$ devd run nicolaka/netshoot --name myapp
INFO Creating workspace "myapp" (nicolaka/netshoot, 2 CPUs, 512 MB)
INFO Created in 13.31s
INFO Starting VM...
INFO Waiting for SSH on port 2222...
INFO SSH ready

     Name:    myapp
     Image:   nicolaka/netshoot
     SSH:     ssh devd-myapp  (or: devd ssh myapp)
     Port:    2222
     Boot:    1.01s

$ devd ssh myapp
root@myapp:~#

$ devd create nicolaka/netshoot --name frontend --ports 8080
$ devd daemon &                    # pre-empts :8080 on host
$ devd start frontend              # TSI falls back — loopback isolated

$ devd switch frontend
INFO Switched active workspace: myapp → frontend
INFO Contested ports [8080] now route to "frontend"

$ curl localhost:8080              # → hits frontend's server

$ devd ps
NAME       IMAGE              STATE    SSH PORT  CPUS  MEMORY  ACTIVE  CREATED
myapp      nicolaka/netshoot  running  2222      2     512 MB          5m ago
frontend   nicolaka/netshoot  running  2223      2     512 MB  *       2m ago

devd create [image] --name <n>     Create a workspace (stopped)
devd start <n>                     Boot a stopped workspace
devd run [image] --name <n>        Create + start in one step

devd ps [-a]                       List workspaces (running, or all)
devd ssh <n>                       SSH into a running workspace
devd shell <n>                     Alias for ssh
devd stop <n>                      Stop a running workspace
devd rm [-f] <n>                   Remove a workspace

devd daemon [--ports 8080,3000]    Run the proxy daemon (pre-empts contested ports)
devd switch <n>                    Route contested ports to this workspace

                    ┌─────────────┐
  browser/curl ───► │ devd daemon │
                    │ 0.0.0.0:8080│
                    └──────┬──────┘
                           │ routes to active workspace
                    ┌──────┴──────┐
                    ▼             ▼
           SSH tunnel:9001  SSH tunnel:9002
           (host-side)      (host-side)
                │                │
                ▼                ▼
          VM-A :2222       VM-B :2223
          (sshd via TSI)   (sshd via TSI)
                │                │
                ▼                ▼
          VM-A localhost   VM-B localhost
          :8080 (local)    :8080 (local)
          loopback ✓       loopback ✓

cmd/devd/          CLI entrypoint (cobra)
internal/
  cli/             Command implementations
  config/          Paths and defaults (~/.devd/)
  db/              SQLite state layer (pure Go, no CGO)
  vm/              krunvm wrapper (create/start/stop/delete)
  ssh/             SSH keypair + ~/.ssh/config management
  proxy/           Port pre-emption and TCP proxy daemon
experiments/       Networking experiments validating the architecture