sandbox 3.0.0-beta.2 → 3.0.0-beta.20

package/dist/{app-BbpAiciu.mjs → app-DfdLC3Kn.mjs}

@@ -15,7 +15,7 @@ import childProcess, { execFile } from "node:child_process";
 import fs, { constants, writeFile } from "node:fs/promises";
 import fs$1, { createWriteStream } from "node:fs";
 import * as Auth from "@vercel/sandbox/dist/auth/index.js";
-import { OAuth, getAuth, pollForToken, updateAuthConfig } from "@vercel/sandbox/dist/auth/index.js";
+import { OAuth, getAuth, inferScope, pollForToken, updateAuthConfig } from "@vercel/sandbox/dist/auth/index.js";
 import { EOL } from "os";
 import { z } from "zod/v4";
 import { z as z$1 } from "zod";
@@ -295,30 +295,30 @@ var init_supports_color = __esm({ "../../node_modules/.pnpm/chalk@5.6.0/node_mod
 
 //#endregion
 //#region ../../node_modules/.pnpm/chalk@5.6.0/node_modules/chalk/source/utilities.js
-function stringReplaceAll(string$1, substring, replacer) {
-	let index = string$1.indexOf(substring);
-	if (index === -1) return string$1;
+function stringReplaceAll(string$2, substring, replacer) {
+	let index = string$2.indexOf(substring);
+	if (index === -1) return string$2;
 	const substringLength = substring.length;
 	let endIndex = 0;
 	let returnValue = "";
 	do {
-		returnValue += string$1.slice(endIndex, index) + substring + replacer;
+		returnValue += string$2.slice(endIndex, index) + substring + replacer;
 		endIndex = index + substringLength;
-		index = string$1.indexOf(substring, endIndex);
+		index = string$2.indexOf(substring, endIndex);
 	} while (index !== -1);
-	returnValue += string$1.slice(endIndex);
+	returnValue += string$2.slice(endIndex);
 	return returnValue;
 }
-function stringEncaseCRLFWithFirstIndex(string$1, prefix$1, postfix, index) {
+function stringEncaseCRLFWithFirstIndex(string$2, prefix$1, postfix, index) {
 	let endIndex = 0;
 	let returnValue = "";
 	do {
-		const gotCR = string$1[index - 1] === "\r";
-		returnValue += string$1.slice(endIndex, gotCR ? index - 1 : index) + prefix$1 + (gotCR ? "\r\n" : "\n") + postfix;
+		const gotCR = string$2[index - 1] === "\r";
+		returnValue += string$2.slice(endIndex, gotCR ? index - 1 : index) + prefix$1 + (gotCR ? "\r\n" : "\n") + postfix;
 		endIndex = index + 1;
-		index = string$1.indexOf("\n", endIndex);
+		index = string$2.indexOf("\n", endIndex);
 	} while (index !== -1);
-	returnValue += string$1.slice(endIndex);
+	returnValue += string$2.slice(endIndex);
 	return returnValue;
 }
 var init_utilities = __esm({ "../../node_modules/.pnpm/chalk@5.6.0/node_modules/chalk/source/utilities.js": (() => {}) });
@@ -454,18 +454,18 @@ var init_source = __esm({ "../../node_modules/.pnpm/chalk@5.6.0/node_modules/cha
 		builder[IS_EMPTY] = _isEmpty;
 		return builder;
 	};
-	applyStyle = (self, string$1) => {
-		if (self.level <= 0 || !string$1) return self[IS_EMPTY] ? "" : string$1;
+	applyStyle = (self, string$2) => {
+		if (self.level <= 0 || !string$2) return self[IS_EMPTY] ? "" : string$2;
 		let styler = self[STYLER];
-		if (styler === void 0) return string$1;
+		if (styler === void 0) return string$2;
 		const { openAll, closeAll } = styler;
-		if (string$1.includes("\x1B")) while (styler !== void 0) {
-			string$1 = stringReplaceAll(string$1, styler.close, styler.open);
+		if (string$2.includes("\x1B")) while (styler !== void 0) {
+			string$2 = stringReplaceAll(string$2, styler.close, styler.open);
 			styler = styler.parent;
 		}
-		const lfIndex = string$1.indexOf("\n");
-		if (lfIndex !== -1) string$1 = stringEncaseCRLFWithFirstIndex(string$1, closeAll, openAll, lfIndex);
-		return openAll + string$1 + closeAll;
+		const lfIndex = string$2.indexOf("\n");
+		if (lfIndex !== -1) string$2 = stringEncaseCRLFWithFirstIndex(string$2, closeAll, openAll, lfIndex);
+		return openAll + string$2 + closeAll;
 	};
 	Object.defineProperties(createChalk.prototype, styles);
 	chalk = createChalk();
@@ -689,7 +689,7 @@ var require_type = /* @__PURE__ */ __commonJS$1({ "../../node_modules/.pnpm/cmd-
 	exports.identity = void 0;
 	exports.typeDef = typeDef;
 	exports.fromFn = fromFn;
-	exports.extendType = extendType$1;
+	exports.extendType = extendType$2;
 	var from_1 = require_from();
 	Object.defineProperty(exports, "identity", {
 		enumerable: true,
@@ -721,7 +721,7 @@ var require_type = /* @__PURE__ */ __commonJS$1({ "../../node_modules/.pnpm/cmd-
 	* @param base A base type from `InputA` to `OutputA`
 	* @param nextTypeOrDecodingFunction Either an entire `Type<OutputA, AnyOutput>` or just a decoding function from `OutputA` to any type
 	*/
-	function extendType$1(base, nextTypeOrDecodingFunction) {
+	function extendType$2(base, nextTypeOrDecodingFunction) {
 		const { defaultValue: _defaultValue, onMissing: _onMissing, from: _from, ...t1WithoutDefault } = base;
 		const t2Object = typeDef(nextTypeOrDecodingFunction);
 		const t2From = fromFn(nextTypeOrDecodingFunction);
@@ -2200,8 +2200,8 @@ var require_tokenizer = /* @__PURE__ */ __commonJS$1({ "../../node_modules/.pnpm
 			tokens.push(token$1);
 			overallIndex += token$1.raw.length;
 		};
-		for (const [stringIndex, string$1] of (0, utils_1.enumerate)(strings)) {
-			const chars = [...string$1];
+		for (const [stringIndex, string$2] of (0, utils_1.enumerate)(strings)) {
+			const chars = [...string$2];
 			for (let i = 0; i < chars.length; i++) if (chars[i] === "-" && chars[i + 1] === "-") {
 				push$1({
 					type: "longPrefix",
@@ -2997,16 +2997,16 @@ var require_cjs = /* @__PURE__ */ __commonJS$1({ "../../node_modules/.pnpm/cmd-t
 
 //#endregion
 //#region src/args/runtime.ts
-var import_cjs$26 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$27 = /* @__PURE__ */ __toESM(require_cjs());
 const runtimeType = {
-	...import_cjs$26.oneOf([
+	...import_cjs$27.oneOf([
 		"node22",
 		"node24",
 		"python3.13"
 	]),
 	displayName: "runtime"
 };
-const runtime = import_cjs$26.option({
+const runtime = import_cjs$27.option({
 	long: "runtime",
 	type: runtimeType,
 	defaultValue: () => "node24",
@@ -3134,15 +3134,15 @@ var require_ms = /* @__PURE__ */ __commonJS$1({ "../../node_modules/.pnpm/ms@2.1
 
 //#endregion
 //#region src/types/duration.ts
-var import_cjs$25 = require_cjs();
+var import_cjs$26 = require_cjs();
 init_source();
-const Duration = (0, import_cjs$25.extendType)(import_cjs$25.string, {
+const Duration = (0, import_cjs$26.extendType)(import_cjs$26.string, {
 	displayName: "num UNIT",
 	description: "A duration, e.g. 5m, 10s, 1h",
-	async from(string$1) {
-		const match$1 = string$1.match(/^(\d+) ?(ms|milliseconds?|msecs?|s(?:econds?)?|m(?:inutes?)?|h(?:ours?)?|d(?:ays?)?)?$/);
+	async from(string$2) {
+		const match$1 = string$2.match(/^(\d+) ?(ms|milliseconds?|msecs?|s(?:econds?)?|m(?:inutes?)?|h(?:ours?)?|d(?:ays?)?)?$/);
 		if (!match$1) throw new Error([
-			`Malformed duration: "${string$1}".`,
+			`Malformed duration: "${string$2}".`,
 			`${source_default.bold("hint:")} Use a number followed by a unit: s (seconds), m (minutes), h (hours), d (days).`,
 			"╰▶ Examples: 30s, 5m, 2h, 1d"
 		].join("\n"));
@@ -3152,28 +3152,28 @@ const Duration = (0, import_cjs$25.extendType)(import_cjs$25.string, {
 
 //#endregion
 //#region src/args/timeout.ts
-var import_cjs$24 = /* @__PURE__ */ __toESM(require_cjs());
-const timeout = import_cjs$24.option({
+var import_cjs$25 = /* @__PURE__ */ __toESM(require_cjs());
+const timeout = import_cjs$25.option({
 	long: "timeout",
 	type: Duration,
-	description: "The maximum duration a sandbox can run for. Example: 5m, 1h",
+	description: "The maximum duration a sandbox can run for. Example: 5m, 30m",
 	defaultValue: () => "5 minutes",
 	defaultValueIsSerializable: true
 });
 
 //#endregion
 //#region src/args/vcpus.ts
-var import_cjs$23 = /* @__PURE__ */ __toESM(require_cjs());
-const vcpusType = import_cjs$23.extendType(import_cjs$23.number, {
+var import_cjs$24 = /* @__PURE__ */ __toESM(require_cjs());
+const vcpusType = import_cjs$24.extendType(import_cjs$24.number, {
 	displayName: "COUNT",
 	async from(n) {
 		if (!Number.isInteger(n) || n < 1) throw new Error(`Invalid vCPU count: ${n}. Must be a positive integer.`);
 		return n;
 	}
 });
-const vcpus = import_cjs$23.option({
+const vcpus = import_cjs$24.option({
 	long: "vcpus",
-	type: import_cjs$23.optional(vcpusType),
+	type: import_cjs$24.optional(vcpusType),
 	description: "Number of vCPUs to allocate (each vCPU includes 2048 MB of memory)"
 });
 
