@cleocode/core 2026.8.2 → 2026.8.3

package/dist/selfimprove/fix-gen.js

@@ -10178,6 +10178,27 @@ var init_operations_registry = __esm({
             type: "boolean",
             required: false,
             description: "Commit plan file before dispatching"
+          },
+          // T12089: the plan SCOPE. The workflow regenerates the plan when no
+          // committed plan is supplied, and `cleo release plan` requires
+          // `--saga | --epic | --tasks` — so without one of these the dispatched
+          // run dies at "Prepare bump-PR" after a fully green preflight.
+          //
+          // A param absent from this registry is STRIPPED before the domain handler
+          // sees it, silently. `--tasks` was accepted by the CLI, forwarded by the
+          // handler and by `releaseOpen`, and still arrived empty at the workflow
+          // because this declaration was the fourth hop in the chain.
+          {
+            name: "epic",
+            type: "string",
+            required: false,
+            description: "Epic task ID forwarded as the plan scope (e.g. T9999)"
+          },
+          {
+            name: "tasks",
+            type: "string",
+            required: false,
+            description: "Comma-separated task IDs forwarded as the plan scope for a task-scoped release"
           }
         ]
       },
@@ -15808,6 +15829,13 @@ var init_caamp_markers = __esm({
   }
 });
 
+// packages/contracts/src/collection-keys.ts
+var init_collection_keys = __esm({
+  "packages/contracts/src/collection-keys.ts"() {
+    "use strict";
+  }
+});
+
 // packages/contracts/src/index.ts
 var init_src = __esm({
   "packages/contracts/src/index.ts"() {
@@ -15876,6 +15904,7 @@ var init_src = __esm({
     init_service_provider();
     init_workgraph();
     init_caamp_markers();
+    init_collection_keys();
   }
 });
 
@@ -17885,7 +17914,7 @@ var init_sql = __esm({
         return new SQL([new StringChunk(str)]);
       }
       _sql.raw = raw;
-      function join34(chunks, separator) {
+      function join35(chunks, separator) {
         const result = [];
         for (const [i, chunk] of chunks.entries()) {
           if (i > 0 && separator !== void 0) result.push(separator);
@@ -17893,7 +17922,7 @@ var init_sql = __esm({
         }
         return new SQL(result);
       }
-      _sql.join = join34;
+      _sql.join = join35;
       function identifier(value) {
         return new Name(value);
       }
@@ -19862,7 +19891,7 @@ var init_select = __esm({
           const baseTableName = this.tableName;
           const tableName = getTableLikeName(table);
           for (const item of extractUsedTable(table)) this.usedTables.add(item);
-          if (typeof tableName === "string" && this.config.joins?.some((join34) => join34.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
+          if (typeof tableName === "string" && this.config.joins?.some((join35) => join35.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
           if (!this.isPartialSelect) {
             if (Object.keys(this.joinsNotNullableMap).length === 1 && typeof baseTableName === "string") this.config.fields = { [baseTableName]: this.config.fields };
             if (typeof tableName === "string" && !is(table, SQL)) {
@@ -21459,7 +21488,7 @@ var init_dialect = __esm({
           if (!joins2) return;
           const withEntries = Object.entries(joins2).filter(([_, v]) => v);
           if (!withEntries.length) return;
-          return sql.join(withEntries.map(([k, join34]) => {
+          return sql.join(withEntries.map(([k, join35]) => {
             const relation = tableConfig.relations[k];
             const isSingle2 = is(relation, One);
             const targetTable = aliasedTable(relation.targetTable, `d${currentDepth + 1}`);
@@ -21470,7 +21499,7 @@ var init_dialect = __esm({
               table: targetTable,
               mode: isSingle2 ? "first" : "many",
               schema,
