Rookery

Desktop OS: macOS

Typed value: Yes.

Rookery supplies native desktop, CLI and Slack clients for its resident daemon. The released source has no standalone browser or product-owned native phone client.

• Desktop os: macOS Apple Silicon DMG, Linux x64 AppImage, Windows x64 EXE.
• Mobile apps: The complete client inventory is desktop, CLI and Slack, with no native Rookery phone application.
• Browser: The daemon exposes protocol/control routes rather than a browser frontend; the desktop renderer depends on Electron preload.
• Mobile browser: There is no released standalone browser client; Slack phone access is third-party.
• Cli: Product CLI auto-starts daemon; Node 22 required for headless.
• Task actions: Slack thread runs same persistent session and can relay worker activity.
• Notifications: Attention bell ranks blocked questions, failure, unreviewed results.
• Cross device continuity: Slack thread remains same daemon session across restarts; no phone app assumed.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: editor_extensions.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery v0.6.0 release

   Finding: Release v0.6.0 published 2026-10-19 with macOS arm64 DMG, Linux x86_64 AppImage and Windows x64 EXE assets. Release notes describe a Slack Stop button, Claude Agent SDK and Codex CLI updates and cost-accounting fixes. Capability claims stay scoped to pinned main, not a binary test.

   Locator

   Release date and assets

   Retrieved

   2026-11-07

   Source date

   2026-10-19

Desktop OS: Windows

Typed value: Yes.

Rookery supplies native desktop, CLI and Slack clients for its resident daemon. The released source has no standalone browser or product-owned native phone client.

• Desktop os: macOS Apple Silicon DMG, Linux x64 AppImage, Windows x64 EXE.
• Mobile apps: The complete client inventory is desktop, CLI and Slack, with no native Rookery phone application.
• Browser: The daemon exposes protocol/control routes rather than a browser frontend; the desktop renderer depends on Electron preload.
• Mobile browser: There is no released standalone browser client; Slack phone access is third-party.
• Cli: Product CLI auto-starts daemon; Node 22 required for headless.
• Task actions: Slack thread runs same persistent session and can relay worker activity.
• Notifications: Attention bell ranks blocked questions, failure, unreviewed results.
• Cross device continuity: Slack thread remains same daemon session across restarts; no phone app assumed.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: editor_extensions.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery v0.6.0 release

   Finding: Release v0.6.0 published 2026-10-19 with macOS arm64 DMG, Linux x86_64 AppImage and Windows x64 EXE assets. Release notes describe a Slack Stop button, Claude Agent SDK and Codex CLI updates and cost-accounting fixes. Capability claims stay scoped to pinned main, not a binary test.

   Locator

   Release date and assets

   Retrieved

   2026-11-07

   Source date

   2026-10-19

Desktop OS: Linux

Typed value: Yes.

Rookery supplies native desktop, CLI and Slack clients for its resident daemon. The released source has no standalone browser or product-owned native phone client.

• Desktop os: macOS Apple Silicon DMG, Linux x64 AppImage, Windows x64 EXE.
• Mobile apps: The complete client inventory is desktop, CLI and Slack, with no native Rookery phone application.
• Browser: The daemon exposes protocol/control routes rather than a browser frontend; the desktop renderer depends on Electron preload.
• Mobile browser: There is no released standalone browser client; Slack phone access is third-party.
• Cli: Product CLI auto-starts daemon; Node 22 required for headless.
• Task actions: Slack thread runs same persistent session and can relay worker activity.
• Notifications: Attention bell ranks blocked questions, failure, unreviewed results.
• Cross device continuity: Slack thread remains same daemon session across restarts; no phone app assumed.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: editor_extensions.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery v0.6.0 release

   Finding: Release v0.6.0 published 2026-10-19 with macOS arm64 DMG, Linux x86_64 AppImage and Windows x64 EXE assets. Release notes describe a Slack Stop button, Claude Agent SDK and Codex CLI updates and cost-accounting fixes. Capability claims stay scoped to pinned main, not a binary test.

   Locator

   Release date and assets

   Retrieved

   2026-11-07

   Source date

   2026-10-19

Web client

Typed value: No.

Rookery supplies native desktop, CLI and Slack clients for its resident daemon. The released source has no standalone browser or product-owned native phone client.

• Mobile apps: The complete client inventory is desktop, CLI and Slack, with no native Rookery phone application.
• Browser: The daemon exposes protocol/control routes rather than a browser frontend; the desktop renderer depends on Electron preload.
• Mobile browser: There is no released standalone browser client; Slack phone access is third-party.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: editor_extensions.

1. Rookery: docs/architecture/overview.md

   Finding: The complete thin-client inventory is native Electron desktop, CLI and embedded Slack. The daemon serves health/control/MCP and WebSocket commands; it does not serve a standalone browser frontend. The renderer depends on an Electron preload bridge and the development Vite server is not a released browser product. No native iOS/Android client is supplied; Slack mobile is a third-party client.

   Locator

   System shape; apps/desktop Electron main/preload; daemon HTTP route and origin checks

   Retrieved

   2026-11-13

Phone access: Native iOS

Typed value: No.

Rookery supplies native desktop, CLI and Slack clients for its resident daemon. The released source has no standalone browser or product-owned native phone client.

• Mobile apps: The complete client inventory is desktop, CLI and Slack, with no native Rookery phone application.
• Browser: The daemon exposes protocol/control routes rather than a browser frontend; the desktop renderer depends on Electron preload.
• Mobile browser: There is no released standalone browser client; Slack phone access is third-party.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: editor_extensions.

1. Rookery: docs/architecture/overview.md

   Finding: The complete thin-client inventory is native Electron desktop, CLI and embedded Slack. The daemon serves health/control/MCP and WebSocket commands; it does not serve a standalone browser frontend. The renderer depends on an Electron preload bridge and the development Vite server is not a released browser product. No native iOS/Android client is supplied; Slack mobile is a third-party client.

   Locator

   System shape; apps/desktop Electron main/preload; daemon HTTP route and origin checks

   Retrieved

   2026-11-13

Phone access: Native Android

Typed value: No.

Rookery supplies native desktop, CLI and Slack clients for its resident daemon. The released source has no standalone browser or product-owned native phone client.

• Mobile apps: The complete client inventory is desktop, CLI and Slack, with no native Rookery phone application.
• Browser: The daemon exposes protocol/control routes rather than a browser frontend; the desktop renderer depends on Electron preload.
• Mobile browser: There is no released standalone browser client; Slack phone access is third-party.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: editor_extensions.

1. Rookery: docs/architecture/overview.md

   Finding: The complete thin-client inventory is native Electron desktop, CLI and embedded Slack. The daemon serves health/control/MCP and WebSocket commands; it does not serve a standalone browser frontend. The renderer depends on an Electron preload bridge and the development Vite server is not a released browser product. No native iOS/Android client is supplied; Slack mobile is a third-party client.

   Locator

   System shape; apps/desktop Electron main/preload; daemon HTTP route and origin checks

   Retrieved

   2026-11-13

Phone access: Phone browser

Typed value: No.

Rookery supplies native desktop, CLI and Slack clients for its resident daemon. The released source has no standalone browser or product-owned native phone client.

• Mobile apps: The complete client inventory is desktop, CLI and Slack, with no native Rookery phone application.
• Browser: The daemon exposes protocol/control routes rather than a browser frontend; the desktop renderer depends on Electron preload.
• Mobile browser: There is no released standalone browser client; Slack phone access is third-party.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: editor_extensions.

1. Rookery: docs/architecture/overview.md

   Finding: The complete thin-client inventory is native Electron desktop, CLI and embedded Slack. The daemon serves health/control/MCP and WebSocket commands; it does not serve a standalone browser frontend. The renderer depends on an Electron preload bridge and the development Vite server is not a released browser product. No native iOS/Android client is supplied; Slack mobile is a third-party client.

   Locator

   System shape; apps/desktop Electron main/preload; daemon HTTP route and origin checks

   Retrieved

   2026-11-13

CLI

Typed value: Yes.

CLI and scoped external MCP drive daemon workers.

• Cli: Headless/interactive product CLI.
• Api: Local WS/HTTP daemon protocol used by its clients; no versioned public REST contract established.
• Mcp server: Optional HTTP MCP read-only or full control scoped token.
• Operations: List/status/transcript/diff; full control spawn/steer/stop.
• Authentication: Local daemon token; external MCP off by default and token rotation.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-11

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: sdk, webhooks, stability.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Settings

   Finding: Settings stored locally, secret getters write-only; binds127.0.0.1 default, warns for plaintext token on remote bind. Slack allowlist fail-closed; API-key fallback to native CLI OAuth.

   Locator

   Local database; secrets; network; Slack

   Retrieved

   2026-11-07

Coding agents: Claude Code

Typed value: Yes.

Claude and Codex are the only product-owned session/worker backends. Other agents may drive Rookery through external MCP, which is separate from running them as Rookery harnesses.

• Harnesses: The complete session/worker backend registries contain Claude and Codex only.
• Model providers: Anthropic for Claude; OpenAI for Codex.
• Custom adapters: The registry/configuration surface does not expose a custom coding-agent adapter.
• Session integration: Same orchestration/tools through either backend.
• Mixed harness operation: Select per master/worker/automation/Slack; cross-provider conversation fork.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

Coding agents: Codex

Typed value: Yes.

Claude and Codex are the only product-owned session/worker backends. Other agents may drive Rookery through external MCP, which is separate from running them as Rookery harnesses.

• Harnesses: The complete session/worker backend registries contain Claude and Codex only.
• Model providers: Anthropic for Claude; OpenAI for Codex.
• Custom adapters: The registry/configuration surface does not expose a custom coding-agent adapter.
• Session integration: Same orchestration/tools through either backend.
• Mixed harness operation: Select per master/worker/automation/Slack; cross-provider conversation fork.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

Coding agents: Cursor Agent

Typed value: No.

