FIX: preserve Python import paths in bubblewrap sandbox

Author: grace227

packages/eaa-core/src/eaa_core/tool/coding.py

@@ -508,7 +508,7 @@ def execute_code(
             elif self.sandbox_type == "bubblewrap":
                 result = self._execute_in_bubblewrap(
                     [os.path.realpath(sys.executable), "-c", prepared_code],
-                    env=env,
+                    env=self._build_bubblewrap_python_env(env),
                     timeout=exec_timeout,
                     input_text=input_text,
                     workdir=exec_cwd,
@@ -573,6 +573,20 @@ def _default_python_image() -> str:
         """Return the default Python container image name."""
         return f"python:{sys.version_info.major}.{sys.version_info.minor}"
 
+    def _build_bubblewrap_python_env(self, env: Dict[str, str]) -> Dict[str, str]:
+        """Preserve host import paths when running the resolved interpreter."""
+        bubblewrap_env = env.copy()
+        paths = self._bubblewrap_python_import_bind_paths()
+        paths.extend((env.get("PYTHONPATH") or "").split(os.pathsep))
+        resolved: list[str] = []
+        for path in paths:
+            if not path or path in resolved:
+                continue
+            resolved.append(path)
+        if resolved:
+            bubblewrap_env["PYTHONPATH"] = os.pathsep.join(resolved)
+        return bubblewrap_env
+
 
 class BashCodingTool(CodingTool):
     """Expose a tool that executes Bash code in an isolated subprocess."""

tests/test_coding_tool.py

@@ -198,13 +198,27 @@ def test_python_bubblewrap_executes_resolved_interpreter(
     ):
         venv_bin = tmp_path / ".venv" / "bin"
         runtime_bin = tmp_path / "runtime" / "bin"
+        site_dir = tmp_path / ".venv" / "lib" / "python3.14" / "site-packages"
+        source_dir = tmp_path / "src" / "pkg"
         venv_bin.mkdir(parents=True)
         runtime_bin.mkdir(parents=True)
+        site_dir.mkdir(parents=True)
+        source_dir.mkdir(parents=True)
         runtime_python = runtime_bin / "python3.14"
         runtime_python.write_text("")
+        (site_dir / "__editable__.example.pth").write_text(f"{source_dir}\n")
         venv_python = venv_bin / "python"
         venv_python.symlink_to(runtime_python)
         monkeypatch.setattr("eaa_core.tool.coding.sys.executable", str(venv_python))
+        monkeypatch.setattr(
+            "eaa_core.tool.coding.site.getsitepackages",
+            lambda: [str(site_dir)],
+        )
+        monkeypatch.setattr(
+            "eaa_core.tool.coding.site.getusersitepackages",
+            lambda: str(tmp_path / "missing-user-site"),
+        )
+        monkeypatch.setattr("eaa_core.tool.coding.sys.path", [str(site_dir)])
         captured = {}
 
         def fake_which(name, path=None):
@@ -214,6 +228,7 @@ def fake_which(name, path=None):
 
         def fake_run(command, **kwargs):
             captured["command"] = command
+            captured["env"] = kwargs["env"]
             return subprocess.CompletedProcess(command, 0, stdout="ok\n", stderr="")
 
         monkeypatch.setattr("eaa_core.tool.coding.shutil.which", fake_which)
@@ -228,6 +243,9 @@ def fake_run(command, **kwargs):
         chdir_index = captured["command"].index("--chdir")
         python_command = captured["command"][chdir_index + 2]
         assert python_command == str(runtime_python)
+        pythonpath = captured["env"]["PYTHONPATH"].split(os.pathsep)
+        assert str(site_dir) in pythonpath
+        assert str(source_dir) in pythonpath
 
 
 if __name__ == "__main__":