greatmengqi f942e4e597 feat(auth): wire auth end-to-end (middleware + frontend replacement) ...

Backend:
- Port auth_middleware, csrf_middleware, langgraph_auth, routers/auth
- Port authz decorator (owner_filter_key defaults to 'owner_id')
- Merge app.py: register AuthMiddleware + CSRFMiddleware + CORS, add
  _ensure_admin_user lifespan hook, _migrate_orphaned_threads helper,
  register auth router
- Merge deps.py: add get_local_provider, get_current_user_from_request,
  get_optional_user_from_request; keep get_current_user as thin str|None
  adapter for feedback router
- langgraph.json: add auth path pointing to langgraph_auth.py:auth
- Rename metadata['user_id'] -> metadata['owner_id'] in langgraph_auth
  (both metadata write and LangGraph filter dict) + test fixtures

Frontend:
- Delete better-auth library and api catch-all route
- Remove better-auth npm dependency and env vars (BETTER_AUTH_SECRET,
  BETTER_AUTH_GITHUB_*) from env.js
- Port frontend/src/core/auth/* (AuthProvider, gateway-config,
  proxy-policy, server-side getServerSideUser, types)
- Port frontend/src/core/api/fetcher.ts
- Port (auth)/layout, (auth)/login, (auth)/setup pages
- Rewrite workspace/layout.tsx as server component that calls
  getServerSideUser and wraps in AuthProvider
- Port workspace/workspace-content.tsx for the client-side sidebar logic

Tests:
- Port 5 auth test files (test_auth, test_auth_middleware,
  test_auth_type_system, test_ensure_admin, test_langgraph_auth)
- 176 auth tests PASS

After this commit: login/logout/registration flow works, but persistence
layer does not yet filter by owner_id. Commit 4 closes that gap.

2026-04-08 09:41:56 +08:00

..

conftest.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

test_acp_config.py

feat(acp): add env field to ACPAgentConfig for subprocess env injection (#1447)

2026-03-27 20:03:30 +08:00

test_aio_sandbox_local_backend.py

fix: use safe docker bind mount syntax for sandbox mounts (#1655)

2026-04-01 11:42:12 +08:00

test_aio_sandbox_provider.py

fix Windows Docker sandbox path mounting (#1634)

2026-03-31 22:19:27 +08:00

test_aio_sandbox.py

fix: prevent concurrent subagent file write conflicts in sandbox tools (#1714)

2026-04-02 15:39:41 +08:00

test_app_config_reload.py

fix(config): reload AppConfig when config path or mtime changes (#1239)

2026-03-22 20:34:01 +08:00

test_artifacts_router.py

fix(gateway): enforce safe download for active artifact MIME types to mitigate stored XSS (#1389)

2026-03-26 17:44:25 +08:00

test_auth_config.py

feat(auth): introduce backend auth module

2026-04-08 09:21:36 +08:00

test_auth_errors.py

feat(auth): introduce backend auth module

2026-04-08 09:21:36 +08:00

test_auth_middleware.py

feat(auth): wire auth end-to-end (middleware + frontend replacement)

2026-04-08 09:41:56 +08:00

test_auth_type_system.py

feat(auth): wire auth end-to-end (middleware + frontend replacement)

2026-04-08 09:41:56 +08:00

test_auth.py

feat(auth): wire auth end-to-end (middleware + frontend replacement)

2026-04-08 09:41:56 +08:00

test_channel_file_attachments.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-07 11:53:52 +08:00

test_channels.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-07 11:53:52 +08:00

test_checkpointer_none_fix.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-07 11:53:52 +08:00

test_checkpointer.py

fix: normalize structured LLM content in serialization and memory updater (#1215)

2026-03-22 17:29:29 +08:00

test_claude_provider_oauth_billing.py

fix(oauth): Harden Claude OAuth cache-control handling (#1583)

2026-03-30 07:41:18 +08:00

test_cli_auth_providers.py

feat(harness): integration ACP agent tool (#1344)

2026-03-26 14:20:18 +08:00

test_client_e2e.py

[Security] Address critical host-shell escape in LocalSandboxProvider (#1547)

2026-03-29 21:03:58 +08:00

test_client_live.py

[Security] Address critical host-shell escape in LocalSandboxProvider (#1547)

2026-03-29 21:03:58 +08:00

test_client.py

fix: expose custom events from DeerFlowClient.stream() (#1827)

2026-04-06 10:09:39 +08:00

test_config_version.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

test_converters.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-07 11:53:52 +08:00

test_create_deerflow_agent_live.py

feat: add create_deerflow_agent SDK entry point (Phase 1) (#1203)

2026-03-29 15:31:18 +08:00

test_create_deerflow_agent.py

fix(backend): preserve viewed image reducer metadata (#1900)

