chore: Update CI workflows to use specific Docker images for deployment

- Changed the Docker image references in CI workflows (`ci.yml`, `nightly.yml`, `release.yml`, `runtime.yml`) to point to `ghcr.io/usnavy13/librecodeinterpreter` and its associated runtime images.
- Added validation for empty code submissions in the `execute_code` function within `exec.py`.
- Improved code formatting in `programmatic.py` for better readability.

Author: usnavy13

.github/workflows/ci.yml

@@ -18,9 +18,9 @@ permissions:
 
 env:
   PYTHON_VERSION: "3.11"
-  REGISTRY_IMAGE: ghcr.io/${{ github.repository }}
-  RUNTIME_R_IMAGE: ghcr.io/${{ github.repository }}/runtime-r
-  BUILDCACHE_IMAGE: ghcr.io/${{ github.repository }}/buildcache
+  REGISTRY_IMAGE: ghcr.io/usnavy13/librecodeinterpreter
+  RUNTIME_R_IMAGE: ghcr.io/usnavy13/librecodeinterpreter/runtime-r
+  BUILDCACHE_IMAGE: ghcr.io/usnavy13/librecodeinterpreter/buildcache
   LOCAL_API_IMAGE_AMD64: code-interpreter:ci-amd64
   LOCAL_API_IMAGE_ARM64: code-interpreter:ci-arm64
 

.github/workflows/nightly.yml

@@ -15,10 +15,10 @@ permissions:
 
 env:
   PYTHON_VERSION: "3.11"
-  REGISTRY_IMAGE: ghcr.io/${{ github.repository }}
-  RUNTIME_CORE_IMAGE: ghcr.io/${{ github.repository }}/runtime-core
-  RUNTIME_R_IMAGE: ghcr.io/${{ github.repository }}/runtime-r
-  BUILDCACHE_IMAGE: ghcr.io/${{ github.repository }}/buildcache
+  REGISTRY_IMAGE: ghcr.io/usnavy13/librecodeinterpreter
+  RUNTIME_CORE_IMAGE: ghcr.io/usnavy13/librecodeinterpreter/runtime-core
+  RUNTIME_R_IMAGE: ghcr.io/usnavy13/librecodeinterpreter/runtime-r
+  BUILDCACHE_IMAGE: ghcr.io/usnavy13/librecodeinterpreter/buildcache
   LOCAL_API_IMAGE_AMD64: code-interpreter:nightly-amd64
   LOCAL_API_IMAGE_ARM64: code-interpreter:nightly-arm64
 

.github/workflows/release.yml

@@ -16,9 +16,9 @@ permissions:
 
 env:
   PYTHON_VERSION: "3.11"
-  REGISTRY_IMAGE: ghcr.io/${{ github.repository }}
-  RUNTIME_R_IMAGE: ghcr.io/${{ github.repository }}/runtime-r
-  BUILDCACHE_IMAGE: ghcr.io/${{ github.repository }}/buildcache
+  REGISTRY_IMAGE: ghcr.io/usnavy13/librecodeinterpreter
+  RUNTIME_R_IMAGE: ghcr.io/usnavy13/librecodeinterpreter/runtime-r
+  BUILDCACHE_IMAGE: ghcr.io/usnavy13/librecodeinterpreter/buildcache
 
 jobs:
   prepare:

.github/workflows/runtime.yml

@@ -18,10 +18,10 @@ permissions:
   packages: write
 
 env:
-  REGISTRY_IMAGE: ghcr.io/${{ github.repository }}
-  RUNTIME_CORE_IMAGE: ghcr.io/${{ github.repository }}/runtime-core
-  RUNTIME_R_IMAGE: ghcr.io/${{ github.repository }}/runtime-r
-  BUILDCACHE_IMAGE: ghcr.io/${{ github.repository }}/buildcache
+  REGISTRY_IMAGE: ghcr.io/usnavy13/librecodeinterpreter
+  RUNTIME_CORE_IMAGE: ghcr.io/usnavy13/librecodeinterpreter/runtime-core
+  RUNTIME_R_IMAGE: ghcr.io/usnavy13/librecodeinterpreter/runtime-r
+  BUILDCACHE_IMAGE: ghcr.io/usnavy13/librecodeinterpreter/buildcache
 
 jobs:
   prepare:

src/api/exec.py

@@ -85,6 +85,11 @@ async def execute_code(
         state_archival_service=state_archival_service,
     )
 
+    # Streaming responses send headers before iterating the body. Validate
+    # synchronously first so handled request errors still return proper HTTP codes.
+    if not request.code or not request.code.strip():
+        raise ValidationError(message="Code cannot be empty")
+
     async def _stream_response():
         """Execute code and stream the response with keepalive whitespace.
 

src/middleware/security.py

@@ -120,10 +120,11 @@ async def _validate_request(self, request: Request):
         """Validate request content type."""
         # Only validate content type for non-file upload requests.
         # File uploads are handled by the files API with specific validation.
-        if (
-            request.method in ["POST", "PUT", "PATCH"]
-            and not request.url.path.startswith("/upload")
-        ):
+        if request.method in [
+            "POST",
+            "PUT",
+            "PATCH",
+        ] and not request.url.path.startswith("/upload"):
             content_type = request.headers.get("content-type", "")
             allowed_types = [
                 "application/json",

src/services/programmatic.py

@@ -597,7 +597,9 @@ async def _mount_referenced_file(
                 f"{file_info.session_id}/{file_info.id}"
             )
 
-        filename = self._normalize_mount_filename(file_info.name or stored_file.filename)
+        filename = self._normalize_mount_filename(
+            file_info.name or stored_file.filename
+        )
         self._sandbox_manager.copy_content_to_sandbox(
             sandbox_info,
             content,