feat: add release pipeline for crates.io and npm publishing

- Add --check, --publish-crates, --publish-npm-sdk, --publish-npm-cli flags to release script
- Create CI workflow with pre-release checks (cargo fmt, clippy, test, tsc)
- Update release workflow to run checks, build binaries, and publish packages
- Add @sandbox-agent/cli npm package with platform-specific binaries (esbuild pattern)
- Configure TypeScript SDK for npm publishing (exports, files, types)
- Add crates.io metadata to Cargo.toml (repository, description)
- Rename @sandbox-agent/web to @sandbox-agent/inspector

Author: NathanFlurry

.github/workflows/ci.yaml

@@ -0,0 +1,25 @@
+name: ci
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_call:
+
+jobs:
+  checks:
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          components: rustfmt, clippy
+      - uses: Swatinem/rust-cache@v2
+      - uses: pnpm/action-setup@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: pnpm
+      - run: pnpm install
+      - name: Run checks
+        run: ./scripts/release/main.ts --version 0.0.0 --check

.github/workflows/release.yaml

@@ -18,8 +18,12 @@ env:
   CARGO_INCREMENTAL: 0
 
 jobs:
+  checks:
+    uses: ./.github/workflows/ci.yaml
+
   setup:
     name: "Setup"
+    needs: [checks]
     runs-on: ubuntu-24.04
     outputs:
       version: ${{ steps.vars.outputs.version }}
@@ -54,7 +58,7 @@ jobs:
           ./scripts/release/main.ts --version "${{ steps.vars.outputs.version }}" --print-latest --output "$GITHUB_OUTPUT"
 
   binaries:
-    name: "Build & Upload Binaries"
+    name: "Build Binaries"
     needs: [setup]
     strategy:
       matrix:
@@ -89,42 +93,58 @@ jobs:
           docker/release/build.sh ${{ matrix.target }}
           ls -la dist/
 
-      - name: Install AWS CLI
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y unzip curl
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: binary-${{ matrix.target }}
+          path: dist/sandbox-agent-${{ matrix.target }}${{ matrix.binary_ext }}
 
-          curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
-          unzip awscliv2.zip
-          sudo ./aws/install --update
+  publish:
+    name: "Publish Packages"
+    needs: [setup, binaries]
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: dtolnay/rust-toolchain@stable
+
+      - uses: pnpm/action-setup@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          registry-url: 'https://registry.npmjs.org'
+          cache: pnpm
+
+      - name: Install tsx
+        run: npm install -g tsx
+
+      - name: Download binaries
+        uses: actions/download-artifact@v4
+        with:
+          path: dist/
+          pattern: binary-*
+          merge-multiple: true
+
+      - name: List downloaded binaries
+        run: ls -la dist/
 
-      - name: Upload binaries
+      - name: Publish all
         env:
-          AWS_ACCESS_KEY_ID: ${{ secrets.R2_RELEASES_ACCESS_KEY_ID }}
-          AWS_SECRET_ACCESS_KEY: ${{ secrets.R2_RELEASES_SECRET_ACCESS_KEY }}
+          CARGO_REGISTRY_TOKEN: ${{ secrets.CRATES_IO_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
           VERSION="${{ needs.setup.outputs.version }}"
-          BINARY_NAME="sandbox-agent-${{ matrix.target }}${{ matrix.binary_ext }}"
-
-          aws s3 cp \
-            "dist/${BINARY_NAME}" \
-            "s3://rivet-releases/sandbox-agent/${VERSION}/${BINARY_NAME}" \
-            --region auto \
-            --endpoint-url https://2a94c6a0ced8d35ea63cddc86c2681e7.r2.cloudflarestorage.com \
-            --checksum-algorithm CRC32
-
-          if [ "${{ needs.setup.outputs.latest }}" = "true" ]; then
-            aws s3 cp \
-              "dist/${BINARY_NAME}" \
-              "s3://rivet-releases/sandbox-agent/latest/${BINARY_NAME}" \
-              --region auto \
-              --endpoint-url https://2a94c6a0ced8d35ea63cddc86c2681e7.r2.cloudflarestorage.com \
-              --checksum-algorithm CRC32
-          fi
+          ./scripts/release/main.ts --version "$VERSION" \
+            --publish-crates \
+            --publish-npm-sdk \
+            --publish-npm-cli
 
   artifacts:
-    name: "TypeScript + Install Script"
-    needs: [setup]
+    name: "Upload Artifacts"
+    needs: [setup, binaries]
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
@@ -147,7 +167,17 @@ jobs:
           unzip awscliv2.zip
           sudo ./aws/install --update
 
