@taskless-app/swarm 0.6.27 → 0.6.29

package/dist/cli.js

@@ -2770,6 +2770,192 @@ var init_storm = __esm({
   }
 });
 
+// src/agentToken.ts
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync4, unlinkSync } from "fs";
+import { join as join6 } from "path";
+function loadAgentToken() {
+  try {
+    const s = JSON.parse(readFileSync4(STORE_PATH, "utf8"));
+    return s.token ? s : null;
+  } catch {
+    return null;
+  }
+}
+function saveAgentToken(s) {
+  writeFileSync4(STORE_PATH, JSON.stringify(s, null, 2), { mode: 384 });
+}
+function clearAgentToken() {
+  try {
+    unlinkSync(STORE_PATH);
+  } catch {
+  }
+}
+async function mintAgentToken(args, fetchFn = fetch) {
+  const res = await fetchFn(`${base(args.api)}/api/swarm/agent/token`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json", Authorization: `Bearer ${args.bearer}` },
+    body: JSON.stringify({
+      ...args.label ? { label: args.label } : {},
+      ...args.hostId ? { hostId: args.hostId } : {},
+      ...args.hostName ? { hostName: args.hostName } : {}
+    })
+  });
+  const text = await res.text();
+  if (!res.ok) throw new Error(`agent token: HTTP ${res.status} ${text.slice(0, 200)}`);
+  const j = JSON.parse(text);
+  if (!j.token) throw new Error("agent token: \u0432 \u043E\u0442\u0432\u0435\u0442\u0435 \u043D\u0435\u0442 token");
+  return { token: j.token, ...j.tokenId ? { tokenId: j.tokenId } : {} };
+}
+async function probeAgentToken(args, fetchFn = fetch) {
+  try {
+    const res = await fetchFn(`${base(args.api)}/api/auth/me`, {
+      headers: { Authorization: `Bearer ${args.token}` },
+      // Оборвётся по таймауту — попадём в catch ниже, то есть в "unreachable": это ровно
+      // то, чем висящая сеть и является. Соседи по CLI (daemonLink) живут так же.
+      signal: AbortSignal.timeout(args.timeoutMs ?? TOKEN_PROBE_TIMEOUT_MS)
+    });
+    if (res.status === 401 || res.status === 403) return "revoked";
+    return res.ok ? "ok" : "unreachable";
+  } catch {
+    return "unreachable";
+  }
+}
+function isRevokedTokenError(e) {
+  if (e && typeof e === "object" && e.code === 401) return true;
+  const text = e instanceof Error ? e.message : typeof e === "string" ? e : "";
+  return /invalid_token|(?:http|status|code)[ =:]*401\b|\(401\)|401 unauthorized/i.test(text);
+}
+function revokedTokenLine() {
+  return "[taskless] \u0442\u043E\u043A\u0435\u043D \u0440\u043E\u044F \u043E\u0442\u043E\u0437\u0432\u0430\u043D (401 invalid_token) \u2014 \u0440\u043E\u0439 \u043D\u0435 \u0431\u0435\u0440\u0451\u0442 \u0440\u0430\u0431\u043E\u0442\u0443. \u041F\u043E\u0447\u0438\u043D\u0438 \u043E\u0434\u043D\u043E\u0439 \u043A\u043E\u043C\u0430\u043D\u0434\u043E\u0439: swarm login";
+}
+function revokedTokenComplaint() {
+  return [
+    "",
+    "\u256D\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256E",
+    "\u2502 \u0422\u041E\u041A\u0415\u041D \u0420\u041E\u042F \u041D\u0415 \u041F\u0420\u0418\u041D\u042F\u0422 (401). \u0414\u043E\u0441\u0442\u0443\u043F \u043A Taskless \u0440\u0430\u0437\u043E\u0440\u0432\u0430\u043D.               \u2502",
+    "\u2570\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256F",
+    "\u041F\u0440\u0438\u0447\u0438\u043D\u0430 \u2014 \u043E\u0434\u043D\u0430 \u0438\u0437 \u0442\u0440\u0451\u0445, \u0432\u0441\u0435 \u0442\u0440\u0438 \u0440\u0435\u0448\u0430\u044E\u0442\u0441\u044F \u0432\u043B\u0430\u0434\u0435\u043B\u044C\u0446\u0435\u043C:",
+    "  \u2022 \xAB\u043E\u0442\u043A\u043B\u044E\u0447\u0438\u0442\u044C \u044D\u0442\u043E\u0442 \u043A\u043E\u043C\u043F\u044C\u044E\u0442\u0435\u0440\xBB \u0432 \u043F\u0430\u0440\u043A\u0435 \u043C\u0430\u0448\u0438\u043D \u2014 \u043E\u0442\u043E\u0437\u0432\u0430\u043D \u0442\u043E\u043A\u0435\u043D \u042D\u0422\u041E\u0419 \u043C\u0430\u0448\u0438\u043D\u044B;",
+    "  \u2022 \xAB\u0441\u0431\u0440\u043E\u0441\u0438\u0442\u044C \u0434\u043E\u0441\u0442\u0443\u043F \u0440\u043E\u044F\xBB \u0432 \u043D\u0430\u0441\u0442\u0440\u043E\u0439\u043A\u0430\u0445 (\u041F\u0440\u043E\u0444\u0438\u043B\u044C \u2192 \u0420\u043E\u0439) \u2014 \u043E\u0442\u043E\u0437\u0432\u0430\u043D\u044B \u0432\u0441\u0435;",
+    "  \u2022 \u0440\u043E\u0439 \u0432\u044B\u043A\u043B\u044E\u0447\u0435\u043D \u043C\u0430\u0441\u0442\u0435\u0440-\u0442\u0443\u043C\u0431\u043B\u0435\u0440\u043E\u043C \u2014 \u0442\u043E\u043A\u0435\u043D \u0430\u0433\u0435\u043D\u0442\u0430 \u043F\u0435\u0440\u0435\u0441\u0442\u0430\u0451\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u043E\u0432\u0430\u0442\u044C.",
+    "",
+    "\u0412\u0445\u043E\u0434 \u043D\u0430 \u0414\u0420\u0423\u0413\u041E\u0419 \u043C\u0430\u0448\u0438\u043D\u0435 \u044D\u0442\u043E\u0442 \u0442\u043E\u043A\u0435\u043D \u0431\u043E\u043B\u044C\u0448\u0435 \u043D\u0435 \u0433\u0430\u0441\u0438\u0442 (TASWM-324): \u0443 \u043A\u0430\u0436\u0434\u043E\u0439",
+    "\u043C\u0430\u0448\u0438\u043D\u044B \u0441\u0432\u043E\u0439 \u0442\u043E\u043A\u0435\u043D, \u043F\u0440\u0438\u0432\u044F\u0437\u0430\u043D\u043D\u044B\u0439 \u043A \u0435\u0451 hostId.",
+    "",
+    "\u0414\u0435\u043C\u043E\u043D \u041D\u0415 \u0440\u0430\u0431\u043E\u0442\u0430\u0435\u0442 \u0432\u0441\u043B\u0435\u043F\u0443\u044E: \u043F\u043E\u043A\u0430 \u0442\u043E\u043A\u0435\u043D\u0430 \u043D\u0435\u0442, \u043F\u0440\u043E\u0433\u043E\u043D\u044B \u043D\u0435 \u0431\u0435\u0440\u0443\u0442\u0441\u044F \u0438 \u043E\u0442\u0447\u0451\u0442\u044B",
+    "\u043D\u0435 \u043F\u0438\u0448\u0443\u0442\u0441\u044F. \u041F\u043E\u0447\u0438\u043D\u0438 \u0432\u0445\u043E\u0434\u043E\u043C \u0437\u0430\u043D\u043E\u0432\u043E:  swarm login",
+    "\u041F\u0440\u043E\u0431\u0430 \u0442\u043E\u043A\u0435\u043D\u0430 \u043D\u0435 \u043F\u0440\u043E\u0445\u043E\u0434\u0438\u0442, \u0430 \u0432\u043E\u0439\u0442\u0438 \u043C\u0435\u0448\u0430\u0435\u0442 \u0441\u0442\u0430\u0440\u044B\u0439 \u0444\u0430\u0439\u043B:  swarm login --force",
+    ""
+  ].join("\n");
+}
+var STORE_PATH, base, TOKEN_PROBE_TIMEOUT_MS;
+var init_agentToken = __esm({
+  "src/agentToken.ts"() {
+    "use strict";
+    init_config();
+    STORE_PATH = join6(SWARM_HOME, "agent.json");
+    base = (api) => api.replace(/\/$/, "");
+    TOKEN_PROBE_TIMEOUT_MS = 8e3;
+  }
+});
+
+// src/linkFailure.ts
+function describeError(e, maxDepth = 4) {
+  const parts = [];
+  const seen = /* @__PURE__ */ new Set();
+  let cur = e;
+  for (let depth = 0; depth < maxDepth && cur != null && !seen.has(cur); depth++) {
+    seen.add(cur);
+    const msg = (cur instanceof Error ? cur.message : typeof cur === "string" ? cur : String(cur)).trim();
+    const code = cur.code;
