Changelog

flock is free and open source. The source now lives at github.com/theflock-labs/flock-code under Apache-2.0. Every paid tier is gone: no workspace caps, no agent caps, no plan tab, no checkout. What was behind the Individual tier, including graph insights, is open to everyone. Signing in with Google stays, because friends, presence, and shared graphs need an identity; nothing about it costs anything. If a build older than this one still shows a cap, the backend has already lifted it, and this update removes the surfaces that asked.

An agent's first frame fills its pane. A new agent could come up drawn for a terminal a quarter the size of its pane, hugging the top-left corner until a window resize snapped it out of it. The pane's size was never wrong; the agent just never heard about it. The size corrections land in the agent's first few hundred milliseconds, before its runtime is listening for them, and a signal delivered to a process that is not listening yet is simply gone. The agent then laid out its splash and login screens for the size it read at birth and, redrawing only what it believes changed, never revisited them. flock now hands every agent one unmissable size change at the moment it demonstrably starts painting, which is the earliest a signal is guaranteed a listener. Resizing the window to wake a pane up is over.

The window moves when you drag the titlebar. The drag handle had been removed from every surface that carries one, the titlebar, both popped-out window bars, and the sign-in screen, leaving a CSS rule that only does anything on Windows. On a Mac there was nothing left to drag the window by. All four take the mouse again.

An agent's text no longer comes back scrambled after a workspace switch. A background workspace still resizes with the window, so its terminals rewrapped their contents to a size the agent was never told about. Coming back corrected the size but not the screen, and the agent, which redraws only what it thinks changed, left the mess where it was. That is why resizing the window "fixed" it. A pane that moved while it was away now asks its agent for a full repaint the moment you return, and one that did not costs nothing.

The chrome has a type scale. There were twenty-four text sizes in the app, including half-pixel steps, and eighty-five percent of them sat under 12.5px. Everything now snaps to one of nine steps, the smallest text is 10px instead of 7px, and semibold is reserved for the things that earn it rather than being the default weight. Denser panels are easier to read and the eye has somewhere to land first.

Icons are drawn, not typed. Thirty-one marks, ticks, crosses, status dots, the branch fork, the refresh arrow, were Unicode characters that neither of flock's own typefaces contains, so macOS substituted them from whichever font happened to have each one. Two marks sitting side by side in the same row came from two different typefaces. They are proper icons now, and the arrows that belong in a sentence render in flock's own type instead of a substitute.

flock opens faster. The startup bundle is down by about 40%: the settings and pull-request screens now load when you open them rather than before the first frame, which also takes the charting library out of a launch that has no charts in it. Switching workspaces and typing in a busy grid are lighter too, the sidebar and the pane grid were redrawing on every state change in the app and no longer do.

The notifications pill is centred again when the sidebar is collapsed.

0.7.41 put the lockup on the traffic-light row by overlaying the titlebar, then told that overlay to ignore the mouse so the rail could still be clicked. The empty strip above the panes ate every drag and the top-edge resize with it. The bar now starts after the sidebar and takes the mouse again. The sky strip is still a drag handle.

Quitting used to wipe any workspace you had not focused this session: flock wrote the empty shell it was showing over the only copy of that workspace's agents. It no longer writes until the workspace has actually come back. A budget change on a workspace you have not opened patches the saved copy instead of replacing it. If saved state cannot be read, flock says so and leaves it alone. If none of the saved agents could start (Docker is down, typically), the saved layout stays put, and work you do after one does start is saved again.

A quit no longer leaves a secure agent running in the background. Force-quit used to stop the window and leave the jail, so the next launch started a second agent on the same files. flock now removes leftovers whose owner is gone, and takes its own with it on a clean quit.

A secure agent no longer takes its identity or launch command from the window. Those used to be overridable from the interface, which is the wrong place for them. They are chosen on the host now. flock also uses the data directory it already resolved, so a leftover name under the old home does not silently skip the network restrictions you turned on.

Popping out a borrowed agent is one terminal, not two. The tile left behind in the other workspace could still size the agent, which is the duplicated splash and wrapped line-tails. Only the popped-out window drives it now, and the host/jailed chips follow the agent, not the tab you borrowed it into.

Nightfall and Graphite open on a strip of night sky. The goose and the word sit on the traffic-light row, then the rail is itself again. Daybreak and High Contrast stay plain, so ink stays ink.

A grok chip on the status bar. Today's tokens from your local grok sessions, same shape as the opencode chip. Click it for the breakdown. Conversation fill only appears when the last turn actually fits the window, so a running total cannot read as six thousand percent of a limit grok does not publish.

Smaller ones. A Settings change to the graph address reaches new agents instead of the previous database. A prompt sent as an agent starts waits until it is listening, rather than landing in the login shell. Watching a friend's pane no longer resizes theirs from yours. The profile row and the status bar stay at the bottom of the window when the header sits under the traffic lights.

Pane text is sized apart from everything around it. Text size used to be one setting doing two jobs: making an agent's output readable inflated the sidebar and the dialogs with it, and the control that did it was labelled "Terminal text size" while it scaled the whole shell. There are two now, in Settings → Appearance. Agent pane text size steps a point at a time and applies to every terminal live, including a popped-out one; app text size still moves the chrome in four notches. ⌘+ and ⌘- go to the panes, that is the text you spend the day reading, and ⌥⌘+ / ⌥⌘- move the app around them. Whatever size your panes are today is the size they stay at; the two only part company once you move one.

grok runs as an agent. xAI's grok gets a pane, with the status pill, prompt counts, session records and a context meter of its own, the meter starts an unfamiliar model at the smallest window and widens once it has measured, rather than promising room that may not be there. Its hooks install themselves when grok is on the machine, into a file of flock's own rather than one you maintain; Settings → Integrations turns them back off.

Two things a grok pane does not have yet, each for a reason worth stating: secure mode does not cover it, and its spend is not attributed, xAI prices by prompt length, and a flat rate would understate a long turn by about half. Both are on the list.

The ones you would have noticed:

Agents borrowed into another tab behave now. Bringing an agent in from another workspace quietly ran two terminals on one agent: the hidden one could win the argument about the pane's size, which is what a duplicated splash and line-tails wrapping down the left edge meant, and Copy could read the wrong screen. The borrowed tile also vanished for good after a restart if its home workspace woke up first, a popped-out borrowed pane never came back when its window closed, and, worst, the ✕ on a borrowed tile killed the other workspace's agent and deleted its worktree, which the right-click menu was deliberately refusing to offer. One driver per agent now; restarts, pop-outs and the close button all put things back where they belong.

Agents that survive a restart count their spend again. A restored pane resumes its exact conversation, but its session record no longer knew which transcript was its own, so every agent left running overnight exported as free. It counts again, and a resumed session records only its own share rather than recounting what the previous run already banked. The provenance panel's totals also now cover the whole window instead of the two hundred rows on screen, and an export that hits its row cap says so instead of reporting a clean write.

Secure workspaces from 0.7.33 through 0.7.37 are repaired. Those five releases could leave a jail's home directory owned by the wrong user, which read as agents asking for login despite a forwarded key, themes not applying, and three permission-denied lines at the top of every jailed pane, permanently, across upgrades. flock now fixes the volume once, before the pane starts.

