pullfrog 0.1.11 → 0.1.13

package/dist/index.js

@@ -98924,7 +98924,7 @@ var require_fast_content_type_parse = __commonJS({
 });
 
 // main.ts
-import { existsSync as existsSync7, readdirSync } from "node:fs";
+import { existsSync as existsSync7, readdirSync as readdirSync2 } from "node:fs";
 import { readFile as readFile4 } from "node:fs/promises";
 import { join as join19 } from "node:path";
 
@@ -107987,6 +107987,11 @@ var providers = {
         resolve: "opencode/kimi-k2.6",
         openRouterResolve: "openrouter/moonshotai/kimi-k2.6"
       },
+      "minimax-m2.5": {
+        displayName: "MiniMax M2.5",
+        resolve: "opencode/minimax-m2.5",
+        openRouterResolve: "openrouter/minimax/minimax-m2.5"
+      },
       "gpt-5-nano": {
         displayName: "GPT Nano",
         resolve: "opencode/gpt-5-nano",
@@ -108003,7 +108008,9 @@ var providers = {
         displayName: "MiniMax M2.5",
         resolve: "opencode/minimax-m2.5-free",
         envVars: [],
-        isFree: true
+        isFree: true,
+        fallback: "opencode/big-pickle",
+        hidden: true
       }
     }
   }),
@@ -108141,6 +108148,11 @@ var providers = {
         displayName: "Kimi K2",
         resolve: "openrouter/moonshotai/kimi-k2.6",
         openRouterResolve: "openrouter/moonshotai/kimi-k2.6"
+      },
+      "minimax-m2.5": {
+        displayName: "MiniMax M2.5",
+        resolve: "openrouter/minimax/minimax-m2.5",
+        openRouterResolve: "openrouter/minimax/minimax-m2.5"
       }
     }
   })
@@ -108185,6 +108197,11 @@ var modelAliases = Object.entries(providers).flatMap(
     hidden: def.hidden ?? false
   }))
 );
+var defaultProxyAlias = modelAliases.find((a) => a.slug === "moonshotai/kimi-k2");
+if (!defaultProxyAlias?.openRouterResolve) {
+  throw new Error("DEFAULT_PROXY_MODEL: moonshotai/kimi-k2 missing openRouterResolve");
+}
+var DEFAULT_PROXY_MODEL = defaultProxyAlias.openRouterResolve;
 var MAX_FALLBACK_DEPTH = 10;
 function resolveDisplayAlias(slug2) {
   let current = slug2;
@@ -142492,7 +142509,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.11",
+  version: "0.1.13",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -142690,8 +142707,8 @@ function closeBrowserDaemon(toolState) {
 
 // mcp/checkout.ts
 import { createHash as createHash2 } from "node:crypto";
-import { statSync, unlinkSync as unlinkSync2, writeFileSync } from "node:fs";
-import { join as join3 } from "node:path";
+import { statSync, unlinkSync as unlinkSync3, writeFileSync } from "node:fs";
+import { join as join4 } from "node:path";
 
 // utils/diffCoverage.ts
 import { isAbsolute, normalize as normalize2, resolve } from "node:path";
@@ -143363,7 +143380,13 @@ var TRANSIENT_PATTERNS = [
   /HTTP 5\d\d/,
   /returned error: 5\d\d/i,
   /HTTP 429/,
-  /returned error: 429/i
+  /returned error: 429/i,
+  // github installation tokens can 401 for seconds after minting while
+  // replicating (@octokit/auth-app retries the same class). git push
+  // surfaces it as "Invalid username or token", distinct from 403
+  // permission denied — safe to backoff-retry with the same token.
+  /Invalid username or token/,
+  /Authentication failed for 'https:\/\/github\.com\//
 ];
 function classifyPushError(msg) {
   if (CONCURRENT_PUSH_PATTERNS.some((p) => msg.includes(p))) return "concurrent-push";
@@ -144203,6 +144226,183 @@ async function reportReviewNodeId(ctx, params) {
   await patchWorkflowRunFields(ctx, { reviewNodeId: params.nodeId });
 }
 
