bdy 1.23.16-dev-target-commands → 1.23.16-dev

package/distTs/README.md

@@ -0,0 +1,181 @@
+# Buddy CLI (`bdy`)
+
+Work seamlessly with [Buddy](https://buddy.works) from the command line.
+
+`bdy` is Buddy's official command-line interface for managing CI/CD pipelines, agents, tests, artifacts, sandboxes, distributions, and more — straight from your terminal.
+
+📚 Full documentation: https://buddy.works/docs/cli/getting-started
+
+## Installation
+
+### npm (recommended)
+
+Requires Node.js 14+.
+
+```bash
+# macOS / Linux
+sudo npm i -g bdy
+
+# Windows
+npm i -g bdy
+```
+
+### Homebrew (macOS)
+
+```bash
+brew tap buddy/bdy
+brew install bdy
+```
+
+### APT (Linux x64 / ARM64)
+
+```bash
+sudo apt-get update && sudo apt-get install -y software-properties-common
+sudo gpg --homedir /tmp --no-default-keyring --keyring /usr/share/keyrings/buddy.gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys eb39332e766364ca6220e8dc631c5a16310cc0ad
+echo "deb [arch=amd64 signed-by=/usr/share/keyrings/buddy.gpg] https://es.buddy.works/bdy/apt-repo prod main" | sudo tee /etc/apt/sources.list.d/buddy.list > /dev/null
+sudo apt-get update && sudo apt-get install -y bdy
+```
+
+> On ARM64, replace `arch=amd64` with `arch=arm64` in the `echo` command above.
+
+### Chocolatey (Windows)
+
+```powershell
+choco install bdy --pre
+```
+
+### Direct download
+
+Prebuilt binaries are available for macOS (Apple Silicon), Linux (x64/ARM64), and Windows (x64) on the [installation page](https://buddy.works/docs/cli/getting-started).
+
+### Verify & update
+
+```bash
+bdy version          # show current and latest version
+sudo npm i -g bdy    # update (or use your package manager's upgrade command)
+```
+
+## Authentication
+
+A [Buddy account](https://buddy.works) is required to use the CLI.
+
+Log in interactively:
+
+```bash
+bdy login
+```
+
+New to Buddy? Create an account from the CLI:
+
+```bash
+bdy register
+```
+
+### Linking a project
+
+Once logged in, link a directory to a Buddy project:
+
+```bash
+mkdir my-proj
+cd my-proj
+bdy proj link
+```
+
+After linking, every `bdy` command run from this directory is executed against the linked project — no need to pass the project name each time.
+
+Check who you're logged in as, or log out:
+
+```bash
+bdy whoami
+bdy logout
+```
+
+### Tokens & non-interactive login
+
+For CI/CD pipelines and non-browser environments, authenticate with a [personal access token](https://buddy.works/docs/api/getting-started/oauth2/personal-access-token):
+
+```bash
+bdy login --token <token>
+```
+
+The login command accepts the following options:
+
+| Option | Description | Environment variable |
+| --- | --- | --- |
+| `--token <token>` | Personal access token | `BUDDY_TOKEN` |
+| `--api <url>` | API URL for On-Premises installations | `BUDDY_API_ENDPOINT` |
