v0.1.0

v0.1.0 — initial release

First tagged release of the Codegen Sandbox: a Docker-based MCP server
shipping safe codegen tools for PromptKit agents.

Highlights:
- 32 MCP tools across filesystem, shell, verification, LSP, AST, render,
  snapshot, secrets, and code-search categories.
- Multi-language verification: Go, Python (ruff), Node (eslint/prettier),
  Rust (clippy/rustfmt). Post-edit format/lint feedback inline.
- Path containment, command denylist, and regex secret scrubbing applied
  to every tool's output before it leaves the sandbox.
- Multi-workspace and readonly modes.
- Human-facing API (OIDC-gated) for IDE remote access: tree, file,
  events, exec PTY, port-forward, embedded SSH, workspace download —
  plus an OpenAPI 3.1 spec served at /api/openapi.yaml with a Scalar UI
  at /api/docs.
- Telemetry: Prometheus /metrics and OpenTelemetry tracing spans, plus
  agent-health metrics (streaks, error rate, tool-repetition bursts).
- sandbox-forward CLI: login (OIDC device code), proxy, ssh-setup —
  bridges a developer laptop to a remote sandbox over a single
  authenticated WebSocket.

Images published to ghcr.io/altairalabs:
  codegen-sandbox            (Go convenience image with the binary alone)
  codegen-sandbox-tools      (base + the binary + ripgrep + git)
  codegen-sandbox-tools-go   (gopls + golangci-lint)
  codegen-sandbox-tools-node (node + pnpm + bun + eslint + prettier)
  codegen-sandbox-tools-python (python + ruff)
  codegen-sandbox-tools-rust (rust + clippy + rustfmt + rust-analyzer)
  codegen-sandbox-tools-render (graphviz dot + mermaid-cli)

Each tagged with v0.1.0 and latest, multi-arch (linux/amd64 + linux/arm64).