@taskless-app/swarm 0.6.57 → 0.6.59

package/dist/overmind.js

@@ -665,6 +665,11 @@ function defaultModelFor(role, providerId = null) {
   const provider = findProvider(providerId) ?? findProvider(DEFAULT_PROVIDER_ID);
   return provider.roles[role];
 }
+function executorIdForModelRef(ref) {
+  const providerId = parseModelRef(ref)?.providerId ?? DEFAULT_PROVIDER_ID;
+  const provider = findProvider(providerId) ?? findProvider(DEFAULT_PROVIDER_ID);
+  return provider.executorId;
+}
 var HARNESS_DEFAULT_MODEL, MODEL_PROVIDERS, DEFAULT_PROVIDER_ID;
 var init_modelPolicy = __esm({
   "../swarm-core/src/modelPolicy.ts"() {
@@ -678,6 +683,21 @@ var init_modelPolicy = __esm({
         selectable: true,
         roles: { executor: "claude-opus-5-5", review: "claude-sonnet-5" }
       },
+      // TASWM-593 · GLM (Z.ai), INTERIM: подписка GLM Coding Plan работает через официальный
+      // Anthropic-совместимый эндпоинт Z.ai (api.z.ai/api/anthropic), поэтому харнесс — тот же
+      // claude-code, а всё различие провайдера — env процесса дрона (BASE_URL + токен, см.
+      // providerEnv в адаптере; клаудовский аккаунт НЕ нужен — бинарь бьёт в Z.ai). Interim
+      // для роя владельца до появления `--model` у ZCode CLI: тогда провайдер переезжает на
+      // собственный zcode-адаптер (волт reference_zcode_cli_headless_research).
+      // Дефолты ролей: glm-5.3 — флагман; каталог подписки снаружи не виден, имя сверено
+      // живой пробой, выдуманных имён в реестре нет — настройкой можно поставить любую.
+      {
+        id: "zai",
+        label: "GLM (Z.ai)",
+        executorId: "claude-code",
+        selectable: true,
+        roles: { executor: "glm-5.3", review: "glm-5.3" }
+      },
       // TASWM-565 · шаг 1 из четырёх: провайдер в реестре ЕСТЬ, выбрать его ещё нельзя.
       // Имён моделей здесь нет СОЗНАТЕЛЬНО: у владельца подписка, состав моделей в ней нам
       // неизвестен, а выдуманное имя хуже маркера «решает Codex».
@@ -2515,10 +2535,25 @@ function writeMcpConfig(spec) {
   writeFileSync3(path, JSON.stringify(cfg, null, 2));
   return path;
 }
+function providerEnv(providerId, model, env = process.env) {
+  const compat = ANTHROPIC_COMPAT_PROVIDERS[providerId];
+  if (!compat) return {};
+  const token = (env[compat.tokenEnv] ?? "").trim();
+  if (!token) {
+    throw new Error(
+      `\u043F\u0440\u043E\u0432\u0430\u0439\u0434\u0435\u0440 "${providerId}": \u043D\u0435 \u0437\u0430\u0434\u0430\u043D ${compat.tokenEnv} \u2014 \u043A\u043B\u044E\u0447 \u043F\u043E\u0434\u043F\u0438\u0441\u043A\u0438 \u043A\u043B\u0430\u0434\u0451\u0442\u0441\u044F \u0432 \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u0435 \u0414\u0415\u041C\u041E\u041D\u0410 (env \u0437\u0430\u043F\u0443\u0441\u043A\u0430 \u0438\u043B\u0438 .env \u043C\u0430\u0448\u0438\u043D\u044B), \u0432 \u0442\u0440\u0435\u043A\u0435\u0440\u0435 \u043E\u043D \u043D\u0435 \u0445\u0440\u0430\u043D\u0438\u0442\u0441\u044F. \u0411\u0435\u0437 \u043A\u043B\u044E\u0447\u0430 \u0434\u0440\u043E\u043D \u0443\u043C\u0440\u0451\u0442 \u043D\u0430 \u043F\u0435\u0440\u0432\u043E\u043C \u0436\u0435 \u0437\u0430\u043F\u0440\u043E\u0441\u0435 \u0438 \u0441\u043E\u0439\u0434\u0451\u0442 \u0437\u0430 \u0441\u0431\u043E\u0439 \u043F\u0440\u043E\u0432\u0430\u0439\u0434\u0435\u0440\u0430 \u2014 \u043D\u0435 \u0441\u043F\u0430\u0432\u043D\u0438\u043C \u0432\u043E\u0432\u0441\u0435.`
+    );
+  }
+  return {
+    ANTHROPIC_BASE_URL: (env[compat.baseUrlEnv] ?? "").trim() || compat.baseUrlDefault,
+    ANTHROPIC_AUTH_TOKEN: token,
+    ...model ? { ANTHROPIC_MODEL: model, ANTHROPIC_SMALL_FAST_MODEL: model } : {}
+  };
+}
 function abortField(abort) {
   return abort ? { aborted: abort } : {};
 }
-var ISOLATION_FLAGS, MCP_CONFIG_FILE, claudeCodeExecutor;
+var ISOLATION_FLAGS, MCP_CONFIG_FILE, ANTHROPIC_COMPAT_PROVIDERS, PROVIDER_TOKEN_ENV, claudeCodeExecutor;
 var init_claudeCode = __esm({
   "src/executors/claudeCode.ts"() {
     "use strict";
@@ -2529,21 +2564,31 @@ var init_claudeCode = __esm({
     init_transcriptSpend();
     ISOLATION_FLAGS = ["--setting-sources", "project", "--strict-mcp-config"];
     MCP_CONFIG_FILE = SWARM_MCP_CONFIG_FILE;
+    ANTHROPIC_COMPAT_PROVIDERS = {
+      zai: {
+        baseUrlDefault: "https://api.z.ai/api/anthropic",
+        baseUrlEnv: "SWARM_ZAI_BASE_URL",
+        tokenEnv: "SWARM_ZAI_TOKEN"
+      }
+    };
+    PROVIDER_TOKEN_ENV = Object.values(ANTHROPIC_COMPAT_PROVIDERS).map((p) => p.tokenEnv);
     claudeCodeExecutor = {
       id: "claude-code",
       title: "Claude Code (claude)",
       binEnv: "SWARM_CLAUDE_BIN",
       install: { what: "Claude Code CLI \u2014 \u0438\u043C \u0434\u0440\u043E\u043D \u043F\u0438\u0448\u0435\u0442 \u043A\u043E\u0434", pkg: "@anthropic-ai/claude-code" },
-      resolveBin: () => resolveClaudeBin(),
+      resolveBin: (env) => resolveClaudeBin(env ? { env } : {}),
       // Стрелка, а не метод: `plan` могут вызвать в отрыве от объекта (деструктуризация в тестах,
       // проброс колбэком), и `this` тогда уедет в undefined.
       plan: (spec) => {
         const cfgPath = writeMcpConfig(spec);
         const hook = droneMergeGateHookPath(spec.worktree);
         const settings = spec.denyPaths.length > 0 || hook ? droneSettingsJson(spec.denyPaths, hook) : void 0;
+        const providerEnvVars = providerEnv(spec.providerId, spec.model);
         return {
           bin: resolveClaudeBin(),
-          args: claudeArgs(cfgPath, spec.prompt, spec.continueSession, spec.model, spec.skillDirs, settings, spec.maxBudgetUsd, spec.effort)
+          args: claudeArgs(cfgPath, spec.prompt, spec.continueSession, spec.model, spec.skillDirs, settings, spec.maxBudgetUsd, spec.effort),
+          ...Object.keys(providerEnvVars).length > 0 ? { env: providerEnvVars } : {}
         };
       },
       parseResult(raw, model) {
@@ -2595,7 +2640,12 @@ var init_claudeCode = __esm({
       probe: {
         args: [...ISOLATION_FLAGS, "-p", "ok", "--max-turns", "1"],
         // TASWM-214: исчерпанный лимит подписки — НЕ шторм провайдера, и путать их нельзя.
-        limitPattern: /(weekly limit|usage limit|hit your .*limit)/i
+        limitPattern: /(weekly limit|usage limit|hit your .*limit)/i,
+        // TASWM-592: отвергнутый доступ — не «шторм»: ключ протух, аккаунт забанен/отключён,
+        // регион закрыт (403 без VPN — живой кейс этого роя). Коды — только в контексте
+        // ошибки (ревью PR #1482): голое «403» в arbitrary-выводе и POSIX permission denied
+        // от локальной ФС советовали бы «чинить вход» не про ту болезнь.
+        authPattern: /(?:error|api|http|status|unauthorized|forbidden)[^\n]{0,60}\b40[13]\b|\b40[13]\b[^\n]{0,60}(?:error|unauthorized|forbidden)|authentication_?error|unauthorized|invalid api key|account[^.\n]{0,40}?(?:suspended|banned|disabled)/i
       }
     };
   }
@@ -2726,7 +2776,7 @@ var init_codex = __esm({
       title: "Codex CLI (codex)",
       binEnv: "SWARM_CODEX_BIN",
       install: { what: "Codex CLI \u2014 \u0430\u043B\u044C\u0442\u0435\u0440\u043D\u0430\u0442\u0438\u0432\u043D\u044B\u0439 \u0438\u0441\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044C \u0434\u0440\u043E\u043D\u0430", pkg: "@openai/codex" },
-      resolveBin: () => resolveCodexBin(),
+      resolveBin: (env) => resolveCodexBin(env ?? process.env),
       // Стрелка, а не метод — см. тот же комментарий в claudeCode.ts.
       plan: (spec) => {
         const notice = skillsNotice(spec.skillDirs);
@@ -2775,12 +2825,48 @@ ${notice}` : spec.prompt;
         // Тот же принцип, что у claude: дешёвый реальный прогон — он проверяет и auth, и живость
         // провайдера разом. Один короткий ответ, без тулов и без сети сверх модели.
         args: ["exec", "--json", SKIP_GIT_CHECK_FLAG, BYPASS_FLAG, "ok"],
+        // TASWM-592: не вошёл/ключ отвергнут — не шторм; точные формулировки codex уточним
+        // на живом исполнителе, поэтому паттерн широкий.
+        authPattern: /\b(401|403)\b|not logged in|unauthorized|authentication|invalid api key/i,
         limitPattern: /(usage limit|rate limit|quota exceeded|insufficient_quota)/i
       }
     };
   }
 });
 
