Changelog

Pi Coding Agent 1.2.0 brings Windows PowerShell support, recoverable model settings, and more reliable tools, channels, and startup.

Windows PowerShell support

Use PowerShell 5.1 or 7 for Agent commands on Windows. Choose the default shell for new sessions while existing sessions keep their current shell.

Recover model configuration

See which fields need fixing when models.json is invalid. Sending pauses until you repair and reload the configuration, helping prevent requests to an unintended endpoint.

Consistent tool permissions

MCP aliases, tool search, and nested Codemode calls follow the same permission checks. Upgrading keeps existing session and channel grants within their original scope.

More reliable channel replies

Attachments stay with the correct turn. Cancelled or extension-handled messages no longer affect later Desktop turns or resend the previous assistant reply.

Reliability improvements

• PowerShell handles Chinese text, emoji, multiline scripts, quotes, and interleaved output more reliably, with improved cancellation, timeouts, exit status, and process-tree cleanup.
• Settings and optional channel, terminal, and Markdown dependencies load on demand. The first-open blank screen is fixed; loading dialogs support Close, Esc, backdrop dismissal, and correct keyboard focus.
• Windows retries configuration saves when files are temporarily busy. Installer improvements include the Herdr extraction fix, repair and rollback checks, resource integrity, and SBOM validation.
• Pi 1.2.0 tool metadata is adapted for the interface, restoring tool lists without exposing internal extension paths. Unavailable tools and changed paths update their selectable state.

Notes

• On Windows, open Settings → General → Default Agent shell and choose PowerShell or Bash. New sessions default to PowerShell; this setting only affects newly created sessions.
• Existing sessions keep their shell and tool grants. Changing the default does not grant command access to a session with no tools. Bash and PowerShell run with your local user permissions, not in a security sandbox.
• Split very long PowerShell commands. Commands over the Windows length limit are rejected before execution rather than silently truncated.
• Pi 1.2.0 rejects the entire models.json configuration if schema validation fails, so all custom providers and model overrides become inactive. Desktop pauses sending in both desktop and channel sessions.
• Open Settings → Models and fix the reported fields. For fields that cannot be edited there, edit ~/.pi/agent/models.json manually. Line comments and trailing commas are supported.
• Reload the configuration from disk, then reload the session before sending again. Review the selected model and Auto routing after recovery.
• OpenRouter refreshes its model directory using the current account's permissions. Desktop and Pi CLI share the cache in ~/.pi/agent/; after changing accounts or starting offline, reconnect and refresh to replace a stale or different account's catalog.
• The Windows installer remains an Unsigned Beta, and Linux AppImage updates remain manual.

Pi Coding Agent 1.1.0 powers new MCP services, Auto routing, image generation, decision models, and persistent tool execution history.

Auto model routing

Choose a fast model and a capable model. Auto routes each new request by thinking level or task complexity, and shows which model actually answered.

MCP services

Connect local and remote tools with stdio or Streamable HTTP. Import configurations, sign in with OAuth, test connections, and preview resources in Settings.

Image generation and decisions

Use Codemode to generate images, classify content, answer yes/no questions, or score results. Generated images stay available when you reopen the conversation.

Tools and execution history

Follow direct and nested tool calls in a branch-aware execution tree. Inspect status, duration, inputs, and full results, even after reopening or compacting a session.

Advanced model settings

• Open Settings → Models → Advanced model settings to adjust automatic context compaction, reply token reserves, retained recent content, and per-model overrides.
• Configure Agent and provider retries, wait times, request timeouts, and automatic, SSE, WebSocket, or cached WebSocket transport.
• Model editing adds sampling parameters by thinking level, image and request input limits, and model ID overrides. Max reasoning is available on supported models.
• Advanced settings are shared with Pi CLI. Reload existing sessions to apply them; trusted project settings may override global values. Saving detects external edits to reduce conflicts.