+// utils/setup.ts
+import { execFileSync as execFileSync3, execSync as execSync2 } from "node:child_process";
+import { mkdtempSync, readdirSync, realpathSync as realpathSync2, unlinkSync as unlinkSync2 } from "node:fs";
+import { tmpdir } from "node:os";
+import { join as join3 } from "node:path";
+function createTempDirectory() {
+  const sharedTempDir = mkdtempSync(join3(tmpdir(), "pullfrog-"));
+  process.env.PULLFROG_TEMP_DIR = sharedTempDir;
+  log.info(`\xBB created temp dir at ${sharedTempDir}`);
+  return sharedTempDir;
+}
+function wipeRunnerLeakSurface() {
+  const runnerTemp = process.env.RUNNER_TEMP;
+  if (!runnerTemp) return;
+  const preserve = /* @__PURE__ */ new Set();
+  for (const envVar of [
+    "GITHUB_OUTPUT",
+    "GITHUB_ENV",
+    "GITHUB_PATH",
+    "GITHUB_STATE",
+    "GITHUB_STEP_SUMMARY"
+  ]) {
+    const path3 = process.env[envVar];
+    if (!path3) continue;
+    try {
+      preserve.add(realpathSync2(path3));
+    } catch {
+      preserve.add(path3);
+    }
+  }
+  const wiped = [];
+  const tryUnlink = (path3) => {
+    let resolved = path3;
+    try {
+      resolved = realpathSync2(path3);
+    } catch {
+    }
+    if (preserve.has(resolved) || preserve.has(path3)) return;
+    try {
+      unlinkSync2(path3);
+      wiped.push(path3);
+    } catch {
+    }
+  };
+  const listDir = (dir) => {
+    try {
+      return readdirSync(dir);
+    } catch {
+      return [];
+    }
+  };
+  const fileCommandsDir = join3(runnerTemp, "_runner_file_commands");
+  for (const entry of listDir(fileCommandsDir)) {
+    tryUnlink(join3(fileCommandsDir, entry));
+  }
+  for (const entry of listDir(runnerTemp)) {
+    if (entry.endsWith(".sh") || /^git-credentials-.*\.config$/.test(entry)) {
+      tryUnlink(join3(runnerTemp, entry));
+    }
+  }
+  if (wiped.length > 0) {
+    log.info(`\xBB wiped ${wiped.length} leak-surface file(s) from $RUNNER_TEMP`);
+    log.debug(`\xBB wiped paths: ${wiped.join(", ")}`);
+  }
+}
+function envScopedToRepo() {
+  const scoped = { ...process.env };
+  for (const key of Object.keys(scoped)) {
+    if (key.startsWith("GIT_")) delete scoped[key];
+  }
+  return scoped;
+}
+function removeIncludeIfEntries(repoDir) {
+  const env2 = envScopedToRepo();
+  let configOutput;
+  try {
+    configOutput = execSync2("git config --local --get-regexp -z ^includeif\\.", {
+      cwd: repoDir,
+      encoding: "utf-8",
+      stdio: "pipe",
+      env: env2
+    });
+  } catch {
+    log.debug("\xBB no includeIf credential entries to remove");
+    return;
+  }
+  const seen = /* @__PURE__ */ new Set();
+  for (const entry of configOutput.split("\0")) {
+    if (!entry) continue;
+    const nl = entry.indexOf("\n");
+    const key = nl === -1 ? entry : entry.slice(0, nl);
+    if (!key || seen.has(key)) continue;
+    seen.add(key);
+    try {
+      execFileSync3("git", ["config", "--local", "--unset-all", key], {
+        cwd: repoDir,
+        stdio: "pipe",
+        env: env2
+      });
+    } catch (error49) {
+      log.debug(
+        `\xBB failed to unset ${key}: ${error49 instanceof Error ? error49.message : String(error49)}`
+      );
+    }
+  }
+  if (seen.size > 0)
+    log.info(
+      `\xBB removed ${seen.size} includeIf credential ${seen.size === 1 ? "entry" : "entries"}`
+    );
+}
+async function setupGit(params) {
+  const repoDir = process.cwd();
+  log.info("\xBB setting up git configuration...");
+  try {
+    let currentEmail = "";
+    try {
+      currentEmail = execSync2("git config user.email", {
+        cwd: repoDir,
+        stdio: "pipe",
+        encoding: "utf-8"
+      }).trim();
+    } catch {
+    }
+    const shouldSetDefaults = !currentEmail || currentEmail === "github-actions[bot]@users.noreply.github.com";
+    if (shouldSetDefaults) {
+      execSync2('git config --local user.email "226033991+pullfrog[bot]@users.noreply.github.com"', {
+        cwd: repoDir,
+        stdio: "pipe"
+      });
+      execSync2('git config --local user.name "pullfrog[bot]"', {
+        cwd: repoDir,
+        stdio: "pipe"
+      });
+      log.debug("\xBB git user configured (using defaults)");
+    } else {
+      log.debug(`\xBB git user already configured (${currentEmail}), skipping`);
+    }
+    if (params.shell === "disabled") {
+      execSync2("git config --local core.hooksPath /dev/null", {
+        cwd: repoDir,
+        stdio: "pipe"
+      });
+      log.debug("\xBB git hooks disabled (shell=disabled)");
+    }
+  } catch (error49) {
+    log.info(`Failed to set git config: ${error49 instanceof Error ? error49.message : String(error49)}`);
+  }
+  try {
+    execSync2("git config --local --unset-all http.https://github.com/.extraheader", {
+      cwd: repoDir,
+      stdio: "pipe"
+    });
+    log.info("\xBB removed existing authentication headers");
+  } catch {
+    log.debug("\xBB no existing authentication headers to remove");
+  }
+  removeIncludeIfEntries(repoDir);
+  const originUrl = `https://github.com/${params.owner}/${params.name}.git`;
+  $("git", ["remote", "set-url", "origin", originUrl], { cwd: repoDir });
+  params.toolState.pushUrl = originUrl;
+  $("git", ["config", "--local", "credential.helper", ""], { cwd: repoDir });
+  params.toolState.initialHead = captureInitialHead(repoDir);
+  log.info("\xBB git authentication configured");
+}
+function captureInitialHead(repoDir) {
+  try {
+    const name = $("git", ["symbolic-ref", "--short", "HEAD"], {
+      cwd: repoDir,
+      log: false
+    }).trim();
+    if (name) return { kind: "branch", name };
+  } catch {
+  }
+  const sha = $("git", ["rev-parse", "HEAD"], { cwd: repoDir, log: false }).trim();
+  return { kind: "detached", sha };
+}
+
 // mcp/checkout.ts
 function formatFilesWithLineNumbers(files) {
   const output = [];
@@ -144377,7 +144577,7 @@ function cleanupStaleGitLocks() {
     }
     if (now - mtimeMs < STALE_LOCK_AGE_MS) continue;
     try {
-      unlinkSync2(relPath);
+      unlinkSync3(relPath);
       log.warning(`\xBB removed stale ${relPath} from prior run`);
     } catch (e) {
       log.debug(
@@ -144536,6 +144736,15 @@ async function checkoutPrBranch(pr, params) {
   return { hookWarning: postCheckoutHook.warning };
 }
 var inFlightCheckouts = /* @__PURE__ */ new Map();
+function headsEqual(a, b) {
+  if (a.kind === "branch" && b.kind === "branch") return a.name === b.name;
+  if (a.kind === "detached" && b.kind === "detached") return a.sha === b.sha;
+  return false;
+}
+function describeHead(h) {
+  if (h.kind === "branch") return `branch \`${h.name}\``;
+  return `detached HEAD \`${h.sha}\``;
+}
 function CheckoutPrTool(ctx) {
   const runCheckout = async (pull_number) => {
     const prResponse = await ctx.octokit.rest.pulls.get({
@@ -144582,7 +144791,7 @@ function CheckoutPrTool(ctx) {
         headSha: ctx.toolState.checkoutSha
       });
       if (incremental) {
-        incrementalDiffPath = join3(
+        incrementalDiffPath = join4(
           tempDir,
           `pr-${pull_number}-${beforeShort}-${headShort}-incremental.diff`
         );
@@ -144596,7 +144805,7 @@ function CheckoutPrTool(ctx) {
     const diffPreview = formatResult.content.split("\n").slice(0, 100).join("\n");
     log.debug(`formatted diff preview (first 100 lines):
 ${diffPreview}`);
-    const diffPath = join3(tempDir, `pr-${pull_number}-${headShort}.diff`);
+    const diffPath = join4(tempDir, `pr-${pull_number}-${headShort}.diff`);
     writeFileSync(diffPath, formatResult.content);
     log.debug(`wrote diff to ${diffPath} (${formatResult.content.length} bytes)`);
     ctx.toolState.diffCoverage = createDiffCoverageState({
@@ -144663,7 +144872,8 @@ ${diffPreview}`);
   };
   return tool({
     name: "checkout_pr",
-    description: "Checkout a pull request branch locally. This fetches the PR branch and sets up push configuration for fork PRs. Returns diffPath pointing to the formatted diff file. Example: `checkout_pr({ pull_number: 1234 })`. Transient fetch timeouts are common \u2014 retry the same call up to a few times before treating the failure as terminal. If the error mentions `.git/shallow.lock: File exists` or `.git/index.lock: File exists`, that's a stale lock from a prior timed-out fetch \u2014 remove it via the shell tool (`rm -f .git/shallow.lock .git/index.lock`) and retry.",
+    timeoutMs: 6e5,
+    description: "Checkout a pull request branch locally. This fetches the PR branch and sets up push configuration for fork PRs. Returns diffPath pointing to the formatted diff file. Example: `checkout_pr({ pull_number: 1234 })`. Large repos can take several minutes \u2014 wait for the call to finish; do not treat a slow response as failure. If you see `MCP error -32001: Request timed out`, retry the same call without touching git lock files first \u2014 that error is a client-side abort. If the retry then reports `.git/shallow.lock: File exists` or `.git/index.lock: File exists`, remove those lock files via the shell tool and retry again.",
     parameters: CheckoutPr,
     execute: execute(async ({ pull_number }) => {
       const inFlight = inFlightCheckouts.get(pull_number);
@@ -144671,13 +144881,23 @@ ${diffPreview}`);
         log.info(`\xBB checkout_pr({pull_number:${pull_number}}) already in flight \u2014 sharing result`);
         return inFlight;
       }
-      const currentBranch = $("git", ["rev-parse", "--abbrev-ref", "HEAD"], { log: false }).trim();
-      if (currentBranch !== `pr-${pull_number}`) {
-        const dirty = $("git", ["status", "--porcelain"], { log: false }).trim();
-        if (dirty) {
-          throw new Error(
-            `cannot checkout PR #${pull_number} while the working tree has uncommitted changes. commit, push, or discard them before switching. dirty paths:
+      const dirty = $("git", ["status", "--porcelain"], { log: false }).trim();
+      if (dirty) {
+        throw new Error(
+          `cannot checkout PR #${pull_number} while the working tree has uncommitted changes. commit (then push if needed), or discard with \`git restore --staged --worktree .\` / \`git clean -fd\` before retrying. this refusal is unconditional \u2014 even re-checking-out the PR you're already on is refused, because shared-working-tree subagents make carry-forward edits unsafe. dirty paths:
 ${dirty}`
+        );
+      }
+      const initialHead = ctx.toolState.initialHead;
+      if (initialHead) {
+        const currentHead = captureInitialHead(process.cwd());
+        const targetBranch = `pr-${pull_number}`;
+        const onTarget = currentHead.kind === "branch" && currentHead.name === targetBranch;
+        const onInitial = headsEqual(currentHead, initialHead);
+        if (!onTarget && !onInitial) {
+          const recoverCmd = initialHead.kind === "branch" ? `git checkout ${initialHead.name}` : `git checkout ${initialHead.sha}`;
+          throw new Error(
+            `cannot checkout PR #${pull_number} from ${describeHead(currentHead)}. the only sanctioned HEAD positions for checkout_pr are the run-entry HEAD (${describeHead(initialHead)}) or the target PR's branch (\`${targetBranch}\`, idempotent re-checkout). recover with \`${recoverCmd}\` first \u2014 if that would carry uncommitted work along, commit or discard it (\`git restore --staged --worktree .\` / \`git clean -fd\`) before switching. routing around this via the \`git\` tool's \`checkout\`/\`switch\` subcommands is not sanctioned: this guard exists to prevent the shared-working-tree cross-PR clobber pattern from the zed-industries/cloud (2026-05-18) incident.`
           );
         }
       }
@@ -144694,7 +144914,7 @@ ${dirty}`
 
