npm - @galda/cli - Versions diffs - 0.10.1 → 0.10.5 - Mend

@galda/cli 0.10.1 → 0.10.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (10) hide show

package/CLAUDE.md +6 -0
package/app/index.html +133 -23
package/app/theme.css +4 -0
package/bin/manager-for-ai.mjs +11 -1
package/engine/analytics-client.mjs +38 -0
package/engine/lib.mjs +10 -0
package/engine/mcp.mjs +4 -1
package/engine/relay-client.mjs +52 -6
package/engine/server.mjs +98 -3
package/package.json +1 -1

package/CLAUDE.md CHANGED Viewed

@@ -33,6 +33,12 @@
   - 探索的な読み込み（横断 grep・場所探し・大きいファイル通読）は**既定で subagent に逃がし**、メイン文脈に全文を載せない。ピンポイントな1関数だけ直接読む。
   - 別エージェントへ渡す時は、チャット履歴でなく **1枚の handoff md** を書いて渡す。
+## デプロイ／インフラの掟（Masa明言 2026-07-15・全レーン必読）
+- **`a2c-tech.workers.dev` を絶対に使わない・コードやdocsに書かない**。これはクライアント企業 **A2C** の名を冠した Cloudflare workers.dev サブドメインで、Galda の製品・URL・設定に一切登場させてはいけない（見つけたら全て除去）。
+- Worker/API へは**必ず所有ドメイン `https://galda.app`（custom domain）経由**で参照する。`*.workers.dev` サブドメインを製品コードに焼き込まない（`MANAGER_BILLING_API_URL` 等の既定値は `https://galda.app`）。
+- **Cloudflare/wrangler にデプロイする前に `wrangler whoami` でデプロイ先アカウントを確認**し、Galda/Kodo 所有であること・workers.dev サブドメイン名に客先名や別プロジェクト名が出ていないことを確かめる。怪しければ止めて Masa に確認（本番デプロイは Masa 明示許可制）。
 ## 構成
 - `engine/server.mjs` … チャットアプリのサーバ（:4400・タスク分解・worker実行・SSE・PR作成）

