Prism Vesicle v1.0.0

Prism Vesicle v1.0.0 — the first stable release.
Prism Vesicle v1.0.0 —— 首个正式版本。

What's new in 1.0.0 / 1.0.0 更新内容

• Stable channel. 1.0.0 publishes to npm's latest dist-tag: npm install -g prism-vesicle now installs the stable line. Earlier prerelease builds remain available through the next dist-tag and explicit versions. Sessions recorded under earlier bundled Harness baselines are not lost — they migrate explicitly through a two-stage review, and nothing is rebound silently.

• All four experimental surfaces from the prerelease line graduate to released: opt-in MCP tool-output persistence (mcpOutputPersistence, with the mcpOutputAutoTruncate sub-toggle, still opt-in by design), the branded Windows installer/uninstaller/Explorer assets, host-state terminal tab titles, and durable session titles — the last two verified on the installed Windows build by the 1.0.0-rc.2 closed group test.

• Windows Terminal working titles no longer jitter horizontally (#263). The working-state tab marker now rotates through same-block quadrant squares (◰◳◲◱) that keep a pixel-stable advance in the Windows Terminal tab strip; the idle · / working / input-required ! semantics, reduced-motion still frame, and hard no-write override are unchanged.

• 稳定渠道。 1.0.0 发布到 npm 的 latest dist-tag：npm install -g prism-vesicle 从此安装稳定线。更早的预发布构建仍可通过 next dist-tag 与显式版本号获取。旧基线 Harness 下记录的会话不会丢失——它们通过两段式审查显式迁移，不会有任何静默重绑。

• 预发布线的四个实验性能力全部转正：opt-in 的 MCP 工具输出落盘（mcpOutputPersistence 与 mcpOutputAutoTruncate 子开关，保持默认关闭）、品牌化 Windows 安装器/卸载器/Explorer 资产、终端标签页宿主状态投影、durable 会话标题——后两项已由 1.0.0-rc.2 封闭群测在安装版 Windows 构建上验证。

• Windows Terminal 工作状态标题不再横向抖动（#263）。 工作状态标记改为同块象限方块（◰◳◲◱）轮换，在 Windows Terminal 标签条中保持逐帧像素稳定的字宽；idle · / working / 等待输入 ! 三态语义、reduced-motion 静帧与强制不写开关不变。

From v0.1.0 to 1.0.0 / 从 v0.1.0 到 1.0.0

v0.1.0 was a single OpenAI-compatible tool loop. Since then Prism Vesicle has grown into a complete Agent Harness host and terminal workbench:

• Providers — OpenAI-compatible Chat, Anthropic Messages, and Gemini generateContent adapters with SSE streaming, plus explicit OpenAI Responses profiles: the official endpoint (HTTP/SSE/WebSocket with remote compaction), dated MiMo/DeepSeek compatibility tiers, and a fingerprint-level Codex V2 profile. Thinking-effort controls, an optional HTTP/WebSocket proxy, and cross-provider usage counters.
• Guarded tools and permissions — a path-guarded filesystem loop, a Tool Permission Runtime (MANUAL/INERTIA/MOMENTUM/YOLO), a confirmation gate, opt-in shell_exec with a bounded process runtime, and a dual-era Streamable HTTP MCP client with validated inline image results and opt-in output persistence.
• Durable sessions — append-only transcripts, portable /compact checkpoints, opt-in automatic compaction, rewind with per-turn file checkpoints, and any-depth horizontal candidate branching where the disk always matches the selected candidate.
• The TUI — a two-page shell (Chat / Workspace) with a file tree, read-only viewer, editing kernel, file management, and external-editor handoff; day/night themes; durable session titles mirrored to the terminal tab.
• The Harness layer — versioned Harness Packs with a verified bundled V10 baseline and offline managed-pack lifecycle; the Stage consumer narrative engine; and the Output Quality Guard with deterministic findings and durable rewrite decisions.
• Agent Skills — a full runtime: four-scope discovery, immutable versioned store, repository installation, model-visible activation with resources and scripts, and bundled first-party Skills (vesicle-docs, skillify, novel-outline-v3, update-config).
• Web — Tavily host tools plus provider-native built-in search on supported Gemini, OpenAI Responses, and DeepSeek models.
• Distribution — an npm package with a precompiled TUI entry, standalone Linux/Windows binaries, and a guided per-user Windows installer.

