Free coding agent · free AI models · sponsor-funded

Code Beautifully.

The most beautiful coding editor ever made — with a serious agent inside, and the AI runs on us. No API key, no subscription, no per-token bill: sponsors cover the inference so you never do. Read-only by default, every write gated behind your approval. That's what Code Freely means.

Free for developers — that's the point.

$brew install picasso waitlistfree editor · free AI · sponsored tokens
picasso-core/Sources/ App.swift
Read-only
P
Picasso
New thread
Search
Diff review1
Projects
picasso-core
picasso-ui
harmonic-keyboard
App.swift
GuardChain.swift
This file is open read-only. Picasso edits are gated — request write access to make changes.
12345678910111213141516
import SwiftUI
 
// Entry point for the Picasso desktop shell.
@main
struct PicassoApp: App {
@StateObject private var store = RunStore()
 
var body: some Scene {
WindowGroup {
StudioView()
.environmentObject(store)
.frame(minWidth: 880, minHeight: 560)
}
.windowStyle(.hiddenTitleBar)
}
}
SwiftUTF-8Ln 5, Col 1read-onlyspaces: 2
Assistant
Ask about App.swift — explain, refactor, or generate a patch. Picasso stays read-only until you approve a write.
Picasso
This file wires the SwiftUI App entry point. Lines 5–9 build the window group; the run store is injected as an environment object.
Explain selection Suggest a refactor Find a bug
Ask Picasso about this file…
Approval queue 1 pending
- let hash = bcrypt.hash(pw)
+ let hash = argon2id.hash(pw)
RejectRevise✓ Approve
0%
of your AI token bill, ever. Sponsors cover the inference, not you.
no key
no subscription, no credit card. One command and you're coding.
100%
of writes route through approvals by default. Loosening that is your call.
/goal
autonomous work with criteria, budget, approvals, and replay evidence.
How Picasso is free

The AI runs on us.

Every other agent bills you for the model — a subscription, your own API keys, or a meter ticking on every token. Picasso doesn't. Sponsors fund the inference, so you get frontier models inside a beautiful editor for exactly zero.

Bring nothing.

No API key, no subscription, no card. Install in one command and the agent is already wired to real models.

Sponsors cover the tokens.

Inference is paid for by clearly disclosed sponsors — honest, labeled placements, never your wallet. That's what funds the free tier.

Walled off from your work.

Sponsors never see your code and never influence a single token of model output. Your code is never training data or sponsor inventory, and session telemetry and feedback uploads are off by default.

Prefer your own? Drop in an API key or run local models anytime — the free path is a choice, not a cage.

Example month Sponsor-funded
ModelFrontier · 1M ctx
Tokens in4.21M
Tokens out1.08M
Agent requests1,284
Your billstandard API billing
free
covered by sponsor
THE TRUST LOOP

Save routes through
approvals. Always.

You save
The write is queued in the editor — held, not applied. Nothing has touched disk.
It enters the queue
The exact diff lands in the approval queue. Reject, revise, or approve — your call. In Auto mode a reviewer checks routine actions first, and when it sends one back the card says why.
Written to disk
Only on approval is the change written — and recorded, with replay evidence.
picasso-core/Sources/ App.swift
Read-only
App.swift
GuardChain.swift
This file is open read-only. Picasso edits are gated — request write access to make changes.
12345678910111213141516
import SwiftUI
 
// Entry point for the Picasso desktop shell.
@main
struct PicassoApp: App {
@StateObject private var store = RunStore()
 
var body: some Scene {
WindowGroup {
StudioView()
.environmentObject(store)
.frame(minWidth: 880, minHeight: 560)
}
.windowStyle(.hiddenTitleBar)
}
}
SwiftUTF-8Ln 5, Col 1read-onlyspaces: 2
Assistant
Ask about App.swift — explain, refactor, or generate a patch. Picasso stays read-only until you approve a write.
Picasso
This file wires the SwiftUI App entry point. Lines 5–9 build the window group; the run store is injected as an environment object.
Explain selection Suggest a refactor Find a bug
Ask Picasso about this file…
Approval queue 1 pending
- let hash = bcrypt.hash(pw)
+ let hash = argon2id.hash(pw)
RejectRevise✓ Approve
Memory

The agent does not
start cold.

Picasso retrieves relevant memory before planning, injects it into context before it acts, and writes back what mattered after the run — facts, style, decisions, failures.

Runtime wired. CLI, TUI, and Mac runs retrieve and write memory.
Retrieval only. Your code is never training data or sponsor inventory.
User-visible. Inspect, edit, pin, export, delete, or clear records.
Failure aware. Repeated mistakes become memories the next run avoids.
What I remember about this codebasefilter: argon2
Facts34 entries · workspace-bound
auth module owns session tokens, JWT verification, 2FA.
Drizzle ORM over Postgres. Migrations in migrations/.
Decisions9 entries · workspace-bound
Chose argon2id over bcrypt. Memory-hardness required by audit.
Bridge bcrypt verifies for 90 days, then auto-migrate on next login.
Style18 entries · account-wide
async/await preferred. Reject .then() chains.
/goal

Give long work
a finish line.

Hand Picasso an objective, completion criteria, permissions, and a budget. It plans, acts, observes, reflects, repairs failures, and keeps going until the work is done or a boundary is reached.

Deterministic criteria. It checks its own completion contract before calling anything done.
Independent audit. A separate pass verifies the result against the goal.
Continues anywhere. Start a goal in the terminal, watch it finish on the Mac app.
migrate-to-argon2idrunning · 3h 22m
Migrate auth module to argon2id, tests green.
BUDGET
37% of cap
STEPS
287 / 1000
DONE
62% 2 / 3
bash · pnpm test src/auth/session.test.ts
✓ verify · accepts current session 8ms
✓ hash · argon2id round-trip 112ms
· running migration compat suite
The agent loop

Plan. Act. Observe. Reflect.