An agent's status can no longer die quietly. One bad byte in a jailed agent's report file silently stopped that pane's status, prompt counts and records for the rest of the session, while flock re-read the file forever. The status pill could also briefly show a state the pane had already left when two reports raced; both are fixed, and the per-pane context meter no longer freezes on an old reading when a transcript briefly yields nothing.

Smaller ones. ⌘⏎ starts a race again while the prompt box has focus, which is where the dialog puts you. A daily budget set in tokens shows tokens instead of dressing the number up as dollars.

Update now if you are on 0.7.37. One click could open tabs as fast as the machine could make them, which is enough to take the machine down, and the only way out was to avoid clicking links at all.

0.7.37 changed panes so a plain drag selects text, which meant holding a press briefly to see whether it became a drag or stayed a click, then replaying it to the agent if it stayed a click. The replay was reaching the handler that had sent it and being replayed again, without end. It is now ignored on the way back in, and the press is cleared before anything is sent.

Selecting text, clicking, and everything else 0.7.37 added are unchanged.

Agents run with mouse reporting on because that is what carries the wheel, and xterm will not start a selection while an app wants mouse events, so until now copying output meant holding Option and knowing to. A press is now held rather than guessed at: move past a few pixels and it becomes a selection anchored where you pressed, release without moving and the click goes through to the agent untouched. Double click selects a word again, triple click a line, and what you select is on the clipboard without pressing anything.

Submenus open where you clicked. "Bring In Agent" and "Swap Position With" were opening about a menu width past the edge of the window, which on screen looks exactly like a submenu with nothing in it.

A tab can lay out agents from other workspaces. Right click a pane or the empty grid: Bring In Agent for one, Bring In Workspace for all of them. The agent keeps running where it lives. Its own workspace still owns closing it, its worktree and its container, so closing the tab you brought it into lets it go rather than killing it, and the jailed badge is read from the agent rather than from the tab it is visiting. The arrangement comes back after a restart, including when the lending workspace wakes up second.

Pop-ups can be turned off one kind at a time. Every toast now has "Don't show again". It stops the interruption only: the event still arrives in notifications, so silencing new pull requests does not mean missing them, and silencing a friend's request to pair does not mean never hearing about it. Settings then Appearance lists what you have hidden, with a way back.

Whether new workspaces start secure is yours to set, in Settings then Security, and the switch in the New workspace dialog now remembers where you left it. Secure is still the default and still the right answer for almost everyone, since the container is what makes flock's launch flags reasonable.

The sidebar has no disclosure triangles until you point at one. There were four sitting in three hundred pixels, which turns a list into a tree to be operated. A group header now appears only when there is more than one group to separate, and a section that is collapsed keeps its chevron, since that is the one state where the arrow says something the heading does not.

Hold Option and drag, and the selection lands where you dragged it. Clicks still reach the agent, so the modifier is still needed, but the drag no longer fights the pane for who owns the pointer.

A secure workspace can reach an API gateway. A claude pane now inherits ANTHROPIC_BASE_URL, ANTHROPIC_AUTH_TOKEN, ANTHROPIC_CUSTOM_HEADERS and ANTHROPIC_MODEL, and a codex pane the OpenAI equivalents. Pointing flock at a proxy or a company gateway used to work everywhere except inside the jail, where the key arrived without the address it was for and Claude Code asked you to log in instead. A pane still only sees its own agent's credentials.

Secure panes start with a writable ~/.claude. The transcript directory is bind-mounted one level down, and Docker was creating the parent for it as root, so the first thing an agent wrote there was refused. The image now makes that directory itself and hands it to the user the agent runs as.

Whether new workspaces start secure is yours to set. Settings then Security. It is still on by default and still the right answer for almost everyone: the container is what makes flock's "don't ask me for permission" launch flags reasonable. But on a Mac with no Docker the switch had to be cleared by hand every single time. The switch itself has not moved, it is still per workspace, and a workspace already running secure stays secure whatever this is set to.

The section chevrons sit on their titles. They were a pixel high in the sidebar, which is the kind of thing you cannot unsee. The status bar's dividers are centred in their band for the same reason.

The navy still ships, and the swatch row in Settings still has it, but a fresh window is neutral grey. The cockpit spends its life as a frame around other people's output, terminals, diffs and agent TUIs that arrive with palettes of their own, and a grey ground is the one that does not tint all of it.

If you have never opened the theme swatches, this applies to you: nothing is written down until you pick, so the app has been reading the old default rather than a saved choice. Your window will look different after this update. Settings then Appearance puts Nightfall back in one click, and it stays.

Inherit from system moves with it. Turned on, a dark OS now gives you Graphite, the same theme the app opens with, rather than a second dark theme you did not choose.

The window used to be three columns meeting at hairlines, and every one of those lines was on screen at full strength all day whether or not you were reading it. Panels are separated by space and by a change of material now, the sidebar hangs off the window edge the way it does in Finder and Mail, and a selected workspace or agent is a band that runs the full width of the rail rather than a card floating inside it. The two lists in that rail used to disagree about almost everything: how far in their text started, which way their groups nested, what "selected" looked like. They agree now, and there is a test that fails if they stop.

Press ⌘K. One place to type what should happen. It finds workspaces, agents, settings and every action in the app, and an agent that is waiting on you sorts above everything and stays there while you type, so it answers "who needs me" as well as "where is that". ⌘N opens a workspace, and Settings and your usage stats gained keyboard paths they never had.

Workspaces group themselves by project. Open three or four repos and the list stops being flat: repos that live in the same folder are grouped under it, and the group folds. Nothing to set up, and nothing to maintain. A repo that sits directly in the folder you keep all your code in is left alone, because a group called "git" containing everything is not a grouping.

Settings looks like a Mac settings window. Grouped rows in rounded boxes with the section name above them, icons down the side, a proper title bar. The strip along the bottom that spent every waking moment telling you Escape closes a dialog is gone.

The context meter told long-context sessions they were short ones. A 1M session showed a 200k window, and only corrected itself once you had used more than 200k, so most of a long session was spent reading against the wrong scale. It now finds the real window at the start. When it cannot be sure, it stays pessimistic on purpose: a meter that reads emptier than the session really is walks you into a compaction you were not expecting.

Your spend chart was counting some days twice. The daily figures are worked out by subtracting each day from the one before, and a day that reported a smaller total than the day before it, which happens when a machine sees fewer transcripts, was counted as zero and then its recovery was counted as fresh usage. A 22 day window could total more than your all time spend. It cannot any more.

The chart is bars. It was a smoothed curve drawn through 22 daily totals, which put a value between every pair of days that the data does not contain, so the two busy days read smaller than they were and the quiet ones read busier. It also says your daily average and your busiest day, which is what makes the total mean anything.

The provenance table has never drawn its own lines. Every rule in it asked for a colour that does not exist in the app, so the table has been shipping as columns of floating text since it landed. It has its grid back.

Smaller things. An agent's name no longer gets squeezed to three letters by the chips beside it. Tabs stopped reserving room for two buttons you cannot see. The working indicator runs out and back instead of one way. Text that had been shouting in tracked capitals for no reason now speaks at reading size, and badges, which are the one place capitals earn their keep, kept theirs.

