Open Cowork v3.3.0 — First Stable Release 🎉

The first stable release of the 3.3.x series, graduating from 9 beta iterations. This release brings security hardening, improved multi-model support, remote control enhancements, and a fully automated PR review pipeline.

Highlights

• Stable & Verified: All builds pass launch-level smoke tests on both platforms — the app starts and loads correctly before publishing
• Security Hardened: Zip-slip and path traversal protections, model probe error handling improvements
• Multi-Model Updated: Latest model presets for Claude 4.6, GPT-5.4, Gemini 3, DeepSeek, Qwen, and more
• Remote Control: Feishu pairing mode with UI guidance and approval panel
• Automated PR Review: Codex-powered bot reviews every PR before merge

What's New

Added

• Pairing mode UI guidance and approval panel for Feishu remote control
• Official project website with VitePress
• Codex-powered PR review bot (GPT-5.3-codex)
• Launch-level smoke tests in release workflow (macOS + Windows)
• Dependency management policy and improved Dependabot config
• ROADMAP with versioned planning

Fixed

• Feishu DM policy sync and WebSocket connection reliability
• Screenshot tool results now display as images instead of bloating context
• Gemini empty probe response handling
• Model probe error causes preserved in diagnostics
• MCP: prefer system npx on Windows
• Outdated model fallbacks updated to current versions

Changed

• OpenAI presets updated: gpt-5.4-mini, gpt-5.4-nano, o4-mini (retired gpt-4.1 removed)
• CI: platform builds moved to release-only with smoke tests
• Dependabot: grouped CI actions, separated production patch/minor

Downloads

Contributors

• @hqhq1025
• @Sun-sunshine06
• @JackXFan
• @andoan16

Full Changelog: v3.3.0-beta.9...v3.3.0

What's Changed in v3.3.0-beta.9

Bug Fixes

Custom API Provider Connectivity (#89)

• Fix: Custom OpenAI-compatible providers (e.g., Alibaba DashScope / Coding Plan) failing with "404 — API endpoint not found"
  • Root cause: diagnostics used GET /v1/models to validate auth, but many providers (DashScope, etc.) don't implement this endpoint — now falls through to the chat completion probe which works correctly
  • Also: URL normalization strips accidentally copy-pasted /chat/completions, /completions, /responses suffixes from base URLs
  • Applied across all code paths: API probe, agent sessions, and title generation

MCP Server Connections (#86)

• Fix: MCP servers (e.g., Notion MCP) stuck on "Connecting..." forever with no error
  • Added 30-second connection timeout with proper error propagation to the UI
  • New 4-state status indicator: Connected / Connecting / Failed / Disabled
  • Config auto-rolls back enabled to false on connection failure (prevents retry loop on restart)
  • Windows: npx pre-check now uses exec() for .cmd file compatibility

Windows Installer Upgrade (#90)

• Fix: "Cannot install — existing process cannot be closed" on Windows upgrade
  • New customCheckAppRunning NSIS macro kills entire process tree (taskkill /T /F)
  • Cleans up orphaned node.exe from MCP stdio servers via PowerShell Get-CimInstance

Testing

• 752 tests passing (up from 717)
• New test suites: auth-utils.test.ts (29 tests), mcp-manager.test.ts (6 tests)

Notes

• macOS and Windows installers are attached to this release
• This is a pre-release beta — please report issues at https://github.com/OpenCoworkAI/open-cowork/issues

Full Changelog: v3.3.0-beta.8...v3.3.0-beta.9

What's New in v3.3.0-beta.8

Build Reliability Overhaul

This release introduces a three-layer defense system to ensure packaged builds work correctly after installation:

Pre-build verification — A new check runs before electron-builder to validate that all required resources (MCP servers, Node.js binaries, sandbox agents) exist. Missing resources now fail the build immediately instead of silently producing broken packages.

