Black Team Agent 0.1.0-alpha.23

Linux x86-64 and macOS (Apple Silicon) alpha. One fix, for team runs.

Fixed: a team with two members of the same name did no work

If two members of a Room shared a name, for example two called "Ornith" with different roles, the lead's plan could lose most of its tasks and the team run finished without building anything. The log said "Left out 3 tasks that named a member who is not on the team."

The lead is now given a distinct name for each member, and Black Team Agent recognises the ways a lead actually writes one: the name, the name with its role, or the role alone. A member who is on the team no longer has tasks thrown away.

Also: the agreement shown before a team run now reads correctly with one cloud member ("Claude Code is cloud").

Checked

• A test using the exact words a real lead wrote in the run that failed, plus looser forms.
• Automated tests: 605 on Linux and 545 + 41 on macOS for the engine; 43 and 23 for the Linux app.
• Updating: alpha.23 installed over alpha.22 kept the model, conversation and project.
• The Mac build is signed, notarized and stapled.

Not checked

• A fresh real team run with two same-named members after the fix.
• The lists carried from alpha.20 and alpha.22 (a chat sent to a real cloud service from the Linux window, a Codex run from it, a phone's view of the newer screens, the Sign in and Update buttons, the Ask-mode fix against Claude Code older than 2.1.295, Stop in the middle of a download, the larger starter models, phone pairing on Linux, the optional AppArmor profile, and distributions other than Arch).

Downloads

• Linux: black-team-0.1.0-alpha.23-linux-x64.tar.gz (verify with the .sha256 file, extract, run ./install.sh)
• macOS: Black-Team-0.1.0-alpha.23-mac-arm64.zip, signed and notarized

Black Team Agent 0.1.0-alpha.22

Linux x86-64 and macOS (Apple Silicon) alpha. This release is for Linux; the Mac app is unchanged from alpha.21.

New on Linux: download a model from the window

You no longer need another app, or the terminal, to get a first model on Linux.

• Download a model to this computer. On first run and in Settings, Black Team Agent lists four starter models with their size and what each is good for, and marks the one recommended for your computer's memory. Press Download and it fetches the model and, if you have none, the llama.cpp program that runs it, then sets everything up. You see the stage, a percentage and the speed, and can press Stop; what was downloaded is kept.
• Download vision file. A starter model needs one extra file before it can read pictures. Chat now offers it with its size, and shows the same progress.

Downloads come from Hugging Face and, for llama.cpp, GitHub. Once they finish, everything runs on your computer. A paired phone cannot start either download.

Checked

• Automated tests: 604 on Linux and 544 + 41 on macOS for the engine; 43 and 23 for the Linux app.
• In the real Linux window, with real downloads: on a clean first run the smallest starter model was downloaded, set up, and answered a chat. A vision file (205 MB) was downloaded and the model then answered "red" to a red square sent as a picture.
• Updating: alpha.22 installed over alpha.21 kept the model, conversation and project.
• The Mac build is signed, notarized and stapled.

Not checked

• Pressing Stop in the middle of a real download in the window, and resuming afterwards (the engine's tests cover it).
• The three larger starter models.
• The list carried from alpha.20: a chat sent to a real cloud service from the Linux window, a Codex run from it, a team run that finishes with a report on Linux, a phone's view of the newer screens, the Sign in and Update buttons, the Ask-mode fix against Claude Code older than 2.1.295, phone pairing on Linux, the optional AppArmor profile, and distributions other than Arch.

Downloads

• Linux: black-team-0.1.0-alpha.22-linux-x64.tar.gz (verify with the .sha256 file, extract, run ./install.sh)
• macOS: Black-Team-0.1.0-alpha.22-mac-arm64.zip, signed and notarized

Black Team Agent 0.1.0-alpha.21

Linux x86-64 and macOS (Apple Silicon) alpha.

The app is now called Black Team Agent

The name you see is Black Team Agent: in window titles, About, the Linux sidebar, the installer and the app menu, and in the command's help.

Nothing you rely on was renamed. The black-team command, your data folders, the Mac app's file name and the download names are the same, so this installs over the previous version like any other update and your models, conversations, projects and memory stay where they are.

