Merge branch 'main' into rayhpeng/hexagonal-feedback-slice

2026-07-28 17:06:05 +00:00 · 2026-07-27 11:22:31 +08:00 · 2026-07-27 11:22:31 +08:00 · 5686e551f8
commit 5686e551f8
parent 551865abcf 26ba0b9e6a
2 changed files with 914 additions and 5 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@ -90,6 +90,18 @@ This section accumulates work toward the **2.1.0** milestone
 - **gateway:** Cache-aware cost accounting attributes token costs to cached vs.
  uncached paths; a Redis stream bridge enables distributed event streaming; and
  manual context compaction is exposed to the user. ([#3920], [#3191], [#3969])
+- **runtime:** Dual-mode checkpoint storage with LangGraph `DeltaChannel` cuts
+  thread storage from O(N²) to near-linear for long research/coding runs.
+  ([#4292])
+- **agent:** Config-declared lead-agent middlewares let deployments add custom
+  `AgentMiddleware` classes without patching the runtime chain. ([#3964])
+- **agents:** Per-agent model and generation settings (`temperature`,
+  `max_tokens`, `thinking_enabled`, `reasoning_effort`) override the shared
+  model profile. ([#4347])
+- **runtime:** Record terminal artifact-delivery receipts so runs expected to
+  `present_files` no longer report success when delivery fails. ([#4365])
+- **uploads:** Lazy-load historical files via a `list_uploaded_files` tool
+  instead of injecting the full manifest. ([#4174])

 #### Memory

@ -98,6 +110,15 @@ This section accumulates work toward the **2.1.0** milestone
  `expected_valid_days` / `staleFactsToExtend`. ([#3996], [#3860], [#4143])
 - **memory:** Guaranteed injection of correction facts (with graceful fallback)
  so user corrections always reach the model. ([#3592])
+- **memory:** Slim the pluggable `MemoryManager` interface for backend
+  onboarding - new backends no longer implement unused abstract methods, and
+  DeerMem-specific hook injection moves out of the shared factory. ([#4326])
+- **memory:** Incremental agent-scoped Markdown fact storage isolates per-agent
+  facts and updates a single fact without rewriting or reindexing the whole
+  collection. ([#4279])
+- **memory:** Memory message processing adds a conversation watermark,
+  trivial-turn filtering, and a durable queue so extraction no longer re-feeds
+  the full conversation every turn. ([#4447])

 #### Skills

@ -115,6 +136,12 @@ This section accumulates work toward the **2.1.0** milestone
  [#3866])
 - **mcp:** Per-server `tool_call_timeout` for MCP tool calls, and routing hints
  that guide the model to the right server. ([#3843], [#4004])
+- **community:** Agentic browser control as a first-class thread capability -
+  Playwright-backed browser sessions the agent operates while the user observes
+  or takes over from the workspace. ([#4187])
+- **community:** Lark/Feishu CLI integration bundles the runtime install, the
+  official `lark-*` skill pack, and an interactive auth flow so the integration
+  is no longer environment-dependent. ([#3971])

 #### Channels

@ -128,6 +155,14 @@ This section accumulates work toward the **2.1.0** milestone
 - **auth:** Generic OIDC/SSO authentication with Keycloak support. ([#3506])
 - **guardrails:** Authenticated runtime context is exposed in `GuardrailRequest`,
  and security interventions are persisted as run events. ([#3665], [#3837])
+- **auth:** "Keep me signed in" login option with a centralized session-cookie
+  policy (persistent `Secure` cookies on HTTPS, session cookies on public HTTP).
+  ([#4255])
+- **auth:** Deployments can close local self-registration to restrict new
+  accounts to SSO/OIDC provisioning. ([#4311])
+- **authz:** Built-in RBAC authorization provider with a unified factory, plus
+  tool-authorization enforcement at both assembly (tools removed before the
+  model sees them) and runtime (denied calls blocked). ([#4260], [#4370])

 #### Sandbox & provisioner

@ -149,6 +184,10 @@ This section accumulates work toward the **2.1.0** milestone
  ([#4036], [#3718], [#3986], [#3627])
 - **frontend:** Feature-gate the agents UI behind the `agents_api` flag, and
  persist AI turn duration in backend and UI. ([#3769], [#3663])
+- **frontend:** Render slash-skill activations as inline chips. ([#3981])
+- **frontend:** Localized AI-assistance disclaimer. ([#4374])
+- **frontend:** Pin recent chats. ([#4442])
+- **frontend:** Validate `/goal` objective length in the composer. ([#4337])

 #### Observability & tooling

@ -160,6 +199,7 @@ This section accumulates work toward the **2.1.0** milestone
 - **setup:** The setup wizard now asks whether OpenAI-compatible gateway models
  support thinking, and a Volcengine Coding Plan quick-setup path was added.
  ([#3428], [#4141])
+- **tui:** `clear` command. ([#4306])

 ### Changed

@ -204,7 +244,7 @@ This section accumulates work toward the **2.1.0** milestone
  ([#4450])
 - **runtime:** Re-check orphan candidates through an atomic, lease-aware takeover
  claim so a successful heartbeat after the scan keeps the run active and only
-  one reconciler reports recovery. ([#4424])
+  one reconciler reports recovery. ([#4424], [#4434])
 - **skills:** Apply `allowed-tools` only to slash-activated or actually loaded
  lead-agent skills, preventing passive enabled skills and evaluation fixtures
  from removing MCP, web, file, and delegation tools from every run. ([#4095],
@ -256,7 +296,7 @@ This section accumulates work toward the **2.1.0** milestone
  takeover for multi-worker; keep `create_thread` idempotent when the insert
  loses a race; read `stop_reason` from runtime context; and persist run duration
  in checkpoints for history reads. ([#4003], [#4064], [#4414], [#3800], [#4188],
-  [#4118])
+  [#4118], [#4431])
 - **runtime:** Serialize SQLite event-store writes to prevent per-thread
  sequence collisions; skip hidden human messages in the journal; and drop the
  silent delta-discard in `_merge_stream_text`. ([#4077], [#3698], [#4085])
@ -346,6 +386,93 @@ This section accumulates work toward the **2.1.0** milestone
 - **circuit-breaker:** Stop wedging after a non-retriable half-open probe. ([#3991])
 - **github:** Match `allow_authors` logins case-insensitively. ([#4218])
 - **community:** `image_search` now returns the full-resolution image URL. ([#3990])
+- **skills:** Offload blocking filesystem IO in the skill-history endpoint.
+  ([#3563])
+- **skills:** Don't treat a lazily evaluated PEP 695 type alias as a network
+  sink in SkillScan. ([#4315])
+- **tracing:** Resolve the Langfuse trace user from runtime context. ([#3794])
+- **guardrails:** Propagate internal owner attribution into the guardrail
+  context. ([#3839])
+- **subagents:** Clamp the subagent limit consistently with
+  `MIN_SUBAGENT_LIMIT`. ([#4081])
+- **subagents:** Load user-scoped skills. ([#4356])
+- **mcp:** Per-server fail-soft OAuth priming, and persist rotated refresh
+  tokens. ([#4084])
+- **mcp:** Ignore malformed path-like text. ([#4456])
+- **auth:** Resolve email accounts case-insensitively. ([#4101])
+- **auth:** Recover from setup-status timeouts. ([#4371])
+- **scheduler:** Close a dispatch race that could launch two runs for one
+  scheduled task. ([#4105])
+- **channels:** Buffer and drain GitHub comments queued during a busy run.
+  ([#4133])
+- **channels:** Escape Slack reserved characters before mrkdwn conversion.
+  ([#4197])
+- **channels:** Check `response.success()` on Feishu card/reaction SDK calls.
+  ([#4234])
+- **channels:** Drop inbound DingTalk messages that carry no conversation
+  identity. ([#4316])
+- **channels:** Receive inbound Telegram attachments. ([#4392])
+- **memory:** Consolidated facts inherit `expected_valid_days` from their
+  sources. ([#4225])
+- **config:** Sync `_memory_config` with AppConfig auto-reload. ([#4208])
+- **postgres:** Harden the async engine with `pool_recycle` and
+  `command_timeout` to stop stale-connection 504s. ([#4230])
+- **harness:** Add a timeout to `invoke_acp_agent` to prevent indefinite hangs.
+  ([#4238])
+- **community:** Surface the target-page error status in `web_fetch`
+  (Browserless). ([#4239])
+- **sandbox:** Widen the BoxLite/AIO tenant hash and verify identity on reclaim.
+  ([#4171])
+- **sandbox:** Make an empty `old_str` a no-op in `str_replace` on any file.
+  ([#4256])
+- **sandbox:** Serialize E2B release transitions. ([#4355])
+- **sandbox:** Bound E2B output-synchronization resources. ([#4364])
+- **sandbox:** Unwrap `Overwrite`-wrapped sandbox state in `after_agent`.
+  ([#4381])
+- **sandbox:** Bypass proxies for local AIO traffic. ([#4444])
+- **models:** Surface length-capped model responses instead of dropping them.
+  ([#4309])
+- **streaming:** Keep large file generation responsive. ([#4354])
+- **streaming:** Expose custom events to `astream_events`. ([#4403])
+- **streaming:** Signal replay history gaps. ([#4426])
+- **summarization:** Summarize with the run model and fall back on
+  summary-provider failure. ([#4361])
+- **runtime:** Remove transient image context after model calls. ([#4267])
+- **runtime:** Stop subgraph stream frames from impersonating root frames.
+  ([#4407])
+- **runtime:** Reject unsupported run options and stream modes. ([#4430])
+- **runtime:** Serialize checkpoint writes with active runs, linearize
+  delta-mode checkpoint resume, and accept the SDK's default
+  `stream_resumable=false` to avoid resume races. ([#4437], [#4460], [#4468])
+- **checkpoint:** Unwrap `Overwrite` first writes into empty channels. ([#4383])
+- **nginx:** Allow long chat prompts through `/api/langgraph/` without a raw
+  500. ([#4277])
+- **gateway:** Prefer `X-Trace-Id` over `metadata.deerflow_trace_id` when the
+  header is set. ([#4283])
+- **gateway:** Seed branch run-events so inherited history survives forking.
+  ([#4385])
+- **gateway:** Scope branch-history seed run ids per inherited turn. ([#4459])
+- **frontend:** Harden artifact and markdown rendering. ([#4117])
+- **frontend:** Classify a symlink replacing a file distinctly from deleted in
+  workspace-change review. ([#4170])
+- **frontend:** Offload blocking filesystem IO in the workspace-change
+  text-cache lifecycle. ([#4268])
+- **frontend:** Encode artifact URL path segments. ([#4278])
+- **frontend:** Clarify run-duration display. ([#4348])
+- **frontend:** Preserve regenerate state in branched threads. ([#4358])
+- **frontend:** Default the reasoning-effort label to Medium when unset.
+  ([#4373])
+- **frontend:** Strip and parse the `<current_uploads>` upload-context tag.
+  ([#4402])
+- **frontend:** Keep leading orphan tool messages visible. ([#4408])
+- **frontend:** Keep completed subtask cards stable after reload. ([#4432])
+- **frontend:** Apply message-image `maxWidth` via inline style. ([#4446])
+- **frontend:** Restore resizing for the artifacts and sidecar panels. ([#4469])
+- **frontend:** Allow dev-server access from non-localhost hosts. ([#4471])
+- **safety:** Backfill empty content-filter responses so they don't poison the
+  thread. ([#4394])
+- **tools:** Exclude injected runtime from the `list_uploaded_files` schema.
+  ([#4376])

