antigravity-tc 1.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024-2026 decolua and contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,135 @@
+<div align="center">
+
+<img src="images/antigravity-tc.jpg" alt="Antigravity Token Collector" width="860" />
+
+# Antigravity Token Collector
+
+**Kumpulkan donasi token Antigravity dari siapa saja — langsung masuk ke database [9Router](https://github.com/decolua/9router) Anda.**
+
+[![npm version](https://img.shields.io/npm/v/antigravity-tc.svg)](https://www.npmjs.com/package/antigravity-tc)
+[![License: MIT](https://img.shields.io/badge/License-MIT-22c55e.svg)](LICENSE)
+[![Platform](https://img.shields.io/badge/platform-macOS%20%7C%20Linux%20%7C%20Windows-14b8a6.svg)](#-dukungan-platform)
+[![Node](https://img.shields.io/badge/node-%3E%3D20-fdba74.svg)]()
+
+Tray app + dashboard untuk mengelola donasi token: halaman donasi publik, tunnel gratis tanpa expose IP, auto-start saat login, dan sync massal ke 9Router.
+
+</div>
+
+---
+
+## ⚡ Quick Start
+
+```bash
+npm install -g antigravity-tc
+antigravity-tc
+```
+
+🎉 Dashboard terbuka di `http://localhost:3456/dashboard` — tray icon muncul di menubar.
+
+__That's it!__ 🚀
+
+> 💡 Password default: `1234567890` — hint tampil di halaman login selama belum diganti. Segera ganti di **Pengaturan → Keamanan**.
+>
+> 🔑 **Lupa password?** Jalankan `antigravity-tc-reset-password` di terminal untuk meresetnya kembali ke default.
+
+## 🔄 Cara Kerja
+
+```
+┌──────────────────┐        ┌─────────────────────┐        ┌──────────────────┐
+│   Donatur        │        │   ATC (Anda)        │        │   9Router        │
+│                  │        │                     │        │                  │
+│  Login Google ───┼──────▶ │  Cek eligibility ───┼──────▶ │  Token tersimpan │
+│  lewat link yang │        │  Refresh otomatis   │        │  siap dipakai    │
+│  Anda bagikan    │        │  Anti-duplikat      │        │                  │
+└──────────────────┘        └─────────────────────┘        └──────────────────┘
+```
+
+1. Jalankan `antigravity-tc` — dashboard & tray aktif.
+2. Buat **link donasi personal** dari dashboard (Generate Link), bagikan lewat chat mana pun — atau aktifkan **tunnel publik** gratis supaya bisa diakses dari luar tanpa expose IP.
+3. Donatur login Google + tempel kode — token otomatis dicek, di-refresh bila expired, lalu tersimpan ke 9Router.
+
+## 🖼️ Tampilan
+
+| Dashboard | Sync Massal | Pengaturan |
+| :---: | :---: | :---: |
+| ![Dashboard](images/Dashboard.jpg) | ![Sync](images/Sync.jpg) | ![Pengaturan](images/Pengaturan.jpg) |
+
+## 📋 Fitur
+
+| Fitur | Keterangan |
+| --- | --- |
+| 🌐 Halaman donasi publik | Login Google + tempel kode, token dicek eligibility lalu disimpan |
+| 🔗 Generate link personal | `?for=Nama` — sapaan otomatis untuk tiap calon donatur |
+| 📊 Dashboard admin | Statistik, tabel live, export & import CSV, generate link |
+| 🔄 Sync massal ke 9Router | Upsert semua data sekaligus dengan log terminal realtime |
+| ⚡ Auto refresh token | Token expired otomatis di-refresh Google saat check eligibility |
+| 🌐 Tunnel publik gratis | Cloudflare Quick Tunnel — URL `*.trycloudflare.com` siap dibagikan |
+| 🚀 Auto start | Berjalan otomatis (mode tray) saat OS login |
+| 🔒 Keamanan | Login JWT (secret unik per instalasi), tunnel terkunci selama password default |
+
+## 📁 Data Location
+
+Lokasi default **mengikuti OS tempat package di-install** — tanpa konfigurasi tambahan:
+
+### Database 9Router (target penyimpanan token)
+
+| OS | Lokasi Default |
+| --- | --- |
+| macOS / Linux | `~/.9router/db/data.sqlite` |
+| Windows | `%APPDATA%/9router/db/data.sqlite` |
+| Docker | `/app/data/db/data.sqlite` (mount volume untuk persist) |
+
+> Path ini bisa dioverride kapan saja via **Dashboard → Pengaturan → Database 9Router** (untuk instalasi non-standar) atau env `DB_PATH`.
