黑塔 v0.1.7 — 中断继续、实时操作轨迹、@ 文件
本次更新
中断继续 差分协处理器工作时，如果应用意外退出，或你按下了停止，下次打开该会话时会出现「继续」：工作从中断处接着进行，不必重新描述任务。应用退出时仍在运行的命令，会在下次启动时结束。长时间的工作在上下文整理后保留当前的工作状态，达到步数上限时同样可以继续。
实时操作轨迹 差分协处理器的待办清单已移除。侧栏的「操作轨迹」按探索、修改、验证记录这次工作的经过；正在进行的一步下方有一行实时内容：写入中的文件、运行中的命令输出。这一行按可读的节奏更新，每一步结束时停在它完成的内容上。
输入栏与会话 在输入栏键入 @ 与文件名的一部分，即可从工作区中选择文件；输入栏为空时按 ↑ 可取回上一条消息；黑塔的回复可以一键复制，只复制正文，不含代码。会话菜单新增重命名与导出为 Markdown。窗口不在前台时，如有确认等待处理、工作可以继续、回复失败或较长的回复完成，会发送系统通知；差分协处理器工作期间系统保持唤醒。两项均可在「设置 → 窗口」中关闭。
启动与界面 开场动画改在后台线程绘制，并在两次启动之间保留字形缓存，启动更流畅。输入栏的声波在黑塔说完后缓缓平复，待机时的呼吸更平稳，说话时有一道光沿波纹移动，绘制开销也大幅降低。修复了从仓库卡片打开文件、关闭后整个界面短暂偏移的问题（0.1.6 的已知问题），以及窗口宽度在 1200 像素及以下时界面未填满窗口的问题。
安全与稳定性 命令不能再写入工作区的 .herta 目录，其中保存着权限规则与信任设置；无法从命令本身判断是否会触及该目录时，每次都请求确认。文件查看器与回复的复制按钮现在能正常写入剪贴板。以系统 Electron 运行的发行版软件包（如 AUR 的 herta-bin）现在按已安装的应用运行，工作区、语音与安全策略均恢复正常。此外修复了会话标题与发送动画方面的若干问题。
Downloads
| 平台 | 文件 |
|---|---|
| Windows | Herta-Setup-0.1.7.exe |
| macOS (Apple silicon) | Herta-0.1.7-arm64.dmg |
| macOS (Intel) | Herta-0.1.7-x64.dmg |
| Linux (x64) | Herta-x86_64.AppImage |
macOS 构建已签名并通过 Apple 公证。已安装 0.1.6 的 Windows、macOS 与 Linux（AppImage）用户将自动收到更新。
Linux 版下载后需先执行 chmod +x Herta-x86_64.AppImage 再运行，之后的版本可在应用内更新。在限制非特权用户命名空间的发行版上（如 Ubuntu 24.04 的默认配置），AppImage 会在关闭 Chromium 沙箱的情况下运行。
使用前需配置 DeepSeek API 密钥，密钥仅保存在本机。语音模型在首次启用实时语音时下载。
第三方声明 安装包内的语音合成运行时是 sherpa-onnx 1.13.6 的预编译包，其中静态链接了 espeak-ng（GPL-3.0-or-later）与 piper-phonemize（MIT）。对应源码：k2-fsa/sherpa-onnx v1.13.6 的构建树，以及它所拉取的 csukuangfj/espeak-ng@ed530aa 与 csukuangfj/piper-phonemize@f3ff95a。完整的许可证文本随应用安装在资源目录的 THIRD-PARTY-NOTICES.md 中。
In English
Continuing an interrupted run — if the app quits unexpectedly while the Coprocessor is working, or you press Stop, the session offers "Continue" the next time it opens: the work picks up where it stood, without describing the task again. Commands still running when the app quit are ended at the next launch. A long run keeps its working state across a context trim, and a run that reaches the step limit can be continued too.
A live trace — the Coprocessor's to-do list is gone. The Operation trace card in the side rail records the run as it goes, in its Explore, Edit and Verify stretches; under the step in progress, one live line shows the file being written or the command's output as it prints. The line moves at a readable pace, and when a step ends it settles on what the step did.
Composer and sessions — type @ and part of a file name in the composer to pick a file from the workspace; press ↑ in an empty composer to bring back your last message; copy one of Herta's replies in one click — her prose, without the code. The session menu adds Rename and Export as Markdown. While the window is in the background, a system notification tells you when a confirmation is waiting, a run can be continued, a reply fails or a longer reply finishes; the system stays awake while the Coprocessor works. Both can be turned off in Settings → Window.
Launch and interface — the opening animation draws on a background thread and keeps its glyphs between launches, so the app starts more smoothly. The composer's voice wave settles slowly once Herta finishes, breathes more evenly while it waits, carries a band of light while she speaks, and costs far less to draw. Closing a file opened from the repository card no longer shifts the whole interface for a moment (0.1.6's known issue), and at window widths of 1200 pixels and below the interface fills the window again.
Safety and stability — commands can no longer write into a workspace's .herta directory, which holds its permission rules and trust setting; where a command's reach into it cannot be told from the command itself, it asks every time. The copy buttons in the file viewer and on replies now reach the clipboard. A distribution package that runs the app on the system's Electron (such as the AUR's herta-bin) now runs as an installed app, with its workspace, voice and security policy working as they should. A number of session-title and send-animation issues are fixed as well.
macOS builds are signed and notarized by Apple. Existing 0.1.6 installs on Windows, macOS and Linux (AppImage) update automatically.
On Linux, run chmod +x Herta-x86_64.AppImage once before starting it; later versions update in the app. On distributions that restrict unprivileged user namespaces (Ubuntu 24.04's default, for example), the AppImage runs with Chromium's sandbox turned off.
A DeepSeek API key is required; it is stored only on your machine. The voice model downloads the first time real-time voice is enabled.
Third-party notices — the speech-synthesis runtime in the installer is sherpa-onnx 1.13.6's prebuilt package, which statically links espeak-ng (GPL-3.0-or-later) and piper-phonemize (MIT). Corresponding source: the k2-fsa/sherpa-onnx v1.13.6 build tree and the csukuangfj/espeak-ng@ed530aa and csukuangfj/piper-phonemize@f3ff95a commits it fetches. The full license texts are installed with the app in THIRD-PARTY-NOTICES.md under its resources directory.