@swarmclawai/swarmclaw 1.9.38 → 1.9.39

package/README.md

@@ -151,6 +151,18 @@ openclaw skills install swarmclaw
 
 [Browse on ClawHub](https://clawhub.ai/waydelyle/swarmclaw)
 
+## v1.9.39 Highlights
+
+Scheduled-run reliability release: stale workspace rebinding, fail-fast credential checks, and durable delivery evidence for schedule-driven sends.
+
+- **Legacy workspace cwd migration.** Scheduled reruns and reused schedule sessions pinned to a pre-migration workspace root (e.g. `~/.swarmclaw/workspace`) are now rebound to the current `WORKSPACE_DIR` automatically; intentional custom working directories are never touched.
+- **Orphan recovery dedup.** Startup queue recovery now recovers each orphaned task once instead of re-logging it every tick, and dead-letters tasks that repeatedly return to the queue without starting.
+- **Schedule delivery status.** Every scheduled run now writes `lastDeliveryStatus`/`lastDeliveryError` back to its schedule, so failures are visible without digging through task records.
+- **Credential preflight for schedules.** Scheduled runs on API-key providers fail fast with an actionable error when no credential resolves, instead of dying on a 401 deep in execution.
+- **Empty-run classification.** Runs that produce no text, no tool calls, and no error now fail with a clear provider-configuration message instead of a generic validation failure.
+- **Durable connector delivery evidence.** Task follow-up sends route through the connector outbox with task/schedule linkage, retries with backoff, and per-run dedupe, so triage can prove whether a scheduled send succeeded, failed, or was never attempted.
+- **Regression coverage.** Added tests for workspace path normalization, orphan recovery, schedule outcome writes, credential preflight, empty-run classification, and outbox-backed follow-ups.
+
 ## v1.9.38 Highlights
 
 PR integration release for provider catalog coverage, OpenRouter context meters, and safer unsigned macOS desktop artifacts.
@@ -488,6 +500,18 @@ Operational docs: https://swarmclaw.ai/docs/observability
 
 ## Releases
 
+### v1.9.39 Highlights
+
+Scheduled-run reliability release: stale workspace rebinding, fail-fast credential checks, and durable delivery evidence for schedule-driven sends.
+
+- **Legacy workspace cwd migration.** Scheduled reruns and reused schedule sessions pinned to a pre-migration workspace root (e.g. `~/.swarmclaw/workspace`) are now rebound to the current `WORKSPACE_DIR` automatically; intentional custom working directories are never touched.
+- **Orphan recovery dedup.** Startup queue recovery now recovers each orphaned task once instead of re-logging it every tick, and dead-letters tasks that repeatedly return to the queue without starting.
+- **Schedule delivery status.** Every scheduled run now writes `lastDeliveryStatus`/`lastDeliveryError` back to its schedule, so failures are visible without digging through task records.
+- **Credential preflight for schedules.** Scheduled runs on API-key providers fail fast with an actionable error when no credential resolves, instead of dying on a 401 deep in execution.
+- **Empty-run classification.** Runs that produce no text, no tool calls, and no error now fail with a clear provider-configuration message instead of a generic validation failure.
+- **Durable connector delivery evidence.** Task follow-up sends route through the connector outbox with task/schedule linkage, retries with backoff, and per-run dedupe, so triage can prove whether a scheduled send succeeded, failed, or was never attempted.
+- **Regression coverage.** Added tests for workspace path normalization, orphan recovery, schedule outcome writes, credential preflight, empty-run classification, and outbox-backed follow-ups.
+
 ### v1.9.38 Highlights
 
