[eersnington]

Add pipboy native. It measures sandbox-agent and gigacode as the release builds them.

• Build with sandbox-agent/docker/release/build.sh <target>, the script release.yaml runs, on the same Depot runners.
• Compare against the nearest main build and the latest @sandbox-agent/cli-<platform> and @sandbox-agent/gigacode-<platform>, with symbol bytes per crate from nm.

Change	Targets built
Any Rust change under sandbox-agent/	x86_64-unknown-linux-musl
Cargo.*, build.rs, docker/release/, new cfg(target_*), or the ci: native-all label	all 5
Push to main with a Rust change	all 5, stored as the baseline

Security

• The native job gets no secrets and a read-only token, and it uses no pnpm cache.

---

This is part 3 of 4 in a stack:

•  4  ci(pipboy): add per-commit CI trace command #362
•  3  ci(pipboy): add native binary sizes #361 👈
•  2  ci(pipboy): add rust dependency hygiene #360
•  1  ci(pipboy): add package footprint #359

[github-actions]

📟 Pip-Boy · 6deeaf6

📦 Packages · fresh npm install resolve, no lockfile · this PR vs base

No notable install size, dependency, or entrypoint changes across 10 packages.

All 10 packages · linux-x64-gnu

package (linux-x64-gnu)	@latest	base	this PR	Δ vs base	packages
@rivet-dev/pi	428.6 MB	428.6 MB	428.6 MB	0	215 (0)
@rivet-dev/sandbox-adapter	75.0 MB	75.0 MB	75.0 MB	0	92 (0)
@sandbox-agent/cli-shared	27.2 KB	27.2 KB	27.2 KB	0	1 (0)
@sandbox-agent/persist-indexeddb	12.4 KB	12.4 KB	12.4 KB	0	1 (0)
@sandbox-agent/persist-postgres	12.3 KB	12.3 KB	12.3 KB	0	1 (0)
@sandbox-agent/persist-rivet	12.2 KB	12.2 KB	12.2 KB	0	1 (0)
@sandbox-agent/persist-sqlite	12.3 KB	12.3 KB	12.3 KB	0	1 (0)
@sandbox-agent/react	41.5 MB	41.8 MB	41.8 MB	0	15 (0)
acp-http-client	6.7 MB	6.7 MB	6.7 MB	0	3 (0)
sandbox-agent	30.9 MB	31.0 MB	31.0 MB	0	8 (0)

🧹 Rust dependencies · cargo deny + cargo shear

check	new in this PR	fixed	existing on base
advisories	✅ 0	0	14
licenses	✅ 0	0	0
sources	✅ 0	0	0
bans	✅ 0	0	0
unused	✅ 0	0	13

🦀 Binaries · publish Dockerfiles, --release

No native build on main to compare against yet.

artifact	npm @latest	base	this PR	Δ vs base
gigacode linux-x64	23.6 MB	—	23.6 MB	—
sandbox-agent linux-x64	23.6 MB	—	23.5 MB	—

⏱ Timing

job	wall time	slowest step
zizmor	17s	checkout · 10s
changes	16s	checkout · 11s
native · linux-x64	3m10s	Build with the release script · 2m12s
self-test	34s	Run pnpm --filter pipboy test · 10s
footprint	3m29s	Run pnpm --dir sandbox-agent install --frozen-lockfile · 1m19s
hygiene	39s	checkout · 12s
report	20s	checkout · 9s

🔭 Full CI trace for this commit

One OpenTelemetry trace of CI and Pip-Boy for 6deeaf6: every job and step, with the sizes above attached. Run after CI finishes.

pnpm install --frozen-lockfile --filter 'pipboy...'
pnpm --filter pipboy pipboy trace --sha 6deeaf66bf95ea1f186197f2a725a4379670e6ac

Add --otlp <url> to send it to any OTLP/HTTP collector.

Agent instruction: From a rivet-dev/agents checkout, run the commands above, then read the trace file the last command prints. List the slowest jobs and steps and explain where CI time went.