chore: prepare GoodBuddy 0.11.12 release

An interrupted managed SSH prompt could leave its ACP binding as the permanent owner of the conversation, so every later user message failed with the same uncertain-recovery error. A later explicit prompt now retires that binding and starts a fresh ACP session without replaying the uncertain operation.

Ask-mode Runtime startup also waited on the wrong bubblewrap executable identity. The Agent now supervises the bounded transition to the signed Runtime or model-bridge executable, and the Agent version advances to 0.11.10.

Release note: 修复远程 ACP 请求中断后同一会话无法继续输入，以及 Ask 模式可能在模型调用前启动失败的问题。

UI-DESIGN.md

@@ -626,6 +626,7 @@ GoodBuddy 是可调整窗口大小的桌面应用。响应式设计优先保证
 - “笔记 / 待办”属于同一工作台内的同级内容面板，使用 `PageTabs` 的 `segmented` 视觉变体，与模型设置的分段控件保持同一外观。
 - 页签切换保留 `tablist`、`tab` 和 `tabpanel` 语义；待办状态仍使用独立的 `SegmentedControl`，不得与内容页签合并。
 - 笔记编辑器保留 Quill 原生列表快捷输入：输入 `-`、`*`、`1.`、`[ ]` 或 `[x]` 后按空格，分别转换为项目符号、编号或待办清单。快捷输入只生成现有 Delta 富文本，不引入 Markdown 源码模式、第二套持久化格式或第三方 Markdown 插件；编辑区附近持续提供简短提示。
+- 左侧笔记列表依次显示标题、最多两行内容预览，以及同一行的记录数和本地化更新时间。记录数靠左、更新时间靠右，窄宽度下均保持单行省略，不挤压标题或扩大列表栏。
 - 左侧“魔法笔记”入口可显示未完成待办数量。数量为 0 时隐藏徽标，超过 99 时显示 `99+`，可访问名称仍说明精确数量；勾选、取消勾选以及 Agent / MCP 对笔记清单的写入都必须刷新数量。
 - 未完成待办徽标的高度不得超过主导航图标；数量从 0 变为可见或再次隐藏时，主导航项行高和相邻菜单位置必须保持不变。
 - 在待办面板勾选或取消勾选后，当前缓存中的源笔记正文必须立即同步对应清单状态，不得依赖离开工作区后重新加载。

agent-runtime-lock.json

@@ -1,6 +1,6 @@
 {
   "formatVersion": 1,
-  "agentVersion": "0.11.9",
+  "agentVersion": "0.11.10",
   "protocol": {
     "major": 2,
     "minor": 0

docs/architecture/remote-host-and-goodbuddy-agent-design.md

@@ -284,7 +284,12 @@ Workspace、Runtime 和 Saving 进度仅用于新建或显式保存项目；进
 产生冲突的项目创建和设置入口。远端 RPC 拒绝只向
 Renderer 暴露固定方法名、数字 RPC code 和有界 service code，不转发 Host 私有错误详情。
 `runtime/preparePrompt` 在远端明确拒绝且尚未接受 Prompt 时会关闭对应 Main binding，
-不会把确定性失败错误保留为 `outcome-unknown`。
+不会把确定性失败错误保留为 `outcome-unknown`。未确认终态的 Prompt 仍不会自动重放；
+用户之后显式发送的新 Prompt 会关闭旧的非就绪 Main binding，并以新的 ACP session
+继续当前 Conversation，避免一次恢复不确定永久阻塞后续输入。
+Ask 模式的 Linux Runtime 进程由 `bwrap` 启动后 `exec` 到已签名 Runtime 或 Agent
+model bridge helper；监督器只接受同一 PID/进程组从固定 `bwrap` 路径到预期最终可执行文件
+的有界转换，再登记为运行中进程。
 
 不持久化 T2/T3、consent、approval bridge、confinement 或组件验证结果。数据库 schema
 v31 保留项目及关联用户数据，但重建执行空间表为 `project_id/kind/root_path/ssh_host_id`

