CloserAI v0.1.0 — Daily-use Release

CloserAI v0.1.0 — Daily-use Release

The first stable daily-use release. Windows installer + SHA-256 are attached automatically by the tag-triggered workflow.

Milestones in this release

• v0.0.1 Bootstrap: monorepo, tooling, mock provider, CI
• v0.0.2 Desktop shell: DSH supervisor + hardened Electron window
• v0.0.3 Onboarding, OS-keychain secrets, DeepSeek/OpenAI-compatible + mock providers
• v0.0.4 Chat / Work / Code permission-isolated profiles
• v0.0.5 Daily conversation: session persistence, history, projects, file handling
• v0.0.6 Extensions & Web: capability toggles, diagnostics, permission manifest
• v0.0.7 Native desktop: tray, notifications, launch-at-login
• v0.0.8 Packaging: first Windows installer + packaged DSH runtime fix
• v0.0.9 RC hardening: notices/license audit, security & robustness suites, bilingual manuals

Verified

Fresh install to a clean directory, then the packaged-app smoke passes end-to-end (onboarding → DeepSeek Harness UI → management page, exit 0). SHA-256 matches the checksum.

Assets

• CloserAI-0.1.0-Setup-x64.exe
• SHA256SUMS.txt

Status

Daily-use release. Not code-signed yet; verify the SHA-256 before running, and see docs/TROUBLESHOOTING.md for the SmartScreen note.

CloserAI v0.1.0-rc.2 (pre-release)

CloserAI v0.1.0-rc.2 (pre-release)

Second release candidate toward v0.1.0. Fixes the rc.1 build (release workflow now globs the installer filename instead of hardcoding 0.0.8). Windows installer + SHA-256 are attached automatically by the tag-triggered workflow.

This candidate

• RC hardening: THIRD_PARTY_NOTICES + license audit, security suite (17 cases), disk-error and offline/invalid-key/timeout tests, tightened CSP for app-owned pages.
• Bilingual user manuals, troubleshooting and plugin-development guides.
• Version-agnostic release workflow.

Status

Pre-release — not yet the v0.1.0 daily-use release.

CloserAI v0.0.8 — First Windows Installer

CloserAI v0.0.8 — First Windows Installer

Windows installer now available — built by a Windows-native CI runner (electron-builder).

What's new

• First official Windows installer: CloserAI-0.0.8-Setup-x64.exe + SHA-256 checksum.
• Packaged DSH runtime fix: an afterPack hook overlays a flat npm install of the DSH runtime so the packaged app resolves every DSH plugin (cordis, dsh-timeout, dsh-fs, dsh-shell, dsh-llm, dsh-tool-*, ...) that electron-builder's collector drops.
• Release workflow: dispatchable and tag-triggered; builds, verifies the packaged DSH tree, computes SHA-256, and attaches artifacts.

Verified

Fresh install to a clean directory, then the packaged-app smoke passes end-to-end (onboarding → DeepSeek Harness UI → management page, exit 0).

Assets

• CloserAI-0.0.8-Setup-x64.exe
• SHA256SUMS.txt

Earlier milestones v0.0.1–v0.0.7 (daily conversation, extensions, native desktop) remain on main.

CloserAI v0.0.7 — Native Desktop

CloserAI v0.0.7 — Native Desktop

系统托盘、原生通知与开机启动落地。基于 DeepSeek Harness 构建，不 Fork 不修改 DSH 核心。

新增内容

• 系统托盘：常驻托盘图标，菜单含「返回对话 / 工作区与历史 / 开机启动 / 退出」；关闭窗口后应用驻留后台而非退出。
• 原生通知：DSH 后端停止或崩溃、以及崩溃后自动恢复时，弹出系统通知。
• 开机启动：托盘菜单与管理页均可切换，通过操作系统登录项实现（Linux 跳过）。
• 日志查看器与诊断导出在 v0.0.6 已落地，至此 v0.0.7「原生桌面」面完整。

