Foreman v1.2.4
See what a subagent actually did
When an agent handed work off to a subagent, all you got back was the final report — the tool call sat there as a closed box for however long the run took, and whatever it read, searched or decided was gone. Those cards now open. Inside is the run's own transcript: the prompt it was given, what it said, and the tools it used, attributed to the subagent rather than mixed into the main conversation. A subagent that spawned its own subagent nests the same way. Transcripts are only fetched when you open a card, since a busy session accumulates dozens of them, and a card opened while its subagent is still working says so and re-reads itself when the run finishes rather than freezing on whatever it caught mid-flight.
"Always allow" that means what it says
Allowing a tool for the rest of the session used to remember the tool's name, which is far broader than it sounds: approving one harmless shell command quietly covered every other shell command for that session, including the ones you would never have approved. That's gone. The agent's own rule engine now does the remembering, scoped to the specific command or path it asked about — approve one and a different one still stops to ask. The button says which call it will cover, and when the agent offers nothing narrow enough to remember, it isn't offered at all rather than promising more than it delivers. Two more permission postures joined the picker as well: Auto-decide, which allows what it judges safe and still asks about the rest, and Never interrupt, which — despite the name — is the strictest of them, denying anything that would need approval rather than pausing for you.
Handoffs keep running when you close the dialog
Generating a handoff digest meant sitting and watching it: closing the dialog threw the work away, so you waited on a summary of a conversation you'd already had. The digest now runs in the background. Close the dialog, keep working, and a toast brings you back when it's ready; a small marker on the session shows one is running or waiting for review in the meantime. If the session has moved on since the digest was taken, the dialog says how far and offers to regenerate, because a summary that quietly predates your last few turns is worse than an obviously stale one.
A canvas that stays readable as it fills up
Each machine's row on the canvas is now labelled once down its left edge instead of repeating a truncated laptop name on every project box, and that label is a handle: drag it to move the whole row, machines and all, with the arrangement remembered between launches and a way back if you drag one somewhere silly. Parallel runs got quieter too — once you keep a winner, the lanes that lost fold away behind a "spent lanes" toggle on both the canvas and the sessions list. They're folded, not deleted: their transcripts are the only record of an attempt you paid for, and dropping them would make the most expensive way to do a task look like the cheapest.
More fonts, and an Appearance pane with room to breathe
Two new typeface pairings: Fira Sans with Fira Code, and Space Grotesk with Cascadia Code for something less neutral. The font picker is a dropdown now rather than a grid of cards that dominated the pane — each row still renders in the face it names, because a list of font names tells you nothing — and it shares a line with Text size, with the controls below it stretched to fill the width they were leaving empty.
Fixes
Starting a session from the canvas now uses the defaults you set under New sessions, instead of ignoring your chosen model, agent and permission mode. "This month" in the cost readouts means the calendar month, matching the calendar shown next to it, rather than a rolling 30 days. A whole family of accent-coloured details across the app — badges, markers, inline highlights — were silently rendering in the wrong colour and now don't. Codex sessions get their "Always allow" button back. And dragging a laptop row no longer writes to disk on every frame of the drag.
macOS, Apple Silicon. Signed with a Developer ID certificate and notarized by Apple — opens normally with no Gatekeeper warning, and in-app silent auto-update is enabled.