Claude and Codex are the only product-owned session/worker backends. Other agents may drive Rookery through external MCP, which is separate from running them as Rookery harnesses.

• Harnesses: The complete session/worker backend registries contain Claude and Codex only.
• Custom adapters: The registry/configuration surface does not expose a custom coding-agent adapter.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.

1. Rookery: src/daemon/server.ts

   Finding: The product-owned session and worker backend registries contain only Claude and Codex. External MCP can be called by Cursor or other clients to drive Rookery workers, but it does not launch those client harnesses as Rookery agents. The registry has no user custom-agent adapter path.

   Locator

   workerBackends and SessionManager backends composition; README Backends & authentication

   Retrieved

   2026-11-13

Coding agents: Gemini CLI

Typed value: No.

Claude and Codex are the only product-owned session/worker backends. Other agents may drive Rookery through external MCP, which is separate from running them as Rookery harnesses.

• Harnesses: The complete session/worker backend registries contain Claude and Codex only.
• Custom adapters: The registry/configuration surface does not expose a custom coding-agent adapter.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.

1. Rookery: src/daemon/server.ts

   Finding: The product-owned session and worker backend registries contain only Claude and Codex. External MCP can be called by Cursor or other clients to drive Rookery workers, but it does not launch those client harnesses as Rookery agents. The registry has no user custom-agent adapter path.

   Locator

   workerBackends and SessionManager backends composition; README Backends & authentication

   Retrieved

   2026-11-13

Coding agents: OpenCode

Typed value: No.

Claude and Codex are the only product-owned session/worker backends. Other agents may drive Rookery through external MCP, which is separate from running them as Rookery harnesses.

• Harnesses: The complete session/worker backend registries contain Claude and Codex only.
• Custom adapters: The registry/configuration surface does not expose a custom coding-agent adapter.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.

1. Rookery: src/daemon/server.ts

   Finding: The product-owned session and worker backend registries contain only Claude and Codex. External MCP can be called by Cursor or other clients to drive Rookery workers, but it does not launch those client harnesses as Rookery agents. The registry has no user custom-agent adapter path.

   Locator

   workerBackends and SessionManager backends composition; README Backends & authentication

   Retrieved

   2026-11-13

Coding agents: Pi

Typed value: No.

Claude and Codex are the only product-owned session/worker backends. Other agents may drive Rookery through external MCP, which is separate from running them as Rookery harnesses.

• Harnesses: The complete session/worker backend registries contain Claude and Codex only.
• Custom adapters: The registry/configuration surface does not expose a custom coding-agent adapter.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.

1. Rookery: src/daemon/server.ts

   Finding: The product-owned session and worker backend registries contain only Claude and Codex. External MCP can be called by Cursor or other clients to drive Rookery workers, but it does not launch those client harnesses as Rookery agents. The registry has no user custom-agent adapter path.

   Locator

   workerBackends and SessionManager backends composition; README Backends & authentication

   Retrieved

   2026-11-13

Coding agents: Grok

Typed value: No.

Claude and Codex are the only product-owned session/worker backends. Other agents may drive Rookery through external MCP, which is separate from running them as Rookery harnesses.

• Harnesses: The complete session/worker backend registries contain Claude and Codex only.
• Custom adapters: The registry/configuration surface does not expose a custom coding-agent adapter.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.

1. Rookery: src/daemon/server.ts

   Finding: The product-owned session and worker backend registries contain only Claude and Codex. External MCP can be called by Cursor or other clients to drive Rookery workers, but it does not launch those client harnesses as Rookery agents. The registry has no user custom-agent adapter path.

   Locator

   workerBackends and SessionManager backends composition; README Backends & authentication

   Retrieved

   2026-11-13

Coding agents: Aider

Typed value: No.

Claude and Codex are the only product-owned session/worker backends. Other agents may drive Rookery through external MCP, which is separate from running them as Rookery harnesses.

• Harnesses: The complete session/worker backend registries contain Claude and Codex only.
• Custom adapters: The registry/configuration surface does not expose a custom coding-agent adapter.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.

1. Rookery: src/daemon/server.ts

   Finding: The product-owned session and worker backend registries contain only Claude and Codex. External MCP can be called by Cursor or other clients to drive Rookery workers, but it does not launch those client harnesses as Rookery agents. The registry has no user custom-agent adapter path.

   Locator

   workerBackends and SessionManager backends composition; README Backends & authentication

   Retrieved

   2026-11-13

Coding agents: Antigravity

Typed value: No.

Claude and Codex are the only product-owned session/worker backends. Other agents may drive Rookery through external MCP, which is separate from running them as Rookery harnesses.

• Harnesses: The complete session/worker backend registries contain Claude and Codex only.
• Custom adapters: The registry/configuration surface does not expose a custom coding-agent adapter.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.

1. Rookery: src/daemon/server.ts

   Finding: The product-owned session and worker backend registries contain only Claude and Codex. External MCP can be called by Cursor or other clients to drive Rookery workers, but it does not launch those client harnesses as Rookery agents. The registry has no user custom-agent adapter path.

   Locator

   workerBackends and SessionManager backends composition; README Backends & authentication

   Retrieved

   2026-11-13

Use my subscription

Typed value: Yes.

Own provider API keys or native Claude/Codex login enable agents.

• Agent subscriptions: Existing claude login OAuth or codex login.
• Api accounts: In-app Anthropic/Codex key or environment key.
• Provider restrictions: Codex masters bypassPermissions-only; workers separate.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-11

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: vendor_credits, local_models, vendor_account_requirement.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Settings

   Finding: Settings stored locally, secret getters write-only; binds127.0.0.1 default, warns for plaintext token on remote bind. Slack allowlist fail-closed; API-key fallback to native CLI OAuth.

   Locator

   Local database; secrets; network; Slack

   Retrieved

   2026-11-07

Where agents run: On your computer

Typed value: Yes.

The operator-owned resident daemon runs on a local machine or deliberately configured headless server, independently of its desktop/CLI/Slack clients. Rookery supplies no managed execution cloud.

• Local: Resident daemon executes on local machine.
• Byo remote: The documented headless daemon supports an explicit non-loopback network bind for operator hosting.
• Self hosted: User runs full daemon/control plane.
• Managed cloud: The complete runtime path consists of an installed operator daemon and native provider processes, without a Rookery-operated compute service.
• Provisioning: Bundled desktop starts/manages daemon or own Node 22 process.
• Client disconnect: Daemon sessions/workers survive client disconnects; a separate client laptop can close while the operator server runs.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: hybrid, payer, resources, region, expiry, other_device_continuation.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Settings

   Finding: Settings stored locally, secret getters write-only; binds127.0.0.1 default, warns for plaintext token on remote bind. Slack allowlist fail-closed; API-key fallback to native CLI OAuth.

   Locator

   Local database; secrets; network; Slack

   Retrieved

   2026-11-07

Where agents run: On your own server

Typed value: Yes.

The operator-owned resident daemon runs on a local machine or deliberately configured headless server, independently of its desktop/CLI/Slack clients. Rookery supplies no managed execution cloud.

• Byo remote: The documented headless daemon supports an explicit non-loopback network bind for operator hosting.
• Managed cloud: The complete runtime path consists of an installed operator daemon and native provider processes, without a Rookery-operated compute service.
• Client disconnect: Daemon sessions/workers survive client disconnects; a separate client laptop can close while the operator server runs.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: hybrid, payer, resources, region, expiry, other_device_continuation.

1. Rookery: docs/reference/settings-and-env.md

   Finding: The documented headless daemon can bind an operator-selected network host through ROOKERY_HOST with an explicit ROOKERY_ALLOW_NONLOOPBACK override. CLI, external MCP and Slack act as clients of its resident process; daemon sessions/workers survive client disconnects. An operator can deploy that headless daemon on their server; no Rookery-managed compute service is implemented.

   Locator

   ROOKERY_HOST; README Headless / CLI; src/daemon/server.ts remote bind gate

   Retrieved

   2026-11-13

Where agents run: In the vendor's cloud

Typed value: No.

The operator-owned resident daemon runs on a local machine or deliberately configured headless server, independently of its desktop/CLI/Slack clients. Rookery supplies no managed execution cloud.

• Byo remote: The documented headless daemon supports an explicit non-loopback network bind for operator hosting.
• Managed cloud: The complete runtime path consists of an installed operator daemon and native provider processes, without a Rookery-operated compute service.
• Client disconnect: Daemon sessions/workers survive client disconnects; a separate client laptop can close while the operator server runs.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: hybrid, payer, resources, region, expiry, other_device_continuation.

1. Rookery: docs/reference/settings-and-env.md

   Finding: The documented headless daemon can bind an operator-selected network host through ROOKERY_HOST with an explicit ROOKERY_ALLOW_NONLOOPBACK override. CLI, external MCP and Slack act as clients of its resident process; daemon sessions/workers survive client disconnects. An operator can deploy that headless daemon on their server; no Rookery-managed compute service is implemented.

   Locator

   ROOKERY_HOST; README Headless / CLI; src/daemon/server.ts remote bind gate

   Retrieved

   2026-11-13

Workspace isolation: Git worktree

Typed value: Yes.

Rookery workers run native agent processes in separate Git worktrees on the daemon host; they have no product-managed container or VM isolation option.

• Checkout: Original checkout untouched by worker worktree edits.
• Branch: rookery/id or ticket slug with collision suffix.
• Worktree: One Git worktree per worker.
• Container: The worker spawn/backends provide host processes and worktrees, without container provisioning.
• Vm: The worker spawn/backends provide no VM provisioning.
• Code separation: Each worker gets own Git working files.
• Security boundary: Worktrees share host process/permission environment; headless default autoapproves bash/files. No VM/container sandbox claimed.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: os_sandbox, filesystem, process, network, secrets.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

Workspace isolation: Container

Typed value: No.

