npm - ghostdock - Versions diffs - 0.0.20 → 0.2.0 - Mend

ghostdock 0.0.20 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (6) hide show

package/dist/cli-reference.md DELETED Viewed

@@ -1,1808 +0,0 @@
-# ghostdock CLI reference
-<!-- Generated by `bun run sync:cli-reference` from the CLI's command tree. Do not edit. -->
-Every command the `ghostdock` CLI ships, with its full description and flags.
-For how to install, log in and choose an organization, read [cli.md](cli.md). Concepts and
-workflows are in the built-in skills (`ghostdock skill list`).
-Binaries: `ghostdock`, `gdock`.
-Global flag `--base-url`: API origin (overrides GHOSTDOCK_BASE_URL and the built-in default).
-Global flag `--json`: Print the result as one JSON document on stdout, for scripts and agents. Without it, output is for people.
-## `ghostdock app`
-Published apps of an organization.
-### `ghostdock app list`
-List the live published apps (sites) of an organization, with their URLs. Each app has a siteId to pass to site unpublish.
-```
-ghostdock app list [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `app_list`.
-## `ghostdock docker`
-Docker over the private network: a VM's Docker engine from this machine.
-### `ghostdock docker context`
-Point Docker at a VM's Docker engine over the private network: plain `docker` and `docker compose` then run there. Creates (or updates) the Docker context ghostdock-<org>-<vm> for tcp://<vm>.<org>.ghostdock.internal:2376 with a client certificate of this machine's device, and makes it the current context. Needs `ghostdock network connect` first, and Docker's CLI. The certificate lives 30 days; `network connect` and this command renew it with 10 days left. An expired certificate fails Docker's TLS handshake with Docker's own error: run this command again. Docker's `no such host` on a ghostdock.internal address means this machine is not connected: run `ghostdock network connect`. After an organization rename the old name stops resolving: run it again to update the host.
-```
-ghostdock docker context <vm> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name, from `network ls`. Required. |
-| `--org <value>` | Organization id or slug, from `ghostdock organization list` (default: GHOSTDOCK_ORG, then `ghostdock organization use`). |
-| `--use` | Make it the current Docker context (`docker context use`). `--no-use` only creates or updates it. Default: `true`. |
-## `ghostdock env`
-Manage organization environment variables and secrets.
-### `ghostdock env delete`
-Delete a variable or secret.
-```
-ghostdock env delete <name> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<name>` | Environment variable name. Required. |
-| `--org <value>` | Organization id or slug, from `ghostdock organization list` (default: GHOSTDOCK_ORG, then `ghostdock organization use`). |
-MCP tool: `env_delete`.
-### `ghostdock env get`
-Print one variable value in full (secrets cannot be read).
-```
-ghostdock env get <name> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<name>` | Environment variable name. Required. |
-| `--org <value>` | Organization id or slug, from `ghostdock organization list` (default: GHOSTDOCK_ORG, then `ghostdock organization use`). |
-MCP tool: `env_get`.
-### `ghostdock env list`
-List variables and secrets.
-```
-ghostdock env list [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <value>` | Organization id or slug, from `ghostdock organization list` (default: GHOSTDOCK_ORG, then `ghostdock organization use`). |
-MCP tool: `env_list`.
-### `ghostdock env set`
-Create or replace a variable or secret.
-```
-ghostdock env set <name> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<name>` | Environment variable name. Required. |
-| `--org <value>` | Organization id or slug, from `ghostdock organization list` (default: GHOSTDOCK_ORG, then `ghostdock organization use`). |
-| `--value <value>` | Value to store. |
-| `--value-stdin` | Read the value from stdin — keeps secrets out of shell history. |
-| `--secret` | Shorthand for --kind secret. Required when creating a secret. |
-| `--kind <value>` | variable or secret. Required when creating; on an update, omit to keep the existing kind or pass the other to convert. |
-| `--comment <value>` | Note about what this value is for. |
-MCP tool: `env_set`.
-## `ghostdock image`
-Organization image catalog: OCI bookmarks, Dockerfiles and Compose files.
-### `ghostdock image add`
-Bookmark an OCI image ref in the organization’s image catalog. Fails if it is already bookmarked.
-```
-ghostdock image add --ref <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--ref <string>` | OCI image reference, e.g. ghcr.io/acme/app:latest. Required. |
-| `--label <string>` | Display label for the bookmark. Optional. |
-MCP tool: `image_add`.
-### `ghostdock image add-compose`
-Add a Compose project to the organization’s image catalog. Give its files, or a reference: a Compose project published as an OCI artifact (oci://…), used through include: with an optional override. ghostdock.* service labels (of the files, or of the override) become its manifest. Fails if the name is taken.
-```
-ghostdock image add-compose --name <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--name <string>` | Image name, unique in the organization. Required. |
-| `--files <object>` | Compose files by file name. Must include docker-compose.yml/yaml or compose.yml/yaml. (JSON object) |
-| `--reference <string>` | A published Compose project instead of files, e.g. oci://docker.io/ghostdockhq/headless-compose:ubuntu-26.04. |
-| `--override <string>` | With reference: a Compose file merged into it (services, environment, labels). |
-MCP tool: `image_add_compose`.
-### `ghostdock image add-dockerfile`
-Add a Dockerfile to the organization’s image catalog. ghostdock.* LABEL lines become its manifest. Fails if the name is taken.
-```
-ghostdock image add-dockerfile --name <string> --dockerfile <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--name <string>` | Image name, unique in the organization. Required. |
-| `--dockerfile <string>` | Dockerfile text. ghostdock.* LABEL lines become the image manifest. Required. |
-MCP tool: `image_add_dockerfile`.
-### `ghostdock image get`
-Get one catalog image with its spec, manifest and requirements. Returns kind, spec and a redacted manifest with requiredEnvironment / requiredUrls / requiredMcps. An OCI bookmark’s manifest is null: its labels are read at create time.
-```
-ghostdock image get <image-id> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<image-id>` | Catalog image id, from image list or image get. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `image_get`.
-### `ghostdock image list`
-List the images an organization can boot VMs from. OCI bookmarks, image add-dockerfile and image add-compose rows, and refs its VMs use. A discovery catalog, not an allowlist: vm create accepts any OCI ref. Items carry vmCount and a redacted manifest with requiredEnvironment / requiredUrls / requiredMcps. An OCI bookmark stores no labels (manifest null): vm create reads them from the digest the ref names then.
-```
-ghostdock image list [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `image_list`.
-### `ghostdock image remove`
-Remove an image from the organization’s catalog. VMs already using it are not affected.
-```
-ghostdock image remove <image-id> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<image-id>` | Catalog image id, from image list or image get. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `image_remove`.
-### `ghostdock image update-compose`
-Replace a catalog Compose image’s files, reference, override and/or name. Re-parses its labels.
-```
-ghostdock image update-compose <image-id> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<image-id>` | Catalog image id, from image list or image get. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--files <object>` | New Compose files by file name. Omit to keep the current files. (JSON object) |
-| `--reference <string>` | A new reference (oci://…): the image becomes a Compose reference. |
-| `--override <string>` | A reference’s new override; null removes it. |
-| `--name <string>` | New image name. Omit to keep it. |
-MCP tool: `image_update_compose`.
-### `ghostdock image update-dockerfile`
-Replace a catalog Dockerfile, optionally renaming it. Re-parses its ghostdock.* labels.
