DEEIX-AI/DEEIX-Chat v0.4.4-beta.1

on GitHub

🧪 Beta

Thanks for testing — bug reports and feedback are very welcome.

• 桌面端可能存在破坏性变更或不稳定，请谨慎使用。
• Desktop may contain breaking changes or instability. Use with care.

✨ Feature

• Desktop app (beta) for macOS, Windows and Linux, built on Tauri around the same web bundle the server ships — no separate desktop build to keep in sync.
• Local mode: run DEEIX Chat entirely on your machine with a bundled server, SQLite and local file storage. No account, no network; the local server listens on loopback only and is signed in through a one‑time, two‑minute grant that never reaches the page.
• Multiple servers as tabs: connect one desktop window to several deployments, one tab per server. Tabs are isolated (own session, caches and SSE), restored on launch, reorderable by drag, and idle tabs are suspended after 30 minutes to save memory.
• Native sign‑in on desktop: refresh tokens are kept in the OS keychain instead of a cookie; OAuth/OIDC sign‑in opens the system browser and returns via deeix-chat:// deep link or a local loopback receiver.
• System tray, in‑app updates and deep links on desktop: the app stays in the tray, checks for signed updates and prompts to install and relaunch.
• Native client support in the API: requests carrying X-Client-Platform: desktop|mobile from a non‑web origin receive the refresh token in the response body; browsers keep the HttpOnly cookie. The header is included in CORS preflight and the default CORS allowlist covers the desktop webview origins.

⚡ Optimization

• Refresh‑token reuse now revokes the whole session (OAuth 2.1 §4.3.1) and is recorded as an auth event, so a stolen token cannot keep an attacker signed in alongside the real user; a lost rotation response within the grace period is still tolerated.
• Graceful shutdown drains background tasks before exiting, so scheduled cleanups are no longer cut mid‑run and shutdown cancellation is no longer reported as an error.
• The About page shows whether the running build is a stable or pre‑release version; the admin update tooltip reads “latest known version”.
• Desktop sign‑in handles servers that require Turnstile by handing registration off to the system browser, and explains when third‑party login needs the server’s OAuth bridge (PUBLIC_API_BASE_URL).
• User‑authored interactive components are no longer managed from 技能与提示词; the component library is now admin‑managed only, and the per‑conversation component picker is unchanged.
• Repository reorganized as a monorepo (apps/web, apps/desktop, packages/core, deploy/): source deployments should note the frontend build output moved to apps/web/out and the Docling/RapidOCR compose files to deploy/services/.

🐛 Fixed

• Canceling or failing an assistant reply no longer truncates the conversation context: earlier history stays in the prompt for the next message, and a failed retry is no longer resurrected as context. (#777)
• API base URLs with long runs of trailing slashes are normalized in linear time instead of a backtracking regex.

⏬ Download