aip-agents-binary 0.0.0__py3-none-any.whl

aip_agents/sandbox/dockerfiles/aip-agents-sandbox-v2-2.Dockerfile

@@ -0,0 +1,119 @@
+# KNOWN ISSUES — superseded by aip-agents-sandbox-v2-3
+#
+# 1. All install steps share a single monolithic RUN layer. E2B builder has no
+#    per-step cache, so any timeout fails the entire build with no useful
+#    diagnostic.
+#
+# 2. The native AIP runtime install does not pin the OpenTelemetry
+#    instrumentation packages. gl-connectors-sdk / gllm-inference-binary pull
+#    in gl-observability, which declares broad OTel version ranges. pip
+#    backtracks through many candidates (especially
+#    opentelemetry-instrumentation-google-generativeai), consistently hitting
+#    the E2B builder deadline and leaving the template in error state.
+#
+# Do not modify or re-use this file. See v2-3 for the fixed version.
+FROM python:3.12
+
+USER root
+WORKDIR /root
+
+ENV JUPYTER_CONFIG_PATH=/root/.jupyter \
+    IPYTHON_CONFIG_PATH=/root/.ipython \
+    SERVER_PATH=/root/.server
+
+RUN : "1) Install base OS deps + signed NodeSource repo + nodejs" && \
+    apt-get update && \
+    DEBIAN_FRONTEND=noninteractive DEBCONF_NOWARNINGS=yes \
+    apt-get install -y --no-install-recommends \
+    build-essential \
+    ca-certificates \
+    curl \
+    fonts-noto-cjk \
+    git \
+    gnupg \
+    jq \
+    libcairo2-dev \
+    libgirepository1.0-dev \
+    pkg-config \
+    python3-dev \
+    ripgrep \
+    sudo \
+    util-linux && \
+    mkdir -p /etc/apt/keyrings && \
+    curl --proto '=https' --tlsv1.2 -fsSL \
+    -o /etc/apt/keyrings/nodesource.asc \
+    https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key && \
+    gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg /etc/apt/keyrings/nodesource.asc && \
+    chmod 644 /etc/apt/keyrings/nodesource.gpg && \
+    rm -f /etc/apt/keyrings/nodesource.asc && \
+    echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_20.x nodistro main" > /etc/apt/sources.list.d/nodesource.list && \
+    apt-get update && \
+    DEBIAN_FRONTEND=noninteractive DEBCONF_NOWARNINGS=yes \
+    apt-get install -y --no-install-recommends nodejs && \
+    rm -rf /var/lib/apt/lists/* && \
+    : "" && \
+    : "2) Bootstrap code-interpreter template files" && \
+    git clone --depth 1 --branch "@e2b/code-interpreter-template@0.2.1" \
+    https://github.com/e2b-dev/code-interpreter /tmp/code-interpreter-template && \
+    cp /tmp/code-interpreter-template/template/requirements.txt /root/requirements.txt && \
+    cp -r /tmp/code-interpreter-template/template/server /root/.server && \
+    mkdir -p /root/.config/matplotlib /root/.jupyter /root/.ipython/profile_default/startup && \
+    cp /tmp/code-interpreter-template/template/matplotlibrc /root/.config/matplotlib/.matplotlibrc && \
+    cp /tmp/code-interpreter-template/template/start-up.sh /root/.jupyter/start-up.sh && \
+    cp /tmp/code-interpreter-template/template/jupyter_server_config.py /root/.jupyter/ && \
+    cp /tmp/code-interpreter-template/template/ipython_kernel_config.py /root/.ipython/profile_default/ && \
+    cp -r /tmp/code-interpreter-template/template/startup_scripts /root/.ipython/profile_default/startup && \
+    rm -rf /tmp/code-interpreter-template && \
+    : "" && \
+    : "3) Install Python/Node runtimes and patch server timeout" && \
+    PIP_INDEX_URL=https://download.pytorch.org/whl/cpu \
+    PIP_EXTRA_INDEX_URL=https://pypi.org/simple \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: "torch==2.5.1+cpu" && \
+    echo "torch==2.5.1+cpu" > /tmp/constraints.txt && \
+    PIP_INDEX_URL=https://download.pytorch.org/whl/cpu \
+    PIP_EXTRA_INDEX_URL=https://pypi.org/simple \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: -c /tmp/constraints.txt -r requirements.txt && \
+    PIP_INDEX_URL=https://download.pytorch.org/whl/cpu \
+    PIP_EXTRA_INDEX_URL=https://pypi.org/simple \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: \
+    "aip-agents-binary[local]~=0.6.62" \
+    "httpx==0.28.1" \
+    "mcp==1.25.0" && \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: --quiet \
+    "gl-connectors-sdk==0.1.5" \
+    "gllm-inference-binary==0.6.42" \
+    "markdown2==2.5.5" \
+    "weasyprint==68.1" && \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: "bash_kernel==0.10.0" && \
+    ipython kernel install --name "python3" --user && \
+    python -m bash_kernel.install --user && \
+    # Pinned to latest commit as of 2026-05-20 (no semver tags exist in this repo).
