[运维告警] ──► [GLM-5.3 终端 Agent]
                       │
                       ├─ 1. 执行: docker inspect app_gateway
                       ├─ 2. 解析 JSON: 发现 bridge 网络 IP 冲突
                       ├─ 3. 执行: iptables -L -n -v
                       ├─ 4. 诊断: 发现 DOCKER-USER 链丢包规则
                       ├─ 5. 自动修复: iptables -D DOCKER-USER 2
                       └─ 6. 回归验证: curl -I http://internal-service ➔ 200 OK

import os
import subprocess
from openai import OpenAI

client = OpenAI(
    base_url="https://api.glm53.com/v1",
    api_key=os.environ.get("GLM_API_KEY")
)

def execute_sandboxed_bash(command: str) -> str:
    """在隔离 Docker 沙盒中执行 Shell 指令"""
    result = subprocess.run(
        ["docker", "exec", "sandbox_container", "bash", "-c", command],
        capture_output=True,
        text=True,
        timeout=30
    )
    return result.stdout or result.stderr

tools = [{
    "type": "function",
    "function": {
        "name": "execute_sandboxed_bash",
        "description": "在安全的 Linux 容器沙盒中运行终端 Shell 命令并捕获输出",
        "parameters": {
            "type": "object",
            "properties": {"command": {"type": "string", "description": "要执行的 Shell 指令"}},
            "required": ["command"]
        }
    }
}]

# 发起自主排查会话
response = client.chat.completions.create(
    model="z-ai/glm-5.3",
    messages=[
        {"role": "system", "content": "你是一位顶级 Linux SRE 工程师。你可以使用终端工具自主排查并修复系统问题。"},
        {"role": "user", "content": "我们的 Nginx 反向代理返回 502 Bad Gateway，请在沙盒中排查上游服务状态并修复。"}
    ],
    tools=tools,
    tool_choice="auto"
)