package/app/index.html CHANGED Viewed

@@ -3,7 +3,8 @@
 <head>
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
-<title>Agent Manager</title>
+<title>Galda</title>
+<link rel="icon" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Cdefs%3E%3ClinearGradient id='g' x1='0' y1='0' x2='1' y2='1'%3E%3Cstop offset='0' stop-color='%233B6BFF'/%3E%3Cstop offset='1' stop-color='%230E2AA8'/%3E%3C/linearGradient%3E%3C/defs%3E%3Ccircle cx='16' cy='16' r='11' fill='none' stroke='url(%23g)' stroke-width='5'/%3E%3C/svg%3E">
 <!-- brand fonts FINAL (v45 §1): the 3 adopted faces self-host in /fonts.css — the old
      Google Fonts Inter/JetBrains request was removed (offline-safe, no stray families) -->
 <link rel="stylesheet" href="/theme.css">
@@ -1129,8 +1130,8 @@
   #fsRoot .fsproj.on i{background:var(--green)}
   /* running project = solid saturated green dot with a breathing glow — never dims to
      grey, independent of selection (HANDOFF-v45 §11, flagship .proj.run port) */
-  #fsRoot .fsproj.run i{background:#22c55e;box-shadow:0 0 0 0 rgba(34,197,94,.55);animation:fsrundot 2s ease-in-out infinite}
-  @keyframes fsrundot{0%,100%{box-shadow:0 0 0 0 rgba(34,197,94,.5)}50%{box-shadow:0 0 5px 1.5px rgba(34,197,94,.35)}}
+  #fsRoot .fsproj.run i{background:var(--green);box-shadow:0 0 0 0 color-mix(in srgb,var(--green) 55%,transparent);animation:fsrundot 2s ease-in-out infinite}
+  @keyframes fsrundot{0%,100%{box-shadow:0 0 0 0 color-mix(in srgb,var(--green) 50%,transparent)}50%{box-shadow:0 0 5px 1.5px color-mix(in srgb,var(--green) 35%,transparent)}}
   @media (prefers-reduced-motion:reduce){#fsRoot .fsproj.run i{animation:none}}
   #fsRoot .fsproj .pname{min-width:0;overflow:hidden;text-overflow:ellipsis}
   #fsRoot .fsproj .num{margin-left:auto;font-size:10px;color:var(--ink3);flex:0 0 auto}
@@ -1168,7 +1169,7 @@
   .fsctxmenu button svg{width:14px;height:14px;flex:0 0 14px;fill:none;stroke:currentColor;stroke-width:1.8}
   .fsctxmenu .ctxsep{height:1px;margin:4px 6px;background:var(--hair)}
   .fsctxmenu .swix{opacity:.5;margin-right:9px;font:600 10px/1 var(--mono);flex:0 0 auto}
-  .fsctxmenu .swrun{margin-left:8px;width:6px;height:6px;border-radius:50%;background:#22c55e;flex:0 0 auto}
+  .fsctxmenu .swrun{margin-left:8px;width:6px;height:6px;border-radius:50%;background:var(--green);flex:0 0 auto}
   #fsRoot .ghostbtn{height:26px;padding:0 8px;border:0;border-radius:7px;background:transparent;color:var(--ink3);font:inherit;font-size:11.5px;text-align:left;cursor:pointer;white-space:nowrap}
   #fsRoot .ghostbtn:hover{background:var(--hover);color:var(--ink)}
   #fsRoot .morebtn{display:grid;place-items:center;width:26px;padding:0}
@@ -1213,7 +1214,7 @@
     color:var(--ink3);background:transparent;border:0;padding:0;margin-left:10px;cursor:pointer}
   #fsRoot .chd .runsw[hidden]{display:none}
   #fsRoot .chd .runsw:hover{color:var(--ink)}
-  #fsRoot .chd .runsw i{width:5px;height:5px;border-radius:50%;background:#22c55e;flex:0 0 5px;animation:fsrundot 2s ease-in-out infinite}
+  #fsRoot .chd .runsw i{width:5px;height:5px;border-radius:50%;background:var(--green);flex:0 0 5px;animation:fsrundot 2s ease-in-out infinite}
   #fsRoot .chd .runsw svg{width:9px;height:9px;flex:0 0 9px;fill:none;stroke:currentColor;stroke-width:2;stroke-linecap:round;stroke-linejoin:round}
   #fsRoot .runmenu{display:none;flex-direction:column;gap:1px;background:var(--panel);border-radius:10px;
     box-shadow:0 4px 14px rgba(20,23,31,.12),0 0 0 1px var(--hair);padding:4px;position:absolute;top:22px;right:0;min-width:210px;z-index:6}
@@ -1222,7 +1223,7 @@
     color:var(--ink2);font:inherit;font-size:11.5px;text-align:left;cursor:pointer;white-space:nowrap;overflow:hidden}
   #fsRoot .runmenu .rmrow:hover{background:var(--hover);color:var(--ink)}
   #fsRoot .runmenu .rmrow.on{color:var(--ink);font-weight:600}
-  #fsRoot .runmenu .rmrow i{width:6px;height:6px;border-radius:50%;background:#22c55e;flex:0 0 6px;animation:fsrundot 2s ease-in-out infinite}
+  #fsRoot .runmenu .rmrow i{width:6px;height:6px;border-radius:50%;background:var(--green);flex:0 0 6px;animation:fsrundot 2s ease-in-out infinite}
   #fsRoot .runmenu .rmrow .rmnm{overflow:hidden;text-overflow:ellipsis;flex:1 1 auto}
   #fsRoot .runmenu .rmrow .rmpct{flex:0 0 auto;font:600 10px/1 var(--mono);color:var(--ink3)}
   /* "Now doing" — Underline pattern (HANDOFF-v45 §10 confirmed default, flagship
@@ -1232,7 +1233,7 @@
     max-width:var(--fscenterw,760px);width:100%;margin:-4px auto 14px;position:relative;z-index:1}
   #fsRoot .nowdoing[hidden]{display:none}
   #fsRoot .nowdoing .nd-lb{font:600 8.5px/1 var(--mono);letter-spacing:.12em;color:var(--ink3);text-transform:uppercase}
-  #fsRoot .nowdoing .nd-run{width:9px;height:9px;flex:0 0 9px;border-radius:50%;background:#22c55e;animation:fsrundot 2s ease-in-out infinite}
+  #fsRoot .nowdoing .nd-run{width:9px;height:9px;flex:0 0 9px;border-radius:50%;background:var(--green);animation:fsrundot 2s ease-in-out infinite}
   #fsRoot .nowdoing .nd-no{font-size:12.5px;font-weight:600;color:var(--ink3);font-variant-numeric:tabular-nums}
   #fsRoot .nowdoing .nd-nm{font-size:14px;font-weight:600;color:var(--ink);white-space:nowrap;overflow:hidden;text-overflow:ellipsis;flex:0 1 auto}
   #fsRoot .nowdoing .nd-pct{margin-left:auto;font:600 11px/1 var(--mono);color:var(--ink2);font-variant-numeric:tabular-nums;flex:0 0 auto}
@@ -1673,6 +1674,14 @@
     radial-gradient(80% 72% at 84% 7%,var(--lgA,rgba(216,228,255,.56)),transparent 62%),
     radial-gradient(120% 108% at 95% -5%,var(--lgB,rgba(150,170,220,.42)),transparent 74%),#07080a;
     background-attachment:fixed}
+  /* light OFF (H17, flagship f9c75ad): kill the dominant top-right glow + every light layer →
+     pure flat black (LP #111112). Overrides both the --glowc wash (any layout) and the flagship
+     radial stack. Accent goes LP green #3DDC97 via var(--green) (set in theme.css). */
+  body[data-theme="midnight"][data-light="off"],
+  body[data-theme="midnight"][data-light="off"][data-layout="flagship"]{background:#111112 !important}
+  /* send button on flat black: dark round + white arrow (was invisible white-on-white) */
+  body[data-theme="midnight"][data-light="off"] .send{background:#17181c !important;box-shadow:inset 0 0 0 1px rgba(255,255,255,.16) !important}
+  body[data-theme="midnight"][data-light="off"] .send svg{stroke:#fff !important}
   body[data-theme="midnight"] #fsRoot .fscard{background:rgba(10,11,16,.66);-webkit-backdrop-filter:blur(22px) saturate(1.3);backdrop-filter:blur(22px) saturate(1.3);
     box-shadow:0 1px 0 rgba(255,255,255,.05) inset,0 0 0 1px var(--hair),0 24px 60px -24px rgba(0,0,0,.72)}
@@ -1908,6 +1917,9 @@
   #fsClawdHero{display:none;position:absolute;left:50%;top:38%;transform:translate(-50%,-50%);text-align:center;z-index:1;pointer-events:none}
   #fsClawdHero b{display:block;margin-top:14px;font:600 16px/1.3 'Schibsted Grotesk',-apple-system,system-ui,sans-serif;letter-spacing:-.012em;color:var(--ink)} /* hero wordmark = Schibsted (v45 §1) */
   #fsClawdHero span{display:block;margin-top:5px;font:500 10px/1.4 var(--mono);letter-spacing:.08em;color:var(--ink3)}
