@naparnik/mcp 0.10.47 → 0.10.50

package/dist/{chunk-PT34EZZ7.js → chunk-DH5ID6CT.js}

@@ -1,12 +1,13 @@
+import { createHash, randomUUID, randomBytes } from 'crypto';
+import { existsSync, readFileSync, closeSync, mkdirSync, openSync, rmSync, renameSync, readdirSync, statSync, writeFileSync, symlinkSync, chmodSync, lstatSync, realpathSync, mkdtempSync, linkSync, readlinkSync, appendFileSync, fstatSync, readSync, fsyncSync } from 'fs';
+import { win32, join, dirname, sep, resolve, basename, relative, isAbsolute, extname } from 'path';
+import { gunzipSync } from 'zlib';
 import { execFile, spawn, execFileSync } from 'child_process';
-import { createHash, randomBytes, randomUUID } from 'crypto';
-import { existsSync, readFileSync, closeSync, mkdirSync, openSync, readdirSync, statSync, rmSync, writeFileSync, renameSync, symlinkSync, chmodSync, lstatSync, realpathSync, mkdtempSync, linkSync, readlinkSync, appendFileSync, fstatSync, readSync, fsyncSync } from 'fs';
 import { platform, homedir, arch, release, userInfo, tmpdir } from 'os';
-import { win32, join, dirname, sep, resolve, basename, relative, isAbsolute, extname } from 'path';
 import { promisify } from 'util';
 import { AsyncLocalStorage } from 'async_hooks';
-import { gunzipSync } from 'zlib';
 import { pathToFileURL, fileURLToPath } from 'url';
+import { Worker } from 'worker_threads';
 import { readFile } from 'fs/promises';
 
 var __defProp = Object.defineProperty;
@@ -729,9 +730,9 @@ function parsePositiveInt(raw, fallback) {
 }
 
 // src/version.ts
-var VERSION = "0.10.47";
+var VERSION = "0.10.50";
 var USER_AGENT = `naparnik-mcp/${VERSION}`;
-var MIN_ENGINE = "2026.09.24-466";
+var MIN_ENGINE = "2026.09.24-478";
 var LAUNCHER_PROTOCOL = 1;
 
 // src/contracts/sdk-headers.ts
@@ -1000,6 +1001,258 @@ function describe(err) {
 function sleep(ms) {
   return new Promise((resolve5) => setTimeout(resolve5, ms));
 }
+var DeliveryError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "DeliveryTrouble";
+  }
+};
+async function downloadFile(opts) {
+  const { url: url2, dest, sha256, bytes, timeoutMs = 30 * 6e4, report, key } = opts;
+  if (!/^[a-f0-9]{64}$/.test(sha256)) {
+    throw new DeliveryError(`\u043D\u0435\u0447\u0435\u043C \u0441\u0432\u0435\u0440\u0438\u0442\u044C \u0441\u043A\u0430\u0447\u0430\u043D\u043D\u043E\u0435: \u0441\u0443\u043C\u043C\u0430 \xAB${sha256}\xBB \u043D\u0435 \u043F\u043E\u0445\u043E\u0436\u0430 \u043D\u0430 sha256`);
+  }
+  mkdirSync(dirname(dest), { recursive: true });
+  const temp = `${dest}.downloading-${process.pid}-${randomUUID()}`;
+  const guard = new AbortController();
+  const timer = setTimeout(() => {
+    guard.abort();
+  }, timeoutMs);
+  try {
+    const response = await fetch(url2, {
+      signal: guard.signal,
+      redirect: "follow",
+      ...key !== null && key !== void 0 ? { headers: { authorization: `Bearer ${key}` } } : {}
+    });
+    const hasKey = key !== null && key !== void 0;
+    if (!response.ok) {
+      if (response.status === 401 || response.status === 403) {
+        if (response.status === 403 && hasKey) {
+          throw new DeliveryError(
+            `${url2} \u043D\u0435 \u043E\u0442\u0434\u0430\u0451\u0442 \u0444\u0430\u0439\u043B: \u043A\u043B\u044E\u0447 \u043F\u0440\u0438\u0437\u043D\u0430\u043D, \u043D\u043E \u043F\u043E\u0434\u043F\u0438\u0441\u043A\u0438 \u043D\u0430 \u043C\u043E\u043D\u0442\u0430\u0436 \u043D\u0435\u0442. \u0421\u043A\u0430\u0447\u0438\u0432\u0430\u043D\u0438\u0435 \u043D\u043E\u0432\u043E\u0433\u043E \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u043E, \u043F\u043E\u043A\u0430 \u043F\u043E\u0434\u043F\u0438\u0441\u043A\u0430 \u0430\u043A\u0442\u0438\u0432\u043D\u0430; \u0432\u0441\u0451, \u0447\u0442\u043E \u0443\u0436\u0435 \u0441\u0442\u043E\u0438\u0442 \u043D\u0430 \u043A\u043E\u043C\u043F\u044C\u044E\u0442\u0435\u0440\u0435, \u043F\u0440\u043E\u0434\u043E\u043B\u0436\u0430\u0435\u0442 \u0440\u0430\u0431\u043E\u0442\u0430\u0442\u044C. \u041F\u0440\u043E\u0434\u043B\u0438\u0442\u0435 \u043F\u043E\u0434\u043F\u0438\u0441\u043A\u0443 \u0432 \u0431\u043E\u0442\u0435 \u0438 \u043F\u043E\u0432\u0442\u043E\u0440\u0438\u0442\u0435.`
+          );
+        }
+        throw new DeliveryError(
+          !hasKey ? `${url2} \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043A\u043B\u044E\u0447 \u041D\u0430\u043F\u0430\u0440\u043D\u0438\u043A\u0430, \u0430 \u043E\u043D \u043D\u0435 \u0437\u0430\u0434\u0430\u043D. \u0412\u043F\u0438\u0448\u0438\u0442\u0435 \u043A\u043B\u044E\u0447 \u0432 \u043A\u043E\u043D\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044E MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 (\u0441\u0435\u043A\u0446\u0438\u044F env) \u0438 \u043F\u0435\u0440\u0435\u0437\u0430\u043F\u0443\u0441\u0442\u0438\u0442\u0435 \u043F\u0440\u043E\u0433\u0440\u0430\u043C\u043C\u0443 \u2014 \u041A\u043B\u043E\u0434\u0430 \u0438\u043B\u0438 Codex.` : `${url2} \u043D\u0435 \u043F\u0440\u0438\u043D\u044F\u043B \u043A\u043B\u044E\u0447 \u041D\u0430\u043F\u0430\u0440\u043D\u0438\u043A\u0430 (${response.status}). \u0421\u043A\u043E\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043E, \u043A\u043B\u044E\u0447 \u0437\u0430\u043C\u0435\u043D\u0451\u043D \u0431\u043E\u043B\u0435\u0435 \u043D\u043E\u0432\u044B\u043C: \u043D\u043E\u0432\u044B\u0439 \u0444\u0430\u0439\u043B \u0438\u0437 \u0431\u043E\u0442\u0430 \u0443\u0436\u0435 \u043F\u043E\u0441\u0442\u0430\u0432\u043B\u0435\u043D \u0437\u0434\u0435\u0441\u044C \u0438\u043B\u0438 \u043D\u0430 \u0434\u0440\u0443\u0433\u043E\u043C \u043A\u043E\u043C\u043F\u044C\u044E\u0442\u0435\u0440\u0435. \u0412\u043E\u0437\u044C\u043C\u0438\u0442\u0435 \u043F\u043E\u0441\u043B\u0435\u0434\u043D\u0438\u0439 \u0444\u0430\u0439\u043B \u0443 \u0431\u043E\u0442\u0430 ${KEY_SOURCE_BOT} \u0438 \u043F\u043E\u0441\u0442\u0430\u0432\u044C\u0442\u0435 \u0435\u0433\u043E.`
+        );
+      }
+      throw new DeliveryError(`${url2} \u043E\u0442\u0432\u0435\u0442\u0438\u043B ${response.status} ${response.statusText}`);
+    }
+    const body = await response.arrayBuffer();
+    const buffer = Buffer.from(body);
+    const sum = createHash("sha256").update(buffer).digest("hex");
+    if (bytes !== void 0 && buffer.length !== bytes) {
+      throw new DeliveryError(
+        looksLikeHtml(buffer) ? `\u043F\u043E \u0430\u0434\u0440\u0435\u0441\u0443 ${url2} \u043B\u0435\u0436\u0438\u0442 \u043D\u0435 \u0430\u0440\u0445\u0438\u0432, \u0430 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043D\u0438\u0446\u0430 \u2014 \u0444\u0430\u0439\u043B \u0435\u0449\u0451 \u043D\u0435 \u0432\u044B\u043B\u043E\u0436\u0435\u043D.` : `\u0441\u043A\u0430\u0447\u0430\u043B\u043E\u0441\u044C ${buffer.length} \u0431\u0430\u0439\u0442 \u0432\u043C\u0435\u0441\u0442\u043E ${bytes} \u2014 \u0441\u0432\u044F\u0437\u044C \u043E\u0431\u043E\u0440\u0432\u0430\u043B\u0430\u0441\u044C, \u043F\u043E\u0432\u0442\u043E\u0440\u0438.`
+      );
+    }
+    if (sum !== sha256) {
+      throw new DeliveryError(
+        looksLikeHtml(buffer) ? `\u043F\u043E \u0430\u0434\u0440\u0435\u0441\u0443 ${url2} \u043B\u0435\u0436\u0438\u0442 \u043D\u0435 \u0430\u0440\u0445\u0438\u0432, \u0430 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043D\u0438\u0446\u0430 \u2014 \u0444\u0430\u0439\u043B \u0435\u0449\u0451 \u043D\u0435 \u0432\u044B\u043B\u043E\u0436\u0435\u043D.` : `\u0441\u043A\u0430\u0447\u0430\u043D\u043D\u043E\u0435 \u043D\u0435 \u0441\u043E\u0432\u043F\u0430\u043B\u043E \u0441 \u043A\u043E\u043D\u0442\u0440\u043E\u043B\u044C\u043D\u043E\u0439 \u0441\u0443\u043C\u043C\u043E\u0439.
+  \u0436\u0434\u0430\u043B\u0438 ${sha256}
+  \u0432\u044B\u0448\u043B\u043E ${sum}
+\u041F\u043E\u0432\u0442\u043E\u0440\u0438; \u0435\u0441\u043B\u0438 \u043F\u043E\u0432\u0442\u043E\u0440\u044F\u0435\u0442\u0441\u044F \u2014 \u0444\u0430\u0439\u043B \u043F\u043E\u0434\u043C\u0435\u043D\u0451\u043D \u0438\u043B\u0438 \u0431\u0438\u0442\u044B\u0439, \u0441\u0442\u0430\u0432\u0438\u0442\u044C \u0435\u0433\u043E \u043D\u0435\u043B\u044C\u0437\u044F.`
+      );
+    }
+    writeFileSync(temp, buffer);
+    if (existsSync(dest)) {
+      throw new DeliveryError(
+        `\u0444\u0430\u0439\u043B ${dest} \u0443\u0436\u0435 \u0437\u0430\u043D\u044F\u043B \u0434\u0440\u0443\u0433\u043E\u0439 \u043F\u0440\u043E\u0446\u0435\u0441\u0441 \u2014 \u043D\u0438\u0447\u0435\u0433\u043E \u043D\u0435 \u0443\u0434\u0430\u043B\u044F\u043B. \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043F\u043E\u0432\u0442\u043E\u0440\u0438\u0442\u0435 \u043E\u043F\u0435\u0440\u0430\u0446\u0438\u044E \u0441 \u043D\u043E\u0432\u044B\u043C staging.`
+      );
+    }
+    renameSync(temp, dest);
+    report?.(`\u0441\u043A\u0430\u0447\u0430\u043D\u043E ${Math.round(buffer.length / 1024 / 1024)} \u041C\u0411`);
+    return { file: dest, bytes: buffer.length, sha256: sum };
+  } catch (trouble) {
+    rmSync(temp, { force: true });
+    if (trouble instanceof DeliveryError) throw trouble;
+    if (guard.signal.aborted) {
+      throw new DeliveryError(`${url2} \u043D\u0435 \u043E\u0442\u0434\u0430\u043B \u0444\u0430\u0439\u043B \u0437\u0430 ${Math.round(timeoutMs / 6e4)} \u043C\u0438\u043D.`);
+    }
+    throw new DeliveryError(`\u043D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C \u0441\u043A\u0430\u0447\u0430\u0442\u044C ${url2}: ${describeFailure(trouble)}`);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function looksLikeHtml(buffer) {
+  const start = buffer.subarray(0, 200).toString("latin1").trimStart().toLowerCase();
+  return start.startsWith("<!doctype html") || start.startsWith("<html");
+}
+var BLOCK = 512;
+function tarEntries(data) {
+  const entries = [];
+  let offset = 0;
+  let longName = null;
+  let longTarget = null;
+  while (offset + BLOCK <= data.length) {
+    const header = data.subarray(offset, offset + BLOCK);
+    if (header.every((b) => b === 0)) break;
+    const name = fieldLine(header, 0, 100);
+    const mode = octal(header, 100, 8);
+    const size = fieldSize(header, 124, 12);
+    const type = String.fromCharCode(header[156]);
+    const target = fieldLine(header, 157, 100);
+    const prefix = fieldLine(header, 345, 155);
+    offset += BLOCK;
+    const body = data.subarray(offset, offset + size);
+    offset += Math.ceil(size / BLOCK) * BLOCK;
+    if (type === "L") {
+      longName = body.toString("utf8").replace(/\0+$/, "");
+      continue;
+    }
+    if (type === "K") {
+      longTarget = body.toString("utf8").replace(/\0+$/, "");
+      continue;
+    }
+    if (type === "x") {
+      const fields = parsePax(body);
+      if (fields["path"] !== void 0) longName = fields["path"];
+      if (fields["linkpath"] !== void 0) longTarget = fields["linkpath"];
+      continue;
+    }
+    if (type === "g") continue;
+    const full = longName ?? (prefix !== "" ? `${prefix}/${name}` : name);
+    const linkTarget = longTarget ?? target;
+    longName = null;
+    longTarget = null;
+    const kind = type === "5" ? "dir" : type === "2" ? "symlink" : type === "1" ? "hardlink" : "file";
+    if (type !== "" && type !== "0" && type !== "\0" && kind === "file" && type !== "7") continue;
+    entries.push({ name: full, kind, mode, body, target: linkTarget });
+  }
+  return entries;
+}
+function parsePax(body) {
+  const fields = {};
+  let offset = 0;
+  while (offset < body.length) {
+    const space = body.indexOf(32, offset);
+    if (space === -1) break;
+    const length = Number.parseInt(body.subarray(offset, space).toString("ascii"), 10);
+    if (!Number.isFinite(length) || length <= 0 || offset + length > body.length) break;
+    const entry = body.subarray(space + 1, offset + length).toString("utf8").replace(/\n$/, "");
+    const equal = entry.indexOf("=");
+    if (equal > 0) fields[entry.slice(0, equal)] = entry.slice(equal + 1);
+    offset += length;
+  }
+  return fields;
+}
+function fieldLine(header, start, length) {
+  const chunk = header.subarray(start, start + length);
+  const end = chunk.indexOf(0);
+  return chunk.subarray(0, end === -1 ? chunk.length : end).toString("utf8");
+}
+function octal(header, start, length) {
+  const text2 = fieldLine(header, start, length).trim();
+  const ch = Number.parseInt(text2, 8);
+  return Number.isFinite(ch) ? ch : 0;
+}
+function fieldSize(header, start, length) {
+  if ((header[start] & 128) !== 0) {
+    let ch = 0;
+    for (let i = start + 1; i < start + length; i += 1) ch = ch * 256 + header[i];
+    return ch;
+  }
+  return octal(header, start, length);
+}
+function inside(root, path2) {
+  if (path2 === "" || path2.startsWith("/") || path2.startsWith("\\")) return false;
+  if (/^[A-Za-z]:/.test(path2)) return false;
+  const target = resolve(root, path2);
+  const bottom = resolve(root);
+  return target === bottom || target.startsWith(bottom + sep);
+}
+function unpackArchive(archive, dest) {
+  const entries = tarEntries(gunzipSync(readFileSync(archive)));
+  if (entries.length === 0) throw new DeliveryError(`\u0430\u0440\u0445\u0438\u0432 ${archive} \u043F\u0443\u0441\u0442 \u2014 \u0440\u0430\u0441\u043F\u0430\u043A\u043E\u0432\u044B\u0432\u0430\u0442\u044C \u043D\u0435\u0447\u0435\u0433\u043E`);
+  for (const entry of entries) {
+    if (!inside(dest, entry.name)) throw escapesRoot(archive, entry.name);
+    if (entry.kind === "symlink" || entry.kind === "hardlink") {
+      if (entry.target.startsWith("/") || entry.target.startsWith("\\") || /^[A-Za-z]:/.test(entry.target)) {
+        throw escapesRoot(archive, `${entry.name} \u2192 ${entry.target}`);
+      }
+      const from = entry.kind === "hardlink" ? entry.target : join(dirname(entry.name), entry.target);
+      if (!inside(dest, from)) throw escapesRoot(archive, `${entry.name} \u2192 ${entry.target}`);
+    }
+  }
+  for (const entry of entries) {
+    const path2 = join(dest, entry.name);
+    if (entry.kind === "dir") {
+      mkdirSync(path2, { recursive: true });
+      continue;
+    }
+    mkdirSync(dirname(path2), { recursive: true });
+    if (entry.kind === "symlink") {
+      rmSync(path2, { force: true });
+      symlinkSync(entry.target, path2);
+      continue;
+    }
+    if (entry.kind === "hardlink") {
+      writeFileSync(path2, readFileSync(join(dest, entry.target)));
+      continue;
+    }
+    writeFileSync(path2, entry.body);
+    if ((entry.mode & 73) !== 0) chmodSync(path2, entry.mode & 511);
+  }
+}
+function escapesRoot(archive, name) {
+  return new DeliveryError(
+    `\u0430\u0440\u0445\u0438\u0432 ${archive} \u043F\u044B\u0442\u0430\u0435\u0442\u0441\u044F \u0437\u0430\u043F\u0438\u0441\u0430\u0442\u044C \u0444\u0430\u0439\u043B \u0437\u0430 \u043F\u0440\u0435\u0434\u0435\u043B\u044B \u043F\u0430\u043F\u043A\u0438 \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u043A\u0438: \xAB${name}\xBB.
