sandbox 3.0.0-beta.1 → 3.0.0-beta.10

package/dist/{app-AqqXdE-N.mjs → app-BAkG8Wcx.mjs}

@@ -3164,15 +3164,16 @@ const timeout = import_cjs$24.option({
 //#endregion
 //#region src/args/vcpus.ts
 var import_cjs$23 = /* @__PURE__ */ __toESM(require_cjs());
+const vcpusType = import_cjs$23.extendType(import_cjs$23.number, {
+	displayName: "COUNT",
+	async from(n) {
+		if (!Number.isInteger(n) || n < 1) throw new Error(`Invalid vCPU count: ${n}. Must be a positive integer.`);
+		return n;
+	}
+});
 const vcpus = import_cjs$23.option({
 	long: "vcpus",
-	type: import_cjs$23.optional(import_cjs$23.extendType(import_cjs$23.number, {
-		displayName: "COUNT",
-		async from(n) {
-			if (!Number.isInteger(n) || n < 1) throw new Error(`Invalid vCPU count: ${n}. Must be a positive integer.`);
-			return n;
-		}
-	})),
+	type: import_cjs$23.optional(vcpusType),
 	description: "Number of vCPUs to allocate (each vCPU includes 2048 MB of memory)"
 });
 
@@ -7426,7 +7427,7 @@ const scope = {
 
 //#endregion
 //#region package.json
-var version = "3.0.0-beta.1";
+var version = "3.0.0-beta.10";
 
 //#endregion
 //#region src/error.ts
@@ -11250,16 +11251,23 @@ var import_ms$3 = /* @__PURE__ */ __toESM(require_ms());
 const debug$2 = createDebugger("sandbox:timeout");
 const BUFFER = (0, import_ms$3.default)("10 seconds");
 async function extendSandboxTimeoutPeriodically(sandbox, signal) {
-	const nextTick = sandbox.createdAt.getTime() + sandbox.timeout;
+	const session = sandbox.currentSession();
+	const timeout$1 = session.timeout;
+	if (timeout$1 == null) return;
+	const nextTick = session.createdAt.getTime() + timeout$1;
 	debug$2(`next tick: ${new Date(nextTick).toISOString()}`);
 	while (!signal.aborted) {
-		const timeout$1 = sandbox.createdAt.getTime() + sandbox.timeout - Date.now() - BUFFER;
-		if (timeout$1 > 2e3) {
-			debug$2(`sleeping for ${timeout$1}ms until next timeout extension`);
-			await setTimeout$1(timeout$1, null, { signal });
+		const currentTimeout = session.timeout;
+		if (currentTimeout == null) return;
+		const sleepMs = session.createdAt.getTime() + currentTimeout - Date.now() - BUFFER;
+		if (sleepMs > 2e3) {
+			debug$2(`sleeping for ${sleepMs}ms until next timeout extension`);
+			await setTimeout$1(sleepMs, null, { signal });
 		}
 		await sandbox.extendTimeout((0, import_ms$3.default)("5 minutes"));
-		const nextTick$1 = sandbox.createdAt.getTime() + sandbox.timeout;
+		const updatedTimeout = session.timeout;
+		if (updatedTimeout == null) return;
+		const nextTick$1 = session.createdAt.getTime() + updatedTimeout;
 		debug$2(`extended sandbox timeout by 5 minutes. next tick: ${new Date(nextTick$1).toISOString()}`);
 	}
 }
@@ -11387,11 +11395,16 @@ async function startInteractiveShell(options) {
 		await setupSandboxEnvironment(options.sandbox, progress);
 		progress.text = "Booting up interactive listener...";
 		command$1 = await startServerCommand(options.sandbox, listener, options.execution, options.sudo, options.envVars, options.cwd);
+		debug$1("startServerCommand completed, cmdId=%s, interactivePort=%s", command$1.cmdId, options.sandbox.interactivePort);
 		const waitForProcess = _usingCtx3.u(createAbortController("Connection established successfully"));
 		listener.connection.then(() => {
+			debug$1("listener.connection resolved");
