14 releases 70 tags

RSS feed

• v5.8.2 86b133c074

  Compare

  v5.8.2 Stable

  admin_ekaii released this 2026-08-14 22:57:20 +00:00 | 0 commits to master since this release

  v5.8.2 - new Pandapi app icon

  New logo: a bamboo-jade squircle with an ink panda whose eye patches are < >
  angle brackets and whose nose is a terminal cursor block - it reads as a panda
  and quietly as an open tag awaiting input, fitting for an API-first automation
  launcher. Legible down to 16px. Full icon set (icns / ico / PNG) regenerated
  from the master SVG. No functional changes from v5.8.1.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • Pandapi-macOS-Universal-Portable
    0 downloads · 2026-08-14 22:57:29 +00:00 · 77 MiB
  • Pandapi.app.tar.gz
    2 downloads · 2026-08-14 22:57:38 +00:00 · 34 MiB
  • Pandapi.dmg
    1 download · 2026-08-14 22:57:56 +00:00 · 35 MiB
• v5.8.1 d8028354c9

  Compare

  v5.8.1 Stable

  admin_ekaii released this 2026-08-14 13:26:01 +00:00 | 1 commits to master since this release

  v5.8.1 - Pandapi.app

  The macOS app bundle is now Pandapi.app in Finder. Release assets are named
  Pandapi*.

  The Ekaii-themed default distribution keeps bundle id fr.ekaii.launcher, the
  same signing identity (unchanged Designated Requirement, so the microphone grant
  survives), and the EkaiiLauncher data directory (instances and accounts
  preserved). Only the bundle/display name changed to Pandapi.

  Build the unthemed distribution (own fr.pandapi.launcher id, separate data)
  with PANDAPI_THEME=vanilla ./scripts/build_mac.sh v5.8.1.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • Pandapi-macOS-Universal-Portable
    0 downloads · 2026-08-14 13:26:56 +00:00 · 77 MiB
  • Pandapi.app.tar.gz
    0 downloads · 2026-08-14 13:27:31 +00:00 · 34 MiB
  • Pandapi.dmg
    0 downloads · 2026-08-14 13:28:02 +00:00 · 34 MiB
• v5.8.0 d03208d45a

  Compare

  v5.8.0 Stable

  admin_ekaii released this 2026-08-14 12:52:08 +00:00 | 3 commits to master since this release

  v5.8.0 - Pandapi rebrand + theme system

  The product is now Pandapi; Ekaii is a theme. User-visible strings (window
  title, header, packaging) say Pandapi in every build.

  • Theme-dependent identifiers. The default build carries the Ekaii theme
    and keeps the exact on-disk identifiers the existing install uses (data dir
    EkaiiLauncher, keychain/bundle id fr.ekaii.launcher, socket, window id), so
    upgrading in place loses no instances, accounts, or the macOS microphone grant.
  • Unthemed build. Build the neutral Pandapi distribution, with its own clean
    Pandapi / fr.pandapi.launcher identifiers and a separate data + keyring,
    via cargo build --release --no-default-features or
    PANDAPI_THEME=vanilla ./scripts/build_mac.sh v5.8.0.
  • Env vars. Both PANDAPI_API_* (preferred) and legacy EKAII_API_* are
    accepted in every build.

  No control-API behaviour changes from v5.7.1; this release is the rebrand and the
  theme mechanism. The macOS assets here are the Ekaii-themed default distribution.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • EkaiiLauncher-macOS-Universal-Portable
    0 downloads · 2026-08-14 12:52:36 +00:00 · 77 MiB
  • EkaiiLauncher.app.tar.gz
    0 downloads · 2026-08-14 12:52:46 +00:00 · 34 MiB
  • EkaiiLauncher.dmg
    0 downloads · 2026-08-14 12:53:03 +00:00 · 34 MiB
• v5.7.1 5aa6965576

  Compare

  v5.7.1 Stable

  admin_ekaii released this 2026-08-14 00:52:48 +00:00 | 5 commits to master since this release

  v5.7.1 — complete api.describe for full self-discovery

  Patch release on top of v5.7.0. api.describe now enumerates the entire
  surface so a human or an AI agent can discover and drive everything from the
  registry alone, without reading source:

  • 110 commands across 17 groups (was 77): adds the dev-loop, IaC/state,
    streamer/management, worlds, hooks, and network/auth waves that were missing.
  • 19 event types (adds game.exited).
  • A machine-readable security block: scope meanings (read/write/accounts/
    settings/*, write implies read), the full read_only and local_only
    command sets, the pre-auth commands, the execution-vector fields denied over
    the network, the EKAII_API_* network-config env vars, and the structured
    error codes.