Runtime preflight check — On first launch, the packaged app verifies critical bundled resources are present. If anything is missing, a clear bilingual error dialog tells you what's wrong and suggests reinstalling.

CI smoke tests — After building, CI now verifies the packaged app contains all expected resources. On macOS, the app is actually launched and confirmed to start successfully. On Windows, all bundled resource paths are validated.

Other Improvements

• Release test gate: The release workflow now requires lint + typecheck + full test suite to pass before building. No more releasing untested code.
• MCP bundling hardened: If esbuild is unavailable, the build fails immediately instead of silently producing unbundled (broken) MCP servers.
• Windows EBUSY fix: MCP server bundles are now staged to a separate directory before packaging, avoiding transient file locks on Windows.
• CI stabilization: Windows symlink detection in tests, type safety improvements, minor test fixes.
• Duplicate resource copy eliminated: Removed redundant top-level extraResources declaration that caused MCP files to be copied twice during packaging.

Contributors

Thanks to @Sun-sunshine06 for CI stabilization work and the MCP staging mechanism (cherry-picked from #78 and #73).

Full Changelog: v3.3.0-beta.7...v3.3.0-beta.8

Highlights / 亮点

🏗 Engineering Overhaul / 工程化大修
320 ESLint errors → 0, 70 TypeScript errors → 0, comprehensive code quality upgrade
320 个 ESLint 错误 → 0，70 个 TypeScript 错误 → 0，全面代码质量升级

🧩 Architecture Refactor / 架构重构
Split SettingsPanel (4984 lines) into 8 tab components, MessageCard into 9 sub-components, normalized 8 parallel Maps into unified state
拆分 SettingsPanel（4984 行）为 8 个独立标签组件，MessageCard 拆为 9 个子组件，8 个并行 Map 归一化为统一状态

🪟 Windows Fixes / Windows 修复
Icon display, MCP compatibility, taskbar icon, legacy uninstall remediation
图标显示、MCP 兼容性、任务栏图标、旧版卸载修复

📦 Smaller Builds / 更小的构建包
macOS bundle reduced from 2.9 GB to 2.2 GB, DMG from 601 MB to 368 MB
macOS 构建包从 2.9 GB 缩减到 2.2 GB，DMG 从 601 MB 缩减到 368 MB

Features / 新功能

• Root-level ErrorBoundary — app-wide crash protection with i18n support / 应用级错误边界，支持国际化
• Ollama context strategy — query actual context window from /api/show, CJK-aware token estimation / Ollama 上下文策略改进，查询实际上下文窗口，CJK 感知 token 估算

Refactoring / 重构

• SettingsPanel split — 8 independent tab components for maintainability / SettingsPanel 拆分为 8 个独立标签组件
• MessageCard split — 9 focused sub-components / MessageCard 拆分为 9 个聚焦子组件
• RemoteControlPanel split — 9 focused sub-components / RemoteControlPanel 拆分为 9 个子组件
• Typed IPC — eliminate 25 any in preload with typed interfaces / IPC 类型化，消除 preload 中 25 个 any
• Centralized selectors — 28 Zustand selector hooks for consistent state access / 28 个集中式 Zustand selector hooks
• Unified session state — normalize 8 parallel Maps into single Record / 8 个并行 Map 归一化为单一 Record
• useReducer migration — replace 22 useState with useReducer in API config / useReducer 替换 API 配置中 22 个 useState

Performance / 性能优化

• macOS bundle size — reduced from 2.9 GB → 2.2 GB, DMG 601 MB → 368 MB / macOS 包体积大幅缩减

Bug Fixes / 问题修复

Windows

• Resolve icon/logo display issues / 修复图标和 Logo 显示问题
• Set window icon for taskbar display / 设置任务栏窗口图标
• Resolve 7 MCP compatibility issues / 修复 7 个 MCP 兼容性问题
• Remediate legacy uninstall failures (#54) / 修复旧版卸载失败

