Update from code changes: macOS sandbox clipboard sharing

smolvm/cli/create.mdx

@@ -1,6 +1,6 @@
 ---
 title: "smolvm sandbox create"
 description: "Use smolvm sandbox create to start a new sandbox from the command line, name it, choose an operating system or image, share folders, and get JSON output for scripts."
 ---
 
 `smolvm sandbox create` starts a new sandbox and leaves it running. Give it a name when you want to use the same sandbox in later commands, or let SmolVM generate one for you.
@@ -53,6 +53,10 @@
   Allow writes to every shared folder from this command.
 </ParamField>
 
+<ParamField path="--clipboard / --no-clipboard" type="flag" default="--clipboard">
+  Share the clipboard between your Mac and a macOS sandbox desktop. On by default for macOS guests. Use `--no-clipboard` to keep the two clipboards separate. The choice is saved with the sandbox and applies across stop and start. See [Copy and paste between your Mac and the sandbox](/smolvm/guides/macos-sandboxes#copy-and-paste-between-your-mac-and-the-sandbox).
+</ParamField>
+
 <ParamField path="--yes" type="flag">
   Approve the one-time macOS image download and preparation without an interactive prompt.
 </ParamField>
@@ -97,7 +101,7 @@
 
 By default, shared folders are read-only. Add `--writable-mounts` only when the sandbox should edit host files directly.
 
 ### Use QEMU microvm explicitly
 
 ```bash
 smolvm sandbox create \

smolvm/guides/macos-sandboxes.mdx

@@ -124,32 +124,20 @@
   </Step>
 </Steps>
 
-## Copy text from your Mac
+## Copy and paste between your Mac and the sandbox
 
-Until clipboard sharing is available, use a temporary browser note to move text from your Mac into the sandbox.
+Copy and paste works in both directions between your Mac and a macOS sandbox out of the box. Copy on one side, paste on the other — no extra setup.
 
-<Steps>
-  <Step title="Choose a unique note address">
-    Add a unique, hard-to-guess phrase to `https://notepad.pw/`. For example, a phrase such as `maple-comet-7429` produces this address:
-
-    ```text
-    https://notepad.pw/maple-comet-7429
-    ```
-
-    Use your own random phrase instead of the example above.
-  </Step>
+If you would rather keep the two clipboards separate, turn clipboard sync off when you create the sandbox:
 
-  <Step title="Paste the text on your Mac">
-    Open your note address in a browser on your Mac, then paste the text you want to transfer.
-  </Step>
+```bash
+smolvm sandbox create --os macos --name private-mac --no-clipboard
+```
 
-  <Step title="Copy the text in the sandbox">
-    Open Safari in the macOS sandbox and visit the same note address. Copy the text into an app inside the sandbox, then clear the note when you finish.
-  </Step>
-</Steps>
+The choice is saved with the sandbox, so stopping and starting it later keeps the same setting.
 
 <Warning>
-  Anyone who knows the note address may be able to read its contents. Use this workaround only for non-sensitive text. Keep passwords, API keys, personal information, and other secrets out of the note.
+  With clipboard sync on, text you copy on your Mac is readable from inside the running sandbox, including passwords, API keys, and other secrets. Use `--no-clipboard` for sandboxes where you do not want the guest to see host clipboard contents.
 </Warning>
 
 ## Share a local folder
@@ -239,11 +227,11 @@
 
 The Screen Sharing connection listens on `127.0.0.1`, an address that only your Mac can reach. Screen Sharing uses <Tooltip tip="Virtual Network Computing, a standard way to view and control another computer's screen">VNC</Tooltip>. SmolVM stores the generated connection password in the sandbox's private files and keeps it out of commands, logs, and API responses.
 
 ### Lume
 
 SmolVM uses [Lume](https://github.com/trycua/cua/tree/main/libs/lume) behind the scenes to prepare and run the macOS desktop. Lume is an open-source project that works with Apple's built-in system for running virtual Macs.
 
 `smolvm setup --macos` installs the tested Lume version for you, and SmolVM handles it through the commands in this guide. The `lume` login name comes from the desktop account that Lume creates during automatic setup.
 
 ## Preview limits