@agentrific/server 0.5.0 → 0.5.1

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @agentrific/server
 
+## 0.5.1
+
+### Patch Changes
+
+- Add a separate sandbox push service and require explicit test mode for sandbox grants so TestFlight purchases cannot unlock production notifications.
+
 ## 0.5.0
 
 ### Minor Changes

package/cli.js

@@ -30,7 +30,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@agentrific/server",
-      version: "0.5.0",
+      version: "0.5.1",
       description: "Self-hosted control plane for long-running coding agents",
       keywords: [
         "agentrific",
@@ -973,11 +973,12 @@ function pushSigningText(installationId, operation, request) {
     request.payload
   ].join("\n");
 }
-var PUSH_API_URL, PushKindSchema, PushPreferencesSchema, PushPublicKeySchema, PushInstallationSchema, PushRegistrationSchema, PushEnrollmentSchema, PushGrantSchema, PushPullRequestUrlSchema, PushEventSchema, PushSignedRequestSchema, PushEntitlementSchema, PushServerStatusSchema;
+var PUSH_API_URL, PUSH_SANDBOX_API_URL, PushKindSchema, PushPreferencesSchema, PushPublicKeySchema, PushInstallationSchema, PushRegistrationSchema, PushEnrollmentSchema, PushGrantSchema, PushPullRequestUrlSchema, PushEventSchema, PushSignedRequestSchema, PushEntitlementSchema, PushServerStatusSchema;
 var init_push = __esm({
   "../../packages/contracts/src/push.ts"() {
     "use strict";
     PUSH_API_URL = "https://api.agentrific.com";
+    PUSH_SANDBOX_API_URL = "https://sandbox-api.agentrific.com";
     PushKindSchema = z6.enum([
       "started",
       "completed",
@@ -4512,10 +4513,11 @@ async function withSessionTaskLock(id, operation) {
   const lockId = session ? await sessionTaskLockId(store, session) : `session-${id}`;
   return withTaskLock(lockId, operation);
 }
-var host, port, defaultProjectsRoot, worktreesRoot, execFileAsync, app, dataRoot, releaseLock, effects, store, security, testPushUrl, push, allowedOrigins, attachmentEffects, attachments, attachmentCleanup, models, delivery, preparation, agentEffects, runtime, worktreeCleanup, maxWorktreeAgeDays, pruneWorktrees, worktreeCleanupTimer, updates, maintenance, stopUpdateDiscovery, HistoryQuery, StartTaskBody, automation, automationTimer, closeControl;
+var host, port, defaultProjectsRoot, worktreesRoot, execFileAsync, app, dataRoot, releaseLock, effects, store, security, sandboxPushUrl, testPushUrl, push, allowedOrigins, attachmentEffects, attachments, attachmentCleanup, models, delivery, preparation, agentEffects, runtime, worktreeCleanup, maxWorktreeAgeDays, pruneWorktrees, worktreeCleanupTimer, updates, maintenance, stopUpdateDiscovery, HistoryQuery, StartTaskBody, automation, automationTimer, closeControl;
 var init_index = __esm({
   async "src/index.ts"() {
     "use strict";
+    init_push();
     init_warnings();
     init_push2();
     init_attachments();
@@ -4571,10 +4573,19 @@ var init_index = __esm({
     effects = ManagedRuntime.make(SessionStore.layer(path11.join(dataRoot, "sessions.sqlite")));
     store = await effects.runPromise(SessionStore);
     security = new ServerSecurity(store, await Effect17.runPromise(store.serverIdentity()));
+    sandboxPushUrl = process.env.AGENTRIFIC_PUSH_SANDBOX === "1" ? PUSH_SANDBOX_API_URL : void 0;
+    if (sandboxPushUrl && process.env.AGENTRIFIC_TEST_MODE !== "1")
+      throw new Error("Sandbox push requires explicit test mode.");
     testPushUrl = process.env.AGENTRIFIC_PUSH_TEST_URL;
     if (testPushUrl && (process.env.AGENTRIFIC_TEST_MODE !== "1" || !new URL(testPushUrl).hostname.endsWith(".ts.net") || new URL(testPushUrl).protocol !== "https:"))
       throw new Error("Test relay requires explicit test mode and Tailscale HTTPS.");
-    push = new ServerPush(store, security.serverId, dataRoot, fetch, testPushUrl);
+    push = new ServerPush(
+      store,
+      security.serverId,
+      dataRoot,
+      fetch,
+      testPushUrl ?? sandboxPushUrl
+    );
     allowedOrigins = [
       .../* @__PURE__ */ new Set([
         "agentrific-desktop://app",