-              queryConfig: join34,
+              queryConfig: join35,
               tableConfig: schema[relation.targetTableName],
               relationWhere: filter2,
               isNested: true,
@@ -21484,7 +21513,7 @@ var init_dialect = __esm({
               key: k,
               selection: innerQuery.selection,
               isArray: !isSingle2,
-              isOptional: (relation.optional ?? false) || join34 !== true && !!join34.where
+              isOptional: (relation.optional ?? false) || join35 !== true && !!join35.where
             });
             const jsonColumns = sql.join(innerQuery.selection.map((s) => {
               return sql`${sql.raw(this.escapeString(s.key))}, ${s.selection ? sql`${jsonb}(${sql.identifier(s.key)})` : sql.identifier(s.key)}`;
@@ -21906,7 +21935,7 @@ var init_update = __esm({
       createJoin(joinType) {
         return ((table, on) => {
           const tableName = getTableLikeName(table);
-          if (typeof tableName === "string" && this.config.joins.some((join34) => join34.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
+          if (typeof tableName === "string" && this.config.joins.some((join35) => join35.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
           if (typeof on === "function") {
             const from = this.config.from ? is(table, SQLiteTable) ? table[Table.Symbol.Columns] : is(table, Subquery) ? table._.selectedFields : is(table, SQLiteViewBase) ? table[ViewBaseConfig].selectedFields : void 0 : void 0;
             on = on(new Proxy(this.config.table[Table.Symbol.Columns], new SelectionProxyHandler({
@@ -24684,7 +24713,9 @@ function computeClassBudget(cls, sample, opts = {}) {
       return Math.max(1, cpus - 2);
     case "test-run":
     case "scoped-build": {
-      const base = Math.max(1, Math.floor(cpus / 4));
+      const estRamBytes = (opts.testRunEstRamMb ?? 24576) * MB;
+      const byMem = Math.floor((availBytes - headroomBytes) / estRamBytes);
+      const base = clamp2(1, byMem, Math.max(1, Math.floor(cpus / 4)));
       if (some > floor) return 1;
       if (some > hold) return Math.max(1, Math.floor(base / 2));
       return base;
@@ -25177,6 +25208,11 @@ var init_registry = __esm({
        * });
        * ```
        */
+      // T12071: keyed on the EVENT so the payload shape is checked against
+      // `HookEventPayloadMap`. The previous `<T extends HookPayload>` form inferred
+      // T from the argument, relating the event and the payload not at all — which
+      // is how `PostToolUse` came to be dispatched with `newStatus` instead of
+      // `status` and filled 29% of BRAIN with "status: undefined".
       async dispatch(event, projectRoot, payload) {
         if (!this.config.enabled) return;
         const resolvedEvent = this.resolveEvent(event);
@@ -28458,8 +28494,8 @@ function reuseValid(key, store) {
   return row;
 }
 async function bindAgainst(key, store, establish) {
-  const cached2 = reuseValid(key, store);
-  if (cached2) return cached2;
+  const cached3 = reuseValid(key, store);
+  if (cached3) return cached3;
   const pending = _inflight.get(key);
   if (pending) {
     const row = await pending;
@@ -33071,6 +33107,76 @@ var init_credential_pool = __esm({
   }
 });
 
+// packages/core/src/llm/local-inference-probe.ts
+function extractModels(body) {
+  if (body === null || typeof body !== "object") return [];
+  const rec = body;
+  if (Array.isArray(rec.models)) {
+    return rec.models.map(
+      (m) => m !== null && typeof m === "object" ? m.name ?? m.model : void 0
+    ).filter((n) => typeof n === "string");
+  }
+  if (Array.isArray(rec.data)) {
+    return rec.data.map((m) => m !== null && typeof m === "object" ? m.id : void 0).filter((n) => typeof n === "string");
+  }
+  return [];
+}
+async function detectLocalInference(opts = {}) {
+  if (process.env["CLEO_DISABLE_LOCAL_INFERENCE"]?.trim()) return null;
+  if (!opts.force && cached !== void 0) return cached;
