Munder Difflin v0.3.2

A local hive of Claude Code, Antigravity & Codex agents that run themselves — messaging,
routing, and remembering, coordinated by a GOD orchestrator you talk to. Local-first and open source.

→ munderdiffl.in — see it in action, then grab a build below

What's new in 0.3.2 — Realtime Michael: talk to the GOD orchestrator

Talk to Michael. The headline is Realtime Michael — a low-latency voice channel to the
GOD orchestrator, running alongside the async terminal floor. Press Talk, and Michael listens,
answers, and acts in real time.

• Talk to the GOD orchestrator by voice. A new low-latency realtime channel (OpenAI Realtime API
  over WebRTC) sits next to the async terminal. A Talk toggle — on Michael's card and in any
  fullscreen terminal — opens a mic session with echo-cancellation, semantic-VAD turn-taking +
  barge-in, and a device picker. Michael runs his own persona and answers in a natural voice, with an
  Off → Connecting → Listening → Responding → Working state machine live on his card.
• Reads the hive, acts behind echo-back confirm. He reads the floor (tasks, board, memory,
  agents, activity, cost) and — behind a spoken echo-back confirmation for anything destructive —
  creates and assigns work, dispatches agents, spawns and kills workers, and steers the floor. Every
  voice action is attributed to a distinct michael-voice actor that pings the GOD terminal, so a
  voice-driven dispatch is auditable; there are hard refusals for killing the GOD agent or targeting
  all agents at once.
• Voice read-layer over hive messages. Michael can now read message content, not just
  metadata: a read/brief-only get_messages tool surfaces a full message by id, one mailbox, or
  the latest across the floor — with all secret redaction done main-side so the voice layer
  only ever receives already-redacted bodies (no provider / Slack / GitHub / AWS / Google key, JWT,
  PEM block, or Bearer token can leak). Read-only — it adds no new write path.
• "Respond when done." Voice-dispatched work reports back on its own: a completion watcher
  detects when a dispatched task finishes and pushes the event into the live session so Michael
  speaks it unprompted; if the session is closed, completions queue to a desktop notification and a
  warm-start on reconnect.
• BYOK, main-only. Bring-your-own OpenAI key: the key is decrypted main-only, minted into
  short-lived ephemeral session tokens, and never reaches the renderer. A live session cost meter
  sits by the Talk toggle, with a hard spend cap and an idle auto-disconnect so a
  forgotten-open mic can't run up a bill.
• Slack hardening + maintenance. Proactive Slack posting is off by default (no sends without
  an explicit channel + thread), auto-compaction becomes a dedicated maintenance schedule
  decoupled from standups (so editing standups can't silently drop it), and each agent now carries
  queryable per-agent environment metadata with a working-directory validity guard.

Live verification note. The realtime voice loop is human-verified end-to-end on a real
OpenAI key — connect → mic → Michael answers via the read tools, and the full destructive path
(spoken echo-back confirm → spawn / kill / dispatch → worker appears on the floor → completion
spoken back) was exercised live. It requires your own OpenAI key with Realtime API access;
without one the Talk button stays visibly disabled with a "needs OpenAI key" cue. The new
voice-message read-layer's redaction battery is unit-tested in lockstep with the main process; its
end-to-end voice read is human-gated like all realtime work.

What's new in 0.3.1 — Three more engines: OpenCode · Crush · pi.dev

The floor gained three new coding CLIs, each usable as a worker and as Michael, with
bring-your-own keys + local LLMs: OpenCode (opencode) via a native-plugin bridge,
Crush (crush, Charmbracelet's Go TUI) via a per-agent proxy bridge, and pi.dev (pi) via a
hooks bridge. A new Settings → AI Engines panel collects per-provider API keys (stored
write-only, encrypted) and local base-URLs (Ollama / LM Studio / vLLM). Plus two reliability
fixes: the message router now survives system sleep (re-arms and drains the backlog on wake), and
Codex workers get full filesystem + auto-approval from spawn (parity with Claude).

Everything from v0.3.0 (selectable engines, integrations registry + loopback secret broker,
Slack-spawned ephemeral workers, Agent Gallery) and earlier — Free Flow voice dictation, the
enterprise Knowledge Graph, multi-window "floors", the rich message composer, agent session resume,
and drag-a-file path injection — is included.
See the CHANGELOG for full detail.

⤓ Downloads

Latest builds for every platform. The macOS build is universal — one DMG that runs on both
Apple Silicon and Intel.

🍎 macOS

🪟 Windows

🐧 Linux

📦 Source

Source code (zip) ·
Source code (tar.gz)

Verify your download: SHA256SUMS.txt — then shasum -a 256 -c SHA256SUMS.txt (macOS/Linux) or Get-FileHash (Windows).

The links above always point at the latest release (/releases/latest/download/...),
so this page stays correct across versions.

First launch

• macOS — the build is signed with a Developer ID (hardened runtime). If macOS
  still shows an "unidentified developer" warning on first open, right-click the app →
  Open → Open once. After that, the first time agents touch a folder you'll get a
  single macOS privacy prompt for Documents/Desktop/Downloads — allow it once and the
  grant sticks (it covers the claude agents the app spawns), because the grant is bound
  to the app's stable signature.
• Windows — not code-signed yet; SmartScreen may show "Windows protected your PC" →
  More info → Run anyway.
• Linux — make the AppImage executable: chmod +x Munder-Difflin-*.AppImage, then run it.

Requirements

• macOS 12+, Windows 10/11, or a modern Linux desktop
• Claude Code installed and on your PATH (and/or the Antigravity agy or OpenAI codex CLI for those providers)
• A Claude Code subscription (Munder Difflin drives your existing claude CLI — it doesn't replace it)
• For Realtime Michael (voice): your own OpenAI key with Realtime API access — without it the Talk button stays disabled

🛠 Build from source

git clone https://github.com/chaitanyagiri/munder-difflin.git
cd munder-difflin
npm install # rebuilds node-pty for Electron
npm run dev # launches the app with hot reload

Node 18+ and a C/C++ toolchain are required (Xcode CLT on macOS, Build Tools on Windows).
To produce installers yourself: npm run dist (current OS), or dist:mac / dist:win / dist:linux.

