ghostdock 0.0.12 → 0.0.14

package/dist/cli-reference.md

@@ -749,6 +749,7 @@ ghostdock sandboxes commands get <command-id> --sandbox-id <string> --session-id
 | `<command-id>` | Command id returned by sandboxes commands run. Required. |
 | `--org <string>` | Organization id or slug, from organizations list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organizations use`. |
 | `--sandbox-id <string>` | Sandbox name (e.g. quiet-harbor) or id, from sandboxes list or sandboxes create. Names are unique within the organization. Required. |
+| `--container <string>` | Container to work in, by name, from sandboxes containers list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them. |
 | `--session-id <string>` | Session id returned by sandboxes commands run together with the commandId. Required. |
 
 MCP tool: `sandboxes_commands_get`.
@@ -766,6 +767,7 @@ ghostdock sandboxes commands kill <command-id> --sandbox-id <string> --session-i
 | `<command-id>` | Command id returned by sandboxes commands run. Required. |
 | `--org <string>` | Organization id or slug, from organizations list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organizations use`. |
 | `--sandbox-id <string>` | Sandbox name (e.g. quiet-harbor) or id, from sandboxes list or sandboxes create. Names are unique within the organization. Required. |
+| `--container <string>` | Container to work in, by name, from sandboxes containers list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them. |
 | `--session-id <string>` | Session id returned by sandboxes commands run together with the commandId. Required. |
 
 MCP tool: `sandboxes_commands_kill`.
@@ -783,6 +785,7 @@ ghostdock sandboxes commands logs <command-id> --sandbox-id <string> --session-i
 | `<command-id>` | Command id returned by sandboxes commands run. Required. |
 | `--org <string>` | Organization id or slug, from organizations list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organizations use`. |
 | `--sandbox-id <string>` | Sandbox name (e.g. quiet-harbor) or id, from sandboxes list or sandboxes create. Names are unique within the organization. Required. |
+| `--container <string>` | Container to work in, by name, from sandboxes containers list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them. |
 | `--session-id <string>` | Session id returned by sandboxes commands run together with the commandId. Required. |
 | `--offset <integer>` | Character offset to continue reading from. Default 0. |
 
@@ -800,6 +803,7 @@ ghostdock sandboxes commands run <sandbox-id> --command <string> [flags]
 | --- | --- |
 | `<sandbox-id>` | Sandbox name (e.g. quiet-harbor) or id, from sandboxes list or sandboxes create. Names are unique within the organization. Required. |
 | `--org <string>` | Organization id or slug, from organizations list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organizations use`. |
+| `--container <string>` | Container to work in, by name, from sandboxes containers list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them. |
 | `--command <string>` | Shell command to run. Never include secret values: commands are logged. Required. |
 | `--session-id <string>` | Session from sandboxes shells create, to keep cwd and environment from earlier commands. Omit for a one-off session. |
 | `--cwd <string>` | Directory to run the command in. |
@@ -807,6 +811,42 @@ ghostdock sandboxes commands run <sandbox-id> --command <string> [flags]
 
 MCP tool: `sandboxes_commands_run`.
 
+### `ghostdock sandboxes containers`
+
+Containers of a sandbox’s Docker engine.
+
+### `ghostdock sandboxes containers list`
+
+List the containers of a sandbox, running or not. Each with state, health, restart policy, ports, Compose project and service, deletion protection, ghostdock.* labels, and which one is the default. A stopped sandbox lists none (it is not started for this).
+
+```
+ghostdock sandboxes containers list <sandbox-id> [flags]
+```
+
+| Argument | Description |
+| --- | --- |
+| `<sandbox-id>` | Sandbox name (e.g. quiet-harbor) or id, from sandboxes list or sandboxes create. Names are unique within the organization. Required. |
+| `--org <string>` | Organization id or slug, from organizations list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organizations use`. |
+
+MCP tool: `sandboxes_containers_list`.
+
+### `ghostdock sandboxes containers protection`
+
+Switch a container’s deletion protection on or off. A protected container cannot be removed or recreated (docker rm, compose down) until its protection is off. Starts the sandbox when needed.
+
+```
+ghostdock sandboxes containers protection <sandbox-id> <container> --protected <value> [flags]
+```
+
+| Argument | Description |
+| --- | --- |
+| `<sandbox-id>` | Sandbox name (e.g. quiet-harbor) or id, from sandboxes list or sandboxes create. Names are unique within the organization. Required. |
+| `<container>` | Container, by name. Required. |
+| `--org <string>` | Organization id or slug, from organizations list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organizations use`. |
+| `--protected` | true: protect it; false: allow removing it. Required. |
+
+MCP tool: `sandboxes_containers_protection`.
+
 ### `ghostdock sandboxes create`
 
 Create a sandbox from a snapshot, OCI image, Dockerfile or Compose files. Inline content only: for a directory or ZIP (Dockerfile COPY/ADD, Compose build files) use `ghostdock sandboxes build`. Snapshots and catalog images can require environment entries, URL ports and MCP names (requiredEnvironment / requiredUrls / requiredMcps); a missing environment entry fails with its names (missingEnvironment), and removing a required URL or MCP fails with them (missingUrls / missingMcps). Returns once the sandbox is running, with `boot`: how long the sandbox (VM) and, when one was started, its container took to start, each in ms. Idle-stop and auto-delete apply (defaults 20 minutes / 14 days). Read the sandboxes skill (`ghostdock skills get sandboxes`) for sources, manifests, lifecycle and providers.
@@ -831,6 +871,23 @@ ghostdock sandboxes create --source <object> [flags]
 
 MCP tool: `sandboxes_create`.
 