+\u041D\u0438\u0447\u0435\u0433\u043E \u043D\u0435 \u0440\u0430\u0441\u043F\u0430\u043A\u043E\u0432\u0430\u043D\u043E. \u0421\u043A\u0430\u0447\u0430\u0439 \u0437\u0430\u043D\u043E\u0432\u043E \u2014 \u0432\u0435\u0440\u043E\u044F\u0442\u043D\u0435\u0435 \u0432\u0441\u0435\u0433\u043E, \u0444\u0430\u0439\u043B \u043F\u043E\u0432\u0440\u0435\u0436\u0434\u0451\u043D \u0438\u043B\u0438 \u043F\u043E\u0434\u043C\u0435\u043D\u0451\u043D.`
+  );
+}
+function dirExists(path2) {
+  try {
+    return statSync(path2).isDirectory();
+  } catch {
+    return false;
+  }
+}
+var LOCK_FILE = "deps.lock.json";
+function platformKey(os = process.platform, arch2 = process.arch) {
+  if (os === "darwin") return arch2 === "arm64" ? "Darwin-arm64" : arch2 === "x64" ? "Darwin-x86_64" : null;
+  if (os === "win32") return arch2 === "x64" ? "Windows-AMD64" : null;
+  if (os === "linux") return arch2 === "x64" ? "Linux-x86_64" : arch2 === "arm64" ? "Linux-aarch64" : null;
+  return null;
+}
+function depFolderName(entry) {
+  return `${entry.version}-${entry.archives.map((one) => one.sha256.slice(0, 8)).join("")}`;
+}
+function lockedPython(engineDir, home, key = platformKey()) {
+  if (key === null) return null;
+  const file2 = join(engineDir, LOCK_FILE);
+  if (!existsSync(file2)) return null;
+  const lock = JSON.parse(readFileSync(file2, "utf8"));
+  const entry = lock.python?.platforms?.[key];
+  const archive = entry?.archives[0];
+  if (entry === void 0 || archive === void 0) return null;
+  const folder = join(home, "deps", "python", depFolderName(entry));
+  return { version: entry.version, archive, folder, executable: join(folder, entry.run) };
+}
+async function bringPython(python, report) {
+  if (existsSync(python.executable)) return python.executable;
+  const stage = `${python.folder}.partial-${process.pid}`;
+  rmSync(stage, { recursive: true, force: true });
+  try {
+    const archive = join(stage, "python.tar.gz");
+    await downloadFile({
+      url: python.archive.url,
+      dest: archive,
+      sha256: python.archive.sha256,
+      bytes: python.archive.bytes,
+      key: null,
+      ...report !== void 0 ? { report } : {}
+    });
+    unpackArchive(archive, join(stage, "tree"));
+    if (!existsSync(join(stage, "tree", python.executable.slice(python.folder.length + 1)))) {
+      throw new DeliveryError("\u0432 \u0430\u0440\u0445\u0438\u0432\u0435 \u043F\u0438\u0442\u043E\u043D\u0430 \u043D\u0435\u0442 \u0438\u043D\u0442\u0435\u0440\u043F\u0440\u0435\u0442\u0430\u0442\u043E\u0440\u0430, \u043A\u043E\u0442\u043E\u0440\u044B\u0439 \u043D\u0430\u0437\u0432\u0430\u043B \u0437\u0430\u043C\u043E\u043A");
+    }
+    mkdirSync(dirname(python.folder), { recursive: true });
+    if (!dirExists(python.folder)) renameSync(join(stage, "tree"), python.folder);
+  } finally {
+    rmSync(stage, { recursive: true, force: true });
+  }
+  return python.executable;
+}
 var TAIL_MS = 10 * 6e4;
 var AWAY_NOTE = "\u0421\u043A\u0430\u0436\u0438 \u0447\u0435\u043B\u043E\u0432\u0435\u043A\u0443: \u043C\u043E\u0436\u043D\u043E \u043E\u0442\u043E\u0439\u0442\u0438, \u043A\u043E\u043C\u043F\u044C\u044E\u0442\u0435\u0440 \u043D\u0435 \u0443\u0441\u043D\u0451\u0442, \u043F\u043E\u043A\u0430 \u0438\u0434\u0451\u0442 \u0440\u0430\u0431\u043E\u0442\u0430. \u0422\u043E\u043B\u044C\u043A\u043E \u043A\u0440\u044B\u0448\u043A\u0443 \u043D\u043E\u0443\u0442\u0431\u0443\u043A\u0430 \u043D\u0435 \u0437\u0430\u043A\u0440\u044B\u0432\u0430\u0442\u044C.";
 var realClock = {
@@ -1314,7 +1567,6 @@ function currentMachineFingerprint() {
   return cached;
 }
 var execFileP = promisify(execFile);
-var INSIDE_PYTHON = ["python.exe", join("bin", "python3"), join("bin", "python")];
 var FOREIGN_PYTHON_VARS = [
   "PYTHONHOME",
   "PYTHONPATH",
@@ -1520,94 +1772,44 @@ var Engine = class {
     return null;
   }
   /**
-   * Портативный python, который движок доставил сам (шаг «python» установки).
+   * Питон по замку начинки (`engine/deps.lock.json`), если он уже в хранилище.
    *
-   * ⚠ ЗНАТЬ ПРО НЕГО ОБЯЗАНА И ЭТА СТОРОНА. Он лежит в `<дом>/bin/python` и в
-   * PATH не попадает намеренно — PATH человека мы не трогаем. Пропусти его
-   * здесь, и получится: установка принесла питон, окружение на нём собралось,
-   * а сервер MCP по-прежнему зовёт системный «python», которого нет или
-   * который заглушка из Microsoft Store.
+   * ⚠ ТОЛЬКО СВОЙ. До 2026-09-24 здесь был «python3» из PATH на случай, когда
+   * своего нет, а окружение новой версии собиралось перебором «свой → базовый
+   * питон рабочей версии → системный». Claude Desktop подсунул питон Xcode 3.9,
+   * тот не собрал окружение, и обновление у владельца не вставало целый день.
+   * Решение владельца — «как node_modules»: свой питон по замку, чужого нет.
    */
-  ourPython() {
-    const root = join(this.home(), "bin", "python");
-    for (const rel of INSIDE_PYTHON) {
-      const candidate = join(root, rel);
-      if (existsSync(candidate)) return candidate;
-    }
-    return null;
+  ourPython(place = this.place()) {
+    if (place === null) return null;
+    const python = lockedPython(place.engine, this.home());
+    return python !== null && existsSync(python.executable) ? python.executable : null;
   }
   /**
-   * Python для команд движка.
+   * Python для команд движка: окружение пака, а пока его нет — свой питон по
+   * замку. Нет ни того, ни другого — путь, которого нет: `pythonTrouble`
+   * ответит словами «позови setup», а не «spawn python3 ENOENT».
    *
-   * Окружения пака может не быть вовсе — именно это и проверяет `check_setup`,
-   * поэтому запускать проверку его питоном нельзя: получилась бы курица и
-   * яйцо. Команды движка написаны на голой стандартной библиотеке и идут
-   * системным python'ом, когда своего ещё нет.
+   * ⚠ «python3» ИЗ PATH — ТОЛЬКО ПРИ `NAPARNIK_SYSTEM_TOOLS=1`: так тесты и
+   * разработка гоняют движок из исходников без хранилища (та же переменная у
+   * движка, `engine/media/ffmpeg.py`). У покупателя её нет.
    */
   enginePython() {
-    return this.packPython() ?? this.ourPython() ?? (platform() === "win32" ? "python" : "python3");
-  }
-  /** Python подготовки кандидата — намеренно без fallback на venv старого пака. */
-  bootstrapPython() {
-    return this.bootstrapPythons()[0] ?? (platform() === "win32" ? "python" : "python3");
+    const fallback = this.env["NAPARNIK_SYSTEM_TOOLS"] === "1" ? platform() === "win32" ? "python" : "python3" : join(this.home(), "deps", "python", "not-installed");
+    return this.packPython() ?? this.ourPython() ?? fallback;
   }
   /**
-   * Чем собирать окружение новой версии — по порядку, до первого, кто сумеет.
-   *
-   * ⚠ БАЗОВЫЙ ПИТОН РАБОЧЕЙ ВЕРСИИ СТОИТ ВПЕРЕДИ «python3» ИЗ PATH, И ЭТО
-   * ПОЧИНКА, А НЕ ВКУС. Claude Desktop на маке запускает нас без
-   * `/opt/homebrew/bin` в PATH, и «python3» там — `/usr/bin/python3`, питон
-   * Xcode 3.9. Он собирает venv только ссылками («This build of python cannot
-   * create venvs without using symlinks»), а ссылка на интерпретатор вне версии
-   * не проходит сверку `candidateVenvTrouble`. Обновление 2026.09.24-467 у
-   * владельца встало ровно на этом, хотя рабочая версия собрана Homebrew 3.14
-   * копиями и работает. Движок при первой установке ищет питон сам
-   * (`setup/python_finder.py`) и пишет, какой взял, в `pyvenv.cfg` окружения —
-   * этот и берём: он уже однажды собрал здесь рабочее окружение копиями.
-   *
-   * ⚠ НЕ ПИТОН САМОГО VENV. Окружение старой версии удаляется уборкой после
-   * обновления, и кандидат, собранный его питоном, остался бы без интерпретатора
-   * (`engine-candidate.test.ts`). База из `pyvenv.cfg` лежит вне версий.
-   */
-  bootstrapPythons() {
-    const found = [
-      this.ourPython(),
-      this.workingBasePython(),
-      platform() === "win32" ? "python" : "python3"
-    ].filter((one) => one !== null);
-    return [...new Set(found)];
-  }
-  /**
-   * Базовый интерпретатор окружения рабочей версии — из её `pyvenv.cfg`.
-   *
-   * `home` раньше `executable`: у Homebrew `executable` указывает в папку
-   * конкретного выпуска (`Cellar/python@3.14/3.14.7/…`), и после `brew upgrade`
-   * её уже нет, а `home` (`/opt/homebrew/opt/python@3.14/bin`) переживает
-   * обновление. Нет файла или записанного питона на диске — `null`.
+   * Принести питон замка ЭТОГО кандидата (или взять уже лежащий) — им движок
+   * кандидата доводит до замка всё остальное (`env-install --step env`).
    */
-  workingBasePython() {
-    const place = this.place();
-    if (place === null) return null;
-    let text2;
-    try {
-      text2 = readFileSync(join(place.pack, ".venv", "pyvenv.cfg"), "utf8");
-    } catch {
-      return null;
+  async bringPython(place, report) {
+    const python = lockedPython(place.engine, this.home());
+    if (python === null) {
+      throw new Error(`\u043F\u043E\u0434 \u044D\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043C\u0443 \u0432 \u0437\u0430\u043C\u043A\u0435 \u043D\u0435\u0442 \u0441\u0431\u043E\u0440\u043A\u0438 \u043F\u0438\u0442\u043E\u043D\u0430. \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043D\u0430\u043F\u0438\u0448\u0438 \u0431\u043E\u0442\u0443 ${KEY_SOURCE_BOT} \u2014 \u043F\u043E\u0434\u0431\u0435\u0440\u0451\u043C \u0441\u0431\u043E\u0440\u043A\u0443`);
     }
-    const value = (key) => {
-      const found = new RegExp(`^\\s*${key}\\s*=\\s*(.+?)\\s*$`, "m").exec(text2);
-      return found?.[1] ?? null;
-    };
-    const home = value("home");
-    if (home !== null) {
-      const names = platform() === "win32" ? ["python.exe"] : ["python3", "python"];
-      for (const name of names) {
-        const candidate = join(home, name);
-        if (existsSync(candidate)) return candidate;
-      }
-    }
-    const executable = value("executable");
-    return executable !== null && existsSync(executable) ? executable : null;
+    const executable = await bringPython(python, report);
+    this.forgetPython();
+    return executable;
   }
   /** Python ровно названного кандидата, а не текущей версии. */
   candidatePython(place) {
@@ -1631,6 +1833,9 @@ var Engine = class {
   pythonEnv() {
     const env = { ...this.env, PYTHONUTF8: "1", PYTHONIOENCODING: "utf-8" };
     for (const name of FOREIGN_PYTHON_VARS) delete env[name];
+    for (const [name, value] of Object.entries(env)) {
+      if (value !== void 0 && value.trim() !== "" && fromHost(value) === "") delete env[name];
+    }
     delete env["NAPARNIK_API_KEY"];
     return env;
   }
@@ -1640,12 +1845,7 @@ var Engine = class {
    * Весь движок (включая проверку и установку) идёт через запуск python'а.
    * Когда его нет, `execFile` бросает ENOENT, и клиентской нейросети
    * доставалось «spawn python3 ENOENT» — текст, из которого человеку не понять
-   * ничего. Шаг «python», написанный ровно для этого случая, при этом
-   * недостижим по устройству: он сам запускается python'ом.
-   *
-   * На Windows есть отдельная беда: в PATH лежит заглушка Microsoft Store —
-   * `python` там есть, он печатает рекламу магазина и выходит с кодом 9009.
-   * Поэтому проверяем не наличие файла, а ответ на вопрос о версии.
+   * ничего. Проверяем не наличие файла, а ответ на вопрос о версии.