+
+### Data ATC (log donasi, binary tunnel, config)
+
+| OS | Lokasi |
+| --- | --- |
+| macOS / Linux | `~/.antigravity-tc/` |
+| Windows | `%USERPROFILE%\.antigravity-tc\` |
+| Docker | `/root/.antigravity-tc/` (mount `$HOME/.antigravity-tc` untuk persist) |
+
+| Isi | Keterangan |
+| --- | --- |
+| `logs/donation-logs.sqlite` | Log donasi (auto-migrasi dari instalasi lama) |
+| `bin/cloudflared` | Binary tunnel (auto-download per OS) |
+| `logs/launcher.log` | Log saat auto-start |
+
+## 🖥️ Dukungan Platform
+
+| Kemampuan | macOS | Linux | Windows | Docker |
+| --- | :---: | :---: | :---: | :---: |
+| Server + Dashboard + halaman donasi | ✅ | ✅ | ✅ | ✅ |
+| Tray icon | ✅ | ✅ | ✅ | — |
+| Auto-start saat login | ✅ | ✅ | ✅ | — (pakai restart policy) |
+| Cloudflare Tunnel | ✅ | ✅ | ✅ | ✅ |
+| Path DB 9Router otomatis per OS | ✅ | ✅ | ✅ | ✅ |
+
+> Docker: jalankan dengan `antigravity-tc --hidden` sebagai entrypoint dan mount volume data (lihat tabel di atas). Deteksi Docker otomatis memakai path `/app/data/db/data.sqlite`.
+
+## 🔑 Password & `.env`
+
+- Password: default `1234567890` → ganti via dashboard, atau set `APP_PASSWORD` di `.env`.
+- Prioritas: password dari dashboard > `APP_PASSWORD` > default.
+- Kredensial OAuth **sudah tertanam bawaan** (memakai kredensial publik Antigravity CLI) — `.env` hanya perlu diisi `PORT`/`APP_PASSWORD` bila mau. Override `OAUTH_CLIENT_ID`/`OAUTH_CLIENT_SECRET` tersedia untuk OAuth client sendiri.
+
+## ❓ Troubleshooting
+
+| Masalah | Solusi |
+| --- | --- |
+| Lupa password admin | Jalankan `antigravity-tc-reset-password` (tambah `--yes` untuk tanpa konfirmasi) |
+| Tunnel tidak bisa diaktifkan | Ganti password default dulu di Pengaturan → Keamanan |
+| Tray icon tidak muncul | Pastikan binary `systray2/traybin/` executable |
+| Sudah berjalan tapi tidak bisa dibuka lagi | App single-instance — cukup klik tray icon |
+| Refresh token gagal | Cek koneksi; kredensial OAuth sudah bawaan — atau isi `OAUTH_CLIENT_ID` & `OAUTH_CLIENT_SECRET` di `.env` untuk client sendiri |
+| DB 9Router tidak ketemu | Cek path di Pengaturan → Database 9Router |
+
+---
+
+## 🛠️ Development
+
+Untuk menjalankan dari source, development, dan build/publish mandiri — lihat **[dev.md](dev.md)** dan **[build.md](build.md)**.
+
+## 📄 License
+
+[MIT](LICENSE) © decolua and contributors

package/bin/reset-password.js

@@ -0,0 +1,96 @@
+#!/usr/bin/env node
+// Hard reset password admin ATC kembali ke default.
+// Pakai: antigravity-tc-reset-password [--yes]
+
+const path = require('path');
+const http = require('http');
+const readline = require('readline');
+
+// .env selalu dibaca dari folder aplikasi (konsisten dengan index.js).
