@ra3orblade/swarm 0.9.0 → 0.10.0

package/dist/swarmd.js

@@ -105,6 +105,150 @@ function actorFromColumns(kind, id, session) {
     a.session = session;
   return a;
 }
+// packages/core/src/adapters/aider/history.ts
+var djb2 = (s) => {
+  let h = 5381;
+  for (let i = 0;i < s.length; i++)
+    h = (h * 33 ^ s.charCodeAt(i)) >>> 0;
+  return h.toString(36);
+};
+var toks = (s) => {
+  if (!s)
+    return 0;
+  const n = Number.parseFloat(s.replaceAll(",", ""));
+  return Math.round(s.trim().endsWith("k") ? n * 1000 : n);
+};
+var HEADER = /^# aider chat started at (\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2})/;
+var MODEL = /^> Model: (\S+) with /;
+var TOKENS = /^(?:> )?Tokens: ([\d.,]+k?) sent(?:, ([\d.,]+k?) cache write)?(?:, ([\d.,]+k?) cache hit)?, ([\d.,]+k?) received\./;
+var COST = /Cost: \$([\d.]+(?:e-?\d+)?) message/;
+var EDIT = /^> Applied edit to (.+)/;
+var COMMIT = /^> Commit [0-9a-f]{6,}/;
+function parseAiderHistory(chunk, seed, carry) {
+  const segments = [];
+  let cur = carry ? {
+    sessionId: carry.sessionId,
+    startMs: carry.startMs,
+    model: carry.model,
+    title: carry.title,
+    turns: [],
+    c: { ...carry }
+  } : null;
+  const closeTurn = (t, cost) => {
+    if (!cur)
+      return;
+    t.cost = cost;
+    cur.turns.push(t);
+    cur.c.turns++;
+    cur.c.text = "";
+    cur.c.tools = [];
+    cur.c.pending = null;
+  };
+  const flushPending = () => {
+    if (cur?.c.pending)
+      closeTurn(cur.c.pending, null);
+  };
+  for (const line of chunk.split(`
+`)) {
+    const h = line.match(HEADER);
+    if (h) {
+      flushPending();
+      if (cur)
+        segments.push(cur);
+      const stamp = h[1] ?? "";
+      const startMs = Date.parse(stamp.replace(" ", "T"));
+      const sessionId = `aider-${djb2(`${seed}|${stamp}`)}`;
+      cur = {
+        sessionId,
+        startMs,
+        model: null,
+        title: null,
+        turns: [],
+        c: {
+          sessionId,
+          startMs,
+          model: null,
+          title: null,
+          turns: 0,
+          text: "",
+          tools: [],
+          pending: null
+        }
+      };
+      continue;
+    }
+    if (!cur)
+      continue;
+    const c = cur.c;
+    if (c.pending) {
+      const cost = line.match(COST);
+      if (cost) {
+        closeTurn(c.pending, Number.parseFloat(cost[1] ?? "0"));
+        continue;
+      }
+      flushPending();
+    }
+    const m = line.match(MODEL);
+    if (m) {
+      cur.model = (m[1] ?? "").split("/").pop() || null;
+      c.model = cur.model;
+      continue;
+    }
+    const tk = line.match(TOKENS);
+    if (tk) {
+      const cacheRead = toks(tk[3]);
+      const turn = {
+        id: `${c.sessionId}-t${c.turns}`,
+        ts: new Date(c.startMs + c.turns * 1000).toISOString(),
+        model: c.model ?? "aider",
+        usage: {
+          input: Math.max(0, toks(tk[1]) - cacheRead),
+          output: toks(tk[4]),
+          cacheWrite: toks(tk[2]),
+          cacheWrite1h: 0,
+          cacheRead,
+          thinking: 0
+        },
+        text: c.text,
+        tools: c.tools,
+        effort: null,
+        sidechain: false
+      };
+      const cost = line.match(COST);
+      if (cost)
+        closeTurn(turn, Number.parseFloat(cost[1] ?? "0"));
+      else
+        c.pending = turn;
+      continue;
+    }
+    if (line.startsWith("#### ")) {
+      const t = line.slice(5).trim();
+      if (t && !cur.title) {
+        cur.title = t.slice(0, 80);
+        c.title = cur.title;
+      }
+      continue;
+    }
+    if (EDIT.test(line)) {
+      c.tools.push("edit");
+      continue;
+    }
+    if (COMMIT.test(line)) {
+      c.tools.push("commit");
+      continue;
+    }
+    if (line.startsWith(">"))
+      continue;
+    if (line.trim() && c.text.length < 400)
+      c.text = `${c.text}${c.text ? `
+` : ""}${line}`.slice(0, 400);
+  }
+  if (cur)
+    segments.push(cur);
+  const last = cur ? { ...cur.c } : null;
+  return { segments, carry: last };
+}
+
 // packages/core/src/adapters/claude-code/transcript.ts
 function parseTranscriptChunk(chunk) {
   const out = {
@@ -385,6 +529,62 @@ function parseGrokUpdates(chunk) {
   }
   return out;
 }
+
+// packages/core/src/adapters/opencode/db.ts
+var ocModel = (d) => {
+  if (typeof d.model === "string")
+    return d.model;
+  if (d.model && typeof d.model === "object" && typeof d.model.id === "string")
+    return d.model.id;
+  return typeof d.modelID === "string" ? d.modelID : null;
+};
+var ocTs = (t, fallbackMs) => {
+  if (typeof t === "number")
+    return new Date(t).toISOString();
+  if (typeof t === "string" && !Number.isNaN(Date.parse(t)))
+    return new Date(t).toISOString();
+  return new Date(fallbackMs).toISOString();
+};
+function opencodeTurn(sessionId, msgId, data, fallbackMs = 0, sidechain = false) {
+  let d;
+  try {
+    d = JSON.parse(data);
+  } catch {
+    return null;
+  }
+  if ((d.type ?? d.role) !== "assistant")
+    return null;
+  const t = d.tokens ?? {};
+  let text = "";
+  const tools = [];
+  for (const p of Array.isArray(d.content) ? d.content : []) {
+    if (p?.type === "text" && typeof p.text === "string" && text.length < 400)
+      text = `${text}${p.text}`.slice(0, 400);
+    else if (p?.type === "tool") {
+      const name = p.tool ?? p.name;
+      if (name)
+        tools.push(name);
+    }
+  }
+  return {
+    id: `${sessionId}-${msgId}`,
+    ts: ocTs(d.time?.created, fallbackMs),
+    model: ocModel(d) ?? "opencode",
+    usage: {
+      input: t.input ?? 0,
+      output: t.output ?? 0,
+      cacheWrite: t.cache?.write ?? 0,
+      cacheWrite1h: 0,
+      cacheRead: t.cache?.read ?? 0,
+      thinking: t.reasoning ?? 0
+    },
+    text,
+    tools,
+    effort: null,
+    sidechain,
+    cost: typeof d.cost === "number" && d.cost > 0 ? d.cost : null
+  };
+}
 // packages/core/src/adapters/claude-code/hooks.ts
 var HOOK_EVENTS = [
   "SessionStart",
@@ -796,6 +996,9 @@ var DEFAULT_CONFIG = {
   gates: { required: [], auto: "session-end", defs: {} },
   workflows: {},
   budget: { daily: null, weekly: null, warn_at: 0.8, on_exceed: "warn" },
+  models: { allow: [] },
+  notify: { webhook: null },
+  team: { url: null, forward: ["ledger", "cost"], interval: 5 },
   events: { retain_days: 30 },
   audit: { retain_days: 0 },
   privacy: DEFAULT_PRIVACY,
@@ -891,6 +1094,26 @@ function validate(c) {
       on_exceed: b.on_exceed === "ask" || b.on_exceed === "stop" ? b.on_exceed : "warn"
     },
     workflows: parseWorkflows(c.workflows),
+    notify: {
+      webhook: (() => {
+        const w = c.notify?.webhook;
+        return typeof w === "string" && /^https?:\/\//.test(w.trim()) ? w.trim() : null;
+      })()
+    },
+    models: {
+      allow: Array.isArray(c.models?.allow) ? c.models.allow.filter((m) => typeof m === "string" && m.trim() !== "") : []
+    },
+    team: (() => {
+      const t = c.team ?? {};
+      const url = typeof t.url === "string" && /^https?:\/\//.test(t.url.trim()) ? t.url.trim().replace(/\/+$/, "") : null;
+      const iv = Number(t.interval);
+      const KINDS = ["ledger", "cost", "transcripts"];
+      return {
+        url,
+        forward: Array.isArray(t.forward) ? t.forward.filter((k) => typeof k === "string" && KINDS.includes(k)) : ["ledger", "cost"],
+        interval: Number.isFinite(iv) && iv >= 1 && iv <= 300 ? Math.round(iv) : 5
+      };
+    })(),
     events: {
       retain_days: days(c.events?.retain_days, 30)
     },
@@ -1505,6 +1728,41 @@ function executedGateInput(task, gate, cmd, outcome) {
     evidence: evidenceTail(outcome.output) || null
   };
 }
+// packages/core/src/graphs.ts
+function collisionGraph(rows, writeTools = WRITE_TOOLS) {
+  const files = new Map;
+  const sessions = new Map;
