OpenViking v0.5.2

中文

OpenViking v0.5.2 是一次覆盖服务端、Agent 插件、LangChain 集成、隐私保护、编译工作流、Studio 与 CLI 的综合版本。它同时包含多项会影响升级行为的变更，请在生产升级前阅读迁移说明并完成回归验证。

重点更新

• 隐私与数据治理：新增 Session 隐私自动提取、恢复和隐私树相关 MCP 工具；支持查看当前隐私配置树。
• Agent / Memory 稳定性：改进 Session 记忆读取与提取重试、Phase 2 解耦、轨迹去重、插件 pending 写入回放、跨分支捕获和 recall 上下文记录。
• Compile 工作流：新增增量更新、调度与版本历史，并修复 workspace 根目录及 Windows 沙箱命令处理。
• LangChain 与连接器：改进 Store 读写、删除、namespace 发现、嵌套过滤和 index field selectors；文档导入支持 OAuth refs。
• Studio / CLI / 运维：改进文件系统管理、Markdown 预览、连接切换、账户身份校验、日历范围处理和连接错误诊断；CLI 初始化默认 VLM 更新为 Seed 2.1 Lite。
• 服务端可靠性：新增 durable content write task workflow，改进 pathlock 释放顺序、ordered delta replay 上限、OIDC issuer 兼容、trusted group header 与 Gemini Embedding 2 支持。

破坏性变更与升级说明

• LangChain import migration：服务端不再提供 openviking.integrations.langchain 及其 forwarding modules。请安装 langchain-openviking（LangGraph 使用 langchain-openviking[langgraph]），并将导入前缀改为 langchain_openviking。详见 migration guide。
• Working Memory 默认关闭：Session 仍归档原始消息并提取长期记忆，但默认不再生成 WM/checkpoint summary。需要 WM 的调用请显式传入 enable_working_memory=true；同时升级相关 Agent 插件并检查旧 policy 的默认值。
• Watch API 行为迁移：带 watch_interval > 0 的重复导入不再更新或重新激活已有 Watch。请改用 PATCH /api/v1/watches/{task_id}，或先删除旧 Watch 再创建替代 Watch；Connector Watch 可共享 target，重复导入会创建独立 Watch。
• Pi extension 工具面变化：Pi extension 0.4.0 改用服务端 MCP tools，工具名从 viking_* 改为 openviking_*；--tools / --exclude-tools 配置需要同步改名。root API key 不能用于 /mcp，请改用 user 或 admin key。
• External peer identity migration：混合脚本身份使用无损 ext-<base64> ID。旧的有损 peer 目录不会自动读取，存在歧义的数据需要由运维人员确认归属后迁移。

兼容性与验证

• 发布目标：d164def87a2a376df6653eab5c206e00109777b1。
• 完整变更范围：v0.5.1...v0.5.2。
• 升级前请停止相关写入、备份可恢复数据，并在 stg 完成 CLI、data、console、ovtest 回归后再切生产。

首次贡献者

感谢以下首次贡献者：@dakjdakd、@rjdotdev、@CodingYangDev、@TINGyu123644、@zrwangems、@xinghalo321、@pujitha24、@incredible404-rgb、@Dcastroro、@dannyward630、@duyuxuan0518、@jmCalvinhyl。

English

OpenViking v0.5.2 is a cross-cutting release covering the server, agent plugins, LangChain integration, privacy controls, compile workflows, Studio, and CLI. Several changes affect upgrade behavior; review the migration notes and complete regression validation before production rollout.

Highlights

• Privacy and data governance: added automatic session privacy extraction and restore flows, privacy-tree MCP tools, and current privacy configuration-tree inspection.
• Agent / Memory reliability: improved session memory-read and extraction retries, decoupled Phase 2 extraction, deduplicated trajectory extraction, replayed pending plugin writes, captured divergent branches, and preserved recall context attribution.
• Compile workflows: added incremental updates, scheduling, and version history, with fixes for absolute workspace roots and Windows sandbox command translation.
• LangChain and connectors: improved Store reads, deletion, namespace discovery, nested filters, and index-field selectors; document imports now support OAuth refs.
• Studio / CLI / operations: improved filesystem management, Markdown previews, connection switching, account identity verification, calendar range handling, and connection-error diagnostics; CLI initialization now defaults to Seed 2.1 Lite VLMs.
• Server reliability: added the durable content-write task workflow and improved path-lock release ordering, ordered-delta replay bounds, trailing-slash OIDC issuer handling, trusted group headers, and Gemini Embedding 2 support.

Breaking changes and migration

• LangChain import migration: the server no longer ships openviking.integrations.langchain or forwarding modules. Install langchain-openviking (langchain-openviking[langgraph] for LangGraph) and replace imports with the langchain_openviking prefix. See the migration guide.
• Working Memory defaults off: sessions still archive raw messages and extract long-term memories, but WM/checkpoint summaries are no longer generated by default. Pass enable_working_memory=true when needed, update the relevant agent plugins, and review legacy policy defaults.
• Watch API migration: re-importing with watch_interval > 0 no longer updates or reactivates an existing Watch. Use PATCH /api/v1/watches/{task_id}, or delete the old Watch before creating a replacement. Connector Watches may share targets; repeated imports create independent Watches.
• Pi extension tool surface: Pi extension 0.4.0 now uses the server's MCP tools. Tool names changed from viking_* to openviking_*, so --tools / --exclude-tools entries must be updated. Root API keys are refused on /mcp; use a user or admin key.
• External peer identity migration: mixed-script identities now use lossless ext-<base64> IDs. Older lossy peer directories are not read automatically and require an operator-controlled ownership decision for migration.

Compatibility and verification

• Release target: d164def87a2a376df6653eab5c206e00109777b1.
• Full change range: v0.5.1...v0.5.2.
• Before upgrading, stop relevant writes, make a restorable backup, and complete the stg CLI, data, console, and ovtest regression suites before production rollout.

New contributors

Thanks to first-time contributors @dakjdakd, @rjdotdev, @CodingYangDev, @TINGyu123644, @zrwangems, @xinghalo321, @pujitha24, @incredible404-rgb, @Dcastroro, @dannyward630, @duyuxuan0518, and @jmCalvinhyl.

Full Changelog: v0.5.1...v0.5.2