@ra3orblade/swarm 0.7.0 → 0.8.0

package/dist/swarmd.js

@@ -2,6 +2,7 @@
 // @bun
 
 // packages/client/src/daemon.ts
+import { randomBytes } from "crypto";
 import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
 import { homedir } from "os";
 import { join } from "path";
@@ -18,9 +19,65 @@ function writeDaemonInfo(info) {
 `);
   return full;
 }
+var tokenFile = (home = swarmHome()) => join(home, "token");
+function readToken(home = swarmHome()) {
+  try {
+    const t = readFileSync(tokenFile(home), "utf8").trim();
+    return /^[a-f0-9]{64}$/.test(t) ? t : null;
+  } catch {
+    return null;
+  }
+}
+function ensureToken(home = swarmHome()) {
+  const cur = readToken(home);
+  if (cur)
+    return cur;
+  mkdirSync(home, { recursive: true });
+  const t = randomBytes(32).toString("hex");
+  writeFileSync(tokenFile(home), `${t}
+`, { mode: 384 });
+  return t;
+}
 function clearDaemonInfo() {
   rmSync(infoFile(), { force: true });
 }
+// packages/core/src/actor.ts
+var HUMAN_ALIASES = new Set(["cli", "dashboard", "me", "desktop", "human"]);
+var DAEMON_ALIASES = new Set(["daemon", "system", "swarm"]);
+function actorFrom(owner, sessionId, opts = {}) {
+  const o = (owner ?? "").trim();
+  const sid = sessionId?.trim() || undefined;
+  if (opts.runId)
+    return { kind: "run", id: opts.runId, session: sid };
+  if (o.startsWith("auto:"))
+    return { kind: "daemon", id: "daemon", session: sid };
+  if (DAEMON_ALIASES.has(o))
+    return { kind: "daemon", id: "daemon" };
+  if (o === "agent" || o.startsWith("agent:") || o.startsWith("session:"))
+    return {
+      kind: "agent",
+      id: sid ?? o.replace(/^(agent|session):/, "") ?? "agent",
+      session: sid
+    };
+  if (!o || HUMAN_ALIASES.has(o)) {
+    if (!o && sid)
+      return { kind: "agent", id: sid, session: sid };
+    return { kind: "human", id: opts.user?.trim() || "me" };
+  }
+  if (sid && o === sid)
+    return { kind: "agent", id: sid, session: sid };
+  return { kind: "human", id: o };
+}
+function actorFromColumns(kind, id, session) {
+  if (!kind || !id)
+    return null;
+  if (!["human", "agent", "run", "daemon"].includes(kind))
+    return null;
+  const a = { kind, id };
+  if (session && kind !== "human" && kind !== "daemon")
+    a.session = session;
+  return a;
+}
 // packages/core/src/adapters/claude-code/transcript.ts
 function parseTranscriptChunk(chunk) {
   const out = {
@@ -229,6 +286,18 @@ function parseGrokUpdates(chunk) {
   return out;
 }
 // packages/core/src/adapters/claude-code/hooks.ts
+var HOOK_EVENTS = [
+  "SessionStart",
+  "UserPromptSubmit",
+  "PreToolUse",
+  "PostToolUse",
+  "SubagentStart",
+  "SubagentStop",
+  "Stop",
+  "SessionEnd",
+  "Notification",
+  "PreCompact"
+];
 var MAP = {
   SessionStart: "session.started",
   UserPromptSubmit: "prompt.submitted",
@@ -322,6 +391,155 @@ function normalizeHook(event, raw, projectId, ts = new Date().toISOString()) {
     payload.prompt = raw.prompt;
   return { ts, type, projectId, sessionId: raw.session_id ?? null, payload, raw };
 }
+// packages/core/src/audit.ts
+var AUDIT_TYPES = new Set([
+  "session.started",
+  "session.ended",
+  "tool.denied",
+  "claim.acquired",
+  "claim.renewed",
+  "claim.released",
+  "claim.expired",
+  "claim.orphaned",
+  "worktree.created",
+  "worktree.removed",
+  "worktree.bootstrapped",
+  "pr.opened",
+  "question.asked",
+  "question.answered",
+  "dispatch.queued",
+  "dispatch.started",
+  "dispatch.finished",
+  "resource.acquired",
+  "resource.released",
+  "resource.reaped",
+  "process.started",
+  "process.exited",
+  "gate.recorded",
+  "handoff.recorded",
+  "permission.requested",
+  "permission.resolved",
+  "incident.opened",
+  "incident.acked",
+  "run.result"
+]);
+var isAuditType = (t) => AUDIT_TYPES.has(t);
+var AUDIT_TYPES_SQL = [...AUDIT_TYPES].map((t) => `'${t}'`).join(", ");
+var DEFAULT_PRIVACY = {
+  store_prompts: true,
+  store_reasoning: true,
+  redact: []
+};
+var BUILTIN_REDACT = [
+  /\b(sk|pk|rk|ghp|gho|ghu|ghs|xoxb|xoxp|AKIA)[A-Za-z0-9_-]{16,}\b/g,
+  /\bBearer\s+[A-Za-z0-9._-]{20,}/g
+];
+function compileRedactions(patterns) {
+  const out = [...BUILTIN_REDACT];
+  for (const p of patterns) {
+    try {
+      out.push(new RegExp(p, "g"));
+    } catch {}
+  }
+  return out;
+}
+function redactValue(v, res) {
+  if (!res.length)
+    return v;
+  if (typeof v === "string")
+    return redactString(v, res);
+  if (Array.isArray(v)) {
+    let changed = false;
+    const out = v.map((x) => {
+      const r = redactValue(x, res);
+      if (r !== x)
+        changed = true;
+      return r;
+    });
+    return changed ? out : v;
+  }
+  if (v && typeof v === "object") {
+    let changed = false;
+    const out = {};
+    for (const [k, x] of Object.entries(v)) {
+      const r = redactValue(x, res);
+      if (r !== x)
+        changed = true;
+      out[k] = r;
+    }
+    return changed ? out : v;
+  }
+  return v;
+}
+function redactString(s, res) {
+  let out = s;
+  for (const re of res) {
+    re.lastIndex = 0;
+    if (re.test(out)) {
+      re.lastIndex = 0;
+      out = out.replace(re, "[redacted]");
+    }
+  }
+  return out;
+}
+var AUDIT_COLUMNS = [
+  "seq",
+  "ts",
+  "type",
+  "projectId",
+  "sessionId",
+  "actorKind",
+  "actorId",
+  "summary",
+  "payload"
+];
+function auditRow(e) {
+  const p = e.payload ?? {};
+  const summary = typeof p.summary === "string" ? p.summary : typeof p.reason === "string" ? p.reason : typeof p.command === "string" ? p.command : typeof p.task === "string" ? String(p.task) : "";
+  return {
+    seq: e.seq ?? 0,
+    ts: e.ts,
+    type: e.type,
+    projectId: e.projectId,
+    sessionId: e.sessionId,
+    actorKind: e.actor?.kind ?? null,
+    actorId: e.actor?.id ?? null,
+    summary: summary.slice(0, 400),
+    payload: e.payload ?? null
+  };
+}
+var csvCell = (v) => {
+  const s = v == null ? "" : typeof v === "string" ? v : JSON.stringify(v);
+  return /[",\n\r]/.test(s) ? `"${s.replace(/"/g, '""')}"` : s;
+};
+function formatAudit(rows, format) {
+  if (format === "json")
+    return JSON.stringify(rows);
+  if (format === "csv") {
+    const lines = [
+      AUDIT_COLUMNS.join(","),
+      ...rows.map((r) => AUDIT_COLUMNS.map((c) => csvCell(r[c])).join(","))
+    ];
+    return `${lines.join(`
+`)}
+`;
+  }
+  return `${rows.map((r) => JSON.stringify(r)).join(`
+`)}${rows.length ? `
+` : ""}`;
+}
+function sinceToIso(since, now = Date.now()) {
+  if (!since)
+    return null;
+  const m = /^(\d+)([dhm])$/.exec(since.trim());
+  if (m) {
+    const n = Number(m[1]);
+    const ms = m[2] === "d" ? 86400000 : m[2] === "h" ? 3600000 : 60000;
+    return new Date(now - n * ms).toISOString();
+  }
+  const t = Date.parse(since);
+  return Number.isNaN(t) ? null : new Date(t).toISOString();
+}
 // packages/core/src/budget.ts
 function budgetStatus(spent, cfg) {
   const part = (s, l) => ({
@@ -385,24 +603,33 @@ function parseGateDefs(gates) {
   if (!isRecord(gates))
     return out;
   for (const [name, v] of Object.entries(gates)) {
-    if (!isRecord(v) || typeof v.cmd !== "string" || !v.cmd.trim())
+    if (!isRecord(v))
+      continue;
+    const builtin = v.builtin === "review" ? "review" : null;
+    const cmd = typeof v.cmd === "string" ? v.cmd.trim() : "";
+    if (!cmd && !builtin)
       continue;
     if (!/^[a-z0-9][a-z0-9_.-]{0,39}$/i.test(name))
       continue;
     const t = Number(v.timeout);
     out[name] = {
-      cmd: v.cmd.trim(),
-      timeout: Number.isFinite(t) && t > 0 ? Math.min(t, 86400) : DEFAULT_GATE_TIMEOUT_S,
