Ally v0.3.0

New Features

• Splash screen avatar: Startup animation now shows the Ally robot avatar with blinking and looking-around animations alongside the wordmark, with faster animation cycles tuned for the 3.6s splash duration
• AllowPrivateNetwork setting: New toggle in Settings → General to control SSRF protection for http_request and web_fetch. Defaults to enabled (allow intranet access) for internal development use

Bug Fixes

• Data race in goal mode: getActiveGoal now returns a heap copy instead of a raw pointer, preventing concurrent reads of mutable GoalState fields
• Ask cancel/submit race: pendingAsk now uses a cancelled flag under mutex, preventing user answers from being silently dropped when a run is cancelled
• remote_edit TOCTOU: Eliminated double SSH read in remoteEditOne; the backup read is now reused for editing, removing the time-of-check-to-time-of-use window
• SSRF protection: allowPrivateNetwork now defaults to true and is configurable via settings, rather than being hardcoded
• remote_run_command safety: Added 17 high-risk command pattern checks (mkfs, dd, shutdown, fork bomb, etc.) and shell parameter whitelist (bash/sh/zsh only)

Improvements

• Command safety regex precompilation: All 20+ regex patterns in checkCommandSafety are now package-level precompiled variables, eliminating per-call compilation overhead
• remote_create_file performance: Removed redundant post-write SSH read confirmation
• Error code consistency: remote_edit, remote_run_command, remote_delete_path, http_request, web_fetch, list_files, and readTextFile now all use structured codedToolError error codes
• run_command delete whitelist: git rm, docker rm, kubectl delete, npm remove and similar safe commands are no longer blocked by the delete command filter
• Goal creation guard: createGoal now rejects creating a new goal when an active goal already exists
• Todo validation: todo_write validates Status enum values (pending/in_progress/done) and non-empty titles
• Skill file size limit: Skill tool now enforces the 2MB file size limit on skill files
• Calculator nesting limit: calculate now enforces a 200-level nesting depth limit to prevent stack overflow
• remote_edit rollback: Rollback failures are now collected and reported instead of being silently ignored

Full Changelog: v0.2.0...v0.3.0

Ally v0.2.0

本次更新

• UI 根据系统语言自动使用中文或英文
• 完善 Anthropic Messages API 与工具调用支持
• 启动时自动检测新版本
• 修复 Wails 首次构建缺少 Vite 的问题
• 三个平台发行包继续内置 ripgrep 搜索工具

Full Changelog: v0.1.0...v0.2.0

Ally v0.1.0

Ally 的首个 GPLv3 公开版本。

• 支持 Windows、macOS 和 Linux
• 支持多种模型 Provider
• 内置 ripgrep 代码搜索
• 支持 MCP、Skills、多工作区、计划模式和定时任务

安装包由 GitHub Actions 自动构建并上传。