Agent Lookout 0.2.13

Agent Lookout 0.2.13 adds four agents, Mistral Vibe, Gemini CLI, OpenCode and Qwen Code, and the Mac app now sets up Allow and Deny for Claude Code by itself.

New

• Four more agents, with no setup. Their sessions show up beside Claude Code's, Codex's and Antigravity's, read-only, from each agent's own files:

  • Mistral Vibe: working, idle, finished or failed, by title and folder.
  • Gemini CLI: working or idle, by title and folder.
  • OpenCode: working, idle, failed or finished, read from its database with sqlite3, on macOS and Linux.
  • Qwen Code: working, idle or finished, from the list of running sessions Qwen Code keeps.

  Each was built from that agent's public source and hasn't yet been checked on a computer running it. What each agent can report, in Sources, says what each one shows and what it doesn't yet. None of them shows as needing you yet.

• Allow and Deny with no setup. The first time the Mac app opens, if Claude Code is installed and Agent Lookout's plugin isn't, the app installs it with Claude Code's own commands, once. It never reinstalls a plugin you removed. The Overview says what it did and how to remove it. AGENT_LOOKOUT_PLUGIN_INSTALL=off turns this off, and the browser version and npx never install anything.

Changed

• The question about notifications now shows in the browser dashboard too. After Not now it asks again after about a day, then 3 days, then a week, and then stops.

Fixed

• When Antigravity or OpenCode closes on another machine you watch over SSH, this computer no longer sends a Finished notification for each of its sessions.

Mac app

Earlier versions in Applications offer this one by themselves, or choose Check for Updates… in the Agent Lookout menu or the menu bar. Or download it: Agent-Lookout-0.2.13-mac-arm64.dmg for Apple silicon, Agent-Lookout-0.2.13-mac-x64.dmg for Intel. The first time you open a downloaded copy, macOS says "Agent Lookout" Not Opened: press Done, then Open Anyway in System Settings › Privacy & Security.

Everything in this version is in the CHANGELOG.

Agent Lookout 0.2.12

Agent Lookout 0.2.12 shows an Antigravity chat as needing you while the app asks you to approve a step.

New

• Antigravity Needs you. A chat in Antigravity, the desktop app Google calls Antigravity 2.0, now shows in Needs you while the app asks you to approve a step, and sends a notification for the wait, as an Antigravity CLI session does. Agent Lookout reads two numbers from the chat's own database with sqlite3: the place and the status of its newest step. It never reads what the step asks, so answer it in Antigravity. Not on Windows. On Linux, where Agent Lookout cannot tell whether the app is open, a chat the app left waiting when it quit goes on showing as needing you for up to a day.

Mac app

Earlier versions in Applications offer this one by themselves, or choose Check for Updates… in the Agent Lookout menu or the menu bar. Or download it: Agent-Lookout-0.2.12-mac-arm64.dmg for Apple silicon, Agent-Lookout-0.2.12-mac-x64.dmg for Intel. The first time you open a downloaded copy, macOS says "Agent Lookout" Not Opened: press Done, then Open Anyway in System Settings › Privacy & Security.

Everything in this version is in the CHANGELOG.

Agent Lookout 0.2.11

Agent Lookout 0.2.11 shows Antigravity's desktop app, what a Codex session last said, and the token counts of Claude Code and Antigravity sessions.

New

• Antigravity. The chats of Antigravity, the desktop app Google calls Antigravity 2.0, now appear with no setup, beside the Antigravity CLI's sessions. Each shows as working, idle or failed, and on a Mac as finished once the app is closed, with its title and its project folder. It never shows as needing you yet: where the app records a wait for approval has not been seen.
• Codex last message. Open a Codex session's details to read what it last said, as you can for Claude Code: the text of its newest reply, up to its last 2,000 characters, read only while the details are open and kept in memory at most 15 seconds.
• Token counts for Claude Code and Antigravity. A Claude Code session's details, and an Antigravity CLI session's or Antigravity chat's, now give the token counts of its newest reply, as a Codex session's do: the whole prompt, how much of it came from a cache, and the output. Sources says which agents can report them.

