Changelog

This release fully integrates Herdr v0.8.2 / protocol 20: Pi can manage local Agent fleets from the original conversation while users observe, troubleshoot, or take over through title-bar status and a right-side terminal.

Conversational Herdr control and Fleet UI

• Twenty-four semantic herdr_* tools cover Fleet queries, workspace / tab / pane management, Agent launch and prompting, state explanation, process diagnostics, key input, and output waits.
• The main conversation controls Herdr Agents directly. Title-bar Fleet status is grouped by workspace, tab, pane, and Agent on both the start screen and active sessions.
• A right-side xterm.js Herdr terminal adds ANSI output, auto-fit sizing, read-only observation, explicit keyboard takeover, input throttling, reconnection, and bounded buffering. Closing the view does not close the pane or Agent.
• Attach connects to a user-started Herdr server. Managed lets Pi Desktop start, monitor, restart within limits, and stop its private server when disabled, switched, uninstalled, or exited.
• macOS and Linux packages bundle a digest-verified Herdr v0.8.2. Installation, update, repair, and removal live in Developer Tools, and Managed mode needs no separate runtime download.
• Supported Agent CLIs include pi, claude, codex, gemini, omp, opencode, copilot, kimi, droid, grok, and qwen.

Safety, reliability, and conversation UX

• The adapter is pinned to Herdr >=0.8.2 <0.9.0, protocol 20, and schema 1. Unknown protocols, schema drift, unsafe endpoints, oversized responses, and invalid identifiers fail closed.
• The Unix socket is checked for real-file status, current-user ownership, and permissions before every request. Prompts, pane output, waits, terminal frames, and input queues have strict limits and redaction.
• Managed controls only the Session server started by Pi Desktop and never takes over or terminates an external Herdr. Pi Sessions and Herdr Sessions remain independent.
• Closing a workspace, pane, or Agent requires local confirmation. Because Herdr v0.8.2 cannot stop only an Agent, closing one explicitly closes its pane.
• Skill invocation messages now collapse into clear user-visible commands instead of exposing or repeating Skill bodies.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.2.0-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.2.0-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.2.0.exe
• Linux x64: Pi-Agent-Desktop-0.2.0-x86_64.AppImage

Notes

• The bundled Pi Coding Agent runtime remains at 0.84.0.
• Herdr currently supports macOS arm64 / x64 and Linux x64. Other features remain available on Windows, but Herdr is unavailable there and fails closed.
• Herdr and managed processes provide lifecycle control, not a container or security sandbox. Child processes have the same local file, network, and environment access as Agent Bash.
• The Windows installer is an Unsigned Beta and may trigger Unknown Publisher or SmartScreen warnings. Linux AppImage updates remain manual.

This release adds observable, user-controlled managed background processes so the Agent can keep development servers, watchers, mock APIs, and other project tasks running under the app's lifecycle control.

Managed background processes

• New process_start, process_list, process_read, process_wait, process_write, process_stop, and process_restart tools handle long-running tasks while short commands continue to use Bash.
• The right-side Processes panel shows owner, state, readiness, redacted logs, loopback endpoints, and exit reasons, with controls for stdin, stop, force stop, restart, copy, and log export.
• Log cursors support slow-starting tasks and localhost addresses are detected automatically for workflows such as Vite, React, Storybook, Flask, Spring Boot, mock APIs, and watch builds.
• Managed localhost services work with the built-in Browser while process capability and Browser authorization remain separate.

Cross-platform safety and reliability

• macOS and Linux use POSIX process groups for full process-tree management. Windows 11 x64 uses a Rust helper and Windows Job Objects with path, version, architecture, and integrity verification.
• The feature is off by default. Enabling it validates platform support, project trust, session working-directory boundaries, owner identity, crash-reaper health, and resource policy, failing closed when requirements are not met.
• Processes are isolated by Agent session. Logs use bounded buffers, cursors, and secret redaction; stdin is not persisted, and common LAN binds require confirmation.
• A crash reaper performs bounded process-tree cleanup after Host or app failure, and an Agent cannot automatically bypass a user stop.
• The Windows release pipeline now adds reproducible Rust-helper builds, PE security checks, a CycloneDX SBOM, and packaged-artifact integrity gates.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.14-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.14-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.1.14.exe
• Linux x64: Pi-Agent-Desktop-0.1.14-x86_64.AppImage

