Managed general tools
Full Workstation defines Node, npm and npx, CPython 3.12, uv, portable Git, FFmpeg, ripgrep, jq, archive tools, CA certificates, and Chromium on the managed execution path. These tools are separate from software already installed on the computer.Science packs
Full Workstation verifies six separate pack roots for core science, documents, chemistry, structures, genomics, and machine learning. OSPRI builds a trusted Python import path from those activated roots for agent shell, visible terminal, and local coding commands. User-suppliedPYTHONPATH values are rejected rather than inherited.
JavaScript and TypeScript dependencies
For a coding project, ask OSPRI to use the package manager already present in that repository. A safe flow is:1
Inspect the project
Check its lockfile, package manager, scripts, and repository instructions.
2
Approve the exact install
Package installs require a fresh approval and cannot become an Always allow grant.
3
Install in the project
The dependency is recorded in that project’s manifest and lockfile rather than a global environment.
4
Run the repository checks
Run its own typecheck, tests, lint, build, or validator and read the real output.
5
Review or roll back
Review the dependency diff. Remove the package with the same project package manager if it is no longer wanted.
Python dependencies
Use a project-local uv environment where possible. Record the dependency in the project’spyproject.toml and lockfile. If installation fails, inspect the wheel and compiler error before retrying or changing versions.