v0.33.0

What's Changed

• fix(security): session/create 不再把 $HOME 静默注册成 trusted 项目——堵语音后台 run 写边界第四来源 by @baochipham942-eng in #1080
• feat(scenario): 真机剧本 runner 框架 + 首批两剧本 by @baochipham942-eng in #1081
• feat(model): OPENAI_BASE_URL 运行时兜底（Inspect bridge 前置） by @baochipham942-eng in #1083
• fix(stability): e2e 端口互杀 + crashRecovery 假红（L8 稳定债批） by @baochipham942-eng in #1082
• fix(scenario): runner 契约对齐真机实测（env 断言/run 流事件源/FAIL 优先级） by @baochipham942-eng in #1084
• feat(renderer): 字体细节批（审美关已过） by @baochipham942-eng in #1085
• fix(security): headless 审批器静默放行 ask 漏洞（P0，真机剧本红转绿收活） by @baochipham942-eng in #1086
• feat(distill): 蒸馏止血层——跨会话信号硬门（gate L2） by @baochipham942-eng in #1087
• feat(model): 能力矩阵地基 + qwen 百炼 enable_search（配置化搜索 B 路） by @baochipham942-eng in #1088
• feat(model): Responses 协议适配器 + DeepSeek 内置 web_search（配置化搜索 A 路） by @baochipham942-eng in #1089
• l1/responses agentloop by @baochipham942-eng in #1090
• feat(model): interleaved thinking beta 改由能力矩阵声明 by @baochipham942-eng in #1091
• feat(search): 外部搜索源接入——智谱 Web Search API + MiniMax Token Plan by @baochipham942-eng in #1092
• feat(search): 外部搜索源凭据可在设置页配置 by @baochipham942-eng in #1093
• fix(scenario): stop false stale-build verdicts by @baochipham942-eng in #1094
• ci(renderer): dry-run 门改 npm ci --ignore-scripts，别把成败绑在二进制 CDN 运气上 by @baochipham942-eng in #1096
• feat(model): 能力矩阵接进默认 AI SDK 引擎，deepseek-v4-flash 真正走到 Responses by @baochipham942-eng in #1095
• test(permissions): 两个审批测试改钩搬家后的登记入口，修 main 全量门连红 21 次 by @baochipham942-eng in #1097
• l1/search turn toggle by @baochipham942-eng in #1098
• refactor(model): aiSdkAdapter 纯搬家腾行数余量——998/1000 有效行的雷拆掉 by @baochipham942-eng in #1099
• feat(model): 中转 provider 接进能力矩阵（方案 D）+ Responses 端点与协议家族两处修复 by @baochipham942-eng in #1100
• ci(renderer-bundle): 剩余两处 npm ci 改 --ignore-scripts——按探明结果，不再赌二进制 CDN by @baochipham942-eng in #1101
• fix(search): 联网开关 OFF 态修复——searchEnabled 随发送载荷走，整条删除旁路推送链 by @baochipham942-eng in #1102
• fix(search): 逐轮联网开关接进用户真实提交路径——#1102 只接了编辑/重发旁路 by @baochipham942-eng in #1103
• feat(model): 基元 deepseek-v4-flash-0731 摘「未验证」徽章——ModelRouter 真实入口 3/3 工具调用实测 by @baochipham942-eng in #1104
• fix(settings): effortLevel/thinkingEnabled 随 ConversationEnvelope 走，interactionMode 双端死链拆除 by @baochipham942-eng in #1105
• refactor(chat): 拆除 Code/Plan/Ask 交互模式选择器——纯装饰遗迹（QF-04） by @baochipham942-eng in #1106
• qf01 thinking mode matrix by @baochipham942-eng in #1107
• fix(model): 上下文窗口/max_tokens 查表加 provider 维度——settings (provider,model) 真值优先（QF-02/撞名 H-2+H-3） by @baochipham942-eng in #1108
• fix(pricing): 价格双口径统一——策展价判定收敛到 getCuratedModelPricing（QF-03/撞名 M-1+M-2） by @baochipham942-eng in #1109
• feat(cost): 成本统计与会话画像加 provider 维度——「切中转省了多少」可验证（QF-05/撞名 M-3+M-5） by @baochipham942-eng in #1110
• fix(model): 连通性测试用用户原样填的 model——不再套 MODEL_MIGRATIONS 改写（QF-06/撞名 M-4） by @baochipham942-eng in #1111
