Herta 0.1.6
黑塔 v0.1.6 — Linux 版、插话、工作区信任
本次更新
Linux 版 首次提供 Linux x64 版本，格式为 AppImage，无需另装 libfuse2。从桌面启动时会读取登录 shell 的 PATH，找到用户自行安装的工具；在不显示托盘图标的桌面（如未装扩展的 GNOME）上，关闭窗口即退出应用。系统没有密钥环时，API 密钥以仅本人可读的文件保存在本机，设置页会注明未加密。
插话 差分协处理器工作时发送的消息会暂存在输入栏上方，待当前回合完成后作为下一轮发送；也可点击「立即插话」，把它插入正在进行的工作。暂存的消息可以修改或撤回。
工作区信任 可以为某个工作区开启信任：此后工作区内的文件修改、Git 操作与脚本执行不再逐项请求确认。未信任的工作区保持原有的确认方式。
对话与入梦 黑塔的自传改写为她本人的书，想法更短，说话少了书面腔；撤回一句话时，改正后的说法随即给出；首句回复开始得更早。入梦改为默认关闭，需在「设置 → 入梦」中开启，因为它会在你离开时消耗 DeepSeek API 额度；此前未手动开启过的安装在更新后同样为关闭。开启后，你回来时入梦会暂停，待下次空闲再继续。
macOS 恢复中文界面；「重启并更新」与托盘菜单的「退出」可正常退出应用；从访达启动时读取完整的 PATH；未安装开发者工具的 Mac 不再弹出安装提示；支持 ⌘W 关闭窗口、⌘, 打开设置；修正了全屏下的顶栏留白与收起后的黑屏。差分协处理器会按 macOS 的 BSD 工具与 bash 3.2 编写命令。
安全与稳定性 命令分类器补充了 macOS 与 Linux 上的破坏性操作（擦除磁盘、关机、读取钥匙串密码等），一律拒绝；更改系统设置的命令每次都请求确认。确认面板不再被误按的按键应答。文件查看器的语法高亮移到后台线程，长会话的历史展开更快；此外修复了窗口重载、会话切换与语音方面的若干问题。
Downloads
| 平台 | 文件 |
|---|---|
| Windows | Herta-Setup-0.1.6.exe |
| macOS (Apple silicon) | Herta-0.1.6-arm64.dmg |
| macOS (Intel) | Herta-0.1.6-x64.dmg |
| Linux (x64) | Herta-x86_64.AppImage |
macOS 构建已签名并通过 Apple 公证。已安装 0.1.5 的 Windows 与 macOS 用户将自动收到更新。在 macOS 上，0.1.5 点击「重启并更新」只会收起窗口；按 ⌘Q 退出应用后，更新即完成安装。
Linux 版下载后需先执行 chmod +x Herta-x86_64.AppImage 再运行，之后的版本可在应用内更新。在限制非特权用户命名空间的发行版上（如 Ubuntu 24.04 的默认配置），AppImage 会在关闭 Chromium 沙箱的情况下运行。
使用前需配置 DeepSeek API 密钥，密钥仅保存在本机。语音模型在首次启用实时语音时下载。
第三方声明 安装包内的语音合成运行时是 sherpa-onnx 1.13.6 的预编译包，其中静态链接了 espeak-ng（GPL-3.0-or-later）与 piper-phonemize（MIT）。对应源码：k2-fsa/sherpa-onnx v1.13.6 的构建树，以及它所拉取的 csukuangfj/espeak-ng@ed530aa 与 csukuangfj/piper-phonemize@f3ff95a。完整的许可证文本随应用安装在资源目录的 THIRD-PARTY-NOTICES.md 中。
In English
Linux — the first Linux x64 build, as an AppImage that needs no separate libfuse2. Launched from the desktop, it reads the login shell's PATH and finds the tools you installed yourself; on a desktop that shows no tray icon (GNOME without an extension, for example), closing the window quits the app. On a system with no keyring, the API key is kept in an owner-only file on your machine, and Settings says it is not encrypted.
Interjecting — a message sent while the Coprocessor is working is held above the composer and sent as the next turn once the current one finishes; or click "Interject now" to put it into the work under way. A held message can be edited or withdrawn.
Workspace trust — a workspace can be trusted: from then on, file changes, Git operations and script runs inside it no longer ask for confirmation one by one. Untrusted workspaces confirm as before.
Conversation and Dream — Herta's autobiography is rewritten as her own book, her thoughts are shorter, and her speech is less stilted; when she takes a line back, the corrected line follows at once; the first reply starts sooner. Dreaming is now off by default and is turned on in Settings → Dream, because it spends your DeepSeek API quota while you are away; installs that never turned it on by hand are off after the update too. Once on, a dream pauses when you come back and resumes at the next idle window.
macOS — the Chinese interface is back; "Restart & update" and the tray's Exit really quit; a launch from the Finder reads your full PATH; a Mac without the developer tools no longer shows the install prompt; ⌘W closes the window and ⌘, opens Settings; full screen no longer leaves a gap in the top bar or a black screen after hiding. The Coprocessor writes commands for macOS's BSD tools and bash 3.2.
Safety and stability — the command classifier now refuses the destructive operations of macOS and Linux (erasing disks, shutting down, reading keychain passwords and the like), and commands that change system settings ask every time. A stray key press no longer answers the confirmation panel. The file viewer highlights code on a background thread, long sessions expand their history faster, and a number of window-reload, session-switch and voice issues are fixed.
macOS builds are signed and notarized by Apple. Existing 0.1.5 installs on Windows and macOS update automatically. On macOS, clicking "Restart & update" in 0.1.5 only hides the window; quit with ⌘Q and the update installs.
On Linux, run chmod +x Herta-x86_64.AppImage once before starting it; later versions update in the app. On distributions that restrict unprivileged user namespaces (Ubuntu 24.04's default, for example), the AppImage runs with Chromium's sandbox turned off.
A DeepSeek API key is required; it is stored only on your machine. The voice model downloads the first time real-time voice is enabled.
Third-party notices — the speech-synthesis runtime in the installer is sherpa-onnx 1.13.6's prebuilt package, which statically links espeak-ng (GPL-3.0-or-later) and piper-phonemize (MIT). Corresponding source: the k2-fsa/sherpa-onnx v1.13.6 build tree and the csukuangfj/espeak-ng@ed530aa and csukuangfj/piper-phonemize@f3ff95a commits it fetches. The full license texts are installed with the app in THIRD-PARTY-NOTICES.md under its resources directory.