pullfrog 0.1.51 → 0.1.53

package/dist/index.js

@@ -3598,9 +3598,9 @@ var require_constants2 = __commonJS({
       }
     })();
     var channel;
-    var structuredClone = globalThis.structuredClone ?? // https://github.com/nodejs/node/blob/b27ae24dcc4251bad726d9d84baf678d1f707fed/lib/internal/structured_clone.js
+    var structuredClone2 = globalThis.structuredClone ?? // https://github.com/nodejs/node/blob/b27ae24dcc4251bad726d9d84baf678d1f707fed/lib/internal/structured_clone.js
     // structuredClone was added in v17.0.0, but fetch supports v16.8
-    function structuredClone2(value2, options = void 0) {
+    function structuredClone3(value2, options = void 0) {
       if (arguments.length === 0) {
         throw new TypeError("missing argument");
       }
@@ -3614,7 +3614,7 @@ var require_constants2 = __commonJS({
     };
     module.exports = {
       DOMException: DOMException2,
-      structuredClone,
+      structuredClone: structuredClone2,
       subresource,
       forbiddenMethods,
       requestBodyHeader,
@@ -5319,7 +5319,7 @@ var require_body = __commonJS({
     var { FormData: FormData2 } = require_formdata();
     var { kState } = require_symbols2();
     var { webidl } = require_webidl();
-    var { DOMException: DOMException2, structuredClone } = require_constants2();
+    var { DOMException: DOMException2, structuredClone: structuredClone2 } = require_constants2();
     var { Blob: Blob2, File: NativeFile } = __require("buffer");
     var { kBodyUsed } = require_symbols();
     var assert3 = __require("assert");
@@ -5483,7 +5483,7 @@ Content-Type: ${value2.type || "application/octet-stream"}\r
     }
     function cloneBody(body) {
       const [out1, out2] = body.stream.tee();
-      const out2Clone = structuredClone(out2, { transfer: [out2] });
+      const out2Clone = structuredClone2(out2, { transfer: [out2] });
       const [, finalClone] = out2Clone.tee();
       body.stream = out1;
       return {
@@ -19793,10 +19793,10 @@ Support boolean input list: \`true | True | TRUE | false | False | FALSE\``);
       (0, command_1.issueCommand)("error", (0, utils_1.toCommandProperties)(properties), message instanceof Error ? message.toString() : message);
     }
     exports.error = error49;
-    function warning2(message, properties = {}) {
+    function warning3(message, properties = {}) {
       (0, command_1.issueCommand)("warning", (0, utils_1.toCommandProperties)(properties), message instanceof Error ? message.toString() : message);
     }
-    exports.warning = warning2;
+    exports.warning = warning3;
     function notice(message, properties = {}) {
       (0, command_1.issueCommand)("notice", (0, utils_1.toCommandProperties)(properties), message instanceof Error ? message.toString() : message);
     }
@@ -66407,7 +66407,7 @@ function initializeContext(params) {
     external: params?.external ?? void 0
   };
 }
-function process2(schema2, ctx, _params = { path: [], schemaPath: [] }) {
+function process3(schema2, ctx, _params = { path: [], schemaPath: [] }) {
   var _a2;
   const def = schema2._zod.def;
   const seen = ctx.seen.get(schema2);
@@ -66444,7 +66444,7 @@ function process2(schema2, ctx, _params = { path: [], schemaPath: [] }) {
     if (parent) {
       if (!result.ref)
         result.ref = parent;
-      process2(parent, ctx, params);
+      process3(parent, ctx, params);
       ctx.seen.get(parent).isParent = true;
     }
   }
@@ -66729,14 +66729,14 @@ var init_to_json_schema = __esm({
     init_registries();
     createToJSONSchemaMethod = (schema2, processors = {}) => (params) => {
       const ctx = initializeContext({ ...params, processors });
-      process2(schema2, ctx);
+      process3(schema2, ctx);
       extractDefs(ctx, schema2);
       return finalize(ctx, schema2);
     };
     createStandardJSONSchemaMethod = (schema2, io, processors = {}) => (params) => {
       const { libraryOptions, target } = params ?? {};
       const ctx = initializeContext({ ...libraryOptions ?? {}, target, io, processors });
-      process2(schema2, ctx);
