v5.3.16

v5.3.16 — 2026-10-28

主要改进

• 工具权限分层与危险操作逐次确认：文件与命令拆成三档权限，命令执行可单独关闭；敏感读拆成「个人信息」与「设备状态」两档；工具页分组加内联开关，可就地收紧能力域；危险操作确认改由模型用 ask_user 提问并配套一次性授权闸门；低频管理工具折叠成按需打开的域，每轮平均少约 2.9k token。

• 按助手的工具开关：工具开关与记忆 / 技能同级，每个助手可单独收紧能力域，且只能由用户放宽、模型不得重新打开。

• 运行性能优化：请求解码改走有界线程池，饱和时返回明确错误；模型侧工具描述改为英文，每轮固定前缀少约 6.5k token；幂等只读工具批次并行执行，事件与历史仍按模型顺序；历史字符数与词元数改为增量维护，媒体裁剪不再整段深拷贝；能力快照不变时复用上一轮的工具目录与系统消息。

• 日程与闹钟管理工具：新增日程与闹钟的增删改查管理工具，并修复相关的编译错误与迁移版本冲突、索引校验。

• 子代理配置迁移到设置页预设组：子代理配置从会话内协作弹窗迁移到设置页的预设组；子代理委派加独立开关；统一子代理设置弹窗与预设组详情页的行卡片形态，枚举选择统一改为内联下拉 / 单选面板。

• 备份页重构：备份改为分类勾选 + 一对导入导出按钮，补齐配方与网页工具配置，密钥默认脱敏。

• 安全修复：wifi_credentials 默认只返回网络名，密码改为显式请求。

• UI 一致性：助手 / 文件夹 / 技能 / 配方的新建入口统一从顶栏图标钮换成 MCP 页同款 FAB；菜单气泡按类型分档，多段菜单改用分割线；分组开关行改用标准分段开关行；工具配方页补充步骤、参数与工具信息分区。

• 标题与语音修复：标题生成挪到首轮回复后，结合问题与助手回答，并重写提示词、写死素材 / 指令边界；入口浮窗先取真实外观再建窗，避免深色用户首帧闪白；图片解码协程销毁后不再写 state，消除 Markdown 布局测试的偶发崩溃。

Improvements

• Tool permission tiers & per-approval dangerous ops: file & command split into three tiers with command execution separately toggleable; sensitive reads split into "personal info" and "device state"; in-page grouped switches to tighten capability domains; dangerous actions now go through model ask_user with a one-shot authorization gate; low-frequency management tools folded into on-demand domains (~2.9k tokens fewer per round).

• Per-assistant tool switches: tool toggles are peer to memory / skills, each assistant can only tighten its domain, and only users can widen (the model may not re-enable).

• Runtime performance: request decoding on a bounded thread pool with explicit saturation errors; model-side tool descriptions switched to English (~6.5k tokens fewer fixed prefix per round); idempotent read-only tools batched in parallel while events & history keep model order; history char/token counts maintained incrementally (media trimming no longer deep-copies); tool catalog & system message reused when the capability snapshot is unchanged.

• Schedule & alarm management tools: added CRUD tools for calendar and alarms, plus fixes for their compile errors, migration version conflicts and index validation.

• Subagent config moved to settings presets: subagent config moved from in-conversation dialogs to settings preset groups; subagent delegation gets an independent switch; config dialog & preset detail unified to the same row-card shape; enum selections unified to inline dropdowns / bottom-sheet radio.

• Backup rework: backup now uses category checkboxes with paired import/export buttons, completes recipe & web-tool config, and masks secrets by default.

• Security fix: wifi_credentials now returns only the network name by default; the password is requested explicitly.

• UI consistency: new-entry entry points for assistants / folders / skills / recipes unified to the MCP-page FAB; menu bubbles bucketed by type with dividers for multi-item menus; grouped switch rows moved to standard segmented switch rows; tool recipe page gains step/parameter/tool-info sections.

• Title & voice fixes: title generation moved to after the first reply (combining question & answer) with rewritten prompts and hardcoded material/instruction boundaries; voice entry floating window reads the real appearance before building to avoid a first-frame white flash for dark users; image-decoding coroutine no longer writes state after disposal, fixing an intermittent Markdown layout test crash.