@kitkat-vn/kitcode 0.2.0-staging.3 → 0.2.0-staging.5

package/README.md

@@ -1,6 +1,6 @@
 # @kitkat-vn/kitcode
 
-Local break companion for coding campaigns. This package is the **source of truth** for tracking, reward eligibility, redeem state, hooks, and the local Mini companion.
+Local break companion for coding campaigns. This package is the **source of truth** for tracking, the milestones reached, hooks, and the local Mini companion.
 
 Published package: `@kitkat-vn/kitcode`
 
@@ -189,26 +189,21 @@ The time target is fixed at `3600` active seconds: no flag or variable changes i
 Each milestone needs both enough active time and enough counted `=`:
 
 - time target for a percent = `ceil(3600 * percent / 100)` seconds: 360 for 10%, 720 for 20%, 1080 for 30%, 1800 for 50%, and 3600 for 100%
-- equals target comes from the tier table below
+- equals target comes from the table below
 
-### Local reward tiers
+### Milestones
 
-Their break codes are shown in the dashboard, which records a code as shown through `POST /api/reward/redeem`, on this machine only.
+| Milestone | Required counted `=` |
+| ---: | ---: |
+| `10%` | 3 |
+| `20%` | 6 |
+| `30%` | 9 |
+| `50%` | 12 |
+| `100%` | 15 |
 
-| Tier | Code | Required counted `=` |
-| ---: | --- | ---: |
-| `10%` | `if(tired){return 10;}` | 3 |
-| `20%` | `takeBreak(20);` | 6 |
-| `30%` | `while(working)break(30);` | 9 |
+Once a milestone is reached, the dashboard shows its message: the campaign's own words, which the campaign's server gives each milestone. The prompt hook and the desktop notification say only that a milestone was reached. `summary` and `awards` show which are ready.
 
-### Display milestones
-
-Shown in summary/awards/dashboard, but not redeemable unless backed by campaign flow.
-
-| Milestone | Code | Required counted `=` |
-| ---: | --- | ---: |
-| `50%` | `mediumStake.unlock(50);` | 12 |
-| `100%` | `finalBreak.claim(100);` | 15 |
+Until 2026-10-01 each milestone had a break code, a line of code shown in the dashboard, which recorded it as shown on this machine. The codes are gone, and nothing records one as shown; a code an earlier version recorded as shown stays in `~/.kitcode/state.json`, and its milestone reads as ready.
 
 ## Codex and Claude integrations
 
@@ -267,18 +262,16 @@ GET  /api/projects
 GET  /api/events
 GET  /api/claim/bundle
 GET  /companion
-POST /api/reward/redeem
 ```
 
-The API answers only requests addressed to `127.0.0.1` or `localhost` on its port, and web pages only from an allowed origin (below) or its own. `GET /api/claim/bundle` and `POST /api/reward/redeem` need an allowed origin, and the POST a JSON body.
+The API answers only requests addressed to `127.0.0.1` or `localhost` on its port, and web pages only from an allowed origin (below) or its own. `GET /api/claim/bundle` needs an allowed origin; every `POST` needs an allowed origin and a JSON body, and none is left that changes anything.
 
 `/api/events` is SSE and emits `summary` every second.
 
-`POST /api/reward/redeem` accepts optional `{ "tier": 10 }`. If `tier` is omitted, all ready local tiers are redeemed.
-
 Legacy endpoints return `410 Gone`:
 
 ```txt
+POST /api/reward/redeem
 GET  /api/projects/:id/commits
 POST /api/projects/:id/start
 POST /api/projects/:id/stop

package/bin/kitcode.mjs

@@ -10,6 +10,19 @@ import process from 'node:process';
 import {fileURLToPath} from 'node:url';
 import {createServer} from '../src/api.mjs';
 import {isLoopbackAddress} from '../src/api-access.mjs';
+import {
+  configProblemCode,
+  describeOutcome,
+  diagnosticsEnabled,
+  diagnosticsStatus,
+  errorCodeOf,
+  errorNameOf,
+  projectRef,
+  recordEvent,
+  sendQueued,
+  startDiagnosticsLoop,
+  sweepHookMarkers,
+} from '../src/diagnostics.mjs';
 import {manualHookSnippet} from '../src/hook-installers.mjs';
 import {runPromptHook} from '../src/hook-prompt.mjs';
 import {installIntegration, integrationStatus, uninstallIntegration} from '../src/integration-installers.mjs';
@@ -236,6 +249,8 @@ Commands:
                         Internal prompt hook used by Codex and Claude
   codex on|off|status   Install, remove, or inspect the Codex hook and skill
   claude on|off|status  Install, remove, or inspect the Claude hook and skill
+  diagnostics status|send
+                        A tester build's diagnostics: what waits, and send it now
 