-      cwd: isRepoRelative(v.cwd) ? v.cwd.trim() : null
+      cmd: builtin ? "" : cmd,
+      timeout: Number.isFinite(t) && t > 0 ? Math.min(t, 86400) : builtin ? 600 : DEFAULT_GATE_TIMEOUT_S,
+      cwd: isRepoRelative(v.cwd) ? v.cwd.trim() : null,
+      builtin,
+      model: typeof v.model === "string" && v.model.trim() ? v.model.trim() : null
     };
   }
   return out;
 }
 var DEFAULT_CONFIG = {
-  daemon: { port: 7777 },
+  daemon: { port: 7777, auth: "loopback-optional" },
   tasks: { source: null, labels: [], team: null },
   gates: { required: [], auto: "session-end", defs: {} },
   budget: { daily: null, weekly: null, warn_at: 0.8, on_exceed: "warn" },
+  events: { retain_days: 30 },
+  audit: { retain_days: 0 },
+  privacy: DEFAULT_PRIVACY,
   dispatch: {
     max_parallel: 2,
     permission_mode: null,
@@ -450,6 +677,10 @@ function isRepoRelative(f) {
     return false;
   return !t.split(/[/\\]/).some((seg) => seg === "..");
 }
+var days = (v, fallback) => {
+  const n = Number(v);
+  return Number.isInteger(n) && n >= 0 ? Math.min(n, 3650) : fallback;
+};
 function validate(c) {
   const mode = (v, fallback) => MODES.includes(v) ? v : fallback;
   const port = Number(c.daemon?.port);
@@ -470,7 +701,10 @@ function validate(c) {
   const auto = rawGates?.auto;
   return {
     ...c,
-    daemon: { port: Number.isInteger(port) && port > 0 && port < 65536 ? port : 7777 },
+    daemon: {
+      port: Number.isInteger(port) && port > 0 && port < 65536 ? port : 7777,
+      auth: c.daemon?.auth === "required" ? "required" : "loopback-optional"
+    },
     tasks: {
       source: typeof source === "string" && source.trim() && !source.startsWith("/") ? source.trim() : null,
       labels: Array.isArray(c.tasks?.labels) ? c.tasks.labels.filter((l) => typeof l === "string" && l.trim() !== "") : [],
@@ -487,6 +721,17 @@ function validate(c) {
       warn_at: Number.isFinite(warnAt) && warnAt > 0 && warnAt < 1 ? warnAt : 0.8,
       on_exceed: b.on_exceed === "ask" || b.on_exceed === "stop" ? b.on_exceed : "warn"
     },
+    events: {
+      retain_days: days(c.events?.retain_days, 30)
+    },
+    audit: {
+      retain_days: days(c.audit?.retain_days, 0)
+    },
+    privacy: {
+      store_prompts: c.privacy?.store_prompts !== false,
+      store_reasoning: c.privacy?.store_reasoning !== false,
+      redact: Array.isArray(c.privacy?.redact) ? c.privacy.redact.filter((r) => typeof r === "string" && r.length > 0) : []
+    },
     dispatch: {
       max_parallel: Number.isInteger(mp) && mp > 0 ? Math.min(mp, 16) : 2,
       permission_mode: str(d.permission_mode),
@@ -514,18 +759,84 @@ function validate(c) {
     }
   };
 }
-function loadConfig(opts = {}) {
+function leafPaths(v, prefix = "") {
+  if (!isRecord(v))
+    return prefix ? [prefix] : [];
+  const keys = Object.keys(v);
+  if (keys.length === 0)
+    return prefix ? [prefix] : [];
+  return keys.flatMap((k) => leafPaths(v[k], prefix ? `${prefix}.${k}` : k));
+}
+function getPath(v, path) {
+  let cur = v;
+  for (const seg of path.split(".")) {
+    if (!isRecord(cur))
+      return;
+    cur = cur[seg];
+  }
+  return cur;
+}
+function setPath(obj, path, value) {
+  const segs = path.split(".");
+  let cur = obj;
+  for (const seg of segs.slice(0, -1)) {
+    if (!isRecord(cur[seg]))
+      cur[seg] = {};
+    cur = cur[seg];
+  }
+  cur[segs[segs.length - 1]] = value;
+}
+var isLockedBy = (path, lock) => path === lock || path.startsWith(`${lock}.`);
+function readLayer(path) {
+  return existsSync2(path) ? parseToml(readFileSync2(path, "utf8"), path) : null;
+}
+function loadConfigDetailed(opts = {}) {
   const home = opts.home ?? process.env.SWARM_HOME ?? join2(process.env.HOME ?? "", ".swarm");
+  const policyPath = opts.policy ?? process.env.SWARM_POLICY ?? join2(home, "policy.toml");
+  const policyRaw = readLayer(policyPath);
+  const locked = Array.isArray(policyRaw?.locked) ? policyRaw.locked.filter((k) => typeof k === "string" && /^[a-z0-9_.-]+$/i.test(k)) : [];
+  const policy = { ...policyRaw ?? {} };
+  delete policy.locked;
+  const layers = [
+    ["policy", policyRaw ? policy : null],
+    ["global", readLayer(join2(home, "config.toml"))],
+    ["repo", opts.repoRoot ? readLayer(join2(opts.repoRoot, ".swarm.toml")) : null]
+  ];
+  const provenance = {};
+  for (const p of leafPaths(DEFAULT_CONFIG))
+    provenance[p] = "default";
+  const overridden = [];
   let cfg = DEFAULT_CONFIG;
-  const globalPath = join2(home, "config.toml");
-  if (existsSync2(globalPath))
-    cfg = merge(cfg, parseToml(readFileSync2(globalPath, "utf8"), globalPath));
-  if (opts.repoRoot) {
-    const repoPath = join2(opts.repoRoot, ".swarm.toml");
-    if (existsSync2(repoPath))
-      cfg = merge(cfg, parseToml(readFileSync2(repoPath, "utf8"), repoPath));
+  for (const [layer, raw] of layers) {
+    if (!raw)
+      continue;
+    for (const p of leafPaths(raw)) {
+      const lock = layer !== "policy" && locked.find((l) => isLockedBy(p, l));
+      if (lock)
+        overridden.push({ key: p, layer, attempted: getPath(raw, p) });
+      else
+        provenance[p] = layer;
+    }
+    cfg = merge(cfg, raw);
+  }
+  if (overridden.length) {
+    const out = structuredClone(cfg);
+    for (const { key } of overridden) {
+      const fromPolicy = getPath(policy, key);
+      setPath(out, key, fromPolicy === undefined ? getPath(DEFAULT_CONFIG, key) : fromPolicy);
+      provenance[key] = fromPolicy === undefined ? "default" : "policy";
+    }
+    cfg = out;
   }
-  return validate(cfg);
+  return {
+    config: validate(cfg),
+    provenance,
+    overridden,
+    policy: { path: policyRaw ? policyPath : null, locked }
+  };
+}
+function loadConfig(opts = {}) {
+  return loadConfigDetailed(opts).config;
 }
 // packages/core/src/dispatch.ts
 function planDispatch(tasks, wanted, opts) {
@@ -1328,6 +1639,92 @@ function parseMemoryQuery(q) {
   }
   return { match: terms.join(" "), kind, task };
 }
+// packages/core/src/policy.ts
+import { createHash } from "crypto";
+var HOOK_MARK = "swarm-hook";
+var hookIsOurs = (h) => typeof h.command === "string" && (h.command.includes(HOOK_MARK) || h.command.includes("/packages/hook/src/bin.ts"));
+var MIN_HOOK_TIMEOUT_S = 5;
+function hookCoverage(settings) {
+  const hooks = settings && typeof settings === "object" && !Array.isArray(settings) ? settings.hooks : undefined;
+  const missing = [];
+  const short = [];
+  for (const ev of HOOK_EVENTS) {
+    const groups = Array.isArray(hooks?.[ev]) ? hooks?.[ev] : [];
+    const ours = groups.flatMap((g) => {
+      const list = g?.hooks;
+      return Array.isArray(list) ? list.filter((h) => hookIsOurs(h)) : [];
+    });
+    if (!ours.length)
+      missing.push(ev);
+    else if (ours.every((h) => typeof h.timeout === "number" && h.timeout < MIN_HOOK_TIMEOUT_S))
+      short.push(ev);
+  }
+  return { missing, short, complete: !missing.length && !short.length };
+}
+var hasLockedRules = (loaded) => loaded.policy.locked.some((k) => k === "rules" || k.startsWith("rules."));
+function policyFindings(input) {
+  const out = [];
+  const repo = input.repoRoot ?? "";
+  for (const o of input.loaded.overridden)
+    out.push({
+      key: `override:${repo}:${o.layer}:${o.key}`,
+      subject: `${o.layer === "repo" ? ".swarm.toml" : "config.toml"} ${o.key}`,
+      reason: `locked by policy; ${o.layer} config tried to set ${JSON.stringify(o.attempted)}`
+    });
+  const cov = input.coverage;
+  if (cov && !cov.complete) {
+    if (cov.missing.length)
+      out.push({
