@ra3orblade/swarm 0.11.1 → 0.11.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. package/dist/swarm-hook.js +88 -29
  2. package/dist/swarm.js +88 -29
  3. package/dist/swarmd.js +89 -30
  4. package/package.json +1 -1
  5. package/web/app.js +119 -53
  6. package/web/index.html +1 -1
  7. package/web/release-notes.js +1 -1
package/dist/swarm-hook.js CHANGED
@@ -49,36 +49,95 @@ var HUMAN_ALIASES = new Set(["cli", "dashboard", "me", "desktop", "human"]);
49
49
  var DAEMON_ALIASES = new Set(["daemon", "system", "swarm"]);
50
50
  // packages/core/src/art.ts
51
51
  var ROBOT = [
52
- " g g ",
53
- " X X ",
54
- " X X ",
55
- " ddddddddddddd ",
56
- " dXXXXXXXXXXXd ",
57
- " dggXXXXXXXXXd ",
58
- " dddXXddXXXddXXddd ",
59
- " dddXXddXXXddXXddd ",
60
- " dddXXXXXXXXXXXddd ",
61
- " dddXXdddddddXXddd ",
62
- " dXXXXXXXXXXXd ",
63
- " dXXXXXXXXXXXd ",
64
- " ddddddddddddd ",
65
- " XXX ",
66
- " ddddd ",
67
- " ddddddddddd ",
68
- " dXXdggXXXXXXXdXXd ",
69
- " dXXdXggggXddddXXd ",
70
- " dXXdXggggXXXXdXXd ",
71
- " dXXdXXXXXXddddXXd ",
72
- " dXXdXXXXXXXXXdXXd ",
73
- " dXXdXdddXXXXXdXXd ",
74
- " ddddXXXXXXXXXdddd ",
75
- " ddddddddddd ",
76
- " XX XX ",
77
- " XX XX ",
78
- " XXXX XXXX ",
79
- " dddd dddd "
52
+ " MM MM ",
53
+ " LL LL ",
54
+ " LL LL ",
55
+ " LM MM ",
56
+ " MD MS ",
57
+ " LE LE ",
58
+ " ME ME ",
59
+ " MS MS ",
60
+ " KK KK ",
61
+ " SSDDDSDDDDDDDDDDDDDDDDDDDDDDDDDDDDS ",
62
+ " SSDSDDDDDDDDDDDDDDDDDDDDDDDDDDDDDSS ",
63
+ " SSDOOOOOOOOOOOOOOOOOOOOOOOOOOOOOKSS ",
64
+ " SSOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMOSS ",
65
+ " DDKMMLLLMLLMMMMMMMMMMMMMMMMMMMMMODD ",
66
+ " DDOMMLMMMMMMMMMMMMMMMMMMMMMMMMMMODD ",
67
+ " SSSSODDOMMLMMMMMMMMMMMMMMMMMMMMMMMMMMODDOSSSS ",
68
+ " SSSSODDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODDOSSSS ",
69
+ " SMMMMODDOMMLMMMMMMMMMMMMMMMMMMMMMMMMMMODDOSMMMS ",
70
+ " DMSSSODDOMMMMOOOOOOMMMMMMMMMOOOOOOMMMMODDOSSSED ",
71
+ " DSSSSODDOMMMMODDDDDMMMMMMMMMODDDDDMMMMODDOSSSSK ",
72
+ " DSMMSODDOMMMMDDDDDDMMMMMMMMMKDDDDDMMMMODDOSMMSK ",
73
+ " DSSSSODDOMMMMDDDDDDMMMMMMMMMDDDDDDMMMMODDOSSSSK ",
74
+ " DSSSSODDOMMMMDDDDDDMMMMMMMMMDDDDDDMMMMODDODSSSK ",
75
+ " DSSSSODDOMMMMDDDDDDMMMMMMMMMDDDDDDMMMMODDODSSSK ",
76
+ " DSSSKODDOMMMMDDDDDDMMMMMMMMMDDDDDDMMMMODDODSSSD ",
77
+ " OKKKKODDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODDOKKKKO ",
78
+ " KKKKODDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODDOOKKK ",
79
+ " KKKOODDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODDOOKKK ",
80
+ " DDOMMMMDDDDDDDDDDDDDDDDDDDDDMMMMODD ",
81
+ " DDOMMMMDDDDDDDDDDDDDDDDDDDDDMMMMODD ",
82
+ " DDOMMMMDDDDDDDDDDDDDDDDDDDDDMMMMODD ",
83
+ " DDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODD ",
84
+ " DDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODD ",
85
+ " DDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODD ",
86
+ " DDDOOOOOOOOOOOOOOOOOOOOOOOOOOOOOKDD ",
87
+ " DDDDDDDDDDDDDDDDDDDDDDDDDDDDDKDDDDD ",
88
+ " DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD ",
89
+ " OOOOOOOOOOO ",
90
+ " OODDDDDKKOO ",
91
+ " DSMMMMMMSDD ",
92
+ " OOOOOOOOOOO ",
93
+ " KDSMMMMMESSKK ",
94
+ " MMMMMMSSKOOKDSMMMMMSSSDKOODSEMMMMMM ",
95
+ " SSSSDO MMMMMMSSKKOOOOOOOOOOOOOOOOOKSSSMMMMMM ODSSSS ",
96
+ " EEESSSSOOLLLLMMMMMESSSSSSSSSSSSSSSSSSSSMMMMMLLLLOOSSSSMME ",
97
+ " SMMSSSSKOEELLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLEEOOSSSSEMS ",
98
+ " DSSSSSSSOOSEEKSMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMSOEEDOOSSSSSSSK ",
99
+ " DSSSSSSDOOSEOSKEMMMMMMMMMMMMMMMMMMMMMMMMMMMMMEOSDEDOODSSSSSSK ",
100
+ " KSSSSSSKOODSSOSEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEESOEEDOOKSSSSSSK ",
101
+ " DKSSSSKKOODSMEEMLLLLLLLLLLLLLLLLLLLLLLLLLLLLLMSEMSDOOKKSSSSDK ",
102
+ " OKDDKDKKOOKSMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMSKOOKKKKKKKO ",
103
+ " OOOOOKKKOOKSMMMMESSSSSSSSSSSSSMMMMEEEEEESSSSEMMMMSKOOKKKOOOOO ",
104
+ " OOOOOOKKOOKSMMMSSKKKKKKKKKKKKKKMMMDKOOOOOOOODDMMMSKOOKKOOOOOO ",
105
+ " OKSSKOOOOOKSMMMKKMLLLLLLLLLLLMKMMMDDSSSSSSSSDDMMMSKOOOOODSSKO ",
106
+ " SDOKKK KSMMMKDLLLLLLLLLLLLLKMMMKDKKKDDKKKDKMMMSK KKKKDS ",
107
+ " DMLLMKO KSMMMKDLLLLLLLLLLLLLKMMMDDDDDDDDDSKDMMMSK ODMLLMD ",
108
+ " DELLMSD KSMMMKKMLLLLLLLLLLLLKMMMDKKKKKKKKKDDMMMSK DSMLLEO ",
109
+ " KSKKKKDO KSMMMEDDDDKKDDDKKKDKSMMMDDDDDDDDDSDDMMMSK ODDKKKSK ",
110
+ " EMLLMDO KSMMMMLLLLLLLLLLLLLLLMMMDOOOOOOOOODDMMMSK ODMLLME ",
111
+ " KMLLMSD KSMMMMMMMMMMMMMMMMMMMMMMDDSSDDSSSSDDMMMSK SSMLLEK ",
112
+ " KSKKKKSO KSMMMMMOOMMOOMKOEMOOMMMMDOOOOOOOOODDMMMSK OSKKKKSO ",
113
+ " SMLLMDO KSMMMMMKKMMKKMDKEMKKMMMMKDDDDSSSSDDDMMMSK ODMLLMS ",
114
+ " SMMMMSD KSMMMMMEEMMEEMEEMMEEMMMMDSOOOOOOOODDMMSSK DSMMMMD ",
115
+ " OOOOOOO KSSMMMMMMMMMMMMMMMMMMMMMDDDDDDDDDDDDMSSSK OOOOOOO ",
116
+ " KSMLLLMMSKO KSSSSMMMMMMMMMMMMMMMMMMMSOOOOOOOOOOSSSSSK OKSMLLLLMSO ",
117
+ " DSMMMEEESKK KSSKSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSOSSK KDSMMMMMESD ",
118
+ " DSMMMMMESKK KSOOKSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSOOKSK KKSMMMMMMSD ",
119
+ " DSMMMMMESKK OKSKSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSDSKO KDSMMMMMMSD ",
120
+ " KDDDDDDDDKK KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK KKDDDDDDDDO ",
121
+ " OOOOOOOOOOO OOOOOOOOO OOOOOOOOO OOOOOOOOOOO ",
122
+ "DSDO OSSO ODKKKKKKK OKKKKKKKO KEDO ODEK",
123
+ "SMDO OSMD KDSSSSSSK KDSSSSSKO SMDO ODMS",
124
+ "DEKO OOED OOKKKOOO OOOKKOOO SSOO OKMS",
125
+ "DEKO OOED SEMMMMSK OSMMMMED SSKO OKES",
126
+ "DSSO OESK SEMMMMSK OSMMMMED KSSO OSSK",
127
+ "KSMS EEDO OOKKKKKO OOKKKKKO OSEE EMSO",
128
+ " DSS SSK OSEEESDO ODSEEESO KSS SSD ",
129
+ " OOO OO SEMMMMSK OSMMMMED OO OOO ",
130
+ " KSSSSSDO OKSSESSK ",
131
+ " DKKDDDDDDKKDK KDKDDDDDDDKDK ",
132
+ " SSMLLMMMMMMLMSK DSSMMMMMMMLLMSS ",
133
+ " SMLMMMMMMMMLLED SEMMMMMMMMMMLMS ",
134
+ " DMMMMMMMMMMMMMMD SMMMMMMMMMMMMMSK ",
135
+ " ODSSSSSSSSSSSSSSDO ODSSSSSSSSSSSSSSKO ",
136
+ " OOOOOOOOOOOOOOOOO OOOOOOOOOOOOOOOOO ",
137
+ " OKSSSSSSSSSSSSSSK KSSSSSSSSSSSSSSKO ",
138
+ " OKDDDDDDDDDDDDDDK KDDDDDDDDDDDDDDOO "
80
139
  ];
81
- var ROBOT_HEAD = ROBOT.slice(0, 13);
140
+ var HEAD = ROBOT.slice(0, 37);
82
141
  // packages/core/src/audit.ts
83
142
  var AUDIT_TYPES = new Set([
84
143
  "session.started",
package/dist/swarm.js CHANGED
@@ -168,36 +168,95 @@ var HOOK_EVENTS = [
168
168
  ];
169
169
  // packages/core/src/art.ts
170
170
  var ROBOT = [
171
- " g g ",
172
- " X X ",
173
- " X X ",
174
- " ddddddddddddd ",
175
- " dXXXXXXXXXXXd ",
176
- " dggXXXXXXXXXd ",
177
- " dddXXddXXXddXXddd ",
178
- " dddXXddXXXddXXddd ",
179
- " dddXXXXXXXXXXXddd ",
180
- " dddXXdddddddXXddd ",
181
- " dXXXXXXXXXXXd ",
182
- " dXXXXXXXXXXXd ",
183
- " ddddddddddddd ",
184
- " XXX ",
185
- " ddddd ",
186
- " ddddddddddd ",
187
- " dXXdggXXXXXXXdXXd ",
188
- " dXXdXggggXddddXXd ",
189
- " dXXdXggggXXXXdXXd ",
190
- " dXXdXXXXXXddddXXd ",
191
- " dXXdXXXXXXXXXdXXd ",
192
- " dXXdXdddXXXXXdXXd ",
193
- " ddddXXXXXXXXXdddd ",
194
- " ddddddddddd ",
195
- " XX XX ",
196
- " XX XX ",
197
- " XXXX XXXX ",
198
- " dddd dddd "
171
+ " MM MM ",
172
+ " LL LL ",
173
+ " LL LL ",
174
+ " LM MM ",
175
+ " MD MS ",
176
+ " LE LE ",
177
+ " ME ME ",
178
+ " MS MS ",
179
+ " KK KK ",
180
+ " SSDDDSDDDDDDDDDDDDDDDDDDDDDDDDDDDDS ",
181
+ " SSDSDDDDDDDDDDDDDDDDDDDDDDDDDDDDDSS ",
182
+ " SSDOOOOOOOOOOOOOOOOOOOOOOOOOOOOOKSS ",
183
+ " SSOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMOSS ",
184
+ " DDKMMLLLMLLMMMMMMMMMMMMMMMMMMMMMODD ",
185
+ " DDOMMLMMMMMMMMMMMMMMMMMMMMMMMMMMODD ",
186
+ " SSSSODDOMMLMMMMMMMMMMMMMMMMMMMMMMMMMMODDOSSSS ",
187
+ " SSSSODDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODDOSSSS ",
188
+ " SMMMMODDOMMLMMMMMMMMMMMMMMMMMMMMMMMMMMODDOSMMMS ",
189
+ " DMSSSODDOMMMMOOOOOOMMMMMMMMMOOOOOOMMMMODDOSSSED ",
190
+ " DSSSSODDOMMMMODDDDDMMMMMMMMMODDDDDMMMMODDOSSSSK ",
191
+ " DSMMSODDOMMMMDDDDDDMMMMMMMMMKDDDDDMMMMODDOSMMSK ",
192
+ " DSSSSODDOMMMMDDDDDDMMMMMMMMMDDDDDDMMMMODDOSSSSK ",
193
+ " DSSSSODDOMMMMDDDDDDMMMMMMMMMDDDDDDMMMMODDODSSSK ",
194
+ " DSSSSODDOMMMMDDDDDDMMMMMMMMMDDDDDDMMMMODDODSSSK ",
195
+ " DSSSKODDOMMMMDDDDDDMMMMMMMMMDDDDDDMMMMODDODSSSD ",
196
+ " OKKKKODDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODDOKKKKO ",
197
+ " KKKKODDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODDOOKKK ",
198
+ " KKKOODDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODDOOKKK ",
199
+ " DDOMMMMDDDDDDDDDDDDDDDDDDDDDMMMMODD ",
200
+ " DDOMMMMDDDDDDDDDDDDDDDDDDDDDMMMMODD ",
201
+ " DDOMMMMDDDDDDDDDDDDDDDDDDDDDMMMMODD ",
202
+ " DDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODD ",
203
+ " DDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODD ",
204
+ " DDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODD ",
205
+ " DDDOOOOOOOOOOOOOOOOOOOOOOOOOOOOOKDD ",
206
+ " DDDDDDDDDDDDDDDDDDDDDDDDDDDDDKDDDDD ",
207
+ " DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD ",
208
+ " OOOOOOOOOOO ",
209
+ " OODDDDDKKOO ",
210
+ " DSMMMMMMSDD ",
211
+ " OOOOOOOOOOO ",
212
+ " KDSMMMMMESSKK ",
213
+ " MMMMMMSSKOOKDSMMMMMSSSDKOODSEMMMMMM ",
214
+ " SSSSDO MMMMMMSSKKOOOOOOOOOOOOOOOOOKSSSMMMMMM ODSSSS ",
215
+ " EEESSSSOOLLLLMMMMMESSSSSSSSSSSSSSSSSSSSMMMMMLLLLOOSSSSMME ",
216
+ " SMMSSSSKOEELLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLEEOOSSSSEMS ",
217
+ " DSSSSSSSOOSEEKSMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMSOEEDOOSSSSSSSK ",
218
+ " DSSSSSSDOOSEOSKEMMMMMMMMMMMMMMMMMMMMMMMMMMMMMEOSDEDOODSSSSSSK ",
219
+ " KSSSSSSKOODSSOSEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEESOEEDOOKSSSSSSK ",
220
+ " DKSSSSKKOODSMEEMLLLLLLLLLLLLLLLLLLLLLLLLLLLLLMSEMSDOOKKSSSSDK ",
221
+ " OKDDKDKKOOKSMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMSKOOKKKKKKKO ",
222
+ " OOOOOKKKOOKSMMMMESSSSSSSSSSSSSMMMMEEEEEESSSSEMMMMSKOOKKKOOOOO ",
223
+ " OOOOOOKKOOKSMMMSSKKKKKKKKKKKKKKMMMDKOOOOOOOODDMMMSKOOKKOOOOOO ",
224
+ " OKSSKOOOOOKSMMMKKMLLLLLLLLLLLMKMMMDDSSSSSSSSDDMMMSKOOOOODSSKO ",
225
+ " SDOKKK KSMMMKDLLLLLLLLLLLLLKMMMKDKKKDDKKKDKMMMSK KKKKDS ",
226
+ " DMLLMKO KSMMMKDLLLLLLLLLLLLLKMMMDDDDDDDDDSKDMMMSK ODMLLMD ",
227
+ " DELLMSD KSMMMKKMLLLLLLLLLLLLKMMMDKKKKKKKKKDDMMMSK DSMLLEO ",
228
+ " KSKKKKDO KSMMMEDDDDKKDDDKKKDKSMMMDDDDDDDDDSDDMMMSK ODDKKKSK ",
229
+ " EMLLMDO KSMMMMLLLLLLLLLLLLLLLMMMDOOOOOOOOODDMMMSK ODMLLME ",
230
+ " KMLLMSD KSMMMMMMMMMMMMMMMMMMMMMMDDSSDDSSSSDDMMMSK SSMLLEK ",
231
+ " KSKKKKSO KSMMMMMOOMMOOMKOEMOOMMMMDOOOOOOOOODDMMMSK OSKKKKSO ",
232
+ " SMLLMDO KSMMMMMKKMMKKMDKEMKKMMMMKDDDDSSSSDDDMMMSK ODMLLMS ",
233
+ " SMMMMSD KSMMMMMEEMMEEMEEMMEEMMMMDSOOOOOOOODDMMSSK DSMMMMD ",
234
+ " OOOOOOO KSSMMMMMMMMMMMMMMMMMMMMMDDDDDDDDDDDDMSSSK OOOOOOO ",
235
+ " KSMLLLMMSKO KSSSSMMMMMMMMMMMMMMMMMMMSOOOOOOOOOOSSSSSK OKSMLLLLMSO ",
236
+ " DSMMMEEESKK KSSKSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSOSSK KDSMMMMMESD ",
237
+ " DSMMMMMESKK KSOOKSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSOOKSK KKSMMMMMMSD ",
238
+ " DSMMMMMESKK OKSKSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSDSKO KDSMMMMMMSD ",
239
+ " KDDDDDDDDKK KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK KKDDDDDDDDO ",
240
+ " OOOOOOOOOOO OOOOOOOOO OOOOOOOOO OOOOOOOOOOO ",
241
+ "DSDO OSSO ODKKKKKKK OKKKKKKKO KEDO ODEK",
242
+ "SMDO OSMD KDSSSSSSK KDSSSSSKO SMDO ODMS",
243
+ "DEKO OOED OOKKKOOO OOOKKOOO SSOO OKMS",
244
+ "DEKO OOED SEMMMMSK OSMMMMED SSKO OKES",
245
+ "DSSO OESK SEMMMMSK OSMMMMED KSSO OSSK",
246
+ "KSMS EEDO OOKKKKKO OOKKKKKO OSEE EMSO",
247
+ " DSS SSK OSEEESDO ODSEEESO KSS SSD ",
248
+ " OOO OO SEMMMMSK OSMMMMED OO OOO ",
249
+ " KSSSSSDO OKSSESSK ",
250
+ " DKKDDDDDDKKDK KDKDDDDDDDKDK ",
251
+ " SSMLLMMMMMMLMSK DSSMMMMMMMLLMSS ",
252
+ " SMLMMMMMMMMLLED SEMMMMMMMMMMLMS ",
253
+ " DMMMMMMMMMMMMMMD SMMMMMMMMMMMMMSK ",
254
+ " ODSSSSSSSSSSSSSSDO ODSSSSSSSSSSSSSSKO ",
255
+ " OOOOOOOOOOOOOOOOO OOOOOOOOOOOOOOOOO ",
256
+ " OKSSSSSSSSSSSSSSK KSSSSSSSSSSSSSSKO ",
257
+ " OKDDDDDDDDDDDDDDK KDDDDDDDDDDDDDDOO "
199
258
  ];
200
- var ROBOT_HEAD = ROBOT.slice(0, 13);
259
+ var HEAD = ROBOT.slice(0, 37);
201
260
  // packages/core/src/audit.ts
202
261
  var AUDIT_TYPES = new Set([
203
262
  "session.started",
package/dist/swarmd.js CHANGED
@@ -731,36 +731,95 @@ function normalizeHook(event, raw, projectId, ts = new Date().toISOString()) {
731
731
  }
732
732
  // packages/core/src/art.ts
733
733
  var ROBOT = [
734
- " g g ",
735
- " X X ",
736
- " X X ",
737
- " ddddddddddddd ",
738
- " dXXXXXXXXXXXd ",
739
- " dggXXXXXXXXXd ",
740
- " dddXXddXXXddXXddd ",
741
- " dddXXddXXXddXXddd ",
742
- " dddXXXXXXXXXXXddd ",
743
- " dddXXdddddddXXddd ",
744
- " dXXXXXXXXXXXd ",
745
- " dXXXXXXXXXXXd ",
746
- " ddddddddddddd ",
747
- " XXX ",
748
- " ddddd ",
749
- " ddddddddddd ",
750
- " dXXdggXXXXXXXdXXd ",
751
- " dXXdXggggXddddXXd ",
752
- " dXXdXggggXXXXdXXd ",
753
- " dXXdXXXXXXddddXXd ",
754
- " dXXdXXXXXXXXXdXXd ",
755
- " dXXdXdddXXXXXdXXd ",
756
- " ddddXXXXXXXXXdddd ",
757
- " ddddddddddd ",
758
- " XX XX ",
759
- " XX XX ",
760
- " XXXX XXXX ",
761
- " dddd dddd "
734
+ " MM MM ",
735
+ " LL LL ",
736
+ " LL LL ",
737
+ " LM MM ",
738
+ " MD MS ",
739
+ " LE LE ",
740
+ " ME ME ",
741
+ " MS MS ",
742
+ " KK KK ",
743
+ " SSDDDSDDDDDDDDDDDDDDDDDDDDDDDDDDDDS ",
744
+ " SSDSDDDDDDDDDDDDDDDDDDDDDDDDDDDDDSS ",
745
+ " SSDOOOOOOOOOOOOOOOOOOOOOOOOOOOOOKSS ",
746
+ " SSOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMOSS ",
747
+ " DDKMMLLLMLLMMMMMMMMMMMMMMMMMMMMMODD ",
748
+ " DDOMMLMMMMMMMMMMMMMMMMMMMMMMMMMMODD ",
749
