Licence terms

Armada is not on sale yet. These are the terms its first release is planned to ship under, published early so they can be read before anything is sold.

This covers the signed builds. The source is separate and hasits own licence.

Armada End User License Agreement
Version 1.0, 2026

Copyright (c) 2026 Magenta Creations <olivier@mgcrea.io>

This agreement covers the signed, notarized builds of Armada distributed by the
copyright holder — the ones downloaded from armada.mgcrea.io or from the GitHub
releases page, and installed from `Armada.zip`.

It does NOT cover the source code. The source is in the same repository under its
own terms; see Section 10.

WHAT THIS IS

You are buying a build, not access to the code. The code is readable by anyone,
and is meant to be read: a program that reads every agent transcript on your Mac
should be one you can audit. Reading it and compiling it are free. Running any
build of it, yours or ours, asks for a license key. What that key pays for is the
signed and notarized artifact, the work of keeping it working across macOS and
agent releases, and the commitments in Sections 7 through 9.

1. THE LICENSE

On payment, you are granted a perpetual, worldwide, non-exclusive license to
install and use the covered builds, for any purpose, including commercially.

The key is issued to a person or an organization, not to a machine. There is no
activation limit and nothing counts your installs. Use it on every Mac you own or
control. If you bought as an organization, one key covers one named user across
their machines; a second person needs a second key.

The key is not transferable to someone else, and it is not for publishing. It
carries the purchaser's email address, and the app displays it.

2. WHAT VERSIONS IT COVERS

A key names a major version and covers every release within it. A key for 1.x
unlocks 1.0, 1.4, 1.9 and anything else numbered 1 — for as long as you like,
with no expiry and no renewal.

Version 2.0 is a new purchase. There is no subscription, nothing lapses, and a
build you are running today does not stop working because a newer major shipped.
Upgrade pricing for existing licensees, if any, is offered at the time and is not
promised here.

3. WHAT IS GATED, AND WHAT IS NOT

What is sold is the watching: the session list, the context and plan-limit
readings, and the actions built on them — starting, forking and focusing
sessions, and mouse bindings. Unlicensed, Armada watches nothing, and says so
where the sessions would be.

Two things are deliberately outside that gate, and this is the agreement saying
so rather than leaving them to be discovered:

  (a) Nothing of yours is held back. Your settings, your mouse bindings and the
      usage history Armada has recorded stay where they are, and Armada never
      wrote to your Claude Code or Codex folders to begin with, so there is
      nothing to undo if you stop using it.

  (b) Nothing is held back from a purchase and no capability is reserved. There
      is no tier above the one you bought.

4. EVALUATING IT BEFORE YOU BUY

Two questions, and only one of them can honestly be answered after payment.

Whether Armada is worth the price is a judgment, and Section 6 makes it a safe
one to get wrong: thirty days, a full refund, no reason required and no form to
fill in. Whether it works at all — against your accounts, your sessions and your
agents, on the version of macOS you are actually running — is a fact about your
machine, and you are entitled to that one before paying rather than after.

  (a) The trial settles the second question and nothing else. Press the button in
      Settings ▸ Licence, in the main window or in the menu bar, and Armada runs
      at full function for thirty minutes: every account, every session, the
      usage forecast, new and forked sessions, and your mouse bindings. Nothing
      is held back and nothing is crippled, so what you learn in that half hour
      stays true afterwards.

      It is a verification window, not a usage allowance. It is held in memory
      and never written to disk, so quitting the app and opening it again starts
      another one. We have not built the machinery to prevent that and do not
      intend to. We would rather say so plainly than have you find out and wonder
      what else went unsaid.

      When the window closes, Armada stops watching until a key is entered or it
      is reopened. Your sessions themselves are untouched: Armada never owns an
      agent process, so nothing you were running stops with it.

      If you enter a key while the window is open, nothing stops. The trial has
      already done its job by then.

  (b) Compile it yourself and read what it does before running it. Section 1(c)
      of the source license grants the compiling; running the result still asks
      for a key.

  (c) Buy it and change your mind. Section 6 refunds you in full within 30 days,
      for any reason or none.

5. VALIDATION IS OFFLINE, AND WHAT THAT COSTS

The app verifies your key locally, using a signature it can check without asking
anyone. It does not contact a licensing server, and it has no way to: the licence
check makes no network call, and the app as a whole opens no connection of its
own beyond the update check in Section 9. That is checked on every build rather
than asserted — see `scripts/audit-network.sh` in the repository, which sweeps
every binary in the bundle for URL loading, name resolution and TLS, allows the
update framework exactly the capability it was measured to use and nothing more,
and asserts the update check ships switched off. Run it against the copy you
downloaded if you would rather not take our word.

There is exactly one outbound connection the app makes on its own account, and it
is the update check in Section 9. It is off until you turn it on, and an Armada
nobody has said yes to has never resolved a name.

Two consequences follow, and they are stated here rather than discovered:

  (a) There is no way to deactivate a key remotely. If a key is revoked under
      Section 6 or Section 12, it stops being accepted by builds released after
      the revocation. Builds you already have continue to accept it. This is a
      deliberate trade and the alternative was a program that phones home.

  (b) Nothing about your usage is measured, transmitted or retained. There are no
      installation counts, no license check-ins, no analytics, and no crash
      reporting. If you never write to us, we have no way to know you are running
      it.