+      process3(schema2, ctx);
       extractDefs(ctx, schema2);
       return finalize(ctx, schema2);
     };
@@ -66751,7 +66751,7 @@ function toJSONSchema(input, params) {
     const defs = {};
     for (const entry of registry4._idmap.entries()) {
       const [_, schema2] = entry;
-      process2(schema2, ctx2);
+      process3(schema2, ctx2);
     }
     const schemas = {};
     const external = {
@@ -66774,7 +66774,7 @@ function toJSONSchema(input, params) {
     return { schemas };
   }
   const ctx = initializeContext({ ...params, processors: allProcessors });
-  process2(input, ctx);
+  process3(input, ctx);
   extractDefs(ctx, input);
   return finalize(ctx, input);
 }
@@ -67034,7 +67034,7 @@ var init_json_schema_processors = __esm({
       if (typeof maximum === "number")
         json4.maxItems = maximum;
       json4.type = "array";
-      json4.items = process2(def.element, ctx, { ...params, path: [...params.path, "items"] });
+      json4.items = process3(def.element, ctx, { ...params, path: [...params.path, "items"] });
     };
     objectProcessor = (schema2, ctx, _json, params) => {
       const json4 = _json;
@@ -67043,7 +67043,7 @@ var init_json_schema_processors = __esm({
       json4.properties = {};
       const shape = def.shape;
       for (const key in shape) {
-        json4.properties[key] = process2(shape[key], ctx, {
+        json4.properties[key] = process3(shape[key], ctx, {
           ...params,
           path: [...params.path, "properties", key]
         });
@@ -67066,7 +67066,7 @@ var init_json_schema_processors = __esm({
         if (ctx.io === "output")
           json4.additionalProperties = false;
       } else if (def.catchall) {
-        json4.additionalProperties = process2(def.catchall, ctx, {
+        json4.additionalProperties = process3(def.catchall, ctx, {
           ...params,
           path: [...params.path, "additionalProperties"]
         });
@@ -67075,7 +67075,7 @@ var init_json_schema_processors = __esm({
     unionProcessor = (schema2, ctx, json4, params) => {
       const def = schema2._zod.def;
       const isExclusive = def.inclusive === false;
-      const options = def.options.map((x, i) => process2(x, ctx, {
+      const options = def.options.map((x, i) => process3(x, ctx, {
         ...params,
         path: [...params.path, isExclusive ? "oneOf" : "anyOf", i]
       }));
@@ -67087,11 +67087,11 @@ var init_json_schema_processors = __esm({
     };
     intersectionProcessor = (schema2, ctx, json4, params) => {
       const def = schema2._zod.def;
-      const a = process2(def.left, ctx, {
+      const a = process3(def.left, ctx, {
         ...params,
         path: [...params.path, "allOf", 0]
       });
-      const b = process2(def.right, ctx, {
+      const b = process3(def.right, ctx, {
         ...params,
         path: [...params.path, "allOf", 1]
       });
@@ -67108,11 +67108,11 @@ var init_json_schema_processors = __esm({
       json4.type = "array";
       const prefixPath = ctx.target === "draft-2020-12" ? "prefixItems" : "items";
       const restPath = ctx.target === "draft-2020-12" ? "items" : ctx.target === "openapi-3.0" ? "items" : "additionalItems";
-      const prefixItems = def.items.map((x, i) => process2(x, ctx, {
+      const prefixItems = def.items.map((x, i) => process3(x, ctx, {
         ...params,
         path: [...params.path, prefixPath, i]
       }));
-      const rest = def.rest ? process2(def.rest, ctx, {
+      const rest = def.rest ? process3(def.rest, ctx, {
         ...params,
         path: [...params.path, restPath, ...ctx.target === "openapi-3.0" ? [def.items.length] : []]
       }) : null;
@@ -67152,7 +67152,7 @@ var init_json_schema_processors = __esm({
       const keyBag = keyType._zod.bag;
       const patterns = keyBag?.patterns;
       if (def.mode === "loose" && patterns && patterns.size > 0) {
-        const valueSchema = process2(def.valueType, ctx, {
+        const valueSchema = process3(def.valueType, ctx, {
           ...params,
           path: [...params.path, "patternProperties", "*"]
