From 825e742eb692affd7a433b2827b6ea8f45e824d8 Mon Sep 17 00:00:00 2001
From: "Zhengxu (Joshua) Jin" <33077399+Jinzhengxu@users.noreply.github.com>
Date: Tue, 22 Sep 2026 16:34:55 +0800
Subject: [PATCH] docs(config): move the Sandbox banner above the sandbox key
 in config.example.yaml (#5652)

* docs(config): move the Sandbox banner above the sandbox key in config.example.yaml

The "Sandbox Configuration" banner and the "Option 1: Local Sandbox"
comment sat directly above the `uploads:` block, twenty lines away from
the `sandbox:` key they describe. Give `uploads:` its own banner and
move the sandbox banner down to the key it introduces. Comments only;
no key or value changes.

* Enhance sandbox configuration options

Updated sandbox configuration options to include BoxLite micro-VM.

---------

Co-authored-by: Willem Jiang <willem.jiang@gmail.com>
---
 config.example.yaml | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/config.example.yaml b/config.example.yaml
index b0ff3cfb5..2e52e6cf5 100644
--- a/config.example.yaml
+++ b/config.example.yaml
@@ -1476,12 +1476,9 @@ safety_finish_reason:
   #       error_codes: [336003, 17, 18]
 
 # ============================================================================
-# Sandbox Configuration
+# Uploads
 # ============================================================================
-# Choose between local sandbox (direct execution) or Docker-based AIO sandbox
-
-# Option 1: Local Sandbox (Default)
-# Executes commands directly on the host machine
+# Limits and conversion settings for files attached to a conversation.
 uploads:
   # Application-level upload limits enforced by the gateway and exposed to the
   # frontend before file selection.
@@ -1502,6 +1499,13 @@ uploads:
   # markitdown  — always use MarkItDown (original behaviour, no extra dependency).
   pdf_converter: auto
 
+# ============================================================================
+# Sandbox Configuration
+# ============================================================================
+# Choose between local sandbox (direct execution), Docker-based AIO sandbox, 
+# or BoxLite micro-VM sandbox
+# Option 1: Local Sandbox (Default)
+# Executes commands directly on the host machine
 sandbox:
   use: deerflow.sandbox.local:LocalSandboxProvider
   # Host bash execution is disabled by default because LocalSandboxProvider is