+        key: `hooks:missing:${cov.missing.join(",")}`,
+        subject: `hooks ${cov.missing.join(", ")}`,
+        reason: "swarm hook entry removed from settings.json \u2014 run: swarm install"
+      });
+    if (cov.short.length)
+      out.push({
+        key: `hooks:short:${cov.short.join(",")}`,
+        subject: `hooks ${cov.short.join(", ")}`,
+        reason: `hook timeout below ${MIN_HOOK_TIMEOUT_S}s \u2014 run: swarm install`
+      });
+  }
+  if (input.guardOff && hasLockedRules(input.loaded))
+    out.push({
+      key: "guard:off",
+      subject: "SWARM_GUARD=off",
+      reason: "policy locks rules; SWARM_GUARD=off is ignored for locked rules"
+    });
+  return out;
+}
+var POLICY_CACHE_VERSION = 1;
+var POLICY_CACHE_FILE = "policy.cache.json";
+var RULE_KEYS = [
+  "shared_tree",
+  "destructive_git",
+  "pattern_kill",
+  "protected_ports",
+  "no_foreign_worktree",
+  "claim_required_to_write"
+];
+var lockedKey = (locked, key) => locked.some((l) => l === "rules" || key === l || key.startsWith(`${l}.`));
+function offlineModes(loaded) {
+  const locked = loaded.policy.locked;
+  const out = { ...DEFAULT_MODES, protected: { ports: [] } };
+  for (const k of RULE_KEYS)
+    out[k] = lockedKey(locked, `rules.${k}`) ? loaded.config.rules[k] : "off";
+  if (lockedKey(locked, "rules.protected.ports"))
+    out.protected = { ports: [...loaded.config.rules.protected.ports] };
+  return out;
+}
+var digest = (body) => createHash("sha256").update(JSON.stringify(body)).digest("hex");
+function buildPolicyCache(loaded, sessions, worktrees, now = new Date) {
+  const body = {
+    version: POLICY_CACHE_VERSION,
+    writtenAt: now.toISOString(),
+    modes: offlineModes(loaded),
+    sessions,
+    worktrees
+  };
+  return { ...body, sha256: digest(body) };
+}
 // packages/core/src/pricing.ts
 var PRICES = {
   "claude-opus-4": { input: 15, output: 75, cacheWrite: 18.75, cacheWrite1h: 30, cacheRead: 1.5 },
@@ -1474,6 +1871,114 @@ function acquireRefusalMessage(holder) {
   const via = isTrackedPid(holder.pid) ? `pid ${holder.pid}` : holder.expiresAt ? `lease until ${holder.expiresAt}` : "unbounded";
   return `Resource "${holder.name}" is held by ${holder.owner} (${via}).` + ` Pick another name, coordinate with the holder, or wait for release/reap.`;
 }
+// packages/core/src/review.ts
+var REVIEW_RUBRIC = "review: no blocker/major findings \u2014 correctness bugs, data loss, security, broken invariants (never kill by pattern, never touch a worktree you don't hold, repo-agnostic), missing tests for changed behaviour";
+var REVIEW_PATCH_MAX = 120000;
+function reviewPrompt(input) {
+  const patch = input.patch.length > REVIEW_PATCH_MAX ? `${input.patch.slice(0, REVIEW_PATCH_MAX)}
+
+[\u2026 patch truncated at ${REVIEW_PATCH_MAX} chars; read the files for the rest]` : input.patch;
+  return [
+    `You are the review gate for task ${input.task}${input.title ? ` \u2014 ${input.title}` : ""}${input.branch ? ` (branch ${input.branch})` : ""}.`,
+    "You are read-only: you may Read, Grep and Glob files in this worktree to understand context. Do not edit anything.",
+    "",
+    "Judge the diff below against this rubric and nothing else:",
+    `- ${REVIEW_RUBRIC}`,
+    "- A finding is a concrete defect with a file and, when possible, a line \u2014 not style, not preference.",
+    "- Severity: blocker (must not merge), major (should not merge), minor (worth fixing), nit.",
+    '- verdict is "fail" if and only if there is at least one blocker or major finding.',
+    "",
+    "Respond with ONLY a JSON object, no prose, no code fence:",
+    '{"verdict":"pass"|"fail","summary":"one sentence","findings":[{"file":"path","line":123,"severity":"blocker|major|minor|nit","summary":"what is wrong and why"}]}',
+    "",
+    "Files changed:",
+    input.stat.trim() || "(no stat)",
+    "",
+    "Diff:",
+    patch.trim() || "(empty diff)"
+  ].join(`
+`);
+}
+function reviewArgs(prompt, opts = {}) {
+  const args = [
+    "-p",
+    prompt,
+    "--output-format",
+    "json",
+    "--allowedTools",
+    "Read",
+    "Grep",
+    "Glob",
+    "LS",
+    "--disallowedTools",
+    "Edit",
+    "Write",
+    "MultiEdit",
+    "NotebookEdit",
+    "Bash",
+    "WebFetch",
+    "WebSearch",
+    "--permission-mode",
+    "dontAsk"
+  ];
+  if (opts.model)
+    args.push("--model", opts.model);
+  return args;
+}
+function parseReviewVerdict(stdout) {
+  let text = stdout.trim();
+  try {
+    const env = JSON.parse(text);
+    if (env && typeof env === "object" && typeof env.result === "string")
+      text = env.result.trim();
+  } catch {}
+  text = text.replace(/^```(?:json)?\s*/i, "").replace(/\s*```$/, "");
+  const start = text.indexOf("{");
+  const end = text.lastIndexOf("}");
+  if (start < 0 || end <= start)
+    return null;
+  let obj;
+  try {
+    obj = JSON.parse(text.slice(start, end + 1));
+  } catch {
+    return null;
+  }
+  if (!obj || typeof obj !== "object")
+    return null;
+  const o = obj;
+  const findings = Array.isArray(o.findings) ? o.findings.filter((f) => !!f && typeof f === "object").map((f) => ({
+    file: String(f.file ?? "").slice(0, 300),
+    line: Number.isInteger(f.line) ? f.line : null,
+    severity: ["blocker", "major", "minor", "nit"].includes(String(f.severity)) ? String(f.severity) : "minor",
+    summary: String(f.summary ?? "").slice(0, 600)
+  })).filter((f) => f.summary) : [];
+  const serious = findings.some((f) => f.severity === "blocker" || f.severity === "major");
+  const verdict = serious ? "fail" : o.verdict === "fail" ? "fail" : "pass";
+  return { verdict, summary: String(o.summary ?? "").slice(0, 400), findings };
+}
+function reviewGateInput(task, gate, outcome) {
+  if (outcome.kind === "error")
+    return {
+      task,
+      gate,
+      verdict: "fail",
+      rubric: REVIEW_RUBRIC,
+      evidence: `reviewer did not answer: ${outcome.reason}${outcome.output ? `
+${outcome.output.slice(-1500)}` : ""}`
+    };
+  const v = outcome.verdict;
+  const lines = v.findings.map((f) => `- [${f.severity}] ${f.file}${f.line ? `:${f.line}` : ""} \u2014 ${f.summary}`);
+  const secs = (outcome.durationMs / 1000).toFixed(0);
+  return {
+    task,
+    gate,
+    verdict: v.verdict,
+    rubric: REVIEW_RUBRIC,
+    evidence: `${v.summary || (v.verdict === "pass" ? "no blocking findings" : "blocking findings")} (${v.findings.length} finding${v.findings.length === 1 ? "" : "s"}, ${secs}s)${lines.length ? `
+${lines.join(`
+`)}` : ""}`
+  };
+}
 // packages/core/src/tasks.ts
 var ID_RE = /^[A-Za-z][A-Za-z0-9_-]*\d[\w.-]*$/;
 var DEP_RE = /[A-Za-z][A-Za-z0-9_-]*\d[\w.]*/g;
@@ -1918,7 +2423,7 @@ var tryDecode = (str, decoder) => {
   }
 };
 var tryDecodeURI = (str) => tryDecode(str, decodeURI);
-var getPath = (request) => {
+var getPath2 = (request) => {
   const url = request.url;
   const start = url.indexOf("/", url.indexOf(":") + 4);
   let i = start;
@@ -1937,7 +2442,7 @@ var getPath = (request) => {
   return url.slice(start, i);
 };
 var getPathNoStrict = (request) => {
-  const result = getPath(request);
+  const result = getPath2(request);
   return result.length > 1 && result.at(-1) === "/" ? result.slice(0, -1) : result;
 };
 var mergePath = (base, sub, ...rest) => {
@@ -2459,7 +2964,7 @@ var Hono = class _Hono {
     };
     const { strict, ...optionsWithoutStrict } = options;
     Object.assign(this, optionsWithoutStrict);
-    this.getPath = strict ?? true ? options.getPath ?? getPath : getPathNoStrict;
+    this.getPath = strict ?? true ? options.getPath ?? getPath2 : getPathNoStrict;
