DATA
6de0bf9f5b
Vendored deer-flow upstream (bytedance/deer-flow) plus prompt-injection hardening: - New deerflow.security package: content_delimiter, html_cleaner, sanitizer (8 layers — invisible chars, control chars, symbols, NFC, PUA, tag chars, horizontal whitespace collapse with newline/tab preservation, length cap) - New deerflow.community.searx package: web_search, web_fetch, image_search backed by a private SearX instance, every external string sanitized and wrapped in <<<EXTERNAL_UNTRUSTED_CONTENT>>> delimiters - All native community web providers (ddg_search, tavily, exa, firecrawl, jina_ai, infoquest, image_search) replaced with hard-fail stubs that raise NativeWebToolDisabledError at import time, so a misconfigured tool.use path fails loud rather than silently falling back to unsanitized output - Native client back-doors (jina_client.py, infoquest_client.py) stubbed too - Native-tool tests quarantined under tests/_disabled_native/ (collect_ignore_glob via local conftest.py) - Sanitizer Layer 7 fix: only collapse horizontal whitespace, preserve newlines and tabs so list/table structure survives - Hardened runtime config.yaml references only the searx-backed tools - Factory overlay (backend/) kept in sync with deer-flow tree as a reference / source See HARDENING.md for the full audit trail and verification steps.
86 lines
2.6 KiB
Bash
Executable File
86 lines
2.6 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
echo "=========================================="
|
|
echo " Checking Required Dependencies"
|
|
echo "=========================================="
|
|
echo ""
|
|
|
|
FAILED=0
|
|
|
|
echo "Checking Node.js..."
|
|
if command -v node >/dev/null 2>&1; then
|
|
NODE_VERSION=$(node -v | sed 's/v//')
|
|
NODE_MAJOR=$(echo "$NODE_VERSION" | cut -d. -f1)
|
|
if [ "$NODE_MAJOR" -ge 22 ]; then
|
|
echo " ✓ Node.js $NODE_VERSION (>= 22 required)"
|
|
else
|
|
echo " ✗ Node.js $NODE_VERSION found, but version 22+ is required"
|
|
echo " Install from: https://nodejs.org/"
|
|
FAILED=1
|
|
fi
|
|
else
|
|
echo " ✗ Node.js not found (version 22+ required)"
|
|
echo " Install from: https://nodejs.org/"
|
|
FAILED=1
|
|
fi
|
|
|
|
echo ""
|
|
echo "Checking pnpm..."
|
|
if command -v pnpm >/dev/null 2>&1; then
|
|
PNPM_VERSION=$(pnpm -v)
|
|
echo " ✓ pnpm $PNPM_VERSION"
|
|
else
|
|
echo " ✗ pnpm not found"
|
|
echo " Install: npm install -g pnpm"
|
|
echo " Or visit: https://pnpm.io/installation"
|
|
FAILED=1
|
|
fi
|
|
|
|
echo ""
|
|
echo "Checking uv..."
|
|
if command -v uv >/dev/null 2>&1; then
|
|
UV_VERSION=$(uv --version | awk '{print $2}')
|
|
echo " ✓ uv $UV_VERSION"
|
|
else
|
|
echo " ✗ uv not found"
|
|
echo " Install: curl -LsSf https://astral.sh/uv/install.sh | sh"
|
|
echo " Or visit: https://docs.astral.sh/uv/getting-started/installation/"
|
|
FAILED=1
|
|
fi
|
|
|
|
echo ""
|
|
echo "Checking nginx..."
|
|
if command -v nginx >/dev/null 2>&1; then
|
|
NGINX_VERSION=$(nginx -v 2>&1 | awk -F'/' '{print $2}')
|
|
echo " ✓ nginx $NGINX_VERSION"
|
|
else
|
|
echo " ✗ nginx not found"
|
|
echo " macOS: brew install nginx"
|
|
echo " Ubuntu: sudo apt install nginx"
|
|
echo " Or visit: https://nginx.org/en/download.html"
|
|
FAILED=1
|
|
fi
|
|
|
|
echo ""
|
|
if [ "$FAILED" -eq 0 ]; then
|
|
echo "=========================================="
|
|
echo " ✓ All dependencies are installed!"
|
|
echo "=========================================="
|
|
echo ""
|
|
echo "You can now run:"
|
|
echo " make install - Install project dependencies"
|
|
echo " make setup - Create a minimal working config (recommended)"
|
|
echo " make config - Copy the full config template (manual setup)"
|
|
echo " make doctor - Verify config and dependency health"
|
|
echo " make dev - Start development server"
|
|
echo " make start - Start production server"
|
|
else
|
|
echo "=========================================="
|
|
echo " ✗ Some dependencies are missing"
|
|
echo "=========================================="
|
|
echo ""
|
|
echo "Please install the missing tools and run 'make check' again."
|
|
exit 1
|
|
fi
|