Patch notes
What's new in Masterforce.
Updates, fixes, and improvements as we build the operating system. Follow along via RSS.
Shareable Connections
Connections can now be shared like any other entry, with comments and activity on skills, connections, and agents. Marketplace publishing gets a calmer, in-place workflow.
New
- Connections Share a connection with your org or specific members at View or Edit level
- Chat Comment threads and unread badges now work on skills, connections, and agents
Improved
- Marketplace Publish wizard reworked — pricing and terms moved to the final step, with an in-modal published-management view showing status, install count, and version
- Marketplace Listing detail sidebar redesigned for a calmer layout with proper category badges
Fixed
- Security Closed a cross-tenant data leak risk — share-resolution queries now scoped by workspace at the source
- Documents Detail panels no longer briefly flash the wrong view-only or unfavorited state while permissions load
- Documents Mobile editor toolbar no longer flashes or crashes on first open on phones
Claude Subscription Sign-In and Live Collaborative Editing
Connect your Claude.ai subscription directly to power the assistant, and edit documents together in real time with live presence and cursors.
New
- Assistant Connect your own Claude.ai subscription to power the assistant, not just an API key, including headless CLI login for servers
- Documents Live collaborative document editing — multiple people, and AI agents, edit the same document simultaneously with changes merging live
- Documents Presence — see who else is viewing or editing a document, with live remote cursors and a live status footer
- Data Views Expanded automation actions on rows — set a property, increment a number, add or delete a row
- Apps Org nodes (teams and departments) can now be moved and reparented in the tree
- Apps Duplicate an entry directly
Improved
- Performance Background dispatcher wakes instantly on relevant events instead of polling, so updates propagate near-instantly
- Security Login lockout after 5 failed attempts with a 15-minute cooldown, without revealing lockout state to attackers
Fixed
- Security Closed a server-side code-execution hole in formula columns — formulas now run through a sandboxed expression grammar instead of raw eval
- Assistant Revoked or expired Claude subscription sign-ins now correctly surface as broken instead of appearing healthy
- Documents Clearing a document's status no longer incorrectly reverts it to Published
Custom Icons and the Public Marketplace
Documents get custom icons and a reusable Templates shelf, and the Marketplace opens as a central, cross-instance catalog for publishing and installing templates.
New
- Documents Custom icons per document, inheritable from a template
- Apps Instance-wide Templates shelf — save any entry as a reusable template, with an inline picker at create time
- Marketplace Public marketplace launch — a central catalog for publishing and installing documents, connections, and skills across instances
- Documents Table toolbar header-column toggle; unified CommonMark-compliant markdown serializer
- Config Sysadmin can delete system agents individually and whole system-skill folders
Improved
- Apps Template rows simplified — click opens edit, direct delete icon
Fixed
- Data Views Board view auto-scrolls to off-screen columns while dragging
- Marketplace Publish wizard no longer infinite-loops when selecting a category
- Apps Newly created child nodes appear immediately; template-copy no longer loses content
Connection Authoring and System-Tier Editing
Admins can now edit system-level agents and skills directly, author new integrations declaratively in-app, and chat automatically knows what you're looking at.
New
- Config Sysadmins can promote and edit system-tier agents and skills directly in the UI, previously read-only
- Connections Author new HTTP API integration connections declaratively, no code required
- Connections Shared desktop OAuth client with loopback redirect, falling back to bring-your-own credentials
- Chat Chat automatically passes your current entity as context to the assistant, shown as a dismissible chip
- Data Views Touch improvements — hold-to-drag with visual feedback, drag-to-reschedule on calendar and gallery views
Improved
- Assistant Reduced AI token usage via smarter context and history accounting
- Config Escape key closes the detail panel from sidebar and full-page modes
Fixed
- Security Hardened Microsoft OAuth PKCE flow and closed path-traversal/secret-leak issues in connection templates
- Documents Wide tables now scroll within their own block instead of scrolling the whole page
- Documents Crash when moving a document between org nodes
Chat as a Persistent Rail
Chat moves from a modal overlay to a persistent side rail so you can converse while viewing records. Tables, mobile editing, and file uploads all get a pass, and agent budgets ship as a first-class control.
New
- Chat Chat promoted to a persistent top-level rail alongside detail panels, replacing the modal overlay
- Documents Table editing overhaul — table menu, slash command, column alignment, drag-to-reorder rows
- Documents Mobile editor redesigned for hold-to-drag interactions with the native keyboard
- Files Drag-and-drop file upload; Files tab folder counts now include binaries
- Notifications Approvals v1 — review and approve pending actions from a dedicated panel
- Assistant Agent budget controls — workspace-wide spending pool plus per-agent limits
- Config In-app feedback launcher with keyboard shortcuts
Improved
- Performance Faster data view first paint via optimized row windowing
- Chat Floating date pill while scrolling a conversation thread
Fixed
- Apps Mismatched internal IDs and filenames could silently break deleting OKRs and tasks
- Config Production update/refresh reliability — no more getting stuck in a refresh loop
- Assistant OAuth token refresh issues for Codex-based agents
Marketplace
Publish, discover, and install app templates from the Marketplace. Matrix board adds two-axis layouts for data views. Unified provider registry redesign with accordion management UI.