• fix(model): Responses 同轮 preamble 修复——function_call 前文本按正文实时下发，且与最终 content 逐字一致（L1-3 语音#5826同款自查） by @baochipham942-eng in #1112
• fix(scenario): 语音剧本判据锚真实副作用 + 崩腿不连坐契约校验（L10） by @baochipham942-eng in #1117
• fix(voice): DashScope usage 稀疏 details 解析拒收——缺席字段兜 0，成本到限提醒链复活（L7 欠账 1b） by @baochipham942-eng in #1113
• fix(security): W3 写边界 ask 设 forceConfirm——devModeAutoApprove 等便利放行层不得吃掉信任边界审批 by @baochipham942-eng in #1118
• fix(security): 语音/无人值守审批停车判定前移——devModeAutoApprove 不再压制停车层（N-L10S1） by @baochipham942-eng in #1115
• fix(scenario): isTask 对齐 harness 解包形状 + 正例腿授权工作区前提（L10） by @baochipham942-eng in #1121
• l1/injection panorama by @baochipham942-eng in #1114
• l8/obs ledger by @baochipham942-eng in #1119
• l1/esm cjs family by @baochipham942-eng in #1116
• l7/turn watchdog by @baochipham942-eng in #1120
• fix(telemetry): 账本健康检查活性判据改窗口总行数——存量 NULL origin 行不再触发升级期假 WARN（L8 观测批 follow-up） by @baochipham942-eng in #1123
• fix(shutdown): T-018 整树退出证明+进程退出收尸 / T-016 持久化失败 fail-closed by @baochipham942-eng in #1122
• fix(shutdown): 停机收尾接进真属主——MCP 断连+幸存者补刀/遥测冲刷/总预算封顶，删死账本 lifecycle.ts by @baochipham942-eng in #1124
• fix(shutdown): T-028 PTY 会话整树退出证明 + 接进停机收尸 by @baochipham942-eng in #1125
• feat(telemetry): 注意力预算第一刀——模型请求 dump 探针 + 四场景五桶分解报告 + 固定开销计数棘轮门（L8 N-L8-ATT1） by @baochipham942-eng in #1126
• refactor(prompts): 注意力预算去重七连——同一信息只进上下文一次（L8 N-L8-ATT2，产品负责人已拍板） by @baochipham942-eng in #1130
• fix(test): PTY 能力探测改成真 spawn 一次，修 Main Full Gate 红 by @baochipham942-eng in #1129
• feat(voice): 三层打断判定链 L2/L3——证据层 shadow mode + ignore_turn 工具出口 by @baochipham942-eng in #1128
• refactor(prompts): _meta 全局语义信封退役，叙事改走 Claude Code 机制（L8 N-L8-ATT4，产品负责人已拍板） by @baochipham942-eng in #1131
• docs(test): 记下 node-pty mock 的真实理由与真 PTY 验法，并标注 knip 对 ptyExecutor 的盲区 by @baochipham942-eng in #1132
• fix(test): AI SDK 路径 _meta 注入断言随机制退役改为反向断言（#1131 漏网） by @baochipham942-eng in #1133
• l7/spk by @baochipham942-eng in #1134
• chore(shell): 删 ptyExecutor 零 importer 的死导出，并同步两档棘轮基线 by @baochipham942-eng in #1135
• fix(terminal): 终端会话终止等整棵树确认退出，并接进停机收尸 by @baochipham942-eng in #1136
• fix(test): 信号属主门的「必须挂 exit」正向锚缩到真有状态要保全的模块（修 Main Full Gate） by @baochipham942-eng in #1138
• feat/n cap1 capability candidates by @baochipham942-eng in #1140
• fix(test): 隐私边界契约测试补 voiceprint 条目（修 Main Full Gate） by @baochipham942-eng in #1137
• docs(research): 补齐实时语音场景五桶（真机通话取证，L8 N-L8-ATT7） by @baochipham942-eng in #1141
• test(tools): 「注册即可发现」门——19 个真·不可达工具进棘轮基线（L8 N-L8-ATT8） by @baochipham942-eng in #1139
• fix(test): 死主进程门的 ComboRecorder 锚点跟上 #1140 的实际接线（修主干全量门） by @baochipham942-eng in #1142
• perf(tools): 七个低频工具挪出常驻工具表，每轮省 4000 token（L8 N-L8-SLIM2） by @baochipham942-eng in #1143
• perf(tools): 常驻工具参数瘦身 453 token/轮 + 立 schema 预算棘轮（L8 N-L8-SLIM3） by @baochipham942-eng in #1145
• test(eval): 注意力预算瘦身 A/B 非劣性评测 + 补 AUTO_TEST_BASE_URL（L8 N-L8-ATT5） by @baochipham942-eng in #1147
• fix(gate): PROMPT_VERSION 门补上工具 schema 这条盲区（L8 N-L8-PVGATE） by @baochipham942-eng in #1148
