@xano/cli 0.0.95-beta.1 → 0.0.95-beta.11

package/README.md

@@ -235,6 +235,11 @@ xano release pull ./my-release -r v1.0 --env --records
 xano release push ./my-release -n "v2.0"
 xano release push ./my-release -n "v2.0" --hotfix -d "Critical fix"
 xano release push ./my-release -n "v2.0" --no-records --no-env
+
+# Deploy a release to its workspace as a new branch
+xano release deploy "v1.0"
+xano release deploy "v1.0" --branch "restore-v1" --no-set_live
+xano release deploy "v1.0" -w 40 -o json
 ```
 
 ### Platforms
@@ -302,7 +307,8 @@ xano tenant get <tenant_name>
 
 # Create a tenant
 xano tenant create "My Tenant"
-xano tenant create "My Tenant" -d "Description" --cluster_id 1 --platform_id 5
+xano tenant create "My Tenant" -d "Description" --type tier2 --cluster_id 1 --platform_id 5
+xano tenant create "My Tenant" --type tier2 --cluster_id 1 --license ./license.yaml
 
 # Edit a tenant
 xano tenant edit <tenant_name> --display "New Name" -d "New description"
@@ -440,18 +446,25 @@ xano tenant cluster license set <cluster_id>
 xano tenant cluster license set <cluster_id> --file ./kubeconfig.yaml
 ```
 
-### Ephemeral
+### Sandbox
 
-Manage ephemeral tenants. Ephemeral tenants are workspace-agnostic (tier1 only) and do not run background tasks.
+Manage your sandbox tenant. Each user has a single sandbox tenant that is auto-provisioned on first use.
 
 ```bash
-# Create an ephemeral tenant
-xano ephemeral create "My Ephemeral"
-xano ephemeral create "CI Tenant" -d "For CI/CD" -o json
+# Get your sandbox tenant (creates if needed)
+xano sandbox get
+xano sandbox get -o json
+
+# Push/pull workspace data
+xano sandbox push ./my-workspace
+xano sandbox pull ./my-tenant
+
+# Impersonate (open in browser)
+xano sandbox impersonate
 
-# Get ephemeral tenant details
-xano ephemeral get <tenant_name>
-xano ephemeral get <tenant_name> -o json
+# Reset all workspace data
+xano sandbox reset
+xano sandbox reset --force
 ```
 
 ### Static Hosts

package/dist/base-command.d.ts

@@ -14,6 +14,17 @@ export interface CredentialsFile {
     };
 }
 export declare function buildUserAgent(version: string): string;
+export interface SandboxTenant {
+    created_at?: string;
+    description?: string;
+    display?: string;
+    ephemeral?: boolean;
+    id: number;
+    name: string;
+    sandbox_expires_at?: string | number;
+    state?: string;
+    xano_domain?: string;
+}
 export default abstract class BaseCommand extends Command {
     static baseFlags: {
         profile: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
@@ -38,6 +49,25 @@ export default abstract class BaseCommand extends Command {
      * Load and parse the credentials file. Returns null if the file doesn't exist.
      */
     protected loadCredentialsFile(): CredentialsFile | null;
+    /**
+     * Get or create the singleton sandbox environment for the authenticated user.
+     * Returns the sandbox object (existing or newly created).
+     */
+    protected getOrCreateSandbox(profile: ProfileConfig, verbose: boolean): Promise<SandboxTenant>;
+    /**
+     * Resolve profile from flags, validating instance_origin and access_token exist.
+     */
+    protected resolveProfile(flags: {
+        profile?: string;
+    }): {
+        profile: ProfileConfig;
+        profileName: string;
+    };
+    /**
+     * Parse an API error response and return a clean error message.
+     * Extracts the message from JSON responses and adds context for common errors.
+     */
+    protected parseApiError(response: Response, fallbackPrefix: string): Promise<string>;
     /**
      * Make an HTTP request with optional verbose logging.
      * Use this for all Metadata API calls to support the --verbose flag.