What's inside

• The simulation — every agent is a real claude (or agy / codex / local-provider) pseudo-terminal, visualized as an avatar on a watchable office floor (node-pty · xterm.js · Pixi.js).
• Talk to Michael — a realtime voice channel to the GOD orchestrator that reads the hive and acts behind spoken echo-back confirmation, BYOK and main-only.
• Selectable engines + per-hire capabilities — each hire (and Michael himself) runs on a pluggable engine, with its own consented skills + MCP catalog.
• MemPalace — a markdown-first, semantic memory layer the whole office shares; cross-session recall in ~12ms.
• GOD orchestrator + hive — one agent you talk to routes work to specialists and stays autonomous, escalating only critical items (spend, destructive ops, scope) to you natively, through human-in-the-loop prompts. It can also spawn an ephemeral worker straight from Slack and tear it down safely.
• Plugs into your setup — your subscription, settings, skills, and MCP servers, plus an integrations registry with a write-only secret broker; /remote-control reaches the whole floor from your phone.

Full notes in the CHANGELOG.

Links

Website ·
Repo ·
Issues ·
Contribute ·
Become a patron

MIT-licensed. An affectionate parody — not affiliated with NBC's The Office or Dunder Mifflin.

Munder Difflin v0.3.1

A local hive of Claude Code, Antigravity & Codex agents that run themselves — messaging,
routing, and remembering, coordinated by a GOD orchestrator you talk to. Local-first and open source.

→ munderdiffl.in — see it in action, then grab a build below

What's new in 0.3.1 — Three more engines: OpenCode · Crush · pi.dev

The floor gets three new coding CLIs, each usable as a worker and as Michael, with
bring-your-own keys + local LLMs:

• OpenCode (opencode, the TypeScript agent) — wired via a native plugin bridge
  (session.idle): no traffic interception, provider-agnostic, works with local models.
• Crush (crush, Charmbracelet's Go TUI) — a proxy bridge routes its LLM traffic through a
  per-agent config so a hookless CLI still reports status and drains mail.
• pi.dev (pi, the Pi Coding Agent) — a hooks bridge: a bundled extension maps Pi's
  pi.on(event) lifecycle onto the hive, and auto-approves tools only when the floor is in auto mode.

A new Settings → AI Engines panel collects per-provider API keys (stored write-only,
encrypted, never shown again) and local base-URLs (Ollama / LM Studio / vLLM) for these engines.

Heads-up: these engines are integrated and selectable as god, but live end-to-end
verification with real model calls is pending your BYOK keys / a local LLM — verify on-device.
Mail delivery doesn't wait on that: a new provider-agnostic PTY-quiescence idle fallback flips
any silent-but-busy agent back to idle, so the idle wake-nudge drains a god even if a bridge's
turn-end signal never fires.

Plus two reliability fixes: the message router now survives system sleep (it re-arms and drains
the backlog on wake, so god→worker and agent↔agent mail keeps flowing after the laptop's been
closed), and Codex workers get full filesystem + auto-approval from spawn (parity with Claude),
so a fresh Codex hive worker can do its protocol housekeeping without a permission prompt.

What's new in 0.3.0 — Selectable engines, integrations, and Slack-spawned workers

The biggest platform release yet: the floor stops being Claude-shaped. Every hire — and Michael
himself — becomes a pluggable engine, each with its own consented skills + MCP catalog. A new
integrations registry turns "connect a service" into a write-only, registry-driven Settings
flow. And Michael can now spawn an ephemeral worker straight from a Slack message, reply, and
tear it down safely.

• Selectable agent engines + per-hire capabilities. A new engine abstraction makes the runtime
  behind each agent pluggable — Claude Code, Antigravity, Codex, or a local provider (a
  claw/qwen backend proxy). Each hire carries its own manifest of allowed skills + MCP servers
  (default-deny over a shared catalog), with bundled skills shipped in the app and a consent
  UI that surfaces every skill/MCP a hire wants before it can use it. Even Michael's own
  engine is swappable, with an Onboarding engine picker and a change-engine flow.
• Integrations registry + loopback secret broker. A declarative integrations registry plus a
  loopback secret broker: secrets are write-only (set once, never read back into the
  renderer) and reached only through the broker. A registry-driven Settings UI renders each
  integration's config form from the spec, with a first wave of declarative templates.
• God-triggered ephemeral Slack worker loop. Michael spawns an isolated worker in response to a
  Slack request, the worker posts its reply back into the thread, and it's then torn down
  safely — with worktree GC, per-worker token caps, and a teardown gate that never
  auto-discards unintegrated work. Live workers show up in a new Workers tab.
• Temporal date-range skills + worker capability catalog. Date-range skills (today / yesterday /
  thisWeek / lastWeek / thisMonth / thisQuarter / thisYear / lastMonth / last7Days / last30Days ...)
  resolve a named window to concrete ISO dates, and each spawned worker can read a capability
  catalog of exactly which skills and brokered integrations it has.
• Provider / Hive picker + Agent Gallery. A visual HivePicker with real provider logos lands
  in onboarding and add-agent, The Hiring Fair is rebranded to the Agent Gallery with six
  off-the-shelf hires, onboarding is now feature-aware (with a permissions & reliability step),
  and the engine-CLI installer runs visibly when a binary is missing.
• Wake-reliability hardening. Wedged terminals are auto-revived on wake, and missed
  schedules are caught up when the machine wakes instead of being silently skipped.
• Security: the integrations:test probe path is confined so it can't be turned into a
  secret-exfiltration or SSRF primitive.

Everything from v0.2.8 (shareable hires + the gallery) and earlier — Free Flow voice dictation,
the enterprise Knowledge Graph, multi-window "floors", the rich message composer, agent session
resume, and drag-a-file path injection — is included.
See the CHANGELOG for full detail.

⤓ Downloads

Latest builds for every platform. The macOS build is universal — one DMG that runs on both
Apple Silicon and Intel.

🍎 macOS

🪟 Windows

🐧 Linux

📦 Source

Source code (zip) ·
Source code (tar.gz)

Verify your download: SHA256SUMS.txt — then shasum -a 256 -c SHA256SUMS.txt (macOS/Linux) or Get-FileHash (Windows).

The links above always point at the latest release (/releases/latest/download/...),
so this page stays correct across versions.

