Envara v1.1.3

Envara 1.1.3

修复切换页面或关闭终端视图后，部分命令行程序一直等待终端查询回应、输入没有回显的问题。

• 隐藏后继续应答：每个终端会话独立处理查询，不再依赖可见页面。
• 多个视图保持一致：独立窗口与历史画面恢复不会重复回应同一条查询；原有键盘、粘贴和输入法规则保留。
• 卡顿有迹可查：新增有界的本地阶段诊断，记录慢操作、失败与清理阶段，不记录命令、终端输出、聊天内容、凭据或私人路径。

已有环境、网络、浏览器资料、终端入口与登录档案继续保留。官方 Claude CLI、手动启动方式及权限选项不变。

Downloads

This release provides macOS Apple Silicon (arm64) DMG and ZIP packages, with SHA-256 checksums in SHA256SUMS.txt.

The app uses ad-hoc signing and is not Apple notarized. Windows, Linux and macOS Intel packages are not included.

What's changed

• Terminal queries are answered by one protocol owner per live PTY, including when all views are hidden or closed.
• Additional windows and restored output do not send duplicate replies. The protocol state tracks cursor position, character dimensions, supported modes and the current terminal colors.
• Bounded local timing records distinguish input delivery, workspace requests and cleanup waits without retaining command text, output, conversations, credentials or private paths. Fast operations do not trigger disk writes on their own.
• Existing environment settings, account directories and managed network restrictions are preserved.

Validation scope

• Source checks: 2,955 passed, 8 skipped, 0 failed; production build and all four Sites checks passed. Independent protocol comparisons passed 68 query groups and nine visible-window synchronization sequences. A test-server TLS shutdown race was corrected in its fixture without changing the production DNS implementation.

• Exact macOS arm64 App: 17 UI checks passed, including nine-language first launch, a real shell, hidden-terminal queries, keyboard echo after returning, and one response per query across multiple views and restored output. Thirty-three screenshots were retained for review.

• Packaged services: 44 checks passed across PTY lifecycle/timezone (5), saved terminals (4), Claude MCP controls (10), local SSH and dedicated-session protections (14), route selection and first trust (6), and terminal protocol/lifecycle (5). The protocol checks also exercised synchronization timeouts and reset behavior. The rebuilt backend passed five core REST/MCP checks.

• Strict signatures, frozen source/resource consistency and the existing privacy scan rules passed. All owned acceptance processes, sockets and temporary data were cleaned up. DMG and ZIP contents are verified against this same signed App before publication.

The missing-response bug was reproduced with a real raw PTY and the terminal component. A separate hidden-window check ran for more than 320 seconds, including background timer throttling and restored keyboard input. This does not establish all long-running or operating-system sleep/resume scenarios, or prove that every input, snapshot or shutdown delay has the same cause.

SSH and MCP checks use disposable local services. They do not establish public provider connectivity, real Claude account login, model inference or a guarantee against account restrictions. Native IME manual acceptance, other platforms and privileged attached-application routing are outside this release's new acceptance scope.

Source: dccb775.

Envara v1.1.2

Envara 1.1.2

修复首次添加 SSH 主机，并让每条连接明确选择网络线路。本版替代 1.1.1，建议升级。

• 首次添加可以完成：通过所选线路读取服务器指纹，核对并确认后保存，不再要求提前写入本机 known_hosts。
• 每条 SSH 独立选线：添加时选择本机网络或已配置的环境网络；普通终端、Claude 会话与复制会话沿用该连接保存的选择。线路拒绝、变化或失效时停止连接。
• 错误原因清楚显示：修复 Electron 调用过程中错误码丢失的问题，正确显示主机信任和线路相关错误。
• 原有隐私保护继续保留：宿主私钥与凭据隔离、专用 Claude 进程的设备信息读取限制、终端网络围栏及会话级浏览器绑定继续生效。已有 SSH 记录保留原本机路线。

已有环境、网络、浏览器资料、终端入口及登录数据继续保留。密码仍仅在本次应用运行期间有效，退出后需重新提供。

Downloads

This release provides macOS Apple Silicon (arm64) DMG and ZIP packages, with SHA-256 checksums in SHA256SUMS.txt.

The app uses ad-hoc signing and is not Apple notarized. Windows, Linux and macOS Intel packages are not included.

