bentoworks 0.9.2__tar.gz

bentoworks-0.9.2/.gitignore

@@ -0,0 +1,26 @@
+# Rust build artifacts
+/target/
+
+# Python artifacts
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+*.so
+*.dylib
+*.egg-info/
+dist/
+build/
+.pytest_cache/
+.venv/
+
+# BentoBox transient state
+.bentoworks/
+
+# Language SDK artifacts
+sdk/typescript/node_modules/
+sdk/typescript/*.node
+sdk/typescript/native/target/
+sdk/typescript/native/Cargo.lock
+sdk/typescript/*.tgz
+sdk/typescript/sdk-darwin-*/

bentoworks-0.9.2/CHANGELOG.md

@@ -0,0 +1,82 @@
+# Changelog
+
+All notable changes to BentoBox are documented here.
+
+## [0.9.2] - 2026-08-01
+
+### Removed
+
+- **Go SDK removed.** The `sdk/go/` module was dropped; BentoBox now ships
+  Python and TypeScript SDKs only. `Cargo.toml` no longer emits a
+  `staticlib` archive, `include/bentobox.h` no longer references the Go
+  bindings, and all Go code samples were stripped from the docs.
+
+### Changed
+
+- **Product rebrand.** The README is now a product landing page rather than a
+  technical writeup: a one-line hero promise ("Sandbox any AI agent in
+  seconds"), a "Why BentoBox" section, benefit-led features, real use cases
+  (coding agents, builds/tests, deploys, pipelines), and an honest security
+  model. SDK, CLI, and package metadata descriptions now carry the same
+  product voice.
+- **CLI branding.** `bentoworks --version` and `--help` now surface the
+  tagline, and `bentoworks run`/`why` print a brand banner on interactive
+  terminals. Non-TTY output stays machine-friendly for scripts and CI.
+- **TypeScript SDK package metadata.** `@bentwork/sdk` descriptions updated;
+  the publish layout is trimmed to the shipped macOS platform packages
+  (`darwin-arm64`, `darwin-x64`) at version `0.9.2`.
+- **Version bumped to `0.9.2`** across the Rust core, Python package, and
+  TypeScript SDK to publish the rebranded build to PyPI.
+
+## [0.9.1] - 2026-07-31
+
+### Fixed
+
+- **CLI: `bentoworks run` now prints command output.** The compartment
+  function returned a `subprocess.CompletedProcess` while the CLI only
+  printed dict results, so `stdout`/`stderr` were silently swallowed. The
+  CLI now captures and prints `Stdout:`/`Stderr:` blocks after the run
+  summary.
+- **CLI: non-zero command exit codes now surface.** `bentoworks run "exit 3"`
+  previously reported `Status: success`; the CLI now exits with status `1`
+  when the shell command fails.
+- **Credential proxy: absolute-form (`HTTP_PROXY`) requests now get
+  credential-injected.** Route matching now uses the path component of the
+  request target, so both origin-form (`/openai/v1/chat`) and absolute-form
+  (`http://host/openai/v1/chat`, as sent by `HTTP_PROXY` clients) are
+  matched and rewritten. Query strings survive the rewrite.
+- **TypeScript SDK: fixed compile error.** `Runtime::names()` in the napi
+  wrapper called a method that had been removed from the Rust `Runtime`
+  struct; the `names()` method was restored, so `npm run build` and
+  `npm test` pass again.
+
+### Changed
+
+- **Docs restyled.** The README and SDK docs now follow the structure used
+  by top YC developer-tool projects: a one-line value proposition, an
+  above-the-fold quickstart, a "Why" section, a feature table, and a
+  professional footer. The stale `bentoworks.runtime` import in the
+  "Advanced Users" example was replaced with the correct
+  `bentoworks.compartments` subclass pattern.
+- **Tests import the installed package.** The pytest `pythonpath = ["python"]`
+  config was removed because the source tree no longer contains a compiled
+  native core (`_core` ships inside the wheel). Install the package
+  (`pip install .`) before running the test suite.
+- **Test isolation.** `Box.enter()` calls in the box-lifecycle tests now pass
+  `sandbox=False`, so the irreversible kernel Seatbelt sandbox is no longer
+  applied to the shared pytest process (which poisoned `os.getcwd()` for
+  later tests).
+
+### Added
+
+- `tests/test_cli.py` - CLI regression tests (stdout/stderr printing, exit
+  codes, `goal` positional, `why`).
+- `tests/test_proxy.py` - credential proxy regression tests (origin-form,
+  absolute-form, no-match pass-through, query preservation).
+
+### Verified
+
+- Python: 73 tests pass (installed wheel).
+- Rust core: 425 tests pass.
+- Go SDK: `go vet` clean, 15 tests pass.
+- TypeScript SDK: builds and all smoke tests pass.

