Highlights
This release introduces sbx diagnose, a new command for gathering and uploading diagnostic information when troubleshooting sandbox issues. Factory.ai joins the roster of supported agents with a dedicated template. Agents that use OAuth flows now benefit from an xdg-open shim and localhost OAuth callback, enabling browser-based auth redirects to work seamlessly inside sandboxes. Template management is expanded with sbx template save, load, ls, and rm commands, plus a warning when loading a template built for a different agent. The daemon now supports log rotation and improved logging in foreground and debug modes.
On the networking front, Claude's download domains (downloads.claude.ai, claude.com) are now on the default proxy allow list, and domain-allow rules now correctly override implicit CIDR denies for IP literals.
What's New
CLI
- Warn when a template was built for a different agent (#2241)
Daemon
- Add log rotation for daemon logs (#2307)
- Fix daemon logging in foreground and debug modes (#2328)
Templates
- Add
sbx template save,load,ls, andrmcommands (#2317)
Networking
- Add
downloads.claude.aiandclaude.comto Claude's proxy allow list (#2336) - Domain-allow rules now override implicit CIDR deny for IP address literals (#2329)
- Add
**.hashicorp.comto the default allow list (#2291)
Diagnose
- Add
sbx diagnosecommand for collecting and uploading diagnostic data (#2332)
Agents
- Add support for Factory.ai (#2249)
- Add xdg-open shim and localhost callback to support OAuth redirects inside sandboxes (#2260)
Bug Fixes
- Fix stopped sandbox disappearing from list when a prefix-named sandbox is running (#2313)
- Fix new session being killed by an in-progress auto-stop (#2278)
- Fix exec "command not found" detection from stdout and stderr (#2300)
- Fix Ghostty launch on macOS to use file-based launch (#2296)
- Detect terminal background color instead of system appearance (#2299)
- Improve accuracy and detail of policy denial log messages (#2281)