  No behavioural change to any command; this only completes the self-description.
  Full reference remains in docs/API.md.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • EkaiiLauncher-macOS-Universal-Portable
    1 download · 2026-08-14 00:53:18 +00:00 · 77 MiB
  • EkaiiLauncher.app.tar.gz
    1 download · 2026-08-14 00:53:24 +00:00 · 34 MiB
  • EkaiiLauncher.dmg
    1 download · 2026-08-14 00:53:30 +00:00 · 34 MiB
• v5.7.0 792146977c

  Compare

  v5.7.0 Stable

  admin_ekaii released this 2026-08-14 00:34:49 +00:00 | 6 commits to master since this release

  v5.7.0 — full control-API catalog + network mode + security hardening

  Completes the control-API feature catalog and adds an opt-in authenticated
  network transport, then closes every confirmed finding from an adversarial
  security review of the new surface.

  New command waves

  • Dev-loop: instances.crash_reports, diagnostics.analyze, logs.tail, instances.diff, content.dev_link, content.bisect_start/bisect_step.
  • IaC / state: state.export, instances.manifest, content.resolve, launcher.plan, instances.snapshot/restore/snapshots.
  • Streamer / management: servers.status, instances.sessions/screenshots, worlds.backup/restore/duplicate/delete, servers.set, hooks.register/list/delete, and the game.exited event.

  Network mode (opt-in)

  • TCP + a hand-rolled RFC6455 WebSocket transport on the same port (EKAII_API_TCP=host:port, EKAII_API_WS=1).
  • Capability-scoped bearer tokens (auth.mint_token — local-socket only — plus auth.bearer/prove/list_tokens/revoke_token/whoami, net.status). Scopes: read/write/accounts/settings/*, with write implying read.
  • Path jail (EKAII_API_PATH_ALLOW) confines every path parameter; local socket / named-pipe connections stay fully trusted and unrestricted.

  Security hardening (adversarial review: 19 findings, all fixed)

  • Execution-vector fields (wrapper_command, linux_wrapper, system_libraries, jvm_binary, jvm_flags) are refused on any network command, closing an RCE laundered through instances.ensure.
  • Per-command read-only scope allowlist (was per-domain): a read token can no longer register webhooks, self-update, quit, or trigger outbound fetches.
  • launcher.quit/install_update, hooks.register/delete, and servers.status are local-socket only.
  • Bounded/off-thread file reads and image decoding; snapshot/restore and world restore are now atomic (stage-then-swap) and report errors; WebSocket handshake is permit-gated and time-bounded.

  Structured error codes now include unauthorized, forbidden, and path_denied. See docs/API.md.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • EkaiiLauncher-macOS-Universal-Portable
    1 download · 2026-08-14 00:35:57 +00:00 · 77 MiB
  • EkaiiLauncher.app.tar.gz
    1 download · 2026-08-14 00:36:01 +00:00 · 34 MiB
  • EkaiiLauncher.dmg
    0 downloads · 2026-08-14 00:36:04 +00:00 · 34 MiB
• v5.6.0 9463b088e0

  Compare

  v5.6.0 Stable

  admin_ekaii released this 2026-08-13 22:43:16 +00:00 | 12 commits to master since this release

  Expanded control API. Event stream v2 (per-event seq, since_seq replay, server-side filters, pushed op lifecycle), structured errors {code,message,retryable}, headless mode (--api-only), multi-transport (unix socket + Windows named pipe), semantic game events (game.ready/crash/chat/server_connected) + game.output decouple, content.sync/ensure/clone, wait wrappers, api.describe, bookmarks, status.summary, observability (backend.ping, metrics.instances/storage/prometheus, health.check). Hardened over a 33-agent adversarial review. See docs/api-feature-catalog.html for the full roadmap.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • EkaiiLauncher-macOS-Universal-Portable
    1 download · 2026-08-13 22:59:28 +00:00 · 75 MiB
  • EkaiiLauncher.app.tar.gz
    1 download · 2026-08-13 22:58:48 +00:00 · 33 MiB
  • EkaiiLauncher.dmg
    1 download · 2026-08-13 22:57:55 +00:00 · 33 MiB
• v5.5.0 decafd286b

  Compare

  v5.5.0 Stable

  admin_ekaii released this 2026-08-13 19:42:48 +00:00 | 20 commits to master since this release

  Control API completed to 100% of the internal message bus: content search (Modrinth/CurseForge), live game.output stream, skins/capes, export/import, launcher self-update, and every remaining instance/content/account operation. Hardened over two adversarial-review rounds (no message-loop blocking on launch/login/metadata, deterministic async ops, input caps). See docs/API.md.

  Upstream proposal opened: Moulberry/PandoraLauncher#624.

  macOS build only (mac CI runner offline).