    */
   async pythonTrouble() {
     if (this.pythonChecked !== void 0) return this.pythonChecked;
@@ -1661,7 +1861,7 @@ var Engine = class {
       }
     } catch {
     }
-    this.pythonChecked = "\u041D\u0430 \u044D\u0442\u043E\u043C \u043A\u043E\u043C\u043F\u044C\u044E\u0442\u0435\u0440\u0435 \u043D\u0435\u0442 Python \u2014 \u0430 \u0431\u0435\u0437 \u043D\u0435\u0433\u043E \u043C\u043E\u043D\u0442\u0438\u0440\u043E\u0432\u0430\u0442\u044C \u043D\u0435\u0447\u0435\u043C: \u0432\u0435\u0441\u044C \u0434\u0432\u0438\u0436\u043E\u043A \u043D\u0430\u043F\u0438\u0441\u0430\u043D \u043D\u0430 \u043D\u0451\u043C.\n" + (platform() === "win32" ? "\u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u0441\u043A\u0430\u0436\u0438 \u0447\u0435\u043B\u043E\u0432\u0435\u043A\u0443 \u043F\u043E\u0441\u0442\u0430\u0432\u0438\u0442\u044C Python \u0441 python.org/downloads \u0438 \u043E\u0431\u044F\u0437\u0430\u0442\u0435\u043B\u044C\u043D\u043E \u043E\u0442\u043C\u0435\u0442\u0438\u0442\u044C \u0433\u0430\u043B\u043E\u0447\u043A\u0443 \xABAdd python.exe to PATH\xBB. \u0415\u0441\u043B\u0438 \u0432 PATH \u0441\u0435\u0439\u0447\u0430\u0441 \u043B\u0435\u0436\u0438\u0442 \u0437\u0430\u0433\u043B\u0443\u0448\u043A\u0430 Microsoft Store (\u043E\u043D\u0430 \u043E\u0442\u043A\u0440\u044B\u0432\u0430\u0435\u0442 \u043C\u0430\u0433\u0430\u0437\u0438\u043D \u0432\u043C\u0435\u0441\u0442\u043E \u0437\u0430\u043F\u0443\u0441\u043A\u0430) \u2014 \u0435\u0451 \u043D\u0430\u0434\u043E \u043E\u0442\u043A\u043B\u044E\u0447\u0438\u0442\u044C: \u041F\u0430\u0440\u0430\u043C\u0435\u0442\u0440\u044B \u2192 \u041F\u0440\u0438\u043B\u043E\u0436\u0435\u043D\u0438\u044F \u2192 \u041F\u0441\u0435\u0432\u0434\u043E\u043D\u0438\u043C\u044B \u0432\u044B\u043F\u043E\u043B\u043D\u0435\u043D\u0438\u044F \u043F\u0440\u0438\u043B\u043E\u0436\u0435\u043D\u0438\u044F \u2192 \u0432\u044B\u043A\u043B\u044E\u0447\u0438\u0442\u044C python.exe.\n" : "\u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u0441\u043A\u0430\u0436\u0438 \u0447\u0435\u043B\u043E\u0432\u0435\u043A\u0443 \u043F\u043E\u0441\u0442\u0430\u0432\u0438\u0442\u044C Python \u0441 python.org/downloads.\n") + "\u041F\u043E\u0441\u043B\u0435 \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u043A\u0438 \u043F\u0435\u0440\u0435\u0437\u0430\u043F\u0443\u0441\u0442\u0438 \u043F\u0440\u043E\u0433\u0440\u0430\u043C\u043C\u0443 \u2014 \u043F\u0443\u0442\u044C \u043A python \u043F\u043E\u0434\u0445\u0432\u0430\u0442\u044B\u0432\u0430\u0435\u0442\u0441\u044F \u043F\u0440\u0438 \u0441\u0442\u0430\u0440\u0442\u0435 \u2014 \u0438 \u043F\u043E\u0437\u043E\u0432\u0438 setup \u0441\u043D\u043E\u0432\u0430.";
+    this.pythonChecked = "\u0421\u0432\u043E\u0435\u0433\u043E \u043F\u0438\u0442\u043E\u043D\u0430 \u043C\u043E\u043D\u0442\u0430\u0436\u0430 \u043D\u0430 \u044D\u0442\u043E\u043C \u043A\u043E\u043C\u043F\u044C\u044E\u0442\u0435\u0440\u0435 \u0435\u0449\u0451 \u043D\u0435\u0442 \u2014 \u043E\u043D \u0441\u0442\u0430\u0432\u0438\u0442\u0441\u044F \u0432\u043C\u0435\u0441\u0442\u0435 \u0441 \u0434\u0432\u0438\u0436\u043A\u043E\u043C, \u043E\u0434\u043D\u043E\u0439 \u043F\u0430\u043F\u043A\u043E\u0439, \u0432 \u0441\u0438\u0441\u0442\u0435\u043C\u0443 \u043D\u0438\u0447\u0435\u0433\u043E \u043D\u0435 \u0441\u0442\u0430\u0432\u0438\u0442\u0441\u044F.\n\u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043F\u043E\u0437\u043E\u0432\u0438 setup \u0441 what=all \u2014 \u043F\u043E\u0441\u0442\u0430\u0432\u043B\u044E \u0434\u0432\u0438\u0436\u043E\u043A \u0438 \u0432\u0441\u0451, \u0447\u0442\u043E \u0435\u043C\u0443 \u043D\u0443\u0436\u043D\u043E.";
     return this.pythonChecked;
   }
   // ─── запуск ─────────────────────────────────────────────────────────────
@@ -13356,6 +13556,9 @@ function candidateVenvTrouble(dir, version2, place, requirePresent = false) {
     if (venvStat.isSymbolicLink() || !venvStat.isDirectory()) return ".venv \u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442\u0430 \u0434\u043E\u043B\u0436\u0435\u043D \u0431\u044B\u0442\u044C \u043E\u0431\u044B\u0447\u043D\u043E\u0439 \u043F\u0430\u043F\u043A\u043E\u0439";
     if (!realpathSync(venv).startsWith(buildReal + sep)) return ".venv \u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442\u0430 \u0432\u044B\u0448\u0435\u043B \u0437\u0430 \u043F\u0440\u0435\u0434\u0435\u043B\u044B \u0432\u0435\u0440\u0441\u0438\u0438";
     const insideBuild = (path2) => path2 === buildReal || path2.startsWith(buildReal + sep);
+    const store = join(dirname(dir), "deps", "python");
+    const storeReal = existsSync(store) ? realpathSync(store) : null;
+    const insideStore = (path2) => storeReal !== null && path2.startsWith(storeReal + sep);
     const inspectedDirectories = /* @__PURE__ */ new Set();
     const inspectTree = (folder, insideCriticalParent, insideSitePackages) => {
       const folderReal = realpathSync(folder);
@@ -13369,8 +13572,10 @@ function candidateVenvTrouble(dir, version2, place, requirePresent = false) {
         const inSitePackages = insideSitePackages || entry.name.toLowerCase() === "site-packages";
         const stat = lstatSync(path2);
         if (stat.isSymbolicLink()) {
-          if (inCriticalParent || inSitePackages || /^(python(?:3(?:\.\d+)?)?|python\.exe)$/i.test(entry.name)) {
+          const interpreter = /^(python(?:3(?:\.\d+)?)?|python\.exe)$/i.test(entry.name);
+          if (inCriticalParent || inSitePackages || interpreter) {
             const actual = realpathSync(path2);
+            if (!insideBuild(actual) && interpreter && insideStore(actual)) continue;
             if (!insideBuild(actual)) return `${path2} \u0432\u0435\u0434\u0451\u0442 \u0437\u0430 \u043F\u0440\u0435\u0434\u0435\u043B\u044B \u0432\u0435\u0440\u0441\u0438\u0438 \u0432 ${actual}`;
             if (statSync(path2).isDirectory()) {
               const trouble = inspectTree(path2, inCriticalParent, inSitePackages);
@@ -13955,7 +14160,7 @@ function tidyOld2(engine) {
 }
 function candidateDeps(engine) {
   const value = engine;
-  return typeof value.home === "function" && typeof value.placeForVersion === "function" && typeof value.bootstrapPython === "function" && typeof value.candidatePython === "function" && typeof value.runWith === "function";
+  return typeof value.home === "function" && typeof value.placeForVersion === "function" && typeof value.bringPython === "function" && typeof value.candidatePython === "function" && typeof value.runWith === "function";
 }
 async function deploy(engine, manifest, trial = probe, key, hooks = {}) {
   const place = engine.place();
@@ -13998,6 +14203,9 @@ async function deployLocked(engine, manifest, trial, key, hooks) {
         text: `\u041F\u0430\u043F\u043A\u0430 \u0432\u0435\u0440\u0441\u0438\u0438 ${manifest.version} \u0443\u0436\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u043D\u043E digest \u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442\u0430 \u0434\u0440\u0443\u0433\u043E\u0439 \u0438\u043B\u0438 \u043D\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043D: \u0447\u0443\u0436\u043E\u0439 final \u043D\u0435 \u043F\u0440\u0438\u0441\u0432\u0430\u0438\u0432\u0430\u043B \u0438 \u043D\u0435 \u0443\u0434\u0430\u043B\u044F\u043B. \u041D\u0438\u0447\u0435\u0433\u043E \u043D\u0435 \u043F\u0435\u0440\u0435\u0437\u0430\u043F\u0438\u0441\u044B\u0432\u0430\u043B. \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u0432\u044B\u043F\u0443\u0441\u0442\u0438\u0442\u044C \u0434\u0440\u0443\u0433\u043E\u0435 \u0441\u043E\u0434\u0435\u0440\u0436\u0438\u043C\u043E\u0435 \u043F\u043E\u0434 \u043D\u043E\u0432\u044B\u043C \u043D\u043E\u043C\u0435\u0440\u043E\u043C \u0432\u0435\u0440\u0441\u0438\u0438.`
       };
     }
+    if (candidate.state === "blocked" && currentVersion(dir) !== manifest.version && pollutedPayload(dest, candidate)) {
+      keepBroken(dir, manifest.version, "\u0424\u0430\u0439\u043B\u044B \u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442\u0430 \u0438\u0437\u043C\u0435\u043D\u0438\u043B\u0438\u0441\u044C \u043F\u043E\u0441\u043B\u0435 \u0441\u043A\u0430\u0447\u0438\u0432\u0430\u043D\u0438\u044F \u2014 \u043E\u043F\u0438\u0441\u044C \u0431\u0430\u0439\u0442\u043E\u0432 \u043D\u0435 \u0441\u043E\u0448\u043B\u0430\u0441\u044C; \u0441\u043A\u0430\u0447\u0430\u043D \u0437\u0430\u043D\u043E\u0432\u043E.");
+    }
   }
   if (!existsSync(dest)) {
     const stage = createVersionStage(dir, manifest.version);
@@ -14124,16 +14332,12 @@ function recoverPublicationLocked(dir) {
   }
   clearPublication(dir, publication.operationId);
 }
-async function continuePreparedCandidate(engine, expected, bootstrap, trial = probe, extras = "now") {
+async function continuePreparedCandidate(engine, expected, trial = probe, extras = "now") {
   try {
     return await withVersionLock(engine.versionsDir(), async () => {
-      const checked = preparedCandidateBeforeBootstrap(engine, expected);
+      const checked = preparedCandidateBeforeActivation(engine, expected);
       if (!checked.ok) return checked.outcome;
-      const bootstrapped = await bootstrap({ candidate: checked.candidate, place: checked.place });
-      const after = preparedCandidateAfterBootstrap(engine, checked.candidate);
-      if (!after.ok) return after.outcome;
-      if (!bootstrapped.ok) return bootstrapped;
-      return activatePreparedCandidateLocked(engine, after.candidate, trial, extras);
+      return activatePreparedCandidateLocked(engine, checked.candidate, trial, extras);
     });
   } catch (trouble) {
     if (trouble instanceof VersionLockError) return { ok: false, text: trouble.message };
@@ -14144,7 +14348,7 @@ async function continuePreparedCandidate(engine, expected, bootstrap, trial = pr
     };
   }
 }
-function preparedCandidateBeforeBootstrap(engine, expected) {
+function preparedCandidateBeforeActivation(engine, expected) {
   const dir = engine.versionsDir();
   const candidate = readCandidate(dir);
   if (candidate === null || !sameCandidateState(candidate, expected)) {
@@ -14152,21 +14356,21 @@ function preparedCandidateBeforeBootstrap(engine, expected) {
       ok: false,
       outcome: {
         ok: false,
-        text: "\u041F\u043E\u0434\u0433\u043E\u0442\u043E\u0432\u043B\u0435\u043D\u043D\u044B\u0439 candidate \u0438\u0437\u043C\u0435\u043D\u0438\u043B\u0441\u044F \u0434\u043E bootstrap \u2014 \u043D\u0438\u0447\u0435\u0433\u043E \u043D\u0435 \u0437\u0430\u043F\u0443\u0441\u043A\u0430\u043B \u0438 \u043D\u0435 \u0437\u0430\u0442\u0438\u0440\u0430\u043B. \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043F\u043E\u0432\u0442\u043E\u0440\u0438\u0442\u0435 setup."
+        text: "\u041F\u043E\u0434\u0433\u043E\u0442\u043E\u0432\u043B\u0435\u043D\u043D\u044B\u0439 candidate \u0438\u0437\u043C\u0435\u043D\u0438\u043B\u0441\u044F \u0434\u043E \u0432\u043A\u043B\u044E\u0447\u0435\u043D\u0438\u044F \u2014 \u043D\u0438\u0447\u0435\u0433\u043E \u043D\u0435 \u0437\u0430\u043F\u0443\u0441\u043A\u0430\u043B \u0438 \u043D\u0435 \u0437\u0430\u0442\u0438\u0440\u0430\u043B. \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043F\u043E\u0432\u0442\u043E\u0440\u0438\u0442\u0435 setup."
       }
     };
   }
   const place = engine.placeForVersion(candidate.version);
   if (place === null) {
-    return { ok: false, outcome: blockCandidate(dir, candidate, "\u0423 prepared-\u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442\u0430 \u043D\u0435\u0442 engine/console.py \u2014 bootstrap \u043D\u0435 \u0437\u0430\u043F\u0443\u0441\u043A\u0430\u043B.") };
+    return { ok: false, outcome: blockCandidate(dir, candidate, "\u0423 prepared-\u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442\u0430 \u043D\u0435\u0442 engine/console.py \u2014 \u043D\u0438\u0447\u0435\u0433\u043E \u043D\u0435 \u0437\u0430\u043F\u0443\u0441\u043A\u0430\u043B.") };
   }
   const proofTrouble = candidateProofTrouble(dir, candidate, place);
   if (proofTrouble !== null) {
-    return { ok: false, outcome: blockCandidate(dir, candidate, `${proofTrouble} bootstrap \u043D\u0435 \u0437\u0430\u043F\u0443\u0441\u043A\u0430\u043B; current \u043D\u0435 \u043C\u0435\u043D\u044F\u043B.`) };
+    return { ok: false, outcome: blockCandidate(dir, candidate, `${proofTrouble} \u043D\u0438\u0447\u0435\u0433\u043E \u043D\u0435 \u0437\u0430\u043F\u0443\u0441\u043A\u0430\u043B; current \u043D\u0435 \u043C\u0435\u043D\u044F\u043B.`) };
   }
   const venvTrouble = candidateVenvTrouble(dir, candidate.version, place, false);
   if (venvTrouble !== null) {
-    return { ok: false, outcome: blockCandidate(dir, candidate, `${venvTrouble} bootstrap \u043D\u0435 \u0437\u0430\u043F\u0443\u0441\u043A\u0430\u043B; current \u043D\u0435 \u043C\u0435\u043D\u044F\u043B.`) };
+    return { ok: false, outcome: blockCandidate(dir, candidate, `${venvTrouble} \u043D\u0438\u0447\u0435\u0433\u043E \u043D\u0435 \u0437\u0430\u043F\u0443\u0441\u043A\u0430\u043B; current \u043D\u0435 \u043C\u0435\u043D\u044F\u043B.`) };
   }
   const current = currentVersion(dir);
   if (current !== candidate.baseCurrent) {
@@ -14174,58 +14378,14 @@ function preparedCandidateBeforeBootstrap(engine, expected) {
       ok: false,
       outcome: {
         ok: false,
-        text: `current \u0438\u0437\u043C\u0435\u043D\u0438\u043B\u0441\u044F \u0434\u043E bootstrap (${candidate.baseCurrent ?? "\u043D\u0435\u0442"} \u2192 ${current ?? "\u043D\u0435\u0442"}) \u2014 \u043D\u0438\u0447\u0435\u0433\u043E \u043D\u0435 \u0437\u0430\u043F\u0443\u0441\u043A\u0430\u043B \u0438 \u043D\u0435 \u0437\u0430\u0442\u0438\u0440\u0430\u043B. \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u0437\u0430\u043D\u043E\u0432\u043E \u0437\u0430\u043F\u0440\u043E\u0441\u0438\u0442\u0435 \u043E\u0431\u043D\u043E\u0432\u043B\u0435\u043D\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 setup.`
+        text: `current \u0438\u0437\u043C\u0435\u043D\u0438\u043B\u0441\u044F \u0434\u043E \u0432\u043A\u043B\u044E\u0447\u0435\u043D\u0438\u044F (${candidate.baseCurrent ?? "\u043D\u0435\u0442"} \u2192 ${current ?? "\u043D\u0435\u0442"}) \u2014 \u043D\u0438\u0447\u0435\u0433\u043E \u043D\u0435 \u0437\u0430\u043F\u0443\u0441\u043A\u0430\u043B \u0438 \u043D\u0435 \u0437\u0430\u0442\u0438\u0440\u0430\u043B. \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u0437\u0430\u043D\u043E\u0432\u043E \u0437\u0430\u043F\u0440\u043E\u0441\u0438\u0442\u0435 \u043E\u0431\u043D\u043E\u0432\u043B\u0435\u043D\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 setup.`
       }
     };
   }
   return { ok: true, candidate, place };
 }
-function preparedCandidateAfterBootstrap(engine, before) {
-  const dir = engine.versionsDir();
-  const candidate = readCandidate(dir);
-  if (candidate === null || !sameCandidateState(candidate, before)) {
-    return {
-      ok: false,
-      outcome: {
-        ok: false,
-        text: "candidate \u0438\u0437\u043C\u0435\u043D\u0438\u043B\u0441\u044F \u0432\u043E \u0432\u0440\u0435\u043C\u044F bootstrap \u2014 \u0447\u0443\u0436\u043E\u0439 \u0443\u043A\u0430\u0437\u0430\u0442\u0435\u043B\u044C \u043D\u0435 \u0437\u0430\u0442\u0438\u0440\u0430\u043B. \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043F\u043E\u0432\u0442\u043E\u0440\u0438\u0442\u0435 setup."
-      }
-    };
-  }
-  if (currentVersion(dir) !== before.baseCurrent) {
-    return {
-      ok: false,
-      outcome: {
-        ok: false,
-        text: "current \u0438\u0437\u043C\u0435\u043D\u0438\u043B\u0441\u044F \u0432\u043E \u0432\u0440\u0435\u043C\u044F bootstrap \u2014 \u0447\u0443\u0436\u043E\u0439 current \u043D\u0435 \u0437\u0430\u0442\u0438\u0440\u0430\u043B. \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043F\u043E\u0432\u0442\u043E\u0440\u0438\u0442\u0435 setup."
-      }
-    };
-  }
-  const place = engine.placeForVersion(candidate.version);
-  if (place === null) {
-    return {
-      ok: false,
-      outcome: {
-        ok: false,
-        text: "\u041F\u0443\u0442\u044C prepared-\u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442\u0430 \u0438\u0437\u043C\u0435\u043D\u0438\u043B\u0441\u044F \u0432\u043E \u0432\u0440\u0435\u043C\u044F bootstrap \u2014 current \u043D\u0435 \u043C\u0435\u043D\u044F\u043B. \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043F\u043E\u0432\u0442\u043E\u0440\u0438\u0442\u0435 setup."
