release 1.1.0 🎉

Clicking a profile switched to it exclusively and shift-click opened it
alongside, with no way round for anyone who opens alongside far more often
than they switch. Settings now carries the choice, storing only the plain
click's action — the other gesture gets whatever is left, so the two can't
both end up meaning the same thing, and no migration is needed for anyone
who never touches it.

Switching also quits the other profiles again when the profile clicked is
already up, which e7777d5 had carved out on the reasoning that a click
reaching for a second open window is someone moving between windows rather
than asking for one to go. That guess is what this setting now settles:
with each action bound to a gesture of its own, choosing the switch gesture
is the instruction, and second-guessing it left no way to ask for an
exclusive switch at all once the target was running.

The menu spells out both gestures rather than only the modified one, since
which of them quits things is no longer fixed. Each profile's tooltip
describes what a click will actually do to it as things stand — it promises
to quit the neighbours only when there are neighbours to quit.

.env.example

@@ -0,0 +1,118 @@
+# Local build configuration. Copy to `.env` (gitignored) and fill in.
+#
+#   cp .env.example .env
+#
+# build.sh reads `.env` automatically if it exists. Anything already set in
+# the environment wins over this file, so a one-off
+#
+#   SHANNONCOAT_SIGN_IDENTITY= ./build.sh
+#
+# still forces an ad-hoc build without editing anything.
+
+
+# ---------------------------------------------------------------------------
+# Code-signing identity
+# ---------------------------------------------------------------------------
+# The common name of the code-signing certificate in your keychain. Not a
+# secret — it's a label, not a credential — but it lives here so every build
+# picks it up without you having to remember the variable.
+#
+# Why bother signing at all: macOS pins an *ad-hoc* signed app's
+# Accessibility grant to its exact cdhash, which changes on every build. So
+# an unsigned local build silently loses the permission each time you
+# rebuild and reinstall, while still appearing listed and ticked under
+# Privacy & Security → Accessibility. Signing with a certificate gives the
+# app a stable designated requirement, and the grant survives.
+#
+# Leave empty (or delete the line) to build ad-hoc.
+SHANNONCOAT_SIGN_IDENTITY="shannoncoat Signing"
+
+
+# ---------------------------------------------------------------------------
+# Certificate material — only needed to publish the GitHub Actions secrets
+# ---------------------------------------------------------------------------
+# The build itself never reads these: once the certificate is imported, the
+# private key lives in your keychain and codesign finds it by the identity
+# name above. They're recorded here purely so the `gh secret set` commands
+# at the bottom have somewhere to read from.
+#
+# Keep the .p12 OUTSIDE the working tree. A gitignored file is still one
+# `git add -f`, one editor-indexed backup, or one shared folder away from
+# leaking, and this one holds a private key.
+#
+# The $HOME below is expanded by the shell when you `source .env` (which is
+# how the gh commands at the bottom read it). build.sh parses rather than
+# sources this file, so it takes values literally — which costs nothing
+# here, as the only variable it actually reads is the identity above.
+SHANNONCOAT_P12_PATH="$HOME/.shannoncoat-signing/shannoncoat-signing.p12"
+
+# The .p12 export password. Storing it in plaintext here is weaker than
+# leaving it in your password manager and typing it when prompted — prefer
+# leaving this field empty and letting `gh secret set` ask for it
+# interactively.
+#
+# Leaving the *field* empty is fine. Exporting the .p12 itself with an
+# empty password is not: macOS cannot import one, so CI would fail even
+# though local builds carry on working (they import the PEM pair, which
+# needs no password). Give the export a real password.
+SHANNONCOAT_P12_PASSWORD=""
+
+
+# ---------------------------------------------------------------------------
+# One-time setup
+# ---------------------------------------------------------------------------
+# Generate a ten-year self-signed code-signing certificate (codesign refuses
+# an expired one, and replacing it later resets every user's Accessibility
+# permission again):
+#
+#   mkdir -p ~/.shannoncoat-signing && chmod 700 ~/.shannoncoat-signing
+#   openssl req -x509 -newkey rsa:2048 -nodes -days 3650 \
+#     -keyout ~/.shannoncoat-signing/key.pem \
+#     -out ~/.shannoncoat-signing/cert.pem \
+#     -subj "/CN=shannoncoat Signing" \
+#     -addext "basicConstraints=critical,CA:false" \
+#     -addext "keyUsage=critical,digitalSignature" \
+#     -addext "extendedKeyUsage=critical,codeSigning"
+#
+# Bundle it as a .p12. `-legacy` is required: OpenSSL 3's default encoding
+# is one macOS cannot read, and `security import` then fails with a
+# misleading "MAC verification failed (wrong password?)".
+#
+#   openssl pkcs12 -export -legacy \
+#     -inkey ~/.shannoncoat-signing/key.pem \
+#     -in ~/.shannoncoat-signing/cert.pem \
+#     -name "shannoncoat Signing" \
+#     -out ~/.shannoncoat-signing/shannoncoat-signing.p12
+#
+# Import for local builds, then delete the now-redundant loose private key
+# (the .p12 remains your only backup, so keep that):
+#
+#   security import ~/.shannoncoat-signing/shannoncoat-signing.p12 \
+#     -k ~/Library/Keychains/login.keychain-db -T /usr/bin/codesign
+#   rm ~/.shannoncoat-signing/key.pem
+#
+# The first signed build raises a "codesign wants to use key…" dialog —
+# choose Always Allow. Then re-grant Accessibility one final time; from
+# then on it persists across rebuilds.
+#
+# Note that `security find-identity -v -p codesigning` will report "0 valid
+# identities": -v filters to *trusted* certificates and a self-signed one
+# reads as CSSMERR_TP_NOT_TRUSTED. codesign uses it regardless. Drop the -v
+# to see it.
+
+
+# ---------------------------------------------------------------------------
+# Publishing the same certificate to GitHub Actions
+# ---------------------------------------------------------------------------
+# Releases need this too — an ad-hoc release revokes the Accessibility
+# permission of everyone who updates. .github/workflows/release.yml stays
+# inert until all three secrets exist, so nothing breaks in the meantime.
+#
+#   source .env
+#   base64 -i "$SHANNONCOAT_P12_PATH" | gh secret set SIGNING_CERTIFICATE_P12
+#   gh secret set SIGNING_IDENTITY --body "$SHANNONCOAT_SIGN_IDENTITY"
+#   gh secret set SIGNING_CERTIFICATE_PASSWORD   # prompts, so it stays out of shell history
+#
+# This buys permission persistence, not Gatekeeper approval: a self-signed
+# certificate isn't notarized, so downloads are still blocked on first open
+# and need System Settings → Privacy & Security → Open Anyway.

.github/workflows/release.yml

@@ -21,21 +21,135 @@ permissions:
 jobs:
   build:
     runs-on: macos-latest
+    env:
+      # Not a secret (it's just the certificate's common name), and needed
+      # in a step `if:` — where the `secrets` context isn't available, but
+      # `env` is. Empty when signing isn't configured, which every step
+      # below treats as "fall back to ad-hoc".
+      SIGNING_IDENTITY: ${{ secrets.SIGNING_IDENTITY }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.tag || github.ref }}
 
+      # Releases need a *stable* code identity, not an ad-hoc one. macOS
+      # pins an ad-hoc app's Accessibility grant to its exact cdhash, which
+      # changes on every build — so each release would silently revoke the
+      # permission users had already granted, leaving a stale entry sitting
+      # in System Settings still ticked (and un-fixable by toggling it).
+      # A certificate gives the app a designated requirement that survives
+      # updates instead.
+      #
+      # This does NOT make the app Gatekeeper-clean: a self-signed cert
+      # isn't notarized, so downloads still need right-click → Open. Only
+      # a paid Developer ID plus notarization changes that.
+      #
+      # One-time setup, ideally with the same self-signed certificate used
+      # for local builds (create it with a long validity — codesign refuses
+      # to use an expired cert, and re-signing under a new one resets every
+      # user's permission again):
+      #   security export -k login.keychain -t identities -f pkcs12 \
+      #     -P '<password>' -o cert.p12
+      #   base64 -i cert.p12
+      # then add three repository secrets — SIGNING_CERTIFICATE_P12 (that
+      # base64 blob), SIGNING_CERTIFICATE_PASSWORD, and SIGNING_IDENTITY
+      # (the certificate's common name).
+      #
+      # If you build the .p12 with OpenSSL 3 rather than exporting it, pass
+      # `-legacy`: its default AES-256/SHA-256 PKCS#12 encoding is one the
+      # macOS Security framework can't read, and `security import` fails
+      # with a misleading "MAC verification failed (wrong password?)".
+      - name: Import signing certificate
+        if: env.SIGNING_IDENTITY != ''
+        env:
+          CERT_P12: ${{ secrets.SIGNING_CERTIFICATE_P12 }}
+          CERT_PASSWORD: ${{ secrets.SIGNING_CERTIFICATE_PASSWORD }}
+        run: |
+          set -euo pipefail
+
+          # macOS cannot import an OpenSSL-produced PKCS#12 that has an
+          # empty password — the two disagree over the spec's empty-string
+          # vs. NULL password ambiguity, and `security import` reports it
+          # as "MAC verification failed (wrong password?)", which sends you
+          # hunting for a wrong password rather than a missing one. Say
+          # what's actually wrong instead.
+          #
+          # Easy to hit, because a local build never exercises this: the
+          # local keychain imports the PEM pair directly and needs no
+          # password at all.
+          if [[ -z "${CERT_PASSWORD:-}" ]]; then
+            echo "error: SIGNING_CERTIFICATE_PASSWORD is empty." >&2
+            echo "The .p12 must be exported with a non-empty password; regenerate it with" >&2
+            echo "  openssl pkcs12 -export -legacy -inkey key.pem -in cert.pem -out cert.p12" >&2
+            echo "and update both SIGNING_CERTIFICATE_P12 and SIGNING_CERTIFICATE_PASSWORD." >&2
+            exit 1
+          fi
+
+          KEYCHAIN="$RUNNER_TEMP/signing.keychain-db"
+          KEYCHAIN_PASSWORD="$(uuidgen)"
+          CERT_PATH="$RUNNER_TEMP/cert.p12"
+
+          printf '%s' "$CERT_P12" | base64 --decode > "$CERT_PATH"
+
+          # A dedicated throwaway keychain, not the login one: it starts
+          # unlocked, needs no interactive prompt, and is deleted at the
+          # end of the job regardless of outcome.
+          security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN"
+          security set-keychain-settings -lut 21600 "$KEYCHAIN"
+          security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN"
+
+          security import "$CERT_PATH" -k "$KEYCHAIN" -P "$CERT_PASSWORD" \
+            -T /usr/bin/codesign
+          # Without this, codesign hits an interactive "allow access to
+          # key?" prompt that nothing can answer on a headless runner.
+          security set-key-partition-list -S apple-tool:,apple: \
+            -k "$KEYCHAIN_PASSWORD" "$KEYCHAIN" >/dev/null
+          # codesign only searches keychains on the search list.
+          security list-keychain -d user -s "$KEYCHAIN" login.keychain-db
+
+          rm -f "$CERT_PATH"
+
       - name: Build shannoncoat.app
         run: ./build.sh
+        env:
+          # This workflow only ever runs against a tag (see the trigger
+          # comment above) — told to build.sh directly rather than having
+          # it re-derive that via `git describe`, which needs full tag
+          # refs a CI runner's checkout isn't guaranteed to have fetched.
+          SHANNONCOAT_RELEASE_BUILD: "1"
+          # Empty when unconfigured, which build.sh reads as ad-hoc.
+          SHANNONCOAT_SIGN_IDENTITY: ${{ env.SIGNING_IDENTITY }}
+
+      # Catches a release that silently went out ad-hoc — the failure this
+      # whole arrangement exists to prevent, and one that's invisible in
+      # the artifact until someone's permission stops working.
+      - name: Verify signature
+        run: |
+          set -euo pipefail
+          codesign --verify --strict --verbose=2 ".build/shannoncoat.app"
+          codesign -dvvv ".build/shannoncoat.app" 2>&1 \
+            | grep -E 'Identifier=|Authority=|Signature=' || true
+          if [[ -n "$SIGNING_IDENTITY" ]] \
+             && codesign -dvvv ".build/shannoncoat.app" 2>&1 | grep -q 'Signature=adhoc'; then
+            echo "error: signing was configured but the app is still ad-hoc signed" >&2
+            exit 1
+          fi
 
       - name: Zip app bundle
         run: ditto -c -k --sequesterRsrc --keepParent ".build/shannoncoat.app" "shannoncoat.app.zip"
 
       - name: Publish release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           tag_name: ${{ inputs.tag || github.ref_name }}
           files: |
             shannoncoat.app.zip
           generate_release_notes: true
+
+      # `if: always()` so a failed build can't leave the signing key
+      # sitting in a keychain on the runner.
+      - name: Clean up keychain
+        if: always() && env.SIGNING_IDENTITY != ''
+        run: |
+          security list-keychain -d user -s login.keychain-db || true
+          security delete-keychain "$RUNNER_TEMP/signing.keychain-db" || true

.github/workflows/tag-on-version-bump.yml

@@ -15,7 +15,7 @@ jobs:
       tag: ${{ steps.tag.outputs.tag }}
       created: ${{ steps.tag.outputs.created }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -45,5 +45,11 @@ jobs:
     uses: ./.github/workflows/release.yml
     with:
       tag: ${{ needs.tag.outputs.tag }}
+    # A called workflow gets no secrets unless they're handed over, so
+    # without this the signing secrets are empty inside release.yml and it
+    # quietly builds ad-hoc — which is exactly what signing exists to
+    # prevent, and which its own ad-hoc guard misses, since that guard only
+    # fires when an identity was configured.
+    secrets: inherit
     permissions:
       contents: write

.gitignore

@@ -4,6 +4,21 @@
 icon/claude-src/
 icon/AppIcon.iconset/
 
+# Session handoff notes — local only, never committed
+CHECKPOINT.md
+
+# Local build configuration, read by build.sh — holds the code-signing
+# identity and, optionally, the certificate password. See .env.example for
+# the shape of it. Never committed.
+.env
+
+# Belt and braces: private key material must never land in the repo, even
+# gitignored. Keep the certificate itself outside the working tree (the
+# setup notes in .env.example use ~/.shannoncoat-signing/) — this pattern
+# only exists to catch a stray copy before it becomes a commit.
+*.p12
+*.pem
+
 # Local reference material (e.g. nested checkouts of other projects) — not
 # part of this project, never meant to be committed.
 .scratch/

