release: 0.4.0

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -1,21 +1,38 @@
 name: Bug report
-description: Something in Brow does not work the way it should.
+description: Something in Brow or the brow command-line tool does not work the way it should.
 labels: ["bug"]
 body:
   - type: markdown
     attributes:
       value: |
-        Thanks for reporting a bug. With a notch app, the Mac, the display and the accounts matter as much as the steps, so the form asks for each.
+        Thanks for reporting a bug. With a notch and menu-bar app, the Mac, the display and the accounts matter as much as the steps, so the form asks for each.
 
         - Questions and setup help: [Discussions → Q&A](https://github.com/efim0v/brow/discussions/categories/q-a).
         - Security problems: never here. See [SECURITY.md](https://github.com/efim0v/brow/blob/main/SECURITY.md).
-        - Never paste a token, a Keychain item or a `.credentials.json` file. The panel shows account names or emails; blur them in screenshots if you prefer.
+        - **"cmux unavailable" while cmux is running** has a known cause and fix in [troubleshooting](https://github.com/efim0v/brow/blob/main/docs/troubleshooting.md).
+        - Never paste a token, a Keychain item or a `.credentials.json` file. Logs and command output can contain account emails, project paths and repository names: look through what you paste, and blur screenshots if you prefer.
+
+  - type: dropdown
+    id: component
+    attributes:
+      label: Which part of Brow
+      multiple: true
+      options:
+        - "Notch and limits: the readouts, the panel, limit warnings, copy my week"
+        - "Accounts and sign-in: adding an account, Sign in again, browser profiles, Keychain access"
+        - "Workspaces and sessions: projects, workspaces, Resume as…, Migrate to…, Share, Graph, Stats"
+        - Transcript safety net
+        - Settings
+        - brow command-line tool
+        - Something else
+    validations:
+      required: true
 
   - type: textarea
     id: what-happened
     attributes:
       label: What happened
-      description: What you did, what you expected, and what Brow did instead. A screenshot or screen recording of the notch, the panel or Settings helps a lot.
+      description: What you did, what you expected, and what Brow did instead. A screenshot or screen recording of the notch, the panel, Workspaces or Settings helps a lot.
     validations:
       required: true
 
@@ -31,8 +48,8 @@ body:
     id: brow-version
     attributes:
       label: Brow version
-      description: "Run `plutil -extract CFBundleShortVersionString raw /Applications/Brow.app/Contents/Info.plist`. For a build of your own, give the commit."
-      placeholder: "0.2.0"
+      description: "Run `plutil -extract CFBundleShortVersionString raw /Applications/Brow.app/Contents/Info.plist`, or read it at the bottom of the Workspaces panel. For a build of your own, give the commit."
+      placeholder: "0.4.0"
     validations:
       required: true
 
@@ -96,6 +113,20 @@ body:
     validations:
       required: true
 
+  - type: input
+    id: cmux-version
+    attributes:
+      label: cmux version
+      description: "For Workspaces problems: run `cmux --version` in a cmux terminal. Leave it empty if you don't use cmux."
+      placeholder: cmux 0.x
+
+  - type: textarea
+    id: doctor
+    attributes:
+      label: Output of brow doctor --json
+      description: "For Workspaces problems, if you have the command-line tool (`brow-cli.zip` from the release, or `brew install efim0v/tap/brow-cli`): paste what `brow doctor --json` prints (`grove doctor --json` with the older tool). It shows the git, Claude Code and cmux that Brow finds."
+      render: json
+
   - type: markdown
     attributes:
       value: |
@@ -113,7 +144,9 @@ body:
         log show --last 1h --info --style compact --predicate 'subsystem == "dev.artemefimov.brow"'
         ```
 
-        The log names account folders and organization IDs. Look it over and remove anything you would rather not post.
+        The log names account folders, project folders and organization IDs. Look it over and remove anything you would rather not post.
+
+        For cmux problems a probe report helps most. Run `open -nW /Applications/Brow.app --args --cmux-probe /tmp/cmux-probe.txt` and attach `/tmp/cmux-probe.txt` ([more on the probe](https://github.com/efim0v/brow/blob/main/docs/troubleshooting.md#cmux-diagnostic-probe)). The probe opens and closes a test workspace in cmux, and the report lists your environment variables, so remove secrets before you attach it.
 