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • EkaiiLauncher-macOS-Universal-Portable
    1 download · 2026-08-13 19:52:30 +00:00 · 74 MiB
  • EkaiiLauncher.app.tar.gz
    1 download · 2026-08-13 19:51:23 +00:00 · 33 MiB
  • EkaiiLauncher.dmg
    1 download · 2026-08-13 19:51:44 +00:00 · 33 MiB
• v5.4.0 4a48c97a93

  Compare

  v5.4.0 Stable

  admin_ekaii released this 2026-08-13 16:51:30 +00:00 | 24 commits to master since this release

  Major release: upstream PandoraLauncher merge (63 commits) + full external control API.

  Control API: the launcher is now fully controllable over a local NDJSON socket (<launcher_dir>/api.sock) and a --api CLI client: instances, content, accounts, sync, settings, metadata, async operations and an event stream. See docs/API.md and docs/CONTROL-ARCHITECTURE.md.

  Upstream merge: Forge launch fixes (1.13/1.16.5/<1.18), CurseForge API key, more export options, skins/account UX, language switcher + RU/HU/DE/SV, Linux sandbox fixes, panic fixes. Version bumped to 5.4.0 to end the tag collision with upstream 5.3.x.

  macOS: one-time microphone permission and proper bundle codesigning (carried from 5.3.6). Signed .app; the TCC grant now survives launches and updates.

  Hardening (adversarial review): launch and login no longer block the message loop; strict loader parsing; atomic instances.set; request-size and connection caps; self-update/branding env-var fixes.

  macOS build only in this release (mac CI runner offline; Linux/Windows follow via CI).

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • EkaiiLauncher-macOS-Universal-Portable
    1 download · 2026-08-13 16:59:09 +00:00 · 74 MiB
  • EkaiiLauncher.app.tar.gz
    1 download · 2026-08-13 16:59:28 +00:00 · 33 MiB
  • EkaiiLauncher.dmg
    1 download · 2026-08-13 16:59:33 +00:00 · 33 MiB
• v5.3.6 e410285d78

  Compare

  v5.3.6 Stable

  admin_ekaii released this 2026-08-13 15:29:17 +00:00 | 91 commits to master since this release

  macOS: one-time microphone permission.

  • The launcher now pre-requests microphone access at startup: one grant covers all microphones and every game instance.
  • The .app bundle and portable binary are now properly codesigned with a stable identity. This fixes the root cause of the microphone prompt reappearing at every game launch (the unsigned bundle could never be re-validated by tccd), and the grant now survives launcher updates.
  • build: fix stale-dmg rename in build_mac.sh.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • EkaiiLauncher-macOS-Universal-Portable
    2 downloads · 2026-08-13 15:30:19 +00:00 · 68 MiB
  • EkaiiLauncher.app.tar.gz
    1 download · 2026-08-13 15:30:36 +00:00 · 31 MiB
  • EkaiiLauncher.dmg
    0 downloads · 2026-08-13 15:30:51 +00:00 · 31 MiB
• v5.3.4 0445dd5302

  Compare

  v5.3.4 Stable

  exo released this 2026-05-23 19:13:38 +00:00 | 96 commits to master since this release

  Automated release.

  Downloads

  • Source code (ZIP)
    1 download
  • Source code (TAR.GZ)
    1 download

  ---

  • EkaiiLauncher-Linux-x86_64-Portable
    31 downloads · 2026-05-23 17:43:18 +00:00 · 52 MiB
  • EkaiiLauncher-Linux-x86_64-Portable
    17 downloads · 2026-05-23 18:12:44 +00:00 · 52 MiB
  • EkaiiLauncher-Linux-x86_64_5.3.4_amd64.deb
    30 downloads · 2026-05-23 18:12:42 +00:00 · 22 MiB
  • EkaiiLauncher-Linux-x86_64_5.3.4_amd64.deb
    17 downloads · 2026-05-23 17:43:20 +00:00 · 22 MiB
  • EkaiiLauncher-Windows-x86_64-Portable.exe
    27 downloads · 2026-05-23 17:43:24 +00:00 · 43 MiB
  • EkaiiLauncher-Windows-x86_64-Portable.exe
    15 downloads · 2026-05-23 18:12:46 +00:00 · 43 MiB
  • EkaiiLauncher-Windows-x86_64-Setup.exe
    29 downloads · 2026-05-23 17:43:25 +00:00 · 13 MiB
  • EkaiiLauncher-Windows-x86_64-Setup.exe
    34 downloads · 2026-05-23 18:12:47 +00:00 · 13 MiB
  • EkaiiLauncher-macOS-Universal-Portable
    30 downloads · 2026-05-23 22:50:27 +00:00 · 68 MiB
  • EkaiiLauncher.app.tar.gz
    19 downloads · 2026-05-23 22:50:29 +00:00 · 31 MiB
  • EkaiiLauncher.dmg
    29 downloads · 2026-05-23 22:50:33 +00:00 · 95 MiB