maf-sandbox-codeact 0.9.0__tar.gz → 0.9.2__tar.gz

{maf_sandbox_codeact-0.9.0 → maf_sandbox_codeact-0.9.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: maf-sandbox-codeact
-Version: 0.9.0
+Version: 0.9.2
 Summary: CodeAct as a Microsoft Agent Framework tool — the model writes a short Python program and it runs inside a sandbox — written against maf-sandbox so it runs on any sandbox backend.
 Keywords: codeact,code-execution,sandbox,agent-framework,microsoft-agent-framework
 Author: SOKOLAI BV
@@ -15,7 +15,7 @@ Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Software Development :: Interpreters
-Requires-Dist: maf-sandbox>=0.27.0,<0.29
+Requires-Dist: maf-sandbox>=0.27.0,<0.30
 Requires-Dist: agent-framework-core>=1.13.0,<2
 Requires-Python: >=3.12, <3.15
 Project-URL: Homepage, https://www.sokol.ai
@@ -140,7 +140,7 @@ A "size" here is the UTF-8 length of the text the stream decoded to, not the byt
 
 **The sink's `display` is not rendered in this mode**, and that is why the claim holds. `OutputSink.deliver` is handed an `Artifact` whose `content` is the guest's bytes, and no protocol rule keeps `display` independent of it — a sink that quoted any of that content would put guest-authored text straight into a result labelled trusted. Withheld, the saved files are named by the spelling the model itself declared, which costs the sink's own detail and needs no promise from the host to stay honest.
 
-A wired host-tool registry keeps its say. `HostToolAggregate.result_integrity` is the weakest tier over every registered source — an unstamped tool has already failed safe into it — and where it says `untrusted` this tool declares nothing, withheld or not. Withholding is about this kind's own rendering; where a host tool's data came from is core's fold to make.
+A wired host-tool registry keeps its say. `HostToolAggregate.result_integrity` is the weakest level over every registered source — an unstamped tool has already failed safe into it — and where it says `untrusted` this tool declares nothing, withheld or not. Withholding is about this kind's own rendering; where a host tool's data came from is core's fold to make.
 
 The mode is required to be `CodeactOutputs.DECLARED` and both other pairings are refused at construction, each for its own reason. Under `NONE` there is nowhere for content to go, so no call could return anything the model can use. Under `MANIFEST` the *program* names its own files in `outputs.json`, and this kind renders those names back into the result — a guest-chosen string inside a result claiming to hold none, which is the fail-open shape the option exists to close.
 

{maf_sandbox_codeact-0.9.0 → maf_sandbox_codeact-0.9.2}/README.md

@@ -115,7 +115,7 @@ A "size" here is the UTF-8 length of the text the stream decoded to, not the byt
 
 **The sink's `display` is not rendered in this mode**, and that is why the claim holds. `OutputSink.deliver` is handed an `Artifact` whose `content` is the guest's bytes, and no protocol rule keeps `display` independent of it — a sink that quoted any of that content would put guest-authored text straight into a result labelled trusted. Withheld, the saved files are named by the spelling the model itself declared, which costs the sink's own detail and needs no promise from the host to stay honest.
 
-A wired host-tool registry keeps its say. `HostToolAggregate.result_integrity` is the weakest tier over every registered source — an unstamped tool has already failed safe into it — and where it says `untrusted` this tool declares nothing, withheld or not. Withholding is about this kind's own rendering; where a host tool's data came from is core's fold to make.
+A wired host-tool registry keeps its say. `HostToolAggregate.result_integrity` is the weakest level over every registered source — an unstamped tool has already failed safe into it — and where it says `untrusted` this tool declares nothing, withheld or not. Withholding is about this kind's own rendering; where a host tool's data came from is core's fold to make.
 
 The mode is required to be `CodeactOutputs.DECLARED` and both other pairings are refused at construction, each for its own reason. Under `NONE` there is nowhere for content to go, so no call could return anything the model can use. Under `MANIFEST` the *program* names its own files in `outputs.json`, and this kind renders those names back into the result — a guest-chosen string inside a result claiming to hold none, which is the fail-open shape the option exists to close.
 

{maf_sandbox_codeact-0.9.0 → maf_sandbox_codeact-0.9.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "maf-sandbox-codeact"
-version = "0.9.0"
+version = "0.9.2"
 description = "CodeAct as a Microsoft Agent Framework tool — the model writes a short Python program and it runs inside a sandbox — written against maf-sandbox so it runs on any sandbox backend."
 readme = "README.md"
 requires-python = ">=3.12,<3.15"
@@ -24,7 +24,7 @@ classifiers = [
     "Topic :: Software Development :: Interpreters",
 ]
 dependencies = [
-    "maf-sandbox>=0.27.0,<0.29",
+    "maf-sandbox>=0.27.0,<0.30",
     "agent-framework-core>=1.13.0,<2",
 ]
 

{maf_sandbox_codeact-0.9.0 → maf_sandbox_codeact-0.9.2}/pyproject.toml.orig

@@ -1,6 +1,6 @@
 [project]
 name = "maf-sandbox-codeact"
-version = "0.9.0"
+version = "0.9.2"
 description = "CodeAct as a Microsoft Agent Framework tool — the model writes a short Python program and it runs inside a sandbox — written against maf-sandbox so it runs on any sandbox backend."
 readme = "README.md"
 requires-python = ">=3.12,<3.15"
@@ -35,7 +35,7 @@ dependencies = [
     # import, and that one fails at the call, where no import check is looking. The number
     # itself is below, and `scripts/set_dependents_range.py` moves it — so this says which
     # release the floor is for, never which release that is.
-    "maf-sandbox>=0.27.0,<0.29",
+    "maf-sandbox>=0.27.0,<0.30",
     # The `@tool` decorator. MAF is a genuine dependency of the tool itself, not of the host
     # application.
     "agent-framework-core>=1.13.0,<2",

{maf_sandbox_codeact-0.9.0 → maf_sandbox_codeact-0.9.2}/src/maf_sandbox_codeact/_tool.py

@@ -473,7 +473,7 @@ def _withheld_integrity(surface: HostToolAggregate | None) -> SourceIntegrity |
     """What a withholding tool may declare, once the registry has had its say.
 
     Withholding is about this kind's own rendering, and a registry's sources are core's fold to
-    make: ``result_integrity`` is the weakest tier over every registered source, and an
+    make: ``result_integrity`` is the weakest level over every registered source, and an
     unstamped tool has already failed safe into it. A registry with no opinion leaves the
     workload's own, which withholding has earned; one that says untrusted keeps it.
     """