+// src/swarmModels.ts
+function pick2(v) {
+  const s = typeof v === "string" ? v.trim() : "";
+  return s.length > 0 ? s : null;
+}
+function isReviewKind(kind) {
+  return kind === "reviewer" || kind === "verifier";
+}
+function modelRoleOf(kind) {
+  return isReviewKind(kind) ? "review" : "executor";
+}
+function forKind(kind, swarm, norm) {
+  if (!swarm) return null;
+  return isReviewKind(kind) ? norm(swarm.reviewer) ?? norm(swarm.drone) : norm(swarm.drone);
+}
+function resolveRunModelRef(run, swarm, env = process.env) {
+  const configured = parseModelRef(
+    pick2(run.model) ?? forKind(run.kind, swarm, pick2) ?? pick2(env.SWARM_DRONE_MODEL)
+  );
+  if (configured) return configured;
+  const providerId = pick2(env.SWARM_MODEL_PROVIDER) ?? DEFAULT_PROVIDER_ID;
+  return { providerId, model: defaultModelFor(modelRoleOf(run.kind), providerId) };
+}
+function resolveRunEffort(run, swarm, env = process.env) {
+  return toEffortLevel(run.effort) ?? forKind(run.kind, swarm, toEffortLevel) ?? toEffortLevel(env.SWARM_DRONE_EFFORT) ?? null;
+}
+var init_swarmModels = __esm({
+  "src/swarmModels.ts"() {
+    "use strict";
+    init_src();
+  }
+});
+
 // src/executors/types.ts
 var init_types2 = __esm({
   "src/executors/types.ts"() {
@@ -2798,12 +2884,22 @@ function resolveExecutor(id) {
   }
   return found;
 }
+function executorForRun(run, swarm, env = process.env, pinned = null) {
+  const ref = pinned ?? resolveRunModelRef(run, swarm, env);
+  if (ref.providerId === DEFAULT_PROVIDER_ID) {
+    const envExecutor = (env.SWARM_EXECUTOR ?? "").trim();
+    if (envExecutor) return resolveExecutor(envExecutor);
+  }
+  return resolveExecutor(executorIdForModelRef(`${ref.providerId}/${ref.model}`));
+}
 var DEFAULT_EXECUTOR_ID, EXECUTORS;
 var init_executors = __esm({
   "src/executors/index.ts"() {
     "use strict";
+    init_src();
     init_claudeCode();
     init_codex();
+    init_swarmModels();
     init_types2();
     init_claudeCode();
     init_codex();
@@ -4273,7 +4369,7 @@ var init_procCleanup = __esm({
 // src/git.ts
 import { existsSync as existsSync12, readdirSync as readdirSync12, realpathSync as realpathSync2, statSync as statSync10 } from "fs";
 import { appendFile, chmod, mkdir, readFile, rename, rm, writeFile } from "fs/promises";
-import { isAbsolute as isAbsolute2, join as join20, resolve as resolve3, sep as sep2 } from "path";
+import { isAbsolute as isAbsolute3, join as join21, resolve as resolve3, sep as sep2 } from "path";
 import { $ as $2 } from "execa";
 function gitNet(repo, args, timeoutMs) {
   return withHardTimeout(
@@ -4302,7 +4398,7 @@ async function inspectWorktreePath(path) {
     return "orphan";
   }
   try {
-    if (statSync10(join20(path, ".git")).isDirectory()) return "main-checkout";
+    if (statSync10(join21(path, ".git")).isDirectory()) return "main-checkout";
   } catch {
   }
   const top = await $2({ reject: false })`git -C ${path} rev-parse --show-toplevel`;
@@ -4362,7 +4458,7 @@ async function parkOrphanDir(repo, path, branch) {
 }
 function isLinkedWorktree(dir) {
   try {
-    return statSync10(join20(dir, ".git")).isFile();
+    return statSync10(join21(dir, ".git")).isFile();
   } catch {
     return false;
   }
@@ -4474,8 +4570,8 @@ async function ensureGitExcluded(worktree, pattern) {
   try {
     const commonDir = await gitPath(worktree, "--git-common-dir");
     if (!commonDir) return false;
-    const infoDir = join20(commonDir, "info");
-    const excludeFile = join20(infoDir, "exclude");
+    const infoDir = join21(commonDir, "info");
+    const excludeFile = join21(infoDir, "exclude");
     let current = "";
     try {
       current = await readFile(excludeFile, "utf8");
@@ -4495,7 +4591,7 @@ async function gitPath(worktree, flag) {
   const out = await $2({ reject: false })`git -C ${worktree} rev-parse ${flag}`;
   const raw = out.stdout.trim();
   if (out.exitCode !== 0 || !raw) return null;
-  return isAbsolute2(raw) ? raw : join20(worktree, raw);
+  return isAbsolute3(raw) ? raw : join21(worktree, raw);
 }
 async function ensureWorktreeHygiene(worktree) {
   for (const pattern of SWARM_EXCLUDE_PATTERNS) await ensureGitExcluded(worktree, pattern);
@@ -4505,12 +4601,12 @@ async function installGuardHooks(worktree) {
   try {
     const gitDir = await gitPath(worktree, "--git-dir");
     if (!gitDir) return false;
-    const hooksDir = join20(gitDir, "swarm-hooks");
+    const hooksDir = join21(gitDir, "swarm-hooks");
     const prev = await previousHooksPath(worktree);
     await mkdir(hooksDir, { recursive: true });
     for (const hook of GUARD_HOOKS) {
-      await writeFile(join20(hooksDir, hook), guardHookScript(hook, prev ? `${posix(prev)}/${hook}` : null));
-      await chmod(join20(hooksDir, hook), 493);
+      await writeFile(join21(hooksDir, hook), guardHookScript(hook, prev ? `${posix(prev)}/${hook}` : null));
+      await chmod(join21(hooksDir, hook), 493);
     }
     await $2`git -C ${worktree} config extensions.worktreeConfig true`;
     await $2`git -C ${worktree} config --worktree core.hooksPath ${posix(hooksDir)}`;
@@ -4529,7 +4625,7 @@ async function previousHooksPath(worktree) {
     if (out.exitCode === 0 && value) return value;
   }
   const commonDir = await gitPath(worktree, "--git-common-dir");
-  return commonDir ? join20(commonDir, "hooks") : null;
+  return commonDir ? join21(commonDir, "hooks") : null;
 }
 async function removeWorktree(repo, path) {
   const branch = (await $2({ reject: false })`git -C ${path} symbolic-ref --quiet --short HEAD`).stdout.trim();
@@ -4554,7 +4650,7 @@ async function worktreeDirty(path) {
 async function repairMovedWorktrees(targetDir) {
   const subdirs = (dir) => {
     try {
-      return readdirSync12(dir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => join20(dir, d.name));
+      return readdirSync12(dir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => join21(dir, d.name));
     } catch {
       return [];
     }
@@ -5092,7 +5188,7 @@ var init_droneChannel = __esm({
 
 // src/attachments.ts
 import { mkdir as mkdir3, rm as rm3, writeFile as writeFile3 } from "fs/promises";
-import { join as join24 } from "path";
+import { join as join25 } from "path";
 function attachmentsFromDoc(doc, origin) {
   const out = [];
   const walk2 = (node) => {
@@ -5183,7 +5279,7 @@ async function materializeAttachments(opts) {
   };
   const result = { files: [], skipped: [] };
   if (opts.refs.length === 0) return result;
-  const dir = join24(opts.worktree, ATTACHMENTS_DIR);
+  const dir = join25(opts.worktree, ATTACHMENTS_DIR);
   await io.removeDir(dir);
   let dirReady = false;
   let total = 0;
@@ -5229,7 +5325,7 @@ async function materializeAttachments(opts) {
         await io.mkdir(dir);
         dirReady = true;
       }
-      await io.writeFile(join24(dir, name), file.bytes);
+      await io.writeFile(join25(dir, name), file.bytes);
     } catch (e) {
       result.skipped.push(`${label2} \u2014 \u043D\u0435 \u0437\u0430\u043F\u0438\u0441\u0430\u043B\u043E\u0441\u044C \u043D\u0430 \u0434\u0438\u0441\u043A (${errText2(e)})`);
       continue;
@@ -5382,7 +5478,7 @@ var init_attachments = __esm({
 
 // src/shotUpload.ts
 import { readFile as fsReadFile } from "fs/promises";
-import { basename as basename4, isAbsolute as isAbsolute3, join as join25 } from "path";
+import { basename as basename4, isAbsolute as isAbsolute4, join as join26 } from "path";
 function shotMimetype(path) {
   const dot = path.lastIndexOf(".");
   if (dot < 0) return null;
@@ -5408,7 +5504,7 @@ async function readShots(paths, opts) {
     }
     let bytes;
     try {
-      bytes = await read(isAbsolute3(path) ? path : join25(opts.worktree, path));
+      bytes = await read(isAbsolute4(path) ? path : join26(opts.worktree, path));
     } catch (e) {
       skipped.push({ path, reason: `\u043D\u0435 \u043F\u0440\u043E\u0447\u0438\u0442\u0430\u043D: ${e instanceof Error ? e.message : String(e)}` });
       continue;
@@ -5490,7 +5586,7 @@ var init_shotUpload = __esm({
 // src/oauth.ts
 import { createHash as createHash3, randomBytes as randomBytes2 } from "crypto";
 import { readFileSync as readFileSync20, writeFileSync as writeFileSync13, unlinkSync as unlinkSync4 } from "fs";
-import { join as join26 } from "path";
+import { join as join27 } from "path";
 function makePkce() {
   const verifier = randomBytes2(48).toString("base64url");
   const challenge = createHash3("sha256").update(verifier).digest("base64url");
@@ -5625,8 +5721,8 @@ var init_oauth = __esm({
     AUTHORIZE = "/api/oauth/authorize";
     TOKEN = "/api/oauth/token";
     SCOPE = "openid profile email taskless:full";
-    STORE_PATH2 = join26(SWARM_HOME, "oauth.json");
-    CLIENT_PATH = join26(SWARM_HOME, "oauth-client.json");
+    STORE_PATH2 = join27(SWARM_HOME, "oauth.json");
+    CLIENT_PATH = join27(SWARM_HOME, "oauth-client.json");
     base2 = (api) => api.replace(/\/$/, "");
   }
 });
@@ -5673,7 +5769,7 @@ var init_authState = __esm({
 
 // src/workspace.ts
 import { readFileSync as readFileSync21, writeFileSync as writeFileSync14, unlinkSync as unlinkSync5 } from "fs";
-import { join as join27 } from "path";
+import { join as join28 } from "path";
 function loadWorkspace() {
   try {
     const w = JSON.parse(readFileSync21(WORKSPACE_PATH, "utf8"));
@@ -5690,7 +5786,7 @@ var init_workspace = __esm({
   "src/workspace.ts"() {
     "use strict";
     init_config();
-    WORKSPACE_PATH = join27(SWARM_HOME, "workspace.json");
+    WORKSPACE_PATH = join28(SWARM_HOME, "workspace.json");
   }
 });
 
@@ -7322,7 +7418,7 @@ var init_droneStore = __esm({
 // src/overmind.ts
 import { homedir as homedir7 } from "os";
 import { existsSync as existsSync20, readFileSync as readFileSync25, readdirSync as readdirSync14, renameSync as renameSync12, statSync as statSync13 } from "fs";
-import { basename as basename6, dirname as dirname5, join as join34 } from "path";
+import { basename as basename6, dirname as dirname5, join as join35 } from "path";
 import { fileURLToPath as fileURLToPath3, pathToFileURL } from "url";
 import { spawn as spawn4 } from "child_process";
 
@@ -9500,7 +9596,7 @@ var SwarmClient = class _SwarmClient {
    *
    * Прод недоступен / ответ без поручений → пустые списки (демон работает дальше).
    */
-  async heartbeat(daemonVersion, pause, capacity, resources, storm, worktreesDir, signIn, tick) {
+  async heartbeat(daemonVersion, pause, capacity, resources, storm, worktreesDir, signIn, tick, executors) {
     try {
       const args = this.repoFullNames.length ? { repoFullNames: this.repoFullNames } : {};
       if (daemonVersion) args.daemonVersion = daemonVersion;
@@ -9530,6 +9626,7 @@ var SwarmClient = class _SwarmClient {
       if (tick && Number.isFinite(tick.seq) && Number.isFinite(tick.ageMs) && tick.intervalMs > 0) {
         args.tick = { seq: Math.max(0, Math.trunc(tick.seq)), ageMs: Math.max(0, Math.trunc(tick.ageMs)), intervalMs: Math.trunc(tick.intervalMs) };
       }
+      if (executors) args.executorsAvailable = executors;
       const res = await this.call("swarm_heartbeat", args);
       if (res?.isError) return EMPTY_HEARTBEAT_REPLY;
       this.heartbeatOkAt = this.now();
@@ -11179,39 +11276,10 @@ function droneTestEnv(droneCap, base3 = process.env, host = hostForkSpec()) {
   };
 }
 
