@kortix/sandbox 0.4.1 → 0.4.3

package/config/customize.sh

@@ -14,130 +14,117 @@ if [ -f "$MARKER" ]; then
     exit 0
 fi
 
-echo "[heyagi] Applying desktop customization..."
-mkdir -p "$CONFIG_DIR/.config/autostart"
-mkdir -p "$CONFIG_DIR/.local/share/konsole"
+echo "[heyagi] Applying XFCE desktop customization (Alpine)..."
 
 # ── Symlink presentations into Desktop for easy access ─────────────────────
 mkdir -p "$CONFIG_DIR/presentations"
-# Create a Desktop directory for KDE and symlink presentations into it
 mkdir -p "$CONFIG_DIR/Desktop"
 ln -sfn "$CONFIG_DIR/presentations" "$CONFIG_DIR/Desktop/presentations"
 
-# ── KDE Global: Breeze Dark ────────────────────────────────────────────────
-cat > "$CONFIG_DIR/.config/kdeglobals" << 'EOF'
-[General]
-ColorScheme=BreezeDark
-Name=Breeze Dark
-widgetStyle=Breeze
-
-[Icons]
-Theme=breeze-dark
-
-[KDE]
-LookAndFeelPackage=org.kde.breezedark.desktop
-widgetStyle=breeze
+# ── XFCE: Wallpaper ───────────────────────────────────────────────────────
+mkdir -p "$CONFIG_DIR/.config/xfce4/xfconf/xfce-perchannel-xml"
+cat > "$CONFIG_DIR/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-desktop.xml" << 'EOF'
+<?xml version="1.0" encoding="UTF-8"?>
+<channel name="xfce4-desktop" version="1.0">
+  <property name="backdrop" type="empty">
+    <property name="screen0" type="empty">
+      <property name="monitorVNC-0" type="empty">
+        <property name="workspace0" type="empty">
+          <property name="last-image" type="string" value="/usr/share/wallpapers/heyagi/wallpaper.png"/>
+          <property name="image-style" type="int" value="5"/>
+          <property name="color-style" type="int" value="0"/>
+          <property name="rgba1" type="array">
+            <value type="double" value="0.10196"/>
+            <value type="double" value="0.10588"/>
+            <value type="double" value="0.14902"/>
+            <value type="double" value="1.0"/>
+          </property>
+        </property>
+      </property>
+      <property name="monitorscreen" type="empty">
+        <property name="workspace0" type="empty">
+          <property name="last-image" type="string" value="/usr/share/wallpapers/heyagi/wallpaper.png"/>
+          <property name="image-style" type="int" value="5"/>
+          <property name="color-style" type="int" value="0"/>
+          <property name="rgba1" type="array">
+            <value type="double" value="0.10196"/>
+            <value type="double" value="0.10588"/>
+            <value type="double" value="0.14902"/>
+            <value type="double" value="1.0"/>
+          </property>
+        </property>
+      </property>
+    </property>
+  </property>
+</channel>
 EOF
 
-# ── KWin ────────────────────────────────────────────────────────────────────
-cat > "$CONFIG_DIR/.config/kwinrc" << 'EOF'
-[org.kde.kdecoration2]
-theme=Breeze
-library=org.kde.breeze
-
-[Windows]
-Placement=Centered
-
-[Desktops]
-Number=1
-Rows=1
+# ── XFCE: Dark theme (adw-gtk3-dark — Alpine's equivalent of Adwaita-dark)
+cat > "$CONFIG_DIR/.config/xfce4/xfconf/xfce-perchannel-xml/xsettings.xml" << 'EOF'
+<?xml version="1.0" encoding="UTF-8"?>
+<channel name="xsettings" version="1.0">
+  <property name="Net" type="empty">
+    <property name="ThemeName" type="string" value="adw-gtk3-dark"/>
+    <property name="IconThemeName" type="string" value="Adwaita"/>
+    <property name="CursorThemeName" type="string" value="Breeze_Light"/>
+  </property>
+  <property name="Gtk" type="empty">
+    <property name="FontName" type="string" value="Sans 10"/>
+    <property name="CursorThemeSize" type="int" value="24"/>
+  </property>
+</channel>
 EOF
 