-```
-ghostdock image update-dockerfile <image-id> --dockerfile <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<image-id>` | Catalog image id, from image list or image get. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--dockerfile <string>` | Dockerfile text. ghostdock.* LABEL lines become the image manifest. Required. |
-| `--name <string>` | New image name. Omit to keep it. |
-MCP tool: `image_update_dockerfile`.
-## `ghostdock login`
-Sign in and store a device access token for this machine (~/.config/ghostdock/credentials.json).
-```
-ghostdock login [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--wait` | Poll until the login is approved in the browser (default timeout 5 minutes). |
-| `--code <value>` | Redeem the one-time paste code shown in the browser instead of polling. |
-| `--timeout <value>` | Max seconds to poll when using --wait (default 300). |
-| `--org <value>` | Set this organization (id or slug) as the default once logged in. |
-## `ghostdock logout`
-Revoke the device session and remove stored credentials.
-```
-ghostdock logout
-```
-## `ghostdock network`
-The private network: reach your VMs by address and name from this machine.
-### `ghostdock network connect`
-Put this machine into the private network through one provider: WireGuard and split DNS. The organization (--org, else the default) becomes this machine's short-name organization. Also re-arms a paused device: with the tunnel up and nothing changed, without sudo.
-```
-ghostdock network connect [provider] [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<provider>` | Provider name or id. Omit for the organization's default provider (else the platform default). Only its VMs are reachable; connecting through another replaces the connection. |
-| `--org <value>` | Organization id or slug, from `ghostdock organization list` (default: GHOSTDOCK_ORG, then `ghostdock organization use`). |
-### `ghostdock network devices`
-Your devices in the private network.
-```
-ghostdock network devices <command>
-```
-### `ghostdock network devices remove`
-Remove one of your devices from the private network.
-```
-ghostdock network devices remove <id>
-```
-| Argument | Description |
-| --- | --- |
-| `<id>` | Device id, from `network devices`. Required. |
-### `ghostdock network disconnect`
-Take this machine out of the private network, and remove split DNS an earlier connection left (macOS).
-```
-ghostdock network disconnect
-```
-### `ghostdock network ls`
-VMs of an organization with their private addresses and names, and which are reachable through the current connection.
-```
-ghostdock network ls [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <value>` | Organization id or slug, from `ghostdock organization list` (default: GHOSTDOCK_ORG, then `ghostdock organization use`). |
-### `ghostdock network status`
-Whether this machine is connected, through which provider, and as which device.
-```
-ghostdock network status
-```
-## `ghostdock organization`
-Organizations you belong to.
-### `ghostdock organization current`
-Show which organization commands use, and where it comes from.
-```
-ghostdock organization current [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <value>` | Check what this --org would resolve to. |
-### `ghostdock organization list`
-List the organizations you belong to, with their ids and slugs.
-```
-ghostdock organization list
-```
-MCP tool: `organization_list`.
-### `ghostdock organization use`
-Set the default organization for commands run without --org (in every directory).
-```
-ghostdock organization use [org] [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<org>` | Organization id or slug. |
-| `--clear` | Remove the default organization. |
-## `ghostdock project`
-Deployable projects, their deployments and environment.
-### `ghostdock project create`
-Create an empty project. Nothing is deployed until project publish.
-```
-ghostdock project create --display-name <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--display-name <string>` | Project name. Required. |
-MCP tool: `project_create`.
-### `ghostdock project deployment`
-Deployments of a project.
-### `ghostdock project deployment get`
-Get one deploy attempt, with links to its stored files. fileUrls are authenticated GET paths for source.zip and generated Compose files.
-```
-ghostdock project deployment get <deployment-id> --project-id <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<deployment-id>` | Deployment id, from project deployment list. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--project-id <string>` | Project id, from project list (project publish returns it too). Required. |
-MCP tool: `project_deployment_get`.
-### `ghostdock project deployment list`
-List a project’s deploy attempts, newest first.
-```
-ghostdock project deployment list <project-id> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<project-id>` | Project id, from project list (project publish returns it too). Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `project_deployment_list`.
-### `ghostdock project env`
-Environment a project exports.
-### `ghostdock project env delete`
-Delete one of a project’s own variables or secrets.
-```
-ghostdock project env delete <name> --project-id <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<name>` | Environment variable name, e.g. DATABASE_URL. Letters, digits and underscores only. Case-sensitive; stored exactly as provided. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--project-id <string>` | Project id, from project list (project publish returns it too). Required. |
-MCP tool: `project_env_delete`.
-### `ghostdock project env get`
-Get a project’s stored environment. Local entries (secret values withheld), organization opt-ins and bindings, applied on every deploy.
-```
-ghostdock project env get <project-id> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<project-id>` | Project id, from project list (project publish returns it too). Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `project_env_get`.
-### `ghostdock project env select`
-Replace the organization entries a project exports. Full replace: environment is the whole list ([] clears it), and omitting bindings clears the remaps. Read the environment skill (`ghostdock skill get environment`).
-```
-ghostdock project env select <project-id> --environment <array> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<project-id>` | Project id, from project list (project publish returns it too). Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--environment <array>` | Organization catalogue entry names to export under their own names. (JSON array) Required. |
-| `--bindings <array>` | Slot-centric org bindings. Omit to clear existing remaps. (JSON array) |
-MCP tool: `project_env_select`.
-### `ghostdock project env set`
-Create or replace one of a project’s own variables or secrets. Prefer the CLI for secret values so they stay out of the conversation.
-```
-ghostdock project env set <name> --project-id <string> --value <string> --kind <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<name>` | Environment variable name, e.g. DATABASE_URL. Letters, digits and underscores only. Case-sensitive; stored exactly as provided. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--project-id <string>` | Project id, from project list (project publish returns it too). Required. |
-| `--value <string>` | The value to store. A secret value can be replaced later but never read back. Required. |
-| `--kind <string>` | "variable" or "secret". A secret value can be replaced but never read back. Required. |
-| `--comment <string>` | Optional note shown with the entry, e.g. what it is for. |
-MCP tool: `project_env_set`.
-### `ghostdock project get`
-Get a project with its latest attempt and live deployment. latestDeploymentId includes failures; liveDeploymentId / liveUrl is the success that serves the public URL.
-```
-ghostdock project get <project-id> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<project-id>` | Project id, from project list (project publish returns it too). Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `project_get`.
-### `ghostdock project list`
-List an organization’s projects. A project owns its environment, deployment history and live URL. app list lists live URLs instead.
-```
-ghostdock project list [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `project_list`.
-### `ghostdock project publish`
-Inspect local source with the deploy agent and publish to the CDN or a VM.
-```
-ghostdock project publish [path] [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <value>` | Organization id or slug, from `ghostdock organization list` (default: GHOSTDOCK_ORG, then `ghostdock organization use`). |
-| `--project-id <value>` | Existing project id. Omit to create a project. |
-| `--replan` | Force a new planner run even when the stored spec still matches. |
-| `--require-verify` | Fail the deploy (verify_failed) when detected tests fail. Default false: tests still run and are reported. |
-| `--spec <value>` | JSON DeploymentSpec to execute on a fresh VM instead of planning. Mutually exclusive with --replan. |
-| `--display-name <value>` | Optional display name. |
-| `--tag <value>` | Optional caller tag (git SHA or free-form label) stored on the deployment. |
-| `--auto-stop-interval-minutes <value>` | Same as `vm create`. Omit for the 20-minute default. Pass -1 to keep it running. 0 is rejected. |
-| `--auto-delete-after-days <value>` | Same as `vm create`: days stopped before the record is deleted (0–365). Omit for the 14-day default. Pass 0 to delete the record when it stops. |
-| `--resources <value>` | Same as `vm create`: JSON { cpu, memoryGiB, diskGiB }. |
-| `--environment <value>` | Same as `vm create --environment`: JSON { organization, bindings, local }. Required after awaiting_configuration. |
-| `--auto-wake <value>` | Same as `vm url create --auto-wake`. Default true for the minted URL. |
-| `--public <value>` | Same as `vm url create --public`. Default true for the minted URL. |
-| `--provider <value>` | Same as `vm create`: configured provider instance id (omit for the organization default). |
-| `--zip <value>` | Local ZIP of the source tree. |
-| `<path>` | File or directory to publish (additional paths are allowed). |
-MCP tool: `project_publish`.