 // mcp/checkSuite.ts
 import { mkdirSync, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join4 } from "node:path";
+import { join as join5 } from "node:path";
 var GetCheckSuiteLogs = type({
   check_suite_id: type.number.describe("the id from check_suite.id")
 });
@@ -144790,7 +145010,7 @@ function GetCheckSuiteLogsTool(ctx) {
       if (!tempDir) {
         throw new Error("PULLFROG_TEMP_DIR not set");
       }
-      const logsDir = join4(tempDir, "ci-logs");
+      const logsDir = join5(tempDir, "ci-logs");
       mkdirSync(logsDir, { recursive: true });
       const jobResults = [];
       for (const run of failedRuns) {
@@ -144817,7 +145037,7 @@ function GetCheckSuiteLogsTool(ctx) {
               );
             }
             const logsText = await logsResult.text();
-            const logPath = join4(logsDir, `job-${job.id}.log`);
+            const logPath = join5(logsDir, `job-${job.id}.log`);
             writeFileSync2(logPath, logsText);
             const analysis = analyzeLog(logsText, 80);
             const failedSteps = job.steps?.filter((s) => s.conclusion === "failure").map((s) => `Step ${s.number}: ${s.name}`) ?? [];
@@ -144867,7 +145087,7 @@ function GetCheckSuiteLogsTool(ctx) {
 
 // mcp/commitInfo.ts
 import { writeFileSync as writeFileSync3 } from "node:fs";
-import { join as join5 } from "node:path";
+import { join as join6 } from "node:path";
 var CommitInfo = type({
   sha: type.string.describe("the commit SHA (full or abbreviated) to fetch")
 });
@@ -144891,7 +145111,7 @@ function CommitInfoTool(ctx) {
           "PULLFROG_TEMP_DIR not set - get_commit_info must run in pullfrog action context"
         );
       }
-      const diffFile = join5(tempDir, `commit-${sha.slice(0, 7)}.diff`);
+      const diffFile = join6(tempDir, `commit-${sha.slice(0, 7)}.diff`);
       writeFileSync3(diffFile, formatResult.content);
       log.debug(`wrote commit diff to ${diffFile} (${formatResult.content.length} bytes)`);
       return {
@@ -145349,7 +145569,7 @@ function PullRequestInfoTool(ctx) {
 
