Updates

See what onemind has published and shipped.

Updated October 23, 2026

OneMind BETA 0.4.15 is available

OneMind BETA 0.4.15 is published through the official update channel.

  • Use the official download or the Mac app’s Check for Updates action to get the published release.
  • Later changes prepared in the source guide are not part of this release until their own release checks complete.

Start with your work and pin what matters

Matrix opens in Focus when you have not saved another view, bringing your own tasks and sessions together.

  • Choose another task view when you want a different scope; your saved view preference still applies.
  • Pin a task from its row menu to keep it in your Pinned group. Pins belong to your own view and do not change anyone else’s access.

OneMind BETA 0.4.14 fixes a Mac installation failure

The latest BETA release fixes an installation failure that could reject the Mac app before replacing the previous version.

  • The installer preserves the app's expected identity while preparing and verifying the new version.
  • A preparation failure leaves the previous installation in place; release and signature checks still apply.

Browse Minds by Project

The Mind gallery helps you find approved guidance across your Team and Projects, then open it in a full-window reading view.

  • Browse All or Mine, search by name and choose a sort order within the current gallery.
  • Open a Mind to read its content and files, then return to the gallery with Back.

Keep related work together in tabs

Tasks, Project sessions and Minds can stay open in grouped tabs so you can move between related work without losing your place.

  • Terminal and Preview tabs stay with their task or session; file tabs stay with their Mind. Closing a tab closes the view without stopping the work.
  • Use Back and Forward, reopen a closed group, or view two related tabs side by side when the desktop window has enough room.

Preview what a Matrix task made

Matrix rows with reported outputs now offer a compact preview of the work behind them.

  • Inspect reported pull requests and issues, shared file changes and to-do progress when that evidence is available.
  • Open a reported link from the preview; repository status and checks appear when they can be retrieved.

Keep your Mind title when a change request conflicts

A conflicting Mind title-change request now keeps what you typed and explains how to recover.

  • A changed server version no longer silently replaces your title input.
  • Reload the current version explicitly before requesting approval again; failed requests remain visible.

OneMind BETA 0.4.13 keeps valid sign-ins during Matrix changes

Switching Matrix or receiving a permission refusal no longer incorrectly ends an otherwise valid sign-in.

  • A workspace change keeps the current account session available.
  • Permission problems remain distinct from an expired session, so recovery asks for the action that is needed.

OneMind BETA 0.4.13 improves connection recovery

This BETA release improves recovery when an AI-tool connection refreshes or a Project folder needs attention.

  • Overlapping connection refreshes are handled more reliably, reducing avoidable interruptions.
  • Folder recovery distinguishes why a binding needs attention and offers the relevant retry or rebind action.

OneMind BETA 0.4.12 makes intro-film sound controls clearer

The intro film's sound control now reflects the audio that is actually playing.

  • When playback starts silently, the first sound-control click enables sound.
  • A browser autoplay restriction no longer overwrites your saved sound preference.

OneMind BETA 0.4.11 improves development pilot recovery

The latest BETA release improves recovery from verified temporary connection failures in the explicitly enabled automatic development pilot.

  • Eligible transport failures can use bounded retries after the tool process has stopped; explicit Stop and Pause decisions continue to block automatic work.
  • Reviewed Readmit preserves the cancelled run and keeps the schedule paused. Resume is a separate action that can admit a new bounded pass.

OneMind BETA 0.4.10 is available

This BETA release strengthens the explicitly enabled automatic development pilot, with bounded work, independent review and clearer recovery.

  • Automatic runs decline unexpected permission requests and questions within the approved scope; assisted tasks keep their normal approval flow.
  • Reviewed recovery preserves failed runs and their history. Merging, releasing and publishing public messages still require separate authorization.

Quick Start begins with your first useful result

Quick Start now leads you through a useful first outcome instead of a checklist of settings.

  • Follow the path from connecting an AI tool and binding a Project folder to receiving approved Mind guidance.
  • The guide distinguishes a saved connection, a confirmed Sync and an AI tool actually using the guidance, with recovery steps when delivery is incomplete.

Project Mind drafts become practical working guides

Mind Generator now organizes Project guidance around the evidence available for that Project and its current approved Mind.

  • Drafts can cover Project context, references, working rules, workflows, verification and lessons without inventing missing details.
  • Still-valid approved content and the Mind's language are preserved; proposed updates continue through Safe Check and review.

Matrix explains what a task needs before it can run

Matrix now distinguishes a connected AI tool from a receiver that is ready to work in the selected Project folder.

  • Assignment guidance explains missing folders and unavailable receivers instead of treating a saved connection as readiness.
  • The onemind agent can use a public HTTPS Project link you provide when preparing a Project proposal, while keeping the normal role and approval checks.

Find installed AI tools and recover their connections

The Mac app detects supported tools that are installed but not connected and tells you once, with a direct path to connect them.

  • Connect a detected tool without scanning again, and see clearer explanations when a tool is offline or needs attention.
  • Connection and presence recovery better handle temporary probe failures, app restarts and sign-ins that remain in active use.

Continue work and find the tasks that need you

Matrix adds session continuation, tool handoff, search and a Needs me view to help you pick up ongoing work.

  • Continue a supported session or hand work to another connected tool; requests to another member's tool retain the owner's approval.
  • Search tasks, find items awaiting your attention and keep the current Matrix view visible while it refreshes.

Approved Minds reach newly connected tools and folders

Automatic Mind Sync now picks up approved guidance when a new tool, Project folder or Mind becomes eligible for delivery.

  • Existing explicit Manual choices remain in place; automatic delivery uses the current account, device and Project folder authorization.
  • Paused accounts can resume queued delivery, and abandoned rollback work no longer prevents a later eligible Sync from being claimed.

See real progress while updating the Mac app

The macOS updater now shows real download progress so you can see how an update is advancing.

  • Downloading, verification and installation retain their distinct states and recovery actions.
  • The updater releases its active state after completion or failure so a later update check can proceed.

More connected tools can run Matrix tasks

Matrix gains native launchers for Cursor, Qoder, CodeBuddy, DeepSeek Harness, OpenClaw, Antigravity and TRAE, subject to each tool's connection and readiness checks.

  • Tasks run through the connected tool on its owner's Mac and keep that tool's permission policy.
  • Project sessions also gain readers for Qoder, Pi and CodeBuddy, limited to connected tools and bound Project folders.

Project sessions and changes come together in Matrix

Matrix can show sessions started in connected AI tools inside your bound Project folders, alongside tasks launched from onemind.

  • Use one sharing switch for Project sessions. File changes stay on the Mac until the owner explicitly shares a redacted snapshot.
  • On the Mac with the Project folder, the workbench brings Changes, Terminal and Preview beside the session, with Stop and follow-up controls for supported runs.

Ask onemind to help set up your Project

The onemind agent can help create Projects, invite teammates, run Safe Check and guide AI-tool setup from your Matrix conversation.

  • Review proposed actions before they run; account roles and existing approval requirements still apply.
  • Setup guidance explains what needs to happen on the receiving Mac when a browser cannot choose a local folder or connect a native tool.

A clearer first launch and a persistent Mac menu

The Mac app introduces onemind with a first-launch film and keeps common actions available from its menu bar icon.

  • Replay the intro from Settings, and open onemind or check for updates from the menu bar even when the main window is closed.
  • The installer and updater use clearer progress and result states, with explicit actions to continue or try again.

Answer a tool's permission request from anywhere in onemind

When Codex, Claude Code or Grok Build asks for permission during a Matrix task on your Mac, the request now also reaches your Task logs on the Matrix page and your Inbox.