+    # Commit hash avoids SonarCloud SCA "unresolved dependency version" warning.
+    npm install -g --ignore-scripts git+https://github.com/e2b-dev/ijavascript.git#79cb7d56dcfe0df9ff55eff0ca4dc920a6dcc361 && \
+    npm rebuild -g && \
+    ijsinstall --install=global && \
+    sed -i \
+    "s/client = httpx.AsyncClient()/client = httpx.AsyncClient(timeout=httpx.Timeout(30.0))/" \
+    /root/.server/main.py && \
+    grep -q \
+    "client = httpx.AsyncClient(timeout=httpx.Timeout(30.0))" \
+    /root/.server/main.py && \
+    python -m venv .server/.venv && \
+    # Do NOT add --only-binary :all: here. The server's requirements.txt may include
+    # packages that require compilation (e.g. C extensions). --only-binary silently
+    # skips them, leaving the venv incomplete. uvicorn then fails to start on port
+    # 49999 at sandbox boot, causing the "port not open" error in E2B sandboxes.
+    .server/.venv/bin/pip install --no-cache-dir -r .server/requirements.txt && \
+    chmod +x .jupyter/start-up.sh && \
+    : "" && \
+    : "4) Create runtime user and sudo policy" && \
+    (id -u user >/dev/null 2>&1 || useradd -m user) && \
+    mkdir -p /home/user && \
+    chown -R user:user /home/user && \
+    (grep -q "^user ALL=(ALL) NOPASSWD: ALL$" /etc/sudoers || \
+    echo "user ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers)
+
+USER user
+WORKDIR /home/user
+
+ENTRYPOINT ["sudo", "/root/.jupyter/start-up.sh"]

aip_agents/sandbox/dockerfiles/aip-agents-sandbox-v2-3-datasaur.Dockerfile

@@ -0,0 +1,173 @@
+FROM python:3.12
+
+USER root
+WORKDIR /root
+
+ENV JUPYTER_CONFIG_PATH=/root/.jupyter \
+    IPYTHON_CONFIG_PATH=/root/.ipython \
+    SERVER_PATH=/root/.server \
+    BUN_VERSION=1.1.38
+
+# NOSONAR - intentional split: separate RUN layers preserve E2B build cache between steps
+RUN : "1) Install base OS deps + signed NodeSource repo + nodejs" && \
+    apt-get update && \
+    DEBIAN_FRONTEND=noninteractive DEBCONF_NOWARNINGS=yes \
+    apt-get install -y --no-install-recommends \
+    build-essential \
+    ca-certificates \
+    curl \
+    fonts-noto-cjk \
+    git \
+    gnupg \
+    jq \
+    libcairo2-dev \
+    libgirepository1.0-dev \
+    pkg-config \
+    python3-dev \
+    ripgrep \
+    sudo \
+    util-linux && \
+    mkdir -p /etc/apt/keyrings && \
+    curl --proto '=https' --tlsv1.2 -fsSL \
+    -o /etc/apt/keyrings/nodesource.asc \
+    https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key && \
+    gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg /etc/apt/keyrings/nodesource.asc && \
+    chmod 644 /etc/apt/keyrings/nodesource.gpg && \
+    rm -f /etc/apt/keyrings/nodesource.asc && \
+    echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_20.x nodistro main" > /etc/apt/sources.list.d/nodesource.list && \
+    apt-get update && \
+    DEBIAN_FRONTEND=noninteractive DEBCONF_NOWARNINGS=yes \
+    apt-get install -y --no-install-recommends nodejs && \
+    rm -rf /var/lib/apt/lists/*
+
+RUN : "2) Bootstrap code-interpreter template files" && \
+    git clone --depth 1 --branch "@e2b/code-interpreter-template@0.2.1" \
+    https://github.com/e2b-dev/code-interpreter /tmp/code-interpreter-template && \
+    cp /tmp/code-interpreter-template/template/requirements.txt /root/requirements.txt && \
+    cp -r /tmp/code-interpreter-template/template/server /root/.server && \
+    mkdir -p /root/.config/matplotlib /root/.jupyter /root/.ipython/profile_default/startup && \
+    cp /tmp/code-interpreter-template/template/matplotlibrc /root/.config/matplotlib/.matplotlibrc && \