@@ -3242,7 +3242,7 @@ const formatDistanceLocale = {
 		other: "almost {{count}} years"
 	}
 };
-const formatDistance$1 = (token$1, count, options) => {
+const formatDistance = (token$1, count, options) => {
 	let result;
 	const tokenValue = formatDistanceLocale[token$1];
 	if (typeof tokenValue === "string") result = tokenValue;
@@ -3573,10 +3573,10 @@ const localize = {
 //#endregion
 //#region ../../node_modules/.pnpm/date-fns@4.1.0/node_modules/date-fns/locale/_lib/buildMatchFn.js
 function buildMatchFn(args$4) {
-	return (string$1, options = {}) => {
+	return (string$2, options = {}) => {
 		const width = options.width;
 		const matchPattern = width && args$4.matchPatterns[width] || args$4.matchPatterns[args$4.defaultMatchWidth];
-		const matchResult = string$1.match(matchPattern);
+		const matchResult = string$2.match(matchPattern);
 		if (!matchResult) return null;
 		const matchedString = matchResult[0];
 		const parsePatterns = width && args$4.parsePatterns[width] || args$4.parsePatterns[args$4.defaultParseWidth];
@@ -3584,7 +3584,7 @@ function buildMatchFn(args$4) {
 		let value;
 		value = args$4.valueCallback ? args$4.valueCallback(key) : key;
 		value = options.valueCallback ? options.valueCallback(value) : value;
-		const rest$1 = string$1.slice(matchedString.length);
+		const rest$1 = string$2.slice(matchedString.length);
 		return {
 			value,
 			rest: rest$1
@@ -3601,15 +3601,15 @@ function findIndex(array$1, predicate) {
 //#endregion
 //#region ../../node_modules/.pnpm/date-fns@4.1.0/node_modules/date-fns/locale/_lib/buildMatchPatternFn.js
 function buildMatchPatternFn(args$4) {
-	return (string$1, options = {}) => {
-		const matchResult = string$1.match(args$4.matchPattern);
+	return (string$2, options = {}) => {
+		const matchResult = string$2.match(args$4.matchPattern);
 		if (!matchResult) return null;
 		const matchedString = matchResult[0];
-		const parseResult = string$1.match(args$4.parsePattern);
+		const parseResult = string$2.match(args$4.parsePattern);
 		if (!parseResult) return null;
 		let value = args$4.valueCallback ? args$4.valueCallback(parseResult[0]) : parseResult[0];
 		value = options.valueCallback ? options.valueCallback(value) : value;
-		const rest$1 = string$1.slice(matchedString.length);
+		const rest$1 = string$2.slice(matchedString.length);
 		return {
 			value,
 			rest: rest$1
@@ -3764,7 +3764,7 @@ const match = {
 */
 const enUS = {
 	code: "en-US",
-	formatDistance: formatDistance$1,
+	formatDistance,
 	formatLong,
 	formatRelative,
 	localize,
@@ -3782,6 +3782,15 @@ function getDefaultOptions() {
 	return defaultOptions;
 }
 