+### `ghostdock sandboxes default-container`
+
+Show, set or clear the sandbox’s default container. SSH, the terminal, files, commands and MCP land there when no container is named. Without container or clear it only shows the setting.
+
+```
+ghostdock sandboxes default-container <sandbox-id> [flags]
+```
+
+| Argument | Description |
+| --- | --- |
+| `<sandbox-id>` | Sandbox name (e.g. quiet-harbor) or id, from sandboxes list or sandboxes create. Names are unique within the organization. Required. |
+| `--org <string>` | Organization id or slug, from organizations list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organizations use`. |
+| `--container <string>` | Container to make the default, by name. The running sandbox must have it. |
+| `--clear` | Clear the default. |
+
+MCP tool: `sandboxes_default_container`.
+
 ### `ghostdock sandboxes delete`
 
 Permanently delete a sandbox and its files.
@@ -936,6 +993,7 @@ ghostdock sandboxes files list <sandbox-id> [flags]
 | --- | --- |
 | `<sandbox-id>` | Sandbox name (e.g. quiet-harbor) or id, from sandboxes list or sandboxes create. Names are unique within the organization. Required. |
 | `--org <string>` | Organization id or slug, from organizations list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organizations use`. |
+| `--container <string>` | Container to work in, by name, from sandboxes containers list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them. |
 | `--path <string>` | Directory to list. Absolute or relative to /. Defaults to /workspace. |
 
 MCP tool: `sandboxes_files_list`.
@@ -953,6 +1011,7 @@ ghostdock sandboxes files read <path> --sandbox-id <string> [flags]
 | `<path>` | File path. Absolute or relative to / (for example /workspace/src/App.vue). Required. |
 | `--org <string>` | Organization id or slug, from organizations list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organizations use`. |
 | `--sandbox-id <string>` | Sandbox name (e.g. quiet-harbor) or id, from sandboxes list or sandboxes create. Names are unique within the organization. Required. |
+| `--container <string>` | Container to work in, by name, from sandboxes containers list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them. |
 
 MCP tool: `sandboxes_files_read`.
 
@@ -1125,6 +1184,7 @@ ghostdock sandboxes shells close <session-id> --sandbox-id <string> [flags]
 | `<session-id>` | Session id from sandboxes shells create. Required. |
 | `--org <string>` | Organization id or slug, from organizations list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organizations use`. |
 | `--sandbox-id <string>` | Sandbox name (e.g. quiet-harbor) or id, from sandboxes list or sandboxes create. Names are unique within the organization. Required. |
+| `--container <string>` | Container to work in, by name, from sandboxes containers list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them. |
 
 MCP tool: `sandboxes_shells_close`.
 
@@ -1140,6 +1200,7 @@ ghostdock sandboxes shells create <sandbox-id> [flags]
 | --- | --- |
 | `<sandbox-id>` | Sandbox name (e.g. quiet-harbor) or id, from sandboxes list or sandboxes create. Names are unique within the organization. Required. |
 | `--org <string>` | Organization id or slug, from organizations list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organizations use`. |
+| `--container <string>` | Container to work in, by name, from sandboxes containers list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them. |
 | `--session-id <string>` | Id for the new session: a slug; user-cmd, image-cmd and compose are reserved. Omit to generate one. |
 
 MCP tool: `sandboxes_shells_create`.
@@ -1160,6 +1221,7 @@ ghostdock sandboxes ssh get <sandbox-id> [flags]
 | --- | --- |
 | `<sandbox-id>` | Sandbox name (e.g. quiet-harbor) or id, from sandboxes list or sandboxes create. Names are unique within the organization. Required. |
 | `--org <string>` | Organization id or slug, from organizations list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organizations use`. |
+| `--container <string>` | Container to work in, by name, from sandboxes containers list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them. |
 
 MCP tool: `sandboxes_ssh_get`.
 

