agent-office-studio 0.7.0 → 0.9.1

package/CHANGELOG.md

@@ -4,7 +4,67 @@ Notable changes to Agent Office. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and versions follow
 [Semantic Versioning](https://semver.org/).
 
-## Unreleased
+## 0.9.1 — 2026-10-15
+
+### Added
+- **Windows.** On a wide screen Chat, Jobs, Projects and Team each get their own window: drag the title bar, pull any edge or corner to resize, close with the x, click to bring one forward. Where each sits is remembered. On a phone they go back into the sidebar. In Dock mode the job card can be dragged by its top and resized from any edge; double-click puts it back.
+- **Build mode.** Pick up a desk, the communal table, the pool table or anything the office has bought, slide it about on a snapped grid with a green or red patch under it, and put it down. The arrangement is saved per layout.
+- **PDFs open in the file viewer** (pdf.js), loaded on the first PDF opened. The server serves a file as a PDF only if it really is one.
+- **Lend only some of your agents.** A link can name which of your agents a guest may use; their jobs run on those alone.
+- Setting to turn break-room chatter and pool off; off posts nothing to #chill-room.
+
+### Changed
+- Every office layout is free to switch to.
+- Answering a job (in its thread, by reply or through Chief) clears what it was waiting on you for, and the Needs you pane can dismiss one ask or all of them.
+
+### Fixed
+- The test scripts that copy the app into a temp folder now skip `desktop/`; its 4.5 GB Tauri build folder was filling the disk mid-suite.
+
+## 0.9.0 — 2026-10-15
+
+### Added
+- **Edit files in the office.** Each project has an Edit files button that opens its folders and text files; Cmd/Ctrl+S saves, and a save is refused if the file changed on disk meanwhile. The editor is CodeMirror, with syntax highlighting by file type, line numbers, folding, bracket matching, find (Cmd/Ctrl+F) and undo, coloured from the office theme, and it loads only when opened.
+- A job's "What changed" list has an Edit button on each changed file. Jobs also remember the files their agent wrote to, and where git can't say what changed they show them as "Files edited", each with an Edit button.
+- **A desktop app** (Tauri) with a designed DMG installer. The dmg is ad-hoc signed as a whole bundle so a downloaded copy isn't reported damaged; the README covers the Gatekeeper workaround.
+- Chief can hand out several jobs from one message, at most one per person.
+- Quality badges: Straight through, Second wind, Team player, Second pair of eyes and Quick study.
+
+### Security
+- Two hardening passes over guests, links and the office page. The key cookie holds a MAC of the key, and the office page sends a CSP that limits images and forms. Leaderboard rate limits use the IPv6 /64.
+- Guests: a guest's cache tokens are counted call by call (reads at a tenth), their replies and open jobs are held to the host's current limits, an unlinked guest's open jobs are stopped, and `guests.json` is written private to the account.
+- Link handles and project names match exactly (case aside), and prototype names are refused as link ids.
+- Snapshotting never runs a project's clean or smudge filters. Away jobs are limited to roster, flag and clear_context. Below Full autonomy, `attach_files` takes only files in the job's project. Job tokens stay out of the projects folder.
+- Desktop: the office is proved before its key is sent, IPC is scoped to its port, and `tauri.localhost` is allowed only on Windows on its default port.
+
+### Fixed
+- A process-group kill happens only when the group's leader is the process we saw.
+- A bet on a job handed over by one of its parties is voided.
+- Visits drop copies with nothing to review and cap copies per guest.
+- The installed-package check in CI looked for a page title the app dropped on Oct 12, which kept CI red on master.
+
+## 0.8.1 — 2026-10-13
+
+### Added
+- Agents no longer leave processes running. Whatever a job started and left behind (dev servers, watchers, background test runs, test copies of a server) is stopped when the job ends. An agent can keep one with the new `keep_running` tool, and you are told what was kept and how to stop it.
+- Heavy builds and full test suites take turns. Agents call the new `heavy_work` tool before a Gradle, Xcode or emulator run, a whole-app jest or vitest run, or a docker build. While one is running, the next waits for its turn and you get a **Delayed** notice in #general.
+- New jobs wait while the machine is struggling: when the number of working agents reaches **Agents working at once** in Settings (default 4, `OFFICE_MAX_AGENTS`), or, once 3 or more agents are working, when the machine is swapping memory hard or the processor is badly overloaded. Up to 3 agents always start, whatever else the laptop is doing. You get an **On hold** notice in #general and a desktop notification saying why, and the job starts by itself when that changes.
+
+### Changed
+- Agents are told to run jest with `--maxWorkers=2`.
+
+## 0.8.0 — 2026-10-13
+
+### Added
+- Switch a job's model from its card. The Model row in the job's details is now a picker; a running job finishes its turn, then resumes the same session on the new model. A job the chief sized stops climbing on its own once you choose. Jobs on someone else's account stay as they are.
+- Agents can show you files. A new `attach_files` office tool stages images or files (screenshots, say), up to 6 of 25 MB each, and they ride on the agent's next message to you: its final reply, a flag or a channel post.
+- A "needs you" strip above the message box lists each job still waiting on you, with a link that scrolls to the message.
+- Open the office on a phone from anywhere. The phone button in the side panel is always there: **Make a public address** starts a Cloudflare quick tunnel and shows a QR code for it once the address works from outside. Nothing to install: `cloudflared` is used from the PATH, or a pinned, checksum-verified release is downloaded once. Off until you press it, closed when you press it again or the office stops, and the key stays the only way in. See [On your phone](docs/phone.md).
+- Open the office on a phone by scanning a QR code. `agentoffice --phone` (or `OFFICE_LAN=1`) also listens on your local network, prints a QR code with the link at start, and shows the same code under the new phone button in the side panel. Off unless you ask: by default the office still listens on `127.0.0.1` only. It is plain `http` with the key in the link, so home Wi-Fi only; see [On your phone](docs/phone.md).
+
+### Changed
+- A job's details fold away behind a **Details** row that summarises model, cost and time, and remembers whether you left it open.
+- On a phone the 3D view renders lighter (no ambient-occlusion pass, a small shadow map, no antialiasing, a lower pixel ratio). Add `?lite=0` or `?lite=1` to the address to override the guess.
+- The side panel's usage meters sit in a two-column grid, and its popovers no longer overflow narrow screens.
 