+| `--region <region>` | Region: `us`, `eu`, or `as` | `BUDDY_REGION` |
+| `-w, --workspace <domain>` | Workspace URL handle | `BUDDY_WORKSPACE` |
+
+Each option can be supplied as a flag or via its environment variable — handy for pipelines and headless setups:
+
+```bash
+export BUDDY_TOKEN=<token>
+export BUDDY_WORKSPACE=<your-workspace>
+bdy login
+```
+
+## Agent integration (plugin & skills)
+
+The [Buddy Plugin](https://github.com/buddy/buddy-plugin) lets coding agents deploy applications, expose local services, and manage infrastructure on Buddy. It bundles a consolidated skill covering sandboxes, artifacts, tunnels, domains, distributions, and pipelines, plus two commands:
+
+- `/deploy [name] [path]` — deploy a static site or server application
+- `/expose [port]` — open a tunnel to a locally running service
+
+Make sure the CLI is installed first (`sudo npm install -g bdy`), then:
+
+**Claude Code** — install the plugin (commands + skills):
+
+```bash
+claude plugin marketplace add buddy/buddy-plugin
+claude plugin install buddy@buddy-plugin
+```
+
+**Other agents** — install the skills only:
+
+```bash
+npx skills add buddy/buddy-plugin
+```
+
+Then authenticate and link your project:
+
+```bash
+bdy login
+cd your-project
+bdy proj link
+```
+
+The plugin auto-detects your project type: static sites generate versioned artifacts with public URLs, while server applications deploy to sandboxes with HTTPS endpoints. Monorepos can deploy multiple applications, each getting its own URL and endpoint.
+
+## Commands
+
+| Command | Description |
+| --- | --- |
+| `bdy login` / `sign-in` | Log in to Buddy |
+| `bdy register` / `sign-up` | Register a new Buddy account |
+| `bdy whoami` | Check login information |
+| `bdy logout` | Log out from Buddy |
+| `bdy workspace` / `ws` | Manage workspaces |
+| `bdy project` / `proj` | Manage projects |
+| `bdy pipeline` / `pip` | Interact with the pipeline service |
+| `bdy artifact` / `art` | Interact with the artifact service |
+| `bdy sandbox` / `sb` | Interact with sandboxes |
+| `bdy agent` | Install and run `bdy` as an OS service (Windows, macOS, Linux) |
+| `bdy tunnel` | Manage tunnel configuration |
+| `bdy crawl` | Manage web crawls (Markdown, HTML, PNG/JPEG screenshots; suite linking) |
+| `bdy tests` | Manage unit tests and visual regression (Storybook, URL captures, runners) |
+| `bdy domain` | Manage zones used in distribution routes |
+| `bdy distro` | Manage distributions |
+| `bdy api` | Contact the Buddy API directly |
+| `bdy update` / `version` | Show version and update the CLI |
+
+Run any command with `-h` / `--help` for detailed usage:
+
+```bash
+bdy --help
+bdy pipeline --help
+```
+
+## Feedback
+
+Found a bug or have a feature request? Let us know through [Buddy support](https://buddy.works/support) or the [documentation](https://buddy.works/docs/cli/getting-started).

