CC Port v0.5.4 Public Beta

CC Port v0.5.4 Public Beta

English release notes

CC Port v0.5.4 修复批量上传使用旧扫描结果判断冲突的问题，并为 Windows
原生符号链接、目录联接和 Claude Code 的 WSL 配置目录增加安全的资源发现与上传支持。

下载

• cc-port_0.5.4_windows_x64_setup.exe
• SHA256SUMS.txt

下载后请先核对 SHA-256，再运行安装器。不要下载或单独运行需要 sidecar 的原始桌面 EXE。

主要变化

• 打开“上传到仓库”对话框时会刷新远端快照并重新扫描本地实例。检查完成前只显示
  进度和取消入口，随后展示的本地、远端和整体状态全部来自本次计划。
• 本地存在而远端不存在的资源现在明确视为新增；只有两端都存在且内容或元数据不同时，
  才显示覆盖或重命名等冲突处理。
• 根级 Windows 原生符号链接和目录联接可以作为本地资源来源。CC Port 保留逻辑安装
  路径用于识别资源，解引用后生成普通文件快照，不会把链接或 reparse point 写入仓库。
• 下载目标是根级 Windows 原生悬空符号链接时，明确确认覆盖未接管目标后，CC Port
  只删除链接本身并写入普通内容，不会跟随或修改链接指向的位置。
• 上传计划及执行阶段都会校验链接类型、原始目标、reparse tag 和内容指纹；链接在确认后
  被重定向时，旧计划会失效。
• 所有已启用平台配置的 skills_dir、mcp_json 和 plugins_dir 都会参与本地扫描。
  将 Claude Code 配置指向 \\wsl.localhost\<发行版>\home\<用户>\... 后，普通 WSL
  路径中的 Skill、MCP 配置和内容型 Plugin 可以被发现、下载并进入上传计划。
• 资源内部的嵌套链接、悬空链接、循环链接、不可读取或未知重解析点会按单个资源阻断，
  不再让一个异常条目中断整次扫描。

Public Beta 限制

• 安装器尚未做 Authenticode 签名。Windows SmartScreen 可能显示“未知发布者”；请核对
  下载域名和 SHA256SUMS.txt 后，通过“更多信息”继续。
• 当前没有自动更新，仅正式提供 Windows 10/11 x64 桌面安装器。
• WSL 创建的 LX 符号链接无法由 Windows 桌面服务安全跟随，会阻断对应资源。请改用
  Windows 原生链接，或用复制模式安装资源。
• 下载到 WSL 目录的内容型 Claude Code Plugin 只完成文件同步，不会替 Claude Code
  注册或启用插件；仍需使用 Claude Code 自身的插件安装机制。
• Windsurf 和 OpenCode 平台预设仍标记为实验性。

升级

关闭正在执行的写操作后，直接运行 v0.5.4 安装器覆盖升级。保留本机状态目录可以继续
使用操作历史、所有权信息和备份。

反馈与安全问题

• 一般 Bug 和功能建议：GitHub Issues
• 安装与同步问题：故障排查
• 安全漏洞：使用仓库 Security 页面的私密漏洞报告，不要创建公开 Issue

---

CC Port v0.5.4 Public Beta

中文发布说明

CC Port v0.5.4 fixes stale local-state conflict decisions in batch uploads and
adds safe resource discovery and upload support for native Windows symbolic
links, directory junctions, and configured Claude Code directories in WSL.

Downloads

• cc-port_0.5.4_windows_x64_setup.exe
• SHA256SUMS.txt

Verify the SHA-256 before running the installer. Do not download or run the raw
desktop executable separately because it requires its packaged sidecar.

