docs(config): move the Sandbox banner above the sandbox key in config.example.yaml (#5652)

* docs(config): move the Sandbox banner above the sandbox key in config.example.yaml

The "Sandbox Configuration" banner and the "Option 1: Local Sandbox"
comment sat directly above the `uploads:` block, twenty lines away from
the `sandbox:` key they describe. Give `uploads:` its own banner and
move the sandbox banner down to the key it introduces. Comments only;
no key or value changes.

* Enhance sandbox configuration options

Updated sandbox configuration options to include BoxLite micro-VM.

---------

Co-authored-by: Willem Jiang <willem.jiang@gmail.com>
This commit is contained in:
Zhengxu (Joshua) Jin 2026-09-22 16:34:55 +08:00 committed by GitHub
parent 1e6fda4ec2
commit 825e742eb6
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -1476,12 +1476,9 @@ safety_finish_reason:
# error_codes: [336003, 17, 18]
# ============================================================================
# Sandbox Configuration
# Uploads
# ============================================================================
# Choose between local sandbox (direct execution) or Docker-based AIO sandbox
# Option 1: Local Sandbox (Default)
# Executes commands directly on the host machine
# Limits and conversion settings for files attached to a conversation.
uploads:
# Application-level upload limits enforced by the gateway and exposed to the
# frontend before file selection.
@ -1502,6 +1499,13 @@ uploads:
# markitdown — always use MarkItDown (original behaviour, no extra dependency).
pdf_converter: auto
# ============================================================================
# Sandbox Configuration
# ============================================================================
# Choose between local sandbox (direct execution), Docker-based AIO sandbox,
# or BoxLite micro-VM sandbox
# Option 1: Local Sandbox (Default)
# Executes commands directly on the host machine
sandbox:
use: deerflow.sandbox.local:LocalSandboxProvider
# Host bash execution is disabled by default because LocalSandboxProvider is