  • Allow once or decline from the Mac dialog, the Matrix page or the Inbox; the first answer wins and the other surface closes.
  • Only the device owner can answer a permission. An unanswered request declines after ten minutes; completion, a task edit or a lost device cancels it.

The onemind agent is cloud-only

The Team's onemind agent creates tasks and hands them to connected AI tools; it no longer offers device-side plugin operations.

  • The plugin operation catalog, its host worker and the device routes are removed; every proposed action runs against existing application services.
  • Work on a member's Mac happens only through Matrix task assignment to a connected AI tool. Saved plugin actions from earlier releases are cancelled.

Assigning a task to a teammate's AI tool now asks them first

Your own connected tool is assigned immediately; another member's tool waits for that member's approval.

  • The task shows Awaiting approval with the requester and owner; the owner approves or declines from the Matrix page or an Inbox notification, and the requester is notified of the decision.
  • The onemind agent resolves "my Codex" or "Alice's Claude Code" by tool and owner and reports whether the task was assigned or is waiting for approval.

Matrix can hand tasks to every supported AI tool on a Mac

The receiving Mac registers one task receiver per AI tool it can launch, not only Codex.

  • Assignment pickers show each tool with its owner and device; a tool the device stops advertising goes offline at once.
  • Older apps keep working with their Codex receiver. Launchers for the other tools ship in the macOS app separately.

Claude Code can now receive Matrix tasks on a Mac

The macOS app starts the assigned tool through a per-tool launcher; Codex and Claude Code are the first two.

  • Claude Code runs headless in the Project folder, and every permission it asks for is answered in a onemind dialog on the receiving Mac; nothing is auto-approved.
  • A task completes only when the tool reports its own result; a tool that stops early marks the task failed.

Grok Build can now receive Matrix tasks on a Mac

The macOS app runs Grok Build's agent in the Project folder over its stdio protocol and reports the task from the agent's own turn result.

  • Permission requests the agent raises are answered in a onemind dialog; Grok Build's own policy decides what it asks for, and onemind never auto-approves.
  • Cursor and the tools not installed on the release Mac stay unassignable until their launchers pass a spike.

The onemind agent can check and request Mind Generator runs

Ask onemind in the Matrix chat whether analysis is on, what the latest runs produced, and to run the Mind Generator now.

  • Status and runs are scoped to your own devices and drafts; a request only asks a device where analysis is enabled and appears in your Inbox.
  • When no device is ready, the agent gives the exact commands, `onemind analyze on` then `onemind analyze now`, instead of pretending a draft exists.

Multiple AI tools can share a Project safely

Mind Sync prepares the selected tool’s global loader and delivers approved Project instructions and files together.

  • Tools sharing a Project keep separate managed content and preserve each other’s instruction sections.
  • Failed applies roll back both stages; recovery preserves other tools’ current content. Matching server and macOS client updates are required.

macOS updates preserve sign-in, folders, and drafts

Built-in updates carry the current session into the validated replacement app and keep saved work recoverable.

  • Project folder bookmarks and Mind and Workshop drafts survive restarts, with explicit recovery when a folder needs reconnecting.
  • Settings → Storage provides folder recovery and cache clearing that preserves credentials, drafts, bindings, backups, and Project files.

Refreshing keeps drafts, history, and selected tools stable

Background refresh preserves the work you are editing and the records you are reading.

  • Mind drafts retain their original approved base, Notifications keep loaded history and open details, and local backups appear while cloud requests finish.
  • Overlapping Team scans share pending work; late results cannot replace another member’s tool state or interrupt an active connection action.

Codex connections recover expired sign-in and return to Codex

onemind gives Codex the authentication response it needs to refresh an expired connection and retry.

  • Expired credentials are distinguished from missing permissions, avoiding repeated reconnect requests for recoverable expiry.
  • OAuth completion, cancellation, and recovery offer Return to Codex without placing authorization credentials in the app-launch link.

Sign-in offers Google One Tap when eligible

BETA browser sign-in requests Google’s account chooser on the email step when Google and browser settings allow it.

  • Email sign-in and the Google button remain available; starting email entry or leaving sign-in cancels the prompt, and pending authentication survives preference changes.
  • The Download action now stays readable in dark mode, including hover and keyboard focus.

Older links now lead into BETA workflows

Retired Alpha workspace and auxiliary pages now hand off to the corresponding BETA experience.

  • Existing invitations, device authorization, contact and privacy requests keep explicit review and recovery paths; Docs, Blog, Updates, and Developer remain available.
  • CLI file-update requests open in BETA Notifications, where approval requires the complete verified draft and confirmation before the client applies it.

Add Mind keeps the selected Project

Opening Add Mind from a Project now reaches the creation form with that Project preselected.

  • The intended Project destination survives sign-in instead of returning to Home.
  • Invalid or repeated Project parameters are rejected before the form opens.

Team opens with a clearer member list

The Team page starts without selecting a member or scanning their tools.

  • Choose a member to open their profile and tools; the Profile shortcut still opens your own account.
  • Member rows show email, role, and pending status with consistent square avatars and less repeated information.

Matrix tasks and AI chat are available to enabled test accounts

The Matrix task and Session workspace is available only to accounts granted access through Developer Platform → Test features.

  • Enabled accounts can create tasks, inspect Sessions, assign or hand off work, and keep chat drafts and conversations across reloads.
  • The connected Codex runner supports discussion only. Revoked or unverified access removes the workspace; audio and write-enabled approval modes remain unavailable.

Native copy and paste shortcuts work in macOS editors

The macOS Edit menu now routes standard editing commands to the focused field or editor.

  • Copy, Paste, Cut, and Select All support multilingual and multiline content in native and embedded web editors.
  • Undo and Redo follow the focused control, with menu actions disabled when they do not apply.

Create and propose Mind updates from connected AI tools

The onemind CLI and authenticated MCP now expose BETA Mind list, read, create, and update workflows.

  • Administrators can create active Minds; updates use the exact read version and pass through Safe Check and review without approving themselves.
  • Explicit integration repair handles supported stale installation history, and signed plugin bundles now pass the correct receipt checks.

Automatic mode waits for confirmed device consent

Selecting Automatic in the macOS drawer now activates the native runner using the signed-in device session.

  • The mode is saved only after device consent succeeds, with visible activation progress.
  • Failed activation keeps an error and retry path instead of silently saving an unusable policy.

Profile pictures support editing and native file selection

The profile picture studio combines avatar creation, image preview, cropping, and saved profile pictures.

  • Choose file now opens a native macOS picker and returns the selection to the existing validation and save flow.
  • Canceling the picker leaves the editor usable for another selection.

Developer Platform adds business trends and research

Authenticated developers can inspect business activity and read competitive research inside the platform.

  • Business shows authoritative Team, member, subscription, MRR, and Mind pull-request trends.
  • Competitors offers search, official links, and dated English and Simplified Chinese reports for 23 products and two categories, with evidence limits stated.

Folder sync and device refresh recover more reliably

Project folder selection now prepares compatible Sync targets, while remembered connections survive temporary absence.

  • Valid shared Mind packages no longer fail as missing targets; queued work stays pending until the matching apply is confirmed, and managed files record a separate Sync time.
  • Concurrent macOS refreshes queue within bounded limits, and expired optional usage data no longer disables otherwise valid device scans.

Matrix uploads cannot exceed the file download cap

In the BETA 0.3.27 source, Matrix uploads enforce a 100 MiB per-file limit on both the proposal and the automatic system-write routes, so no accepted file can exceed the content-download cap.

