Run an outside PR's tests with no network

bash
API=https://beta-api.b3os.orgAUTH="Authorization: Bearer $B3OS_API_KEY"HEAD=f1d76f52b68f9161cc2b6d3093f151e774c6748brun() { jq -n --arg cmd "$1" '{cmd: $cmd, timeout_ms: 60000}' \  | curl -s "$API/v1/sandboxes/$SBX/exec" -H "$AUTH" -H "Content-Type: application/json" -d @- \  | jq -r '.stdout, "exit \(.exit_code)"'; }SBX=$(curl -s "$API/v1/sandboxes" -H "$AUTH" -H "Content-Type: application/json" \  -d '{"template": "base", "vcpu": 2, "memory_mib": 2048, "timeout_s": 600}' | jq -r .id)# The credential only in this command's env (a token would go where the canary is).jq -n --arg cmd "git init -q pr && cd pr && git remote add origin https://github.com/jshttp/cookie.git && git fetch -q --depth 1 origin $HEAD && git checkout -q --detach FETCH_HEAD" \  '{cmd: $cmd, timeout_ms: 60000, env: {GIT_CONFIG_COUNT: "1", GIT_CONFIG_KEY_0: "http.extraHeader", GIT_CONFIG_VALUE_0: "X-Canary: replace-me"}}' \  | curl -s "$API/v1/sandboxes/$SBX/exec" -H "$AUTH" -H "Content-Type: application/json" -d @- | jq .exit_codecurl -s "$API/v1/sandboxes/$SBX/egress" -H "$AUTH" -H "Content-Type: application/json" \  -d '{"mode": "allowlist", "allow": ["registry.npmjs.org"]}' | jq .egressrun "cd pr && npm_config_cache=/tmp/npm npm ci --ignore-scripts --no-audit --no-fund 2>&1 | grep '^added'"curl -s "$API/v1/sandboxes/$SBX/egress" -H "$AUTH" -H "Content-Type: application/json" \  -d '{"mode": "deny"}' | jq .egressrun "cd pr && NO_COLOR=1 npm_config_cache=/tmp/npm npx --no-install vitest run 2>&1 | grep -E 'Test Files|Tests '"run "cd pr && git config --get-all http.extraheader || echo 'no http.extraheader in the clone'"curl -s "$API/v1/actions/call" -H "$AUTH" -H "Content-Type: application/json" \  -d '{"ref": "io.b3os/deps-dev/get-version@1", "input": {"system": "npm", "name": "vitest", "version": "4.1.9"}}' \  | jq '.output | {licenses, advisories}'curl -s -X DELETE "$API/v1/sandboxes/$SBX" -H "$AUTH" | jq .status

ts
const API = "https://beta-api.b3os.org";const headers = { authorization: `Bearer ${process.env.B3OS_API_KEY}`, "content-type": "application/json" };const call = async (method: string, path: string, body?: unknown): Promise<any> =>  (await fetch(`${API}${path}`, { method, headers, body: body === undefined ? undefined : JSON.stringify(body) })).json();const head = "f1d76f52b68f9161cc2b6d3093f151e774c6748b";const sbx = await call("POST", "/v1/sandboxes", { template: "base", vcpu: 2, memory_mib: 2048, timeout_s: 600 });const run = (cmd: string, env?: Record<string, string>) =>  call("POST", `/v1/sandboxes/${sbx.id}/exec`, { cmd, env, timeout_ms: 60000 });try {  await run(    `git init -q pr && cd pr && git remote add origin https://github.com/jshttp/cookie.git && git fetch -q --depth 1 origin ${head} && git checkout -q --detach FETCH_HEAD`,    // The credential only in this command's env; a token would go where the canary is.    { GIT_CONFIG_COUNT: "1", GIT_CONFIG_KEY_0: "http.extraHeader", GIT_CONFIG_VALUE_0: "X-Canary: replace-me" },  );  await call("POST", `/v1/sandboxes/${sbx.id}/egress`, { mode: "allowlist", allow: ["registry.npmjs.org"] });  await run("cd pr && npm ci --ignore-scripts --no-audit --no-fund", { npm_config_cache: "/tmp/npm" });  await call("POST", `/v1/sandboxes/${sbx.id}/egress`, { mode: "deny" });  const tests = await run("cd pr && npx --no-install vitest run", { npm_config_cache: "/tmp/npm" });  const deps = await call("POST", "/v1/actions/call", {    ref: "io.b3os/deps-dev/get-version@1",    input: { system: "npm", name: "vitest", version: "4.1.9" },  });  const note = await call("POST", "/v1/infer/chat/completions", {    model: "b3os/qwen3.5-9b",    temperature: 0,    chat_template_kwargs: { enable_thinking: false },    messages: [      { role: "system", content: "Write a three-sentence note for the maintainer from these facts only." },      { role: "user", content: JSON.stringify({ tests: tests.stdout.slice(-400), vitest: deps.output }) },    ],  });  console.log(note.choices[0].message.content);} finally {  await call("DELETE", `/v1/sandboxes/${sbx.id}`);}

