吉鑫升andClaude Opus 4.7
80fc2a9240
- 后端新增 POST /api/skills/reconcile-custom:扫描 custom 目录,把磁盘存在但 DB 无记录的技能登记到调用者名下(published=false),附 4 个单元测试 - 前端技能列表加"重新扫描技能目录"按钮,列表分页每页 10 条 - SkillsConfig 新增 security_scan.enabled(默认 true)用于关闭 LLM 安全扫描;scan_skill_content 在开关关闭时直接放行 - 智能体卡片/对话页长名 truncate 显示 + loading 占位 Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
67 lines
2.2 KiB
Python
67 lines
2.2 KiB
Python
import os
|
|
from pathlib import Path
|
|
|
|
from pydantic import BaseModel, Field
|
|
|
|
from deerflow.config.runtime_paths import project_root, resolve_path
|
|
|
|
|
|
class SecurityScanConfig(BaseModel):
|
|
"""Toggle for the LLM-based skill security scanner."""
|
|
|
|
enabled: bool = Field(
|
|
default=True,
|
|
description=(
|
|
"When false, skip the LLM security scan applied to skill installs, "
|
|
"custom-skill edits, and rollbacks. The scan is then treated as 'allow'."
|
|
),
|
|
)
|
|
|
|
|
|
class SkillsConfig(BaseModel):
|
|
"""Configuration for skills system"""
|
|
|
|
use: str = Field(
|
|
default="deerflow.skills.storage.local_skill_storage:LocalSkillStorage",
|
|
description="Class path of the SkillStorage implementation.",
|
|
)
|
|
path: str | None = Field(
|
|
default=None,
|
|
description="Path to skills directory. If not specified, defaults to skills under the caller project root.",
|
|
)
|
|
container_path: str = Field(
|
|
default="/mnt/skills",
|
|
description="Path where skills are mounted in the sandbox container",
|
|
)
|
|
security_scan: SecurityScanConfig = Field(
|
|
default_factory=SecurityScanConfig,
|
|
description="LLM security-scan toggle for skill content.",
|
|
)
|
|
|
|
def get_skills_path(self) -> Path:
|
|
"""
|
|
Get the resolved skills directory path.
|
|
|
|
Returns:
|
|
Path to the skills directory
|
|
"""
|
|
if self.path:
|
|
# Use configured path (can be absolute or relative to project root)
|
|
return resolve_path(self.path)
|
|
if env_path := os.getenv("DEER_FLOW_SKILLS_PATH"):
|
|
return resolve_path(env_path)
|
|
return project_root() / "skills"
|
|
|
|
def get_skill_container_path(self, skill_name: str, category: str = "public") -> str:
|
|
"""
|
|
Get the full container path for a specific skill.
|
|
|
|
Args:
|
|
skill_name: Name of the skill (directory name)
|
|
category: Category of the skill (public or custom)
|
|
|
|
Returns:
|
|
Full path to the skill in the container
|
|
"""
|
|
return f"{self.container_path}/{category}/{skill_name}"
|