• fix(gate): 全景表登记 P2b 建任务 nudge，注意力预算棘轮基线随之对账（L8 N-L8-SLIM2 尾巴） by @baochipham942-eng in #1146
• docs(research): 修正 ATT5 报告里写错的 provider 解析根因 by @baochipham942-eng in #1149
• refactor(prompts): 内置规则分流第一刀——接回 2 条真缺的，删掉 7 份从不下发的副本（L8 N-L8-RULES-KEEP） by @baochipham942-eng in #1150
• fix(telemetry): tool_schema_snapshot 专用截断上限，工具表快照不再被截成不可解析 JSON（N-TEL1） by @baochipham942-eng in #1144
• fix(eval): 把「eval 不读用户 config」从隐式行为变成显式策略 + fail-loud（N-PROV1） by @baochipham942-eng in #1151
• fix(tools): 19 个真·不可达工具全部接上到达路径，棘轮基线清零（L8 N-L8-UNREACH19） by @baochipham942-eng in #1153
• refactor(prompts): 规则分流第二刀——6 块下沉到工具 description，顺带修好一条被顶掉的 description（L8 N-L8-RULES-SINK） by @baochipham942-eng in #1152
• fix(skills): 场景描述句式不再当触发词表，止住整份 SKILL.md 灌系统提示（N-L8-ATT10） by @baochipham942-eng in #1154
• refactor(prompts): 规则分流第三刀——htmlGeneration 并进产物简报，outputFormat 死文件清掉（L8 N-L8-HTMLSKILL） by @baochipham942-eng in #1155
• refactor(prompts): 清掉提示词管理器里 12 块只能改不下发的幽灵，补两道可达性门（L8 N-L8-GHOSTRULES） by @baochipham942-eng in #1156
• docs(research): 勘误——injectionDefense 那句是我编的理由，不是查出来的结论 by @baochipham942-eng in #1157
• test(prompts): parity 门补上自己的盲区断言——私有段落推导不到就报红（L8 N-L8-GHOSTRULES 补丁） by @baochipham942-eng in #1158
• fix(telemetry): 注意力预算五桶换真 tokenizer 口径，首轮第一大桶从工具 schema 翻转为静态系统提示（L8 N-L8-RECALC） by @baochipham942-eng in #1159
• feat/dsh engine adapter by @baochipham942-eng in #1160
• l7/rec by @baochipham942-eng in #1161
• feat/tool output contract by @baochipham942-eng in #1162
• test(tools): account for dynamic schema descriptions by @baochipham942-eng in #1163
• refactor: remove unreachable rule pipelines by @baochipham942-eng in #1164
• fix(desktop): capability remote.urls 覆盖整个槽段，修 Dev 槽≥2 上 plugin 命令被 ACL 全拒 by @baochipham942-eng in #1166
• fix(prompt): improve document artifact recall by @baochipham942-eng in #1165
• feat/ptc tool rpc by @baochipham942-eng in #1167
• fix(voice): detect hangup phrase gaps by @baochipham942-eng in #1168
• fix/n l7 toolgap by @baochipham942-eng in #1169
• fix(composer): 主操作位可见性判据收归调度方，占位者不再自行 return null by @baochipham942-eng in #1170
• feat(ptc): PTC 执行侧接线——脚本里的 tools.X() 走回同一个 ToolExecutor（N-PTCEXEC） by @baochipham942-eng in #1171
• fix(permissions): 审批拒绝路径可观测性——ask-denied 带真 trace，reason 说实话（N-PERMTRACE / ADR-057） by @baochipham942-eng in #1174
• fix(test): permissionResponseDelivery 断言跟上审批返回值契约（修 main 红） by @baochipham942-eng in #1175
• fix(agent-engine): 引擎能力位接成机器闸——声明存在但零消费，烧 token 前拦不住（N-DSH9 / 借鉴清单 N9） by @baochipham942-eng in #1176
• fix/n l8 att9 by @baochipham942-eng in #1178
• feat/n dsh1b dsh event sink by @baochipham942-eng in #1179
• fix(context): 溢出恢复不再用被证伪的估算把关（N-DSH3 / 借鉴清单 N3） by @baochipham942-eng in #1177
• fix(voice): 上一代通话模型补回实测可用的 Chelsie + 音色表钉上真跑日期（N-L7-VOICEID） by @baochipham942-eng in #1172
• fix(steer): 辅助运行的转向指令不再当用户气泡渲染（N-L7-STEERUI） by @baochipham942-eng in #1173
• feat(voice): 治「对着半句话抢答」——规矩2改接待分工 (N-L7-WAIT) by @baochipham942-eng in #1180
