Version Packages (rc)

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

⚠️⚠️⚠️⚠️⚠️⚠️

main is currently in pre mode so this branch has prereleases rather than normal releases. If you want to exit prereleases, run changeset pre exit on main.

⚠️⚠️⚠️⚠️⚠️⚠️

Releases

@truefoundry/trueforge@1.0.0-rc.1

Major Changes

• 9bfcdaa: Replace string creator fields (created_by / triggered_by) with a non-null created_by_subject JSON object on agent, session, schedule, and schedule_run. Ownership and list filters use tenant_id + created_by_subject.subject_id.

Minor Changes

• 8491843: Add a slot-driven agent Metrics tab with aggregate cards, time-range filtering, and Harness-backed line charts.
• 49164e7: Add optional mutual TLS for the HTTPS listener and schedule controller→server hop via TRUEFORGE_MTLS_ENABLED / TRUEFORGE_MTLS_CERTS_DIR. Off by default; independent of ServiceFoundry TRUEFOUNDRY_MTLS_*.
• a3a1395: Adds first-class cron schedules for existing agents: persist them, manage them via /api/v1/schedules, validate cron policy at write time, and advance due runs through a single-dispatcher claim path.
• ef316d2: Add optional OIDC_ALLOWED_EMAILS allowlist (exact addresses and * globs) so OIDC logins can be limited to approved emails or domains.
• 2025cef: Store Postgres app tables and Kysely migration bookkeeping in a dedicated trueforge schema, with an automatic one-time move from public so existing installs keep their data and migration history.
• 8f1a2dc: Add a TrueFoundry-managed model registry. When TRUEFOUNDRY_SERVICEFOUNDRY_SERVER_URL is set, models are listed from the TrueFoundry ServiceFoundry server and turns are routed through the tenant's default AI Gateway with the caller's token. Mutually exclusive with OIDC. Supports internal mutual TLS to the ServiceFoundry server via TRUEFOUNDRY_MTLS_ENABLED/TRUEFOUNDRY_MTLS_CERTS_DIR.
• 4137af1: Unify request-scoped RequestContext across standalone, OIDC, and TrueFoundry auth. /auth/me returns { data: { type, tenant_id, subject, roles } } (type is oidc-connected | default; OpenAPI/SDK regen deferred to CI).