+  for (const endpoint of LOCAL_ENDPOINTS) {
+    try {
+      const response = await fetch(endpoint.tagsUrl, {
+        signal: AbortSignal.timeout(PROBE_TIMEOUT_MS)
+      });
+      if (!response.ok) continue;
+      const models = extractModels(await response.json());
+      if (models.length === 0) continue;
+      cached = {
+        name: endpoint.name,
+        baseUrl: endpoint.baseUrl,
+        openAiBaseUrl: endpoint.openAiBaseUrl,
+        models
+      };
+      return cached;
+    } catch {
+    }
+  }
+  cached = null;
+  return cached;
+}
+async function listOllamaModels(baseUrl) {
+  try {
+    const url2 = `${baseUrl.replace(/\/+$/, "")}/api/tags`;
+    const response = await fetch(url2, { signal: AbortSignal.timeout(PROBE_TIMEOUT_MS) });
+    if (!response.ok) return [];
+    return extractModels(await response.json());
+  } catch {
+    return [];
+  }
+}
+var LOCAL_ENDPOINTS, PROBE_TIMEOUT_MS, cached;
+var init_local_inference_probe = __esm({
+  "packages/core/src/llm/local-inference-probe.ts"() {
+    "use strict";
+    LOCAL_ENDPOINTS = [
+      {
+        name: "ollama",
+        tagsUrl: "http://127.0.0.1:11434/api/tags",
+        baseUrl: "http://127.0.0.1:11434",
+        openAiBaseUrl: "http://127.0.0.1:11434/v1"
+      },
+      {
+        name: "lm-studio",
+        tagsUrl: "http://127.0.0.1:1234/v1/models",
+        baseUrl: "http://127.0.0.1:1234",
+        openAiBaseUrl: "http://127.0.0.1:1234/v1"
+      }
+    ];
+    PROBE_TIMEOUT_MS = 300;
+  }
+});
+
 // packages/core/src/llm/catalog-cache.ts
 import {
   existsSync as existsSync27,
@@ -33194,9 +33300,9 @@ var init_catalog_model_resolver = __esm({
 // packages/core/src/llm/cross-provider-selector.ts
 import { totalmem as totalmem2 } from "node:os";
 async function probeOllamaAlive(baseUrl) {
-  const cached2 = _ollamaProbeCache.get(baseUrl);
-  if (cached2 && Date.now() - cached2.checkedAt < OLLAMA_PROBE_TTL_MS) {
-    return cached2.alive;
+  const cached3 = _ollamaProbeCache.get(baseUrl);
+  if (cached3 && Date.now() - cached3.checkedAt < OLLAMA_PROBE_TTL_MS) {
+    return cached3.alive;
   }
   let alive = false;
   try {
@@ -33238,6 +33344,16 @@ function isProvisioned(provider) {
   const cred = resolveCredentials(provider);
   return (cred.apiKey?.trim().length ?? 0) > 0;
 }
+function reconcileOllamaModel(preferred, installed) {
+  if (installed.length === 0) return preferred;
+  if (installed.includes(preferred)) return preferred;
+  const family = preferred.split(":")[0];
+  if (family !== void 0 && family !== "") {
+    const sameFamily = installed.find((m) => m.split(":")[0] === family);
+    if (sameFamily !== void 0) return sameFamily;
+  }
+  return installed[0] ?? preferred;
+}
 function scoreProvider(provider, providerTier, taskTier, ollamaAlive, costInputPerMillion) {
   let score = TIER_BASE[providerTier];
   if (taskTier === "frontier" && providerTier === "frontier") {
@@ -33270,6 +33386,7 @@ function roleTierFor(role) {
 }
 async function selectBestProvisioned(role, opts) {
   const taskTier = roleTierFor(role);
+  const excluded = new Set(opts.exclude ?? []);
   for (const id of BUILTIN_PROVIDER_IDS) {
     const creds = await listCredentials(id);
     const hasExpiredOAuth = creds.some(
@@ -33294,10 +33411,23 @@ async function selectBestProvisioned(role, opts) {
   }
   const provisionedIds = [];
   for (const id of BUILTIN_PROVIDER_IDS) {
+    if (excluded.has(id)) continue;
     if (isProvisioned(id)) {
       provisionedIds.push(id);
     }
   }
+  let localModels = [];
+  if (!excluded.has("ollama") && !provisionedIds.includes("ollama")) {
+    const local = await detectLocalInference();
+    if (local !== null && local.name === "ollama") {
+      provisionedIds.push("ollama");
+      localModels = local.models;
+      logger3.debug(
+        { baseUrl: local.baseUrl, models: local.models },
+        "cross-provider-selector: unlisted ollama daemon is live \u2014 admitting as provisioned"
+      );
