docs: clarify transaction remote I/O exception

[rohanmalhotracodes]

Summary

Updates the docs

Closes #452

Changes

Documented the timeout requirement and Daytona exception

How was this tested?

NA, minimal doc change is done

Checklist

• I have read the contributing guidelines
• pnpm build, pnpm test, pnpm typecheck, pnpm lint:ci, and pnpm format:check pass locally
• Tests added/updated where it makes sense
• No hand-edits to generated code (packages/trueforge-sdk, .github/fern/openapi/openapi.json, docs/openapi.json) — fork PRs omit SDK regen; maintainers regenerate after merge
• Docs / .env.example updated if configuration or behavior changed

---

Note

Low Risk
Documentation-only change to agent/contributor guidance; no runtime or API behavior changes.

Overview
Updates packages/trueforge/AGENTS.md so the withTransaction rule is no longer an absolute ban on remote I/O inside the callback.

The guidance now says callbacks must only do local DB work by default, and allows remote network calls only in rare cases when they are bounded by a strict timeout (still listing fetch, SDK clients, Redis, and similar I/O as what to avoid by default).

^{Reviewed by Cursor Bugbot for commit 0e4849e. Bugbot is set up for automated code reviews on this repo. Configure here.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: 0e4849e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[thesujai]

Suggested change

	- `withTransaction` callbacks MUST only do local DB work by default: no `await` of `fetch`, an SDK client, Redis, or other remote I/O (including through helpers). Finish remote work before opening the txn. Any exception MUST be documented at the call site and use an explicit timeout shorter than the database transaction timeout.
	- `PUT /api/v1/settings/sandbox-providers` is a temporary exception: its Daytona `buildImage()` call runs inside the transaction while that design is revisited and MUST remain bounded by `BUILD_REQUEST_TIMEOUT_MS`.
	- `withTransaction` callbacks MUST only do local DB work by default: no `await` of `fetch`, an SDK client, Redis, or other remote I/O (including through helpers), remote network calls can be done in rare cases only if it is bounded by strict timeout.

[rohanmalhotracodes]

done