Changes

• Opening Upload to repository now refreshes the remote snapshot and rescans
  local instances. Until the check finishes, the dialog shows only progress and
  cancellation; all displayed local, remote, and overall states then come from
  that plan.
• A resource that exists locally but not remotely is now treated as an addition.
  Conflict choices such as overwrite or rename appear only when both sides exist
  and their content or metadata differs.
• A root-level native Windows symbolic link or directory junction can be a local
  resource source. CC Port retains the logical install path for identity, resolves
  the content, and writes only a regular-file snapshot to the repository.
• When a download target is a root-level dangling native Windows symlink, CC Port
  removes only that link and writes regular content after explicit unmanaged-target
  confirmation. It never follows or modifies the link target.
• The upload plan and apply stages both verify the link type, original target,
  reparse tag, and content fingerprint. Redirecting a link after confirmation
  invalidates the old plan.
• Local discovery now covers skills_dir, mcp_json, and plugins_dir for every
  enabled platform. After configuring Claude Code with
  \\wsl.localhost\<distribution>\home\<user>\... paths, regular WSL Skills, MCP
  configurations, and content Plugins can be discovered, downloaded, and added
  to an upload plan.
• Nested, dangling, cyclic, unreadable, and unknown reparse points block only the
  affected resource instead of aborting the entire local scan.

Public Beta limitations

• The installer is not Authenticode-signed. Windows SmartScreen may show an
  unknown-publisher warning; verify the download domain and SHA256SUMS.txt,
  then use More info to continue.
• Automatic updates are unavailable. Windows 10/11 x64 is the only officially
  distributed desktop platform.
• WSL-created LX symbolic links cannot be followed safely by the Windows desktop
  service and block the affected resource. Use a native Windows link or install
  the resource in copy mode.
• Syncing a content-style Claude Code Plugin into a WSL directory transfers its
  files but does not register or enable it in Claude Code. Use Claude Code's own
  plugin installation mechanism for activation.
• Windsurf and OpenCode presets remain experimental.

Upgrade

Finish any active write operation, then run the v0.5.4 installer over the
current installation. Keep the local state directory to preserve operation
history, ownership data, and backups.

Feedback and security

• General bugs and feature requests: GitHub Issues
• Installation and sync help: Troubleshooting
• Security vulnerabilities: use private vulnerability reporting on the
  repository's Security page; do not open a public issue.

CC Port v0.5.3 Public Beta

CC Port v0.5.3 Public Beta

English release notes

CC Port v0.5.3 为本地与远端内容不同的资源增加按需内容 diff。在决定上传或安装前，现在可以直接查看具体变化，不再只依赖 content-different 状态。

下载

• cc-port_0.5.3_windows_x64_setup.exe
• SHA256SUMS.txt

下载后请先核对 SHA-256，再运行安装器。不要下载或单独运行需要 sidecar 的原始桌面 EXE。

主要变化

• 资源详情中的 content-different 项新增“查看内容差异”入口。
• 以远端为基准，汇总本地新增、缺失和修改的文件，并按文件展示带高亮的 unified diff。
• 同一资源存在多个本地实例时，可切换要比较的平台实例。
• 比较按需、只读执行；二进制文件会明确标记，过大的文件或结果会安全截断并提示。

Public Beta 限制

• 安装器尚未做 Authenticode 签名。Windows SmartScreen 可能显示“未知发布者”；请核对下载域名和 SHA256SUMS.txt 后，通过“更多信息”继续。
• 当前没有自动更新，仅正式提供 Windows 10/11 x64 桌面安装器。
• Windsurf 和 OpenCode 平台预设仍标记为实验性。

升级

关闭正在执行的写操作后，直接运行 v0.5.3 安装器覆盖升级。保留本机状态目录可以继续使用操作历史、所有权信息和备份。

反馈与安全问题

• 一般 Bug 和功能建议：GitHub Issues
• 安装与同步问题：故障排查
• 安全漏洞：使用仓库 Security 页面的私密漏洞报告，不要创建公开 Issue

---

CC Port v0.5.3 Public Beta

中文发布说明

CC Port v0.5.3 adds on-demand content diffs for resources whose local and remote content differs. You can now inspect the actual changes before deciding whether to upload or install instead of relying on the content-different status alone.

Downloads

• cc-port_0.5.3_windows_x64_setup.exe
• SHA256SUMS.txt

Verify the SHA-256 before running the installer. Do not download or run the raw desktop executable separately because it requires its packaged sidecar.

