sbx: v0.38 release

data/sbx_cli/sbx.yaml

@@ -25,13 +25,15 @@ see_also:
     - sbx login - Sign in to Docker
     - sbx logout - Stop all running sandboxes and sign out of Docker
     - sbx ls - List sandboxes
+    - sbx mcp - Manage MCP servers
     - sbx policy - Manage sandbox policies
     - sbx ports - Manage sandbox port publishing
     - sbx reset - Reset all sandboxes and clean up state
     - sbx rm - Remove one or more sandboxes
     - sbx run - Run an agent in a sandbox
     - sbx secret - Manage stored secrets
     - sbx setup - (Experimental) Detect host configuration and prepare Docker Sandboxes
+    - sbx skills - (Experimental) Manage skills shared across sandboxes
     - sbx stop - Stop one or more sandboxes without removing them
     - sbx template - Manage sandbox templates
     - sbx tui - Open the interactive TUI dashboard

data/sbx_cli/sbx_create.yaml

@@ -14,6 +14,10 @@ options:
       default_value: "0"
       usage: |
         Number of CPUs to allocate to the sandbox (0 = auto: all host CPUs)
+    - name: deny-network
+      default_value: '[]'
+      usage: |
+        Add a per-sandbox network deny rule at creation time. Can be specified multiple times. The rule applies only to the new sandbox and can be listed or removed later with `sbx policy ls <NAME>` / `sbx policy rm network --sandbox <NAME> --resource <HOST>`. Safe under centralized governance because a local deny can only narrow, never widen, egress.
     - name: help
       shorthand: h
       default_value: "false"
@@ -30,6 +34,11 @@ options:
     - name: name
       usage: |
         Name for the sandbox (default: <agent>-<workdir>, letters, numbers, hyphens, periods, plus signs and minus signs only)
+    - name: publish
+      shorthand: p
+      default_value: '[]'
+      usage: |
+        Publish a sandbox port to the host (can be repeated): [[HOST_IP:]HOST_PORT:]SANDBOX_PORT[/PROTOCOL]
     - name: quiet
       shorthand: q
       default_value: "false"

data/sbx_cli/sbx_create_claude.yaml

@@ -27,6 +27,10 @@ inherited_options:
       shorthand: D
       default_value: "false"
       usage: Enable debug logging
+    - name: deny-network
+      default_value: '[]'
+      usage: |
+        Add a per-sandbox network deny rule at creation time. Can be specified multiple times. The rule applies only to the new sandbox and can be listed or removed later with `sbx policy ls <NAME>` / `sbx policy rm network --sandbox <NAME> --resource <HOST>`. Safe under centralized governance because a local deny can only narrow, never widen, egress.
     - name: kit
       default_value: '[]'
       experimental: true
@@ -39,6 +43,11 @@ inherited_options:
     - name: name
       usage: |
         Name for the sandbox (default: <agent>-<workdir>, letters, numbers, hyphens, periods, plus signs and minus signs only)
+    - name: publish
+      shorthand: p
+      default_value: '[]'
+      usage: |
+        Publish a sandbox port to the host (can be repeated): [[HOST_IP:]HOST_PORT:]SANDBOX_PORT[/PROTOCOL]
     - name: quiet
       shorthand: q
       default_value: "false"

data/sbx_cli/sbx_create_codex.yaml

@@ -27,6 +27,10 @@ inherited_options:
       shorthand: D
       default_value: "false"
       usage: Enable debug logging
+    - name: deny-network
+      default_value: '[]'
+      usage: |
+        Add a per-sandbox network deny rule at creation time. Can be specified multiple times. The rule applies only to the new sandbox and can be listed or removed later with `sbx policy ls <NAME>` / `sbx policy rm network --sandbox <NAME> --resource <HOST>`. Safe under centralized governance because a local deny can only narrow, never widen, egress.
     - name: kit
       default_value: '[]'
       experimental: true
@@ -39,6 +43,11 @@ inherited_options:
     - name: name
       usage: |
         Name for the sandbox (default: <agent>-<workdir>, letters, numbers, hyphens, periods, plus signs and minus signs only)
+    - name: publish
+      shorthand: p
+      default_value: '[]'
+      usage: |
+        Publish a sandbox port to the host (can be repeated): [[HOST_IP:]HOST_PORT:]SANDBOX_PORT[/PROTOCOL]
     - name: quiet
       shorthand: q
       default_value: "false"