+    }
+  }
   if (provisionedIds.length === 0) {
     logger3.warn(
       {
@@ -33314,11 +33444,12 @@ async function selectBestProvisioned(role, opts) {
   const { resolveProviderDefaultModel: resolveProviderDefaultModel2, catalogKeyForProvider: catalogKeyForProvider2 } = await Promise.resolve().then(() => (init_catalog_model_resolver(), catalog_model_resolver_exports));
   const { pickCredentialForProvider: pickCredentialForProvider2 } = await Promise.resolve().then(() => (init_credentials_store(), credentials_store_exports));
   const ollamaProvisioned = provisionedIds.includes("ollama");
-  let ollamaAlive = false;
-  if (ollamaProvisioned) {
+  let ollamaAlive = localModels.length > 0;
+  if (ollamaProvisioned && !ollamaAlive) {
     const profile = await getProviderProfile2("ollama");
     const ollamaBase = profile?.baseUrl ?? "http://localhost:11434";
     ollamaAlive = await probeOllamaAlive(ollamaBase);
+    if (ollamaAlive) localModels = await listOllamaModels(ollamaBase);
   }
   const scored = [];
   for (const id of provisionedIds) {
@@ -33348,6 +33479,7 @@ async function selectBestProvisioned(role, opts) {
     } else {
       model = ollamaDefaultModelForTier(winner.tier, ramBytes);
     }
+    model = reconcileOllamaModel(model, localModels);
     const catalogKey = catalogKeyForProvider2(winner.id);
     const catalogModel = resolveProviderDefaultModel2(catalogKey);
     if (!catalogModel?.startsWith("gemma4")) {
@@ -33391,6 +33523,7 @@ var init_cross_provider_selector = __esm({
     init_credential_pool();
     init_credentials2();
     init_credentials_store();
+    init_local_inference_probe();
     logger3 = getLogger("llm-cross-provider-selector");
     BUILTIN_PROVIDER_IDS = [
       "anthropic",
@@ -33602,6 +33735,16 @@ async function selectProviderModel(llm, role, systemKey, profileOverride, projec
     source: "implicit-fallback"
   };
 }
+async function applyProviderExclusions(selected, role, projectRoot, exclude) {
+  if (exclude === void 0 || exclude.length === 0) return selected;
+  if (!exclude.includes(selected.provider)) return selected;
+  try {
+    const substitute = await selectBestProvisioned(role, { projectRoot, exclude });
+    if (substitute !== null) return substitute;
+  } catch {
+  }
+  return selected;
+}
 async function resolveCredentialForRole(provider, credentialLabel, projectRoot) {
   try {
     await new CredentialPool(provider).refreshExpiredOAuth();
@@ -33616,7 +33759,9 @@ async function resolveCredentialForRole(provider, credentialLabel, projectRoot)
           provider,
           apiKey: stored.accessToken,
           source: "cred-file",
-          authType: wireAuthType
+          authType: wireAuthType,
+          // T12081: preserve the stored endpoint (Ollama/LM Studio/vLLM/…).
+          baseUrl: stored.baseUrl ?? null
         },
         usedLabel: stored.label
       };
@@ -33632,7 +33777,9 @@ async function resolveCredentialForRole(provider, credentialLabel, projectRoot)
           provider,
           apiKey: picked.accessToken,
           source: "cred-file",
-          authType: wireAuthType
+          authType: wireAuthType,
+          // T12081: preserve the stored endpoint (Ollama/LM Studio/vLLM/…).
+          baseUrl: picked.baseUrl ?? null
         },
         usedLabel: picked.label
       };
@@ -33642,6 +33789,23 @@ async function resolveCredentialForRole(provider, credentialLabel, projectRoot)
   if (cred.apiKey) {
     return { credential: cred, usedLabel: void 0 };
   }
+  if (provider === "ollama") {
+    const local = await detectLocalInference();
+    if (local !== null && local.name === "ollama") {
+      return {
+        credential: {
+          provider,
+          apiKey: LOCAL_PLACEHOLDER_TOKEN,
+          source: "local-daemon",
+          authType: "api_key",
+          // ROOT url, not the `/v1` form: `deriveApiWire('ollama')` selects the
+          // NATIVE transport, which appends `/api/chat` itself.
