monkeybot 3.0.1__tar.gz → 3.0.2__tar.gz

{monkeybot-3.0.1 → monkeybot-3.0.2}/CHANGELOG.md

@@ -6,6 +6,12 @@ the project adheres to [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [core v3.0.2] - 2026-08-18
+
+### Fixed
+
+- Compute-only OpenSandbox (`SANDBOX_SHARED_FILESYSTEM=false`) no longer rejects every `run_command` when the harness passes the default workspace-root cwd. Nested workspace cwd and workspace/skills path args are still refused.
+
 ## [core v3.0.1] - 2026-08-18
 
 ### Fixed

{monkeybot-3.0.1 → monkeybot-3.0.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: monkeybot
-Version: 3.0.1
+Version: 3.0.2
 Summary: monkeybot agent harness — FastAPI SSE gateway, owned loop, SQLite, and MCP.
 License: MIT
 License-File: LICENSE

{monkeybot-3.0.1 → monkeybot-3.0.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "monkeybot"
-version = "3.0.1"
+version = "3.0.2"
 description = "monkeybot agent harness — FastAPI SSE gateway, owned loop, SQLite, and MCP."
 requires-python = ">=3.11"
 readme = "README.md"

{monkeybot-3.0.1 → monkeybot-3.0.2}/src/monkeybot/core/tools/sandbox_executor.py

@@ -304,7 +304,17 @@ class SandboxExecutor:
         if command == "mempalace":
             validate_mempalace_subcommand(args)
 
-        if not self._config.shared_filesystem and self._remote_requests_mounted_path(args, cwd):
+        # CoreToolExecutor always passes cwd=workspace root. Compute-only already
+        # forces working_directory=/tmp, so the default harness cwd must not trip
+        # the mounted-path guard. Nested paths under workspace are still rejected.
+        check_cwd = cwd
+        if not self._config.shared_filesystem and cwd is not None:
+            if Path(cwd).resolve() == self._workspace_root:
+                check_cwd = None
+
+        if not self._config.shared_filesystem and self._remote_requests_mounted_path(
+            args, check_cwd
+        ):
             raise SecurityError(
                 "remote sandbox is compute-only and cannot access workspace or skills files"
             )

{monkeybot-3.0.1 → monkeybot-3.0.2}/tests/core/test_sandbox_executor.py

@@ -364,6 +364,24 @@ class TestSandboxExecutorLayoutMounts:
         assert mock_cls.create.call_args.kwargs["volumes"] == []
         assert sandbox.commands.run.call_args.kwargs["opts"].working_directory == "/tmp"
 
+    @pytest.mark.asyncio
+    async def test_remote_compute_mode_allows_default_workspace_cwd(self, tmp_path):
+        workspace = tmp_path / "workspace"
+        workspace.mkdir()
+        cfg = SandboxConfig(
+            True, "https://remote.example", None, "test", 30, shared_filesystem=False
+        )
+        executor = SandboxExecutor(cfg, workspace)
+        mock_cls, sandbox = _make_create_mock()
+        osb = _make_opensandbox_module(mock_cls)
+
+        with patch.dict(sys.modules, _opensandbox_sys_modules(osb)):
+            result = await executor.execute("python3", ["--version"], cwd=workspace)
+
+        assert result.exit_code == 0
+        mock_cls.create.assert_called_once()
+        assert sandbox.commands.run.call_args.kwargs["opts"].working_directory == "/tmp"
+
     @pytest.mark.asyncio
     async def test_remote_compute_mode_rejects_paths_under_workspace_or_skills(self, tmp_path):
         workspace = tmp_path / "workspace"

{monkeybot-3.0.1 → monkeybot-3.0.2}/uv.lock

@@ -2346,7 +2346,7 @@ wheels = [
 
 [[package]]
 name = "monkeybot"
-version = "3.0.0"
+version = "3.0.1"
 source = { editable = "." }
 dependencies = [
     { name = "aiosqlite" },