maf-sandbox-codeact 0.7.2__tar.gz → 0.7.4__tar.gz

{maf_sandbox_codeact-0.7.2 → maf_sandbox_codeact-0.7.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: maf-sandbox-codeact
-Version: 0.7.2
+Version: 0.7.4
 Summary: CodeAct as a Microsoft Agent Framework tool — the model writes a short Python program and it runs inside a sandbox — written against maf-sandbox so it runs on any sandbox backend.
 Keywords: codeact,code-execution,sandbox,agent-framework,microsoft-agent-framework
 Author: SOKOLAI BV
@@ -15,7 +15,7 @@ Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Software Development :: Interpreters
-Requires-Dist: maf-sandbox>=0.20.0,<0.22
+Requires-Dist: maf-sandbox>=0.23.1,<0.25
 Requires-Dist: agent-framework-core>=1.13.0,<2
 Requires-Python: >=3.12, <3.15
 Project-URL: Homepage, https://www.sokol.ai

{maf_sandbox_codeact-0.7.2 → maf_sandbox_codeact-0.7.4}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "maf-sandbox-codeact"
-version = "0.7.2"
+version = "0.7.4"
 description = "CodeAct as a Microsoft Agent Framework tool — the model writes a short Python program and it runs inside a sandbox — written against maf-sandbox so it runs on any sandbox backend."
 readme = "README.md"
 requires-python = ">=3.12,<3.15"
@@ -24,7 +24,7 @@ classifiers = [
     "Topic :: Software Development :: Interpreters",
 ]
 dependencies = [
-    "maf-sandbox>=0.20.0,<0.22",
+    "maf-sandbox>=0.23.1,<0.25",
     "agent-framework-core>=1.13.0,<2",
 ]
 

{maf_sandbox_codeact-0.7.2 → maf_sandbox_codeact-0.7.4}/pyproject.toml.orig

@@ -1,6 +1,6 @@
 [project]
 name = "maf-sandbox-codeact"
-version = "0.7.2"
+version = "0.7.4"
 description = "CodeAct as a Microsoft Agent Framework tool — the model writes a short Python program and it runs inside a sandbox — written against maf-sandbox so it runs on any sandbox backend."
 readme = "README.md"
 requires-python = ">=3.12,<3.15"
@@ -31,10 +31,11 @@ dependencies = [
     # before 1.0.0 may include breaking changes (see its CHANGELOG). Moving either end of
     # this range has an order to it — see RELEASING.md. The floor tracks the release where
     # the vocabulary this kind's spec names actually arrives; admit anything older and a
-    # published wheel resolves a maf-sandbox base missing those imports. The number itself is
-    # below, and `scripts/set_dependents_range.py` moves it — so this says which release the
-    # floor is for, never which release that is.
-    "maf-sandbox>=0.20.0,<0.22",
+    # published wheel resolves a maf-sandbox base missing it — a keyword argument as much as an
+    # import, and that one fails at the call, where no import check is looking. The number
+    # itself is below, and `scripts/set_dependents_range.py` moves it — so this says which
+    # release the floor is for, never which release that is.
+    "maf-sandbox>=0.23.1,<0.25",
     # The `@tool` decorator. MAF is a genuine dependency of the tool itself, not of the host
     # application.
     "agent-framework-core>=1.13.0,<2",

{maf_sandbox_codeact-0.7.2 → maf_sandbox_codeact-0.7.4}/src/maf_sandbox_codeact/_tool.py

@@ -371,17 +371,14 @@ def make_codeact_tools(
     # A single dispatch may exercise the user's delegated authority, and which one does is not
     # knowable before the program runs, so one such tool raises the whole surface.
     approval_gated = surface is not None and surface.requires_approval
-    # A registry can carry something out with no landing artifact to say so, which is the one
-    # flow `sandbox_tool_declarations` cannot see — so the host's cap is written by hand. Only
-    # with no output sink: with one, the spec already lands, the derivation writes the same
-    # cap, and `sandboxed_tool` refuses the two together.
-    declarations = (
-        {"max_allowed_confidentiality": outbound_max_confidentiality}
-        if surface is not None
-        and (surface.outbound_caps or surface.has_undeclared)
-        and outbound_max_confidentiality is not None
-        and output_sink is None
-        else None
+    # A registry can carry something out with no landing artifact to say so — a tool with a
+    # declared sink, or an unstamped one that might have one — the one flow neither
+    # `egress_allow` nor an `output_sink` reveals. `also_carries_out` folds that fact, which
+    # only the kind can see, into `sandbox_tool_declarations`' single rule, so the condition
+    # lives in one place instead of being hand-built here (and a key that rule learns later
+    # reaches this tool too).
+    registry_carries_out = surface is not None and bool(
+        surface.outbound_caps or surface.has_undeclared
     )
     return sandboxed_tool(
         lambda session: _execute_code_tool(
@@ -393,7 +390,7 @@ def make_codeact_tools(
         spec=spec,
         name=EXECUTE_CODE_TOOL_NAME,
         approval_mode="always_require" if approval_gated else "never_require",
-        declarations=declarations,
+        also_carries_out=registry_carries_out,
         # The library's "trusted" default is right for a compiler's diagnostics and wrong here:
         # what comes back is whatever a model-written `print(...)` chose to emit. Undeclared,
         # the tracker's untrusted default applies and the result taints the conversation.