• feat/n dsh1c dsh resume by @baochipham942-eng in #1181
• feat/n replay p0 by @baochipham942-eng in #1182
• feat/n replay p1 by @baochipham942-eng in #1183
• l7/saydo by @baochipham942-eng in #1184
• feat/n replay p2 by @baochipham942-eng in #1188
• fix: restore voice approval after renderer reconnect (N-L7-STEERHANG) by @baochipham942-eng in #1185
• fix(voice): retire previous-gen call model by @baochipham942-eng in #1186
• l7/int by @baochipham942-eng in #1187
• fix(eval): typecheck independent harness by @baochipham942-eng in #1190
• feat(eval): integrate Inspect five-case execution by @baochipham942-eng in #1189
• fix(permissions): devModeAutoApprove 显式通道——守卫接主路径+判据换 dev 槽+放行如实记机器批准（N-L10S3） by @baochipham942-eng in #1193
• test(voice): add reusable regression eval set by @baochipham942-eng in #1195
• perf(renderer): block-level memoized streaming markdown by @baochipham942-eng in #1192
• l7/audit by @baochipham942-eng in #1194
• fix(test): 补齐权限桩 isDevModeAutoApproveEnabled 修 Main Full Gate 红（N-L10S3 收尾） by @baochipham942-eng in #1196
• fix(test): 路由表断言补 #1194 两条 voice 审计路由（修 Main Full Gate 红） by @baochipham942-eng in #1201
• l7/voiceux by @baochipham942-eng in #1199
• l5/smooth pacing by @baochipham942-eng in #1198
• fix(voice): 根治 meta 派活任务卡投影链 by @baochipham942-eng in #1197
• feat(skills): gate candidates by applicability metadata by @baochipham942-eng in #1191
• l7/artifact by @baochipham942-eng in #1202
• feat(voice): add session audit UI by @baochipham942-eng in #1200
• chore(ratchet): 注意力预算 live voice 基线 93→103 对账 #1199 审批词统一增量 by @baochipham942-eng in #1206
• ci: 注意力预算棘轮接进 swarm-ci(此前仅本地 gates-local 跑,#1199 因此绿灯合入带红主线门) by @baochipham942-eng in #1207
• feat(ptc): harden runtime limits and pin contract gates by @baochipham942-eng in #1205
• l5/content visibility by @baochipham942-eng in #1203
• fix(eval): make mock full evaluation an honest regression gate by @baochipham942-eng in #1204
• fix(renderer): 降噪产物文件卡并锚定完成播报 by @baochipham942-eng in #1208
• feat: stamp turn outcomes in trace ledger by @baochipham942-eng in #1211
• refactor(eval): replace HTML reports with Inspect View by @baochipham942-eng in #1212
• feat(ledger): add streaming trace read APIs by @baochipham942-eng in #1209
• feat(skills): add ADR-034 usage evidence voting by @baochipham942-eng in #1214
• feat(eval): add per-case usage cost reports by @baochipham942-eng in #1215
• test(web): add #1209 trace routes to appAssembly route table expectation by @baochipham942-eng in #1216
• feat(ledger): 会话检查器两层视图+组装面板+印章消费 (N-LEDGER-P1) by @baochipham942-eng in #1217
• feat(ledger): 能力单元四性化——(d,p)声明+命名空间+环检测+LIFO逆登记+capability_lifecycle入账 (N-LEDGER-P2) by @baochipham942-eng in #1218
• feat(ledger): 补偿登记接进工具管线发射类动作 + 能力broker形态 (N-LEDGER-P3) by @baochipham942-eng in #1219
• fix(voice): hold ambiguous truncated dispatches by @baochipham942-eng in #1210
• fix: keep SAYDO guard closed on classifier faults by @baochipham942-eng in #1213
