totopo 3.0.1 → 3.1.0-rc-2

package/README.md

@@ -13,8 +13,8 @@ Local sandbox for AI agents.
 ## Motivation
 
 Two fundamental issues with AI agents:
-- They are non-deterministic — they will occasionally get things wrong.
-- They are susceptible to prompt injection — they can get compromised and act against your interests without you knowing.
+- They are non-deterministic and will occasionally make mistakes.
+- Susceptibility to prompt injection — they can get compromised and act against your interests without you knowing.
 
 totopo addresses both with a dev container - when you run totopo in a given directory, the directory is mounted as a workspace where agents get a full, capable environment to work in — they just can't touch anything outside the workspace, and they can't reach remote git repositories.
 
@@ -68,7 +68,7 @@ On every run, totopo shows the workspace menu:
 
 - **Open session** — start or resume the dev container and connect
 - **Stop container** — stop the running container
-- **Manage Workspace** — profiles, shadow paths, rebuild, reset config
+- **Manage Workspace** — shadow paths, rebuild, reset config
 - **Manage totopo** — multi-workspace management (stop containers, clear memory, uninstall)
 
 ### Working directory
@@ -101,22 +101,30 @@ Profiles let you define multiple container image variants for a workspace. Each
 # totopo.yaml
 profiles:
   default:
+    description: "Base image: Node.js, git, and AI CLIs"
     dockerfile_hook: |
-      # Installs Go and Java.
-      RUN apt-get update && apt-get install -y --no-install-recommends golang-go default-jdk-headless && rm -rf /var/lib/apt/lists/*
-  slim:
+      # No extras — uses the totopo base image as-is (Node.js + git + AI CLIs).
+  extended:
+    description: Base image + Go, Java, Rust, and Bun
     dockerfile_hook: |
-      # No extras — uses the base image only (Node.js + git + AI CLIs).
-  custom:
-    dockerfile_hook: |
-      # Add your own Dockerfile instructions below, or ask the agent inside the container to help.
-      # e.g. Install Rust:
-      #   RUN curl -sSf https://sh.rustup.rs | sh -s -- -y
+      # Go
+      RUN apt-get update && apt-get install -y --no-install-recommends golang-go && rm -rf /var/lib/apt/lists/*
+      # Java (headless JDK — includes javac; needed for Kotlin, Scala, Android tooling)
+      RUN apt-get update && apt-get install -y --no-install-recommends default-jdk-headless && rm -rf /var/lib/apt/lists/*
+      # Rust (system-wide install — devuser can use cargo and rustc)
+      ENV RUSTUP_HOME=/usr/local/rustup
+      ENV CARGO_HOME=/usr/local/cargo
+      ENV PATH=/usr/local/cargo/bin:$PATH
+      RUN curl -sSf https://sh.rustup.rs | sh -s -- -y --no-modify-path && chmod -R a+rx /usr/local/cargo /usr/local/rustup
+      # Bun (fast JS runtime, bundler, and package manager)
+      ENV BUN_INSTALL=/usr/local/bun
+      ENV PATH=/usr/local/bun/bin:$PATH
+      RUN curl -fsSL https://bun.sh/install | bash
   # Add more profiles here — or ask the agent inside the container to set one up for you.
 
 ```
 
-Three profiles are set by default. When multiple profiles are defined, totopo prompts you to pick one at session start (the choice is remembered). Switch any time in **Manage Workspace > Profiles** — a profile change triggers a container rebuild.
+Two profiles are set by default. When multiple profiles are defined, totopo prompts you to pick one at session start (the choice is remembered). A profile change triggers a container rebuild on the next session.
 
 The base image is defined in [`templates/Dockerfile`](templates/Dockerfile) — inspect it to see what's already included before adding your own layers. To force a fully fresh build (no Docker layer cache), use **Manage Workspace > Clean rebuild**.
 

package/dist/commands/dev.js

@@ -41,9 +41,12 @@ async function selectProfile(ctx, profiles) {
     const choice = await select({
         message: "Profile:",
         options: profileNames.map((name) => {
+            const description = profiles[name]?.description;
+            const isCurrent = name === currentProfile;
+            const hint = description && isCurrent ? `${description} · current` : (description ?? (isCurrent ? "current" : undefined));
             const opt = { value: name, label: name };
-            if (name === currentProfile)
-                opt.hint = "current";
+            if (hint)
+                opt.hint = hint;
             return opt;
         }),
         initialValue: currentProfile,

package/dist/commands/menu.js

@@ -25,7 +25,7 @@ export async function run(args) {
     const options = [
         { value: "dev", label: "Open session", hint: "start or resume the dev container" },