+require('dotenv').config({ path: path.join(__dirname, '..', '.env'), quiet: true });
+
+const { getConfig } = require('../src/config');
+
+const DEFAULT_APP_PASSWORD = '1234567890';
+
+function effectivePassword(config) {
+  return config.get('adminPassword') || process.env.APP_PASSWORD || DEFAULT_APP_PASSWORD;
+}
+
+function isAppRunning(port) {
+  return new Promise((resolve) => {
+    const request = http.get(`http://127.0.0.1:${port}/api/password-status`, (res) => {
+      res.resume();
+      resolve(res.statusCode === 200);
+    });
+    request.on('error', () => resolve(false));
+    request.setTimeout(1000, () => {
+      request.destroy();
+      resolve(false);
+    });
+  });
+}
+
+function ask(question) {
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  return new Promise((resolve) => {
+    rl.question(question, (answer) => {
+      rl.close();
+      resolve(answer.trim().toLowerCase());
+    });
+  });
+}
+
+async function main() {
+  const config = getConfig();
+  const configuredPort = Number(process.env.PORT || config.get('port') || 3456);
+  const customPassword = config.get('adminPassword');
+
+  console.log('========================================');
+  console.log('  Antigravity TC — Reset Password Admin');
+  console.log('========================================');
+  console.log('');
+
+  if (!customPassword && process.env.APP_PASSWORD) {
+    console.log('Password saat ini berasal dari APP_PASSWORD di file .env,');
+    console.log('bukan dari dashboard — reset di sini tidak akan mengubahnya.');
+    console.log('');
+    console.log('Solusi  : hapus/ubah baris APP_PASSWORD di .env, lalu restart aplikasi.');
+    console.log(`Lokasi  : ${path.join(__dirname, '..', '.env')}`);
+    process.exit(0);
+  }
+
+  if (!customPassword) {
+    console.log(`Password sudah default (${DEFAULT_APP_PASSWORD}). Tidak ada yang perlu direset.`);
+    process.exit(0);
+  }
+
+  const running = await isAppRunning(configuredPort);
+  if (running) {
+    console.log(`⚠️  Aplikasi sedang berjalan di port ${configuredPort}.`);
+    console.log('   Setelah reset, restart aplikasi (Exit dari tray lalu jalankan lagi)');
+    console.log('   supaya password baru terbaca.');
+    console.log('');
+  }
+
+  const skipConfirm = process.argv.includes('--yes') || process.argv.includes('-y');
+  if (!skipConfirm) {
+    const answer = await ask(`Reset password kembali ke default "${DEFAULT_APP_PASSWORD}"? (y/N): `);
+    if (answer !== 'y' && answer !== 'yes') {
+      console.log('Dibatalkan. Password tidak diubah.');
+      process.exit(0);
+    }
+  }
+
+  config.set('adminPassword', null);
+  console.log('');
+  console.log('✅ Password admin direset.');
+  console.log(`   Password aktif sekarang: ${effectivePassword(config)}`);
+  if (running) console.log('   Jangan lupa restart aplikasinya.');
+  console.log('');
+}
+
+main().catch((error) => {
+  console.error('Gagal reset password:', error.message);
+  process.exit(1);
+});

package/build.md

@@ -0,0 +1,82 @@
+# 📦 Build & Publish Guide
+
+Panduan build frontend, verifikasi paket, dan publish ke npmjs.com.
+
+## Build Frontend
+
+Frontend (Vue 3 + Vite) harus di-build ke `web/dist/` — server Node melayaninya sebagai file statis.
+
+```bash
+npm run build:web
+```
+
+Hasil: `web/dist/` berisi `index.html` (halaman publik), `admin.html` (dashboard), `assets/*` (JS/CSS hashed), plus favicon/gambar dari `web/public/`.
+
+> Tanpa `web/dist/`, halaman `/` dan `/dashboard` akan 404 dengan pesan "Jalankan npm run build:web".
+
+### Struktur Output
+
+```
+web/dist/
+├── index.html        ← halaman donasi publik (/)
+├── admin.html        ← dashboard (/dashboard)
+├── favicon.ico, ex.jpeg, robots.txt
+└── assets/           ← JS/CSS dengan hash (cache immutable)
+```
+
+## Sebelum Publish (Checklist)
+
+1. **Isi `author`** di `package.json` (nama/npm username Anda).
+2. **Naikkan versi**:
+
+   ```bash
+   npm version patch   # 1.0.0 → 1.0.1 (bugfix)
+   npm version minor   # 1.0.0 → 1.1.0 (fitur baru)
+   npm version major   # 1.0.0 → 2.0.0 (breaking change)
+   ```
+
+3. **Lint bersih**: `npm run lint`
+4. **Verifikasi isi paket** (yang penting — pastikan secret tidak ikut):
+
+   ```bash
+   npm pack --dry-run
+   ```
+
+   Yang boleh ikut: `index.js`, `server.js`, `src/`, `web/dist/`, `web/public/`, `env.example`, `README.md`, `package.json`.