 ### Performance

@ -356,6 +483,11 @@ This section accumulates work toward the **2.1.0** milestone
 - **sandbox:** Cache `LocalSandbox` path-rewrite regexes and local-path masking
  patterns per instance instead of recompiling per search match. ([#3648],
  [#3713])
+- **messages:** Index tool-call results per group. ([#4411])
+- **frontend:** Coalesce streaming renders to a frame budget instead of per
+  chunk. ([#4425])
+- **frontend:** Stop re-deriving message content on every stream chunk.
+  ([#4441])

 ### Security

@ -364,10 +496,10 @@ This section accumulates work toward the **2.1.0** milestone
  and system context is injected as a `SystemMessage` for role isolation. ([#3662],
  [#4155], [#3661])
 - **prompt-injection:** HTML-escape untrusted content rendered into model prompts
-  - memory facts and summaries, `SOUL.md`, subagent descriptions, and the
-  conversation block in the memory-update prompt - and neutralize
+  - memory facts and summaries, `SOUL.md`, subagent descriptions, skill metadata,
+  and the conversation block in the memory-update prompt - and neutralize
  prompt-injection tags in `web_capture` tool results. ([#4028], [#4119], [#4137],
-  [#4157], [#4162], [#4099], [#4060])
+  [#4157], [#4162], [#4099], [#4060], [#4097], [#4128])
 - **secrets:** Scrub inherited secret environment variables (`MYSQL_PWD`,
  `REDISCLI_AUTH`, abbreviated `*_PASS`, and Postgres `PGPASSFILE`) from the
  skill environment; request-scoped secrets are bound for both slash-activated
@ -878,6 +1010,7 @@ with **180 merged pull requests** since the first 2.0 milestone tag.
 [#3559]: https://github.com/bytedance/deer-flow/pull/3559
 [#3561]: https://github.com/bytedance/deer-flow/pull/3561
 [#3562]: https://github.com/bytedance/deer-flow/pull/3562
+[#3563]: https://github.com/bytedance/deer-flow/pull/3563
 [#3566]: https://github.com/bytedance/deer-flow/pull/3566
 [#3569]: https://github.com/bytedance/deer-flow/pull/3569
 [#3570]: https://github.com/bytedance/deer-flow/pull/3570
@ -950,6 +1083,7 @@ with **180 merged pull requests** since the first 2.0 milestone tag.
 [#3786]: https://github.com/bytedance/deer-flow/pull/3786
 [#3790]: https://github.com/bytedance/deer-flow/pull/3790
 [#3791]: https://github.com/bytedance/deer-flow/pull/3791
+[#3794]: https://github.com/bytedance/deer-flow/pull/3794
 [#3797]: https://github.com/bytedance/deer-flow/pull/3797
 [#3800]: https://github.com/bytedance/deer-flow/pull/3800
 [#3809]: https://github.com/bytedance/deer-flow/pull/3809
@ -959,6 +1093,7 @@ with **180 merged pull requests** since the first 2.0 milestone tag.
 [#3826]: https://github.com/bytedance/deer-flow/pull/3826
 [#3828]: https://github.com/bytedance/deer-flow/pull/3828
 [#3837]: https://github.com/bytedance/deer-flow/pull/3837
+[#3839]: https://github.com/bytedance/deer-flow/pull/3839
 [#3843]: https://github.com/bytedance/deer-flow/pull/3843
 [#3845]: https://github.com/bytedance/deer-flow/pull/3845
 [#3854]: https://github.com/bytedance/deer-flow/pull/3854
@ -1010,11 +1145,14 @@ with **180 merged pull requests** since the first 2.0 milestone tag.
 [#3956]: https://github.com/bytedance/deer-flow/pull/3956
 [#3959]: https://github.com/bytedance/deer-flow/pull/3959
 [#3961]: https://github.com/bytedance/deer-flow/pull/3961
+[#3964]: https://github.com/bytedance/deer-flow/pull/3964
 [#3966]: https://github.com/bytedance/deer-flow/pull/3966
 [#3967]: https://github.com/bytedance/deer-flow/pull/3967
 [#3969]: https://github.com/bytedance/deer-flow/pull/3969
+[#3971]: https://github.com/bytedance/deer-flow/pull/3971
 [#3976]: https://github.com/bytedance/deer-flow/pull/3976
 [#3980]: https://github.com/bytedance/deer-flow/pull/3980
+[#3981]: https://github.com/bytedance/deer-flow/pull/3981
 [#3982]: https://github.com/bytedance/deer-flow/pull/3982
 [#3985]: https://github.com/bytedance/deer-flow/pull/3985
 [#3986]: https://github.com/bytedance/deer-flow/pull/3986
@ -1063,28 +1201,36 @@ with **180 merged pull requests** since the first 2.0 milestone tag.
 [#4078]: https://github.com/bytedance/deer-flow/pull/4078
 [#4079]: https://github.com/bytedance/deer-flow/pull/4079
 [#4080]: https://github.com/bytedance/deer-flow/pull/4080
+[#4081]: https://github.com/bytedance/deer-flow/pull/4081
 [#4082]: https://github.com/bytedance/deer-flow/pull/4082
+[#4084]: https://github.com/bytedance/deer-flow/pull/4084
 [#4085]: https://github.com/bytedance/deer-flow/pull/4085
 [#4090]: https://github.com/bytedance/deer-flow/pull/4090
 [#4094]: https://github.com/bytedance/deer-flow/pull/4094
 [#4095]: https://github.com/bytedance/deer-flow/issues/4095
 [#4096]: https://github.com/bytedance/deer-flow/pull/4096
+[#4097]: https://github.com/bytedance/deer-flow/pull/4097
 [#4098]: https://github.com/bytedance/deer-flow/pull/4098
 [#4099]: https://github.com/bytedance/deer-flow/pull/4099
 [#4100]: https://github.com/bytedance/deer-flow/pull/4100
+[#4101]: https://github.com/bytedance/deer-flow/pull/4101
 [#4102]: https://github.com/bytedance/deer-flow/pull/4102
 [#4103]: https://github.com/bytedance/deer-flow/pull/4103
 [#4104]: https://github.com/bytedance/deer-flow/pull/4104
+[#4105]: https://github.com/bytedance/deer-flow/pull/4105
 [#4108]: https://github.com/bytedance/deer-flow/pull/4108
 [#4114]: https://github.com/bytedance/deer-flow/pull/4114
 [#4115]: https://github.com/bytedance/deer-flow/pull/4115
+[#4117]: https://github.com/bytedance/deer-flow/pull/4117
 [#4118]: https://github.com/bytedance/deer-flow/pull/4118
 [#4119]: https://github.com/bytedance/deer-flow/pull/4119
 [#4122]: https://github.com/bytedance/deer-flow/pull/4122
 [#4124]: https://github.com/bytedance/deer-flow/pull/4124
+[#4128]: https://github.com/bytedance/deer-flow/pull/4128
 [#4129]: https://github.com/bytedance/deer-flow/pull/4129
 [#4130]: https://github.com/bytedance/deer-flow/pull/4130
 [#4131]: https://github.com/bytedance/deer-flow/pull/4131
+[#4133]: https://github.com/bytedance/deer-flow/pull/4133
 [#4136]: https://github.com/bytedance/deer-flow/pull/4136
 [#4137]: https://github.com/bytedance/deer-flow/pull/4137
 [#4140]: https://github.com/bytedance/deer-flow/pull/4140
@ -1100,28 +1246,100 @@ with **180 merged pull requests** since the first 2.0 milestone tag.
 [#4162]: https://github.com/bytedance/deer-flow/pull/4162
 [#4166]: https://github.com/bytedance/deer-flow/pull/4166
 [#4169]: https://github.com/bytedance/deer-flow/pull/4169
+[#4170]: https://github.com/bytedance/deer-flow/pull/4170
+[#4171]: https://github.com/bytedance/deer-flow/pull/4171
+[#4174]: https://github.com/bytedance/deer-flow/pull/4174
 [#4181]: https://github.com/bytedance/deer-flow/pull/4181
+[#4187]: https://github.com/bytedance/deer-flow/pull/4187
 [#4188]: https://github.com/bytedance/deer-flow/pull/4188
 [#4190]: https://github.com/bytedance/deer-flow/pull/4190
 [#4192]: https://github.com/bytedance/deer-flow/issues/4192
 [#4193]: https://github.com/bytedance/deer-flow/pull/4193
+[#4197]: https://github.com/bytedance/deer-flow/pull/4197
 [#4199]: https://github.com/bytedance/deer-flow/pull/4199
 [#4202]: https://github.com/bytedance/deer-flow/pull/4202
 [#4203]: https://github.com/bytedance/deer-flow/pull/4203
+[#4208]: https://github.com/bytedance/deer-flow/pull/4208
 [#4209]: https://github.com/bytedance/deer-flow/pull/4209
 [#4215]: https://github.com/bytedance/deer-flow/pull/4215
 [#4217]: https://github.com/bytedance/deer-flow/pull/4217
 [#4218]: https://github.com/bytedance/deer-flow/pull/4218
 [#4219]: https://github.com/bytedance/deer-flow/pull/4219
 [#4222]: https://github.com/bytedance/deer-flow/pull/4222
+[#4225]: https://github.com/bytedance/deer-flow/pull/4225
 [#4229]: https://github.com/bytedance/deer-flow/pull/4229
+[#4230]: https://github.com/bytedance/deer-flow/pull/4230
+[#4234]: https://github.com/bytedance/deer-flow/pull/4234
 [#4235]: https://github.com/bytedance/deer-flow/pull/4235
+[#4238]: https://github.com/bytedance/deer-flow/pull/4238
+[#4239]: https://github.com/bytedance/deer-flow/pull/4239
 [#4245]: https://github.com/bytedance/deer-flow/pull/4245
 [#4246]: https://github.com/bytedance/deer-flow/pull/4246
 [#4251]: https://github.com/bytedance/deer-flow/pull/4251
+[#4255]: https://github.com/bytedance/deer-flow/pull/4255
+[#4256]: https://github.com/bytedance/deer-flow/pull/4256
+[#4260]: https://github.com/bytedance/deer-flow/pull/4260
 [#4264]: https://github.com/bytedance/deer-flow/pull/4264
+[#4267]: https://github.com/bytedance/deer-flow/pull/4267
+[#4268]: https://github.com/bytedance/deer-flow/pull/4268
+[#4277]: https://github.com/bytedance/deer-flow/pull/4277
+[#4278]: https://github.com/bytedance/deer-flow/pull/4278
+[#4279]: https://github.com/bytedance/deer-flow/pull/4279
+[#4283]: https://github.com/bytedance/deer-flow/pull/4283
 [#4287]: https://github.com/bytedance/deer-flow/pull/4287
 [#4288]: https://github.com/bytedance/deer-flow/pull/4288
+[#4292]: https://github.com/bytedance/deer-flow/pull/4292
+[#4306]: https://github.com/bytedance/deer-flow/pull/4306
+[#4309]: https://github.com/bytedance/deer-flow/pull/4309
+[#4311]: https://github.com/bytedance/deer-flow/pull/4311
+[#4315]: https://github.com/bytedance/deer-flow/pull/4315
+[#4316]: https://github.com/bytedance/deer-flow/pull/4316
 [#4324]: https://github.com/bytedance/deer-flow/issues/4324
+[#4326]: https://github.com/bytedance/deer-flow/pull/4326
+[#4337]: https://github.com/bytedance/deer-flow/pull/4337
+[#4347]: https://github.com/bytedance/deer-flow/pull/4347
+[#4348]: https://github.com/bytedance/deer-flow/pull/4348
+[#4354]: https://github.com/bytedance/deer-flow/pull/4354
+[#4355]: https://github.com/bytedance/deer-flow/pull/4355
+[#4356]: https://github.com/bytedance/deer-flow/pull/4356
+[#4358]: https://github.com/bytedance/deer-flow/pull/4358
+[#4361]: https://github.com/bytedance/deer-flow/pull/4361
+[#4364]: https://github.com/bytedance/deer-flow/pull/4364
+[#4365]: https://github.com/bytedance/deer-flow/pull/4365
+[#4370]: https://github.com/bytedance/deer-flow/pull/4370
+[#4371]: https://github.com/bytedance/deer-flow/pull/4371
+[#4373]: https://github.com/bytedance/deer-flow/pull/4373
+[#4374]: https://github.com/bytedance/deer-flow/pull/4374
+[#4376]: https://github.com/bytedance/deer-flow/pull/4376
+[#4381]: https://github.com/bytedance/deer-flow/pull/4381
+[#4383]: https://github.com/bytedance/deer-flow/pull/4383
+[#4385]: https://github.com/bytedance/deer-flow/pull/4385
+[#4391]: https://github.com/bytedance/deer-flow/pull/4391
+[#4392]: https://github.com/bytedance/deer-flow/pull/4392
+[#4394]: https://github.com/bytedance/deer-flow/pull/4394
+[#4402]: https://github.com/bytedance/deer-flow/pull/4402
+[#4403]: https://github.com/bytedance/deer-flow/pull/4403
+[#4407]: https://github.com/bytedance/deer-flow/pull/4407
+[#4408]: https://github.com/bytedance/deer-flow/pull/4408
+[#4411]: https://github.com/bytedance/deer-flow/pull/4411
 [#4414]: https://github.com/bytedance/deer-flow/issues/4414
 [#4424]: https://github.com/bytedance/deer-flow/issues/4424
+[#4425]: https://github.com/bytedance/deer-flow/pull/4425
+[#4426]: https://github.com/bytedance/deer-flow/pull/4426
+[#4430]: https://github.com/bytedance/deer-flow/pull/4430
+[#4431]: https://github.com/bytedance/deer-flow/pull/4431
+[#4432]: https://github.com/bytedance/deer-flow/pull/4432
+[#4434]: https://github.com/bytedance/deer-flow/pull/4434
+[#4437]: https://github.com/bytedance/deer-flow/pull/4437
+[#4441]: https://github.com/bytedance/deer-flow/pull/4441
+[#4442]: https://github.com/bytedance/deer-flow/pull/4442
+[#4444]: https://github.com/bytedance/deer-flow/pull/4444
+[#4446]: https://github.com/bytedance/deer-flow/pull/4446
+[#4447]: https://github.com/bytedance/deer-flow/pull/4447
+[#4450]: https://github.com/bytedance/deer-flow/pull/4450
+[#4456]: https://github.com/bytedance/deer-flow/pull/4456
+[#4459]: https://github.com/bytedance/deer-flow/pull/4459
+[#4460]: https://github.com/bytedance/deer-flow/pull/4460
+[#4468]: https://github.com/bytedance/deer-flow/pull/4468
+[#4469]: https://github.com/bytedance/deer-flow/pull/4469
+[#4471]: https://github.com/bytedance/deer-flow/pull/4471
--- a/CHANGELOG_zh.md
+++ b/CHANGELOG_zh.md
@ -7,6 +7,382 @@

