ghostdock 0.0.8 → 0.0.9

package/dist/cli-reference.md

@@ -150,7 +150,7 @@ MCP tool: `images_add_dockerfile`.
 
 ### `ghostdock images get`
 
-Get one catalog image with its spec, manifest and requirements. Returns kind, spec and a redacted manifest with requiredEnvironment / requiredUrls / requiredMcps.
+Get one catalog image with its spec, manifest and requirements. Returns kind, spec and a redacted manifest with requiredEnvironment / requiredUrls / requiredMcps. An OCI bookmark’s manifest is null: its labels are read at create time.
 
 ```
 ghostdock images get <image-id> [flags]
@@ -165,7 +165,7 @@ MCP tool: `images_get`.
 
 ### `ghostdock images list`
 
-List the images an organization can boot sandboxes from. OCI bookmarks, images add-dockerfile and images add-compose rows, and refs its sandboxes use. A discovery catalog, not an allowlist: sandboxes create accepts any OCI ref. Items carry sandboxCount and a redacted manifest with requiredEnvironment / requiredUrls / requiredMcps.
+List the images an organization can boot sandboxes from. OCI bookmarks, images add-dockerfile and images add-compose rows, and refs its sandboxes use. A discovery catalog, not an allowlist: sandboxes create accepts any OCI ref. Items carry sandboxCount and a redacted manifest with requiredEnvironment / requiredUrls / requiredMcps. An OCI bookmark stores no labels (manifest null): sandboxes create reads them from the digest the ref names then.
 
 ```
 ghostdock images list [flags]
@@ -249,6 +249,83 @@ Revoke the device session and remove stored credentials.
 ghostdock logout
 ```
 
+## `ghostdock network`
+
+The private network: reach your sandboxes by address and name from this machine.
+
+### `ghostdock network connect`
+
+Put this machine into the private network: WireGuard and split DNS. Asks for sudo once.
+
+```
+ghostdock network connect [flags]
+```
+
+| Argument | Description |
+| --- | --- |
+| `--org <value>` | Organization id or slug, from `ghostdock organizations list` (default: GHOSTDOCK_ORG, then `ghostdock organizations use`). |
+
+### `ghostdock network devices`
+
+Your devices in the private network.
+
+```
+ghostdock network devices <command>
+```
+
+### `ghostdock network devices remove`
+
+Remove one of your devices from the private network.
+
+```
+ghostdock network devices remove <id>
+```
+
+| Argument | Description |
+| --- | --- |
+| `<id>` | Device id, from `network devices`. Required. |
+
+### `ghostdock network disconnect`
+
+Take this machine out of the private network.
+
+```
+ghostdock network disconnect
+```
+
+### `ghostdock network ls`
+
+Sandboxes of an organization with their private addresses and names.
+
+```
+ghostdock network ls [flags]
+```
+
+| Argument | Description |
+| --- | --- |
+| `--org <value>` | Organization id or slug, from `ghostdock organizations list` (default: GHOSTDOCK_ORG, then `ghostdock organizations use`). |
+
+### `ghostdock network status`
+
+Whether this machine is connected, and as which device.
+
+```
+ghostdock network status
+```
+
+### `ghostdock network use`
+
+Choose the organization <sandbox>.gdock.internal names resolve in on this machine.
+
+```
+ghostdock network use [org] [flags]
+```
+
+| Argument | Description |
+| --- | --- |
+| `<org>` | Organization id or slug. |
+| `--clear` | Turn short names off. |
+
 ## `ghostdock organizations`
 
 Organizations you belong to.
@@ -744,7 +821,7 @@ MCP tool: `sandboxes_commands_run`.
 
 ### `ghostdock sandboxes create`
 
-Create a sandbox from a snapshot, OCI image, Dockerfile or Compose files. Inline content only: for a directory or ZIP (Dockerfile COPY/ADD, Compose build files) use `ghostdock sandboxes build`. Snapshots and catalog images can require environment entries, URL ports and MCP names (requiredEnvironment / requiredUrls / requiredMcps); a miss fails with the missing names. Returns once the sandbox is running, with `boot`: how long the sandbox (VM) and, when one was started, its container took to start, each in ms. Idle-stop and auto-delete apply (defaults 20 minutes / 14 days). Read the sandboxes skill (`ghostdock skills get sandboxes`) for sources, manifests, lifecycle and providers.
+Create a sandbox from a snapshot, OCI image, Dockerfile or Compose files. Inline content only: for a directory or ZIP (Dockerfile COPY/ADD, Compose build files) use `ghostdock sandboxes build`. Snapshots and catalog images can require environment entries, URL ports and MCP names (requiredEnvironment / requiredUrls / requiredMcps); a missing environment entry fails with its names (missingEnvironment), and removing a required URL or MCP fails with them (missingUrls / missingMcps). Returns once the sandbox is running, with `boot`: how long the sandbox (VM) and, when one was started, its container took to start, each in ms. Idle-stop and auto-delete apply (defaults 20 minutes / 14 days). Read the sandboxes skill (`ghostdock skills get sandboxes`) for sources, manifests, lifecycle and providers.
 
 ```
 ghostdock sandboxes create --source <object> [flags]
@@ -761,8 +838,8 @@ ghostdock sandboxes create --source <object> [flags]
 | `--sandbox-provider-id <string>` | Configured sandbox-provider instance id from providers list (not the provider kind). Omit to use the organization default (the org choice, else the platform default); if that provider lacks a capability this create needs, the first listed provider that accepts new sandboxes and has it is used. When no provider fits, the call fails with a not-configured error. |
 | `--environment <object>` | Environment to give this sandbox. organization: names of organization entries (from env list) to export under their own names. bindings: remap org entries onto slot names ({ name: slot, organization: orgEntryName }). local: sandbox-only variables/secrets to create with the sandbox (kind required for each). Both land as ordinary process environment variables ($NAME / process.env.NAME); a local entry overrides an organization entry of the same name. When booting from an organization snapshot, omit organization/bindings/local to keep manifest env defaults, but still supply every name in requiredEnvironment (via organization, bindings, or local). Otherwise a sandbox gets nothing unless listed here. (JSON object) |
 | `--ephemeral` | Mark the sandbox ephemeral: every stop destroys the machine and the next start boots fresh, while the record, URLs, and settings stay. Omit to use the image label ghostdock.ephemeral, or false when that label is absent. Does not change idle-stop or auto-delete. |
-| `--urls <array>` | URLs to mint after create. Omit to mint the manifest’s URLs; when given, exactly this list is minted and must include every required port. TCP URLs are always public. (JSON array) |
-| `--mcps <array>` | MCP exposures to mint after create. Omit to apply manifest MCPs. When provided, exactly this list is minted; required manifest names (requiredMcps) must be included. (JSON array) |
+| `--urls <array>` | Changes to the image’s or snapshot’s URLs, keyed by port. Omit for the image URLs as they are; otherwise you get the image URLs plus yours: an entry on the same port replaces that URL completely (omitted fields take their defaults), and { port, remove: true } drops it; removing a port the image does not declare does nothing. A required port cannot be removed. TCP URLs are always public. (JSON array) |
+| `--mcps <array>` | Changes to the image’s or snapshot’s MCP exposures, keyed by name. Omit for the image MCPs as they are; otherwise you get the image MCPs plus yours: an entry with the same name replaces that MCP completely, and { name, remove: true } drops it; removing a name the image does not declare does nothing. A required MCP (requiredMcps) cannot be removed. (JSON array) |
 
 MCP tool: `sandboxes_create`.
 
