
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
myrlin-workbook
Advanced tools
Browser-based project manager for Claude Code sessions - session discovery, multi-terminal, cost tracking, docs, and kanban board
Open-source workspace manager for Claude Code - multi-pane embedded terminals, kanban task board with PR automation, cost tracking, conflict detection, per-project docs, session templates, model orchestration, 13 themes, and more. Discovers every session you've ever run, organizes them into projects with focused work contexts. Runs in your browser, everything stays local.
npx myrlin-workbook # Opens browser, discovers your real Claude sessions
npx myrlin-workbook --demo # Opens browser with sample data (no real sessions needed)
git clone https://github.com/therealarthur/myrlin-workbook.git
cd myrlin-workbook
npm install
npm run gui # Real sessions
npm run gui:demo # Sample data
On first launch, a random password is generated and saved to ~/.myrlin/config.json. This password persists across updates, reinstalls, and npx cache clears — you'll always use the same password.
To set your own:
# Option 1: Edit the config file (recommended — persists forever)
# ~/.myrlin/config.json → { "password": "your-password-here" }
# Option 2: Environment variable (overrides config, per-session)
CWM_PASSWORD=mypassword npx myrlin-workbook
Password lookup order: CWM_PASSWORD env var > ~/.myrlin/config.json > ./state/config.json > auto-generate.
On startup, the console prints a clickable URL with a one-time token (e.g., http://127.0.0.1:3456?token=<random>). Click it to auto-login — the token is single-use and expires after 60 seconds, so it's safe even if it appears in terminal logs. The token is stripped from the URL bar immediately after login.
node-pty for real terminal emulation):
xcode-select --installsudo apt install build-essential python3
npm installfails? You're missing the C++ build tools above. See Troubleshooting.
| Command | Description |
|---|---|
npx myrlin-workbook | Web GUI via npx |
npm run gui | Web GUI (localhost:3456) |
npm run gui:demo | Web GUI with sample data |
npm start | TUI mode (terminal-only, blessed) |
npm run demo | TUI with sample data |
I use Claude Code daily and had a growing list of pet peeves. Can't name sessions, so /resume is just picking from a list of IDs. No shift+enter for multiline. If you have a few sessions going at once, the terminal window juggling gets old fast. PC restarts and you have to reopen everything from scratch. No idea what you're spending.
Got fed up and built something for it. Myrlin scans ~/.claude/projects/, finds every session you've ever run, and you organize them into projects with embedded terminals, docs, and cost tracking. Everything runs locally, no cloud, no telemetry.
There are good tools in this space. I tried them. Here's where Myrlin fits:
| Feature | Myrlin | ClaudeCodeUI | Opcode | Claude Squad |
|---|---|---|---|---|
| Cost tracking | Yes | No | Yes | No |
| Costs dashboard | Yes | No | Yes | No |
| Session discovery | Yes | Yes | No | No |
| Session manager overlay | Yes | No | No | No |
| Project docs/kanban | Yes | No | No | No |
| Themes | 13 (Catppuccin, Nord, Dracula, etc.) | No | No | No |
| Session templates | Yes | No | No | No |
| Conflict detection | Yes | No | No | No |
| Kanban task board | Yes (5 columns + DnD) | No | No | Yes (basic) |
| PR automation | Yes (AI descriptions + gh) | No | No | No |
| Model orchestration | Yes (per stage) | No | No | No |
| Embedded terminals | 4-pane grid | Single | No | No |
| Tab grouping | Yes | No | No | No |
| Windows native | Yes | Buggy | Yes (desktop) | No (tmux) |
| TUI mode | Yes | No | No | No |
| Multi-agent | Claude only | Claude+Cursor+Codex | Claude only | 5+ tools |
| File explorer | No | Yes | No | No |
| npx install | Yes | Yes | No | No |
| Build step required | None | Vite | Tauri | None |
What those tools do better: ClaudeCodeUI has a file explorer and multi-agent support. Opcode is a polished desktop app with 20k stars. Claude Squad supports 5+ AI tools. Myrlin is project-first with cost tracking and per-project docs. Different approach to the same problem.
Per-session and per-workspace cost breakdown. Parses Claude's JSONL usage data, applies model-aware pricing (Opus, Sonnet, Haiku), shows input/output/cache tokens. Know exactly what you're spending.
~/.claude/projects/ and finds all existing Claude sessions
Myrlin uses a 3-level organizational hierarchy:
Category ("Side Projects", "Work") -- optional top-level grouping
Project ("Myrlin Workbook") -- the codebase / main container
Focus ("UI Polish", "Backend") -- sub-groups within a project
Sessions -- Claude Code conversations




Myrlin optionally integrates with td, a minimalist CLI task manager built for AI agent workflows. When td is installed and initialized in a repo, Myrlin surfaces its issues directly in the docs panel and sidebar — no context-switching to the terminal.
Install td:
go install github.com/marcus/td@latest
Enable: Settings → td Task Management → toggle on. Set the binary path if td isn't on your PATH (e.g. ~/.local/bin/td or ~/go/bin/td).
Worktree promotion: Click "→ Worktree" on any td issue to create a git worktree + Claude session in one click, with the issue description passed as the opening prompt to Claude.
See Why td alongside the built-in kanban? for when this makes sense.
Save your common launch configurations. Pre-set working directory, model, flags, and spawn options. One click to launch a new session from a template.
Real-time warnings when two or more running sessions are editing the same files. Runs git status across active sessions and cross-references modified files. Prevents you from stepping on your own work.
Ctrl+K / Cmd+K opens a fuzzy search across all sessions and projects. Jump to anything instantly.