-### `ghostdock project redeploy`
-Deploy a project’s stored source again, with its current environment. No new upload. Omit deploymentId to retry the last attempt that stored source. Same outcomes and settings as project publish; read the publishing skill (`ghostdock skill get publishing`).
-```
-ghostdock project redeploy <project-id> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<project-id>` | Project id, from project list (project publish returns it too). Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--deployment-id <string>` | Ship this version’s stored upload and spec. Omit to retry the last attempt that stored source. |
-| `--require-verify` | When true, a failing verify step stops the deploy (verify_failed) and tears the VM down. Default false. |
-| `--tag <string>` | Optional caller tag stored on the new deployment. Metadata only. |
-| `--resources <object>` | Compute sizing. For image/dockerfile/compose: layered on platform defaults when omitted. For snapshot: optional override applied via resize after create. (JSON object) |
-| `--auto-stop-interval-minutes <number>` | Minutes of inactivity before the platform worker idle-stops the VM. -1 means always on. 0 is rejected. Omit for the platform default. Provider-native timers are optional backup. |
-| `--lifecycle <string>` | What may make the VM disappear on its own. ephemeral: every stop wipes the VM and its disk, and the next start runs its Compose project again (edits in the project folder kept, everything else gone; locks too). auto_delete (default): a stop keeps the disk, and the record goes autoDeleteAfterDays after the stop. keep: never removed automatically. Omit for the image label ghostdock.ephemeral, else auto_delete. ephemeral is chosen here only. |
-| `--auto-delete-after-days <integer>` | Days the VM stays stopped before the platform worker deletes the record (0–365; 0 deletes it when it stops). Omit for the platform default (14). Not with keep. A container a person locked holds it. |
-| `--provider <string>` | Provider id from provider list (not the provider kind). Omit to use the organization default (the org choice, else the platform default); if that provider lacks a capability this create needs, the first listed provider that accepts new VMs and has it is used. When no provider fits, the call fails with a not-configured error. |
-| `--environment <object>` | Environment to give this VM. organization: names of organization entries (from env list) to export under their own names. bindings: remap org entries onto slot names ({ name: slot, organization: orgEntryName }). local: VM-only variables/secrets to create with the VM (kind required for each). Both land as ordinary process environment variables ($NAME / process.env.NAME); a local entry overrides an organization entry of the same name. When booting from an organization snapshot, omit organization/bindings/local to keep manifest env defaults, but still supply every name in requiredEnvironment (via organization, bindings, or local). Otherwise a VM gets nothing unless listed here. (JSON object) |
-| `--auto-wake` | Same as urls[].autoWake on vm create. Default true for the minted URL. |
-| `--public` | Same as urls[].public on vm create. Default true for the minted URL. |
-MCP tool: `project_redeploy`.
-### `ghostdock project update`
-Rename a project.
-```
-ghostdock project update <project-id> --display-name <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<project-id>` | Project id, from project list (project publish returns it too). Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--display-name <string>` | New name. Null or empty clears it. Required. |
-MCP tool: `project_update`.
-## `ghostdock provider`
-Providers of an organization.
-### `ghostdock provider disconnect`
-Disconnect one of the organization’s own providers. Owner or admin. Fails while VMs still use it. If organization snapshots live on it, the first call fails: pass confirmLinkedDeletion to delete them permanently. Also frees its custom domain and removes incomplete Incus setups; a default provider falls back to the platform default.
-```
-ghostdock provider disconnect <provider> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<provider>` | Provider id, from provider list. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--confirm-linked-deletion` | Required when this provider still has organization snapshots. Permanently deletes those snapshots, then disconnects. |
-MCP tool: `provider_disconnect`.
-### `ghostdock provider list`
-List the providers an organization can create VMs on. Includes its own connected providers and the platform providers it may use, in fallback order. Use an item id as provider. Only items with acceptsNewVms true take new VMs; an own provider stays incomplete until customDomain.status is active. defaultProviderId is the effective default. Read the vm skill (`ghostdock skill get vm`) for the details.
-```
-ghostdock provider list [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `provider_list`.
-### `ghostdock provider rename`
-Rename one of the organization’s own providers. Owner or admin. Platform providers cannot be renamed; names must be unique in the organization.
-```
-ghostdock provider rename <provider> --name <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<provider>` | Provider id, from provider list. Required. |
-| `--name <string>` | New name, unique in the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `provider_rename`.
-### `ghostdock provider set-default`
-Set the provider used when a create omits provider. Applies to vm create, project publish and project redeploy. Pass an own connected provider or a platform provider that accepts new VMs; pass null (or platformDefaultProviderId) to follow the platform default. Owner or admin.
-```
-ghostdock provider set-default <provider> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<provider>` | Instance id from provider list (own or platform), or null to follow the platform default. Passing platformDefaultProviderId also follows the platform default; it is never pinned. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `provider_set_default`.
-### `ghostdock provider start-incus`
-Start connecting an Incus host as a provider. Owner or admin. Returns sshPublicKey and aiSetupPrompt; then call provider verify-incus. To finish an incomplete setup, reuse it from provider list instead of starting again. Read the incus-setup skill (`ghostdock skill get incus-setup`) first.
-```
-ghostdock provider start-incus [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--name <string>` | Name for the new provider. Optional. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `provider_start_incus`.
-### `ghostdock provider verify-incus`
-Check or finish connecting an Incus host. Owner or admin. Connects over SSH with the stored key and checks Incus 6.3+, skopeo and umoci. Omit sshHost to re-check the stored address; pass it (with the other host fields) only to move the provider. A failed check marks the provider error. Read the incus-setup skill (`ghostdock skill get incus-setup`).
-```
-ghostdock provider verify-incus <provider> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<provider>` | Provider id, from provider list. Required. |
-| `--ssh-host <string>` | Host to SSH to. Omit to re-check the stored address; pass it only to set up or move the provider. |
-| `--ssh-port <integer>` | SSH port. Default 22. |
-| `--ssh-user <string>` | SSH login. Default incus-user. |
-| `--ingress-host <string>` | Public hostname for HTTP(S) when it is not the SSH host (also the DNS A/AAAA target). |
-| `--ssh-proxy-port <integer>` | Port for VM SSH on the host. Default 2222. |
-| `--name <string>` | New name. Optional. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `provider_verify_incus`.
-## `ghostdock registry`
-Log in to the organization container registry.
-### `ghostdock registry credentials`
-Print registry host, username, and the one-hour password.
-```
-ghostdock registry credentials [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <value>` | Organization id or slug, from `ghostdock organization list` (default: GHOSTDOCK_ORG, then `ghostdock organization use`). |
-| `--provider <value>` | Provider id. Omit for the provider `vm create` would pick (org default, else platform default, else the first that fits). |
-MCP tool: `registry_credentials`.