 // mcp/reviewComments.ts
 import { writeFileSync as writeFileSync4 } from "node:fs";
-import { join as join6 } from "node:path";
+import { join as join7 } from "node:path";
 var REVIEW_THREADS_QUERY = `
 query ($owner: String!, $name: String!, $prNumber: Int!) {
   repository(owner: $owner, name: $name) {
@@ -145741,7 +145961,7 @@ function GetReviewCommentsTool(ctx) {
         throw new Error("PULLFROG_TEMP_DIR not set");
       }
       const filename = `review-${params.review_id}-threads.md`;
-      const commentsPath = join6(tempDir, filename);
+      const commentsPath = join7(tempDir, filename);
       writeFileSync4(commentsPath, formatted.content);
       log.debug(`wrote ${threadBlocks.length} threads to ${commentsPath}`);
       return {
@@ -145970,7 +146190,7 @@ import { spawn as spawn2, spawnSync as spawnSync3 } from "node:child_process";
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { closeSync, openSync, writeFileSync as writeFileSync5 } from "node:fs";
 import { userInfo } from "node:os";
-import { join as join7 } from "node:path";
+import { join as join8 } from "node:path";
 import { setTimeout as sleep2 } from "node:timers/promises";
 var ShellParams = type({
   command: "string",
@@ -146103,7 +146323,7 @@ function getTempDir() {
 var MAX_OUTPUT_CHARS = 5e3;
 function capOutput(output) {
   if (output.length <= MAX_OUTPUT_CHARS) return output;
-  const fullPath = join7(getTempDir(), `shell-${randomUUID2().slice(0, 8)}.log`);
+  const fullPath = join8(getTempDir(), `shell-${randomUUID2().slice(0, 8)}.log`);
   writeFileSync5(fullPath, output);
   const elided = output.length - MAX_OUTPUT_CHARS;
   return `... [${elided} chars truncated; full output saved to ${fullPath}] ...
@@ -146118,6 +146338,7 @@ function isGitCommand(command) {
 function ShellTool(ctx) {
   return tool({
     name: "shell",
+    timeoutMs: 12e4,
     description: `Execute shell commands securely. Environment is filtered to remove API keys and secrets.
 
 Example: \`shell({ command: "pnpm test", description: "run the test suite" })\`.
@@ -146157,8 +146378,8 @@ Do NOT use this tool for git commands \u2014 use the dedicated git tools instead
       if (params.background) {
         const tempDir = getTempDir();
         const handle = `bg-${randomUUID2().slice(0, 8)}`;
-        const outputPath = join7(tempDir, `${handle}.log`);
-        const pidPath = join7(tempDir, `${handle}.pid`);
+        const outputPath = join8(tempDir, `${handle}.log`);
+        const pidPath = join8(tempDir, `${handle}.pid`);
         const logFd = openSync(outputPath, "a");
         let proc2;
         try {
@@ -146498,6 +146719,8 @@ var REVIEWER_AGENT_NAME = "reviewfrog";
 var REVIEWER_SYSTEM_PROMPT = `You are a read-only review subagent. Your role is to find flaws in code or artifacts provided by the orchestrator and report findings \u2014 never to modify state.
 
 HARD CONSTRAINTS (non-negotiable, regardless of orchestrator instructions):
+- Your FIRST action MUST be \`git diff origin/<base>\` (single-rev form, no \`HEAD\`). This captures committed + staged + unstaged work in one command \u2014 Build-mode self-review runs BEFORE the commit, so the work to review lives in the working tree, not in committed history. Do not run any other diff command first. Do NOT call \`checkout_pr\`, do NOT fetch alternative refs, do NOT list branches or all-refs looking for the work, do NOT run \`gh pr list\`. The orchestrator's dispatch names the base branch; the diff is the source of truth for scope.
+- If \`git diff origin/<base>\` returns empty AND the orchestrator's dispatch claims there are changes to review, the most likely cause is a pre-commit Build-mode self-review: the orchestrator dispatched you before committing. Reply EXACTLY: \`no changes detected \u2014 likely pre-commit Build self-review; orchestrator should commit then re-dispatch\` and stop. Do NOT guess PR numbers (e.g. by extrapolating from \`git log\` output), do NOT check out other PRs, do NOT fetch from forks. The empty diff is the diagnosis \u2014 surface it; do not work around it.
 - Read-only tools only. Do NOT write or edit files. Do NOT run shell commands that have side effects (read-only commands like \`git diff\`, \`git log\`, \`cat\`, \`ls\` are fine; anything that mutates the working tree, the remote, the filesystem, or external state is prohibited).
 - Do NOT call any state-changing MCP tool. State-changing means: posts a comment, pushes a branch, creates/updates a PR or issue, changes labels, resolves review threads, persists learnings, sets workflow output, installs dependencies, uploads files, kills processes, etc. Read-only MCP queries (\`get_*\`, \`list_*\`, log inspection, diff retrieval) are fine.
 - Do NOT spawn further subagents. You are a leaf reviewer; recursive dispatch pre-aggregates findings through an intermediate model and defeats the design.
@@ -146688,7 +146911,25 @@ function computeModes(agentId) {
 
    Otherwise delegate the \`${REVIEWER_AGENT_NAME}\` subagent to review your diff with fresh eyes against YOUR TASK. The subagent's baked-in system prompt enforces a non-mutative + non-recursive contract: read-only file/search/web tools and read-only MCP queries only; no writes, shell side effects, state-changing MCP calls, or nested subagent dispatch. Enforcement is prose-only \u2014 restate the constraint in your dispatch instructions and do not relax it.
 
-   Provide the subagent with YOUR TASK, the output of \`git diff origin/<base-branch>\` (single-rev form, no \`HEAD\` \u2014 this compares the working tree against the remote base and captures committed + staged + unstaged work; \`main...HEAD\` and \`--cached\` both miss the uncommitted edits Build self-review runs on, since self-review happens BEFORE the commit), and a tight summary (not raw output) of any lint/typecheck/test failures you fixed during build \u2014 what broke, root cause, the fix \u2014 so it can check that fixes addressed root causes rather than suppressed symptoms; say "no build-phase failures" if the build path was clean. Instruct it to flag bugs, logic errors, missing edge cases, gaps between request and diff, and unintended changes.
+   Compose your \`${REVIEWER_AGENT_NAME}\` dispatch prompt using this template verbatim, substituting the \`<...>\` placeholders. The preamble aligns the orchestrator side of the dispatch contract with the reviewer's baked-in system prompt \u2014 both ends say the same thing about where the work lives and what to do on an empty diff.
+
+   \`\`\`
+   ## What you're reviewing
+   This is a PRE-COMMIT Build-mode self-review. The work to review lives in the working tree (uncommitted), NOT in committed history.
+
+   Branch: <branch> (off <base>)
+   Canonical diff command: git diff origin/<base>
+
+   If that command returns empty, treat it as "no changes \u2014 nothing to review" and stop per your system prompt. Do not search for the work elsewhere.
+
+   ## Your task
+   <YOUR TASK content>
+
+   ## Build-phase failures
+   <tight summary \u2014 what broke, root cause, the fix \u2014 or "no build-phase failures">
+   \`\`\`
+
+   Follow the template with the diff content (\`git diff origin/<base-branch>\`, single-rev form \u2014 \`main...HEAD\` and \`--cached\` both miss the uncommitted edits self-review runs on) and your task brief. Instruct the subagent to flag bugs, logic errors, missing edge cases, gaps between request and diff, and unintended changes.
 