+    const codeText = code === void 0 || code === null ? "" : String(code);
+    const label2 = codeText && !msg.includes(codeText) ? `${msg} [code=${codeText}]` : msg;
+    if (label2 && !parts.includes(label2)) parts.push(label2);
+    cur = cur.cause;
+  }
+  return parts.join(" \u2190 ") || String(e);
+}
+function explainLinkFailure(e) {
+  const detail = describeError(e);
+  if (detail.includes(UNKNOWN_LINK_REASON)) return { kind: "unknown", detail };
+  if (isRevokedTokenError(e) || isRevokedTokenError(detail)) return { kind: "unauthorized", detail };
+  if (MISSING_TOOL_RE.test(detail)) return { kind: "missing_tool", detail };
+  if (OFFLINE_RE.test(detail)) return { kind: "offline", detail };
+  return { kind: "rejected", detail };
+}
+var UNKNOWN_LINK_REASON, OFFLINE_RE, MISSING_TOOL_RE;
+var init_linkFailure = __esm({
+  "src/linkFailure.ts"() {
+    "use strict";
+    init_agentToken();
+    UNKNOWN_LINK_REASON = "\u043F\u043E\u0434\u043A\u043B\u044E\u0447\u0435\u043D\u0438\u044F \u043D\u0435\u0442, \u0430 \u043F\u0440\u0438\u0447\u0438\u043D\u0443 \u043A\u043E\u043D\u043D\u0435\u043A\u0442\u043E\u0440 \u043D\u0435 \u043D\u0430\u0437\u0432\u0430\u043B";
+    OFFLINE_RE = /fetch failed|econnreset|econnrefused|econnaborted|enotfound|eai_again|etimedout|ehostunreach|enetunreach|epipe|socket hang up|und_err|network error|connection (?:closed|refused|reset|error)|connect timeout/i;
+    MISSING_TOOL_RE = /tool[^.]{0,40}not found|unknown tool|tool_not_found|method not found|-32601\b/i;
+  }
+});
+
+// src/toolFailure.ts
+function classifyToolFailure(raw) {
+  if (MISMATCH_RE.test(raw)) return TOOL_FAILURE.WORKSPACE_MISMATCH;
+  if (FORBIDDEN_RE.test(raw)) return TOOL_FAILURE.FORBIDDEN;
+  if (NOT_FOUND_RE.test(raw)) return TOOL_FAILURE.NOT_FOUND;
+  return TOOL_FAILURE.TOOL_ERROR;
+}
+function classifyThrown(e) {
+  const { kind, detail } = explainLinkFailure(e);
+  const code = kind === "offline" ? TOOL_FAILURE.UNREACHABLE : kind === "unauthorized" ? TOOL_FAILURE.UNAUTHORIZED : (
+    // «ручки нет» и «сервер отказал по существу» разбираем доменно: там может быть
+    // и task_not_found, и отказ по правам — то есть наши коды, а не транспортные.
+    classifyToolFailure(detail)
+  );
+  return { code, detail };
+}
+var TOOL_FAILURE, TOOL_FAILURE_TEXT, TOOL_FAILURE_RETRIABLE, NOT_FOUND_RE, FORBIDDEN_RE, MISMATCH_RE;
+var init_toolFailure = __esm({
+  "src/toolFailure.ts"() {
+    "use strict";
+    init_linkFailure();
+    TOOL_FAILURE = {
+      /** Тул отработал, но искомого в ответе нет: задачи с таким слагом в воркспейсе не существует. */
+      NOT_FOUND: "not_found",
+      /** Объект есть, но токену роя не виден (приватный проект, спейс, чужой воркспейс). */
+      FORBIDDEN: "forbidden",
+      /** Токен роя не состоит в воркспейсе, которым искали. */
+      WORKSPACE_MISMATCH: "workspace_mismatch",
+      /** До прода не достучались: сеть, DNS, таймаут, оборванный сокет. */
+      UNREACHABLE: "unreachable",
+      /** Прод ответил, но токен роя отвергнут (отозван, протух). Сетью это не лечится. */
+      UNAUTHORIZED: "unauthorized",
+      /** Тул ответил ошибкой, которую мы не узнали, — текст кладём в detail как есть. */
+      TOOL_ERROR: "tool_error",
+      /** Успех, но полезной нагрузки в ответе нет (форма ответа разошлась с ожиданием). */
+      EMPTY: "empty"
+    };
+    TOOL_FAILURE_TEXT = {
+      [TOOL_FAILURE.NOT_FOUND]: "\u0432 \u044D\u0442\u043E\u043C \u0432\u043E\u0440\u043A\u0441\u043F\u0435\u0439\u0441\u0435 \u0442\u0430\u043A\u043E\u0433\u043E \u043D\u0435\u0442 \u2014 \u043F\u0440\u043E\u0432\u0435\u0440\u044C \u0441\u043B\u0430\u0433 \u0438 \u0432\u043E\u0440\u043A\u0441\u043F\u0435\u0439\u0441 \u043F\u0440\u043E\u0433\u043E\u043D\u0430",
+      [TOOL_FAILURE.FORBIDDEN]: "\u0434\u043E\u0441\u0442\u0443\u043F\u0430 \u043D\u0435\u0442: \u043E\u0431\u044A\u0435\u043A\u0442 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u043D\u043E \u0442\u043E\u043A\u0435\u043D\u0443 \u0440\u043E\u044F \u043D\u0435 \u0432\u0438\u0434\u0435\u043D \u2014 \u043D\u0443\u0436\u0435\u043D \u0447\u0435\u043B\u043E\u0432\u0435\u043A",
+      [TOOL_FAILURE.WORKSPACE_MISMATCH]: "\u0442\u043E\u043A\u0435\u043D \u0440\u043E\u044F \u043D\u0435 \u0441\u043E\u0441\u0442\u043E\u0438\u0442 \u0432 \u044D\u0442\u043E\u043C \u0432\u043E\u0440\u043A\u0441\u043F\u0435\u0439\u0441\u0435",
+      [TOOL_FAILURE.UNREACHABLE]: "Taskless \u043D\u0435 \u043E\u0442\u0432\u0435\u0442\u0438\u043B \u2014 \u0441\u0435\u0442\u044C, DNS \u0438\u043B\u0438 \u0442\u0430\u0439\u043C\u0430\u0443\u0442",
+      [TOOL_FAILURE.UNAUTHORIZED]: "\u0442\u043E\u043A\u0435\u043D \u0440\u043E\u044F \u043E\u0442\u0432\u0435\u0440\u0433\u043D\u0443\u0442 \u043F\u0440\u043E\u0434\u043E\u043C \u2014 \u043D\u0443\u0436\u0435\u043D swarm login \u043D\u0430 \u044D\u0442\u043E\u0439 \u043C\u0430\u0448\u0438\u043D\u0435",
+      [TOOL_FAILURE.TOOL_ERROR]: "\u0442\u0443\u043B \u043E\u0442\u0432\u0435\u0442\u0438\u043B \u043E\u0448\u0438\u0431\u043A\u043E\u0439",
+      [TOOL_FAILURE.EMPTY]: "\u0442\u0443\u043B \u043E\u0442\u0432\u0435\u0442\u0438\u043B \u0443\u0441\u043F\u0435\u0445\u043E\u043C, \u043D\u043E \u0434\u0430\u043D\u043D\u044B\u0445 \u0432 \u043E\u0442\u0432\u0435\u0442\u0435 \u043D\u0435\u0442"
+    };
+    TOOL_FAILURE_RETRIABLE = {
+      [TOOL_FAILURE.NOT_FOUND]: false,
+      [TOOL_FAILURE.FORBIDDEN]: false,
+      [TOOL_FAILURE.WORKSPACE_MISMATCH]: false,
+      [TOOL_FAILURE.UNREACHABLE]: true,
+      // Отозванный токен повтором не чинится — его меняет человек (`swarm login`).
+      [TOOL_FAILURE.UNAUTHORIZED]: false,
+      [TOOL_FAILURE.TOOL_ERROR]: false,
+      [TOOL_FAILURE.EMPTY]: false
+    };
+    NOT_FOUND_RE = /task_not_found|not_found|не найдена|не найден/i;
+    FORBIDDEN_RE = /forbidden|not visible|no access|нет доступа|(?:http|status|code)[ =:]*403\b|\(403\)|403 forbidden/i;
+    MISMATCH_RE = /workspace_mismatch|not a member of that workspace/i;
+  }
+});
+
 // src/procList.ts
 function parsePsRows(out) {
   const rows = [];
@@ -3053,7 +3239,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@taskless-app/swarm",
-      version: "0.6.27",
+      version: "0.6.29",
       type: "module",
       description: "Local control plane for a fleet of AI coding agents (drones), coordinating through Taskless. The overmind runs the swarm.",
       keywords: [
@@ -3104,7 +3290,7 @@ var init_package = __esm({
         execa: "^10.0.0",
         zod: "3.25.76"
       },
-      gitHead: "2e1ed83014422ae577be60271adc79e291b9e2ab"
+      gitHead: "d8072f68198b68b4252687b01e7e82e2b4769346"
     };
   }
 });
@@ -3236,18 +3422,18 @@ var init_netTimeout = __esm({
 
