Prayu Desktop v0.1.0-rc.1

What's Changed

• docs: add Prayu security policy by @pppolf in #2
• docs: add contributing guide by @pppolf in #3
• Add tailored GitHub issue forms by @pppolf in #4
• ci: pin GitHub Actions by commit SHA by @pppolf in #5
• fix: refresh run details after durable events by @pppolf in #6
• fix: reset Run-scoped UI state on selection changes by @pppolf in #7
• test: normalize macOS temporary paths by @pppolf in #8
• fix: reject unknown Run execution statuses by @pppolf in #9
• fix: use fresh Run state in Session workspace by @pppolf in #10
• ci: use current Go 1.25 patch consistently by @pppolf in #11
• ci: configure dependency updates by @pppolf in #12
• ci: verify and refresh embedded WASI provenance by @pppolf in #13
• fix: support every configured model harness by @pppolf in #14
• ci: enforce dependency integrity by @pppolf in #15
• test: isolate Session composer locale state by @pppolf in #30
• fix: contain focus in modal dialogs by @pppolf in #29
• fix: make Run tabs keyboard accessible by @pppolf in #28
• fix: stabilize Run and Session pagination by @pppolf in #27
• chore(deps): bump clap from 4.6.3 to 4.6.6 in /analyzers in the rust-minor-and-patch group by @dependabot[bot] in #16
• chore(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 by @dependabot[bot] in #18
• chore(deps): bump actions/setup-node from 6.5.0 to 7.0.0 by @dependabot[bot] in #20
• chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #21
• chore(deps): bump the go-minor-and-patch group with 6 updates by @dependabot[bot] in #22
• chore(deps): bump the web-minor-and-patch group in /web with 11 updates by @dependabot[bot] in #23
• chore(deps-dev): bump @testing-library/jest-dom from 6.9.1 to 7.0.0 in /web by @dependabot[bot] in #26
• feat(sandbox)：持久化 Docker 容器生命周期所有权、代际租约与崩溃恢复（#38） by @Qiyuanqiii in #58
• feat: add macOS Desktop portable build (D0-Mac) by @pppolf in #59
• feat(provider): 接入 OpenAI 兼容模型服务与工具流式协议 by @Qiyuanqiii in #60
• feat(sandbox): 只读输入、有界日志与原子 Artifact 输出（Issue #39） by @pppolf in #61
• feat(sandbox)：Docker 产品准入、网络默认关闭与权限控制（#40） by @Qiyuanqiii in #62
• feat(provider)：Ollama 本地 Provider 与能力探测（#48） by @Qiyuanqiii in #63
• feat(runtime): 金额预算、价格快照与 Provider 资格诊断 by @Qiyuanqiii in #64
• test(analyzer): 宿主机低完整性令牌初始化限制的显式 opt-in 跳过 by @Qiyuanqiii in #65
• feat(agent): 结构化依赖等待、环检测与可恢复唤醒 by @Qiyuanqiii in #66
• feat(agent): 模型驱动的有界 child 任务调度 by @Qiyuanqiii in #67
• feat(ui): child 树渲染、每 child 预算列与 fan-out 执行历史/取消 by @Qiyuanqiii in #68
• fix(browser): 授予启动令牌完整权限以通过 WFP 生产验收 by @Qiyuanqiii in #69
• feat(ui): 价格快照、Docker 沙箱、Skill 安装与字段级投影补齐 by @Qiyuanqiii in #72
• feat(mcp): Go 控制平面的 MCP Server v1 by @Qiyuanqiii in #73
• feat(agent/ui): child 任务审阅控制面与 UI 补齐提升至 main（#70+#72） by @Qiyuanqiii in #74
• feat(browser): 新增 Safe Web readiness 收据（fail-closed 判定） by @Qiyuanqiii in #71
• feat(config): narrowing-only 的 .prayu 项目级配置 by @Qiyuanqiii in #76
• feat(skills): 签名 Skill 包、团队 Catalog 与固定 URL/Git 导入 by @Qiyuanqiii in #75
• feat(browser): Full CDP 调试通道与高度敏感权限隔离 by @Qiyuanqiii in #77
• feat(execution): 工作区沙箱内的一次性通用命令 Runner by @Qiyuanqiii in #78
• feat(git): typed 本地 Git 写工作流与变更审阅 by @Qiyuanqiii in #80
• test(desktop): Windows 测试矩阵文档、可复现脚本与 Win11 实机证据 by @Qiyuanqiii in #79
• feat(git): 远端 Git、Pull Request 与凭证/网络授权 by @Qiyuanqiii in #81
• feat(terminal): 持久 Debug 终端台账、有界审计与崩溃恢复 by @Qiyuanqiii in #82
• feat(release): 可复现 portable ZIP、SBOM、NOTICE 与校验和 by @Qiyuanqiii in #83
• feat(release): per-user MSIX 安装、签名与升级卸载生命周期 by @Qiyuanqiii in #84
• fix(release): 完成 portable ZIP 与 GitHub Release 闭环 by @Qiyuanqiii in #87

New Contributors

• @pppolf made their first contribution in #2
• @dependabot[bot] made their first contribution in #16

Full Changelog: https://github.com/Qiyuanqiii/CTF-CyberAgent-Workbench/commits/v0.1.0-rc.1