Reliability improvements

• Pi Coding Agent is upgraded from 0.87.1 to 1.1.0, with guided API key, subscription, and OAuth setup, safer credential replacement, and migration of older Azure configuration.
• Stopped turns retain their status after reopening and no longer trigger completion sounds or notifications. Session switching, drafts, scrolling, and streaming are more reliable.
• Windows fixes cover MCP subprocess startup, environment handling, and paths with spaces or Chinese characters, alongside Herdr shutdown and runtime cleanup improvements.

Notes

• Route by thinking level, or add a decision model to judge task complexity. Decision requests add latency and usage; if a decision fails, Auto uses the capable model.
• Saving an MCP configuration does not authorize its tools. Grant access in the current session's tools menu; nested calls follow the same permissions.
• OpenAI decisions require an API key; ChatGPT subscription sign-in does not provide this capability. Add TypeSafe / Jev with its API key to use jev-latest.
• Provider details offer image and decision model tests, which may incur charges. Calls support cancellation and keep their inputs, results, state, and usage in session history.
• Desktop tool permissions and execution records live in the application data directory. For a complete backup, keep its tool-executions logs and content files alongside ~/.pi/agent/.
• The Windows installer remains an Unsigned Beta, and Linux AppImage updates remain manual.

This release extends Herdr to Windows x64, upgrades the bundled Pi Coding Agent to 0.87.1, and updates model support, dependency security, and cross-platform validation.

Herdr on Windows x64

• Windows x64 packages now bundle integrity-verified Herdr v0.8.2. Install, repair, or remove it in Developer Tools, then connect through Attach or Managed mode.
• Windows supports Herdr Fleet and Agent control, live ANSI terminal observation, and explicit keyboard takeover.
• Native Job Objects contain terminal child processes and provide bounded cleanup after app or terminal failure.
• Herdr now supports macOS arm64 / x64, Linux x64, and Windows x64. Windows ARM64, Windows Server, and 32-bit Windows remain unsupported.

Pi 0.87.1, models, and caching

• The bundled Pi Coding Agent moves from 0.85.0 to 0.87.1, with desktop adaptations for session, model-provider, and tool-call runtime changes.
• New model support includes Claude Opus 5.5, GPT-6 Sol, GPT-6 Luna, and Grok 4.7.
• Settings → General → Conversation adds Prompt cache warming with Off, During long tool runs, and Also while idle modes. The setting is shared with Pi CLI and may use model tokens.

Safety and reliability

• Dependencies with known security risk are updated, with new regression coverage for native Windows Herdr integration, terminal lifecycle, and packaged resources.
• Release validation continues across platform installers, Windows Job Objects, Herdr runtime integrity, and packaged toolchains.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.3.0-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.3.0-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.3.0.exe
• Linux x64: Pi-Agent-Desktop-0.3.0-x86_64.AppImage

Notes

• The bundled Pi Coding Agent runtime is now 0.87.1.
• The Windows installer remains an Unsigned Beta, and Linux AppImage updates remain manual.
• Herdr and managed processes provide lifecycle control, not a security sandbox.

This release aligns native-menu language with the app UI, hides the Windows / Linux top menu bar by default, and fixes list-contained display math that could corrupt later Markdown rendering.

Native menus and cross-platform UI

• Native application menus now follow the interface language. File, Edit, View, Window, Help, and their submenus support English, Simplified Chinese, and Traditional Chinese.
• Windows and Linux hide the top menu bar by default for a more integrated app surface. Menu commands and shortcuts remain available, and pressing Alt temporarily reveals the bar.
• macOS retains the system menu bar, with labels following the app language. The Settings layout is unchanged.

Markdown display math

• Single-line display math inside a list now preserves indentation when expanded, keeping the formula within its original list item.
• Headings, tables, bold text, and other content after a formula are no longer misparsed as math, with coverage for ordered, unordered, nested, quoted, and mixed-line-ending cases.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.2.3-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.2.3-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.2.3.exe
• Linux x64: Pi-Agent-Desktop-0.2.3-x86_64.AppImage

Notes

• The bundled Pi Coding Agent runtime remains at 0.85.0.
• Herdr platform support, the Windows Unsigned Beta, and manual Linux updates remain unchanged.

