sandbox 3.0.0-beta.24 → 3.0.0-beta.26

package/dist/{app-CpryW0ai.mjs → app-jQvr1S8n.mjs}

@@ -2998,9 +2998,9 @@ var require_cjs = /* @__PURE__ */ __commonJS$1({ "../../node_modules/.pnpm/cmd-t
 
 //#endregion
 //#region src/args/runtime.ts
-var import_cjs$27 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$30 = /* @__PURE__ */ __toESM(require_cjs());
 const runtimeType = {
-	...import_cjs$27.oneOf([
+	...import_cjs$30.oneOf([
 		"node22",
 		"node24",
 		"node26",
@@ -3008,7 +3008,7 @@ const runtimeType = {
 	]),
 	displayName: "runtime"
 };
-const runtime = import_cjs$27.option({
+const runtime = import_cjs$30.option({
 	long: "runtime",
 	type: runtimeType,
 	defaultValue: () => "node24",
@@ -3102,13 +3102,13 @@ var require_ms = /* @__PURE__ */ __commonJS$1({ "../../node_modules/.pnpm/ms@2.1
 	* @return {String}
 	* @api private
 	*/
-	function fmtShort(ms$4) {
-		var msAbs = Math.abs(ms$4);
-		if (msAbs >= d) return Math.round(ms$4 / d) + "d";
-		if (msAbs >= h) return Math.round(ms$4 / h) + "h";
-		if (msAbs >= m) return Math.round(ms$4 / m) + "m";
-		if (msAbs >= s) return Math.round(ms$4 / s) + "s";
-		return ms$4 + "ms";
+	function fmtShort(ms$6) {
+		var msAbs = Math.abs(ms$6);
+		if (msAbs >= d) return Math.round(ms$6 / d) + "d";
+		if (msAbs >= h) return Math.round(ms$6 / h) + "h";
+		if (msAbs >= m) return Math.round(ms$6 / m) + "m";
+		if (msAbs >= s) return Math.round(ms$6 / s) + "s";
+		return ms$6 + "ms";
 	}
 	/**
 	* Long format for `ms`.
@@ -3117,28 +3117,28 @@ var require_ms = /* @__PURE__ */ __commonJS$1({ "../../node_modules/.pnpm/ms@2.1
 	* @return {String}
 	* @api private
 	*/
-	function fmtLong(ms$4) {
-		var msAbs = Math.abs(ms$4);
-		if (msAbs >= d) return plural(ms$4, msAbs, d, "day");
-		if (msAbs >= h) return plural(ms$4, msAbs, h, "hour");
-		if (msAbs >= m) return plural(ms$4, msAbs, m, "minute");
-		if (msAbs >= s) return plural(ms$4, msAbs, s, "second");
-		return ms$4 + " ms";
+	function fmtLong(ms$6) {
+		var msAbs = Math.abs(ms$6);
+		if (msAbs >= d) return plural(ms$6, msAbs, d, "day");
+		if (msAbs >= h) return plural(ms$6, msAbs, h, "hour");
+		if (msAbs >= m) return plural(ms$6, msAbs, m, "minute");
+		if (msAbs >= s) return plural(ms$6, msAbs, s, "second");
+		return ms$6 + " ms";
 	}
 	/**
 	* Pluralization helper.
 	*/
-	function plural(ms$4, msAbs, n, name) {
+	function plural(ms$6, msAbs, n, name) {
 		var isPlural = msAbs >= n * 1.5;
-		return Math.round(ms$4 / n) + " " + name + (isPlural ? "s" : "");
+		return Math.round(ms$6 / n) + " " + name + (isPlural ? "s" : "");
 	}
 }) });
 
 //#endregion
 //#region src/types/duration.ts
-var import_cjs$26 = require_cjs();
+var import_cjs$29 = require_cjs();
 init_source();
-const Duration = (0, import_cjs$26.extendType)(import_cjs$26.string, {
+const Duration = (0, import_cjs$29.extendType)(import_cjs$29.string, {
 	displayName: "num UNIT",
 	description: "A duration, e.g. 5m, 10s, 1h",
 	async from(string$2) {
@@ -3154,8 +3154,8 @@ const Duration = (0, import_cjs$26.extendType)(import_cjs$26.string, {
 
 //#endregion
 //#region src/args/timeout.ts
-var import_cjs$25 = /* @__PURE__ */ __toESM(require_cjs());
-const timeout = import_cjs$25.option({
+var import_cjs$28 = /* @__PURE__ */ __toESM(require_cjs());
+const timeout = import_cjs$28.option({
 	long: "timeout",
 	type: Duration,
 	description: "The maximum duration a sandbox can run for. Example: 5m, 30m",
@@ -3165,17 +3165,17 @@ const timeout = import_cjs$25.option({
 
 //#endregion
 //#region src/args/vcpus.ts
-var import_cjs$24 = /* @__PURE__ */ __toESM(require_cjs());
-const vcpusType = import_cjs$24.extendType(import_cjs$24.number, {
+var import_cjs$27 = /* @__PURE__ */ __toESM(require_cjs());
+const vcpusType = import_cjs$27.extendType(import_cjs$27.number, {
 	displayName: "COUNT",
 	async from(n) {
 		if (!Number.isInteger(n) || n < 1) throw new Error(`Invalid vCPU count: ${n}. Must be a positive integer.`);
 		return n;
 	}
 });
-const vcpus = import_cjs$24.option({
+const vcpus = import_cjs$27.option({
 	long: "vcpus",
-	type: import_cjs$24.optional(vcpusType),
+	type: import_cjs$27.optional(vcpusType),
 	description: "Number of vCPUs to allocate (each vCPU includes 2048 MB of memory)"
 });
 
@@ -3257,10 +3257,10 @@ const formatDistance = (token$1, count, options) => {
 
 //#endregion
 //#region ../../node_modules/.pnpm/date-fns@4.1.0/node_modules/date-fns/locale/_lib/buildFormatLongFn.js
-function buildFormatLongFn(args$4) {
+function buildFormatLongFn(args$5) {
 	return (options = {}) => {
-		const width = options.width ? String(options.width) : args$4.defaultWidth;
-		return args$4.formats[width] || args$4.formats[args$4.defaultWidth];
+		const width = options.width ? String(options.width) : args$5.defaultWidth;
+		return args$5.formats[width] || args$5.formats[args$5.defaultWidth];
 	};
 }
 
@@ -3344,20 +3344,20 @@ const formatRelative = (token$1, _date, _baseDate, _options$1) => formatRelative
 /**
 * The tuple of localized month values. The first element represents January.
 */
-function buildLocalizeFn(args$4) {
+function buildLocalizeFn(args$5) {
 	return (value, options) => {
 		const context = options?.context ? String(options.context) : "standalone";
 		let valuesArray;
-		if (context === "formatting" && args$4.formattingValues) {
-			const defaultWidth = args$4.defaultFormattingWidth || args$4.defaultWidth;
+		if (context === "formatting" && args$5.formattingValues) {
+			const defaultWidth = args$5.defaultFormattingWidth || args$5.defaultWidth;
 			const width = options?.width ? String(options.width) : defaultWidth;
-			valuesArray = args$4.formattingValues[width] || args$4.formattingValues[defaultWidth];
+			valuesArray = args$5.formattingValues[width] || args$5.formattingValues[defaultWidth];
 		} else {
-			const defaultWidth = args$4.defaultWidth;
-			const width = options?.width ? String(options.width) : args$4.defaultWidth;
-			valuesArray = args$4.values[width] || args$4.values[defaultWidth];
+			const defaultWidth = args$5.defaultWidth;
+			const width = options?.width ? String(options.width) : args$5.defaultWidth;
+			valuesArray = args$5.values[width] || args$5.values[defaultWidth];
 		}
-		const index = args$4.argumentCallback ? args$4.argumentCallback(value) : value;
+		const index = args$5.argumentCallback ? args$5.argumentCallback(value) : value;
 		return valuesArray[index];
 	};
 }
@@ -3574,17 +3574,17 @@ const localize = {
 