  • A larger file returns HTTP 413 `matrix_file_too_large` before it is staged or counted against the team quota, and the size is checked before the Base64 text is decoded.
  • Downloading a file through `GET /v1/matrix/files/<file-id>` is never capped below what uploads could have accepted, so files stored before this limit existed remain readable.
  • Operators can tighten the per-file limit with `ONE_MIND_MATRIX_FILE_MAX_BYTES`; the separate response-cap variable is gone.

Restore authenticated macOS update checks

In the BETA 0.3.28 source, the macOS updater accepts the versioned Singapore receipt contract, including the required Mind Check provider proof from 0.3.20 onward. It still verifies the pinned signature, exact checks, and artifact hashes.

  • Affected 0.3.19 and 0.3.27 installations need the verified 0.3.28 installer once, because their old update checker cannot obtain its own repair.

Incomplete Safe Check responses cannot become a pass

Safe Check now rejects every malformed findings value as an incomplete check.

  • Text, objects, numbers, booleans, missing values, and null cannot be mistaken for an empty list of risks.
  • Only a valid findings array proceeds through normal review, so an unreadable report never grants approval.

Session details refresh after assignment changes

In the BETA 0.3.25 source, the expanded Session details on the Matrix task board reload whenever the selected task's record changes, and only the newest load is shown.

  • After Assign, Handoff, Edit, Task Checker, or a host status report, the details section shows a loading state and reloads instead of keeping the previous records.
  • Quick switching between tasks can no longer show another task's records: superseded requests are discarded, and folding the section clears in-flight loads.
  • The one-frame flash of stale executions after a board reload is gone.

Sync-mode saves succeed for every target of a multi-target apply

In the BETA 0.3.25 source, saving a Mind in sync mode no longer fails for the second target of a multi-target apply.

  • A stale pending request left by a prior apply at a different target index is superseded instead of rejecting the save.
  • The misleading "no matching AI tool target" error no longer appears for a valid target.

Safe Check fails closed on partial reports and bad configuration

In the BETA 0.3.25 source, a Safe Check response without a findings array is treated as a failed check instead of a pass.

  • A model result whose findings are null is rejected as a partial report; the prompt now requires a JSON array, empty when nothing was found.
  • One malformed entry in the allowed base URL list stops the server with an explicit configuration error naming the entry instead of silently disabling semantic checks.

Invitation accept links use the configured public app URL

In the BETA 0.3.25 source, Team and founder invitations link to the configured public app URL instead of the request origin.

  • The product invitation endpoints and the management-console invitation endpoints build accept links the same way.
  • Invitations created through a proxy or an alternate origin no longer produce mis-linked accept URLs.

Notification stream catch-up reads a single row

In the BETA 0.3.25 source, the real-time notification stream fetches one notification by token with the inbox joins instead of rescanning from the previous id.

  • Catch-up after a reconnect stays linear in the number of new notifications.
  • Inbox and token lookups run as read-only queries.

Team page keeps focus and clears stale errors

In the BETA 0.3.25 source, the Team page restores keyboard focus after member changes and clears a previous member's error when another member is selected.

  • Focus returns to a live element after a member is removed, after every invite role submission, and when a resize collapses the compact panel.
  • Role changes and removals map known server errors to localized copy in all five BETA locales.
  • The breadcrumb trail is visible and scrollable on mobile and screen-reader-only at desktop widths, so the three-pane layout is unchanged.

Personal trials show a trial end date instead of a billing portal

In the BETA 0.3.25 source, Settings billing no longer offers "Manage billing" for a personal trial and labels its end date as a trial end instead of a renewal.

  • The billing-portal call that always failed for trials is gone.
  • The Settings breadcrumb is visible and horizontally scrollable on mobile.

Google sign-in button and contrast fixes

In the BETA 0.3.25 source, the Google sign-in button no longer re-renders on every resize, and several text and border colors meet the 4.5:1 contrast target.

  • Empty renders are tracked per button size, and the button enters its error state after five consecutive empty renders.
  • Confirm-dialog hover and focus borders are visible in dark mode, and notification read-state text meets 4.5:1 in light mode.

Mind file rendering is bounded and safer

In the BETA 0.3.25 source, the Mind file reader rejects oversized or malformed files, and Markdown rendering no longer loads external images.

  • Files over 2 MB decoded, invalid base64 payloads, and non-UTF-8 content show a localized error instead of rendering replacement characters.
  • Images in a Mind readme or a synced Markdown file are not rendered, so viewers no longer fetch external image URLs.
  • Saving the sync mode no longer reports an apply failure when the host has no pending apply.

macOS app deletes revoked credentials and no longer blocks sign-out behind a pending sync

In the BETA 0.3.25 source, the macOS app removes its Keychain credential when a renewal heartbeat is rejected with 401 or 403, and sign-out no longer waits behind a pending Mind sync.

  • The session invalidation callback runs independently of the renewal task that triggered it, so the revoked credential is deleted exactly once.
  • Pending-sync polling runs outside the session gate and surfaces a concurrent credential change as a device-session error.
  • The pending Mind sync task is tracked and cancelled together with the web request that started it.

Finder reveal resolves paths without symlink races

In the BETA 0.3.25 source, the macOS app resolves Finder reveal paths with a per-component descriptor walk instead of a stat loop.

  • Every path component is opened without following symlinks and checked for the current user's ownership and the expected file type.
  • A symlinked ancestor, intermediate directory, or leaf is rejected as an unsafe path.

Mind generator tolerates extra response keys

In the BETA 0.3.25 source, the Mind generator checks the required keys and their types for each action and logs unexpected extra keys instead of rejecting the whole response.

  • Missing keys, wrong types, and unknown actions still fail with the existing protocol errors, never a type error.

Mind files render as Markdown and are openable

In the BETA 0.3.24 source, the Mind document renders as formatted Markdown and the Files list is openable.

  • The Mind document body renders with full Markdown formatting (headings, lists, code blocks) instead of raw text.
  • Clicking a file in the Files list opens its decoded contents in the document pane; `.md` files render as Markdown and other files appear as preformatted text.
  • The Active/waiting status badge moves into the title bar next to the Mind name, and the inspector panel is flattened with always-visible sections.

Team admins can change member roles and remove members

In the BETA 0.3.24 source, Team admins can change a member's role or remove a member directly from the Team panel.

  • Role and removal controls appear next to each member row; the signed-in admin's own row has no destructive controls.
  • Removal requires confirmation before it takes effect.
  • Copy is localized in all five BETA locales.

Invited members show a pending verification badge

In the BETA 0.3.24 source, Team members who have not yet verified their email appear in the roster with a "Pending verification" badge.

  • Previously, unverified invited members were hidden from the list entirely.
  • Seat counts, admin counts, and notification fan-out remain unchanged; the badge is display-only.

Automation mode labels localized for zh-SG, zh-HK, and Korean

In the BETA 0.3.24 source, Mind Sync automation mode labels are now translated for zh-SG, zh-HK, and Korean.

  • Matches the Japanese terminology set in an earlier release.
  • All five BETA locales now show native-language automation mode names.

Notification stream events now include actor and team data

In the BETA 0.3.23 source, real-time notification stream events were silently dropped because they lacked the user and team joins the inbox query uses.

  • The stream now runs the same joined visibility query as the inbox; streamed events include actor and team fields.
  • The stream cursor advances correctly, so the 250 ms re-fetch loop no longer spins without updating the badge or inbox.

Connected tools remain visible during partial adapter scans

In the BETA 0.3.23 source, if one adapter scan failed during a tool rescan, the successfully connected tools from other adapters were cleared from the UI.