package/distTs/package.json

@@ -1,7 +1,7 @@
 {
   "name": "bdy",
   "preferGlobal": false,
-  "version": "1.23.16-dev-target-commands",
+  "version": "1.23.16-dev",
   "type": "commonjs",
   "license": "MIT",
   "homepage": "https://buddy.works/docs/cli",
@@ -53,7 +53,7 @@
     "@fastify/cors": "11.2.0",
     "@inquirer/prompts": "8.5.2",
     "@modelcontextprotocol/sdk": "1.30.0",
-    "@puppeteer/browsers": "2.13.0",
+    "@puppeteer/browsers": "3.2.0",
     "@scalar/json-magic": "0.12.16",
     "@scalar/openapi-parser": "0.28.7",
     "@scalar/openapi-types": "0.9.1",
@@ -81,7 +81,7 @@
     "picomatch": "4.0.4",
     "pino": "10.3.1",
     "punycode": "2.3.1",
-    "puppeteer-core": "23.11.1",
+    "puppeteer-core": "25.6.0",
     "range-parser": "1.2.1",
     "socket.io-client": "4.8.3",
     "ssh2": "1.17.0",

package/distTs/src/agent/agent.js

@@ -343,12 +343,16 @@ class Agent extends events_1.default {
             this.socket.fetch(!this.disabled, null, null, false, this.getTunnelsUpdate(), true);
         }
     }
-    // Matches on the two request values exactly, which is what lets an update status share
-    // the field: TUNNEL_AGENT_UPDATE_STATUS values fall through here and do nothing, so an
+    // Matches on the request values exactly, which is what lets an update status share the
+    // field: TUNNEL_AGENT_UPDATE_STATUS values fall through here and do nothing, so an
     // outcome we reported ourselves is never read back as a fresh request. Anything unknown
     // is left alone rather than acked, so a value a newer front understands is still there
     // when the agent is upgraded.
     async makeAction(action) {
+        if (action === tunnel_1.TUNNEL_AGENT_ACTION.DEBUG_ON ||
+            action === tunnel_1.TUNNEL_AGENT_ACTION.DEBUG_OFF) {
+            return this.makeDebugAction(action === tunnel_1.TUNNEL_AGENT_ACTION.DEBUG_ON);
+        }
         if (action === tunnel_1.TUNNEL_AGENT_ACTION.DELETE) {
             if (this.manager) {
                 return this.manager.disableAgentAndExit(texts_1.ERR_AGENT_REMOVED);
@@ -373,6 +377,27 @@ class Agent extends events_1.default {
             return;
         }
     }
+    // Applied from here rather than through the local api that `agent debug` calls: that api
+    // exists so another process can reach a running agent, and this is already inside one.
+    // A foreground tunnel has no manager and no config to record the level in, so it only
+    // changes its own - which is all it has to change.
+    //
+    // Always acked, and idempotent on purpose. The backend rewrites the whole agent row per
+    // request, so an ack can be undone by a concurrent update and the request comes back on
+    // the next fetch (see reclearLostUpdateStatus) - re-applying a level the process already
+    // runs at costs nothing, while rewriting the config every 15 seconds would, which is why
+    // the state check guards the write and not the ack.
+    makeDebugAction(debug) {
+        if (logger_1.default.debugOn !== debug) {
+            logger_1.default.info((0, texts_1.LOG_AGENT_DEBUG_REMOTE)(debug));
+            if (!this.manager)
+                logger_1.default.setDebug(debug);
+            else if (!this.manager.setDebug(debug)) {
+                logger_1.default.info(texts_1.LOG_AGENT_DEBUG_NOT_PERSISTED);
+            }
+        }
+        return this.ackAction();
+    }
     refreshTunnels(tunnels) {
         if (this.tunnelsUpdating)
             return;

package/distTs/src/agent/linux.js

@@ -49,14 +49,13 @@ class AgentLinux extends system_1.default {
     // `systemctl show bdy` would hand the token to the same unprivileged users - and file modes
     // cannot stop that. Closing this means the agent reading the token from a file only it can
     // read, which is a change of where the token lives, not of this template.
-    getServiceConfig(id, host, token, port, user, debug) {
+    getServiceConfig(id, host, token, port, user) {
         const cli = this.getSystemBinaryPath();
         return `[Unit]
 Description=Buddy Tunnel Agent
 After=network.target
 
 [Service]
-Environment="DEBUG=${debug ? 1 : 0}"
 User=${user || 'root'}
 WorkingDirectory=/
 ExecStart=${cli} agent run --id="${id}" --host="${host}" --token="${token}" --port=${port}
@@ -84,7 +83,10 @@ WantedBy=multi-user.target`;
         const user = m[1].trim();
         return user === 'root' ? '' : user;
     }
-    async install(id, host, token, port, start, user, pass, debug) {
+    async install(id, host, token, port, start, user, 
+    // Windows only - a unit runs as a user without being handed their password
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    _pass) {
         try {
             // ensure service clear
             await this.uninstall();
@@ -105,7 +107,7 @@ WantedBy=multi-user.target`;
             await this.extractBinaryArchive();
             await this.fixBinaryRights();
             logger_1.default.info(texts_1.LOG_AGENT_SYSTEM_SERVICE_CONFIG);
-            await this.saveFile(this.getServicePath(), this.getServiceConfig(id, host, token, port, user, debug));
+            await this.saveFile(this.getServicePath(), this.getServiceConfig(id, host, token, port, user));
             // Everything above was written by this root process, so the service user does not own
             // any of it yet and could not write its host key or its log. Ownership first, mode
             // second - see chownSystemDir for why that order is the one that fails safely.
@@ -135,7 +137,7 @@ WantedBy=multi-user.target`;
             catch {
                 // do nothing
             }
-            await this.saveFile(this.getServicePath(), this.getServiceConfig(json.id, json.host, json.token, json.port, user, json.debug));
+            await this.saveFile(this.getServicePath(), this.getServiceConfig(json.id, json.host, json.token, json.port, user));
             // The directory follows the service to its new user, and back to root when the user is
             // cleared - this is what makes changing the user later work without 0777 everywhere
             await this.chownSystemDir(user);