data/sbx_cli/sbx_create_copilot.yaml

@@ -27,6 +27,10 @@ inherited_options:
       shorthand: D
       default_value: "false"
       usage: Enable debug logging
+    - name: deny-network
+      default_value: '[]'
+      usage: |
+        Add a per-sandbox network deny rule at creation time. Can be specified multiple times. The rule applies only to the new sandbox and can be listed or removed later with `sbx policy ls <NAME>` / `sbx policy rm network --sandbox <NAME> --resource <HOST>`. Safe under centralized governance because a local deny can only narrow, never widen, egress.
     - name: kit
       default_value: '[]'
       experimental: true
@@ -39,6 +43,11 @@ inherited_options:
     - name: name
       usage: |
         Name for the sandbox (default: <agent>-<workdir>, letters, numbers, hyphens, periods, plus signs and minus signs only)
+    - name: publish
+      shorthand: p
+      default_value: '[]'
+      usage: |
+        Publish a sandbox port to the host (can be repeated): [[HOST_IP:]HOST_PORT:]SANDBOX_PORT[/PROTOCOL]
     - name: quiet
       shorthand: q
       default_value: "false"

data/sbx_cli/sbx_create_cursor.yaml

@@ -27,6 +27,10 @@ inherited_options:
       shorthand: D
       default_value: "false"
       usage: Enable debug logging
+    - name: deny-network
+      default_value: '[]'
+      usage: |
+        Add a per-sandbox network deny rule at creation time. Can be specified multiple times. The rule applies only to the new sandbox and can be listed or removed later with `sbx policy ls <NAME>` / `sbx policy rm network --sandbox <NAME> --resource <HOST>`. Safe under centralized governance because a local deny can only narrow, never widen, egress.
     - name: kit
       default_value: '[]'
       experimental: true
@@ -39,6 +43,11 @@ inherited_options:
     - name: name
       usage: |
         Name for the sandbox (default: <agent>-<workdir>, letters, numbers, hyphens, periods, plus signs and minus signs only)
+    - name: publish
+      shorthand: p
+      default_value: '[]'
+      usage: |
+        Publish a sandbox port to the host (can be repeated): [[HOST_IP:]HOST_PORT:]SANDBOX_PORT[/PROTOCOL]
     - name: quiet
       shorthand: q
       default_value: "false"

data/sbx_cli/sbx_create_docker-agent.yaml

@@ -27,6 +27,10 @@ inherited_options:
       shorthand: D
       default_value: "false"
       usage: Enable debug logging
+    - name: deny-network
+      default_value: '[]'
+      usage: |
+        Add a per-sandbox network deny rule at creation time. Can be specified multiple times. The rule applies only to the new sandbox and can be listed or removed later with `sbx policy ls <NAME>` / `sbx policy rm network --sandbox <NAME> --resource <HOST>`. Safe under centralized governance because a local deny can only narrow, never widen, egress.
     - name: kit
       default_value: '[]'
       experimental: true
@@ -39,6 +43,11 @@ inherited_options:
     - name: name
       usage: |
         Name for the sandbox (default: <agent>-<workdir>, letters, numbers, hyphens, periods, plus signs and minus signs only)
+    - name: publish
+      shorthand: p
+      default_value: '[]'
+      usage: |
+        Publish a sandbox port to the host (can be repeated): [[HOST_IP:]HOST_PORT:]SANDBOX_PORT[/PROTOCOL]
     - name: quiet
       shorthand: q
       default_value: "false"

