split Swap's Ok-tail into a first-class PostSwap DAG node (#2390)

hive-c0re/src/job_queue/model.rs

@@ -57,9 +57,19 @@ pub enum NodeKind {
     Prebuild { relock: bool },
     /// `nixos-container update` profile-swap (requires the container
     /// stopped). Re-applies nspawn flags + resource limits first —
-    /// rebuild is the reconcile verb — and carries the post-rebuild
-    /// bookkeeping tail (rev marker, forge/matrix sync, kick, rescan).
+    /// rebuild is the reconcile verb. The post-rebuild bookkeeping tail
+    /// lives in the sibling `PostSwap` node.
     Swap,
+    /// The post-`Swap` bookkeeping tail as a first-class node: rev marker,
+    /// forge + matrix sync, manager kick, container rescan, meta-inputs
+    /// snapshot. Split out of `Swap` for dashboard visibility + retry
+    /// granularity. Deps `AfterOk(Swap)`, so it runs only when the profile
+    /// swap succeeded; the tail `Reconcile` deps `AfterAny(PostSwap)`, so on
+    /// swap failure this node is cancel-cascaded (a terminal state) and
+    /// recovery still runs. Store/forge/matrix work only — no nix build, so
+    /// build-slot-exempt; the agent lease taken at `Swap` is held across the
+    /// whole chain until `Reconcile` settles, so it's not re-declared here.
+    PostSwap,
     /// First-spawn pre-create provisioning: proposed/applied repos,
     /// state subvolume, and meta registration (`sync_agents`). Runs
     /// ahead of `Create` so the `nixos-container create --flake
@@ -137,6 +147,7 @@ impl NodeKind {
         match self {
             NodeKind::Prebuild { .. } => "prebuild",
             NodeKind::Swap => "swap",
+            NodeKind::PostSwap => "post_swap",
             NodeKind::Provision => "provision",
             NodeKind::Create => "create",
             NodeKind::MetaLock { .. } => "meta_lock",