Connecting to sbx sandboxes

SSH access is experimental as of 0.37.0. It gives any SSH-capable tool a target — <name>.sbx — that behaves like a normal remote host, without a sbx exec shim or copy step in between. No SSH server actually runs inside the sandbox: the connection terminates at the local sbx daemon, which relays the stream into the container. That's why there's no key to manage and no port to open.

This is a distinct SSH mechanism from the one in running-sbx-sandboxes for forwarding your host SSH agent into a sandbox for commit signing. That one carries a signing key out to the sandbox for git to use. This one carries a remote-development client's UI session in. Same protocol, opposite purpose — don't let the shared vocabulary conflate them.

Enable it once