package/dist/base-command.js

@@ -103,6 +103,67 @@ export default class BaseCommand extends Command {
         }
         return null;
     }
+    /**
+     * Get or create the singleton sandbox environment for the authenticated user.
+     * Returns the sandbox object (existing or newly created).
+     */
+    async getOrCreateSandbox(profile, verbose) {
+        const apiUrl = `${profile.instance_origin}/api:meta/sandbox/me`;
+        const response = await this.verboseFetch(apiUrl, {
+            headers: {
+                accept: 'application/json',
+                Authorization: `Bearer ${profile.access_token}`,
+            },
+            method: 'GET',
+        }, verbose, profile.access_token);
+        if (!response.ok) {
+            const message = await this.parseApiError(response, 'Failed to get sandbox environment');
+            this.error(message);
+        }
+        return (await response.json());
+    }
+    /**
+     * Resolve profile from flags, validating instance_origin and access_token exist.
+     */
+    resolveProfile(flags) {
+        const profileName = flags.profile || this.getDefaultProfile();
+        const credentials = this.loadCredentialsFile();
+        if (!credentials || !(profileName in credentials.profiles)) {
+            this.error(`Profile '${profileName}' not found.\n` + `Create a profile using 'xano profile create'`);
+        }
+        const profile = credentials.profiles[profileName];
+        if (!profile.instance_origin) {
+            this.error(`Profile '${profileName}' is missing instance_origin`);
+        }
+        if (!profile.access_token) {
+            this.error(`Profile '${profileName}' is missing access_token`);
+        }
+        return { profile, profileName };
+    }
+    /**
+     * Parse an API error response and return a clean error message.
+     * Extracts the message from JSON responses and adds context for common errors.
+     */
+    async parseApiError(response, fallbackPrefix) {
+        const errorText = await response.text();
+        let message = `${fallbackPrefix} (${response.status})`;
+        try {
+            const errorJson = JSON.parse(errorText);
+            if (errorJson.message) {
+                message = errorJson.message;
+            }
+        }
+        catch {
+            if (errorText) {
+                message += `\n${errorText}`;
+            }
+        }
+        // Provide guidance when sandbox access is denied (free plan restriction)
+        if (response.status === 500 && message === 'Access Denied.') {
+            message = 'Sandbox is not available on the Free plan. Upgrade your plan to use sandbox features.';
+        }
+        return message;
+    }
     /**
      * Make an HTTP request with optional verbose logging.
      * Use this for all Metadata API calls to support the --verbose flag.

package/dist/commands/auth/index.js

@@ -283,7 +283,7 @@ Opening browser for Xano login at https://custom.xano.com...`,
                 choices: [
                     { name: '(Skip workspace)', value: '' },
                     ...workspaces.map((ws) => ({
-                        name: ws.name,
+                        name: `${ws.name} (${ws.id})`,
                         value: ws.id,
                     })),
                 ],

package/dist/commands/profile/create/index.js

@@ -98,8 +98,8 @@ Profile 'selfhosted' created successfully at ~/.xano/credentials.yaml
         const profileExists = args.name in credentials.profiles;
         credentials.profiles[args.name] = {
             access_token: flags.access_token,
-            account_origin: flags.account_origin ?? '',
-            instance_origin: flags.instance_origin,
+            account_origin: (flags.account_origin ?? '').replace(/\/+$/, ''),
+            instance_origin: flags.instance_origin.replace(/\/+$/, ''),
             ...(flags.workspace && { workspace: flags.workspace }),
             ...(flags.branch && { branch: flags.branch }),
             ...(flags.insecure && { insecure: true }),

package/dist/commands/profile/edit/index.js

@@ -128,8 +128,8 @@ Profile 'default' updated successfully at ~/.xano/credentials.yaml
         // Update only the fields that were provided
         const updatedProfile = {
             ...existingProfile,
-            ...(flags.account_origin !== undefined && { account_origin: flags.account_origin }),
-            ...(flags.instance_origin !== undefined && { instance_origin: flags.instance_origin }),
+            ...(flags.account_origin !== undefined && { account_origin: flags.account_origin.replace(/\/+$/, '') }),
+            ...(flags.instance_origin !== undefined && { instance_origin: flags.instance_origin.replace(/\/+$/, '') }),
             ...(flags.access_token !== undefined && { access_token: flags.access_token }),
             ...(flags.workspace !== undefined && { workspace: flags.workspace }),
             ...(flags.branch !== undefined && { branch: flags.branch }),