-// src/swarmModels.ts
-init_src();
-function pick2(v) {
-  const s = typeof v === "string" ? v.trim() : "";
-  return s.length > 0 ? s : null;
-}
-function isReviewKind(kind) {
-  return kind === "reviewer" || kind === "verifier";
-}
-function modelRoleOf(kind) {
-  return isReviewKind(kind) ? "review" : "executor";
-}
-function forKind(kind, swarm, norm) {
-  if (!swarm) return null;
-  return isReviewKind(kind) ? norm(swarm.reviewer) ?? norm(swarm.drone) : norm(swarm.drone);
-}
-function resolveRunModelRef(run, swarm, env = process.env) {
-  const configured = parseModelRef(
-    pick2(run.model) ?? forKind(run.kind, swarm, pick2) ?? pick2(env.SWARM_DRONE_MODEL)
-  );
-  if (configured) return configured;
-  const providerId = pick2(env.SWARM_MODEL_PROVIDER) ?? DEFAULT_PROVIDER_ID;
-  return { providerId, model: defaultModelFor(modelRoleOf(run.kind), providerId) };
-}
-function resolveRunModel(run, swarm, env = process.env) {
-  return resolveRunModelRef(run, swarm, env).model;
-}
-function resolveRunEffort(run, swarm, env = process.env) {
-  return toEffortLevel(run.effort) ?? forKind(run.kind, swarm, toEffortLevel) ?? toEffortLevel(env.SWARM_DRONE_EFFORT) ?? null;
-}
-
 // src/launcher.ts
+init_swarmModels();
 init_executors();
+init_claudeCode();
 init_src();
 var requireFromHere = createRequire(import.meta.url);
 function resolveTsxCli() {
@@ -11262,7 +11330,10 @@ var DAEMON_STATE_ENV = [
   "SWARM_OUTBOX",
   "SWARM_HEARTBEAT",
   "SWARM_REVIEW_CUTOFF",
-  "TASKLESS_TOKEN"
+  "TASKLESS_TOKEN",
+  // TASWM-593 (ревью PR #1483): машинные ключи совместимых провайдеров — дрону не наследуются;
+  // доходит только переведённый ANTHROPIC_AUTH_TOKEN из plan.env, который мешается ПОСЛЕ чистки.
+  ...PROVIDER_TOKEN_ENV
 ];
 function bundledRoleDir(kind) {
   return join17(dirname3(fileURLToPath2(import.meta.url)), "..", "roles", kind);
@@ -11361,13 +11432,18 @@ function makeLauncher(cfg) {
         ...run.hero_run_id != null ? { SWARM_HERO_RUN_ID: String(run.hero_run_id) } : {}
       }
     };
-    const model = resolveRunModel(run, cfg.swarmModels?.() ?? null);
+    const modelRef = resolveRunModelRef(run, cfg.swarmModels?.() ?? null);
     const effort = resolveRunEffort(run, cfg.swarmEfforts?.() ?? null);
     try {
       cfg.recordEffort?.(run.id, effort);
     } catch (e) {
       console.error(`[launcher] \u043D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C \u0437\u0430\u043F\u0438\u0441\u0430\u0442\u044C \u0443\u0441\u0438\u043B\u0438\u0435 \u043F\u0440\u043E\u0433\u043E\u043D\u0430 #${run.id}: ${String(e)}`);
     }
+    try {
+      cfg.recordModelRef?.(run.id, modelRef);
+    } catch (e) {
+      console.error(`[launcher] \u043D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C \u0437\u0430\u043F\u0438\u0441\u0430\u0442\u044C \u043C\u043E\u0434\u0435\u043B\u044C \u043F\u0440\u043E\u0433\u043E\u043D\u0430 #${run.id}: ${String(e)}`);
+    }
     const realHome = cfg.droneIsolation?.realHome ?? homedir6();
     const home = cfg.droneIsolation ? buildDroneHome({ realHome, droneHome: cfg.droneIsolation.home }) : void 0;
     if (cfg.droneIsolation && process.env.TASKLESS_TOKEN && !existsSync11(join17(cfg.droneIsolation.swarmHome, "token"))) {
@@ -11375,12 +11451,13 @@ function makeLauncher(cfg) {
         `[launcher] TASKLESS_TOKEN \u0437\u0430\u0434\u0430\u043D \u0442\u043E\u043B\u044C\u043A\u043E \u0432 env \u0434\u0435\u043C\u043E\u043D\u0430 \u2014 \u0434\u0440\u043E\u043D\u0443 \u043E\u043D \u043D\u0435 \u043D\u0430\u0441\u043B\u0435\u0434\u0443\u0435\u0442\u0441\u044F (TASWM-289), \u0430 \u0444\u0430\u0439\u043B\u0430 ${join17(cfg.droneIsolation.swarmHome, "token")} \u043D\u0435\u0442. read_task \u0434\u0440\u043E\u043D\u0430 \u0431\u0443\u0434\u0435\u0442 slug-only. \u041F\u043E\u0447\u0438\u043D\u0438: \`swarm login\` (oauth.json) \u0438\u043B\u0438 \u043F\u043E\u043B\u043E\u0436\u0438 \u0442\u043E\u043A\u0435\u043D \u0432 \u044D\u0442\u043E\u0442 \u0444\u0430\u0439\u043B.`
       );
     }
-    const executor = cfg.executor ?? resolveExecutor();
+    const executor = cfg.executor ?? executorForRun(run, cfg.swarmModels?.() ?? null);
     const plan = executor.plan({
       worktree,
       prompt,
       continueSession: !!continueSession,
-      model,
+      model: modelRef.model,
+      providerId: modelRef.providerId,
       mcp,
       skillDirs: roleDirs(worktree, run.kind),
       // Закрытые дрону пути имеют смысл только при теневом HOME: без него дрон и так
@@ -11436,6 +11513,7 @@ init_procCleanup();
 import { readFileSync as readFileSync15, readdirSync as readdirSync10, renameSync as renameSync9, statSync as statSync9 } from "fs";
 import { join as join18 } from "path";
 init_executors();
+init_swarmModels();
 var UNPROCESSED_LOG_RE = /^\d+\.json$/;
 var SEGMENT_LOG_RE = /^(\d+)\.json(\.done)?$/;
 var RESCUE_OPEN_WINDOW_MAX_MS = 12 * 60 * 60 * 1e3;
@@ -11499,8 +11577,9 @@ function accountRunCost(deps, run) {
   const dir = findRunLogDir(deps.runLogsDir, deps.db.runLogKeys(run.id));
   const files = dir ? unprocessedLogFiles(dir) : [];
   if (!dir || files.length === 0) return;
-  const model = resolveRunModel(run, deps.swarmModels?.() ?? null);
-  const executor = deps.executor ?? resolveExecutor();
+  const pinnedRef = deps.modelRefFor?.(run) ?? null;
+  const model = (pinnedRef ?? resolveRunModelRef(run, deps.swarmModels?.() ?? null)).model;
+  const executor = deps.executor ?? executorForRun(run, deps.swarmModels?.() ?? null, process.env, pinnedRef);
   const now = deps.now?.() ?? Date.now();
   const starts = segmentStarts(dir);
   let added = 0;
@@ -11614,13 +11693,67 @@ function abortOfExit(runLogsDir, runLogKeys, executor = resolveExecutor()) {
   if (raw == null) return null;
   return executor.parseResult(raw, null)?.aborted ?? null;
 }
-function makeExitClassifier(runLogsDir, runLogKeys, executor) {
-  const exec = executor ?? resolveExecutor();
-  return (run) => classifyExit(runLogsDir, runLogKeys(run.id), exec);
+function makeExitClassifier(runLogsDir, runLogKeys, executorFor = () => resolveExecutor()) {
+  return (run) => classifyExit(runLogsDir, runLogKeys(run.id), executorFor(run));
 }
-function makeAbortReader(runLogsDir, runLogKeys, executor) {
-  const exec = executor ?? resolveExecutor();
-  return (run) => abortOfExit(runLogsDir, runLogKeys(run.id), exec);
+function makeAbortReader(runLogsDir, runLogKeys, executorFor = () => resolveExecutor()) {
+  return (run) => abortOfExit(runLogsDir, runLogKeys(run.id), executorFor(run));
+}
+
+// src/overmind.ts
+init_executors();
+init_claudeCode();
+init_swarmModels();
+
+// src/executors/detect.ts
+init_executors();
+import { accessSync, constants } from "fs";
+import { delimiter, join as join20 } from "path";
+function binRunnable(bin, env) {
+  if (!bin) return false;
+  if (bin.includes("/") || bin.includes("\\")) {
+    try {
+      accessSync(bin, constants.X_OK);
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  const exts = process.platform === "win32" ? ["", ".exe", ".cmd", ".bat"] : [""];
+  for (const dir of (env.PATH ?? "").split(delimiter)) {
+    if (!dir) continue;
+    for (const ext of exts) {
+      try {
+        accessSync(join20(dir, bin + ext), constants.X_OK);
+        return true;
+      } catch {
+      }
+    }
+  }
+  return false;
+}
+function detectInstalledExecutors(env = process.env) {
+  return Object.values(EXECUTORS).map((executor) => {
+    let bin = "";
+    try {
+      bin = executor.resolveBin(env);
+    } catch {
+      bin = "";
+    }
+    return { id: executor.id, title: executor.title, bin, installed: binRunnable(bin, env) };
+  });
+}
+function installedExecutorIds(env = process.env) {
+  return detectInstalledExecutors(env).filter((e) => e.installed).map((e) => e.id);
+}
+var cachedAt = Number.NaN;
+var cachedIds = [];
+function cachedInstalledExecutorIds(now = Date.now(), ttlMs = 3e5, env = process.env) {
+  if (!Number.isFinite(cachedAt) || now - cachedAt > ttlMs) {
+    cachedAt = now;
+    cachedIds = installedExecutorIds(env);
+  }
+  return cachedIds;
 }
 
 // src/orchestrator.ts
@@ -11629,19 +11762,19 @@ init_git();
 
 // src/deps.ts
 import { existsSync as existsSync14, readdirSync as readdirSync13, readFileSync as readFileSync18 } from "fs";
-import { join as join23 } from "path";
+import { join as join24 } from "path";
 import { execa } from "execa";
 