+  for (const r of rows) {
+    if (!r.path || !r.sessionId)
+      continue;
+    const f = files.get(r.path) ?? { readers: new Set, writers: new Set };
+    const s = sessions.get(r.sessionId) ?? { files: new Set, writes: 0 };
+    if (writeTools.has(r.tool)) {
+      f.writers.add(r.sessionId);
+      s.writes++;
+    } else
+      f.readers.add(r.sessionId);
+    s.files.add(r.path);
+    files.set(r.path, f);
+    sessions.set(r.sessionId, s);
+  }
+  const out = [...files.entries()].map(([path, f]) => {
+    const writers = [...f.writers].sort();
+    const readers = [...f.readers].filter((id) => !f.writers.has(id)).sort();
+    const touchers = writers.length + readers.length;
+    return { path, readers, writers, contested: touchers >= 2 && writers.length >= 1 };
+  });
+  out.sort((a, b) => Number(b.contested) - Number(a.contested) || b.readers.length + b.writers.length - (a.readers.length + a.writers.length) || a.path.localeCompare(b.path));
+  return {
+    sessions: [...sessions.entries()].map(([id, s]) => ({
+      id,
+      files: s.files.size,
+      writes: s.writes
+    })),
+    files: out,
+    contested: out.filter((f) => f.contested).length
+  };
+}
 // packages/core/src/ledger.ts
 var DEFAULT_LEASE_MINUTES = 45;
 function isExpired(claim, now) {
@@ -1838,6 +2096,92 @@ ${lines.join(`
 `)}
 Reply with swarm_send if a reply is expected.`;
 }
+// packages/core/src/outcomes.ts
+var DEFAULT_BRANCHES = new Set(["main", "master", "develop", "trunk"]);
+var median = (xs) => {
+  if (!xs.length)
+    return null;
+  const s = [...xs].sort((a, b) => a - b);
+  const mid = Math.floor(s.length / 2);
+  return s.length % 2 ? s[mid] : (s[mid - 1] + s[mid]) / 2;
+};
+function scorecard(key, rows) {
+  const merged = rows.filter((r) => r.outcome === "merged");
+  const reverted = rows.filter((r) => r.outcome === "reverted");
+  const open = rows.filter((r) => r.outcome === "open");
+  const noPr = rows.filter((r) => r.outcome === "no-pr");
+  const finished = merged.length + reverted.length + noPr.length;
+  const mergedCost = merged.reduce((a, r) => a + r.costUsd, 0);
+  return {
+    key,
+    branches: rows.length,
+    merged: merged.length,
+    reverted: reverted.length,
+    open: open.length,
+    noPr: noPr.length,
+    mergeRate: finished ? merged.length / finished : null,
+    medianLeadHours: median(merged.map((r) => r.leadHours).filter((x) => x != null)),
+    costPerMerge: merged.length ? mergedCost / merged.length : null
+  };
+}
+function outcomeReport(sessions, prs, revertedShas) {
+  const byBranch = new Map;
+  for (const s of sessions) {
+    if (!s.branch || DEFAULT_BRANCHES.has(s.branch))
+      continue;
+    const a = byBranch.get(s.branch) ?? [];
+    a.push(s);
+    byBranch.set(s.branch, a);
+  }
+  const prByBranch = new Map;
+  for (const pr of prs) {
+    const prev = prByBranch.get(pr.branch);
+    if (!prev || pr.state === "merged" && prev.state !== "merged" || pr.state === prev.state && pr.number > prev.number)
+      prByBranch.set(pr.branch, pr);
+  }
+  const rows = [...byBranch.entries()].map(([branch, ss]) => {
+    const dominant = [...ss].sort((a, b) => (b.costUsd ?? 0) - (a.costUsd ?? 0) || a.startedAt.localeCompare(b.startedAt))[0];
+    const pr = prByBranch.get(branch) ?? null;
+    const wasReverted = (sha) => {
+      if (!sha)
+        return false;
+      const s = sha.toLowerCase();
+      for (const r of revertedShas)
+        if (s.startsWith(r) || r.startsWith(s))
+          return true;
+      return false;
+    };
+    const outcome = !pr ? "no-pr" : pr.state === "open" ? "open" : wasReverted(pr.mergeSha) ? "reverted" : "merged";
+    const firstStart = ss.map((s) => s.startedAt).sort()[0];
+    const leadHours = outcome === "merged" && pr?.mergedAt ? Math.max(0, (new Date(pr.mergedAt).getTime() - new Date(firstStart).getTime()) / 3600000) : null;
+    return {
+      branch,
+      outcome,
+      prNumber: pr?.number ?? null,
+      title: pr?.title ?? null,
+      url: pr?.url ?? null,
+      mergedAt: pr?.mergedAt ?? null,
+      leadHours,
+      sessions: ss.map((s) => s.id),
+      model: dominant.model,
+      agent: dominant.agent,
+      costUsd: ss.reduce((a, s) => a + (s.costUsd ?? 0), 0)
+    };
+  });
+  rows.sort((a, b) => (b.mergedAt ?? "").localeCompare(a.mergedAt ?? "") || a.branch.localeCompare(b.branch));
+  const group = (key) => {
+    const m = new Map;
+    for (const r of rows) {
+      const k = key(r) ?? "unknown";
+      m.set(k, [...m.get(k) ?? [], r]);
+    }
+    return [...m.entries()].map(([k, rs]) => scorecard(k, rs)).sort((a, b) => b.branches - a.branches);
+  };
+  return { branches: rows, byModel: group((r) => r.model), byAgent: group((r) => r.agent) };
+}
+function parseReverts(gitLog) {
+  return new Set([...gitLog.matchAll(/This reverts commit ([0-9a-f]{7,40})/gi)].map((m) => m[1].toLowerCase()));
+}
 // packages/core/src/policy.ts
 import { createHash } from "crypto";
 var HOOK_MARK = "swarm-hook";
@@ -2178,6 +2522,49 @@ ${lines.join(`
 `)}` : ""}`
   };
 }
+// packages/core/src/stall.ts
+var STALL_DEFAULTS = { window: 12, repeat: 3, repeatErrors: 2, errors: 4 };
+function toolResponseErrored(resp) {
+  if (typeof resp === "string")
+    return /^\s*error[:\s]/i.test(resp);
+  if (!resp || typeof resp !== "object")
+    return false;
+  const r = resp;
+  if (r.is_error === true || r.isError === true)
+    return true;
+  if (r.success === false)
+    return true;
+  if (r.interrupted === true)
+    return true;
+  if (typeof r.error === "string" && r.error.length > 0)
+    return true;
+  return false;
+}
+function detectStall(calls, opts = {}) {
+  const o = { ...STALL_DEFAULTS, ...opts };
+  const tail = calls.slice(-o.window);
+  const last = tail.at(-1);
+  if (!last)
+    return null;
+  let run = 0;
+  let runErrors = 0;
+  for (let i = tail.length - 1;i >= 0; i--) {
+    const c = tail[i];
+    if (!c || c.tool !== last.tool || c.input !== last.input)
+      break;
+    run++;
+    if (c.errored)
+      runErrors++;
+  }
+  if (run >= o.repeat && runErrors >= o.repeatErrors)
+    return { kind: "repeat", reason: `repeating a failing ${last.tool} call \xD7${run}` };
+  let streak = 0;
+  for (let i = tail.length - 1;i >= 0 && tail[i]?.errored; i--)
+    streak++;
+  if (streak >= o.errors)
+    return { kind: "errors", reason: `${streak} tool calls failing in a row` };
+  return null;
+}
 // packages/core/src/tasks.ts
 var ID_RE = /^[A-Za-z][A-Za-z0-9_-]*\d[\w.-]*$/;
 var DEP_RE = /[A-Za-z][A-Za-z0-9_-]*\d[\w.]*/g;
@@ -2337,6 +2724,35 @@ function linearIssuesQuery(teamKey, first = 200) {
     inverseRelations { nodes { type issue { identifier } } }
   } } }`;
 }
+// packages/core/src/team.ts
+import { createPublicKey, verify as nodeVerify } from "crypto";
+function modelAllowed(model, allow) {
+  if (!allow.length)
+    return true;
+  return allow.some((g) => {
+    const re = new RegExp(`^${g.trim().split("*").map((s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join(".*")}$`, "i");
+    return re.test(model);
+  });
+}
+function verifyPolicySignature(toml, signatureB64, publicKeyB64) {
+  try {
+    return nodeVerify(null, Buffer.from(toml), createPublicKey({ key: Buffer.from(publicKeyB64, "base64"), format: "der", type: "spki" }), Buffer.from(signatureB64, "base64"));
+  } catch {
+    return false;
+  }
+}
+function clusterProjectKey(remoteUrl) {
+  if (!remoteUrl)
+    return null;
+  const url = remoteUrl.trim();
+  const m = url.match(/^https?:\/\/(?:[^@/]+@)?([^/:]+)(?::\d+)?\/(.+?)(?:\.git)?\/?$/) ?? url.match(/^(?:ssh:\/\/)?(?:[^@/]+@)?([^:/]+)[:/](.+?)(?:\.git)?\/?$/);
+  if (!m?.[1] || !m[2])
+    return null;
+  const host = m[1].toLowerCase();
+  if (host.includes(" ") || !host.includes("."))