 // src/droneChannel.ts
 import { createHmac, randomBytes, timingSafeEqual } from "crypto";
-import { chmodSync as chmodSync2, mkdirSync as mkdirSync7, readFileSync as readFileSync7, writeFileSync as writeFileSync6 } from "fs";
+import { chmodSync as chmodSync2, mkdirSync as mkdirSync7, readFileSync as readFileSync8, writeFileSync as writeFileSync7 } from "fs";
 import { dirname as dirname3 } from "path";
 import { serve } from "@hono/node-server";
 function loadChannelSecret(path) {
   try {
-    const s = readFileSync7(path, "utf8").trim();
+    const s = readFileSync8(path, "utf8").trim();
     if (s.length >= 32) return s;
   } catch {
   }
   const secret = randomBytes(32).toString("hex");
   mkdirSync7(dirname3(path), { recursive: true });
-  writeFileSync6(path, secret, { mode: 384 });
+  writeFileSync7(path, secret, { mode: 384 });
   try {
     chmodSync2(path, 384);
   } catch {
@@ -3286,95 +3472,6 @@ var init_droneChannel = __esm({
   }
 });
 
-// src/agentToken.ts
-import { readFileSync as readFileSync8, writeFileSync as writeFileSync7, unlinkSync as unlinkSync2 } from "fs";
-import { join as join10 } from "path";
-function loadAgentToken() {
-  try {
-    const s = JSON.parse(readFileSync8(STORE_PATH, "utf8"));
-    return s.token ? s : null;
-  } catch {
-    return null;
-  }
-}
-function saveAgentToken(s) {
-  writeFileSync7(STORE_PATH, JSON.stringify(s, null, 2), { mode: 384 });
-}
-function clearAgentToken() {
-  try {
-    unlinkSync2(STORE_PATH);
-  } catch {
-  }
-}
-async function mintAgentToken(args, fetchFn = fetch) {
-  const res = await fetchFn(`${base(args.api)}/api/swarm/agent/token`, {
-    method: "POST",
-    headers: { "Content-Type": "application/json", Authorization: `Bearer ${args.bearer}` },
-    body: JSON.stringify({
-      ...args.label ? { label: args.label } : {},
-      ...args.hostId ? { hostId: args.hostId } : {},
-      ...args.hostName ? { hostName: args.hostName } : {}
-    })
-  });
-  const text = await res.text();
-  if (!res.ok) throw new Error(`agent token: HTTP ${res.status} ${text.slice(0, 200)}`);
-  const j = JSON.parse(text);
-  if (!j.token) throw new Error("agent token: \u0432 \u043E\u0442\u0432\u0435\u0442\u0435 \u043D\u0435\u0442 token");
-  return { token: j.token, ...j.tokenId ? { tokenId: j.tokenId } : {} };
-}
-async function probeAgentToken(args, fetchFn = fetch) {
-  try {
-    const res = await fetchFn(`${base(args.api)}/api/auth/me`, {
-      headers: { Authorization: `Bearer ${args.token}` },
-      // Оборвётся по таймауту — попадём в catch ниже, то есть в "unreachable": это ровно
-      // то, чем висящая сеть и является. Соседи по CLI (daemonLink) живут так же.
-      signal: AbortSignal.timeout(args.timeoutMs ?? TOKEN_PROBE_TIMEOUT_MS)
-    });
-    if (res.status === 401 || res.status === 403) return "revoked";
-    return res.ok ? "ok" : "unreachable";
-  } catch {
-    return "unreachable";
-  }
-}
-function isRevokedTokenError(e) {
-  if (e && typeof e === "object" && e.code === 401) return true;
-  const text = e instanceof Error ? e.message : typeof e === "string" ? e : "";
-  return /invalid_token|(?:http|status|code)[ =:]*401\b|\(401\)|401 unauthorized/i.test(text);
-}
-function revokedTokenLine() {
-  return "[taskless] \u0442\u043E\u043A\u0435\u043D \u0440\u043E\u044F \u043E\u0442\u043E\u0437\u0432\u0430\u043D (401 invalid_token) \u2014 \u0440\u043E\u0439 \u043D\u0435 \u0431\u0435\u0440\u0451\u0442 \u0440\u0430\u0431\u043E\u0442\u0443. \u041F\u043E\u0447\u0438\u043D\u0438 \u043E\u0434\u043D\u043E\u0439 \u043A\u043E\u043C\u0430\u043D\u0434\u043E\u0439: swarm login";
-}
-function revokedTokenComplaint() {
-  return [
-    "",
-    "\u256D\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256E",
-    "\u2502 \u0422\u041E\u041A\u0415\u041D \u0420\u041E\u042F \u041D\u0415 \u041F\u0420\u0418\u041D\u042F\u0422 (401). \u0414\u043E\u0441\u0442\u0443\u043F \u043A Taskless \u0440\u0430\u0437\u043E\u0440\u0432\u0430\u043D.               \u2502",
-    "\u2570\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u256F",
-    "\u041F\u0440\u0438\u0447\u0438\u043D\u0430 \u2014 \u043E\u0434\u043D\u0430 \u0438\u0437 \u0442\u0440\u0451\u0445, \u0432\u0441\u0435 \u0442\u0440\u0438 \u0440\u0435\u0448\u0430\u044E\u0442\u0441\u044F \u0432\u043B\u0430\u0434\u0435\u043B\u044C\u0446\u0435\u043C:",
-    "  \u2022 \xAB\u043E\u0442\u043A\u043B\u044E\u0447\u0438\u0442\u044C \u044D\u0442\u043E\u0442 \u043A\u043E\u043C\u043F\u044C\u044E\u0442\u0435\u0440\xBB \u0432 \u043F\u0430\u0440\u043A\u0435 \u043C\u0430\u0448\u0438\u043D \u2014 \u043E\u0442\u043E\u0437\u0432\u0430\u043D \u0442\u043E\u043A\u0435\u043D \u042D\u0422\u041E\u0419 \u043C\u0430\u0448\u0438\u043D\u044B;",
-    "  \u2022 \xAB\u0441\u0431\u0440\u043E\u0441\u0438\u0442\u044C \u0434\u043E\u0441\u0442\u0443\u043F \u0440\u043E\u044F\xBB \u0432 \u043D\u0430\u0441\u0442\u0440\u043E\u0439\u043A\u0430\u0445 (\u041F\u0440\u043E\u0444\u0438\u043B\u044C \u2192 \u0420\u043E\u0439) \u2014 \u043E\u0442\u043E\u0437\u0432\u0430\u043D\u044B \u0432\u0441\u0435;",
-    "  \u2022 \u0440\u043E\u0439 \u0432\u044B\u043A\u043B\u044E\u0447\u0435\u043D \u043C\u0430\u0441\u0442\u0435\u0440-\u0442\u0443\u043C\u0431\u043B\u0435\u0440\u043E\u043C \u2014 \u0442\u043E\u043A\u0435\u043D \u0430\u0433\u0435\u043D\u0442\u0430 \u043F\u0435\u0440\u0435\u0441\u0442\u0430\u0451\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u043E\u0432\u0430\u0442\u044C.",
-    "",
-    "\u0412\u0445\u043E\u0434 \u043D\u0430 \u0414\u0420\u0423\u0413\u041E\u0419 \u043C\u0430\u0448\u0438\u043D\u0435 \u044D\u0442\u043E\u0442 \u0442\u043E\u043A\u0435\u043D \u0431\u043E\u043B\u044C\u0448\u0435 \u043D\u0435 \u0433\u0430\u0441\u0438\u0442 (TASWM-324): \u0443 \u043A\u0430\u0436\u0434\u043E\u0439",
-    "\u043C\u0430\u0448\u0438\u043D\u044B \u0441\u0432\u043E\u0439 \u0442\u043E\u043A\u0435\u043D, \u043F\u0440\u0438\u0432\u044F\u0437\u0430\u043D\u043D\u044B\u0439 \u043A \u0435\u0451 hostId.",
-    "",
-    "\u0414\u0435\u043C\u043E\u043D \u041D\u0415 \u0440\u0430\u0431\u043E\u0442\u0430\u0435\u0442 \u0432\u0441\u043B\u0435\u043F\u0443\u044E: \u043F\u043E\u043A\u0430 \u0442\u043E\u043A\u0435\u043D\u0430 \u043D\u0435\u0442, \u043F\u0440\u043E\u0433\u043E\u043D\u044B \u043D\u0435 \u0431\u0435\u0440\u0443\u0442\u0441\u044F \u0438 \u043E\u0442\u0447\u0451\u0442\u044B",
-    "\u043D\u0435 \u043F\u0438\u0448\u0443\u0442\u0441\u044F. \u041F\u043E\u0447\u0438\u043D\u0438 \u0432\u0445\u043E\u0434\u043E\u043C \u0437\u0430\u043D\u043E\u0432\u043E:  swarm login",
-    "\u041F\u0440\u043E\u0431\u0430 \u0442\u043E\u043A\u0435\u043D\u0430 \u043D\u0435 \u043F\u0440\u043E\u0445\u043E\u0434\u0438\u0442, \u0430 \u0432\u043E\u0439\u0442\u0438 \u043C\u0435\u0448\u0430\u0435\u0442 \u0441\u0442\u0430\u0440\u044B\u0439 \u0444\u0430\u0439\u043B:  swarm login --force",
-    ""
-  ].join("\n");
-}
-var STORE_PATH, base, TOKEN_PROBE_TIMEOUT_MS;
-var init_agentToken = __esm({
-  "src/agentToken.ts"() {
-    "use strict";
-    init_config();
-    STORE_PATH = join10(SWARM_HOME, "agent.json");
-    base = (api) => api.replace(/\/$/, "");
-    TOKEN_PROBE_TIMEOUT_MS = 8e3;
-  }
-});
-
 // src/authState.ts
 function noteTokenRejected(nowMs = Date.now()) {
   if (!denial) {
@@ -3818,85 +3915,6 @@ var init_shotUpload = __esm({
   }
 });
 
-// src/linkFailure.ts
-function describeError(e, maxDepth = 4) {
-  const parts = [];
-  const seen = /* @__PURE__ */ new Set();
-  let cur = e;
-  for (let depth = 0; depth < maxDepth && cur != null && !seen.has(cur); depth++) {
-    seen.add(cur);
-    const msg = (cur instanceof Error ? cur.message : typeof cur === "string" ? cur : String(cur)).trim();
-    const code = cur.code;
-    const codeText = code === void 0 || code === null ? "" : String(code);
-    const label2 = codeText && !msg.includes(codeText) ? `${msg} [code=${codeText}]` : msg;
-    if (label2 && !parts.includes(label2)) parts.push(label2);
-    cur = cur.cause;
-  }
-  return parts.join(" \u2190 ") || String(e);
-}
-function explainLinkFailure(e) {
-  const detail = describeError(e);
-  if (detail.includes(UNKNOWN_LINK_REASON)) return { kind: "unknown", detail };
-  if (isRevokedTokenError(e) || isRevokedTokenError(detail)) return { kind: "unauthorized", detail };
-  if (MISSING_TOOL_RE.test(detail)) return { kind: "missing_tool", detail };
-  if (OFFLINE_RE.test(detail)) return { kind: "offline", detail };
-  return { kind: "rejected", detail };
-}
-var UNKNOWN_LINK_REASON, OFFLINE_RE, MISSING_TOOL_RE;
-var init_linkFailure = __esm({
-  "src/linkFailure.ts"() {
-    "use strict";
-    init_agentToken();
-    UNKNOWN_LINK_REASON = "\u043F\u043E\u0434\u043A\u043B\u044E\u0447\u0435\u043D\u0438\u044F \u043D\u0435\u0442, \u0430 \u043F\u0440\u0438\u0447\u0438\u043D\u0443 \u043A\u043E\u043D\u043D\u0435\u043A\u0442\u043E\u0440 \u043D\u0435 \u043D\u0430\u0437\u0432\u0430\u043B";
-    OFFLINE_RE = /fetch failed|econnreset|econnrefused|econnaborted|enotfound|eai_again|etimedout|ehostunreach|enetunreach|epipe|socket hang up|und_err|network error|connection (?:closed|refused|reset|error)|connect timeout/i;
-    MISSING_TOOL_RE = /tool[^.]{0,40}not found|unknown tool|tool_not_found|method not found|-32601\b/i;
-  }
-});
-
-// src/toolFailure.ts
-var TOOL_FAILURE, TOOL_FAILURE_TEXT, TOOL_FAILURE_RETRIABLE;
-var init_toolFailure = __esm({
-  "src/toolFailure.ts"() {
-    "use strict";
-    init_linkFailure();
-    TOOL_FAILURE = {
-      /** Тул отработал, но искомого в ответе нет: задачи с таким слагом в воркспейсе не существует. */
-      NOT_FOUND: "not_found",
-      /** Объект есть, но токену роя не виден (приватный проект, спейс, чужой воркспейс). */
-      FORBIDDEN: "forbidden",
-      /** Токен роя не состоит в воркспейсе, которым искали. */
-      WORKSPACE_MISMATCH: "workspace_mismatch",
-      /** До прода не достучались: сеть, DNS, таймаут, оборванный сокет. */
-      UNREACHABLE: "unreachable",
-      /** Прод ответил, но токен роя отвергнут (отозван, протух). Сетью это не лечится. */
-      UNAUTHORIZED: "unauthorized",
-      /** Тул ответил ошибкой, которую мы не узнали, — текст кладём в detail как есть. */
-      TOOL_ERROR: "tool_error",
-      /** Успех, но полезной нагрузки в ответе нет (форма ответа разошлась с ожиданием). */
-      EMPTY: "empty"
-    };
-    TOOL_FAILURE_TEXT = {
-      [TOOL_FAILURE.NOT_FOUND]: "\u0432 \u044D\u0442\u043E\u043C \u0432\u043E\u0440\u043A\u0441\u043F\u0435\u0439\u0441\u0435 \u0442\u0430\u043A\u043E\u0433\u043E \u043D\u0435\u0442 \u2014 \u043F\u0440\u043E\u0432\u0435\u0440\u044C \u0441\u043B\u0430\u0433 \u0438 \u0432\u043E\u0440\u043A\u0441\u043F\u0435\u0439\u0441 \u043F\u0440\u043E\u0433\u043E\u043D\u0430",
-      [TOOL_FAILURE.FORBIDDEN]: "\u0434\u043E\u0441\u0442\u0443\u043F\u0430 \u043D\u0435\u0442: \u043E\u0431\u044A\u0435\u043A\u0442 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u043D\u043E \u0442\u043E\u043A\u0435\u043D\u0443 \u0440\u043E\u044F \u043D\u0435 \u0432\u0438\u0434\u0435\u043D \u2014 \u043D\u0443\u0436\u0435\u043D \u0447\u0435\u043B\u043E\u0432\u0435\u043A",
-      [TOOL_FAILURE.WORKSPACE_MISMATCH]: "\u0442\u043E\u043A\u0435\u043D \u0440\u043E\u044F \u043D\u0435 \u0441\u043E\u0441\u0442\u043E\u0438\u0442 \u0432 \u044D\u0442\u043E\u043C \u0432\u043E\u0440\u043A\u0441\u043F\u0435\u0439\u0441\u0435",
-      [TOOL_FAILURE.UNREACHABLE]: "Taskless \u043D\u0435 \u043E\u0442\u0432\u0435\u0442\u0438\u043B \u2014 \u0441\u0435\u0442\u044C, DNS \u0438\u043B\u0438 \u0442\u0430\u0439\u043C\u0430\u0443\u0442",
-      [TOOL_FAILURE.UNAUTHORIZED]: "\u0442\u043E\u043A\u0435\u043D \u0440\u043E\u044F \u043E\u0442\u0432\u0435\u0440\u0433\u043D\u0443\u0442 \u043F\u0440\u043E\u0434\u043E\u043C \u2014 \u043D\u0443\u0436\u0435\u043D swarm login \u043D\u0430 \u044D\u0442\u043E\u0439 \u043C\u0430\u0448\u0438\u043D\u0435",
-      [TOOL_FAILURE.TOOL_ERROR]: "\u0442\u0443\u043B \u043E\u0442\u0432\u0435\u0442\u0438\u043B \u043E\u0448\u0438\u0431\u043A\u043E\u0439",
-      [TOOL_FAILURE.EMPTY]: "\u0442\u0443\u043B \u043E\u0442\u0432\u0435\u0442\u0438\u043B \u0443\u0441\u043F\u0435\u0445\u043E\u043C, \u043D\u043E \u0434\u0430\u043D\u043D\u044B\u0445 \u0432 \u043E\u0442\u0432\u0435\u0442\u0435 \u043D\u0435\u0442"
-    };
-    TOOL_FAILURE_RETRIABLE = {
-      [TOOL_FAILURE.NOT_FOUND]: false,
-      [TOOL_FAILURE.FORBIDDEN]: false,
-      [TOOL_FAILURE.WORKSPACE_MISMATCH]: false,
-      [TOOL_FAILURE.UNREACHABLE]: true,
-      // Отозванный токен повтором не чинится — его меняет человек (`swarm login`).
-      [TOOL_FAILURE.UNAUTHORIZED]: false,
-      [TOOL_FAILURE.TOOL_ERROR]: false,
-      [TOOL_FAILURE.EMPTY]: false
-    };
-  }
-});
-
 // src/workspace.ts
 import { readFileSync as readFileSync10, writeFileSync as writeFileSync9, unlinkSync as unlinkSync4 } from "fs";
 import { join as join17 } from "path";
@@ -6879,7 +6897,7 @@ init_config();
 init_resources();
 init_names2();
 init_storm();
-import { appendFileSync, existsSync as existsSync6, mkdirSync as mkdirSync6, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
+import { appendFileSync, existsSync as existsSync6, mkdirSync as mkdirSync6, readFileSync as readFileSync5, writeFileSync as writeFileSync5 } from "fs";
 import { dirname as dirname2 } from "path";
 import { randomUUID } from "crypto";
 