Changed

• If the Antigravity IDE is on your computer, the Antigravity CLI's card in Sources says its folder is there and that Agent Lookout does not read the IDE yet.
• The README is short and plain now, with the details in the guide.

Mac app

Earlier versions in Applications offer this one by themselves, or choose Check for Updates… in the Agent Lookout menu or the menu bar. Or download it: Agent-Lookout-0.2.11-mac-arm64.dmg for Apple silicon, Agent-Lookout-0.2.11-mac-x64.dmg for Intel. The first time you open a downloaded copy, macOS says "Agent Lookout" Not Opened: press Done, then Open Anyway in System Settings › Privacy & Security.

Everything in this version is in the CHANGELOG.

Agent Lookout 0.2.10

Agent Lookout 0.2.10 shows how many tokens a Codex session's newest reply took, and the Mac app now asks once whether to turn notifications on, then checks with a test that macOS really shows them.

New

• Token counts. Open a Codex session's details to see its newest reply's token counts, as Codex recorded them, such as 182,431 in, 9,120 out, with how much of the input came from a cache. The input is how much of the session's context is in use. Sessions read from another machine over SSH have them too. Sources has a Tokens column that says which agents can report them: Codex for now. The counts stay in the dashboard and GET /api/sessions, and never go into an event, the history, a notification, an email, a webhook post, a push, an MCP answer or agent-lookout status.
• The Mac app asks about notifications. Until you choose, the Overview asks "Get a notification when a session needs you?". Turn on sends one test notification, so macOS asks its own question right then. If macOS doesn't show it, a short note says so and points to Settings. Not now leaves them off, and once you've chosen it never asks again.
• Send a test, in the Mac app's Settings › Notifications, shows one notification and tells you what macOS did with it: shown, not answered yet, or refused, with macOS's reason and what to change in System Settings. A test notification sends nothing off your Mac.

Changed

• In the Mac app, the Notifications card speaks of macOS and this app, not a browser tab. It says the app's setting is its own, and that macOS hides banners while your screen is shared or mirrored unless you allow them. While macOS refuses notifications, it says so instead of saying they're on.

Fixed

• Stopping Agent Lookout, or quitting the Mac app, while it was writing its history could lose the last few seconds of the Events log and the charts. What that write held is now written as it stops.

Mac app

Earlier versions in Applications offer this one by themselves, or choose Check for Updates… in the Agent Lookout menu or the menu bar. Or download it: Agent-Lookout-0.2.10-mac-arm64.dmg for Apple silicon, Agent-Lookout-0.2.10-mac-x64.dmg for Intel. The first time you open a downloaded copy, macOS says "Agent Lookout" Not Opened: press Done, then Open Anyway in System Settings › Privacy & Security.

Everything in this version is in the CHANGELOG.

Agent Lookout 0.2.9

Agent Lookout 0.2.9 fixes a Mac app that looked frozen, shows what a Claude Code session last said, and makes Night darker and crisper.

Fixed

• The Mac app no longer looks frozen. On most of its window, a click or a scroll, on List, Repos or Board among others, moved the window instead of reaching the page. Only the thin strip above the header, the header and the rail's top cell move the window now. If the app seemed stuck for you, this is why.
• An Antigravity CLI session that waits for your approval stops needing you as soon as you answer in agy.

New

• Last message. Open a Claude Code session's details to read what it last said: the text of its newest reply, up to its last 2,000 characters, as plain text. Agent Lookout reads it only while the details are open, keeps it in memory for at most 15 seconds after the last ask, and never sends it anywhere on its own. AGENT_LOOKOUT_LAST_MESSAGE=off turns it off. PRIVACY.md says exactly what is read and who can ask for it.

