CrabCode TUI v1.0.37

Windows-only maintenance release. Improves Windows startup and input latency, fixes Markdown configuration discovery when ripgrep is unavailable, and publishes the signed x64 Windows package. Assets: crabcode-1.0.37-x64-win32.zip, install.ps1, and checksums-sha256.txt. macOS remains on v1.0.36 and no macOS assets are included in this release. Verify Windows provenance with: gh attestation verify crabcode-1.0.37-x64-win32.zip --repo acosmi/CrabCode-TUI

CrabCode TUI v1.0.36

CrabCode TUI v1.0.36

Availability / 可用平台

• macOS Apple Silicon (arm64-darwin)
• macOS Intel (x64-darwin)
• Windows x64 (x64-win32)
• Linux is intentionally excluded. / 本次不提供 Linux。

Install / 安装

curl -fsSL https://github.com/acosmi/CrabCode-TUI/releases/latest/download/install.sh | sh

Windows PowerShell 5.1 or PowerShell 7:

irm https://github.com/acosmi/CrabCode-TUI/releases/latest/download/install.ps1 | iex

Highlights and fixes / 更新与修复

• Restored native TUI slash-command lifecycle: exact runtime tokens submit on the first Enter, slash-disable stays closed after catalog refresh, and the live catalog shares identity with first-wins routing.
• 修复原生 TUI 斜杠命令生命周期：精确输入的 runtime 命令第一次 Enter 即提交，禁用状态在目录刷新后保持关闭，实时目录与 first-wins 路由共用同一身份。
• Serialized MCP owner, policy, and live inventory mutations so public, plugin, and startup-owned servers no longer replace each other or leave stale tools/prompts.
• 串行化 MCP owner、策略与实时清单，避免 public / plugin / 启动固定服务器互相覆盖或留下过期 tools/prompts。
• Split fail-closed copy for unported versus gated tokens, stopped advertising the /proactive stub, validated /smallmodel names before persistence, counted Slack installs only after a successful browser open, and hid the Windows memory serving-child console with CREATE_NO_WINDOW only.
• 拆分未移植与被门控 token 的 fail-closed 文案；停止广告 /proactive stub；写入 /smallmodel 前先校验；Slack 安装计数仅在浏览器成功打开后增加；Windows 记忆 serving 子进程仅使用 CREATE_NO_WINDOW。

Verification / 验证

• macOS arm64 SHA-256: d6b3ee9d27443d98f615f0df51f945555dec45a04c16ed4c292b274ed7e41eec

• macOS x64 SHA-256: 35a63ddb3ac451e7f6bcd531e6ab9a56b0c8b9089e4b3479394c1c9d02fe9af0

• Windows x64 SHA-256: d630850a0f7070e69013a485b07e8f5c5916cd1fe742e75df15e27d228ccd85a

• Both macOS packages were assembled twice to identical bytes and passed 100/100 isolated package replays on the local dual-arch host. The x64 installer replay ran from an x86_64 Rosetta host process. Windows passed two byte-identical assemblies, 100/100 replays, and GitHub build provenance attestation.

• 两份 macOS 包均在本地双芯片主机上通过两次逐字节一致装配及 100/100 隔离回放；x64 安装器回放在 x86_64 Rosetta 宿主进程中完成。Windows 通过双装配、100/100 回放及 GitHub 构建来源证明。

• Every public asset except the checksum file itself is listed in checksums-sha256.txt. Mac provenance is signed with the authorized SSH release key.

• 除校验清单自身外，所有公开资产均受 checksums-sha256.txt 约束；Mac provenance 使用授权 SSH 发版密钥签名。

• Main CI

• PR CI

• Windows release verification

• Windows build provenance attestation

CrabCode TUI v1.0.35

CrabCode TUI v1.0.35

Availability / 可用平台

• macOS Apple Silicon (arm64-darwin)
• macOS Intel (x64-darwin)
• Windows x64 (x64-win32)
• Linux is intentionally excluded. / 本次不提供 Linux。

Install / 安装

curl -fsSL https://github.com/acosmi/CrabCode-TUI/releases/latest/download/install.sh | sh

Windows PowerShell 5.1 or PowerShell 7:

irm https://github.com/acosmi/CrabCode-TUI/releases/latest/download/install.ps1 | iex

Highlights and fixes / 更新与修复

• Fixed the Windows one-line bootstrap for Windows PowerShell 5.1 and PowerShell 7. install.ps1 is now printable seven-bit ASCII without a BOM, so GitHub's application/octet-stream response cannot turn its first comment into an executable BOM token.
• 修复 Windows PowerShell 5.1 与 PowerShell 7 的一键安装：install.ps1 现为无 BOM 的可打印七位 ASCII，避免 GitHub application/octet-stream 响应把首行 BOM 解码成命令。
• Removed the installers' hard dependency on api.github.com. Latest-version discovery now uses the Release checksum manifest, derives exactly one canonical platform archive, and verifies its SHA-256 before installation.
• 移除安装器对 api.github.com 的硬依赖，绕开 API DNS 故障；改由 Release 校验清单发现唯一平台归档，并在安装前严格核验 SHA-256。
• Added real redirected curl | sh and irm | iex transport gates for Apple Silicon, Windows PowerShell 5.1, and PowerShell 7. The macOS x64 package gate also passed on a native Intel runner.
• 新增真实重定向安装管道门禁；覆盖 Apple Silicon、Windows PowerShell 5.1/7，macOS x64 包另在原生 Intel runner 上完成验证。

