chore(foundry): improve sandbox impl + status pill (#252)

* Improve Daytona sandbox provisioning and frontend UI

Refactor git clone script in Daytona provider to use cleaner shell logic for GitHub token authentication and branch checkout. Add support for private repository clones with token-based auth. Improve Daytona provider error handling and git configuration setup.

Frontend improvements include enhanced dev panel, workspace dashboard, sidebar navigation, and UI components for better task/session management. Update interest manager and backend client to support improved session state handling.

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>

* Add header status pill showing task/session/sandbox state

Surface aggregate status (error, provisioning, running, ready, no sandbox)
as a colored pill in the transcript panel header. Integrates task runtime
status, session status, and sandbox availability via the sandboxProcesses
interest topic so the pill accurately reflects unreachable sandboxes.

Includes mock tasks demonstrating error, provisioning, and running states,
unit tests for deriveHeaderStatus, and workspace-dashboard integration.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Haiku 4.5 <noreply@anthropic.com>

foundry/packages/client/src/workbench-model.ts

@@ -26,8 +26,12 @@ export const MODEL_GROUPS: ModelGroup[] = [
   {
     provider: "OpenAI",
     models: [
-      { id: "gpt-4o", label: "GPT-4o" },
-      { id: "o3", label: "o3" },
+      { id: "gpt-5.3-codex", label: "GPT-5.3 Codex" },
+      { id: "gpt-5.4", label: "GPT-5.4" },
+      { id: "gpt-5.2-codex", label: "GPT-5.2 Codex" },
+      { id: "gpt-5.1-codex-max", label: "GPT-5.1 Codex Max" },
+      { id: "gpt-5.2", label: "GPT-5.2" },
+      { id: "gpt-5.1-codex-mini", label: "GPT-5.1 Codex Mini" },
     ],
   },
 ];
@@ -334,7 +338,7 @@ export function buildInitialTasks(): Task[] {
           sessionId: "t2",
           sessionName: "Test coverage",
           agent: "Codex",
-          model: "gpt-4o",
+          model: "gpt-5.3-codex",
           status: "idle",
           thinkingSinceMs: null,
           unread: true,
@@ -1083,7 +1087,7 @@ export function buildInitialTasks(): Task[] {
           sessionId: "t10",
           sessionName: "Namespace fix",
           agent: "Codex",
-          model: "gpt-4o",
+          model: "gpt-5.3-codex",
           status: "idle",
           thinkingSinceMs: null,
           unread: true,
@@ -1120,6 +1124,109 @@ export function buildInitialTasks(): Task[] {
       fileTree: [],
       minutesUsed: 3,
     },
+
+    // ── Status demo tasks ──────────────────────────────────────────────
+    {
+      id: "status-error",
+      repoId: "sandbox-agent",
+      title: "Fix broken auth middleware (error demo)",
+      status: "error",
+      runtimeStatus: "error",
+      statusMessage: "session:error",
+      repoName: "rivet-dev/sandbox-agent",
+      updatedAtMs: minutesAgo(2),
+      branch: "fix/auth-middleware",
+      pullRequest: null,
+      tabs: [
+        {
+          id: "status-error-tab",
+          sessionId: "status-error-session",
+          sessionName: "Auth fix",
+          agent: "Claude",
+          model: "claude-sonnet-4",
+          status: "error",
+          thinkingSinceMs: null,
+          unread: false,
+          created: true,
+          errorMessage: "Sandbox process exited unexpectedly (exit code 137). The sandbox may have run out of memory.",
+          draft: { text: "", attachments: [], updatedAtMs: null },
+          transcript: [],
+        },
+      ],
+      fileChanges: [],
+      diffs: {},
+      fileTree: [],
+      minutesUsed: 1,
+    },
+    {
+      id: "status-provisioning",
+      repoId: "sandbox-agent",
+      title: "Add rate limiting to API gateway (provisioning demo)",
+      status: "new",
+      runtimeStatus: "init_enqueue_provision",
+      statusMessage: "Queueing sandbox provisioning.",
+      repoName: "rivet-dev/sandbox-agent",
+      updatedAtMs: minutesAgo(0),
+      branch: null,
+      pullRequest: null,
+      tabs: [
+        {
+          id: "status-prov-tab",
+          sessionId: null,
+          sessionName: "Session 1",
+          agent: "Claude",
+          model: "claude-sonnet-4",
+          status: "pending_provision",
+          thinkingSinceMs: null,
+          unread: false,
+          created: false,
+          draft: { text: "", attachments: [], updatedAtMs: null },
+          transcript: [],
+        },
+      ],
+      fileChanges: [],
+      diffs: {},
+      fileTree: [],
+      minutesUsed: 0,
+    },
+    {
+      id: "status-running",
+      repoId: "sandbox-agent",
+      title: "Refactor WebSocket handler (running demo)",
+      status: "running",
+      runtimeStatus: "running",
+      repoName: "rivet-dev/sandbox-agent",
+      updatedAtMs: minutesAgo(1),
+      branch: "refactor/ws-handler",
+      pullRequest: null,
+      tabs: [
+        {
+          id: "status-run-tab",
+          sessionId: "status-run-session",
+          sessionName: "WS refactor",
+          agent: "Codex",
+          model: "gpt-5.3-codex",
+          status: "running",
+          thinkingSinceMs: Date.now() - 12_000,
+          unread: false,
+          created: true,
+          draft: { text: "", attachments: [], updatedAtMs: null },
+          transcript: transcriptFromLegacyMessages("status-run-tab", [
+            {
+              id: "sr1",
+              role: "user",
+              agent: null,
+              createdAtMs: minutesAgo(3),
+              lines: ["Refactor the WebSocket handler to use a connection pool pattern."],
+            },
+          ]),
+        },
+      ],
+      fileChanges: [],
+      diffs: {},
+      fileTree: [],
+      minutesUsed: 2,
+    },
   ];
 }