Lab #4447: repo upgrade: drop stale Claude audit hooks when claude leaves the tool set

What

swamp repo upgrade --tool codex (any de-enrolment of claude) removes claude from the tool list but leaves the two swamp audit record --from-hook hooks in .claude/settings.local.json. swamp audit --json then reports supported: false for the new tool set, so the hooks record nothing while still spawning the swamp binary on every Bash call (~475 ms / ~207 MiB measured on 20261103; ~0.4 s in #2881).

Upgrade output:

Tools: [claude] -> [codex]
claude was dropped from the enrolled tool list. Files in .claude/ were not
deleted - remove them by hand if desired.
Settings: unchanged

The generic .claude/ warning is too broad to be the only signal: these hooks are a swamp-generated entry in a swamp-managed settings file, not user content.

Repro (swamp 20261022.143020.0-sha.4569663b, Linux)

TMP=$(mktemp -d) && cd "$TMP" && git init -q -b main
swamp repo init --tool claude
jq -c '.hooks|keys' .claude/settings.local.json
# ["PostToolUse","PostToolUseFailure"]

swamp repo upgrade --tool codex
jq -c '.hooks|keys' .claude/settings.local.json
# ["PostToolUse","PostToolUseFailure"]   (still both)

swamp audit --json
# { "supported": false, "tool": "codex", ... }

swamp doctor audit
# recording-smoke-test: tool `codex` does not have audit hooks; nothing to check
# skips, so the stale claude hooks are invisible to the doctor

Expected

When claude leaves the tool set, remove the hooks whose command contains swamp audit record --from-hook from .claude/settings.local.json, preserving permissions.allow and every non-swamp hook.

If automatic removal is deliberately out of scope, then at minimum:

Make the upgrade warning name the exact hooks that are now inert, not just "files in .claude/".
Make swamp doctor audit notice hooks wired for a tool that is no longer enrolled (today it only looks at the current tool and skips).

#2881 (shipped): the same settings reconciler in the opposite direction, where upgrade appends a second canonical hook alongside an existing variant.
#4410 (open): direct classification of legitimate non-swamp commands. A different problem, but the same per-call cost.
maphew/swamp-beads-starter#1: measured hook cost and candidate fixes.

Please credit maphew as co-author if this becomes a patch.

swamp data get and data versions report Behavior not found for data whose behavior definition was deleted

Workflow-scoped data get reports the behavior id as modelName once the behavior definition is deleted

Terminal report renderer prints HTML entities in table cells: a ' in a header shows as &#39;

Slackwater: let customers build integrations that drive workflows securely and auditably

Container run inspection and isolation metadata for audited recovery tests

GCP codegen: generate media upload/download from Discovery mediaUpload and supportsMediaDownload

Docs: Claude audit hook covers PowerShell, swamp audit install --user, and doctor audit hook warnings

repo upgrade: drop stale Claude audit hooks when claude leaves the tool set

@swamp/video: small follow-ups from joining takes

swamp-lib: workflowRunStream drops a refusal and ends as if nothing went wrong

@swamp/video: rendering an edit list that keeps nothing fails with 'sumExpr needs at least one term'

@swamp/video: describe and chapters for a joined video

@swamp/video: splice a take into another at a point in edit.txt

swamp serve: apply config changes without failed requests (full reload, vault-backed webhook secrets, harmless restarts)

swamp-lib: workflowRun never settles when a run suspends at an approval gate

Cloudflare codegen: a oneOf/anyOf inside a multi-member allOf is dropped

stagecraft: low findings from the optional-inject verification (held-by attribution, dispatch timing, test helper)

stagecraft tracker: tidy up external relations (duplicate entries, id case, second lookup)

SWAMP_SERVER_TOKEN does not authenticate with --server, while --token and SWAMP_SERVER_TOKEN_FILE do

stagecraft validate: product-missing-on-path misses a required inject that one exit of its producing stage doesn't record

Cloudflare codegen: a self-referencing request body overflows the stack in normalizeProperty

Scheduled flaky-test detection is failing

Terminal title should be conversation summary

Docs: usage-telemetry reference should describe the telemetry stats empty state and the last-flush record

run doctor --fix --server cannot settle damaged runs left by a crashed serve after restart

@swamp/issue-lifecycle: collapse the verification_passed, post_attestation, link_pr sequence

@swamp/issue-lifecycle: one-call verification

audit: register legitimate non-swamp commands as approved bypasses

Docs: what serve instances must not share, flat AWS Secrets Manager names, and where OAuth values are stored

Let a serve:* collective key look up usernames, so a recreated swamp serve does not need oauth:manage at runtime

aws-sm vault: optional secret_prefix to scope secrets within an AWS account and region

swamp skill: add a workspace guide and routing-table entry

serve: a capability probe answered by a follower does not speak for the leader that handles the forwarded request

serve OAuth client reuse: remaining review findings from swamp-club#4264

Agents.md: consider not using H1 'Project' inside managed block

serve: the cron-fire dedup claim has no deadline, so a hung control plane stalls every scheduled fire

serve: define what swamp serve does when its OAuth client is deleted at swamp-club

Docs: schedule catch-up and missed-fire tracking for scheduled workflows

Work-item commands run from the wrong repo report the work item as not started

Docs: step concurrency caps only that step's forEach iterations, not its whole dependency level

Package everything on ops.swamp-club.com; stop direct server edits

Shorten swamp serve's token session re-check so revocation takes effect sooner

cfgmgmt firewall (ufw): an input for rule position (insert before/after)

agent-sessions: lockfile test helper silently depends on the captured @swamp/git key

agent-sessions: low-severity edge cases from the Codex importer reviews (#4158)

Team mode manual pages: swamp-serve and remote-execution for leader/follower, member checkouts, offline work, run control and known limits

Agent session record: four questions from the Codex importer (#4158)

@swamp/video: upload workflow to publish a take to YouTube (video, description, chapters, captions, thumbnail)

@swamp/video/brand: customizable outro card (next steps, headline, per-video CTA)

data prune through serve deletes data of an auto-definition whose declared type is invalid

Relationships

#4447 repo upgrade: drop stale Claude audit hooks when claude leaves the tool set

What

Repro (swamp 20261022.143020.0-sha.4569663b, Linux)

Expected

Related

Open

Terminal report renderer prints HTML entities in table cells: a ' in a header shows as '