+//#endregion
+//#region ../../node_modules/.pnpm/date-fns@4.1.0/node_modules/date-fns/_lib/getRoundingMethod.js
+function getRoundingMethod(method) {
+	return (number) => {
+		const result = (method ? Math[method] : Math.trunc)(number);
+		return result === 0 ? 0 : result;
+	};
+}
+
 //#endregion
 //#region ../../node_modules/.pnpm/date-fns@4.1.0/node_modules/date-fns/constants.js
 /**
@@ -3815,6 +3824,18 @@ const daysInYear = 365.2425;
 const maxTime = Math.pow(10, 8) * 24 * 60 * 60 * 1e3;
 /**
 * @constant
+* @name millisecondsInMinute
+* @summary Milliseconds in 1 minute
+*/
+const millisecondsInMinute = 6e4;
+/**
+* @constant
+* @name minutesInYear
+* @summary Minutes in 1 year.
+*/
+const minutesInYear = 525600;
+/**
+* @constant
 * @name minutesInMonth
 * @summary Minutes in 1 month.
 */
@@ -4031,277 +4052,31 @@ function compareAsc(dateLeft, dateRight) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/date-fns@4.1.0/node_modules/date-fns/differenceInCalendarMonths.js
-/**
-* The {@link differenceInCalendarMonths} function options.
-*/
-/**
-* @name differenceInCalendarMonths
-* @category Month Helpers
-* @summary Get the number of calendar months between the given dates.
-*
-* @description
-* Get the number of calendar months between the given dates.
-*
-* @param laterDate - The later date
-* @param earlierDate - The earlier date
-* @param options - An object with options
-*
-* @returns The number of calendar months
-*
-* @example
-* // How many calendar months are between 31 January 2014 and 1 September 2014?
-* const result = differenceInCalendarMonths(
-*   new Date(2014, 8, 1),
-*   new Date(2014, 0, 31)
-* )
-* //=> 8
-*/
-function differenceInCalendarMonths(laterDate, earlierDate, options) {
-	const [laterDate_, earlierDate_] = normalizeDates(options?.in, laterDate, earlierDate);
-	const yearsDiff = laterDate_.getFullYear() - earlierDate_.getFullYear();
-	const monthsDiff = laterDate_.getMonth() - earlierDate_.getMonth();
-	return yearsDiff * 12 + monthsDiff;
-}
-
-//#endregion
-//#region ../../node_modules/.pnpm/date-fns@4.1.0/node_modules/date-fns/endOfDay.js
-/**
-* The {@link endOfDay} function options.
-*/
-/**
-* @name endOfDay
-* @category Day Helpers
-* @summary Return the end of a day for the given date.
-*
-* @description
-* Return the end of a day for the given date.
-* The result will be in the local timezone.
-*
-* @typeParam DateType - The `Date` type, the function operates on. Gets inferred from passed arguments. Allows to use extensions like [`UTCDate`](https://github.com/date-fns/utc).
-* @typeParam ResultDate - The result `Date` type, it is the type returned from the context function if it is passed, or inferred from the arguments.
-*
-* @param date - The original date
-* @param options - An object with options
-*
-* @returns The end of a day
-*
-* @example
-* // The end of a day for 2 September 2014 11:55:00:
-* const result = endOfDay(new Date(2014, 8, 2, 11, 55, 0))
-* //=> Tue Sep 02 2014 23:59:59.999
-*/
-function endOfDay(date, options) {
-	const _date = toDate(date, options?.in);
-	_date.setHours(23, 59, 59, 999);
-	return _date;
-}
-
-//#endregion
-//#region ../../node_modules/.pnpm/date-fns@4.1.0/node_modules/date-fns/endOfMonth.js
-/**
-* The {@link endOfMonth} function options.
-*/
-/**
-* @name endOfMonth
-* @category Month Helpers
-* @summary Return the end of a month for the given date.
-*
-* @description
-* Return the end of a month for the given date.
-* The result will be in the local timezone.
-*
-* @typeParam DateType - The `Date` type, the function operates on. Gets inferred from passed arguments. Allows to use extensions like [`UTCDate`](https://github.com/date-fns/utc).
-* @typeParam ResultDate - The result `Date` type, it is the type returned from the context function if it is passed, or inferred from the arguments.
-*
-* @param date - The original date
-* @param options - An object with options
-*
-* @returns The end of a month
-*
-* @example
-* // The end of a month for 2 September 2014 11:55:00:
-* const result = endOfMonth(new Date(2014, 8, 2, 11, 55, 0))
-* //=> Tue Sep 30 2014 23:59:59.999
-*/
-function endOfMonth(date, options) {
-	const _date = toDate(date, options?.in);
-	const month = _date.getMonth();
-	_date.setFullYear(_date.getFullYear(), month + 1, 0);
-	_date.setHours(23, 59, 59, 999);
-	return _date;
-}
-
-//#endregion
-//#region ../../node_modules/.pnpm/date-fns@4.1.0/node_modules/date-fns/isLastDayOfMonth.js
-/**
-* @name isLastDayOfMonth
-* @category Month Helpers
-* @summary Is the given date the last day of a month?
-*
-* @description
-* Is the given date the last day of a month?
-*
-* @param date - The date to check
-* @param options - An object with options
-*
-* @returns The date is the last day of a month
-*
-* @example
-* // Is 28 February 2014 the last day of a month?
-* const result = isLastDayOfMonth(new Date(2014, 1, 28))
-* //=> true
-*/
-function isLastDayOfMonth(date, options) {
-	const _date = toDate(date, options?.in);
-	return +endOfDay(_date, options) === +endOfMonth(_date, options);
-}
-
-//#endregion
-//#region ../../node_modules/.pnpm/date-fns@4.1.0/node_modules/date-fns/differenceInMonths.js
-/**
-* The {@link differenceInMonths} function options.
-*/
-/**
-* @name differenceInMonths
-* @category Month Helpers
-* @summary Get the number of full months between the given dates.
-*
-* @param laterDate - The later date
-* @param earlierDate - The earlier date
-* @param options - An object with options
-*
-* @returns The number of full months
-*
-* @example
-* // How many full months are between 31 January 2014 and 1 September 2014?
-* const result = differenceInMonths(new Date(2014, 8, 1), new Date(2014, 0, 31))
-* //=> 7
-*/
-function differenceInMonths(laterDate, earlierDate, options) {
-	const [laterDate_, workingLaterDate, earlierDate_] = normalizeDates(options?.in, laterDate, laterDate, earlierDate);
-	const sign = compareAsc(workingLaterDate, earlierDate_);
-	const difference = Math.abs(differenceInCalendarMonths(workingLaterDate, earlierDate_));
-	if (difference < 1) return 0;
-	if (workingLaterDate.getMonth() === 1 && workingLaterDate.getDate() > 27) workingLaterDate.setDate(30);
-	workingLaterDate.setMonth(workingLaterDate.getMonth() - sign * difference);
-	let isLastMonthNotFull = compareAsc(workingLaterDate, earlierDate_) === -sign;
-	if (isLastDayOfMonth(laterDate_) && difference === 1 && compareAsc(laterDate_, earlierDate_) === 1) isLastMonthNotFull = false;
-	const result = sign * (difference - +isLastMonthNotFull);
-	return result === 0 ? 0 : result;
-}
-
-//#endregion
-//#region ../../node_modules/.pnpm/date-fns@4.1.0/node_modules/date-fns/_lib/getRoundingMethod.js
-function getRoundingMethod(method) {
-	return (number) => {
-		const result = (method ? Math[method] : Math.trunc)(number);
-		return result === 0 ? 0 : result;
-	};
-}
-
-//#endregion
-//#region ../../node_modules/.pnpm/date-fns@4.1.0/node_modules/date-fns/differenceInMilliseconds.js
+//#region ../../node_modules/.pnpm/date-fns@4.1.0/node_modules/date-fns/formatDistanceStrict.js
 /**
-* @name differenceInMilliseconds
-* @category Millisecond Helpers
-* @summary Get the number of milliseconds between the given dates.
-*
-* @description
-* Get the number of milliseconds between the given dates.
-*
-* @param laterDate - The later date
-* @param earlierDate - The earlier date
-*
-* @returns The number of milliseconds
-*
-* @example
-* // How many milliseconds are between
-* // 2 July 2014 12:30:20.600 and 2 July 2014 12:30:21.700?
-* const result = differenceInMilliseconds(
-*   new Date(2014, 6, 2, 12, 30, 21, 700),
-*   new Date(2014, 6, 2, 12, 30, 20, 600)
-* )
-* //=> 1100
+* The {@link formatDistanceStrict} function options.
 */
-function differenceInMilliseconds(laterDate, earlierDate) {
-	return +toDate(laterDate) - +toDate(earlierDate);
-}
-
-//#endregion
-//#region ../../node_modules/.pnpm/date-fns@4.1.0/node_modules/date-fns/differenceInSeconds.js
 /**
-* The {@link differenceInSeconds} function options.
+* The unit used to format the distance in {@link formatDistanceStrict}.
 */
 /**
-* @name differenceInSeconds
-* @category Second Helpers
-* @summary Get the number of seconds between the given dates.
-*
-* @description
-* Get the number of seconds between the given dates.
-*
-* @param laterDate - The later date
-* @param earlierDate - The earlier date
-* @param options - An object with options.
-*
-* @returns The number of seconds
-*
-* @example
-* // How many seconds are between
-* // 2 July 2014 12:30:07.999 and 2 July 2014 12:30:20.000?
-* const result = differenceInSeconds(
-*   new Date(2014, 6, 2, 12, 30, 20, 0),
-*   new Date(2014, 6, 2, 12, 30, 7, 999)
-* )
-* //=> 12
-*/
-function differenceInSeconds(laterDate, earlierDate, options) {
-	const diff = differenceInMilliseconds(laterDate, earlierDate) / 1e3;
-	return getRoundingMethod(options?.roundingMethod)(diff);
-}
-
-//#endregion
-//#region ../../node_modules/.pnpm/date-fns@4.1.0/node_modules/date-fns/formatDistance.js
-/**
-* The {@link formatDistance} function options.
-*/
-/**
-* @name formatDistance
+* @name formatDistanceStrict
 * @category Common Helpers
 * @summary Return the distance between the given dates in words.
 *
 * @description
-* Return the distance between the given dates in words.
+* Return the distance between the given dates in words, using strict units.
+* This is like `formatDistance`, but does not use helpers like 'almost', 'over',
+* 'less than' and the like.
 *
-* | Distance between dates                                            | Result              |
-* |-------------------------------------------------------------------|---------------------|
-* | 0 ... 30 secs                                                     | less than a minute  |
-* | 30 secs ... 1 min 30 secs                                         | 1 minute            |
-* | 1 min 30 secs ... 44 mins 30 secs                                 | [2..44] minutes     |
-* | 44 mins ... 30 secs ... 89 mins 30 secs                           | about 1 hour        |
-* | 89 mins 30 secs ... 23 hrs 59 mins 30 secs                        | about [2..24] hours |
-* | 23 hrs 59 mins 30 secs ... 41 hrs 59 mins 30 secs                 | 1 day               |
-* | 41 hrs 59 mins 30 secs ... 29 days 23 hrs 59 mins 30 secs         | [2..30] days        |
-* | 29 days 23 hrs 59 mins 30 secs ... 44 days 23 hrs 59 mins 30 secs | about 1 month       |
-* | 44 days 23 hrs 59 mins 30 secs ... 59 days 23 hrs 59 mins 30 secs | about 2 months      |
-* | 59 days 23 hrs 59 mins 30 secs ... 1 yr                           | [2..12] months      |
-* | 1 yr ... 1 yr 3 months                                            | about 1 year        |
-* | 1 yr 3 months ... 1 yr 9 month s                                  | over 1 year         |
-* | 1 yr 9 months ... 2 yrs                                           | almost 2 years      |
-* | N yrs ... N yrs 3 months                                          | about N years       |
-* | N yrs 3 months ... N yrs 9 months                                 | over N years        |
-* | N yrs 9 months ... N+1 yrs                                        | almost N+1 years    |
-*
-* With `options.includeSeconds == true`:
-* | Distance between dates | Result               |
-* |------------------------|----------------------|
-* | 0 secs ... 5 secs      | less than 5 seconds  |
-* | 5 secs ... 10 secs     | less than 10 seconds |
-* | 10 secs ... 20 secs    | less than 20 seconds |
-* | 20 secs ... 40 secs    | half a minute        |
-* | 40 secs ... 60 secs    | less than a minute   |
-* | 60 secs ... 90 secs    | 1 minute             |
+* | Distance between dates | Result              |
+* |------------------------|---------------------|
+* | 0 ... 59 secs          | [0..59] seconds     |
+* | 1 ... 59 mins          | [1..59] minutes     |
+* | 1 ... 23 hrs           | [1..23] hours       |
+* | 1 ... 29 days          | [1..29] days        |
+* | 1 ... 11 months        | [1..11] months      |
+* | 1 ... N years          | [1..N]  years       |
 *
 * @param laterDate - The date
 * @param earlierDate - The date to compare with
@@ -4311,43 +4086,59 @@ function differenceInSeconds(laterDate, earlierDate, options) {
 *
 * @throws `date` must not be Invalid Date
 * @throws `baseDate` must not be Invalid Date
+* @throws `options.unit` must be 'second', 'minute', 'hour', 'day', 'month' or 'year'
 * @throws `options.locale` must contain `formatDistance` property
 *
 * @example
 * // What is the distance between 2 July 2014 and 1 January 2015?
-* const result = formatDistance(new Date(2014, 6, 2), new Date(2015, 0, 1))
+* const result = formatDistanceStrict(new Date(2014, 6, 2), new Date(2015, 0, 2))
 * //=> '6 months'
 *
 * @example
 * // What is the distance between 1 January 2015 00:00:15
-* // and 1 January 2015 00:00:00, including seconds?
-* const result = formatDistance(
+* // and 1 January 2015 00:00:00?
+* const result = formatDistanceStrict(
 *   new Date(2015, 0, 1, 0, 0, 15),
-*   new Date(2015, 0, 1, 0, 0, 0),
-*   { includeSeconds: true }
+*   new Date(2015, 0, 1, 0, 0, 0)
 * )
-* //=> 'less than 20 seconds'
+* //=> '15 seconds'
 *
 * @example
 * // What is the distance from 1 January 2016
 * // to 1 January 2015, with a suffix?
-* const result = formatDistance(new Date(2015, 0, 1), new Date(2016, 0, 1), {
+* const result = formatDistanceStrict(new Date(2015, 0, 1), new Date(2016, 0, 1), {
 *   addSuffix: true
 * })
-* //=> 'about 1 year ago'
+* //=> '1 year ago'
+*
+* @example
+* // What is the distance from 1 January 2016
+* // to 1 January 2015, in minutes?
+* const result = formatDistanceStrict(new Date(2016, 0, 1), new Date(2015, 0, 1), {
+*   unit: 'minute'
+* })
+* //=> '525600 minutes'
+*
+* @example
+* // What is the distance from 1 January 2015
+* // to 28 January 2015, in months, rounded up?
+* const result = formatDistanceStrict(new Date(2015, 0, 28), new Date(2015, 0, 1), {
+*   unit: 'month',
+*   roundingMethod: 'ceil'
+* })
+* //=> '1 month'
 *
 * @example
 * // What is the distance between 1 August 2016 and 1 January 2015 in Esperanto?
 * import { eoLocale } from 'date-fns/locale/eo'
-* const result = formatDistance(new Date(2016, 7, 1), new Date(2015, 0, 1), {
+* const result = formatDistanceStrict(new Date(2016, 7, 1), new Date(2015, 0, 1), {
 *   locale: eoLocale
 * })
-* //=> 'pli ol 1 jaro'
+* //=> '1 jaro'
 */
-function formatDistance(laterDate, earlierDate, options) {
+function formatDistanceStrict(laterDate, earlierDate, options) {
 	const defaultOptions$1 = getDefaultOptions();
 	const locale = options?.locale ?? defaultOptions$1.locale ?? enUS;
-	const minutesInAlmostTwoDays = 2520;
 	const comparison = compareAsc(laterDate, earlierDate);
 	if (isNaN(comparison)) throw new RangeError("Invalid time value");
 	const localizeOptions = Object.assign({}, options, {
@@ -4355,41 +4146,37 @@ function formatDistance(laterDate, earlierDate, options) {
 		comparison
 	});
 	const [laterDate_, earlierDate_] = normalizeDates(options?.in, ...comparison > 0 ? [earlierDate, laterDate] : [laterDate, earlierDate]);
-	const seconds = differenceInSeconds(earlierDate_, laterDate_);
-	const offsetInSeconds = (getTimezoneOffsetInMilliseconds(earlierDate_) - getTimezoneOffsetInMilliseconds(laterDate_)) / 1e3;
-	const minutes = Math.round((seconds - offsetInSeconds) / 60);
-	let months;
-	if (minutes < 2) if (options?.includeSeconds) if (seconds < 5) return locale.formatDistance("lessThanXSeconds", 5, localizeOptions);
-	else if (seconds < 10) return locale.formatDistance("lessThanXSeconds", 10, localizeOptions);
-	else if (seconds < 20) return locale.formatDistance("lessThanXSeconds", 20, localizeOptions);
-	else if (seconds < 40) return locale.formatDistance("halfAMinute", 0, localizeOptions);
-	else if (seconds < 60) return locale.formatDistance("lessThanXMinutes", 1, localizeOptions);
-	else return locale.formatDistance("xMinutes", 1, localizeOptions);
-	else if (minutes === 0) return locale.formatDistance("lessThanXMinutes", 1, localizeOptions);
-	else return locale.formatDistance("xMinutes", minutes, localizeOptions);
-	else if (minutes < 45) return locale.formatDistance("xMinutes", minutes, localizeOptions);
-	else if (minutes < 90) return locale.formatDistance("aboutXHours", 1, localizeOptions);
-	else if (minutes < minutesInDay) {
-		const hours = Math.round(minutes / 60);
-		return locale.formatDistance("aboutXHours", hours, localizeOptions);
-	} else if (minutes < minutesInAlmostTwoDays) return locale.formatDistance("xDays", 1, localizeOptions);
-	else if (minutes < minutesInMonth) {
-		const days = Math.round(minutes / minutesInDay);
+	const roundingMethod = getRoundingMethod(options?.roundingMethod ?? "round");
+	const milliseconds = earlierDate_.getTime() - laterDate_.getTime();
+	const minutes = milliseconds / millisecondsInMinute;
+	const dstNormalizedMinutes = (milliseconds - (getTimezoneOffsetInMilliseconds(earlierDate_) - getTimezoneOffsetInMilliseconds(laterDate_))) / millisecondsInMinute;
+	const defaultUnit = options?.unit;
+	let unit;
+	if (!defaultUnit) if (minutes < 1) unit = "second";
+	else if (minutes < 60) unit = "minute";
+	else if (minutes < minutesInDay) unit = "hour";
+	else if (dstNormalizedMinutes < minutesInMonth) unit = "day";
+	else if (dstNormalizedMinutes < minutesInYear) unit = "month";
+	else unit = "year";
+	else unit = defaultUnit;
+	if (unit === "second") {
+		const seconds = roundingMethod(milliseconds / 1e3);
+		return locale.formatDistance("xSeconds", seconds, localizeOptions);
+	} else if (unit === "minute") {
+		const roundedMinutes = roundingMethod(minutes);
+		return locale.formatDistance("xMinutes", roundedMinutes, localizeOptions);
+	} else if (unit === "hour") {
+		const hours = roundingMethod(minutes / 60);
+		return locale.formatDistance("xHours", hours, localizeOptions);
+	} else if (unit === "day") {
+		const days = roundingMethod(dstNormalizedMinutes / minutesInDay);
 		return locale.formatDistance("xDays", days, localizeOptions);
-	} else if (minutes < minutesInMonth * 2) {
-		months = Math.round(minutes / minutesInMonth);
-		return locale.formatDistance("aboutXMonths", months, localizeOptions);
-	}
-	months = differenceInMonths(earlierDate_, laterDate_);
-	if (months < 12) {
-		const nearestMonth = Math.round(minutes / minutesInMonth);
-		return locale.formatDistance("xMonths", nearestMonth, localizeOptions);
+	} else if (unit === "month") {
+		const months = roundingMethod(dstNormalizedMinutes / minutesInMonth);
+		return months === 12 && defaultUnit !== "month" ? locale.formatDistance("xYears", 1, localizeOptions) : locale.formatDistance("xMonths", months, localizeOptions);
 	} else {
-		const monthsSinceStartOfYear = months % 12;
-		const years = Math.trunc(months / 12);
-		if (monthsSinceStartOfYear < 3) return locale.formatDistance("aboutXYears", years, localizeOptions);
-		else if (monthsSinceStartOfYear < 9) return locale.formatDistance("overXYears", years, localizeOptions);
-		else return locale.formatDistance("almostXYears", years + 1, localizeOptions);
+		const years = roundingMethod(dstNormalizedMinutes / minutesInYear);
+		return locale.formatDistance("xYears", years, localizeOptions);
 	}
 }
 