This release adds a Traditional Chinese UI and independent model-reply width, upgrades the bundled Pi Coding Agent to 0.85.0, and improves Herdr Agent support and Windows Git Bash compatibility.

Language and conversation layout

• A new Traditional Chinese (zh-TW) UI covers settings, models, sessions, the browser, developer tools, and Herdr. Taiwan, Hong Kong, Macau, and zh-Hant system locales default to Traditional Chinese.
• Native dialogs, file context menus, browser confirmations, and tray copy now follow the selected app language instead of drifting from the main UI.
• Settings → General → Conversation adds an independent Model reply width with Comfortable width and Fill conversation column options. Full mode gives reply bubbles, paragraphs, tables, and code blocks the available reading space.
• Model reply width is separate from the outer Conversation width and defaults to Comfortable. It contracts with the available space when a right-side panel is open.

Runtime, Herdr, and Windows tools

• Pi Coding Agent and related runtimes move to 0.85.0, including the pi-server dependency and desktop compatibility checks.
• Herdr can now discover and launch the agy Agent through the same fixed-directory discovery and controlled-start flow.
• Healthy Git Bash installations in custom Git for Windows or versioned PortableGit directories are now recognized correctly.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.2.2-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.2.2-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.2.2.exe
• Linux x64: Pi-Agent-Desktop-0.2.2-x86_64.AppImage

Notes

• The bundled Pi Coding Agent runtime is now 0.85.0.
• Herdr supports macOS arm64 / x64 and Linux x64 and remains unavailable on Windows. Adding agy support does not install that CLI automatically.
• The Windows installer remains an Unsigned Beta, and Linux AppImage updates remain manual.

This release focuses on packaged-app Herdr Agent CLI discovery under a sparse GUI PATH, and improves screenshot attachments, notification wrapping, and Mermaid presentation.

Herdr Agent CLI launch and diagnostics

• A fixed-directory catalog for 11 startable Agents covers common Homebrew, MacPorts, ~/.local/bin, vendor, npm / Bun / uv / WinGet, and supported version-manager locations.
• Managed Herdr uses an Agent-only launcher overlay plus verified Agent and runtime directories, so apps launched from Finder with a sparse system PATH can still find common Agent CLIs.
• herdr_agent_start no longer rejects early when Desktop cannot find a CLI locally. After safety checks, the target Herdr Session returns the authoritative result, and Attach mode does not decide for an external Session.
• Herdr diagnostics add detected, missing-locally, ambiguous, and source information. Failures retain stable error codes without exposing paths or terminal contents.

Attachments and content presentation

• Large screenshots and Retina PNGs are resized to a 2048-pixel longest edge and roughly 512 KiB JPEG before entering the draft. The decoded draft-image budget increases to 4 MiB.
• Multiline notifications, explicit line breaks, and long unspaced text now wrap fully instead of being compressed into a fixed-height ellipsis.
• Mermaid fences show the rendered diagram by default after streaming, while preserving Source view and render-failure fallback.

Safety and reliability

• Agent discovery checks only fixed allowlisted directories and canonical commands. It never runs --version, login shells, shell profiles, network installs, or recursive home-directory scans.
• The launcher overlay contains only allowed Agent commands rather than prepending whole user bin directories. Attach mode never changes an external Herdr environment.
• A specific access violation from historical unsigned Windows installers is retried only within bounds and only while the target directory remains empty; other failures still fail closed.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.2.1-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.2.1-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.2.1.exe
• Linux x64: Pi-Agent-Desktop-0.2.1-x86_64.AppImage

Notes

• The bundled Pi Coding Agent runtime remains at 0.84.0.
• missing-locally means only that Desktop did not find the CLI in a supported local directory; it does not prove that Attach or a future Remote Session cannot launch it.
• Herdr platform support, the Windows Unsigned Beta, and manual Linux updates remain unchanged.