+    return null;
+  return `${host}/${m[2]}`;
+}
 // packages/core/src/worktree.ts
 import { join as join3 } from "path";
 function planBootstrap(cfg, repoRoot, worktree) {
@@ -2413,7 +2829,7 @@ function planGc(worktrees, claims) {
 // packages/daemon/src/app.ts
 import { existsSync as existsSync7, readdirSync as readdirSync2, readFileSync as readFileSync4, realpathSync as realpathSync3 } from "fs";
 import { homedir as homedir4 } from "os";
-import { dirname as dirname4, join as join9 } from "path";
+import { dirname as dirname4, join as join10 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
 // node_modules/.bun/hono@4.13.3/node_modules/hono/dist/compose.js
@@ -4343,6 +4759,64 @@ class ForgeService {
       }
     }));
   }
+  outcomeCache = new Map;
+  async merged(projectId, root) {
+    const hit = this.outcomeCache.get(projectId);
+    if (hit && Date.now() - hit.at < 600000)
+      return hit;
+    let merged = [];
+    const remote = this.remote(root);
+    if (remote?.forge === "github") {
+      const out = await this.run([
+        "gh",
+        "pr",
+        "list",
+        "--state",
+        "merged",
+        "--limit",
+        "200",
+        "--json",
+        "number,title,headRefName,url,createdAt,mergedAt,mergeCommit"
+      ], root);
+      if (out)
+        merged = JSON.parse(out).map((r) => ({
+          branch: String(r.headRefName ?? ""),
+          number: Number(r.number ?? 0),
+          title: String(r.title ?? ""),
+          url: String(r.url ?? ""),
+          createdAt: r.createdAt ?? null,
+          mergedAt: r.mergedAt ?? null,
+          mergeSha: (r.mergeCommit?.oid ?? null)?.toLowerCase() ?? null
+        }));
+    } else if (remote?.forge === "gitlab") {
+      const out = await this.run(["glab", "mr", "list", "--merged", "--output", "json"], root);
+      if (out)
+        merged = JSON.parse(out).map((r) => ({
+          branch: String(r.source_branch ?? ""),
+          number: Number(r.iid ?? 0),
+          title: String(r.title ?? ""),
+          url: String(r.web_url ?? ""),
+          createdAt: r.created_at ?? null,
+          mergedAt: r.merged_at ?? null,
+          mergeSha: (r.merge_commit_sha ?? null)?.toLowerCase() ?? null
+        }));
+    }
+    const log = Bun.spawnSync([
+      "git",
+      "-C",
+      root,
+      "log",
+      "--grep",
+      "This reverts commit",
+      "--format=%B",
+      "-n",
+      "300"
+    ]);
+    const reverted = log.exitCode === 0 ? [...parseReverts(new TextDecoder().decode(log.stdout))] : [];
+    const entry = { at: Date.now(), merged, reverted };
+    this.outcomeCache.set(projectId, entry);
+    return entry;
+  }
   remote(root) {
     const r = Bun.spawnSync(["git", "-C", root, "remote", "get-url", "origin"]);
     if (r.exitCode !== 0)
@@ -4575,6 +5049,16 @@ function currentBranch(cwd) {
   branchCache.set(cwd, { v: v === "HEAD" ? "(detached)" : v, t: now });
   return branchCache.get(cwd)?.v ?? null;
 }
+var originCache = new Map;
+function originUrl(root) {
+  const hit = originCache.get(root);
+  const now = Date.now();
+  if (hit && now - hit.t < 300000)
+    return hit.v;
+  const v = git(root, ["config", "--get", "remote.origin.url"])?.trim() || null;
+  originCache.set(root, { v, t: now });
+  return v;
+}
 function worktreeAdd(repoRoot, path, branch, baseRef = "HEAD") {
   const branchExists = git(repoRoot, ["rev-parse", "--verify", "--quiet", `refs/heads/${branch}`]) !== null;
   const args = branchExists ? ["worktree", "add", path, branch] : ["worktree", "add", "-b", branch, path, baseRef];
@@ -4706,6 +5190,14 @@ class Runner {
       return { ok: false, reason: "unknown project" };
     if (!input.prompt.trim())
       return { ok: false, reason: "prompt is required" };
+    if (input.model) {
+      const allow = this.store.config(input.projectId).models.allow;
+      if (!modelAllowed(input.model, allow))
+        return {
+          ok: false,
+          reason: `model "${input.model}" is not in [models] allow (${allow.join(", ")})`
+        };
+    }
     if (input.permissionMode && !PERMISSION_MODES.includes(input.permissionMode))
       return { ok: false, reason: `permission mode must be one of ${PERMISSION_MODES.join(", ")}` };
     if (this.get(input.task)?.projectId === input.projectId)
@@ -5004,6 +5496,7 @@ class Runner {
 import { Database } from "bun:sqlite";
 import {
   closeSync,
+  copyFileSync,
   existsSync as existsSync6,
   mkdirSync as mkdirSync4,
   openSync as openSync3,
@@ -5016,7 +5509,7 @@ import {
   unlinkSync,
   writeFileSync as writeFileSync2
 } from "fs";
-import { homedir as homedir3, tmpdir, userInfo } from "os";
+import { homedir as homedir3, hostname, tmpdir, userInfo } from "os";
 import { basename, dirname as dirname3, join as join8 } from "path";
 
 // packages/daemon/src/bootstrap.ts
@@ -5126,14 +5619,14 @@ class TaskSources {
 `)[0] ?? code}`);
     return normalizeGithubIssues(JSON.parse(out));
   }
-  async linear(team) {
+  async linear(team2) {
     const key = this.env.LINEAR_API_KEY;
     if (!key)
       throw new Error("LINEAR_API_KEY not set \u2014 export it in the environment swarmd starts from (never stored)");
     const r = await fetch("https://api.linear.app/graphql", {
       method: "POST",
       headers: { "content-type": "application/json", authorization: key },
-      body: JSON.stringify({ query: linearIssuesQuery(team) })
+      body: JSON.stringify({ query: linearIssuesQuery(team2) })
     });
     if (!r.ok)
       throw new Error(`Linear API ${r.status}`);
@@ -5159,11 +5652,12 @@ CREATE INDEX IF NOT EXISTS events_type_seq ON events(type, seq);
 CREATE TABLE IF NOT EXISTS turns (
   id TEXT PRIMARY KEY, session_id TEXT, agent_id TEXT, ts TEXT, model TEXT, effort TEXT, sidechain INTEGER,
   input INTEGER, output INTEGER, cache_write INTEGER, cache_write_1h INTEGER, cache_read INTEGER, thinking INTEGER,
-  cost_usd REAL, text TEXT, tools TEXT
+  cost_usd REAL, cost_fixed INTEGER DEFAULT 0, text TEXT, tools TEXT
 );
 CREATE INDEX IF NOT EXISTS turns_session ON turns(session_id, ts);
 CREATE INDEX IF NOT EXISTS turns_ts ON turns(ts);
 CREATE TABLE IF NOT EXISTS tails (path TEXT PRIMARY KEY, session_id TEXT, agent_id TEXT, offset INTEGER);
+CREATE TABLE IF NOT EXISTS outbox (seq INTEGER PRIMARY KEY AUTOINCREMENT, kind TEXT, payload TEXT, created_at TEXT);
 CREATE TABLE IF NOT EXISTS resources (
   name TEXT, project_id TEXT, kind TEXT, owner TEXT, session_id TEXT,
   pid INTEGER, port INTEGER, acquired_at TEXT, expires_at TEXT, released INTEGER DEFAULT 0,
@@ -5229,6 +5723,8 @@ class Store {
     this.db.exec("PRAGMA journal_mode=WAL; PRAGMA synchronous=NORMAL; PRAGMA mmap_size=268435456; PRAGMA cache_size=-32000;");
     this.db.exec(SCHEMA);
     this.ensureColumn("sessions", "agent", "TEXT DEFAULT 'claude-code'");
+    this.ensureColumn("claims", "team_state", "TEXT");
+    this.ensureColumn("turns", "cost_fixed", "INTEGER DEFAULT 0");
     this.ensureColumn("projects", "sort_order", "INTEGER");
     this.ensureColumn("projects", "icon", "TEXT");
     this.ensureColumn("projects", "color", "TEXT");
@@ -5254,6 +5750,12 @@ class Store {
   setMeta(key, value) {
     this.db.query("INSERT INTO meta (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(key, value);
   }
+  metaValue(key) {
+    return this.meta(key) || null;