2026-04-06 16:47:19 +08:00

test_credential_loader.py

feat: add Claude Code OAuth and Codex CLI as LLM providers (#1166)

2026-03-22 22:39:50 +08:00

test_custom_agent.py

fix: include soul field in GET /api/agents list response (fixes #1819) (#1863)

2026-04-05 10:49:58 +08:00

test_dangling_tool_call_middleware.py

test: add unit tests for DanglingToolCallMiddleware (#1305)

2026-03-26 00:20:08 +08:00

test_docker_sandbox_mode_detection.py

fix Windows Docker sandbox path mounting (#1634)

2026-03-31 22:19:27 +08:00

test_ensure_admin.py

feat(auth): wire auth end-to-end (middleware + frontend replacement)

2026-04-08 09:41:56 +08:00

test_feedback.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-07 11:53:52 +08:00

test_feishu_parser.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-07 11:53:52 +08:00

test_file_conversion.py

fix(uploads): handle split-bold headings and ** ** artefacts in extract_outline (#1838)

2026-04-04 14:25:08 +08:00

test_gateway_services.py

fix(gateway): prevent 400 error when client sends context with configurable (#1660)

2026-04-01 23:21:32 +08:00

test_guardrail_middleware.py

feat(guardrails): add pre-tool-call authorization middleware with pluggable providers (#1240)

2026-03-23 18:07:33 +08:00

test_harness_boundary.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

test_infoquest_client.py

feat(harness): integration ACP agent tool (#1344)

2026-03-26 14:20:18 +08:00

test_invoke_acp_agent_tool.py

fix ACP mcpServers payload (#1735)

2026-04-03 15:28:56 +08:00

test_jina_client.py

refactor: replace sync requests with async httpx in Jina AI client (#1603)

2026-04-01 17:02:39 +08:00

test_langgraph_auth.py

feat(auth): wire auth end-to-end (middleware + frontend replacement)

2026-04-08 09:41:56 +08:00

test_lead_agent_model_resolution.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-07 11:53:52 +08:00

test_lead_agent_prompt.py

fix: surface configured sandbox mounts to agents (#1638)

2026-03-31 22:22:30 +08:00

test_lead_agent_skills.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-07 11:53:52 +08:00

test_llm_error_handling_middleware.py

Fix/1681 llm call retry handling (#1683)

2026-04-02 10:12:17 +08:00

test_local_bash_tool_loading.py

[Security] Address critical host-shell escape in LocalSandboxProvider (#1547)

2026-03-29 21:03:58 +08:00

test_local_sandbox_encoding.py

fix: add Windows shell fallback for local sandbox (#1505)

2026-03-29 21:31:29 +08:00

test_local_sandbox_provider_mounts.py

feat(sandbox): add read-only support for local sandbox path mappings (#1808)

2026-04-03 19:46:22 +08:00

test_loop_detection_middleware.py

fix(middleware): handle list-type AIMessage.content in LoopDetectionMiddleware (#1823)

2026-04-04 10:38:22 +08:00

test_mcp_client_config.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

test_mcp_oauth.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

test_mcp_sync_wrapper.py

feat(harness): integration ACP agent tool (#1344)

2026-03-26 14:20:18 +08:00

test_memory_prompt_injection.py

fix: inject longTermBackground into memory prompt (#1734)

2026-04-03 11:21:58 +08:00

test_memory_queue.py

fix(memory): case-insensitive fact deduplication and positive reinforcement detection (#1804)

2026-04-05 16:23:00 +08:00

test_memory_router.py

feat(memory): structured reflection + correction detection in MemoryMiddleware (#1620) (#1668)

2026-04-01 16:45:29 +08:00

test_memory_storage.py

ci: enforce code formatting checks for backend and frontend (#1536)

2026-03-29 15:34:38 +08:00

test_memory_updater.py

fix(memory): case-insensitive fact deduplication and positive reinforcement detection (#1804)

2026-04-05 16:23:00 +08:00

test_memory_upload_filtering.py

fix(memory): case-insensitive fact deduplication and positive reinforcement detection (#1804)

2026-04-05 16:23:00 +08:00

test_model_config.py

feat(codex): support explicit OpenAI Responses API config (#1235)

2026-03-22 20:39:26 +08:00

test_model_factory.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-07 11:53:52 +08:00

test_patched_minimax.py

fix: improve MiniMax code plan integration (#1169)

2026-03-20 17:18:59 +08:00

test_patched_openai.py

fix(LLM): fixing Gemini thinking + tool calls via OpenAI gateway (#1180) (#1205)

2026-03-26 15:07:05 +08:00

test_persistence_scaffold.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-07 11:53:52 +08:00

test_present_file_tool_core_logic.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

test_provisioner_kubeconfig.py

feat(subagents): make subagent timeout configurable via config.yaml (#897)