-### `ghostdock registry login`
-Fetch a one-hour password and run docker login --password-stdin.
-```
-ghostdock registry login [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <value>` | Organization id or slug, from `ghostdock organization list` (default: GHOSTDOCK_ORG, then `ghostdock organization use`). |
-| `--provider <value>` | Provider id. Omit for the provider `vm create` would pick (org default, else platform default, else the first that fits). |
-## `ghostdock site`
-Static sites on the CDN.
-### `ghostdock site publish`
-Publish a local directory or ZIP to the CDN.
-```
-ghostdock site publish [path] [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <value>` | Organization id or slug, from `ghostdock organization list` (default: GHOSTDOCK_ORG, then `ghostdock organization use`). |
-| `--display-name <value>` | Optional site display name. |
-| `--zip <value>` | Local ZIP file to publish. |
-| `<path>` | File or directory to publish (additional paths are allowed). |
-MCP tool: `site_publish`.
-### `ghostdock site unpublish`
-Take a published static site offline.
-```
-ghostdock site unpublish <site-id> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<site-id>` | Site id: the slug in the public URL, as returned by site publish or app list. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `site_unpublish`.
-## `ghostdock skill`
-List and read Agent Skills (same catalog as MCP skill://index.json).
-### `ghostdock skill get`
-Print one SKILL.md (URI from the discovery index, or a skill name).
-```
-ghostdock skill get <uri>
-```
-| Argument | Description |
-| --- | --- |
-| `<uri>` | skill:// URI, org/name, or skill name. Required. |
-MCP tool: `skill_get`.
-### `ghostdock skill list`
-List the Agent Skills discovery index.
-```
-ghostdock skill list
-```
-MCP tool: `skill_list`.
-## `ghostdock snapshot`
-VM snapshots.
-### `ghostdock snapshot create`
-Save a VM’s filesystem as a reusable organization snapshot. The VM must be stopped, unless stopAndResume. Captures its URLs and environment into a manifest (secrets as required, without values). Waits up to ~120 seconds; if still pending it returns timedOut, then poll snapshot get. Setting secret values here is allowed; prefer the Ghostdock CLI so they stay out of the conversation.
-```
-ghostdock snapshot create <vm> --name <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--name <string>` | Snapshot name, unique in the organization. Required. |
-| `--stop-and-resume` | When the VM is running: stop it, snapshot, then start it again. Without this it must already be stopped. |
-| `--include-secret-values <array>` | Names of VM-local secrets whose values to embed in the snapshot. Organization secrets cannot be copied. (JSON array) |
-| `--manifest <object>` | Replaces the captured URLs and environment entirely (no merge). An omitted ephemeral is copied from the VM. Secret values are stored encrypted. (JSON object) |
-MCP tool: `snapshot_create`.
-### `ghostdock snapshot delete`
-Permanently delete an organization snapshot (provider artifact and record).
-```
-ghostdock snapshot delete <snapshot-id> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<snapshot-id>` | Snapshot id from snapshot list (the provider snapshot name) or its database id. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `snapshot_delete`.
-### `ghostdock snapshot get`
-Get one snapshot with its manifest and required environment, URLs and MCPs. Returns a redacted manifest with requiredEnvironment / requiredUrls / requiredMcps. Poll it after snapshot create while status is pending.
-```
-ghostdock snapshot get <snapshot-id> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<snapshot-id>` | Snapshot id from snapshot list (the provider snapshot name) or its database id. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `snapshot_get`.
-### `ghostdock snapshot list`
-List the snapshots an organization can boot VMs from. Each item has status (pending, active, error), the provider that holds it (providerId; boot it there), vmCount, and a redacted manifest with requiredEnvironment / requiredUrls / requiredMcps.
-```
-ghostdock snapshot list [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `snapshot_list`.
-### `ghostdock snapshot update-manifest`
-Replace a snapshot’s manifest (URLs, environment, MCPs). Does not change the snapshot itself. Secret values in the body are stored encrypted; the response is redacted. Setting secret values here is allowed; prefer the Ghostdock CLI so they stay out of the conversation.
-```
-ghostdock snapshot update-manifest <snapshot-id> --manifest <object> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<snapshot-id>` | Snapshot id from snapshot list (the provider snapshot name) or its database id. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--manifest <object>` | The new manifest; replaces the stored one. An omitted ephemeral keeps the stored value. Secret values are stored encrypted. (JSON object) Required. |
-MCP tool: `snapshot_update_manifest`.
-## `ghostdock template`
-### `ghostdock template create`
-Save a VM create request as a template of the organization. Its members and agents make it with `ghostdock vm up <name>`. spec is what vm create takes without the organization’s own things: source (an image ref, Dockerfile, Compose files or a Compose reference; no snapshot or catalog id) and defaults (resources, lifecycle, restart, urls, mcps). Environment values stay out: a template that needs some declares them as ghostdock.env labels. A name the platform has too is allowed: the answer says shadows true, and the organization’s template wins for its members.
-```
-ghostdock template create --name <string> --title <string> --spec <object> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--name <string>` | Short name, unique in the organization: lower-case words joined by hyphens, e.g. postgres-pgadmin. Required. |
-| `--title <string>` | Title on the tile. Required. |
-| `--description <string>` | What it is for, in a sentence or two. |
-| `--icon <string>` | An Iconify class the app bundles (i-simple-icons-postgresql, i-lucide-database) or an https image URL. Omit for the default icon. |
-| `--spec <object>` | The create request: { source, resources?, autoStopIntervalMinutes?, lifecycle?, autoDeleteAfterDays?, restart?, urls?, mcps? }, the same fields vm create takes. (JSON object) Required. |
-MCP tool: `template_create`.
-### `ghostdock template delete`
-Delete a template of the organization by its name. VMs made from it keep running; a platform template it shadowed answers to the name again.
-```
-ghostdock template delete <template> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<template>` | The organization’s template, by name. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `template_delete`.
-### `ghostdock template list`
-List the templates to create a VM from (headless, desktop, nginx, …). The platform’s ready-made VMs and the organization’s own, each with scope (platform or organization), title, description and the create request it stands for (spec: source plus defaults such as URLs and resources). A name means the organization’s template first: one with shadows true hides the platform template of the same name (shadowed true), which vm up --platform still reaches. Create one with vm up.
-```
-ghostdock template list [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `template_list`.
-### `ghostdock template update`
-Change a template of the organization by its name. The fields given replace the stored ones (a spec replaces the whole spec). Platform templates are changed by platform admins only.
-```
-ghostdock template update <template> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<template>` | The organization’s template, by name. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--name <string>` | A new name; vm up answers to it only. |
-| `--title <string>` | Title on the tile. |
-| `--description <string>` | What it is for. |
-| `--icon <string>` | Iconify class or https image URL; null for the default icon. |
-| `--spec <object>` | The whole create request, as template create takes it. (JSON object) |
-MCP tool: `template_update`.
-## `ghostdock tools`
-List available agent tools.
-```
-ghostdock tools
-```
-## `ghostdock vm`
-Create, run and manage VMs.
-### `ghostdock vm build`
-Create a VM from a local Dockerfile or Compose directory. Zips the directory (or takes --zip) and builds it on the provider; use it when the Dockerfile copies local files or the Compose project has build contexts.