Pick a prompt, a number of contenders and an agent, and flock opens that many agents, each in its own branch off where you are now, all working on the same thing. A compare view puts their diffs side by side with the state of each agent, and merging one cleans up the rest. If the winner left work uncommitted it is committed before the merge, and a conflicting merge is undone rather than left half finished in your checkout.

Comment on a diff and hand the notes to the agent. Click a line, or drag over several, and attach a note. Send to agent gathers every note into one message with the file, the line and the code you were looking at, and drops it into that agent's input box without submitting it, so you read it before it goes. Notes survive closing the diff and reopening it.

Two security fixes worth updating for. Every jailed agent was being given the shared activity log flock keeps for all of your agents, in every workspace, jailed or not. It could read that log, and it could rewrite it. Each jail now gets only its own. Separately, a Codex agent was being handed your Anthropic key along with its own credentials. Neither issue could be triggered from outside your machine, and neither has any sign of being used.

Secure workspaces are no longer invisible to their own readouts. An agent in a container kept its conversation inside that container, so the context meter stayed blank and its tokens were missing from your usage. Those conversations now land where flock can read them, and both readouts light up for jailed agents. Existing secure workspaces keep their history: it is moved across once, the first time each one starts.

A network setting for jailed agents. Off by default. Turned on, a jailed agent can reach the agent APIs and anything else you name, and nothing else, so a container that only needs to talk to Anthropic can be held to that. The new docs/SECURITY.md is deliberately unflattering about what the jail does and does not protect you from; read that before relying on it.

Budgets. Spend and tokens attributed per agent, per workspace and per repo over a window you choose, with a ceiling you can set and a warning as you approach it. The dollar figure is priced from a local table, so treat it as an estimate rather than an invoice.

A record you can hand to someone else. Settings has a Provenance tab: which agent ran, for whom, in which repo and branch, for how long, and what it cost. Exportable as CSV or JSON over any date range. No prompt text, no output, no file contents are recorded.

The knowledge graph's counter was measuring nothing, and is gone. "Rediscoveries avoided" counted lines of text printed into a prompt. Not lines read, not lines used. It kept climbing during a period when the graph was not being written to at all, which is how we found out. It is replaced by coverage: the share of what you have recorded that agents have actually read back, a number that can go down. This retracts the claim made in the 0.7.29 notes about a strip showing rediscoveries avoided and cost per shipped outcome. It was not measuring what it said.

Four faults under that counter are fixed too: grounding crashed on a quarter to two thirds of attempts and silently injected nothing when it did; restored agents lost their graph tools on every restart; team mode wrote to one database and read from another; and the record of who authored what was never written.

Releases now have to survive being used. Every build is launched, clicked, dragged, scrolled and opened into a real workspace with two agents before it can be published. Three releases went out in one day last week that were green on every check we had and broke the moment a human touched them.

Geese fly at first light.

Since 0.7.30, spinning the wheel over a Claude Code agent walked backwards through your prompt history instead of scrolling its output, which made it impossible to read back anything an agent had already printed.

0.7.30 turned Claude Code's mouse reporting off, to stop the agent repainting every time your cursor crossed a link. It worked, but it took the wheel with it: the wheel is reported to the agent over the same channel as everything else, and with that channel closed the terminal fell back to translating a scroll into arrow key presses. Claude Code reads arrows in its input box as history. Now only cursor *movement* is withheld, so links still stop flickering out from under the pointer, and the wheel reaches the agent again.

Selecting text in a pane needs Option held again, as it did before 0.7.30. That is the price of the agent still hearing your clicks, and it is the trade that keeps both scrolling and clickable links working.

Geese fly at first light.

0.7.30 quit itself when you clicked the title bar. This undoes that. The previous release changed how the window is picked up when you drag it, to fix it flying off screen on a machine with a second display to the left. That change was wrong in a way that took the whole app down: the first click anywhere on the title bar, including the first half of a double click to zoom, closed flock instantly and took every running agent with it.

Please update. Everyone on 0.7.30 is one title bar click away from losing a session, and there is no setting that avoids it.

Dragging is back to exactly what it was in 0.7.29, which means the original problem is back too: if you have a display to the left of your main one, dragging the window that way can still throw it off the right hand edge. That is annoying and it is survivable, which is more than can be said for the fix. It will be fixed again properly, once it can be tested against the setup it goes wrong on.

Everything else 0.7.30 added stays: the context meter on every Claude Code agent, clickable links in agent output, the pane rendering fix when you open a new agent, and the right click menu corrections.

Geese fly at first light.

A small bar and a token count sit in each pane's title strip, so one look across a grid of twelve tells you which agent is nearly full and about to compact away the start of its own thread. It is read from the agent's own conversation, so it survives a restart, and it falls back on its own the moment a compaction happens. Agents in a secure workspace do not show one yet: their conversation lives inside the container, where flock cannot see it.

Links in an agent's output are clickable again. They had become a coin flip. Turning on the smoother, flicker free rendering that flock asks Claude Code for also turns on mouse tracking, which sends every movement of your cursor to the agent, which redraws in response. The redraw was triggered by the very movement you made to hover the link, and it took the link with it: whether your click landed was a race you could not see. Mouse tracking is now off, so hovering underlines and clicking opens, every time. Selecting text in a pane no longer needs Option held either, for the same reason. The trade is that Claude Code's own mouse features go with it, including scrolling its history with the wheel. If you want them back, set CLAUDE_CODE_DISABLE_MOUSE=0.

Links that an agent prints as a label rather than a bare address, the kind where the words are clickable but the address is hidden behind them, now open too. They never had before.

Dragging the window no longer throws it across the screen. With a second display to the left of your main one, dragging the window that way sent it flying to the right instead, off the edge and out of reach. The window was being picked up at a point measured against the whole desktop rather than against itself, so the further left it sat, the further wrong the grab was. It now picks up where you actually clicked. Double clicking the title bar still zooms, and still cancels if you move before letting go.

Opening a new agent no longer scrambles the agents already open. Splitting the layout resizes every other pane in the tab, and one in a hundred of those resizes left a pane and its agent disagreeing about how wide the pane was. The agent kept drawing for the old shape: a second copy of the greeting halfway down, the ends of sentences stranded at the left edge, a prompt box floating in the middle of nothing. They agree now, and cannot drift apart again.

Right click acts on the agent you right clicked. In a pane's menu, Open in Terminal opened that agent's own branch while Open in Finder, Open in VS Code and Copy Path quietly opened the shared repository one folder away, with nothing on screen to say which you had got. All four mean the same place now. Copy URL also used to hand you the full stop at the end of the sentence, or the bracket after the address; it now copies exactly what clicking the link would have opened.

Geese fly at first light.

It left the lockup six days ago on the argument that a pixel bird and a drawn logotype are two different alphabets, and that the one thing you look at all day is the worst place to put them together. Side by side at the size the bird is actually drawn for, it reads as a mark and its name rather than as two companies sharing a header. So it is back, and the rest of that row was rebuilt around it.

