Reference

sandbox run

Execute a command in a fresh ephemeral sandbox and report its output, exit code, and resource usage. Without --image, the project's built image (overplane-<project>:latest) and configured runtime are used; --image and --runtime run without a project. The project tree is mounted read-only at /project, fresh read-write scratch directories at /output (the default working directory) and /error, and the overplane binary at /usr/local/bin/overplane; files written to /output and /error are captured on exit and extractable with --output/--error. The command's exit code is propagated as overplane's exit code.

Optional

--image

string

Run this image instead of the project image (no project required).

--runtime

string

Container engine: docker or podman (default: project runtime).

--env

string

Set an environment variable KEY=VALUE (repeatable).

--env-from-host

string

Copy a host environment variable by name (repeatable).

--mount

string

Bind mount HOST:CONTAINER[:ro|rw] (repeatable).

--network

string

Network mode, e.g. host or none.

--user

string

Run identity UID:GID (default: current host uid/gid).

--workdir

string

Container working directory (default /output).

--project

string

Host directory mounted read-only at /project (default: project root).

--output

string

Extract captured /output files to this host directory after a successful run.

--error

string

Extract captured /error files to this host directory after a successful run.

--no-self-mount

boolean default false

Do not mount the overplane binary into the container.

--json

boolean default false

Emit a structured JSON result instead of streaming output.