Merge branch 'xuhd' of http://192.168.0.200/knowledge-base-bj/deerflow-server into liuq

2026-05-19 10:29:56 +08:00
commit 9f8b9f7ae5
@@ -530,6 +530,15 @@ function MemorySearchPanel() {
  const { t } = useI18n();
  const m = t.settings.memory;

+  // 检索范围:default 是内置助手,其余是用户的自定义专家 —— 对应
+  // Hindsight 的 work bank deerflow-work-{user}-{agent}。
+  const { agents: allAgents } = useAgents();
+  const experts = useMemo(
+    () => allAgents.filter((a) => !a.builtin),
+    [allAgents],
+  );
+  const [searchAgent, setSearchAgent] = useState("default");
+
  const [query, setQuery] = useState("");
  const [mode, setMode] = useState<MemorySearchMode>("recall");
  const [isSearching, setIsSearching] = useState(false);
@@ -542,7 +551,7 @@ function MemorySearchPanel() {
    if (!q) return;
    setIsSearching(true);
    try {
-      const result = await searchMemory(q, mode);
+      const result = await searchMemory(q, mode, searchAgent);
      setUnavailable(!result.available);
      setResults(result.results);
      setReflectText(result.text);
@@ -566,6 +575,26 @@ function MemorySearchPanel() {
            placeholder={m.searchPlaceholder}
            className="min-w-0 flex-1"
          />
+          <div className="flex items-center gap-1">
+            <span className="text-muted-foreground text-sm">
+              {m.workNotesAgentLabel}
+            </span>
+            <Select value={searchAgent} onValueChange={setSearchAgent}>
+              <SelectTrigger className="w-40" size="sm">
+                <SelectValue />
+              </SelectTrigger>
+              <SelectContent>
+                <SelectItem value="default">
+                  {m.workNotesDefaultAgent}
+                </SelectItem>
+                {experts.map((a) => (
+                  <SelectItem key={a.id} value={a.id}>
+                    {a.name}
+                  </SelectItem>
+                ))}
+              </SelectContent>
+            </Select>
+          </div>
          <ToggleGroup
            type="single"
            value={mode}
@@ -13,6 +13,7 @@ import {
 } from "@/components/ui/sidebar";
 import { getStoredAuth } from "@/core/auth";
 import { useI18n } from "@/core/i18n/hooks";
+// import { BotIcon, BrainIcon, ListChecks, MessageSquarePlus, MessagesSquare, SparklesIcon, UsersIcon } from "lucide-react";
 import { BotIcon, BrainIcon, CalendarClock, ListChecks, MessageSquarePlus, MessagesSquare, SparklesIcon, UsersIcon } from "lucide-react";

 export function WorkspaceNavChatList() {
@@ -390,25 +390,25 @@ export const enUS: Translations = {
      settingsTitle: "Memory settings",
      settingsDesc: "Adjust how memory is injected and retrieved. Changes take effect immediately.",
      injectionEnabled: "Inject memory into conversations",
-      injectionEnabledDesc: "When off, the assistant sees no memory during conversations.",
+      injectionEnabledDesc: "The master switch for memory. When on, the assistant draws on what it remembers about you and past conversations; when off, it sees no memory at all and treats every chat as the first time. The options below only take effect when this is on.",
      includeBuiltin: "Inject local memory",
-      includeBuiltinDesc: "Inject the user profile and working notes into the system prompt.",
+      includeBuiltinDesc: "Give the assistant locally stored memory as background knowledge: the user profile (your identity, habits and preferences) and work notes (key points the assistant saved while working with you). Kept in local server files — no external service required.",
      includeHindsight: "Inject Hindsight recall",
-      includeHindsightDesc: "Retrieve and inject relevant memories from Hindsight before each turn.",
+      includeHindsightDesc: "Before each reply, automatically retrieve memories relevant to the current topic from the Hindsight long-term memory store and add them as reference. Requires a deployed, reachable Hindsight service.",