package/dist/cli.md

@@ -314,6 +314,25 @@ ghostdock sandboxes create --org org_123 --display-name "Marketing site"
 ghostdock sandboxes urls create quiet-harbor --port 8080 --auto-wake true --public true
 ```
 
+#### Containers in a sandbox
+
+On Ghostdock Cloud a sandbox runs one Docker engine; everything in it is an ordinary container.
+`ssh get`, `files`, `commands` and `shells` land in one of them: `--container <name>`, else the
+sandbox's default container, else the one running container. With several running and no default,
+the CLI asks which one at the keyboard and offers to make it the default; without a terminal it
+fails and lists the names. A command runs as `docker exec` does there: as the container's
+`ghostdock.login.user`, else the image's `USER`, else root.
+
+```bash
+ghostdock sandboxes containers list quiet-harbor
+ghostdock sandboxes default-container quiet-harbor --container web     # --clear true removes it
+ghostdock sandboxes commands run quiet-harbor --container db --command 'pg_isready'
+ghostdock sandboxes containers protection quiet-harbor workstation --protected false
+```
+
+A shell session lives in its container: pass the same `--container` to every `shells` and
+`commands` call on it.
+
 #### Environment in a sandbox
 
 A sandbox exports **nothing** by default (unless you boot from an organization snapshot or catalog
@@ -515,6 +534,10 @@ ghostdock network disconnect
   may not use answers 403.
 - **Needs `wg-quick`** (`brew install wireguard-tools`, `apt install wireguard-tools`). macOS
   and Linux. On Windows, run the CLI in WSL: then only tools inside WSL reach sandboxes.
+- **Tunnel MTU 1280**, so the tunnel works on networks with a smaller path than 1500 bytes
+  (DS-Lite, VPNs, mobile). A config written before 2026-10-20 has 1420: `network status` and
+  `network ls` then say *This machine's tunnel has MTU 1420, the network now uses 1280*. Run
+  `ghostdock network connect` again; until then TCP works, other large packets can be lost.
 - **One key per machine**, kept in `~/.config/ghostdock/network/`.
   Only the public key is sent. The device belongs to the login it was connected with:
   `ghostdock logout` takes it out of the network, and so does not connecting for 90 days.
@@ -691,7 +714,10 @@ or read [`cli-reference.md`](cli-reference.md) for every command's full descript
 | `ghostdock sandboxes commands kill <command-id> --sandbox-id <string> --session-id <string> [flags]` | Interrupt a running shell command. |
 | `ghostdock sandboxes commands logs <command-id> --sandbox-id <string> --session-id <string> [flags]` | Get a page of a shell command’s stdout and stderr. |
 | `ghostdock sandboxes commands run <sandbox-id> --command <string> [flags]` | Run a shell command in a sandbox. |
+| `ghostdock sandboxes containers list <sandbox-id> [flags]` | List the containers of a sandbox, running or not. |
+| `ghostdock sandboxes containers protection <sandbox-id> <container> --protected <value> [flags]` | Switch a container’s deletion protection on or off. |
 | `ghostdock sandboxes create --source <object> [flags]` | Create a sandbox from a snapshot, OCI image, Dockerfile or Compose files. |
+| `ghostdock sandboxes default-container <sandbox-id> [flags]` | Show, set or clear the sandbox’s default container. |
 | `ghostdock sandboxes delete <sandbox-id> [flags]` | Permanently delete a sandbox and its files. |
 | `ghostdock sandboxes env delete <name> --sandbox-id <string> [flags]` | Delete one of a sandbox’s own variables or secrets. |
 | `ghostdock sandboxes env get <sandbox-id> [flags]` | Get a sandbox’s environment: selections, bindings and local entries. |

package/dist/index.js

@@ -4625,6 +4625,13 @@ var GENERATED_TOOL_CATALOG = [
           minLength: 1,
           description: "Sandbox name (e.g. quiet-harbor) or id, from sandboxes_list or sandboxes_create. Names are unique within the organization."
         },
+        container: {
+          description: "Container to work in, by name, from sandboxes_containers_list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them.",
+          type: "string",
+          minLength: 1,
+          maxLength: 255,
+          pattern: "^[a-zA-Z0-9][a-zA-Z0-9_.-]*$"
+        },
         files: {
           description: "Small inline files: { path, content } for utf8 text, or { path, contentBase64 } for binary.",
           type: "array",
@@ -4701,6 +4708,13 @@ var GENERATED_TOOL_CATALOG = [
           minLength: 1,
           description: "Sandbox name (e.g. quiet-harbor) or id, from sandboxes_list or sandboxes_create. Names are unique within the organization."
         },
+        container: {
+          description: "Container to work in, by name, from sandboxes_containers_list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them.",
+          type: "string",
+          minLength: 1,
+          maxLength: 255,
+          pattern: "^[a-zA-Z0-9][a-zA-Z0-9_.-]*$"
+        },
         path: {
           description: "Directory to list. Absolute or relative to /. Defaults to /workspace.",
           type: "string",
@@ -4780,6 +4794,13 @@ var GENERATED_TOOL_CATALOG = [
           minLength: 1,
           description: "Sandbox name (e.g. quiet-harbor) or id, from sandboxes_list or sandboxes_create. Names are unique within the organization."
         },
+        container: {