   }
   #clone() {
     const clone = new _Hono({
@@ -4309,9 +4814,10 @@ import {
   realpathSync as realpathSync2,
   renameSync,
   statSync,
+  unlinkSync,
   writeFileSync as writeFileSync2
 } from "fs";
-import { homedir as homedir3 } from "os";
+import { homedir as homedir3, tmpdir, userInfo } from "os";
 import { basename, dirname as dirname2, join as join8 } from "path";
 
 // packages/daemon/src/bootstrap.ts
@@ -4519,6 +5025,9 @@ class Store {
     this.db.exec(SCHEMA);
     this.ensureColumn("sessions", "agent", "TEXT DEFAULT 'claude-code'");
     this.ensureColumn("projects", "sort_order", "INTEGER");
+    this.ensureColumn("projects", "icon", "TEXT");
+    this.ensureColumn("projects", "color", "TEXT");
+    this.migrate();
     this.migrateProjectsJson(join8(home, "projects.json"));
     this.reconcileMovedProjects();
     this.slimExistingEvents();
@@ -4601,6 +5110,57 @@ class Store {
       this.db.exec(`ALTER TABLE ${table} ADD COLUMN ${col} ${decl}`);
     }
   }
+  static SCHEMA_VERSION = 1;
+  schemaVersion() {
+    return Number(this.meta("schema_version") ?? 0);
+  }
+  migrate() {
+    const steps = [
+      (db) => {
+        for (const t of [
+          "events",
+          "claims",
+          "resources",
+          "processes",
+          "handoffs",
+          "gates",
+          "incident_acks",
+          "sessions"
+        ]) {
+          this.ensureColumn(t, "actor_kind", "TEXT");
+          this.ensureColumn(t, "actor_id", "TEXT");
+        }
+        const user = osUser();
+        const fill = (table, ownerCol, sessionCol, key) => {
+          const rows = db.query(`SELECT rowid AS rid, ${ownerCol ?? "NULL"} AS owner, ${sessionCol ?? "NULL"} AS sid FROM ${table} WHERE actor_kind IS NULL`).all();
+          const upd = db.query(`UPDATE ${table} SET actor_kind = ?, actor_id = ? WHERE rowid = ?`);
+          for (const r of rows) {
+            const a = actorFrom(r.owner, r.sid, { user });
+            upd.run(a.kind, a.id, r.rid);
+          }
+          return `${key}:${rows.length}`;
+        };
+        fill("claims", "owner", null, "claims");
+        fill("resources", "owner", "session_id", "resources");
+        fill("processes", "owner", "session_id", "processes");
+        fill("handoffs", "by", "session_id", "handoffs");
+        fill("gates", "NULL", "session_id", "gates");
+        fill("incident_acks", "'dashboard'", null, "acks");
+        fill("sessions", "NULL", "id", "sessions");
+        fill("events", "COALESCE(json_extract(payload, '$.owner'), json_extract(payload, '$.by'))", "session_id", "events");
+      }
+    ];
+    for (let v = this.schemaVersion();v < steps.length; v++) {
+      const step = steps[v];
+      this.db.transaction(() => {
+        step(this.db);
+        this.setMeta("schema_version", String(v + 1));
+      })();
+    }
+  }
+  actorFor(owner, sessionId, runId) {
+    return actorFrom(owner, sessionId, { user: osUser(), runId });
+  }
   migrateProjectsJson(file) {
     if (!existsSync5(file))
       return;
@@ -4621,7 +5181,8 @@ class Store {
     this.topCache.set(cwd, { v, t: Date.now() });
     return v;
   }
-  rulesCache = new Map;
+  policyCache = new Map;
+  policySeen = new Set;
   preregisterSpawnedSession(id, projectId, cwd, task) {
     const now = new Date().toISOString();
     this.db.query(`INSERT INTO sessions (id, project_id, kind, cwd, started_at, last_seen_at, last, last_type, state, title)
@@ -4650,8 +5211,8 @@ class Store {
       createdAt: new Date().toISOString()
     };
     const sessionId = this.knownSession(h.sessionId);
-    const ins = this.db.query(`INSERT INTO handoffs (project_id, task, done, remaining, files, verify, by, session_id, created_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(projectId, handoff.task, handoff.done, handoff.remaining, JSON.stringify(handoff.files), handoff.verify, handoff.by, sessionId, handoff.createdAt);
+    const ins = this.db.query(`INSERT INTO handoffs (project_id, task, done, remaining, files, verify, by, session_id, created_at, actor_kind, actor_id)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(projectId, handoff.task, handoff.done, handoff.remaining, JSON.stringify(handoff.files), handoff.verify, handoff.by, sessionId, handoff.createdAt, ...actorCols(this.actorFor(handoff.by, sessionId)));
     this.remember(handoffDoc(projectId, Number(ins.lastInsertRowid), handoff, sessionId));
     this.append({
       ts: handoff.createdAt,
@@ -4701,8 +5262,8 @@ class Store {
     if (!h)
       return null;
     this.db.query("DELETE FROM handoffs WHERE project_id = ? AND task = ? AND session_id = ? AND by LIKE 'auto%'").run(held.projectId, held.task, sessionId);
-    const ins = this.db.query(`INSERT INTO handoffs (project_id, task, done, remaining, files, verify, by, session_id, created_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(held.projectId, held.task, h.done, h.remaining, JSON.stringify(h.files), h.verify, h.by, sessionId, h.createdAt);
+    const ins = this.db.query(`INSERT INTO handoffs (project_id, task, done, remaining, files, verify, by, session_id, created_at, actor_kind, actor_id)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(held.projectId, held.task, h.done, h.remaining, JSON.stringify(h.files), h.verify, h.by, sessionId, h.createdAt, ...actorCols(this.actorFor(h.by, sessionId)));
     this.remember(handoffDoc(held.projectId, Number(ins.lastInsertRowid), h, sessionId));
     this.touch();
     return h;
@@ -5054,6 +5615,8 @@ class Store {
     const logDir = join8(this.home, "logs", projectId);
     mkdirSync4(logDir, { recursive: true });
     const log = join8(logDir, `gate-${slug(task)}-${slug(gate)}.log`);
+    if (def.builtin === "review")
+      return this.runReviewGate(projectId, task, gate, def, { worktree: worktree2, cwd, key, log }, opts);
     writeFileSync2(log, `$ ${def.cmd}
 # cwd ${cwd} \xB7 ${new Date().toISOString()}
 `);
@@ -5133,6 +5696,134 @@ class Store {
     this.gateJobs.set(key, done);
     return { ok: true, pid: proc.pid, log, done };
   }
+  runReviewGate(projectId, task, gate, def, where, opts) {
+    const bin = findBin("claude");
+    if (!bin)
+      return { ok: false, reason: "claude CLI not found \u2014 the review gate needs Claude Code" };
+    const p = this.project(projectId);
+    if (!p)
+      return { ok: false, reason: "unknown project" };
+    const started = Date.now();
+    const record = (input) => {
+      const run2 = this.recordGate(projectId, { ...input, sessionId: opts.sessionId ?? null });
+      return run2.ok ? run2.run : null;
+    };
+    const done = (async () => {
+      let diffText = "";
+      let stat = "";
+      try {
+        const diff = await worktreeDiff(p.root, where.worktree);
+        stat = diff.files.map((f) => `${f.status ?? "M"} ${f.path} (+${f.added} -${f.deleted})`).join(`
+`);
+        diffText = await worktreePatch(where.worktree, diff.base);
+      } catch (e) {
+        return record(reviewGateInput(task, gate, {
+          kind: "error",
+          reason: `diff failed: ${e.message}`,
+          durationMs: Date.now() - started
+        }));
+      }
+      if (!diffText.trim())
+        return record(reviewGateInput(task, gate, {
+          kind: "verdict",
+          durationMs: Date.now() - started,
+          verdict: { verdict: "pass", summary: "nothing to review \u2014 empty diff", findings: [] }
+        }));
+      const taskRow = this.tasks(projectId)?.tasks.find((t) => t.id === task) ?? null;