  • Tools from adapters that succeeded are now retained as offline cards, keeping "Remove Connection" available.
  • The partial-scan error is surfaced separately so the failure is visible without hiding healthy connections.

Settings remain usable when billing refresh fails

In the BETA 0.3.21 source, a billing-refresh failure could make Account, Profile, and Password settings unusable.

  • Billing now owns its own retry state; a billing failure no longer blocks unrelated Settings sections.
  • The Billing section shows its own retry controls when a refresh fails.

Team trial coverage displays accurately

In the BETA 0.3.21 source, Personal trials, Paddle subscriptions, and onemind-granted Team trials are decoded as separate exact contracts.

  • Team trial coverage is shown without misleading purchase or cancel controls.
  • Each billing source maps to its correct display without conflating trial types.

Favicon stays pinned through warm-cache loads and theme changes

In the BETA 0.3.21 source, the BETA favicon is pinned through the initial HTML, hydration, theme changes, and warm-cache loads.

  • Mutable HTML, runtime config, and stable brand assets now carry a no-cache or revalidation policy so stale cached responses no longer serve outdated content.

Unread notification counts shown as a badge

In the BETA 0.3.21 source, the server-owned unread total appears as a badge on the Notification destination across signed-in routes.

  • A blue numeric badge shows counts from 1 through 9 and displays ··· above 9; it replaces the folded Notification icon while unread messages exist.
  • The Unread filter count and unread row dots use the same onemind blue for visual consistency.
  • Badge refresh is independent of operating-system notification delivery and preserves the last confirmed count across pending or failed Inbox loads.

BETA color palette refreshed

In the BETA 0.3.20 source, the BETA product color palette is refreshed for improved visual clarity.

  • Page backgrounds change to `#FCFAF2` in light mode and `#0C0C0C` in dark mode; panel backgrounds to `#FFFFFB` and `#1C1C1C`.
  • Hover backgrounds update to `#BDC0BA` in light mode and `#656765` in dark mode with accessible foreground contrast.
  • Shared web and macOS design tokens, component guidance, and palette contract tests are updated throughout.

Team workspace has a responsive one-pane layout on narrow screens

In the BETA 0.3.20 source, the Team workspace adapts to a single-panel drill-down view at 760 px and below.

  • On desktop, the resizable two-column layout with a member list is retained.
  • On narrow screens, the workspace collapses to one panel with smooth navigation between list and detail views.
  • Localized in all five BETA locales.

Team Configuration and Personal Instructions files are revealable in Finder

In the BETA 0.3.20 source, the Team Configuration and Personal Instructions controls in the macOS app reveal the native registry-owned file in Finder.

  • Synced Mind files open in the independently validated read-only viewer; native config files open in Finder.
  • Both actions are distinct and clearly labeled so users can inspect the file without accidentally editing it through the wrong surface.

Mind Sync is exact and terminal

In the BETA 0.3.20 source, local Mind synchronization is exact and terminal.

  • Selecting Automatic applies the sync immediately; Manual Sync waits for the same request to reach "applied" before reporting success.
  • Pending or aggregate activity can no longer be mistaken for a successful sync result.
  • The sync panel shows the localized "Syncing…" status during the apply window instead of a blank state.

Teams can organize before subscribing

The BETA 0.3.18 source separates Team organization from paid feature access.

  • A normal Team workspace can invite members before subscribing, while a Personal workspace still cannot invite another person.
  • Membership capacity remains server-authoritative; paid plans continue to govern product features rather than whether a Team can organize.

Missing AI tools can be removed safely

In the BETA 0.3.18 source, the macOS host gives the matching owner a bounded recovery path for a remembered AI tool that is no longer installed or discoverable.

  • A missing registry tool remains an Offline remembered profile and never becomes an invented Connected state.
  • Only the matching signed-in Team, member, and device can remove that exact profile; confirmation, re-scan, cancellation, and failures preserve unrelated or authoritative remote rows.

Local-folder Project binding is owner-scoped

In the BETA 0.3.18 source, the macOS host can bind a new Project to a folder the owner explicitly chooses without exposing its private absolute path to the web surface.

  • The native chooser returns an opaque selection and revalidates the folder before the Project and local binding are finalized.
  • Mind Sync and Backup operations stay scoped to the exact signed-in account, Team, Project, tool, target, and destination identity; session or binding drift fails closed.

Project and Mind lifecycles stay consistent

In the BETA 0.3.18 source, Project and Mind reads, reviews, deletion flows, and sync authority use one active aggregate boundary.

  • A deleted or unavailable Project cannot leak an associated Mind through detail, list, review, deletion, sync, or AI-connection paths.
  • Stale aggregate actions fail instead of mutating orphaned Mind state, while valid Project recovery restores the governed relationship.

Backup can restore the pre-onemind baseline

In the BETA 0.3.18 source, the macOS host records a write-once first-touch baseline before onemind first changes a supported Project destination.

  • Recovery previews the exact Project-relative files to restore or remove, then revalidates the opaque plan, owner, binding, and destination before applying it.
  • An incomplete or unavailable baseline fails closed; Backup history, unlisted Project paths, global targets, and device-wide directories remain untouched.

Notification pagination and read receipts are authoritative

In the BETA 0.3.18 source, the Inbox keeps older-page loading and unread state tied to server evidence.

  • Load older follows the server-owned cursor, preserves current rows on failure, and deduplicates overlapping notification IDs without replacing items already under review.
  • Opening an item changes its unread state only after a matching authenticated receipt confirms its ID, timestamp, and unread count; failed or malformed receipts leave it unread with Retry available.

Minds and Settings share a simpler workspace layout

Mind navigation and detail now sit inside one resizable panel, with consistent Settings surfaces.

  • Create Minds in the shared Markdown editor, rename their primary file through review, and arrange Projects and Minds in your own saved order.
  • The divider supports dragging, keyboard adjustment, and reset; saved navigation order belongs to your account and Team.

Managers can review their submissions and recover deletions

Current Team managers can approve or reject their own governed updates while retaining the existing review checks.

  • Safe Check, conflict review, exact versions, role checks, and audit history still apply.
  • Approved Mind and Project deletions can be recovered from their decision notifications, with guidance to restore a deleted parent Project first.

Choose how much of the Mind workflow to automate

The side drawer offers Manual, Manumatic, and Automatic modes for the governed Mind workflow.

  • Existing saved policies are preserved, and the server confirms every mode change.
  • Full Automatic mode is restricted to administrators; new administrator and member defaults respect their different approval authority.

Notifications bring Mind review and decisions together

BETA Notifications provides an inbox and detail panel for governed Mind changes.

  • Review proposed Markdown file changes before approving or rejecting them; approved content remains unchanged until the decision is accepted.
  • Deletion requests, review evidence, and decision status stay visible together, with recoverable submission errors.

Inspect backups and recover local Mind files on macOS

BETA Backup brings Local and Cloud restore points into a shared inspection workflow.

  • Inspect the original files on web or macOS; recovery requires the matching Project folder on the Mac, with confirmation and retry for failed cloud uploads.
  • Mind Sync verifies required backups before changing files, runs targets independently, and preserves destination ownership and rollback on failure.

Projects can contain multiple governed Minds and their files

Minds now have their own identities within Projects, with versions, drafts, and approvals attached to the selected Mind.

  • Project management and Mind creation keep destination choice explicit instead of assuming one Mind per Project.
  • Approved skills, hooks, and resources travel with the Mind package, with integrity checks, ownership records, and safe removal of retired content.

Mind Generator turns work history into reviewable drafts

The governed Mind Generator can prepare complete Mind drafts and update proposals from unread Codex sessions and Project work history.