The wordmark has its wave again. The last release put the three crest colours behind the whole name as a pastel plate, and a plate forces the logotype to flatten to ink: the l, which is the wave, spent a release as a dark bar. The plate is gone. The l drifts through sky, rose and apricot the way it does everywhere else in flock, and the sidebar is back to being darker than the terminals in it.

The colour went somewhere it means something. The tab you are on, Home or Friends, is underlined by the crest itself now: the whole wave, in order, in place of the flat blue bar that used to mark it. It moves about three pixels a second, one full pass a minute, which is enough that you notice it is alive and not enough to catch your eye while you are reading something else. If your system asks for reduced motion the drift stops and the colours stay. High Contrast keeps the bar and drops the colours, because it is telling you where you are, not decorating.

Geese fly at first light.

Creating one used to spend its first seconds on an empty window while it fetched the base branch and cut a worktree for every agent, and its next ones on a wall of startup output nobody asked for. The grid now comes up first and does that work inside itself: each pane says what it is waiting on, fetching the base, cutting its worktree, installing dependencies, and goes live the moment its own prerequisites land rather than after the slowest pane's. The base fetch is usually already done, because the dialog starts it the second the base branch settles, seconds before you click Create. Worktrees are cut together instead of one after another, which for six agents is a third of a second instead of a little over one. And the shell noise between the terminal opening and the agent appearing is covered now, on every pane, so what you see is the agent.

Reopening flock brings your agents up together, not one after another. A restored workspace used to wait for each agent to be looked up, spawned and handed its history before starting the next, so twelve agents meant twelve round trips before a single terminal appeared. They come up in parallel now, the same way a fresh grid does. That also fixes a quiet loss: an agent that printed its startup while eleven more were still spawning could scroll it out of its own history before flock had looked, and come back as a blank pane.

Terminals paint on your graphics card. Every character used to be drawn by the browser engine flock runs in, which is what a twelve-pane grid of busy agents spends all its time on. Panes on screen now render on the GPU instead, handed out only to the grid you are actually looking at, so switching workspaces does not leave contexts stranded behind hidden panes. If your machine cannot give one out, or takes one back, the pane keeps drawing the old way.

The sidebar stopped redrawing itself every five seconds. The "idle 3m" and "working 45s" labels on the agent rows were ticking a clock that lived at the top of the rail, so refreshing a handful of small grey labels re-rendered every workspace card, every agent row and every panel. Now the tick reaches the labels and stops, the timer only runs while a duration is on screen, and a status change in one workspace redraws one card instead of the whole list.

The rail wears the crest. flock's name has moved to the top left of the sidebar, on the same edge as your workspace names, and sits in ink on a plate of the three colours the mark's own crest travels through, drifting slowly across the row. High Contrast leaves it flat, and reduced motion keeps the colour and stops the drift.

Geese fly at first light.

When an agent prints a file longer than your pane is wide, the terminal breaks it across two rows. Only the first row was underlined, so clicking it opened whatever that half happened to name, which was rarely the file you were reaching for. Both halves are now joined before the link is made. The join used to look for a row filled all the way to the last column, and a Claude Code file list never fills it: the size sitting on the right reserves those columns from every row, so a path that breaks always stops short of the edge. It now measures against each row's own right edge, and drops the size out of the text it opens. A row that merely ends on a filename, with room to spare for the next word, is still left alone, so a line that mentions a file does not swallow the line under it. URLs get the same treatment, and nothing that used to be a link stops being one. Geese fly at first light.

It was flying with its neck out, four rows of clear air between the eye and the back and a notch underneath where the head met the body. At the splash you read that as a long-necked bird. At sixteen pixels you read it as a head and a body, which is one thing too many.

The head drops a row and moves a column in toward the shoulder, and the shoulder comes up to meet it, so head and back are now one mass. The eye slides forward to sit a single cell in from the front of the skull. The belly picks up the cells it needed to run into the tail instead of cutting away underneath it. One row shorter than this and the eye loses its margin above the back, that was drawn, looked at, and thrown out.

The downstroke was not redrawn. It is the same body under the down-wing, and it has to be: a flap where the body changes shape between frames is a bird that grows and shrinks as it beats.

The crest is bluer, and its high note is the goose's own wing. The stem of the l carried sky, rose and peach, and rose was both the palest of the three and the brightest, so the top of the sweep was the colour with the least in it, and the whole thing read washed. The sky has gained chroma. Rose is deepened until it is no longer the brightest. And the peach is gone, replaced outright by the apricot off the goose's wing: the wordmark and the bird now share a colour instead of merely agreeing about one.

On Daybreak that also happens to be a legibility gain rather than a cost.

PR watching moved to where the PRs are. Which repos get watched was buried in

Settings, three clicks away from the PR list and the merge queue it feeds. It is a working set, it changes as projects come and go, so it now lives in the PR hub, under REPOS, next to the thing it affects. And the watched repos are picked from a list of what your GitHub account can actually see, instead of typed in from memory and misspelt.

Geese fly at first light.

Its wingtip used to sit five cells ahead of its own root, toward the bill, which is the pose a goose actually holds to kill speed on approach, wings thrown forward to brake. So the mark had a tail pointing one way and a wing pointing the other, and a bird that was going nowhere.

It is the same wing. The row widths are the old ones cell for cell, mirrored about their own box and then sheared so both edges rake back over the tail.

Nothing was redrawn and the bounding box did not move.

The downstroke still leans forward, and that is not an oversight. A bird sweeps forward on the downstroke because that is the power stroke; leaving it alone turns the two frames into a rowing motion instead of two frames pointing the same way. A mirrored down-wing was drawn and thrown out, the belly already tapers that way, so it had nowhere to go.

The browser page you land on after signing in flies the same bird.

Geese fly at first light.

Outfit ends the f's curl ten units above the line the l and the k stop on, so in the one word flock sets more than any other, the first letter overshot the two beside it. The curl is brought down to 720. Every x is unchanged and the baseline is untouched, it is Outfit's own drawing, no longer overshooting.

A letter you have redrawn cannot be set as text, and a drawn letter will not share a baseline with a typeset one: measured across seven sizes, a drawn fl standing beside live "ock" sat a pixel off the k at 19, 24 and 48px, and no correction fixes one size without breaking another. So the whole word is drawn f, o, c and k as one outline, the l as a second so it can still carry the wave. Zero deviation at every size the mark ships at.

The wave never leaves the l. It used to cross the stem in about a second and then hold still for eight, which read as a flash rather than as something alive, and for those eight seconds the l was a plain dark bar. It is one continuous gradient now, sky, rose, peach and back to sky, drifting up the stem and never arriving anywhere. Fourteen seconds to the tile, slow enough to be motion rather than an event, and the loop has no seam to catch on.

One palette on every ground. A deeper cut for Daybreak was drawn and thrown away: taking peach down far enough to hold its own on paper turns it to rust, and rust is not this mark.

The browser page you land on after signing in wears the same word, from the same outlines, to the em.

Geese fly at first light.

A long session could climb into double-digit gigabytes and stay there, because everything your panes printed was being copied and kept rather than passed along and let go. It is handed on now, so what a pane holds is what is on screen and a little history, whatever hour of the day it is.

A full grid stops pinning the machine. Keeping track of what twelve agents were doing had come to cost more than running them, enough that the fans came on while flock sat mostly idle. Reading agent status is a fraction of the work it was, and the difference is one you hear.

