DATA
6de0bf9f5b
Vendored deer-flow upstream (bytedance/deer-flow) plus prompt-injection hardening: - New deerflow.security package: content_delimiter, html_cleaner, sanitizer (8 layers — invisible chars, control chars, symbols, NFC, PUA, tag chars, horizontal whitespace collapse with newline/tab preservation, length cap) - New deerflow.community.searx package: web_search, web_fetch, image_search backed by a private SearX instance, every external string sanitized and wrapped in <<<EXTERNAL_UNTRUSTED_CONTENT>>> delimiters - All native community web providers (ddg_search, tavily, exa, firecrawl, jina_ai, infoquest, image_search) replaced with hard-fail stubs that raise NativeWebToolDisabledError at import time, so a misconfigured tool.use path fails loud rather than silently falling back to unsanitized output - Native client back-doors (jina_client.py, infoquest_client.py) stubbed too - Native-tool tests quarantined under tests/_disabled_native/ (collect_ignore_glob via local conftest.py) - Sanitizer Layer 7 fix: only collapse horizontal whitespace, preserve newlines and tabs so list/table structure survives - Hardened runtime config.yaml references only the searx-backed tools - Factory overlay (backend/) kept in sync with deer-flow tree as a reference / source See HARDENING.md for the full audit trail and verification steps.
129 lines
2.8 KiB
YAML
129 lines
2.8 KiB
YAML
name: Runtime Information
|
|
description: Report runtime/environment details to help reproduce an issue.
|
|
title: "[runtime] "
|
|
labels:
|
|
- needs-triage
|
|
body:
|
|
- type: markdown
|
|
attributes:
|
|
value: |
|
|
Thanks for sharing runtime details.
|
|
Complete this form so maintainers can quickly reproduce and diagnose the problem.
|
|
|
|
- type: input
|
|
id: summary
|
|
attributes:
|
|
label: Problem summary
|
|
description: Short summary of the issue.
|
|
placeholder: e.g. make dev fails to start gateway service
|
|
validations:
|
|
required: true
|
|
|
|
- type: textarea
|
|
id: expected
|
|
attributes:
|
|
label: Expected behavior
|
|
placeholder: What did you expect to happen?
|
|
validations:
|
|
required: true
|
|
|
|
- type: textarea
|
|
id: actual
|
|
attributes:
|
|
label: Actual behavior
|
|
placeholder: What happened instead? Include key error lines.
|
|
validations:
|
|
required: true
|
|
|
|
- type: dropdown
|
|
id: os
|
|
attributes:
|
|
label: Operating system
|
|
options:
|
|
- macOS
|
|
- Linux
|
|
- Windows
|
|
- Other
|
|
validations:
|
|
required: true
|
|
|
|
- type: input
|
|
id: platform_details
|
|
attributes:
|
|
label: Platform details
|
|
description: Add architecture and shell if relevant.
|
|
placeholder: e.g. arm64, zsh
|
|
|
|
- type: input
|
|
id: python_version
|
|
attributes:
|
|
label: Python version
|
|
placeholder: e.g. Python 3.12.9
|
|
|
|
- type: input
|
|
id: node_version
|
|
attributes:
|
|
label: Node.js version
|
|
placeholder: e.g. v23.11.0
|
|
|
|
- type: input
|
|
id: pnpm_version
|
|
attributes:
|
|
label: pnpm version
|
|
placeholder: e.g. 10.26.2
|
|
|
|
- type: input
|
|
id: uv_version
|
|
attributes:
|
|
label: uv version
|
|
placeholder: e.g. 0.7.20
|
|
|
|
- type: dropdown
|
|
id: run_mode
|
|
attributes:
|
|
label: How are you running DeerFlow?
|
|
options:
|
|
- Local (make dev)
|
|
- Docker (make docker-dev)
|
|
- CI
|
|
- Other
|
|
validations:
|
|
required: true
|
|
|
|
- type: textarea
|
|
id: reproduce
|
|
attributes:
|
|
label: Reproduction steps
|
|
description: Provide exact commands and sequence.
|
|
placeholder: |
|
|
1. make check
|
|
2. make install
|
|
3. make dev
|
|
4. ...
|
|
validations:
|
|
required: true
|
|
|
|
- type: textarea
|
|
id: logs
|
|
attributes:
|
|
label: Relevant logs
|
|
description: Paste key lines from logs (for example logs/gateway.log, logs/frontend.log).
|
|
render: shell
|
|
validations:
|
|
required: true
|
|
|
|
- type: textarea
|
|
id: git_info
|
|
attributes:
|
|
label: Git state
|
|
description: Share output of git branch and latest commit SHA.
|
|
placeholder: |
|
|
branch: feature/my-branch
|
|
commit: abcdef1
|
|
|
|
- type: textarea
|
|
id: additional
|
|
attributes:
|
|
label: Additional context
|
|
description: Add anything else that might help triage.
|