+  /* Welcome P1 (H17 item 4, flagship f9c75ad): grounded hop + clean-cut eyes on settle + our CSS confetti.
+     Two pixel frames (neutral black-eyes / laughing), no arm-raise, no official confetti. reduce-motion=static. */
+  #fsClawdHero .cstage{position:relative;width:170px;height:132px;display:flex;align-items:flex-end;justify-content:center;margin:0 auto 2px}#fsClawdHero .cw{position:relative;width:150px;transform-origin:50% 100%;will-change:transform;animation:chHop 2.4s linear infinite}#fsClawdHero .cw img{position:absolute;left:0;bottom:0;width:100%;display:block;image-rendering:pixelated}#fsClawdHero .cw .chNeu{animation:chNeu 2.4s linear infinite}#fsClawdHero .cw .chLau{opacity:0;animation:chLau 2.4s linear infinite}#fsClawdHero .chConf{position:absolute;left:50%;top:34px;width:0;height:0;pointer-events:none;z-index:3}#fsClawdHero .chConf i{position:absolute;width:4px;height:7px;border-radius:1.5px;opacity:0;transform:translate(-50%,-50%);animation:chPop 2.4s cubic-bezier(.2,.7,.3,1) infinite}@keyframes chHop{0%,52%{transform:translateY(0) scale(1,1)}55%{transform:translateY(0) scale(1.08,.85)}58%{transform:translateY(-16px) scale(.95,1.14)}61%{transform:translateY(-27px) scale(.98,1.05)}64%{transform:translateY(-31px) scale(1,1)}67%{transform:translateY(-26px) scale(.98,1.05)}70%{transform:translateY(-14px) scale(.95,1.12)}73%{transform:translateY(0) scale(1.1,.82)}77%{transform:translateY(-4px) scale(.99,1.02)}80%,100%{transform:translateY(0) scale(1,1)}}@keyframes chLau{0%,53.8%{opacity:0}54%,85.8%{opacity:1}86%,100%{opacity:0}}@keyframes chNeu{0%,53.8%{opacity:1}54%,85.8%{opacity:0}86%,100%{opacity:1}}@keyframes chPop{0%,54%{opacity:0;transform:translate(0,6px) rotate(0) scale(.5)}60%{opacity:1;transform:translate(calc(var(--dx)*.5),calc(var(--dy)*.5)) rotate(calc(var(--rot)*.5)) scale(1)}72%{opacity:1;transform:translate(var(--dx),var(--dy)) rotate(var(--rot))}100%{opacity:0;transform:translate(calc(var(--dx)*1.1),calc(var(--dy) + 44px)) rotate(calc(var(--rot)*1.4)) scale(.9)}}@media (prefers-reduced-motion:reduce){#fsClawdHero .cw,#fsClawdHero .cw .chNeu,#fsClawdHero .cw .chLau{animation:none}#fsClawdHero .cw .chLau{opacity:0}#fsClawdHero .chConf{display:none}}
   #fsRoot.clawdhero #fsClawdHero{display:block}
   #fsRoot .cc-who{display:flex;align-items:center;gap:9px;padding:2px 0 6px}
   #fsRoot .cc-who .cs-n{font-size:12px;font-weight:600;color:var(--ink)}
@@ -2037,7 +2049,7 @@
   <canvas id="fx"></canvas>
   <div class="top">
     <div class="mark"></div>
-    <div class="brand">Agent Manager</div>
+    <div class="brand">Galda</div>
     <div class="spacer"></div>
     <!-- Feedback 7: layout switcher — flip the arrangement live. Increment 1:
          現行 / タスク中央 / 3列カンバン (CSS reflow). 中央フロー・1列 = increment 2. -->
@@ -5187,7 +5199,7 @@ async function deleteProject(p){
   if (!p) return;
   if (!(await confirmDelete({
     title: 'Delete this project?',
-    body: 'This removes the project from Agent Manager. This cannot be undone.',
+    body: 'This removes the project from Galda. This cannot be undone.',
     preview: p.name,
   }))) return;
   try {
@@ -5310,7 +5322,8 @@ function applyFsBand(){
   // Clawd HERO (§4.5 初期状態): big Clawd + "Claude Code / CONNECTED" in the
   // implementing column. Visibility is state-driven (renderFsFeed toggles
   // #fsRoot.clawdhero when the column has zero activity — no timers).
-  $('fsClawdHero').innerHTML = CLAWD(88) + '<b>Claude Code</b><span>CONNECTED · WAITING FOR GOALS</span>';
+  $('fsClawdHero').innerHTML = '<div class="cstage"><div class="chConf"></div><div class="cw"><img class="chNeu" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAARgAAAETCAYAAADtSRlPAAAMdElEQVR4nO3dPYwk6VkH8Keqq2f2E4uzzydzCToCH8JCIiAxgY1EDMIBSByS5cQkthCCHCFBgGTJSBA5cGQnRDYJws6xxElA6C9ZBEjGt+e1rZvdnZmurkJvdfds9+581HTvTL9d/fsF+0xrd7tm3u5+3v+89RUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBDFtr8BLvaPn3+nfWvypPu6Lo1UzqpmVn80vh9f/MrXfa7mqsUX5Oe1hw/izTpiFNOYxiiqqoy6btQMx2E6OYnxqIr32/vbfttkRYPJWD1to4g2Ttv0aBr1ZNpFTjW/cRhHxGRaR0iaKwxHxqpREdHWcZBKRHQP1SzHISkLH6cXGZHME0x60zZt082U03a2aKbmNw5Jep1YpcFknmDSmzY1mW3P0KoEsw4NJmMSzO4lmLKcP6CjwWRMgtmd5FRHOft1trGHepkGkzlrMLtRq2gkmHNoMJmzBpNHQpFg1qPBZMwazO4lGFZpMBmzBrP9ZOI4mM04kndnEkzZayYdF2WU0UQ1X2vsU7uZt+j3/LtYmzbi8IWft5qP63J98e/r6L+d9L9n43jLb5LMaTC5J5jJ/DiYdjajTi+pqbk8Oj6Jnx09jdNmGlVZRd3Ul9eTp1Ed3otfPjyI1x/eufT5d7U+OT6N/338uPs5rxyPpXF5642PxsGo7LWdFHUcyfsyDWYgCWYcTYzLMr79kw/iq9/4VjwqUr6/+piMURQxjTb+5pNvx+996nfjwZOfdh+WpmdiyrWm8Ug/xy8evhHf/M634svvfi+ix5gUZRlt08TrEfH5P/nDeOeNu905RleNxyLBlCPHwSyzBpOxdNBW371I3XEYo6WXM32Q0gcquaSm5nL2ODW1+VtiCHt1LnTJeKTmsnhcFqNoy9nX9iKtR4PJWDpoq+9xMN1ejOlsL8az9MfybN2zpmvOpOfp/vsA9uq8pM84LI1b006jSAs4PcbDcTDn02AGmGDupj/atov7nR5JZi8STJ9xWBq3lGAWJJj1aDADSzDVvfurcT/pm2S6RTkJ5mzc0tDMf0Xqm2BYpcEMLMHUT2eX2JRgNk8wy64a/+71cj2Yl2gwA1yD6UgwryTBnA3nFePfvV4SzEs0mIEcyXveXiRrMLeXYBZnU7PKiGROgtmNBGMv0vk0mMxJMNvbi7TMXqT1aDADOZvaGkweCYZVGswOrMEkN3Uk73JNNw9zHMxqglkcaNc3wbQ+Uis0mIwtz4jXPpI3ueaRvMneHweThqNpujFMR/IumrYEsx4nO2bqL3774+3Dg4Oo67L70C9myovO5q3bMqqyiDfvjOOPfu0j8d6DD/fazsHxpKtvvvZaV9NM3Gd7udduPIoy7p4+id9448PxmY+/1XvsT++M46NHP41PlHWcTNK5SVW0bXPl9tL9q8ajtnvtvvzu954fHr3HDMI1ffev/rSdtm2M0omCN1CXI/bJZPbhb+cvVJ+a3uzjahxF1yTKK+vCk3Ico5OnvbezKzWpilHcGRdRt0VURdvV9PMnadyXHy+ksUm3ha3b6dkHpc/20rbS3TirxQV3lvR5Pa7zuqWf5e0vfS3rz7AEc03pzTitm3jWTm9oBt78eaOezB9Pe9aIUTvJInncRG1jGkens8fH13wdkuslp9n/ezY57++nr6x2S0PjdMPavFmDuabZDOhOi7d9drQaK+MwP0UqexrMNc1itjstbvts6X2vzfN1+axpMNckwUgUOSSqUoIZJgkmjxl832sjwQyXNZjtz+D7XksJZni+8Ae/37b1xBpMBjP4vtdGghmmohpLMBnM4PteSwlmeP7pm//Svaz2Im1/Bt/32kgww2QvUh4z+L7XUoIZJnuR8pjB9702EswwSTB5zOD7XksJZpgkmDxm8H2vjQQzTBJMHjP4vtdSghkmCSaPGXzfayPBDJMEk8cMvu+1lGCGSYLJYwbf99pIMMMkweQxg+97LSWYYZJg8pjB9702EsxwOZt6+zP4vtdSghkeZ1Nvf+ZWQ4IZ8smOzqbOYwbf91pKMMPlbGpJYttJqrEGM0z2IuUxg+97LSWYYUo3R0t38EsOb7hac9jdpHTT748m3S64yD/GuKvANU3qiKN6dmvVm6on3c3C8pgp1euNQ8zri6/r6bR55e+T40n+DWZHgtZ++vpf/ln79uQX3ZrP5Ip7I6vbHYeUKFKy/c/il+Kz//AVn6s5CSZjk2nR3Yg+2lqSyDxRpdepaZsoy/xTxW3SYDI2Hj1/s257TUG9es2lLMpoGuFlmQaTsXrxS33kM1OrF6+9pATDKg0mY9ViapRgsk9QdZRdgmGVEcnY8owoOeSdoKzBnE+D2RHbnqHVfgnGGswqDWZHbHuGVvslmOVfa9Fgsrb8O70EsSMJxkLvimr1ITmxBrM7yWncJZhtv2Py41ekjEkwO5hgHAezQoPJmONgtp9M7EXajAaTseXDzrc9Q6sSzDo0mIwtx+1tz9Cq42DWocFkzJG8u5OcrMGcT4PJmL1Iu5OcHMl7Pg0mY/YibT+ZSDCb0WAyJsFsP5lIMJvRYDImwWw/mUgwm9FgMuY4mO0nEwlmMxpMxhwHs/1kIsFsRoPJmONgtp9MJJjNaDAZcxzM9pOJBLMZDSZj9iJtP5lIMJvRYDJmL9L2k4kEsxkNJmP2Im0/mUgwm3HBqdzXYObX/V7MpOlNf1lNFz26Mx5HW0+iqGa1rEbR1NNza123MapGcTKZRFWMom6nvbaz+PCNilEclG1MmyZGZdnVy7a3Tl08b6pPp0233b7j0R3GX4yiiNnPedV4LGobZdR1041Hn+3Vbdnd2dH1YFZpMANZg0lv8uTHx5P4nx/8KJrxg5hEE+NLQuri71P99dcexK986EO9Z+wklf/68ftx9OxZtMXNvpWKto4Hd+/Gb33sI2cf+j7f5/TwXrz36L34wfvz5ymfRtvcu7Au3I/H8atvfixev3MYddv0vqJduXSzPDSYnVuDuSy53B2V8Z2jJv7uX/9j3m76+/tP/2Z773c+FQ8/eNR9WCZR9koGn/vnf7v2tjbx33/+Tlv0HI/0cxwd3I93v//D+Ot//+61v8+//ewft5+5F1E2Eafp+S65R7gEcz5rMANJMN09rDdQlaNZnT9PnwSTksQ2tLcwHsu6e053TeTiJONs6vNpMAPZi5SuR7KJukm/dtRnz3PV9pKUYG7b9IU1kV7jscH3OZnW8+2m18P1YK5LgxlYginX/DDtSoJJi8q3mWAWTb7P9rqks3SZUzSYwSWYZs0PfUowXR1ignkFTd4V7dYjwQzkOBgJRoLJkQYzkLOpN00wCxLMc9VIgtmUBrMjbjrBHB6Ou2oN5rl6ag1mUxpMxm5zDebkZNJVCeY5CWZzGkzGbnMv0mKRV4LZLMEsX2IDDSZrt5lgFiSYDRPM0qSABpO120wwCxLMhmswS5MCGkzWJJjtHgcjwWxOu82YBLP9BFONZ3vXJJj1aDAZk2AySDCpy1iDWZsGkzEJZvsJJl18KpFg1qPBZEyCeZkEs1s0mIxJMC+TYHaLBpMxCWb3EszyCapoMFmTYHYwwbgezAoJJmO3mWAWF5xyJO/SmIwi6snsHC3Xg1mPBpOx20wwzqY+nyvabUaDydhtJpgnz467KsGsckW7zWgwGbMGk8EajGvybkSDyVi3VyK9REXVK8G0ZXHjZ1Mn6f5Axbxuay/S6fwOj4vv58W6GLeNtxejs+dZXIP4ojoeVe7s+AINJnPpdqTR1mcfnsWH/LCIKOc3ATv7dxveVaBqZs+TGtuLz794vPh+un/3Cu891NfheNylmHtV1d1GpJqPy+LnX9R0E7r0/Y2b2W1H1pVui5t+3rSddPvZi2pqLonrwaxy69iMPf7gKB7Haff1SX0ah1UZJ3XT1XQTsLYcRdGcdm/y9PjewUH87Gj276/r6OQ0nj75II6fHXfPt9hOquV4FM1kurLd43Yad7ZwbaX/O3ra1bRzJ52HeFFN32/6vn9SNfHz0/WazLPJaTx6UpyN/2IczqtFM+3G7fFZrgIAAAAAAAAAAAAAAAAgevp/2dsONs8JxOUAAAAASUVORK5CYII=" alt=""><img class="chLau" src="data:image/png;base64,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" alt=""></div></div>' + '<b>Claude Code</b><span>CONNECTED · WAITING FOR GOALS</span>';