What's changed

• First-contact SSH setup now observes the server fingerprint through the chosen route and requires explicit confirmation before saving it inside Envara.
• Each SSH connection persists its host-network or configured-environment route. Terminal and Claude sessions, including duplicates, reuse that selection and fail closed when it is unavailable.
• Desktop IPC preserves structured error codes so the interface can explain trust and routing failures.
• Existing private-key, credential, device-read and managed-terminal network restrictions are retained.

Validation scope

• Source checks: 2,921 passed, 8 skipped, 0 failed; production build and all four Sites checks passed.
• Exact macOS arm64 App: 14 UI checks passed, including nine-language first launch, a real shell and its lifecycle, and the complete first-host fingerprint/confirmation/save flow through production IPC without a pre-existing known_hosts. Thirty-three screenshots were retained for review.
• Packaged services: 39 checks passed across PTY lifecycle/timezone (5), saved terminals (4), Claude MCP controls (10), public-key SSH and dedicated-session protections (14), and the new per-connection route workflow (6). Password/key authentication, duplicates, proxy refusal without fallback and route revocation used real owned SSH services. The rebuilt backend also passed five core REST/MCP checks.
• The legacy SSH acceptance fixture needed one strict expected field, route: {kind: "host"}, to match the new public discovery schema. Its initial failure and the narrowly adapted rerun were retained; the product and package were unchanged.
• Strict signatures, source/resource consistency and privacy checks passed. Owned test processes, sockets and temporary data were cleaned up. DMG and ZIP contents are checked against this same frozen App before publication.

The SSH and MCP checks use disposable local services. They do not establish public SSH/provider connectivity, real Claude account login, model inference or a guarantee against account restrictions. Native IME manual acceptance, other platforms and privileged attached-application routing were not repeated for this release.

Source: c1813db.

Envara v1.1.1 (superseded by v1.1.2)

已由 Envara v1.1.2 替代，请升级。 1.1.1 的首次 SSH 主机信任流程存在问题；1.1.2 已修复，并新增每条连接的网络线路选择。

Superseded by v1.1.2. The first-contact SSH trust issue is fixed in the newer release.

Envara 1.1.1

让终端回到工作区的中心。

• 独立 SSH 页面：在侧栏管理连接、主机信任与凭据，不再占用终端内容区域。
• 更完整的终端工作区：终端铺满右侧区域；工具栏收为一行，已保存终端与会话设置按需展开。独立窗口也可在终端和 SSH 页面之间切换。
• 更可靠的关闭行为：修复主机时区变化后可能出现的“终端仍有未退出的子进程”误判，继续保留进程身份核对；收起视图保留会话，关闭会话才结束进程。
• 更简洁的界面：减少重复说明，保持九种界面语言、深浅主题和键盘导航。

已有环境、网络、浏览器资料、终端入口和登录数据继续保留。

Downloads

This release provides macOS Apple Silicon (arm64) DMG and ZIP packages. SHA-256 checksums are included in SHA256SUMS.txt.

The macOS app uses ad-hoc signing and is not Apple notarized. Windows, Linux and macOS Intel packages are not included in this release.

What's changed

• SSH connections have their own workspace page.
• The terminal uses the full right-hand workspace with a compact toolbar and on-demand saved-session/settings panels.
• Standalone terminal windows support terminal/SSH navigation while retaining the session.
• Process identity timestamps use UTC, avoiding false cleanup failures after a host timezone change without changing the host or terminal timezone.

Validation scope

• Source checks: 2,859 passed, 8 skipped, 0 failed; production build and all four Sites checks passed.
• Exact macOS arm64 App: 13 UI checks passed, covering nine-language first launch, the SSH page, a real shell, hidden-session retention, standalone-window switching and session closure. Minimum/wide window geometry and light/dark themes passed; 32 screenshots were retained for review.
• Packaged services: 33 checks passed across PTY lifecycle/timezone (5), saved terminals (4), Claude MCP controls (10) and local SSH fixtures (14). The rebuilt Go backend also passed five core REST/MCP checks.
• The frozen App passed strict signature, source/resource consistency and privacy checks. Test processes, sockets and temporary data were confirmed cleaned up. DMG and ZIP contents are checked against the same frozen App before publication.

The service checks use disposable local fixtures. They do not establish real Claude login/model access or public SSH/provider connectivity. Historical browser and privileged attached-application routing results retain their original version scope. Native IME manual acceptance and other platforms were not repeated for this release.