 // src/prepareLock.ts
 import { createHash } from "crypto";
 import { closeSync as closeSync4, openSync as openSync4, rmSync as rmSync2, statSync as statSync11, writeSync } from "fs";
-import { join as join21 } from "path";
+import { join as join22 } from "path";
 import { tmpdir } from "os";
 var WAIT_TIMEOUT_MS = 5 * 6e4;
 var POLL_MS = 300;
 var STALE_MS = 20 * 6e4;
 function machineLockPath(key, dir = tmpdir()) {
-  return join21(dir, `swarm-prepare-${createHash("sha1").update(key).digest("hex").slice(0, 16)}.lock`);
+  return join22(dir, `swarm-prepare-${createHash("sha1").update(key).digest("hex").slice(0, 16)}.lock`);
 }
 function defaultTryCreate(path, content) {
   try {
@@ -11703,7 +11836,7 @@ init_config();
 import { createHash as createHash2 } from "crypto";
 import { cp, link, lstat, mkdir as mkdir2, readdir, readlink, rename as rename2, rm as rm2, stat, symlink, utimes, writeFile as writeFile2 } from "fs/promises";
 import { existsSync as existsSync13, readFileSync as readFileSync17 } from "fs";
-import { join as join22 } from "path";
+import { join as join23 } from "path";
 function fingerprint(parts) {
   const h = createHash2("sha256");
   for (const p of parts) {
@@ -11717,8 +11850,8 @@ async function cloneTree(src, dst) {
   const entries = await readdir(src, { withFileTypes: true });
   await Promise.all(
     entries.map(async (e) => {
-      const from = join22(src, e.name);
-      const to = join22(dst, e.name);
+      const from = join23(src, e.name);
+      const to = join23(dst, e.name);
       if (e.isDirectory()) return cloneTree(from, to);
       if (e.isSymbolicLink()) {
         return symlink(await readlink(from), to).catch(() => cp(from, to, { recursive: true, verbatimSymlinks: true }));
@@ -11731,11 +11864,11 @@ function cacheRoot(io) {
   return io.root ?? ENV_CACHE_DIR;
 }
 function snapshotDir(io, key) {
-  return join22(cacheRoot(io), key);
+  return join23(cacheRoot(io), key);
 }
 function readManifest(dir) {
   try {
-    const parsed = JSON.parse(readFileSync17(join22(dir, "manifest.json"), "utf8"));
+    const parsed = JSON.parse(readFileSync17(join23(dir, "manifest.json"), "utf8"));
     if (!parsed || typeof parsed !== "object") return null;
     const m = parsed;
     if (typeof m.key !== "string" || !Array.isArray(m.dirs)) return null;
@@ -11748,7 +11881,7 @@ function readManifest(dir) {
 }
 function hasEnvSnapshot(key, io = {}) {
   const exists = io.exists ?? existsSync13;
-  return exists(join22(snapshotDir(io, key), "manifest.json"));
+  return exists(join23(snapshotDir(io, key), "manifest.json"));
 }
 async function restoreEnvSnapshot(worktree, key, io = {}) {
   const exists = io.exists ?? existsSync13;
@@ -11760,13 +11893,13 @@ async function restoreEnvSnapshot(worktree, key, io = {}) {
   try {
     for (let i = 0; i < manifest.dirs.length; i++) {
       const rel = manifest.dirs[i] ?? "";
-      const target = join22(worktree, rel);
+      const target = join23(worktree, rel);
       if (exists(target)) continue;
-      await clone(join22(dir, "trees", String(i)), target);
+      await clone(join23(dir, "trees", String(i)), target);
       made.push(rel);
     }
   } catch {
-    for (const rel of made) await rm2(join22(worktree, rel), { recursive: true, force: true }).catch(() => {
+    for (const rel of made) await rm2(join23(worktree, rel), { recursive: true, force: true }).catch(() => {
     });
     return null;
   }
@@ -11782,16 +11915,16 @@ async function saveEnvSnapshot(worktree, key, dirs, io = {}) {
   const exists = io.exists ?? existsSync13;
   const clone = io.clone ?? cloneTree;
   if (hasEnvSnapshot(key, io)) return true;
-  const present = dirs.filter((rel) => exists(join22(worktree, rel)));
+  const present = dirs.filter((rel) => exists(join23(worktree, rel)));
   if (!present.length) return false;
   const root = cacheRoot(io);
-  const tmp = join22(root, `.tmp-${key}-${process.pid}`);
+  const tmp = join23(root, `.tmp-${key}-${process.pid}`);
   try {
     await rm2(tmp, { recursive: true, force: true });
-    await mkdir2(join22(tmp, "trees"), { recursive: true });
-    for (let i = 0; i < present.length; i++) await clone(join22(worktree, present[i] ?? ""), join22(tmp, "trees", String(i)));
+    await mkdir2(join23(tmp, "trees"), { recursive: true });
+    for (let i = 0; i < present.length; i++) await clone(join23(worktree, present[i] ?? ""), join23(tmp, "trees", String(i)));
     const manifest = { key, dirs: present, createdAt: (/* @__PURE__ */ new Date()).toISOString() };
-    await writeFile2(join22(tmp, "manifest.json"), JSON.stringify(manifest, null, 2));
+    await writeFile2(join23(tmp, "manifest.json"), JSON.stringify(manifest, null, 2));
     await rename2(tmp, snapshotDir(io, key));
     return true;
   } catch {
@@ -11811,13 +11944,13 @@ async function pruneEnvSnapshots(io = {}) {
   }
   const withTime = [];
   for (const name of names) {
-    const s = await stat(join22(root, name)).catch(() => null);
+    const s = await stat(join23(root, name)).catch(() => null);
     if (s) withTime.push({ name, mtime: s.mtimeMs });
   }
   withTime.sort((a, b) => b.mtime - a.mtime);
   let removed = 0;
   for (const { name } of withTime.slice(Math.max(0, keep))) {
-    await rm2(join22(root, name), { recursive: true, force: true }).catch(() => {
+    await rm2(join23(root, name), { recursive: true, force: true }).catch(() => {
     });
     removed++;
   }
@@ -11833,9 +11966,9 @@ async function sweepEnvCacheTemp(io = {}) {
   }
   let removed = 0;
   for (const name of names) {
-    const s = await lstat(join22(root, name)).catch(() => null);
+    const s = await lstat(join23(root, name)).catch(() => null);
     if (!s || Date.now() - s.mtimeMs < 60 * 6e4) continue;
-    await rm2(join22(root, name), { recursive: true, force: true }).catch(() => {
+    await rm2(join23(root, name), { recursive: true, force: true }).catch(() => {
     });
     removed++;
   }
@@ -11904,19 +12037,19 @@ function overridePlan(override) {
 function detectPackageManager(worktree, io = {}) {
   const exists = io.exists ?? existsSync14;
   const readText = io.readText ?? safeReadText;
-  const hasPkgJson = exists(join23(worktree, "package.json"));
+  const hasPkgJson = exists(join24(worktree, "package.json"));
   if (!hasPkgJson) {
-    if (exists(join23(worktree, "deno.json")) || exists(join23(worktree, "deno.jsonc")) || exists(join23(worktree, "deno.lock"))) return "deno";
+    if (exists(join24(worktree, "deno.json")) || exists(join24(worktree, "deno.jsonc")) || exists(join24(worktree, "deno.lock"))) return "deno";
     return null;
   }
-  const pkg = readJson(readText, join23(worktree, "package.json"));
+  const pkg = readJson(readText, join24(worktree, "package.json"));
   const declared = typeof pkg?.packageManager === "string" ? pkg.packageManager.split("@")[0] : void 0;
   if (declared === "pnpm" || declared === "bun" || declared === "npm" || declared === "yarn") return declared;
-  if (exists(join23(worktree, "bun.lock")) || exists(join23(worktree, "bun.lockb"))) return "bun";
-  if (exists(join23(worktree, "pnpm-lock.yaml"))) return "pnpm";
-  if (exists(join23(worktree, "yarn.lock"))) return "yarn";
-  if (exists(join23(worktree, "package-lock.json"))) return "npm";
-  if (exists(join23(worktree, "deno.lock"))) return "deno";
+  if (exists(join24(worktree, "bun.lock")) || exists(join24(worktree, "bun.lockb"))) return "bun";
+  if (exists(join24(worktree, "pnpm-lock.yaml"))) return "pnpm";
+  if (exists(join24(worktree, "yarn.lock"))) return "yarn";
+  if (exists(join24(worktree, "package-lock.json"))) return "npm";
+  if (exists(join24(worktree, "deno.lock"))) return "deno";
   return "npm";
 }
 function jsInstallCommand(pm) {
@@ -11980,7 +12113,7 @@ function detectPlan(worktree, io) {
       // node_modules на месте — установку пропускаем (быстрый путь переиспользованного worktree).
       // У deno каталога может не быть вовсе (кэш в DENO_DIR) — тогда `deno install` отработает
       // заново, но он дешёвый: тянет из того же общего кэша.
-      { label: `${pm} install`, run: jsInstallCommand(pm), skipIfExists: join23(worktree, "node_modules"), source: "detect" }
+      { label: `${pm} install`, run: jsInstallCommand(pm), skipIfExists: join24(worktree, "node_modules"), source: "detect" }
     ];
     for (const target of workspaceBuildTargets(worktree, io)) {
       commands.push({ label: `\u0441\u0431\u043E\u0440\u043A\u0430 ${target.name}`, run: jsRunScript(pm, "build"), cwd: target.dir, source: "detect" });
@@ -11989,12 +12122,12 @@ function detectPlan(worktree, io) {
     return { source: "detect", ecosystem: `node/${pm}`, commands };
   }
   for (const marker of ECOSYSTEM_MARKERS) {
-    const hit = marker.files.some((f) => exists(join23(worktree, f))) || marker.ext !== void 0 && listFiles(worktree).some((n) => n.endsWith(marker.ext));
+    const hit = marker.files.some((f) => exists(join24(worktree, f))) || marker.ext !== void 0 && listFiles(worktree).some((n) => n.endsWith(marker.ext));
     if (!hit) continue;
     let ecosystem = marker.ecosystem;
     let command = marker.command;
     for (const refine of marker.refine ?? []) {
-      if (!exists(join23(worktree, refine.file))) continue;
+      if (!exists(join24(worktree, refine.file))) continue;
       ecosystem = refine.ecosystem;
       command = refine.command;
       break;
@@ -12051,12 +12184,12 @@ var CI_INSTALL_PATTERNS = [
 function ciWorkflowPlan(worktree, io) {
   const readText = io.readText ?? safeReadText;
   const listFiles = io.listFiles ?? safeListFiles;
-  const dir = join23(worktree, ".github", "workflows");
+  const dir = join24(worktree, ".github", "workflows");
   const files = listFiles(dir).filter((n) => n.endsWith(".yml") || n.endsWith(".yaml"));
   const seen = /* @__PURE__ */ new Set();
   const commands = [];
   for (const name of files.sort()) {
-    const yaml = readText(join23(dir, name));
+    const yaml = readText(join24(dir, name));
     if (yaml === null) continue;
     for (const raw of workflowRunLines(yaml)) {
       const line = raw.replace(/\s+/g, " ").trim();
@@ -12071,7 +12204,7 @@ function ciWorkflowPlan(worktree, io) {
   return commands.length ? { source: "ci-workflow", ecosystem: "ci-\u043A\u043E\u043D\u0444\u0438\u0433", commands } : null;
 }
 function workspaceGlobs(worktree, readText) {
-  const yaml = readText(join23(worktree, "pnpm-workspace.yaml"));
+  const yaml = readText(join24(worktree, "pnpm-workspace.yaml"));
   if (yaml !== null) {
     const globs = [];
     let inPackages = false;
@@ -12091,7 +12224,7 @@ function workspaceGlobs(worktree, readText) {
     }
     if (globs.length) return globs;
   }
-  const pkg = readJson(readText, join23(worktree, "package.json"));
+  const pkg = readJson(readText, join24(worktree, "package.json"));
   const ws = pkg?.workspaces;
   const list = Array.isArray(ws) ? ws : Array.isArray(ws?.packages) ? ws.packages : [];
   return list.filter((g) => typeof g === "string");
@@ -12102,14 +12235,14 @@ function workspaceDirs(worktree, globs, io) {
     if (glob.startsWith("!")) continue;
     const star = glob.indexOf("*");
     if (star === -1) {
-      const dir = join23(worktree, glob);
-      if (io.exists(join23(dir, "package.json"))) dirs.add(dir);
+      const dir = join24(worktree, glob);
+      if (io.exists(join24(dir, "package.json"))) dirs.add(dir);
       continue;
     }
-    const base3 = join23(worktree, glob.slice(0, star).replace(/\/$/, ""));
+    const base3 = join24(worktree, glob.slice(0, star).replace(/\/$/, ""));
     for (const name of io.listDirs(base3)) {
-      const dir = join23(base3, name);
-      if (io.exists(join23(dir, "package.json"))) dirs.add(dir);
+      const dir = join24(base3, name);
+      if (io.exists(join24(dir, "package.json"))) dirs.add(dir);
     }
   }
   return [...dirs];
@@ -12137,11 +12270,11 @@ function workspaceBuildTargets(worktree, io = {}) {
   if (!globs.length) return [];
   const pkgs = [];
   for (const dir of workspaceDirs(worktree, globs, { exists, listDirs })) {
-    const pkg = readJson(readText, join23(dir, "package.json"));
+    const pkg = readJson(readText, join24(dir, "package.json"));
     if (!pkg || typeof pkg.name !== "string") continue;
     const scripts = pkg.scripts ?? {};
     const entries = entryPaths(pkg);
-    const needsBuild = typeof scripts.build === "string" && entries.length > 0 && entries.some((e) => !exists(join23(dir, e)));
+    const needsBuild = typeof scripts.build === "string" && entries.length > 0 && entries.some((e) => !exists(join24(dir, e)));
     const deps = Object.keys({ ...pkg.dependencies ?? {}, ...pkg.devDependencies ?? {} });
     pkgs.push({ name: pkg.name, dir, deps, needsBuild });
   }
@@ -12169,7 +12302,7 @@ function devDatabaseUrl(worktree, io = {}) {
   const fromEnv = (io.env ?? process.env).DATABASE_URL;
   if (fromEnv && fromEnv.trim()) return fromEnv.trim();
   for (const file of [".env", ".env.example"]) {
-    const raw = readText(join23(worktree, file));
+    const raw = readText(join24(worktree, file));
     if (raw === null) continue;
     const m = /^\s*(?:export\s+)?DATABASE_URL\s*=\s*(.*)$/m.exec(raw);
     const value = (m?.[1] ?? "").trim().replace(/^['"]|['"]$/g, "");
@@ -12189,7 +12322,7 @@ function prismaPackages(worktree, io) {
   const readText = io.readText ?? safeReadText;
   const listDirs = io.listDirs ?? safeListDirs;
   const dirs = [worktree, ...workspaceDirs(worktree, workspaceGlobs(worktree, readText), { exists, listDirs })];
-  return dirs.filter((dir) => exists(join23(dir, "prisma", "schema.prisma")) && listDirs(join23(dir, "prisma", "migrations")).length > 0);
+  return dirs.filter((dir) => exists(join24(dir, "prisma", "schema.prisma")) && listDirs(join24(dir, "prisma", "migrations")).length > 0);
 }
 function jsExecBin(pm, command) {
   switch (pm) {
@@ -12226,18 +12359,18 @@ function envCachePlan(worktree, io = {}) {
   if (!pm) return null;
   const parts = [`pm:${pm}`];
   for (const name of ENV_DEFINING_FILES) {
-    const raw = readText(join23(worktree, name));
+    const raw = readText(join24(worktree, name));
     if (raw !== null) parts.push(`${name}
 ${raw}`);
   }
   const pkgDirs = workspaceDirs(worktree, workspaceGlobs(worktree, readText), { exists, listDirs });
   const rels = pkgDirs.map((dir) => dir.slice(worktree.length + 1)).sort();
   for (const rel of ["", ...rels]) {
-    const raw = readText(join23(worktree, rel, "package.json"));
+    const raw = readText(join24(worktree, rel, "package.json"));
     if (raw !== null) parts.push(`${rel}/package.json
 ${raw}`);
   }
-  return { key: fingerprint(parts), dirs: ["node_modules", ...rels.map((rel) => join23(rel, "node_modules"))] };
+  return { key: fingerprint(parts), dirs: ["node_modules", ...rels.map((rel) => join24(rel, "node_modules"))] };
 }
 function planPrepare(worktree, io = {}) {
   const plan = overridePlan(io.override) ?? detectPlan(worktree, io) ?? ciWorkflowPlan(worktree, io);
@@ -12262,7 +12395,7 @@ async function ensureWorktreeDeps(worktree, io = {}) {
     restored: [],
     cached: false
   };
-  if (cachePlan && !exists(join23(worktree, "node_modules"))) {
+  if (cachePlan && !exists(join24(worktree, "node_modules"))) {
     report.restored = await restoreEnvSnapshot(worktree, cachePlan.key, cacheIO) ?? [];
   }
   const plan = planPrepare(worktree, io);
@@ -12593,7 +12726,7 @@ function parkReasonUnretriable(reason) {
 // package.json
 var package_default = {
   name: "@taskless-app/swarm",
-  version: "0.6.57",
+  version: "0.6.59",
   type: "module",
   description: "Local control plane for a fleet of AI coding agents (drones), coordinating through Taskless. The overmind runs the swarm.",
   keywords: [
@@ -12644,7 +12777,7 @@ var package_default = {
     execa: "^10.0.0",
     zod: "3.25.76"
   },
-  gitHead: "e7c84e94f2f2e0ff28d5dfe8b11b43ef1291ce5e"
+  gitHead: "13cdd65f2929d86153c0a52715c0d9891f8a1e4b"
 };
 