-# ── Plasma theme ────────────────────────────────────────────────────────────
-cat > "$CONFIG_DIR/.config/plasmarc" << 'EOF'
-[Theme]
-name=breeze-dark
+# ── XFCE: Window Manager dark theme (Daloa — only xfwm4 theme on Alpine)
+cat > "$CONFIG_DIR/.config/xfce4/xfconf/xfce-perchannel-xml/xfwm4.xml" << 'EOF'
+<?xml version="1.0" encoding="UTF-8"?>
+<channel name="xfwm4" version="1.0">
+  <property name="general" type="empty">
+    <property name="theme" type="string" value="Daloa"/>
+    <property name="title_font" type="string" value="Sans Bold 9"/>
+    <property name="placement_ratio" type="int" value="50"/>
+    <property name="cycle_tabwin_mode" type="int" value="0"/>
+  </property>
+</channel>
 EOF
 
-# ── Konsole dark profile ───────────────────────────────────────────────────
-cat > "$CONFIG_DIR/.local/share/konsole/HeyAGI.profile" << 'EOF'
-[Appearance]
-ColorScheme=Breeze
-Font=Monospace,11,-1,5,50,0,0,0,0,0
-
-[General]
-Name=HeyAGI
-Parent=FALLBACK/
-
-[Scrolling]
-HistoryMode=2
+# ── XFCE: Terminal dark profile ──────────────────────────────────────────
+mkdir -p "$CONFIG_DIR/.config/xfce4/terminal"
+cat > "$CONFIG_DIR/.config/xfce4/terminal/terminalrc" << 'EOF'
+[Configuration]
+BackgroundMode=TERMINAL_BACKGROUND_TRANSPARENT
+BackgroundDarkness=0.90
+ColorForeground=#c0caf5
+ColorBackground=#1a1b26
+ColorCursor=#c0caf5
+ColorPalette=#15161e;#f7768e;#9ece6a;#e0af68;#7aa2f7;#bb9af7;#7dcfff;#a9b1d6;#414868;#f7768e;#9ece6a;#e0af68;#7aa2f7;#bb9af7;#7dcfff;#c0caf5
+FontName=Monospace 11
+MiscAlwaysShowTabs=FALSE
+MiscBordersDefault=TRUE
+MiscShowUnsafePasteDialog=FALSE
+ScrollingUnlimited=TRUE
 EOF
 
-cat > "$CONFIG_DIR/.config/konsolerc" << 'EOF'
-[Desktop Entry]
-DefaultProfile=HeyAGI.profile
-
-[MainWindow]
-MenuBar=Disabled
-ToolBarsMovable=Disabled
+# ── GTK dark theme (fallback for GTK2 apps) ───────────────────────────────
+cat > "$CONFIG_DIR/.gtkrc-2.0" << 'EOF'
+gtk-theme-name="adw-gtk3-dark"
+gtk-icon-theme-name="Adwaita"
+gtk-font-name="Sans 10"
+gtk-cursor-theme-name="Breeze_Light"
 EOF
 
-# ── Autostart: apply wallpaper + launcher icon after KDE session loads ──────
-cat > "$CONFIG_DIR/.config/autostart/heyagi-desktop.desktop" << 'EOF'
-[Desktop Entry]
-Type=Application
-Name=HeyAGI Desktop Setup
-Exec=/usr/share/wallpapers/heyagi/apply-desktop.sh
-X-KDE-autostart-phase=2
+mkdir -p "$CONFIG_DIR/.config/gtk-3.0"
+cat > "$CONFIG_DIR/.config/gtk-3.0/settings.ini" << 'EOF'
+[Settings]
+gtk-theme-name=adw-gtk3-dark
+gtk-icon-theme-name=Adwaita
+gtk-font-name=Sans 10
+gtk-application-prefer-dark-theme=true
+gtk-cursor-theme-name=Breeze_Light
 EOF
 
