Agent in Sandbox with Network Policy

from declaw import Sandbox

allowed_domain = "api.github.com"

sbx = Sandbox.create(
    template="python",
    timeout=300,
    network={"allow_out": [allowed_domain]},
)

AGENT_SCRIPT = textwrap.dedent("""\
    import socket
    import json

    def test_connection(host, port, timeout=5):
        try:
            s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
            s.settimeout(timeout)
            s.connect((host, port))
            s.close()
            return {"host": host, "port": port, "status": "CONNECTED"}
        except Exception as e:
            return {"host": host, "port": port, "status": f"BLOCKED: {e}"}

    with open("/tmp/test_plan.json") as f:
        test_plan = json.load(f)

    results = []
    for test in test_plan["targets"]:
        result = test_connection(test["host"], test["port"])
        status_icon = "OK" if result["status"] == "CONNECTED" else "XX"
        print(f"  [{status_icon}] {result['host']}:{result['port']} -> {result['status']}")
        results.append(result)

    with open("/tmp/results.json", "w") as f:
        json.dump(results, f, indent=2)
""")

test_plan = {
    "targets": [
        {"host": "1.1.1.1", "port": 80, "note": "Cloudflare DNS - not in allow list"},
        {"host": "8.8.8.8", "port": 53, "note": "Google DNS - not in allow list"},
        {"host": "93.184.216.34", "port": 80, "note": "example.com - not in allow list"},
    ],
}

sbx.files.write("/tmp/agent.py", AGENT_SCRIPT)
sbx.files.write("/tmp/test_plan.json", json.dumps(test_plan, indent=2))

result = sbx.commands.run("python3 /tmp/agent.py", timeout=60)
print(result.stdout)

result_content = sbx.files.read("/tmp/results.json")
results = json.loads(result_content)

blocked = sum(1 for r in results if "BLOCKED" in r["status"])
connected = sum(1 for r in results if r["status"] == "CONNECTED")
print(f"Blocked: {blocked} / {len(results)}")

--- Creating Sandbox with Network Policy ---
  Policy: allow_out=['api.github.com']
  All other outbound traffic will be blocked.
  Sandbox created: sbx-abc123

--- Running Network Test Agent ---

  Agent output:
    === Network Connectivity Test Results ===
      [XX] 1.1.1.1:80 -> BLOCKED: [Errno 110] Connection timed out
      [XX] 8.8.8.8:53 -> BLOCKED: [Errno 110] Connection timed out
      [XX] 93.184.216.34:80 -> BLOCKED: [Errno 110] Connection timed out

    Tested 3 targets.

--- Analyzing Results ---
  Total targets tested: 3
  Blocked:              3
  Connected:            0

  [PASS] Network policy is blocking non-allowlisted traffic.

Agent process (inside sandbox)
        │
        │  TCP connect to 8.8.8.8:53
        ▼
  ┌─────────────────────────────────────┐
  │  Declaw Network Namespace           │
  │                                     │
  │  Firewall REDIRECT → TCP Proxy      │
  │                                     │
  │  Proxy checks: 8.8.8.8 not in       │
  │  allow_out=['api.github.com']        │
  │                                     │
  │  Action: RST (connection refused)   │
  └─────────────────────────────────────┘

from declaw import Sandbox, SecurityPolicy, PIIConfig, AuditConfig

sbx = Sandbox.create(
    template="python",
    timeout=300,
    network={"allow_out": ["api.github.com"]},
    security=SecurityPolicy(
        pii=PIIConfig(enabled=True, types=["email", "ssn"], action="redact"),
        audit=AuditConfig(enabled=True),
    ),
)