-```
-ghostdock vm build [path] --kind <value> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <value>` | Organization id or slug, from `ghostdock organization list` (default: GHOSTDOCK_ORG, then `ghostdock organization use`). |
-| `--kind <value>` | dockerfile or compose. Required. |
-| `--provider <value>` | Configured provider instance id (omit for the organization default). |
-| `--display-name <value>` | Optional VM display name. |
-| `--zip <value>` | Local ZIP of the build directory (Dockerfile or compose file at the zip root). |
-| `<path>` | Build directory to zip and create from. |
-### `ghostdock vm command`
-Run commands in a VM and read their output.
-### `ghostdock vm command get`
-Get a shell command’s status and exit code.
-```
-ghostdock vm command get <command-id> --vm <string> --session-id <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<command-id>` | Command id returned by vm command run. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--vm <string>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--container <string>` | Container to work in, by name, from vm container list. Default: the VM’s default container, else the one running container. With several running and no default the call fails and lists them. |
-| `--session-id <string>` | Session id returned by vm command run together with the commandId. Required. |
-| `--start` | Start the container first when it is not running, without asking. |
-MCP tool: `vm_command_get`.
-### `ghostdock vm command kill`
-Interrupt a running shell command.
-```
-ghostdock vm command kill <command-id> --vm <string> --session-id <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<command-id>` | Command id returned by vm command run. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--vm <string>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--container <string>` | Container to work in, by name, from vm container list. Default: the VM’s default container, else the one running container. With several running and no default the call fails and lists them. |
-| `--session-id <string>` | Session id returned by vm command run together with the commandId. Required. |
-| `--start` | Start the container first when it is not running, without asking. |
-MCP tool: `vm_command_kill`.
-### `ghostdock vm command logs`
-Get a page of a shell command’s stdout and stderr.
-```
-ghostdock vm command logs <command-id> --vm <string> --session-id <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<command-id>` | Command id returned by vm command run. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--vm <string>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--container <string>` | Container to work in, by name, from vm container list. Default: the VM’s default container, else the one running container. With several running and no default the call fails and lists them. |
-| `--session-id <string>` | Session id returned by vm command run together with the commandId. Required. |
-| `--offset <integer>` | Character offset to continue reading from. Default 0. |
-| `--start` | Start the container first when it is not running, without asking. |
-MCP tool: `vm_command_logs`.
-### `ghostdock vm command run`
-Run a shell command in a VM. Waits up to 120 seconds, then returns sessionId and commandId to poll. Starts the VM when allowed. Sessions do not survive idle-stop: for a process that must keep running, read the vm-boot skill (`ghostdock skill get vm-boot`). Never put secret values in the command; it is logged.
-```
-ghostdock vm command run <vm> --command <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--container <string>` | Container to work in, by name, from vm container list. Default: the VM’s default container, else the one running container. With several running and no default the call fails and lists them. |
-| `--command <string>` | Shell command to run. Never include secret values: commands are logged. Required. |
-| `--session-id <string>` | Session from vm shell create, to keep cwd and environment from earlier commands. Omit for a one-off session. |
-| `--cwd <string>` | Directory to run the command in. |
-| `--wait-seconds <number>` | Seconds to wait before returning handles to poll: 1 to 120, default 120. |
-| `--start` | Start the container first when it is not running, without asking. |
-MCP tool: `vm_command_run`.
-### `ghostdock vm container`
-Containers of a VM’s Docker engine.
-### `ghostdock vm container list`
-List the containers of a VM, running or not. Each with state, health, restart policy, ports, Compose project and service, its lock (locked, and whether a person or its ghostdock.lock label decided), ghostdock.* labels, and which one is the default. A stopped VM lists none (it is not started for this).
-```
-ghostdock vm container list <vm> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `vm_container_list`.
-### `ghostdock vm container lock`
-Lock a container against removal. A locked container cannot be removed, renamed or recreated through Docker (docker rm, compose down, a compose up that would recreate it) until it is unlocked here; start, stop and restart still work. It also pauses the VM’s auto-delete. An ephemeral VM’s stop still wipes it. Never starts the VM: a stopped one gets the lock at its next start.
-```
-ghostdock vm container lock <vm> <container> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `<container>` | Container, by name. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `vm_container_lock`.
-### `ghostdock vm container logs`
-Read a container’s output, as docker logs does. Oldest first, each line with its stream (stdout, stderr) and time. The last tail lines (default 200), or with after only the lines after that time: pass the last line’s time to follow. truncated says lines were left out. A stopped VM has none (it is not started for this).
-```
-ghostdock vm container logs <vm> <container> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `<container>` | Container, by name. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--tail <integer>` | The last N lines (at most 5000). |
-| `--after <string>` | Only lines after this time: the time of the last line already read. |
-| `--follow` | Keep printing new lines until Ctrl-C. |
-| `--timestamps` | Put each line's time in front of it. |
-MCP tool: `vm_container_logs`.
-### `ghostdock vm container restart`
-Restart a container, as docker restart does (stopping as docker stop does). Starts the VM when needed.
-```
-ghostdock vm container restart <vm> <container> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `<container>` | Container, by name. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `vm_container_restart`.
-### `ghostdock vm container start`
-Start a stopped container, as docker start does. A running container stays as it is. Starts the VM when needed.
-```
-ghostdock vm container start <vm> <container> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `<container>` | Container, by name. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `vm_container_start`.
-### `ghostdock vm container stop`
-Stop a container, as docker stop does. It gets its own stop signal, then a kill after its own stop timeout. It stays stopped while the VM sleeps and wakes, as Docker keeps a stopped container stopped, unless its restart policy is always. On a stopped VM it does nothing (note vm_stopped). A lock does not block it. note says when it was the default container or the last one running: then SSH, commands and files have nowhere to land until one runs.
-```
-ghostdock vm container stop <vm> <container> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `<container>` | Container, by name. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `vm_container_stop`.
-### `ghostdock vm container unlock`
-Unlock a container so Docker can remove or recreate it. Also one its image locked with the ghostdock.lock label. Never starts the VM: a stopped one gets it at its next start, and an overdue auto-delete it held goes ahead.
-```
-ghostdock vm container unlock <vm> <container> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `<container>` | Container, by name. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `vm_container_unlock`.
-### `ghostdock vm create`
-Create a VM from a snapshot, OCI image, Dockerfile or Compose files. Inline content only: for a directory or ZIP (Dockerfile COPY/ADD, Compose build files) use `ghostdock vm build`. Snapshots and catalog images can require environment entries, URL ports and MCP names (requiredEnvironment / requiredUrls / requiredMcps); a missing environment entry fails with its names (missingEnvironment), and removing a required URL or MCP fails with them (missingUrls / missingMcps). Every source but a snapshot becomes a Compose project in the VM, run once with docker compose up -d; after that Docker is the truth. Returns once the project is up, with `boot`: how long the VM and the project's compose up took, each in ms, and the images it pulled. Idle-stop and auto-delete apply (defaults 20 minutes / 14 days). Read the vm skill (`ghostdock skill get vm`) for sources, manifests, lifecycle and providers.