+          description: "Container to work in, by name, from sandboxes_containers_list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them.",
+          type: "string",
+          minLength: 1,
+          maxLength: 255,
+          pattern: "^[a-zA-Z0-9][a-zA-Z0-9_.-]*$"
+        },
         path: {
           type: "string",
           minLength: 1,
@@ -5922,6 +5943,13 @@ var GENERATED_TOOL_CATALOG = [
           type: "string",
           minLength: 1,
           description: "Sandbox name (e.g. quiet-harbor) or id, from sandboxes_list or sandboxes_create. Names are unique within the organization."
+        },
+        container: {
+          description: "Container to work in, by name, from sandboxes_containers_list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them.",
+          type: "string",
+          minLength: 1,
+          maxLength: 255,
+          pattern: "^[a-zA-Z0-9][a-zA-Z0-9_.-]*$"
         }
       },
       required: [
@@ -5981,6 +6009,156 @@ var GENERATED_TOOL_CATALOG = [
       additionalProperties: {}
     }
   },
+  {
+    id: "sandboxes_containers_list",
+    name: "sandboxes_containers_list",
+    cli: [
+      "sandboxes",
+      "containers",
+      "list"
+    ],
+    cliArgs: [
+      "sandboxId"
+    ],
+    description: "List the containers of a sandbox, running or not. Each with state, health, restart policy, ports, Compose project and service, deletion protection, ghostdock.* labels, and which one is the default. A stopped sandbox lists none (it is not started for this).",
+    inputSchema: {
+      $schema: "https://json-schema.org/draft/2020-12/schema",
+      type: "object",
+      properties: {
+        organization: {
+          type: "string",
+          minLength: 1,
+          description: "Organization id or slug, from organizations_list. Ids survive renames; slugs change when the organization is renamed."
+        },
+        sandboxId: {
+          type: "string",
+          minLength: 1,
+          description: "Sandbox name (e.g. quiet-harbor) or id, from sandboxes_list or sandboxes_create. Names are unique within the organization."
+        }
+      },
+      required: [
+        "organization",
+        "sandboxId"
+      ],
+      additionalProperties: false
+    },
+    outputSchema: {
+      $schema: "https://json-schema.org/draft/2020-12/schema",
+      type: "object",
+      propertyNames: {
+        type: "string"
+      },
+      additionalProperties: {}
+    }
+  },
+  {
+    id: "sandboxes_default_container",
+    name: "sandboxes_default_container",
+    cli: [
+      "sandboxes",
+      "default-container"
+    ],
+    cliArgs: [
+      "sandboxId"
+    ],
+    description: "Show, set or clear the sandbox’s default container. SSH, the terminal, files, commands and MCP land there when no container is named. Without container or clear it only shows the setting.",
+    inputSchema: {
+      $schema: "https://json-schema.org/draft/2020-12/schema",
+      type: "object",
+      properties: {
+        organization: {
+          type: "string",
+          minLength: 1,
+          description: "Organization id or slug, from organizations_list. Ids survive renames; slugs change when the organization is renamed."
+        },
+        sandboxId: {
+          type: "string",
+          minLength: 1,
+          description: "Sandbox name (e.g. quiet-harbor) or id, from sandboxes_list or sandboxes_create. Names are unique within the organization."
+        },
+        container: {
+          description: "Container to make the default, by name. The running sandbox must have it.",
+          type: "string",
+          minLength: 1,
+          maxLength: 255,
+          pattern: "^[a-zA-Z0-9][a-zA-Z0-9_.-]*$"
+        },
+        clear: {
+          description: "Clear the default.",
+          type: "boolean"
+        }
+      },
+      required: [
+        "organization",
+        "sandboxId"
+      ],
+      additionalProperties: false
+    },
+    outputSchema: {
+      $schema: "https://json-schema.org/draft/2020-12/schema",
+      type: "object",
+      propertyNames: {
+        type: "string"
+      },
+      additionalProperties: {}
+    }
+  },
+  {
+    id: "sandboxes_containers_protection",
+    name: "sandboxes_containers_protection",
+    cli: [
+      "sandboxes",
+      "containers",
+      "protection"
+    ],
+    cliArgs: [
+      "sandboxId",
+      "container"
+    ],
+    description: "Switch a container’s deletion protection on or off. A protected container cannot be removed or recreated (docker rm, compose down) until its protection is off. Starts the sandbox when needed.",
+    inputSchema: {
+      $schema: "https://json-schema.org/draft/2020-12/schema",
+      type: "object",
+      properties: {
+        organization: {
+          type: "string",
+          minLength: 1,
+          description: "Organization id or slug, from organizations_list. Ids survive renames; slugs change when the organization is renamed."
+        },
+        sandboxId: {
+          type: "string",
+          minLength: 1,
+          description: "Sandbox name (e.g. quiet-harbor) or id, from sandboxes_list or sandboxes_create. Names are unique within the organization."
+        },
+        container: {
+          type: "string",
+          minLength: 1,
+          maxLength: 255,
+          pattern: "^[a-zA-Z0-9][a-zA-Z0-9_.-]*$",
+          description: "Container, by name."
+        },