@@ -1075,7 +1152,7 @@ ghostdock sandboxes shells create <sandbox-id> [flags]
 | --- | --- |
 | `<sandbox-id>` | Sandbox name (e.g. quiet-harbor) or id, from sandboxes list or sandboxes create. Names are unique within the organization. Required. |
 | `--org <string>` | Organization id or slug, from organizations list. Ids survive renames; slugs change when the organization is renamed. Defaults to GHOSTDOCK_ORG, then `organizations use`. |
-| `--session-id <string>` | Id for the new session. Omit to generate one. |
+| `--session-id <string>` | Id for the new session: a slug; user-cmd, image-cmd and compose are reserved. Omit to generate one. |
 
 MCP tool: `sandboxes_shells_create`.
 
@@ -1205,7 +1282,7 @@ URLs that expose sandbox ports.
 
 ### `ghostdock sandboxes urls create`
 
-Expose a sandbox port as a URL. Idempotent by port. HTTP defaults to private with no wake-on-visit; TCP URLs use TLS (not HTTP) and are always public — for a private port use sandboxes ssh get and an SSH forward. Read the sandboxes skill (`ghostdock skills get sandboxes`) for TCP clients.
+Expose a sandbox port as a URL. Idempotent by port: when the sandbox already has a URL on that port, it is returned unchanged (autoWake, public and title are not applied); use sandboxes urls update to change it. HTTP defaults to private with no wake-on-visit; TCP URLs use TLS (not HTTP) and are always public — for a private port use sandboxes ssh get and an SSH forward. Read the sandboxes skill (`ghostdock skills get sandboxes`) for TCP clients.
 
 ```
 ghostdock sandboxes urls create <sandbox-id> --port <integer> [flags]
@@ -1219,6 +1296,7 @@ ghostdock sandboxes urls create <sandbox-id> --port <integer> [flags]
 | `--protocol <string>` | "http" (default) or "tcp". TCP URLs use TLS and are always public. |
 | `--auto-wake` | Start the sandbox when the URL is visited while it is stopped. Default false. |
 | `--public` | Reachable without signing in. Default false; TCP URLs are always public. |
+| `--title <string>` | Name shown for the URL, up to 40 characters. A titled HTTP URL gets its own button on the sandbox card; TCP titles are shown in URL lists. Untitled HTTP URLs are listed under "Open URL". |
 
 MCP tool: `sandboxes_urls_create`.
 
@@ -1238,7 +1316,7 @@ MCP tool: `sandboxes_urls_delete`.
 
 ### `ghostdock sandboxes urls list`
 
-List the URLs that expose a sandbox’s ports, with protocol and access.
+List the URLs that expose a sandbox’s ports, with protocol, access and title. A titled URL (for example `Desktop`, the desktop image’s desktop in a browser) gets its own button in the app.
 
 ```
 ghostdock sandboxes urls list <sandbox-id> [flags]
@@ -1253,7 +1331,7 @@ MCP tool: `sandboxes_urls_list`.
 