bentoworks-0.9.2/Cargo.lock

@@ -0,0 +1,410 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "adler2"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"
+
+[[package]]
+name = "aho-corasick"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "arrayref"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76a2e8124351fda1ef8aaaa3bbd7ebbcb486bbcd4225aca0aa0d84bb2db8fecb"
+
+[[package]]
+name = "arrayvec"
+version = "0.7.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3fb67a6e08acf24fdeccbac2cb6ac4305825bd1f117462e0e6f2f193345ad56"
+
+[[package]]
+name = "bentoworks-core"
+version = "0.9.2"
+dependencies = [
+ "aho-corasick",
+ "blake3",
+ "flate2",
+ "landlock",
+ "pyo3",
+ "regex",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "blake3"
+version = "1.8.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0aa83c34e62843d924f905e0f5c866eb1dd6545fc4d719e803d9ba6030371fce"
+dependencies = [
+ "arrayref",
+ "arrayvec",
+ "cc",
+ "cfg-if",
+ "constant_time_eq",
+ "cpufeatures",
+]
+
+[[package]]
+name = "cc"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c89588d05638b5b4594a3348a2d6c20277e43a7f5c5202b05cc56888475a47b8"
+dependencies = [
+ "find-msvc-tools",
+ "shlex",
+]
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "constant_time_eq"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d52eff69cd5e647efe296129160853a42795992097e8af39800e1060caeea9b"
+
+[[package]]
+name = "cpufeatures"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b2a41393f66f16b0823bb79094d54ac5fbd34ab292ddafb9a0456ac9f87d201"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "crc32fast"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9481c1c90cbf2ac953f07c8d4a58aa3945c425b7185c9154d67a65e4230da511"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "enumflags2"
+version = "0.7.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1027f7680c853e056ebcec683615fb6fbbc07dbaa13b4d5d9442b146ded4ecef"
+dependencies = [
+ "enumflags2_derive",
+]
+
+[[package]]
+name = "enumflags2_derive"
+version = "0.7.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67c78a4d8fdf9953a5c9d458f9efe940fd97a0cab0941c075a813ac594733827"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "find-msvc-tools"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582"
+
+[[package]]
+name = "flate2"
+version = "1.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "843fba2746e448b37e26a819579957415c8cef339bf08564fe8b7ddbd959573c"
+dependencies = [
+ "crc32fast",
+ "miniz_oxide",
+]
+
+[[package]]
+name = "heck"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
+
+[[package]]
+name = "itoa"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+
+[[package]]
+name = "landlock"
+version = "0.4.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cca98e95f35b29d469dade6724c6f96cec9236640f745a0e99b0334ec320ab1"
+dependencies = [
+ "enumflags2",
+ "libc",
+ "thiserror",
+]
+
+[[package]]
+name = "libc"
+version = "0.2.187"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7743783ea728ef5c31194c6590797eed286449b4a4e87d626d8a51f0a94e732"
+
+[[package]]
+name = "memchr"
+version = "2.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98"
+
+[[package]]
+name = "miniz_oxide"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fa76a2c86f704bdb222d66965fb3d63269ce38518b83cb0575fca855ebb6316"
+dependencies = [
+ "adler2",
+ "simd-adler32",
+]
+
+[[package]]
+name = "once_cell"
+version = "1.21.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
+
+[[package]]
+name = "portable-atomic"
+version = "1.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d20d5497ef88037a52ff98267d066e7f11fcc5e99bbfbd58a42336193aacec3"
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.107"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "pyo3"
+version = "0.29.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd274650b21d4bfc26a0a47587962c1edb425f69287324355cd040c3ea66071c"
+dependencies = [
+ "libc",
+ "once_cell",
+ "portable-atomic",
+ "pyo3-build-config",
+ "pyo3-ffi",
+ "pyo3-macros",
+]
+
+[[package]]
+name = "pyo3-build-config"
+version = "0.29.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c5e2a7d2f0d013342f295c048ad19237add5154a55b1c5a254c0ec93d4109078"
+dependencies = [
+ "target-lexicon",
+]
+
+[[package]]
+name = "pyo3-ffi"
+version = "0.29.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ca85c467da1bbc8d866eea5deff9cf29ea5f7785054a17da36e65bda9c05845b"
+dependencies = [
+ "libc",
+ "pyo3-build-config",
+]
+
+[[package]]
+name = "pyo3-macros"
+version = "0.29.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ac53762fd065daa3194dd09337a38bd793a188100fd1a9304c4ab312d901771"
+dependencies = [
+ "proc-macro2",
+ "pyo3-macros-backend",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "pyo3-macros-backend"
+version = "0.29.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ca3a1557399783172dc5bf39cfca835157732532cba56b71d2292161e53b362"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.47"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "regex"
+version = "1.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f020237b6c8eed93db2e2cb53c00c60a8e1bc73da7d073199a1180401450218d"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-automata",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fcfdb36bda0c880c5931cdc7a2bcdc8ba4556847b9d912bca70bc94708711ad"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6f6ff9a378485b298a5286656da665ba74413d36db0979633275d2e708145d4"
+
+[[package]]
+name = "serde"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.2",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.151"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c841b55ecdae098c80dcae9cf767f6f8a0c2cdb3416bbef72181df4d0fe73f14"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "shlex"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8fadd59c855ef2080decdef8ff161eb6661b86933c9d82e5ba29dc602a55aba"
+
+[[package]]
+name = "simd-adler32"
+version = "0.3.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a219298ac11a56ea9a6d2120044824d6f01aeb034955e7af7bc16858527deea"
+
+[[package]]
+name = "syn"
+version = "2.0.119"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "syn"
+version = "3.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a207d6d6a2b7fc470b80443726053f18a2481b7e1eee970597051596567987a3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "target-lexicon"
+version = "0.13.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "adb6935a6f5c20170eeceb1a3835a49e12e19d792f6dd344ccc76a985ca5a6ca"
+
+[[package]]
+name = "thiserror"
+version = "2.0.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09a43598840e33d5b0331f38c5e30d13bb11c11210a4b58f0d9b18a5a5eefcd9"
+dependencies = [
+ "thiserror-impl",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "2.0.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "43cbfe0cf76104d42a574802844187e84a305e531ed54455f11fbde0f10541cd"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.2",
+]
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+
+[[package]]
+name = "zmij"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b"