      maxTokens: "Injection token limit",
-      maxTokensDesc: "Maximum tokens used for memory injection (100–8000).",
+      maxTokensDesc: "How much room injected memory may take up per turn (in tokens). Higher lets the assistant see more memory but leaves less space for the conversation itself. Allowed range 100–8000.",
      memoryMode: "Hindsight tool mode",
-      memoryModeDesc: "Controls whether Hindsight retrieval tools are exposed to the assistant.",
-      memoryModeContext: "context — auto recall only",
-      memoryModeTools: "tools — tools only",
-      memoryModeHybrid: "hybrid — auto + tools",
+      memoryModeDesc: "How the assistant uses the Hindsight store: automatic background retrieval, an on-demand search tool the assistant calls itself, or both.",
+      memoryModeContext: "context — background auto recall only, no action needed",
+      memoryModeTools: "tools — search tool only, the assistant queries on demand",
+      memoryModeHybrid: "hybrid — background auto recall + search tool, both enabled",
      recallBudget: "Recall depth",
-      recallBudgetDesc: "How thorough Hindsight retrieval is — higher is slower but more complete.",
+      recallBudgetDesc: "How thorough each Hindsight search is. Higher finds more but is slower and more costly; lower is faster but may miss relevant memories.",
      recallBudgetLow: "Low",
      recallBudgetMid: "Mid",
      recallBudgetHigh: "High",
-      bankMission: "Hindsight reflect mission",
-      bankMissionDesc: "Identity/framing for reflect reasoning; leave empty to use the default.",
+      bankMission: "Hindsight synthesis settings",
+      bankMissionDesc: "For 'reflect' (synthesis) searches, tells Hindsight what role and perspective to take when summarizing memories. Leave empty to use the default.",
      bankMissionPlaceholder: "e.g. You are the user's long-term assistant, focused on their work preferences.",
      settingsSaved: "Settings saved",
      searchTitle: "Hindsight memory search",
@@ -595,22 +595,22 @@ export const enUS: Translations = {
          "Saves to skill_evolution.json and hot-reloads — no restart required.",
        enabledLabel: "Enable skill evolution",
        enabledHelper:
-          "When off, the agent cannot create or modify skills under custom/.",
+          "The master switch for skill evolution. When on, the agent gets the skill_manage tool — it can create, modify and delete skills under custom/, and is nudged to offer saving a workflow as a skill after a complex task. When off, those skill-writing abilities are removed and the agent can only view and use existing skills. All curator settings below require this to be on.",
        curatorEnabledLabel: "Curator runs automatically",
        curatorEnabledHelper:
-          "When off, the curator only runs when triggered from this page.",
+          "The curator is a background skill librarian that periodically scans your skill library: it flags long-unused skills as stale, then archives them, and uses an LLM to review whether duplicate skills should be merged. When on, it runs automatically on the interval below; when off, it only runs when you click \"Run now\" on this page.",
        intervalHoursLabel: "Run interval (hours)",
        intervalHoursHelper:
-          "Minimum hours between automatic curator runs.",
+          "Minimum hours between automatic curator runs. Default 168 (one week). Manual runs are not subject to this limit.",
        staleAfterDaysLabel: "Stale threshold (days)",
        staleAfterDaysHelper:
-          "Skills inactive for this many days are flagged stale.",
+          "A skill not used for this many days is flagged stale by the curator. Stale skills are no longer injected into the agent's prompt, but the files are kept — using one again restores it to active.",
        archiveAfterDaysLabel: "Archive threshold (days)",
        archiveAfterDaysHelper:
-          "Stale skills inactive for this many additional days are archived.",