data/sbx_cli/sbx_create_droid.yaml

@@ -27,6 +27,10 @@ inherited_options:
       shorthand: D
       default_value: "false"
       usage: Enable debug logging
+    - name: deny-network
+      default_value: '[]'
+      usage: |
+        Add a per-sandbox network deny rule at creation time. Can be specified multiple times. The rule applies only to the new sandbox and can be listed or removed later with `sbx policy ls <NAME>` / `sbx policy rm network --sandbox <NAME> --resource <HOST>`. Safe under centralized governance because a local deny can only narrow, never widen, egress.
     - name: kit
       default_value: '[]'
       experimental: true
@@ -39,6 +43,11 @@ inherited_options:
     - name: name
       usage: |
         Name for the sandbox (default: <agent>-<workdir>, letters, numbers, hyphens, periods, plus signs and minus signs only)
+    - name: publish
+      shorthand: p
+      default_value: '[]'
+      usage: |
+        Publish a sandbox port to the host (can be repeated): [[HOST_IP:]HOST_PORT:]SANDBOX_PORT[/PROTOCOL]
     - name: quiet
       shorthand: q
       default_value: "false"

data/sbx_cli/sbx_create_gemini.yaml

@@ -27,6 +27,10 @@ inherited_options:
       shorthand: D
       default_value: "false"
       usage: Enable debug logging
+    - name: deny-network
+      default_value: '[]'
+      usage: |
+        Add a per-sandbox network deny rule at creation time. Can be specified multiple times. The rule applies only to the new sandbox and can be listed or removed later with `sbx policy ls <NAME>` / `sbx policy rm network --sandbox <NAME> --resource <HOST>`. Safe under centralized governance because a local deny can only narrow, never widen, egress.
     - name: kit
       default_value: '[]'
       experimental: true
@@ -39,6 +43,11 @@ inherited_options:
     - name: name
       usage: |
         Name for the sandbox (default: <agent>-<workdir>, letters, numbers, hyphens, periods, plus signs and minus signs only)
+    - name: publish
+      shorthand: p
+      default_value: '[]'
+      usage: |
+        Publish a sandbox port to the host (can be repeated): [[HOST_IP:]HOST_PORT:]SANDBOX_PORT[/PROTOCOL]
     - name: quiet
       shorthand: q
       default_value: "false"

data/sbx_cli/sbx_create_kiro.yaml

@@ -27,6 +27,10 @@ inherited_options:
       shorthand: D
       default_value: "false"
       usage: Enable debug logging
+    - name: deny-network
+      default_value: '[]'
+      usage: |
+        Add a per-sandbox network deny rule at creation time. Can be specified multiple times. The rule applies only to the new sandbox and can be listed or removed later with `sbx policy ls <NAME>` / `sbx policy rm network --sandbox <NAME> --resource <HOST>`. Safe under centralized governance because a local deny can only narrow, never widen, egress.
     - name: kit
       default_value: '[]'
       experimental: true
@@ -39,6 +43,11 @@ inherited_options:
     - name: name
       usage: |
         Name for the sandbox (default: <agent>-<workdir>, letters, numbers, hyphens, periods, plus signs and minus signs only)
+    - name: publish
+      shorthand: p
+      default_value: '[]'
+      usage: |
+        Publish a sandbox port to the host (can be repeated): [[HOST_IP:]HOST_PORT:]SANDBOX_PORT[/PROTOCOL]
     - name: quiet
       shorthand: q
       default_value: "false"