 PR integration release for provider catalog coverage, OpenRouter context meters, and safer unsigned macOS desktop artifacts.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@swarmclawai/swarmclaw",
-  "version": "1.9.38",
+  "version": "1.9.39",
   "description": "Build and run autonomous AI agents with OpenClaw, Hermes, multiple model providers, orchestration, delegation, memory, skills, schedules, and chat connectors.",
   "main": "electron-dist/main.js",
   "license": "MIT",
@@ -88,7 +88,7 @@
     "test:cli": "node --test src/cli/*.test.js bin/*.test.js scripts/electron-after-pack.test.mjs scripts/electron-signing-config.test.mjs scripts/ensure-sandbox-browser-image.test.mjs scripts/postinstall.test.mjs scripts/run-next-build.test.mjs scripts/run-next-typegen.test.mjs",
     "test:setup": "tsx --test src/app/api/setup/check-provider/route.test.ts src/lib/server/provider-model-discovery.test.ts src/components/auth/setup-wizard/utils.test.ts src/components/auth/setup-wizard/types.test.ts src/hooks/setup-done-detection.test.ts src/lib/setup-defaults.test.ts src/lib/server/storage-auth.test.ts src/lib/server/storage-auth-docker.test.ts",
     "test:openclaw": "tsx --test src/lib/openclaw/openclaw-agent-id.test.ts src/lib/openclaw/openclaw-endpoint.test.ts src/lib/server/agents/agent-runtime-config.test.ts src/lib/server/build-llm.test.ts src/lib/server/connectors/connector-routing.test.ts src/lib/server/connectors/openclaw.test.ts src/lib/server/connectors/swarmdock.test.ts src/lib/server/gateway/protocol.test.ts src/lib/server/gateways/gateway-topology.test.ts src/lib/server/llm-response-cache.test.ts src/lib/server/mcp-conformance.test.ts src/lib/server/openclaw/agent-resolver.test.ts src/lib/server/openclaw/deploy.test.ts src/lib/server/openclaw/skills-normalize.test.ts src/lib/server/session-tools/openclaw-nodes.test.ts src/lib/server/session-tools/swarmdock.test.ts src/lib/server/tasks/task-quality-gate.test.ts src/lib/server/tasks/task-validation.test.ts src/lib/server/tool-capability-policy.test.ts src/lib/providers/openai.test.ts src/lib/providers/openclaw-exports.test.ts src/app/api/gateways/topology-route.test.ts src/app/api/openclaw/dashboard-url/route.test.ts",
-    "test:runtime": "tsx --test src/lib/a2a/agent-card.test.ts src/lib/agent-planning-mode.test.ts src/lib/agent-config-history.test.ts src/lib/autonomy/supervisor-settings.test.ts src/lib/strip-internal-metadata.test.ts src/lib/provider-sets.test.ts src/lib/providers/opencode-cli.test.ts src/lib/providers/cli-provider-metadata.test.ts src/lib/providers/cli-utils.test.ts src/lib/providers/generic-cli.test.ts src/lib/server/agents/delegation-advisory.test.ts src/lib/server/agents/agent-runtime-config.test.ts src/lib/server/autonomy/supervisor-reflection.test.ts src/lib/server/cli-provider-readiness.test.ts src/lib/server/provider-health.test.ts src/lib/server/provider-diagnostics.test.ts src/lib/server/mcp-gateway-runtime.test.ts src/lib/server/mcp-connection-pool.test.ts src/lib/server/knowledge-sources.test.ts src/lib/server/memory/dream-service.test.ts src/lib/server/memory/memory-consolidation.test.ts src/lib/server/messages/message-repository.test.ts src/lib/server/extension-managed-resources.test.ts src/lib/server/eval/baseline.test.ts src/lib/server/eval/environment-plan.test.ts src/lib/server/chat-execution/chat-execution-grounding.test.ts src/lib/server/chat-execution/chat-turn-preparation.test.ts src/lib/server/chat-execution/compaction-generation-preference.test.ts src/lib/server/chat-execution/iteration-timers.test.ts src/lib/server/chat-execution/post-stream-finalization.test.ts src/lib/server/chat-execution/prompt-sections.planning-mode.test.ts src/lib/server/chat-execution/reasoning-tag-scrubber.test.ts src/lib/server/chats/clear-undo-snapshots.test.ts src/lib/server/chats/session-context-pack.test.ts src/lib/server/connectors/email.test.ts src/lib/server/connectors/slack.test.ts src/lib/server/protocols/protocol-service.test.ts src/lib/server/runtime/run-ledger.test.ts src/lib/server/runtime/queue-retry-policy.test.ts src/lib/server/runs/run-brief.test.ts src/lib/server/runs/run-handoff.test.ts src/lib/server/operations/operation-pulse.test.ts src/lib/server/schedules/schedule-history.test.ts src/lib/server/schedules/schedule-timing.test.ts src/lib/server/schedules/schedule-preview.test.ts src/lib/quality/release-readiness.test.ts src/lib/quality/architecture-health.test.ts src/lib/server/artifacts/artifact-resolver.test.ts src/lib/server/observability/otel-config.test.ts src/lib/server/safe-parse-body.test.ts src/lib/server/missions/mission-templates.test.ts src/lib/server/sharing/share-link-repository.test.ts src/lib/server/sharing/share-resolver.test.ts src/lib/server/tasks/task-execution-workspace.test.ts src/lib/server/tasks/task-execution-policy.test.ts src/lib/server/tasks/task-handoff.test.ts src/lib/server/tasks/task-service.test.ts src/lib/server/session-tools/execute.test.ts src/lib/server/session-tools/manage-tasks.test.ts src/lib/server/session-tools/web-crawl.test.ts src/lib/app/view-constants.test.ts src/lib/quality/quality-summary.test.ts src/app/api/approvals/route.test.ts src/app/api/agents/agents-route.test.ts src/app/api/tasks/tasks-route.test.ts src/app/api/tasks/task-workspace-route.test.ts src/app/api/chats/chat-route.test.ts src/app/api/chats/clear-route.test.ts src/app/api/chats/compact-route.test.ts src/app/api/chats/context-pack-route.test.ts src/app/api/chats/context-status-route.test.ts src/app/api/config-versions/config-versions-route.test.ts src/app/api/runs/run-handoff-route.test.ts src/app/api/search/route.test.ts src/app/api/settings/settings-route.test.ts src/app/api/connectors/connector-doctor-route.test.ts src/app/api/extensions/managed-resources/route.test.ts src/app/api/gateways/control-route.test.ts src/app/api/healthz/route.test.ts src/app/api/logs/route.test.ts src/app/api/portability/export/route.test.ts src/app/api/portability/import/route.test.ts src/app/api/providers/[id]/route.test.ts src/app/api/schedules/preview/route.test.ts src/app/api/schedules/schedule-history-route.test.ts src/app/api/tts/route.test.ts",
