v0.2.0 — Agentic Design

Open CoDesign 0.2.0 changes the product shape. The app is no longer a one-shot prompt-to-artifact generator; each design now has a real workspace, a session history, and an agent loop that can read files, edit files, ask questions, preview its work, and stop only after a done check.

This release also includes a large provider reliability pass, export fixes, website refreshes, security hardening, and new distribution assets for macOS, Windows, and Linux.

What changed

• Workspace-backed design sessions. Each design owns a workspace folder on disk. Generated sources, assets, exports, AGENTS.md, and DESIGN.md live as files instead of sealed app state.
• Permissioned local tools. The agent can use read, write, edit, bash, grep, find, and ls through the Open CoDesign permission UI.
• Design-specific tools. The runtime now supports ask, scaffold, skill, preview, gen_image, tweaks, todos, and done.
• DESIGN.md as design memory. Brand values, design tokens, and layout decisions can become editable project files.
• Better Files panel and workspace previews. Existing files in bound folders are visible, delivered previews show up in the Files panel, local assets survive export, and stale scaffold manifests were repaired.
• Provider and generation diagnostics. The app now gives clearer errors for 403 blocks, terminated generations, reasoning-content failures, workspace binding conflicts, model hint drift, and provider capability mismatches.
• More reliable exports. PPTX screenshots paginate sectionless decks, exported local assets are preserved, and offline export paths were hardened.
• Desktop polish. Settings were reorganized, comment mode selection works again, tweak persistence was hardened, hub thumbnails are cached, prompt IME behavior is respected, and generation state syncs before resubmits.
• Security hardening. Agent-supplied SVG rendering is sanitized, secret storage prefers Electron safeStorage, diagnostics redact encrypted secret rows, private-network provider probes require explicit opt-in, and reference URL fetching rejects private or link-local targets.

Installation

GitHub Release downloads are available for:

• macOS Apple Silicon and Intel DMG
• Windows x64 and ARM64 setup exe
• Windows x64 and ARM64 portable zip
• Linux x64 AppImage, deb, rpm, and snap
• SHA256SUMS.txt, CycloneDX SBOM, and provenance JSON

Package manager status:

:::bash
# macOS
brew install --cask opencoworkai/tap/open-codesign

# Windows, via Scoop
scoop bucket add opencoworkai https://github.com/OpenCoworkAI/scoop-bucket
scoop install opencoworkai/open-codesign

Homebrew Cask and Scoop are live for v0.2.0. The winget package has been submitted in microsoft/winget-pkgs#372310 and is waiting for Microsoft review; until that merges, use Scoop or the direct Windows installer.

Installers are still unsigned. On macOS Sequoia 15+, run this once after dragging the app into /Applications:

:::sh
xattr -cr "/Applications/Open CoDesign.app"

On Windows, SmartScreen may warn because the installer is not Authenticode-signed yet. Choose More info, then Run anyway. Code signing and notarization are still planned for v0.5.

Contributors

Huge thanks to everyone who contributed code, reviews, issues, diagnostics, and release validation in this cycle.

Code and PR contributors in this release window:

• @hqhq1025
• @Sun-sunshine06
• @snowopsdev
• @mussonking
• @MoveCloudROY
• @cifuentesantonio
• @VoidLight00
• @Jiangxy-1
• @GoDiao
• @L4b0R
• @cydxxzg
• @yangjunx21
• @dependabot[bot]

Notable PRs from community contributors:

• @snowopsdev hardened SVG rendering, secret storage, and provider probes in [#311].
• @mussonking added workspace folder reads and the visible Files panel in [#271].
• @MoveCloudROY added workspace support for designs in [#173].
• @cifuentesantonio added Spanish language support in [#272].
• @VoidLight00 fixed model search parsing in [#268].
• @Jiangxy-1 helped land explicit provider capability profiles in [#226] and CI cleanup in [#224].
• @GoDiao restored garbled Chinese text in the Codex OAuth path in [#231].
• @L4b0R improved the app icon, ChatGPT OAuth error messaging, and workspace storage defaults.

Issue reporters and testers who helped shape this release include @davevr, @jpjperalta, @jonathanmorenon, @rosacelesteusa-oss, @mikecheongx, @apradoc, @fabianmcja, @bstsimo, @abelzhang001, @258044aamm-Dev, @luis782006, @danzub, @WayneEld, @deancallaghan451, @pat3dx, @yshurik, @dev-d-25, @hxwssg, @XiaoCC, @kaiminRyan, @rsxdalv, @WWWduoyu, @L4b0R, @coachescritique, @lanzise1, @bytegh, and @CaioGS06.

Notes for upgraders

• v0.1 designs have a migration path into workspace-backed sessions and files.
• The default source entry for v0.2 designs is App.jsx; standalone index.html is still used for exports and legacy workspaces.
• Homebrew and Scoop are updated. winget is waiting on Microsoft package review.
• The release workflow now publishes replacement assets safely on rerun and keeps post-release distribution sync non-blocking.

Full changelog

Compare everything in this release: https://github.com/OpenCoworkAI/open-codesign/compare/v0.1.4...v0.2.0