-cat > /usr/share/wallpapers/heyagi/apply-desktop.sh << 'SCRIPT'
-#!/bin/bash
-sleep 5
-
-plasma-apply-wallpaperimage /usr/share/wallpapers/heyagi/wallpaper.png
-
-PLASMA_RC="$HOME/.config/plasma-org.kde.plasma.desktop-appletsrc"
-ICON_PATH="/usr/share/icons/heyagi/kortix-symbol-white.svg"
-
-if [ -f "$PLASMA_RC" ]; then
-    # Find the kickoff applet's [Configuration][General] section and inject icon
-    # Get the containment/applet IDs for kickoff
-    KICKOFF_SECTION=$(grep -B3 "plugin=org.kde.plasma.kickoff" "$PLASMA_RC" | grep "^\[Containments\]" | tail -1)
-    
-    if [ -n "$KICKOFF_SECTION" ]; then
-        # Build the [Configuration][General] section name
-        GENERAL_SECTION="${KICKOFF_SECTION%]}][Configuration][General]"
-        
-        if grep -q "$(echo "$GENERAL_SECTION" | sed 's/\[/\\[/g; s/\]/\\]/g')" "$PLASMA_RC"; then
-            # Section exists -- replace or add icon line
-            ESCAPED=$(echo "$GENERAL_SECTION" | sed 's/\[/\\[/g; s/\]/\\]/g')
-            if grep -A10 "$ESCAPED" "$PLASMA_RC" | grep -q "^icon="; then
-                sed -i "/$ESCAPED/,/^\[/{s|^icon=.*|icon=$ICON_PATH|}" "$PLASMA_RC"
-            else
-                sed -i "/$ESCAPED/a icon=$ICON_PATH" "$PLASMA_RC"
-            fi
-        else
-            # Section doesn't exist -- create it
-            CONF_SECTION="${KICKOFF_SECTION%]}][Configuration]"
-            ESCAPED_CONF=$(echo "$CONF_SECTION" | sed 's/\[/\\[/g; s/\]/\\]/g')
-            sed -i "/$ESCAPED_CONF/,/^\[/{/^\[.*\]/!b;i\\${GENERAL_SECTION}\nicon=$ICON_PATH
-            }" "$PLASMA_RC"
-        fi
-    fi
-    
-    # Restart plasmashell to pick up icon change
-    kquitapp5 plasmashell 2>/dev/null
-    sleep 2
-    kstart5 plasmashell 2>/dev/null &
-fi
-SCRIPT
-chmod +x /usr/share/wallpapers/heyagi/apply-desktop.sh
-
 # ── Fix ownership ──────────────────────────────────────────────────────────
-# Give abc full ownership of everything under /workspace so opencode and its
-# agents can freely create directories and files (presentations, output, etc.)
 chown -R abc:abc "$CONFIG_DIR" 2>/dev/null
 
 touch "$MARKER"
-echo "[heyagi] Customization complete."
+echo "[heyagi] XFCE customization complete."