2026-02-25 08:39:29 +08:00

test_readability.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

test_reflection_resolvers.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

test_run_event_store.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-07 11:53:52 +08:00

test_run_journal.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-07 11:53:52 +08:00

test_run_manager.py

fix: surface configured sandbox mounts to agents (#1638)

2026-03-31 22:22:30 +08:00

test_run_repository.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-07 11:53:52 +08:00

test_sandbox_audit_middleware.py

fix(sandbox): add input sanitisation guard to SandboxAuditMiddleware (#1872)

2026-04-06 17:21:58 +08:00

test_sandbox_search_tools.py

feat(sandbox): add built-in grep and glob tools (#1784)

2026-04-03 16:03:06 +08:00

test_sandbox_tools_security.py

fix: preserve virtual path separator style (#1828)

2026-04-05 15:52:22 +08:00

test_security_scanner.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-07 11:53:52 +08:00

test_serialization.py

feat(gateway): implement LangGraph Platform API in Gateway, replace langgraph-cli (#1403)

2026-03-30 16:02:23 +08:00

test_serialize_message_content.py

feat(harness): integration ACP agent tool (#1344)

2026-03-26 14:20:18 +08:00

test_skill_manage_tool.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-07 11:53:52 +08:00

test_skills_archive_root.py

refactor: extract shared skill installer and upload manager to harness (#1202)

2026-03-25 16:28:33 +08:00

test_skills_custom_router.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-07 11:53:52 +08:00

test_skills_installer.py

Fix Windows backend test compatibility (#1384)

2026-03-26 17:39:16 +08:00

test_skills_loader.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-07 11:53:52 +08:00

test_skills_parser.py

fix(skills): support parsing multiline YAML strings in SKILL.md frontmatter (#1703)

2026-04-01 23:08:30 +08:00

test_skills_validation.py

test: add unit tests for skill frontmatter validation (#1309)

2026-03-27 20:20:31 +08:00

test_sse_format.py

feat(gateway): implement LangGraph Platform API in Gateway, replace langgraph-cli (#1403)

2026-03-30 16:02:23 +08:00

test_stream_bridge.py

Fix(#1702): stream resume run (#1858)

2026-04-06 14:51:10 +08:00

test_subagent_executor.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

test_subagent_limit_middleware.py

test: add unit tests for SubagentLimitMiddleware (#1306)

2026-03-25 10:20:16 +08:00

test_subagent_prompt_security.py

[Security] Address critical host-shell escape in LocalSandboxProvider (#1547)

2026-03-29 21:03:58 +08:00

test_subagent_timeout_config.py

chroe(config):Increase subagent max-turn limits (#1852)

2026-04-05 15:41:00 +08:00

test_suggestions_router.py

fix: unblock concurrent threads and workspace hydration (#1839)

2026-04-04 21:19:35 +08:00

test_task_tool_core_logic.py

[Security] Address critical host-shell escape in LocalSandboxProvider (#1547)

2026-03-29 21:03:58 +08:00

test_thread_data_middleware.py

Fix Windows backend test compatibility (#1384)

2026-03-26 17:39:16 +08:00

test_thread_meta_repo.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-07 11:53:52 +08:00

test_threads_router.py

fix(threads): clean up local thread data after thread deletion (#1262)

2026-03-24 00:36:08 +08:00

test_title_generation.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

test_title_middleware_core_logic.py

fix: unblock concurrent threads and workspace hydration (#1839)

2026-04-04 21:19:35 +08:00

test_todo_middleware.py

test: add unit tests for TodoMiddleware (#1307)

2026-03-26 00:20:50 +08:00

test_token_usage.py

feat(harness): integration ACP agent tool (#1344)

2026-03-26 14:20:18 +08:00

test_tool_error_handling_middleware.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

test_tool_output_truncation.py

fix: add output truncation to ls_tool to prevent context window overflow (#1896)

2026-04-06 15:09:57 +08:00

test_tool_search.py

fix: promote deferred tools after tool_search returns schema (#1570)

2026-03-30 11:23:15 +08:00

test_tracing_config.py

feat(tracing): add optional Langfuse support (#1717)

2026-04-02 13:06:10 +08:00

test_tracing_factory.py

feat(tracing): add optional Langfuse support (#1717)

2026-04-02 13:06:10 +08:00

test_uploads_manager.py

Fix Windows backend test compatibility (#1384)

2026-03-26 17:39:16 +08:00

test_uploads_middleware_core_logic.py

fix(uploads): handle split-bold headings and ** ** artefacts in extract_outline (#1838)

2026-04-04 14:25:08 +08:00

test_uploads_router.py

fix(sandbox): Relax upload permissions for aio sandbox sync (#1409)

2026-03-27 17:37:44 +08:00

test_vllm_provider.py

feat(models): add vLLM provider support (#1860)

2026-04-06 15:18:34 +08:00