+   Yang TIDAK boleh ikut: `.env`, `*.sqlite`, `web/src/` (source frontend — pengguna cukup pakai dist).
+
+   Whitelist dikontrol field `files` di `package.json`.
+
+## Publish
+
+```bash
+npm login        # sekali saja
+npm publish
+```
+
+Script `prepublishOnly` otomatis menjalankan **lint + build:web** sebelum paket dibuat — build tidak akan basi.
+
+Setelah publish, pengguna cukup:
+
+```bash
+npm install -g antigravity-tc
+antigravity-tc
+```
+
+## Setelah Publish — Verifikasi Cepat
+
+```bash
+# di folder lain / mesin bersih
+npm install -g antigravity-tc
+antigravity-tc          # dashboard + tray jalan
+antigravity-tc --hidden # mode tray langsung
+```
+
+Cek juga `~/.antigravity-tc/` terbuat dan halaman `/dashboard` terbuka.
+
+## Catatan Build
+
+- **Vite multi-page**: konfigurasi `web/vite.config.mjs` (entry `index` + `admin`).
+- **Tailwind via PostCSS**: `web/postcss.config.js` mengarah ke `web/tailwind.config.js` secara eksplisit; content glob memakai path absolut.
+- **`vue` & `vite` adalah devDependencies** — pengguna paket tidak mendownload dependency frontend sama sekali; mereka hanya menerima `web/dist/`.
+- **Icon tray** dibaca dari `web/public/favicon.ico` — folder ini ikut di-publish demi itu.

package/dev.md

@@ -0,0 +1,102 @@
+# 🛠️ Development Guide
+
+Panduan untuk menjalankan dari source, memodifikasi backend/frontend, dan konvensi proyek.
+
+## Prasyarat
+
+- **Node.js ≥ 20** (diuji pada v24)
+- **macOS** (tray icon, Keychain, dan LaunchAgent spesifik macOS)
+- npm
+
+## Setup
+
+```bash
+git clone <repo-anda> antigravity-tc
+cd antigravity-tc
+npm install
+cp env.example .env   # lalu isi nilai
+npm run build:web     # build frontend sekali sebelum jalan dari source
+```
+
+File `.env` **selalu dibaca dari folder aplikasi** (bukan cwd) — jadi kredensial tetap terbaca walau dijalankan dari direktori lain (npm link / LaunchAgent).
+
+### Variabel `.env`
+
+| Variabel | Keterangan |
+| --- | --- |
+| `PORT` | Port server (default `3456`) |
+| `APP_PASSWORD` | Password admin (jika kosong: `1234567890`; password yang diganti via dashboard selalu menang) |
+| `DB_PATH` | Path `data.sqlite` 9Router (opsional; bisa juga dari dashboard) |
+| `OAUTH_CLIENT_ID` / `OAUTH_CLIENT_SECRET` | Opsional — kredensial OAuth publik Antigravity CLI sudah tertanam bawaan di `server.js` (base64); isi hanya untuk memakai client sendiri |
+| `OAUTH_METHOD` | `tab` (default) atau `popup` |
+
+## Menjalankan
+
+```bash
+npm start              # TUI interaktif + tray
+node index.js --hidden # langsung mode tray
+npm run dev:web        # frontend: Vite dev server di :5173 (proxy API ke :3456)
+```
+
+Alur development frontend: jalankan `npm start` (backend) + `npm run dev:web` (frontend) di terminal berbeda, lalu buka `http://localhost:5173` — hot reload setiap edit `web/src/**`.
+
+## Struktur Proyek
+
+```
+index.js              Entry point: single-instance lock, tray, TUI, lifecycle
+server.js             HTTP server + semua API route
+src/
+  paths.js            Path ~/.antigravity-tc/ + migrasi database
+  config.js           Config (library `conf`)
+  jwt.js              Auth JWT — secret random per instalasi
+  tunnel.js           Cloudflare Quick Tunnel (download binary, spawn, parse URL)
+  autostart.js        LaunchAgent macOS (di tulis native, bukan via auto-launch)
+  tray.js             Tray icon macOS (systray2)
+  cli.js              TUI menu (@inquirer/prompts)
+web/                  Frontend Vue 3 + Vite + Tailwind (lihat build.md)
+  src/admin/          Dashboard admin (App, LoginCard, DashboardView, SettingsView, store.js)
+  src/public/         Halaman donasi publik (PKCE, modal eligibility)
+  src/shared/         Komponen & helper bersama (Mascot, api, toast)
+```
+
+## API Endpoints
+
+Semua endpoint `/api/*` selain `verify-password`, `session`, `logout`, `password-status`, dan `oauth-config` membutuhkan **JWT admin** (cookie `admin_session` httpOnly).