 //#endregion
 //#region ../../node_modules/.pnpm/date-fns@4.1.0/node_modules/date-fns/locale/_lib/buildMatchFn.js
-function buildMatchFn(args$4) {
+function buildMatchFn(args$5) {
 	return (string$2, options = {}) => {
 		const width = options.width;
-		const matchPattern = width && args$4.matchPatterns[width] || args$4.matchPatterns[args$4.defaultMatchWidth];
+		const matchPattern = width && args$5.matchPatterns[width] || args$5.matchPatterns[args$5.defaultMatchWidth];
 		const matchResult = string$2.match(matchPattern);
 		if (!matchResult) return null;
 		const matchedString = matchResult[0];
-		const parsePatterns = width && args$4.parsePatterns[width] || args$4.parsePatterns[args$4.defaultParseWidth];
+		const parsePatterns = width && args$5.parsePatterns[width] || args$5.parsePatterns[args$5.defaultParseWidth];
 		const key = Array.isArray(parsePatterns) ? findIndex(parsePatterns, (pattern) => pattern.test(matchedString)) : findKey(parsePatterns, (pattern) => pattern.test(matchedString));
 		let value;
-		value = args$4.valueCallback ? args$4.valueCallback(key) : key;
+		value = args$5.valueCallback ? args$5.valueCallback(key) : key;
 		value = options.valueCallback ? options.valueCallback(value) : value;
 		const rest$1 = string$2.slice(matchedString.length);
 		return {
@@ -3602,14 +3602,14 @@ function findIndex(array$1, predicate) {
 
 //#endregion
 //#region ../../node_modules/.pnpm/date-fns@4.1.0/node_modules/date-fns/locale/_lib/buildMatchPatternFn.js
-function buildMatchPatternFn(args$4) {
+function buildMatchPatternFn(args$5) {
 	return (string$2, options = {}) => {
-		const matchResult = string$2.match(args$4.matchPattern);
+		const matchResult = string$2.match(args$5.matchPattern);
 		if (!matchResult) return null;
 		const matchedString = matchResult[0];
-		const parseResult = string$2.match(args$4.parsePattern);
+		const parseResult = string$2.match(args$5.parsePattern);
 		if (!parseResult) return null;
-		let value = args$4.valueCallback ? args$4.valueCallback(parseResult[0]) : parseResult[0];
+		let value = args$5.valueCallback ? args$5.valueCallback(parseResult[0]) : parseResult[0];
 		value = options.valueCallback ? options.valueCallback(value) : value;
 		const rest$1 = string$2.slice(matchedString.length);
 		return {
@@ -4237,15 +4237,15 @@ function formatRunDuration(d$1) {
 	return `${d$1 / 1e3}s`;
 }
 function formatNextCursorHint(cursor) {
-	const args$4 = process.argv.slice(2);
+	const args$5 = process.argv.slice(2);
 	const filtered = [];
-	for (let i = 0; i < args$4.length; i++) {
-		if (args$4[i] === "--cursor") {
+	for (let i = 0; i < args$5.length; i++) {
+		if (args$5[i] === "--cursor") {
 			i++;
 			continue;
 		}
-		if (args$4[i].startsWith("--cursor=")) continue;
-		filtered.push(args$4[i]);
+		if (args$5[i].startsWith("--cursor=")) continue;
+		filtered.push(args$5[i]);
 	}
 	return `\nMore results: sandbox ${filtered.join(" ")} --cursor ${cursor}`;
 }
@@ -6754,10 +6754,10 @@ function _usingCtx() {
 
 //#endregion
 //#region src/commands/login.ts
-var import_cjs$23 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$26 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
 const debug$6 = createDebugger("sandbox:login");
-const login = import_cjs$23.command({
+const login = import_cjs$26.command({
 	name: "login",
 	description: "Log in to the Sandbox CLI",
 	args: {},
@@ -6975,7 +6975,7 @@ var require_dist = /* @__PURE__ */ __commonJS$1({ "../../node_modules/.pnpm/@ver
 
 //#endregion
 //#region src/args/auth.ts
-var import_cjs$22 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$25 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
 var import_dist = require_dist();
 const debug$5 = createDebugger("sandbox:args:auth");
@@ -6992,11 +6992,11 @@ function isTokenFresh() {
 function markTokenAsFresh() {
 	freshTokenAcquiredAt = Date.now();
 }
-const token = import_cjs$22.option({
+const token = import_cjs$25.option({
 	long: "token",
 	description: "A Vercel authentication token. If not provided, will use the token stored in your system from `VERCEL_AUTH_TOKEN` or will start a log in process.",
 	type: {
-		...import_cjs$22.string,
+		...import_cjs$25.string,
 		displayName: "pat_or_oidc",
 		defaultValueIsSerializable: false,
 		onMissing: async () => {
@@ -7179,29 +7179,29 @@ function getAuthFailureStatus(error) {
 
 //#endregion
 //#region src/args/scope.ts
-var import_cjs$21 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$24 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
-const project = import_cjs$21.option({
+const project = import_cjs$24.option({
 	long: "project",
 	type: {
-		...import_cjs$21.optional(import_cjs$21.string),
+		...import_cjs$24.optional(import_cjs$24.string),
 		displayName: "my-project"
 	},
 	description: "The project name or ID to associate with the command. Can be inferred from VERCEL_OIDC_TOKEN."
 });
 /** Parser for the `--team` option. */
-const teamParser = import_cjs$21.option({
+const teamParser = import_cjs$24.option({
 	long: "team",
 	type: {
-		...import_cjs$21.optional(import_cjs$21.string),
+		...import_cjs$24.optional(import_cjs$24.string),
 		displayName: "my-team"
 	}
 });
 /** Parser for the `--scope` option. */
-const scopeParser = import_cjs$21.option({
+const scopeParser = import_cjs$24.option({
 	long: "scope",
 	type: {
-		...import_cjs$21.optional(import_cjs$21.string),
+		...import_cjs$24.optional(import_cjs$24.string),
 		displayName: "my-team"
 	},
 	description: "The scope/team to associate with the command. Can be inferred from VERCEL_OIDC_TOKEN. [alias: --team]"
@@ -7290,7 +7290,7 @@ const scope = {
 
 //#endregion
 //#region package.json
-var version = "3.0.0-beta.24";
+var version = "3.0.0-beta.26";
 
