SAID Protocol + wallet adapter + wallet workspace rebuild + full design-system migration

CHANGELOG.md

@@ -4,6 +4,35 @@ All notable changes to DAEMON are documented here. The format is based on
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project
 follows semantic-ish desktop release versioning.
 
+## [4.2.0] - 2026-06-05
+
+### Added
+- **Operator console** — the right-panel AI (ARIA) is now a full daemon operator. It drives
+  DAEMON from natural language via a registry-driven tool catalog (`electron/services/aria/tools/`)
+  spanning navigation, settings, wallet, Clawpump, AgentStation, token launches, Flywheel, and git.
+  Sensitive on-chain actions require typed confirmation and carry a `[MAINNET]` guard; the operator
+  never pushes to git autonomously.
+- **Per-project chat sessions** in the console — new chat (non-destructive), switch, rename, archive,
+  delete, with auto-titling and memory that rehydrates from the DB on restart (`aria_sessions`,
+  schema V47). Replaces the old single-thread console.
+- **Parallel agent swarms** — launch N tasks in parallel, each in its own isolated git worktree +
+  branch driven by a headless Claude agent (`WorktreeService` + `SwarmOrchestrator`, schema V48;
+  `swarm_runs`/`swarm_lanes`). Concurrency-capped, auto-cleaned worktrees, per-lane `RESULTS.md`,
+  and a Swarms tab in the workbench. Lanes never push — merging stays a manual step.
+- Git worktree IPC (`git:worktree-add|list|remove|prune`) and swarm IPC (`swarm:*`).
+- Composer `+` opens a context picker menu (toggle active file / project tree / git diff / terminal
+  logs / wallet) instead of cycling chips.
+
+### Changed
+- Broader UX/design-system polish pass across panels (settings, wallet, integrations, launches,
+  AgentStation, and more) and the in-flight Synapse SAP integration.
+- Right panel min-width raised so the operator console header/sessions never clip.
+- Schema advanced to V49 (`projects.pinned`/`branch`).
+
+### Docs
+- Documented the operator console, sessions, and swarms in the README, agent-context files
+  (`CLAUDE.md`/`AGENTS.md`), and the landing docs (new `operator-console.md`).
+
 ## [4.1.2] - 2026-06-01
 
 ### Fixed

README.md

@@ -99,6 +99,10 @@ Requires **Node.js 22+** and **pnpm 9+**.
 
 **Agent Launcher** — Spawn Claude Code agents with custom system prompts, model selection, and per-project MCP configurations. Agents run as real CLI sessions in dedicated terminal tabs.
 
+**Operator Console** — The right-panel AI operator drives the whole IDE from natural language. Per-project chat sessions (new / switch / rename / archive / delete) with memory that survives restarts. It can run DAEMON itself — create an agent wallet for the codebase, spin up a Clawpump agent, preflight and launch a token, configure the Flywheel, commit changes — through a tool catalog with typed confirmation for sensitive on-chain actions (and a `[MAINNET]` guard). It never pushes to git autonomously.
+
+**Agent Swarms** — From the operator, launch several tasks to run in parallel, each in its own isolated git worktree and branch, driven by a separate Claude agent. The Swarms tab shows live run/lane status; each lane writes a `RESULTS.md`. Concurrency is capped and worktrees are cleaned up automatically — merging stays a manual, reviewed step.
+
 **MCP Management** — Toggle project-level and global MCP servers from the sidebar. Changes write directly to `.claude/settings.json` and `.mcp.json` with a restart indicator when configs change.
 
 **Git** — Branch switching, per-file and folder-level staging, commit, push, stash save/pop, branch creation, and tag management.