+  }
+  setMetaValue(key, value) {
+    this.setMeta(key, value);
+  }
   slimExistingEvents() {
     if (this.meta("events_slim") === "1")
       return;
@@ -6414,6 +6916,18 @@ ${err}
         };
         return { decision: d, display: input.command ?? input.file_path ?? tool };
       }
+      const tb = this.teamBudgets().find((x) => x.level === "exceeded" && x.on_exceed === "ask" && (x.scope !== "project" || x.key === this.clusterKeyFor(project.id)));
+      if (tb) {
+        const label = tb.scope === "org" ? "the org" : `${tb.scope} ${tb.key}`;
+        return {
+          decision: {
+            action: "ask",
+            rule: "budget",
+            reason: `team ${tb.kind} budget for ${label} is exceeded ($${tb.spent.toFixed(2)} of $${tb.limit}) \u2014 the team's on_exceed = "ask": confirm each change, or have an admin raise it (POST /t1/budgets)`
+          },
+          display: input.command ?? input.file_path ?? tool
+        };
+      }
     }
     const isWrite = WRITE_TOOLS.has(tool) && typeof input.file_path === "string";
     const cmd = tool === "Bash" ? input.command : undefined;
@@ -6581,7 +7095,7 @@ ${err}
     this.reprice();
   }
   reprice() {
-    const rows = this.db.query("SELECT id, model, input, output, cache_write, cache_write_1h, cache_read FROM turns").all();
+    const rows = this.db.query("SELECT id, model, input, output, cache_write, cache_write_1h, cache_read FROM turns WHERE cost_fixed IS NOT 1").all();
     const up = this.db.query("UPDATE turns SET cost_usd = ? WHERE id = ?");
     const tx = this.db.transaction(() => {
       for (const r of rows)
@@ -6742,12 +7256,69 @@ ${err}
     if (stored.type === "incident.opened")
       this.remember(incidentDoc(stored.projectId, stored.seq, stored.payload, stored.ts, stored.sessionId));
     this.projectSession(stored);
+    if (stored.type === "incident.opened") {
+      const webhook = this.policyFor(null).config.notify.webhook;
+      if (webhook) {
+        const p2 = stored.payload ?? {};
+        const project = this.project(stored.projectId)?.name ?? stored.projectId;
+        fetch(webhook, {
+          method: "POST",
+          headers: { "content-type": "application/json" },
+          body: JSON.stringify({
+            text: `Swarm incident \xB7 ${p2.rule ?? "?"} \xB7 ${project}
+${p2.command ?? ""}
+${p2.reason ?? ""}`.trim(),
+            rule: p2.rule,
+            project,
+            sessionId: stored.sessionId,
+            ts: stored.ts
+          }),
+          signal: AbortSignal.timeout(5000)
+        }).catch(() => {});
+      }
+    }
+    const team2 = this.policyFor(null).config.team;
+    if (team2.url && team2.forward.includes("ledger") && isAuditType(stored.type)) {
+      this.db.query("INSERT INTO outbox (kind, payload, created_at) VALUES ('event', ?, ?)").run(JSON.stringify({
+        seq: stored.seq,
+        ts: stored.ts,
+        type: stored.type,
+        projectId: stored.projectId,
+        sessionId: stored.sessionId,
+        actor: actor2,
+        payload: slim.payload ?? null
+      }), stored.ts);
+    }
     this.touch();
     const wire = toWire(stored);
     for (const l of this.listeners)
       l(wire);
     return stored;
   }
+  outboxPending(limit = 200) {
+    return this.db.query("SELECT seq, kind, payload FROM outbox ORDER BY seq LIMIT ?").all(limit);
+  }
+  outboxAck(upTo) {
+    this.db.query("DELETE FROM outbox WHERE seq <= ?").run(upTo);
+  }
+  outboxStatus() {
+    const r = this.db.query("SELECT COUNT(*) AS n, MIN(created_at) AS oldest FROM outbox").get();
+    return { pending: r.n, oldest: r.oldest };
+  }
+  machineIdentity() {
+    let id = this.meta("machine_id");
+    if (!id) {
+      id = crypto.randomUUID();
+      this.setMeta("machine_id", id);
+    }
+    return { id, name: hostname() };
+  }
+  spendRollup(day = new Date().toISOString().slice(0, 10)) {
+    return this.db.query(`SELECT s.project_id AS projectId, COALESCE(s.agent, 'claude-code') AS agent, t.model AS model,
+                SUM(t.cost_usd) AS cost, SUM(t.input + t.cache_write + t.cache_read) AS tokensIn, SUM(t.output) AS tokensOut
+         FROM turns t JOIN sessions s ON s.id = t.session_id
+         WHERE t.ts >= ? AND t.ts < ? GROUP BY s.project_id, agent, t.model`).all(`${day}T00:00:00.000Z`, `${day}T23:59:59.999Z`);
+  }
   audit(opts = {}) {
     const where = [`type IN (${AUDIT_TYPES_SQL})`];
     const args = [];
@@ -6875,13 +7446,13 @@ ${err}
   persistTurns(sessionId, agentId, turns) {
     const privacy = this.policyFor(null).config.privacy;
     const res = this.redactions();
-    const up = this.db.query(`INSERT INTO turns (id, session_id, agent_id, ts, model, effort, sidechain, input, output, cache_write, cache_write_1h, cache_read, thinking, cost_usd, text, tools)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    const up = this.db.query(`INSERT INTO turns (id, session_id, agent_id, ts, model, effort, sidechain, input, output, cache_write, cache_write_1h, cache_read, thinking, cost_usd, cost_fixed, text, tools)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
        ON CONFLICT(id) DO UPDATE SET input=excluded.input, output=excluded.output, cache_write=excluded.cache_write, cache_write_1h=excluded.cache_write_1h,
-         cache_read=excluded.cache_read, thinking=excluded.thinking, cost_usd=excluded.cost_usd, text=CASE WHEN excluded.text != '' THEN excluded.text ELSE turns.text END, tools=excluded.tools`);
+         cache_read=excluded.cache_read, thinking=excluded.thinking, cost_usd=excluded.cost_usd, cost_fixed=excluded.cost_fixed, text=CASE WHEN excluded.text != '' THEN excluded.text ELSE turns.text END, tools=excluded.tools`);
     const tx = this.db.transaction((ts) => {
       for (const t of ts) {
-        up.run(t.id, sessionId, agentId, t.ts, t.model, t.effort, t.sidechain ? 1 : 0, t.usage.input, t.usage.output, t.usage.cacheWrite, t.usage.cacheWrite1h ?? 0, t.usage.cacheRead, t.usage.thinking, costUsd(t.model, t.usage, this.prices), privacy.store_reasoning ? redactValue(t.text, res) : "", JSON.stringify(t.tools));
+        up.run(t.id, sessionId, agentId, t.ts, t.model, t.effort, t.sidechain ? 1 : 0, t.usage.input, t.usage.output, t.usage.cacheWrite, t.usage.cacheWrite1h ?? 0, t.usage.cacheRead, t.usage.thinking, t.cost ?? costUsd(t.model, t.usage, this.prices), t.cost != null ? 1 : 0, privacy.store_reasoning ? redactValue(t.text, res) : "", JSON.stringify(t.tools));
       }
     });
     if (turns.length)
@@ -7091,6 +7662,160 @@ ${err}
     }
     return n;
   }
+  heldClaimsForSync() {
+    return this.db.query("SELECT project_id, task, acquired_at, expires_at, actor_kind, actor_id, team_state FROM claims WHERE state = 'held'").all().map((r) => ({
+      projectId: r.project_id,
+      task: r.task,
+      acquiredAt: r.acquired_at,
+      expiresAt: r.expires_at,
+      actorKind: r.actor_kind ?? null,
+      actorId: r.actor_id ?? null,
+      teamState: r.team_state ?? null
+    }));
+  }
+  markClaimTeamState(projectId, task, state) {
+    this.db.query("UPDATE claims SET team_state = ? WHERE project_id = ? AND task = ?").run(state, projectId, task);
+  }
+  revokeClaimConflict(projectId, task, holder) {
+    const row = this.db.query("SELECT state FROM claims WHERE project_id = ? AND task = ?").get(projectId, task);