v0.1.0 只是一个 OpenAI 兼容的工具循环。此后 Prism Vesicle 成长为完整的 Agent Harness 宿主与终端工作台：

• 供应商 — OpenAI 兼容 Chat、Anthropic Messages、Gemini generateContent 三协议适配器（SSE 流式），以及显式 OpenAI Responses 档案：官方端点（HTTP/SSE/WebSocket 与远程压缩）、带日期的 MiMo/DeepSeek 兼容档、指纹级 Codex V2 档。思考力度控制、可选 HTTP/WebSocket 代理、跨供应商用量计数。
• 受守卫的工具与权限 — 路径守卫的文件系统工具环、工具权限运行时（MANUAL/INERTIA/MOMENTUM/YOLO）、确认闸门、opt-in 的 shell_exec（有界进程运行时），以及双时代 Streamable HTTP MCP 客户端（校验过的内联图片结果 + opt-in 输出落盘）。
• 持久会话 — 追加式转录、可移植 /compact 检查点、opt-in 自动压缩、带逐轮文件检查点的回退，以及任意深度的横向候选分支——磁盘始终与所选候选一致。
• TUI — 双页外壳（Chat / Workspace）：文件树、只读查看器、编辑内核、文件管理、外置编辑器交接；日/夜主题；投影到终端标签页的 durable 会话标题。
• Harness 层 — 版本化 Harness Pack（经校验的内置 V10 基线 + 离线托管包生命周期）；Stage 消费叙事引擎；输出质量守卫（确定性 finding 与持久化重写决策）。
• Agent Skills — 完整运行时：四域发现、不可变版本化存储、仓库安装、模型可见的激活（资源与脚本），以及内置第一方 Skill（vesicle-docs、skillify、novel-outline-v3、update-config）。
• Web — Tavily 宿主工具，以及受支持 Gemini、OpenAI Responses 与 DeepSeek 模型上的供应商原生内置搜索。
• 分发 — 预编译 TUI 入口的 npm 包、Linux/Windows 独立二进制、引导式按用户 Windows 安装器。

---

Windows 制品未签名：下载后请以 SHA256SUMS.txt 核对；政策详情见 Code Signing Policy。
Windows artifacts are unsigned: verify downloads against SHA256SUMS.txt; see the Code Signing Policy.

Full Changelog: v1.0.0-rc.1...v1.0.0

Prism Vesicle v1.0.0-rc.1

Release candidate channel and known limits / RC 频道与已知限制

1.0.0-rc.1 is a release candidate published to npm's next dist-tag. The latest dist-tag intentionally keeps tracking the newest beta, so npm install -g prism-vesicle continues to install the beta line; install the candidate explicitly with npm install -g prism-vesicle@next or by pinning 1.0.0-rc.1. Release candidates are stabilization builds for early testing and may still change before the stable release.

1.0.0-rc.1 是发布候选 (RC),发布到 npm 的 next dist-tag。latest dist-tag 会有意继续跟随最新 Beta,因此 npm install -g prism-vesicle 仍会安装 Beta 线;请使用 npm install -g prism-vesicle@next 或固定 1.0.0-rc.1 来显式安装候选版本。发布候选是面向早期测试的稳定化构建,在稳定版发布前仍可能调整。

Provider-native search is explicit and provider-scoped: /websearch on sends queries to the selected provider without a per-call tool approval, and is admitted only for configured Gemini generateContent, OpenAI Responses openai-public, and deepseek-subset-2026-08-19 models with capabilities.builtinWebSearch. Citations are optional provider behavior. Existing deepseek-subset-2026-07-31 configurations are not migrated automatically and remain search-disabled until changed deliberately. The applicable OpenAI, DeepSeek, Gemini, and Tavily dogfood evidence is dated 2026-08-20; opt-in real-endpoint suites report missing prerequisites as unavailable, never passed.