Notes

• The bundled Pi Coding Agent runtime remains at 0.84.0.
• Managed processes support macOS, Linux, and Windows 11 x64, but not Windows ARM64, Windows Server, or 32-bit Windows. They provide lifecycle control, not a container or security sandbox.
• The Windows installer is an Unsigned Beta and may trigger Unknown Publisher or SmartScreen warnings. Linux AppImage updates remain manual.

This release adds chat font-size and conversation-width controls, and reworks @ file-reference suggestions for more complete and reliable browsing and search in large non-Git workspaces.

Chat appearance

• Settings → General → Conversation now offers Small, Standard, Large, and Extra Large chat sizes plus conversation-width controls. Changes apply immediately and persist across restarts.
• Comfortable width remains at 760px, while Expanded adapts to the window up to a maximum of 960px.
• Message, process-detail, and composer boundaries now align consistently in wide and minimum-width windows.

@ file references

• Suggestions now use on-demand browsing and managed fd search, with up to 300 results for both browsing and search so early folders cannot exhaust the quota.
• When the workspace is a user home directory, Windows AppData or macOS Library is hidden by default but remains available when explicitly typed.
• If the search tool is unavailable, times out, or fails, the app reports a clear fallback state and keeps current-directory candidates instead of hanging or returning misleading results.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.13-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.13-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.1.13.exe
• Linux x64: Pi-Agent-Desktop-0.1.13-x86_64.AppImage

Notes

• The bundled Pi Coding Agent runtime remains at 0.84.0.
• The Windows installer is an Unsigned Beta and may trigger Unknown Publisher or SmartScreen warnings. Linux AppImage updates remain manual.

This release fixes a Windows issue where project history disappeared from the session sidebar after switching between the main workspace and a linked worktree and would not return without restarting.

Windows worktree session fix

• The main workspace and linked worktrees now share Git's reported top-level path, eliminating slash mismatches between session files and Git output.
• The session sidebar and app shell use Windows-aware path comparison for separators, drive and path casing, and trailing separators.
• Repository subdirectories keep their independent project identity, and submodule semantics remain intact.
• When the sandboxed Renderer has no process global, Windows is detected through platform information exposed by preload.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.12-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.12-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.1.12.exe
• Linux x64: Pi-Agent-Desktop-0.1.12-x86_64.AppImage

Notes

• The bundled Pi Coding Agent runtime remains at 0.84.0.
• The Windows installer is an Unsigned Beta and may trigger Unknown Publisher or SmartScreen warnings. Linux AppImage updates remain manual.

This release adds an end-to-end local-file experience: attach any file in chat, recognize local paths in Markdown, and use rich system actions from file-link context menus.

Attachments and local files

• Drag and drop, paste, or use the attachment button for any file. Non-images appear as file cards, can be sent without text, and work in Steer / Follow-up queues during streaming.
• Markdown recognizes Windows, POSIX, and UNC local paths while preserving file: links. Absolute paths can be revealed in the system file manager, and repository-relative paths still open in the app.
• File-link context menus can open a file, use the default app or Open with, save a copy, copy the path or text contents, and reveal it in its folder. Windows reads real file associations.
• Attachment sends use stable snapshots, failed content merges back into the latest draft, and file references are validated as absolute paths, deduplicated, and count-limited.

Conversation experience and safety

• Thinking-block expansion state persists across session switches, new blocks inherit the latest choice, and storage is isolated by session and bounded.
• An upward wheel action or ArrowUp, PageUp, or Home immediately releases scroll following.
• Empty text segments between thinking and tool calls are filtered to prevent blank assistant bubbles.
• Main resolves real paths, validates file type and working-directory boundaries, and limits copied file contents by size and text type.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.11-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.11-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.1.11.exe
• Linux x64: Pi-Agent-Desktop-0.1.11-x86_64.AppImage

This release adds automatic naming for new sessions: a short title is generated in the background after the first meaningful message, without blocking the normal reply and with manual names always taking priority.

