ADRs record decisions that should not silently change.
The Chinese ADR entry follows the same decision map and points to these records. Decision IDs, status, and the English record remain the source of truth for both locales.
Each ADR includes:
- Status
- Context
- Decision
- Consequences
- Alternatives (optional)
| ID | Title | Status |
|---|---|---|
| provider-metadata-client-certificate-retry | Provider metadata recovery from optional client certificates | Implemented candidate |
| device-local-project-lists-in-config-sync | Device-local project lists in configuration sync | Accepted |
| s3-only-configuration-backup-sync | S3-only encrypted configuration backup and synchronization | Accepted; supersedes WebDAV decisions in 0300 / 0301 |
| remote-provider-import | Explicit provider import into a running remote Host | Accepted for the experimental SSH MVP |
| remote-project-home-workflow | Remote projects in the shared Chat home workflow | Accepted |
| composer-mcp-invocations | Composer MCP Invocations | Accepted |
| chronological-system-transcript | Preserve chronological model system state | Accepted |
| mcp-tool-approval-risk | User MCP tools keep the normal approval path | Accepted |
| models-dev-catalog-authority | models.dev owns published model metadata | Accepted for implementation |
| pi-ai-core-0991-authority | Pi 0.99.1 account model authority | Superseded for chat model metadata |
| plan-tool-declarations-and-execution-denials | Keep known tool declarations while denying contract-mode execution | Accepted for implementation |
| trusted-extension-operation-ownership | Trusted extension operation ownership | Implemented candidate |
| scheduled-desktop-automations | Desktop automation scheduling | Accepted for implementation |
| subagent-model-fallback | Ordered subagent model fallback | Accepted for implementation |
| subagent-model-opt-in | Separate Subagent Model Opt-In from Definition Pins | Accepted for implementation |
| 0001 | Use Electron as the desktop shell | Accepted |
| 0002 | Use the pi Agent Harness as the kernel | Accepted |
| 0003 | Hybrid runtime — Rust host core + Node pi agent sidecar | Superseded in part |
| 0004 | No remote Gateway in the MVP | Accepted |
| 0005 | User-installable plugin system | Accepted |
| 0006 | Postpone the plugin marketplace; build the local plugin runtime first | Accepted |
| 0007 | Plugin distribution package format uses .piplug (zip) | Accepted |
| 0008 | Plugin runtime targets isolation in a separate process | Accepted (Target) |
| 0009 | English-first globalization | Accepted |
| 0010 | Use Rust as backend host core | Accepted |
| 0011 | Freeze host RPC, storage ownership, and mode defaults | Accepted |
| 0012 | Universal provider/model coverage via pi-ai + OpenAI-compatible extensibility | Accepted |
| 0013 | Consolidate settings navigation into four destinations | Superseded in part by 0026 |
| 0014 | Adopt host-owned storage schema v2 | Accepted |
| 0015 | Make settings content responsive to window width | Accepted |
| 0016 | Organize the sidebar around retained multi-project tabs | Accepted |
| 0017 | Remove composer workspace context rail | Accepted |
| 0018 | Carry thinking mode through the complete session pipeline | Accepted |
| 0019 | Work panel subsystems (embedded browser, git review, file browsing) | Superseded in part by 0108 |
| 0020 | Configuration provider studio | Accepted |
| 0021 | Platform application chrome | Superseded in part by 0025 |
| 0022 | Application Update Delivery | Accepted |
| 0023 | Independent Conversation Session Fork | Accepted |
| 0024 | Composer Slash Commands and @ File References | Accepted |
| 0025 | Keep Application Menus out of Windows/Linux Windows | Accepted |
| 0026 | Move the Projects Index into Settings as an Archive | Superseded in part by 0036 |
| 0027 | Make pi-ai authoritative for model metadata | Superseded for chat metadata |
| 0028 | Scope work-panel runtime contexts to conversations | Accepted |
| 0029 | Separate native-window and work-panel resize ownership | Superseded in part by 0032 |
| 0030 | Turn-boundary context checkpoint compaction | Accepted |