package/config/kortix-env-setup.sh

@@ -12,11 +12,11 @@ if [ "$ENV_MODE" = "cloud" ] || [ "$ENV_MODE" = "production" ]; then
         echo "[Kortix] Services will still start; set KORTIX_API_URL later to enable model routing"
     else
         # Write env overrides that s6 services will inherit via with-contenv
-        printf '%s' "${KORTIX_API_URL}/tavily"    > /var/run/s6/container_environment/TAVILY_API_URL
-        printf '%s' "${KORTIX_API_URL}/serper"    > /var/run/s6/container_environment/SERPER_API_URL
-        printf '%s' "${KORTIX_API_URL}/firecrawl" > /var/run/s6/container_environment/FIRECRAWL_API_URL
-        printf '%s' "${KORTIX_API_URL}/replicate" > /var/run/s6/container_environment/REPLICATE_API_URL
-        printf '%s' "${KORTIX_API_URL}/context7"  > /var/run/s6/container_environment/CONTEXT7_API_URL
+        printf '%s' "${KORTIX_API_URL}/tavily"    > /run/s6/container_environment/TAVILY_API_URL
+        printf '%s' "${KORTIX_API_URL}/serper"    > /run/s6/container_environment/SERPER_API_URL
+        printf '%s' "${KORTIX_API_URL}/firecrawl" > /run/s6/container_environment/FIRECRAWL_API_URL
+        printf '%s' "${KORTIX_API_URL}/replicate" > /run/s6/container_environment/REPLICATE_API_URL
+        printf '%s' "${KORTIX_API_URL}/context7"  > /run/s6/container_environment/CONTEXT7_API_URL
 
         echo "[Kortix] SDK URLs routed through ${KORTIX_API_URL}"
     fi

package/kortix-master/src/index.ts

@@ -18,8 +18,18 @@ await secretStore.loadIntoProcessEnv()
 app.use('*', logger())
 app.use('*', cors())
 
-// Health check
-app.get('/kortix/health', (c) => c.json({ status: 'ok' }))
+// Health check — includes current sandbox version
+app.get('/kortix/health', async (c) => {
+  let version = '0.0.0'
+  try {
+    const file = Bun.file('/opt/kortix/.version')
+    if (await file.exists()) {
+      const data = await file.json()
+      version = data.version || '0.0.0'
+    }
+  } catch {}
+  return c.json({ status: 'ok', version })
+})
 
 // Update check — /kortix/update and /kortix/update/status
 app.route('/kortix/update', updateRouter)

package/kortix-master/src/routes/update.ts

@@ -1,12 +1,4 @@
 import { Hono } from 'hono';
-import { config } from '../config';
-
-// ─── Types ──────────────────────────────────────────────────────────────────
-
-interface LocalVersion {
-  version: string;
-  updatedAt: string;
-}
 
 // ─── Constants ──────────────────────────────────────────────────────────────
 
@@ -32,35 +24,17 @@ let updateInProgress = false;
 
 // ─── Helpers ────────────────────────────────────────────────────────────────
 
-async function readLocalVersion(): Promise<LocalVersion> {
+async function readLocalVersion(): Promise<string> {
   try {
     const file = Bun.file(VERSION_FILE);
     if (await file.exists()) {
-      return await file.json();
+      const data = await file.json();
+      return data.version || '0.0.0';
     }
   } catch (e) {
     console.error('[Update] Failed to read version file:', e);
   }
-  return { version: '0.0.0', updatedAt: '' };
-}
-
-async function fetchLatestVersion(): Promise<string | null> {
-  const url = `${config.KORTIX_API_URL}/v1/sandbox/version`;
-  try {
-    const res = await fetch(url, {
-      headers: { 'Accept': 'application/json' },
-      signal: AbortSignal.timeout(10_000),
-    });
-    if (!res.ok) {
-      console.error(`[Update] Version fetch failed: ${res.status}`);
-      return null;
-    }
-    const data = await res.json() as { version: string };
-    return data.version;
-  } catch (e) {
-    console.error('[Update] Failed to fetch version:', e);
-    return null;
-  }
+  return '0.0.0';
 }
 
 async function run(cmd: string): Promise<{ ok: boolean; output: string }> {
@@ -116,62 +90,45 @@ async function performUpdate(targetVersion: string): Promise<{
 
 const updateRouter = new Hono();
 