 //#endregion
 //#region src/error.ts
@@ -7318,6 +7318,10 @@ const sandboxClient = {
 		fetch: fetchWithUserAgent,
 		...params
 	})),
+	fork: (params) => withErrorHandling(() => Sandbox.fork({
+		fetch: fetchWithUserAgent,
+		...params
+	})),
 	list: (params) => withErrorHandling(() => Sandbox.list({
 		fetch: fetchWithUserAgent,
 		...params
@@ -7329,10 +7333,6 @@ const snapshotClient = {
 		...params
 	})),
 	get: (params) => withErrorHandling(() => Snapshot.get({ ...params })),
-	fromSandbox: (name, opts) => withErrorHandling(() => Snapshot.fromSandbox(name, {
-		fetch: fetchWithUserAgent,
-		...opts
-	})),
 	tree: (params) => withErrorHandling(() => Snapshot.tree({
 		fetch: fetchWithUserAgent,
 		...params
@@ -7389,9 +7389,9 @@ async function writeResponseToTemp({ response, text }) {
 
 //#endregion
 //#region src/args/snapshot-id.ts
-var import_cjs$20 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$23 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
-const snapshotId = import_cjs$20.extendType(import_cjs$20.string, {
+const snapshotId = import_cjs$23.extendType(import_cjs$23.string, {
 	displayName: "snapshot_id",
 	description: "The ID of the snapshot",
 	async from(s$1) {
@@ -7400,6 +7400,78 @@ const snapshotId = import_cjs$20.extendType(import_cjs$20.string, {
 	}
 });
 
+//#endregion
+//#region src/args/ports.ts
+var import_cjs$22 = /* @__PURE__ */ __toESM(require_cjs());
+init_source();
+const publishPorts = import_cjs$22.multioption({
+	long: "publish-port",
+	short: "p",
+	description: "Publish sandbox port(s) to DOMAIN.vercel.run",
+	type: import_cjs$22.array(import_cjs$22.extendType(import_cjs$22.number, {
+		displayName: "PORT",
+		async from(number) {
+			if (!Number.isInteger(number) || number < 1024 || number > 65535) throw new Error([
+				`Invalid port: ${number}.`,
+				`${source_default.bold("hint:")} Ports must be integers between 1024-65535 (privileged ports 0-1023 are reserved).`,
+				"Examples: 3000, 8443"
+			].join("\n"));
+			return number;
+		}
+	}))
+});
+
+//#endregion
+//#region src/types/snapshot-expiration.ts
+var import_cjs$21 = require_cjs();
+const SnapshotExpiration = (0, import_cjs$21.extendType)(import_cjs$21.string, {
+	displayName: "DURATION|none",
+	description: "A duration (e.g. 7d, 30d) or \"none\" for no expiration",
+	async from(value) {
+		if (value === "none") return "0";
+		return Duration.from(value);
+	}
+});
+
+//#endregion
+//#region src/args/snapshot-retention.ts
+var import_cjs$20 = /* @__PURE__ */ __toESM(require_cjs());
+const snapshotExpiration = import_cjs$20.option({
+	long: "snapshot-expiration",
+	type: import_cjs$20.optional(SnapshotExpiration),
+	description: "Default snapshot expiration. Use \"none\" or 0 for no expiration. Example: 7d, 30d"
+});
+const keepLastSnapshots = import_cjs$20.option({
+	long: "keep-last-snapshots",
+	type: import_cjs$20.optional(import_cjs$20.extendType(import_cjs$20.number, {
+		displayName: "COUNT",
+		async from(n) {
+			if (!Number.isInteger(n) || n < 1 || n > 10) throw new Error(`Invalid --keep-last-snapshots value: ${n}. Must be an integer between 1 and 10.`);
+			return n;
+		}
+	})),
+	description: "Keep only the N most recent snapshots of this sandbox (1-10)."
+});
+const keepLastSnapshotsFor = import_cjs$20.option({
+	long: "keep-last-snapshots-for",
+	type: import_cjs$20.optional(SnapshotExpiration),
+	description: "Expiration applied to kept snapshots. Use \"none\" or 0 for no expiration. Example: 7d, 30d"
+});
+const deleteEvictedSnapshots = import_cjs$20.option({
+	long: "delete-evicted-snapshots",
+	type: import_cjs$20.optional({
+		...import_cjs$20.oneOf(["true", "false"]),
+		displayName: "true|false"
+	}),
+	description: "When \"true\" (the default), evicted snapshots are deleted immediately; when \"false\", they keep the default expiration."
+});
+const snapshotRetentionArgs = {
+	snapshotExpiration,
+	keepLastSnapshots,
+	keepLastSnapshotsFor,
+	deleteEvictedSnapshots
+};
+
 //#endregion
 //#region src/args/sandbox-name.ts
 var import_cjs$19 = /* @__PURE__ */ __toESM(require_cjs());
@@ -11112,15 +11184,15 @@ async function waitForOpen(ws) {
 //#endregion
 //#region src/util/print-command.ts
 init_source();
-function printCommand(command$1, args$4) {
-	return source_default.gray(source_default.dim("$ ") + [command$1, ...args$4].join(" "));
+function printCommand(command$1, args$5) {
+	return source_default.gray(source_default.dim("$ ") + [command$1, ...args$5].join(" "));
 }
 
