fix: bind approvals to the current task

README.md

@@ -11,8 +11,8 @@
 </p>
 
 <p align="center">
-  <a href="https://github.com/Lee-take/dsagent/releases/tag/v1.0.0">v1.0.0 stable</a> ·
-  <a href="https://github.com/Lee-take/dsagent/releases/download/v1.0.0/DS.Agent_1.0.0_x64-setup.exe">Download for Windows</a> ·
+  <a href="https://github.com/Lee-take/dsagent/releases/tag/v1.0.1">v1.0.1 stable</a> ·
+  <a href="https://github.com/Lee-take/dsagent/releases/download/v1.0.1/DS.Agent_1.0.1_x64-setup.exe">Download for Windows</a> ·
   <a href="LICENSE">Apache-2.0</a>
 </p>
 
@@ -155,7 +155,7 @@ high-risk action. See the full [model boundary](docs/AGENT_MODEL_BOUNDARY.md).
   reconciliation contracts validated with offline adversarial fake providers.
 
 Production Microsoft/Google account registration and live external-write
-authority remain disabled in v1.0.0. The release does not sign in to real
+authority remain disabled in v1.0.1. The release does not sign in to real
 accounts, send real email, or create, change, or cancel real calendar events.
 
 ## Why Rust
@@ -168,7 +168,7 @@ remain thin; the Kernel and persistent projections own business state.
 
 ## Quick start
 
-1. Download the [Windows x64 installer](https://github.com/Lee-take/dsagent/releases/download/v1.0.0/DS.Agent_1.0.0_x64-setup.exe).
+1. Download the [Windows x64 installer](https://github.com/Lee-take/dsagent/releases/download/v1.0.1/DS.Agent_1.0.1_x64-setup.exe).
 2. Make your own valid `DEEPSEEK_API_KEY` available to the DS Agent process.
 3. Choose one local workspace on first run.
 4. Describe the result you want in chat. DS Agent requests additional
@@ -178,7 +178,7 @@ A user-supplied DeepSeek API key is a required prerequisite. DS Agent does not
 bundle a shared key or bypass DeepSeek access requirements; use remains subject
 to DeepSeek's terms and account policies.
 
-The v1.0.0 installer is currently unsigned, so Windows may display an
+The v1.0.1 installer is currently unsigned, so Windows may display an
 unknown-publisher warning. Read the [installation guide](docs/INSTALLATION.md)
 before installing.
 
@@ -195,11 +195,13 @@ example `D:\build-target\ds-agent-v1-release`.
 
 ## Stable release
 
-- Release: [DS Agent v1.0.0](https://github.com/Lee-take/dsagent/releases/tag/v1.0.0)
-- Installer: `DS.Agent_1.0.0_x64-setup.exe`
-- Size: `12,714,575 bytes`
-- SHA-256: `3B944589C8443A677AF55F8748C06A4D6EBA4ACE86E63E302D5782D5A5E548E4`
-- Validation: 192-file secret scan, production frontend build, Node/UI checks,
+- Release: [DS Agent v1.0.1](https://github.com/Lee-take/dsagent/releases/tag/v1.0.1)
+- Installer: `DS.Agent_1.0.1_x64-setup.exe`
+- Size: `12,716,857 bytes`
+- SHA-256: `469C4EFA54F4C94A6E37D28C9C88D331B26E1770C6792DC93D02B451640E2A6F`
+- Fix: approvals now stay with their owning task, and one task with several
+  permissions needs only one confirm-or-reject decision.
+- Validation: source secret scan, production frontend build, Node/UI checks,
   and 852 Rust tests with 845 passed, seven permission-gated live/GUI tests
   intentionally ignored, and zero failed.
 