+      const w = this.findWorktree(projectId, where.worktree);
+      const prompt = reviewPrompt({
+        task,
+        title: taskRow?.title ?? null,
+        branch: w?.branch ?? null,
+        stat,
+        patch: diffText
+      });
+      writeFileSync2(where.log, `$ claude -p <review prompt, ${prompt.length} chars> --output-format json (read-only)
+# cwd ${where.cwd} \xB7 ${new Date().toISOString()}
+`);
+      let proc;
+      try {
+        proc = Bun.spawn([bin, ...reviewArgs(prompt, { model: def.model })], {
+          cwd: where.cwd,
+          stdin: "ignore",
+          stdout: "pipe",
+          stderr: "pipe",
+          env: {
+            ...process.env,
+            SWARM_WORKTREE: where.worktree,
+            SWARM_TASK: task,
+            SWARM_GATE: gate,
+            CLAUDE_CODE_DISABLE_AUTOUPDATE: "1"
+          }
+        });
+      } catch (e) {
+        return record(reviewGateInput(task, gate, {
+          kind: "error",
+          reason: e.message,
+          durationMs: Date.now() - started
+        }));
+      }
+      const reg = this.registerProcess({
+        pid: proc.pid,
+        projectId,
+        sessionId: opts.sessionId ?? null,
+        kind: "gate",
+        name: `gate:${task}:${gate}`,
+        cwd: where.cwd,
+        cmd: "claude -p (review)",
+        owner: opts.owner ?? "daemon",
+        log: where.log
+      });
+      let timedOut = false;
+      const timer = setTimeout(() => {
+        timedOut = true;
+        try {
+          proc.kill("SIGTERM");
+          setTimeout(() => {
+            try {
+              proc.kill("SIGKILL");
+            } catch {}
+          }, 5000).unref();
+        } catch {}
+      }, def.timeout * 1000);
+      const [out, err] = await Promise.all([
+        new Response(proc.stdout).text(),
+        new Response(proc.stderr).text()
+      ]);
+      const code = await proc.exited;
+      clearTimeout(timer);
+      try {
+        writeFileSync2(where.log, `${readFileSync3(where.log, "utf8")}${out}
+${err}
+# exit ${timedOut ? "timeout" : code} \xB7 ${((Date.now() - started) / 1000).toFixed(0)}s
+`);
+      } catch {}
+      if (reg.ok)
+        this.processes(projectId);
+      const durationMs = Date.now() - started;
+      if (timedOut)
+        return record(reviewGateInput(task, gate, {
+          kind: "error",
+          reason: `timed out after ${def.timeout}s`,
+          durationMs,
+          output: err
+        }));
+      const verdict = parseReviewVerdict(out);
+      if (!verdict)
+        return record(reviewGateInput(task, gate, {
+          kind: "error",
+          reason: code === 0 ? "no JSON verdict in the reply" : `claude exited ${code}`,
+          durationMs,
+          output: err || out
+        }));
+      return record(reviewGateInput(task, gate, { kind: "verdict", verdict, durationMs }));
+    })().finally(() => {
+      this.gateJobs.delete(where.key);
+      this.touch();
+    });
+    this.gateJobs.set(where.key, done);
+    return { ok: true, pid: 0, log: where.log, done };
+  }
   async runGates(projectId, task, gates2, opts = {}) {
     const cfg = this.gateDefs(projectId);
     const names = gates2?.length ? gates2 : (cfg?.required ?? []).filter((g) => cfg?.defs[g]);
@@ -5202,8 +5893,8 @@ class Store {
       return v;
     const createdAt = new Date().toISOString();
     const sessionId = this.knownSession(input.sessionId);
-    const r = this.db.query(`INSERT INTO gates (project_id, task, gate, verdict, rubric, evidence, session_id, created_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?)`).run(projectId, input.task.trim(), input.gate, input.verdict, input.rubric.trim(), input.evidence?.trim() || null, sessionId, createdAt);
+    const r = this.db.query(`INSERT INTO gates (project_id, task, gate, verdict, rubric, evidence, session_id, created_at, actor_kind, actor_id)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(projectId, input.task.trim(), input.gate, input.verdict, input.rubric.trim(), input.evidence?.trim() || null, sessionId, createdAt, ...actorCols(this.actorFor(input.sessionId ? null : "daemon", sessionId)));
     const run2 = this.rowToGate(this.db.query("SELECT * FROM gates WHERE id = ?").get(Number(r.lastInsertRowid)));
     this.remember(gateDoc(projectId, run2.id, run2, sessionId));
     this.append({
@@ -5289,13 +5980,67 @@ class Store {
     return { source, required, tasks: board, error };
   }
   rulesFor(repoRoot) {
+    return this.policyFor(repoRoot).config.rules;
+  }
+  policyFor(repoRoot) {
     const key = repoRoot ?? "";
-    const hit = this.rulesCache.get(key);
+    const hit = this.policyCache.get(key);
     if (hit && Date.now() - hit.at < 30000)
-      return hit.rules;
-    const rules2 = loadConfig({ repoRoot, home: this.home }).rules;
-    this.rulesCache.set(key, { at: Date.now(), rules: rules2 });
-    return rules2;
+      return hit.loaded;
+    const loaded = loadConfigDetailed({ repoRoot, home: this.home });
+    this.policyCache.set(key, { at: Date.now(), loaded });
+    this.writePolicyCache(loaded);
+    return loaded;
+  }
+  writePolicyCache(loaded) {
+    const file = join8(this.home, POLICY_CACHE_FILE);
+    try {
+      if (!hasLockedRules(loaded)) {
+        if (existsSync5(file))
+          unlinkSync(file);
+        return;
+      }
+      const cache = buildPolicyCache(loaded, this.liveSessions(), this.heldWorktrees());
+      writeFileSync2(file, JSON.stringify(cache), { mode: 384 });
+    } catch (e) {
+      console.error(`swarm: policy cache: ${e.message}`);
+    }
+  }
+  guardDisabled(repoRoot) {
+    return process.env.SWARM_GUARD === "off" && !hasLockedRules(this.policyFor(repoRoot));
+  }
+  claudeSettings() {
+    const p = process.env.CLAUDE_SETTINGS ?? join8(homedir3(), ".claude", "settings.json");
+    try {
+      return existsSync5(p) ? JSON.parse(readFileSync3(p, "utf8")) : null;
+    } catch {
+      return null;
+    }
+  }
+  checkPolicy(cwd, sessionId) {
+    const project = existsSync5(cwd) ? this.resolveProject(cwd) : null;
+    const repoRoot = project?.root ?? null;
+    const loaded = this.policyFor(repoRoot);
+    const settings = this.claudeSettings();
+    const findings = policyFindings({
+      loaded,
+      coverage: settings === null ? null : hookCoverage(settings),
+      guardOff: process.env.SWARM_GUARD === "off",
+      repoRoot
+    });
+    for (const f of findings) {
+      if (this.policySeen.has(f.key))
+        continue;
+      this.policySeen.add(f.key);
+      this.append({
+        ts: new Date().toISOString(),
+        type: "incident.opened",
+        projectId: project?.id ?? "p_unknown",
+        sessionId,
+        payload: { rule: "policy", action: "tampered", command: f.subject, reason: f.reason }
+      });
+    }
+    return findings;
   }
   evaluateTool(tool, input, sessionId, cwd, recordIncident = true) {
     if (BUDGET_ASK_TOOLS.has(tool) && cwd && existsSync5(cwd)) {
@@ -5498,6 +6243,8 @@ class Store {
       name: r.name,
       discovered: Boolean(r.discovered),
       order: typeof r.sort_order === "number" ? r.sort_order : null,
+      icon: r.icon ?? null,
+      color: r.color ?? null,
       createdAt: r.created_at
     }));
   }
@@ -5512,6 +6259,8 @@ class Store {
       name: r.name,
       discovered: Boolean(r.discovered),
       order: typeof r.sort_order === "number" ? r.sort_order : null,
+      icon: r.icon ?? null,
+      color: r.color ?? null,
       createdAt: r.created_at
     };
   }
@@ -5549,6 +6298,8 @@ class Store {
         ...ident,
         discovered: !explicit,
