v0.1.1

v0.1.1 — k8s-style health probes

Adds /healthz (liveness) and /readyz (readiness) on the existing
-metrics-addr listener. Liveness answers 200 OK with no real check;
readiness stat()s every workspace root in the set and returns 200 when
all are present directories or 503 (with the failing workspace name in
the body) on the first error.

Both endpoints share the metrics listener — same threat model
(unauthenticated, scraped by orchestration tooling), same operator-class
audience.

Drop-in to a k8s deployment:

  livenessProbe:
    httpGet: { path: /healthz, port: 9090 }
  readinessProbe:
    httpGet: { path: /readyz, port: 9090 }

No backwards-incompatible changes since v0.1.0; the new endpoints only
appear when -metrics-addr is configured (same as /metrics).

Also includes the docs-site polish merged after v0.1.0:
- Animated front-page hero (PromptKit brain dispatching to multiple
  shielded sandboxes, pure SMIL).
- Mermaid-ified architecture diagram covering the current package set
  (api, lsp, ast, tracing, metrics, secrets, search).
- Code intelligence + Tool naming and Claude Code compatibility sections
  on the architecture page.
- Shared AltairaLabs cross-product footer on every docs page.

v0.1.0

v0.1.0 — initial release

First tagged release of the Codegen Sandbox: a Docker-based MCP server
shipping safe codegen tools for PromptKit agents.

Highlights:
- 32 MCP tools across filesystem, shell, verification, LSP, AST, render,
  snapshot, secrets, and code-search categories.
- Multi-language verification: Go, Python (ruff), Node (eslint/prettier),
  Rust (clippy/rustfmt). Post-edit format/lint feedback inline.
- Path containment, command denylist, and regex secret scrubbing applied
  to every tool's output before it leaves the sandbox.
- Multi-workspace and readonly modes.
- Human-facing API (OIDC-gated) for IDE remote access: tree, file,
  events, exec PTY, port-forward, embedded SSH, workspace download —
  plus an OpenAPI 3.1 spec served at /api/openapi.yaml with a Scalar UI
  at /api/docs.
- Telemetry: Prometheus /metrics and OpenTelemetry tracing spans, plus
  agent-health metrics (streaks, error rate, tool-repetition bursts).
- sandbox-forward CLI: login (OIDC device code), proxy, ssh-setup —
  bridges a developer laptop to a remote sandbox over a single
  authenticated WebSocket.

Images published to ghcr.io/altairalabs:
  codegen-sandbox            (Go convenience image with the binary alone)
  codegen-sandbox-tools      (base + the binary + ripgrep + git)
  codegen-sandbox-tools-go   (gopls + golangci-lint)
  codegen-sandbox-tools-node (node + pnpm + bun + eslint + prettier)
  codegen-sandbox-tools-python (python + ruff)
  codegen-sandbox-tools-rust (rust + clippy + rustfmt + rust-analyzer)
  codegen-sandbox-tools-render (graphviz dot + mermaid-cli)

Each tagged with v0.1.0 and latest, multi-arch (linux/amd64 + linux/arm64).