2026.6.13

Downloads

• macOS Apple Silicon
• macOS Intel
• Windows

App Update Notice

PawWork 2026.6.13 makes sidebar navigation more forgiving when a click includes a little hand movement, and gives custom skills a clear update-safe home that can be opened directly from the Skills surface.

Highlights

• Sidebar session clicks are no longer swallowed by tiny pointer movement: Session rows now use a small movement threshold before drag starts, so a normal click with slight hand jitter still navigates to the session instead of being misread as a drag. This also reduces accidental rename dialogs caused by repeated clicks after the first click was suppressed (#1481).
• Custom skills now have a visible update-safe folder: The Skills surface adds a desktop-only Open folder action that creates and opens ~/.agents/skills, the user skills directory already scanned by skill discovery. This steers users away from the app install bundle's resources/skills folder, which can be replaced by desktop updates, especially on Windows (#1482).

Runtime And Maintenance

• Release metadata: the desktop package version and lockfile entry were bumped to 2026.6.13 (#1483).

Verification

This release was pinned to commit 456ca9d89144d65419d56483fa1e89c5ffe08664 and went through release PR CI, post-merge dev checks, signed and notarized macOS Apple Silicon and Intel builds, the Windows x64 build, release asset and updater metadata checks, post-publish release verification, R2 mirror verification, and a fresh packaged startup smoke from the published R2 arm64 DMG. Release workflow runs: macOS Apple Silicon submit 28384093985, macOS Apple Silicon finalize 28384505855, macOS Intel submit 28384098106, macOS Intel finalize 28385125435, Windows x64 full 28384101891, R2 mirror 28385614305.

中文版本

下载

• macOS Apple Silicon
• macOS Intel
• Windows

主要更新

PawWork 2026.6.13 让侧边栏导航更宽容：点击时如果手轻微抖动，不再被误判为拖拽。同时为自定义技能提供了一个醒目且不受更新覆盖的主目录，可以直接从技能界面打开。

亮点

• 侧边栏会话点击不再因指针微动被吞掉：会话行现在在拖拽开始前设定了小幅移动阈值，正常点击时即使手有点抖动，也能正确导航到对应会话，不再被误读为拖拽。这也减少了因第一次点击被抑制后重复点击而意外弹出重命名对话框的情况 (#1481)。
• 自定义技能现在有了可见且不受更新覆盖的文件夹：技能界面新增了一个仅桌面端显示的「打开文件夹」操作，会创建并打开 ~/.agents/skills，这是技能发现机制本来就扫描的用户技能目录。这样可以引导用户避开应用安装包里的 resources/skills 文件夹，后者可能被桌面端更新替换，尤其在 Windows 上 (#1482)。

运行时与维护

• 发布元数据：桌面端包版本和 lockfile 条目已更新到 2026.6.13 (#1483)。

验证

此版本锁定在 commit 456ca9d89144d65419d56483fa1e89c5ffe08664，并经过发布 PR CI、合并后 dev 分支检查、已签名公证的 macOS Apple Silicon 和 Intel 构建、Windows x64 构建、发布资产和更新器元数据检查、发布后版本验证、R2 镜像验证，以及从已发布 R2 arm64 DMG 进行的全新打包启动 smoke。发布工作流运行：macOS Apple Silicon 提交 28384093985，macOS Apple Silicon 收尾 28384505855，macOS Intel 提交 28384098106，macOS Intel 收尾 28385125435，Windows x64 完整 28384101891，R2 镜像 28385614305。

2026.6.12

Downloads

• macOS Apple Silicon
• macOS Intel
• Windows

App Update Notice

PawWork 2026.6.12 focuses on making provider failures understandable, diagnostics packages safer to review and easier for agents to read, model lists easier to refresh for OpenAI-compatible providers, and the question dock quieter while work is blocked on user input.

Highlights

• Provider failures now explain what actually happened instead of collapsing into a generic connection error: Billing, quota, authentication, DNS, and provider API rejections are classified more carefully; permanent DNS failures stop retrying; provider API rejections keep their terminal cause and message; structured provider payloads are decoded; and the app renders localized error cards with the provider's reason when available (#1466, #1467, #1468, #1469, #1473).
• Diagnostics packages are safer to share and easier to inspect: Problem reports redact secrets, structure session export data, apply per-component byte budgets, require user review before export, and now write agent-readable JSON with sections such as meta, environment, error, recentErrors, session, rendererDiagnostics, logTail, and reportVersion: 2 (#1470, #1471, #1472, #1475).
• OpenAI-compatible provider Settings can fetch live models: The new Fetch models action calls the provider's /models endpoint, adds missing live models to the visible catalog, and leaves newly discovered models hidden by default so users stay in control (#1474).
• The question dock is now one compact folded card: The old stacked bars that looked like minimize controls are gone, and multi-question progress is shown as clear text such as 1 of 2 questions (#1476).

Runtime And Maintenance

• Release metadata: the desktop package version and lockfile entry were bumped to 2026.6.12 (#1477).

Verification

This release was pinned to commit ec38c861f588e716c337a8ff903a025fe2ac5612 and went through release PR CI, post-merge dev checks, signed and notarized macOS Apple Silicon and Intel builds, the Windows x64 build, release asset and updater metadata checks, post-publish release verification, R2 mirror verification, and a fresh packaged startup smoke from the published R2 arm64 DMG.

中文版本

下载

• macOS Apple Silicon
• macOS Intel
• Windows

主要更新

PawWork 2026.6.12 重点改善了服务商连接失败的可读性、诊断包的安全性，新增了 OpenAI 兼容服务商的在线模型拉取功能，并简化了等待用户输入时的提问栏展示。

亮点

• 服务商连接失败现在会说明实际原因，不再笼统显示为通用连接错误：计费、配额、鉴权、DNS 以及服务商 API 拒绝这几类情况做了更细的分类；永久性 DNS 失败不再重复重试；服务商 API 拒绝会保留其终结原因和消息；结构化的服务商返回数据会被正确解析；应用在有可用原因时会展示本地化的错误卡片，包含中文引导文案和可展开查看的服务商原始原因（#1466、#1467、#1468、#1469、#1473）。
• 诊断包分享更安全、内容更容易查阅：问题报告会脱敏密钥，结构化导出会话数据，按组件设定字节上限以确保各部分均衡，导出前需要用户明确确认后才生成和分享；报告格式改为 agent 可读的 JSON，包含 meta、environment、error、recentErrors、session、rendererDiagnostics、logTail 等字段，reportVersion 为 2（#1470、#1471、#1472、#1475）。
• OpenAI 兼容服务商的设置页面支持拉取在线模型列表：新增的「拉取模型」操作会调用服务商的 /models 接口，将本地缺失的模型补充到可见列表中，新发现的模型默认隐藏，由用户自行决定是否启用（#1474）。
• 提问栏改为一张紧凑的折叠卡片：旧版类似最小化控件的堆叠横条已去掉，改为与权限卡片一致的折叠卡片样式；多问进度以清晰文字显示，例如 1 of 2 questions，单问时不显示（#1476）。

运行时与维护

• 发布元数据：桌面包版本号和 lockfile 条目已更新至 2026.6.12（#1477）。

验证

本版本基于 commit ec38c861f588e716c337a8ff903a025fe2ac5612，通过了发布 PR CI、合并后 dev 分支检查、macOS Apple Silicon 和 Intel 的签名公证构建、Windows x64 构建、发布资产与更新器元数据校验、发布后验证、R2 镜像验证，以及从已发布 R2 arm64 DMG 进行的全新打包启动 smoke。

2026.6.11

Downloads

• macOS Apple Silicon
• macOS Intel
• Windows

App Update Notice

PawWork 2026.6.11 supersedes 2026.6.10 with a Settings hotfix for the real packaged-app regression reported in #1460. 2026.6.10 still opened Settings through retired WebSearch, LSP, and ToolRegistry IPC Promise facades, so the Settings page could hit WebSearchAuth.status is not a function and fall into the error boundary. This release routes those IPC handlers through the Effect services that the migration now owns, and also includes the already-merged remote bridge lifecycle fix that stops one channel connect or disconnect from restarting every other channel.