python
import jsonimport osimport requestsAPI = "https://beta-api.b3os.org"s = requests.Session()s.headers["Authorization"] = f"Bearer {os.environ['B3OS_API_KEY']}"HEAD = "f1d76f52b68f9161cc2b6d3093f151e774c6748b"sbx = s.post(f"{API}/v1/sandboxes", json={"template": "base", "vcpu": 2, "memory_mib": 2048, "timeout_s": 600}).json()run = lambda cmd, env=None: s.post(f"{API}/v1/sandboxes/{sbx['id']}/exec",                                   json={"cmd": cmd, "env": env or {}, "timeout_ms": 60000}).json()try:    # The credential only in this command's env; a token would go where the canary is.    run(f"git init -q pr && cd pr && git remote add origin https://github.com/jshttp/cookie.git && "        f"git fetch -q --depth 1 origin {HEAD} && git checkout -q --detach FETCH_HEAD",        {"GIT_CONFIG_COUNT": "1", "GIT_CONFIG_KEY_0": "http.extraHeader", "GIT_CONFIG_VALUE_0": "X-Canary: replace-me"})    s.post(f"{API}/v1/sandboxes/{sbx['id']}/egress", json={"mode": "allowlist", "allow": ["registry.npmjs.org"]})    run("cd pr && npm ci --ignore-scripts --no-audit --no-fund", {"npm_config_cache": "/tmp/npm"})    s.post(f"{API}/v1/sandboxes/{sbx['id']}/egress", json={"mode": "deny"})    tests = run("cd pr && npx --no-install vitest run", {"npm_config_cache": "/tmp/npm"})    deps = s.post(f"{API}/v1/actions/call", json={        "ref": "io.b3os/deps-dev/get-version@1",        "input": {"system": "npm", "name": "vitest", "version": "4.1.9"},    }).json()    note = s.post(f"{API}/v1/infer/chat/completions", json={        "model": "b3os/qwen3.5-9b", "temperature": 0, "chat_template_kwargs": {"enable_thinking": False},        "messages": [            {"role": "system", "content": "Write a three-sentence note for the maintainer from these facts only."},            {"role": "user", "content": json.dumps({"tests": tests["stdout"][-400:], "vitest": deps["output"]})},        ],    }).json()    print(note["choices"][0]["message"]["content"])finally:    s.delete(f"{API}/v1/sandboxes/{sbx['id']}")

The remote B3OS MCP server creates the sandbox, runs commands and calls the action, but it has no tool that changes a running sandbox's egress yet, so make the two POST /v1/sandboxes/{id}/egress calls with the API (the curl tab) and ask your agent for the rest:

text
In sandbox <id>, run `npm ci --ignore-scripts` in /workspace/pr. When I say egress is denied, run the tests with`npx --no-install vitest run`.Look up vitest 4.1.9 on npm with the deps-dev get-version action. Tell me whether the tests passed and whether anyadvisory applies, then delete the sandbox.

The agent calls sandbox_exec, actions_call and sandbox_delete.