 // src/version.ts
@@ -13433,7 +13566,7 @@ init_git();
 
 // src/diff.ts
 import { statSync as statSync12 } from "fs";
-import { join as join28 } from "path";
+import { join as join29 } from "path";
 import { $ as $4 } from "execa";
 var MAX_FILES = 200;
 var MAX_LINES_PER_FILE = 1500;
@@ -13601,7 +13734,7 @@ async function collectRunDiff(worktree, opts = {}) {
       files.push(pf);
     }
   }
-  files.sort((a, b) => mtime(join28(worktree, b.path)) - mtime(join28(worktree, a.path)));
+  files.sort((a, b) => mtime(join29(worktree, b.path)) - mtime(join29(worktree, a.path)));
   const truncatedFiles = files.length > MAX_FILES;
   if (truncatedFiles) files = files.slice(0, MAX_FILES);
   const added = files.reduce((s, f) => s + f.added, 0);
@@ -15415,14 +15548,14 @@ function makeMaxDronesReader(opts) {
   const ttl = opts.ttlMs ?? 1e4;
   const now = opts.now ?? Date.now;
   let cached = null;
-  let cachedAt = -Infinity;
+  let cachedAt2 = -Infinity;
   return async () => {
     const t = now();
-    if (cached != null && t - cachedAt < ttl) return cached;
+    if (cached != null && t - cachedAt2 < ttl) return cached;
     const live = await opts.fetch().catch(() => null);
     if (live != null && Number.isFinite(live) && live > 0) {
       cached = Math.trunc(live);
-      cachedAt = t;
+      cachedAt2 = t;
       return cached;
     }
     return opts.fallback;
@@ -15855,20 +15988,20 @@ async function prodClearMergeIntent(runId, deps = {}) {
 
 // src/envGate.ts
 import { existsSync as existsSync17 } from "fs";
-import { join as join30 } from "path";
+import { join as join31 } from "path";
 import { createConnection } from "net";
 import { execa as execa2 } from "execa";
 
 // src/platform.ts
 import { existsSync as existsSync16, readFileSync as readFileSync22 } from "fs";
-import { delimiter, join as join29 } from "path";
+import { delimiter as delimiter2, join as join30 } from "path";
 function resolveCommandPath(name, env = process.env, platform = process.platform) {
   if (name.includes("/") || name.includes("\\")) return existsSync16(name) ? name : null;
-  const dirs = (env.PATH ?? env.Path ?? "").split(delimiter).filter(Boolean);
+  const dirs = (env.PATH ?? env.Path ?? "").split(delimiter2).filter(Boolean);
   const exts = platform === "win32" ? (env.PATHEXT ?? ".EXE;.CMD;.BAT").split(";").filter(Boolean) : [""];
   for (const dir of dirs) {
     for (const ext of exts) {
-      const candidate = join29(dir, name + ext);
+      const candidate = join30(dir, name + ext);
       if (existsSync16(candidate)) return candidate;
     }
   }
@@ -15953,7 +16086,7 @@ var COMPOSE_MARKERS = [
 ];
 function detectRequirements(repo, io = {}) {
   const exists = io.exists ?? existsSync17;
-  const marker = COMPOSE_MARKERS.find((f) => exists(join30(repo, f)));
+  const marker = COMPOSE_MARKERS.find((f) => exists(join31(repo, f)));
   return marker ? [{ kind: "docker", raw: `docker (\u0434\u0435\u0442\u0435\u043A\u0442: ${marker})` }] : [];
 }
 function resolveRequirements(repo, declared, io = {}) {
@@ -16104,8 +16237,9 @@ function stormFacts(db) {
   if (!db.stormActive()) return null;
   const since = db.currentStormStartedAt();
   const recs = since ? db.stormProbeRecordsSince(since) : [];
+  const last = lastProbeReason(recs);
   return {
-    reason: lastProbeReason(recs) === "limit" ? "limit" : "provider",
+    reason: last === "limit" ? "limit" : last === "auth" ? "auth" : "provider",
     hint: recs.length ? recs[recs.length - 1].resetHint ?? null : null
   };
 }
@@ -16731,6 +16865,13 @@ function stormBanner(storm) {
       desc: `\u0414\u0440\u043E\u043D\u044B \u043F\u043E\u0435\u0434\u0443\u0442 \u043F\u043E\u0441\u043B\u0435 \u0440\u0435\u0437\u0435\u0442\u0430 \u043B\u0438\u043C\u0438\u0442\u0430${storm.resetHint ? ` \xB7 ${storm.resetHint}` : ""}. Anthropic \u0434\u043E\u0441\u0442\u0443\u043F\u0435\u043D \u2014 \u044D\u0442\u043E \u043B\u0438\u043C\u0438\u0442 \u043F\u043E\u0434\u043F\u0438\u0441\u043A\u0438, \u043D\u0435 \u0441\u0431\u043E\u0439 \u043F\u0440\u043E\u0432\u0430\u0439\u0434\u0435\u0440\u0430.`
     };
   }
+  if (storm.reason === "auth") {
+    return {
+      ico: "\u{1F511}",
+      title: "\u0414\u043E\u0441\u0442\u0443\u043F \u0438\u0441\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044F \u043E\u0442\u0432\u0435\u0440\u0433\u043D\u0443\u0442 \u2014 \u0440\u043E\u0439 \u043D\u0430 \u043F\u0430\u0443\u0437\u0435",
+      desc: "\u041F\u0440\u043E\u0432\u0430\u0439\u0434\u0435\u0440 \u0436\u0438\u0432, \u043D\u043E \u043F\u0443\u0441\u043A\u0430\u0435\u0442 \u043D\u0435 \u043D\u0430\u0441: \u043A\u043B\u044E\u0447, \u0430\u043A\u043A\u0430\u0443\u043D\u0442 \u0438\u043B\u0438 \u0440\u0435\u0433\u0438\u043E\u043D (403 \u0431\u0435\u0437 VPN). \u0421\u0430\u043C\u043E \u043D\u0435 \u043F\u043E\u0434\u043D\u0438\u043C\u0435\u0442\u0441\u044F \u2014 \u043F\u0440\u043E\u0432\u0435\u0440\u044C \u0432\u0445\u043E\u0434 \u0438\u0441\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044F (`swarm doctor`)."
+    };
+  }
   const frozen = storm.dead ? `${storm.dead} \u0432 \u043A\u043E\u043A\u043E\u043D\u0435` : "\u043D\u043E\u0432\u044B\u0445 \u0434\u0440\u043E\u043D\u043E\u0432 \u043D\u0435 \u043F\u043E\u0434\u043D\u0438\u043C\u0430\u0435\u043C";
   return {
     ico: "\u26A1",
@@ -17288,6 +17429,10 @@ function paintStorm(){ var b=document.getElementById('storm-banner'); if(!b) ret
     b.innerHTML='<span class="sb-ico">\u23F3</span><div class="sb-body"><div class="sb-t">\u041B\u0438\u043C\u0438\u0442 Claude \u0438\u0441\u0447\u0435\u0440\u043F\u0430\u043D \u2014 \u0440\u043E\u0439 \u043D\u0430 \u043F\u0430\u0443\u0437\u0435</div>'+
       '<div class="sb-d">\u0414\u0440\u043E\u043D\u044B \u043F\u043E\u0435\u0434\u0443\u0442 \u043F\u043E\u0441\u043B\u0435 \u0440\u0435\u0437\u0435\u0442\u0430 \u043B\u0438\u043C\u0438\u0442\u0430'+reset+E(since)+'. Anthropic \u0434\u043E\u0441\u0442\u0443\u043F\u0435\u043D \u2014 \u044D\u0442\u043E \u043B\u0438\u043C\u0438\u0442 \u043F\u043E\u0434\u043F\u0438\u0441\u043A\u0438, \u043D\u0435 \u0441\u0431\u043E\u0439 \u043F\u0440\u043E\u0432\u0430\u0439\u0434\u0435\u0440\u0430.</div></div>';
     b.hidden=false; return; }
+  if(st.reason==='auth'){
+    b.innerHTML='<span class="sb-ico">\u{1F511}</span><div class="sb-body"><div class="sb-t">\u0414\u043E\u0441\u0442\u0443\u043F \u0438\u0441\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044F \u043E\u0442\u0432\u0435\u0440\u0433\u043D\u0443\u0442 \u2014 \u0440\u043E\u0439 \u043D\u0430 \u043F\u0430\u0443\u0437\u0435</div>'+
+      '<div class="sb-d">\u041F\u0440\u043E\u0432\u0430\u0439\u0434\u0435\u0440 \u0436\u0438\u0432, \u043D\u043E \u043F\u0443\u0441\u043A\u0430\u0435\u0442 \u043D\u0435 \u043D\u0430\u0441: \u043A\u043B\u044E\u0447, \u0430\u043A\u043A\u0430\u0443\u043D\u0442 \u0438\u043B\u0438 \u0440\u0435\u0433\u0438\u043E\u043D'+E(since)+'. \u0421\u0430\u043C\u043E \u043D\u0435 \u043F\u043E\u0434\u043D\u0438\u043C\u0435\u0442\u0441\u044F \u2014 \u043F\u0440\u043E\u0432\u0435\u0440\u044C \u0432\u0445\u043E\u0434 \u0438\u0441\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044F (swarm doctor).</div></div>';
+    b.hidden=false; return; }
   var frozen = st.dead ? st.dead+' '+plural(st.dead,DRONEW)+' \u0432 \u043A\u043E\u043A\u043E\u043D\u0435' : '\u043D\u043E\u0432\u044B\u0445 \u0434\u0440\u043E\u043D\u043E\u0432 \u043D\u0435 \u043F\u043E\u0434\u043D\u0438\u043C\u0430\u0435\u043C';
   b.innerHTML='<span class="sb-ico">\u26A1</span><div class="sb-body"><div class="sb-t">\u041F\u0441\u0438\u043E\u043D\u043D\u0430\u044F \u0441\u0432\u044F\u0437\u044C \u043F\u043E\u0442\u0435\u0440\u044F\u043D\u0430 \u2014 Anthropic \u0448\u0442\u043E\u0440\u043C\u0438\u0442</div>'+
     '<div class="sb-d">\u0420\u043E\u0439 \u0437\u0430\u043C\u0435\u0440, \u0434\u0440\u043E\u043D\u044B \u0432 \u043A\u043E\u043A\u043E\u043D\u0430\u0445 \u2014 '+E(frozen)+', \u043E\u0447\u0435\u0440\u0435\u0434\u044C \u043A\u043E\u043F\u0438\u0442\u0441\u044F'+E(since)+'. \u041F\u043E\u0434\u043D\u0438\u043C\u0435\u0442\u0441\u044F \u0441\u0430\u043C, \u043A\u0430\u043A \u0441\u0432\u044F\u0437\u044C \u0432\u0435\u0440\u043D\u0451\u0442\u0441\u044F.</div></div>';
@@ -17697,9 +17842,9 @@ function closeWebServer(server) {
 // src/hostCommands.ts
 init_src();
 import { readFileSync as readFileSync23, renameSync as renameSync10, writeFileSync as writeFileSync15 } from "fs";
-import { join as join31 } from "path";
+import { join as join32 } from "path";
 function hostCommandStatePath(home) {
-  return join31(home, "host-command.json");
+  return join32(home, "host-command.json");
 }
 function readState(path) {
   try {
@@ -17874,7 +18019,7 @@ async function doRestart(cmd, opts, note) {
 // src/selfUpdate.ts
 init_git();
 import { existsSync as existsSync18 } from "fs";
-import { join as join32 } from "path";
+import { join as join33 } from "path";
 import { $ as $5 } from "execa";
 var DAEMON_PACKAGE = "@taskless-app/swarm";
 var defaultRun = async (cmd, args, cwd) => {
@@ -17916,7 +18061,7 @@ async function runSelfUpdate(io) {
     };
   }
   await io.onStep("install", "\u0441\u0442\u0430\u0432\u043B\u044E \u0437\u0430\u0432\u0438\u0441\u0438\u043C\u043E\u0441\u0442\u0438");
-  if (!exists(join32(repo, "pnpm-lock.yaml"))) {
+  if (!exists(join33(repo, "pnpm-lock.yaml"))) {
     return { ok: false, step: "install", message: "\u0432 \u0440\u0435\u043F\u043E\u0437\u0438\u0442\u043E\u0440\u0438\u0438 \u0434\u0435\u043C\u043E\u043D\u0430 \u043D\u0435\u0442 pnpm-lock.yaml \u2014 \u043E\u0431\u043D\u043E\u0432\u043B\u044F\u0442\u044C \u0435\u0433\u043E \u044D\u0442\u0438\u043C \u043F\u0443\u0442\u0451\u043C \u043D\u0435 \u0431\u0435\u0440\u0443\u0441\u044C" };
   }
   const installed2 = await run("pnpm", ["install", "--frozen-lockfile"], repo);
@@ -18036,7 +18181,10 @@ function executorHealthy(opts = {}) {
       }
       resolve5(r);
     };
-    const child = spawn3(bin, [...executor.probe.args], { stdio: ["ignore", "pipe", "pipe"] });
+    const child = spawn3(bin, [...executor.probe.args], {
+      stdio: ["ignore", "pipe", "pipe"],
+      ...opts.env ? { env: { ...process.env, ...opts.env } } : {}
+    });
     child.stdout?.on("data", (d) => {
       out += d.toString();
     });
@@ -18045,11 +18193,14 @@ function executorHealthy(opts = {}) {
     });
     const timer = setTimeout(() => finish({ ok: false, reason: "provider", resetHint: null }), timeoutMs);
     child.on("error", () => finish({ ok: false, reason: "exec", resetHint: null }));
-    child.on("exit", (code) => {
+    child.on("close", (code) => {
       if (code === 0) return finish({ ok: true, reason: "ok", resetHint: null });
       if (executor.probe.limitPattern.test(out)) {
         return finish({ ok: false, reason: "limit", resetHint: out.match(RESET_RE)?.[0]?.trim() ?? null });
       }
+      if (executor.probe.authPattern?.test(out)) {
+        return finish({ ok: false, reason: "auth", resetHint: null });
+      }
       finish({ ok: false, reason: "provider", resetHint: null });
     });
   });
@@ -18076,14 +18227,14 @@ async function fetchExternalStorm(url, opts = {}) {
 