Highlights

• Settings opens again after the Effect migration: Settings, Web Search key management, LSP enablement, and Web Search enablement now call WebSearchAuth.Service, LSP.Service, and ToolRegistry.Service through AppRuntime instead of the removed top-level Promise facades. The virtual IPC module types were also corrected so a future dead-facade call becomes a typecheck failure instead of a packaged-app surprise (#1461).
• The remote companion bridge no longer restarts every channel for one channel change: Connecting or disconnecting a single remote channel now starts or stops only that platform. The shared event stream, session pointers, and in-flight routing for unaffected channels stay online, and the temporary UI flap suppression from the previous WeChat QR work is no longer needed (#1454).

Runtime And Maintenance

• Release metadata: the desktop package version and lockfile entry were bumped to 2026.6.11 so users can install the Settings IPC regression fix from #1461 (#1462).
• Compatibility boundary: this release does not claim the broader Effect migration is finished. It ships the smallest production hotfix for the live Settings regression while keeping the remaining migration work honest and ongoing (#1461, #1462).

Verification

This release went through the full desktop release path pinned to commit f4334118ef09c431c8a9d5539426757e8a5ed5d4: focused Settings IPC regression checks before release, release PR CI, post-merge dev checks, signed and notarized macOS Apple Silicon and Intel builds, the Windows x64 build, release asset and updater metadata checks, post-publish release verification, R2 mirror verification, and a fresh packaged startup smoke from the published R2 arm64 DMG.

中文版本

下载

• macOS Apple Silicon
• macOS Intel
• Windows

主要更新

PawWork 2026.6.11 替代 2026.6.10，修复了 #1460 报告的打包应用 Settings 回归问题。2026.6.10 仍通过已退役的 WebSearch、LSP 和 ToolRegistry IPC Promise facade 打开 Settings，导致 Settings 页面可能触发 WebSearchAuth.status is not a function 并落入错误边界。本版本将这些 IPC handler 路由到迁移后所属的 Effect service，同时包含已合并的 remote bridge 生命周期修复，使单个 channel 的连接或断开不再重启所有其他 channel。

亮点

• Effect 迁移后 Settings 恢复正常：Settings、Web Search 密钥管理、LSP 开关和 Web Search 开关现在通过 AppRuntime 调用 WebSearchAuth.Service、LSP.Service 和 ToolRegistry.Service，不再使用已移除的顶层 Promise facade。同时修正了虚拟 IPC 模块类型，使未来对已失效 facade 的调用会在 typecheck 阶段报错，而非在打包应用中意外暴露（#1461）。
• Remote companion bridge 不再因单个 channel 变动而重启所有 channel：连接或断开单个 remote channel 现在仅启动或停止对应平台。未受影响的 channel 的共享事件流、session 指针和传输中路由保持在线，此前为 WeChat QR 功能临时添加的 UI 抖动抑制也不再需要（#1454）。

运行时与维护

• 发布元数据：桌面包版本和 lockfile 条目已升至 2026.6.11，用户可通过此版本获取 #1461 的 Settings IPC 回归修复（#1462）。
• 兼容边界：本版本不声明 Effect 迁移已全面完成。它仅交付针对 Settings 线上回归的最小生产修复，同时保持剩余迁移工作如实进行中（#1461、#1462）。

验证

本次发布锁定 commit f4334118ef09c431c8a9d5539426757e8a5ed5d4，并走完完整桌面发布流程：发布前针对 Settings IPC 回归的聚焦检查、发布 PR CI、合并后的 dev 检查、签名并公证的 macOS Apple Silicon 和 Intel 构建、Windows x64 构建、发布产物和更新元数据校验、发布后的 release 验证、R2 镜像验证，以及从已发布 R2 arm64 DMG 进行的全新打包版启动 smoke。

2026.6.10

Downloads

• macOS Apple Silicon
• macOS Intel
• Windows

App Update Notice

PawWork 2026.6.10 supersedes 2026.6.9 with a packaged-app settings IPC fix found during release smoke. It also brings the mobile companion foundation forward with Telegram, multi-channel sidebar plumbing, and one-step WeChat QR pairing; improves session context, recovery markers, dock badges, and running-task input handling; and lands a large backend cleanup wave that moves production routes, special HTTP surfaces, and Promise facades onto Effect/HttpApi boundaries. The release also clears undici advisories, fixes Node-runtime Bun global usage, and keeps Windows/CI release gates steadier.

Highlights

• Mobile companion work now spans Telegram, the sidebar, and WeChat QR pairing: PawWork gained the Telegram-first mobile companion foundation, then added the multi-channel bridge and sidebar surface, and finally added a WeChat iLink adapter with one-step QR pairing. Together these PRs move remote companion access from a single bridge experiment toward a visible, multi-channel desktop workflow (#1339, #1390, #1404).
• Conversation context and recovery cues are clearer: The session context panel was redesigned, dock badge question sources were split so the app badge no longer drifts from sidebar state, safe-recovery failure and pre-progress turn status now explain what happened more clearly, ready question markers render in the timeline, and pressing Enter on an empty composer no longer interrupts a running task (#1357, #1359, #1366, #1406, #1440).
• Automation and tool output paths are more reliable: Automation runs now stay alive while monitoring waits route correctly, and edit/write success output includes paths and line counts so models and users can tell what changed without guessing (#1372, #1377).
• The backend migration made a major Effect/HttpApi step: This release adds HttpApi coverage for provider, config, MCP, permission/workspace, small routes, experimental, root/global, PTY/control, session, automation, and upstream backend routes; isolates special HTTP production surfaces; moves websocket compatibility behind adapter boundaries; and retires many legacy Hono route sources and Promise facades across auth, session, config, provider, project, worktree, LSP, PTY, MCP, tool registry, permission, snapshot, plugin, skill, automation, bus, UI static, and root instance paths (#1361, #1362, #1363, #1364, #1365, #1367, #1369, #1370, #1371, #1373, #1375, #1376, #1378, #1380, #1382, #1383, #1384, #1385, #1386, #1387, #1391, #1392, #1393, #1394, #1396, #1397, #1398, #1399, #1401, #1402, #1403, #1405, #1407, #1408, #1409, #1410, #1411, #1413, #1415, #1416, #1417, #1418, #1419, #1420, #1421, #1422, #1423, #1424, #1425, #1427, #1428, #1429, #1430, #1431, #1432, #1433, #1434, #1435, #1436, #1437, #1438, #1439, #1441, #1442, #1443, #1444, #1445, #1446, #1447, #1448, #1449, #1450, #1451, #1452, #1453, #1455, #1456).
• Release smoke caught and fixed a real packaged-app regression: 2026.6.9 was built and published, but the packaged startup smoke exposed repeated lsp-set-enabled and websearch-set-enabled handler errors because desktop IPC still called retired Settings facades. PR #1458 routes those settings through Settings.Service via AppRuntime, and 2026.6.10 is the verified fixed build (#1457, #1458, #1459).