@@ -6906,20 +6924,23 @@ function parsePendingRepoRules(raw) {
   return out;
 }
 
+// src/swarmClient.ts
+init_toolFailure();
+
 // src/logTail.ts
 import { closeSync, existsSync as existsSync5, openSync, readSync, readdirSync as readdirSync5, statSync as statSync4 } from "fs";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 
 // src/runLogDir.ts
 import { existsSync as existsSync4, mkdirSync as mkdirSync5, readdirSync as readdirSync4, renameSync as renameSync2, statSync as statSync3 } from "fs";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 function runLogDirName(runLogKey) {
   const safe = runLogKey.replace(/[^A-Za-z0-9_-]+/g, "-").replace(/^[-_]+|[-_]+$/g, "");
   if (!safe) throw new Error(`\u043A\u043B\u044E\u0447 \u043F\u0440\u043E\u0433\u043E\u043D\u0430 \u043D\u0435 \u0433\u043E\u0434\u0438\u0442\u0441\u044F \u0432 \u0438\u043C\u044F \u043A\u0430\u0442\u0430\u043B\u043E\u0433\u0430 run-log'\u043E\u0432: ${JSON.stringify(runLogKey)}`);
   return /^\d+$/.test(safe) ? `k-${safe}` : safe;
 }
 function runLogDirPath(runLogsDir, runLogKey) {
-  return join6(runLogsDir, runLogDirName(runLogKey));
+  return join7(runLogsDir, runLogDirName(runLogKey));
 }
 function findRunLogDir(runLogsDir, keys) {
   for (const key of keys) {
@@ -6947,6 +6968,14 @@ function toolErrorText(res) {
   if (!text) return "\u043F\u0440\u043E\u0434 \u043E\u0442\u0432\u0435\u0440\u0433 \u0432\u044B\u0437\u043E\u0432 \u0431\u0435\u0437 \u043E\u0431\u044A\u044F\u0441\u043D\u0435\u043D\u0438\u044F";
   return text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
 }
+var DEPS_UNRETRIABLE_CODES = /* @__PURE__ */ new Set([
+  TOOL_FAILURE.FORBIDDEN,
+  TOOL_FAILURE.UNAUTHORIZED,
+  TOOL_FAILURE.WORKSPACE_MISMATCH
+]);
+function depsFailureRetriable(code) {
+  return !DEPS_UNRETRIABLE_CODES.has(code);
+}
 function runRef(runKey) {
   return { __runRef: runKey };
 }
@@ -7043,6 +7072,13 @@ var SwarmClient = class _SwarmClient {
   // дальше удвоением до потолка TTL: устойчиво отвергающий прод (старее демона, скоуп
   // токена) не должен получать вопрос каждые четыре секунды до конца своей жизни.
   static DEPS_RETRY_BASE_MS = 5e3;
+  // TASWM-517: сколько раз спрашиваем НЕСАМОЛЕЧАЩИЙСЯ отказ, прежде чем перестать вовсе.
+  // `agent_forbidden` («тул недоступен аккаунту-агенту роя») повтором не чинится: 26.08
+  // два прогона получили его по 53 раза каждый и остались в очереди навсегда. Три захода
+  // при backoff 5с/10с — это ~15 секунд: запас на случай, если классификатор ошибся и
+  // отказ на деле транзиентный, но не час молчаливого простоя. По исчерпании прогон
+  // роняет гейт спавна (DEPS_UNRETRIABLE_ATTEMPTS читается и там).
+  static DEPS_UNRETRIABLE_ATTEMPTS = 3;
   // TASWM-327: прод старее демона и не знает аргумент `level` у swarm_notify. Выясняется
   // ровно один раз (первой отвергнутой нотификацией) и держится всю жизнь процесса — иначе
   // каждый сигнал платил бы за это лишним отвергнутым вызовом. См. notifyAnomaly.
@@ -7114,13 +7150,13 @@ var SwarmClient = class _SwarmClient {
   recover() {
     if (existsSync6(this.mapPath)) {
       try {
-        const obj = JSON.parse(readFileSync4(this.mapPath, "utf8"));
+        const obj = JSON.parse(readFileSync5(this.mapPath, "utf8"));
         for (const [k, v] of Object.entries(obj)) this.prodIdByKey.set(k, v);
       } catch {
       }
     }
     if (existsSync6(this.outboxPath)) {
-      const txt = readFileSync4(this.outboxPath, "utf8");
+      const txt = readFileSync5(this.outboxPath, "utf8");
       for (const line of txt.split("\n")) {
         const s = line.trim();
         if (!s) continue;
@@ -7143,7 +7179,7 @@ var SwarmClient = class _SwarmClient {
     if (!existsSync6(this.stormPath)) return;
     let txt;
     try {
-      txt = readFileSync4(this.stormPath, "utf8");
+      txt = readFileSync5(this.stormPath, "utf8");
     } catch {
       return;
     }
@@ -7648,11 +7684,12 @@ var SwarmClient = class _SwarmClient {
       res = await this.call("swarm_deps_status", { refs: ask });
     } catch (e) {
       for (const ref of ask) this.depsAskedAt.delete(ref);
-      this.noteDepsUnanswered(ask, nowMs, String(e));
+      this.noteDepsUnanswered(ask, nowMs, String(e), depsFailureRetriable(classifyThrown(e).code));
       return;
     }
     if (res?.isError) {
-      this.noteDepsUnanswered(ask, nowMs, toolErrorText(res));
+      const text = toolErrorText(res);
+      this.noteDepsUnanswered(ask, nowMs, text, depsFailureRetriable(classifyToolFailure(text)));
       return;
     }
     const deps = res.structuredContent?.deps ?? [];
@@ -7692,6 +7729,7 @@ var SwarmClient = class _SwarmClient {
   depsRetryDelay(ref) {
     const fail = this.depsUnanswered.get(ref);
     if (fail) {
+      if (!fail.retriable && fail.attempts >= _SwarmClient.DEPS_UNRETRIABLE_ATTEMPTS) return _SwarmClient.DEPS_TTL_MS;
       const backoff = _SwarmClient.DEPS_RETRY_BASE_MS * 2 ** Math.min(fail.attempts - 1, 10);
       return Math.min(backoff, _SwarmClient.DEPS_TTL_MS);
     }
@@ -7700,17 +7738,19 @@ var SwarmClient = class _SwarmClient {
     return _SwarmClient.DEPS_TTL_MS;
   }
   /** Запомнить, что прод по этим ссылкам не ответил (см. depsUnanswered / TASWM-486). */
-  noteDepsUnanswered(refs, nowMs, error) {
+  noteDepsUnanswered(refs, nowMs, error, retriable = true) {
     for (const ref of refs) {
       const prev = this.depsUnanswered.get(ref);
+      const sameKind = prev != null && prev.retriable === retriable;
       this.depsUnanswered.set(ref, {
         ref,
         slug: this.depSlug.get(ref) ?? ref,
         // `since` — начало ЭПИЗОДА слепоты, а не последняя попытка: именно возраст эпизода
         // отвечает на вопрос «сколько прогон уже стоит вслепую».
         since: prev?.since ?? nowMs,
-        attempts: (prev?.attempts ?? 0) + 1,
-        error
+        attempts: sameKind ? prev.attempts + 1 : 1,
+        error,
+        retriable
       });
     }
   }
@@ -9254,13 +9294,13 @@ var SwarmClient = class _SwarmClient {
   }
   persistPending() {
     try {
-      writeFileSync4(this.outboxPath, this.pending.map((e) => JSON.stringify(e)).join("\n") + (this.pending.length ? "\n" : ""));
+      writeFileSync5(this.outboxPath, this.pending.map((e) => JSON.stringify(e)).join("\n") + (this.pending.length ? "\n" : ""));
     } catch {
     }
   }
   persistMap() {
     try {
-      writeFileSync4(this.mapPath, JSON.stringify(Object.fromEntries(this.prodIdByKey)));
+      writeFileSync5(this.mapPath, JSON.stringify(Object.fromEntries(this.prodIdByKey)));
     } catch {
     }
   }
@@ -9393,7 +9433,7 @@ init_config();
 import { $ as $6 } from "execa";
 