This release fully integrates Herdr v0.8.2 / protocol 20: Pi can manage local Agent fleets from the original conversation while users observe, troubleshoot, or take over through title-bar status and a right-side terminal.

Conversational Herdr control and Fleet UI

• Twenty-four semantic herdr_* tools cover Fleet queries, workspace / tab / pane management, Agent launch and prompting, state explanation, process diagnostics, key input, and output waits.
• The main conversation controls Herdr Agents directly. Title-bar Fleet status is grouped by workspace, tab, pane, and Agent on both the start screen and active sessions.
• A right-side xterm.js Herdr terminal adds ANSI output, auto-fit sizing, read-only observation, explicit keyboard takeover, input throttling, reconnection, and bounded buffering. Closing the view does not close the pane or Agent.
• Attach connects to a user-started Herdr server. Managed lets Pi Desktop start, monitor, restart within limits, and stop its private server when disabled, switched, uninstalled, or exited.
• macOS and Linux packages bundle a digest-verified Herdr v0.8.2. Installation, update, repair, and removal live in Developer Tools, and Managed mode needs no separate runtime download.
• Supported Agent CLIs include pi, claude, codex, gemini, omp, opencode, copilot, kimi, droid, grok, and qwen.

Safety, reliability, and conversation UX

• The adapter is pinned to Herdr >=0.8.2 <0.9.0, protocol 20, and schema 1. Unknown protocols, schema drift, unsafe endpoints, oversized responses, and invalid identifiers fail closed.
• The Unix socket is checked for real-file status, current-user ownership, and permissions before every request. Prompts, pane output, waits, terminal frames, and input queues have strict limits and redaction.
• Managed controls only the Session server started by Pi Desktop and never takes over or terminates an external Herdr. Pi Sessions and Herdr Sessions remain independent.
• Closing a workspace, pane, or Agent requires local confirmation. Because Herdr v0.8.2 cannot stop only an Agent, closing one explicitly closes its pane.
• Skill invocation messages now collapse into clear user-visible commands instead of exposing or repeating Skill bodies.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.2.0-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.2.0-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.2.0.exe
• Linux x64: Pi-Agent-Desktop-0.2.0-x86_64.AppImage

Notes

• The bundled Pi Coding Agent runtime remains at 0.84.0.
• Herdr currently supports macOS arm64 / x64 and Linux x64. Other features remain available on Windows, but Herdr is unavailable there and fails closed.
• Herdr and managed processes provide lifecycle control, not a container or security sandbox. Child processes have the same local file, network, and environment access as Agent Bash.
• The Windows installer is an Unsigned Beta and may trigger Unknown Publisher or SmartScreen warnings. Linux AppImage updates remain manual.

This release adds observable, user-controlled managed background processes so the Agent can keep development servers, watchers, mock APIs, and other project tasks running under the app's lifecycle control.

Managed background processes

• New process_start, process_list, process_read, process_wait, process_write, process_stop, and process_restart tools handle long-running tasks while short commands continue to use Bash.
• The right-side Processes panel shows owner, state, readiness, redacted logs, loopback endpoints, and exit reasons, with controls for stdin, stop, force stop, restart, copy, and log export.
• Log cursors support slow-starting tasks and localhost addresses are detected automatically for workflows such as Vite, React, Storybook, Flask, Spring Boot, mock APIs, and watch builds.
• Managed localhost services work with the built-in Browser while process capability and Browser authorization remain separate.

Cross-platform safety and reliability

• macOS and Linux use POSIX process groups for full process-tree management. Windows 11 x64 uses a Rust helper and Windows Job Objects with path, version, architecture, and integrity verification.
• The feature is off by default. Enabling it validates platform support, project trust, session working-directory boundaries, owner identity, crash-reaper health, and resource policy, failing closed when requirements are not met.
• Processes are isolated by Agent session. Logs use bounded buffers, cursors, and secret redaction; stdin is not persisted, and common LAN binds require confirmation.
• A crash reaper performs bounded process-tree cleanup after Host or app failure, and an Agent cannot automatically bypass a user stop.
• The Windows release pipeline now adds reproducible Rust-helper builds, PE security checks, a CycloneDX SBOM, and packaged-artifact integrity gates.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.14-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.14-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.1.14.exe
• Linux x64: Pi-Agent-Desktop-0.1.14-x86_64.AppImage