| 0031 | Keep composer prompt rows free of brand icons | Accepted |
| 0032 | Reserve native width for the docked work panel | Accepted (amended by 0033 and 0122) |
| 0033 | Internal-dock work panel (no native window expansion) | Superseded by 0122 |
| 0034 | Merge the command palette into global search | Accepted |
| 0035 | Surface the OS locale through the preload bridge | Accepted |
| 0036 | Split Settings into AI and Shortcuts destinations | Accepted |
| 0037 | Resolve project instructions in Electron main | Accepted |
| 0038 | Bridge plugin-declared MCP servers in Electron main | Accepted |
| 0039 | Activate plugin skills and ship plugin authoring as a first-party devkit | Accepted (skill delivery revised by D174) |
| 0040 | Resident plugin services and the inter-plugin message bus | Accepted |
| 0041 | Bound host runtime resources and decouple message persistence | Accepted |
| 0042 | Message-scoped inline review cards | Superseded by 0043 |
| 0043 | Message-owned review snapshots and guarded rollback | Accepted |
| 0044 | Session-bound project instruction preflight | Accepted |
| 0045 | Bash tool inherits the user's login-shell PATH | Accepted (amended D600 / issue #571) |
| 0046 | Categorized process log files | Accepted |
| 0047 | Context usage inspector with exact and estimated token sources | Accepted |
| 0048 | Lazy per-turn tool activation | Accepted |
| 0049 | Recover automatic context compaction failures with a retained tail | Accepted (preflight guard amended by ADR 0282) |
| 0050 | Bounded provider stream recovery and diagnostics | Accepted |
| 0051 | Isolate host RPC stdio from the Tokio blocking pool | Accepted |
| 0052 | Plan operating state and approval boundary | Superseded by 0053 |
| 0053 | Plan checkpoint artifact, approval, and execution epoch | Accepted for implementation |
| 0054 | Selectable command shell catalog and execution identity | Accepted for implementation |
| 0055 | Agent-only mode; Chat becomes an internal read-only profile | Superseded by 0052 / 0053 |
| 0056 | User-owned MCP servers and skills, with a shared activation scope | Accepted |
| 0057 | Permission-gated external paths and portable native search | Accepted for implementation |
| 0058 | Extensions Page Density and Theme-Readable Button Surfaces | Accepted |
| 0059 | Persist Composer Clipboard Files in Session Scratch | Accepted (amended 2026-09-14 for #138: prefer editable clipboard text over generated image copies) |
| 0060 | Archive the Regenerate Branch Under the RPC Lock | Accepted |
| 0061 | Imperceptible background context compaction | Accepted (amends 0030 / 0049; clauses 2/4/6/7/8 amended by 0064) |
| 0062 | Bounded Subagents Behind a Task Tool | Accepted for implementation (maxTurns clause withdrawn by 0253) |
| 0063 | A Managed Surface for Global Subagent Definitions | Accepted for implementation (maxTurns field withdrawn by 0253) |
| 0064 | Codex-parity context compaction | Accepted (amended by D623 / issue #970: 90% inline trigger) |
| 0065 | Smooth shell layout and stream feedback | Accepted for implementation |
| 0066 | Empty home direct bottom composer | Accepted for implementation (amends D111) |
| 0067 | ChatGPT-inspired empty-home starter guidance | Superseded by D206 |
| 0068 | Add a keyboard entry point for the work panel | Accepted for implementation |
| 0069 | Make native-tool path mistakes recoverable | Accepted for implementation |
| 0070 | Separate Composer File-Reference Display from Prompt Serialization | Accepted for implementation |
| 0071 | Adopt an Apple-Inspired Global Corner Hierarchy | Accepted for implementation |
| 0072 | Add a global plugin launcher | Accepted for implementation |
| 0073 | Stage next-turn composer configuration and preserve stopped throughput | Accepted for implementation |
| 0074 | Native notification permission for plugins | Accepted |
| 0075 | Manual reload for development-plugin permission ceilings | Accepted |
| 0076 | Capture the Windows-reserved plugin launcher chord in host-core | Accepted |
| 0077 | Add an interactive multi-question asktool | Accepted for implementation |