+    "test:runtime": "tsx --test src/lib/a2a/agent-card.test.ts src/lib/agent-planning-mode.test.ts src/lib/agent-config-history.test.ts src/lib/autonomy/supervisor-settings.test.ts src/lib/strip-internal-metadata.test.ts src/lib/provider-sets.test.ts src/lib/providers/opencode-cli.test.ts src/lib/providers/cli-provider-metadata.test.ts src/lib/providers/cli-utils.test.ts src/lib/providers/generic-cli.test.ts src/lib/server/agents/delegation-advisory.test.ts src/lib/server/agents/agent-runtime-config.test.ts src/lib/server/autonomy/supervisor-reflection.test.ts src/lib/server/cli-provider-readiness.test.ts src/lib/server/provider-health.test.ts src/lib/server/provider-diagnostics.test.ts src/lib/server/mcp-gateway-runtime.test.ts src/lib/server/mcp-connection-pool.test.ts src/lib/server/knowledge-sources.test.ts src/lib/server/memory/dream-service.test.ts src/lib/server/memory/memory-consolidation.test.ts src/lib/server/messages/message-repository.test.ts src/lib/server/extension-managed-resources.test.ts src/lib/server/eval/baseline.test.ts src/lib/server/eval/environment-plan.test.ts src/lib/server/chat-execution/chat-execution-grounding.test.ts src/lib/server/chat-execution/chat-turn-preparation.test.ts src/lib/server/chat-execution/compaction-generation-preference.test.ts src/lib/server/chat-execution/iteration-timers.test.ts src/lib/server/chat-execution/post-stream-finalization.test.ts src/lib/server/chat-execution/prompt-sections.planning-mode.test.ts src/lib/server/chat-execution/reasoning-tag-scrubber.test.ts src/lib/server/chats/clear-undo-snapshots.test.ts src/lib/server/chats/session-context-pack.test.ts src/lib/server/connectors/email.test.ts src/lib/server/connectors/slack.test.ts src/lib/server/protocols/protocol-service.test.ts src/lib/server/runtime/run-ledger.test.ts src/lib/server/runtime/queue-retry-policy.test.ts src/lib/server/runs/run-brief.test.ts src/lib/server/runs/run-handoff.test.ts src/lib/server/operations/operation-pulse.test.ts src/lib/server/schedules/schedule-history.test.ts src/lib/server/schedules/schedule-timing.test.ts src/lib/server/schedules/schedule-preview.test.ts src/lib/quality/release-readiness.test.ts src/lib/quality/architecture-health.test.ts src/lib/server/artifacts/artifact-resolver.test.ts src/lib/server/observability/otel-config.test.ts src/lib/server/safe-parse-body.test.ts src/lib/server/missions/mission-templates.test.ts src/lib/server/sharing/share-link-repository.test.ts src/lib/server/sharing/share-resolver.test.ts src/lib/server/tasks/task-execution-workspace.test.ts src/lib/server/tasks/task-execution-policy.test.ts src/lib/server/tasks/task-handoff.test.ts src/lib/server/tasks/task-service.test.ts src/lib/server/tasks/task-lifecycle.test.ts src/lib/server/tasks/task-followups.test.ts src/lib/server/tasks/task-result.test.ts src/lib/server/schedules/schedule-lifecycle.test.ts src/lib/server/workspace-paths.test.ts src/lib/server/runtime/queue/orphan-recovery.test.ts src/lib/server/runtime/scheduled-run-preflight.test.ts src/lib/server/session-tools/execute.test.ts src/lib/server/session-tools/manage-tasks.test.ts src/lib/server/session-tools/web-crawl.test.ts src/lib/app/view-constants.test.ts src/lib/quality/quality-summary.test.ts src/app/api/approvals/route.test.ts src/app/api/agents/agents-route.test.ts src/app/api/tasks/tasks-route.test.ts src/app/api/tasks/task-workspace-route.test.ts src/app/api/chats/chat-route.test.ts src/app/api/chats/clear-route.test.ts src/app/api/chats/compact-route.test.ts src/app/api/chats/context-pack-route.test.ts src/app/api/chats/context-status-route.test.ts src/app/api/config-versions/config-versions-route.test.ts src/app/api/runs/run-handoff-route.test.ts src/app/api/search/route.test.ts src/app/api/settings/settings-route.test.ts src/app/api/connectors/connector-doctor-route.test.ts src/app/api/extensions/managed-resources/route.test.ts src/app/api/gateways/control-route.test.ts src/app/api/healthz/route.test.ts src/app/api/logs/route.test.ts src/app/api/portability/export/route.test.ts src/app/api/portability/import/route.test.ts src/app/api/providers/[id]/route.test.ts src/app/api/schedules/preview/route.test.ts src/app/api/schedules/schedule-history-route.test.ts src/app/api/tts/route.test.ts",
     "test:builder": "tsx --test src/features/protocols/builder/utils/builder-template-access.test.ts src/features/protocols/builder/utils/nodes-to-template.test.ts src/features/protocols/builder/utils/template-to-nodes.test.ts src/features/protocols/builder/validators/dag-validator.test.ts",
     "test:e2e": "node --import tsx scripts/browser-e2e-smoke.ts",
     "test:mcp:conformance": "node --import tsx ./scripts/mcp-conformance-check.ts",