package/distTs/src/agent/manager.js

@@ -502,6 +502,28 @@ class AgentManagerClass {
             return;
         }
     }
+    // The live level, and the record of it for the next start. Both entry points into an
+    // agent process read that record back - `agent run` for a service, startStandaloneProc
+    // for an `--app` install - so this write is what makes a toggle survive a restart.
+    //
+    // Best effort on the write, and the level is changed either way. The config normally
+    // belongs to the service user (chownSystemDir hands it over at 0644), so this succeeds
+    // for a service running as someone other than root - but a directory left behind by an
+    // older install, or a read-only filesystem, still ends up here, and refusing to raise
+    // the level over a file that only decides the *next* start would take remote debugging
+    // away from the machine in front of us. saveSystemConfig logs what went wrong, and
+    // makeDebugAction says what it cost.
+    setDebug(debug) {
+        logger_1.default.setDebug(debug);
+        let json;
+        try {
+            json = this.system.loadSystemConfig();
+        }
+        catch {
+            return false;
+        }
+        return this.system.saveSystemConfig(json.id, json.host, json.token, json.port, !!json.standalone, debug);
+    }
     async processAgentDebug(req, res) {
         if (!this.agent) {
             this.serverError(res, 'Agent not enabled');
@@ -515,6 +537,9 @@ class AgentManagerClass {
             this.serverError(res, 'Wrong input data');
             return;
         }
+        // The level only. The `agent debug` command on the other end of this writes the config
+        // itself, from a process that has checked it has the rights to - a second write of the
+        // same values from here would say nothing the first one does not.
         logger_1.default.setDebug(!!data.debug);
         logger_1.default.info(`MANAGER REQUEST: change debug to ${!!data.debug}`);
         this.serverOutput(res, {

package/distTs/src/agent/osx.js

@@ -41,7 +41,7 @@ class AgentOsx extends system_1.default {
     // this plist, and the same move on systemd leaks the token through `systemctl show` whatever
     // the file mode is - see the note in AgentLinux.getServiceConfig. Closing this means the agent
     // reading the token from a file only it can read, which is a change of where the token lives.
-    getServiceConfig(id, host, token, port, user, debug) {
+    getServiceConfig(id, host, token, port, user) {
         const cli = this.getSystemBinaryPath();
         let cfg = `<?xml version='1.0' encoding='UTF-8'?>
 <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
@@ -63,11 +63,6 @@ class AgentOsx extends system_1.default {
       <string>--port</string>
       <string>${port}</string>
     </array>
-    <key>EnvironmentVariables</key>
-    <dict>
-        <key>DEBUG</key>
-        <string>${debug ? 1 : 0}</string>
-    </dict>
     <key>KeepAlive</key>
     <true/>
     <key>RunAtLoad</key>
@@ -99,7 +94,10 @@ class AgentOsx extends system_1.default {
         const m = cfg.match(/<key>UserName<\/key>\s*<string>([^<]+)<\/string>/);
         return m ? m[1].trim() : '';
     }
-    async install(id, host, token, port, start, user, pass, debug) {
+    async install(id, host, token, port, start, user, 
+    // Windows only - a launchd job runs as a user without being handed their password
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    _pass) {
         try {
             // ensure service clear
             await this.uninstall();
@@ -120,7 +118,7 @@ class AgentOsx extends system_1.default {
             await this.extractBinaryArchive();
             await this.fixBinaryRights();
             logger_1.default.info(texts_1.LOG_AGENT_SYSTEM_SERVICE_CONFIG);
-            await this.saveFile(this.getServicePath(), this.getServiceConfig(id, host, token, port, user, debug));
+            await this.saveFile(this.getServicePath(), this.getServiceConfig(id, host, token, port, user));
             // Everything above was written by this root process, so the service user does not own
             // any of it yet and could not write its host key or its log. Ownership first, mode
             // second - see chownSystemDir for why that order is the one that fails safely.
@@ -150,7 +148,7 @@ class AgentOsx extends system_1.default {
             catch {
                 // do nothing
             }
-            await this.saveFile(this.getServicePath(), this.getServiceConfig(json.id, json.host, json.token, json.port, user, json.debug));
+            await this.saveFile(this.getServicePath(), this.getServiceConfig(json.id, json.host, json.token, json.port, user));
             // The directory follows the service to its new user, and back to root when the user is
             // cleared - this is what makes changing the user later work without 0777 everywhere
             await this.chownSystemDir(user);

