@truefoundry/trueforge 0.1.2 → 0.1.4-rc.0

package/dist/postgres/migrations/20260818_000001_mcp_pending_auth_return_to.js

@@ -0,0 +1,17 @@
+// src/db/postgres/migrations/20260818_000001_mcp_pending_auth_return_to.ts
+import { sql } from "kysely";
+async function up(db) {
+  await sql`SET LOCAL lock_timeout = '5s'`.execute(db);
+  await sql`LOCK TABLE oauth_pending_authorization IN ACCESS EXCLUSIVE MODE`.execute(db);
+  await sql`DELETE FROM oauth_pending_authorization`.execute(db);
+}
+async function down(db) {
+  await sql`SET LOCAL lock_timeout = '5s'`.execute(db);
+  await sql`LOCK TABLE oauth_pending_authorization IN ACCESS EXCLUSIVE MODE`.execute(db);
+  await sql`DELETE FROM oauth_pending_authorization`.execute(db);
+}
+export {
+  down,
+  up
+};
+//# sourceMappingURL=20260818_000001_mcp_pending_auth_return_to.js.map

package/dist/postgres/migrations/20260818_000001_mcp_pending_auth_return_to.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/db/postgres/migrations/20260818_000001_mcp_pending_auth_return_to.ts"],"sourcesContent":["import { sql, type Kysely } from 'kysely';\n\n/**\n * Pending-authorization `auth_data` jsonb key `redirect_url` → `return_to` (path).\n * In-flight rows are short-lived and cannot be rewritten safely; drop them so\n * callers restart authorize with the new shape.\n */\nexport async function up(db: Kysely<unknown>): Promise<void> {\n  await sql`SET LOCAL lock_timeout = '5s'`.execute(db);\n  await sql`LOCK TABLE oauth_pending_authorization IN ACCESS EXCLUSIVE MODE`.execute(db);\n  await sql`DELETE FROM oauth_pending_authorization`.execute(db);\n}\n\nexport async function down(db: Kysely<unknown>): Promise<void> {\n  await sql`SET LOCAL lock_timeout = '5s'`.execute(db);\n  // Rows written with `return_to` are incompatible with the prior shape; clear them.\n  await sql`LOCK TABLE oauth_pending_authorization IN ACCESS EXCLUSIVE MODE`.execute(db);\n  await sql`DELETE FROM oauth_pending_authorization`.execute(db);\n}\n"],"mappings":";AAAA,SAAS,WAAwB;AAOjC,eAAsB,GAAG,IAAoC;AAC3D,QAAM,mCAAmC,QAAQ,EAAE;AACnD,QAAM,qEAAqE,QAAQ,EAAE;AACrF,QAAM,6CAA6C,QAAQ,EAAE;AAC/D;AAEA,eAAsB,KAAK,IAAoC;AAC7D,QAAM,mCAAmC,QAAQ,EAAE;AAEnD,QAAM,qEAAqE,QAAQ,EAAE;AACrF,QAAM,6CAA6C,QAAQ,EAAE;AAC/D;","names":[]}

package/dist/sqlite/migrations/20260818_000001_mcp_pending_auth_return_to.js

@@ -0,0 +1,19 @@
+// src/db/sqlite/migrations/20260818_000001_mcp_pending_auth_return_to.ts
+import { sql } from "kysely";
+async function up(db) {
+  await db.transaction().execute(async (trx) => {
+    await sql`UPDATE oauth_pending_authorization SET created_at = created_at WHERE false`.execute(trx);
+    await sql`DELETE FROM oauth_pending_authorization`.execute(trx);
+  });
+}
+async function down(db) {
+  await db.transaction().execute(async (trx) => {
+    await sql`UPDATE oauth_pending_authorization SET created_at = created_at WHERE false`.execute(trx);
+    await sql`DELETE FROM oauth_pending_authorization`.execute(trx);
+  });
+}
+export {
+  down,
+  up
+};
+//# sourceMappingURL=20260818_000001_mcp_pending_auth_return_to.js.map

