sandbox 3.4.0 → 3.5.0-beta.0

package/dist/{app-CsBNEDNb.mjs → app-CFX0H5jm.mjs}

@@ -19,7 +19,7 @@ import { EOL } from "os";
 import { z } from "zod/v4";
 import { z as z$1 } from "zod";
 import retry from "async-retry";
-import { APIError, Sandbox, Snapshot, StreamError } from "@vercel/sandbox";
+import { APIError, Drive, Sandbox, Snapshot, StreamError } from "@vercel/sandbox";
 import { WebSocket } from "ws";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import * as tty$1 from "tty";
@@ -475,7 +475,7 @@ var init_source = __esm({ "../../node_modules/.pnpm/chalk@5.6.0/node_modules/cha
 var require_didYouMean_1_2_1 = /* @__PURE__ */ __commonJS({ "../../node_modules/.pnpm/didyoumean@1.2.2/node_modules/didyoumean/didYouMean-1.2.1.js": ((exports, module) => {
 	(function() {
 		"use strict";
-		function didYouMean(str, list$3, key) {
+		function didYouMean(str, list$4, key) {
 			if (!str) return null;
 			if (!didYouMean.caseSensitive) str = str.toLowerCase();
 			var thresholdRelative = didYouMean.threshold === null ? null : didYouMean.threshold * str.length, thresholdAbsolute = didYouMean.thresholdAbsolute, winningVal;
@@ -483,9 +483,9 @@ var require_didYouMean_1_2_1 = /* @__PURE__ */ __commonJS({ "../../node_modules/
 			else if (thresholdRelative !== null) winningVal = thresholdRelative;
 			else if (thresholdAbsolute !== null) winningVal = thresholdAbsolute;
 			else winningVal = null;
-			var winner, candidate, testCandidate, val, i, len = list$3.length;
+			var winner, candidate, testCandidate, val, i, len = list$4.length;
 			for (i = 0; i < len; i++) {
-				candidate = list$3[i];
+				candidate = list$4[i];
 				if (key) candidate = candidate[key];
 				if (!candidate) continue;
 				if (!didYouMean.caseSensitive) testCandidate = candidate.toLowerCase();
@@ -493,7 +493,7 @@ var require_didYouMean_1_2_1 = /* @__PURE__ */ __commonJS({ "../../node_modules/
 				val = getEditDistance(str, testCandidate, winningVal);
 				if (winningVal === null || val < winningVal) {
 					winningVal = val;
-					if (key && didYouMean.returnWinningObject) winner = list$3[i];
+					if (key && didYouMean.returnWinningObject) winner = list$4[i];
 					else winner = candidate;
 					if (didYouMean.returnFirstMatch) return winner;
 				}
@@ -1443,7 +1443,7 @@ var require_subcommands = /* @__PURE__ */ __commonJS({ "../../node_modules/.pnpm
 		return mod && mod.__esModule ? mod : { "default": mod };
 	};
 	Object.defineProperty(exports, "__esModule", { value: true });
-	exports.subcommands = subcommands$3;
+	exports.subcommands = subcommands$4;
 	const chalk_1$3 = __importDefault$4((init_source(), __toCommonJS$3(source_exports)));
 	const didyoumean_1 = __importDefault$4(require_didYouMean_1_2_1());
 	const Result$7 = __importStar$7(require_Result());
@@ -1453,7 +1453,7 @@ var require_subcommands = /* @__PURE__ */ __commonJS({ "../../node_modules/.pnpm
 	/**
 	* Combine multiple `command`s into one
 	*/
-	function subcommands$3(config$1) {
+	function subcommands$4(config$1) {
 		const circuitbreaker = (0, circuitbreaker_1$1.createCircuitBreaker)(!!config$1.version);
 		const subcommand = (0, positional_1$1.positional)({
 			displayName: "subcommand",
@@ -2994,9 +2994,9 @@ var require_cjs = /* @__PURE__ */ __commonJS({ "../../node_modules/.pnpm/cmd-ts@
 
 //#endregion
 //#region src/args/runtime.ts
-var import_cjs$30 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$34 = /* @__PURE__ */ __toESM(require_cjs());
 const runtimeType = {
-	...import_cjs$30.oneOf([
+	...import_cjs$34.oneOf([
 		"node22",
 		"node24",
 		"node26",
@@ -3004,9 +3004,9 @@ const runtimeType = {
 	]),
 	displayName: "runtime"
 };
-const runtime = import_cjs$30.option({
+const runtime = import_cjs$34.option({
 	long: "runtime",
-	type: import_cjs$30.optional(runtimeType)
+	type: import_cjs$34.optional(runtimeType)
 });
 
 //#endregion
@@ -3130,9 +3130,9 @@ var require_ms = /* @__PURE__ */ __commonJS({ "../../node_modules/.pnpm/ms@2.1.3
 
 //#endregion
 //#region src/types/duration.ts
-var import_cjs$29 = require_cjs();
+var import_cjs$33 = require_cjs();
 init_source();
-const Duration = (0, import_cjs$29.extendType)(import_cjs$29.string, {
+const Duration = (0, import_cjs$33.extendType)(import_cjs$33.string, {
 	displayName: "num UNIT",
 	description: "A duration, e.g. 5m, 10s, 1h",
 	async from(string$2) {
@@ -3148,8 +3148,8 @@ const Duration = (0, import_cjs$29.extendType)(import_cjs$29.string, {
 
 //#endregion
 //#region src/args/timeout.ts
-var import_cjs$28 = /* @__PURE__ */ __toESM(require_cjs());
-const timeout = import_cjs$28.option({
+var import_cjs$32 = /* @__PURE__ */ __toESM(require_cjs());
+const timeout = import_cjs$32.option({
 	long: "timeout",
 	type: Duration,
 	description: "The maximum duration a sandbox can run for. Example: 5m, 30m",
@@ -3159,17 +3159,17 @@ const timeout = import_cjs$28.option({
 
 //#endregion
 //#region src/args/vcpus.ts
-var import_cjs$27 = /* @__PURE__ */ __toESM(require_cjs());
-const vcpusType = import_cjs$27.extendType(import_cjs$27.number, {
+var import_cjs$31 = /* @__PURE__ */ __toESM(require_cjs());
+const vcpusType = import_cjs$31.extendType(import_cjs$31.number, {
 	displayName: "COUNT",
 	async from(n) {
 		if (!Number.isInteger(n) || n < 1) throw new Error(`Invalid vCPU count: ${n}. Must be a positive integer.`);
 		return n;
 	}
 });
-const vcpus = import_cjs$27.option({
+const vcpus = import_cjs$31.option({
 	long: "vcpus",
-	type: import_cjs$27.optional(vcpusType),
+	type: import_cjs$31.optional(vcpusType),
 	description: "Number of vCPUs to allocate (each vCPU includes 2048 MB of memory)"
 });
 
@@ -6748,10 +6748,10 @@ function _usingCtx() {
 
 //#endregion
 //#region src/commands/login.ts
-var import_cjs$26 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$30 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
 const debug$8 = createDebugger("sandbox:login");
-const login = import_cjs$26.command({
+const login = import_cjs$30.command({
 	name: "login",
 	description: "Log in to the Sandbox CLI",
 	args: {},
@@ -6969,7 +6969,7 @@ var require_dist = /* @__PURE__ */ __commonJS({ "../../node_modules/.pnpm/@verce
 
 //#endregion
 //#region src/args/auth.ts
-var import_cjs$25 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$29 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
 var import_dist = require_dist();
 const debug$7 = createDebugger("sandbox:args:auth");
@@ -6986,11 +6986,11 @@ function isTokenFresh() {
 function markTokenAsFresh() {
 	freshTokenAcquiredAt = Date.now();
 }
-const token = import_cjs$25.option({
+const token = import_cjs$29.option({
 	long: "token",
 	description: "A Vercel authentication token. If not provided, will use the token stored in your system from `VERCEL_AUTH_TOKEN` or will start a log in process.",
 	type: {
-		...import_cjs$25.string,
+		...import_cjs$29.string,
 		displayName: "pat_or_oidc",
 		defaultValueIsSerializable: false,
 		onMissing: async () => {
@@ -7173,30 +7173,30 @@ function getAuthFailureStatus(error) {
 