 Options:
   --host <host>         Host to bind, default ${DEFAULT_HOST}
@@ -267,7 +282,8 @@ function formatDuration(seconds) {
 }
 
 // The numbers come from the summary: the same ones the Mini and the dashboard show
-// (docs/reward-rules.md §10).
+// (docs/reward-rules.md §10). The next milestone follows the ready ones: until 2026-10-01 a ready milestone hid it, and
+// showing a 10–30 % code was what cleared one; with the codes gone nothing does (docs/reward-rules.md §7).
 function printRewardSummary() {
   const reward = getDiskRewardSummary();
   const next = reward.nextBreak;
@@ -280,7 +296,6 @@ function printRewardSummary() {
 
   if (ready.length > 0) {
     console.log(`  ready: ${ready.map((milestone) => `${milestone.percent}%`).join(', ')}`);
-    return;
   }
 
   if (next) {
@@ -289,16 +304,16 @@ function printRewardSummary() {
   }
 }
 
-// A redeemed tier's code was shown, on this machine only: nothing is claimed with the campaign
-// (operator decision, 2026-09-24). The API keeps its `redeemed` status, which the deployed dashboard reads.
+// Each milestone, locked or ready. Since 2026-10-01 none has a code (the operator's decision 6): a tier whose code an
+// earlier version recorded as shown keeps its `redeemed` status in the API, and reads as ready here, a milestone reached;
+// until then it read "code shown", and the 10–30 % tiers "reward".
 function printAwards() {
   const reward = getDiskRewardSummary();
 
   console.log('KitCode awards');
   for (const milestone of reward.milestones) {
-    const label = milestone.rewardBacked ? 'reward' : 'milestone';
-    const status = milestone.status === 'redeemed' ? 'code shown' : milestone.status;
-    console.log(`  ${milestone.percent}% ${label}: ${status} (${milestoneProgressPercent(reward, milestone)}%)`);
+    const status = milestone.status === 'redeemed' ? 'ready' : milestone.status;
+    console.log(`  ${milestone.percent}% milestone: ${status} (${milestoneProgressPercent(reward, milestone)}%)`);
   }
 }
 
@@ -443,7 +458,7 @@ function openElectronEntry(entryName, environment = {}) {
 
 function printElectronSetupHelp() {
   console.error('KitCode setup needs Electron for the desktop folder picker.');
-  console.error("Reinstall the tester build: download kitcode-0.2.0-staging.3.tgz again from the staging site, https://staging.kitcode.vn/, then run npm install -g ./kitcode-0.2.0-staging.3.tgz in the folder you saved it to.");
+  console.error("Reinstall the tester build with: npm install -g @kitkat-vn/kitcode@staging");
   console.error('If install succeeded but Electron is still missing, fix npm cache permissions and reinstall.');
 }
 
@@ -458,7 +473,7 @@ function printElectronLaunchFailure(result, label) {
 
   if (result?.reason === 'electron-binary-missing') {
     console.error(`Electron's binary is missing: Electron points to ${result.detail}, and nothing is there.`);
-    console.error("Reinstall the tester build: download kitcode-0.2.0-staging.3.tgz again from the staging site, https://staging.kitcode.vn/, then run npm install -g ./kitcode-0.2.0-staging.3.tgz in the folder you saved it to.");
+    console.error("Reinstall the tester build with: npm install -g @kitkat-vn/kitcode@staging");
     return;
   }
 
@@ -480,6 +495,8 @@ async function openOnboardingWindow(options = {}) {
     const platform = normalizeSetupPlatform(options.setupPlatform);
     if (!platform) {
       console.error('Invalid --platform. Use macos, windows, or linux (aliases: darwin, win32).');
+      recordWelcomeFailed(options.welcomeCommand ?? 'setup', {reason: 'invalid-platform'});
+      await sendOnce();
       return false;
     }
     environment.KITCODE_SETUP_PLATFORM = platform;
@@ -491,6 +508,8 @@ async function openOnboardingWindow(options = {}) {
   }
 
   printElectronLaunchFailure(result, 'KitCode Welcome');
+  recordWelcomeFailed(options.welcomeCommand ?? 'setup', result);
+  await sendOnce();
   return false;
 }
 
@@ -650,29 +669,44 @@ async function handleUninstall(options) {
   printUninstallReport(report);
 }
 