-      }
-    };
-  }
-  const proofTrouble = candidateProofTrouble(dir, candidate, place);
-  const venvTrouble = candidateVenvTrouble(dir, candidate.version, place, false);
-  if (proofTrouble !== null || venvTrouble !== null) {
-    return {
-      ok: false,
-      outcome: {
-        ok: false,
-        text: `${proofTrouble ?? venvTrouble} \u043F\u043E\u0441\u043B\u0435 bootstrap \u2014 candidate \u0438 current \u043D\u0435 \u0437\u0430\u0442\u0438\u0440\u0430\u043B. \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043F\u043E\u0432\u0442\u043E\u0440\u0438\u0442\u0435 setup \u043F\u043E\u0441\u043B\u0435 \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0438 \u0444\u0430\u0439\u043B\u043E\u0432 \u043D\u0430 \u0434\u0438\u0441\u043A\u0435.`
-      }
-    };
-  }
-  return { ok: true, candidate, place };
-}
-function blockCandidate(dir, candidate, text2) {
-  if (!sameCandidateState(readCandidate(dir), candidate)) {
+function blockCandidate(dir, candidate, text2) {
+  if (!sameCandidateState(readCandidate(dir), candidate)) {
     return {
       ok: false,
       text: "\u0423\u043A\u0430\u0437\u0430\u0442\u0435\u043B\u044C candidate \u0438\u0437\u043C\u0435\u043D\u0438\u043B\u0441\u044F \u0432\u043E \u0432\u0440\u0435\u043C\u044F \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0438 \u2014 \u0447\u0443\u0436\u043E\u0439 \u0440\u0435\u0437\u0443\u043B\u044C\u0442\u0430\u0442 \u043D\u0435 \u0437\u0430\u043F\u0438\u0441\u044B\u0432\u0430\u043B. \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043F\u043E\u0432\u0442\u043E\u0440\u0438\u0442\u0435 setup."
@@ -14238,7 +14398,7 @@ function blockCandidate(dir, candidate, text2) {
     text: text2.includes("\u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C:") ? `${lead}
 ${text2}` : `${lead}
 ${text2}
-\u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043F\u043E\u0432\u0442\u043E\u0440\u0438 setup \u043F\u043E\u0437\u0436\u0435 \u2014 \u0441\u0432\u044F\u0437\u044C \u043C\u043E\u0433\u043B\u0430 \u043E\u0431\u043E\u0440\u0432\u0430\u0442\u044C\u0441\u044F. \u041E\u0442\u043A\u0430\u0436\u0435\u0442 \u0442\u0435\u043C \u0436\u0435 \u2014 \u044D\u0442\u0430 \u0432\u0435\u0440\u0441\u0438\u044F \u0441\u043B\u043E\u043C\u0430\u043D\u0430: \u043C\u043E\u043D\u0442\u0438\u0440\u0443\u0439 \u043D\u0430 \u043F\u0440\u0435\u0436\u043D\u0435\u0439 \u0438 \u0434\u043E\u0436\u0434\u0438\u0441\u044C \u0441\u043B\u0435\u0434\u0443\u044E\u0449\u0435\u0439.`
+\u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043C\u043E\u043D\u0442\u0438\u0440\u0443\u0439 \u043D\u0430 \u043F\u0440\u0435\u0436\u043D\u0435\u0439. \u0421\u0440\u0430\u0437\u0443 setup \u043D\u0435 \u043F\u043E\u0432\u0442\u043E\u0440\u044F\u0439 \u2014 \u043E\u0442\u043A\u0430\u0436\u0435\u0442 \u0442\u0435\u043C \u0436\u0435; \xAB\u043E\u0431\u043D\u043E\u0432\u0438\xBB \u0435\u0449\u0451 \u0440\u0430\u0437 \u2014 \u043F\u043E\u0437\u0436\u0435 \u0438\u043B\u0438 \u043A\u043E\u0433\u0434\u0430 \u0432\u044B\u0439\u0434\u0435\u0442 \u0441\u043B\u0435\u0434\u0443\u044E\u0449\u0430\u044F \u0432\u0435\u0440\u0441\u0438\u044F.`
   };
 }
 function commandWords(trouble) {
@@ -14259,12 +14419,25 @@ function candidateProofTrouble(dir, candidate, place) {
   if (pathTrouble !== null) return pathTrouble;
   try {
     const actual = payloadProof(join(dir, candidate.version));
-    if (!samePayloadProof(candidate.payload, actual)) return "\u0424\u0430\u043A\u0442\u0438\u0447\u0435\u0441\u043A\u0438\u0435 \u0431\u0430\u0439\u0442\u044B prepared-\u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442\u0430 \u0438\u0437\u043C\u0435\u043D\u0438\u043B\u0438\u0441\u044C \u043F\u043E\u0441\u043B\u0435 \u043F\u043E\u0434\u0433\u043E\u0442\u043E\u0432\u043A\u0438.";
+    if (!samePayloadProof(candidate.payload, actual)) {
+      const said = "\u0424\u0430\u0439\u043B\u044B \u043D\u043E\u0432\u043E\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438\u0437\u043C\u0435\u043D\u0438\u043B\u0438\u0441\u044C \u043F\u043E\u0441\u043B\u0435 \u0441\u043A\u0430\u0447\u0438\u0432\u0430\u043D\u0438\u044F (\u043E\u043F\u0438\u0441\u044C \u0431\u0430\u0439\u0442\u043E\u0432 \u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442\u0430 \u043D\u0435 \u0441\u043E\u0448\u043B\u0430\u0441\u044C).";
+      noteInstallFault("candidate-payload", new Error(said));
+      return said;
+    }
   } catch (trouble) {
-    return `\u0424\u0430\u043A\u0442\u0438\u0447\u0435\u0441\u043A\u0438\u0435 \u0431\u0430\u0439\u0442\u044B prepared-\u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442\u0430 \u043D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C \u043F\u0440\u043E\u0432\u0435\u0440\u0438\u0442\u044C: ${describeFailure(trouble)}`;
+    return `\u0424\u0430\u0439\u043B\u044B \u043D\u043E\u0432\u043E\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C \u043F\u0440\u043E\u0432\u0435\u0440\u0438\u0442\u044C (\u043E\u043F\u0438\u0441\u044C \u0431\u0430\u0439\u0442\u043E\u0432 \u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442\u0430): ${describeFailure(trouble)}`;
   }
   return null;
 }
+function pollutedPayload(dest, candidate) {
+  if (candidate.payload === void 0) return false;
+  try {
+    removePythonBytecode(dest);
+    return !samePayloadProof(candidate.payload, payloadProof(dest));
+  } catch {
+    return false;
+  }
+}
 function samePreparedCandidate(actual, expected) {
   return actual !== null && actual.version === expected.version && actual.sha256 === expected.sha256 && actual.state === "prepared" && actual.baseCurrent === expected.baseCurrent && actual.environment === expected.environment && actual.mineDigest === expected.mineDigest && actual.payload !== void 0 && expected.payload !== void 0 && samePayloadProof(actual.payload, expected.payload);
 }
@@ -14285,71 +14458,6 @@ async function runCandidateWith(engine, dir, version2, executable, place, args,
   removePythonBytecode(join(dir, version2));
   return result;
 }
-async function prepareCopiedCandidateVenv(engine, dir, version2, place) {
-  const trouble = candidateVenvTrouble(dir, version2, place, false);
-  if (trouble !== null) throw new Error(trouble);
-  const venv = join(place.pack, ".venv");
-  const existingPython = engine.candidatePython(place);
-  const ready = existingPython !== null && await candidatePipReady(engine, existingPython);
-  if (!ready) {
-    rmSync(venv, { recursive: true, force: true });
-    if (engine.prepareCandidateVenv !== void 0) {
-      await engine.prepareCandidateVenv(place);
-    } else {
-      await copiedVenv(engine, venv);
-    }
-  }
-  const createdTrouble = candidateVenvTrouble(dir, version2, place, true);
-  if (createdTrouble !== null) throw new Error(createdTrouble);
-  const python = engine.candidatePython(place);
-  if (python === null || !await candidatePipReady(engine, python)) {
-    throw new Error("\u0448\u0442\u0430\u0442\u043D\u044B\u0439 .venv \u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442\u0430 \u0441\u043E\u0437\u0434\u0430\u043D \u0431\u0435\u0437 \u0440\u0430\u0431\u043E\u0447\u0435\u0433\u043E pip");
-  }
-}
-var SYMLINKS_ONLY = "cannot create venvs without using symlinks";
-async function copiedVenv(engine, venv) {
-  const { execFile: execFile4 } = await import('child_process');
-  const { promisify: promisify3 } = await import('util');
-  const pythons = engine.bootstrapPythons?.() ?? [engine.bootstrapPython()];
-  const refusals = [];
-  for (const python of pythons) {
-    try {
-      await promisify3(execFile4)(python, ["-m", "venv", "--copies", venv], {
-        timeout: 10 * 6e4,
-        encoding: "utf8",
-        env: { ...engine.pythonEnv(), PYTHONDONTWRITEBYTECODE: "1" }
-      });
-      return;
-    } catch (trouble) {
-      rmSync(venv, { recursive: true, force: true });
-      const said = `${String(trouble.stderr ?? "")} ${describeFailure(trouble)}`;
-      refusals.push(said.includes(SYMLINKS_ONLY) ? `${python}: \u0441\u043E\u0431\u0438\u0440\u0430\u0435\u0442 \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u0435 \u0442\u043E\u043B\u044C\u043A\u043E \u0441\u0441\u044B\u043B\u043A\u0430\u043C\u0438` : `${python}: ${lastLine(said.trim())}`);
-    }
-  }
-  throw new Error(
-    `\u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u0435 \u043D\u043E\u0432\u043E\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u043E\u0431\u0440\u0430\u0442\u044C \u043D\u0435\u0447\u0435\u043C \u2014 ${refusals.join("; ")}. \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043F\u043E\u0441\u0442\u0430\u0432\u044C Python \u0441 python.org/downloads \u0438 \u043F\u043E\u0432\u0442\u043E\u0440\u0438 \xAB\u043E\u0431\u043D\u043E\u0432\u0438\xBB.`
-  );
-}
-async function candidatePipReady(engine, python) {
-  if (engine.candidatePipReady !== void 0) return engine.candidatePipReady(python);
-  const { execFile: execFile4 } = await import('child_process');
-  const { promisify: promisify3 } = await import('util');
-  const env = { ...engine.pythonEnv(), PYTHONDONTWRITEBYTECODE: "1" };
-  delete env["PYTHONHOME"];
-  delete env["PYTHONPATH"];
-  delete env["VIRTUAL_ENV"];
-  delete env["__PYVENV_LAUNCHER__"];
-  try {
-    await promisify3(execFile4)(python, ["-B", "-m", "pip", "--version"], {
-      timeout: 6e4,
-      encoding: "utf8",
-      env
-    });
-    return true;
-  } catch {
-    return false;
-  }
-}
 async function compatibilityProof(engine, dir, version2, python, place) {
   let output = "";
   try {
@@ -14412,24 +14520,12 @@ async function activatePreparedCandidateLocked(engine, manifest, trial, extras =
   const resumesReadyBeforeCurrent = candidate.state === "ready" && current !== candidate.version;
   if (candidate.environment !== "ready" || resumesReadyBeforeCurrent) {
     try {
-      if (candidate.baseCurrent === null) {
-        await runCandidateWith(
-          engine,
-          dir,
-          candidate.version,
-          engine.bootstrapPython(),
-          place,
-          ["env-install", "--pack", place.pack, "--step", "ffmpeg", "--consent"],
-          { timeout: 60 * 6e4 },
-          false
-        );
-      }
-      await prepareCopiedCandidateVenv(engine, dir, candidate.version, place);
+      const base = await engine.bringPython(place);
       await runCandidateWith(
         engine,
         dir,
         candidate.version,
-        engine.bootstrapPython(),
+        base,
         place,
         [
           "env-install",
@@ -14441,7 +14537,7 @@ async function activatePreparedCandidateLocked(engine, manifest, trial, extras =
           ...extras === "later" ? requiredOnly(dir, candidate.version) : []
         ],
         { timeout: 60 * 6e4 },
-        true
+        false
       );
       const installedVenvTrouble = candidateVenvTrouble(dir, candidate.version, place, true);
       if (installedVenvTrouble !== null) throw new Error(installedVenvTrouble);
@@ -14654,9 +14750,9 @@ async function dryRun(engine, build, expected, trial) {
   }
 }
 async function probe(engine, consolePy) {
-  const { execFile: execFile4 } = await import('child_process');
-  const { promisify: promisify3 } = await import('util');
-  return promisify3(execFile4)(engine.enginePython(), [consolePy, "version"], {
+  const { execFile: execFile3 } = await import('child_process');
+  const { promisify: promisify2 } = await import('util');
+  return promisify2(execFile3)(engine.enginePython(), [consolePy, "version"], {
     timeout: 6e4,
     encoding: "utf8",
     env: engine.pythonEnv()
@@ -14697,212 +14793,6 @@ function rollback(engine) {
     };
   }
 }
-var DeliveryError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "DeliveryTrouble";
-  }
-};
-async function downloadFile(opts) {
-  const { url: url2, dest, sha256, bytes, timeoutMs = 30 * 6e4, report, key } = opts;
-  if (!/^[a-f0-9]{64}$/.test(sha256)) {
-    throw new DeliveryError(`\u043D\u0435\u0447\u0435\u043C \u0441\u0432\u0435\u0440\u0438\u0442\u044C \u0441\u043A\u0430\u0447\u0430\u043D\u043D\u043E\u0435: \u0441\u0443\u043C\u043C\u0430 \xAB${sha256}\xBB \u043D\u0435 \u043F\u043E\u0445\u043E\u0436\u0430 \u043D\u0430 sha256`);
-  }
-  mkdirSync(dirname(dest), { recursive: true });
-  const temp = `${dest}.downloading-${process.pid}-${randomUUID()}`;
-  const guard = new AbortController();
-  const timer = setTimeout(() => {
-    guard.abort();
-  }, timeoutMs);
-  try {
-    const response = await fetch(url2, {
-      signal: guard.signal,
-      redirect: "follow",
-      ...key !== null && key !== void 0 ? { headers: { authorization: `Bearer ${key}` } } : {}
-    });
-    const hasKey = key !== null && key !== void 0;
-    if (!response.ok) {
-      if (response.status === 401 || response.status === 403) {
-        if (response.status === 403 && hasKey) {
-          throw new DeliveryError(
-            `${url2} \u043D\u0435 \u043E\u0442\u0434\u0430\u0451\u0442 \u0444\u0430\u0439\u043B: \u043A\u043B\u044E\u0447 \u043F\u0440\u0438\u0437\u043D\u0430\u043D, \u043D\u043E \u043F\u043E\u0434\u043F\u0438\u0441\u043A\u0438 \u043D\u0430 \u043C\u043E\u043D\u0442\u0430\u0436 \u043D\u0435\u0442. \u0421\u043A\u0430\u0447\u0438\u0432\u0430\u043D\u0438\u0435 \u043D\u043E\u0432\u043E\u0433\u043E \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u043E, \u043F\u043E\u043A\u0430 \u043F\u043E\u0434\u043F\u0438\u0441\u043A\u0430 \u0430\u043A\u0442\u0438\u0432\u043D\u0430; \u0432\u0441\u0451, \u0447\u0442\u043E \u0443\u0436\u0435 \u0441\u0442\u043E\u0438\u0442 \u043D\u0430 \u043A\u043E\u043C\u043F\u044C\u044E\u0442\u0435\u0440\u0435, \u043F\u0440\u043E\u0434\u043E\u043B\u0436\u0430\u0435\u0442 \u0440\u0430\u0431\u043E\u0442\u0430\u0442\u044C. \u041F\u0440\u043E\u0434\u043B\u0438\u0442\u0435 \u043F\u043E\u0434\u043F\u0438\u0441\u043A\u0443 \u0432 \u0431\u043E\u0442\u0435 \u0438 \u043F\u043E\u0432\u0442\u043E\u0440\u0438\u0442\u0435.`
-          );
-        }
-        throw new DeliveryError(
-          !hasKey ? `${url2} \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043A\u043B\u044E\u0447 \u041D\u0430\u043F\u0430\u0440\u043D\u0438\u043A\u0430, \u0430 \u043E\u043D \u043D\u0435 \u0437\u0430\u0434\u0430\u043D. \u0412\u043F\u0438\u0448\u0438\u0442\u0435 \u043A\u043B\u044E\u0447 \u0432 \u043A\u043E\u043D\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044E MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 (\u0441\u0435\u043A\u0446\u0438\u044F env) \u0438 \u043F\u0435\u0440\u0435\u0437\u0430\u043F\u0443\u0441\u0442\u0438\u0442\u0435 \u043F\u0440\u043E\u0433\u0440\u0430\u043C\u043C\u0443 \u2014 \u041A\u043B\u043E\u0434\u0430 \u0438\u043B\u0438 Codex.` : `${url2} \u043D\u0435 \u043F\u0440\u0438\u043D\u044F\u043B \u043A\u043B\u044E\u0447 \u041D\u0430\u043F\u0430\u0440\u043D\u0438\u043A\u0430 (${response.status}). \u0421\u043A\u043E\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043E, \u043A\u043B\u044E\u0447 \u0437\u0430\u043C\u0435\u043D\u0451\u043D \u0431\u043E\u043B\u0435\u0435 \u043D\u043E\u0432\u044B\u043C: \u043D\u043E\u0432\u044B\u0439 \u0444\u0430\u0439\u043B \u0438\u0437 \u0431\u043E\u0442\u0430 \u0443\u0436\u0435 \u043F\u043E\u0441\u0442\u0430\u0432\u043B\u0435\u043D \u0437\u0434\u0435\u0441\u044C \u0438\u043B\u0438 \u043D\u0430 \u0434\u0440\u0443\u0433\u043E\u043C \u043A\u043E\u043C\u043F\u044C\u044E\u0442\u0435\u0440\u0435. \u0412\u043E\u0437\u044C\u043C\u0438\u0442\u0435 \u043F\u043E\u0441\u043B\u0435\u0434\u043D\u0438\u0439 \u0444\u0430\u0439\u043B \u0443 \u0431\u043E\u0442\u0430 ${KEY_SOURCE_BOT} \u0438 \u043F\u043E\u0441\u0442\u0430\u0432\u044C\u0442\u0435 \u0435\u0433\u043E.`
-        );
-      }
-      throw new DeliveryError(`${url2} \u043E\u0442\u0432\u0435\u0442\u0438\u043B ${response.status} ${response.statusText}`);
-    }
-    const body = await response.arrayBuffer();
-    const buffer = Buffer.from(body);
-    const sum = createHash("sha256").update(buffer).digest("hex");
-    if (bytes !== void 0 && buffer.length !== bytes) {
-      throw new DeliveryError(
-        looksLikeHtml(buffer) ? `\u043F\u043E \u0430\u0434\u0440\u0435\u0441\u0443 ${url2} \u043B\u0435\u0436\u0438\u0442 \u043D\u0435 \u0430\u0440\u0445\u0438\u0432, \u0430 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043D\u0438\u0446\u0430 \u2014 \u0444\u0430\u0439\u043B \u0435\u0449\u0451 \u043D\u0435 \u0432\u044B\u043B\u043E\u0436\u0435\u043D.` : `\u0441\u043A\u0430\u0447\u0430\u043B\u043E\u0441\u044C ${buffer.length} \u0431\u0430\u0439\u0442 \u0432\u043C\u0435\u0441\u0442\u043E ${bytes} \u2014 \u0441\u0432\u044F\u0437\u044C \u043E\u0431\u043E\u0440\u0432\u0430\u043B\u0430\u0441\u044C, \u043F\u043E\u0432\u0442\u043E\u0440\u0438.`
-      );
-    }
-    if (sum !== sha256) {
-      throw new DeliveryError(
-        looksLikeHtml(buffer) ? `\u043F\u043E \u0430\u0434\u0440\u0435\u0441\u0443 ${url2} \u043B\u0435\u0436\u0438\u0442 \u043D\u0435 \u0430\u0440\u0445\u0438\u0432, \u0430 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043D\u0438\u0446\u0430 \u2014 \u0444\u0430\u0439\u043B \u0435\u0449\u0451 \u043D\u0435 \u0432\u044B\u043B\u043E\u0436\u0435\u043D.` : `\u0441\u043A\u0430\u0447\u0430\u043D\u043D\u043E\u0435 \u043D\u0435 \u0441\u043E\u0432\u043F\u0430\u043B\u043E \u0441 \u043A\u043E\u043D\u0442\u0440\u043E\u043B\u044C\u043D\u043E\u0439 \u0441\u0443\u043C\u043C\u043E\u0439.