Source: 7b53bb6.

Envara v1.1.0

Envara v1.1.0 — 工作区焕新、保存终端与 SSH 双路线

更新内容

• 更清晰的工作台。 精简重复说明，统一控件与间距；左侧导航可收起为图标栏，并保留选择，为浏览器、终端与应用内容留出空间。
• 给常用终端一个名字。 普通终端和 Claude 终端自动保存入口；可改名、返回运行中的会话，或按保存的网络、浏览器、档案及目录重新打开空闲 shell。不会重放命令，移除入口不删除登录数据或结束进程。
• 修复自定义 MCP 与插件发现。 环境内的官方 Claude CLI 可读取用户、项目与本地配置，保留官方信任提示、Envara 的固定浏览器工具和会话网络约束。冲突的账号、服务商或路由覆盖保持拒绝，不导入宿主凭据。
• macOS SSH 按目标选择路线。 已保存的主机与端口经受控连接使用本机出口，沿用已有 VPN/TUN，服务器可见该出口 IP；未保存目标经境舱代理连接。保存目标锁定、缺少授权或用户名不符时拒绝，不转代理；连接失败也不切换路线。
• 收紧 SSH 继承信息。 使用固定 SSH 配置与允许列表环境，不自动传递本机用户名、主机名、工作目录或时区；密码仍仅保留在应用内存，私钥保留本机。协议协商、选定远端用户名、终端信息和出口 IP 仍可能被服务器观察。

升级与使用

退出旧版 Envara 后替换应用，保留已有配置、浏览资料及账号数据。保存终端入口从新创建的会话开始记录，无法自动重建升级前已经结束的会话。新建终端获得更新后的 MCP/SSH 启动配置；修改 MCP 或插件后，退出 Claude 再输入 claude。

SSH 仍需可信主机身份和有效认证；不支持任意 OpenSSH 参数、-i、跳板、端口转发或集成的 scp / sftp。受控本地服务的验收不证明特定公网服务器可达，MCP 发现也不代表模型主动调用成功。账户限制、完整匿名或全部追踪消失均不作保证。

验证与发布范围

• 源码固定于 2e2e3041d4123485ad27576a740ad063925b13e5：2841 项测试通过、8 项条件跳过、0 项失败；前端构建、Sites 4 项检查及 1.1.0 后端准备通过。
• macOS arm64 精确签名包：官方 CLI 的 MCP 检查 10 项、保存终端 4 项、SSH 双路线 11 项通过，受控测试进程与临时目录已清理。真实账号登录、模型主动调用工具与特定公网 SSH 服务器不在这些检查范围内。
• 原始 sidecar smoke 11 项通过，使用经签名和摘要核验的官方 CloakBrowser；本轮未新增 Camoufox 或 BrowseForge Chromium 的真实浏览器验收。
• 最终干净首次启动与界面 8 项检查通过，并记录 24 张截图：九语首次设置与 SSH 说明、空工作区、侧栏折叠与持久化导航、密码输入清空及可信主机指纹确认；放大与窄窗口的深浅主题布局通过，正常退出后无受控进程残留。
• 精确包资源比对通过：131 项归档文件、206 项外部资源、65 个目录；源码 934 文件与 App 1657 文件隐私扫描零命中。9 个限定签名目标及完整 App 严格签名校验通过。
• DMG 与 ZIP 各 1274 项内容、权限、链接和签名均与冻结 App 一致，ZIP CRC 与镜像校验通过；已卸载临时镜像并清理归档目录。附件提供 SHA256SUMS.txt。
• Windows、Linux、macOS Intel：本轮未验收，不提供本轮已验证制品。
• macOS 使用本地 ad-hoc 签名，未使用 Apple Developer ID 签名或公证。

