Tasks, remote workspaces, and reliable recovery

Added

• Connect remote workspaces through verified SSH hosts, with confined Files access and remote terminal and Claude/Codex Thread panes.
• Find likely workspace files and folders by name during voice follow-ups, with private and ignored paths excluded.
• Read a connected YouTube channel’s identity and public totals, with channel selection and read-only permission.
• Install and sign in to coding agents from the app, with a skippable first-run setup and visible installer terminals.
• Agents receive their last sent message as context when a teammate replies, and the roster shows busy and terminal-only teammates.
• Ask Bridge by voice to create and execute Tasks in dedicated workspaces with assigned agents, independent review, saved summaries and stop/resume controls.
• Manage local Tasks with projects, labels, comments, history and revocable agent MCP connections, from the title bar or while signed out.
• Close a task straight from the list: hover a row and click its × to archive it, then use "Show archived" → Restore if you change your mind.
• Orchestrate workspace coding chats by voice: create distinct threads, preserve drafts, configure review or planning mode, and follow each agent by its thread.
• Mute your microphone during a call while Bridge keeps speaking and working, then unmute to rejoin.
• A Claude-powered agent can drive your real Chrome through the Claude in Chrome extension: turn on "May drive your Chrome" on its Settings face and it works in its own tabs inside your signed-in browser, off for every agent until you say so.
• Development builds include an experimental agent browser in the app's own pane: it reads pages as a compact outline, clicks, types, scrolls and waits, and takes annotated screenshots, while reads run freely and each click or form submit on a new site asks you first — with an "Allow on this site" grant, a password field or checkout page that always asks, and purchases refused outright.
• In development builds, a pane an agent is driving says so in its header; "Take over" pauses the agent's browser actions until you hand the pane back, and each agent's Settings face lets you limit which sites it may open.

Changed

• Rename Chat mode to Thread across navigation and accessibility, while preserving saved conversations, settings, and agent chats.
• A live call with Bridge is now a floating orb over your workspace instead of a bar under the title bar: it swells with your voice, you can drag it wherever it is least in the way (it stays parked there for the next call), spoken captions stay out of the way, confirmation text and Yes/No show only when Bridge asks, and mute, the call's receipt and end appear when you hover.
• Gmail, YouTube and Google Ads show a Preview chip instead of a Connect button until the build carries their Google client configuration, so a click can no longer end in "isn't configured in this build".

Fixed

• Save and create files reliably in Linux SSH workspaces.
• Keep task titles fully visible while the detail page finishes laying out.
• Quitting and update restarts honor their deadline even when a connection ignores cancellation.
• Thread mode restores the recent conversation in its workspace, preserves refused SSH prompts, and shows when an approval needs your attention.
• Pane shortcuts follow the current workspace and focus; Codex terminal colors stay readable after changing appearance.
• Hide unavailable engine controls while keeping file attachments accessible.
• Code mode retains exact coding-agent conversations across restarts, keeps closed-session history, and offers Resume session or Start fresh without silently replacing saved work.
• Restore visible terminals concurrently and surface recovery or save failures from workspace menus.
• Recheck staged updates before replacement, preserve skipped-version preferences, and retain the current download when the feed is unavailable or uncertain.
• Preserve successful Codex reconnects while reporting errors that arrive after completion.
• Route Mac analytics to the dedicated app project and reject an unrelated project token before signing.
• Cancel speaker echo before voice calls and wake detection, and pause wake listening while watching streams without changing your saved preference.
• Keep large-file editing and streaming conversations responsive, with ordered Remote saves and immediate code-thread updates to paired phones.
• Read multiline plugin responses correctly, keep cancelled connections from reviving, and redact diagnostics across streamed output boundaries.
• Recover sign-in when the browser refuses to open or startup stalls, with a copyable link, a retry action and bounded startup cleanup.
• Open and manage plugin connections from General settings in any work mode.
• Keep paired-phone agent and routine lists in sync, accept multiline Git commit messages, and retry gracefully when Remote is temporarily unavailable.
• Show delivery or refusal for teammate mentions, honor the messaging pause for queued mail, and prevent duplicate delivery to concurrent chats.
• Preserve sign-out safety when overlapping session writes fail, and keep usage analytics working after turning it off and back on.
• Keep the app responsive while scrolling files, saving session credentials, recording usage statistics, and starting notification sounds.
• Stop treating cancelled chat turns as failures, preserve private diagnostic categories for real chat and voice problems, and explain how to update when running from the installer disk image.
• Keep task execution within four active attempts, preserve retry instructions, and stop reliably during setup or sign-out.
• Sign-in failures now report why they failed (rejected, rate-limited, network) and the HTTP status instead of "unknown", in both analytics and crash reports.
• Holding Return on the welcome screen no longer fires a fresh sign-in attempt on every key repeat; a failed attempt waits one second before it can be retried.
• Auto now reports why a run ended (out of credits, no subscription, signed out, the turn ceiling, an unreachable API, a token refresh, the pane closing, or the agent changing) instead of calling every ending stuck, and a failing sign-in refresh is retried like any other blip instead of stopping the run.
• Plugin connect failures now report which step broke (discovery, registration, sign-in, token, proof, timeout) instead of one generic message, and analytics carries the same reason.
• Supabase can be connected: BridgeMind registers as a confidential OAuth client when a vendor's metadata rules out public clients, so the token exchange no longer fails with "client_secret required".
• Connecting Blender while the community blender-mcp add-on holds port 9876 now says so and points to the official Blender Lab MCP add-on instead of waiting 8 seconds and reporting a dead socket.
• A dictation hold under a second that transcribes to nothing now resets quietly instead of flashing "Nothing was transcribed".
• Dictation refusals before the mic opens (not signed in, microphone denied) no longer misreport the previous take's length in diagnostics.

Security

• Voice approval stays tied to the exact request or file revision; arbitrary terminal input, accessibility approval clicks and forced worktree removal require local review.
• Require fresh approval on the Mac for Cloudflare, Supabase and Blender actions beyond known reads, with the complete request available for review every time.
• Show complete plugin approval requests, verify advertising budgets before enabling spend, validate mail headers, and keep unattended agent work within reviewable permissions.
• Preserve unreadable encrypted data for recovery, protect eligible signing identities with device-bound Keychain storage, and prevent project Git settings from running hidden helpers.
• Keep YouTube credentials in macOS Keychain, bind reads to the selected channel, and prevent old sign-in or refresh attempts from restoring a disconnected account.
• Keep disconnected Google Ads accounts disconnected when an earlier token refresh finishes, and redact secrets even when an agent prints them across separate output chunks.
• Keep OAuth client registration on verified vendor hosts and reject redirects to unrelated or private endpoints.