+// What became of the hook in the agent's settings, for a tester build's diagnostics: by outcome, and a refusal by a fixed code,
+// never the file's path or its words.
+function recordAgentHook(source, action, hook) {
+  recordEvent('agent-hook', {agent: source, action, outcome: hook.action, problem: hook.action === 'refused' ? configProblemCode(hook.error) : 'none'}, {source: 'command'});
+}
+
 async function handleHookInstaller(source, action) {
   if (action === 'on') {
     const status = installIntegration(source);
     printIntegrationStatus(source, status);
+    recordAgentHook(source, 'on', status.hook);
+    let failed = false;
     if (status.hook.action === 'refused') {
       printRefusedHook(source, status.hook);
       process.exitCode = 1;
+      failed = true;
     }
     if (!onboardingPreferences().completed) {
-      if (!(await openOnboardingWindow({host: DEFAULT_HOST, port: DEFAULT_PORT, initialProject: process.cwd()}))) {
+      if (!(await openOnboardingWindow({host: DEFAULT_HOST, port: DEFAULT_PORT, initialProject: process.cwd(), welcomeCommand: `${source}-on`}))) {
         console.error('KitCode Welcome could not open. Fix Electron install, then re-run `kitcode setup`.');
         process.exitCode = 1;
+        failed = true;
       }
     }
+    if (failed) {
+      await sendOnce();
+    }
     return;
   }
 
   if (action === 'off') {
     const status = uninstallIntegration(source);
     printIntegrationStatus(source, status);
+    recordAgentHook(source, 'off', status.hook);
     if (status.hook.action === 'refused') {
       printRefusedHook(source, status.hook);
       process.exitCode = 1;
+      await sendOnce();
     }
     return;
   }
@@ -690,6 +724,54 @@ async function isServerRunning(options) {
   return Boolean(await trackerHealth(options));
 }
 
+// `kitcode diagnostics status` and `kitcode diagnostics send` (docs/way-of-working.md, "A full staging round"): what a tester
+// build's diagnostics hold, and Send logs now from the terminal, for when the dashboard cannot reach the tracker. Any other
+// build says it sends nothing, and sends nothing.
+async function handleDiagnostics(action) {
+  if (action === 'status' || action === undefined) {
+    const status = diagnosticsStatus();
+
+    if (!status.enabled) {
+      console.log(describeOutcome({outcome: 'disabled'}));
+      return;
+    }
+
+    sweepHookMarkers({source: 'command'});
+    console.log('KitCode diagnostics: this tester build sends KitCode\'s own events and errors to its staging server, never your code, files, prompts or project names.');
+    console.log(`  staging server: ${status.destination}`);
+    console.log(`  install id: ${status.installId ?? 'none yet'}`);
+    console.log(`  invited email: ${status.invitedEmail ?? 'none given'}`);
+    console.log(`  waiting to be sent: ${status.queued} event${status.queued === 1 ? '' : 's'}`);
+
+    if (status.closedUntil) {
+      console.log(`  paused: the staging server is not taking diagnostics; KitCode tries again after ${status.closedUntil}`);
+    }
+
+    console.log(`  last send: ${status.lastSend ? `${status.lastSend.at}, ${describeOutcome(status.lastSend)}` : 'none yet'}`);
+    return;
+  }
+
+  if (action === 'send') {
+    if (!diagnosticsEnabled()) {
+      console.log(describeOutcome({outcome: 'disabled'}));
+      return;
+    }
+
+    sweepHookMarkers({source: 'command'});
+    const result = await sendQueued({timeoutMs: 10_000, maxBatches: 5, manual: true, source: 'command'});
+    console.log(describeOutcome(result));
+
+    if (result.outcome !== 'stored' && result.outcome !== 'nothing') {
+      process.exitCode = 1;
+    }
+
+    return;
+  }
+
+  printHelp();
+  process.exit(1);
+}
+
 // The local API has no login. Bound to anything but loopback, it is on every network that can reach
 // that address, so that takes --allow-non-loopback, and a warning.
 function bindRefusal(options) {
@@ -701,7 +783,7 @@ function bindRefusal(options) {
 }
 
 function nonLoopbackWarning(options) {
-  return `Warning: KitCode's local API will listen on ${options.host}:${options.port}, where other machines may reach it. It has no authentication. It answers only requests addressed to 127.0.0.1 or localhost: that stops web pages, not other programs, and any program that can connect to it can read your progress and mark your break codes as shown.`;
+  return `Warning: KitCode's local API will listen on ${options.host}:${options.port}, where other machines may reach it. It has no authentication. It answers only requests addressed to 127.0.0.1 or localhost: that stops web pages, not other programs, and any program that can connect to it can read your progress.`;
 }
 
 function sleep(ms) {
@@ -712,6 +794,49 @@ function printTrackerNotRunning() {
   console.error('KitCode tracker is not running. Run `kitcode track` first.');
 }
 