-      - name: Upload TypeScript artifacts and install script
+      - name: Download binaries
+        uses: actions/download-artifact@v4
+        with:
+          path: dist/
+          pattern: binary-*
+          merge-multiple: true
+
+      - name: List downloaded binaries
+        run: ls -la dist/
+
+      - name: Upload artifacts
         env:
           R2_RELEASES_ACCESS_KEY_ID: ${{ secrets.R2_RELEASES_ACCESS_KEY_ID }}
           R2_RELEASES_SECRET_ACCESS_KEY: ${{ secrets.R2_RELEASES_SECRET_ACCESS_KEY }}
@@ -159,4 +189,7 @@ jobs:
             LATEST_FLAG="--no-latest"
           fi
 
-          ./scripts/release/main.ts --version "$VERSION" $LATEST_FLAG --upload-typescript --upload-install
+          ./scripts/release/main.ts --version "$VERSION" $LATEST_FLAG \
+            --upload-typescript \
+            --upload-install \
+            --upload-binaries

CLAUDE.md

@@ -41,7 +41,7 @@ Universal schema guidance:
 
 ### Default port references (update when CLI default changes)
 
-- `frontend/packages/web/src/App.tsx`
+- `frontend/packages/inspector/src/App.tsx`
 - `README.md`
 - `docs/cli.mdx`
 - `docs/frontend.mdx`

CONTRIBUTING.md

@@ -25,6 +25,6 @@ eval "$(sandbox-agent credentials extract-env --export)"
 Run the web console (includes all dependencies):
 
 ```bash
-pnpm dev -F @sandbox-agent/web
+pnpm dev -F @sandbox-agent/inspector
 ```
 

Cargo.toml

@@ -7,3 +7,5 @@ version = "0.1.0"
 edition = "2021"
 authors = ["Sandbox Agent Contributors"]
 license = "Apache-2.0"
+repository = "https://github.com/rivet-dev/sandbox-agent"
+description = "Universal agent API for AI coding assistants"

docs/frontend.mdx

@@ -3,13 +3,13 @@ title: "Frontend Demo"
 description: "Run the Vite + React UI for testing the daemon."
 ---
 
-The demo frontend lives at `frontend/packages/web`.
+The demo frontend lives at `frontend/packages/inspector`.
 
 ## Run locally
 
 ```bash
 pnpm install
-pnpm --filter @sandbox-agent/web dev
+pnpm --filter @sandbox-agent/inspector dev
 ```
 
 The UI expects:

frontend/packages/web/Dockerfile frontend/packages/inspector/Dockerfilefrontend/packages/web/Dockerfile renamed to frontend/packages/inspector/Dockerfile

@@ -4,26 +4,26 @@ RUN npm install -g pnpm
 
 # Copy package files for all workspaces
 COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
-COPY frontend/packages/web/package.json ./frontend/packages/web/
+COPY frontend/packages/inspector/package.json ./frontend/packages/inspector/
 COPY sdks/typescript/package.json ./sdks/typescript/
 
 # Install dependencies
-RUN pnpm install --filter @sandbox-agent/web...
+RUN pnpm install --filter @sandbox-agent/inspector...
 
 # Copy SDK source (with pre-generated types)
 COPY sdks/typescript ./sdks/typescript
 
 # Build SDK (just tsc, skip generate since types are pre-generated)
 RUN cd sdks/typescript && pnpm exec tsc -p tsconfig.json
 
-# Copy web source
-COPY frontend/packages/web ./frontend/packages/web
+# Copy inspector source
+COPY frontend/packages/inspector ./frontend/packages/inspector
 
-# Build web
-RUN cd frontend/packages/web && pnpm exec vite build
+# Build inspector
+RUN cd frontend/packages/inspector && pnpm exec vite build
 
 FROM caddy:alpine
-COPY --from=build /app/frontend/packages/web/dist /srv
+COPY --from=build /app/frontend/packages/inspector/dist /srv
 RUN cat > /etc/caddy/Caddyfile <<'EOF'
 :80 {
 	root * /srv

frontend/packages/web/index.html frontend/packages/inspector/index.htmlfrontend/packages/web/index.html renamed to frontend/packages/inspector/index.html

@@ -1,5 +1,5 @@
 {
-  "name": "@sandbox-agent/web",
+  "name": "@sandbox-agent/inspector",
   "private": true,
   "version": "0.0.0",
   "license": "Apache-2.0",