• feat: add editable plan approval gate by @baochipham942-eng in #1220
• feat: follow artifact generation in preview by @baochipham942-eng in #1221
• fix(plan): size add-step icon to match button typography by @baochipham942-eng in #1222
• ledger/ux1 inspector polish by @baochipham942-eng in #1223
• feat(ledger): turnTrace 轮内增量flush(8事件/2s节流)+崩溃可读+检查器进行中活行接回tail (N-LEDGER-P4) by @baochipham942-eng in #1225
• l5/thinkflow by @baochipham942-eng in #1224
• l5/mdswap by @baochipham942-eng in #1226
• l5/diffbench by @baochipham942-eng in #1227
• ledger/p5 history by @baochipham942-eng in #1228
• test(e2e): 修两处真死契约——首启动引导挡路 + 「新会话」按钮已不存在 by @baochipham942-eng in #1229
• chore(deps): 渲染生态件升级巡检首跑——6 项 minor/patch 直升 + Shiki 生态 3→4 major 升级 by @baochipham942-eng in #1231
• fix(model): 流式错误响应保留上游原文 + 协议矩阵覆盖留痕（N-MODELERR/N-PROTOROUTE） by @baochipham942-eng in #1233
• fix(voice): remove polluted tool-turn claims from context by @baochipham942-eng in #1232
• fix(chat): 卡面撤回验证状态徽章——「已验证」是内部术语不该给用户看 by @baochipham942-eng in #1234
• chore(deps): 全仓依赖档位清账——93 包迁 devDependencies + 零容忍档位门 by @baochipham942-eng in #1235
• chore(eval): pacing harness 文档与残留清理 + 三套 harness 性能对照口径统一 by @baochipham942-eng in #1237
• fix(preview): 右栏产物状态徽章换人话——「已验证/未验证/失败」是内部术语 by @baochipham942-eng in #1236
• l8/modeltier by @baochipham942-eng in #1230
• fix(renderer): mermaid 图表主题跟随应用明暗——浅色下节点不再是纯黑块 by @baochipham942-eng in #1240
• fix(security): isolate exec policy by data directory by @baochipham942-eng in #1238
• fix: only learn exec policy from user approval by @baochipham942-eng in #1239
• test(voice-eval): 语音回归对照基线提级到 2026-08-17 by @baochipham942-eng in #1241
• fix(ci): cache Playwright browsers by version by @baochipham942-eng in #1242
• fix(security): scan browser external content by @baochipham942-eng in #1243
• fix: harden concurrent file write safety by @baochipham942-eng in #1244
• n delivcard by @baochipham942-eng in #1245
• feat(command-center): 文字前台恢复短小文件写 by @baochipham942-eng in #1247
• test(e2e): 运行契约+死locator第二批 / feat(dev-slot): 空槽首启动导入模型配置 by @baochipham942-eng in #1246
• feat(permissions): /api/run 审批处理器可注入——前台接真审批岛,评测挂点 fail-closed 桩 by @baochipham942-eng in #1248
• fix(security): 收敛 Bash 安全命令判据 by @baochipham942-eng in #1249
• feat/eval scripted approval by @baochipham942-eng in #1250
• fix(layout): 滚动条窄带补偿加 scrollbar-gutter:stable——悬浮式滚动条平台不再右探 6px by @baochipham942-eng in #1251
• fix/autotest permission gate by @baochipham942-eng in #1252
• chore(e2e): 退役「已过引导」固件 seedE2eSettings by @baochipham942-eng in #1253
• fix/responses toolcall pairing by @baochipham942-eng in #1254
• fix(test): 补三处手写建表缺失的 responses_output 列 by @baochipham942-eng in #1255
• fix: restore release cancellation evidence by @baochipham942-eng in #1256
• fix(renderer): 长会话滚动三门回归——整轮 content-visibility 撤除 + 显式回底结算（N-SCROLLREG） by @baochipham942-eng in #1257

Full Changelog: v0.32.0...v0.33.0