Crowe Logic 0.24.15

Crowe Logic 0.24.15

The Master Brand Directive pass and the council's first run. Carries everything on main since 0.24.14:

• The app wears the directive. Light surfaces are Bone and Paper, dark surfaces Ink and Carbon, with Brass as the one signal color for the active control, the selected engine and the authority gate; status colors stay functional. Radii are 8 px or under, depth comes from 1 px rules instead of shadows, and there is no glass anywhere. Fraunces, Inter and JetBrains Mono remain the faces. Where the directive's Brass and Muted values fell under the app's enforced contrast gates, the text values were darkened and the reason is in the stylesheet (PR 122).
• The words follow the architecture. The tool permission tier reads as the operating envelope, with Plan, Read, Edit and Execute as the operating modes; the picker says Select engine; the gate authorizes; orchestrated multi-agent work is a mission and a single execution is a run. Config keys, IPC channels and the gateway API did not change (PR 122).
• The Gate Glyph is the app mark: a C jaw and an L jaw framing an aperture, with the brass core from the wordmark, on a Carbon tile. It is the macOS and Android icon and the standalone mark in the renderer; the wordmark itself is unchanged, and the iOS icon is untouched while 1.0 is in review (PR 122).
• Rooms gain a scoped council autopilot, model contacts and a voting interface. File authority for a council seat is the intersection of the roster and the room's operating envelope; receipts carry the record; the council can run on a headless host; a roster identity the registry cannot resolve fails the file grant closed (PR 121).

The app checks for updates at the releases worker, https://crowe-releases.yellow-block-3adc.workers.dev/desktop/channel/, which also answers at https://releases.crowelogic.com/desktop/channel/. macOS builds are notarized and stapled on the release machine. The Windows installer is signed through Azure Trusted Signing.

v0.24.14

Crowe Logic 0.24.14

Crowe Browser, the cloud browser for agents. Carries everything on main since 0.24.13:

• The agent can browse the web in a browser that runs in the cloud, not on your machine. Eight tools drive it: browser_open, browser_read, browser_click, browser_type, browser_press, browser_scroll, browser_back and browser_screenshot. Reading tools (open, read, screenshot, scroll, back) work from the Read tier; clicking, typing and key presses wait for Execute, the way the shell does. Opening a URL that carries a query string, a fragment or credentials asks first in every approval mode, and typing something shaped like a secret asks too. One browser session per chat or per Room seat, ended when the seat stops, on sign-out and on quit (PR 119).
• A Cloud browser card in the thread shows what the agent is looking at: a live thumbnail of the page, the address as a chip, the page title, and Open. Open puts the live view in a panel beside the transcript, with its own address bar and a Take over control, so you can watch the agent work or finish a step yourself, a sign-in or a CAPTCHA for instance. Room threads get the same card. On the phone, Open hands the live view to the phone browser (PR 119).
• Signing in with Crowe ID is all it takes. The service accepts your Crowe ID; no key is needed. Settings shows a Crowe Browser section with the state, Crowe ID, Key or Not set, and a service key field for the signed-out case. A key, if you paste one, rests in the encrypted credential store, never in config.json; a key found in an older config.json moves there once (PR 119).
• The service itself, https://browser.crowelogic.com, runs one Chromium per session on Cloudflare, with a live view drawn from the browser's own screencast, two concurrent sessions per person, and a ten minute idle timeout that any action or an open live view extends.
• Release engineering: the release run no longer keeps an unsigned macOS build it never ships, and a full artifact quota cannot block the release step; build artifacts leave after three days; the developers channel workflow lives on main and is dispatched from there (PRs 110, 112, 113, 78). The releases page says the Windows installer is signed, because it is (PR 115). README and ROADMAP describe 0.24.13 as it shipped, and the 0.24.13 notes are in docs (PRs 116, 114). GitHub Actions bumped (PR 104).

The app checks for updates at the releases worker, https://crowe-releases.yellow-block-3adc.workers.dev/desktop/channel/, which also answers at https://releases.crowelogic.com/desktop/channel/. macOS builds are notarized and stapled on the release machine. The Windows installer is signed through Azure Trusted Signing; SmartScreen shows the publisher as Michael Crowe until an organisation validation is added.

v0.24.13

Crowe Logic 0.24.13

Rooms in the chat, and a fix. Carries everything on main since 0.24.12:

• The chat seat can read Rooms. Two read-only tools, list_rooms and read_room, let your own seat see every Room (title, members, last activity, unread count, whether a question waits for you, the last line said) and read a Room's conversation as you see it: who said what, asks with their options and state, relays labelled with the room they came from, reviews, reactions. Room seats do not get these tools, so a Room's workers stay blind to sibling Rooms and operator relays remain the only path between them (PR 108).
• A tool-only turn no longer says "The model returned no text. Send it again." after it read or ran something. The one-line fallback counts commands, edits and tools again, so it reads "Done" with what happened, and the empty-reply line appears only when nothing ran (PR 106).
• Housekeeping: the web shell deploy script stamps its assets with the commit time so browsers fetch the new renderer once per deploy, and ships activity.js from its real path (PR 107); 0.24.12 release notes in docs (PR 109).
• Tests pin the Rooms boundary: a whole-turn test for the two Rooms tools and six checks that the room seats' context carries no Rooms hook, that there is one call site, and that Room ids keep their prefix (PR 111).