 ### `ghostdock sandboxes urls update`
 
-Change a sandbox URL’s port, protocol, autoWake or public setting. TCP cannot be private.
+Change a sandbox URL’s port, protocol, autoWake, public setting or title. TCP cannot be private.
 
 ```
 ghostdock sandboxes urls update <url-id> [flags]
@@ -1266,6 +1344,7 @@ ghostdock sandboxes urls update <url-id> [flags]
 | `--protocol <string>` | "http" or "tcp". Omit to keep the current protocol. |
 | `--auto-wake` | Start the sandbox when the URL is visited while it is stopped. Omit to keep it. |
 | `--public` | Reachable without signing in. Omit to keep it; TCP cannot be made private. |
+| `--title <string>` | Name shown for the URL, up to 40 characters. A titled HTTP URL gets its own button on the sandbox card; TCP titles are shown in URL lists. Untitled HTTP URLs are listed under "Open URL". Omit to keep it; null removes it. |
 
 MCP tool: `sandboxes_urls_update`.
 

package/dist/cli.md

@@ -101,6 +101,7 @@ ghostdock env             Manage organization environment variables and secrets.
 ghostdock images          Organization image catalog: OCI bookmarks, Dockerfiles and Compose files.
 ghostdock login           Sign in and store a device access token for this CLI.
 ghostdock logout          Revoke the device session and remove stored credentials.
+ghostdock network         The private network: reach your sandboxes by address and name from this machine.
 ghostdock organizations   Organizations you belong to.
 ghostdock projects        Deployable projects, their deployments and environment.
 ghostdock providers       Sandbox providers of an organization.
@@ -475,6 +476,36 @@ Names must be valid environment variable names, and names the sandbox runtime ow
 only when browser code must read it: Vite inlines those into the published bundle, so a `VITE_`
 secret is public.
 
+### `ghostdock network`
+
+Reach your organization's sandboxes from this machine by private address and name, over
+WireGuard ([ADR 0027](../../docs/adr/0027-private-sandbox-network.md)). Everything on a
+sandbox's address is reachable: a container that publishes port 80 answers on
+`http://quiet-harbor.gdock.internal/`, as it would on `localhost` inside the sandbox.
+Nothing reaches your machine from a sandbox.
+
+```bash
+ghostdock network connect --org acme   # asks for sudo once: wg-quick up and split DNS
+ghostdock network ls --org acme        # sandboxes with their addresses and names
+curl http://quiet-harbor.acme.ghostdock.internal:8080/
+curl http://quiet-harbor.gdock.internal:8080/      # short name: the organization connect used
+ghostdock network use beta             # short names in another organization, no sudo
+ghostdock network status
+ghostdock network disconnect
+```
+
+- **Needs `wg-quick`** (`brew install wireguard-tools`, `apt install wireguard-tools`). macOS
+  and Linux. On Windows, run the CLI in WSL: then only tools inside WSL reach sandboxes.
+- **One key per machine**, kept in `~/.config/ghostdock/network/` (or `GHOSTDOCK_NETWORK_DIR`).
+  Only the public key is sent. The device belongs to the login it was connected with:
+  `ghostdock logout` takes it out of the network, and so does not connecting for 90 days.
+- **Names**: `<sandbox>.<org>.ghostdock.internal` always, and `<sandbox>.gdock.internal` in the
+  organization this machine is pinned to (the one `connect` resolved, changed with
+  `network use`). The pin is per machine, not per directory. Only AAAA records exist: the
+  network is IPv6, and the sandbox sees IPv4.
+- `ghostdock network devices` lists your devices, `ghostdock network devices remove <id>`
+  removes one.
+
 ## Command index
 
 Every command with its arguments and what it does. Run `ghostdock <command> --help` for its flags,
@@ -521,6 +552,18 @@ or read [`cli-reference.md`](cli-reference.md) for every command's full descript
 | --- | --- |
 | `ghostdock logout` | Revoke the device session and remove stored credentials. |
 
+#### network
+
+| Command | What it does |
+| --- | --- |
+| `ghostdock network connect [flags]` | Put this machine into the private network: WireGuard and split DNS. |
+| `ghostdock network devices <command>` | Your devices in the private network. |
+| `ghostdock network devices remove <id>` | Remove one of your devices from the private network. |
+| `ghostdock network disconnect` | Take this machine out of the private network. |
+| `ghostdock network ls [flags]` | Sandboxes of an organization with their private addresses and names. |
+| `ghostdock network status` | Whether this machine is connected, and as which device. |
+| `ghostdock network use [org] [flags]` | Choose the organization <sandbox>.gdock.internal names resolve in on this… |
+
 #### organizations
 
 | Command | What it does |
@@ -601,8 +644,8 @@ or read [`cli-reference.md`](cli-reference.md) for every command's full descript
 | `ghostdock sandboxes update <sandbox-id> [flags]` | Change a sandbox’s display name, idle-stop or auto-delete interval. |
 | `ghostdock sandboxes urls create <sandbox-id> --port <integer> [flags]` | Expose a sandbox port as a URL. |
 | `ghostdock sandboxes urls delete <url-id>` | Delete a sandbox URL. |
-| `ghostdock sandboxes urls list <sandbox-id> [flags]` | List the URLs that expose a sandbox’s ports, with protocol and access. |
-| `ghostdock sandboxes urls update <url-id> [flags]` | Change a sandbox URL’s port, protocol, autoWake or public setting. |
+| `ghostdock sandboxes urls list <sandbox-id> [flags]` | List the URLs that expose a sandbox’s ports, with protocol, access and title. |
+| `ghostdock sandboxes urls update <url-id> [flags]` | Change a sandbox URL’s port, protocol, autoWake, public setting or title. |
 | `ghostdock sandboxes wake <sandbox-id> [flags]` | Start a stopped sandbox, or reset the idle-stop countdown of a running one. |
 
 #### sites

package/dist/index.js

@@ -606,7 +606,7 @@ var GENERATED_TOOL_CATALOG = [
       "sandboxes",
       "create"
     ],
-    description: "Create a sandbox from a snapshot, OCI image, Dockerfile or Compose files. Inline content only: for a directory or ZIP (Dockerfile COPY/ADD, Compose build files) use `ghostdock sandboxes build`. Snapshots and catalog images can require environment entries, URL ports and MCP names (requiredEnvironment / requiredUrls / requiredMcps); a miss fails with the missing names. Returns once the sandbox is running, with `boot`: how long the sandbox (VM) and, when one was started, its container took to start, each in ms. Idle-stop and auto-delete apply (defaults 20 minutes / 14 days). Read the sandboxes skill for sources, manifests, lifecycle and providers.",
+    description: "Create a sandbox from a snapshot, OCI image, Dockerfile or Compose files. Inline content only: for a directory or ZIP (Dockerfile COPY/ADD, Compose build files) use `ghostdock sandboxes build`. Snapshots and catalog images can require environment entries, URL ports and MCP names (requiredEnvironment / requiredUrls / requiredMcps); a missing environment entry fails with its names (missingEnvironment), and removing a required URL or MCP fails with them (missingUrls / missingMcps). Returns once the sandbox is running, with `boot`: how long the sandbox (VM) and, when one was started, its container took to start, each in ms. Idle-stop and auto-delete apply (defaults 20 minutes / 14 days). Read the sandboxes skill for sources, manifests, lifecycle and providers.",
     inputSchema: {
       $schema: "https://json-schema.org/draft/2020-12/schema",
       type: "object",
@@ -840,69 +840,121 @@ var GENERATED_TOOL_CATALOG = [
           type: "boolean"
         },
         urls: {