Runtime And Maintenance

• Dependency and runtime safety: undici advisories were cleared in two dependency passes, stale Bun globals were removed from Node runtime paths, and edit/write success output now carries clearer path and line-count metadata (#1372, #1374, #1395, #1412).
• CI stability: e2e install-deps avoids apt timeouts, the connect-timeout retry test was stabilized, and Windows advisory coverage was split so server-tool shards fit the CI budget (#1360, #1381, #1388, #1389).
• Release metadata: Desktop versions were bumped to 2026.6.9 and then 2026.6.10; 2026.6.10 is the release users should install because it contains the packaged settings IPC hotfix (#1457, #1459).

Verification

This release went through the full desktop release path pinned to commit 7348257df214618a4c05502fb03a47a13ed80605: release PR CI, post-merge dev checks, signed and notarized macOS Apple Silicon and Intel builds, the Windows x64 build, release asset and updater metadata checks, post-publish release verification, R2 mirror verification, and a fresh packaged startup smoke from the published R2 arm64 DMG.

中文版本

下载

• macOS Apple Silicon
• macOS Intel
• Windows

主要更新

PawWork 2026.6.10 取代 2026.6.9，修复了发布冒烟时发现的打包版 settings IPC 问题。此版本还将移动端伴侣能力向前推进了一步：接入了 Telegram、多通道侧边栏通道，以及一步扫码配对的微信 iLink；同时改进了会话上下文、恢复标记、Dock 角标和运行中任务的输入处理；并完成了一轮大规模后端清理，将生产路由、特殊 HTTP 表面和 Promise 门面迁移到了 Effect/HttpApi 边界上。此外，本版本清除了 undici 安全通告，修复了 Node 运行时中的 Bun 全局变量使用问题，并让 Windows/CI 发布门控更加稳定。

亮点

• 移动端伴侣能力现已覆盖 Telegram、侧边栏和微信扫码配对：PawWork 先后落地了 Telegram 优先的移动端伴侣基础、多通道桥接与侧边栏表面，最后加入了微信 iLink 适配器并支持一步扫码配对。这些 PR 将远程伴侣接入从单一桥接实验推进为可见的多通道桌面工作流（#1339、#1390、#1404）。
• 会话上下文和恢复提示更加清晰：重新设计了会话上下文面板，拆分了 Dock 角标的提问来源，使应用角标不再与侧边栏状态偏离；安全恢复失败和进度前的轮次状态现在能更清楚地说明发生了什么；已就绪的问题标记会显示在时间线中；在空输入框中按 Enter 不再中断正在运行的任务（#1357、#1359、#1366、#1406、#1440）。
• 自动化和工具输出路径更加可靠：自动化运行现在能在监控等待正确路由期间保持存活，edit/write 成功输出包含路径和行数，使模型和用户无需猜测即可了解变更内容（#1372、#1377）。
• 后端迁移在 Effect/HttpApi 方面迈出了重要一步：此版本为 provider、config、MCP、permission/workspace、小型路由、experimental、root/global、PTY/control、session、automation 以及上游后端路由增加了 HttpApi 覆盖；隔离了特殊 HTTP 生产表面；将 websocket 兼容层移到适配器边界之后；并退役了大量遗留的 Hono 路由源和 Promise 门面，涉及 auth、session、config、provider、project、worktree、LSP、PTY、MCP、tool registry、permission、snapshot、plugin、skill、automation、bus、UI static 和 root instance 路径（#1361、#1362、#1363、#1364、#1365、#1367、#1369、#1370、#1371、#1373、#1375、#1376、#1378、#1380、#1382、#1383、#1384、#1385、#1386、#1387、#1391、#1392、#1393、#1394、#1396、#1397、#1398、#1399、#1401、#1402、#1403、#1405、#1407、#1408、#1409、#1410、#1411、#1413、#1415、#1416、#1417、#1418、#1419、#1420、#1421、#1422、#1423、#1424、#1425、#1427、#1428、#1429、#1430、#1431、#1432、#1433、#1434、#1435、#1436、#1437、#1438、#1439、#1441、#1442、#1443、#1444、#1445、#1446、#1447、#1448、#1449、#1450、#1451、#1452、#1453、#1455、#1456）。
• 发布冒烟捕获并修复了一个真实的打包版回归：2026.6.9 已构建并发布，但打包版启动冒烟暴露了重复的 lsp-set-enabled 和 websearch-set-enabled handler 错误，原因是桌面 IPC 仍在调用已退役的 Settings 门面。PR #1458 通过 AppRuntime 将这些设置路由到 Settings.Service，2026.6.10 是已验证的修复构建（#1457、#1458、#1459）。

运行时与维护

• 依赖与运行时安全：通过两轮依赖更新清除了 undici 安全通告，从 Node 运行时路径中移除了陈旧的 Bun 全局变量，edit/write 成功输出现在携带更清晰的路径和行数元数据（#1372、#1374、#1395、#1412）。
• CI 稳定性：e2e install-deps 避免了 apt 超时，connect-timeout 重试测试得到了稳定，Windows 安全通告覆盖按 server-tool 分片拆分以适配 CI 预算（#1360、#1381、#1388、#1389）。
• 发布元数据：桌面版本号先后升级至 2026.6.9 和 2026.6.10；用户应安装 2026.6.10，因为它包含了打包版 settings IPC 热修复（#1457、#1459）。

验证

本次发布锁定 commit 7348257df214618a4c05502fb03a47a13ed80605，并走完完整桌面发布流程：发布 PR CI、合并后的 dev 检查、签名并公证的 macOS Apple Silicon 和 Intel 构建、Windows x64 构建、发布产物和更新元数据校验、发布后的 release 验证、R2 镜像验证，以及从已发布 R2 arm64 DMG 进行的全新打包版启动 smoke。

2026.6.9

chore(release): bump desktop version to 2026.6.9

Bump the desktop package release version to 2026.6.9 and sync the workspace lockfile entry.\n\nVerification:\n- bun install --frozen-lockfile completed with no further changes.\n- git diff --check passed.\n- PR CI passed, including ci, desktop-smoke, e2e-artifacts, CodeQL, dependency-review, dev-dep-audit, pr-triage, and Windows advisory.\n\nNo product behavior, dependency resolution, UI, or packaging workflow logic changed.

2026.6.8

Downloads

• macOS Apple Silicon
• macOS Intel
• Windows

App Update Notice

PawWork 2026.6.8 makes Automations manageable from conversations, improves embedded-browser fidelity for Chrome-like automation, and adds clearer risk cues when models work on high-risk sites. It also fixes model-selection inheritance, drains tool results after stream disconnects, adds jitter to 429 retries, and prevents maintenance close work from leaving new sessions stuck in thinking. The release rounds out Node/Electron install compatibility and updates the Volcengine Coding Plan model list.

Highlights

• Automations can now be managed through tools: The new deferred automate_manage tool lets models list, pause, resume, and delete existing PawWork Automations by exact id. The permission dock and tool registry were updated with the same lifecycle surface, so these operations are visible and controllable from the conversation (#1278).
• The embedded browser behaves more like real Chrome: PawWork now gives the embedded browser a faithful Chrome user-agent and reports realistic browser permission states. Chrome-default permissions such as sanitized clipboard writes, background sync, sensors, and payment handlers are handled consistently, while sensitive camera, microphone, and geolocation access remains denied rather than silently granted (#1343, #1344).
• High-risk site automation now carries clearer guardrails: Browser and OpenCLI tools can recognize high-risk sites and warn both the model and the user before automation continues. The release also records fingerprint-parity findings and keeps a local browser probe so future changes can be checked against measured browser behavior instead of guesses (#1342, #1345).
• Model and provider selection is more reliable: When a user actually picks a model, PawWork records that chosen model so later model-less sessions inherit the right choice instead of falling back unexpectedly from remote or newly-created sessions. The Volcengine Coding Plan model list also now matches the official Coding Plan catalog and ordering (#1347, #1350).
• Long-running work and disconnect recovery are steadier: Stream disconnects now continue draining already-produced tool results, so tool output is not lost. 429 retries use equal jitter to avoid parallel requests retrying in lockstep. Maintenance close, reload, and disposeAll paths no longer hold the close gate while waiting for active runs, which prevents new sessions from getting stuck behind deferred cleanup and remaining in thinking (#1252, #1349, #1351).