 //#endregion
 //#region src/args/scope.ts
-var import_cjs$24 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$28 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
 const debug$4 = createDebugger("sandbox:scope");
-const project = import_cjs$24.option({
+const project = import_cjs$28.option({
 	long: "project",
 	type: {
-		...import_cjs$24.optional(import_cjs$24.string),
+		...import_cjs$28.optional(import_cjs$28.string),
 		displayName: "my-project"
 	},
 	description: "The project name or ID to associate with the command. Can be inferred from VERCEL_OIDC_TOKEN."
 });
 /** Parser for the `--team` option. */
-const teamParser = import_cjs$24.option({
+const teamParser = import_cjs$28.option({
 	long: "team",
 	type: {
-		...import_cjs$24.optional(import_cjs$24.string),
+		...import_cjs$28.optional(import_cjs$28.string),
 		displayName: "my-team"
 	}
 });
 /** Parser for the `--scope` option. */
-const scopeParser = import_cjs$24.option({
+const scopeParser = import_cjs$28.option({
 	long: "scope",
 	type: {
-		...import_cjs$24.optional(import_cjs$24.string),
+		...import_cjs$28.optional(import_cjs$28.string),
 		displayName: "my-team"
 	},
 	description: "The scope/team to associate with the command. Can be inferred from VERCEL_OIDC_TOKEN. [alias: --team]"
@@ -7286,7 +7286,7 @@ const scope = {
 
 //#endregion
 //#region package.json
-var version = "3.4.0";
+var version = "3.5.0-beta.0";
 
 //#endregion
 //#region src/error.ts
@@ -7416,6 +7416,17 @@ const snapshotClient = {
 		...params
 	}))
 };
+const driveClient = {
+	getOrCreate: (params) => withErrorHandling(() => Drive.getOrCreate({
+		fetch: fetchWithUserAgent,
+		...params
+	})),
+	list: (params) => withErrorHandling(() => Drive.list({
+		fetch: fetchWithUserAgent,
+		...params
+	})),
+	delete: (drive) => withErrorHandling(() => drive.delete())
+};
 const fetchWithUserAgent = (input, init$1) => {
 	const headers = new Headers(init$1?.headers ?? (input && typeof input === "object" && "headers" in input ? input?.headers : {}));
 	let agent = `vercel/sandbox-cli/${version}`;
@@ -7438,9 +7449,9 @@ async function withErrorHandling(factory) {
 
 //#endregion
 //#region src/args/snapshot-id.ts
-var import_cjs$23 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$27 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
-const snapshotId = import_cjs$23.extendType(import_cjs$23.string, {
+const snapshotId = import_cjs$27.extendType(import_cjs$27.string, {
 	displayName: "snapshot_id",
 	description: "The ID of the snapshot",
 	async from(s$1) {
@@ -7451,13 +7462,13 @@ const snapshotId = import_cjs$23.extendType(import_cjs$23.string, {
 
 //#endregion
 //#region src/args/ports.ts
-var import_cjs$22 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$26 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
-const publishPorts = import_cjs$22.multioption({
+const publishPorts = import_cjs$26.multioption({
 	long: "publish-port",
 	short: "p",
 	description: "Publish sandbox port(s) to DOMAIN.vercel.run",
-	type: import_cjs$22.array(import_cjs$22.extendType(import_cjs$22.number, {
+	type: import_cjs$26.array(import_cjs$26.extendType(import_cjs$26.number, {
 		displayName: "PORT",
 		async from(number) {
 			if (!Number.isInteger(number) || number < 1024 || number > 65535) throw new Error([
@@ -7472,8 +7483,8 @@ const publishPorts = import_cjs$22.multioption({
 
 //#endregion
 //#region src/types/snapshot-expiration.ts
-var import_cjs$21 = require_cjs();
-const SnapshotExpiration = (0, import_cjs$21.extendType)(import_cjs$21.string, {
+var import_cjs$25 = require_cjs();
+const SnapshotExpiration = (0, import_cjs$25.extendType)(import_cjs$25.string, {
 	displayName: "DURATION|none",
 	description: "A duration (e.g. 7d, 30d) or \"none\" for no expiration",
 	async from(value) {
@@ -7484,15 +7495,15 @@ const SnapshotExpiration = (0, import_cjs$21.extendType)(import_cjs$21.string, {
 
 //#endregion
 //#region src/args/snapshot-retention.ts
-var import_cjs$20 = /* @__PURE__ */ __toESM(require_cjs());
-const snapshotExpiration = import_cjs$20.option({
+var import_cjs$24 = /* @__PURE__ */ __toESM(require_cjs());
+const snapshotExpiration = import_cjs$24.option({
 	long: "snapshot-expiration",
-	type: import_cjs$20.optional(SnapshotExpiration),
+	type: import_cjs$24.optional(SnapshotExpiration),
 	description: "Default snapshot expiration. Use \"none\" or 0 for no expiration. Example: 7d, 30d"
 });
-const keepLastSnapshots = import_cjs$20.option({
+const keepLastSnapshots = import_cjs$24.option({
 	long: "keep-last-snapshots",
-	type: import_cjs$20.optional(import_cjs$20.extendType(import_cjs$20.number, {
+	type: import_cjs$24.optional(import_cjs$24.extendType(import_cjs$24.number, {
 		displayName: "COUNT",
 		async from(n) {
 			if (!Number.isInteger(n) || n < 1 || n > 10) throw new Error(`Invalid --keep-last-snapshots value: ${n}. Must be an integer between 1 and 10.`);
@@ -7501,15 +7512,15 @@ const keepLastSnapshots = import_cjs$20.option({
 	})),
 	description: "Keep only the N most recent snapshots of this sandbox (1-10)."
 });
-const keepLastSnapshotsFor = import_cjs$20.option({
+const keepLastSnapshotsFor = import_cjs$24.option({
 	long: "keep-last-snapshots-for",
-	type: import_cjs$20.optional(SnapshotExpiration),
+	type: import_cjs$24.optional(SnapshotExpiration),
 	description: "Expiration applied to kept snapshots. Use \"none\" or 0 for no expiration. Example: 7d, 30d"
 });
-const deleteEvictedSnapshots = import_cjs$20.option({
+const deleteEvictedSnapshots = import_cjs$24.option({
 	long: "delete-evicted-snapshots",
-	type: import_cjs$20.optional({
-		...import_cjs$20.oneOf(["true", "false"]),
+	type: import_cjs$24.optional({
+		...import_cjs$24.oneOf(["true", "false"]),
 		displayName: "true|false"
 	}),
 	description: "When \"true\" (the default), evicted snapshots are deleted immediately; when \"false\", they keep the default expiration."
@@ -7523,9 +7534,9 @@ const snapshotRetentionArgs = {
 
 //#endregion
 //#region src/args/sandbox-name.ts
-var import_cjs$19 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$23 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
-const sandboxName = import_cjs$19.extendType(import_cjs$19.string, {
+const sandboxName = import_cjs$23.extendType(import_cjs$23.string, {
 	displayName: "name",
 	description: "The name of the sandbox",
 	async from(s$1) {
@@ -7702,9 +7713,9 @@ function toEnvArray(env$2) {
 
 //#endregion
 //#region src/args/key-value-pair.ts
-var import_cjs$18 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$22 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
-const KeyValuePair = import_cjs$18.extendType(import_cjs$18.string, {
+const KeyValuePair = import_cjs$22.extendType(import_cjs$22.string, {
 	displayName: "key=value",
 	async from(input) {
 		if (!input.includes("=")) return {
@@ -7718,7 +7729,7 @@ const KeyValuePair = import_cjs$18.extendType(import_cjs$18.string, {
 		};
 	}
 });
-const ObjectFromKeyValue = import_cjs$18.extendType(import_cjs$18.array(KeyValuePair), { async from(input) {
+const ObjectFromKeyValue = import_cjs$22.extendType(import_cjs$22.array(KeyValuePair), { async from(input) {
 	const obj = Object.create(null);
 	const missingVars = [];
 	for (const { key, value } of input) if (value === void 0) missingVars.push(key);
@@ -7732,28 +7743,28 @@ const ObjectFromKeyValue = import_cjs$18.extendType(import_cjs$18.array(KeyValue
 
