A clipboard bridge for Docker Sandboxes : it lets a coding agent running inside a sandbox paste host screenshots with Ctrl+V and copy text to the host clipboard.

Some agents read clipboard images through a native Wayland library ( wl-clipboard-rs / arboard ) rather than the terminal. Those reads don't cross the sandbox boundary on their own. This bridge listens on the sandbox's Wayland socket, speaks just enough of the wlr-data-control protocol to answer a paste, and fetches the image from the host over the sandbox proxy's clipboard endpoint. Image reads remain subject to the host's clipboard.imagePaste setting.

Native text copies, including Codex /copy and transcript selections, use the proxy's clipboard-write endpoint. When a client offers both HTML and plain text, the bridge copies the plain text. Text reads and image writes are not supported. Copy transfers have a five-second deadline and a 1 MiB limit on both the raw text and encoded request body.…