修复

• 无回归；全部既有测试保持通过。

安全 / 权限

• 无新增高权限能力；通知与登录项均为尽力而为，不影响安全边界。

测试证据

• pnpm check 全绿：format + lint + build + typecheck + 103 项测试（17 + 11 + 75）。
• Electron smoke 测试退出码 0：onboarding → DSH UI 挂载 → 管理页渲染真实内容。

安装方式（开发版）

pnpm install
pnpm --filter @closerai/desktop start

正式安装包（Windows x64 等）在 v0.0.8 提供。

已知限制

• 自动更新框架延后至 v0.0.8+。
• 托盘/通知的安装包内点击行为需在打包后手工复核（v0.0.8 冒烟覆盖）。

下一版本目标（v0.0.8）

• Windows x64 安装包（electron-builder）+ SHA-256 校验和、CI 发布构建、安全测试（CSP/eval 加固复查）。

CloserAI v0.0.6 — Extensions and Web

CloserAI v0.0.6 — Extensions and Web

能力开关、诊断导出与权限清单落地。基于 DeepSeek Harness 构建，不 Fork 不修改 DSH 核心。

新增内容

• 能力开关（联网搜索 / 网页抓取 / 技能）：在「CloserAI 工作区」管理页勾选后，安装 Agent Preset 时按配置渲染，无需改动 DSH 核心。
• 诊断查看 + 导出：管理页展示 DSH 子进程状态、会话/项目摘要与最近日志；一键导出完整诊断报告。日志在主进程内自动脱敏（sk- 密钥、Bearer token、key=value 密钥），密钥绝不进入渲染进程或导出文件。
• 权限清单：管理页展示 Chat / Work / Code 各模式设计授予的能力面，方便用户查看「当前启用什么」。
• 版本号升至 v0.0.6；preload 桥接与诊断快照同步。

修复

• 无回归；全部既有测试保持通过。

安全 / 权限

• 诊断日志脱敏在主进程完成，渲染进程与导出文件均只获得脱敏后的行。
• 能力开关仅影响 CloserAI 自有的 preset 文件（tool-web / tool-skill 的挂载与配置），不扩展任何权限。

测试证据

• pnpm check 全绿：format + lint + build + typecheck + 103 项测试（17 mock-provider + 11 supervisor + 75 desktop）。
• Electron smoke 测试退出码 0：onboarding → mock Provider → DSH UI 挂载 → 管理页渲染真实内容（含能力设置 / 诊断 / 权限清单卡片）。

安装方式（开发版）

pnpm install
pnpm --filter @closerai/desktop start   # 启动桌面应用
pnpm --filter @closerai/desktop smoke   # 无头端到端冒烟

正式安装包（Windows x64 等）在 v0.0.8 提供。

已知限制

• MCP 服务管理暂缓：DSH 打包产物中无法确定 MCP 配置 schema，盲写配置会出错；待 DSH 文档化后接入。
• 子代理 / 计划 / 任务状态 UI 由 DSH UI 原生呈现，应用侧不重复实现。
• 技能为「开关」而非「安装/卸载」：技能插件的完整管理属于 DSH 插件域。

下一版本目标（v0.0.7）

• 系统托盘、任务完成通知、开机启动、诊断/日志导出完善。

CloserAI v0.0.5 — Daily Conversation

CloserAI v0.0.5 — Daily Conversation

会话持久化、重启恢复、项目/工作区与会话历史管理落地。基于 DeepSeek Harness 构建，不 Fork、不修改 DSH 核心，所有扩展通过 DSH 的 Profile/Preset 与应用外壳实现。

新增内容

• 会话持久化（已验证）：DSH 在 DSH_HOME/sessions 下持久化会话记录，应用重启后可恢复；端到端测试验证「一次运行产生会话文件」与「二次运行保留先前的会话」。
• 会话历史管理（CloserAI 工作区）：菜单 / Ctrl+Shift+M / closerai://manage 打开，可列出会话（大小/时间/工作区）、删除、导出到指定目录、从 session- 目录导入，原生目录选择器。
• 项目与工作区：命名 Chat/Work/Code 项目，可指定代码工作目录；活动项目驱动 DSH 预设与子进程工作目录，重启后自动恢复当前项目。
• 管理页真实内容冒烟验证：smoke 测试覆盖 onboarding、DSH UI 挂载与管理页渲染。