Automatic session titles

• The current session model generates a title in the background and updates the sidebar in real time. The request remains separate from session history and context caches.
• Settings → General → Conversation now includes an Auto-title new sessions switch, enabled by default and fully localized in English and Chinese.
• If the model is unavailable or the request fails, a local title is used. Quotes, line breaks, and trailing punctuation are normalized, with a 40-character limit.
• A manual rename during generation is never overwritten. Slash commands, blank text, single-character messages, and image-only messages do not trigger a title.
• Working-directory and model-runtime handling are tighter, and local fallback now runs correctly after model-service initialization failures.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.10-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.10-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.1.10.exe
• Linux x64: Pi-Agent-Desktop-0.1.10-x86_64.AppImage

Notes

• The bundled Pi Coding Agent runtime remains at 0.84.0.
• The Windows installer is an Unsigned Beta and may trigger Unknown Publisher or SmartScreen warnings. Linux AppImage updates remain manual.

This release improves control in long conversations: a Scroll to bottom button appears after leaving the latest content and restores automatic following for streaming output.

Conversation scrolling

• Added a floating Scroll to bottom button with running-state feedback, English and Chinese copy, and reduced-motion support.
• The live run spacer no longer distorts the near-bottom calculation, preventing incorrect button visibility.
• Scroll magnet state persists across turns and session switches while intentional upward scrolling always disengages automatic following.
• Delayed image loads and expanded process details now update button visibility and follow state as content height changes.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.9-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.9-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.1.9.exe
• Linux x64: Pi-Agent-Desktop-0.1.9-x86_64.AppImage

This release adds Base URLs for API-key providers and concentrates on reliable model refresh, localization, consistent theming, channel permission synchronization, and desktop resilience.

Models, interface, and channels

• API-key providers can override their default endpoint with a Base URL. Model refresh now bounds both service initialization and final catalog projection with a timeout.
• Completed English and Chinese coverage for the session sidebar, app navigation, file browsing and viewing, Skills, Plugins, and Agent notifications.
• Unified themes across failure pages, Word previews, model connection status, and user-message bubbles, while bundling renderer fonts for offline use.
• An account's default tool grant synchronizes to bound sessions. Grants are Pi Session-scoped, so channel entry points sharing a session remain consistent.
• Strengthened security, performance, and failure recovery across the shared browser, desktop IPC, file access, updates, crash recovery, and long-running operation.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.8-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.8-x64.dmg
• Windows x64 (Unsigned Beta): Pi-Agent-Desktop-Unsigned-Beta-Setup-0.1.8.exe
• Linux x64: Pi-Agent-Desktop-0.1.8-x86_64.AppImage

This release streamlines model configuration and Feishu / Lark setup: control which models appear for each provider and create and connect a new bot through the official QR flow.

Model selection and localized settings

• Connected subscription and API-key providers can choose which models appear in the model selector.
• Search by model name or ID, enable models individually, enable or disable every model for a provider, and see the enabled count.
• Selections persist to Pi settings, remain compatible with existing thinking-level configuration, and do not change the model currently used by an existing session.
• The app prevents saving a configuration with no valid models so the selector cannot become unusable.
• Provider, sign-in, connection test, custom model, context window, cost, and thinking-level settings are now fully localized in Chinese.

Create a Feishu / Lark bot by QR code

• Added a recommended Scan to create flow for Feishu China or Lark using the official authorization process.
• Authorization configures the required message, resource, card, event, and bot-menu permissions, stores credentials, verifies the bot identity, and starts the connection.
• The App Secret is handled only inside the Agent Host and stored with operating-system encryption; it never enters the UI.
• Only the scanning user can send direct messages by default. Groups, commands, and Agent tools remain off until explicitly enabled.
• Existing custom apps can still connect with an App ID and App Secret.

