Ternilo v0.2.28

Ternilo v0.2.28

本补丁集中改进模型连接、工具失败处理和只读审查的可靠性，界面同步支持中文、英文和韩文。

• 模型网关每 15 秒传输保活，避免长时间思考完全静默。断线、Server 停机和授权变化贯穿请求与尝试记录，错误详情可直接打开对应的用量记录；未知用量不记作零，也不自动重发结果未知的请求。
• OpenAI Responses 保留工具参数原有的可选语义，不再由上游自动严格化为必填。
• write_file 自动创建工作区内缺少的父目录，空文件和清空后的历史版本可预览、下载和恢复。
• 历史搜索补充中文、韩文与中英混合子串命中，同时保留全文相关性、权限范围及筛选条件。
• 在 shell-tool 配置具名检查后，只读 reviewer 可以用 run_check 验证结果；命令由配置固定，工作区保持只读，普通 Shell、终端、后台任务和写文件权限不扩大。
• 受限进程使用专属可写临时／缓存目录，并随进程树回收；macOS 临时路径规范化，并只为系统工具的 xcrun_db 缓存文件提供精确写权限，不开放用户临时目录的其他写入。
• Rhai 新增 try_tool，以 ok / result / error 保留失败命令的退出码、标准输出、标准错误和超时状态；超时前输出不再丢失。原工具调用继续抛错，但不再把整段 Git JSON 塞进异常原因。
• 代码图谱默认精简为符号、导入及所选文件中的候选调用边；detail: "full" 保留全部调用位置。Rhai 解析失败补充源码片段和反引号提示。
• 更新 HTTP 依赖至 Salvo 1.0.1，采用已修复安全公告的 zstd 0.14.3、zstd-safe 8.2.0 和 zstd-sys 2.1.2。

任务提交成功后，关闭 Server 浏览器不会停止电脑端任务；重新打开可查看结果。执行电脑、后台服务和实际模型连接仍须可用。

升级

按原方式更新客户端，并拉取 ghcr.io/mosttt/ternilo-server:0.2.28 后重建 Server 容器。Executor 协议 49、数据代次 1 和升级签名策略不变。Windows 需保留同版本 ternilo-sandbox-windows.exe；官方完整包会一并提供。具名检查的配置示例见工具与多 Agent。

使用既有 Worker 的部署须同步使用同版本 Server／Worker，并将私有 Worker policy 的 catalog_revision 更新为 ternilo-cloud-v3；仓库示例与部署模板已同步。不使用 Worker 的部署无需此步骤。

---

Ternilo v0.2.28

This patch improves model transport, tool failure handling and read-only verification, with Chinese, English and Korean UI guidance.

• Send model gateway keepalives every 15 seconds during silent reasoning. Correlate executor disconnects, Server shutdown and authorization changes across requests and attempts, with direct navigation from error details to usage records. Unknown usage is not zero; uncertain requests are not replayed automatically.
• Preserve optional OpenAI Responses tool arguments instead of allowing automatic strict normalization.
• Create missing workspace parent directories for write_file; retain zero-byte file versions for preview, download and recovery.
• Supplement history search with Chinese, Korean and mixed-language substrings while retaining full-text relevance, authorization scope and filters.
• Configure named checks in shell-tool so read-only reviewers can verify results through run_check. Commands are fixed by settings, the workspace stays read-only, and ordinary Shell, terminal, job and file-write access remains denied.
• Give restricted processes private writable temporary/cache directories held until process-tree cleanup. Canonical macOS paths and narrowly scoped xcrun_db cache-file writes support system tools without opening other user-temporary files.
• Add Rhai try_tool with ok / result / error, preserving exit status, stdout, stderr and timeout state, including output captured before timeout. Existing calls still throw, with concise Git failure messages instead of serialized JSON exceptions.
• Default code maps to symbols, imports and candidate calls within selected files; use detail: "full" for all call locations. Rhai parse errors add bounded source excerpts and backtick guidance.
• Update HTTP dependencies to Salvo 1.0.1 with fixed zstd 0.14.3, zstd-safe 8.2.0 and zstd-sys 2.1.2.

After accepted submission, closing the Server browser does not stop computer-side execution. Reopen it to view the result; the computer, background service and selected model connection must remain available.

Upgrade

Update clients normally, then pull ghcr.io/mosttt/ternilo-server:0.2.28 and recreate Server. Executor protocol 49, data epoch 1 and update-signature policy remain unchanged. Windows clients require the matching ternilo-sandbox-windows.exe, included in official complete packages. See named verification checks.

Existing Worker deployments must use matching Server/Worker versions and set catalog_revision to ternilo-cloud-v3 in their private Worker policy. Repository examples and deployment templates are synchronized. Deployments without Worker need no policy change.
Server image: ghcr.io/mosttt/ternilo-server:0.2.28 (linux/amd64, linux/arm64).