Runtime And Maintenance

• Node and Electron install compatibility: Unsupported Node versions now fail loudly during install with a recovery command, and Electron was upgraded for Node 24.16+ and Node 26 install compatibility so stale bad binaries do not remain in local worktrees (#1346, #1352).
• Tool and formatter maintenance: Write tools no longer carry built-in formatter integration, reducing implicit behavior in file-write paths and updating the related configuration, tests, and generated SDK surface (#1353).
• CI and release metadata: Desktop smoke workflow contract tests were updated for the install-matrix job, and the desktop release version was bumped to 2026.6.8 (#1355, #1356).

Verification

This release went through the full desktop release path pinned to commit db235b1f19431f0612a95ec3311ac9686386ff5b: signed and notarized macOS Apple Silicon submit 27735442732 and finalize 27735660157, signed and notarized macOS Intel submit 27735443637 and finalize 27736016154, the Windows x64 build 27735444571, auto-publish of v2026.6.8, and R2 mirror 27736288708. Post-publish verification passed with GH_TOKEN=$(gh auth token) bun packages/desktop-electron/scripts/verify-release.ts v2026.6.8, direct dl.pawwork.ai checks for the macOS and Windows installers plus updater metadata, and a fresh packaged startup smoke from the R2 arm64 DMG whose log was accepted by PAWWORK_RELEASE_STARTUP_LOG=... bun packages/desktop-electron/scripts/verify-release.ts v2026.6.8.

中文版本

下载

• macOS Apple Silicon
• macOS Intel
• Windows

主要更新

PawWork 2026.6.8 支持在对话中列出、暂停、恢复和删除自动化任务，让内嵌浏览器行为更贴近真实 Chrome 环境，并在高风险网站自动化时给模型和用户更明确的提醒。本次发布还修复了模型选择继承、工具结果 drain、429 重试退避，以及维护关闭期间新 session 卡在 thinking 的问题，同时更新了火山方舟 Coding Plan 模型列表，并增强了 Node/Electron 安装兼容性。

亮点

• 自动化任务现在可以通过工具管理：新增的 automate_manage 延迟工具让模型可以按精确 id 列出、暂停、恢复和删除已有 PawWork Automations。权限 dock 和工具注册也同步更新，使这类生命周期操作在对话中更可见、更可控（#1278）。
• 内嵌浏览器更接近真实 Chrome 行为：PawWork 现在会为内嵌浏览器提供更忠实的 Chrome user-agent，并按真实浏览器的默认值报告权限状态。剪贴板安全写入、后台同步、传感器和支付处理等 Chrome 新默认允许的权限会被一致处理，而摄像头、麦克风和地理位置等敏感权限仍保持拒绝，避免内容查看器在用户无感知的情况下授权（#1343、#1344）。
• 高风险网站自动化有了更清楚的提醒：浏览器工具和 OpenCLI 工具现在能识别高风险站点，在模型执行相关操作时提醒风险边界，减少账号风控场景下的盲操作。本次发布也保留了浏览器 fingerprint parity 记录和本地 probe，方便后续持续用实测数据校验内嵌浏览器行为（#1342、#1345）。
• 模型和 provider 选择更可靠：当用户实际选择了某个模型后，PawWork 会记录被选中的模型，让后续没有显式指定模型的新 session 能继承正确的选择，避免从远程入口或新会话意外回到错误的模型。火山方舟 Coding Plan 模型列表也更新到官方 Coding Plan 清单，确保 plan 模型的排序和可用性更贴近当前产品（#1347、#1350）。
• 长任务和断线恢复更稳：当流式连接断开时，PawWork 会继续 drain 已产生的 tool result，避免丢失工具输出。429 重试退避加入 equal jitter，减少并行请求在同一时间点集中重试。维护关闭、reload 或 disposeAll 等路径也不再持有 close gate 等待活跃 run 结束，从而避免新开的 session 被维护任务挡住并卡在 thinking（#1252、#1349、#1351）。

运行时与维护

• Node 和 Electron 安装兼容：不支持的 Node 版本现在会在 install 阶段明确失败并给出恢复命令，Electron 也升级到兼容 Node 24.16+ 和 Node 26 安装路径的版本，避免错误二进制长期残留在本地 worktree（#1346、#1352）。
• 工具和 formatter 维护：写入工具不再内置 formatter 集成，减少写文件路径上的隐式行为，并更新了相关配置、测试和 SDK 生成输出（#1353）。
• CI 和发布元数据：更新了 desktop smoke workflow 的 install-matrix 合同测试，并将桌面 release 版本升级到 2026.6.8（#1355、#1356）。

验证

本次发布完整走完桌面发版链路，并固定到 commit db235b1f19431f0612a95ec3311ac9686386ff5b：macOS Apple Silicon 签名和公证 submit 27735442732、finalize 27735660157，macOS Intel 签名和公证 submit 27735443637、finalize 27736016154，Windows x64 构建 27735444571，v2026.6.8 自动发布，以及 R2 镜像 27736288708。发布后验证包括 GH_TOKEN=$(gh auth token) bun packages/desktop-electron/scripts/verify-release.ts v2026.6.8 通过、直接请求 dl.pawwork.ai 上的 macOS 和 Windows 安装包及 updater metadata 通过，以及从 R2 arm64 DMG 重新下载并启动打包应用；该 startup smoke 的日志也通过了 PAWWORK_RELEASE_STARTUP_LOG=... bun packages/desktop-electron/scripts/verify-release.ts v2026.6.8 校验。

2026.6.7

Downloads

• macOS Apple Silicon
• macOS Intel
• Windows

App Update Notice

PawWork 2026.6.7 smooths conversation switching and Windows chrome, makes website automation route to OpenCLI adapters first, fixes persistent permission grants, and lands the remote companion bridge foundation in the desktop runtime. It also advances the backend Effect/service migration across tools and routes, clears high dependency advisories, and includes release-blocker fixes for Windows remote bridge state writes.