-  \u0436\u0434\u0430\u043B\u0438 ${sha256}
-  \u0432\u044B\u0448\u043B\u043E ${sum}
-\u041F\u043E\u0432\u0442\u043E\u0440\u0438; \u0435\u0441\u043B\u0438 \u043F\u043E\u0432\u0442\u043E\u0440\u044F\u0435\u0442\u0441\u044F \u2014 \u0444\u0430\u0439\u043B \u043F\u043E\u0434\u043C\u0435\u043D\u0451\u043D \u0438\u043B\u0438 \u0431\u0438\u0442\u044B\u0439, \u0441\u0442\u0430\u0432\u0438\u0442\u044C \u0435\u0433\u043E \u043D\u0435\u043B\u044C\u0437\u044F.`
-      );
-    }
-    writeFileSync(temp, buffer);
-    if (existsSync(dest)) {
-      throw new DeliveryError(
-        `\u0444\u0430\u0439\u043B ${dest} \u0443\u0436\u0435 \u0437\u0430\u043D\u044F\u043B \u0434\u0440\u0443\u0433\u043E\u0439 \u043F\u0440\u043E\u0446\u0435\u0441\u0441 \u2014 \u043D\u0438\u0447\u0435\u0433\u043E \u043D\u0435 \u0443\u0434\u0430\u043B\u044F\u043B. \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043F\u043E\u0432\u0442\u043E\u0440\u0438\u0442\u0435 \u043E\u043F\u0435\u0440\u0430\u0446\u0438\u044E \u0441 \u043D\u043E\u0432\u044B\u043C staging.`
-      );
-    }
-    renameSync(temp, dest);
-    report?.(`\u0441\u043A\u0430\u0447\u0430\u043D\u043E ${Math.round(buffer.length / 1024 / 1024)} \u041C\u0411`);
-    return { file: dest, bytes: buffer.length, sha256: sum };
-  } catch (trouble) {
-    rmSync(temp, { force: true });
-    if (trouble instanceof DeliveryError) throw trouble;
-    if (guard.signal.aborted) {
-      throw new DeliveryError(`${url2} \u043D\u0435 \u043E\u0442\u0434\u0430\u043B \u0444\u0430\u0439\u043B \u0437\u0430 ${Math.round(timeoutMs / 6e4)} \u043C\u0438\u043D.`);
-    }
-    throw new DeliveryError(`\u043D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C \u0441\u043A\u0430\u0447\u0430\u0442\u044C ${url2}: ${describeFailure(trouble)}`);
-  } finally {
-    clearTimeout(timer);
-  }
-}
-function looksLikeHtml(buffer) {
-  const start = buffer.subarray(0, 200).toString("latin1").trimStart().toLowerCase();
-  return start.startsWith("<!doctype html") || start.startsWith("<html");
-}
-var BLOCK = 512;
-function tarEntries(data) {
-  const entries = [];
-  let offset = 0;
-  let longName = null;
-  let longTarget = null;
-  while (offset + BLOCK <= data.length) {
-    const header = data.subarray(offset, offset + BLOCK);
-    if (header.every((b) => b === 0)) break;
-    const name = fieldLine(header, 0, 100);
-    const mode = octal(header, 100, 8);
-    const size = fieldSize(header, 124, 12);
-    const type = String.fromCharCode(header[156]);
-    const target = fieldLine(header, 157, 100);
-    const prefix = fieldLine(header, 345, 155);
-    offset += BLOCK;
-    const body = data.subarray(offset, offset + size);
-    offset += Math.ceil(size / BLOCK) * BLOCK;
-    if (type === "L") {
-      longName = body.toString("utf8").replace(/\0+$/, "");
-      continue;
-    }
-    if (type === "K") {
-      longTarget = body.toString("utf8").replace(/\0+$/, "");
-      continue;
-    }
-    if (type === "x") {
-      const fields = parsePax(body);
-      if (fields["path"] !== void 0) longName = fields["path"];
-      if (fields["linkpath"] !== void 0) longTarget = fields["linkpath"];
-      continue;
-    }
-    if (type === "g") continue;
-    const full = longName ?? (prefix !== "" ? `${prefix}/${name}` : name);
-    const linkTarget = longTarget ?? target;
-    longName = null;
-    longTarget = null;
-    const kind = type === "5" ? "dir" : type === "2" ? "symlink" : type === "1" ? "hardlink" : "file";
-    if (type !== "" && type !== "0" && type !== "\0" && kind === "file" && type !== "7") continue;
-    entries.push({ name: full, kind, mode, body, target: linkTarget });
-  }
-  return entries;
-}
-function parsePax(body) {
-  const fields = {};
-  let offset = 0;
-  while (offset < body.length) {
-    const space = body.indexOf(32, offset);
-    if (space === -1) break;
-    const length = Number.parseInt(body.subarray(offset, space).toString("ascii"), 10);
-    if (!Number.isFinite(length) || length <= 0 || offset + length > body.length) break;
-    const entry = body.subarray(space + 1, offset + length).toString("utf8").replace(/\n$/, "");
-    const equal = entry.indexOf("=");
-    if (equal > 0) fields[entry.slice(0, equal)] = entry.slice(equal + 1);
-    offset += length;
-  }
-  return fields;
-}
-function fieldLine(header, start, length) {
-  const chunk = header.subarray(start, start + length);
-  const end = chunk.indexOf(0);
-  return chunk.subarray(0, end === -1 ? chunk.length : end).toString("utf8");
-}
-function octal(header, start, length) {
-  const text2 = fieldLine(header, start, length).trim();
-  const ch = Number.parseInt(text2, 8);
-  return Number.isFinite(ch) ? ch : 0;
-}
-function fieldSize(header, start, length) {
-  if ((header[start] & 128) !== 0) {
-    let ch = 0;
-    for (let i = start + 1; i < start + length; i += 1) ch = ch * 256 + header[i];
-    return ch;
-  }
-  return octal(header, start, length);
-}
-function inside(root, path2) {
-  if (path2 === "" || path2.startsWith("/") || path2.startsWith("\\")) return false;
-  if (/^[A-Za-z]:/.test(path2)) return false;
-  const target = resolve(root, path2);
-  const bottom = resolve(root);
-  return target === bottom || target.startsWith(bottom + sep);
-}
-function unpackArchive(archive, dest) {
-  const entries = tarEntries(gunzipSync(readFileSync(archive)));
-  if (entries.length === 0) throw new DeliveryError(`\u0430\u0440\u0445\u0438\u0432 ${archive} \u043F\u0443\u0441\u0442 \u2014 \u0440\u0430\u0441\u043F\u0430\u043A\u043E\u0432\u044B\u0432\u0430\u0442\u044C \u043D\u0435\u0447\u0435\u0433\u043E`);
-  for (const entry of entries) {
-    if (!inside(dest, entry.name)) throw escapesRoot(archive, entry.name);
-    if (entry.kind === "symlink" || entry.kind === "hardlink") {
-      if (entry.target.startsWith("/") || entry.target.startsWith("\\") || /^[A-Za-z]:/.test(entry.target)) {
-        throw escapesRoot(archive, `${entry.name} \u2192 ${entry.target}`);
-      }
-      const from = entry.kind === "hardlink" ? entry.target : join(dirname(entry.name), entry.target);
-      if (!inside(dest, from)) throw escapesRoot(archive, `${entry.name} \u2192 ${entry.target}`);
-    }
-  }
-  for (const entry of entries) {
-    const path2 = join(dest, entry.name);
-    if (entry.kind === "dir") {
-      mkdirSync(path2, { recursive: true });
-      continue;
-    }
-    mkdirSync(dirname(path2), { recursive: true });
-    if (entry.kind === "symlink") {
-      rmSync(path2, { force: true });
-      symlinkSync(entry.target, path2);
-      continue;
-    }
-    if (entry.kind === "hardlink") {
-      writeFileSync(path2, readFileSync(join(dest, entry.target)));
-      continue;
-    }
-    writeFileSync(path2, entry.body);
-    if ((entry.mode & 73) !== 0) chmodSync(path2, entry.mode & 511);
-  }
-}
-function escapesRoot(archive, name) {
-  return new DeliveryError(
-    `\u0430\u0440\u0445\u0438\u0432 ${archive} \u043F\u044B\u0442\u0430\u0435\u0442\u0441\u044F \u0437\u0430\u043F\u0438\u0441\u0430\u0442\u044C \u0444\u0430\u0439\u043B \u0437\u0430 \u043F\u0440\u0435\u0434\u0435\u043B\u044B \u043F\u0430\u043F\u043A\u0438 \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u043A\u0438: \xAB${name}\xBB.
-\u041D\u0438\u0447\u0435\u0433\u043E \u043D\u0435 \u0440\u0430\u0441\u043F\u0430\u043A\u043E\u0432\u0430\u043D\u043E. \u0421\u043A\u0430\u0447\u0430\u0439 \u0437\u0430\u043D\u043E\u0432\u043E \u2014 \u0432\u0435\u0440\u043E\u044F\u0442\u043D\u0435\u0435 \u0432\u0441\u0435\u0433\u043E, \u0444\u0430\u0439\u043B \u043F\u043E\u0432\u0440\u0435\u0436\u0434\u0451\u043D \u0438\u043B\u0438 \u043F\u043E\u0434\u043C\u0435\u043D\u0451\u043D.`
-  );
-}
-function dirExists(path2) {
-  try {
-    return statSync(path2).isDirectory();
-  } catch {
-    return false;
-  }
-}
 var BODY_ENTRY = "cli.js";
 var BODY_MANIFEST = "shell.json";
 function shellDir(home) {
@@ -15085,50 +14975,100 @@ function removePublication(dir, version2) {
 function publicationMatchesManifest(publication, manifest) {
   return publication.version === manifest.version && publication.artifactSha256 === manifest.body?.sha256 && publication.artifactBytes === manifest.body.bytes;
 }
+var PROBE_TIMEOUT_MS = 6e4;
+var REQUIRED_TOOLS = ["setup", "render", "wait"];
+var PROBE_THREAD = `
+const { parentPort, workerData } = require('node:worker_threads')
+import(workerData.entry).then((body) => {
+  if (typeof body.start !== 'function') throw new Error('\u0432\u0445\u043E\u0434 \u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442\u0430 \u043D\u0435 \u043E\u0442\u0434\u0430\u0451\u0442 start()')
+  return body.start()
+}).catch((trouble) => {
+  parentPort.postMessage(trouble instanceof Error
+    ? { message: trouble.name + ': ' + String(trouble.message).split('\\n')[0], stack: String(trouble.stack || '') }
+    : { message: String(trouble), stack: '' })
+})
+`;
 var probeShell = async (entry) => {
   const probeHome = mkdtempSync(join(tmpdir(), "naparnik-shell-probe-"));
-  const env = {
-    ...process.env,
-    NAPARNIK_HOME: probeHome,
-    NAPARNIK_NO_BODY: "1",
-    NAPARNIK_NO_UPDATE: "1"
-  };
+  const env = {};
+  for (const [name, value] of Object.entries(process.env)) {
+    if (value !== void 0 && name !== "NAPARNIK_API_KEY") env[name] = value;
+  }
+  Object.assign(env, { NAPARNIK_HOME: probeHome, NAPARNIK_NO_BODY: "1", NAPARNIK_NO_UPDATE: "1" });
+  const thread = new Worker(PROBE_THREAD, {
+    eval: true,
+    argv: [],
+    env,
+    stdin: true,
+    stdout: true,
+    stderr: true,
+    workerData: { entry: pathToFileURL(entry).href }
+  });
   try {
-    const version2 = await promisify(execFile)(process.execPath, [entry, "--version"], {
-      timeout: 6e4,
-      encoding: "utf8",
-      env
-    });
-    await new Promise((resolve5, reject) => {
-      const child = spawn(process.execPath, [entry], { stdio: ["pipe", "pipe", "pipe"], env });
+    const named = await new Promise((resolve5, reject) => {
       let output = "";
       let errors = "";
       let finished = false;
-      const timer = setTimeout(() => finish(new Error("\u0442\u0435\u043B\u043E \u043D\u0435 \u043E\u0442\u0432\u0435\u0442\u0438\u043B\u043E \u043D\u0430 initialize/tools-list")), 15e3);
-      const finish = (trouble) => {
+      const timer = setTimeout(
+        () => finish(failure(`\u0442\u0435\u043B\u043E \u043D\u0435 \u043E\u0442\u0432\u0435\u0442\u0438\u043B\u043E \u043D\u0430 initialize/tools-list \u0437\u0430 ${PROBE_TIMEOUT_MS / 1e3} \u0441`)),
+        PROBE_TIMEOUT_MS
+      );
+      const finish = (trouble, said) => {
         if (finished) return;
         finished = true;
         clearTimeout(timer);
-        child.kill();
-        if (trouble === void 0) resolve5();
+        if (trouble === null) resolve5(said ?? "");
         else reject(trouble);
       };
       const send = (message) => {
-        child.stdin.write(`${JSON.stringify(message)}
+        thread.stdin?.write(`${JSON.stringify(message)}
 `);
       };
-      child.stderr.setEncoding("utf8");
-      child.stderr.on("data", (chunk) => {
-        errors += chunk;
+      const failure = (text2, stack = "") => {
+        const trouble = new Error(text2);
+        const said = errors.trim();
+        trouble.stack = [text2, stack, said === "" ? "" : `stderr \u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442\u0430:
+${said.slice(-4e3)}`].filter((part) => part !== "").join("\n");
+        return trouble;
+      };
+      thread.on("message", (message) => {
+        finish(failure(`\u0442\u0435\u043B\u043E \u043D\u0435 \u0437\u0430\u043F\u0443\u0441\u0442\u0438\u043B\u043E\u0441\u044C: ${String(message.message)}`, String(message.stack ?? "")));
       });
-      child.on("error", (trouble) => {
-        finish(trouble);
+      thread.on("error", (trouble) => {
+        finish(failure(`\u0442\u0435\u043B\u043E \u0443\u043F\u0430\u043B\u043E: ${describeFailure(trouble)}`, trouble.stack ?? ""));
       });
-      child.on("exit", (code) => {
-        if (!finished) finish(new Error(`\u0442\u0435\u043B\u043E \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043B\u043E\u0441\u044C \u0441 \u043A\u043E\u0434\u043E\u043C ${String(code)}: ${errors.trim()}`));
+      thread.on("exit", (code) => {
+        finish(failure(`\u0442\u0435\u043B\u043E \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043B\u043E\u0441\u044C \u0441 \u043A\u043E\u0434\u043E\u043C ${String(code)}`));
       });
-      child.stdout.setEncoding("utf8");
-      child.stdout.on("data", (chunk) => {
+      thread.stderr.setEncoding("utf8");
+      thread.stderr.on("data", (chunk) => {
+        errors += chunk;
+      });
+      let version2 = null;
+      const answer = (reply) => {
+        if (reply.error !== void 0) {
