[SRE Alert] ──► [GLM-5.3 Terminal Agent]
                        │
                        ├─ 1. Run: docker inspect app_gateway
                        ├─ 2. Parse JSON: Detect bridge network IP collision
                        ├─ 3. Run: iptables -L -n -v
                        ├─ 4. Diagnose: Isolate dropped packets in DOCKER-USER chain
                        ├─ 5. Auto-Heal: iptables -D DOCKER-USER 2
                        └─ 6. Verify: curl -I http://internal-service ➔ 200 OK

import os
import subprocess
from openai import OpenAI

client = OpenAI(
    base_url="https://api.glm53.com/v1",
    api_key=os.environ.get("GLM_API_KEY")
)

def execute_sandboxed_bash(command: str) -> str:
    """Execute shell commands inside an isolated Docker runner container."""
    result = subprocess.run(
        ["docker", "exec", "sandbox_container", "bash", "-c", command],
        capture_output=True,
        text=True,
        timeout=30
    )
    return result.stdout or result.stderr

tools = [{
    "type": "function",
    "function": {
        "name": "execute_sandboxed_bash",
        "description": "Executes shell commands in a headless sandboxed container",
        "parameters": {
            "type": "object",
            "properties": {"command": {"type": "string", "description": "Shell command to run"}},
            "required": ["command"]
        }
    }
}]

# Initiate the diagnostic loop
response = client.chat.completions.create(
    model="z-ai/glm-5.3",
    messages=[
        {"role": "system", "content": "You are a Principal SRE. Use the provided terminal tool to diagnose and repair issues."},
        {"role": "user", "content": "Our ingress controller returns 502 Bad Gateway. Diagnose upstream container states and resolve."}
    ],
    tools=tools,
    tool_choice="auto"
)