         ...(workspaceRunning ? [{ value: "stop", label: "Stop container", hint: "stops this workspace's container" }] : []),
-        { value: "settings", label: "Manage Workspace", hint: "profiles, shadow paths, rebuild" },
+        { value: "settings", label: "Manage Workspace", hint: "shadow paths, rebuild, reset config" },
         { value: "manage-totopo", label: "Manage totopo →", hint: "stop, clear, remove, uninstall" },
         { value: "help", label: "Help", hint: "official docs" },
         { value: "quit", label: "Quit" },

package/dist/commands/workspace.js

@@ -1,55 +1,11 @@
 // =========================================================================================================================================
-// src/commands/workspace.ts - Manage Workspace submenu: profiles, shadow paths, rebuild, reset, stop, reset-image
+// src/commands/workspace.ts - Manage Workspace submenu: shadow paths, rebuild, reset, stop, reset-image
 // =========================================================================================================================================
 import { spawnSync } from "node:child_process";
 import { relative } from "node:path";
 import { cancel, confirm, isCancel, log, multiselect, note, outro, path, select, text } from "@clack/prompts";
-import { PROFILE } from "../lib/constants.js";
 import { countPatternHits } from "../lib/shadows.js";
 import { buildDefaultTotopoYaml, readTotopoYaml, writeTotopoYaml } from "../lib/totopo-yaml.js";
-import { readActiveProfile, writeActiveProfile } from "../lib/workspace-identity.js";
-// --- Profile menu ------------------------------------------------------------------------------------------------------------------------
-async function profileMenu(ctx) {
-    const yaml = readTotopoYaml(ctx.workspaceRoot);
-    if (!yaml) {
-        log.error("totopo.yaml not found or invalid.");
-        return;
-    }
-    const profiles = yaml.profiles ?? {};
-    const profileNames = Object.keys(profiles);
-    if (profileNames.length === 0) {
-        log.info("No profiles defined in totopo.yaml.");
-        return;
-    }
-    const currentProfile = readActiveProfile(ctx.workspaceId) ?? PROFILE.default;
-    note(`Active profile: ${currentProfile}`, "Profiles");
-    if (profileNames.length <= 1) {
-        log.info("Only one profile defined. Add more profiles in totopo.yaml to switch between them.");
-        return;
-    }
-    const profileOptions = profileNames.map((name) => {
-        const opt = { value: name, label: name };
-        if (name === currentProfile)
-            opt.hint = "current";
-        return opt;
-    });
-    profileOptions.push({ value: "back", label: "← Back" });
-    const choice = await select({
-        message: "Switch active profile:",
-        options: profileOptions,
-    });
-    if (isCancel(choice) || choice === "back")
-        return;
-    const selected = choice;
-    if (selected === currentProfile) {
-        log.info("Already on that profile.");
-        return;
-    }
-    writeActiveProfile(ctx.workspaceId, selected);
-    log.success(`Switched to profile "${selected}"`);
-    log.info("Profile change requires a container rebuild. Stop and rebuild to apply.");
-    await promptStopContainer(ctx);
-}
 // --- Shadow paths menu -------------------------------------------------------------------------------------------------------------------
 async function shadowPathsMenu(ctx) {
     const yaml = readTotopoYaml(ctx.workspaceRoot);
@@ -205,7 +161,6 @@ async function resetTotopoYaml(ctx) {
 export async function run(ctx) {
     while (true) {
         const options = [
-            { value: "profiles", label: "Profiles", hint: "switch active Dockerfile profile" },
             { value: "shadow-paths", label: "Shadow paths", hint: "manage shadow patterns" },
             { value: "rebuild", label: "Rebuild container", hint: "force a fresh image build" },
             { value: "clean-rebuild", label: "Clean rebuild", hint: "fresh build, no cache" },
@@ -217,9 +172,6 @@ export async function run(ctx) {
             return "back";
         }
         switch (action) {
-            case "profiles":
-                await profileMenu(ctx);
-                break;
             case "shadow-paths":
                 await shadowPathsMenu(ctx);
                 break;

package/dist/lib/constants.js

@@ -31,6 +31,5 @@ export const LABEL_PROFILE = "totopo.profile";
 // Built-in profile names (must match keys in buildDefaultTotopoYaml in totopo-yaml.ts)
 export const PROFILE = {
     default: "default",
-    slim: "slim",
-    custom: "custom",
+    extended: "extended",
 };

package/dist/lib/totopo-yaml.js

@@ -116,18 +116,24 @@ export function writeTotopoYaml(dir, config) {