+    cp /tmp/code-interpreter-template/template/start-up.sh /root/.jupyter/start-up.sh && \
+    cp /tmp/code-interpreter-template/template/jupyter_server_config.py /root/.jupyter/ && \
+    cp /tmp/code-interpreter-template/template/ipython_kernel_config.py /root/.ipython/profile_default/ && \
+    cp -r /tmp/code-interpreter-template/template/startup_scripts /root/.ipython/profile_default/startup && \
+    rm -rf /tmp/code-interpreter-template
+
+RUN : "3) Install torch constraint" && \
+    PIP_INDEX_URL=https://download.pytorch.org/whl/cpu \
+    PIP_EXTRA_INDEX_URL=https://pypi.org/simple \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: "torch==2.5.1+cpu" && \
+    echo "torch==2.5.1+cpu" > /tmp/constraints.txt
+
+RUN : "4) Install code-interpreter Python requirements" && \
+    PIP_INDEX_URL=https://download.pytorch.org/whl/cpu \
+    PIP_EXTRA_INDEX_URL=https://pypi.org/simple \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: -c /tmp/constraints.txt -r requirements.txt
+
+RUN : "5) Install native AIP runtime packages" && \
+    PIP_INDEX_URL=https://download.pytorch.org/whl/cpu \
+    PIP_EXTRA_INDEX_URL=https://pypi.org/simple \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: \
+    "aip-agents-binary[local]==0.6.92" \
+    "boto3==1.40.61" \
+    "httpx==0.28.1" \
+    "mcp==1.25.0" \
+    "opentelemetry-instrumentation==0.60b1" \
+    "opentelemetry-instrumentation-anthropic==0.53.3" \
+    "opentelemetry-instrumentation-bedrock==0.53.3" \
+    "opentelemetry-instrumentation-fastapi==0.60b1" \
+    "opentelemetry-instrumentation-google-generativeai==0.53.3" \
+    "opentelemetry-instrumentation-httpx==0.60b1" \
+    "opentelemetry-instrumentation-langchain==0.52.6" \
+    "opentelemetry-instrumentation-logging==0.60b1" \
+    "opentelemetry-instrumentation-openai==0.53.3" \
+    "opentelemetry-instrumentation-requests==0.60b1" \
+    "opentelemetry-semantic-conventions==0.60b1" \
+    "opentelemetry-semantic-conventions-ai==0.4.16"
+
+RUN : "6) Install reporting/runtime extras" && \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: --quiet \
+    "gl-connectors-sdk==0.1.5" \
+    "gllm-inference-binary==0.6.42" \
+    "markdown2==2.5.5" \
+    "weasyprint==68.1"
+
+RUN : "7) Install Jupyter/bash kernels" && \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: "bash_kernel==0.10.0" && \
+    ipython kernel install --name "python3" --user && \
+    python -m bash_kernel.install --user
+
+RUN : "8) Install ijavascript kernel" && \
+    # Pinned to latest commit as of 2026-05-20 (no semver tags exist in this repo).
+    # Commit hash avoids SonarCloud SCA "unresolved dependency version" warning.
+    npm install -g --ignore-scripts git+https://github.com/e2b-dev/ijavascript.git#79cb7d56dcfe0df9ff55eff0ca4dc920a6dcc361 && \
+    npm rebuild -g && \
+    ijsinstall --install=global
+
+RUN : "9) Patch server timeout and install server env" && \
+    sed -i \
+    "s/client = httpx.AsyncClient()/client = httpx.AsyncClient(timeout=httpx.Timeout(30.0))/" \
+    /root/.server/main.py && \
+    grep -q \
+    "client = httpx.AsyncClient(timeout=httpx.Timeout(30.0))" \
+    /root/.server/main.py && \
+    python -m venv .server/.venv && \
+    # Do NOT add --only-binary :all: here. The server's requirements.txt may include
+    # packages that require compilation (e.g. C extensions). --only-binary silently
+    # skips them, leaving the venv incomplete. uvicorn then fails to start on port
+    # 49999 at sandbox boot, causing the "port not open" error in E2B sandboxes.