附件：Envara-1.1.0-mac-arm64.dmg、Envara-1.1.0-mac-arm64.zip、SHA256SUMS.txt。

使用指南 · 验证范围

---

Envara v1.1.0 — A clearer workspace, saved terminals and two SSH routes

What changed

• A clearer workspace. Less repeated copy, consistent controls and spacing, and a collapsible icon sidebar that remembers your choice leave more room for browsers, terminals and apps.
• Named terminals you can return to. Ordinary and Claude terminals automatically keep saved entries. Rename them, select a running session, or reopen an idle shell with its saved network, browser, login profile and directory. Commands are never replayed; removing an entry preserves login data and running processes.
• Custom MCP and plugin discovery fixed. The official Claude CLI can read environment-local user, project and local settings while retaining official trust prompts, Envara’s pinned browser tools and session network controls. Conflicting account/provider or routing overrides remain refused; host credentials are not imported.
• SSH routes chosen by destination on macOS. Saved host/port pairs use a controlled connection through the host network exit, including an existing VPN/TUN; the server can see that exit IP. Unsaved destinations use the environment proxy. Locked, unauthorized or mismatched saved entries are refused rather than sent through the proxy. Failed connections never change routes.
• Less host information inherited by SSH. Fixed SSH configuration and an allowlisted environment avoid automatically forwarding the local username, hostname, working directory or timezone. Passwords remain in application memory and private keys stay on the Mac. The server can still observe protocol negotiation, the chosen remote username, terminal information and exit IP.

Upgrading

Quit the previous Envara version before replacing the app. Existing configuration, browser data and account data are preserved. Saved terminal entries begin with newly created sessions; ended sessions from before the upgrade cannot be reconstructed automatically. Create a new terminal for the updated MCP/SSH launcher. After changing MCP servers or plugins, exit Claude and invoke claude again.

SSH still requires trusted host identity and valid authentication. Arbitrary OpenSSH options, -i, jump hosts, forwarding and integrated scp / sftp are unsupported. Controlled local-server checks do not establish production-server connectivity, and MCP discovery does not establish model-directed tool use. There is no promise of immunity from account restrictions, complete anonymity or removal of all tracking.

Verification and release scope

• Source is frozen at 2e2e3041d4123485ad27576a740ad063925b13e5: 2,841 tests passed, 8 were conditionally skipped and none failed. The frontend build, 4 Sites checks and 1.1.0 backend preparation passed.
• The exact signed macOS arm64 package passed 10 official-CLI MCP checks, 4 saved-terminal checks and 11 SSH dual-route checks. Owned test processes and temporary directories were cleaned up. Real-account sign-in, model-directed tool calls and connectivity to a particular public SSH server are outside these checks.
• The unchanged sidecar smoke passed all 11 checks using the official CloakBrowser after signature and digest verification. This release adds no new real-engine Camoufox or BrowseForge Chromium acceptance results.
• All 8 clean first-launch and interface checks passed, with 24 screenshots recorded: nine-language setup and SSH copy, an empty workspace, persistent sidebar navigation, password-field clearing and trusted-host fingerprint consent. Zoomed and narrow-window layouts passed in light and dark themes; no owned processes remained after normal exit.
• Exact package comparison passed for 131 archive files, 206 external resources and 65 directories. Privacy checks found no matches across 934 source files and 1,657 App files. All 9 bounded signing targets and the complete App passed strict signature verification.
• All 1,274 entries in each DMG and ZIP match the frozen App in content, permissions, links and signatures. ZIP CRC and disk-image checks passed; the temporary image was detached and archive staging removed. SHA256SUMS.txt accompanies the downloads.
• Windows, Linux and Intel macOS were not accepted in this release; no newly verified artifacts are provided.
• macOS uses local ad-hoc signatures, without Apple Developer ID signing or notarization.

Downloads: Envara-1.1.0-mac-arm64.dmg, Envara-1.1.0-mac-arm64.zip and SHA256SUMS.txt.

User guide · Verification scope

Envara v1.0.4 — SSH password login and session discovery

Envara v1.0.4 让环境内的 SSH 连接更容易配置和使用。

• 密码或私钥登录：普通终端、Claude 专用终端及其独立复制都可使用已保存的连接。密码只在本次应用运行的主进程内存保留，退出后清除，不写入命令、环境导出或提供给 Claude。
• 直接查看可用连接：终端提供 envara-ssh list 和 envara-ssh help，Claude 会话提供只读连接发现工具；查询只返回当前会话已加载的连接及用法。
• 支持常用 SSH 写法：除保存别名外，可使用与保存记录一致的 user@host、-p、-l、TTY 和详细输出参数。交互登录及远程命令都保留已确认的主机身份和环境所选代理，不回退直连。
• 取消定时到期：密码与私钥授权在当前运行期间不会定时过期；结束会话、停止线路或退出应用仍会清理所属连接。兼容旧有限期限时，到期只限制新认证，不切断已建立的 SSH。
• 完善交互与清理：改进输入背压、取消、异常断线、复制会话和路由撤销处理，并同步九种界面语言。

Envara v1.0.4 makes SSH connections easier to configure and use inside an environment.