package/src/lib/server/autonomy/supervisor-reflection.test.ts

@@ -5,7 +5,7 @@ import path from 'node:path'
 import { spawnSync } from 'node:child_process'
 import { describe, it } from 'node:test'
 
-import { assessAutonomyRun } from '@/lib/server/autonomy/supervisor-reflection'
+import { assessAutonomyRun, classifyRuntimeFailure } from '@/lib/server/autonomy/supervisor-reflection'
 import type { Session } from '@/types'
 
 const repoRoot = path.resolve(path.dirname(new URL(import.meta.url).pathname), '../../../..')
@@ -615,4 +615,13 @@ describe('supervisor-reflection', () => {
     assert.doesNotMatch(String(incident?.details || ''), /<!doctype html>/i)
     assert.match(String(incident?.details || ''), /singleton is not defined/i)
   })
+
+  it('classifies the scheduled-run credential preflight error as provider auth', () => {
+    const failure = classifyRuntimeFailure({
+      source: 'task',
+      message: 'Provider authentication preflight failed: no API credential configured for provider "openai".',
+    })
+    assert.equal(failure.family, 'provider_auth')
+    assert.equal(failure.severity, 'high')
+  })
 })

package/src/lib/server/connectors/outbox.ts

@@ -43,6 +43,10 @@ export interface ConnectorOutboxEntry extends Record<string, unknown> {
   threadId?: string
   ptt?: boolean
   dedupeKey?: string | null
+  /** Originating task, when this entry delivers a task follow-up */
+  taskId?: string | null
+  /** Originating schedule, when the task was schedule-driven */
+  scheduleId?: string | null
   lastError?: string | null
   deliveredAt?: number | null
   lastMessageId?: string | null
@@ -78,8 +82,8 @@ function normalizeEntry(value: unknown): ConnectorOutboxEntry | null {
   if (!id || !channelId) return null
   return {
     id,
-    
-    
+    connectorId: typeof row.connectorId === 'string' ? row.connectorId : undefined,
+    platform: typeof row.platform === 'string' ? row.platform : undefined,
     channelId,
     text: typeof row.text === 'string' ? row.text : '',
     sessionId: typeof row.sessionId === 'string' ? row.sessionId : null,
@@ -99,6 +103,8 @@ function normalizeEntry(value: unknown): ConnectorOutboxEntry | null {
     attemptCount: typeof row.attemptCount === 'number' ? row.attemptCount : 0,
     maxAttempts: typeof row.maxAttempts === 'number' ? row.maxAttempts : DEFAULT_MAX_ATTEMPTS,
     dedupeKey: typeof row.dedupeKey === 'string' ? row.dedupeKey : null,
+    taskId: typeof row.taskId === 'string' ? row.taskId : null,
+    scheduleId: typeof row.scheduleId === 'string' ? row.scheduleId : null,
     lastError: typeof row.lastError === 'string' ? row.lastError : null,
     deliveredAt: typeof row.deliveredAt === 'number' ? row.deliveredAt : null,
     lastMessageId: typeof row.lastMessageId === 'string' ? row.lastMessageId : null,
@@ -301,6 +307,20 @@ export function enqueueConnectorOutbox(
   return { outboxId: entry.id, sendAt: entry.sendAt }
 }
 
+/**
+ * True when a delivery for this dedupe key already reached a successful
+ * terminal state. `findPendingConnectorOutboxByDedupe` only sees non-terminal
+ * entries, so it cannot prevent re-sends after a success.
+ */
+export function hasSentConnectorOutboxForDedupe(dedupeKey: string): boolean {
+  const normalizedKey = dedupeKey.trim()
+  if (!normalizedKey) return false
+  return listEntries().some((entry) =>
+    entry.dedupeKey === normalizedKey
+    && (entry.status === 'sent' || entry.status === 'suppressed'),
+  )
+}
+
 export function findPendingConnectorOutboxByDedupe(dedupeKey: string, now = Date.now()): ConnectorOutboxEntry | null {
   const normalizedKey = dedupeKey.trim()
   if (!normalizedKey) return null