+    .server/.venv/bin/pip install --no-cache-dir -r .server/requirements.txt && \
+    chmod +x .jupyter/start-up.sh
+
+RUN : "10) Install Datasaur runtime dependencies" && \
+    apt-get update && \
+    apt-get install -y --no-install-recommends unzip && \
+    mkdir -p /etc/apt/keyrings && \
+    curl --proto '=https' --tlsv1.2 -fsSL \
+    -o /tmp/githubcli-archive-keyring.gpg \
+    https://cli.github.com/packages/githubcli-archive-keyring.gpg && \
+    gpg --dearmor -o /etc/apt/keyrings/githubcli-archive-keyring.gpg \
+    /tmp/githubcli-archive-keyring.gpg && \
+    rm -f /tmp/githubcli-archive-keyring.gpg && \
+    chmod go+r /etc/apt/keyrings/githubcli-archive-keyring.gpg && \
+    echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \
+    > /etc/apt/sources.list.d/github-cli.list && \
+    apt-get update && \
+    apt-get install -y --no-install-recommends gh && \
+    curl --proto '=https' --tlsv1.2 -fsSL \
+    -o /tmp/bun-install.sh \
+    https://bun.sh/install && \
+    echo "bab8acfb046aac8c72407bdcce903957665d655d7acaa3e11c7c4616beae68dd  /tmp/bun-install.sh" | sha256sum -c - && \
+    bash /tmp/bun-install.sh "bun-v${BUN_VERSION}" && \
+    rm -f /tmp/bun-install.sh && \
+    export BUN_INSTALL=/root/.bun && \
+    export PATH="$BUN_INSTALL/bin:$PATH" && \
+    npm install -g @playwright/cli@0.1.11 --ignore-scripts && \
+    playwright-cli install --skills && \
+    npx --ignore-scripts -y playwright install chrome && \
+    command -v gh && \
+    command -v node && \
+    command -v npm && \
+    command -v bun && \
+    command -v playwright-cli && \
+    gh --version && \
+    node --version && \
+    npm --version && \
+    bun --version && \
+    playwright-cli --version && \
+    rm -rf /var/lib/apt/lists/*
+
+RUN : "11) Create runtime user and sudo policy" && \
+    (id -u user >/dev/null 2>&1 || useradd -m user) && \
+    mkdir -p /home/user && \
+    chown -R user:user /home/user && \
+    (grep -q "^user ALL=(ALL) NOPASSWD: ALL$" /etc/sudoers || \
+    echo "user ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers)
+
+ENV BUN_INSTALL=/root/.bun
+ENV PATH="$BUN_INSTALL/bin:$PATH"
+
+USER user
+WORKDIR /home/user
+
+ENTRYPOINT ["sudo", "/root/.jupyter/start-up.sh"]

aip_agents/sandbox/dockerfiles/aip-agents-sandbox-v2-3.Dockerfile

@@ -0,0 +1,130 @@
+FROM python:3.12
+
+USER root
+WORKDIR /root
+
+ENV JUPYTER_CONFIG_PATH=/root/.jupyter \
+    IPYTHON_CONFIG_PATH=/root/.ipython \
+    SERVER_PATH=/root/.server
+
+# NOSONAR - intentional split: separate RUN layers preserve E2B build cache between steps
+RUN : "1) Install base OS deps + signed NodeSource repo + nodejs" && \
+    apt-get update && \
+    DEBIAN_FRONTEND=noninteractive DEBCONF_NOWARNINGS=yes \
+    apt-get install -y --no-install-recommends \
+    build-essential \
+    ca-certificates \
+    curl \
+    fonts-noto-cjk \
+    git \
+    gnupg \
+    jq \
+    libcairo2-dev \
+    libgirepository1.0-dev \
+    pkg-config \
+    python3-dev \
+    ripgrep \
+    sudo \
+    util-linux && \
+    mkdir -p /etc/apt/keyrings && \
+    curl --proto '=https' --tlsv1.2 -fsSL \
+    -o /etc/apt/keyrings/nodesource.asc \
+    https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key && \
+    gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg /etc/apt/keyrings/nodesource.asc && \
+    chmod 644 /etc/apt/keyrings/nodesource.gpg && \
+    rm -f /etc/apt/keyrings/nodesource.asc && \