+        protected: {
+          type: "boolean",
+          description: "true: protect it; false: allow removing it."
+        }
+      },
+      required: [
+        "organization",
+        "sandboxId",
+        "container",
+        "protected"
+      ],
+      additionalProperties: false
+    },
+    outputSchema: {
+      $schema: "https://json-schema.org/draft/2020-12/schema",
+      type: "object",
+      propertyNames: {
+        type: "string"
+      },
+      additionalProperties: {}
+    }
+  },
   {
     id: "sandboxes_commands_run",
     name: "sandboxes_commands_run",
@@ -6007,6 +6185,13 @@ var GENERATED_TOOL_CATALOG = [
           minLength: 1,
           description: "Sandbox name (e.g. quiet-harbor) or id, from sandboxes_list or sandboxes_create. Names are unique within the organization."
         },
+        container: {
+          description: "Container to work in, by name, from sandboxes_containers_list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them.",
+          type: "string",
+          minLength: 1,
+          maxLength: 255,
+          pattern: "^[a-zA-Z0-9][a-zA-Z0-9_.-]*$"
+        },
         command: {
           type: "string",
           minLength: 1,
@@ -6069,6 +6254,13 @@ var GENERATED_TOOL_CATALOG = [
           minLength: 1,
           description: "Sandbox name (e.g. quiet-harbor) or id, from sandboxes_list or sandboxes_create. Names are unique within the organization."
         },
+        container: {
+          description: "Container to work in, by name, from sandboxes_containers_list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them.",
+          type: "string",
+          minLength: 1,
+          maxLength: 255,
+          pattern: "^[a-zA-Z0-9][a-zA-Z0-9_.-]*$"
+        },
         sessionId: {
           type: "string",
           minLength: 1,
@@ -6123,6 +6315,13 @@ var GENERATED_TOOL_CATALOG = [
           minLength: 1,
           description: "Sandbox name (e.g. quiet-harbor) or id, from sandboxes_list or sandboxes_create. Names are unique within the organization."
         },
+        container: {
+          description: "Container to work in, by name, from sandboxes_containers_list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them.",
+          type: "string",
+          minLength: 1,
+          maxLength: 255,
+          pattern: "^[a-zA-Z0-9][a-zA-Z0-9_.-]*$"
+        },
         sessionId: {
           type: "string",
           minLength: 1,
@@ -6183,6 +6382,13 @@ var GENERATED_TOOL_CATALOG = [
           minLength: 1,
           description: "Sandbox name (e.g. quiet-harbor) or id, from sandboxes_list or sandboxes_create. Names are unique within the organization."
         },
+        container: {
+          description: "Container to work in, by name, from sandboxes_containers_list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them.",
+          type: "string",
+          minLength: 1,
+          maxLength: 255,
+          pattern: "^[a-zA-Z0-9][a-zA-Z0-9_.-]*$"
+        },
         sessionId: {
           type: "string",
           minLength: 1,
@@ -6237,6 +6443,13 @@ var GENERATED_TOOL_CATALOG = [
           minLength: 1,
           description: "Sandbox name (e.g. quiet-harbor) or id, from sandboxes_list or sandboxes_create. Names are unique within the organization."
         },
+        container: {
+          description: "Container to work in, by name, from sandboxes_containers_list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them.",
+          type: "string",
+          minLength: 1,
+          maxLength: 255,
+          pattern: "^[a-zA-Z0-9][a-zA-Z0-9_.-]*$"
+        },
         sessionId: {
           description: "Id for the new session: a slug; user-cmd, image-cmd and compose are reserved. Omit to generate one.",
           type: "string",
@@ -6284,6 +6497,13 @@ var GENERATED_TOOL_CATALOG = [
           minLength: 1,
           description: "Sandbox name (e.g. quiet-harbor) or id, from sandboxes_list or sandboxes_create. Names are unique within the organization."
         },
+        container: {
+          description: "Container to work in, by name, from sandboxes_containers_list. Default: the sandbox’s default container, else the one running container. With several running and no default the call fails and lists them.",
+          type: "string",
+          minLength: 1,
+          maxLength: 255,
+          pattern: "^[a-zA-Z0-9][a-zA-Z0-9_.-]*$"
+        },
         sessionId: {
           type: "string",
           minLength: 1,
@@ -8588,7 +8808,7 @@ function getCliName(argv = process.argv) {
   return CLI_NAMES.find((name) => name === invoked) ?? "ghostdock";
 }
 // package.json
-var version = "0.0.12";
+var version = "0.0.14";
 var package_default = {
   name: "ghostdock",
   description: "Ghostdock CLI — device login and agent tool invocation from the command line",
@@ -9193,6 +9413,57 @@ var envCommand = defineCommand({
   }
 });
 
+// src/container-picker.ts
+import { createInterface } from "node:readline/promises";
+function containerQuestionOf(error) {
+  if (!(error instanceof ApiError) || !error.data || typeof error.data !== "object")
+    return null;
+  const { code, params } = error.data;
+  if (code !== "container_choice_required" && code !== "container_default_missing")
+    return null;
+  const record = params && typeof params === "object" ? params : {};