+ " SSSSODDOMMLMMMMMMMMMMMMMMMMMMMMMMMMMMODDOSSSS ",
750
+ " SSSSODDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODDOSSSS ",
751
+ " SMMMMODDOMMLMMMMMMMMMMMMMMMMMMMMMMMMMMODDOSMMMS ",
752
+ " DMSSSODDOMMMMOOOOOOMMMMMMMMMOOOOOOMMMMODDOSSSED ",
753
+ " DSSSSODDOMMMMODDDDDMMMMMMMMMODDDDDMMMMODDOSSSSK ",
754
+ " DSMMSODDOMMMMDDDDDDMMMMMMMMMKDDDDDMMMMODDOSMMSK ",
755
+ " DSSSSODDOMMMMDDDDDDMMMMMMMMMDDDDDDMMMMODDOSSSSK ",
756
+ " DSSSSODDOMMMMDDDDDDMMMMMMMMMDDDDDDMMMMODDODSSSK ",
757
+ " DSSSSODDOMMMMDDDDDDMMMMMMMMMDDDDDDMMMMODDODSSSK ",
758
+ " DSSSKODDOMMMMDDDDDDMMMMMMMMMDDDDDDMMMMODDODSSSD ",
759
+ " OKKKKODDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODDOKKKKO ",
760
+ " KKKKODDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODDOOKKK ",
761
+ " KKKOODDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODDOOKKK ",
762
+ " DDOMMMMDDDDDDDDDDDDDDDDDDDDDMMMMODD ",
763
+ " DDOMMMMDDDDDDDDDDDDDDDDDDDDDMMMMODD ",
764
+ " DDOMMMMDDDDDDDDDDDDDDDDDDDDDMMMMODD ",
765
+ " DDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODD ",
766
+ " DDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODD ",
767
+ " DDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODD ",
768
+ " DDDOOOOOOOOOOOOOOOOOOOOOOOOOOOOOKDD ",
769
+ " DDDDDDDDDDDDDDDDDDDDDDDDDDDDDKDDDDD ",
770
+ " DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD ",
771
+ " OOOOOOOOOOO ",
772
+ " OODDDDDKKOO ",
773
+ " DSMMMMMMSDD ",
774
+ " OOOOOOOOOOO ",
775
+ " KDSMMMMMESSKK ",
776
+ " MMMMMMSSKOOKDSMMMMMSSSDKOODSEMMMMMM ",
777
+ " SSSSDO MMMMMMSSKKOOOOOOOOOOOOOOOOOKSSSMMMMMM ODSSSS ",
778
+ " EEESSSSOOLLLLMMMMMESSSSSSSSSSSSSSSSSSSSMMMMMLLLLOOSSSSMME ",
779
+ " SMMSSSSKOEELLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLEEOOSSSSEMS ",
780
+ " DSSSSSSSOOSEEKSMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMSOEEDOOSSSSSSSK ",
781
+ " DSSSSSSDOOSEOSKEMMMMMMMMMMMMMMMMMMMMMMMMMMMMMEOSDEDOODSSSSSSK ",
782
+ " KSSSSSSKOODSSOSEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEESOEEDOOKSSSSSSK ",
783
+ " DKSSSSKKOODSMEEMLLLLLLLLLLLLLLLLLLLLLLLLLLLLLMSEMSDOOKKSSSSDK ",
784
+ " OKDDKDKKOOKSMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMSKOOKKKKKKKO ",
785
+ " OOOOOKKKOOKSMMMMESSSSSSSSSSSSSMMMMEEEEEESSSSEMMMMSKOOKKKOOOOO ",
786
+ " OOOOOOKKOOKSMMMSSKKKKKKKKKKKKKKMMMDKOOOOOOOODDMMMSKOOKKOOOOOO ",
787
+ " OKSSKOOOOOKSMMMKKMLLLLLLLLLLLMKMMMDDSSSSSSSSDDMMMSKOOOOODSSKO ",
788
+ " SDOKKK KSMMMKDLLLLLLLLLLLLLKMMMKDKKKDDKKKDKMMMSK KKKKDS ",
789
+ " DMLLMKO KSMMMKDLLLLLLLLLLLLLKMMMDDDDDDDDDSKDMMMSK ODMLLMD ",
790
+ " DELLMSD KSMMMKKMLLLLLLLLLLLLKMMMDKKKKKKKKKDDMMMSK DSMLLEO ",
791
+ " KSKKKKDO KSMMMEDDDDKKDDDKKKDKSMMMDDDDDDDDDSDDMMMSK ODDKKKSK ",
792
+ " EMLLMDO KSMMMMLLLLLLLLLLLLLLLMMMDOOOOOOOOODDMMMSK ODMLLME ",
793
+ " KMLLMSD KSMMMMMMMMMMMMMMMMMMMMMMDDSSDDSSSSDDMMMSK SSMLLEK ",
794
+ " KSKKKKSO KSMMMMMOOMMOOMKOEMOOMMMMDOOOOOOOOODDMMMSK OSKKKKSO ",
795
+ " SMLLMDO KSMMMMMKKMMKKMDKEMKKMMMMKDDDDSSSSDDDMMMSK ODMLLMS ",
796
+ " SMMMMSD KSMMMMMEEMMEEMEEMMEEMMMMDSOOOOOOOODDMMSSK DSMMMMD ",
797
+ " OOOOOOO KSSMMMMMMMMMMMMMMMMMMMMMDDDDDDDDDDDDMSSSK OOOOOOO ",
798
+ " KSMLLLMMSKO KSSSSMMMMMMMMMMMMMMMMMMMSOOOOOOOOOOSSSSSK OKSMLLLLMSO ",
799
+ " DSMMMEEESKK KSSKSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSOSSK KDSMMMMMESD ",
800
+ " DSMMMMMESKK KSOOKSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSOOKSK KKSMMMMMMSD ",
801
+ " DSMMMMMESKK OKSKSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSDSKO KDSMMMMMMSD ",
802
+ " KDDDDDDDDKK KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK KKDDDDDDDDO ",
803
+ " OOOOOOOOOOO OOOOOOOOO OOOOOOOOO OOOOOOOOOOO ",
804
+ "DSDO OSSO ODKKKKKKK OKKKKKKKO KEDO ODEK",
805
+ "SMDO OSMD KDSSSSSSK KDSSSSSKO SMDO ODMS",
806
+ "DEKO OOED OOKKKOOO OOOKKOOO SSOO OKMS",
807
+ "DEKO OOED SEMMMMSK OSMMMMED SSKO OKES",
808
+ "DSSO OESK SEMMMMSK OSMMMMED KSSO OSSK",
809
+ "KSMS EEDO OOKKKKKO OOKKKKKO OSEE EMSO",
810
+ " DSS SSK OSEEESDO ODSEEESO KSS SSD ",
811
+ " OOO OO SEMMMMSK OSMMMMED OO OOO ",
812
+ " KSSSSSDO OKSSESSK ",
813
+ " DKKDDDDDDKKDK KDKDDDDDDDKDK ",
814
+ " SSMLLMMMMMMLMSK DSSMMMMMMMLLMSS ",
815
+ " SMLMMMMMMMMLLED SEMMMMMMMMMMLMS ",
816
+ " DMMMMMMMMMMMMMMD SMMMMMMMMMMMMMSK ",
817
+ " ODSSSSSSSSSSSSSSDO ODSSSSSSSSSSSSSSKO ",
818
+ " OOOOOOOOOOOOOOOOO OOOOOOOOOOOOOOOOO ",
819
+ " OKSSSSSSSSSSSSSSK KSSSSSSSSSSSSSSKO ",
820
+ " OKDDDDDDDDDDDDDDK KDDDDDDDDDDDDDDOO "
762
821
  ];
763
- var ROBOT_HEAD = ROBOT.slice(0, 13);
822
+ var HEAD = ROBOT.slice(0, 37);
764
823
  // packages/core/src/audit.ts
765
824
  var AUDIT_TYPES = new Set([
766
825
  "session.started",
@@ -11061,7 +11120,7 @@ class WorkflowEngine {
11061
11120
  }
11062
11121
 
11063
11122
  // packages/daemon/src/app.ts
11064
- var VERSION = "0.11.1";
11123
+ var VERSION = "0.11.3";
11065
11124
  var WEB_DIR = (() => {
11066
11125
  if (process.env.SWARM_WEB_DIR)
11067
11126
  return process.env.SWARM_WEB_DIR;
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@ra3orblade/swarm",
3
- "version": "0.11.1",
3
+ "version": "0.11.3",
4
4
  "description": "Local-first control plane for AI-agent development: watch every Claude Code / Codex / Grok session on your machine, ledger tasks and worktrees, enforce rules as hook denials.",
5
5
  "license": "Apache-2.0",
6
6
  "type": "module",
package/web/app.js CHANGED
@@ -108,13 +108,18 @@ const ic = (name, size = 14, cls = "") => (window.icon ? window.icon(name, size,
108
108
  const kindIcon = (s) => ic(s.kind === "subagent" ? "tree-structure" : s.kind === "spawned" ? "play" : "keyboard", 13, "kind");
109
109
  // pixel-art illustrations for empty states (crispEdges, theme-green; won't clash with icon packs)
110
110
  function pixmap(rows, cell = 6) {
111
- // All three tones are derived from the accent, so they are guaranteed to separate in either
112
- // theme. The old palette used --c4 for the shade, whose luminance in light mode (0.158) is
111
+ // Every tone is derived from the accent, so they are guaranteed to separate in either theme.
112
+ // An earlier palette used --c4 for the shade, whose luminance in light mode (0.158) is
113
113
  // indistinguishable from --acc's (0.160) — the outline simply vanished into the face.
114
+ // Keep in step with ART_THEME in core/src/art.ts; art.test.ts asserts they match.
114
115
  const C = {
115
- X: "var(--acc)",
116
- g: "color-mix(in srgb, var(--acc) 45%, white)",
117
- d: "color-mix(in srgb, var(--acc) 58%, black)",
116
+ O: "color-mix(in srgb, var(--acc) 40%, black)",
117
+ K: "color-mix(in srgb, var(--acc) 51%, black)",
118
+ D: "color-mix(in srgb, var(--acc) 58%, black)",
119
+ S: "color-mix(in srgb, var(--acc) 71%, black)",
120
+ E: "color-mix(in srgb, var(--acc) 84%, black)",
121
+ M: "var(--acc)",
122
+ L: "color-mix(in srgb, var(--acc) 52%, white)",
118
123
  };
119
124
  const w = Math.max(...rows.map((r) => r.length)) * cell;
120
125
  const h = rows.length * cell;
@@ -128,62 +133,123 @@ function pixmap(rows, cell = 6) {
128
133
  return `<svg class="px" width="${w}" height="${h}" viewBox="0 0 ${w} ${h}" shape-rendering="crispEdges" xmlns="http://www.w3.org/2000/svg">${r}</svg>`;
129
134
  }
130
135
  const PX = {
131
- // The palette carries three tones (accent / light / dark) and this used one, which is why it
132
- // read as a flat blob. Outline, ear modules and features in `d`; face and body in `X`; antenna
133
- // tips and the chest light in `g`. The body tapers rather than sitting under the head as a slab.
136
+ // Inline copy of ROBOT in core/src/art.ts — app.js is a plain script and cannot import from
137
+ // core, so art.test.ts asserts the two are byte-identical rather than trusting anyone to
138
+ // remember. Edit the drawing there and re-run `bun tools/icons.ts`, never edit it here.
134
139
  idle: () =>
135
140
  pixmap(
136
141
  [
137
- " g g ",
138
- " X X ",
139
- " X X ",
140
- " ddddddddddddd ",
141
- " dXXXXXXXXXXXd ",
142
- " dggXXXXXXXXXd ",
143
- " dddXXddXXXddXXddd ",
144
- " dddXXddXXXddXXddd ",
145
- " dddXXXXXXXXXXXddd ",
146
- " dddXXdddddddXXddd ",
147
- " dXXXXXXXXXXXd ",
148
- " dXXXXXXXXXXXd ",
149
- " ddddddddddddd ",
150
- " XXX ",
151
- " ddddd ",
152
- " ddddddddddd ",
153
- " dXXdggXXXXXXXdXXd ",
154
- " dXXdXggggXddddXXd ",
155
- " dXXdXggggXXXXdXXd ",
156
- " dXXdXXXXXXddddXXd ",
157
- " dXXdXXXXXXXXXdXXd ",
158
- " dXXdXdddXXXXXdXXd ",
159
- " ddddXXXXXXXXXdddd ",
160
- " ddddddddddd ",
161
- " XX XX ",
162
- " XX XX ",
163
- " XXXX XXXX ",
164
- " dddd dddd ",
142
+ " MM MM ",
143
+ " LL LL ",
144
+ " LL LL ",
145
+ " LM MM ",
146
+ " MD MS ",
147
+ " LE LE ",
148
+ " ME ME ",
149
+ " MS MS ",
150
+ " KK KK ",
151
+ " SSDDDSDDDDDDDDDDDDDDDDDDDDDDDDDDDDS ",
152
+ " SSDSDDDDDDDDDDDDDDDDDDDDDDDDDDDDDSS ",
153
+ " SSDOOOOOOOOOOOOOOOOOOOOOOOOOOOOOKSS ",
154
+ " SSOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMOSS ",
155
+ " DDKMMLLLMLLMMMMMMMMMMMMMMMMMMMMMODD ",
156
+ " DDOMMLMMMMMMMMMMMMMMMMMMMMMMMMMMODD ",
157
+ " SSSSODDOMMLMMMMMMMMMMMMMMMMMMMMMMMMMMODDOSSSS ",
158
+ " SSSSODDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODDOSSSS ",
159
+ " SMMMMODDOMMLMMMMMMMMMMMMMMMMMMMMMMMMMMODDOSMMMS ",
160
+ " DMSSSODDOMMMMOOOOOOMMMMMMMMMOOOOOOMMMMODDOSSSED ",
161
+ " DSSSSODDOMMMMODDDDDMMMMMMMMMODDDDDMMMMODDOSSSSK ",
162
+ " DSMMSODDOMMMMDDDDDDMMMMMMMMMKDDDDDMMMMODDOSMMSK ",
163
+ " DSSSSODDOMMMMDDDDDDMMMMMMMMMDDDDDDMMMMODDOSSSSK ",
164
+ " DSSSSODDOMMMMDDDDDDMMMMMMMMMDDDDDDMMMMODDODSSSK ",
165
+ " DSSSSODDOMMMMDDDDDDMMMMMMMMMDDDDDDMMMMODDODSSSK ",
166
+ " DSSSKODDOMMMMDDDDDDMMMMMMMMMDDDDDDMMMMODDODSSSD ",
167
+ " OKKKKODDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODDOKKKKO ",
168
+ " KKKKODDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODDOOKKK ",
169
+ " KKKOODDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODDOOKKK ",
170
+ " DDOMMMMDDDDDDDDDDDDDDDDDDDDDMMMMODD ",
171
+ " DDOMMMMDDDDDDDDDDDDDDDDDDDDDMMMMODD ",
172
+ " DDOMMMMDDDDDDDDDDDDDDDDDDDDDMMMMODD ",
173
+ " DDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODD ",
174
+ " DDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODD ",
175
+ " DDOMMMMMMMMMMMMMMMMMMMMMMMMMMMMMODD ",
176
+ " DDDOOOOOOOOOOOOOOOOOOOOOOOOOOOOOKDD ",
177
+ " DDDDDDDDDDDDDDDDDDDDDDDDDDDDDKDDDDD ",
178
+ " DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD ",
179
+ " OOOOOOOOOOO ",
180
+ " OODDDDDKKOO ",
181
+ " DSMMMMMMSDD ",
182
+ " OOOOOOOOOOO ",
183
+ " KDSMMMMMESSKK ",
184
+ " MMMMMMSSKOOKDSMMMMMSSSDKOODSEMMMMMM ",
185
+ " SSSSDO MMMMMMSSKKOOOOOOOOOOOOOOOOOKSSSMMMMMM ODSSSS ",
186
+ " EEESSSSOOLLLLMMMMMESSSSSSSSSSSSSSSSSSSSMMMMMLLLLOOSSSSMME ",
187
+ " SMMSSSSKOEELLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLEEOOSSSSEMS ",
188
+ " DSSSSSSSOOSEEKSMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMSOEEDOOSSSSSSSK ",
189
+ " DSSSSSSDOOSEOSKEMMMMMMMMMMMMMMMMMMMMMMMMMMMMMEOSDEDOODSSSSSSK ",
190
+ " KSSSSSSKOODSSOSEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEESOEEDOOKSSSSSSK ",
191
+ " DKSSSSKKOODSMEEMLLLLLLLLLLLLLLLLLLLLLLLLLLLLLMSEMSDOOKKSSSSDK ",
192
+ " OKDDKDKKOOKSMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMSKOOKKKKKKKO ",
193
+ " OOOOOKKKOOKSMMMMESSSSSSSSSSSSSMMMMEEEEEESSSSEMMMMSKOOKKKOOOOO ",
194
+ " OOOOOOKKOOKSMMMSSKKKKKKKKKKKKKKMMMDKOOOOOOOODDMMMSKOOKKOOOOOO ",
195
+ " OKSSKOOOOOKSMMMKKMLLLLLLLLLLLMKMMMDDSSSSSSSSDDMMMSKOOOOODSSKO ",
196
+ " SDOKKK KSMMMKDLLLLLLLLLLLLLKMMMKDKKKDDKKKDKMMMSK KKKKDS ",
197
+ " DMLLMKO KSMMMKDLLLLLLLLLLLLLKMMMDDDDDDDDDSKDMMMSK ODMLLMD ",
198
+ " DELLMSD KSMMMKKMLLLLLLLLLLLLKMMMDKKKKKKKKKDDMMMSK DSMLLEO ",
199
+ " KSKKKKDO KSMMMEDDDDKKDDDKKKDKSMMMDDDDDDDDDSDDMMMSK ODDKKKSK ",
200
+ " EMLLMDO KSMMMMLLLLLLLLLLLLLLLMMMDOOOOOOOOODDMMMSK ODMLLME ",
201
+ " KMLLMSD KSMMMMMMMMMMMMMMMMMMMMMMDDSSDDSSSSDDMMMSK SSMLLEK ",
202
+ " KSKKKKSO KSMMMMMOOMMOOMKOEMOOMMMMDOOOOOOOOODDMMMSK OSKKKKSO ",
203
+ " SMLLMDO KSMMMMMKKMMKKMDKEMKKMMMMKDDDDSSSSDDDMMMSK ODMLLMS ",
204
+ " SMMMMSD KSMMMMMEEMMEEMEEMMEEMMMMDSOOOOOOOODDMMSSK DSMMMMD ",
205
+ " OOOOOOO KSSMMMMMMMMMMMMMMMMMMMMMDDDDDDDDDDDDMSSSK OOOOOOO ",
206
+ " KSMLLLMMSKO KSSSSMMMMMMMMMMMMMMMMMMMSOOOOOOOOOOSSSSSK OKSMLLLLMSO ",
207
+ " DSMMMEEESKK KSSKSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSOSSK KDSMMMMMESD ",
208
+ " DSMMMMMESKK KSOOKSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSOOKSK KKSMMMMMMSD ",
209
+ " DSMMMMMESKK OKSKSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSDSKO KDSMMMMMMSD ",
210
+ " KDDDDDDDDKK KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK KKDDDDDDDDO ",
211
+ " OOOOOOOOOOO OOOOOOOOO OOOOOOOOO OOOOOOOOOOO ",
212
+ "DSDO OSSO ODKKKKKKK OKKKKKKKO KEDO ODEK",
213
+ "SMDO OSMD KDSSSSSSK KDSSSSSKO SMDO ODMS",
214
+ "DEKO OOED OOKKKOOO OOOKKOOO SSOO OKMS",
215
+ "DEKO OOED SEMMMMSK OSMMMMED SSKO OKES",
216
+ "DSSO OESK SEMMMMSK OSMMMMED KSSO OSSK",
217
+ "KSMS EEDO OOKKKKKO OOKKKKKO OSEE EMSO",
218
+ " DSS SSK OSEEESDO ODSEEESO KSS SSD ",
219
+ " OOO OO SEMMMMSK OSMMMMED OO OOO ",
220
+ " KSSSSSDO OKSSESSK ",
221
+ " DKKDDDDDDKKDK KDKDDDDDDDKDK ",
222
+ " SSMLLMMMMMMLMSK DSSMMMMMMMLLMSS ",
223
+ " SMLMMMMMMMMLLED SEMMMMMMMMMMLMS ",
224
+ " DMMMMMMMMMMMMMMD SMMMMMMMMMMMMMSK ",
225
+ " ODSSSSSSSSSSSSSSDO ODSSSSSSSSSSSSSSKO ",
226
+ " OOOOOOOOOOOOOOOOO OOOOOOOOOOOOOOOOO ",
227
+ " OKSSSSSSSSSSSSSSK KSSSSSSSSSSSSSSKO ",
228
+ " OKDDDDDDDDDDDDDDK KDDDDDDDDDDDDDDOO ",
165
229
  ],
166
- 4,
230
+ // 1px a cell: the drawing is 73 cells wide now, and at the old 4 it would be a 292px
231
+ // illustration in a box that used to hold 92.