Patch Changes

• d89b2ff: Persist zero-initialized metrics on agent sessions.
• 172bf14: Add caller-scoped session metrics meters, charts, and chart-data under /internal/metrics via a server-owned ISessionMetricsStore.
• d89b2ff: Fold session metrics totals on createTurn and terminal writes.
• af40621: Add persisted agent.metadata on Postgres and SQLite; store updateAgent can patch manifest and/or metadata.
• 1c67237: Add agent external_id (string | null on create) with a tenant-scoped partial unique index (Postgres and SQLite).
• 38abb11: Sync ServiceFoundry remote agents on create/update/delete and store the remote id in external_id. Filter listAgents by external_ids. Keep general ServiceFoundry HTTP at 10s and agent CRUD calls at 3s.
• 49360bc: Drop unused agent.metadata; remote identity is stored in external_id.
• 38abb11: Reject reserved agent names tfg and trueforge in create requests.
• 7968f59: Use injected db for TrueFoundryAgentStore advisory-lock transactions.
• a60f4c2: Add GET /api/v1/agents/{agent_id}/code-snippets with TypeScript TrueForge SDK stream and non-stream samples.
• 55cc5e7: Add a dedicated controller entry point (dist/controller-main.js) that runs the periodic control loops (schedule dispatch) as a single-replica process for distributed mode (STANDALONE=false). It targets the server API via the new SERVER_URL env (default http://localhost:$PORT). Standalone mode keeps running the controller inside the server process.
• 58940a7: Report a Daytona key that cannot register snapshots as missing key permissions (403) instead of an invalid API key (422), and name the grants to add in the Daytona dashboard.
• c40129c: Cap Daytona status-refresh calls at 1 minute so a stalled provider cannot hang request handlers.
• 9f3b4cd: Make optional VITE_BASE_PATH apply to both the UI public path and API/auth URLs (defaults to /).
• 80d5bee: Move resolveInvokeHeaders onto IMcpServerWithAuthStore (not IMcpServerStore) so DB backends stay CRUD-only and turn/MCP invoke paths take the request-scoped with-auth store for configured headers and TrueFoundry gateway Bearer.
• 541d65d: Split MCP server persistence (IMcpServerStore) from Connect UX auth (IMcpServerWithAuthStore / McpServerWithAuthStore) so DB backends stay CRUD + OAuth client columns while authorize/status/revoke compose in via a token store.
• c65b813: Apply POSTGRES_SSL_MODE as sslmode on the Postgres connection URL.
• f4fb4bd: Accept DATABASE_URL for hosted mode so managed Postgres (e.g. Railway) can be wired without discrete POSTGRES_* vars.
• a37cdea: Add NOT NULL agent_id on schedule (backfilled from agent), FK to agent(id) ON DELETE CASCADE (replacing the (tenant_id, agent_name) FK), and (tenant_id, agent_id) index for per-agent listing.
• 3bc2ed8: List schedules is token-paginated (limit / page_token) and filters by comma-separated agent_names.
• feb94aa: Add GET /api/v1/schedules/{schedule_id}/runs to list a schedule's runs (newest scheduled_for first), with the same creator-or-admin access as other schedule routes.
• 8e64757: Add POST /api/v1/schedules/runs to trigger an immediate schedule run
• 4ced8ef: Dispatch schedule runs through the session/turn API: get-or-create a session keyed by run id, then create a turn only when that session has none.
• 38ce068: Add tenant-unique optional session external_id, Sessions.getOrCreateByExternalId, and an idempotent POST /internal/sessions/get-or-create-by-external-id endpoint and SDK method.
• b654052: Add caller-owned session metadata (Record<string, string> with size limits) on create, update, and read. Persist as a new session.metadata jsonb column; leave session custom unchanged.
• 4c1260e: Wire TrueFoundry MCP authorize, status, and delete through ServiceFoundry; stub list auth_status; gate oauth2 invoke mid-turn with authRequired; paginate MCP server lists. UI treats SFY consent code/error on the FE landing like local DCR success/failure.
• 32bf7d6: TrueFoundry MCP invoke headers are owned by the MCP store (resolveInvokeHeaders), so gateway Bearer comes from the request-scoped store rather than being threaded through turn/tools APIs.
• 185dc04: Per-MCP-server request headers via x-tfg-mcp-headers, merged into the invoke headers for the named server. Lets a caller that authenticates as one identity give each MCP server the identity it should actually see.
• f175245: Add TrueFoundry-managed MCP list/get (SFY registry, gateway proxy URL, create/update 424).
• Updated dependencies [648273b]
• Updated dependencies [d89b2ff]
• Updated dependencies [648273b]
• Updated dependencies [172bf14]
• Updated dependencies [d89b2ff]
• Updated dependencies [9bfcdaa]
• Updated dependencies [c40129c]
• Updated dependencies [52987a7]
• Updated dependencies [38ce068]
• Updated dependencies [b654052]
• Updated dependencies [4c1260e]
• Updated dependencies [8f1a2dc]
• Updated dependencies [f175245]
  • @truefoundry/trueforge-sdk@0.1.4-rc.1
  • @truefoundry/trueforge-core@1.0.0-rc.1

@truefoundry/trueforge-core@1.0.0-rc.1

Major Changes

• 9bfcdaa: Replace string creator fields (created_by / triggered_by) with a non-null created_by_subject JSON object on agent, session, schedule, and schedule_run. Ownership and list filters use tenant_id + created_by_subject.subject_id.

Minor Changes

• 8f1a2dc: Add a TrueFoundry-managed model registry. When TRUEFOUNDRY_SERVICEFOUNDRY_SERVER_URL is set, models are listed from the TrueFoundry ServiceFoundry server and turns are routed through the tenant's default AI Gateway with the caller's token. Mutually exclusive with OIDC. Supports internal mutual TLS to the ServiceFoundry server via TRUEFOUNDRY_MTLS_ENABLED/TRUEFOUNDRY_MTLS_CERTS_DIR.

