b4run

Dependency freshness

Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.

What's in the stack

Framework

Next.js

Database / ORM

Neon, node-postgres

UI

Tailwind CSS

AI

LangChain

API layer

Hono

Testing

Vitest, Playwright

Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.

What the README says you get

• Admin
  Tool deny policy`tools.deny` removes a tool from a route
• Admin
  Approval-gated tool calls`tools.approve` pauses a call until a person answers
• Admin
  Single-use approval grantseach answer spending a single-use approval grant
• Admin
  Shell and path permissionsPermissions gate shell commands and file paths outside the workspace
• Admin
  Opt-in sandboxan opt-in sandbox isolates the workspace tools
• API
  File-system routesPut one supported entry in a route's `src/app/**/index.ts`; B4.run discovers the route.
• API
  Generated route typesB4.run generates TypeScript route, parameter, state, and tool declarations during typegen and build.
• API
  Shared and route-local toolsShared tools live in `src/tools/`
• API
  Raw graph routesexpose it as a raw `graph` route
• Data
  SQLite-backed stateDefault SQLite-backed state can survive a `b4 dev` restart
• Deploy
  Node server and DockerfileThe default build emits a runnable Node server, Dockerfile, and LangSmith graph artifacts
• Deploy
  LangSmith graph artifactsLangSmith graph artifacts from the default build
• Testing
  Fixture-backed testsFixture-backed tests replay committed responses and fail on an unmatched interaction
• Testing
  Live and recording modesLive and recording modes remain explicit opt-ins.

Extracted from the kit's README by a local AI model (deepseek-flash) on Oct 19, 2026. Every item is checked against an exact README quote. A README claim is the maker's description, not something we tested.