232
+ 1,
167
233
  ),
168
234
  folder: () => pixmap([
169
- " XXXX ",
170
- "XXXXXXXXXX",
171
- "XggggggggX",
172
- "XggggggggX",
173
- "XggggggggX",
174
- "XggggggggX",
175
- "XXXXXXXXXX",
235
+ " MMMM ",
236
+ "MMMMMMMMMM",
237
+ "MLLLLLLLLM",
238
+ "MLLLLLLLLM",
239
+ "MLLLLLLLLM",
240
+ "MLLLLLLLLM",
241
+ "MMMMMMMMMM",
176
242
  ]),
177
243
  clock: () => pixmap([
178
- " XXXXX ",
179
- " X X ",
180
- "X X X",
181
- "X X X",
182
- "X XXX X",
183
- "X X",
184
- "X X",
185
- " X X ",
186
- " XXXXX ",
244
+ " MMMMM ",
245
+ " M M ",
246
+ "M M M",
247
+ "M M M",
248
+ "M MMM M",
249
+ "M M",
250
+ "M M",
251
+ " M M ",
252
+ " MMMMM ",
187
253
  ]),
188
254
  };
189
255
  // static <i data-icon> placeholders in index.html → inline SVG
package/web/index.html CHANGED
@@ -665,7 +665,7 @@
665
665
  <body>
666
666
  <header>
667
667
  <button class="icon-btn" id="sbToggle" title="Toggle sidebar" aria-label="Toggle sidebar"><i data-icon="arrow-bar-left"></i></button>
668
- <span class="logo"><svg viewBox="0 0 17 13" shape-rendering="crispEdges" xmlns="http://www.w3.org/2000/svg" aria-hidden="true"><rect x="4" y="0" width="1" height="1" fill="color-mix(in srgb, var(--acc) 45%, white)"/><rect x="12" y="0" width="1" height="1" fill="color-mix(in srgb, var(--acc) 45%, white)"/><rect x="4" y="1" width="1" height="1" fill="var(--acc)"/><rect x="12" y="1" width="1" height="1" fill="var(--acc)"/><rect x="4" y="2" width="1" height="1" fill="var(--acc)"/><rect x="12" y="2" width="1" height="1" fill="var(--acc)"/><rect x="2" y="3" width="13" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="2" y="4" width="1" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="3" y="4" width="11" height="1" fill="var(--acc)"/><rect x="14" y="4" width="1" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="2" y="5" width="1" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="3" y="5" width="2" height="1" fill="color-mix(in srgb, var(--acc) 45%, white)"/><rect x="5" y="5" width="9" height="1" fill="var(--acc)"/><rect x="14" y="5" width="1" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="0" y="6" width="3" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="3" y="6" width="2" height="1" fill="var(--acc)"/><rect x="5" y="6" width="2" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="7" y="6" width="3" height="1" fill="var(--acc)"/><rect x="10" y="6" width="2" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="12" y="6" width="2" height="1" fill="var(--acc)"/><rect x="14" y="6" width="3" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="0" y="7" width="3" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="3" y="7" width="2" height="1" fill="var(--acc)"/><rect x="5" y="7" width="2" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="7" y="7" width="3" height="1" fill="var(--acc)"/><rect x="10" y="7" width="2" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="12" y="7" width="2" height="1" fill="var(--acc)"/><rect x="14" y="7" width="3" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="0" y="8" width="3" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="3" y="8" width="11" height="1" fill="var(--acc)"/><rect x="14" y="8" width="3" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="0" y="9" width="3" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="3" y="9" width="2" height="1" fill="var(--acc)"/><rect x="5" y="9" width="7" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="12" y="9" width="2" height="1" fill="var(--acc)"/><rect x="14" y="9" width="3" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="2" y="10" width="1" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="3" y="10" width="11" height="1" fill="var(--acc)"/><rect x="14" y="10" width="1" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="2" y="11" width="1" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="3" y="11" width="11" height="1" fill="var(--acc)"/><rect x="14" y="11" width="1" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="2" y="12" width="13" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/></svg>Swarm</span>
668
+ <span class="logo"><svg viewBox="0 0 12 12" shape-rendering="crispEdges" xmlns="http://www.w3.org/2000/svg" aria-hidden="true"><rect x="3" y="0" width="1" height="1" fill="color-mix(in srgb, var(--acc) 52%, white)"/><rect x="8" y="0" width="1" height="1" fill="color-mix(in srgb, var(--acc) 52%, white)"/><rect x="3" y="1" width="1" height="1" fill="var(--acc)"/><rect x="8" y="1" width="1" height="1" fill="var(--acc)"/><rect x="1" y="2" width="10" height="1" fill="color-mix(in srgb, var(--acc) 40%, black)"/><rect x="1" y="3" width="1" height="1" fill="color-mix(in srgb, var(--acc) 40%, black)"/><rect x="2" y="3" width="8" height="1" fill="var(--acc)"/><rect x="10" y="3" width="1" height="1" fill="color-mix(in srgb, var(--acc) 40%, black)"/><rect x="1" y="4" width="1" height="1" fill="color-mix(in srgb, var(--acc) 40%, black)"/><rect x="2" y="4" width="1" height="1" fill="color-mix(in srgb, var(--acc) 84%, black)"/><rect x="3" y="4" width="6" height="1" fill="color-mix(in srgb, var(--acc) 52%, white)"/><rect x="9" y="4" width="1" height="1" fill="color-mix(in srgb, var(--acc) 84%, black)"/><rect x="10" y="4" width="1" height="1" fill="color-mix(in srgb, var(--acc) 40%, black)"/><rect x="1" y="5" width="1" height="1" fill="color-mix(in srgb, var(--acc) 40%, black)"/><rect x="2" y="5" width="1" height="1" fill="color-mix(in srgb, var(--acc) 84%, black)"/><rect x="3" y="5" width="6" height="1" fill="var(--acc)"/><rect x="9" y="5" width="1" height="1" fill="color-mix(in srgb, var(--acc) 84%, black)"/><rect x="10" y="5" width="1" height="1" fill="color-mix(in srgb, var(--acc) 40%, black)"/><rect x="0" y="6" width="1" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="1" y="6" width="1" height="1" fill="color-mix(in srgb, var(--acc) 40%, black)"/><rect x="2" y="6" width="1" height="1" fill="color-mix(in srgb, var(--acc) 84%, black)"/><rect x="3" y="6" width="2" height="1" fill="color-mix(in srgb, var(--acc) 71%, black)"/><rect x="5" y="6" width="2" height="1" fill="var(--acc)"/><rect x="7" y="6" width="2" height="1" fill="color-mix(in srgb, var(--acc) 71%, black)"/><rect x="9" y="6" width="1" height="1" fill="color-mix(in srgb, var(--acc) 84%, black)"/><rect x="10" y="6" width="1" height="1" fill="color-mix(in srgb, var(--acc) 40%, black)"/><rect x="11" y="6" width="1" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="0" y="7" width="1" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="1" y="7" width="1" height="1" fill="color-mix(in srgb, var(--acc) 40%, black)"/><rect x="2" y="7" width="1" height="1" fill="color-mix(in srgb, var(--acc) 84%, black)"/><rect x="3" y="7" width="2" height="1" fill="color-mix(in srgb, var(--acc) 71%, black)"/><rect x="5" y="7" width="2" height="1" fill="var(--acc)"/><rect x="7" y="7" width="2" height="1" fill="color-mix(in srgb, var(--acc) 71%, black)"/><rect x="9" y="7" width="1" height="1" fill="color-mix(in srgb, var(--acc) 84%, black)"/><rect x="10" y="7" width="1" height="1" fill="color-mix(in srgb, var(--acc) 40%, black)"/><rect x="11" y="7" width="1" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="0" y="8" width="1" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="1" y="8" width="1" height="1" fill="color-mix(in srgb, var(--acc) 40%, black)"/><rect x="2" y="8" width="1" height="1" fill="color-mix(in srgb, var(--acc) 84%, black)"/><rect x="3" y="8" width="6" height="1" fill="var(--acc)"/><rect x="9" y="8" width="1" height="1" fill="color-mix(in srgb, var(--acc) 84%, black)"/><rect x="10" y="8" width="1" height="1" fill="color-mix(in srgb, var(--acc) 40%, black)"/><rect x="11" y="8" width="1" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="1" y="9" width="1" height="1" fill="color-mix(in srgb, var(--acc) 40%, black)"/><rect x="2" y="9" width="1" height="1" fill="color-mix(in srgb, var(--acc) 84%, black)"/><rect x="3" y="9" width="1" height="1" fill="var(--acc)"/><rect x="4" y="9" width="4" height="1" fill="color-mix(in srgb, var(--acc) 71%, black)"/><rect x="8" y="9" width="1" height="1" fill="var(--acc)"/><rect x="9" y="9" width="1" height="1" fill="color-mix(in srgb, var(--acc) 84%, black)"/><rect x="10" y="9" width="1" height="1" fill="color-mix(in srgb, var(--acc) 40%, black)"/><rect x="1" y="10" width="1" height="1" fill="color-mix(in srgb, var(--acc) 40%, black)"/><rect x="2" y="10" width="8" height="1" fill="color-mix(in srgb, var(--acc) 58%, black)"/><rect x="10" y="10" width="1" height="1" fill="color-mix(in srgb, var(--acc) 40%, black)"/><rect x="1" y="11" width="10" height="1" fill="color-mix(in srgb, var(--acc) 40%, black)"/></svg>Swarm</span>
669
669
  <nav id="viewnav"></nav>
670
670
  <span class="sp"></span>
671
671
  <span id="today"></span>
package/web/release-notes.js CHANGED
@@ -1,2 +1,2 @@
1
1
  // generated by tools/build.ts from CHANGELOG.md
2
- window.RELEASE_NOTES = {"0.11.1":{"date":"2026-08-26","html":"<p>Mostly the look of the thing, plus one page that was genuinely slow.</p>\n<h4>Added</h4>\n<ul><li><b>The robot is the logo.</b> It replaces the abstract pixel glyph in the dashboard header, on the site, and in the favicons. The header mark also follows your theme now — it was hardcoded to one green and ignored light mode entirely.</li><li><b>Matrix rain in the hero.</b> Pixel columns falling at their own speeds, brightest at the leading edge, fading out of the middle so they never sit behind anything you have to read.</li></ul><h4>Fixed</h4>\n<ul><li><b>Provenance took nine seconds to open.</b> It was asking your forge about every project before drawing anything — on a machine with 21 of them that is 21 round trips, and whoever opened the page first every ten minutes paid for all of them. It now draws from what it already knows and lets the pull request state catch up a moment later, which took it from <b>8.9s to 0.7s</b>. It also pages 50 rows at a time instead of sending all 116.</li><li><b>The landing page read like documentation.</b> Config snippets, exit codes and words like \"fail-closed\" and \"orphaned\" in the middle of sentences meant to sell. Rewritten to say what the thing does for you; the syntax lives in the docs, where someone is looking for it.</li></ul>"},"0.11.0":{"date":"2026-08-26","html":"<p>Swarm could already tell you what your agents did. This release is about what it cost you — in money, in waiting around, in context burned re-reading the same file, and in work that shipped with nothing linking it back to a ticket.</p>\n<p>I pointed the new provenance view at my own machine and found 22 branches that had landed with no task behind them. One was a merged PR carrying $255 and 16 agent sessions. I had no idea it existed.</p>\n<h4>Added</h4>\n<ul><li><b>Waiting on you.</b> Agents spend real time stuck waiting for a human — a permission prompt, a question, a notification — and none of it was measured. Now it is. Fleet shows a <em>Waiting 12m</em> badge saying what's blocking, and Stats breaks it down by kind. If you close your laptop on a pending prompt, the clock stops when the session ended, not days later when you open it again.</li><li><b>Where your context goes.</b> A breakdown of what actually fills the window, by tool. The waste number is re-reads: read a file once and that's work, read it ten times and nine copies are just the cost of forgetting. One of my sessions had spent 11% of its window re-reading the same diff.</li><li><b>MCP server health.</b> Which servers are slow, which fail, and how long your agents sat waiting on each. Timing is measured between the hooks either side of a call, so a call stuck behind a permission prompt carries that wait too — which is why the view leads with p50 and p95 rather than the worst case.</li><li><b>Gate flakiness.</b> A gate is flaky when it gives <em>both</em> answers about the <em>same</em> task. Failing one task and passing another isn't flaky, that's the gate working. Gates now record how long they took, and old runs get their duration recovered from the text they used to hide it in.</li><li><b>Machine hygiene.</b> What your fleet left lying around: processes still holding a port after their session ended, dead entries in the registry, worktrees that merged days ago and still take up disk. It only offers to remove something the ledger itself would agree to remove, so nothing with uncommitted or unpushed work is ever on the list.</li><li><b>Session lineage.</b> Who spawned whom, who messaged whom, who picked up whose task — as a graph. When one session has 37 subagents they collapse into a single pill you can click open, because 37 lines fanning across the screen is a mess, not a picture.</li><li><b>Provenance.</b> Follow any piece of work backwards: ticket, claim, session, branch, pull request, merge. Six dots per row, filled up to the point the trail goes cold. It reads the chain from both ends, which is how it finds work that shipped with no ticket at all.</li><li><b>A/B trials.</b> Give one task to several models at once and see what each produced: cost, wall time, gates, how much they changed. A model only wins if it finished <em>and</em> passed every gate — a cheap wrong answer isn't an answer. Each model works in its own worktree, so nothing about the claim rules had to be relaxed to run the experiment.</li><li><b>A robot.</b> The empty states have a proper one now, and its head is the site's logo and favicon. There's one drawing, shared, with a test that stops the two copies drifting apart.</li></ul><h4>Fixed</h4>\n<p>Mostly things that had been quietly wrong for a while:</p>\n<ul><li>Long branch names painted straight over the badge next to them.</li><li>The Board said 20 incidents while the Guard badge said 57. The Board was wrong — it was counting a 20-row window.</li><li>The header never told you which of the ten views you were looking at.</li><li>Opening a menu highlighted the row under your cursor in the same green as the row you were already on, so neither read as current.</li><li>Big numbers were truncated to things like <code>134….</code> in columns that had room for them.</li><li>The ⋯ button vanished the moment you clicked it, and the row jumped as it went.</li><li>Pixel art was nearly invisible in light mode — the outline and the face it sat on were the same brightness to within 0.002.</li><li>Replay resized itself on every step, so Prev/Next slid out from under the cursor mid-click.</li><li>The transcript gave 204px of every row to a timestamp and a label like <code>pretooluse</code>, which repeats on every line and tells you nothing.</li><li>After upgrading, your browser could quietly keep running the previous version's dashboard — the files were served with no cache headers at all. That's why \"What's New\" could greet a 0.11 upgrade with 0.10's notes: the notes bundle was a stale copy, and the lookup silently fell back to the newest release it happened to have instead of admitting it didn't have yours.</li></ul><h4>Notes</h4>\n<ul><li>The database upgrades itself on first start. <code>swarm doctor</code> will tell you the schema version.</li><li>This is 13 of the 18 planned observatory features. Security auditing, rule effectiveness and three more graphs are still to come.</li><li>Two things are deliberately missing rather than guessed: how many tokens your MCP schemas cost, and how much of the window the system prompt takes. Swarm can see tool calls but not schemas or the prompt itself, so it doesn't pretend to know.</li></ul>"},"0.10.0":{"date":"2026-08-24","html":"<p>The team release: Swarm outgrows one laptop. A self-hosted team daemon gives a group one view — machines, cluster-wide claims, spend by person — while every laptop stays local-first and keeps working offline. Two more agent brands land (six total), and the dashboard starts reading the fleet's behaviour, not just its numbers: outcomes, stalls, collisions.</p>\n<h4>Added</h4>\n<ul><li><b>Team daemon</b> — <code>swarm-teamd</code> (<code>packages/team</code>), a second, self-hosted service your machines <em>forward</em> to: audit events, spend rollups and claims — never transcript text unless a machine opts in, and always after your redaction rules. The local daemon queues everything in an outbox (batched, at-least-once, never on the hook path) and drains it when the team daemon is reachable; <code>swarm doctor</code> shows the lag. One SQLite file of state, TLS by reverse proxy, <a href=\"https://getswarm.vercel.app/docs/11-teams\" target=\"_blank\" rel=\"noopener\">guide</a> (M8.3). <em>Licensing: this one package is source-available (<a href=\"https://github.com/ra3orblade/swarm/blob/main/packages/team/LICENSE.md\" target=\"_blank\" rel=\"noopener\">FSL-1.1-ALv2</a>, Apache-2.0 after two years); everything else is and stays Apache-2.0 — one machine free, a second person is the product (OQ-15).</em></li><li><b><code>swarm login</code></b> — OIDC device-code sign-in against the team daemon (which is the OAuth client — your laptop never holds an OIDC credential; a static shared token or open mode for labs). First user becomes admin; roles are viewer / developer / admin. Login registers the machine (its token is bound to you) and pins the org's policy signing key. <code>swarm install --config-url &lt;url&gt;</code> is the one-flag fleet onboarding (M8.3c/f).</li><li><b>Cluster-wide claims</b> — a claim taken on one machine registers upstream; a second machine claiming the same task is refused with the holder's name (<code>alice@her-laptop</code>), and if the cluster says someone else holds it, the local claim is revoked — the worktree is never touched. Offline degrades to local-only, fail-closed as ever (M8.3d).</li><li><b>Team dashboard</b> — served by the team daemon: machines (live / quiet), active cluster claims, spend today / by project / <b>by user</b> / by machine / by day, and the forwarded activity feed, live over SSE (M8.3e).</li><li><b>Signed org policy</b> — an admin posts the org's <code>policy.toml</code> once; every machine fetches it, verifies the ed25519 signature against the key pinned at login, and installs it as the org layer — locked rules included. A tampered policy is reported and never installed (M8.3f, closes the OQ-3 signing deferral).</li><li><b>Team budgets + chargeback</b> — org / user / project ceilings (daily + monthly) set on the team daemon and enforced with the same semantics as the local <code>[budget]</code>: warn incident, <code>ask</code> on spending tools, or stop spawned runs. Monthly export by user, machine, model or <b>task — your ticket ids</b> when the task source is GitHub Issues or Linear: <code>GET /t1/spend/export?month=…&amp;by=task&amp;format=csv</code> (M8.4).</li><li><b>Model allow-list</b> — <code>[models] allow = [\"claude-*\"]</code> (org-lockable): spawned runs and dispatch refuse a disallowed model; an interactive session on one opens a single incident — observed, never interrupted (M8.4).</li><li><b>Aider + opencode adapters</b> — six agents now show up with sessions, turns, tokens and cost: Claude Code, Codex, Grok, Gemini CLI, <b>Aider</b> (its own <code>.aider.chat.history.md</code>, one file holding many sessions) and <b>opencode</b> (its SQLite database, read-only). Both report their exact spend themselves, so their turns carry it verbatim and repricing never touches them (M5.4; Cline deferred).</li><li><b>Outcomes</b> — did the agent's work survive? Branches join sessions → PR → merged / reverted, with per-model and per-agent scorecards: merge rate, median session-start→merge, $ per merge. New <b>Outcomes</b> view under Insight (M9.2).