 // src/anomalyState.ts
 import { existsSync as existsSync19, readFileSync as readFileSync24, renameSync as renameSync11, writeFileSync as writeFileSync16 } from "fs";
-import { join as join33 } from "path";
+import { join as join34 } from "path";
 var KEY_TTL_MS = 7 * 24 * 60 * 6e4;
 var MAX_RESOLVED = 200;
 function emptyState() {
   return { since: {}, lastFiredAt: {}, fires: {}, resolved: [], stopQuiet: null };
 }
 function anomalyStatePath(home) {
-  return join33(home, "anomaly-state.json");
+  return join34(home, "anomaly-state.json");
 }
 function loadAnomalyState(home, now = Date.now(), io = {}) {
   const exists = io.exists ?? existsSync19;
@@ -18282,7 +18433,7 @@ function decideFreshAction(db, wt) {
   for (const r of stalled) {
     if (findEscalation(db.events(r.id).map((e) => e.text ?? ""), r, "author")) continue;
     const path = r.worktree_path;
-    const recoverable = !!path && wt.exists(path) && wt.hasTranscript(path);
+    const recoverable = !!path && wt.exists(path) && wt.hasTranscript(r);
     if (recoverable) continue;
     return {
       type: "fresh",
@@ -18561,7 +18712,7 @@ function withManualAreas(history, areas) {
 // src/overmind.ts
 var ANOMALY_RESOLVE_BATCH = 50;
 var THIS_FILE = fileURLToPath3(import.meta.url);
-var executorHasSession = (p) => EXECUTOR.session.exists(p);
+var executorHasSession = (run) => !!run.worktree_path && EXECUTOR.session.exists(run.worktree_path);
 var OVERMIND_ENTRY = THIS_FILE;
 var STALL_MS = Number(process.env.SWARM_STALL_MS) || 10 * 60 * 1e3;
 var STALL_FLOOR_MS = Number(process.env.SWARM_STALL_FLOOR_MS) || 30 * 60 * 1e3;
@@ -18670,7 +18821,7 @@ async function livenessMs(deps, run, now, liveChildPpids) {
     if (commitMs != null) ms = Math.max(ms, commitMs);
   }
   if (deps.transcriptMtimeMs) {
-    const transcriptMs = deps.transcriptMtimeMs(run.worktree_path);
+    const transcriptMs = deps.transcriptMtimeMs(run);
     if (transcriptMs != null) ms = Math.max(ms, transcriptMs);
   }
   return ms;
@@ -19362,7 +19513,7 @@ ${task.description}` : `\u0417\u0430\u0434\u0430\u0447\u0430 ${run.task_slug} (\
   }
   return parts.join("\n");
 }
-var HERO_CHARTER_PATH = join34(dirname5(THIS_FILE), "..", "docs", "HERO.md");
+var HERO_CHARTER_PATH = join35(dirname5(THIS_FILE), "..", "docs", "HERO.md");
 function buildHeroPrompt(task, run, taskContext, attachmentsBlock) {
   const name = run.name || `#${run.id}`;
   const charter = readFileSync25(HERO_CHARTER_PATH, "utf8");
@@ -19422,7 +19573,7 @@ function ciTrustLine(prUrl, verifyMode) {
   }
   return `\u041D\u0435 \u043F\u0435\u0440\u0435\u0433\u043E\u043D\u044F\u0439 \u0442\u0435\u0441\u0442-\u0441\u044C\u044E\u0442/typecheck \u0437\u0430\u043D\u043E\u0432\u043E \u2014 \u044D\u0442\u043E \u0443\u0436\u0435 \u0441\u0434\u0435\u043B\u0430\u043B CI \u043D\u0430 \u044D\u0442\u043E\u043C \u0436\u0435 \u043A\u043E\u043C\u043C\u0438\u0442\u0435 (\u0434\u0432\u043E\u0439\u043D\u043E\u0439 \u043F\u0440\u043E\u0433\u043E\u043D \u043D\u0430 \u043C\u0430\u0448\u0438\u043D\u0435 \u0432\u043B\u0430\u0434\u0435\u043B\u044C\u0446\u0430 \u043E\u0442\u043C\u0435\u043D\u0451\u043D, TASWM-249). \u041F\u0440\u043E\u0447\u0438\u0442\u0430\u0439 \u0435\u0433\u043E \u0440\u0435\u0437\u0443\u043B\u044C\u0442\u0430\u0442 \u0441\u0430\u043C: ${readChecks}. \u0414\u0430\u043B\u044C\u0448\u0435 \u0442\u0440\u0438 \u0440\u0430\u0437\u043D\u044B\u0445 \u0441\u043B\u0443\u0447\u0430\u044F: \u2460 \u0445\u043E\u0442\u044C \u043E\u0434\u0438\u043D \u0447\u0435\u043A \u0435\u0449\u0451 PENDING \u2014 \u0432\u0435\u0440\u0434\u0438\u043A\u0442 \u0432\u043E\u043E\u0431\u0449\u0435 \u043D\u0435 \u0432\u044B\u043D\u043E\u0441\u0438: \u043D\u0435 \u043F\u043E\u0441\u0442\u0438 REQUEST CHANGES, \u043D\u0435 \u0437\u043E\u0432\u0438 done(), \u043F\u0440\u043E\u0441\u0442\u043E \u0437\u0430\u0432\u0435\u0440\u0448\u0438 \u0441\u0435\u0441\u0441\u0438\u044E \u043A\u0430\u043A \u0435\u0441\u0442\u044C \u2014 \u0440\u043E\u0439 \u0441\u0430\u043C \u0437\u0430\u043C\u0435\u0442\u0438\u0442, \u0447\u0442\u043E \u0442\u044B \u0436\u0434\u0451\u0448\u044C CI, \u0438 \u0440\u0430\u0437\u0431\u0443\u0434\u0438\u0442 \u0434\u043E\u0434\u0435\u043B\u0430\u0442\u044C \u0440\u0435\u0432\u044C\u044E, \u043A\u043E\u0433\u0434\u0430 \u0432\u0441\u0435 \u0447\u0435\u043A\u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0442\u0441\u044F (\u044D\u0442\u043E \u0448\u0442\u0430\u0442\u043D\u044B\u0439 \u043F\u0443\u0442\u044C, \u043E\u043F\u0435\u0440\u0430\u0442\u043E\u0440\u0430 \u0437\u0432\u0430\u0442\u044C \u043D\u0435 \u043D\u0443\u0436\u043D\u043E). \u2461 \u0432\u0441\u0435 \u0447\u0435\u043A\u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043B\u0438\u0441\u044C \u0438 \u0435\u0441\u0442\u044C FAIL \u2014 REQUEST CHANGES, \u043D\u0430\u0437\u043E\u0432\u0438 \u043F\u043E\u0438\u043C\u0451\u043D\u043D\u043E, \u0447\u0442\u043E \u0443\u043F\u0430\u043B\u043E. \u2462 \u043D\u0430 \u044D\u0442\u043E\u043C \u043A\u043E\u043C\u043C\u0438\u0442\u0435 \u0447\u0435\u043A\u043E\u0432 \u043D\u0435\u0442 \u0432\u043E\u0432\u0441\u0435 \u2014 \u0442\u043E\u0436\u0435 REQUEST CHANGES: \u043F\u0440\u043E\u0432\u0435\u0440\u0438\u0442\u044C \u043D\u0435\u0447\u0435\u043C (\u0443 \u044D\u0442\u043E\u0433\u043E \u043F\u0440\u043E\u0435\u043A\u0442\u0430 verifyMode=ci, \u0442\u043E \u0435\u0441\u0442\u044C CI \u043E\u0431\u044F\u0437\u0430\u043D \u0431\u044B\u0442\u044C). ${dontTrustAuthor}`;
 }
-var REVIEW_SKILL_PATH = join34(bundledRoleDir("drone"), "skills", "taskless-review", "SKILL.md");
+var REVIEW_SKILL_PATH = join35(bundledRoleDir("drone"), "skills", "taskless-review", "SKILL.md");
 function reviewDefectClasses(skillPath = REVIEW_SKILL_PATH) {
   const text = readFileSync25(skillPath, "utf8");
   const m = /^## Классы дефектов\n([\s\S]*?)(?=^## |(?![\s\S]))/m.exec(text);
@@ -19663,7 +19814,7 @@ async function resurrectStormDead(deps, worktreeExists, hasTranscript, opts) {
     if (countActiveDrones(deps.db) >= cap) break;
     if (!await projectQuotaGateAllows(deps, run)) continue;
     const wt = run.worktree_path;
-    const mode = !!wt && worktreeExists(wt) && hasTranscript(wt) ? "continue" : "fresh";
+    const mode = !!wt && worktreeExists(wt) && hasTranscript(run) ? "continue" : "fresh";
     deps.db.addEvent(run.id, "resumed", mode === "continue" ? STORM_RESUME_CONTINUE_TEXT : STORM_RESUME_FRESH_TEXT);
     try {
       await deps.respawn(run, mode);
@@ -19691,7 +19842,7 @@ async function wakeRun(deps, runId, opts = {}) {
   const worktreeExists = deps.worktreeExists ?? existsSync20;
   const hasTranscript = deps.hasTranscript ?? executorHasSession;
   const wt = run.worktree_path;
-  const canContinue = !!wt && worktreeExists(wt) && hasTranscript(wt);
+  const canContinue = !!wt && worktreeExists(wt) && hasTranscript(run);
   const isService = run.reviews_run_id != null || run.resolves_run_id != null;
   if (!canContinue && isService) {
     return { ok: false, why: `\u043F\u0440\u043E\u0433\u043E\u043D #${runId} \u2014 \u0441\u043B\u0443\u0436\u0435\u0431\u043D\u044B\u0439 (\u0440\u0435\u0432\u044C\u044E\u0435\u0440/\u0440\u0435\u0437\u043E\u043B\u0432\u0435\u0440), \u0430 \u0441\u0435\u0441\u0441\u0438\u044E \u043F\u0440\u043E\u0434\u043E\u043B\u0436\u0438\u0442\u044C \u043D\u0435\u0447\u0435\u043C: fresh \u043F\u043E\u0442\u0435\u0440\u044F\u043B \u0431\u044B \u0435\u0433\u043E \u043A\u043E\u043D\u0442\u0435\u043A\u0441\u0442` };
@@ -19813,7 +19964,7 @@ function repoHasCi(deps, run) {
 function repoHasCiWorkflows(worktreePath, repo) {
   for (const base3 of [worktreePath, repo]) {
     if (!base3) continue;
-    const dir = join34(base3, ".github", "workflows");
+    const dir = join35(base3, ".github", "workflows");
     try {
       if (readdirSync14(dir).some((f) => f.endsWith(".yml") || f.endsWith(".yaml"))) return true;
     } catch {
@@ -19904,7 +20055,7 @@ async function wakeAuthorOnRedCi(deps, run, now, ci, worktreeExists, hasTranscri
   }
   if (stats.lastMs != null && now - stats.lastMs < CI_WAKE_COOLDOWN_MS) return false;
   const wt = run.worktree_path;
-  if (!wt || !worktreeExists(wt) || !hasTranscript(wt)) return false;
+  if (!wt || !worktreeExists(wt) || !hasTranscript(run)) return false;
   const summary = await deps.ci.failureSummary(ci.failing, ci.failingRunIds).catch(() => null) ?? `\u274C CI \u0443\u043F\u0430\u043B: ${ci.failing.join(", ") || "(\u0441\u043C. gh pr checks)"}`;
   if (isInfraCiFailure(summary)) {