| 0078 | Cross-platform tray-resident minimize | Accepted for implementation (amended by 0117, 0123, and tray-session-shortcuts) |
| 0079 | Use VitePress for the bilingual documentation site | Accepted |
| 0080 | Prewarm the global plugin launcher after boot | Accepted |
| 0081 | Host-owned cross-platform plugin panel chrome | Accepted |
| 0082 | Localized and page-adaptive plugin panel chrome | Accepted |
| 0083 | Custom global UI font | Superseded in part by 0298 |
| 0084 | Defer new-task session creation until the first message | Accepted |
| 0085 | Make the work panel shortcut a toggle | Accepted (amends 0068) |
| 0086 | Keep macOS on the regular activation policy | Accepted |
| 0087 | Replace textual Edit matching with a line-anchored, tag-verified contract | Accepted for implementation (amends 0043 / 0069) |
| 0088 | Plugin file access is declared per mode, and deletion is recoverable | Accepted (continues 0008 D009) |
| 0089 | Proactive Background Subagent Delegation | Accepted for implementation |
| 0090 | User-Configurable Close Behavior with Close-to-Tray | Accepted for implementation |
| 0091 | Route provider rate limits through bounded same-turn retry | Accepted (amends 0050) |
| 0092 | Use a plugin-owned surface with a host window-control capsule | Accepted |
| 0093 | Keep a strict 46px plugin drag band with a minimal capsule | Accepted |
| 0094 | Admit one desktop instance per data directory | Accepted |
| custom-storage-location | Custom storage location with cold migration | Accepted |
| 0095 | Sign in with a vendor account instead of pasting an API key | Accepted for implementation |
| 0096 | Flatten the Settings directory and colocate marketplace source configuration | Accepted |
| 0097 | Place global defaults under the AI settings destination | Accepted |
| 0098 | Treat every vendor OAuth account as an independent provider row | Accepted for implementation |
| 0099 | Add titled visual clusters to the Settings directory | Accepted |
| 0100 | Make builtin subagents inherit the parent permission mode | Accepted |
| 0101 | Model-aware image attachment transport | Accepted |
| 0102 | Publisher-owned plugin source with a Git-hosted artifact store | Accepted for implementation (supersedes 0006) |
| 0103 | Compact context usage summary | Accepted (amends 0047) |
| 0104 | Plugin-contributed work panel views | Accepted |
| 0105 | Ship Files as a bundled plugin; keep Review in the host | Superseded by 0241 |
| 0106 | Keep only five core builtin commands | Accepted |
| 0107 | Make current-session task notification suppression atomic | Accepted |
| 0108 | Remove the built-in interactive terminal | Accepted |
| 0109 | Open Files entries with the OS-associated application | Accepted |
| 0110 | Version the plugin panel chrome spacing contract | Accepted |
| 0111 | Reveal Files in the OS File Manager | Accepted |
| 0112 | Agent Capability Management Roots and Settings IA | Accepted |
| 0113 | Persist the New Task empty slot immediately and deduplicate it by message count | Accepted |
| 0114 | Persist Provider Model Bindings and Thinking Configuration | Accepted |
| 0115 | Keep plugin clipboard history host-owned and in memory | Accepted (amended 2026-08-21) |
| 0116 | Add OpenCode Go as a Fixed Provider Preset | Accepted (amended: session routing headers) |
| 0117 | Preserve the Windows taskbar entry for native minimize | Accepted |
| 0118 | Keep queued prompts renderer-owned and stop runs at turn boundaries | Accepted |
| 0119 | Event-Driven Subagent Timeouts | Accepted for implementation (killing policy amended by 0166; maxTurns clauses withdrawn by 0253) |
| 0120 | Bounded Session History Windows | Accepted |
| 0121 | Keep Composer prompt enhancement one-shot and main-owned | Superseded by 0324 |
| 0122 | Reserve native width while the work panel is visible | Superseded by 0151 |
| 0123 | Use native taskbar minimize for Windows/Linux window controls | Accepted |
| 0124 | Bind Temporary Sessions to Their Own Scratch Workspace | Accepted |
| 0125 | Renderer Ships Derived Brand Marks and Minified Output | Accepted |
