fix: fall back to config org when --org not provided in sandbox commands

Without this, multi-org users who have set their org via `depot orgs set`
still get Unauthorized errors from sandbox exec/pty/exec-pipe because the
configured org is never read. Matches the pattern used by ci ssh and all
other org-aware commands.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: robstolarz

pkg/cmd/sandbox/exec-pipe.go

@@ -8,6 +8,7 @@ import (
 	"os"
 
 	"github.com/depot/cli/pkg/api"
+	"github.com/depot/cli/pkg/config"
 	"github.com/depot/cli/pkg/helpers"
 	civ1 "github.com/depot/cli/pkg/proto/depot/ci/v1"
 	"github.com/spf13/cobra"
@@ -40,6 +41,10 @@ func newSandboxExecPipe() *cobra.Command {
 			orgID, err := cmd.Flags().GetString("org")
 			cobra.CheckErr(err)
 
+			if orgID == "" {
+				orgID = config.GetCurrentOrganization()
+			}
+
 			sandboxID, err := cmd.Flags().GetString("sandbox-id")
 			cobra.CheckErr(err)
 

pkg/cmd/sandbox/exec.go

@@ -6,6 +6,7 @@ import (
 
 	"connectrpc.com/connect"
 	"github.com/depot/cli/pkg/api"
+	"github.com/depot/cli/pkg/config"
 	"github.com/depot/cli/pkg/helpers"
 	civ1 "github.com/depot/cli/pkg/proto/depot/ci/v1"
 	"github.com/spf13/cobra"
@@ -41,6 +42,10 @@ func newSandboxExec() *cobra.Command {
 			orgID, err := cmd.Flags().GetString("org")
 			cobra.CheckErr(err)
 
+			if orgID == "" {
+				orgID = config.GetCurrentOrganization()
+			}
+
 			sandboxID, err := cmd.Flags().GetString("sandbox-id")
 			cobra.CheckErr(err)
 

pkg/cmd/sandbox/pty.go

@@ -4,6 +4,7 @@ import (
 	"fmt"
 	"strings"
 
+	"github.com/depot/cli/pkg/config"
 	"github.com/depot/cli/pkg/helpers"
 	"github.com/depot/cli/pkg/pty"
 	"github.com/spf13/cobra"
@@ -38,6 +39,10 @@ func newSandboxPty() *cobra.Command {
 			orgID, err := cmd.Flags().GetString("org")
 			cobra.CheckErr(err)
 
+			if orgID == "" {
+				orgID = config.GetCurrentOrganization()
+			}
+
 			sandboxID, err := cmd.Flags().GetString("sandbox-id")
 			cobra.CheckErr(err)