Improve Daytona sandbox provisioning and frontend UI

Refactor git clone script in Daytona provider to use cleaner shell logic for GitHub token authentication and branch checkout. Add support for private repository clones with token-based auth. Improve Daytona provider error handling and git configuration setup.

Frontend improvements include enhanced dev panel, workspace dashboard, sidebar navigation, and UI components for better task/session management. Update interest manager and backend client to support improved session state handling.

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>

foundry/packages/backend/src/actors/project/actions.ts

@@ -437,7 +437,6 @@ async function hydrateTaskIndexMutation(c: any, _cmd?: HydrateTaskIndexCommand):
 }
 
 async function createTaskMutation(c: any, cmd: CreateTaskCommand): Promise<TaskRecord> {
-  const localPath = await ensureProjectReady(c);
   const onBranch = cmd.onBranch?.trim() || null;
   const initialBranchName = onBranch;
   const initialTitle = onBranch ? deriveFallbackTitle(cmd.task, cmd.explicitTitle ?? undefined) : null;
@@ -463,7 +462,6 @@ async function createTaskMutation(c: any, cmd: CreateTaskCommand): Promise<TaskR
       repoId: c.state.repoId,
       taskId,
       repoRemote: c.state.remoteUrl,
-      repoLocalPath: localPath,
       branchName: initialBranchName,
       title: initialTitle,
       task: cmd.task,
@@ -954,7 +952,7 @@ export async function runProjectWorkflow(ctx: any): Promise<void> {
     if (msg.name === "project.command.createTask") {
       const result = await loopCtx.step({
         name: "project-create-task",
-        timeout: 12 * 60_000,
+        timeout: 60_000,
         run: async () => createTaskMutation(loopCtx, msg.body as CreateTaskCommand),
       });
       await msg.complete(result);
@@ -1020,7 +1018,7 @@ export const projectActions = {
     return expectQueueResponse<TaskRecord>(
       await self.send(projectWorkflowQueueName("project.command.createTask"), cmd, {
         wait: true,
-        timeout: 12 * 60_000,
+        timeout: 60_000,
       }),
     );
   },

foundry/packages/backend/src/actors/task/index.ts

@@ -41,7 +41,7 @@ export interface TaskInput {
   repoId: string;
   taskId: string;
   repoRemote: string;
-  repoLocalPath: string;
+  repoLocalPath?: string;
   branchName: string | null;
   title: string | null;
   task: string;

foundry/packages/backend/src/actors/task/workbench.ts

@@ -7,7 +7,6 @@ import { getOrCreateTaskStatusSync, getOrCreateProject, getOrCreateWorkspace, ge
 import { resolveWorkspaceGithubAuth } from "../../services/github-auth.js";
 import { task as taskTable, taskRuntime, taskWorkbenchSessions } from "./db/schema.js";
 import { getCurrentRecord } from "./workflow/common.js";
-import { taskWorkflowQueueName } from "./workflow/queue.js";
 
 const STATUS_SYNC_INTERVAL_MS = 1_000;
 
@@ -599,7 +598,13 @@ export async function ensureWorkbenchSeeded(c: any): Promise<any> {
 function buildSessionSummary(record: any, meta: any): any {
   const derivedSandboxSessionId = meta.sandboxSessionId ?? (meta.status === "pending_provision" && record.activeSessionId ? record.activeSessionId : null);
   const sessionStatus =
-    meta.status === "ready" && derivedSandboxSessionId ? activeSessionStatus(record, derivedSandboxSessionId) : meta.status === "error" ? "error" : "idle";
+    meta.status === "pending_provision" || meta.status === "pending_session_create"
+      ? meta.status
+      : meta.status === "ready" && derivedSandboxSessionId
+        ? activeSessionStatus(record, derivedSandboxSessionId)
+        : meta.status === "error"
+          ? "error"
+          : "ready";
   let thinkingSinceMs = meta.thinkingSinceMs ?? null;
   let unread = Boolean(meta.unread);
   if (thinkingSinceMs && sessionStatus !== "running") {
@@ -617,6 +622,7 @@ function buildSessionSummary(record: any, meta: any): any {
     thinkingSinceMs: sessionStatus === "running" ? thinkingSinceMs : null,
     unread,
     created: Boolean(meta.created || derivedSandboxSessionId),
+    errorMessage: meta.errorMessage ?? null,
   };
 }
 
@@ -633,6 +639,7 @@ function buildSessionDetailFromMeta(record: any, meta: any): any {
     thinkingSinceMs: summary.thinkingSinceMs,
     unread: summary.unread,
     created: summary.created,
+    errorMessage: summary.errorMessage,
     draft: {
       text: meta.draftText ?? "",
       attachments: Array.isArray(meta.draftAttachments) ? meta.draftAttachments : [],
@@ -655,7 +662,7 @@ export async function buildTaskSummary(c: any): Promise<any> {
     id: c.state.taskId,
     repoId: c.state.repoId,
     title: record.title ?? "New Task",
-    status: record.status === "archived" ? "archived" : record.status === "running" ? "running" : record.status === "idle" ? "idle" : "new",
+    status: record.status ?? "new",
     repoName: repoLabelFromRemote(c.state.repoRemote),
     updatedAtMs: record.updatedAt,
     branch: record.branchName,
@@ -837,14 +844,6 @@ export async function renameWorkbenchBranch(c: any, value: string): Promise<void
 