Notes

• The bundled Pi Coding Agent runtime remains at 0.84.0.
• Managed processes support macOS, Linux, and Windows 11 x64, but not Windows ARM64, Windows Server, or 32-bit Windows. They provide lifecycle control, not a container or security sandbox.
• The Windows installer is an Unsigned Beta and may trigger Unknown Publisher or SmartScreen warnings. Linux AppImage updates remain manual.

This release adds chat font-size and conversation-width controls, and reworks @ file-reference suggestions for more complete and reliable browsing and search in large non-Git workspaces.

Chat appearance

• Settings → General → Conversation now offers Small, Standard, Large, and Extra Large chat sizes plus conversation-width controls. Changes apply immediately and persist across restarts.
• Comfortable width remains at 760px, while Expanded adapts to the window up to a maximum of 960px.
• Message, process-detail, and composer boundaries now align consistently in wide and minimum-width windows.

@ file references

• Suggestions now use on-demand browsing and managed fd search, with up to 300 results for both browsing and search so early folders cannot exhaust the quota.
• When the workspace is a user home directory, Windows AppData or macOS Library is hidden by default but remains available when explicitly typed.
• If the search tool is unavailable, times out, or fails, the app reports a clear fallback state and keeps current-directory candidates instead of hanging or returning misleading results.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.13-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.13-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.1.13.exe
• Linux x64: Pi-Agent-Desktop-0.1.13-x86_64.AppImage

Notes

• The bundled Pi Coding Agent runtime remains at 0.84.0.
• The Windows installer is an Unsigned Beta and may trigger Unknown Publisher or SmartScreen warnings. Linux AppImage updates remain manual.

This release fixes a Windows issue where project history disappeared from the session sidebar after switching between the main workspace and a linked worktree and would not return without restarting.

Windows worktree session fix

• The main workspace and linked worktrees now share Git's reported top-level path, eliminating slash mismatches between session files and Git output.
• The session sidebar and app shell use Windows-aware path comparison for separators, drive and path casing, and trailing separators.
• Repository subdirectories keep their independent project identity, and submodule semantics remain intact.
• When the sandboxed Renderer has no process global, Windows is detected through platform information exposed by preload.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.12-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.12-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.1.12.exe
• Linux x64: Pi-Agent-Desktop-0.1.12-x86_64.AppImage

Notes

• The bundled Pi Coding Agent runtime remains at 0.84.0.
• The Windows installer is an Unsigned Beta and may trigger Unknown Publisher or SmartScreen warnings. Linux AppImage updates remain manual.

This release adds an end-to-end local-file experience: attach any file in chat, recognize local paths in Markdown, and use rich system actions from file-link context menus.

Attachments and local files

• Drag and drop, paste, or use the attachment button for any file. Non-images appear as file cards, can be sent without text, and work in Steer / Follow-up queues during streaming.
• Markdown recognizes Windows, POSIX, and UNC local paths while preserving file: links. Absolute paths can be revealed in the system file manager, and repository-relative paths still open in the app.
• File-link context menus can open a file, use the default app or Open with, save a copy, copy the path or text contents, and reveal it in its folder. Windows reads real file associations.
• Attachment sends use stable snapshots, failed content merges back into the latest draft, and file references are validated as absolute paths, deduplicated, and count-limited.

Conversation experience and safety

• Thinking-block expansion state persists across session switches, new blocks inherit the latest choice, and storage is isolated by session and bounded.
• An upward wheel action or ArrowUp, PageUp, or Home immediately releases scroll following.
• Empty text segments between thinking and tool calls are filtered to prevent blank assistant bubbles.
• Main resolves real paths, validates file type and working-directory boundaries, and limits copied file contents by size and text type.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.11-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.11-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.1.11.exe
• Linux x64: Pi-Agent-Desktop-0.1.11-x86_64.AppImage

This release adds automatic naming for new sessions: a short title is generated in the background after the first meaningful message, without blocking the normal reply and with manual names always taking priority.

