DATA
6de0bf9f5b
Vendored deer-flow upstream (bytedance/deer-flow) plus prompt-injection hardening: - New deerflow.security package: content_delimiter, html_cleaner, sanitizer (8 layers — invisible chars, control chars, symbols, NFC, PUA, tag chars, horizontal whitespace collapse with newline/tab preservation, length cap) - New deerflow.community.searx package: web_search, web_fetch, image_search backed by a private SearX instance, every external string sanitized and wrapped in <<<EXTERNAL_UNTRUSTED_CONTENT>>> delimiters - All native community web providers (ddg_search, tavily, exa, firecrawl, jina_ai, infoquest, image_search) replaced with hard-fail stubs that raise NativeWebToolDisabledError at import time, so a misconfigured tool.use path fails loud rather than silently falling back to unsanitized output - Native client back-doors (jina_client.py, infoquest_client.py) stubbed too - Native-tool tests quarantined under tests/_disabled_native/ (collect_ignore_glob via local conftest.py) - Sanitizer Layer 7 fix: only collapse horizontal whitespace, preserve newlines and tabs so list/table structure survives - Hardened runtime config.yaml references only the searx-backed tools - Factory overlay (backend/) kept in sync with deer-flow tree as a reference / source See HARDENING.md for the full audit trail and verification steps.
81 lines
1.9 KiB
TypeScript
81 lines
1.9 KiB
TypeScript
"use client";
|
|
|
|
import type { LucideIcon } from "lucide-react";
|
|
import { Children, type ComponentProps } from "react";
|
|
|
|
import { Button } from "@/components/ui/button";
|
|
import { ScrollArea, ScrollBar } from "@/components/ui/scroll-area";
|
|
import { cn } from "@/lib/utils";
|
|
|
|
const STAGGER_DELAY_MS = 60;
|
|
const STAGGER_DELAY_MS_OFFSET = 250;
|
|
|
|
export type SuggestionsProps = ComponentProps<typeof ScrollArea>;
|
|
|
|
export const Suggestions = ({
|
|
className,
|
|
children,
|
|
...props
|
|
}: SuggestionsProps) => (
|
|
<ScrollArea className="overflow-x-auto whitespace-normal" {...props}>
|
|
<div
|
|
className={cn("flex w-full flex-wrap items-center gap-2", className)}
|
|
data-slot="suggestions-list"
|
|
>
|
|
{Children.map(children, (child, index) =>
|
|
child != null ? (
|
|
<span
|
|
className="animate-fade-in-up max-w-full opacity-0"
|
|
style={{
|
|
animationDelay: `${STAGGER_DELAY_MS_OFFSET + index * STAGGER_DELAY_MS}ms`,
|
|
}}
|
|
>
|
|
{child}
|
|
</span>
|
|
) : (
|
|
child
|
|
),
|
|
)}
|
|
</div>
|
|
<ScrollBar className="hidden" orientation="horizontal" />
|
|
</ScrollArea>
|
|
);
|
|
|
|
export type SuggestionProps = Omit<ComponentProps<typeof Button>, "onClick"> & {
|
|
suggestion: React.ReactNode;
|
|
icon?: LucideIcon;
|
|
onClick?: () => void;
|
|
};
|
|
|
|
export const Suggestion = ({
|
|
suggestion,
|
|
onClick,
|
|
className,
|
|
icon: Icon,
|
|
variant = "outline",
|
|
size = "sm",
|
|
children,
|
|
...props
|
|
}: SuggestionProps) => {
|
|
const handleClick = () => {
|
|
onClick?.();
|
|
};
|
|
|
|
return (
|
|
<Button
|
|
className={cn(
|
|
"text-muted-foreground h-auto max-w-full cursor-pointer rounded-full px-4 py-2 text-center text-xs font-normal whitespace-normal",
|
|
className,
|
|
)}
|
|
onClick={handleClick}
|
|
size={size}
|
|
type="button"
|
|
variant={variant}
|
|
{...props}
|
|
>
|
|
{Icon && <Icon className="size-4" />}
|
|
{children ?? suggestion}
|
|
</Button>
|
|
);
|
|
};
|