+          baseUrl: local.baseUrl
+        },
+        usedLabel: void 0
+      };
+    }
+  }
   return { credential: null, usedLabel: void 0 };
 }
 async function resolveLLMForRole(role, opts) {
@@ -33654,13 +33818,19 @@ async function resolveLLMForRole(role, opts) {
     config2 = void 0;
   }
   const llmBlock = readLlmBlock(config2);
-  const { provider, model, credentialLabel, source } = await selectProviderModel(
+  const selected = await selectProviderModel(
     llmBlock,
     role,
     opts?.systemKey,
     opts?.profileOverride,
     projectRoot
   );
+  const { provider, model, credentialLabel, source } = await applyProviderExclusions(
+    selected,
+    role,
+    projectRoot,
+    opts?.excludeProviders
+  );
   const { credential, usedLabel } = await resolveCredentialForRole(
     provider,
     credentialLabel,
@@ -33686,7 +33856,12 @@ async function resolveLLMForRole(role, opts) {
     credentialMetadata = {
       provider: credential.provider,
       source: credential.source,
-      authType: wireAuthType
+      authType: wireAuthType,
+      // T12081: carry the credential's OWN endpoint. Without it a consumer
+      // building a transport cannot tell that this credential targets a local
+      // or proxied host, and falls back to the provider's public API — which
+      // rejected every Ollama / LM Studio / vLLM / OpenRouter credential 401.
+      baseUrl: credential.baseUrl ?? null
     };
     sealedCredential = makeSealedCredential({
       provider: credential.provider,
@@ -33714,7 +33889,7 @@ async function resolveLLMForRole(role, opts) {
     authType
   };
 }
-var IMPLICIT_FALLBACK_PROVIDER;
+var IMPLICIT_FALLBACK_PROVIDER, LOCAL_PLACEHOLDER_TOKEN;
 var init_role_resolver = __esm({
   "packages/core/src/llm/role-resolver.ts"() {
     "use strict";
@@ -33725,10 +33900,12 @@ var init_role_resolver = __esm({
     init_credentials_store();
     init_cross_provider_selector();
     init_fallback_model();
+    init_local_inference_probe();
     init_sealed_credential();
     init_system_of_use_registry();
     init_anthropic_client_factory();
     IMPLICIT_FALLBACK_PROVIDER = "anthropic";
+    LOCAL_PLACEHOLDER_TOKEN = "local";
   }
 });
 
@@ -33983,7 +34160,9 @@ async function resolveLLMForSystem(system, opts) {
       systemKey,
       // T11759: pin a named profile (e.g. a `.cantbook` stage's `profile:`) as
       // the highest-priority resolution tier. Absent/incomplete → falls through.
-      ...opts?.profile !== void 0 ? { profileOverride: opts.profile } : {}
+      ...opts?.profile !== void 0 ? { profileOverride: opts.profile } : {},
+      // T12084: carry exclusions through to the provisioning-aware tier.
+      ...opts?.excludeProviders !== void 0 ? { excludeProviders: opts.excludeProviders } : {}
     });
   } catch (err) {
     logger6.warn(
@@ -36836,9 +37015,9 @@ var init_chat_completions = __esm({
           outputTokens: response.usage?.completion_tokens ?? 0
         };
         const promptDetails = response.usage?.["prompt_tokens_details"];
-        const cached2 = promptDetails?.["cached_tokens"];
-        if (typeof cached2 === "number" && cached2 > 0) {
-          usage.cachedTokens = cached2;
+        const cached3 = promptDetails?.["cached_tokens"];
+        if (typeof cached3 === "number" && cached3 > 0) {
+          usage.cachedTokens = cached3;
         }
         return {
           id: response.id ?? `chat-${Date.now().toString(36)}`,
@@ -37080,9 +37259,9 @@ function normalizeUsage(usage) {
   const outputTokens = usage["output_tokens"] ?? 0;
   const normalized = { inputTokens, outputTokens };
   const details = usage["input_tokens_details"];
-  const cached2 = details?.["cached_tokens"];
-  if (typeof cached2 === "number" && cached2 > 0) {
-    normalized.cachedTokens = cached2;
+  const cached3 = details?.["cached_tokens"];
+  if (typeof cached3 === "number" && cached3 > 0) {
+    normalized.cachedTokens = cached3;
   }
   return normalized;
 }
@@ -38804,7 +38983,7 @@ __export(util_exports, {
   assignProp: () => assignProp,
   base64ToUint8Array: () => base64ToUint8Array,
   base64urlToUint8Array: () => base64urlToUint8Array,
-  cached: () => cached,
+  cached: () => cached2,
   captureStackTrace: () => captureStackTrace,
   cleanEnum: () => cleanEnum,