+    if (row?.state !== "held")
+      return;
+    const now = new Date().toISOString();
+    this.db.query("UPDATE claims SET state = 'released', released_at = ?, team_state = 'conflict' WHERE project_id = ? AND task = ?").run(now, projectId, task);
+    this.append({
+      ts: now,
+      type: "claim.released",
+      projectId,
+      sessionId: null,
+      payload: { task, summary: `revoked \u2014 the team ledger holds ${task} on ${holder}` }
+    });
+    this.append({
+      ts: now,
+      type: "incident.opened",
+      projectId,
+      sessionId: null,
+      payload: {
+        rule: "claim_conflict",
+        action: "revoked",
+        command: task,
+        reason: `the team daemon holds ${task} for ${holder}; the local claim was revoked \u2014 the worktree is untouched`
+      }
+    });
+  }
+  aiderCarries = new Map;
+  recoverAiderCarry(sessionId) {
+    const s = this.db.query("SELECT started_at, model, title FROM sessions WHERE id = ?").get(sessionId);
+    if (!s)
+      return null;
+    const t = this.db.query("SELECT COUNT(*) AS n FROM turns WHERE session_id = ?").get(sessionId);
+    return {
+      sessionId,
+      startMs: Date.parse(s.started_at) || 0,
+      model: s.model,
+      title: s.title,
+      turns: t.n,
+      text: "",
+      tools: [],
+      pending: null
+    };
+  }
+  tailAider(windowMs = 3 * 24 * 60 * 60000) {
+    const roots = this.db.query("SELECT DISTINCT root FROM projects WHERE root IS NOT NULL AND root != ''").all();
+    let n = 0;
+    for (const { root } of roots) {
+      const path = join8(root, ".aider.chat.history.md");
+      let mtime;
+      try {
+        mtime = statSync(path).mtimeMs;
+      } catch {
+        continue;
+      }
+      if (mtime < Date.now() - windowMs)
+        continue;
+      const row = this.db.query("SELECT offset, session_id FROM tails WHERE path = ?").get(path);
+      const r = this.readFrom(path, row?.offset ?? 0);
+      if (!r)
+        continue;
+      let carry = this.aiderCarries.get(path) ?? null;
+      if (!carry && row?.session_id)
+        carry = this.recoverAiderCarry(row.session_id);
+      const { segments, carry: next } = parseAiderHistory(r.chunk, path, carry);
+      this.aiderCarries.set(path, next);
+      const lastSeg = segments.at(-1);
+      for (const seg of segments) {
+        this.ensureAgentSession(seg.sessionId, "aider", root, seg.startMs || mtime);
+        this.persistTurns(seg.sessionId, null, seg.turns);
+        const live = seg === lastSeg && Date.now() - mtime < 90000;
+        const lastSeen = new Date(seg === lastSeg ? mtime : seg.startMs + seg.turns.length * 1000).toISOString();
+        const lastText = [...seg.turns].reverse().find((t) => t.text)?.text ?? null;
+        this.db.query("UPDATE sessions SET title = COALESCE(title, ?), model = COALESCE(?, model), last_text = COALESCE(?, last_text), last_seen_at = ?, state = ?, ended_at = CASE WHEN ? = 'ended' AND ended_at IS NULL THEN ? ELSE ended_at END WHERE id = ?").run(seg.title, seg.model, lastText, lastSeen, live ? "active" : "ended", live ? "active" : "ended", lastSeen, seg.sessionId);
+        n += seg.turns.length;
+      }
+      this.db.query("INSERT INTO tails (path, session_id, agent_id, offset) VALUES (?, ?, NULL, ?) ON CONFLICT(path) DO UPDATE SET offset = excluded.offset, session_id = excluded.session_id").run(path, lastSeg?.sessionId ?? row?.session_id ?? null, r.next);
+    }
+    return n;
+  }
+  ocDbs = new Map;
+  tailOpencode(windowMs = 3 * 24 * 60 * 60000) {
+    const dir = process.env.SWARM_OPENCODE_DIR ?? join8(process.env.XDG_DATA_HOME ?? join8(homedir3(), ".local", "share"), "opencode");
+    let files;
+    try {
+      files = readdirSync(dir).filter((f) => /^opencode[^/]*\.db$/.test(f));
+    } catch {
+      return 0;
+    }
+    let n = 0;
+    for (const f of files) {
+      const path = join8(dir, f);
+      let db = this.ocDbs.get(path);
+      if (!db) {
+        try {
+          db = new Database(path, { readonly: true });
+        } catch {
+          continue;
+        }
+        this.ocDbs.set(path, db);
+      }
+      const row = this.db.query("SELECT offset FROM tails WHERE path = ?").get(path);
+      const lower = Math.max(row?.offset ?? 0, Date.now() - windowMs);
+      let rows;
+      try {
+        rows = db.query(`SELECT m.id, m.session_id, m.time_created, m.time_updated, m.data,
+                    s.directory, s.title, s.parent_id
+             FROM message m JOIN session s ON s.id = m.session_id
+             WHERE m.time_updated > ? ORDER BY m.time_updated ASC LIMIT 2000`).all(lower);
+      } catch {
+        continue;
+      }
+      if (!rows.length)
+        continue;
+      let cursor = lower;
+      const bySession = new Map;
+      for (const m of rows) {
+        cursor = Math.max(cursor, m.time_updated ?? 0);
+        const g = bySession.get(m.session_id) ?? { rows: [], last: 0 };
+        g.rows.push(m);
+        g.last = Math.max(g.last, m.time_updated ?? m.time_created ?? 0);
+        bySession.set(m.session_id, g);
+      }
+      for (const [sid, g] of bySession) {
+        const first = g.rows[0];
+        if (!first)
+          continue;
+        this.ensureAgentSession(sid, "opencode", first.directory ?? "", first.time_created ?? g.last);
+        const turns = g.rows.map((m) => opencodeTurn(sid, m.id, m.data, m.time_created ?? 0, first.parent_id != null)).filter((t) => t != null);
+        this.persistTurns(sid, null, turns);
+        const live = Date.now() - g.last < 90000;
+        const lastSeen = new Date(g.last).toISOString();
+        const lastText = [...turns].reverse().find((t) => t.text)?.text ?? null;
+        const model = [...turns].reverse().find((t) => t.model !== "opencode")?.model ?? null;
+        this.db.query("UPDATE sessions SET title = COALESCE(?, title), model = COALESCE(?, model), last_text = COALESCE(?, last_text), last_seen_at = ?, state = ?, ended_at = CASE WHEN ? = 'ended' AND ended_at IS NULL THEN ? ELSE ended_at END WHERE id = ?").run(first.title, model, lastText, lastSeen, live ? "active" : "ended", live ? "active" : "ended", lastSeen, sid);
+        n += turns.length;
+      }
+      this.db.query("INSERT INTO tails (path, session_id, agent_id, offset) VALUES (?, NULL, NULL, ?) ON CONFLICT(path) DO UPDATE SET offset = excluded.offset").run(path, cursor);
+    }
+    return n;
+  }
   ingestLog(path, agent, parse, cwdHint, titleHint) {
     const off = this.db.query("SELECT offset FROM tails WHERE path = ?").get(path) ?? { offset: 0 };
     const r = this.readFrom(path, off.offset);
@@ -7272,6 +7997,77 @@ ${err}
       expiresAt: r.expires_at
     }));
   }
+  collisions(projectId) {
+    const cutoff = new Date(Date.now() - IDLE_MS).toISOString();
+    const live = this.db.query(`SELECT id, project_id, title, agent, kind FROM sessions
+         WHERE state IN ('active','waiting') AND ended_at IS NULL AND last_seen_at >= ?${projectId ? " AND project_id = ?" : ""}`).all(...projectId ? [cutoff, projectId] : [cutoff]);
+    if (!live.length)
+      return { sessions: [], files: [], contested: 0 };
+    const rows = this.db.query(`SELECT session_id, json_extract(payload,'$.tool') AS tool, json_extract(payload,'$.toolInput.file_path') AS path
