繁體中文

新功能

介面更穩不崩潰,無頭模式不再洗畫面,外掛安裝更自動

終端機介面(TUI)現在變得更強韌了。以前如果畫面要渲染的格式太複雜(像是清單裡面又包了打勾方塊),程式可能會直接崩潰死當;現在它懂得出錯時退回顯示純文字並給你警告,不會整台罷工。滑鼠操作與鍵盤協定的底層引擎也升級了,修好了許多可能導致畫面當機的隱患。如果你在純文字的無頭模式(headless mode,不跳出互動視窗直接執行)下接續之前的對話,系統現在只會印出最新的回覆,不會再把你過去聊過的幾百行歷史紀錄全部印出來洗畫面。此外,現在安裝外部外掛(plugin)時,系統會自動幫你抓齊底下包含的 Git 子模組(submodule),不需要你手動去設定;而且系統啟動時也不會再囉嗦地問你「能不能讀取內建的設定檔目錄」了。對了,這次也修復了某些沒有 AES 硬體加速的 ARM 設備的相容問題。就像買家具,以前買組合包還要自己去配螺絲,現在全套幫你配好,而且說明書要是印錯了,也不會害你整櫃子組到一半垮掉。

新功能

沙盒安全大升級,帶引號的指令終於能順利放行

未授權程式不能碰 .git,而已允許的帶引號指令能正常放行。系統現在嚴禁未經授權的程式去亂動你專案裡的 .git 資料夾(這是存放版本控制紀錄的心臟地帶),防止重要的歷史紀錄被惡意竄改。在檢查你想執行的指令有沒有權限時也變得更嚴格,對於 PowerShell 腳本、複雜的輸出轉向符號(像 > 或 2>&1),都會要求「完全一模一樣」的嚴格比對,防堵那些想繞過沙盒(sandbox,限制程式權限的安全隔離區)的鑽漏洞行為。不過它也不是只會擋人,以前你如果把一個「帶有引號的指令」(像是 python -c "print(1)")加進白名單,系統會因為不懂得處理引號裡面的空白而認不得它,害你還是得手動批准;現在這個笨問題修好了,白名單終於能發揮正常作用。就像公司的門禁,現在不但嚴禁外人偷偷跑去檔案室亂翻,而且警衛也終於學會看懂外國訪客名字裡面的空格,不會再因為名字有空格就把原本已經預約好的客人擋在門外了。

English

FEATURE

TUI won't crash on bad formatting, headless mode stops spamming history, and plugins auto-fetch submodules

The terminal user interface (TUI) is now much more robust. Previously, if the text formatting was too complex (like checkboxes nested inside lists), the program could outright crash; now, it gracefully falls back to plain text with a warning banner instead of giving up completely. The underlying engine handling mouse and keyboard protocols has also been upgraded, fixing several data races and bugs that could cause panics. If you continue an existing conversation in headless mode (running in pure text without interactive windows), the system will now only print the newest response, instead of spamming your screen with hundreds of lines of historical chat logs. Furthermore, when installing external plugins, the system automatically fetches and initializes any included Git submodules, saving you the manual work; and it no longer redundantly begs for permission to read its own built-in settings directory on startup. Lastly, a compatibility issue on ARM devices lacking AES hardware acceleration has been fixed. Like buying flat-pack furniture: you used to have to go buy the screws separately, but now everything comes in one box, and if the instructions have a typo, it won't cause the whole cabinet to collapse halfway through assembly.

FEATURE

Hardened sandbox security and proper quoting for approved commands

The system's defense lines are now drawn much tighter. The system strictly forbids unauthorized programs from messing with your project's .git folder (the heart of your version control history), preventing any malicious tampering with your crucial history. It is also much stricter when checking command permissions: PowerShell scripts and complex output redirections (like > or 2>&1) now require an exact string match, plugging loopholes that might let bad actors escape the sandbox (a secure isolation zone that restricts program privileges). But it's not all restrictions: previously, if you allowlisted a "command with quotes" (like python -c "print(1)"), the system would fail to handle the spaces inside the quotes and wouldn't recognize it, forcing you to manually approve it anyway; this silly bug is now fixed, and the allowlist works as intended. Like corporate security: it now strictly forbids strangers from sneaking into the archives room, but the guards have finally learned how to read foreign visitor names with spaces in them, so they no longer turn away guests who already made a reservation.

原始 CHANGELOG

Original changelog介面更穩不崩潰,無頭模式不再洗畫面,外掛安裝更自動
Added submodule support for plugins installation. External plugin installation now automatically resolves and initializes Git submodules.
Optimized customizations permissions: Automatically grants read-only access to the builtin customizations directory, eliminating redundant permission prompts on startup.
Improved glamour parser error handling (like nested checkboxes inside list emphasis) and preventing it from crashing the TUI, falling back to raw text with a warning banner.
Updated bubbletea to v2.0.7: Resolves a potential TUI panic when terminal input is unavailable, fixes a data race in mouse handling within the Cursed Renderer, and corrects mouse release behavior under the Kitty Keyboard protocol.
Fixed a bug in headless print mode resumption (`--conversation`/`-c` `-p ...`) where the CLI would dump the entire historical conversation transcript instead of only printing the newly generated response.
Fixed a CPU compatibility issue on ARM64 devices without AES hardware support.
Original changelog沙盒安全大升級,帶引號的指令終於能順利放行
Hardened command execution permission checks by enforcing strict exact-match verification for PowerShell scripts, complex shell redirections ( `>` , `2>&1` ), and unparseable strings to prevent sandbox escapes.
Hardened sandbox execution by adding `.git` to the core list of dangerous paths, preventing unauthorized or destructive repository modifications.
Fixed a bug where allowlisted terminal commands with quoted arguments (e.g., `python -c "print(1)"`) would silently fail to match at runtime due to flawed whitespace tokenization.