 // src/daemonLaunch.ts
-import { openSync as openSync2, closeSync as closeSync2, readFileSync as readFileSync5 } from "fs";
+import { openSync as openSync2, closeSync as closeSync2, readFileSync as readFileSync6 } from "fs";
 import { spawn } from "child_process";
 var FOREGROUND_FLAGS = /* @__PURE__ */ new Set(["--foreground", "-f", "--attach"]);
 function parseStartMode(argv) {
@@ -9453,14 +9493,14 @@ function launchDetached(opts) {
 }
 function tailFile(path, lines) {
   try {
-    return tailText(readFileSync5(path, "utf8"), lines);
+    return tailText(readFileSync6(path, "utf8"), lines);
   } catch {
     return "";
   }
 }
 
 // src/logRotate.ts
-import { copyFileSync as copyFileSync2, renameSync as renameSync3, statSync as statSync5, fstatSync, truncateSync, unlinkSync, existsSync as existsSync7 } from "fs";
+import { copyFileSync as copyFileSync2, renameSync as renameSync3, statSync as statSync5, fstatSync, truncateSync, unlinkSync as unlinkSync2, existsSync as existsSync7 } from "fs";
 var realIo = {
   size: (path) => {
     try {
@@ -9472,7 +9512,7 @@ var realIo = {
   copy: copyFileSync2,
   rename: renameSync3,
   truncate: (path) => truncateSync(path, 0),
-  unlink: unlinkSync,
+  unlink: unlinkSync2,
   exists: existsSync7
 };
 var STRAY_GENERATIONS = 8;
@@ -9501,17 +9541,17 @@ init_repoRegistry();
 
 // src/hostIdentity.ts
 import { hostname } from "os";
-import { existsSync as existsSync8, readFileSync as readFileSync6, renameSync as renameSync4, writeFileSync as writeFileSync5 } from "fs";
-import { join as join8 } from "path";
+import { existsSync as existsSync8, readFileSync as readFileSync7, renameSync as renameSync4, writeFileSync as writeFileSync6 } from "fs";
+import { join as join9 } from "path";
 import { randomUUID as randomUUID2 } from "crypto";
 function hostIdentityPath(home) {
-  return join8(home, "host.json");
+  return join9(home, "host.json");
 }
 function loadHostIdentity(deps) {
   const exists = deps.exists ?? existsSync8;
-  const readFile2 = deps.readFile ?? ((p) => readFileSync6(p, "utf8"));
+  const readFile2 = deps.readFile ?? ((p) => readFileSync7(p, "utf8"));
   const writeFile3 = deps.writeFile ?? ((p, data) => {
-    writeFileSync5(`${p}.tmp`, data);
+    writeFileSync6(`${p}.tmp`, data);
     renameSync4(`${p}.tmp`, p);
   });
   const host = deps.hostname ?? hostname;
@@ -9627,7 +9667,7 @@ import { serve as serve2 } from "@hono/node-server";
 
 // src/diff.ts
 import { statSync as statSync6 } from "fs";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 import { $ as $3 } from "execa";
 var MAX_FILES = 200;
 var MAX_LINES_PER_FILE = 1500;
@@ -9795,7 +9835,7 @@ async function collectRunDiff(worktree, opts = {}) {
       files.push(pf);
     }
   }
-  files.sort((a, b) => mtime(join9(worktree, b.path)) - mtime(join9(worktree, a.path)));
+  files.sort((a, b) => mtime(join10(worktree, b.path)) - mtime(join10(worktree, a.path)));
   const truncatedFiles = files.length > MAX_FILES;
   if (truncatedFiles) files = files.slice(0, MAX_FILES);
   const added = files.reduce((s, f) => s + f.added, 0);

package/dist/overmind.js

@@ -3092,76 +3092,12 @@ var init_storm = __esm({
   }
 });
 
-// src/heartbeat.ts
-import { readFileSync as readFileSync6, renameSync as renameSync4, writeFileSync as writeFileSync6 } from "fs";
-function writeHeartbeat(path, now) {
-  const tmp = `${path}.tmp`;
-  writeFileSync6(tmp, String(now));
-  renameSync4(tmp, path);
-}
-function readHeartbeat(path) {
-  try {
-    const ms = Number(readFileSync6(path, "utf8").trim());
-    return Number.isFinite(ms) ? ms : null;
-  } catch {
-    return null;
-  }
-}
-function overmindAlive(path, now, staleMs) {
-  const ts = readHeartbeat(path);
-  if (ts == null) return false;
-  return now - ts < staleMs;
-}
-var init_heartbeat = __esm({
-  "src/heartbeat.ts"() {
-    "use strict";
-  }
-});
-
-// src/logNoise.ts
-function timesWord(n) {
-  const tens = n % 100;
-  if (tens >= 11 && tens <= 14) return "\u0440\u0430\u0437";
-  return n % 10 >= 2 && n % 10 <= 4 ? "\u0440\u0430\u0437\u0430" : "\u0440\u0430\u0437";
-}
-function makeRepeatFilter(opts = {}) {
-  const remindAfterMs = opts.remindAfterMs ?? DEFAULT_REMIND_MS;
-  const streaks = /* @__PURE__ */ new Map();
-  return {
-    say(key, message, now) {
-      const prev = streaks.get(key);
-      if (!prev || prev.message !== message) {
-        const tail2 = prev && prev.hidden > 0 ? ` (\u0434\u043E \u044D\u0442\u043E\u0433\u043E \u0442\u043E \u0436\u0435 \u0441\u0430\u043C\u043E\u0435 \u043C\u043E\u043B\u0447\u0430 \u043F\u043E\u0432\u0442\u043E\u0440\u0438\u043B\u043E\u0441\u044C \u0435\u0449\u0451 ${prev.hidden} ${timesWord(prev.hidden)})` : "";
-        streaks.set(key, { message, since: now, saidAt: now, hidden: 0 });
-        return `${message}${tail2}`;
-      }
-      prev.hidden += 1;
-      if (now - prev.saidAt < remindAfterMs) return null;
-      const hidden = prev.hidden;
-      const minutes = Math.max(1, Math.round((now - prev.since) / 6e4));
-      prev.saidAt = now;
-      prev.hidden = 0;
-      return `${message} \u2014 \u0442\u043E \u0436\u0435 \u0441\u0430\u043C\u043E\u0435 ${hidden} ${timesWord(hidden)} \u043F\u043E\u0434\u0440\u044F\u0434, \u0442\u044F\u043D\u0435\u0442\u0441\u044F ${minutes} \u043C\u0438\u043D`;
-    },
-    forget(key) {
-      streaks.delete(key);
-    }
-  };
-}
-var DEFAULT_REMIND_MS;
-var init_logNoise = __esm({
-  "src/logNoise.ts"() {
-    "use strict";
-    DEFAULT_REMIND_MS = 10 * 6e4;
-  }
-});
-
 // src/agentToken.ts
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync7, unlinkSync as unlinkSync3 } from "fs";
-import { join as join9 } from "path";
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync5, unlinkSync as unlinkSync2 } from "fs";
+import { join as join7 } from "path";
 function loadAgentToken() {
   try {
-    const s = JSON.parse(readFileSync7(STORE_PATH, "utf8"));
+    const s = JSON.parse(readFileSync5(STORE_PATH, "utf8"));
     return s.token ? s : null;
   } catch {
     return null;
@@ -3214,7 +3150,7 @@ var init_agentToken = __esm({
   "src/agentToken.ts"() {
     "use strict";
     init_config();
-    STORE_PATH = join9(SWARM_HOME, "agent.json");
+    STORE_PATH = join7(SWARM_HOME, "agent.json");
     base = (api) => api.replace(/\/$/, "");
     TOKEN_PROBE_TIMEOUT_MS = 8e3;
   }
@@ -3255,6 +3191,142 @@ var init_linkFailure = __esm({
   }
 });
 
