m4
c683f6e739
Docker / build (push) Has been cancelled
Build / build (push) Has been cancelled
Lint / ruff (push) Has been cancelled
Test / pytest (ubuntu-latest, 3.11) (push) Has been cancelled
Test / pytest (ubuntu-latest, 3.12) (push) Has been cancelled
Test / pytest (windows-latest, 3.11) (push) Has been cancelled
Test / pytest (windows-latest, 3.12) (push) Has been cancelled
Add bounded document ingestion, controlled web search, recoverable session support, subagent timeouts, and the native sandbox runtime contract. Unify package versioning and add release-focused regression coverage.
EvoScientist Native Sandbox Runtime
This directory pins the native Web command sandbox dependency. It is a deployment dependency, not an npm application and not a CLI execution backend.
Install exactly what is recorded in the lockfile during environment preparation:
npm ci --omit=dev --prefix runtime/native-sandbox
Web full startup then performs a real fail-closed isolation preflight. It never downloads dependencies and never falls back to Docker or the host shell.
Platform tools:
- macOS: Node 20.11+,
bash,rg,python3,pandoc, and/usr/bin/sandbox-exec - Linux: Node 20.11+,
bash,rg,python3,pandoc,bwrap, andsocat
Run the host-specific black-box suite after installation:
EVOSCIENTIST_RUN_NATIVE_SANDBOX_TESTS=1 uv run pytest -q tests/test_native_sandbox_integration.py