         order: null,
+        icon: null,
+        color: null,
         createdAt: new Date().toISOString()
       };
       if (name)
@@ -5569,8 +6320,24 @@ class Store {
       return;
     if (patch.pinned !== undefined)
       this.db.query("UPDATE projects SET discovered = ? WHERE id = ?").run(patch.pinned ? 0 : 1, id);
-    if (patch.name)
-      this.db.query("UPDATE projects SET name = ? WHERE id = ?").run(patch.name, id);
+    if (patch.name?.trim())
+      this.db.query("UPDATE projects SET name = ? WHERE id = ?").run(patch.name.trim(), id);
+    if (patch.icon !== undefined) {
+      const icon = (patch.icon ?? "").trim();
+      const isImage = /^data:image\/(png|jpeg|webp);base64,[A-Za-z0-9+/=]+$/.test(icon);
+      if (!isImage && [...icon].length > 4)
+        return;
+      if (isImage && icon.length > 24000)
+        return;
+      this.db.query("UPDATE projects SET icon = ? WHERE id = ?").run(icon || null, id);
+    }
+    if (patch.color !== undefined) {
+      const color = (patch.color ?? "").trim();
+      if (color && !/^c[1-7]$/.test(color))
+        return;
+      this.db.query("UPDATE projects SET color = ? WHERE id = ?").run(color || null, id);
+    }
+    this.touch();
     return this.project(id);
   }
   reorderProjects(ids) {
@@ -5589,10 +6356,29 @@ class Store {
     this.touch();
     return this.db.query("DELETE FROM projects WHERE id = ?").run(id).changes > 0;
   }
-  append(e) {
+  redactions() {
+    const cfg = this.policyFor(null).config.privacy;
+    const key = cfg.redact.join("\x00");
+    if (this.redactCache?.key !== key)
+      this.redactCache = { key, res: compileRedactions(cfg.redact) };
+    return this.redactCache.res;
+  }
+  redactCache = null;
+  append(e0) {
+    const privacy = this.policyFor(null).config.privacy;
+    let e = e0;
+    if (!privacy.store_prompts && e.type === "prompt.submitted" && e.payload && typeof e.payload === "object") {
+      const { prompt: _p, ...rest } = e.payload;
+      e = { ...e, payload: { ...rest, prompt: "[not stored]" } };
+    }
+    const res = this.redactions();
+    if (res.length)
+      e = { ...e, payload: redactValue(e.payload, res), raw: redactValue(e.raw, res) };
     const slim = slimForStorage(e);
-    const r = this.db.query("INSERT INTO events (ts, type, project_id, session_id, payload, raw) VALUES (?, ?, ?, ?, ?, ?)").run(e.ts, e.type, e.projectId, e.sessionId, JSON.stringify(slim.payload ?? null), slim.raw === undefined ? null : JSON.stringify(slim.raw));
-    const stored = { ...e, seq: Number(r.lastInsertRowid) };
+    const p = e.payload ?? {};
+    const actor2 = e.actor ?? this.actorFor(typeof p.owner === "string" ? p.owner : typeof p.by === "string" ? p.by : null, e.sessionId);
+    const r = this.db.query("INSERT INTO events (ts, type, project_id, session_id, payload, raw, actor_kind, actor_id) VALUES (?, ?, ?, ?, ?, ?, ?, ?)").run(e.ts, e.type, e.projectId, e.sessionId, JSON.stringify(slim.payload ?? null), slim.raw === undefined ? null : JSON.stringify(slim.raw), actor2.kind, actor2.id);
+    const stored = { ...e, actor: actor2, seq: Number(r.lastInsertRowid) };
     if (stored.type === "incident.opened")
       this.remember(incidentDoc(stored.projectId, stored.seq, stored.payload, stored.ts, stored.sessionId));
     this.projectSession(stored);
@@ -5602,9 +6388,34 @@ class Store {
       l(wire);
     return stored;
   }
-  prune(days = 30) {
-    const cutoff = new Date(Date.now() - days * 86400000).toISOString();
-    const n = this.db.query("DELETE FROM events WHERE ts < ? AND type != 'incident.opened'").run(cutoff).changes;
+  audit(opts = {}) {
+    const where = [`type IN (${AUDIT_TYPES_SQL})`];
+    const args = [];
+    if (opts.since) {
+      where.push("ts >= ?");
+      args.push(opts.since);
+    }
+    if (opts.projectId) {
+      where.push("project_id = ?");
+      args.push(opts.projectId);
+    }
+    if (opts.type && isAuditType(opts.type)) {
+      where.push("type = ?");
+      args.push(opts.type);
+    }
+    const limit = Math.min(Math.max(opts.limit ?? 1e4, 1), 1e5);
+    const rows = this.db.query(`SELECT * FROM (SELECT ${WIRE_COLS} FROM events WHERE ${where.join(" AND ")} ORDER BY seq DESC LIMIT ?) ORDER BY seq`).all(...args, limit);
+    return rows.map((r) => auditRow(wireRowToEvent(r)));
+  }
+  prune(days2) {
+    const cfg = this.policyFor(null).config;
+    const chatter = days2 ?? cfg.events.retain_days;
+    const cutoff = new Date(Date.now() - chatter * 86400000).toISOString();
+    let n = this.db.query(`DELETE FROM events WHERE ts < ? AND type NOT IN (${AUDIT_TYPES_SQL})`).run(cutoff).changes;
+    if (cfg.audit.retain_days > 0) {
+      const acut = new Date(Date.now() - cfg.audit.retain_days * 86400000).toISOString();
+      n += this.db.query(`DELETE FROM events WHERE ts < ? AND type IN (${AUDIT_TYPES_SQL}) AND type != 'incident.opened'`).run(acut).changes;
+    }
     const old = new Date(Date.now() - 7 * 86400000).toISOString();
     this.db.query("UPDATE events SET raw = NULL WHERE ts < ? AND raw IS NOT NULL").run(old);
     if (n > 0)
@@ -5702,13 +6513,15 @@ class Store {
     }
   }
   persistTurns(sessionId, agentId, turns) {
+    const privacy = this.policyFor(null).config.privacy;
+    const res = this.redactions();
     const up = this.db.query(`INSERT INTO turns (id, session_id, agent_id, ts, model, effort, sidechain, input, output, cache_write, cache_write_1h, cache_read, thinking, cost_usd, text, tools)
        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
        ON CONFLICT(id) DO UPDATE SET input=excluded.input, output=excluded.output, cache_write=excluded.cache_write, cache_write_1h=excluded.cache_write_1h,
          cache_read=excluded.cache_read, thinking=excluded.thinking, cost_usd=excluded.cost_usd, text=CASE WHEN excluded.text != '' THEN excluded.text ELSE turns.text END, tools=excluded.tools`);
     const tx = this.db.transaction((ts) => {
       for (const t of ts) {
-        up.run(t.id, sessionId, agentId, t.ts, t.model, t.effort, t.sidechain ? 1 : 0, t.usage.input, t.usage.output, t.usage.cacheWrite, t.usage.cacheWrite1h ?? 0, t.usage.cacheRead, t.usage.thinking, costUsd(t.model, t.usage, this.prices), t.text, JSON.stringify(t.tools));
+        up.run(t.id, sessionId, agentId, t.ts, t.model, t.effort, t.sidechain ? 1 : 0, t.usage.input, t.usage.output, t.usage.cacheWrite, t.usage.cacheWrite1h ?? 0, t.usage.cacheRead, t.usage.thinking, costUsd(t.model, t.usage, this.prices), privacy.store_reasoning ? redactValue(t.text, res) : "", JSON.stringify(t.tools));
       }
     });
     if (turns.length)
@@ -5939,7 +6752,7 @@ class Store {
     const p = this.project(projectId);
     return join8(this.home, "worktrees", slug(p?.name ?? projectId), slug(task));
   }
-  claim(projectId, task, owner, baseRef = "HEAD") {
+  claim(projectId, task, owner, baseRef = "HEAD", sessionId = null) {
     const p = this.project(projectId);
     if (!p)
       return { ok: false, error: "unknown project" };
@@ -5958,15 +6771,17 @@ class Store {
     this.invalidateWorktrees(projectId);
     const expiresAt = nextExpiry(now);
     const acquiredAt = new Date(now).toISOString();
-    this.db.query(`INSERT INTO claims (project_id, task, owner, worktree, branch, acquired_at, expires_at, released_at, state)
-         VALUES (?, ?, ?, ?, ?, ?, ?, NULL, 'held')
+    this.db.query(`INSERT INTO claims (project_id, task, owner, worktree, branch, acquired_at, expires_at, released_at, state, actor_kind, actor_id)
+         VALUES (?, ?, ?, ?, ?, ?, ?, NULL, 'held', ?, ?)
