malac 1.1.1

Fixes for remote access, tunnels and the Android app. Upgrade with malac update, then malac daemon restart when no agents are running.

Fixed

• Restarts keep remote access. malac daemon restart and the terminal UI's restart after an update came back local-only unless web.remote was set, which cut off paired phones, and stopped any tunnel. A restart now keeps the address, remote access and a running tunnel; malac daemon stop and then start apply the configuration afresh. A daemon still on 1.1.0 restarts the old way once.
• Tunnels that wait for you. tailscale serve on a tailnet without Serve prints a link to turn it on, then waits. Before, malac showed only "starting". Now malac tunnel, malac tunnel status, the terminal UI's Connection dialog and the web UI's Remote access page show what the tool asks for, with the link clickable in the browser. The tunnel comes up as soon as you're done.
• Android: opening a session no longer freezes and closes the app. The session history was read from the network on the main thread, which Android forbids. It now loads in the background, and a dropped connection or an unexpected reply shows an error instead of closing the app.
• Android: the top bar clears the status bar and the camera cutout.
• Android: screenshots in a transcript are decoded in the background at thumbnail size, instead of at full size on the main thread.
• Android: a command that times out reports an error instead of failing silently.

New

• A signed Android APK in every release. malac-1.1.1-android.apk is signed with the project's key, so later releases install over it and keep your paired daemons. Download it on the phone and allow the install when Android asks.
• Crash reports on Android. If the app closes unexpectedly, the next launch shows what went wrong with a Copy button, to paste into a bug report. The app sends nothing anywhere itself.

Downloads

File	For
malac-1.1.1-macos.pkg	macOS installer, Apple Silicon and Intel
malac-1.1.1-aarch64-apple-darwin.tar.gz	macOS on Apple Silicon
malac-1.1.1-x86_64-apple-darwin.tar.gz	macOS on Intel
malac-1.1.1-x86_64-unknown-linux-gnu.tar.gz	Linux x86_64
malac-vscode-1.1.1.vsix	VS Code, Cursor, Windsurf, VSCodium
malac-1.1.1-android.apk	Android 8 and later, signed; later releases install over it
SHA256SUMS	Checksums (shasum -a 256 -c SHA256SUMS)

Or run curl -fsSL https://raw.githubusercontent.com/lobirus/malac/main/install.sh | sh, or brew install lobirus/malac/malac. The .pkg is not signed yet; if macOS blocks it, right-click it and choose Open.

malac 1.1.0

malac 1.1: project context, plugins, and remote machines. Upgrade with malac update, then malac daemon restart when no agents are running.

Highlights

• Project context. malac reads the instruction files your project already has: AGENTS.md first, then CLAUDE.md, GEMINI.md, Copilot, Cursor, Windsurf and Cline rules. It also keeps:

  • a map of the project's docs;
  • a small project index in .malac/index.md, refreshed incrementally;
  • project knowledge in .malac/MALAC.md, which you commit so the whole team shares it.

  When you open one part of a monorepo, malac offers to open the whole repository. /context shows what was loaded.

• Skills and commands. Skills can ship scripts/ and references. Claude- and Gemini-style slash commands work as they are, and they show up in / completion and help.

• Plugins and marketplaces.

  • malac installs Claude Code plugins and Agent Plugins packages from folders, GitHub, GitLab or any git URL, private repositories included.
  • Plugins install at user or project scope.
  • Installing runs nothing: a plugin with hooks, MCP servers or scripts is enabled only after you approve what it runs, and the approval shows exactly that.
  • Start with malac plugin marketplace add lobirus/agent-plugins.
  • ponytail ships as a default plugin.

• Remote machines.

  • Run the daemon on a server and drive it from your laptop.
  • Pair devices with a code or QR, give each its own token, and revoke any of them.
  • Save connections with malac remote add and use them with -C name.
  • malac tunnel starts Cloudflare, ngrok or Tailscale.
  • The TUI has a Connection menu, and the web UI has Settings → Remote access.
  • @ files and dropped files work over a remote connection; dropped files are uploaded to the daemon.

• Keep awake. The machine stays awake while agents or jobs run (caffeinate on macOS, systemd-inhibit on Linux). It's on by default for busy work; set [daemon] keep_awake.

• VS Code 1.1.

  • A native chat panel with the current file as context, drag and drop, image paste and @ files.
  • Workspace, jobs, sessions and usage views, a status bar and approval notifications.
  • Works with remote daemons.

• Web UI. A Project context page in Settings, the monorepo banner, custom commands in completion, and plugin details on approvals.

• Mobile apps (preview).

