mirror of
https://github.com/langgenius/dify.git
synced 2026-05-13 08:57:28 +08:00
Port the complete infrastructure for agent sandbox execution and skill system: Sandbox & Virtual Environment (core/sandbox/, core/virtual_environment/): - Sandbox entity with lifecycle management (ready/failed/cancelled states) - SandboxBuilder with fluent API for configuring providers - 5 VM providers: Local, SSH, Docker, E2B, AWS CodeInterpreter - VirtualEnvironment base with command execution, file transfer, transport layers - Channel transport: pipe, queue, socket implementations - Bash session management and DifyCli binary integration - Storage: archive storage, file storage, noop storage, presign storage - Initializers: DifyCli, AppAssets, DraftAppAssets, Skills - Inspector: file browser, archive/runtime source, script utils - Security: encryption utils, debug helpers Skill & App Assets (core/skill/, core/app_assets/, core/app_bundle/): - Skill entity and manager - App asset accessor, builder pipeline (file, skill builders) - App bundle source zip extractor - Storage and converter utilities API Endpoints: - CLI API blueprint (controllers/cli_api/) for sandbox callback - Sandbox provider management (workspace/sandbox_providers) - Sandbox file browser (console/sandbox_files) - App asset management (console/app/app_asset) - Skill management (console/app/skills) - Storage file endpoints (controllers/files/storage_files) Services: - Sandbox service, provider service, file service - App asset service, app bundle service Config: - CliApiConfig, CreatorsPlatformConfig, CollaborationConfig - FILES_API_URL for sandbox file access Note: Controller route registration temporarily commented out (marked TODO) pending resolution of deep dependency chains (socketio, workflow_comment, command node, etc.). Core sandbox modules are fully ported and syntax-validated. 110 files changed, 10,549 insertions. Made-with: Cursor
49 lines
1.8 KiB
Python
49 lines
1.8 KiB
Python
from collections.abc import Mapping
|
|
from typing import Any
|
|
|
|
from core.entities.provider_entities import BasicProviderConfig
|
|
from core.helper.provider_cache import ProviderCredentialsCache
|
|
from core.helper.provider_encryption import ProviderConfigCache, ProviderConfigEncrypter, create_provider_encrypter
|
|
|
|
|
|
class SandboxProviderConfigCache(ProviderCredentialsCache):
|
|
def __init__(self, tenant_id: str, provider_type: str):
|
|
super().__init__(tenant_id=tenant_id, provider_type=provider_type)
|
|
|
|
def _generate_cache_key(self, **kwargs) -> str:
|
|
tenant_id = kwargs["tenant_id"]
|
|
provider_type = kwargs["provider_type"]
|
|
return f"sandbox_config:tenant_id:{tenant_id}:provider_type:{provider_type}"
|
|
|
|
|
|
def create_sandbox_config_encrypter(
|
|
tenant_id: str,
|
|
config_schema: list[BasicProviderConfig],
|
|
provider_type: str,
|
|
) -> tuple[ProviderConfigEncrypter, ProviderConfigCache]:
|
|
cache = SandboxProviderConfigCache(tenant_id=tenant_id, provider_type=provider_type)
|
|
return create_provider_encrypter(tenant_id=tenant_id, config=config_schema, cache=cache)
|
|
|
|
|
|
def masked_config(
|
|
schemas: list[BasicProviderConfig],
|
|
config: Mapping[str, Any],
|
|
) -> Mapping[str, Any]:
|
|
masked = dict(config)
|
|
configs = {x.name: x for x in schemas}
|
|
for key, value in config.items():
|
|
schema = configs.get(key)
|
|
if not schema:
|
|
masked[key] = value
|
|
continue
|
|
if schema.type == BasicProviderConfig.Type.SECRET_INPUT:
|
|
if not isinstance(value, str):
|
|
continue
|
|
if len(value) <= 4:
|
|
masked[key] = "*" * len(value)
|
|
else:
|
|
masked[key] = value[:2] + "*" * (len(value) - 4) + value[-2:]
|
|
else:
|
|
masked[key] = value
|
|
return masked
|