wafer-cli 0.2.19__tar.gz → 0.2.20__tar.gz

{wafer_cli-0.2.19 → wafer_cli-0.2.20}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: wafer-cli
-Version: 0.2.19
+Version: 0.2.20
 Summary: CLI tool for running commands on remote GPUs and GPU kernel optimization agent
 Requires-Python: >=3.11
 Requires-Dist: typer>=0.12.0

{wafer_cli-0.2.19 → wafer_cli-0.2.20}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "wafer-cli"
-version = "0.2.19"
+version = "0.2.20"
 description = "CLI tool for running commands on remote GPUs and GPU kernel optimization agent"
 requires-python = ">=3.11"
 dependencies = [

{wafer_cli-0.2.19 → wafer_cli-0.2.20}/tests/test_cli_coverage.py

@@ -719,3 +719,17 @@ class TestWorkspacesExecFlagPassthrough:
             "workspaces", "exec", "test-ws", "--", "cmd", "--output=/tmp/out"
         ])
         assert "no such option" not in result.output.lower()
+
+
+class TestAgentNoSandboxOption:
+    """Test --no-sandbox option in wafer agent command."""
+
+    def test_agent_no_sandbox_option_exists(self) -> None:
+        """Test that --no-sandbox option is accepted by wafer agent command."""
+        result = runner.invoke(app, ["agent", "--help"])
+        assert result.exit_code == 0
+        # Strip ANSI escape codes before checking (help output may contain color codes)
+        ansi_escape = re.compile(r'\x1b\[[0-9;]*m')
+        clean_output = ansi_escape.sub('', result.stdout)
+        assert "--no-sandbox" in clean_output
+        assert "liability" in clean_output.lower()  # Warning text should be in help

{wafer_cli-0.2.19 → wafer_cli-0.2.20}/tests/test_wevin_cli.py

@@ -634,35 +634,114 @@ def test_streaming_frontend_session_start_state_without_session_id():
 
 def test_streaming_frontend_session_start_resumed_then_new():
     """Test session_start emission when resuming but states have different session_id.
-    
+
     Edge case: --resume used but states return different session_id (should use states one).
     """
     import trio
 
     from wafer.wevin_cli import StreamingChunkFrontend
-    
+
     async def run_test() -> None:
         # Start with resumed session_id
         frontend = StreamingChunkFrontend(
             session_id="resumed-session-123",
             model="claude-sonnet-4.5"
         )
-        
+
         emitted_events = []
 
         def mock_emit(obj) -> None:
             emitted_events.append(obj)
-        
+
         frontend._emit = mock_emit
-        
+
         # start() emits session_start for resumed session
         await frontend.start()
         assert len(emitted_events) == 1
         assert emitted_events[0]["session_id"] == "resumed-session-123"
-        
+
         # If states have different session_id (shouldn't happen, but handle gracefully)
         # The logic in main() checks `if first_session_id and not session_id`
         # So if session_id was set, it won't emit again
         # This is correct behavior - use the one from --resume
-    
+
     trio.run(run_test)
+
+
+# =============================================================================
+# --no-sandbox flag tests
+# =============================================================================
+
+
+def test_no_sandbox_parameter_accepted():
+    """Test that no_sandbox parameter exists in wevin_main signature."""
+    import inspect
+
+    from wafer.wevin_cli import main as wevin_main
+
+    sig = inspect.signature(wevin_main)
+    params = sig.parameters
+
+    # Verify parameter exists
+    assert 'no_sandbox' in params
+
+    # Verify type and default
+    assert str(params['no_sandbox'].annotation) in ('bool', "<class 'bool'>")
+    assert params['no_sandbox'].default is False
+
+
+def test_build_environment_accepts_no_sandbox():
+    """Test that _build_environment accepts no_sandbox parameter."""
+    import inspect
+
+    from wafer.wevin_cli import _build_environment
+
+    sig = inspect.signature(_build_environment)
+    params = sig.parameters
+
+    assert 'no_sandbox' in params
+    assert params['no_sandbox'].default is False
+
+
+def test_build_environment_with_no_sandbox_false():
+    """Test _build_environment creates env with sandbox ENABLED when no_sandbox=False."""
+    from wafer_core.rollouts.templates import TemplateConfig
+    from wafer_core.sandbox import SandboxMode
+
+    from wafer.wevin_cli import _build_environment
+
+    tpl = TemplateConfig(
+        name="test",
+        description="Test template",
+        system_prompt="Test",
+        tools=["read"],
+    )
+
+    # This will raise RuntimeError if sandbox is unavailable on this system
+    # That's expected - we're testing that sandbox is ENABLED by default
+    try:
+        env = _build_environment(tpl, None, None, no_sandbox=False)
+        # If we get here, sandbox is available - verify it's enabled
+        assert env.sandbox_mode == SandboxMode.ENABLED
+    except RuntimeError as e:
+        # Sandbox unavailable - that's OK, the error proves ENABLED is set
+        assert "sandboxing is not available" in str(e)
+
+
+def test_build_environment_with_no_sandbox_true():
+    """Test _build_environment creates env with sandbox DISABLED when no_sandbox=True."""
+    from wafer_core.rollouts.templates import TemplateConfig
+    from wafer_core.sandbox import SandboxMode
+
+    from wafer.wevin_cli import _build_environment
+
+    tpl = TemplateConfig(
+        name="test",
+        description="Test template",
+        system_prompt="Test",
+        tools=["read"],
+    )
+
+    # This should NOT raise - sandbox is disabled
+    env = _build_environment(tpl, None, None, no_sandbox=True)
+    assert env.sandbox_mode == SandboxMode.DISABLED

