verifiers 0.2.2.dev36__py3-none-any.whl → 0.2.2.dev38__py3-none-any.whl

verifiers/v1/runtimes/base.py

@@ -13,7 +13,7 @@ from dataclasses import dataclass
 from pathlib import PurePosixPath
 from typing import ClassVar, Self
 
-from pydantic import Field
+from pydantic import Field, model_validator
 from pydantic_config import BaseConfig
 
 from verifiers.v1.errors import SandboxError
@@ -100,15 +100,32 @@ class NetworkPolicyConfig(BaseConfig):
     """Shared execution-time policy surface for runtimes that support it."""
 
     allow: list[str] = Field(default_factory=lambda: ["*"])
-    """Destinations allowed during execution; `*` leaves egress unrestricted."""
+    """Destinations allowed during execution; `*` is unrestricted and `[]` is
+    framework-only."""
     block: list[str] = Field(default_factory=list)
-    """Destinations denied during execution."""
+    """Destinations denied during execution; any `*` makes the policy framework-only."""
+
+    @model_validator(mode="after")
+    def _validate_network_policy(self) -> Self:
+        if not self.allow or "*" in self.block:
+            # Empty allowlists and wildcard blocks both mean framework-only access.
+            self.allow = []
+            self.block = ["*"]
+        elif self.allow != ["*"] and self.block:
+            raise ValueError(
+                "non-empty concrete allow and block egress lists are mutually exclusive"
+            )
+        return self
 
     @property
     def network_restricted(self) -> bool:
         return "*" not in self.allow or bool(self.block)
 
     def with_task_network_policy(self, allow: list[str], block: list[str]) -> Self:
+        values = self.model_dump()
+        if not allow or not self.allow or "*" in block:
+            # Framework-only access is absorbing; composition cannot widen either side.
+            return type(self).model_validate({**values, "allow": [], "block": ["*"]})
         if "*" not in allow:
             allow = (
                 allow
@@ -118,9 +135,7 @@ class NetworkPolicyConfig(BaseConfig):
         else:
             allow = self.allow
         block = list(dict.fromkeys([*block, *self.block]))
-        return type(self).model_validate(
-            {**self.model_dump(), "allow": allow, "block": block}
-        )
+        return type(self).model_validate({**values, "allow": allow, "block": block})
 
 
 class BaseRuntimeInfo(BaseConfig):
@@ -285,7 +300,7 @@ class Runtime(ABC):
 
     async def prepare_execution(self, routes: list[str]) -> None:
         """Last setup step, right before the agent starts. Restricted runtimes enforce
-        their policy here while keeping the interception and MCP `routes` reachable."""
+        their policy here; `routes` identifies the interception and MCP endpoints."""
 
     @property
     def network_restricted(self) -> bool:

verifiers/v1/runtimes/prime.py

@@ -16,6 +16,7 @@ from pathlib import Path, PurePosixPath
 from typing import ClassVar, Literal
 from urllib.parse import urlsplit
 
+from prime_sandboxes.models import validate_egress_lists
 from pydantic import Field, model_validator
 
 from verifiers.v1.errors import SandboxError
@@ -75,12 +76,12 @@ class PrimeConfig(NetworkPolicyConfig):
             raise ValueError(
                 "Prime allow/block egress lists require a VM sandbox (vm=true)"
             )
-        from prime_sandboxes.models import validate_egress_lists
-
-        allow = None if self.allow == ["*"] else self.allow
-        block = self.block or None
-        if allow is not None or block != ["*"]:
-            validate_egress_lists(allow, block)
+        if not self.allow:
+            return self
+        validate_egress_lists(
+            None if self.allow == ["*"] else self.allow,
+            self.block or None,
+        )
         return self
 