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "goodbuddy",
-  "version": "0.11.11",
+  "version": "0.11.12",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "goodbuddy",
-      "version": "0.11.11",
+      "version": "0.11.12",
       "license": "0BSD",
       "dependencies": {
         "@agentclientprotocol/sdk": "0.25.1",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "goodbuddy",
-  "version": "0.11.11",
+  "version": "0.11.12",
   "private": true,
   "description": "Secure desktop AI workspace with controlled Agent Runtimes",
   "desktopName": "GoodBuddy",

resources/release-notes.json

@@ -1,6 +1,38 @@
 {
   "formatVersion": 1,
   "releases": [
+    {
+      "version": "0.11.12",
+      "releasedAt": "2026-08-30",
+      "notes": {
+        "zh-CN": {
+          "highlights": [],
+          "features": [
+            "**魔法笔记更新时间。** 魔法笔记列表现在显示每篇笔记的最后更新时间，便于快速判断最近修改过的内容。"
+          ],
+          "fixes": [
+            "**远程会话中断后可以继续输入。** 修复托管 SSH 请求结果不确定后，同一会话的每条后续输入都会重复显示“恢复状态不确定”的问题。未确认的旧请求仍不会自动重放；用户再次明确发送时，GoodBuddy 会建立新的 ACP session 并继续当前会话。",
+            "**Ask 模式远程 Runtime 可以稳定启动。** 修复 Linux Host 上 `bwrap` 启动身份检查存在竞态，导致 Ask 模式可能在模型调用前被拒绝的问题。Agent 现在会验证从固定沙箱启动器到预期签名可执行文件的受限转换。"
+          ],
+          "notices": [
+            "**远程项目技术预览与 Agent 要求。** 远程项目仍默认关闭且为技术预览。Host 需要更新到单独发布的 Agent `0.11.10` 才能获得 Ask 模式启动修复；提供 Linux x64 和 arm64，桌面包不内置 Agent 或远程 Runtime。本次不构建 LoongArch 预览。"
+          ]
+        },
+        "en-US": {
+          "highlights": [],
+          "features": [
+            "**Magic Notes update times.** The Magic Notes list now shows when each note was last updated, making recently edited content easier to identify."
+          ],
+          "fixes": [
+            "**Remote conversations continue after interruptions.** Fixed every later message in a managed SSH conversation repeatedly failing with an uncertain-recovery error after a prompt outcome could not be confirmed. The uncertain prompt is still never replayed automatically; when the user explicitly sends again, GoodBuddy starts a new ACP session and continues the current conversation.",
+            "**Reliable Ask-mode Remote Runtime startup.** Fixed a race in Linux Host `bwrap` launch identity verification that could reject Ask-mode requests before the model was called. The Agent now verifies the bounded transition from the fixed sandbox launcher to the expected signed executable."
+          ],
+          "notices": [
+            "**Remote Projects technical preview and Agent requirement.** Remote Projects remain disabled by default and in technical preview. Hosts must update to the separately published Agent `0.11.10` to receive the Ask-mode startup fix. Linux x64 and arm64 are provided; desktop packages do not embed the Agent or Remote Runtime. This release does not include a LoongArch preview."
+          ]
+        }
+      }
+    },
     {
       "version": "0.11.11",
       "releasedAt": "2026-08-30",

src/agent-daemon/direct-linux-stdio-process-owner.test.ts

@@ -119,6 +119,47 @@ describe('direct Linux stdio Runtime ownership', () => {
     registry.close()
   })
 
+  it('waits for bubblewrap to exec the supervised bridge helper', async () => {
+    const registry = createRegistry()
+    const child = fakeChild()
+    const bwrapIdentity = identity()
+    const helperIdentity = {
+      ...bwrapIdentity,
+      executablePath: '/agent/node'
+    }
+    const spawn: DirectLinuxStdioSpawn = () => {
+      queueMicrotask(() => child.emit('spawn'))
+      return child
+    }
+    const readProcessIdentity = vi
+      .fn()
+      .mockResolvedValueOnce(bwrapIdentity)
+      .mockResolvedValue(helperIdentity)
+
+    const owner = await launchDirectLinuxStdioProcessOwner({
+      manifest: manifest(),
+      profile: {
+        ...profile(),
+        processExecutable: '/agent/node'
+      },
+      identity: { launchId: 'launch-1', processId: 'process-1' },
+      installationId: 'installation-1',
+      registry,
+      deadlineAt: '2030-01-01T00:00:00.000Z',
+      maximumInputBytes: 1024,
+      platform: 'linux',
+      spawn,
+      randomOwnerToken: () => 'a'.repeat(32),
+      readProcessIdentity
+    })
+
+    expect(readProcessIdentity).toHaveBeenCalledTimes(2)
+    expect(owner.processIdentity).toEqual(helperIdentity)
+    child.exitCode = 0
+    child.emit('close', 0, null)
+    registry.close()
+  })
+
   it('rejects PID reuse before sending any signal', async () => {
     const registry = createRegistry()
     const child = fakeChild()