| 0126 | Agent Capability Pages Are One Workbench That Can Author | Accepted (maxTurns clause withdrawn by 0253) |
| 0127 | Transcript Layout Index and Identity-Based Truncation | Accepted |
| 0128 | Share one bounded budget for transient provider failures | Accepted |
| 0129 | The Subagent Idle Watchdog Bounds Silence, Not Slowness | Amended by 0166 (watchdogs no longer kill) |
| 0130 | Bounded Mounted Transcript Window | Accepted |
| 0131 | Spill Large Composer Text Pastes into Session Scratch | Accepted |
| 0132 | Attribute cross-display window moves to the user | Accepted |
| 0133 | Use models.dev as the primary model catalog with pi-ai fallback | Superseded for chat metadata by models-dev-catalog-authority |
| 0134 | Use models.dev as the sole model metadata source with a local snapshot | Superseded for chat metadata by models-dev-catalog-authority |
| 0135 | Retry unchanged edited prompts | Accepted |
| 0136 | Preserve the active task boundary across context compaction | Accepted |
| 0137 | Retained Session Panes | Accepted (amends 0130 clauses 4/5) |
| 0138 | Subagent Peer Messaging | Superseded by 0147 |
| 0140 | Fold the Three Peer Tools Into One Peer Tool |
Superseded by 0147 |
| 0141 | Make Expanded Sidebar Width User-Resizable | Accepted |
| 0142 | Allow non-loopback HTTP MCP endpoints with explicit risk disclosure | Accepted |
| 0143 | Make Session Titles User-Renamable | Accepted |
| 0144 | Allow User-Configured Thinking-Level Overrides | Accepted |
| 0145 | Publish Native macOS Intel Artifacts | Accepted (amended by D353 / 0191) |
| 0146 | Assign outer and inner work-panel resize ownership by boundary | Superseded by 0151 |
| 0147 | A2A Protocol Stack for Subagent Coordination | Superseded by 0165 |
| 0148 | Explicitly disable application keyboard shortcuts | Accepted |
| 0149 | Calm transcript running-status motion | Accepted |
| 0150 | Inline SVG empty-home agent mark | Superseded by 0152 |
| 0151 | Keep the work panel inside the fixed application window | Accepted |
| 0152 | Eight-frame empty-home mascot GIF | Accepted |
| 0153 | Checkpoint the streaming reply beside the transcript | Accepted |
| 0154 | Reveal the New Task empty destination before host IO | Accepted |
| 0155 | Add Zhipu / Z.AI Named Endpoint Presets | Accepted |
| 0156 | Simplify the Add-Provider Common Path | Accepted |
| 0157 | Main-owned GitHub issue feedback | Accepted |
| 0158 | Keep approval cards focused and remember the selected mode | Accepted |
| 0159 | Generated plugin settings and plugin-local shortcuts | Accepted |
| 0160 | Shipped locale registry and searchable language picker | Accepted (amended by 0182) |
| 0161 | Searchable theme picker matching language | Accepted |
| 0162 | Cross-session A2A addressing | Superseded by 0165 |
| 0163 | Transcript File References Render as Previewable Chips | Accepted |
| 0164 | Parent agents collaborate across conversations | Superseded by 0165 |
| 0165 | Withdraw the A2A / Peer coordination stack | Accepted (supersedes 0147 / 0162 / 0164) |
| 0166 | Parent-judged subagent lifetime | Accepted (amends 0089 / 0119 / 0129; fatal-error path amended by 0189; maxTurns backstop withdrawn by 0253) |
| 0167 | Agent-chosen Bash timeout | Accepted (amends 0054 / D190 / D273) |
| 0168 | Main-owned http(s)/mailto allowlist for openExternal |
Accepted (amends 0109) |
| 0169 | Classified file preview and live workspace events for plugin views | Accepted (amends 0104 / 0105 / 0109 / 0111) |
| 0170 | Ship the work-panel browser as a bundled plugin over public CDP | Accepted (amends 0019 / 0104 / 0105) |
| 0171 | Host-owned completed-turn token history | Accepted (amended by 0173) |
| 0172 | Contained in-chat image display | Accepted (amends fs/read workspace-only clause) |
| 0173 | Plugin-owned token usage dashboard | Accepted (amends 0171) |
| 0174 | Host-owned plugin completions and session context | Accepted (amends D019) |
| 0175 | Explain quiet active turns with live agent activity status | Accepted |
| 0176 | Per-provider User-Agent override | Accepted (amends 0095 / 0156; header map superseded by 0178) |
| 0177 | User-configurable outbound proxy | Accepted |