{wafer_cli-0.2.19 → wafer_cli-0.2.20}/wafer/cli.py

@@ -1327,6 +1327,11 @@ def agent(  # noqa: PLR0913
         "-c",
         help="Documentation corpus to use (cuda, cutlass, hip, amd). Must be downloaded first.",
     ),
+    no_sandbox: bool = typer.Option(
+        False,
+        "--no-sandbox",
+        help="Disable OS-level sandboxing (YOU accept liability for any damage caused by the agent)",
+    ),
 ) -> None:
     """AI assistant for GPU kernel development.
 
@@ -1408,6 +1413,13 @@ def agent(  # noqa: PLR0913
                 raise typer.Exit(1) from None
         corpus_path = str(path)
 
+    # Warn user about sandbox disabled
+    if no_sandbox:
+        print(
+            "Warning: Sandbox disabled. You accept liability for any damage caused by the agent.",
+            file=sys.stderr,
+        )
+
     wevin_main(
         prompt=actual_prompt,
         interactive=use_tui,
@@ -1425,6 +1437,7 @@ def agent(  # noqa: PLR0913
         template=template,
         template_args=parsed_template_args,
         corpus_path=corpus_path,
+        no_sandbox=no_sandbox,
     )
 
 
@@ -1455,6 +1468,7 @@ def _make_agent_alias(name: str, doc: str) -> None:
         template: str | None = typer.Option(None, "--template", "-t"),
         template_args: list[str] | None = typer.Option(None, "--args"),
         corpus: str | None = typer.Option(None, "--corpus"),
+        no_sandbox: bool = typer.Option(False, "--no-sandbox"),
     ) -> None:
         agent(
             prompt=prompt,
@@ -1474,6 +1488,7 @@ def _make_agent_alias(name: str, doc: str) -> None:
             template=template,
             template_args=template_args,
             corpus=corpus,
+            no_sandbox=no_sandbox,
         )
 
     alias_cmd.__doc__ = doc

{wafer_cli-0.2.19 → wafer_cli-0.2.20}/wafer/wevin_cli.py

@@ -266,18 +266,22 @@ def _build_environment(
     tpl: TemplateConfig,
     tools_override: list[str] | None,
     corpus_path: str | None,
+    no_sandbox: bool = False,
 ) -> Environment:
     """Build a CodingEnvironment from template config."""
     from wafer_core.environments.coding import CodingEnvironment
     from wafer_core.rollouts.templates import DANGEROUS_BASH_COMMANDS
+    from wafer_core.sandbox import SandboxMode
 
     working_dir = Path(corpus_path) if corpus_path else Path.cwd()
     resolved_tools = tools_override or tpl.tools
+    sandbox_mode = SandboxMode.DISABLED if no_sandbox else SandboxMode.ENABLED
     env: Environment = CodingEnvironment(
         working_dir=working_dir,
         enabled_tools=resolved_tools,
         bash_allowlist=tpl.bash_allowlist,
         bash_denylist=DANGEROUS_BASH_COMMANDS,
+        sandbox_mode=sandbox_mode,
     )  # type: ignore[assignment]
     return env
 
@@ -362,6 +366,7 @@ def main(  # noqa: PLR0913, PLR0915
     list_sessions: bool = False,
     get_session: str | None = None,
     json_output: bool = False,
+    no_sandbox: bool = False,
 ) -> None:
     """Run wevin agent in-process via rollouts."""
     from dataclasses import asdict
@@ -505,7 +510,7 @@ def main(  # noqa: PLR0913, PLR0915
 
     # Build endpoint and environment
     endpoint = _build_endpoint(tpl, model, api_base, api_key)
-    environment = _build_environment(tpl, tools, corpus_path)
+    environment = _build_environment(tpl, tools, corpus_path, no_sandbox)
 
     # Session store
     session_store = FileSessionStore()

{wafer_cli-0.2.19 → wafer_cli-0.2.20}/wafer_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: wafer-cli
-Version: 0.2.19
+Version: 0.2.20
 Summary: CLI tool for running commands on remote GPUs and GPU kernel optimization agent
 Requires-Python: >=3.11
 Requires-Dist: typer>=0.12.0