Pre-installed

Every arm of a task runs in one image built from its environment/Dockerfile. Nothing can be installed at run time: agents reach only the model APIs. The allowed packages are also listed at the end of every design spec.

Every image

SystemDebian bookworm with bash, git, curl, jq, ripgrep, strace, lsof, procps, file, less, zip, unzip, tar and the core utilities
RuntimesNode 22.14.0 · uv 0.9.5 · Python 3.12
Test toolingpytest 8.4.1, pytest-json-ctrf 0.5.0, pytest-timeout 2.4.0, hypothesis 6.160.0, deepdiff 8.6.1, tomli 2.0.1, tomlkit 0.13.3, in the uv cache (in the venv for Python tasks)
Measurementtree-sitter 0.25.2 with the task language's grammar
Directories/workspace for the agent's project, /library for the arm's library

By language

LanguageToolchainPackages
PythonPython 3.12 · ruff 0.16.6A venv at /workspace/.venv with the task's pinned packages and the shared tooling. The uv cache is warmed, so uv lock, sync and build work offline.
RustRust 1.85, 1.88 or 1.91 (per task) · rustfmt · clippy · build-essentialEvery allowed crate is fetched into the cargo registry, and cargo runs offline.
HaskellGHC 9.8.4 · cabal · fourmolu 0.20.1.0Every allowed package is prebuilt in the cabal store, and the task's freeze file pins its version globally.
TypeScriptTypeScript 5.9.3 · tsx 4.21.0 · prettier 3.9.6 · ChromiumThe allowed npm packages in /opt/neutral/node_modules, also copied to /workspace/node_modules.

Python tasks also get the test tooling above, plus the build backends setuptools 82.0.1, wheel 0.47.0, setuptools-scm 10.2.1, hatchling 1.31.0, editables 0.6, hatch-vcs 0.5.0, hatch-fancy-pypi-readme 25.1.0, flit_core 3.12.0, pdm-backend 2.4.9 and poetry-core 2.4.1.

Haskell boot libraries: base 4.19.2.0, array 0.5.8.0, binary 0.8.9.1, bytestring 0.12.1.0, containers 0.6.8, deepseq 1.5.1.0, directory 1.3.8.5, exceptions 0.10.7, filepath 1.4.301.0, mtl 2.3.1, pretty 1.1.3.6, process 1.6.25.0, stm 2.5.3.1, template-haskell 2.21.0.0, text 2.1.1, time 1.12.2, transformers 0.6.1.0, unix 2.8.6.0.

By task

TaskToolchainPinned packages the agent can use
pydaPython 3.12numpy 2.2.6, pyarrow 18.1.0, python-dateutil 2.9.0.post0, pytz 2025.2, tzdata 2025.2, packaging 25.0, fsspec 2024.12.0, typer 0.27.0
python_validationPython 3.12jsonschema 4.23.0, PyYAML 6.0.3, typer 0.27.0
roadkillPython 3.12numpy 2.1.3, pandas 2.2.3, networkx 3.4.2, scipy 1.14.1, matplotlib 3.9.2, shapely 2.0.6, dill 0.3.9, pillow 11.3.0, tqdm 4.67.1; an empty PyQt5 5.15.11 stub; build-essential
sapiPython 3.12PyYAML 6.0.3, httpx 0.28.1, uvicorn 0.51.0
simuPython 3.12PyYAML 6.0.3, numpy 2.1.3, pandas 2.2.3, networkx 3.4.2, scipy 1.14.1, h5py 3.12.1
uglypiePython 3.12PyYAML 6.0.3, geopandas 1.1.1, pandas 2.3.3, shapely 2.1.2, typer 0.27.0
arazuRust 1.91anyhow 1.0.104, approx 0.5.1, bincode 2.0.1, bitflags 2.13.1, clap 4.6.3, crossbeam-channel 0.5.16, glam 0.33.5 and 0.33.6, indexmap 2.14.0, nalgebra 0.35.0, serde 1.0.229, serde_json 1.0.151, syn 3.0.4, thiserror 2.0.19, wide 1.6.1
clirsRust 1.85anyhow 1.0.104, bitflags 2.13.1, bytes 1.12.1, fxhash 0.2.1, indexmap 2.14.0, itoa 1.0.18, memchr 2.8.3, once_cell 1.21.4, regex-lite 0.1.6, ryu 1.0.23, serde 1.0.229, serde_json 1.0.151, serde_yaml 0.9.34, smallvec 1.15.2, thiserror 1.0.69, unicode-segmentation 1.13.3, unicode-width 0.1.14, unicode-xid 0.2.6
nprRust 1.91anyhow 1.0.104, approx 0.5.1, bincode 2.0.1, clap 4.6.3, csv 1.4.0, serde 1.0.229, serde_json 1.0.151, syn 3.0.4, thiserror 2.0.19
rubberbandRust 1.91anyhow 1.0.104, chrono 0.4.45, clap 4.6.3, html-escape 0.2.13, psl 2.1.184, rand 0.9.2, regex 1.13.1, serde 1.0.229, serde_json 1.0.151, tempfile 3.24.0, thiserror 2.0.19, time 0.3.47, unicode-normalization 0.1.25, url 2.5.7
rust_parsingRust 1.88anyhow 1.0.104, bincode 2.0.1, bitflags 2.13.1, bytes 1.12.1, cc 1.4.4, chrono 0.4.45, clap 4.6.3, either 1.16.0, find-msvc-tools 0.1.11, hex 0.4.3, indexmap 2.14.0, itoa 1.0.18, memchr 2.8.2, miette 7.6.0, once_cell 1.21.4, psm 0.1.27, quote 1.0.45, regex 1.13.1, regex-automata 0.3.9 and 0.4.16, ryu 1.0.23, serde 1.0.229, serde_json 1.0.151, smallvec 1.15.2, syn 3.0.3, thiserror 1.0.69, unicode-segmentation 1.13.3, unicode-width 0.1.14, unicode-xid 0.2.6
plaidGHC 9.8.4The boot libraries, scientific 0.3.8.1, vector 0.13.2.0
umamiGHC 9.8.4The boot libraries
wapiGHC 9.8.4The boot libraries, aeson 2.3.1.0, base64-bytestring 1.2.1.0, http-api-data 0.7, http-client 0.7.19, http-conduit 2.3.9.1, http-types 0.12.6, network-uri 2.6.4.2, scientific 0.3.8.1, sqlite-simple 0.4.19.0, unordered-containers 0.2.21, vector 0.13.2.0, wai 3.2.5, warp 3.4.15
hereticalNode 22.14.0@mozilla/readability 0.6.0, jsdom 27.3.0, marked 16.4.2, playwright-core 1.57.0 (drives the system Chromium), tsx 4.21.0, typescript 5.9.3