One agent was always fine. This is a release about what happens at six and at twelve, which is where anybody running a formation actually lives.

Nothing about what your agents do has changed. Every agent type was put through it before this shipped, and voice is untouched.

On some displays the stem of the l was drawn with thin lines across it, because it was built from four stacked pieces and the seams between them landed differently on every renderer. It is one shape now, so there is nothing for a seam to appear in. The wave still rises through it exactly as before.

The goose has left the sidebar. It sat beside the logotype for the whole session, and two marks in one corner were one too many: the word is the mark. The bird still opens the app on the splash, waits in an empty pane, flies in the voice bar, greets you at sign-in and sits in Settings, which are the places it does something a word cannot.

The friends count is no longer bright green. It reports a standing fact and did not need the loudest colour in the app to do it; the yellow badge next to it, which is asking you to answer a friend request, now stands out on its own.

Geese fly at first light.

Nightfall is navy, and navy is a colour whether or not you read it as one: it tints every surface, every shadow, and the ground under text that is trying to be neutral. Graphite is the same app with the hue taken out. Three neutral greys, white wherever you can click, and colour kept for the things that carry meaning: green is an agent working, amber is one waiting on you, red is one that failed. Settings, Theme, Graphite.

Terminals, dialogs and the agents' own Claude Code themes all follow, and every text colour in it is contrast-checked against both the window and the panels that sit on top of it. Your workspace accents keep their colours, so a workspace that is teal stays teal when you switch.

Agent rows read in two lines again. The status mark sits beside the agent's name now, with the elapsed time directly underneath it. It had been wrapping onto a line of its own, which left the name stranded at the top of the row and the mark floating in the middle of the block.

Its Postgres role, password and database were still clarence and

clarence_kg, and the Docker volume and compose project went with them.

Those names are only set when a volume is first initialised, so every install from here would have carried them for good. They are all flock now, and the connection string in the docs and the README says so.

If you already have a local graph, its data lives in the old volume and the app will start a fresh empty one beside it. To bring it across:

docker start clarence-graph-db docker exec clarence-graph-db pg_dump -U clarence clarence_kg > graph.sql docker stop clarence-graph-db docker exec -i flock-graph-db psql -U flock flock_kg < graph.sql

The old volume is untouched either way, so nothing is lost while you decide.

flock also no longer treats a pre-rebrand container as a running graph. It used to, which was right when only the container had been renamed; now that the database has moved too, an old container that is up serves a database the app no longer asks for, and reporting it as healthy would mean every query failing against a graph that looked fine.

Geese fly at first light.

The rename to flock moved the app's realtime channels but not the token the auth service mints for them, so every build after the rename was denied the moment it connected, which looks exactly like none of your friends being online. Fixed on the server side; this build needs nothing from you.

Clickable file paths in a terminal pane now only hand a file to macOS when macOS would display it. Anything that could run instead, app bundles, installers, scripts, and binaries with no extension at all, is revealed in Finder. A path printed in a pane is agent output, and agent output is downstream of whatever repository the agent was pointed at, so it is not necessarily a path you chose.

The sidebar and the right rail can be dragged at their seams, and the width sticks. The commit tooltip in the git graph no longer runs off the edge of the window.

A new goose, with a wing that still reads when colour is off, on the app icon too.

Its wing is drawn on top of its body, and the two used to sit 1.09:1 apart: the same lightness, told apart by hue alone. Desaturate the mark and the wing disappeared, which is what a greyscale print, a small icon render and red-green colour vision deficiency all do. The palette is now first light. The body keeps the sky hue and drops in lightness, the wing and bill take the warm end of dawn, and the wing holds 2.17:1 against the body in colour and 2.18 without it. The bird also stops shouting beside the wordmark: 1.27x the crest's chroma now, down from 1.73x. Same bird, same sprite, six new values, and the Dock icon and the website carry it as well.

Both rails can be dragged. Grab the seam beside the sidebar or the right rail, or focus it and use the arrow keys, and each rail remembers its own width. Double-click a seam to put it back where it was. Neither rail can be widened past the point where 320px of work surface is left.

The commit tooltip no longer hangs off the window edge when the git section is docked in the right rail.

Geese fly at first light.

Every agent writes to one hook file shared by the whole machine, and each running copy of flock was reading all of it, including events from agents it never launched. So a second copy counted your prompts as its own, announced other windows' agents in its notification list, and credited whichever account it was signed into with the machine's entire Claude Code spend. A copy now ignores anything that is not its own.

Most likely to have hit this: anyone who downloaded the app fresh while an older Clarence.app was still installed, leaving two copies that both run.

The friends list is not empty on the first launch any more. New accounts arrive already friends with the founder, the way MySpace put Tom in every new account. It is an ordinary friendship and can be removed like any other.

It would say "3 agents need input" while every agent on screen was idle, and once a bar has done that a few times you stop reading it. Three separate things were reporting a block where there was none.

Claude Code raises the same event for two very different situations: a real ask, like permission to run a command, and a nudge it fires sixty seconds after any agent goes quiet. flock could not tell them apart, so every agent that finished its work turned into an alert a minute later. It now reads the agent's own wording and only the real ask counts.

The other two were flock's own reading of the terminal. An empty prompt waiting for you to type, a shell sitting at its $, an agent that simply went quiet, all three were being reported as questions. They are not questions, they are an agent at rest. What counts as needing you is now narrow and deliberate: a permission dialog, a "press enter", a genuine ask.

The bar's own wording got the same treatment. When there is nothing to report it now counts the agents in front of you rather than replaying the last thing that happened, so it no longer says an agent is working an hour after it stopped. And the unread count remembers what you have already read across restarts instead of greeting you with a dozen notices you cleared yesterday.

Agents you launch inside a workspace with hooks installed pick this up on the next launch, flock rewrites its own hook entries when they are out of date, and leaves everything else in that file alone.

If you have been updating in place since the rename, your copy is still Clarence.app on disk, and that filename is what macOS shows you: in the Dock, in Finder, in Spotlight, in the force-quit list and in every Privacy and Security pane. No update could fix it, because an update unpacks over the bundle where it finds it and cannot move it. This release renames itself, once, on launch, and comes straight back up. Nothing you have granted is revoked: permissions key off the app's identity and signature rather than its path.

If you also downloaded the DMG at some point you now have two copies in Applications, and flock leaves both alone rather than picking one to delete. Drag the Clarence one to the Trash.

The wave says working on its own. A working agent was announcing itself three times over: a moving strip of blocks, the word "working" printed beside it, and a second strip on the workspace card whose summary line already counts how many are working. Motion is the only state in the sidebar that has any, so the word and the duplicate strip are gone. Screen readers still hear the state.

A working agent now reads as working. Claude Code repaints its screen in place rather than a line at a time, so nothing flock was looking for ever arrived, and every Claude pane sat at "idle" for its whole life however hard it was thinking. Detection now follows the spinner itself, which keeps turning through long tool calls and through a subagent the parent is waiting on, so the sidebar tracks a two-minute thought the same way it tracks a two-second one. The same fix lands in the terminal UI.

