Update both SDKs, docs, examples, and test scripts.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Rebrand from opensandbox.ai to opencomputer.dev

Preview URLs are now created explicitly via the SDK (createPreviewURL/
getPreviewURL/deletePreviewURL) rather than auto-assigned on sandbox
creation. Each preview URL registers a Cloudflare custom hostname
(e.g. sb-xxx.openlovable.cc) for per-sandbox routing through the org's
verified custom domain.

Key changes:
- DB migrations for org custom domains and sandbox_preview_urls table
- Cloudflare client for custom hostname CRUD and domain verification
- API endpoints: POST/GET/DELETE /api/sandboxes/:id/preview
- Dashboard UI for custom domain setup with DNS verification flow
- Proxy routing: both SandboxProxy and ControlPlaneProxy resolve
  custom hostnames via DB lookup fallback
- ControlPlaneProxy rewrites Host header to {sandboxID}.{baseDomain}
  so workers can match custom domain requests
- Auto-cleanup of preview URLs on sandbox kill
- TypeScript and Python SDK methods for preview URL management

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Remove automatic domain routing from sandboxes. Preview URLs are now the
only way to get HTTP access, each targeting a specific port. Hostname
format {sandboxID}-p{port}.{baseDomain} lets the proxy parse sandbox ID
and port directly — zero DB lookups on the hot path.

- Add DB migration for port column + unique constraint
- Add ContainerAddr to Manager interface (Podman + Firecracker)
- Rewrite proxy to parse hostname instead of DB lookup
- Add friendly HTML placeholder page for upstream unavailable (auto-refresh)
- Update API handlers: create/list/delete preview URLs by port
- Update dashboard, SDKs (TypeScript + Python), and types

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

When an org has a custom domain configured, the dashboard now shows
preview URLs using the custom domain (e.g. sb-xxx-p3000.openlovable.cc)
as the primary link, with a collapsible "Internal URLs" section showing
the base domain URLs underneath.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Add on-demand preview URLs with custom domains

- deploy-server: builds Go server + web dashboard, deploys to control plane via SSH
- deploy-worker: builds worker + agent binaries (arm64), deploys to worker via SSH
- publish-ts-sdk: publishes @opencomputer/sdk to npm on ts-sdk-v* tags
- publish-python-sdk: publishes opencomputer-sdk to PyPI on py-sdk-v* tags via trusted publisher

All server IPs stored as GitHub secrets (SERVER_IP, WORKER_IP).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Add CI/CD pipelines for server, worker, and SDK publishing

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

npm provenance verification requires repository.url to match the actual
GitHub repo (diggerhq/opencomputer, not the old opensandbox name).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Publishes automatically when sdks/typescript/ or sdks/python/ change on
main (i.e. after PR merge). Skips publish if the version already exists
on the registry to avoid failures on non-version-bump changes.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Switch SDK publish triggers from tags to push-to-main with path filters

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Updated project name and description, added documentation link.

- createPreviewURL returns existing URL (200) instead of 409 when one already exists for the port
- Add optional `domain` field to creation request; validates it matches the org's verified custom domain and registers with Cloudflare
- Include `customHostname` in create/list responses when the org has a custom domain
- Update TypeScript and Python SDKs with `domain` parameter and `customHostname` field
- Update test-preview-urls.ts to cover idempotent creation and custom domain flows

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

…custom-domains

Make preview URL creation idempotent and add custom domain support

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

…sions

Switches from bundler to nodenext moduleResolution so emitted JS includes
explicit .js extensions, fixing module resolution errors for Node.js ESM
consumers. Bumps TypeScript SDK to 0.5.7.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Adds a new "default" Dockerfile that bundles Python 3, Node.js 20 LTS,
build-essential, git, and common utilities into a single rootfs image.
Updates build-rootfs.sh to support the new "default" target and adds a
migration to seed the template in the database.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Add default template image with Python 3, Node.js 20, and build tools

The migration file was added but not registered in the hardcoded
migrations slice, so it was never applied on server startup.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

- Update all docs to reference "default" template instead of "base"
- Add TypeScript and Python test scripts for default template verification
- Add deploy/ec2/deploy-rootfs.sh for pipeline-friendly rootfs image builds
- Add guides section with build-a-lovable-clone guide

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Add coming-soon items: custom base images via SSH snapshots,
private link sharing, and no-private-sharing limitation.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

https://claude.ai/code/session_014Q55op1XjFH9LZqKRQZwkj

more debugging

…sers (#84)

Implements usage-based billing via Stripe Billing Meters:
- Free tier: 1 sandbox, 4GB/1vCPU only, no card required
- Pro tier: all tiers, 5 concurrent, per-second billing via Stripe
- Upgrade flow: Stripe Checkout → subscription with 5 metered prices → $30 credit
- Usage reporter sends meter events to Stripe every 5 min
- Stripe handles invoicing, receipts, and payment collection
- Billing dashboard page with plan status, usage breakdown, pricing table, invoices
- Free tier enforcement in sandbox creation

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Resolves conflicts in store.go (Org struct + orgColumns + scanOrg),
router.go (dashboard routes), and client.ts (types + API functions).

Migration numbering: 16=workos, 17=sandbox_usage, 18=secret_allowed_hosts, 19=stripe_billing.
Removed duplicate credit_balance_cents from stripe migration (already in 016_orgs_workos).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

# Conflicts:
#	internal/api/router.go
#	internal/db/store.go
#	web/src/api/client.ts