 			waitForProcess.abort();
 		});
-		connect$1(command$1, listener, waitForProcess.signal).catch(waitForProcess.ignoreInterruptions);
+		connect$1(command$1, listener, waitForProcess.signal).catch((err$1) => {
+			if (waitForProcess.signal.aborted) return;
+			listener.stdoutStream.destroy(err$1 instanceof Error ? err$1 : new Error(String(err$1)));
+		});
 		await Promise.all([throwIfCommandPrematurelyExited(command$1, waitForProcess.signal), attach({
 			sandbox: options.sandbox,
 			progress,
@@ -11494,6 +11507,7 @@ async function connect$1(command$1, listener, signal) {
 		const stderrStream = _usingCtx5.u(getStderrStream());
 		for await (const chunk of logs) if (chunk.stream === "stdout") listener.stdoutStream.write(chunk.data);
 		else stderrStream.write(chunk.data);
+		listener.stdoutStream.end();
 	} catch (_) {
 		_usingCtx5.e = _;
 	} finally {
@@ -11766,6 +11780,12 @@ const args$2 = {
 		type: ObjectFromKeyValue,
 		description: "Default environment variables for sandbox commands"
 	}),
+	tags: import_cjs$14.multioption({
+		long: "tag",
+		short: "t",
+		type: ObjectFromKeyValue,
+		description: "Key-value tags to associate with the sandbox (e.g. --tag env=staging)"
+	}),
 	...networkPolicyArgs,
 	scope
 };
@@ -11777,7 +11797,7 @@ const create = import_cjs$14.command({
 		description: "Create and connect to a sandbox without a network access",
 		command: `sandbox run --network-policy=none --connect`
 	}],
-	async handler({ name, nonPersistent, ports, scope: scope$1, runtime: runtime$1, timeout: timeout$1, vcpus: vcpus$1, silent, snapshot: snapshot$1, connect: connect$2, envVars, networkPolicy: networkPolicyMode$1, allowedDomains: allowedDomains$1, allowedCIDRs: allowedCIDRs$1, deniedCIDRs: deniedCIDRs$1 }) {
+	async handler({ name, nonPersistent, ports, scope: scope$1, runtime: runtime$1, timeout: timeout$1, vcpus: vcpus$1, silent, snapshot: snapshot$1, connect: connect$2, envVars, tags, networkPolicy: networkPolicyMode$1, allowedDomains: allowedDomains$1, allowedCIDRs: allowedCIDRs$1, deniedCIDRs: deniedCIDRs$1 }) {
 		const networkPolicy$1 = buildNetworkPolicy({
 			networkPolicy: networkPolicyMode$1,
 			allowedDomains: allowedDomains$1,
@@ -11786,6 +11806,7 @@ const create = import_cjs$14.command({
 		});
 		const persistent = !nonPersistent;
 		const resources = vcpus$1 ? { vcpus: vcpus$1 } : void 0;
+		const tagsObj = Object.keys(tags).length > 0 ? tags : void 0;
 		const spinner = silent ? void 0 : ora("Creating sandbox...").start();
 		const sandbox = snapshot$1 ? await sandboxClient.create({
 			name,
@@ -11801,6 +11822,7 @@ const create = import_cjs$14.command({
 			resources,
 			networkPolicy: networkPolicy$1,
 			env: envVars,
+			tags: tagsObj,
 			persistent,
 			__interactive: true
 		}) : await sandboxClient.create({
@@ -11814,6 +11836,7 @@ const create = import_cjs$14.command({
 			resources,
 			networkPolicy: networkPolicy$1,
 			env: envVars,
+			tags: tagsObj,
 			persistent,
 			__interactive: true
 		});
@@ -11875,13 +11898,18 @@ const args$1 = {
 	removeAfterUse: import_cjs$13.flag({
 		long: "rm",
 		description: "Automatically remove the sandbox when the command exits."
+	}),
+	stopAfterUse: import_cjs$13.flag({
+		long: "stop",
+		description: "Stop the sandbox when the command exits."