package/src/lib/server/runtime/queue/core.ts

@@ -8,7 +8,8 @@ import { logActivity } from '@/lib/server/activity/activity-log'
 import { loadAgents } from '@/lib/server/agents/agent-repository'
 import { withTransaction } from '@/lib/server/persistence/transaction'
 import { loadQueue, saveQueue } from '@/lib/server/runtime/queue-repository'
-import { loadSchedules, saveSchedules } from '@/lib/server/schedules/schedule-repository'
+import { loadSchedules, saveSchedules, upsertSchedule } from '@/lib/server/schedules/schedule-repository'
+import { applyScheduleRunOutcome } from '@/lib/server/schedules/schedule-lifecycle'
 import { loadSessions, saveSessions } from '@/lib/server/sessions/session-repository'
 import { loadSettings } from '@/lib/server/settings/settings-repository'
 import { loadTasks, saveTasks } from '@/lib/server/tasks/task-repository'
@@ -16,13 +17,20 @@ import { notify } from '@/lib/server/ws-hub'
 import { getMessages, getLastMessage, appendMessage } from '@/lib/server/messages/message-repository'
 import { perf } from '@/lib/server/runtime/perf'
 import { WORKSPACE_DIR } from '@/lib/server/data-dir'
+import { normalizeLegacyWorkspacePath } from '@/lib/server/workspace-paths'
+import {
+  MAX_ORPHAN_RECOVERY_ATTEMPTS,
+  pruneOrphanRecovery,
+  trackOrphanRecovery,
+} from '@/lib/server/runtime/queue/orphan-recovery'
+import { preflightProviderCredential } from '@/lib/server/runtime/scheduled-run-preflight'
 import { createAgentTaskSession } from '@/lib/server/agents/task-session'
 import { formatValidationFailure } from '@/lib/server/tasks/task-validation'
 import { pushMainLoopEventToMainSessions } from '@/lib/server/agents/main-agent-loop'
 import type { ExecuteChatTurnResult } from '@/lib/server/chat-execution/chat-execution-types'
 import { checkAgentBudgetLimits } from '@/lib/server/cost'
 import { enqueueExecution } from '@/lib/server/execution-engine'
-import { extractTaskResult, formatResultBody } from '@/lib/server/tasks/task-result'
+import { classifyEmptyRunOutcome, EMPTY_RUN_OUTCOME_MESSAGE, extractTaskResult, formatResultBody } from '@/lib/server/tasks/task-result'
 import { checkoutTask } from '@/lib/server/tasks/task-checkout'
 import { queueSwarmFeedTaskCompletionWake } from '@/lib/server/swarmfeed-runtime'
 import {
@@ -64,6 +72,7 @@ const _queueState = hmrSingleton('__swarmclaw_queue__', () => ({
   activeCount: 0,
   maxConcurrent: 3,
   pendingKick: false,
+  orphanRecoveryAttempts: {} as Record<string, number>,
 }))
 
 function normalizeInt(value: unknown, fallback: number, min: number, max: number): number {
@@ -499,7 +508,10 @@ function inferWorkspaceProjectCwd(task: Pick<BoardTask, 'title' | 'description'
 function resolveTaskExecutionCwd(task: ScheduleTaskMeta, sessions: Record<string, SessionLike>): string {
   const workspaceRoot = path.resolve(WORKSPACE_DIR)
 
-  const explicitCwd = normalizeDirCandidate(task.cwd, workspaceRoot)
+  const explicitCwd = normalizeDirCandidate(
+    normalizeLegacyWorkspacePath(typeof task.cwd === 'string' ? task.cwd : '', { workspaceRoot, taskId: task.id }),
+    workspaceRoot,
+  )
   if (explicitCwd) return explicitCwd
 
   const projectId = typeof task.projectId === 'string' ? task.projectId.trim() : ''
@@ -520,13 +532,19 @@ function resolveTaskExecutionCwd(task: ScheduleTaskMeta, sessions: Record<string
 
   const sourceSessionId = typeof task.createdInSessionId === 'string' ? task.createdInSessionId.trim() : ''
   const sourceSessionCwd = sourceSessionId
-    ? normalizeDirCandidate(sessions[sourceSessionId]?.cwd, workspaceRoot)
+    ? normalizeDirCandidate(
+        normalizeLegacyWorkspacePath(sessions[sourceSessionId]?.cwd, { workspaceRoot, taskId: task.id }),
+        workspaceRoot,
+      )
     : null
   if (sourceSessionCwd && path.resolve(sourceSessionCwd) !== workspaceRoot) return sourceSessionCwd
 
   const runSessionId = typeof task.sessionId === 'string' ? task.sessionId.trim() : ''
   const runSessionCwd = runSessionId
-    ? normalizeDirCandidate(sessions[runSessionId]?.cwd, workspaceRoot)
+    ? normalizeDirCandidate(
+        normalizeLegacyWorkspacePath(sessions[runSessionId]?.cwd, { workspaceRoot, taskId: task.id }),
+        workspaceRoot,
+      )
     : null
   if (runSessionCwd && path.resolve(runSessionCwd) !== workspaceRoot) return runSessionCwd
 
@@ -708,6 +726,7 @@ export function reconcileFinishedRunningTasks(): { reconciled: number; deadLette
     if (!fallbackText && !task.result) {
       task.status = 'failed'
       task.result = 'Agent session finished without producing output.'
+      task.error = EMPTY_RUN_OUTCOME_MESSAGE.slice(0, 500)
       task.checkoutRunId = null
       task.updatedAt = now
       tasksDirty = true
@@ -854,7 +873,20 @@ function deliverTaskConnectorFollowups(task: BoardTask, sessions: Record<string,
   })
 }
 
