[anycodes]

Description

Both READMEs recommend an npm package whose public metadata returns404. Provide the verified locked source build/pack/fresh-consumer install, and remove fixed /workspace Python path injection from the actual local runtime example. Preserve caller source configuration and add Node20/22 CI against an immutable real Python server.

Fixes #4. Shared retry-name clarification:Alibaba-Agent-Sandbox/python-sdk#60. Exports/config JSON/client HTTP implementation remain unchanged; package version remains0.1.0 and no publication workflow is added.

Changes

English/Chinese installation and configuration scope, portable runtime setup, owner ADR/evidence and changelog. New regression observes actual spawned Python environment and exercises real health/shell/files/process cleanup; it fails before the fix because two machine-specific paths are injected.

Validation

• npm ci/typecheck PASS; npm test10 PASS,zero failed/skipped, including two actual Python runtime scenarios.
• Before-fix regression1 FAIL; after-fix included in all10 PASS.
• npm pack creates agent-sandbox-sdk-0.1.0.tgz,22 files including built ESM/types/config JSON/license/notices.
• Fresh application installs that local archive and imports ServerClient/envName successfully.
• Markdown links/ADR format/workflow parse pass. Node20/22 latest-head hosted checks pending.

No cloud API key, public package publication, native vendor acceptance or names/defaults/JSON-contract change is claimed. Keep draft until this head's required checks/review pass.