供应商原生搜索必须显式开启且受供应商范围限制:/websearch on 会将查询发送到当前供应商,不会逐次弹出工具批准;仅在模型声明 capabilities.builtinWebSearch 且使用已支持的 Gemini generateContent、OpenAI Responses openai-public 或 deepseek-subset-2026-08-19 时可用。引用由供应商选择是否返回。现有 deepseek-subset-2026-07-31 配置不会自动迁移,必须主动修改后才能使用搜索。适用的 OpenAI、DeepSeek、Gemini 与 Tavily dogfood 证据日期为 2026-08-20;可选真实端点测试在前置条件缺失时记为不可用,不计为通过。

MCP resource, audio, URL/link, and unknown result kinds remain deferred: Vesicle omits them without auto-fetch or prompt injection. See STATUS.md and Issue #177 for the current boundary.

MCP resource、audio、URL/link 与未知结果类型仍处于延后状态:Vesicle 会忽略它们,不自动抓取,也不注入提示。当前边界见 STATUS.md 与 Issue #177。

Windows code-signing status / Windows 代码签名状态

The Windows executable and installer in 1.0.0-rc.1 are not Authenticode-signed. Windows signing is deferred until the project has a stronger basis for a signing provider, with no version deadline. Download only from this official GitHub Release and verify the file against SHA256SUMS.txt. Do not disable Windows security features globally.

1.0.0-rc.1 中的 Windows 可执行文件和安装器没有 Authenticode 签名。Windows 签名推迟到项目具备引入签名服务的条件后再考虑，不设版本截止期限。请只从本 GitHub Release 官方页面下载，并使用 SHA256SUMS.txt 核对文件；不要在系统范围内关闭 Windows 安全功能。

See the Code Signing Policy / 参见代码签名政策。

What's Changed

• chore(release): forward-sync v1.0.0-beta.2 to develop by @3aKHP in #247
• test(support): skip host-incapable fixtures by capability probe by @3aKHP in #248
• fix(skills): harden SQLite index lock contention by @3aKHP in #249
• fix(runtime): stabilize Windows contracts and tests by @3aKHP in #250
• fix(skills): unify SQLite mutex release semantics by @3aKHP in #253
• feat(windows): add branded distribution resources by @3aKHP in #255
• feat(tui): mirror session titles to terminal tabs by @3aKHP in #256
• fix(session): harden title generation lifecycle by @3aKHP in #257
• fix(tui): complete built-in command arguments by @3aKHP in #258
• fix(session): stabilize title generation ownership by @3aKHP in #259
• feat(harness): adopt public 10.3.3 pack by @3aKHP in #260
• feat(tui): implement Terminal Title B Lane by @3aKHP in #261
• fix(release): stabilize Windows dogfood runtime by @3aKHP in #262
• release: v1.0.0-rc.1 by @3aKHP in #264

Full Changelog: v1.0.0-beta.2...v1.0.0-rc.1

Prism Vesicle v1.0.0-beta.2

Beta channel and known limits / Beta 频道与已知限制

npm's latest dist-tag intentionally tracks the newest beta during the beta line, so npm install -g prism-vesicle installs 1.0.0-beta.2 once publication completes. Pin an explicit older version to remain on an alpha build. This policy will be reconsidered before an RC or stable 1.0.0 release.

Beta 阶段中,npm 的 latest dist-tag 会有意跟随最新 Beta,因此发布完成后 npm install -g prism-vesicle 会安装 1.0.0-beta.2。如需继续停留在 Alpha 构建,请显式固定旧版本。进入 RC 或稳定 1.0.0 前会重新评估该策略。

Provider-native search is explicit and provider-scoped: /websearch on sends queries to the selected provider without a per-call tool approval, and is admitted only for configured Gemini generateContent, OpenAI Responses openai-public, and deepseek-subset-2026-08-19 models with capabilities.builtinWebSearch. Citations are optional provider behavior. Existing deepseek-subset-2026-07-31 configurations are not migrated automatically and remain search-disabled until changed deliberately. The applicable OpenAI, DeepSeek, Gemini, and Tavily dogfood evidence is dated 2026-08-20; opt-in real-endpoint suites report missing prerequisites as unavailable, never passed.

