"""FastAPI-like handler with feature flag guarding exec."""

def handle_request(body, env=None):
    env = env or {}
    if env.get("ALLOW_EXEC") != "true":
        return {"status": 403, "body": "forbidden"}
    code = body.get("code") if isinstance(body, dict) else None
    if not isinstance(code, str):
        return {"status": 400, "body": "bad request"}
    result = eval(code)
    return {"status": 200, "body": str(result)}