RESULTS.md

@@ -0,0 +1,101 @@
+# Settings UX Lane — Results
+
+Polish pass on the settings lane (SettingsPanel + EnvManager). Goal was a calm,
+scannable, trustworthy surface for dense forms, toggles, and key-management flows.
+
+## Files changed (all in-lane)
+
+| File | What changed |
+| --- | --- |
+| `src/panels/SettingsPanel/SettingsPanel.tsx` | Keys/Integrations/Providers/Tools/Setup/Crashes UX; added `SecretInput` + `middleEllipsis` helpers; confirmation-gated destructive actions |
+| `src/panels/SettingsPanel/SettingsPanel.css` | Secret-field + reveal styles, `quiet-danger` button, integration key→value row fix, provider status-card auth alignment, Keys list spacing |
+| `src/panels/EnvManager/EnvManager.tsx` | Unified DEV/PROD reveal to click-to-reveal (removed hover-reveal of secrets) |
+| `src/panels/EnvManager/EnvManager.css` | Compact stat cards (killed the tall empty wells), tightened stats row |
+
+## Review method
+
+Launched the real app (this worktree's renderer on Vite `:7777`, Electron in smoke
+mode on CDP `:9223` to coexist with the sibling `ux-wallet` instance that owns the
+default `:9222`) and drove it via the `electron-test` MCP. Collapsed terminal/right
+panel/sidebar to review each settings surface at full height. Screenshotted every
+tab before and after each change — did not edit CSS blind.
+
+## Visual changes
+
+### Keys tab (security-sensitive)
+- **Before:** no grouping eyebrows; tall sparse rows; a bare `...347b` fingerprint
+  floating mid-row; long key names overflowing; **`Remove` rendered loud red and
+  deleted immediately with no confirmation**; plaintext-capable value field with no
+  reveal control.
+- **After:** `STORED KEYS` / `ADD A KEY` eyebrows; each row shows a green "set" status
+  dot + middle-ellipsised key name + right-aligned `ends ·347b` value fingerprint;
+  `Remove` is now a **quiet secondary** (muted until hover/focus) and **confirmation-
+  gated** via the shared `confirm()` dialog; the add-value field is a masked
+  `SecretInput` with an explicit **Show/Hide** reveal-on-intent toggle; a transient
+  "Saved …" confirmation replaces the helper line after a successful add.
+
+### Integrations tab
+- **Before:** Status / CLI Path / Voight rows had the name set to `flex:1`, stranding
+  every value against the far-right edge with a large dead gap — read as disconnected;
+  two different row systems (`integration-row` vs `display-row`) stacked together;
+  password fields with no reveal; long CLI path with no ellipsis; loud red `Remove`.
+- **After:** rows are tight **key→value pairs** (fixed-width name, value sits directly
+  after it); hairline dividers give consistent rhythm; CLI path uses middle-ellipsis
+  with full value on hover/title; API-key and Voight-key fields are masked
+  `SecretInput`s with reveal toggles; `Remove` demoted to `quiet-danger`; MCP rows pin
+  the toggle to the right with the `project` source label beside it.
+
+### Providers tab
+- **Before:** three pref groups separated by dividers only (no titles); status cards
+  had a name→authMode gap.
+- **After:** added `CONNECTIONS` / `ARIA` / `DAEMON AI` / `DEFAULTS` section eyebrows so
+  the groups are named, not just implied; status-card authMode is muted mono,
+  right-aligned.
+
+### Tools tab
+- Removed a redundant stacked description + divider before `WORKSPACE PROFILE`.
+
+### Setup / Crashes tabs
+- `Reset UI Layout` is now `quiet-danger` **and confirmation-gated** (was loud red,
+  fired immediately). `Clear History` demoted to `quiet-danger`.
+
+### EnvManager
+- **Before:** the three stat cards (`LOCAL KEYS` / `PRODUCTION KEYS` / `SYNCED`) used the
+  shared `Stat` module's `88px` min-height + `fs-28` stacked value, leaving a tall
+  empty well under a tiny number (~120px tall cards). **DEV revealed on click but PROD
+  revealed on hover** — a secret echoing on every cursor pass, the exact anti-pattern
+  to avoid.
+- **After:** stat cards are compact single-line `LABEL … value` rows (~37px, ~80px of
+  vertical space reclaimed). **DEV and PROD now share one safe model: single-click
+  reveals/hides, double-click edits, never reveal on hover.** Both masked by default.
+
+## Design-system compliance
+- Spacing snapped to the 4/8/12/16 scale on touched rows; no off-scale values added.
+- Tokens only — `pnpm run lint:styles` passes (no new literal font-sizes, hex colors,
+  radii, or inline shadows; all within baseline budgets).
+- Status via 5px colored dots, no emoji in chrome. Green reserved for set/healthy/saved.
+- Secret fields masked-by-default with obvious, safe reveal affordances.
+
+## Deferred / shared-file notes
+- **No backend changes were required.** All fixes were renderer-only and stayed inside
+  the two panel subtrees. The `confirm()` store and `Dot` component were used as
+  read-only existing APIs (no edits).
+- The EnvManager expanded per-project drill-down still shows full plaintext values; it
+  sits behind an explicit expand click and was left as an intentional reveal context.
+  Flagging it here as a candidate for a future masked treatment if desired.
+
+## Gate loop status
+- `pnpm run typecheck` — ✅ pass (clean)
+- `pnpm run test` — ⚠️ 784/785 pass. The single failure is
+  `test/services/SeekerRelayService.test.ts` (mobile relay session-auth, returns 404
+  instead of 200). **Pre-existing on branch HEAD and unrelated to this lane** —
+  verified by stashing the four panel changes and reproducing the identical failure.
+  `SeekerRelayService` is outside the settings lane and was not touched.
+- `pnpm run build` — ✅ pass (renderer + electron main + preload)
+- `pnpm run lint:styles` — ✅ pass
+
+## Screenshots
+Captured inline in the working session (before/after for Keys, Integrations, Providers,
+Display, Tools, Panels, and EnvManager). After-state PNGs were also written to the
+system temp dir during review (`keys_after.png`, `env_after.png`); no screenshot files
+were committed into the lane subtree to avoid touching out-of-lane paths.