+// A tester build's diagnostics (src/diagnostics.mjs): a command that saw something fail records it and sends what waits,
+// once, with a short timeout, and quietly, since no tracker may be running to send it later. In any other build each
+// returns at once, and nothing is written or sent.
+const COMMAND_NAMES = new Set(['add', 'remove', 'track', 'untrack', 'list', 'status', 'summary', 'awards', 'dashboard', 'setup', 'uninstall', 'claude', 'codex', 'diagnostics']);
+
+function commandName(command) {
+  const name = command === 'award' || command === 'rewards' ? 'awards' : command;
+  return COMMAND_NAMES.has(name) ? name : 'other';
+}
+
+// Once a process: the first failure sends what waits, then, and what a command records after it waits for the next send.
+let sentOnce = false;
+
+async function sendOnce() {
+  if (!diagnosticsEnabled() || sentOnce) {
+    return;
+  }
+
+  sentOnce = true;
+
+  try {
+    sweepHookMarkers({source: 'command'});
+    await sendQueued({timeoutMs: 3000, maxBatches: 1, source: 'command'});
+  } catch {
+    // Quietly: whatever sends next sends it.
+  }
+}
+
+function recordCommandFailed(command, error) {
+  recordEvent('command-failed', {command: commandName(command), errorCode: errorCodeOf(error), errorName: errorNameOf(error)}, {source: 'command'});
+}
+
+function recordTrackerNotStarted(source, reason, error = null) {
+  recordEvent('tracker-not-started', {reason, errorCode: errorCodeOf(error), errorName: errorNameOf(error)}, {source});
+}
+
+const WELCOME_REASONS = new Set(['missing-electron', 'electron-download-failed', 'electron-binary-missing', 'missing-entry', 'spawn-error', 'exited', 'invalid-platform']);
+
+function recordWelcomeFailed(command, result) {
+  const exitCode = Number.isInteger(result?.code) ? result.code : null;
+  recordEvent('welcome-failed', {command, reason: WELCOME_REASONS.has(result?.reason) ? result.reason : 'other', exitCode}, {source: 'command'});
+}
+
 async function runDaemon(options, status = createStatusReporter()) {
   status.set('Starting KitCode tracker...');
   const log = createLog(TRACKER_LOG_PATH);
@@ -729,6 +854,7 @@ async function runDaemon(options, status = createStatusReporter()) {
   // keeps the last periodic save.
   const fatal = (kind) => (error) => {
     log.error(`${kind}: ${error?.stack ?? error}`);
+    recordEvent('tracker-crashed', {kind: kind === 'uncaughtException' ? 'uncaught-exception' : 'unhandled-rejection', errorCode: errorCodeOf(error), errorName: errorNameOf(error)}, {source: 'tracker'});
     releaseTracker(process.pid);
     process.exit(1);
   };
@@ -741,6 +867,7 @@ async function runDaemon(options, status = createStatusReporter()) {
   if (refusal) {
     status.stop();
     report('error', refusal);
+    recordTrackerNotStarted('tracker', 'bind-refused');
     process.exit(1);
   }
 
@@ -758,12 +885,14 @@ async function runDaemon(options, status = createStatusReporter()) {
   if (existing && existing.state !== 'unresponsive') {
     status.stop();
     report('warn', `Not started: another KitCode tracker (process ${existing.record.pid}) is ${existing.state} at http://${existing.record.host}:${existing.record.port}.`);
+    recordTrackerNotStarted('tracker', 'already-running');
     process.exit(1);
   }
 
   if (!claimTracker(record, existing?.record ?? null).claimed) {
     status.stop();
     report('warn', 'Not started: another KitCode tracker started at the same moment.');
+    recordTrackerNotStarted('tracker', 'claimed-elsewhere');
     process.exit(1);
   }
 
@@ -774,6 +903,7 @@ async function runDaemon(options, status = createStatusReporter()) {
   } catch (error) {
     releaseTracker(process.pid);
     report('error', `Not started: ${error.message}`);
+    recordTrackerNotStarted('tracker', error instanceof StateFileError || error instanceof StateLockError ? 'state-unreadable' : 'start-failed', error);
     throw error;
   }
 
@@ -786,7 +916,17 @@ async function runDaemon(options, status = createStatusReporter()) {
     report('warn', `KitCode could not make its install id (${error.message}); the claim bundle is not given out until it can.`);
   }
 