Rookery workers run native agent processes in separate Git worktrees on the daemon host; they have no product-managed container or VM isolation option.

• Container: The worker spawn/backends provide host processes and worktrees, without container provisioning.
• Vm: The worker spawn/backends provide no VM provisioning.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: os_sandbox, filesystem, process, network, secrets.

1. Rookery: src/core/fleet-orchestrator.ts

   Finding: Workers run native provider processes rooted in product-managed Git worktrees on the daemon host. The bounded spawn/backend paths implement no Docker/container or VM provisioning; a logical container session in session-manager.ts is a database/session grouping, not OS isolation.

   Locator

   Worker spawn/rehydration; src/core/git-ops.ts; Claude/Codex backend process launch

   Retrieved

   2026-11-13

Workspace isolation: VM or microVM

Typed value: No.

Rookery workers run native agent processes in separate Git worktrees on the daemon host; they have no product-managed container or VM isolation option.

• Container: The worker spawn/backends provide host processes and worktrees, without container provisioning.
• Vm: The worker spawn/backends provide no VM provisioning.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: os_sandbox, filesystem, process, network, secrets.

1. Rookery: src/core/fleet-orchestrator.ts

   Finding: Workers run native provider processes rooted in product-managed Git worktrees on the daemon host. The bounded spawn/backend paths implement no Docker/container or VM provisioning; a logical container session in session-manager.ts is a database/session grouping, not OS isolation.

   Locator

   Worker spawn/rehydration; src/core/git-ops.ts; Claude/Codex backend process launch

   Retrieved

   2026-11-13

Parallel runs

Typed value: Yes.

Global fleet runs parallel worktree workers without a concurrency cap.

• Concurrent sessions: Multiple master sessions.
• Concurrent tasks: Multiple independent workers.
• Quotas: Pinned orchestrator has no concurrent worker cap.
• Status visibility: Mission control tree/status/transcripts and attention bell.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: observed_concurrency.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery fleet implementation

   Finding: Pinned code resumes background rows as idle with empty background task set, preserves budgets/mode, supports cross-provider handoff; no worker concurrency cap. Same worker reload keeps identity/worktree.

   Locator

   rehydrate; fork; spawn; requestCapabilityReload

   Retrieved

   2026-11-07

Coordinator

Typed value: Yes.

Shipped daemon orchestrator delegates inspectable Claude/Codex worktree workers.

• Roles: Master and coding/reviewer workers.
• Model harness effort: Choose Claude/Codex, model and effort.
• Messages: send_worker steers/follows up; transcripts and diff tools.
• Results return: Armed settlement notification includes last response tail.
• Cross harness: Master/worker backend independent; cross-provider fork.
• Orchestration owner: Rookery daemon fleet tools.
• Activation: Natural-language master task or spawn dialog.
• Live progress: Live worker tree/transcripts/plan cards.
• Retained results: Worker events/messages/checkpoints in local database.
• Followup: Master notified on child idle/error/stop; pending notices persist.
• Invocation: spawn_worker/send_worker/list/inspect tools.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: authentication.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

3. Rookery Master and worker turns

   Finding: Master turns serialized, workers have FIFO pending followups. Worker completion notifies parent, persisted pending notification retry. Per-turn trusted capability overlays and separate generated Codex homes; live reload explicitly required for worker.

   Locator

   Serialization; notifications; capabilities; sessions

   Retrieved

   2026-11-07

Native issue tracking

Typed value: No.

Rookery persists master/worker agent sessions and external ticket references, without an independent native issue/task record distinct from the agent session lifecycle.

• Create: No independent native issue/task creation command/model exists in the complete schema and protocol.
• Task session separation: The persisted work objects are the agent sessions themselves; ticket references point to external trackers.
• Durable states: Persisted worker/session states are execution states rather than a separate issue/task lifecycle.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: edit, discuss, prioritize, label, assign, search, filter, archive, reopen, project_epic_views, idea_parking, explicit_dispatch, metadata, external_tracker_requirement.

1. Rookery: src/persistence/db.ts

   Finding: The complete persisted/domain model contains conversations, worker agent sessions, worktrees/checkpoints, memories, repos, automations and capability settings. Worker ticket_key/ticket_url are external ticket references. There is no independent native issue/task record or lifecycle distinct from these agent sessions; provider workflow-task events remain harness session activity.

   Locator

   Complete schema/migrations; repositories.ts; docs/reference/data-model.md and protocol/messages.ts

   Retrieved

   2026-11-13

Unattended triggers

Typed value: Yes.

Persistent daemon rules trigger master turns or worker spawns without client.

• Schedules: Cron/interval and one-time self-wakeup.
• Events: Slack message or worker-settled triggers.
• Recurring tasks: Saved rules with backend/model/budget.
• Scheduler location: Resident local daemon.
• Overlaps: Cron skips inflight; Slack allows concurrent runs.
• Retries: One-time wakeup rearms after crash for at-least-once delivery.
• Client independence: Closing desktop/CLI leaves daemon scheduler working.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: completion_conditions.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Automation architecture

   Finding: Persisted cron/once and Slack triggers route to master or worker; cron overlap skipped, Slack concurrent, once rearmed after crash for at-least-once. Older doc omits newer budget/trigger work, checked against pinned source.

   Locator

   Scheduler; overlap; action

   Retrieved

   2026-11-07

3. Rookery automation implementation

   Finding: Automation passes costBudgetUsd/maxTurns/provider to worker/master; untrusted Slack and worker results fenced with random nonce. Codex master accepts bypassPermissions only; provider fixed at creation.

   Locator

   runAutomationAction; options; applyVars

   Retrieved

   2026-11-07

Shared prompting

Typed value: Yes.

Distinct permitted Slack users can send instructions into the same persistent Rookery master thread. Each turn includes the sender identity and the master serializes its turns.

• Coprompting: Per-user allowlist checks route distinct users in the same team/channel/thread to the same master session.
• Ordering: The shared master session serializes its turns, as documented in the master/worker flow.
• Attribution: The prompt prefix retains Slack sender name/ID and thread/channel context.
• Permissions: Each Slack sender independently passes the user-ID allowlist or explicit allow-all gate.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: visibility, discussion, comments, presence, conflicts, plan_restrictions, owner_online.

1. Rookery: src/slack/handle-incoming.ts

   Finding: Slack input independently checks each human user ID against the allowlist (or configured allow-all). Session identity is team/channel/thread, not sender ID, so distinct permitted Slack users in the same thread call the same master session. The prompt prefix retains each sender name/ID. This uses separate human Slack identities, not a shared owner token.

   Locator

   isPermittedUser; buildSlackContextPrefix; threadKey; handleIncoming

   Retrieved

   2026-11-13

Team roles

Typed value: No.

Rookery has capability-token control, Slack user allowlists and external MCP read-only/full-control scope, without named human workspace roles or enterprise SSO.

• Organization roles: The source has no named human membership/role permission matrix.
• Sso: No enterprise SAML/OIDC implementation exists in the inspected identity/runtime surface.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: project_roles, membership, provisioning, plan_scope.

1. Rookery: src/daemon/auth.ts

   Finding: The daemon uses a local/shared capability token and Slack checks allowed human IDs. External MCP offers read-only versus full-control tool scope, without a named human membership/role permission matrix. The bounded source contains no enterprise SAML/OIDC SSO path; Slack/provider authentication is separate.

   Locator

   Daemon token/origin authorization; Slack user allowlist; settings schema; external MCP scopes

   Retrieved

   2026-11-13

SSO

Typed value: No.

Rookery has capability-token control, Slack user allowlists and external MCP read-only/full-control scope, without named human workspace roles or enterprise SSO.

• Organization roles: The source has no named human membership/role permission matrix.
• Sso: No enterprise SAML/OIDC implementation exists in the inspected identity/runtime surface.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: project_roles, membership, provisioning, plan_scope.

1. Rookery: src/daemon/auth.ts

   Finding: The daemon uses a local/shared capability token and Slack checks allowed human IDs. External MCP offers read-only versus full-control tool scope, without a named human membership/role permission matrix. The bounded source contains no enterprise SAML/OIDC SSO path; Slack/provider authentication is separate.

   Locator

   Daemon token/origin authorization; Slack user allowlist; settings schema; external MCP scopes

   Retrieved

   2026-11-13

Pull request workflow

Typed value: No.

Product manages worktrees/branches/diffs; instructed worker uses shell for commit/push/PR.

• Branches: Unique rookery worker branch.
• Worktrees: Provision Git worktree per worker.
• Commits: GitOps has no commit operation; the worker commits through its own bash only when instructed, without product commit state.
• Pull requests: GitOps has no push/PR operation; the worker runs git/gh in its shell only when instructed, so PRs are not product-managed state.
• Product state: Mission control shows branch/diff/checkpoints; PR body policy not established.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: comments, ci_response, rebase, conflicts.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

Review interface

Typed value: Yes.

Per-worker diffs, checkpoints, transcripts and attention queue guide review.

• Pending reviews: Attention bell unreviewed results.
• Change understanding: Monaco diff/file/git panels.
• Evidence navigation: Select worker transcript/diff/checkpoints.
• Request changes: Send worker followup.
• Retained context: Existing worktree and worker history.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: comments, shipping_guidance, effort, missed_evidence, keyboard, narrow_screen, context_switching, roles.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

Product license: Apache-2.0

Typed value: Yes. Apache-2.0.

Main application is Apache-2.0; proprietary provider SDK stays separately licensed.

• Client license: Apache-2.0.
• Server license: Daemon/application Apache-2.0.
• Hosted extensions: Third-party Anthropic SDK proprietary; not relicensed by app license.
• Source visibility: Public source.
• Source revision: 47c63c742ee92be40ee76fc72645b82f82a0c649

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: hosted_parity.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07

3. Rookery Third-party notice

   Finding: Third-party Anthropic SDK is separately proprietary; main app Apache-2.0 does not relicense dependency.