 	})
 };
 const run = import_cjs$13.command({
 	name: "run",
 	description: "Create and run a command in a sandbox",
 	args: args$1,
-	async handler({ removeAfterUse, ...rest$1 }) {
+	async handler({ removeAfterUse, stopAfterUse, ...rest$1 }) {
+		if (removeAfterUse && stopAfterUse) throw new Error("--rm and --stop are mutually exclusive.");
 		let sandbox;
 		if (rest$1.name) try {
 			sandbox = await sandboxClient.get({
@@ -11893,10 +11921,16 @@ const run = import_cjs$13.command({
 				__includeSystemRoutes: true
 			});
 		} catch (error) {
-			if (error instanceof StyledError && error.cause instanceof APIError && error.cause.response.status === 404) sandbox = await create.handler({ ...rest$1 });
+			if (error instanceof StyledError && error.cause instanceof APIError && error.cause.response.status === 404) sandbox = await create.handler({
+				...rest$1,
+				nonPersistent: rest$1.nonPersistent || removeAfterUse
+			});
 			else throw error;
 		}
-		else sandbox = await create.handler({ ...rest$1 });
+		else sandbox = await create.handler({
+			...rest$1,
+			nonPersistent: rest$1.nonPersistent || removeAfterUse
+		});
 		try {
 			await exec.handler({
 				...rest$1,
@@ -11904,6 +11938,7 @@ const run = import_cjs$13.command({
 			});
 		} finally {
 			if (removeAfterUse) await sandbox.delete();
+			if (stopAfterUse) await sandbox.stop();
 		}
 	}
 });
@@ -11929,25 +11964,40 @@ const list = import_cjs$12.command({
 		}),
 		sortBy: import_cjs$12.option({
 			long: "sort-by",
-			description: "Sort sandboxes by field. Options: createdAt (default), name",
-			type: import_cjs$12.optional(import_cjs$12.oneOf(["createdAt", "name"]))
+			description: "Sort sandboxes by field. Options: createdAt (default), name, statusUpdatedAt",
+			type: import_cjs$12.optional(import_cjs$12.oneOf([
+				"createdAt",
+				"name",
+				"statusUpdatedAt"
+			]))
+		}),
+		sortOrder: import_cjs$12.option({
+			long: "sort-order",
+			description: "Sort order. Options: asc, desc (default)",
+			type: import_cjs$12.optional(import_cjs$12.oneOf(["asc", "desc"]))
+		}),
+		tags: import_cjs$12.multioption({
+			long: "tag",
+			description: "Filter sandboxes by tag. Format: \"key=value\"",
+			type: ObjectFromKeyValue
 		}),
 		scope
 	},
-	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, all, namePrefix, sortBy }) {
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, all, namePrefix, sortBy, sortOrder, tags }) {
 		const sandboxes = await (async () => {
 			try {
 				var _usingCtx$1 = _usingCtx();
 				const _spinner$1 = _usingCtx$1.u(acquireRelease(() => ora("Fetching sandboxes...").start(), (s$1) => s$1.stop()));
-				const { json } = await sandboxClient.list({
+				let { sandboxes: sandboxes$1 } = await sandboxClient.list({
 					token: token$1,
 					teamId: team$1,
 					projectId: project$1,
-					limit: 100,
+					limit: 50,
 					...namePrefix && { namePrefix },
-					...sortBy && { sortBy }
+					...sortBy && { sortBy },
+					...sortOrder && { sortOrder },
+					...Object.keys(tags).length > 0 && { tags }
 				});
-				let sandboxes$1 = json.sandboxes;
 				if (!all) sandboxes$1 = sandboxes$1.filter((x) => x.status === "running");
 				return sandboxes$1;
 			} catch (_) {
@@ -11967,11 +12017,12 @@ const list = import_cjs$12.command({
 				color: (s$1) => SandboxStatusColor[s$1.status] ?? source_default.reset
 			},
 			CREATED: { value: (s$1) => timeAgo(s$1.createdAt) },
-			MEMORY: { value: (s$1) => memoryFormatter.format(s$1.memory) },
-			VCPUS: { value: (s$1) => s$1.vcpus },
-			RUNTIME: { value: (s$1) => s$1.runtime },
-			TIMEOUT: { value: (s$1) => timeAgo(s$1.createdAt + s$1.timeout) },
-			SNAPSHOT: { value: (s$1) => s$1.currentSnapshotId ?? "-" }
+			MEMORY: { value: (s$1) => s$1.memory != null ? memoryFormatter.format(s$1.memory) : "-" },
+			VCPUS: { value: (s$1) => s$1.vcpus ?? "-" },
+			RUNTIME: { value: (s$1) => s$1.runtime ?? "-" },