First launch

• macOS — the build is signed with a Developer ID (hardened runtime). If macOS
  still shows an "unidentified developer" warning on first open, right-click the app →
  Open → Open once. After that, the first time agents touch a folder you'll get a
  single macOS privacy prompt for Documents/Desktop/Downloads — allow it once and the
  grant sticks (it covers the claude agents the app spawns), because the grant is bound
  to the app's stable signature.
• Windows — not code-signed yet; SmartScreen may show "Windows protected your PC" →
  More info → Run anyway.
• Linux — make the AppImage executable: chmod +x Munder-Difflin-*.AppImage, then run it.

Requirements

• macOS 12+, Windows 10/11, or a modern Linux desktop
• Claude Code installed and on your PATH (and/or the Antigravity agy or OpenAI codex CLI for those providers)
• A Claude Code subscription (Munder Difflin drives your existing claude CLI — it doesn't replace it)

🛠 Build from source

git clone https://github.com/chaitanyagiri/munder-difflin.git
cd munder-difflin
npm install # rebuilds node-pty for Electron
npm run dev # launches the app with hot reload

Node 18+ and a C/C++ toolchain are required (Xcode CLT on macOS, Build Tools on Windows).
To produce installers yourself: npm run dist (current OS), or dist:mac / dist:win / dist:linux.

What's inside

• The simulation — every agent is a real claude (or agy / codex / local-provider) pseudo-terminal, visualized as an avatar on a watchable office floor (node-pty · xterm.js · Pixi.js).
• Selectable engines + per-hire capabilities — each hire (and Michael himself) runs on a pluggable engine, with its own consented skills + MCP catalog.
• MemPalace — a markdown-first, semantic memory layer the whole office shares; cross-session recall in ~12ms.
• GOD orchestrator + hive — one agent you talk to routes work to specialists and stays autonomous, escalating only critical items (spend, destructive ops, scope) to you natively, through human-in-the-loop prompts. It can also spawn an ephemeral worker straight from Slack and tear it down safely.
• Plugs into your setup — your subscription, settings, skills, and MCP servers, plus an integrations registry with a write-only secret broker; /remote-control reaches the whole floor from your phone.

Full notes in the CHANGELOG.

Links

Website ·
Repo ·
Issues ·
Contribute ·
Become a patron

MIT-licensed. An affectionate parody — not affiliated with NBC's The Office or Dunder Mifflin.

Munder Difflin v0.3.0

A local hive of Claude Code, Antigravity & Codex agents that run themselves — messaging,
routing, and remembering, coordinated by a GOD orchestrator you talk to. Local-first and open source.

→ munderdiffl.in — see it in action, then grab a build below

What's new in 0.3.0 — Selectable engines, integrations, and Slack-spawned workers

The biggest platform release yet: the floor stops being Claude-shaped. Every hire — and Michael
himself — becomes a pluggable engine, each with its own consented skills + MCP catalog. A new
integrations registry turns "connect a service" into a write-only, registry-driven Settings
flow. And Michael can now spawn an ephemeral worker straight from a Slack message, reply, and
tear it down safely.

• Selectable agent engines + per-hire capabilities. A new engine abstraction makes the runtime
  behind each agent pluggable — Claude Code, Antigravity, Codex, or a local provider (a
  claw/qwen backend proxy). Each hire carries its own manifest of allowed skills + MCP servers
  (default-deny over a shared catalog), with bundled skills shipped in the app and a consent
  UI that surfaces every skill/MCP a hire wants before it can use it. Even Michael's own
  engine is swappable, with an Onboarding engine picker and a change-engine flow.
• Integrations registry + loopback secret broker. A declarative integrations registry plus a
  loopback secret broker: secrets are write-only (set once, never read back into the
  renderer) and reached only through the broker. A registry-driven Settings UI renders each
  integration's config form from the spec, with a first wave of declarative templates.
• God-triggered ephemeral Slack worker loop. Michael spawns an isolated worker in response to a
  Slack request, the worker posts its reply back into the thread, and it's then torn down
  safely — with worktree GC, per-worker token caps, and a teardown gate that never
  auto-discards unintegrated work. Live workers show up in a new Workers tab.
• Temporal date-range skills + worker capability catalog. Date-range skills (today / yesterday /
  thisWeek / lastWeek / thisMonth / thisQuarter / thisYear / lastMonth / last7Days / last30Days ...)
  resolve a named window to concrete ISO dates, and each spawned worker can read a capability
  catalog of exactly which skills and brokered integrations it has.
• Provider / Hive picker + Agent Gallery. A visual HivePicker with real provider logos lands
  in onboarding and add-agent, The Hiring Fair is rebranded to the Agent Gallery with six
  off-the-shelf hires, onboarding is now feature-aware (with a permissions & reliability step),
  and the engine-CLI installer runs visibly when a binary is missing.
• Wake-reliability hardening. Wedged terminals are auto-revived on wake, and missed
  schedules are caught up when the machine wakes instead of being silently skipped.
• Security: the integrations:test probe path is confined so it can't be turned into a
  secret-exfiltration or SSRF primitive.

Everything from v0.2.8 (shareable hires + the gallery) and earlier — Free Flow voice dictation,
the enterprise Knowledge Graph, multi-window "floors", the rich message composer, agent session
resume, and drag-a-file path injection — is included.
See the CHANGELOG for full detail.

⤓ Downloads

Latest builds for every platform. The macOS build is universal — one DMG that runs on both
Apple Silicon and Intel.

🍎 macOS

🪟 Windows

🐧 Linux

📦 Source

Source code (zip) ·
Source code (tar.gz)

Verify your download: SHA256SUMS.txt — then shasum -a 256 -c SHA256SUMS.txt (macOS/Linux) or Get-FileHash (Windows).

The links above always point at the latest release (/releases/latest/download/...),
so this page stays correct across versions.

First launch

• macOS — the build is signed with a Developer ID (hardened runtime). If macOS
  still shows an "unidentified developer" warning on first open, right-click the app →
  Open → Open once. After that, the first time agents touch a folder you'll get a
  single macOS privacy prompt for Documents/Desktop/Downloads — allow it once and the
  grant sticks (it covers the claude agents the app spawns), because the grant is bound
  to the app's stable signature.
• Windows — not code-signed yet; SmartScreen may show "Windows protected your PC" →
  More info → Run anyway.
• Linux — make the AppImage executable: chmod +x Munder-Difflin-*.AppImage, then run it.