     @model_validator(mode="after")
@@ -185,13 +186,15 @@ class PrimeRuntime(Runtime):
         if not self.network_restricted:
             return
         try:
+            hosts = list(
+                dict.fromkeys(
+                    h for h in (urlsplit(route).hostname for route in routes) if h
+                )
+            )
             if self.config.allow == ["*"]:
                 policy = {"deny": self.config.block}
             else:
-                hosts = [h for h in (urlsplit(route).hostname for route in routes) if h]
                 entries = list(dict.fromkeys([*hosts, *self.config.allow]))
-                from prime_sandboxes.models import validate_egress_lists
-
                 validate_egress_lists(entries, None)
                 policy = {"allow": entries} if entries else {"deny": ["*"]}
             status = await self._client.set_network(self.info.id, **policy)

verifiers/v1/task.py

@@ -120,7 +120,8 @@ class TaskData(StrictBaseModel):
     entries. Prime runtimes accept host-level entries and require `vm=true`."""
     network_block: list[str] = Field(default_factory=list)
     """Execution-time destinations denied by this task and combined with runtime
-    blocks. Prime runtimes cannot combine an allowlist and a blocklist."""
+    blocks. Non-empty concrete allowlists cannot be combined with blocklists. Docker
+    framework routes take precedence; ordinary Prime deny rules pass through unchanged."""
     timeout: TaskTimeout = TaskTimeout()
     resources: TaskResources = TaskResources()
 

{verifiers-0.2.2.dev36.dist-info → verifiers-0.2.2.dev38.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: verifiers
-Version: 0.2.2.dev36
+Version: 0.2.2.dev38
 Summary: Verifiers: Environments for LLM Reinforcement Learning
 Project-URL: Homepage, https://github.com/primeintellect-ai/verifiers
 Project-URL: Documentation, https://github.com/primeintellect-ai/verifiers