The app checks for updates at the releases worker, https://crowe-releases.yellow-block-3adc.workers.dev/desktop/channel/, which also answers at https://releases.crowelogic.com/desktop/channel/. macOS builds are notarized and stapled on the release machine. The Windows installer is signed through Azure Trusted Signing; SmartScreen shows the publisher as Michael Crowe until an organisation validation is added.

v0.24.12

Crowe Logic 0.24.12

Console and mark edition. Carries everything on main since 0.24.11:

• Terminals are plain shells. Every terminal-backed panel, the agent console, the palette terminal, the dock launcher and the Agent Fleet cards, opens your login shell at its prompt and types nothing. Before, the agent console typed a command name into the shell as soon as it started, which on a clean machine began every session with "command not found". The objective dock still runs on the gateway agent. The panel head reads AGENT, without "CLI" (PR 96).
• A shell that fails to start is refused cleanly, with the reason printed in the panel, instead of a terminal left on "starting" (PR 96).
• The worker's mark follows the turn. While a turn runs, the mark rides beside the newest block, a tool card's rail dot or the first line of text, gliding there in 360 ms. When the turn lands, the flourish plays where the eye is and the mark goes home to the head of the turn. A tool-only turn lands beside the hint that replaces its cards. Under reduced motion there is no glide and the mark returns at once. An error or a stop clears it immediately (PRs 102, 105).
• For developers: a packaged build can be smoked on a throwaway profile with scripts/smoke-packaged-mac.sh, either a fresh unsigned build of the checkout or, with --app, an installed app or a release unzipped from the feed. The launch goes through Electron's --user-data-dir switch and never touches the live profile (PR 99).
• The releases worker gains an install counter: one Workers Analytics Engine data point per installer or update-feed request, by channel, platform and artifact kind. It deploys separately from the app; nothing in the app changed (PR 95).
• The 0.24.11 notes were corrected on Delivered/Read wording and the updater URL (PR 103).

The app checks for updates at the releases worker, https://crowe-releases.yellow-block-3adc.workers.dev/desktop/channel/, which also answers at https://releases.crowelogic.com/desktop/channel/. macOS builds are notarized and stapled on the release machine. The Windows installer is signed through Azure Trusted Signing; SmartScreen shows the publisher as Michael Crowe until an organisation validation is added.

v0.24.11

Crowe Logic 0.24.11

Messages edition. Carries everything on main since 0.24.10:

• Conversations read as texts. A worker's bubbles sit on the left as raised cards with its mark beside the last bubble of a run; yours sit on the right, unnamed. Consecutive texts from one sender a few minutes apart group into a run. Sender names appear on the first bubble of a run, and only in a group (PR 100).
• Delivered and Read. "Delivered" or "Read" with the time sits under your last text and nowhere else. Read means a worker took it up.
• A typing bubble in the worker's own mark while it works, always the last thing in the thread.
• Your text lands in the thread the moment you send it, not when the worker's turn returns.
• Reactions. Hover a worker's bubble and pick a word: Good, More, No or Why. It sits on the bubble as a chip, gold because it is yours, and a second tap takes it off. The worker reads it on its next turn as a line after that message, so a "Why" is an instruction without a sentence (PR 101).
• Workers are named as colleagues, without the company in front: Operator, Studio Director, Orchestrator. The contact list, the rail, the thread and the phone all agree.
• A pill composer whose Send lights when there is text; dock tabs titled by the conversation instead of "Untitled room"; the New message list on the same grid.

Updates are served from https://releases.crowelogic.com/desktop/channel/. macOS builds are notarized and stapled on the release machine. The Windows installer is signed through Azure Trusted Signing; SmartScreen shows the publisher as Michael Crowe until an organisation validation is added.

v0.24.10

Crowe Logic 0.24.10

Connectors and tools edition. Carries everything on main since 0.24.9:

• Channel Analytics: the first server bundled in the app. A read-only connector over the channel manager's state (snapshots, recent uploads, machine Shorts, hand tasks, daily brief, Stripe attribution). A room seat answers "morning snapshot" from it; the collector run sits behind the edit tier. The bundled server runs as a utility process so a packaged build can start it (PR 82).
• Messages rail: Rooms read as conversations with workers, with a New message contact picker, Add to conversation, and a Developers edition roster filter (PR 85).
• Worker marks: each worker wears one of the eight thinking marks as vector, animated only while it reasons, still under reduced motion (PR 92).
• generate_image: a picture from a prompt through the user's own image key, saved under assets/generated. Always asks before it spends (PR 86).
• share_preview: a temporary public link to what the agent built, a folder or a local port, with an expiry and a stop. Always asks (PR 90).
• Mail connector: send_email over SMTP as a built-in plugin, gated at Execute, always asks, and honest about "possibly sent" (PR 91).
• export_document: Markdown in, a PDF, HTML or Markdown file out under exports/, behind the same gates as a file write and the secret scanner (PR 88).
• The redaction shown on tool cards and approval cards names the kind of secret it removed, in brackets, and cuts a private key block from header to footer.