+// src/toolFailure.ts
+function trimDetail(s) {
+  const t = s.trim();
+  return t.length <= FAILURE_DETAIL_MAX ? t : `${t.slice(0, FAILURE_DETAIL_MAX)}\u2026`;
+}
+function classifyToolFailure(raw) {
+  if (MISMATCH_RE.test(raw)) return TOOL_FAILURE.WORKSPACE_MISMATCH;
+  if (FORBIDDEN_RE.test(raw)) return TOOL_FAILURE.FORBIDDEN;
+  if (NOT_FOUND_RE.test(raw)) return TOOL_FAILURE.NOT_FOUND;
+  return TOOL_FAILURE.TOOL_ERROR;
+}
+function classifyThrown(e) {
+  const { kind, detail } = explainLinkFailure(e);
+  const code = kind === "offline" ? TOOL_FAILURE.UNREACHABLE : kind === "unauthorized" ? TOOL_FAILURE.UNAUTHORIZED : (
+    // «ручки нет» и «сервер отказал по существу» разбираем доменно: там может быть
+    // и task_not_found, и отказ по правам — то есть наши коды, а не транспортные.
+    classifyToolFailure(detail)
+  );
+  return { code, detail };
+}
+function describeToolFailure(f) {
+  const text = TOOL_FAILURE_TEXT[f.code];
+  const detail = trimDetail(f.detail);
+  return detail ? `${text} (${detail})` : text;
+}
+var TOOL_FAILURE, TOOL_FAILURE_TEXT, TOOL_FAILURE_RETRIABLE, FAILURE_DETAIL_MAX, NOT_FOUND_RE, FORBIDDEN_RE, MISMATCH_RE;
+var init_toolFailure = __esm({
+  "src/toolFailure.ts"() {
+    "use strict";
+    init_linkFailure();
+    TOOL_FAILURE = {
+      /** Тул отработал, но искомого в ответе нет: задачи с таким слагом в воркспейсе не существует. */
+      NOT_FOUND: "not_found",
+      /** Объект есть, но токену роя не виден (приватный проект, спейс, чужой воркспейс). */
+      FORBIDDEN: "forbidden",
+      /** Токен роя не состоит в воркспейсе, которым искали. */
+      WORKSPACE_MISMATCH: "workspace_mismatch",
+      /** До прода не достучались: сеть, DNS, таймаут, оборванный сокет. */
+      UNREACHABLE: "unreachable",
+      /** Прод ответил, но токен роя отвергнут (отозван, протух). Сетью это не лечится. */
+      UNAUTHORIZED: "unauthorized",
+      /** Тул ответил ошибкой, которую мы не узнали, — текст кладём в detail как есть. */
+      TOOL_ERROR: "tool_error",
+      /** Успех, но полезной нагрузки в ответе нет (форма ответа разошлась с ожиданием). */
+      EMPTY: "empty"
+    };
+    TOOL_FAILURE_TEXT = {
+      [TOOL_FAILURE.NOT_FOUND]: "\u0432 \u044D\u0442\u043E\u043C \u0432\u043E\u0440\u043A\u0441\u043F\u0435\u0439\u0441\u0435 \u0442\u0430\u043A\u043E\u0433\u043E \u043D\u0435\u0442 \u2014 \u043F\u0440\u043E\u0432\u0435\u0440\u044C \u0441\u043B\u0430\u0433 \u0438 \u0432\u043E\u0440\u043A\u0441\u043F\u0435\u0439\u0441 \u043F\u0440\u043E\u0433\u043E\u043D\u0430",
+      [TOOL_FAILURE.FORBIDDEN]: "\u0434\u043E\u0441\u0442\u0443\u043F\u0430 \u043D\u0435\u0442: \u043E\u0431\u044A\u0435\u043A\u0442 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u043D\u043E \u0442\u043E\u043A\u0435\u043D\u0443 \u0440\u043E\u044F \u043D\u0435 \u0432\u0438\u0434\u0435\u043D \u2014 \u043D\u0443\u0436\u0435\u043D \u0447\u0435\u043B\u043E\u0432\u0435\u043A",
+      [TOOL_FAILURE.WORKSPACE_MISMATCH]: "\u0442\u043E\u043A\u0435\u043D \u0440\u043E\u044F \u043D\u0435 \u0441\u043E\u0441\u0442\u043E\u0438\u0442 \u0432 \u044D\u0442\u043E\u043C \u0432\u043E\u0440\u043A\u0441\u043F\u0435\u0439\u0441\u0435",
+      [TOOL_FAILURE.UNREACHABLE]: "Taskless \u043D\u0435 \u043E\u0442\u0432\u0435\u0442\u0438\u043B \u2014 \u0441\u0435\u0442\u044C, DNS \u0438\u043B\u0438 \u0442\u0430\u0439\u043C\u0430\u0443\u0442",
+      [TOOL_FAILURE.UNAUTHORIZED]: "\u0442\u043E\u043A\u0435\u043D \u0440\u043E\u044F \u043E\u0442\u0432\u0435\u0440\u0433\u043D\u0443\u0442 \u043F\u0440\u043E\u0434\u043E\u043C \u2014 \u043D\u0443\u0436\u0435\u043D swarm login \u043D\u0430 \u044D\u0442\u043E\u0439 \u043C\u0430\u0448\u0438\u043D\u0435",
+      [TOOL_FAILURE.TOOL_ERROR]: "\u0442\u0443\u043B \u043E\u0442\u0432\u0435\u0442\u0438\u043B \u043E\u0448\u0438\u0431\u043A\u043E\u0439",
+      [TOOL_FAILURE.EMPTY]: "\u0442\u0443\u043B \u043E\u0442\u0432\u0435\u0442\u0438\u043B \u0443\u0441\u043F\u0435\u0445\u043E\u043C, \u043D\u043E \u0434\u0430\u043D\u043D\u044B\u0445 \u0432 \u043E\u0442\u0432\u0435\u0442\u0435 \u043D\u0435\u0442"
+    };
+    TOOL_FAILURE_RETRIABLE = {
+      [TOOL_FAILURE.NOT_FOUND]: false,
+      [TOOL_FAILURE.FORBIDDEN]: false,
+      [TOOL_FAILURE.WORKSPACE_MISMATCH]: false,
+      [TOOL_FAILURE.UNREACHABLE]: true,
+      // Отозванный токен повтором не чинится — его меняет человек (`swarm login`).
+      [TOOL_FAILURE.UNAUTHORIZED]: false,
+      [TOOL_FAILURE.TOOL_ERROR]: false,
+      [TOOL_FAILURE.EMPTY]: false
+    };
+    FAILURE_DETAIL_MAX = 300;
+    NOT_FOUND_RE = /task_not_found|not_found|не найдена|не найден/i;
+    FORBIDDEN_RE = /forbidden|not visible|no access|нет доступа|(?:http|status|code)[ =:]*403\b|\(403\)|403 forbidden/i;
+    MISMATCH_RE = /workspace_mismatch|not a member of that workspace/i;
+  }
+});
+
+// src/heartbeat.ts
+import { readFileSync as readFileSync7, renameSync as renameSync4, writeFileSync as writeFileSync7 } from "fs";
+function writeHeartbeat(path, now) {
+  const tmp = `${path}.tmp`;
+  writeFileSync7(tmp, String(now));
+  renameSync4(tmp, path);
+}
+function readHeartbeat(path) {
+  try {
+    const ms = Number(readFileSync7(path, "utf8").trim());
+    return Number.isFinite(ms) ? ms : null;
+  } catch {
+    return null;
+  }
+}
+function overmindAlive(path, now, staleMs) {
+  const ts = readHeartbeat(path);
+  if (ts == null) return false;
+  return now - ts < staleMs;
+}
+var init_heartbeat = __esm({
+  "src/heartbeat.ts"() {
+    "use strict";
+  }
+});
+
+// src/logNoise.ts
+function timesWord(n) {
+  const tens = n % 100;
+  if (tens >= 11 && tens <= 14) return "\u0440\u0430\u0437";
+  return n % 10 >= 2 && n % 10 <= 4 ? "\u0440\u0430\u0437\u0430" : "\u0440\u0430\u0437";
+}
+function makeRepeatFilter(opts = {}) {
+  const remindAfterMs = opts.remindAfterMs ?? DEFAULT_REMIND_MS;
+  const streaks = /* @__PURE__ */ new Map();
+  return {
+    say(key, message, now) {
+      const prev = streaks.get(key);
+      if (!prev || prev.message !== message) {
+        const tail2 = prev && prev.hidden > 0 ? ` (\u0434\u043E \u044D\u0442\u043E\u0433\u043E \u0442\u043E \u0436\u0435 \u0441\u0430\u043C\u043E\u0435 \u043C\u043E\u043B\u0447\u0430 \u043F\u043E\u0432\u0442\u043E\u0440\u0438\u043B\u043E\u0441\u044C \u0435\u0449\u0451 ${prev.hidden} ${timesWord(prev.hidden)})` : "";
+        streaks.set(key, { message, since: now, saidAt: now, hidden: 0 });
+        return `${message}${tail2}`;
+      }
+      prev.hidden += 1;
+      if (now - prev.saidAt < remindAfterMs) return null;
+      const hidden = prev.hidden;
+      const minutes = Math.max(1, Math.round((now - prev.since) / 6e4));
+      prev.saidAt = now;
+      prev.hidden = 0;
+      return `${message} \u2014 \u0442\u043E \u0436\u0435 \u0441\u0430\u043C\u043E\u0435 ${hidden} ${timesWord(hidden)} \u043F\u043E\u0434\u0440\u044F\u0434, \u0442\u044F\u043D\u0435\u0442\u0441\u044F ${minutes} \u043C\u0438\u043D`;
+    },
+    forget(key) {
+      streaks.delete(key);
+    }
+  };
+}
+var DEFAULT_REMIND_MS;
+var init_logNoise = __esm({
+  "src/logNoise.ts"() {
+    "use strict";
+    DEFAULT_REMIND_MS = 10 * 6e4;
+  }
+});
+
 // src/procList.ts
 function parsePsRows(out) {
   const rows = [];
@@ -4904,78 +4976,6 @@ var init_oauth = __esm({
   }
 });
 