         });
@@ -67162,12 +67162,12 @@ var init_json_schema_processors = __esm({
         }
       } else {
         if (ctx.target === "draft-07" || ctx.target === "draft-2020-12") {
-          json4.propertyNames = process2(def.keyType, ctx, {
+          json4.propertyNames = process3(def.keyType, ctx, {
             ...params,
             path: [...params.path, "propertyNames"]
           });
         }
-        json4.additionalProperties = process2(def.valueType, ctx, {
+        json4.additionalProperties = process3(def.valueType, ctx, {
           ...params,
           path: [...params.path, "additionalProperties"]
         });
@@ -67182,7 +67182,7 @@ var init_json_schema_processors = __esm({
     };
     nullableProcessor = (schema2, ctx, json4, params) => {
       const def = schema2._zod.def;
-      const inner = process2(def.innerType, ctx, params);
+      const inner = process3(def.innerType, ctx, params);
       const seen = ctx.seen.get(schema2);
       if (ctx.target === "openapi-3.0") {
         seen.ref = def.innerType;
@@ -67193,20 +67193,20 @@ var init_json_schema_processors = __esm({
     };
     nonoptionalProcessor = (schema2, ctx, _json, params) => {
       const def = schema2._zod.def;
-      process2(def.innerType, ctx, params);
+      process3(def.innerType, ctx, params);
       const seen = ctx.seen.get(schema2);
       seen.ref = def.innerType;
     };
     defaultProcessor = (schema2, ctx, json4, params) => {
       const def = schema2._zod.def;
-      process2(def.innerType, ctx, params);
+      process3(def.innerType, ctx, params);
       const seen = ctx.seen.get(schema2);
       seen.ref = def.innerType;
       json4.default = JSON.parse(JSON.stringify(def.defaultValue));
     };
     prefaultProcessor = (schema2, ctx, json4, params) => {
       const def = schema2._zod.def;
-      process2(def.innerType, ctx, params);
+      process3(def.innerType, ctx, params);
       const seen = ctx.seen.get(schema2);
       seen.ref = def.innerType;
       if (ctx.io === "input")
@@ -67214,7 +67214,7 @@ var init_json_schema_processors = __esm({
     };
     catchProcessor = (schema2, ctx, json4, params) => {
       const def = schema2._zod.def;
-      process2(def.innerType, ctx, params);
+      process3(def.innerType, ctx, params);
       const seen = ctx.seen.get(schema2);
       seen.ref = def.innerType;
       let catchValue;
@@ -67228,32 +67228,32 @@ var init_json_schema_processors = __esm({
     pipeProcessor = (schema2, ctx, _json, params) => {
       const def = schema2._zod.def;
       const innerType = ctx.io === "input" ? def.in._zod.def.type === "transform" ? def.out : def.in : def.out;
-      process2(innerType, ctx, params);
+      process3(innerType, ctx, params);
       const seen = ctx.seen.get(schema2);
       seen.ref = innerType;
     };
     readonlyProcessor = (schema2, ctx, json4, params) => {
       const def = schema2._zod.def;
-      process2(def.innerType, ctx, params);
+      process3(def.innerType, ctx, params);
       const seen = ctx.seen.get(schema2);
       seen.ref = def.innerType;
       json4.readOnly = true;
     };
     promiseProcessor = (schema2, ctx, _json, params) => {
       const def = schema2._zod.def;
-      process2(def.innerType, ctx, params);
+      process3(def.innerType, ctx, params);
       const seen = ctx.seen.get(schema2);
       seen.ref = def.innerType;
     };
     optionalProcessor = (schema2, ctx, _json, params) => {
       const def = schema2._zod.def;
-      process2(def.innerType, ctx, params);
+      process3(def.innerType, ctx, params);
       const seen = ctx.seen.get(schema2);
       seen.ref = def.innerType;
     };
     lazyProcessor = (schema2, ctx, _json, params) => {
       const innerType = schema2._zod.innerType;
-      process2(innerType, ctx, params);
+      process3(innerType, ctx, params);
       const seen = ctx.seen.get(schema2);
       seen.ref = innerType;
     };
@@ -67359,7 +67359,7 @@ var init_json_schema_generator = __esm({
        * This must be called before emit().