Security and validation

• Strengthened channel credential storage, reload coverage, plaintext-leak checks, and error redaction.
• Added Feishu QR registration and channel login lifecycle tests, plus stronger cross-platform package validation and Windows native clipboard runtime checks.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.7-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.7-x64.dmg
• Windows x64: Pi-Agent-Desktop-Setup-0.1.7.exe
• Linux x64: Pi-Agent-Desktop-0.1.7-x86_64.AppImage

Notes

• The bundled Pi Coding Agent runtime remains at 0.84.0.
• The Windows installer remains unsigned and may trigger SmartScreen; Linux AppImage updates remain manual.

This release upgrades the bundled Pi Coding Agent to 0.84.0 and focuses on content rendering, the model directory, credential synchronization, and reliable Skill installation.

Pi 0.84 and content rendering

• Upgraded Pi Coding Agent and its related runtime to 0.84.0, with matching OAuth, model, and extension API adaptations.
• Agent responses now render Mermaid diagrams and LaTeX formulas with KaTeX.
• Markdown files gain improved syntax highlighting, Mermaid, and KaTeX rendering.

Models and authentication

• Sessions start from the locally cached model directory, with an explicit remote refresh action in the model selector.
• Model refresh supports timeouts, cancellation, offline state, and partial-provider warnings while preserving cached models after a failure.
• Saving or deleting an API key and signing in or out through OAuth now synchronize model state with the Agent Host and surface a clear warning if synchronization fails.

Skill installation and reliability

• Normal installs retain npm's default concurrency and cache. Network, timeout, or cache-lock failures trigger one retry with a temporary isolated cache.
• Improved installation timeout messages, extension diagnostics, and sensitive-data filtering in errors.
• Fixed Linux ASAR dependency conflicts, Windows ASAR path verification, and macOS Intel build validation, with stronger production-package checks.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.6-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.6-x64.dmg
• Windows x64: Pi-Agent-Desktop-Setup-0.1.6.exe
• Linux x64: Pi-Agent-Desktop-0.1.6-x86_64.AppImage

Notes

• The Windows installer remains unsigned and may trigger SmartScreen; Linux AppImage updates remain manual.

This release improves session-list, session-switching, and long-conversation performance while preserving the complete local history and reducing repeated scanning, transfer, and rendering work.

Highlights

• Added an incremental session index that reuses unchanged metadata by file fingerprint and refreshes only sessions affected by file-watcher events.
• Opening a session now prioritizes the most recent 20 conversation turns; scroll upward or use the button to load earlier messages.
• Very large text, thinking, tool-call arguments, and images use deferred content: a recognizable preview arrives first and full content loads on demand.
• Bounded session-content and path caches improve session switching, scrolling, and responsiveness during streaming output.
• Compaction and branch summaries are collapsed by default, with new performance instrumentation, benchmarks, and pagination, cache, and index coverage.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.5-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.5-x64.dmg
• Windows x64: Pi-Agent-Desktop-Setup-0.1.5.exe
• Linux x64: Pi-Agent-Desktop-0.1.5-x86_64.AppImage

Notes

• Pagination and deferred loading do not delete or truncate the complete session history stored on your machine.
• The Windows installer remains unsigned and may trigger SmartScreen; Linux AppImage updates remain manual.

This release adds a built-in browser shared by the user and Agent, integrating real Chromium pages, browser authorization, and network policy into the desktop workspace.

Built-in browser

• Open real pages in a Main-owned WebContentsView on the right side of the workspace, with multiple tabs, temporary or persistent profiles, login state, uploads, downloads, and proxy support.
• The Agent can navigate, read structured page snapshots, capture screenshots, click, type, and wait under separate Browser read / interact grants. Coding permission does not implicitly grant browser access.
• The user and Agent operate the same page and the user can take over at any time. Submissions, uploads, downloads, permission prompts, and external protocols still pass through local policy or confirmation.
• Settings manage global and session-specific browser permissions. Advanced browser mode combines trusted input, network inspection, and confirmed write-request replay.
• Remote pages run inside a sandboxed Browser View without the application preload, Node.js, or the main Renderer bridge.