修复

• 修复加固窗口导航锁导致的管理页无法从 DSH UI 打开（渲染进程崩溃）；现在仅放行应用自身的 renderer 入口页，其余导航仍锁定。
• 修复 ProjectStore 共享单例数组导致的跨实例数据污染（真实数据正确性问题）。

安全 / 权限

• 无新的高权限能力；渲染进程保持 contextIsolation、sandbox、无 nodeIntegration。
• 会话文件操作全部在主进程执行并校验路径，禁止越出 DSH_HOME/sessions。

测试证据

• pnpm check 全绿：format + lint + build + typecheck + 83 项测试（17 mock-provider + 11 supervisor + 55 desktop）。
• Electron smoke 测试退出码 0：onboarding → mock Provider → DSH UI 挂载 → 管理页渲染真实内容。

安装方式（开发版）

pnpm install
pnpm --filter @closerai/desktop start   # 启动桌面应用
pnpm --filter @closerai/desktop smoke   # 无头端到端冒烟

正式安装包（Windows x64 等）在 v0.0.8 提供，见下。

已知限制

• 会话标题与消息由 DSH UI 渲染；管理页仅管理会话文件（id/工作区/大小/时间），不解析 zstd 内容，故未提供应用内重命名。
• 导入要求目录名严格为 session- 且含 session.jsonl.zstd（即 DSH 导出的形态）。
• 尚无安装包：当前为源码运行/开发里程碑发布。

下一版本目标（v0.0.6）

• Web Search / Fetch、MCP 服务管理、Skills 管理、插件权限清单、子代理/计划/任务状态 UI。

v0.0.4 - Chat / Work / Code Profiles

v0.0.4 - Chat / Work / Code Profiles

Three permission-isolated working modes, enforced as DSH agent presets plus a workspace root.

Included

• Three agent presets installed into the DSH agent-presets root:
  • Chat - web + ask-user + todo, no shell and no filesystem.
  • Work - filesystem + editor inside the app-private sandbox, no shell.
  • Code - full shell, filesystem, terminal, plan, subagents, and workflows over the user-authorized directory.
• The active mode selects DSH's default preset and the DSH child working directory (the sandbox workspace root), switchable over the IPC bridge.

Test evidence

• pnpm check (Prettier + ESLint + build + tsc --noEmit + Vitest): passed.
• Vitest: 62 tests passed (mock provider 17, supervisor 11, desktop 34).
• Electron smoke test on Windows: onboarding UI mounted, then the mock backend booted DSH and the DSH UI mounted with the three presets installed - exit code 0.
• GitHub Actions CI: success on Linux, macOS, and Windows.

Known limitations

• The Code-mode directory picker is not wired into a UI yet; the workspace directory is set programmatically or falls back to the app workspace.
• Per-session sandbox-mode toggling relies on DSH's default preset; an explicit mode switcher lands with the mode UI.
• No installers yet; the app runs from source with pnpm --filter @closerai/desktop start.

v0.0.3 - Onboarding and Providers

v0.0.3 - Onboarding and Providers

First-run onboarding with OS-keychain secret storage, DeepSeek + generic OpenAI-compatible providers, connectivity testing, and an offline mock mode.

Included

• First-run onboarding UI (React + Vite, Chinese): DeepSeek, OpenAI-compatible, and Mock modes.
• Provider profiles persisted separately from secrets; API keys encrypted with Electron safeStorage (macOS Keychain / Windows DPAPI / Linux libsecret) and injected into the DSH child environment only.
• Endpoint + model catalog written into DSH's llm-deepseek settings section; the DeepSeek adapter doubles as the generic OpenAI-compatible adapter.
• Connectivity probe against the chat-completions endpoint with clear success/failure feedback.
• Mock mode running the bundled @closerai/mock-provider locally.
• Smoke test covering both the onboarding UI and the DSH UI mount.

