verifiers 0.3.1.dev5__tar.gz → 0.3.1.dev7__tar.gz

{verifiers-0.3.1.dev5 → verifiers-0.3.1.dev7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: verifiers
-Version: 0.3.1.dev5
+Version: 0.3.1.dev7
 Summary: Verifiers: Environments for LLM Reinforcement Learning
 Project-URL: Homepage, https://github.com/primeintellect-ai/verifiers
 Project-URL: Documentation, https://github.com/primeintellect-ai/verifiers

{verifiers-0.3.1.dev5 → verifiers-0.3.1.dev7}/verifiers/v1/configs/serve.py

@@ -43,8 +43,10 @@ class ServeConfig(BaseConfig):
     pool: PoolConfig = Field(default_factory=ElasticPoolConfig)
     """Worker-pool sizing. `elastic` (default) starts at one worker and scales up on
     demand; `static` pre-spawns a fixed `num_workers`."""
-    address: str = "tcp://127.0.0.1:5000"
-    """ZMQ address the ROUTER binds (and clients connect to)."""
+    address: str | None = None
+    """ZMQ address the ROUTER binds (and clients connect to). None leaves the choice
+    to whoever hosts the env — `serve_env` falls back to its default loopback bind, a
+    launcher may derive one per server."""
     max_concurrent: int | None = Field(None, ge=1)
     """Episodes in flight per worker (None = take the run's own bound, e.g. an eval's
     `--max-concurrent`). Pin it to hold a worker below what the run asks for; how many

{verifiers-0.3.1.dev5 → verifiers-0.3.1.dev7}/verifiers/v1/runtimes/docker/egress.py

@@ -61,7 +61,7 @@ class NetworkPolicy:
             and not any(
                 rule == "*"
                 or (
-                    urlsplit(rule.lower()).scheme == "https"
+                    urlsplit(rule.lower()).scheme == scheme
                     and _rule_matches(rule, scheme, host, port)
                 )
                 for rule in [*self.routes, *self.allow]
@@ -186,8 +186,19 @@ class EgressProxy:
             connect = method == "CONNECT"
             if connect:
                 parsed = urlsplit(f"//{target}")
-                scheme = "https"
                 host, port = parsed.hostname or "", parsed.port or 443
+                # Some HTTP clients tunnel plain HTTP through CONNECT. Only an
+                # explicit framework route can identify that otherwise-ambiguous
+                # tunnel without broadening user-configured egress.
+                scheme = (
+                    "http"
+                    if any(
+                        urlsplit(route.lower()).scheme == "http"
+                        and _rule_matches(route, "http", host, port)
+                        for route in self.policy.routes
+                    )
+                    else "https"
+                )
             else:
                 parsed = urlsplit(target)
                 scheme = parsed.scheme.lower()
@@ -241,17 +252,18 @@ class EgressProxy:
                 response_started = True
                 writer.write(b"HTTP/1.1 200 Connection Established\r\n\r\n")
                 await _drain(writer)
-                client_hello, server_name = await _read_client_hello(reader)
-                if server_name is None:
-                    with contextlib.suppress(ValueError):
-                        ip_address(host)
-                        server_name = host
-                if server_name is None or not self.policy.permits(
-                    "https", server_name, port, connect=True
-                ):
-                    return
-                upstream_writer.write(client_hello)
-                await _drain(upstream_writer)
+                if scheme == "https":
+                    client_hello, server_name = await _read_client_hello(reader)
+                    if server_name is None:
+                        with contextlib.suppress(ValueError):
+                            ip_address(host)
+                            server_name = host
+                    if server_name is None or not self.policy.permits(
+                        "https", server_name, port, connect=True
+                    ):
+                        return
+                    upstream_writer.write(client_hello)
+                    await _drain(upstream_writer)
                 await _relay(reader, writer, upstream_reader, upstream_writer)
             else:
                 path = urlunsplit(("", "", parsed.path or "/", parsed.query, ""))

{verifiers-0.3.1.dev5 → verifiers-0.3.1.dev7}/verifiers/v1/serve/pool.py

@@ -272,7 +272,7 @@ def serve_env(
     *,
     max_workers: int | None,
     legacy: bool = False,
-    address: str = "tcp://127.0.0.1:5000",
+    address: str | None = None,
     address_queue=None,
     death_pipe=None,
     log_setup: Callable[[], None] | None = None,
@@ -284,7 +284,7 @@ def serve_env(
     else an `EnvServerPool` broker over up to `max_workers` worker processes (`None` =
     unbounded). The frontend speaks the same protocol either way, so the client is
     identical. Reports the bound address on `address_queue` (for a spawner that passed an
-    OS-assigned `:0`).
+    OS-assigned `:0`). `address` None binds the default loopback `tcp://127.0.0.1:5000`.
 
     `elastic` (default True) starts the pool at one worker and scales up to `max_workers`
     as load grows; `multiplex` is the per-worker capacity for the scale-up trigger (spawn
@@ -307,6 +307,7 @@ def serve_env(
     _arm_teardown(death_pipe)
     if log_setup is not None:
         log_setup()
+    address = address or "tcp://127.0.0.1:5000"
     try:
         if max_workers is None or max_workers > 1:
             if (