DATA
6de0bf9f5b
Vendored deer-flow upstream (bytedance/deer-flow) plus prompt-injection hardening: - New deerflow.security package: content_delimiter, html_cleaner, sanitizer (8 layers — invisible chars, control chars, symbols, NFC, PUA, tag chars, horizontal whitespace collapse with newline/tab preservation, length cap) - New deerflow.community.searx package: web_search, web_fetch, image_search backed by a private SearX instance, every external string sanitized and wrapped in <<<EXTERNAL_UNTRUSTED_CONTENT>>> delimiters - All native community web providers (ddg_search, tavily, exa, firecrawl, jina_ai, infoquest, image_search) replaced with hard-fail stubs that raise NativeWebToolDisabledError at import time, so a misconfigured tool.use path fails loud rather than silently falling back to unsanitized output - Native client back-doors (jina_client.py, infoquest_client.py) stubbed too - Native-tool tests quarantined under tests/_disabled_native/ (collect_ignore_glob via local conftest.py) - Sanitizer Layer 7 fix: only collapse horizontal whitespace, preserve newlines and tabs so list/table structure survives - Hardened runtime config.yaml references only the searx-backed tools - Factory overlay (backend/) kept in sync with deer-flow tree as a reference / source See HARDENING.md for the full audit trail and verification steps.
99 lines
3.2 KiB
Bash
Executable File
99 lines
3.2 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# status.sh — Check DeerFlow status and list available resources.
|
|
#
|
|
# Usage:
|
|
# bash status.sh # health + summary
|
|
# bash status.sh models # list models
|
|
# bash status.sh skills # list skills
|
|
# bash status.sh agents # list agents
|
|
# bash status.sh threads # list recent threads
|
|
# bash status.sh memory # show memory
|
|
# bash status.sh thread <id> # show thread history
|
|
#
|
|
# Environment variables:
|
|
# DEERFLOW_URL — Unified proxy base URL (default: http://localhost:2026)
|
|
# DEERFLOW_GATEWAY_URL — Gateway API base URL (default: $DEERFLOW_URL)
|
|
# DEERFLOW_LANGGRAPH_URL — LangGraph API base URL (default: $DEERFLOW_URL/api/langgraph)
|
|
|
|
set -euo pipefail
|
|
|
|
DEERFLOW_URL="${DEERFLOW_URL:-http://localhost:2026}"
|
|
GATEWAY_URL="${DEERFLOW_GATEWAY_URL:-$DEERFLOW_URL}"
|
|
LANGGRAPH_URL="${DEERFLOW_LANGGRAPH_URL:-$DEERFLOW_URL/api/langgraph}"
|
|
CMD="${1:-health}"
|
|
ARG="${2:-}"
|
|
|
|
case "$CMD" in
|
|
health)
|
|
echo "Checking DeerFlow at ${GATEWAY_URL}..."
|
|
HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" "${GATEWAY_URL}/health" 2>/dev/null || echo "000")
|
|
if [ "$HTTP_CODE" = "000" ]; then
|
|
echo "UNREACHABLE — DeerFlow is not running at ${GATEWAY_URL}"
|
|
exit 1
|
|
elif [ "$HTTP_CODE" -ge 400 ]; then
|
|
echo "ERROR — Health check returned HTTP ${HTTP_CODE}"
|
|
exit 1
|
|
else
|
|
echo "OK — DeerFlow is running (HTTP ${HTTP_CODE})"
|
|
fi
|
|
;;
|
|
models)
|
|
curl -s "${GATEWAY_URL}/api/models" | python3 -m json.tool
|
|
;;
|
|
skills)
|
|
curl -s "${GATEWAY_URL}/api/skills" | python3 -m json.tool
|
|
;;
|
|
agents)
|
|
curl -s "${GATEWAY_URL}/api/agents" | python3 -m json.tool
|
|
;;
|
|
threads)
|
|
curl -s -X POST "${LANGGRAPH_URL}/threads/search" \
|
|
-H "Content-Type: application/json" \
|
|
-d '{"limit": 20, "sort_by": "updated_at", "sort_order": "desc", "select": ["thread_id", "updated_at", "values"]}' \
|
|
| python3 -c "
|
|
import json, sys
|
|
threads = json.load(sys.stdin)
|
|
if not threads:
|
|
print('No threads found.')
|
|
sys.exit(0)
|
|
for t in threads:
|
|
tid = t.get('thread_id', '?')
|
|
updated = t.get('updated_at', '?')
|
|
title = (t.get('values') or {}).get('title', '(untitled)')
|
|
print(f'{tid} {updated} {title}')
|
|
"
|
|
;;
|
|
memory)
|
|
curl -s "${GATEWAY_URL}/api/memory" | python3 -m json.tool
|
|
;;
|
|
thread)
|
|
if [ -z "$ARG" ]; then
|
|
echo "Usage: status.sh thread <thread_id>" >&2
|
|
exit 1
|
|
fi
|
|
curl -s "${LANGGRAPH_URL}/threads/${ARG}/history" | python3 -c "
|
|
import json, sys
|
|
data = json.load(sys.stdin)
|
|
if isinstance(data, list):
|
|
for state in data[:5]:
|
|
values = state.get('values', {})
|
|
msgs = values.get('messages', [])
|
|
for m in msgs[-5:]:
|
|
role = m.get('type', '?')
|
|
content = m.get('content', '')
|
|
if isinstance(content, list):
|
|
content = ' '.join(p.get('text','') for p in content if isinstance(p, dict))
|
|
preview = content[:200] if content else '(empty)'
|
|
print(f'[{role}] {preview}')
|
|
print('---')
|
|
else:
|
|
print(json.dumps(data, indent=2))
|
|
"
|
|
;;
|
|
*)
|
|
echo "Unknown command: ${CMD}" >&2
|
|
echo "Usage: status.sh [health|models|skills|agents|threads|memory|thread <id>]" >&2
|
|
exit 1
|
|
;;
|
|
esac
|