| 0178 | Per-provider custom HTTP headers | Accepted (amends 0176 / 0095 / 0156) |
| 0179 | Import model configuration from local agent stores | Accepted |
| 0180 | Custom global UI type scale | Accepted |
| 0181 | Main-owned picker capabilities | Accepted |
| 0182 | Traditional Chinese shell locale | Accepted (amends 0160) |
| 0183 | P0 international shell locales | Accepted (amends 0160 / 0182) |
| 0184 | Dock the context usage inspector in the composer toolbar | Accepted (amends 0047 / 0103) |
| 0185 | Korean shell locale | Accepted (amends 0160 / 0183) |
| 0186 | Summarize First-Turn Session Titles with a Main-Owned One-Shot | Superseded by 0323 |
| 0187 | Focus-Aware Native Task Notifications | Accepted (amends 0107 / D117) |
| 0188 | Preserve distinct credentials during model configuration import | Accepted (amends 0179 / D342) |
| 0189 | Parent fatal error aborts leftover delegates | Accepted (amends 0166 / D328) |
| 0190 | Host-gated large-file and dropped-file access | Accepted |
| 0191 | Label Both macOS Release Architectures | Accepted (amends 0145 / D353) |
| 0192 | Alias a configured model and make model ids copyable | Accepted (amends D266) |
| 0193 | Last-request occupancy in the context inspector | Accepted (amends 0047 / 0103 / 0184) |
| 0194 | Optional subagent thinking override | Accepted for implementation |
| 0195 | Viewport-fixed work panel toggle | Accepted (amends 0068 / 0085) |
| 0196 | Show provider retry causes in the active-turn status | Accepted (amends 0175) |
| 0197 | Publish a Windows Portable Package | Accepted (amends 0022 / D126 / D603) |
| 0198 | Name every quiet interval on the live activity row | Accepted (amends 0175 / 0186) |
| 0200 | Host-owned plugin session import and ownership API | Accepted |
| 0201 | Explicit plugin project ids and host-owned session refresh | Accepted |
| 0202 | Expose effective subagent thinking metadata | Accepted |
| 0203 | Local MCP control plane for desktop operations | Accepted (amended by D372) |
| 0204 | Explicit unsigned macOS first-launch helper | Superseded for macOS distribution by 0309 |
| 0205 | Remote Agent Control uses a dedicated Host boundary | Accepted for implementation (post-MVP; amended by D374, D375, and D385) |
| 0206 | Extend provider retries and show bounded progress | Accepted |
| 0207 | Allow three same-path mutation recovery failures | Accepted (amends 0087 / D186) |
| 0208 | Plugin desktop control requires native user consent | Accepted |
| 0209 | PowerShell 7 as a selectable Windows command shell | Accepted (amends 0054 / D190; issue #151 / PR #191) |
| 0210 | Subagent output-token cap | Accepted (extends 0062 / 0063; maxTurns clauses withdrawn by 0253; issue #171 / PR #193) |
| 0211 | Plan-safe plugin actions for read-only inspection | Accepted (amends 0052 / 0053 / 0170; D384) |
| 0212 | Remove diagnostic timing log streams | Accepted (amends 0046 / D183) |
| 0213 | Persist the Host-owned turn queue in host-core | Accepted |
| 0214 | Trusted extensions run in the Agent sidecar | Accepted (v1 implemented; amended by D388 / ADR 0215) |
| 0215 | Agent extensions are a plugin contribution | Accepted (implemented) |
| 0216 | Truncate regenerates under the RPC lock | Accepted (amends 0060 / 0127; issue #211) |
| 0217 | Host stdout sender must not outlive serve | Accepted (amends 0216; issue #211) |
| 0218 | Effective image-input overrides across Composer and transport | Accepted (amends 0101 / D243) |
| 0219 | User-invoked Skills in the composer slash menu | Accepted (amends D123 / D174 / ADR 0024 / ADR 0039) |
| 0220 | Keep Windows work-panel chrome single-purpose | Accepted (amends D154 / D357 / ADR 0195) |
| 0221 | Render canonical thinking-level values without translation | Accepted (amends D369 / ADR 0202) |
| 0222 | Native file and folder drops in the Composer | Accepted (amends ADR 0101 / D397) |
| message-quotes-and-side-chats | Message quotes and renderer-owned side chats | Superseded by 0268 |
| response-annotations | Response annotations as prompt attachments | Superseded by 0268 |
| floating-annotation-index | Floating annotation index and source locations | Superseded by 0268 |
