Bas Cancrinus 13e6fc29e5

feat(opensandbox): add opt-in secure_access sandbox option (#8162) ...

* feat(opensandbox): add opt-in secure_access sandbox option

Forward a new `sandbox.secure_access` option (default false) to
SandboxSync.create so OpenSandbox can require a per-sandbox endpoint
token at the ingress gateway and server proxy. The server returns the
token as an endpoint header and SDK 0.1.15 already attaches endpoint
headers to execd and file requests, so DeerFlow needs no token handling.

Non-boolean values are rejected at provider startup so a quoted "false"
cannot silently enable it. Documented in config.example.yaml,
CONFIGURATION.md, the SandboxConfig docstring and the provider README.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix(opensandbox): validate server proxy boolean

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Totoro <msy626836554@gmail.com>
Co-authored-by: Willem Jiang <willem.jiang@gmail.com>

2026-11-12 09:49:33 +08:00

..

agents

feat(projects): add visible project memory with extraction controls (#8117)

2026-11-12 09:09:44 +08:00

approvals

feat(approvals): add Ask, Auto and Full tool permission modes (#8033)

2026-11-11 20:59:05 +08:00

authz

feat(authz): construction-enforced async decision batches (ActivationDecisions) (#6508)

2026-10-09 16:09:17 +08:00

capabilities

feat(capabilities): unify catalog, plugin configuration and agent selection (#5497)

2026-09-19 12:14:24 +08:00

community

feat(opensandbox): add opt-in secure_access sandbox option (#8162)

2026-11-12 09:49:33 +08:00

config

feat(opensandbox): add opt-in secure_access sandbox option (#8162)

2026-11-12 09:49:33 +08:00

extensions

docs: turn README into an index and move reference detail to docs/guide (#8113)

2026-11-11 13:26:17 +08:00

guardrails

feat(decisions): add an OpenAI Decisions backend for the decision slots (#7127)

2026-10-20 11:50:46 +08:00

integrations

fix(lark): keep Windows SID lookup working with non-ASCII account names (#7845)

2026-11-05 15:09:13 +08:00

knowledge

feat(weknora): allow opt-in shared retrieval for authenticated users (#7944)

2026-11-09 17:06:05 +08:00

mcp

feat(approvals): add Ask, Auto and Full tool permission modes (#8033)

2026-11-11 20:59:05 +08:00

models

docs: turn README into an index and move reference detail to docs/guide (#8113)

2026-11-11 13:26:17 +08:00

openai_decisions

feat(decisions): add an OpenAI Decisions backend for the decision slots (#7127)

2026-10-20 11:50:46 +08:00

persistence

feat(projects): add visible project memory with extraction controls (#8117)

2026-11-12 09:09:44 +08:00

projects

feat(projects): add visible project memory with extraction controls (#8117)

2026-11-12 09:09:44 +08:00

reflection

docs: turn README into an index and move reference detail to docs/guide (#8113)

2026-11-11 13:26:17 +08:00

runtime

feat(approvals): add Ask, Auto and Full tool permission modes (#8033)

2026-11-11 20:59:05 +08:00

sandbox

docs: turn README into an index and move reference detail to docs/guide (#8113)

2026-11-11 13:26:17 +08:00

scheduler

fix(scheduler): isolate a malformed stored schedule from the poll batch (#7999)

2026-11-09 20:25:32 +08:00

skills

docs: turn README into an index and move reference detail to docs/guide (#8113)

2026-11-11 13:26:17 +08:00

storage

docs: turn README into an index and move reference detail to docs/guide (#8113)

2026-11-11 13:26:17 +08:00

subagents

feat(approvals): add Ask, Auto and Full tool permission modes (#8033)

2026-11-11 20:59:05 +08:00

tools

feat(approvals): add Ask, Auto and Full tool permission modes (#8033)

2026-11-11 20:59:05 +08:00

tracing

docs: turn README into an index and move reference detail to docs/guide (#8113)

2026-11-11 13:26:17 +08:00

tui

docs: turn README into an index and move reference detail to docs/guide (#8113)

2026-11-11 13:26:17 +08:00

typesafe

docs: turn README into an index and move reference detail to docs/guide (#8113)

2026-11-11 13:26:17 +08:00

uploads

docs: turn README into an index and move reference detail to docs/guide (#8113)

2026-11-11 13:26:17 +08:00

utils

docs: turn README into an index and move reference detail to docs/guide (#8113)

2026-11-11 13:26:17 +08:00

workspace_changes

fix(workspace): don't infer created or deleted files from truncated snapshots (#7172)

2026-10-22 16:52:53 +08:00

__init__.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

AGENTS.md

docs: turn README into an index and move reference detail to docs/guide (#8113)

2026-11-11 13:26:17 +08:00

checkpoint_patches.py

chore(deps): bump langgraph-checkpoint to 4.2.0 / postgres 3.1.2 and delete the saver patch (#5734)

2026-09-23 09:18:26 +08:00

client.py

fix(client): scope memory management to the named agent's bucket (#8146)

2026-11-12 09:21:28 +08:00

constants.py

fix(goal,artifacts): verify completion and artifact handoff (#7961)

2026-11-07 18:21:49 +08:00

env.py

fix(config): accept a UTF-8 BOM in operator-authored env and secret files (#7085) (#7112)

2026-10-19 15:48:10 +08:00

knowledge_scope.py

feat(knowledge): add per-message RAGFlow retrieval scope (#5238)

2026-09-18 16:59:31 +08:00

logging_config.py

fix(logging): redact credential-bearing header values in urllib3's header-parse dump (#5752)

2026-09-26 15:06:48 +08:00

mcp_scope.py

fix(mcp): close thread-scoped MCP sessions on thread deletion (#5956)

2026-09-29 16:53:18 +08:00

trace_context.py

feature(gateway): issue request trace ids unconditionally (#5119)

2026-09-01 16:49:39 +08:00