Changes

• content-different items now offer View content diff in the resource details.
• With remote content as the baseline, CC Port summarizes files added locally, missing locally, or modified and shows a highlighted unified diff for each file.
• When a resource has multiple local instances, you can switch the platform instance being compared.
• Comparisons are read-only and computed on demand. Binary files are identified explicitly, and oversized files or results are safely truncated with a warning.

Public Beta limitations

• The installer is not Authenticode-signed. Windows SmartScreen may show an unknown-publisher warning; verify the download domain and SHA256SUMS.txt, then use More info to continue.
• Automatic updates are unavailable. Windows 10/11 x64 is the only officially distributed desktop platform.
• Windsurf and OpenCode presets remain experimental.

Upgrade

Finish any active write operation, then run the v0.5.3 installer over the current installation. Keep the local state directory to preserve operation history, ownership data, and backups.

Feedback and security

• General bugs and feature requests: GitHub Issues
• Installation and sync help: Troubleshooting
• Security vulnerabilities: use private vulnerability reporting on the repository's Security page; do not open a public issue.

CC Port v0.5.2 Public Beta

CC Port v0.5.2 Public Beta

English release notes

CC Port v0.5.2 增加 Cursor 原生 Prompt 命令支持，并收紧远端快照与文件式
资源的所有权边界。已有自定义平台的 Prompt 目标不会被静默迁移，私有资源仓库的
Prompt 存储路径保持不变。

下载

• cc-port_0.5.2_windows_x64_setup.exe
• SHA256SUMS.txt

下载后请先核对 SHA-256，再运行安装器。不要下载或单独运行需要 sidecar 的
原始桌面 EXE。

主要变化

• Cursor 预设现在把 Prompt 安装为全局自定义命令
  ~/.cursor/commands/<install-name>.md，并支持扫描、上传、下载和安装别名。
• 平台配置增加 prompts_dir。自定义平台未设置该字段时，继续使用原有的
  rules_dir/<install-name> 目标，不迁移现有配置。
• 私有资源仓库仍以 prompts/<name>/ 保存 Prompt。文件式目标只接受单个 Markdown
  文件，或目录根级恰好包含一个非符号链接 .md 文件的载荷；歧义载荷会在计划
  阶段阻断。
• CC Port 的内部 Git 工作树关闭宿主 core.autocrlf 并重写检出，避免相同的
  Cursor Prompt 被错误标记为 content-different。仓库自身的 .gitattributes
  和 clean/smudge filter 仍保持 Git 原生优先级。
• 文件式 Prompt 使用稳定的邻接 ownership sidecar；目标暂时是同名目录或操作失败
  时，内容与 sidecar 会纳入同一事务进行验证和回滚。

安全与隐私

• 远端资源快照不再复制或跟随内部格式标记符号链接，格式标记改为同目录原子替换。
• 快照中的 registry.yaml 必须是普通非符号链接文件；资源路径规范化后必须仍位于
  快照内，且路径组件不得包含符号链接。违反任一条件时会拒绝读取或安装。
• ownership marker 改为同目录原子替换；文件式 Prompt 下载完成前会重新验证完整
  resource_key ownership，marker 未持久化时回滚内容与 sidecar。

Public Beta 限制

• 安装器尚未做 Authenticode 签名。Windows SmartScreen 可能显示“未知发布者”；
  请核对下载域名和 SHA256SUMS.txt 后，通过“更多信息”继续。
• 受企业策略管理且禁止运行未签名应用的电脑不在当前支持范围。
• 当前没有自动更新。
• 仅正式提供 Windows 10/11 x64 桌面安装器。
• Windsurf 和 OpenCode 平台预设仍标记为实验性。

升级

关闭正在执行的写操作后，直接运行 v0.5.2 安装器覆盖升级。保留本机状态目录
可以继续使用操作历史、所有权信息和备份。

反馈与安全问题

• 一般 Bug 和功能建议：GitHub Issues
• 安装与同步问题：故障排查
• 安全漏洞：使用仓库 Security 页面的私密漏洞报告，不要创建公开 Issue

---

CC Port v0.5.2 Public Beta

中文发布说明

CC Port v0.5.2 adds native Cursor Prompt commands and tightens ownership
boundaries for remote snapshots and file-style resources. Existing custom
platform Prompt targets are not silently migrated, and Prompt storage in the
private resource repository remains unchanged.