Highlights

• Conversation switching and desktop chrome feel steadier: Session route changes now recover timeline scroll drift through the reconciler frame queue and avoid forcing stale message refreshes during the switch window, reducing renderer jank after normal transitions. Windows also shares the unified titlebar treatment with macOS, including a continuous sidebar divider and quieter toolbar chrome (#1279, #1283).
• Website automation prefers OpenCLI adapters before manual browser control: Resident routing now asks models to discover and run OpenCLI site adapters first for supported website tasks, falling back to the browser only when no adapter matches or a recoverable adapter error occurs. The bundled OpenCLI runtime also moves to 1.8.4, adding the upstream Xiaohongshu ask adapter without a local overlay (#1280, #1315).
• OpenCLI and browser permissions are easier to trust: OpenCLI web tools now inherit the same default-allow baseline as browser tools and file edits, "always allow" replies persist across restarts, and OpenCLI visibility is gated by opencli_read / opencli_write instead of the browser permission key (#1330, #1331, #1332).
• Remote companion bridge foundation is ready for desktop integration: The first bridge slice added a standalone chat companion bridge, then the follow-up replaced the Go module with a TypeScript port that runs natively in Node/Electron while preserving session pointer, SSE cursor, hydration, event dispatch, and delivery-ordering semantics. The release also fixes same-process Windows state-file writes by serializing normalized session pointer paths, unblocking the Windows release build (#1275, #1336, #1340).
• Backend tools and routes keep moving onto Effect services: This release names tool execute boundaries, migrates focused tool harnesses, adds Sync and Workspace service seams, and routes provider, PTY, MCP, workspace, session, and experimental handlers through the app runtime or Effect services. The change is mostly internal, but it makes the backend easier to test, trace, and continue migrating without changing user-facing tool behavior (#1282, #1284, #1285, #1286, #1287, #1288, #1289, #1290, #1291, #1292, #1293, #1294, #1295, #1296, #1297, #1298, #1299, #1300, #1301, #1302, #1303, #1304, #1305, #1306, #1307, #1308, #1309, #1310, #1311, #1312, #1313, #1314, #1316, #1317, #1318, #1319, #1320, #1321, #1322, #1324, #1325, #1326, #1327, #1328).

Runtime And Maintenance

• Dependency and audit fixes: Patched high advisories across esbuild, Vite, ws, form-data, and Hono, including root overrides where transitive consumers still resolved vulnerable versions (#1281, #1335, #1341).
• Release metadata and notices: Updated the bundled OpenCLI third-party notice for version 1.8.4 and bumped the desktop release version to 2026.6.7 (#1337, #1338).
• Remote bridge CI routing: packages/remote-bridge/** changes now receive the harness routing label so release-blocker PRs satisfy triage before merge (#1340).

Verification

This release went through the full desktop release path: release PR CI; signed and notarized macOS Apple Silicon (submit 27633264172, finalize 27634169322) and Intel (submit 27633274907, finalize 27634179423) builds; the Windows x64 build (27634844713); release asset and updater metadata checks; auto-publish pinning v2026.6.7 to commit 2b5f1bccde44dee93d33f4fa014b72435f285a35; R2 mirror (27635301706) confirming dl.pawwork.ai serves the 2026.6.7 installers; and post-publish bun packages/desktop-electron/scripts/verify-release.ts v2026.6.7 checks, including a fresh packaged startup smoke from the R2 arm64 DMG. The startup verifier used the packaged app stdout log because the DMG-launched smoke wrote the startup lines there instead of logs/main.log.

中文版本

下载

• macOS Apple Silicon
• macOS Intel
• Windows

主要更新

PawWork 2026.6.7 优化了对话切换和 Windows 窗口 chrome 的平滑度，让网站自动化优先走 OpenCLI adapter 路由，修复了持久化权限授权问题，并在桌面 runtime 中落地了 remote companion bridge 的基础设施。同时持续推进后端 Effect/service 迁移，覆盖工具和路由，清理了高危依赖告警，并包含 Windows remote bridge 状态文件写入的发版阻塞修复。

亮点

• 对话切换和桌面 chrome 更稳定：Session 路由切换现在通过 reconciler 帧队列来恢复时间线滚动偏移，避免在切换窗口期间触发多余的强制消息刷新，减少正常切换后的渲染卡顿。Windows 也统一了与 macOS 相同的 titlebar 处理，包括连续的侧边栏分割线和更克制的工具栏 chrome（#1279、#1283）。
• 网站自动化优先使用 OpenCLI adapter，再回退到手动浏览器控制：Resident 路由现在要求模型先发现并运行 OpenCLI 站点 adapter 来处理支持的网站任务，仅在没有匹配的 adapter 或 adapter 遇到可恢复错误时才回退到浏览器。内置的 OpenCLI runtime 也升级到 1.8.4，加入了上游小红书 ask adapter，不再需要本地 overlay（#1280、#1315）。
• OpenCLI 和浏览器权限更可信：OpenCLI web 工具现在与浏览器工具和文件编辑使用相同的默认允许基线，"始终允许"的回复在重启后仍然有效，OpenCLI 的可见性由 opencli_read / opencli_write 控制，而不是浏览器权限 key（#1330、#1331、#1332）。
• Remote companion bridge 基础设施已就绪，等待桌面集成：Bridge 的第一个切片添加了独立的 chat companion bridge，随后的跟进用 TypeScript 移植替换了 Go 模块，在 Node/Electron 中原生运行，同时保留了 session pointer、SSE cursor、hydration、事件分发和投递顺序语义。本次发版还修复了 Windows 同进程状态文件写入问题，通过序列化标准化 session pointer 路径，解除了 Windows 发版构建的阻塞（#1275、#1336、#1340）。
• 后端工具和路由持续迁移到 Effect 服务：本次发版命名了工具执行边界，迁移了部分工具 harness，添加了 Sync 和 Workspace 服务接缝，并将 provider、PTY、MCP、workspace、session 和 experimental 处理器路由到 app runtime 或 Effect 服务中。改动主要在内部，不影响用户可见的工具行为，但让后端更易于测试、追踪和继续迁移（#1282、#1284、#1285、#1286、#1287、#1288、#1289、#1290、#1291、#1292、#1293、#1294、#1295、#1296、#1297、#1298、#1299、#1300、#1301、#1302、#1303、#1304、#1305、#1306、#1307、#1308、#1309、#1310、#1311、#1312、#1313、#1314、#1316、#1317、#1318、#1319、#1320、#1321、#1322、#1324、#1325、#1326、#1327、#1328）。

运行时与维护

• 依赖与安全审计修复：修复了 esbuild、Vite、ws、form-data 和 Hono 的高危告警，包括在传递依赖仍解析到漏洞版本时的根级别覆盖（#1281、#1335、#1341）。
• 发版元数据与声明：更新了内置 OpenCLI 第三方声明以适配 1.8.4 版本，并将桌面发版号升级到 2026.6.7（#1337、#1338）。
• Remote bridge CI 路由：packages/remote-bridge/** 的变更现在会收到 harness routing 标签，确保发版阻塞 PR 在合并前通过 triage 检查（#1340）。

验证

本次发布走完了完整的桌面发布流程：发布 PR 的 CI；签名并公证的 macOS Apple 芯片（submit 27633264172、finalize 27634169322）和 Intel（submit 27633274907、finalize 27634179423）构建；Windows x64 构建（27634844713）；发布产物和更新元数据验证；发布后自动固定 v2026.6.7 到 commit 2b5f1bccde44dee93d33f4fa014b72435f285a35；R2 镜像（27635301706）确认 dl.pawwork.ai 已分发 2026.6.7 安装包；发布后 bun packages/desktop-electron/scripts/verify-release.ts v2026.6.7 通过，包括从 R2 arm64 DMG 做 fresh packaged startup smoke。由于 DMG 启动的 smoke 将启动日志写入了打包应用的 stdout 而非 logs/main.log，startup verifier 改为读取打包应用的 stdout 日志来完成验证。

2026.6.6

Downloads

• macOS Apple Silicon
• macOS Intel
• Windows

App Update Notice

PawWork 2026.6.6 makes browser automation usable from conversations, adds bundled OpenCLI site adapters for the embedded browser, and makes Automations easier to edit and more reliable across project switches. It also speeds up initial snapshots in large repositories and keeps Windows advisory coverage stable for prompt-cancel races.