   - type: textarea
     id: log
@@ -126,4 +159,14 @@ body:
     id: context
     attributes:
       label: Anything else
-      description: "Did it start after an update of Brow, Claude Code or macOS? Do you also use Grove? Which browser opens the account profiles? Is the `claude -p` fallback on (Settings → Accounts)?"
+      description: "Did it start after an update of Brow, Claude Code or macOS? Is Grove.app still installed or running? Which browser opens the account profiles? Is the `claude -p` fallback on (Settings → Accounts)? For Workspaces: how your repositories are laid out (how many, side by side or nested)."
+
+  - type: checkboxes
+    id: checks
+    attributes:
+      label: Before you submit
+      options:
+        - label: I searched the existing issues for this problem.
+          required: true
+        - label: I removed tokens, emails and private paths from what I pasted.
+          required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -3,9 +3,9 @@ contact_links:
   - name: Question or setup help
     url: https://github.com/efim0v/brow/discussions/categories/q-a
     about: Ask how something works, or get help getting Brow running.
-  - name: Grove (workspaces and sessions)
-    url: https://github.com/efim0v/grove/issues
-    about: Brow's companion app has its own issue tracker.
+  - name: Report a security vulnerability
+    url: https://github.com/efim0v/brow/security/advisories/new
+    about: Report it privately here, never in a public issue.
   - name: Claude Code
     url: https://github.com/anthropics/claude-code/issues
     about: Problems with Claude Code itself go to Anthropic's repository.

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -5,7 +5,20 @@ body:
   - type: markdown
     attributes:
       value: |
-        Brow shows the limits of every Claude Code account in the notch and signs each account in with one click. Ideas about workspaces, worktrees or moving sessions between accounts belong to [Grove](https://github.com/efim0v/grove). To talk an idea through before filing it, use [Discussions → Ideas](https://github.com/efim0v/brow/discussions/categories/ideas).
+        Brow shows the limits of every Claude Code account in the notch, signs each account in with one click, and runs parallel Claude Code sessions in workspaces of git worktrees (Workspaces, in the menu bar). To talk an idea through before filing it, use [Discussions → Ideas](https://github.com/efim0v/brow/discussions/categories/ideas).
+
+  - type: dropdown
+    id: component
+    attributes:
+      label: Which part of Brow
+      options:
+        - Notch and limits
+        - Accounts and sign-in
+        - Workspaces and sessions
+        - brow command-line tool
+        - Something else
+    validations:
+      required: true
 
   - type: textarea
     id: problem

.github/pull_request_template.md

@@ -9,7 +9,13 @@
 
 <!-- Commands you ran. For a visible change: the Mac model, and a screenshot or recording. -->
 
-- [ ] `swift build` and `swift test` pass
+- [ ] `Scripts/test-in-empty-home.sh` passes (the whole suite, with the home folder pointed at an empty one)
+- [ ] `Scripts/test-in-empty-home.sh -c release` passes
 - [ ] Tests added or updated for changed behaviour
+- [ ] UI change: screenshots attached (`swift run BrowApp --snapshot <dir>` renders the Workspaces screens)
 - [ ] README or `docs/` updated where behaviour changed
+
+## Worth flagging
+
 - [ ] No token is logged, written to disk or sent anywhere but Anthropic's usage and profile endpoints
+- [ ] Changes what Brow writes to Claude Code's files, and the README's "What Brow does on your machine" is updated to match

.github/workflows/ci.yml

@@ -21,7 +21,7 @@ jobs:
     # Package.swift targets macOS 26 with swift-tools-version 6.2, but Swift 6.2.4
     # cannot compile BrowKit, so this relies on the image's newer default Xcode.
     runs-on: macos-26
-    timeout-minutes: 20
+    timeout-minutes: 45
     steps:
       - uses: actions/checkout@v7
         with:
@@ -30,18 +30,33 @@ jobs:
       - name: Show versions
         run: |
           sw_vers
+          xcode-select --print-path
           xcodebuild -version
           swift --version
 