   cleanRegex: () => cleanRegex,
@@ -38880,7 +39059,7 @@ function jsonStringifyReplacer(_, value) {
     return value.toString();
   return value;
 }
-function cached(getter) {
+function cached2(getter) {
   const set2 = false;
   return {
     get value() {
@@ -39396,7 +39575,7 @@ var init_util = __esm({
     EVALUATING = /* @__PURE__ */ Symbol("evaluating");
     captureStackTrace = "captureStackTrace" in Error ? Error.captureStackTrace : (..._args) => {
     };
-    allowsEval = cached(() => {
+    allowsEval = cached2(() => {
       if (typeof navigator !== "undefined" && navigator?.userAgent?.includes("Cloudflare")) {
         return false;
       }
@@ -41463,7 +41642,7 @@ var init_schemas = __esm({
           }
         });
       }
-      const _normalized = cached(() => normalizeDef(def2));
+      const _normalized = cached2(() => normalizeDef(def2));
       defineLazy(inst._zod, "propValues", () => {
         const shape = def2.shape;
         const propValues = {};
@@ -41514,7 +41693,7 @@ var init_schemas = __esm({
     $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def2) => {
       $ZodObject.init(inst, def2);
       const superParse = inst._zod.parse;
-      const _normalized = cached(() => normalizeDef(def2));
+      const _normalized = cached2(() => normalizeDef(def2));
       const generateFastpass = (shape) => {
         const doc = new Doc(["shape", "payload", "ctx"]);
         const normalized = _normalized.value;
@@ -41706,7 +41885,7 @@ var init_schemas = __esm({
         }
         return propValues;
       });
-      const disc = cached(() => {
+      const disc = cached2(() => {
         const opts = def2.options;
         const map2 = /* @__PURE__ */ new Map();
         for (const o of opts) {
@@ -66256,8 +66435,8 @@ var init_model_runner = __esm({
 });
 
 // packages/core/src/selfimprove/fix-gen.ts
-import { writeFileSync as writeFileSync11 } from "node:fs";
-import { resolve as resolvePath2 } from "node:path";
+import { mkdirSync as mkdirSync12, writeFileSync as writeFileSync11 } from "node:fs";
+import { dirname as dirname13, join as join34, resolve as resolvePath2 } from "node:path";
 import { cwd as processCwd } from "node:process";
 
 // packages/utils/src/redact.ts
@@ -66519,7 +66698,7 @@ var FIXGEN_SYSTEM = "task-executor";
 var UNIFIED_DIFF_MARKERS = ["diff --git ", "--- ", "+++ ", "@@ "];
 function fixPatchPath(scenario, cwd) {
   const safeScenario = scenario.replace(/[^a-z0-9-]/gi, "-");
-  return resolvePath2(cwd ?? processCwd(), `selfimprove-${safeScenario}.patch`);
+  return resolvePath2(cwd ?? processCwd(), join34(".cleo", "selfimprove", `${safeScenario}.patch`));
 }
 function looksLikeUnifiedDiff(text2) {
   if (text2.trim().length === 0) return false;
@@ -66604,6 +66783,7 @@ async function generateFixPatch(opts) {
   }
   const diff = output.diff.endsWith("\n") ? output.diff : `${output.diff}
 `;
+  mkdirSync12(dirname13(patchPath), { recursive: true });
   writeFileSync11(patchPath, diff, "utf8");
   const bytes = Buffer.byteLength(diff, "utf8");
   logger8.info(
@@ -66612,6 +66792,7 @@ async function generateFixPatch(opts) {
   );
   return { kind: "written", patchPath, bytes, model: output.model };
 }
+var MAX_FIXGEN_FAILOVERS = 2;
 function createLlmFixGenerator(opts = {}) {
   return {
     async propose(request) {
@@ -66619,49 +66800,68 @@ function createLlmFixGenerator(opts = {}) {
       const { resolveLLMForSystem: resolveLLMForSystem2 } = await Promise.resolve().then(() => (init_system_resolver2(), system_resolver_exports));
       const { ModelRunner: ModelRunner2 } = await Promise.resolve().then(() => (init_model_runner(), model_runner_exports));
       const projectRoot = opts.projectRoot ?? request.repoContext.projectRoot;
-      const resolved = await resolveLLMForSystem2(FIXGEN_SYSTEM, { projectRoot });
-      if (!resolved.sealedCredential && resolved.authType !== "aws_sdk") {
-        return { kind: "none", reason: "no-credential-resolved" };
-      }
-      const apiKey = resolved.sealedCredential ? (await resolved.sealedCredential.fetch()).value : null;
-      const built = await ModelRunner2.build({
-        provider: resolved.provider,
-        model: resolved.model,
-        credential: resolved.credential ? {