Highlights

• Browser automation can now drive a conversation-owned page: PawWork now gives each conversation its own embedded browser view and a BrowserSession that can navigate, inspect, click, type, wait, screenshot, and extract content through generic browser_* tools. Browser state belongs to the conversation, background pages keep running even when detached from a window, screenshots render inline in the tool card, and model-driven activation keeps the browser tool group lazy until it is needed (#1231).
• OpenCLI site adapters are bundled into the browser tool path: The desktop build now packages the OpenCLI runtime and exposes opencli_search / opencli_run as deferred tools. Models can discover site-specific adapter commands, then run supported adapters against the visible embedded browser page through a narrow compatibility layer. Unsupported browser-internal adapters stay blocked, so this ships the useful adapter path without exposing the whole daemon surface (#1272).
• Automations are editable and keep running across project changes: Automation detail pages now support inline edits for title, instructions, schedule, and model, while list rows expose delete, pause or resume, and run-now actions. Scheduling is now owned by a process-level scheduler that scans automation definitions globally and enters the target project only when a run fires, so scheduled work is no longer tied to whichever project is currently selected or open. Moving a fresh automation between projects updates it in place and preserves id, schedule, pause state, and run history (#1270, #1274).
• Initial snapshots are faster and less wasteful in large repositories: Snapshot initialization can now reuse the source repository object database and a validated source index before falling back to the previous full-add path. The change is best-effort: incompatible split-index or unmerged-index cases fall back safely, but large tracked repositories avoid re-hashing work Git already knows about (#1268).

Runtime And Maintenance

• Test reliability: Prompt-cancel race coverage now gives Windows enough time to reach the real race checkpoint before canceling, preserving the cancellation contract while avoiding advisory flakes caused by a one-second guard that was too tight on recent Windows runners (#1276).
• Release metadata: Bumped the desktop release version to 2026.6.6 (#1277).

Verification

This release went through the full desktop release path: release PR CI; signed and notarized macOS Apple Silicon (submit 27420905412, finalize 27421820898) and Intel (submit 27420905493, finalize 27421617662) builds; the Windows x64 build (27420905456); release asset and updater metadata checks; auto-publish pinning v2026.6.6 to commit 9af78a937ae649fca1eca7248d7ff8cfd2a3ddff; R2 mirror (27422270412) confirming dl.pawwork.ai serves the 2026.6.6 installers with GitHub fallback; and post-publish bun packages/desktop-electron/scripts/verify-release.ts v2026.6.6 checks, including a fresh packaged startup smoke from the notarized arm64 DMG.

中文版本

下载

• macOS Apple Silicon
• macOS Intel
• Windows

主要更新

PawWork 2026.6.6 让浏览器自动化可以在对话中直接使用，为内嵌浏览器内置了 OpenCLI 站点适配器，同时让自动化任务更容易编辑、在切换项目时也更稳定。此外还加快了大仓库的初始快照速度，并修复了 Windows 上 prompt 取消竞态条件下的偶发测试失败。

亮点

• 浏览器自动化现在可以驱动对话专属页面：PawWork 现在为每个对话提供了独立的内嵌浏览器视图和一个 BrowserSession，可以通过通用的 browser_* 工具进行导航、检测元素、点击、输入、等待、截图和提取内容。浏览器状态归属于当前对话，后台页面即使脱离窗口也能继续运行，截图会直接嵌入工具卡片中渲染，浏览器工具组在使用前保持惰性加载，由模型按需激活（#1231）。
• OpenCLI 站点适配器已内置到浏览器工具路径中：桌面构建现在打包了 OpenCLI 运行环境，并以延迟工具的形式暴露 opencli_search 和 opencli_run。模型可以发现站点专属的适配器命令，然后通过一个精简的兼容层在可见的内嵌浏览器页面上运行受支持的适配器。不受支持的浏览器内部适配器会被阻止，因此本次发布提供了有用的适配器路径，而不会暴露整个守护进程的表面（#1272）。
• 自动化任务可编辑，并且跨项目切换时不会中断：自动化任务详情页现在支持直接编辑标题、指令、调度计划和模型，列表行则支持删除、暂停或恢复、立即运行等操作。调度现在由进程级调度器管理，它会全局扫描自动化任务定义，只在触发运行时才进入目标项目，因此定时任务不再受当前选中或打开的项目影响。在项目之间移动新创建的自动化任务时，会原地更新并保留其 ID、调度计划、暂停状态和运行历史（#1270、#1274）。
• 大仓库的初始快照更快、更省资源：快照初始化现在可以复用源仓库的对象数据库和已验证的源索引，失败时再回退到之前的全量添加路径。这个改动是最优努力式的：不兼容的 split-index 或未合并索引情况会安全回退，但大型受追踪仓库可以避免重复计算 Git 已知的哈希（#1268）。

运行时与维护

• 测试可靠性：prompt 取消竞态条件的覆盖率测试现在给 Windows 留出了足够的时间到达真正的竞态检查点后再取消，保留了取消契约，同时避免了因为 1 秒的保护时间在最近的 Windows 运行器上过紧而导致的偶发失败（#1276）。
• 发布元数据：桌面发布版本号提升至 2026.6.6（#1277）。

验证

本次发布走完了完整的桌面发布流程：发布 PR 的 CI；签名并公证的 macOS Apple 芯片（submit 27420905412、finalize 27421820898）和 Intel（submit 27420905493、finalize 27421617662）构建；Windows x64 构建（27420905456）；发布产物和更新元数据验证；发布后自动固定 v2026.6.6 到 commit 9af78a937ae649fca1eca7248d7ff8cfd2a3ddff；R2 镜像（27422270412）确认 dl.pawwork.ai 已分发 2026.6.6 安装包并可在必要时回退到 GitHub；发布后 bun packages/desktop-electron/scripts/verify-release.ts v2026.6.6 通过，包括从已公证的 arm64 DMG 做 fresh packaged startup smoke。

2026.6.5

Downloads

• macOS Apple Silicon
• macOS Intel
• Windows

App Update Notice

PawWork 2026.6.5 adds a desktop Browser tab, turns Settings, Automations, and Skills into true routes, and makes desktop attachments easier to inspect with chips and image thumbnails. It also fixes timeline flicker and jumps when opening or switching long sessions, improves automation continuation and diagnostics packages, and hardens MCP, provider, edit-tool, and session runtime paths.

Highlights

• A desktop Browser tab, with the automation bridge foundation: The new Browser tab opens in the session right panel and uses Electron's built-in Chromium with back, forward, reload or stop, an address bar, open-in-system-browser, copy-link, and clear-data controls. It is desktop-only, keeps browsing data in its own persistent partition, and isolates external pages from the PawWork renderer. The underlying loopback token-protected CDP bridge also landed as the foundation for future browser automation, but this release does not yet ship the full generic browser tools or opencli adapters (#1204, #1221).
• Automations can continue in the conversation where they started: The automate tool can now request continueSession, so recurring work can keep writing into the source conversation instead of creating a hidden detached session. Auto-sent messages are labeled and link back to their automation, continue automations are cleaned up when the source conversation is deleted, and scheduling requests route more reliably to the automate tool (#1210, #1211, #1244).
• Session timelines and core surfaces are steadier: Streaming tool rows no longer jump upward and then snap back to the bottom as their layout changes, and opening or switching into an already-loaded long session no longer briefly shrinks the transcript and bounces the scrollbar. Settings, Automations, and Skills now live at /settings, /automations, and /skills as real routes, so the session page unmounts honestly while running terminals keep their state (#1215, #1236, #1216, #1241).
• Desktop attachments are clearer and harder to lose: Drag-and-drop, paste, file picker, slash-command sends, and follow-up sends now converge on path-backed attachments. The composer shows attachments in a dedicated chip row, restores image thumbnails, shows file cards for non-image files, warns when the selected model cannot read a media attachment, and keeps PDF capability handling aligned between resolver and provider code. The fork dialog also opens correctly from the palette and shows file placeholders for attachment-only messages (#1239, #1247, #1265, #1266).
• Diagnostics packages are easier to prepare for support: Help and error-reporting flows now share one local diagnostics package path that keeps session content, renderer diagnostics, environment context, and main-process plus backend log tails together. Builds without a feedback form URL still prepare the local package, and the old raw session JSON export is hidden from the session row menu to reduce incomplete troubleshooting reports (#1240).