+          "A skill idle for this many days since its last use is archived by the curator (counted as total idle days, not added on top of the stale threshold). Archiving is a soft delete — files stay under custom/ and can be restored anytime. Must be greater than the stale threshold.",
        curatorModelLabel: "Curator review model",
        curatorModelHelper:
-          "Model for the curator's LLM review and skill security moderation. Defaults to the primary model.",
+          "Model used for the curator's skill review (merge/prune decisions) and skill security moderation. Leave empty to use the primary model.",
        curatorModelDefault: "Primary model (default)",
        save: "Save changes",
        saveSuccess: "Configuration updated",
@@ -373,25 +373,25 @@ export const zhCN: Translations = {
      settingsTitle: "记忆设置",
      settingsDesc: "调整记忆的注入与检索行为。修改即时生效。",
      injectionEnabled: "注入记忆到对话",
-      injectionEnabledDesc: "关闭后,助手在对话中不会看到任何记忆。",
+      injectionEnabledDesc: "记忆功能的总开关。开启后,助手回答时会参考它记住的关于你的信息和过往对话;关闭后,助手在对话中看不到任何记忆,每次都像第一次和你交流。下面几项都需要此开关开启才会生效。",
      includeBuiltin: "注入本地记忆",
-      includeBuiltinDesc: "把用户画像和工作笔记注入系统提示词。",
+      includeBuiltinDesc: "把保存在本机的记忆作为背景知识提供给助手,包括「用户画像」(你的身份、习惯、偏好等长期信息)和「工作笔记」(助手在协作中为你记下的要点)。这类记忆存在服务器本地文件里,不依赖任何外部服务。",
      includeHindsight: "注入 Hindsight 召回",
-      includeHindsightDesc: "每轮对话前从 Hindsight 检索相关记忆并注入。",
+      includeHindsightDesc: "每次回答前,自动从 Hindsight 长期记忆库中检索与当前话题相关的历史记忆,临时补充给助手参考。需要已部署并连通 Hindsight 服务才会生效。",
      maxTokens: "注入 token 上限",
-      maxTokensDesc: "记忆注入占用的最大 token 数 (100–8000)。",
+      maxTokensDesc: "每次注入的记忆最多占用多少篇幅(单位 token,中文大致相当于字数)。设得越大,助手能看到的记忆越多,但会挤占对话本身的可用空间。可填 100–8000。",
      memoryMode: "Hindsight 工具模式",
-      memoryModeDesc: "控制是否把 Hindsight 检索工具暴露给助手。",
-      memoryModeContext: "context —— 仅自动召回",
-      memoryModeTools: "tools —— 仅暴露工具",
-      memoryModeHybrid: "hybrid —— 自动 + 工具",
+      memoryModeDesc: "决定助手如何使用 Hindsight 记忆库:由系统在后台自动检索、把检索工具交给助手按需自己调用、或两者都启用。",
+      memoryModeContext: "context —— 仅后台自动召回,助手无需操作",
+      memoryModeTools: "tools —— 仅提供检索工具,由助手按需自己查",
+      memoryModeHybrid: "hybrid —— 后台自动召回 + 检索工具,两者都启用",
      recallBudget: "召回深度",
-      recallBudgetDesc: "Hindsight 检索的彻底程度,越高越慢但越全。",
+      recallBudgetDesc: "Hindsight 每次检索的彻底程度。越高找得越全面,但响应越慢、计算开销越大;越低越快,但可能漏掉相关记忆。",
      recallBudgetLow: "低",
      recallBudgetMid: "中",
      recallBudgetHigh: "高",
-      bankMission: "Hindsight reflect mission",
-      bankMissionDesc: "综合推理时的身份/框架描述,留空则用默认。",
+      bankMission: "Hindsight 综合推理设定",
+      bankMissionDesc: "使用「综合」模式检索时,告诉 Hindsight 以什么身份、从什么角度来归纳整理记忆。留空则使用默认设定。",
      bankMissionPlaceholder: "例如:你是用户的长期助手,关注其工作偏好。",
      settingsSaved: "设置已保存",
      searchTitle: "Hindsight 记忆检索",
@@ -566,17 +566,23 @@ export const zhCN: Translations = {
        description:
          "保存后会写入 skill_evolution.json 并热更新，无需重启。",
        enabledLabel: "启用自我进化",
-        enabledHelper: "关闭后 agent 不会创建或修改 custom/ 下的技能。",
+        enabledHelper:
+          "自我进化的总开关。开启后会给 agent 注册 skill_manage 工具 —— 它就能在对话中创建、修改、删除 custom/ 目录下的技能,并在完成复杂任务后主动提议把流程沉淀为技能。关闭后这些写技能的能力全部收起,agent 只能查看和使用已有技能。下方 curator 的所有设置都需要此开关开启才生效。",
        curatorEnabledLabel: "curator 自动运行",
-        curatorEnabledHelper: "关闭后只能在此页面手动触发。",
+        curatorEnabledHelper:
+          "curator 是后台的技能策展程序,会定期巡检技能库:把长期不用的技能标记为陈旧、再归档,并用 LLM 评审是否该合并重复技能。开启后按下面的运行间隔自动运行;关闭后只能在本页面手动点「立即执行」触发。",
        intervalHoursLabel: "运行间隔（小时）",
-        intervalHoursHelper: "两次自动运行之间至少经过的小时数。",
+        intervalHoursHelper:
+          "两次 curator 自动运行之间至少间隔的小时数,默认 168 小时(一周)。手动触发不受此限制。",
        staleAfterDaysLabel: "陈旧阈值（天）",
-        staleAfterDaysHelper: "技能长时间不活跃后被标记为陈旧。",
+        staleAfterDaysHelper:
+          "一个技能连续这么多天没被使用,就会被 curator 标记为「陈旧」。陈旧技能不再注入 agent 的提示词,但文件仍保留;被重新用到时会自动恢复为活跃。",
        archiveAfterDaysLabel: "归档阈值（天）",
-        archiveAfterDaysHelper: "标记陈旧后再经过这么多天会被自动归档。",
+        archiveAfterDaysHelper:
