DanielWalnut 6bd88fe14c fix(sandbox): block host bash traversal escapes (#2560) ... * fix(sandbox): block host bash traversal escapes Fixes #2535 * fix(sandbox): harden local bash path guards * fix(sandbox): avoid bash cd argument false positives * Fix the lint error Add function to resolve and validate user data path. * Fix the lint error --------- Co-authored-by: Willem Jiang <willem.jiang@gmail.com>		2026-04-28 12:18:41 +08:00
..
agents	fix(harness): constrain view_image to thread data paths (#2557)	2026-04-28 11:13:17 +08:00
community	fix(aio-sandbox): redact env values in container logs (#2562)	2026-04-28 11:47:56 +08:00
config	fix(middleware): avoid rescuing non-skill tool outputs during summarization (#2458)	2026-04-24 21:19:46 +08:00
guardrails	feat(guardrails): add pre-tool-call authorization middleware with pluggable providers (#1240)	2026-03-23 18:07:33 +08:00
mcp	feat(mcp): support custom tool interceptors via extensions_config.json (#2451)	2026-04-25 09:18:13 +08:00
models	fix: cap prompt caching breakpoints at 4 to prevent API 400 errors (#2449)	2026-04-25 19:40:06 +08:00
reflection	refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)	2026-03-14 22:55:52 +08:00
runtime	feat: implement full checkpoint rollback on user cancellation (#1867)	2026-04-09 17:56:36 +08:00
sandbox	fix(sandbox): block host bash traversal escapes (#2560)	2026-04-28 12:18:41 +08:00
skills	fix(skills): scan skill archives before install (#2561)	2026-04-28 11:56:11 +08:00
subagents	feat(subagents): support per-subagent skill loading and custom subagent types (#2253)	2026-04-23 23:59:47 +08:00
tools	fix(harness): constrain view_image to thread data paths (#2557)	2026-04-28 11:13:17 +08:00
tracing	feat(tracing): add optional Langfuse support (#1717)	2026-04-02 13:06:10 +08:00
uploads	feat(harness): integration ACP agent tool (#1344)	2026-03-26 14:20:18 +08:00
utils	[security] fix(uploads): require explicit opt-in for host-side document conversion (#2332)	2026-04-18 22:47:42 +08:00
__init__.py	refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)	2026-03-14 22:55:52 +08:00
client.py	feat: show token usage per assistant response (#2270)	2026-04-16 08:56:49 +08:00