        */
       process(schema2, _params = { path: [], schemaPath: [] }) {
-        return process2(schema2, this.ctx, _params);
+        return process3(schema2, this.ctx, _params);
       }
       /**
        * Emit the final JSON Schema after processing.
@@ -67652,7 +67652,7 @@ __export(core_exports2, {
   parse: () => parse,
   parseAsync: () => parseAsync,
   prettifyError: () => prettifyError,
-  process: () => process2,
+  process: () => process3,
   regexes: () => regexes_exports,
   registry: () => registry2,
   safeDecode: () => safeDecode,
@@ -99803,6 +99803,299 @@ import { existsSync as existsSync8, readdirSync as readdirSync2 } from "node:fs"
 import { readFile as readFile5 } from "node:fs/promises";
 import { join as join25 } from "node:path";
 
+// node_modules/.pnpm/package-manager-detector@1.6.0/node_modules/package-manager-detector/dist/commands.mjs
+function dashDashArg(agent2, agentCommand) {
+  return (args2) => {
+    if (args2.length > 1) {
+      return [agent2, agentCommand, args2[0], "--", ...args2.slice(1)];
+    } else {
+      return [agent2, agentCommand, args2[0]];
+    }
+  };
+}
+function denoExecute() {
+  return (args2) => {
+    return ["deno", "run", `npm:${args2[0]}`, ...args2.slice(1)];
+  };
+}
+var npm = {
+  "agent": ["npm", 0],
+  "run": dashDashArg("npm", "run"),
+  "install": ["npm", "i", 0],
+  "frozen": ["npm", "ci", 0],
+  "global": ["npm", "i", "-g", 0],
+  "add": ["npm", "i", 0],
+  "upgrade": ["npm", "update", 0],
+  "upgrade-interactive": null,
+  "dedupe": ["npm", "dedupe", 0],
+  "execute": ["npx", 0],
+  "execute-local": ["npx", 0],
+  "uninstall": ["npm", "uninstall", 0],
+  "global_uninstall": ["npm", "uninstall", "-g", 0]
+};
+var yarn = {
+  "agent": ["yarn", 0],
+  "run": ["yarn", "run", 0],
+  "install": ["yarn", "install", 0],
+  "frozen": ["yarn", "install", "--frozen-lockfile", 0],
+  "global": ["yarn", "global", "add", 0],
+  "add": ["yarn", "add", 0],
+  "upgrade": ["yarn", "upgrade", 0],
+  "upgrade-interactive": ["yarn", "upgrade-interactive", 0],
+  "dedupe": null,
+  "execute": ["npx", 0],
+  "execute-local": dashDashArg("yarn", "exec"),
+  "uninstall": ["yarn", "remove", 0],
+  "global_uninstall": ["yarn", "global", "remove", 0]
+};
+var yarnBerry = {
+  ...yarn,
+  "frozen": ["yarn", "install", "--immutable", 0],
+  "upgrade": ["yarn", "up", 0],
+  "upgrade-interactive": ["yarn", "up", "-i", 0],
+  "dedupe": ["yarn", "dedupe", 0],
+  "execute": ["yarn", "dlx", 0],
+  "execute-local": ["yarn", "exec", 0],
+  // Yarn 2+ removed 'global', see https://github.com/yarnpkg/berry/issues/821
+  "global": ["npm", "i", "-g", 0],
+  "global_uninstall": ["npm", "uninstall", "-g", 0]
+};
+var pnpm = {
+  "agent": ["pnpm", 0],
+  "run": ["pnpm", "run", 0],
+  "install": ["pnpm", "i", 0],
+  "frozen": ["pnpm", "i", "--frozen-lockfile", 0],
+  "global": ["pnpm", "add", "-g", 0],
+  "add": ["pnpm", "add", 0],
+  "upgrade": ["pnpm", "update", 0],
+  "upgrade-interactive": ["pnpm", "update", "-i", 0],
+  "dedupe": ["pnpm", "dedupe", 0],
+  "execute": ["pnpm", "dlx", 0],
+  "execute-local": ["pnpm", "exec", 0],
+  "uninstall": ["pnpm", "remove", 0],
+  "global_uninstall": ["pnpm", "remove", "--global", 0]
+};
+var bun = {
+  "agent": ["bun", 0],
+  "run": ["bun", "run", 0],
+  "install": ["bun", "install", 0],
+  "frozen": ["bun", "install", "--frozen-lockfile", 0],
