feat: Sandboxing for tool execution #412

	name: Alembic Migration Tester
	on:
	pull_request:
	paths:
	- '**.py'
	workflow_dispatch:
	jobs:
	test:
	runs-on: ubuntu-latest
	timeout-minutes: 15
	services:
	postgres:
	image: pgvector/pgvector:pg17
	ports:
	- 5432:5432
	env:
	POSTGRES_HOST_AUTH_METHOD: trust
	POSTGRES_DB: postgres
	POSTGRES_USER: postgres
	options: >-
	--health-cmd pg_isready
	--health-interval 10s
	--health-timeout 5s
	--health-retries 5
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	- run: psql -h localhost -U postgres -d postgres -c 'CREATE EXTENSION vector'
	- name: "Setup Python, Poetry and Dependencies"
	uses: packetcoders/action-setup-cache-python-poetry@main
	with:
	python-version: "3.12"
	poetry-version: "1.8.2"
	install-args: "--all-extras"
	- name: Test alembic migration
	env:
	LETTA_PG_PORT: 5432
	LETTA_PG_USER: postgres
	LETTA_PG_PASSWORD: postgres
	LETTA_PG_DB: postgres
	LETTA_PG_HOST: localhost
	run: \|
	poetry run alembic upgrade head
	poetry run alembic check

Provide feedback