供应商原生搜索必须显式开启且受供应商范围限制:/websearch on 会将查询发送给当前供应商,不会逐次弹出工具批准;仅在模型声明 capabilities.builtinWebSearch 且使用已支持的 Gemini generateContent、OpenAI Responses openai-public 或 deepseek-subset-2026-08-19 时可用。引用由供应商选择是否返回。现有 deepseek-subset-2026-07-31 配置不会自动迁移,必须主动修改后才能使用搜索。适用的 OpenAI、DeepSeek、Gemini 与 Tavily dogfood 证据日期为 2026-08-20;可选真实端点测试在前置条件缺失时记为不可用,不计为通过。

MCP resource, audio, URL/link, and unknown result kinds remain deferred: Vesicle omits them without auto-fetch or prompt injection. See STATUS.md and Issue #177 for the current boundary.

MCP resource、audio、URL/link 与未知结果类型仍处于延后状态:Vesicle 会忽略它们,不自动抓取,也不注入提示。当前边界见 STATUS.md 与 Issue #177。

Windows code-signing status / Windows 代码签名状态

The Windows executable and installer in 1.0.0-beta.2 are not Authenticode-signed. Windows signing is deferred until the project has a stronger basis for a signing provider, with no version deadline. Download only from this official GitHub Release and verify the file against SHA256SUMS.txt. Do not disable Windows security features globally.

1.0.0-beta.2 中的 Windows 可执行文件和安装器没有 Authenticode 签名。Windows 签名推迟到项目具备引入签名服务的条件后再考虑，不设版本截止期限。请只从本 GitHub Release 官方页面下载，并使用 SHA256SUMS.txt 核对文件；不要在系统范围内关闭 Windows 安全功能。

See the Code Signing Policy / 参见代码签名政策。

What's Changed

• chore(release): forward-sync v1.0.0-beta.1 to develop by @3aKHP in #236
• docs(readme): adopt compact brand masthead by @3aKHP in #237
• fix(tools): surface delete/move mutations via bundled Harness 10.3.0-alpha.2 by @3aKHP in #240
• feat(session): explicit Harness migration with offline preflight by @3aKHP in #241
• fix(session): splice indeterminate process results next to their carrier by @3aKHP in #244
• fix(providers): keep gemini_part thinking blocks across session reload by @3aKHP in #245
• release: v1.0.0-beta.2 by @3aKHP in #246

Full Changelog: v1.0.0-beta.1...v1.0.0-beta.2

Prism Vesicle v1.0.0-beta.1

Beta channel and known limits / Beta 频道与已知限制

npm's latest dist-tag intentionally tracks the newest beta during the beta line, so npm install -g prism-vesicle installs 1.0.0-beta.1 once publication completes. Pin an explicit older version to remain on an alpha build. This policy will be reconsidered before an RC or stable 1.0.0 release.

Beta 阶段中,npm 的 latest dist-tag 会有意跟随最新 Beta,因此发布完成后 npm install -g prism-vesicle 会安装 1.0.0-beta.1。如需继续停留在 Alpha 构建,请显式固定旧版本。进入 RC 或稳定 1.0.0 前会重新评估该策略。

Provider-native search is explicit and provider-scoped: /websearch on sends queries to the selected provider without a per-call tool approval, and is admitted only for configured Gemini generateContent, OpenAI Responses openai-public, and deepseek-subset-2026-08-19 models with capabilities.builtinWebSearch. Citations are optional provider behavior. Existing deepseek-subset-2026-07-31 configurations are not migrated automatically and remain search-disabled until changed deliberately. The applicable OpenAI, DeepSeek, Gemini, and Tavily dogfood evidence is dated 2026-08-20; opt-in real-endpoint suites report missing prerequisites as unavailable, never passed.