Automatic session titles

• The current session model generates a title in the background and updates the sidebar in real time. The request remains separate from session history and context caches.
• Settings → General → Conversation now includes an Auto-title new sessions switch, enabled by default and fully localized in English and Chinese.
• If the model is unavailable or the request fails, a local title is used. Quotes, line breaks, and trailing punctuation are normalized, with a 40-character limit.
• A manual rename during generation is never overwritten. Slash commands, blank text, single-character messages, and image-only messages do not trigger a title.
• Working-directory and model-runtime handling are tighter, and local fallback now runs correctly after model-service initialization failures.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.10-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.10-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.1.10.exe
• Linux x64: Pi-Agent-Desktop-0.1.10-x86_64.AppImage

Notes

• The bundled Pi Coding Agent runtime remains at 0.84.0.
• The Windows installer is an Unsigned Beta and may trigger Unknown Publisher or SmartScreen warnings. Linux AppImage updates remain manual.

This release improves control in long conversations: a Scroll to bottom button appears after leaving the latest content and restores automatic following for streaming output.

Conversation scrolling

• Added a floating Scroll to bottom button with running-state feedback, English and Chinese copy, and reduced-motion support.
• The live run spacer no longer distorts the near-bottom calculation, preventing incorrect button visibility.
• Scroll magnet state persists across turns and session switches while intentional upward scrolling always disengages automatic following.
• Delayed image loads and expanded process details now update button visibility and follow state as content height changes.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.9-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.9-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.1.9.exe
• Linux x64: Pi-Agent-Desktop-0.1.9-x86_64.AppImage

This release adds Base URLs for API-key providers and concentrates on reliable model refresh, localization, consistent theming, channel permission synchronization, and desktop resilience.

Models, interface, and channels

• API-key providers can override their default endpoint with a Base URL. Model refresh now bounds both service initialization and final catalog projection with a timeout.
• Completed English and Chinese coverage for the session sidebar, app navigation, file browsing and viewing, Skills, Plugins, and Agent notifications.
• Unified themes across failure pages, Word previews, model connection status, and user-message bubbles, while bundling renderer fonts for offline use.
• An account's default tool grant synchronizes to bound sessions. Grants are Pi Session-scoped, so channel entry points sharing a session remain consistent.
• Strengthened security, performance, and failure recovery across the shared browser, desktop IPC, file access, updates, crash recovery, and long-running operation.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.8-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.8-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.1.8.exe
• Linux x64: Pi-Agent-Desktop-0.1.8-x86_64.AppImage

This release streamlines model configuration and Feishu / Lark setup: control which models appear for each provider and create and connect a new bot through the official QR flow.

Model selection and localized settings

• Connected subscription and API-key providers can choose which models appear in the model selector.
• Search by model name or ID, enable models individually, enable or disable every model for a provider, and see the enabled count.
• Selections persist to Pi settings, remain compatible with existing thinking-level configuration, and do not change the model currently used by an existing session.
• The app prevents saving a configuration with no valid models so the selector cannot become unusable.
• Provider, sign-in, connection test, custom model, context window, cost, and thinking-level settings are now fully localized in Chinese.

Create a Feishu / Lark bot by QR code

• Added a recommended Scan to create flow for Feishu China or Lark using the official authorization process.
• Authorization configures the required message, resource, card, event, and bot-menu permissions, stores credentials, verifies the bot identity, and starts the connection.
• The App Secret is handled only inside the Agent Host and stored with operating-system encryption; it never enters the UI.
• Only the scanning user can send direct messages by default. Groups, commands, and Agent tools remain off until explicitly enabled.
• Existing custom apps can still connect with an App ID and App Secret.