13 themes organized into Dark and Light sections. 4 official Catppuccin (Mocha, Macchiato, Frappe, Latte), 3 community favorites (Nord, Dracula, Tokyo Night), 4 custom flavors (Cherry, Ocean, Amber, Mint), and 2 light alternatives (Rose Pine Dawn, Gruvbox Light). Toggle from the header dropdown. Choice persists in localStorage.
A comprehensive list of everything Myrlin Workbook offers today.
~/.claude/projects/, finds every session you've ever runCtrl+K / Cmd+K fuzzy search across sessions and projectsgh CLI, AI-generated descriptions from diffs... more to come.
Expose your local instance with a Cloudflare tunnel:
npm run gui # Start the server
cloudflared tunnel --url http://localhost:3456 # In another terminal
Open the URL from any device. All WebSocket terminal connections, SSE streams, and REST API calls route through the tunnel. For a stable URL, see Cloudflare tunnel docs.
Browser (vanilla JS SPA)
|
|-- REST API ---------- Express server
| |-- State store (JSON + EventEmitter)
| |-- Session manager (launch/stop/restart)
| |-- Resource monitoring (CPU, RAM, per-PID)
| +-- Project hierarchy, discovery, docs
|
|-- SSE --------------- Real-time updates (store events -> clients)
|
+-- WebSocket --------- Terminal I/O (binary frames)
+-- node-pty -> ConPTY / PTY
No React, no build step. Vanilla JS SPA, Express backend. ~24 source files, 42 tests.
src/
|-- state/
| |-- store.js # Core state (JSON persistence + EventEmitter)
| +-- docs-manager.js # Per-project markdown docs
|-- core/
| |-- session-manager.js # Launch/stop/restart processes
| |-- workspace-manager.js # Project/Focus CRUD
| |-- process-tracker.js # PID monitoring
| |-- recovery.js # Auto-recovery on startup
| +-- notifications.js # Event-based notifications
|-- web/
| |-- server.js # Express API + SSE + resources
| |-- auth.js # Token auth + rate limiting
| |-- pty-manager.js # PTY session lifecycle
| +-- public/
| |-- index.html # SPA shell
| |-- app.js # Frontend application
| |-- styles.css # Catppuccin themes
| +-- terminal.js # TerminalPane (xterm.js + WebSocket)
|-- ui/ # TUI mode (blessed)
|-- index.js # TUI entry point
+-- gui.js # GUI entry point
Loaded in order:
CWM_PASSWORD environment variablestate/config.json -> { "password": "..." }Default 3456. Override with PORT:
PORT=8080 npm run gui
| Key | Action |
|---|---|
Ctrl+K / Cmd+K | Quick switcher |
Escape | Close modals / menus |
Ctrl+Enter | Save in notes editor |
| Double-click session | Inline rename |
| Right-click session | Context menu (launch, model, rename, hide) |
| Right-click project | Context menu (docs, add session, edit, delete) |
npm install fails with node-gyp errorsnode-pty needs C++ build tools to compile native bindings. Install the tools listed in Prerequisites.
Windows quick fix:
npm install -g windows-build-tools
npx myrlin-workbook hangs on installSame issue. node-pty is compiling. If it fails, install the C++ build tools first, then try again.
Still stuck? Open an issue with your full error output and OS version.
The killer feature. Right-click any running Claude session, select "Spinoff Tasks..." and AI extracts actionable tasks from the conversation. Each task gets a pre-filled creation form with context, relevant files, and acceptance criteria. Confirm, and each task spins off to its own worktree branch with a structured context handoff document -- not a raw conversation dump, but a spec (current state, desired state, file inventory, constraints). Tasks appear on the kanban board, run in parallel on isolated branches, and report back with PRs when done.
No other tool extracts tasks from a running session's conversation. Cursor spawns agents from issues. Copilot Workspace goes issue-to-PR. Devin works sequentially. Myrlin is the first to let you take an in-progress conversation, break it into parallel autonomous tasks, and orchestrate them from a kanban board -- all with proper context engineering so each agent knows exactly what to build without the parent's full history polluting its context window.
claude --print, create/track PRs via gh, auto-advance on mergeMyrlin's kanban board and td solve different problems and work well together.
| Myrlin Kanban | td | |
|---|---|---|
| Lives in | Myrlin's state store | .todos/ directory in the repo |
| Follows git? | No | Yes — committed alongside code |
| AI agent access | Via Myrlin GUI | Via td CLI in any terminal |
| Session isolation | No | Yes — implementer can't approve own work |
| Handoff structured state | No | Yes — td handoff --done / --remaining / --decision |
| Worktree per task | Yes (Myrlin creates it) | Via Myrlin's "→ Worktree" button |
| PR tracking | Yes (via gh) | No |
| Cross-context memory | No | Yes — designed for AI agent workflows |
Use Myrlin's kanban to orchestrate worktrees, track PR state, manage dependencies, and coordinate parallel agents at the project level.
Use td inside those worktrees to track granular sub-tasks, log decisions, and hand off structured context to the next agent session — especially useful when a task spans multiple context windows or requires a review step by a separate session.
AGPL-3.0. Use, modify, self-host freely. If you run a modified version as a public service, you must publish source. See LICENSE.
Issues and PRs welcome. No build step. Clone, npm install, hack.
npm test # 42 tests
npm run gui # Start dev server
Built by Arthur.
FAQs
Browser-based project manager for Claude Code sessions - session discovery, multi-terminal, cost tracking, docs, and kanban board
The npm package myrlin-workbook receives a total of 99 weekly downloads. As such, myrlin-workbook popularity was classified as not popular.
We found that myrlin-workbook demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.