+          "一个技能从最后一次使用算起连续闲置这么多天,就会被 curator 自动「归档」(按总闲置天数计算,不是在标记陈旧之后再单独累加)。归档是软删除,文件仍留在 custom/ 目录、可随时手动恢复;此值需大于陈旧阈值。",
        curatorModelLabel: "技能优化模型",
-        curatorModelHelper: "用于 curator 技能评审和技能安全审核的模型，为空则使用主模型。",
+        curatorModelHelper:
+          "curator 做技能评审(判断能否合并、精简)和技能安全审核时使用的模型。留空则使用主模型。",
        curatorModelDefault: "主模型（默认）",
        save: "保存修改",
        saveSuccess: "配置已更新",
@@ -11,16 +11,16 @@ wheels/
 agent_history.gif
 static/browser_history/*.gif

-log/
-log/*
-.deer-flow/users/
+log/
+log/*
+.deer-flow/users/

 # Virtual environments
 .venv
 venv/

 # User config file
-config.yaml
+# config.yaml

 # Langgraph
 .langgraph_api
@@ -240,12 +240,12 @@ FastAPI application on port 8001 with health check at `GET /health`. Set `GATEWA
 | ------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | **Models** (`/api/models`)                             | `GET /` - list models; `GET /{name}` - model details                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
 | **MCP** (`/api/mcp`)                                   | `GET /config` - get config; `PUT /config` - update config (saves to extensions_config.json)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
-| **Skills** (`/api/skills`)                             | `GET /` - list skills (optional `search` fuzzy-name + `tag_id` filters; each item carries `tags` + owner-authored `detail`); `GET /{name}` - details; `PUT /{name}` - update enabled; `PUT /{name}/detail` - set the long-form `detail` text (custom skill: owner or admin; built-in/public: admin only — materializes a `skills` row on demand); `GET /{name}/content` - raw SKILL.md source, restricted to an admin or the publisher (custom-skill owner); other users get 403 and see only description + detail; `POST /install` - install from .skill archive (accepts standard optional frontmatter like `version`, `author`, `compatibility`)                                                                                                                                 |
 | **Skills** (`/api/skills`)                             | `GET /` - list skills; `GET /{name}` - details; `PUT /{name}` - update enabled; `POST /install` - install from .skill archive (accepts standard optional frontmatter like `version`, `author`, `compatibility`)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
 | **Memory V2** (`/api/memory/v2`)                       | `GET /` - builtin data (USER.md/MEMORY.md); `POST/PUT/DELETE /entries` - add/replace/remove entry; `GET/PATCH/DELETE /config` - effective config + per-user overrides; `POST /search` - Hindsight recall/reflect proxy                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
 | **Agents** (`/api/agents`)                             | `GET /` - list built-in, owned, and published agents; `POST /` - create user-owned agent; `GET/PUT/DELETE /{id}` - read/update/delete by stable agent id; `GET /check` - validate non-empty display name (duplicates allowed)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
 | **Skills** (`/api/skills`)                             | `GET /` - list skills (optional `search` fuzzy-name + `tag_id` filters; each item carries `tags`); `GET /{name}` - details; `PUT /{name}` - update enabled; `POST /install` - install from .skill archive (accepts standard optional frontmatter like `version`, `author`, `compatibility`)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
 | **Skills** (`/api/skills`)                             | `GET /` - list skills (optional `search` fuzzy-name + `tag_id` filters; each item carries `tags` + owner-authored `detail`); `GET /{name}` - details; `PUT /{name}` - update enabled; `PUT /{name}/detail` - set the long-form `detail` text (custom skill: owner or admin; built-in/public: admin only — materializes a `skills` row on demand); `POST /install` - install from .skill archive (accepts standard optional frontmatter like `version`, `author`, `compatibility`)                                                                                                                                                                                                                                                                                                   |
