Initial commit: hardened DeerFlow factory

Vendored deer-flow upstream (bytedance/deer-flow) plus prompt-injection
hardening:

- New deerflow.security package: content_delimiter, html_cleaner,
  sanitizer (8 layers — invisible chars, control chars, symbols, NFC,
  PUA, tag chars, horizontal whitespace collapse with newline/tab
  preservation, length cap)
- New deerflow.community.searx package: web_search, web_fetch,
  image_search backed by a private SearX instance, every external
  string sanitized and wrapped in <<<EXTERNAL_UNTRUSTED_CONTENT>>>
  delimiters
- All native community web providers (ddg_search, tavily, exa,
  firecrawl, jina_ai, infoquest, image_search) replaced with hard-fail
  stubs that raise NativeWebToolDisabledError at import time, so a
  misconfigured tool.use path fails loud rather than silently falling
  back to unsanitized output
- Native client back-doors (jina_client.py, infoquest_client.py)
  stubbed too
- Native-tool tests quarantined under tests/_disabled_native/
  (collect_ignore_glob via local conftest.py)
- Sanitizer Layer 7 fix: only collapse horizontal whitespace, preserve
  newlines and tabs so list/table structure survives
- Hardened runtime config.yaml references only the searx-backed tools
- Factory overlay (backend/) kept in sync with deer-flow tree as a
  reference / source

See HARDENING.md for the full audit trail and verification steps.

deer-flow/skills/public/claude-to-deerflow/scripts/status.sh

@@ -0,0 +1,98 @@
+#!/usr/bin/env bash
+# status.sh — Check DeerFlow status and list available resources.
+#
+# Usage:
+#   bash status.sh                  # health + summary
+#   bash status.sh models           # list models
+#   bash status.sh skills           # list skills
+#   bash status.sh agents           # list agents
+#   bash status.sh threads          # list recent threads
+#   bash status.sh memory           # show memory
+#   bash status.sh thread <id>      # show thread history
+#
+# Environment variables:
+#   DEERFLOW_URL           — Unified proxy base URL (default: http://localhost:2026)
+#   DEERFLOW_GATEWAY_URL   — Gateway API base URL (default: $DEERFLOW_URL)
+#   DEERFLOW_LANGGRAPH_URL — LangGraph API base URL (default: $DEERFLOW_URL/api/langgraph)
+
+set -euo pipefail
+
+DEERFLOW_URL="${DEERFLOW_URL:-http://localhost:2026}"
+GATEWAY_URL="${DEERFLOW_GATEWAY_URL:-$DEERFLOW_URL}"
+LANGGRAPH_URL="${DEERFLOW_LANGGRAPH_URL:-$DEERFLOW_URL/api/langgraph}"
+CMD="${1:-health}"
+ARG="${2:-}"
+
+case "$CMD" in
+  health)
+    echo "Checking DeerFlow at ${GATEWAY_URL}..."
+    HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" "${GATEWAY_URL}/health" 2>/dev/null || echo "000")
+    if [ "$HTTP_CODE" = "000" ]; then
+      echo "UNREACHABLE — DeerFlow is not running at ${GATEWAY_URL}"
+      exit 1
+    elif [ "$HTTP_CODE" -ge 400 ]; then
+      echo "ERROR — Health check returned HTTP ${HTTP_CODE}"
+      exit 1
+    else
+      echo "OK — DeerFlow is running (HTTP ${HTTP_CODE})"
+    fi
+    ;;
+  models)
+    curl -s "${GATEWAY_URL}/api/models" | python3 -m json.tool
+    ;;
+  skills)
+    curl -s "${GATEWAY_URL}/api/skills" | python3 -m json.tool
+    ;;
+  agents)
+    curl -s "${GATEWAY_URL}/api/agents" | python3 -m json.tool
+    ;;
+  threads)
+    curl -s -X POST "${LANGGRAPH_URL}/threads/search" \
+      -H "Content-Type: application/json" \
+      -d '{"limit": 20, "sort_by": "updated_at", "sort_order": "desc", "select": ["thread_id", "updated_at", "values"]}' \
+      | python3 -c "
+import json, sys
+threads = json.load(sys.stdin)
+if not threads:
+    print('No threads found.')
+    sys.exit(0)
+for t in threads:
+    tid = t.get('thread_id', '?')
+    updated = t.get('updated_at', '?')
+    title = (t.get('values') or {}).get('title', '(untitled)')
+    print(f'{tid}  {updated}  {title}')
+"
+    ;;
+  memory)
+    curl -s "${GATEWAY_URL}/api/memory" | python3 -m json.tool
+    ;;
+  thread)
+    if [ -z "$ARG" ]; then
+      echo "Usage: status.sh thread <thread_id>" >&2
+      exit 1
+    fi
+    curl -s "${LANGGRAPH_URL}/threads/${ARG}/history" | python3 -c "
+import json, sys
+data = json.load(sys.stdin)
+if isinstance(data, list):
+    for state in data[:5]:
+        values = state.get('values', {})
+        msgs = values.get('messages', [])
+        for m in msgs[-5:]:
+            role = m.get('type', '?')
+            content = m.get('content', '')
+            if isinstance(content, list):
+                content = ' '.join(p.get('text','') for p in content if isinstance(p, dict))
+            preview = content[:200] if content else '(empty)'
+            print(f'[{role}] {preview}')
+        print('---')
+else:
+    print(json.dumps(data, indent=2))
+"
+    ;;
+  *)
+    echo "Unknown command: ${CMD}" >&2
+    echo "Usage: status.sh [health|models|skills|agents|threads|memory|thread <id>]" >&2
+    exit 1
+    ;;
+esac