供应商原生搜索必须显式开启且受供应商范围限制:/websearch on 会将查询发送给当前供应商,不会逐次弹出工具批准;仅在模型声明 capabilities.builtinWebSearch 且使用已支持的 Gemini generateContent、OpenAI Responses openai-public 或 deepseek-subset-2026-08-19 时可用。引用由供应商选择是否返回。现有 deepseek-subset-2026-07-31 配置不会自动迁移,必须主动修改后才能使用搜索。适用的 OpenAI、DeepSeek、Gemini 与 Tavily dogfood 证据日期为 2026-08-20;可选真实端点测试在前置条件缺失时记为不可用,不计为通过。

MCP resource, audio, URL/link, and unknown result kinds remain deferred: Vesicle omits them without auto-fetch or prompt injection. See STATUS.md and Issue #177 for the current boundary.

MCP resource、audio、URL/link 与未知结果类型仍处于延后状态:Vesicle 会忽略它们,不自动抓取,也不注入提示。当前边界见 STATUS.md 与 Issue #177。

Windows code-signing status / Windows 代码签名状态

The Windows executable and installer in 1.0.0-beta.1 are not Authenticode-signed. Windows signing is deferred until the project has a stronger basis for a signing provider, with no version deadline. Download only from this official GitHub Release and verify the file against SHA256SUMS.txt. Do not disable Windows security features globally.

1.0.0-beta.1 中的 Windows 可执行文件和安装器没有 Authenticode 签名。Windows 签名推迟到项目具备引入签名服务的条件后再考虑，不设版本截止期限。请只从本 GitHub Release 官方页面下载，并使用 SHA256SUMS.txt 核对文件；不要在系统范围内关闭 Windows 安全功能。

See the Code Signing Policy / 参见代码签名政策。

What's Changed

• chore: back-merge v1.0.0-alpha.10 release into develop by @3aKHP in #216
• feat(mcp): add line-preserving add-mcp config writer and CLI by @3aKHP in #217
• feat(mcp): add remove-mcp command and complete #194 by @3aKHP in #218
• fix(tui): honor backslash escapes in markdown preprocessing by @3aKHP in #220
• fix(tui): conceal markdown backslash escapes via interim 0.4.3 worker patch by @3aKHP in #221
• feat(tui): adopt the self-maintained OpenTUI fork runtime (@3aKHP 0.5.3-zv6) by @3aKHP in #222
• fix(providers): keep Gemini image tool results out of function-response Contents by @3aKHP in #227
• test(skills): classify cross-process lock-test flakes and prove worker blocking by @3aKHP in #228
• feat(web): built-in web search core — toggle, config, session records (#225 slice 1) by @3aKHP in #229
• feat(web): built-in web search on openai-responses profiles (#225 slice 2) by @3aKHP in #230
• feat(web): built-in web search on Gemini generateContent by @3aKHP in #231
• fix(config): preserve provider registry source edits by @3aKHP in #233
• fix(tui): isolate shell tests from startup splash by @3aKHP in #234
• release: v1.0.0-beta.1 readiness by @3aKHP in #235

Full Changelog: v1.0.0-alpha.10...v1.0.0-beta.1

Prism Vesicle v1.0.0-alpha.10

Windows code-signing status / Windows 代码签名状态

The Windows executable and installer in 1.0.0-alpha.10 are not Authenticode-signed. Windows signing is deferred until the project has a stronger basis for a signing provider, with no version deadline. Download only from this official GitHub Release and verify the file against SHA256SUMS.txt. Do not disable Windows security features globally.

1.0.0-alpha.10 中的 Windows 可执行文件和安装器没有 Authenticode 签名。Windows 签名推迟到项目具备引入签名服务的条件后再考虑，不设版本截止期限。请只从本 GitHub Release 官方页面下载，并使用 SHA256SUMS.txt 核对文件；不要在系统范围内关闭 Windows 安全功能。

