0da8af56d6* Add process-level tool_policy state for unsloth run * Apply tool_policy override at chat/completions, /messages, and tool pass-through gates * Add pure resolver for unsloth run --enable-tools/--disable-tools * Wire --enable-tools/--disable-tools into unsloth run * Color tool-policy notices and confirmation prompt in Claude orange * Always show tool-status notice; print URL + API key in silent mode * Treat any non-loopback bind as external; forward --yes after parent prompt * Fix tool_policy double-module bug: import via state.tool_policy to share global with routes
71 lines
2.3 KiB
Python
71 lines
2.3 KiB
Python
# Copyright 2025-present the Unsloth AI Inc. team. All rights reserved.
|
|
|
|
"""Pure resolver for `unsloth run --enable-tools/--disable-tools`.
|
|
|
|
Kept as a standalone module so the truth table can be unit-tested
|
|
without spinning up Typer or the studio venv.
|
|
"""
|
|
|
|
from typing import Callable, Optional
|
|
|
|
import typer
|
|
|
|
# Claude Code brand orange — used so the security warning stands out
|
|
# in a crowded terminal.
|
|
_PROMPT_FG = (217, 119, 87)
|
|
|
|
# Loopback aliases. Any other bind address (0.0.0.0, ::, a specific
|
|
# LAN IP, a hostname, ...) is treated as network-reachable.
|
|
_LOOPBACK_HOSTS = frozenset({"127.0.0.1", "localhost", "::1"})
|
|
|
|
|
|
def is_external_host(host: str) -> bool:
|
|
"""True when `host` is reachable from beyond loopback."""
|
|
return host.lower() not in _LOOPBACK_HOSTS
|
|
|
|
|
|
def _build_prompt_text(host: str) -> str:
|
|
return typer.style(
|
|
(
|
|
f"Tools include arbitrary code execution (Python, terminal). "
|
|
f"You're binding to {host}, which is reachable from your network. "
|
|
f"If your API key leaks, anyone with it can run code on this machine. "
|
|
f"Do not share the API key. Continue?"
|
|
),
|
|
fg = _PROMPT_FG,
|
|
bold = True,
|
|
)
|
|
|
|
|
|
def resolve_tool_policy(
|
|
host: str,
|
|
flag: Optional[bool],
|
|
yes: bool,
|
|
silent: bool,
|
|
prompt: Callable[[str], bool] = typer.confirm,
|
|
) -> bool:
|
|
"""Return the resolved server-side tool policy.
|
|
|
|
Args:
|
|
host: The bind address (e.g. "127.0.0.1", "0.0.0.0", or a
|
|
specific network IP).
|
|
flag: Tri-state from `--enable-tools/--disable-tools`
|
|
(None when neither was passed).
|
|
yes: True if the operator passed `--yes/-y`.
|
|
silent: True if the operator passed `--silent/-q`.
|
|
prompt: Callable used for the network-bind + on confirmation
|
|
(injected for testability; defaults to ``typer.confirm``).
|
|
|
|
Raises:
|
|
typer.Exit: when the operator declines the confirmation.
|
|
"""
|
|
is_external = is_external_host(host)
|
|
default = not is_external # loopback defaults on, network defaults off
|
|
|
|
resolved = default if flag is None else flag
|
|
|
|
if is_external and resolved is True and not yes and not silent:
|
|
if not prompt(_build_prompt_text(host)):
|
|
raise typer.Exit(1)
|
|
|
|
return resolved
|