Verification / 验证

• macOS arm64 SHA-256: 2a0ed3c6653afe0822fa1ef9ce93fec24e255f66e842d969ba4220d2d82792bf

• macOS x64 SHA-256: ad1b0298006e397f6a5786c209a3a48cc6869a1c59f56bf6afbb28ca5e585587

• Windows x64 SHA-256: 25eb6211a8d339e21f2dc820636f9d02527c03d45ecd79ebc7faad9659ff556d

• Both macOS packages passed two byte-identical assemblies and 100/100 isolated package replays. Windows passed two byte-identical assemblies, 100/100 replays, and GitHub build provenance attestation.

• 两份 macOS 包均通过两次逐字节一致装配及 100/100 隔离回放；Windows 通过双装配、100/100 回放及 GitHub 构建来源证明。

• Every public asset except the checksum file itself is listed in checksums-sha256.txt. Mac provenance is signed with the authorized SSH release key.

• 除校验清单自身外，所有公开资产均受 checksums-sha256.txt 约束；Mac provenance 使用授权 SSH 发版密钥签名。

• Main CI

• Native package matrix

• Windows release verification

• Windows build provenance attestation

CrabCode TUI v1.0.34

CrabCode TUI v1.0.34

Availability / 可用平台

• ✅ macOS Apple Silicon (arm64-darwin)
• ✅ macOS Intel package (x64-darwin), replayed under Rosetta
• ✅ Windows x64 (x64-win32)
• Linux is intentionally not part of this release. / 本次发版不提供 Linux。

Install / 安装

curl -fsSL https://github.com/acosmi/CrabCode-TUI/releases/download/v1.0.34/install.sh | sh

Windows PowerShell 5.1+:

irm https://github.com/acosmi/CrabCode-TUI/releases/download/v1.0.34/install.ps1 | iex

Highlights and fixes / 更新与修复

• Redesigned the native terminal welcome experience with responsive wide,
  compact, and best-effort layouts while keeping the primary command entry
  points visible without consuming transcript space.
• 重新设计原生终端欢迎界面，在宽屏、紧凑和极小终端下保持稳定布局，并持续展示
  主要命令入口且不占用会话正文空间。
• Added a typed, fixed-height session header for lifecycle state, active tool,
  elapsed time, model, approval mode, and context usage.
• 新增类型驱动的固定高度会话标题栏，统一呈现生命周期、工具、耗时、模型、审批模式
  与上下文用量。
• Kept the header and welcome surface truthfully in their initializing state
  until the runtime handoff has actually been consumed; PTY gates now use the
  post-initialize private health action instead of mutable copy or producer-side
  logging.
• 在运行时交接被真正消费前持续显示初始化中，并用交接后的私有健康动作作为 PTY
  权威门禁，修复低频输入与退出时序竞态。
• Fixed strict Linux Landlock CI rule construction without weakening
  hard-requirement or fail-closed enforcement. Linux remains excluded from the
  public binaries in this release.
• 修复严格 Linux Landlock CI 的文件权限掩码与标准 I/O 管道规则，同时保持
  hard-requirement 和 fail-closed；本次仍不发布 Linux 二进制。
• Carried forward deterministic Windows linking, preserved-candidate recovery,
  bounded process-inventory retries, and fail-closed package replay evidence.
• 延续 Windows 确定性链接、候选包保全、有界进程清单重试与 fail-closed 成品回放。

Mac verification / Mac 验证

• Both archives were assembled twice from one compiled closure and were
  byte-for-byte identical.
• 两个 Mac 归档均从同一编译闭包连续装配两次，字节完全一致。
• arm64: 100/100 package replays, 200/200 successor turns, and 1/1 installer replay.
• x64: 100/100 package replays and 200/200 successor turns under Rosetta, plus
  1/1 installer replay from an x86_64 Rosetta host process.
• Across both architectures: 0 runtime stops, 0 leaked package processes,
  0 Memory namespace leaks, 0 default-home changes, and 0 real user-state changes.
• 两架构合计：运行时意外停止、包进程泄漏、Memory 命名空间泄漏、默认 HOME 变化
  与真实用户状态变更均为 0。
• arm64 SHA-256: 1522bce7fb94b73153798e54765a56ef8febf212b34873849383cd1075818cc8
• x64 SHA-256: 3b42fd5e3dd70efa37500e3bfc551514bdf6b3fba99aed76c1480ca141b47dd8

The x64 package was validated on the audited Apple Silicon release host under
Rosetta; this is not a claim of native Intel-hardware release authority.

x64 包在经审计的 Apple Silicon 发版主机上通过 Rosetta 验证，不声称经过原生 Intel
实机授权验证。

macos-local-provenance.json is signed with the same authorized SSH release
key used by the annotated tag. Verify every download with
checksums-sha256.txt.

macos-local-provenance.json 使用与签名 tag 相同的授权 SSH 发版密钥签署；所有
下载请使用 checksums-sha256.txt 校验。

Windows verification / Windows 验证

• Package SHA-256: e8f44bbb6a39b21ac3ec03e909bd0f6ad78028c398b6e93ac264e3fe00239ee2

• Two assemblies from one compiled closure were byte-for-byte identical.