See the Code Signing Policy / 参见代码签名政策。

What's Changed

• fix(skills): decouple script permissions from shell exec by @3aKHP in #190
• feat(skills): add update-config Skill and vesicle config CLI surface by @3aKHP in #191
• fix(skills): consume VESICLE_HOST_CONFIG_DIR and mask .env comment secrets by @3aKHP in #192
• feat(cli): extend update-config provider and model management by @3aKHP in #193
• refactor(config): single-owner write primitives and schema validation by @3aKHP in #195
• refactor(scripts): reorganize scripts/ into build/check/smoke subdirectories by @3aKHP in #196
• feat(claude-code): add vesicle-cr-reviewer Independent CR subagent by @3aKHP in #197
• feat(claude-code): add Tier 2 deep-cr multi-agent review by @3aKHP in #198
• fix(providers): codex-http-relay relay compatibility (terminal subset + service_tier) by @3aKHP in #199
• docs(responses): record openai-public real-provider gate pass (#187) by @3aKHP in #200
• feat(providers): promote codex-beta to a first-class profile; fix WS-only downgrade by @3aKHP in #201
• feat(assets): bundle harness 10.2.1 by @3aKHP in #203
• feat(session): regenerate turns as switchable horizontal candidates (#88) by @3aKHP in #204
• fix(tools): unify directory discovery for #205/#206 by @3aKHP in #207
• fix(assets): pin v10.3 harness to merged NN source by @3aKHP in #208
• feat(providers): admit deepseek-v4-pro in the dated DeepSeek Responses subset by @3aKHP in #210
• feat(session): per-candidate file coexistence for #88 Phase 2 by @3aKHP in #211
• fix(tui): exit cleanly on second Ctrl+C under bun run dev by @3aKHP in #212
• feat: any-depth candidate tree with full-manifest file switching by @3aKHP in #213
• fix: cancel permission continuations and busy-mode Esc interrupt by @3aKHP in #215
• release: v1.0.0-alpha.10 readiness by @3aKHP in #214

Full Changelog: v1.0.0-alpha.9...v1.0.0-alpha.10

Prism Vesicle v1.0.0-alpha.9

Windows code-signing status / Windows 代码签名状态

The Windows executable and installer in 1.0.0-alpha.9 are not Authenticode-signed. Windows signing is deferred until the project has a stronger basis for a signing provider, with no version deadline. Download only from this official GitHub Release and verify the file against SHA256SUMS.txt. Do not disable Windows security features globally.

1.0.0-alpha.9 中的 Windows 可执行文件和安装器没有 Authenticode 签名。Windows 签名推迟到项目具备引入签名服务的条件后再考虑，不设版本截止期限。请只从本 GitHub Release 官方页面下载，并使用 SHA256SUMS.txt 核对文件；不要在系统范围内关闭 Windows 安全功能。

See the Code Signing Policy / 参见代码签名政策。

What's Changed

• chore(release): forward-sync v1.0.0-alpha.8 by @3aKHP in #157
• refactor(tui): extract workspace tree owner and domain root (W1) by @3aKHP in #159
• refactor(tui): extract workspace buffer owner (W2) by @3aKHP in #160
• refactor(tui): extract file-operation and validation owners (W3) by @3aKHP in #161
• refactor(tui): extract external-editor owner and workspace input router (W4) by @3aKHP in #162
• refactor(tui): complete workspace directory and thin the facade (W5) by @3aKHP in #163
• refactor(tui): extract skill session-activation owner (T1) by @3aKHP in #164
• refactor(tui): split turn options into named domain ports (T2) by @3aKHP in #165
• refactor(tui): split command context into named domain ports (T3) by @3aKHP in #166
• refactor(skills): split CLI into domain command modules (S1) by @3aKHP in #167
• refactor(skills): split source acquisition into boundary modules (S2) by @3aKHP in #168
• refactor(skills): split model-visible tools into boundary owners (S3) by @3aKHP in #169
• refactor(agent-loop): extract mid-turn compaction owner (A1) by @3aKHP in #170
• fix(tui): repair light-theme selection contrast by @3aKHP in #171
• docs(workflow): add audit database drift response plan by @3aKHP in #173
• feat(mcp): support multimodal tool results by @3aKHP in #176
• feat(mcp): dual-era Streamable HTTP MCP client (#174) by @3aKHP in #178
• fix(mcp): Bot Review Blocking + Should-fix on #178 by @3aKHP in #180
• fix(checkpoint): exclude scratch tmp/ from rewind checkpoints (#137B slice 0) by @3aKHP in #181
• feat(mcp): opt-in MCP tool-output persistence (#137B slice 1) by @3aKHP in #182
• feat(mcp): MCP output auto-truncate + bounded read_file + grep cap (#137B slice 2) by @3aKHP in #183
• feat(skills): bundle novel-outline-v3 first-party Skill by @3aKHP in #184
• fix(skills): host-inject Skill tools, decoupling from Harness profiles by @3aKHP in #185
• feat(tools): grep_files output modes, context lines, and output budget by @3aKHP in #186
• release: 1.0.0-alpha.9 by @3aKHP in #188

