Naivi Desktop · Public Beta 4.0.1

Naivi — A Cygnus Automation Project

By SanGuai Culture Studio / SanGuai Inc. HK

An experimental desktop workspace for collaborating agents. Connect your own compatible models, work with local projects, and inspect actual handoffs and results. Agents are orchestration roles, not separately trained foundation models.

Website and Windows download ↗ · Source ↗

Install

Extract the entire Windows x64 ZIP and open Naivi.exe. Keep its DLLs and resources directory together. This beta is not code-signed. Replacing the application folder does not remove conversations stored in the application data directory.

Choose English, Hong Kong Traditional Chinese or Simplified Chinese, review the terms, then sign in or continue as a guest. Gmail sign-in is temporarily unavailable due to studio SMTP delivery limitations. Guests can use local chats, models and projects. Remote tasks and PHI Snap sharing require sign-in.

In Settings → Models, add your own endpoint, model ID and API key. Include /v1 in the base URL when required by your provider. Naivi appends /chat/completions for OpenAI-compatible endpoints or /messages for Anthropic. A display name does not change the actual API model ID. Use Test connection to check compatibility.

Select two to four different models. Single-model role testing is available explicitly in advanced settings. The studio does not distribute API credentials.

What's in 4.0

• Optional sign-in; local guest storage is separate from signed-in profiles.
• Unlimited-by-Naivi output by default, or a custom per-call token cap. Provider limits still apply. Anthropic requires max_tokens: Naivi uses model metadata or the supported capacity you enter, never an arbitrary hidden fallback. Partial output is retained and can be continued.
• Settings retain a draft across tabs. Reading size and fonts preview immediately; Save applies changes and closing discards the draft.
• Focused, comfortable and wide reading layouts; black/paper/system themes; five accents and local custom CSS.
• Collapsible sidebars, growing input, live-edge scrolling and notifications visible above settings.
• Right-click a recent conversation, or press Shift+F10, to share, rename, export or delete.
• Existing or empty project folders, direct file creation/editing, reviewed code proposals, CodeWiki snapshots and conflict-aware rollback. Open projects in VS Code or File Explorer.
• Encrypted, revocable 72-hour remote tasks for signed-in users, with completion emails.

Agents and workflows

Phiel frames and synthesizes tasks. Velo handles code proposals and writing; literary requests receive a distilled craft reference, not copied stories or factual authority. Avis activates for images through a vision-capable provider. Niv selects relevant preferences and briefs Phiel after the main draft. Aeri remains planned.

Minimal uses a draft, one review and synthesis without Niv. Standard adds scope and optional personalization. Complex adds more selected-model reviews. Model agreement does not prove correctness. Records show explicit work summaries and results, not private chain-of-thought. Web search is opt-in through your own Tavily key. Assisted search uses one selected model, with no other agents, reviews or Niv.

Remote tasks

1. Sign in and select models and, optionally, a project folder.
2. Open Settings → Account & help → Remote tasks.
3. Read the local authorization. A project task permits automatic project edits and explicit terminal commands. Save the separate KEY when it is shown; it is not placed in the URL.
4. Keep Naivi running and the computer awake. Visit the link from another device and enter the KEY to view outputs and submit prompts.
5. Prefix a command with /terminal to run it explicitly. Windows uses PowerShell with your account permissions, not a sandbox. The selected project is the working directory, but commands can access other locations allowed to your account. Commands time out after two minutes; termination cannot undo external side effects.
6. Each completed prompt or command emails a summary to the signed-in address. The portal reports whether the mail service accepted it; inbox delivery depends on the recipient provider.
7. Revoke tasks from the desktop. Links expire after 72 hours. Queued commands must start within 10 minutes. Commands are not automatically re-executed after a crash.

The 256-bit KEY is generated locally and stored in the OS-encrypted vault. The relay receives a hash of a derived access capability, not the KEY. Prompts and outputs use AES-256-GCM with task-bound authenticated data. The local app checks every command and records used identifiers. A separate device capability polls and reports results. Email summaries are plaintext to the studio mail service, not end-to-end encrypted. See SECURITY.md ↗.

Develop

Use Node.js 24.3 or newer and npm. Electron supplies SQLite for the desktop app.

npm ci
npm test
npm start
npm run package

The executable is built in dist/4.0.0/Naivi-win32-x64/. Tests, reports and developer scripts are excluded from the app archive. src/core contains providers, routing, orchestration, data, projects and remote encryption. src/renderer contains the interface and locale copy. server/ contains optional relay integration and portal sources.

Never commit application profiles, .env, API keys, signing keys or production data. Live model tests require your own credentials; ordinary tests do not make paid model calls.

License

Source available under PolyForm Noncommercial License 1.0.0. Copyright 2026 SanGuai Culture Studio / SanGuai Inc. HK. Commercial use requires a separate written license from the studio. This is not MIT or unrestricted open-source licensing. Third-party dependencies and fonts retain their own licenses. See LICENSE ↗ and NOTICE ↗.

Web search in 4.0.1

Open Settings → Search, save your own Tavily API key, then test the saved connection. Tavily credits are billed separately from model tokens. Start with your own developer account; current quotas and pricing are set by Tavily. Naivi does not bundle the studio key.

Choose Assisted search below the composer and select exactly one model. That model prepares public queries, Tavily retrieves evidence, then the same model answers. There are no additional agents, reviews, Niv or project edits. In agent collaboration, choose Off, Auto or On for search.

Set 1–4 queries and 1–10 credits per answer. Source cards distinguish page excerpts from search snippets and include read timestamps. Do not submit secrets for public search. Web text cannot authorize computer operations.

Settings → Usage shows provider-reported token counts and coverage for retained local history. Missing reports make totals incomplete. Search credits are separate. Rich output supports common LaTeX, tables, foldable highlighted code and sanitized, sandboxed SVG.

Agent companions can be hidden in Appearance. The right-hand header stays fixed while its work records scroll independently. A search setup announcement appears once when first entering the 4.0.1 workspace.

Terms of use · 2026-10-18.4

• Naivi is experimental. AI may produce false information, fabricated references or unsafe code. Multiple-model review does not guarantee correctness. Verify important outputs.
• Only submit information you are entitled to process. Respect applicable laws and third-party rights. Do not impersonate others or perform unauthorized operations.
• Your selected prompts, context, sources, images and project text are sent to configured providers or gateways, under their policies and prices. Stored memory is provided only to relevant final personalization stages.
• Conversations and project history are stored locally and are not themselves encrypted. Provider keys and session credentials use OS encryption. An unlocked or compromised account can expose data.
• Review changes, test execution and sharing before confirming. Remote task authorization allows automatic project changes and explicit terminal commands with your account permissions. Terminal access is not sandboxed. Rollback cannot undo every external side effect.
• Snaps expire after 24 hours or earlier revocation. Saved copies cannot be withdrawn. Remote tasks expire after 72 hours; completion summaries pass through the studio SMTP service.
• Version 4.0 source is available under PolyForm Noncommercial License 1.0.0. Commercial use requires separate written permission. Third-party licenses still apply. Studio names and logos do not authorize impersonation. These terms do not limit rights that cannot legally be excluded.

For the studio website policies, visit PHI. This handbook explains product behavior; it is not individual legal advice.