Munder Difflin v0.3.0

A local hive of Claude Code, Antigravity & Codex agents that run themselves — messaging,
routing, and remembering, coordinated by a GOD orchestrator you talk to. Local-first and open source.

→ munderdiffl.in — see it in action, then grab a build below

What's new in 0.3.0 — Selectable engines, integrations, and Slack-spawned workers

The biggest platform release yet: the floor stops being Claude-shaped. Every hire — and Michael
himself — becomes a pluggable engine, each with its own consented skills + MCP catalog. A new
integrations registry turns "connect a service" into a write-only, registry-driven Settings
flow. And Michael can now spawn an ephemeral worker straight from a Slack message, reply, and
tear it down safely.

• Selectable agent engines + per-hire capabilities. A new engine abstraction makes the runtime
  behind each agent pluggable — Claude Code, Antigravity, Codex, or a local provider (a
  claw/qwen backend proxy). Each hire carries its own manifest of allowed skills + MCP servers
  (default-deny over a shared catalog), with bundled skills shipped in the app and a consent
  UI that surfaces every skill/MCP a hire wants before it can use it. Even Michael's own
  engine is swappable, with an Onboarding engine picker and a change-engine flow.
• Integrations registry + loopback secret broker. A declarative integrations registry plus a
  loopback secret broker: secrets are write-only (set once, never read back into the
  renderer) and reached only through the broker. A registry-driven Settings UI renders each
  integration's config form from the spec, with a first wave of declarative templates.
• God-triggered ephemeral Slack worker loop. Michael spawns an isolated worker in response to a
  Slack request, the worker posts its reply back into the thread, and it's then torn down
  safely — with worktree GC, per-worker token caps, and a teardown gate that never
  auto-discards unintegrated work. Live workers show up in a new Workers tab.
• Temporal date-range skills + worker capability catalog. Date-range skills (today / yesterday /
  thisWeek / lastWeek / thisMonth / thisQuarter / thisYear / lastMonth / last7Days / last30Days …)
  resolve a named window to concrete ISO dates, and each spawned worker can read a capability
  catalog of exactly which skills and brokered integrations it has.
• Provider / Hive picker + Agent Gallery. A visual HivePicker with real provider logos lands
  in onboarding and add-agent, The Hiring Fair is rebranded to the Agent Gallery with six
  off-the-shelf hires, onboarding is now feature-aware (with a permissions & reliability step),
  and the engine-CLI installer runs visibly when a binary is missing.
• Wake-reliability hardening. Wedged terminals are auto-revived on wake, and missed
  schedules are caught up when the machine wakes instead of being silently skipped.
• Security: the integrations:test probe path is confined so it can't be turned into a
  secret-exfiltration or SSRF primitive.

Everything from v0.2.8 (shareable hires + the gallery) and earlier — Free Flow voice dictation,
the enterprise Knowledge Graph, multi-window "floors", the rich message composer, agent session
resume, and drag-a-file path injection — is included.
See the CHANGELOG for full detail.

⤓ Downloads

Latest builds for every platform. The macOS build is universal — one DMG that runs on both
Apple Silicon and Intel.

🍎 macOS

🪟 Windows

🐧 Linux

📦 Source

Source code (zip) ·
Source code (tar.gz)

Verify your download: SHA256SUMS.txt — then shasum -a 256 -c SHA256SUMS.txt (macOS/Linux) or Get-FileHash (Windows).

The links above always point at the latest release (/releases/latest/download/…),
so this page stays correct across versions.

First launch

• macOS — the build is signed with a Developer ID (hardened runtime). If macOS
  still shows an "unidentified developer" warning on first open, right-click the app →
  Open → Open once. After that, the first time agents touch a folder you'll get a
  single macOS privacy prompt for Documents/Desktop/Downloads — allow it once and the
  grant sticks (it covers the claude agents the app spawns), because the grant is bound
  to the app's stable signature.
• Windows — not code-signed yet; SmartScreen may show "Windows protected your PC" →
  More info → Run anyway.
• Linux — make the AppImage executable: chmod +x Munder-Difflin-*.AppImage, then run it.

Requirements

• macOS 12+, Windows 10/11, or a modern Linux desktop
• Claude Code installed and on your PATH (and/or the Antigravity agy or OpenAI codex CLI for those providers)
• A Claude Code subscription (Munder Difflin drives your existing claude CLI — it doesn't replace it)

🛠 Build from source

git clone https://github.com/chaitanyagiri/munder-difflin.git
cd munder-difflin
npm install        # rebuilds node-pty for Electron
npm run dev        # launches the app with hot reload

Node 18+ and a C/C++ toolchain are required (Xcode CLT on macOS, Build Tools on Windows).
To produce installers yourself: npm run dist (current OS), or dist:mac / dist:win / dist:linux.

What's inside

• The simulation — every agent is a real claude (or agy / codex / local-provider) pseudo-terminal, visualized as an avatar on a watchable office floor (node-pty · xterm.js · Pixi.js).
• Selectable engines + per-hire capabilities — each hire (and Michael himself) runs on a pluggable engine, with its own consented skills + MCP catalog.
• MemPalace — a markdown-first, semantic memory layer the whole office shares; cross-session recall in ~12ms.
• GOD orchestrator + hive — one agent you talk to routes work to specialists and stays autonomous, escalating only critical items (spend, destructive ops, scope) to you natively, through human-in-the-loop prompts. It can also spawn an ephemeral worker straight from Slack and tear it down safely.
• Plugs into your setup — your subscription, settings, skills, and MCP servers, plus an integrations registry with a write-only secret broker; /remote-control reaches the whole floor from your phone.

Full notes in the CHANGELOG.

Links

Website ·
Repo ·
Issues ·
Contribute ·
Become a patron

MIT-licensed. An affectionate parody — not affiliated with NBC's The Office or Dunder Mifflin.