Patch Changes

• d89b2ff: Persist zero-initialized metrics on agent sessions.
• 172bf14: Add caller-scoped session metrics meters, charts, and chart-data under /internal/metrics via a server-owned ISessionMetricsStore.
• d89b2ff: Fold session metrics totals on createTurn and terminal writes.
• c40129c: Cap Daytona status-refresh calls at 1 minute so a stalled provider cannot hang request handlers.
• 38ce068: Add tenant-unique optional session external_id, Sessions.getOrCreateByExternalId, and an idempotent POST /internal/sessions/get-or-create-by-external-id endpoint and SDK method.
• b654052: Add caller-owned session metadata (Record<string, string> with size limits) on create, update, and read. Persist as a new session.metadata jsonb column; leave session custom unchanged.

@truefoundry/trueforge-ui@0.3.0-rc.1

Minor Changes

• d269b01: Add a live advanced agent configuration drawer with shared model, runtime, MCP tool, skill, and Save Agent editors.
• a189482: Add routed agent detail pages with lazy Overview, Sessions, and Use In Code tabs backed by the optional AgentSessionsServer port and built-in TrueForge adapter.
• 8491843: Add a slot-driven agent Metrics tab with aggregate cards, time-range filtering, and Harness-backed line charts.
• a189482: Add the agent library Sessions tab and an all-user Sessions sidebar page (including drafts) with agent and time filters, shareable query params, and the same two-pane timeline. Library agent details keep the active tab in ?tab= so opening an agent lands on Overview.
• 860e322: Split New Chat vs New Agent: simple chat keeps the Connectors/Skills picker; New Agent keeps Agent Config + Save Agent. Session metadata is_create_agent drives resume from the sessions browser.
• 0cc59f8: Wire schedule test runs and show last five run status chips on the schedules table. Bump @truefoundry/assistant-ui-runtime to 0.1.25.
• 0cc59f8: Add global Schedules page at /schedules with listing, popover-based filters, and create/edit drawer wired to the schedule API. New schedules save as paused, open a Test Schedule review with MCP connect status, and support Activate Anyway. List schedules uses server token pagination and multi-agent filters. Agents shows a Schedules count column (warning when any are paused) loaded via a batched list for on-screen agents. Add Table primitives with client-side and token pagination plus portal DropdownMenu so row actions are not clipped by overflow. Export a reusable popover select with single- and multi-select modes.
• 788636d: Sidebar layout is a permanent icon+label nav rail (no expand/collapse). Recent chats are hidden from the sidebar and mobile drawer; the drawer shows nav actions only.
• 8f1a2dc: Add a TrueFoundry-managed model registry. When TRUEFOUNDRY_SERVICEFOUNDRY_SERVER_URL is set, models are listed from the TrueFoundry ServiceFoundry server and turns are routed through the tenant's default AI Gateway with the caller's token. Mutually exclusive with OIDC. Supports internal mutual TLS to the ServiceFoundry server via TRUEFOUNDRY_MTLS_ENABLED/TRUEFOUNDRY_MTLS_CERTS_DIR.

