verifiers 0.2.1.dev22__tar.gz → 0.2.1.dev23__tar.gz

{verifiers-0.2.1.dev22 → verifiers-0.2.1.dev23}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: verifiers
-Version: 0.2.1.dev22
+Version: 0.2.1.dev23
 Summary: Verifiers: Environments for LLM Reinforcement Learning
 Project-URL: Homepage, https://github.com/primeintellect-ai/verifiers
 Project-URL: Documentation, https://github.com/primeintellect-ai/verifiers

{verifiers-0.2.1.dev22 → verifiers-0.2.1.dev23}/verifiers/v1/mcp/launch.py

@@ -263,7 +263,9 @@ async def serve(
         # `state_base`, which is universally reachable (the interception is exposed via a tunnel
         # whenever any consumer is remote). Eval-level shared servers get no per-rollout channel
         # (`state_base` is None for them).
-        state_url = f"{state_base.rstrip('/')}/state" if state_base else None
+        state_url = (
+            f"{runtime.host_url(state_base.rstrip('/'))}/state" if state_base else None
+        )
         port = await serve_in_runtime(
             server,
             runtime,
@@ -289,6 +291,8 @@ async def serve(
                 runtime, port, colocated=colocated, consumer_is_local=consumer_is_local
             )
         )
+        if not for_host and not colocated and harness_runtime is not None:
+            base = harness_runtime.host_url(base)
         yield f"{base.rstrip('/')}/mcp"
 
 
@@ -389,7 +393,8 @@ async def serve_tools(
                 urls[name] = server.url
                 logger.info("tool server '%s' (shared, external): %s", name, server.url)
                 continue
-            urls[name] = _shared_url_for_rollout(server.url, state_base, state_secret)
+            url = harness_runtime.host_url(server.url) if server.local else server.url
+            urls[name] = _shared_url_for_rollout(url, state_base, state_secret)
             # The tagged URL contains the bearer secret; log only the untagged base URL.
             logger.info("tool server '%s' (shared): %s", name, server.url)
         for toolset in toolsets:

{verifiers-0.2.1.dev22 → verifiers-0.2.1.dev23}/verifiers/v1/rollout.py

@@ -158,7 +158,7 @@ class Rollout:
             async with self._serve_interception(
                 runtime, session, [*tool_servers, *([user] if user else [])]
             ) as (base_url, secret):
-                endpoint = f"{base_url}/v1"
+                endpoint = f"{runtime.host_url(base_url)}/v1"
                 async with (
                     serve_tools(
                         tool_servers,

{verifiers-0.2.1.dev22 → verifiers-0.2.1.dev23}/verifiers/v1/runtimes/base.py

@@ -244,6 +244,10 @@ class Runtime(ABC):
     async def write(self, path: str, data: bytes) -> None:
         pass
 
+    def host_url(self, url: str) -> str:
+        """The URL a program inside this runtime uses to reach a host-bound `url`."""
+        return url
+
     @property
     def published_port(self) -> int | None:
         """A fixed port this runtime exposes to the outside at startup, declared up front to the

{verifiers-0.2.1.dev22 → verifiers-0.2.1.dev23}/verifiers/v1/runtimes/docker.py

@@ -5,8 +5,10 @@ import contextlib
 import logging
 import shlex
 import subprocess
+import sys
 from pathlib import PurePosixPath
 from typing import Literal
+from urllib.parse import urlsplit
 
 from pydantic_config import BaseConfig
 
@@ -118,6 +120,14 @@ class DockerRuntime(Runtime):
             self.config.image,
         )
 
+    def host_url(self, url: str) -> str:
+        # Docker Desktop (macOS/Windows) runs containers in a VM, so `--network host`
+        # doesn't reach the host's loopback; `host.docker.internal` does.
+        host = urlsplit(url).hostname
+        if sys.platform != "linux" and host in ("127.0.0.1", "localhost"):
+            return url.replace(host, "host.docker.internal", 1)
+        return url
+
     async def run(self, argv: list[str], env: dict[str, str]) -> ProgramResult:
         env_args = [arg for k, v in env.items() for arg in ("--env", f"{k}={v}")]
         return await docker(