fix(sandbox): patch snapshot runtime vulnerabilities

Refresh the pinned Debian snapshot and upgrade installed packages.
Align pnpm on 11.15.0 so the image uses patched undici and passes
the protected Trivy gates.

Author: iamjr15

AGENTS.md

@@ -26,7 +26,7 @@ source tree on July 13, 2026; the repository now contains V2 code only.
 | Observability | Workers Logs + Workers Tracing + Workers Analytics Engine (no third-party APM in the initial release) |
 | Lint/format | Biome 2.5.2 (single config, no ESLint+Prettier except next plugin) |
 | QA | Direct `agent-browser --auto-connect --session cheatcode-debug` UI operation + console/network/log review; no scripted test harnesses |
-| Monorepo | pnpm 11.8.0 + Turborepo 2.10.5 |
+| Monorepo | pnpm 11.15.0 + Turborepo 2.10.5 |
 
 ## Repo layout
 
@@ -57,7 +57,7 @@ scripts/                 Operational helpers only: build skills, local startup,
 ## Build
 
 ```bash
-pnpm install                            # Install workspace deps (use pnpm@11.8.0, not npm/yarn)
+pnpm install                            # Install workspace deps (use pnpm@11.15.0, not npm/yarn)
 pnpm turbo skills:build                 # Bundle skills/ into packages/skills/src/generated.ts (REQUIRED before build)
 pnpm turbo db:generate                  # Generate Drizzle types from schema
 pnpm turbo build                        # Production build

README.md

@@ -18,7 +18,7 @@ pnpm dev
 ```
 
 `pnpm dev` is the complete local entrypoint. Docker Compose builds the pinned
-Node 22.22.2/pnpm 11.8.0 development image, starts the Vault-capable Postgres
+Node 22.22.2/pnpm 11.15.0 development image, starts the Vault-capable Postgres
 database, provisions isolated `app_gateway`, `app_agent`, and `app_webhooks`
 roles, applies all three local migration phases, and then starts Next.js plus the
 chained Workers. Source changes sync into

apps/web/package.json

@@ -3,7 +3,7 @@
   "private": true,
   "version": "0.0.0",
   "type": "module",
-  "packageManager": "pnpm@11.8.0",
+  "packageManager": "pnpm@11.15.0",
   "engines": {
     "node": "22.22.2"
   },

infra/containers/dev/Dockerfile

@@ -8,7 +8,7 @@ RUN apt-get update \
   && apt-get install -y --no-install-recommends ca-certificates \
   && rm -rf /var/lib/apt/lists/* \
   && corepack enable \
-  && corepack prepare pnpm@11.8.0 --activate
+  && corepack prepare pnpm@11.15.0 --activate
 
 WORKDIR /workspace
 

infra/containers/sandbox/Dockerfile

@@ -2,7 +2,7 @@ FROM node:22.22.2-bookworm-slim@sha256:9f6d5975c7dca860947d3915877f85607946403fc
 
 ARG CODE_SERVER_VERSION=4.128.0
 ARG CODE_SERVER_SHA256=79ba26bf186e5268a22b7c17b30a5f288a16c37791f0b86c27859e8fef103188
-ARG DEBIAN_SNAPSHOT=20260713T000000Z
+ARG DEBIAN_SNAPSHOT=20260718T000000Z
 
 # Daytona injects its own daemon (host-mounted, PID 1) and overrides ENTRYPOINT,
 # so we do NOT bake a sandbox daemon. Headed Chromium uses Xvfb, which the
@@ -20,6 +20,7 @@ RUN set -eux; \
   sed -i 's|URIs: http://snapshot.debian.org|URIs: https://snapshot.debian.org|g' /etc/apt/sources.list.d/debian.sources; \
   rm -rf /var/lib/apt/lists/*; \
   apt-get -o Acquire::ForceIPv4=true -o Acquire::Retries=5 -o Acquire::Check-Valid-Until=false -o Acquire::https::No-Cache=true update; \
+  apt-get -o Acquire::ForceIPv4=true -o Acquire::Retries=5 -o Acquire::http::Pipeline-Depth=0 upgrade -y --no-install-recommends; \
   apt-get -o Acquire::ForceIPv4=true -o Acquire::Retries=5 -o Acquire::http::Pipeline-Depth=0 install -y --no-install-recommends \
   file python3 python3-pip python3-venv git curl wget gnupg netcat-openbsd sudo \
   procps xvfb x11vnc novnc websockify \

infra/containers/sandbox/app-templates/expo/package.json

@@ -3,7 +3,7 @@
   "main": "expo-router/entry",
   "version": "1.0.0",
   "private": true,
-  "packageManager": "pnpm@11.8.0",
+  "packageManager": "pnpm@11.15.0",
   "engines": {
     "node": "22.22.2"
   },

infra/containers/sandbox/app-templates/next/package.json

@@ -2,7 +2,7 @@
   "name": "cheatcode-app",
   "version": "0.1.0",
   "private": true,
-  "packageManager": "pnpm@11.8.0",
+  "packageManager": "pnpm@11.15.0",
   "engines": {
     "node": "22.22.2"
   },

infra/containers/sandbox/package-manager/package-lock.json

@@ -7,6 +7,9 @@
   },
   "dependencies": {
     "npm": "12.0.1",
-    "pnpm": "11.8.0"
+    "pnpm": "11.15.0"
+  },
+  "overrides": {
+    "undici": "6.27.0"
   }
 }

infra/containers/sandbox/package-manager/package.json

@@ -11,7 +11,7 @@
     "url": "git+https://github.com/cheatcode-ai/cheatcode.git"
   },
   "type": "module",
-  "packageManager": "pnpm@11.8.0",
+  "packageManager": "pnpm@11.15.0",
   "engines": {
     "node": "22.22.2"
   },