New: a website

https://blackteamagent.com/ — what Black Team Agent is, how to install it, its privacy rules and a few screens. The site loads nothing from other hosts and sets no cookies.

Fixed

• The privacy document still said the Linux app was local only. Since alpha.20 the Linux app can use a cloud model you add yourself, with the same rules as the Mac; the document now says so.
• Linux: the logo in the sidebar collapsed when the sidebar ran out of room, for example with a project selected.
• Linux: one message in cloud model setup said "this Mac".

Checked

• Automated tests: 602 on Linux and 542 + 41 on macOS for the engine; 43 and 23 for the Linux app.
• Updating: alpha.21 installed over alpha.20 kept the model, conversation and project, answered a new chat, and shows the new name.
• The Mac build is signed, notarized and stapled.

Not checked

The same list as alpha.20: a chat sent to a real cloud service from the Linux window, a Codex run from it, a team run that finishes with a report on Linux, a phone's view of the newer screens, the Sign in and Update buttons, the Ask-mode fix against Claude Code older than 2.1.295, phone pairing on Linux, the optional AppArmor profile, and distributions other than Arch.

Downloads

• Linux: black-team-0.1.0-alpha.21-linux-x64.tar.gz (verify with the .sha256 file, extract, run ./install.sh)
• macOS: Black-Team-0.1.0-alpha.21-mac-arm64.zip, signed and notarized

Black Team 0.1.0-alpha.20

Linux x86-64 and macOS (Apple Silicon) alpha. The Linux app catches up with the Mac app.

New on Linux: cloud models, subscription agents, pictures and the Room

The Linux window now has what the Mac app gained over the last releases, in its own look.

• Cloud models. Setup has a "Cloud model" choice: a service address (OpenRouter by default), your own key, and Find models with a filter for free models that can use tools. Saved models are marked Local or Cloud.
• Privacy questions. A private conversation is never sent to a cloud model silently. Black Team stops and shows a "Not sent" card with the choices: start a new cloud conversation, switch back to your local model, or send this conversation. Cloud conversations are marked "Leaves this computer" with the service's name. A project is local only until you choose Allow cloud models for it.
• Claude Code and Codex. In Code, choose who does the work: your model, Claude Code or Codex, under your own subscription. Pick how much they may do on their own: Ask (you approve each step), Edit or Auto. Roll back this task undoes what a task changed.
• Pictures. Attach or paste a picture into a chat when the model can see.
• The Room. A room per project: add members and roles, give the team a goal and press Run team. The lead plans, members work in turn, and the lead reports. The team's to-do list, hand-offs and a log are on the same page.

Privacy on Linux

• All of the above is for the desktop window. A paired phone cannot add a cloud model or key, start or convert a cloud conversation, allow cloud on a project, change what an agent may do, or use the Room. The engine refuses these, not just the screen.
• Your key is kept in Black Team's private data folder, readable only by you, and is never shown again or sent anywhere but the service you named.
• Memory is not used in cloud conversations, or in a team with a cloud member.

Fixed

• Ask mode: approving a file write did nothing (Mac and Linux). With current Claude Code, an approved write was still refused. Fixed.
• Linux: a cloud conversation could not be started from the window, because its messages were treated as coming from a phone.
• On Linux, messages now say "this computer" where they said "this Mac".

Checked

• Automated tests: 602 on Linux and 542 + 41 on macOS for the engine; 43 and 23 for the Linux app.
• In the real Linux window: the local-only refusal, allowing cloud for a project, an Ask-mode Claude Code task with an approval, and rolling it back. Also seen working: a service's model list and the free filter, saving and removing a cloud model, pictures, room members, the agreement card, starting and stopping a team run, tasks, hand-off and the log.
• Updating: alpha.20 installed over alpha.19 kept the model, conversation and project.

Not checked

• A chat sent to a real cloud service from the Linux window, a Codex run from it, and a team run that finishes with a report on Linux.
• A phone's view of the new screens, and the Sign in and Update buttons.
• The Ask-mode fix against Claude Code older than 2.1.295.
• As in alpha.19: phone pairing on Linux, the optional AppArmor profile, and distributions other than Arch.