Requirements

• macOS 12+, Windows 10/11, or a modern Linux desktop
• Claude Code installed and on your PATH (and/or the Antigravity agy or OpenAI codex CLI for those providers)
• A Claude Code subscription (Munder Difflin drives your existing claude CLI — it doesn't replace it)

🛠 Build from source

git clone https://github.com/chaitanyagiri/munder-difflin.git
cd munder-difflin
npm install # rebuilds node-pty for Electron
npm run dev # launches the app with hot reload

Node 18+ and a C/C++ toolchain are required (Xcode CLT on macOS, Build Tools on Windows).
To produce installers yourself: npm run dist (current OS), or dist:mac / dist:win / dist:linux.

What's inside

• The simulation — every agent is a real claude (or agy / codex / local-provider) pseudo-terminal, visualized as an avatar on a watchable office floor (node-pty · xterm.js · Pixi.js).
• Selectable engines + per-hire capabilities — each hire (and Michael himself) runs on a pluggable engine, with its own consented skills + MCP catalog.
• MemPalace — a markdown-first, semantic memory layer the whole office shares; cross-session recall in ~12ms.
• GOD orchestrator + hive — one agent you talk to routes work to specialists and stays autonomous, escalating only critical items (spend, destructive ops, scope) to you natively, through human-in-the-loop prompts. It can also spawn an ephemeral worker straight from Slack and tear it down safely.
• Plugs into your setup — your subscription, settings, skills, and MCP servers, plus an integrations registry with a write-only secret broker; /remote-control reaches the whole floor from your phone.

Full notes in the CHANGELOG.

Links

Website ·
Repo ·
Issues ·
Contribute ·
Become a patron

MIT-licensed. An affectionate parody — not affiliated with NBC's The Office or Dunder Mifflin.

Munder Difflin v0.2.8

A local hive of Claude Code, Antigravity & Codex agents that run themselves — messaging,
routing, and remembering, coordinated by a GOD orchestrator you talk to. Local-first and open source.

→ munderdiffl.in — see it in action, then grab a build below

What's new in 0.2.8 — Shareable hires

Ready-made agent roles you can share and hire in one click. A portable hire manifest
describes a role-configured agent — name, sprite, provider, model, flags, goal, capabilities,
token budget — so a role can be shared as a file or hosted in a gallery, imported into anyone's
office, reviewed, and spawned with a single human click.

• Shareable hires — one-click agent roles (#70, #71). Import a role two ways: a
  munderdifflin://hire?src=<https-manifest-url> deep link (the app fetches and validates the
  manifest, then opens the Add-Agent modal pre-filled) or an import hire... button that reads a
  local manifest file. Either way you review every field — an "imported" banner makes it explicit —
  and you click spawn. Import never spawns anything on its own.
• The Hiring Fair — a community gallery at munderdiffl.in/hires.
  A static, build-step-free gallery of ready-made roles from the cast (Pam writes docs, Dwight
  enforces QA, Jim reviews PRs, Creed audits security, Angela audits the office's own token spend,
  Stanley does the migrations nobody wants), each with a Claude Code / Antigravity / Codex toggle
  and function filters that match the landing page.
• An untrusted-input security model, hardened. A manifest is treated as hostile input end to
  end: no auto-spawn and no executable field (the binary always comes from your local provider
  preset; provider: "custom" is rejected); a default-deny allowlist for embedded CLI flags
  (only a known-harmless set passes — nothing that touches system prompts or settings); model
  constrained to a safe charset plus a command-line quoter that neutralizes shell metacharacters on
  every spawn path; and a bounded, https-only fetch (manual-redirect with per-hop re-validation to
  kill SSRF, a streamed 64 KB byte cap, a 10s timeout). One dependency-free validator is shared by
  the app, the renderer, the gallery, and a JSON schema.

Everything from v0.2.7 (Free Flow voice dictation, the enterprise Knowledge Graph, multi-window
"floors", the rich message composer, agent session resume with Restart & Continue, and drag-a-file
path injection) and earlier is included.
See the CHANGELOG for full detail.

⤓ Downloads

Latest builds for every platform. The macOS build is universal — one DMG that runs on both
Apple Silicon and Intel.

🍎 macOS

🪟 Windows

🐧 Linux

📦 Source

Source code (zip) ·
Source code (tar.gz)

Verify your download: SHA256SUMS.txt — then shasum -a 256 -c SHA256SUMS.txt (macOS/Linux) or Get-FileHash (Windows).

The links above always point at the latest release (/releases/latest/download/...),
so this page stays correct across versions.

First launch

• macOS — the build is signed with a Developer ID (hardened runtime). If macOS
  still shows an "unidentified developer" warning on first open, right-click the app →
  Open → Open once. After that, the first time agents touch a folder you'll get a
  single macOS privacy prompt for Documents/Desktop/Downloads — allow it once and the
  grant sticks (it covers the claude agents the app spawns), because the grant is bound
  to the app's stable signature.
• Windows — not code-signed yet; SmartScreen may show "Windows protected your PC" →
  More info → Run anyway.
• Linux — make the AppImage executable: chmod +x Munder-Difflin-*.AppImage, then run it.

Requirements

• macOS 12+, Windows 10/11, or a modern Linux desktop
• Claude Code installed and on your PATH (and/or the Antigravity agy or OpenAI codex CLI for those providers)
• A Claude Code subscription (Munder Difflin drives your existing claude CLI — it doesn't replace it)

🛠 Build from source

git clone https://github.com/chaitanyagiri/munder-difflin.git
cd munder-difflin
npm install # rebuilds node-pty for Electron
npm run dev # launches the app with hot reload

Node 18+ and a C/C++ toolchain are required (Xcode CLT on macOS, Build Tools on Windows).
To produce installers yourself: npm run dist (current OS), or dist:mac / dist:win / dist:linux.