+  "global": ["bun", "add", "-g", 0],
+  "add": ["bun", "add", 0],
+  "upgrade": ["bun", "update", 0],
+  "upgrade-interactive": ["bun", "update", "-i", 0],
+  "dedupe": null,
+  "execute": ["bun", "x", 0],
+  "execute-local": ["bun", "x", 0],
+  "uninstall": ["bun", "remove", 0],
+  "global_uninstall": ["bun", "remove", "-g", 0]
+};
+var deno = {
+  "agent": ["deno", 0],
+  "run": ["deno", "task", 0],
+  "install": ["deno", "install", 0],
+  "frozen": ["deno", "install", "--frozen", 0],
+  "global": ["deno", "install", "-g", 0],
+  "add": ["deno", "add", 0],
+  "upgrade": ["deno", "outdated", "--update", 0],
+  "upgrade-interactive": ["deno", "outdated", "--update", 0],
+  "dedupe": null,
+  "execute": denoExecute(),
+  "execute-local": ["deno", "task", "--eval", 0],
+  "uninstall": ["deno", "remove", 0],
+  "global_uninstall": ["deno", "uninstall", "-g", 0]
+};
+var COMMANDS = {
+  "npm": npm,
+  "yarn": yarn,
+  "yarn@berry": yarnBerry,
+  "pnpm": pnpm,
+  // pnpm v6.x or below
+  "pnpm@6": {
+    ...pnpm,
+    run: dashDashArg("pnpm", "run")
+  },
+  "bun": bun,
+  "deno": deno
+};
+function resolveCommand(agent2, command, args2) {
+  const value2 = COMMANDS[agent2][command];
+  return constructCommand(value2, args2);
+}
+function constructCommand(value2, args2) {
+  if (value2 == null)
+    return null;
+  const list = typeof value2 === "function" ? value2(args2) : value2.flatMap((v) => {
+    if (typeof v === "number")
+      return args2;
+    return [v];
+  });
+  return {
+    command: list[0],
+    args: list.slice(1)
+  };
+}
+
+// node_modules/.pnpm/package-manager-detector@1.6.0/node_modules/package-manager-detector/dist/constants.mjs
+var AGENTS = [
+  "npm",
+  "yarn",
+  "yarn@berry",
+  "pnpm",
+  "pnpm@6",
+  "bun",
+  "deno"
+];
+var LOCKS = {
+  "bun.lock": "bun",
+  "bun.lockb": "bun",
+  "deno.lock": "deno",
+  "pnpm-lock.yaml": "pnpm",
+  "pnpm-workspace.yaml": "pnpm",
+  "yarn.lock": "yarn",
+  "package-lock.json": "npm",
+  "npm-shrinkwrap.json": "npm"
+};
+var INSTALL_METADATA = {
+  "node_modules/.deno/": "deno",
+  "node_modules/.pnpm/": "pnpm",
+  "node_modules/.yarn-state.yml": "yarn",
+  // yarn v2+ (node-modules)
+  "node_modules/.yarn_integrity": "yarn",
+  // yarn v1
+  "node_modules/.package-lock.json": "npm",
+  ".pnp.cjs": "yarn",
+  // yarn v3+ (pnp)
+  ".pnp.js": "yarn",
+  // yarn v2 (pnp)
+  "bun.lock": "bun",
+  "bun.lockb": "bun"
+};
+
+// node_modules/.pnpm/package-manager-detector@1.6.0/node_modules/package-manager-detector/dist/detect.mjs
+import fs from "node:fs/promises";
+import path from "node:path";
+import process2 from "node:process";
+async function pathExists(path22, type2) {
+  try {
+    const stat = await fs.stat(path22);
+    return type2 === "file" ? stat.isFile() : stat.isDirectory();
+  } catch {
+    return false;
+  }
+}
+function* lookup(cwd = process2.cwd()) {
+  let directory = path.resolve(cwd);
+  const { root } = path.parse(directory);
+  while (directory && directory !== root) {
+    yield directory;
+    directory = path.dirname(directory);
+  }
+}
+async function parsePackageJson(filepath, options) {
+  if (!filepath || !await pathExists(filepath, "file"))
+    return null;
+  return await handlePackageManager(filepath, options);
+}
+async function detect(options = {}) {
+  const {
+    cwd,
+    strategies = ["lockfile", "packageManager-field", "devEngines-field"]