New
- Apps Marketplace — publish, discover, and install app templates across workspaces
- Data Views Matrix board with sub-grouping support for two-axis board layouts
- Data Views Cross-app relations — relation columns can reference rows in a different app or node
- Data Views Checkbox properties supported in group-by; relation property grouping
- Config Unified provider registry redesign with accordion layout and per-model management
- Chat @mention in message edit triggers AI; Enter saves edited message
Improved
- Data Views Favorites star added to all layouts and topbar breadcrumb
- Performance App view settings hydrated from bootstrap; first data window planning shared across views
- Apps Currency display via Intl.NumberFormat; column ordering respected in table view
Fixed
- Config Accent text derived correctly from workspace color; model selector loading and empty states
- Data Views Date grouping in table view; group direction toggle; calendar mode default; title column ordering
- Chat Workspace chat context isolation; stale message content on edit prevented
Security and Performance
Comprehensive security hardening across every API surface. Stable persistent entity IDs. Startup warmup bootstraps your workspace before the first click.
New
- Config CLI init, stop, and status commands with Cloudflare Tunnel sidecar support
- Apps Stable entity IDs read from content files with migration runner and startup integrity log
- Performance Startup warmup — shell data bootstrapped before interactive chrome, conversation rail preloaded, search palette prefetched
Improved
- Performance Node bootstrap collapsed to a single request; home bootstrap unified
- Config Dynamic OG image generation for workspace cards; per-instance database isolation
Fixed
- Security 15 hardening fixes — JWT session lifetime, auth redirect allowlist, unauthenticated API routes, signout cookie clearing, response headers, OAuth callback HTML escaping, assistant run authorization, file path containment, SVG upload validation, and more
- Apps App ref index thrashing on unknown IDs; multi-workspace realtime scoping; hardcoded org slug fallbacks removed
- Data Views Preference hydration stability; permission-gated action stability
Files, Artifacts, and Advanced Filters
Files tab rebuilt with gallery view, folder grouping, and drag-and-drop uploads. Apps gain a central artifact storage layer. Filter any data view with relative dates, user-aware operators, and relation lookups.
New
- Documents Files tab rebuilt on data views — gallery layout, folder grouping, drag multi-select, drop upload, and folder reparenting
- Apps Artifact storage system with UUID-served uploads and sidecar metadata
- Data Views Advanced filters with relative date ranges, contains_me and is_me operators, and relation display value resolution
- Data Views Grouping by relation properties and view layout switching via context menu
- Config Deployment CLI with setup wizard, backup/restore, and WebSocket merged onto app port
Improved
- Data Views All views unified onto canonical view procedures with real-time invalidation
- Apps App databases now route through the shared data-view surface
- Assistant Tool exposure ladder — AI sees only tools appropriate to its permission scope
Fixed
- Assistant Stop Generating reliable across processes; orphaned thread run recovery
- Chat Rich-text copy-paste preserves formatting; drag/drop reliability
- Documents Document block drag selection; editor auto-save skips unchanged content
- Data Views View ID collision prevention; board drag-and-drop optimistic cache update
Orchestrator, Connections, and Multi-Provider AI
The Orchestrator gives you a command centre for all AI activity. Connect external services via MCP. Multi-provider AI adapter supports Anthropic and OpenAI. Trigger the assistant and agents directly from chat.
New
- Orchestrator Orchestrator modal with Agents, Assistant, Logs, and Usage tabs
- Orchestrator Per-agent budget bars, cost tracking, and configurable daily limits
- Connections Connect external services to your workspace via MCP servers
- Connections Microsoft email OAuth and OpenAI Codex auth with org-scoped credentials
- Agent System agents surfaced in Party tab and @mention autocomplete
- Assistant Domain tools for creating, updating, and deleting entries and nodes — all permission-enforced
- Notifications Notification panel redesign with archive UX and hierarchy walk
- Chat Clickable entity links in messages; @AI mention replaces raw model list
Improved
- Assistant SDK session resumption replaces manual conversation history loading
- Agent Agent config moved fully to YAML files; model badge replaces skills/tools UI
- Chat Thread streaming refactored with entity linker for cross-entity navigation
Fixed
- Agent Agent delete now removes entry from YAML file
- Assistant MCP permission enforcement, streaming line-break concatenation, and read_file path resolution
- Security Auth redirect allowlist hardened; org mutations require org admin
Apps, Data Views, and Sharing
Apps bring custom databases to any node. View and organize tasks, OKRs, and apps across table, board, calendar, and list layouts with inline editing. Share any node with granular permissions.
New
- Apps Custom databases on any node with configurable properties and views
- Data Views Table, board, calendar, and list layouts with a shared toolbar
- Data Views Inline single-click cell editing with auto-sizing
- Data Views Calendar date field selector, week view toggle, and today indicator
- Agent Agent detail panel with system prompt display, Active Work list, and context file sharing
- People People detail panel with Active Work navigation
- Security Access Audit modal showing all role assignments across org and node levels
Improved
- Data Views Properties panel with reorderable columns and description field selector
- Notifications Share Modal redesigned with side-by-side options and grouped access list
Fixed
- People Member role assignment and removal reliability
- Agent Agent autocomplete scoped to node access only
- Chat Unread tracking and dividers
Tasks, OKRs, Documents, and Chat
The core workspace: create and track tasks with statuses and priorities, set OKRs linked to key results, write YAML-backed documents, and chat with your team in threaded conversations.
New
- Tasks Create tasks with statuses, priorities, owners, due dates, and dependency tracking
- OKRs Set objectives and key results with progress tracking and task linkage
- Documents Rich document editor backed by YAML with auto-save
- Chat Workspace chat with threaded conversations and unread tracking
- Security Authentication with role-based access control across workspaces