Downloads

• cc-port_0.5.2_windows_x64_setup.exe
• SHA256SUMS.txt

Verify the SHA-256 before running the installer. Do not download or run the raw
desktop executable separately because it requires its packaged sidecar.

Changes

• The Cursor preset now installs Prompts as global custom commands at
  ~/.cursor/commands/<install-name>.md, with scanning, upload, download, and
  install-alias support.
• Platform configuration adds prompts_dir. Custom platforms without this
  field continue to use the existing rules_dir/<install-name> target and are
  not migrated.
• The private resource repository continues to store Prompts under
  prompts/<name>/. A file-style target accepts either one Markdown file or a
  directory with exactly one non-symlink root-level .md file; ambiguous
  payloads block the operation plan.
• CC Port disables the host core.autocrlf setting in internal Git worktrees
  and rewrites the checkout, preventing identical Cursor Prompts from being
  reported as content-different. Repository .gitattributes and clean/smudge
  filters keep their native Git precedence.
• File-style Prompts use a stable adjacent ownership sidecar. Content and the
  sidecar participate in the same verification and rollback transaction when
  the target is temporarily a same-name directory or an operation fails.

Security and privacy

• Remote resource snapshots no longer copy or follow a symlink at the reserved
  internal format marker, and the marker is replaced atomically in its own
  directory.
• Snapshot registry.yaml must be a regular non-symlink file. Normalized
  resource paths must remain inside the snapshot and contain no symlink
  components; any violation blocks reading or installation.
• Ownership markers are replaced atomically in their own directories.
  File-style Prompt downloads revalidate the full resource_key ownership
  before completion and roll back content and the sidecar if the marker is not
  persisted.

Public Beta limitations

• The installer is not Authenticode-signed. Windows SmartScreen may show an
  unknown-publisher warning; verify the download domain and SHA256SUMS.txt,
  then use More info to continue.
• Managed enterprise computers that prohibit unsigned applications are outside
  the current support scope.
• Automatic updates are unavailable.
• Windows 10/11 x64 is the only officially distributed desktop platform.
• Windsurf and OpenCode presets remain experimental.

Upgrade

Finish any active write operation, then run the v0.5.2 installer over the
current installation. Keep the local state directory to preserve operation
history, ownership data, and backups.

Feedback and security

• General bugs and feature requests: GitHub Issues
• Installation and sync help: Troubleshooting
• Security vulnerabilities: use private vulnerability reporting on the
  repository's Security page; do not open a public issue.

CC Port v0.5.1 Public Beta

CC Port v0.5.1 Public Beta

English release notes

CC Port v0.5.1 收紧首个公开测试版的发布、安全和文档契约，不改变 Registry
schema、桌面 API、MCP API 或资源同步语义。

下载

• cc-port_0.5.1_windows_x64_setup.exe
• SHA256SUMS.txt

下载后请先核对 SHA-256，再运行安装器。不要下载或单独运行需要 sidecar 的
原始桌面 EXE。

主要变化

• 新配置的默认资源仓库名改为 cc-port-resources；已有配置继续使用旧默认值，
  不迁移、不移动也不重命名现有仓库。
• 统一文档、Python 包描述和 CLI 帮助中的五类资源：
  Skill、MCP Server、Rule、Prompt 和 Plugin。
• 增加英文快速开始、故障排查和发布说明，并检查仓库内 Markdown 链接。
• 发布脚本验证九处版本一致性，并固定生成只含安装器和校验文件的人工上传目录。
• CI 对完整 Git 历史执行 Gitleaks，并验证正式 Windows 依赖图。

安全与隐私

• 将 serde_with 更新到 3.21.0，修复 GHSA-7gcf-g7xr-8hxj。
• Rust 发布构建重映射用户目录、Cargo/Rustup 和仓库路径。
• 打包后检查桌面 EXE 与 sidecar 的 UTF-8、UTF-16LE 和 UTF-16BE 内容，
  阻止构建用户名或源码绝对路径进入发布产物。
• glib 0.18.5 的 GHSA-wrw7-89jp-8q8g 仅存在于未正式发行的 Linux
  GTK/WebKit 目标图；Windows CI 验证它不进入 x86_64-pc-windows-msvc
  依赖图。正式支持 Linux 前必须升级该依赖。