-```
-ghostdock vm create --source <object> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--display-name <string>` | Display name for the VM. Optional. |
-| `--source <object>` | What the VM boots from. Required. "template" boots a template by its name ({ name, scope? } from template list, e.g. headless, desktop, nginx): the organization’s of that name, else the platform’s (scope picks one), its source and defaults, under every other field of this call (a URL on the same port or an MCP of the same name replaces the template's; vm up is the short form). "image" boots an org catalog row by id ({ id } from image list / image get — image add OCI bookmarks, image add-dockerfile, and image add-compose rows) or any OCI ref ({ ref }); "dockerfile" builds inline Dockerfile text only (ghostdock.* LABEL lines parsed for manifest; this tool has no build directory, so COPY/ADD of local files fails — use the CLI `ghostdock vm build --kind dockerfile` with a directory or ZIP); "compose" runs the given inline files with docker compose up -d (must include docker-compose.yml/yaml or compose.yml/yaml; ghostdock.* service labels parsed for manifest). Every source but a snapshot becomes a Compose project in /srv/ghostdock/<vm name>, run once; an image is one service named after it, a Dockerfile the service app. A Compose project that needs extra files is not accepted here — use `ghostdock vm build --kind compose`. "compose" also takes a published Compose project instead of files ({ reference: "oci://…", override? }): it runs through include:, the override merged into it. Image, dockerfile, and compose sources never appear in snapshot list. Published static sites use site publish (CDN), not a snapshot. (JSON object) Required. |
-| `--restart <string>` | Restart policy of the service an image or a Dockerfile becomes, Docker's names: unless-stopped (default), always, on-failure, or no (it does not come back after the VM sleeps). Not for Compose: its files set restart:. |
-| `--resources <object>` | Compute sizing. For image/dockerfile/compose: layered on platform defaults when omitted. For snapshot: optional override applied via resize after create. (JSON object) |
-| `--auto-stop-interval-minutes <number>` | Minutes of inactivity before the platform worker idle-stops the VM. -1 means always on. 0 is rejected. Omit for the platform default. Provider-native timers are optional backup. |
-| `--lifecycle <string>` | What may make the VM disappear on its own. ephemeral: every stop wipes the VM and its disk, and the next start runs its Compose project again (edits in the project folder kept, everything else gone; locks too). auto_delete (default): a stop keeps the disk, and the record goes autoDeleteAfterDays after the stop. keep: never removed automatically. Omit for the image label ghostdock.ephemeral, else auto_delete. ephemeral is chosen here only. |
-| `--auto-delete-after-days <integer>` | Days the VM stays stopped before the platform worker deletes the record (0–365; 0 deletes it when it stops). Omit for the platform default (14). Not with keep. A container a person locked holds it. |
-| `--provider <string>` | Provider id from provider list (not the provider kind). Omit to use the organization default (the org choice, else the platform default); if that provider lacks a capability this create needs, the first listed provider that accepts new VMs and has it is used. When no provider fits, the call fails with a not-configured error. |
-| `--environment <object>` | Environment to give this VM. organization: names of organization entries (from env list) to export under their own names. bindings: remap org entries onto slot names ({ name: slot, organization: orgEntryName }). local: VM-only variables/secrets to create with the VM (kind required for each). Both land as ordinary process environment variables ($NAME / process.env.NAME); a local entry overrides an organization entry of the same name. When booting from an organization snapshot, omit organization/bindings/local to keep manifest env defaults, but still supply every name in requiredEnvironment (via organization, bindings, or local). Otherwise a VM gets nothing unless listed here. (JSON object) |
-| `--image-base <string>` | How the disk is made for one of Ghostdock's platform images: auto (default) clones the host's image base, a disk with the image already on it, when there is one; off always starts from an empty disk that pulls the image. For tests and comparisons; other images always start empty. |
-| `--urls <array>` | Changes to the image’s or snapshot’s URLs, keyed by port. Omit for the image URLs as they are; otherwise you get the image URLs plus yours: an entry on the same port replaces that URL completely (omitted fields take their defaults), and { port, remove: true } drops it; removing a port the image does not declare does nothing. A required port cannot be removed. TCP URLs are always public. (JSON array) |
-| `--mcps <array>` | Changes to the image’s or snapshot’s MCP exposures, keyed by name. Omit for the image MCPs as they are; otherwise you get the image MCPs plus yours: an entry with the same name replaces that MCP completely, and { name, remove: true } drops it; removing a name the image does not declare does nothing. A required MCP (requiredMcps) cannot be removed. (JSON array) |
-MCP tool: `vm_create`.
-### `ghostdock vm default-container`
-Show, set or clear the VM’s default container. SSH, the terminal, files, commands and MCP land there when no container is named. Without container or clear it only shows the setting.
-```
-ghostdock vm default-container <vm> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--container <string>` | Container to make the default, by name. The running VM must have it. |
-| `--clear` | Clear the default. |
-| `--start` | Start the container first when it is not running, without asking. |
-MCP tool: `vm_default_container`.
-### `ghostdock vm delete`
-Permanently delete a VM and its files. Refused while it has locked containers (vm_has_locked_containers, naming them) unless deleteLocked is true.
-```
-ghostdock vm delete <vm> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--delete-locked` | Delete it with its locked containers. Without it, a locked container refuses the delete. |
-MCP tool: `vm_delete`.
-### `ghostdock vm env`
-Environment of one VM.
-### `ghostdock vm env delete`
-Delete one of a VM’s own variables or secrets.
-```
-ghostdock vm env delete <name> --vm <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<name>` | Environment variable name, e.g. DATABASE_URL. Letters, digits and underscores only. Case-sensitive; stored exactly as provided. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--vm <string>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--restart` | When true and the VM is running, stop then start after saving so processes pick up the change. Default: sync only. |
-MCP tool: `vm_env_delete`.
-### `ghostdock vm env get`
-Get a VM’s environment: selections, bindings and local entries. Shows each organization entry with whether it is selected, exportAs, and overriddenByLocal; secret values are withheld. Nothing is inherited.
-```
-ghostdock vm env get <vm> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `vm_env_get`.
-### `ghostdock vm env select`
-Replace the organization entries a VM exports. Full replace: environment is the whole list ([] clears it), and omitting bindings clears the remaps. Running processes keep their old values until restarted (pass restart). Read the environment skill (`ghostdock skill get environment`).
-```
-ghostdock vm env select <vm> --environment <array> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--environment <array>` | Organization catalogue entry names to export under their own names. Pass [] to clear plain selections. (JSON array) Required. |
-| `--bindings <array>` | Slot-centric org bindings: export an organization entry under a (possibly different) VM env name. Omit to clear existing remaps (full replace). (JSON array) |
-| `--restart` | When true and the VM is running, stop then start after saving so processes pick up the change. Default: sync only; already-running processes keep the old values until restarted. |
-MCP tool: `vm_env_select`.
-### `ghostdock vm env set`
-Create or replace one of a VM’s own variables or secrets. It overrides an organization entry of the same name. kind is required when creating. Setting secrets via this tool is allowed; prefer the Ghostdock CLI so values stay out of the conversation, and never put them in commands.
-```
-ghostdock vm env set <name> --vm <string> --value <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<name>` | Environment variable name, e.g. DATABASE_URL. Letters, digits and underscores only. Case-sensitive; stored exactly as provided. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--vm <string>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--value <string>` | The value to store. A secret value can be replaced later but never read back. Required. |
-| `--kind <string>` | Required when creating. Use "secret" for credentials; secret values can be replaced but never read back. Omit when updating to keep the existing kind. |
-| `--comment <string>` | Optional note shown with the entry, e.g. what it is for. |
-| `--restart` | When true and the VM is running, stop then start after saving so processes pick up the change. Default: sync only. |
-MCP tool: `vm_env_set`.
-### `ghostdock vm file`
-Files inside a VM.
-### `ghostdock vm file list`
-List the files in a VM directory. Default: the container's start folder (its dir).
-```
-ghostdock vm file list <vm> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--container <string>` | Container to work in, by name, from vm container list. Default: the VM’s default container, else the one running container. With several running and no default the call fails and lists them. |
-| `--path <string>` | Directory to list: absolute, or relative to the container's start folder (its dir: the login user's home, else WORKDIR, else /). Defaults to that folder. |
-| `--start` | Start the container first when it is not running, without asking. |
-MCP tool: `vm_file_list`.