+| **Skills** (`/api/skills`)                             | `GET /` - list skills (optional `search` fuzzy-name + `tag_id` filters; each item carries `tags` + owner-authored `detail`); `GET /{name}` - details; `PUT /{name}` - update enabled; `PUT /{name}/detail` - set the long-form `detail` text (custom skill: owner or admin; built-in/public: admin only — materializes a `skills` row on demand); `GET /{name}/content` - raw SKILL.md source, restricted to an admin or the publisher (custom-skill owner); other users get 403 and see only description + detail; `POST /install` - install from .skill archive (accepts standard optional frontmatter like `version`, `author`, `compatibility`)                                                                                                                                 |
 | **Memory** (`/api/memory`)                             | `GET /` - memory data; `POST /reload` - force reload; `GET /config` - config; `GET /status` - config + data                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
 | **Agents** (`/api/agents`)                             | `GET /` - list built-in, owned, and published agents (optional `search` + `tag_id` filters; each item carries `tags`); `POST /` - create user-owned agent; `GET/PUT/DELETE /{id}` - read/update/delete by stable agent id; `GET /check` - validate non-empty display name (duplicates allowed)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
 | **Tags** (`/api/tags`)                                 | `GET /` - list tags (optional `tag_type` filter; open to all); `POST /` - create tag (admin); `PUT /{id}` / `DELETE /{id}` - update/delete tag (admin); `GET /assignments/{target_type}/{target_id}` - tags on a resource; `PUT /assignments/{target_type}/{target_id}` - replace a resource's tags (admin). Tags are typed `agent`/`skill`/`scheduled_task` and may only tag resources of their own type.                                                                                                                                                                                                                                                                                                                                                                          |
@@ -0,0 +1,167 @@
+# Offline backend template for DeerFlow
+config_version: 8
+log_level: info
+
+models:
+  - name: deepseek-chat
+    display_name: DeepSeek Chat
+    use: langchain_openai:ChatOpenAI
+    model: deepseek-chat
+    api_key: sk-e1c22b7931dc446f8b67e57878edd105
+    base_url: https://api.deepseek.com
+    request_timeout: 600.0
+    max_retries: 2
+    max_tokens: 4096
+    temperature: 1.0
+    supports_vision: true
+    supports_thinking: true
+
+  - name: deepseek-v4-flash
+    display_name: DeepSeek V4 Flash
+    use: langchain_openai:ChatOpenAI
+    model: deepseek-v4-flash
+    api_key: sk-e1c22b7931dc446f8b67e57878edd105
+    base_url: https://api.deepseek.com
+    request_timeout: 600.0
+    max_retries: 2
+    max_tokens: 4096
+    temperature: 1.0
+    supports_vision: true
+    supports_thinking: true
+
+  - name: deepseek-v4-pro
+    display_name: DeepSeek V4 Pro
+    use: langchain_openai:ChatOpenAI
+    model: deepseek-v4-pro
+    api_key: sk-e1c22b7931dc446f8b67e57878edd105
+    base_url: https://api.deepseek.com
+    request_timeout: 600.0
+    max_retries: 2
+    max_tokens: 4096
+    temperature: 1.0
+    supports_vision: true
+    supports_thinking: true
+
+title:
+  enabled: true
+  max_words: 6
+  max_chars: 60
+  prompt_template: |
+    请为下面这段对话生成一个简洁的标题,概括对话的核心主题。
+
+    要求:
+    - 标题必须使用简体中文
+    - 尽量精炼,不超过 {max_words} 个词
+    - 只返回标题本身,不要加引号、不要解释、结尾不要标点
+