@@ -208,7 +210,7 @@ example `D:\build-target\ds-agent-v1-release`.
 - [Installation](docs/INSTALLATION.md)
 - [DS Agent and DeepSeek boundary](docs/AGENT_MODEL_BOUNDARY.md)
 - [v1 architecture](docs/architecture/DS_AGENT_V1_ARCHITECTURE_PLAN.md)
-- [v1.0.0 release notes](docs/RELEASE_NOTES_v1.0.0.md)
+- [v1.0.1 release notes](docs/RELEASE_NOTES_v1.0.1.md)
 - [v1 completion audit](docs/DS_AGENT_V1_COMPLETION_AUDIT.md)
 - [Security](SECURITY.md) · [Contributing](CONTRIBUTING.md) · [License](LICENSE)
 

README.zh-CN.md

@@ -11,8 +11,8 @@
 </p>
 
 <p align="center">
-  <a href="https://github.com/Lee-take/dsagent/releases/tag/v1.0.0">v1.0.0 正式稳定版</a> ·
-  <a href="https://github.com/Lee-take/dsagent/releases/download/v1.0.0/DS.Agent_1.0.0_x64-setup.exe">下载 Windows 安装包</a> ·
+  <a href="https://github.com/Lee-take/dsagent/releases/tag/v1.0.1">v1.0.1 正式稳定版</a> ·
+  <a href="https://github.com/Lee-take/dsagent/releases/download/v1.0.1/DS.Agent_1.0.1_x64-setup.exe">下载 Windows 安装包</a> ·
   <a href="LICENSE">Apache-2.0</a>
 </p>
 
@@ -138,7 +138,7 @@ DeepSeek 可以提出动作，DS Agent 决定动作是否安全、是否允许
 - 已通过离线对抗性 fake provider 验证的 Microsoft/Google 形态邮件、日历、同步、草稿、
   外部变更和对账契约。
 
-v1.0.0 仍未开放生产 Microsoft/Google 账号注册和真实外部写入权限。当前正式版不会登录
+v1.0.1 仍未开放生产 Microsoft/Google 账号注册和真实外部写入权限。当前正式版不会登录
 真实账号、发送真实邮件，也不会创建、修改或取消真实日历事件。
 
 ## 为什么使用 Rust
@@ -149,7 +149,7 @@ command 与 React UI 保持薄层，业务状态由 Kernel 和持久投影统一
 
 ## 快速开始
 
-1. 下载 [Windows x64 安装包](https://github.com/Lee-take/dsagent/releases/download/v1.0.0/DS.Agent_1.0.0_x64-setup.exe)。
+1. 下载 [Windows x64 安装包](https://github.com/Lee-take/dsagent/releases/download/v1.0.1/DS.Agent_1.0.1_x64-setup.exe)。
 2. 让 DS Agent 进程能够读取你自己的有效 `DEEPSEEK_API_KEY`。
 3. 首次运行时选择一个本地工作目录。
 4. 在聊天中描述你希望完成的结果；只有任务确实需要时，DS Agent 才会请求额外权限或
@@ -158,7 +158,7 @@ command 与 React UI 保持薄层，业务状态由 Kernel 和持久投影统一
 用户自行提供有效的 DeepSeek API Key 是必备前提。DS Agent 不内置共享 Key，也不会
 绕过 DeepSeek 的访问条件；实际使用仍须遵守 DeepSeek 的服务条款和账号规则。
 
-v1.0.0 安装包目前尚未签名，Windows 可能显示“未知发布者”提示。安装前请阅读
+v1.0.1 安装包目前尚未签名，Windows 可能显示“未知发布者”提示。安装前请阅读
 [安装指南](docs/INSTALLATION.md)。
 
 ### 从源码运行
@@ -174,19 +174,20 @@ npx pnpm@9.15.9 --filter @deepseek-agent-os/desktop tauri:dev
 
 ## 正式稳定版
 
-- Release：[DS Agent v1.0.0](https://github.com/Lee-take/dsagent/releases/tag/v1.0.0)
-- 安装包：`DS.Agent_1.0.0_x64-setup.exe`
-- 大小：`12,714,575 bytes`
-- SHA-256：`3B944589C8443A677AF55F8748C06A4D6EBA4ACE86E63E302D5782D5A5E548E4`
-- 验证：192 个文件的密钥扫描、前端 production build、全部 Node/UI 检查以及 852 项 Rust
+- Release：[DS Agent v1.0.1](https://github.com/Lee-take/dsagent/releases/tag/v1.0.1)
+- 安装包：`DS.Agent_1.0.1_x64-setup.exe`
+- 大小：`12,716,857 bytes`
+- SHA-256：`469C4EFA54F4C94A6E37D28C9C88D331B26E1770C6792DC93D02B451640E2A6F`
+- 修复：审批只跟随所属任务；同一任务需要多项权限时，只需一次确认或拒绝。
+- 验证：源文件密钥扫描、前端 production build、全部 Node/UI 检查以及 852 项 Rust
   测试；845 项通过，7 项需要额外权限的 live/GUI 测试按设计忽略，0 项失败。
 
