docs: daily update 2026-08-04 — release v4.169.0

[deco-cms]

Automated daily docs review for release v4.169.0 (previous: v4.168.2), range: v4.168.2...v4.169.0.

Depends on #5659 (docs/auto-update-2026-08-04-release-4.168.0) — this branch is based on its HEAD, not main, to avoid conflicting with that in-flight docs PR. Please merge #5659 first, then this one.

Commits reviewed (v4.168.2...v4.169.0)

• Warranted a docs update: 860b39e7 — feat(sandbox): run the claude-code harness in the sandbox via the Claude Agent SDK (feat(sandbox): run the claude-code harness in the sandbox via the Claude Agent SDK #5604). Adds a second execution location for hosted runs: the claude-code harness now runs inside the sandbox pod (via the new packages/harness-runner, driven by the Claude Agent SDK) instead of in-process on the worker. Gated by a default-off org flag (claude_code_sandbox_enabled); engages for Task Board Super Agent tasks only when the org has opted in and has exactly one importable repo.
• Skipped: 1761e9b6 — [chore]: bump homebrew cask to 4.168.2 — version bump only, no user-facing change.
• Skipped: bc018b32 — [release]: bump changed workspace versions — release bot commit.

Files changed

• en/studio/architecture.mdx — added a "Harnesses: where the agent loop actually runs" subsection under "The Decopilot run lifecycle," explaining the new claude-code sandbox-pod harness alongside the existing in-process Decopilot harness, plus a summary bullet in "At a glance."
• pt-br/studio/architecture.mdx — mirrored translation of the same section and bullet. (This file was previously missing the "Desktop" tier removal that already landed in en via docs: daily update 2026-08-04 #5659's chain — no separate fix needed here since the base branch already carries that removal on both locales; only the new harness content was added.)

Consistency notes

• Task Board / Super Agent tasks are not documented anywhere in apps/docs. This commit changes how Super Agent tasks execute (which harness), but the Task Board feature itself (kanban board, task assignment, "Super Agent") has no dedicated page to update. Flagging for the team to consider a dedicated Task Board doc — out of scope for this tightly-scoped PR.
• Checked quickstart.mdx, concepts.mdx, overview.mdx, and decopilot/overview.mdx for staleness relative to this change — no updates needed, none of them describe hosted-run execution internals at this level of detail.

pt-br was auto-translated for the changed file.

---

Summary by cubic

Updates Studio docs for v4.169.0: adds the claude-code sandbox harness for hosted runs, a new Task Board guide, and self‑hosting auth via AUTH_* env vars. Also documents Studio Native coding terminals, sandbox daemon telemetry on Kubernetes, and small UX updates (fork imports, 25MB file limit, block-form tooltips).

• New Features

  • claude-code harness runs inside the sandbox pod; opt-in per org via claude_code_sandbox_enabled (Decopilot stays default). Task Board Super Agent tasks use it only if the org opted in and has exactly one importable repo.
  • New Task Board page: QA Agent, Code Reviewer, auto-merge, and “Ship to production”.
  • Studio Native: choose a coding agent (Claude Code, Codex, OpenCode) to run a live terminal per thread; reclaim local worktree when archiving the last thread on a branch.
  • UX notes: sandbox repo picker shows forks; file attachments capped at 25MB with a clear warning; block-form field descriptions can be shown as tooltips per site.

• Migration

  • Auth is env-only: configure providers with AUTH_* vars (incl. magic link and email OTP); no auth-config.json. Social login is separate from OIDC SSO.
  • Kubernetes: sandbox image is ghcr.io/decocms/studio/studio-sandbox-go only; optional OTLP metrics export from the daemon (set telemetry.* values, use the collector Service’s ClusterIP).

^{Written for commit cb65665. Summary will update on new commits.}