Private AI Proxy v0.1.3

Production release on the stable update channel.

What's changed

• Added native Arch Linux packages for the desktop app and CLI on x86_64 and ARM64.
• Arch installations now use pacman-managed updates.

Downloads

Platform	Installer
macOS Apple Silicon	DMG
macOS Intel	DMG
Windows x64	EXE
Windows ARM64	EXE
Linux x64	DEB · RPM · ARCH
Linux ARM64	DEB · RPM · ARCH

Download the DMG for a manual macOS installation. The .app.tar.gz files and latest.json are updater assets.

Standalone CLI downloads

Platform	Archive
macOS Apple Silicon	TAR.GZ
macOS Intel	TAR.GZ
Windows x64	ZIP
Windows ARM64	ZIP
Linux x64	TAR.GZ · DEB · RPM · ARCH
Linux ARM64	TAR.GZ · DEB · RPM · ARCH

Integrity and updates

• SHA-256 checksums
• Automatic updates verify Tauri signatures before installation.
• macOS desktop packages are Developer ID signed and notarized.
• Build commit: db90905

Private AI Proxy v0.1.2

Production release on the stable update channel.

What's changed

• First stable Private AI Proxy desktop and CLI release.
• Includes macOS, Windows, and Linux packages for x64 and ARM64.
• Adds verified confidential AI profiles, Local API, coding-agent integration, usage proofs, and signed automatic updates.
• Windows packages are not Authenticode signed in this release and may show a Microsoft SmartScreen warning.

Downloads

Platform	Installer
macOS Apple Silicon	DMG
macOS Intel	DMG
Windows x64	EXE
Windows ARM64	EXE
Linux x64	DEB · RPM
Linux ARM64	DEB · RPM

Download the DMG for a manual macOS installation. The .app.tar.gz files and latest.json are updater assets.

Standalone CLI downloads

Platform	Archive
macOS Apple Silicon	TAR.GZ
macOS Intel	TAR.GZ
Windows x64	ZIP
Windows ARM64	ZIP
Linux x64	TAR.GZ · DEB · RPM
Linux ARM64	TAR.GZ · DEB · RPM

Integrity and updates

• SHA-256 checksums
• Automatic updates verify Tauri signatures before installation.
• macOS desktop packages are Developer ID signed and notarized.
• Build commit: 43deb3c

Private AI Proxy stable update feed

Signed Private AI Proxy update manifests. This release is maintained by automation.

Private AI Proxy v0.1.2-beta.44

Beta channel build for testing. It may change before the stable release.

What's changed

• Release candidate for the first stable Private AI Proxy desktop and CLI release.

Downloads

Platform	Installer
macOS Apple Silicon	DMG
macOS Intel	DMG
Windows x64	EXE
Windows ARM64	EXE
Linux x64	DEB · RPM
Linux ARM64	DEB · RPM

Download the DMG for a manual macOS installation. The .app.tar.gz files and latest.json are updater assets.

Standalone CLI downloads

Platform	Archive
macOS Apple Silicon	TAR.GZ
macOS Intel	TAR.GZ
Windows x64	ZIP
Windows ARM64	ZIP
Linux x64	TAR.GZ · DEB · RPM
Linux ARM64	TAR.GZ · DEB · RPM

Integrity and updates

• SHA-256 checksums
• Automatic updates verify Tauri signatures before installation.
• macOS desktop packages are Developer ID signed and notarized.
• Build commit: 43deb3c

Private AI Proxy beta update feed

Signed Private AI Proxy update manifests. This release is maintained by automation.

Clients v0.7.2

Patch release for the coordinated ACI TypeScript client packages.

• Verify signed receipts and cited sessions when response consumers cancel streams early.
• Preserve fail-closed behavior across Pi, OpenCode, parser aborts, and non-SSE response consumers.
• Keep all eight client packages and internal dependency ranges on version 0.7.2.

See #170 and #171.

ACI clients v0.7.1

Patch release for the ACI verifier, shared provider, and native Pi/OpenCode integrations.

• Treat the gateway /v1/models catalog as the sole source of model capabilities.
• Reject malformed capability metadata instead of inventing defaults.
• Remove model-name inference, reasoning request rewrites, legacy URL aliases, and silent persisted-config fallback.
• Keep Pi and OpenCode mappings thin and host-native.
• Improve client and coding-agent documentation discoverability.

All eight coordinated packages are published through npm trusted publishing with provenance.

ACI clients v0.7.0

Highlights

• unifies Pi and OpenCode provider authentication, model discovery, inspection, and receipt verification
• normalizes the RedPill brand across package metadata and public code symbols
• ships coordinated 0.7.0 versions for all eight npm packages

Compatibility

This release renames RedpillProviderPlugin to RedPillProviderPlugin and the legacy Python verifier classes to their RedPill spelling.

Clients v0.6.0

ACI clients 0.6.0

• Share one framework-neutral account-to-API-key authorization contract across coding-agent adapters.
• Map Phala Cloud account login into the official Pi and OpenCode authentication APIs.
• Preserve manual API-key login, host-native credential persistence, dynamic model catalogs, and default-model persistence.
• Keep Redpill API-key-only until real Clerk authorization endpoints are available.
• Centralize provider inspection, receipt history, and session auditing.
• Publish all eight packages with coordinated 0.6.0 dependency ranges.

Breaking change

The programmatic @phala/pi-provider-aci createProvider API now accepts an options object with separate profile, accountAuth, config, and footerKey fields. Branded package installation and interactive user flows are unchanged.

Clients v0.5.1

Fixes

• use Pi native dynamic-provider persistence for model catalogs
• restore Pi credentials, cached models, and the saved default model across restarts
• update the Pi footer when ACI verification completes and respect offline mode
• document the official Pi provider and OpenCode plugin/auth workflows
• verify packaged Pi offline restoration in the release smoke test

This release publishes all eight coordinated npm packages through the existing GitHub Actions OIDC workflow.