 //#endregion
 //#region src/commands/exec.ts
-var import_cjs$17 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$21 = /* @__PURE__ */ __toESM(require_cjs());
 var import_ms$5 = /* @__PURE__ */ __toESM(require_ms());
 init_source();
 const args$4 = {
-	sandbox: import_cjs$17.positional({ type: sandboxName }),
-	command: import_cjs$17.positional({
+	sandbox: import_cjs$21.positional({ type: sandboxName }),
+	command: import_cjs$21.positional({
 		displayName: "command",
 		description: "The executable to invoke"
 	}),
-	args: import_cjs$17.rest({
+	args: import_cjs$21.rest({
 		displayName: "args",
 		description: "arguments to pass to the command"
 	}),
-	asSudo: import_cjs$17.flag({
+	asSudo: import_cjs$21.flag({
 		long: "sudo",
 		description: "Give extended privileges to the command."
 	}),
-	interactive: import_cjs$17.flag({
+	interactive: import_cjs$21.flag({
 		long: "interactive",
 		short: "i",
 		description: "Run the command in a secure interactive shell",
-		type: import_cjs$17.extendType(import_cjs$17.boolean, {
+		type: import_cjs$21.extendType(import_cjs$21.boolean, {
 			defaultValue() {
 				return false;
 			},
@@ -7763,35 +7774,35 @@ const args$4 = {
 			}
 		})
 	}),
-	skipExtendingTimeout: import_cjs$17.flag({
+	skipExtendingTimeout: import_cjs$21.flag({
 		long: "no-extend-timeout",
 		description: "Do not extend the sandbox timeout while running an interactive command. Only affects interactive executions."
 	}),
-	tty: import_cjs$17.flag({
+	tty: import_cjs$21.flag({
 		long: "tty",
 		short: "t",
 		description: "Allocate a tty for an interactive command. This is a no-op."
 	}),
-	cwd: import_cjs$17.option({
+	cwd: import_cjs$21.option({
 		long: "workdir",
 		short: "w",
 		description: "The working directory to run the command in",
-		type: import_cjs$17.optional(import_cjs$17.string)
+		type: import_cjs$21.optional(import_cjs$21.string)
 	}),
-	envVars: import_cjs$17.multioption({
+	envVars: import_cjs$21.multioption({
 		long: "env",
 		short: "e",
 		type: ObjectFromKeyValue,
 		description: "Environment variables to set for the command"
 	}),
-	timeout: import_cjs$17.option({
+	timeout: import_cjs$21.option({
 		long: "timeout",
-		type: import_cjs$17.optional(Duration),
+		type: import_cjs$21.optional(Duration),
 		description: "Maximum duration to wait for the command (e.g. 30s, 5m). On expiry the process is killed with SIGKILL. Cannot be combined with --interactive."
 	}),
 	scope
 };
-const exec = import_cjs$17.command({
+const exec = import_cjs$21.command({
 	name: "exec",
 	description: "Execute a command in an existing sandbox",
 	args: args$4,
@@ -7832,9 +7843,9 @@ const exec = import_cjs$17.command({
 
 //#endregion
 //#region src/args/network-policy.ts
-var import_cjs$16 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$20 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
-const networkPolicyMode = import_cjs$16.extendType(import_cjs$16.string, {
+const networkPolicyMode = import_cjs$20.extendType(import_cjs$20.string, {
 	displayName: "MODE",
 	async from(value) {
 		const validModes = ["allow-all", "deny-all"];
@@ -7842,28 +7853,28 @@ const networkPolicyMode = import_cjs$16.extendType(import_cjs$16.string, {
 		return value;
 	}
 });
-const networkPolicy = import_cjs$16.option({
+const networkPolicy = import_cjs$20.option({
 	long: "network-policy",
 	description: `Network policy mode: "allow-all" or "deny-all"
       - allow-all: sandbox can access any website/domain
       - deny-all: sandbox has no network access
     Omit this option and use --allowed-domain / --allowed-cidr / --denied-cidr for custom policies.`,
-	type: import_cjs$16.optional(networkPolicyMode)
+	type: import_cjs$20.optional(networkPolicyMode)
 });
-const allowedDomains = import_cjs$16.multioption({
+const allowedDomains = import_cjs$20.multioption({
 	long: "allowed-domain",
 	description: `Domain to allow traffic to (creates a custom network policy). Supports "*" for wildcards for a segment (e.g. '*.vercel.com', 'www.*.com'). If used as the first segment, will match any subdomain.`,
-	type: import_cjs$16.array(import_cjs$16.string)
+	type: import_cjs$20.array(import_cjs$20.string)
 });
-const allowedCIDRs = import_cjs$16.multioption({
+const allowedCIDRs = import_cjs$20.multioption({
 	long: "allowed-cidr",
 	description: `CIDR to allow traffic to (creates a custom network policy). Takes precedence over 'allowed-domain'.`,
-	type: import_cjs$16.array(import_cjs$16.string)
+	type: import_cjs$20.array(import_cjs$20.string)
 });
-const deniedCIDRs = import_cjs$16.multioption({
+const deniedCIDRs = import_cjs$20.multioption({
 	long: "denied-cidr",
 	description: `CIDR to deny traffic to (creates a custom network policy). Takes precedence over allowed domains/CIDRs.`,
-	type: import_cjs$16.array(import_cjs$16.string)
+	type: import_cjs$20.array(import_cjs$20.string)
 });
 const networkPolicyArgs = {
 	networkPolicy,
@@ -7957,61 +7968,114 @@ function printSandboxSummary(opts) {
 	} else process.stderr.write(source_default.dim("   ╰ ") + "project: " + source_default.cyan(projectDisplay) + "\n");
 }
 