What's inside

• The simulation — every agent is a real claude (or agy / codex) pseudo-terminal, visualized as an avatar on a watchable office floor (node-pty · xterm.js · Pixi.js).
• MemPalace — a markdown-first, semantic memory layer the whole office shares; cross-session recall in ~12ms.
• GOD orchestrator + hive — one agent you talk to routes work to specialists and stays autonomous, escalating only critical items (spend, destructive ops, scope) to you natively, through Claude Code's human-in-the-loop prompts.
• Plugs into your setup — your subscription, settings, skills, and MCP servers; /remote-control reaches the whole floor from your phone.

Full notes in the CHANGELOG.

Links

Website ·
Repo ·
Issues ·
Contribute ·
Become a patron

MIT-licensed. An affectionate parody — not affiliated with NBC's The Office or Dunder Mifflin.

Munder Difflin v0.2.7

A local hive of Claude Code, Antigravity & Codex agents that run themselves — messaging,
routing, and remembering, coordinated by a GOD orchestrator you talk to. Local-first and open source.

→ munderdiffl.in — see it in action, then grab a build below

What's new in 0.2.7 — Voice, memory, floors & polish

A feature release: talk to your agents with your voice, an enterprise Knowledge Graph,
multi-window "floors", a richer message composer with file/image attachments, agent
session resume (with Restart & Continue), drag-a-file-onto-the-terminal path injection,
the groundwork for TV-show office themes, and a redesigned landing page.

• Free Flow voice dictation → message queue (on by default). Hold Option to talk; your
  speech is transcribed by Groq Whisper (whisper-large-v3-turbo) straight into the message
  composer. Gated on a Groq API key, encrypted at rest.
• Enterprise Knowledge Graph v1 (on by default). A multimodal store of your own
  documents / policies / business context, with a CLI agents can query for ranked passages
  and full documents — so company-specific facts come from your data instead of guesses.
• Multi-window "floors" (on by default). Open isolated office windows, each with its
  own set of agents and per-PTY routing.
• Rich message composer — file & image attachments. Attach files/images (via a "files"
  button or paste-to-attach), shown as removable chips above a taller, resizable input;
  you can send with attachments alone.
• Restore agent sessions across restart — with Restart & Continue. Agents reattach their
  prior Claude conversation after an app restart: Michael resumes his session, and a restored
  worker re-enters its existing worktree instead of re-isolating, so uncommitted work isn't
  lost. A per-agent Restart & Continue button respawns a session on the same model and
  redraws a garbled terminal, and Add Agent gains a "resume session" field to reattach by id.
• Drag a file onto a terminal to drop in its path. Drag any file (an image, etc.) onto an
  agent's terminal and its absolute, shell-escaped path is typed into the session — so Claude
  Code detects the image and attaches it, exactly like a native terminal's drag-and-drop.
• TV-show office themes — infrastructure (behind a flag, off by default). A theme
  abstraction, a Settings theme picker with a destructive switch-flow, and the first themed
  map (Brooklyn-99 precinct).
• Live GitHub star count next to the Star buttons on the landing page.
• Composer redesign. A full-width input above a single tidy control bar (Delegate ·
  Attach · voice · Send).
• Landing page redesign. Bento layout for the #features and #why sections with new SVG
  illustrations.
• Fullscreen tab bar no longer clipped.
• Slack double-ack fixed. A single Slack message delivered as both app_mention and
  message.* is now de-duplicated by channel:ts.

Everything from v0.2.6 (terminal boot-fit, dev sidecar, wall clock, Slack host-pin) and
earlier is included.
See the CHANGELOG for full detail.

⤓ Downloads

Latest builds for every platform. The macOS build is universal — one DMG that runs on both
Apple Silicon and Intel.

🍎 macOS

🪟 Windows

🐧 Linux

📦 Source

Source code (zip) ·
Source code (tar.gz)

Verify your download: SHA256SUMS.txt — then shasum -a 256 -c SHA256SUMS.txt (macOS/Linux) or Get-FileHash (Windows).

The links above always point at the latest release (/releases/latest/download/...),
so this page stays correct across versions.

First launch

• macOS — the build is signed with a Developer ID (hardened runtime). If macOS
  still shows an "unidentified developer" warning on first open, right-click the app →
  Open → Open once. After that, the first time agents touch a folder you'll get a
  single macOS privacy prompt for Documents/Desktop/Downloads — allow it once and the
  grant sticks (it covers the claude agents the app spawns), because the grant is bound
  to the app's stable signature.
• Windows — not code-signed yet; SmartScreen may show "Windows protected your PC" →
  More info → Run anyway.
• Linux — make the AppImage executable: chmod +x Munder-Difflin-*.AppImage, then run it.

Requirements

• macOS 12+, Windows 10/11, or a modern Linux desktop
• Claude Code installed and on your PATH (and/or the Antigravity agy or OpenAI codex CLI for those providers)
• A Claude Code subscription (Munder Difflin drives your existing claude CLI — it doesn't replace it)

🛠 Build from source

git clone https://github.com/chaitanyagiri/munder-difflin.git
cd munder-difflin
npm install # rebuilds node-pty for Electron
npm run dev # launches the app with hot reload

Node 18+ and a C/C++ toolchain are required (Xcode CLT on macOS, Build Tools on Windows).
To produce installers yourself: npm run dist (current OS), or dist:mac / dist:win / dist:linux.

What's inside

• The simulation — every agent is a real claude (or agy / codex) pseudo-terminal, visualized as an avatar on a watchable office floor (node-pty · xterm.js · Pixi.js).
• MemPalace — a markdown-first, semantic memory layer the whole office shares; cross-session recall in ~12ms.
• GOD orchestrator + hive — one agent you talk to routes work to specialists and stays autonomous, escalating only critical items (spend, destructive ops, scope) to you natively, through Claude Code's human-in-the-loop prompts.
• Plugs into your setup — your subscription, settings, skills, and MCP servers; /remote-control reaches the whole floor from your phone.

Full notes in the CHANGELOG.

Links

Website ·
Repo ·
Issues ·
Contribute ·
Become a patron

MIT-licensed. An affectionate parody — not affiliated with NBC's The Office or Dunder Mifflin.

Munder Difflin v0.2.6

A local hive of Claude Code, Antigravity & Codex agents that run themselves — messaging,
routing, and remembering, coordinated by a GOD orchestrator you talk to. Local-first and open source.