   Locator

   Anthropic SDK

   Retrieved

   2026-11-07

Product license: MIT

Typed value: No. Apache-2.0.

Main application is Apache-2.0; proprietary provider SDK stays separately licensed.

• Client license: Apache-2.0.
• Server license: Daemon/application Apache-2.0.
• Hosted extensions: Third-party Anthropic SDK proprietary; not relicensed by app license.
• Source visibility: Public source.
• Source revision: 47c63c742ee92be40ee76fc72645b82f82a0c649

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: hosted_parity.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07

3. Rookery Third-party notice

   Finding: Third-party Anthropic SDK is separately proprietary; main app Apache-2.0 does not relicense dependency.

   Locator

   Anthropic SDK

   Retrieved

   2026-11-07

Product license: GPL-3.0

Typed value: No. Apache-2.0.

Main application is Apache-2.0; proprietary provider SDK stays separately licensed.

• Client license: Apache-2.0.
• Server license: Daemon/application Apache-2.0.
• Hosted extensions: Third-party Anthropic SDK proprietary; not relicensed by app license.
• Source visibility: Public source.
• Source revision: 47c63c742ee92be40ee76fc72645b82f82a0c649

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: hosted_parity.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07

3. Rookery Third-party notice

   Finding: Third-party Anthropic SDK is separately proprietary; main app Apache-2.0 does not relicense dependency.

   Locator

   Anthropic SDK

   Retrieved

   2026-11-07

Product license: GPL-3.0-or-later

Typed value: No. Apache-2.0.

Main application is Apache-2.0; proprietary provider SDK stays separately licensed.

• Client license: Apache-2.0.
• Server license: Daemon/application Apache-2.0.
• Hosted extensions: Third-party Anthropic SDK proprietary; not relicensed by app license.
• Source visibility: Public source.
• Source revision: 47c63c742ee92be40ee76fc72645b82f82a0c649

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: hosted_parity.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07

3. Rookery Third-party notice

   Finding: Third-party Anthropic SDK is separately proprietary; main app Apache-2.0 does not relicense dependency.

   Locator

   Anthropic SDK

   Retrieved

   2026-11-07

Product license: AGPL-3.0

Typed value: No. Apache-2.0.

Main application is Apache-2.0; proprietary provider SDK stays separately licensed.

• Client license: Apache-2.0.
• Server license: Daemon/application Apache-2.0.
• Hosted extensions: Third-party Anthropic SDK proprietary; not relicensed by app license.
• Source visibility: Public source.
• Source revision: 47c63c742ee92be40ee76fc72645b82f82a0c649

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: hosted_parity.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07

3. Rookery Third-party notice

   Finding: Third-party Anthropic SDK is separately proprietary; main app Apache-2.0 does not relicense dependency.

   Locator

   Anthropic SDK

   Retrieved

   2026-11-07

Product license: AGPL-3.0-or-later

Typed value: No. Apache-2.0.

Main application is Apache-2.0; proprietary provider SDK stays separately licensed.

• Client license: Apache-2.0.
• Server license: Daemon/application Apache-2.0.
• Hosted extensions: Third-party Anthropic SDK proprietary; not relicensed by app license.
• Source visibility: Public source.
• Source revision: 47c63c742ee92be40ee76fc72645b82f82a0c649

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: hosted_parity.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07

3. Rookery Third-party notice

   Finding: Third-party Anthropic SDK is separately proprietary; main app Apache-2.0 does not relicense dependency.

   Locator

   Anthropic SDK

   Retrieved

   2026-11-07

Product license: Elastic License 2.0

Typed value: No. Apache-2.0.

Main application is Apache-2.0; proprietary provider SDK stays separately licensed.

• Client license: Apache-2.0.
• Server license: Daemon/application Apache-2.0.
• Hosted extensions: Third-party Anthropic SDK proprietary; not relicensed by app license.
• Source visibility: Public source.
• Source revision: 47c63c742ee92be40ee76fc72645b82f82a0c649

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: hosted_parity.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07

3. Rookery Third-party notice

   Finding: Third-party Anthropic SDK is separately proprietary; main app Apache-2.0 does not relicense dependency.

   Locator

   Anthropic SDK

   Retrieved

   2026-11-07

Product license: Custom terms

Typed value: No. Apache-2.0.

Main application is Apache-2.0; proprietary provider SDK stays separately licensed.

• Client license: Apache-2.0.
• Server license: Daemon/application Apache-2.0.
• Hosted extensions: Third-party Anthropic SDK proprietary; not relicensed by app license.
• Source visibility: Public source.
• Source revision: 47c63c742ee92be40ee76fc72645b82f82a0c649

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: hosted_parity.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07

3. Rookery Third-party notice

   Finding: Third-party Anthropic SDK is separately proprietary; main app Apache-2.0 does not relicense dependency.

   Locator

   Anthropic SDK

   Retrieved

   2026-11-07

Product license: Proprietary

Typed value: No. Apache-2.0.

Main application is Apache-2.0; proprietary provider SDK stays separately licensed.

• Client license: Apache-2.0.
• Server license: Daemon/application Apache-2.0.
• Hosted extensions: Third-party Anthropic SDK proprietary; not relicensed by app license.
• Source visibility: Public source.
• Source revision: 47c63c742ee92be40ee76fc72645b82f82a0c649

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: hosted_parity.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07

3. Rookery Third-party notice

   Finding: Third-party Anthropic SDK is separately proprietary; main app Apache-2.0 does not relicense dependency.

   Locator

   Anthropic SDK

   Retrieved

   2026-11-07

Self-hosting

Typed value: Yes.

Full local desktop/daemon source is self-hostable; history lives in local SQLite.

• Self hosting: Run own full Node 22 daemon/desktop.
• Vendor dependencies: Selected Anthropic/OpenAI provider; Slack/GitHub/Linear optional.
• Formats: SQLite DB, memory, logs and Git worktrees under ~/.rookery.
• Account independence: No Rookery hosted account described; model provider authentication required.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: export, import, cancellation, history_portability.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Data model

   Finding: Local SQLite sessions/messages/worker events/automation runs, worker checkpoints and persistent memory. No org multiuser role matrix established.

   Locator

   Sessions; worker events; checkpoints; memory

   Retrieved

   2026-11-07

Telemetry opt-out

Typed value: No.

Task context goes to the selected provider while Rookery history/settings remain local. The source provides local token/context accounting but no documented ADE telemetry opt-out control.

• Telemetry disclosure: No ADE analytics reporter exists in the inspected runtime; local usage accounting is not an outbound reporter.
• Telemetry controls: The complete settings/env/CLI surface supplies no ADE telemetry opt-out switch.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: artifacts, retention, deletion, training, subprocessors, telemetry_defaults.

1. Rookery: src/core/settings.ts

   Finding: The complete source settings/CLI contain no ADE analytics opt-out switch. result-telemetry.ts computes provider token/context usage for the local interface, and README says history, memory, tokens and logs stay local while task context goes to the chosen model provider. No ADE analytics reporter is present in the inspected runtime; provider telemetry controls are separate.

   Locator

   Settings and env registry; result-telemetry.ts; README Data handling

   Retrieved

   2026-11-13

Free access

Typed value: Yes.

Apache application is freely installable; model usage and own compute cost separately.

• Ongoing free: No application license fee under Apache-2.0.
• Self host cost: Own host and selected provider charges.
• Free scenarios: Full source local daemon/desktop install; no hosted free credit assumed.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: trial, credits_trial, paid_only, early_access, card_required, usage_caps, paid_evaluation.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07

Starting price: Free

Typed value: Yes. Free.

Apache application is freely installable; model usage and own compute cost separately.

• Ongoing free: No application license fee under Apache-2.0.
• Self host cost: Own host and selected provider charges.
• Free scenarios: Full source local daemon/desktop install; no hosted free credit assumed.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: trial, credits_trial, paid_only, early_access, card_required, usage_caps, paid_evaluation.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07

Starting price: Up to $20/month

Typed value: No. Free.

Apache application is freely installable; model usage and own compute cost separately.

• Ongoing free: No application license fee under Apache-2.0.
• Self host cost: Own host and selected provider charges.
• Free scenarios: Full source local daemon/desktop install; no hosted free credit assumed.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: trial, credits_trial, paid_only, early_access, card_required, usage_caps, paid_evaluation.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07

Starting price: $21–40/month

Typed value: No. Free.

Apache application is freely installable; model usage and own compute cost separately.

• Ongoing free: No application license fee under Apache-2.0.
• Self host cost: Own host and selected provider charges.
• Free scenarios: Full source local daemon/desktop install; no hosted free credit assumed.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: trial, credits_trial, paid_only, early_access, card_required, usage_caps, paid_evaluation.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07

Starting price: $41–100/month

Typed value: No. Free.

Apache application is freely installable; model usage and own compute cost separately.

• Ongoing free: No application license fee under Apache-2.0.
• Self host cost: Own host and selected provider charges.
• Free scenarios: Full source local daemon/desktop install; no hosted free credit assumed.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: trial, credits_trial, paid_only, early_access, card_required, usage_caps, paid_evaluation.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07

Starting price: Over $100/month

Typed value: No. Free.

Apache application is freely installable; model usage and own compute cost separately.

• Ongoing free: No application license fee under Apache-2.0.
• Self host cost: Own host and selected provider charges.
• Free scenarios: Full source local daemon/desktop install; no hosted free credit assumed.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: trial, credits_trial, paid_only, early_access, card_required, usage_caps, paid_evaluation.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07

Starting price: Contact for pricing

Typed value: No. Free.

Apache application is freely installable; model usage and own compute cost separately.