+          finish(failure(`MCP-\u043F\u0440\u043E\u0431\u0430 \u043F\u043E\u043B\u0443\u0447\u0438\u043B\u0430 \u043E\u0442\u043A\u0430\u0437: ${JSON.stringify(reply.error)}`));
+        } else if (reply.id === 1) {
+          const named2 = reply.result?.serverInfo?.version;
+          if (typeof named2 !== "string" || named2 === "") {
+            finish(failure("initialize \u043D\u0435 \u043D\u0430\u0437\u0432\u0430\u043B \u0432\u0435\u0440\u0441\u0438\u044E \u0442\u0435\u043B\u0430"));
+            return;
+          }
+          version2 = named2;
+          send({ jsonrpc: "2.0", method: "notifications/initialized" });
+          send({ jsonrpc: "2.0", id: 2, method: "tools/list", params: {} });
+        } else if (reply.id === 2 && version2 !== null) {
+          const names = new Set((reply.result?.tools ?? []).map((tool) => tool.name));
+          const missing = REQUIRED_TOOLS.filter((name) => !names.has(name));
+          if (missing.length > 0) {
+            finish(failure(`tools/list \u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442\u0430 \u043D\u0435 \u0441\u043E\u0434\u0435\u0440\u0436\u0438\u0442 \u043E\u0431\u044F\u0437\u0430\u0442\u0435\u043B\u044C\u043D\u044B\u0435 \u0438\u043D\u0441\u0442\u0440\u0443\u043C\u0435\u043D\u0442\u044B: ${missing.join(", ")}`));
+            return;
+          }
+          finish(null, version2);
+        }
+      };
+      thread.stdout.setEncoding("utf8");
+      thread.stdout.on("data", (chunk) => {
         output += chunk;
         for (; ; ) {
           const end = output.indexOf("\n");
@@ -15136,36 +15076,14 @@ var probeShell = async (entry) => {
           const line = output.slice(0, end).trim();
           output = output.slice(end + 1);
           if (line === "") continue;
-          let response;
+          let reply;
           try {
-            response = JSON.parse(line);
+            reply = JSON.parse(line);
           } catch {
-            finish(new Error(`\u0442\u0435\u043B\u043E \u043D\u0430\u043F\u0435\u0447\u0430\u0442\u0430\u043B\u043E \u043D\u0435 JSON: ${line.slice(0, 200)}`));
-            return;
-          }
-          if (response.error !== void 0) {
-            finish(new Error(`MCP-\u043F\u0440\u043E\u0431\u0430 \u043F\u043E\u043B\u0443\u0447\u0438\u043B\u0430 \u043E\u0442\u043A\u0430\u0437: ${JSON.stringify(response.error)}`));
+            finish(failure(`\u0442\u0435\u043B\u043E \u043D\u0430\u043F\u0435\u0447\u0430\u0442\u0430\u043B\u043E \u043D\u0435 JSON: ${line.slice(0, 200)}`));
             return;
           }
-          if (response.id === 1) {
-            const expected = version2.stdout.trim();
-            if (response.result?.serverInfo?.version !== expected) {
-              finish(new Error(
-                `initialize \u043F\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043B \u0442\u0435\u043B\u043E \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \xAB${String(response.result?.serverInfo?.version)}\xBB, \u0430 --version \u043E\u0442\u0432\u0435\u0442\u0438\u043B \xAB${expected}\xBB`
-              ));
-              return;
-            }
-            send({ jsonrpc: "2.0", method: "notifications/initialized" });
-            send({ jsonrpc: "2.0", id: 2, method: "tools/list", params: {} });
-          } else if (response.id === 2) {
-            const names = new Set((response.result?.tools ?? []).map((tool) => tool.name));
-            const missing = ["setup", "render", "wait"].filter((name) => !names.has(name));
-            if (missing.length > 0) {
-              finish(new Error(`tools/list \u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442\u0430 \u043D\u0435 \u0441\u043E\u0434\u0435\u0440\u0436\u0438\u0442 \u043E\u0431\u044F\u0437\u0430\u0442\u0435\u043B\u044C\u043D\u044B\u0435 \u0438\u043D\u0441\u0442\u0440\u0443\u043C\u0435\u043D\u0442\u044B: ${missing.join(", ")}`));
-              return;
-            }
-            finish();
-          }
+          answer(reply);
         }
       });
       send({
@@ -15175,8 +15093,10 @@ var probeShell = async (entry) => {
         params: { protocolVersion: "2025-06-18", capabilities: {}, clientInfo: { name: "update-probe", version: "1" } }
       });
     });
-    return version2;
+    return { stdout: `${named}
+` };
   } finally {
+    await thread.terminate();
     rmSync(probeHome, { recursive: true, force: true, maxRetries: 3 });
   }
 };
@@ -15327,9 +15247,14 @@ async function dryRun2(build, expected, trial) {
     const { stdout } = await trial(entry);
     const line = stdout.trim().split("\n").pop() ?? "";
     const said = versionFrom(line);
-    if (said !== expected) return `\u0441\u0431\u043E\u0440\u043A\u0430 \u043F\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043B\u0430\u0441\u044C \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \xAB${said}\xBB, \u0430 \u0436\u0434\u0430\u043B\u0438 \xAB${expected}\xBB`;
+    if (said !== expected) {
+      const trouble = `\u0441\u0431\u043E\u0440\u043A\u0430 \u043F\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043B\u0430\u0441\u044C \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \xAB${said}\xBB, \u0430 \u0436\u0434\u0430\u043B\u0438 \xAB${expected}\xBB`;
+      noteInstallFault("shell-probe", new Error(trouble));
+      return trouble;
+    }
     return null;
   } catch (trouble) {
+    noteInstallFault("shell-probe", trouble);
     return describeFailure(trouble);
   }
 }
@@ -15382,7 +15307,6 @@ function rollbackShell(home) {
     };
   }
 }
-var SOURCES_FILE = "python-sources.json";
 var PUBLICATION_FILE2 = ".publication.json";
 var CANDIDATE_FILE = ".candidate.json";
 function recoverInterruptedPublication(dir) {
@@ -15446,26 +15370,6 @@ function recoverInterruptedPublication(dir) {
 \u041E\u043D\u0430 \u0435\u0449\u0451 \u043D\u0435 \u0440\u0430\u0431\u043E\u0447\u0430\u044F: setup \u043F\u0440\u043E\u0434\u043E\u043B\u0436\u0438\u0442 \u044D\u0442\u043E\u0442 \u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442 \u0438 \u0441\u043D\u0430\u0447\u0430\u043B\u0430 \u0441\u043E\u0431\u0435\u0440\u0451\u0442 \u0435\u0433\u043E \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u0435.`
   };
 }
-function platformKey(os = process.platform, arch2 = process.arch) {
-  if (os === "darwin") return arch2 === "arm64" ? "Darwin-arm64" : arch2 === "x64" ? "Darwin-x86_64" : null;
-  if (os === "win32") return arch2 === "x64" ? "Windows-AMD64" : null;
-  if (os === "linux") return arch2 === "x64" ? "Linux-x86_64" : arch2 === "arm64" ? "Linux-aarch64" : null;
-  return null;
-}
-function pythonSource(engineDir, key = platformKey()) {
-  if (key === null) return null;
-  const file2 = join(engineDir, SOURCES_FILE);
-  if (!existsSync(file2)) return null;
-  const table = JSON.parse(readFileSync(file2, "utf8"));
-  const row = table["platforms"][key];
-  if (row === void 0) return null;
-  return { url: table["base"] + row["tail"], sha256: row.sha256, mb: row["mb"] };
-}
-function pythonVersion(engineDir) {
-  const file2 = join(engineDir, SOURCES_FILE);
-  if (!existsSync(file2)) return "";
-  return JSON.parse(readFileSync(file2, "utf8"))["version"];
-}
 async function installPayload(engine, opts, hooks = {}) {
   if (engine.pathSetByHand()) {
     return {
@@ -15564,7 +15468,7 @@ ${VOICE_CLEANER_NOTE}
       return {
         ok: true,
         text: `\u041D\u0430\u0447\u0438\u043D\u043A\u0430 ${manifest.version} \u043F\u043E\u0434\u0433\u043E\u0442\u043E\u0432\u043B\u0435\u043D\u0430: ${dest}
-\u041E\u043D\u0430 \u0435\u0449\u0451 \u043D\u0435 \u0441\u0442\u0430\u043B\u0430 \u0440\u0430\u0431\u043E\u0447\u0435\u0439. \u0414\u0430\u043B\u044C\u0448\u0435 setup \u043F\u0440\u043E\u0434\u043E\u043B\u0436\u0438\u0442 \u044D\u0442\u043E\u0442 \u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442: \u043F\u043E\u0441\u0442\u0430\u0432\u0438\u0442 python, \u0441\u043E\u0431\u0435\u0440\u0451\u0442 \u0435\u0433\u043E \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u0435 \u0438 \u0442\u043E\u043B\u044C\u043A\u043E \u043F\u043E\u0441\u043B\u0435 \u043F\u0440\u043E\u0432\u0435\u0440\u043E\u043A \u043F\u0435\u0440\u0435\u043A\u043B\u044E\u0447\u0438\u0442 current.
+\u041E\u043D\u0430 \u0435\u0449\u0451 \u043D\u0435 \u0441\u0442\u0430\u043B\u0430 \u0440\u0430\u0431\u043E\u0447\u0435\u0439. \u0414\u0430\u043B\u044C\u0448\u0435 setup \u043F\u0440\u043E\u0434\u043E\u043B\u0436\u0438\u0442 \u044D\u0442\u043E\u0442 \u043A\u0430\u043D\u0434\u0438\u0434\u0430\u0442: \u043F\u043E\u0441\u0442\u0430\u0432\u0438\u0442 \u0431\u0438\u0431\u043B\u0438\u043E\u0442\u0435\u043A\u0438 \u043F\u043E \u0435\u0433\u043E \u0437\u0430\u043C\u043A\u0443 \u0438 \u0442\u043E\u043B\u044C\u043A\u043E \u043F\u043E\u0441\u043B\u0435 \u043F\u0440\u043E\u0432\u0435\u0440\u043E\u043A \u043F\u0435\u0440\u0435\u043A\u043B\u044E\u0447\u0438\u0442 current.
 \u0420\u0430\u0441\u043F\u043E\u0437\u043D\u0430\u0432\u0430\u043D\u0438\u0435 \u0440\u0435\u0447\u0438, \u0432\u044B\u0440\u0435\u0437 \u0433\u0435\u0440\u043E\u044F \u0438 \u0447\u0438\u0441\u0442\u043A\u0430 \u0433\u043E\u043B\u043E\u0441\u0430 \u0432 \u043D\u0435\u0433\u043E \u043D\u0435 \u0432\u0445\u043E\u0434\u044F\u0442: \u043E\u043D\u0438 \u0441\u0442\u0430\u0432\u044F\u0442\u0441\u044F \u043E\u0442\u0434\u0435\u043B\u044C\u043D\u044B\u043C\u0438 \u0448\u0430\u0433\u0430\u043C\u0438 \u0438 \u0442\u043E\u043B\u044C\u043A\u043E \u043F\u043E \u043F\u0440\u043E\u0441\u044C\u0431\u0435 \u0447\u0435\u043B\u043E\u0432\u0435\u043A\u0430.`
       };
     });
@@ -15604,113 +15508,6 @@ async function deliver(manifest, dest, intakeNear, key, baseCurrent, hooks) {
     discardVersionStage(stage);
   }
 }
-async function installPython(engine, opts) {
-  try {
-    return await withVersionLock(
-      engine.versionsDir(),
-      async () => installPythonUnderLock(engine, opts)
-    );
-  } catch (trouble) {
-    if (trouble instanceof VersionLockError) return { ok: false, text: trouble.message };
-    return { ok: false, text: troubleText("Python \u0441\u043A\u0430\u0447\u0430\u0442\u044C \u043D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C", trouble) };
-  }
-}
-async function installPythonUnderLock(engine, opts) {
-  const place = opts.version === void 0 ? engine.place() : engine.placeForVersion(opts.version);
-  if (place === null) {
-    return { ok: false, text: engine.whyNoEngine() };
-  }
-  const key = platformKey();
-  const source = pythonSource(place.engine, key);
-  if (source === null || source.sha256 === "") {
-    return {
-      ok: false,
-      text: `\u0413\u043E\u0442\u043E\u0432\u043E\u0439 \u043F\u043E\u0440\u0442\u0430\u0442\u0438\u0432\u043D\u043E\u0439 \u0441\u0431\u043E\u0440\u043A\u0438 Python \u043F\u043E\u0434 \u044D\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043C\u0443 (${key ?? `${process.platform}-${process.arch}`}) \u0443 \u043C\u0435\u043D\u044F \u043D\u0435\u0442.
-\u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u0441\u043A\u0430\u0436\u0438 \u0447\u0435\u043B\u043E\u0432\u0435\u043A\u0443 \u043F\u043E\u0441\u0442\u0430\u0432\u0438\u0442\u044C Python 3.10 \u0438\u043B\u0438 \u043D\u043E\u0432\u0435\u0435 \u0441 python.org/downloads \u0438 \u043F\u0435\u0440\u0435\u0437\u0430\u043F\u0443\u0441\u0442\u0438\u0442\u044C \u043F\u0440\u043E\u0433\u0440\u0430\u043C\u043C\u0443.`
-    };
-  }
-  const dest = join(engine.home(), "bin");
-  const version2 = pythonVersion(place.engine);
-  if (!opts.consent) {
-    return {
-      ok: false,
-      text: `\u041D\u0430 \u044D\u0442\u043E\u0439 \u043C\u0430\u0448\u0438\u043D\u0435 \u043D\u0435\u0442 Python, \u0430 \u0431\u0435\u0437 \u043D\u0435\u0433\u043E \u043C\u043E\u043D\u0442\u0438\u0440\u043E\u0432\u0430\u0442\u044C \u043D\u0435\u0447\u0435\u043C.
-\u041C\u043E\u0433\u0443 \u0441\u043A\u0430\u0447\u0430\u0442\u044C \u043F\u043E\u0440\u0442\u0430\u0442\u0438\u0432\u043D\u044B\u0439 Python ${version2} (${source.mb} \u041C\u0411) \u0432 ${dest}: \u043E\u043D \u043B\u0435\u0436\u0438\u0442 \u043E\u0434\u043D\u043E\u0439 \u043F\u0430\u043F\u043A\u043E\u0439 \u0438 \u0440\u0430\u0431\u043E\u0442\u0430\u0435\u0442 \u043E\u0442\u0442\u0443\u0434\u0430 \u2014 \u0432 \u0441\u0438\u0441\u0442\u0435\u043C\u0443 \u043D\u0438\u0447\u0435\u0433\u043E \u043D\u0435 \u0441\u0442\u0430\u0432\u0438\u0442\u0441\u044F, PATH \u043D\u0435 \u043C\u0435\u043D\u044F\u0435\u0442\u0441\u044F, \u043F\u0440\u0430\u0432\u0430 \u0430\u0434\u043C\u0438\u043D\u0438\u0441\u0442\u0440\u0430\u0442\u043E\u0440\u0430 \u043D\u0435 \u043D\u0443\u0436\u043D\u044B, \u0443\u0434\u0430\u043B\u0438\u0442\u044C \u0437\u043D\u0430\u0447\u0438\u0442 \u0443\u0434\u0430\u043B\u0438\u0442\u044C \u043F\u0430\u043F\u043A\u0443. \u041F\u043E\u0434\u043F\u0438\u0441\u044C \u0444\u0430\u0439\u043B\u0430 \u0443 \u043C\u0435\u043D\u044F \u0435\u0441\u0442\u044C, \u0441\u0432\u0435\u0440\u044E.