The agent loop is visible by design — across a full-black stream-first CLI and a three-zone macOS workspace with 1M-token context windows, auto-diagnostics on every edit, and isolated git worktrees per thread.

Read-only plan mode

Architecture, entry points, data flow, risks, and verification — grounded in your real workspace, with writes blocked until you approve execution.

Auto-diagnostics in the edit loop

Syntax and typecheck feedback attaches directly to file edits in TypeScript, JavaScript, Python, JSON, and Swift so the agent repairs issues in the same turn.

Git worktree isolation per thread

Use /worktree in the CLI or the Worktree pill in the Mac composer so parallel threads never step on each other's files and merge cleanly back to your branch.

Three-zone macOS workspace & stream-first CLI

Multi-thread sidebar with unread completion indicators and native notifications, instant runs without project setup friction, inline syntax-highlighted diffs, a full-black stream-first CLI with Ctrl+P to jump to any turn, and an inspector with Reasoning, Changes and Agents tabs.

Local branch & diff review

Run /diff main and /review-branch to inspect branch changes, surface regressions, and review syntax-highlighted diffs before opening a pull request.

Agent teams that ask like you do

Named and forked workers, agent teams with a shared task board, MCP client/server tools and hooks. Delegated work follows your approval settings, and /model and /provider switch in one step.

Every agent in view.

The team, its task board and its shells sit beside the thread. When Auto review sends a call back, the approval card says why.

Task rows are indented by what they depend on, and each state has its own shape, so the board reads without colour.
In the terminal, ctrl-P jumps to any turn. Type to narrow by prompt or reply.
Word, Excel and PowerPoint files open as PDF inside the thread.
On an attached engine, pick the folder on that engine, not on this Mac.

Recently shipped.

What changed in the Mac app and the terminal.

  • Mac

    Watch the team work.

    When Picasso runs a team of agents, the inspector shows the roster and a task board layered by dependency, with each task's owner and whether it is ready or waiting on others.

    Learn more
  • Mac

    See the shells the agent opened.

    Terminals the agent starts are listed read-only in the inspector with their state and folder, so no shell runs out of sight.

    Learn more
  • Mac

    Auto mode, with a reason.

    In Auto, a second model reviews routine actions. When it sends one back to you, the approval card says why.

    Learn more
  • CLI + Mac

    Subagents ask like you do.

    Work delegated to a subagent now follows your approval settings instead of being refused behind the scenes.

    Learn more
  • Mac

    Open the document, not the diff.

    PDFs, images and Word, Excel and PowerPoint files preview inside the thread. Office files are converted to PDF for viewing.

    Learn more
  • Mac

    Pick a folder on another machine.

    Attached to a remote engine, you choose the working folder on that machine, and create one if you need it, instead of typing a path.

    Learn more
  • Mac

    Questions that keep time.

    When the agent asks and will carry on without you, the card counts down and pauses while you write your answer.

    Learn more
  • Mac

    Tell it what helped.

    Mark any reply Helpful or Not helpful from the thread.

    Learn more
  • TUI

    Jump to any turn.

    Press Ctrl+P, type to filter, and land on the turn you want in a long session.

    Learn more
  • TUI

    A fuller activity line.

    Permission changes, folder changes, hook results, goal updates and preset changes show up as quiet notes in the stream, and parallel code cells show live while they run.

    Learn more
  • Mac

    Personas that shape the reply.

    Concise, Mentor and Reviewer now change how Picasso answers.

    Learn more
  • CLI + Mac

    Nothing phones home by default.

    The engine's own session telemetry and feedback uploads are off on both surfaces. Tests capture every outbound connection during a turn and a feedback action to prove it.

    Learn more

On launch, the Mac app checks its bundled engine against the manifest it shipped with and won't start if anything has changed.

Compare

The important state
stays visible.

1M context windows, edit-loop auto-diagnostics, git worktree isolation, local branch review, runtime memory, and autonomous goals — inspectable in the CLI and the three-zone Mac app.

FeatureClaude CodeCodex CLICursorDevinPicasso
Context windowAnthropicOpenAIModel-dependentHostedUp to 1M ctx
Read-only plan modeYesYesYesYesYes
Auto-diagnostics on editsPartialNoYesHostedTS · JS · Py · JSON · Swift
Git worktree isolationFlag / manualPartialPartialCloud VM/worktree + Mac Worktree pill
Local branch reviewPromptedYesPartialPR-based/diff main · /review-branch
SubagentsYesLimitedYesYesNamed + fork
Runtime memoryProject filesNoPartialWikiRetrieve · inject · write back
Autonomous /goalAnthropicOpenAINoYesAll routes
Replay evidencePartialPartialNoHostedCLI · TUI · Mac
Free pathTrialLimitedTrialCreditsSponsor-supported
Tool subscriptionClaude plansChatGPT plans$20/moFrom $20/mo$0
Install

Four ways in. Pick yours.

Managed inference, a supported provider subscription, your own API keys, or local models through Ollama and vLLM. macOS, Linux, and Windows.

One binary.
No subscription required.

Zero account to start — bring your own keys, or unlock managed inference through honestly disclosed sponsors.

macOS 13+ · Linux x64/arm64 · Windows 11 · ~12MB · no telemetry by default
brewbrew install picasso
npmnpm i -g @picasso/cli
pnpmpnpm add -g @picasso/cli
windowswinget install picasso.picasso

Install opens the day the doors do.

Code Freely.
Code Beautifully.

Picasso for Mac is almost here — a coding agent that looks the way serious tools should, and costs what creative freedom should: nothing. Be first on the canvas.

Free for developers — that's the point.