+    echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_20.x nodistro main" > /etc/apt/sources.list.d/nodesource.list && \
+    apt-get update && \
+    DEBIAN_FRONTEND=noninteractive DEBCONF_NOWARNINGS=yes \
+    apt-get install -y --no-install-recommends nodejs && \
+    rm -rf /var/lib/apt/lists/*
+
+RUN : "2) Bootstrap code-interpreter template files" && \
+    git clone --depth 1 --branch "@e2b/code-interpreter-template@0.2.1" \
+    https://github.com/e2b-dev/code-interpreter /tmp/code-interpreter-template && \
+    cp /tmp/code-interpreter-template/template/requirements.txt /root/requirements.txt && \
+    cp -r /tmp/code-interpreter-template/template/server /root/.server && \
+    mkdir -p /root/.config/matplotlib /root/.jupyter /root/.ipython/profile_default/startup && \
+    cp /tmp/code-interpreter-template/template/matplotlibrc /root/.config/matplotlib/.matplotlibrc && \
+    cp /tmp/code-interpreter-template/template/start-up.sh /root/.jupyter/start-up.sh && \
+    cp /tmp/code-interpreter-template/template/jupyter_server_config.py /root/.jupyter/ && \
+    cp /tmp/code-interpreter-template/template/ipython_kernel_config.py /root/.ipython/profile_default/ && \
+    cp -r /tmp/code-interpreter-template/template/startup_scripts /root/.ipython/profile_default/startup && \
+    rm -rf /tmp/code-interpreter-template
+
+RUN : "3) Install torch constraint" && \
+    PIP_INDEX_URL=https://download.pytorch.org/whl/cpu \
+    PIP_EXTRA_INDEX_URL=https://pypi.org/simple \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: "torch==2.5.1+cpu" && \
+    echo "torch==2.5.1+cpu" > /tmp/constraints.txt
+
+RUN : "4) Install code-interpreter Python requirements" && \
+    PIP_INDEX_URL=https://download.pytorch.org/whl/cpu \
+    PIP_EXTRA_INDEX_URL=https://pypi.org/simple \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: -c /tmp/constraints.txt -r requirements.txt
+
+RUN : "5) Install native AIP runtime packages" && \
+    PIP_INDEX_URL=https://download.pytorch.org/whl/cpu \
+    PIP_EXTRA_INDEX_URL=https://pypi.org/simple \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: \
+    "aip-agents-binary[local]==0.6.92" \
+    "httpx==0.28.1" \
+    "mcp==1.25.0" \
+    "opentelemetry-instrumentation==0.60b1" \
+    "opentelemetry-instrumentation-anthropic==0.53.3" \
+    "opentelemetry-instrumentation-bedrock==0.53.3" \
+    "opentelemetry-instrumentation-fastapi==0.60b1" \
+    "opentelemetry-instrumentation-google-generativeai==0.53.3" \
+    "opentelemetry-instrumentation-httpx==0.60b1" \
+    "opentelemetry-instrumentation-langchain==0.52.6" \
+    "opentelemetry-instrumentation-logging==0.60b1" \
+    "opentelemetry-instrumentation-openai==0.53.3" \
+    "opentelemetry-instrumentation-requests==0.60b1" \
+    "opentelemetry-semantic-conventions==0.60b1" \
+    "opentelemetry-semantic-conventions-ai==0.4.16"
+
+RUN : "6) Install reporting/runtime extras" && \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: --quiet \
+    "gl-connectors-sdk==0.1.5" \
+    "gllm-inference-binary==0.6.42" \
+    "markdown2==2.5.5" \
+    "weasyprint==68.1"
+
+RUN : "7) Install Jupyter/bash kernels" && \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: "bash_kernel==0.10.0" && \
+    ipython kernel install --name "python3" --user && \
+    python -m bash_kernel.install --user
+
+RUN : "8) Install ijavascript kernel" && \
+    # Pinned to latest commit as of 2026-05-20 (no semver tags exist in this repo).
+    # Commit hash avoids SonarCloud SCA "unresolved dependency version" warning.
