Repository navigation
Lexora 0.17.0
0.17.0
中文
这个版本的重点是 让“完全访问”真正成为完全访问。开启后，任务不再受工作目录与目录授权范围限制，命令直接在宿主运行，不施加沙箱网络隔离；文件、凭据、命令、网络与 MCP 等可用工具操作统一免审批，让这个模式的实际能力与名称真正一致。
此外，我们也打磨了一些交互细节，让日常使用更顺手。
✨ 新增
-
📄 插件直接编辑本地文件 by @shanyuhai123：
为编辑器类插件新增本地文件编辑与恢复接口，让插件不必先导入独立副本，也能处理用户明确选择的原文件：- 打开与保存原件：通过系统文件选择窗口或宿主文件入口建立编辑会话，支持保存回原文件和另存为；插件不能借此任意指定本地路径；
- 未保存草稿与恢复：支持创建尚未落盘的内容、保留恢复副本，以及重新打开恢复草稿；恢复副本与原文件保存状态分别管理，不会把备份误标为已保存；
- 外部修改冲突保护：保存时检查文件身份与版本，遇到外部修改或提交失败时保留恢复内容，避免直接覆盖较新的原件。实际格式解析、编辑界面与关闭提示由插件实现。
-
🧩 插件可随包提供 MCP 连接与 NPC by @QAyong, @shanyuhai123：
插件可以将专业工具入口与专业分工一起交付，不必再让用户逐项手动创建：- MCP 连接：支持声明基于 HTTPS 的远端 Streamable HTTP 连接，由用户在宿主中管理凭据、启停和工具使用方式；不随包分发密钥，也不支持通过此能力启动本机 stdio 服务；
- 专业 NPC：支持声明指令、选用的 Skills 与工具，由用户选择模型并绑定到伙伴；当前仅支持 NPC，不支持通过插件注册主角；
- 来源与生命周期管理：界面展示插件来源，定义随插件更新；需要修改 NPC 定义时，可创建独立副本。副本仍引用的插件 Skills 或 MCP 连接会随来源停用而失效，连接与凭据不会自动复制。
-
🌿 在对话模式中从回答创建分支 by @shanyuhai123：
可以直接在历史回答处选择「从这里分支」，带着截至这条回答的对话继续追问；发送后创建新分支，原对话保留。支持查看分支起点、切换同一位置的不同分支，以及取消分支并保留追问草稿，无需先切换到分支画布。
⚡ 改进
-
🔓 真正的完全访问：不再受目录与网络隔离限制 by @shanyuhai123：
完全访问现在与名称所表达的能力一致：文件访问不再局限于工作区或已授权目录，命令直接在宿主执行，不施加沙箱网络隔离。文件与凭据访问、宿主命令、网络请求、系统变更、MCP 调用和自动化变更等可用工具操作统一免审批，无需再逐项确认。访问能力以运行 Lexora 的系统账号权限为上限，不会自动获得管理员或 root 权限。 -
💬 执行中消息的去向更明确 by @shanyuhai123：
在输入区区分「补充当前工作」「完成后处理」与「回答当前问题」，并展示接收对象。消息绑定提交时的目标，不会因为另一位伙伴开始或结束工作，就悄悄改投新的执行；目标已结束或输入不兼容时，会保留输入并给出提示。回答当前问题需先使用纯文字，附件和引用可另行发送。 -
📑 上下文标签固定、批量关闭与工具栏整理 by @shanyuhai123：
上下文面板支持固定和取消固定标签，并可关闭其他、左侧、右侧或全部标签，方便整理同时打开的文件与预览。面板保留放大／还原入口，将左右移动与关闭整理到「更多操作」中，减少工具栏占用。 -
📎 插件内容菜单可直接流转引用 by @shanyuhai123：
插件可以在自己的内容菜单中提供引用入口，将当时选中的材料加入指定任务草稿、新建任务，或复制到剪贴板。引用保留捕获时的内容与目标，不会因切换活动任务而误投；此操作不会自动保存源文档、发送消息或调用模型，需要插件接入相应能力。 -
📦 插件后台安装与分阶段反馈 by @shanyuhai123：
将插件包处理放到后台工作进程，减少较大插件校验、准备和安装时对界面响应的影响。安装卡片显示获取、校验、准备、安装及版本切换等状态，失败时可查看详情；新安装任务与已可用插件分开展示，更新失败时保留原插件，不因另一项安装而锁住无关插件。 -
⚙️ 升级 Pi 1.4.0，默认启用 Codemode by @shanyuhai123：
模型默认可通过代码合批调用普通工具，并在返回前筛选结果，减少不必要的逐项往返和无关输出。仍可在设置中关闭，开关变化从下一次运行生效；所有工具调用继续遵循当前任务的权限模式。
🛠️ 修复
-
🌐 网页请求繁忙时先排队 by @QAyong, @shanyuhai123：
修复网页请求达到并发上限时直接拒绝的问题，改为有界排队，并完善取消、等待超时和资源释放处理。搜索、网页读取与后台渲染的容量管理进一步分离，减少等待渲染的请求占住其他查询入口的情况。 -
🧵 多伙伴对话时间线与消息归属 by @shanyuhai123：
修复并行执行、较早任务迟到的补充消息及后续轮次交错时，过程、回复和结果可能归到错误消息组的问题。补充消息的接收与未投递状态可在对话及执行详情中查看；丢失确认后重试已接收的消息不会重复投递，并改善历史加载与布局变化时的阅读位置保持。
English
This release makes full access live up to its name. Tasks are no longer confined to workspace directories or saved directory grants, and commands run directly on the host without sandbox network isolation. Available tool operations—including file and credential access, commands, network requests, and MCP calls—are automatically approved, aligning the mode's actual capabilities with its meaning.