Full Changelog: v1.0.0-alpha.8...v1.0.0-alpha.9

Prism Vesicle v1.0.0-alpha.8

Windows code-signing status / Windows 代码签名状态

The Windows executable and installer in 1.0.0-alpha.8 are not Authenticode-signed. Windows signing is deferred until the project has a stronger basis for a signing provider, with no version deadline. Download only from this official GitHub Release and verify the file against SHA256SUMS.txt. Do not disable Windows security features globally.

1.0.0-alpha.8 中的 Windows 可执行文件和安装器没有 Authenticode 签名。Windows 签名推迟到项目具备引入签名服务的条件后再考虑，不设版本截止期限。请只从本 GitHub Release 官方页面下载，并使用 SHA256SUMS.txt 核对文件；不要在系统范围内关闭 Windows 安全功能。

See the Code Signing Policy / 参见代码签名政策。

What's Changed

• fix(skills): initialize full session identity before first /skill activation (#131) by @3aKHP in #132
• fix(agent-loop): recover malformed tool arguments (#133) by @3aKHP in #138
• fix(tui): resolve image paste numbering and workspace routing (#134) by @3aKHP in #139
• fix(tui): route Workspace text paste to the editor by @3aKHP in #140
• feat(tui): native line cursor for PromptComposer (#136) by @3aKHP in #141
• test(providers): freeze Responses conformance profile by @3aKHP in #142
• feat(providers): add opaque state commit barrier by @3aKHP in #143
• feat(providers): add Responses HTTP and SSE baseline by @3aKHP in #144
• feat(providers): add Responses WebSocket lifecycle by @3aKHP in #145
• feat(providers): add dual Responses compaction by @3aKHP in #146
• feat(providers): expose Responses compatibility tiers by @3aKHP in #147
• fix(providers): align real Responses acceptance by @3aKHP in #148
• fix(providers): accept empty official reasoning content by @3aKHP in #149
• Provider proxy (#150) + DeepSeek Responses subset by @3aKHP in #152
• feat(tui): Esc interrupt now owns the exact FIFO head and submits it once after durable rebuild (#135) by @3aKHP in #153
• feat(tools): add project tmp scratch root by @3aKHP in #154
• feat(skills): bundle skillify workflow with create-only draft publication (#127) by @3aKHP in #155
• release: 1.0.0-alpha.8 by @3aKHP in #156

Full Changelog: v1.0.0-alpha.7...v1.0.0-alpha.8

Prism Vesicle v1.0.0-alpha.7

Windows code-signing status / Windows 代码签名状态

The Windows executable and installer in 1.0.0-alpha.7 are not Authenticode-signed. Windows signing is deferred until the project has a stronger basis for a signing provider, with no version deadline. Download only from this official GitHub Release and verify the file against SHA256SUMS.txt. Do not disable Windows security features globally.

1.0.0-alpha.7 中的 Windows 可执行文件和安装器没有 Authenticode 签名。Windows 签名推迟到项目具备引入签名服务的条件后再考虑，不设版本截止期限。请只从本 GitHub Release 官方页面下载，并使用 SHA256SUMS.txt 核对文件；不要在系统范围内关闭 Windows 安全功能。