Updates are served from https://releases.crowelogic.com/desktop/channel/. macOS builds are notarized and stapled on the release machine. The Windows installer is signed through Azure Trusted Signing; SmartScreen shows the publisher as Michael Crowe until an organisation validation is added.

v0.24.9

Crowe Logic 0.24.9

Rooms edition. Carries everything on main since 0.24.8:

• Rooms are standing colleagues. The rail lists each room like an inbox: who is in it, the last thing said, an unread dot, and a mark that turns while a seat works. A room has a brief every seat carries, and routines that let it speak first: daily, weekdays, weekly or every N minutes, in local time, with a notification when it posts (PR 71).
• Seats work out loud. What a seat says between tool rounds lands as short messages while it is still working; the last one is its reply.
• Seats ask instead of guessing. A seat can end its turn on one question with up to four options you answer in a tap; typing over the card works too. The choice is a message, not a permission: the tool gate still decides what may run.
• Messages can be carried into another room, where that room's seat answers them, attributed to who said it and where.
• Activity: the panel beside the chat shows the agent's work as it happens, with a Follow mode that keeps up with it (PR 84).
• First run asks for a project folder instead of pointing the workspace at the home folder; the sign-in copy states that the free tier needs no card and no keys; your own terminal is no longer gated by the agent's tier (PR 87).
• Plugin servers start with the login shell's PATH, so the GitHub plugin works from a Finder launch, not only from a terminal (PR 83).
• Sign-in: a second click on Sign in joins the pending attempt instead of failing on the loopback ports (PR 89).
• run_shell: a line is treated as a cd only when it is nothing but a cd; cd X && cmd now runs in the shell (PR 93).
• Fix: an approval raised by a room seat had nowhere to be answered and was denied after five minutes. The room thread now draws the approval card under the seat that asked.
• Fix: a hand-configured MCP server's tools ran ungated from a read-only room. A room seat's call to such a tool now asks first unless the tool's name plainly says it only reads (get, list, search, analytics and the like). The name test is a heuristic and says so.
• Build: the phone bundle fails when the built page names a file the build did not copy (PR 94).

Known limitations, stated in the app as well:

• Rooms run read-only until worktree isolation lands. A room can find, report and ask; the action goes through an approval card or your hands.
• Routines run only while the app is running. A laptop that slept through 07:00 runs the brief on waking if it is within two hours, and otherwise leaves a note.
• Real seats on real channel data are untested beyond the founder's own runs; every automated check uses a stubbed gateway.

Merged after this cut and shipping in 0.24.10: the Channel Analytics connector, the Messages rail, the worker marks, generate_image, share_preview, the Mail connector and export_document.

Updates are served from https://releases.crowelogic.com/desktop/channel/. macOS builds are notarized and stapled on the release machine. The Windows installer is signed through Azure Trusted Signing; SmartScreen shows the publisher as Michael Crowe until an organisation validation is added.

Crowe Logic 0.24.8

Full edition. Carries everything on main since 0.24.7:

• The in-app browser rendered as a thin strip in both editions; the webview now fills its panel (PR 74).
• Repositories sidebar: GitHub repositories listed and opened from the Code group (PR 76).
• Developer edition build configuration and its publish channel (PRs 73, 75).

Updates are served from https://releases.crowelogic.com/desktop/channel/. macOS builds are notarized and stapled on the release machine; the Windows installer is unsigned (SmartScreen will show an unknown publisher).

Crowe Logic 0.24.5

Official downloads: https://crowe-releases.yellow-block-3adc.workers.dev/

macOS 0.24.5 is Developer ID signed, Apple-notarized, and stapled. Linux 0.24.5 is available as AppImage and deb. The existing stable Windows feed remains active while the native Windows build runner is restored.

Full Changelog: v0.24.4...v0.24.5

v0.24.4

Free tier falls back to CroweLM Flash, not Mycelium.

The desktop and mobile bridge read the free model from the gateway catalog once it loads; FREE_MODEL is only the fallback for the window before the catalog arrives and for a 403 with no catalog. Both copies still said crowelm-mycelium, which 524s for minutes on a cold start. Now crowelm-flash.

macOS (arm64 + x64) and Linux (x64) are notarized/built from v0.24.4. Windows stays at 0.24.0 (no signing certificate).

Verify downloads with shasum -a 256 -c SHA256SUMS.