Runtime And Maintenance

• Edit and tool safety: Replacement text containing $ patterns is now inserted literally in replaceAll and $ARGUMENTS expansion, preventing silent corruption in Makefiles, shell scripts, LaTeX, and similar content. The edit tool also rejects empty oldString replacements against existing files and low-confidence large fuzzy matches. Grep permission checks now use the requested path, and skill catalog injection no longer duplicates catalog entries (#1224, #1234, #1227, #1230).
• MCP reliability: Catalog capabilities, aborts, auth serialization, dynamic config, isError tool results, initialization failures, request timeouts, and prompt/resource catalog listing timeouts were tightened so slow or stuck MCP servers are less likely to stall the session (#1228, #1233, #1225, #1256, #1267).
• Provider and runtime correctness: Vertex REP endpoints are supported, stale Anthropic and Vertex Anthropic tool-call block reordering was removed, structured stream error payloads are preserved as classifiable errors, and expired enterprise remote config auth now has a recoverable login path (#1263, #1260, #1259, #1262).
• Session stability: Shell cancellation avoids a race, provider context overflow respects disabled auto compaction, workspace-mode session listing keeps explicit directory filters, and interrupted assistant scaffolds are finalized cleanly (#1251, #1257, #1258, #1261).
• Architecture, performance, and test maintenance: Desktop bridge and message part contracts are shared, workspace routing failures are typed, loop-context scans are bounded to the current turn, subagents preserve the caller variant, ACP tool display metadata is clearer, LSP loading is deferred behind tool_info, git state resolution starts asynchronously, JDTLS Maven parent roots resolve better, and Windows/session export tests are more stable (#1217, #1219, #1220, #1222, #1226, #1235, #1232, #1237, #1245, #1246, #1218, #1248, #1254).
• UI polish: File picker results now preserve the server-ranked order instead of being disturbed by client-side filtering (#1229).
• Bumped the desktop release version to 2026.6.5 (#1269).

Verification

This release went through the full desktop release path: release PR CI; signed and notarized macOS Apple Silicon (submit 27331187085, finalize 27331469953) and Intel (submit 27331188598, finalize 27331957149) builds; the Windows x64 build (27331190028); release asset and updater metadata checks; auto-publish pinning v2026.6.5 to commit fd8a5bddf6d70bcd2f612655a44efbf3e9c43dfe; R2 mirror (27332280499) confirming dl.pawwork.ai serves the 2026.6.5 installers with GitHub fallback; and post-publish bun packages/desktop-electron/scripts/verify-release.ts v2026.6.5 checks, including a fresh packaged startup smoke from the notarized arm64 DMG.

中文版本

下载

• macOS Apple 芯片
• macOS Intel 芯片
• Windows

主要更新

PawWork 2026.6.5 在桌面端加入了内嵌的 Browser tab，把 Settings、Automations 和 Skills 升级为真正的一等路由，桌面附件也统一用更清晰的 chip 和图片缩略图来展示。同时修复了打开长会话、切换已有会话和 streaming 工具输出时 timeline 的闪烁/跳动问题，并对 Automations 续跑、诊断包导出、MCP、provider、编辑工具和 session runtime 做了可靠性加强。

亮点

• 桌面端右侧面板加入内嵌浏览器：新的 Browser tab 基于 Electron 自带的 Chromium，提供后退、前进、刷新/停止、地址栏、在系统浏览器打开、复制链接和清除浏览数据等常用控件。该 tab 仅在桌面端出现，浏览数据使用独立的持久分区存储，外部页面与 PawWork renderer 进程隔离。底层还加入了以 loopback token 保护的 CDP bridge，为后续浏览器自动化做好地基，但本版暂不包含完整的 generic browser tools 或 opencli adapters（#1204、#1221）。
• Automations 可以在原对话里续跑：模型现在可以选择 continueSession，让循环任务在原对话中继续写回，而不是每次启一个隐藏的新会话。自动发送的消息会标上"自动发送"标记并链接回对应的 automation；如果原对话被删除，绑定在该对话上的 continue automation 也会被一并清理。调度类请求也更稳定地路由到 automate tool（#1210、#1211、#1244）。
• 会话 timeline 更稳，核心页面改为真路由：streaming 工具行不再因为布局切换而产生上跳再回到底部的抖动；打开或切换到已有长会话时，刷新也不会短暂地将已加载的 transcript 压缩成更短的页面，滚动条和视口不再闪烁。Settings、Automations 和 Skills 现在走 /settings、/automations、/skills 真路由，切换时会正常卸载 session 页面，运行中的 terminal 仍会保留（#1215、#1236、#1216、#1241）。
• 桌面附件更清晰，也更不容易丢失：拖拽、粘贴、文件选择器、slash command 和 follow-up 现在统一走路径型附件链路；composer 里以独立 chip 行展示附件，图片恢复缩略图，其他文件显示图标、名称和大小。模型无法读取的媒体会显示警告，PDF 的能力判断也和 resolver/provider 保持一致。fork dialog 现在可以从 palette 正常打开，仅含附件的消息也不再显示空白预览（#1239、#1247、#1265、#1266）。
• 诊断包出口统一：Help 和错误报告现在走同一条本地诊断包流程，把 session 内容、renderer 诊断、环境信息、main process 日志尾部和 backend 日志尾部打包在一起。没有配置反馈表单 URL 的构建也能生成本地包，旧的 raw session JSON 导出从会话行菜单中隐藏，减少用户发出不完整排障材料的情况（#1240）。

运行时与维护

• 编辑与工具安全：修复了 replaceAll 与 $ARGUMENTS 把 $ 模式当成 JavaScript replacement pattern 的问题，避免 Makefile、shell、LaTeX 等内容被静默改坏；同时拒绝以空 oldString 覆盖已有文件和低置信度的大块 fuzzy edit。grep 权限现在按请求路径判定，skill catalog 不再重复注入（#1224、#1234、#1227、#1230）。
• MCP 可靠性：MCP catalog 的能力枚举、abort、auth 序列化、动态配置、isError 工具结果、初始化失败、请求超时以及 prompt/resource catalog listing 的超时都做了收紧，避免慢或卡死的 MCP server 拖住会话（#1228、#1233、#1225、#1256、#1267）。
• Provider 与 runtime 正确性：新增 Vertex REP endpoint 支持；Anthropic/Vertex Anthropic 的 tool-call block 顺序不再被旧 transform 重排；structured stream 的 error payload 会保留为可分类的错误；enterprise remote config 认证过期时会走可恢复的重新登录路径（#1263、#1260、#1259、#1262）。
• Session 稳定性：修复了 shell cancel 竞态问题；禁用 auto compaction 时，provider context overflow 不再强制自动压缩；workspace 模式下按 directory 列 session 不会越界；interrupted assistant scaffold 会被正确收尾（#1251、#1257、#1258、#1261）。
• 架构、性能与测试维护：共享了 desktop bridge/message part contract，类型化了 workspace routing failure，限制 loop-context 只扫描当前 turn，保留了 subagent caller variant，改进了 ACP 工具展示 metadata，LSP 延后到 tool_info 之后加载，git state 改为异步解析，JDTLS Maven parent root 解析和 Windows/session export 测试稳定性也做了收紧（#1217、#1219、#1220、#1222、#1226、#1235、#1232、#1237、#1245、#1246、#1218、#1248、#1254）。
• UI 小修：file picker 保留 server-ranked 排序结果，不再被客户端过滤打乱（#1229）。
• 桌面版版本号升至 2026.6.5（#1269）。