+  (function(){var conf=document.querySelector('#fsClawdHero .chConf');if(!conf)return;if(window.matchMedia&&matchMedia('(prefers-reduced-motion: reduce)').matches)return;var C=["#FF6B6B","#F86A5C","#FFD166","#3DDC97","#8FB0FF","#C77DFF","#ffffff"],N=16;for(var k=0;k<N;k++){var i=document.createElement('i');var ang=(-172+Math.random()*164)*Math.PI/180;var dist=50+Math.random()*94;var dx=Math.cos(ang)*dist,dy=Math.sin(ang)*dist-12;i.style.setProperty('--dx',dx.toFixed(1)+'px');i.style.setProperty('--dy',dy.toFixed(1)+'px');i.style.setProperty('--rot',(Math.random()*360-180|0)+'deg');i.style.animationDelay=(-(Math.random()*0.04)).toFixed(3)+'s';i.style.background=C[k%C.length];conf.appendChild(i);}})(); // Welcome P1 confetti (H17 item 4)
   // fold toggles = パネルアイコン Fill v2 (HANDOFF-v45 §4) — faithful port of flagship
   // tgSvg/tgUpdate at the adopted value (__tgv v=1). OPEN = pane side filled 14% +
   // divider; CLOSED = outward arrow pointing in the opening direction. No rotation.
@@ -5671,7 +5684,94 @@ function connectSSE(){
   };
 }
+// Signed in, but this device's engine isn't running yet. We're the REAL app
+// (served by the relay), just flagged disconnected: render the board, then gate
+// the composer so the first attempt to type explains the one-time device setup
+// (npx @galda/cli). Poll `/`; the moment the engine connects the relay proxies
+// the live app (flag gone) → reload into it. (Masa 2026-07-15: one product, not a
+// separate look-alike page.)
+function bootDisconnected(info){
+  const email = (info && info.email) || '';
+  document.body.classList.add('disconnected');
+  document.body.setAttribute('data-layout', localStorage.getItem('layout') || 'flagship');
+  applyTheme(); applyCust();
+  // seed a minimal board so it renders like the real empty state
+  state.projects = [{ id: '__onboard', name: 'Your project' }];
+  state.active = '__onboard';
+  state.billing = { licensed: false, email };
+  try { render(); } catch (e) { console.warn('disconnected render', e); }
+  const heroSpan = document.querySelector('#fsClawdHero span');
+  if (heroSpan) heroSpan.textContent = 'CONNECT YOUR MACHINE TO BEGIN';
+  const style = document.createElement('style');
+  style.textContent = `
+    #connectGate{position:fixed;inset:0;z-index:1000;display:none;align-items:center;justify-content:center;padding:22px;
+      background:rgba(4,4,6,.72);-webkit-backdrop-filter:blur(7px);backdrop-filter:blur(7px)}
+    #connectGate.on{display:flex}
+    #connectGate .cg-card{position:relative;width:100%;max-width:440px;background:var(--panel,#0d0d0f);border:1px solid var(--hair2,rgba(255,255,255,.12));
+      border-radius:18px;padding:30px 28px;text-align:center;box-shadow:0 30px 80px -30px #000}
+    #connectGate h2{font:700 20px/1.3 var(--ui,system-ui);letter-spacing:-.02em;margin:0 0 8px;color:var(--ink,#e9e7e2)}
+    #connectGate p{font-size:13.5px;line-height:1.7;color:var(--ink2,#a3a097);margin:0 0 18px}
+    #connectGate .cg-cmd{display:flex;align-items:center;justify-content:space-between;gap:12px;background:#0a0a0b;
+      border:1px solid rgba(255,255,255,.14);border-radius:12px;padding:12px 14px;margin:0 0 16px}
+    #connectGate .cg-cmd code{font:500 14px/1 var(--mono,monospace);color:#e9e7e2}
+    #connectGate .cg-cmd button{font:500 11px/1 var(--mono,monospace);color:#a3a097;background:transparent;
+      border:1px solid rgba(255,255,255,.18);border-radius:7px;padding:6px 9px;cursor:pointer}
+    #connectGate .cg-cmd button:hover{color:#fff}
+    #connectGate .cg-who{font-size:12px;color:var(--ink3,#6b6862);margin:0 0 4px}
+    #connectGate .cg-who b{color:var(--ink2,#a3a097)}
+    #connectGate .cg-switch{font-size:12px;color:var(--ink3,#6b6862);margin:14px 0 0}
+    #connectGate .cg-switch a{color:#8fb0ff;text-decoration:none}
+    #connectGate .cg-x{position:absolute;top:14px;right:16px;width:28px;height:28px;border:0;background:transparent;color:var(--ink3,#6b6862);font-size:20px;line-height:1;cursor:pointer}
+    #connectGate .cg-wait{display:inline-flex;align-items:center;gap:7px;font:500 10.5px/1 var(--mono,monospace);letter-spacing:.08em;color:var(--ink3,#6b6862);margin-top:16px}
+    #connectGate .cg-wait i{width:6px;height:6px;border-radius:50%;background:var(--green,#3DDC97);animation:cgpulse 1.8s ease-in-out infinite}
+    @keyframes cgpulse{0%,100%{box-shadow:0 0 0 0 color-mix(in srgb,var(--green,#3DDC97) 50%,transparent)}50%{box-shadow:0 0 6px 2px color-mix(in srgb,var(--green,#3DDC97) 35%,transparent)}}
+    body.disconnected .composer{cursor:pointer}`;
+  document.head.appendChild(style);
+  const ov = document.createElement('div');
+  ov.id = 'connectGate';
+  ov.innerHTML = '<div class="cg-card"><button class="cg-x" aria-label="Close">×</button>'
+    + '<h2>Connect this device to start</h2>'
+    + '<p>Galda runs on your own machine. Run this where you use Claude Code or Codex — this board comes alive the moment it connects, no refresh needed:</p>'
+    + '<div class="cg-cmd"><code>npx @galda/cli</code><button class="cg-copy">Copy</button></div>'
+    + '<p class="cg-who">Signed in as <b></b></p>'
+    + '<p class="cg-switch">Wrong account? <a href="/logout">Switch account →</a></p>'
+    + '<div class="cg-wait"><i></i>WAITING FOR THIS DEVICE</div></div>';
+  document.body.appendChild(ov);
+  ov.querySelector('.cg-who b').textContent = email || 'your account';
+  const open = () => ov.classList.add('on');
+  const close = () => ov.classList.remove('on');
+  ov.querySelector('.cg-x').onclick = close;
+  ov.addEventListener('mousedown', (e) => { if (e.target === ov) close(); });
+  ov.querySelector('.cg-copy').onclick = function(){ try { navigator.clipboard.writeText('npx @galda/cli'); } catch {} this.textContent = 'Copied'; setTimeout(() => { this.textContent = 'Copy'; }, 1400); };
+  // gate the composer: any attempt to type a goal explains the setup first
+  const input = document.getElementById('input');
+  const send = document.getElementById('send');
+  const gate = (e) => { if (e) e.preventDefault(); open(); };
+  if (input) { input.readOnly = true; input.addEventListener('focus', gate); input.addEventListener('mousedown', gate); input.addEventListener('keydown', gate); }
+  if (send) send.addEventListener('click', gate);
