feat: bump openai-agents to 0.14.3 + add local-sandbox OpenAI Agents SDK tutorial

[danielmillerp]

What

Bump openai-agents from the hard pin ==0.14.1 to >=0.14.3,<0.15 (locks resolve to 0.14.8).

Why

The new scale-sandbox oai_agents adapter — ScaleSandboxClient, which implements the OpenAI Agents SDK BaseSandboxClient protocol so an Agent/SandboxAgent can run inside a real ARP (Scale) sandbox — imports symbols that only exist in openai-agents >= 0.14.3:

• agents.sandbox.workspace_paths.sandbox_path_str, posix_path_for_error
• agents.sandbox.errors.ExecNonZeroError, PtySessionNotFoundError

The adapter's _imports.py wraps all of its agents.sandbox.* imports in a single try/except ImportError. On 0.14.1 that block fails (missing symbols above) and every name falls back to None, so class ScaleSandboxClientOptions(BaseSandboxClientOptions) raises TypeError: NoneType takes no arguments at import time. Verified locally: adapter import fails on 0.14.1, imports + instantiates cleanly on 0.14.3.

This unblocks a new pubsec-dev agent that runs the OpenAI Agents SDK inside Temporal (via the standard OpenAIAgentsPlugin + temporalio.contrib.openai_agents.SandboxClientProvider) with ARP sandboxes as the execution environment.

Scope

• pyproject.toml: the one pin.
• requirements.lock / requirements-dev.lock: openai-agents==0.14.1 → 0.14.8.
• uv.lock: openai-agents 0.14.1→0.14.8; also re-sync corrected pre-existing drift already present on next (workspace version, scale-gp-beta specifier) so the lock matches pyproject.

Base (non-extra) transitive deps are identical between 0.14.1 and 0.14.3 (diffs are confined to unused extras: mongodb, and the temporal extra's temporalio bump), so this is a low-risk bump.

Release

Needs a release cut (Stainless version bump) before the downstream agent's image build can install it.

🤖 Generated with Claude Code

Greptile Summary

This PR bumps openai-agents from the hard-pinned ==0.14.1 to >=0.14.3,<0.15 (resolving to 0.14.8 in lock files) to unblock the ScaleSandboxClient adapter, which imports symbols (sandbox_path_str, ExecNonZeroError, PtySessionNotFoundError) that only exist in >=0.14.3.

• pyproject.toml: Relaxes the pin from ==0.14.1 to >=0.14.3,<0.15; all three lock files (requirements.lock, requirements-dev.lock, uv.lock) are consistently updated to 0.14.8.
• uv.lock: Base transitive dependencies for openai-agents are unchanged between 0.14.1 and 0.14.8 (same set: griffelib, openai, opentelemetry-api, pydantic, requests, typing-extensions, websockets), confirming the low-risk characterization.
• Test file: A single comment line was added to trigger re-execution of the tutorial integration tests against the new version.

Confidence Score: 5/5

Safe to merge — this is a targeted dependency version bump with no changes to application logic.

The only substantive change is relaxing the openai-agents pin from ==0.14.1 to >=0.14.3,<0.15, resolving to 0.14.8. All three lock files are consistently updated, the base transitive dependency set is identical between 0.14.1 and 0.14.8, and the upper bound <0.15 prevents unintentional major-version drift. The test file touch is comment-only.

No files require special attention.

Important Files Changed

Filename	Overview
pyproject.toml	Single-line change relaxing the openai-agents pin from ==0.14.1 to >=0.14.3,<0.15; upper bound and lower bound are both appropriate.
uv.lock	Lock entry updated to 0.14.8 with correct hashes and matching base transitive dependency set (identical to 0.14.1).
requirements.lock	Single-line version bump from 0.14.1 to 0.14.8, consistent with uv.lock and pyproject.toml.
requirements-dev.lock	Single-line version bump from 0.14.1 to 0.14.8, consistent with requirements.lock.
examples/tutorials/10_async/10_temporal/060_open_ai_agents_sdk_hello_world/tests/test_agent.py	Comment-only touch to force CI re-run of the tutorial integration tests against the new openai-agents version.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[pyproject.toml\nopenai-agents >=0.14.3,<0.15] --> B[uv.lock resolves to 0.14.8]
    A --> C[requirements.lock → 0.14.8]
    A --> D[requirements-dev.lock → 0.14.8]

    B --> E{Base transitive deps\n0.14.1 vs 0.14.8}
    E -->|Identical| F[griffelib, openai, pydantic\nopentelemetry-api, requests\ntyping-extensions, websockets]

    G[ScaleSandboxClient adapter\n_imports.py] -->|Requires >=0.14.3| H[agents.sandbox.workspace_paths\nsandbox_path_str, posix_path_for_error]
    G -->|Requires >=0.14.3| I[agents.sandbox.errors\nExecNonZeroError, PtySessionNotFoundError]

    H --> J[Import succeeds on 0.14.8 ✓]
    I --> J
    F --> J

Loading

_{Reviews (2): Last reviewed commit: "test(ci): touch 060 openai-agents tutori..." | Re-trigger Greptile}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	openai-agents@​0.14.1 ⏵ 0.14.8	+1

View full report

[danielmillerp]

Rebased onto latest next (the pyproject conflict was next swapping tzlocal/tzdata/pytest → pydantic-ai-slim around the openai-agents line — resolved in favor of next's structure + the bump). Lock diff kept surgical: openai-agents 0.14.1 → 0.14.8 only.

Also added a no-op comment to the 060 openai-agents tutorial test so the examples/tutorials/** path filter matches and the tutorial build/integration tests run on this PR.

[danielmillerp]

Added examples/tutorials/00_sync/050_openai_agents_local_sandbox/ — a sync FastACP tutorial demonstrating the OpenAI Agents SDK with a LOCAL sandbox (UnixLocalSandboxClient): a SandboxAgent with the Shell capability runs real shell commands on the host via Runner.run. Mirrors 040_pydantic_ai's structure (acp/agent/tools/tests/manifest/Dockerfile). Bundled here because it needs the openai-agents>=0.14.3 bump in this PR (the agents.sandbox API). Tests in tests/test_agent.py exercise the sandbox (python version + a compute).