+  const running = typeof record.containers === "string" ? record.containers.split(",").map((name) => name.trim()).filter(Boolean) : [];
+  if (running.length === 0)
+    return null;
+  return {
+    running,
+    ...code === "container_default_missing" && typeof record.container === "string" ? { missingDefault: record.container } : {}
+  };
+}
+var say = (line) => process.stderr.write(`${line}
+`);
+var chooseContainerOnTerminal = async ({ running, missingDefault }) => {
+  if (missingDefault) {
+    say(`
+The default container ${missingDefault} is gone.`);
+  }
+  say(missingDefault ? "Which container?" : `
+Several containers are running. Which one?`);
+  running.forEach((name, index) => {
+    say(`  ${index + 1}. ${name}`);
+  });
+  const prompt = createInterface({ input: process.stdin, output: process.stderr });
+  try {
+    const answer = (await prompt.question("Number (Enter to cancel): ")).trim();
+    const index = Number.parseInt(answer, 10) - 1;
+    return Number.isInteger(index) && index >= 0 && index < running.length ? running[index] ?? null : null;
+  } finally {
+    prompt.close();
+  }
+};
+var confirmDefaultOnTerminal = async (container) => {
+  const prompt = createInterface({ input: process.stdin, output: process.stderr });
+  try {
+    const answer = (await prompt.question(`Make ${container} the default? [y/N] `)).trim();
+    return /^y(es)?$/i.test(answer);
+  } finally {
+    prompt.close();
+  }
+};
+function defaultContainerPickers() {
+  return process.stdin.isTTY && process.stderr.isTTY ? { choose: chooseContainerOnTerminal, confirmDefault: confirmDefaultOnTerminal } : undefined;
+}
+
 // src/progress.ts
 var PROGRESS_FRAMES = ["▂▄▆", "▄▆█", "▆█▆", "█▆▄", "▆▄▂", "▄▂▄"];
 var FRAME_MS = 120;
@@ -9293,10 +9564,10 @@ function symbolForStatus(status) {
     return "failed";
   if (/^(running|active|ready|deployed|published|online|verified|ok)$/.test(s))
     return "ready";
-  if (/^(stopped|deleted|unpublished|vanished|archived|revoked|closed|killed)$/.test(s)) {
+  if (/^(stopped|deleted|unpublished|vanished|archived|revoked|closed|killed|exited|dead|paused)$/.test(s)) {
     return "stopped";
   }
-  if (/(pending|starting|spawning|stopping|building|progress|awaiting|queued|creating)/.test(s)) {
+  if (/(pending|starting|spawning|stopping|building|progress|awaiting|queued|creating|restarting|removing)/.test(s)) {
     return "progress";
   }
   return "item";
@@ -9311,6 +9582,9 @@ function lineKeys(item) {
   const idKeys = "id" in item ? ID_KEYS.filter((key) => key !== "sandboxId") : ID_KEYS;
   return { id: firstKey(item, idKeys), label: firstKey(item, LABEL_KEYS) };
 }
+function shortId(id) {
+  return /^[0-9a-f]{64}$/.test(id) ? id.slice(0, 12) : id;
+}
 function itemLine(item, color) {
   const keys = lineKeys(item);
   const id = keys.id ? item[keys.id] : undefined;
@@ -9319,7 +9593,7 @@ function itemLine(item, color) {
   const url = firstString(item, URL_KEYS);
   const parts = [label ?? id ?? "(unnamed)"];
   if (label && id && id !== label)
-    parts.push(dim(id, color));
+    parts.push(dim(shortId(id), color));
   if (status)
     parts.push(status);
   if (url)
@@ -9552,7 +9826,7 @@ function buildToolInput(schema, rawArgs) {
 }
 
 // src/commands/invoke.ts
-async function runToolInvoke(tool, rawArgs, log = console.log, error = printError, notice = printNotice) {
+async function runToolInvoke(tool, rawArgs, log = console.log, error = printError, notice = printNotice, pickers = defaultContainerPickers()) {
   let input;
   try {
     input = buildToolInput(tool.inputSchema, rawArgs);
@@ -9571,11 +9845,11 @@ async function runToolInvoke(tool, rawArgs, log = console.log, error = printErro
     });
     const waitMessage = PROGRESS_MESSAGES[tool.name];
     if (!waitMessage) {
-      const result = await request();
+      const result = await withContainerPick(tool, input, request, pickers, notice);
       printResult(result, () => renderResult(result, colorEnabled(process.stdout)), log);
       return 0;
     }
-    const { value: result, elapsed } = await withProgress(waitMessage, request);
+    const { value: result, elapsed } = await withContainerPick(tool, input, () => withProgress(waitMessage, request), pickers, notice);
     printResult(result, () => {
       const color = colorEnabled(process.stdout);
       const lines = renderResult(result, color);
@@ -9587,6 +9861,38 @@ async function runToolInvoke(tool, rawArgs, log = console.log, error = printErro
     return 1;
   }
 }
+async function withContainerPick(tool, input, send, pickers, notice) {
+  try {
+    return await send();
+  } catch (err) {
+    const properties = tool.inputSchema.properties;
+    const question = containerQuestionOf(err);
+    if (!pickers || !question || !properties || !("container" in properties) || input.container) {
+      throw err;
+    }
+    const container = await pickers.choose(question);
+    if (!container)
+      throw err;
+    input.container = container;
+    const result = await send();
+    if (typeof input.sandboxId === "string" && await pickers.confirmDefault(container)) {
+      try {
+        await authorizedRequest("/api/v1/tools/sandboxes_default_container", {
+          method: "POST",
+          body: JSON.stringify({
+            organization: input.organization,
+            sandboxId: input.sandboxId,
+            container
+          })
+        });