+  // Keep the agent / model / effort pickers live so Codex users can switch to
+  // Codex (and see it's a first-class option) even before this device connects;
+  // only typing a goal or hitting send opens the connect explainer. (Masa 2026-07-15)
+  const cw = document.getElementById('composerWrap');
+  if (cw) cw.addEventListener('mousedown', (e) => { if (e.target.closest('#appsel, #modelsel, #effortsel')) return; gate(e); });
+  // come alive automatically: when the relay stops flagging disconnected (the
+  // engine connected → its live app is proxied), reload into the real board.
+  setInterval(() => {
+    fetch('/', { cache: 'no-store', credentials: 'same-origin' }).then((r) => r.text()).then((t) => {
+      if (t.indexOf('__GALDA_DISCONNECTED') === -1) location.reload();
+    }).catch(() => {});
+  }, 4000);
+}
 async function boot(){
+  // Served by the relay when you're signed in but this device's engine isn't
+  // connected yet (window.__GALDA_DISCONNECTED). Show the real board, but gate the
+  // composer with a "connect this device" explainer on the first attempt to type.
+  if (window.__GALDA_DISCONNECTED) return bootDisconnected(window.__GALDA_DISCONNECTED);
   $('input').value = localStorage.getItem('draft') ?? '';
   await refresh();
   flushOutbox();
@@ -6934,7 +7034,7 @@ const cust = {
   ring: Number(localStorage.getItem('ringPal') ?? 1),   // prism send-ring palette (0-16) — default = 2nd 全分光 (§6.5 確定)
   tban: Number(localStorage.getItem('tbAnim') ?? 5),    // TB縁アニメ (0-9 + 10 none) — default = 5 パルス (§6.5 確定)
   tbc: Number(localStorage.getItem('tbColor') ?? 1),    // TB縁アニメの色 (RINGS 0-16) — default = 2nd 全分光 (§6.5 確定)
-  glow: Number(localStorage.getItem('glowLight') ?? 0), // Midnight LIGHT preset (0-5, Moon default)
+  glow: Number(localStorage.getItem('glowLight') ?? 6), // Midnight LIGHT preset (0-5, or 6="Off" flat black — Midnight default)
   hue: localStorage.getItem('lightHue') != null ? Number(localStorage.getItem('lightHue')) : null, // Midnight free hue (0-359, null = preset)
   bg3: Number(localStorage.getItem('bg3') ?? 0),        // Banff BACKDROP (0 Lake / 1 Peak / 2-6 dark scenes / -1 upload)
   cine: Number(localStorage.getItem('cineText') ?? 3),  // Cinema TEXT (0-4) — default 3 Below (v3 §6.5)
@@ -7194,14 +7294,21 @@ function applyCust(){
   // Midnight light: preset (Moon default) or the free hue slider (__light/__lighthue port)
   const setLg = (la, lb, lc, w) => { const s = document.body.style;
     s.setProperty('--lgA', la); s.setProperty('--lgB', lb); s.setProperty('--lgC', lc); s.setProperty('--lgW', w); };
-  if (cust.hue != null) {
-    const h = ((cust.hue | 0) % 360 + 360) % 360;
-    setLg(`hsla(${h},90%,79%,.60)`, `hsla(${(h + 18) % 360},78%,56%,.48)`, `hsla(${h},95%,87%,.40)`, '.44');
-    document.body.style.setProperty('--glowc', `hsl(${h},90%,79%)`); // legacy old-layout wash
+  // light OFF (glow index 6) = pure flat black (LP #111112) via [data-light="off"] — a 3rd state
+  // beyond preset/hue (flagship __light('off')). CSS handles the flat black + green accent.
+  if (cust.hue == null && cust.glow === 6) {
+    document.body.setAttribute('data-light', 'off');
   } else {
-    const L = LIGHTS[((cust.glow % 6) + 6) % 6];
-    setLg(L[1], L[2], L[3], L[4]);
-    document.body.style.setProperty('--glowc', LIGHT_SW[((cust.glow % 6) + 6) % 6]);
+    document.body.removeAttribute('data-light');
+    if (cust.hue != null) {
+      const h = ((cust.hue | 0) % 360 + 360) % 360;
+      setLg(`hsla(${h},90%,79%,.60)`, `hsla(${(h + 18) % 360},78%,56%,.48)`, `hsla(${h},95%,87%,.40)`, '.44');
+      document.body.style.setProperty('--glowc', `hsl(${h},90%,79%)`); // legacy old-layout wash
+    } else {
+      const L = LIGHTS[((cust.glow % 6) + 6) % 6];
+      setLg(L[1], L[2], L[3], L[4]);
+      document.body.style.setProperty('--glowc', LIGHT_SW[((cust.glow % 6) + 6) % 6]);
+    }
   }
   // Banff backdrop (v3 §6.5): photo / dark scene / uploaded image (bg3 = -1 → dataURL)
   const tbg = document.getElementById('themebg');
@@ -7244,11 +7351,13 @@ function gearHistHTML(){
     for (const tk of state.tasks) if (tk.goalId === g.id && tk.finishedAt) t = Math.max(t, Date.parse(tk.finishedAt) || 0);
     return t;
   };
-  const MARK = { done: ['ok', '✓'], reverted: ['no', '↩'], skipped: ['ar', '—'] };
+  // History = everything you've sent, newest first (not only settled goals —
+  // that felt empty). Each row gets a status glyph; unknown states fall back.
+  const MARK = { done: ['ok', '✓'], reverted: ['no', '↩'], skipped: ['ar', '—'], failed: ['no', '✕'], interrupted: ['ar', '⏸'], review: ['rv', '●'], running: ['run', '…'], planning: ['run', '…'], stacked: ['ar', '·'], needsInput: ['rv', '?'] };
   const evs = (state.goals || [])
-    .filter((g) => g.projectId === state.active && MARK[g.status])
+    .filter((g) => g.projectId === state.active)
     .map((g) => ({ g, ts: goalTs(g) })).sort((a, b) => b.ts - a.ts);
-  if (!evs.length) return '<div class="mcpnote">No decisions yet — approved, reverted and archived goals will appear here.</div>';
+  if (!evs.length) return '<div class="mcpnote">No history yet — everything you send shows up here.</div>';
   const todayK = new Date().toDateString(), yestK = new Date(Date.now() - 864e5).toDateString();
   const cap = (ts) => { const k = new Date(ts).toDateString();
     return k === todayK ? 'TODAY' : k === yestK ? 'YESTERDAY'
@@ -7257,7 +7366,7 @@ function gearHistHTML(){
   for (const { g, ts } of evs) {
     const c = cap(ts);
     if (c !== last) { out += `<h4>${c}</h4>`; last = c; }
-    const [cls, m] = MARK[g.status];
+    const [cls, m] = MARK[g.status] || ['ar', '·'];
     const hhmm = new Date(ts).toTimeString().slice(0, 5);
     // 1-line ellipsis + a dedicated More/Less button (HANDOFF-v45 §9 — replaces row-tap;
     // the button itself is hidden post-render for rows that don't overflow, see wiring
@@ -7386,7 +7495,8 @@ function buildGearPop(){
     `<button class="sw${cust.bg3 === i ? ' on' : ''}" data-gbg3="${i}" title="${n}" style="background:${i < 2 ? bg3Image(i) + ' center/cover' : bg3Image(i)}"></button>`).join('')
     + `<button class="optchip${cust.bg3 === -1 ? ' on' : ''}" data-gbg3up="1" title="Upload an image">+</button>`;
   // Midnight LIGHT: 6 presets (Moon default) + free HUE slider
-  const lightSw = LIGHTS.map((L, i) => `<button class="sw${cust.hue == null && cust.glow === i ? ' on' : ''}" data-gglow="${i}" title="${L[0]}" style="background:${LIGHT_SW[i]}"></button>`).join('');
+  const offSw = `<button class="sw${cust.hue == null && cust.glow === 6 ? ' on' : ''}" data-gglow="6" title="Off" style="background:#111112"></button>`; // flat-black "Off" — Midnight default, leftmost
+  const lightSw = offSw + LIGHTS.map((L, i) => `<button class="sw${cust.hue == null && cust.glow === i ? ' on' : ''}" data-gglow="${i}" title="${L[0]}" style="background:${LIGHT_SW[i]}"></button>`).join('');
   // Cinema SCENE (reuses the band presets + upload) + TEXT modes
   const sceneNames = ['Lake', 'Peak', 'Blue', 'Violet', 'Dusk', 'Jade', 'Midnight', 'Gold'];
   const sceneSw = FS_BANDS.map((v, i) =>