  • Stable checkpoints avoid repeatedly scanning the same active and archived session material.
  • Generated work still requires provenance, freshness checks, Safe Check, and human approval before Matrix publication.

Invite teammates and manage Personal or Team billing

BETA adds real Team invitations and server-confirmed Personal Pro and member-based Team billing.

  • Invite, accept, and revoke membership through permission-checked flows with clear capacity and rate limits.
  • Paddle checkout, confirmed subscription state, cancellation, renewal, and Team plan changes are available through the billing workflow.

System notifications are available on web and macOS

BETA Settings can manage notification permission for supported browsers and the native macOS host.

  • Permission, blocked, unsupported, and recovery states explain why a system notification can or cannot appear.
  • The Notifications settings section stays selected through direct links, refresh, and browser history.

OpenCode joins the supported Project targets

OpenCode can receive governed Project instructions and prepared shared skills through the onemind CLI.

  • Project instructions use the managed AGENTS.md section, with OpenCode branding in the tool catalogue.
  • The integration is documented as prepared/manual; preparation alone does not claim a live connected host.

Connect supported AI tools directly from macOS

The BETA macOS host expands native connection actions and remembers exact tool, account, Team, and device profiles.

  • Scans combine this Mac with signed-in remote devices, while Connect and Disconnect remain local-device actions.
  • Live presence requires host evidence; detected or prepared tools are not automatically reported as connected.

macOS installation and update progress are easier to follow

BETA adds a guided disk image installer and a dedicated software-update status window.

  • The installer presents a drag-to-Applications layout, and signed-in downloads explain the next installation step.
  • The update window uses the current theme and shows progress without taking over the main workspace.

DeepSeek Harness is a first-class Project target

onemind now treats DeepSeek Harness as a local coding-agent target for Project instruction sync, skills, Matrix assignment, and device heartbeat.

  • Register `deepseek_harness` with the `dsh` alias. New setup writes the composed package to `<repository>/AGENTS.md`, which the harness loads as project instructions.
  • Use the harness home at `~/.dsh`. Its user-global instruction file is `~/.dsh/AGENTS.md`, and skills sync to `~/.dsh/skills` and `<repository>/.dsh/skills`.
  • Keep native plugin inventory unclaimed. The integration lifecycle is prepared/manual because the developer preview runs as a local web server that onemind cannot verify passively.

Grok Build is a first-class Project target

onemind now treats Grok Build as a local coding-agent target for Project instruction sync, skills, Matrix assignment, and device heartbeat.

  • Register `grok_build` with the `grok` alias. New setup writes the composed package to `<repository>/AGENTS.md`.
  • Sync Grok Build skills to `~/.grok/skills` and `<repository>/.grok/skills`. Legacy `~/.grok/AGENTS.md` blocks migrate to `~/.grok/rules/one-mind.md`.
  • Keep native plugin inventory unclaimed. Integration lifecycle is prepared/manual, matching the current Grok Build skill package.

BETA sign-in and Settings complete core account workflows

BETA brings sign-in, Matrix selection, and account settings into the shared browser and macOS experience.

  • Display name, Team name, password, and Matrix changes use confirmed account state and recoverable errors.
  • The shared settings experience keeps language, appearance, and governed AI-sync policy controls together.

Mind review gains conflict and safety checks

Mind updates and synchronization now carry version-specific conflict and Safe Check evidence into governed review.

  • Reviewers can inspect affected Mind versions, source hashes, and blocking or advisory findings before deciding.
  • Checks do not resolve conflicts or grant themselves approval; stale or incomplete evidence cannot stand in for a valid review.

Mind Check Station adds explicit, warn-only risk checks

onemind now provides explicit, authenticated Manager and Member check paths that keep risk analysis on the server without taking approval or implementation authority.

  • onemind mind-check manager submits a Mind for a Team-admin check; member submits a Mind or current package with explicitly selected harness files, while server limits and digest checks bound the input.
  • With a configured server model, completed reports combine model analysis and structural preflight into evidence-backed warnings with suggested actions. v1 never blocks host flows and returns unavailable instead of inventing findings when the model cannot run.

Local Mind sync now keeps restore points

onemind now keeps local restore points when it updates an existing AI-tool instruction file, so previous prompts and applied-Mind states can be recovered deliberately.

  • The first sync of an existing file preserves the full pre-onemind original once; when later syncs find an applied Mind, they snapshot that full file with content and package identity metadata before replacement.
  • onemind mind backups lists restore points; onemind mind restore ... --yes can replace the live file with the original or a selected applied-Mind snapshot, preserving the current applied Mind first when one is present.

Team and Project Minds now sync as one atomic package

Project-scoped sync now delivers shared Team context and Project-specific context together as one verified package.

  • Composed the Team Project Mind and the selected Project Mind at the Project root before writing the tool-native instruction file.
  • Bound completion evidence to the exact composition while preserving a governed migration and recovery path for legacy global bindings.

Developers can reset passwords by email code

Developer accounts can now recover password access without leaving the canonical developer experience.

  • Added localized email-code recovery, resend timing, retry guidance, a verified one-time reset, and a safe return to sign-in.
  • Kept management sessions on the developer origin and distinguished invalid credentials, rate limits, and temporary service failures without clearing entered values.

Matrix brings human and AI teammates onto one live Team Floor

Matrix now presents an observable Team workspace instead of a static dashboard.

  • Added a Team Floor with the real roster, AI sync presence, latest observable status, Team pulse, activity, and handoffs.
  • Added Normal and Cyber modes, fixed seats, full-screen viewing, and direct add-human and add-AI paths while hiding unavailable private or cross-Team presence.

Daily Mind work is faster and better organized

Common post-sync, reauthorization, and workspace tasks now lead directly to the next useful action.

  • Opened the exact applied Markdown instruction files after a successful foreground CLI sync, with non-blocking warnings if the system cannot open them.
  • Reused the authenticated CLI device identity during reauthorization so existing device setup and sync status stay attached to the same device.
  • Kept Solo and Team workspace identity correct after account switches and organized Mind details into five linkable sections with legacy deep-link recovery.

Navigation and feedback feel calmer and more consistent

onemind now uses a steadier visual and feedback system across the website, workspace, and CLI.

  • Added clearer onemind identity in the CLI and localized website footer, plus full-width menu glass, stable side navigation, and shared main-window spacing.
  • Improved global notifications with readable timing, accessible polite or urgent announcements, and stable layering while keeping the rest of the page usable when a toast is visible.

AI-tool connections gained broader, more reliable context

More supported AI hosts now receive the right Project context without overstating their live state.

  • Added Cursor Team and Project context and hardened OpenClaw, Hermes Agent, Qoder, CodeBuddy, and TRAE lifecycle and launcher behavior.
  • Made Antigravity distinguish offline preparation from live initialization instead of reporting prepared resources as connected.

Minds is now primary, with one unified Team roster

Minds is now the primary customer workspace, while human and AI Team relationships are presented in one consistent roster.

  • Brought contextual files, reviews, history, connections, and supported-tool policies into the Minds workspace while retaining Matrix-compatible governance underneath.
  • Unified humans, AIs, and pending invitations in one searchable Team roster with owner, status, tool filters, and dedicated detail views.

CLI Sync is simpler, live, and truthful

The CLI now makes synchronization progress and evidence easier to follow from one place.

  • Added a bottom command input, authentication-aware commands, streamed Sync progress, and one consolidated localized Status view.
  • Preserved missing and global-scope evidence accurately and cleared stale Codex status only after a successful verified checkpoint.

Project-file approvals now require the complete draft

A truncated or stale preview can no longer be used as the basis for approving a governed Project-file change.