build/Daemon.icon/icon.json

@@ -0,0 +1,34 @@
+{
+  "fill" : {
+    "solid" : "srgb:0.070588,0.078431,0.078431,1.000000"
+  },
+  "groups" : [
+    {
+      "layers" : [
+        {
+          "image-name" : "mark.svg",
+          "name" : "Mark",
+          "position" : {
+            "scale" : 1,
+            "translation-in-points" : [ 0, 0 ]
+          }
+        }
+      ],
+      "shadow" : {
+        "kind" : "neutral",
+        "opacity" : 0.5
+      },
+      "specular" : true,
+      "translucency" : {
+        "enabled" : false,
+        "value" : 0.5
+      }
+    }
+  ],
+  "supported-platforms" : {
+    "circles" : [
+      "watchOS"
+    ],
+    "squares" : "shared"
+  }
+}

build/icon-src/HANDOFF.md

@@ -0,0 +1,48 @@
+# DAEMON macOS app icon — Liquid Glass handoff
+
+**Scope: macOS only.** This sets up the new macOS 26 Tahoe "Liquid Glass" icon.
+**Windows is intentionally unchanged** — it keeps the existing `resources/icon.ico`
+(`win.icon` in `electron-builder.json` was not touched). Linux is out of scope here.
+
+Two small code changes are included (already on the branch — listed at the bottom).
+
+## The source of truth (vectors)
+- `build/icon-src/mark.svg`      — white logo mark only, transparent, 1024 canvas.
+                                    This is the Liquid Glass **foreground** layer.
+- `build/icon-src/icon-full.svg` — full composed icon (squircle + #121414 bg + mark),
+                                    used only to rasterize the legacy .icns.
+- `build/icon-src/generate.sh`   — regenerates the macOS assets below from the two
+                                    SVGs and re-validates the .icon. Requires librsvg
+                                    (`brew install librsvg`) + macOS 26 / Xcode 26.
+
+## The Liquid Glass icon (the important new bit)
+- `build/Daemon.icon/`           — Icon Composer document.
+    - `icon.json`                — dark #121414 background fill + the mark as a
+                                   glass layer (specular highlight + neutral shadow).
+                                   The system applies the squircle mask, glass, and
+                                   shadow at render time — they are NOT baked in.
+    - `Assets/mark.svg`          — the foreground layer art.
+
+## How it ships (macOS)
+`electron-builder.json` → `mac.icon: "build/Daemon.icon"`.
+electron-builder 26.8.1 compiles the .icon with `actool` into an `Assets.car`
++ `CFBundleIconName`, and auto-derives an `.icns` fallback.
+
+REQUIREMENT: the machine that *packages the macOS app* must run **macOS 26 + Xcode 26**
+(actool ≥ 26). Otherwise the .icon compile step fails. CI runners need this too.
+
+## macOS fallbacks (regenerated, same artwork)
+- `build/icon.icns`              — full multi-res icns (pre-Tahoe macOS).
+- `public/daemon-icon.png` (+ `-48`) — dev-mode dock/window icon (unpackaged Electron).
+
+## Code changes (for review)
+1. `electron-builder.json` — added `"icon": "build/Daemon.icon"` under `mac` only.
+2. `electron/main/index.ts` — the runtime `app.dock.setIcon(daemon-icon.png)` call
+   is now gated to `!app.isPackaged`. In a packaged build we must NOT override the
+   dock icon, otherwise the flat PNG replaces the system Liquid Glass icon.
+
+## Verifying
+- Dev (`pnpm dev`): dock shows the new dark-squircle PNG (NOT the glass effect —
+  that's expected; Liquid Glass only renders for a packaged/signed .app).
+- Real glass: build a bundle (`pnpm package`, or `electron-builder --mac dir` for an
+  unsigned quick check) and look at the .app in Finder / the dock on Tahoe.