+  } = options;
+  let stopDir;
+  if (typeof options.stopDir === "string") {
+    const resolved = path.resolve(options.stopDir);
+    stopDir = (dir) => dir === resolved;
+  } else {
+    stopDir = options.stopDir;
+  }
+  for (const directory of lookup(cwd)) {
+    for (const strategy of strategies) {
+      switch (strategy) {
+        case "lockfile": {
+          for (const lock of Object.keys(LOCKS)) {
+            if (await pathExists(path.join(directory, lock), "file")) {
+              const name = LOCKS[lock];
+              const result = await parsePackageJson(path.join(directory, "package.json"), options);
+              if (result)
+                return result;
+              else
+                return { name, agent: name };
+            }
+          }
+          break;
+        }
+        case "packageManager-field":
+        case "devEngines-field": {
+          const result = await parsePackageJson(path.join(directory, "package.json"), options);
+          if (result)
+            return result;
+          break;
+        }
+        case "install-metadata": {
+          for (const metadata of Object.keys(INSTALL_METADATA)) {
+            const fileOrDir = metadata.endsWith("/") ? "dir" : "file";
+            if (await pathExists(path.join(directory, metadata), fileOrDir)) {
+              const name = INSTALL_METADATA[metadata];
+              const agent2 = name === "yarn" ? isMetadataYarnClassic(metadata) ? "yarn" : "yarn@berry" : name;
+              return { name, agent: agent2 };
+            }
+          }
+          break;
+        }
+      }
+    }
+    if (stopDir?.(directory))
+      break;
+  }
+  return null;
+}
+function getNameAndVer(pkg) {
+  const handelVer = (version3) => version3?.match(/\d+(\.\d+){0,2}/)?.[0] ?? version3;
+  if (typeof pkg.packageManager === "string") {
+    const [name, ver] = pkg.packageManager.replace(/^\^/, "").split("@");
+    return { name, ver: handelVer(ver) };
+  }
+  if (typeof pkg.devEngines?.packageManager?.name === "string") {
+    return {
+      name: pkg.devEngines.packageManager.name,
+      ver: handelVer(pkg.devEngines.packageManager.version)
+    };
+  }
+  return void 0;
+}
+async function handlePackageManager(filepath, options) {
+  try {
+    const content = await fs.readFile(filepath, "utf8");
+    const pkg = options.packageJsonParser ? await options.packageJsonParser(content, filepath) : JSON.parse(content);
+    let agent2;
+    const nameAndVer = getNameAndVer(pkg);
+    if (nameAndVer) {
+      const name = nameAndVer.name;
+      const ver = nameAndVer.ver;
+      let version3 = ver;
+      if (name === "yarn" && ver && Number.parseInt(ver) > 1) {
+        agent2 = "yarn@berry";
+        version3 = "berry";
+        return { name, agent: agent2, version: version3 };
+      } else if (name === "pnpm" && ver && Number.parseInt(ver) < 7) {
+        agent2 = "pnpm@6";
+        return { name, agent: agent2, version: version3 };
+      } else if (AGENTS.includes(name)) {
+        agent2 = name;
+        return { name, agent: agent2, version: version3 };
+      } else {
+        return options.onUnknown?.(pkg.packageManager) ?? null;
+      }
+    }
+  } catch {
+  }
+  return null;
+}
+function isMetadataYarnClassic(metadataPath) {
+  return metadataPath.endsWith(".yarn_integrity");
+}
+
 // agents/claude.ts