          ON CONFLICT(project_id, task) DO UPDATE SET owner=excluded.owner, worktree=excluded.worktree, branch=excluded.branch,
-           acquired_at=excluded.acquired_at, expires_at=excluded.expires_at, released_at=NULL, state='held'`).run(projectId, task, owner, created, branch, acquiredAt, expiresAt);
+           acquired_at=excluded.acquired_at, expires_at=excluded.expires_at, released_at=NULL, state='held',
+           actor_kind=excluded.actor_kind, actor_id=excluded.actor_id`).run(projectId, task, owner, created, branch, acquiredAt, expiresAt, ...actorCols(this.actorFor(owner, sessionId)));
     this.append({
       ts: acquiredAt,
       type: "claim.acquired",
       projectId,
-      sessionId: null,
+      sessionId,
+      actor: this.actorFor(owner, sessionId),
       payload: { task, owner, worktree: created, branch, summary: `claim ${task} by ${owner}` }
     });
     const bootstrap = this.bootstrapWorktree(projectId, task, p.root, created);
@@ -6642,19 +7457,19 @@ class Store {
          WHERE e.type = 'incident.opened' AND a.seq IS NULL${projectId ? " AND e.project_id = ?" : ""}`).get(...projectId ? [projectId] : []);
     return r.n;
   }
-  ackIncident(seq) {
+  ackIncident(seq, by) {
     const row = this.db.query("SELECT seq FROM events WHERE seq = ? AND type = 'incident.opened'").get(seq);
     if (!row)
       return false;
-    this.db.query("INSERT OR IGNORE INTO incident_acks (seq, acked_at) VALUES (?, ?)").run(seq, new Date().toISOString());
+    this.db.query("INSERT OR IGNORE INTO incident_acks (seq, acked_at, actor_kind, actor_id) VALUES (?, ?, ?, ?)").run(seq, new Date().toISOString(), ...actorCols(this.actorFor(by ?? "dashboard")));
     this.touch();
     return true;
   }
-  ackAllIncidents(projectId) {
+  ackAllIncidents(projectId, by) {
     const at = new Date().toISOString();
-    const r = this.db.query(`INSERT OR IGNORE INTO incident_acks (seq, acked_at)
-         SELECT e.seq, ? FROM events e LEFT JOIN incident_acks a ON a.seq = e.seq
-         WHERE e.type = 'incident.opened' AND a.seq IS NULL${projectId ? " AND e.project_id = ?" : ""}`).run(at, ...projectId ? [projectId] : []);
+    const r = this.db.query(`INSERT OR IGNORE INTO incident_acks (seq, acked_at, actor_kind, actor_id)
+         SELECT e.seq, ?, ?, ? FROM events e LEFT JOIN incident_acks a ON a.seq = e.seq
+         WHERE e.type = 'incident.opened' AND a.seq IS NULL${projectId ? " AND e.project_id = ?" : ""}`).run(at, ...actorCols(this.actorFor(by ?? "dashboard")), ...projectId ? [projectId] : []);
     this.touch();
     return Number(r.changes);
   }
@@ -6821,8 +7636,8 @@ class Store {
       endedAt: null
     };
     this.db.query("UPDATE processes SET ended_at = ? WHERE ended_at IS NULL AND project_id = ? AND name = ?").run(p.startedAt, p.projectId, p.name);
-    this.db.query(`INSERT INTO processes (pid, start_time, project_id, session_id, kind, name, port, cwd, cmd, owner, log, started_at, ended_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NULL)`).run(p.pid, p.startTime, p.projectId, p.sessionId, p.kind, p.name, p.port, p.cwd, p.cmd, p.owner, p.log, p.startedAt);
+    this.db.query(`INSERT INTO processes (pid, start_time, project_id, session_id, kind, name, port, cwd, cmd, owner, log, started_at, ended_at, actor_kind, actor_id)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NULL, ?, ?)`).run(p.pid, p.startTime, p.projectId, p.sessionId, p.kind, p.name, p.port, p.cwd, p.cmd, p.owner, p.log, p.startedAt, ...actorCols(this.actorFor(p.owner, p.sessionId)));
     this.append({
       ts: p.startedAt,
       type: "process.started",
@@ -6886,11 +7701,12 @@ class Store {
       expiresAt,
       released: false
     };
-    this.db.query(`INSERT INTO resources (name, project_id, kind, owner, session_id, pid, port, acquired_at, expires_at, released)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, 0)
+    this.db.query(`INSERT INTO resources (name, project_id, kind, owner, session_id, pid, port, acquired_at, expires_at, released, actor_kind, actor_id)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, 0, ?, ?)