@@ -4421,7 +4208,7 @@ function formatBytes(bytes) {
 }
 function timeAgo(date) {
 	if (date === void 0) return "-";
-	return formatDistance(date, /* @__PURE__ */ new Date(), { addSuffix: true }).replace("about ", "").replace("less than ", "");
+	return formatDistanceStrict(date, /* @__PURE__ */ new Date(), { addSuffix: true });
 }
 function table(opts) {
 	const titles = Object.keys(opts.columns);
@@ -4447,6 +4234,19 @@ function formatRunDuration(d$1) {
 	if (d$1 < 1e3) return `${d$1}ms`;
 	return `${d$1 / 1e3}s`;
 }
+function formatNextCursorHint(cursor) {
+	const args$4 = process.argv.slice(2);
+	const filtered = [];
+	for (let i = 0; i < args$4.length; i++) {
+		if (args$4[i] === "--cursor") {
+			i++;
+			continue;
+		}
+		if (args$4[i].startsWith("--cursor=")) continue;
+		filtered.push(args$4[i]);
+	}
+	return `\nMore results: sandbox ${filtered.join(" ")} --cursor ${cursor}`;
+}
 
 //#endregion
 //#region ../../node_modules/.pnpm/is-docker@3.0.0/node_modules/is-docker/index.js
@@ -4651,7 +4451,7 @@ async function defaultBrowser$1(_execFileAsync = execFileAsync$1) {
 //#endregion
 //#region ../../node_modules/.pnpm/default-browser@5.2.1/node_modules/default-browser/index.js
 const execFileAsync = promisify(execFile);
-const titleize = (string$1) => string$1.toLowerCase().replaceAll(/(?:^|\s|-)\S/g, (x) => x.toUpperCase());
+const titleize = (string$2) => string$2.toLowerCase().replaceAll(/(?:^|\s|-)\S/g, (x) => x.toUpperCase());
 async function defaultBrowser() {
 	if (process$1.platform === "darwin") {
 		const id = await defaultBrowserId();
@@ -6509,9 +6309,9 @@ function ansiRegex({ onlyFirst = false } = {}) {
 //#endregion
 //#region ../../node_modules/.pnpm/strip-ansi@7.1.0/node_modules/strip-ansi/index.js
 const regex = ansiRegex();
-function stripAnsi(string$1) {
-	if (typeof string$1 !== "string") throw new TypeError(`Expected a \`string\`, got \`${typeof string$1}\``);
-	return string$1.replace(regex, "");
+function stripAnsi(string$2) {
+	if (typeof string$2 !== "string") throw new TypeError(`Expected a \`string\`, got \`${typeof string$2}\``);
+	return string$2.replace(regex, "");
 }
 
 //#endregion
@@ -6890,7 +6690,7 @@ function createAbortController(reason) {
 			signal: controller.signal,
 			ignoreInterruptions: ignoreAbortErrors(controller.signal)
 		};
-	}, (c) => c.abort(reason));
+	}, (c$1) => c$1.abort(reason));
 }
 
 //#endregion
@@ -6952,10 +6752,10 @@ function _usingCtx() {
 
 //#endregion
 //#region src/commands/login.ts
-var import_cjs$22 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$23 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
 const debug$5 = createDebugger("sandbox:login");
-const login = import_cjs$22.command({
+const login = import_cjs$23.command({
 	name: "login",
 	description: "Log in to the Sandbox CLI",
 	args: {},
@@ -7019,7 +6819,15 @@ const login = import_cjs$22.command({
 			if (error) {
 				spinner.fail(`${source_default.red("error:")} ${error.message}`);
 				process.exitCode = 1;
-			} else spinner.succeed(`${source_default.cyan("Congratulations!")} You are now signed in.`);
+			} else {
+				spinner.succeed(`${source_default.cyan("Congratulations!")} You are now signed in.`);
+				const auth = getAuth();
+				if (auth?.token) try {
+					const { teamId, teamSlug, projectId, projectSlug } = await inferScope({ token: auth.token });
+					process.stderr.write(source_default.dim("   │ ") + "team: " + source_default.cyan(teamSlug ?? teamId) + "\n");
+					process.stderr.write(source_default.dim("   ╰ ") + "project: " + source_default.cyan(projectSlug ?? projectId) + "\n");
+				} catch {}
+			}
 		} catch (_) {
 			_usingCtx$1.e = _;
 		} finally {
@@ -7165,15 +6973,15 @@ var require_dist = /* @__PURE__ */ __commonJS$1({ "../../node_modules/.pnpm/@ver
 
 //#endregion
 //#region src/args/auth.ts
-var import_cjs$21 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$22 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
 var import_dist = require_dist();
 const debug$4 = createDebugger("sandbox:args:auth");
-const token = import_cjs$21.option({
+const token = import_cjs$22.option({
 	long: "token",
 	description: "A Vercel authentication token. If not provided, will use the token stored in your system from `VERCEL_AUTH_TOKEN` or will start a log in process.",
 	type: {
-		...import_cjs$21.string,
+		...import_cjs$22.string,
 		displayName: "pat_or_oidc",
 		defaultValueIsSerializable: false,
 		onMissing: async () => {
@@ -7244,8 +7052,8 @@ const ProjectConfiguration = jsonCodec(z.object({
 function readProjectConfiguration(cwd) {
 	try {
 		const pathname = path.join(cwd, ".vercel", "project.json");
-		const string$1 = fs$1.readFileSync(pathname, "utf8");
-		return ProjectConfiguration.decode(string$1);
+		const string$2 = fs$1.readFileSync(pathname, "utf8");
+		return ProjectConfiguration.decode(string$2);
 	} catch {
 		return null;
 	}
@@ -7254,7 +7062,7 @@ function readProjectConfiguration(cwd) {
 //#endregion
 //#region src/util/infer-scope.ts
 const debug$3 = createDebugger("sandbox:scope");
-async function inferScope({ token: token$1, team: team$1 }) {
+async function inferScope$1({ token: token$1, team: team$1 }) {
 	const jwt = z.jwt().safeParse(token$1);
 	if (jwt.success) {
 		debug$3("trying to infer scope from OIDC JWT");
@@ -7302,43 +7110,43 @@ async function inferFromJwt(jwt) {
 	};
 }
 async function inferFromToken(token$1, requestedTeam) {
-	const { teamId, projectId } = await Auth.inferScope({
+	const { teamId, teamSlug, projectId, projectSlug } = await Auth.inferScope({
 		token: token$1,
 		teamId: requestedTeam
 	});
 	return {
 		owner: teamId,
 		project: projectId,
-		ownerSlug: teamId,
-		projectSlug: projectId
+		ownerSlug: teamSlug ?? teamId,
+		projectSlug: projectSlug ?? projectId
 	};
 }
 
 //#endregion
 //#region src/args/scope.ts
-var import_cjs$20 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$21 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
-const project = import_cjs$20.option({
+const project = import_cjs$21.option({
 	long: "project",
 	type: {
-		...import_cjs$20.optional(import_cjs$20.string),
+		...import_cjs$21.optional(import_cjs$21.string),
 		displayName: "my-project"
 	},
 	description: "The project name or ID to associate with the command. Can be inferred from VERCEL_OIDC_TOKEN."
 });
 /** Parser for the `--team` option. */
-const teamParser = import_cjs$20.option({
+const teamParser = import_cjs$21.option({
 	long: "team",
 	type: {
-		...import_cjs$20.optional(import_cjs$20.string),
+		...import_cjs$21.optional(import_cjs$21.string),
 		displayName: "my-team"
 	}
 });
 /** Parser for the `--scope` option. */
-const scopeParser = import_cjs$20.option({
+const scopeParser = import_cjs$21.option({
 	long: "scope",
 	type: {
-		...import_cjs$20.optional(import_cjs$20.string),
+		...import_cjs$21.optional(import_cjs$21.string),
 		displayName: "my-team"
 	},
 	description: "The scope/team to associate with the command. Can be inferred from VERCEL_OIDC_TOKEN. [alias: --team]"
@@ -7381,7 +7189,7 @@ const scope = {
 		let projectSlug;
 		let teamSlug;
 		if (typeof projectId.value === "undefined" || typeof teamId.value === "undefined") try {
-			const scope$1 = await inferScope({
+			const scope$1 = await inferScope$1({
 				token: t.value,
 				team: teamId.value
 			});
@@ -7427,7 +7235,7 @@ const scope = {
 
 //#endregion
 //#region package.json
-var version = "3.0.0-beta.2";
+var version = "3.0.0-beta.20";
 
 //#endregion
 //#region src/error.ts
@@ -7518,9 +7326,9 @@ async function writeResponseToTemp({ response, text }) {
 
 //#endregion
 //#region src/args/snapshot-id.ts
-var import_cjs$19 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$20 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
-const snapshotId = import_cjs$19.extendType(import_cjs$19.string, {
+const snapshotId = import_cjs$20.extendType(import_cjs$20.string, {
 	displayName: "snapshot_id",
 	description: "The ID of the snapshot",
 	async from(s$1) {
@@ -7531,9 +7339,9 @@ const snapshotId = import_cjs$19.extendType(import_cjs$19.string, {
 