    Delegation + research discipline (distilled from \`/anneal\` canonical \u2014 these are codified learnings from many review rounds, not theoretical best practices):
    - Do NOT summarize what you implemented \u2014 that biases the subagent toward validating the shape of your solution rather than questioning it.
@@ -147087,21 +147328,21 @@ function initToolState(params) {
 }
 
 // agents/claude.ts
-import { execFileSync as execFileSync3 } from "node:child_process";
+import { execFileSync as execFileSync4 } from "node:child_process";
 import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync8 } from "node:fs";
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 import { performance as performance6 } from "node:perf_hooks";
 
 // utils/install.ts
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { chmodSync, createWriteStream, existsSync as existsSync5, mkdirSync as mkdirSync2 } from "node:fs";
-import { join as join8 } from "node:path";
+import { join as join9 } from "node:path";
 import { pipeline } from "node:stream/promises";
 async function installFromNpmTarball(params) {
   const tempDir = process.env.PULLFROG_TEMP_DIR;
   if (!tempDir) throw new Error("PULLFROG_TEMP_DIR is not set");
-  const extractedDir = join8(tempDir, "package");
-  const cliPath = join8(extractedDir, params.executablePath);
+  const extractedDir = join9(tempDir, "package");
+  const cliPath = join9(extractedDir, params.executablePath);
   if (existsSync5(cliPath)) {
     log.debug(`\xBB using cached binary at ${cliPath}`);
     return cliPath;
@@ -147126,7 +147367,7 @@ async function installFromNpmTarball(params) {
     }
   }
   log.debug(`\xBB installing ${params.packageName}@${resolvedVersion}...`);
-  const tarballPath = join8(tempDir, "package.tgz");
+  const tarballPath = join9(tempDir, "package.tgz");
   const npmRegistry = process.env.NPM_REGISTRY || "https://registry.npmjs.org";
   let tarballUrl;
   if (params.packageName.startsWith("@")) {
@@ -147265,16 +147506,16 @@ function isRouterKeylimitExhaustedError(text) {
 // utils/skills.ts
 import { spawnSync as spawnSync5 } from "node:child_process";
 import { existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync6 } from "node:fs";
-import { tmpdir } from "node:os";
-import { dirname as dirname2, join as join9 } from "node:path";
+import { tmpdir as tmpdir2 } from "node:os";
+import { dirname as dirname2, join as join10 } from "node:path";
 import { fileURLToPath } from "node:url";
 var skillsVersion = getDevDependencyVersion("skills");
 var BUNDLED_SKILL_NAMES = ["git-archaeology"];
 function resolveSkillPath(name) {
   const here = dirname2(fileURLToPath(import.meta.url));
   const candidates = [
-    join9(here, "..", "skills", name, "SKILL.md"),
-    join9(here, "skills", name, "SKILL.md")
+    join10(here, "..", "skills", name, "SKILL.md"),
+    join10(here, "skills", name, "SKILL.md")
   ];
   for (const candidate of candidates) {
     if (existsSync6(candidate)) return candidate;
@@ -147286,9 +147527,9 @@ function installBundledSkills(params) {
   for (const name of BUNDLED_SKILL_NAMES) {
     const content = readFileSync4(resolveSkillPath(name), "utf8");
     for (const targetDir of SKILL_TARGET_DIRS) {
-      const skillDir = join9(params.home, targetDir, name);
+      const skillDir = join10(params.home, targetDir, name);
       mkdirSync3(skillDir, { recursive: true });
-      writeFileSync6(join9(skillDir, "SKILL.md"), content);
+      writeFileSync6(join10(skillDir, "SKILL.md"), content);
     }
   }
   log.success(`installed bundled skills: ${BUNDLED_SKILL_NAMES.join(", ")}`);
@@ -147309,7 +147550,7 @@ function addSkill(params) {
       "-y"
     ],
     {
-      cwd: tmpdir(),
+      cwd: tmpdir2(),
       env: { ...process.env, ...params.env },
       stdio: "pipe",
       timeout: 3e4
@@ -147394,7 +147635,7 @@ var ThinkingTimer = class {
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { mkdirSync as mkdirSync4, rmSync, writeFileSync as writeFileSync7 } from "node:fs";
 import { homedir } from "node:os";
-import { join as join10 } from "node:path";
+import { join as join11 } from "node:path";
 var VERTEX_SERVICE_ACCOUNT_JSON_ENV = "VERTEX_SERVICE_ACCOUNT_JSON";
 var GOOGLE_APPLICATION_CREDENTIALS_ENV = "GOOGLE_APPLICATION_CREDENTIALS";
 var GOOGLE_CLOUD_PROJECT_ENV = "GOOGLE_CLOUD_PROJECT";
@@ -147423,7 +147664,7 @@ function readProjectIdFromVertexServiceAccountJson() {
 }
 function createSecretDir() {
   const base = process.env.PULLFROG_SECRET_HOME || process.env.HOME || homedir();
-  const secretDir = join10(base, ".pullfrog", "secrets", randomUUID3());
+  const secretDir = join11(base, ".pullfrog", "secrets", randomUUID3());
   mkdirSync4(secretDir, { recursive: true, mode: 448 });
   return secretDir;
 }
@@ -147432,7 +147673,7 @@ function materializeVertexCredentials(params) {
   const blob = process.env[VERTEX_SERVICE_ACCOUNT_JSON_ENV];
   if (!blob) return void 0;
   const secretDir = createSecretDir();
-  const credentialsPath = join10(secretDir, "vertex-sa.json");
+  const credentialsPath = join11(secretDir, "vertex-sa.json");
   writeFileSync7(credentialsPath, blob, { mode: 384 });
   process.env[GOOGLE_APPLICATION_CREDENTIALS_ENV] = credentialsPath;
   const projectId = readProjectIdFromVertexServiceAccountJson();
@@ -147444,6 +147685,7 @@ function materializeVertexCredentials(params) {
 function cleanupVertexCredentials(credentials) {
   if (!credentials) return;
   rmSync(credentials.secretDir, { recursive: true, force: true });
+  delete process.env[GOOGLE_APPLICATION_CREDENTIALS_ENV];
 }
 function applyClaudeVertexEnv(env2) {
   env2.CLAUDE_CODE_USE_VERTEX = "1";
@@ -147757,9 +147999,9 @@ async function installClaudeCli() {
   });
 }
 function writeMcpConfig(ctx) {
-  const configDir = join11(ctx.tmpdir, ".claude");
+  const configDir = join12(ctx.tmpdir, ".claude");
   mkdirSync5(configDir, { recursive: true });
-  const configPath = join11(configDir, "mcp.json");
+  const configPath = join12(configDir, "mcp.json");
   writeFileSync8(
     configPath,
     JSON.stringify({
@@ -148185,8 +148427,8 @@ function installManagedSettings(ctx) {
   if (process.env.CI !== "true") return;
   const content = JSON.stringify(buildManagedSettings(ctx), null, 2);
   try {
-    execFileSync3("sudo", ["mkdir", "-p", MANAGED_SETTINGS_DIR]);
-    execFileSync3("sudo", ["tee", MANAGED_SETTINGS_PATH], {
+    execFileSync4("sudo", ["mkdir", "-p", MANAGED_SETTINGS_DIR]);
+    execFileSync4("sudo", ["tee", MANAGED_SETTINGS_PATH], {
       input: content,
       stdio: ["pipe", "ignore", "pipe"]
     });
@@ -148208,15 +148450,15 @@ var claude = agent({
     const model = !specifier ? void 0 : isBedrockRoute ? specifier : isVertexRoute2 ? void 0 : stripProviderPrefix(specifier);
     const homeEnv = {
       HOME: ctx.tmpdir,
-      XDG_CONFIG_HOME: join11(ctx.tmpdir, ".config")
+      XDG_CONFIG_HOME: join12(ctx.tmpdir, ".config")
     };
-    mkdirSync5(join11(homeEnv.XDG_CONFIG_HOME, "claude"), { recursive: true });
+    mkdirSync5(join12(homeEnv.XDG_CONFIG_HOME, "claude"), { recursive: true });
     const agentBrowserVersion = getDevDependencyVersion("agent-browser");
     addSkill({
       ref: `vercel-labs/agent-browser@v${agentBrowserVersion}`,
       skill: "agent-browser",
       env: homeEnv,
-      agent: "claude"
+      agent: "claude-code"
     });
     installBundledSkills({ home: homeEnv.HOME });
     const mcpConfigPath = writeMcpConfig(ctx);
@@ -148295,7 +148537,7 @@ var claude = agent({
 // agents/opencode_v2.ts
 var core2 = __toESM(require_core(), 1);
 import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync10 } from "node:fs";
-import { join as join13 } from "node:path";
+import { join as join14 } from "node:path";
 import { performance as performance7 } from "node:perf_hooks";
 