{verifiers-0.2.2.dev36.dist-info → verifiers-0.2.2.dev38.dist-info}/RECORD

@@ -184,7 +184,7 @@ verifiers/v1/rollout.py,sha256=eU01fZRf87lQ5LQUVIDN38SlcUE0svXxfyS0gryNboE,20503
 verifiers/v1/scoring.py,sha256=-R5Cog14r_tJ6Q_oOfGr5VPAm2CCUhofYZB6B9lm4wM,5787
 verifiers/v1/session.py,sha256=J6ZPuvsg6vMTJAs9dMUMtfdjCuvp6Hom877DVdKFKlY,6912
 verifiers/v1/state.py,sha256=R8tyQv8nsFV2pztrquDqCOa1Mk1fAp3w2GjqUugZwE0,689
-verifiers/v1/task.py,sha256=VSle6Y8zb3DLxzaoTwJR9-0ROnCTvPFuXie_BfaMoKE,10975
+verifiers/v1/task.py,sha256=-NQVKoiRXn83Q5RM0fX0qFSTA0tWapkL2S1gFU1RDW0,11076
 verifiers/v1/taskset.py,sha256=PX1-skAVhSpGF07qjxcG0Ctmq1LiMftMxxok-uc8qRY,3939
 verifiers/v1/trace.py,sha256=bg-hFtn-m-lT676myUlUddk5GYyGcZbwKPupiMHMbGc,26618
 verifiers/v1/types.py,sha256=5tZyG4r4bLJ9a14oybHy7bSCpt5X5A17eRwmIszuRo8,9118
@@ -292,10 +292,10 @@ verifiers/v1/mcp/launch.py,sha256=lRtcl98BO7imC44bsxO2yljwRQR_KCvJ6P-bd_hS5L8,18
 verifiers/v1/mcp/server.py,sha256=uW8qddXQbtECxIPCU-lkOlFIv3VKWoFAeZFNhwPoyWo,10985
 verifiers/v1/mcp/toolset.py,sha256=tSPXgTNREZyaeCnoFVnDfXxFAj_pStZMPUIgyPrY_Dk,996
 verifiers/v1/runtimes/__init__.py,sha256=TqNtJVahzQuLS4fgCVeT9xdOzTkp0hRAPOkl7eFVDUg,2011
-verifiers/v1/runtimes/base.py,sha256=VU55o9YEak6fgYjQoL912nEETAOBYziL0utf0j60vUc,13411
+verifiers/v1/runtimes/base.py,sha256=hv1McFrIZgymLwMLNYPAlsR4At0uz60haVo5eXrFbNU,14196
 verifiers/v1/runtimes/limiters.py,sha256=ZjjYUFEt20yH8ggL5uU9w9U500AOB44qSUTQ7bYyh0c,2730
 verifiers/v1/runtimes/modal.py,sha256=FnocoJd9lQVQS3V3CoBon7KpKXm1bKWWeU2FAkq2bKU,8825
-verifiers/v1/runtimes/prime.py,sha256=mJPp4dm-ApBX3MRlek__ntzBKmkgHnRR5XLS4kg65Rk,15120
+verifiers/v1/runtimes/prime.py,sha256=wldpcZnKZHNRldpoubeMgHdl-ZlKWOyeulFu4nHNKwc,15110
 verifiers/v1/runtimes/subprocess.py,sha256=dOqYZycTO5wmXqg0Lg1h3l_CPh6Zok4PmTFcc-uE4WY,5989
 verifiers/v1/runtimes/docker/__init__.py,sha256=eC5hjfyPwvwEKaeZUeP9EN8tJkrl0HUxGMzjiK4tK4Q,14555
 verifiers/v1/runtimes/docker/egress.py,sha256=37UXgNX9gnoLxjMg4KZaJIGoApCAM6MK22eJGNoMi38,14514
@@ -327,8 +327,8 @@ verifiers/v1/utils/logging.py,sha256=OcMHA6NsYux3oIzjPuI95rDWmFBHNcHDjZeNIhXTX-Y
 verifiers/v1/utils/memory.py,sha256=ZkIvGk6uITAH5sKon65LifKPbvZr8mJ__PVc23FZpOQ,1835
 verifiers/v1/utils/sampling.py,sha256=JczGzBn6s3wsIrSY2Hy3hE8m6NreNgsNzhSjDikQqX0,1037
 verifiers/v1/utils/version.py,sha256=-obEo_-l9-D8FLef4hYxncOe-uJpxrM1g2Hig_37Sgs,1607
-verifiers-0.2.2.dev36.dist-info/METADATA,sha256=8W-AXmA5ITiRi1s2jGMZt0CVXr2iEBTrYd6pvxx7ZEI,4540
-verifiers-0.2.2.dev36.dist-info/WHEEL,sha256=lCkmxWfQsSc9CfIClYeavTdQeEX2toPqufh9gI35EQA,87
-verifiers-0.2.2.dev36.dist-info/entry_points.txt,sha256=dF82JUYEFslR1AOW8LZfuBWeZeQoyX4wCRrduklg8-I,551
-verifiers-0.2.2.dev36.dist-info/licenses/LICENSE,sha256=v0RrUsdV3IDoZhrRce297IXS3xMHNJ-_LdLpFAUWb9k,1072
-verifiers-0.2.2.dev36.dist-info/RECORD,,
+verifiers-0.2.2.dev38.dist-info/METADATA,sha256=nNKqfDrRf0E27tQX765bwhTw913GLiOjcP-lSOgsK4c,4540
+verifiers-0.2.2.dev38.dist-info/WHEEL,sha256=lCkmxWfQsSc9CfIClYeavTdQeEX2toPqufh9gI35EQA,87
+verifiers-0.2.2.dev38.dist-info/entry_points.txt,sha256=dF82JUYEFslR1AOW8LZfuBWeZeQoyX4wCRrduklg8-I,551
+verifiers-0.2.2.dev38.dist-info/licenses/LICENSE,sha256=v0RrUsdV3IDoZhrRce297IXS3xMHNJ-_LdLpFAUWb9k,1072
+verifiers-0.2.2.dev38.dist-info/RECORD,,