Neutralize references to the app, its repo, and pricing in public files

Author: djadmin

.github/workflows/cli.yml

@@ -23,14 +23,14 @@ jobs:
 
       - name: Guard against committing private / generated files
         run: |
-          # Fail if anything machine-specific, generated, or paid ever gets tracked.
+          # Fail if anything machine-specific, generated, or non-public ever gets tracked.
           # .gitignore stops accidental `git add`; this catches a file already committed.
           forbidden=$(git ls-files | grep -E '(^|/)apps\.json$|^pids/|^logs/|^Caddyfile$|^dashboard\.html$|^\.claude/|(^|/)\.DS_Store$' || true)
-          # The paid Mac app lives in the private devkit-app repo; only MenuBarApp/docs/ is public.
-          paid=$(git ls-files 'MenuBarApp/*' | grep -vE '^MenuBarApp/docs/' || true)
-          if [ -n "$forbidden$paid" ]; then
+          # Only MenuBarApp/docs/ (the landing page) is public; app source is not part of this repo.
+          appsrc=$(git ls-files 'MenuBarApp/*' | grep -vE '^MenuBarApp/docs/' || true)
+          if [ -n "$forbidden$appsrc" ]; then
             echo "::error::forbidden files are tracked in this public repo:"
-            printf '%s\n' "$forbidden" "$paid"
+            printf '%s\n' "$forbidden" "$appsrc"
             exit 1
           fi
           echo "repo hygiene OK"

.github/workflows/release.yml

@@ -57,8 +57,8 @@ jobs:
         run: |
           git clone "https://x-access-token:${GH_TOKEN}@github.com/djadmin/homebrew-tap.git"
           cd homebrew-tap
-          # Update only the CLI formula (devkit.rb); the app cask lives in Casks/ and is
-          # released from the devkit-app repo.
+          # Update only the CLI formula (devkit.rb). The cask in Casks/ is released by its
+          # own repo's workflow, not here.
           sed -i "s|^  url \".*\"|  url \"$URL\"|"        devkit.rb
           sed -i "s|^  sha256 \".*\"|  sha256 \"$SHA256\"|" devkit.rb
           sed -i "s|^  version \".*\"|  version \"$VERSION\"|" devkit.rb

.gitignore

@@ -12,17 +12,16 @@ logs/
 # macOS
 .DS_Store
 
-# PAID Mac app source — lives in the private devkit-app repo, NEVER in this public repo.
-# Blanket-ignore everything under MenuBarApp so a stray `git add .` (or a newly named
-# source file/dir) can't re-leak the paid product. The ONLY exception is docs/, the
-# public landing page served at djadmin.github.io/devkit via the Pages workflow.
+# App source is maintained in a separate repo and is not part of this CLI. Blanket-ignore
+# everything under MenuBarApp so a stray `git add .` (or a newly named file/dir) can't add
+# it. The only public exception is docs/, the landing page served via the Pages workflow.
 MenuBarApp/*
 !MenuBarApp/docs/
 
 # local Claude settings (machine-specific paths, gh allow-rules)
 .claude/settings.local.json
 
-# internal planning — lives in devkit-internal repo
+# internal planning — kept out of this public repo
 LAUNCH.md
 RELEASE_PLAN.md
 IDEAS.md

CLAUDE.md

@@ -35,11 +35,10 @@ asserts a stray `~/devkit` is ignored, not adopted).
 The live registry is `apps.json`, which is local-only and gitignored.
 The committed example registry is `apps.example.json`.
 
-## Consumer contract (the Mac app + MCP build on this)
+## Machine-readable contract
 
-The CLI is the single brain; the menu bar app and the MCP server are thin clients that
-shell out to it and parse its output. Treat these as a stable public contract — other
-programs depend on them, so do not break them casually:
+The CLI is the single source of truth. Other tools may shell out to it and parse its
+output, so treat these as a stable public contract and do not break them casually:
 
 - `devkit list --json` — one JSON object per app (`name`, `port`, `hostname`, `state`,
   `path`, `managedBy`, and the failed-start reason / log path). This is how clients read
@@ -50,11 +49,11 @@ programs depend on them, so do not break them casually:
 - `devkit scan --json`, `devkit doctor --json` — machine-readable, same spirit.
 - **Exit codes matter**: 0 = success, non-zero = failure (clients branch on this).
 - **Every command must terminate** non-interactively (no `tail -f`-style hangs) — an agent
-  or the app may invoke any of them.
+  or a script may invoke any of them.
 
 Versioning: additive changes (new fields/commands) are a minor bump; renaming/removing a
-field or changing `state` values is a breaking change — bump major and update the app/MCP
-in lockstep. Keeping this contract stable is what lets the three surfaces stay in sync.
+field or changing `state` values is a breaking change — bump major. Keeping this contract
+stable is what lets any consumer stay in sync.
 
 ## Generated files
 
@@ -70,14 +69,14 @@ They are regenerated by `devkit reload`.
 This repo is **public**. Avoid baking machine-specific paths, usernames, or private
 project names into committed files.
 
-**Never commit (privacy / paid product):**
+**Never commit (privacy / non-public source):**
 
 - `apps.json` — the live registry; it contains your real project names and paths. Only the
   sanitized `apps.example.json` is tracked.
 - `pids/`, `logs/`, `Caddyfile`, `dashboard.html` — runtime + generated, machine-specific.
 - `.claude/settings.local.json` (local paths / allow-rules) and `.claude/` generally.
-- Anything under `MenuBarApp/` except `MenuBarApp/docs/` — the Mac app is the **paid**
-  product and lives in the private `devkit-app` repo. Never let its source land here.
+- Anything under `MenuBarApp/` except `MenuBarApp/docs/` — that source is maintained in a
+  separate repo and is not part of this CLI. Only the `docs/` landing page is public here.
 
 These are all in `.gitignore`, but `.gitignore` only stops accidental `git add` — it does
 not catch a file that is already tracked. The `cli.yml` workflow has a **repo-hygiene