-// src/toolFailure.ts
-function trimDetail(s) {
-  const t = s.trim();
-  return t.length <= FAILURE_DETAIL_MAX ? t : `${t.slice(0, FAILURE_DETAIL_MAX)}\u2026`;
-}
-function classifyToolFailure(raw) {
-  if (MISMATCH_RE.test(raw)) return TOOL_FAILURE.WORKSPACE_MISMATCH;
-  if (FORBIDDEN_RE.test(raw)) return TOOL_FAILURE.FORBIDDEN;
-  if (NOT_FOUND_RE.test(raw)) return TOOL_FAILURE.NOT_FOUND;
-  return TOOL_FAILURE.TOOL_ERROR;
-}
-function classifyThrown(e) {
-  const { kind, detail } = explainLinkFailure(e);
-  const code = kind === "offline" ? TOOL_FAILURE.UNREACHABLE : kind === "unauthorized" ? TOOL_FAILURE.UNAUTHORIZED : (
-    // «ручки нет» и «сервер отказал по существу» разбираем доменно: там может быть
-    // и task_not_found, и отказ по правам — то есть наши коды, а не транспортные.
-    classifyToolFailure(detail)
-  );
-  return { code, detail };
-}
-function describeToolFailure(f) {
-  const text = TOOL_FAILURE_TEXT[f.code];
-  const detail = trimDetail(f.detail);
-  return detail ? `${text} (${detail})` : text;
-}
-var TOOL_FAILURE, TOOL_FAILURE_TEXT, TOOL_FAILURE_RETRIABLE, FAILURE_DETAIL_MAX, NOT_FOUND_RE, FORBIDDEN_RE, MISMATCH_RE;
-var init_toolFailure = __esm({
-  "src/toolFailure.ts"() {
-    "use strict";
-    init_linkFailure();
-    TOOL_FAILURE = {
-      /** Тул отработал, но искомого в ответе нет: задачи с таким слагом в воркспейсе не существует. */
-      NOT_FOUND: "not_found",
-      /** Объект есть, но токену роя не виден (приватный проект, спейс, чужой воркспейс). */
-      FORBIDDEN: "forbidden",
-      /** Токен роя не состоит в воркспейсе, которым искали. */
-      WORKSPACE_MISMATCH: "workspace_mismatch",
-      /** До прода не достучались: сеть, DNS, таймаут, оборванный сокет. */
-      UNREACHABLE: "unreachable",
-      /** Прод ответил, но токен роя отвергнут (отозван, протух). Сетью это не лечится. */
-      UNAUTHORIZED: "unauthorized",
-      /** Тул ответил ошибкой, которую мы не узнали, — текст кладём в detail как есть. */
-      TOOL_ERROR: "tool_error",
-      /** Успех, но полезной нагрузки в ответе нет (форма ответа разошлась с ожиданием). */
-      EMPTY: "empty"
-    };
-    TOOL_FAILURE_TEXT = {
-      [TOOL_FAILURE.NOT_FOUND]: "\u0432 \u044D\u0442\u043E\u043C \u0432\u043E\u0440\u043A\u0441\u043F\u0435\u0439\u0441\u0435 \u0442\u0430\u043A\u043E\u0433\u043E \u043D\u0435\u0442 \u2014 \u043F\u0440\u043E\u0432\u0435\u0440\u044C \u0441\u043B\u0430\u0433 \u0438 \u0432\u043E\u0440\u043A\u0441\u043F\u0435\u0439\u0441 \u043F\u0440\u043E\u0433\u043E\u043D\u0430",
-      [TOOL_FAILURE.FORBIDDEN]: "\u0434\u043E\u0441\u0442\u0443\u043F\u0430 \u043D\u0435\u0442: \u043E\u0431\u044A\u0435\u043A\u0442 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u043D\u043E \u0442\u043E\u043A\u0435\u043D\u0443 \u0440\u043E\u044F \u043D\u0435 \u0432\u0438\u0434\u0435\u043D \u2014 \u043D\u0443\u0436\u0435\u043D \u0447\u0435\u043B\u043E\u0432\u0435\u043A",
-      [TOOL_FAILURE.WORKSPACE_MISMATCH]: "\u0442\u043E\u043A\u0435\u043D \u0440\u043E\u044F \u043D\u0435 \u0441\u043E\u0441\u0442\u043E\u0438\u0442 \u0432 \u044D\u0442\u043E\u043C \u0432\u043E\u0440\u043A\u0441\u043F\u0435\u0439\u0441\u0435",
-      [TOOL_FAILURE.UNREACHABLE]: "Taskless \u043D\u0435 \u043E\u0442\u0432\u0435\u0442\u0438\u043B \u2014 \u0441\u0435\u0442\u044C, DNS \u0438\u043B\u0438 \u0442\u0430\u0439\u043C\u0430\u0443\u0442",
-      [TOOL_FAILURE.UNAUTHORIZED]: "\u0442\u043E\u043A\u0435\u043D \u0440\u043E\u044F \u043E\u0442\u0432\u0435\u0440\u0433\u043D\u0443\u0442 \u043F\u0440\u043E\u0434\u043E\u043C \u2014 \u043D\u0443\u0436\u0435\u043D swarm login \u043D\u0430 \u044D\u0442\u043E\u0439 \u043C\u0430\u0448\u0438\u043D\u0435",
-      [TOOL_FAILURE.TOOL_ERROR]: "\u0442\u0443\u043B \u043E\u0442\u0432\u0435\u0442\u0438\u043B \u043E\u0448\u0438\u0431\u043A\u043E\u0439",
-      [TOOL_FAILURE.EMPTY]: "\u0442\u0443\u043B \u043E\u0442\u0432\u0435\u0442\u0438\u043B \u0443\u0441\u043F\u0435\u0445\u043E\u043C, \u043D\u043E \u0434\u0430\u043D\u043D\u044B\u0445 \u0432 \u043E\u0442\u0432\u0435\u0442\u0435 \u043D\u0435\u0442"
-    };
-    TOOL_FAILURE_RETRIABLE = {
-      [TOOL_FAILURE.NOT_FOUND]: false,
-      [TOOL_FAILURE.FORBIDDEN]: false,
-      [TOOL_FAILURE.WORKSPACE_MISMATCH]: false,
-      [TOOL_FAILURE.UNREACHABLE]: true,
-      // Отозванный токен повтором не чинится — его меняет человек (`swarm login`).
-      [TOOL_FAILURE.UNAUTHORIZED]: false,
-      [TOOL_FAILURE.TOOL_ERROR]: false,
-      [TOOL_FAILURE.EMPTY]: false
-    };
-    FAILURE_DETAIL_MAX = 300;
-    NOT_FOUND_RE = /task_not_found|not_found|не найдена|не найден/i;
-    FORBIDDEN_RE = /forbidden|not visible|no access|нет доступа|(?:http|status|code)[ =:]*403\b|\(403\)|403 forbidden/i;
-    MISMATCH_RE = /workspace_mismatch|not a member of that workspace/i;
-  }
-});
-
 // src/authState.ts
 function noteTokenRejected(nowMs = Date.now()) {
   if (!denial) {
@@ -6689,7 +6689,7 @@ init_config();
 init_resources();
 init_names2();
 init_storm();
-import { appendFileSync, existsSync as existsSync7, mkdirSync as mkdirSync6, readFileSync as readFileSync5, writeFileSync as writeFileSync5 } from "fs";
+import { appendFileSync, existsSync as existsSync7, mkdirSync as mkdirSync6, readFileSync as readFileSync6, writeFileSync as writeFileSync6 } from "fs";
 import { dirname as dirname2 } from "path";
 import { randomUUID } from "crypto";
 
@@ -6741,13 +6741,16 @@ function renderPendingRulesBlock(rules) {
   ].join("\n");
 }
 
+// src/swarmClient.ts
+init_toolFailure();
+
 // src/logTail.ts
 import { closeSync, existsSync as existsSync6, openSync, readSync, readdirSync as readdirSync5, statSync as statSync4 } from "fs";
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 
 // src/runLogDir.ts
 import { existsSync as existsSync5, mkdirSync as mkdirSync5, readdirSync as readdirSync4, renameSync as renameSync3, statSync as statSync3 } from "fs";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 var LEGACY_RUN_LOGS_SUBDIR = "legacy";
 function runLogDirName(runLogKey) {
   const safe2 = runLogKey.replace(/[^A-Za-z0-9_-]+/g, "-").replace(/^[-_]+|[-_]+$/g, "");
@@ -6755,7 +6758,7 @@ function runLogDirName(runLogKey) {
   return /^\d+$/.test(safe2) ? `k-${safe2}` : safe2;
 }
 function runLogDirPath(runLogsDir, runLogKey) {
-  return join7(runLogsDir, runLogDirName(runLogKey));
+  return join8(runLogsDir, runLogDirName(runLogKey));
 }
 function findRunLogDir(runLogsDir, keys) {
   for (const key of keys) {
@@ -6770,7 +6773,7 @@ function runLogDirForWrite(runLogsDir, keys) {
   return findRunLogDir(runLogsDir, keys) ?? runLogDirPath(runLogsDir, canonical);
 }
 function sweepLegacyRunLogs(runLogsDir) {
-  const legacyDir = join7(runLogsDir, LEGACY_RUN_LOGS_SUBDIR);
+  const legacyDir = join8(runLogsDir, LEGACY_RUN_LOGS_SUBDIR);
   let entries;
   try {
     entries = readdirSync4(runLogsDir);
@@ -6781,12 +6784,12 @@ function sweepLegacyRunLogs(runLogsDir) {
   let failed = 0;
   for (const name of entries) {
     if (!/^\d+$/.test(name)) continue;
-    const from = join7(runLogsDir, name);
+    const from = join8(runLogsDir, name);
     try {
       if (!statSync3(from).isDirectory()) continue;
       mkdirSync5(legacyDir, { recursive: true });
-      let to = join7(legacyDir, name);
-      for (let n = 2; existsSync5(to) && n < 100; n++) to = join7(legacyDir, `${name}-${n}`);
+      let to = join8(legacyDir, name);
+      for (let n = 2; existsSync5(to) && n < 100; n++) to = join8(legacyDir, `${name}-${n}`);
       renameSync3(from, to);
       moved++;
     } catch {
@@ -6852,8 +6855,8 @@ function latestRunLaunch(runLogsDir, runLogKeys) {
   }
   if (indexes.size === 0) return null;
   const index = Math.max(...indexes);
-  const out = [join8(dir, `${index}.json`), join8(dir, `${index}.json.done`)].find((p) => existsSync6(p)) ?? null;
-  const err = existsSync6(join8(dir, `${index}.err.log`)) ? join8(dir, `${index}.err.log`) : null;
+  const out = [join9(dir, `${index}.json`), join9(dir, `${index}.json.done`)].find((p) => existsSync6(p)) ?? null;
+  const err = existsSync6(join9(dir, `${index}.err.log`)) ? join9(dir, `${index}.err.log`) : null;
   return { index, total: indexes.size, out, err };
 }
 function runLogTail(runLogsDir, runLogKeys, opts) {
@@ -6940,6 +6943,14 @@ function toolErrorText(res) {
   if (!text) return "\u043F\u0440\u043E\u0434 \u043E\u0442\u0432\u0435\u0440\u0433 \u0432\u044B\u0437\u043E\u0432 \u0431\u0435\u0437 \u043E\u0431\u044A\u044F\u0441\u043D\u0435\u043D\u0438\u044F";
   return text.length > 200 ? `${text.slice(0, 200)}\u2026` : text;
 }
+var DEPS_UNRETRIABLE_CODES = /* @__PURE__ */ new Set([
+  TOOL_FAILURE.FORBIDDEN,
+  TOOL_FAILURE.UNAUTHORIZED,
+  TOOL_FAILURE.WORKSPACE_MISMATCH
+]);
+function depsFailureRetriable(code) {
+  return !DEPS_UNRETRIABLE_CODES.has(code);
+}
 function runRef(runKey) {
   return { __runRef: runKey };
 }
@@ -7036,6 +7047,13 @@ var SwarmClient = class _SwarmClient {
   // дальше удвоением до потолка TTL: устойчиво отвергающий прод (старее демона, скоуп
   // токена) не должен получать вопрос каждые четыре секунды до конца своей жизни.
   static DEPS_RETRY_BASE_MS = 5e3;
+  // TASWM-517: сколько раз спрашиваем НЕСАМОЛЕЧАЩИЙСЯ отказ, прежде чем перестать вовсе.
+  // `agent_forbidden` («тул недоступен аккаунту-агенту роя») повтором не чинится: 26.08
+  // два прогона получили его по 53 раза каждый и остались в очереди навсегда. Три захода
+  // при backoff 5с/10с — это ~15 секунд: запас на случай, если классификатор ошибся и
+  // отказ на деле транзиентный, но не час молчаливого простоя. По исчерпании прогон
+  // роняет гейт спавна (DEPS_UNRETRIABLE_ATTEMPTS читается и там).
+  static DEPS_UNRETRIABLE_ATTEMPTS = 3;
   // TASWM-327: прод старее демона и не знает аргумент `level` у swarm_notify. Выясняется
   // ровно один раз (первой отвергнутой нотификацией) и держится всю жизнь процесса — иначе
   // каждый сигнал платил бы за это лишним отвергнутым вызовом. См. notifyAnomaly.
@@ -7107,13 +7125,13 @@ var SwarmClient = class _SwarmClient {
   recover() {
     if (existsSync7(this.mapPath)) {
       try {
-        const obj = JSON.parse(readFileSync5(this.mapPath, "utf8"));
+        const obj = JSON.parse(readFileSync6(this.mapPath, "utf8"));
         for (const [k, v] of Object.entries(obj)) this.prodIdByKey.set(k, v);
       } catch {
       }
     }
     if (existsSync7(this.outboxPath)) {
-      const txt = readFileSync5(this.outboxPath, "utf8");
+      const txt = readFileSync6(this.outboxPath, "utf8");
       for (const line of txt.split("\n")) {
         const s = line.trim();
         if (!s) continue;
@@ -7136,7 +7154,7 @@ var SwarmClient = class _SwarmClient {
     if (!existsSync7(this.stormPath)) return;
     let txt;
     try {
-      txt = readFileSync5(this.stormPath, "utf8");
+      txt = readFileSync6(this.stormPath, "utf8");
     } catch {
       return;
     }
@@ -7641,11 +7659,12 @@ var SwarmClient = class _SwarmClient {
       res = await this.call("swarm_deps_status", { refs: ask });
     } catch (e) {
       for (const ref of ask) this.depsAskedAt.delete(ref);
-      this.noteDepsUnanswered(ask, nowMs, String(e));
+      this.noteDepsUnanswered(ask, nowMs, String(e), depsFailureRetriable(classifyThrown(e).code));
       return;
     }
     if (res?.isError) {
-      this.noteDepsUnanswered(ask, nowMs, toolErrorText(res));
+      const text = toolErrorText(res);
+      this.noteDepsUnanswered(ask, nowMs, text, depsFailureRetriable(classifyToolFailure(text)));
       return;
     }
     const deps = res.structuredContent?.deps ?? [];
@@ -7685,6 +7704,7 @@ var SwarmClient = class _SwarmClient {
   depsRetryDelay(ref) {
     const fail = this.depsUnanswered.get(ref);
     if (fail) {
+      if (!fail.retriable && fail.attempts >= _SwarmClient.DEPS_UNRETRIABLE_ATTEMPTS) return _SwarmClient.DEPS_TTL_MS;
       const backoff = _SwarmClient.DEPS_RETRY_BASE_MS * 2 ** Math.min(fail.attempts - 1, 10);
       return Math.min(backoff, _SwarmClient.DEPS_TTL_MS);
     }
@@ -7693,17 +7713,19 @@ var SwarmClient = class _SwarmClient {
     return _SwarmClient.DEPS_TTL_MS;
   }
   /** Запомнить, что прод по этим ссылкам не ответил (см. depsUnanswered / TASWM-486). */
-  noteDepsUnanswered(refs, nowMs, error) {
+  noteDepsUnanswered(refs, nowMs, error, retriable = true) {
     for (const ref of refs) {
       const prev = this.depsUnanswered.get(ref);
+      const sameKind = prev != null && prev.retriable === retriable;
       this.depsUnanswered.set(ref, {
         ref,
         slug: this.depSlug.get(ref) ?? ref,
         // `since` — начало ЭПИЗОДА слепоты, а не последняя попытка: именно возраст эпизода
         // отвечает на вопрос «сколько прогон уже стоит вслепую».
         since: prev?.since ?? nowMs,
-        attempts: (prev?.attempts ?? 0) + 1,
-        error
+        attempts: sameKind ? prev.attempts + 1 : 1,
+        error,
+        retriable
       });
     }
   }
@@ -9247,13 +9269,13 @@ var SwarmClient = class _SwarmClient {
   }
   persistPending() {
     try {
-      writeFileSync5(this.outboxPath, this.pending.map((e) => JSON.stringify(e)).join("\n") + (this.pending.length ? "\n" : ""));
+      writeFileSync6(this.outboxPath, this.pending.map((e) => JSON.stringify(e)).join("\n") + (this.pending.length ? "\n" : ""));
     } catch {
     }
   }
   persistMap() {
     try {
-      writeFileSync5(this.mapPath, JSON.stringify(Object.fromEntries(this.prodIdByKey)));
+      writeFileSync6(this.mapPath, JSON.stringify(Object.fromEntries(this.prodIdByKey)));
     } catch {
     }
   }
@@ -9323,7 +9345,7 @@ function tickPulse(health, now, intervalMs) {
 }
 