Not included yet: the button that downloads a model's vision file, in the Linux window.

Downloads

• Linux: black-team-0.1.0-alpha.20-linux-x64.tar.gz (verify with the .sha256 file, extract, run ./install.sh)
• macOS: Black-Team-0.1.0-alpha.20-mac-arm64.zip, signed and notarized

Black Team 0.1.0-alpha.19

Linux x86-64 and macOS (Apple Silicon) alpha. This release puts both on one engine.

New: the black-team command

Black Team now has a terminal program, for Mac and Linux.

• black-team on its own starts a session: chat, /code to let the model work in the current folder, /model, /project, /agent, /team, /undo and more (/help lists them).
• black-team -p "your question" asks one thing and exits.
• It uses the same models, conversations, projects and memory as the app.

On the Mac it is inside the app. To put it on your path, run this once in Terminal:

"$HOME/Applications/Black Team.app/Contents/MacOS/black-team" install-command

(Use /Applications/... if that is where you keep the app.) Only one program can run a local model at a time, so close the app before using the command with a local model, or the other way round.

Changed: the Linux app runs on the same engine as the Mac app

The Linux app used its own engine. It now runs the engine the Mac app uses, as one self-contained program inside the package. What you see is the same as before.

• Your data carries over. Models, settings, conversations, projects, memory and phone pairing are read as they are. Tested by installing this version over alpha.18 with existing data.
• Hermes conversations, harness launching, dictation and model finding work as before.
• The engine stops, and stops the model it started, whenever the window goes away, even if the app is killed.

Checked

• Linux, through the real window: updating over alpha.18 data; a clean first run; a chat and a Code task with a running local server; a model loaded from its GGUF file; two Code tasks through Hermes; quitting and force-killing the app.
• Mac: the command with Ornith 1.5 9B (a one-shot answer, a chat, and a Code task that wrote and re-read a file).
• Automated tests: 573 on Linux, 513 on macOS for the engine; 43 and 23 for the Linux app.

Not checked

• Phone pairing on Linux with the new engine. The pairing code and its tests are shared with the Mac, where pairing is in daily use, but a phone was not paired with a Linux install of this version.
• The optional AppArmor profile on a system that needs it (Ubuntu 24.04 and later). The profile is unchanged.
• Linux distributions other than Arch. The engine does not depend on the system's C library, and made secure connections on Arch; where another distribution keeps its certificates could differ. If a download or a cloud model fails with a certificate error, please open an issue.

Downloads

• Linux: black-team-0.1.0-alpha.19-linux-x64.tar.gz (verify with the .sha256 file, extract, run ./install.sh)
• macOS: Black-Team-0.1.0-alpha.19-mac-arm64.zip, signed and notarized

The Mac app is otherwise the same as alpha.18.

Black Team 0.1.0-alpha.18

Linux x86-64 and macOS (Apple Silicon) alpha. The changes are in the Mac app.

New: the Room, where your agents work as a team

Camp has a new Room page. A room belongs to a project.

1. Build a team. Add members: any of your saved models, local or cloud, and Claude Code or Codex if they are installed. Give each a role, such as "builder" or "reviewer".
2. Give the team a goal and press Run team.
3. The lead plans (Claude Code by default): it splits the goal into up to six tasks and assigns them by role.
4. Members work in turn, each seeing the goal, its own task and what the team has done so far.
5. A reviewer, if you choose one, checks each result and can send it back once.
6. The lead writes a report on what was done, what changed and what is left.

You watch it as a team conversation with the team's to-do list beneath, and you can stop it at any time. A run is limited to six tasks, twenty member turns and sixty minutes.

Privacy in a team

• Before a run starts, Black Team shows who is on the team and which members are cloud, and you agree once to them sharing results with each other. Add or change a member and it asks again.
• A team with a cloud member needs a project you have allowed cloud for, and cannot be started from a paired phone.
• Your memory is not used in a team that has a cloud member, for any member, because results are passed along. An all-local team uses memory as normal.
• You can also hand a single task from one member to another by hand: Black Team shows the exact text that will be sent, and whether it leaves the Mac, before you confirm.