-  const app = createServer(runtime, VERSION);
+  // A tester build's diagnostics while the tracker runs (src/diagnostics.mjs): its events sent every minute, a heartbeat every
+  // hour, and Send logs now through the local API. In any other build it does nothing.
+  const startedMs = Date.now();
+  const uptimeSeconds = () => Math.max(0, Math.floor((Date.now() - startedMs) / 1000));
+  const diagnostics = startDiagnosticsLoop({
+    snapshot: () => {
+      const current = runtime.status?.() ?? {tracking: 'ok', problems: []};
+      return {projects: Object.values(runtime.state.projects).filter((project) => project.active).length, tracking: current.tracking, problems: current.problems.map((problem) => problem.code)};
+    },
+  });
+  const app = createServer(runtime, VERSION, {diagnostics});
   let cleanup = async () => {};
   let server = null;
 
@@ -802,6 +942,8 @@ async function runDaemon(options, status = createStatusReporter()) {
     server.close(() => process.exit(code));
   };
 
+  const PROBLEMS = new Set(['watch-failed', 'project-missing', 'scan-failed', 'git-locked', 'git-unfinished']);
+
   cleanup = startWatchers(runtime, {
     log,
     onProgress(message) {
@@ -811,12 +953,19 @@ async function runDaemon(options, status = createStatusReporter()) {
     onStatus(current) {
       updateTrackerRecord(process.pid, {...current, heartbeatAt: new Date().toISOString()});
     },
+    // Each project's problem, raised or cleared, by its fixed code and an opaque reference to the project.
+    onProblem({code, projectId, state, error}) {
+      if (PROBLEMS.has(code)) {
+        recordEvent('tracker-problem', {problem: code, state, project: projectRef(projectId), errorCode: errorCodeOf(error)}, {source: 'tracker'});
+      }
+    },
     // state.json can no longer be read. Stop without writing it: it holds the user's progress.
     onStateError(error) {
       status.stop();
       report('error', `Stopped: ${error.message}`);
       cleanup({persist: false});
-      exit(1);
+      recordEvent('tracker-stopped', {reason: 'state-unreadable', uptimeSeconds: uptimeSeconds()}, {source: 'tracker'});
+      diagnostics.stop().finally(() => exit(1));
     },
   });
 
@@ -832,18 +981,23 @@ async function runDaemon(options, status = createStatusReporter()) {
     }
 
     log.info(`stopped (${signal})`);
+    recordEvent('tracker-stopped', {reason: signal === 'stop request' ? 'stop-request' : 'signal', uptimeSeconds: uptimeSeconds()}, {source: 'tracker'});
+    await diagnostics.stop();
     exit(0);
   };
 
   server = app.listen(options.port, options.host, () => {
     status.stop();
     log.info(`started: KitCode ${VERSION}, process ${process.pid}, http://${options.host}:${options.port}, node ${process.version}`);
+    recordEvent('tracker-started', {projects: Object.values(runtime.state.projects).filter((project) => project.active).length, port: options.port}, {source: 'tracker'});
   });
 
   server.on('error', async (error) => {
     status.stop();
     await cleanup().catch(() => {});
     releaseTracker(process.pid);
+    recordTrackerNotStarted('tracker', error.code === 'EADDRINUSE' ? 'port-in-use' : 'start-failed', error);
+    await diagnostics.stop({finalSend: false});
 
     if (error.code === 'EADDRINUSE') {
       report('error', `Not started: port ${options.port} is already in use. Stop the other server or pass --port <port>.`);
@@ -874,6 +1028,8 @@ async function startTracker(options) {
 
   if (refusal) {
     console.error(refusal);
+    recordTrackerNotStarted('command', 'bind-refused');
+    await sendOnce();
     process.exit(1);
   }
 
@@ -952,6 +1108,8 @@ async function startTracker(options) {
   }
 
   console.error('KitCode tracker did not start. Try running `kitcode track` again.');
+  recordTrackerNotStarted('command', 'did-not-answer');
+  await sendOnce();
   process.exit(1);
 }
 
@@ -1031,6 +1189,8 @@ try {
 
       // The folder could not be listed: it is gone, not a folder, or git could not list it.
       console.error(`KitCode could not add ${path.resolve(targetPath)}: ${error.message}`);
+      recordCommandFailed('add', error);
+      await sendOnce();
       process.exit(1);
     }
 