-      # Package.resolved is git-ignored, so every run resolves grove afresh;
-      # the tree shows which version it got.
-      - name: Resolve dependencies
-        run: |
-          swift package resolve
-          swift package show-dependencies
+      # The package has no dependencies: GroveCore, GroveAppKit, BrowKit, the app
+      # and the command-line tool all build from this repository. A clean build of
+      # every target that fails on any warning the script does not list.
+      - name: Build with no new warnings
+        run: Scripts/check-warnings.sh
+
+      # HOME and CFFIXED_USER_HOME point at an empty folder; the script fails if the
+      # suite leaves Brow's or Grove's data, or Claude Code's folders, in it.
+      - name: Test in an empty home folder
+        run: Scripts/test-in-empty-home.sh
 
-      - name: Build
-        run: swift build
+      # Release builds are optimized (-O). ScanWorktreeCollectionTests covers a
+      # release-only miscompile (see WorkspaceService.collectWorktrees).
+      - name: Test (release)
+        run: Scripts/test-in-empty-home.sh -c release
 
-      - name: Test
-        run: swift test
+      - name: Build the app and the tool
+        run: |
+          Scripts/build-brow.sh
+          codesign --verify --deep --strict --verbose=2 dist/Brow.app
+          dist/brow --version
+
+      # Every .swift, .sh and .py file starts with the SPDX licence line and the
+      # copyright line.
+      - name: Licence headers
+        run: Scripts/check-headers.sh