-/**
- * GET /kortix/update/status
- *
- * Returns current sandbox version + latest available version.
- * Frontend uses this to decide whether to show "Update available".
- * Read-only — does NOT trigger any update.
- */
-updateRouter.get('/status', async (c) => {
-  const local = await readLocalVersion();
-  const latest = await fetchLatestVersion();
-
-  return c.json({
-    currentVersion: local.version,
-    latestVersion: latest || 'unknown',
-    updateAvailable: latest ? local.version !== latest : false,
-    updatedAt: local.updatedAt,
-    updateInProgress,
-  });
-});
-
 /**
  * POST /kortix/update
  *
- * User-triggered update. Fetches latest version, installs the package,
- * restarts services. Only runs when explicitly called.
+ * User-triggered update. Frontend passes the target version.
+ * Installs the package, restarts services.
+ * Only runs when explicitly called.
+ *
+ * Body: { "version": "0.4.3" }
  */
 updateRouter.post('/', async (c) => {
   if (updateInProgress) {
     return c.json({ error: 'Update already in progress' }, 409);
   }
 
+  const body = await c.req.json().catch(() => ({}));
+  const targetVersion = body.version;
+
+  if (!targetVersion || typeof targetVersion !== 'string') {
+    return c.json({ error: 'Missing "version" in request body' }, 400);
+  }
+
   updateInProgress = true;
   try {
-    const local = await readLocalVersion();
-    const latestVersion = await fetchLatestVersion();
-
-    if (!latestVersion) {
-      return c.json({ error: 'Could not reach version service' }, 502);
-    }
+    const currentVersion = await readLocalVersion();
 
-    if (local.version === latestVersion) {
+    if (currentVersion === targetVersion) {
       return c.json({
         upToDate: true,
-        currentVersion: local.version,
-        latestVersion,
+        currentVersion,
       });
     }
 
-    console.log(`[Update] User triggered: ${local.version} -> ${latestVersion}`);
-    const update = await performUpdate(latestVersion);
+    console.log(`[Update] User triggered: ${currentVersion} -> ${targetVersion}`);
+    const update = await performUpdate(targetVersion);
 
     return c.json({
       success: update.success,
-      previousVersion: local.version,
-      currentVersion: update.success ? latestVersion : local.version,
-      latestVersion,
+      previousVersion: currentVersion,
+      currentVersion: update.success ? targetVersion : currentVersion,
       output: update.output,
     });
   } catch (e) {

package/opencode/skills/KORTIX-cron-triggers/SKILL.md

@@ -9,8 +9,8 @@ The Kortix Cron service runs outside the sandbox as a platform service. It manag
 
 ## Architecture
 
-- **Service**: `kortix-cron` (Bun + Hono) running at port 8011
-- **Database**: `kortix_cron` schema in Supabase PostgreSQL (Drizzle ORM)
+- **Service**: `kortix-api` (Bun + Hono) running at port 8008
+- **Database**: `kortix` schema in Supabase PostgreSQL (Drizzle ORM)
 - **Scheduler**: Polling loop (1s tick) that checks for due triggers
 - **Executor**: Calls OpenCode API inside sandbox to create sessions and send prompts
 
@@ -44,7 +44,7 @@ The Kortix Cron service runs outside the sandbox as a platform service. It manag
 
 ## API Reference
 
-Base URL: `http://localhost:8011` (local) or the deployed service URL.
+Base URL: `http://localhost:8008` (local) or the deployed service URL.
 
 All `/v1/*` endpoints require `Authorization: Bearer <supabase-jwt>`.
 
@@ -52,7 +52,7 @@ All `/v1/*` endpoints require `Authorization: Bearer <supabase-jwt>`.
 
 ```bash
 # Register a sandbox
-curl -X POST http://localhost:8011/v1/sandboxes \
+curl -X POST http://localhost:8008/v1/sandboxes \
   -H "Authorization: Bearer $TOKEN" \
   -H "Content-Type: application/json" \
   -d '{
@@ -62,11 +62,11 @@ curl -X POST http://localhost:8011/v1/sandboxes \
   }'
 
 # List sandboxes
-curl http://localhost:8011/v1/sandboxes \
+curl http://localhost:8008/v1/sandboxes \
   -H "Authorization: Bearer $TOKEN"
 
 # Check sandbox health
-curl -X POST http://localhost:8011/v1/sandboxes/{id}/health \
+curl -X POST http://localhost:8008/v1/sandboxes/{id}/health \
   -H "Authorization: Bearer $TOKEN"
 ```
 