→ munderdiffl.in — see it in action, then grab a build below

What's new in 0.2.6 — Polish & reliability

A focused patch that fixes the first thing you see and the first thing that can break:

• The agent terminal renders correctly the moment it opens. It used to fit before its
  pane had a real size — and cache the character-cell metrics from before the VT323 font
  loaded — so the welcome banner came up oversized and clipped until you manually resized.
  The view now waits for a real size, re-measures and re-rasters once the font is ready, and
  lets a ResizeObserver drive the first fit. It just fits.
• npm run dev no longer crashes on a fresh clone (#67). The boot-time Slack-trigger
  .cjs sidecar is now copied by a vite writeBundle plugin, so both dev and build
  emit it from one place (the packaged-build fix in v0.2.5 didn't cover the dev path).
• Windows: node-pty ConPTY crash guarded (#65). The main process no longer dies when
  ConPTY fails to attach a console — a companion hardening to the Antigravity provider work.
• The wall clock is interactive (#64). The office clock shows the real time, and clicking
  it opens the closing-time (graceful shutdown) flow.
• ASK ME reads in the memory font (#63). The ASK ME board now uses VT323 to match the
  rest of the memory surfaces, instead of the chunky Pixelify Sans.
• Security — Slack download host-pinned. The Slack bot token is only ever sent to
  *.slack.com, a defense-in-depth guard added before the Authorization header is attached.

Everything from v0.2.5 (the packaging crash fix, autonomous Slack-request protocol, the
delegate toggle) and earlier is included.
See the CHANGELOG for full detail.

⤓ Downloads

Latest builds for every platform. The macOS build is universal — one DMG that runs on both
Apple Silicon and Intel.

🍎 macOS

🪟 Windows

🐧 Linux

📦 Source

Source code (zip) ·
Source code (tar.gz)

Verify your download: SHA256SUMS.txt — then shasum -a 256 -c SHA256SUMS.txt (macOS/Linux) or Get-FileHash (Windows).

The links above always point at the latest release (/releases/latest/download/...),
so this page stays correct across versions.

First launch

• macOS — the build is signed with a Developer ID (hardened runtime). If macOS
  still shows an "unidentified developer" warning on first open, right-click the app →
  Open → Open once. After that, the first time agents touch a folder you'll get a
  single macOS privacy prompt for Documents/Desktop/Downloads — allow it once and the
  grant sticks (it covers the claude agents the app spawns), because the grant is bound
  to the app's stable signature.
• Windows — not code-signed yet; SmartScreen may show "Windows protected your PC" →
  More info → Run anyway.
• Linux — make the AppImage executable: chmod +x Munder-Difflin-*.AppImage, then run it.

Requirements

• macOS 12+, Windows 10/11, or a modern Linux desktop
• Claude Code installed and on your PATH (and/or the Antigravity agy or OpenAI codex CLI for those providers)
• A Claude Code subscription (Munder Difflin drives your existing claude CLI — it doesn't replace it)

🛠 Build from source

git clone https://github.com/chaitanyagiri/munder-difflin.git
cd munder-difflin
npm install # rebuilds node-pty for Electron
npm run dev # launches the app with hot reload

Node 18+ and a C/C++ toolchain are required (Xcode CLT on macOS, Build Tools on Windows).
To produce installers yourself: npm run dist (current OS), or dist:mac / dist:win / dist:linux.

What's inside

• The simulation — every agent is a real claude (or agy / codex) pseudo-terminal, visualized as an avatar on a watchable office floor (node-pty · xterm.js · Pixi.js).
• MemPalace — a markdown-first, semantic memory layer the whole office shares; cross-session recall in ~12ms.
• GOD orchestrator + hive — one agent you talk to routes work to specialists and stays autonomous, escalating only critical items (spend, destructive ops, scope) to you natively, through Claude Code's human-in-the-loop prompts.
• Plugs into your setup — your subscription, settings, skills, and MCP servers; /remote-control reaches the whole floor from your phone.

Full notes in the CHANGELOG.

Links

Website ·
Repo ·
Issues ·
Contribute ·
Become a patron

MIT-licensed. An affectionate parody — not affiliated with NBC's The Office or Dunder Mifflin.

Munder Difflin v0.2.5

A local hive of Claude Code, Antigravity & Codex agents that run themselves — messaging,
routing, and remembering, coordinated by a GOD orchestrator you talk to. Local-first and open source.

→ munderdiffl.in — see it in action, then grab a build below

What's new in 0.2.5 — Trigger your hive from Slack

• Slack triggers — @-mention the bot (or reply in an activated thread) to dispatch work to the
  hive; the autonomous request protocol routes it, runs it, and replies back in-thread. Image/file
  attachments are ingested too.
• Delegate toggle — a switch on the composer lets the god agent fan work out to the hive, or
  handle it solo.
• Cleaner Slack replies — professionalized, properly formatted outbound messages.

Fixes

• Crash-on-launch fixed — packaged builds now bundle the Slack trigger helper
  (slack-trigger.cjs); v0.2.5 installers were rebuilt with this patch. (#66)
• Windows: correct command-line quoting for non-.exe targets. (#55)
• Lifecycle: skip assistant/orphaned shells in the breaker + archive them on boot. (#57, #58)
• Cost ledger: only record live session samples. (#56)

Grab a build below — verify against SHA256SUMS.txt.

Munder Difflin v0.2.4

A local hive of Claude Code, Antigravity & Codex agents that run themselves — messaging,
routing, and remembering, coordinated by a GOD orchestrator you talk to. Local-first and open source.

→ munderdiffl.in — see it in action, then grab a build below

What's new in 0.2.4 — Codex gets full hive parity

Three CLIs, one hive. v0.2.4 promotes Codex to a first-class, hive-aware participant
and polishes the orchestrator's first impression:

• Codex lifecycle-hook bridge — full hive parity — Codex now joins the floor as a fully hive-aware provider. A native lifecycle-hook bridge maps Codex's events into the existing hook pipeline (live status + inbox-drain + outbox routing), discovered through Codex's config.toml [hooks] surface, with agy/codex dispatch unified behind one path. Verified running hive-aware in bypass-permissions mode. (#47, #54)
• God opens to its Terminal by default — selecting the orchestrator no longer reopens a stale "ASK ME" tab; the command center mounts to its terminal, with ASK ME one click away.
• Multi-provider landing & launch — the site now presents Claude Code, Antigravity (Gemini), and OpenAI Codex as equal first-class providers (one-line mobile badge), with a fresh v0.2.4 launch post + technical walkthrough.
• Resilience fixes — the heartbeat re-engages the god the moment actionable mail lands (not only on a quiet floor), and the Slack done-summary no longer retries forever on a terminal error (e.g. a bot token missing chat:write) — it records + logs once instead of flooding the console.