-\u0421\u043F\u0440\u043E\u0441\u0438 \u0443 \u0447\u0435\u043B\u043E\u0432\u0435\u043A\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043D\u0438\u0435 \u0438 \u043F\u043E\u0437\u043E\u0432\u0438 setup \u0441 what=all \u0438 consent=true.`
-    };
-  }
-  const pythonDir = join(dest, "python");
-  try {
-    safePythonParent(engine.home(), dest);
-    if (existsSync(pythonDir)) {
-      safePythonDirectory(engine.home(), pythonDir);
-      engine.forgetPython();
-      if (await engine.pythonTrouble() === null) {
-        return {
-          ok: true,
-          text: `Python ${version2} \u0443\u0436\u0435 \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u043B\u0435\u043D: ${pythonDir}
-\u041F\u043E\u0432\u0442\u043E\u0440\u043D\u043E \u043D\u0438\u0447\u0435\u0433\u043E \u043D\u0435 \u0441\u043A\u0430\u0447\u0438\u0432\u0430\u043B.`
-        };
-      }
-      throw new DeliveryError(
-        `\u0412 ${pythonDir} \u0443\u0436\u0435 \u0447\u0442\u043E-\u0442\u043E \u043B\u0435\u0436\u0438\u0442, \u043D\u043E \u0437\u0430\u043F\u0443\u0441\u0442\u0438\u0442\u044C \u044D\u0442\u043E \u043D\u0435 \u0432\u044B\u0448\u043B\u043E. \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043F\u0440\u043E\u0432\u0435\u0440\u044C\u0442\u0435, \u043D\u0435 \u0438\u0434\u0451\u0442 \u043B\u0438 \u0434\u0440\u0443\u0433\u0430\u044F \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u043A\u0430, \u0437\u0430\u0442\u0435\u043C \u0443\u0434\u0430\u043B\u0438\u0442\u0435 \u043E\u0441\u0442\u0430\u0442\u043E\u043A \u0438 \u043F\u043E\u0432\u0442\u043E\u0440\u0438\u0442\u0435.`
-      );
-    }
-    const stage = createVersionStage(engine.versionsDir(), opts.version ?? "0-python-bootstrap");
-    try {
-      const archive = join(stage.root, "python.tar.gz");
-      await downloadFile({ url: source.url, dest: archive, sha256: source.sha256, key: null });
-      unpackArchive(archive, stage.payload);
-      const stagedPython = join(stage.payload, "python");
-      if (!dirExists(stagedPython)) throw new DeliveryError("\u0432 \u0430\u0440\u0445\u0438\u0432\u0435 Python \u043D\u0435\u0442 \u043F\u0430\u043F\u043A\u0438 python");
-      if (dirExists(pythonDir)) {
-        throw new DeliveryError(`\u043F\u0430\u043F\u043A\u0430 ${pythonDir} \u0437\u0430\u043D\u044F\u0442\u0430 \u0434\u0440\u0443\u0433\u0438\u043C \u043F\u0440\u043E\u0446\u0435\u0441\u0441\u043E\u043C. \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043F\u043E\u0432\u0442\u043E\u0440\u0438\u0442\u0435 setup \u043F\u043E\u0437\u0436\u0435`);
-      }
-      renameSync(stagedPython, pythonDir);
-    } finally {
-      discardVersionStage(stage);
-    }
-  } catch (trouble2) {
-    return { ok: false, text: troubleText("Python \u0441\u043A\u0430\u0447\u0430\u0442\u044C \u043D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C", trouble2) };
-  }
-  engine.forgetPython();
-  const trouble = await engine.pythonTrouble();
-  if (trouble !== null) {
-    return {
-      ok: false,
-      text: `Python \u0441\u043A\u0430\u0447\u0430\u043B\u0441\u044F \u0438 \u0440\u0430\u0441\u043F\u0430\u043A\u043E\u0432\u0430\u043B\u0441\u044F \u0432 ${pythonDir}, \u043D\u043E \u043D\u0435 \u0437\u0430\u043F\u0443\u0441\u0442\u0438\u043B\u0441\u044F.
-${trouble}`
-    };
-  }
-  return {
-    ok: true,
-    text: `Python ${version2} \u043F\u043E\u0441\u0442\u0430\u0432\u043B\u0435\u043D: ${pythonDir}
-\u0412 \u0441\u0438\u0441\u0442\u0435\u043C\u0443 \u043D\u0438\u0447\u0435\u0433\u043E \u043D\u0435 \u0441\u0442\u0430\u0432\u0438\u043B\u043E\u0441\u044C. \u0414\u0430\u043B\u044C\u0448\u0435 \u2014 setup \u0441 what=all.`
-  };
-}
-function safePythonParent(home, parent) {
-  mkdirSync(parent, { recursive: true });
-  const stat = lstatSync(parent);
-  if (stat.isSymbolicLink() || !stat.isDirectory()) {
-    throw new DeliveryError(`${parent} \u0434\u043E\u043B\u0436\u0435\u043D \u0431\u044B\u0442\u044C \u043E\u0431\u044B\u0447\u043D\u043E\u0439 \u043F\u0430\u043F\u043A\u043E\u0439 \u0432\u043D\u0443\u0442\u0440\u0438 \u0434\u043E\u043C\u0430 \u041D\u0430\u043F\u0430\u0440\u043D\u0438\u043A\u0430`);
-  }
-  const homeReal = realpathSync(home);
-  const parentReal = realpathSync(parent);
-  if (!parentReal.startsWith(homeReal + sep)) {
-    throw new DeliveryError(`${parent} \u0432\u044B\u0448\u0435\u043B \u0437\u0430 \u043F\u0440\u0435\u0434\u0435\u043B\u044B \u0434\u043E\u043C\u0430 \u041D\u0430\u043F\u0430\u0440\u043D\u0438\u043A\u0430`);
-  }
-}
-function safePythonDirectory(home, pythonDir) {
-  const stat = lstatSync(pythonDir);
-  if (stat.isSymbolicLink() || !stat.isDirectory()) {
-    throw new DeliveryError(`${pythonDir} \u0434\u043E\u043B\u0436\u0435\u043D \u0431\u044B\u0442\u044C \u043E\u0431\u044B\u0447\u043D\u043E\u0439 \u043F\u0430\u043F\u043A\u043E\u0439`);
-  }
-  const homeReal = realpathSync(home);
-  const pythonReal = realpathSync(pythonDir);
-  if (!pythonReal.startsWith(homeReal + sep)) {
-    throw new DeliveryError(`${pythonDir} \u0432\u044B\u0448\u0435\u043B \u0437\u0430 \u043F\u0440\u0435\u0434\u0435\u043B\u044B \u0434\u043E\u043C\u0430 \u041D\u0430\u043F\u0430\u0440\u043D\u0438\u043A\u0430`);
-  }
-}
 function troubleText(what, trouble) {
   const tail2 = trouble instanceof DeliveryError ? trouble.message : trouble instanceof Error ? trouble.message : String(trouble);
   return `${what}, \u043D\u0438\u0447\u0435\u0433\u043E \u043D\u0435 \u043C\u0435\u043D\u044F\u043B.
@@ -16888,6 +16685,10 @@ function cardRows(readiness) {
   }));
   return rows.map((row) => ({ ...row, mb: row.state === "ok" ? 0 : row.mb, say: rowWords(row.state, row.mb) }));
 }
+var FOR_MODEL = /\bsetup\b|\bwait\b|what=|consent|\bjob\b|Скажи человеку|Спроси человека|скажи ему|перескажи/i;
+function forHuman(line) {
+  return FOR_MODEL.test(line) ? "" : line;
+}
 function setupCard(o) {
   const rows = cardRows(o.readiness);
   const missingMb = rows.filter((row) => row.state === "missing").reduce((all, row) => all + row.mb, 0);
@@ -16899,7 +16700,7 @@ function setupCard(o) {
     next = `\u041D\u0430\u043F\u0438\u0448\u0438 \xAB\u0441\u043A\u0430\u0447\u0430\u0439\xBB \u2014 \u0441\u043A\u0430\u0447\u0430\u044E ${o.noEngine ? "\u043C\u043E\u043D\u0442\u0430\u0436" : "Python"}.`;
   } else if (o.readiness === null) {
     title = o.title ?? TITLE_UNKNOWN;
-    next = o.note ?? "";
+    next = forHuman(o.note ?? "");
   } else if (!ready) {
     title = missingMb ? `\u041D\u0435\u043E\u0431\u0445\u043E\u0434\u0438\u043C\u043E \u0441\u043A\u0430\u0447\u0430\u0442\u044C ${weight(missingMb)} \u0434\u043B\u044F \u043F\u043E\u043B\u043D\u043E\u0446\u0435\u043D\u043D\u043E\u0439 \u0440\u0430\u0431\u043E\u0442\u044B` : "\u041D\u0435 \u0432\u0441\u0451 \u0433\u043E\u0442\u043E\u0432\u043E \u0434\u043B\u044F \u043F\u043E\u043B\u043D\u043E\u0446\u0435\u043D\u043D\u043E\u0439 \u0440\u0430\u0431\u043E\u0442\u044B";
     next = missingMb ? `\u041D\u0430\u043F\u0438\u0448\u0438 \xAB\u0441\u043A\u0430\u0447\u0430\u0439\xBB \u2014 \u0441\u043A\u0430\u0447\u0430\u044E ${weight(missingMb)}.` : "\u041D\u0430\u043F\u0438\u0448\u0438 \xAB\u0441\u043A\u0430\u0447\u0430\u0439\xBB \u2014 \u043F\u043E\u0441\u0442\u0430\u0432\u043B\u044E, \u0447\u0435\u0433\u043E \u043D\u0435 \u0445\u0432\u0430\u0442\u0430\u0435\u0442.";
@@ -18055,8 +17856,6 @@ function nameOrRefusal(candidate) {
 \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043D\u0430\u0437\u043E\u0432\u0438 \u0448\u0430\u0433 \u043E\u0434\u043D\u0438\u043C \u0441\u043B\u043E\u0432\u043E\u043C \u2014 \u0442\u0430\u043A, \u043A\u0430\u043A \u043D\u0430\u0437\u044B\u0432\u0430\u0435\u0442\u0441\u044F \u0435\u0433\u043E \u043F\u0430\u043F\u043A\u0430. \u0421\u0432\u043E\u0439 \u0448\u0430\u0433 \u043B\u0435\u0436\u0438\u0442 \u0432 \`mine/steps/<\u0438\u043C\u044F>\` \u0432 \u0434\u043E\u043C\u0435 \u041D\u0430\u043F\u0430\u0440\u043D\u0438\u043A\u0430, \u043D\u0430\u0448\u0438 \u043F\u0435\u0440\u0435\u0447\u0438\u0441\u043B\u044F\u0435\u0442 setup, \u0438\u043C\u044F \u0443 \u043A\u0430\u0436\u0434\u043E\u0433\u043E \u0441\u0442\u043E\u0438\u0442 \u0432 \u0441\u043A\u043E\u0431\u043A\u0430\u0445.`
   };
 }
-
-// src/setup-job.ts
 var SETUP_JOB_MARK = "setup-";
 function isSetupJob(id) {
   return id.startsWith(SETUP_JOB_MARK);
@@ -18071,13 +17870,108 @@ var CHECK = "\u041F\u0440\u043E\u0432\u0435\u0440\u044F\u044E, \u0447\u0442\u043
 var INSTALL_NEW = "\u0421\u0442\u0430\u0432\u043B\u044E \u043D\u043E\u0432\u0443\u044E \u0432\u0435\u0440\u0441\u0438\u044E";
 var MISSING = "\u0421\u0442\u0430\u0432\u043B\u044E \u043D\u0435\u0434\u043E\u0441\u0442\u0430\u044E\u0449\u0435\u0435";
 var works = /* @__PURE__ */ new Map();
-function running() {
-  for (const work of works.values()) if (work.ended === null) return work;
+var JOBS_DIR = "jobs";
+var JOBS_KEPT2 = 10;
+var BEAT_MS = 1e4;
+var STALE_MS = 6e4;
+var JOB_ID = /^setup-[\w-]{1,80}$/;
+function running(home, clock) {
+  for (const work of works.values()) if (work.ended === null) return work.id;
+  if (home === null) return null;
+  for (const record2 of records(home)) {
+    if (record2.ended === null && alive(record2, clock)) return record2.id;
+  }
   return null;
 }
-function startSetupJob(what, run, clock = Date.now) {
-  const already = running();
-  if (already !== null) return already.id;
+function records(home) {
+  let names;
+  try {
+    names = readdirSync(join(home, JOBS_DIR)).filter((name) => name.endsWith(".json"));
+  } catch {
+    return [];
+  }
+  return names.sort().reverse().map((name) => load(home, name.slice(0, -".json".length))).filter((record2) => record2 !== null);
+}
+function load(home, id) {
+  if (!JOB_ID.test(id)) return null;
+  try {
+    const value = JSON.parse(readFileSync(join(home, JOBS_DIR, `${id}.json`), "utf8"));
+    if (value.id !== id || typeof value.what !== "string" || typeof value.started !== "number" || !Array.isArray(value.stages) || typeof value.at !== "number" || typeof value.pid !== "number" || typeof value.beat !== "number") return null;
+    return {
+      id,
+      what: value.what,
+      started: value.started,
+      stages: value.stages.map(String),
+      at: value.at,
+      message: typeof value.message === "string" ? value.message : "",
+      ended: value.ended ?? null,
+      pid: value.pid,
+      beat: value.beat
+    };
+  } catch {
+    return null;
+  }
+}
+function alive(record2, clock) {
+  if (clock() - record2.beat > STALE_MS) return false;
+  try {
+    process.kill(record2.pid, 0);
+    return true;
+  } catch (trouble) {
+    return trouble.code === "EPERM";
+  }
+}
+function save(work, clock) {
+  if (work.home === null) return;
+  try {
+    const dir = join(work.home, JOBS_DIR);
+    mkdirSync(dir, { recursive: true });
+    const file2 = join(dir, `${work.id}.json`);
+    const temp = `${file2}.${process.pid}.tmp`;
+    const record2 = {
+      id: work.id,
+      what: work.what,
+      started: work.started,
+      stages: work.stages,
+      at: work.at,
+      message: work.message,
+      ended: work.ended,
+      pid: process.pid,
+      beat: clock()
+    };
+    writeFileSync(temp, JSON.stringify(record2), "utf8");
+    renameSync(temp, file2);
+  } catch {
+  }
+}
+function prune2(home) {
+  try {
+    const dir = join(home, JOBS_DIR);
+    const names = readdirSync(dir).filter((name) => JOB_ID.test(name.replace(/\.json$/, ""))).sort();
+    for (const name of names.slice(0, Math.max(0, names.length - JOBS_KEPT2))) rmSync(join(dir, name), { force: true });
+  } catch {
+  }
+}
+function fromDisk(home, id, clock) {
+  const record2 = load(home, id);
+  if (record2 === null) return null;
+  if (record2.ended !== null || alive(record2, clock)) return record2;
+  return {
+    ...record2,
+    ended: {
+      at: record2.beat,
+      ending: {
+        ok: false,
+        trouble: "\u041E\u0431\u043D\u043E\u0432\u043B\u0435\u043D\u0438\u0435 \u043E\u0431\u043E\u0440\u0432\u0430\u043B\u043E\u0441\u044C: \u043F\u0440\u043E\u0433\u0440\u0430\u043C\u043C\u0430, \u043A\u043E\u0442\u043E\u0440\u0430\u044F \u0435\u0433\u043E \u0432\u0435\u043B\u0430, \u0437\u0430\u043A\u0440\u044B\u043B\u0430\u0441\u044C \u043F\u043E\u0441\u0440\u0435\u0434\u0438 \u0440\u0430\u0431\u043E\u0442\u044B. \u041F\u0440\u0435\u0436\u043D\u044F\u044F \u0432\u0435\u0440\u0441\u0438\u044F \u043D\u0430 \u043C\u0435\u0441\u0442\u0435, \u043C\u043E\u043D\u0442\u0438\u0440\u043E\u0432\u0430\u0442\u044C \u043C\u043E\u0436\u043D\u043E.",
+        advice: "\u041D\u0430\u043F\u0438\u0448\u0438 \xAB\u043E\u0431\u043D\u043E\u0432\u0438\xBB \u0435\u0449\u0451 \u0440\u0430\u0437 \u2014 \u043D\u0430\u0447\u043D\u0443 \u0437\u0430\u043D\u043E\u0432\u043E.",
+        report: `\u041F\u0440\u043E\u0446\u0435\u0441\u0441 \u043E\u0431\u043E\u043B\u043E\u0447\u043A\u0438 ${record2.pid}, \u043A\u043E\u0442\u043E\u0440\u044B\u0439 \u0432\u0451\u043B \u0437\u0430\u0434\u0430\u0447\u0443, \u043F\u0440\u043E\u043F\u0430\u043B \u043D\u0430 \u044D\u0442\u0430\u043F\u0435 \xAB${record2.stages[record2.at - 1] ?? CHECK}\xBB.`
+      }
+    }
+  };
+}
+function startSetupJob(what, run, clock = Date.now, home = null) {
+  const already = running(home, clock);
+  if (already !== null) return already;
   const started = clock();
   const id = `${SETUP_JOB_MARK}${new Date(started).toISOString().replace(/[:.]/g, "-")}`;
   const work = {
@@ -18088,23 +17982,31 @@ function startSetupJob(what, run, clock = Date.now) {
     at: 1,
     message: "",
     ended: null,
-    done: Promise.resolve()
+    done: Promise.resolve(),
+    home
   };
   const control = {
     plan(stages) {
       work.stages = stages;
       work.at = Math.min(work.at, stages.length);
+      save(work, clock);
     },
     go(stage) {
       const index = work.stages.indexOf(stage);
       if (index >= 0) work.at = index + 1;
       work.message = "";
+      save(work, clock);
     },
     line(text2) {
       work.message = text2;
+      save(work, clock);
     }
   };
   works.set(id, work);
+  if (home !== null) prune2(home);
+  save(work, clock);
+  const beat = home === null ? null : setInterval(() => save(work, clock), BEAT_MS);
+  beat?.unref();
   work.done = collectJobInstallFaults(id, () => run(control).catch((trouble) => {
     noteInstallFault("update-job", trouble);
