feat(devbox): add tunnel to devbox create (#99)

## Description

<!-- Provide a brief description of your changes -->

**Note:** PR titles should follow [Conventional
Commits](https://www.conventionalcommits.org/) format (e.g.,
`feat(devbox): add support for custom env vars` or `fix(snapshot):
resolve pagination issue`) as they are used for automatic release notes
generation.

## Type of Change

<!-- Mark the relevant option with an 'x' -->

- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] Documentation update
- [ ] Code refactoring
- [ ] Performance improvement
- [ ] Test updates

## Related Issues

<!-- Link to related issues using #issue-number -->
Closes #

## Changes Made

<!-- Describe the changes in detail -->

## Testing

<!-- Describe how you tested your changes -->

- [ ] I have tested locally
- [ ] I have added/updated tests
- [ ] All existing tests pass

## Checklist

- [ ] My code follows the code style of this project
- [ ] I have performed a self-review of my own code
- [ ] I have commented my code, particularly in hard-to-understand areas
- [ ] I have updated the documentation accordingly
- [ ] My changes generate no new warnings
- [ ] I have added tests that prove my fix is effective or that my
feature works
- [ ] New and existing unit tests pass locally with my changes
- [ ] Any dependent changes have been merged and published

## Screenshots (if applicable)

<!-- Add screenshots to help explain your changes -->

## Additional Notes

<!-- Any additional information that reviewers should know -->

Author: ross-rl

src/commands/devbox/create.ts

@@ -23,6 +23,7 @@ interface CreateOptions {
   root?: boolean;
   user?: string;
   networkPolicy?: string;
+  tunnel?: string;
   gateways?: string[];
   output?: string;
 }
@@ -139,6 +140,13 @@ export async function createDevbox(options: CreateOptions = {}) {
       );
     }
 
+    // Validate tunnel option
+    if (options.tunnel && !["open", "authenticated"].includes(options.tunnel)) {
+      outputError(
+        "Invalid tunnel mode. Must be either 'open' or 'authenticated'",
+      );
+    }
+
     // Build launch parameters
     const launchParameters: Record<string, unknown> = {};
     if (options.resources) {
@@ -213,6 +221,13 @@ export async function createDevbox(options: CreateOptions = {}) {
       createRequest.secrets = parseSecrets(options.secrets);
     }
 
+    // Handle tunnel configuration
+    if (options.tunnel) {
+      createRequest.tunnel = {
+        auth_mode: options.tunnel,
+      };
+    }
+
     // Handle gateways
     if (options.gateways && options.gateways.length > 0) {
       createRequest.gateways = parseGateways(options.gateways);

src/utils/commands.ts

@@ -59,6 +59,10 @@ export function createProgram(): Command {
     .option("--root", "Run as root")
     .option("--user <user:uid>", "Run as this user (format: username:uid)")
     .option("--network-policy <id>", "Network policy ID to apply")
+    .option(
+      "--tunnel <mode>",
+      "Tunnel authentication mode (open, authenticated)",
+    )
     .option(
       "--gateways <gateways...>",
       "Gateway configurations (format: ENV_PREFIX=gateway_id_or_name,secret_id_or_name)",