-          description: "URLs to mint after create. Omit to mint the manifest’s URLs; when given, exactly this list is minted and must include every required port. TCP URLs are always public.",
+          description: "Changes to the image’s or snapshot’s URLs, keyed by port. Omit for the image URLs as they are; otherwise you get the image URLs plus yours: an entry on the same port replaces that URL completely (omitted fields take their defaults), and { port, remove: true } drops it; removing a port the image does not declare does nothing. A required port cannot be removed. TCP URLs are always public.",
           maxItems: 100,
           type: "array",
           items: {
-            type: "object",
-            properties: {
-              port: {
-                type: "integer",
-                minimum: 1,
-                maximum: 65535
-              },
-              protocol: {
-                type: "string",
-                enum: [
-                  "http",
-                  "tcp"
-                ]
-              },
-              autoWake: {
-                type: "boolean"
+            anyOf: [
+              {
+                type: "object",
+                properties: {
+                  port: {
+                    type: "integer",
+                    minimum: 1,
+                    maximum: 65535
+                  },
+                  protocol: {
+                    type: "string",
+                    enum: [
+                      "http",
+                      "tcp"
+                    ]
+                  },
+                  autoWake: {
+                    type: "boolean"
+                  },
+                  public: {
+                    type: "boolean"
+                  },
+                  title: {
+                    description: 'Name shown for the URL, up to 40 characters. A titled HTTP URL gets its own button on the sandbox card; TCP titles are shown in URL lists. Untitled HTTP URLs are listed under "Open URL".',
+                    type: "string",
+                    minLength: 1,
+                    maxLength: 40
+                  }
+                },
+                required: [
+                  "port",
+                  "autoWake",
+                  "public"
+                ],
+                additionalProperties: false
               },
-              public: {
-                type: "boolean"
+              {
+                type: "object",
+                properties: {
+                  port: {
+                    type: "integer",
+                    minimum: 1,
+                    maximum: 65535
+                  },
+                  remove: {
+                    type: "boolean",
+                    const: true
+                  }
+                },
+                required: [
+                  "port",
+                  "remove"
+                ],
+                additionalProperties: false
               }
-            },
-            required: [
-              "port",
-              "autoWake",
-              "public"
-            ],
-            additionalProperties: false
+            ]
           }
         },
         mcps: {
-          description: "MCP exposures to mint after create. Omit to apply manifest MCPs. When provided, exactly this list is minted; required manifest names (requiredMcps) must be included.",
+          description: "Changes to the image’s or snapshot’s MCP exposures, keyed by name. Omit for the image MCPs as they are; otherwise you get the image MCPs plus yours: an entry with the same name replaces that MCP completely, and { name, remove: true } drops it; removing a name the image does not declare does nothing. A required MCP (requiredMcps) cannot be removed.",
           maxItems: 100,
           type: "array",
           items: {
-            type: "object",
-            properties: {
-              name: {
-                type: "string",
-                maxLength: 64,
-                pattern: "^[A-Za-z][A-Za-z0-9_-]*$"
-              },
-              port: {
-                type: "integer",
-                minimum: 1,
-                maximum: 65535
-              },
-              path: {
-                type: "string"
+            anyOf: [
+              {
+                type: "object",
+                properties: {
+                  name: {
+                    type: "string",
+                    maxLength: 64,
+                    pattern: "^[A-Za-z][A-Za-z0-9_-]*$"
+                  },
+                  port: {
+                    type: "integer",
+                    minimum: 1,
+                    maximum: 65535
+                  },
+                  path: {
+                    type: "string"
+                  },
+                  autoWake: {
+                    type: "boolean"
+                  }
+                },
+                required: [
+                  "name",
+                  "port",
+                  "autoWake"
+                ],
+                additionalProperties: false
               },
-              autoWake: {
-                type: "boolean"
+              {
+                type: "object",
+                properties: {
+                  name: {
+                    type: "string",
+                    maxLength: 64,
+                    pattern: "^[A-Za-z][A-Za-z0-9_-]*$"
+                  },
+                  remove: {
+                    type: "boolean",
+                    const: true
+                  }
+                },
+                required: [
+                  "name",
+                  "remove"
+                ],
+                additionalProperties: false
               }
-            },
-            required: [
-              "name",
-              "port",
-              "autoWake"
-            ],
-            additionalProperties: false
+            ]
           }
         }
       },
@@ -3710,6 +3762,11 @@ var GENERATED_TOOL_CATALOG = [
                       "http",
                       "tcp"
                     ]
+                  },
+                  title: {
+                    type: "string",
+                    minLength: 1,
+                    maxLength: 40
                   }
                 },
                 required: [
@@ -3995,6 +4052,11 @@ var GENERATED_TOOL_CATALOG = [
                       "http",
                       "tcp"
                     ]
+                  },
+                  title: {
+                    type: "string",
+                    minLength: 1,
+                    maxLength: 40
                   }
                 },
                 required: [
@@ -4151,7 +4213,7 @@ var GENERATED_TOOL_CATALOG = [
       "images",
       "list"
     ],
-    description: "List the images an organization can boot sandboxes from. OCI bookmarks, images_add_dockerfile and images_add_compose rows, and refs its sandboxes use. A discovery catalog, not an allowlist: sandboxes_create accepts any OCI ref. Items carry sandboxCount and a redacted manifest with requiredEnvironment / requiredUrls / requiredMcps.",
+    description: "List the images an organization can boot sandboxes from. OCI bookmarks, images_add_dockerfile and images_add_compose rows, and refs its sandboxes use. A discovery catalog, not an allowlist: sandboxes_create accepts any OCI ref. Items carry sandboxCount and a redacted manifest with requiredEnvironment / requiredUrls / requiredMcps. An OCI bookmark stores no labels (manifest null): sandboxes_create reads them from the digest the ref names then.",
     inputSchema: {
       $schema: "https://json-schema.org/draft/2020-12/schema",
       type: "object",
@@ -4186,7 +4248,7 @@ var GENERATED_TOOL_CATALOG = [