package/dist/commands/profile/me/index.js

@@ -111,8 +111,27 @@ User Information:
                         this.log(`  Name: ${inst.name}`);
                     if (inst.display)
                         this.log(`  Display: ${inst.display}`);
-                    if (profile.workspace)
-                        this.log(`  Workspace: ${profile.workspace}`);
+                    if (profile.workspace) {
+                        let wsLabel = String(profile.workspace);
+                        try {
+                            const wsResponse = await this.verboseFetch(`${profile.instance_origin}/api:meta/workspace/${profile.workspace}`, {
+                                headers: {
+                                    accept: 'application/json',
+                                    Authorization: `Bearer ${profile.access_token}`,
+                                },
+                                method: 'GET',
+                            }, false, profile.access_token);
+                            if (wsResponse.ok) {
+                                const ws = (await wsResponse.json());
+                                if (ws.name)
+                                    wsLabel = `${ws.name} (ID: ${profile.workspace})`;
+                            }
+                        }
+                        catch {
+                            // Fall back to just showing the ID
+                        }
+                        this.log(`  Workspace: ${wsLabel}`);
+                    }
                     if (profile.branch)
                         this.log(`  Branch: ${profile.branch}`);
                 }

package/dist/commands/profile/wizard/index.js

@@ -126,7 +126,7 @@ Profile 'production' created successfully at ~/.xano/credentials.yaml
                         choices: [
                             { name: '(Skip workspace)', value: '' },
                             ...workspaces.map((ws) => ({
-                                name: ws.name,
+                                name: `${ws.name} (${ws.id})`,
                                 value: ws.id,
                             })),
                         ],
@@ -339,8 +339,8 @@ Profile 'production' created successfully at ~/.xano/credentials.yaml
         // Add or update the profile
         credentials.profiles[profile.name] = {
             access_token: profile.access_token,
-            account_origin: profile.account_origin,
-            instance_origin: profile.instance_origin,
+            account_origin: (profile.account_origin || '').replace(/\/+$/, ''),
+            instance_origin: profile.instance_origin.replace(/\/+$/, ''),
             ...(profile.workspace && { workspace: profile.workspace }),
             ...(profile.branch && { branch: profile.branch }),
             ...(profile.insecure && { insecure: true }),

package/dist/commands/profile/workspace/set/index.js

@@ -40,7 +40,7 @@ Workspace updated to 'Production API' (xyz789) on profile 'production'
         const { selectedWorkspace } = await inquirer.prompt([
             {
                 choices: workspaces.map((ws) => ({
-                    name: String(ws.id) === String(profile.workspace) ? `${ws.name} (current)` : ws.name,
+                    name: String(ws.id) === String(profile.workspace) ? `${ws.name} (${ws.id}) (current)` : `${ws.name} (${ws.id})`,
                     value: ws.id,
                 })),
                 message: 'Select a workspace',

package/dist/commands/release/deploy/index.d.ts

@@ -0,0 +1,17 @@
+import BaseCommand from '../../../base-command.js';
+export default class ReleaseDeploy extends BaseCommand {
+    static args: {
+        release_name: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        branch: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        set_live: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        workspace: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        profile: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        verbose: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/release/deploy/index.js