Changed

• A darker, crisper Night on the dashboard, in the Mac app's window and on the landing page: a deeper ground, denser glass and finer edges, with every word as readable as before or more. Day is unchanged.
• No program Agent Lookout starts, such as claude, tmux, ssh or osascript, is handed its own settings any more, so your mail server's password, webhook address and push tokens stay with Agent Lookout alone.

Mac app

Earlier versions in Applications offer this one by themselves. On 0.2.8, where the page may not take your click, choose Check for Updates… in the Agent Lookout menu or the menu bar, then Install and Restart in the dialog it opens once the update is downloaded. Or download it: Agent-Lookout-0.2.9-mac-arm64.dmg for Apple silicon, Agent-Lookout-0.2.9-mac-x64.dmg for Intel. The first time you open a downloaded copy, macOS says "Agent Lookout" Not Opened: press Done, then Open Anyway in System Settings › Privacy & Security. Notifications in the app are its own setting: turn them on in the app's Settings, even if they are on in a browser.

Everything in this version is in the CHANGELOG.

Agent Lookout 0.2.8

Agent Lookout 0.2.8 lets you answer Claude Code from the Mac app's notification and menu bar, pushes waits to your phone, and shows Antigravity CLI sessions, including when agy asks you to approve a command.

New

• Allow or Deny from the Mac app. With the Agent Lookout plugin, the Mac app's notification of a wait has Deny, and Allow too when the whole command fits in it: one line of at most 40 characters. The menu bar lists each waiting session with every line of what it asks, Deny and, when it is all shown, Allow. A press goes through the same checks as one on the dashboard and is kept in the Events log. In the Mac app has the details.
• Your phone, through ntfy or Pushover. Set AGENT_LOOKOUT_NTFY_URL to an ntfy topic, or AGENT_LOOKOUT_PUSHOVER_TOKEN and AGENT_LOOKOUT_PUSHOVER_USER, and Agent Lookout pushes what the webhook posts: a wait once it has lasted the delay, its reminders, the summary after quiet hours, and finished, failed or ended if you choose them. What a session is asking goes only with _ASKING=on. Each is off until you set it up, and Settings has a card for each with Send a test. ntfy and Pushover have the setup.
• Antigravity CLI sessions. Sessions of agy appear with no setup, as working, idle, failed or finished, named by the title agy gives each conversation and with its folder and branch. A session needs you while agy asks you to approve a tool, from the log agy keeps for each running program; a question agy asks you still shows as working. Agent Lookout keeps only a few facts from agy's files and nothing of your conversations: PRIVACY.md lists them.

Changed

• Clicking the Mac app's notification of a wait opens the session's details.
• The README and the install guide say the Mac app needs macOS 13 Ventura or later. On macOS 11 or 12, npx agent-lookout still runs.
• The dashboard's first load is about 15 KB smaller, gzipped.

Mac app

Earlier versions in Applications offer this one by themselves: press Install and Restart. Or download it: Agent-Lookout-0.2.8-mac-arm64.dmg for Apple silicon, Agent-Lookout-0.2.8-mac-x64.dmg for Intel. The first time you open a downloaded copy, macOS says "Agent Lookout" Not Opened: press Done, then Open Anyway in System Settings › Privacy & Security.

Everything in this version is in the CHANGELOG.

Agent Lookout 0.2.7

Agent Lookout 0.2.7 can remind you again while a session keeps waiting, and comes with a README rewritten for people and coding agents.

New

• Remind again while it waits. In Settings › Time rules, under Remind me of a long wait, turn on Remind again while it waits and set the minutes, from 5 to 1,440 (30 to start). A session that still waits is reminded again each time they pass, by the same channels as the first reminder: notifications, email and the webhook. None comes once the wait is answered or the session ends. Quiet hours hold them like any notice, and after the computer has slept one comes, not one for each interval missed. It is off until you turn it on. Time rules has the details.