     cliArgs: [
       "imageId"
     ],
-    description: "Get one catalog image with its spec, manifest and requirements. Returns kind, spec and a redacted manifest with requiredEnvironment / requiredUrls / requiredMcps.",
+    description: "Get one catalog image with its spec, manifest and requirements. Returns kind, spec and a redacted manifest with requiredEnvironment / requiredUrls / requiredMcps. An OCI bookmark’s manifest is null: its labels are read at create time.",
     inputSchema: {
       $schema: "https://json-schema.org/draft/2020-12/schema",
       type: "object",
@@ -4766,7 +4828,7 @@ var GENERATED_TOOL_CATALOG = [
     cliArgs: [
       "sandboxId"
     ],
-    description: "List the URLs that expose a sandbox’s ports, with protocol and access.",
+    description: "List the URLs that expose a sandbox’s ports, with protocol, access and title. A titled URL (for example `Desktop`, the desktop image’s desktop in a browser) gets its own button in the app.",
     inputSchema: {
       $schema: "https://json-schema.org/draft/2020-12/schema",
       type: "object",
@@ -4834,6 +4896,16 @@ var GENERATED_TOOL_CATALOG = [
               public: {
                 type: "boolean"
               },
+              title: {
+                anyOf: [
+                  {
+                    type: "string"
+                  },
+                  {
+                    type: "null"
+                  }
+                ]
+              },
               sshTunnel: {
                 anyOf: [
                   {
@@ -4904,6 +4976,7 @@ var GENERATED_TOOL_CATALOG = [
               "port",
               "autoWake",
               "public",
+              "title",
               "sshTunnel",
               "connect"
             ],
@@ -4928,7 +5001,7 @@ var GENERATED_TOOL_CATALOG = [
     cliArgs: [
       "sandboxId"
     ],
-    description: "Expose a sandbox port as a URL. Idempotent by port. HTTP defaults to private with no wake-on-visit; TCP URLs use TLS (not HTTP) and are always public — for a private port use sandboxes_ssh_get and an SSH forward. Read the sandboxes skill for TCP clients.",
+    description: "Expose a sandbox port as a URL. Idempotent by port: when the sandbox already has a URL on that port, it is returned unchanged (autoWake, public and title are not applied); use sandboxes_urls_update to change it. HTTP defaults to private with no wake-on-visit; TCP URLs use TLS (not HTTP) and are always public — for a private port use sandboxes_ssh_get and an SSH forward. Read the sandboxes skill for TCP clients.",
     inputSchema: {
       $schema: "https://json-schema.org/draft/2020-12/schema",
       type: "object",
@@ -4964,6 +5037,12 @@ var GENERATED_TOOL_CATALOG = [
         public: {
           description: "Reachable without signing in. Default false; TCP URLs are always public.",
           type: "boolean"
+        },
+        title: {
+          description: 'Name shown for the URL, up to 40 characters. A titled HTTP URL gets its own button on the sandbox card; TCP titles are shown in URL lists. Untitled HTTP URLs are listed under "Open URL".',
+          type: "string",
+          minLength: 1,
+          maxLength: 40
         }
       },
       required: [
@@ -5014,6 +5093,16 @@ var GENERATED_TOOL_CATALOG = [
         public: {
           type: "boolean"
         },
+        title: {
+          anyOf: [
+            {
+              type: "string"
+            },
+            {
+              type: "null"
+            }
+          ]
+        },
         sshTunnel: {
           anyOf: [
             {
@@ -5084,6 +5173,7 @@ var GENERATED_TOOL_CATALOG = [
         "port",
         "autoWake",
         "public",
+        "title",
         "sshTunnel",
         "connect"
       ],
@@ -5101,7 +5191,7 @@ var GENERATED_TOOL_CATALOG = [
     cliArgs: [
       "urlId"
     ],
-    description: "Change a sandbox URL’s port, protocol, autoWake or public setting. TCP cannot be private.",
+    description: "Change a sandbox URL’s port, protocol, autoWake, public setting or title. TCP cannot be private.",
     inputSchema: {
       $schema: "https://json-schema.org/draft/2020-12/schema",
       type: "object",
@@ -5132,6 +5222,19 @@ var GENERATED_TOOL_CATALOG = [
         public: {
           description: "Reachable without signing in. Omit to keep it; TCP cannot be made private.",
           type: "boolean"
+        },
+        title: {
+          description: 'Name shown for the URL, up to 40 characters. A titled HTTP URL gets its own button on the sandbox card; TCP titles are shown in URL lists. Untitled HTTP URLs are listed under "Open URL". Omit to keep it; null removes it.',
+          anyOf: [
+            {
+              type: "string",
+              minLength: 1,
+              maxLength: 40
+            },
+            {
+              type: "null"
+            }
+          ]
         }
       },
       required: [
@@ -5180,6 +5283,16 @@ var GENERATED_TOOL_CATALOG = [
         public: {
           type: "boolean"
         },
+        title: {
+          anyOf: [
+            {
+              type: "string"
+            },
+            {
+              type: "null"
+            }
+          ]
+        },
         sshTunnel: {
           anyOf: [
             {
@@ -5250,6 +5363,7 @@ var GENERATED_TOOL_CATALOG = [
         "port",
         "autoWake",
         "public",
+        "title",
         "sshTunnel",
         "connect"
       ],
@@ -6100,7 +6214,7 @@ var GENERATED_TOOL_CATALOG = [
           description: "Sandbox name (e.g. quiet-harbor) or id, from sandboxes_list or sandboxes_create. Names are unique within the organization."
         },
         sessionId: {
-          description: "Id for the new session. Omit to generate one.",
+          description: "Id for the new session: a slug; user-cmd, image-cmd and compose are reserved. Omit to generate one.",
           type: "string",
           minLength: 1
         }
@@ -8446,7 +8560,7 @@ function getCliName(argv = process.argv) {
   return CLI_NAMES.find((name) => name === invoked) ?? "ghostdock";
 }
 // package.json
-var version = "0.0.8";
+var version = "0.0.9";
 var package_default = {
   name: "ghostdock",
   description: "Ghostdock CLI — device login and agent tool invocation from the command line",
@@ -9683,6 +9797,380 @@ var logoutCommand = defineCommand({
   }
 });
 
+// src/commands/network.ts
+import { spawn, spawnSync } from "node:child_process";
+import { hostname as hostname2 } from "node:os";
+
+// src/network/tunnel.ts
+import { createPrivateKey, createPublicKey, generateKeyPairSync } from "node:crypto";
+import { existsSync } from "node:fs";
+import { chmod as chmod2, mkdir as mkdir3, readFile as readFile3, writeFile as writeFile3 } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname as dirname3, join as join3 } from "node:path";
+var INTERFACE = "gdock";
+function networkDir() {
+  const override = process.env.GHOSTDOCK_NETWORK_DIR?.trim();
+  if (override)
+    return override;
+  const base = process.env.XDG_CONFIG_HOME?.trim() || join3(homedir(), ".config");
+  return join3(base, "ghostdock", "network");
+}
+function configPath(dir = networkDir()) {
+  return join3(dir, `${INTERFACE}.conf`);
+}
+function keyPath(dir) {
+  return join3(dir, "private.key");
+}
+function statePath(dir) {
+  return join3(dir, "device.json");
+}
+var X25519_PKCS8_PREFIX = Buffer.from("302e020100300506032b656e04220420", "hex");
+function keyPairFromPrivate(privateKey) {
+  const raw = Buffer.from(privateKey, "base64");
+  if (raw.length !== 32)
+    throw new Error("The stored WireGuard key is not 32 bytes.");