  • Required a complete bounded draft before approval.
  • Bound review proof to the exact request ID, request revision, draft revision, and draft digest, so any change blocks approval until it is reviewed again.

Developer access, waitlists, and Google linking recover cleanly

Account and developer entry flows now provide a clear way forward when a session or identity needs recovery.

  • Established developer.onemind.team as the canonical developer surface and added Home, Sign out, and version-selection exits to waitlist flows.
  • Continued existing-account Google linking after password verification and preserved a recovery path for Google-only accounts.

The governed onemind CLI alpha is ready

The supported onemind CLI distribution is now available for governed work on macOS and Linux.

  • Shipped authenticated installers and release archives for Project-scoped sync and explicit AI-tool lifecycle actions.
  • Added signed repair and offline-preparation paths that preserve exact host recovery modes without treating prepared resources as a live connection.

Account setup has safe exits and consistent Team access

Incomplete setup and Team changes no longer trap users or leave plan access stale.

  • Kept Home and localized Sign out available during account-version setup, including local logout recovery when server revocation is unavailable.
  • Refreshed authoritative Personal and Team entitlements after Team switches and invitations and added direct email support from the workspace navigation.

AI-tool setup now leads straight to the right guide

AI-tool setup actions now open the matching localized onemind guidance.

  • Linked every public AI-tool card to its supported user guide instead of leaving the next step implicit.
  • Kept guide navigation in the current browser page instead of opening a new tab.

CLI-led website installation shipped

The website now directs new users to the supported CLI installation path instead of presenting unfinished native app downloads.

  • Removed macOS and other native app download links from Quick Start and Downloads while keeping the cross-platform CLI installer available.
  • Made the CLI installer's automatic authenticated Codex plugin setup explicit in every supported website language.

macOS companion app simplified

The macOS companion app now presents a smaller, beginner-friendly control surface without hiding local control.

  • Added adaptive controls, explicit local actions, localized runtime recovery, and a preserved connection point for every supported AI tool.
  • Serialized AI-tool sync selection so rapid changes cannot race or leave the shared CLI runtime in an inconsistent state.

Project-file refresh reached end-to-end completion

Governed Project-file updates can now move from a cloud proposal to an exact, reviewable local result.

  • Bound every Project package to its exact AI target and added before-use waiting, event-driven background freshness, bounded status waits, safe deferral, and path-level resume output.
  • Added responsive, localized web review with readable decisions, technical details, direct links, and truthful local apply progress.

Production sign-in and account recovery hardened

Web, macOS, and CLI account recovery now handle real production edge cases more clearly.

  • Fixed production macOS sign-in, moved sessions to the Data Protection Keychain, and improved the localized sign-in hierarchy and setup copy.
  • Added explicit recovery for macOS app and CLI account conflicts and restored correct Personal access for users who joined a Team first.

Proposal reviews became list-first

Large proposal queues are now easier to scan without losing review detail.

  • Replaced the long expanded queue with a compact proposal list.
  • Added focused, URL-addressable detail pages for reviewing an individual proposal.

Main navigation moved to stable routes

onemind's desktop navigation now uses clear destinations instead of nested, expandable groups.

  • Added flat primary navigation and moved Matrix and Billing tools into route-backed pages.
  • Preserved redirects from legacy destinations so saved links continue to reach the current product surfaces.

Matrix Project workspace became route-backed

Project context is now explicit in the URL and consistent across the complete Matrix workspace.

  • Unified Project-owned files, Matrix status, syncing, and proposals under one shared header and tab system.
  • Preserved the active Project and tab scroll position instead of relying on implicit selected-Project state.

Brand, icons, and interface copy standardized

The web product now uses one consistent visual and writing system across navigation and workspace actions.

  • Restored the original brand animation and supplied icons, added reusable core web icon components, and fixed production direction-icon asset paths.
  • Standardized sentence-case copy, Matrix tab layouts, utility typography, and neutral selected-tab indicators in light and dark modes.

Self-service onboarding shell completed

Self-service account setup now appears inside the illustrated sign-up experience instead of a disconnected management flow.

  • Added localized Personal, Team, and Custom version selection while preserving existing accounts, invitations, and completion state.
  • Kept the onboarding shell responsive and consistent with the refined email and Google authentication layout.

Connections now report verified sync evidence

Connected-tool status now reflects what actually synchronized on a device.

  • Replaced configured-tool assumptions with verified sync evidence and recognized Codex bundled with ChatGPT.
  • Moved Sync status from Matrix to Team > Connections, preserved legacy redirects, and aligned the desktop layout with shared standards.

Personal Quick Start handoff made truthful

Quick Start now advances Personal users only when their real device and selected tools are ready.

  • Streamlined contextual recovery and handed Personal users directly to the Personal Mind builder.
  • Required exact selected-device application evidence before marking setup complete.

Verified Mind sync completion shipped

onemind no longer treats requested synchronization as successful synchronization.

  • Added end-to-end completion evidence across the system server, CLI, web, and macOS app.
  • Reported whether each Mind, instruction set, and selected AI target was actually applied before showing completion.

Account identity and profile controls completed

First-time entry, profile identity, and signed-in account recovery now behave consistently.

  • Clarified account creation and first successful setup, improved responsive authentication forms, and corrected email-delivery feedback.
  • Added signed-in password changes, authenticated Custom waitlist requests, and localized Unicode display names.

Project skills became fully user-controlled

Project-relevant skills can now be routed to supported AI tools without silent installation or replacement.

  • Added a small Project skill router and target-aware management across the CLI and macOS app.
  • Exposed explicit Install, Update, and Uninstall actions while protecting unmanaged or locally changed skills.

macOS localization and Keychain behavior completed

The macOS app now supports the full product language set without triggering system password prompts.

  • Completed English, Simplified Chinese, Singapore Chinese, Japanese, and Korean app resources and language-aware navigation.
  • Rotated secure sessions to a non-interactive Keychain contract so launch, sign-in, and background synchronization do not request legacy credentials.

Quick Start sync choices made flexible

Users can finish setup without being forced into automatic synchronization choices they do not want.

  • Allowed an empty automatic-target selection while still blocking invalid or unavailable targets.
  • Made completion optional, clarified the required first sync, removed duplicate controls, and kept recovery state consistent across web, CLI, and macOS.

Version selection and multi-Team accounts shipped

One account can now move through Personal, Team, and invitation-based work without mixing identity and workspace ownership.

  • Added self-service Team creation, invitation-preserving multi-Team membership, active-Team switching, and dedicated desktop selection flows.
  • Enforced one Personal workspace per account while keeping global account identity separate from Team membership.

Matrix uploads gained an approval workflow

Uploaded Matrix changes now wait for an explicit human decision before entering shared AI context.

  • Added staged upload review across the CLI, system server, and web change composer.
  • Kept uploaded prompts, skills, documents, and assets inert until an authorized reviewer approves the change.

Governed Project-file refresh foundation shipped

onemind can now propose and track safe local Project-file refreshes without overwriting work invisibly.

  • Added macOS notifications, web approval, local checkpoints and manifests, plus a server control plane for refresh state.
  • Added migration-aware release support and aligned the web refresh model with the local apply contract.

Projects unified in a versioned Matrix workspace

Project knowledge now has one shared, versioned home instead of separate workspace concepts.

  • Unified Team and ordinary Project context in Matrix with an explicit active Project and versioned Mind.
  • Kept Project files, AI targets, proposals, and synchronization tied to the same governed workspace boundary.

Solo-to-Team billing shipped

Personal customers can now upgrade into a Team through a real, protected billing flow.