+/** Reflects a terminal scheduled-run outcome back onto the originating schedule. */
+function recordScheduleRunOutcome(task: BoardTask): void {
+  const meta = task as ScheduleTaskMeta
+  const sourceScheduleId = typeof meta.sourceScheduleId === 'string' ? meta.sourceScheduleId.trim() : ''
+  if (!sourceScheduleId) return
+  const schedule = loadSchedules()[sourceScheduleId]
+  if (!schedule) return
+  if (!applyScheduleRunOutcome(schedule, task, Date.now())) return
+  upsertSchedule(sourceScheduleId, schedule)
+  notify('schedules')
+}
+
 function handleTerminalTaskResultDeliveries(task: BoardTask): void {
+  recordScheduleRunOutcome(task)
   const sessions = loadSessions() as Record<string, SessionLike>
   pushUserFacingTaskResult(task, sessions)
   deliverTaskConnectorFollowups(task, sessions)
@@ -1114,25 +1146,68 @@ export async function processNext() {
       const allTasks = loadTasks()
       const currentQueue = loadQueue()
       const queueSet = new Set(currentQueue)
+      // Backfill for hmrSingleton state created before this field existed
+      _queueState.orphanRecoveryAttempts ??= {}
+      const orphanAttempts = _queueState.orphanRecoveryAttempts
+      const stillOrphanedIds = new Set<string>()
+      const deadLetteredOrphans: BoardTask[] = []
       let recovered = false
       let tasksDirty = false
       for (const [id, t] of Object.entries(allTasks) as [string, BoardTask][]) {
-        if (t.status === 'queued' && !queueSet.has(id)) {
+        if (t.status !== 'queued' || queueSet.has(id)) continue
+        const decision = trackOrphanRecovery(orphanAttempts, id)
+        if (decision.action === 'dead_letter') {
+          // Recovery keeps re-queueing this task but it never starts. Stop the
+          // loop with one terminal reason instead of spamming recovery forever.
+          const now = Date.now()
+          t.status = 'failed'
+          t.deadLetteredAt = now
+          t.retryScheduledAt = null
+          t.checkoutRunId = null
+          t.updatedAt = now
+          t.error = `Orphan recovery exhausted after ${MAX_ORPHAN_RECOVERY_ATTEMPTS} attempts: task repeatedly returned to "queued" without starting.`
+          if (!t.comments) t.comments = []
+          t.comments.push({
+            id: genId(),
+            author: 'System',
+            text: t.error,
+            createdAt: now,
+          })
+          delete orphanAttempts[id]
+          tasksDirty = true
+          deadLetteredOrphans.push(t)
+          log.warn(TAG, `[queue] Dead-lettered orphaned queued task after ${decision.attempt - 1} recovery attempts: "${t.title}" (${id})`)
+          continue
+        }
+        stillOrphanedIds.add(id)
+        if (decision.firstAttempt) {
           log.info(TAG, `[queue] Recovering orphaned queued task: "${t.title}" (${id})`)
-          // Defence in depth: a queued task must not carry a stale checkoutRunId
-          // (left over from pre-1.5.38 retries). If it does, checkoutTask() will
-          // reject every attempt and this orphan-recovery loop will spin at 100%
-          // CPU re-queueing a task that can never run.
-          if (t.checkoutRunId) {
-            t.checkoutRunId = null
-            tasksDirty = true
-          }
-          pushQueueUnique(currentQueue, id)
-          recovered = true
+        } else {
+          log.debug(TAG, `[queue] Re-recovering orphaned queued task (attempt ${decision.attempt}): "${t.title}" (${id})`)
+        }
+        // Defence in depth: a queued task must not carry a stale checkoutRunId
+        // (left over from pre-1.5.38 retries). If it does, checkoutTask() will
+        // reject every attempt and this orphan-recovery loop will spin at 100%
+        // CPU re-queueing a task that can never run.
+        if (t.checkoutRunId) {
+          t.checkoutRunId = null
+          tasksDirty = true
         }
+        pushQueueUnique(currentQueue, id)
+        recovered = true
       }
+      pruneOrphanRecovery(orphanAttempts, stillOrphanedIds)
       if (tasksDirty) saveTasks(allTasks)
       if (recovered) saveQueue(currentQueue)
+      for (const t of deadLetteredOrphans) {
+        notify('tasks')
+        logActivity({ entityType: 'task', entityId: t.id, action: 'failed', actor: 'system', actorId: t.agentId, summary: `Task failed: "${t.title}" (orphan recovery exhausted)` })
+        pushMainLoopEventToMainSessions({
+          type: 'task_failed',
+          text: `Task failed: "${t.title}" (${t.id}): orphan recovery exhausted.`,
+        })
+        handleTerminalTaskResultDeliveries(t)
+      }
     }
 
     // Process ONE task per invocation (no while loop)
@@ -1261,6 +1336,61 @@ export async function processNext() {
         } catch {}
       }
 