package/dist/sqlite/migrations/20260818_000001_mcp_pending_auth_return_to.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/db/sqlite/migrations/20260818_000001_mcp_pending_auth_return_to.ts"],"sourcesContent":["import { type Kysely, sql } from 'kysely';\n\n/**\n * Pending-authorization `auth_data` jsonb key `redirect_url` → `return_to` (path).\n * In-flight rows are short-lived and cannot be rewritten safely; drop them so\n * callers restart authorize with the new shape.\n * Mirrors db/postgres/migrations/20260818_000001_mcp_pending_auth_return_to.ts.\n *\n * Wrapped in a transaction. SQLite has no LOCK TABLE; a no-op UPDATE escalates\n * the deferred txn to a RESERVED write lock before the delete.\n */\nexport async function up(db: Kysely<unknown>): Promise<void> {\n  await db.transaction().execute(async trx => {\n    await sql`UPDATE oauth_pending_authorization SET created_at = created_at WHERE false`.execute(trx);\n    await sql`DELETE FROM oauth_pending_authorization`.execute(trx);\n  });\n}\n\nexport async function down(db: Kysely<unknown>): Promise<void> {\n  await db.transaction().execute(async trx => {\n    // Rows written with `return_to` are incompatible with the prior shape; clear them.\n    await sql`UPDATE oauth_pending_authorization SET created_at = created_at WHERE false`.execute(trx);\n    await sql`DELETE FROM oauth_pending_authorization`.execute(trx);\n  });\n}\n"],"mappings":";AAAA,SAAsB,WAAW;AAWjC,eAAsB,GAAG,IAAoC;AAC3D,QAAM,GAAG,YAAY,EAAE,QAAQ,OAAM,QAAO;AAC1C,UAAM,gFAAgF,QAAQ,GAAG;AACjG,UAAM,6CAA6C,QAAQ,GAAG;AAAA,EAChE,CAAC;AACH;AAEA,eAAsB,KAAK,IAAoC;AAC7D,QAAM,GAAG,YAAY,EAAE,QAAQ,OAAM,QAAO;AAE1C,UAAM,gFAAgF,QAAQ,GAAG;AACjG,UAAM,6CAA6C,QAAQ,GAAG;AAAA,EAChE,CAAC;AACH;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@truefoundry/trueforge",
-  "version": "0.1.2",
+  "version": "0.1.4-rc.0",
   "description": "TrueForge Agent Harness: server, HTTP API, and chat UI (npx @truefoundry/trueforge)",
   "author": "TrueFoundry",
   "license": "MIT",
@@ -27,6 +27,7 @@
     "node": ">=22"
   },
   "dependencies": {
+    "@anthropic-ai/sandbox-runtime": "0.0.71",
     "@daytona/sdk": "^0.204.1",
     "@hono/node-server": "^2.0.11",
     "@hono/swagger-ui": "^0.2.1",
@@ -44,7 +45,7 @@
     "winston": "^3.13.0",
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
-    "@truefoundry/trueforge-core": "0.1.2"
+    "@truefoundry/trueforge-core": "0.1.4-rc.0"
   },
   "devDependencies": {
     "@swc/core": "^1.11.0",
@@ -60,8 +61,9 @@
   },
   "scripts": {
     "build:frontend-assets": "node scripts/copy-frontend.mjs",
-    "build:gen:watch": "node --watch-path=catalog/model-catalog.yaml --watch-path=catalog/mcp-catalog.yaml --watch-path=catalog/skill-catalog.yaml --watch-path=catalog/sandbox-catalog.yaml scripts/generate-catalog.mjs",
-    "build:gen": "node scripts/generate-catalog.mjs",
+    "build:gen:local-sandbox": "node scripts/generate-local-sandbox-scripts.mjs",
+    "build:gen:watch": "node --watch-path=catalog/model-catalog.yaml --watch-path=catalog/mcp-catalog.yaml --watch-path=catalog/skill-catalog.yaml --watch-path=catalog/sandbox-catalog.yaml --watch-path=src/sandbox/local/scripts scripts/generate-dev.mjs",
+    "build:gen": "pnpm run build:gen:local-sandbox && node scripts/generate-catalog.mjs",
     "build:clean": "rm -rf dist",
     "build": "pnpm run build:gen && tsc --noEmit && pnpm run build:clean && tsup && chmod +x dist/cli.js && pnpm run build:frontend-assets",
     "dev:serve": "NODE_OPTIONS='--conditions=trueforge-dev' NODE_ENV=development tsx watch --env-file=.env src/main.ts",
@@ -79,6 +81,10 @@
     "test:store:postgres": "jest --config jest.store.postgres.config.cjs",
     "test:store:sqlite": "jest --config jest.store.sqlite.config.cjs",
     "test": "pnpm run build:gen && NODE_OPTIONS='--conditions=trueforge-dev' node --env-file=.env.test ./node_modules/jest/bin/jest.js --config jest.unit.config.cjs",
+    "test:local-sandbox:contract": "pnpm run build:gen && NODE_OPTIONS='--conditions=trueforge-dev' node --env-file=.env.test ./node_modules/jest/bin/jest.js --config jest.local-sandbox.contract.config.cjs",
+    "smoke:local-sandbox": "pnpm run build:gen && NODE_OPTIONS='--conditions=trueforge-dev' jest --config jest.local-sandbox.smoke.config.cjs --runInBand --forceExit tests/sandbox/local/smoke.test.ts",
+    "smoke:local-sandbox:lima": "bash scripts/local-sandbox/smoke-lima.sh",
+    "probe:loopback": "pnpm exec tsx scripts/local-sandbox/probe-loopback.ts",
     "typecheck": "pnpm run build:gen && tsc --noEmit && tsc --noEmit -p tests/db/tsconfig.json && tsc --noEmit -p tests/unit/tsconfig.json"
   },
   "bin": {