 [English](./CHANGELOG.md) | 中文

+## [未发布]
+
+本节累积面向 **2.1.0** 里程碑（[里程碑 2](https://github.com/bytedance/deer-flow/milestone/2)）的工作。
+
+### ⚠ 不兼容变更（Breaking Changes）
+
+- **沙箱：** E2B 现在将 `sandbox.replicas` 作为进程级容量上限来强制执行。默认的
+  `wait` 策略会等待 `acquire_timeout`，随后令当前智能体回合失败。DeerFlow 不会自
+  动重试该回合。可使用 `burst` 配合 `burst_limit` 允许有限地超出额度多开 VM。`reject`
+  策略可在返回容量错误前先回收一个预热 VM。([#4391])
+- **技能：** 包含 `SKILL.md` 的目录现在是一个运行时包边界。该包内嵌套的 `SKILL.md`
+  文件被视为支撑数据，不再注册为独立技能；若自定义目录结构较为特殊，需将可独立加
+  载的技能移到不带自身 `SKILL.md` 的命名空间目录下。([#4098])
+- **记忆：** 记忆系统现已可插拔（`memory.manager_class` 选择后端；默认 `deermem`
+  自包含）。DeerMem 私有配置从 `memory:` 顶层移入 `memory.backend_config`，`/memory/config`
+  响应（以及 `client.get_memory_config()`）的结构也发生了变化。([#4122])
+- **记忆：** `/memory/config` 与 `client.get_memory_config()` 不再返回扁平的 DeerMem
+  字段（`storage_path`、`max_facts`、`debounce_seconds`、`token_counting`、`guaranteed_*`
+  、`staleness_*` 等）。改为返回 `{enabled, mode, injection_enabled, manager_class,
+  backend_config}`，其中 `backend_config` 是一个由当前后端自行解释的不透明 dict
+  。记忆*数据*响应（`/memory`、`/memory/status` 的 data）未变。读取旧扁平字段的
+  外部 API / SDK 客户端需改为读取 `backend_config`。([#4122])
+- **记忆：** 自定义 `memory.storage_class` 发生迁移：旧的默认路径 `deerflow.agents.memory.storage.FileMemoryStorage`
+  已不存在（现为 `deerflow.agents.memory.backends.deermem.deermem.core.storage.FileMemoryStorage`
+  ）。自定义 `MemoryStorage` 子类的 `__init__` 必须接受 `config`（此前为无参）。
+  损坏或过期的 `storage_class` 会记录错误并回退到 `FileMemoryStorage`（不会崩溃
+  ）——请更新路径与签名以恢复使用。([#4122])
+- **记忆：** `storage_path` 的语义由“文件路径”改为“根目录”。抽象化之前，绝对 `storage_path`
+  是共享的记忆文件（不按用户隔离），相对值则是 data base_dir 下的全局文件。现在
+  `storage_path`（无论绝对或相对）都是根目录；按用户的记忆存放在 `{storage_path}/users/{uid}/memory.json`
+  。若升级后仍保留旧的默认 `storage_path: memory.json`（一个相对文件名），会导致
+  按用户的记忆孤立，或在保存时触发 `NotADirectoryError`。因此旧版迁移会**带告警
+  丢弃以 `.json` 结尾的文件式 `storage_path` 值**，且当 `storage_path` 解析到一
+  个已存在的文件时工厂会**抛出异常**。如需自定义根目录，请将 `memory.backend_config.storage_path`
+  设置为一个目录。([#4122])
+- **记忆：** 当 `memory.mode: tool` 搭配一个未实现 `search()` 的后端时，现在会在
+  Gateway 启动时由 `MemoryManager` 的不变量校验快速失败并抛出 `ValueError`，而不
+  是启动成功后在每次 `memory_search` 调用时静默返回空结果。两个内置后端都实现了
+  `search()`（DeerMem 会检索，`noop` 返回 `[]`），因此仅影响未覆盖 `search()` 就
+  接入的自定义后端。这是有意为之——静默返回空比启动期报错更糟。修复方式：切换到 `mode:
+  middleware`，或覆盖 `search()`（并设置 `supports_search=True`）。([#4324])
+
+### 新增
+
+#### 智能体与运行时
+- **中间件：** 新增 `TokenBudgetMiddleware`，强制单个 run 的 token 预算，在主智
+  能体与子智能体之间累加共享。([#3412])
+- **中间件：** 结构化的工具结果元数据与工具进度状态机，让运行时对多步工具流拥有
+  一等可见性。([#3601])
+- **上下文：** 每个 run 记录生效的记忆身份，并在摘要过程中持久化持久上下文（系统
+  消息、记忆与工具状态），以结构化运行时元数据的形式发出，压缩（compaction）不再
+  丢失这些信息。([#3556]、[#3887]、[#3906])
+- **运行时：** 目标延续（goal continuation）允许 run 跨多个智能体回合朝目标继续
+  执行，并跟踪、限制 `continuation_count`。([#3858])
+- **子智能体：** 系统维护的委派账本（delegation ledger）防止对在途任务重复委派，
+  并设总委派上限以约束单个 run 的扇出。([#3877]、[#4115])
+- **子智能体：** 在会话中持久化并展示子智能体的步骤历史。([#3845])
+- **工具：** 结构化摘要取代预览中原始的超大工具输出。([#3377])
+- **文件：** 文件工具引入确定性的“写前读”版本门控，避免覆盖并发编辑。([#3912])
+- **网关：** 感知缓存的成本核算将 token 成本归因到缓存 / 未缓存路径；Redis stream
+  桥接启用分布式事件流；并向用户暴露手动上下文压缩。([#3920]、[#3191]、[#3969])
+- **运行时：** 双模式 checkpoint 存储（基于 LangGraph `DeltaChannel`）将长调研 /
+  编码 run 的会话存储从 O(N²) 降至近线性。([#4292])
+- **智能体：** 配置声明的主智能体中间件，让部署方无需修改运行时链即可加入自定义
+  `AgentMiddleware` 类。([#3964])
+- **智能体：** 按智能体的模型与生成设置（`temperature`、`max_tokens`、`thinking_enabled`
+  、`reasoning_effort`）可覆盖共享的模型 profile。([#4347])
+- **运行时：** 记录终态的 artifact 投递回执，使预期要 `present_files` 的 run 在
+  投递失败时不再误报成功。([#4365])
+- **上传：** 通过 `list_uploaded_files` 工具懒加载历史文件，而非注入完整清单。([#4174])
+
+#### 记忆
+- **记忆：** 记忆合并（consolidation）合成碎片化的事实，并通过 LLM 为每条事实分
+  配的 `expected_valid_days` / `staleFactsToExtend` 进行过期审查，剪除静默过期的
+  事实。([#3996]、[#3860]、[#4143])
+- **记忆：** 保证注入纠正事实（并优雅降级），使用户的纠正始终能触达模型。([#3592])
+- **记忆：** 精简可插拔的 `MemoryManager` 接口以方便后端接入——新后端不再需要实现
+  未被调用的抽象方法，DeerMem 专有的 hook 注入也移出共享工厂。([#4326])
+- **记忆：** 增量式按智能体作用域的 Markdown 事实存储，按智能体隔离事实，且更新
+  单条事实时无需重写或重建整个集合的索引。([#4279])
+- **记忆：** 记忆消息处理新增会话水位（watermark）、无意义回合过滤与持久化队列，
+  使抽取不再每回合都重新喂入完整会话。([#4447])
+
+#### 技能
+- **技能：** 原生 SkillScan（阶段一）在加载时静态分析技能包；`describe_skill` 支
+  持延迟发现，模型按需获取技能 schema，而非一开始就加载全部技能。([#3033]、[#3775])
+- **技能：** 按用户的自定义技能隔离，并配合沙箱挂载。([#3889])
+
+#### 模型与集成
+- **社区工具：** 新增网络检索 / 抓取引擎——GroundRoute、Crawl4AI（`web_fetch`）与
+  fastCRW provider——并新增 Browserless `web_capture` 截图工具和 Brave `image_search`
+  。([#3675]、[#3821]、[#3585]、[#3881]、[#3866])
+- **MCP：** MCP 工具调用支持按 server 的 `tool_call_timeout`，并提供路由提示引导
+  模型选用正确的 server。([#3843]、[#4004])
+- **社区工具：** 将“智能体化浏览器控制”作为会话的一等能力——基于 Playwright 的浏
+  览器会话由智能体操作，用户可在工作区中观察或接管。([#4187])
+- **社区工具：** Lark / 飞书 CLI 集成打包了运行时安装、官方 `lark-*` 技能包与交
+  互式授权流程，使该集成不再依赖手动环境配置。([#3971])
+
+#### 渠道
+- **渠道：** 把 IM 的 `channel_user_id` 以 `DEERFLOW_CHANNEL_USER_ID` 暴露给沙箱
+  命令。([#3926])
+- **渠道：** 对同一会话的密集消息进行排队，并在批次间保留话题卡片预览。([#3988])
+
+#### 认证与防护
+- **认证：** 通用 OIDC / SSO 认证，并支持 Keycloak。([#3506])
+- **护栏：** 已认证的运行时上下文在 `GuardrailRequest` 中暴露，安全干预以 run 事
+  件的形式持久化。([#3665]、[#3837])
+- **认证：** “保持登录”选项，配合统一的会话 cookie 策略（HTTPS 下使用持久化 `Secure`
+  cookie，公网 HTTP 下使用会话 cookie）。([#4255])
+- **认证：** 部署方可关闭本地自注册，将新账号限制为仅通过 SSO / OIDC 开通。([#4311])
+- **鉴权：** 内置 RBAC 鉴权 provider 与统一工厂，并在装配期（模型可见前移除工具
+  ）与运行期（拒绝被禁用的调用）双重强制执行工具鉴权。([#4260]、[#4370])
+
+#### 沙箱与 provisioner
+- **沙箱：** 新增 E2B 与 BoxLite（micro-VM）沙箱 provider；BoxLite 自带预热池。([#3883]
+  、[#3940]、[#3951])
+- **provisioner：** ClusterIP Service 与按技能作用域的 PVC 挂载，并支持配置沙箱
+  容器端口。([#4016]、[#3928])
+
+#### 前端
+- **前端：** 支持对助手回合进行分支，以及针对引用追问的侧边对话。([#3950]、[#3934])
+- **前端：** 支持重新生成最新回答。([#3637])
+- **前端：** 引用来源证据面板、智能体 run 的工作区变更评审，以及可视化的 `ask_clarification`
+  卡片。([#3907]、[#3945]、[#3956])
+- **前端：** 语音输入、方向键回溯 prompt 历史、输入框内容润色，以及“（思考了 N
+  秒）”思考时长标签。([#4036]、[#3718]、[#3986]、[#3627])
+- **前端：** 用 `agents_api` 特性开关控制智能体 UI 的可见性，并在后端与 UI 中持
+  久化 AI 回合时长。([#3769]、[#3663])
+- **前端：** 将斜杠技能（slash-skill）激活渲染为内联标签（chip）。([#3981])
+- **前端：** 本地化的 AI 辅助声明。([#4374])
+- **前端：** 支持置顶最近会话。([#4442])
+- **前端：** 在输入框中校验 `/goal` 目标长度。([#4337])
+
+#### 可观测性与工具
+- **可观测性：** trace-id 关联与增强日志，以及通过 Monocle 实现的智能体可观测性
