chore(release): bump to v0.2.4

Cargo.toml

@@ -9,7 +9,7 @@ members = [
 ]
 
 [workspace.package]
-version = "0.2.3"
+version = "0.2.4"
 edition = "2021"
 license = "MIT"
 repository = "https://github.com/DevVig/microbridge"

apps/microbridge-ui/package.json

@@ -1,7 +1,7 @@
 {
   "name": "microbridge-ui",
   "private": true,
-  "version": "0.2.3",
+  "version": "0.2.4",
   "type": "module",
   "scripts": {
     "dev": "vite",

apps/microbridge-ui/src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "microbridge-ui"
-version = "0.2.3"
+version = "0.2.4"
 description = "Microbridge menu bar app (primary UI)"
 authors = ["Microbridge contributors"]
 edition = "2021"

apps/microbridge-ui/src-tauri/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "Microbridge",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "identifier": "ai.microbridge.ui",
   "build": {
     "beforeDevCommand": "npm run dev",

docs/releases/v0.2.4.md

@@ -0,0 +1,43 @@
+# Microbridge 0.2.4 (2026-07-19)
+
+## Release blocker fixed
+
+- Homebrew now stores its ownership marker beside `Microbridge.app` instead of
+  modifying the signed bundle. This prevents macOS from rejecting the copied
+  app as damaged because of unsealed contents.
+- The app recognizes the new sidecar marker and continues routing Homebrew
+  updates through `brew upgrade` rather than the direct-install updater.
+- Older Homebrew installs carrying the legacy in-bundle marker migrate to a
+  clean, signature-preserving copy on the next service start.
+
+## Distribution hardening
+
+- The release pipeline now notarizes and staples the outer DMG as well as the
+  app inside it.
+- Release checks fail closed unless the app and DMG pass strict code-signing,
+  Gatekeeper, stapler, and Apple distribution validation.
+- Homebrew smoke tests validate the copied app after the ownership marker is
+  written, catching any future post-signing bundle mutation.
+
+## Included from 0.2.3
+
+- Focused-app Agent Keys by default.
+- Correct Synara, T3 Code, Codex Desktop, and standalone Codex CLI attribution.
+- Launch-at-login prompt and Settings control.
+- Display-aware left-click popover with ten scrollable threads, outside-click
+  dismissal, and a compact native shadow.
+- Opt-in automatic update checks limited to once every 24 hours.
+
+## Upgrade notes
+
+- Direct installs update through **Check for Updates…** or the optional daily
+  launch check.
+- Homebrew installs update with `brew update && brew upgrade microbridge` after
+  the v0.2.4 Formula update lands.
+- No configuration or data migration is required.
+
+## Known boundary
+
+Physical Codex Micro HID input and LED behavior still require validation with
+the production device. This release does not claim completed physical-device
+validation.