@@ -0,0 +1,107 @@
+import { Args, Flags } from '@oclif/core';
+import BaseCommand from '../../../base-command.js';
+export default class ReleaseDeploy extends BaseCommand {
+    static args = {
+        release_name: Args.string({
+            description: 'Name of the release to deploy',
+            required: true,
+        }),
+    };
+    static description = 'Deploy a release to its workspace as a new branch';
+    static examples = [
+        `$ xano release deploy "v1.0"
+Deployed release "v1.0" to workspace 40 (branch: v1.0, set live)
+`,
+        `$ xano release deploy "v1.0" --branch "restore-v1" --no-set_live`,
+        `$ xano release deploy "v1.0" -w 40 -o json`,
+    ];
+    static flags = {
+        ...BaseCommand.baseFlags,
+        branch: Flags.string({
+            char: 'b',
+            description: 'Branch label for the new branch (defaults to release branch name)',
+            required: false,
+        }),
+        output: Flags.string({
+            char: 'o',
+            default: 'summary',
+            description: 'Output format',
+            options: ['summary', 'json'],
+            required: false,
+        }),
+        set_live: Flags.boolean({
+            default: false,
+            description: 'Set the new branch as live',
+            required: false,
+        }),
+        workspace: Flags.string({
+            char: 'w',
+            description: 'Workspace ID (uses profile workspace if not provided)',
+            required: false,
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(ReleaseDeploy);
+        const profileName = flags.profile || this.getDefaultProfile();
+        const credentials = this.loadCredentialsFile();
+        if (!credentials || !(profileName in credentials.profiles)) {
+            this.error(`Profile '${profileName}' not found.\n` + `Create a profile using 'xano profile create'`);
+        }
+        const profile = credentials.profiles[profileName];
+        if (!profile.instance_origin) {
+            this.error(`Profile '${profileName}' is missing instance_origin`);
+        }
+        if (!profile.access_token) {
+            this.error(`Profile '${profileName}' is missing access_token`);
+        }
+        const workspaceId = flags.workspace || profile.workspace;
+        if (!workspaceId) {
+            this.error('No workspace ID provided. Use --workspace flag or set one in your profile.');
+        }
+        const releaseName = encodeURIComponent(args.release_name);
+        const apiUrl = `${profile.instance_origin}/api:meta/workspace/${workspaceId}/release/${releaseName}/deploy`;
+        const body = {
+            set_live: flags.set_live,
+        };
+        if (flags.branch)
+            body.branch = flags.branch;
+        this.warn('This may take a few minutes. Please be patient.');
+        const startTime = Date.now();
+        try {
+            const response = await this.verboseFetch(apiUrl, {
+                body: JSON.stringify(body),
+                headers: {
+                    accept: 'application/json',
+                    Authorization: `Bearer ${profile.access_token}`,
+                    'Content-Type': 'application/json',
+                },
+                method: 'POST',
+            }, flags.verbose, profile.access_token);
+            if (!response.ok) {
+                const errorText = await response.text();
+                this.error(`API request failed with status ${response.status}: ${response.statusText}\n${errorText}`);
+            }
+            const release = (await response.json());
+            if (flags.output === 'json') {
+                this.log(JSON.stringify(release, null, 2));
+            }
+            else {
+                const elapsed = ((Date.now() - startTime) / 1000).toFixed(1);
+                const branchLabel = flags.branch || release.branch || 'default';
+                const liveStatus = flags.set_live ? ', set live' : '';
+                this.log(`Deployed release "${release.name}" to workspace ${workspaceId} (branch: ${branchLabel}${liveStatus})`);
+                if (release.description)
+                    this.log(`  Description: ${release.description}`);
+                this.log(`  Time: ${elapsed}s`);
+            }
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                this.error(`Failed to deploy release: ${error.message}`);
+            }
+            else {
+                this.error(`Failed to deploy release: ${String(error)}`);
+            }
+        }
+    }
+}

package/dist/commands/{ephemeral → sandbox}/env/delete/index.d.ts

@@ -1,8 +1,5 @@
 import BaseCommand from '../../../../base-command.js';
-export default class EphemeralEnvDelete extends BaseCommand {
-    static args: {
-        tenant_name: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
-    };
+export default class SandboxEnvDelete extends BaseCommand {
     static description: string;
     static examples: string[];
     static flags: {