  • Added the one-way Personal-to-Team conversion and Team seat expansion.
  • Added Paddle transaction safeguards and removed unrelated controls from the focused Billing experience.

Pi integration shipped across onemind

Pi is now a first-class onemind synchronization target.

  • Added Pi detection, configuration, and instruction sync in the CLI, macOS app, and system server.
  • Added Pi to localized documentation and the public product experience.

Personal Mind builder and publishing shipped

Personal users can now turn their setup into an editable, publishable Mind.

  • Added the builder, validation, and publishing flow for a Personal Mind.
  • Routed first-time Personal users to the builder while preserving real readiness and completion checks.

Quick Start became goal-driven and recoverable

Quick Start now shows user goals instead of exposing the product's internal test checklist.

  • Added a horizontal goal rail, shorter progress labels, focused tool guidance, and desktop recovery actions.
  • Kept technical blockers inside contextual recovery and showed Codex guidance only when Codex is detected or configured.

Team impact and responsive workspace reporting improved

Managers can now read team value and product state more clearly across desktop and smaller screens.

  • Improved dashboard impact reporting and standardized adaptive main-page widths.
  • Replaced fragile third-party Qoder and TRAE icons with stable local assets in every supported language.

OpenRouter personal analysis guide published

Users now have a documented optional path for connecting OpenRouter to personal AI-work analysis.

  • Added setup and provider guidance to the localized user documentation.
  • Kept OpenRouter optional and separate from onemind's local synchronization requirements.

Production install and update paths completed

Installation and updates now use production-backed, verifiable delivery paths.

  • Added macOS update checks and recovery backed by published release artifacts.
  • Pointed the CLI installer to production, added CLI downloads to the website, and kept app and command-line versions aligned.

Guided Quick Start gained verified tool discovery

New users now see setup actions for tools that can actually synchronize on their machine.

  • Opened Quick Start after direct sign-in and added foldable app, CLI, and Codex try methods plus the macOS deep link.
  • Replaced configured-tool guesses with verified local detection and hid unavailable sync targets.

Detailed team and device sync visibility shipped

Members and managers can now inspect synchronization by person, device, channel, and plan.

  • Added the detailed sync status matrix, a team-member usage page, and role-aware device reporting.
  • Personalized the signed-in home, displayed an adaptive plan tag beside the Team name, and aligned Sync Status breadcrumbs across breakpoints.

Matrix proposals gained independent governance

Shared Matrix updates now keep authoring and approval as separate responsibilities.

  • Required independent approval for manager-authored updates and opened approved Matrix details in a focused new tab.
  • Replaced direct uploads with staged commits that require explicit Project and AI sync targets.

Team and Project Minds unified

onemind now uses one consistent Project model for shared team knowledge.

  • Added one protected Team Project plus ordinary Projects, each with one versioned Mind.
  • Enforced exact, fail-closed Project and AI-target boundaries across the server, CLI, web, and macOS app.

Native macOS navigation and identity restored

The macOS app once again behaves like a focused native companion instead of a thin web shell.

  • Restored native navigation, showed the signed-in user's name, simplified setup and sync overview, and completed missing main-window localization.
  • Prevented legacy Keychain password prompts and clarified terminal authorization device details.

Public brand and authentication polish shipped

The public entry experience now presents onemind more consistently and keeps sign-in controls visible.

  • Added the animated soccer-ball brand lockup, responsive handwritten alpha label, and updated onemind plugin logo.
  • Fixed Google sign-in visibility, clarified proposal terminology, and removed obsolete prototype pages without changing current routes.

One-click authenticated Codex setup shipped

Signed-in users can now connect Codex to onemind through one guided setup action.

  • Added one-click setup that installs and authenticates the onemind Codex plugin.
  • Connected the web, CLI, and macOS handoff so users do not need to assemble plugin configuration manually.

macOS app and CLI runtime unified

The macOS app and CLI now share one local runtime and a clearer authorization contract.

  • Unified local account and synchronization state, improved session and terminal authorization guidance, and removed duplicate setup behavior.
  • Fixed the notification launch crash so background alerts no longer prevent the companion app from opening.

Live Paddle checkout and pricing restored

Team pricing once again leads to the real Paddle checkout with the required purchase context visible.

  • Restored annual price, monthly equivalent, tax, and no-trial disclosures across localized pricing surfaces.
  • Fixed the live Paddle handoff so eligible customers can start checkout from the production website.

Authenticated onemind Codex plugin shipped

Codex can now access onemind through a dedicated plugin tied to the user's authenticated account.

  • Added the onemind plugin package and authenticated CLI bridge for Codex sessions.
  • Kept onemind account and workspace permissions in force instead of exposing an unauthenticated local integration.

Alpha 1 downloads and release automation shipped

onemind Alpha 1 is now available as a verified multi-platform `v0.1.0` release.

  • Published a macOS Apple-silicon DMG and updater ZIP plus CLI archives for macOS, Linux, and Windows on AMD64 and ARM64.
  • Published SHA-256 checksums for every app and CLI archive and connected the release to verified CLI and macOS update paths.
  • Moved macOS packaging to a Swift 6 runner and added strict-concurrency compatibility for native notifications.
  • Made sealed promotion validate the updater archive and made GitHub release publishing repository-aware and safe to retry.

Paddle billing and plan controls completed

The Alpha 1 product now includes onemind's Paddle-backed Team subscription foundation and clearer plan behavior.

  • Added an annual Team subscription at US$60 per seat per year, shown as a US$5 monthly equivalent, with tax and no-trial disclosures.
  • Made verified Paddle webhooks authoritative for entitlements, seat limits, and Matrix storage quotas.
  • Added a dedicated Billing management page, pricing-to-checkout actions, and access to the Paddle customer portal.
  • Displayed the active plan and seat limit in the product, while hiding team invitations for One-person accounts and keeping them available to entitled Team plans.

Sync status shipped across web, macOS, and CLI

Members and managers can now see whether onemind has reached every AI tool on their machines.

  • Added authenticated device heartbeats for onemind, tool instructions, project instructions, and skill synchronization.
  • Added a responsive web dashboard with machine filters, independent channel states, summaries, and five-second refresh.
  • Added a native macOS Sync Status dashboard and `onemind sync-status` with personal, team, and JSON output modes.
  • Kept team-wide visibility role-scoped and localized the experience across all supported languages.

Four-language Alpha experience completed

onemind's public, authentication, management, documentation, and legal surfaces now provide a complete four-language Alpha experience.

  • Completed the English, Simplified Chinese, Japanese, and Korean catalogs without falling back to English on core product routes.
  • Added an accessible glass language picker for English, Mainland and Singapore Chinese, Japanese, and Korean.
  • Published Alpha participation, privacy, cancellation, and refund terms across all supported languages, with a private route for privacy requests.
  • Improved tablet and mobile navigation while preserving localized pricing, billing, Quick Start, Updates, and policy content.

Guided launch and software updates shipped

Starting onemind and staying current now follow guided, verifiable paths.

  • Added a signed-in Quick Start page covering app and CLI installation, sign-in, AI-tool connection, synchronization, and readiness checks.
  • Added `onemind update --check`, verified CLI self-updates, and daemon update notifications.
  • Added macOS launch-time update checks, native notifications, Settings controls, verified staging, health checks, and rollback.
  • Redesigned sign-up, password-reset, and passwordless sign-in emails as responsive English and Chinese HTML with accessible plain-text alternatives.

Permissioned team skill sync shipped

onemind can now install reviewed Matrix skill folders into supported local AI tools after explicit device permission.

