Changelog
Client 0.6.18
Choose your organization at sign-in, and move a machine to another organization.
- Signing in asks which organization to use when your account belongs to several;
--orgorOPENLATCH_ORGnames it without asking. - New command
openlatch system auth switchmoves this machine to another of your organizations. - On Windows,
openlatch doctorreports an agent's command-line tool whose machine-wide install bypasses the relay (OL-1425). - Groundwork for a coding agent that OpenLatch does not yet support. Nothing changes for the agents already wired.
- Signing in asks which organization to use when your account belongs to several;
Client 0.6.17
Cursor returns to coverage once its windows reload.
- A held Cursor is covered again once its windows reload.
- The relay records each Cursor call once, and classifies the traffic of a coding agent that OpenLatch does not yet support.
Client 0.6.16
The client also connects the Codex desktop app, with no command-line tool and no new
openlatch init.- The client connects the Codex desktop app on a machine with no Codex command-line tool, without running
openlatch initagain. openlatch doctorno longer reports a false finding for a coding agent that OpenLatch does not yet support.
- The client connects the Codex desktop app on a machine with no Codex command-line tool, without running
One policy in several Autonomy Zones
Attach an Agent Intent Policy to several zones, each with its own mode.
Client 0.6.15
Cursor and Cline command-line tools reach the relay on Windows with no setup.
- On Windows, the Cursor and Cline command-line tools route their model traffic through the relay with no setup.
- On Windows, the relay's certificate check no longer reads a file that is still open.
Client 0.6.14
Groundwork for a coding agent that OpenLatch does not yet support.
- Relay groundwork for a coding agent that OpenLatch does not yet support. Nothing changes for the agents already wired.
Client 0.6.13
Groundwork for a coding agent that OpenLatch does not yet support, and a Windows relay fix.
- Hook and inventory groundwork for a coding agent that OpenLatch does not yet support. Nothing changes for the agents already wired.
- On Windows, the relay's certificate is checked in the user's own context, and background processes start without opening a console window.
Client 0.6.12
More accurate model usage and PowerShell reading.
openlatch doctor --fixreports the state it leaves behind.- Usage that an interrupted model stream already reported is kept.
- A model is marked unknown only when its usage is estimated.
- An API key is told apart from a subscription token by its shape.
- A PowerShell parameter written as
-Param:valueis read the same way as-Param value.
Client 0.6.11
PowerShell commands are read more accurately.
- A URL in a PowerShell command is now read as a URL, not as a file path.
Client 0.6.10
Fixes for enrolment and for reading PowerShell commands.
- The daemon's idle health check now sends the API key.
openlatch initnow saves an exportedOPENLATCH_API_URLto the client configuration.- A file path is classified where it resolves, not as it is spelled.
- PowerShell commands are split into words by PowerShell's own rules.
Autonomy Zones on your organization tree
Enable an Autonomy Zone on any unit, and see which agents each zone governs and why.
Autonomy Zones and Agent Intent Policies
Define what each agent may do as Agent Intent Policies, and run each one in Disabled, Monitor or Enforce mode.
Public REST API
Automate the console's operations with organization API keys.
Client 0.6.9
Live configuration reports, and fixes for Cline, Cursor and macOS.
- Configuration changes on a host are reported as they happen.
- A Claude Code teammate session is linked to the session that leads it.
- The skills, rules and MCP servers that Codex CLI, Cursor and Cline load are inventoried as each agent actually loads them.
- Cursor reports name the MCP server on every call.
- Updating Cline.app no longer interrupts a conversation.
- A Claude Code session started from a plan records that plan as its first prompt.
- On macOS, the client no longer asks for access to the Desktop, Downloads and Documents folders.
openlatch initno longer describes usage telemetry as anonymous.- Native Windows paths are classified correctly on file reads and writes.
Database-enforced tenant isolation
The database itself keeps each organization's data apart.
Client 0.6.8
Policy bundle and relay fixes.
- A cached policy bundle is revalidated correctly when the platform reports it unchanged.
- Usage from sessions that no hook registered is no longer recorded.
Client 0.6.7
Path-aware evaluation and Cline fixes.
- An action's effects are correlated with the paths it targets.
- The Cline plugin applies to every tool, not only the shell.
openlatch initwaits for the first Cline plugin delivery instead of failing.- Each action is decided once, not again after it runs.
- Codex CLI side threads are filed under their parent session.
- Usage is filed under the right installation.
Policies that read what an action does
Intent policies match what a command does, such as reading secret material or reaching a network host, not how it is spelled.
Client 0.6.6
The Cursor IDE's model calls go through the relay.
- The Cursor IDE's model calls are routed through the relay.
- A fresh
openlatch initno longer fails on components that are still starting. openlatch doctorshows one status line for every agent and recognizes the Cline.app hub.- A shell process substitution is no longer read as a redirection target.
Client 0.6.5
One shared tool vocabulary, and Ask verdicts delivered per agent.
- Each agent's tools map onto one shared vocabulary; a tool with no mapping is still recorded under its own name.
- Policy evaluation reads one classification catalogue from the policy bundle.
- Ask verdicts reach each agent in the form it supports, with an authored verdict where an agent has no ask of its own.