README.md

@@ -0,0 +1,156 @@
+![shannoncoat — which coat will Claude wear today?](docs/hero.png)
+
+Run multiple isolated [**\***](#isolation) Claude profiles on macOS — each one
+its own Claude Desktop **and** its own paired Claude Code setup — and tell their
+windows apart at a glance.
+
+Your normal Claude install is left alone. It stays as it is and keeps working
+normally; shannoncoat only adds profiles alongside it.
+
+A menu-bar item allows quick switching and profile management.
+
+---
+> [!NOTE]
+> shannoncoat started as the shell script in the first commit, written by hand.
+Claude built the GUI app out of it — most of the Swift, the icon, and this
+README — working from human direction, review, and dogfooding.
+
+## Requirements
+
+- macOS 13 or later
+- Claude Desktop
+
+## Install
+
+1. Download `shannoncoat.app.zip` from the
+   [latest release](https://github.com/bdeshi/shannoncoat/releases/latest).
+2. Unzip it and move **shannoncoat.app** to `/Applications` or `~/Applications`.
+3. Open it. macOS will block the first launch, because the app isn't notarized.
+   Go to **System Settings → Privacy & Security**, find the blocked item, and
+   click **Open Anyway**.
+4. When prompted, grant **Accessibility**. The window tags are drawn from
+   Accessibility data and won't appear without it.
+
+## First run
+
+With nothing running, shannoncoat offers a list of your profiles and starts
+whichever you tick. You can start several at once.
+
+## Everyday use
+
+The menu bar shows a coloured dot per running profile — dot and name when only
+one is up, dots alone when there are more (hover for the names).
+
+Open the menu and:
+
+- **Click a profile** to switch to it. Every other running profile is quit
+  first, so you end up with just that one — including when the profile you
+  clicked is already up, in which case it's the neighbours that go.
+- **Shift-click a profile** to open it *alongside* whatever is already running,
+  or to bring its window forward if it's already up, leaving everything else
+  where it is.
+
+If you open alongside more often than you switch, **Settings → Click a profile
+to** swaps the two around.
+
+A `⇆` marks the profile you last switched to. **Close Profile** quits one
+profile; **Quit Claude** quits all of them and leaves shannoncoat running.
+**Manage Profiles…** opens the main window.
+
+Quitting Claude by hand, from the Dock, or via Force Quit is picked up within
+about a second — the menu bar always reflects what is actually running.
+
+## Window tags
+
+Each managed Claude window carries a small tag in that profile's colour, so two
+otherwise identical windows are easy to tell apart.
+
+Drag a tag anywhere on its window; each profile remembers where you put its own.
+If you'd rather have something smaller, **Settings → Window tag → Colored dot**
+replaces the name chip with a plain dot.
+
+## Profiles
+
+**default** is your real, untouched Claude install. shannoncoat can start and
+stop it but never manages it, so it gets no tag and can't be deleted.
+
+To add a custom isolated profile, open **Manage Profiles… → +** and enter a
+name. The directories are optional — leave them blank and the profile gets
+`~/.shannoncoat/data/<name>/app` and `~/.shannoncoat/data/<name>/code`. Point
+them anywhere you like if you'd rather keep a profile's data with a project.
+
+Selecting a profile shows both paths, ready to copy.
+
+Each profile is a small JSON file at `~/.shannoncoat/<name>.json`, named after
+the profile. Two profiles may not share a directory — that would silently merge
+their Claude sessions, so shannoncoat refuses to start and tells you which files
+collide.
+
+Deleting a profile removes only that pointer file. **Its Claude data stays on
+disk**, so you can recreate the profile later and pick up where you left off. If
+it's running, it's quit first.
+
+## Settings
+
+- **Launch at Login** — start shannoncoat automatically.
+- **Click a profile to** — whether plain click switches and Shift-click opens
+  alongside, or the reverse.
+- **Window tag** — name chip or coloured dot.
+- **Automatically check for updates** — once a day at most.
+
+## Updates
+
+shannoncoat compares its version against the one published on GitHub. The
+automatic check posts a quiet notification; **Check for Updates…** in Settings
+reports either way.
+
+It never replaces itself. When a new version exists, download it from the
+releases page and swap the app in yourself.
+
+## Troubleshooting
+
+**The window tags don't appear.** Almost always Accessibility. Check
+**System Settings → Privacy & Security → Accessibility**.
+
+If shannoncoat is listed *and already ticked* but the tags still don't show,
+select it, remove it with **−**, then add it back. This happens after replacing
+the app with a build that has a different code signature; the old entry stays
+visible but no longer applies, and toggling it off and on won't fix it.
+
+**Claude Desktop can't be found.** shannoncoat looks in `/Applications` and
+`~/Applications`. If yours is somewhere else, you'll be asked to locate it the
+first time you start a profile.
+
+**A profile won't quit.** Claude was asked to quit and declined — usually its
+own "unsaved work" or "still generating" dialog. shannoncoat deliberately waits
+rather than killing Claude underneath it. Answer the dialog.
+
+## Build from source
+
+Local builds require the Xcode Command Line Tools.
+```
+xcode-select --install
+```
+
+Then run the build script
+```bash
+./build.sh
+```
+
+The app is written to `.build/shannoncoat.app`; copy it to `/Applications` or
+`~/Applications`.
+
+One thing worth setting up: an unsigned local build gets a new code identity
+every time, which silently invalidates its Accessibility grant on each rebuild.
+`.env.example` walks through creating a self-signed certificate once so the
+permission survives.
+
+## Isolation
+
+> [!IMPORTANT]
+> Perfect isolation is not guaranteed. Claude and Claude Code can have functionally
+> full disk access regardless of which profile it's running from, including access
+> to default configuration folders.
+> 
+> Some Claude integrations — skills, plugins, etc — may also hardcode the
+> `~/.claude` path which may modify content in there.

Sources/AppDelegate.swift

@@ -2,9 +2,44 @@
 // Reads live state from LiveState (push-based, no polling) and calls
 // ProfileStore/ClaudeControl in-process — no subprocess, no text parsing.
 import AppKit
+import ApplicationServices
 
-private let author = "bdeshi"
-private let homepage = "https://github.com/bdeshi/shannoncoat"
+// What clicking a profile in the menu does. The two actions are always both
+// reachable — whichever one isn't on the plain click is on Shift-click — so
+// this is a swap, not an on/off.
+enum MenuClickAction: String {
+    case switchTo
+    case openAlongside
+
+    // Names the action generically, for the menu's two hint lines — the
+    // per-profile tooltips say what it does to that profile as things
+    // actually stand (see AppDelegate.outcome).
+    var phrase: String {
+        switch self {
+        case .switchTo: return "switch (quits the others)"
+        case .openAlongside: return "open alongside"
+        }
+    }
+}
+
+// One setting for the whole app, stored as the *plain* click's action; the
+// Shift-click action is derived, which keeps the two from ever being set to
+// the same thing.
+enum MenuClickBehavior {
+    private static let plainClickKey = "MenuPlainClickAction"
+
+    static var plainClick: MenuClickAction {
+        get {
+            UserDefaults.standard.string(forKey: plainClickKey)
+                .flatMap(MenuClickAction.init(rawValue:)) ?? .switchTo
+        }
+        set { UserDefaults.standard.set(newValue.rawValue, forKey: plainClickKey) }
+    }
+
+    static var shiftClick: MenuClickAction {
+        plainClick == .switchTo ? .openAlongside : .switchTo
+    }
+}
 
 final class AppDelegate: NSObject, NSApplicationDelegate, NSMenuDelegate, LiveStateDelegate {
     let statusItem = NSStatusBar.system.statusItem(withLength: NSStatusItem.variableLength)
@@ -12,16 +47,46 @@ final class AppDelegate: NSObject, NSApplicationDelegate, NSMenuDelegate, LiveSt
     let liveState = LiveState()
     private var currentInfos: [ProfileInfo] = []
     private var collisionAlertShown = false
+    private var windowOverlays: [String: WindowOverlay] = [:]
+    private var pendingWindowOverlays: Set<String> = []
+    private var accessibilityPromptShown = false
+    private var accessibilityRecheckScheduled = false
+    private var activationObserver: NSObjectProtocol?
+    private var appearanceObserver: NSKeyValueObservation?
 
     func applicationDidFinishLaunching(_ notification: Notification) {
         menu.delegate = self
         menu.autoenablesItems = false
         statusItem.menu = menu
-        statusItem.button?.image = menuBarIcon()
+        statusItem.button?.image = MenuBarIcon.image()
         statusItem.button?.imagePosition = .imageLeft
 
         liveState.delegate = self
         ManageWindowController.shared.onProfilesChanged = { [weak self] in self?.liveState.reconcile() }
+        ManageWindowController.shared.onOverlayStyleChanged = { [weak self] in self?.rebuildWindowOverlays() }
+
+        // Every app activation, not just Claude's — LiveState deliberately
+        // filters to the Claude binary, so on its own it never hears that
+        // some unrelated app came forward, which is exactly when the tags
+        // need to get out of the way.
+        activationObserver = NSWorkspace.shared.notificationCenter.addObserver(
+            forName: NSWorkspace.didActivateApplicationNotification, object: nil, queue: .main
+        ) { [weak self] _ in self?.updateOverlayVisibility() }
+
+        // The glyph is a template image and re-tints itself, but the coloured
+        // dots beside it don't: ProfileColor picks a brightness per current
+        // appearance at the moment it's asked, and the title is only rebuilt
+        // when profiles start or stop. Without this, switching to dark mode
+        // leaves dots mixed for that appearance sitting in the menu bar until
+        // something unrelated happens to redraw them.
+        appearanceObserver = NSApp.observe(\.effectiveAppearance) { [weak self] _, _ in
+            DispatchQueue.main.async { [weak self] in
+                guard let self else { return }
+                self.applyTitle(self.currentInfos)
+                ManageWindowController.shared.update(self.currentInfos)
+            }
+        }
+
         liveState.reconcile()
 
         // Launching this app fresh with nothing running means there's no
@@ -34,17 +99,12 @@ final class AppDelegate: NSObject, NSApplicationDelegate, NSMenuDelegate, LiveSt
         UpdateChecker.checkAutomaticallyIfDue()
     }
 
-    // Claude's own app icon (bundled as Contents/Resources/AppIcon.icns —
-    // currently a placeholder, see icon/generate-icon.swift), scaled down
-    // for the menu bar.
-    private func menuBarIcon() -> NSImage {
-        let source = NSApp.applicationIconImage ?? NSImage(named: NSImage.applicationIconName) ?? NSImage()
-        let resized = NSImage(size: NSSize(width: 18, height: 18))
-        resized.lockFocus()
-        source.draw(in: NSRect(x: 0, y: 0, width: 18, height: 18), from: .zero, operation: .sourceOver, fraction: 1.0)
-        resized.unlockFocus()
-        return resized
-    }
+    // The menu bar draws its own glyph (see MenuBarIcon) rather than the app
+    // icon scaled down, which is what it used to do: at 18pt the app icon's
+    // three coats collapse into a smudge, and its colours ignore the menu
+    // bar's appearance entirely. MenuBarIcon returns a template image, so
+    // macOS tints it for light/dark and for the open-menu inversion, and
+    // re-tints it by itself when the theme changes.
 
     // MARK: - LiveStateDelegate
 
@@ -53,6 +113,107 @@ final class AppDelegate: NSObject, NSApplicationDelegate, NSMenuDelegate, LiveSt
         currentInfos = infos
         applyTitle(infos)
         ManageWindowController.shared.update(infos)
+        updateWindowOverlays(infos)
+    }
+
+    // Each tag decides for itself whether the window it labels is actually
+    // visible underneath it (see WindowOverlay.isTargetVisible) — this just
+    // says "now would be a good time to look again". Activation is the
+    // usual way a window gets buried or uncovered without moving at all,
+    // which no AX notification reports.
+    private func updateOverlayVisibility() {
+        for overlay in windowOverlays.values { overlay.refreshVisibility() }
+    }
+
+    // macOS doesn't notify an app that it has just been granted
+    // Accessibility, and overlays are otherwise only reconsidered when a
+    // Claude window launches, quits or activates — so a permission granted
+    // while this is running would do nothing visible until the user
+    // happened to touch a Claude window, or restarted the app. Polling for
+    // it costs a cheap local check every couple of seconds, and only while
+    // the permission is actually missing: the moment it lands, the guard in
+    // `updateWindowOverlays` passes and this stops rescheduling itself.
+    //
+    // Also covers a subtler case — replacing the installed bundle and
+    // relaunching immediately can start the app before TCC has settled on
+    // the new copy, and a one-shot check there would strand the tags for
+    // the rest of the session over a denial that was only ever momentary.
+    private func scheduleAccessibilityRecheck() {
+        guard !accessibilityRecheckScheduled else { return }
+        accessibilityRecheckScheduled = true
+        DispatchQueue.main.asyncAfter(deadline: .now() + 2) { [weak self] in
+            guard let self else { return }
+            accessibilityRecheckScheduled = false
+            updateWindowOverlays(currentInfos)
+        }
+    }
+
+    // A style change rewrites the tag's shape and size, which is decided
+    // when its panel is built — so the existing ones are dropped (deinit
+    // tears down each panel and its AXObserver) and rebuilt rather than
+    // patched in place.
+    private func rebuildWindowOverlays() {
+        windowOverlays.removeAll()
+        updateWindowOverlays(currentInfos)
+    }
+
+    // Shown on every running *managed* profile — never on "default",
+    // which isn't a shannoncoat profile at all, just the real underlying
+    // Claude install. Removing an entry here deinits its WindowOverlay,
+    // which tears down its AXObserver and hides the tag panel.
+    private func updateWindowOverlays(_ infos: [ProfileInfo]) {
+        let managed = infos.filter { $0.running && $0.profile.name != "default" }
+        let managedNames = Set(managed.map(\.profile.name))
+        windowOverlays = windowOverlays.filter { managedNames.contains($0.key) }
+        pendingWindowOverlays.formIntersection(managedNames)
+
+        // A tag is positioned entirely from Accessibility data, so without
+        // that permission there is nothing to position: `attach` would
+        // burn its dozen retries per profile and give up without a word,
+        // which reads as "the feature is broken" rather than "macOS said
+        // no". Prompt instead — the same call `ClaudeControl.focus` makes
+        // for the same reason.
+        //
+        // Worth knowing when this bites, because it looks impossible:
+        // a local build gets a fresh code identity every time build.sh
+        // runs, and that silently invalidates an existing grant while
+        // leaving the app still listed *and still ticked* under Privacy &
+        // Security → Accessibility. Re-granting means removing that stale
+        // row with "−" and adding the newly built app back; toggling it
+        // off and on again is not enough. (Note that running the binary
+        // straight out of the bundle from a terminal will appear to work
+        // regardless — it inherits the terminal's grant, not the app's,
+        // so it's useless for testing this.)
+        if !managed.isEmpty, !AXIsProcessTrusted() {
+            if !accessibilityPromptShown {
+                accessibilityPromptShown = true
+                ClaudeControl.promptForAccessibility()
+            }
+            scheduleAccessibilityRecheck()
+            return
+        }
+
+        for info in managed
+        where windowOverlays[info.profile.name] == nil && !pendingWindowOverlays.contains(info.profile.name) {
+            guard let pid = info.pid else { continue }
+            let name = info.profile.name
+            pendingWindowOverlays.insert(name)
+            WindowOverlay.attach(profileName: name, color: ProfileColor.dotColor(for: name), pid: pid) { [weak self] overlay in
+                guard let self else { return }
+                pendingWindowOverlays.remove(name)
+                // The profile may have quit again while this was retrying
+                // for its window — don't attach a stale overlay if so.
+                guard currentInfos.contains(where: { $0.profile.name == name && $0.running }) else { return }
+                windowOverlays[name] = overlay
+                // A tag created while some other app is frontmost must not
+                // appear over it — `attach` can complete seconds after the
+                // launch that triggered it, by which point focus has often
+                // moved on.
+                updateOverlayVisibility()
+            }
+        }
+
+        updateOverlayVisibility()
     }
 
     // Two profiles sharing a dir is a fatal misconfiguration (would
@@ -115,15 +276,29 @@ final class AppDelegate: NSObject, NSApplicationDelegate, NSMenuDelegate, LiveSt
         menu.addItem(header)
         menu.addItem(.separator())
 
