Amber v0.4.4

Amber v0.4.4 Release Notes

Release Summary

Amber v0.4.4 focuses on local data isolation, deterministic cloud sharing,
network reliability, and a complete Codex injection flow. It is a data-model
upgrade from v0.4.3 and should be distributed as one final Windows installer.

User-Facing Changes

• Each cloud user now has an isolated local workspace. Accounts, proxies,
  settings, sync queues, tombstones, conflicts, and Codex targets do not leak
  between users on the same computer.
• Ambiguous legacy databases open in a read-only recovery workspace. Amber does
  not guess ownership or automatically upload uncertain data.
• Cloud sharing no longer requires friends. The primary flow is now a
  nine-digit connection code plus a six-character temporary password.
• Owners explicitly select one primary relay device and up to two backup
  devices. Requests are never replayed on another device after upstream work
  has started.
• Accounts have explicit direct, system, and proxy network modes. A direct
  account cannot accidentally inherit a process or system proxy.
• Codex injection now starts the local service, validates the Amber instance,
  local API key, and model list, writes the configuration, and reads it back
  before reporting success.
• Amber Cloud uses https://api.amberapp.asia as the preferred endpoint and the
  Workers domain as a fallback for idempotent requests.
• Moving the data directory now migrates and validates the complete workspace
  tree instead of copying only the current database.

Compatibility And Migration

• Local database schema: 16.
• Cloud routing migration: 0009_v044_device_routing.sql.
• Cloud latest-client migration: 0010_v044_latest_client.sql.
• Existing v0.4.3 files are preserved during migration and are not merged back
  during rollback.
• Historical friend and share-group tables remain server-side for compatibility,
  but the v0.4.4 primary interface does not expose the friend workflow.
• minimum_client_version remains 0.4.3 during Worker deployment. It may be
  raised to 0.4.4 only after the final installer and GitHub Release are
  publicly downloadable.

Release Gate

• Go tests and race tests pass.
• Vue typecheck, Vitest, Playwright E2E, and production build pass on Node.js 24.
• Worker typecheck and the full Worker test suite pass.
• Rust tests pass.
• One NSIS installer is generated and its SHA-256 is recorded.
• The installer is not installed or tested against the user's live Amber
  installation. In-place upgrade validation must run in an isolated environment.
• No production secret is stored in source code, documentation, build logs, or
  Git history.

Build Artifact

• File: Amber_0.4.4_x64-setup.exe
• Size: 8,005,866 bytes
• SHA-256: BA956575A2F326ECF7D29F42CE48938C42A927DB9805BCB30018347FFBFBE6FD

Post-Release Operations

1. Publish the final v0.4.4 installer and checksum.
2. Confirm the Release asset is downloadable.
3. Deploy Worker migrations and code.
4. Set minimum_client_version to 0.4.4 only after steps 1-3 succeed.
5. Update the public website download metadata from its separate website task.

Amber v0.4.3

Amber v0.4.3 fixes cloud-sharing credential consistency across the Cloud account page, Accounts page, batch tests, and real Codex gateway traffic.

Highlights:

• Received cloud shares are canonical managed accounts; no second manual Guest Key copy is required.
• Account-page tests use the same full gateway path as real Codex requests.
• Guest Key rotation is picked up automatically, and revoked credentials are removed locally.
• share_access_revoked is no longer misreported as a ChatGPT re-login failure.
• Cloud-share health tests no longer silently change the local routing switch.
• Global proxy application and dashboard account counts include managed cloud shares.
• Managed-share UI clearly separates owner-managed limits from recipient proxy and routing controls.

Validation:

• Go test, vet, and race suites passed.
• Worker: 51 tests passed.
• Frontend: 40 unit tests and production build passed.
• Rust: fmt, clippy, and 9 tests passed.
• Playwright: 72/72 tests passed across desktop and compact viewports.

Installer SHA-256:
724988948FD9B8E7CA8208C4D9046766CB9DAF79AB50AAA3014468DA5F1C7F12

Amber v0.4.2

Amber v0.4.2 focuses on simple, reliable cloud sharing.

