foleoJoin the waitlist
Beta

A native macOS reader for the artifacts your agents write.

Specs, plans, ADRs, HTML, and CSV in your repo. Open a folder and read.

Works with your agents

ClaudeCodexCursorGeminiCopilotOpenClawHermes

specs/001-auth-spec.md · draft · Claude

OAuth device flow for iOS

The iOS companion needs a login path that never embeds client_secret in the bundle. Device flow via an auth proxy is the only acceptable approach for MIT-licensed clients shipping outside the App Store review sandbox.

Background

Foleo Desktop already authenticates through the macOS keychain session. The Expo shell must reuse the same identity without copying refresh tokens into UserDefaults or the JS bundle.

Non-goal: building a bespoke OAuth UI inside the WebView — we delegate to Safari for the user code step.

Architecture

Actors

  • iOS app polls /device/code
  • Auth proxy exchanges codes and stores refresh tokens server-side
  • Desktop session remains source of truth for workspace roots

Sequence

User → Safari → device code
App polls proxy → JWT
Keychain stores session handle

Security requirements

  1. PKCE required on every device authorization request
  2. Refresh tokens never cross the React Native bridge
  3. Proxy logs redact authorization codes at ingest

Acceptance criteria

  • Sign-in completes in under 60 seconds on a cold start
  • No secret material in the iOS bundle or Metro source maps
  • Sign-out clears Keychain items and invalidates proxy session

Open questions

  • Do we ship a staging proxy before TestFlight build 12?
  • Should desktop prompt to link mobile when LAN discovery finds a peer?

See plan-refactor.md · 0004-foleo-github-app

Click files and tabs to explore · Specs, plans, HTML, and CSV from your agents

Features

Everything you need to read agent output.

Purpose-built for the Markdown, HTML, and CSV your agents generate — not for building a second brain from scratch.

Built for agent artifacts

Specs, plans, postmortems, AGENTS.md, HTML dashboards, and CSV exports — the file types your agents actually produce.

Open your repo folder

Point Foleo at any project directory. No import step, no sync layer — just the files on disk.

Markdown, HTML, and CSV

Rendered docs, sandboxed HTML, and editable tables — each with a source toggle.

Feels native on macOS

Sidebar, history, and tabs on Safari-familiar shortcuts — plus system fonts and real window vibrancy, not Electron chrome.

Local by default

Agent output stays in your project folder on disk. No accounts, no cloud upload, no telemetry.

Philosophy

The missing reader for the agent era.

Coding agents are prolific writers. They emit specs, plans, decision records, HTML reports, and CSV exports faster than any human can skim. Foleo is the native macOS surface for making sense of that output.

01

Agents write. You review.

Claude drafts the spec. Codex scaffolds the plan. Cursor leaves AGENTS.md and a pile of HTML. Foleo is where you actually read all of it — without opening six different tools.

02

Your repo, not our vault

No database, no sync engine, no import wizard. Open the folder your agents already wrote to. Edit a line, close the app. Git status stays exactly what you expect.

03

Reading, not organizing

Obsidian and Notion want you to build a knowledge system. Foleo assumes the system already exists — as files on disk — and makes reviewing agent output feel as good as reading a well-typeset article.

04

Tabs for agent sessions

A 40-file agent run should feel like a browser session, not forty Finder windows. Open, skim, close — with history and a tab strip that keeps context.

05

HTML and CSV you can trust

Agent dashboards render in a sandboxed preview; CSV exports open as editable tables. Toggle to source when you need to verify what shipped to disk.

06

Keyboard-first review

Command palette, shortcuts, and native macOS chrome — built for the loop of open, read, jump to the next artifact, repeat.

FAQ

Stop scrolling terminal output.

Foleo is in active development — built for developers who live with Claude, Codex, and Cursor artifacts daily. Join the waitlist for the beta.

No spam. One email when the beta is ready.