Test evidence

• pnpm check (Prettier + ESLint + build + tsc --noEmit + Vitest): passed.
• Vitest: 56 tests passed (mock provider 17, supervisor 11, desktop 28).
• Electron smoke test on Windows: onboarding UI mounted, then mock backend booted DSH and the DSH UI mounted - exit code 0.
• GitHub Actions CI: success on Linux, macOS, and Windows.

Known limitations

• No tray, notifications, auto-update, or diagnostics export yet (v0.0.7).
• CSP allows 'unsafe-inline' 'unsafe-eval' for scripts because DSH's SPA requires them.
• Provider switching and the three permission-isolated modes land in v0.0.4.
• No installers; the app runs from source with pnpm --filter @closerai/desktop start.

v0.0.2 - Desktop Shell

v0.0.2 - Desktop Shell

Hardened Electron shell that supervises a bundled DeepSeek Harness child and hosts its web UI.

Included

• DSH child-process supervisor (@closerai/supervisor): random loopback port, stdout URL parsing, TCP health checks, crash-restart with exponential backoff and a reset-on-stable window, graceful shutdown.
• Hardened Electron shell (apps/desktop): single-instance lock, closerai:// deep links, strict CSP, navigation locked to the DSH origin, external links opened in the system browser, all permission requests denied, minimal frozen sandboxed preload.
• DeepSeek Harness bundled and pinned (@deepseek-ai/dsh@0.1.0-rc.6), Electron pinned (43.4.0), launched via ELECTRON_RUN_AS_NODE=1 electron --expose-internals <dsh-bin> web.
• --smoke-test mode that launches the real app, boots bundled DSH, loads the UI in the hardened window, asserts the React app mounted, and exits 0.

Test evidence

• pnpm check (Prettier + ESLint + build + tsc --noEmit + Vitest): passed.
• Vitest: 40 tests passed (mock provider 17, supervisor 11, desktop security/deep-link 12).
• Electron smoke test on Windows: DSH UI loaded (title="DeepSeek Harness", React root mounted) with exit code 0.
• GitHub Actions CI: success on Linux, macOS, and Windows.

Known limitations

• No tray, notifications, auto-update, or diagnostics export yet (v0.0.7).
• CSP allows 'unsafe-inline' 'unsafe-eval' for scripts because DSH's SPA requires them (see docs/DECISIONS.md D-009); revisit in v0.0.8.
• The Electron smoke test currently runs on Windows; macOS/Linux runtime verification lands with the packaging milestone.
• No installers; the app runs from source with pnpm --filter @closerai/desktop start.

v0.0.1 - Bootstrap

v0.0.1 - Bootstrap

Initial CloserAI repository. Local-first, model-agnostic, permission-transparent desktop AI workbench built on DeepSeek Harness.

Included

• pnpm monorepo workspace (apps/*, packages/*) with strict TypeScript (NodeNext ESM), ESLint flat config, Prettier, and Vitest.
• Deterministic OpenAI-compatible mock provider (@closerai/mock-provider) exposing /v1/chat/completions and /v1/models over a dependency-free HTTP server.
• MIT license, README, CONTRIBUTING, SECURITY, CHANGELOG, and docs/ planning records.
• GitHub Actions CI: format / lint / typecheck / build / test on Linux, macOS, Windows.

Test evidence

• pnpm check (Prettier + ESLint + tsc --noEmit + Vitest): passed.
• Vitest: 17 tests passed (completions determinism + mock server endpoints, incl. streaming and error paths).
• Built package smoke test over HTTP: GET /health -> {"ok":true}; chat completions returned a deterministic reply.
• GitHub Actions CI: success on Linux, macOS, and Windows.

Known limitations

• No desktop application yet (lands in v0.0.2 with the Electron shell and DSH supervisor).
• No installers; nothing is packaged for end users.
• Mock provider is for development/testing only; it calls no real model.