Every Node.js project accumulates vulnerable dependencies. The npm registry holds over 2.5 million packages, and researchers found 454,000 malicious or vulnerable packages uploaded in 2025 alone.
前两篇把一个售后助手搭了起来,加上会话记忆和结构化输出,它已经能处理一段真实对话。但接进业务系统还差几步:工具怎么知道当前用户是谁,长任务怎么先给一句反馈,出问题又该怎么排查。这篇补齐运行时上下文、长期记忆、流式输出和 LangSmith。