 //#endregion
 //#region src/args/sandbox-name.ts
-var import_cjs$18 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$19 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
-const sandboxName = import_cjs$18.extendType(import_cjs$18.string, {
+const sandboxName = import_cjs$19.extendType(import_cjs$19.string, {
 	displayName: "name",
 	description: "The name of the sandbox",
 	async from(s$1) {
@@ -11251,16 +11059,23 @@ var import_ms$3 = /* @__PURE__ */ __toESM(require_ms());
 const debug$2 = createDebugger("sandbox:timeout");
 const BUFFER = (0, import_ms$3.default)("10 seconds");
 async function extendSandboxTimeoutPeriodically(sandbox, signal) {
-	const nextTick = sandbox.createdAt.getTime() + sandbox.timeout;
+	const session = sandbox.currentSession();
+	const timeout$1 = session.timeout;
+	if (timeout$1 == null) return;
+	const nextTick = session.createdAt.getTime() + timeout$1;
 	debug$2(`next tick: ${new Date(nextTick).toISOString()}`);
 	while (!signal.aborted) {
-		const timeout$1 = sandbox.createdAt.getTime() + sandbox.timeout - Date.now() - BUFFER;
-		if (timeout$1 > 2e3) {
-			debug$2(`sleeping for ${timeout$1}ms until next timeout extension`);
-			await setTimeout$1(timeout$1, null, { signal });
+		const currentTimeout = session.timeout;
+		if (currentTimeout == null) return;
+		const sleepMs = session.createdAt.getTime() + currentTimeout - Date.now() - BUFFER;
+		if (sleepMs > 2e3) {
+			debug$2(`sleeping for ${sleepMs}ms until next timeout extension`);
+			await setTimeout$1(sleepMs, null, { signal });
 		}
 		await sandbox.extendTimeout((0, import_ms$3.default)("5 minutes"));
-		const nextTick$1 = sandbox.createdAt.getTime() + sandbox.timeout;
+		const updatedTimeout = session.timeout;
+		if (updatedTimeout == null) return;
+		const nextTick$1 = session.createdAt.getTime() + updatedTimeout;
 		debug$2(`extended sandbox timeout by 5 minutes. next tick: ${new Date(nextTick$1).toISOString()}`);
 	}
 }
@@ -11388,11 +11203,16 @@ async function startInteractiveShell(options) {
 		await setupSandboxEnvironment(options.sandbox, progress);
 		progress.text = "Booting up interactive listener...";
 		command$1 = await startServerCommand(options.sandbox, listener, options.execution, options.sudo, options.envVars, options.cwd);
+		debug$1("startServerCommand completed, cmdId=%s, interactivePort=%s", command$1.cmdId, options.sandbox.interactivePort);
 		const waitForProcess = _usingCtx3.u(createAbortController("Connection established successfully"));
 		listener.connection.then(() => {
+			debug$1("listener.connection resolved");
 			waitForProcess.abort();
 		});
-		connect$1(command$1, listener, waitForProcess.signal).catch(waitForProcess.ignoreInterruptions);
+		connect$1(command$1, listener, waitForProcess.signal).catch((err$1) => {
+			if (waitForProcess.signal.aborted) return;
+			listener.stdoutStream.destroy(err$1 instanceof Error ? err$1 : new Error(String(err$1)));
+		});
 		await Promise.all([throwIfCommandPrematurelyExited(command$1, waitForProcess.signal), attach({
 			sandbox: options.sandbox,
 			progress,
@@ -11495,6 +11315,7 @@ async function connect$1(command$1, listener, signal) {
 		const stderrStream = _usingCtx5.u(getStderrStream());
 		for await (const chunk of logs) if (chunk.stream === "stdout") listener.stdoutStream.write(chunk.data);
 		else stderrStream.write(chunk.data);
+		listener.stdoutStream.end();
 	} catch (_) {
 		_usingCtx5.e = _;
 	} finally {
@@ -11525,9 +11346,9 @@ function getStderrStream() {
 
 //#endregion
 //#region src/args/key-value-pair.ts
-var import_cjs$17 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$18 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
-const KeyValuePair = import_cjs$17.extendType(import_cjs$17.string, {
+const KeyValuePair = import_cjs$18.extendType(import_cjs$18.string, {
 	displayName: "key=value",
 	async from(input) {
 		if (!input.includes("=")) return {
@@ -11541,7 +11362,7 @@ const KeyValuePair = import_cjs$17.extendType(import_cjs$17.string, {
 		};
 	}
 });
-const ObjectFromKeyValue = import_cjs$17.extendType(import_cjs$17.array(KeyValuePair), { async from(input) {
+const ObjectFromKeyValue = import_cjs$18.extendType(import_cjs$18.array(KeyValuePair), { async from(input) {
 	const obj = Object.create(null);
 	const missingVars = [];
 	for (const { key, value } of input) if (value === void 0) missingVars.push(key);
@@ -11555,27 +11376,27 @@ const ObjectFromKeyValue = import_cjs$17.extendType(import_cjs$17.array(KeyValue
 
 //#endregion
 //#region src/commands/exec.ts
-var import_cjs$16 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$17 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
 const args$3 = {
-	sandbox: import_cjs$16.positional({ type: sandboxName }),
-	command: import_cjs$16.positional({
+	sandbox: import_cjs$17.positional({ type: sandboxName }),
+	command: import_cjs$17.positional({
 		displayName: "command",
 		description: "The executable to invoke"
 	}),
-	args: import_cjs$16.rest({
+	args: import_cjs$17.rest({
 		displayName: "args",
 		description: "arguments to pass to the command"
 	}),
-	asSudo: import_cjs$16.flag({
+	asSudo: import_cjs$17.flag({
 		long: "sudo",
 		description: "Give extended privileges to the command."
 	}),
-	interactive: import_cjs$16.flag({
+	interactive: import_cjs$17.flag({
 		long: "interactive",
 		short: "i",
 		description: "Run the command in a secure interactive shell",
-		type: import_cjs$16.extendType(import_cjs$16.boolean, {
+		type: import_cjs$17.extendType(import_cjs$17.boolean, {
 			defaultValue() {
 				return false;
 			},
@@ -11585,22 +11406,22 @@ const args$3 = {
 			}
 		})
 	}),
-	skipExtendingTimeout: import_cjs$16.flag({
+	skipExtendingTimeout: import_cjs$17.flag({
 		long: "no-extend-timeout",
 		description: "Do not extend the sandbox timeout while running an interactive command. Only affects interactive executions."
 	}),
-	tty: import_cjs$16.flag({
+	tty: import_cjs$17.flag({
 		long: "tty",
 		short: "t",
 		description: "Allocate a tty for an interactive command. This is a no-op."
 	}),
-	cwd: import_cjs$16.option({
+	cwd: import_cjs$17.option({
 		long: "workdir",
 		short: "w",
 		description: "The working directory to run the command in",
-		type: import_cjs$16.optional(import_cjs$16.string)
+		type: import_cjs$17.optional(import_cjs$17.string)
 	}),
-	envVars: import_cjs$16.multioption({
+	envVars: import_cjs$17.multioption({
 		long: "env",
 		short: "e",
 		type: ObjectFromKeyValue,
@@ -11608,7 +11429,7 @@ const args$3 = {
 	}),
 	scope
 };
-const exec = import_cjs$16.command({
+const exec = import_cjs$17.command({
 	name: "exec",
 	description: "Execute a command in an existing sandbox",
 	args: args$3,
@@ -11645,9 +11466,9 @@ const exec = import_cjs$16.command({
 
 //#endregion
 //#region src/args/network-policy.ts
-var import_cjs$15 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$16 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
-const networkPolicyMode = import_cjs$15.extendType(import_cjs$15.string, {
+const networkPolicyMode = import_cjs$16.extendType(import_cjs$16.string, {
 	displayName: "MODE",
 	async from(value) {
 		const validModes = ["allow-all", "deny-all"];
@@ -11655,28 +11476,28 @@ const networkPolicyMode = import_cjs$15.extendType(import_cjs$15.string, {
 		return value;
 	}
 });
-const networkPolicy = import_cjs$15.option({
+const networkPolicy = import_cjs$16.option({
 	long: "network-policy",
 	description: `Network policy mode: "allow-all" or "deny-all"
       - allow-all: sandbox can access any website/domain
       - deny-all: sandbox has no network access
     Omit this option and use --allowed-domain / --allowed-cidr / --denied-cidr for custom policies.`,
-	type: import_cjs$15.optional(networkPolicyMode)
+	type: import_cjs$16.optional(networkPolicyMode)
 });
-const allowedDomains = import_cjs$15.multioption({
+const allowedDomains = import_cjs$16.multioption({
 	long: "allowed-domain",
 	description: `Domain to allow traffic to (creates a custom network policy). Supports "*" for wildcards for a segment (e.g. '*.vercel.com', 'www.*.com'). If used as the first segment, will match any subdomain.`,
-	type: import_cjs$15.array(import_cjs$15.string)
+	type: import_cjs$16.array(import_cjs$16.string)
 });
-const allowedCIDRs = import_cjs$15.multioption({
+const allowedCIDRs = import_cjs$16.multioption({
 	long: "allowed-cidr",
 	description: `CIDR to allow traffic to (creates a custom network policy). Takes precedence over 'allowed-domain'.`,
-	type: import_cjs$15.array(import_cjs$15.string)
+	type: import_cjs$16.array(import_cjs$16.string)
 });
-const deniedCIDRs = import_cjs$15.multioption({
+const deniedCIDRs = import_cjs$16.multioption({
 	long: "denied-cidr",
 	description: `CIDR to deny traffic to (creates a custom network policy). Takes precedence over allowed domains/CIDRs.`,
-	type: import_cjs$15.array(import_cjs$15.string)
+	type: import_cjs$16.array(import_cjs$16.string)
 });
 const networkPolicyArgs = {
 	networkPolicy,
@@ -11713,6 +11534,18 @@ function buildNetworkPolicy(args$4) {
 	return networkPolicy$1 ?? "allow-all";
 }
 