Fixed: Black Team was running old copies of Claude Code and Codex

A Mac can have two copies of a tool: an old one from Homebrew and the one you keep up to date. Black Team was finding the old one, so Codex could refuse a model with "requires a newer version" even right after you had updated it. Black Team now runs the same copy your Terminal does.

New: it tells you when a tool is out of date

• If Claude Code or Codex says it is too old, the reply says so plainly and offers an Update button that runs the tool's own updater in Terminal.
• When you pick Claude Code or Codex, Black Team checks at most twice a day whether a newer version exists and shows a line if so. This asks the public npm registry for the current version number.
• Nothing is updated unless you press the button.

Interface

• Buttons that looked like plain text are now outlined or underlined, and the pointer becomes a hand over buttons.
• A Bold text / Plain text switch under the theme picker turns the bold headings off.

Installing

Linux is unchanged in behaviour from alpha.17. Download black-team-0.1.0-alpha.18-linux-x64.tar.gz and its .sha256, run sha256sum -c, extract, quit Black Team, run ./install.sh (with the same --prefix if you used one). Your data stays in place; black-team-desktop --rollback returns to the previous release.

macOS (14 or later, Apple Silicon): download Black-Team-0.1.0-alpha.18-mac-arm64.zip and its .sha256, check it with shasum -a 256 -c Black-Team-0.1.0-alpha.18-mac-arm64.zip.sha256, unzip, quit Black Team, and move the new copy to Applications. It is signed with a Developer ID and notarized by Apple. Your data, models and paired phones are kept.

Checked

• macOS: 483 tests pass. A team of Claude Code, a local Ornith 1.5 9B and a free OpenRouter model fixed a bug and wrote a file from one goal, from the command line. Teams of Claude Code, Codex and a free OpenRouter model were then run from the Room page, and a finished run with its report was confirmed in the app's data before this release.
• Not checked: the Update button and the "newer version" line in the app (both tools were current); stopping a team run part-way from the page; a team of more than three.
• Linux: 148 Node and 22 Python tests pass. The package installs as an update over alpha.17 and its window opens on the first-run screen.

See docs/VERIFICATION.md and docs/PRIVACY.md.

Black Team 0.1.0-alpha.17

Linux x86-64 and macOS (Apple Silicon) alpha. The change is in the Mac app.

Since alpha.16: you choose how far a subscription agent may go

A conversation with Claude Code or Codex now has a Permission menu beside the model, with a line under it saying what the chosen level allows.

Level	Claude Code	Codex
Ask	It works until it needs permission, then Black Team shows its usual approval card for that exact command or file.	It can only read. Codex cannot ask for approval from inside another app.
Edit (the default)	It can read and edit files in the project and run simple file commands. Other commands are refused.	It can read, edit and run commands inside its sandbox.
Auto	Claude Code's own auto mode: it proceeds on its own judgement.	It proceeds with Codex's automatic review, inside its sandbox.

• Neither tool is ever given its "skip all permissions" switch.
• In Ask, nothing outside the project folder can be approved, and an approval covers that one step only.
• The project snapshot and Roll back this task apply at every level.

Signing in. If Claude Code or Codex is signed out, the reply says so and offers a Sign in button that opens the tool's own sign-in in Terminal. Black Team does not see or store anything from it.

Linux is unchanged in behaviour from alpha.16.

Linux: download black-team-0.1.0-alpha.17-linux-x64.tar.gz and its .sha256, run sha256sum -c, extract, quit Black Team, run ./install.sh (with the same --prefix if you used one). Your data stays in place; black-team-desktop --rollback returns to the previous release.

macOS (14 or later, Apple Silicon): download Black-Team-0.1.0-alpha.17-mac-arm64.zip and its .sha256, check it with shasum -a 256 -c Black-Team-0.1.0-alpha.17-mac-arm64.zip.sha256, unzip, quit Black Team, and move the new copy to Applications. It is signed with a Developer ID and notarized by Apple. Your data, models and paired phones are kept.