 // utils/agentHangReport.ts
@@ -148396,7 +148638,7 @@ function formatBillingExhaustedBody(diagnostic) {
 // utils/codexHome.ts
 import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync9 } from "node:fs";
 import { homedir as homedir2 } from "node:os";
-import { join as join12 } from "node:path";
+import { join as join13 } from "node:path";
 var CODEX_AUTH_ENV = "CODEX_AUTH_JSON";
 function installCodexAuth() {
   const raw2 = process.env[CODEX_AUTH_ENV];
@@ -148406,9 +148648,9 @@ function installCodexAuth() {
     log.warning(`\xBB ${CODEX_AUTH_ENV} present but malformed; ignoring`);
     return null;
   }
-  const xdgDataHome = join12(homedir2(), ".local", "share");
-  const opencodeDir = join12(xdgDataHome, "opencode");
-  const authPath = join12(opencodeDir, "auth.json");
+  const xdgDataHome = join13(homedir2(), ".local", "share");
+  const opencodeDir = join13(xdgDataHome, "opencode");
+  const authPath = join13(opencodeDir, "auth.json");
   const opencodeAuth = {
     openai: {
       type: "oauth",
@@ -148536,7 +148778,7 @@ export default async function pullfrogEventsPlugin() {
 `;
 
 // agents/opencodeShared.ts
-import { execFileSync as execFileSync4 } from "node:child_process";
+import { execFileSync as execFileSync5 } from "node:child_process";
 
 // agents/subagentModels.ts
 function deriveSubagentModels(orchestratorSpec) {
@@ -148585,7 +148827,7 @@ async function installOpencodeCli(params) {
 var AUTO_SELECT_WARNING = "select a model explicitly in the Pullfrog console (https://pullfrog.com/console) to avoid this.";
 function getOpenCodeModels(cliPath) {
   try {
-    const output = execFileSync4(cliPath, ["models"], {
+    const output = execFileSync5(cliPath, ["models"], {
       encoding: "utf-8",
       timeout: 3e4,
       env: process.env
@@ -149082,13 +149324,13 @@ var opencode = agent({
     const model = vertexModel ?? (isBedrockRoute ? `amazon-bedrock/${rawModel}` : rawModel);
     const homeEnv = {
       HOME: ctx.tmpdir,
-      XDG_CONFIG_HOME: join13(ctx.tmpdir, ".config")
+      XDG_CONFIG_HOME: join14(ctx.tmpdir, ".config")
     };
-    mkdirSync7(join13(homeEnv.XDG_CONFIG_HOME, "opencode"), { recursive: true });
-    const opencodePluginDir = join13(homeEnv.XDG_CONFIG_HOME, "opencode", "plugin");
+    mkdirSync7(join14(homeEnv.XDG_CONFIG_HOME, "opencode"), { recursive: true });
+    const opencodePluginDir = join14(homeEnv.XDG_CONFIG_HOME, "opencode", "plugin");
     mkdirSync7(opencodePluginDir, { recursive: true });
     writeFileSync10(
-      join13(opencodePluginDir, PULLFROG_OPENCODE_PLUGIN_FILENAME),
+      join14(opencodePluginDir, PULLFROG_OPENCODE_PLUGIN_FILENAME),
       PULLFROG_OPENCODE_PLUGIN_SOURCE
     );
     const agentBrowserVersion = getDevDependencyVersion("agent-browser");
@@ -149450,7 +149692,7 @@ async function fetchBodyHtml(ctx) {
 }
 
 // utils/byokFallback.ts
-var FREE_FALLBACK_SLUG = "opencode/minimax-m2.5-free";
+var FREE_FALLBACK_SLUG = "opencode/big-pickle";
 function selectFallbackModelIfNeeded(input) {
   if (input.proxyModel) return { fallback: false };
   if (!input.resolvedModel) return { fallback: false };
@@ -149468,7 +149710,7 @@ function selectFallbackModelIfNeeded(input) {
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { writeFileSync as writeFileSync11 } from "node:fs";
 import { createServer as createServer2 } from "node:http";
-import { join as join14 } from "node:path";
+import { join as join15 } from "node:path";
 var CODE_TTL_MS = 5 * 60 * 1e3;
 var TAMPER_WINDOW_MS = 6e4;
 function revokeGitHubToken(token) {
@@ -149540,7 +149782,7 @@ async function startGitAuthServer(tmpdir3) {
   function writeAskpassScript(code) {
     const scriptId = randomUUID4();
     const scriptName = `askpass-${scriptId}.js`;
-    const scriptPath = join14(tmpdir3, scriptName);
+    const scriptPath = join15(tmpdir3, scriptName);
     const content = [
       `#!/usr/bin/env node`,
       `var a=process.argv[2]||"";`,
@@ -149579,7 +149821,7 @@ async function startGitAuthServer(tmpdir3) {
 var core3 = __toESM(require_core(), 1);
 import { createSign } from "node:crypto";
 import { rename, writeFile } from "node:fs/promises";
-import { dirname as dirname3, join as join15 } from "node:path";
+import { dirname as dirname3, join as join16 } from "node:path";
 