-        let hint = NSMenuItem(title: "\u{21e7}-click to open alongside", action: nil, keyEquivalent: "")
-        hint.isEnabled = false
-        menu.addItem(hint)
+        // Read once per rebuild rather than per item. The menu is rebuilt
+        // from scratch on every open, so changing the setting is reflected
+        // the next time the menu is shown without anything having to tell
+        // the delegate about it.
+        let plainClick = MenuClickBehavior.plainClick
+        let shiftClick = MenuClickBehavior.shiftClick
+
+        // Both gestures are spelled out, not just the modified one: which is
+        // which is now a setting, so a single line about Shift would leave the
+        // plain click to be assumed — and it's the plain click that quits
+        // things when it's the one bound to switching.
+        for (gesture, action) in [("Click", plainClick), ("\u{21e7}-click", shiftClick)] {
+            let hint = NSMenuItem(title: "\(gesture) to \(action.phrase)", action: nil, keyEquivalent: "")
+            hint.isEnabled = false
+            menu.addItem(hint)
+        }
         menu.addItem(.separator())
 
         for info in profiles {
-            // Click = exclusive switch (quits every other running profile).
-            // Shift-click = open alongside instead, without disturbing
-            // anything else that's running.
+            // One click switches (quitting every other running profile), the
+            // other opens alongside without disturbing what's running — which
+            // is on the plain click and which is on Shift is the user's
+            // choice, see MenuClickBehavior.
             let title = info.profile.name == liveState.lastActiveName
                 ? "\(info.profile.name)  \u{21c6}" : info.profile.name
             let item = NSMenuItem(title: title, action: #selector(pick(_:)), keyEquivalent: "")
@@ -131,7 +306,8 @@ final class AppDelegate: NSObject, NSApplicationDelegate, NSMenuDelegate, LiveSt
             item.representedObject = info.profile.name
             item.image = ProfileColor.dotImage(for: info.profile.name, dimmed: !info.running)
             item.state = info.running ? .on : .off
-            item.toolTip = info.running ? "Running — click to focus" : "Click to switch • Shift-click to open alongside"
+            item.toolTip = "Click to \(outcome(of: plainClick, for: info))"
+                + " • \u{21e7}-click to \(outcome(of: shiftClick, for: info))"
             menu.addItem(item)
         }
 
@@ -175,6 +351,22 @@ final class AppDelegate: NSObject, NSApplicationDelegate, NSMenuDelegate, LiveSt
         menu.addItem(quitSelfItem)
     }
 
+    // What a gesture will actually do to THIS profile as things stand — the
+    // same action reads differently depending on what's up. Switching only
+    // quits neighbours when there are neighbours to quit, and opening
+    // alongside is only "alongside" something when something else is running.
+    private func outcome(of action: MenuClickAction, for info: ProfileInfo) -> String {
+        let others = currentInfos.filter { $0.running && $0.profile.name != info.profile.name }.count
+        let reach = info.running ? "focus it" : "start it"
+        switch action {
+        case .openAlongside:
+            return others == 0 ? reach : "\(reach), leaving the others running"
+        case .switchTo:
+            guard others > 0 else { return reach }
+            return "\(reach), quitting the other \(others == 1 ? "profile" : "\(others) profiles")"
+        }
+    }
+
     // Shown once at launch when nothing is running. A checklist rather
     // than a single pick: unlike the menu's click/Shift-click (one
     // profile, exclusive vs. alongside), there's nothing running yet to be
@@ -218,10 +410,10 @@ final class AppDelegate: NSObject, NSApplicationDelegate, NSMenuDelegate, LiveSt
               let profile = currentInfos.first(where: { $0.profile.name == name })?.profile
         else { return }
         liveState.markActive(name)
-        if NSApp.currentEvent?.modifierFlags.contains(.shift) == true {
-            openProfile(profile)
-        } else {
-            switchTo(profile)
+        let shiftHeld = NSApp.currentEvent?.modifierFlags.contains(.shift) == true
+        switch shiftHeld ? MenuClickBehavior.shiftClick : MenuClickBehavior.plainClick {
+        case .openAlongside: openProfile(profile)
+        case .switchTo: switchTo(profile)
         }
     }
 
@@ -236,6 +428,16 @@ final class AppDelegate: NSObject, NSApplicationDelegate, NSMenuDelegate, LiveSt
         }
     }
 
+    // Switching means "make this the one that's running", so it quits the
+    // others whether or not this profile is already up.
+    //
+    // It used to bail out early for an already-running profile, on the
+    // reasoning that a click reaching for a second open window is someone
+    // moving between windows rather than asking for one to go. That guess is
+    // exactly what MenuClickBehavior now settles: both actions have a gesture
+    // of their own, so choosing the switch gesture *is* the instruction, and
+    // second-guessing it left no way to ask for an exclusive switch at all
+    // once the target was up.
     private func switchTo(_ profile: ResolvedProfile) {
         let others = currentInfos.filter { $0.running && $0.profile.name != profile.name }
         guard !others.isEmpty else { openProfile(profile); return }
@@ -263,23 +465,15 @@ final class AppDelegate: NSObject, NSApplicationDelegate, NSMenuDelegate, LiveSt
         ManageWindowController.shared.show()
     }
 
+    // About lives as a tab in the same window (see ManageWindow.swift)
+    // rather than the standard NSApp About panel — the standard panel
+    // auto-appends its own "Version X (Y)" line from Info.plist's
+    // CFBundleVersion/CFBundleShortVersionString, which are identical in
+    // this build, so it was showing that duplicated alongside our own
+    // version line.
     @objc func showAbout() {
-        // Accessory apps (no Dock icon) don't auto-activate for a window
-        // they open, so the standard About panel would appear behind
-        // whatever's frontmost without this.
-        NSApp.activate(ignoringOtherApps: true)
-        let credits = """
-        Which coat will Claude wear today? Menu bar switcher for running multiple isolated Claude Desktop profiles side by side — each paired with its own Claude Code config so the two never cross-contaminate.
-
-        Author: \(author)
-        Source: \(homepage)
-
-        Version: \(UpdateChecker.displayVersion)
-        """
-        NSApp.orderFrontStandardAboutPanel(options: [
-            .applicationName: "shannoncoat",
-            .credits: NSAttributedString(string: credits),
-        ])
+        ManageWindowController.shared.update(currentInfos)
+        ManageWindowController.shared.show(tab: .about)
     }
 
     @objc func quitClaude() {

Sources/ClaudeControl.swift

@@ -182,7 +182,7 @@ enum ClaudeControl {
         AXUIElementSetAttributeValue(window, kAXMinimizedAttribute as CFString, minimized as CFTypeRef)
     }
 
-    private static func promptForAccessibility() {
+    static func promptForAccessibility() {
         let options = [kAXTrustedCheckOptionPrompt.takeUnretainedValue(): true] as CFDictionary
         _ = AXIsProcessTrustedWithOptions(options)
     }

Sources/ManageWindow.swift

@@ -1,14 +1,21 @@
 // One ordinary, non-modal window for everything profile-management related
 // — replaces what would otherwise be a string of separate popup alerts.
 // Opened from the menu bar's "Manage Profiles…" item or the standard
-// Cmd+, shortcut.
+// Cmd+, shortcut. Fixed-size (not user-resizable) — each tab reports its
+// own natural size via preferredContentSize, and NSTabViewController
+// resizes the window to match automatically, so it's never left showing
+// empty space sized for a different tab or state.
 import AppKit
 
 final class ManageWindowController: NSWindowController {
     static let shared = ManageWindowController()
 
+    enum Tab: Int { case profiles = 0, settings = 1, about = 2 }
+
     private let profilesVC = ProfilesViewController()
     private let settingsVC = SettingsViewController()
+    private let aboutVC = AboutViewController()
+    private let tabs = NSTabViewController()
 
     // Called after a profile is added/removed so the caller can trigger an
     // immediate LiveState reconcile instead of waiting on the next
@@ -17,20 +24,28 @@ final class ManageWindowController: NSWindowController {
         didSet { profilesVC.onChange = onProfilesChanged }
     }
 
+    // Called when the window-tag style changes, so open tags can be
+    // rebuilt in the new style immediately rather than at the next
+    // launch/quit of a Claude window.
+    var onOverlayStyleChanged: (() -> Void)? {
+        didSet { settingsVC.onOverlayStyleChanged = onOverlayStyleChanged }
+    }
+
     private init() {
         let window = NSWindow(
-            contentRect: NSRect(x: 0, y: 0, width: 460, height: 360),
-            styleMask: [.titled, .closable, .miniaturizable, .resizable],
+            contentRect: NSRect(x: 0, y: 0, width: 420, height: 260),
+            styleMask: [.titled, .closable, .miniaturizable],
             backing: .buffered, defer: false)
         window.title = "shannoncoat"
         window.isReleasedWhenClosed = false
         window.center()
 
-        let tabs = NSTabViewController()
         profilesVC.title = "Profiles"
         settingsVC.title = "Settings"
+        aboutVC.title = "About"
         tabs.addTabViewItem(NSTabViewItem(viewController: profilesVC))
         tabs.addTabViewItem(NSTabViewItem(viewController: settingsVC))
+        tabs.addTabViewItem(NSTabViewItem(viewController: aboutVC))
         window.contentViewController = tabs
 
         super.init(window: window)
@@ -38,8 +53,11 @@ final class ManageWindowController: NSWindowController {
 
     required init?(coder: NSCoder) { fatalError("init(coder:) has not been implemented") }
 
-    func show() {
+    func show(tab: Tab? = nil) {
         NSApp.activate(ignoringOtherApps: true)
+        if let tab {
+            tabs.selectedTabViewItemIndex = tab.rawValue
+        }
         window?.makeKeyAndOrderFront(nil)
     }
 
@@ -57,41 +75,60 @@ private final class ProfilesViewController: NSViewController, NSTableViewDataSou
 
     private var infos: [ProfileInfo] = []
     private let tableView = NSTableView()
-    private let removeButton = NSButton(title: "\u{2212}", target: nil, action: nil)
+    private let addRemoveControl = NSSegmentedControl()
     private let detailStack = NSStackView()
     private let detailAppValue = NSTextField(labelWithString: "")
     private let detailCodeValue = NSTextField(labelWithString: "")
+    private let detailAppCopyItem = NSMenuItem(title: "Copy Path", action: #selector(copyDetailPath(_:)), keyEquivalent: "")
+    private let detailCodeCopyItem = NSMenuItem(title: "Copy Path", action: #selector(copyDetailPath(_:)), keyEquivalent: "")
     private let addForm = NSStackView()
     private let nameField = NSTextField()
     private let codeField = NSTextField()
     private let appField = NSTextField()
     private let errorLabel = NSTextField(labelWithString: "")
+    private var outerStack: NSStackView!
+    private var scrollHeightConstraint: NSLayoutConstraint!
+
+    private static let margin: CGFloat = 20
+    private static let tableWidth: CGFloat = 340
+    private static let minVisibleRows = 3
+    private static let maxVisibleRows = 8
 
     override func loadView() {
-        view = NSView(frame: NSRect(x: 0, y: 0, width: 460, height: 360))
+        view = NSView(frame: NSRect(x: 0, y: 0, width: 420, height: 260))
 
         let column = NSTableColumn(identifier: .init("profile"))
         column.title = "Profile"
-        column.width = 380
+        column.width = 340
         tableView.addTableColumn(column)
         tableView.headerView = nil
         tableView.dataSource = self
         tableView.delegate = self
-        tableView.rowHeight = 22
+        tableView.rowHeight = 24
+        tableView.usesAlternatingRowBackgroundColors = true
         tableView.menu = buildContextMenu()
 
         let scroll = NSScrollView()
         scroll.documentView = tableView
         scroll.hasVerticalScroller = true
+        scroll.borderType = .bezelBorder
         scroll.translatesAutoresizingMaskIntoConstraints = false
 
-        let addButton = NSButton(title: "+", target: self, action: #selector(toggleAddForm))
-        removeButton.target = self
-        removeButton.action = #selector(removeSelected)
-        removeButton.isEnabled = false
-        let buttonRow = NSStackView(views: [addButton, removeButton, NSView()])
+        addRemoveControl.segmentCount = 2
+        addRemoveControl.trackingMode = .momentary
+        addRemoveControl.segmentStyle = .smallSquare
+        addRemoveControl.setImage(NSImage(systemSymbolName: "plus", accessibilityDescription: "Add Profile"), forSegment: 0)
+        addRemoveControl.setImage(
+            NSImage(systemSymbolName: "minus", accessibilityDescription: "Remove Profile"), forSegment: 1)
+        addRemoveControl.setWidth(28, forSegment: 0)
+        addRemoveControl.setWidth(28, forSegment: 1)
+        addRemoveControl.setEnabled(false, forSegment: 1)
+        addRemoveControl.setToolTip("Add Profile", forSegment: 0)
+        addRemoveControl.setToolTip("Remove Profile", forSegment: 1)
+        addRemoveControl.target = self
+        addRemoveControl.action = #selector(addRemoveClicked(_:))
+        let buttonRow = NSStackView(views: [addRemoveControl, NSView()])
         buttonRow.orientation = .horizontal
-        buttonRow.spacing = 4
         buttonRow.translatesAutoresizingMaskIntoConstraints = false
 
         buildDetailStack()
@@ -102,44 +139,102 @@ private final class ProfilesViewController: NSViewController, NSTableViewDataSou
         addForm.isHidden = true
         addForm.translatesAutoresizingMaskIntoConstraints = false
 
-        let stack = NSStackView(views: [scroll, detailStack, buttonRow, addForm])
+        let stack = NSStackView(views: [scroll, buttonRow, detailStack, addForm])
         stack.orientation = .vertical
-        stack.spacing = 8
-        stack.edgeInsets = NSEdgeInsets(top: 12, left: 12, bottom: 12, right: 12)
+        stack.spacing = 12
+        stack.edgeInsets = NSEdgeInsets(top: Self.margin, left: Self.margin, bottom: Self.margin, right: Self.margin)
         stack.translatesAutoresizingMaskIntoConstraints = false
         view.addSubview(stack)
+        outerStack = stack
+        scrollHeightConstraint = scroll.heightAnchor.constraint(equalToConstant: heightForRows(0))
 
         NSLayoutConstraint.activate([
             stack.topAnchor.constraint(equalTo: view.topAnchor),
             stack.leadingAnchor.constraint(equalTo: view.leadingAnchor),
             stack.trailingAnchor.constraint(equalTo: view.trailingAnchor),
             stack.bottomAnchor.constraint(equalTo: view.bottomAnchor),
-            scroll.heightAnchor.constraint(greaterThanOrEqualToConstant: 160),
-            detailStack.widthAnchor.constraint(equalTo: stack.widthAnchor),
+            scroll.widthAnchor.constraint(equalToConstant: Self.tableWidth),
+            scrollHeightConstraint,
+            // `scroll` is the one arranged subview with a real, absolute
+            // width — everything else in this stack ties its width to
+            // *that*, not to `stack` itself (whose own frame spans
+            // edge-to-edge; edgeInsets only govern how the stack lays out
+            // its children, not its own bounds). Left unconstrained, these
+            // rows have no hard width anywhere in their constraint chain —
+            // NSStackView doesn't fill them to the inset content width by
+            // default, so they end up sized/positioned ambiguously (in
+            // practice: flush against the window edge, sometimes wider
+            // than the window).
+            buttonRow.widthAnchor.constraint(equalTo: scroll.widthAnchor),
+            detailStack.widthAnchor.constraint(equalTo: scroll.widthAnchor),
+            addForm.widthAnchor.constraint(equalTo: scroll.widthAnchor),
         ])
+
+        updatePreferredSize()
+    }
+
+    // Sized to the actual row count (clamped to a sensible range) rather
+    // than one fixed height — with only a couple of profiles that avoids a
+    // big block of empty striped background below the last row; with many
+    // it caps out and scrolls instead of taking over the window.
+    private func heightForRows(_ count: Int) -> CGFloat {
+        let rows = max(Self.minVisibleRows, min(count, Self.maxVisibleRows))
+        return CGFloat(rows) * tableView.rowHeight + 2
+    }
+
+    // NSTabViewController watches its selected child's preferredContentSize
+    // and resizes the window to match live — so recomputing this after
+    // toggling the add form or the path-details row is what makes the
+    // window grow/shrink to fit instead of sitting at one fixed size with
+    // empty space in the states that don't need it.
+    private func updatePreferredSize() {
+        view.layoutSubtreeIfNeeded()
+        preferredContentSize = outerStack.fittingSize
+    }
+
+    // A second, authoritative recompute after every real layout pass —
+    // explicit calls from action handlers (below) update it eagerly for
+    // responsiveness, but this is the one that can't be thrown off by
+    // metrics not being fully resolved yet at the point an eager call runs.
+    override func viewDidLayout() {
+        super.viewDidLayout()
+        preferredContentSize = outerStack.fittingSize
     }
 