• Ongoing free: No application license fee under Apache-2.0.
• Self host cost: Own host and selected provider charges.
• Free scenarios: Full source local daemon/desktop install; no hosted free credit assumed.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: trial, credits_trial, paid_only, early_access, card_required, usage_caps, paid_evaluation.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07

Pricing model: Free, no paid plan

Typed value: Yes.

Rookery is Apache-2.0 open source with no paid plan published; you bring your own Anthropic/Codex API keys or CLI logins, and those providers bill for usage.

Checked

2026-11-10 · checked 5 days ago

Cross-check

cross-checked 2026-11-10

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Version

First-party pricing sources read 2026-11-10

• First-party pricing pages, terms and licences read 2026-11-10; no purchase, billing or authenticated account test.

1. CChuYong/rookery LICENSE (Apache-2.0)

   Finding: The Apache License 2.0 grants a perpetual, worldwide, no-charge, royalty-free copyright license to use and reproduce the code.

   Locator

   Section 2, Grant of Copyright License

   Retrieved

   2026-11-10

Pricing model: Free plan

Typed value: No.

Rookery is Apache-2.0 open source with no paid plan published; you bring your own Anthropic/Codex API keys or CLI logins, and those providers bill for usage.

• Model cost: You supply your own Anthropic or Codex API key or CLI login, so the provider bills for model usage. Rookery adds USD budget caps.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Version

First-party pricing sources read 2026-11-10

• First-party pricing pages, terms and licences read 2026-11-10; no purchase, billing or authenticated account test.

1. Rookery README

   Finding: Says Rookery's code is Apache-2.0 and you bring your own credentials: an Anthropic or Codex API key pasted in Settings, or existing CLI logins. It offers USD budgets per worker and mentions no paid plan.

   Locator

   Desktop app install paragraph; backends list; 'License & third-party notices'

   Retrieved

   2026-11-10

2. CChuYong/rookery LICENSE (Apache-2.0)

   Finding: The Apache License 2.0 grants a perpetual, worldwide, no-charge, royalty-free copyright license to use and reproduce the code.

   Locator

   Section 2, Grant of Copyright License

   Retrieved

   2026-11-10

Pricing model: Subscription

Typed value: No.

Rookery is Apache-2.0 open source with no paid plan published; you bring your own Anthropic/Codex API keys or CLI logins, and those providers bill for usage.

• Model cost: You supply your own Anthropic or Codex API key or CLI login, so the provider bills for model usage. Rookery adds USD budget caps.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Version

First-party pricing sources read 2026-11-10

• First-party pricing pages, terms and licences read 2026-11-10; no purchase, billing or authenticated account test.

1. Rookery README

   Finding: Says Rookery's code is Apache-2.0 and you bring your own credentials: an Anthropic or Codex API key pasted in Settings, or existing CLI logins. It offers USD budgets per worker and mentions no paid plan.

   Locator

   Desktop app install paragraph; backends list; 'License & third-party notices'

   Retrieved

   2026-11-10

2. CChuYong/rookery LICENSE (Apache-2.0)

   Finding: The Apache License 2.0 grants a perpetual, worldwide, no-charge, royalty-free copyright license to use and reproduce the code.

   Locator

   Section 2, Grant of Copyright License

   Retrieved

   2026-11-10

Pricing model: Per seat

Typed value: No.

Rookery is Apache-2.0 open source with no paid plan published; you bring your own Anthropic/Codex API keys or CLI logins, and those providers bill for usage.

• Model cost: You supply your own Anthropic or Codex API key or CLI login, so the provider bills for model usage. Rookery adds USD budget caps.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Version

First-party pricing sources read 2026-11-10

• First-party pricing pages, terms and licences read 2026-11-10; no purchase, billing or authenticated account test.

1. Rookery README

   Finding: Says Rookery's code is Apache-2.0 and you bring your own credentials: an Anthropic or Codex API key pasted in Settings, or existing CLI logins. It offers USD budgets per worker and mentions no paid plan.

   Locator

   Desktop app install paragraph; backends list; 'License & third-party notices'

   Retrieved

   2026-11-10

2. CChuYong/rookery LICENSE (Apache-2.0)

   Finding: The Apache License 2.0 grants a perpetual, worldwide, no-charge, royalty-free copyright license to use and reproduce the code.

   Locator

   Section 2, Grant of Copyright License

   Retrieved

   2026-11-10

Pricing model: Usage-based

Typed value: No.

Rookery is Apache-2.0 open source with no paid plan published; you bring your own Anthropic/Codex API keys or CLI logins, and those providers bill for usage.

• Model cost: You supply your own Anthropic or Codex API key or CLI login, so the provider bills for model usage. Rookery adds USD budget caps.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Version

First-party pricing sources read 2026-11-10

• First-party pricing pages, terms and licences read 2026-11-10; no purchase, billing or authenticated account test.

1. Rookery README

   Finding: Says Rookery's code is Apache-2.0 and you bring your own credentials: an Anthropic or Codex API key pasted in Settings, or existing CLI logins. It offers USD budgets per worker and mentions no paid plan.

   Locator

   Desktop app install paragraph; backends list; 'License & third-party notices'

   Retrieved

   2026-11-10

2. CChuYong/rookery LICENSE (Apache-2.0)

   Finding: The Apache License 2.0 grants a perpetual, worldwide, no-charge, royalty-free copyright license to use and reproduce the code.

   Locator

   Section 2, Grant of Copyright License

   Retrieved

   2026-11-10

Pricing model: Per machine or compute

Typed value: No.

Rookery is Apache-2.0 open source with no paid plan published; you bring your own Anthropic/Codex API keys or CLI logins, and those providers bill for usage.

• Model cost: You supply your own Anthropic or Codex API key or CLI login, so the provider bills for model usage. Rookery adds USD budget caps.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Version

First-party pricing sources read 2026-11-10

• First-party pricing pages, terms and licences read 2026-11-10; no purchase, billing or authenticated account test.

1. Rookery README

   Finding: Says Rookery's code is Apache-2.0 and you bring your own credentials: an Anthropic or Codex API key pasted in Settings, or existing CLI logins. It offers USD budgets per worker and mentions no paid plan.

   Locator

   Desktop app install paragraph; backends list; 'License & third-party notices'

   Retrieved

   2026-11-10

2. CChuYong/rookery LICENSE (Apache-2.0)

   Finding: The Apache License 2.0 grants a perpetual, worldwide, no-charge, royalty-free copyright license to use and reproduce the code.

   Locator

   Section 2, Grant of Copyright License

   Retrieved

   2026-11-10

Pricing model: Bring your own key

Typed value: Yes.

Rookery is Apache-2.0 open source with no paid plan published; you bring your own Anthropic/Codex API keys or CLI logins, and those providers bill for usage.

• Model cost: You supply your own Anthropic or Codex API key or CLI login, so the provider bills for model usage. Rookery adds USD budget caps.

Checked

2026-11-10 · checked 5 days ago

Cross-check

cross-checked 2026-11-10

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Version

First-party pricing sources read 2026-11-10

• First-party pricing pages, terms and licences read 2026-11-10; no purchase, billing or authenticated account test.

1. Rookery README

   Finding: Says Rookery's code is Apache-2.0 and you bring your own credentials: an Anthropic or Codex API key pasted in Settings, or existing CLI logins. It offers USD budgets per worker and mentions no paid plan.

   Locator

   Desktop app install paragraph; backends list; 'License & third-party notices'

   Retrieved

   2026-11-10

Pricing model: One-time purchase

Typed value: No.

Rookery is Apache-2.0 open source with no paid plan published; you bring your own Anthropic/Codex API keys or CLI logins, and those providers bill for usage.

• Model cost: You supply your own Anthropic or Codex API key or CLI login, so the provider bills for model usage. Rookery adds USD budget caps.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Version

First-party pricing sources read 2026-11-10

• First-party pricing pages, terms and licences read 2026-11-10; no purchase, billing or authenticated account test.

1. Rookery README

   Finding: Says Rookery's code is Apache-2.0 and you bring your own credentials: an Anthropic or Codex API key pasted in Settings, or existing CLI logins. It offers USD budgets per worker and mentions no paid plan.

   Locator

   Desktop app install paragraph; backends list; 'License & third-party notices'

   Retrieved

   2026-11-10

2. CChuYong/rookery LICENSE (Apache-2.0)

   Finding: The Apache License 2.0 grants a perpetual, worldwide, no-charge, royalty-free copyright license to use and reproduce the code.

   Locator

   Section 2, Grant of Copyright License

   Retrieved

   2026-11-10

Keeps going with laptop closed

Typed value: Yes.

The operator-owned resident daemon runs on a local machine or deliberately configured headless server, independently of its desktop/CLI/Slack clients. Rookery supplies no managed execution cloud.

• Byo remote: The documented headless daemon supports an explicit non-loopback network bind for operator hosting.
• Managed cloud: The complete runtime path consists of an installed operator daemon and native provider processes, without a Rookery-operated compute service.
• Client disconnect: Daemon sessions/workers survive client disconnects; a separate client laptop can close while the operator server runs.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: hybrid, payer, resources, region, expiry, other_device_continuation.

1. Rookery: docs/reference/settings-and-env.md

   Finding: The documented headless daemon can bind an operator-selected network host through ROOKERY_HOST with an explicit ROOKERY_ALLOW_NONLOOPBACK override. CLI, external MCP and Slack act as clients of its resident process; daemon sessions/workers survive client disconnects. An operator can deploy that headless daemon on their server; no Rookery-managed compute service is implemented.

   Locator

   ROOKERY_HOST; README Headless / CLI; src/daemon/server.ts remote bind gate

   Retrieved

   2026-11-13

Open-source license

Typed value: Yes. Apache-2.0.

Main application is Apache-2.0; proprietary provider SDK stays separately licensed.