</li><li><b>Stuck badge</b> — the daemon watches live sessions' recent tool calls for repeat-and-failing loops and all-failing streaks (conservative: <code>git status</code> polling never counts) and marks the session <b>Stuck</b> on Fleet with a desktop notification. A heuristic; nothing is interrupted (M9.3).</li><li><b>Collision graph</b> — a live bipartite graph of running sessions × the files they touch; a file two sessions hold with at least one writer glows red as a merge conflict waiting to happen. New <b>Graphs</b> view with a contested-count badge (M9.12).</li><li><b>Sidebar navigation + ⌘K</b> — the flat header links became a grouped sidebar nav (Observe / Work / Insight / Guard) that collapses to an icon rail, and ⌘K opens a palette over every view, project and session, falling through to Search (M9.1).</li><li><b>Ops</b> — <code>swarm backup</code> (a consistent <code>VACUUM INTO</code> snapshot of <code>~/.swarm</code>, zero downtime) and <code>swarm restore</code>; <code>swarm doctor --migrate</code>; Prometheus metrics at the team daemon's <code>/t1/metrics</code>; <code>[notify] webhook</code> POSTs every incident as Slack-compatible JSON (M8.5).</li></ul><h4>Fixed</h4>\n<ul><li>Replay, <em>Resume where it died</em> and the dry-run <em>Re-run</em> buttons were unreachable — dead click targets on the session page.</li><li>The user guide caught up: a Teams page, the M8 commands, all six agents, and the <code>SWARM_GUARD=off</code> description (org-locked rules stay enforced — true since 0.8, documented wrong until now).</li></ul><h4>Notes</h4>\n<ul><li>The privacy posture is unchanged and now stated precisely: with no <code>[team] url</code> and no <code>[notify] webhook</code> configured, nothing about your sessions leaves the machine — the <a href=\"https://getswarm.vercel.app/docs/10-privacy-and-faq\" target=\"_blank\" rel=\"noopener\">privacy page</a> lists the five opt-in egress paths.</li><li>The team daemon package is not yet on npm; run it from a clone (<code>bun packages/team/src/bin.ts</code>). Pricing for the paid tier is still open.</li></ul>"},"0.9.0":{"date":"2026-08-24","html":"<p>The crew release: the agents on your machine stop being strangers. They message each other and you, follow a declared workflow instead of a hopeful prompt, and every major CLI brand now shows up — Claude, Codex, Gemini, Grok. Plus the first-run and update experience a launch deserves.</p>\n<h4>Added</h4>\n<ul><li><b>Agent messaging</b> — <code>swarm_send(to, text)</code> reaches another session (id or unique prefix), whoever holds a task, or <code>\"lead\"</code> (your interactive session in the project). Delivery: on the recipient's next tool call as injected context, immediately over stdin to a spawned run, or pulled with <code>swarm_inbox</code> (which now returns answers <em>and</em> messages) — exactly once. A <b>messages</b> thread with compose box on every session page; <code>swarm msg send|ls</code> (M7.6, OQ-12 decided).</li><li><b>Workflows</b> — <code>[[workflows]] name = \"ship\" steps = [\"implement\", \"gate:tests\", \"gate:review\", \"pr\"]</code> in <code>.swarm.toml</code>; <code>swarm workflow ship &lt;task&gt;</code> and the daemon advances it: run steps spawn an agent in the task's worktree (told what the workflow will do itself), gate steps execute — only a pass advances — and <code>pr</code> pushes and opens the pull request from the ledger. A failed step stops with a <code>workflow_failed</code> incident; a daemon restart marks in-flight workflows stopped, honestly. <b>Workflows</b> on the Board with per-step chips (M7.8).</li><li><b>Gemini CLI adapter</b> — <code>~/.gemini</code> chat recordings are discovered and priced like every other agent: sessions, turns, tokens, cost, sparkline, Timeline, Spend. Schema from upstream source; first real-session validation pending (M5.4).</li><li><b>Timeline that shows the work</b> — bars are now a faint base with a tick per turn: bursts and idle stretches are visible instead of painted over. A thin claims lane per project shows lease spans (held / expired / orphaned). Recent gates carries a per-gate pass/fail history strip; every pinned project gets a 14-day spend sparkline in the sidebar (M5.7).</li><li><b><code>swarm demo</code></b> — a seeded demo dashboard on its own home and port: four agent brands, a live lease, an orphaned claim, gate history, incidents, a question, a message, a workflow mid-flight. Tailers are off in demo mode, so it never ingests your real logs — and your real data is never touched (delete <code>~/.swarm/demo</code> to reset).</li><li><b>Update that actually updates</b> — after an upgrade the dashboard notices the newer version on disk and offers a one-click daemon restart (the daemon re-execs into the new build and the page reloads). Long-lived tabs re-check every 5 minutes.</li><li><b>First-run onboarding</b> — an empty Fleet now explains the three steps (hook in — with a live <em>not installed</em> badge —, open any agent session, watch it appear) instead of showing a blank table.</li></ul><h4>Fixed</h4>\n<ul><li>External links in the desktop app (PR titles, Documentation, feedback, the just-opened PR) open in the browser — the webview silently swallowed them before.</li><li>Section-header actions (New worktree, Collect stale, timeline ranges) are proper small buttons instead of shouting uppercase with off-baseline icons.</li><li>The timeline claims lane no longer collides with the kanban's styles; a test file that broke lint on main is formatted.</li></ul><h4>Notes</h4>\n<ul><li>Windows builds are produced by CI as before but this release had no human Windows smoke test — reports welcome.</li></ul>"},"0.8.0":{"date":"2026-08-23","html":"<p>The trust release: Swarm becomes something a team and a security reviewer can rely on, without giving up local-first. An org can pin the rules that matter and they hold even when the daemon is down; every record says who did it; the daemon has a credential; what is stored is exportable and redactable; a second agent can be the reviewer. And the dashboard stopped looking like a list of tables.</p>\n<h4>Added</h4>\n<ul><li><b>Org policy layer</b> — a third config file, <code>~/.swarm/policy.toml</code> (or <code>$SWARM_POLICY</code>), sits under global and repo config and may declare <code>locked = [\"rules.destructive_git\", \"rules.protected\", …]</code>: dotted keys or whole subtrees the layers below cannot change. A locked key keeps the policy's value, every attempt to override it is a <code>policy</code> incident, and <code>swarm doctor</code> shows which file set each value and who tried to change it. <code>GET /v1/policy</code> exposes provenance (M8.1).</li><li><b>Tamper detection</b> — on every session start the daemon checks that all ten hook entries are still in <code>~/.claude/settings.json</code> with a sane timeout, that no lower config layer fights a locked key, and that <code>SWARM_GUARD=off</code> isn't set while the policy locks rules (it is then ignored). Each finding opens a <code>policy</code> incident once; <code>swarm doctor</code> prints the same (M8.1b).</li><li><b>Fail-closed for locked rules</b> — while the policy locks any rule the daemon keeps <code>~/.swarm/policy.cache.json</code> (locked modes + a snapshot of live sessions and held worktrees, integrity-hashed). If the daemon is unreachable on a tool call, the hook shim enforces exactly those rules from the cache; everything else still fails open (M8.1c, OQ-3 resolved).</li><li><b>Who did it</b> — every ledger record and every event carries an <code>actor</code> (<code>human</code> / <code>agent</code> / <code>run</code> / <code>daemon</code> + id); existing rows were back-filled from the owner strings clients always sent. Schema changes now go through versioned migrations (<code>/v1/health</code> and <code>doctor</code> report the schema version) (M8.2a).</li><li><b>Daemon token</b> — the daemon creates <code>~/.swarm/token</code> on first start; the CLI, MCP server, hook shim and <code>swarm ui</code> send it. Local callers may still omit it by default; <code>[daemon] auth = \"required\"</code> makes every call carry it, a wrong token is always refused, and anything that isn't loopback always needs it (M8.2b).</li><li><b>Audit log + export</b> — the ledger-changing subset of events (claims, worktrees, PRs, questions, dispatch, resources, processes, gates, handoffs, permissions, incidents, run results, session start/end), with actor: <code>swarm audit export [--since 30d] [-p] [--type …] [--format jsonl|csv|json]</code> and <code>GET /v1/audit</code>. Retention is split — <code>[events] retain_days = 30</code> for chatter, <code>[audit] retain_days = 0</code> (forever) for audit rows (M8.2c).</li><li><b>Privacy on ingest</b> — <code>[privacy] store_prompts = false</code> keeps the event but not the prompt text, <code>store_reasoning = false</code> keeps token counts but not assistant text, <code>redact = [\"ACME-[0-9]+\"]</code> scrubs stored strings; API-key-looking tokens and <code>Bearer …</code> credentials are always redacted. Global-only keys an org can lock (M8.2c).</li><li><b>Review as a gate</b> — <code>[gates.review] builtin = \"review\"</code> (optional <code>model</code>, <code>timeout</code>) spawns a read-only <code>claude -p</code> over the worktree's diff with a fixed rubric. The verdict is derived from the findings (any blocker/major fails, whatever the reviewer claims), findings are the evidence, and a reviewer that times out or won't answer in JSON is a fail with that reason. Same registry, logs, incidents and triggers as executed gates (M7.9).</li><li><b>Project settings</b> — sidebar menu → <b>Settings…</b>: name, icon (any emoji — a quick row, a browse-all grid, or the OS picker — or an image file, downsized to a square), a color slot, pinned. The glyph replaces the folder icon everywhere the project appears.</li><li><b>Board that is a board</b> — a KPI strip (live / held / worktrees / ready / incidents), tasks as a kanban (Ready · In progress · Blocked · Done), and a worktree map of tiles grouped by project and colored by live / dirty / unpushed / merged. Tasks and Worktrees keep a Cards | Table toggle.</li><li><b>Row menus</b> — every row on the Board, PRs and Incidents has one menu (hover kebab, right-click, or Enter) carrying its actions — open, diff, PR, run, claim, gates, release, stop, ack, codify, merge, copy — instead of inline links; destructive ones last and confirmed. Menus are wider and labels never ellipsize.</li></ul><h4>Changed</h4>\n<ul><li><code>doctor</code> reports the daemon and schema version, per-event hook coverage, and the policy file with its locked keys.</li><li><code>/v1/health</code> reports <code>schema</code> and <code>auth</code>.</li></ul><h4>Fixed</h4>\n<ul><li>Scratch repositories under the OS temp dir (test fixtures, spawned-run clones) no longer appear as projects in the sidebar.</li><li>Fleet's <code>now</code> column had no room; ended sessions show their last assistant line instead of \"session ended\".</li><li>Incidents show the command's gist (the leading <code>cd … &amp;&amp;</code> stripped) and <code>(removed)</code> instead of a raw id for a deleted project; Spend's attribution tables lost their empty first column.</li><li>Emoji tiles and the icon preview no longer clip in the desktop app's WebKit view.</li></ul>"},"0.7.0":{"date":"2026-08-23","html":"<p>The orchestrate release: Swarm runs a task end to end on its own and you stay in control. New worktrees start warm, gates execute instead of being vouched for, <code>swarm dispatch</code> hands ready tasks to autonomous runs whose outcome is derived from the ledger, an agent that needs a human decision can ask for one, and a budget keeps the bill in bounds.</p>\n<h4>Added</h4>\n<ul><li><b>Budgets</b> — <code>[budget] daily = 25</code> / <code>weekly = 100</code> in <code>.swarm.toml</code> puts a spend ceiling on a repo, judged from the same transcript-priced numbers as the Spend view. At <code>warn_at</code> (80%) a <code>budget</code> incident opens; past 100% <code>on_exceed</code> decides: <code>\"warn\"</code>, <code>\"ask\"</code> (every Bash / Edit / Write in the repo asks first), or <code>\"stop\"</code> (spawned runs stopped, dispatch queue cleared). One incident per level per day; a budget tile on the Spend view.</li><li><b>Run profiles</b> — <code>swarm run --profile no-edits|read-only</code> (and the Run / Dispatch drawers, <code>[dispatch] profile</code>) narrow what a spawned agent may do: <code>no-edits</code> keeps the shell but not the file tools, <code>read-only</code> keeps only read and search.</li><li><b><code>swarm_context</code></b> — an agent can re-read what Swarm told it at session start, current as of now (holds, lease left, handoff, gates, resources, rule modes), plus answers to its questions. <code>GET /v1/context</code>. And <code>swarm install</code> now registers the same MCP server with <b>Codex CLI</b> and <b>Gemini CLI</b> when they're installed, so they get the <code>swarm_*</code> tools too (M7.10).</li><li><b>Ask the human</b> — an agent that hits a decision only a person can make calls <code>swarm_ask</code> (with optional suggested answers). The question shows on the session page under <b>waiting on you</b> with the options as buttons, the session gets an <b>Asking</b> badge on Fleet, and a desktop notification fires. Answer there, or <code>swarm answer &lt;id&gt; &lt;text&gt;</code>; <code>swarm questions</code> lists what's open. The answer reaches the agent by itself — stdin for a spawned run, <code>[swarm]</code> context on the next tool call for an interactive session, <code>swarm_inbox</code> on demand — and a session starting later in the same task's worktree is told about open questions and answers that never arrived (M7.7).</li><li><b>Dispatch</b> — <code>swarm dispatch --ready</code> (or pick tasks; the <b>Dispatch</b> chip on the Board's Tasks; <code>swarm_dispatch</code> from a lead agent) hands ready tasks to autonomous runs: each gets its own claim and worktree and a <code>claude -p</code> run told to work there, run the gates, hand off and open the PR; <code>[dispatch] max_parallel</code> (default 2) run at once per repo, the rest queue. When a run ends Swarm derives the outcome from the ledger — executable gates re-run by the daemon, PR looked up on the forge — and reports <b>done</b>, <b>gates-failed</b>, <b>no-pr</b>, <b>crashed</b> or <b>stopped</b>; anything short of done opens a <code>dispatch_failed</code> incident and keeps the claim for you to resume or release. A dispatched run never edits the task list. <code>swarm dispatch status | clear</code>, <code>GET/POST/DELETE /v1/dispatch</code>, a <b>Dispatch</b> section on the Board (M7.5).</li><li><b>Diff and Open PR</b> — every worktree row on the Board (and a session page whose cwd is a worktree) gets <b>Diff</b>: the commits and files it carries beyond the main checkout's branch, uncommitted and untracked changes included, with a coloured unified diff per file. <b>PR</b> pushes the branch and opens a pull request (<code>gh</code>) or merge request (<code>glab</code>) prefilled from the task's title, the latest handoff, the required gates as a checklist and the file list — editable before it goes; refuses uncommitted changes, reuses an open PR for the branch. <code>swarm wt diff</code>, <code>swarm pr open [--dry-run]</code>, MCP <code>swarm_pr_open</code>; a <code>pr.opened</code> event on the Timeline (M7.3).</li><li><b>Gates that run themselves</b> — a gate with a command in <code>.swarm.toml</code> (<code>[gates.tests] cmd = \"bun test\"</code>, optional <code>timeout</code> / <code>cwd</code>) is executed rather than vouched for: <code>swarm gate run &lt;task&gt;</code> (or <code>swarm_gate_run</code> from the agent, or <b>Gates</b> on a held task row on the Board) runs every required gate that has a command inside the task's worktree and records the verdict — exit 0 passes, the rubric is the command and how it ended, the evidence is the output tail, the log lives in <code>~/.swarm/logs</code>. Runs go through the process registry and are killed at <code>timeout</code>. When a session in a held worktree ends, the daemon runs them on its own and writes the verdicts into that session's auto-handoff (<code>[gates] auto = \"session-end\" | \"stop\" | \"off\"</code>) (M7.4).</li><li><b>Worktrees without a task</b> — <code>swarm wt create &lt;name&gt;</code> makes a worktree for a spike or a review checkout (under <code>~/.swarm/worktrees/&lt;project&gt;/</code>, branch <code>wt/&lt;name&gt;</code>, bootstrapped like a claim); <code>swarm wt</code> lists every worktree with <b>drift</b> against the main checkout's branch (<em>N behind</em>, <em>merged</em>); <code>swarm wt open</code> opens it with <code>[worktree] open = \"code {path}\"</code> or the file manager; <code>swarm wt rm</code> removes it with the same refusals as <code>release</code> (dirty, unpushed, never the main checkout, never a held claim); <code>swarm wt gc [--apply]</code> finds worktrees whose branch was merged or whose claim was released and the folder left behind. The Board's Worktrees section gets the drift column, <b>Open</b> / <b>Remove</b> per row, <b>New worktree</b> and <b>Collect stale</b> (M7.2).</li><li><b>Warm worktrees</b> — <code>.swarm.toml [worktree] copy = [\".env.local\"]</code> and <code>setup = \"bun install\"</code> bootstrap every new worktree: the files are copied from the main checkout as the claim is made and <code>setup</code> runs inside the worktree in the background (log in <code>~/.swarm/logs/&lt;project&gt;/bootstrap-&lt;task&gt;.log</code>, a <code>worktree.bootstrapped</code> event on the Timeline). <code>swarm run</code> waits for it before starting the agent; an interactive <code>swarm claim</code> prints the log path and returns at once. A failing setup opens a <code>bootstrap_failed</code> incident but never takes the claim away. Paths are repo-relative only (M7.1).</li></ul><h4>Fixed</h4>\n<ul><li>The Fleet agent badge no longer renders a stray \"…\" after the pill: badge-only cells clip instead of ellipsizing, and the column got a few more pixels.</li></ul>"},"0.6.0":{"date":"2026-08-23","html":"<p>The learn release: the data Swarm has been collecting starts paying back. Replay what an agent did, see what each task cost, turn an incident into a rule, resume a session that died, try a rule on history before switching it on, read your backlog from GitHub or Linear, and search everything Swarm remembers.</p>\n<h4>Added</h4>\n<ul><li><b>Session Replay</b> — a <b>Replay</b> button on any session steps through its tool calls one at a time, showing the full input and output of each (Prev/Next, a slider, ←/→ keys). See exactly what an agent did, in order (M4.1).</li><li><b>Cost by task</b> — the Spend view attributes cost and tokens to each task (matched to a claim by the session's worktree), plus a <b>Context budget</b> table ranking sessions by how much context they re-processed — a signal for agents re-reading the same material. <code>GET /v1/attribution</code> (M4.2).</li><li><b>Codify an incident</b> — the Incidents feed has a <b>Codify</b> action that turns an incident into a <code>.swarm.toml</code> rule snippet and a CLAUDE.md lesson, both copyable. A rule that keeps firing as <code>ask</code> suggests hardening to <code>deny</code> (M4.3).