@@ -1080,6 +1240,8 @@ try {
     await handleHookInstaller('codex', options.subcommand);
   } else if (options.command === 'claude') {
     await handleHookInstaller('claude', options.subcommand);
+  } else if (options.command === 'diagnostics') {
+    await handleDiagnostics(options.subcommand);
   } else if (options.command === 'version') {
     console.log(VERSION);
   } else {
@@ -1087,6 +1249,13 @@ try {
     process.exit(options.command === 'help' || !options.command ? 0 : 1);
   }
 } catch (error) {
+  // A tester build records the failure, and sends it, once: but never from the prompt hook, which touches no network, nor
+  // from the tracker, which recorded its own.
+  if (options.command !== 'hook' && !(options.command === 'track' && process.env.KITCODE_DAEMON === '1')) {
+    recordCommandFailed(options.command, error);
+    await sendOnce();
+  }
+
   // A state file KitCode cannot read or lock stops the command with the reason. It is never replaced.
   if (error instanceof StateFileError || error instanceof StateLockError) {
     console.error(error.message);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kitkat-vn/kitcode",
-  "version": "0.2.0-staging.3",
+  "version": "0.2.0-staging.5",
   "description": "Local aggregate activity server for KitCode.",
   "license": "MIT",
   "repository": {
@@ -37,5 +37,5 @@
   "optionalDependencies": {
     "electron": "^43.0.0"
   },
-  "gitHead": "ac0e5e53e90fc09132dabc63474e01e962f50a6d"
+  "gitHead": "507aaa120cd48a65b06380f3eee194d799428db1"
 }

package/src/api.mjs

@@ -3,18 +3,26 @@ import {MAX_EVENT_STREAMS, requireDashboardOrigin, requireDashboardRead, require
 import {claimBundleFromState} from './claim-bundle.mjs';
 import {corsMiddleware} from './cors.mjs';
 import {renderCompanionWindow} from './companion-window.mjs';
+import {describeOutcome, diagnosticsStatus, sendQueued} from './diagnostics.mjs';
 import {INSTALL_ID_DISPLAY_PATH, InstallIdError, readInstallId} from './install-id.mjs';
 import {STATE_DISPLAY_PATH} from './integration-spec.mjs';
 import {MilestoneRecordError} from './milestones-reached.mjs';
-import {buildSummary, persistRuntimeState, refreshRuntimeLedger} from './runtime.mjs';
-import {normalizeTierPercent, redeemReadyTiers} from './reward.mjs';
+import {buildSummary} from './runtime.mjs';
 import {loadState, StateFileError} from './store.mjs';
 
 const projectLevelGone = (_req, res) => {
   res.status(410).json({error: 'Project-level metadata is no longer exposed'});
 };
 
-export function createServer(runtime, version) {
+// The route that recorded a 10–30 % break code as shown, in state.json, gone with the codes on 2026-10-01 (the operator's
+// decision 6; docs/reward-rules.md §7): each milestone reached shows its message on the dashboard instead. It records
+// nothing for anyone; a dashboard from before, which still sends it, reads why in fixed words.
+const redeemGone = (_req, res) => {
+  res.status(410).json({error: 'Break codes are no longer shown or recorded: each milestone reached shows its message on the dashboard.'});
+};
+
+// `diagnostics` is the tracker's send loop (src/diagnostics.mjs, startDiagnosticsLoop), for Send logs now.
+export function createServer(runtime, version, {diagnostics = null} = {}) {
   const app = express();
   let openEventStreams = 0;
 
@@ -54,24 +62,7 @@ export function createServer(runtime, version) {
     res.json(buildSummary(runtime).global);
   });
 
-  app.post('/api/reward/redeem', (req, res) => {
-    const requestedTier = req.body?.tier;
-
-    if (requestedTier !== undefined && !normalizeTierPercent(requestedTier)) {
-      res.status(400).json({error: 'Invalid reward tier'});
-      return;
-    }
-
-    // Readiness is judged from the file, so the tracker's latest time goes there first.
-    persistRuntimeState(runtime);
-    const result = redeemReadyTiers(requestedTier === undefined ? null : requestedTier);
-    refreshRuntimeLedger(runtime);
-
-    res.json({
-      ...result,
-      summary: buildSummary(runtime),
-    });
-  });
+  app.post('/api/reward/redeem', redeemGone);
 
   // The claim bundle (docs/backend.md, "The contract"): totals only, from state.json as it is on disk,
   // which this reads and never writes. Only the dashboard's allow-listed origins get it, where
@@ -116,6 +107,25 @@ export function createServer(runtime, version) {
     }
   });
 