     const seen = ciStreak(deps.db, run.id, CI_INFRA_MARK).count;
@@ -19970,7 +20121,7 @@ async function wakeReviewerOnCiReady(deps, run, over) {
   }
   const wt = reviewer.worktree_path;
   const stats = ciWakeStats(deps.db, reviewer.id);
-  const canContinue = !!wt && worktreeAndTranscriptAlive(deps, wt);
+  const canContinue = !!wt && worktreeAndTranscriptAlive(deps, reviewer);
   if (stats.count >= CI_WAKE_LIMIT || !canContinue) {
     const why = !canContinue ? "worktree/\u0441\u0435\u0441\u0441\u0438\u044F \u0440\u0435\u0432\u044C\u044E\u0435\u0440\u0430 \u043D\u0435\u0434\u043E\u0441\u0442\u0443\u043F\u043D\u044B \u2014 \u043F\u0440\u043E\u0434\u043E\u043B\u0436\u0430\u0442\u044C \u043D\u0435\u0447\u0435\u0433\u043E" : `${CI_WAKE_LIMIT} \u043F\u043E\u0431\u0443\u0434(\u043E\u043A) \u043F\u043E \u0433\u043E\u0442\u043E\u0432\u043D\u043E\u0441\u0442\u0438 CI \u043D\u0435 \u0445\u0432\u0430\u0442\u0438\u043B\u043E`;
     deps.db.updateRun(reviewer.id, { status: "stalled" });
@@ -20013,10 +20164,11 @@ async function wakeReviewerOnCiReady(deps, run, over) {
   }
   return true;
 }
-function worktreeAndTranscriptAlive(deps, worktree) {
+function worktreeAndTranscriptAlive(deps, run) {
   const exists = deps.worktreeExists ?? existsSync20;
   const transcript = deps.hasTranscript ?? executorHasSession;
-  return exists(worktree) && transcript(worktree);
+  const wt = run.worktree_path;
+  return !!wt && exists(wt) && transcript(run);
 }
 async function projectWantsChecks(deps, run) {
   if (!deps.autoReviewForRepo) return true;
@@ -20196,7 +20348,7 @@ async function zoneConflictFor(db, models, activeFiles, run, repo, repoFallback)
   activeFiles.prune(holders.map((r) => r.id));
   const fileExists = (p) => {
     try {
-      return statSync13(join34(repo, p), { throwIfNoEntry: false })?.isFile() ?? false;
+      return statSync13(join35(repo, p), { throwIfNoEntry: false })?.isFile() ?? false;
     } catch {
       return false;
     }
@@ -20610,7 +20762,7 @@ async function resumeWatchdogParked(deps, droneCap) {
   const worktreeExists = deps.worktreeExists ?? existsSync20;
   const hasTranscript = deps.hasTranscript ?? executorHasSession;
   const wt = candidate.worktree_path;
-  const canContinue = !!wt && worktreeExists(wt) && hasTranscript(wt);
+  const canContinue = !!wt && worktreeExists(wt) && hasTranscript(candidate);
   const mode = canContinue ? "continue" : "fresh";
   if (mode === "continue" && wt && deps.reclaimWorktree) {
     try {
@@ -20831,7 +20983,7 @@ async function manageRelief(deps, now, droneCap, stormActive) {
           console.error(`[overmind] \u0441\u043D\u0430\u043F\u0448\u043E\u0442 worktree \u043F\u0430\u0443\u0437\u043D\u0443\u0442\u043E\u0433\u043E ${droneLabel(candidate)} \u0441\u043E\u0440\u0432\u0430\u043B\u0441\u044F:`, e);
         }
       }
-      const canContinue = !!candidate.worktree_path && worktreeAndTranscriptAlive(deps, candidate.worktree_path);
+      const canContinue = !!candidate.worktree_path && worktreeAndTranscriptAlive(deps, candidate);
       deps.db.updateRun(candidate.id, { status: "paused", stop_reason: RELIEF_PAUSE_REASON });
       deps.db.addEvent(candidate.id, "paused", reliefPauseReason(canContinue, decisionText));
       state.lastPauseAt = now;
@@ -20910,7 +21062,7 @@ async function manageRelief(deps, now, droneCap, stormActive) {
       if (now - loopEntry.lastPauseAt < reliefBackoffMs(loopEntry.pauses, cfg.rampWindowMs, loopCfg)) return;
     }
     const wt = resumeCandidate.worktree_path;
-    const canContinue = !!wt && worktreeAndTranscriptAlive(deps, wt);
+    const canContinue = !!wt && worktreeAndTranscriptAlive(deps, resumeCandidate);
     const mode = canContinue ? "continue" : "fresh";
     if (mode === "continue" && wt && deps.reclaimWorktree) {
       try {
@@ -21895,7 +22047,7 @@ async function tickOnce(deps) {
       const abort = aborted ? deps.exitAbort?.(run) ?? null : null;
       const what = aborted ? abortReason(abort) : EXITED_NO_DONE_REASON;
       const wt = run.worktree_path;
-      const canContinue = !!wt && worktreeExists(wt) && hasTranscript(wt);
+      const canContinue = !!wt && worktreeExists(wt) && hasTranscript(run);
       if (deps.respawn && canContinue && run.respawns < RESPAWN_LIMIT) {
         const n = deps.db.incRespawn(run.id);
         deps.db.addEvent(
@@ -21932,7 +22084,7 @@ async function tickOnce(deps) {
     deps.respawn && run.respawns < RESPAWN_LIMIT) {
       const wt = run.worktree_path;
       const wtAlive = !!wt && worktreeExists(wt);
-      const canContinue = wtAlive && hasTranscript(wt);
+      const canContinue = wtAlive && hasTranscript(run);
       const young = now - lastActivityMs(deps.db, run) < RESPAWN_YOUNG_MS;
       const mode = young ? "fresh" : canContinue ? "continue" : null;
       if (mode) {
@@ -21989,7 +22141,7 @@ async function tickOnce(deps) {
     }
     if (!alive && outcome === "graceful" && run.status === "running" && isSubrun(run)) {
       const wt = run.worktree_path;
-      const canContinue = !!wt && worktreeExists(wt) && hasTranscript(wt);
+      const canContinue = !!wt && worktreeExists(wt) && hasTranscript(run);
       if (deps.respawn && canContinue && run.respawns < RESPAWN_LIMIT) {
         const n = deps.db.incRespawn(run.id);
         deps.db.addEvent(run.id, "respawned", `\u0430\u0432\u0442\u043E-\u043F\u0440\u043E\u0434\u043E\u043B\u0436\u0435\u043D\u0438\u0435 #${n}: ${SUBRUN_EXITED_TEXT} \u2014 --continue \u0441 \u043D\u0430\u043A\u0430\u0437\u043E\u043C \u043D\u0435 \u0436\u0434\u0430\u0442\u044C \u0444\u043E\u043D\u043E\u0432\u0443\u044E \u0440\u0430\u0431\u043E\u0442\u0443 \u0438 \u043F\u0440\u043E\u0432\u0435\u0440\u044F\u0442\u044C \u0441\u043E\u0440\u0430\u0437\u043C\u0435\u0440\u043D\u043E \u043F\u0440\u0430\u0432\u043A\u0435 (TASWM-528)`);
@@ -22065,7 +22217,7 @@ async function tickOnce(deps) {
       if (run.pid != null && deps.isAlive(run.pid)) continue;
       if (!await projectQuotaGateAllows(deps, run)) continue;
       const wt = run.worktree_path;
-      const canContinue = !!wt && worktreeExists(wt) && hasTranscript(wt);
+      const canContinue = !!wt && worktreeExists(wt) && hasTranscript(run);
       const mode = canContinue ? "continue" : "fresh";
       deps.db.addEvent(
         run.id,
@@ -22295,7 +22447,7 @@ async function resolveConflict(deps, reviewRun) {
     model: reviewRun.model,
     review_model: reviewRun.review_model
   });
-  const wt = join34(deps.worktreesDir, basename6(repo), `${reviewRun.task_slug}-resolve-${resolver.id}`);
+  const wt = join35(deps.worktreesDir, basename6(repo), `${reviewRun.task_slug}-resolve-${resolver.id}`);
   try {
     await deps.git.prepareDetachedWorktree(repo, branch, wt);
     await deps.git.setWorktreeIdentity(wt, resolver.name);
@@ -22375,7 +22527,7 @@ async function spawnReviewer(deps, reviewRun, files) {
     // (своей у ревьюера нет, TASWM-204), и коммент с вердиктом должен уехать именно туда.
     workspace_id: reviewRun.workspace_id
   });
-  const wt = join34(deps.worktreesDir, basename6(repo), `${reviewRun.task_slug}-review-${reviewer.id}`);
+  const wt = join35(deps.worktreesDir, basename6(repo), `${reviewRun.task_slug}-review-${reviewer.id}`);
   try {
     await deps.git.prepareDetachedWorktree(repo, branch, wt);
     await deps.git.setWorktreeIdentity(wt, reviewer.name);
@@ -22456,7 +22608,7 @@ async function spawnVerifier(deps, verifiedRun, files) {
     // штамп цикла: фикс-итерацию проверяет свежий верификатор
     workspace_id: verifiedRun.workspace_id
   });
-  const wt = join34(deps.worktreesDir, basename6(repo), `${verifiedRun.task_slug}-verify-${verifier.id}`);
+  const wt = join35(deps.worktreesDir, basename6(repo), `${verifiedRun.task_slug}-verify-${verifier.id}`);
   try {
     await deps.git.prepareDetachedWorktree(repo, branch, wt);
     await deps.git.setWorktreeIdentity(wt, verifier.name);
@@ -22792,6 +22944,7 @@ async function runDaemon(opts) {
   } : void 0;
   let lastDroneCap = null;
   let lastSwarmModels = null;
+  const runModelRefPin = /* @__PURE__ */ new Map();
   let lastSwarmEfforts = null;
   let lastMaxCostUsd = null;
   let lastOwnCapacity = null;
@@ -22804,8 +22957,8 @@ async function runDaemon(opts) {
     runLogsDir: RUN_LOGS_DIR,
     // TASWM-419: чем именуется каталог лога прогона — стабильные ключи из стора, не номер.
     runLogKeys: (run) => db.runLogKeys(run.id),
-    // Кем исполнять (TASWM-349) — настройка SWARM_EXECUTOR, один резолв на весь демон.