We also refined everyday interactions and polished a few details to make Lexora easier to use.
✨ Added
-
📄 In-Place Local-File Editing for Plugins by @shanyuhai123:
New editing and recovery APIs let editor plugins work with explicitly selected originals instead of requiring an imported copy:- Open and save originals: Start an editing session through the system file picker or a host file-opening entry, then save back or use Save As. Plugins cannot use this capability to specify arbitrary local paths;
- Unsaved drafts and recovery: Create untitled content, retain recovery copies, and reopen recovered drafts. Recovery state is tracked separately from saving the original, so a backup is not reported as a completed save;
- External-change protection: Saving checks file identity and versions. Conflicts and failed submissions retain recovery content rather than blindly overwriting a newer original. Plugins implement format handling, editing interfaces, and close protection.
-
🧩 Bundled MCP Connections & NPCs by @QAyong, @shanyuhai123:
Plugins can package specialist tool connections and NPC definitions without requiring users to create each item manually:- MCP connections: Declare remote Streamable HTTP connections over HTTPS. Users manage credentials, enabling, and tool usage in the host. Credentials are not distributed with the plugin, and this capability does not launch local stdio servers;
- Specialist NPCs: Declare instructions, selected Skills, and tools. Users choose models and assign NPCs to companions. Only NPC contributions are supported—not primary actors;
- Source and lifecycle management: The interface identifies the source plugin, and definitions follow plugin updates. Users can make independent NPC copies for customization, but referenced plugin Skills or MCP connections still become unavailable when the source is disabled. Connections and credentials are not copied automatically.
-
🌿 Branch from Answers in Conversation Mode by @shanyuhai123:
Choose Branch from here on a previous answer to continue using only the conversation up to that point. Sending creates a new branch while preserving the original conversation. Locate the starting answer, switch between branches at the same point, or cancel branching while keeping the follow-up draft—all without first opening the branch canvas.
⚡ Improved
-
🔓 True Full Access: Beyond Directory Boundaries & Network Sandboxing by @shanyuhai123:
Full access now matches its name: file access is no longer confined to the workspace or previously authorized directories, and commands execute directly on the host without sandbox network isolation. Available operations—including file and credential access, host commands, network requests, system changes, MCP calls, and automation changes—are automatically approved without individual confirmations. Access remains bounded by the operating-system account running Lexora; the mode does not automatically grant administrator or root privileges. -
💬 Clearer Delivery for Messages Sent During Work by @shanyuhai123:
The composer distinguishes supplements to current work, messages to process after completion, and answers to pending questions, with the recipient shown. Messages stay bound to their submitted target rather than silently switching when another companion starts or finishes. Closed targets and incompatible inputs retain the draft and show an explanation. Pending questions accept text-only answers first; send attachments and references separately. -
📑 Pinned Context Tabs, Bulk Closing & a Tidier Toolbar by @shanyuhai123:
Pin or unpin context tabs, and close other tabs, tabs to the left or right, or all tabs to organize open files and previews. Maximize and restore remain directly accessible, while moving the panel and closing it are grouped under More actions. -
📎 References from Plugin Content Menus by @shanyuhai123:
Plugins can add reference actions to their own content menus, sending captured selections to a chosen task draft, a new task, or the clipboard. References preserve the captured content and destination instead of following a later active-task change. This does not automatically save the source document, send a message, or call a model, and requires plugin integration. -
📦 Background Plugin Installation & Stage-by-Stage Feedback by @shanyuhai123:
Plugin package processing now runs in a background worker to reduce interface blocking during larger installations. Installation cards show fetching, validation, preparation, installation, and version-switching stages, with error details when needed. Pending installations remain separate from usable plugins, failed updates preserve the previous plugin, and unrelated plugins are not locked by another installation. -
⚙️ Pi 1.4.0 Upgrade & Codemode Enabled by Default by @shanyuhai123:
Models can use code to batch ordinary tool calls and filter results before returning them, reducing unnecessary individual round trips and irrelevant output. Codemode can still be disabled in settings; changes take effect on the next run. All tool calls continue to follow the task's active permission mode.
🛠️ Fixed
-
🌐 Queue Web Requests When Busy by @QAyong, @shanyuhai123:
Requests that reach the concurrency limit now enter a bounded queue instead of being rejected immediately, with improved cancellation, queue timeouts, and resource cleanup. Better separation of search, fetching, and background-rendering capacity reduces interference from requests waiting for rendering. -
🧵 Multi-Companion Timeline & Message Attribution by @shanyuhai123:
Fixed process output, replies, and results appearing under the wrong message group when concurrent work, late supplements, and later turns overlap. Delivery receipts and undelivered states are visible in conversations and execution details. Retrying an accepted message after a lost acknowledgement does not deliver it twice, and reading anchors are better preserved during history loading and layout changes.
📥 下载地址 / Downloads
Windows
macOS 15+
Linux
文件校验 / Checksums
Intel／AMD 电脑请选择 x64，ARM 设备请选择 ARM64。macOS 当前仅支持 Apple Silicon。
Choose x64 for Intel/AMD computers or ARM64 for ARM devices. macOS currently supports Apple Silicon only.