+			TIMEOUT: { value: (s$1) => s$1.timeout != null ? timeAgo(s$1.createdAt + s$1.timeout) : "-" },
+			SNAPSHOT: { value: (s$1) => s$1.currentSnapshotId ?? "-" },
+			TAGS: { value: (s$1) => s$1.tags && Object.keys(s$1.tags).length > 0 ? Object.entries(s$1.tags).map(([k, v]) => `${k}:${v}`).join(", ") : "-" }
 		};
 		if (all) {
 			columns.CPU = { value: (s$1) => s$1.totalActiveCpuDurationMs ? formatRunDuration(s$1.totalActiveCpuDurationMs) : "-" };
@@ -14313,9 +14364,9 @@ const stop = import_cjs$10.command({
 		scope
 	},
 	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandboxName: sandboxName$1, sandboxNames }) {
-		await new Listr(Array.from(new Set([sandboxName$1, ...sandboxNames]), (sandboxName$2) => {
+		const tasks = Array.from(new Set([sandboxName$1, ...sandboxNames]), (sandboxName$2) => {
 			return {
-				title: `Stopping sandbox ${sandboxName$2}`,
+				title: `Stopping active session from ${sandboxName$2}`,
 				async task() {
 					await (await sandboxClient.get({
 						token: token$1,
@@ -14325,7 +14376,12 @@ const stop = import_cjs$10.command({
 					})).stop();
 				}
 			};
-		}), { concurrent: true }).run();
+		});
+		try {
+			await new Listr(tasks, { concurrent: true }).run();
+		} catch {
+			process.exitCode = 1;
+		}
 	}
 });
 
@@ -14345,14 +14401,10 @@ const remove = import_cjs$9.command({
 			type: sandboxName,
 			description: "more sandboxes to remove"
 		}),
-		preserveSnapshots: import_cjs$9.flag({
-			long: "preserve-snapshots",
-			description: "Keep snapshots when removing the sandbox"
-		}),
 		scope
 	},
-	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandboxName: sandboxName$1, sandboxNames, preserveSnapshots }) {
-		await new Listr(Array.from(new Set([sandboxName$1, ...sandboxNames]), (name) => ({
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandboxName: sandboxName$1, sandboxNames }) {
+		const tasks = Array.from(new Set([sandboxName$1, ...sandboxNames]), (name) => ({
 			title: `Removing sandbox ${name}`,
 			async task() {
 				await (await sandboxClient.get({
@@ -14360,9 +14412,14 @@ const remove = import_cjs$9.command({
 					teamId: team$1,
 					projectId: project$1,
 					name
-				})).delete({ preserveSnapshots });
+				})).delete();
 			}
-		})), { concurrent: true }).run();
+		}));
+		try {
+			await new Listr(tasks, { concurrent: true }).run();
+		} catch {
+			process.exitCode = 1;
+		}
 	}
 });
 
@@ -14531,19 +14588,33 @@ const list$2 = import_cjs$4.command({
 	name: "list",
 	aliases: ["ls"],
 	description: "List snapshots for the specified account and project.",
-	args: { scope },
-	async handler({ scope: { token: token$1, team: team$1, project: project$1 } }) {
+	args: {
+		scope,
+		name: import_cjs$4.option({
+			type: import_cjs$4.optional(sandboxName),
+			long: "name",
+			description: "Filter snapshots by sandbox."
+		}),
+		sortOrder: import_cjs$4.option({
+			long: "sort-order",
+			description: "Sort order. Options: asc, desc (default)",
+			type: import_cjs$4.optional(import_cjs$4.oneOf(["asc", "desc"]))
+		})
+	},
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, name, sortOrder }) {
 		const snapshots$1 = await (async () => {
 			try {
 				var _usingCtx$1 = _usingCtx();
 				const _spinner$1 = _usingCtx$1.u(acquireRelease(() => ora("Fetching snapshots...").start(), (s$1) => s$1.stop()));
-				const { json } = await snapshotClient.list({
+				const { snapshots: snapshots$2 } = await snapshotClient.list({
 					token: token$1,
 					teamId: team$1,
 					projectId: project$1,
-					limit: 100
+					name,
+					limit: 50,
+					...sortOrder && { sortOrder }
 				});
-				return json.snapshots;
+				return snapshots$2;
 			} catch (_) {
 				_usingCtx$1.e = _;
 			} finally {
@@ -14561,7 +14632,7 @@ const list$2 = import_cjs$4.command({
 				CREATED: { value: (s$1) => timeAgo(s$1.createdAt) },