Everything from v0.2.3 (first-class Antigravity, Codex inbox support, Schedules tab,
terminal work-orders, tunnelmole ingress) and earlier is included.
See the CHANGELOG for full detail.

⤓ Downloads

Latest builds for every platform. The macOS build is universal — one DMG that runs on both
Apple Silicon and Intel.

🍎 macOS

🪟 Windows

🐧 Linux

📦 Source

Source code (zip) ·
Source code (tar.gz)

Verify your download: SHA256SUMS.txt — then shasum -a 256 -c SHA256SUMS.txt (macOS/Linux) or Get-FileHash (Windows).

The links above always point at the latest release (/releases/latest/download/...),
so this page stays correct across versions.

First launch

• macOS — the build is signed with a Developer ID (hardened runtime). If macOS
  still shows an "unidentified developer" warning on first open, right-click the app →
  Open → Open once. After that, the first time agents touch a folder you'll get a
  single macOS privacy prompt for Documents/Desktop/Downloads — allow it once and the
  grant sticks (it covers the claude agents the app spawns), because the grant is bound
  to the app's stable signature.
• Windows — not code-signed yet; SmartScreen may show "Windows protected your PC" →
  More info → Run anyway.
• Linux — make the AppImage executable: chmod +x Munder-Difflin-*.AppImage, then run it.

Requirements

• macOS 12+, Windows 10/11, or a modern Linux desktop
• Claude Code installed and on your PATH (and/or the Antigravity agy or OpenAI codex CLI for those providers)
• A Claude Code subscription (Munder Difflin drives your existing claude CLI — it doesn't replace it)

🛠 Build from source

git clone https://github.com/chaitanyagiri/munder-difflin.git
cd munder-difflin
npm install # rebuilds node-pty for Electron
npm run dev # launches the app with hot reload

Node 18+ and a C/C++ toolchain are required (Xcode CLT on macOS, Build Tools on Windows).
To produce installers yourself: npm run dist (current OS), or dist:mac / dist:win / dist:linux.

What's inside

• The simulation — every agent is a real claude (or agy / codex) pseudo-terminal, visualized as an avatar on a watchable office floor (node-pty · xterm.js · Pixi.js).
• MemPalace — a markdown-first, semantic memory layer the whole office shares; cross-session recall in ~12ms.
• GOD orchestrator + hive — one agent you talk to routes work to specialists and stays autonomous, escalating only critical items (spend, destructive ops, scope) to you natively, through Claude Code's human-in-the-loop prompts.
• Plugs into your setup — your subscription, settings, skills, and MCP servers; /remote-control reaches the whole floor from your phone.

Full notes in the CHANGELOG.

Links

Website ·
Repo ·
Issues ·
Contribute ·
Become a patron

MIT-licensed. An affectionate parody — not affiliated with NBC's The Office or Dunder Mifflin.

Munder Difflin v0.2.3

A local hive of Claude Code agents that run themselves — messaging, routing, and
remembering, coordinated by a GOD orchestrator you talk to. Local-first and open source.

→ munderdiffl.in — see it in action, then grab a build below

What's new in 0.2.3 — multi-provider

The floor is no longer Claude-only. Antigravity (Gemini) and Codex workers become
first-class hive participants, schedules get their own tab, and the Slack / webhook
ingress moves off the flaky public tunnel:

• First-class Antigravity (Gemini · agy) provider — run an Antigravity worker as a full hive participant. Since agy has no Claude-style hooks, the hive identity + protocol ride in as the session's initial prompt, and a native agy-hook bridge maps Antigravity's lifecycle events into the existing pipeline, so a Gemini worker gets the same live status + inbox-drain as Claude — on the subscription, no API key. (#54)
• Codex workers follow the protocol and message back — Codex spawned without the hive protocol or any hook, so it never read its inbox or wrote its outbox. Codex is now an inbox-capable provider: the protocol is injected as its initial prompt, its outbox is drained by the router, and inbox mail reaches it via the idle inbox-wake nudge. Codex and Antigravity coexist in the provider union. (#47, #54)
• Schedules get their own Command-Center tab — recurring auto-dispatched missions (and the adaptive heartbeat) move out of an inline section into a dedicated tab, with a boss-room calendar shortcut. (#50)
• Terminal work-order handoff for hookless providers — a provider with no inbox-drain path now receives hive mail as a WORK ORDER FROM HIVE typed into its terminal, falling back to a god-bounce only if the renderer is unavailable. (#53)
• Slack + webhook public URL no longer silently breaks — the ingress used loca.lt, which now serves a browser interstitial that fails Slack's URL verification and breaks saved webhook URLs. Both now use tunnelmole (MIT; POSTs pass straight through), and a failed tunnel surfaces a real error instead of a silent "started."

Everything from v0.2.0 (observability, control, the rebuilt Command Center, persistence),
v0.2.1 (gentler scheduling), and v0.2.2 (community polish) is included.
See the CHANGELOG for full detail.

⤓ Downloads

Latest builds for every platform. The macOS build is universal — one DMG that runs on both
Apple Silicon and Intel.

🍎 macOS

🪟 Windows

🐧 Linux

📦 Source

Source code (zip) ·
Source code (tar.gz)

Verify your download: SHA256SUMS.txt — then shasum -a 256 -c SHA256SUMS.txt (macOS/Linux) or Get-FileHash (Windows).

The links above always point at the latest release (/releases/latest/download/...),
so this page stays correct across versions.

First launch

• macOS — the build is signed with a Developer ID (hardened runtime). If macOS
  still shows an "unidentified developer" warning on first open, right-click the app →
  Open → Open once. After that, the first time agents touch a folder you'll get a
  single macOS privacy prompt for Documents/Desktop/Downloads — allow it once and the
  grant sticks (it covers the claude agents the app spawns), because the grant is bound
  to the app's stable signature.
• Windows — not code-signed yet; SmartScreen may show "Windows protected your PC" →
  More info → Run anyway.
• Linux — make the AppImage executable: chmod +x Munder-Difflin-*.AppImage, then run it.