package/dist/_frontend/assets/SettingsBuilder-4NF3Y7UZ-eXXDLQ6k.js

@@ -1,2 +0,0 @@
-const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/ModelSettings-2QB7LE22-CDZku4g3.js","assets/index-DWr7ad72.js","assets/index-DEKCw40W.css","assets/ConnectorSettings-XEO5ZQO5-BXis0tQK.js","assets/SkillSettings-5EETEEDI-DbJE0Ms2.js","assets/SandboxSettings-QDDIPRBP-CImJLa0r.js"])))=>i.map(i=>d[i]);
-import{g,i as v,k as y,l as j,m as S,r as l,j as e,I as p,f as _,e as f,_ as u,S as k}from"./index-DWr7ad72.js";var w=l.lazy(()=>u(()=>import("./ModelSettings-2QB7LE22-CDZku4g3.js"),__vite__mapDeps([0,1,2]))),E=l.lazy(()=>u(()=>import("./ConnectorSettings-XEO5ZQO5-BXis0tQK.js"),__vite__mapDeps([3,1,2]))),N=l.lazy(()=>u(()=>import("./SkillSettings-5EETEEDI-DbJE0Ms2.js"),__vite__mapDeps([4,1,2]))),C=l.lazy(()=>u(()=>import("./SandboxSettings-QDDIPRBP-CImJLa0r.js"),__vite__mapDeps([5,1,2])));function L(){return e.jsxs("div",{className:"flex flex-1 items-center justify-center py-8",role:"status","aria-live":"polite","aria-busy":"true",children:[e.jsx(k,{size:20,className:"text-text-secondary"}),e.jsx("span",{className:"sr-only",children:"Loading"})]})}var O=()=>{const{settingsOpen:a,settingsSection:t,setSettingsOpen:r}=g(),n=v(),d=y(),{refresh:m}=j(),i=S(),o=(n==null?void 0:n.skillCatalog)!=null,c=(n==null?void 0:n.sandboxCatalog)!=null,x=l.useCallback(()=>{r(!1),m(),d==null||d()},[m,d,r]);l.useEffect(()=>{!o&&t==="skills"&&r(a,"models"),!c&&t==="sandbox"&&r(a,"models")},[o,c,t,a,r]),l.useEffect(()=>{if(!a)return;const s=b=>{b.key==="Escape"&&(b.stopImmediatePropagation(),x())};return window.addEventListener("keydown",s,!0),()=>window.removeEventListener("keydown",s,!0)},[x,a]);const h=l.useMemo(()=>{const s=[{id:"models",label:"Models",icon:"cpu"},{id:"connectors",label:"Connectors",icon:"plug"}];return o&&s.push({id:"skills",label:"Skills",icon:"lightbulb"}),c&&s.push({id:"sandbox",label:"Sandbox providers",icon:"cube"}),s},[o,c]);return!a||!n?null:e.jsxs("div",{className:"flex h-full min-h-0 w-full flex-col bg-primary-bg",children:[e.jsxs("header",{className:"flex shrink-0 items-center gap-2 border-b border-border px-2 py-1.5",children:[e.jsx("button",{type:"button","aria-label":"Back",title:"Back",className:_({variant:"ghost",size:"icon"}),onClick:x,children:e.jsx(p,{name:"arrow-left"})}),e.jsx("h1",{className:"text-lg font-semibold tracking-tight text-text-primary",children:"Settings"})]}),e.jsxs("div",{className:f("flex min-h-0 flex-1 flex-col",!i&&"md:flex-row"),children:[e.jsx("nav",{"aria-label":"Settings sections",className:f("flex w-full gap-1 border-b border-border bg-secondary-bg/40 p-2",i?"min-w-0":"justify-center md:w-48 md:flex-col md:justify-start md:border-b-0 md:border-r"),children:h.map(s=>e.jsxs("button",{type:"button","aria-current":t===s.id?"page":void 0,...i?{title:s.label}:{},className:f("flex min-h-9 items-center gap-2 rounded-md px-3 text-sm font-medium transition-colors","focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-focus-ring",i?"min-w-0 flex-1 justify-center gap-1.5 px-1.5":"shrink-0",t===s.id?"bg-primary-button-bg text-primary-button-text":"text-text-secondary hover:bg-ghost-button-hover/60 hover:text-text-primary"),onClick:()=>{r(!0,s.id)},children:[e.jsx(p,{name:s.icon,className:"h-4 w-4 shrink-0"}),i?e.jsx("span",{className:"truncate",children:s.label}):s.label]},s.id))}),e.jsx("section",{className:"flex flex-col h-full flex-1 overflow-y-hidden px-6 py-4",children:e.jsx("div",{className:"w-full max-w-210 h-full min-h-0 flex flex-col mx-auto",children:e.jsxs(l.Suspense,{fallback:e.jsx(L,{}),children:[t==="models"?e.jsx(w,{}):null,t==="connectors"?e.jsx(E,{}):null,t==="skills"&&o?e.jsx(N,{}):null,t==="sandbox"&&c?e.jsx(C,{}):null]})})})]})]})},I=O;export{I as default};