 // node_modules/.pnpm/@octokit+plugin-throttling@11.0.3_@octokit+core@7.0.5/node_modules/@octokit/plugin-throttling/dist-bundle/index.js
 var import_light = __toESM(require_light(), 1);
@@ -153437,7 +153679,7 @@ function getGitHubUsageSummary() {
 }
 async function writeGitHubUsageSummaryToFile(path3) {
   const summary2 = getGitHubUsageSummary();
-  const tmpPath = join15(dirname3(path3), `.usage-summary-${process.pid}.tmp`);
+  const tmpPath = join16(dirname3(path3), `.usage-summary-${process.pid}.tmp`);
   await writeFile(tmpPath, JSON.stringify(summary2));
   await rename(tmpPath, path3);
 }
@@ -153488,7 +153730,7 @@ function createOctokit(token) {
 }
 
 // utils/instructions.ts
-import { execSync as execSync2 } from "node:child_process";
+import { execSync as execSync3 } from "node:child_process";
 function buildRuntimeContext(ctx) {
   const {
     "~pullfrog": _,
@@ -153500,7 +153742,7 @@ function buildRuntimeContext(ctx) {
   } = ctx.payload;
   let gitStatus;
   try {
-    gitStatus = execSync2("git status --short", { encoding: "utf-8", stdio: "pipe" }).trim() || "(clean)";
+    gitStatus = execSync3("git status --short", { encoding: "utf-8", stdio: "pipe" }).trim() || "(clean)";
   } catch {
   }
   const data = {
@@ -153837,7 +154079,7 @@ function resolveInstructions(ctx) {
 
 // utils/learnings.ts
 import { mkdir, readFile as readFile2, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname4, join as join16 } from "node:path";
+import { dirname as dirname4, join as join17 } from "node:path";
 
 // utils/learningsTruncate.ts
 var MAX_LEARNINGS_LENGTH = 1e5;
@@ -153854,7 +154096,7 @@ function truncateAtLineBoundary(body, cap) {
 // utils/learnings.ts
 var LEARNINGS_FILE_NAME = "pullfrog-learnings.md";
 function learningsFilePath(tmpdir3) {
-  return join16(tmpdir3, LEARNINGS_FILE_NAME);
+  return join17(tmpdir3, LEARNINGS_FILE_NAME);
 }
 async function seedLearningsFile(params) {
   const path3 = learningsFilePath(params.tmpdir);
@@ -154534,7 +154776,7 @@ async function runProxyResolution(ctx) {
 
 // utils/prSummary.ts
 import { mkdir as mkdir2, readFile as readFile3, writeFile as writeFile3 } from "node:fs/promises";
-import { dirname as dirname5, join as join17 } from "node:path";
+import { dirname as dirname5, join as join18 } from "node:path";
 var SUMMARY_FILE_NAME = "pullfrog-summary.md";
 var SUMMARY_SCAFFOLD = `# PR summary
 
@@ -154544,7 +154786,7 @@ var SUMMARY_SCAFFOLD = `# PR summary
 var MIN_SNAPSHOT_LENGTH = 60;
 var MAX_SNAPSHOT_LENGTH = 32768;
 function summaryFilePath(tmpdir3) {
-  return join17(tmpdir3, SUMMARY_FILE_NAME);
+  return join18(tmpdir3, SUMMARY_FILE_NAME);
 }
 async function seedSummaryFile(params) {
   const path3 = summaryFilePath(params.tmpdir);
@@ -154738,6 +154980,16 @@ async function resolveRunContextData(params) {
 }
 
 // utils/runErrorRenderer.ts
+function isProviderModelNotFoundError(message) {
+  return message.includes("ProviderModelNotFoundError");
+}
+function formatProviderModelNotFoundSummary(input) {
+  return `Pullfrog's free fallback model is no longer available in OpenCode's catalog. Add an API key for your configured model in the Pullfrog console for \`${input.owner}/${input.name}\`, or contact support if this persists.
+
+\`\`\`
+${input.raw}
+\`\`\``;
+}
 function renderRunError(input) {
   const billingError = isRouterKeylimitExhaustedError(input.errorMessage) ? new BillingError(input.errorMessage, { code: "router_keylimit_exhausted" }) : null;
   if (billingError) {
@@ -154759,6 +155011,14 @@ function renderRunError(input) {
   if (apiKeyErrorSummary) {
     return { summary: apiKeyErrorSummary, comment: apiKeyErrorSummary };
   }
+  if (isProviderModelNotFoundError(input.errorMessage)) {
+    const body = formatProviderModelNotFoundSummary({
+      owner: input.repo.owner,
+      name: input.repo.name,
+      raw: input.errorMessage
+    });
+    return { summary: body, comment: body };
+  }
   if (hangBody) {
     return {
       summary: `### \u274C Pullfrog failed
@@ -154860,16 +155120,17 @@ async function persistRunArtifacts(toolContext) {
 }
 async function finalizeSuccessRun(input) {
   await persistRunArtifacts(input.toolContext);
-  if (!input.result.success && input.toolState.progressComment) {
-    const rawError = input.result.error || "agent run failed";
-    const errorBody = isApiKeyAuthError(rawError) ? formatApiKeyErrorSummary({
-      owner: input.repo.owner,
-      name: input.repo.name,
-      raw: rawError
-    }) : rawError;
-    await reportErrorToComment({ toolState: input.toolState, error: errorBody }).catch((error49) => {
-      log.debug(`failure error report failed: ${error49}`);
-    });
+  const rendered = !input.result.success ? renderRunError({
+    errorMessage: input.result.error || "agent run failed",
+    repo: input.repo,
+    agentDiagnostic: input.toolState.agentDiagnostic
+  }) : null;
+  if (rendered && input.toolState.progressComment) {
+    await reportErrorToComment({ toolState: input.toolState, error: rendered.comment }).catch(
+      (error49) => {
+        log.debug(`failure error report failed: ${error49}`);
+      }
+    );
   }
   if (input.result.success && input.toolState.progressComment && !input.toolState.finalSummaryWritten) {
     await deleteProgressComment(input.toolContext).catch((error49) => {
@@ -154879,7 +155140,7 @@ async function finalizeSuccessRun(input) {
   try {
     const usageSummary = formatUsageSummary(input.toolState.usageEntries);
     const body = input.toolState.lastProgressBody || input.result.output;
-    const parts = [body, usageSummary].filter(Boolean);
+    const parts = [rendered?.summary, body, usageSummary].filter(Boolean);
     if (parts.length > 0) {
       await writeSummary(parts.join("\n\n"));
     }
@@ -154964,116 +155225,6 @@ function logRunStartup(ctx) {
   log.info(`\xBB timeout: ${resolveTimeoutForLog(ctx.payload.timeout)}`);
 }
 