-          provider: resolved.credential.provider,
-          apiKey,
-          source: resolved.credential.source,
-          authType: resolved.credential.authType
-        } : null,
-        source: resolved.source,
-        ...resolved.credentialLabel !== void 0 ? { credentialLabel: resolved.credentialLabel } : {},
-        apiMode: resolved.apiMode,
-        baseUrl: resolved.baseUrl,
-        authType: resolved.authType,
-        ...resolved.capabilities !== void 0 ? { capabilities: resolved.capabilities } : {}
-      });
-      const { system, user } = buildFixGenPrompt(request);
-      try {
-        const response = await built.session.send([{ role: "user", content: user }], {
-          systemSuffix: system
+      const excludeProviders = [];
+      for (let attempt = 0; attempt <= MAX_FIXGEN_FAILOVERS; attempt++) {
+        const resolved = await resolveLLMForSystem2(FIXGEN_SYSTEM, {
+          projectRoot,
+          excludeProviders: [...excludeProviders]
         });
-        const text2 = (response.content ?? "").trim();
-        if (text2.length === 0 || text2 === "NO_PATCH") {
-          const rawReply = text2.length > 0 ? truncateReply(text2) : void 0;
-          return {
-            kind: "none",
-            reason: "model-declined",
-            ...rawReply !== void 0 ? { rawReply } : {}
-          };
+        if (!resolved.sealedCredential && resolved.authType !== "aws_sdk") {
+          return { kind: "none", reason: "no-credential-resolved" };
+        }
+        if (excludeProviders.includes(resolved.provider)) {
+          return { kind: "none", reason: "llm-call-failed" };
+        }
+        const apiKey = resolved.sealedCredential ? (await resolved.sealedCredential.fetch()).value : null;
+        const built = await ModelRunner2.build({
+          provider: resolved.provider,
+          model: resolved.model,
+          credential: resolved.credential ? {
+            provider: resolved.credential.provider,
+            apiKey,
+            source: resolved.credential.source,
+            authType: resolved.credential.authType
+          } : null,
+          source: resolved.source,
+          ...resolved.credentialLabel !== void 0 ? { credentialLabel: resolved.credentialLabel } : {},
+          apiMode: resolved.apiMode,
+          baseUrl: resolved.baseUrl,
+          authType: resolved.authType,
+          ...resolved.capabilities !== void 0 ? { capabilities: resolved.capabilities } : {}
+        });
+        const { system, user } = buildFixGenPrompt(request);
+        try {
+          const response = await built.session.send([{ role: "user", content: user }], {
+            systemSuffix: system
+          });
+          const text2 = (response.content ?? "").trim();
+          if (text2.length === 0 || text2 === "NO_PATCH") {
+            const rawReply = text2.length > 0 ? truncateReply(text2) : void 0;
+            return {
+              kind: "none",
+              reason: "model-declined",
+              ...rawReply !== void 0 ? { rawReply } : {}
+            };
+          }
+          return { kind: "patch", diff: stripCodeFences(text2), model: response.model };
+        } catch (err) {
+          logger8.warn(
+            {
+              system: FIXGEN_SYSTEM,
+              provider: resolved.provider,
+              model: resolved.model,
+              attempt: attempt + 1,
+              err: err instanceof Error ? err.message : String(err)
+            },
+            attempt < MAX_FIXGEN_FAILOVERS ? "fix-gen LLM call failed \u2014 failing over to another provider" : "fix-gen LLM call failed \u2014 degrading to no-patch"
+          );
+          if (attempt >= MAX_FIXGEN_FAILOVERS) {
+            return { kind: "none", reason: "llm-call-failed" };
+          }
+          excludeProviders.push(resolved.provider);
         }
-        return { kind: "patch", diff: stripCodeFences(text2), model: response.model };
-      } catch (err) {
-        logger8.warn(
-          { system: FIXGEN_SYSTEM, err: err instanceof Error ? err.message : String(err) },
-          "fix-gen LLM call failed \u2014 degrading to no-patch"
-        );
-        return { kind: "none", reason: "llm-call-failed" };
       }
+      return { kind: "none", reason: "llm-call-failed" };
     }
   };
 }