-    executor: EXECUTOR,
+    // TASWM-592: исполнитель здесь НЕ пинится — лаунчер берёт адаптер ПО ПРОГОНУ (реестр
+    // провайдеров по ссылке модели). Ручной пин cfg.executor остаётся у тестов.
     droneIsolation: DRONE_ISOLATION,
     channel: droneChannelLaunch,
     droneCap: () => lastDroneCap,
@@ -22817,6 +22970,10 @@ async function runDaemon(opts) {
     recordEffort: (runId, effort) => {
       db.updateRun(runId, { effort });
     },
+    recordModelRef: (runId, ref) => {
+      if (runModelRefPin.size > 4096) runModelRefPin.clear();
+      runModelRefPin.set(runId, ref);
+    },
     maxCostUsd: () => lastMaxCostUsd,
     // TASWM-535: поднятый потолок тяжёлого прогона живёт в его ленте — спавн читает её
     // оттуда же, откуда потом прочитает прод-сторож.
@@ -22891,7 +23048,9 @@ async function runDaemon(opts) {
           // реконсайла и его возраст. Возраст, а не момент: часы машины и прода
           // расходятся (ноутбук после сна — на минуты), а сверяет признак прод со своим
           // настенным временем. Не «демон запущен», а «цикл прокрутился».
-          tickPulse(tickHealth, Date.now(), tickIntervalMs)
+          tickPulse(tickHealth, Date.now(), tickIntervalMs),
+          // TASWM-592: установленные агенты машины — справочник для парка машин.
+          cachedInstalledExecutorIds()
         );
         if (reply.maxDrones !== void 0) operatorMaxDrones = reply.maxDrones;
         if (reply.commands.length) onHostCommands(reply.commands);
@@ -23330,16 +23489,18 @@ async function runDaemon(opts) {
     isAlive: pidAlive,
     // Учёт cost/usage (TASWM-188): реальный аккаунтант поверх RUN_LOGS_DIR + db.
     // TASWM-364: swarmModels — ТОТ ЖЕ снимок, что уехал в launcher: цена токенов считается
-    // по модели, на которой прогон реально работал.
-    accountCost: makeCostAccountant({ runLogsDir: RUN_LOGS_DIR, db, executor: EXECUTOR, swarmModels: () => lastSwarmModels }),
+    // по модели, на которой прогон реально работал. TASWM-592: исполнитель НЕ пинится —
+    // аккаунтант сам резолвит его по прогону (итог писал харнесс ЭТОГО прогона).
+    accountCost: makeCostAccountant({ runLogsDir: RUN_LOGS_DIR, db, swarmModels: () => lastSwarmModels, modelRefFor: (run) => runModelRefPin.get(run.id) ?? null }),
     // TASWM-413: тот же аккаунтант, но поводом служит завершённый ЗАПУСК, а не смерть
     // прогона в running — иначе сданный через done() прогон не получает цену никогда.
-    sweepCost: makeCostSweeper({ runLogsDir: RUN_LOGS_DIR, db, executor: EXECUTOR, swarmModels: () => lastSwarmModels, isAlive: pidAlive }),
+    sweepCost: makeCostSweeper({ runLogsDir: RUN_LOGS_DIR, db, swarmModels: () => lastSwarmModels, isAlive: pidAlive, modelRefFor: (run) => runModelRefPin.get(run.id) ?? null }),
     // Классификация выхода прогона (TASWM-229): result-файл того же RUN_LOGS_DIR — «вышел сам»
     // (graceful) vs «убит на полпути» (crash). Тот же каталог, что читает accountCost.
-    exitOutcome: makeExitClassifier(RUN_LOGS_DIR, (runId) => db.runLogKeys(runId), EXECUTOR),
+    // TASWM-592: исполнитель — по прогону (та же ссылка модели + живой снимок настроек).
+    exitOutcome: makeExitClassifier(RUN_LOGS_DIR, (runId) => db.runLogKeys(runId), (run) => executorForRun(run, lastSwarmModels, process.env, runModelRefPin.get(run.id) ?? null)),
     // TASWM-487: вид обрыва — из того же result-файла и теми же ключами каталога.
-    exitAbort: makeAbortReader(RUN_LOGS_DIR, (runId) => db.runLogKeys(runId), EXECUTOR),
+    exitAbort: makeAbortReader(RUN_LOGS_DIR, (runId) => db.runLogKeys(runId), (run) => executorForRun(run, lastSwarmModels, process.env, runModelRefPin.get(run.id) ?? null)),
     // TASWM-487: жива ли работа на origin. Тот же фолбэк repo, что у removeWorktree выше:
     // у прогона в основном репозитории демона run.repo пуст.
     branchOnOrigin: (repo, branch) => remoteBranchExists(repo || opts.repo, branch),
@@ -23414,7 +23575,8 @@ async function runDaemon(opts) {
     lastCommitMs: (p) => worktreeLastCommitMs(p),
     // mtime транскрипта claude-сессии как liveness (TASWM-136): точнее коммитов — обновляется
     // на каждое действие дрона (Edit/Read/tool-use), не только на коммит.
-    transcriptMtimeMs: (p) => EXECUTOR.session.mtimeMs(p),
+    // TASWM-592: где транскрипт лежит, знает харнесс ПРОГОНА — резолвим исполнителя по модели.
+    transcriptMtimeMs: (run) => executorForRun(run, lastSwarmModels, process.env, runModelRefPin.get(run.id) ?? null).session.mtimeMs(run.worktree_path ?? ""),
     // ВЕС ЗАДАЧИ (TASWM-535): чем демон проверяет, что заявивший о тяжести дрон РЕАЛЬНО
     // продвигается (коммиты от базы прогона), и от какого потолка считать ему добавку —
     // от той же живой настройки роя, что уезжает харнессу на спавне.
@@ -23533,7 +23695,8 @@ async function runDaemon(opts) {
     // TASWM-514: с этого момента считаем попытки спавна — счётчик живёт ровно одну жизнь
     // процесса демона и рестарт не переживает (см. preStartAttempts).
     startedAt: Date.now(),
-    hasTranscript: executorHasSession,
+    // TASWM-592: run-aware — где лежит сессия, знает харнесс ПРОГОНА.
+    hasTranscript: (run) => !!run.worktree_path && executorForRun(run, lastSwarmModels, process.env, runModelRefPin.get(run.id) ?? null).session.exists(run.worktree_path),
     // CI-осведомлённость review-PR (TASWM-102): реальный `gh pr checks`/`gh run view --log-failed`
     // (gh.ts) — решение (будить ли дрона) и гейты живут в tickOnce/handleCiRed. failureSummary
     // строится над failing/failingRunIds ИЗ checks — без повторного `gh pr checks`.
@@ -23544,7 +23707,22 @@ async function runDaemon(opts) {
     // Штормовой режим (TASWM-23): health-probe на отбой (реальный claude) + внешний
     // сигнал SWARM_STORM_URL (2-й слой, если задан). Логика/пороги — в manageStorm/storm.ts.
     storm: {
-      probe: () => executorHealthy({ executor: EXECUTOR, timeoutMs: resolveStormConfig().probeTimeoutMs }),
+      // TASWM-592: проба бьёт в исполнителя, на котором работают дроны (реестр провайдеров
+      // по ссылке модели роя), — иначе рой на другом харнессе штормовал бы по вине claude
+      // и наоборот.
+      probe: () => {
+        try {
+          const ref = resolveRunModelRef({ kind: "drone" }, lastSwarmModels);
+          return executorHealthy({
+            executor: executorForRun({ kind: "drone" }, lastSwarmModels),
+            timeoutMs: resolveStormConfig().probeTimeoutMs,
+            env: providerEnv(ref.providerId, ref.model)
+          });
+        } catch (e) {
+          console.error(`[storm] \u043F\u0440\u043E\u0431\u0430: \u043D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C \u0432\u044B\u0431\u0440\u0430\u0442\u044C \u0438\u0441\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044F/env \u043F\u043E \u043C\u043E\u0434\u0435\u043B\u0438 \u0440\u043E\u044F \u2014 ${String(e)}`);
+          return Promise.resolve({ ok: false, reason: "exec", resetHint: null });
+        }
+      },
       // externalDown опционален (exactOptionalPropertyTypes): ключ есть только при
       // заданном SWARM_STORM_URL, иначе опускаем — не передаём undefined.
       ...SWARM_STORM_URL ? { externalDown: () => fetchExternalStorm(SWARM_STORM_URL) } : {}
@@ -23711,7 +23889,7 @@ async function runDaemon(opts) {
       wakeRun: async (slug) => {
         const run = db.activeRunForSlug(slug);
         if (!run) return null;
-        return wakeRun({ db, isAlive: pidAlive, respawn: deps.respawn, narrate: narrator.narrate }, run.id);
+        return wakeRun({ db, isAlive: pidAlive, respawn: deps.respawn, narrate: narrator.narrate, ...deps.hasTranscript ? { hasTranscript: deps.hasTranscript } : {} }, run.id);
       },
       update: async (onStep) => {
         const pm = detectGlobalPm(process.argv[1]);
@@ -23861,7 +24039,7 @@ async function runDaemon(opts) {
     // Побудка прогона по id (TASWM-240): вход для `swarm wake <id>` — тот же respawn с
     // полными deps демона (getTask/verifyMode/реестр репо), что и авто-оживление, и по
     // зеркалу демона, а не по короткоживущему стору CLI.
-    wake: (runId) => wakeRun({ db, isAlive: pidAlive, respawn: deps.respawn, narrate: narrator.narrate }, runId),
+    wake: (runId) => wakeRun({ db, isAlive: pidAlive, respawn: deps.respawn, narrate: narrator.narrate, ...deps.hasTranscript ? { hasTranscript: deps.hasTranscript } : {} }, runId),
     replay: (qid, chosen) => replayDecision(
       {
         db,