-// utils/setup.ts
-import { execFileSync as execFileSync5, execSync as execSync3 } from "node:child_process";
-import { mkdtempSync } from "node:fs";
-import { tmpdir as tmpdir2 } from "node:os";
-import { join as join18 } from "node:path";
-function createTempDirectory() {
-  const sharedTempDir = mkdtempSync(join18(tmpdir2(), "pullfrog-"));
-  process.env.PULLFROG_TEMP_DIR = sharedTempDir;
-  log.info(`\xBB created temp dir at ${sharedTempDir}`);
-  return sharedTempDir;
-}
-function envScopedToRepo() {
-  const scoped = { ...process.env };
-  for (const key of Object.keys(scoped)) {
-    if (key.startsWith("GIT_")) delete scoped[key];
-  }
-  return scoped;
-}
-function removeIncludeIfEntries(repoDir) {
-  const env2 = envScopedToRepo();
-  let configOutput;
-  try {
-    configOutput = execSync3("git config --local --get-regexp -z ^includeif\\.", {
-      cwd: repoDir,
-      encoding: "utf-8",
-      stdio: "pipe",
-      env: env2
-    });
-  } catch {
-    log.debug("\xBB no includeIf credential entries to remove");
-    return;
-  }
-  const seen = /* @__PURE__ */ new Set();
-  for (const entry of configOutput.split("\0")) {
-    if (!entry) continue;
-    const nl = entry.indexOf("\n");
-    const key = nl === -1 ? entry : entry.slice(0, nl);
-    if (!key || seen.has(key)) continue;
-    seen.add(key);
-    try {
-      execFileSync5("git", ["config", "--local", "--unset-all", key], {
-        cwd: repoDir,
-        stdio: "pipe",
-        env: env2
-      });
-    } catch (error49) {
-      log.debug(
-        `\xBB failed to unset ${key}: ${error49 instanceof Error ? error49.message : String(error49)}`
-      );
-    }
-  }
-  if (seen.size > 0)
-    log.info(
-      `\xBB removed ${seen.size} includeIf credential ${seen.size === 1 ? "entry" : "entries"}`
-    );
-}
-async function setupGit(params) {
-  const repoDir = process.cwd();
-  log.info("\xBB setting up git configuration...");
-  try {
-    let currentEmail = "";
-    try {
-      currentEmail = execSync3("git config user.email", {
-        cwd: repoDir,
-        stdio: "pipe",
-        encoding: "utf-8"
-      }).trim();
-    } catch {
-    }
-    const shouldSetDefaults = !currentEmail || currentEmail === "github-actions[bot]@users.noreply.github.com";
-    if (shouldSetDefaults) {
-      execSync3('git config --local user.email "226033991+pullfrog[bot]@users.noreply.github.com"', {
-        cwd: repoDir,
-        stdio: "pipe"
-      });
-      execSync3('git config --local user.name "pullfrog[bot]"', {
-        cwd: repoDir,
-        stdio: "pipe"
-      });
-      log.debug("\xBB git user configured (using defaults)");
-    } else {
-      log.debug(`\xBB git user already configured (${currentEmail}), skipping`);
-    }
-    if (params.shell === "disabled") {
-      execSync3("git config --local core.hooksPath /dev/null", {
-        cwd: repoDir,
-        stdio: "pipe"
-      });
-      log.debug("\xBB git hooks disabled (shell=disabled)");
-    }
-  } catch (error49) {
-    log.info(`Failed to set git config: ${error49 instanceof Error ? error49.message : String(error49)}`);
-  }
-  try {
-    execSync3("git config --local --unset-all http.https://github.com/.extraheader", {
-      cwd: repoDir,
-      stdio: "pipe"
-    });
-    log.info("\xBB removed existing authentication headers");
-  } catch {
-    log.debug("\xBB no existing authentication headers to remove");
-  }
-  removeIncludeIfEntries(repoDir);
-  const originUrl = `https://github.com/${params.owner}/${params.name}.git`;
-  $("git", ["remote", "set-url", "origin", originUrl], { cwd: repoDir });
-  params.toolState.pushUrl = originUrl;
-  $("git", ["config", "--local", "credential.helper", ""], { cwd: repoDir });
-  log.info("\xBB git authentication configured");
-}
-
 // utils/todoTracking.ts
 function isValidTodoStatus(value2) {
   return value2 === "pending" || value2 === "in_progress" || value2 === "completed" || value2 === "cancelled";
@@ -155281,6 +155432,7 @@ async function main() {
       toolState.beforeSha = payload.event.before_sha;
     }
     const tokenRef = __using(_stack2, await resolveTokens({ push: payload.push }), true);
+    wipeRunnerLeakSurface();
     const oidcCredentials = process.env.ACTIONS_ID_TOKEN_REQUEST_URL && process.env.ACTIONS_ID_TOKEN_REQUEST_TOKEN ? {
       requestUrl: process.env.ACTIONS_ID_TOKEN_REQUEST_URL,
       requestToken: process.env.ACTIONS_ID_TOKEN_REQUEST_TOKEN
@@ -155450,7 +155602,7 @@ ${instructions.user}` : null,
         });
         if (agentId === "opencode") {
           const pluginDir = join19(process.cwd(), ".opencode", "plugin");
-          const hasPlugins = existsSync7(pluginDir) && readdirSync(pluginDir).some((f) => /\.[jt]sx?$/.test(f));
+          const hasPlugins = existsSync7(pluginDir) && readdirSync2(pluginDir).some((f) => /\.[jt]sx?$/.test(f));
           if (hasPlugins && toolState.dependencyInstallation?.promise) {
             log.info(
               "\xBB .opencode/plugin/ detected \u2014 awaiting dependency installation before agent start"