 export async function createWorkbenchSession(c: any, model?: string): Promise<{ tabId: string }> {
   let record = await ensureWorkbenchSeeded(c);
-  if (!record.activeSandboxId) {
-    // Fire-and-forget: enqueue provisioning without waiting to avoid self-deadlock
-    // (this handler already runs inside the task workflow loop, so wait:true would deadlock).
-    const providerId = record.providerId ?? c.state.providerId ?? getActorRuntimeContext().providers.defaultProviderId();
-    await selfTask(c).send(taskWorkflowQueueName("task.command.provision"), { providerId }, { wait: false });
-    throw new Error("sandbox is provisioning — retry shortly");
-  }
-
   if (record.activeSessionId) {
     const existingSessions = await listSessionMetaRows(c);
     if (existingSessions.length === 0) {
@@ -1216,9 +1215,16 @@ export async function publishWorkbenchPr(c: any): Promise<void> {
   if (!record.branchName) {
     throw new Error("cannot publish PR without a branch");
   }
+  let repoLocalPath = c.state.repoLocalPath;
+  if (!repoLocalPath) {
+    const project = await getOrCreateProject(c, c.state.workspaceId, c.state.repoId, c.state.repoRemote);
+    const result = await project.ensure({ remoteUrl: c.state.repoRemote });
+    repoLocalPath = result.localPath;
+    c.state.repoLocalPath = repoLocalPath;
+  }
   const { driver } = getActorRuntimeContext();
   const auth = await resolveWorkspaceGithubAuth(c, c.state.workspaceId);
-  const created = await driver.github.createPr(c.state.repoLocalPath, record.branchName, record.title ?? c.state.task, undefined, {
+  const created = await driver.github.createPr(repoLocalPath, record.branchName, record.title ?? c.state.task, undefined, {
     githubToken: auth?.githubToken ?? null,
   });
   await c.db

foundry/packages/backend/src/actors/task/workflow/index.ts

@@ -76,6 +76,7 @@ const commandHandlers: Record<TaskQueueName, WorkflowHandler> = {
   "task.command.provision": async (loopCtx, msg) => {
     const body = msg.body;
     await loopCtx.removed("init-failed", "step");
+    await loopCtx.removed("init-failed-v2", "step");
     try {
       await loopCtx.step("init-ensure-name", async () => initEnsureNameActivity(loopCtx));
       await loopCtx.step("init-assert-name", async () => initAssertNameActivity(loopCtx));
@@ -107,7 +108,7 @@ const commandHandlers: Record<TaskQueueName, WorkflowHandler> = {
       await loopCtx.step("init-complete", async () => initCompleteActivity(loopCtx, body, sandbox, session));
       await msg.complete({ ok: true });
     } catch (error) {
-      await loopCtx.step("init-failed-v2", async () => initFailedActivity(loopCtx, error));
+      await loopCtx.step("init-failed-v3", async () => initFailedActivity(loopCtx, error));
       await msg.complete({
         ok: false,
         error: resolveErrorMessage(error),

foundry/packages/backend/src/actors/task/workflow/init.ts

@@ -178,8 +178,16 @@ export async function initEnsureNameActivity(loopCtx: any): Promise<void> {
 
   const { driver } = getActorRuntimeContext();
   const auth = await resolveWorkspaceGithubAuth(loopCtx, loopCtx.state.workspaceId);
+  let repoLocalPath = loopCtx.state.repoLocalPath;
+  if (!repoLocalPath) {
+    const project = await getOrCreateProject(loopCtx, loopCtx.state.workspaceId, loopCtx.state.repoId, loopCtx.state.repoRemote);
+    const result = await project.ensure({ remoteUrl: loopCtx.state.repoRemote });
+    repoLocalPath = result.localPath;
+    loopCtx.state.repoLocalPath = repoLocalPath;
+  }
+
   try {
-    await driver.git.fetch(loopCtx.state.repoLocalPath, { githubToken: auth?.githubToken ?? null });
+    await driver.git.fetch(repoLocalPath, { githubToken: auth?.githubToken ?? null });
   } catch (error) {
     logActorWarning("task.init", "fetch before naming failed", {
       workspaceId: loopCtx.state.workspaceId,
@@ -188,7 +196,7 @@ export async function initEnsureNameActivity(loopCtx: any): Promise<void> {
       error: resolveErrorMessage(error),
     });
   }
-  const remoteBranches = (await driver.git.listRemoteBranches(loopCtx.state.repoLocalPath, { githubToken: auth?.githubToken ?? null })).map(
+  const remoteBranches = (await driver.git.listRemoteBranches(repoLocalPath, { githubToken: auth?.githubToken ?? null })).map(
     (branch: any) => branch.branchName,
   );
 

foundry/packages/backend/src/actors/workspace/actions.ts

@@ -370,7 +370,6 @@ async function createTaskMutation(c: any, input: CreateTaskInput): Promise<TaskR
     .run();
 
   const project = await getOrCreateProject(c, c.state.workspaceId, repoId, remoteUrl);
-  await project.ensure({ remoteUrl });
 
   const created = await project.createTask({
     task: input.task,
@@ -457,7 +456,7 @@ export async function runWorkspaceWorkflow(ctx: any): Promise<void> {
     if (msg.name === "workspace.command.createTask") {
       const result = await loopCtx.step({
         name: "workspace-create-task",
-        timeout: 12 * 60_000,
+        timeout: 60_000,
         run: async () => createTaskMutation(loopCtx, msg.body as CreateTaskInput),
       });
       await msg.complete(result);
@@ -547,7 +546,7 @@ export const workspaceActions = {
     return expectQueueResponse<TaskRecord>(
       await self.send(workspaceWorkflowQueueName("workspace.command.createTask"), input, {
         wait: true,
-        timeout: 12 * 60_000,
+        timeout: 60_000,
       }),
     );
   },