 ## 0.7.0 — 2026-10-12
 

package/README.md

@@ -23,6 +23,17 @@ npm install
 npm start            # builds, then serves on http://localhost:4317
 ```
 
+Prefer an app window to a browser tab? There's a [desktop app](docs/desktop.md)
+(Tauri, macOS): it starts the office for you on a free local port and opens it
+in its own window. Build it from source with `cd desktop && npm install && npm run build`.
+
+**Opening a downloaded dmg.** The app isn't notarized by Apple yet, so macOS
+blocks it the first time. If you see "Agent Office is damaged" or "can't be
+opened", it isn't damaged: run `xattr -cr "/Applications/Agent Office.app"` in
+Terminal, then open it. Or right-click the app, choose Open, and confirm (on
+macOS 15+: System Settings, Privacy & Security, Open Anyway). Details in
+[Desktop app](docs/desktop.md#opening-a-downloaded-build).
+
 You need Node.js 20+, git, and [Claude Code](https://docs.anthropic.com/en/docs/claude-code)
 signed in on this machine (or an Anthropic API key). Your projects are the
 folders next to this one (or, with `agentoffice`, in the folder you run it from) — see [Getting started](docs/getting-started.md).
@@ -59,7 +70,7 @@ folders next to this one (or, with `agentoffice`, in the folder you run it from)
   was doing.
 - **Talk to it.** Dictate with whisper.cpp and hear replies in a different
   voice per agent — all on this machine.
-- **Yours, on your machine.** It listens on localhost only. Use it on your
+- **Yours, on your machine.** It listens on localhost only (unless you start it with `--phone` to scan a QR code from your phone). Use it on your
   Claude plan or with an API key.
 
 ## Guides
@@ -82,6 +93,7 @@ folders next to this one (or, with `agentoffice`, in the folder you run it from)
 | [Configuration](docs/configuration.md) | every setting |
 | [Talking out loud](docs/voice.md) | speech in and voices out |
 | [On your phone](docs/phone.md) | install it like an app |
+| [Desktop app](docs/desktop.md) | the Tauri shell: how it starts the office, building it |
 | [How the office works](docs/how-it-works.md) | jobs, office tools, where things are kept |
 | [Security](docs/security.md) | who can reach it and what jobs may do |
 | [Development](docs/development.md) | dev server, shipping, testing safely |

package/bin/agentoffice.js

@@ -61,21 +61,26 @@ if (arg === '--link') {
 if (arg === '--help' || arg === '-h') {
   console.log(`agentoffice ${pkg.version}
 
-Usage: agentoffice [--port <n>]   (or agentstudio)
+Usage: agentoffice [--port <n>] [--phone]   (or agentstudio)
        agentoffice --link         print the running office's link, with its key
 
 Starts the office on a free port: ${DEFAULT_PORT} if it is open, otherwise any
 free one. Choose your own with --port or PORT; that one is used as given.
+--phone also listens on your local network and prints a QR code that opens the
+office on a phone on the same Wi-Fi (plain http: trusted networks only).
 Needs Claude Code (\`claude\`) installed and signed in.
 
   OFFICE_ROOT   folder whose subfolders are your projects (default: this folder)
   OFFICE_DATA   where the office keeps its state (default: ~/.agent-office)
   PORT          port to listen on (default: ${DEFAULT_PORT}, or any free port)
+  OFFICE_LAN    1 does what --phone does
 
 Docs: ${pkg.homepage}`);
   process.exit(0);
 }
 
+if (args.includes('--phone')) process.env.OFFICE_LAN = '1';
+
 const chosen = portFlag() ?? process.env.PORT;
 if (chosen !== undefined && chosen !== '') {
   const n = Number(chosen);