• Share multiple accounts with a 9-digit connection code and temporary password.
• Allow 1-20 recipients while issuing an isolated Guest Key to each person.
• Save, test, and only then enable received access in local routing.
• Add host controls, recipient controls, quotas, pause/resume, and reliable event refresh.
• Show an actionable upgrade screen when the Cloud protocol requires a newer client.
• Improve Cloud workspace UI, help documentation, and in-place installer process shutdown.

SHA-256: 15816549495C888E6D0566D0C42F085260FB94A93409608899236B9C1672C869

v0.4.2 正式热修

• 修复 Owner Relay WebSocket 被最低客户端版本门禁错误拒绝，导致被共享者收到 owner_device_offline / Amber Cloud 网络错误。
• Relay 现已复用 Amber Cloud 的直连、系统代理、HTTP/HTTPS 代理和 SOCKS5 代理，并在切换网络设置后自动重连。
• 云账户分别显示“共享回源已开启”和“本机回源在线”，失败日志保留真实错误码。
• 安装包 SHA-256：3F79AD030408F0FF092B96949986DCBDC4DBC8060995408EBDC06F8B49BB5F29。

Amber v0.4.1

Amber v0.4.1

本版本重点提升账户管理、代理批处理、统计展示和云同步可靠性：

• 账户列表支持每页 20 个账号、批量选择、批量删除与批量连通性测试
• 代理支持批量应用到全部账号，并修复应用后页面空白问题
• 仪表盘与统计页新增预估费用，统一金额格式与交互样式
• 改进云同步网络诊断、连接状态持久化及失败反馈
• 完善验证码邮件投递状态与 Webhook 处理
• 重写结构化使用文档，补充本地/远程一键注入、SSH 主机密钥确认与可放大截图

Windows 安装包

Amber_0.4.1_x64-setup.exe

SHA-256: 4FDC3C5EA6C39A9CF5798994B63C1FAED4B3203B1D32B20EE739926EAABD670F

Amber v0.4.0

Amber v0.4.0

• Redesigned Amber Cloud workspace with unified account access, profile, friends, sharing, received shares, and device relay views.
• Added friend relationships and multi-account share groups with independent recipient Guest Keys, key rotation, revocation, quotas, RPM, and concurrency controls.
• Added encrypted owner-device WebSocket relay for OAuth accounts and local network egress, while preserving Worker-direct routing for eligible API accounts.
• Added X25519 credential envelopes, Ed25519 relay proofs, replay-safe challenges, and Durable Object quota/concurrency coordination.
• Removed legacy single-account QR sharing from the account details page.
• Reduced Cloud workspace load time with aggregate concurrent reads plus an owner-isolated two-minute in-memory cache and background refresh.

Owner-device shared routes require the account owner's Amber Agent to remain online.

Verification

• Frontend production build passed.
• 35 frontend unit tests passed.
• 48 Playwright desktop/compact E2E tests passed.
• 22 Cloud Worker tests and Worker typecheck passed.
• Full Go test suite and focused race tests passed.

Amber v0.3.3

Amber v0.3.3

• Idempotent cloud vault batches with persistent desktop outbox recovery.
• Page-level sync cursor checkpoints and concurrent version-claim protection.
• Shared quota reservation, success settlement, and failure release.
• Verified mail.amberapp.asia sender configuration for registration email.

OAuth owner-device WebSocket relay remains planned for v0.4.0.

v0.3.2

Amber v0.3.2

• 全新账号行面板，实时显示并发与等待队列，支持账号启停和调度上限。
• 统一 Base URL、OAuth、JSON 导入入口，并支持导入时选择代理。
• 修复 429/403 错误分类、遗留限流状态和账号测试错误溢出。
• 修复默认窗口下操作按钮越界，保留 Token、费用和运行负载信息。
• 修复 Amber Cloud 失效会话反复报错，并增强 refresh token 轮换可靠性。
• 模型目录与 GPT-5.6 配置更新。

验证

Go、Vue、Cloud Worker、Rust 与桌面/紧凑窗口 Playwright 全量测试通过。

v0.3.1

Amber v0.3.1 reliability fixes

v0.3.0

Amber v0.3.0

v0.2.4

fix(i18n): escape @ in hostHint to prevent codex page crash