See the Code Signing Policy / 参见代码签名政策。

What's Changed

• chore(release): sync v1.0.0-alpha.5 to develop by @3aKHP in #96
• fix(tui): harden workspace file safety by @3aKHP in #97
• Surface classified provider failures and transport retries by @3aKHP in #100
• fix(tui): keep light-theme code blocks readable by @3aKHP in #103
• fix: provider-retry visibility for non-main calls + failed-user-turn reconciliation (#101, #102) by @3aKHP in #104
• chore(release): forward-sync v1.0.0-alpha.6 by @3aKHP in #106
• feat(theme): four-value preference, project persistence, launch flags (#85, #86, #87) by @3aKHP in #108
• feat(session): execution identity + compact-checkpoint-v1 foundation (#107 PR1) by @3aKHP in #109
• feat(compact): portable /compact checkpoint + post-compact Hero fix (#107 PR2) by @3aKHP in #110
• feat(compact): context budget evaluator + pre-turn auto-compaction (#107 PR3) by @3aKHP in #112
• feat(compact): mid-turn auto-compaction, truthful /context, lifecycle, docs (#107 PR4) by @3aKHP in #113
• fix(compact): harden automatic compaction boundaries by @3aKHP in #114
• feat(quality): state-aware /quality flow, red Rewrite confirmation, v2 dormant profile by @3aKHP in #116
• feat(skills): Phase 0 runtime — format, inventory, Skill Store by @3aKHP in #117
• docs: split dev STYLE contracts and enforce Markdown prose-wrap policy by @3aKHP in #119
• fix(tui): Workspace status indicator — ownership, freshness, honest hints, 80-col width (#118) by @3aKHP in #120
• docs(dev): internal/public documentation cross-domain normalization by @3aKHP in #121
• feat(skills): Phase 1 runtime — repository installation and lifecycle by @3aKHP in #123
• feat(skills): Phase 2 runtime — activation, resources, scripts, /skill command by @3aKHP in #125
• feat(skills): Phase 3 authoring and project scope by @3aKHP in #126
• fix(validators): enforce deterministic artifact structure by @3aKHP in #128
• feat(skills): host-bundled discovery and first-party vesicle-docs by @3aKHP in #129
• release: 1.0.0-alpha.7 by @3aKHP in #130

Full Changelog: v1.0.0-alpha.6...v1.0.0-alpha.7

Prism Vesicle v1.0.0-alpha.6

Windows code-signing status / Windows 代码签名状态

The Windows executable and installer in 1.0.0-alpha.6 are not Authenticode-signed. Windows signing is deferred until the project has a stronger basis for a signing provider, with no version deadline. Download only from this official GitHub Release and verify the file against SHA256SUMS.txt. Do not disable Windows security features globally.

1.0.0-alpha.6 中的 Windows 可执行文件和安装器没有 Authenticode 签名。Windows 签名推迟到项目具备引入签名服务的条件后再考虑，不设版本截止期限。请只从本 GitHub Release 官方页面下载，并使用 SHA256SUMS.txt 核对文件；不要在系统范围内关闭 Windows 安全功能。

See the Code Signing Policy / 参见代码签名政策。

What's Changed

• fix(npm): ship a clean precompiled TUI runtime by @3aKHP in #105

Full Changelog: v1.0.0-alpha.5...v1.0.0-alpha.6

Prism Vesicle v1.0.0-alpha.5

Windows code-signing status / Windows 代码签名状态

The Windows executable and installer in 1.0.0-alpha.5 are not Authenticode-signed. Windows signing is deferred until the project has a stronger basis for a signing provider, with no version deadline. Download only from this official GitHub Release and verify the file against SHA256SUMS.txt. Do not disable Windows security features globally.

1.0.0-alpha.5 中的 Windows 可执行文件和安装器没有 Authenticode 签名。Windows 签名推迟到项目具备引入签名服务的条件后再考虑，不设版本截止期限。请只从本 GitHub Release 官方页面下载，并使用 SHA256SUMS.txt 核对文件；不要在系统范围内关闭 Windows 安全功能。

See the Code Signing Policy / 参见代码签名政策。

What's Changed

• chore(release): sync v1.0.0-alpha.4 to develop by @3aKHP in #83
• chore(deps): patch brace-expansion audit finding by @3aKHP in #92
• feat(tui): two-page shell + Workspace workbench (Scope B) by @3aKHP in #90
• chore(release): prepare v1.0.0-alpha.5 by @3aKHP in #94

Full Changelog: v1.0.0-alpha.4...v1.0.0-alpha.5