 //#endregion
 //#region src/interactive-shell/extend-sandbox-timeout.ts
-var import_ms$3 = /* @__PURE__ */ __toESM(require_ms());
+var import_ms$5 = /* @__PURE__ */ __toESM(require_ms());
 const debug$2 = createDebugger("sandbox:timeout");
-const BUFFER = (0, import_ms$3.default)("10 seconds");
+const BUFFER = (0, import_ms$5.default)("10 seconds");
 async function extendSandboxTimeoutPeriodically(sandbox, signal) {
 	const session = sandbox.currentSession();
 	const timeout$1 = session.timeout;
@@ -11135,7 +11207,7 @@ async function extendSandboxTimeoutPeriodically(sandbox, signal) {
 			debug$2(`sleeping for ${sleepMs}ms until next timeout extension`);
 			await setTimeout$1(sleepMs, null, { signal });
 		}
-		await sandbox.extendTimeout((0, import_ms$3.default)("5 minutes"));
+		await sandbox.extendTimeout((0, import_ms$5.default)("5 minutes"));
 		const updatedTimeout = session.timeout;
 		if (updatedTimeout == null) return;
 		const nextTick$1 = session.createdAt.getTime() + updatedTimeout;
@@ -11441,7 +11513,7 @@ const ObjectFromKeyValue = import_cjs$18.extendType(import_cjs$18.array(KeyValue
 //#region src/commands/exec.ts
 var import_cjs$17 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
-const args$3 = {
+const args$4 = {
 	sandbox: import_cjs$17.positional({ type: sandboxName }),
 	command: import_cjs$17.positional({
 		displayName: "command",
@@ -11495,8 +11567,8 @@ const args$3 = {
 const exec = import_cjs$17.command({
 	name: "exec",
 	description: "Execute a command in an existing sandbox",
-	args: args$3,
-	async handler({ command: command$1, cwd, args: args$4, asSudo, sandbox: sandboxName$1, scope: { token: token$1, team: team$1, project: project$1 }, interactive, envVars, skipExtendingTimeout }) {
+	args: args$4,
+	async handler({ command: command$1, cwd, args: args$5, asSudo, sandbox: sandboxName$1, scope: { token: token$1, team: team$1, project: project$1 }, interactive, envVars, skipExtendingTimeout }) {
 		const sandbox = typeof sandboxName$1 !== "string" ? sandboxName$1 : await sandboxClient.get({
 			name: sandboxName$1,
 			projectId: project$1,
@@ -11505,10 +11577,10 @@ const exec = import_cjs$17.command({
 			__includeSystemRoutes: true
 		});
 		if (!interactive) {
-			console.error(printCommand(command$1, args$4));
+			console.error(printCommand(command$1, args$5));
 			const result = await sandbox.runCommand({
 				cmd: command$1,
-				args: args$4,
+				args: args$5,
 				stderr: process.stderr,
 				stdout: process.stdout,
 				sudo: asSudo,
@@ -11519,7 +11591,7 @@ const exec = import_cjs$17.command({
 		} else await startInteractiveShell({
 			sandbox,
 			cwd,
-			execution: [command$1, ...args$4],
+			execution: [command$1, ...args$5],
 			envVars,
 			sudo: asSudo,
 			skipExtendingTimeout
@@ -11583,8 +11655,8 @@ function resolveMode(networkPolicy$1, mode) {
 /**
 * Builds a NetworkPolicy from CLI arguments.
 */
-function buildNetworkPolicy(args$4) {
-	const { networkPolicy: networkPolicy$1, allowedDomains: allowedDomains$1, allowedCIDRs: allowedCIDRs$1, deniedCIDRs: deniedCIDRs$1 } = args$4;
+function buildNetworkPolicy(args$5) {
+	const { networkPolicy: networkPolicy$1, allowedDomains: allowedDomains$1, allowedCIDRs: allowedCIDRs$1, deniedCIDRs: deniedCIDRs$1 } = args$5;
 	const hasListOptions = allowedDomains$1.length > 0 || allowedCIDRs$1.length > 0 || deniedCIDRs$1.length > 0;
 	if (networkPolicy$1 && hasListOptions) throw new Error([`Cannot combine --network-policy=${networkPolicy$1} with --allowed-domain, --allowed-cidr, or --denied-cidr.`, `${source_default.bold("hint:")} Use --allowed-domain / --allowed-cidr / --denied-cidr without --network-policy for custom policies.`].join("\n"));
 	if (hasListOptions) return {
@@ -11598,162 +11670,152 @@ function buildNetworkPolicy(args$4) {
 }
 
 //#endregion
-//#region src/types/snapshot-expiration.ts
-var import_cjs$15 = require_cjs();
-const SnapshotExpiration = (0, import_cjs$15.extendType)(import_cjs$15.string, {
-	displayName: "DURATION|none",
-	description: "A duration (e.g. 7d, 30d) or \"none\" for no expiration",
-	async from(value) {
-		if (value === "none") return "0";
-		return Duration.from(value);
-	}
-});
+//#region src/util/keep-last-snapshots.ts
+var import_ms$4 = /* @__PURE__ */ __toESM(require_ms());
+init_source();
+/**
+* Validates the `--keep-last-snapshots*` flag combination and builds the
+* payload object that the SDK expects, or returns `undefined` when no
+* retention policy was configured.
+*
+* Throws when `--keep-last-snapshots-for` or `--delete-evicted-snapshots` are
+* passed without `--keep-last-snapshots`.
+*/
+function buildKeepLastSnapshotsPayload(input) {
+	const { keepLastSnapshots: keepLastSnapshots$1, keepLastSnapshotsFor: keepLastSnapshotsFor$1, deleteEvictedSnapshots: deleteEvictedSnapshots$1 } = input;
+	if (keepLastSnapshots$1 === void 0 && (keepLastSnapshotsFor$1 !== void 0 || deleteEvictedSnapshots$1 !== void 0)) throw new Error(["--keep-last-snapshots-for and --delete-evicted-snapshots require --keep-last-snapshots.", `${source_default.bold("hint:")} Pass --keep-last-snapshots <count> to enable the retention policy.`].join("\n"));
+	if (keepLastSnapshots$1 === void 0) return;
+	return {
+		count: keepLastSnapshots$1,
+		expiration: keepLastSnapshotsFor$1 !== void 0 ? (0, import_ms$4.default)(keepLastSnapshotsFor$1) : void 0,
+		deleteEvicted: deleteEvictedSnapshots$1 !== void 0 ? deleteEvictedSnapshots$1 === "true" : void 0
+	};
+}
+
+//#endregion
+//#region src/util/print-sandbox-summary.ts
+init_source();
+/**
+* Print the "✅ Sandbox <name> <action>." summary that the create and fork
+* commands emit after a successful creation, including project/team and any
+* published port routes.
+*
+* - The sandbox name is written to stdout, everything else to stderr — so
+*   `sandbox create | xargs -I {} sandbox exec {} -- ...` keeps working.
+* - Pass `action: "created"` for create, or `action: \`forked from ${chalk.cyan(source)}\``
+*   for fork.
+*/
+function printSandboxSummary(opts) {
+	const { sandbox, scope: scope$1, action } = opts;
+	const teamDisplay = scope$1.teamSlug ?? scope$1.team;
+	const projectDisplay = scope$1.projectSlug ?? scope$1.project;
+	const routes = sandbox.routes.filter((x) => x.port !== sandbox.interactivePort);
+	const hasPorts = routes.length > 0;
+	process.stderr.write("✅ Sandbox ");
+	process.stdout.write(source_default.cyan(sandbox.name));
+	process.stderr.write(" " + action + ".\n");
+	process.stderr.write(source_default.dim("   │ ") + "team: " + source_default.cyan(teamDisplay) + "\n");
+	if (hasPorts) {
+		process.stderr.write(source_default.dim("   │ ") + "project: " + source_default.cyan(projectDisplay) + "\n");
+		process.stderr.write(source_default.dim("   │ ") + "ports:\n");
+		for (let i = 0; i < routes.length; i++) {
+			const route = routes[i];
+			const prefix$1 = i === routes.length - 1 ? source_default.dim("   ╰ ") : source_default.dim("   │ ");
+			process.stderr.write(prefix$1 + "• " + route.port + " -> " + source_default.cyan(route.url) + "\n");
+		}
+	} else process.stderr.write(source_default.dim("   ╰ ") + "project: " + source_default.cyan(projectDisplay) + "\n");
+}
 
