Function demo_sandbox_decision_tree

tutorials/14_bash_engine_deep_dive.py:776–815

展示沙箱决策过程

()

def demo_sandbox_decision_tree():
    """展示沙箱决策过程"""
    print("\n" + "=" * 60)
    print("沙箱决策树演示")
    print("=" * 60)

    cwd = Path.cwd()

    scenarios = [
        ("默认配置", SandboxConfig(), None),
        ("用户关闭沙箱", SandboxConfig(enabled=False), None),
        ("模型请求禁用沙箱", SandboxConfig(), True),
        ("网络隔离", SandboxConfig(network_isolation=True), None),
        ("白名单模式", SandboxConfig(
            filesystem_mode=FilesystemIsolationMode.ALLOW_LIST,
            allowed_mounts=["logs", "/var/data"],
        ), None),
    ]

    for name, config, disable_override in scenarios:
        request = resolve_request(
            config,
            enabled_override=(not disable_override
                            if disable_override is not None else None),
        )
        status = resolve_sandbox_status(request, cwd)

        print(f"\n--- {name} ---")
        print(f"  请求: enabled={request.enabled}, "
              f"ns={request.namespace_restrictions}, "
              f"net={request.network_isolation}, "
              f"fs={request.filesystem_mode.value}")
        print(f"  结果: active={status.active}, "
              f"ns_active={status.namespace_active}, "
              f"net_active={status.network_active}, "
              f"fs_active={status.filesystem_active}")
        if status.fallback_reason:
            print(f"  降级: {status.fallback_reason}")
        if status.in_container:
            print(f"  容器: {status.container_markers}")


def demo_container_detection():