     return {
@@ -18115,15 +18017,17 @@ function startSetupJob(what, run, clock = Date.now) {
     };
   })).then((ending) => {
     work.ended = { at: clock(), ending };
+    if (beat !== null) clearInterval(beat);
+    save(work, clock);
   });
   return id;
 }
 function quiet(line) {
   return line.replace(/^⚠\s*/, "").replace(/^Что делать:/, "\u0421\u043E\u0432\u0435\u0442:");
 }
-function setupJobText(id, clock = Date.now) {
-  const work = works.get(id);
-  if (work === void 0) return null;
+function setupJobText(id, clock = Date.now, home = null) {
+  const work = works.get(id) ?? (home === null ? null : fromDisk(home, id, clock));
+  if (work === null) return null;
   const head2 = `\u0417\u0430\u0434\u0430\u043D\u0438\u0435 ${work.id}: ${work.what}`;
   if (work.ended === null) {
     const sec2 = Math.max(0, Math.round((clock() - work.started) / 1e3));
@@ -18147,8 +18051,8 @@ function setupJobText(id, clock = Date.now) {
     `\u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: ${ending.advice}`
   ].join("\n");
 }
-function setupJobReport(id) {
-  const text2 = setupJobText(id);
+function setupJobReport(id, home = null) {
+  const text2 = setupJobText(id, Date.now, home);
   return text2 === null ? null : readJob(text2);
 }
 function weightExact(bytes) {
@@ -18229,9 +18133,10 @@ async function runUpdate(job, deps) {
       updated = true;
       steps.push({ report: outcome.text });
     } else {
+      const cause = causeOf(outcome.text);
       steps.push({
         report: outcome.text,
-        trouble: `\u041D\u043E\u0432\u0430\u044F \u0432\u0435\u0440\u0441\u0438\u044F \u0434\u0432\u0438\u0436\u043A\u0430 \u043D\u0435 \u0432\u0441\u0442\u0430\u043B\u0430 \u2014 \u0440\u0430\u0431\u043E\u0442\u0430\u0435\u0442 \u043F\u0440\u0435\u0436\u043D\u044F\u044F${engineWas === null ? "" : ` ${engineWas}`}, \u043C\u043E\u043D\u0442\u0438\u0440\u043E\u0432\u0430\u0442\u044C \u043C\u043E\u0436\u043D\u043E.`
+        trouble: `\u041D\u043E\u0432\u0430\u044F \u0432\u0435\u0440\u0441\u0438\u044F \u0434\u0432\u0438\u0436\u043A\u0430 \u043D\u0435 \u0432\u0441\u0442\u0430\u043B\u0430${cause === "" ? "" : `: ${cause}`}. \u0420\u0430\u0431\u043E\u0442\u0430\u0435\u0442 \u043F\u0440\u0435\u0436\u043D\u044F\u044F${engineWas === null ? "" : ` ${engineWas}`}, \u043C\u043E\u043D\u0442\u0438\u0440\u043E\u0432\u0430\u0442\u044C \u043C\u043E\u0436\u043D\u043E.`
       });
     }
   }
@@ -18247,6 +18152,11 @@ async function runUpdate(job, deps) {
   if (updated) return { ok: true, say: SAY_RESTART, report };
   return { ok: true, say: installed ? SAY_INSTALLED : SAY_NOTHING, report };
 }
+function causeOf(text2) {
+  const line = text2.split("\n").map((one) => one.trim()).find((one) => one !== "" && !/^(Новая версия|Версия) \S+ не встала/.test(one) && !/^Что делать:/.test(one)) ?? "";
+  const phrase = (line.split(/\.\s|\s—\s|;\s/)[0] ?? "").replace(/\s*\([^)]*\)/g, "").replace(/\.$/, "").trim();
+  return phrase === "" ? "" : phrase[0].toLowerCase() + phrase.slice(1);
+}
 async function deliverMissing(job, deps) {
   const answer = await deps.installMissing();
   if (answer.type === "error") {
@@ -18346,25 +18256,15 @@ async function installStep(engine, asked, key, baseUrl, tell) {
         `\u041A\u0430\u043D\u0434\u0438\u0434\u0430\u0442 ${candidate.version} \u0443\u0436\u0435 \u043F\u043E\u0434\u0433\u043E\u0442\u043E\u0432\u043B\u0435\u043D, \u043D\u043E \u0435\u0449\u0451 \u043D\u0435 \u0440\u0430\u0431\u043E\u0447\u0438\u0439. \u0421\u043F\u0440\u043E\u0441\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043D\u0438\u0435 \u0441\u043E\u0431\u0440\u0430\u0442\u044C \u0435\u0433\u043E \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u0435 \u0438 \u043F\u043E\u0437\u043E\u0432\u0438 setup \u0441 consent=true.`
       );
     }
-    let bootstrapText = "";
     const extras = step === "all" ? "later" : "now";
-    const activated = await continuePreparedCandidate(engine, candidate, async ({ candidate: locked }) => {
-      if (await engine.pythonTrouble() === null) {
-        return { ok: true, text: "Python \u0443\u0436\u0435 \u0434\u043E\u0441\u0442\u0443\u043F\u0435\u043D; \u043F\u043E\u0432\u0442\u043E\u0440\u043D\u043E \u043D\u0438\u0447\u0435\u0433\u043E \u043D\u0435 \u0441\u043A\u0430\u0447\u0438\u0432\u0430\u043B." };
-      }
-      const python2 = await installPythonUnderLock(engine, { consent, version: locked.version });
-      bootstrapText = python2.text;
-      return python2;
-    }, void 0, extras);
+    const activated = await continuePreparedCandidate(engine, candidate, void 0, extras);
     if (!activated.ok) return toolError(activated.text);
     engine.forgetPlace();
-    if (step === "python") {
-      return toolSuccess(`${bootstrapText}
-${activated.text}`.trim());
-    }
+    engine.forgetPython();
+    if (step === "python") return toolSuccess(activated.text);
     if (step === "all") {
       const ready = `${activated.text}
-\u041A\u0430\u043D\u0434\u0438\u0434\u0430\u0442 \u043F\u043E\u0441\u0442\u0430\u0432\u0438\u043B ffmpeg, \u0441\u043E\u0431\u0440\u0430\u043B \u0441\u0432\u043E\u0451 \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u0435 \u0438 \u043F\u0440\u043E\u0448\u0451\u043B env-check. \u0412\u0441\u0451 \u043E\u0431\u044F\u0437\u0430\u0442\u0435\u043B\u044C\u043D\u043E\u0435 \u0433\u043E\u0442\u043E\u0432\u043E.`;
+\u041A\u0430\u043D\u0434\u0438\u0434\u0430\u0442 \u043F\u043E\u0441\u0442\u0430\u0432\u0438\u043B \u0431\u0438\u0431\u043B\u0438\u043E\u0442\u0435\u043A\u0438 \u043F\u043E \u0441\u0432\u043E\u0435\u043C\u0443 \u0437\u0430\u043C\u043A\u0443 \u0438 \u043F\u0440\u043E\u0448\u0451\u043B env-check. \u0412\u0441\u0451 \u043E\u0431\u044F\u0437\u0430\u0442\u0435\u043B\u044C\u043D\u043E\u0435 \u0433\u043E\u0442\u043E\u0432\u043E.`;
       const later = await installStep(engine, asked, key, baseUrl, tell);
       if (later.type === "error") {
         return toolSuccess(
@@ -18378,16 +18278,15 @@ ${activated.text}`.trim());
 ${EXTRAS_LATER}`), later]);
     }
   }
-  if (step === "python" || step === "all") {
-    if (await engine.pythonTrouble() !== null) {
-      const result = await installPython(engine, { consent });
-      if (!result.ok) return toolError(result.text);
-      if (step === "python") return toolSuccess(result.text);
-      return toolSuccess(result.text + "\n\u041F\u043E\u0437\u043E\u0432\u0438 setup \u0441 what=all \u0435\u0449\u0451 \u0440\u0430\u0437.");
-    }
-  }
   const place = engine.place();
   if (place === null) return toolError(engine.whyNoEngine());
+  if (consent && await engine.pythonTrouble() !== null) {
+    try {
+      await engine.bringPython(place);
+    } catch (trouble) {
+      return toolError(`\u041F\u0438\u0442\u043E\u043D \u043C\u043E\u043D\u0442\u0430\u0436\u0430 \u043F\u043E\u0441\u0442\u0430\u0432\u0438\u0442\u044C \u043D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C: ${describeFailure(trouble)}. \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043F\u043E\u0432\u0442\u043E\u0440\u0438 setup.`);
+    }
+  }
   const common = [
     "--pack",
     place.pack,
@@ -18623,7 +18522,7 @@ async function lookAround(engine, model, key, baseUrl) {
     shell: shellNews,
     ...o.noEngine === true ? { noEngine: true } : {},
     ...o.noPython === true ? { noPython: true } : {},
-    note: firstLine(said),
+    note: o.note ?? firstLine(said),
     shellVersion: VERSION
   }));
   const shell = updateShell(engine, false, key, baseUrl, NEWS_POINTER_MS, toShell);
@@ -18635,10 +18534,10 @@ async function lookAround(engine, model, key, baseUrl) {
     });
     return card(together([toolSuccess(payload.text), await shell]), { noEngine: true });
   }
-  if (await engine.pythonTrouble() !== null) {
-    const python = await installPython(engine, { consent: false });
+  const noPython = await engine.pythonTrouble();
+  if (noPython !== null) {
     return card(together([
-      toolSuccess(python.text),
+      toolSuccess(noPython),
       await updateEngine(engine, false, key, baseUrl, NEWS_POINTER_MS, toEngine),
       await shell
     ]), { noPython: true });
@@ -18650,7 +18549,7 @@ async function lookAround(engine, model, key, baseUrl) {
   ]);
   return card(
     together([newsForModel(shellNews, engineNews), machine.result, news, own]),
-    { readiness: machine.readiness }
+    { readiness: machine.readiness, note: firstLine(together([machine.result, news, own])) }
   );
 }
 function newsForModel(shell, engine) {
@@ -18680,8 +18579,8 @@ function startUpdate(engine, what, key, baseUrl) {
     what,
     pointerMs: ASKED_POINTER_MS,
     installMissing: () => installMissing(engine, key, baseUrl, void 0)
-  }));
-  const report = setupJobReport(id);
+  }), Date.now, engine.home());
+  const report = setupJobReport(id, engine.home());
   return toolSuccess(
     `\u0417\u0430\u0434\u0430\u0447\u0430 ${id}: ${report?.what ?? title}.
 \u0418\u0434\u0451\u0442 \u043D\u0430 \u043A\u043E\u043C\u043F\u044C\u044E\u0442\u0435\u0440\u0435 \u043F\u043E\u043B\u044C\u0437\u043E\u0432\u0430\u0442\u0435\u043B\u044F: \u043F\u0440\u043E\u0432\u0435\u0440\u044E, \u0447\u0442\u043E \u0432\u044B\u0448\u043B\u043E, \u0441\u043A\u0430\u0447\u0430\u044E \u0438 \u043F\u043E\u0441\u0442\u0430\u0432\u043B\u044E. \u041F\u043E\u043B\u043E\u0441\u0430 \u0443 \u0447\u0435\u043B\u043E\u0432\u0435\u043A\u0430 \u043E\u0431\u043D\u043E\u0432\u043B\u044F\u0435\u0442\u0441\u044F \u0441\u0430\u043C\u0430. \u041F\u043E\u0437\u043E\u0432\u0438 wait \u0441 job "` + id + '" \u2014 \u0434\u043E\u0436\u0434\u0451\u0442\u0441\u044F \u0438 \u0441\u043A\u0430\u0436\u0435\u0442, \u0447\u0435\u043C \u043A\u043E\u043D\u0447\u0438\u043B\u043E\u0441\u044C; setup \u043F\u043E\u0432\u0442\u043E\u0440\u043D\u043E \u043D\u0435 \u0437\u043E\u0432\u0438. \u0413\u043E\u0442\u043E\u0432\u043E \u2014 \u043F\u0435\u0440\u0435\u0441\u043A\u0430\u0436\u0438 \u0441\u0442\u0440\u043E\u043A\u0443 \xAB\u0427\u0435\u043B\u043E\u0432\u0435\u043A\u0443\xBB.',
@@ -18713,10 +18612,8 @@ async function askBeforeHeavy(engine, step, model, key, baseUrl) {
     });
     return toolSuccess(payload.text);
   }
-  if (await engine.pythonTrouble() !== null) {
-    const python = await installPython(engine, { consent: false });
-    return toolSuccess(python.text);
-  }
+  const noPython = await engine.pythonTrouble();
+  if (noPython !== null) return toolSuccess(noPython);
   return asToolResult(await engine.command([
     "env-install",
     "--pack",
@@ -18821,7 +18718,7 @@ var TRIALS_STEP = "\u041F\u043E\u0442\u043E\u043C \u0441\u043E\u0431\u0435\u0440
 async function followWork(engine, asked, pace = realPace, tell) {
   const ask2 = async () => {
     if (!isSetupJob(asked.job)) return engine.command(["job", asked.job]);
-    const text2 = setupJobText(asked.job);
+    const text2 = setupJobText(asked.job, Date.now, engine.home());
     return text2 !== null ? { ok: true, text: text2 } : {
       ok: false,
       text: `\u0417\u0430\u0434\u0430\u0447\u0438 ${asked.job} \u043D\u0435\u0442: \u0435\u0451 \u0432\u0451\u043B \u043F\u0440\u0435\u0436\u043D\u0438\u0439 \u0437\u0430\u043F\u0443\u0441\u043A \u043F\u0440\u043E\u0433\u0440\u0430\u043C\u043C\u044B. \u0427\u0442\u043E \u0434\u0435\u043B\u0430\u0442\u044C: \u043F\u043E\u0437\u043E\u0432\u0438 setup \u2014 \u043E\u043D \u0441\u043A\u0430\u0436\u0435\u0442, \u0447\u0442\u043E \u0441\u0442\u043E\u0438\u0442 \u0441\u0435\u0439\u0447\u0430\u0441.`
@@ -23129,4 +23026,4 @@ ${inTable}`, file2);
   };
 }
 
-export { CrashReporter, DEFAULT_HOME, DeliveryError, Engine, ForeignBlockError, INSIDE_PYTHON, INSTALL_STEPS, KEEP_COPIES, KEEP_VERSIONS, LONG_STEPS, MANIFEST_TIMEOUT_MS, MANIFEST_URL, MARKER, MIN_ENGINE, McpServer, NaparnikApiClient, NaparnikAuthError, NaparnikClientError, NaparnikConfigError, NaparnikError, NaparnikInsufficientBalanceError, NaparnikScopeError, NaparnikServerError, NaparnikTimeoutError, PAUSE_HOURS, SERVER_NAME, SOURCES_FILE, START_SEC, StdioServerTransport, TOOL_SEC, USER_AGENT, VERSION, WHERE_TO_GET_KEY, Wakefulness, buildAll, buildBlock, buildResources, bundleUrlFor, chooseBody, compare, configPath, currentMachineFingerprint, decide, decideShell, defineTool, deploy, downloadFile, fetchManifest, fetchShellManifest, fileOrRefusal, findBlock, fromHost, fromNpxCache, handOverToBody, inside, install, installPayload, installPython, installStep, installedShell, jsonSchemaOf, keyFromBlock, keyInTable, lastLine, loadConfig, manifestUrlFor, markChecked, markChecked2, markCurrent2 as markCurrent, parseEngineManifest, parseFailure, path, platformKey, previousVersion2 as previousVersion, probe, pythonSource, readConfig, realPace, refusalFor, remove, reportInstallFaults, rollback, rollbackShell, shellDir, systemBlocker, tarEntries, tidyOld2 as tidyOld, timeToCheck, timeToCheck2, unpackArchive, updateEngine, watchProcessCrashes, withArgs };
+export { CrashReporter, DEFAULT_HOME, DeliveryError, Engine, ForeignBlockError, INSTALL_STEPS, KEEP_COPIES, KEEP_VERSIONS, LOCK_FILE, LONG_STEPS, MANIFEST_TIMEOUT_MS, MANIFEST_URL, MARKER, MIN_ENGINE, McpServer, NaparnikApiClient, NaparnikAuthError, NaparnikClientError, NaparnikConfigError, NaparnikError, NaparnikInsufficientBalanceError, NaparnikScopeError, NaparnikServerError, NaparnikTimeoutError, PAUSE_HOURS, SERVER_NAME, START_SEC, StdioServerTransport, TOOL_SEC, USER_AGENT, VERSION, WHERE_TO_GET_KEY, Wakefulness, bringPython, buildAll, buildBlock, buildResources, bundleUrlFor, chooseBody, compare, configPath, currentMachineFingerprint, decide, decideShell, defineTool, depFolderName, deploy, downloadFile, fetchManifest, fetchShellManifest, fileOrRefusal, findBlock, fromHost, fromNpxCache, handOverToBody, inside, install, installPayload, installStep, installedShell, jsonSchemaOf, keyFromBlock, keyInTable, lastLine, loadConfig, lockedPython, manifestUrlFor, markChecked, markChecked2, markCurrent2 as markCurrent, parseEngineManifest, parseFailure, path, platformKey, previousVersion2 as previousVersion, probe, readConfig, realPace, refusalFor, remove, reportInstallFaults, rollback, rollbackShell, shellDir, systemBlocker, tarEntries, tidyOld2 as tidyOld, timeToCheck, timeToCheck2, unpackArchive, updateEngine, watchProcessCrashes, withArgs };