Checked

• macOS: 427 tests pass. With the real tools from the command line: Claude Code in Ask created a file after approval, and in Auto ran the command; Codex in Auto created a file and a follow-up continued the same session; Codex in Ask could not write and said so. The Permission menu was then used in the app with Claude Code at Edit.
• Not checked: Ask and Auto chosen from the app's own menu; the Sign in button against a really expired sign-in. In Ask, a combined command (two commands joined together) may be refused again after you approve it.
• Linux: 148 Node and 22 Python tests pass. The package installs as an update over alpha.16 and its window opens on the first-run screen.

See docs/VERIFICATION.md.

Black Team 0.1.0-alpha.16

Linux x86-64 and macOS (Apple Silicon) alpha. Both changes are in the Mac app.

Fixed: OpenRouter models now work

In alpha.15 every message to an OpenRouter model failed with "not a valid model ID". Black Team's model search asked OpenRouter the wrong way and saved model names its chat does not accept. That is fixed. If you added an OpenRouter model in alpha.15, remove it and add it again so it is saved under its proper name. The Cloud model form now opens on OpenRouter.

New: subscription agents (Claude Code and Codex)

If Claude Code or Codex is installed and signed in on your Mac, Black Team can hand it a task under your own subscription. No key or sign-in token passes through Black Team: the tool uses its own saved login.

• In Camp, the model menu offers "Claude Code · your subscription" and "Codex · your subscription" when the tools are found.
• The tool works in the project folder with modest permissions: it can read and edit files there. Claude Code runs without your personal connectors.
• Black Team archives the project folder before each task, so you can roll a task back.
• A subscription agent counts as cloud, with the same rules as a cloud model: it says what leaves the Mac before the first message, is refused in a local-only project, is never started from a paired phone, and is never given anything from your memory vault.
• From a terminal: black-team-cli agent claude "<task>" or agent codex "<task>".

Linux is unchanged in behaviour from alpha.15 and remains local only.

Linux: download black-team-0.1.0-alpha.16-linux-x64.tar.gz and its .sha256, run sha256sum -c, extract, quit Black Team, run ./install.sh (with the same --prefix if you used one). Your data stays in place; black-team-desktop --rollback returns to the previous release.

macOS (14 or later, Apple Silicon): download Black-Team-0.1.0-alpha.16-mac-arm64.zip and its .sha256, check it with shasum -a 256 -c Black-Team-0.1.0-alpha.16-mac-arm64.zip.sha256, unzip, quit Black Team, and move the new copy to Applications. It is signed with a Developer ID and notarized by Apple. Your data, models and paired phones are kept.

Checked

• macOS: 409 tests pass. A free OpenRouter model (Nemotron 3.5 Lightning) answered Chat and completed a Code step that edited a file, and was then used in the app itself. Subscription agents were run with the real tools from the command line: Claude Code fixed a file, continued the same session and was rolled back; Codex fixed a file and ran it; a run from a private conversation was refused before anything started.
• Not checked: the app's own screens for subscription agents have not been looked at or driven; expect rough edges there. OpenAI, Anthropic and Google cloud models have not been tried directly, nor image attachments to a cloud model.
• Linux: 148 Node and 22 Python tests pass. The package installs as an update over alpha.15 and its window opens on the first-run screen.

See docs/VERIFICATION.md and docs/PRIVACY.md.

Black Team 0.1.0-alpha.15

Linux x86-64 and macOS (Apple Silicon) alpha.

Since alpha.14: cloud models you bring yourself, on the Mac

Black Team on the Mac is still local first, and with no cloud model added it behaves exactly as before. You can now also add a cloud model of your choice: in the Command center choose Available configurations → Cloud model, pick a service (OpenRouter, OpenAI, Anthropic, Google, or type another OpenAI-compatible address), paste your own API key, and choose a model.

Free models. After Find models, tick Free models that can use tools to see only those (OpenRouter lists them). Free models have daily limits, and the service may use what you send to train its models: do not send anything private through one.

How private work stays private

• Every conversation is local or cloud, set by the model it starts with and shown in its header. Before the first cloud message, Black Team says what will leave the Mac: your messages and, in Code, the contents of files the agent reads and the output of commands it runs.
• A local conversation is never sent to a cloud model silently. If a cloud model is selected, Black Team stops and offers to start a new cloud conversation, switch back to your local model, or send this conversation out after a confirmation naming the service.
• Projects are local only unless you switch one to allow cloud models.
• Your memory vault stays local. Cloud conversations do not read it or write to it.
• A paired phone can continue conversations but cannot start or approve a cloud one.
• Your key is sent only to the service it was entered for, is never shown again, and never goes to a phone.