 				EXPIRATION: { value: (s$1) => s$1.status === "deleted" ? source_default.gray.dim("deleted") : timeAgo(s$1.expiresAt) },
 				SIZE: { value: (s$1) => formatBytes(s$1.sizeBytes) },
-				["SOURCE SESSION"]: { value: (s$1) => s$1.sourceSandboxId }
+				["SOURCE SESSION"]: { value: (s$1) => s$1.sourceSessionId }
 			}
 		}));
 	}
@@ -14604,7 +14675,7 @@ const get = import_cjs$4.command({
 				CREATED: { value: (s$1) => timeAgo(s$1.createdAt) },
 				EXPIRATION: { value: (s$1) => s$1.status === "deleted" ? source_default.gray.dim("deleted") : timeAgo(s$1.expiresAt) },
 				SIZE: { value: (s$1) => formatBytes(s$1.sizeBytes) },
-				["SOURCE SESSION"]: { value: (s$1) => s$1.sourceSandboxId }
+				["SOURCE SESSION"]: { value: (s$1) => s$1.sourceSessionId }
 			}
 		}));
 	}
@@ -14625,7 +14696,7 @@ const remove$1 = import_cjs$4.command({
 		scope
 	},
 	async handler({ scope: { team: team$1, token: token$1, project: project$1 }, snapshotId: snapshotId$1, snapshotIds }) {
-		await new Listr(Array.from(new Set([snapshotId$1, ...snapshotIds]), (snapshotId$2) => {
+		const tasks = Array.from(new Set([snapshotId$1, ...snapshotIds]), (snapshotId$2) => {
 			return {
 				title: `Deleting snapshot ${snapshotId$2}`,
 				async task() {
@@ -14639,7 +14710,12 @@ const remove$1 = import_cjs$4.command({
 					await snapshot$1.delete();
 				}
 			};
-		}), { concurrent: true }).run();
+		});
+		try {
+			await new Listr(tasks, { concurrent: true }).run();
+		} catch {
+			process.exitCode = 1;
+		}
 	}
 });
 const snapshots = (0, import_cjs$5.subcommands)({
@@ -14667,45 +14743,66 @@ const list$1 = import_cjs$2.command({
 	aliases: ["ls"],
 	description: "List sessions from a sandbox",
 	args: {
+		all: import_cjs$2.flag({
+			long: "all",
+			short: "a",
+			description: "Show all sessions (default shows just running)"
+		}),
 		sandbox: import_cjs$2.positional({
 			type: sandboxName,
 			description: "Sandbox name to list sessions for"
 		}),
+		sortOrder: import_cjs$2.option({
+			long: "sort-order",
+			description: "Sort order. Options: asc, desc (default)",
+			type: import_cjs$2.optional(import_cjs$2.oneOf(["asc", "desc"]))
+		}),
 		scope
 	},
-	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandbox: name }) {
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, all, sandbox: name, sortOrder }) {
 		const sandbox = await sandboxClient.get({
 			name,
 			projectId: project$1,
 			teamId: team$1,
 			token: token$1
 		});
-		const sessions$1 = (await (async () => {
+		let { sessions: sessions$1 } = await (async () => {
 			try {
 				var _usingCtx$1 = _usingCtx();
 				const _spinner$1 = _usingCtx$1.u(acquireRelease(() => ora("Fetching sessions...").start(), (s$1) => s$1.stop()));
-				return sandbox.listSessions();
+				return sandbox.listSessions({ ...sortOrder && { sortOrder } });
 			} catch (_) {
 				_usingCtx$1.e = _;
 			} finally {
 				_usingCtx$1.d();
 			}
-		})()).json.sandboxes;
+		})();
+		if (!all) sessions$1 = sessions$1.filter((x) => x.status === "running");
+		const memoryFormatter = new Intl.NumberFormat(void 0, {
+			style: "unit",
+			unit: "megabyte"
+		});
+		const columns = {
+			ID: { value: (s$1) => s$1.id },
+			STATUS: {
+				value: (s$1) => s$1.status,
+				color: (s$1) => SessionStatusColor[s$1.status] ?? source_default.reset
+			},
+			CREATED: { value: (s$1) => timeAgo(s$1.createdAt) },
+			MEMORY: { value: (s$1) => memoryFormatter.format(s$1.memory) },
+			VCPUS: { value: (s$1) => s$1.vcpus },
+			RUNTIME: { value: (s$1) => s$1.runtime },
+			TIMEOUT: { value: (s$1) => timeAgo(s$1.createdAt + s$1.timeout) },
+			DURATION: { value: (s$1) => s$1.duration ? formatRunDuration(s$1.duration) : "-" },
+			SNAPSHOT: { value: (s$1) => s$1.sourceSnapshotId ?? "-" }
+		};
+		if (all) {
+			columns.CPU = { value: (s$1) => s$1.activeCpuDurationMs ? formatRunDuration(s$1.activeCpuDurationMs) : "-" };