+  // A tester build's diagnostics, for the staging dashboard (docs/security.md, "Tester diagnostics"): whether this tracker
+  // sends them, its install id, which the dashboard links its own events by, what waits, and the last send. Only to an
+  // allow-listed Origin, as the claim bundle, which holds the same install id; never the events, or the invited email.
+  app.get('/api/diagnostics', requireDashboardOrigin, (_req, res) => {
+    res.setHeader('Cache-Control', 'no-store');
+    const {invitedEmail, ...status} = diagnosticsStatus();
+    res.json(invitedEmail === undefined ? status : {...status, emailGiven: invitedEmail !== null});
+  });
+
+  // Send logs now: the dashboard's button. A write, so it passes every write's guards first: a loopback Host, an allow-listed
+  // Origin and a JSON body (api-access.mjs). It sends what waits, past any backoff, and answers with exactly what the
+  // server confirmed, or why nothing was sent, in plain words; in a build that sends nothing, that it sends nothing.
+  app.post('/api/diagnostics/send', (_req, res, next) => {
+    (diagnostics ? diagnostics.sendNow() : sendQueued({timeoutMs: 10_000, maxBatches: 5, manual: true, source: 'tracker'})).then((result) => {
+      res.setHeader('Cache-Control', 'no-store');
+      res.json({...result, words: describeOutcome(result)});
+    }, next);
+  });
+
   app.get('/api/projects/:id/commits', projectLevelGone);
   app.post('/api/projects/:id/start', projectLevelGone);
   app.post('/api/projects/:id/stop', projectLevelGone);

package/src/companion-window.mjs

@@ -26,7 +26,6 @@ button{cursor:pointer}
 .metric-value{color:var(--white-text);font-family:var(--font-pixel),var(--font-mono);font-size:24px;line-height:1;margin-bottom:2px;letter-spacing:.5px;white-space:nowrap}
 .metric-label{color:var(--red-color);font-family:var(--font-mono);font-size:7px;font-weight:500;letter-spacing:.3px;text-transform:uppercase;white-space:nowrap}
 .claim-btn{-webkit-app-region:no-drag;background:transparent;color:var(--white-text);font-family:var(--font-mono);font-size:10px;font-weight:500;letter-spacing:1px;padding:3px 12px;cursor:pointer;text-transform:uppercase;border-top:2px solid var(--red-color);border-bottom:2px solid var(--red-color);border-left:1px dashed var(--red-color);border-right:1px dashed var(--red-color);white-space:normal;width:min-content;line-height:1.15;transition:background-color .2s ease}
-.claim-btn[data-ready="true"]{background:rgba(240,48,48,.18)}
 .claim-btn:hover,.claim-btn:focus-visible{background:rgba(240,48,48,.15);outline:none}
 .offline .percentage,.offline .metric-value{color:#6f6f6f}
 .offline .progress-row{color:#6f6f6f}
@@ -36,8 +35,8 @@ ${COMPANION_HIDE_CSS}
 const API_BASE=${JSON.stringify(apiBase)};const percent=document.getElementById('percent'),countValue=document.getElementById('countValue'),workedValue=document.getElementById('workedValue'),idleValue=document.getElementById('idleValue'),progressFill=document.getElementById('progressFill'),main=document.getElementById('main'),dashboardButton=document.getElementById('dashboardButton');
 function formatDuration(seconds){const totalSeconds=Math.max(0,Math.floor(Number(seconds)||0));if(totalSeconds<60)return totalSeconds+'s';const hours=Math.floor(totalSeconds/3600),minutes=Math.floor((totalSeconds%3600)/60);if(hours>0)return minutes>0?hours+'h '+minutes+'m':hours+'h';return minutes+'m'}
 function updateProgress(value){progressFill.style.width=Math.max(0,Math.min(100,Number(value)||0))+'%'}
-function render(summary){const reward=summary?.reward||{},global=summary?.global||{},tiers=reward.tiers||[],ready=tiers.some((tier)=>tier.status==='ready'),value=Math.max(0,Math.min(100,Math.floor(Number(reward.progressPercent)||0)));percent.textContent=value+'%';countValue.textContent=String(Math.max(0,Math.floor(Number(reward.totalEquals)||0)));workedValue.textContent=formatDuration(global.totalActiveSeconds);idleValue.textContent=formatDuration(global.totalIdleSeconds);updateProgress(value);dashboardButton.dataset.ready=ready?'true':'false';main.classList.remove('offline')}
-function offline(){percent.textContent='--';countValue.textContent='--';workedValue.textContent='--';idleValue.textContent='--';updateProgress(0);dashboardButton.dataset.ready='false';main.classList.add('offline')}
+function render(summary){const reward=summary?.reward||{},global=summary?.global||{},value=Math.max(0,Math.min(100,Math.floor(Number(reward.progressPercent)||0)));percent.textContent=value+'%';countValue.textContent=String(Math.max(0,Math.floor(Number(reward.totalEquals)||0)));workedValue.textContent=formatDuration(global.totalActiveSeconds);idleValue.textContent=formatDuration(global.totalIdleSeconds);updateProgress(value);main.classList.remove('offline')}
+function offline(){percent.textContent='--';countValue.textContent='--';workedValue.textContent='--';idleValue.textContent='--';updateProgress(0);main.classList.add('offline')}
 async function sync(){try{const response=await fetch(API_BASE+'/api/summary');if(!response.ok)throw new Error();render(await response.json())}catch{offline()}}
 const hideButton=document.getElementById('hideButton');function hideCompanion(){try{const result=window.kitcodeCompanion?.hide?.();if(result&&typeof result.catch==='function')result.catch(()=>window.close());if(!result)window.close()}catch{window.close()}}
 hideButton.addEventListener('pointerdown',(event)=>event.stopPropagation());hideButton.addEventListener('click',(event)=>{event.stopPropagation();hideCompanion()});
@@ -46,12 +45,15 @@ dashboardButton.addEventListener('click',()=>{if(window.kitcodeCompanion?.openDa
 sync();const events=new EventSource(API_BASE+'/api/events');events.addEventListener('summary',(event)=>{try{render(JSON.parse(event.data))}catch{offline()}});events.onerror=offline;
 `;
 
