v0.2.0

Changed

• Claude live limits now use their own sign-in — no more Keychain prompts. The app used to
  read the token Claude Code stored in your Keychain, but Claude Code re-creates that item on every
  token refresh, which wiped the app's access and made macOS re-prompt at random. Now you Sign in
  with Claude (Settings → Claude → Add account, or the banner in the Claude tab): the app runs
  its own OAuth in your browser, mints its own token, and stores it in its own Keychain item
  that it refreshes in place. A signed build reads it back with zero prompts, ever — and it
  persists across restarts (the token refreshes silently; you sign in once).
• Multiple accounts. Add more than one Claude account (e.g. Personal + Work); each shows its own
  live 5H / 7D limits. Remove an account any time in Settings → Claude.

Removed

• The opt-in Connect toggle that read Claude Code's Keychain item (superseded by Add account).

v0.1.6

Added

• Local Claude usage without connecting. When Claude isn't connected, the Claude tab now
  shows your last 5H and 7D token counts and equivalent cost, derived entirely from your
  local ~/.claude logs (ccusage-style) — so the tab is useful before you ever click Connect.
  Connecting still adds the live limit percentage from Claude's usage endpoint.

Changed

• The release .dmg now opens to a branded installer window — app icon, a purple
  drag-to-Applications arrow, and the app name/tagline over a light background — rendered at
  retina resolution (a multi-representation TIFF Finder resolves per display).

v0.1.5

Changed

• Claude live limits are now opt-in. The app no longer reads the Claude Code token from
  the Keychain at launch, so no credential prompt appears when it starts. The Claude tab shows a
  Connect banner (also a Connect/Disconnect control in Settings → Claude); clicking it reads
  the token in a context you initiated — macOS asks once, then remembers. Your account and cost
  data still show without connecting. Upgrading from an earlier version? Live Claude limits are
  off until you click Connect once (it's a one-time, opt-in step now).
• Local Scripts/build-app.sh builds now auto-sign with an installed Developer ID (stable
  signature) instead of ad-hoc, so rebuilding during development doesn't re-trigger the Keychain
  prompt. Falls back to ad-hoc when no Developer ID is present.

v0.1.4

Fixed

• No longer prompts for access to your Documents folder. The worktree→project rollup
  read the .git file at each project's working directory — which live under ~/Documents
  — tripping a macOS privacy prompt. Project names are now derived from the path string
  alone. The app touches nothing outside ~/.claude, ~/.codex, ~/.gemini, and its own
  Application Support data.