+    npm install -g --ignore-scripts git+https://github.com/e2b-dev/ijavascript.git#79cb7d56dcfe0df9ff55eff0ca4dc920a6dcc361 && \
+    npm rebuild -g && \
+    ijsinstall --install=global
+
+RUN : "9) Patch server timeout and install server env" && \
+    sed -i \
+    "s/client = httpx.AsyncClient()/client = httpx.AsyncClient(timeout=httpx.Timeout(30.0))/" \
+    /root/.server/main.py && \
+    grep -q \
+    "client = httpx.AsyncClient(timeout=httpx.Timeout(30.0))" \
+    /root/.server/main.py && \
+    python -m venv .server/.venv && \
+    # Do NOT add --only-binary :all: here. The server's requirements.txt may include
+    # packages that require compilation (e.g. C extensions). --only-binary silently
+    # skips them, leaving the venv incomplete. uvicorn then fails to start on port
+    # 49999 at sandbox boot, causing the "port not open" error in E2B sandboxes.
+    .server/.venv/bin/pip install --no-cache-dir -r .server/requirements.txt && \
+    chmod +x .jupyter/start-up.sh
+
+RUN : "10) Create runtime user and sudo policy" && \
+    (id -u user >/dev/null 2>&1 || useradd -m user) && \
+    mkdir -p /home/user && \
+    chown -R user:user /home/user && \
+    (grep -q "^user ALL=(ALL) NOPASSWD: ALL$" /etc/sudoers || \
+    echo "user ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers)
+
+USER user
+WORKDIR /home/user
+
+ENTRYPOINT ["sudo", "/root/.jupyter/start-up.sh"]

aip_agents/sandbox/dockerfiles/aip-agents-sandbox-v2-4-runner-managed.Dockerfile

@@ -0,0 +1,164 @@
+FROM python:3.12
+
+USER root
+WORKDIR /root
+
+ENV JUPYTER_CONFIG_PATH=/root/.jupyter \
+    IPYTHON_CONFIG_PATH=/root/.ipython \
+    SERVER_PATH=/root/.server
+
+# NOSONAR - intentional split: separate RUN layers preserve E2B build cache between steps
+RUN : "1) Install base OS deps + signed NodeSource repo + nodejs" && \
+    apt-get update && \
+    DEBIAN_FRONTEND=noninteractive DEBCONF_NOWARNINGS=yes \
+    apt-get install -y --no-install-recommends \
+    build-essential \
+    ca-certificates \
+    curl \
+    fonts-noto-cjk \
+    git \
+    gnupg \
+    jq \
+    libcairo2-dev \
+    libgirepository1.0-dev \
+    pkg-config \
+    python3-dev \
+    ripgrep \
+    sudo \
+    util-linux && \
+    mkdir -p /etc/apt/keyrings && \
+    curl --proto '=https' --tlsv1.2 -fsSL \
+    -o /etc/apt/keyrings/nodesource.asc \
+    https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key && \
+    gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg /etc/apt/keyrings/nodesource.asc && \
+    chmod 644 /etc/apt/keyrings/nodesource.gpg && \
+    rm -f /etc/apt/keyrings/nodesource.asc && \
+    echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_20.x nodistro main" > /etc/apt/sources.list.d/nodesource.list && \
+    apt-get update && \
+    DEBIAN_FRONTEND=noninteractive DEBCONF_NOWARNINGS=yes \
+    apt-get install -y --no-install-recommends nodejs && \
+    rm -rf /var/lib/apt/lists/*
+
+RUN : "2) Bootstrap code-interpreter template files" && \
+    git clone --depth 1 --branch "@e2b/code-interpreter-template@0.2.1" \
+    https://github.com/e2b-dev/code-interpreter /tmp/code-interpreter-template && \
+    cp /tmp/code-interpreter-template/template/requirements.txt /root/requirements.txt && \
+    cp -r /tmp/code-interpreter-template/template/server /root/.server && \
+    mkdir -p /root/.config/matplotlib /root/.jupyter /root/.ipython/profile_default/startup && \
+    cp /tmp/code-interpreter-template/template/matplotlibrc /root/.config/matplotlib/.matplotlibrc && \
+    cp /tmp/code-interpreter-template/template/start-up.sh /root/.jupyter/start-up.sh && \
+    cp /tmp/code-interpreter-template/template/jupyter_server_config.py /root/.jupyter/ && \
+    cp /tmp/code-interpreter-template/template/ipython_kernel_config.py /root/.ipython/profile_default/ && \
