Patch notes

What's new in Masterforce.

Updates, fixes, and improvements as we build the operating system. Follow along via RSS.

Shareable Connections

Connections can now be shared like any other entry, with comments and activity on skills, connections, and agents. Marketplace publishing gets a calmer, in-place workflow.

New

  • Share a connection with your org or specific members at View or Edit level
  • Comment threads and unread badges now work on skills, connections, and agents

Improved

  • Publish wizard reworked — pricing and terms moved to the final step, with an in-modal published-management view showing status, install count, and version
  • Listing detail sidebar redesigned for a calmer layout with proper category badges

Fixed

  • Closed a cross-tenant data leak risk — share-resolution queries now scoped by workspace at the source
  • Detail panels no longer briefly flash the wrong view-only or unfavorited state while permissions load
  • Mobile editor toolbar no longer flashes or crashes on first open on phones

Claude Subscription Sign-In and Live Collaborative Editing

Connect your Claude.ai subscription directly to power the assistant, and edit documents together in real time with live presence and cursors.

New

  • Connect your own Claude.ai subscription to power the assistant, not just an API key, including headless CLI login for servers
  • Live collaborative document editing — multiple people, and AI agents, edit the same document simultaneously with changes merging live
  • Presence — see who else is viewing or editing a document, with live remote cursors and a live status footer
  • Expanded automation actions on rows — set a property, increment a number, add or delete a row
  • Org nodes (teams and departments) can now be moved and reparented in the tree
  • Duplicate an entry directly

Improved

  • Background dispatcher wakes instantly on relevant events instead of polling, so updates propagate near-instantly
  • Login lockout after 5 failed attempts with a 15-minute cooldown, without revealing lockout state to attackers

Fixed

  • Closed a server-side code-execution hole in formula columns — formulas now run through a sandboxed expression grammar instead of raw eval
  • Revoked or expired Claude subscription sign-ins now correctly surface as broken instead of appearing healthy
  • Clearing a document's status no longer incorrectly reverts it to Published

Custom Icons and the Public Marketplace

Documents get custom icons and a reusable Templates shelf, and the Marketplace opens as a central, cross-instance catalog for publishing and installing templates.

New

  • Custom icons per document, inheritable from a template
  • Instance-wide Templates shelf — save any entry as a reusable template, with an inline picker at create time
  • Public marketplace launch — a central catalog for publishing and installing documents, connections, and skills across instances
  • Table toolbar header-column toggle; unified CommonMark-compliant markdown serializer
  • Sysadmin can delete system agents individually and whole system-skill folders

Improved

  • Template rows simplified — click opens edit, direct delete icon

Fixed

  • Board view auto-scrolls to off-screen columns while dragging
  • Publish wizard no longer infinite-loops when selecting a category
  • Newly created child nodes appear immediately; template-copy no longer loses content

Connection Authoring and System-Tier Editing

Admins can now edit system-level agents and skills directly, author new integrations declaratively in-app, and chat automatically knows what you're looking at.

New

  • Sysadmins can promote and edit system-tier agents and skills directly in the UI, previously read-only
  • Author new HTTP API integration connections declaratively, no code required
  • Shared desktop OAuth client with loopback redirect, falling back to bring-your-own credentials
  • Chat automatically passes your current entity as context to the assistant, shown as a dismissible chip
  • Touch improvements — hold-to-drag with visual feedback, drag-to-reschedule on calendar and gallery views

Improved

  • Reduced AI token usage via smarter context and history accounting
  • Escape key closes the detail panel from sidebar and full-page modes

Fixed

  • Hardened Microsoft OAuth PKCE flow and closed path-traversal/secret-leak issues in connection templates
  • Wide tables now scroll within their own block instead of scrolling the whole page
  • Crash when moving a document between org nodes

Chat as a Persistent Rail

Chat moves from a modal overlay to a persistent side rail so you can converse while viewing records. Tables, mobile editing, and file uploads all get a pass, and agent budgets ship as a first-class control.

New

  • Chat promoted to a persistent top-level rail alongside detail panels, replacing the modal overlay
  • Table editing overhaul — table menu, slash command, column alignment, drag-to-reorder rows
  • Mobile editor redesigned for hold-to-drag interactions with the native keyboard
  • Drag-and-drop file upload; Files tab folder counts now include binaries
  • Approvals v1 — review and approve pending actions from a dedicated panel
  • Agent budget controls — workspace-wide spending pool plus per-agent limits
  • In-app feedback launcher with keyboard shortcuts

Improved

  • Faster data view first paint via optimized row windowing
  • Floating date pill while scrolling a conversation thread

Fixed

  • Mismatched internal IDs and filenames could silently break deleting OKRs and tasks
  • Production update/refresh reliability — no more getting stuck in a refresh loop
  • OAuth token refresh issues for Codex-based agents

Marketplace

Publish, discover, and install app templates from the Marketplace. Matrix board adds two-axis layouts for data views. Unified provider registry redesign with accordion management UI.