| 0223 | Context Usage Display Preference | Accepted (amends 0184) |
| 0224 | Right panel tab strip and data-driven add menu | Accepted (issue #229) |
| 0225 | Restore deferred tools from effective session context | Accepted (issue #225) |
| 0226 | Reserve chat width for composer controls | Accepted |
| 0227 | Project group manual ordering | Accepted (amended by 0228) |
| 0228 | Long-press the project title to reorder | Accepted (amended by 0229) |
| 0229 | Press-and-move project title reorder | Accepted (amends 0228) |
| 0230 | Skill ships with the Agent core tool set | Accepted (amends D174 / ADR 0048 / ADR 0219; issue #204) |
| 0231 | Ideographic comma opens the composer slash menu | Accepted (amends D123 / D139 / ADR 0024; issue #65) |
| 0232 | Keep macOS DMG opening guidance text-only | Superseded for macOS distribution by 0309 |
| 0233 | Renderer-owned multi-folder project creation | Accepted (amends ADR 0011 / ADR 0016) |
| 0234 | Keep project memory host-owned and path-scoped | Accepted |
| 0235 | Preserve domain facades and enforce architecture budgets | Accepted |
| 0236 | Restore archived projects when session import adds a bound session | Accepted |
| 0237 | Keep Session Orchestration in an Official Plugin | Accepted |
| 0238 | Prioritize MainChat in the three-column shell | Accepted (amends ADR 0226) |
| 0239 | Host-owned session collaboration messages | Accepted (amends ADR 0237 / 0165 / 0213; amended by D446) |
| 0240 | Independent session discovery and navigable collaboration projections | Accepted (amends ADR 0239) |
| 0241 | Ship the file view as a vendored, updatable plugin | Accepted (supersedes ADR 0105; issue #304) |
| 0242 | Delta-only coalesced streaming updates | Accepted (amends 0127 / 0130 / 0149 / 0153; issue #299) |
| 0243 | Skill market public-HTTPS catalog fetch | Accepted (amends 0009; issue #287 / PR #290) |
| 0244 | Bound dependency installation for imported extensions | Accepted |
| 0245 | Harden the MCP market public-network boundary | Accepted |
| 0246 | Opt-in subagent inheritance of the parent tool catalog | Accepted (amends 0062; issue #215 / PR #319) |
| 0247 | Git clone accepts only syntactically public hosts | Accepted (amends home git clone; D416) |
| 0248 | Package theme assets and contributed window backgrounds | Accepted (issue #335) |
| 0249 | ChatGPT-style logical project groups | Accepted (amends ADR 0233 / ADR 0234 / ADR 0016) |
| 0261 | Plugin Appearance Extensions | Accepted for implementation |
| 0251 | Deleting a project removes its owned sessions | Accepted |
| global-sidebar-pins | Show pinned conversations in a global sidebar section | Accepted (amends ADR 0016; issue #306) |
| 0250 | Structured, bounded, and redacted process logs | Accepted for implementation |
| 0262 | Chat file references complete in main and open in the file view | Accepted (amends ADR 0163 / ADR 0241) |
| 0263 | Expose a project's folder roots and complete references across them | Accepted (amends ADR 0262; ADR 0249 §5) |
| 0264 | Host-mediated file actions follow the folder a view is browsing | Accepted (amends ADR 0263; ADR 0249 §5) |
| active-turn-steering | Bind Composer steering to the active durable turn | Accepted (active-turn-steering; issue #164) |
| 0252 | Host turn-end event for plugins | Accepted (D422) |
| 0253 | Remove the subagent turn limit | Accepted (supersedes the maxTurns clauses of 0062 / 0063 / 0119 / 0126 / 0166 / 0210) |
| 0254 | Continue native Pi sessions in their canonical JSONL | Accepted (amends baseline D007; D421) |
| 0257 | Host-mediated real-time capabilities for plugins | Accepted for implementation |
| 0258 | Trusted extension custom agents | Accepted for implementation (D426; issue #401) |
| 0259 | Plugin-declared providers are Host-owned rows | Accepted for implementation (D427) |
| 0255 | Theme assets are absolute paths | Accepted |
| 0256 | Preserve DeepSeek reasoning across context compaction | Accepted |
| 0260 | Plugin runtime theme APIs and sidebar image token | Accepted for implementation |
| 0265 | Priority block and row actions for the Host-owned turn queue | Accepted for implementation (D429; amends ADR 0213 / 0118) |