</li><li><b>Desktop notifications</b> — opt-in native notifications (settings menu) for a spawned run waiting on a permission, or a claim orphaned with unfinished work; clicking opens the Allow/Deny card or the Board. Quiet while you're looking at the dashboard (M4.7).</li><li><b>Auto-handoff, and resume where it died</b> — whenever a session working in a claimed worktree pauses or ends, Swarm derives a handoff from what it did: files edited, the last verification-looking command, the last request, the last thing it said. One <code>auto:</code> handoff per session, replaced on every pause, silenced by a handoff left on purpose. An ended session's page gets <b>Resume where it died</b>, which spawns a run on the task from that handoff plus the session's last actions; <code>swarm run resume &lt;session-id&gt;</code>; <code>GET/POST /v1/sessions/:id/resume</code> (M4.4).</li><li><b>Rule dry-run</b> — <b>Dry-run rules</b> on the Incidents view replays a project's recorded tool calls through the rules under modes you pick: what would have been asked or denied, per rule, before you switch anything on. It also flags <b>flaky signals</b> — a rule that keeps firing on the same command that is then allowed through anyway. Nothing is recorded. <code>swarm rules dryrun [--set rule=mode,…]</code>; <code>GET /v1/rules/dryrun</code> (M4.6).</li><li><b>GitHub Issues and Linear as task sources</b> — <code>[tasks] source = \"github\"</code> reads the repo's issues through the logged-in <code>gh</code> (optional <code>labels</code> filter); <code>source = \"linear\"</code> reads Linear through its API with <code>LINEAR_API_KEY</code> from the daemon's environment (optional <code>team</code>). Both land in the Board's Tasks, <code>swarm tasks</code> and <code>swarm_next_task</code> like a markdown backlog: closed/completed is done, in-progress is active, <em>depends on #n</em> / <em>blocked by</em> become dependencies. Read-only; no credential stored (M4.8).</li><li><b>What's New in the app</b> — the dashboard shows the release notes for the running version: a <b>What's New</b> item in the settings menu, in the desktop app's <b>Swarm</b> menu, and in the tray. It also opens once on its own the first time you run a new version. Notes are parsed from <code>CHANGELOG.md</code> into <code>release-notes.js</code> at build time, so they work offline with no repo checkout.</li><li>The desktop <b>Check for Updates…</b> is in the system menu bar (Swarm menu), not only the tray.</li></ul>"},"0.5.0":{"date":"2026-08-22","html":"<p>The drive release: Swarm doesn't just watch agents now — it starts them, in a claimed worktree, and brokers what they're allowed to do. Plus the coordination primitives that make an autonomous run safe to leave alone: leases that renew themselves, gates that gate, and a handoff the next session reads on its own.</p>\n<h4>Added</h4>\n<ul><li><b><code>swarm run</code></b> — spawn an agent on a task. <code>swarm run --task login-form --prompt \"…\"</code> claims the task and the daemon starts <code>claude -p</code> in its worktree with stream-json on both ends. Steer it with <code>swarm run send</code>, stop it with <code>swarm run stop</code> (stdin closed, then the process registry's pid-based TERM/KILL — never by pattern), list with <code>swarm run ls</code>. The session shows in Fleet as ▶ spawned and is ingested like any other; every finished turn is a <code>run.result</code> event with cost and turns (M3.1).</li><li><b>Run from the dashboard</b> — Ready (or held) task rows on the Board get a <b>Run</b> action: a drawer with the prompt prefilled from the task, permission mode, model and max turns (⌘⏎ to submit). The spawned session opens with a stdin box to steer it and a <b>Stop</b> button (M3.3).</li><li><b>Permission broker</b> — a <code>swarm run</code> agent's tool-permission prompts go through the same rules as your interactive sessions: a rule <code>deny</code> auto-denies with the reason, an unflagged tool auto-allows so the agent can make progress, and anything the rules mark <code>ask</code> is held and surfaced on the session as an <b>Allow / Deny</b> card. No blocking on a terminal you can't see. Uses <code>--permission-prompt-tool stdio</code>; <code>POST /v1/runs/:id/permissions/:reqId</code> (M3.2).</li><li><b>Leases renew themselves.</b> A session working inside a claimed worktree extends the lease on any activity (hook or transcript growth) once it is past half-way — no more <code>swarm renew</code> in a long session. Expired leases whose worktree still holds uncommitted or unpushed work are marked <b>Orphaned</b> within a minute and open an <code>orphaned_claim</code> incident; nothing is removed automatically (M1.2).</li><li><b>Handoffs, injected on start</b> — <code>swarm handoff &lt;task&gt; --done … --remaining … [--files] [--verify]</code> (or <code>swarm_handoff</code>) records what the last holder leaves; <code>swarm resume</code> / <code>swarm_resume</code> reads it. The next session that starts inside that task's worktree gets it automatically as <code>SessionStart</code> context, along with what it holds and the lease left, gate status, held resources, and the repo's rule modes (M1.3).</li><li><b>Gates</b> — verification runs recorded against a task: <code>swarm gate record login-form review pass --rubric \"tests green, error paths read\"</code> (or <code>swarm_gate_record</code>). A run without a rubric is rejected; the latest run per gate decides; failed runs are never deleted and open a <code>gate_failed</code> incident. <code>.swarm.toml [gates] required = [\"review\"]</code> declares what every task must pass; the Board's Tasks grid shows ✓ / ✗ / — per gate and a <b>Recent gates</b> section lists the runs (M2.2).</li><li><b>The MCP tools finally connect.</b> <code>swarm_status</code>, <code>swarm_claim</code>, <code>swarm_next_task</code>, <code>swarm_handoff</code>, <code>swarm_gate_record</code>, <code>swarm_acquire_resource</code> and the rest are reachable from Claude Code — see the fix below.</li><li>Dashboard deep links (<code>?view=board&amp;project=&lt;id&gt;&amp;session=&lt;id&gt;</code>) and a screenshot carousel with a lightbox on the website; <code>tools/screens.ts</code> re-captures the shots with Playwright at 2×.</li></ul><h4>Fixed</h4>\n<ul><li><b>Swarm's MCP tools were never reachable.</b> <code>swarm install</code> wrote <code>mcpServers.swarm</code> into <code>~/.claude/settings.json</code>, which Claude Code ignores — user-scope MCP servers live in <code>~/.claude.json</code> (what <code>claude mcp add -s user</code> edits). Install now registers there (and cleans the stale settings.json entry); <code>claude mcp list</code> shows <code>swarm ✔ Connected</code>. <b>Re-run <code>swarm install</code> after upgrading.</b></li><li><b>The daemon reads global config from where its state lives.</b> <code>[rules]</code> / <code>[gates]</code> / <code>[tasks]</code> in <code>~/.swarm/config.toml</code> are resolved against the daemon's home (<code>SWARM_HOME</code>), matching the DB and logs — spawned runs, which execute in a worktree without the repo's <code>.swarm.toml</code>, still see machine-wide rules.</li></ul>"},"0.4.1":{"date":"2026-08-22","html":"<h4>Fixed</h4>\n<ul><li><b>PRs view went dark under the desktop app.</b> A daemon launched from the Dock gets macOS's bare GUI <code>PATH</code>, so Homebrew's <code>gh</code> / <code>glab</code> were invisible and the forge silently returned nothing. The daemon now also looks in <code>/opt/homebrew/bin</code>, <code>/usr/local/bin</code>, Linuxbrew and <code>~/.local/bin</code>; <code>swarm doctor</code> reports forge CLI auth and warns when <code>glab</code> relies on a shell-only <code>GITLAB_TOKEN</code>.</li><li>Icons are vertically centred on their text again (<code>vertical-align: middle</code> instead of a fixed <code>-3px</code> tuned for the old type scale).</li><li>npm publish moves to <b>trusted publishing</b> (OIDC, no <code>NPM_TOKEN</code>), the same setup as fancy-menus.</li></ul>"},"0.4.0":{"date":"2026-08-22","html":"<p>The enforcement release: rules that watch file writes, not just Bash; a backlog Swarm can read; servers Swarm starts and stops by pid; and an Incidents feed you can clear.</p>\n<h4>Added</h4>\n<ul><li><b>Rules on file writes</b> — two new rules evaluated on <code>Write</code> / <code>Edit</code> / <code>MultiEdit</code> / <code>NotebookEdit</code> paths (and Bash working directories), not only Bash commands. <code>no_foreign_worktree</code> (default <code>ask</code>) stops a session from editing inside a worktree another claim holds — <em>never touch a worktree you don't hold</em> is now a hook decision, with holding inferred from the session's cwd. <code>claim_required_to_write</code> (opt-in) makes a repo's shared checkout read-only without a claim: claim a task, get a worktree, write there. Both per repo as <code>ask | deny | off</code>.</li><li><b>Incidents view</b> — the denied-action feed as its own tab: Open / All, per-rule counts, reason and session per row, <b>Ack</b> and <b>Ack all</b>; the open count sits in the nav. <code>GET /v1/incidents?open=1&amp;project=</code>, <code>POST /v1/incidents/:seq/ack</code>, <code>POST /v1/incidents/ack</code>, <code>/v1/state.openIncidents</code>. The Board keeps a short open-only section.</li><li><b>Task source</b> — <code>.swarm.toml</code> <code>[tasks] source = \"docs/plan.md\"</code> points at a markdown file whose <code>ID | Task | Depends | Status</code> tables are the backlog (✅ / 🟡 / ⚪, dependencies by task id or milestone prefix). The Board gets a <b>Tasks</b> section (Ready / Open / All, <em>Claim</em> per row), the CLI <code>swarm tasks [--ready]</code>, and agents <code>swarm_next_task</code> — the first unclaimed task whose dependencies are done. Swarm's own roadmap is its task source. Markdown only (OQ-5 decided).</li><li><b><code>swarm serve</code> / <code>swarm proc</code></b> — <code>swarm serve start --name web -- npm run dev</code> allocates a free port (ledger + bind probe), runs the command detached with <code>PORT</code> set and logs under <code>~/.swarm/logs/&lt;project&gt;/</code>, registers pid + start time, and acquires the singleton — so a second <code>web</code> fails closed and the port is protected for every other session with no config. <code>serve ls | stop [name|pid]</code>, <code>proc start | ls | stop</code> for workers without a port. Stop signals registry pids only, verified by start time; nothing is ever killed by pattern. <code>POST /v1/ports/allocate</code>, <code>GET/POST/DELETE /v1/processes</code>; <b>Processes</b> section on the Board with <em>Stop</em>.</li><li><b>Star nudge</b> — once a month at most, never on first open, the dashboard asks for a GitHub star. <em>Later</em> snoozes 30 days, <em>Don't ask again</em> is final; localStorage only.</li><li><b>Sidebar drag-and-drop</b> — pinned projects reorder by dragging; the order persists on the daemon (<code>PUT /v1/projects/order</code>, <code>Project.order</code>).</li><li><b>Desktop app menu</b> — a real application menu (Swarm / Edit / View / Window): ⌘C/⌘V work, <b>View › Zoom In / Zoom Out / Actual Size</b> (<code>⌘+</code> <code>⌘−</code> <code>⌘0</code>) scale the dashboard (persisted), plus Reload and Full Screen.</li></ul><h4>Fixed</h4>\n<ul><li><b>Shared-tree rules no longer lose sight of a session mid-turn.</b> <code>shared_tree</code> / <code>destructive_git</code> keyed on a 2-minute last-seen window fed only by hooks, so a neighbour three minutes into a long turn became invisible — and its uncommitted work unguarded. Transcript growth now counts as activity (the tailer bumps <code>last_seen_at</code>), and the liveness window is the daemon's 10-minute idle threshold (<code>LIVE_WINDOW_MS</code>). A false positive costs one confirmation; a false negative cost someone's work.</li><li><code>destructive_git</code> also matches <code>git stash drop</code>, <code>git stash clear</code> and <code>git branch -D</code>.</li><li>Dashboard type scale is one step larger across the board (base 13 → 14 px; the smallest labels 10 → 11 px) — it had drifted too small, especially in the desktop app.</li><li>The <b>PRs</b> tab icon (and the branch/commit glyphs) were near-invisible at 15 px; they use the pixelarticons <em>sharp</em> variants now.</li><li>The daemon dot stayed red for up to 15 s after load on a healthy connection (the SSE stream sent nothing until its first heartbeat); the stream now flushes immediately.</li><li>The nav flashed \"Fleet\" before the restored tab was applied; session-detail event kinds (<code>userpromptsubmit</code>) no longer overflow into the message column; \"Unpinned · seen, not pinned\" keeps its spacing.</li></ul><h4>Changed — docs</h4>\n<ul><li>README and site now say what the code does: Codex CLI and Grok sessions are tailed alongside Claude Code; the requirements and architecture diagram list all three.</li><li>Rules are described as <b>guardrails against accidents, not a sandbox</b> — the guide has a new \"What rules are — and aren't\" section spelling out that a denied Bash command can be routed around (script, heredoc, direct file edit), and that worktree isolation via claims is the real fix. The site's feature cards lead with claims, rules and resources instead of Fleet and Spend.</li></ul><h4>Changed — performance</h4>\n<ul><li><b>Daemon never spawns <code>git</code> on a request.</b> Worktree status (<code>git worktree list</code> + <code>status</code>/<code>rev-list</code> per worktree, ~0.8 s across a fleet) moves to a 15 s background refresh with async <code>Bun.spawn</code>; <code>/v1/state</code> serves the cache (612 ms → ~15 ms). Claim/release invalidate it.</li><li><b>Hook round-trips are two indexed statements</b>, not two <code>git rev-parse</code> spawns plus a transcript-directory scan: <code>cwd → project</code> is cached 60 s, the inline transcript tail is debounced to once per 2 s per session (the 5 s tailer covers steady state), and subagent directories are re-listed only when their mtime moves.</li><li><b>Events store ~2 KB, not ~10 KB.</b> <code>tool_input</code> is clipped at 2 KB and <code>tool_response</code> at 4 KB in <code>payload</code> (<code>{truncated, bytes, preview}</code>), and the tool I/O is no longer duplicated in <code>raw</code>. Existing databases are rewritten once on boot and <code>VACUUM</code>ed (96 MB → 27 MB here). Retention: events older than 30 days are pruned daily (incidents kept), <code>raw</code> is cleared after 7 days.</li><li><b>Wire shape.</b> SSE frames, <code>GET /v1/events</code> replays and <code>GET /v1/sessions/:id/events</code> carry <code>seq/ts/type/projectId/sessionId/payload{hook,summary,…}</code> only — no <code>raw</code>, no tool I/O (a 5.5 MB session fetch is now ~150 KB). <code>GET /v1/events/:seq</code> returns one stored event in full; <code>?full=1</code> on the SSE replay does the same. <code>?since=0</code> replays the last 200 events, not the table.</li><li><b>Incremental session view</b> — <code>GET /v1/sessions/:id/events?after=&lt;seq&gt;&amp;afterTs=&lt;iso&gt;</code>; the dashboard appends instead of re-fetching 500 events + 500 turns on every hook.</li><li><b>Dashboard render loop</b> — one <code>requestAnimationFrame</code> scheduler, snapshot <code>seq</code> short-circuit, paused while the tab is hidden, exponential SSE reconnect backoff; session log merges two sorted lists and caches rendered rows; data-grid memoises persisted layout and uses one <code>Intl.Collator</code>; charts memoise the turn strip.</li><li>SQLite: indexes on <code>events(type, seq)</code> and <code>turns(ts)</code>, <code>mmap_size</code> 256 MB, cached prepared statements (<code>db.query</code>), <code>sessions</code>/<code>spend</code>/<code>incidents</code> memoised per write generation; <code>/v1/spend</code> is its own endpoint.</li><li>Background tick: Codex/Grok discovery every 15 s when idle; Grok <code>summary.json</code> re-read only on mtime change.</li></ul>"},"0.3.0":{"date":"2026-08-22","html":"<p>The coordination release: rules you can configure, runtime resources agents can hold, and the merge queue at the end of the loop.</p>\n<h4>Added</h4>\n<ul><li><b>Config system</b> — <code>~/.swarm/config.toml</code> (global) deep-merged with an optional <code>&lt;repo&gt;/.swarm.toml</code>. Lenient validation: bad config can never take the daemon down. Daemon port preference is <code>SWARM_PORT</code> &gt; config &gt; 7777. See <code>docs/13-config.md</code>.</li><li><b>Rule engine v2</b> — every rule is per-repo configurable as <code>ask | deny | off</code>: <code>shared_tree</code>, <code>destructive_git</code>, <code>pattern_kill</code>, and the new <code>protected_ports</code> (kill/free of a configured port — <code>lsof | kill</code>, <code>fuser -k</code>, <code>kill-port</code> — is asked or denied). <code>deny</code> is returned to Claude Code as a real permission denial.</li><li><b>Incidents</b> — every non-allow decision is recorded (<code>incident.opened</code>: rule, action, command, reason), exposed at <code>GET /v1/incidents</code>, included in <code>/v1/state</code>, and shown on the Board.</li><li><b>Runtime resources (Phase 1)</b> — named singletons for what agents fight over at runtime (dev servers, databases, ports). Fail-closed acquire: holdings live while their pid runs or their lease hasn't expired; the same owner refreshes; dead holdings reap instead of blocking. Release is fail-closed too (owner required, <code>--force</code> overrides). Held ports automatically join the protected-ports rule — acquiring <code>db</code> on 5432 guards <code>lsof -ti:5432 | xargs kill</code> for every other agent, no config needed. HTTP <code>GET/POST /v1/resources</code>, <code>DELETE /v1/resources/:name</code>; MCP <code>swarm_acquire_resource</code> / <code>swarm_release_resource</code> / <code>swarm_resources</code>; CLI <code>swarm res ls|acquire|release</code>.</li><li><b>PRs view</b> — one merge queue across GitHub and GitLab. Forge detection from the git remote (ssh/https, GitLab subgroups, self-hosted), polled through the locally-authenticated <code>gh</code> / <code>glab</code> CLIs with the project root as cwd — no tokens stored, 2-minute per-project cache floor. <code>GET /v1/prs</code>, <code>POST /v1/prs/merge</code> (squash). Merge is offered only on green, mergeable, non-draft rows, behind a confirm.</li><li><b>Board view</b> — Claims, Worktrees, Resources, and Incidents move out of Fleet into their own view; Fleet shows sessions only (Live + Earlier). Last view and project selection persist across reloads.</li><li><b>Stats view</b> — <code>GET /v1/stats</code>; activity line, calendar heatmap, and streaks (daily buckets in local time, DST-immune). <code>swarm stats</code> on the CLI.</li><li><b>Data-grid everywhere</b> — Claims, Worktrees, Resources, Incidents, PRs, and all six Spend tables render through the same sortable / resizable / reorderable grid with per-column filters, a column-visibility menu, and persisted layouts. Header ticks and tooltips make the affordances discoverable.</li><li><b>Desktop: Check for Updates…</b> in the tray menu, wired to the Tauri updater with native dialogs (available / up-to-date / failed) and install-and-restart on accept.</li><li><b>Agent badge</b> on every Fleet and session row, so mixed-agent fleets are labelled consistently.</li><li><b>Website</b> — getswarm.vercel.app: OS-detected downloads from the latest GitHub release, the <code>bunx</code> one-liner, sharing tags with hero art, and (this release) rendered docs and release notes.</li><li><b>Design tokens</b> — the dashboard's CSS contains zero raw hex / rgba / font-size / duration values; the system is documented in <code>docs/12-design-tokens.md</code> with a drift grep.</li><li>Swarm now dogfoods its own rules via the repo's <code>.swarm.toml</code> (<code>shared_tree</code> / <code>destructive_git</code> deny, daemon port protected).</li></ul><h4>Fixed</h4>\n<ul><li><b>Hook resilience</b> — the PreToolUse hook falls back to the default port when <code>daemon.json</code> points at a dead daemon, so a crashed daemon no longer silently disables the guard (this was the gap behind a real <code>git add -A</code> collision).</li><li>Resource liveness: pid 0 was treated as a live process (<code>kill(0)</code> addresses the process group), so those holdings never reaped; tracked pids are now <code>&gt; 0</code>. <code>heldPorts()</code> is one SELECT on the hook path; lazy reap on acquire, sweep on the 5 s tick. Unknown session IDs on acquire no longer mint phantom sessions.</li><li>Session view is two equal columns again (a bare <code>aside</code> selector in the sidebar-collapse CSS captured the session side panel); the log keeps your scroll position across live updates and follows the tail only when pinned to the bottom.</li><li>A pinned project whose root vanished is merged into the live same-name entry (repo renames produced duplicate sidebar rows); the sidebar <code>⋯</code> appears on hover in the count's slot and reserves no space.</li><li>Desktop: quit actually quits, window close hides (macOS convention) and the dock icon restores it, and the <code>swarmd</code> sidecar dies with the app. Dev builds serve the repo's live dashboard instead of a stale staged snapshot.</li><li>Release pipeline: npm publish is skipped cleanly when <code>NPM_TOKEN</code> is absent (since 0.4.1: trusted publishing, no token).</li></ul>"},"0.2.2":{"date":"2026-08-21","html":"<h4>Added</h4>\n<ul><li>Publishable <code>@ra3orblade/swarm</code> npm package (bundled bins + dashboard); <code>bunx @ra3orblade/swarm setup</code> onboarding.</li><li>Enterprise data-grid for Fleet with a collapsible sidebar; pixel-art icon set and bespoke empty-state illustrations; folder picker; green chart palette.</li><li>Desktop: macOS window chrome, animated pixel-logo splash, free-port daemon startup.</li></ul><h4>Fixed</h4>\n<ul><li>Release builds bundle every platform target; Linux ships <code>.deb</code> + <code>.rpm</code> (AppImage disabled until <code>linuxdeploy</code> on GitHub runners is debugged).</li></ul>"},"0.0.6":{"date":"2026-08-21","html":"<p>First signed and notarized macOS desktop build; <code>release.yml</code> became a three-OS matrix (macOS / Windows / Linux) with a native sidecar per runner.</p>"}};
