deer-flow

mirror of https://github.com/bytedance/deer-flow.git synced 2026-10-27 13:40:37 +00:00

History

fix(channels): send the CSRF pair on IM /goal writes (#6537 )

* fix(channels): send the CSRF pair on IM /goal writes

`/goal <objective>` and `/goal clear` from an IM channel sent their
PUT/DELETE to the Gateway with only the internal auth headers. The
Gateway's CSRF middleware does not exempt internal auth, so with auth
enabled (the default) both writes were rejected with 403 and the channel
replied "Failed to set goal." / "Failed to clear goal.".

`_goal_request` now sends the same double-submit cookie/header pair as
the channel's LangGraph SDK client; both build it from one helper,
`ChannelManager._csrf_headers()`.

* docs(changelog): reference #6537

---------

Co-authored-by: Willem Jiang <willem.jiang@gmail.com>

2026-10-09 17:58:09 +08:00

channels

fix(channels): send the CSRF pair on IM /goal writes (#6537 )

2026-10-09 17:58:09 +08:00

gateway

docs(api): document MCP task router endpoints (#6559 )

2026-10-09 17:23:54 +08:00

mcp_tasks

fix(mcp): reserve notification launches atomically (#5965 )

2026-09-30 09:12:11 +08:00

scheduler

fix(scheduler): keep a one-time task's scheduled run after an early trial (#6512 )