Downloads

• macOS Apple Silicon: Pi-Agent-Desktop-0.1.4-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.4-x64.dmg
• Windows x64: Pi-Agent-Desktop-Setup-0.1.4.exe
• Linux x64: Pi-Agent-Desktop-0.1.4-x86_64.AppImage

This release introduces cross-platform developer tool management and an official Linux package, giving Skills, Plugins, and Agent scripts a more consistent runtime across different machines.

Highlights

• Added a unified Developer Tools setting, grouped into JavaScript, Python, and CLI essentials with a tool list and detailed status, source, and version information.
• Discovers and verifies installed Node.js, npm / npx, Python, uv / uvx, Git / Bash, Bun, jq, and other tools, including incomplete PATH environments when macOS launches from Finder and common Windows installation locations.
• With confirmation, Pi Desktop can install private copies of Node.js LTS, CPython, uv, PortableGit, Bun, and jq without modifying the system PATH, shell configuration, or registry.
• Bundles and verifies platform-specific ripgrep and fd builds for stable, high-performance file search.
• Skills and Plugins now use resolved absolute Node / npm paths. Plugin npm operations run in an isolated Worker and return structured installation guidance when tools are missing.
• Added download, install, repair, remove, cancel, cache inspection, and diagnostic actions, with stronger redirect allowlists, checksum verification, launch validation, rollback, and log redaction.
• Updated the English and Chinese README files and application screenshots.

Platforms and downloads

• Added the official Linux x64 AppImage and included it with macOS Apple Silicon / Intel and Windows x64 in full CI, artifact launch E2E, and release validation.
• macOS Apple Silicon: Pi-Agent-Desktop-0.1.3-arm64.dmg
• macOS Intel: Pi-Agent-Desktop-0.1.3-x64.dmg
• Windows x64: Pi-Agent-Desktop-Setup-0.1.3.exe
• Linux x64: Pi-Agent-Desktop-0.1.3-x86_64.AppImage

Notes

• Private tools are installed on demand only after confirmation and remain inside the Pi Agent Desktop application data directory.
• The Windows installer is currently unsigned, so SmartScreen may appear on first launch.
• Linux AppImage updates are currently manual.

Added

• Added in-app updates for Windows x64, including checking, downloading, and installing new versions directly in the app.
• Windows updates work without a code-signing certificate and use a full NSIS installer instead of a Web Installer.

Security and reliability

• Update packages are verified against GitHub Release metadata and SHA-512 checksums before installation.
• Strengthened Windows update configuration checks so unsigned builds do not include an invalid publisherName.
• CI now verifies installer, update metadata, and blockmap consistency. macOS continues to enforce code signing, Apple notarization, and artifact integrity checks.

Fixed

• Model request failures now appear directly in the conversation instead of silently rendering an empty assistant reply. Provider details such as an invalid API key are preserved, with an actionable fallback when no details are returned.
• Failed assistant messages remain visible after session grouping and reloads, while harmless empty responses stay hidden.
• Added regression coverage for provider failures, missing error details, and valid empty assistant messages.

Changed

• Pushes to main now run tests and the full quality gate without packaging temporary installers.
• Pull Requests and manually triggered workflows continue to provide temporary build artifacts.
• Tagged releases now add the Windows x64 NSIS installer, blockmap, and update metadata alongside signed and notarized macOS artifacts.
• Strengthened release asset validation for macOS and Windows packages.
• Updated English and Chinese release documentation and ignored the local temp/ directory.

Platform notes

• macOS releases are signed and notarized. Stable in-app updates use GitHub Release metadata from the release workflow.
• The Windows installer is an official release asset but does not yet have Authenticode signing, so Windows may show Unknown Publisher or SmartScreen prompts.
• Windows in-app updates remain disabled; download and install new versions manually from GitHub Releases.

Initial release

• First production release with signed and notarized DMG / ZIP packages for macOS Apple Silicon (arm64) and Intel (x64).
• Included the complete Agent workspace: session management, project files, model and extension settings, WeChat / Telegram / Feishu channels, tray and notifications, crash recovery, and diagnostic export.