     writeFileSync(filePath, `${YAML_HEADER}${body}\n${PROFILES_FOOTER_COMMENT}\n`);
 }
 // --- Defaults ----------------------------------------------------------------------------------------------------------------------------
-const DEFAULT_PROFILE_HOOK = `# Installs Go and Java.
-RUN apt-get update && apt-get install -y --no-install-recommends golang-go default-jdk-headless && rm -rf /var/lib/apt/lists/*
+const DEFAULT_PROFILE_HOOK = `# No extras — uses the totopo base image as-is (Node.js + git + AI CLIs).
 `;
-const SLIM_PROFILE_HOOK = `# No extras — uses the base image only (Node.js + git + AI CLIs).
-`;
-const CUSTOM_PROFILE_HOOK = `# Add your own Dockerfile instructions below, or ask the agent inside the container to help.
-# Install Bun:
-#   RUN curl -fsSL https://bun.sh/install | bash
-# Install Rust:
-#   RUN curl -sSf https://sh.rustup.rs | sh -s -- -y
-# Copy a local script into the image:
-#   COPY my-tool.sh /usr/local/bin/my-tool.sh
+const EXTENDED_PROFILE_HOOK = `# Go
+RUN apt-get update && apt-get install -y --no-install-recommends golang-go && rm -rf /var/lib/apt/lists/*
+
+# Java (headless JDK — includes javac; needed for Kotlin, Scala, Android tooling)
+RUN apt-get update && apt-get install -y --no-install-recommends default-jdk-headless && rm -rf /var/lib/apt/lists/*
+
+# Rust (system-wide install — devuser can use cargo and rustc)
+ENV RUSTUP_HOME=/usr/local/rustup
+ENV CARGO_HOME=/usr/local/cargo
+ENV PATH=/usr/local/cargo/bin:$PATH
+RUN curl -sSf https://sh.rustup.rs | sh -s -- -y --no-modify-path && chmod -R a+rx /usr/local/cargo /usr/local/rustup
+
+# Bun (fast JS runtime, bundler, and package manager)
+ENV BUN_INSTALL=/usr/local/bun
+ENV PATH=/usr/local/bun/bin:$PATH
+RUN curl -fsSL https://bun.sh/install | bash
 `;
 // Appended after the last profile to hint at adding more
 const PROFILES_FOOTER_COMMENT = "  # Add more profiles here — or ask the agent inside the container to set one up for you.";
@@ -139,13 +145,12 @@ export function buildDefaultTotopoYaml(workspaceId, name) {
         shadow_paths: [...DEFAULT_SHADOW_PATHS],
         profiles: {
             default: {
+                description: "Base image: Node.js, git, and AI CLIs",
                 dockerfile_hook: DEFAULT_PROFILE_HOOK,
             },
-            slim: {
-                dockerfile_hook: SLIM_PROFILE_HOOK,
-            },
-            custom: {
-                dockerfile_hook: CUSTOM_PROFILE_HOOK,
+            extended: {
+                description: "Base image + Go, Java, Rust, and Bun",
+                dockerfile_hook: EXTENDED_PROFILE_HOOK,
             },
         },
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "totopo",
-  "version": "3.0.1",
+  "version": "3.1.0-rc-2",
   "description": "Run AI coding agents safely in your local codebase",
   "type": "module",
   "bin": {

package/schema/totopo.schema.json

@@ -37,6 +37,10 @@
             "additionalProperties": {
                 "type": "object",
                 "properties": {
+                    "description": {
+                        "type": "string",
+                        "description": "Human-readable description of this profile shown as a hint during profile selection."
+                    },
                     "dockerfile_hook": {
                         "type": "string",
                         "description": "Raw Dockerfile instructions appended after the base image layers. Use for installing additional runtimes, tools, or dependencies."

package/templates/post-start.mjs

@@ -106,11 +106,11 @@ ok("npm", `v${run("npm --version") ?? "not found"}`);
 const pnpmVer = run("pnpm --version");
 ok("pnpm", pnpmVer ? `v${pnpmVer}` : "not found");
 ok("python3", run("python3 --version") ?? "not found");
+ok("pipx", run("pipx --version") ?? "not found");
 
 // Optional (installed via profile hooks)
 const bunVer = run("bun --version");
 checkRuntime("bun", bunVer ? `v${bunVer}` : null);
-checkRuntime("uv", run("uv --version"));
 checkRuntime("go", run("go version"));
 checkRuntime("cargo", run("cargo --version"));
 checkRuntime("java", run("java --version")?.split("\n")[0] ?? null);
@@ -125,6 +125,14 @@ ok("fzf", run("fzf --version") ?? "not found");
 ok("jq", run("jq --version") ?? "not found");
 ok("yq", run("yq --version") ?? "not found");
 
+// ─── Database tools ──────────────────────────────────────────────────────────
+section("Database tools");
+
+ok("sqlite3", run("sqlite3 --version")?.split(" ").slice(0, 2).join(" ") ?? "not found");
+ok("psql", run("psql --version") ?? "not found");
+ok("mysql", run("mysql --version") ?? "not found");
+ok("redis-cli", run("redis-cli --version") ?? "not found");
+
 // ─── API keys ────────────────────────────────────────────────────────────────
 section("API keys");