     // Shows the selected profile's two dirs — the thing you'd otherwise
-    // have to right-click "Reveal" to find out.
+    // have to right-click "Reveal" to find out. Not `.isSelectable` — that
+    // makes a label click-into-edit, and the field editor that appears
+    // draws the *untruncated* string at its full intrinsic width, which
+    // can extend past the window and get clipped by it rather than
+    // wrapping or scrolling cleanly. A tooltip (full path) plus a
+    // right-click "Copy Path" menu covers the same "get the value out"
+    // need without that.
     private func buildDetailStack() {
-        for value in [detailAppValue, detailCodeValue] {
-            value.isSelectable = true
+        detailAppCopyItem.target = self
+        detailCodeCopyItem.target = self
+        let appMenu = NSMenu()
+        appMenu.addItem(detailAppCopyItem)
+        let codeMenu = NSMenu()
+        codeMenu.addItem(detailCodeCopyItem)
+
+        for (value, menu) in [(detailAppValue, appMenu), (detailCodeValue, codeMenu)] {
             value.textColor = .secondaryLabelColor
             value.font = .systemFont(ofSize: NSFont.smallSystemFontSize)
             value.lineBreakMode = .byTruncatingMiddle
             value.setContentCompressionResistancePriority(.defaultLow, for: .horizontal)
+            value.menu = menu
         }
 
         let appRow = NSStackView(views: [labeled("Claude Desktop:"), detailAppValue])
         appRow.orientation = .horizontal
-        appRow.spacing = 6
+        appRow.spacing = 8
         let codeRow = NSStackView(views: [labeled("Claude Code:"), detailCodeValue])
         codeRow.orientation = .horizontal
-        codeRow.spacing = 6
+        codeRow.spacing = 8
 
         detailStack.orientation = .vertical
         detailStack.alignment = .leading
-        detailStack.spacing = 2
+        detailStack.spacing = 4
         [appRow, codeRow].forEach(detailStack.addArrangedSubview)
         appRow.widthAnchor.constraint(equalTo: detailStack.widthAnchor).isActive = true
         codeRow.widthAnchor.constraint(equalTo: detailStack.widthAnchor).isActive = true
@@ -149,62 +244,93 @@ private final class ProfilesViewController: NSViewController, NSTableViewDataSou
         nameField.placeholderString = "Profile name"
         nameField.delegate = self
 
+        for field in [codeField, appField] {
+            field.lineBreakMode = .byTruncatingMiddle
+            field.setContentCompressionResistancePriority(.defaultLow, for: .horizontal)
+        }
+
         codeField.placeholderString = "~/.shannoncoat/data/<name>/code"
         let codeChoose = NSButton(title: "Choose\u{2026}", target: self, action: #selector(chooseCodeDir))
         let codeRow = NSStackView(views: [labeled("Claude Code:"), codeField, codeChoose])
         codeRow.orientation = .horizontal
-        codeRow.spacing = 6
+        codeRow.spacing = 8
 
         appField.placeholderString = "~/.shannoncoat/data/<name>/app"
         let appChoose = NSButton(title: "Choose\u{2026}", target: self, action: #selector(chooseAppDir))
         let appRow = NSStackView(views: [labeled("Claude Desktop:"), appField, appChoose])
         appRow.orientation = .horizontal
-        appRow.spacing = 6
+        appRow.spacing = 8
 
         errorLabel.textColor = .systemRed
         errorLabel.font = .systemFont(ofSize: NSFont.smallSystemFontSize)
+        errorLabel.maximumNumberOfLines = 0
+        errorLabel.lineBreakMode = .byWordWrapping
 
         let createButton = NSButton(title: "Create", target: self, action: #selector(createProfile))
         createButton.keyEquivalent = "\r"
         let cancelButton = NSButton(title: "Cancel", target: self, action: #selector(toggleAddForm))
-        let buttonRow = NSStackView(views: [NSView(), cancelButton, createButton])
-        buttonRow.orientation = .horizontal
-        buttonRow.spacing = 8
+        let formButtonRow = NSStackView(views: [NSView(), cancelButton, createButton])
+        formButtonRow.orientation = .horizontal
+        formButtonRow.spacing = 8
+
+        let divider = NSBox()
+        divider.boxType = .separator
 
         addForm.orientation = .vertical
         addForm.alignment = .leading
-        addForm.spacing = 6
-        [nameField, codeRow, appRow, errorLabel, buttonRow].forEach(addForm.addArrangedSubview)
+        addForm.spacing = 10
+        [divider, nameField, codeRow, appRow, errorLabel, formButtonRow].forEach(addForm.addArrangedSubview)
+        divider.widthAnchor.constraint(equalTo: addForm.widthAnchor).isActive = true
         nameField.widthAnchor.constraint(equalTo: addForm.widthAnchor).isActive = true
         codeRow.widthAnchor.constraint(equalTo: addForm.widthAnchor).isActive = true
         appRow.widthAnchor.constraint(equalTo: addForm.widthAnchor).isActive = true
-        buttonRow.widthAnchor.constraint(equalTo: addForm.widthAnchor).isActive = true
+        formButtonRow.widthAnchor.constraint(equalTo: addForm.widthAnchor).isActive = true
     }
 
+    // Fixed-width, trailing-aligned label so the fields in a two-row form
+    // (differing label lengths: "Claude Code:" vs "Claude Desktop:") start
+    // at the same x position instead of a ragged left edge.
     private func labeled(_ text: String) -> NSTextField {
         let field = NSTextField(labelWithString: text)
+        field.font = .systemFont(ofSize: NSFont.systemFontSize)
+        field.textColor = .secondaryLabelColor
         field.setContentHuggingPriority(.required, for: .horizontal)
+        field.alignment = .right
+        field.widthAnchor.constraint(equalToConstant: 104).isActive = true
         return field
     }
 
     func update(_ infos: [ProfileInfo]) {
         self.infos = infos
         tableView.reloadData()
+        scrollHeightConstraint.constant = heightForRows(infos.count)
         refreshForSelection()
     }
 
     private func refreshForSelection() {
         let row = tableView.selectedRow
         guard infos.indices.contains(row) else {
-            removeButton.isEnabled = false
+            addRemoveControl.setEnabled(false, forSegment: 1)
             detailStack.isHidden = true
+            updatePreferredSize()
             return
         }
         let profile = infos[row].profile
-        removeButton.isEnabled = profile.name != "default"
+        addRemoveControl.setEnabled(profile.name != "default", forSegment: 1)
         detailAppValue.stringValue = profile.appDir
+        detailAppValue.toolTip = profile.appDir
+        detailAppCopyItem.representedObject = profile.appDir
         detailCodeValue.stringValue = profile.codeDir
+        detailCodeValue.toolTip = profile.codeDir
+        detailCodeCopyItem.representedObject = profile.codeDir
         detailStack.isHidden = false
+        updatePreferredSize()
+    }
+
+    @objc private func copyDetailPath(_ sender: NSMenuItem) {
+        guard let path = sender.representedObject as? String else { return }
+        NSPasteboard.general.clearContents()
+        NSPasteboard.general.setString(path, forType: .string)
     }
 
     // MARK: NSTableViewDataSource / Delegate
@@ -229,17 +355,26 @@ private final class ProfilesViewController: NSViewController, NSTableViewDataSou
             cell.imageView = imageView
             cell.textField = textField
             NSLayoutConstraint.activate([
-                imageView.leadingAnchor.constraint(equalTo: cell.leadingAnchor, constant: 4),
+                imageView.leadingAnchor.constraint(equalTo: cell.leadingAnchor, constant: 6),
                 imageView.centerYAnchor.constraint(equalTo: cell.centerYAnchor),
                 imageView.widthAnchor.constraint(equalToConstant: 10),
                 imageView.heightAnchor.constraint(equalToConstant: 10),
-                textField.leadingAnchor.constraint(equalTo: imageView.trailingAnchor, constant: 6),
-                textField.trailingAnchor.constraint(lessThanOrEqualTo: cell.trailingAnchor, constant: -4),
+                textField.leadingAnchor.constraint(equalTo: imageView.trailingAnchor, constant: 8),
+                textField.trailingAnchor.constraint(lessThanOrEqualTo: cell.trailingAnchor, constant: -6),
                 textField.centerYAnchor.constraint(equalTo: cell.centerYAnchor),
             ])
         }
         cell.imageView?.image = ProfileColor.dotImage(for: info.profile.name, dimmed: !info.running)
-        cell.textField?.stringValue = "\(info.profile.name) — \(info.running ? "running" : "stopped")"
+
+        let text = NSMutableAttributedString(
+            string: info.profile.name, attributes: [.font: NSFont.systemFont(ofSize: NSFont.systemFontSize)])
+        text.append(NSAttributedString(
+            string: "  \(info.running ? "Running" : "Stopped")",
+            attributes: [
+                .font: NSFont.systemFont(ofSize: NSFont.smallSystemFontSize),
+                .foregroundColor: NSColor.secondaryLabelColor,
+            ]))
+        cell.textField?.attributedStringValue = text
         return cell
     }
 
@@ -258,6 +393,14 @@ private final class ProfilesViewController: NSViewController, NSTableViewDataSou
 
     // MARK: Actions
 
+    @objc private func addRemoveClicked(_ sender: NSSegmentedControl) {
+        switch sender.selectedSegment {
+        case 0: toggleAddForm()
+        case 1: removeSelected()
+        default: break
+        }
+    }
+
     @objc private func toggleAddForm() {
         addForm.isHidden.toggle()
         if !addForm.isHidden {
@@ -267,6 +410,7 @@ private final class ProfilesViewController: NSViewController, NSTableViewDataSou
             errorLabel.stringValue = ""
             view.window?.makeFirstResponder(nameField)
         }
+        updatePreferredSize()
     }
 
     @objc private func chooseCodeDir() { choose(into: codeField) }
@@ -295,6 +439,7 @@ private final class ProfilesViewController: NSViewController, NSTableViewDataSou
             onChange?()
         } catch {
             errorLabel.stringValue = (error as? LocalizedError)?.errorDescription ?? "\(error)"
+            updatePreferredSize()
         }
     }
 
@@ -364,9 +509,52 @@ private final class SettingsViewController: NSViewController {
         checkboxWithTitle: "Automatically check for updates", target: nil, action: nil)
     private let launchAtLoginCheckbox = NSButton(checkboxWithTitle: "Launch at Login", target: nil, action: nil)
     private let checkNowButton = NSButton(title: "Check for Updates\u{2026}", target: nil, action: nil)
+    private let tagStyleLabel = NSTextField(labelWithString: "Window tag:")
+    private let tagStylePopUp = NSPopUpButton(frame: .zero, pullsDown: false)
+    private var tagStyleRow: NSStackView!
+    private let clickActionLabel = NSTextField(labelWithString: "Click a profile to:")
+    private let clickActionPopUp = NSPopUpButton(frame: .zero, pullsDown: false)
+    private var clickActionRow: NSStackView!
+    private var stack: NSStackView!
+
+    var onOverlayStyleChanged: (() -> Void)?
+
+    // Order matches the popup's items, so the selected index maps straight
+    // onto a style without a title-string comparison.
+    private static let tagStyles: [(title: String, style: WindowOverlayStyle)] = [
+        ("Name chip", .chip),
+        ("Colored dot", .dot),
+    ]
+
+    // Same index-to-value arrangement. Each title spells out the Shift-click
+    // half too: the two actions always swap together, so showing only the
+    // plain click's half would leave the other looking unset.
+    private static let clickActions: [(title: String, action: MenuClickAction)] = [
+        ("Switch to it (\u{21e7}: open alongside)", .switchTo),
+        ("Open it alongside (\u{21e7}: switch to it)", .openAlongside),
+    ]
 
     override func loadView() {
-        view = NSView(frame: NSRect(x: 0, y: 0, width: 460, height: 360))
+        view = NSView(frame: NSRect(x: 0, y: 0, width: 420, height: 150))
+
+        tagStylePopUp.addItems(withTitles: Self.tagStyles.map(\.title))
+        tagStylePopUp.selectItem(at: Self.tagStyles.firstIndex { $0.style == WindowOverlayPosition.style } ?? 0)
+        tagStylePopUp.target = self
+        tagStylePopUp.action = #selector(changeTagStyle)
+
+        tagStyleRow = NSStackView(views: [tagStyleLabel, tagStylePopUp])
+        tagStyleRow.orientation = .horizontal
+        tagStyleRow.spacing = 8
+
+        clickActionPopUp.addItems(withTitles: Self.clickActions.map(\.title))
+        clickActionPopUp.selectItem(
+            at: Self.clickActions.firstIndex { $0.action == MenuClickBehavior.plainClick } ?? 0)
+        clickActionPopUp.target = self
+        clickActionPopUp.action = #selector(changeClickAction)
+
+        clickActionRow = NSStackView(views: [clickActionLabel, clickActionPopUp])
+        clickActionRow.orientation = .horizontal
+        clickActionRow.spacing = 8
 
         launchAtLoginCheckbox.target = self
         launchAtLoginCheckbox.action = #selector(toggleLaunchAtLogin)
@@ -378,17 +566,69 @@ private final class SettingsViewController: NSViewController {
 
         checkNowButton.target = self
         checkNowButton.action = #selector(checkNow)
+        checkNowButton.bezelStyle = .rounded
 