+        notice(eventLine("done", `Default container: ${container}.`));
+      } catch (err) {
+        notice(eventLine("failed", `The default container was not set: ${err instanceof Error ? err.message : String(err)}`));
+      }
+    }
+    return result;
+  }
+}
 var PROGRESS_MESSAGES = {
   sandboxes_create: "Creating sandbox…",
   sandboxes_wake: "Waking sandbox…",
@@ -9642,7 +9948,7 @@ function createToolCommands(catalog) {
 import { hostname } from "node:os";
 
 // src/commands/login-organization.ts
-import { createInterface } from "node:readline/promises";
+import { createInterface as createInterface2 } from "node:readline/promises";
 function label(organization) {
   return `${organization.name} (${organization.slug ?? organization.id})`;
 }
@@ -9652,7 +9958,7 @@ Which organization should commands use by default?`);
   organizations.forEach((organization, index) => {
     console.log(`  ${index + 1}. ${label(organization)}`);
   });
-  const prompt = createInterface({ input: process.stdin, output: process.stdout });
+  const prompt = createInterface2({ input: process.stdin, output: process.stdout });
   try {
     const answer = (await prompt.question(`Number (Enter to skip): `)).trim();
     const index = Number.parseInt(answer, 10) - 1;
@@ -9927,14 +10233,21 @@ function renderConfig(input) {
     if (!isDnsZone(zone))
       throw new Error(`The server sent a zone that is not a DNS name: ${zone}`);
   }
+  if (!device.address || !isIPv6Address(device.address)) {
+    throw new Error(`The server sent no IPv6 address for this device: ${device.address}`);
+  }
   if (!isIPv6Address(network.gatewayAddress)) {
     throw new Error(`The server sent a gateway that is not an IPv6 address: ${network.gatewayAddress}`);
   }
+  const ipv4 = device.address4 && network.ingress4 ? { address: device.address4, ingress: network.ingress4 } : null;
+  if (ipv4 && (!isIPv4Address(ipv4.address) || !isIPv4Address(ipv4.ingress))) {
+    throw new Error(`The server sent an IPv4 address that is not one: ${ipv4.address}, ${ipv4.ingress}`);
+  }
   const lines = [
     "# Written by `ghostdock network connect`. Run it again rather than editing this file.",
     "[Interface]",
     `PrivateKey = ${input.privateKey}`,
-    `Address = ${device.address}/128`,
+    `Address = ${device.address}/128${ipv4 ? `, ${ipv4.address}/32` : ""}`,
     `MTU = ${network.mtu}`
   ];
   if (input.dns === "macos-resolver") {
@@ -9946,7 +10259,7 @@ function renderConfig(input) {
     const domains = zones.map((zone) => `'~${zone}'`).join(" ");
     lines.push(`PostUp = resolvectl dns %i ${network.gatewayAddress} && resolvectl domain %i ${domains}`);
   }
-  lines.push("", "[Peer]", `PublicKey = ${gateway.publicKey}`, `Endpoint = ${gateway.endpoint}`, `AllowedIPs = ${network.platformPrefix}`, "PersistentKeepalive = 25", "");
+  lines.push("", "[Peer]", `PublicKey = ${gateway.publicKey}`, `Endpoint = ${gateway.endpoint}`, `AllowedIPs = ${network.prefix}${ipv4 ? `, ${ipv4.ingress}/32` : ""}`, "PersistentKeepalive = 25", "");
   return lines.join(`
 `);
 }
@@ -9955,9 +10268,39 @@ function isDnsZone(zone) {
   const labels = zone.split(".");
   return zone.length <= 253 && labels.length >= 2 && labels.every((label) => DNS_LABEL.test(label));
 }
+function isIPv4Address(text) {
+  return /^(25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])(\.(25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])){3}$/.test(text);
+}
+function ipv4RouteOwner(platform, output) {
+  if (platform === "darwin") {
+    if (/^\s*destination: default$/m.test(output))
+      return null;
+    return /^\s*interface: (\S+)$/m.exec(output)?.[1] ?? null;
+  }
+  for (const line of output.split(`
+`).map((l) => l.trim())) {
+    if (!line || /^(default|broadcast)\b/.test(line))
+      continue;
+    return /\bdev (\S+)/.exec(line)?.[1] ?? "another route";
+  }
+  return null;
+}
+function ipv4RouteCommand(platform, address) {
+  return platform === "darwin" ? ["route", ["-n", "get", address]] : ["ip", ["-4", "route", "show", "table", "all", "match", address]];
+}
 function isIPv6Address(text) {
   return /^[0-9a-f:]{2,39}$/.test(text) && text.includes(":");
 }
+async function readConfigMtu(path = configPath()) {
+  let contents;
+  try {
+    contents = await readFile3(path, "utf8");
+  } catch {
+    return null;
+  }
+  const match = /^MTU = (\d+)$/m.exec(contents);
+  return match ? Number(match[1]) : null;
+}
 async function writeConfig(contents, path = configPath()) {
   await mkdir3(dirname3(path), { recursive: true, mode: 448 });
   await writeFile3(path, contents, { mode: 384 });
@@ -9985,6 +10328,11 @@ function defaultDeps() {
       child.on("error", reject);
       child.on("close", (code) => resolve(code ?? 1));
     }),
+    output: (command, args) => {
+      const result = spawnSync(command, args, { encoding: "utf8" });
+      return result.status === 0 ? result.stdout : "";
+    },
+    platform: process.platform,
     has: (command) => spawnSync("sh", ["-c", `command -v ${command}`]).status === 0,
     dir: networkDir(),
     up: () => tunnelUp(),
@@ -10044,7 +10392,7 @@ async function runNetworkConnect(args = {}, deps = defaultDeps()) {
   await writeDeviceState({
     baseUrl: getBaseUrl(),
     deviceId: registered.device.id,
-    address: registered.device.address,
+    address: registered.device.address ?? "",