package/distTs/src/agent/socket/client.js

@@ -55,6 +55,15 @@ class AgentSocketClient extends events_1.default {
                 version: this.version,
                 activate,
                 action: pending !== null ? pending : action,
+                // The live level, not the one the config records: DEBUG_ON is answered by this
+                // process, so what it runs at is the only answer worth reporting. Nothing reads it
+                // yet - the backend takes the fetch apart field by field and has nowhere to put
+                // this one, so the front offers both directions instead of a toggle. Sent anyway,
+                // and on every emit rather than only after a toggle: the day there is a column for
+                // it, every agent already in the field fills it in without being upgraded, and the
+                // whole row is rewritten per request so a payload that left it out would be a
+                // refresh tick clearing what a toggle had just reported.
+                debug: logger_1.default.debugOn,
                 disabled,
                 resetFirstHeard,
                 tunnels,
@@ -81,6 +90,7 @@ class AgentSocketClient extends events_1.default {
             user: this.user,
             version: this.version,
             activate,
+            debug: logger_1.default.debugOn,
             tunnels,
         });
     }

package/distTs/src/agent/system.js

@@ -18,7 +18,7 @@ class AgentSystem {
     serviceMode = false;
     // extend
     /* eslint-disable @typescript-eslint/no-unused-vars */
-    async install(_id, _host, _token, _port, _start, _user, _pass, _debug) {
+    async install(_id, _host, _token, _port, _start, _user, _pass) {
         return Promise.reject();
     }
     /* eslint-enable @typescript-eslint/no-unused-vars */
@@ -858,9 +858,21 @@ class AgentSystem {
         catch {
             output_1.default.exitError(texts_1.ERR_AGENT_NOT_INSTALLED);
         }
-        if (json.debug) {
-            logger_1.default.setDebug(true);
-        }
+        // Both ways, not only on: the config is what `agent debug` and the remote toggle write,
+        // so an agent turned back down starts back down - see the same read in `agent run` for
+        // why reading it only when true leaves an install that can never be quietened.
+        //
+        // The environment still wins upwards, unlike over there. This process is started by
+        // hand, so a DEBUG in it was typed by whoever is watching the run - where the one a
+        // service inherits is a leftover from the definition an older cli installed. Same OR
+        // the level had before this was a config at all: Logger seeds itself from DEBUG, so
+        // this only adds the config's ability to state `false`.
+        //
+        // The one place that assumption does not hold is a container started with `-e DEBUG=1`,
+        // where nothing was typed per run: there the remote toggle takes effect immediately but
+        // does not survive the container restarting, because the env is back and outranks the
+        // config again. Left that way on purpose - an image that asks for debug logs gets them.
+        logger_1.default.setDebug(!!json.debug || process.env.DEBUG === '1');
         const saved = this.saveStandaloneProcConfig();
         if (!saved) {
             output_1.default.exitError(texts_1.ERR_SWW_AGENT_ENABLING);

package/distTs/src/agent/windows.js

@@ -116,7 +116,7 @@ class AgentWindows extends system_1.default {
             throw err;
         }
     }
-    async install(id, host, token, port, start, user, pass, debug) {
+    async install(id, host, token, port, start, user, pass) {
         try {
             // ensure srv was clear
             await this.uninstall();
@@ -145,7 +145,6 @@ class AgentWindows extends system_1.default {
             await this.nssm('set bdy AppRestartDelay 0');
             await this.nssm('set bdy AppExit Default Restart');
             await this.nssm('set bdy Start SERVICE_AUTO_START');
-            await this.nssm(`set bdy AppEnvironmentExtra DEBUG=${debug ? 1 : 0}`);
             if (user && pass) {
                 await this.nssm(`set bdy ObjectName ${user} ${pass}`);
                 await this.grantAccess(user);

