Herta 0.1.3
黑塔 v0.1.3 — 图片附件、协处理器长了眼睛、权限再收紧
本次更新
图片附件 图片现在可以直接交给黑塔——文件选择器或者直接粘贴都行。图片在
输入框里先落座（最多五张，配上你的话一起发出），随消息气泡一同飞入记录，落地
成缩略图；点击放大，滚轮缩放、拖拽平移。撤回或被拒的发送会把图片原样放回输入
框，一张不少。
协处理器长了眼睛 差分协处理器现在默认能看图：委托里带图片时，它可以随时
view_image 重新端详，而不是只靠一句转述。实验室先付过账才敢默认打开——
74/74 全过、零危险操作漏判；代价是更多确认与更长耗时，权衡后仍然值得。
权限再收紧 三轮审查落地：许可必须挣来（分类器默认反转，整段命令都算数）；
补掉了「dry-run 演练替真操作赚到自动放行」这一类漏洞——git clean -n 再也
换不来 git clean -fdx 的免检；破坏性 git 操作分级问询；todo_write 加入
极简契约，长委托的计划可见。
Windows 加固 映射盘 / subst 盘上的工作区不再被误拒；PATH 损坏时从注册表
恢复；找不到 bash 时明确说明，而不是沉默失败。
文档委托 新工具 digest_document：把整份附件文档分段消化成一份带引用的
摘要。PDF 抽取文本现在带页码标记与大纲侧栏，长文档里的出处能落到页。
界面与性能 流式输出的渲染重写：长对话里逐字揭示不再随长度变卡，30 秒
时钟只碰时间戳本身；写文件先报量级（↳ +N −M）再展开差异；界面措辞全面转
正式书面语；折叠动画更顺。
Downloads
| 平台 | 文件 |
|---|---|
| Windows | Herta-Setup-0.1.3.exe |
| macOS (Apple silicon) | Herta-0.1.3-arm64.dmg |
| macOS (Intel) | Herta-0.1.3-x64.dmg |
macOS 构建已签名并通过 Apple 公证。已安装 0.1.2 的用户会收到自动更新。
配好 DeepSeek API 密钥即可开始；密钥只存在本机。
In English
Picture attachments — hand Herta a picture: pick it or paste it
straight into the composer. Pictures stage in the composer (up to five,
riding with your words), fly with the message bubble, and land as a
thumbnail strip; click to enlarge, wheel to zoom, drag to pan. A rewind
or a refused send puts every picture back in the composer, caption kept.
The Coprocessor can see — commissions that carry pictures now reach a
Coprocessor with eyes: it can view_image and look again at any point,
instead of working from a one-line description. The lab paid for the
default first — 74/74 tasks clean with zero destructive misses; the cost
is more approvals and longer runs, accepted knowingly.
Permissions, tightened again — three review rounds landed: an allow
must be earned (the classifier default is inverted, and the whole command
segment counts); the dry-run loophole class is closed — git clean -n
can no longer earn git clean -fdx an auto-approval; destructive git
operations ask in tiers; todo_write joins the minimal contract so long
commissions keep a visible plan.
Windows hardening — workspaces on mapped or subst drives are no
longer wrongly denied; a broken PATH recovers from the registry; a
missing bash is stated plainly instead of failing silently.
Document commissions — new tool digest_document: a sectioned,
cited digest of an attached document. Extracted PDF text now carries page
markers and an outline sidecar, so citations in long documents land on a
page.
Interface and performance — the streaming reveal was rebuilt: the
character-by-character reveal no longer slows with conversation length,
and the 30-second clock touches only the timestamps themselves; a file
write states its magnitude (↳ +N −M) before unfolding its diff; the
chrome speaks formally; smoother folds throughout.
macOS builds are signed and notarized by Apple. Existing 0.1.2 installs
update automatically. Bring a DeepSeek API key; it never leaves your
machine.