-  // The button opens the dashboard, where a ready code is shown: "Show code", not a claim (operator
-  // decision, 2026-09-24). It wraps onto two lines, as KITCODE COUNTER does on the left: on one line
-  // it took 28 px from the counters, which then ran into each other at long-campaign values
-  // (measured in the 560 x 76 window with 2500 = and 11h 48m).
+  // The button opens the dashboard, where each milestone reached shows its message: "See more". Until 2026-10-01 it was
+  // "Show code", and lit while a 10–30 % code was ready to show there; the break codes are gone (the operator's decision
+  // 6), and a milestone reached stays reached, so nothing lights it now. The Mini cannot show a message itself: the
+  // messages are the claim backend's, and the tracker, which serves this page, never talks to it. Two short words, which
+  // wrap onto two lines, as KITCODE COUNTER does on the left: "Dashboard" or "Messages" took 28 to 35 px more, and the
+  // counters then ran into each other at long-campaign values (measured in the 560 x 76 window with 2500 = and
+  // 11h 48m, 2026-09-24 and 2026-10-01).
   return `<!doctype html>
 <html lang="en"><head><meta charset="utf-8"><meta http-equiv="Content-Security-Policy" content="${contentSecurityPolicy({script, style, connect: [apiBase || "'self'"]})}"><meta name="viewport" content="width=device-width, initial-scale=1">
 <title>KitCode Counter</title><style>${style}</style></head>
-<body><main class="widget-window" id="main" data-testid="companion-counter-bar">${renderCompanionTitleBar()}<div class="widget-body"><div class="brand-label" aria-label="KitCode Counter">KITCODE<br>COUNTER</div><strong class="percentage" id="percent" data-testid="mini-percent">--</strong><div class="progress-box" aria-hidden="true"><div class="progress-fill" id="progressFill"><div class="progress-row">========================</div><div class="progress-row">========================</div></div></div><div class="metrics-group" aria-label="KitCode counters"><div class="metric-item"><div class="metric-value" id="countValue" data-testid="mini-count">--</div><div class="metric-label">= COUNT</div></div><div class="metric-item"><div class="metric-value" id="workedValue" data-testid="mini-worked">--</div><div class="metric-label">WORKED</div></div><div class="metric-item"><div class="metric-value" id="idleValue" data-testid="mini-idle">--</div><div class="metric-label">IDLE</div></div></div><button class="claim-btn" id="dashboardButton" data-testid="companion-dashboard" type="button" data-ready="false">Show code</button></div></main><script>${script}</script></body></html>`;
+<body><main class="widget-window" id="main" data-testid="companion-counter-bar">${renderCompanionTitleBar()}<div class="widget-body"><div class="brand-label" aria-label="KitCode Counter">KITCODE<br>COUNTER</div><strong class="percentage" id="percent" data-testid="mini-percent">--</strong><div class="progress-box" aria-hidden="true"><div class="progress-fill" id="progressFill"><div class="progress-row">========================</div><div class="progress-row">========================</div></div></div><div class="metrics-group" aria-label="KitCode counters"><div class="metric-item"><div class="metric-value" id="countValue" data-testid="mini-count">--</div><div class="metric-label">= COUNT</div></div><div class="metric-item"><div class="metric-value" id="workedValue" data-testid="mini-worked">--</div><div class="metric-label">WORKED</div></div><div class="metric-item"><div class="metric-value" id="idleValue" data-testid="mini-idle">--</div><div class="metric-label">IDLE</div></div></div><button class="claim-btn" id="dashboardButton" data-testid="companion-dashboard" type="button" title="Open the dashboard, where each milestone reached shows its message">See more</button></div></main><script>${script}</script></body></html>`;
 }