2
+ window.RELEASE_NOTES = {"0.11.3":{"date":"2026-08-26","html":"<p>A proper robot.</p>\n<h4>Changed</h4>\n<ul><li><b>The robot is redrawn.</b> The old one was 23×28 in three tones and looked it — a blocky approximation of the thing it was meant to be. This one is 73×87 in seven, with a bevelled head, ear pods, a chest screen, a vent grille, segmented arms and claws. It is not hand-copied: the grid is recovered from the reference art itself, and its colours are re-derived as a straight scale of <code>#a3e635</code>, so every tone is the brand hue and the whole drawing recolours from one value.</li><li><b>Icons and the site's marks are the head alone.</b> The whole robot in a 512px tile is clutter — arms, claws, a vent grille and four buttons, none of which survives being an icon. The head is the top of the same drawing, and below about 128px an even simpler head takes over, because 47 columns of bevel and eye socket rendered a pixel each is noise rather than a robot.</li></ul><h4>Fixed</h4>\n<ul><li><b>Small icons were mushy.</b> They were scaled by canvas ÷ grid, which at 32px is 1.6 pixels a cell — so cells landed on two pixels or one depending where they fell, and the eyes came out different sizes. Cells are now always a whole number of pixels, at every size Swarm ships.</li><li><b>The macOS icon ignored Apple's icon grid.</b> It bled to the edge of its canvas, which makes an icon sit visibly larger in the Dock than everything beside it. The rounded square now takes about 80% of the canvas, as Apple specifies — except below 128px, where there are not enough pixels to spend on a margin.</li><li><b>The robot had holes in it.</b> Transparent cells showed through where the drawing should be solid: a blank row between the head and the neck, a hole in the neck itself, and hairline slits detaching each arm at the shoulder. The gaps that are meant to be there — the claw notch, between the legs, between the antennae — are untouched.</li><li><b><code>trimArt</code> deleted blank rows wherever they fell</b>, not only at the edges, so the drawing's one interior blank row was being dropped from every generated icon and the figure came out a cell short.</li></ul>"},"0.11.2":{"date":"2026-08-26","html":"<p>Two things 0.11.1 said it did and didn't.</p>\n<h4>Fixed</h4>\n<ul><li><b>The desktop app icon.</b> 0.11.1 put the robot in the dashboard, on the site and in the favicons, then left the macOS and Windows app icons as the old mark — so the thing in your Dock was the one place that still didn't match. All seventeen are generated from the same drawing now, by <code>tools/icons.ts</code>, read straight off the pixel grid in <code>core</code> with no image editor anywhere in the loop. That covers <code>.icns</code>, <code>.ico</code> and every Windows store size, and the iOS and Android sets if you have them checked out.</li><li><b>The hero animation.</b> What shipped in 0.11.1 was pixel columns marching down in lockstep over a static grid that never moved at all. It's a proper rain now — streams of glyphs, each falling at its own speed, bright leading character, trail dying out behind it. The columns sit at three depths, where size, pitch, speed and brightness all move together: the flat uniform grid is the part that reads as an impression of the film, so that is the part that had to go. One canvas and one animation-frame loop: 0.27ms a frame, paused when the hero scrolls off screen or the tab goes to the background, and never started at all under <code>prefers-reduced-motion</code>.</li></ul>"},"0.11.1":{"date":"2026-08-26","html":"<p>Mostly the look of the thing, plus one page that was genuinely slow.</p>\n<h4>Added</h4>\n<ul><li><b>The robot is the logo.</b> It replaces the abstract pixel glyph in the dashboard header, on the site, and in the favicons. The header mark also follows your theme now — it was hardcoded to one green and ignored light mode entirely.</li><li><b>Matrix rain in the hero.</b> Pixel columns falling at their own speeds, brightest at the leading edge, fading out of the middle so they never sit behind anything you have to read.</li></ul><h4>Fixed</h4>\n<ul><li><b>Provenance took nine seconds to open.</b> It was asking your forge about every project before drawing anything — on a machine with 21 of them that is 21 round trips, and whoever opened the page first every ten minutes paid for all of them. It now draws from what it already knows and lets the pull request state catch up a moment later, which took it from <b>8.9s to 0.7s</b>. It also pages 50 rows at a time instead of sending all 116.</li><li><b>The landing page read like documentation.</b> Config snippets, exit codes and words like \"fail-closed\" and \"orphaned\" in the middle of sentences meant to sell. Rewritten to say what the thing does for you; the syntax lives in the docs, where someone is looking for it.</li></ul>"},"0.11.0":{"date":"2026-08-26","html":"<p>Swarm could already tell you what your agents did. This release is about what it cost you — in money, in waiting around, in context burned re-reading the same file, and in work that shipped with nothing linking it back to a ticket.</p>\n<p>I pointed the new provenance view at my own machine and found 22 branches that had landed with no task behind them. One was a merged PR carrying $255 and 16 agent sessions. I had no idea it existed.</p>\n<h4>Added</h4>\n<ul><li><b>Waiting on you.</b> Agents spend real time stuck waiting for a human — a permission prompt, a question, a notification — and none of it was measured. Now it is. Fleet shows a <em>Waiting 12m</em> badge saying what's blocking, and Stats breaks it down by kind. If you close your laptop on a pending prompt, the clock stops when the session ended, not days later when you open it again.</li><li><b>Where your context goes.</b> A breakdown of what actually fills the window, by tool. The waste number is re-reads: read a file once and that's work, read it ten times and nine copies are just the cost of forgetting. One of my sessions had spent 11% of its window re-reading the same diff.</li><li><b>MCP server health.</b> Which servers are slow, which fail, and how long your agents sat waiting on each. Timing is measured between the hooks either side of a call, so a call stuck behind a permission prompt carries that wait too — which is why the view leads with p50 and p95 rather than the worst case.</li><li><b>Gate flakiness.</b> A gate is flaky when it gives <em>both</em> answers about the <em>same</em> task. Failing one task and passing another isn't flaky, that's the gate working. Gates now record how long they took, and old runs get their duration recovered from the text they used to hide it in.</li><li><b>Machine hygiene.</b> What your fleet left lying around: processes still holding a port after their session ended, dead entries in the registry, worktrees that merged days ago and still take up disk. It only offers to remove something the ledger itself would agree to remove, so nothing with uncommitted or unpushed work is ever on the list.</li><li><b>Session lineage.</b> Who spawned whom, who messaged whom, who picked up whose task — as a graph. When one session has 37 subagents they collapse into a single pill you can click open, because 37 lines fanning across the screen is a mess, not a picture.</li><li><b>Provenance.</b> Follow any piece of work backwards: ticket, claim, session, branch, pull request, merge. Six dots per row, filled up to the point the trail goes cold. It reads the chain from both ends, which is how it finds work that shipped with no ticket at all.</li><li><b>A/B trials.</b> Give one task to several models at once and see what each produced: cost, wall time, gates, how much they changed. A model only wins if it finished <em>and</em> passed every gate — a cheap wrong answer isn't an answer. Each model works in its own worktree, so nothing about the claim rules had to be relaxed to run the experiment.</li><li><b>A robot.</b> The empty states have a proper one now, and its head is the site's logo and favicon. There's one drawing, shared, with a test that stops the two copies drifting apart.</li></ul><h4>Fixed</h4>\n<p>Mostly things that had been quietly wrong for a while:</p>\n<ul><li>Long branch names painted straight over the badge next to them.</li><li>The Board said 20 incidents while the Guard badge said 57. The Board was wrong — it was counting a 20-row window.</li><li>The header never told you which of the ten views you were looking at.</li><li>Opening a menu highlighted the row under your cursor in the same green as the row you were already on, so neither read as current.</li><li>Big numbers were truncated to things like <code>134….</code> in columns that had room for them.</li><li>The ⋯ button vanished the moment you clicked it, and the row jumped as it went.</li><li>Pixel art was nearly invisible in light mode — the outline and the face it sat on were the same brightness to within 0.002.</li><li>Replay resized itself on every step, so Prev/Next slid out from under the cursor mid-click.</li><li>The transcript gave 204px of every row to a timestamp and a label like <code>pretooluse</code>, which repeats on every line and tells you nothing.</li><li>After upgrading, your browser could quietly keep running the previous version's dashboard — the files were served with no cache headers at all. That's why \"What's New\" could greet a 0.11 upgrade with 0.10's notes: the notes bundle was a stale copy, and the lookup silently fell back to the newest release it happened to have instead of admitting it didn't have yours.</li></ul><h4>Notes</h4>\n<ul><li>The database upgrades itself on first start. <code>swarm doctor</code> will tell you the schema version.</li><li>This is 13 of the 18 planned observatory features. Security auditing, rule effectiveness and three more graphs are still to come.</li><li>Two things are deliberately missing rather than guessed: how many tokens your MCP schemas cost, and how much of the window the system prompt takes. Swarm can see tool calls but not schemas or the prompt itself, so it doesn't pretend to know.</li></ul>"},"0.10.0":{"date":"2026-08-24","html":"<p>The team release: Swarm outgrows one laptop. A self-hosted team daemon gives a group one view — machines, cluster-wide claims, spend by person — while every laptop stays local-first and keeps working offline. Two more agent brands land (six total), and the dashboard starts reading the fleet's behaviour, not just its numbers: outcomes, stalls, collisions.</p>\n<h4>Added</h4>\n<ul><li><b>Team daemon</b> — <code>swarm-teamd</code> (<code>packages/team</code>), a second, self-hosted service your machines <em>forward</em> to: audit events, spend rollups and claims — never transcript text unless a machine opts in, and always after your redaction rules. The local daemon queues everything in an outbox (batched, at-least-once, never on the hook path) and drains it when the team daemon is reachable; <code>swarm doctor</code> shows the lag. One SQLite file of state, TLS by reverse proxy, <a href=\"https://getswarm.vercel.app/docs/11-teams\" target=\"_blank\" rel=\"noopener\">guide</a> (M8.3). <em>Licensing: this one package is source-available (<a href=\"https://github.com/ra3orblade/swarm/blob/main/packages/team/LICENSE.md\" target=\"_blank\" rel=\"noopener\">FSL-1.1-ALv2</a>, Apache-2.0 after two years); everything else is and stays Apache-2.0 — one machine free, a second person is the product (OQ-15).</em></li><li><b><code>swarm login</code></b> — OIDC device-code sign-in against the team daemon (which is the OAuth client — your laptop never holds an OIDC credential; a static shared token or open mode for labs). First user becomes admin; roles are viewer / developer / admin. Login registers the machine (its token is bound to you) and pins the org's policy signing key. <code>swarm install --config-url &lt;url&gt;</code> is the one-flag fleet onboarding (M8.3c/f).</li><li><b>Cluster-wide claims</b> — a claim taken on one machine registers upstream; a second machine claiming the same task is refused with the holder's name (<code>alice@her-laptop</code>), and if the cluster says someone else holds it, the local claim is revoked — the worktree is never touched. Offline degrades to local-only, fail-closed as ever (M8.3d).</li><li><b>Team dashboard</b> — served by the team daemon: machines (live / quiet), active cluster claims, spend today / by project / <b>by user</b> / by machine / by day, and the forwarded activity feed, live over SSE (M8.3e).</li><li><b>Signed org policy</b> — an admin posts the org's <code>policy.toml</code> once; every machine fetches it, verifies the ed25519 signature against the key pinned at login, and installs it as the org layer — locked rules included. A tampered policy is reported and never installed (M8.3f, closes the OQ-3 signing deferral).</li><li><b>Team budgets + chargeback</b> — org / user / project ceilings (daily + monthly) set on the team daemon and enforced with the same semantics as the local <code>[budget]</code>: warn incident, <code>ask</code> on spending tools, or stop spawned runs. Monthly export by user, machine, model or <b>task — your ticket ids</b> when the task source is GitHub Issues or Linear: <code>GET /t1/spend/export?month=…&amp;by=task&amp;format=csv</code> (M8.4).</li><li><b>Model allow-list</b> — <code>[models] allow = [\"claude-*\"]</code> (org-lockable): spawned runs and dispatch refuse a disallowed model; an interactive session on one opens a single incident — observed, never interrupted (M8.4).</li><li><b>Aider + opencode adapters</b> — six agents now show up with sessions, turns, tokens and cost: Claude Code, Codex, Grok, Gemini CLI, <b>Aider</b> (its own <code>.aider.chat.history.md</code>, one file holding many sessions) and <b>opencode</b> (its SQLite database, read-only). Both report their exact spend themselves, so their turns carry it verbatim and repricing never touches them (M5.4; Cline deferred).</li><li><b>Outcomes</b> — did the agent's work survive? Branches join sessions → PR → merged / reverted, with per-model and per-agent scorecards: merge rate, median session-start→merge, $ per merge. New <b>Outcomes</b> view under Insight (M9.2).</li><li><b>Stuck badge</b> — the daemon watches live sessions' recent tool calls for repeat-and-failing loops and all-failing streaks (conservative: <code>git status</code> polling never counts) and marks the session <b>Stuck</b> on Fleet with a desktop notification. A heuristic; nothing is interrupted (M9.3).</li><li><b>Collision graph</b> — a live bipartite graph of running sessions × the files they touch; a file two sessions hold with at least one writer glows red as a merge conflict waiting to happen. New <b>Graphs</b> view with a contested-count badge (M9.12).</li><li><b>Sidebar navigation + ⌘K</b> — the flat header links became a grouped sidebar nav (Observe / Work / Insight / Guard) that collapses to an icon rail, and ⌘K opens a palette over every view, project and session, falling through to Search (M9.1).</li><li><b>Ops</b> — <code>swarm backup</code> (a consistent <code>VACUUM INTO</code> snapshot of <code>~/.swarm</code>, zero downtime) and <code>swarm restore</code>; <code>swarm doctor --migrate</code>; Prometheus metrics at the team daemon's <code>/t1/metrics</code>; <code>[notify] webhook</code> POSTs every incident as Slack-compatible JSON (M8.5).</li></ul><h4>Fixed</h4>\n<ul><li>Replay, <em>Resume where it died</em> and the dry-run <em>Re-run</em> buttons were unreachable — dead click targets on the session page.</li><li>The user guide caught up: a Teams page, the M8 commands, all six agents, and the <code>SWARM_GUARD=off</code> description (org-locked rules stay enforced — true since 0.8, documented wrong until now).</li></ul><h4>Notes</h4>\n<ul><li>The privacy posture is unchanged and now stated precisely: with no <code>[team] url</code> and no <code>[notify] webhook</code> configured, nothing about your sessions leaves the machine — the <a href=\"https://getswarm.vercel.app/docs/10-privacy-and-faq\" target=\"_blank\" rel=\"noopener\">privacy page</a> lists the five opt-in egress paths.</li><li>The team daemon package is not yet on npm; run it from a clone (<code>bun packages/team/src/bin.ts</code>). Pricing for the paid tier is still open.</li></ul>"},"0.9.0":{"date":"2026-08-24","html":"<p>The crew release: the agents on your machine stop being strangers. They message each other and you, follow a declared workflow instead of a hopeful prompt, and every major CLI brand now shows up — Claude, Codex, Gemini, Grok. Plus the first-run and update experience a launch deserves.