• Client license: Apache-2.0.
• Server license: Daemon/application Apache-2.0.
• Hosted extensions: Third-party Anthropic SDK proprietary; not relicensed by app license.
• Source visibility: Public source.
• Source revision: 47c63c742ee92be40ee76fc72645b82f82a0c649

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: hosted_parity.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07

3. Rookery Third-party notice

   Finding: Third-party Anthropic SDK is separately proprietary; main app Apache-2.0 does not relicense dependency.

   Locator

   Anthropic SDK

   Retrieved

   2026-11-07

Any desktop app

Typed value: Yes.

Rookery supplies native desktop, CLI and Slack clients for its resident daemon. The released source has no standalone browser or product-owned native phone client.

• Desktop os: macOS Apple Silicon DMG, Linux x64 AppImage, Windows x64 EXE.
• Mobile apps: The complete client inventory is desktop, CLI and Slack, with no native Rookery phone application.
• Browser: The daemon exposes protocol/control routes rather than a browser frontend; the desktop renderer depends on Electron preload.
• Mobile browser: There is no released standalone browser client; Slack phone access is third-party.
• Cli: Product CLI auto-starts daemon; Node 22 required for headless.
• Task actions: Slack thread runs same persistent session and can relay worker activity.
• Notifications: Attention bell ranks blocked questions, failure, unreviewed results.
• Cross device continuity: Slack thread remains same daemon session across restarts; no phone app assumed.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: editor_extensions.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery v0.6.0 release

   Finding: Release v0.6.0 published 2026-10-19 with macOS arm64 DMG, Linux x86_64 AppImage and Windows x64 EXE assets. Release notes describe a Slack Stop button, Claude Agent SDK and Codex CLI updates and cost-accounting fixes. Capability claims stay scoped to pinned main, not a binary test.

   Locator

   Release date and assets

   Retrieved

   2026-11-07

   Source date

   2026-10-19

Any phone client

Typed value: No.

Rookery supplies native desktop, CLI and Slack clients for its resident daemon. The released source has no standalone browser or product-owned native phone client.

• Mobile apps: The complete client inventory is desktop, CLI and Slack, with no native Rookery phone application.
• Browser: The daemon exposes protocol/control routes rather than a browser frontend; the desktop renderer depends on Electron preload.
• Mobile browser: There is no released standalone browser client; Slack phone access is third-party.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: editor_extensions.

1. Rookery: docs/architecture/overview.md

   Finding: The complete thin-client inventory is native Electron desktop, CLI and embedded Slack. The daemon serves health/control/MCP and WebSocket commands; it does not serve a standalone browser frontend. The renderer depends on an Electron preload bridge and the development Vite server is not a released browser product. No native iOS/Android client is supplied; Slack mobile is a third-party client.

   Locator

   System shape; apps/desktop Electron main/preload; daemon HTTP route and origin checks

   Retrieved

   2026-11-13

rookery:ACC-01

Rookery supplies native desktop, CLI and Slack clients for its resident daemon. The released source has no standalone browser or product-owned native phone client.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: editor_extensions.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery v0.6.0 release

   Finding: Release v0.6.0 published 2026-10-19 with macOS arm64 DMG, Linux x86_64 AppImage and Windows x64 EXE assets. Release notes describe a Slack Stop button, Claude Agent SDK and Codex CLI updates and cost-accounting fixes. Capability claims stay scoped to pinned main, not a binary test.

   Locator

   Release date and assets

   Retrieved

   2026-11-07

   Source date

   2026-10-19

3. Rookery: docs/architecture/overview.md

   Finding: The complete thin-client inventory is native Electron desktop, CLI and embedded Slack. The daemon serves health/control/MCP and WebSocket commands; it does not serve a standalone browser frontend. The renderer depends on an Electron preload bridge and the development Vite server is not a released browser product. No native iOS/Android client is supplied; Slack mobile is a third-party client.

   Locator

   System shape; apps/desktop Electron main/preload; daemon HTTP route and origin checks

   Retrieved

   2026-11-13

rookery:ACC-02

Claude and Codex are the only product-owned session/worker backends. Other agents may drive Rookery through external MCP, which is separate from running them as Rookery harnesses.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery: src/daemon/server.ts

   Finding: The product-owned session and worker backend registries contain only Claude and Codex. External MCP can be called by Cursor or other clients to drive Rookery workers, but it does not launch those client harnesses as Rookery agents. The registry has no user custom-agent adapter path.

   Locator

   workerBackends and SessionManager backends composition; README Backends & authentication

   Retrieved

   2026-11-13

rookery:ACC-03

Own provider API keys or native Claude/Codex login enable agents.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-11

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: vendor_credits, local_models, vendor_account_requirement.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Settings

   Finding: Settings stored locally, secret getters write-only; binds127.0.0.1 default, warns for plaintext token on remote bind. Slack allowlist fail-closed; API-key fallback to native CLI OAuth.

   Locator

   Local database; secrets; network; Slack

   Retrieved

   2026-11-07

rookery:ACC-04

Bundled desktop runtime or Node 22 headless setup are documented.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: managed_cloud_setup, byo_vps_onboarding.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery fleet implementation

   Finding: Pinned code resumes background rows as idle with empty background task set, preserves budgets/mode, supports cross-provider handoff; no worker concurrency cap. Same worker reload keeps identity/worktree.

   Locator

   rehydrate; fork; spawn; requestCapabilityReload

   Retrieved

   2026-11-07

rookery:ACC-05

CLI and scoped external MCP drive daemon workers.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-11

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: sdk, webhooks, stability.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Settings

   Finding: Settings stored locally, secret getters write-only; binds127.0.0.1 default, warns for plaintext token on remote bind. Slack allowlist fail-closed; API-key fallback to native CLI OAuth.

   Locator

   Local database; secrets; network; Slack

   Retrieved

   2026-11-07

rookery:ACC-06

Trusted capability packs supply instructions/skills/MCP to scoped agents.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: custom_tools.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Master and worker turns

   Finding: Master turns serialized, workers have FIFO pending followups. Worker completion notifies parent, persisted pending notification retry. Per-turn trusted capability overlays and separate generated Codex homes; live reload explicitly required for worker.

   Locator

   Serialization; notifications; capabilities; sessions

   Retrieved

   2026-11-07

rookery:ACC-07

Electron/React desktop wraps daemon-backed mission control.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: mobile_implementation, hybrids.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery desktop implementation

   Finding: Accessible desktop README features are built by Electron/Vite with React/Monaco and bundled daemon dependencies.

   Locator

   main; build scripts; dependencies

   Retrieved

   2026-11-07

rookery:PLAN-01

Prompt, spawn dialog, GitHub issue or Linear ticket can initiate worker.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: chat_git_triggers, authoritative_tracker, sync, supported_edits, external_roundtrips.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

rookery:PLAN-02

Plan cards and session memory retain planning conversation; no native spec approval lifecycle established.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: acceptance_criteria, editors, revisions, amendment.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Master and worker turns

   Finding: Master turns serialized, workers have FIFO pending followups. Worker completion notifies parent, persisted pending notification retry. Per-turn trusted capability overlays and separate generated Codex homes; live reload explicitly required for worker.

   Locator

   Serialization; notifications; capabilities; sessions

   Retrieved

   2026-11-07

rookery:PLAN-03

Home sessions retain child worker relationships; general issue dependency enforcement unknown.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: epics, blockers, readiness, enforcement, task_to_epic, workflow_constraints.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

rookery:PLAN-04

Local master memory and trusted scope-aware capability packs share context.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: project_docs, freshness.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Master and worker turns

   Finding: Master turns serialized, workers have FIFO pending followups. Worker completion notifies parent, persisted pending notification retry. Per-turn trusted capability overlays and separate generated Codex homes; live reload explicitly required for worker.

   Locator

   Serialization; notifications; capabilities; sessions

   Retrieved

   2026-11-07

3. Rookery Data model

   Finding: Local SQLite sessions/messages/worker events/automation runs, worker checkpoints and persistent memory. No org multiuser role matrix established.

   Locator

   Sessions; worker events; checkpoints; memory

   Retrieved

   2026-11-07

rookery:PLAN-05

Trusted MCPs and repository context inform agent tasks.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: code_search, indexing, multimodal_inputs, citations, conflict_detection, review_enforcement.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Master and worker turns

   Finding: Master turns serialized, workers have FIFO pending followups. Worker completion notifies parent, persisted pending notification retry. Per-turn trusted capability overlays and separate generated Codex homes; live reload explicitly required for worker.

   Locator

   Serialization; notifications; capabilities; sessions

   Retrieved

   2026-11-07

rookery:PLAN-06

Rookery persists master/worker agent sessions and external ticket references, without an independent native issue/task record distinct from the agent session lifecycle.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: edit, discuss, prioritize, label, assign, search, filter, archive, reopen, project_epic_views, idea_parking, explicit_dispatch, metadata, external_tracker_requirement.

1. Rookery: src/persistence/db.ts

   Finding: The complete persisted/domain model contains conversations, worker agent sessions, worktrees/checkpoints, memories, repos, automations and capability settings. Worker ticket_key/ticket_url are external ticket references. There is no independent native issue/task record or lifecycle distinct from these agent sessions; provider workflow-task events remain harness session activity.

   Locator

   Complete schema/migrations; repositories.ts; docs/reference/data-model.md and protocol/messages.ts

   Retrieved

   2026-11-13

rookery:COORD-01

Global fleet runs parallel worktree workers without a concurrency cap.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: observed_concurrency.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery fleet implementation

   Finding: Pinned code resumes background rows as idle with empty background task set, preserves budgets/mode, supports cross-provider handoff; no worker concurrency cap. Same worker reload keeps identity/worktree.

