Reference
sandbox run
Execute a command in a fresh ephemeral sandbox and report its output, exit code, and resource usage. Without --image, the project's built image (overplane-<project>:latest) and configured runtime are used; --image and --runtime run without a project. The project tree is mounted read-only at /project, fresh read-write scratch directories at /output (the default working directory) and /error, and the overplane binary at /usr/local/bin/overplane; files written to /output and /error are captured on exit and extractable with --output/--error. The command's exit code is propagated as overplane's exit code.
Optional
--image
stringRun this image instead of the project image (no project required).
--runtime
stringContainer engine: docker or podman (default: project runtime).
--env
stringSet an environment variable KEY=VALUE (repeatable).
--env-from-host
stringCopy a host environment variable by name (repeatable).
--mount
stringBind mount HOST:CONTAINER[:ro|rw] (repeatable).
--network
stringNetwork mode, e.g. host or none.
--user
stringRun identity UID:GID (default: current host uid/gid).
--workdir
stringContainer working directory (default /output).
--project
stringHost directory mounted read-only at /project (default: project root).
--output
stringExtract captured /output files to this host directory after a successful run.
--error
stringExtract captured /error files to this host directory after a successful run.
--no-self-mount
boolean default falseDo not mount the overplane binary into the container.
--json
boolean default falseEmit a structured JSON result instead of streaming output.