+         FROM events WHERE type = 'tool.requested' AND session_id IN (${live.map(() => "?").join(",")})
+           AND json_extract(payload,'$.toolInput.file_path') IS NOT NULL`).all(...live.map((s) => s.id));
+    const g = collisionGraph(rows.map((r) => ({ sessionId: r.session_id, tool: r.tool ?? "", path: r.path ?? "" })));
+    const meta = new Map(live.map((s) => [s.id, s]));
+    return {
+      ...g,
+      sessions: g.sessions.map((s) => {
+        const m = meta.get(s.id);
+        return {
+          ...s,
+          title: m?.title ?? null,
+          agent: m?.agent ?? "claude-code",
+          projectId: m?.project_id ?? null
+        };
+      })
+    };
+  }
+  stalls = new Map;
+  checkStalls() {
+    const live = this.db.query("SELECT id, project_id FROM sessions WHERE state IN ('active','waiting') AND ended_at IS NULL AND last_seen_at >= ?").all(new Date(Date.now() - IDLE_MS).toISOString());
+    const liveIds = new Set(live.map((s) => s.id));
+    for (const id of [...this.stalls.keys()])
+      if (!liveIds.has(id))
+        this.stalls.delete(id);
+    let flagged = 0;
+    for (const s of live) {
+      const rows = this.db.query("SELECT payload FROM events WHERE session_id = ? AND type = 'tool.completed' ORDER BY seq DESC LIMIT 12").all(s.id);
+      const calls = rows.reverse().map((r) => {
+        let p = {};
+        try {
+          p = JSON.parse(r.payload || "{}");
+        } catch {}
+        return {
+          tool: typeof p.tool === "string" ? p.tool : "?",
+          input: JSON.stringify(p.toolInput ?? null),
+          errored: toolResponseErrored(p.toolResponse),
+          ts: ""
+        };
+      });
+      const stall2 = detectStall(calls);
+      if (!stall2) {
+        this.stalls.delete(s.id);
+        continue;
+      }
+      flagged++;
+      const prev = this.stalls.get(s.id);
+      this.stalls.set(s.id, stall2);
+      if (prev?.kind === stall2.kind)
+        continue;
+      this.append({
+        ts: new Date().toISOString(),
+        type: "session.stuck",
+        projectId: s.project_id,
+        sessionId: s.id,
+        payload: {
+          kind: stall2.kind,
+          reason: stall2.reason,
+          summary: `session looks stuck \u2014 ${stall2.reason}`
+        }
+      });
+      this.touch();
+    }
+    return flagged;
+  }
   sweepOrphans() {
     const now = Date.now();
     let n = 0;
@@ -7649,6 +8445,7 @@ ${err}
         lastType: r.last_type,
         lastText: r.last_text ?? null,
         state,
+        stuck: state === "active" || state === "waiting" ? this.stalls.get(r.id)?.reason ?? null : null,
         toolCalls: r.tool_calls,
         subagents: r.subagents,
         turns: r.turns,
@@ -7713,8 +8510,120 @@ ${err}
           fn(p.id, b.status);
       this.touch();
     }
+    for (const b of this.teamBudgets()) {
+      if (b.level === "ok")
+        continue;
+      const mapKey = `team:${b.scope}:${b.key}`;
+      const seen = `${day}:${b.level}`;
+      const affected = b.scope === "project" ? this.projects().filter((p) => this.clusterKeyFor(p.id) === b.key) : this.projects();
+      if (this.budgetNotified.get(mapKey) !== seen) {
+        this.budgetNotified.set(mapKey, seen);
+        const label = b.scope === "org" ? "the org" : `${b.scope} ${b.key}`;
+        this.append({
+          ts: new Date().toISOString(),
+          type: "incident.opened",
+          projectId: affected[0]?.id ?? "p_unknown",
+          sessionId: null,
+          payload: {
+            rule: "budget",
+            action: b.level === "exceeded" ? b.on_exceed : "warn",
+            command: `team ${b.kind ?? ""} budget \xB7 ${label}`,
+            reason: b.level === "exceeded" ? `${label} spent $${b.spent.toFixed(2)} of the $${b.limit} ${b.kind} ceiling set on the team daemon. ${b.on_exceed === "stop" ? "Spawned runs were stopped." : b.on_exceed === "ask" ? "Every Bash/Edit/Write now asks first." : "An admin can raise it via POST /t1/budgets."}` : `${label} is at $${b.spent.toFixed(2)} of the $${b.limit} ${b.kind} ceiling \u2014 approaching the team's limit`
+          }
+        });
+        this.touch();
+      }
+      if (b.level === "exceeded" && b.on_exceed === "stop")
+        for (const p of affected)
+          for (const fn of this.budgetListeners)
+            fn(p.id, {
+              level: "exceeded",
+              kind: b.kind === "daily" ? "daily" : "weekly",
+              spent: b.spent,
+              limit: b.limit,
+              pct: b.limit ? b.spent / b.limit : 1,
+              daily: { spent: b.spent, limit: b.limit, pct: 1 },
+              weekly: { spent: 0, limit: null, pct: 0 }
+            });
+    }
     return out;
   }
+  teamBudgets() {
+    try {
+      return JSON.parse(this.metaValue("team_budget") ?? "[]");
+    } catch {
+      return [];
+    }
+  }
+  backupTo(destDir) {
+    mkdirSync4(destDir, { recursive: true });
+    const files = [];
+    const dbDest = join8(destDir, "swarm.db");
+    if (existsSync6(dbDest))
+      unlinkSync(dbDest);
+    this.db.exec(`VACUUM INTO '${dbDest.replaceAll("'", "''")}'`);
+    files.push("swarm.db");
+    for (const f of [
+      "config.toml",
+      "policy.toml",
+      "policy.sig.json",
+      "token",
+      "pricing.json",
+      "pricing.litellm.json",
+      "team-token"
+    ]) {
+      const src = join8(this.home, f);
+      if (!existsSync6(src))
+        continue;
+      copyFileSync(src, join8(destDir, f));
+      files.push(f);
+    }
+    return { dest: destDir, files };
+  }
+  clusterKeyCache = new Map;
+  clusterKeyFor(projectId) {
+    const hit = this.clusterKeyCache.get(projectId);
+    if (hit)
+      return hit;
+    const root = this.db.query("SELECT root FROM projects WHERE id = ?").get(projectId)?.root;
+    const key = root && clusterProjectKey(originUrl(root)) || `local:${projectId}`;
+    this.clusterKeyCache.set(projectId, key);
+    return key;
+  }
+  taskSpendRollup(day = new Date().toISOString().slice(0, 10)) {
+    return this.db.query(`SELECT s.project_id AS projectId, c.task AS task, SUM(t.cost_usd) AS cost
+         FROM turns t JOIN sessions s ON s.id = t.session_id
+         JOIN claims c ON c.project_id = s.project_id AND c.worktree != '' AND (s.cwd = c.worktree OR s.cwd LIKE c.worktree || '/%')
+         WHERE t.ts >= ? AND t.ts < ? GROUP BY s.project_id, c.task`).all(`${day}T00:00:00.000Z`, `${day}T23:59:59.999Z`);
+  }
+  modelFlagged = new Set;
+  checkModels() {
+    const since = new Date(Date.now() - IDLE_MS).toISOString();
+    const rows = this.db.query("SELECT id, project_id, model FROM sessions WHERE model IS NOT NULL AND model != '' AND state != 'ended' AND last_seen_at > ?").all(since);
+    let n = 0;
+    for (const s of rows) {
+      if (this.modelFlagged.has(s.id))
+        continue;
+      const allow = this.config(s.project_id).models.allow;
+      if (!allow.length || modelAllowed(s.model, allow))
+        continue;
+      this.modelFlagged.add(s.id);
+      n++;
+      this.append({
+        ts: new Date().toISOString(),
+        type: "incident.opened",
+        projectId: s.project_id,
+        sessionId: s.id,
+        payload: {
+          rule: "model_allowlist",
+          action: "observed",
+          command: s.model,
+          reason: `session runs on "${s.model}", outside [models] allow (${allow.join(", ")}) \u2014 nothing was interrupted; spawned runs on this model are refused`