-        let stack = NSStackView(views: [launchAtLoginCheckbox, autoUpdateCheckbox, checkNowButton])
+        stack = NSStackView(views: [
+            launchAtLoginCheckbox, clickActionRow, tagStyleRow, autoUpdateCheckbox, checkNowButton,
+        ])
         stack.orientation = .vertical
         stack.alignment = .leading
-        stack.spacing = 12
+        stack.spacing = 14
+        stack.edgeInsets = NSEdgeInsets(top: 20, left: 20, bottom: 20, right: 20)
         stack.translatesAutoresizingMaskIntoConstraints = false
         view.addSubview(stack)
         NSLayoutConstraint.activate([
-            stack.topAnchor.constraint(equalTo: view.topAnchor, constant: 20),
-            stack.leadingAnchor.constraint(equalTo: view.leadingAnchor, constant: 20),
+            stack.topAnchor.constraint(equalTo: view.topAnchor),
+            stack.leadingAnchor.constraint(equalTo: view.leadingAnchor),
+            stack.trailingAnchor.constraint(lessThanOrEqualTo: view.trailingAnchor),
+            stack.bottomAnchor.constraint(equalTo: view.bottomAnchor),
         ])
+
+        updatePreferredSize()
+    }
+
+    override func viewDidLayout() {
+        super.viewDidLayout()
+        updatePreferredSize()
+    }
+
+    // NOT `stack.fittingSize` for the width — that was measured observing
+    // it clip a checkbox's label by a consistent amount regardless of
+    // when it's read (loadView vs. viewDidLayout: same result), so this
+    // isn't a measure-too-early timing issue, it's `NSStackView.fittingSize`
+    // itself undercounting a checkbox's true rendered width. Asking each
+    // control directly for its own `intrinsicContentSize` instead — which
+    // is what AutoLayout itself uses to size an unconstrained control —
+    // sidesteps whatever the stack's own aggregation is getting wrong.
+    private func updatePreferredSize() {
+        // Same reasoning for the label+popup rows: summed from their two
+        // controls plus the row spacing rather than trusting the row's
+        // own fittingSize.
+        let rowWidths = [
+            tagStyleLabel.intrinsicContentSize.width
+                + tagStylePopUp.intrinsicContentSize.width + tagStyleRow.spacing,
+            clickActionLabel.intrinsicContentSize.width
+                + clickActionPopUp.intrinsicContentSize.width + clickActionRow.spacing,
+        ]
+        let widest = ([launchAtLoginCheckbox, autoUpdateCheckbox, checkNowButton]
+            .map(\.intrinsicContentSize.width) + rowWidths)
+            .max() ?? 0
+        preferredContentSize = NSSize(width: widest + 40, height: stack.fittingSize.height)
+    }
+
+    @objc private func changeTagStyle() {
+        let index = tagStylePopUp.indexOfSelectedItem
+        guard Self.tagStyles.indices.contains(index) else { return }
+        WindowOverlayPosition.style = Self.tagStyles[index].style
+        onOverlayStyleChanged?()
+    }
+
+    // Nothing to notify: the menu bar rebuilds its menu on every open and
+    // reads the setting then.
+    @objc private func changeClickAction() {
+        let index = clickActionPopUp.indexOfSelectedItem
+        guard Self.clickActions.indices.contains(index) else { return }
+        MenuClickBehavior.plainClick = Self.clickActions[index].action
     }
 
     @objc private func toggleLaunchAtLogin() {
@@ -432,3 +672,83 @@ private final class SettingsViewController: NSViewController {
         }
     }
 }
+
+// MARK: - About tab
+
+private let projectHomepage = "https://github.com/bdeshi/shannoncoat"
+
+private final class AboutViewController: NSViewController {
+    private static let contentWidth: CGFloat = 340
+
+    override func loadView() {
+        view = NSView(frame: NSRect(x: 0, y: 0, width: 420, height: 150))
+
+        // Centered within a full-width wrapper rather than centered in the
+        // stack directly — the stack is leading-aligned (for the text
+        // rows below), and its own per-arranged-subview alignment
+        // constraint on the icon would conflict with an added centering
+        // constraint on the icon itself.
+        let icon = NSImageView()
+        icon.image = NSApp.applicationIconImage ?? NSImage(named: NSImage.applicationIconName)
+        icon.translatesAutoresizingMaskIntoConstraints = false
+        let iconContainer = NSView()
+        iconContainer.translatesAutoresizingMaskIntoConstraints = false
+        iconContainer.addSubview(icon)
+        NSLayoutConstraint.activate([
+            icon.widthAnchor.constraint(equalToConstant: 96),
+            icon.heightAnchor.constraint(equalToConstant: 96),
+            icon.topAnchor.constraint(equalTo: iconContainer.topAnchor),
+            icon.bottomAnchor.constraint(equalTo: iconContainer.bottomAnchor),
+            icon.centerXAnchor.constraint(equalTo: iconContainer.centerXAnchor),
+        ])
+
+        // Centred under the icon, same wrapper trick as the icon itself.
+        let tagline = NSTextField(labelWithString: "which coat will Claude wear today?")
+        tagline.font = .systemFont(ofSize: NSFont.systemFontSize)
+        tagline.textColor = .secondaryLabelColor
+        tagline.translatesAutoresizingMaskIntoConstraints = false
+        let taglineContainer = NSView()
+        taglineContainer.translatesAutoresizingMaskIntoConstraints = false
+        taglineContainer.addSubview(tagline)
+        NSLayoutConstraint.activate([
+            tagline.topAnchor.constraint(equalTo: taglineContainer.topAnchor),
+            tagline.bottomAnchor.constraint(equalTo: taglineContainer.bottomAnchor),
+            tagline.centerXAnchor.constraint(equalTo: taglineContainer.centerXAnchor),
+        ])
+
+        // Names itself rather than opening with a bare verb — this panel is
+        // reachable without the window title in view.
+        let description = NSTextField(wrappingLabelWithString:
+            "shannoncoat runs multiple Claude Desktop profiles side by side, each paired with its own "
+            + "isolated Claude Code config.")
+        description.font = .systemFont(ofSize: NSFont.systemFontSize)
+
+        let sourceField = NSTextField(labelWithString: "Source: \(projectHomepage)")
+        let versionField = NSTextField(labelWithString: "Version: \(UpdateChecker.displayVersion)")
+        for field in [sourceField, versionField] {
+            field.textColor = .secondaryLabelColor
+            field.font = .systemFont(ofSize: NSFont.smallSystemFontSize)
+        }
+
+        let stack = NSStackView(views: [iconContainer, taglineContainer, description,
+                                        sourceField, versionField])
+        stack.orientation = .vertical
+        stack.alignment = .leading
+        stack.spacing = 10
+        stack.edgeInsets = NSEdgeInsets(top: 20, left: 20, bottom: 20, right: 20)
+        stack.translatesAutoresizingMaskIntoConstraints = false
+        view.addSubview(stack)
+
+        NSLayoutConstraint.activate([
+            stack.topAnchor.constraint(equalTo: view.topAnchor),
+            stack.leadingAnchor.constraint(equalTo: view.leadingAnchor),
+            stack.bottomAnchor.constraint(equalTo: view.bottomAnchor),
+            description.widthAnchor.constraint(equalToConstant: Self.contentWidth),
+            iconContainer.widthAnchor.constraint(equalTo: description.widthAnchor),
+            taglineContainer.widthAnchor.constraint(equalTo: description.widthAnchor),
+        ])
+
+        view.layoutSubtreeIfNeeded()
+        preferredContentSize = NSSize(width: Self.contentWidth + 40, height: stack.fittingSize.height)
+    }
+}

Sources/MenuBarIcon.swift

@@ -0,0 +1,82 @@
+// The menu bar's own glyph — Claude's asterisk over a coat's collar and
+// shoulders. Drawn here rather than scaled down from the app icon, which is
+// what the menu bar used to show: at 18pt the app icon's three coats, lapels
+// and pockets collapse into a smudge, and its colours fight the menu bar
+// instead of following it.
+//
+// Returned as a *template* image, which is what makes it track the system
+// theme with no code of ours involved. A template carries only an alpha
+// channel; macOS supplies the colour — dark on a light menu bar, light on a
+// dark one, inverted again while the menu is open — and re-tints it on the fly
+// when the theme switches. That also dictates the drawing: no fills of our
+// own, and any internal detail has to be a hole punched through the alpha.
+import AppKit
+
+enum MenuBarIcon {
+    // Six rays rather than the app icon's eight. At 18pt an eight-ray asterisk
+    // has under a pixel of gap between arms, so they merge into a blob; six
+    // resolve as separate arms. Lengths stay slightly uneven, as on the app
+    // icon, so it doesn't read as a snowflake.
+    private static let rayCount = 6
+    private static let rayLengths: [CGFloat] = [1.0, 0.88, 0.97, 0.86, 1.0, 0.9]
+    private static let rayRadius: CGFloat = 22
+    private static let rayWidth: CGFloat = 7.2
+    private static let asteriskCentre = NSPoint(x: 50, y: 28)
+
+    static func image(pointSize: CGFloat = 18) -> NSImage {
+        let image = NSImage(size: NSSize(width: pointSize, height: pointSize))
+        image.lockFocusFlipped(false)
+
+        // Authored y-down like the app icon; flip once rather than mirroring
+        // every coordinate.
+        let flip = NSAffineTransform()
+        flip.translateX(by: 0, yBy: pointSize)
+        flip.scaleX(by: pointSize / 100, yBy: -pointSize / 100)
+        flip.concat()
+
+        NSColor.black.setStroke()
+        asterisk().stroke()
+        NSColor.black.setFill()
+        coat().fill()
+
+        image.unlockFocus()
+        image.isTemplate = true
+        return image
+    }
+
+    private static func asterisk() -> NSBezierPath {
+        let path = NSBezierPath()
+        for index in 0..<rayCount {
+            let angle = (CGFloat(index) * 360 / CGFloat(rayCount) + 8) * .pi / 180
+            let radius = rayRadius * rayLengths[index]
+            path.move(to: asteriskCentre)
+            path.line(to: NSPoint(x: asteriskCentre.x + radius * cos(angle),
+                                  y: asteriskCentre.y + radius * sin(angle)))
+        }
+        path.lineWidth = rayWidth
+        path.lineCapStyle = .round
+        return path
+    }
+
+    // Read along the top edge from one side to the other: shoulder, a slight
+    // tilt up, a flat collar top, the valley at the neck, then the mirror of
+    // that. Square sides and a flat hem below.
+    //
+    // The flat sections are 13 units wide because anything narrower stops
+    // reading as flat at this size and just looks like part of the slope —
+    // 13 units is roughly 2.3px at 18pt, about the floor for that.
+    private static func coat() -> NSBezierPath {
+        let path = NSBezierPath()
+        path.move(to: NSPoint(x: 15, y: 72))   // left shoulder
+        path.line(to: NSPoint(x: 27, y: 60))   // slight tilt up
+        path.line(to: NSPoint(x: 40, y: 60))   // flat collar top
+        path.line(to: NSPoint(x: 50, y: 78))   // valley at the neck
+        path.line(to: NSPoint(x: 60, y: 60))
+        path.line(to: NSPoint(x: 73, y: 60))
+        path.line(to: NSPoint(x: 85, y: 72))   // right shoulder
+        path.line(to: NSPoint(x: 85, y: 94))
+        path.line(to: NSPoint(x: 15, y: 94))
+        path.close()
+        return path
+    }
+}

Sources/ProfileColor.swift

@@ -32,6 +32,30 @@ enum ProfileColor {
         return NSColor(calibratedHue: hue, saturation: saturation, brightness: brightness, alpha: 1.0)
     }
 
+    // Light or dark text, whichever reads better on the given background.
+    // Profile colours come off the full hue wheel (see `dotColor`), whose
+    // luminance varies enormously — yellow against white text is barely
+    // legible where indigo against black text is worse — so this can't be
+    // one fixed choice.
+    //
+    // Chooses on WCAG relative luminance rather than raw brightness,
+    // because the eye is roughly six times more sensitive to green than to
+    // blue and an unweighted average badly misjudges both. 0.179 is where
+    // contrast against white and against black come out equal, so it's the
+    // threshold that maximises contrast either way. Near-white and
+    // near-black rather than pure, which reads as less harsh at 10pt
+    // without measurably costing contrast.
+    static func contrastingTextColor(on background: NSColor) -> NSColor {
+        guard let rgb = background.usingColorSpace(.sRGB) else { return .white }
+        func linear(_ channel: CGFloat) -> CGFloat {
+            channel <= 0.03928 ? channel / 12.92 : pow((channel + 0.055) / 1.055, 2.4)
+        }
+        let luminance = 0.2126 * linear(rgb.redComponent)
+            + 0.7152 * linear(rgb.greenComponent)
+            + 0.0722 * linear(rgb.blueComponent)
+        return luminance > 0.179 ? NSColor(white: 0.10, alpha: 1) : NSColor(white: 0.98, alpha: 1)
+    }
+
     // `dimmed` marks a profile that isn't actually running right now — the
     // colored dot still identifies it, but faded, so "open" vs "known but
     // closed" is visible without reading a tooltip.