  • Native iOS (SwiftUI) and Android (Kotlin, Compose) apps in apps/.
  • They cover workspaces, agents, transcripts, approvals with notifications, jobs, remote access and keep-awake.
  • Android: install malac-1.1.0-android.apk below. iOS: build it as its README describes. Then pair with malac remote pair.

Fixed

• Command output, malac -p included, no longer writes color codes into pipes and files. It's styled only on a terminal, and never with NO_COLOR set.
• An unquoted argument-hint: [patch|minor|major] in a command or skill was dropped. It now shows as written.

Downloads

File	For
malac-1.1.0-macos.pkg	macOS installer, Apple Silicon and Intel
malac-1.1.0-aarch64-apple-darwin.tar.gz	macOS on Apple Silicon
malac-1.1.0-x86_64-apple-darwin.tar.gz	macOS on Intel
malac-1.1.0-x86_64-unknown-linux-gnu.tar.gz	Linux x86_64
malac-vscode-1.1.0.vsix	VS Code, Cursor, Windsurf, VSCodium
malac-1.1.0-android.apk	Android 8 and later, signed; later releases install over it
SHA256SUMS	Checksums (shasum -a 256 -c SHA256SUMS)

Or run curl -fsSL https://raw.githubusercontent.com/lobirus/malac/main/install.sh | sh, or brew install lobirus/malac/malac. The .pkg is not signed yet; if macOS blocks it, right-click it and choose Open.

malac 1.0.1

A privacy fix. Upgrade with malac update, then malac daemon restart when no agents are running, so the daemon picks up the new version too.

Fixed

• The terminal UI showed the web UI address with its access token on the welcome screen, in the sidebar and in the Web menu, so a screenshot could leak the token. It now shows token=…; "Copy URL" still copies the full address.
• The web UI showed paths with your full home directory, for example on the Jobs page. Paths under your home now read ~/….

Downloads

File	For
malac-1.0.1-macos.pkg	macOS installer, Apple Silicon and Intel
malac-1.0.1-aarch64-apple-darwin.tar.gz	macOS on Apple Silicon
malac-1.0.1-x86_64-apple-darwin.tar.gz	macOS on Intel
malac-1.0.1-x86_64-unknown-linux-gnu.tar.gz	Linux x86_64
malac-vscode-1.0.1.vsix	VS Code, Cursor, Windsurf, VSCodium
SHA256SUMS	Checksums (shasum -a 256 -c SHA256SUMS)

malac 1.0.0

malac 1.0: the Multi-Agent Loop for Autonomous Coding. Upgrade with malac update. Running sessions keep their version until restarted, and the terminal UI shows a notice while an older daemon is still running (malac daemon restart when idle).

Highlights

• The daemon. Agents now run in one background daemon per user. They keep working after you close the terminal, and your workspaces come back after a reboot. Several terminals, browsers and VS Code can watch and command the same work at once; an approval answered in one place closes everywhere.
• Workspaces and tabs.
  • Each tab is a project folder, and it can hold several agents.
  • malac resumes your last workspace from any directory.
  • malac <prompt> opens a new tab in it; --name names the tab.
  • -n starts a clean workspace and -w opens a named one.
• Terminal UI.
  • Answers stand out from tool calls, and the final answer of each turn is marked.
  • Drag to select and copy; double-click copies a word, triple-click a line.
  • An agent map shows agents and subagents.
  • An @ file picker, attachment chips, dropped file paths and pasted images.
  • A folder browser, workspace menus and a jobs view.
• Web UI. A workspace switcher and tab bar with a folder picker, agents per tab, a jobs panel, control-service and permission status, and daemon info, all following the same design system.
• Jobs. Background processes started by agents are tracked with their output and exit codes. Agents list, read and stop them with job_list, job_output and job_kill.
• Smarter delegation. Models can carry descriptions, and the main agent uses them to pick a model per subagent. Nesting goes up to three levels.
• macOS permissions. malac-control permissions --request triggers the Screen Recording and Accessibility prompts and opens the right System Settings pane.

Changed

• --web, --no-web, --web-remote, --web-port and web.enabled are gone, because the daemon always serves the web UI. Use web.remote = true or malac daemon start --remote for network access.
• agents.max_depth defaults to 3.