package/app/theme.css CHANGED Viewed

@@ -71,6 +71,10 @@ body[data-theme="dark"],body[data-theme="midnight"],body[data-theme="cinema"]{
   /* flagship surface tokens — flagship internal T5/T6 (dark) values */
   --hover:rgba(255,255,255,.06); --hover-s:rgba(255,255,255,.05); --surf:rgba(255,255,255,.04);
 }
+/* Midnight · light OFF = pure flat black (LP #111112). data-light="off" (H17 port, flagship f9c75ad 2026-07-14).
+   Black-screen accent = LP green #3DDC97 — unifies PR pill / ✓ / token / LIVE / DOING / progress. Both --green
+   (var(--green) users) and --green-rgb (rgba(var(--green-rgb),.x) / color-mix users) are re-pointed. */
+body[data-theme="midnight"][data-light="off"]{--green:#3DDC97;--green-rgb:61,220,151}
 /* Theme 4 — Glass: ARCHIVED (v3 §6.5 row 4 / §7 decision log 2026-07-07).
    Not selectable from any UI; the token block + WebGL pipeline stay dormant/intact
    so the archive can be revived from the e574 loop without re-porting.

package/bin/manager-for-ai.mjs CHANGED Viewed

@@ -29,6 +29,12 @@ if (claude.error || claude.status !== 0) {
 }
 say(`claude CLI: ${claude.stdout.trim()}`);
+// 1b) codex CLI (optional alternate worker). Informational only — so Codex users
+// see it's detected and supported, not just Claude Code. Galda can run workers on
+// either; you pick per task (Claude Code / Codex) in the board's composer.
+const codex = probe('codex', ['--version']);
+if (!codex.error && codex.status === 0) say(`codex CLI: ${codex.stdout.trim()} (Codex)`);
 // 2) Chrome (for verification proof) — recommended; warn if missing
 const chromeCandidates = [
   process.env.CHROME_PATH,
@@ -57,7 +63,11 @@ process.env.MANAGER_OPEN_BROWSER = process.env.MANAGER_OPEN_BROWSER ?? '1';
 // and `npm start` from the repo stay env-driven and don't hit the live worker.
 // The license public key is already baked in engine/lib.mjs (offline verify).
 // Opt out with an empty value: `MANAGER_BILLING_API_URL= RELAY_URL= npx @galda/cli`.
-process.env.MANAGER_BILLING_API_URL = process.env.MANAGER_BILLING_API_URL ?? 'https://agent-manager-billing-api.a2c-tech.workers.dev';
+// Use the OWNED custom domain (galda.app), never the Cloudflare workers.dev
+// subdomain — that subdomain is named after an unrelated client (a2c-tech) and
+// must never appear in Galda's product. galda.app is bound to the same Worker
+// and serves the whole API (/connect, /checkout, /api/*). See [[no-a2c-tech]].
+process.env.MANAGER_BILLING_API_URL = process.env.MANAGER_BILLING_API_URL ?? 'https://galda.app';
 process.env.RELAY_URL = process.env.RELAY_URL ?? 'wss://app.galda.app/agent';
 await import(pathToFileURL(join(ROOT, 'engine', 'server.mjs')).href);

package/engine/analytics-client.mjs ADDED Viewed

@@ -0,0 +1,38 @@
+// analytics-client.mjs — fire-and-forget client for Phase 1 usage analytics
+// (docs/DATA-RETENTION-PLAN.md). Posts a single Tier-A event to the billing-api
+// /events endpoint.
+//
+// PRIVACY: NEVER pass prompt / task text / file paths. Only an event type, a
+// user identifier (the endpoint hashes it into a pseudonymous id), and
+// allow-listed non-sensitive meta (project_hash / plan / status / model /
+// source — see workers/billing-api/src/analytics.mjs sanitizeMeta). Failures
+// are swallowed so analytics can never break a task run or block the caller.
+//
+// Hook points (wiring lives in engine/relay, kept out of this module):
+//   signup            → engine, once per install when the MCP client (Claude
+//                       Code / Codex) first connects = "setup completed"
+//                       (maybeEmitSetupCompleted in server.mjs)
+//   task_created      → engine, when a task/goal is accepted
+//   task_completed    → engine, task.status = 'done'
+//   task_failed       → engine, task.status = 'failed'
+//   task_interrupted  → engine, task.status = 'interrupted'
+//   review_approved / review_dismissed → on the review action
+const BILLING_API_URL = (process.env.MANAGER_BILLING_API_URL ?? '').replace(/\/$/, '');
+export function analyticsEnabled() {
+  return Boolean(BILLING_API_URL);
+}
+// type: one of the EVENT_TYPES; uid: account email/id (hashed server-side);
+// meta: optional allow-listed non-sensitive fields only.
+export function emitEvent(type, uid, meta) {
+  if (!BILLING_API_URL) return; // analytics off when unconfigured — no-op
+  try {
+    fetch(`${BILLING_API_URL}/events`, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ type, uid, meta }),
+    }).catch(() => {}); // fire-and-forget: never surface network errors
+  } catch { /* never throw into the caller */ }
+}

package/engine/lib.mjs CHANGED Viewed

@@ -2376,3 +2376,13 @@ export async function verifyLicenseToken({ token, publicJwk = LICENSE_PUBLIC_JWK
   }
   return { valid: true, reason: null, payload };
 }
+// Setup-completion analytics: the `signup` event fires exactly ONCE per install,
+// the first time the MCP client (Claude Code / Codex) connects to the Manager.
+// Pure decision so it can be unit-tested without a live server or filesystem —
+// the caller supplies whether the request is from the MCP client, whether this
+// process already saw it this session, and whether the persisted once-ever flag
+// already exists on disk.
+export function shouldEmitSetupCompleted({ isMcpClient, alreadySeen, flagExists }) {
+  return Boolean(isMcpClient) && !alreadySeen && !flagExists;
+}

package/engine/mcp.mjs CHANGED Viewed

@@ -24,7 +24,10 @@ const KEY = process.env.MANAGER_KEY
 async function api(path, opts = {}) {
   const sep = path.includes('?') ? '&' : '?';
-  const r = await fetch(`${BASE}${path}${sep}key=${KEY}`, opts);
+  // Tag every MCP→Manager call so the server can detect "connected to Claude
+  // Code / Codex" (the setup-completed signal) — see maybeEmitSetupCompleted.
+  const headers = { ...(opts.headers || {}), 'x-manager-client': 'mcp' };
+  const r = await fetch(`${BASE}${path}${sep}key=${KEY}`, { ...opts, headers });
   if (!r.ok) throw new Error(`Manager server ${r.status}: ${(await r.text()).slice(0, 200)}`);
   return r.json();
 }