+			columns["NETWORK (OUT/IN)"] = { value: (s$1) => s$1.networkTransfer?.egress || s$1.networkTransfer?.ingress ? `${formatBytes(s$1.networkTransfer?.egress ?? 0)} / ${formatBytes(s$1.networkTransfer?.ingress ?? 0)}` : "- / -" };
+		}
 		console.log(table({
 			rows: sessions$1,
-			columns: {
-				ID: { value: (s$1) => s$1.id },
-				STATUS: {
-					value: (s$1) => s$1.status,
-					color: (s$1) => SessionStatusColor[s$1.status] ?? source_default.reset
-				},
-				CREATED: { value: (s$1) => timeAgo(s$1.createdAt) },
-				MEMORY: { value: (s$1) => s$1.memory },
-				VCPUS: { value: (s$1) => s$1.vcpus },
-				RUNTIME: { value: (s$1) => s$1.runtime },
-				TIMEOUT: { value: (s$1) => timeAgo(s$1.createdAt + s$1.timeout) },
-				DURATION: { value: (s$1) => s$1.duration ? formatRunDuration(s$1.duration) : "-" }
-			}
+			columns
 		}));
 	}
 });
@@ -14729,37 +14826,54 @@ const SessionStatusColor = {
 var import_cjs$1 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
 var import_ms = /* @__PURE__ */ __toESM(require_ms());
-const setCommand = import_cjs$1.command({
-	name: "set",
-	description: "Update the configuration of a sandbox",
+const vcpusCommand = import_cjs$1.command({
+	name: "vcpus",
+	description: "Update the vCPU count of a sandbox",
 	args: {
 		sandbox: import_cjs$1.positional({
 			type: sandboxName,
 			description: "Sandbox name to update"
 		}),
-		vcpus,
-		runtime: import_cjs$1.option({
-			long: "runtime",
-			type: import_cjs$1.optional(runtimeType),
-			description: "Runtime to use: node22, node24, or python3.13"
+		count: import_cjs$1.positional({
+			type: vcpusType,
+			description: "Number of vCPUs to allocate (each vCPU includes 2048 MB of memory)"
 		}),
-		timeout: import_cjs$1.option({
-			long: "timeout",
-			type: import_cjs$1.optional(Duration),
+		scope
+	},
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandbox: name, count }) {
+		const sandbox = await sandboxClient.get({
+			name,
+			projectId: project$1,
+			teamId: team$1,
+			token: token$1
+		});
+		const spinner = ora("Updating sandbox configuration...").start();
+		try {
+			await sandbox.update({ resources: { vcpus: count } });
+			spinner.stop();
+			process.stderr.write("✅ Configuration updated for sandbox " + source_default.cyan(name) + "\n");
+			process.stderr.write(source_default.dim("   ╰ ") + "vcpus: " + source_default.cyan(count) + "\n");
+		} catch (error) {
+			spinner.stop();
+			throw error;
+		}
+	}
+});
+const timeoutCommand = import_cjs$1.command({
+	name: "timeout",
+	description: "Update the timeout of a sandbox (will be applied to all new sessions)",
+	args: {
+		sandbox: import_cjs$1.positional({
+			type: sandboxName,
+			description: "Sandbox name to update"
+		}),
+		duration: import_cjs$1.positional({
+			type: Duration,
 			description: "The maximum duration a sandbox can run for. Example: 5m, 1h"
 		}),
-		...networkPolicyArgs,
 		scope
 	},
-	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandbox: name, vcpus: vcpus$1, runtime: runtime$1, timeout: timeout$1, networkPolicy: networkPolicyMode$1, allowedDomains: allowedDomains$1, allowedCIDRs: allowedCIDRs$1, deniedCIDRs: deniedCIDRs$1 }) {
-		const hasNetworkPolicyArgs = networkPolicyMode$1 !== void 0 || allowedDomains$1.length > 0 || allowedCIDRs$1.length > 0 || deniedCIDRs$1.length > 0;
-		if (vcpus$1 === void 0 && runtime$1 === void 0 && timeout$1 === void 0 && !hasNetworkPolicyArgs) throw new Error([`At least one option must be provided.`, `${source_default.bold("hint:")} Use --vcpus, --runtime, --timeout, or --network-policy to update the sandbox configuration.`].join("\n"));
-		const networkPolicy$1 = hasNetworkPolicyArgs ? buildNetworkPolicy({
-			networkPolicy: networkPolicyMode$1,
-			allowedDomains: allowedDomains$1,
-			allowedCIDRs: allowedCIDRs$1,
-			deniedCIDRs: deniedCIDRs$1
-		}) : void 0;
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandbox: name, duration }) {
