Feat/sandbox node22

[AndersonVitaease]

Summary

Adds Node.js 22 and bundled npm to the TrueForge Daytona sandbox image.

The sandbox currently uses python:3.13-slim-bookworm and does not include Node.js/npm. This change adds Node.js 22 through NodeSource while preserving the existing Python 3.13 base and sandbox tooling.

Changes

• Add Node.js 22 LTS installation via NodeSource.
• Install the bundled npm runtime.
• Validate node --version and npm --version during image build.
• Keep python:3.13-slim-bookworm as the base image.
• No changes to Helm, NATS, supervisord, ENTRYPOINT, or sandboxImage.json.

How was this tested?

The modified sandbox image was built and validated in an isolated environment.

Validated runtime:

• Python 3.13.15
• Node.js v22.23.2
• npm 10.9.8
• Git 2.39.5
• ripgrep 13.0.0
• supervisord 4.2.5

NATS configuration and the existing sandbox entrypoint were also verified as present.

The full TrueForge test suite was not run successfully in the validation environment, so this PR does not claim that the complete project test suite passes locally.

Checklist

• I have read the contributing guidelines
• pnpm build, pnpm test, pnpm typecheck, pnpm lint:ci, and pnpm format:check pass locally
• Tests added/updated where it makes sense
• No hand-edits to generated code (packages/trueforge-sdk, .github/fern/openapi/openapi.json, docs/openapi.json)
• Docs / .env.example updated if configuration or behaviour changed

---

Note

Low Risk
Scope is limited to the sandbox container build; no application auth, API, or runtime logic changes in this diff.

Overview
The TrueForge Daytona sandbox Docker image now ships Node.js 22 LTS and npm, installed via NodeSource during the existing apt-get layer on the unchanged python:3.13-slim-bookworm base.

The build runs node --version and npm --version so a broken install fails the image build. Helm, NATS, supervisord, and other sandbox packages are untouched.

^{Reviewed by Cursor Bugbot for commit ff48d20. Bugbot is set up for automated code reviews on this repo. Configure here.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: ff48d20

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Want higher recall? High effort reviews run extra passes and find more bugs. A team admin can switch effort levels in the Cursor dashboard.

^{Reviewed by Cursor Bugbot for commit 11ef887. Configure here.}