+//#endregion
+//#region src/args/drive.ts
+var import_cjs$19 = /* @__PURE__ */ __toESM(require_cjs());
+init_source();
+const driveName = import_cjs$19.extendType(import_cjs$19.string, {
+	displayName: "name",
+	description: "The name of the drive",
+	async from(input) {
+		const value = input.trim();
+		if (value.length === 0) throw new Error("Drive name cannot be empty.");
+		return value;
+	}
+});
+const driveMount = import_cjs$19.extendType(import_cjs$19.string, {
+	displayName: "drive:path[:mode]",
+	description: "Drive mount in the format \"drive:/path[:read-only|read-write]\".",
+	async from(input) {
+		return parseDriveMount(input);
+	}
+});
+const driveMounts = import_cjs$19.extendType(import_cjs$19.array(driveMount), { async from(input) {
+	const mounts$1 = Object.create(null);
+	for (const mount of input) mounts$1[mount.path] = {
+		drive: mount.drive,
+		mode: mount.mode
+	};
+	return mounts$1;
+} });
+const mounts = import_cjs$19.multioption({
+	long: "mount",
+	type: driveMounts,
+	description: "Attach a drive to the sandbox. Format: \"drive:/path[:read-only|read-write]\"."
+});
+const driveMaxSize = import_cjs$19.extendType(import_cjs$19.number, {
+	displayName: "BYTES",
+	async from(input) {
+		if (!Number.isInteger(input) || input < 1) throw new Error(`Invalid max size: ${input}. Must be a positive integer number of bytes.`);
+		return input;
+	}
+});
+function parseDriveMount(input) {
+	const [drive, path, mode, ...rest$1] = input.split(":");
+	const validModes = ["read-only", "read-write"];
+	if (rest$1.length > 0 || !drive || path === void 0) throw new Error([`Invalid drive mount: ${input}.`, `${source_default.bold("hint:")} Use "drive:/path" or "drive:/path:read-only".`].join("\n"));
+	if (mode !== void 0 && !validModes.includes(mode)) throw new Error([`Invalid drive mount mode: ${mode}.`, `${source_default.bold("hint:")} Valid modes are: ${validModes.join(", ")}`].join("\n"));
+	return {
+		drive,
+		path,
+		mode
+	};
+}
+
 //#endregion
 //#region src/commands/create.ts
-var import_cjs$15 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$18 = /* @__PURE__ */ __toESM(require_cjs());
 var import_ms$3 = /* @__PURE__ */ __toESM(require_ms());
 init_source();
 const args$3 = {
-	name: import_cjs$15.option({
+	name: import_cjs$18.option({
 		long: "name",
 		description: "A user-chosen name for the sandbox. It must be unique per project.",
-		type: import_cjs$15.optional(import_cjs$15.string)
+		type: import_cjs$18.optional(import_cjs$18.string)
 	}),
-	nonPersistent: import_cjs$15.flag({
+	nonPersistent: import_cjs$18.flag({
 		long: "non-persistent",
 		description: "Disable automatic restore of the filesystem between sessions."
 	}),
 	runtime,
-	image: import_cjs$15.option({
+	image: import_cjs$18.option({
 		long: "image",
 		description: "A Vercel Container Registry (VCR) image name and optional tag or sha to start the sandbox from (e.g. my-repo, my-repo:v1).",
-		type: import_cjs$15.optional(import_cjs$15.string)
+		type: import_cjs$18.optional(import_cjs$18.string)
 	}),
 	timeout,
 	vcpus,
 	ports: publishPorts,
-	silent: import_cjs$15.flag({
+	silent: import_cjs$18.flag({
 		long: "silent",
 		description: "Don't write sandbox name to stdout"
 	}),
-	snapshot: import_cjs$15.option({
+	snapshot: import_cjs$18.option({
 		long: "snapshot",
 		short: "s",
 		description: "Start the sandbox from a snapshot ID",
-		type: import_cjs$15.optional(snapshotId)
+		type: import_cjs$18.optional(snapshotId)
 	}),
-	connect: import_cjs$15.flag({
+	connect: import_cjs$18.flag({
 		long: "connect",
 		description: "Start an interactive shell session after creating the sandbox"
 	}),
-	envVars: import_cjs$15.multioption({
+	envVars: import_cjs$18.multioption({
 		long: "env",
 		short: "e",
 		type: ObjectFromKeyValue,
 		description: "Default environment variables for sandbox commands"
 	}),
-	tags: import_cjs$15.multioption({
+	tags: import_cjs$18.multioption({
 		long: "tag",
 		short: "t",
 		type: ObjectFromKeyValue,
 		description: "Key-value tags to associate with the sandbox (e.g. --tag env=staging)"
 	}),
+	mounts,
 	...snapshotRetentionArgs,
 	...networkPolicyArgs,
 	scope
 };
-const create = import_cjs$15.command({
+const create = import_cjs$18.command({
 	name: "create",
 	description: "Create a sandbox in the specified account and project.",
 	args: args$3,
@@ -8019,7 +8083,7 @@ const create = import_cjs$15.command({
 		description: "Create and connect to a sandbox without a network access",
 		command: `sandbox run --network-policy=none --connect`
 	}],
-	async handler({ name, nonPersistent, ports, scope: scope$1, runtime: runtime$1, image, timeout: timeout$1, vcpus: vcpus$1, silent, snapshot: snapshot$1, connect: connect$1, envVars, tags, snapshotExpiration: snapshotExpiration$1, keepLastSnapshots: keepLastSnapshots$1, keepLastSnapshotsFor: keepLastSnapshotsFor$1, deleteEvictedSnapshots: deleteEvictedSnapshots$1, networkPolicy: networkPolicyMode$1, allowedDomains: allowedDomains$1, allowedCIDRs: allowedCIDRs$1, deniedCIDRs: deniedCIDRs$1 }) {
+	async handler({ name, nonPersistent, ports, scope: scope$1, runtime: runtime$1, image, timeout: timeout$1, vcpus: vcpus$1, silent, snapshot: snapshot$1, connect: connect$1, envVars, tags, mounts: mounts$1, snapshotExpiration: snapshotExpiration$1, keepLastSnapshots: keepLastSnapshots$1, keepLastSnapshotsFor: keepLastSnapshotsFor$1, deleteEvictedSnapshots: deleteEvictedSnapshots$1, networkPolicy: networkPolicyMode$1, allowedDomains: allowedDomains$1, allowedCIDRs: allowedCIDRs$1, deniedCIDRs: deniedCIDRs$1 }) {
 		if (image && runtime$1) throw new Error("--image and --runtime cannot be used together.");
 		const networkPolicy$1 = buildNetworkPolicy({
 			networkPolicy: networkPolicyMode$1,
@@ -8035,6 +8099,7 @@ const create = import_cjs$15.command({
 		const persistent = !nonPersistent;
 		const resources = vcpus$1 ? { vcpus: vcpus$1 } : void 0;
 		const tagsObj = Object.keys(tags).length > 0 ? tags : void 0;
+		const mountsObj = Object.keys(mounts$1).length > 0 ? mounts$1 : void 0;
 		const spinner = silent ? void 0 : ora("Creating sandbox...").start();
 		const sandbox = snapshot$1 ? await sandboxClient.create({
 			name,
@@ -8051,6 +8116,7 @@ const create = import_cjs$15.command({
 			networkPolicy: networkPolicy$1,
 			env: envVars,
 			tags: tagsObj,
+			mounts: mountsObj,
 			persistent,
 			snapshotExpiration: snapshotExpiration$1 ? (0, import_ms$3.default)(snapshotExpiration$1) : void 0,
 			keepLastSnapshots: keepLastSnapshotsPayload,
@@ -8067,6 +8133,7 @@ const create = import_cjs$15.command({
 			networkPolicy: networkPolicy$1,
 			env: envVars,
 			tags: tagsObj,
+			mounts: mountsObj,
 			persistent,
 			snapshotExpiration: snapshotExpiration$1 ? (0, import_ms$3.default)(snapshotExpiration$1) : void 0,
 			keepLastSnapshots: keepLastSnapshotsPayload,
@@ -8100,48 +8167,71 @@ const create = import_cjs$15.command({
 	}
 });
 
+//#endregion
+//#region src/util/omit.ts
+function omit(obj, ...keys) {
+	const result = { ...obj };
+	for (const key of keys) delete result[key];
+	return result;
+}
+
+//#endregion
+//#region src/commands/sh.ts
+var import_cjs$17 = /* @__PURE__ */ __toESM(require_cjs());
+const sh = import_cjs$17.command({
+	name: "sh",
+	description: "Create a sandbox and start an interactive shell",
+	args: omit(args$3, "connect"),
+	async handler(args$5) {
+		return create.handler({
+			...args$5,
+			connect: true
+		});
+	}
+});
+
 //#endregion
 //#region src/commands/fork.ts
-var import_cjs$14 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$16 = /* @__PURE__ */ __toESM(require_cjs());
 var import_ms$2 = /* @__PURE__ */ __toESM(require_ms());
 init_source();
 const args$2 = {
-	source: import_cjs$14.positional({
+	source: import_cjs$16.positional({
 		displayName: "source",
 		description: "Name of the source sandbox to fork from.",
 		type: sandboxName
 	}),
-	name: import_cjs$14.option({
+	name: import_cjs$16.option({
 		long: "name",
 		description: "A user-chosen name for the forked sandbox. Must be unique per project.",
-		type: import_cjs$14.optional(import_cjs$14.string)
+		type: import_cjs$16.optional(import_cjs$16.string)
 	}),
-	nonPersistent: import_cjs$14.flag({
+	nonPersistent: import_cjs$16.flag({
 		long: "non-persistent",
 		description: "Disable automatic restore of the filesystem between sessions."
 	}),
-	timeout: import_cjs$14.option({
+	timeout: import_cjs$16.option({
 		long: "timeout",
-		type: import_cjs$14.optional(Duration),
+		type: import_cjs$16.optional(Duration),
 		description: "Override the maximum sandbox runtime (inherited from source if omitted). Example: 5m, 30m"
 	}),
 	vcpus,
 	ports: publishPorts,
-	silent: import_cjs$14.flag({
+	silent: import_cjs$16.flag({
 		long: "silent",
 		description: "Don't write sandbox name to stdout"
 	}),
-	connect: import_cjs$14.flag({
+	connect: import_cjs$16.flag({
 		long: "connect",
 		description: "Start an interactive shell session after creating the forked sandbox"
 	}),
-	envVars: import_cjs$14.multioption({
+	envVars: import_cjs$16.multioption({
 		long: "env",
 		short: "e",
 		type: ObjectFromKeyValue,
 		description: "Environment variables to set on the fork. Env vars from the source sandbox are not copied (encrypted server-side)."
 	}),
-	tags: import_cjs$14.multioption({
+	tags: import_cjs$16.multioption({
 		long: "tag",
 		short: "t",
 		type: ObjectFromKeyValue,
@@ -8151,7 +8241,7 @@ const args$2 = {
 	...networkPolicyArgs,
 	scope
 };
-const fork = import_cjs$14.command({
+const fork = import_cjs$16.command({
 	name: "fork",
 	description: "Fork an existing sandbox into a new one. Copies config (cpu, timeout, network policy, tags, etc.) from the source sandbox; env vars are NOT copied and must be re-supplied via --env.",
 	args: args$2,
@@ -8222,30 +8312,22 @@ const fork = import_cjs$14.command({
 	}
 });
 
-//#endregion
-//#region src/util/omit.ts
-function omit(obj, ...keys) {
-	const result = { ...obj };
-	for (const key of keys) delete result[key];
-	return result;
-}
-
 //#endregion
 //#region src/commands/run.ts
-var import_cjs$13 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$15 = /* @__PURE__ */ __toESM(require_cjs());
 const args$1 = {
 	...args$3,
 	...omit(args$4, "sandbox", "timeout"),
-	removeAfterUse: import_cjs$13.flag({
+	removeAfterUse: import_cjs$15.flag({
 		long: "rm",
 		description: "Automatically remove the sandbox when the command exits."
 	}),
-	stopAfterUse: import_cjs$13.flag({
+	stopAfterUse: import_cjs$15.flag({
 		long: "stop",
 		description: "Stop the sandbox when the command exits."
 	})
 };
-const run = import_cjs$13.command({
+const run = import_cjs$15.command({
 	name: "run",
 	description: "Create and run a command in a sandbox",
 	args: args$1,
@@ -8287,51 +8369,51 @@ const run = import_cjs$13.command({
 
