0.7.9b3 安全维护预览版 / Security maintenance

0.7.9b3 安全维护预览版 / Security maintenance preview

修复 npm 启动器可能复用旧 uv 的问题。此更新应对 GHSA-hq85-5cpj-mr62 所述的 emSign 证书信任事件。

• PATH 中的 uv 低于 0.13.4 时，启动器改用固定版本 0.13.4 的下载／缓存；下载保留 SHA-256 验证。
• 如果 LAYERWEAVE_UV 显式指定了过旧版本，则明确提示更新。
• 中英文 README、MCP 和启动器说明同步了安全版本要求；PyPI 与 npm 介绍仍来自同一份文案。
• 数据结构、Python 业务接口、网页资源和项目内容没有改变。

Fixes the npm launcher's reuse of outdated uv installations in response to the emSign certificate-trust incident described in GHSA-hq85-5cpj-mr62.

• PATH copies older than uv 0.13.4 are skipped in favor of the pinned 0.13.4 download/cache, with SHA-256 verification retained.
• An outdated executable explicitly selected through LAYERWEAVE_UV produces an update message.
• Bilingual installation and MCP guidance now states the minimum patched versions.
• Data structures, Python business APIs, web assets, and project contents are unchanged.

更新 / Update

使用 uv 路线前，先将 uv 更新到 0.13.4 或以上。/ For the uv route, update uv to 0.13.4 or later first.

uv tool install --upgrade --python 3.11 "layerweave[mcp]==0.7.9b3"

Windows x64、Node.js 20+ / Windows x64 with Node.js 20+:

npm install -g layerweave@0.7.9-beta.3

未全局安装时，也可以用 npx --yes layerweave@0.7.9-beta.3 demo 体验。MCP 客户端配置若固定旧版号，请改为新版并重启该 MCP 服务。已有项目继续保留修改。

You can also run npx --yes layerweave@0.7.9-beta.3 demo without a global installation. Update any version pinned in your MCP client configuration and restart that MCP service. Existing project edits are preserved.

升级 LayerWeave 不会升级其他 Python 环境。自行使用 pip 的环境仍须将 pip 更新到至少 26.2.2，已有的 certifi 更新到至少 2026.10.19。详见 Python Packaging 官方公告。

Updating LayerWeave does not update other Python environments. Environments using pip still need pip 26.2.2 or later, and any installed certifi should be 2026.10.19 or later. See the Python Packaging notice.

验证 / Verification

通过 wheel 普通安装、离线文章案例及保留修改、MCP auto/legacy、sdist 重建、npm 测试和包元数据检查。最终 npm tarball 实测了真实旧 uv 拒用、修复版接受、旧 PATH 版本回退及 MCP 调用。完整 Python 回归与浏览器复测已完成；两项 Windows 符号链接用例因权限跳过。

Verified ordinary wheel installation, the offline article starter and preserved edits, MCP auto/legacy modes, sdist rebuilding, npm tests, and package metadata. The final tarball was exercised with real old/patched uv binaries, fallback selection, and MCP. Python regression and browser rechecks completed; two Windows symlink tests were skipped for missing privileges.

附件与包索引使用同一批已验收文件，校验值见 SHA256SUMS。/ Release assets and registries use the same verified files; see SHA256SUMS.

0.7.9b2 文档预览更新 / Documentation update

0.7.9b2 文档预览更新 / Documentation preview update

本次只更新介绍文档和打包时的文档生成流程，功能与 0.7.9b1 保持一致。

• PyPI 与 npm 的介绍统一从根目录中英文 README 生成，展示快速安装、推荐的 MCP 接入及真实项目截图。
• npm 的缓存、环境变量与运行环境说明集中在启动器手册；图片、文档和章节跳转指向本版本标签。
• Python 版本为 0.7.9b2；npm 启动器为 0.7.9-beta.2，并固定使用同一 Python 版本。

This release updates documentation and its build-time generation only. Runtime functionality is unchanged from 0.7.9b1.

• PyPI and npm descriptions now share the root bilingual READMEs, including installation, recommended MCP setup, and real project screenshots.
• npm environment and cache guidance lives in the launcher manual. Image, document, and section links point to this version's tag.
• Python: 0.7.9b2. npm: 0.7.9-beta.2, pinned to the matching Python version.

安装 / Install

uv tool install --python 3.11 "layerweave[mcp]==0.7.9b2"

或使用 Windows x64、Node.js 20+ / Or with Windows x64 and Node.js 20+:

npm install -g layerweave@0.7.9-beta.2

可选运行 layerweave demo 查看文章解析案例；自己的项目可用 layerweave view ./project.sqlite3 打开。重复打开保留修改。MCP 接法见本版本 README。

Optionally run layerweave demo for the article-reading example, or layerweave view ./project.sqlite3 for your own database. Reopening preserves edits. See this version's README for MCP setup.

验收 / Verification

已核对上一版与本版的运行文件差异，并通过 wheel 普通安装、离线文章案例与保留修改、真实 MCP stdio、源码包重建、npm 启动器测试和包元数据检查。GitHub 与包索引使用同一批文件，SHA-256 见附件 SHA256SUMS。

Validated the runtime-file differences against the previous release, ordinary wheel installation, the offline starter and preserved edits, real MCP stdio, sdist rebuilding, npm launcher tests, and package metadata. GitHub and the registries use the same artifacts; checksums are in SHA256SUMS.