Sources/WindowOverlay.swift

@@ -0,0 +1,604 @@
+// A small floating tag pinned to a Claude window's corner, showing which
+// profile it belongs to — every profile launches the same app with the
+// same icon and title, so there's otherwise no way to tell two open
+// Claude windows apart at a glance. Kept in sync live via AXObserver
+// notifications (move/resize/miniaturize/destroy) rather than polling —
+// only a persistent process can hold a watcher like this at all, which is
+// exactly the gap the old one-shot CLI script couldn't close.
+import AppKit
+import ApplicationServices
+
+// How the tag is drawn. A dot is for when the colour alone already
+// identifies the window and the name is just clutter; it's never rotated,
+// having no reading direction to preserve.
+enum WindowOverlayStyle: String {
+    case chip, dot
+}
+
+// The window corner a tag is anchored to. Anchoring to the *nearest*
+// corner rather than always the top-right is what holds a tag still
+// through a resize: one parked near the bottom-left tracks that corner,
+// so dragging the top-right handle no longer drags the tag with it.
+enum WindowOverlayCorner: String {
+    case topLeft, topRight, bottomLeft, bottomRight
+
+    var isTop: Bool { self == .topLeft || self == .topRight }
+    var isLeft: Bool { self == .topLeft || self == .bottomLeft }
+
+    // Quadrant test rather than four distance comparisons — same answer,
+    // and it stays well-defined for a tag sitting dead centre.
+    static func nearest(to point: NSPoint, in frame: NSRect) -> WindowOverlayCorner {
+        switch (point.y > frame.midY, point.x < frame.midX) {
+        case (true, true): return .topLeft
+        case (true, false): return .topRight
+        case (false, true): return .bottomLeft
+        case (false, false): return .bottomRight
+        }
+    }
+}
+
+// Where one profile's tag sits on its window, persisted so a drag survives
+// a relaunch. Stored per profile rather than once for everything: two
+// windows side by side are exactly the case these tags exist for, and
+// wanting each one's tag somewhere different is the normal outcome — one
+// window's sidebar is not another's.
+//
+// Offsets are stored as the user dropped them and are never written back
+// clamped. A window too small to honour the full offset shows the tag
+// pushed in as far as it fits (see `WindowOverlay.frame(window:screen:)`), but the
+// stored distance is left intact, so widening the window again restores
+// the chosen spot instead of leaving the tag stuck where a temporary
+// resize squeezed it.
+struct WindowOverlayPlacement {
+    // Top-right by default — top-left is where every window's close/
+    // minimize/zoom controls live, which the tag must never sit over.
+    var corner: WindowOverlayCorner = .topRight
+    var insetX: CGFloat = 8
+    var insetY: CGFloat = 6
+    var isVertical: Bool = false
+
+    private static func key(_ field: String, _ profile: String) -> String {
+        "WindowOverlay\(field).\(profile)"
+    }
+
+    // From the version that kept a single shared offset. Read as a seed for
+    // a profile with nothing stored yet, so an existing tag stays where it
+    // already is instead of jumping on the first launch after upgrading.
+    private static let legacyInsetXKey = "WindowOverlayRightInset"
+    private static let legacyInsetYKey = "WindowOverlayTopInset"
+
+    private static func number(_ defaults: UserDefaults, _ keys: String...) -> CGFloat? {
+        for key in keys {
+            if let value = defaults.object(forKey: key) as? Double { return CGFloat(value) }
+        }
+        return nil
+    }
+
+    static func load(for profile: String) -> WindowOverlayPlacement {
+        let defaults = UserDefaults.standard
+        var placement = WindowOverlayPlacement()
+        if let raw = defaults.string(forKey: key("Corner", profile)),
+           let corner = WindowOverlayCorner(rawValue: raw) {
+            placement.corner = corner
+        }
+        if let x = number(defaults, key("InsetX", profile), legacyInsetXKey) { placement.insetX = x }
+        if let y = number(defaults, key("InsetY", profile), legacyInsetYKey) { placement.insetY = y }
+        placement.isVertical = defaults.bool(forKey: key("Vertical", profile))
+        return placement
+    }
+
+    func save(for profile: String) {
+        let defaults = UserDefaults.standard
+        defaults.set(corner.rawValue, forKey: Self.key("Corner", profile))
+        defaults.set(Double(insetX), forKey: Self.key("InsetX", profile))
+        defaults.set(Double(insetY), forKey: Self.key("InsetY", profile))
+        defaults.set(isVertical, forKey: Self.key("Vertical", profile))
+    }
+}
+
+// Chip or dot. Unlike placement this really is one setting for the whole
+// app — it's a single control in Settings, not something chosen per window.
+enum WindowOverlayPosition {
+    private static let styleKey = "WindowOverlayStyle"
+
+    static var style: WindowOverlayStyle {
+        get {
+            (UserDefaults.standard.string(forKey: styleKey)).flatMap(WindowOverlayStyle.init(rawValue:)) ?? .chip
+        }
+        set { UserDefaults.standard.set(newValue.rawValue, forKey: styleKey) }
+    }
+}
+
+// Draws the tag itself. Custom drawing rather than a laid-out NSTextField
+// because both of the things this has to get right — centring the text on
+// the chip's actual midline, and rotating the whole chip when it's parked
+// against a side edge — are a transform and two draw calls here, versus
+// fighting a label's intrinsic baseline placement and its unrotatable
+// frame.
+private final class TagView: NSView {
+    var text: String
+    var color: NSColor
+    var style: WindowOverlayStyle
+    var isVertical: Bool
+    // Which side edge a vertical chip is against, which decides the way it
+    // reads: bottom-to-top on the left, top-to-bottom on the right, so the
+    // text always leans into the window rather than away from it. Ignored
+    // when horizontal.
+    var isLeftSide: Bool
+
+    static let thickness: CGFloat = 13
+    static let dotDiameter: CGFloat = 11
+    private static let horizontalPadding: CGFloat = 7
+    private static let maxLength: CGFloat = 140
+    static let font = NSFont.systemFont(ofSize: 10, weight: .semibold)
+
+    init(text: String, color: NSColor, style: WindowOverlayStyle, isVertical: Bool, isLeftSide: Bool) {
+        self.text = text
+        self.color = color
+        self.style = style
+        self.isVertical = isVertical
+        self.isLeftSide = isLeftSide
+        super.init(frame: .zero)
+    }
+
+    required init?(coder: NSCoder) { fatalError("init(coder:) has not been implemented") }
+
+    // The chip's extent along its reading direction, before any rotation.
+    private static func chipLength(for text: String) -> CGFloat {
+        let width = (text as NSString).size(withAttributes: [.font: font]).width
+        return min(maxLength, (width + horizontalPadding * 2).rounded(.up))
+    }
+
+    // Rotation is a property of the drawing, not of the panel, so the
+    // panel's own width and height swap over for a vertical chip.
+    static func size(text: String, style: WindowOverlayStyle, isVertical: Bool) -> NSSize {
+        switch style {
+        case .dot:
+            return NSSize(width: dotDiameter, height: dotDiameter)
+        case .chip:
+            let length = chipLength(for: text)
+            return isVertical
+                ? NSSize(width: thickness, height: length)
+                : NSSize(width: length, height: thickness)
+        }
+    }
+
+    override func draw(_ dirtyRect: NSRect) {
+        guard let ctx = NSGraphicsContext.current?.cgContext else { return }
+
+        if style == .dot {
+            color.setFill()
+            NSBezierPath(ovalIn: bounds).fill()
+            return
+        }
+
+        ctx.saveGState()
+        defer { ctx.restoreGState() }
+
+        // Lay the chip out once, horizontally, around the origin — then
+        // rotate the whole coordinate space if it belongs on a side edge.
+        // One layout path serves both orientations, so the vertical case
+        // can't drift out of step with the horizontal one.
+        ctx.translateBy(x: bounds.midX, y: bounds.midY)
+        if isVertical { ctx.rotate(by: isLeftSide ? .pi / 2 : -.pi / 2) }
+
+        let length = Self.chipLength(for: text)
+        let rect = NSRect(
+            x: -length / 2, y: -Self.thickness / 2, width: length, height: Self.thickness)
+        color.setFill()
+        NSBezierPath(roundedRect: rect, xRadius: Self.thickness / 2, yRadius: Self.thickness / 2).fill()
+
+        let paragraph = NSMutableParagraphStyle()
+        paragraph.alignment = .center
+        paragraph.lineBreakMode = .byTruncatingTail
+        let attributes: [NSAttributedString.Key: Any] = [
+            .font: Self.font,
+            .foregroundColor: ProfileColor.contrastingTextColor(on: color),
+            .paragraphStyle: paragraph,
+        ]
+        let attributed = NSAttributedString(string: text, attributes: attributes)
+        // Drawn into a rect exactly one line tall and centred on the
+        // chip's midline. Handing it the chip's full height instead would
+        // top-align the text inside it — the reason the old label sat
+        // high rather than centred.
+        let lineHeight = attributed.size().height
+        attributed.draw(in: NSRect(
+            x: rect.minX + Self.horizontalPadding, y: rect.midY - lineHeight / 2,
+            width: rect.width - Self.horizontalPadding * 2, height: lineHeight))
+    }
+}
+
+final class WindowOverlay: NSObject, NSWindowDelegate {
+    let pid: pid_t
+    private let axWindow: AXUIElement
+    private var observer: AXObserver?
+    private let panel: NSPanel
+    private let tagView: TagView
+    private let profileName: String
+    private var placement: WindowOverlayPlacement
+    // True only while `reposition` is moving the panel itself — see
+    // `windowDidMove`, which must ignore those moves.
+    private var isRepositioning = false
+    private var dragSettle: DispatchWorkItem?
+    private var isMinimized = false
+
+    init?(profileName: String, color: NSColor, pid: pid_t) {
+        let axApp = AXUIElementCreateApplication(pid)
+        guard let window = Self.firstWindow(of: axApp) else { return nil }
+        self.pid = pid
+        self.axWindow = window
+        self.profileName = profileName
+        let placement = WindowOverlayPlacement.load(for: profileName)
+        self.placement = placement
+
+        let style = WindowOverlayPosition.style
+        let tagView = TagView(
+            text: profileName, color: color, style: style,
+            isVertical: style == .chip && placement.isVertical,
+            isLeftSide: placement.corner.isLeft)
+        tagView.autoresizingMask = [.width, .height]
+        self.tagView = tagView
+
+        let panel = NSPanel(
+            contentRect: NSRect(origin: .zero, size: NSSize(width: 1, height: 1)),
+            styleMask: [.borderless, .nonactivatingPanel],
+            backing: .buffered, defer: false)
+        panel.isOpaque = false
+        panel.backgroundColor = .clear
+        panel.hasShadow = true
+        panel.level = .floating
+        // Draggable (so it can be moved off whatever it's obstructing),
+        // but .nonactivatingPanel keeps a click/drag from stealing focus
+        // away from the Claude window underneath.
+        panel.isMovableByWindowBackground = true
+        panel.collectionBehavior = [.stationary, .ignoresCycle]
+        panel.contentView = tagView
+
+        self.panel = panel
+        super.init()
+        panel.delegate = self
+
+        guard reposition() else { return nil }
+        startObserving()
+    }
+
+    // A cold Electron launch can take a second or more between the
+    // process starting (which is what triggers `updateWindowOverlays`,
+    // via NSWorkspace's launch notification) and its first window
+    // actually existing — the same race ClaudeControl.focus's
+    // waitForWindow already handles for the same reason. `init?` can't
+    // retry on its own (once it returns nil, that attempt is done), so
+    // this polls it every quarter second for up to ~3s before giving up.
+    static func attach(
+        profileName: String, color: NSColor, pid: pid_t, attemptsRemaining: Int = 12,
+        completion: @escaping (WindowOverlay?) -> Void
+    ) {
+        if let overlay = WindowOverlay(profileName: profileName, color: color, pid: pid) {
+            completion(overlay)
+        } else if attemptsRemaining > 0 {
+            DispatchQueue.main.asyncAfter(deadline: .now() + 0.25) {
+                attach(
+                    profileName: profileName, color: color, pid: pid, attemptsRemaining: attemptsRemaining - 1,
+                    completion: completion)
+            }
+        } else {
+            completion(nil)
+        }
+    }
+
+    deinit {
+        dragSettle?.cancel()
+        stopObserving()
+        panel.orderOut(nil)
+    }
+
+    private static func firstWindow(of axApp: AXUIElement) -> AXUIElement? {
+        var value: CFTypeRef?
+        guard AXUIElementCopyAttributeValue(axApp, kAXWindowsAttribute as CFString, &value) == .success,
+              let windows = value as? [AXUIElement], let first = windows.first
+        else { return nil }
+        return first
+    }
+
+    private static func frame(of window: AXUIElement) -> CGRect? {
+        var posValue: CFTypeRef?
+        var sizeValue: CFTypeRef?
+        guard AXUIElementCopyAttributeValue(window, kAXPositionAttribute as CFString, &posValue) == .success,
+              AXUIElementCopyAttributeValue(window, kAXSizeAttribute as CFString, &sizeValue) == .success,
+              CFGetTypeID(posValue) == AXValueGetTypeID(), CFGetTypeID(sizeValue) == AXValueGetTypeID()
+        else { return nil }
+        var point = CGPoint.zero
+        var size = CGSize.zero
+        guard AXValueGetValue(posValue as! AXValue, .cgPoint, &point),
+              AXValueGetValue(sizeValue as! AXValue, .cgSize, &size)
+        else { return nil }
+        return CGRect(origin: point, size: size)
+    }
+
+    private static func screen(containing axFrame: CGRect) -> NSScreen? {
+        NSScreen.screens.first { $0.frame.minX <= axFrame.midX && axFrame.midX <= $0.frame.maxX } ?? NSScreen.main
+    }
+
+    // AX coordinates are top-left-origin (screen top = y 0); AppKit screen
+    // coordinates are bottom-left-origin. Returns the window's frame
+    // translated into AppKit's space.
+    private static func appKitFrame(of axFrame: CGRect, on screen: NSScreen) -> NSRect {
+        NSRect(x: axFrame.origin.x, y: screen.frame.maxY - axFrame.origin.y - axFrame.height,
+               width: axFrame.width, height: axFrame.height)
+    }
+
+    private var currentGeometry: (window: NSRect, screen: NSScreen)? {
+        guard let axFrame = Self.frame(of: axWindow), let screen = Self.screen(containing: axFrame)
+        else { return nil }
+        return (Self.appKitFrame(of: axFrame, on: screen), screen)
+    }
+
+    // The tag's frame for a given window frame: measured inward from its
+    // anchored corner, with the offsets clamped so it always stays over
+    // the window no matter how small that window gets. Only the *drawn*
+    // position is clamped — see WindowOverlayPlacement.
+    //
+    // Then clamped again, into whatever part of the window is actually on
+    // screen. A window dragged half off the edge takes its anchored corner
+    // with it, and a tag that follows it out of view identifies nothing —
+    // the whole point is telling, at a glance, which profile the window you
+    // can still see belongs to. Clamped to the window's *visible* portion
+    // rather than to the screen at large so the tag stays on the thing it
+    // labels instead of drifting off onto its own. `visibleFrame` keeps it
+    // clear of the menu bar and Dock, which would hide it just as
+    // effectively as the screen edge.
+    //
+    // Both clamps are presentational only — neither is written back to
+    // `placement`, which changes solely when the user drags the tag. So the
+    // anchor is remembered throughout, and the tag returns to it the moment
+    // the window is fully back on screen.
+    private func frame(window: NSRect, screen: NSScreen) -> NSRect {
+        let style = WindowOverlayPosition.style
+        let size = TagView.size(
+            text: profileName, style: style,
+            isVertical: style == .chip && placement.isVertical)
+        let corner = placement.corner
+        let insetX = placement.insetX
+            .clamped(to: 0...max(0, window.width - size.width))
+        let insetY = placement.insetY
+            .clamped(to: 0...max(0, window.height - size.height))
+        var origin = NSPoint(
+            x: corner.isLeft ? window.minX + insetX : window.maxX - insetX - size.width,
+            y: corner.isTop ? window.maxY - insetY - size.height : window.minY + insetY)
+
+        // A window entirely off screen leaves nothing to clamp into; fall
+        // back to the screen so the tag stays reachable rather than being
+        // pinned to an empty rect.
+        let onScreen = window.intersection(screen.visibleFrame)
+        let bounds = onScreen.isEmpty ? screen.visibleFrame : onScreen
+        origin.x = origin.x.clamped(to: bounds.minX...max(bounds.minX, bounds.maxX - size.width))
+        origin.y = origin.y.clamped(to: bounds.minY...max(bounds.minY, bounds.maxY - size.height))
+        return NSRect(origin: origin, size: size)
+    }
+
+    // Puts the tag where the current placement says it belongs. Returns
+    // false (and hides the tag) if the window has no readable frame right
+    // now — minimized, or Accessibility not granted.
+    @discardableResult
+    private func reposition() -> Bool {
+        guard let (windowFrame, screen) = currentGeometry else {
+            panel.orderOut(nil)
+            return false
+        }
+        let style = WindowOverlayPosition.style
+        tagView.style = style
+        tagView.isVertical = style == .chip && placement.isVertical
+        tagView.isLeftSide = placement.corner.isLeft
+        tagView.needsDisplay = true
+
+        isRepositioning = true
+        defer { isRepositioning = false }
+        let tagFrame = frame(window: windowFrame, screen: screen)
+        panel.setFrame(tagFrame, display: true)
+        // The shadow is derived from the content's alpha, so a shape or
+        // size change leaves a stale one behind without this.
+        panel.invalidateShadow()
+        // Positioned either way — only the showing is conditional, so a
+        // hidden tag still knows where it belongs and can be revealed later
+        // without recomputing anything.
+        if isMinimized || !isTargetVisible(tagFrame: tagFrame) {
+            panel.orderOut(nil)
+        } else if !panel.isVisible {
+            panel.orderFrontRegardless()
+        }
+        return true
+    }
+
+    // Re-evaluate whether the tag should currently be on screen. Called
+    // when some app activates, which is the usual way a window ends up
+    // buried or uncovered without moving at all.
+    func refreshVisibility() {
+        reposition()
+    }
+
+    // A tag is a floating panel, which puts it above every ordinary window
+    // on the system rather than merely above the window it belongs to. Left
+    // alone it hovers over the browser, the editor, everything — even when
+    // its own window is buried or on another Space.
+    //
+    // There is no cross-process way to attach one window above another:
+    // `addChildWindow` is same-process only, and the private ordering call
+    // window managers use is a one-shot operation that goes stale the
+    // moment anything else reorders, so it wouldn't avoid this work either.
+    // So the tag is shown only when the window it labels is genuinely
+    // visible underneath it.
+    //
+    // The window server returns its list strictly front-to-back, which
+    // answers both halves in one pass: walk forward, and anything
+    // overlapping the tag before we reach our own window is covering it.
+    // Reaching our window with nothing in the way means the tag is showing
+    // real estate that actually belongs to that window; never reaching it
+    // means the window isn't on screen at all — minimized, hidden, or on
+    // another Space — and the tag has nothing to label.
+    private func isTargetVisible(tagFrame: NSRect) -> Bool {
+        guard let listing = CGWindowListCopyWindowInfo(
+            [.optionOnScreenOnly, .excludeDesktopElements], kCGNullWindowID) as? [[String: Any]]
+        else { return true }  // can't tell — better a stray tag than a missing one
+
+        let tag = Self.cgRect(of: tagFrame)
+        let ownPid = getpid()
+        for entry in listing {
+            guard let owner = entry[kCGWindowOwnerPID as String] as? pid_t,
+                  let boundsDict = entry[kCGWindowBounds as String],
+                  let bounds = CGRect(dictionaryRepresentation: boundsDict as! CFDictionary)
+            else { continue }
+            // Identified by owner alone, deliberately. Matching the exact
+            // rect meant comparing a freshly-read AX frame against the
+            // window server's snapshot, and mid-move the two disagree —
+            // AX already reports the new position while the listing still
+            // has the old one. The match then failed, the walk continued
+            // past our own window, and the first unrelated window that
+            // happened to overlap the tag "occluded" it. Whether that
+            // occurred came down to what was nearby, which is why it
+            // looked as though only certain drag directions broke it.
+            //
+            // A dialog of the same app landing here counts as reaching our
+            // window, which is right: Claude covering its own window is
+            // not a reason to disown the tag.
+            if owner == pid, bounds.intersects(tag) { return true }
+            // Our own tags are in this list too, and one tag sitting over
+            // another's window must not hide it.
+            if owner == ownPid { continue }
+            // Only ordinary windows can bury another ordinary window.
+            // Everything above that band — the menu bar, the Dock,
+            // notification banners, and the invisible one-pixel markers
+            // some utilities park in a screen corner — is permanently in
+            // front of everything and would veto the tag forever. One such
+            // marker at the bottom-left corner is what made a tag vanish
+            // there, and only there: it takes a move off two edges at once
+            // for the tag to clamp into that exact pixel.
+            guard (entry[kCGWindowLayer as String] as? Int) == 0 else { continue }
+            if bounds.intersects(tag) { return false }
+        }
+        return false
+    }
+
+    // AppKit is bottom-left-origin per screen; the window server is
+    // top-left-origin from the primary screen (screens[0], the one with the
+    // menu bar).
+    private static func cgRect(of rect: NSRect) -> CGRect {
+        let primaryMaxY = NSScreen.screens.first?.frame.maxY ?? rect.maxY
+        return CGRect(x: rect.minX, y: primaryMaxY - rect.maxY, width: rect.width, height: rect.height)
+    }
+
+    // MARK: - User placement
+
+    // Fires for every panel move — ours (from `reposition`, when the
+    // tracked window itself moves/resizes) and the user's (dragging the
+    // tag). Only the latter should redefine the placement, which is what
+    // the `isRepositioning` guard filters for.
+    //
+    // Re-deriving the offset from our own moves too looks like it should
+    // be a harmless no-op — recomputing the very offset we just positioned
+    // against — but it isn't, because the two halves read the window at
+    // different instants. AppKit posts this notification synchronously
+    // from inside `setFrame`, and during a live window drag the AX frame
+    // read here is already newer than the one `reposition` derived the
+    // origin from, so each move event bakes in the few points the window
+    // travelled in between. Those errors accumulate across the hundreds
+    // of events one drag produces, until the offset saturates and the tag
+    // has walked clear across its window — off-screen entirely, if that
+    // edge of the window is.
+    func windowDidMove(_ notification: Notification) {
+        guard !isRepositioning else { return }
+        scheduleDragSettle()
+    }
+
+    // A tag drag emits a continuous stream of moves, and re-anchoring on
+    // each one would snap the tag out from under the cursor mid-gesture
+    // (and flip its orientation repeatedly on the way past an edge). So
+    // the placement is only committed once the moves stop, which is as
+    // close to a "drag ended" signal as a background-movable window gets
+    // — NSWindow has no such delegate callback, unlike live resize.
+    private func scheduleDragSettle() {
+        dragSettle?.cancel()
+        let work = DispatchWorkItem { [weak self] in self?.commitUserPlacement() }
+        dragSettle = work
+        DispatchQueue.main.asyncAfter(deadline: .now() + 0.2, execute: work)
+    }
+
+    private func commitUserPlacement() {
+        guard let windowFrame = currentGeometry?.window else { return }
+        let tagFrame = panel.frame
+        let centre = NSPoint(x: tagFrame.midX, y: tagFrame.midY)
+        let corner = WindowOverlayCorner.nearest(to: centre, in: windowFrame)
+
+        // Orientation follows whichever edge the tag ended up nearest: a
+        // chip against a side reads vertically, so it can sit close in
+        // without covering the window's own controls. Dots have no
+        // reading direction, so they're never rotated.
+        let toSide = min(centre.x - windowFrame.minX, windowFrame.maxX - centre.x)
+        let toTopOrBottom = min(windowFrame.maxY - centre.y, centre.y - windowFrame.minY)
+        let isVertical = WindowOverlayPosition.style == .chip && toSide < toTopOrBottom
+
+        // Offsets run inward from the anchored corner. Stored unclamped at
+        // the top end (a drag outside the window is clamped to zero, but a
+        // long reach into a wide window is kept in full) so a later resize
+        // can restore it.
+        let insetX = corner.isLeft
+            ? tagFrame.minX - windowFrame.minX : windowFrame.maxX - tagFrame.maxX
+        let insetY = corner.isTop
+            ? windowFrame.maxY - tagFrame.maxY : tagFrame.minY - windowFrame.minY
+
+        placement = WindowOverlayPlacement(
+            corner: corner, insetX: max(0, insetX), insetY: max(0, insetY), isVertical: isVertical)
+        placement.save(for: profileName)
+
+        // Snap into the committed placement — this is what applies a
+        // rotation the drag just earned, and squares the tag up against
+        // its corner.
+        reposition()
+    }
+
+    // MARK: - Live tracking
+
+    private func startObserving() {
+        var newObserver: AXObserver?
+        guard AXObserverCreate(pid, WindowOverlay.axCallback, &newObserver) == .success, let newObserver
+        else { return }
+        observer = newObserver
+
+        let refcon = Unmanaged.passUnretained(self).toOpaque()
+        for name in [
+            kAXMovedNotification, kAXResizedNotification, kAXUIElementDestroyedNotification,
+            kAXWindowMiniaturizedNotification, kAXWindowDeminiaturizedNotification,
+        ] {
+            AXObserverAddNotification(newObserver, axWindow, name as CFString, refcon)
+        }
+        CFRunLoopAddSource(CFRunLoopGetCurrent(), AXObserverGetRunLoopSource(newObserver), .defaultMode)
+    }
+
+    private func stopObserving() {
+        guard let observer else { return }
+        CFRunLoopRemoveSource(CFRunLoopGetCurrent(), AXObserverGetRunLoopSource(observer), .defaultMode)
+        self.observer = nil
+    }
+
+    private static let axCallback: AXObserverCallback = { _, _, notification, refcon in
+        guard let refcon else { return }
+        let overlay = Unmanaged<WindowOverlay>.fromOpaque(refcon).takeUnretainedValue()
+        switch notification as String {
+        case kAXUIElementDestroyedNotification:
+            overlay.panel.orderOut(nil)
+        case kAXWindowMiniaturizedNotification:
+            overlay.isMinimized = true
+            overlay.reposition()
+        case kAXWindowDeminiaturizedNotification:
+            overlay.isMinimized = false
+            overlay.reposition()
+        default:
+            overlay.reposition()
+        }
+    }
+}
+
+extension Comparable {
+    func clamped(to range: ClosedRange<Self>) -> Self {
+        min(max(self, range.lowerBound), range.upperBound)
+    }
+}