 //#endregion
 //#region src/commands/list.ts
-var import_cjs$12 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$14 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
-const list = import_cjs$12.command({
+const list = import_cjs$14.command({
 	name: "list",
 	aliases: ["ls"],
 	description: "List all sandboxes for the specified account and project.",
 	args: {
-		all: import_cjs$12.flag({
+		all: import_cjs$14.flag({
 			long: "all",
 			short: "a",
 			description: "Show all sandboxes (default shows just running)"
 		}),
-		namePrefix: import_cjs$12.option({
+		namePrefix: import_cjs$14.option({
 			long: "name-prefix",
 			description: "Filter sandboxes by name prefix",
-			type: import_cjs$12.optional(import_cjs$12.string)
+			type: import_cjs$14.optional(import_cjs$14.string)
 		}),
-		sortBy: import_cjs$12.option({
+		sortBy: import_cjs$14.option({
 			long: "sort-by",
 			description: "Sort sandboxes by field. Options: createdAt (default), name, statusUpdatedAt",
-			type: import_cjs$12.optional(import_cjs$12.oneOf([
+			type: import_cjs$14.optional(import_cjs$14.oneOf([
 				"createdAt",
 				"name",
 				"statusUpdatedAt"
 			]))
 		}),
-		sortOrder: import_cjs$12.option({
+		sortOrder: import_cjs$14.option({
 			long: "sort-order",
 			description: "Sort order. Options: asc, desc (default)",
-			type: import_cjs$12.optional(import_cjs$12.oneOf(["asc", "desc"]))
+			type: import_cjs$14.optional(import_cjs$14.oneOf(["asc", "desc"]))
 		}),
-		tags: import_cjs$12.multioption({
+		tags: import_cjs$14.multioption({
 			long: "tag",
 			description: "Filter sandboxes by tag. Format: \"key=value\"",
 			type: ObjectFromKeyValue
 		}),
-		limit: import_cjs$12.option({
+		limit: import_cjs$14.option({
 			long: "limit",
 			description: "Maximum number of sandboxes per page (default 50).",
-			type: import_cjs$12.optional(import_cjs$12.number)
+			type: import_cjs$14.optional(import_cjs$14.number)
 		}),
-		cursor: import_cjs$12.option({
+		cursor: import_cjs$14.option({
 			long: "cursor",
 			description: "Pagination cursor from a previous 'More results' hint.",
-			type: import_cjs$12.optional(import_cjs$12.string)
+			type: import_cjs$14.optional(import_cjs$14.string)
 		}),
 		scope
 	},
@@ -8385,6 +8467,7 @@ const list = import_cjs$12.command({
 				return "-";
 			} },
 			SNAPSHOT: { value: (s$1) => s$1.currentSnapshotId ?? "-" },
+			MOUNTS: { value: (s$1) => formatMounts(s$1.mounts) },
 			TAGS: { value: (s$1) => s$1.tags && Object.keys(s$1.tags).length > 0 ? Object.entries(s$1.tags).map(([k, v]) => `${k}:${v}`).join(", ") : "-" }
 		};
 		if (all) {
@@ -8407,11 +8490,15 @@ const SandboxStatusColor = {
 	snapshotting: source_default.blue,
 	aborted: source_default.gray.dim
 };
+function formatMounts(mounts$1) {
+	if (!mounts$1 || Object.keys(mounts$1).length === 0) return "-";
+	return Object.entries(mounts$1).map(([path, mount]) => `${mount.drive}:${path}:${mount.mode ?? "read-write"}`).join(", ");
+}
 
 //#endregion
 //#region src/commands/connect.ts
-var import_cjs$11 = /* @__PURE__ */ __toESM(require_cjs());
-const connect = import_cjs$11.command({
+var import_cjs$13 = /* @__PURE__ */ __toESM(require_cjs());
+const connect = import_cjs$13.command({
 	name: "connect",
 	aliases: ["ssh", "shell"],
 	description: "Start an interactive shell in an existing sandbox",
@@ -8429,7 +8516,7 @@ const connect = import_cjs$11.command({
 
 //#endregion
 //#region src/commands/stop.ts
-var import_cjs$10 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$12 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
 function c(label, value) {
 	return {
@@ -8482,15 +8569,15 @@ function printStopResult(name, sandbox, sessionSnapshot) {
 		]] : []
 	]);
 }
-const stop = import_cjs$10.command({
+const stop = import_cjs$12.command({
 	name: "stop",
 	description: "Stop the current session of one or more sandboxes",
 	args: {
-		sandboxName: import_cjs$10.positional({
+		sandboxName: import_cjs$12.positional({
 			type: sandboxName,
 			description: "A sandbox name to stop"
 		}),
-		sandboxNames: import_cjs$10.restPositionals({
+		sandboxNames: import_cjs$12.restPositionals({
 			type: sandboxName,
 			description: "More sandboxes to stop"
 		}),
@@ -10812,17 +10899,17 @@ var Listr = class {
 
 //#endregion
 //#region src/commands/remove.ts
-var import_cjs$9 = /* @__PURE__ */ __toESM(require_cjs());
-const remove = import_cjs$9.command({
+var import_cjs$11 = /* @__PURE__ */ __toESM(require_cjs());
+const remove = import_cjs$11.command({
 	name: "remove",
 	aliases: ["rm"],
 	description: "Permanently remove one or more sandboxes",
 	args: {
-		sandboxName: import_cjs$9.positional({
+		sandboxName: import_cjs$11.positional({
 			type: sandboxName,
 			description: "a sandbox name to remove"
 		}),
-		sandboxNames: import_cjs$9.restPositionals({
+		sandboxNames: import_cjs$11.restPositionals({
 			type: sandboxName,
 			description: "more sandboxes to remove"
 		}),
@@ -10850,7 +10937,7 @@ const remove = import_cjs$9.command({
 
 //#endregion
 //#region src/commands/cp.ts
-var import_cjs$8 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$10 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
 const parseLocalOrRemotePath = async (input) => {
 	const parts = input.split(":");
@@ -10872,18 +10959,18 @@ const parseLocalOrRemotePath = async (input) => {
 		path: input
 	};
 };
-const localOrRemote = import_cjs$8.extendType(import_cjs$8.string, { from: parseLocalOrRemotePath });
-const cp = import_cjs$8.command({
+const localOrRemote = import_cjs$10.extendType(import_cjs$10.string, { from: parseLocalOrRemotePath });
+const cp = import_cjs$10.command({
 	name: "copy",
 	description: "Copy files between your local filesystem and a remote sandbox",
 	aliases: ["cp"],
 	args: {
-		source: import_cjs$8.positional({
+		source: import_cjs$10.positional({
 			displayName: `src`,
 			description: `The source file to copy from local file system, or a sandbox_name:path from a remote sandbox`,
 			type: localOrRemote
 		}),
-		dest: import_cjs$8.positional({
+		dest: import_cjs$10.positional({
 			displayName: `dst`,
 			description: `The destination file to copy to local file system, or a sandbox_name:path to a remote sandbox`,
 			type: localOrRemote
@@ -10930,10 +11017,10 @@ const cp = import_cjs$8.command({
 
 //#endregion
 //#region src/commands/logout.ts
-var import_cjs$7 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$9 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
 const debug = createDebugger("sandbox:logout");
-const logout = import_cjs$7.command({
+const logout = import_cjs$9.command({
 	name: "logout",
 	description: "Log out of the Sandbox CLI",
 	args: {},
@@ -10952,27 +11039,27 @@ const logout = import_cjs$7.command({
 
 //#endregion
 //#region src/commands/snapshot.ts
-var import_cjs$6 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$8 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
 var import_ms$1 = /* @__PURE__ */ __toESM(require_ms());
 const args = {
-	stop: import_cjs$6.flag({
+	stop: import_cjs$8.flag({
 		long: "stop",
 		description: "Confirm that the sandbox will be stopped when snapshotting"
 	}),
-	silent: import_cjs$6.flag({
+	silent: import_cjs$8.flag({
 		long: "silent",
 		description: "Don't write snapshot ID to stdout"
 	}),
-	expiration: import_cjs$6.option({
+	expiration: import_cjs$8.option({
 		long: "expiration",
-		type: import_cjs$6.optional(Duration),
+		type: import_cjs$8.optional(Duration),
 		description: "The expiration time of the snapshot. Use 0 for no expiration."
 	}),
-	sandbox: import_cjs$6.positional({ type: sandboxName }),
+	sandbox: import_cjs$8.positional({ type: sandboxName }),
 	scope
 };
-const snapshot = import_cjs$6.command({
+const snapshot = import_cjs$8.command({
 	name: "snapshot",
 	description: "Take a snapshot of the filesystem of a sandbox",
 	args,
@@ -11075,34 +11162,34 @@ function renderSnapshotTree(params) {
 