Public Beta 限制

• 安装器尚未做 Authenticode 签名。Windows SmartScreen 可能显示“未知发布者”；
  请核对下载域名和 SHA256SUMS.txt 后，通过“更多信息”继续。
• 受企业策略管理且禁止运行未签名应用的电脑不在当前支持范围。
• 当前没有自动更新。
• 仅正式提供 Windows 10/11 x64 桌面安装器。
• Windsurf 和 OpenCode 平台预设仍标记为实验性。

升级

关闭正在执行的写操作后，直接运行 v0.5.1 安装器覆盖升级。保留本机状态目录
可以继续使用操作历史、所有权信息和备份。

反馈与安全问题

• 一般 Bug 和功能建议：GitHub Issues
• 安装与同步问题：故障排查
• 安全漏洞：使用仓库 Security 页面的私密漏洞报告，不要创建公开 Issue

---

CC Port v0.5.1 Public Beta

中文发布说明

CC Port v0.5.1 hardens the release, security, and documentation contracts of
the first public beta without changing the Registry schema, desktop API, MCP
API, or resource synchronization semantics.

Downloads

• cc-port_0.5.1_windows_x64_setup.exe
• SHA256SUMS.txt

Verify the SHA-256 before running the installer. Do not download or run the raw
desktop executable separately because it requires its packaged sidecar.

Changes

• New configurations now use cc-port-resources as the default resource
  repository name. Existing configurations keep the legacy default without
  moving or renaming anything.
• Documentation, Python package metadata, and CLI help consistently describe
  Skills, MCP servers, Rules, Prompts, and Plugins.
• English getting-started, troubleshooting, and release paths are available,
  with repository Markdown links validated in CI.
• The release script validates nine version declarations and creates a manual
  upload directory containing only the installer and checksum file.
• CI scans the complete Git history with Gitleaks and validates the supported
  Windows dependency graph.

Security and privacy

• serde_with is updated to 3.21.0 to fix GHSA-7gcf-g7xr-8hxj.
• Rust release builds remap the user, Cargo/Rustup, and repository paths.
• Packaged desktop and sidecar executables are checked as UTF-8, UTF-16LE, and
  UTF-16BE so build usernames and absolute source paths block a release.
• GHSA-wrw7-89jp-8q8g for glib 0.18.5 applies only to the unsupported Linux
  GTK/WebKit target graph. Windows CI verifies that it is absent from
  x86_64-pc-windows-msvc. Linux support requires upgrading it first.

Public Beta limitations

• The installer is not Authenticode-signed. Windows SmartScreen may show an
  unknown-publisher warning; verify the download domain and SHA256SUMS.txt,
  then use More info to continue.
• Managed enterprise computers that prohibit unsigned applications are outside
  the current support scope.
• Automatic updates are unavailable.
• Windows 10/11 x64 is the only officially distributed desktop platform.
• Windsurf and OpenCode presets remain experimental.

Upgrade

Finish any active write operation, then run the v0.5.1 installer over the
current installation. Keep the local state directory to preserve operation
history, ownership data, and backups.

Feedback and security

• General bugs and feature requests: GitHub Issues
• Installation and sync help: Troubleshooting
• Security vulnerabilities: use private vulnerability reporting on the
  repository's Security page; do not open a public issue.