Security / 安全

• Escape shell paths in LimaSync, validate WSL distro names / 转义 LimaSync Shell 路径，校验 WSL 发行版名称
• Make credential key rotation atomic / 凭据密钥轮换原子化
• Strip plaintext password from credential IPC responses / 从 IPC 响应中移除明文密码

UI/UX

• Show notification when image paste/drop fails / 图片粘贴/拖放失败时显示通知
• Add label/htmlFor, keyboard nav, replace alert with inline error / 添加无障碍标签、键盘导航，内联错误替代 alert
• Replace 12 hardcoded Chinese strings with i18n / 12 处硬编码中文替换为 i18n
• Resolve multiple missing icon issues / 修复多处图标缺失

Core / 核心

• Eliminate processQueue race with outer loop pattern / 消除 processQueue 竞态条件
• Clear MCP callTool timer on success, prevent reconnect race / MCP callTool 成功时清除定时器，防止重连竞态
• Add error handling to continueSession, guard traceSteps / continueSession 增加错误处理
• Show error on config load failure / 配置加载失败时显示错误

CI & Testing / CI 与测试

• Dual-platform CI (macOS + Windows) with parallel builds / 双平台 CI 并行构建
• Test coverage threshold and quality gates / 测试覆盖率门槛与质量门控
• Stabilize Electron test bootstrap with Vitest alias approach / 通过 Vitest alias 稳定 Electron 测试引导
• Add unit tests for session-manager, tool-executor, and title flow / 新增 session-manager、tool-executor、标题流程单测
• All 109 test files passing (636 tests) / 109 个测试文件全部通过（636 个测试）

Docs / 文档

• Add SECURITY.md, CODE_OF_CONDUCT, issue/PR templates / 新增安全策略、行为准则、Issue/PR 模板
• Add CONTRIBUTING.md with development guidelines / 新增贡献指南

Full Changelog / 完整变更: v3.3.0-beta.4...v3.3.0-beta.5

What's New / 更新内容

Ollama 改进 / Ollama Improvements

• 通过 Ollama /api/show 端点查询实际上下文窗口大小 / Query actual context window from Ollama /api/show endpoint
• CJK 感知的 chars-per-token 估算，更智能地分配历史消息预算 / CJK-aware chars-per-token estimation for smarter history budgeting
• 根据模型上下文大小自动调整压缩策略 / Scale compaction settings based on model context size
• 向 Ollama API 请求注入 num_ctx 参数 / Inject num_ctx into Ollama API requests

UI 修复 / UI Fixes

• ContextPanel 工件刷新逻辑优化 / ContextPanel artifact refresh improvements
• ContextPanel 支持可配置宽度 / Configurable ContextPanel width

构建修复 / Build Fixes

• 修复 abortedByTimeout 重复声明导致的编译错误 / Fix abortedByTimeout duplicate declaration
• Windows 构建兼容性改进 / Windows build compatibility

Highlights / 亮点

🖥 macOS Native Experience / macOS 原生体验
Full macOS security audit: hardened runtime, entitlements, code signing support
macOS 安全审计：加固运行时、权限声明、代码签名支持

🪟 Windows Compatibility / Windows 兼容性
10+ Windows-specific fixes covering path handling, workspace management, and command execution
10+ 项 Windows 专项修复，涵盖路径处理、工作区管理和命令执行

🧠 Real-time Thinking Display / 实时思考展示
Stream AI thinking process in real-time with preserved formatting
实时展示 AI 思考过程，保留格式化标记

🔌 MCP Streamable HTTP / MCP 流式 HTTP 传输
Added Streamable HTTP as third MCP transport alongside stdio and SSE
新增 Streamable HTTP 作为第三种 MCP 传输协议（与 stdio、SSE 并列）

