[init-nikhil]

Stage the portable NOOA runtime for borrowed task sandboxes. This layer now builds on the standard single-agent-turn session integration.

This is part of the existing NOOA integration stack, based on #3848; no separate issue is needed for this requested architecture revision. Shared/base environment servers, shared agent contracts, generic sandbox code, and other harnesses remain fixed.

Patterns adopted from merged #3717 (single-agent-turn lifecycle), #3554/#3961 (Hermes sessions and sandbox cleanup), #3640 (Codex), #3626 (Pi), and open #4560 (borrowed DeepSWE/OpenCode sandbox): seed Resources, seed agent, activate, close agent and collect evidence/cookies, verify, close Resources.

Compatibility: in sandboxed NOOA, agent-owned background services stop before verification; the Resources-owned sandbox and persisted artifacts remain available. Tasks requiring a NOOA-started service during grading are unsupported by this lifecycle. The standard contract has an episode-wide deadline and no separate NOOA agent deadline; Terminal-Bench recipes retain verifier timeouts but do not reproduce canonical per-agent deadlines.

Current revision: 0efed19193e1bb3e906318a6c6486f64078188ee.

Validation evidence:

Implementation pushed before writing or running new behavior tests or local checks, as requested. Existing tests received only mechanical naming/import updates before this push. Checks, exact-layer tests, live-model smoke rollouts, and current-head CI are pending for this revision. Earlier test and CI evidence applies only to earlier revisions and does not validate this change. No new benchmark scores are claimed.

Tests and validation

Current revision: a55f1eddbf13448c30728dafd17ef0af8ac26dbc. Rebased the existing ten-PR stack onto main 9ef5ed0f80a9f81c5d82af6588cd4cc956c4f5d1; assembled tip is 196bd5e333abd6e8ee7a93f4c8805ae33f67a66a (#4357).

Main compatibility adds only two test updates: #3846 gives the fake HTTP response its headers mapping for checkpoint-aware Environment seeding; #4088 checks serialized tool-output snapshots while retaining history, round-trip, and interpreter-object coverage. Both changes were independently reviewed. The rebase preserves upstream NOOA serialization and runtime configuration changes.

Validation on the exact rebased revisions:

• fix(nooa): grade partial output at execution limits #3843: 170 passed (one expected skip-verification aggregate-metrics warning).
• feat(nooa): use standard single-agent-turn sessions #3846: 195 passed.
• feat(nooa): stage a portable sandbox runtime #3844: 218 passed, 8 Linux-only installer skips on macOS.
• Assembled fix(nooa): preserve terminal evidence through standard cleanup #4357 tip: 373 passed, 16 platform skips (10 installer and 6 Linux supervisor tests).
• pre-commit run --all-files passed. DCO sign-offs, sequential layer ancestry, and the focused final diff were checked.

Command from each revision's responses_api_agents/nooa_agent: python -m pytest tests --import-mode=importlib -q -o addopts= -o log_cli=false --tb=short -rs. Exact early-layer tests use installed NOOA 051472343211914222e24ce36d8752f4e86bbe43; the assembled tip uses coherent core/CLI/BenchAgent 19caab169b018476ac433d040f6ae3f06aeff101. Commands and logs: /tmp/nooa-merge-main-candidate-20261016/final-tests-{3843,3846,3844,4357}/.

Prior real-model evidence for the unchanged reviewer-fix behavior remains at /tmp/nooa-review-fixes-20261016/live-final/, run on pre-rebase tip 8185eb1f405ba476aab42b00a222f92dbec4364f: real Qwen output-token and iteration exhaustion each verified once; an actual iteration limit followed by injected cleanup failure remained fatal, skipped verification, and closed both sessions. This main sync adds test compatibility rather than new agent behavior, so that smoke was not rerun and is not presented as a smoke of the rebased tree. It used the integration-test Resources fixture and was not a new SWE-bench/OpenSandbox canary.

GitHub CI is requested for the new heads. Optional cross-harness conformance failures also reproduce on main and are separate from the required Nemo_CICD_Test gate. Existing branch names, bases, draft states, native groups, and description text outside this validation section are preserved.

Required branch CI passed on this revision: 8,793 core tests, 921 sandbox tests, 95.07% coverage, and 226 NOOA tests (including Linux installer tests for #3844).

Signed-off-by: Nikhil Deshmudre nikhil.deshmudre@gmail.com

[copy-pr-bot]

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

[yaoyu-33]

Rechecked at 317ae85. Musl now fails during the target probe before runtime downloads or installation. The exact-head NOOA suite passed: 217 tests, with 8 Linux-only installer tests skipped on macOS. No blocking issue found in this layer; full CI is still outstanding.

[init-nikhil]

/ok to test 317ae85

[yaoyu-33]

Rechecked the main rebase: this layer is unchanged, and inherited test compatibility is fixed. Exact-head NOOA suite: 218 passed, 8 Linux-only skips on macOS. No blocking regression found.

[github-actions]

🔄 Merge queue validation started! You can track the progress here: https://github.com/NVIDIA-NeMo/Gym/actions/runs/38970095732

[github-actions]

🔄 Merge queue validation started! You can track the progress here: https://github.com/NVIDIA-NeMo/Gym/actions/runs/38970607607