v2026.3.11-beta.1
发布于 2026-03-12 · 翻译于
🎯 一句话总结：本版本核心在于提升安全性与多端 UI 体验，同时扩展模型支持并优化记忆搜索能力。
📋 更新要点（中文翻译）
1修复网关 WebSocket 跨站劫持漏洞，增强浏览器连接起源验证安全性。
2OpenRouter 模型目录新增 Hunter Alpha 和 Healer Alpha 免费隐身模型。
3iOS 主页画布新增欢迎屏和实时代理概览，优化小屏幕手机适配。
4iOS 控制栏改为固定工具栏，聊天会话直接使用解析后的主会话。
5macOS 聊天界面新增模型选择器，支持持久化保存思考级别设置。
6引导流程支持 Ollama 本地或云加本地模式，提供浏览器云端登录。
7新增 OpenCode Go 提供商，支持共享密钥存储并优化向导配置流程。
8记忆功能支持 Gemini 多模态图像和音频索引，可配置输出维度。
9Discord 自动线程支持配置归档时长，不再强制默认一小时归档。
▶查看英文原文（Release Notes）
### Security
- Gateway/WebSocket: enforce browser origin validation for all browser-originated connections regardless of whether proxy headers are present, closing a cross-site WebSocket hijacking path in `trusted-proxy` mode that could grant untrusted origins `operator.admin` access. (GHSA-5wcw-8jjv-m286)
### Changes
- OpenRouter/models: add temporary Hunter Alpha and Healer Alpha entries to the built-in catalog so OpenRouter users can try the new free stealth models during their roughly one-week availability window. (#43642) Thanks @ping-Toven.
- iOS/Home canvas: add a bundled welcome screen with a live agent overview that refreshes on connect, reconnect, and foreground return, and move the compact connection pill off the top-left canvas overlay. (#42456) Thanks @ngutman.
- iOS/Home canvas: replace floating controls with a docked toolbar, make the bundled home scaffold adapt to smaller phones, and open chat in the resolved main session instead of a synthetic `ios` session. (#42456) Thanks @ngutman.
- macOS/chat UI: add a chat model picker, persist explicit thinking-level selections across relaunch, and harden provider-aware session model sync for the shared chat composer. (#42314) Thanks @ImLukeF.
- Onboarding/Ollama: add first-class Ollama setup with Local or Cloud + Local modes, browser-based cloud sign-in, curated model suggestions, and cloud-model handling that skips unnecessary local pulls. (#41529) Thanks @BruceMacD.
- OpenCode/onboarding: add new OpenCode Go provider, treat Zen and Go as one OpenCode setup in the wizard/docs while keeping the runtime providers split, store one shared OpenCode key for both profiles, and stop overriding the built-in `opencode-go` catalog routing. (#42313) Thanks @ImLukeF and @vincentkoc.
- Memory: add opt-in multimodal image and audio indexing for `memorySearch.extraPaths` with Gemini `gemini-embedding-2-preview`, strict fallback gating, and scope-based reindexing. (#43460) Thanks @gumadeiras.
- Memory/Gemini: add `gemini