+        }
+      });
+    }
+    return n;
+  }
   spend() {
     const dayStart = new Date;
     dayStart.setHours(0, 0, 0, 0);
@@ -8344,6 +9253,192 @@ function localDayIso(offsetDays) {
   return d.toISOString();
 }
 
+// packages/daemon/src/team.ts
+import { writeFileSync as writeFileSync3 } from "fs";
+import { join as join9 } from "path";
+var SPEND_EVERY_MS = 60000;
+var MAX_BACKOFF_MS = 300000;
+var POLICY_EVERY_MS = 300000;
+
+class TeamForwarder {
+  store;
+  version;
+  lastTry = 0;
+  backoffMs = 0;
+  lastSpend = 0;
+  constructor(store, version) {
+    this.store = store;
+    this.version = version;
+  }
+  projectKey(projectId) {
+    return this.store.clusterKeyFor(projectId);
+  }
+  status() {
+    const team2 = this.store.policyFor(null).config.team;
+    const box = this.store.outboxStatus();
+    return {
+      configured: team2.url != null,
+      url: team2.url,
+      forward: team2.forward,
+      pending: box.pending,
+      oldest: box.oldest,
+      lastAckAt: this.store.metaValue("team_last_ack") ?? null,
+      lastError: this.store.metaValue("team_last_error") ?? null,
+      machine: this.store.machineIdentity(),
+      authed: this.store.metaValue("team_machine_token") != null
+    };
+  }
+  async tick(now = Date.now()) {
+    const team2 = this.store.policyFor(null).config.team;
+    if (!team2.url)
+      return 0;
+    if (now - this.lastTry < team2.interval * 1000 + this.backoffMs)
+      return 0;
+    this.lastTry = now;
+    const records = [];
+    const events = team2.forward.includes("ledger") ? this.store.outboxPending() : [];
+    for (const e of events) {
+      const body = JSON.parse(e.payload);
+      if (typeof body.projectId === "string")
+        body.projectKey = this.projectKey(body.projectId);
+      records.push({ seq: e.seq, kind: e.kind, body });
+    }
+    let spendRows = 0;
+    if (team2.forward.includes("cost") && now - this.lastSpend > SPEND_EVERY_MS) {
+      const day = new Date(now).toISOString().slice(0, 10);
+      for (const r of this.store.spendRollup(day)) {
+        records.push({
+          seq: 0,
+          kind: "spend",
+          body: { day, ...r, projectKey: this.projectKey(r.projectId) }
+        });
+        spendRows++;
+      }
+      for (const r of this.store.taskSpendRollup(day)) {
+        records.push({
+          seq: 0,
+          kind: "spend_task",
+          body: { day, ...r, projectKey: this.projectKey(r.projectId) }
+        });
+        spendRows++;
+      }
+    }
+    const held = this.store.heldClaimsForSync();
+    if (!records.length && !held.length)
+      return 0;
+    const machine = { ...this.store.machineIdentity(), version: this.version };
+    const token = this.store.metaValue("team_machine_token");
+    const headers = {
+      "content-type": "application/json",
+      ...token ? { authorization: `Bearer ${token}` } : {}
+    };
+    const base = this.store.policyFor(null).config.team.url;
+    try {
+      if (records.length) {
+        const req = { machine, records };
+        const res = await fetch(`${base}/t1/ingest`, {
+          method: "POST",
+          headers,
+          body: JSON.stringify(req),
+          signal: AbortSignal.timeout(1e4)
+        });
+        if (!res.ok)
+          throw new Error(`ingest ${res.status}`);
+        const reply = await res.json();
+        if (reply.ack > 0)
+          this.store.outboxAck(reply.ack);
+        if (spendRows)
+          this.lastSpend = now;
+      }
+      if (held.length) {
+        const claims = held.map((c) => ({
+          projectKey: this.projectKey(c.projectId),
+          task: c.task,
+          acquiredAt: c.acquiredAt,
+          expiresAt: c.expiresAt,
+          actor: c.actorKind && c.actorId ? { kind: c.actorKind, id: c.actorId } : undefined
+        }));
+        const res = await fetch(`${base}/t1/claims`, {
+          method: "POST",
+          headers,
+          body: JSON.stringify({ machine, claims }),
+          signal: AbortSignal.timeout(1e4)
+        });
+        if (!res.ok)
+          throw new Error(`claims ${res.status}`);
+        const reply = await res.json();
+        for (const r of reply.results) {
+          const local = held.find((c) => c.task === r.task && this.projectKey(c.projectId) === r.projectKey);
+          if (!local)
+            continue;
+          if (r.status === "ok") {
+            if (local.teamState !== "registered")
+              this.store.markClaimTeamState(local.projectId, local.task, "registered");
+          } else
+            this.store.revokeClaimConflict(local.projectId, local.task, r.holder);
+        }
+      }
+      try {
+        const res = await fetch(`${base}/t1/budget`, {
+          headers,
+          signal: AbortSignal.timeout(1e4)
+        });
+        if (res.ok) {
+          const { budgets } = await res.json();
+          this.store.setMetaValue("team_budget", JSON.stringify(budgets ?? []));
+        }
+      } catch {}
+      this.backoffMs = 0;
+      this.store.setMetaValue("team_last_ack", new Date(now).toISOString());
+      this.store.setMetaValue("team_last_error", "");
+      await this.syncPolicy(base, headers, now);
+      return records.length + held.length;
+    } catch (e) {
+      this.backoffMs = Math.min(this.backoffMs ? this.backoffMs * 2 : 5000, MAX_BACKOFF_MS);
+      this.store.setMetaValue("team_last_error", e.message);
+      return 0;
+    }
+  }
+  lastPolicy = 0;
+  async syncPolicy(base, headers, now) {
+    if (now - this.lastPolicy < POLICY_EVERY_MS)
+      return;
+    this.lastPolicy = now;
+    try {
+      const res = await fetch(`${base}/t1/policy`, {
+        headers,
+        signal: AbortSignal.timeout(1e4)
+      });
+      if (!res.ok)
+        return;
+      const { policy: policy2 } = await res.json();
+      if (!policy2)
+        return;
+      let pinned = this.store.metaValue("team_policy_pubkey");
+      if (!pinned) {
+        pinned = policy2.publicKey;
+        this.store.setMetaValue("team_policy_pubkey", pinned);
+      }
+      if (!verifyPolicySignature(policy2.toml, policy2.signature, pinned)) {
+        this.store.setMetaValue("team_last_error", "org policy signature invalid \u2014 not installed");
+        return;
+      }
+      const file = join9(this.store.home, "policy.toml");
+      const prev = this.store.metaValue("team_policy_sig");
+      if (prev === policy2.signature)
+        return;
+      writeFileSync3(file, policy2.toml, { mode: 384 });
+      writeFileSync3(join9(this.store.home, "policy.sig.json"), JSON.stringify({
+        signature: policy2.signature,
+        publicKey: pinned,
+        fetchedAt: new Date(now).toISOString(),
+        url: base
+      }), { mode: 384 });
+      this.store.setMetaValue("team_policy_sig", policy2.signature);
+    } catch {}
+  }
+}
+
 // packages/daemon/src/workflow.ts
 class WorkflowEngine {
   store;
@@ -8535,13 +9630,13 @@ class WorkflowEngine {
 }
 
 // packages/daemon/src/app.ts
-var VERSION = "0.9.0";
+var VERSION = "0.10.0";
 var WEB_DIR = (() => {
   if (process.env.SWARM_WEB_DIR)
     return process.env.SWARM_WEB_DIR;
   const here = dirname4(fileURLToPath2(import.meta.url));
-  const dev = join9(here, "../../web/public");
