(cmd.optsWithGlobals());
+  try {
+    const vol = await spin(`creating volume ${name} (${sizeGib} GB)\u2026`, client.createVolume({ name, sizeGib, ...opts.box !== void 0 ? { box: opts.box } : {} }));
+    if (opts.json) json(vol);
+    else info(`${color.green("\u2713")} volume ${name} created (${vol.sizeGib} GB); attach it to a box with: kvbox volume attach ${name} ${opts.box ?? "<box>"}`);
+  } finally {
+    await client.close();
+  }
+});
+
+// src/commands/volume/detach.ts
+import { Command as Command53 } from "commander";
+var detachCommand = new Command53("detach").description("detach a volume from a box; its data is kept (a running box is restarted)").argument("<volume>", "volume name").argument("<box>", "box name").option("--json", "print the box as JSON").action(async (volume, box, opts, cmd) => {
+  const client = await clientFor(cmd.optsWithGlobals());
+  try {
+    const machine = await spin(`detaching volume ${volume} from box ${box} (a running box is restarted)\u2026`, client.detachVolume(volume, { box }));
+    if (opts.json) {
+      json(machine);
+      return;
+    }
+    info(`${color.green("\u2713")} volume ${volume} detached from box ${box}; its data is kept${machine.status === "running" ? " (the box was restarted)" : ""}`);
+  } finally {
+    await client.close();
+  }
+});
+
+// src/commands/volume/ls.ts
+import { Command as Command54 } from "commander";
+var lsCommand6 = new Command54("ls").alias("list").description("list volumes: size, what they occupy, which box has them").option("-a, --all", "every volume on the platform (platform admins only)").option("--json", "print as JSON").action(async (opts, cmd) => {
+  const client = await clientFor(cmd.optsWithGlobals());
+  try {
+    const cloud = client.target.kind === "cloud";
+    const vols = await client.listVolumes({ all: opts.all });
+    if (opts.json) {
+      json(vols);
+      return;
+    }
+    if (vols.length === 0) {
+      info("no volumes yet; make one with: kvbox volume create <name> --size 50GB");
+      return;
+    }
+    const org = cloud ? client.target.org : void 0;
+    if (org !== void 0) info(`volumes of ${org}`);
+    table(
+      vols.map((v) => ({
+        ...cloud ? { owner: slugOf(v.owner) === client.target.user ? "private" : slugOf(v.owner) } : {},
+        name: boxName(v.name),
+        size: `${v.sizeGib}GB`,
+        used: gbShort(v.usedBytes),
+        "attached to": v.attachedTo ?? "-",
+        created: age(v.createdAt)
+      }))
+    );
+  } finally {
+    await client.close();
+  }
+});
+
+// src/commands/volume/rm.ts
+import { Command as Command55 } from "commander";
+var rmCommand6 = new Command55("rm").alias("remove").description("delete a volume and everything on it (detach it first)").argument("<name>", "volume name").option("-y, --yes", "do not ask for confirmation").action(async (name, opts, cmd) => {
+  if (!await confirm(`Delete volume ${name} and everything on it?`, opts.yes ?? false)) {
+    info("cancelled");
+    process.exitCode = 1;
+    return;
+  }
+  const client = await clientFor(cmd.optsWithGlobals());
+  try {
+    await spin(`deleting volume ${name}\u2026`, client.deleteVolume(name));
+    info(`${color.green("\u2713")} volume ${name} deleted`);
+  } finally {
+    await client.close();
+  }
+});
+
+// src/commands/volume/index.ts
+var volumeCommand = new Command56("volume").aliases(["volumes", "vol"]).description("disks of their own: create one, attach it to a box at /mnt/<name>, move it to another box later").addCommand(createCommand).addCommand(lsCommand6).addCommand(attachCommand).addCommand(detachCommand).addCommand(rmCommand6);
+for (const cmd of volumeCommand.commands) cmd.option("--org <slug>", "act in this org (- for your personal volumes)");
+
 // src/program.ts
 function buildProgram() {
-  const program = new Command50("kvbox").description("self-hosted Firecracker microVMs with Docker-like ergonomics").version(VERSION, "-v, --version").option("--local", "use this machine's kvbox-server over its socket, ignoring kvbox login").option("--org <slug>", "the org: where kvbox new creates, and which box a name means when it is not one of yours; before the command here, or after it").showHelpAfterError().enablePositionalOptions();
+  const program = new Command57("kvbox").description("self-hosted Firecracker microVMs with Docker-like ergonomics").version(VERSION, "-v, --version").option("--local", "use this machine's kvbox-server over its socket, ignoring kvbox login").option("--org <slug>", "the org: where kvbox new creates, and which box a name means when it is not one of yours; before the command here, or after it").showHelpAfterError().enablePositionalOptions();
   program.addCommand(vmCommand);
   program.addCommand(snapshotsCommand);
+  program.addCommand(volumeCommand);
   program.addCommand(serverCommand);
   program.addCommand(loginCommand);
   program.addCommand(logoutCommand);