+  const key = createPrivateKey({
+    key: Buffer.concat([X25519_PKCS8_PREFIX, raw]),
+    format: "der",
+    type: "pkcs8"
+  });
+  const spki = createPublicKey(key).export({ format: "der", type: "spki" });
+  return { privateKey, publicKey: spki.subarray(spki.length - 32).toString("base64") };
+}
+async function loadOrCreateKey(dir = networkDir()) {
+  try {
+    return keyPairFromPrivate((await readFile3(keyPath(dir), "utf8")).trim());
+  } catch (err) {
+    if (err.code !== "ENOENT")
+      throw err;
+  }
+  const { privateKey } = generateKeyPairSync("x25519");
+  const der = privateKey.export({ format: "der", type: "pkcs8" });
+  const raw = der.subarray(der.length - 32).toString("base64");
+  await mkdir3(dir, { recursive: true, mode: 448 });
+  await writeFile3(keyPath(dir), `${raw}
+`, { mode: 384 });
+  return keyPairFromPrivate(raw);
+}
+async function readDeviceState(dir = networkDir()) {
+  try {
+    const parsed = JSON.parse(await readFile3(statePath(dir), "utf8"));
+    if (typeof parsed.deviceId === "string" && typeof parsed.baseUrl === "string") {
+      return {
+        baseUrl: parsed.baseUrl,
+        deviceId: parsed.deviceId,
+        address: typeof parsed.address === "string" ? parsed.address : ""
+      };
+    }
+  } catch {}
+  return null;
+}
+async function writeDeviceState(state, dir = networkDir()) {
+  await mkdir3(dir, { recursive: true, mode: 448 });
+  await writeFile3(statePath(dir), `${JSON.stringify(state, null, 2)}
+`, { mode: 384 });
+}
+function detectDnsMode(platform = process.platform, exists = existsSync) {
+  if (platform === "darwin")
+    return "macos-resolver";
+  if (platform === "linux" && exists("/run/systemd/resolve"))
+    return "resolved";
+  return "none";
+}
+function renderConfig(input) {
+  const { device, network, gateway } = input.registered;
+  const zones = [network.zones.canonical, network.zones.short];
+  const lines = [
+    "# Written by `ghostdock network connect`. Run it again rather than editing this file.",
+    "[Interface]",
+    `PrivateKey = ${input.privateKey}`,
+    `Address = ${device.address}/128`,
+    `MTU = ${network.mtu}`
+  ];
+  if (input.dns === "macos-resolver") {
+    const files = zones.map((zone) => `/etc/resolver/${zone}`);
+    lines.push(`PostUp = mkdir -p /etc/resolver && ${files.map((file) => `printf 'nameserver ${network.gatewayAddress}\\n' > ${file}`).join(" && ")}`, `PostDown = rm -f ${files.join(" ")}`);
+  } else if (input.dns === "resolved") {
+    lines.push(`PostUp = resolvectl dns %i ${network.gatewayAddress} && resolvectl domain %i ${zones.map((zone) => `'~${zone}'`).join(" ")}`);
+  }
+  lines.push("", "[Peer]", `PublicKey = ${gateway.publicKey}`, `Endpoint = ${gateway.endpoint}`, `AllowedIPs = ${network.platformPrefix}`, "PersistentKeepalive = 25", "");
+  return lines.join(`
+`);
+}
+async function writeConfig(contents, path = configPath()) {
+  await mkdir3(dirname3(path), { recursive: true, mode: 448 });
+  await writeFile3(path, contents, { mode: 384 });
+  await chmod2(path, 384);
+}
+function tunnelUp(platform = process.platform, exists = existsSync) {
+  if (platform === "darwin")
+    return exists(`/var/run/wireguard/${INTERFACE}.name`);
+  return exists(`/sys/class/net/${INTERFACE}`);
+}
+function installHint(platform = process.platform) {
+  if (platform === "darwin")
+    return "brew install wireguard-tools";
+  if (platform === "linux")
+    return "sudo apt install wireguard-tools (or your distribution’s package)";
+  return "Install wireguard-tools. On Windows, run the CLI inside WSL.";
+}
+
+// src/commands/network.ts
+function defaultDeps() {
+  return {
+    request: authorizedRequest,
+    run: (command, args) => new Promise((resolve, reject) => {
+      const child = spawn(command, args, { stdio: "inherit" });
+      child.on("error", reject);
+      child.on("close", (code) => resolve(code ?? 1));
+    }),
+    has: (command) => spawnSync("sh", ["-c", `command -v ${command}`]).status === 0,
+    dir: networkDir(),
+    up: () => tunnelUp(),
+    log: console.log,
+    error: printError,
+    notice: printNotice
+  };
+}
+function message(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+async function wgQuick(deps, verb) {
+  const args = ["wg-quick", verb, configPath(deps.dir)];
+  deps.notice(`Running: sudo ${args.join(" ")}`);
+  return deps.run("sudo", args);
+}
+async function runNetworkConnect(args, deps = defaultDeps()) {
+  if (!deps.has("wg-quick")) {
+    deps.error(`wg-quick is not installed. ${installHint()}`);
+    return 1;
+  }
+  let registered;
+  let privateKey;
+  try {
+    const key = await loadOrCreateKey(deps.dir);
+    privateKey = key.privateKey;
+    const found = await findOrganizationRef(args.org);
+    registered = await deps.request("/api/v1/network/devices", {
+      method: "POST",
+      body: JSON.stringify({
+        publicKey: key.publicKey,
+        name: hostname2().slice(0, 64) || "device",
+        ...found ? { shortNameOrganization: found.ref } : {}
+      })
+    });
+  } catch (err) {
+    deps.error(message(err));
+    return 1;
+  }
+  const dns = detectDnsMode();
+  await writeConfig(renderConfig({ privateKey, registered, dns }), configPath(deps.dir));
+  await writeDeviceState({ baseUrl: getBaseUrl(), deviceId: registered.device.id, address: registered.device.address }, deps.dir);
+  if (deps.up()) {
+    const down = await wgQuick(deps, "down");
+    if (down !== 0) {
+      deps.error(`Could not take the old tunnel down (wg-quick exited ${down}).`);
+      return 1;
+    }
+  }
+  const code = await wgQuick(deps, "up");
+  if (code !== 0) {
+    deps.error(`wg-quick exited ${code}. The config is in ${configPath(deps.dir)}.`);
+    return 1;
+  }
+  const { device, network } = registered;
+  printResult({ device, network, interface: INTERFACE, dns }, () => [
+    eventLine("done", `Connected. This machine is ${device.address} in the private network.`),
+    `    Names: <sandbox>.<org>.${network.zones.canonical}` + (device.shortNameOrganizationId ? `, and <sandbox>.${network.zones.short}` : ""),
+    ...dns === "none" ? [
+      "    No split DNS on this machine (no systemd-resolved): use the addresses from",
+      `    \`${getCliName()} network ls\`.`
+    ] : [],
+    `    → ${getCliName()} network ls`
+  ], deps.log);
+  return 0;
+}
+async function runNetworkDisconnect(deps = defaultDeps()) {
+  if (!deps.up()) {
+    printResult({ connected: false }, () => [eventLine("item", "Not connected.")], deps.log);
+    return 0;
+  }
+  const code = await wgQuick(deps, "down");
+  if (code !== 0) {
+    deps.error(`wg-quick exited ${code}.`);
+    return 1;
+  }
+  printResult({ connected: false }, () => [eventLine("done", "Disconnected.")], deps.log);
+  return 0;
+}
+async function runNetworkStatus(deps = defaultDeps()) {
+  const state = await readDeviceState(deps.dir);
+  const connected = deps.up();
+  let device = null;
+  if (state) {
+    try {
+      const { devices } = await deps.request("/api/v1/network/devices");
+      device = devices.find((d) => d.id === state.deviceId) ?? null;
+    } catch (err) {
+      deps.notice(`Could not ask the app about this device: ${message(err)}`);
+    }
+  }
+  printResult({ connected, device }, () => {
+    if (!state) {
+      return [eventLine("item", `Not set up. Run \`${getCliName()} network connect\`.`)];
+    }
+    const lines = [
+      eventLine("item", `${connected ? "Connected" : "Not connected"}: ${state.address}`)
+    ];
+    if (!device) {
+      lines.push(`    The app no longer knows this device (removed, expired or logged out). Run \`${getCliName()} network connect\`.`);
+    } else {