+    cp -r /tmp/code-interpreter-template/template/startup_scripts /root/.ipython/profile_default/startup && \
+    rm -rf /tmp/code-interpreter-template
+
+RUN : "3) Install torch constraint" && \
+    PIP_EXTRA_INDEX_URL=https://pypi.org/simple \
+    PIP_INDEX_URL=https://download.pytorch.org/whl/cpu \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: "torch==2.5.1+cpu" && \
+    echo "torch==2.5.1+cpu" > /root/constraints.txt
+
+RUN : "4) Install code-interpreter Python requirements" && \
+    PIP_EXTRA_INDEX_URL=https://pypi.org/simple \
+    PIP_INDEX_URL=https://download.pytorch.org/whl/cpu \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: -c /root/constraints.txt -r requirements.txt
+
+RUN : "5) Install native AIP runtime packages" && \
+    PIP_EXTRA_INDEX_URL=https://pypi.org/simple \
+    PIP_INDEX_URL=https://download.pytorch.org/whl/cpu \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: \
+    "aip-agents-binary[local]==0.6.92" \
+    "httpx==0.28.1" \
+    "mcp==1.25.0" \
+    "opentelemetry-instrumentation-anthropic==0.53.3" \
+    "opentelemetry-instrumentation-bedrock==0.53.3" \
+    "opentelemetry-instrumentation-fastapi==0.60b1" \
+    "opentelemetry-instrumentation-google-generativeai==0.53.3" \
+    "opentelemetry-instrumentation-httpx==0.60b1" \
+    "opentelemetry-instrumentation-langchain==0.52.6" \
+    "opentelemetry-instrumentation-logging==0.60b1" \
+    "opentelemetry-instrumentation-openai==0.53.3" \
+    "opentelemetry-instrumentation-requests==0.60b1" \
+    "opentelemetry-instrumentation==0.60b1" \
+    "opentelemetry-semantic-conventions==0.60b1" \
+    "opentelemetry-semantic-conventions-ai==0.4.15"
+
+RUN : "6) Install reporting/runtime extras" && \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: --quiet \
+    "gl-connectors-sdk==0.1.8" \
+    "gllm-inference-binary==0.6.42" \
+    "markdown2==2.5.5" \
+    "weasyprint==68.1"
+
+RUN : "7) Install Jupyter/bash kernels" && \
+    TMPDIR=/var/tmp pip install --no-cache-dir --only-binary :all: "bash_kernel==0.10.0" && \
+    ipython kernel install --name "python3" --user && \
+    python -m bash_kernel.install --user
+
+RUN : "8) Install ijavascript kernel" && \
+    # Pinned to latest commit as of 2026-05-20 (no semver tags exist in this repo).
+    # Commit hash avoids SonarCloud SCA "unresolved dependency version" warning.
+    npm install -g --ignore-scripts git+https://github.com/e2b-dev/ijavascript.git#79cb7d56dcfe0df9ff55eff0ca4dc920a6dcc361 && \
+    npm rebuild -g ijavascript && \
+    ijsinstall --install=global
+
+RUN : "9) Patch server timeout and install server env" && \
+    sed -i \
+    "s/client = httpx.AsyncClient()/client = httpx.AsyncClient(timeout=httpx.Timeout(30.0))/" \
+    /root/.server/main.py && \
+    grep -q \
+    "client = httpx.AsyncClient(timeout=httpx.Timeout(30.0))" \
+    /root/.server/main.py && \
+    python -m venv .server/.venv && \
+    # Do NOT add --only-binary :all: here. The server's requirements.txt may include
+    # packages that require compilation (e.g. C extensions). --only-binary silently
+    # skips them, leaving the venv incomplete. uvicorn then fails to start on port
+    # 49999 at sandbox boot, causing the "port not open" error in E2B sandboxes.
+    .server/.venv/bin/pip install --no-cache-dir -r .server/requirements.txt && \
+    chmod +x .jupyter/start-up.sh
+
+COPY aip-agents-sandbox-v2-4-runner-managed.requirements.txt /root/runner-managed-requirements.txt
+COPY aip-agents-sandbox-v2-4-runner-managed.patch_js_context.py /root/runner-managed-patch-js-context.py
+
+RUN : "10) Install runner-managed Python requirements" && \
+    # antlr4-python3-runtime==4.9.3 is sdist-only; the requirements file
+    # contains the targeted --no-binary override for that package.