</p>\n<h4>Added</h4>\n<ul><li><b>Agent messaging</b> — <code>swarm_send(to, text)</code> reaches another session (id or unique prefix), whoever holds a task, or <code>\"lead\"</code> (your interactive session in the project). Delivery: on the recipient's next tool call as injected context, immediately over stdin to a spawned run, or pulled with <code>swarm_inbox</code> (which now returns answers <em>and</em> messages) — exactly once. A <b>messages</b> thread with compose box on every session page; <code>swarm msg send|ls</code> (M7.6, OQ-12 decided).</li><li><b>Workflows</b> — <code>[[workflows]] name = \"ship\" steps = [\"implement\", \"gate:tests\", \"gate:review\", \"pr\"]</code> in <code>.swarm.toml</code>; <code>swarm workflow ship &lt;task&gt;</code> and the daemon advances it: run steps spawn an agent in the task's worktree (told what the workflow will do itself), gate steps execute — only a pass advances — and <code>pr</code> pushes and opens the pull request from the ledger. A failed step stops with a <code>workflow_failed</code> incident; a daemon restart marks in-flight workflows stopped, honestly. <b>Workflows</b> on the Board with per-step chips (M7.8).</li><li><b>Gemini CLI adapter</b> — <code>~/.gemini</code> chat recordings are discovered and priced like every other agent: sessions, turns, tokens, cost, sparkline, Timeline, Spend. Schema from upstream source; first real-session validation pending (M5.4).</li><li><b>Timeline that shows the work</b> — bars are now a faint base with a tick per turn: bursts and idle stretches are visible instead of painted over. A thin claims lane per project shows lease spans (held / expired / orphaned). Recent gates carries a per-gate pass/fail history strip; every pinned project gets a 14-day spend sparkline in the sidebar (M5.7).</li><li><b><code>swarm demo</code></b> — a seeded demo dashboard on its own home and port: four agent brands, a live lease, an orphaned claim, gate history, incidents, a question, a message, a workflow mid-flight. Tailers are off in demo mode, so it never ingests your real logs — and your real data is never touched (delete <code>~/.swarm/demo</code> to reset).</li><li><b>Update that actually updates</b> — after an upgrade the dashboard notices the newer version on disk and offers a one-click daemon restart (the daemon re-execs into the new build and the page reloads). Long-lived tabs re-check every 5 minutes.</li><li><b>First-run onboarding</b> — an empty Fleet now explains the three steps (hook in — with a live <em>not installed</em> badge —, open any agent session, watch it appear) instead of showing a blank table.</li></ul><h4>Fixed</h4>\n<ul><li>External links in the desktop app (PR titles, Documentation, feedback, the just-opened PR) open in the browser — the webview silently swallowed them before.</li><li>Section-header actions (New worktree, Collect stale, timeline ranges) are proper small buttons instead of shouting uppercase with off-baseline icons.</li><li>The timeline claims lane no longer collides with the kanban's styles; a test file that broke lint on main is formatted.</li></ul><h4>Notes</h4>\n<ul><li>Windows builds are produced by CI as before but this release had no human Windows smoke test — reports welcome.</li></ul>"},"0.8.0":{"date":"2026-08-23","html":"<p>The trust release: Swarm becomes something a team and a security reviewer can rely on, without giving up local-first. An org can pin the rules that matter and they hold even when the daemon is down; every record says who did it; the daemon has a credential; what is stored is exportable and redactable; a second agent can be the reviewer. And the dashboard stopped looking like a list of tables.</p>\n<h4>Added</h4>\n<ul><li><b>Org policy layer</b> — a third config file, <code>~/.swarm/policy.toml</code> (or <code>$SWARM_POLICY</code>), sits under global and repo config and may declare <code>locked = [\"rules.destructive_git\", \"rules.protected\", …]</code>: dotted keys or whole subtrees the layers below cannot change. A locked key keeps the policy's value, every attempt to override it is a <code>policy</code> incident, and <code>swarm doctor</code> shows which file set each value and who tried to change it. <code>GET /v1/policy</code> exposes provenance (M8.1).</li><li><b>Tamper detection</b> — on every session start the daemon checks that all ten hook entries are still in <code>~/.claude/settings.json</code> with a sane timeout, that no lower config layer fights a locked key, and that <code>SWARM_GUARD=off</code> isn't set while the policy locks rules (it is then ignored). Each finding opens a <code>policy</code> incident once; <code>swarm doctor</code> prints the same (M8.1b).</li><li><b>Fail-closed for locked rules</b> — while the policy locks any rule the daemon keeps <code>~/.swarm/policy.cache.json</code> (locked modes + a snapshot of live sessions and held worktrees, integrity-hashed). If the daemon is unreachable on a tool call, the hook shim enforces exactly those rules from the cache; everything else still fails open (M8.1c, OQ-3 resolved).</li><li><b>Who did it</b> — every ledger record and every event carries an <code>actor</code> (<code>human</code> / <code>agent</code> / <code>run</code> / <code>daemon</code> + id); existing rows were back-filled from the owner strings clients always sent. Schema changes now go through versioned migrations (<code>/v1/health</code> and <code>doctor</code> report the schema version) (M8.2a).</li><li><b>Daemon token</b> — the daemon creates <code>~/.swarm/token</code> on first start; the CLI, MCP server, hook shim and <code>swarm ui</code> send it. Local callers may still omit it by default; <code>[daemon] auth = \"required\"</code> makes every call carry it, a wrong token is always refused, and anything that isn't loopback always needs it (M8.2b).</li><li><b>Audit log + export</b> — the ledger-changing subset of events (claims, worktrees, PRs, questions, dispatch, resources, processes, gates, handoffs, permissions, incidents, run results, session start/end), with actor: <code>swarm audit export [--since 30d] [-p] [--type …] [--format jsonl|csv|json]</code> and <code>GET /v1/audit</code>. Retention is split — <code>[events] retain_days = 30</code> for chatter, <code>[audit] retain_days = 0</code> (forever) for audit rows (M8.2c).</li><li><b>Privacy on ingest</b> — <code>[privacy] store_prompts = false</code> keeps the event but not the prompt text, <code>store_reasoning = false</code> keeps token counts but not assistant text, <code>redact = [\"ACME-[0-9]+\"]</code> scrubs stored strings; API-key-looking tokens and <code>Bearer …</code> credentials are always redacted. Global-only keys an org can lock (M8.2c).</li><li><b>Review as a gate</b> — <code>[gates.review] builtin = \"review\"</code> (optional <code>model</code>, <code>timeout</code>) spawns a read-only <code>claude -p</code> over the worktree's diff with a fixed rubric. The verdict is derived from the findings (any blocker/major fails, whatever the reviewer claims), findings are the evidence, and a reviewer that times out or won't answer in JSON is a fail with that reason. Same registry, logs, incidents and triggers as executed gates (M7.9).</li><li><b>Project settings</b> — sidebar menu → <b>Settings…</b>: name, icon (any emoji — a quick row, a browse-all grid, or the OS picker — or an image file, downsized to a square), a color slot, pinned. The glyph replaces the folder icon everywhere the project appears.</li><li><b>Board that is a board</b> — a KPI strip (live / held / worktrees / ready / incidents), tasks as a kanban (Ready · In progress · Blocked · Done), and a worktree map of tiles grouped by project and colored by live / dirty / unpushed / merged. Tasks and Worktrees keep a Cards | Table toggle.</li><li><b>Row menus</b> — every row on the Board, PRs and Incidents has one menu (hover kebab, right-click, or Enter) carrying its actions — open, diff, PR, run, claim, gates, release, stop, ack, codify, merge, copy — instead of inline links; destructive ones last and confirmed. Menus are wider and labels never ellipsize.</li></ul><h4>Changed</h4>\n<ul><li><code>doctor</code> reports the daemon and schema version, per-event hook coverage, and the policy file with its locked keys.</li><li><code>/v1/health</code> reports <code>schema</code> and <code>auth</code>.</li></ul><h4>Fixed</h4>\n<ul><li>Scratch repositories under the OS temp dir (test fixtures, spawned-run clones) no longer appear as projects in the sidebar.</li><li>Fleet's <code>now</code> column had no room; ended sessions show their last assistant line instead of \"session ended\".</li><li>Incidents show the command's gist (the leading <code>cd … &amp;&amp;</code> stripped) and <code>(removed)</code> instead of a raw id for a deleted project; Spend's attribution tables lost their empty first column.</li><li>Emoji tiles and the icon preview no longer clip in the desktop app's WebKit view.</li></ul>"},"0.7.0":{"date":"2026-08-23","html":"<p>The orchestrate release: Swarm runs a task end to end on its own and you stay in control. New worktrees start warm, gates execute instead of being vouched for, <code>swarm dispatch</code> hands ready tasks to autonomous runs whose outcome is derived from the ledger, an agent that needs a human decision can ask for one, and a budget keeps the bill in bounds.</p>\n<h4>Added</h4>\n<ul><li><b>Budgets</b> — <code>[budget] daily = 25</code> / <code>weekly = 100</code> in <code>.swarm.toml</code> puts a spend ceiling on a repo, judged from the same transcript-priced numbers as the Spend view. At <code>warn_at</code> (80%) a <code>budget</code> incident opens; past 100% <code>on_exceed</code> decides: <code>\"warn\"</code>, <code>\"ask\"</code> (every Bash / Edit / Write in the repo asks first), or <code>\"stop\"</code> (spawned runs stopped, dispatch queue cleared). One incident per level per day; a budget tile on the Spend view.</li><li><b>Run profiles</b> — <code>swarm run --profile no-edits|read-only</code> (and the Run / Dispatch drawers, <code>[dispatch] profile</code>) narrow what a spawned agent may do: <code>no-edits</code> keeps the shell but not the file tools, <code>read-only</code> keeps only read and search.</li><li><b><code>swarm_context</code></b> — an agent can re-read what Swarm told it at session start, current as of now (holds, lease left, handoff, gates, resources, rule modes), plus answers to its questions. <code>GET /v1/context</code>. And <code>swarm install</code> now registers the same MCP server with <b>Codex CLI</b> and <b>Gemini CLI</b> when they're installed, so they get the <code>swarm_*</code> tools too (M7.10).</li><li><b>Ask the human</b> — an agent that hits a decision only a person can make calls <code>swarm_ask</code> (with optional suggested answers). The question shows on the session page under <b>waiting on you</b> with the options as buttons, the session gets an <b>Asking</b> badge on Fleet, and a desktop notification fires. Answer there, or <code>swarm answer &lt;id&gt; &lt;text&gt;</code>; <code>swarm questions</code> lists what's open. The answer reaches the agent by itself — stdin for a spawned run, <code>[swarm]</code> context on the next tool call for an interactive session, <code>swarm_inbox</code> on demand — and a session starting later in the same task's worktree is told about open questions and answers that never arrived (M7.7).</li><li><b>Dispatch</b> — <code>swarm dispatch --ready</code> (or pick tasks; the <b>Dispatch</b> chip on the Board's Tasks; <code>swarm_dispatch</code> from a lead agent) hands ready tasks to autonomous runs: each gets its own claim and worktree and a <code>claude -p</code> run told to work there, run the gates, hand off and open the PR; <code>[dispatch] max_parallel</code> (default 2) run at once per repo, the rest queue. When a run ends Swarm derives the outcome from the ledger — executable gates re-run by the daemon, PR looked up on the forge — and reports <b>done</b>, <b>gates-failed</b>, <b>no-pr</b>, <b>crashed</b> or <b>stopped</b>; anything short of done opens a <code>dispatch_failed</code> incident and keeps the claim for you to resume or release. A dispatched run never edits the task list. <code>swarm dispatch status | clear</code>, <code>GET/POST/DELETE /v1/dispatch</code>, a <b>Dispatch</b> section on the Board (M7.5).</li><li><b>Diff and Open PR</b> — every worktree row on the Board (and a session page whose cwd is a worktree) gets <b>Diff</b>: the commits and files it carries beyond the main checkout's branch, uncommitted and untracked changes included, with a coloured unified diff per file. <b>PR</b> pushes the branch and opens a pull request (<code>gh</code>) or merge request (<code>glab</code>) prefilled from the task's title, the latest handoff, the required gates as a checklist and the file list — editable before it goes; refuses uncommitted changes, reuses an open PR for the branch. <code>swarm wt diff</code>, <code>swarm pr open [--dry-run]</code>, MCP <code>swarm_pr_open</code>; a <code>pr.opened</code> event on the Timeline (M7.3).</li><li><b>Gates that run themselves</b> — a gate with a command in <code>.swarm.toml</code> (<code>[gates.tests] cmd = \"bun test\"</code>, optional <code>timeout</code> / <code>cwd</code>) is executed rather than vouched for: <code>swarm gate run &lt;task&gt;</code> (or <code>swarm_gate_run</code> from the agent, or <b>Gates</b> on a held task row on the Board) runs every required gate that has a command inside the task's worktree and records the verdict — exit 0 passes, the rubric is the command and how it ended, the evidence is the output tail, the log lives in <code>~/.swarm/logs</code>. Runs go through the process registry and are killed at <code>timeout</code>. When a session in a held worktree ends, the daemon runs them on its own and writes the verdicts into that session's auto-handoff (<code>[gates] auto = \"session-end\" | \"stop\" | \"off\"</code>) (M7.4).</li><li><b>Worktrees without a task</b> — <code>swarm wt create &lt;name&gt;</code> makes a worktree for a spike or a review checkout (under <code>~/.swarm/worktrees/&lt;project&gt;/</code>, branch <code>wt/&lt;name&gt;</code>, bootstrapped like a claim); <code>swarm wt</code> lists every worktree with <b>drift</b> against the main checkout's branch (<em>N behind</em>, <em>merged</em>); <code>swarm wt open</code> opens it with <code>[worktree] open = \"code {path}\"</code> or the file manager; <code>swarm wt rm</code> removes it with the same refusals as <code>release</code> (dirty, unpushed, never the main checkout, never a held claim); <code>swarm wt gc [--apply]</code> finds worktrees whose branch was merged or whose claim was released and the folder left behind. The Board's Worktrees section gets the drift column, <b>Open</b> / <b>Remove</b> per row, <b>New worktree</b> and <b>Collect stale</b> (M7.2).</li><li><b>Warm worktrees</b> — <code>.swarm.toml [worktree] copy = [\".env.local\"]</code> and <code>setup = \"bun install\"</code> bootstrap every new worktree: the files are copied from the main checkout as the claim is made and <code>setup</code> runs inside the worktree in the background (log in <code>~/.swarm/logs/&lt;project&gt;/bootstrap-&lt;task&gt;.log</code>, a <code>worktree.bootstrapped</code> event on the Timeline). <code>swarm run</code> waits for it before starting the agent; an interactive <code>swarm claim</code> prints the log path and returns at once. A failing setup opens a <code>bootstrap_failed</code> incident but never takes the claim away. Paths are repo-relative only (M7.1).</li></ul><h4>Fixed</h4>\n<ul><li>The Fleet agent badge no longer renders a stray \"…\" after the pill: badge-only cells clip instead of ellipsizing, and the column got a few more pixels.</li></ul>"},"0.6.0":{"date":"2026-08-23","html":"<p>The learn release: the data Swarm has been collecting starts paying back. Replay what an agent did, see what each task cost, turn an incident into a rule, resume a session that died, try a rule on history before switching it on, read your backlog from GitHub or Linear, and search everything Swarm remembers.</p>\n<h4>Added</h4>\n<ul><li><b>Session Replay</b> — a <b>Replay</b> button on any session steps through its tool calls one at a time, showing the full input and output of each (Prev/Next, a slider, ←/→ keys). See exactly what an agent did, in order (M4.1).</li><li><b>Cost by task</b> — the Spend view attributes cost and tokens to each task (matched to a claim by the session's worktree), plus a <b>Context budget</b> table ranking sessions by how much context they re-processed — a signal for agents re-reading the same material. <code>GET /v1/attribution</code> (M4.2).</li><li><b>Codify an incident</b> — the Incidents feed has a <b>Codify</b> action that turns an incident into a <code>.swarm.toml</code> rule snippet and a CLAUDE.md lesson, both copyable. A rule that keeps firing as <code>ask</code> suggests hardening to <code>deny</code> (M4.3).</li><li><b>Desktop notifications</b> — opt-in native notifications (settings menu) for a spawned run waiting on a permission, or a claim orphaned with unfinished work; clicking opens the Allow/Deny card or the Board. Quiet while you're looking at the dashboard (M4.7).</li><li><b>Auto-handoff, and resume where it died</b> — whenever a session working in a claimed worktree pauses or ends, Swarm derives a handoff from what it did: files edited, the last verification-looking command, the last request, the last thing it said. One <code>auto:</code> handoff per session, replaced on every pause, silenced by a handoff left on purpose. An ended session's page gets <b>Resume where it died</b>, which spawns a run on the task from that handoff plus the session's last actions; <code>swarm run resume &lt;session-id&gt;</code>; <code>GET/POST /v1/sessions/:id/resume</code> (M4.4).</li><li><b>Rule dry-run</b> — <b>Dry-run rules</b> on the Incidents view replays a project's recorded tool calls through the rules under modes you pick: what would have been asked or denied, per rule, before you switch anything on. It also flags <b>flaky signals</b> — a rule that keeps firing on the same command that is then allowed through anyway. Nothing is recorded. <code>swarm rules dryrun [--set rule=mode,…]</code>; <code>GET /v1/rules/dryrun</code> (M4.6).</li><li><b>GitHub Issues and Linear as task sources</b> — <code>[tasks] source = \"github\"</code> reads the repo's issues through the logged-in <code>gh</code> (optional <code>labels</code> filter); <code>source = \"linear\"</code> reads Linear through its API with <code>LINEAR_API_KEY</code> from the daemon's environment (optional <code>team</code>). Both land in the Board's Tasks, <code>swarm tasks</code> and <code>swarm_next_task</code> like a markdown backlog: closed/completed is done, in-progress is active, <em>depends on #n</em> / <em>blocked by</em> become dependencies. Read-only; no credential stored (M4.8).</li><li><b>What's New in the app</b> — the dashboard shows the release notes for the running version: a <b>What's New</b> item in the settings menu, in the desktop app's <b>Swarm</b> menu, and in the tray. It also opens once on its own the first time you run a new version. Notes are parsed from <code>CHANGELOG.md</code> into <code>release-notes.js</code> at build time, so they work offline with no repo checkout.</li><li>The desktop <b>Check for Updates…</b> is in the system menu bar (Swarm menu), not only the tray.</li></ul>"},"0.5.0":{"date":"2026-08-22","html":"<p>The drive release: Swarm doesn't just watch agents now — it starts them, in a claimed worktree, and brokers what they're allowed to do. Plus the coordination primitives that make an autonomous run safe to leave alone: leases that renew themselves, gates that gate, and a handoff the next session reads on its own.