Security and validation

• Strengthened channel credential storage, reload coverage, plaintext-leak checks, and error redaction.
• Added Feishu QR registration and channel login lifecycle tests, plus stronger cross-platform package validation and Windows native clipboard runtime checks.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.7-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.7-x64.dmg
• Windows x64: Pi-Agent-Desktop-Setup-0.1.7.exe
• Linux x64: Pi-Agent-Desktop-0.1.7-x86_64.AppImage

Notes

• The bundled Pi Coding Agent runtime remains at 0.84.0.
• The Windows installer remains unsigned and may trigger SmartScreen; Linux AppImage updates remain manual.

This release upgrades the bundled Pi Coding Agent to 0.84.0 and focuses on content rendering, the model directory, credential synchronization, and reliable Skill installation.

Pi 0.84 and content rendering

• Upgraded Pi Coding Agent and its related runtime to 0.84.0, with matching OAuth, model, and extension API adaptations.
• Agent responses now render Mermaid diagrams and LaTeX formulas with KaTeX.
• Markdown files gain improved syntax highlighting, Mermaid, and KaTeX rendering.

Models and authentication

• Sessions start from the locally cached model directory, with an explicit remote refresh action in the model selector.
• Model refresh supports timeouts, cancellation, offline state, and partial-provider warnings while preserving cached models after a failure.
• Saving or deleting an API key and signing in or out through OAuth now synchronize model state with the Agent Host and surface a clear warning if synchronization fails.

Skill installation and reliability

• Normal installs retain npm's default concurrency and cache. Network, timeout, or cache-lock failures trigger one retry with a temporary isolated cache.
• Improved installation timeout messages, extension diagnostics, and sensitive-data filtering in errors.
• Fixed Linux ASAR dependency conflicts, Windows ASAR path verification, and macOS Intel build validation, with stronger production-package checks.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.6-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.6-x64.dmg
• Windows x64: Pi-Agent-Desktop-Setup-0.1.6.exe
• Linux x64: Pi-Agent-Desktop-0.1.6-x86_64.AppImage

Notes

• The Windows installer remains unsigned and may trigger SmartScreen; Linux AppImage updates remain manual.

This release improves session-list, session-switching, and long-conversation performance while preserving the complete local history and reducing repeated scanning, transfer, and rendering work.

Highlights

• Added an incremental session index that reuses unchanged metadata by file fingerprint and refreshes only sessions affected by file-watcher events.
• Opening a session now prioritizes the most recent 20 conversation turns; scroll upward or use the button to load earlier messages.
• Very large text, thinking, tool-call arguments, and images use deferred content: a recognizable preview arrives first and full content loads on demand.
• Bounded session-content and path caches improve session switching, scrolling, and responsiveness during streaming output.
• Compaction and branch summaries are collapsed by default, with new performance instrumentation, benchmarks, and pagination, cache, and index coverage.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.5-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.5-x64.dmg
• Windows x64: Pi-Agent-Desktop-Setup-0.1.5.exe
• Linux x64: Pi-Agent-Desktop-0.1.5-x86_64.AppImage

Notes

• Pagination and deferred loading do not delete or truncate the complete session history stored on your machine.
• The Windows installer remains unsigned and may trigger SmartScreen; Linux AppImage updates remain manual.

This release adds a built-in browser shared by the user and Agent, integrating real Chromium pages, browser authorization, and network policy into the desktop workspace.

Built-in browser

• Open real pages in a Main-owned WebContentsView on the right side of the workspace, with multiple tabs, temporary or persistent profiles, login state, uploads, downloads, and proxy support.
• The Agent can navigate, read structured page snapshots, capture screenshots, click, type, and wait under separate Browser read / interact grants. Coding permission does not implicitly grant browser access.
• The user and Agent operate the same page and the user can take over at any time. Submissions, uploads, downloads, permission prompts, and external protocols still pass through local policy or confirmation.
• Settings manage global and session-specific browser permissions. Advanced browser mode combines trusted input, network inspection, and confirmed write-request replay.
• Remote pages run inside a sandboxed Browser View without the application preload, Node.js, or the main Renderer bridge.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.4-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.4-x64.dmg
• Windows x64: Pi-Agent-Desktop-Setup-0.1.4.exe
• Linux x64: Pi-Agent-Desktop-0.1.4-x86_64.AppImage

This release introduces cross-platform developer tool management and an official Linux package, giving Skills, Plugins, and Agent scripts a more consistent runtime across different machines.