   Locator

   rehydrate; fork; spawn; requestCapabilityReload

   Retrieved

   2026-11-07

rookery:COORD-02

Master or human dispatches workers and routes followups.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: claims, duplicate_prevention, ownership_enforcement.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

rookery:COORD-03

Shipped daemon orchestrator delegates inspectable Claude/Codex worktree workers.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: authentication.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

3. Rookery Master and worker turns

   Finding: Master turns serialized, workers have FIFO pending followups. Worker completion notifies parent, persisted pending notification retry. Per-turn trusted capability overlays and separate generated Codex homes; live reload explicitly required for worker.

   Locator

   Serialization; notifications; capabilities; sessions

   Retrieved

   2026-11-07

rookery:COORD-04

Persistent daemon rules trigger master turns or worker spawns without client.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: completion_conditions.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Automation architecture

   Finding: Persisted cron/once and Slack triggers route to master or worker; cron overlap skipped, Slack concurrent, once rearmed after crash for at-least-once. Older doc omits newer budget/trigger work, checked against pinned source.

   Locator

   Scheduler; overlap; action

   Retrieved

   2026-11-07

3. Rookery automation implementation

   Finding: Automation passes costBudgetUsd/maxTurns/provider to worker/master; untrusted Slack and worker results fenced with random nonce. Codex master accepts bypassPermissions only; provider fixed at creation.

   Locator

   runAutomationAction; options; applyVars

   Retrieved

   2026-11-07

rookery:COORD-05

Messages queue at turn boundaries; interrupt/stop and ranked attention support intervention.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: pause, escalation, visible_errors, chat_terminal_parity.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Master and worker turns

   Finding: Master turns serialized, workers have FIFO pending followups. Worker completion notifies parent, persisted pending notification retry. Per-turn trusted capability overlays and separate generated Codex homes; live reload explicitly required for worker.

   Locator

   Serialization; notifications; capabilities; sessions

   Retrieved

   2026-11-07

3. Rookery fleet implementation

   Finding: Pinned code resumes background rows as idle with empty background task set, preserves budgets/mode, supports cross-provider handoff; no worker concurrency cap. Same worker reload keeps identity/worktree.

   Locator

   rehydrate; fork; spawn; requestCapabilityReload

   Retrieved

   2026-11-07

rookery:COORD-06

Mission control presents master sessions and global live worker fleet.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: fleet_fixture, dependencies, navigation_errors, fixture_mode.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

rookery:COORD-07

Single session, worker fleet or automation supports natural-language custom orchestration.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: growing_epic, discoverability, auth_friction.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Master and worker turns

   Finding: Master turns serialized, workers have FIFO pending followups. Worker completion notifies parent, persisted pending notification retry. Per-turn trusted capability overlays and separate generated Codex homes; live reload explicitly required for worker.

   Locator

   Serialization; notifications; capabilities; sessions

   Retrieved

   2026-11-07

rookery:RUN-01

The operator-owned resident daemon runs on a local machine or deliberately configured headless server, independently of its desktop/CLI/Slack clients. Rookery supplies no managed execution cloud.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: hybrid, payer, resources, region, expiry, other_device_continuation.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Settings

   Finding: Settings stored locally, secret getters write-only; binds127.0.0.1 default, warns for plaintext token on remote bind. Slack allowlist fail-closed; API-key fallback to native CLI OAuth.

   Locator

   Local database; secrets; network; Slack

   Retrieved

   2026-11-07

3. Rookery: docs/reference/settings-and-env.md

   Finding: The documented headless daemon can bind an operator-selected network host through ROOKERY_HOST with an explicit ROOKERY_ALLOW_NONLOOPBACK override. CLI, external MCP and Slack act as clients of its resident process; daemon sessions/workers survive client disconnects. An operator can deploy that headless daemon on their server; no Rookery-managed compute service is implemented.

   Locator

   ROOKERY_HOST; README Headless / CLI; src/daemon/server.ts remote bind gate

   Retrieved

   2026-11-13

rookery:RUN-02

Rookery workers run native agent processes in separate Git worktrees on the daemon host; they have no product-managed container or VM isolation option.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: os_sandbox, filesystem, process, network, secrets.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

3. Rookery: src/core/fleet-orchestrator.ts

   Finding: Workers run native provider processes rooted in product-managed Git worktrees on the daemon host. The bounded spawn/backend paths implement no Docker/container or VM provisioning; a logical container session in session-manager.ts is a database/session grouping, not OS isolation.

   Locator

   Worker spawn/rehydration; src/core/git-ops.ts; Claude/Codex backend process launch

   Retrieved

   2026-11-13

rookery:RUN-03

Daemon restart reconstructs resumable workers only if session handle and worktree survive.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: worker_crash, expiry, process_reconnect, duplicate_actions, multi_day_continuity.

1. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

2. Rookery Master and worker turns

   Finding: Master turns serialized, workers have FIFO pending followups. Worker completion notifies parent, persisted pending notification retry. Per-turn trusted capability overlays and separate generated Codex homes; live reload explicitly required for worker.

   Locator

   Serialization; notifications; capabilities; sessions

   Retrieved

   2026-11-07

3. Rookery fleet implementation

   Finding: Pinned code resumes background rows as idle with empty background task set, preserves budgets/mode, supports cross-provider handoff; no worker concurrency cap. Same worker reload keeps identity/worktree.

   Locator

   rehydrate; fork; spawn; requestCapabilityReload

   Retrieved

   2026-11-07

rookery:RUN-04

Bundled runtime and scoped secret/environment setup support local execution.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: caches, snapshots, ports, duplicate_installs, automatic_repair.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Settings

   Finding: Settings stored locally, secret getters write-only; binds127.0.0.1 default, warns for plaintext token on remote bind. Slack allowlist fail-closed; API-key fallback to native CLI OAuth.

   Locator

   Local database; secrets; network; Slack

   Retrieved

   2026-11-07

rookery:RUN-05

Worker USD budgets and Claude per-send turn caps stop at observed turn results.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: time_limits, token_limits, timeouts.

1. Rookery Master and worker turns

   Finding: Master turns serialized, workers have FIFO pending followups. Worker completion notifies parent, persisted pending notification retry. Per-turn trusted capability overlays and separate generated Codex homes; live reload explicitly required for worker.

   Locator

   Serialization; notifications; capabilities; sessions

   Retrieved

   2026-11-07

2. Rookery worker budget and recovery

   Finding: Worker checks per-send turn count, lifetime USD budget and repeated aborted/errored turns. Codex reports one subturn so maxTurns>1 does not cap Codex; cost budget is its runaway guard. Stops at observed result boundary, not hard prepaid guarantee.

   Locator

   consume turn_end; maxTurns; costBudgetUsd; abort-loop breaker

   Retrieved

   2026-11-07

3. Rookery automation implementation

   Finding: Automation passes costBudgetUsd/maxTurns/provider to worker/master; untrusted Slack and worker results fenced with random nonce. Codex master accepts bypassPermissions only; provider fixed at creation.

   Locator

   runAutomationAction; options; applyVars

   Retrieved

   2026-11-07

rookery:RUN-06

Worker states, transcripts and budget/loop notices expose progress and failure.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: traces, usage_export, task_stats, project_stats, approval_status, performance_method, responsiveness.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

3. Rookery worker budget and recovery

   Finding: Worker checks per-send turn count, lifetime USD budget and repeated aborted/errored turns. Codex reports one subturn so maxTurns>1 does not cap Codex; cost budget is its runaway guard. Stops at observed result boundary, not hard prepaid guarantee.

   Locator

   consume turn_end; maxTurns; costBudgetUsd; abort-loop breaker

   Retrieved

   2026-11-07

rookery:RUN-07

Local usage dashboard and worker cost estimates support spend visibility.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: task_cost, epic_cost, harness_aggregation, subscription_allowance, provider_reconciliation, compute_cost, export, drilldown.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Settings

   Finding: Settings stored locally, secret getters write-only; binds127.0.0.1 default, warns for plaintext token on remote bind. Slack allowlist fail-closed; API-key fallback to native CLI OAuth.

   Locator

   Local database; secrets; network; Slack

   Retrieved

   2026-11-07

3. Rookery worker budget and recovery

   Finding: Worker checks per-send turn count, lifetime USD budget and repeated aborted/errored turns. Codex reports one subturn so maxTurns>1 does not cap Codex; cost budget is its runaway guard. Stops at observed result boundary, not hard prepaid guarantee.

   Locator

   consume turn_end; maxTurns; costBudgetUsd; abort-loop breaker

   Retrieved

   2026-11-07

rookery:RUN-08

No fleet concurrency cap; per-worker budgets provide limited control.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: queues, cpu_ram, backpressure, host_awareness, check_reuse, check_deduplication, bounded_tests, fairness.

1. Rookery worker budget and recovery

   Finding: Worker checks per-send turn count, lifetime USD budget and repeated aborted/errored turns. Codex reports one subturn so maxTurns>1 does not cap Codex; cost budget is its runaway guard. Stops at observed result boundary, not hard prepaid guarantee.

   Locator

   consume turn_end; maxTurns; costBudgetUsd; abort-loop breaker

   Retrieved

   2026-11-07

2. Rookery fleet implementation

   Finding: Pinned code resumes background rows as idle with empty background task set, preserves budgets/mode, supports cross-provider handoff; no worker concurrency cap. Same worker reload keeps identity/worktree.

   Locator

   rehydrate; fork; spawn; requestCapabilityReload

   Retrieved

   2026-11-07

rookery:TEAM-01

Distinct permitted Slack users can send instructions into the same persistent Rookery master thread. Each turn includes the sender identity and the master serializes its turns.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: visibility, discussion, comments, presence, conflicts, plan_restrictions, owner_online.

1. Rookery Master and worker turns

   Finding: Master turns serialized, workers have FIFO pending followups. Worker completion notifies parent, persisted pending notification retry. Per-turn trusted capability overlays and separate generated Codex homes; live reload explicitly required for worker.

