OpenPipal 1.2.3

This release reworks the model picker under the input box (thinking depth is now a slider) and fixes every request to the OpenCode Zen / Go gateway being rejected with 400 MissingSessionID.

What's new

• Thinking depth slider. Click the model chip under the input box. The popover now shows the current thinking level at the top with a reset button, the model name (click it to open the model list), and a slider underneath. Drag it, click a stop, or use the ← / → keys: the change applies immediately and the popover stays open so you can keep adjusting. The stops come from the model. A model with a plain thinking toggle gets off / on; a model with an effort dial gets its own levels (for example low / medium / high / max); a model that is always thinking has no off stop.
• Tidier composer. Every control in the bottom row of the input box (attach, microphone, permission tier, model chip, send) is now the same 32px height, and the model chip no longer sits on a grey background: it only highlights on hover or while its menu is open. The same picker is used on the welcome page and in the Pal preflow panel.

What's fixed

• OpenCode Zen / Go gateway: no more 400 MissingSessionID. The gateway requires an x-opencode-session header on every request, and nothing in OpenPipal was sending it, so every turn (and the connection test in Settings) failed with 400 MissingSessionID. The header is now sent for the opencode and opencode-go providers and for any custom OpenAI-compatible endpoint whose host is opencode.ai.

Windows installers are rebuilt from the same source. There is still no OS sandbox on Windows (the agent asks before running shell commands).

Install

macOS (Apple Silicon: openpipal-1.2.3-arm64.dmg; Intel: openpipal-1.2.3-x64.dmg)
The build is signed with a development certificate and is not notarized. On first launch use System Settings → Privacy & Security → Open Anyway, or run xattr -dr com.apple.quarantine /Applications/OpenPipal.app.

Windows (most PCs: openpipal-1.2.3-x64-setup.exe; Snapdragon laptops: openpipal-1.2.3-arm64-setup.exe)
The installer is not code-signed, so SmartScreen shows "Windows protected your PC": click More info → Run anyway. It installs per-user into %LOCALAPPDATA%\Programs\OpenPipal. Install Git for Windows if you want the agent to run shell commands. On ARM64, PDF page rendering is unavailable (@napi-rs/canvas has no win32-arm64 build yet).

The browser extension (0.3.13) is unchanged from 1.0.0.

Verify what you installed

SHA256SUMS.txt covers every installer. On Windows, verify-windows-install.ps1 -ExpectedAsarSha256 <sha> proves the installed app is this build; the expected value is asarSha256 in the attached factory report for your architecture.