     gatewayProvider: registered.provider
   }, deps.dir);
   const wasUp = deps.up();
@@ -10055,6 +10403,7 @@ async function runNetworkConnect(args = {}, deps = defaultDeps()) {
       return 1;
     }
   }
+  const ipv4Clashes = ipv4Clashes4(registered, deps);
   const code = await wgQuick(deps, "up");
   if (code !== 0) {
     deps.error(`wg-quick exited ${code}. The config is in ${configPath(deps.dir)}.`);
@@ -10076,6 +10425,12 @@ async function runNetworkConnect(args = {}, deps = defaultDeps()) {
       `    Another organization: ${getCliName()} network connect --org <org>.`
     ] : [],
     ...network.netZone && pinned && shortNameOrganizationChanged ? clearingNotice(network.netCookieSite) : [],
+    ...network.ingress4 && !device.address4 ? [
+      "    No IPv4 address was free on this provider's host, so browser names work over IPv6 only:",
+      "    Chrome on a network without IPv6 cannot open them on this machine. Firefox and Safari",
+      "    can. Run connect again later: an address frees up when another device goes."
+    ] : [],
+    ...ipv4Clashes.map(({ address, owner }) => `    ${address} is already routed through ${owner} on this machine: browsers may not reach the private network's names over IPv4 while it is. Ask your Ghostdock admin about the IPv4 block.`),
     ...dns === "none" ? [
       "    No split DNS on this machine (no systemd-resolved): use the addresses from",
       `    \`${getCliName()} network ls\`.`
@@ -10084,6 +10439,17 @@ async function runNetworkConnect(args = {}, deps = defaultDeps()) {
   ], deps.log);
   return 0;
 }
+function ipv4Clashes4(registered, deps) {
+  const addresses = [registered.network.ingress4, registered.device.address4].filter((a) => typeof a === "string" && isIPv4Address(a));
+  const clashes = [];
+  for (const address of addresses) {
+    const [command, args] = ipv4RouteCommand(deps.platform, address);
+    const owner = ipv4RouteOwner(deps.platform, deps.output(command, args));
+    if (owner)
+      clashes.push({ address, owner });
+  }
+  return clashes;
+}
 function clearingNotice(cookieSite) {
   const site = cookieSite?.site ?? "the net domain";
   return [
@@ -10110,25 +10476,38 @@ async function readConnection(deps) {
   const state = await readDeviceState(deps.dir);
   const up = deps.up();
   if (!state)
-    return { state, up, device: null, asked: true, provider: null };
+    return { state, up, device: null, asked: true, provider: null, staleMtu: null };
   try {
-    const { devices } = await deps.request("/api/v1/network/devices");
+    const { devices, mtu } = await deps.request("/api/v1/network/devices");
     const device = devices.find((d) => d.id === state.deviceId) ?? null;
+    const config = await readConfigMtu(configPath(deps.dir));
+    const staleMtu = config !== null && config !== mtu ? { config, current: mtu } : null;
+    if (staleMtu) {
+      deps.notice(`This machine's tunnel has MTU ${staleMtu.config}, the network now uses ${staleMtu.current}. ` + `Run \`${getCliName()} network connect\` again: until then, large packets other than TCP ` + "can be lost on the way.");
+    }
     return {
       state,
       up,
       device,
       asked: true,
-      provider: up ? device?.gatewayProvider ?? null : null
+      provider: up ? device?.gatewayProvider ?? null : null,
+      staleMtu
     };
   } catch (err) {
     deps.notice(`Could not ask the app about this device: ${message(err)}`);
-    return { state, up, device: null, asked: false, provider: up ? state.gatewayProvider : null };
+    return {
+      state,
+      up,
+      device: null,
+      asked: false,
+      provider: up ? state.gatewayProvider : null,
+      staleMtu: null
+    };
   }
 }
 async function runNetworkStatus(deps = defaultDeps()) {
-  const { state, up, device, asked, provider } = await readConnection(deps);
-  printResult({ connected: up, device, provider }, () => {
+  const { state, up, device, asked, provider, staleMtu } = await readConnection(deps);
+  printResult({ connected: up, device, provider, staleMtu }, () => {
     if (!state) {
       return [eventLine("item", `Not set up. Run \`${getCliName()} network connect\`.`)];
     }
@@ -10187,7 +10566,7 @@ async function runNetworkLs(args, deps = defaultDeps()) {
         const note = unreachableNote(s, connected);
         lines.push([
           `  ${s.name.padEnd(width)}`,
-          s.address.padEnd(28),
+          (s.address ?? "-").padEnd(28),
           s.canonicalName.padEnd(canonicalWidth),
           ...s.httpsName ? [`https://${s.httpsName}`.padEnd(httpsWidth)] : [],
           ...s.shortName ? [`https://${s.shortName}`.padEnd(shortWidth)] : [],
@@ -11938,6 +12317,7 @@ var GROUP_DESCRIPTIONS = {
   providers: "Sandbox providers of an organization.",
   sandboxes: "Create, run and manage sandboxes.",
   "sandboxes commands": "Run commands in a sandbox and read their output.",
+  "sandboxes containers": "Containers of a sandbox’s Docker engine.",
   "sandboxes env": "Environment of one sandbox.",
   "sandboxes files": "Files inside a sandbox.",
   "sandboxes mcps": "MCP endpoints a sandbox exposes.",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "ghostdock",
   "description": "Ghostdock CLI — device login and agent tool invocation from the command line",
-  "version": "0.0.12",
+  "version": "0.0.14",
   "type": "module",
   "bin": {
     "ghostdock": "dist/index.js",