-  return existsSync7(join9(dev, "index.html")) ? dev : join9(here, "../web");
+  const dev = join10(here, "../../web/public");
+  return existsSync7(join10(dev, "index.html")) ? dev : join10(here, "../web");
 })();
 var REPLAY_TAIL = 200;
 var wireCache = new WeakMap;
@@ -8559,7 +9654,7 @@ function hookRepoRoot(store, raw2) {
 }
 function claudeSettings() {
   try {
-    const p = process.env.CLAUDE_SETTINGS ?? join9(homedir4(), ".claude", "settings.json");
+    const p = process.env.CLAUDE_SETTINGS ?? join10(homedir4(), ".claude", "settings.json");
     return existsSync7(p) ? JSON.parse(readFileSync4(p, "utf8")) : null;
   } catch {
     return null;
@@ -8570,7 +9665,7 @@ function diskVersion() {
     const entry = daemonCommand().at(-1);
     if (!entry || !existsSync7(entry))
       return null;
-    for (const f of [entry, join9(dirname4(entry), "app.ts")]) {
+    for (const f of [entry, join10(dirname4(entry), "app.ts")]) {
       if (!existsSync7(f))
         continue;
       const m = /SWARM_VERSION\s*\?\?\s*"(\d+\.\d+\.\d+)"/.exec(readFileSync4(f, "utf8"));
@@ -8588,6 +9683,7 @@ function createApp(store = new Store, hooks2 = {}) {
   const runner = new Runner(store, store.home);
   const dispatcher = new Dispatcher(store, runner, forge2);
   const workflows2 = new WorkflowEngine(store, runner, forge2);
+  const team2 = new TeamForwarder(store, VERSION);
   store.onBudgetStop((projectId) => {
     dispatcher.clear(projectId);
     for (const run2 of runner.list(projectId))
@@ -8650,7 +9746,7 @@ function createApp(store = new Store, hooks2 = {}) {
       dir = homedir4();
     }
     try {
-      const entries = readdirSync2(dir, { withFileTypes: true }).filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => ({ name: e.name, repo: existsSync7(join9(dir, e.name, ".git")) })).sort((a, b) => a.name.localeCompare(b.name));
+      const entries = readdirSync2(dir, { withFileTypes: true }).filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => ({ name: e.name, repo: existsSync7(join10(dir, e.name, ".git")) })).sort((a, b) => a.name.localeCompare(b.name));
       const parent = dirname4(dir);
       return c.json({ path: dir, parent: parent === dir ? null : parent, entries });
     } catch (e) {
@@ -8659,10 +9755,44 @@ function createApp(store = new Store, hooks2 = {}) {
   });
   app.get("/v1/state", (c) => c.json(store.snapshot()));
   app.get("/v1/stats", (c) => c.json(store.stats(c.req.query("project") || undefined)));
+  app.get("/v1/graphs/collisions", (c) => c.json(store.collisions(c.req.query("project") || undefined)));
   app.get("/v1/incidents", (c) => c.json(store.incidents(Number(c.req.query("limit") ?? 50), {
     open: c.req.query("open") === "1",
     projectId: c.req.query("project") || undefined
   })));
+  app.get("/v1/outcomes", async (c) => {
+    const project = c.req.query("project") || undefined;
+    const sessions = store.snapshot().sessions.filter((s) => !project || s.projectId === project).map((s) => ({
+      id: s.id,
+      branch: s.branch,
+      model: s.model,
+      agent: s.agent,
+      costUsd: s.costUsd,
+      startedAt: s.startedAt
+    }));
+    const prs = [];
+    const reverted = new Set;
+    for (const p of store.projects().filter((x) => !project || x.id === project)) {
+      const o = await forge2.merged(p.id, p.root);
+      for (const m of o.merged)
+        prs.push({ ...m, state: "merged" });
+      for (const sha of o.reverted)
+        reverted.add(sha);
+    }
+    for (const pr of forge2.prs())
+      if (!project || pr.projectId === project)
+        prs.push({
+          branch: pr.branch,
+          number: pr.number,
+          state: "open",
+          title: pr.title,
+          url: pr.url,
+          createdAt: pr.createdAt,
+          mergedAt: null,
+          mergeSha: null
+        });
+    return c.json(outcomeReport(sessions, prs, reverted));
+  });
   app.get("/v1/memory", (c) => {
     const q = c.req.query("q") ?? "";
     const kind = c.req.query("kind");
@@ -8676,6 +9806,26 @@ function createApp(store = new Store, hooks2 = {}) {
       })
     });
   });
+  app.post("/v1/backup", async (c) => {
+    const b = await c.req.json().catch(() => ({}));
+    if (typeof b.dest !== "string" || !b.dest.startsWith("/"))
+      return c.json({ error: "dest must be an absolute path" }, 400);
+    try {
+      return c.json(store.backupTo(b.dest));
+    } catch (e) {
+      return c.json({ error: e.message }, 500);
+    }
+  });
+  app.get("/v1/team", (c) => c.json(team2.status()));
+  app.post("/v1/team/credentials", async (c) => {
+    const b = await c.req.json().catch(() => ({}));
+    if (typeof b.token !== "string" || !b.token)
+      return c.json({ error: "token required" }, 400);
+    store.setMetaValue("team_machine_token", b.token);
+    if (typeof b.policyPublicKey === "string" && b.policyPublicKey)
+      store.setMetaValue("team_policy_pubkey", b.policyPublicKey);
+    return c.json({ ok: true, machine: store.machineIdentity() });
+  });
   app.get("/v1/policy", (c) => {
     const id = c.req.query("project");
     const p = id ? store.project(id) : null;
@@ -9227,18 +10377,18 @@ function createApp(store = new Store, hooks2 = {}) {
       });
     });
   });
-  app.get("/", (c) => c.html(readFileSync4(join9(WEB_DIR, "index.html"), "utf8")));
+  app.get("/", (c) => c.html(readFileSync4(join10(WEB_DIR, "index.html"), "utf8")));
   const MIME = { js: "text/javascript", css: "text/css" };
   app.get("/:file{[a-z0-9-]+\\.(js|css)}", (c) => {
     const f = c.req.param("file");
-    const p = join9(WEB_DIR, f);
+    const p = join10(WEB_DIR, f);
     if (!existsSync7(p))
       return c.text(`${f} not built \u2014 run: bun run build:web`, 404);
     return c.body(readFileSync4(p, "utf8"), 200, {
       "content-type": MIME[f.split(".").pop() ?? ""] ?? "text/plain"
     });
   });
-  return { app, store, forge: forge2, runner, dispatcher, workflows: workflows2 };
+  return { app, store, forge: forge2, runner, dispatcher, workflows: workflows2, team: team2 };
 }
 
 // packages/daemon/src/demo.ts
@@ -9330,7 +10480,7 @@ function seedDemo(store) {
 // packages/daemon/src/bin.ts
 var DEFAULT_PORT2 = process.env.SWARM_PORT ? DEFAULT_PORT : loadConfig().daemon.port;
 var appHooks = {};
-var { app, store, runner } = createApp(new Store, appHooks);
+var { app, store, runner, team: team2 } = createApp(new Store, appHooks);
 if (process.env.SWARM_DEMO === "1" && isEmpty(store))
   seedDemo(store);
 function serve() {
@@ -9378,6 +10528,8 @@ if (!DEMO) {
   store.tailCodex(backfillMs);
   store.tailGrok(backfillMs);
   store.tailGemini(backfillMs);
+  store.tailAider(backfillMs);
+  store.tailOpencode(backfillMs);
 }
 var tick = 0;
 var tailer = setInterval(() => {
@@ -9388,6 +10540,8 @@ var tailer = setInterval(() => {
     store.tailCodex();
     store.tailGrok();
     store.tailGemini();
+    store.tailAider();
+    store.tailOpencode();
   }
   store.reapResources();
   store.reapProcesses();
@@ -9395,6 +10549,11 @@ var tailer = setInterval(() => {
     store.sweepOrphans();
   if (tick % 6 === 0)
     store.checkBudgets();
+  if (tick % 12 === 0)
+    store.checkModels();
+  if (tick % 2 === 0)
+    store.checkStalls();
+  team2.tick();
 }, 5000);
 store.refreshAllWorktrees();
 var wtRefresh = setInterval(() => void store.refreshAllWorktrees(), 15000);