build/icon-src/generate.sh

@@ -0,0 +1,51 @@
+#!/usr/bin/env bash
+# Regenerate every app-icon asset from the two vector sources in this folder:
+#   mark.svg        - white logo mark only, transparent, full 1024 canvas
+#                     (the Liquid Glass FOREGROUND layer; system adds mask/glass/shadow)
+#   icon-full.svg   - full composed icon: squircle + #121414 background + mark
+#                     (used to rasterize the legacy .icns / PNG fallbacks)
+#
+# The Liquid Glass icon itself lives in ../Daemon.icon (icon.json + Assets/mark.svg).
+# electron-builder (>=26, macOS 26 + Xcode 26) compiles ../Daemon.icon via actool into
+# an Assets.car + CFBundleIconName, and derives an .icns automatically. The assets below
+# are the cross-platform / pre-Tahoe / dev-dock fallbacks.
+#
+# Requires: rsvg-convert (librsvg), sips + iconutil (macOS).
+set -euo pipefail
+cd "$(dirname "$0")"
+ROOT="../.."
+
+rsvg-convert -w 1024 -h 1024 icon-full.svg -o full-1024.png
+
+IS=daemon.iconset
+rm -rf "$IS"; mkdir -p "$IS"
+g(){ sips -Z "$1" full-1024.png --out "$IS/$2" >/dev/null; }
+g 16 icon_16x16.png;    g 32 icon_16x16@2x.png
+g 32 icon_32x32.png;    g 64 icon_32x32@2x.png
+g 128 icon_128x128.png; g 256 icon_128x128@2x.png
+g 256 icon_256x256.png; g 512 icon_256x256@2x.png
+g 512 icon_512x512.png; cp full-1024.png "$IS/icon_512x512@2x.png"
+iconutil -c icns "$IS" -o icon-new.icns
+
+# Deploy
+cp icon-new.icns "$ROOT/build/icon.icns"
+cp full-1024.png "$ROOT/build/icons/1024x1024.png"
+sips -Z 512  full-1024.png --out "$ROOT/build/icon.png"           >/dev/null
+sips -Z 1024 full-1024.png --out "$ROOT/public/daemon-icon.png"   >/dev/null
+sips -Z 48   full-1024.png --out "$ROOT/public/daemon-icon-48.png">/dev/null
+sips -Z 512  full-1024.png --out "$ROOT/resources/icon.png"       >/dev/null
+for sz in 512 256 128 64 48 32 24 16; do
+  sips -Z "$sz" full-1024.png --out "$ROOT/build/icons/${sz}x${sz}.png" >/dev/null
+done
+
+# Validate the Liquid Glass bundle compiles (same call electron-builder makes)
+TMP=$(mktemp -d); cp -R "$ROOT/build/Daemon.icon" "$TMP/Icon.icon"; mkdir -p "$TMP/out"
+actool "$TMP/Icon.icon" --compile "$TMP/out" --output-format human-readable-text \
+  --notices --warnings --output-partial-info-plist "$TMP/out/p.plist" \
+  --app-icon Icon --include-all-app-icons --accent-color AccentColor \
+  --enable-on-demand-resources NO --development-region en \
+  --target-device mac --minimum-deployment-target 26.0 --platform macosx
+rm -rf "$TMP"
+
+rm -rf "$IS" full-1024.png icon-new.icns
+echo "Icons regenerated."

electron-builder.json

@@ -24,6 +24,7 @@
     }
   ],
   "mac": {
+    "icon": "build/Daemon.icon",
     "target": ["dmg", "zip"],
     "category": "public.app-category.developer-tools",
     "artifactName": "${productName}-${arch}.${ext}",