 		const sandbox = await sandboxClient.get({
 			name,
 			projectId: project$1,
@@ -14768,21 +14882,54 @@ const setCommand = import_cjs$1.command({
 		});
 		const spinner = ora("Updating sandbox configuration...").start();
 		try {
-			await sandbox.update({
-				...vcpus$1 !== void 0 && { resources: { vcpus: vcpus$1 } },
-				...runtime$1 !== void 0 && { runtime: runtime$1 },
-				...timeout$1 !== void 0 && { timeout: (0, import_ms.default)(timeout$1) },
-				...networkPolicy$1 !== void 0 && { networkPolicy: networkPolicy$1 }
-			});
-			spinner.succeed("Configuration updated for sandbox " + source_default.cyan(name));
+			await sandbox.update({ timeout: (0, import_ms.default)(duration) });
+			spinner.stop();
+			process.stderr.write("✅ Configuration updated for sandbox " + source_default.cyan(name) + "\n");
+			process.stderr.write(source_default.dim("   ╰ ") + "timeout: " + source_default.cyan(duration) + "\n");
 		} catch (error) {
 			spinner.stop();
 			throw error;
 		}
 	}
 });
-const getCommand = import_cjs$1.command({
-	name: "get",
+const persistentCommand = import_cjs$1.command({
+	name: "persistent",
+	description: "Enable or disable automatic restore of the filesystem between sessions",
+	args: {
+		sandbox: import_cjs$1.positional({
+			type: sandboxName,
+			description: "Sandbox name to update"
+		}),
+		value: import_cjs$1.positional({
+			type: {
+				...import_cjs$1.oneOf(["true", "false"]),
+				displayName: "true|false"
+			},
+			description: "Enable or disable automatic restore of the filesystem between sessions"
+		}),
+		scope
+	},
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandbox: name, value }) {
+		const sandbox = await sandboxClient.get({
+			name,
+			projectId: project$1,
+			teamId: team$1,
+			token: token$1
+		});
+		const spinner = ora("Updating sandbox configuration...").start();
+		try {
+			await sandbox.update({ persistent: value === "true" });
+			spinner.stop();
+			process.stderr.write("✅ Configuration updated for sandbox " + source_default.cyan(name) + "\n");
+			process.stderr.write(source_default.dim("   ╰ ") + "persistent: " + source_default.cyan(value) + "\n");
+		} catch (error) {
+			spinner.stop();
+			throw error;
+		}
+	}
+});
+const listCommand = import_cjs$1.command({
+	name: "list",
 	description: "Display the current configuration of a sandbox",
 	args: {
 		sandbox: import_cjs$1.positional({
@@ -14808,30 +14955,28 @@ const getCommand = import_cjs$1.command({
 				_usingCtx$1.d();
 			}
 		})();
-		const memoryFormatter = new Intl.NumberFormat(void 0, {
-			style: "unit",
-			unit: "megabyte"
-		});
+		const networkPolicy$1 = typeof sandbox.networkPolicy === "string" ? sandbox.networkPolicy : "restricted";
+		const tagsDisplay = sandbox.tags && Object.keys(sandbox.tags).length > 0 ? Object.entries(sandbox.tags).map(([k, v]) => `${k}=${v}`).join(", ") : "-";
 		const rows = [
 			{
-				field: "Runtime",
-				value: sandbox.runtime
+				field: "vCPUs",
+				value: String(sandbox.vcpus ?? "-")
 			},
 			{
-				field: "vCPUs",
-				value: String(sandbox.vcpus)
+				field: "Timeout",
+				value: sandbox.timeout != null ? (0, import_ms.default)(sandbox.timeout, { long: true }) : "-"
 			},
 			{
-				field: "Memory",
-				value: memoryFormatter.format(sandbox.memory)
+				field: "Persistent",
+				value: String(sandbox.persistent)
 			},
 			{
-				field: "Timeout",
-				value: (0, import_ms.default)(sandbox.timeout, { long: true })
+				field: "Network policy",
+				value: String(networkPolicy$1)
 			},
 			{
-				field: "Region",
-				value: sandbox.region
+				field: "Tags",
+				value: tagsDisplay
 			}
 		];
 		console.log(table({
@@ -14848,8 +14993,7 @@ const getCommand = import_cjs$1.command({
 });
 const networkPolicyCommand = import_cjs$1.command({
 	name: "network-policy",
-	description: `Update the network policy of a sandbox.