 //#endregion
 //#region src/commands/create.ts
-var import_cjs$14 = /* @__PURE__ */ __toESM(require_cjs());
-var import_ms$2 = /* @__PURE__ */ __toESM(require_ms());
+var import_cjs$15 = /* @__PURE__ */ __toESM(require_cjs());
+var import_ms$3 = /* @__PURE__ */ __toESM(require_ms());
 init_source();
-const args$2 = {
-	name: import_cjs$14.option({
+const args$3 = {
+	name: import_cjs$15.option({
 		long: "name",
 		description: "A user-chosen name for the sandbox. It must be unique per project.",
-		type: import_cjs$14.optional(import_cjs$14.string)
+		type: import_cjs$15.optional(import_cjs$15.string)
 	}),
-	nonPersistent: import_cjs$14.flag({
+	nonPersistent: import_cjs$15.flag({
 		long: "non-persistent",
 		description: "Disable automatic restore of the filesystem between sessions."
 	}),
 	runtime,
 	timeout,
 	vcpus,
-	ports: import_cjs$14.multioption({
-		long: "publish-port",
-		short: "p",
-		description: "Publish sandbox port(s) to DOMAIN.vercel.run",
-		type: import_cjs$14.array(import_cjs$14.extendType(import_cjs$14.number, {
-			displayName: "PORT",
-			async from(number) {
-				if (number < 1024 || number > 65535) throw new Error([
-					`Invalid port: ${number}.`,
-					`${source_default.bold("hint:")} Ports must be between 1024-65535 (privileged ports 0-1023 are reserved).`,
-					"╰▶ Examples: 3000, 8080, 8443"
-				].join("\n"));
-				return number;
-			}
-		}))
-	}),
-	silent: import_cjs$14.flag({
+	ports: publishPorts,
+	silent: import_cjs$15.flag({
 		long: "silent",
 		description: "Don't write sandbox name to stdout"
 	}),
-	snapshot: import_cjs$14.option({
+	snapshot: import_cjs$15.option({
 		long: "snapshot",
 		short: "s",
 		description: "Start the sandbox from a snapshot ID",
-		type: import_cjs$14.optional(snapshotId)
+		type: import_cjs$15.optional(snapshotId)
 	}),
-	sandboxSnapshot: import_cjs$14.option({
-		long: "sandbox-snapshot",
-		description: "Start the sandbox from another sandbox's current snapshot",
-		type: import_cjs$14.optional(sandboxName)
-	}),
-	connect: import_cjs$14.flag({
+	connect: import_cjs$15.flag({
 		long: "connect",
 		description: "Start an interactive shell session after creating the sandbox"
 	}),
-	envVars: import_cjs$14.multioption({
+	envVars: import_cjs$15.multioption({
 		long: "env",
 		short: "e",
 		type: ObjectFromKeyValue,
 		description: "Default environment variables for sandbox commands"
 	}),
-	tags: import_cjs$14.multioption({
+	tags: import_cjs$15.multioption({
 		long: "tag",
 		short: "t",
 		type: ObjectFromKeyValue,
 		description: "Key-value tags to associate with the sandbox (e.g. --tag env=staging)"
 	}),
-	snapshotExpiration: import_cjs$14.option({
-		long: "snapshot-expiration",
-		type: import_cjs$14.optional(SnapshotExpiration),
-		description: "Default snapshot expiration. Use \"none\" or 0 for no expiration. Example: 7d, 30d"
-	}),
-	keepLastSnapshots: import_cjs$14.option({
-		long: "keep-last-snapshots",
-		type: import_cjs$14.optional(import_cjs$14.extendType(import_cjs$14.number, {
-			displayName: "COUNT",
-			async from(n) {
-				if (!Number.isInteger(n) || n < 1 || n > 10) throw new Error(`Invalid --keep-last-snapshots value: ${n}. Must be an integer between 1 and 10.`);
-				return n;
-			}
-		})),
-		description: "Keep only the N most recent snapshots of this sandbox (1-10)."
-	}),
-	keepLastSnapshotsFor: import_cjs$14.option({
-		long: "keep-last-snapshots-for",
-		type: import_cjs$14.optional(SnapshotExpiration),
-		description: "Expiration applied to kept snapshots. Use \"none\" or 0 for no expiration. Example: 7d, 30d"
-	}),
-	deleteEvictedSnapshots: import_cjs$14.option({
-		long: "delete-evicted-snapshots",
-		type: import_cjs$14.optional({
-			...import_cjs$14.oneOf(["true", "false"]),
-			displayName: "true|false"
-		}),
-		description: "When \"true\" (the default), evicted snapshots are deleted immediately; when \"false\", they keep the default expiration."
-	}),
+	...snapshotRetentionArgs,
 	...networkPolicyArgs,
 	scope
 };
-const create = import_cjs$14.command({
+const create = import_cjs$15.command({
 	name: "create",
 	description: "Create a sandbox in the specified account and project.",
-	args: args$2,
+	args: args$3,
 	examples: [{
 		description: "Create and connect to a sandbox without a network access",
 		command: `sandbox run --network-policy=none --connect`
 	}],
-	async handler({ name, nonPersistent, ports, scope: scope$1, runtime: runtime$1, timeout: timeout$1, vcpus: vcpus$1, silent, snapshot: snapshot$1, sandboxSnapshot, connect: connect$2, envVars, tags, snapshotExpiration, keepLastSnapshots, keepLastSnapshotsFor, deleteEvictedSnapshots, networkPolicy: networkPolicyMode$1, allowedDomains: allowedDomains$1, allowedCIDRs: allowedCIDRs$1, deniedCIDRs: deniedCIDRs$1 }) {
-		if (snapshot$1 && sandboxSnapshot) throw new Error([`Cannot use --snapshot and --sandbox-snapshot together.`, `${source_default.bold("hint:")} Pick one source for the new sandbox.`].join("\n"));
+	async handler({ name, nonPersistent, ports, scope: scope$1, runtime: runtime$1, timeout: timeout$1, vcpus: vcpus$1, silent, snapshot: snapshot$1, connect: connect$2, envVars, tags, snapshotExpiration: snapshotExpiration$1, keepLastSnapshots: keepLastSnapshots$1, keepLastSnapshotsFor: keepLastSnapshotsFor$1, deleteEvictedSnapshots: deleteEvictedSnapshots$1, networkPolicy: networkPolicyMode$1, allowedDomains: allowedDomains$1, allowedCIDRs: allowedCIDRs$1, deniedCIDRs: deniedCIDRs$1 }) {
 		const networkPolicy$1 = buildNetworkPolicy({
 			networkPolicy: networkPolicyMode$1,
 			allowedDomains: allowedDomains$1,
 			allowedCIDRs: allowedCIDRs$1,
 			deniedCIDRs: deniedCIDRs$1
 		});
-		if (keepLastSnapshots === void 0 && (keepLastSnapshotsFor !== void 0 || deleteEvictedSnapshots !== void 0)) throw new Error(["--keep-last-snapshots-for and --delete-evicted-snapshots require --keep-last-snapshots.", `${source_default.bold("hint:")} Pass --keep-last-snapshots <count> to enable the retention policy.`].join("\n"));
-		const keepLastSnapshotsPayload = keepLastSnapshots !== void 0 ? {
-			count: keepLastSnapshots,
-			expiration: keepLastSnapshotsFor !== void 0 ? (0, import_ms$2.default)(keepLastSnapshotsFor) : void 0,
-			deleteEvicted: deleteEvictedSnapshots !== void 0 ? deleteEvictedSnapshots === "true" : void 0