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { chmodSync as chmodSync2, mkdirSync as mkdirSync4, writeFileSync as writeFileSync3 } from "node:fs";
@@ -99838,6 +100131,12 @@ function resolveRung(params) {
   const clamped = Math.min(1, Math.max(0, params.position));
   return rungs[Math.floor(clamped * (rungs.length - 1))];
 }
+function rungPosition(params) {
+  const rungs = offeredRungs(params.published);
+  const index = rungs.indexOf(params.rung);
+  if (index === -1) return void 0;
+  return rungs.length > 1 ? index / (rungs.length - 1) : 0;
+}
 
 // models.ts
 function provider(config3) {
@@ -99891,7 +100190,11 @@ var providers = {
     envVars: ["OPENAI_API_KEY"],
     managedCredentials: ["CODEX_AUTH_JSON"],
     models: {
-      gpt: {
+      // Sol/Terra/Luna are OpenAI's durable capability tiers, so they ARE the
+      // brand-tier names the slug convention asks for — the pre-5.6 `gpt` /
+      // `gpt-pro` / `gpt-mini` slugs are holdovers from the retired GPT / GPT Pro
+      // / GPT Mini tiering and are carried below as deprecated aliases.
+      "gpt-sol": {
         displayName: "GPT Sol",
         resolve: "openai/gpt-5.6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
@@ -99902,24 +100205,23 @@ var providers = {
       // Sol served at reasoning.mode=pro — same $/token as Sol, just more tokens
       // burned; not a pricier premium tier. models.dev has no -pro id, so direct-key
       // (BYOK) resolves to plain Sol; only the Router/OpenRouter path gets sol-pro.
-      "gpt-pro": {
+      "gpt-sol-pro": {
         displayName: "GPT Sol Pro",
         description: "Maximum reasoning effort",
         resolve: "openai/gpt-5.6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
         openRouterResolve: "openrouter/openai/gpt-5.6-sol-pro",
-        subagentModel: "gpt"
+        subagentModel: "gpt-sol"
       },
-      // gpt-5.6's balanced mid-tier (Sol/Terra/Luna are durable capability tiers,
-      // not version bumps). selectable on its own and doubles as `gpt`'s cheaper
-      // lens-fanout subagent — replaces the old hidden gpt-5.4 subagent target.
+      // gpt-5.6's balanced mid-tier. selectable on its own and doubles as Sol's
+      // cheaper lens-fanout subagent — replaces the old hidden gpt-5.4 target.
       "gpt-terra": {
         displayName: "GPT Terra",
         resolve: "openai/gpt-5.6-terra",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
         openRouterResolve: "openrouter/openai/gpt-5.6-terra"
       },
-      "gpt-mini": {
+      "gpt-luna": {
         displayName: "GPT Luna",
         resolve: "openai/gpt-5.6-luna",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
@@ -99934,20 +100236,40 @@ var providers = {
         displayName: "GPT Codex",
         resolve: "openai/gpt-5.3-codex",
         openRouterResolve: "openrouter/openai/gpt-5.3-codex",
-        fallback: "openai/gpt"
+        fallback: "openai/gpt-sol"
       },
       "gpt-codex-mini": {
         displayName: "GPT Codex Mini",
         resolve: "openai/gpt-5.1-codex-mini",
         openRouterResolve: "openrouter/openai/gpt-5.1-codex-mini",
-        fallback: "openai/gpt-mini"
+        fallback: "openai/gpt-luna"
+      },
+      // pre-5.6 tier slugs. the tiers themselves were renamed Sol/Sol Pro/Luna,
+      // so these fold forward rather than describing anything that still runs.