 //#endregion
 //#region src/commands/snapshots.ts
-var import_cjs$4 = /* @__PURE__ */ __toESM(require_cjs());
-var import_cjs$5 = require_cjs();
+var import_cjs$6 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$7 = require_cjs();
 init_source();
-const list$2 = import_cjs$4.command({
+const list$3 = import_cjs$6.command({
 	name: "list",
 	aliases: ["ls"],
 	description: "List snapshots for the specified account and project.",
 	args: {
 		scope,
-		name: import_cjs$4.option({
-			type: import_cjs$4.optional(sandboxName),
+		name: import_cjs$6.option({
+			type: import_cjs$6.optional(sandboxName),
 			long: "name",
 			description: "Filter snapshots by sandbox."
 		}),
-		sortOrder: import_cjs$4.option({
+		sortOrder: import_cjs$6.option({
 			long: "sort-order",
 			description: "Sort order. Options: asc, desc (default)",
-			type: import_cjs$4.optional(import_cjs$4.oneOf(["asc", "desc"]))
+			type: import_cjs$6.optional(import_cjs$6.oneOf(["asc", "desc"]))
 		}),
-		limit: import_cjs$4.option({
+		limit: import_cjs$6.option({
 			long: "limit",
 			description: "Maximum number of snapshots per page (default 50).",
-			type: import_cjs$4.optional(import_cjs$4.number)
+			type: import_cjs$6.optional(import_cjs$6.number)
 		}),
-		cursor: import_cjs$4.option({
+		cursor: import_cjs$6.option({
 			long: "cursor",
 			description: "Pagination cursor from a previous 'More results' hint.",
-			type: import_cjs$4.optional(import_cjs$4.string)
+			type: import_cjs$6.optional(import_cjs$6.string)
 		})
 	},
 	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, name, sortOrder, limit, cursor }) {
@@ -11142,12 +11229,12 @@ const list$2 = import_cjs$4.command({
 		if (pagination.next !== null) console.log(formatNextCursorHint(pagination.next));
 	}
 });
-const get = import_cjs$4.command({
+const get = import_cjs$6.command({
 	name: "get",
 	description: "Get details of a snapshot.",
 	args: {
 		scope,
-		snapshotId: import_cjs$4.positional({
+		snapshotId: import_cjs$6.positional({
 			type: snapshotId,
 			description: "Snapshot ID to retrieve"
 		})
@@ -11185,16 +11272,16 @@ const get = import_cjs$4.command({
 		}));
 	}
 });
-const remove$1 = import_cjs$4.command({
+const remove$2 = import_cjs$6.command({
 	name: "delete",
 	aliases: ["rm", "remove"],
 	description: "Delete one or more snapshots.",
 	args: {
-		snapshotId: import_cjs$4.positional({
+		snapshotId: import_cjs$6.positional({
 			type: snapshotId,
 			description: "Snapshot ID to delete"
 		}),
-		snapshotIds: import_cjs$4.restPositionals({
+		snapshotIds: import_cjs$6.restPositionals({
 			type: snapshotId,
 			description: "More snapshots IDs to delete"
 		}),
@@ -11223,29 +11310,29 @@ const remove$1 = import_cjs$4.command({
 		}
 	}
 });
-const tree = import_cjs$4.command({
+const tree = import_cjs$6.command({
 	name: "tree",
 	description: "Show the snapshot ancestry tree for a sandbox.",
 	args: {
 		scope,
-		sandboxName: import_cjs$4.positional({
+		sandboxName: import_cjs$6.positional({
 			type: sandboxName,
 			description: "Sandbox name"
 		}),
-		sortOrder: import_cjs$4.option({
+		sortOrder: import_cjs$6.option({
 			long: "sort-order",
 			description: "Sort order. Options: asc, desc (default). 'desc' walks ancestors, 'asc' walks descendants. Requires --cursor.",
-			type: import_cjs$4.optional(import_cjs$4.oneOf(["asc", "desc"]))
+			type: import_cjs$6.optional(import_cjs$6.oneOf(["asc", "desc"]))
 		}),
-		limit: import_cjs$4.option({
+		limit: import_cjs$6.option({
 			long: "limit",
 			description: "Maximum number of snapshots per page (1–10, default 10).",
-			type: import_cjs$4.optional(import_cjs$4.number)
+			type: import_cjs$6.optional(import_cjs$6.number)
 		}),
-		cursor: import_cjs$4.option({
+		cursor: import_cjs$6.option({
 			long: "cursor",
 			description: "Pagination cursor from a previous 'More ancestors' or 'More descendants' hint.",
-			type: import_cjs$4.optional(import_cjs$4.string)
+			type: import_cjs$6.optional(import_cjs$6.string)
 		})
 	},
 	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, sandboxName: name, sortOrder, limit, cursor }) {
@@ -11366,14 +11453,14 @@ const tree = import_cjs$4.command({
 		if (result.descendants.pagination.next !== null) console.log(`More descendants: sandbox snapshots tree ${name} --sort-order asc${limitArg} --cursor ${result.descendants.pagination.next}`);
 	}
 });
-const snapshots = (0, import_cjs$5.subcommands)({
+const snapshots = (0, import_cjs$7.subcommands)({
 	name: "snapshots",
 	description: "Manage sandbox snapshots",
 	cmds: {
-		list: list$2,
+		list: list$3,
 		get,
 		tree,
-		delete: remove$1
+		delete: remove$2
 	}
 });
 const SnapshotStatusColor = new Map([
@@ -11384,37 +11471,37 @@ const SnapshotStatusColor = new Map([
 
 //#endregion
 //#region src/commands/sessions.ts
-var import_cjs$2 = /* @__PURE__ */ __toESM(require_cjs());
-var import_cjs$3 = require_cjs();
+var import_cjs$4 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$5 = require_cjs();
 init_source();
-const list$1 = import_cjs$2.command({
+const list$2 = import_cjs$4.command({
 	name: "list",
 	aliases: ["ls"],
 	description: "List sessions from a sandbox",
 	args: {
-		all: import_cjs$2.flag({
+		all: import_cjs$4.flag({
 			long: "all",
 			short: "a",
 			description: "Show all sessions (default shows just running)"
 		}),
-		sandbox: import_cjs$2.positional({
+		sandbox: import_cjs$4.positional({
 			type: sandboxName,
 			description: "Sandbox name to list sessions for"
 		}),
-		sortOrder: import_cjs$2.option({
+		sortOrder: import_cjs$4.option({
 			long: "sort-order",
 			description: "Sort order. Options: asc, desc (default)",
-			type: import_cjs$2.optional(import_cjs$2.oneOf(["asc", "desc"]))
+			type: import_cjs$4.optional(import_cjs$4.oneOf(["asc", "desc"]))
 		}),
-		limit: import_cjs$2.option({
+		limit: import_cjs$4.option({
 			long: "limit",
 			description: "Maximum number of sessions per page (default 50).",
-			type: import_cjs$2.optional(import_cjs$2.number)
+			type: import_cjs$4.optional(import_cjs$4.number)
 		}),
-		cursor: import_cjs$2.option({
+		cursor: import_cjs$4.option({
 			long: "cursor",
 			description: "Pagination cursor from a previous 'More results' hint.",
-			type: import_cjs$2.optional(import_cjs$2.string)
+			type: import_cjs$4.optional(import_cjs$4.string)
 		}),
 		scope
 	},
@@ -11470,10 +11557,10 @@ const list$1 = import_cjs$2.command({
 		if (pagination.next !== null) console.log(formatNextCursorHint(pagination.next));
 	}
 });
-const sessions = (0, import_cjs$3.subcommands)({
+const sessions = (0, import_cjs$5.subcommands)({
 	name: "sessions",
 	description: "Manage sandbox sessions",
-	cmds: { list: list$1 }
+	cmds: { list: list$2 }
 });
 const SessionStatusColor = {
 	running: source_default.cyan,
@@ -11487,18 +11574,18 @@ const SessionStatusColor = {
 