Requirements

• macOS 12+, Windows 10/11, or a modern Linux desktop
• Claude Code installed and on your PATH (and/or the Antigravity agy or OpenAI codex CLI for those providers)
• A Claude Code subscription (Munder Difflin drives your existing claude CLI — it doesn't replace it)

🛠 Build from source

git clone https://github.com/chaitanyagiri/munder-difflin.git
cd munder-difflin
npm install # rebuilds node-pty for Electron
npm run dev # launches the app with hot reload

Node 18+ and a C/C++ toolchain are required (Xcode CLT on macOS, Build Tools on Windows).
To produce installers yourself: npm run dist (current OS), or dist:mac / dist:win / dist:linux.

What's inside

• The simulation — every agent is a real claude (or agy / codex) pseudo-terminal, visualized as an avatar on a watchable office floor (node-pty · xterm.js · Pixi.js).
• MemPalace — a markdown-first, semantic memory layer the whole office shares; cross-session recall in ~12ms.
• GOD orchestrator + hive — one agent you talk to routes work to specialists and stays autonomous, escalating only critical items (spend, destructive ops, scope) to you natively, through Claude Code's human-in-the-loop prompts.
• Plugs into your setup — your subscription, settings, skills, and MCP servers; /remote-control reaches the whole floor from your phone.

Full notes in the CHANGELOG.

Links

Website ·
Repo ·
Issues ·
Contribute ·
Become a patron

MIT-licensed. An affectionate parody — not affiliated with NBC's The Office or Dunder Mifflin.

Munder Difflin v0.2.2

A local hive of Claude Code agents that run themselves — messaging, routing, and
remembering, coordinated by a GOD orchestrator you talk to. Local-first and open source.

→ munderdiffl.in — see it in action, then grab a build below

What's new in 0.2.2 — community polish

A polish release that's almost entirely the work of @Gulum — a live context-window
gauge on every agent card, sharper terminals, correct Windows metering, and dispatch that
always routes through the god:

• Live context-window gauge on each agent card — a Claude Code statusLine pushes the session's exact tokens and real window size after every response, so each card shows a precise live gauge (drawn from Claude Code itself, not a transcript estimate), and it zeroes the instant you send /clear. (#12)
• Dedicated context-window row on the monitor tab — the cumulative budget bar was being misread as a context gauge, so a separate ctx row now shows the real context window alongside it. (#46)
• Per-session terminal theme toggle + Unicode 11 emoji widths — switch a terminal's Claude theme independently, and wide emoji stop nudging the cursor out of alignment. (#26)
• All human dispatch flows through the god — every Command Center dispatch mails the god instead of a worker's inbox; the worker picker becomes a suggested owner, so nothing skips the orchestrator. (#45)
• Windows usage meter no longer reads 0/0 — the transcript directory is now encoded the way Claude Code encodes it on Windows (every non-alphanumeric char, drive colon included), so tokens and cost read correctly. (#34)
• Send-only assistant mail no longer black-holes — mail aimed at the send-only prep assistant is bounced to the god instead of vanishing into an unread inbox. (#33)
• Boot banner no longer stacks in scrollback — redundant PTY resizes are skipped, so the banner stops re-stacking. (#8)
• Visible text-select cursor on the cream theme — the hovering I-beam is inked with a halo so it stays visible over the light terminal. (#39)

Everything from v0.2.0 (observability, control, the rebuilt Command Center, persistence)
and v0.2.1 (gentler scheduling) is included.
See the CHANGELOG for full detail.

⤓ Downloads

Latest builds for every platform. The macOS build is universal — one DMG that runs on both
Apple Silicon and Intel.

🍎 macOS

🪟 Windows

🐧 Linux

📦 Source

Source code (zip) ·
Source code (tar.gz)

Verify your download: SHA256SUMS.txt — then shasum -a 256 -c SHA256SUMS.txt (macOS/Linux) or Get-FileHash (Windows).

The links above always point at the latest release (/releases/latest/download/...),
so this page stays correct across versions.

First launch

• macOS — the build is signed with a Developer ID (hardened runtime). If macOS
  still shows an "unidentified developer" warning on first open, right-click the app →
  Open → Open once. After that, the first time agents touch a folder you'll get a
  single macOS privacy prompt for Documents/Desktop/Downloads — allow it once and the
  grant sticks (it covers the claude agents the app spawns), because the grant is bound
  to the app's stable signature.
• Windows — not code-signed yet; SmartScreen may show "Windows protected your PC" →
  More info → Run anyway.
• Linux — make the AppImage executable: chmod +x Munder-Difflin-*.AppImage, then run it.

Requirements

• macOS 12+, Windows 10/11, or a modern Linux desktop
• Claude Code installed and on your PATH
• A Claude Code subscription (Munder Difflin drives your existing claude CLI — it doesn't replace it)

🛠 Build from source

git clone https://github.com/chaitanyagiri/munder-difflin.git
cd munder-difflin
npm install # rebuilds node-pty for Electron
npm run dev # launches the app with hot reload

Node 18+ and a C/C++ toolchain are required (Xcode CLT on macOS, Build Tools on Windows).
To produce installers yourself: npm run dist (current OS), or dist:mac / dist:win / dist:linux.

What's inside

• The simulation — every agent is a real claude pseudo-terminal, visualized as an avatar on a watchable office floor (node-pty · xterm.js · Pixi.js).
• MemPalace — a markdown-first, semantic memory layer the whole office shares; cross-session recall in ~12ms.
• GOD orchestrator + hive — one agent you talk to routes work to specialists and stays autonomous, escalating only critical items (spend, destructive ops, scope) to you natively, through Claude Code's human-in-the-loop prompts.
• Plugs into your setup — your subscription, settings, skills, and MCP servers; /remote-control reaches the whole floor from your phone.

Full notes in the CHANGELOG.

Links

Website ·
Repo ·
Issues ·
Contribute ·
Become a patron

MIT-licensed. An affectionate parody — not affiliated with NBC's The Office or Dunder Mifflin.

Contributors

• @Gulum