CHANGELOG.md

@@ -7,6 +7,42 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.4.0] - 2026-10-18
+
+Grove is now part of Brow. Its Workspaces engine — workspaces of git worktrees across several repositories, the Claude Code sessions in them and moving sessions between accounts — runs inside Brow, merged into this repository with its history. Grove's own changelog is in [`docs/history/grove-changelog.md`](docs/history/grove-changelog.md). The notch also gets a pet that eats what your accounts use.
+
+### Added
+
+- **Workspaces**, in the menu bar: Grove's panel — projects, workspaces, sessions, Resume as…, Migrate to…, Share, the commit graph and the code statistics — on Liquid Glass, behind Brow's mark, the notch with two dots. It is off until you use it: for someone who never used Grove nothing of it runs, and nothing is read or written for it. It turns on by itself for someone who did, with their projects, accounts and settings ([what changes](README.md#coming-from-grove)).
+- While Grove.app is running, Workspaces waits and offers Quit Grove, so the two never write the same files. It also runs in one copy of Brow at a time: a second install or a development build waits while another copy runs it.
+- The notch panel gets a Workspaces button, which also opens Workspaces when macOS hides the menu-bar item behind the notch. Opening Brow again from Finder or Spotlight shows Workspaces while it is on, and Settings otherwise. Brow's menu gets Show Workspaces.
+- Every account picker in Workspaces — the launch sheet, Resume as…, Migrate to…, the Accounts screen — shows that account's 5-hour and weekly use as the notch reads it. Workspaces names each account as the notch does, by the name given in Settings → Accounts, and writes its plan the same way (Max 20x).
+- One Settings window with four tabs. General gains Show Workspaces in the menu bar. Each card in Accounts gains a Workspaces section: Share sessions, Capture the status line, and the account's default model and effort; a Workspaces account with no card of its own, such as a second folder of the same login, gets a section after the cards, and one whose folder is gone can be removed from Workspaces there. Workspaces holds the projects, the workspace folder, the transcript safety net and the panel material. About has the version, the licence and the credits.
+- The command-line tool is `brow`, with `grove` as a second name, so scripts written for Grove's tool keep working unchanged. `brow --version` prints Brow's version. It ships as `brow-cli.zip`.
+- The model pickers offer Claude Code's aliases (`opus`, `sonnet`, `haiku`), pinned versions, and Other… for any model id.
+- Settings → General → Show Brow in the notch. Off, Brow draws nothing at the top of the screen and no panel opens there, for someone who uses Brow for Workspaces only. Limit warnings still arrive, and opening Brow again shows Workspaces or Settings.
+- **Glim, a pet that eats your limits.** A small creature lives in the black beside the notch, below it, or in the pill, and eats what your accounts use: when the 5-hour number goes up, it takes a bite, drawn as a bead of light that leaves the number untouched. Hours at the Mac without Claude Code make it hungry; it never gets hungry while you are away, and its light is its hunger meter. When the 5-hour limit is used up it falls asleep full until the window resets; when the weekly limit is used up it hibernates in its den behind the camera until the weekly reset. It perks up when a prompt is written to an account's `history.jsonl`, which Brow asks macOS to watch and never reads. Hover the notch and it hops into a new first row of the panel, with its state, its last meal and a hunger meter; a click on it boops it. It draws only while someone can see it, follows Reduce Motion, Reduce Transparency and Increase Contrast, and keeps its state in `~/Library/Application Support/Brow/pet.json`. On by default; Settings → General → **Show the pet** turns it off, and with Show Brow in the notch off there is no pet at all.
+
+### Changed
+
+- Capturing an account's status line is a choice per account. Grove installed its wrapper into every account's `settings.json` at launch; Brow installs it only where you turn capture on, and keeps it where Grove already had it. Claude Code keeps running the wrapper while Workspaces is off, so Settings → Accounts keeps the switch that gives the status line back, whether Workspaces is on or off.
+- The transcript safety net is off for a setup Brow creates; a Grove setup keeps its setting.
+- The transcript safety net no longer puts a transcript back by itself. The transcripts that vanish are listed in Settings → Workspaces, newest first, with Restore: a period passed to `claude --settings` cannot be read from outside, so only you can tell a transcript deleted by accident from one cleaned up on purpose.
+- Sessions Workspaces starts use Brow's own browser router and Settings → General → Path to claude.
+- Brow's settings decode field by field: a value that cannot be read costs that one setting instead of all of them, and the file as it was is kept as `config.json.bak` ([#7](https://github.com/efim0v/brow/issues/7)).
+- One log subsystem, `dev.artemefimov.brow`, for the whole app.
+
+### Fixed
+
+- The transcript safety net no longer brings back, or keeps, transcripts Claude Code's own retention deleted. It restored every mirrored transcript under 90 days old; it now reads `cleanupPeriodDays` from your organization's managed settings, server-managed settings, the account's settings and the project settings of every folder the account's sessions ran in, takes the shortest — for a workspace shared between accounts, the shortest of all of theirs — and keeps nothing past it. Migrate to… follows the same rule when it falls back on the safety net's copy ([efim0v/grove#6](https://github.com/efim0v/grove/issues/6)).
+- Opening Accounts no longer shows a red "unknown session store" banner for the folders Claude Code itself writes ([efim0v/grove#7](https://github.com/efim0v/grove/issues/7)).
+- Launch no longer re-creates an account folder you deleted ([efim0v/grove#12](https://github.com/efim0v/grove/issues/12)).
+- Reading a token through the `security` tool gives up after ten seconds, as it was meant to ([efim0v/grove#9](https://github.com/efim0v/grove/issues/9)).
+- The model pickers no longer miss new models ([efim0v/grove#10](https://github.com/efim0v/grove/issues/10)).
+- The launch-at-login toggle can no longer show on while it is off, and says when macOS is waiting for your approval ([#8](https://github.com/efim0v/brow/issues/8)).
+- The build has no compiler warnings again ([efim0v/grove#11](https://github.com/efim0v/grove/issues/11)).
+- With Show readouts next to the notch off, a display without a notch no longer shows an empty black pill: nothing is drawn until the pointer reaches the top centre, as the setting says.
+
 ## [0.3.1] - 2026-10-15
 
 ### Fixed
@@ -77,7 +113,8 @@ First public release: the usage and rate limits of every Claude Code account, in
 - Background token refresh for idle accounts. If it stops working, Brow falls back to a tiny `claude -p` request, which spends a little limit and starts that account's 5-hour window. The fallback is on by default; turn it off in Settings → Accounts.
 - A prebuilt `Brow.zip` for macOS 26 or later on Apple silicon, signed ad hoc and not notarized, with `SHA256SUMS.txt` to verify it.
 
-[Unreleased]: https://github.com/efim0v/brow/compare/0.3.1...HEAD
+[Unreleased]: https://github.com/efim0v/brow/compare/0.4.0...HEAD
+[0.4.0]: https://github.com/efim0v/brow/compare/0.3.1...0.4.0
 [0.3.1]: https://github.com/efim0v/brow/compare/0.3.0...0.3.1
 [0.3.0]: https://github.com/efim0v/brow/compare/0.2.3...0.3.0
 [0.2.3]: https://github.com/efim0v/brow/compare/0.2.2...0.2.3