Changed

• The README is rewritten for people and for coding agents, with install three ways and a prompt to hand an agent. A new install guide takes the details.
• About sources, in Sources, now names every way Agent Lookout can send something off this computer.
• A long wait reminder that falls due in quiet hours, for a session told of before they began, is now held like any notice, so a wait answered in them is an item of the summary.

Mac app

Earlier versions in Applications offer this one by themselves: press Install and Restart. Or download it: Agent-Lookout-0.2.7-mac-arm64.dmg for Apple silicon, Agent-Lookout-0.2.7-mac-x64.dmg for Intel. The first time you open a downloaded copy, macOS says "Agent Lookout" Not Opened: press Done, then Open Anyway in System Settings › Privacy & Security.

Everything in this version is in the CHANGELOG.

Agent Lookout 0.2.6

Agent Lookout 0.2.6 can answer a kind of permission prompt for you every time, by a rule you set, and runs on Windows.

New

• Permission rules. A new card in Settings, under Permission prompts, where you decide once how a kind of Claude Code permission prompt is answered: always allow, always ask or always deny, by tool and, for Bash, by command, such as npm test:*. Rules answer Claude Code sessions with the Agent Lookout plugin installed. There are none until you add one. Deny goes first, then ask, then allow, as in Claude Code's own rules. An allow rule answers only what you could allow by hand, and for Bash only one plain command: a line with ;, &&, |, $( ), a variable, quotes or a redirection waits for you. No allow rule can begin with a program that runs another, such as sudo, env or bash, or with a network client or an interpreter, such as curl, ssh, node or python, through which Claude could reach Agent Lookout itself and add a rule. A rule for a package manager or a build tool names its subcommand, such as npm test:*, and no allow rule answers a subcommand that fetches or runs code, such as npm exec or docker run, an option through which a program runs another, such as git -c, or a command that names Agent Lookout's own files or a folder above them. Every automatic answer is in the Events log, with the rule that gave it and never the command. Permission rules has the details.
• Windows. Agent Lookout runs on Windows, started with npx agent-lookout in PowerShell or the Command Prompt, and reads the same folders in your user folder. CI runs the tests there, less those of what Windows does not have, such as POSIX signals and Unix sockets, and starts the built app and reads back its sessions. No one has yet used it on a Windows desktop. The dashboard and its notifications while a tab is open, email, the webhook, Jump to VS Code, agent-lookout status and agent-lookout mcp work as on a Mac. Stop, Allow and Deny, the permission rules, Resume, Jump to a tmux pane or a tab of Terminal or iTerm2, and notifications with no dashboard tab open are not on Windows. On Windows says why for each.

Changed

• A prompt answered with Allow or Deny, or by a rule, leaves Needs you at once, and with it the lamp, the Needs you count, the tab's title and the Mac app's Dock badge and menu bar. For the second or two before Claude Code says what it does next, the session is listed with the working sessions as Answered. No notification, reminder, email or webhook post follows for that wait. A prompt a rule answers sends none at all, unless a read of Claude Code's file in the instant before the plugin's request arrived saw the wait begin.

Fixed

• Earlier versions accepted any certificate from the mail server when NODE_TLS_REJECT_UNAUTHORIZED=0 was set in the environment, so an email, and the password in AGENT_LOOKOUT_SMTP_URL, could go to a server pretending to be yours. The certificate is now checked whatever that variable says, as the webhook's always was.
• With two copies running at once, such as the Mac app and npx agent-lookout, a change saved in one could be undone by the next change in the other. Each now reads the settings file again before a change, and takes up the other's change at its next poll. The Time rules card still saves all three rules at once, so a time rule changed in the other copy a second or two before can still be put back.
• A background job you stopped could still show as working, with Stop, after its details said it was stopped. Agent Lookout now waits up to 10 seconds for its process to end before it answers.
• A Claude Code session whose registry file was read while it was being written dropped out of the list for a poll, which read as the session ending and starting again. What the file held at the read before now stands in for it, once.