+  。([#3902]、[#4024])
+- **工具：** 类 Hermes 的终端工作台（`deerflow` CLI，基于 `DeerFlowClient`），以
+  及脱敏的社区支持包（support-bundle）生成器。([#3760]、[#3886])
+- **安装向导：** 安装向导现在会询问 OpenAI 兼容的 gateway 模型是否支持 thinking
+  ，并新增火山引擎 Coding Plan 快速安装路径。([#3428]、[#4141])
+- **TUI：** `clear` 命令。([#4306])
+
+### 变更
+
+- **沙箱：** Helm chart 现在默认将每个沙箱的 Service 设为 `ClusterIP` 而非 `NodePort`
+  ，因此代码执行沙箱只能通过集群内 Service DNS（`http://sandbox-<id>-svc.<ns>.svc.cluster.local`
+  ）访问，不再绑定到每个节点（包括 GKE / EKS / AKS 上外部可达的）网卡。升级时现
+  有 chart 安装会从 NodePort 切到 ClusterIP。如需保留原有可达性（外部探测命中 30xxx
+  端口，或 gateway 不在 K8s 的 Docker-Compose / 混合部署路径），请设置 `provisioner.sandboxServiceType:
+  NodePort`（必要时配合 `provisioner.nodeHost`）。provisioner 本身不变（自 #4016
+  起已按模式感知）。([#4190])
+- **技能：** 处于激活态的限制型技能若要委派给子智能体，必须在 `allowed-tools` 中
+  显式声明 `task`。只读发现基础设施（`tool_search` 与 `describe_skill`）仍可用，
+  但无法为被禁用的业务工具授予 schema 可见性或执行权限。([#4098])
+- **记忆：** 抽象化之前位于顶层的 `memory.*` DeerMem 字段（`storage_path`、`max_facts`
+  、`debounce_seconds`、`model_name`、`token_counting`、`staleness_*`、`consolidation_*`
+  等）在加载时会**带告警自动迁移到 `backend_config`**，因此升级不会静默地把自定
+  义配置回退为默认值（`model_name` -> `backend_config.model.model`）。将它们移到
+  `config.yaml` 的 `memory.backend_config` 下即可消除告警。([#4122])
+- **记忆：** 新增 `memory.mode`（`middleware` | `tool`）；`tool` 模式会注册供模
+  型直接调用的记忆工具（`memory_search`/`add`/`update`/`delete`），取代被动的逐
+  回合摘要。`manager_class` 解析改为快速失败（未知后端时抛出 `ValueError`，而非
+  静默回退）。([#4023])
+- **中间件：** 声明式分层中间件构建器；`ThreadData` 现在先于 `Uploads` 运行。([#3809])
+- **沙箱：** 宿主机到虚拟机的输出脱敏正则现在统一归属，消除重复的模式编译。([#4108])
+- **文档：** `AGENTS.md` 成为智能体指引的权威来源，`CLAUDE.md` 通过 `@AGENTS.md`
+  导入；模块指南同步刷新。([#3770])
+
+### 修复
+
+- **运行时：** 会话元数据现在仅在 run 通过启动屏障后才切换为 `running`，待取消的
+  run 不再短暂呈现 `running` 状态；worker 启动期间客户端可能观察到先前的会话状态
+  。([#4450])
+- **运行时：** 通过原子化、感知租约的接管（takeover）claim 重新检查孤儿候选 run
+  ，使扫描后的成功心跳仍保持 run 活跃，且仅有一个 reconciler 上报恢复。([#4424]
+  、[#4434])
+- **技能：** `allowed-tools` 只作用于斜杠激活或实际加载的主智能体技能，避免被动
+  启用的技能与评测 fixture 从每个 run 中移除 MCP、网络、文件与委派工具。([#4095]
+  、[#4098]、[#4192])
+- **模型：** 在所有 `BaseChatOpenAI` 子类（`VllmChatModel`、`MindIEChatModel`、`PatchedChatMiMo`
+  、`PatchedChatStepFun`、`PatchedChatMiniMax`）上生效 `api_base`，而不只是 `ChatOpenAI`
+  / `PatchedChatOpenAI`。此前这五个子类会静默丢弃配置的 endpoint，随后以一个含义
+  不明的 `unexpected keyword argument 'api_base'` 让每次请求都失败；它们也未被纳
+  入未知配置 key 的告警。两者现在都基于 `issubclass(BaseChatOpenAI)` 判断。([#4146])
+- **智能体：** 在 LLM 请求前合并 `SystemMessage`；保证工具运行后仍有可见响应；避
+  免在流结束前发起默认的 LLM 标题调用；为省略号预留空间以使本地标题遵守 `max_chars`
+  ；并将工具输出尾部前移，使回退截断遵守 `max_chars`。([#3711]、[#4033]、[#3885]
+  、[#4052]、[#4017])
+- **智能体：** 动态上下文的日期扫描跳过无日期的提醒；从不含 `config.yaml` 的智能
+  体目录加载 `SOUL.md`；`update_agent` 的旧版智能体守卫要求存在 `config.yaml`；
+  并拒绝空的 `SOUL.md` 更新。([#3685]、[#4136]、[#4166]、[#4219])
+- **中间件：** 为循环检测的工具频次计数器加窗口，避免长 run 误触；阻止标题中间件
+  流式输出 token；修复“同内容列表耗尽时位置回退误取无关 todo”的问题；在 `_apply`
+  、`before_agent`、`_clear_run_state` 与 `_drain_pending_warnings` 之间持有 token
+  预算锁；丢弃孤立的 `ToolMessage` 以免严格型 provider 返回 400；净化非法 tool-call
+  参数；并在 dangling 修复中从空的 tool-call 名称与畸形 tool-call id 恢复。([#4072]
+  、[#3566]、[#3709]、[#3714]、[#4080]、[#4193]、[#4008]、[#4246])
+- **子智能体：** 继承 `LoopDetectionMiddleware` 与摘要中间件，使工具循环能被打断
+  、步骤能被捕获；将回合预算上限以 `MAX_TURNS_REACHED` 暴露并附带部分结果；在累
+  加式 `stop_reason` + `token_budget` 上统一护栏上限；压缩前注入持久上下文；保留
+  父 checkpoint 命名空间；在 general-purpose 系统 prompt 中禁用 `task` 工具；flush
+  失败时重新缓冲子智能体事件以避免丢失步骤；并修复子智能体 `run_id` 为 `None` 时
+  丢失 `loop_capped` 停止原因的问题。([#3931]、[#4009]、[#3949]、[#3980]、[#4040]
+  、[#4215]、[#4161]、[#4082]、[#4059])
+- **记忆：** 加固对 null / 空值边界情况的处理——跳过仅含空白的事实；在更新、检索
+  与剩余三处原始读取中规整 null 的 `confidence` / `source.confidence`；将显式 `null`
+  的 `backend_config` 值视为缺省；修复事实无 id 或事实列表为空时的 `KeyError` /
+  `UnboundLocalError`；停止防抖更新队列的忙等（busy-spin）；并在优雅关闭时刷写记
+  忆队列以防丢失。([#3719]、[#4074]、[#4076]、[#4034]、[#4217]、[#3993]、[#3992]
+  、[#4073]、[#4181])
+- **运行：** 关闭 run 原子性中的多 worker 归属缺口；在租约续期于截止期前无法确认
+  时令本地执行快速失败，并在 peer 接管后对迟到的完成写入加围栏；多 worker 下将 cancel
+  降级为租约接管；让 `create_thread` 在插入竞态时仍幂等；从运行时上下文读取 `stop_reason`
+  ；并将 run 时长持久化到 checkpoint 以供历史读取。([#4003]、[#4064]、[#4414]、[#3800]
+  、[#4188]、[#4118]、[#4431])
+- **运行时：** 序列化 SQLite event-store 写入，避免按会话的序列号冲突；在 journal
+  中跳过隐藏的人类消息；并去掉 `_merge_stream_text` 中静默丢弃 delta 的行为。([#4077]
+  、[#3698]、[#4085])
+- **网关：** 按真实 `event_type` 关联会话消息反馈；把 artifact 服务、gateway 上
+  传与 Discord 渠道中的阻塞文件 IO 移出事件循环；限制上传文件的上下文清单；并实
+  时追踪畸形的 Redis 重连 id。([#3651]、[#3551]、[#3935]、[#3927]、[#3917]、[#4012])
+- **上传：** 在写入前先占位转换后的 Markdown 配套文件名，使同词干（stem）的两个
+  可转换上传（或一个可转换上传加一个同词干 `.md` 上传）不再在同一请求内静默互相
+  覆盖。`uploads.auto_convert_documents` 开启时，配套 `.md` 会得到唯一名称（如 `a_1.md`
+  ）；`POST /threads/{id}/uploads` 与 `DeerFlowClient.upload_files` 都会在 `markdown_file`
+  中返回实际文件名。([#4288])
+- **配置：** 将为 null 的对象型配置节规整为默认值；在 store 与 sync checkpointer
+  中遵循统一数据库配置；并让旧版 DB 回填在已存在的表上补建缺失的 `Index` 对象。([#3573]
+  、[#3904]、[#3994]、[#4090])
+- **模型：** 将 `stream_chunk_timeout` 默认值应用到所有 `BaseChatOpenAI` 子类；
+  并为 `ChatOpenAI` 把 `api_base` 规范化为 `base_url`，遇到未知配置 key 时给出告
+  警。([#4102]、[#3790])
+- **MCP：** 按 server 隔离工具发现失败；同步 session-pool 单例的生命周期；按配置
+  内容 + 路径（而非仅更新的 mtime）失效工具缓存；在加载时校验 MCP 工具名，使延迟
+  prompt 保持惰性；并按来源 server 路由工具，而非按名称前缀。([#3772]、[#3797]、
+  [#4124]、[#4154]、[#3812])
+- **技能：** 斜杠技能每个 run 仅激活一次，而非每次模型调用都激活；补齐技能安装安
+  全扫描的覆盖缺口；在评审 CI 中识别被完全删除的技能包，并在 SkillScan 中把剩余
+  的 `requests` / `httpx` 方法识别为网络出口；在无参 skills prompt 段落复用已解
+  析的 app 配置；并支持不重启 Gateway 即可重新加载已挂载技能。([#4103]、[#3924]
+  、[#4169]、[#4130]、[#4160]、[#4264])
+- **沙箱：** 为反向路径翻译与输出脱敏正则加上段边界；在 `read_file` / `str_replace`
+  中处理单边行范围与空文件；对齐 AIO bash 工作目录；在 Windows 的反向 resolve 包
+  含性检查中使用 `os.sep`；在 bash 命令中规范化 Windows 反斜杠路径；阻止 `glob`
+  / `grep` / `ls` 暴露被禁用技能的文件；并在沙箱审计中允许合法的 heredoc 命令。([#4035]
+  、[#4053]、[#4078]、[#4079]、[#4051]、[#4058]、[#3869]、[#4096]、[#3786])
+- **沙箱：** 同步沙箱 provider 单例的生命周期（含并发回归测试），并让 provisioner
+  中的 k8s 调用不阻塞事件循环。([#3730]、[#3941])
+- **沙箱：** 将沙箱 artifact 挂载与渠道用户对齐；修复非 root / NFS 主机上的本地
+  开发（`make dev`）；停止时回收 macOS 上的 nginx 进程；并修复 Docker 中生产环境
+  Postgres 的 UV-extras 检测。([#3729]、[#3590]、[#3828]、[#3897])