          ON CONFLICT(name, project_id) DO UPDATE SET
            kind=excluded.kind, owner=excluded.owner, session_id=excluded.session_id, pid=excluded.pid,
-           port=excluded.port, acquired_at=excluded.acquired_at, expires_at=excluded.expires_at, released=0`).run(resource.name, key, resource.kind, resource.owner, resource.sessionId, resource.pid, resource.port, resource.acquiredAt, resource.expiresAt);
+           port=excluded.port, acquired_at=excluded.acquired_at, expires_at=excluded.expires_at, released=0,
+           actor_kind=excluded.actor_kind, actor_id=excluded.actor_id`).run(resource.name, key, resource.kind, resource.owner, resource.sessionId, resource.pid, resource.port, resource.acquiredAt, resource.expiresAt, ...actorCols(this.actorFor(resource.owner, resource.sessionId)));
     this.append({
       ts: resource.acquiredAt,
       type: "resource.acquired",
@@ -6937,7 +7753,7 @@ class Store {
   }
   snapshot() {
     const worktrees = {};
-    const projects = this.projects();
+    const projects = this.projects().filter((p) => !(p.discovered && isScratchRoot(p.root)));
     for (const p of projects)
       worktrees[p.id] = this.worktrees(p.id);
     return {
@@ -6955,7 +7771,7 @@ class Store {
     };
   }
 }
-var WIRE_COLS = "seq, ts, type, project_id, session_id, json_remove(payload, '$.toolInput', '$.toolResponse', '$.prompt') AS payload";
+var WIRE_COLS = "seq, ts, type, project_id, session_id, actor_kind, actor_id, json_remove(payload, '$.toolInput', '$.toolResponse', '$.prompt') AS payload";
 var RAW_TOOL_KEYS = ["tool_input", "tool_response", "toolInput", "toolResponse", "toolResult"];
 var TOOL_INPUT_MAX = 2048;
 var TOOL_RESPONSE_MAX = 4096;
@@ -7001,7 +7817,7 @@ function toWire(e) {
 }
 function wireRowToEvent(r) {
   const p = JSON.parse(r.payload ?? "null");
-  return {
+  const e = {
     seq: r.seq,
     ts: r.ts,
     type: r.type,
@@ -7009,6 +7825,10 @@ function wireRowToEvent(r) {
     sessionId: r.session_id ?? null,
     payload: p
   };
+  const a = actorFromColumns(r.actor_kind, r.actor_id, r.session_id);
+  if (a)
+    e.actor = a;
+  return e;
 }
 function rowToEvent(r) {
   const e = {
@@ -7021,11 +7841,26 @@ function rowToEvent(r) {
   };
   if (r.raw)
     e.raw = JSON.parse(r.raw);
+  const a = actorFromColumns(r.actor_kind, r.actor_id, r.session_id);
+  if (a)
+    e.actor = a;
   return e;
 }
+function osUser() {
+  try {
+    return userInfo().username || process.env.USER || "me";
+  } catch {
+    return process.env.USER || "me";
+  }
+}
+var actorCols = (a) => [a.kind, a.id];
+function isScratchRoot(root) {
+  const tmp = [tmpdir(), "/tmp", "/private/tmp", "/private/var/folders", "/var/folders"];
+  return tmp.some((t) => root === t || root.startsWith(`${t}/`));
+}
 
 // packages/daemon/src/app.ts
-var VERSION = "0.7.0";
+var VERSION = "0.8.0";
 var WEB_DIR = (() => {
   if (process.env.SWARM_WEB_DIR)
     return process.env.SWARM_WEB_DIR;
@@ -7043,6 +7878,10 @@ function wireJson(e) {
   }
   return s;
 }
+function hookRepoRoot(store, raw2) {
+  const cwd = typeof raw2.cwd === "string" ? raw2.cwd : "";
+  return cwd && existsSync6(cwd) ? store.resolveProject(cwd)?.root ?? null : null;
+}
 function createApp(store = new Store) {
   const app = new Hono2;
   const forge2 = new ForgeService(store);
@@ -7053,7 +7892,27 @@ function createApp(store = new Store) {
     for (const run2 of runner.list(projectId))
       runner.stop(run2.id);
   });
-  app.get("/v1/health", (c) => c.json({ ok: true, version: VERSION }));
+  app.use("/v1/*", async (c, next) => {
+    if (c.req.path === "/v1/health")
+      return next();
+    const token = readToken(store.home);
+    const given = c.req.header("authorization")?.replace(/^Bearer\s+/i, "") ?? c.req.query("token");
+    if (token && given && given === token)
+      return next();
+    if (given)
+      return c.json({ error: "unauthorized: wrong daemon token" }, 401);
+    const ip = c.env?.requestIP?.(c.req.raw)?.address;
+    const loopback = !ip || ip === "127.0.0.1" || ip === "::1" || ip === "::ffff:127.0.0.1";
+    if (loopback && store.policyFor(null).config.daemon.auth !== "required")
+      return next();
+    return c.json({ error: "unauthorized: send the daemon token (~/.swarm/token) as Authorization: Bearer" }, 401);
+  });
+  app.get("/v1/health", (c) => c.json({
+    ok: true,
+    version: VERSION,
+    schema: store.schemaVersion(),
+    auth: store.policyFor(null).config.daemon.auth
+  }));
   app.get("/v1/projects", (c) => c.json(store.snapshot().projects));
   app.post("/v1/projects", async (c) => {
     const { path, name } = await c.req.json();
@@ -7072,9 +7931,11 @@ function createApp(store = new Store) {
     return c.json(store.reorderProjects(ids));
   });
   app.patch("/v1/projects/:id", async (c) => {
-    const { pinned, name } = await c.req.json().catch(() => ({}));
-    const p = store.updateProject(c.req.param("id"), { pinned, name });
-    return p ? c.json(p) : c.json({ error: "not found" }, 404);
+    const { pinned, name, icon, color } = await c.req.json().catch(() => ({}));
+    if (!store.project(c.req.param("id")))
+      return c.json({ error: "not found" }, 404);
+    const p = store.updateProject(c.req.param("id"), { pinned, name, icon, color });
+    return p ? c.json(p) : c.json({ error: "icon is at most 4 characters; color is c1\u2026c7" }, 400);
   });
   app.delete("/v1/projects/:id", (c) => store.removeProject(c.req.param("id")) ? c.body(null, 204) : c.json({ error: "not found" }, 404));
   app.get("/v1/fs/ls", (c) => {
@@ -7112,6 +7973,31 @@ function createApp(store = new Store) {
       })
     });
   });
+  app.get("/v1/policy", (c) => {
+    const id = c.req.query("project");
+    const p = id ? store.project(id) : null;
+    if (id && !p)
+      return c.json({ error: "unknown project" }, 404);
+    const { provenance, overridden, policy: policy2 } = store.policyFor(p?.root ?? null);
+    return c.json({ ...policy2, provenance, overridden });
+  });
+  app.get("/v1/audit", (c) => {
+    const since = sinceToIso(c.req.query("since"));
+    if (c.req.query("since") && !since)
+      return c.json({ error: "since: use 30d / 12h / 90m or an ISO date" }, 400);
+    const pid = c.req.query("project") || null;
+    if (pid && !store.project(pid))
+      return c.json({ error: "unknown project" }, 404);
+    const rows = store.audit({
+      since,
+      projectId: pid,
+      type: c.req.query("type") || null,
+      limit: Number(c.req.query("limit")) || undefined
+    });
+    const format = c.req.query("format") === "csv" ? "csv" : c.req.query("format") === "jsonl" ? "jsonl" : "json";
+    const ct = format === "csv" ? "text/csv; charset=utf-8" : format === "jsonl" ? "application/x-ndjson" : "application/json";
+    return c.body(formatAudit(rows, format), 200, { "content-type": ct });
+  });
   app.get("/v1/rules/dryrun", (c) => {
     const projectId = c.req.query("project");
     if (!projectId)
@@ -7125,11 +8011,11 @@ function createApp(store = new Store) {
   });
   app.post("/v1/incidents/ack", async (c) => {
     const body = await c.req.json().catch(() => ({}));
-    return c.json({ ok: true, acked: store.ackAllIncidents(body.project || undefined) });
+    return c.json({ ok: true, acked: store.ackAllIncidents(body.project || undefined, body.by) });
   });
   app.post("/v1/incidents/:seq/ack", (c) => {
     const seq = Number(c.req.param("seq"));
-    if (!Number.isInteger(seq) || !store.ackIncident(seq))
+    if (!Number.isInteger(seq) || !store.ackIncident(seq, c.req.query("by")))
       return c.json({ ok: false, error: "no such incident" }, 404);
     return c.json({ ok: true });
   });
@@ -7377,7 +8263,7 @@ function createApp(store = new Store) {
     const b = await c.req.json();
     if (!b.projectId || !b.task)
       return c.json({ error: "projectId and task required" }, 400);
-    const r = store.claim(b.projectId, b.task, b.owner ?? "cli", b.baseRef);
+    const r = store.claim(b.projectId, b.task, b.owner ?? "cli", b.baseRef, b.sessionId ?? null);
     return c.json(r, r.ok ? 201 : 409);
   });
   app.post("/v1/claims/renew", async (c) => {
@@ -7524,6 +8410,7 @@ function createApp(store = new Store) {
     const raw2 = await c.req.json().catch(() => ({}));
     store.ingestHook(event, raw2);
     if (event === "SessionStart" && typeof raw2.cwd === "string") {
+      store.checkPolicy(raw2.cwd, typeof raw2.session_id === "string" ? raw2.session_id : null);
       const ctx = store.sessionContext(raw2.cwd);
       if (ctx)
         return c.json({
@@ -7533,7 +8420,7 @@ function createApp(store = new Store) {
     }
     const sid = typeof raw2.session_id === "string" ? raw2.session_id : null;
     const answers = event === "UserPromptSubmit" || event === "PreToolUse" || event === "PostToolUse" ? store.answerContext(sid) : null;
-    if (event === "PreToolUse" && process.env.SWARM_GUARD !== "off") {
+    if (event === "PreToolUse" && !store.guardDisabled(hookRepoRoot(store, raw2))) {
       const guard = store.guardHook(raw2);
       if (guard) {
         return c.json({
@@ -7609,6 +8496,7 @@ function serve() {
 }
 var server = serve();
 var port = server.port ?? DEFAULT_PORT2;
+ensureToken();
 writeDaemonInfo({ port, pid: process.pid, version: VERSION, startedAt: new Date().toISOString() });
 var backfillDays = Number(process.env.SWARM_CODEX_BACKFILL_DAYS ?? 30);
 var backfillMs = backfillDays * 24 * 60 * 60000;