 //#endregion
 //#region src/commands/config.ts
-var import_cjs$1 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$3 = /* @__PURE__ */ __toESM(require_cjs());
 init_source();
 var import_ms = /* @__PURE__ */ __toESM(require_ms());
-const vcpusCommand = import_cjs$1.command({
+const vcpusCommand = import_cjs$3.command({
 	name: "vcpus",
 	description: "Update the vCPU count of a sandbox",
 	args: {
-		sandbox: import_cjs$1.positional({
+		sandbox: import_cjs$3.positional({
 			type: sandboxName,
 			description: "Sandbox name to update"
 		}),
-		count: import_cjs$1.positional({
+		count: import_cjs$3.positional({
 			type: vcpusType,
 			description: "Number of vCPUs to allocate (each vCPU includes 2048 MB of memory)"
 		}),
@@ -11523,15 +11610,15 @@ const vcpusCommand = import_cjs$1.command({
 		}
 	}
 });
-const timeoutCommand = import_cjs$1.command({
+const timeoutCommand = import_cjs$3.command({
 	name: "timeout",
 	description: "Update the timeout of a sandbox (will be applied to all new sessions)",
 	args: {
-		sandbox: import_cjs$1.positional({
+		sandbox: import_cjs$3.positional({
 			type: sandboxName,
 			description: "Sandbox name to update"
 		}),
-		duration: import_cjs$1.positional({
+		duration: import_cjs$3.positional({
 			type: Duration,
 			description: "The maximum duration a sandbox can run for. Example: 5m, 1h"
 		}),
@@ -11556,17 +11643,17 @@ const timeoutCommand = import_cjs$1.command({
 		}
 	}
 });
-const persistentCommand = import_cjs$1.command({
+const persistentCommand = import_cjs$3.command({
 	name: "persistent",
 	description: "Enable or disable automatic restore of the filesystem between sessions",
 	args: {
-		sandbox: import_cjs$1.positional({
+		sandbox: import_cjs$3.positional({
 			type: sandboxName,
 			description: "Sandbox name to update"
 		}),
-		value: import_cjs$1.positional({
+		value: import_cjs$3.positional({
 			type: {
-				...import_cjs$1.oneOf(["true", "false"]),
+				...import_cjs$3.oneOf(["true", "false"]),
 				displayName: "true|false"
 			},
 			description: "Enable or disable automatic restore of the filesystem between sessions"
@@ -11592,15 +11679,15 @@ const persistentCommand = import_cjs$1.command({
 		}
 	}
 });
-const snapshotExpirationCommand = import_cjs$1.command({
+const snapshotExpirationCommand = import_cjs$3.command({
 	name: "snapshot-expiration",
 	description: "Update the default snapshot expiration of a sandbox",
 	args: {
-		sandbox: import_cjs$1.positional({
+		sandbox: import_cjs$3.positional({
 			type: sandboxName,
 			description: "Sandbox name to update"
 		}),
-		duration: import_cjs$1.positional({
+		duration: import_cjs$3.positional({
 			type: SnapshotExpiration,
 			description: "Snapshot expiration duration (e.g. 7d, 30d) or \"none\" for no expiration"
 		}),
@@ -11626,22 +11713,22 @@ const snapshotExpirationCommand = import_cjs$1.command({
 		}
 	}
 });
-const keepLastCountType = import_cjs$1.extendType(import_cjs$1.number, {
+const keepLastCountType = import_cjs$3.extendType(import_cjs$3.number, {
 	displayName: "COUNT",
 	async from(n) {
 		if (!Number.isInteger(n) || n < 0 || n > 10) throw new Error(`Invalid count: ${n}. Must be an integer between 0 and 10 (0 removes the policy).`);
 		return n;
 	}
 });
-const keepLastSnapshotsCommand = import_cjs$1.command({
+const keepLastSnapshotsCommand = import_cjs$3.command({
 	name: "keep-last-snapshots",
 	description: "Update the snapshot retention policy (keep only the N most recent snapshots) of a sandbox",
 	args: {
-		sandbox: import_cjs$1.positional({
+		sandbox: import_cjs$3.positional({
 			type: sandboxName,
 			description: "Sandbox name to update"
 		}),
-		count: import_cjs$1.positional({
+		count: import_cjs$3.positional({
 			type: keepLastCountType,
 			description: "Number of most recent snapshots to keep (1-10). Pass 0 to remove the policy."
 		}),
@@ -11674,15 +11761,15 @@ const keepLastSnapshotsCommand = import_cjs$1.command({
 		}
 	}
 });
-const keepLastSnapshotsForCommand = import_cjs$1.command({
+const keepLastSnapshotsForCommand = import_cjs$3.command({
 	name: "keep-last-snapshots-for",
 	description: "Update the expiration applied to snapshots kept by the retention policy",
 	args: {
-		sandbox: import_cjs$1.positional({
+		sandbox: import_cjs$3.positional({
 			type: sandboxName,
 			description: "Sandbox name to update"
 		}),
-		duration: import_cjs$1.positional({
+		duration: import_cjs$3.positional({
 			type: SnapshotExpiration,
 			description: "Expiration for kept snapshots. Use \"none\" or 0 for no expiration. Example: 7d, 30d"
 		}),
@@ -11714,17 +11801,17 @@ const keepLastSnapshotsForCommand = import_cjs$1.command({
 		}
 	}
 });
-const deleteEvictedSnapshotsCommand = import_cjs$1.command({
+const deleteEvictedSnapshotsCommand = import_cjs$3.command({
 	name: "delete-evicted-snapshots",
 	description: "When \"true\" (the default), snapshots evicted by the keep-last-snapshots policy are deleted immediately; when \"false\", they keep the default expiration.",
 	args: {
-		sandbox: import_cjs$1.positional({
+		sandbox: import_cjs$3.positional({
 			type: sandboxName,
 			description: "Sandbox name to update"
 		}),
-		value: import_cjs$1.positional({
+		value: import_cjs$3.positional({
 			type: {
-				...import_cjs$1.oneOf(["true", "false"]),
+				...import_cjs$3.oneOf(["true", "false"]),
 				displayName: "true|false"
 			},
 			description: "Whether to delete evicted snapshots immediately (\"true\") or let them keep the default expiration (\"false\")."
@@ -11756,15 +11843,15 @@ const deleteEvictedSnapshotsCommand = import_cjs$1.command({
 		}
 	}
 });
-const currentSnapshotCommand = import_cjs$1.command({
+const currentSnapshotCommand = import_cjs$3.command({
 	name: "current-snapshot",
 	description: "Update the current snapshot of a sandbox",
 	args: {
-		sandbox: import_cjs$1.positional({
+		sandbox: import_cjs$3.positional({
 			type: sandboxName,
 			description: "Sandbox name to update"
 		}),
-		snapshotId: import_cjs$1.positional({
+		snapshotId: import_cjs$3.positional({
 			type: snapshotId,
 			description: "Snapshot ID to set as the current snapshot"
 		}),
@@ -11790,11 +11877,11 @@ const currentSnapshotCommand = import_cjs$1.command({
 		}
 	}
 });
-const portsCommand = import_cjs$1.command({
+const portsCommand = import_cjs$3.command({
 	name: "ports",
 	description: "Update the published ports of a sandbox. Replaces all existing published ports.",
 	args: {
-		sandbox: import_cjs$1.positional({
+		sandbox: import_cjs$3.positional({
 			type: sandboxName,
 			description: "Sandbox name to update"
 		}),
@@ -11831,11 +11918,11 @@ const portsCommand = import_cjs$1.command({
 		}
 	}
 });
-const listCommand = import_cjs$1.command({
+const listCommand = import_cjs$3.command({
 	name: "list",
 	description: "Display the current configuration of a sandbox",
 	args: {
-		sandbox: import_cjs$1.positional({
+		sandbox: import_cjs$3.positional({
 			type: sandboxName,
 			description: "Sandbox name to inspect"
 		}),
@@ -11910,16 +11997,16 @@ const listCommand = import_cjs$1.command({
 		}));
 	}
 });
-const networkPolicyCommand = import_cjs$1.command({
+const networkPolicyCommand = import_cjs$3.command({
 	name: "network-policy",
 	description: `Update the network policy of a sandbox`,
 	args: {
-		sandbox: import_cjs$1.positional({ type: sandboxName }),
+		sandbox: import_cjs$3.positional({ type: sandboxName }),
 		...networkPolicyArgs,
-		mode: import_cjs$1.option({
+		mode: import_cjs$3.option({
 			long: "mode",
 			description: `Alias for --network-policy.`,
-			type: import_cjs$1.optional(networkPolicyMode)
+			type: import_cjs$3.optional(networkPolicyMode)
 		}),
 		scope
 	},
@@ -11951,15 +12038,15 @@ const networkPolicyCommand = import_cjs$1.command({
 		}
 	}
 });
-const tagsCommand = import_cjs$1.command({
+const tagsCommand = import_cjs$3.command({
 	name: "tags",
 	description: "Update the tags of a sandbox. Replaces all existing tags with the provided tags.",
 	args: {
-		sandbox: import_cjs$1.positional({
+		sandbox: import_cjs$3.positional({
 			type: sandboxName,
 			description: "Sandbox name to update"
 		}),
-		tags: import_cjs$1.multioption({
+		tags: import_cjs$3.multioption({
 			long: "tag",
 			short: "t",
 			type: ObjectFromKeyValue,
@@ -12008,7 +12095,7 @@ function formatPorts(sandbox) {
 function getPublishedRoutes(sandbox) {
 	return sandbox.routes.filter((route) => route.port !== sandbox.interactivePort);
 }
-const config = import_cjs$1.subcommands({
+const config = import_cjs$3.subcommands({
 	name: "config",
 	description: "View and update sandbox configuration",
 	cmds: {
@@ -12027,6 +12114,181 @@ const config = import_cjs$1.subcommands({
 	}
 });
 