+- **渠道：** 在解析渠道 provider 配置前先校验 provider；对 GitHub webhook 重投递
+  去重，并丢弃冗余的 GitHub review-comment webhook 扇出；把斜杠技能白名单检查限
+  定在 run 的 owner 作用域；将飞书文件消息批量到一个会话，并以 bot @mention 前缀
+  分发飞书群命令；在 `/connect` 绑定码前接受前导 @mention，且不把裸 `connect` 当
+  作绑定命令；阻止飞书创建会话话题并限流卡片更新；让 UI 运行时渠道配置优先于 `config.yaml`
+  ；修复 `bot_login` / `mention_login` 仅含空白时 `require_mention` 的门控；防护
+  企业微信中为 null 的引用字段；并将入站去重按聊天作用域的工作区建立 key，使 Telegram
+  、飞书、微信与钉钉在默认（未绑定）配置下不再因重投递重复执行智能体，遇到瞬时失
+  败时释放去重 key 以便重投递仍可恢复。([#4100]、[#4104]、[#4131]、[#4129]、[#3753]
+  、[#4229]、[#4222]、[#4251]、[#3810]、[#3674]、[#4055]、[#4069]、[#4287])
+- **前端：** 摘要过程中保留消息与持久上下文；流式期间保留 artifact 并稳定 artifact
+  路径；解析相对 artifact 图片路径；在 header 下拉中保留已展示的 artifact；保持
+  孤立的工具消息可见；工具步骤期间展示助手文本；客户端导航时重置新会话；防止并发
+  提交导致流被取消；修复过期 run 的重连与取消处理；修复聊天公式渲染、单波浪线 markdown
+  、双重 reasoning 渲染、UTF-16 markdown 二进制分类与 Streamdown 中的 `<memory>`
+  标签；让最近会话行整体可点击；上传前校验附件上限并修复消息复制中上传文件元数据
+  ；修复移动端工作区与可访问性阻塞、卡片工具消息 bug 以及侧边聊天工具栏 / 面板按
+  钮行为；拦截未解析的建议模板占位符；刷新通知权限；仅对已完成回合显示分支操作；
+  在自定义智能体聊天中启用重新生成；并为被中断的首回合 run 生成兜底标题。([#3826]
+  、[#3791]、[#4094]、[#4038]、[#3854]、[#3880]、[#4114]、[#3673]、[#3878]、[#3908]
+  、[#3557]、[#4245]、[#3870]、[#3966]、[#4209]、[#3733]、[#3900]、[#3944]、[#3740]
+  、[#3976]、[#3959]、[#3961]、[#3764]、[#3768]、[#4147]、[#3967]、[#3874]、[#3644])
+- **TUI：** `/quit` 退出前先中断活动 run。([#4235])
+- **harness：** 当大纲标题数恰好等于 `MAX_OUTLINE_ENTRIES` 时不再误判为被截断。([#3856])
+- **追踪：** 把 Langfuse trace 元数据附加到目标评估器。([#4202])
+- **上下文：** 修复 context-compress 的 bug。([#4065])
+- **ThreadData：** 修复 `runtime.context` 为 `None` 时的 `AttributeError`。([#3989])
+- **goal：** 修复 stand-down 期间 `continuation_count` 被重复递增的问题。([#4199])
+- **熔断器：** 修复半开探测不可重试后熔断器卡死的问题。([#3991])
+- **GitHub：** `allow_authors` 登录名改为大小写不敏感匹配。([#4218])
+- **社区工具：** `image_search` 现在返回全分辨率图片 URL。([#3990])
+- **技能：** 把技能历史接口中的阻塞文件 IO 移出事件循环。([#3563])
+- **技能：** SkillScan 不再把惰性求值的 PEP 695 类型别名误判为网络出口。([#4315])
+- **追踪：** 从运行时上下文解析 Langfuse trace 的用户。([#3794])
+- **护栏：** 将内部 owner 归因透传到护栏上下文。([#3839])
+- **子智能体：** 子智能体上限与 `MIN_SUBAGENT_LIMIT` 保持一致地限幅。([#4081])
+- **子智能体：** 加载按用户作用域的技能。([#4356])
+- **MCP：** 按 server 的 OAuth 预热改为失败即软降级，并持久化轮换后的 refresh token
+  。([#4084])
+- **MCP：** 忽略畸形的类路径文本。([#4456])
+- **认证：** 邮箱账号改为大小写不敏感解析。([#4101])
+- **认证：** 从 setup-status 超时中恢复。([#4371])
+- **调度器：** 修复一个调度竞态，该竞态可能为同一个定时任务启动两个 run。([#4105])
+- **渠道：** 缓冲并在 busy run 期间排空被排队的 GitHub 评论。([#4133])
+- **渠道：** 在转换为 mrkdwn 前先转义 Slack 保留字符。([#4197])
+- **渠道：** 飞书卡片 / reaction SDK 调用上检查 `response.success()`。([#4234])
+- **渠道：** 丢弃不携带会话身份的入站钉钉消息。([#4316])
+- **渠道：** 支持接收入站 Telegram 附件。([#4392])
+- **记忆：** 合并后的事实从其来源继承 `expected_valid_days`。([#4225])
+- **配置：** `_memory_config` 与 AppConfig 自动重载保持同步。([#4208])
+- **Postgres：** 用 `pool_recycle` 与 `command_timeout` 加固异步引擎，消除陈旧连
+  接导致的 504。([#4230])
+- **harness：** 为 `invoke_acp_agent` 增加超时，避免无限挂起。([#4238])
+- **社区工具：** 在 `web_fetch`（Browserless）中暴露目标页的错误状态。([#4239])
+- **沙箱：** 放宽 BoxLite / AIO 的租户哈希范围，并在回收时校验身份。([#4171])
+- **沙箱：** `str_replace` 在任意文件上遇到空 `old_str` 时改为无操作。([#4256])
+- **沙箱：** 序列化 E2B 的释放状态转换。([#4355])
+- **沙箱：** 限制 E2B 输出同步的资源占用。([#4364])
+- **沙箱：** 在 `after_agent` 中解包被 `Overwrite` 包裹的沙箱状态。([#4381])
+- **沙箱：** 本地 AIO 流量绕过代理。([#4444])
+- **模型：** 暴露因长度截断的模型响应，而非直接丢弃。([#4309])
+- **流式：** 保持大文件生成过程的响应性。([#4354])
+- **流式：** 把自定义事件暴露给 `astream_events`。([#4403])
+- **流式：** 对回放历史中的缺口发出信号。([#4426])
+- **摘要：** 使用 run 模型进行摘要，摘要 provider 失败时回退。([#4361])
+- **运行时：** 模型调用后移除临时的图片上下文。([#4267])
+- **运行时：** 阻止子图流式帧冒充根帧。([#4407])
+- **运行时：** 拒绝不支持的 run 选项与流模式。([#4430])
+- **运行时：** 序列化 checkpoint 写入与活动 run、线性化 delta 模式的 checkpoint
+  恢复，并接受 SDK 默认的 `stream_resumable=false`，以避免恢复竞态。([#4437]、[#4460]
+  、[#4468])
+- **checkpoint：** 解包对空 channel 的 `Overwrite` 首次写入。([#4383])
+- **nginx：** 允许超长聊天 prompt 通过 `/api/langgraph/`，不再直接返回 500。([#4277])
+- **网关：** 当 header 已设置时，优先使用 `X-Trace-Id` 而非 `metadata.deerflow_trace_id`
+  。([#4283])
+- **网关：** 为分支补种 run-events，使继承的历史在分叉后仍然保留。([#4385])
+- **网关：** 分支历史补种的 run id 按继承的回合作用域划分。([#4459])
+- **前端：** 加固 artifact 与 markdown 渲染。([#4117])
+- **前端：** 工作区变更评审中，把“符号链接替换文件”与“删除”区分开。([#4170])
+- **前端：** 把工作区变更文本缓存生命周期中的阻塞文件 IO 移出事件循环。([#4268])
+- **前端：** 对 artifact URL 的路径段进行编码。([#4278])
+- **前端：** 厘清 run 时长的展示。([#4348])
+- **前端：** 在分支会话中保留重新生成状态。([#4358])
+- **前端：** reasoning-effort 未设置时默认展示为 Medium。([#4373])
+- **前端：** 剥离并解析 `<current_uploads>` 上传上下文标签。([#4402])
+- **前端：** 保持前导的孤立工具消息可见。([#4408])
+- **前端：** 刷新后保持已完成子任务卡片的稳定。([#4432])
+- **前端：** 通过 inline style 应用消息图片的 `maxWidth`。([#4446])
+- **前端：** 恢复 artifact 与侧边面板的可调整大小。([#4469])
+- **前端：** 允许非 localhost 主机访问 dev-server。([#4471])
+- **内容安全：** 回填空的内容过滤响应，避免污染会话。([#4394])
+- **工具：** 从 `list_uploaded_files` 的 schema 中排除注入的 runtime。([#4376])
+
+### 性能优化
+
+- **运行时：** 为 `MemoryRunStore` 按 `thread_id`、`MemoryRunEventStore` 事件按
+  `run_id` 建立索引，避免 O(n) 扫描。([#3562]、[#3686])
+- **子智能体：** 通过 seen-id 集合对流式 AI 消息去重（O(n²) -> O(n)）。([#3687])
+- **沙箱：** `LocalSandbox` 的路径改写正则与本地路径脱敏模式改为按实例缓存，不再
+  每次搜索命中都重新编译。([#3648]、[#3713])
+- **消息：** 按组为工具调用结果建立索引。([#4411])
+- **前端：** 流式渲染按帧预算合并，而非逐 chunk 渲染。([#4425])
+- **前端：** 不再在每个流式 chunk 上重新推导消息内容。([#4441])
+
+### 安全
+
+- **提示词注入：** 新增输入净化中间件防御提示词注入，输入护栏中伪造的框架标签会
+  被拦截，系统上下文以 `SystemMessage` 注入以隔离角色。([#3662]、[#4155]、[#3661])
+- **提示词注入：** 对渲染进模型 prompt 的不可信内容进行 HTML 转义——记忆事实与摘
+  要、`SOUL.md`、子智能体描述、技能元数据，以及记忆更新 prompt 中的会话块——并中
+  和 `web_capture` 工具结果中的提示词注入标签。([#4028]、[#4119]、[#4137]、[#4157]
+  、[#4162]、[#4099]、[#4060]、[#4097]、[#4128])
+- **机密：** 从技能环境中清除继承来的密钥环境变量（`MYSQL_PWD`、`REDISCLI_AUTH`
+  、缩写形式的 `*_PASS` 与 Postgres 的 `PGPASSFILE`）；请求作用域的密钥对斜杠激
+  活与自主调用的技能都会绑定。([#4018]、[#4026]、[#3871]、[#3938])
+- **web_fetch：** 针对自托管 provider 的 SSRF 防护。([#3942])
+- **护栏：** 空的 allowlist 现在会拒绝所有工具，而非放行（fail open）。([#4067])
+- **鉴权：** 全局技能管理接口现在要求管理员权限；旧版 skills 挂载按用户可见性门
+  控；artifact 遵循受信任的 `owner-user-id` header；受信任的鉴权主体透传到运行时
+  。([#3855]、[#3985]、[#3982]、[#4203])
+- **认证：** 在 access-token 生命周期内持久化 `csrf_token` cookie。([#3872])
+- **存储：** 不再在 checkpoint 状态中持久化 base64 图片数据。([#4140])
+
+
 ## [2.0.0] — 2026-06-15