src/agent-daemon/direct-linux-stdio-process-owner.ts

@@ -31,6 +31,7 @@ const DEFAULT_MAXIMUM_STDIN_WRITE_BYTES = 1024 * 1024
 const DEFAULT_MAXIMUM_OUTPUT_QUEUE_CHUNKS = 128
 const DEFAULT_MAXIMUM_LISTENERS = 8
 const DEFAULT_STOP_TIMEOUT_MS = 10_000
+const DEFAULT_LAUNCH_IDENTITY_TIMEOUT_MS = 5_000
 const TERM_GRACE_MS = 2_000
 const POLL_INTERVAL_MS = 25
 const OWNER_TOKEN_ENVIRONMENT_NAME = 'GOODBUDDY_RUNTIME_OWNER_TOKEN'
@@ -603,8 +604,18 @@ export async function launchDirectLinuxStdioProcessOwner(
     await waitForSpawn(child, options.signal, timeoutMs)
     if (child.pid === undefined) throw new Error('Runtime spawn did not return a PID')
     const readIdentity = options.readProcessIdentity ?? readLinuxRuntimeProcessIdentity
-    const processIdentity = await readIdentity(child.pid)
-    assertLaunchedIdentity(processIdentity, profile)
+    const processIdentity = await waitForLaunchedIdentity({
+      child,
+      pid: child.pid,
+      profile,
+      readIdentity,
+      signal: options.signal,
+      deadline: Math.min(
+        Date.parse(effectiveDeadlineAt),
+        now() + DEFAULT_LAUNCH_IDENTITY_TIMEOUT_MS
+      ),
+      now
+    })
     const supervisorIdentityDigest = supervisorDigest({
       installationId,
       ownerId,
@@ -871,15 +882,72 @@ function validateProfile(profile: OpenCodeLaunchProfile): OpenCodeLaunchProfile
   }
 }
 
-function assertLaunchedIdentity(
-  identity: LinuxRuntimeProcessIdentity,
+async function waitForLaunchedIdentity(input: {
+  child: DirectLinuxStdioChild
+  pid: number
   profile: OpenCodeLaunchProfile
-): void {
-  if (
-    identity.executablePath !== profile.processExecutable ||
-    identity.processGroupId !== identity.pid
-  ) {
-    throw identityError('Spawned Runtime does not match the launch identity')
+  readIdentity: typeof readLinuxRuntimeProcessIdentity
+  signal?: AbortSignal
+  deadline: number
+  now: () => number
+}): Promise<LinuxRuntimeProcessIdentity> {
+  for (;;) {
+    input.signal?.throwIfAborted()
+    if (
+      input.child.exitCode !== null ||
+      input.child.signalCode !== null
+    ) {
+      throw new DirectLinuxStdioProcessOwnerError(
+        'Runtime process exited during launch',
+        'process'
+      )
+    }
+    let identity: LinuxRuntimeProcessIdentity
+    try {
+      identity = await input.readIdentity(input.pid)
+    } catch (error) {
+      if (!isMissingProcess(error)) {
+        throw error
+      }
+      if (input.now() >= input.deadline) {
+        throw new DirectLinuxStdioProcessOwnerError(
+          'Runtime launch identity was not observed',
+          'process'
+        )
+      }
+      await delay(
+        Math.min(
+          POLL_INTERVAL_MS,
+          Math.max(1, input.deadline - input.now())
+        )
+      )
+      continue
+    }
+    if (identity.processGroupId !== identity.pid) {
+      throw identityError(
+        'Spawned Runtime does not match the launch identity'
+      )
+    }
+    if (identity.executablePath === input.profile.processExecutable) {
+      return identity
+    }
+    if (identity.executablePath !== input.profile.executable) {
+      throw identityError(
+        'Spawned Runtime does not match the launch identity'
+      )
+    }
+    if (input.now() >= input.deadline) {
+      throw new DirectLinuxStdioProcessOwnerError(
+        'Runtime launch did not reach its supervised executable',
+        'process'
+      )
+    }
+    await delay(
+      Math.min(
+        POLL_INTERVAL_MS,
+        Math.max(1, input.deadline - input.now())
+      )
+    )
   }
 }
 