验证

本次发布走完了完整的桌面发布流程：发布 PR 的 CI；签名并公证的 macOS Apple 芯片（submit 27331187085、finalize 27331469953）和 Intel（submit 27331188598、finalize 27331957149）构建；Windows x64 构建（27331190028）；发布产物和更新元数据验证；发布后自动固定 v2026.6.5 到 commit fd8a5bddf6d70bcd2f612655a44efbf3e9c43dfe；R2 镜像（27332280499）确认 dl.pawwork.ai 已分发 2026.6.5 安装包并可在必要时回退到 GitHub；发布后 bun packages/desktop-electron/scripts/verify-release.ts v2026.6.5 通过，包括从已公证的 arm64 DMG 做 fresh packaged startup smoke。

2026.6.4

Downloads

• macOS Apple Silicon
• macOS Intel
• Windows

App Update Notice

PawWork 2026.6.4 makes background work harder to miss: questions and permission requests now create clear Dock or taskbar attention, and pending questions are tracked as live state that clears when answered. It also fixes Automations visibility across open projects, steadies the first frame when opening long sessions, and updates the public site with bilingual static pages plus the search and AI-discoverability infrastructure needed for better indexing.

Highlights

• Questions are more visible, without stale alerts: Questions now flow through the shared notification and badge system, and Dock or taskbar attention is reserved for events that actually block the agent on you: questions and permission requests. Turn-complete and error notifications are quieter. Pending questions are also modeled as live state instead of persisted notification entries, rebuilt from every project's event stream and server snapshot, so answering a question clears the matching dock, sidebar, and badge state (#1196, #1200).
• Automations show across every open project: The Automations surface now lists automations from all open PawWork projects instead of only the current routed project. Each row shows the owning project name, and detail, pause/resume, delete, run-now, and run-history actions all use that owning project, so automations created for another open folder no longer appear to disappear (#1203).
• Long sessions open at the settled bottom: The session timeline now mounts and measures behind the opening cover, and the cover lifts only after scroll reconciliation has gone quiet. The first visible frame is already the settled bottom instead of a premature position that jumps down after rendering finishes (#1195, #595).
• The website is easier for search and AI systems to read: The public site now has robots.txt, sitemap.xml, llms.txt, structured data, a renderable OG image, and a real 404 page. The homepage is now built as two static routes, / and /zh-CN/, with canonical, hreflang, OG locale, bilingual sitemap, and fuller crawlable content for Google, Doubao, AI search, and citation systems (#1189, #1198, #1191, #1192).

Runtime And Maintenance

• Bumped the Effect stack to 4.0.0-beta.78 and adapted the Schema.Defect() and yieldable Command breaking changes (#1190).
• Added browser, refresh, and lock icons for the upcoming embedded browser tab, and removed redundant right-panel active icon variants so selected chips rely on their background state (#1201, #1186).
• Aligned the OpenCode Zen LLM request User-Agent with upstream opencode and consolidated the followed-upstream HTTP version constant in version.ts to reduce build-chain drift (#1202).
• Bumped the desktop release version to 2026.6.4 (#1208).

Verification

This release went through the full desktop release path: release PR CI; signed and notarized macOS Apple Silicon (submit 27115112222, finalize 27115298480) and Intel (submit 27115115786, finalize 27115470058) builds; the Windows x64 build (27115119591); release asset and updater metadata checks; auto-publish pinning v2026.6.4 to commit bfc6dedc9a48a8c92b47d51c2397c7f1c9e498d3; R2 mirror (27115643871) confirming dl.pawwork.ai serves the 2026.6.4 installers with GitHub fallback; and a post-publish bun packages/desktop-electron/scripts/verify-release.ts v2026.6.4 check.

中文版本

下载

• macOS Apple 芯片
• macOS Intel 芯片
• Windows

主要更新

PawWork 2026.6.4 让后台工作更不容易错过：需要你回答的问题和权限请求会在 Dock 或任务栏上给出明确提醒，待回答问题按实时状态跟踪，回答后自动消失，不再留下过期的小红点或徽标。本版还修复了 Automations 只显示当前项目的问题，打开长会话时的首次画面也更稳定；官网补齐了中英文静态页面，以及搜索发现和 AI 引用所需的基础内容。

亮点

• 需要你处理的问题更醒目，也不再留下假提醒：所有问题现在统一走通知和徽标体系，Dock 或任务栏只在问题、权限请求这类真正阻塞 agent 的事件上强提醒，任务完成和错误则安静通知，不再打断你。待回答问题也从持久化通知改为实时状态：PawWork 会从所有项目的事件流和服务端快照重建当前问题，回答后自动清除对应的 Dock、侧栏和徽标状态（#1196、#1200）。
• Automations 会显示所有已打开项目的自动化：Automations 页面不再只看当前路由所在的项目，而是列出所有已打开项目的自动化，每条显示所属项目名。详情、暂停、恢复、删除、立即运行和运行历史也都在所属项目下执行，避免跨项目创建的自动化“消失”（#1203）。
• 打开长会话时不再先跳再落底：会话时间线现在会在打开遮罩背后完成测量和滚动稳定，遮罩只在滚动调和器安静后才放开。用户第一眼看到的就是已稳定的底部，而不是先闪现未测完的位置再向下跳（#1195、#595）。
• 官网更适合搜索和 AI 引用：官网新增 robots.txt、sitemap.xml、llms.txt、结构化数据、可渲染的 OG 图片和 404 页面，首页拆成英文 / 与中文 /zh-CN/ 两条静态路由。两种语言现在都有 canonical、hreflang、OG locale、双语 sitemap 和更充实的首页内容，方便 Google、Doubao、AI 搜索和引用系统读取（#1189、#1198、#1191、#1192）。

运行时与维护

• Effect 依赖栈升级到 4.0.0-beta.78，并完成了 Schema.Defect() 与 Command yieldable 的兼容迁移（#1190）。
• UI 图标库新增 browser、refresh、lock 三个图标，为内嵌浏览器 tab 做准备；同时移除右侧面板中冗余的选中态 active 图标变体，选中状态只由 chip 背景表达（#1201、#1186）。
• OpenCode Zen 的 LLM 请求 User-Agent 与上游 opencode 对齐，并把跟随上游的 HTTP 版本常量集中到 version.ts，减少构建链路中的版本漂移（#1202）。
• 桌面版版本号升至 2026.6.4（#1208）。

验证

本次发布走完了完整的桌面发布流程：发布 PR 的 CI；签名并公证的 macOS Apple 芯片（submit 27115112222、finalize 27115298480）和 Intel（submit 27115115786、finalize 27115470058）构建；Windows x64 构建（27115119591）；发布产物和更新元数据验证；发布后自动固定 v2026.6.4 到 commit bfc6dedc9a48a8c92b47d51c2397c7f1c9e498d3；R2 镜像（27115643871）确认 dl.pawwork.ai 已分发 2026.6.4 安装包并可在必要时回退到 GitHub；发布后 bun packages/desktop-electron/scripts/verify-release.ts v2026.6.4 通过。