+    User: {user_msg}
+    Assistant: {assistant_msg}
+
+tool_groups:
+  - name: web
+  - name: file:read
+  - name: file:write
+  - name: bash
+
+tools:
+  - name: web_search
+    group: web
+    use: deerflow.community.ddg_search.tools:web_search_tool
+    max_results: 5
+
+  - name: ls
+    group: file:read
+    use: deerflow.sandbox.tools:ls_tool
+
+  - name: read_file
+    group: file:read
+    use: deerflow.sandbox.tools:read_file_tool
+
+  - name: glob
+    group: file:read
+    use: deerflow.sandbox.tools:glob_tool
+    max_results: 200
+
+  - name: grep
+    group: file:read
+    use: deerflow.sandbox.tools:grep_tool
+    max_results: 100
+
+  - name: write_file
+    group: file:write
+    use: deerflow.sandbox.tools:write_file_tool
+
+  - name: str_replace
+    group: file:write
+    use: deerflow.sandbox.tools:str_replace_tool
+
+  - name: bash
+    group: bash
+    use: deerflow.sandbox.tools:bash_tool
+
+sandbox:
+  use: deerflow.sandbox.local:LocalSandboxProvider
+  allow_host_bash: true
+
+skills:
+  path: D:\project\bj\deerflow-server\skills
+
+agents_api:
+  enabled: true
+
+# 记忆子系统:跨会话持久化用户画像与 agent 私有记忆。
+# 三层覆盖优先级(高->低):
+#   users/{user_id}/memory_config.json > .deer-flow/memory_user_overrides.json > 此处
+memory:
+  enabled: true
+  provider: hindsight              # 'builtin' | 'hindsight'(外部 provider 名)
+                                   # builtin 始终启用,这里只决定 external 选哪个
+  builtin:
+    enabled: true
+    memory_char_limit: 2200
+    user_char_limit: 1375
+    deduplicate_on_load: true
+
+  hindsight:                       # provider=hindsight 时生效,需另行部署 Hindsight 服务
+    mode: local_external           # 'cloud' | 'local_embedded' | 'local_external'
+    api_url: http://localhost:8765
+    api_key: ""                    # 部署 Hindsight 后填,或改成 $HINDSIGHT_API_KEY 并设同名环境变量
+                                   # 注意:写成 $VAR 但环境变量未设置会导致配置加载失败
+    bank_id_template: "deerflow-user-{user_id}"
+    work_bank_id_template: "deerflow-work-{user_id}-{agent_id}"
+    memory_mode: context           # 'context' | 'tools' | 'hybrid'
+    bank_mission: ""
+    bank_retain_mission: ""
+    recall_budget: mid             # 'low' | 'mid' | 'high'
+    recall_max_tokens: 4096
+    recall_max_input_chars: 800
+    auto_recall: true
+    auto_retain: true
+    retain_async: true
+    retain_every_n_turns: 1
+    retain_user_prefix: "User"
+    retain_assistant_prefix: "Assistant"
+
+  # background_extraction:预留功能,代码尚未实现 —— 仅设计文档存在。
+  # 待对应版本支持后,取消下面整段注释即可启用(漏记兜底)。
+  # background_extraction:
+  #   enabled: false                 # 默认关闭,作为漏记兜底
+  #   debounce_seconds: 30
+  #   model_name: ~                  # null = 用默认模型
+  #   fact_confidence_threshold: 0.7
+  #   max_facts_per_extraction: 10
+  #   correction_detection: true
+  #   reinforcement_detection: true
+
+  injection:
+    enabled: true
+    max_tokens: 2000
+    include_builtin: true
+    include_hindsight: true
+    context_tag: "memory-context"  # 包裹 Hindsight recall 的标签名
+
+  security:
+    scan_content: true             # 注入/外渗模式扫描
+    block_invisible_unicode: true
+    # streaming_scrubber:预留字段,代码尚未实现 —— 待版本支持后取消注释。
+    # streaming_scrubber: true       # SSE 流前清洗 <memory-context>
@@ -887,10 +887,10 @@ dependencies = [
 ]

 [package.optional-dependencies]
-mysql = [
-    { name = "asyncmy" },
 hindsight = [
    { name = "hindsight-client" },
+mysql = [
+    { name = "asyncmy" },
 ]
 ollama = [
    { name = "langchain-ollama" },
@@ -949,9 +949,7 @@ requires-dist = [
    { name = "tiktoken", specifier = ">=0.8.0" },
 ]
 provides-extras = ["hindsight", "ollama", "postgres", "pymupdf"]
-
 [[package]]
-name = "defusedxml"
 version = "0.7.1"
 source = { registry = "https://pypi.tuna.tsinghua.edu.cn/simple" }
 sdist = { url = "https://pypi.tuna.tsinghua.edu.cn/packages/0f/d5/c66da9b79e5bdb124974bfe172b4daf3c984ebd9c2a06e2b8a4dc7331c72/defusedxml-0.7.1.tar.gz", hash = "sha256:1bb3032db185915b62d7c6209c5a8792be6a32ab2fedacc84e01b52c51aa3e69" }