fy-agent · python-rust · Sep 18, 2026 · Sep 18, 2026
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -8,6 +8,61 @@ records.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.4.5] - 2026-09-18
+
+FyAgent 0.4.5 adds a read-only Agent Health Center, skippable first-use software
+recommendations, China-focused FDE catalogues, and explicit reuse of managed
+OpenAI/xAI subscriptions through the local proxy.
+
+### Added
+
+- Added a read-only Agent Health Center that observes installation,
+  configuration, authentication, and proxy evidence for supported Agents, with
+  per-card entry points and serial or single-item refresh. Checks do not write
+  configuration, refresh credentials, or execute target CLIs.
+- Added skippable first-use software recommendations for confirmed new
+  installations. The guide projects directory-owned recommendations and does
+  not install software, open logins, or change models.
+- Added China-focused FDE prompt presets and an exact FDE MCP catalogue for
+  delivery workflows.
+- Added explicit Managed Auth subscription reuse: a selected OpenAI or xAI
+  account can be bound through FyAgent's local proxy to Claude Code, Codex, and
+  Grok Build. Account login, software connection, and model-request source
+  remain separate confirmed actions.
+- Resolved Claude Code and Grok Build official npm latest metadata at runtime
+  while keeping executable install/update plans on exact reviewed versions.
+
+### Changed
+
+- Simplified secondary renderer pages while preserving destructive-action,
+  secret, recovery, scroll, accessibility, and performance boundaries.
+- Restricted first-use guide persistence to native owner commands so ordinary
+  settings saves cannot overwrite those fields through compatibility keys.
+- Preferred the current SwiftPM privileged-helper product over a leftover
+  Xcode build artifact during helper packaging.
+
+### Fixed
+
+- Preserved enabled Prompt files when saving new or disabled entries and when
+  importing, and validated Daily Memory dates so illegal names and README
+  files no longer break the list, search, or save paths.
+- Preserved Agent directory contrast on bright backing and ignored late scan
+  callbacks after a view is disposed.
+- Kept an idle managed-proxy overview parseable and included Grok Build in
+  first-use programming recommendations.
+- Applied the live Grok npm script policy on development Windows hosts.
+
+### Release contract
+
+- Application and bundled helper versions move to 0.4.5; the helper's existing
+  minimum-client compatibility floor is unchanged.
+- Formal assets remain native Windows x64/ARM64 NSIS installers and one macOS
+  universal DMG, with verified metadata and build attestation. Windows signing
+  status is disclosed from the actual verified release evidence.
+- Grok native credential projection and macOS privileged system commits retain
+  their existing fail-closed production gates. Health observation and first-use
+  recommendations do not imply installation, login, or entitlement success.
+
 ## [0.4.4] - 2026-09-07
 
 FyAgent 0.4.4 adds centralized account management, Claude Code CLI installation,

diff --git a/docs/release-notes/README.md b/docs/release-notes/README.md
@@ -10,6 +10,8 @@
 当前尚未发布的新版本说明会在这里列出；版本发布后可整份移除，已发布事实继续由
 Git 历史和 GitHub Releases 保存。
 
+- [v0.4.5 (English)](v0.4.5-en.md)
+- [v0.4.5 (中文)](v0.4.5-zh.md)
 - [v0.4.4 (English)](v0.4.4-en.md)
 - [v0.4.4 (中文)](v0.4.4-zh.md)
 - [v0.4.3 (English)](v0.4.3-en.md)