VERSION

@@ -1 +1 @@
-0.0.2
+1.1.0

build.sh

@@ -13,6 +13,29 @@ set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 SOURCES_DIR="$SCRIPT_DIR/Sources"
+
+# Local, gitignored build configuration — currently just the code-signing
+# identity, which otherwise has to be remembered and retyped on every
+# build. See .env.example.
+#
+# Parsed rather than sourced, for two reasons: a stray command in the file
+# shouldn't execute as a side effect of building, and this lets an existing
+# environment variable win, so `SHANNONCOAT_SIGN_IDENTITY= ./build.sh`
+# still forces a one-off ad-hoc build without editing the file.
+ENV_FILE="$SCRIPT_DIR/.env"
+if [[ -f "$ENV_FILE" ]]; then
+  while IFS='=' read -r key value || [[ -n "$key" ]]; do
+    key="${key#"${key%%[![:space:]]*}"}"   # strip leading whitespace
+    key="${key#export }"
+    [[ "$key" =~ ^[A-Za-z_][A-Za-z0-9_]*$ ]] || continue   # skips blanks and # comments
+    value="${value%"${value##*[![:space:]]}"}"             # strip trailing whitespace
+    value="${value%\"}"; value="${value#\"}"
+    value="${value%\'}"; value="${value#\'}"
+    [[ -n "${!key+set}" ]] && continue                     # already in the environment; leave it
+    printf -v "$key" '%s' "$value"
+    export "${key?}"
+  done <"$ENV_FILE"
+fi
 VERSION_FILE="$SCRIPT_DIR/VERSION"
 ICON_SRC="$SCRIPT_DIR/icon/AppIcon.icns"
 OUT_DIR="${1:-$SCRIPT_DIR/.build}"
@@ -54,12 +77,21 @@ command -v swiftc >/dev/null || { echo "error: swiftc not found (install Xcode C
 # Info.plist above.
 cp "$VERSION_FILE" "$APP/Contents/Resources/VERSION"
 
-# COMMIT is the short SHA the About panel appends to the version, so a dev
+# COMMIT is the short SHA the About tab appends to the version, so one dev
 # build is distinguishable from another — left empty for a real release
-# build (HEAD sitting exactly on a tag, which is how release.yml checks
-# this out), since the version number alone is unambiguous there.
+# build, since the version number alone is unambiguous there. A release
+# build is one of:
+#   - SHANNONCOAT_RELEASE_BUILD set by release.yml, which already knows
+#     for certain whether it's building a tag — trusted outright rather
+#     than re-derived, since `git describe` needs full tag refs that a
+#     CI runner's shallow checkout isn't guaranteed to have fetched.
+#   - a local/manual build with HEAD sitting exactly on a tag (checked
+#     via `git describe`, which is reliable here since a normal
+#     non-shallow local clone has its full tag history).
 GIT_SHA=""
-if git -C "$SCRIPT_DIR" rev-parse --git-dir >/dev/null 2>&1 \
+if [[ -n "${SHANNONCOAT_RELEASE_BUILD:-}" ]]; then
+  : # release build — leave GIT_SHA empty
+elif git -C "$SCRIPT_DIR" rev-parse --git-dir >/dev/null 2>&1 \
     && ! git -C "$SCRIPT_DIR" describe --tags --exact-match >/dev/null 2>&1; then
   GIT_SHA="$(git -C "$SCRIPT_DIR" rev-parse --short HEAD 2>/dev/null || true)"
 fi
@@ -67,6 +99,41 @@ printf '%s' "$GIT_SHA" >"$APP/Contents/Resources/COMMIT"
 
 swiftc -O "$SOURCES_DIR"/*.swift -o "$APP/Contents/MacOS/launcher"
 
+# Sign the bundle, not just the binary swiftc linker-signed for us — and
+# with the bundle's real identifier rather than the "launcher" executable
+# name codesign would otherwise infer.
+#
+# This matters well beyond tidiness, because the window tags need
+# Accessibility. macOS ties that grant to a *properly signed* app's
+# designated requirement, which survives a rebuild, but falls back to
+# pinning an ad-hoc-signed app to its exact cdhash — and every build
+# produces a new one. So with the ad-hoc default below, each build +
+# reinstall silently invalidates the permission, while the app stays
+# listed and stays ticked under Privacy & Security → Accessibility. It
+# looks granted and isn't, and no amount of toggling that row fixes it:
+# the stale entry has to be removed with "−" and the new build added back.
+#
+# To stop paying that tax on every build, make a self-signed code-signing
+# certificate once (Keychain Access → Certificate Assistant → Create a
+# Certificate…, type "Code Signing", self-signed) and point this at it:
+#
+#   SHANNONCOAT_SIGN_IDENTITY="My Local Signing Cert" ./build.sh
+#
+# then re-grant Accessibility one final time. The identity is stable from
+# then on, so later builds keep the permission.
+if [[ -n "${SHANNONCOAT_SIGN_IDENTITY:-}" ]]; then
+  # An identity was asked for explicitly, so falling back to ad-hoc would
+  # quietly reintroduce the very problem it was set to avoid — and a
+  # release that ships ad-hoc revokes the Accessibility permission of
+  # everyone who updates. Fail the build instead.
+  codesign --force --sign "$SHANNONCOAT_SIGN_IDENTITY" \
+    --identifier "com.local.shannoncoat" "$APP" \
+    || { echo "error: signing with \"$SHANNONCOAT_SIGN_IDENTITY\" failed" >&2; exit 1; }
+else
+  codesign --force --sign - --identifier "com.local.shannoncoat" "$APP" >/dev/null 2>&1 \
+    || echo "warning: codesign failed; Accessibility permission may not stick" >&2
+fi
+
 touch "$APP"
 echo "Built: $APP"
 echo "Copy it to /Applications (or ~/Applications) to install."

icon/generate-hero.swift

@@ -0,0 +1,83 @@
+// Generates docs/hero.png — the banner at the top of the README.
+//
+// Composes the already-generated app icon with the wordmark and tagline rather
+// than redrawing the coats, so the banner can never drift out of step with the
+// icon itself. Run generate-icon.swift first.
+//
+// Usage:
+//   swift icon/generate-icon.swift icon/AppIcon.iconset
+//   cp icon/AppIcon.iconset/icon_512x512.png icon/shannoncoat.png
+//   iconutil -c icns icon/AppIcon.iconset -o icon/AppIcon.icns
+//   rm -rf icon/AppIcon.iconset
+//   swift icon/generate-hero.swift icon/shannoncoat.png docs/hero.png
+import Cocoa
+
+private func rgb(_ hex: UInt32) -> NSColor {
+    NSColor(srgbRed: CGFloat((hex >> 16) & 255) / 255, green: CGFloat((hex >> 8) & 255) / 255,
+            blue: CGFloat(hex & 255) / 255, alpha: 1)
+}
+
+// Slate ground rather than cloud: GitHub renders READMEs on both a light and a
+// dark page, and a dark banner sits comfortably on either, where a near-white
+// one glares against a dark page. It also lets the coral icon carry the colour.
+private let ground = rgb(0x26_26_25)
+private let wordmark = rgb(0xF0_EE_E6)
+private let subtitle = rgb(0xA8_A2_98)
+
+private let width = 1200
+private let height = 360
+
+let args = CommandLine.arguments
+let iconPath = args.count > 1 ? args[1] : "icon/shannoncoat.png"
+let outPath = args.count > 2 ? args[2] : "docs/hero.png"
+
+guard let icon = NSImage(contentsOfFile: iconPath) else {
+    fatalError("couldn't read \(iconPath) — run generate-icon.swift first")
+}
+
+guard let rep = NSBitmapImageRep(
+    bitmapDataPlanes: nil, pixelsWide: width, pixelsHigh: height,
+    bitsPerSample: 8, samplesPerPixel: 4, hasAlpha: true, isPlanar: false,
+    colorSpaceName: .deviceRGB, bytesPerRow: 0, bitsPerPixel: 0
+) else { fatalError("could not create bitmap rep") }
+rep.size = NSSize(width: width, height: height)
+
+NSGraphicsContext.saveGraphicsState()
+NSGraphicsContext.current = NSGraphicsContext(bitmapImageRep: rep)
+NSGraphicsContext.current?.imageInterpolation = .high
+
+ground.setFill()
+NSBezierPath(rect: NSRect(x: 0, y: 0, width: width, height: height)).fill()
+
+let iconSide: CGFloat = 184
+icon.draw(in: NSRect(x: 96, y: (CGFloat(height) - iconSide) / 2, width: iconSide, height: iconSide))
+
+let textX: CGFloat = 96 + iconSide + 56
+let name = NSAttributedString(string: "shannoncoat", attributes: [
+    .font: NSFont.systemFont(ofSize: 76, weight: .semibold),
+    .foregroundColor: wordmark,
+])
+let tagline = NSAttributedString(string: "which coat will Claude wear today?", attributes: [
+    .font: NSFont.systemFont(ofSize: 30, weight: .regular),
+    .foregroundColor: subtitle,
+])
+
+// Stacked around the vertical centre, using each string's own measured height
+// so the pair sits optically centred against the icon rather than by guesswork.
+let nameSize = name.size(), taglineSize = tagline.size()
+let gap: CGFloat = 14
+let blockHeight = nameSize.height + gap + taglineSize.height
+let top = (CGFloat(height) + blockHeight) / 2
+name.draw(at: NSPoint(x: textX, y: top - nameSize.height))
+tagline.draw(at: NSPoint(x: textX + 3, y: top - nameSize.height - gap - taglineSize.height))
+
+NSGraphicsContext.restoreGraphicsState()
+
+let outURL = URL(fileURLWithPath: outPath)
+try? FileManager.default.createDirectory(
+    at: outURL.deletingLastPathComponent(), withIntermediateDirectories: true)
+guard let png = rep.representation(using: .png, properties: [:]) else {
+    fatalError("failed to encode hero PNG")
+}
+try! png.write(to: outURL)
+print("wrote \(outPath)")