Cloud conversations show tokens used instead of speed. Launching other agent apps still uses your local model.

Linux is unchanged in behaviour from alpha.14 and remains local only; the package differs in its version and documents.

Linux: download black-team-0.1.0-alpha.15-linux-x64.tar.gz and its .sha256, run sha256sum -c, extract, quit Black Team, run ./install.sh (with the same --prefix if you used one). Your data stays in place; black-team-desktop --rollback returns to the previous release.

macOS (14 or later, Apple Silicon): download Black-Team-0.1.0-alpha.15-mac-arm64.zip and its .sha256, check it with shasum -a 256 -c Black-Team-0.1.0-alpha.15-mac-arm64.zip.sha256, unzip, quit Black Team, and move the new copy to Applications. It is signed with a Developer ID and notarized by Apple. Your data, models and paired phones are kept.

Checked

• macOS: 361 tests pass, 40 of them for cloud models, including checks on the text actually sent to a service (no memory vault content, no memory tools). Chat and Code were run end to end against a stand-in server. No real cloud service has been confirmed yet: the format and the refusals are proved against the stand-in only, so treat cloud models as untested against live services (including image attachments to a cloud model).
• Linux: 148 Node and 22 Python tests pass. The package installs as an update over alpha.14 and its window opens on the first-run screen.

The known limits of the privacy boundary are listed in docs/PRIVACY.md.

Superseded by v0.1.0-alpha.16. In this release OpenRouter models do not work on the Mac (every message is rejected as "not a valid model ID"); alpha.16 fixes that.

Black Team 0.1.0-alpha.14

Linux x86-64 and macOS (Apple Silicon) alpha.

Since alpha.13: image attachments in Chat on the Mac

Attach up to four pictures to a Chat message and a vision-capable local model answers about them.

• Use + Files in the composer, drag pictures onto it, or paste. Previews appear before you send and inside the message afterwards.
• JPEG, PNG, WebP, HEIC and TIFF are accepted. Each picture is scaled to 1280 pixels on its longer side and stored as a JPEG without its metadata, so no location or camera details are kept or sent to the model.
• A model needs its vision file to read pictures. The first time you attach one, Black Team offers the download for the starter models that have one (Ornith 1.5 9B: 922 MB; Qwen3.5 0.8B and 4B) and restarts the model with it. Qwen3 14B has no vision file. For a model server such as Ollama or LM Studio, Black Team sends the picture and the server decides.
• Pictures are for Chat. Code does not take them.
• Pictures stay on the Mac. A paired phone shows the text of a message that has pictures, and cannot attach any.

Linux is unchanged in behaviour from alpha.13; the package differs only in its version and documents.

Linux: download black-team-0.1.0-alpha.14-linux-x64.tar.gz and its .sha256, run sha256sum -c, extract, quit Black Team, run ./install.sh (with the same --prefix if you used one). Your data stays in place; black-team-desktop --rollback returns to the previous release.

macOS (14 or later, Apple Silicon): download Black-Team-0.1.0-alpha.14-mac-arm64.zip and its .sha256, check it with shasum -a 256 -c Black-Team-0.1.0-alpha.14-mac-arm64.zip.sha256, unzip, quit Black Team, and move the new copy to Applications. It is signed with a Developer ID and notarized by Apple. Your data, models and paired phones are kept.

Checked

• macOS: 321 tests pass, 42 of them for images. With Ornith 1.5 9B and its vision file, in the app's own window: a pasted picture was described correctly, text in a picture was read exactly, and the first-time download of the vision file restarted the model with it loaded. Stored pictures were JPEG with no EXIF or GPS tags. Image attachments were then confirmed in use on a second Mac. The Qwen3.5 4B vision file has not been tried.
• Linux: 148 Node and 22 Python tests pass. The package installs as an update over alpha.13 and its window opens on the first-run screen.

See docs/VERIFICATION.md.