src/agent-daemon/opencode-runtime-profile.test.ts

@@ -241,6 +241,9 @@ describe('OpenCode bubblewrap launch profile', () => {
       '--opencode-entrypoint',
       resolve(fixture.bundleDirectory, 'bin', 'opencode')
     ])
+    expect(profile.processExecutable).toBe(
+      resolve(agentInstallationDirectory, 'node')
+    )
     expect(profile.args.join('\0')).not.toMatch(
       /api[-_]?key|authorization|bearer|(?:^|\0)--token(?:\0|$)/iu
     )

src/agent-daemon/opencode-runtime-profile.ts

@@ -266,7 +266,7 @@ export function createOpenCodeLaunchProfile(input: {
 
   return {
     executable: OPENCODE_BWRAP_EXECUTABLE,
-    processExecutable: OPENCODE_BWRAP_EXECUTABLE,
+    processExecutable: runtimeCommand.executable,
     args,
     cwd: scratchDirectory,
     env: {

src/main/agent/acp-remote-runtime.test.ts

@@ -599,7 +599,7 @@ describe('AcpRemoteRuntime', () => {
   })
 
   it.each(['prompt-running', 'outcome-unknown'] as const)(
-    'does not replace a %s binding after identity changes',
+    'retires a %s binding before starting an explicit later prompt',
     async (state) => {
       const store = new MemoryRuntimeSessionBindingStore()
       const active = {
@@ -625,7 +625,13 @@ describe('AcpRemoteRuntime', () => {
         lastMainAckSequence: '0'
       }
       await store.put(active)
-      const factory = vi.fn(async () => fakeServer().channel)
+      const replacement = fakeServer()
+      const factory = vi.fn(
+        async (bindingId: string) => {
+          expect(bindingId).not.toBe(active.bindingId)
+          return replacement.channel
+        }
+      )
       const instance = factoryRuntime(factory, store, {
         identity: {
           ...identity,
@@ -633,22 +639,28 @@ describe('AcpRemoteRuntime', () => {
         }
       })
 
-      await expect(
-        collect(
-          instance.run(
-            { ...request, requestId: 'prompt-2' },
-            new AbortController().signal
-          )
+      await collect(
+        instance.run(
+          { ...request, requestId: 'prompt-2' },
+          new AbortController().signal
         )
-      ).rejects.toThrow('不会自动重放')
+      )
 
-      expect(factory).not.toHaveBeenCalled()
+      expect(factory).toHaveBeenCalledOnce()
+      expect(factory).not.toHaveBeenCalledWith(active.bindingId)
+      await expect(
+        store.getById(active.bindingId)
+      ).resolves.toMatchObject({
+        bindingId: active.bindingId,
+        state: 'closed',
+        activePromptOperationId: undefined
+      })
       await expect(
         store.getByConversation(request.conversationId)
       ).resolves.toMatchObject({
-        bindingId: active.bindingId,
-        state: 'outcome-unknown',
-        activePromptOperationId: request.requestId
+        bindingId: factory.mock.calls[0]![0],
+        state: 'ready',
+        activePromptOperationId: undefined
       })
       await instance.dispose()
     }

src/main/agent/acp-remote-runtime.ts

@@ -833,7 +833,7 @@ export class AcpRemoteRuntime implements AgentRuntime {
     return interrupted
   }
 