CC Port v0.5.0 Public Beta

CC Port v0.5.0 Public Beta

CC Port 首个公开测试版。它通过用户自己的私有 Git 仓库，在 Codex、Claude Code、Cursor、Windsurf 和 OpenCode 之间盘点与同步 Skill、MCP、Rule、Prompt 和 Plugin。

下载

• cc-port_0.5.0_windows_x64_setup.exe
• SHA256SUMS.txt

下载后请先核对 SHA-256，再运行安装器。不要下载或单独运行需要 sidecar 的原始桌面 EXE。

系统要求

• Windows 10 或 Windows 11 x64。
• Git for Windows。
• Git Credential Manager。
• 一个由用户自行创建和控制的私有 GitHub 仓库。

安装器已经包含桌面应用和 Python sidecar；普通用户不需要安装 Python、Node.js 或 Rust。

主要能力

• 统一扫描和比较 Skill、MCP Server、Rule、Prompt 与 Plugin。
• 支持 Codex、Claude Code、Cursor、Windsurf 和 OpenCode 平台预设。
• 通过私有 Git 仓库保存资源登记、版本与跨设备快照。
• 写入前生成操作计划，并显示可执行、阻断和跳过项。
• 使用所有权检查、备份、目标锁、结果验证和失败回滚保护本地内容。
• 使用 Git Credential Manager 处理 GitHub HTTPS 凭据。
• 提供桌面 GUI、CLI 和 MCP Server 三种入口。

Public Beta 限制

• 安装器尚未代码签名。Windows SmartScreen 可能显示“未知发布者”；请核对下载域名和 SHA256SUMS.txt 后，通过“更多信息”继续。
• 当前没有自动更新。后续版本需要从 GitHub Releases 手动下载安装。
• 仅正式提供 Windows x64 桌面安装器；macOS 和 Linux 桌面发行尚未提供。
• Windsurf 和 OpenCode 平台预设仍标记为实验性。
• 部分历史恢复和维护能力仍只在 CLI 或 Desktop API 中提供。

升级

v0.5.0 是首个 Public Beta。已有源码安装或开发构建可以直接运行安装器；安装前请完成未结束的写操作，并保留本机状态目录，以继续使用操作历史和备份。

反馈与安全问题

• 一般 Bug 和功能建议：GitHub Issues
• 安装与同步问题：故障排查
• 安全漏洞：使用仓库 Security 页面的私密漏洞报告，不要创建公开 Issue

---

CC Port v0.5.0 Public Beta

CC Port's first public beta inventories and synchronizes Skills, MCP servers,
Rules, Prompts, and Plugins across Codex, Claude Code, Cursor, Windsurf, and
OpenCode through a private Git repository controlled by the user.

Downloads

• cc-port_0.5.0_windows_x64_setup.exe
• SHA256SUMS.txt

Verify the SHA-256 before running the installer. Do not download or run the raw
desktop executable separately because it requires its packaged sidecar.

Requirements

• Windows 10 or Windows 11 x64.
• Git for Windows.
• Git Credential Manager.
• A private GitHub repository created and controlled by the user.

The installer includes the desktop app and Python sidecar. End users do not
need Python, Node.js, or Rust.

Highlights

• Scans and compares Skills, MCP servers, Rules, Prompts, and Plugins.
• Includes presets for Codex, Claude Code, Cursor, Windsurf, and OpenCode.
• Stores resource registrations, versions, and cross-device snapshots in a
  private Git repository.
• Produces a plan with executable, blocked, and skipped items before writing.
• Protects local content with ownership checks, backups, target locks, result
  verification, and rollback.
• Uses Git Credential Manager for GitHub HTTPS credentials.
• Provides desktop GUI, CLI, and MCP server interfaces.

Public Beta limitations

• The installer is not code-signed. Windows SmartScreen may show an
  unknown-publisher warning; verify the download domain and SHA256SUMS.txt,
  then use More info to continue. Enterprise policies that prohibit
  unsigned applications are outside the current support scope.
• Automatic updates are unavailable. Install later versions manually from
  GitHub Releases.
• Windows x64 is the only officially distributed desktop platform.
• Windsurf and OpenCode presets remain experimental.
• Some history recovery and maintenance functions remain CLI- or Desktop
  API-only.

Upgrade

v0.5.0 is the first Public Beta. A source installation or development build can
be upgraded by running the installer. Finish any active write operation first
and keep the local state directory so operation history and backups remain
available.

Feedback and security

• General bugs and feature requests: GitHub Issues
• Installation and sync help: Troubleshooting
• Security vulnerabilities: use private vulnerability reporting on the
  repository's Security page; do not open a public issue.