package/dist/commands/{ephemeral → sandbox}/env/delete/index.js

@@ -1,20 +1,14 @@
-import { Args, Flags } from '@oclif/core';
+import { Flags } from '@oclif/core';
 import BaseCommand from '../../../../base-command.js';
-export default class EphemeralEnvDelete extends BaseCommand {
-    static args = {
-        tenant_name: Args.string({
-            description: 'Ephemeral tenant name',
-            required: true,
-        }),
-    };
-    static description = 'Delete an environment variable from an ephemeral tenant';
+export default class SandboxEnvDelete extends BaseCommand {
+    static description = 'Delete an environment variable from a sandbox environment';
     static examples = [
-        `$ xano ephemeral env delete my-tenant --name DATABASE_URL
-Are you sure you want to delete environment variable 'DATABASE_URL' from ephemeral tenant my-tenant? (y/N) y
-Environment variable 'DATABASE_URL' deleted from ephemeral tenant my-tenant
+        `$ xano sandbox env delete --name DATABASE_URL
+Are you sure you want to delete environment variable 'DATABASE_URL'? (y/N) y
+Environment variable 'DATABASE_URL' deleted
 `,
-        `$ xano ephemeral env delete my-tenant --name DATABASE_URL --force`,
-        `$ xano ephemeral env delete my-tenant --name DATABASE_URL -f -o json`,
+        `$ xano sandbox env delete --name DATABASE_URL --force`,
+        `$ xano sandbox env delete --name DATABASE_URL -f -o json`,
     ];
     static flags = {
         ...BaseCommand.baseFlags,
@@ -38,29 +32,17 @@ Environment variable 'DATABASE_URL' deleted from ephemeral tenant my-tenant
         }),
     };
     async run() {
-        const { args, flags } = await this.parse(EphemeralEnvDelete);
-        const profileName = flags.profile || this.getDefaultProfile();
-        const credentials = this.loadCredentialsFile();
-        if (!credentials || !(profileName in credentials.profiles)) {
-            this.error(`Profile '${profileName}' not found.\n` + `Create a profile using 'xano profile create'`);
-        }
-        const profile = credentials.profiles[profileName];
-        if (!profile.instance_origin) {
-            this.error(`Profile '${profileName}' is missing instance_origin`);
-        }
-        if (!profile.access_token) {
-            this.error(`Profile '${profileName}' is missing access_token`);
-        }
-        const tenantName = args.tenant_name;
+        const { flags } = await this.parse(SandboxEnvDelete);
+        const { profile } = this.resolveProfile(flags);
         const envName = flags.name;
         if (!flags.force) {
-            const confirmed = await this.confirm(`Are you sure you want to delete environment variable '${envName}' from ephemeral tenant ${tenantName}?`);
+            const confirmed = await this.confirm(`Are you sure you want to delete environment variable '${envName}' from sandbox environment?`);
             if (!confirmed) {
                 this.log('Deletion cancelled.');
                 return;
             }
         }
-        const apiUrl = `${profile.instance_origin}/api:meta/ephemeral/tenant/${tenantName}/env/${envName}`;
+        const apiUrl = `${profile.instance_origin}/api:meta/sandbox/env/${envName}`;
         try {
             const response = await this.verboseFetch(apiUrl, {
                 headers: {
@@ -70,22 +52,22 @@ Environment variable 'DATABASE_URL' deleted from ephemeral tenant my-tenant
                 method: 'DELETE',
             }, flags.verbose, profile.access_token);
             if (!response.ok) {
-                const errorText = await response.text();
-                this.error(`API request failed with status ${response.status}: ${response.statusText}\n${errorText}`);
+                const message = await this.parseApiError(response, 'API request failed');
+                this.error(message);
             }
             if (flags.output === 'json') {
-                this.log(JSON.stringify({ deleted: true, env_name: envName, tenant_name: tenantName }, null, 2));
+                this.log(JSON.stringify({ deleted: true, env_name: envName }, null, 2));
             }
             else {
-                this.log(`Environment variable '${envName}' deleted from ephemeral tenant ${tenantName}`);
+                this.log(`Environment variable '${envName}' deleted from sandbox environment`);
             }
         }
         catch (error) {
             if (error instanceof Error) {
-                this.error(`Failed to delete ephemeral tenant environment variable: ${error.message}`);
+                this.error(`Failed to delete sandbox environment variable: ${error.message}`);
             }
             else {
-                this.error(`Failed to delete ephemeral tenant environment variable: ${String(error)}`);
+                this.error(`Failed to delete sandbox environment variable: ${String(error)}`);
             }
         }
     }

package/dist/commands/{ephemeral → sandbox}/env/get/index.d.ts

@@ -1,8 +1,5 @@
 import BaseCommand from '../../../../base-command.js';
-export default class EphemeralEnvGet extends BaseCommand {
-    static args: {
-        tenant_name: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
-    };
+export default class SandboxEnvGet extends BaseCommand {
     static description: string;
     static examples: string[];
     static flags: {