</p>\n<h4>Added</h4>\n<ul><li><b><code>swarm run</code></b> — spawn an agent on a task. <code>swarm run --task login-form --prompt \"…\"</code> claims the task and the daemon starts <code>claude -p</code> in its worktree with stream-json on both ends. Steer it with <code>swarm run send</code>, stop it with <code>swarm run stop</code> (stdin closed, then the process registry's pid-based TERM/KILL — never by pattern), list with <code>swarm run ls</code>. The session shows in Fleet as ▶ spawned and is ingested like any other; every finished turn is a <code>run.result</code> event with cost and turns (M3.1).</li><li><b>Run from the dashboard</b> — Ready (or held) task rows on the Board get a <b>Run</b> action: a drawer with the prompt prefilled from the task, permission mode, model and max turns (⌘⏎ to submit). The spawned session opens with a stdin box to steer it and a <b>Stop</b> button (M3.3).</li><li><b>Permission broker</b> — a <code>swarm run</code> agent's tool-permission prompts go through the same rules as your interactive sessions: a rule <code>deny</code> auto-denies with the reason, an unflagged tool auto-allows so the agent can make progress, and anything the rules mark <code>ask</code> is held and surfaced on the session as an <b>Allow / Deny</b> card. No blocking on a terminal you can't see. Uses <code>--permission-prompt-tool stdio</code>; <code>POST /v1/runs/:id/permissions/:reqId</code> (M3.2).</li><li><b>Leases renew themselves.</b> A session working inside a claimed worktree extends the lease on any activity (hook or transcript growth) once it is past half-way — no more <code>swarm renew</code> in a long session. Expired leases whose worktree still holds uncommitted or unpushed work are marked <b>Orphaned</b> within a minute and open an <code>orphaned_claim</code> incident; nothing is removed automatically (M1.2).</li><li><b>Handoffs, injected on start</b> — <code>swarm handoff &lt;task&gt; --done … --remaining … [--files] [--verify]</code> (or <code>swarm_handoff</code>) records what the last holder leaves; <code>swarm resume</code> / <code>swarm_resume</code> reads it. The next session that starts inside that task's worktree gets it automatically as <code>SessionStart</code> context, along with what it holds and the lease left, gate status, held resources, and the repo's rule modes (M1.3).</li><li><b>Gates</b> — verification runs recorded against a task: <code>swarm gate record login-form review pass --rubric \"tests green, error paths read\"</code> (or <code>swarm_gate_record</code>). A run without a rubric is rejected; the latest run per gate decides; failed runs are never deleted and open a <code>gate_failed</code> incident. <code>.swarm.toml [gates] required = [\"review\"]</code> declares what every task must pass; the Board's Tasks grid shows ✓ / ✗ / — per gate and a <b>Recent gates</b> section lists the runs (M2.2).</li><li><b>The MCP tools finally connect.</b> <code>swarm_status</code>, <code>swarm_claim</code>, <code>swarm_next_task</code>, <code>swarm_handoff</code>, <code>swarm_gate_record</code>, <code>swarm_acquire_resource</code> and the rest are reachable from Claude Code — see the fix below.</li><li>Dashboard deep links (<code>?view=board&amp;project=&lt;id&gt;&amp;session=&lt;id&gt;</code>) and a screenshot carousel with a lightbox on the website; <code>tools/screens.ts</code> re-captures the shots with Playwright at 2×.</li></ul><h4>Fixed</h4>\n<ul><li><b>Swarm's MCP tools were never reachable.</b> <code>swarm install</code> wrote <code>mcpServers.swarm</code> into <code>~/.claude/settings.json</code>, which Claude Code ignores — user-scope MCP servers live in <code>~/.claude.json</code> (what <code>claude mcp add -s user</code> edits). Install now registers there (and cleans the stale settings.json entry); <code>claude mcp list</code> shows <code>swarm ✔ Connected</code>. <b>Re-run <code>swarm install</code> after upgrading.</b></li><li><b>The daemon reads global config from where its state lives.</b> <code>[rules]</code> / <code>[gates]</code> / <code>[tasks]</code> in <code>~/.swarm/config.toml</code> are resolved against the daemon's home (<code>SWARM_HOME</code>), matching the DB and logs — spawned runs, which execute in a worktree without the repo's <code>.swarm.toml</code>, still see machine-wide rules.</li></ul>"},"0.4.1":{"date":"2026-08-22","html":"<h4>Fixed</h4>\n<ul><li><b>PRs view went dark under the desktop app.</b> A daemon launched from the Dock gets macOS's bare GUI <code>PATH</code>, so Homebrew's <code>gh</code> / <code>glab</code> were invisible and the forge silently returned nothing. The daemon now also looks in <code>/opt/homebrew/bin</code>, <code>/usr/local/bin</code>, Linuxbrew and <code>~/.local/bin</code>; <code>swarm doctor</code> reports forge CLI auth and warns when <code>glab</code> relies on a shell-only <code>GITLAB_TOKEN</code>.</li><li>Icons are vertically centred on their text again (<code>vertical-align: middle</code> instead of a fixed <code>-3px</code> tuned for the old type scale).</li><li>npm publish moves to <b>trusted publishing</b> (OIDC, no <code>NPM_TOKEN</code>), the same setup as fancy-menus.</li></ul>"},"0.4.0":{"date":"2026-08-22","html":"<p>The enforcement release: rules that watch file writes, not just Bash; a backlog Swarm can read; servers Swarm starts and stops by pid; and an Incidents feed you can clear.</p>\n<h4>Added</h4>\n<ul><li><b>Rules on file writes</b> — two new rules evaluated on <code>Write</code> / <code>Edit</code> / <code>MultiEdit</code> / <code>NotebookEdit</code> paths (and Bash working directories), not only Bash commands. <code>no_foreign_worktree</code> (default <code>ask</code>) stops a session from editing inside a worktree another claim holds — <em>never touch a worktree you don't hold</em> is now a hook decision, with holding inferred from the session's cwd. <code>claim_required_to_write</code> (opt-in) makes a repo's shared checkout read-only without a claim: claim a task, get a worktree, write there. Both per repo as <code>ask | deny | off</code>.</li><li><b>Incidents view</b> — the denied-action feed as its own tab: Open / All, per-rule counts, reason and session per row, <b>Ack</b> and <b>Ack all</b>; the open count sits in the nav. <code>GET /v1/incidents?open=1&amp;project=</code>, <code>POST /v1/incidents/:seq/ack</code>, <code>POST /v1/incidents/ack</code>, <code>/v1/state.openIncidents</code>. The Board keeps a short open-only section.</li><li><b>Task source</b> — <code>.swarm.toml</code> <code>[tasks] source = \"docs/plan.md\"</code> points at a markdown file whose <code>ID | Task | Depends | Status</code> tables are the backlog (✅ / 🟡 / ⚪, dependencies by task id or milestone prefix). The Board gets a <b>Tasks</b> section (Ready / Open / All, <em>Claim</em> per row), the CLI <code>swarm tasks [--ready]</code>, and agents <code>swarm_next_task</code> — the first unclaimed task whose dependencies are done. Swarm's own roadmap is its task source. Markdown only (OQ-5 decided).</li><li><b><code>swarm serve</code> / <code>swarm proc</code></b> — <code>swarm serve start --name web -- npm run dev</code> allocates a free port (ledger + bind probe), runs the command detached with <code>PORT</code> set and logs under <code>~/.swarm/logs/&lt;project&gt;/</code>, registers pid + start time, and acquires the singleton — so a second <code>web</code> fails closed and the port is protected for every other session with no config. <code>serve ls | stop [name|pid]</code>, <code>proc start | ls | stop</code> for workers without a port. Stop signals registry pids only, verified by start time; nothing is ever killed by pattern. <code>POST /v1/ports/allocate</code>, <code>GET/POST/DELETE /v1/processes</code>; <b>Processes</b> section on the Board with <em>Stop</em>.</li><li><b>Star nudge</b> — once a month at most, never on first open, the dashboard asks for a GitHub star. <em>Later</em> snoozes 30 days, <em>Don't ask again</em> is final; localStorage only.</li><li><b>Sidebar drag-and-drop</b> — pinned projects reorder by dragging; the order persists on the daemon (<code>PUT /v1/projects/order</code>, <code>Project.order</code>).</li><li><b>Desktop app menu</b> — a real application menu (Swarm / Edit / View / Window): ⌘C/⌘V work, <b>View › Zoom In / Zoom Out / Actual Size</b> (<code>⌘+</code> <code>⌘−</code> <code>⌘0</code>) scale the dashboard (persisted), plus Reload and Full Screen.</li></ul><h4>Fixed</h4>\n<ul><li><b>Shared-tree rules no longer lose sight of a session mid-turn.</b> <code>shared_tree</code> / <code>destructive_git</code> keyed on a 2-minute last-seen window fed only by hooks, so a neighbour three minutes into a long turn became invisible — and its uncommitted work unguarded. Transcript growth now counts as activity (the tailer bumps <code>last_seen_at</code>), and the liveness window is the daemon's 10-minute idle threshold (<code>LIVE_WINDOW_MS</code>). A false positive costs one confirmation; a false negative cost someone's work.</li><li><code>destructive_git</code> also matches <code>git stash drop</code>, <code>git stash clear</code> and <code>git branch -D</code>.</li><li>Dashboard type scale is one step larger across the board (base 13 → 14 px; the smallest labels 10 → 11 px) — it had drifted too small, especially in the desktop app.</li><li>The <b>PRs</b> tab icon (and the branch/commit glyphs) were near-invisible at 15 px; they use the pixelarticons <em>sharp</em> variants now.</li><li>The daemon dot stayed red for up to 15 s after load on a healthy connection (the SSE stream sent nothing until its first heartbeat); the stream now flushes immediately.</li><li>The nav flashed \"Fleet\" before the restored tab was applied; session-detail event kinds (<code>userpromptsubmit</code>) no longer overflow into the message column; \"Unpinned · seen, not pinned\" keeps its spacing.</li></ul><h4>Changed — docs</h4>\n<ul><li>README and site now say what the code does: Codex CLI and Grok sessions are tailed alongside Claude Code; the requirements and architecture diagram list all three.</li><li>Rules are described as <b>guardrails against accidents, not a sandbox</b> — the guide has a new \"What rules are — and aren't\" section spelling out that a denied Bash command can be routed around (script, heredoc, direct file edit), and that worktree isolation via claims is the real fix. The site's feature cards lead with claims, rules and resources instead of Fleet and Spend.</li></ul><h4>Changed — performance</h4>\n<ul><li><b>Daemon never spawns <code>git</code> on a request.</b> Worktree status (<code>git worktree list</code> + <code>status</code>/<code>rev-list</code> per worktree, ~0.8 s across a fleet) moves to a 15 s background refresh with async <code>Bun.spawn</code>; <code>/v1/state</code> serves the cache (612 ms → ~15 ms). Claim/release invalidate it.</li><li><b>Hook round-trips are two indexed statements</b>, not two <code>git rev-parse</code> spawns plus a transcript-directory scan: <code>cwd → project</code> is cached 60 s, the inline transcript tail is debounced to once per 2 s per session (the 5 s tailer covers steady state), and subagent directories are re-listed only when their mtime moves.</li><li><b>Events store ~2 KB, not ~10 KB.</b> <code>tool_input</code> is clipped at 2 KB and <code>tool_response</code> at 4 KB in <code>payload</code> (<code>{truncated, bytes, preview}</code>), and the tool I/O is no longer duplicated in <code>raw</code>. Existing databases are rewritten once on boot and <code>VACUUM</code>ed (96 MB → 27 MB here). Retention: events older than 30 days are pruned daily (incidents kept), <code>raw</code> is cleared after 7 days.</li><li><b>Wire shape.</b> SSE frames, <code>GET /v1/events</code> replays and <code>GET /v1/sessions/:id/events</code> carry <code>seq/ts/type/projectId/sessionId/payload{hook,summary,…}</code> only — no <code>raw</code>, no tool I/O (a 5.5 MB session fetch is now ~150 KB). <code>GET /v1/events/:seq</code> returns one stored event in full; <code>?full=1</code> on the SSE replay does the same. <code>?since=0</code> replays the last 200 events, not the table.</li><li><b>Incremental session view</b> — <code>GET /v1/sessions/:id/events?after=&lt;seq&gt;&amp;afterTs=&lt;iso&gt;</code>; the dashboard appends instead of re-fetching 500 events + 500 turns on every hook.</li><li><b>Dashboard render loop</b> — one <code>requestAnimationFrame</code> scheduler, snapshot <code>seq</code> short-circuit, paused while the tab is hidden, exponential SSE reconnect backoff; session log merges two sorted lists and caches rendered rows; data-grid memoises persisted layout and uses one <code>Intl.Collator</code>; charts memoise the turn strip.</li><li>SQLite: indexes on <code>events(type, seq)</code> and <code>turns(ts)</code>, <code>mmap_size</code> 256 MB, cached prepared statements (<code>db.query</code>), <code>sessions</code>/<code>spend</code>/<code>incidents</code> memoised per write generation; <code>/v1/spend</code> is its own endpoint.</li><li>Background tick: Codex/Grok discovery every 15 s when idle; Grok <code>summary.json</code> re-read only on mtime change.</li></ul>"},"0.3.0":{"date":"2026-08-22","html":"<p>The coordination release: rules you can configure, runtime resources agents can hold, and the merge queue at the end of the loop.</p>\n<h4>Added</h4>\n<ul><li><b>Config system</b> — <code>~/.swarm/config.toml</code> (global) deep-merged with an optional <code>&lt;repo&gt;/.swarm.toml</code>. Lenient validation: bad config can never take the daemon down. Daemon port preference is <code>SWARM_PORT</code> &gt; config &gt; 7777. See <code>docs/13-config.md</code>.</li><li><b>Rule engine v2</b> — every rule is per-repo configurable as <code>ask | deny | off</code>: <code>shared_tree</code>, <code>destructive_git</code>, <code>pattern_kill</code>, and the new <code>protected_ports</code> (kill/free of a configured port — <code>lsof | kill</code>, <code>fuser -k</code>, <code>kill-port</code> — is asked or denied). <code>deny</code> is returned to Claude Code as a real permission denial.</li><li><b>Incidents</b> — every non-allow decision is recorded (<code>incident.opened</code>: rule, action, command, reason), exposed at <code>GET /v1/incidents</code>, included in <code>/v1/state</code>, and shown on the Board.</li><li><b>Runtime resources (Phase 1)</b> — named singletons for what agents fight over at runtime (dev servers, databases, ports). Fail-closed acquire: holdings live while their pid runs or their lease hasn't expired; the same owner refreshes; dead holdings reap instead of blocking. Release is fail-closed too (owner required, <code>--force</code> overrides). Held ports automatically join the protected-ports rule — acquiring <code>db</code> on 5432 guards <code>lsof -ti:5432 | xargs kill</code> for every other agent, no config needed. HTTP <code>GET/POST /v1/resources</code>, <code>DELETE /v1/resources/:name</code>; MCP <code>swarm_acquire_resource</code> / <code>swarm_release_resource</code> / <code>swarm_resources</code>; CLI <code>swarm res ls|acquire|release</code>.</li><li><b>PRs view</b> — one merge queue across GitHub and GitLab. Forge detection from the git remote (ssh/https, GitLab subgroups, self-hosted), polled through the locally-authenticated <code>gh</code> / <code>glab</code> CLIs with the project root as cwd — no tokens stored, 2-minute per-project cache floor. <code>GET /v1/prs</code>, <code>POST /v1/prs/merge</code> (squash). Merge is offered only on green, mergeable, non-draft rows, behind a confirm.</li><li><b>Board view</b> — Claims, Worktrees, Resources, and Incidents move out of Fleet into their own view; Fleet shows sessions only (Live + Earlier). Last view and project selection persist across reloads.</li><li><b>Stats view</b> — <code>GET /v1/stats</code>; activity line, calendar heatmap, and streaks (daily buckets in local time, DST-immune). <code>swarm stats</code> on the CLI.</li><li><b>Data-grid everywhere</b> — Claims, Worktrees, Resources, Incidents, PRs, and all six Spend tables render through the same sortable / resizable / reorderable grid with per-column filters, a column-visibility menu, and persisted layouts. Header ticks and tooltips make the affordances discoverable.</li><li><b>Desktop: Check for Updates…</b> in the tray menu, wired to the Tauri updater with native dialogs (available / up-to-date / failed) and install-and-restart on accept.</li><li><b>Agent badge</b> on every Fleet and session row, so mixed-agent fleets are labelled consistently.</li><li><b>Website</b> — getswarm.vercel.app: OS-detected downloads from the latest GitHub release, the <code>bunx</code> one-liner, sharing tags with hero art, and (this release) rendered docs and release notes.</li><li><b>Design tokens</b> — the dashboard's CSS contains zero raw hex / rgba / font-size / duration values; the system is documented in <code>docs/12-design-tokens.md</code> with a drift grep.</li><li>Swarm now dogfoods its own rules via the repo's <code>.swarm.toml</code> (<code>shared_tree</code> / <code>destructive_git</code> deny, daemon port protected).</li></ul><h4>Fixed</h4>\n<ul><li><b>Hook resilience</b> — the PreToolUse hook falls back to the default port when <code>daemon.json</code> points at a dead daemon, so a crashed daemon no longer silently disables the guard (this was the gap behind a real <code>git add -A</code> collision).</li><li>Resource liveness: pid 0 was treated as a live process (<code>kill(0)</code> addresses the process group), so those holdings never reaped; tracked pids are now <code>&gt; 0</code>. <code>heldPorts()</code> is one SELECT on the hook path; lazy reap on acquire, sweep on the 5 s tick. Unknown session IDs on acquire no longer mint phantom sessions.</li><li>Session view is two equal columns again (a bare <code>aside</code> selector in the sidebar-collapse CSS captured the session side panel); the log keeps your scroll position across live updates and follows the tail only when pinned to the bottom.</li><li>A pinned project whose root vanished is merged into the live same-name entry (repo renames produced duplicate sidebar rows); the sidebar <code>⋯</code> appears on hover in the count's slot and reserves no space.</li><li>Desktop: quit actually quits, window close hides (macOS convention) and the dock icon restores it, and the <code>swarmd</code> sidecar dies with the app. Dev builds serve the repo's live dashboard instead of a stale staged snapshot.</li><li>Release pipeline: npm publish is skipped cleanly when <code>NPM_TOKEN</code> is absent (since 0.4.1: trusted publishing, no token).</li></ul>"},"0.2.2":{"date":"2026-08-21","html":"<h4>Added</h4>\n<ul><li>Publishable <code>@ra3orblade/swarm</code> npm package (bundled bins + dashboard); <code>bunx @ra3orblade/swarm setup</code> onboarding.</li><li>Enterprise data-grid for Fleet with a collapsible sidebar; pixel-art icon set and bespoke empty-state illustrations; folder picker; green chart palette.</li><li>Desktop: macOS window chrome, animated pixel-logo splash, free-port daemon startup.</li></ul><h4>Fixed</h4>\n<ul><li>Release builds bundle every platform target; Linux ships <code>.deb</code> + <code>.rpm</code> (AppImage disabled until <code>linuxdeploy</code> on GitHub runners is debugged).</li></ul>"},"0.0.6":{"date":"2026-08-21","html":"<p>First signed and notarized macOS desktop build; <code>release.yml</code> became a three-OS matrix (macOS / Windows / Linux) with a native sidecar per runner.</p>"}};