Features / 新功能

• Context window progress bar — visualize context usage in right panel / 右面板展示上下文窗口用量进度条
• 5-step API diagnostics — guided connection troubleshooting engine / 5 步 API 连接诊断引擎
• First-class Ollama support — native local model discovery and configuration / 原生 Ollama 本地模型发现与配置
• Batch conversation delete — multi-select and delete conversations in sidebar / 侧边栏批量选择删除对话
• Claude-style UI redesign — flattened SettingsPanel, ContextPanel, and sidebar / 设置面板、上下文面板、侧边栏扁平化重设计
• Structured logging — AsyncLocalStorage-based log context for better traceability / 基于 AsyncLocalStorage 的结构化日志上下文

Performance / 性能优化

• SDK session reuse — maximize Pi SDK session reuse across config changes, avoid unnecessary rebuilds / 最大化 SDK 会话复用，配置变更不重建会话
• Lazy loading — defer markdown rendering and non-startup panels for faster launch / 延迟加载 Markdown 渲染和非启动面板，加速启动

Bug Fixes / 问题修复

Security / 安全

• Prevent shell injection and optimize session reuse / 防止 Shell 注入，优化会话复用

Ollama

• Use known-model specs for context window instead of hardcoded 128k / 使用已知模型规格替代硬编码 128k 上下文窗口
• Harden local discovery and config flow / 加固本地发现和配置流程

UI

• Fix batch-delete memory leak and useEffect dependencies / 修复批量删除内存泄漏和 useEffect 依赖
• Fix stop button disappearing during auto-compaction / 修复自动压缩时停止按钮消失
• Preserve think-tag formatting and block order / 保持思考标记格式和块顺序

Core

• Handle reasoning roles for custom OpenAI endpoints / 支持自定义 OpenAI 端点的 reasoning role
• Fix scheduled task system correctness issues / 修复定时任务系统正确性问题
• Resolve sudo race condition and timeout UI cleanup / 修复 sudo 竞态条件和超时 UI 清理
• Recover legacy SQLite sidecars on startup / 启动时恢复遗留 SQLite 附属数据库
• Surface API errors and handle empty message_end content / 显示 API 错误，处理空 message_end

Downloads / 下载

⚠️ macOS DMG is unsigned. Right-click → Open to bypass Gatekeeper.
⚠️ macOS DMG 未签名，安装时需右键→打开来绕过 Gatekeeper。

更新要点 / Highlights

新功能 / New Features

• 统一 Agent 运行时到 pi-coding-agent SDK，收敛多 provider 执行链路

• Unified the agent runtime on pi-coding-agent SDK with a single execution path across providers

• 定时任务支持单次、每日、每周、多时段等更完整的调度模式

• Expanded scheduled tasks with richer modes including one-time, daily, weekly, and multi-time-slot runs

• 新增定时任务自动标题、立即执行、停止运行和过期保护

• Added auto-generated task titles, run-now support, stop controls, and overdue-task protection

• 插件系统升级，支持插件市场浏览、安装与组件级启停管理

• Upgraded the plugin system with marketplace browsing, installation, and component-level enable/disable controls

UI/UX

• 重做设置中心，升级为完整页面式配置体验

• Rebuilt the settings center into a full-page configuration experience

• 侧边栏重设计，支持分组会话、搜索和新的品牌视觉

• Redesigned the sidebar with grouped sessions, search, and updated branding

• 右侧信息栏升级，补充 token 用量、产物和最近工作区文件展示

• Enhanced the right-side info panel with token usage, artifacts, and recent workspace files

• 聊天消息与工具卡片样式优化，本地文件链接与产物展示更顺手

• Improved chat and tool card presentation, with smoother local file link and artifact handling

优化 / Improvements

• 刷新模型预设与 API 配置流程，增强多模型兼容性

• Refreshed model presets and API configuration flows for better multi-model compatibility