A dead worktree no longer holds a branch hostage. git keeps reporting a worktree whose folder you deleted, and flock read that as "in use" forever: the branch went grey in the new-workspace dialog with nothing on screen saying why or how to get it back. Only worktrees that still exist count now.

Two agents can share a checkout. Picking a branch that is already checked out joins that folder instead of being unpickable, so a reviewer can sit alongside an author. The dialog says so before you commit to it.

The spawn dialog says where agents will land. It used to ask which agent and how many, and leave the more consequential answer, which branch each one gets, entirely off screen.

Modals and menus have depth instead of a bruise. Every floating surface used to hand-roll a wide black blur, which on a dark ground reads as a smudge under the dialog. One elevation scale replaces them all, with a light-theme set that is a soft grey rather than a sticker edge.

Daybreak reads properly. The light theme's accent goes to ink, and all eight workspace accents are cut deep enough to clear AA contrast on paper, where the dark-theme pastels were effectively invisible. Accents are theme tokens now, so a workspace keeps its identity when you switch.

Fixes

• The branch picker closes on Escape and on a click anywhere outside it, from wherever focus ended up.
• An avatar that fails to load falls back to the initial instead of the browser's broken-image glyph. Google and GitHub both rotate those URLs.
• The sign-in page your browser lands on after Google or Apple is rebuilt in the current brand, fonts and all, instead of falling back to whatever the system had.
• The app icon is the goose the app actually draws.
• The splash greets you with a line that changes rather than the hour.

Read this first: microphone access resets. macOS ties permissions to an app's identity, and the identity changed with the name. Grant the microphone again under System Settings, Privacy and Security, Microphone. Push-to-talk stays silent until you do. Nothing else needs re-granting, and no data is lost.

Your data moves itself. On first launch flock moves the old data directory to ~/.flock and renames the workspace database inside it. Workspaces, GitHub token, knowledge graph and voice models all travel together. If the move cannot complete, flock keeps reading the old directory rather than opening empty.

If you update in place, the app keeps its old filename on disk while showing the new name. Download the DMG once if you want the file itself renamed too.

The rail. The goose and the logotype are one lockup again, sized to each other, and the strapline under them is gone. The mark holds still: it sits on screen for the whole session, where a wingbeat reads as a nag. Its wave crest now runs once every ten seconds rather than every two.

One goose. The bird used to change palette with the theme, so the app had three of them depending on where you looked. Blue and pink everywhere now.

Collapsing the sidebar moved into the sidebar itself, in the space beside the logotype. Expanding it stays in the workspace header, because a control inside the rail disappears with it. The zoom button left the workspace header: every pane already carries its own, and the shared one had to guess which pane you meant.

Fixes

• The Graph's local container carries the flock name. An existing graph keeps every note in it.
• Dictation no longer biases toward the old product name.
• Several paths wrote to ~/.flock directly instead of asking where the data directory is. On an upgrade that could make the directory exist before the migration ran, which would have left workspaces stranded under the old name.

flock could grow to many gigabytes over a long day and eventually push macOS into "your system has run out of application memory". The cause was voice dictation: the microphone capture buffer had no ceiling and kept every sample of every recording, about 1.3 GB for each hour the mic stayed open.

Dictation memory is now flat. Audio that has already been transcribed is released as you speak, so a recording holds a few seconds of sound rather than all of it. A two minute dictation and a twenty minute one now cost the same.

Recordings stop themselves after four minutes. The hands-free lock (tap to start, tap again to stop) had nothing forcing it to end, so a forgotten one ran until you quit the app, holding the mic open the whole time. Whatever was captured is transcribed exactly as if you had stopped it yourself.

Terminal panes hold less. A busy pane keeps roughly half of what it used to, without losing any of the scrollback you can actually reach.

Agent cost figures are more accurate. Cache pricing follows each model's own rates, so one hour cache writes are priced correctly and a new model can no longer end up half right.

The pane topbar leads with the agent's mark. The old accent tick repeated what the pane name colour and focus border already showed, so the mark takes that slot and the status chips share one consistent style.

flock used to inherit whatever branch your repo happened to be sitting on and, for a single agent, work directly in your checkout. This release makes the branch an explicit, visible choice, and makes worktrees usable enough to be the default.

Pick your branch when you create a workspace. The new workspace dialog opens on a branch section: cut a new branch, continue on an existing one, or share your current checkout. New branches are the default, so a workspace means a branch and your working copy is left alone.

Branch from the right place. The base ref defaults to your repo's default branch rather than whatever HEAD happens to be, and is remembered per repo. "Fetch base first" updates it from the remote before branching, once per workspace, so agents don't start a day behind.

Branches named after their agent. A solo agent takes the name you typed; each additional one gets a sibling: refactor-auth, then refactor-auth-dandelion when you split. Readable in git branch, obvious in a PR list.

Worktrees come set up. A git worktree only contains tracked files, so agents used to land somewhere their first command failed. flock now copies your gitignored local config in (.env*, .envrc, .tool-versions, editable in Settings) and can run a project setup command in the pane before the agent starts, suggested from your repo's lockfile. You watch it run, and a failure never costs you the agent.

Settings → Branches collects the defaults: which branch mode new workspaces open on, whether to fetch, the carry-over patterns, and where worktrees live.

Open in Terminal. A button on the workspace opens a plain host shell at the focused agent's directory, for everything that isn't agent work: aws sso login, a quick ssh, editing a dotfile. Picks from the terminals you actually have installed.

Drag a pane onto another to swap them, so a crowded grid can be rearranged without closing anything.

Prompt queue fidelity. Queued prompts now match what was actually typed: pasted newlines no longer submit early, Option+Enter inserts a line break instead of sending, and a prompt carrying a pasted screenshot keeps the image when it goes to the queue.

The sign-in tab wears the app's face: the terminal wordmark and its blinking cursor, with the accent carrying the result.

Keyboard: drive the room without the mouse

• ⌘] / ⌘[ move focus to the next / previous pane in the tab.
• ⌘J jumps to the next agent waiting on you, across tabs, so answering a blocked agent never means hunting the grid.
• Agent and layout pickers in the Spawn and New Workspace dialogs are now fully keyboard-navigable (arrows, Home/End): the layout picker is reachable by keyboard for the first time.

Safety

• Non-secure panes now carry a host chip: a clear, quiet signal that an agent is running on your machine with full file and credential access, the counterpart to the jailed chip on Secure workspaces.

Accessibility

• Every Settings toggle announces its on/off state to screen readers, the tab bar and pickers expose proper roles, and the attention indicator is labeled.

Polish

• Settings navigation is grouped into Account, Workspace, Connections, and System.
• The destructive delete button no longer looks like the primary action.
• A quiet new sidebar strip shows your knowledge graph's compounding (rediscoveries avoided and cost per shipped outcome) while you work.
• Dialog titles are now one voice: the New Workspace and Spawn Agents dialogs drop the app’s last serif titles for the monospaced wordmark style.

