DATA
6de0bf9f5b
Vendored deer-flow upstream (bytedance/deer-flow) plus prompt-injection hardening: - New deerflow.security package: content_delimiter, html_cleaner, sanitizer (8 layers — invisible chars, control chars, symbols, NFC, PUA, tag chars, horizontal whitespace collapse with newline/tab preservation, length cap) - New deerflow.community.searx package: web_search, web_fetch, image_search backed by a private SearX instance, every external string sanitized and wrapped in <<<EXTERNAL_UNTRUSTED_CONTENT>>> delimiters - All native community web providers (ddg_search, tavily, exa, firecrawl, jina_ai, infoquest, image_search) replaced with hard-fail stubs that raise NativeWebToolDisabledError at import time, so a misconfigured tool.use path fails loud rather than silently falling back to unsanitized output - Native client back-doors (jina_client.py, infoquest_client.py) stubbed too - Native-tool tests quarantined under tests/_disabled_native/ (collect_ignore_glob via local conftest.py) - Sanitizer Layer 7 fix: only collapse horizontal whitespace, preserve newlines and tabs so list/table structure survives - Hardened runtime config.yaml references only the searx-backed tools - Factory overlay (backend/) kept in sync with deer-flow tree as a reference / source See HARDENING.md for the full audit trail and verification steps.
126 lines
3.0 KiB
Bash
Executable File
126 lines
3.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set +e
|
|
|
|
echo "=========================================="
|
|
echo " Service Health Check"
|
|
echo "=========================================="
|
|
echo ""
|
|
|
|
all_passed=true
|
|
mode="${SMOKE_TEST_MODE:-auto}"
|
|
summary_hint="make logs"
|
|
|
|
print_step() {
|
|
echo "$1"
|
|
}
|
|
|
|
check_http_status() {
|
|
local name="$1"
|
|
local url="$2"
|
|
local expected_re="$3"
|
|
local status
|
|
|
|
status="$(curl -s -o /dev/null -w "%{http_code}" "$url" 2>/dev/null)"
|
|
if echo "$status" | grep -Eq "$expected_re"; then
|
|
echo "✓ $name is accessible ($url -> $status)"
|
|
else
|
|
echo "✗ $name is not accessible ($url -> ${status:-000})"
|
|
all_passed=false
|
|
fi
|
|
}
|
|
|
|
check_listen_port() {
|
|
local name="$1"
|
|
local port="$2"
|
|
|
|
if lsof -nP -iTCP:"$port" -sTCP:LISTEN >/dev/null 2>&1; then
|
|
echo "✓ $name is listening on port $port"
|
|
else
|
|
echo "✗ $name is not listening on port $port"
|
|
all_passed=false
|
|
fi
|
|
}
|
|
|
|
docker_available() {
|
|
command -v docker >/dev/null 2>&1 && docker info >/dev/null 2>&1
|
|
}
|
|
|
|
detect_mode() {
|
|
case "$mode" in
|
|
local|docker)
|
|
echo "$mode"
|
|
return
|
|
;;
|
|
esac
|
|
|
|
if docker_available && docker ps --format "{{.Names}}" | grep -q "deer-flow"; then
|
|
echo "docker"
|
|
else
|
|
echo "local"
|
|
fi
|
|
}
|
|
|
|
mode="$(detect_mode)"
|
|
|
|
echo "Deployment mode: $mode"
|
|
echo ""
|
|
|
|
if [ "$mode" = "docker" ]; then
|
|
summary_hint="make docker-logs"
|
|
print_step "1. Checking container status..."
|
|
if docker ps --format "{{.Names}}" | grep -q "deer-flow"; then
|
|
echo "✓ Containers are running:"
|
|
docker ps --format " - {{.Names}} ({{.Status}})"
|
|
else
|
|
echo "✗ No DeerFlow-related containers are running"
|
|
all_passed=false
|
|
fi
|
|
else
|
|
summary_hint="logs/{langgraph,gateway,frontend,nginx}.log"
|
|
print_step "1. Checking local service ports..."
|
|
check_listen_port "Nginx" 2026
|
|
check_listen_port "Frontend" 3000
|
|
check_listen_port "Gateway" 8001
|
|
check_listen_port "LangGraph" 2024
|
|
fi
|
|
echo ""
|
|
|
|
echo "2. Waiting for services to fully start (30 seconds)..."
|
|
sleep 30
|
|
echo ""
|
|
|
|
echo "3. Checking frontend service..."
|
|
check_http_status "Frontend service" "http://localhost:2026" "200|301|302|307|308"
|
|
echo ""
|
|
|
|
echo "4. Checking API Gateway..."
|
|
health_response=$(curl -s http://localhost:2026/health 2>/dev/null)
|
|
if [ $? -eq 0 ] && [ -n "$health_response" ]; then
|
|
echo "✓ API Gateway health check passed"
|
|
echo " Response: $health_response"
|
|
else
|
|
echo "✗ API Gateway health check failed"
|
|
all_passed=false
|
|
fi
|
|
echo ""
|
|
|
|
echo "5. Checking LangGraph service..."
|
|
check_http_status "LangGraph service" "http://localhost:2024/" "200|301|302|307|308|404"
|
|
echo ""
|
|
|
|
echo "=========================================="
|
|
echo " Health Check Summary"
|
|
echo "=========================================="
|
|
echo ""
|
|
if [ "$all_passed" = true ]; then
|
|
echo "✅ All checks passed!"
|
|
echo ""
|
|
echo "🌐 Application URL: http://localhost:2026"
|
|
exit 0
|
|
else
|
|
echo "❌ Some checks failed"
|
|
echo ""
|
|
echo "Please review: $summary_hint"
|
|
exit 1
|
|
fi
|