+    TMPDIR=/var/tmp pip install \
+    --no-cache-dir \
+    --only-binary :all: \
+    --no-deps \
+    -r /root/runner-managed-requirements.txt
+
+RUN : "11) Tolerate optional JavaScript context startup" && \
+    python /root/runner-managed-patch-js-context.py && \
+    rm -f /root/runner-managed-patch-js-context.py
+
+RUN : "12) Verify runner-managed Python runtime" && \
+    python -c "\
+import importlib; \
+modules = ( \
+    'catapa', \
+    'catapa_private', \
+    'digital_employee_core', \
+    'glaip_sdk', \
+    'gllm_pipeline', \
+    'googleapiclient.discovery', \
+    'openapi_client', \
+    'openapi_client.exceptions', \
+    'opensearchpy', \
+    'weasyprint', \
+); \
+[importlib.import_module(module) for module in modules]; \
+print('runner managed imports ok')"
+
+RUN : "13) Create runtime user and sudo policy" && \
+    (id -u user >/dev/null 2>&1 || useradd -m user) && \
+    mkdir -p /home/user && \
+    chown -R user:user /home/user && \
+    (grep -q "^user ALL=(ALL) NOPASSWD: ALL$" /etc/sudoers || \
+    echo "user ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers)
+
+USER user
+WORKDIR /home/user
+
+ENTRYPOINT ["sudo", "/root/.jupyter/start-up.sh"]

aip_agents/sandbox/dockerfiles/aip-agents-sandbox-v2-4-runner-managed.patch_js_context.py

@@ -0,0 +1,41 @@
+"""Patch code-interpreter server startup for runner-managed sandboxes."""
+
+import sys
+from pathlib import Path
+
+_SERVER_MAIN_PATH = Path("/root/.server/main.py")
+_OLD_CONTEXT_BLOCK = """        javascript_context = await create_context(
+            client, websockets, "javascript", "/home/user"
+        )
+        default_websockets["javascript"] = javascript_context.id
+"""
+_NEW_CONTEXT_BLOCK = """        try:
+            javascript_context = await create_context(
+                client, websockets, "javascript", "/home/user"
+            )
+            default_websockets["javascript"] = javascript_context.id
+        except Exception as e:
+            logger.warning(f"Skipping default JavaScript context initialization: {e}")
+"""
+
+
+def patch_server_main() -> None:
+    """Patch the code-interpreter server main module in place."""
+    text = _SERVER_MAIN_PATH.read_text()
+    if _OLD_CONTEXT_BLOCK not in text:
+        raise RuntimeError("Expected JavaScript default context block not found in code-interpreter server")
+
+    # This Docker build helper patches a fixed in-image server path, not user input.
+    _SERVER_MAIN_PATH.write_text(text.replace(_OLD_CONTEXT_BLOCK, _NEW_CONTEXT_BLOCK))  # NOSONAR
+
+
+def main() -> None:
+    """CLI entrypoint for Dockerfile RUN usage."""
+    try:
+        patch_server_main()
+    except RuntimeError as exc:
+        sys.exit(str(exc))
+
+
+if __name__ == "__main__":
+    main()  # pragma: no cover

aip_agents/sandbox/dockerfiles/aip-agents-sandbox-v2-4-runner-managed.requirements.txt

@@ -0,0 +1,29 @@
+aip-agents-binary==0.6.100
+alembic==1.18.5
+--no-binary antlr4-python3-runtime
+antlr4-python3-runtime==4.9.3
+apscheduler==3.11.3
+authlib==1.7.2
+catapa-private==0.1.3
+catapa==0.3.6
+digital-employee-core==0.1.12
+email-validator==2.3.0
+fastapi==0.138.1
+glaip-sdk==0.8.46
+gllm-pipeline-binary==0.5.17.post1
+google-api-python-client==2.198.0
+mako==1.3.12
+markdown==3.10.2
+marshmallow==4.3.0
+omegaconf==2.3.1
+openpyxl==3.1.5
+opensearch-py==3.2.0
+opentelemetry-instrumentation-sqlalchemy==0.64b0
+psycopg2-binary==2.9.12
+pydantic==2.13.4
+pymupdf==1.25.3
+python-dotenv==1.2.2
+python-multipart==0.0.32
+requests==2.32.5
+sqlparse==0.5.5
+uvicorn==0.34.3