-  This will fully override the previous configuration.`,
+	description: `Update the network policy of a sandbox`,
 	args: {
 		sandbox: import_cjs$1.positional({ type: sandboxName }),
 		...networkPolicyArgs,
@@ -14861,7 +15005,6 @@ const networkPolicyCommand = import_cjs$1.command({
 		scope
 	},
 	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandbox: sandboxName$1, networkPolicy: networkPolicyFlag, mode: modeFlag, allowedDomains: allowedDomains$1, allowedCIDRs: allowedCIDRs$1, deniedCIDRs: deniedCIDRs$1 }) {
-		process.stderr.write(source_default.yellow("Warning: 'config network-policy' is deprecated. Use 'config set --network-policy=...' instead.\n"));
 		const networkPolicyMode$1 = resolveMode(networkPolicyFlag, modeFlag);
 		if (networkPolicyMode$1 === void 0 && allowedDomains$1.length === 0 && allowedCIDRs$1.length === 0 && deniedCIDRs$1.length === 0) throw new Error(`Network policy mode or custom rules must be set.`);
 		const networkPolicy$1 = buildNetworkPolicy({
@@ -14878,10 +15021,10 @@ const networkPolicyCommand = import_cjs$1.command({
 		});
 		const spinner = ora("Updating network policy...").start();
 		try {
-			const response = await sandbox.updateNetworkPolicy(networkPolicy$1);
+			await sandbox.update({ networkPolicy: networkPolicy$1 });
 			spinner.stop();
 			process.stderr.write("✅ Network policy updated for sandbox " + source_default.cyan(sandbox.name) + "\n");
-			const mode = typeof response === "string" ? response : "restricted";
+			const mode = typeof networkPolicy$1 === "string" ? networkPolicy$1 : "restricted";
 			process.stderr.write(source_default.dim("   ╰ ") + "mode: " + source_default.cyan(mode) + "\n");
 		} catch (error) {
 			spinner.stop();
@@ -14889,13 +15032,58 @@ const networkPolicyCommand = import_cjs$1.command({
 		}
 	}
 });
+const tagsCommand = import_cjs$1.command({
+	name: "tags",
+	description: "Update the tags of a sandbox. Replaces all existing tags with the provided tags.",
+	args: {
+		sandbox: import_cjs$1.positional({
+			type: sandboxName,
+			description: "Sandbox name to update"
+		}),
+		tags: import_cjs$1.multioption({
+			long: "tag",
+			short: "t",
+			type: ObjectFromKeyValue,
+			description: "Key-value tags to set (e.g. --tag env=staging). Omit to clear all tags."
+		}),
+		scope
+	},
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandbox: name, tags }) {
+		const sandbox = await sandboxClient.get({
+			name,
+			projectId: project$1,
+			teamId: team$1,
+			token: token$1
+		});
+		const tagsObj = Object.keys(tags).length > 0 ? tags : {};
+		const spinner = ora("Updating sandbox tags...").start();
+		try {
+			await sandbox.update({ tags: tagsObj });
+			spinner.stop();
+			process.stderr.write("✅ Tags updated for sandbox " + source_default.cyan(name) + "\n");
+			const entries$1 = Object.entries(tagsObj);
+			if (entries$1.length === 0) process.stderr.write(source_default.dim("   ╰ ") + "all tags cleared\n");
+			else for (let i = 0; i < entries$1.length; i++) {
+				const [k, v] = entries$1[i];
+				const prefix$1 = i === entries$1.length - 1 ? source_default.dim("   ╰ ") : source_default.dim("   │ ");
+				process.stderr.write(prefix$1 + source_default.cyan(k) + "=" + source_default.cyan(v) + "\n");
+			}
+		} catch (error) {
+			spinner.stop();
+			throw error;
+		}
+	}
+});
 const config = import_cjs$1.subcommands({
 	name: "config",
 	description: "View and update sandbox configuration",
 	cmds: {
-		set: setCommand,
-		get: getCommand,
-		"network-policy": networkPolicyCommand
+		list: listCommand,
+		vcpus: vcpusCommand,
+		timeout: timeoutCommand,
+		persistent: persistentCommand,
+		"network-policy": networkPolicyCommand,
+		tags: tagsCommand
 	}
 });
 
@@ -14942,4 +15130,4 @@ const app = (opts) => (0, import_cjs.subcommands)({
 
 //#endregion
 export { source_exports as a, init_source as i, StyledError as n, require_cjs as r, app as t };
-//# sourceMappingURL=app-AqqXdE-N.mjs.map
+//# sourceMappingURL=app-BAkG8Wcx.mjs.map