-  private async persistRejectedPrompt(
+  private async persistClosedBinding(
     binding: RuntimeSessionBinding
   ): Promise<RuntimeSessionBinding> {
     const closed = runtimeSessionBindingSchema.parse({
@@ -1198,24 +1198,19 @@ export class AcpRemoteRuntime implements AgentRuntime {
     request: AgentExecutionRequest,
     signal: AbortSignal
   ): Promise<SessionRecord> {
-    const old = await this.awaitLocalOperation(
+    let binding = await this.awaitLocalOperation(
       '读取会话绑定',
       this.options.bindingStore.getByConversation(conversationId),
       signal
     )
     if (
-      old &&
-      old.state !== 'closed' &&
-      old.state !== 'ready'
+      binding &&
+      binding.state !== 'closed' &&
+      binding.state !== 'ready'
     ) {
-      await this.persistInterrupted(old)
-      throw new Error(
-        old.state === 'prompt-running'
-          ? '远端 ACP 会话存在未确认的活动请求，结果未知且不会自动重放'
-          : '远端 ACP 会话恢复状态不确定，已中断且不会自动重放'
-      )
+      await this.persistClosedBinding(binding)
+      binding = undefined
     }
-    let binding = old
     let bindingId = binding?.bindingId ?? randomUUID()
     if (
       binding?.state === 'ready' &&
@@ -1437,7 +1432,7 @@ export class AcpRemoteRuntime implements AgentRuntime {
             error,
             'runtime/preparePrompt'
           )
-            ? this.persistRejectedPrompt(binding)
+            ? this.persistClosedBinding(binding)
             : this.persistInterrupted(binding)
         await persist.catch(() => undefined)
       }
@@ -1483,7 +1478,7 @@ export class AcpRemoteRuntime implements AgentRuntime {
             error,
             'runtime/preparePrompt'
           )
-            ? this.persistRejectedPrompt(current.binding)
+            ? this.persistClosedBinding(current.binding)
             : this.persistInterrupted(current.binding)
         current.binding = await persist.catch(() => current.binding)
         this.sessions.delete(conversationId)

src/renderer/src/MagicNotesWorkspace.test.tsx

@@ -399,6 +399,11 @@ describe('MagicNotesWorkspace', () => {
     expect(
       screen.getByRole('button', { name: /发布笔记/ })
     ).toHaveAttribute('aria-pressed', 'true')
+    const updatedTime = screen
+      .getByRole('button', { name: /发布笔记/ })
+      .querySelector('time')
+    expect(updatedTime).toHaveAttribute('datetime', detail.updatedAt)
+    expect(updatedTime).toHaveTextContent('更新于')
     fireEvent.click(screen.getByRole('tab', { name: '待办' }))
     expect(screen.getByText('准备演示')).toBeInTheDocument()
     const selectedTodoButton = screen

src/renderer/src/MagicNotesWorkspace.tsx

@@ -1657,12 +1657,21 @@ export function MagicNotesWorkspace({
                     {note.preview || t('notes.noPreview')}
                   </span>
                   <span className="magic-note-list-item__meta">
-                    {t(
-                      note.entryCount === 1
-                        ? 'notes.entryCountOne'
-                        : 'notes.entryCountOther',
-                      { count: note.entryCount }
-                    )}
+                    <span>
+                      {t(
+                        note.entryCount === 1
+                          ? 'notes.entryCountOne'
+                          : 'notes.entryCountOther',
+                        { count: note.entryCount }
+                      )}
+                    </span>
+                    <time dateTime={note.updatedAt}>
+                      {t('notes.updatedAt', {
+                        date: dateFormatter.format(
+                          new Date(note.updatedAt)
+                        )
+                      })}
+                    </time>
                   </span>
                 </button>
               ))

src/renderer/src/i18n/locales/en-US/magicNotes.ts

@@ -82,6 +82,7 @@ export const magicNotes = {
     noPreview: 'No entries yet',
     entryCountOne: '{{count}} entry',
     entryCountOther: '{{count}} entries',
+    updatedAt: 'Updated {{date}}',
     emptySelectionTitle: 'No note selected',
     emptySelectionDescription:
       'Select a note on the left, or create a note to start writing.',

src/renderer/src/i18n/locales/zh-CN/magicNotes.ts

@@ -77,6 +77,7 @@ export const magicNotes = {
     noPreview: '还没有记录',
     entryCountOne: '{{count}} 条记录',
     entryCountOther: '{{count}} 条记录',
+    updatedAt: '更新于 {{date}}',
     emptySelectionTitle: '还没有选择笔记',
     emptySelectionDescription: '从左侧选择笔记，或新建一篇笔记开始记录。',
     newEntryLabel: '新记录内容',

src/renderer/src/styles.css

@@ -1609,8 +1609,24 @@
 }
 
 .magic-note-list-item__meta {
+  display: flex;
+  min-width: 0;
+  align-items: center;
+  justify-content: space-between;
   color: var(--text-muted);
   font-size: var(--font-caption);
+  gap: var(--space-2);
+}
+
+.magic-note-list-item__meta > :where(span, time) {
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.magic-note-list-item__meta time {
+  flex-shrink: 1;
+  text-align: right;
 }
 
 .magic-notes-stream-pane {