+      lines.push(`    Device ${device.name}, valid until ${device.expiresAt.slice(0, 10)}.`);
+    }
+    return lines;
+  }, deps.log);
+  return 0;
+}
+async function runNetworkLs(args, deps = defaultDeps()) {
+  try {
+    const organization = await requireOrganizationRef(args.org, deps.notice);
+    const listed = await deps.request(`/api/v1/network/organizations/${encodeURIComponent(organization)}/sandboxes`);
+    printResult(listed, () => {
+      if (listed.sandboxes.length === 0) {
+        return [eventLine("item", `No sandboxes in ${listed.organization.slug}.`)];
+      }
+      const width = Math.max(...listed.sandboxes.map((s) => s.name.length));
+      return listed.sandboxes.map((s) => `  ${s.name.padEnd(width)}  ${s.address.padEnd(28)}  ${s.canonicalName}  ${s.status}`);
+    }, deps.log);
+    return 0;
+  } catch (err) {
+    deps.error(message(err));
+    return 1;
+  }
+}
+async function runNetworkUse(args, deps = defaultDeps()) {
+  const state = await readDeviceState(deps.dir);
+  if (!state) {
+    deps.error(`Not set up. Run \`${getCliName()} network connect\` first.`);
+    return 1;
+  }
+  const organization = args.clear ? null : args.org?.trim();
+  if (organization === undefined || organization === "") {
+    deps.error("Pass an organization id or slug, or --clear.");
+    return 1;
+  }
+  try {
+    const device = await deps.request(`/api/v1/network/devices/${encodeURIComponent(state.deviceId)}/short-name-organization`, { method: "PUT", body: JSON.stringify({ organization }) });
+    printResult(device, () => [
+      eventLine("done", organization === null ? "Short names are off for this machine." : `Short names (<sandbox>.gdock.internal) now resolve in ${organization}.`)
+    ], deps.log);
+    return 0;
+  } catch (err) {
+    deps.error(message(err));
+    return 1;
+  }
+}
+async function runNetworkDevices(deps = defaultDeps()) {
+  try {
+    const { devices } = await deps.request("/api/v1/network/devices");
+    const own = (await readDeviceState(deps.dir))?.deviceId;
+    printResult({ devices }, () => devices.length === 0 ? [eventLine("item", "No devices.")] : devices.map((d) => `  ${d.id === own ? "*" : " "} ${d.id}  ${d.name}  ${d.address}  until ${d.expiresAt.slice(0, 10)}`), deps.log);
+    return 0;
+  } catch (err) {
+    deps.error(message(err));
+    return 1;
+  }
+}
+async function runNetworkDevicesRemove(args, deps = defaultDeps()) {
+  try {
+    await deps.request(`/api/v1/network/devices/${encodeURIComponent(args.id)}`, {
+      method: "DELETE"
+    });
+    printResult({ removed: args.id }, () => [eventLine("done", `Removed device ${args.id}.`)], deps.log);
+    return 0;
+  } catch (err) {
+    deps.error(message(err));
+    return 1;
+  }
+}
+var connectCommand = defineCommand({
+  meta: {
+    name: "connect",
+    description: "Put this machine into the private network: WireGuard and split DNS. Asks for sudo once."
+  },
+  args: { org: orgArg },
+  async run({ args }) {
+    process.exitCode = await runNetworkConnect({ org: args.org });
+  }
+});
+var disconnectCommand = defineCommand({
+  meta: { name: "disconnect", description: "Take this machine out of the private network." },
+  async run() {
+    process.exitCode = await runNetworkDisconnect();
+  }
+});
+var statusCommand = defineCommand({
+  meta: { name: "status", description: "Whether this machine is connected, and as which device." },
+  async run() {
+    process.exitCode = await runNetworkStatus();
+  }
+});
+var lsCommand = defineCommand({
+  meta: {
+    name: "ls",
+    description: "Sandboxes of an organization with their private addresses and names."
+  },
+  args: { org: orgArg },
+  async run({ args }) {
+    process.exitCode = await runNetworkLs({ org: args.org });
+  }
+});
+var useCommand = defineCommand({
+  meta: {
+    name: "use",
+    description: "Choose the organization <sandbox>.gdock.internal names resolve in on this machine."
+  },
+  args: {
+    org: { type: "positional", description: "Organization id or slug.", required: false },
+    clear: { type: "boolean", description: "Turn short names off.", default: false }
+  },
+  async run({ args }) {
+    process.exitCode = await runNetworkUse({ org: args.org, clear: args.clear });
+  }
+});
+var devicesRemoveCommand = defineCommand({
+  meta: { name: "remove", description: "Remove one of your devices from the private network." },
+  args: {
+    id: { type: "positional", description: "Device id, from `network devices`.", required: true }
+  },
+  async run({ args }) {
+    process.exitCode = await runNetworkDevicesRemove({ id: args.id });
+  }
+});
+var devicesCommand = defineCommand({
+  meta: { name: "devices", description: "Your devices in the private network." },
+  subCommands: { remove: devicesRemoveCommand },
+  async run({ rawArgs }) {
+    if (rawArgs[0] === "remove")
+      return;
+    process.exitCode = await runNetworkDevices();
+  }
+});
+var networkCommand = defineCommand({
+  meta: {
+    name: "network",
+    description: "The private network: reach your sandboxes by address and name from this machine."
+  },
+  subCommands: {
+    connect: connectCommand,
+    disconnect: disconnectCommand,
+    status: statusCommand,
+    ls: lsCommand,
+    use: useCommand,
+    devices: devicesCommand
+  }
+});
+
 // src/commands/organizations.ts
 async function runOrganizationsUse(args, log = console.log, error = printError) {
   const settings = await readSettings();
@@ -9754,8 +10242,8 @@ var organizationsCurrentCommand = defineCommand({
 });
 
 // src/commands/publish-auto.ts
-import { readdir, readFile as readFile3, stat } from "node:fs/promises";
-import { basename as basename2, join as join3, relative, sep } from "node:path";
+import { readdir, readFile as readFile4, stat } from "node:fs/promises";
+import { basename as basename2, join as join4, relative, sep } from "node:path";
 function publishAutoLines(result) {
   const [summaryLine, ...rest] = formatPublishAutoResult(result).split(`
 `);
@@ -9832,7 +10320,7 @@ function formatAttemptedSpec(spec) {
 async function collectPath(path) {
   const pathStats = await stat(path);
   if (pathStats.isFile()) {
-    return [{ path: basename2(path), data: await readFile3(path) }];
+    return [{ path: basename2(path), data: await readFile4(path) }];
   }
   if (!pathStats.isDirectory()) {
     throw new Error(`Publish path must be a file or directory: ${path}`);
@@ -9842,13 +10330,13 @@ async function collectPath(path) {
     const entries = await readdir(currentPath, { withFileTypes: true });
     entries.sort((a, b) => a.name.localeCompare(b.name));
     for (const entry of entries) {
-      const entryPath = join3(currentPath, entry.name);
+      const entryPath = join4(currentPath, entry.name);
       if (entry.isDirectory()) {
         await visit(entryPath);
       } else if (entry.isFile()) {
         files.push({
           path: relative(path, entryPath).split(sep).join("/"),
-          data: await readFile3(entryPath)
+          data: await readFile4(entryPath)
         });
       }
     }
@@ -9891,7 +10379,7 @@ async function runPublishAuto(options, log = console.log, error = printError) {
       }
     }
     if (options.zip) {
-      form.append("zip", new Blob([await readFile3(options.zip)]), basename2(options.zip));
+      form.append("zip", new Blob([await readFile4(options.zip)]), basename2(options.zip));
     }
     const { value: result } = await withProgress("Planning and deploying… (this can take a few minutes)", () => authorizedRequest(`/api/v1/organizations/${encodeURIComponent(options.organizationId)}/publish-auto`, { method: "POST", body: form }));
