What's new in Grain

Security

• Update the desktop app to supported Electron 43.8.3, including patched Chromium and Node certificate handling for the compromised eMudhra certificate chains.
• Build the bundled CLI with the patched Node 24.22.1 baseline.

New

• Agents can copy files to and from anywhere in a grain's sandbox workspace, not only app/. grain upload accepts an absolute /project/workspace/... path, and the new grain download copies a sandbox file, such as a generated PDF, back to your computer. Over MCP they are grain_upload and grain_download, so file contents no longer go through grain_exec.

Improved

• Over MCP, grain_list returns a compact page of grains with a cursor for the next one, so a large organization no longer floods the agent's context.
• grain_metadata and grain_checkout tell agents which folder a grain is filed in, what a checkout covers, and where the sandbox folders are.
• In a grain's side chat, asking for a new document adds a file to that grain instead of creating a new grain.
• Large pushes through MCP run in the background and land as one revision. The agent checks on them with grain_operation_status.
• Agents are told to pass an organization's ID, not its name.

Fixed

• grain_exec over MCP returns as soon as the command finishes, instead of after about 40 seconds.
• CLI commands in agent terminals no longer fail within seconds with "did not finish starting within 30 seconds", and no longer act as if they were MCP calls.
• grain exec -- <command> runs the command instead of passing -- to the shell.
• A push that was stopped partway no longer blocks the next push on the same checkout.

New

• Share a grain from the desktop app with one link. The Share dialog adds people as guests, restricts the link to them, shows who viewed it, and lets owners and builders reveal the current share password. Links can open a page of an app grain (?path=) or a file of a document grain (?file=).
• Shared grains open in the browser at rungrain.com/w, with the grain's own access rules.
• App connections: connect apps like Gmail or GitHub once, then let your agents use them from Grain. Find them under Connections in the grain browser, in a workspace's Connections tab, or from the chip in the agent sidebar.
• Export the current view as a PDF.
• Send feedback from the CLI with grain feedback, or ask your agent to use grain_feedback.
• New Artifacts and Apps start from a welcome page.
• grain app restart (and grain_app_restart) restarts a grain's app server.

Improved

• Grain has a deep teal look, with more readable primary buttons. Dialogs open at their final size with loading placeholders, so nothing jumps while they load.
• Filter the grain browser by type, creator and date from the Filter button next to New; search covers the current view.
• Long-running agent commands keep going as background jobs instead of timing out, and the first command on a cold sandbox no longer times out.
• The free tier includes three times as much usage.
• When the agent sidebar can't open a local checkout, it shows the underlying cause.

Fixed

• Pushing with a title no longer fails with "fetch failed".
• Sync handles deletions cleanly and repairs checkouts that got stuck after converged changes.
• Grain links open inside the app instead of showing "Open in Grain".
• Comments refresh when you open them and when the window regains focus.

Fixed

• When more than one copy of Claude Code or Codex is on your PATH (for example a WinGet install and the native installer), Grain uses the first one new enough for it, so setup no longer reports "Agent status unavailable".
• Agent setup explains what went wrong, such as an agent version that is too old, and which copy Grain checked.
• grain login says "this computer" instead of "this Mac".

New

• Grain runs on Windows and Linux. Download it from rungrain.com, or install it from a terminal with curl -fsSL https://rungrain.com/install.sh | sh (macOS, Linux) or irm https://rungrain.com/install.ps1 | iex (Windows).
• grain login works on every system. It saves credentials in the macOS Keychain, Windows' per-user encryption, or the Linux keyring.
• Grain connects Claude Code and Codex to its tools with a direct MCP entry that starts the same way on every system. If you set up an agent with an earlier version, run grain setup once to update it.

Improved

• Grain updates through a new updater on all three systems. Linux AppImages update themselves; the .deb shows when a new version is out.

Fixed

• Agent terminals on Windows start Claude Code and Codex installed with npm.
• Turning on Grain's agent routing rules works on Windows.

Improved

• Grain has a native app menu, and right-clicking a text field opens Cut, Copy and Paste.
• Windows reopen at the size and position you left them.
• The app no longer flashes a blank white window at launch.

New

• Coding agents can run grain login and grain setup for you. Sign-in opens in your browser, and the CLI prints a link you can open by hand.

Fixed

• grain setup accepts a ~/.local/bin/grain link that reaches Grain through another link, and no longer overwrites the bundled launcher.
• The CLI opens Grain when the app is not already running.