2 commits

Author	SHA1	Message	Date
Ajax Davis	6d8bea6c8d	fix: resolve Next.js routing and package-executor build errors ... **API Route Restructuring:** - Move execute endpoint from /api/tools/[...slug]/execute to /api/tools/execute/[...slug] - Move simulations endpoint from /api/tools/[...slug]/simulations to /api/tools/simulations/[...slug] - Fix Next.js App Router constraint: catch-all segments must be terminal - Update ToolPlayground component to use new endpoint paths **Package Executor Export Fix:** - Remove .js extensions from exports in @tpmjs/package-executor - Change from './types.js' to './types' for proper TypeScript resolution - Change from './executor.js' to './executor' for proper TypeScript resolution - Fixes "Export executePackage doesn't exist in target module" build error **Next.js Configuration:** - Add vm2 and @tpmjs/package-executor to serverExternalPackages - Prevents bundling VM2 which requires filesystem access to internal files **Code Quality:** - Add biome-ignore for excessive complexity in SSE stream handling - Add biome-ignore for decorative loading spinner SVGs (2 instances) Note: VM2 sandboxing still has compatibility issues with Next.js Turbopack. This may need to be replaced with a different sandboxing approach or disabled. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>	2025-11-30 00:52:56 +10:00
Ajax Davis	ab46b6e116	feat: add interactive tool playground with AI-powered execution ... Implement comprehensive tool testing environment with real package execution, AI agents, and token tracking. **New Features:** - Interactive playground UI with 4 tabs (Input, Output, Logs, Token Usage) - Real npm package execution in VM2 sandbox with security constraints - AI-powered tool execution using AI SDK v5 and GPT-4 Turbo - Server-Sent Events (SSE) streaming for real-time progress updates - Comprehensive 4-category token tracking (Input, Tool Description, Schema, Output) - Visual token breakdown with colored progress bars - IP-based rate limiting (10 executions/hour per IP) - Database persistence of all simulations with full metadata **Database Schema:** - New `Simulation` model for execution records - New `TokenUsage` model for detailed token metrics - New `ExecutionLog` model for execution event tracking - Added simulations relation to Tool model **Package Executor (@tpmjs/package-executor):** - VM2 sandbox with 5-second timeout - Blocked dangerous modules (fs, net, http, https, child_process) - LRU file system cache in /tmp/.tpmjs-cache - Package installation and caching strategy **AI Agent Service:** - TPMJS parameter to Zod schema conversion - AI SDK tool definition generation - Token counting using tiktoken library - GPT-4 Turbo pricing estimation - Streaming text execution with callbacks **API Endpoints:** - POST /api/tools/[...slug]/execute - SSE streaming execution - GET /api/tools/[...slug]/simulations - Execution history - Rate limit headers (X-RateLimit-Limit, X-RateLimit-Remaining) **Frontend Components:** - ToolPlayground - Main playground UI with tabs - TokenBreakdown - Visual token metrics with colored bars - Integrated above README section on tool detail pages **Security:** - VM2 sandboxing prevents filesystem/network access - Rate limiting prevents abuse - IP tracking for usage monitoring - Timeout protection (60s max API duration, 5s VM timeout) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>	2025-11-30 00:36:05 +10:00