Client 0.6.4
Cursor support.
- Policies decide on Cursor actions, and the verdict reaches Cursor in its own format.
- Cursor's model traffic goes through the relay and is recorded as usage, never as content.
- Cursor's wiring is checked, repaired and inventoried like every other agent's.
openlatch uninstallnames the agents a partial uninstall leaves wired.
Client 0.6.3
The Cline plugin reaches Cline.app and VS Code.
- The Cline plugin is delivered to Cline.app and to VS Code.
- The client checks that the plugin loaded on each host.
License and usage in the console
Read what your organization is licensed for against what it consumes, on one page.
Agent ownership
Every agent resolves to an owner from your directory, and its business function can drive a policy.
Agents you can recognize
Agents carry a readable name and show the sessions and projects they bring together.
Execution graph
See everything an agent did as one graph, filter it, and start a rule from a command.
Agent economics
See each agent's spend, forecast and sessions, with ranked savings opportunities.
Client 0.6.2
Cline reporting, self-repair and a complete purge.
- Cline sessions, prompts and tool calls are reported to the platform.
- Relay wiring, hook trust and the Cline plugin files are checked for tampering and repaired.
- The client reports when a policy bundle is waiting to be delivered.
openlatch uninstallsends an uninstall event, andopenlatch uninstall --purgeremoves all client state.
Client 0.6.1
Cline through the relay, and relay certificate management.
- Cline's model traffic is captured through the relay, including the Cline desktop app.
- The relay proves its certificate is trusted before an agent is pointed at it.
- The relay's certificate can be reported, rotated, released and removed.
- Only detected agents are reported in host facts.
- Codex CLI hooks are trusted on Windows.
Policies that keep deciding offline
Each client holds its policy bundle locally, so enforcement continues with the network unplugged.
Client 0.6.0
A step-by-step
openlatch update, with one breaking change to its JSON output.- Breaking:
openlatch update --check --jsonno longer returnsmin_supported_client.current,latestandseverityare unchanged. openlatch updateshows its progress step by step, and the daemon comes back after it.- Cline hooks, rules and workflows are reported by the configuration inventory.
- Breaking:
Client 0.5.8
Cline prompt capture.
- Prompts are captured on the Cline CLI and the Cline desktop app.
- Agent types that are not wired are no longer reported.
Client 0.5.7
Terminal output fix on Windows.
- Colors and progress display correctly on Windows for every command, not only
openlatch init.
- Colors and progress display correctly on Windows for every command, not only
Client 0.5.6
Release maintenance.
- Changes to how the client is built and released. The client behaves as in the previous version.
Client 0.5.4
Daemon supervision and telemetry delivery fixes.
- On Windows, the scheduled task that keeps the daemon running keeps its version marker.
- The daemon's first telemetry batch is sent over HTTPS.
Client 0.5.3
Telemetry through the platform, and Linux binaries for older hosts.
- Telemetry and crash reports go through the platform's own ingestion endpoint.
- Linux binaries start on slim and older hosts.
Client 0.5.2
Startup and event delivery fixes.
- On Windows,
openlatchruns as a console program, and its binaries start on a fresh host. - Events still queued at shutdown are sent.
- The daemon notices a new login without a restart.
- Event delivery recovers after every reconnection to the platform.
- On Windows,
Client 0.5.1
Release maintenance.
- Changes to how the client is built and released. The client behaves as in the previous version.
Client 0.4.0
Subsystem commands move under
openlatch system.- Breaking:
openlatch auth,hooks,model-relay,proxy,supervision,telemetryandinventoryare nowopenlatch system <name>, with no aliases. - Breaking: the
[boundary]configuration section is now[model_relay],OPENLATCH_BOUNDARY_*variables are nowOPENLATCH_MODEL_RELAY_*, andOL-BND-*error codes are nowOL-RELAY-*. openlatch doctorreports the live state of each hook.- Proxy diagnostics report the proxy the client actually uses.
- Breaking:
Client 0.3.3
Release maintenance.
- Changes to how the client is built and released. The client behaves as in the previous version.
Client 0.2.2
Release maintenance.
- Changes to how the client is built and released. The client behaves as in the previous version.
Client 0.1.18
Release maintenance.
- Changes to how the client is built and released. The client behaves as in the previous version.
Client 0.1.14
Default API address fix.
- The default API address no longer repeats
/api.
- The default API address no longer repeats
Client 0.1.13
The npm package resolves with
npx @openlatch/client init.- The npm package gains a
cliententry point, sonpx @openlatch/client initresolves. - Help output no longer prints a banner.
- The npm package gains a
Client 0.1.12
Release maintenance.
- Changes to how the client is built and released. The client behaves as in the previous version.
Client 0.1.8
Release maintenance.
- Changes to how the client is built and released. The client behaves as in the previous version.
Client 0.1.7
The npm package ships the hook entry point.
- The npm package installs the
openlatch-hookentry point.
- The npm package installs the
Client 0.1.6
Release maintenance.
- Changes to how the client is built and released. The client behaves as in the previous version.
Entries appear here when a release ships. Subscribe to the Atom feed to hear about the next one.