+      // Credential preflight for scheduled runs: fail fast with an actionable
+      // error instead of letting the schedule die on a 401 deep in execution.
+      // Retries cannot succeed without a key, so this dead-letters immediately.
+      if ((task as ScheduleTaskMeta).sourceType === 'schedule') {
+        const preflight = preflightProviderCredential({
+          provider: typedAgent.provider,
+          ollamaMode: typedAgent.ollamaMode ?? null,
+          credentialId: typedAgent.credentialId ?? null,
+          fallbackCredentialIds: typedAgent.fallbackCredentialIds || null,
+        })
+        if (!preflight.ok) {
+          const now = Date.now()
+          task.status = 'failed'
+          task.deadLetteredAt = now
+          task.retryScheduledAt = null
+          task.checkoutRunId = null
+          task.error = preflight.error.slice(0, 500)
+          task.updatedAt = now
+          if (!task.comments) task.comments = []
+          task.comments.push({
+            id: genId(),
+            author: 'System',
+            text: preflight.error,
+            createdAt: now,
+          })
+          saveTasks(latestTasks)
+          notify('tasks')
+          const failure = classifyRuntimeFailure({ source: 'task', message: preflight.error })
+          recordSupervisorIncident({
+            runId: task.id,
+            sessionId: task.sessionId || '',
+            taskId: task.id,
+            agentId: typedAgent.id,
+            source: 'task',
+            kind: 'runtime_failure',
+            severity: failure.severity,
+            summary: `Scheduled run blocked by credential preflight: ${preflight.error}`.slice(0, 320),
+            details: preflight.error,
+            failureFamily: failure.family,
+            remediation: failure.remediation,
+            repairPrompt: failure.repairPrompt,
+            autoAction: null,
+          })
+          logActivity({ entityType: 'task', entityId: task.id, action: 'failed', actor: 'system', actorId: typedAgent.id, summary: `Task failed credential preflight: "${task.title}"` })
+          pushMainLoopEventToMainSessions({
+            type: 'task_failed',
+            text: `Task failed: "${task.title}" (${task.id}): ${preflight.error.slice(0, 200)}`,
+          })
+          handleTerminalTaskResultDeliveries(task)
+          cleanupTerminalOneOffSchedule(task)
+          log.warn(TAG, `[queue] Scheduled task "${task.title}" (${taskId}) failed credential preflight: ${preflight.error}`)
+          return
+        }
+      }
+
       // Atomic checkout — prevents two runners from starting the same task
       const runId = genId()
       task = checkoutTask(taskId, runId) as BoardTask | undefined
@@ -1296,8 +1426,17 @@ export async function processNext() {
           : ''
         if (existingSessionId) {
           const sessions = loadSessions()
-          if (sessions[existingSessionId]) {
+          const existingSession = sessions[existingSessionId]
+          if (existingSession) {
             sessionId = existingSessionId
+            // Rebind sessions still pinned to a legacy workspace root (e.g. a
+            // pre-migration ~/.swarmclaw/workspace path) onto the current root.
+            const sessionCwd = typeof existingSession.cwd === 'string' ? existingSession.cwd : ''
+            if (sessionCwd && normalizeLegacyWorkspacePath(sessionCwd, { taskId: task.id }) !== sessionCwd) {
+              existingSession.cwd = taskCwd
+              saveSessions(sessions)
+              log.info(TAG, `[queue] Rebound stale schedule session cwd to ${taskCwd} (session ${existingSessionId})`)
+            }
           }
         }
         if (!sessionId) {
@@ -1467,7 +1606,10 @@ export async function processNext() {
               createdAt: now,
             })
           } else {
-            const failureReason = formatValidationFailure(validation.reasons).slice(0, 500)
+            // A run with no text, no tool calls, and no error gets an actionable
+            // reason instead of the generic "Result summary is empty." message.
+            const emptyRunReason = classifyEmptyRunOutcome(taskRun)
+            const failureReason = (emptyRunReason || formatValidationFailure(validation.reasons)).slice(0, 500)
             const retryState = scheduleRetryOrDeadLetter(t2[taskId], failureReason)
             t2[taskId].completedAt = retryState === 'dead_lettered' ? null : t2[taskId].completedAt
             t2[taskId].comments!.push({

package/src/lib/server/runtime/queue/orphan-recovery.test.ts

@@ -0,0 +1,49 @@
+import test from 'node:test'
+import assert from 'node:assert/strict'
+
+import {
+  MAX_ORPHAN_RECOVERY_ATTEMPTS,
+  pruneOrphanRecovery,
+  trackOrphanRecovery,
+} from './orphan-recovery'
+
+test('allows recovery for the first attempts and flags only the first one', () => {
+  const attempts: Record<string, number> = {}
+
+  const first = trackOrphanRecovery(attempts, 'task-1')
+  assert.deepEqual(first, { action: 'recover', attempt: 1, firstAttempt: true })
+
+  const second = trackOrphanRecovery(attempts, 'task-1')
+  assert.deepEqual(second, { action: 'recover', attempt: 2, firstAttempt: false })
+
+  const third = trackOrphanRecovery(attempts, 'task-1')
+  assert.deepEqual(third, { action: 'recover', attempt: 3, firstAttempt: false })
+})
+
+test('dead-letters once the attempt cap is exceeded', () => {
+  const attempts: Record<string, number> = { 'task-1': MAX_ORPHAN_RECOVERY_ATTEMPTS }
+
+  const decision = trackOrphanRecovery(attempts, 'task-1')
+  assert.deepEqual(decision, { action: 'dead_letter', attempt: MAX_ORPHAN_RECOVERY_ATTEMPTS + 1 })
+})
+
+test('tracks tasks independently', () => {
+  const attempts: Record<string, number> = {}
+  trackOrphanRecovery(attempts, 'task-1')
+  trackOrphanRecovery(attempts, 'task-1')
+  const other = trackOrphanRecovery(attempts, 'task-2')
+  assert.equal(other.action, 'recover')
+  assert.equal(other.attempt, 1)
+})
+
+test('prune drops counters for tasks no longer orphaned', () => {
+  const attempts: Record<string, number> = { 'task-1': 2, 'task-2': 1 }
+  pruneOrphanRecovery(attempts, new Set(['task-2']))
+  assert.deepEqual(attempts, { 'task-2': 1 })
+})
+
+test('honors a custom max', () => {
+  const attempts: Record<string, number> = {}
+  assert.equal(trackOrphanRecovery(attempts, 'task-1', 1).action, 'recover')
+  assert.equal(trackOrphanRecovery(attempts, 'task-1', 1).action, 'dead_letter')
+})