• PR watch and auto-review: watch any GitHub repos from Settings. New PRs raise a notification, and with auto-review on, each one gets its own review agent in a dedicated violet workspace pinned to the top of the list, with the PR branch checked out in an isolated worktree. When the agent settles, its verdict appears as a summary card in the PR hub.
• Merge queue: queue approved PRs and let flock land them when everything is green. Full validation matrix per PR, per-reviewer approval chips, conflict analysis down to the exact files, and optional automatic branch updates when a PR falls behind its base. Visible three ways: a status-bar chip, a dockable sidebar section, and the hub's queue tab.
• One PR hub: pull requests and the merge queue now share a single tabbed workspace with approve and merge built in, cross-linked both ways.
• Pi agent support: pi (pi.dev) joins Claude Code, opencode, and Codex as a first-class agent kind, official mark and secure-mode support included.
• Signed and notarized: this build carries Developer ID signing and Apple notarization, so fresh downloads open without the Gatekeeper detour.

• Achievement wall: the stats modal now turns lifetime stats into ranked seals for prompts sent, agents launched, workspaces created, tokens spent, and time aboard. Shared seals render on any friend's profile too; knowledge-graph seals (decisions, notes, files touched) appear on your own wall when the graph is running.
• Broadcasting panes stay bright: with sync input on you're typing into every pane, so they no longer dim as "unfocused" while you broadcast.

• Copy and paste, fixed: clipboard writes now go through the native macOS pasteboard instead of the webview, so a copy can never silently fail and leave you pasting stale content. Copy-on-select fires only for a deliberate selection in the pane you're working in: background panes, scrollback churn, and right-clicks can no longer overwrite your clipboard behind your back, and a failed copy shows a pill on the pane instead of saying nothing.
• Graph provenance: every knowledge write now attaches its author and repo, so no node lands isolated. Person and Repo hubs render on the graph canvas with their own colours.
• Broadcast input: sync typing across every pane in a tab. One prompt, all agents.
• Pane polish: floating pane tooltips, status pills, and rectangle zoom.

• Teams. Create an org, invite teammates by their flock handle, and organize into teams, all from Settings → Teams. Choose who you're working as, and every agent you launch is scoped to that team so shared knowledge lands in the right place.
• Semantic knowledge search. The knowledge graph now pairs full-text search with on-device semantic embeddings: agents recall past decisions by meaning, not just matching words. Embeddings run locally with a small model (about 30 MB, downloaded on first use). Nothing leaves your machine.
• Sharper git panel. Renamed files now show their new name instead of a raw "old -> new" string, and a detached HEAD displays the commit you're on rather than a bare "HEAD" badge.
• Steadier presence. Connection problems surface in the status light immediately instead of stalling quietly, and background sync stops cleanly when you sign out.
• Steadier throughout. Panes lay out identically in the desktop app and the terminal, and dictation behaves the same in a popped-out window as it does in the main one.

• Usage over time. Your profile now charts daily token usage and estimated spend over the past month, with a toggle between the two. Friends' profiles show the same chart.
• Arrange your sidebar. Sidebar sections can be dragged between a left and a new right-hand rail and reordered within each, and your layout is remembered across launches.
• See each agent's model. When you set a model with /model, it appears as a chip next to that agent in the sidebar, so a grid of agents on different models stays legible.
• opencode status fixed. flock now correctly shows the working animation for opencode agents while they run.
• A clearer profile card. The usage stats view was redesigned around the numbers that matter, and it's easier to reach: click your profile row or the new chart icon in the sidebar footer.

• Faster multi-agent workspaces. Opening a workspace full of agents now appears instantly and starts every agent in parallel, so launching a large grid no longer stalls or freezes the app while it loads.
• Token usage on your profile. Your profile now shows the Claude Code tokens you have used and an estimated spend, alongside prompts, agents, and workspaces, visible to you and to your friends.
• Jump to commits on GitHub. Commits in the Git graph now link straight to their page on GitHub when the repository has a GitHub remote.
• Faster voice dictation. Voice transcription now decodes as you speak, so dictation finalizes noticeably faster the moment you stop talking.
• Cleaner Settings. Tidied up the Settings dialog header.

• Big stability fix for large grids. Running many agents at once under heavy output could slow the app down and, in the worst case, make the window unresponsive. Agent output now streams far more efficiently, so tiled grids stay smooth and memory stays flat through long, busy sessions.
• More reliable image attach. Pasting or dropping an image into an agent pane now attaches it consistently for every agent, including in secure containerized workspaces. Images are staged into the workspace so the agent can always find them.
• New My Info panel. See your profile and social usage stats at a glance.
• Security hardening. Tightened flock ID access controls so your profile and friend connections stay scoped to you.

Updating is recommended for everyone.

Collaboration is scoped to the people you actually share with

• Live co-pilot keystrokes are accepted only from the teammate you are actively pairing with, verified by their signed identity rather than by knowledge of a session link.
• Observe, co-pilot, and task requests are honored only from accepted friends, and every request is checked against its sender's verified identity, so a request cannot be forged to look like it came from someone you trust.
• Session traffic, including task prompts, is delivered privately to its recipient instead of over a shared channel.

Secure mode is a tighter sandbox

• The container sandbox no longer trusts repository metadata to decide what it mounts, so a repository cannot reach beyond your workspace.
• Git hooks inside a sandboxed repository can no longer run code on your host.
• Each workspace gets its own isolated sandbox home, so one project's saved logins are never visible to another.
• A workspace you mark Secure stays secure and cannot be silently downgraded.

Accounts and invites

• Invite emails are verified and rate-limited, protecting both your inbox and the flock sending domain from abuse.

No action is needed beyond updating. Thank you for helping us keep flock safe.

a pure-black, maximum-legibility appearance alongside Nightfall and Daybreak. Pick it in Settings → Appearance.

• Themes now drive every hover, border, and badge from shared tokens, so the sidebar, PR badges, and dialogs adapt correctly across all three appearances instead of washing out.
• Full keyboard operability: workspace cards, tabs, PR rows, and dialog controls are now focusable and activatable with Enter/Space, with a consistent focus ring.
• Every dialog now traps focus and returns it to where you were on close.
• Sharper text contrast for quieter labels and placeholders.
• The status bar no longer overlaps modals and menus.
• Deleting a workspace from the right-click menu now asks for confirmation.
• Creating a workspace surfaces a clear error (and cleans up) if it can't start, most visible in Secure mode without Docker running.
• Narrow terminal panes keep their close/zoom controls instead of clipping them.
• "Review all PRs" is guarded against double-clicks and confirms how many reviews it started.

• Sign-in, start to finish: the in-app gate and the browser auth page now wear v1: Daybreak by day, Nightfall after dark, the HD goose in the right palette for each, and the Fraunces italic wordmark with the peach dot.
• Presence reads green again: a new semantic ok-green for the presence light and friends' online dots. Connected looks connected.
• Calmer destructive actions: closing a workspace or signing out no longer shouts in red; confirm buttons speak the theme accent like every other CTA.
• One wordmark: sidebar, splash, sign-in, and the voice HUD all set flock in Fraunces italic 480 with the peach dot, matching the website exactly.
• New app icon: the goose on a proper Apple rounded-rect instead of a circle, ready for macOS liquid glass.