package/distTs/src/api/client.js

@@ -1154,9 +1154,12 @@ class ApiClient {
         const end = Date.now() + timeout * 1000;
         for (;;) {
             const { apps } = await this.getSandbox(workspace, sandboxId);
+            // A sandbox with no apps has the field omitted altogether, so an empty
+            // list means there is nothing to wait for - not a timeout.
+            const list = apps || [];
             let status = utils_1.SANDBOX_APP_STATUS.RUNNING;
-            for (let i = 0; i < apps.length; i += 1) {
-                const { app_status } = apps[i];
+            for (let i = 0; i < list.length; i += 1) {
+                const { app_status } = list[i];
                 if (app_status === utils_1.SANDBOX_APP_STATUS.FAILED) {
                     return utils_1.SANDBOX_APP_STATUS.FAILED;
                 }

package/distTs/src/command/agent/install.js

@@ -128,7 +128,7 @@ const installService = async (options) => {
     }
     await output_1.default.spinner(texts_1.TXT_ENABLING_AGENT);
     try {
-        await AgentManager.system.install(id, host, agentToken, port, !!options.start, options.user, options.pass, !!options.debug);
+        await AgentManager.system.install(id, host, agentToken, port, !!options.start, options.user, options.pass);
     }
     catch {
         await removeAllAndExit(texts_1.ERR_SWW_AGENT_ENABLING, id, host, agentToken);

package/distTs/src/command/agent/run.js

@@ -17,6 +17,22 @@ commandAgentRun.action(async (options) => {
     // the user it runs as has an `--app` install of their own
     AgentManager.system.serviceMode = true;
     logger_1.default.changeRootPath(AgentManager.system.getNewAgentConfigDir());
+    // The level comes from the agent config, which is the only place the two things that
+    // change it can write: `agent debug` and the remote DEBUG_ON action both run in a process
+    // that cannot rewrite a service definition, so a service reading DEBUG out of its own
+    // definition came back from every restart at the level it was installed with.
+    //
+    // Set unconditionally rather than only when true, so a DEBUG left behind in a definition
+    // written by an older cli is overridden by the config instead of being ored with it -
+    // otherwise an agent installed with --debug could never be turned back down.
+    try {
+        logger_1.default.setDebug(!!AgentManager.system.loadSystemConfig().debug);
+    }
+    catch {
+        // Nothing readable to take the level from - no install, or a config this process cannot
+        // read or parse. Whatever DEBUG the environment carries stands, which for a service is
+        // the one written by the cli that installed it.
+    }
     AgentManager.start(options.id, options.host, options.token, parseInt(options.port, 10));
 });
 exports.default = commandAgentRun;

package/distTs/src/command/project/get.js

@@ -0,0 +1,18 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const cfg_1 = __importDefault(require("../../tunnel/cfg"));
+const output_1 = __importDefault(require("../../output"));
+const texts_1 = require("../../texts");
+const utils_1 = require("../../utils");
+const commandProjectGet = (0, utils_1.newCommand)('get', texts_1.DESC_COMMAND_PROJECT_GET);
+commandProjectGet.action(async () => {
+    const project = cfg_1.default.getProject();
+    if (!project) {
+        output_1.default.exitError(texts_1.TXT_PROJECT_NONE);
+    }
+    output_1.default.exitNormal(project);
+});
+exports.default = commandProjectGet;

