deer-flow

mirror of https://github.com/bytedance/deer-flow.git synced 2026-04-25 11:18:22 +00:00

History

fix(sandbox): add missing path masking in ls_tool output (#2317 )

ls_tool was the only file-system tool that did not call
mask_local_paths_in_output() before returning its result, causing host
absolute paths (e.g. /Users/.../backend/.deer-flow/knowledge-base/...)
to leak to the LLM instead of the expected virtual paths
(/mnt/knowledge-base/...).

This patch:
- Adds the mask_local_paths_in_output() call to ls_tool, consistent
  with bash_tool, glob_tool and grep_tool.
- Initialises thread_data = None before the is_local_sandbox branch
  (same pattern as glob_tool) so the variable is always in scope.
- Adds three new tests covering user-data path masking, skills path
  masking and the empty-directory edge case.

2026-04-18 08:46:59 +08:00

agents

fix: Memory update system has cache corruption, data loss, and thread-safety bugs (#2251 )

2026-04-17 12:00:31 +08:00

community

fix(backend): fix uploads for mounted sandbox providers (#2199 )

2026-04-14 10:44:31 +08:00

config

fix: validate bootstrap agent names before filesystem writes (#2274 )

2026-04-16 08:36:42 +08:00

guardrails

feat(guardrails): add pre-tool-call authorization middleware with pluggable providers (#1240 )