diff --git a/docs/release-notes/v0.4.5-en.md b/docs/release-notes/v0.4.5-en.md
@@ -0,0 +1,64 @@
+# FyAgent v0.4.5
+
+FyAgent v0.4.5 adds a read-only Agent Health Center, skippable first-use
+software recommendations, China-focused FDE catalogues, and explicit reuse of
+managed OpenAI/xAI subscriptions through the local proxy.
+
+## Highlights
+
+- **See which Agent needs attention.** The Health Center summarizes local
+  installation, configuration, authentication, and proxy evidence for supported
+  Agents. Each card can open the existing install, account, or model flow. The
+  checks are read-only: they do not write files, refresh credentials, or run
+  target CLIs.
+- **A skippable first-use software guide.** Confirmed new installations can
+  choose office, coding, or mixed use and see a short recommendation list from
+  the native directory. Skipping or finishing the guide does not install
+  software, open a login, or change models.
+- **Reuse a managed subscription locally.** After an OpenAI or xAI account is
+  saved, you can confirm binding it through FyAgent's local proxy to Claude
+  Code, Codex, or Grok Build. Login, software connection, and the current
+  model-request source stay separate.
+- **China-focused FDE catalogues.** Prompt presets and an exact MCP catalogue
+  cover common FDE delivery workflows.
+- **Current official CLI versions.** Claude Code and Grok Build read latest
+  official npm metadata at runtime. Install and update plans still pin an exact
+  reviewed version.
+
+## Upgrade and behavior notes
+
+Existing installations do not see the first-use guide. Ordinary settings saves
+cannot overwrite the guide's completion fields.
+
+Account login still only stores a credential. Connecting that account to
+software, including local-proxy subscription reuse, remains a separate
+confirmed action. Grok native credential projection stays fail-closed.
+
+Health results report local observation, not a successful vendor login or
+remote model call. Installation success, proxy binding, and entitlement
+remain independent facts.
+
+macOS privileged `/Applications` commits retain their existing production
+gate. Packaging a helper does not enable them.
+
+## Release artifacts
+
+The formal workflow publishes these seven attachments only after native builds,
+platform verification, signing/notarization as required, and attestation:
+
+```text
+FyAgent-0.4.5-macOS.dmg
+FyAgent-0.4.5-Windows-x64-setup.exe
+FyAgent-0.4.5-Windows-arm64-setup.exe
+download-manifest.json
+build-metadata.json
+signing-status.json
+artifact-attestation.sigstore.json
+```
+
+The DMG supports Apple Silicon and Intel Macs. Windows installers are built on
+matching native x64 and ARM64 runners. The appended Windows signing disclosure
+is generated from verified release metadata, not inferred from build success.
+
+See the [0.4.5 changelog](../../CHANGELOG.md) and
+[Chinese release notes](v0.4.5-zh.md) for further details.
diff --git a/docs/release-notes/v0.4.5-zh.md b/docs/release-notes/v0.4.5-zh.md
@@ -0,0 +1,52 @@
+# FyAgent v0.4.5
+
+本版本新增只读的 Agent 运行状态页、可跳过的首次软件推荐、面向中国交付场景的
+FDE 目录，以及通过本机代理复用已管理 OpenAI / xAI 订阅。
+
+## 主要更新
+
+- **先看哪个 Agent 需要处理。** 运行状态页汇总已支持软件的本机安装、配置、认证
+  和代理观察结果，卡片可进入现有的安装、账号或模型流程。检查只读，不会写配置、
+  刷新凭据或执行目标 CLI。
+- **可跳过的首次软件推荐。** 确认属于全新安装时，可选择办公、编程或混合用途，
+  并从原生目录看到精简推荐。跳过或完成引导不会安装软件、打开登录或改模型。
+- **本机复用已管理订阅。** OpenAI 或 xAI 账号保存后，可再确认通过 FyAgent
+  本机代理绑定到 Claude Code、Codex 或 Grok Build。登录、软件连接和当前模型
+  请求来源仍是分开的操作。
+- **面向中国交付的 FDE 目录。** 提供 FDE 提示词预设和对应的 MCP 目录。
+- **读取官方 CLI 最新版本。** Claude Code 与 Grok Build 会在运行时读取官方 npm
+  最新元数据；实际安装或更新仍固定到已审核的精确版本。
+
+## 升级与使用说明
+
+已有安装不会再出现首次软件推荐。普通设置保存不能改写引导完成字段。
+
+登录只保存账号凭据。把账号连接到软件，包括通过本机代理复用订阅，仍需另行确认。
+Grok 原生凭据写入继续保持现有生产准入关闭。
+
+运行状态只报告本机观察结果，不代表厂商登录或远端模型调用已成功。安装完成、
+代理绑定和订阅权益仍是彼此独立的事实。
+
+macOS `/Applications` 特权提交继续受现有生产准入限制，不因安装包包含 helper
+就自动开放。
+
+## 安装包与验证材料
+
+正式工作流完成原生构建、平台校验、所需签名与公证、产物证明后发布七个附件：
+
+```text
+FyAgent-0.4.5-macOS.dmg
+FyAgent-0.4.5-Windows-x64-setup.exe
+FyAgent-0.4.5-Windows-arm64-setup.exe
+download-manifest.json
+build-metadata.json
+signing-status.json
+artifact-attestation.sigstore.json
+```
+
+macOS 使用支持 Apple Silicon 与 Intel 的通用 DMG；Windows 分别提供 x64 和 ARM64
+安装程序。Windows 是否具有 Authenticode 签名，以本次发布实际校验后的
+`signing-status.json` 和 Release 自动附加的签名说明为准。
+
+完整变更见 [CHANGELOG.md](../../CHANGELOG.md)，另提供
+[英文发布说明](v0.4.5-en.md)。
diff --git a/scripts/tasks/supported-platform-structure-assets.json b/scripts/tasks/supported-platform-structure-assets.json
@@ -51,7 +51,7 @@
     ],
     [
       "src-tauri/Cargo.toml",
-      "e81714179e5f6e22dd20aaa143543d6fbf560dd0031d863573a878552d10bff6"
+      "a31652497eda7295a20a1649ad73c0b9e27470a5a4250b9a65b2f67fc1b92fd8"
     ],
     [
       "src-tauri/src/agent_install/desktop.rs",

diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock
diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml
@@ -3,7 +3,7 @@ members = [".", "user-helper"]
 resolver = "2"
 
 [workspace.package]
-version = "0.4.4"
+version = "0.4.5"
 
 [package]
 name = "fyagent"

diff --git a/src-tauri/Info.plist b/src-tauri/Info.plist
@@ -17,7 +17,7 @@
   <key>SMPrivilegedExecutables</key>
   <dict>
     <key>com.fyagent.desktop.system-commit-helper</key>
-    <string>anchor apple generic and identifier "com.fyagent.desktop.system-commit-helper" and info[CFBundleVersion] &gt;= "0.4.4" and certificate leaf[subject.OU] = "HY446996QX"</string>
+    <string>anchor apple generic and identifier "com.fyagent.desktop.system-commit-helper" and info[CFBundleVersion] &gt;= "0.4.5" and certificate leaf[subject.OU] = "HY446996QX"</string>
   </dict>
 </dict>
 </plist>

diff --git a/src-tauri/macos-privileged-helper/Resources/helper-info.plist b/src-tauri/macos-privileged-helper/Resources/helper-info.plist
@@ -7,7 +7,7 @@
 	<key>CFBundleName</key>
 	<string>FyAgent System Commit Helper</string>
 	<key>CFBundleVersion</key>
-	<string>0.4.4</string>
+	<string>0.4.5</string>
 	<key>CFBundleInfoDictionaryVersion</key>
 	<string>6.0</string>
 	<key>SMAuthorizedClients</key>