@@ -44,6 +44,16 @@ for attempt in 1 2 3 4; do
     exit 0
   fi
 
+  # An earlier connection warning may have recovered before a different download
+  # failed permanently. Be conservative when both appear: a known permanent error
+  # must not acquire retries just because the same attempt also logged a timeout.
+  # Do not inspect only a fixed tail: Maven/SBT can print long failure summaries.
+  if grep -Eiq \
+    '(status code:|response code:|HTTP/[0-9.]+|HTTP error|returned error:)[[:space:]]*(400|401|403|404|405|410|422)([^0-9]|$)|Could not find artifact|not found: value|COMPILATION ERROR|There are test failures' \
+    "$download_log"; then
+    exit "$status"
+  fi
+
   # Signals (including cancellation and OOM kills) are not download failures.
   if [ "$status" -ge 128 ] || ! grep -Eiq \
     '(status code:|response code:|HTTP/[0-9.]+|HTTP error|returned error:)[[:space:]]*(429|500|502|503|504)([^0-9]|$)|Connection reset|Connection timed out|ConnectTimeoutException|SocketTimeoutException|Read timed out|Temporary failure in name resolution|Network is unreachable|Remote host terminated the handshake' \
 
@@ -178,6 +178,32 @@ def test_signal_exit_does_not_retry_even_after_network_message(self):
                 self.assertEqual(len(calls), 1)
                 self.assertEqual(delays, [])
 
+    def test_permanent_failure_overrides_earlier_transient_warning(self):
+        for message in (
+            "status code: 404, reason phrase: Not Found (404)",
+            "Server returned HTTP response code: 403 for URL: https://repo.invalid/a.jar",
+            "curl: (22) The requested URL returned error: 401",
+            "[error] Could not find artifact missing:dependency:jar:1.0",
+            "[error] not found: value invalidBuildSetting",
+            "[ERROR] COMPILATION ERROR",
+            "[ERROR] There are test failures.",
+        ):
+            with self.subTest(message=message):
+                self.calls.unlink(missing_ok=True)
+                self.delays.unlink(missing_ok=True)
+                output = f"[warn] Connection reset; recovered on retry\n{message}"
+                result, calls, delays = self.run_download(output, failures=10, status=42)
+                self.assertEqual(result.returncode, 42)
+                self.assertEqual(len(calls), 1)
+                self.assertEqual(delays, [])
+
+    def test_permanent_failure_is_not_hidden_by_long_summary(self):
+        output = "Connection reset\nstatus code: 404\n" + "resolution details\n" * 1000
+        result, calls, delays = self.run_download(output, failures=10, status=42)
+        self.assertEqual(result.returncode, 42)
+        self.assertEqual(len(calls), 1)
+        self.assertEqual(delays, [])
+
     def test_missing_command_fails(self):
         result = subprocess.run(["bash", str(RETRY)], capture_output=True, text=True)
         self.assertEqual(result.returncode, 2)