• Choose password or public-key authentication in ordinary, dedicated Claude and independently duplicated terminal sessions. Passwords stay in main-process memory for the current app run and are cleared on quit.
• Discover the connections loaded in the current session with envara-ssh list, envara-ssh help or the read-only Claude session tool. Use saved aliases or matching host, user and port arguments.
• Password and key authorizations no longer expire on a timer. Existing SSH connections also survive the expiry of legacy finite authorizations; ending a session, revoking its route or quitting the app still performs cleanup.
• Improve interactive input, cancellation, abrupt-disconnect handling and process cleanup, with settings in all nine interface languages. Host verification and the selected authenticated proxy remain required, with no direct-network fallback.

Downloads: macOS Apple Silicon (arm64) DMG and ZIP, with SHA256SUMS.txt. These packages are locally ad-hoc signed, without Apple Developer ID signing or notarization. Other platforms are not included in this release.

SSH acceptance uses disposable local servers and real native SSH through the controlled proxy. Time advancement is injected, not a real elapsed day. The unchanged official Claude CLI is checked with --version; this does not establish production-server authentication or model-directed SSH use. Upstream port policies and connection failures still apply. SCP/SFTP, jump hosts and forwarding are not integrated.

See SSH usage, verification scope and source changes.

Envara v1.0.3 — Protected SSH connections

Envara v1.0.3 补齐终端受控 SSH 连接。

• 普通终端与 Claude 专用会话可保存 SSH 连接，经环境所选认证代理访问服务器；保留网络围栏，不回退直连。
• 每个会话使用独立、限定目的地的密钥授权，原私钥保留本机，不随环境导出。
• 新增九语言连接设置与主机指纹核对，并完善会话结束、路由失效和授权清理。

支持保存别名的 SSH 交互和远程命令；要求 macOS、OpenSSH 8.9+、未加密的 0600 私钥及已信任主机。上游端口限制仍适用。详细要求、当前未支持的 scp/sftp 与跳板等功能见 SSH 使用说明。

Envara v1.0.3 adds protected SSH connections to the terminal workflow.

• Save SSH connections for ordinary and dedicated Claude sessions through the selected authenticated proxy, retaining the network fence and refusing direct fallback.
• Use a separate destination-constrained agent for each session; original private keys stay on the host and out of environment exports.
• Add connection settings in all nine interface languages, host-fingerprint confirmation, and session/route cleanup.

Downloads: macOS Apple Silicon (arm64), locally ad-hoc signed, without Apple notarization. DMG and ZIP include SHA-256 checksums. See verification scope and source changes.

Envara v1.0.2 — 终端输入优化 / Terminal input fixes

1.0.2 更新 · 2026-10-19

• 修复终端中文输入时拼音遮挡最后一个汉字的问题，处理宽字、行末换行、最后一行和长拼音的预编辑位置。
• 同步输入法候选窗位置；确认或取消输入后恢复正常光标位置。
• 保留此前的 Shift+Enter 换行、中文顿号、候选确认和读屏兼容修复，内嵌面板与独立窗口继续使用相同规则。

已完成 macOS 原生中文输入法实测、26 项终端输入与布局回归，以及精确应用包的终端和干净首次启动检查。完整 Node 回归 2,541 项通过、7 项跳过、0 失败；构建、Sites 与工作区检查通过。

版本号保持 1.0.2，本次源码提交为 097f89e。同名 DMG、ZIP 和 SHA-256 校验文件已更新；已下载旧 1.0.2 的用户请重新下载，退出旧版后替换应用。提供 macOS Apple Silicon（arm64）版本。

What's changed

• Fix Chinese IME preedit text obscuring the last character in the terminal, including wide characters, pending line wraps, the last row and long compositions.
• Align the IME candidate anchor with the preedit text, then restore the normal cursor position when composition ends.
• Preserve the earlier Shift+Enter, Chinese punctuation, candidate-confirmation and screen-reader fixes across the terminal panel and separate windows.

Verified with the native macOS Chinese IME, 26 terminal input/layout checks, and the exact application package's terminal and clean first launch. The full Node suite passed 2,541 tests with 7 skipped and no failures; build, Sites and workspace checks passed.