Patch Changes

• 347a7e7: Refresh composer and composer-trigger styling: 0.75rem composer corners with a light-theme primary-token gradient hairline (faded top → solid bottom) and a neutral hairline in dark, an icon-only tools trigger in place of the "Tools" caption and count badge, the shared agent-2 glyph on the agents-library trigger, and squared-off chrome-action geometry on the save-agent trigger. Also fixes agent-2.svg to use currentColor so it is legible in dark mode.
• a189482: Load agent Use In Code snippets through client.internal.agents.getCodeSnippets instead of a raw client.fetch.
• c4ee138: Agent list and details overflow menu: Edit, Clone ({name}-copy via saveAgent), Manage Schedules, and Delete (wired through harness deleteAgent).
• c4ee138: AgentSessions list pane uses a quieter surface, and the resize grip stays gray until hover, press, or focus.
• c4ee138: Agent Code (SyntaxHighlighter / AgentCodeBlock) copy control uses the bordered secondary button, and a trailing source newline no longer paints an empty last line while Copy still keeps the exact source.
• c4ee138: Agents, Sessions, and Schedules empty states use a shared centered empty-box screen with title and supporting copy.
• 0cc59f8: Use Google Sans as the default trueforge theme font and load it from Google Fonts when styles are injected.
• 64ca089: Hide Clear chat while the thread is fresh (New Chat, New Agent, and Try Agent) since there is nothing to clear.
• 64ca089: Add a book-icon preload toggle and dashed add button to Agent Config MCP server pills.
• d269b01: Improve MCP and skill selectors with consistent search sizing, explicit MCP selection controls, grouped tool summaries, and removable MCP chips.
• 64ca089: Revamp the MCP tools selector modal with focus rows, connect empty state, and grouped selected-tools summary.
• c4ee138: Resume Chat / Resume Agent building opens in a new tab when routed (/sessions/:id + square-arrow-out-up-right); without a router it keeps the in-shell resume fallback.
• 788636d: Open the create schedule drawer when Agents "+ Schedule" navigates with isNew=true, then clear the flag from the URL.
• 333230d: Improve Agent Sessions with a resizable divider, accurate turn grouping, optional cost display, and reliable timeline tooltips with sub-agent details. Simplify schedule recurrence and default new schedules to the local timezone.
• c4ee138: Unregister the /settings route when Settings chrome is unavailable (no catalog or capabilities.settings.enabled is false), matching the sidebar Settings button gate.
• c4ee138: Split New Chat and New Agent draft preference stores. New Chat remembers only model (+ reasoning), skills, and MCP; New Agent keeps the full seed including runtime config.
• 4c1260e: Wire TrueFoundry MCP authorize, status, and delete through ServiceFoundry; stub list auth_status; gate oauth2 invoke mid-turn with authRequired; paginate MCP server lists. UI treats SFY consent code/error on the FE landing like local DCR success/failure.
• c4ee138: Per-turn Tokens in Agent Sessions shows a keyboard-accessible Input / Output / Cached tooltip (Input is uncached).
• Updated dependencies [648273b]
• Updated dependencies [648273b]
• Updated dependencies [52987a7]
• Updated dependencies [38ce068]
• Updated dependencies [b654052]
• Updated dependencies [4c1260e]
• Updated dependencies [f175245]
  • @truefoundry/trueforge-sdk@0.1.4-rc.1

@truefoundry/trueforge-sdk@0.1.4-rc.1

Patch Changes

• 648273b: Regenerate SDK from updated OpenAPI spec.
• 648273b: Regenerate SDK from updated OpenAPI spec.
• 52987a7: Add internal.agents.getCodeSnippets API under the new SDK internal namespace.
• 38ce068: Add tenant-unique optional session external_id, Sessions.getOrCreateByExternalId, and an idempotent POST /internal/sessions/get-or-create-by-external-id endpoint and SDK method.
• b654052: Add caller-owned session metadata (Record<string, string> with size limits) on create, update, and read. Persist as a new session.metadata jsonb column; leave session custom unchanged.
• 4c1260e: Wire TrueFoundry MCP authorize, status, and delete through ServiceFoundry; stub list auth_status; gate oauth2 invoke mid-turn with authRequired; paginate MCP server lists. UI treats SFY consent code/error on the FE landing like local DCR success/failure.
• f175245: Add TrueFoundry-managed MCP list/get (SFY registry, gateway proxy URL, create/update 424).

---

Note

High Risk
Merging triggers npm prereleases that bundle a major API/schema break (created_by_subject), database migrations, and auth/scheduling/TrueFoundry integration changes already on main—not just version string edits.

Overview
Changesets release PR that bumps published package versions and refreshes release notes for the current rc pre-mode line—no new runtime logic in the diff itself.

Versions: @truefoundry/trueforge and @truefoundry/trueforge-core go 1.0.0-rc.1 (from 0.2.0-rc.0); @truefoundry/trueforge-ui 0.3.0-rc.1; @truefoundry/trueforge-sdk 0.1.4-rc.1. OpenAPI info.version in docs/openapi.json and .github/fern/openapi/openapi.json matches 1.0.0-rc.1, and SDK User-Agent / X-Fern-SDK-Version strings are updated to 0.1.4-rc.1.

What merging publishes (from updated CHANGELOGs): a breaking swap from string created_by / triggered_by to required created_by_subject JSON for ownership and filters; cron schedules API and controller dispatch; TrueFoundry ServiceFoundry model registry and managed MCP; session external_id, metadata, and metrics APIs; unified RequestContext / /auth/me; Postgres trueforge schema migration; and a large UI pass (agent detail tabs, schedules page, sessions browser, metrics tab, nav rail). SDK changelog notes regen plus internal.agents.getCodeSnippets and related session/MCP client methods.

^{Reviewed by Cursor Bugbot for commit b6511c3. Bugbot is set up for automated code reviews on this repo. Configure here.}