deer-flow

mirror of https://github.com/bytedance/deer-flow.git synced 2026-05-21 15:36:48 +00:00

Files

T

Willem Jiang 4731605d99 fix(sandbox): add group/other read permissions to uploaded files for Docker sandbox (#3127 )

When using AIO sandbox with LocalContainerBackend, uploaded files are
  created with 0o600 (owner-only) permissions by the gateway process
  running as root. The sandbox process inside the Docker container runs
  as a non-root user and cannot read these bind-mounted files, causing
  a "Permission denied" error on read_file.

  Add `needs_upload_permission_adjustment` attribute to SandboxProvider
  (default True) to indicate that uploaded files need chmod adjustment.
  LocalSandboxProvider opts out (same user). A new `_make_file_sandbox_readable`
  function adds S_IRGRP | S_IROTH bits after files are written, changing
  permissions from 0o600 to 0o644 so the sandbox can read the uploads.

  fixes #3127

2026-05-21 17:51:56 +08:00

auth

fix(auth): persist auto-generated JWT secret to survive restarts (#2933 )

2026-05-16 09:24:40 +08:00

routers

fix(sandbox): add group/other read permissions to uploaded files for Docker sandbox (#3127 )

2026-05-21 17:51:56 +08:00

__init__.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131 )

2026-03-14 22:55:52 +08:00

app.py

docs: document auth design and user isolation (#2913 )