Mac app

Earlier versions in Applications offer this one by themselves: press Install and Restart. Or download it: Agent-Lookout-0.2.6-mac-arm64.dmg for Apple silicon, Agent-Lookout-0.2.6-mac-x64.dmg for Intel. The first time you open a downloaded copy, macOS says "Agent Lookout" Not Opened: press Done, then Open Anyway in System Settings › Privacy & Security.

Everything in this version is in the CHANGELOG.

Agent Lookout 0.2.5

Agent Lookout 0.2.5 can answer a permission prompt for you, watch the sessions on another machine, and remind you of a wait that has gone on too long.

New

• Allow or Deny from the dashboard. With the Agent Lookout plugin installed in Claude Code, a session waiting for permission shows Allow and Deny in Needs you and in its details, with the whole command it wants to run. Deny comes first and is always offered. Allow is not offered for an edit, a plan or a question, or for a request it cannot show whole. The prompt in the session still works, and whichever is answered first wins. Install the plugin in Claude Code with:

  /plugin marketplace add Olanetsoft/agent-lookout
  /plugin install agent-lookout@agent-lookout
  

  AGENT_LOOKOUT_ANSWER=off turns this off.

• Another machine over SSH. Start Agent Lookout on a dev box or a cloud VM as usual, then start it here with AGENT_LOOKOUT_REMOTES=devbox=dev@devbox.local. Its sessions show beside this computer's, with the machine's name beside each, through a tunnel your own ssh opens. This computer installs nothing there.

• Resume. A Claude Code session that has ended has Resume, which copies cd '<folder>' && claude --resume <session ID> for you to paste in a terminal. Agent Lookout only copies it; it never runs it.

• Time rules. A new card in Settings, with all three rules off until you turn them on: a reminder once a session has waited the minutes you set; how long a session is idle before it counts as stale; and quiet hours, which hold every notification, email and webhook post until they end, then send one summary.

• Your own agents. The guide now has a short example in Python and one in Node.js for an agent of your own to report its status.

Fixed

• Waits counted a wait that ended with Stop as two waits. It is one again.
• On a phone, Sources split a command in the middle of a flag. A command or a path now breaks only between its words.

Mac app

Earlier versions in Applications offer this one by themselves: press Install and Restart. Or download it: Agent-Lookout-0.2.5-mac-arm64.dmg for Apple silicon, Agent-Lookout-0.2.5-mac-x64.dmg for Intel. The first time you open a downloaded copy, macOS says "Agent Lookout" Not Opened: press Done, then Open Anyway in System Settings › Privacy & Security.

Everything in this version is in the CHANGELOG.

Agent Lookout 0.2.4: Stop, and pull requests

Agent Lookout 0.2.4 can stop a session for you, and shows how its pull request is doing.

New

• Stop a session. A Claude Code session started in a terminal or VS Code can be stopped from its details. Stop asks first, checks the process really is that session, and ends it the way closing it would, so claude --resume opens the conversation again. Agent Lookout never stops anything on its own, and AGENT_LOOKOUT_STOP=off turns this off.
• Sessions left running. Sessions idle for a day or more with their process still running are listed under Left running, with Hide and End all…, which checks each one again before it acts.
• Pull requests and checks. With AGENT_LOOKOUT_PULL_REQUESTS=on, Agent Lookout asks your own GitHub CLI (gh) about the pull request for each session's branch on github.com, and shows its state and checks. Off by default; nothing is sent otherwise.

Changed

• npx agent-lookout now installs about 4 MB, down from about 30 MB.

Mac app

Earlier versions in Applications offer this one by themselves: press Install and Restart. Or download it: Agent-Lookout-0.2.4-mac-arm64.dmg for Apple silicon, Agent-Lookout-0.2.4-mac-x64.dmg for Intel. The first time you open a downloaded copy, macOS says "Agent Lookout" Not Opened: press Done, then Open Anyway in System Settings › Privacy & Security.

Everything in this version is in the CHANGELOG.