release: prepare Desktop 0.13.7 and Agent 0.13.1

Prepare the approved bilingual Desktop 0.13.7 and Agent 0.13.1 release
notes, version locks, feature matrices, and Agent release notes. Package both
OpenCode and Continue in the compound Agent release and publish native
execution checklists for remote projects.

Fix Linux source validation by configuring Electron's chrome-sandbox helper
and running the full test suite under Xvfb without disabling sandboxing.

Release note: Desktop 0.13.7 adds paged canvas notes, HTTP OCR, managed app
navigation, remote Continue and execution checklists, while preserving
conversation history and improving remote/runtime recovery. Agent 0.13.1
ships OpenCode and Continue together with checklist delivery.

Validation: npm test passed; npm run typecheck passed; npm run lint passed;
npm run release:notes:verify passed; 22 release workflow tests passed. No
local production build or package was run. LoongArch preview is not included.

docs/development/release-runbook.md

@@ -44,6 +44,10 @@ to a public channel; follow the user's explicit publication instruction.
 - `.github/workflows/packages.yml` is the canonical cross-platform packaging
   workflow. It validates and builds `out` once, then packages on six native
   runners: Windows, macOS, and Linux, each for x64 and arm64.
+- Linux source validation configures the installed Electron `chrome-sandbox`
+  helper with root ownership and mode `4755`, then runs the full test suite
+  under Xvfb. Keep Electron sandboxing enabled; do not skip UI tests or add
+  `--no-sandbox` to work around runner setup failures.
 - The experimental Linux LoongArch (`loong64`) preview is built separately
   through `build/loongarch-cross` by following
   `docs/development/loongarch-preview-build.md`. It is not part of
@@ -79,7 +83,7 @@ to a public channel; follow the user's explicit publication instruction.
   Host.
 - Each independently published Linux x64, Linux arm64, or macOS arm64 `.gbagent` contains the
   Agent daemon, pinned Node, and the desktop-maintained compatible OpenCode
-  Runtime. Build all three targets on native GitHub Actions runners from one
+  and Continue Runtimes. Build all three targets on native GitHub Actions runners from one
   immutable `agent-v<agentVersion>` tag.
 - Keep the GoodBuddy Agent source, shared protocol/contracts, runtime lock,
   bundle tooling, and tests in this repository so a desktop commit identifies
@@ -89,7 +93,7 @@ to a public channel; follow the user's explicit publication instruction.
 - `.github/workflows/agents.yml` is the branch and pull-request build
   verification workflow for GoodBuddy Agent. It must build Linux x64 and
   arm64 on native runners from the checked-out commit, acquire the locked
-  official Node archive and locked OpenCode npm archive, verify every locked
+  official Node archive and locked OpenCode and Continue npm archives, verify every locked
   digest, use only an ephemeral in-memory test signing identity, and verify the
   resulting compound package and deterministic archive. It must not read
   production signing secrets, publish installable release artifacts, or modify

docs/pr-articles/2026-09-19-unreleased/review.md

@@ -5,10 +5,10 @@
 - 状态：**草稿，未发布，截图待补**。
 - 首次建档及检查日期：2026-09-19。
 - 按用户要求将原魔法笔记重点稿与常规更新稿合并，只保留一份[正文](./article.md)及本记录，原主题子目录稿件移除。
-- 目标 tag：未确定，使用 `unreleased`，不推测下一版本号。
-- 目标提交：`375b2159c80a56a4d76d7762f3ddcee6d7848c11`。
-- 基线：正式桌面 tag `v0.13.6`，对应 `a383b2d11f1e834a30b08b0786ca0398da849d95`；比较区间 `v0.13.6..375b215`，35 个提交。
-- HEAD 不在正式 tag 上；最近可达 Agent tag 为 `agent-v0.13.0`，不作为桌面比较基线，不代表新版 Agent 包已发布。
+- 目标 tag：桌面 `v0.13.7`，Agent `agent-v0.13.1`；截图和外部发布仍待完成。
+- 目标提交：发布资料候选提交待最终提交后填写；当前已推送基线为 `9836a4cc9d82144496250a0e3154316b4dd0d9c4`。
+- 基线：正式桌面 tag `v0.13.6`，对应 `a383b2d11f1e834a30b08b0786ca0398da849d95`；当前比较区间为 `v0.13.6..HEAD`，39 个提交。
+- 当前 HEAD 不在正式 tag 上；最近可达 Agent tag 为 `agent-v0.13.0`，Agent 比较区间为 `agent-v0.13.0..HEAD`，不代表新版 Agent 包已发布。
 - 最初核查时工作区干净；合并前只有本轮两篇文章、核查记录与索引改动。未修改产品代码，未创建提交、推送、tag 或外部发布。
 
 ## 选题与结构