+//#endregion
+//#region src/types/snapshot-expiration.ts
+var import_cjs$15 = require_cjs();
+const SnapshotExpiration = (0, import_cjs$15.extendType)(import_cjs$15.string, {
+	displayName: "DURATION|none",
+	description: "A duration (e.g. 7d, 30d) or \"none\" for no expiration",
+	async from(value) {
+		if (value === "none") return "0";
+		return Duration.from(value);
+	}
+});
+
 //#endregion
 //#region src/commands/create.ts
 var import_cjs$14 = /* @__PURE__ */ __toESM(require_cjs());
@@ -11767,6 +11600,17 @@ const args$2 = {
 		type: ObjectFromKeyValue,
 		description: "Default environment variables for sandbox commands"
 	}),
+	tags: import_cjs$14.multioption({
+		long: "tag",
+		short: "t",
+		type: ObjectFromKeyValue,
+		description: "Key-value tags to associate with the sandbox (e.g. --tag env=staging)"
+	}),
+	snapshotExpiration: import_cjs$14.option({
+		long: "snapshot-expiration",
+		type: import_cjs$14.optional(SnapshotExpiration),
+		description: "Default snapshot expiration. Use \"none\" or 0 for no expiration. Example: 7d, 30d"
+	}),
 	...networkPolicyArgs,
 	scope
 };
@@ -11778,7 +11622,7 @@ const create = import_cjs$14.command({
 		description: "Create and connect to a sandbox without a network access",
 		command: `sandbox run --network-policy=none --connect`
 	}],
-	async handler({ name, nonPersistent, ports, scope: scope$1, runtime: runtime$1, timeout: timeout$1, vcpus: vcpus$1, silent, snapshot: snapshot$1, connect: connect$2, envVars, networkPolicy: networkPolicyMode$1, allowedDomains: allowedDomains$1, allowedCIDRs: allowedCIDRs$1, deniedCIDRs: deniedCIDRs$1 }) {
+	async handler({ name, nonPersistent, ports, scope: scope$1, runtime: runtime$1, timeout: timeout$1, vcpus: vcpus$1, silent, snapshot: snapshot$1, connect: connect$2, envVars, tags, snapshotExpiration, networkPolicy: networkPolicyMode$1, allowedDomains: allowedDomains$1, allowedCIDRs: allowedCIDRs$1, deniedCIDRs: deniedCIDRs$1 }) {
 		const networkPolicy$1 = buildNetworkPolicy({
 			networkPolicy: networkPolicyMode$1,
 			allowedDomains: allowedDomains$1,
@@ -11787,6 +11631,7 @@ const create = import_cjs$14.command({
 		});
 		const persistent = !nonPersistent;
 		const resources = vcpus$1 ? { vcpus: vcpus$1 } : void 0;
+		const tagsObj = Object.keys(tags).length > 0 ? tags : void 0;
 		const spinner = silent ? void 0 : ora("Creating sandbox...").start();
 		const sandbox = snapshot$1 ? await sandboxClient.create({
 			name,
@@ -11802,7 +11647,9 @@ const create = import_cjs$14.command({
 			resources,
 			networkPolicy: networkPolicy$1,
 			env: envVars,
+			tags: tagsObj,
 			persistent,
+			snapshotExpiration: snapshotExpiration ? (0, import_ms$2.default)(snapshotExpiration) : void 0,
 			__interactive: true
 		}) : await sandboxClient.create({
 			name,
@@ -11815,7 +11662,9 @@ const create = import_cjs$14.command({
 			resources,
 			networkPolicy: networkPolicy$1,
 			env: envVars,
+			tags: tagsObj,
 			persistent,
+			snapshotExpiration: snapshotExpiration ? (0, import_ms$2.default)(snapshotExpiration) : void 0,
 			__interactive: true
 		});
 		spinner?.stop();
@@ -11876,13 +11725,18 @@ const args$1 = {
 	removeAfterUse: import_cjs$13.flag({
 		long: "rm",
 		description: "Automatically remove the sandbox when the command exits."
+	}),
+	stopAfterUse: import_cjs$13.flag({
+		long: "stop",
+		description: "Stop the sandbox when the command exits."
 	})
 };
 const run = import_cjs$13.command({
 	name: "run",
 	description: "Create and run a command in a sandbox",
 	args: args$1,
-	async handler({ removeAfterUse, ...rest$1 }) {
+	async handler({ removeAfterUse, stopAfterUse, ...rest$1 }) {
+		if (removeAfterUse && stopAfterUse) throw new Error("--rm and --stop are mutually exclusive.");
 		let sandbox;
 		if (rest$1.name) try {
 			sandbox = await sandboxClient.get({
@@ -11894,10 +11748,16 @@ const run = import_cjs$13.command({
 				__includeSystemRoutes: true
 			});
 		} catch (error) {
-			if (error instanceof StyledError && error.cause instanceof APIError && error.cause.response.status === 404) sandbox = await create.handler({ ...rest$1 });
+			if (error instanceof StyledError && error.cause instanceof APIError && error.cause.response.status === 404) sandbox = await create.handler({
+				...rest$1,
+				nonPersistent: rest$1.nonPersistent || removeAfterUse
+			});
 			else throw error;
 		}
-		else sandbox = await create.handler({ ...rest$1 });
+		else sandbox = await create.handler({
+			...rest$1,
+			nonPersistent: rest$1.nonPersistent || removeAfterUse
+		});
 		try {
 			await exec.handler({
 				...rest$1,
@@ -11905,6 +11765,7 @@ const run = import_cjs$13.command({
 			});
 		} finally {
 			if (removeAfterUse) await sandbox.delete();
+			if (stopAfterUse) await sandbox.stop();
 		}
 	}
 });
@@ -11930,33 +11791,65 @@ const list = import_cjs$12.command({
 		}),
 		sortBy: import_cjs$12.option({
 			long: "sort-by",
-			description: "Sort sandboxes by field. Options: createdAt (default), name",
-			type: import_cjs$12.optional(import_cjs$12.oneOf(["createdAt", "name"]))
+			description: "Sort sandboxes by field. Options: createdAt (default), name, statusUpdatedAt",
+			type: import_cjs$12.optional(import_cjs$12.oneOf([
+				"createdAt",
+				"name",
+				"statusUpdatedAt"
+			]))
+		}),
+		sortOrder: import_cjs$12.option({
+			long: "sort-order",
+			description: "Sort order. Options: asc, desc (default)",
+			type: import_cjs$12.optional(import_cjs$12.oneOf(["asc", "desc"]))
+		}),
+		tags: import_cjs$12.multioption({
+			long: "tag",
+			description: "Filter sandboxes by tag. Format: \"key=value\"",
+			type: ObjectFromKeyValue
+		}),
+		limit: import_cjs$12.option({
+			long: "limit",
+			description: "Maximum number of sandboxes per page (default 50).",
+			type: import_cjs$12.optional(import_cjs$12.number)
+		}),
+		cursor: import_cjs$12.option({
+			long: "cursor",
+			description: "Pagination cursor from a previous 'More results' hint.",
+			type: import_cjs$12.optional(import_cjs$12.string)
 		}),
 		scope
 	},
-	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, all, namePrefix, sortBy }) {
-		const sandboxes = await (async () => {
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, all, namePrefix, sortBy, sortOrder, tags, limit, cursor }) {
+		if (namePrefix) {
+			if (sortBy && sortBy !== "name") {
+				console.error(source_default.red("Error: --sort-by must be 'name' when using --name-prefix"));
+				return;
+			}
+			sortBy = "name";
+		}
+		const { sandboxes, pagination } = await (async () => {
 			try {
 				var _usingCtx$1 = _usingCtx();
 				const _spinner$1 = _usingCtx$1.u(acquireRelease(() => ora("Fetching sandboxes...").start(), (s$1) => s$1.stop()));
-				const { json } = await sandboxClient.list({
+				return sandboxClient.list({
 					token: token$1,
 					teamId: team$1,
 					projectId: project$1,
-					limit: 100,
+					limit: limit ?? 50,
+					...cursor && { cursor },
 					...namePrefix && { namePrefix },
-					...sortBy && { sortBy }
+					...sortBy && { sortBy },
+					...sortOrder && { sortOrder },
+					...Object.keys(tags).length > 0 && { tags }
 				});
-				let sandboxes$1 = json.sandboxes;
-				if (!all) sandboxes$1 = sandboxes$1.filter((x) => x.status === "running");
-				return sandboxes$1;
 			} catch (_) {
 				_usingCtx$1.e = _;
 			} finally {
 				_usingCtx$1.d();
 			}
 		})();
+		const displayedSandboxes = all ? sandboxes : sandboxes.filter((x) => x.status === "running");
 		const memoryFormatter = new Intl.NumberFormat(void 0, {
 			style: "unit",
 			unit: "megabyte"
@@ -11968,20 +11861,22 @@ const list = import_cjs$12.command({
 				color: (s$1) => SandboxStatusColor[s$1.status] ?? source_default.reset
 			},
 			CREATED: { value: (s$1) => timeAgo(s$1.createdAt) },
-			MEMORY: { value: (s$1) => memoryFormatter.format(s$1.memory) },
-			VCPUS: { value: (s$1) => s$1.vcpus },
-			RUNTIME: { value: (s$1) => s$1.runtime },
-			TIMEOUT: { value: (s$1) => timeAgo(s$1.createdAt + s$1.timeout) },
-			SNAPSHOT: { value: (s$1) => s$1.currentSnapshotId ?? "-" }
+			MEMORY: { value: (s$1) => s$1.memory != null ? memoryFormatter.format(s$1.memory) : "-" },
+			VCPUS: { value: (s$1) => s$1.vcpus ?? "-" },
+			RUNTIME: { value: (s$1) => s$1.runtime ?? "-" },
+			TIMEOUT: { value: (s$1) => s$1.timeout != null ? timeAgo(s$1.createdAt + s$1.timeout) : "-" },
+			SNAPSHOT: { value: (s$1) => s$1.currentSnapshotId ?? "-" },
+			TAGS: { value: (s$1) => s$1.tags && Object.keys(s$1.tags).length > 0 ? Object.entries(s$1.tags).map(([k, v]) => `${k}:${v}`).join(", ") : "-" }
 		};
 		if (all) {
 			columns.CPU = { value: (s$1) => s$1.totalActiveCpuDurationMs ? formatRunDuration(s$1.totalActiveCpuDurationMs) : "-" };
 			columns["NETWORK (OUT/IN)"] = { value: (s$1) => s$1.totalEgressBytes || s$1.totalIngressBytes ? `${formatBytes(s$1.totalEgressBytes ?? 0)} / ${formatBytes(s$1.totalIngressBytes ?? 0)}` : "- / -" };
 		}
 		console.log(table({
-			rows: sandboxes,
+			rows: displayedSandboxes,
 			columns
 		}));
+		if (pagination.next !== null) console.log(formatNextCursorHint(pagination.next));
 	}
 });
 const SandboxStatusColor = {
@@ -12013,6 +11908,106 @@ const connect = import_cjs$11.command({
 	}
 });
 