LayerWeave 0.7.9b1 preview: uv + npm

LayerWeave 0.7.9b1 · 统一启动 / One-command preview

uv 与 npm 共用同一套启动逻辑。默认文章解析随包提供，其他案例按需下载；重复打开保留对象、批注、布局和素材修改。

uvx layerweave@0.7.9b1 demo

Windows x64 上已有 Node.js 20+ / npm 时：

npx --yes layerweave@0.7.9-beta.1 demo

npm 会自动准备所需的 uv、独立 Python 3.11 和对应版本的应用。首次准备需要联网；项目保存在自己的工作目录，缓存和项目数据分开。服务在前台运行，Ctrl+C 停止。

将命令末尾的 demo 替换为 demo --list、view ./project.sqlite3、new ./my-project --template subtitles 或 help project_overview。更多参数见 README。

Python 版本为 0.7.9b1，npm 为 0.7.9-beta.1，npm 预览通道为 next。原有 Python/CLI/MCP 入口保持兼容；视图组件 0.31.1，插件 host.api 仍为 3。官方视图插件仍独立选装。

本页提供 wheel、源码包、npm tarball 和 SHA256SUMS，与包索引使用同一批文件。0.7.8 保持原样，其他案例仍使用其版本固定的静帧案例包。

English

The uv and npm entry points share one Python launcher. Article reading is bundled; other examples download on demand. Reopening preserves project records, comments, layout, and media edits.

Use either command above. The npm entry point supports Windows x64 and Node.js 20+, automatically preparing uv and an independent Python runtime. The server runs in the foreground; Ctrl+C stops it without deleting project data.

Replace demo with demo --list, view ./project.sqlite3, new ./my-project --template subtitles, or help project_overview. See the English README.

Python is 0.7.9b1; npm is 0.7.9-beta.1 on the next dist-tag. Existing Python, CLI, and MCP interfaces remain available. The view is 0.31.1 and host.api remains 3. Official view plugins remain optional.

The wheel, source archive, npm tarball, and checksums here match the files used for registry publication. The previous 0.7.8 release remains unchanged.

LayerWeave 0.7.8 · Public preview

LayerWeave 0.7.8 · 公开预览 / Public preview

少分心：只看相关的那一段，只做眼前的那一件事。

LayerWeave 用时序、层级和关联组织文字、素材引用与批注，供人和 AI 按需查询、编辑与协作。轻量 Python 内核可以独立使用，内置工具、技能、视图与视图插件可按需组合。

这是 Windows 首个公开预览版。默认分支 visualization 包含完整应用、MCP 服务与发行封装；main 保留无视图开发源码，欢迎基于内核构建自己的工具和应用。

下载与安装

• layerweave-0.7.8-py3-none-any.whl：安装包，包含已构建网页，不含案例和官方插件。
• layerweave-0.7.8.tar.gz：源码、文档、测试与十二案例。
• layerweave-showcases-0.7.8.zip：独立案例包，推荐从文章解析开始。手书和 H3 提供静帧版，不含音视频。
• SHA256SUMS：上述三个文件的 SHA-256 校验值。

装好 uv 后，在自己的工作目录执行：

uv venv --python 3.11 .venv
uv pip install --python .venv/Scripts/python.exe "layerweave[mcp] @ https://github.com/aceddad/LayerWeave/releases/download/v0.7.8/layerweave-0.7.8-py3-none-any.whl"

uv 可自动准备 Python；使用网页不需要 Node。FFmpeg 是用户选装的外部程序，服务端抽帧等媒体功能会用到；AI 截图需要 Chrome、Edge 或 Chromium。普通数据管理与文章解析不需要 API Key、FFmpeg 或官方插件。

完整上手、案例导入和 MCP 客户端配置见中文 README。四个官方视图插件独立选装，一览、接缝、预览为 1.1.1，网页为 1.0.1。

English

Fewer distractions: look only at the part that matters, and do only the task at hand.

LayerWeave organizes text, media references, and comments by time, hierarchy, and relationships. People and AI agents can query and edit the relevant part, leave contextual feedback, and build their own tools on a lightweight Python kernel.

This is the first public preview for Windows. The default visualization branch contains the complete application and MCP service. main contains the development sources without the view.

Use the commands above to install with uv. The wheel includes the built web app; the source archive includes documentation, tests, and twelve examples. Examples are also available as a separate ZIP, with article reading as the starting point. The hand-drawn MV and H3 examples contain still images, without video or audio. SHA256SUMS covers the three download files.

Python 3.11+ is required and can be managed by uv. Node is not needed to use the app. FFmpeg is optional for media processing; AI screenshots need Chrome, Edge, or Chromium. Official view plugins are installed separately and are not required to use the canvas.

See the English README for installation, the first example, and MCP setup.

Credits and licenses / 署名与许可

项目由维护者主导设计与维护，Astra（Codex）与 Claude 参与开发、测试及文档。Claude 完成主要视图插件，Astra 补充网页插件并参与集成与发布整理；提交中保留共同作者署名。

The maintainer leads the project, with development, testing, and documentation contributions from Astra (Codex) and Claude, recorded in commit co-author trailers.

LayerWeave source uses MIT. Bundled third-party web components retain their own licenses in THIRD_PARTY_NOTICES.md. Plugins, skills, services, and example materials retain their respective terms.