@@ -74,7 +74,7 @@ curl -X POST http://localhost:8011/v1/sandboxes/{id}/health \
 
 ```bash
 # Create a trigger - daily report at 9 AM UTC
-curl -X POST http://localhost:8011/v1/triggers \
+curl -X POST http://localhost:8008/v1/triggers \
   -H "Authorization: Bearer $TOKEN" \
   -H "Content-Type: application/json" \
   -d '{
@@ -88,7 +88,7 @@ curl -X POST http://localhost:8011/v1/triggers \
   }'
 
 # Create a trigger - every 5 minutes health check
-curl -X POST http://localhost:8011/v1/triggers \
+curl -X POST http://localhost:8008/v1/triggers \
   -H "Authorization: Bearer $TOKEN" \
   -H "Content-Type: application/json" \
   -d '{
@@ -101,23 +101,23 @@ curl -X POST http://localhost:8011/v1/triggers \
   }'
 
 # List triggers
-curl http://localhost:8011/v1/triggers \
+curl http://localhost:8008/v1/triggers \
   -H "Authorization: Bearer $TOKEN"
 
 # Pause a trigger
-curl -X POST http://localhost:8011/v1/triggers/{id}/pause \
+curl -X POST http://localhost:8008/v1/triggers/{id}/pause \
   -H "Authorization: Bearer $TOKEN"
 
 # Resume a trigger
-curl -X POST http://localhost:8011/v1/triggers/{id}/resume \
+curl -X POST http://localhost:8008/v1/triggers/{id}/resume \
   -H "Authorization: Bearer $TOKEN"
 
 # Fire a trigger immediately (manual run)
-curl -X POST http://localhost:8011/v1/triggers/{id}/run \
+curl -X POST http://localhost:8008/v1/triggers/{id}/run \
   -H "Authorization: Bearer $TOKEN"
 
 # Delete a trigger
-curl -X DELETE http://localhost:8011/v1/triggers/{id} \
+curl -X DELETE http://localhost:8008/v1/triggers/{id} \
   -H "Authorization: Bearer $TOKEN"
 ```
 
@@ -125,30 +125,30 @@ curl -X DELETE http://localhost:8011/v1/triggers/{id} \
 
 ```bash
 # List all executions
-curl "http://localhost:8011/v1/executions?limit=20" \
+curl "http://localhost:8008/v1/executions?limit=20" \
   -H "Authorization: Bearer $TOKEN"
 
 # Filter by status
-curl "http://localhost:8011/v1/executions?status=failed" \
+curl "http://localhost:8008/v1/executions?status=failed" \
   -H "Authorization: Bearer $TOKEN"
 
 # Filter by date range
-curl "http://localhost:8011/v1/executions?since=2026-02-01T00:00:00Z&until=2026-02-11T00:00:00Z" \
+curl "http://localhost:8008/v1/executions?since=2026-02-01T00:00:00Z&until=2026-02-11T00:00:00Z" \
   -H "Authorization: Bearer $TOKEN"
 
 # Executions for a specific trigger
-curl http://localhost:8011/v1/executions/by-trigger/{triggerId} \
+curl http://localhost:8008/v1/executions/by-trigger/{triggerId} \
   -H "Authorization: Bearer $TOKEN"
 
 # Get execution details
-curl http://localhost:8011/v1/executions/{id} \
+curl http://localhost:8008/v1/executions/{id} \
   -H "Authorization: Bearer $TOKEN"
 ```
 
 ### Health Check (no auth)
 
 ```bash
-curl http://localhost:8011/health
+curl http://localhost:8008/health
 # Returns: { status, service, timestamp, scheduler: { running, tickCount, lastTick } }
 ```