+
+| Endpoint | Method | Fungsi |
+| --- | --- | --- |
+| `/api/verify-password` | POST | Login → set cookie JWT |
+| `/api/password` | POST | Ganti password (admin) |
+| `/api/settings` | GET/POST | Baca/ubah pengaturan (path DB 9Router) |
+| `/api/autostart` | POST | Toggle auto-start |
+| `/api/tunnel` | GET/POST | Status / toggle tunnel publik |
+| `/api/donations` | GET | List donasi + statistik (paginasi) |
+| `/api/donations/import` | POST | Import CSV (dedupe by email) |
+| `/api/donations/:id/check-eligibility` | POST | CE + auto refresh token |
+| `/api/donations/:id/sync` | POST | Upsert ke 9Router by email |
+| `/api/generate`, `/api/insert` | POST | Query SQL / insert manual (admin) |
+| `/api/keychain`, `/api/decode` | POST | Ambil token dari Keychain (admin) |
+
+## Konvensi & Catatan Teknis
+
+- **CommonJS** di backend (`require`/`module.exports`), ESLint flat config di `eslint.config.js` — `npm run lint` harus bersih sebelum commit/publish.
+- **Priority insert 9Router**: selalu `COUNT(provider antigravity + authType oauth) + 1` (urutan terakhir), `isActive = 0`.
+- **Import CSV**: email sama → update hanya jika data baru lebih baru (banding Expiry, lalu CreatedAt).
+- **Tailwind**: content glob di `web/tailwind.config.js` memakai path absolut (`__dirname`) — jangan ubah ke relatif, karena resolve-nya bergantung cwd proses build.
+- **JWT secret**: dibuat random sekali per instalasi, disimpan di config — tidak pernah ikut ter-publish.
+- **Single instance**: lock di `$TMPDIR/antigravity-token-collector.lock`; instance kedua keluar dengan pesan "Sudah berjalan di menubar."
+- Desain frontend: neobrutalist (hard shadow, border hitam tebal, warna flat) — design system ada di `web/src/styles.css`, maskot Astro-G di `web/src/shared/Mascot.vue`.
+
+## Testing Manual Cepat
+
+```bash
+# login (password default)
+curl -c ck.txt -X POST localhost:3456/api/verify-password \
+  -H 'Content-Type: application/json' -d '{"password":"1234567890"}'
+
+# settings (harus 200)
+curl -b ck.txt localhost:3456/api/settings
+
+# tanpa cookie (harus 401)
+curl localhost:3456/api/donations
+```

package/env.example

@@ -0,0 +1,12 @@
+PORT=3456
+APP_PASSWORD=
+DB_PATH=
+
+# Opsional — kredensial OAuth sudah tertanam bawaan (memakai kredensial publik
+# Antigravity CLI), jadi biasanya TIDAK perlu diisi. Isi hanya jika ingin
+# memakai OAuth client Anda sendiri:
+# OAUTH_CLIENT_ID=
+# OAUTH_CLIENT_SECRET=
+
+# Options: tab (default), new_tab, or popup
+OAUTH_METHOD=popup

package/index.js

@@ -0,0 +1,182 @@
+#!/usr/bin/env node
+const path = require('path');
+// .env selalu dibaca dari folder aplikasi (bukan cwd) supaya kredensial OAuth
+// tetap tersedia saat dijalankan via npm link / LaunchAgent dari folder mana pun.