   Locator

   Serialization; notifications; capabilities; sessions

   Retrieved

   2026-11-07

2. Rookery: src/slack/handle-incoming.ts

   Finding: Slack input independently checks each human user ID against the allowlist (or configured allow-all). Session identity is team/channel/thread, not sender ID, so distinct permitted Slack users in the same thread call the same master session. The prompt prefix retains each sender name/ID. This uses separate human Slack identities, not a shared owner token.

   Locator

   isPermittedUser; buildSlackContextPrefix; threadKey; handleIncoming

   Retrieved

   2026-11-13

rookery:TEAM-02

Rookery has capability-token control, Slack user allowlists and external MCP read-only/full-control scope, without named human workspace roles or enterprise SSO.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: project_roles, membership, provisioning, plan_scope.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Settings

   Finding: Settings stored locally, secret getters write-only; binds127.0.0.1 default, warns for plaintext token on remote bind. Slack allowlist fail-closed; API-key fallback to native CLI OAuth.

   Locator

   Local database; secrets; network; Slack

   Retrieved

   2026-11-07

3. Rookery: src/daemon/auth.ts

   Finding: The daemon uses a local/shared capability token and Slack checks allowed human IDs. External MCP offers read-only versus full-control tool scope, without a named human membership/role permission matrix. The bounded source contains no enterprise SAML/OIDC SSO path; Slack/provider authentication is separate.

   Locator

   Daemon token/origin authorization; Slack user allowlist; settings schema; external MCP scopes

   Retrieved

   2026-11-13

rookery:TEAM-03

Headless defaults autoapprove tools; trusted capability digest and MCP scope are separate gates.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: command, network, secret, delivery, approver_identity, lifetime, tunnels.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery automation implementation

   Finding: Automation passes costBudgetUsd/maxTurns/provider to worker/master; untrusted Slack and worker results fenced with random nonce. Codex master accepts bypassPermissions only; provider fixed at creation.

   Locator

   runAutomationAction; options; applyVars

   Retrieved

   2026-11-07

rookery:TEAM-04

Local session/worker events and checkpoint records persist decisions and activity.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: approvals, edits, decisions, cross_user_persistence, export, integrity.

1. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

2. Rookery Master and worker turns

   Finding: Master turns serialized, workers have FIFO pending followups. Worker completion notifies parent, persisted pending notification retry. Per-turn trusted capability overlays and separate generated Codex homes; live reload explicitly required for worker.

   Locator

   Serialization; notifications; capabilities; sessions

   Retrieved

   2026-11-07

3. Rookery Data model

   Finding: Local SQLite sessions/messages/worker events/automation runs, worker checkpoints and persistent memory. No org multiuser role matrix established.

   Locator

   Sessions; worker events; checkpoints; memory

   Retrieved

   2026-11-07

rookery:TEAM-05

Per-worker diffs, checkpoints, transcripts and attention queue guide review.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: comments, shipping_guidance, effort, missed_evidence, keyboard, narrow_screen, context_switching, roles.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

rookery:TEAM-06

Forks preserve conversation into same or different provider; colleague access itself unknown.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: ongoing_takeover, same_task, decisions, permissions, runtime_context, owner_disconnect, ownership, attribution.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery fleet implementation

   Finding: Pinned code resumes background rows as idle with empty background task set, preserves budgets/mode, supports cross-provider handoff; no worker concurrency cap. Same worker reload keeps identity/worktree.

   Locator

   rehydrate; fork; spawn; requestCapabilityReload

   Retrieved

   2026-11-07

rookery:SHIP-01

Workspace files, diffs, transcripts and Git checkpoints remain locally.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: screenshots, recordings, previews, gallery, task_links, prompt_leakage.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

rookery:SHIP-02

Reviewer spawning is configurable worker-settled automation, not an enforced exact-revision ship gate.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: tests, lint, types, ci, spec_checks, required_checks, failure_blocking, requirement_conflicts.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

rookery:SHIP-03

Product manages worktrees/branches/diffs; instructed worker uses shell for commit/push/PR.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: comments, ci_response, rebase, conflicts.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

rookery:SHIP-04

Worker shell can run delivery commands when instructed; no separate native merge/deploy authority established.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: approve, merge, release, deploy, exact_revision.

1. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

rookery:SHIP-05

Per-turn checkpoints snapshot tracked and untracked work for local restore.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: pr_links, build_links, deployment_links, delivery_status, revert, stale_approval_invalidation.

1. Rookery Fleet lifecycle

   Finding: Persistent worker IDs/worktrees/branches; lazy SDK resume after daemon restart if session/worktree exist, otherwise orphaned. Stop keeps branch; discard destroys. Checkpoint restores only non-running work. GitOps does not commit/push/openPR; worker bash does when instructed.

   Locator

   Spawn; checkpoint; rehydrate; GitOps boundary

   Retrieved

   2026-11-07

rookery:SHIP-06

Attention queue ranks many worker results for review.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: grouping, risk_size_filters, artifacts, request_changes, exact_revision_approval, dependency_queues, stale_approval_invalidation, check_deduplication.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

rookery:OWN-01

Main application is Apache-2.0; proprietary provider SDK stays separately licensed.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: hosted_parity.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07

3. Rookery Third-party notice

   Finding: Third-party Anthropic SDK is separately proprietary; main app Apache-2.0 does not relicense dependency.

   Locator

   Anthropic SDK

   Retrieved

   2026-11-07

rookery:OWN-02

Full local desktop/daemon source is self-hostable; history lives in local SQLite.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: export, import, cancellation, history_portability.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Data model

   Finding: Local SQLite sessions/messages/worker events/automation runs, worker checkpoints and persistent memory. No org multiuser role matrix established.

   Locator

   Sessions; worker events; checkpoints; memory

   Retrieved

   2026-11-07

rookery:OWN-03

Task context goes to the selected provider while Rookery history/settings remain local. The source provides local token/context accounting but no documented ADE telemetry opt-out control.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Documentation and pinned source inspection only; no hands-on scenario was run.
• Other atomic questions remain unestablished: artifacts, retention, deletion, training, subprocessors, telemetry_defaults.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Master and worker turns

   Finding: Master turns serialized, workers have FIFO pending followups. Worker completion notifies parent, persisted pending notification retry. Per-turn trusted capability overlays and separate generated Codex homes; live reload explicitly required for worker.

   Locator

   Serialization; notifications; capabilities; sessions

   Retrieved

   2026-11-07

3. Rookery Settings

   Finding: Settings stored locally, secret getters write-only; binds127.0.0.1 default, warns for plaintext token on remote bind. Slack allowlist fail-closed; API-key fallback to native CLI OAuth.

   Locator

   Local database; secrets; network; Slack

   Retrieved

   2026-11-07

4. Rookery: src/core/settings.ts

   Finding: The complete source settings/CLI contain no ADE analytics opt-out switch. result-telemetry.ts computes provider token/context usage for the local interface, and README says history, memory, tokens and logs stay local while task context goes to the chosen model provider. No ADE analytics reporter is present in the inspected runtime; provider telemetry controls are separate.

   Locator

   Settings and env registry; result-telemetry.ts; README Data handling

   Retrieved

   2026-11-13

rookery:OWN-04

Rookery is Apache-2.0 open source with no paid plan published; you bring your own Anthropic/Codex API keys or CLI logins, and those providers bill for usage.

Checked

2026-11-10 · checked 5 days ago

Cross-check

cross-checked 2026-11-10

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Version

First-party pricing sources read 2026-11-10

• First-party pricing pages, terms and licences read 2026-11-10; no purchase, billing or authenticated account test.

1. Rookery README

   Finding: Says Rookery's code is Apache-2.0 and you bring your own credentials: an Anthropic or Codex API key pasted in Settings, or existing CLI logins. It offers USD budgets per worker and mentions no paid plan.

   Locator

   Desktop app install paragraph; backends list; 'License & third-party notices'

   Retrieved

   2026-11-10

2. CChuYong/rookery LICENSE (Apache-2.0)

   Finding: The Apache License 2.0 grants a perpetual, worldwide, no-charge, royalty-free copyright license to use and reproduce the code.

   Locator

   Section 2, Grant of Copyright License

   Retrieved

   2026-11-10

rookery:OWN-06

Public desktop installers and source are available; v0.6.0 released October 19.

Checked

2026-11-07 · checked 1 week ago

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: response_commitments, status_history, deprecation, export_options.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery v0.6.0 release

   Finding: Release v0.6.0 published 2026-10-19 with macOS arm64 DMG, Linux x86_64 AppImage and Windows x64 EXE assets. Release notes describe a Slack Stop button, Claude Agent SDK and Codex CLI updates and cost-accounting fixes. Capability claims stay scoped to pinned main, not a binary test.

   Locator

   Release date and assets

   Retrieved

   2026-11-07

   Source date

   2026-10-19

rookery:OWN-08

Apache application is freely installable; model usage and own compute cost separately.

Checked

2026-11-07 · checked 1 week ago

Cross-check

cross-checked 2026-11-07

Plan

Not specified in this finding

Surface

desktop; daemon; cli

Availability

source only

Version

Pinned source 47c63c742ee92be40ee76fc72645b82f82a0c649; v0.6.0 release separately checked

• Not established by this source pass: trial, credits_trial, paid_only, early_access, card_required, usage_caps, paid_evaluation.

1. Rookery README

   Finding: Local resident daemon with master/worker orchestration, isolated Git worktrees, native desktop/CLI/Slack, Claude/Codex selectable per surface. Capability packs with digest trust; automation, attention bell and local usage. Own native CLI login/API keys. App source Apache2; provider SDK separate.

   Locator

   Features; install; backends; capability center; data handling

   Retrieved

   2026-11-07

2. Rookery Application license

   Finding: Application source licensed Apache-2.0.

   Locator

   Apache License2.0

   Retrieved

   2026-11-07