package/engine/relay-client.mjs CHANGED Viewed

@@ -8,7 +8,7 @@
 //
 //   RELAY_URL=wss://relay.example/agent RELAY_AGENT_TOKEN=… node engine/relay-client.mjs
-import { readFileSync, existsSync } from 'node:fs';
+import { readFileSync, existsSync, watch } from 'node:fs';
 import { resolve, dirname, join } from 'node:path';
 import { homedir } from 'node:os';
 import { fileURLToPath } from 'node:url';
@@ -19,19 +19,40 @@ const DATA_DIR = process.env.MANAGER_HOME
 const LOCAL = process.env.MANAGER_LOCAL ?? `http://localhost:${process.env.MANAGER_PORT ?? 4400}`;
 const KEY = existsSync(join(DATA_DIR, 'secret.key')) ? readFileSync(join(DATA_DIR, 'secret.key'), 'utf8').trim() : '';
 const RELAY = process.env.RELAY_URL ?? 'ws://localhost:5500/agent';
+const DEV_EMAIL = process.env.RELAY_DEV_EMAIL ?? '';
+const LICENSE_FILE = join(DATA_DIR, 'license.token');
 // The relay (P3.1) authenticates the agent by its signed LICENSE TOKEN — only
 // the billing Worker can mint one for a verified email, so the relay binds this
 // socket to that email's id (no shared token, unspoofable). Falls back to an
 // explicit RELAY_AGENT_TOKEN, and to a dev email for local testing.
-const LICENSE = existsSync(join(DATA_DIR, 'license.token')) ? readFileSync(join(DATA_DIR, 'license.token'), 'utf8').trim() : '';
-const TOKEN = process.env.RELAY_AGENT_TOKEN ?? LICENSE;
-const DEV_EMAIL = process.env.RELAY_DEV_EMAIL ?? '';
+// Read FRESH each connect (not once at load): on first run the agent starts with
+// no token (bound to nobody); when the user signs in, license.token appears and
+// the watcher below reconnects, so the relay re-binds this socket to the real
+// identity and the user's hosted board comes alive — no CLI restart needed.
+function readToken() {
+  const lic = existsSync(LICENSE_FILE) ? readFileSync(LICENSE_FILE, 'utf8').trim() : '';
+  return process.env.RELAY_AGENT_TOKEN ?? lic;
+}
 const live = new Map(); // reqId -> AbortController
+let currentWs = null;
+let reconnectTimer = null;
+let lastToken = readToken();
+function scheduleReconnect(retryMs) {
+  if (reconnectTimer) return; // exactly one pending reconnect — never stack timers
+  reconnectTimer = setTimeout(() => { reconnectTimer = null; connect(Math.min(retryMs * 2, 15000)); }, retryMs);
+}
 function connect(retryMs = 1000) {
-  const auth = DEV_EMAIL ? `devEmail=${encodeURIComponent(DEV_EMAIL)}` : `token=${encodeURIComponent(TOKEN)}`;
+  // Single-socket invariant: never open a second socket while one is CONNECTING
+  // (0) or OPEN (1). Two live sockets with the same identity make the relay evict
+  // each other (server.mjs "replaced by a newer connection") → an infinite flap.
+  if (currentWs && (currentWs.readyState === 0 || currentWs.readyState === 1)) return;
+  if (reconnectTimer) { clearTimeout(reconnectTimer); reconnectTimer = null; }
+  const auth = DEV_EMAIL ? `devEmail=${encodeURIComponent(DEV_EMAIL)}` : `token=${encodeURIComponent(readToken())}`;
   const ws = new WebSocket(`${RELAY}?${auth}`);
+  currentWs = ws;
   ws.onopen = () => { retryMs = 1000; console.log(`[agent] connected to relay ${RELAY}`); };
   ws.onmessage = async (ev) => {
     let m; try { m = JSON.parse(ev.data); } catch { return; }
@@ -73,10 +94,35 @@ function connect(retryMs = 1000) {
     }
   };
   ws.onclose = () => {
+    if (ws !== currentWs) return; // a superseded socket (we already moved on) — don't reconnect
     console.log(`[agent] relay connection lost — retrying in ${retryMs}ms`);
-    setTimeout(() => connect(Math.min(retryMs * 2, 15000)), retryMs);
+    scheduleReconnect(retryMs);
   };
   ws.onerror = () => { /* onclose follows */ };
 }
 connect();
+// Sign-in reconnect: when license.token appears/changes (the user just linked
+// this device), drop the current socket so connect() re-dials with the new
+// identity. Without this the first-run socket stays bound to nobody and the
+// hosted board never comes alive until the CLI is restarted. Watch the DIR (the
+// file may not exist yet on first run); best-effort (fs.watch unsupported → the
+// onclose retry loop still re-reads the token on the next natural reconnect).
+try {
+  watch(DATA_DIR, (_ev, f) => {
+    if (f && f !== 'license.token') return;
+    const t = readToken();
+    if (t && t !== lastToken) {
+      lastToken = t;
+      console.log('[agent] signed in — reconnecting to relay with your identity');
+      // Detach the old socket FIRST so its onclose is ignored (ws !== currentWs),
+      // then reconnect once, immediately, with a fresh backoff — no racing chains.
+      const old = currentWs;
+      currentWs = null;
+      if (reconnectTimer) { clearTimeout(reconnectTimer); reconnectTimer = null; }
+      try { old?.close(); } catch { /* already gone */ }
+      connect(1000);
+    }
+  });
+} catch { /* fs.watch unavailable on this platform */ }