data/sbx_cli/sbx_create_opencode.yaml

@@ -27,6 +27,10 @@ inherited_options:
       shorthand: D
       default_value: "false"
       usage: Enable debug logging
+    - name: deny-network
+      default_value: '[]'
+      usage: |
+        Add a per-sandbox network deny rule at creation time. Can be specified multiple times. The rule applies only to the new sandbox and can be listed or removed later with `sbx policy ls <NAME>` / `sbx policy rm network --sandbox <NAME> --resource <HOST>`. Safe under centralized governance because a local deny can only narrow, never widen, egress.
     - name: kit
       default_value: '[]'
       experimental: true
@@ -39,6 +43,11 @@ inherited_options:
     - name: name
       usage: |
         Name for the sandbox (default: <agent>-<workdir>, letters, numbers, hyphens, periods, plus signs and minus signs only)
+    - name: publish
+      shorthand: p
+      default_value: '[]'
+      usage: |
+        Publish a sandbox port to the host (can be repeated): [[HOST_IP:]HOST_PORT:]SANDBOX_PORT[/PROTOCOL]
     - name: quiet
       shorthand: q
       default_value: "false"

data/sbx_cli/sbx_create_shell.yaml

@@ -27,6 +27,10 @@ inherited_options:
       shorthand: D
       default_value: "false"
       usage: Enable debug logging
+    - name: deny-network
+      default_value: '[]'
+      usage: |
+        Add a per-sandbox network deny rule at creation time. Can be specified multiple times. The rule applies only to the new sandbox and can be listed or removed later with `sbx policy ls <NAME>` / `sbx policy rm network --sandbox <NAME> --resource <HOST>`. Safe under centralized governance because a local deny can only narrow, never widen, egress.
     - name: kit
       default_value: '[]'
       experimental: true
@@ -39,6 +43,11 @@ inherited_options:
     - name: name
       usage: |
         Name for the sandbox (default: <agent>-<workdir>, letters, numbers, hyphens, periods, plus signs and minus signs only)
+    - name: publish
+      shorthand: p
+      default_value: '[]'
+      usage: |
+        Publish a sandbox port to the host (can be repeated): [[HOST_IP:]HOST_PORT:]SANDBOX_PORT[/PROTOCOL]
     - name: quiet
       shorthand: q
       default_value: "false"

data/sbx_cli/sbx_daemon.yaml

@@ -13,6 +13,7 @@ inherited_options:
 see_also:
     - sbx - Manage AI coding agent sandboxes.
     - sbx daemon log-level - Inspect or change sandboxd's per-category log levels
+    - sbx daemon restart - Restart the sandboxd daemon
     - sbx daemon start - Start the sandboxd daemon
     - sbx daemon status - Check sandboxd daemon status
     - sbx daemon stop - Stop the sandboxd daemon

data/sbx_cli/sbx_daemon_restart.yaml

@@ -0,0 +1,15 @@
+name: sbx daemon restart
+synopsis: Restart the sandboxd daemon
+usage: sbx daemon restart [flags]
+options:
+    - name: help
+      shorthand: h
+      default_value: "false"
+      usage: help for restart
+inherited_options:
+    - name: debug
+      shorthand: D
+      default_value: "false"
+      usage: Enable debug logging
+see_also:
+    - sbx daemon - Manage sandboxd daemon

data/sbx_cli/sbx_mcp.yaml

@@ -0,0 +1,22 @@
+name: sbx mcp
+synopsis: Manage MCP servers
+description: |
+    Register and manage MCP servers for use with sandbox sessions.
+options:
+    - name: help
+      shorthand: h
+      default_value: "false"
+      usage: help for mcp
+inherited_options:
+    - name: debug
+      shorthand: D
+      default_value: "false"
+      usage: Enable debug logging
+see_also:
+    - sbx - Manage AI coding agent sandboxes.
+    - sbx mcp add - Register an MCP server
+    - sbx mcp auth - Authorize MCP servers
+    - sbx mcp inspect - Show MCP server details
+    - sbx mcp load - Load an already-registered MCP server into a running sandbox
+    - sbx mcp ls - List registered MCP servers
+    - sbx mcp rm - Remove a registered MCP server