From b18e1634adf2454165d0d9aebc66e928df846c73 Mon Sep 17 00:00:00 2001 From: David Karlsson <35727626+dvdksn@users.noreply.github.com> Date: Thu, 27 Aug 2026 09:44:28 +0000 Subject: [PATCH 1/3] docs: document sandbox clipboard writes The FAQ covered opt-in image reads but not the v0.42 text-write path from local sandboxes. Document the supported command shims and distinguish writes from host clipboard reads. Co-Authored-By: Codex --- content/manuals/ai/sandboxes/faq.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/content/manuals/ai/sandboxes/faq.md b/content/manuals/ai/sandboxes/faq.md index b02ddfb783a..bbf8c45dc37 100644 --- a/content/manuals/ai/sandboxes/faq.md +++ b/content/manuals/ai/sandboxes/faq.md @@ -158,6 +158,20 @@ Keep project-specific skills and other agent configuration in the project itself. This versions the configuration alongside the code. Don't use symlinks to host paths because a sandboxed agent can't follow them outside the sandbox. +## Can a sandbox copy text to my host clipboard? + +Starting with `sbx` version 0.42.0, processes in a local sandbox can write text +to your host clipboard. Use `wl-copy`, `xclip` in input mode, `xsel`, `pbcopy`, +or `clip.exe`. For example, run this command inside a sandbox: + +```console +$ printf 'Copied from a sandbox' | wl-copy +``` + +The `clipboard.imagePaste` setting isn't required for clipboard writes. That +setting controls opt-in image reads from the host clipboard. Host clipboard +text isn't available to processes inside the sandbox. + ## Can I paste images into an agent? Yes, but it's off by default. Text paste already works, because the terminal From f20ac18e865b96a35d237c0e85f842285ea5e3f8 Mon Sep 17 00:00:00 2001 From: David Karlsson <35727626+dvdksn@users.noreply.github.com> Date: Thu, 27 Aug 2026 10:43:43 +0000 Subject: [PATCH 2/3] docs: describe clipboard writes as host integration --- content/manuals/ai/sandboxes/faq.md | 14 -------------- content/manuals/ai/sandboxes/security/isolation.md | 6 ++++++ 2 files changed, 6 insertions(+), 14 deletions(-) diff --git a/content/manuals/ai/sandboxes/faq.md b/content/manuals/ai/sandboxes/faq.md index bbf8c45dc37..b02ddfb783a 100644 --- a/content/manuals/ai/sandboxes/faq.md +++ b/content/manuals/ai/sandboxes/faq.md @@ -158,20 +158,6 @@ Keep project-specific skills and other agent configuration in the project itself. This versions the configuration alongside the code. Don't use symlinks to host paths because a sandboxed agent can't follow them outside the sandbox. -## Can a sandbox copy text to my host clipboard? - -Starting with `sbx` version 0.42.0, processes in a local sandbox can write text -to your host clipboard. Use `wl-copy`, `xclip` in input mode, `xsel`, `pbcopy`, -or `clip.exe`. For example, run this command inside a sandbox: - -```console -$ printf 'Copied from a sandbox' | wl-copy -``` - -The `clipboard.imagePaste` setting isn't required for clipboard writes. That -setting controls opt-in image reads from the host clipboard. Host clipboard -text isn't available to processes inside the sandbox. - ## Can I paste images into an agent? Yes, but it's off by default. Text paste already works, because the terminal diff --git a/content/manuals/ai/sandboxes/security/isolation.md b/content/manuals/ai/sandboxes/security/isolation.md index 8515413c6b2..b6727cadc57 100644 --- a/content/manuals/ai/sandboxes/security/isolation.md +++ b/content/manuals/ai/sandboxes/security/isolation.md @@ -31,6 +31,12 @@ processes, files, or resources outside its defined boundaries. The agent runs as a non-root user with sudo privileges inside the VM. The hypervisor boundary is the isolation control, not in-VM privilege separation. +Processes in a local sandbox can write text to your host clipboard through the +provided clipboard command shims. This integration doesn't give the sandbox +access to existing clipboard text. Host clipboard image reads are separate and +opt-in. After running untrusted code, check clipboard contents before pasting +them on the host. + ## Network isolation Each sandbox has its own isolated network. Sandboxes cannot communicate From 49bc6fb22ada3b69743ae0b7c1b556284067d3c4 Mon Sep 17 00:00:00 2001 From: Codex Date: Thu, 27 Aug 2026 11:17:04 +0000 Subject: [PATCH 3/3] docs: describe clipboard access directly --- content/manuals/ai/sandboxes/security/isolation.md | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/content/manuals/ai/sandboxes/security/isolation.md b/content/manuals/ai/sandboxes/security/isolation.md index b6727cadc57..7e93070609d 100644 --- a/content/manuals/ai/sandboxes/security/isolation.md +++ b/content/manuals/ai/sandboxes/security/isolation.md @@ -31,11 +31,10 @@ processes, files, or resources outside its defined boundaries. The agent runs as a non-root user with sudo privileges inside the VM. The hypervisor boundary is the isolation control, not in-VM privilege separation. -Processes in a local sandbox can write text to your host clipboard through the -provided clipboard command shims. This integration doesn't give the sandbox -access to existing clipboard text. Host clipboard image reads are separate and -opt-in. After running untrusted code, check clipboard contents before pasting -them on the host. +Processes in a local sandbox can write text to your host clipboard, but can't +read existing clipboard text. Host clipboard image reads are a separate, +opt-in feature. After running untrusted code, check clipboard contents before +pasting them on the host. ## Network isolation