6. REFUNDS

Within 30 days of purchase, for any reason or none, ask and the purchase is
refunded in full. Write to olivier@mgcrea.io from the address the key was issued
to. The key is revoked on refund, with the effect described in Section 5(a).

This is deliberately generous and deliberately load-bearing. It is the thing that
makes buying first a reasonable request, so it is not administered grudgingly and
there is no form to fill in.

If you are a consumer in the European Union you also have a statutory right of
withdrawal, which the 30-day policy above is intended to exceed rather than
replace. Because the key is delivered immediately, checkout asks you to consent
to that immediate delivery and to acknowledge that doing so ends the statutory
withdrawal right once delivery is complete. The refund policy above applies
regardless.

7. WHAT THE SOFTWARE DOES WITH YOUR DATA

Armada is a reader. It reads what Claude Code and Codex already write to disk,
under `~/.claude`, any `~/.claude-<name>` beside it, and `~/.codex`: session
registries, transcripts, session logs and usage caches. It never writes to those
folders, installs no hook, and holds no vendor credential. Nothing leaves your Mac
by way of Armada itself.

Three honest limits on that sentence:

  (a) To read your plan limits, Armada runs your own installed `claude` and asks
      it one question that costs no tokens. That program talks to Anthropic over
      your own sign-in, as it does whenever you use it; what it sends is between
      you and Anthropic.

  (b) Starting or forking a session hands your terminal a small script that runs
      `claude` or `codex` in the folder you chose. The agent that starts is the
      vendor's program, with its own network behaviour and its own terms. Armada
      never owns that process.

  (c) Armada records each new reading of your plan windows so it can draw the
      week rather than guess it. That history is kept on your Mac, under
      Application Support, for thirty days, and Settings ▸ Usage deletes it.
      None of it leaves your Mac.

8. WHAT IT ASKS OF YOUR SYSTEM

Armada ships with no entitlements file at all, and the audit asserts the setting
is absent rather than merely empty. It is not sandboxed, because it has to read
other programs' folders.

What it may ask for is the Accessibility permission, used for two things: raising
the window a session is running in, and, once you switch mouse bindings on,
seeing presses of your mouse's middle and extra buttons. It never sees other
clicks, pointer movement or keystrokes. You may refuse or withdraw it at any time;
focusing then brings the application forward without choosing its window, and
mouse bindings do nothing.

9. UPDATES

Updates within your major version are free.

Unlike the rest of the app, the update check is a network call, and it is the
only one. It is off on a fresh install and stays off until you answer the
question. Turning it on is a standing preference in Settings ▸ Updates; "Check
Now…" there is a single check you asked for and leaves the standing preference
alone. No identifier is sent with either.

10. THE SOURCE IS SEPARATE

This agreement grants you no rights in the source code, and the source license
grants you no rights in these builds. The two are independent, and you may hold
both at once.

You may study, modify and compile the source under its own terms, and reading and
compiling it cost nothing. Running the result is a separate matter: the license
check is in the source, so a build you compile yourself asks for a key exactly as
a build from us does. Section 1(c) of that license grants you the compiling, not
a keyless run.

Section 2(b) of that license asks you not to circumvent or strip the license
validation, or to distribute anything designed to do so; that request applies to
you under this agreement too. We have built no defences against your doing it
anyway, and we do not intend to — the check is a few readable lines and
obscuring them would only cost the audit the readability it exists for. What
stands between the two is this sentence, not a technical measure.

11. SUCCESSION

The bundle identifier `io.mgcrea.armada` is what your Accessibility permission is
granted to and what your preferences are stored under. If it changed hands
quietly, a new owner would inherit, on an ordinary update and with no prompt, a
program that already reads every agent transcript on your Mac and that macOS
already trusts to raise your windows and watch your mouse buttons.

So it will not change hands quietly. If this project is sold, transferred or
abandoned:

  (a) A change of the party controlling the signing identity or the bundle
      identifier will be announced in the release notes of the first build made
      under new control, and on armada.mgcrea.io, before that build ships.

  (b) If the project is abandoned, the source remains under its own license and
      the last published build remains licensed to you under this agreement.
      Section 12 does not terminate it.

  (c) A successor is bound by this section as a condition of the transfer.

12. TERMINATION

This license ends if you breach it and do not cure the breach within 30 days of
becoming aware of it — in practice, if you resell or publish your key. On
termination the key is revoked, with the effect described in Section 5(a).

Nothing else terminates it. It does not expire, it is not conditional on
continued payment, and it is not withdrawn because the project stops.

13. NO WARRANTY

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.

This does not limit any warranty or remedy that applicable consumer law grants
you and does not permit us to disclaim — in the European Union, the statutory
conformity guarantee in particular.

14. LIMITATION OF LIABILITY

To the extent permitted by law, total liability arising out of or in connection
with the Software is limited to the amount you paid for the license.

Nothing here excludes liability for death or personal injury caused by
negligence, for fraud, or for anything else that cannot lawfully be excluded.

15. GOVERNING LAW

French law governs this agreement. If you are a consumer, this does not deprive
you of the protection of the mandatory rules of the country where you live, and
you may bring proceedings in your own courts.

16. CONTACT

Magenta Creations
olivier@mgcrea.io
https://armada.mgcrea.io