+//#endregion
+//#region src/commands/drives.ts
+var import_cjs$1 = /* @__PURE__ */ __toESM(require_cjs());
+var import_cjs$2 = require_cjs();
+init_source();
+const list$1 = import_cjs$1.command({
+	name: "list",
+	aliases: ["ls"],
+	description: "List drives for the specified account and project.",
+	args: {
+		scope,
+		namePrefix: import_cjs$1.option({
+			long: "name-prefix",
+			description: "Filter drives by name prefix.",
+			type: import_cjs$1.optional(import_cjs$1.string)
+		}),
+		sortOrder: import_cjs$1.option({
+			long: "sort-order",
+			description: "Sort order. Options: asc, desc (default).",
+			type: import_cjs$1.optional(import_cjs$1.oneOf(["asc", "desc"]))
+		}),
+		limit: import_cjs$1.option({
+			long: "limit",
+			description: "Maximum number of drives per page (default 50).",
+			type: import_cjs$1.optional(import_cjs$1.number)
+		}),
+		cursor: import_cjs$1.option({
+			long: "cursor",
+			description: "Pagination cursor from a previous 'More results' hint.",
+			type: import_cjs$1.optional(import_cjs$1.string)
+		})
+	},
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, namePrefix, sortOrder, limit, cursor }) {
+		const { drives: drives$1, pagination } = await (async () => {
+			try {
+				var _usingCtx$1 = _usingCtx();
+				const _spinner$1 = _usingCtx$1.u(acquireRelease(() => ora("Fetching drives...").start(), (s$1) => s$1.stop()));
+				return driveClient.list({
+					token: token$1,
+					teamId: team$1,
+					projectId: project$1,
+					limit: limit ?? 50,
+					...cursor && { cursor },
+					...namePrefix && {
+						namePrefix,
+						sortBy: "name"
+					},
+					...sortOrder && { sortOrder }
+				});
+			} catch (_) {
+				_usingCtx$1.e = _;
+			} finally {
+				_usingCtx$1.d();
+			}
+		})();
+		printDrives(drives$1);
+		if (pagination.next !== null) console.log(formatNextCursorHint(pagination.next));
+	}
+});
+const getOrCreate = import_cjs$1.command({
+	name: "get-or-create",
+	description: "Create a drive if it does not already exist, or retrieve it.",
+	args: {
+		name: import_cjs$1.positional({
+			type: driveName,
+			description: "Drive name to create or retrieve"
+		}),
+		maxSize: import_cjs$1.option({
+			long: "max-size",
+			description: "Maximum drive size in bytes. If omitted, a default of 100 GiB is used.",
+			type: import_cjs$1.optional(driveMaxSize)
+		}),
+		scope
+	},
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, name, maxSize }) {
+		const drive = await (async () => {
+			try {
+				var _usingCtx3 = _usingCtx();
+				const _spinner$1 = _usingCtx3.u(acquireRelease(() => ora("Creating drive...").start(), (s$1) => s$1.stop()));
+				return driveClient.getOrCreate({
+					token: token$1,
+					teamId: team$1,
+					projectId: project$1,
+					name,
+					maxSize
+				});
+			} catch (_) {
+				_usingCtx3.e = _;
+			} finally {
+				_usingCtx3.d();
+			}
+		})();
+		process.stderr.write("✅ Drive " + source_default.cyan(drive.name) + " ready.\n");
+		process.stderr.write(source_default.dim("   │ ") + "max size: " + source_default.cyan(formatDriveSize(drive)) + "\n");
+		process.stderr.write(source_default.dim("   ╰ ") + "created: " + source_default.cyan(timeAgo(drive.createdAt)) + "\n");
+	}
+});
+const remove$1 = import_cjs$1.command({
+	name: "delete",
+	aliases: ["rm", "remove"],
+	description: "Delete one or more drives.",
+	args: {
+		name: import_cjs$1.positional({
+			type: driveName,
+			description: "Drive name to delete"
+		}),
+		names: import_cjs$1.restPositionals({
+			type: driveName,
+			description: "More drive names to delete"
+		}),
+		scope
+	},
+	async handler({ scope: { token: token$1, team: team$1, project: project$1 }, name, names }) {
+		const tasks = Array.from(new Set([name, ...names]), (driveName$1) => {
+			return {
+				title: `Deleting drive ${driveName$1}`,
+				async task() {
+					const drive = await getDriveByName({
+						token: token$1,
+						teamId: team$1,
+						projectId: project$1,
+						name: driveName$1
+					});
+					if (drive.currentSandboxName || drive.currentSessionId) throw new Error(`Drive ${driveName$1} is attached to a sandbox and cannot be deleted.`);
+					await driveClient.delete(drive);
+				}
+			};
+		});
+		try {
+			await new Listr(tasks, { concurrent: true }).run();
+		} catch {
+			process.exitCode = 1;
+		}
+	}
+});
+const drives = (0, import_cjs$2.subcommands)({
+	name: "drives",
+	description: "Manage sandbox drives",
+	cmds: {
+		list: list$1,
+		"get-or-create": getOrCreate,
+		delete: remove$1
+	}
+});
+function printDrives(drives$1) {
+	console.log(table({
+		rows: drives$1,
+		columns: {
+			NAME: { value: (v) => v.name },
+			CREATED: { value: (v) => timeAgo(v.createdAt) },
+			UPDATED: { value: (v) => timeAgo(v.updatedAt) },
+			SIZE: { value: formatDriveSize },
+			["ATTACHED SANDBOX"]: { value: (v) => v.currentSandboxName ?? "-" },
+			["ATTACHED SESSION"]: { value: (v) => v.currentSessionId ?? "-" }
+		}
+	}));
+}
+function formatDriveSize(drive) {
+	return drive.maxSize === void 0 ? "-" : formatBytes(drive.maxSize);
+}
+async function getDriveByName({ token: token$1, teamId, projectId, name }) {
+	const { drives: drives$1 } = await driveClient.list({
+		token: token$1,
+		teamId,
+		projectId,
+		namePrefix: name,
+		sortBy: "name",
+		sortOrder: "asc",
+		limit: 50
+	});
+	const drive = drives$1.find((drive$1) => drive$1.name === name);
+	if (!drive) throw new Error([`Drive ${name} was not found.`, `${source_default.bold("hint:")} Create it with: sandbox drives get-or-create ${name}`].join("\n"));
+	return drive;
+}
+
 //#endregion
 //#region src/app.ts
 var import_cjs = require_cjs();
@@ -12037,6 +12299,7 @@ const app = (opts) => (0, import_cjs.subcommands)({
 	cmds: {
 		list,
 		create,
+		sh,
 		fork,
 		config,
 		copy: cp,
@@ -12048,6 +12311,7 @@ const app = (opts) => (0, import_cjs.subcommands)({
 		snapshot,
 		snapshots,
 		sessions,
+		drives,
 		...!opts?.withoutAuth && {
 			login,
 			logout
@@ -12056,7 +12320,7 @@ const app = (opts) => (0, import_cjs.subcommands)({
 	examples: [
 		{
 			description: "Create a sandbox and start a shell",
-			command: "sandbox create --connect"
+			command: "sandbox sh"
 		},
 		{
 			description: "Run a command in a new sandbox",
@@ -12071,4 +12335,4 @@ const app = (opts) => (0, import_cjs.subcommands)({
 
 //#endregion
 export { source_exports as a, init_source as i, printTopLevelError as n, require_cjs as r, app as t };
-//# sourceMappingURL=app-CsBNEDNb.mjs.map
+//# sourceMappingURL=app-CFX0H5jm.mjs.map