package/distTs/src/command/project/set.js

@@ -0,0 +1,31 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const cfg_1 = __importDefault(require("../../tunnel/cfg"));
+const output_1 = __importDefault(require("../../output"));
+const texts_1 = require("../../texts");
+const utils_1 = require("../../utils");
+const input_1 = __importDefault(require("../../input"));
+const commandProjectSet = (0, utils_1.newCommand)('set', texts_1.DESC_COMMAND_PROJECT_SET);
+commandProjectSet.option('-w, --workspace <domain>', texts_1.OPTION_REST_API_WORKSPACE);
+commandProjectSet.argument('[project]', texts_1.ARG_COMMAND_PROJECT_NAME);
+commandProjectSet.action(async (project, options) => {
+    output_1.default.handleSignals();
+    const workspace = input_1.default.restApiWorkspace(options.workspace);
+    const client = input_1.default.restApiTokenClient();
+    if (project) {
+        await client.getProject(workspace, project);
+    }
+    else {
+        const response = await client.getProjects(workspace);
+        project = await output_1.default.selectProject(response.projects);
+    }
+    cfg_1.default.setProject(project);
+    if (!project)
+        output_1.default.exitSuccess(texts_1.TXT_PROJECT_SET_CLEARED);
+    else
+        output_1.default.exitSuccess((0, texts_1.TXT_PROJECT_SET_SUCCESS)(project));
+});
+exports.default = commandProjectSet;

package/distTs/src/command/sandbox/app/list.js

@@ -22,11 +22,16 @@ commandSandboxAppList.action(async (identifier, options) => {
     if (!sandbox_id) {
         output_1.default.exitError(texts_1.ERR_SANDBOX_NOT_FOUND);
     }
-    const { apps } = await client.getSandbox(workspace, sandbox_id);
+    const sandbox = await client.getSandbox(workspace, sandbox_id);
+    // A sandbox with no apps has the field omitted altogether.
+    const apps = sandbox.apps || [];
     if (options.format === 'json') {
         output_1.default.json(apps);
     }
     else {
+        if (apps.length === 0) {
+            output_1.default.exitError(texts_1.ERR_SANDBOX_APPS_NOT_FOUND);
+        }
         const table = [['ID', 'COMMAND', 'STATUS']];
         for (const app of apps) {
             let command = app.command;

package/distTs/src/command/sandbox/create.js

@@ -113,8 +113,8 @@ commandSandboxCreate.action(async (options) => {
                 body.first_boot_commands += '\n';
             body.first_boot_commands += input_1.default.sandboxBootScript(options.bootScript);
         }
-        if (options.tags) {
-            body.tags = options.tags;
+        if (options.tag) {
+            body.tags = options.tag;
         }
         if (options.appCommand) {
             body.apps = options.appCommand;

package/distTs/src/command/sandbox/get/yaml.js

@@ -0,0 +1,30 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("../../../utils");
+const texts_1 = require("../../../texts");
+const input_1 = __importDefault(require("../../../input"));
+const output_1 = __importDefault(require("../../../output"));
+const commandSandboxGetYaml = (0, utils_1.newCommand)('yaml', texts_1.DESC_COMMAND_SANDBOX_GET_YAML);
+commandSandboxGetYaml.hideVersionUpdate = true;
+commandSandboxGetYaml.alias('yml');
+commandSandboxGetYaml.option('-w, --workspace <domain>', texts_1.OPTION_REST_API_WORKSPACE);
+commandSandboxGetYaml.option('-p, --project <name>', texts_1.OPTION_REST_API_PROJECT);
+commandSandboxGetYaml.argument('<identifier>', texts_1.OPTION_SANDBOX_IDENTIFIER);
+commandSandboxGetYaml.action(async (identifier, options) => {
+    const workspace = input_1.default.restApiWorkspace(options.workspace);
+    const project = input_1.default.restApiProject(options.project);
+    const client = input_1.default.restApiTokenClient();
+    let result = await client.listSandboxes(workspace, project);
+    const sandboxes = result.sandboxes || [];
+    const found = sandboxes.find((s) => s.identifier === identifier);
+    if (!found) {
+        output_1.default.exitError(texts_1.ERR_SANDBOX_NOT_FOUND);
+    }
+    const sandboxId = found.id;
+    result = await client.getSandboxYaml(workspace, sandboxId);
+    output_1.default.exitNormal(Buffer.from(result.yaml, 'base64').toString('utf8'));
+});
+exports.default = commandSandboxGetYaml;