icon/generate-icon.swift

@@ -1,8 +1,11 @@
-// Generates a placeholder AppIcon.iconset — a plain rounded-square
-// background with the coat glyph on top. Deliberately not derived from
-// Claude's own icon assets (unlike the old version of this file, which
-// composited on top of Claude.app's icon) — this is a stand-in until a
-// real icon is designed, so it draws everything itself from vector shapes.
+// Generates AppIcon.iconset — Claude's asterisk above a rack of overcoats, on
+// Claude's own coral. The wardrobe is the app in one picture: several coats to
+// pick between, one currently worn.
+//
+// Everything is drawn from vector paths here rather than exported from a
+// design tool, so a size can be tuned independently (small sizes need fatter
+// strokes than a straight downscale gives) and nothing binary but the derived
+// .icns is committed. Deliberately not derived from Claude's own icon assets.
 //
 // Usage:
 //   swift icon/generate-icon.swift icon/AppIcon.iconset
@@ -10,85 +13,182 @@
 //   rm -rf icon/AppIcon.iconset
 import Cocoa
 
+// Claude's coral and cloud, plus tints of each for depth. The lapel is a
+// lighter grey than the coat and the back coats are darker corals — tone
+// separation survives downscaling, where outlines don't.
+private enum Palette {
+    static func rgb(_ hex: UInt32) -> NSColor {
+        NSColor(srgbRed: CGFloat((hex >> 16) & 255) / 255, green: CGFloat((hex >> 8) & 255) / 255,
+                blue: CGFloat(hex & 255) / 255, alpha: 1)
+    }
+    static let tile = rgb(0xD9_77_57)
+    static let coat = rgb(0xF0_EE_E6)
+    static let lapel = rgb(0xB3_AA_97)
+    static let pocket = rgb(0xB8_AF_9C)
+    static let backLeft = rgb(0x8A_3E_2A)
+    static let backLeftPocket = rgb(0x6E_35_24)
+    static let backRight = rgb(0xB4_61_4A)
+    static let backRightPocket = rgb(0x94_4A_34)
+}
+
+private func p(_ x: CGFloat, _ y: CGFloat) -> NSPoint { NSPoint(x: x, y: y) }
+
+// MARK: - Shapes, drawn in a 100x100 space with y pointing down
+
+// Eight rays of slightly uneven length, a few degrees off the compass points —
+// a mechanically regular asterisk reads as a snowflake. Wider than tall, so it
+// doesn't look like it's standing on end.
+private func asterisk() -> NSBezierPath {
+    let centre = p(50, 24)
+    let tips = [p(65, 24), p(59, 33.3), p(49.5, 38.5), p(40.8, 32.6),
+                p(35, 23.7), p(40.8, 14.5), p(50.2, 9.8), p(58.6, 15.1)]
+    let path = NSBezierPath()
+    for tip in tips { path.move(to: centre); path.line(to: tip) }
+    path.lineWidth = 5.6
+    path.lineCapStyle = .round
+    return path
+}
+
+// One coat in its own 40x44 box, so the three can be placed at different
+// scales and angles. The centre split is a true hole, so the tile shows through.
+private func coatBody() -> NSBezierPath {
+    let b = NSBezierPath()
+    b.move(to: p(16, 2))
+    b.curve(to: p(3, 6.5), controlPoint1: p(12, 2.5), controlPoint2: p(6, 4))
+    b.curve(to: p(2.5, 42), controlPoint1: p(1.5, 16), controlPoint2: p(1.5, 30))
+    b.line(to: p(37.5, 42))
+    b.curve(to: p(37, 6.5), controlPoint1: p(38.5, 30), controlPoint2: p(38.5, 16))
+    b.curve(to: p(24, 2), controlPoint1: p(34, 4), controlPoint2: p(28, 2.5))
+    b.line(to: p(20, 26))
+    b.close()
+    b.appendRect(NSRect(x: 19.15, y: 26, width: 1.7, height: 16))
+    b.windingRule = .evenOdd
+    return b
+}
+
+// One connected band round the neck rather than two tabs on the shoulders,
+// dipping at centre where the lapel opening begins. Its top corners sit at
+// x15/x25 so the lapels cover them — any further out and they poke through as
+// spikes either side of the neck.
+private func coatCollar() -> NSBezierPath {
+    let c = NSBezierPath()
+    c.move(to: p(15, -1.6)); c.line(to: p(25, -1.6))
+    c.line(to: p(29, 2.6)); c.line(to: p(21.6, 2.6))
+    c.line(to: p(20, 1)); c.line(to: p(18.4, 2.6))
+    c.line(to: p(11, 2.6))
+    c.close()
+    return c
+}
+
+// Notch lapels, each one shape running from the collar's outer corner down to
+// the button point. The notch sits at (12.5, 8) — pulled down and outward
+// deliberately, because nearer the inner edge it pinches the polygon to a
+// hairline and the lapel renders as two separate triangles.
+private func coatLapels() -> NSBezierPath {
+    let l = NSBezierPath()
+    l.move(to: p(15, -1.6)); l.line(to: p(10.5, 3.5)); l.line(to: p(12.5, 8))
+    l.line(to: p(9, 14)); l.line(to: p(20, 26)); l.close()
+    l.move(to: p(25, -1.6)); l.line(to: p(29.5, 3.5)); l.line(to: p(27.5, 8))
+    l.line(to: p(31, 14)); l.line(to: p(20, 26)); l.close()
+    return l
+}
+
+// Filled marks, not holes — a hole would show whichever coat is behind it.
+private func coatPockets() -> NSBezierPath {
+    let path = NSBezierPath()
+    path.appendRect(NSRect(x: 6.5, y: 22, width: 9, height: 1.7))
+    path.appendRect(NSRect(x: 24.5, y: 22, width: 9, height: 1.7))
+    return path
+}
+
+// A hairline along the lapel edges separating the grey lapel from the tile
+// showing through the opening. Deliberately fine: a detail for 128px and up.
+// Thickening it to survive smaller sizes only blurs the lapel edge, because at
+// this diagonal a one-pixel stroke covers a fraction of each pixel it crosses.
+private func coatOpeningBorder() -> NSBezierPath {
+    let path = NSBezierPath()
+    path.move(to: p(15, -1.6)); path.line(to: p(20, 26)); path.line(to: p(25, -1.6))
+    path.lineWidth = 0.7
+    path.lineJoinStyle = .round
+    path.lineCapStyle = .round
+    return path
+}
+
+private func placed(_ path: NSBezierPath, x: CGFloat, y: CGFloat,
+                    rotation: CGFloat, scale: CGFloat) -> NSBezierPath {
+    let transform = NSAffineTransform()
+    transform.translateX(by: x, yBy: y)
+    if rotation != 0 { transform.rotate(byDegrees: rotation) }
+    transform.scale(by: scale)
+    let copy = path.copy() as! NSBezierPath
+    copy.transform(using: transform as AffineTransform)
+    return copy
+}
+
+// Each coat is finished before the next is laid over it. Drawing all three
+// bodies and then all three sets of details would put the back coats' collars
+// and pockets on top of the front coat.
+private func drawCoat(x: CGFloat, y: CGFloat, rotation: CGFloat, scale: CGFloat,
+                      body: NSColor, pocket: NSColor, lapel: NSColor? = nil) {
+    body.setFill()
+    placed(coatBody(), x: x, y: y, rotation: rotation, scale: scale).fill()
+    placed(coatCollar(), x: x, y: y, rotation: rotation, scale: scale).fill()
+    if let lapel {
+        lapel.setFill()
+        placed(coatLapels(), x: x, y: y, rotation: rotation, scale: scale).fill()
+        body.setStroke()
+        let border = placed(coatOpeningBorder(), x: x, y: y, rotation: rotation, scale: scale)
+        border.lineWidth = 0.7 * scale
+        border.stroke()
+    }
+    pocket.setFill()
+    placed(coatPockets(), x: x, y: y, rotation: rotation, scale: scale).fill()
+}
+
+private func drawIcon() {
+    Palette.tile.setFill()
+    NSBezierPath(roundedRect: NSRect(x: 0, y: 0, width: 100, height: 100),
+                 xRadius: 22, yRadius: 22).fill()
+
+    Palette.coat.setStroke()
+    asterisk().stroke()
+
+    drawCoat(x: 11, y: 50, rotation: -8, scale: 0.78,
+             body: Palette.backLeft, pocket: Palette.backLeftPocket)
+    drawCoat(x: 60, y: 47, rotation: 8, scale: 0.78,
+             body: Palette.backRight, pocket: Palette.backRightPocket)
+    drawCoat(x: 31.5, y: 44, rotation: 0, scale: 0.92,
+             body: Palette.coat, pocket: Palette.pocket, lapel: Palette.lapel)
+}
+
+// MARK: - Rendering
+
 // Renders at exact pixel dimensions via an explicit NSBitmapImageRep rather
 // than NSImage.lockFocus() — lockFocus rasterizes at the *main screen's*
 // backing scale factor, which would silently double every size on a Retina
 // display instead of producing the exact px asked for.
-func renderIcon(pixels: Int) -> Data {
-    let s = CGFloat(pixels)
+private func renderIcon(pixels: Int) -> Data {
+    let side = CGFloat(pixels)
     guard let rep = NSBitmapImageRep(
-        bitmapDataPlanes: nil,
-        pixelsWide: pixels,
-        pixelsHigh: pixels,
-        bitsPerSample: 8,
-        samplesPerPixel: 4,
-        hasAlpha: true,
-        isPlanar: false,
-        colorSpaceName: .deviceRGB,
-        bytesPerRow: 0,
-        bitsPerPixel: 0
+        bitmapDataPlanes: nil, pixelsWide: pixels, pixelsHigh: pixels,
+        bitsPerSample: 8, samplesPerPixel: 4, hasAlpha: true, isPlanar: false,
+        colorSpaceName: .deviceRGB, bytesPerRow: 0, bitsPerPixel: 0
     ) else { fatalError("could not create bitmap rep") }
-    rep.size = NSSize(width: s, height: s)
+    rep.size = NSSize(width: side, height: side)
 
     NSGraphicsContext.saveGraphicsState()
-    let ctx = NSGraphicsContext(bitmapImageRep: rep)
-    NSGraphicsContext.current = ctx
-    ctx?.imageInterpolation = .high
+    NSGraphicsContext.current = NSGraphicsContext(bitmapImageRep: rep)
+    NSGraphicsContext.current?.imageInterpolation = .high
 
-    // Base: a plain rounded-square background (macOS "squircle"-ish corner
-    // radius), a neutral slate color — no borrowed assets.
-    let bg = NSColor(calibratedRed: 0.30, green: 0.32, blue: 0.36, alpha: 1.0)
-    let bgPath = NSBezierPath(roundedRect: NSRect(x: 0, y: 0, width: s, height: s),
-                               xRadius: s * 0.22, yRadius: s * 0.22)
-    bg.setFill()
-    bgPath.fill()
+    // The shapes are authored y-down, the way the drawing reads; flip once
+    // here rather than mirroring every coordinate.
+    let flip = NSAffineTransform()
+    flip.translateX(by: 0, yBy: side)
+    flip.scaleX(by: side / 100, yBy: -side / 100)
+    flip.concat()
 
-    // Foreground: the same coat glyph as before — an original shape, not
-    // derived from any borrowed icon.
-    let coat = NSColor(calibratedRed: 0.62, green: 0.44, blue: 0.24, alpha: 1.0)
-    let coatShadow = NSColor(calibratedRed: 0.48, green: 0.33, blue: 0.16, alpha: 1.0)
-    let midX = s * 0.5
-    let topY = s * 0.62
-    let collarOutX = s * 0.34
-    let collarInX = s * 0.11
-    let shoulderY = s * 0.53
-    let waistY = s * 0.30
-    let waistHalf = s * 0.30
-    let hemY = s * 0.06
-    let hemHalf = s * 0.40
+    drawIcon()
 
-    let path = NSBezierPath()
-    path.move(to: NSPoint(x: midX, y: topY))
-    path.line(to: NSPoint(x: midX - collarOutX, y: shoulderY))
-    path.line(to: NSPoint(x: midX - collarInX, y: shoulderY - s * 0.07))
-    path.line(to: NSPoint(x: midX - waistHalf, y: waistY))
-    path.line(to: NSPoint(x: midX - hemHalf, y: hemY))
-    path.line(to: NSPoint(x: midX + hemHalf, y: hemY))
-    path.line(to: NSPoint(x: midX + waistHalf, y: waistY))
-    path.line(to: NSPoint(x: midX + collarInX, y: shoulderY - s * 0.07))
-    path.line(to: NSPoint(x: midX + collarOutX, y: shoulderY))
-    path.close()
-    coat.setFill()
-    path.fill()
-
-    // A thin darker strip down the centerline reads as the coat's front
-    // seam/placket, breaking up the flat fill at larger sizes.
-    let seam = NSBezierPath()
-    seam.move(to: NSPoint(x: midX, y: topY))
-    seam.line(to: NSPoint(x: midX, y: hemY))
-    seam.lineWidth = max(s * 0.012, 1)
-    coatShadow.setStroke()
-    seam.stroke()
-
-    let buttonRadius = max(s * 0.02, 0.75)
-    for t: CGFloat in [0.20, 0.42, 0.64] {
-        let y = hemY + (shoulderY - hemY) * t
-        let r = NSRect(x: midX - buttonRadius, y: y - buttonRadius, width: buttonRadius * 2, height: buttonRadius * 2)
-        coatShadow.setFill()
-        NSBezierPath(ovalIn: r).fill()
-    }
-
-    ctx?.flushGraphics()
     NSGraphicsContext.restoreGraphicsState()
 
     guard let png = rep.representation(using: .png, properties: [:]) else {
@@ -108,8 +208,7 @@ let sizes: [(name: String, px: Int)] = [
 let outDir = CommandLine.arguments.count > 1 ? CommandLine.arguments[1] : "AppIcon.iconset"
 try? FileManager.default.createDirectory(atPath: outDir, withIntermediateDirectories: true)
 for (name, px) in sizes {
-    let data = renderIcon(pixels: px)
     let path = "\(outDir)/\(name).png"
-    try? data.write(to: URL(fileURLWithPath: path))
+    try? renderIcon(pixels: px).write(to: URL(fileURLWithPath: path))
     print("wrote \(path)")
 }