package/src/lib/server/runtime/queue/orphan-recovery.ts

@@ -0,0 +1,32 @@
+export const MAX_ORPHAN_RECOVERY_ATTEMPTS = 3
+
+export type OrphanRecoveryDecision =
+  | { action: 'recover'; attempt: number; firstAttempt: boolean }
+  | { action: 'dead_letter'; attempt: number }
+
+/**
+ * Tracks how many times an orphaned queued task has been re-queued by the
+ * startup/daemon recovery scan. Recovery is allowed a bounded number of
+ * attempts; after that the task should be dead-lettered with one terminal
+ * reason instead of looping through recovery forever.
+ */
+export function trackOrphanRecovery(
+  attempts: Record<string, number>,
+  taskId: string,
+  max: number = MAX_ORPHAN_RECOVERY_ATTEMPTS,
+): OrphanRecoveryDecision {
+  const attempt = (attempts[taskId] || 0) + 1
+  attempts[taskId] = attempt
+  if (attempt > max) return { action: 'dead_letter', attempt }
+  return { action: 'recover', attempt, firstAttempt: attempt === 1 }
+}
+
+/** Drops counters for tasks that are no longer orphaned so a future orphan starts fresh. */
+export function pruneOrphanRecovery(
+  attempts: Record<string, number>,
+  stillOrphanedIds: ReadonlySet<string>,
+): void {
+  for (const taskId of Object.keys(attempts)) {
+    if (!stillOrphanedIds.has(taskId)) delete attempts[taskId]
+  }
+}

package/src/lib/server/runtime/scheduled-run-preflight.test.ts

@@ -0,0 +1,73 @@
+import test from 'node:test'
+import assert from 'node:assert/strict'
+
+import {
+  preflightProviderCredential,
+  type ProviderCredentialPreflightDeps,
+} from './scheduled-run-preflight'
+
+function makeDeps(overrides: Partial<ProviderCredentialPreflightDeps> = {}): ProviderCredentialPreflightDeps {
+  return {
+    getProvider: () => ({ requiresApiKey: true }),
+    resolveProviderCredentialId: (input) => input.credentialId || null,
+    resolveCredentialSecret: () => null,
+    ...overrides,
+  }
+}
+
+test('passes when the provider does not require an API key', () => {
+  const result = preflightProviderCredential(
+    { provider: 'ollama' },
+    makeDeps({ getProvider: () => ({ requiresApiKey: false }) }),
+  )
+  assert.deepEqual(result, { ok: true })
+})
+
+test('passes when the provider is unknown', () => {
+  const result = preflightProviderCredential(
+    { provider: 'mystery' },
+    makeDeps({ getProvider: () => null }),
+  )
+  assert.deepEqual(result, { ok: true })
+})
+
+test('passes when no provider is set', () => {
+  assert.deepEqual(preflightProviderCredential({ provider: '' }, makeDeps()), { ok: true })
+})
+
+test('passes when the resolved credential has a secret', () => {
+  const result = preflightProviderCredential(
+    { provider: 'openai', credentialId: 'cred-1' },
+    makeDeps({ resolveCredentialSecret: (id) => (id === 'cred-1' ? 'sk-test' : null) }),
+  )
+  assert.deepEqual(result, { ok: true })
+})
+
+test('passes when a fallback credential rescues a dead primary', () => {
+  const result = preflightProviderCredential(
+    { provider: 'openai', credentialId: 'cred-dead', fallbackCredentialIds: ['cred-live'] },
+    makeDeps({ resolveCredentialSecret: (id) => (id === 'cred-live' ? 'sk-test' : null) }),
+  )
+  assert.deepEqual(result, { ok: true })
+})
+
+test('passes when auto-matching finds another credential for the provider', () => {
+  const result = preflightProviderCredential(
+    { provider: 'openai', credentialId: 'cred-dead' },
+    makeDeps({
+      resolveProviderCredentialId: (input) => (input.credentialId ? input.credentialId : 'cred-auto'),
+      resolveCredentialSecret: (id) => (id === 'cred-auto' ? 'sk-test' : null),
+    }),
+  )
+  assert.deepEqual(result, { ok: true })
+})
+
+test('fails with an actionable error naming the provider when nothing resolves', () => {
+  const result = preflightProviderCredential({ provider: 'openai', credentialId: 'cred-dead' }, makeDeps())
+  assert.equal(result.ok, false)
+  if (!result.ok) {
+    assert.match(result.error, /Provider authentication preflight failed/)
+    assert.match(result.error, /"openai"/)
+    assert.match(result.error, /Settings/)
+  }
+})