DanielWalnut 6bd88fe14c

fix(sandbox): block host bash traversal escapes (#2560) ...

* fix(sandbox): block host bash traversal escapes

Fixes #2535

* fix(sandbox): harden local bash path guards

* fix(sandbox): avoid bash cd argument false positives

* Fix the lint error

Add function to resolve and validate user data path.

* Fix the lint error

---------

Co-authored-by: Willem Jiang <willem.jiang@gmail.com>

2026-04-28 12:18:41 +08:00

..

agents

fix(harness): constrain view_image to thread data paths (#2557)

2026-04-28 11:13:17 +08:00

community

fix(aio-sandbox): redact env values in container logs (#2562)

2026-04-28 11:47:56 +08:00

config

fix(middleware): avoid rescuing non-skill tool outputs during summarization (#2458)

2026-04-24 21:19:46 +08:00

guardrails

feat(guardrails): add pre-tool-call authorization middleware with pluggable providers (#1240)

2026-03-23 18:07:33 +08:00

mcp

feat(mcp): support custom tool interceptors via extensions_config.json (#2451)

2026-04-25 09:18:13 +08:00

models

fix: cap prompt caching breakpoints at 4 to prevent API 400 errors (#2449)

2026-04-25 19:40:06 +08:00

reflection

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

runtime

feat: implement full checkpoint rollback on user cancellation (#1867)

2026-04-09 17:56:36 +08:00

sandbox

fix(sandbox): block host bash traversal escapes (#2560)

2026-04-28 12:18:41 +08:00

skills

fix(skills): scan skill archives before install (#2561)

2026-04-28 11:56:11 +08:00

subagents

feat(subagents): support per-subagent skill loading and custom subagent types (#2253)

2026-04-23 23:59:47 +08:00

tools

fix(harness): constrain view_image to thread data paths (#2557)

2026-04-28 11:13:17 +08:00

tracing

feat(tracing): add optional Langfuse support (#1717)

2026-04-02 13:06:10 +08:00

uploads

feat(harness): integration ACP agent tool (#1344)

2026-03-26 14:20:18 +08:00

utils

[security] fix(uploads): require explicit opt-in for host-side document conversion (#2332)

2026-04-18 22:47:42 +08:00

__init__.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

client.py

feat: show token usage per assistant response (#2270)

2026-04-16 08:56:49 +08:00