+//#endregion
+//#region src/commands/stop.ts
+var import_cjs$10 = /* @__PURE__ */ __toESM(require_cjs());
+init_source();
+function c(label, value) {
+	return {
+		label,
+		value
+	};
+}
+/** Visible width of a cell (label + value, no ANSI). */
+function cellWidth(cell) {
+	return cell ? cell.label.length + cell.value.length : 0;
+}
+/** Print rows as a tree with column-aligned label: value pairs. */
+function printTree(rows) {
+	const widths = [];
+	for (const row of rows) for (let i = 0; i < row.length; i++) widths[i] = Math.max(widths[i] ?? 0, cellWidth(row[i]));
+	for (let r = 0; r < rows.length; r++) {
+		const prefix$1 = r === rows.length - 1 ? source_default.dim("   ╰ ") : source_default.dim("   │ ");
+		const line = rows[r].map((cell, i) => {
+			if (!cell) return " ".repeat(widths[i]);
+			const pad = widths[i] - cell.label.length - cell.value.length;
+			return cell.label + source_default.cyan(cell.value) + " ".repeat(Math.max(0, pad));
+		}).join("  ").trimEnd();
+		process.stderr.write(prefix$1 + line + "\n");
+	}
+}
+function printStopResult(name, sandbox, sessionSnapshot) {
+	process.stderr.write(source_default.green("✔") + " Sandbox stopped.\n");
+	const snapshot$1 = sessionSnapshot.snapshot;
+	printTree([
+		[
+			c("sandbox: ", name),
+			sandbox.totalActiveCpuDurationMs != null ? c("active cpu: ", formatRunDuration(sandbox.totalActiveCpuDurationMs)) : null,
+			sandbox.memory != null ? c("mem: ", `${sandbox.memory} MB`) : null,
+			sandbox.totalDurationMs != null ? c("duration: ", formatRunDuration(sandbox.totalDurationMs)) : null,
+			sandbox.totalIngressBytes != null ? c("ingress: ", formatBytes(sandbox.totalIngressBytes)) : null,
+			sandbox.totalEgressBytes != null ? c("egress: ", formatBytes(sandbox.totalEgressBytes)) : null
+		],
+		[
+			c("session: ", sessionSnapshot.id),
+			sessionSnapshot.activeCpuDurationMs != null ? c("active cpu: ", formatRunDuration(sessionSnapshot.activeCpuDurationMs)) : null,
+			c("mem: ", `${sessionSnapshot.memory} MB`),
+			sessionSnapshot.duration != null ? c("duration: ", formatRunDuration(sessionSnapshot.duration)) : null,
+			sessionSnapshot.networkTransfer ? c("ingress: ", formatBytes(sessionSnapshot.networkTransfer.ingress)) : null,
+			sessionSnapshot.networkTransfer ? c("egress: ", formatBytes(sessionSnapshot.networkTransfer.egress)) : null
+		],
+		...snapshot$1 ? [[
+			c("snapshot: ", snapshot$1.id),
+			c("size: ", formatBytes(snapshot$1.sizeBytes)),
+			c("expires: ", snapshot$1.expiresAt ? timeAgo(snapshot$1.expiresAt) : "never")
+		]] : []
+	]);
+}
+const stop = import_cjs$10.command({
+	name: "stop",
+	description: "Stop the current session of one or more sandboxes",
+	args: {
+		sandboxName: import_cjs$10.positional({
+			type: sandboxName,
+			description: "A sandbox name to stop"
+		}),
+		sandboxNames: import_cjs$10.restPositionals({
+			type: sandboxName,
+			description: "More sandboxes to stop"
+		}),
+		scope
+	},
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandboxName: sandboxName$1, sandboxNames }) {
+		const names = Array.from(new Set([sandboxName$1, ...sandboxNames]));
+		const spinner = ora({
+			text: names.length === 1 ? `Stopping ${names[0]}` : `Stopping ${names.length} sandboxes`,
+			stream: process.stderr
+		}).start();
+		const results = await Promise.allSettled(names.map(async (name) => {
+			const sandbox = await sandboxClient.get({
+				token: token$1,
+				teamId: team$1,
+				projectId: project$1,
+				name
+			});
+			return {
+				name,
+				sandbox,
+				sessionSnapshot: await sandbox.stop()
+			};
+		}));
+		spinner.stop();
+		for (const result of results) if (result.status === "fulfilled") {
+			const { name, sandbox, sessionSnapshot } = result.value;
+			printStopResult(name, sandbox, sessionSnapshot);
+		} else {
+			const error = result.reason;
+			process.stderr.write(source_default.red("✖") + ` ${error.message ?? error}\n`);
+			process.exitCode = 1;
+		}
+	}
+});
+
 //#endregion
 //#region ../../node_modules/.pnpm/eventemitter3@5.0.1/node_modules/eventemitter3/index.js
 var require_eventemitter3 = /* @__PURE__ */ __commonJS$1({ "../../node_modules/.pnpm/eventemitter3@5.0.1/node_modules/eventemitter3/index.js": ((exports, module) => {
@@ -12264,9 +12259,9 @@ const isDumbTerminal = env.TERM === "dumb";
 const isCompatibleTerminal = tty$1 && tty$1.isatty && tty$1.isatty(1) && env.TERM && !isDumbTerminal;
 const isCI = "CI" in env && ("GITHUB_ACTIONS" in env || "GITLAB_CI" in env || "CIRCLECI" in env);
 const isColorSupported = !isDisabled && (isForced || isWindows && !isDumbTerminal || isCompatibleTerminal || isCI);
-const replaceClose = (index, string$1, close, replace, head = string$1.substring(0, index) + replace, tail = string$1.substring(index + close.length), next = tail.indexOf(close)) => head + (next < 0 ? tail : replaceClose(next, tail, close, replace));
-const clearBleed = (index, string$1, open$1, close, replace) => index < 0 ? open$1 + string$1 + close : open$1 + replaceClose(index, string$1, close, replace) + close;
-const filterEmpty = (open$1, close, replace = open$1, at = open$1.length + 1) => (string$1) => string$1 || !(string$1 === "" || string$1 === void 0) ? clearBleed(("" + string$1).indexOf(close, at), string$1, open$1, close, replace) : "";
+const replaceClose = (index, string$2, close, replace, head = string$2.substring(0, index) + replace, tail = string$2.substring(index + close.length), next = tail.indexOf(close)) => head + (next < 0 ? tail : replaceClose(next, tail, close, replace));
+const clearBleed = (index, string$2, open$1, close, replace) => index < 0 ? open$1 + string$2 + close : open$1 + replaceClose(index, string$2, close, replace) + close;
+const filterEmpty = (open$1, close, replace = open$1, at = open$1.length + 1) => (string$2) => string$2 || !(string$2 === "" || string$2 === void 0) ? clearBleed(("" + string$2).indexOf(close, at), string$2, open$1, close, replace) : "";
 const init = (open$1, close, replace) => filterEmpty(`\x1b[${open$1}m`, `\x1b[${close}m`, replace);
 const colors = {
 	reset: init(0, 0),
@@ -12625,8 +12620,8 @@ function cleanseAnsi(chunk) {
 * @see {@link https://www.npmjs.com/package/colorette}
 */
 const color = createColors();
-function indent(string$1, count) {
-	return string$1.replace(/^(?!\s*$)/gm, " ".repeat(count));
+function indent(string$2, count) {
+	return string$2.replace(/^(?!\s*$)/gm, " ".repeat(count));
 }
 const FIGURES_MAIN = {
 	warning: "⚠",
@@ -14296,40 +14291,6 @@ var Listr = class {
 	}
 };
 
-//#endregion
-//#region src/commands/stop.ts
-var import_cjs$10 = /* @__PURE__ */ __toESM(require_cjs());
-const stop = import_cjs$10.command({
-	name: "stop",
-	description: "Stop the current session of one or more sandboxes",
-	args: {
-		sandboxName: import_cjs$10.positional({
-			type: sandboxName,
-			description: "A sandbox name to stop"
-		}),
-		sandboxNames: import_cjs$10.restPositionals({
-			type: sandboxName,
-			description: "More sandboxes to stop"
-		}),
-		scope
-	},
-	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandboxName: sandboxName$1, sandboxNames }) {
-		await new Listr(Array.from(new Set([sandboxName$1, ...sandboxNames]), (sandboxName$2) => {
-			return {
-				title: `Stopping sandbox ${sandboxName$2}`,
-				async task() {
-					await (await sandboxClient.get({
-						token: token$1,
-						teamId: team$1,
-						projectId: project$1,
-						name: sandboxName$2
-					})).stop();
-				}
-			};
-		}), { concurrent: true }).run();
-	}
-});
-
 //#endregion
 //#region src/commands/remove.ts
 var import_cjs$9 = /* @__PURE__ */ __toESM(require_cjs());
@@ -14346,14 +14307,10 @@ const remove = import_cjs$9.command({
 			type: sandboxName,
 			description: "more sandboxes to remove"
 		}),
-		preserveSnapshots: import_cjs$9.flag({
-			long: "preserve-snapshots",
-			description: "Keep snapshots when removing the sandbox"
-		}),
 		scope
 	},
-	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandboxName: sandboxName$1, sandboxNames, preserveSnapshots }) {
-		await new Listr(Array.from(new Set([sandboxName$1, ...sandboxNames]), (name) => ({
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandboxName: sandboxName$1, sandboxNames }) {
+		const tasks = Array.from(new Set([sandboxName$1, ...sandboxNames]), (name) => ({
 			title: `Removing sandbox ${name}`,
 			async task() {
 				await (await sandboxClient.get({
@@ -14361,9 +14318,14 @@ const remove = import_cjs$9.command({
 					teamId: team$1,
 					projectId: project$1,
 					name
-				})).delete({ preserveSnapshots });
+				})).delete();
 			}
-		})), { concurrent: true }).run();
+		}));
+		try {
+			await new Listr(tasks, { concurrent: true }).run();
+		} catch {
+			process.exitCode = 1;
+		}
 	}
 });
 