Highlights

• Added a unified Developer Tools setting, grouped into JavaScript, Python, and CLI essentials with a tool list and detailed status, source, and version information.
• Discovers and verifies installed Node.js, npm / npx, Python, uv / uvx, Git / Bash, Bun, jq, and other tools, including incomplete PATH environments when macOS launches from Finder and common Windows installation locations.
• With confirmation, Pi Desktop can install private copies of Node.js LTS, CPython, uv, PortableGit, Bun, and jq without modifying the system PATH, shell configuration, or registry.
• Bundles and verifies platform-specific ripgrep and fd builds for stable, high-performance file search.
• Skills and Plugins now use resolved absolute Node / npm paths. Plugin npm operations run in an isolated Worker and return structured installation guidance when tools are missing.
• Added download, install, repair, remove, cancel, cache inspection, and diagnostic actions, with stronger redirect allowlists, checksum verification, launch validation, rollback, and log redaction.
• Updated the English and Chinese README files and application screenshots.

Platforms and downloads

• Added the official Linux x64 AppImage and included it with macOS Apple Silicon / Intel and Windows x64 in full CI, artifact launch E2E, and release validation.
• macOS Apple Silicon: Pi-Agent-Desktop-0.1.3-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.3-x64.dmg
• Windows x64: Pi-Agent-Desktop-Setup-0.1.3.exe
• Linux x64: Pi-Agent-Desktop-0.1.3-x86_64.AppImage

Notes

• Private tools are installed on demand only after confirmation and remain inside the Pi Agent Desktop application data directory.
• The Windows installer is currently unsigned, so SmartScreen may appear on first launch.
• Linux AppImage updates are currently manual.

Added

• Added in-app updates for Windows x64, including checking, downloading, and installing new versions directly in the app.
• Windows updates work without a code-signing certificate and use a full NSIS installer instead of a Web Installer.

Security and reliability

• Update packages are verified against GitHub Release metadata and SHA-512 checksums before installation.
• Strengthened Windows update configuration checks so unsigned builds do not include an invalid publisherName.
• CI now verifies installer, update metadata, and blockmap consistency. macOS continues to enforce code signing, Apple notarization, and artifact integrity checks.

Fixed

• Model request failures now appear directly in the conversation instead of silently rendering an empty assistant reply. Provider details such as an invalid API key are preserved, with an actionable fallback when no details are returned.
• Failed assistant messages remain visible after session grouping and reloads, while harmless empty responses stay hidden.
• Added regression coverage for provider failures, missing error details, and valid empty assistant messages.

Changed

• Pushes to main now run tests and the full quality gate without packaging temporary installers.
• Pull Requests and manually triggered workflows continue to provide temporary build artifacts.
• Tagged releases now add the Windows x64 NSIS installer, blockmap, and update metadata alongside signed and notarized macOS artifacts.
• Strengthened release asset validation for macOS and Windows packages.
• Updated English and Chinese release documentation and ignored the local temp/ directory.

Platform notes

• macOS releases are signed and notarized. Stable in-app updates use GitHub Release metadata from the release workflow.
• The Windows installer is an official release asset but does not yet have Authenticode signing, so Windows may show Unknown Publisher or SmartScreen prompts.
• Windows in-app updates remain disabled; download and install new versions manually from GitHub Releases.

Initial release

• First production release with signed and notarized DMG / ZIP packages for macOS Apple Silicon (arm64) and Intel (x64).
• Included the complete Agent workspace: session management, project files, model and extension settings, WeChat / Telegram / Feishu channels, tray and notifications, crash recovery, and diagnostic export.