-		} : void 0;
+		const keepLastSnapshotsPayload = buildKeepLastSnapshotsPayload({
+			keepLastSnapshots: keepLastSnapshots$1,
+			keepLastSnapshotsFor: keepLastSnapshotsFor$1,
+			deleteEvictedSnapshots: deleteEvictedSnapshots$1
+		});
 		const persistent = !nonPersistent;
 		const resources = vcpus$1 ? { vcpus: vcpus$1 } : void 0;
 		const tagsObj = Object.keys(tags).length > 0 ? tags : void 0;
-		const resolvedSnapshot = snapshot$1 ?? (sandboxSnapshot ? await snapshotClient.fromSandbox(sandboxSnapshot, {
-			teamId: scope$1.team,
-			projectId: scope$1.project,
-			token: scope$1.token
-		}) : void 0);
 		const spinner = silent ? void 0 : ora("Creating sandbox...").start();
-		const sandbox = resolvedSnapshot ? await sandboxClient.create({
+		const sandbox = snapshot$1 ? await sandboxClient.create({
 			name,
 			source: {
 				type: "snapshot",
-				snapshotId: resolvedSnapshot
+				snapshotId: snapshot$1
 			},
 			teamId: scope$1.team,
 			projectId: scope$1.project,
 			token: scope$1.token,
 			ports,
-			timeout: (0, import_ms$2.default)(timeout$1),
+			timeout: (0, import_ms$3.default)(timeout$1),
 			resources,
 			networkPolicy: networkPolicy$1,
 			env: envVars,
 			tags: tagsObj,
 			persistent,
-			snapshotExpiration: snapshotExpiration ? (0, import_ms$2.default)(snapshotExpiration) : void 0,
+			snapshotExpiration: snapshotExpiration$1 ? (0, import_ms$3.default)(snapshotExpiration$1) : void 0,
 			keepLastSnapshots: keepLastSnapshotsPayload,
 			__interactive: true
 		}) : await sandboxClient.create({
@@ -11763,13 +11825,13 @@ const create = import_cjs$14.command({
 			token: scope$1.token,
 			ports,
 			runtime: runtime$1,
-			timeout: (0, import_ms$2.default)(timeout$1),
+			timeout: (0, import_ms$3.default)(timeout$1),
 			resources,
 			networkPolicy: networkPolicy$1,
 			env: envVars,
 			tags: tagsObj,
 			persistent,
-			snapshotExpiration: snapshotExpiration ? (0, import_ms$2.default)(snapshotExpiration) : void 0,
+			snapshotExpiration: snapshotExpiration$1 ? (0, import_ms$3.default)(snapshotExpiration$1) : void 0,
 			keepLastSnapshots: keepLastSnapshotsPayload,
 			__interactive: true
 		});
@@ -11779,25 +11841,132 @@ const create = import_cjs$14.command({
 			`${source_default.bold("hint:")} This is an internal error. Please try again.`,
 			"╰▶ Report this issue: https://github.com/vercel/sandbox/issues"
 		].join("\n"));
-		const routes = sandbox.routes.filter((x) => x.port !== sandbox.interactivePort);
-		if (!silent) {
-			const teamDisplay = scope$1.teamSlug ?? scope$1.team;
-			const projectDisplay = scope$1.projectSlug ?? scope$1.project;
-			const hasPorts = routes.length > 0;
-			process.stderr.write("✅ Sandbox ");
-			process.stdout.write(source_default.cyan(sandbox.name));
-			process.stderr.write(" created.\n");
-			process.stderr.write(source_default.dim("   │ ") + "team: " + source_default.cyan(teamDisplay) + "\n");
-			if (hasPorts) {
-				process.stderr.write(source_default.dim("   │ ") + "project: " + source_default.cyan(projectDisplay) + "\n");
-				process.stderr.write(source_default.dim("   │ ") + "ports:\n");
-				for (let i = 0; i < routes.length; i++) {
-					const route = routes[i];
-					const prefix$1 = i === routes.length - 1 ? source_default.dim("   ╰ ") : source_default.dim("   │ ");
-					process.stderr.write(prefix$1 + "• " + route.port + " -> " + source_default.cyan(route.url) + "\n");
-				}
-			} else process.stderr.write(source_default.dim("   ╰ ") + "project: " + source_default.cyan(projectDisplay) + "\n");
-		}
+		if (!silent) printSandboxSummary({
+			sandbox,
+			scope: scope$1,
+			action: "created"
+		});
+		if (connect$2) await exec.handler({
+			scope: scope$1,
+			asSudo: false,
+			args: [],
+			cwd: void 0,
+			skipExtendingTimeout: false,
+			envVars: {},
+			command: "sh",
+			interactive: true,
+			tty: true,
+			sandbox
+		});
+		return sandbox;
+	}
+});
+
+//#endregion
+//#region src/commands/fork.ts
+var import_cjs$14 = /* @__PURE__ */ __toESM(require_cjs());
+var import_ms$2 = /* @__PURE__ */ __toESM(require_ms());
+init_source();
+const args$2 = {
+	source: import_cjs$14.positional({
+		displayName: "source",
+		description: "Name of the source sandbox to fork from.",
+		type: sandboxName
+	}),
+	name: import_cjs$14.option({
+		long: "name",
+		description: "A user-chosen name for the forked sandbox. Must be unique per project.",
+		type: import_cjs$14.optional(import_cjs$14.string)
+	}),
+	nonPersistent: import_cjs$14.flag({
+		long: "non-persistent",
+		description: "Disable automatic restore of the filesystem between sessions."
+	}),
+	timeout: import_cjs$14.option({
+		long: "timeout",
+		type: import_cjs$14.optional(Duration),
+		description: "Override the maximum sandbox runtime (inherited from source if omitted). Example: 5m, 30m"
+	}),
+	vcpus,
+	ports: publishPorts,
+	silent: import_cjs$14.flag({
+		long: "silent",
+		description: "Don't write sandbox name to stdout"
+	}),
+	connect: import_cjs$14.flag({
+		long: "connect",
+		description: "Start an interactive shell session after creating the forked sandbox"
+	}),
+	envVars: import_cjs$14.multioption({
+		long: "env",
+		short: "e",
+		type: ObjectFromKeyValue,
+		description: "Environment variables to set on the fork. Env vars from the source sandbox are not copied (encrypted server-side)."
+	}),
+	tags: import_cjs$14.multioption({
+		long: "tag",
+		short: "t",
+		type: ObjectFromKeyValue,
+		description: "Key-value tags to associate with the fork. When provided, fully replaces the tags copied from the source (no per-key merge)."
+	}),
+	...snapshotRetentionArgs,
+	...networkPolicyArgs,
+	scope
+};
+const fork = import_cjs$14.command({
+	name: "fork",
+	description: "Fork an existing sandbox into a new one. Copies config (cpu, timeout, network policy, tags, etc.) from the source sandbox; env vars are NOT copied and must be re-supplied via --env.",
+	args: args$2,
+	examples: [{
+		description: "Fork a sandbox with all config copied from the source",
+		command: `sandbox fork my-source`
+	}, {
+		description: "Fork with a specific name and overridden vcpus",
+		command: `sandbox fork my-source --name my-forked-sandbox --vcpus 4`
+	}],