-### `ghostdock vm file read`
-Read a file from a VM: utf8 text, or base64 for small binaries.
-```
-ghostdock vm file read <path> --vm <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<path>` | File path: absolute, or relative to the container's start folder (for example src/App.vue). Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--vm <string>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--container <string>` | Container to work in, by name, from vm container list. Default: the VM’s default container, else the one running container. With several running and no default the call fails and lists them. |
-| `--start` | Start the container first when it is not running, without asking. |
-MCP tool: `vm_file_read`.
-### `ghostdock vm file upload`
-Upload local files or directories to a VM's container, into its start folder (the login user's home, else WORKDIR, else /).
-```
-ghostdock vm file upload <vm> [path] [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name or id. Required. |
-| `--org <value>` | Organization id or slug, from `ghostdock organization list` (default: GHOSTDOCK_ORG, then `ghostdock organization use`). |
-| `--container <value>` | Container the files land in, by name, from `ghostdock vm container list`. Default: the VM's default container, else the one running container. |
-| `--start` | Start the container first when it is not running, without asking. |
-| `--zip <value>` | Local ZIP file to upload. |
-| `<path>` | File or directory to upload (additional paths are allowed). |
-MCP tool: `vm_file_upload`.
-### `ghostdock vm list`
-List the VMs of an organization, with their lifecycle and deadlines. Each has a name (e.g. quiet-harbor), unique in the organization, that every VM tool accepts as `vm`.
-```
-ghostdock vm list [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `vm_list`.
-### `ghostdock vm mcp`
-MCP endpoints a VM exposes.
-### `ghostdock vm mcp create`
-Expose an MCP server running in a VM. Idempotent by name.
-```
-ghostdock vm mcp create <vm> --name <string> --port <integer> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--name <string>` | Endpoint name, unique in the VM. Letters, digits, _ and -, starting with a letter. Required. |
-| `--port <integer>` | Port the MCP server listens on inside the VM. Required. |
-| `--path <string>` | HTTP path of the MCP endpoint. Default /mcp. |
-| `--auto-wake` | Start the VM when the endpoint is called while it is stopped. Default false. |
-MCP tool: `vm_mcp_create`.
-### `ghostdock vm mcp delete`
-Delete an MCP endpoint of a VM.
-```
-ghostdock vm mcp delete <mcp-id>
-```
-| Argument | Description |
-| --- | --- |
-| `<mcp-id>` | MCP endpoint id, from vm mcp list or vm mcp create. Required. |
-MCP tool: `vm_mcp_delete`.
-### `ghostdock vm mcp list`
-List the MCP endpoints a VM exposes (name, port, path, autoWake).
-```
-ghostdock vm mcp list <vm> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `vm_mcp_list`.
-### `ghostdock vm mcp update`
-Change an MCP endpoint’s name, port, path or autoWake setting.
-```
-ghostdock vm mcp update <mcp-id> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<mcp-id>` | MCP endpoint id, from vm mcp list or vm mcp create. Required. |
-| `--name <string>` | New endpoint name. Omit to keep it. |
-| `--port <integer>` | New port inside the VM. Omit to keep it. |
-| `--path <string>` | New HTTP path. Omit to keep it. |
-| `--auto-wake` | Start the VM when the endpoint is called while it is stopped. Omit to keep it. |
-MCP tool: `vm_mcp_update`.
-### `ghostdock vm resize`
-Change a VM’s CPU and/or memory. While running only increases are allowed; stop it first to decrease (this tool does not stop it). Disk: vm resize-disk.
-```
-ghostdock vm resize <vm> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--cpu <number>` | Number of CPUs. |
-| `--memory-gib <number>` | Memory in GiB. |
-MCP tool: `vm_resize`.
-### `ghostdock vm resize-disk`
-Grow a VM’s disk. The VM must be stopped first (this tool does not stop it). Disk only grows, never shrinks.
-```
-ghostdock vm resize-disk <vm> --disk-gib <number> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--disk-gib <number>` | New total disk size in GiB; must be larger than the current size. Required. |
-MCP tool: `vm_resize_disk`.
-### `ghostdock vm shell`
-Shell sessions that keep cwd and environment between commands.
-### `ghostdock vm shell close`
-Close a shell session.
-```
-ghostdock vm shell close <session-id> --vm <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<session-id>` | Session id from vm shell create. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--vm <string>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--container <string>` | Container to work in, by name, from vm container list. Default: the VM’s default container, else the one running container. With several running and no default the call fails and lists them. |
-| `--start` | Start the container first when it is not running, without asking. |
-MCP tool: `vm_shell_close`.
-### `ghostdock vm shell create`
-Open a shell session that keeps cwd and environment between commands. Starts the VM when allowed; the session ends at idle-stop.
-```
-ghostdock vm shell create <vm> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--container <string>` | Container to work in, by name, from vm container list. Default: the VM’s default container, else the one running container. With several running and no default the call fails and lists them. |
-| `--session-id <string>` | Id for the new session: a slug. Omit to generate one. |
-| `--start` | Start the container first when it is not running, without asking. |
-MCP tool: `vm_shell_create`.
-### `ghostdock vm ssh`
-SSH access to a VM.
-### `ghostdock vm ssh get`
-Get temporary SSH access to a VM (command and token, 60 minutes). Starts the VM when needed. Idle-stop still applies, independent of the token.
-```
-ghostdock vm ssh get <vm> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--container <string>` | Container to work in, by name, from vm container list. Default: the VM’s default container, else the one running container. With several running and no default the call fails and lists them. |
-| `--start` | Start the container first when it is not running, without asking. |
-MCP tool: `vm_ssh_get`.
-### `ghostdock vm ssh revoke`
-Revoke a VM’s active SSH access.
-```
-ghostdock vm ssh revoke <vm> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `vm_ssh_revoke`.
-### `ghostdock vm status`
-Get a VM’s status and lifecycle deadlines without waking it. Returns idleStopsAt, deletesAt and `boot` (the last start: VM and container times in ms) and does not reset idle activity.
-```
-ghostdock vm status <vm> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `vm_status`.
-### `ghostdock vm stop`
-Stop a running VM without deleting its files.
-```
-ghostdock vm stop <vm> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `vm_stop`.
-### `ghostdock vm storage`
-### `ghostdock vm storage delete`
-Delete a named volume or a top-level VM folder, with everything in it. Refused while a container mounts it (in any state: a stopped one counts, so stopping does not help), mounts a folder above it (a bind of /), or a volume keeps its data in the folder: remove those first.
-```
-ghostdock vm storage delete <vm> --kind <string> --name <string> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--kind <string>` | volume or folder. Required. |
-| `--name <string>` | The volume’s name, or the folder’s path in the VM (/srv, not /srv/app). Required. |
-MCP tool: `vm_storage_delete`.
-### `ghostdock vm storage list`
-List a VM’s volumes and VM folders. The VM folders are where bind mounts land. Each with its size and sizeState (measured; measuring: ask again in a few seconds; tooBig: too big to measure cheaply; outside: a volume bound outside the VM folders, not measured nor browsable) and the containers using it, plus every container’s mounts. truncated says entries were left out. A stopped VM lists none (it is not started for this).
-```
-ghostdock vm storage list <vm> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `vm_storage_list`.
-### `ghostdock vm tool`
-Tools of the MCP servers inside a VM.