• 优化会话运行、配置读取、MCP 缓存与启动性能

• Optimized session runtime, config reads, MCP caching, and startup performance

• 改进会话级模型保存与切换体验

• Improved per-session model persistence and switching experience

• 优化技能、插件与本地脚本路径解析兼容性

• Improved compatibility for skills, plugins, and local script path resolution

稳定性修复 / Fixes

• 修复多项设置流转与单窗口行为问题

• Fixed multiple issues around settings flow and single-window behavior

• 修复 trace 更新、artifact 展示和本地文件链接相关问题

• Fixed issues with trace updates, artifact rendering, and local file links

• 修复定时任务触发、恢复时机和边界状态问题

• Fixed task triggering, resume timing, and scheduling edge cases

• 提升整体运行稳定性，减少多 provider 场景下的异常行为

• Improved overall runtime stability and reduced errors across multi-provider workflows

Release date: 2026-03-02

Improvements

• Add gui_extract_info in the GUI_Operate MCP server.
• Improve coordinate calculation in GUI operations.

Fixes

• Fix negative coordinates in cliclick.

Open Cowork 3.1.0

Release date: 2026-02-15

New Features

• Added full Plugin support end-to-end:
  • plugin catalog integration
  • plugin registry persistence
  • runtime materialization/loading for enabled plugins
  • plugin install/uninstall management flow
• Added plugin-related controls and entries in Settings UI.
• Added dedicated redaction module and test coverage for sensitive log filtering.

Improvements

• Improved Claude failure diagnostics by surfacing Claude Code stderr context in agent errors.
• Expanded sensitive-data redaction coverage for:
  • API keys
  • auth headers (Authorization, x-api-key, etc.)
  • bearer tokens
  • query-string tokens (token, access_token, api_key)
• Improved API connection testing for custom Anthropic-compatible providers:
  • timeout increased from 10s to 30s
  • better timeout/network error classification
  • better compatibility behavior when models.list() is unsupported
• Improved API settings UX copy and i18n consistency (Config Modal + Titlebar).
• Added compatibility hint text for live-test behavior in Anthropic-compatible scenarios.

Fixes

• Fixed ReferenceError: sdkPlugins is not defined runtime crash in ClaudeAgentRunner.
• Fixed packaged app version alignment issues and bumped app version to 3.1.0.
• Fixed misleading live-test wording by clarifying compatibility-mode behavior.
• Fixed plugin branch integration issues on main during merge (including type compatibility in plugin registry store).

Validation

• Type check passed: npx tsc -p tsconfig.json --noEmit
• Plugin-related tests passed:
  • tests/agent-runner-plugins.test.ts
  • tests/plugin-catalog-service.test.ts
  • tests/plugin-runtime-service.test.ts
  • tests/settings-panel-plugin-entry.test.ts
  • tests/skills-manager-plugin-install.test.ts
• Redaction tests passed:
  • tests/redaction.test.ts

New Features

• Added Feishu support, making it easier to integrate Open Cowork into Feishu-based workflows.
• Introduced remote control capabilities, including Feishu-integrated remote control flows.
• Added in-chat screenshot display plus richer Artifacts and file link support for better context sharing.
• Expanded GUI automation: more cursor operations, iterative workflows, click history, and Chinese text input.
• Added Windows GUI support to improve cross-platform coverage.
• Sessions now get auto-generated concise titles for easier history browsing.

Improvements

• Improved Artifact and file-link UX in chat: clearer icons, better naming, shorter labels, and cleaner parsing.
• External links now open in the system browser for a more consistent experience.
• Remote sessions now appear more quickly after startup.
• Added a Quartz fallback when cliclick is unavailable to reduce environment-related failures.

Fixes

• Fixed a blank screen issue in remote control settings.
• Fixed missing remote user messages in the UI.
• Fixed remote message content typing issues that caused build failures.
• Fixed multiple MCP and build stability issues (including bundled Node path handling).
• Fixed Node path resolution, Windows packaging/runtime issues, and sandbox environment edge cases.
• Fixed GUI Dock click targeting and verification flow issues.
• Improved grounding accuracy and fixed a Retain-related bug, plus API-call error fixes.