 // src/logRotate.ts
-import { copyFileSync as copyFileSync2, renameSync as renameSync5, statSync as statSync5, fstatSync, truncateSync, unlinkSync as unlinkSync2, existsSync as existsSync8 } from "fs";
+import { copyFileSync as copyFileSync2, renameSync as renameSync5, statSync as statSync5, fstatSync, truncateSync, unlinkSync as unlinkSync3, existsSync as existsSync8 } from "fs";
 var realIo = {
   size: (path) => {
     try {
@@ -9335,7 +9357,7 @@ var realIo = {
   copy: copyFileSync2,
   rename: renameSync5,
   truncate: (path) => truncateSync(path, 0),
-  unlink: unlinkSync2,
+  unlink: unlinkSync3,
   exists: existsSync8
 };
 var realOwnerIo = {
@@ -14204,7 +14226,7 @@ import { serve as serve2 } from "@hono/node-server";
 // package.json
 var package_default = {
   name: "@taskless-app/swarm",
-  version: "0.6.27",
+  version: "0.6.29",
   type: "module",
   description: "Local control plane for a fleet of AI coding agents (drones), coordinating through Taskless. The overmind runs the swarm.",
   keywords: [
@@ -14255,7 +14277,7 @@ var package_default = {
     execa: "^10.0.0",
     zod: "3.25.76"
   },
-  gitHead: "2e1ed83014422ae577be60271adc79e291b9e2ab"
+  gitHead: "d8072f68198b68b4252687b01e7e82e2b4769346"
 };
 
 // src/version.ts
@@ -18411,6 +18433,15 @@ async function trySpawnQueuedRun(deps, run) {
   if (unmet.length) {
     const lost = unmet.filter((d) => d.outcome === "unknown");
     const blind = deps.db.depsUnconfirmed?.(run.depends_on) ?? [];
+    const stuck = blind.find((d) => !d.retriable && d.attempts >= SwarmClient.DEPS_UNRETRIABLE_ATTEMPTS);
+    if (stuck) {
+      return await failBeforeStart(
+        deps,
+        run,
+        `\u0437\u0430\u0432\u0438\u0441\u0438\u043C\u043E\u0441\u0442\u044C ${stuck.slug} \u043D\u0435 \u043F\u0440\u043E\u0432\u0435\u0440\u0438\u0442\u044C: \u043F\u0440\u043E\u0434 \u043E\u0442\u0432\u0435\u0440\u0433\u0430\u0435\u0442 swarm_deps_status \u0438 \u043F\u043E\u0432\u0442\u043E\u0440\u043E\u043C \u044D\u0442\u043E \u043D\u0435 \u043B\u0435\u0447\u0438\u0442\u0441\u044F (${stuck.attempts} \u043F\u043E\u043F\u044B\u0442(\u043E\u043A), \u043E\u0442\u0432\u0435\u0442 \u2014 ${stuck.error}). \u0412\u0435\u0440\u0434\u0438\u043A\u0442\u0430 \u043D\u0435 \u0431\u0443\u0434\u0435\u0442, \u043F\u043E\u044D\u0442\u043E\u043C\u0443 \u043D\u0435 \u0436\u0434\u0443 \u0432 \u043E\u0447\u0435\u0440\u0435\u0434\u0438 (TASWM-517)`,
+        { retriable: false }
+      );
+    }
     const why = lost.length ? `\u0436\u0434\u0451\u0442 \u0431\u043B\u043E\u043A\u0435\u0440\u0430, \u043A\u043E\u0442\u043E\u0440\u043E\u0433\u043E \u041D\u0415\u0422: ${lost.map((d) => d.slug).join(", ")} \u2014 \u043F\u043E \u044D\u0442\u043E\u0439 \u0441\u0441\u044B\u043B\u043A\u0435 \u043D\u0435\u0442 \u043D\u0438 \u043E\u0434\u043D\u043E\u0433\u043E \u043F\u0440\u043E\u0433\u043E\u043D\u0430; \u0441\u0430\u043C \u043D\u0435 \u043F\u043E\u0435\u0434\u0435\u0442, \u0441\u043D\u0438\u043C\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043C\u043E\u0441\u0442\u044C (swarm_run_upsert{dependsOn:[]}) \u0438\u043B\u0438 \u0437\u0430\u0432\u0435\u0434\u0438 \u0431\u043B\u043E\u043A\u0435\u0440 \u0437\u0430\u043D\u043E\u0432\u043E (TASWM-399)` : blind.length ? `\u0436\u0434\u0451\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043C\u043E\u0441\u0442\u0438 ${blind.map((d) => d.slug).join(", ")}, \u043D\u043E \u041F\u0420\u041E\u0414 \u0415\u0401 \u041D\u0415 \u041F\u041E\u0414\u0422\u0412\u0415\u0420\u0416\u0414\u0410\u0415\u0422: ${blind[0].attempts} \u043F\u043E\u043F\u044B\u0442(\u043E\u043A) swarm_deps_status, \u043F\u043E\u0441\u043B\u0435\u0434\u043D\u044F\u044F \u043E\u0448\u0438\u0431\u043A\u0430 \u2014 ${blind[0].error}. \u041F\u043E\u043A\u0430 \u043F\u0440\u043E\u0434 \u043C\u043E\u043B\u0447\u0438\u0442, \u0432\u0435\u0440\u0434\u0438\u043A\u0442\u0430 \u043D\u0435 \u0431\u0443\u0434\u0435\u0442 \u0438 \u043F\u0440\u043E\u0433\u043E\u043D \u0441\u0430\u043C \u043D\u0435 \u043F\u043E\u0435\u0434\u0435\u0442 (TASWM-486)` : `\u0436\u0434\u0451\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043C\u043E\u0441\u0442\u0438: ${unmet.map((d) => d.slug).join(", ")}`;
     return deferSpawn(deps, run, why);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taskless-app/swarm",
-  "version": "0.6.27",
+  "version": "0.6.29",
   "type": "module",
   "description": "Local control plane for a fleet of AI coding agents (drones), coordinating through Taskless. The overmind runs the swarm.",
   "keywords": [
@@ -39,7 +39,7 @@
     "execa": "^10.0.0",
     "zod": "3.25.76"
   },
-  "gitHead": "2e1ed83014422ae577be60271adc79e291b9e2ab",
+  "gitHead": "d8072f68198b68b4252687b01e7e82e2b4769346",
   "scripts": {
     "overmind": "NODE_OPTIONS=\"${NODE_OPTIONS:-} --conditions=development\" tsx src/overmind.ts",
     "swarm": "NODE_OPTIONS=\"${NODE_OPTIONS:-} --conditions=development\" tsx src/cli.ts",