 ## 文档
 
 - [安装指南](docs/INSTALLATION.md)
 - [DS Agent 与 DeepSeek 的工作边界](docs/AGENT_MODEL_BOUNDARY.md)
 - [v1 架构计划](docs/architecture/DS_AGENT_V1_ARCHITECTURE_PLAN.md)
-- [v1.0.0 发布说明](docs/RELEASE_NOTES_v1.0.0.md)
+- [v1.0.1 发布说明](docs/RELEASE_NOTES_v1.0.1.md)
 - [v1 完成审计](docs/DS_AGENT_V1_COMPLETION_AUDIT.md)
 - [安全说明](SECURITY.md) · [参与贡献](CONTRIBUTING.md) · [开源许可](LICENSE)
 

apps/desktop/package.json

@@ -1,7 +1,8 @@
 {
   "name": "@deepseek-agent-os/desktop",
   "private": true,
-  "version": "1.0.0",
+  "version": "1.0.1",
+  "author": "Lee take",
   "license": "Apache-2.0",
   "type": "module",
   "scripts": {

apps/desktop/src-tauri/Cargo.toml

@@ -1,9 +1,10 @@
 [package]
 name = "deepseek-agent-os-desktop"
-version = "1.0.0"
+version = "1.0.1"
 description = "Local-first DeepSeek AI work platform"
 edition = "2021"
 license = "Apache-2.0"
+authors = ["Lee take"]
 
 [build-dependencies]
 tauri-build = { version = "2.2.0", features = [] }

apps/desktop/src-tauri/src/kernel/app_update.rs

@@ -17,8 +17,8 @@ pub(crate) const APP_UPDATE_RELEASES_API_URL: &str =
 const APP_UPDATE_RELEASE_DOWNLOAD_PATH_PREFIX: &str = "/Lee-take/dsagent/releases/download/";
 const APP_UPDATE_LEGACY_RELEASE_DOWNLOAD_PATH_PREFIX: &str =
     "/Lee-take/deepseek-agent-os/releases/download/";
-const APP_UPDATE_USER_AGENT: &str = "DS-Agent-Updater/1.0.0";
-const APP_UPDATE_CURRENT_RELEASE_TAG: &str = "v1.0.0";
+const APP_UPDATE_USER_AGENT: &str = "DS-Agent-Updater/1.0.1";
+const APP_UPDATE_CURRENT_RELEASE_TAG: &str = "v1.0.1";
 #[cfg(windows)]
 const WINDOWS_CREATE_NO_WINDOW: u32 = 0x08000000;
 
@@ -653,7 +653,7 @@ mod tests {
         let status = update_status_from_releases(releases, app_update_current_version());
 
         assert!(!status.update_available);
-        assert_eq!(status.current_version, "v1.0.0");
+        assert_eq!(status.current_version, "v1.0.1");
         assert_eq!(status.latest_version.as_deref(), Some("0.3.0"));
         assert!(status.asset_name.is_none());
     }

apps/desktop/src-tauri/tauri.conf.json

@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "DS Agent",
   "mainBinaryName": "ds-agent",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "identifier": "ai.deepseek-agent-os.desktop",
   "build": {
     "beforeDevCommand": "npx pnpm@9.15.9 dev",
@@ -28,6 +28,8 @@
   "bundle": {
     "active": false,
     "targets": "all",
-    "icon": ["icons/icon.ico"]
+    "icon": ["icons/icon.ico"],
+    "publisher": "Lee take",
+    "copyright": "Copyright © 2026 Lee take"
   }
 }