| session-content-search | Discover sessions by indexed message text | Accepted |
| transcript-reading-ownership | Share renderer history and search views | Accepted |
| 0266 | Plugin fs roots follow the calling session | Accepted (D093) |
| tray-session-shortcuts | Bounded session navigation in the native tray | Accepted (amends ADR 0078; issue #293) |
| 0267 | Plugin labels follow the app language | Accepted (amends 0160; ADR 0182) |
| 0270 | Builtin subagents can be switched off | Accepted for implementation (amends ADR 0063; ADR 0112) |
| 0271 | Rebuild the shared provider transport after repeated unanswered failures | Accepted for implementation (issue #234) |
| 0269 | Move capability documents between the global and project levels | Accepted for implementation (amends ADR 0112) |
| 0268 | Remove quotes, annotations, and side chats | Accepted (supersedes message-quotes-and-side-chats / response-annotations / floating-annotation-index) |
| 0272 | Judge a public-network address on the route the request will dial | Accepted for implementation (amends ADR 0243; issue #419 / PR #473) |
| 0273 | Git checkout as a Create project source | Accepted for implementation (amends ADR 0233; ADR 0247) |
| 0274 | A development plugin is reviewed before it is loaded | Accepted for implementation (amends ADR 0005) |
| 0275 | A floating widget placement for plugin panels | Accepted for implementation (amends ADR 0093 §4; ADR 0092 / ADR 0110) |
| 0276 | Official plugin channel and backup channels | Accepted for implementation (amends ADR 0102; D442) |
| 0277 | Draggable chat content width | Accepted (D439) |
| 0278 | Canonical application ID net.aiuo.pi-desktop |
Accepted (D443; amends D141 / D371 / ADR 0204; issue #524) |
| 0279 | Resumable subagent delegations | Accepted for implementation (amends ADR 0062; ADR 0089; issue #513) |
| 0280 | Plugin-owned UI localizes from the host locale | Accepted (amends ADR 0267; ADR 0159) |
| 0281 | Host speech capability | Accepted for implementation (amends ADR 0257) |
| 0282 | Retry and right-size the compaction summary before retained-tail recovery | Accepted (amends ADR 0049; issue #543) |
| 0283 | Remote MCP server OAuth 2.1 authentication | Accepted |
| 0284 | Headless runtime boundary in packages/host-runtime |
Accepted for implementation (D447; ADR 0205 R2 prerequisite) |
| 0285 | RACP-WS transport in packages/racp |
Accepted for implementation (D448; ADR 0205 R2) |
| 0286 | Remote-host desktop kernel | Accepted for implementation (D449; ADR 0205 R2) |
| 0287 | Host-rendered plugin scenic Settings surfaces | Accepted for implementation |
| 0288 | Package-local theme assets remain available | Accepted for implementation (amends ADR 0255) |
| 0289 | Signed macOS GitHub Releases and in-app update delivery | Accepted (D450; amends ADR 0022 / 0145 / 0191 / 0204 / D078) |
| 0290 | Restore resizable sidebar width with collapse-below-threshold | Accepted (D459; amends ADR 0141 / ADR 0238) |
| 0291 | Remove the speech settings UI | Accepted (amends ADR 0281) |
| 0292 | SSH bootstrap for remote hosts | Accepted for implementation (D453; ADR 0205 R2b, extends ADR 0286) |
| 0293 | SSH password authentication for the remote-host bootstrap | Accepted (D454; amends ADR 0292) |
| 0294 | Project archive is a list + inspector workbench | Accepted (D455; amends D267 / D168) |
| 0295 | Session thinking-parameter omission | Accepted (D456; amends ADR 0194 / ADR 0144 / ADR 0221) |
| 0296 | Signed macOS DMG is a two-icon install | Accepted; ZIP guidance superseded by 0309 (D634) |
| 0297 | Provider-hosted web search as an adapter capability | Accepted |
| 0298 | The app ships no fonts | Accepted (D598; amends ADR 0083 / D232) |
| 0299 | Subagent context budget and delegate compaction | Accepted for implementation (amends ADR 0064; extends ADR 0062 / ADR 0279) |
| 0300 | Host-owned encrypted portable configuration sync | Partially superseded by S3-only configuration backup/sync |
| 0301 | Explicit append-only WebDAV compatibility mode | Superseded by S3-only configuration backup/sync |