Downloads

File	For
malac-1.0.0-macos.pkg	macOS installer, Apple Silicon and Intel
malac-1.0.0-aarch64-apple-darwin.tar.gz	macOS on Apple Silicon
malac-1.0.0-x86_64-apple-darwin.tar.gz	macOS on Intel
malac-1.0.0-x86_64-unknown-linux-gnu.tar.gz	Linux x86_64
malac-vscode-1.0.0.vsix	VS Code, Cursor, Windsurf, VSCodium
SHA256SUMS	Checksums (shasum -a 256 -c SHA256SUMS)

Or run curl -fsSL https://raw.githubusercontent.com/lobirus/malac/main/install.sh | sh, or brew install lobirus/malac/malac. The .pkg is not signed yet; if macOS blocks it, right-click it and choose Open.

malac 0.1.2

A security update. Upgrade with malac update; running sessions keep their version until restarted.

Security

• A project's .malac/config.toml can no longer define [profiles.*]. A project profile could carry restricted keys such as mode or providers into --profile when its name matched one of yours.

Downloads

File	For
malac-0.1.2-macos.pkg	macOS installer, Apple Silicon and Intel
malac-0.1.2-aarch64-apple-darwin.tar.gz	macOS on Apple Silicon
malac-0.1.2-x86_64-apple-darwin.tar.gz	macOS on Intel
malac-vscode-0.1.2.vsix	VS Code, Cursor, Windsurf, VSCodium
SHA256SUMS	Checksums (shasum -a 256 -c SHA256SUMS)

On Linux, the install script builds from source. The .pkg is not signed yet; if macOS blocks it, right-click it and choose Open.

malac 0.1.1

A security and packaging update. Existing installs can upgrade with malac update; running sessions keep working on 0.1.0 until they are restarted.

Security

• A project's .malac/config.toml can no longer set memory, web or update settings. Before this, a cloned repository could point memory recall at its own server and have malac send a key from your environment as the token. Set trust_project_config = true in your user config if you rely on project-level settings for these.
• Subagents of a read-only agent are read-only too.

New

• VS Code extension: malac-vscode-0.1.1.vsix. Install with code --install-extension malac-vscode-0.1.1.vsix, or Extensions → … → Install from VSIX. It also works in Cursor, Windsurf and VSCodium.
• Homebrew: brew tap lobirus/malac https://github.com/lobirus/malac && brew install lobirus/malac/malac.

Downloads

File	For
malac-0.1.1-macos.pkg	macOS installer, Apple Silicon and Intel
malac-0.1.1-aarch64-apple-darwin.tar.gz	macOS on Apple Silicon
malac-0.1.1-x86_64-apple-darwin.tar.gz	macOS on Intel
malac-vscode-0.1.1.vsix	VS Code and compatible editors
SHA256SUMS	Checksums (shasum -a 256 -c SHA256SUMS)

On Linux, the install script builds from source: curl -fsSL https://raw.githubusercontent.com/lobirus/malac/main/install.sh | sh. The .pkg is not signed yet; if macOS blocks it, right-click it and choose Open.

malac 0.1.0

The first release of malac, the Multi-Agent Loop for Autonomous Coding.

Highlights

• Terminal UI: a full-screen interface with a menu bar, tabs, a status line and a function-key bar. Everything works by keyboard and mouse. --plain keeps a line-based interface for scripts and minimal terminals.
• Any model provider: OpenAI- and Anthropic-compatible APIs, gateways such as LiteLLM or OpenRouter, and local models. malac models lists everything your providers offer.
• Subagents: the agent delegates work to subagents that run in parallel. You can watch them in the terminal, the web UI or the session log.
• Permissions: ask, edits and autopilot modes, with allow and deny rules.
• Memory: Markdown files, optionally indexed in Milvus (local or Zilliz Cloud) for semantic recall.
• Computer and browser control: malac-control drives the desktop and Chrome over MCP, with one isolated profile per browser.
• Web UI: sessions, a live agent tree, approvals and a complete settings editor. It is local by default; --web-remote opens it to your network.
• VS Code extension: in editors/vscode.
• Self-update: malac update installs a new release without interrupting running agents.
• Self-configuration: ask malac to change its own settings.

Install

curl -fsSL https://raw.githubusercontent.com/lobirus/malac/main/install.sh | sh

Or download the files below:

File	For
malac-0.1.0-macos.pkg	macOS installer, Apple Silicon and Intel; installs to /usr/local/bin
malac-0.1.0-aarch64-apple-darwin.tar.gz	macOS on Apple Silicon
malac-0.1.0-x86_64-apple-darwin.tar.gz	macOS on Intel
SHA256SUMS	Checksums

Known limitations

• The .pkg is not yet signed or notarized. If macOS blocks it, right-click it and choose Open.
• Linux binaries are not attached yet; build from source with the install script, which falls back to a source build automatically.
• Windows is untested.