The version remains 1.0.2, from source commit 097f89e. The DMG, ZIP and SHA-256 files have been replaced. If you already downloaded 1.0.2, download it again and quit the previous app before replacing it. Downloads target macOS Apple Silicon (arm64).

验证范围 / Verification · 全部改动 / Changes

Envara v1.0.1 — 代理与支付兼容改进 / Proxy and payment compatibility

中文

Envara 1.0.1 改善 HTTP/HTTPS 代理下的连接与支付兼容性，并修复网络列表中的重复条目。

更新内容

• 通用代理兼容：HTTP/HTTPS 节点统一使用托管线路。遇到符合条件的上游域名 CONNECT 502 时，通过同一代理执行加密 DNS 查询，并尝试最多两个动态公网 IPv4 地址恢复连接。浏览器、终端和受支持附加应用共用该线路机制，REST/MCP 启动入口也检查托管线路。
• 支付服务兼容：调整标准与严格模式的追踪保护规则，为指定 Stripe、Braintree、PayPal 和 Adyen HTTPS 服务提供兼容例外；PayPal 和 Adyen 进一步限定路径。
• 网络列表去重：合并同一已保存节点的重复配置投影，保留独立节点和现有绑定。
• 九语言连接诊断：环境详情新增默认收起的诊断区，提供连接恢复计数和固定错误类别，便于定位问题。

连接恢复保留原域名 TLS 验证，不解密目标流量、不重放已发送请求，也不回退直连。认证失败、限流和明确策略拒绝不触发恢复。现有代理配置、位置、设备身份与账号资料保持原有保存方式，无需重新创建环境。

验证与下载

维护者于 2026-10-18 完成本地 1.0.1 的实际付款测试并确认通过；本次上传同一批已测制品。

• Node：2,514 项通过、7 项跳过、0 失败；前端构建和 4 项 Sites 检查通过。
• Go：5 个相关包的 race 检查通过，含子测试共 73 项；真实内置 Mihomo 的 14 项本地传输检查通过，覆盖恢复期限、单次 POST、认证及证书拒绝和资源清理。
• 桌面与制品：独立工作区、干净首次启动、九语言和所属进程退出已检查；DMG、ZIP 与已安装应用各 1,273 项内容、权限和链接一致。当前源码与完整应用通过现有发布隐私规则扫描，无命中。

下载适用于 macOS Apple Silicon（arm64）。打开 DMG，将 Envara 拖入“应用程序”，也可使用 ZIP；校验值见 SHA256SUMS.txt。退出旧版 Envara 后再替换应用，保留现有用户数据。

应用使用本地 ad-hoc 签名，未使用 Apple Developer ID 签名或公证。本轮未重复附加应用的特权 PF/GUI、公网出口全矩阵及其他平台验收。维护者付款结果与自动化公开端点检查分别记录，不表示任意网站或支付服务均已验证。完整范围见 验证说明。

English

Envara 1.0.1 improves connection and payment compatibility with HTTP/HTTPS proxies and fixes duplicate network entries.

What's changed

• General proxy compatibility: HTTP/HTTPS nodes now use the managed route. Eligible upstream hostname CONNECT 502 failures can recover through encrypted DNS and up to two dynamically resolved public IPv4 addresses, using the same proxy. Browsers, terminals and supported attached apps share this route mechanism; REST/MCP launch entry points also enforce managed routes.
• Payment compatibility: Standard and strict privacy modes provide compatibility exceptions for selected Stripe, Braintree, PayPal and Adyen HTTPS services, with additional path restrictions for PayPal and Adyen.
• Network list fix: Duplicate projections of the same saved node are merged while independent nodes and existing bindings are preserved.
• Diagnostics in nine languages: Environment details include a collapsed connection diagnostics section with recovery counters and fixed error categories.

Recovery preserves TLS verification against the original hostname, does not decrypt target traffic or replay requests already sent, and never falls back to a direct connection. Authentication failures, rate limits and explicit policy denials do not trigger recovery. Existing proxy settings, locations, device identities and account data retain their storage behavior; environments do not need to be recreated.

Verification and downloads

The maintainer confirmed a successful payment test with the local 1.0.1 build on October 18, 2026. This release uploads those same tested artifacts.