package/dist/commands/sandbox/env/get/index.js

@@ -0,0 +1,63 @@
+import { Flags } from '@oclif/core';
+import BaseCommand from '../../../../base-command.js';
+export default class SandboxEnvGet extends BaseCommand {
+    static description = 'Get a single environment variable for a sandbox environment';
+    static examples = [
+        `$ xano sandbox env get --name DATABASE_URL
+postgres://localhost:5432/mydb
+`,
+        `$ xano sandbox env get --name DATABASE_URL -o json`,
+    ];
+    static flags = {
+        ...BaseCommand.baseFlags,
+        name: Flags.string({
+            char: 'n',
+            description: 'Environment variable name',
+            required: true,
+        }),
+        output: Flags.string({
+            char: 'o',
+            default: 'summary',
+            description: 'Output format',
+            options: ['summary', 'json'],
+            required: false,
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(SandboxEnvGet);
+        const { profile } = this.resolveProfile(flags);
+        const envName = flags.name;
+        const apiUrl = `${profile.instance_origin}/api:meta/sandbox/env/${envName}`;
+        try {
+            const response = await this.verboseFetch(apiUrl, {
+                headers: {
+                    accept: 'application/json',
+                    Authorization: `Bearer ${profile.access_token}`,
+                },
+                method: 'GET',
+            }, flags.verbose, profile.access_token);
+            if (!response.ok) {
+                const message = await this.parseApiError(response, 'API request failed');
+                this.error(message);
+            }
+            const envVar = (await response.json());
+            if (flags.output === 'json') {
+                this.log(JSON.stringify(envVar, null, 2));
+            }
+            else if (envVar) {
+                this.log(envVar.value);
+            }
+            else {
+                this.log(`Environment variable '${envName}' not found for sandbox environment`);
+            }
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                this.error(`Failed to get sandbox environment variable: ${error.message}`);
+            }
+            else {
+                this.error(`Failed to get sandbox environment variable: ${String(error)}`);
+            }
+        }
+    }
+}

package/dist/commands/{ephemeral → sandbox}/env/get_all/index.d.ts

@@ -1,8 +1,5 @@
 import BaseCommand from '../../../../base-command.js';
-export default class EphemeralEnvGetAll extends BaseCommand {
-    static args: {
-        tenant_name: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
-    };
+export default class SandboxEnvGetAll extends BaseCommand {
     static description: string;
     static examples: string[];
     static flags: {

package/dist/commands/sandbox/env/get_all/index.js

@@ -0,0 +1,76 @@
+import { Flags } from '@oclif/core';
+import * as yaml from 'js-yaml';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import BaseCommand from '../../../../base-command.js';
+export default class SandboxEnvGetAll extends BaseCommand {
+    static description = 'Get all environment variables for a sandbox environment and save to a YAML file';
+    static examples = [
+        `$ xano sandbox env get_all
+Environment variables saved to env_<tenant>.yaml
+`,
+        `$ xano sandbox env get_all --file ./my-env.yaml`,
+        `$ xano sandbox env get_all --view`,
+        `$ xano sandbox env get_all -o json`,
+    ];
+    static flags = {
+        ...BaseCommand.baseFlags,
+        file: Flags.string({
+            char: 'f',
+            description: 'Output file path (default: env_<sandbox_name>.yaml)',
+            required: false,
+        }),
+        output: Flags.string({
+            char: 'o',
+            default: 'summary',
+            description: 'Output format',
+            options: ['summary', 'json'],
+            required: false,
+        }),
+        view: Flags.boolean({
+            default: false,
+            description: 'Print environment variables to stdout instead of saving to file',
+            required: false,
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(SandboxEnvGetAll);
+        const { profile } = this.resolveProfile(flags);
+        const apiUrl = `${profile.instance_origin}/api:meta/sandbox/env_all`;
+        try {
+            const response = await this.verboseFetch(apiUrl, {
+                headers: {
+                    accept: 'application/json',
+                    Authorization: `Bearer ${profile.access_token}`,
+                },
+                method: 'GET',
+            }, flags.verbose, profile.access_token);
+            if (!response.ok) {
+                const message = await this.parseApiError(response, 'API request failed');
+                this.error(message);
+            }
+            const envMap = (await response.json());
+            if (flags.output === 'json') {
+                this.log(JSON.stringify(envMap, null, 2));
+            }
+            else if (flags.view) {
+                const envYaml = yaml.dump(envMap, { lineWidth: -1, sortKeys: true });
+                this.log(envYaml.trimEnd());
+            }
+            else {
+                const filePath = path.resolve(flags.file || `env.yaml`);
+                const envYaml = yaml.dump(envMap, { lineWidth: -1, sortKeys: true });
+                fs.writeFileSync(filePath, envYaml, 'utf8');
+                this.log(`Environment variables saved to ${filePath}`);
+            }
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                this.error(`Failed to get sandbox environment variables: ${error.message}`);
+            }
+            else {
+                this.error(`Failed to get sandbox environment variables: ${String(error)}`);
+            }
+        }
+    }
+}