New

  • Marketplace — publish, discover, and install app templates across workspaces
  • Matrix board with sub-grouping support for two-axis board layouts
  • Cross-app relations — relation columns can reference rows in a different app or node
  • Checkbox properties supported in group-by; relation property grouping
  • Unified provider registry redesign with accordion layout and per-model management
  • @mention in message edit triggers AI; Enter saves edited message

Improved

  • Favorites star added to all layouts and topbar breadcrumb
  • App view settings hydrated from bootstrap; first data window planning shared across views
  • Currency display via Intl.NumberFormat; column ordering respected in table view

Fixed

  • Accent text derived correctly from workspace color; model selector loading and empty states
  • Date grouping in table view; group direction toggle; calendar mode default; title column ordering
  • Workspace chat context isolation; stale message content on edit prevented

Security and Performance

Comprehensive security hardening across every API surface. Stable persistent entity IDs. Startup warmup bootstraps your workspace before the first click.

New

  • CLI init, stop, and status commands with Cloudflare Tunnel sidecar support
  • Stable entity IDs read from content files with migration runner and startup integrity log
  • Startup warmup — shell data bootstrapped before interactive chrome, conversation rail preloaded, search palette prefetched

Improved

  • Node bootstrap collapsed to a single request; home bootstrap unified
  • Dynamic OG image generation for workspace cards; per-instance database isolation

Fixed

  • 15 hardening fixes — JWT session lifetime, auth redirect allowlist, unauthenticated API routes, signout cookie clearing, response headers, OAuth callback HTML escaping, assistant run authorization, file path containment, SVG upload validation, and more
  • App ref index thrashing on unknown IDs; multi-workspace realtime scoping; hardcoded org slug fallbacks removed
  • Preference hydration stability; permission-gated action stability

Files, Artifacts, and Advanced Filters

Files tab rebuilt with gallery view, folder grouping, and drag-and-drop uploads. Apps gain a central artifact storage layer. Filter any data view with relative dates, user-aware operators, and relation lookups.

New

  • Files tab rebuilt on data views — gallery layout, folder grouping, drag multi-select, drop upload, and folder reparenting
  • Artifact storage system with UUID-served uploads and sidecar metadata
  • Advanced filters with relative date ranges, contains_me and is_me operators, and relation display value resolution
  • Grouping by relation properties and view layout switching via context menu
  • Deployment CLI with setup wizard, backup/restore, and WebSocket merged onto app port

Improved

  • All views unified onto canonical view procedures with real-time invalidation
  • App databases now route through the shared data-view surface
  • Tool exposure ladder — AI sees only tools appropriate to its permission scope

Fixed

  • Stop Generating reliable across processes; orphaned thread run recovery
  • Rich-text copy-paste preserves formatting; drag/drop reliability
  • Document block drag selection; editor auto-save skips unchanged content
  • View ID collision prevention; board drag-and-drop optimistic cache update

Orchestrator, Connections, and Multi-Provider AI

The Orchestrator gives you a command centre for all AI activity. Connect external services via MCP. Multi-provider AI adapter supports Anthropic and OpenAI. Trigger the assistant and agents directly from chat.

New

  • Orchestrator modal with Agents, Assistant, Logs, and Usage tabs
  • Per-agent budget bars, cost tracking, and configurable daily limits
  • Connect external services to your workspace via MCP servers
  • Microsoft email OAuth and OpenAI Codex auth with org-scoped credentials
  • System agents surfaced in Party tab and @mention autocomplete
  • Domain tools for creating, updating, and deleting entries and nodes — all permission-enforced
  • Notification panel redesign with archive UX and hierarchy walk
  • Clickable entity links in messages; @AI mention replaces raw model list

Improved

  • SDK session resumption replaces manual conversation history loading
  • Agent config moved fully to YAML files; model badge replaces skills/tools UI
  • Thread streaming refactored with entity linker for cross-entity navigation

Fixed

  • Agent delete now removes entry from YAML file
  • MCP permission enforcement, streaming line-break concatenation, and read_file path resolution
  • Auth redirect allowlist hardened; org mutations require org admin

Apps, Data Views, and Sharing

Apps bring custom databases to any node. View and organize tasks, OKRs, and apps across table, board, calendar, and list layouts with inline editing. Share any node with granular permissions.

New

  • Custom databases on any node with configurable properties and views
  • Table, board, calendar, and list layouts with a shared toolbar
  • Inline single-click cell editing with auto-sizing
  • Calendar date field selector, week view toggle, and today indicator
  • Agent detail panel with system prompt display, Active Work list, and context file sharing
  • People detail panel with Active Work navigation
  • Access Audit modal showing all role assignments across org and node levels

Improved

  • Properties panel with reorderable columns and description field selector
  • Share Modal redesigned with side-by-side options and grouped access list

Fixed

  • Member role assignment and removal reliability
  • Agent autocomplete scoped to node access only
  • Unread tracking and dividers

Tasks, OKRs, Documents, and Chat

The core workspace: create and track tasks with statuses and priorities, set OKRs linked to key results, write YAML-backed documents, and chat with your team in threaded conversations.

New

  • Create tasks with statuses, priorities, owners, due dates, and dependency tracking
  • Set objectives and key results with progress tracking and task linkage
  • Rich document editor backed by YAML with auto-save
  • Workspace chat with threaded conversations and unread tracking
  • Authentication with role-based access control across workspaces