     printResult(result, () => publishAutoLines(result), log);
@@ -10014,12 +10502,12 @@ var publishAutoCommand = defineCommand({
 });
 
 // src/commands/publish-static.ts
-import { readdir as readdir2, readFile as readFile4, stat as stat2 } from "node:fs/promises";
-import { basename as basename3, join as join4, relative as relative2, sep as sep2 } from "node:path";
+import { readdir as readdir2, readFile as readFile5, stat as stat2 } from "node:fs/promises";
+import { basename as basename3, join as join5, relative as relative2, sep as sep2 } from "node:path";
 async function collectPath2(path) {
   const pathStats = await stat2(path);
   if (pathStats.isFile()) {
-    return [{ path: basename3(path), data: await readFile4(path) }];
+    return [{ path: basename3(path), data: await readFile5(path) }];
   }
   if (!pathStats.isDirectory()) {
     throw new Error(`Publish path must be a file or directory: ${path}`);
@@ -10029,13 +10517,13 @@ async function collectPath2(path) {
     const entries = await readdir2(currentPath, { withFileTypes: true });
     entries.sort((a, b) => a.name.localeCompare(b.name));
     for (const entry of entries) {
-      const entryPath = join4(currentPath, entry.name);
+      const entryPath = join5(currentPath, entry.name);
       if (entry.isDirectory()) {
         await visit(entryPath);
       } else if (entry.isFile()) {
         files.push({
           path: relative2(path, entryPath).split(sep2).join("/"),
-          data: await readFile4(entryPath)
+          data: await readFile5(entryPath)
         });
       }
     }
@@ -10058,7 +10546,7 @@ async function runPublishStatic(options, log = console.log, error = printError)
       }
     }
     if (options.zip) {
-      form.append("zip", new Blob([await readFile4(options.zip)]), basename3(options.zip));
+      form.append("zip", new Blob([await readFile5(options.zip)]), basename3(options.zip));
     }
     const { value: result } = await withProgress("Publishing…", () => authorizedRequest(`/api/v1/organizations/${encodeURIComponent(options.organizationId)}/static-sites`, { method: "POST", body: form }));
     printResult(result, () => [eventLine("url", result.url), eventLine("done", `Published site ${result.siteId}.`)], log);
@@ -10112,7 +10600,7 @@ var publishStaticCommand = defineCommand({
 });
 
 // src/commands/registry.ts
-import { spawn } from "node:child_process";
+import { spawn as spawn2 } from "node:child_process";
 function reportError2(err, error) {
   if (err instanceof AuthRequiredError || err instanceof Error) {
     error(err.message);
@@ -10129,7 +10617,7 @@ function defaultInvoke(input) {
 }
 function dockerLogin(input) {
   return new Promise((resolve, reject) => {
-    const child = spawn("docker", ["login", input.host, "-u", input.username, "--password-stdin"], {
+    const child = spawn2("docker", ["login", input.host, "-u", input.username, "--password-stdin"], {
       stdio: ["pipe", "inherit", "pipe"]
     });
     let stderr = "";
@@ -10227,8 +10715,8 @@ var registryCommand = defineCommand({
 });
 
 // src/commands/sandbox-create.ts
-import { readdir as readdir3, readFile as readFile5, stat as stat3 } from "node:fs/promises";
-import { basename as basename4, join as join5, relative as relative3, sep as sep3 } from "node:path";
+import { readdir as readdir3, readFile as readFile6, stat as stat3 } from "node:fs/promises";
+import { basename as basename4, join as join6, relative as relative3, sep as sep3 } from "node:path";
 
 // ../../node_modules/fflate/esm/index.mjs
 import { createRequire } from "module";
@@ -10884,13 +11372,13 @@ async function collectDirectory(path) {
     const entries = await readdir3(currentPath, { withFileTypes: true });
     entries.sort((a, b) => a.name.localeCompare(b.name));
     for (const entry of entries) {
-      const entryPath = join5(currentPath, entry.name);
+      const entryPath = join6(currentPath, entry.name);
       if (entry.isDirectory()) {
         await visit(entryPath);
       } else if (entry.isFile()) {
         files.push({
           path: relative3(path, entryPath).split(sep3).join("/"),
-          data: await readFile5(entryPath)
+          data: await readFile6(entryPath)
         });
       }
     }
@@ -10923,7 +11411,7 @@ async function runSandboxCreate(options, log = console.log, error = printError)
     return 1;
   }
   try {
-    const zipBytes = options.zip ? new Uint8Array(await readFile5(options.zip)) : zipDirectory(await collectDirectory(options.paths[0] ?? ""));
+    const zipBytes = options.zip ? new Uint8Array(await readFile6(options.zip)) : zipDirectory(await collectDirectory(options.paths[0] ?? ""));
     const form = new FormData;
     form.append("kind", options.kind);
     if (options.displayName)
@@ -11184,12 +11672,12 @@ var toolsCommand = defineCommand({
 });
 
 // src/commands/upload-files.ts
-import { readdir as readdir4, readFile as readFile6, stat as stat4 } from "node:fs/promises";
-import { basename as basename5, join as join6, relative as relative4, sep as sep4 } from "node:path";
+import { readdir as readdir4, readFile as readFile7, stat as stat4 } from "node:fs/promises";
+import { basename as basename5, join as join7, relative as relative4, sep as sep4 } from "node:path";
 async function collectPath3(path) {
   const pathStats = await stat4(path);
   if (pathStats.isFile()) {
-    return [{ path: basename5(path), data: await readFile6(path) }];
+    return [{ path: basename5(path), data: await readFile7(path) }];
   }
   if (!pathStats.isDirectory()) {
     throw new Error(`Upload path must be a file or directory: ${path}`);
@@ -11199,13 +11687,13 @@ async function collectPath3(path) {
     const entries = await readdir4(currentPath, { withFileTypes: true });
     entries.sort((a, b) => a.name.localeCompare(b.name));
     for (const entry of entries) {
-      const entryPath = join6(currentPath, entry.name);
+      const entryPath = join7(currentPath, entry.name);
       if (entry.isDirectory()) {
         await visit(entryPath);
       } else if (entry.isFile()) {
         files.push({
           path: relative4(path, entryPath).split(sep4).join("/"),
-          data: await readFile6(entryPath)
+          data: await readFile7(entryPath)
         });
       }
     }
@@ -11227,7 +11715,7 @@ async function runSandboxUpload(options, log = console.log, error = printError)
       }
     }
     if (options.zip) {
-      form.append("zip", new Blob([await readFile6(options.zip)]), basename5(options.zip));
+      form.append("zip", new Blob([await readFile7(options.zip)]), basename5(options.zip));
     }
     const { value: result } = await withProgress("Uploading…", () => authorizedRequest(`/api/v1/sandboxes/${encodeURIComponent(options.sandboxId)}/files?organization=${encodeURIComponent(organization)}`, { method: "POST", body: form }));
     printResult(result, () => [
@@ -11340,7 +11828,8 @@ var HANDWRITTEN_COMMANDS = [
   [["sandboxes", "build"], sandboxCreateCommand],
   [["sandboxes", "files", "upload"], sandboxUploadCommand],
   [["sites", "publish"], publishStaticCommand],
-  [["projects", "publish"], publishAutoCommand]
+  [["projects", "publish"], publishAutoCommand],
+  [["network"], networkCommand]
 ];
 var HANDWRITTEN_PATHS = new Set(HANDWRITTEN_COMMANDS.map(([path]) => path.join(" ")));
 function createMainCommand(catalog = OFFLINE_TOOL_CATALOG) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "ghostdock",
   "description": "Ghostdock CLI — device login and agent tool invocation from the command line",
-  "version": "0.0.8",
+  "version": "0.0.9",
   "type": "module",
   "bin": {
     "ghostdock": "dist/index.js",