package/engine/server.mjs CHANGED Viewed

@@ -14,12 +14,13 @@
 import { createServer } from 'node:http';
 import { spawn, execFile, spawnSync } from 'node:child_process';
 import { readFileSync, writeFileSync, appendFileSync, existsSync, mkdirSync, statSync } from 'node:fs';
-import { randomBytes } from 'node:crypto';
+import { emitEvent } from './analytics-client.mjs';
+import { randomBytes, createHash } from 'node:crypto';
 import { resolve, dirname, join, basename } from 'node:path';
 import { homedir } from 'node:os';
 import { fileURLToPath } from 'node:url';
 import { pathToFileURL } from 'node:url';
-import { parseStreamEvents, parsePlan, refinePlanTasks, findOverlappingGoal, canEditGoal, canDeleteGoal, shouldAskClarification, workerExitReason, isForcedStop, workerResultText, taskCountsAsComplete, resolveWantsPR, resolveGoalSource, buildGoalSummary, buildGoalProofMd, buildReviewRuleSection, nextGoalStatus, isPrMerged, isPrApproved, reviewToDoneStatus, advanceReviewGoal, revertReviewGoal, approveGoal, dismissGoal, permissionModeFor, isPlanReview, nextAfterPlanApprove, GOAL_MODES, parseSkillFrontmatter, collectSkills, retestGoal, cancelRetestGoal, computeRetestOutcome, revertGoal, planRevertActions, archiveGoal, unarchiveGoal, undismissGoal, parseNumstat, truncateDiffText, sumUsage, resolveEntryUrl, parseGitLog, diffNewCommits, replayQueueLog, reconcileOrphanGoals, reorderQueue, sortQueueByPriority, TASK_PRIORITIES, validateWorkflowColumns, DEFAULT_WORKFLOW_COLUMNS, validateReviewDefinition, DEFAULT_REVIEW_DEFINITION, buildEphemeralSeedLog, buildEphemeralSeedProjects, trimTaskActivityForState, buildAskContext, WORKER_TOOLS, verifyCfAccessJwt, resolveIdentity, goalVisibleTo, clampParallelLimit, canStartMore, nextRunnableTasks, goalsConflict, detectConflicts, isUiChange, shouldCaptureProof, shouldCaptureBaseline, hasTestRelevantChanges, buildExecutionPlan, buildContextHandoffSummary, buildFailurePostmortem, appendFailureMemory, latestFailurePolicy, classifyChangeRisk, checkRunBudget, usageBudgetTokens, isRateLimited, nextResumeDelay, checkFreeTierLimit, resolveEntitlement, resolveCachedEntitlement, FREE_TIER_LIMITS, verifyLicenseToken } from './lib.mjs';
+import { parseStreamEvents, parsePlan, refinePlanTasks, findOverlappingGoal, canEditGoal, canDeleteGoal, shouldAskClarification, workerExitReason, isForcedStop, workerResultText, taskCountsAsComplete, resolveWantsPR, resolveGoalSource, buildGoalSummary, buildGoalProofMd, buildReviewRuleSection, nextGoalStatus, isPrMerged, isPrApproved, reviewToDoneStatus, advanceReviewGoal, revertReviewGoal, approveGoal, dismissGoal, permissionModeFor, isPlanReview, nextAfterPlanApprove, GOAL_MODES, parseSkillFrontmatter, collectSkills, retestGoal, cancelRetestGoal, computeRetestOutcome, revertGoal, planRevertActions, archiveGoal, unarchiveGoal, undismissGoal, parseNumstat, truncateDiffText, sumUsage, resolveEntryUrl, parseGitLog, diffNewCommits, replayQueueLog, reconcileOrphanGoals, reorderQueue, sortQueueByPriority, TASK_PRIORITIES, validateWorkflowColumns, DEFAULT_WORKFLOW_COLUMNS, validateReviewDefinition, DEFAULT_REVIEW_DEFINITION, buildEphemeralSeedLog, buildEphemeralSeedProjects, trimTaskActivityForState, buildAskContext, WORKER_TOOLS, verifyCfAccessJwt, resolveIdentity, goalVisibleTo, clampParallelLimit, canStartMore, nextRunnableTasks, goalsConflict, detectConflicts, isUiChange, shouldCaptureProof, shouldCaptureBaseline, hasTestRelevantChanges, buildExecutionPlan, buildContextHandoffSummary, buildFailurePostmortem, appendFailureMemory, latestFailurePolicy, classifyChangeRisk, checkRunBudget, usageBudgetTokens, isRateLimited, nextResumeDelay, checkFreeTierLimit, resolveEntitlement, resolveCachedEntitlement, FREE_TIER_LIMITS, verifyLicenseToken, shouldEmitSetupCompleted } from './lib.mjs';
 import { openPR } from './pr.mjs';
 import { runVerification, exerciseUi } from './verify.mjs';
@@ -36,6 +37,24 @@ const PORT = Number(process.env.MANAGER_PORT ?? 4400);
 const keyFile = join(DATA_DIR, 'secret.key');
 if (!existsSync(keyFile)) writeFileSync(keyFile, randomBytes(18).toString('base64url'));
 const ACCESS_KEY = readFileSync(keyFile, 'utf8').trim();
+// A stable, anonymous per-install id for usage analytics — a one-way hash of the
+// access key so the raw credential NEVER leaves the machine (the billing Worker
+// hashes this again into its pseudonymous id). Not the access key itself.
+const ANALYTICS_UID = createHash('sha256').update('galda-analytics:' + ACCESS_KEY).digest('hex').slice(0, 24);
+// "Setup completed" = npx-installed AND connected to Claude Code / Codex. That
+// connection is the MCP client (engine/mcp.mjs) first reaching this server, so
+// we fire the `signup` event once, the first time an MCP-tagged request arrives,
+// and persist a flag so it counts once per install ever (not once per restart).
+const SETUP_FLAG = join(DATA_DIR, 'setup-completed.flag');
+let _setupClientSeen = false;
+function maybeEmitSetupCompleted(req) {
+  if (_setupClientSeen) return; // already decided this session — no repeat disk hit
+  if ((req.headers['x-manager-client'] || '') !== 'mcp') return;
+  _setupClientSeen = true;
+  if (!shouldEmitSetupCompleted({ isMcpClient: true, alreadySeen: false, flagExists: existsSync(SETUP_FLAG) })) return;
+  try { writeFileSync(SETUP_FLAG, String(Date.now())); } catch { /* best effort — still emit */ }
+  emitEvent('signup', ANALYTICS_UID, { source: 'mcp-connect' });
+}
 // Per-worker run cap. Env-configurable so it can be tuned operationally and the
 // timeout→'interrupted' path is testable (a test sets a short value + a slow
 // fake worker instead of waiting 10 real minutes).
@@ -541,6 +560,56 @@ function saveTask(t) {
   appendFileSync(logFile, JSON.stringify({ ...persist, kind: 'task' }) + '\n');
   const goal = goals.find((g) => g.id === t.goalId);
   if (goal) sendGoalEvent({ ev: 'task', task: persist }, goal); else send({ ev: 'task', task: persist });
+  emitTaskAnalytics(t);
+}
+// Phase 1 usage analytics (docs/DATA-RETENTION-PLAN.md). Fire-and-forget, no
+// content: a task's creation and its terminal outcome are counted once each,
+// keyed by ANALYTICS_UID (the hashed, non-credential install id). saveTask runs
+// on every status change, so a per-(id,event) Set dedups repeat saves.
+const _analyticsEmitted = new Set();
+const _TERMINAL_EVENT = { done: 'task_completed', failed: 'task_failed', interrupted: 'task_interrupted' };
+function emitTaskAnalytics(t) {
+  if (!t || t.id == null) return;
+  if (!_analyticsEmitted.has(`created:${t.id}`)) {
+    _analyticsEmitted.add(`created:${t.id}`);
+    emitEvent('task_created', ANALYTICS_UID, { source: 'engine' });
+  }
+  const ev = _TERMINAL_EVENT[t.status];
+  if (ev && !_analyticsEmitted.has(`${t.status}:${t.id}`)) {
+    _analyticsEmitted.add(`${t.status}:${t.id}`);
+    emitEvent(ev, ANALYTICS_UID, { status: t.status, source: 'engine' });
+    postHistory(t);
+  }
+}
+// Phase 2 cloud history (paid). On a finished task, post an encrypted history
+// record (the Worker gates on the license token and encrypts the content, so
+// free / no-token installs store nothing — their work stays fully local).
+// Fire-and-forget: never blocks or breaks a run.
+function readLicenseToken() {
+  try { return existsSync(licenseFile) ? readFileSync(licenseFile, 'utf8').trim() : null; } catch { return null; }
+}
+function postHistory(t) {
+  if (!BILLING_API_URL) return;
+  const token = readLicenseToken();
+  if (!token) return; // no license → nothing stored server-side (stays local)
+  const goal = goals.find((g) => g.id === t.goalId);
+  const project = projects.find((p) => p.id === t.projectId);
+  try {
+    fetch(`${BILLING_API_URL}/history`, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json', authorization: `Bearer ${token}` },
+      body: JSON.stringify({
+        id: `t${t.id}`,
+        project: project?.name ?? null,
+        content: goal?.text ?? null,      // the user's request — encrypted server-side
+        summary: t.result ?? null,        // the task's result — encrypted server-side
+        status: t.status,
+        createdAt: t.startedAt ? Date.parse(t.startedAt) : Date.now(),
+      }),
+    }).catch(() => {});
+  } catch { /* never throw into the caller */ }
 }
 const ACTIVITY_LIMIT = 1000;
 function activityLine(line) {
@@ -2302,6 +2371,8 @@ const server = createServer(async (req, res) => {
       res.setHeader('set-cookie', `mkey=${ACCESS_KEY}; HttpOnly; SameSite=Lax; Path=/; Max-Age=31536000`);
     }
   }
+  // Once past auth, the first MCP-client request marks setup as completed.
+  maybeEmitSetupCompleted(req);
   if (url.pathname === '/' || url.pathname === '/index.html') {
     // no-cache: browsers were keeping a STALE index.html (no cache header before),
@@ -3265,10 +3336,34 @@ const server6 = createServer(server.listeners('request')[0]);
 server6.on('error', (e) => console.log(`[manager] ::1 listen skipped: ${e.code}`));
 try { server6.listen(PORT, '::1'); } catch { /* IPv6 loopback unavailable */ }
+// Guard the primary IPv4 listen the same way the ::1 twin is guarded: without
+// this, a busy port emits an unhandled 'error' and Node prints a raw stack
+// trace + crashes. The common cause is a second manager (or `npx @galda/cli`)
+// started while one is already running on this port — so say that, and how to
+// pick another port, instead of dumping a stack trace.
+server.on('error', (e) => {
+  if (e.code === 'EADDRINUSE') {
+    console.error(`[manager] port ${PORT} is already in use — another manager is likely running on it.`);
+    console.error(`[manager] Use a different port:  MANAGER_PORT=${PORT + 10} npx @galda/cli`);
+    process.exit(1);
+  }
+  throw e;
+});
 server.listen(PORT, '127.0.0.1', () => {
   console.log(`[manager] Manager for AI → http://localhost:${PORT}/?key=${ACCESS_KEY}`);
   if (process.env.MANAGER_OPEN_BROWSER === '1' && process.platform === 'darwin') {
-    spawn('open', ['-g', `http://localhost:${PORT}/?key=${ACCESS_KEY}`], { stdio: 'ignore' }).unref();
+    // First run in the hosted flow (no license yet, billing worker configured):
+    // open the one-click Google device-link straight away instead of the local
+    // ?key board, so a non-engineer never sees a localhost URL or an access key —
+    // they sign in once and their hosted board comes alive (relay-client rebinds
+    // via its license.token watcher). Otherwise open the local board as before.
+    let openUrl = `http://localhost:${PORT}/?key=${ACCESS_KEY}`;
+    if (BILLING_API_URL && !existsSync(licenseFile)) {
+      openUrl = `${BILLING_API_URL}/connect?port=${PORT}&state=${encodeURIComponent(newSigninNonce())}`;
+      console.log('[manager] first run: opening one-click sign-in (no local key needed) → ' + openUrl);
+    }
+    spawn('open', ['-g', openUrl], { stdio: 'ignore' }).unref();
   }
   console.log(`[manager] projects: ${projects.map((p) => `${p.id}=${p.dir}`).join('  ')}`);
   syncAllExternal().catch(() => {});

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@galda/cli",
-  "version": "0.10.1",
+  "version": "0.10.5",
   "type": "module",
   "description": "Galda - hand off work to your Claude Code, get proof back. Runs on your existing subscription, no extra API cost.",
   "scripts": {