 DeerFlow 2.0 是围绕"超级智能体"框架的彻底重写，核心包含子智能体、持久化记忆、
@ -290,6 +666,7 @@ DeerFlow 2.0 是围绕"超级智能体"框架的彻底重写，核心包含子
  ([#3455])

 [2.0.0]: https://github.com/bytedance/deer-flow/releases/tag/v2.0.0
+
 [#2329]: https://github.com/bytedance/deer-flow/pull/2329
 [#2556]: https://github.com/bytedance/deer-flow/pull/2556
 [#2582]: https://github.com/bytedance/deer-flow/pull/2582
@ -358,6 +735,7 @@ DeerFlow 2.0 是围绕"超级智能体"框架的彻底重写，核心包含子
 [#2989]: https://github.com/bytedance/deer-flow/pull/2989
 [#3002]: https://github.com/bytedance/deer-flow/pull/3002
 [#3005]: https://github.com/bytedance/deer-flow/pull/3005
+[#3033]: https://github.com/bytedance/deer-flow/pull/3033
 [#3058]: https://github.com/bytedance/deer-flow/pull/3058
 [#3069]: https://github.com/bytedance/deer-flow/pull/3069
 [#3074]: https://github.com/bytedance/deer-flow/pull/3074
@ -369,6 +747,7 @@ DeerFlow 2.0 是围绕"超级智能体"框架的彻底重写，核心包含子
 [#3153]: https://github.com/bytedance/deer-flow/pull/3153
 [#3174]: https://github.com/bytedance/deer-flow/pull/3174
 [#3176]: https://github.com/bytedance/deer-flow/pull/3176
+[#3191]: https://github.com/bytedance/deer-flow/pull/3191
 [#3200]: https://github.com/bytedance/deer-flow/pull/3200
 [#3228]: https://github.com/bytedance/deer-flow/pull/3228
 [#3233]: https://github.com/bytedance/deer-flow/pull/3233
@ -384,18 +763,21 @@ DeerFlow 2.0 是围绕"超级智能体"框架的彻底重写，核心包含子
 [#3313]: https://github.com/bytedance/deer-flow/pull/3313
 [#3335]: https://github.com/bytedance/deer-flow/pull/3335
 [#3342]: https://github.com/bytedance/deer-flow/pull/3342
+[#3377]: https://github.com/bytedance/deer-flow/pull/3377
 [#3393]: https://github.com/bytedance/deer-flow/pull/3393
 [#3397]: https://github.com/bytedance/deer-flow/pull/3397
 [#3398]: https://github.com/bytedance/deer-flow/pull/3398
 [#3408]: https://github.com/bytedance/deer-flow/pull/3408
 [#3410]: https://github.com/bytedance/deer-flow/pull/3410
 [#3411]: https://github.com/bytedance/deer-flow/pull/3411
+[#3412]: https://github.com/bytedance/deer-flow/pull/3412
 [#3413]: https://github.com/bytedance/deer-flow/pull/3413
 [#3417]: https://github.com/bytedance/deer-flow/pull/3417
 [#3421]: https://github.com/bytedance/deer-flow/pull/3421
 [#3423]: https://github.com/bytedance/deer-flow/pull/3423
 [#3425]: https://github.com/bytedance/deer-flow/pull/3425
 [#3426]: https://github.com/bytedance/deer-flow/pull/3426
+[#3428]: https://github.com/bytedance/deer-flow/pull/3428
 [#3430]: https://github.com/bytedance/deer-flow/pull/3430
 [#3433]: https://github.com/bytedance/deer-flow/pull/3433
 [#3434]: https://github.com/bytedance/deer-flow/pull/3434
@ -427,6 +809,7 @@ DeerFlow 2.0 是围绕"超级智能体"框架的彻底重写，核心包含子
 [#3502]: https://github.com/bytedance/deer-flow/pull/3502
 [#3503]: https://github.com/bytedance/deer-flow/pull/3503
 [#3505]: https://github.com/bytedance/deer-flow/pull/3505
+[#3506]: https://github.com/bytedance/deer-flow/pull/3506
 [#3508]: https://github.com/bytedance/deer-flow/pull/3508
 [#3512]: https://github.com/bytedance/deer-flow/pull/3512
 [#3514]: https://github.com/bytedance/deer-flow/pull/3514
@ -442,12 +825,19 @@ DeerFlow 2.0 是围绕"超级智能体"框架的彻底重写，核心包含子
 [#3534]: https://github.com/bytedance/deer-flow/pull/3534
 [#3535]: https://github.com/bytedance/deer-flow/pull/3535
 [#3548]: https://github.com/bytedance/deer-flow/pull/3548
+[#3551]: https://github.com/bytedance/deer-flow/pull/3551
 [#3553]: https://github.com/bytedance/deer-flow/pull/3553
 [#3554]: https://github.com/bytedance/deer-flow/pull/3554
+[#3556]: https://github.com/bytedance/deer-flow/pull/3556
+[#3557]: https://github.com/bytedance/deer-flow/pull/3557
 [#3559]: https://github.com/bytedance/deer-flow/pull/3559
 [#3561]: https://github.com/bytedance/deer-flow/pull/3561
+[#3562]: https://github.com/bytedance/deer-flow/pull/3562
+[#3563]: https://github.com/bytedance/deer-flow/pull/3563
+[#3566]: https://github.com/bytedance/deer-flow/pull/3566
 [#3569]: https://github.com/bytedance/deer-flow/pull/3569
 [#3570]: https://github.com/bytedance/deer-flow/pull/3570
+[#3573]: https://github.com/bytedance/deer-flow/pull/3573
 [#3575]: https://github.com/bytedance/deer-flow/pull/3575
 [#3577]: https://github.com/bytedance/deer-flow/pull/3577
 [#3578]: https://github.com/bytedance/deer-flow/pull/3578
@ -457,9 +847,13 @@ DeerFlow 2.0 是围绕"超级智能体"框架的彻底重写，核心包含子
 [#3582]: https://github.com/bytedance/deer-flow/pull/3582
 [#3583]: https://github.com/bytedance/deer-flow/pull/3583
 [#3584]: https://github.com/bytedance/deer-flow/pull/3584
+[#3585]: https://github.com/bytedance/deer-flow/pull/3585
+[#3590]: https://github.com/bytedance/deer-flow/pull/3590
 [#3591]: https://github.com/bytedance/deer-flow/pull/3591
+[#3592]: https://github.com/bytedance/deer-flow/pull/3592
 [#3599]: https://github.com/bytedance/deer-flow/pull/3599
 [#3600]: https://github.com/bytedance/deer-flow/pull/3600
+[#3601]: https://github.com/bytedance/deer-flow/pull/3601
 [#3602]: https://github.com/bytedance/deer-flow/pull/3602
 [#3605]: https://github.com/bytedance/deer-flow/pull/3605
 [#3606]: https://github.com/bytedance/deer-flow/pull/3606
@ -468,10 +862,307 @@ DeerFlow 2.0 是围绕"超级智能体"框架的彻底重写，核心包含子
 [#3611]: https://github.com/bytedance/deer-flow/pull/3611
 [#3623]: https://github.com/bytedance/deer-flow/pull/3623
 [#3624]: https://github.com/bytedance/deer-flow/pull/3624
+[#3627]: https://github.com/bytedance/deer-flow/pull/3627
 [#3629]: https://github.com/bytedance/deer-flow/pull/3629
 [#3631]: https://github.com/bytedance/deer-flow/pull/3631
+[#3637]: https://github.com/bytedance/deer-flow/pull/3637
+[#3644]: https://github.com/bytedance/deer-flow/pull/3644
 [#3646]: https://github.com/bytedance/deer-flow/pull/3646
+[#3648]: https://github.com/bytedance/deer-flow/pull/3648
 [#3649]: https://github.com/bytedance/deer-flow/pull/3649
+[#3651]: https://github.com/bytedance/deer-flow/pull/3651
 [#3654]: https://github.com/bytedance/deer-flow/pull/3654
 [#3657]: https://github.com/bytedance/deer-flow/pull/3657
 [#3658]: https://github.com/bytedance/deer-flow/pull/3658
+[#3661]: https://github.com/bytedance/deer-flow/pull/3661
+[#3662]: https://github.com/bytedance/deer-flow/pull/3662
+[#3663]: https://github.com/bytedance/deer-flow/pull/3663
+[#3665]: https://github.com/bytedance/deer-flow/pull/3665
+[#3673]: https://github.com/bytedance/deer-flow/pull/3673
+[#3674]: https://github.com/bytedance/deer-flow/pull/3674
+[#3675]: https://github.com/bytedance/deer-flow/pull/3675
+[#3685]: https://github.com/bytedance/deer-flow/pull/3685
+[#3686]: https://github.com/bytedance/deer-flow/pull/3686
+[#3687]: https://github.com/bytedance/deer-flow/pull/3687
+[#3698]: https://github.com/bytedance/deer-flow/pull/3698
+[#3709]: https://github.com/bytedance/deer-flow/pull/3709
+[#3711]: https://github.com/bytedance/deer-flow/pull/3711
+[#3713]: https://github.com/bytedance/deer-flow/pull/3713
+[#3714]: https://github.com/bytedance/deer-flow/pull/3714
+[#3718]: https://github.com/bytedance/deer-flow/pull/3718
+[#3719]: https://github.com/bytedance/deer-flow/pull/3719
+[#3729]: https://github.com/bytedance/deer-flow/pull/3729
+[#3730]: https://github.com/bytedance/deer-flow/pull/3730
+[#3733]: https://github.com/bytedance/deer-flow/pull/3733
+[#3740]: https://github.com/bytedance/deer-flow/pull/3740
+[#3753]: https://github.com/bytedance/deer-flow/pull/3753
+[#3760]: https://github.com/bytedance/deer-flow/pull/3760
+[#3764]: https://github.com/bytedance/deer-flow/pull/3764
+[#3768]: https://github.com/bytedance/deer-flow/pull/3768
+[#3769]: https://github.com/bytedance/deer-flow/pull/3769
+[#3770]: https://github.com/bytedance/deer-flow/pull/3770
+[#3772]: https://github.com/bytedance/deer-flow/pull/3772
+[#3775]: https://github.com/bytedance/deer-flow/pull/3775