• Node: 2,514 passed, 7 skipped, no failures; frontend build and all 4 Sites checks passed.
• Go: race checks passed across 5 affected packages, including 73 checks with subtests. All 14 local transport checks against bundled Mihomo passed, covering recovery deadlines, single-delivery POST, authentication and certificate failures, and cleanup.
• Desktop and artifacts: isolated workspace, clean first launch, nine-language coverage and owned-process exit were checked. The DMG, ZIP and installed app match across 1,273 entries including contents, permissions and symlinks. Current source and the complete app passed the existing release privacy scanner with no findings.

Downloads target macOS Apple Silicon (arm64). Open the DMG and drag Envara to Applications, or use the ZIP. Checksums are in SHA256SUMS.txt. Quit the previous Envara version before replacing the app and retain existing user data.

The app is locally ad-hoc signed, without Apple Developer ID signing or notarization. The full privileged attached-application PF/GUI and public-egress matrix, and other platforms, were not revalidated in this release. The maintainer's payment result is recorded separately from automated public-endpoint checks; it does not establish coverage for every website or payment service. See the verification scope.

Changes: v1.0.0...v1.0.1

Envara 1.0.0

Envara 1.0.0 is an open-source desktop workspace for browser environments, terminals and supported desktop applications.

Highlights

• Refined three-column workspace with light, dark and system appearance, and nine interface languages. The empty Browser page now explains how to create an environment and choose its browser engine.
• Proxy setup automatically finds a nearby address, with a concise location summary and manual adjustment. A suggested address is a reference derived from the estimated IP location.
• More consistent browser identities, environment-specific Claude profiles and terminal workflows, plus improved WS/WSS tracker controls.
• Improved managed VS Code startup, selected-route behavior, stop/quit cleanup, proxy input validation and packaging consistency.
• First launch keeps your system browser unchanged. Environment links and optional macOS application-link handoff now have separate controls; restoring your previous default browser preserves your internal-link preference.
• Shorter project introduction, a detailed usage guide, and directly visible USDT, USDC and Binance support options with network icons checked against Binance public pages.

Packaging correction

The v1.0.0 downloads were replaced to remove local build-account metadata, macOS resource-fork sidecars and extended attributes from packaged source archives. Mihomo corresponding-source files and licenses remain unchanged. These archive-metadata checks do not constitute a recursive secret audit of every historical release or Git commit. The replacement also includes the explicit system-link consent fix and the complete production dependency tree. The latest replacement also includes the nine-language Browser empty-page guidance. Its renderer was rebuilt; the backend, native components and production dependencies remain byte-for-byte unchanged. The source tag and checksums were updated together.

Download

macOS Apple Silicon (arm64): choose the DMG and drag Envara into Applications, or extract the ZIP. SHA256SUMS.txt is included. This release is locally ad-hoc signed; it has no Apple Developer ID signature or notarization.

Validation and limits

For the replacement source commit, Node regression tests passed (2,453 passed, 7 skipped, 0 failed, using bounded concurrency), alongside the frontend build and all 4 Sites checks. An earlier unbounded run hit a timing-sensitive SOCKS fixture; its isolated rerun and the complete bounded run passed. The latest exact package passed clean first launch and visible Browser empty-page checks in all nine languages using a disposable data directory; normal quit left no owned processes. Its packaged terminal also passed real PTY input/output, resize, reopen and cleanup checks. The previous replacement package passed internal-link off/on persistence: Chrome remained the system browser and startup/settings installed no link-router helper. Explicit macOS system-link opt-in was not repeated. Automatic address lookup/save and normal exit were also exercised during this release cycle. Managed VS Code HTTPS egress, terminal child requests, direct IPv4 refusal and stop/active-quit cleanup were exercised on the preceding repair package. The final source-archive metadata cleanup and trust-pin update passed focused resource and package checks; the full native matrix was not repeated.

The supplied external HTTP proxy returned upstream 407 responses, so its live egress remains unverified. Other platforms, arbitrary applications, IPv6 and real account sign-in are outside this release's live acceptance scope. Under heavy process churn, conservative startup checks can require a cleanup retry; restarting remains blocked until cleanup is confirmed.

See verification scope and capabilities for the measured coverage.

---

正式版提供 macOS Apple Silicon 的 DMG、ZIP 与校验文件。新增自动附近地址与手动位置调整，精简定位说明，并完善九语言工作区、浏览器身份、终端及附加应用工作流。本次同版本更新补充浏览器空页的九语言创建引导，源码、DMG、ZIP 与校验文件同步更新。详细实测范围和限制见上方验证文档。