@@ -14532,19 +14494,43 @@ const list$2 = import_cjs$4.command({
 	name: "list",
 	aliases: ["ls"],
 	description: "List snapshots for the specified account and project.",
-	args: { scope },
-	async handler({ scope: { token: token$1, team: team$1, project: project$1 } }) {
-		const snapshots$1 = await (async () => {
+	args: {
+		scope,
+		name: import_cjs$4.option({
+			type: import_cjs$4.optional(sandboxName),
+			long: "name",
+			description: "Filter snapshots by sandbox."
+		}),
+		sortOrder: import_cjs$4.option({
+			long: "sort-order",
+			description: "Sort order. Options: asc, desc (default)",
+			type: import_cjs$4.optional(import_cjs$4.oneOf(["asc", "desc"]))
+		}),
+		limit: import_cjs$4.option({
+			long: "limit",
+			description: "Maximum number of snapshots per page (default 50).",
+			type: import_cjs$4.optional(import_cjs$4.number)
+		}),
+		cursor: import_cjs$4.option({
+			long: "cursor",
+			description: "Pagination cursor from a previous 'More results' hint.",
+			type: import_cjs$4.optional(import_cjs$4.string)
+		})
+	},
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, name, sortOrder, limit, cursor }) {
+		const { snapshots: snapshots$1, pagination } = await (async () => {
 			try {
 				var _usingCtx$1 = _usingCtx();
 				const _spinner$1 = _usingCtx$1.u(acquireRelease(() => ora("Fetching snapshots...").start(), (s$1) => s$1.stop()));
-				const { json } = await snapshotClient.list({
+				return snapshotClient.list({
 					token: token$1,
 					teamId: team$1,
 					projectId: project$1,
-					limit: 100
+					name,
+					limit: limit ?? 50,
+					...cursor && { cursor },
+					...sortOrder && { sortOrder }
 				});
-				return json.snapshots;
 			} catch (_) {
 				_usingCtx$1.e = _;
 			} finally {
@@ -14562,9 +14548,10 @@ const list$2 = import_cjs$4.command({
 				CREATED: { value: (s$1) => timeAgo(s$1.createdAt) },
 				EXPIRATION: { value: (s$1) => s$1.status === "deleted" ? source_default.gray.dim("deleted") : timeAgo(s$1.expiresAt) },
 				SIZE: { value: (s$1) => formatBytes(s$1.sizeBytes) },
-				["SOURCE SESSION"]: { value: (s$1) => s$1.sourceSandboxId }
+				["SOURCE SESSION"]: { value: (s$1) => s$1.sourceSessionId }
 			}
 		}));
+		if (pagination.next !== null) console.log(formatNextCursorHint(pagination.next));
 	}
 });
 const get = import_cjs$4.command({
@@ -14605,7 +14592,7 @@ const get = import_cjs$4.command({
 				CREATED: { value: (s$1) => timeAgo(s$1.createdAt) },
 				EXPIRATION: { value: (s$1) => s$1.status === "deleted" ? source_default.gray.dim("deleted") : timeAgo(s$1.expiresAt) },
 				SIZE: { value: (s$1) => formatBytes(s$1.sizeBytes) },
-				["SOURCE SESSION"]: { value: (s$1) => s$1.sourceSandboxId }
+				["SOURCE SESSION"]: { value: (s$1) => s$1.sourceSessionId }
 			}
 		}));
 	}
@@ -14626,7 +14613,7 @@ const remove$1 = import_cjs$4.command({
 		scope
 	},
 	async handler({ scope: { team: team$1, token: token$1, project: project$1 }, snapshotId: snapshotId$1, snapshotIds }) {
-		await new Listr(Array.from(new Set([snapshotId$1, ...snapshotIds]), (snapshotId$2) => {
+		const tasks = Array.from(new Set([snapshotId$1, ...snapshotIds]), (snapshotId$2) => {
 			return {
 				title: `Deleting snapshot ${snapshotId$2}`,
 				async task() {
@@ -14640,7 +14627,12 @@ const remove$1 = import_cjs$4.command({
 					await snapshot$1.delete();
 				}
 			};
-		}), { concurrent: true }).run();
+		});
+		try {
+			await new Listr(tasks, { concurrent: true }).run();
+		} catch {
+			process.exitCode = 1;
+		}
 	}
 });
 const snapshots = (0, import_cjs$5.subcommands)({
@@ -14668,46 +14660,82 @@ const list$1 = import_cjs$2.command({
 	aliases: ["ls"],
 	description: "List sessions from a sandbox",
 	args: {
+		all: import_cjs$2.flag({
+			long: "all",
+			short: "a",
+			description: "Show all sessions (default shows just running)"
+		}),
 		sandbox: import_cjs$2.positional({
 			type: sandboxName,
 			description: "Sandbox name to list sessions for"
 		}),
+		sortOrder: import_cjs$2.option({
+			long: "sort-order",
+			description: "Sort order. Options: asc, desc (default)",
+			type: import_cjs$2.optional(import_cjs$2.oneOf(["asc", "desc"]))
+		}),
+		limit: import_cjs$2.option({
+			long: "limit",
+			description: "Maximum number of sessions per page (default 50).",
+			type: import_cjs$2.optional(import_cjs$2.number)
+		}),
+		cursor: import_cjs$2.option({
+			long: "cursor",
+			description: "Pagination cursor from a previous 'More results' hint.",
+			type: import_cjs$2.optional(import_cjs$2.string)
+		}),
 		scope
 	},
-	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandbox: name }) {
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, all, sandbox: name, sortOrder, limit, cursor }) {
 		const sandbox = await sandboxClient.get({
 			name,
 			projectId: project$1,
 			teamId: team$1,
 			token: token$1
 		});
-		const sessions$1 = (await (async () => {
+		const { sessions: sessions$1, pagination } = await (async () => {
 			try {
 				var _usingCtx$1 = _usingCtx();
 				const _spinner$1 = _usingCtx$1.u(acquireRelease(() => ora("Fetching sessions...").start(), (s$1) => s$1.stop()));
-				return sandbox.listSessions();
+				return sandbox.listSessions({
+					limit: limit ?? 50,
+					...cursor && { cursor },
+					...sortOrder && { sortOrder }
+				});
 			} catch (_) {
 				_usingCtx$1.e = _;
 			} finally {
 				_usingCtx$1.d();
 			}
-		})()).json.sandboxes;
+		})();
+		const displayedSessions = all ? sessions$1 : sessions$1.filter((x) => x.status === "running");
+		const memoryFormatter = new Intl.NumberFormat(void 0, {
+			style: "unit",
+			unit: "megabyte"
+		});
+		const columns = {
+			ID: { value: (s$1) => s$1.id },
+			STATUS: {
+				value: (s$1) => s$1.status,
+				color: (s$1) => SessionStatusColor[s$1.status] ?? source_default.reset
+			},
+			CREATED: { value: (s$1) => timeAgo(s$1.createdAt) },
+			MEMORY: { value: (s$1) => memoryFormatter.format(s$1.memory) },
+			VCPUS: { value: (s$1) => s$1.vcpus },
+			RUNTIME: { value: (s$1) => s$1.runtime },
+			TIMEOUT: { value: (s$1) => timeAgo(s$1.createdAt + s$1.timeout) },
+			DURATION: { value: (s$1) => s$1.duration ? formatRunDuration(s$1.duration) : "-" },
+			SNAPSHOT: { value: (s$1) => s$1.sourceSnapshotId ?? "-" }
+		};
+		if (all) {
+			columns.CPU = { value: (s$1) => s$1.activeCpuDurationMs ? formatRunDuration(s$1.activeCpuDurationMs) : "-" };
+			columns["NETWORK (OUT/IN)"] = { value: (s$1) => s$1.networkTransfer?.egress || s$1.networkTransfer?.ingress ? `${formatBytes(s$1.networkTransfer?.egress ?? 0)} / ${formatBytes(s$1.networkTransfer?.ingress ?? 0)}` : "- / -" };
+		}
 		console.log(table({
-			rows: sessions$1,
-			columns: {
-				ID: { value: (s$1) => s$1.id },
-				STATUS: {
-					value: (s$1) => s$1.status,
-					color: (s$1) => SessionStatusColor[s$1.status] ?? source_default.reset
-				},
-				CREATED: { value: (s$1) => timeAgo(s$1.createdAt) },
-				MEMORY: { value: (s$1) => s$1.memory },
-				VCPUS: { value: (s$1) => s$1.vcpus },
-				RUNTIME: { value: (s$1) => s$1.runtime },
-				TIMEOUT: { value: (s$1) => timeAgo(s$1.createdAt + s$1.timeout) },
-				DURATION: { value: (s$1) => s$1.duration ? formatRunDuration(s$1.duration) : "-" }
-			}
+			rows: displayedSessions,
+			columns
 		}));
+		if (pagination.next !== null) console.log(formatNextCursorHint(pagination.next));
 	}
 });
 const sessions = (0, import_cjs$3.subcommands)({
@@ -14832,6 +14860,74 @@ const persistentCommand = import_cjs$1.command({
 		}
 	}
 });
+const snapshotExpirationCommand = import_cjs$1.command({
+	name: "snapshot-expiration",
+	description: "Update the default snapshot expiration of a sandbox",
+	args: {
+		sandbox: import_cjs$1.positional({
+			type: sandboxName,
+			description: "Sandbox name to update"
+		}),
+		duration: import_cjs$1.positional({
+			type: SnapshotExpiration,
+			description: "Snapshot expiration duration (e.g. 7d, 30d) or \"none\" for no expiration"
+		}),
+		scope
+	},
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandbox: name, duration }) {
+		const sandbox = await sandboxClient.get({
+			name,
+			projectId: project$1,
+			teamId: team$1,
+			token: token$1
+		});
+		const spinner = ora("Updating sandbox configuration...").start();
+		try {
+			await sandbox.update({ snapshotExpiration: (0, import_ms.default)(duration) });
+			spinner.stop();
+			const display = (0, import_ms.default)(duration) === 0 ? "none" : duration;
+			process.stderr.write("✅ Configuration updated for sandbox " + source_default.cyan(name) + "\n");
+			process.stderr.write(source_default.dim("   ╰ ") + "snapshot-expiration: " + source_default.cyan(display) + "\n");
+		} catch (error) {
+			spinner.stop();
+			throw error;
+		}
+	}
+});
+const currentSnapshotCommand = import_cjs$1.command({
+	name: "current-snapshot",
+	description: "Update the current snapshot of a sandbox",
+	args: {
+		sandbox: import_cjs$1.positional({
+			type: sandboxName,
+			description: "Sandbox name to update"
+		}),
+		snapshotId: import_cjs$1.positional({
+			type: snapshotId,
+			description: "Snapshot ID to set as the current snapshot"
+		}),
+		scope
+	},
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandbox: name, snapshotId: snapshotId$1 }) {
+		const sandbox = await sandboxClient.get({
+			name,
+			projectId: project$1,
+			teamId: team$1,
+			token: token$1
+		});
+		const spinner = ora("Updating sandbox configuration...").start();
+		try {
+			await sandbox.update({ currentSnapshotId: snapshotId$1 });
+			spinner.stop();
+			process.stderr.write("✅ Configuration updated for sandbox " + source_default.cyan(name) + "\n");
+			process.stderr.write(source_default.dim("   ╰ ") + "current-snapshot: " + source_default.cyan(snapshotId$1) + "\n");
+		} catch (error) {
+			spinner.stop();
+			if (error instanceof APIError && error.response.status === 404) throw new StyledError(`Snapshot '${snapshotId$1}' was not found or does not belong to this project.`, error);
+			throw error;
+		}
+	}
+});
 const listCommand = import_cjs$1.command({
 	name: "list",
 	description: "Display the current configuration of a sandbox",
@@ -14860,14 +14956,15 @@ const listCommand = import_cjs$1.command({
 			}
 		})();
 		const networkPolicy$1 = typeof sandbox.networkPolicy === "string" ? sandbox.networkPolicy : "restricted";
+		const tagsDisplay = sandbox.tags && Object.keys(sandbox.tags).length > 0 ? Object.entries(sandbox.tags).map(([k, v]) => `${k}=${v}`).join(", ") : "-";
 		const rows = [
 			{
 				field: "vCPUs",
-				value: String(sandbox.vcpus)
+				value: String(sandbox.vcpus ?? "-")
 			},
 			{
 				field: "Timeout",
-				value: (0, import_ms.default)(sandbox.timeout, { long: true })
+				value: sandbox.timeout != null ? (0, import_ms.default)(sandbox.timeout, { long: true }) : "-"
 			},
 			{
 				field: "Persistent",
@@ -14876,6 +14973,18 @@ const listCommand = import_cjs$1.command({
 			{
 				field: "Network policy",
 				value: String(networkPolicy$1)
+			},
+			{
+				field: "Snapshot expiration",
+				value: sandbox.snapshotExpiration != null && sandbox.snapshotExpiration > 0 ? (0, import_ms.default)(sandbox.snapshotExpiration, { long: true }) : sandbox.snapshotExpiration === 0 ? "none" : "-"
+			},
+			{
+				field: "Current snapshot",
+				value: sandbox.currentSnapshotId ?? "-"
+			},
+			{
+				field: "Tags",
+				value: tagsDisplay
 			}
 		];
 		console.log(table({
@@ -14931,6 +15040,48 @@ const networkPolicyCommand = import_cjs$1.command({
 		}
 	}
 });
+const tagsCommand = import_cjs$1.command({
+	name: "tags",
+	description: "Update the tags of a sandbox. Replaces all existing tags with the provided tags.",
+	args: {
+		sandbox: import_cjs$1.positional({
+			type: sandboxName,
+			description: "Sandbox name to update"
+		}),
+		tags: import_cjs$1.multioption({
+			long: "tag",
+			short: "t",
+			type: ObjectFromKeyValue,
+			description: "Key-value tags to set (e.g. --tag env=staging). Omit to clear all tags."
+		}),
+		scope
+	},
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandbox: name, tags }) {
+		const sandbox = await sandboxClient.get({
+			name,
+			projectId: project$1,
+			teamId: team$1,
+			token: token$1
+		});
+		const tagsObj = Object.keys(tags).length > 0 ? tags : {};
+		const spinner = ora("Updating sandbox tags...").start();
+		try {
+			await sandbox.update({ tags: tagsObj });
+			spinner.stop();
+			process.stderr.write("✅ Tags updated for sandbox " + source_default.cyan(name) + "\n");
+			const entries$1 = Object.entries(tagsObj);
+			if (entries$1.length === 0) process.stderr.write(source_default.dim("   ╰ ") + "all tags cleared\n");
+			else for (let i = 0; i < entries$1.length; i++) {
+				const [k, v] = entries$1[i];
+				const prefix$1 = i === entries$1.length - 1 ? source_default.dim("   ╰ ") : source_default.dim("   │ ");
+				process.stderr.write(prefix$1 + source_default.cyan(k) + "=" + source_default.cyan(v) + "\n");
+			}
+		} catch (error) {
+			spinner.stop();
+			throw error;
+		}
+	}
+});
 const config = import_cjs$1.subcommands({
 	name: "config",
 	description: "View and update sandbox configuration",
@@ -14939,7 +15090,10 @@ const config = import_cjs$1.subcommands({
 		vcpus: vcpusCommand,
 		timeout: timeoutCommand,
 		persistent: persistentCommand,
-		"network-policy": networkPolicyCommand
+		"network-policy": networkPolicyCommand,
+		"snapshot-expiration": snapshotExpirationCommand,
+		"current-snapshot": currentSnapshotCommand,
+		tags: tagsCommand
 	}
 });
 
@@ -14986,4 +15140,4 @@ const app = (opts) => (0, import_cjs.subcommands)({
 
 //#endregion
 export { source_exports as a, init_source as i, StyledError as n, require_cjs as r, app as t };
-//# sourceMappingURL=app-BbpAiciu.mjs.map
+//# sourceMappingURL=app-DfdLC3Kn.mjs.map