OpenSandbox：AI Agent的数字防爆实验室

import asyncio
from datetime import timedelta
from code_interpreter import CodeInterpreter, SupportedLanguage
from opensandbox import Sandbox
from opensandbox.models import WriteEntry

async def main():
    # ① 创建沙箱实例：指定镜像、入口、环境变量、超时
    # 注意：timeout 是 sandbox 生命周期上限，非单次命令超时
    sandbox = await Sandbox.create(
        "opensandbox/code-interpreter:v1.0.1",
        entrypoint=["/opt/opensandbox/code-interpreter.sh"],
        env={"PYTHON_VERSION": "3.11", "CODE_INTERPRETER_TIMEOUT_SEC": "300"},
        timeout=timedelta(minutes=10),  # ← 这里是沙箱总存活时间
    )

    # ② async with 自动管理：create → wait RUNNING → kill on exit
    # 底层调用 server /v1/sandbox/{id}/wait 并监听状态事件流
    async with sandbox:
        # ③ 执行shell：底层走 runtime.exec()，但自动做：
        #    • 命令白名单过滤（禁止 & | ; $(...) 等）
        #    • stdout/stderr 流式分块返回（非全量缓存）
        #    • 退出码映射（如 OOM→137, SIGKILL→137）
        execution = await sandbox.commands.run("echo 'Hello OpenSandbox!'")
        print(execution.logs.stdout[0].text)  # ← 真实结构：List[LogLine]，每行含 timestamp/text/stream_type

        # ④ 写文件：不是 mount volume，而是通过 runtime API PUT /files
        # 支持 mode/uid/gid 设置，底层调用 docker cp 或 kubectl cp
        await sandbox.files.write_files([
            WriteEntry(path="/tmp/hello.txt", data="Hello World", mode=0o644)
        ])

        # ⑤ 读文件：同理，GET /files/{path}，自动解码二进制内容
        content = await sandbox.files.read_file("/tmp/hello.txt")
        print(f"Content: {content}")

        # ⑥ 调用CodeInterpreter SDK：这是最高阶抽象
        # 它会复用 sandbox 的 runtime context，不新建容器
        # 直接向 /code-interpreter/v1/run POST 请求，传入 AST 校验后的代码
        interpreter = await CodeInterpreter.create(sandbox)
        result = await interpreter.codes.run(
              "print(2 + 2)",
              language=SupportedLanguage.PYTHON,
        )
        print(result.result[0].text)  # ← 输出：4，且 result 包含 execution_time_ms、memory_used_kb 等可观测字段

    # ⑦ await sandbox.kill() 已由 async with 自动触发

if __name__ == "__main__":
    asyncio.run(main())

// Maven 依赖：opensandbox-sandbox-client-jvm
SandboxClient client = SandboxClient.builder()
    .endpoint("http://localhost:8000")
    .connectTimeout(30, TimeUnit.SECONDS)
    .readTimeout(60, TimeUnit.SECONDS)
    .retryPolicy(RetryPolicy.builder()
        .maxRetries(3)
        .backoffFunction(Backoff.fixed(1000))
        .build())
    .build();

CreateSandboxRequest request = CreateSandboxRequest.builder()
    .image("opensandbox/code-interpreter:v1.0.1")
    .timeout(600) // seconds
    .env(Map.of("PYTHON_VERSION", "3.11"))
    .build();

Sandbox sandbox = client.createSandbox(request);

// 同步阻塞调用（也可用 CompletableFuture）
CommandExecutionResult exec = client.executeCommand(sandbox.getId(), "ls -l /tmp");
System.out.println(exec.getStdout());

// 清理
client.killSandbox(sandbox.getId());

## application.yml
opensandbox:
  endpoint: http://localhost:8000
  connect-timeout: 30s
  read-timeout: 60s
  retry:
    max-retries: 3

uv pip install opensandbox-server opensandbox-code-interpreter
opensandbox-server init-config ~/.sandbox.toml --example docker
opensandbox-server