deer-flow

mirror of https://github.com/bytedance/deer-flow.git synced 2026-07-21 10:15:47 +00:00

Files

T

hataaandGitHub 1300c6d36b feat(authz): add pluggable AuthorizationProvider protocol and config scaffolding (Phase 0, #4063 ) (#4127 )

Phase 0 of the RFC in #4063: scaffolding only, zero behavior change.

New deerflow/authz/ package (sibling to deerflow/guardrails/):
- AuthorizationProvider Protocol: authorize() + aauthorize() + filter_resources()
- Principal/AuthzRequest/AuthzDecision/AuthzReason dataclasses
- GuardrailAuthorizationAdapter: bridges AuthorizationProvider → GuardrailProvider
  so existing GuardrailMiddleware can enforce authz decisions without a new middleware

New authorization config section (default enabled: false):
- AuthorizationConfig wired into AppConfig alongside guardrails
- Singleton load/reset mirrors GuardrailsConfig pattern
- config.example.yaml documents the RBAC provider schema

29 tests covering protocol conformance, dataclass construction, adapter
request/decision mapping, and config singleton behavior.

Per RFC #4063 Phase 0 (foundations). Layer 1/2 wiring and Principal builder
in services.py deferred to Phase 1.

2026-07-15 10:03:33 +08:00

agents

feat(skill): strengthen maintainer orchestrator review workflow (#3606 )

2026-06-16 23:33:09 +08:00

plans

feat(authz): add pluggable AuthorizationProvider protocol and config scaffolding (Phase 0, #4063 ) (#4127 )

2026-07-15 10:03:33 +08:00

pr-evidence

Implement skill self-evolution and skill_manage flow (#1874 )

2026-04-06 22:07:11 +08:00

superpowers

feat: add scheduled tasks MVP (#3898 )