-### `ghostdock vm tool call`
-Call a tool on an MCP server inside a VM. Wakes a stopped VM when the endpoint has autoWake.
-```
-ghostdock vm tool call <name> --vm <string> --arguments <object> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<name>` | Tool name, from vm tool list. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--vm <string>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--arguments <object>` | Tool arguments as a JSON object. (JSON object) Required. |
-| `--mcp-name <string>` | MCP endpoint to call. Needed when several endpoints expose the same tool name. |
-MCP tool: `vm_tool_call`.
-### `ghostdock vm tool list`
-List the tools of the MCP servers a VM exposes. A server that cannot be reached is reported in errors; the others are still listed.
-```
-ghostdock vm tool list <vm> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--mcp-name <string>` | Only list the tools of this MCP endpoint. |
-MCP tool: `vm_tool_list`.
-### `ghostdock vm up`
-Create a VM from a template by its name: `ghostdock vm up nginx`. The organization’s template of that name, else the platform’s (template list); platform true takes the platform’s. The same as vm create with source { type: "template", name }: the template's source and defaults, under the fields given here. Returns like vm create, with the template it used.
-```
-ghostdock vm up <template> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<template>` | Template name from template list, e.g. headless. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--platform` | Take the platform’s template of this name even when the organization has its own (shadows). |
-| `--display-name <string>` | Display name for the VM. Optional. |
-| `--resources <object>` | Compute sizing. For image/dockerfile/compose: layered on platform defaults when omitted. For snapshot: optional override applied via resize after create. (JSON object) |
-| `--auto-stop-interval-minutes <number>` | Minutes of inactivity before the platform worker idle-stops the VM. -1 means always on. 0 is rejected. Omit for the platform default. Provider-native timers are optional backup. |
-| `--lifecycle <string>` | What may make the VM disappear on its own. ephemeral: every stop wipes the VM and its disk, and the next start runs its Compose project again (edits in the project folder kept, everything else gone; locks too). auto_delete (default): a stop keeps the disk, and the record goes autoDeleteAfterDays after the stop. keep: never removed automatically. Omit for the image label ghostdock.ephemeral, else auto_delete. ephemeral is chosen here only. |
-| `--auto-delete-after-days <integer>` | Days the VM stays stopped before the platform worker deletes the record (0–365; 0 deletes it when it stops). Omit for the platform default (14). Not with keep. A container a person locked holds it. |
-| `--provider <string>` | Provider id from provider list (not the provider kind). Omit to use the organization default (the org choice, else the platform default); if that provider lacks a capability this create needs, the first listed provider that accepts new VMs and has it is used. When no provider fits, the call fails with a not-configured error. |
-| `--environment <object>` | Environment to give this VM. organization: names of organization entries (from env list) to export under their own names. bindings: remap org entries onto slot names ({ name: slot, organization: orgEntryName }). local: VM-only variables/secrets to create with the VM (kind required for each). Both land as ordinary process environment variables ($NAME / process.env.NAME); a local entry overrides an organization entry of the same name. When booting from an organization snapshot, omit organization/bindings/local to keep manifest env defaults, but still supply every name in requiredEnvironment (via organization, bindings, or local). Otherwise a VM gets nothing unless listed here. (JSON object) |
-| `--urls <array>` | Changes to the template’s and its image’s URLs, keyed by port, as in vm create: the same port replaces, { port, remove: true } drops. (JSON array) |
-MCP tool: `vm_up`.
-### `ghostdock vm update`
-Change a VM’s display name, idle-stop interval or lifecycle. Omit a field to keep it; null resets it to the platform default. Ephemeral is chosen at create only.
-```
-ghostdock vm update <vm> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--display-name <string>` | New display name. Null clears it; omit to keep it. |
-| `--auto-stop-interval-minutes <number>` | Minutes of inactivity before the platform worker idle-stops the VM. -1 always on. 0 is rejected. Null resets to the platform default. Provider-native timers are optional backup. |
-| `--lifecycle <string>` | auto_delete: the record goes autoDeleteAfterDays after the VM stops. keep: never removed automatically. |
-| `--auto-delete-after-days <integer>` | Days stopped before the record is deleted (0–365; 0 deletes it when it stops). Null writes the platform default. Not with keep. |
-MCP tool: `vm_update`.
-### `ghostdock vm url`
-URLs that expose VM ports.
-### `ghostdock vm url create`
-Expose a VM port as a URL. Idempotent by port: when the VM already has a URL on that port, it is returned unchanged (autoWake, public and title are not applied); use vm url update to change it. HTTP defaults to private with no wake-on-visit; TCP URLs use TLS (not HTTP) and are always public — for a private port use vm ssh get and an SSH forward. Read the vm skill (`ghostdock skill get vm`) for TCP clients.
-```
-ghostdock vm url create <vm> --port <integer> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-| `--port <integer>` | Port inside the VM to expose. Required. |
-| `--protocol <string>` | "http" (default) or "tcp". TCP URLs use TLS and are always public. |
-| `--auto-wake` | Start the VM when the URL is visited while it is stopped. Default false. |
-| `--public` | Reachable without signing in. Default false; TCP URLs are always public. |
-| `--title <string>` | Name shown for the URL, up to 40 characters. A titled HTTP URL gets its own button on the VM card; TCP titles are shown in URL lists. Untitled HTTP URLs are listed under "Open URL". |
-MCP tool: `vm_url_create`.
-### `ghostdock vm url delete`
-Delete a VM URL.
-```
-ghostdock vm url delete <url-id>
-```
-| Argument | Description |
-| --- | --- |
-| `<url-id>` | VM URL id, from vm url list or vm url create. Required. |
-MCP tool: `vm_url_delete`.
-### `ghostdock vm url list`
-List the URLs that expose a VM’s ports, with protocol, access and title. A titled URL (for example `Desktop`, the desktop image’s desktop in a browser) gets its own button in the app.
-```
-ghostdock vm url list <vm> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `vm_url_list`.
-### `ghostdock vm url update`
-Change a VM URL’s port, protocol, autoWake, public setting or title. TCP cannot be private.
-```
-ghostdock vm url update <url-id> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<url-id>` | VM URL id, from vm url list or vm url create. Required. |
-| `--port <integer>` | New port inside the VM. Omit to keep it. |
-| `--protocol <string>` | "http" or "tcp". Omit to keep the current protocol. |
-| `--auto-wake` | Start the VM when the URL is visited while it is stopped. Omit to keep it. |
-| `--public` | Reachable without signing in. Omit to keep it; TCP cannot be made private. |
-| `--title <string>` | Name shown for the URL, up to 40 characters. A titled HTTP URL gets its own button on the VM card; TCP titles are shown in URL lists. Untitled HTTP URLs are listed under "Open URL". Omit to keep it; null removes it. |
-MCP tool: `vm_url_update`.
-### `ghostdock vm wake`
-Start a stopped VM, or reset the idle-stop countdown of a running one. Returns status, idleStopsAt / deletesAt, and `boot` (VM and container start times in ms; null when it was already running).
-```
-ghostdock vm wake <vm> [flags]
-```
-| Argument | Description |
-| --- | --- |
-| `<vm>` | VM name (e.g. quiet-harbor) or id, from vm list or vm create. Names are unique within the organization. Required. |
-| `--org <string>` | Organization id or slug, from organization list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organization use`. |
-MCP tool: `vm_wake`.
-## `ghostdock whoami`
-Show the account this CLI is currently authenticated as.
-```
-ghostdock whoami
-```