feat(cli): add --output json/yaml to sandbox get, status, and sandbox create

Add structured output support to three commands that previously only
supported human-readable table output:

- `sandbox get --output json/yaml`: emits sandbox detail including
  policy source, revision, and active policy content via a new
  `sandbox_detail_to_json` converter.

- `status --output json/yaml`: emits gateway connection state via a new
  `status_to_json` converter with conditional fields (auth, version,
  error, http_status) matching the human output.

- `sandbox create --output json/yaml`: emits sandbox metadata after the
  sandbox reaches Ready phase, suppressing spinners and ANSI chrome
  from stdout. Uploads and port forwarding still execute before output.
  Clap rejects `--output` combined with `--editor` or trailing commands.

All three commands reuse the existing `OutputFormat` enum and
`print_output_single` helper. Default output (no --output flag) is
byte-identical to current behavior. Unit tests cover both converters.

Closes #1964

Assisted-By: 🤖 Claude Code
Signed-off-by: Roland Huß <rhuss@redhat.com>

Author: rhuss

crates/openshell-cli/src/main.rs

@@ -533,7 +533,11 @@ enum Commands {
 
     /// Show gateway status and information.
     #[command(help_template = LEAF_HELP_TEMPLATE, next_help_heading = "FLAGS")]
-    Status,
+    Status {
+        /// Output format.
+        #[arg(short = 'o', long = "output", value_enum, default_value_t = OutputFormat::Table)]
+        output: OutputFormat,
+    },
 
     /// Manage inference configuration.
     #[command(after_help = INFERENCE_EXAMPLES, help_template = SUBCOMMAND_HELP_TEMPLATE)]
@@ -1336,6 +1340,10 @@ enum SandboxCommands {
         #[arg(long, value_parser = ["manual", "auto"], default_value = "manual")]
         approval_mode: String,
 
+        /// Output format.
+        #[arg(short = 'o', long = "output", value_enum, default_value_t = OutputFormat::Table, conflicts_with_all = ["editor", "command"])]
+        output: OutputFormat,
+
         /// Command to run after "--" (defaults to an interactive shell).
         #[arg(last = true, allow_hyphen_values = true)]
         command: Vec<String>,
@@ -1349,8 +1357,12 @@ enum SandboxCommands {
         name: Option<String>,
 
         /// Print only the active policy YAML (same policy as the default view; stdout only).
-        #[arg(long)]
+        #[arg(long, conflicts_with = "output")]
         policy_only: bool,
+
+        /// Output format.
+        #[arg(short = 'o', long = "output", value_enum, default_value_t = OutputFormat::Table)]
+        output: OutputFormat,
     },
 
     /// List sandboxes.
@@ -2079,11 +2091,17 @@ async fn main() -> Result<()> {
         // -----------------------------------------------------------
         // Top-level status
         // -----------------------------------------------------------
-        Some(Commands::Status) => {
+        Some(Commands::Status { output }) => {
             if let Ok(ctx) = resolve_gateway(&cli.gateway, &cli.gateway_endpoint) {
                 let mut tls = tls.with_gateway_name(&ctx.name);
                 apply_auth(&mut tls, &ctx.name);
-                run::gateway_status(&ctx.name, &ctx.endpoint, &tls).await?;
+                run::gateway_status(&ctx.name, &ctx.endpoint, output.as_str(), &tls).await?;
+            } else if openshell_cli::output::print_output_single(
+                output.as_str(),
+                &(),
+                |()| serde_json::json!({"status": "not_configured"}),
+            )? {
+                // Structured output handled.
             } else {
                 println!("{}", "Gateway Status".cyan().bold());
                 println!();
@@ -2612,6 +2630,7 @@ async fn main() -> Result<()> {
                     labels,
                     envs,
                     approval_mode,
+                    output,
                     command,
                 } => {
                     // Resolve --tty / --no-tty into an Option<bool> override.
@@ -2697,6 +2716,7 @@ async fn main() -> Result<()> {
                         &labels_map,
                         &env_map,
                         &approval_mode,
+                        output.as_str(),
                         &tls,
                     ))
                     .await?;
@@ -2769,9 +2789,14 @@ async fn main() -> Result<()> {
                         | SandboxCommands::Download { .. } => {
                             unreachable!()
                         }
-                        SandboxCommands::Get { name, policy_only } => {
+                        SandboxCommands::Get {
+                            name,
+                            policy_only,
+                            output,
+                        } => {
                             let name = resolve_sandbox_name(name, &ctx.name)?;
-                            run::sandbox_get(endpoint, &name, policy_only, &tls).await?;
+                            run::sandbox_get(endpoint, &name, policy_only, output.as_str(), &tls)
+                                .await?;
                         }
                         SandboxCommands::List {
                             limit,
@@ -3455,7 +3480,7 @@ mod tests {
             .expect("global gateway flag should parse with subcommands");
 
         assert_eq!(cli.gateway.as_deref(), Some("demo"));
-        assert!(matches!(cli.command, Some(Commands::Status)));
+        assert!(matches!(cli.command, Some(Commands::Status { .. })));
     }
 
     #[test]