[kstenerud]

I do love GUIs, and use them for most of my workflow. But for Claude, I definitely prefer the CLI.

Since it's a CLI app, I can wrap it in yoloAI for the sandbox protection, and also use VS Code's tunneling feature to reach that sandboxed workdir (with permissions safely bypassed) through my GUI.

https://freeimage.host/i/screenshot-2026-05-19-at-141349.ByS...

[benjamincburns]

But can you paste an image into it?

I have a similar setup, but I access it directly via iTerm2 instead of VS Code's terminal. I've figured out the right terminal settings to get copying/pasting text to work (including with neovim's + register), but not images. Would be nice to paste images, though. Currently I have to SCP them over.

[kstenerud]

I've actually never tried it before. I just ran some tests now on a mac:

If I copy a file in Finder and paste it into a claude session, it shows in the TUI as [Image #1].

If I do the same, but paste into a claude session running over SSH, it pastes the path to the file, not the data.

If I open the image in Preview, copy the pixels (CMD-A, CMD-C), pasting that into a terminal does nothing.

So it looks like CC just puts UI sugar over top of the image path when it has file access to it? That's not really image pasting, though...

[benjamincburns]

I suspect the first case worked as intended, and VS Code is greasing the wheels. I'm sure there's a way to get it working in iTerm 2, though I wouldn't be surprised if the solution was some Goldbergian chain of forwarded unix sockets and a helper daemon living inside the sandbox.

Thanks for mentioning yoloAI, though. I started off sandboxing via devcontainers using kata & cloud hypervisor set up as a custom docker runtime. It worked well enough, but nested docker was super slow due to virtio-fs limitations. I recently moved to sysbox and it's a bit quicker. It's probably not as airtight as kata/chv, but good enough to keep Claude from writing a security test that deletes my whole filesystem [1].

1: https://github.com/anthropics/claude-code/issues/28521

[kstenerud]

Haha yup. yoloAI is to scratch my own itch. I'm getting close to taking it out of beta, but first I'm putting it through a significant architectural overhaul in a feature branch. Normally I'd balk at doing something so heavy, but AI makes it so damn easy to do major mechanical changes (provided you guide it properly and have good tests). So far, so good! And it feels nice to fix the architectural warts before I lock in the interface.