The look

• Two themes, properly mirrored: Daybreak (ivory paper, ink accent) and Nightfall (night paper, ivory accent). Slate carries the quiet metadata; the dawn family (sky, violet, peach, rose, gold) colors only what deserves color: workspace accents, focus rings, and the working wave.
• New mark: the HD pixel goose. Dawn palette by day, the classic mint colorway at night. The wordmark is Fraunces italic with the peach dot, same as the site.
• The dawn wave: the working animation now beats in the sidebar rows and on each working pane's topbar. Hue travels, nothing flashes.

Named features

The vocabulary settled: The Graph (shared memory), Runways (worktrees and tab branches), Telemetry (live agent labels), Usage, and Secure Mode.

Also

• Terminal cursors follow the theme: ink on paper by day, ivory on night.
• Sidebar, splash, settings, and sign-in all fly the same goose.
• theflock.sh redesigned to match, with a live Daybreak workspace demo and the interactive Graph Explorer.

• Claude Code panes now draw steadily by default, fixing terminal flicker in every pane, host and jailed alike
• New Workspace and Spawn Agents dialogs redesigned: more compact, clearer, and clicking an agent no longer spawns it on the spot
• Sidebar sections (Agents, Git, Pull Requests, The Graph) can be dragged into your own order by their headers, and the order is remembered
• The first sidebar tab is now Home; the workspace list under it folds like any other section and ends in a New workspace button
• Secure workspaces are marked with a shield in the workspace list, so jailed and unjailed agents are distinguishable at a glance
• Tooltips render above every layer and position correctly at all UI scales
• Sidebar polish: right-edge icons aligned on a single axis, matching pop-out buttons for The Graph and Pull Requests, quick actions can be dismissed and re-enabled in Settings under Appearance
• Team Insights shows a proper empty state instead of all zeros, and PR rows open the Pull Request manager directly

The sandbox image build failed with "docker-credential-desktop: executable file not found in $PATH" when flock was launched from Finder or the Dock, because jailed panes didn't inherit the tool locations the docker CLI needs for its credential helper. Jailed panes now get the same augmented PATH as regular panes, plus Docker's own directories, and the first-run build completes.

New workspaces can now opt in to secure mode, which runs every agent (Claude Code, opencode, Codex) inside a Docker container instead of on your Mac, so full-permission mode is safe by construction.

• New "Secure mode" toggle in the New Workspace dialog; every pane in that workspace (including later splits and spawns) runs jailed, marked with a "jailed" badge.
• The container sees only the workspace directory: no SSH keys, no keychain, no credentials, no host files. Git worktrees keep working; file paths in agent output still match your machine.
• Sign in to your agents once inside the jail; logins persist in a dedicated volume across panes and restarts. ANTHROPIC_API_KEY / OPENAI_API_KEY are passed through when set.
• The sandbox image is built locally on first use (progress shown right in the pane) and rebuilds itself when the recipe changes.
• Fails closed: if Docker isn't available, secure panes refuse to spawn rather than silently running unjailed. Closing a pane tears its container down.
• Requires Docker Desktop.

Rock-solid agent spawning. Closing agents and spawning new ones now works every time, everywhere: split into an empty tab with ⌘D, hammer split as fast as you like, spawn while zoomed. Every agent lands visibly in the grid. The races that left invisible agents running behind ghost panes are gone, workspaces corrupted by the old bug heal themselves on next launch, and a pane whose process dies now says so instead of lingering frozen.

The Graph now connects itself. Recording a decision, attempt, or note automatically links it to the files it governs, the agent who made it, and the ideas it relates to. No IDs, no ceremony. Searches are relevance-ranked, scoped to your workspace plus global knowledge, and superseded decisions stop resurfacing as if they were current. Ask what is already known about a file and get its claims and its full history in one shot.

Ground every prompt in the Graph. Each prompt you send a Claude agent is now automatically enriched with the team knowledge relevant to it (prior decisions about the files you mention, failed approaches, active claims), injected silently before the agent starts thinking. Instant, invisible when there's nothing relevant, and never in your way.

Per-agent git branching. Every pane shows a branch chip with a picker to switch or create branches in its own worktree, the Git panel gains a live agents-and-branches table, and orphaned worktrees from past sessions can be adopted by a fresh agent or pruned, with a heads-up when a branch still has unmerged work.

Voice, tuned. Live partial transcripts as you speak, a personal glossary that biases recognition toward your project's vocabulary, automatic filler-word cleanup, a hands-free lock for long dictations, and a multilingual turbo model.

Also in this release:

• Dropping a file or screenshot onto an agent lands in the pane you actually dropped it on (Retina displays hit-tested the wrong pane before)
• PR notifications match GitHub's own status callout, and a PR's review button opens the PR manager
• New "inherit from system" appearance option alongside light and dark
• Agent intent labels resist prompt noise and escape-reply leakage
• Graph sidebar renders crisply and its status dot now tells the truth when the engine is offline

• Friends: you now get a notification when a friend connects or disconnects (with their live agent count), and observe/co-pilot sessions announce when someone joins or leaves.
• Terminal: Cmd+←, Cmd+→, and Cmd+Delete line-editing shortcuts now work reliably; they used to intermittently do nothing.
• Agents: refined the auto-generated task labels shown in the pane topbar and the Agents list.

• Fixed friends always showing offline in the installed app. The packaged build's content-security policy was blocking Ably's realtime servers, so presence never connected even though sign-in worked. The app now allows Ably's endpoints and presence connects reliably.

• Friends presence is far more reliable: it no longer quietly decays over a long session (it re-syncs on every reconnect and hourly token refresh), offline friends now show a "last seen" time, and a small status light on your profile shows whether presence is connected.
• Diffs for local changes and pull requests now open in a dedicated, reusable viewer.

Your first prompt is captured, distilled into a short label, and shown in the pane header and the sidebar Agents list, with the full text on hover. Reset it from the pane menu to re-arm capture for the next task. The Pull Requests panel's ambiguous "+" is now a clearer Manage PRs button, and its icon buttons pick up the same rest-to-accent hover treatment as The Graph.

The knowledge graph is now simply The Graph throughout, its sidebar card showing live notes and agent counts. Sidebar sections can be collapsed.

PR notifications show far more at a glance: state, author, base and head branches, diff stats, and a full per-check breakdown. Git graph commits gain floating tooltips, and the git panel refreshes itself while open so external changes appear without a reload. Notes and decisions can be scoped globally, so cross-cutting knowledge surfaces in every workspace instead of just the one that recorded it.

Workspace cards in the sidebar can now be reordered by dragging.

• Review PRs in dedicated worktree workspaces; new-PR toasts merge into tabs.
• PR manager modal for the focused repo.
• A security pass from the terminal layer up, and a tighter lockdown on what the app is allowed to reach.

Also fixed a case where spawning an agent could silently do nothing.

• Auto-register the graph MCP server for Claude agents; the graph actually gets used and holds more.
• Friends interactions work end to end: accept-time targets, task submit, stream hygiene.
• Show the live git branch instead of a hardcoded name; one icon language across Friends, zero emojis.

Sign-in callback page now matches the gate.

Refreshed invite emails on the brand.

• Tabs, pop-out windows, the Graph, voice, themes, and onboarding.
• Native menu bar, GitHub PR polling with CI status, and agent display names.
• Bundled the MCP sidecar; set macOS 12 as the minimum.