+require('dotenv').config({ path: path.join(__dirname, '.env'), quiet: true });
+
+const fs = require('fs');
+const os = require('os');
+const { spawn } = require('child_process');
+const lockfile = require('proper-lockfile');
+
+const { getConfig } = require('./src/config');
+const { isAutoStartEnabled } = require('./src/autostart');
+const { TrayManager } = require('./src/tray');
+const { showMainMenu } = require('./src/cli');
+
+const config = getConfig();
+const configuredPort = Number(process.env.PORT || config.get('port') || 3456);
+process.env.PORT = String(configuredPort);
+
+const {
+  startServer,
+  server,
+  getTunnelManager,
+} = require('./server');
+
+const LOCK_FILE_PATH = path.join(os.tmpdir(), 'antigravity-token-collector.lock');
+
+let releaseLock = null;
+let trayManager = null;
+let menuOpen = false;
+let isHandoffInProgress = false;
+
+async function acquireSingleInstanceLock() {
+  if (!fs.existsSync(LOCK_FILE_PATH)) {
+    fs.writeFileSync(LOCK_FILE_PATH, 'lock\n', 'utf8');
+  }
+
+  try {
+    releaseLock = await lockfile.lock(LOCK_FILE_PATH, {
+      realpath: false,
+      retries: 0,
+    });
+  } catch (error) {
+    console.log('Sudah berjalan di menubar.');
+    process.exit(0);
+  }
+}
+
+async function cleanupAndExit(exitCode = 0) {
+  try {
+    const tunnelManager = getTunnelManager();
+    if (tunnelManager) {
+      // Matikan cloudflared tanpa mereset tunnelEnabled agar auto-start
+      // tunnel tetap bekerja pada launch berikutnya.
+      await tunnelManager.dispose();
+    }
+  } catch (error) {}
+
+  try {
+    if (trayManager) {
+      await trayManager.stop();
+    }
+  } catch (error) {}
+
+  try {
+    if (server.listening) {
+      await new Promise((resolve) => server.close(() => resolve()));
+    }
+  } catch (error) {}
+
+  try {
+    if (releaseLock) {
+      await releaseLock();
+      releaseLock = null;
+    }
+  } catch (error) {}
+
+  process.exit(exitCode);
+}
+
+async function releaseInstanceLock() {
+  if (!releaseLock) return;
+  try {
+    await releaseLock();
+  } catch (error) {}
+  releaseLock = null;
+}
+
+async function closeServer() {
+  if (!server.listening) return;
+  await new Promise((resolve) => server.close(() => resolve()));
+}
+
+async function handoffToBackground(port) {
+  if (isHandoffInProgress) return;
+  isHandoffInProgress = true;
+
+  const appUrl = `http://localhost:${port}`;
+
+  await closeServer();
+  await releaseInstanceLock();
+
+  const child = spawn(process.execPath, [path.join(__dirname, 'index.js'), '--hidden'], {
+    cwd: process.cwd(),
+    detached: true,
+    stdio: 'ignore',
+    env: {
+      ...process.env,
+      PORT: String(port),
+    },
+  });
+  child.unref();
+
+  console.log('⏳ Switching to tray mode... (icon already visible in menu bar)');
+  console.log(`🔔 Antigravity-tc (PID: ${child.pid})`);
+  console.log(`   Dashboard: ${appUrl}/dashboard`);
+  console.log('');
+  console.log('💡 You can close this terminal. Klik icon tray untuk quit.');
+
+  process.exit(0);
+}
+
+async function openTerminalMenu(menuContext) {
+  if (menuOpen) return;
+  menuOpen = true;
+  try {
+    await showMainMenu(menuContext);
+  } finally {
+    menuOpen = false;
+  }
+}
+
+async function main() {
+  await acquireSingleInstanceLock();
+
+  const autoStart = await isAutoStartEnabled().catch(() => false);
+  config.set('autoStart', autoStart);
+  config.set('port', configuredPort);
+
+  const port = await startServer(configuredPort);
+  const appUrl = `http://localhost:${port}/dashboard`;
+
+  trayManager = new TrayManager({ config, port });
+  await trayManager.start();
+  trayManager.on('exit', () => cleanupAndExit(0));
+
+  const menuContext = {
+    trayManager,
+    appUrl,
+    onHideToTray: () => handoffToBackground(port),
+    onExit: () => cleanupAndExit(0),
+  };
+
+  const hidden = process.argv.includes('--hidden');
+  if (!hidden) {
+    await openTerminalMenu(menuContext);
+  }
+}
+
+process.on('SIGINT', () => {
+  cleanupAndExit(0);
+});
+
+process.on('SIGTERM', () => {
+  cleanupAndExit(0);
+});
+
+process.on('uncaughtException', (error) => {
+  console.error('Uncaught exception:', error);
+  cleanupAndExit(1);
+});
+
+process.on('unhandledRejection', (error) => {
+  console.error('Unhandled rejection:', error);
+  cleanupAndExit(1);
+});
+
+main().catch((error) => {
+  console.error('Failed to start:', error);
+  cleanupAndExit(1);
+});