+[#3786]: https://github.com/bytedance/deer-flow/pull/3786
+[#3790]: https://github.com/bytedance/deer-flow/pull/3790
+[#3791]: https://github.com/bytedance/deer-flow/pull/3791
+[#3794]: https://github.com/bytedance/deer-flow/pull/3794
+[#3797]: https://github.com/bytedance/deer-flow/pull/3797
+[#3800]: https://github.com/bytedance/deer-flow/pull/3800
+[#3809]: https://github.com/bytedance/deer-flow/pull/3809
+[#3810]: https://github.com/bytedance/deer-flow/pull/3810
+[#3812]: https://github.com/bytedance/deer-flow/pull/3812
+[#3821]: https://github.com/bytedance/deer-flow/pull/3821
+[#3826]: https://github.com/bytedance/deer-flow/pull/3826
+[#3828]: https://github.com/bytedance/deer-flow/pull/3828
+[#3837]: https://github.com/bytedance/deer-flow/pull/3837
+[#3839]: https://github.com/bytedance/deer-flow/pull/3839
+[#3843]: https://github.com/bytedance/deer-flow/pull/3843
+[#3845]: https://github.com/bytedance/deer-flow/pull/3845
+[#3854]: https://github.com/bytedance/deer-flow/pull/3854
+[#3855]: https://github.com/bytedance/deer-flow/pull/3855
+[#3856]: https://github.com/bytedance/deer-flow/pull/3856
+[#3858]: https://github.com/bytedance/deer-flow/pull/3858
+[#3860]: https://github.com/bytedance/deer-flow/pull/3860
+[#3866]: https://github.com/bytedance/deer-flow/pull/3866
+[#3869]: https://github.com/bytedance/deer-flow/pull/3869
+[#3870]: https://github.com/bytedance/deer-flow/pull/3870
+[#3871]: https://github.com/bytedance/deer-flow/pull/3871
+[#3872]: https://github.com/bytedance/deer-flow/pull/3872
+[#3874]: https://github.com/bytedance/deer-flow/pull/3874
+[#3877]: https://github.com/bytedance/deer-flow/pull/3877
+[#3878]: https://github.com/bytedance/deer-flow/pull/3878
+[#3880]: https://github.com/bytedance/deer-flow/pull/3880
+[#3881]: https://github.com/bytedance/deer-flow/pull/3881
+[#3883]: https://github.com/bytedance/deer-flow/pull/3883
+[#3885]: https://github.com/bytedance/deer-flow/pull/3885
+[#3886]: https://github.com/bytedance/deer-flow/pull/3886
+[#3887]: https://github.com/bytedance/deer-flow/pull/3887
+[#3889]: https://github.com/bytedance/deer-flow/pull/3889
+[#3897]: https://github.com/bytedance/deer-flow/pull/3897
+[#3900]: https://github.com/bytedance/deer-flow/pull/3900
+[#3902]: https://github.com/bytedance/deer-flow/pull/3902
+[#3904]: https://github.com/bytedance/deer-flow/pull/3904
+[#3906]: https://github.com/bytedance/deer-flow/pull/3906
+[#3907]: https://github.com/bytedance/deer-flow/pull/3907
+[#3908]: https://github.com/bytedance/deer-flow/pull/3908
+[#3912]: https://github.com/bytedance/deer-flow/pull/3912
+[#3917]: https://github.com/bytedance/deer-flow/pull/3917
+[#3920]: https://github.com/bytedance/deer-flow/pull/3920
+[#3924]: https://github.com/bytedance/deer-flow/pull/3924
+[#3926]: https://github.com/bytedance/deer-flow/pull/3926
+[#3927]: https://github.com/bytedance/deer-flow/pull/3927
+[#3928]: https://github.com/bytedance/deer-flow/pull/3928
+[#3931]: https://github.com/bytedance/deer-flow/pull/3931
+[#3934]: https://github.com/bytedance/deer-flow/pull/3934
+[#3935]: https://github.com/bytedance/deer-flow/pull/3935
+[#3938]: https://github.com/bytedance/deer-flow/pull/3938
+[#3940]: https://github.com/bytedance/deer-flow/pull/3940
+[#3941]: https://github.com/bytedance/deer-flow/pull/3941
+[#3942]: https://github.com/bytedance/deer-flow/pull/3942
+[#3944]: https://github.com/bytedance/deer-flow/pull/3944
+[#3945]: https://github.com/bytedance/deer-flow/pull/3945
+[#3949]: https://github.com/bytedance/deer-flow/pull/3949
+[#3950]: https://github.com/bytedance/deer-flow/pull/3950
+[#3951]: https://github.com/bytedance/deer-flow/pull/3951
+[#3956]: https://github.com/bytedance/deer-flow/pull/3956
+[#3959]: https://github.com/bytedance/deer-flow/pull/3959
+[#3961]: https://github.com/bytedance/deer-flow/pull/3961
+[#3964]: https://github.com/bytedance/deer-flow/pull/3964
+[#3966]: https://github.com/bytedance/deer-flow/pull/3966
+[#3967]: https://github.com/bytedance/deer-flow/pull/3967
+[#3969]: https://github.com/bytedance/deer-flow/pull/3969
+[#3971]: https://github.com/bytedance/deer-flow/pull/3971
+[#3976]: https://github.com/bytedance/deer-flow/pull/3976
+[#3980]: https://github.com/bytedance/deer-flow/pull/3980
+[#3981]: https://github.com/bytedance/deer-flow/pull/3981
+[#3982]: https://github.com/bytedance/deer-flow/pull/3982
+[#3985]: https://github.com/bytedance/deer-flow/pull/3985
+[#3986]: https://github.com/bytedance/deer-flow/pull/3986
+[#3988]: https://github.com/bytedance/deer-flow/pull/3988
+[#3989]: https://github.com/bytedance/deer-flow/pull/3989
+[#3990]: https://github.com/bytedance/deer-flow/pull/3990
+[#3991]: https://github.com/bytedance/deer-flow/pull/3991
+[#3992]: https://github.com/bytedance/deer-flow/pull/3992
+[#3993]: https://github.com/bytedance/deer-flow/pull/3993
+[#3994]: https://github.com/bytedance/deer-flow/pull/3994
+[#3996]: https://github.com/bytedance/deer-flow/pull/3996
+[#4003]: https://github.com/bytedance/deer-flow/pull/4003
+[#4004]: https://github.com/bytedance/deer-flow/pull/4004
+[#4008]: https://github.com/bytedance/deer-flow/pull/4008
+[#4009]: https://github.com/bytedance/deer-flow/pull/4009
+[#4012]: https://github.com/bytedance/deer-flow/pull/4012
+[#4016]: https://github.com/bytedance/deer-flow/pull/4016
+[#4017]: https://github.com/bytedance/deer-flow/pull/4017
+[#4018]: https://github.com/bytedance/deer-flow/pull/4018
+[#4023]: https://github.com/bytedance/deer-flow/pull/4023
+[#4024]: https://github.com/bytedance/deer-flow/pull/4024
+[#4026]: https://github.com/bytedance/deer-flow/pull/4026
+[#4028]: https://github.com/bytedance/deer-flow/pull/4028
+[#4033]: https://github.com/bytedance/deer-flow/pull/4033
+[#4034]: https://github.com/bytedance/deer-flow/pull/4034
+[#4035]: https://github.com/bytedance/deer-flow/pull/4035
+[#4036]: https://github.com/bytedance/deer-flow/pull/4036
+[#4038]: https://github.com/bytedance/deer-flow/pull/4038
+[#4040]: https://github.com/bytedance/deer-flow/pull/4040
+[#4051]: https://github.com/bytedance/deer-flow/pull/4051
+[#4052]: https://github.com/bytedance/deer-flow/pull/4052
+[#4053]: https://github.com/bytedance/deer-flow/pull/4053
+[#4055]: https://github.com/bytedance/deer-flow/pull/4055
+[#4058]: https://github.com/bytedance/deer-flow/pull/4058
+[#4059]: https://github.com/bytedance/deer-flow/pull/4059
+[#4060]: https://github.com/bytedance/deer-flow/pull/4060
+[#4064]: https://github.com/bytedance/deer-flow/pull/4064
+[#4065]: https://github.com/bytedance/deer-flow/pull/4065
+[#4067]: https://github.com/bytedance/deer-flow/pull/4067
+[#4069]: https://github.com/bytedance/deer-flow/pull/4069
+[#4072]: https://github.com/bytedance/deer-flow/pull/4072
+[#4073]: https://github.com/bytedance/deer-flow/pull/4073
+[#4074]: https://github.com/bytedance/deer-flow/pull/4074
+[#4076]: https://github.com/bytedance/deer-flow/pull/4076
+[#4077]: https://github.com/bytedance/deer-flow/pull/4077
+[#4078]: https://github.com/bytedance/deer-flow/pull/4078
+[#4079]: https://github.com/bytedance/deer-flow/pull/4079
+[#4080]: https://github.com/bytedance/deer-flow/pull/4080
+[#4081]: https://github.com/bytedance/deer-flow/pull/4081
+[#4082]: https://github.com/bytedance/deer-flow/pull/4082
+[#4084]: https://github.com/bytedance/deer-flow/pull/4084
+[#4085]: https://github.com/bytedance/deer-flow/pull/4085
+[#4090]: https://github.com/bytedance/deer-flow/pull/4090
+[#4094]: https://github.com/bytedance/deer-flow/pull/4094
+[#4095]: https://github.com/bytedance/deer-flow/issues/4095
+[#4096]: https://github.com/bytedance/deer-flow/pull/4096
+[#4097]: https://github.com/bytedance/deer-flow/pull/4097
+[#4098]: https://github.com/bytedance/deer-flow/pull/4098
+[#4099]: https://github.com/bytedance/deer-flow/pull/4099