+	async handler({ source, name, nonPersistent, ports, scope: scope$1, timeout: timeout$1, vcpus: vcpus$1, silent, connect: connect$2, envVars, tags, snapshotExpiration: snapshotExpiration$1, keepLastSnapshots: keepLastSnapshots$1, keepLastSnapshotsFor: keepLastSnapshotsFor$1, deleteEvictedSnapshots: deleteEvictedSnapshots$1, networkPolicy: networkPolicyMode$1, allowedDomains: allowedDomains$1, allowedCIDRs: allowedCIDRs$1, deniedCIDRs: deniedCIDRs$1 }) {
+		const networkPolicy$1 = networkPolicyMode$1 !== void 0 || allowedDomains$1.length > 0 || allowedCIDRs$1.length > 0 || deniedCIDRs$1.length > 0 ? buildNetworkPolicy({
+			networkPolicy: networkPolicyMode$1,
+			allowedDomains: allowedDomains$1,
+			allowedCIDRs: allowedCIDRs$1,
+			deniedCIDRs: deniedCIDRs$1
+		}) : void 0;
+		const keepLastSnapshotsPayload = buildKeepLastSnapshotsPayload({
+			keepLastSnapshots: keepLastSnapshots$1,
+			keepLastSnapshotsFor: keepLastSnapshotsFor$1,
+			deleteEvictedSnapshots: deleteEvictedSnapshots$1
+		});
+		const tagsObj = Object.keys(tags).length > 0 ? tags : void 0;
+		const envObj = Object.keys(envVars).length > 0 ? envVars : void 0;
+		const spinner = silent ? void 0 : ora(`Forking sandbox ${source_default.cyan(source)}...`).start();
+		const sandbox = await sandboxClient.fork({
+			sourceSandbox: source,
+			teamId: scope$1.team,
+			projectId: scope$1.project,
+			token: scope$1.token,
+			...name !== void 0 && { name },
+			...ports.length > 0 && { ports },
+			...timeout$1 !== void 0 && { timeout: (0, import_ms$2.default)(timeout$1) },
+			...vcpus$1 !== void 0 && { resources: { vcpus: vcpus$1 } },
+			...networkPolicy$1 !== void 0 && { networkPolicy: networkPolicy$1 },
+			...envObj !== void 0 && { env: envObj },
+			...tagsObj !== void 0 && { tags: tagsObj },
+			...nonPersistent && { persistent: false },
+			...snapshotExpiration$1 !== void 0 && { snapshotExpiration: (0, import_ms$2.default)(snapshotExpiration$1) },
+			...keepLastSnapshotsPayload !== void 0 && { keepLastSnapshots: keepLastSnapshotsPayload },
+			__interactive: true
+		});
+		spinner?.stop();
+		if (!sandbox.interactivePort) throw new Error([
+			`Sandbox forked but interactive port is missing.`,
+			`${source_default.bold("hint:")} This is an internal error. Please try again.`,
+			"╰▶ Report this issue: https://github.com/vercel/sandbox/issues"
+		].join("\n"));
+		if (!silent) printSandboxSummary({
+			sandbox,
+			scope: scope$1,
+			action: `forked from ${source_default.cyan(source)}`
+		});
 		if (connect$2) await exec.handler({
 			scope: scope$1,
 			asSudo: false,
@@ -11826,8 +11995,8 @@ function omit(obj, ...keys) {
 //#region src/commands/run.ts
 var import_cjs$13 = /* @__PURE__ */ __toESM(require_cjs());
 const args$1 = {
-	...args$2,
-	...omit(args$3, "sandbox"),
+	...args$3,
+	...omit(args$4, "sandbox"),
 	removeAfterUse: import_cjs$13.flag({
 		long: "rm",
 		description: "Automatically remove the sandbox when the command exits."
@@ -12002,14 +12171,14 @@ const connect = import_cjs$11.command({
 	name: "connect",
 	aliases: ["ssh", "shell"],
 	description: "Start an interactive shell in an existing sandbox",
-	args: omit(args$3, "command", "args", "interactive", "tty"),
-	async handler(args$4) {
+	args: omit(args$4, "command", "args", "interactive", "tty"),
+	async handler(args$5) {
 		return exec.handler({
 			command: "sh",
 			args: [],
 			interactive: true,
 			tty: true,
-			...args$4
+			...args$5
 		});
 	}
 });
@@ -12236,7 +12405,7 @@ var require_eventemitter3 = /* @__PURE__ */ __commonJS$1({ "../../node_modules/.
 	EventEmitter$1.prototype.emit = function emit(event, a1, a2, a3, a4, a5) {
 		var evt = prefix ? prefix + event : event;
 		if (!this._events[evt]) return false;
-		var listeners = this._events[evt], len = arguments.length, args$4, i;
+		var listeners = this._events[evt], len = arguments.length, args$5, i;
 		if (listeners.fn) {
 			if (listeners.once) this.removeListener(event, listeners.fn, void 0, true);
 			switch (len) {
@@ -12247,8 +12416,8 @@ var require_eventemitter3 = /* @__PURE__ */ __commonJS$1({ "../../node_modules/.
 				case 5: return listeners.fn.call(listeners.context, a1, a2, a3, a4), true;
 				case 6: return listeners.fn.call(listeners.context, a1, a2, a3, a4, a5), true;
 			}
-			for (i = 1, args$4 = new Array(len - 1); i < len; i++) args$4[i - 1] = arguments[i];
-			listeners.fn.apply(listeners.context, args$4);
+			for (i = 1, args$5 = new Array(len - 1); i < len; i++) args$5[i - 1] = arguments[i];
+			listeners.fn.apply(listeners.context, args$5);
 		} else {
 			var length = listeners.length, j;
 			for (i = 0; i < length; i++) {
@@ -12267,8 +12436,8 @@ var require_eventemitter3 = /* @__PURE__ */ __commonJS$1({ "../../node_modules/.
 						listeners[i].fn.call(listeners[i].context, a1, a2, a3);
 						break;
 					default:
-						if (!args$4) for (j = 1, args$4 = new Array(len - 1); j < len; j++) args$4[j - 1] = arguments[j];
-						listeners[i].fn.apply(listeners[i].context, args$4);
+						if (!args$5) for (j = 1, args$5 = new Array(len - 1); j < len; j++) args$5[j - 1] = arguments[j];
+						listeners[i].fn.apply(listeners[i].context, args$5);
 				}
 			}
 		}
@@ -12681,8 +12850,8 @@ var EventManager = class {
 	constructor() {
 		this.emitter = new eventemitter3_default();
 	}
-	emit(dispatch, args$4) {
-		this.emitter.emit(dispatch, args$4);
+	emit(dispatch, args$5) {
+		this.emitter.emit(dispatch, args$5);
 	}
 	on(dispatch, handler) {
 		this.emitter.addListener(dispatch, handler);
@@ -12834,9 +13003,9 @@ var ListrLogger = class {
 		if (!message) return message;
 		return this.applyFormat(`[${message}]`, options);
 	}
-	splat(...args$4) {
-		const message = args$4.shift() ?? "";
-		return args$4.length === 0 ? message : splat(message, args$4);
+	splat(...args$5) {
+		const message = args$5.shift() ?? "";
+		return args$5.length === 0 ? message : splat(message, args$5);
 	}
 	suffix(message, ...suffixes) {
 		suffixes.filter(Boolean).forEach((suffix) => {
@@ -12918,12 +13087,12 @@ var ProcessOutputBuffer = class {
 	get length() {
 		return this.buffer.length;
 	}
-	write(data, ...args$4) {
-		const callback = args$4[args$4.length - 1];
+	write(data, ...args$5) {
+		const callback = args$5[args$5.length - 1];
 		this.buffer.push({
 			time: Date.now(),
 			stream: this.options?.stream,