• Package replays: 100/100; successor turns: 200/200; installer replay: 1/1.

• Runtime stops, leaked package processes, Memory namespace leaks,
  default-home changes, and real user-state changes: all 0.

• 同一编译闭包的两次装配字节完全一致；成品回放 100/100、后继回合 200/200、
  安装器回放 1/1，所有停止、泄漏与用户状态变更指标均为 0。

• Main CI

• Windows release verification

• Build provenance attestation

CrabCode TUI v1.0.33

CrabCode TUI v1.0.33

Availability / 可用平台

• ✅ macOS Apple Silicon (arm64-darwin)
• ✅ macOS Intel (x64-darwin)
• ✅ Windows x64 (x64-win32)
• Linux is intentionally not part of this release. / 本次发版不提供 Linux。

Install / 安装

curl -fsSL https://github.com/acosmi/CrabCode-TUI/releases/download/v1.0.33/install.sh | sh

Windows PowerShell 5.1+:

irm https://github.com/acosmi/CrabCode-TUI/releases/download/v1.0.33/install.ps1 | iex

Fixes / 修复

• Fixed the Windows replay root cause: JavaScript no longer re-derives the Memory named-pipe endpoint from a path that can resolve to an 8.3 alias; it consumes the exact endpoint selected by the Rust launcher.
• 将 Memory IPC 权威端点统一交给 Rust launcher，避免 Windows RUNNER~1 短路径与 runneradmin 长路径产生不同命名管道哈希。
• Pinned every packaged Bun runtime and CI build tool to 1.3.14 after local archive replay caught Bun 1.3.11 failing to parse the current minified runtime.
• 本地真实归档回放发现 Bun 1.3.11 无法解析当前压缩运行时，现已将 Mac/Windows 包内运行时与 CI 构建工具统一锁定为 Bun 1.3.14。

Mac verification / Mac 验证

• Both archives were assembled twice from one compiled closure and were byte-for-byte identical.
• 每个 Mac 归档均从同一编译闭包连续组装两次，字节完全一致。
• arm64: 100/100 package replays + 1/1 installer replay.
• x64: 100/100 package replays under Rosetta + 1/1 installer replay from an x86_64 host process.
• Across both architectures: 0 runtime stops, 0 leaked package processes, 0 Memory namespace leaks, and 0 real user-state changes.
• 两架构合计：运行时意外停止、包进程泄漏、Memory 命名空间泄漏、真实用户状态变更均为 0。

macos-local-provenance.json is signed with the same authorized SSH release key used by the annotated tag. Verify downloads with checksums-sha256.txt.

macos-local-provenance.json 使用与签名 tag 相同的授权 SSH 发版密钥签署；下载后请使用 checksums-sha256.txt 校验。

Windows verification / Windows 验证

• The preserved ZIP was bound to SHA-256 bb0d28599e85e60387d01e1a466a21f1f02840c768e90db8323be9e27e97ebe5; its two package assemblies were byte-for-byte identical.
• Installer replay: 1/1; direct package replay: 1/1; successor turns: 2/2.
• Runtime stops, leaked package processes, Memory namespace leaks, default-home changes, and real user-state changes: all 0.
• 修复 Windows 安装器生成标记文件时的 CRLF/LF 协议不一致；真实安装与直接启动回放均通过，所有泄漏和用户状态变更指标为 0。
• GitHub Actions verification · Build provenance attestation

CrabCode TUI 1.0.22

CrabCode TUI

纯终端开源发行：Rust 核心底层 + TypeScript 业务运行时 + 隔离的 Go OAuth Account Bridge。

• macOS/Linux arm64 与 x64、Windows x64 完整安装包
• 安装器先校验 Release SHA-256，再校验包内逐文件清单
• Account Bridge 验证签名来源、平台证据、SBOM 与第三方许可
• 包含 Bun、ripgrep、crabcode-browser、Sharp/libvips 的固定版本和许可材料

注册赠送 6 个月 GO 订阅会员；邀请好友可获得重置次数；模型与权益以线上服务实际展示为准。

GUI 为独立产品：https://acosmi.com/zh/downloads

Terminal-only open-source release with five native packages, fail-closed installers, per-file manifests, signed Account Bridge provenance, dependency licenses, and GitHub build attestation.