  • Added default-off automatic skill sync and one-time installation in the CLI and macOS app.
  • Added documented native destinations for Codex, Antigravity/Gemini, Claude Code, OpenClaw, and Hermes Agent.
  • Added download limits, SHA-256 verification, non-executable writes, managed manifests, and protection for unmanaged or locally modified skills.
  • Localized the new macOS and CLI controls in English and Chinese.

Release promotion and changelog ownership hardened

onemind's release handoff and developer-update workflow now fail safely and preserve clear ownership.

  • Added immutable verification for copied SQLite and WAL data before cross-host release promotion.
  • Made relay provenance checks stop a release when required evidence is missing or mismatched.
  • Added additive, author-owned changelog publishing tied to authenticated developer identities.
  • Prevented one developer from overwriting another developer's update files while keeping the public feed limited to completed work.

Personal AI team intelligence shipped

onemind can now turn opted-in personal AI work history into reviewable team knowledge.

  • Added encrypted OpenAI-compatible API connections in Settings, the CLI, and the macOS app.
  • Added opt-in skill and work-history analysis with redaction, checkpoints, and transport limits.
  • Added manager Mind controls so generated proposals can be reviewed or removed before they become shared knowledge.
  • Localized the new connection and analysis workflows in English and Chinese.

Mind library management shipped

Teams can now manage their private Mind files from both onemind Web and the CLI.

  • Added file and folder upload, classification, quota visibility, search, download, and delete controls to the Mind library.
  • Added `onemind files` commands with recursive directory support, integrity checks, quota preflight, and atomic local writes.
  • Kept uploaded prompts, skills, documents, and assets inert and team-private instead of executing or publishing them automatically.
  • Added responsive, accessible English and Chinese web experiences.

Secure account access and invitations expanded

onemind now supports more secure ways to join a team, sign in, and recover an account.

  • Added invite-gated email signup and email-code password reset with rate limits, one-use tokens, and session revocation.
  • Added optional Google sign-in, account linking, and invited-user onboarding with server-side token verification.
  • Replaced opaque team invite tokens with short, readable invitation sentences and encoded acceptance links.
  • Added a complete founder invite lifecycle with copyable codes and links plus pending, used, expired, and revoked states.

Developer identity and settings refined

The protected developer platform now gives internal collaborators clearer identities and more consistent navigation.

  • Added editable developer nicknames and server-managed, copyable developer email addresses.
  • Kept developer email data private to authenticated developer surfaces and out of the public changelog.
  • Refreshed older developer sessions so newly configured identity information appears without signing out.
  • Aligned the Developer Settings breadcrumb with the Teams page on desktop while preserving compact mobile spacing.

More AI tool integrations shipped

onemind now states each AI-tool boundary against the current native host contracts.

  • Antigravity uses the native `agy` plugin plus `GEMINI.md` sync; Qoder CLI 1.1.5 uses its native local plugin with skill/MCP resources and falls back only on older CLIs without native commands.
  • Cursor ships a schema-valid skill/MCP bundle but remains package-prepared and host-unverified; ChatGPT and `browser_agent` remain Mind-assignment-only.
  • CodeBuddy uses the current `codebuddy`, `codebuddy-code`, and `cbc` executables; `workbuddy` remains only the compatibility registry key.
  • Split the user guide into clear CLI, AI Tool Guides, Team, and Support groups, with a direct page for every supported AI tool.
  • Kept the same guide task open when users switch between English and Chinese.

Plan-based Mind storage shipped

Private Mind space now has clear storage allowances for individual and team use.

  • Added 100 MB of private Mind storage to Free.
  • Added 1024 MB of private Mind storage to Team.
  • Kept Mind storage private and plan-specific across the pricing and product experience.

Shipped-only changelog publishing launched

The Developer Changelog now has a focused workflow for publishing completed product updates.

  • Added English and Chinese Markdown upload from the developer platform.
  • Added shipped-only validation and persistent API storage.
  • Removed progress metrics, search, and area filters so the page focuses on shipped issues.

CLI and AI tool guides published

onemind users can now enter the documentation through the workflow they actually use.

  • Added a complete CLI path for installation, sign-in, commands, services, and local files.
  • Added direct, self-contained guides for Codex, Antigravity, Claude Code, Cursor, and Tencent WorkBuddy.
  • Grouped the navigation into Getting Started, CLI, AI Tool Guides, Team, and Support; every group title now opens its own overview article.
  • Shortened AI-tool navigation labels to With Codex, With Antigravity, With Claude Code, With Cursor, and With Tencent WorkBuddy.
  • Removed the redundant onemind User Guide link from the sidebar; the global Docs link and breadcrumbs still open the guide home.

AI tool security boundaries tightened

onemind now presents only AI tool integrations that meet the current support and security bar.

  • Removed Grok 4.5 from CLI targets, setup actions, localized copy, and documentation because of security concerns.
  • Made existing or manually entered Grok configurations fail closed instead of silently selecting an unsupported target.
  • Removed the unsupported Doubao node from the AI tool visualization.
  • Kept the remaining Codex, Antigravity, Claude Code, Cursor, and WorkBuddy integrations unchanged.

Native iPhone foundation shipped

onemind now has a native SwiftUI foundation for iPhone.

  • Added Home, Mind, Activity, and Account tabs with English and Simplified Chinese localization.
  • Added Keychain-backed sessions plus separate production and test environments.
  • Extended the shared Swift core with team-state loading and configurable notification polling.
  • Kept machine-local AI tool synchronization in the CLI and macOS app while the iPhone experience focuses on account and team activity.

Production, test, and email delivery hardened

onemind's production, test, release, and transactional-email paths now have clearer security boundaries.

  • Routed production through `https://onemind.team` on the Singapore ECS and kept the original Shenzhen ECS as the separate test host.
  • Made test deployment fail closed when canonical environment files or management credentials are missing, without generating or rotating credentials.
  • Updated browser smoke tests to respect the configured HTTP test URL instead of upgrading it to HTTPS.
  • Added certificate-verified implicit TLS for SMTP port 465 while preserving verified STARTTLS behavior on port 587.

Public web experience polished

Several public and authentication surfaces now render and behave more reliably.

  • Fixed documentation links so they remain visible in dark mode.
  • Bundled the OpenClaw logo locally instead of relying on a broken third-party favicon URL.
  • Renamed the Blog navigation label to Stories in English and Chinese without changing existing URLs.
  • Improved Chrome and Google Password Manager detection for public and developer sign-in forms.
  • Cleaned up duplicated marketing integration styles and aligned their regression coverage with visible labels.

onemind Alpha 1 launched

onemind's first alpha version was published for early testing on Saturday, July 11, 2026.

  • Published the first working alpha release of onemind.
  • Brought the initial web, CLI, and macOS workflows together in one release milestone.
  • Established the baseline for feedback and the next alpha iteration.

Canonical component library route

Developer documentation now treats `#docs/components` as the source of truth for reusable interface components.

  • Documented production-ready and needed components in one inventory.
  • Added reusable breadcrumb, card, status-tag, button, and activity patterns.
  • Aligned component guidance across light, dark, web, and mobile modes.

CLI guide navigation hierarchy

The developer docs gained a clearer reading structure for terminal-first setup and recovery guidance.

  • Kept documentation and component navigation in one continuous hierarchy.
  • Improved deep-link context with shared breadcrumbs.
  • Preserved readable navigation behavior on smaller screens.

Terminal-first CLI foundation

The first CLI workflow established local authentication, project sync, background triggers, and guided recovery.

  • Added authenticated local and system-server communication.
  • Introduced project context synchronization and managed `AGENTS.md` blocks.
  • Added tests for configuration, authentication, sync, daemon, and update flows.