bentoworks-0.9.2/Cargo.toml

@@ -0,0 +1,40 @@
+[package]
+name = "bentoworks-core"
+version = "0.9.2"
+edition = "2021"
+license = "BUSL-1.1"
+description = "BentoBox - kernel-level sandbox with compartmentalized isolated execution (Rust core)"
+repository = "https://github.com/Devaretanmay/BentoBox"
+homepage = "https://github.com/Devaretanmay/BentoBox"
+documentation = "https://docs.rs/crate/bentoworks-core"
+keywords = ["ai", "mcp", "compression", "execution", "sandbox"]
+categories = ["development-tools", "command-line-utilities"]
+readme = "README.md"
+
+[lib]
+name = "bentoworks_core"
+crate-type = ["cdylib", "lib"]
+
+[features]
+default = []
+# Python extension module (enabled by maturin). Plain `cargo build`
+# without this feature produces a clean FFI cdylib for the TS SDK.
+pyo3-binding = ["dep:pyo3", "pyo3/extension-module", "pyo3/abi3-py38"]
+
+[dependencies]
+pyo3 = { version = "0.29", features = ["abi3-py38"], optional = true }
+serde = { version = "1.0.228", features = ["derive"] }
+serde_json = { version = "1.0.150" }
+regex = "1"
+flate2 = "1"
+aho-corasick = "1"
+blake3 = "1"
+
+[target.'cfg(target_os = "linux")'.dependencies]
+landlock = "0.4"
+
+[profile.release]
+opt-level = "z"
+lto = true
+codegen-units = 1
+strip = "symbols"

bentoworks-0.9.2/LICENSE

@@ -0,0 +1,26 @@
+Business Source License 1.1
+
+Parameters:
+
+Licensor:              BentoBox Labs (Devaretanmay) / Tanmay Jayant Devare
+Licensor's Website:    https://github.com/Devaretanmay/BentoBox
+Change Date:           January 1st, 2030
+Change License:        Apache License, Version 2.0
+Additional Use Grant:  Production use, personal use, academic use, and internal company use are permitted. Offering BentoBox as a managed commercial SaaS, competing commercial execution service, or commercial redistribution of BentoBox as a hosted product is NOT permitted under this Additional Use Grant without explicit authorization from Licensor.
+
+--------------------------------------------------------------------------------
+
+Licensor hereby grants you the right to copy, modify, create derivative works, use, and sublicense the Licensed Work, strictly in accordance with the Additional Use Grant specified above.
+
+Under the Additional Use Grant:
+- Production use: Allowed
+- Personal & Academic use: Allowed
+- Internal company use: Allowed
+- Commercial SaaS offerings: NOT allowed
+- Competing commercial products: NOT allowed
+- Commercial redistribution: NOT allowed
+
+Change License & Date:
+On the Change Date (January 1st, 2030), this Business Source License 1.1 shall automatically terminate and the version of BentoBox licensed hereunder shall be governed by the Apache License, Version 2.0.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

bentoworks-0.9.2/PKG-INFO

@@ -0,0 +1,22 @@
+Metadata-Version: 2.4
+Name: bentoworks
+Version: 0.9.2
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: Other/Proprietary License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Rust
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+License-File: LICENSE
+Summary: BentoBox - sandbox any AI agent in seconds. Kernel-enforced isolation, deny-by-default, no containers, no VMs.
+Keywords: ai-agents,developer-tools,sandbox,isolation,runtime
+Home-Page: https://github.com/Devaretanmay/BentoBox
+License: BUSL-1.1
+Requires-Python: >=3.10
+Project-URL: Homepage, https://github.com/Devaretanmay/BentoBox
+Project-URL: Issues, https://github.com/Devaretanmay/BentoBox/issues
+Project-URL: Repository, https://github.com/Devaretanmay/BentoBox