-			entry: this.decoder.write(typeof data === "string" ? Buffer.from(data, typeof args$4[0] === "string" ? args$4[0] : void 0) : Buffer.from(data))
+			entry: this.decoder.write(typeof data === "string" ? Buffer.from(data, typeof args$5[0] === "string" ? args$5[0] : void 0) : Buffer.from(data))
 		});
 		if (this.options?.limit) this.buffer = this.buffer.slice(-this.options.limit);
 		if (typeof callback === "function") callback();
@@ -12951,8 +13120,8 @@ var ProcessOutputStream = class {
 		this.buffer.reset();
 		return buffer;
 	}
-	write(...args$4) {
-		return this.method.apply(this.stream, args$4);
+	write(...args$5) {
+		return this.method.apply(this.stream, args$5);
 	}
 };
 /**
@@ -13815,8 +13984,8 @@ function getRenderer(options) {
 * If the value itself is a function it will evaluate it with the passed in arguments,
 * elsewise it will directly return itself.
 */
-function assertFunctionOrSelf(functionOrSelf, ...args$4) {
-	if (typeof functionOrSelf === "function") return functionOrSelf(...args$4);
+function assertFunctionOrSelf(functionOrSelf, ...args$5) {
+	if (typeof functionOrSelf === "function") return functionOrSelf(...args$5);
 	else return functionOrSelf;
 }
 const clone = (0, import_rfdc.default)({ circles: true });
@@ -14596,10 +14765,10 @@ const snapshot = import_cjs$6.command({
 init_source();
 function formatExpires(expiresAt) {
 	if (expiresAt === void 0) return source_default.gray("never");
-	const ms$4 = expiresAt - Date.now();
-	if (ms$4 <= 0) return source_default.red("expired");
+	const ms$6 = expiresAt - Date.now();
+	if (ms$6 <= 0) return source_default.red("expired");
 	const formatted = timeAgo(expiresAt);
-	return ms$4 <= 3600 * 1e3 ? source_default.red(formatted) : source_default.green(formatted);
+	return ms$6 <= 3600 * 1e3 ? source_default.red(formatted) : source_default.green(formatted);
 }
 function renderNode(id, expiresAt, isCurrent) {
 	const bullet = isCurrent ? source_default.magenta.bold("●") : source_default.magenta("●");
@@ -15375,6 +15544,47 @@ const currentSnapshotCommand = import_cjs$1.command({
 		}
 	}
 });
+const portsCommand = import_cjs$1.command({
+	name: "ports",
+	description: "Update the published ports of a sandbox. Replaces all existing published ports.",
+	args: {
+		sandbox: import_cjs$1.positional({
+			type: sandboxName,
+			description: "Sandbox name to update"
+		}),
+		ports: publishPorts,
+		scope
+	},
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandbox: name, ports }) {
+		const sandbox = await sandboxClient.get({
+			name,
+			projectId: project$1,
+			teamId: team$1,
+			token: token$1
+		});
+		const spinner = ora("Updating sandbox ports...").start();
+		try {
+			await sandbox.update({ ports });
+			spinner.stop();
+			process.stderr.write("✅ Ports updated for sandbox " + source_default.cyan(name) + "\n");
+			if (ports.length === 0) process.stderr.write(source_default.dim("   ╰ ") + "all ports unpublished\n");
+			else {
+				const routes = getPublishedRoutes(sandbox);
+				process.stderr.write(source_default.dim("   │ ") + "ports:\n");
+				for (let i = 0; i < ports.length; i++) {
+					const port = ports[i];
+					const route = routes?.find((route$1) => route$1.port === port);
+					const prefix$1 = i === ports.length - 1 ? source_default.dim("   ╰ ") : source_default.dim("   │ ");
+					const url = route ? " -> " + source_default.cyan(route.url) : "";
+					process.stderr.write(prefix$1 + "• " + port + url + "\n");
+				}
+			}
+		} catch (error) {
+			spinner.stop();
+			throw error;
+		}
+	}
+});
 const listCommand = import_cjs$1.command({
 	name: "list",
 	description: "Display the current configuration of a sandbox",
@@ -15421,6 +15631,10 @@ const listCommand = import_cjs$1.command({
 				field: "Network policy",
 				value: String(networkPolicy$1)
 			},
+			{
+				field: "Ports",
+				value: formatPorts(sandbox)
+			},
 			{
 				field: "Snapshot expiration",
 				value: sandbox.snapshotExpiration != null && sandbox.snapshotExpiration > 0 ? (0, import_ms.default)(sandbox.snapshotExpiration, { long: true }) : sandbox.snapshotExpiration === 0 ? "none" : "-"
@@ -15533,13 +15747,21 @@ const tagsCommand = import_cjs$1.command({
 		}
 	}
 });
-function formatKeepLastSnapshots(keepLastSnapshots) {
-	if (!keepLastSnapshots) return "-";
-	const parts = [`count=${keepLastSnapshots.count}`];
-	if (keepLastSnapshots.expiration !== void 0) parts.push(`for=${keepLastSnapshots.expiration === 0 ? "none" : (0, import_ms.default)(keepLastSnapshots.expiration, { long: true })}`);
-	if (keepLastSnapshots.deleteEvicted !== void 0) parts.push(`delete-evicted-snapshots=${keepLastSnapshots.deleteEvicted}`);
+function formatKeepLastSnapshots(keepLastSnapshots$1) {
+	if (!keepLastSnapshots$1) return "-";
+	const parts = [`count=${keepLastSnapshots$1.count}`];
+	if (keepLastSnapshots$1.expiration !== void 0) parts.push(`for=${keepLastSnapshots$1.expiration === 0 ? "none" : (0, import_ms.default)(keepLastSnapshots$1.expiration, { long: true })}`);
+	if (keepLastSnapshots$1.deleteEvicted !== void 0) parts.push(`delete-evicted-snapshots=${keepLastSnapshots$1.deleteEvicted}`);
 	return parts.join(", ");
 }
+function formatPorts(sandbox) {
+	const ports = getPublishedRoutes(sandbox)?.map((route) => route.port) ?? [];
+	if (ports.length === 0) return "-";
+	return ports.join(", ");
+}
+function getPublishedRoutes(sandbox) {
+	return sandbox.routes.filter((route) => route.port !== sandbox.interactivePort);
+}
 const config = import_cjs$1.subcommands({
 	name: "config",
 	description: "View and update sandbox configuration",
@@ -15554,6 +15776,7 @@ const config = import_cjs$1.subcommands({
 		"keep-last-snapshots-for": keepLastSnapshotsForCommand,
 		"delete-evicted-snapshots": deleteEvictedSnapshotsCommand,
 		"current-snapshot": currentSnapshotCommand,
+		ports: portsCommand,
 		tags: tagsCommand
 	}
 });
@@ -15568,6 +15791,7 @@ const app = (opts) => (0, import_cjs.subcommands)({
 	cmds: {
 		list,
 		create,
+		fork,
 		config,
 		copy: cp,
 		exec,
@@ -15601,4 +15825,4 @@ const app = (opts) => (0, import_cjs.subcommands)({
 
 //#endregion
 export { source_exports as a, init_source as i, StyledError as n, require_cjs as r, app as t };
-//# sourceMappingURL=app-CpryW0ai.mjs.map
+//# sourceMappingURL=app-jQvr1S8n.mjs.map