| 0302 | A failed compaction keeps the recent window, and an oversized summary is chunked | Accepted for implementation (issue #827; amends ADR 0049 / ADR 0282) |
| 0303 | A skill package carries resources far above the document cap | Accepted for implementation (amends ADR 0300) |
| 0304 | Trust the network endpoints the user enters themselves | Accepted for implementation (amends ADR 0243 / 0245 / 0247; follows ADR 0142 / 0257 / 0300) |
| 0305 | Keep scheduled-task execution settings task-owned | Accepted for implementation (amends scheduled-desktop-automations) |
| 0306 | Brazilian Portuguese (pt-BR) shell locale | Accepted (amends ADR 0160 / 0183 / 0185) |
| 0307 | Sync the API-key service catalog with pi-ai's built-in providers | Accepted (amends ADR 0012 / 0020 / 0116 / 0155) |
| 0308 | Remove the Pull Requests destination and listing tool | Accepted |
| 0309 | Remove bundled macOS first-launch guidance | Accepted (D634; amends D457 / ADR 0296) |
| 0310 | Keep local permission approvals pending until resolved | Accepted for implementation |
| 0311 | Recheck Live Work workspace identity at Host admission | Implemented candidate |
| 0312 | Session-scoped Todo checklist | Accepted for implementation |
| 0317 | Preserve Windows resizing without the native frameless rim | Accepted (D637) |
| 0313 | Default Live Work to the Current Composer Session | Accepted |
| 0315 | A spoken answer selects among an open asktool question's own options | Accepted for implementation (amends the Live Voice Work Session decision path for AskTool only) |
| 0316 | The Live Voice call bar is a docked desktop widget window | Accepted |
| turn-process-and-thinking-display | Turn process and thinking presentation | Accepted |
| provider-display-order | Provider display order | Accepted |
| registry-header-variable-spelling | Remote header variables accept the registry's {name} spelling |
Proposed |
| provider-system-certificates | Desktop sidecar uses OS-trusted certificates | Accepted |
| image-generation-capability | Image generation as a configured Agent capability | Accepted |
| retained-browser-pages-per-tab | Retain a host-owned browser page per resource tab | Accepted |
| 0318 | Publish native Linux arm64 artifacts | Accepted (D638) |
| 0319 | Inline external imports in owning Settings destinations | Accepted (D645) |
| 0320 | Host-owned OAuth lifecycle for plugin providers | Accepted for implementation (D647; amends ADR 0259) |
| 0321 | Pin an acceptable address for mixed direct DNS answers | Accepted (D648; amends ADR 0272) |
| 0322 | Plugin providers appear in Add Service | Accepted for implementation (D650; amends ADR 0259) |
| 0323 | Make Session Title Generation a Standalone Plugin | Accepted (D652, amended by D654; supersedes ADR 0186) |
| 0324 | Make Composer Prompt Enhancement an Optional Plugin | Accepted (D653; supersedes ADR 0121) |
| 0325 | Smooth Windows main-window corner compositing | Proposed (implementation candidate; Windows E2E pending) |
| 0326 | Verified SSH Host installation and daily startup | Accepted for experimental implementation (amends ADR 0292; Linux SSH qualification and publication pending) |
| 0327 | Automatic remote Host version realignment | Accepted for experimental implementation (amends ADR 0326 item 6; Linux SSH qualification pending) |
| 0328 | Open arbitrary local files in the embedded Browser | Accepted (D657; amends ADR 0170; issue #1627) |
| 0329 | Isolate parallel sessions of one project in git worktrees | Accepted (Windows E2E pending) |
| 0330 | Open scoped HTML files in the work-panel Browser from plugins | Accepted |
| 0331 | Plugin session follow and host-owned work-panel reveal | Accepted |
| plugin-fetch-redirect-policy | Host-enforced plugin fetch redirect policy | Accepted (implementation candidate for #1475) |
| local-agent-remote-workspace-tools | Local Agent and model requests for remote workspaces | Accepted for implementation | | 0332 | macOS keeps its translucent window surface with an opaque opt-out | Accepted (D665, amended by D666 and D667; supersedes the macOS vibrancy window backing from D348; issue #1064) |