+[#4100]: https://github.com/bytedance/deer-flow/pull/4100
+[#4101]: https://github.com/bytedance/deer-flow/pull/4101
+[#4102]: https://github.com/bytedance/deer-flow/pull/4102
+[#4103]: https://github.com/bytedance/deer-flow/pull/4103
+[#4104]: https://github.com/bytedance/deer-flow/pull/4104
+[#4105]: https://github.com/bytedance/deer-flow/pull/4105
+[#4108]: https://github.com/bytedance/deer-flow/pull/4108
+[#4114]: https://github.com/bytedance/deer-flow/pull/4114
+[#4115]: https://github.com/bytedance/deer-flow/pull/4115
+[#4117]: https://github.com/bytedance/deer-flow/pull/4117
+[#4118]: https://github.com/bytedance/deer-flow/pull/4118
+[#4119]: https://github.com/bytedance/deer-flow/pull/4119
+[#4122]: https://github.com/bytedance/deer-flow/pull/4122
+[#4124]: https://github.com/bytedance/deer-flow/pull/4124
+[#4128]: https://github.com/bytedance/deer-flow/pull/4128
+[#4129]: https://github.com/bytedance/deer-flow/pull/4129
+[#4130]: https://github.com/bytedance/deer-flow/pull/4130
+[#4131]: https://github.com/bytedance/deer-flow/pull/4131
+[#4133]: https://github.com/bytedance/deer-flow/pull/4133
+[#4136]: https://github.com/bytedance/deer-flow/pull/4136
+[#4137]: https://github.com/bytedance/deer-flow/pull/4137
+[#4140]: https://github.com/bytedance/deer-flow/pull/4140
+[#4141]: https://github.com/bytedance/deer-flow/pull/4141
+[#4143]: https://github.com/bytedance/deer-flow/pull/4143
+[#4146]: https://github.com/bytedance/deer-flow/pull/4146
+[#4147]: https://github.com/bytedance/deer-flow/pull/4147
+[#4154]: https://github.com/bytedance/deer-flow/pull/4154
+[#4155]: https://github.com/bytedance/deer-flow/pull/4155
+[#4157]: https://github.com/bytedance/deer-flow/pull/4157
+[#4160]: https://github.com/bytedance/deer-flow/pull/4160
+[#4161]: https://github.com/bytedance/deer-flow/pull/4161
+[#4162]: https://github.com/bytedance/deer-flow/pull/4162
+[#4166]: https://github.com/bytedance/deer-flow/pull/4166
+[#4169]: https://github.com/bytedance/deer-flow/pull/4169
+[#4170]: https://github.com/bytedance/deer-flow/pull/4170
+[#4171]: https://github.com/bytedance/deer-flow/pull/4171
+[#4174]: https://github.com/bytedance/deer-flow/pull/4174
+[#4181]: https://github.com/bytedance/deer-flow/pull/4181
+[#4187]: https://github.com/bytedance/deer-flow/pull/4187
+[#4188]: https://github.com/bytedance/deer-flow/pull/4188
+[#4190]: https://github.com/bytedance/deer-flow/pull/4190
+[#4192]: https://github.com/bytedance/deer-flow/issues/4192
+[#4193]: https://github.com/bytedance/deer-flow/pull/4193
+[#4197]: https://github.com/bytedance/deer-flow/pull/4197
+[#4199]: https://github.com/bytedance/deer-flow/pull/4199
+[#4202]: https://github.com/bytedance/deer-flow/pull/4202
+[#4203]: https://github.com/bytedance/deer-flow/pull/4203
+[#4208]: https://github.com/bytedance/deer-flow/pull/4208
+[#4209]: https://github.com/bytedance/deer-flow/pull/4209
+[#4215]: https://github.com/bytedance/deer-flow/pull/4215
+[#4217]: https://github.com/bytedance/deer-flow/pull/4217
+[#4218]: https://github.com/bytedance/deer-flow/pull/4218
+[#4219]: https://github.com/bytedance/deer-flow/pull/4219
+[#4222]: https://github.com/bytedance/deer-flow/pull/4222
+[#4225]: https://github.com/bytedance/deer-flow/pull/4225
+[#4229]: https://github.com/bytedance/deer-flow/pull/4229
+[#4230]: https://github.com/bytedance/deer-flow/pull/4230
+[#4234]: https://github.com/bytedance/deer-flow/pull/4234
+[#4235]: https://github.com/bytedance/deer-flow/pull/4235
+[#4238]: https://github.com/bytedance/deer-flow/pull/4238
+[#4239]: https://github.com/bytedance/deer-flow/pull/4239
+[#4245]: https://github.com/bytedance/deer-flow/pull/4245
+[#4246]: https://github.com/bytedance/deer-flow/pull/4246
+[#4251]: https://github.com/bytedance/deer-flow/pull/4251
+[#4255]: https://github.com/bytedance/deer-flow/pull/4255
+[#4256]: https://github.com/bytedance/deer-flow/pull/4256
+[#4260]: https://github.com/bytedance/deer-flow/pull/4260
+[#4264]: https://github.com/bytedance/deer-flow/pull/4264
+[#4267]: https://github.com/bytedance/deer-flow/pull/4267
+[#4268]: https://github.com/bytedance/deer-flow/pull/4268
+[#4277]: https://github.com/bytedance/deer-flow/pull/4277
+[#4278]: https://github.com/bytedance/deer-flow/pull/4278
+[#4279]: https://github.com/bytedance/deer-flow/pull/4279
+[#4283]: https://github.com/bytedance/deer-flow/pull/4283
+[#4287]: https://github.com/bytedance/deer-flow/pull/4287
+[#4288]: https://github.com/bytedance/deer-flow/pull/4288
+[#4292]: https://github.com/bytedance/deer-flow/pull/4292
+[#4306]: https://github.com/bytedance/deer-flow/pull/4306
+[#4309]: https://github.com/bytedance/deer-flow/pull/4309
+[#4311]: https://github.com/bytedance/deer-flow/pull/4311
+[#4315]: https://github.com/bytedance/deer-flow/pull/4315
+[#4316]: https://github.com/bytedance/deer-flow/pull/4316
+[#4324]: https://github.com/bytedance/deer-flow/issues/4324
+[#4326]: https://github.com/bytedance/deer-flow/pull/4326
+[#4337]: https://github.com/bytedance/deer-flow/pull/4337
+[#4347]: https://github.com/bytedance/deer-flow/pull/4347
+[#4348]: https://github.com/bytedance/deer-flow/pull/4348
+[#4354]: https://github.com/bytedance/deer-flow/pull/4354
+[#4355]: https://github.com/bytedance/deer-flow/pull/4355
+[#4356]: https://github.com/bytedance/deer-flow/pull/4356
+[#4358]: https://github.com/bytedance/deer-flow/pull/4358
+[#4361]: https://github.com/bytedance/deer-flow/pull/4361
+[#4364]: https://github.com/bytedance/deer-flow/pull/4364
+[#4365]: https://github.com/bytedance/deer-flow/pull/4365
+[#4370]: https://github.com/bytedance/deer-flow/pull/4370
+[#4371]: https://github.com/bytedance/deer-flow/pull/4371
+[#4373]: https://github.com/bytedance/deer-flow/pull/4373
+[#4374]: https://github.com/bytedance/deer-flow/pull/4374
+[#4376]: https://github.com/bytedance/deer-flow/pull/4376
+[#4381]: https://github.com/bytedance/deer-flow/pull/4381
+[#4383]: https://github.com/bytedance/deer-flow/pull/4383
+[#4385]: https://github.com/bytedance/deer-flow/pull/4385
+[#4391]: https://github.com/bytedance/deer-flow/pull/4391
+[#4392]: https://github.com/bytedance/deer-flow/pull/4392
+[#4394]: https://github.com/bytedance/deer-flow/pull/4394
+[#4402]: https://github.com/bytedance/deer-flow/pull/4402
+[#4403]: https://github.com/bytedance/deer-flow/pull/4403
+[#4407]: https://github.com/bytedance/deer-flow/pull/4407
+[#4408]: https://github.com/bytedance/deer-flow/pull/4408
+[#4411]: https://github.com/bytedance/deer-flow/pull/4411
+[#4414]: https://github.com/bytedance/deer-flow/issues/4414
+[#4424]: https://github.com/bytedance/deer-flow/issues/4424
+[#4425]: https://github.com/bytedance/deer-flow/pull/4425
+[#4426]: https://github.com/bytedance/deer-flow/pull/4426
+[#4430]: https://github.com/bytedance/deer-flow/pull/4430
+[#4431]: https://github.com/bytedance/deer-flow/pull/4431
+[#4432]: https://github.com/bytedance/deer-flow/pull/4432
+[#4434]: https://github.com/bytedance/deer-flow/pull/4434
+[#4437]: https://github.com/bytedance/deer-flow/pull/4437
+[#4441]: https://github.com/bytedance/deer-flow/pull/4441
+[#4442]: https://github.com/bytedance/deer-flow/pull/4442
+[#4444]: https://github.com/bytedance/deer-flow/pull/4444
+[#4446]: https://github.com/bytedance/deer-flow/pull/4446
+[#4447]: https://github.com/bytedance/deer-flow/pull/4447
+[#4450]: https://github.com/bytedance/deer-flow/pull/4450
+[#4456]: https://github.com/bytedance/deer-flow/pull/4456
+[#4459]: https://github.com/bytedance/deer-flow/pull/4459
+[#4460]: https://github.com/bytedance/deer-flow/pull/4460
+[#4468]: https://github.com/bytedance/deer-flow/pull/4468
+[#4469]: https://github.com/bytedance/deer-flow/pull/4469
+[#4471]: https://github.com/bytedance/deer-flow/pull/4471