+      gpt: {
+        displayName: "GPT",
+        resolve: "openai/gpt-5.6-sol",
+        openRouterResolve: "openrouter/openai/gpt-5.6-sol",
+        fallback: "openai/gpt-sol"
+      },
+      "gpt-pro": {
+        displayName: "GPT Pro",
+        resolve: "openai/gpt-5.6-sol",
+        openRouterResolve: "openrouter/openai/gpt-5.6-sol-pro",
+        fallback: "openai/gpt-sol-pro"
+      },
+      "gpt-mini": {
+        displayName: "GPT Mini",
+        resolve: "openai/gpt-5.6-luna",
+        openRouterResolve: "openrouter/openai/gpt-5.6-luna",
+        fallback: "openai/gpt-luna"
       },
-      // dropped hidden subagent tier — folds stored pins forward to gpt (Sol).
+      // dropped hidden subagent tier — folds stored pins forward to Sol.
       "gpt-5.4": {
         displayName: "GPT 5.4",
         resolve: "openai/gpt-5.4",
         openRouterResolve: "openrouter/openai/gpt-5.4",
-        fallback: "openai/gpt"
+        fallback: "openai/gpt-sol"
       },
       o3: {
         displayName: "O3",
@@ -99975,9 +100297,9 @@ var providers = {
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
-        resolve: "google/gemini-3.5-flash",
+        resolve: "google/gemini-3.6-flash",
         effort: ["minimal", "low", "medium", "high"],
-        openRouterResolve: "openrouter/google/gemini-3.5-flash"
+        openRouterResolve: "openrouter/google/gemini-3.6-flash"
       }
     }
   }),
@@ -99987,26 +100309,26 @@ var providers = {
     models: {
       grok: {
         displayName: "Grok",
-        resolve: "xai/grok-4.3",
-        effort: ["none", "low", "medium", "high"],
-        openRouterResolve: "openrouter/x-ai/grok-4.3",
+        resolve: "xai/grok-4.5",
+        effort: ["low", "medium", "high"],
+        openRouterResolve: "openrouter/x-ai/grok-4.5",
         preferred: true
       },
       // legacy aliases — xAI retired the entire fast/code-fast line on
       // 2026-05-15 (https://docs.x.ai/developers/migration/may-15-deprecation)
       // and now redirects every deprecated text-model slug to grok-4.3 at
       // standard pricing. fall back to the live `xai/grok` so the alias
-      // chain resolves to grok-4.3 for both direct-key and OpenRouter users.
+      // chain resolves to grok-4.5 for both direct-key and OpenRouter users.
       "grok-fast": {
         displayName: "Grok Fast",
         resolve: "xai/grok-4-1-fast",
-        openRouterResolve: "openrouter/x-ai/grok-4.3",
+        openRouterResolve: "openrouter/x-ai/grok-4.5",
         fallback: "xai/grok"
       },
       "grok-code-fast": {
         displayName: "Grok Code Fast",
         resolve: "xai/grok-code-fast-1",
-        openRouterResolve: "openrouter/x-ai/grok-4.3",
+        openRouterResolve: "openrouter/x-ai/grok-4.5",
         fallback: "xai/grok"
       }
     }
@@ -100023,12 +100345,25 @@ var providers = {
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro",
         preferred: true
       },
+      // DeepSeek upgrades the `deepseek-v4-flash` API model in place, so the
+      // direct `resolve` needs no version. OpenRouter instead forked the 0731
+      // release into its own id and left the April preview live under the
+      // unversioned one at a HIGHER price ($0.14/$0.28 vs $0.09/$0.18) — so the
+      // OpenRouter route can never use the bare id. it tracks the rolling
+      // `~deepseek/*-latest` pointer (rule 4), which resolves to 0731 at the
+      // same price today and follows the next in-place upgrade on its own,
+      // rather than pinning a dated snapshot that goes stale every release.
+      // 0731 gained a `low` rung and renamed the top to `max`, unlike Pro
+      // (`high, max` direct / `high, xhigh` via OpenRouter). that ladder now
+      // reads the same on BOTH routes — the in-place direct upgrade caught up
+      // to the fork — so `low`, not `high`, is position 0 either way, which is
+      // why the OSS effort floor in `main.ts` pins the `high` rung by name.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
         resolve: "deepseek/deepseek-v4-flash",
-        effort: ["high", "max"],
-        openRouterEffort: ["high", "xhigh"],
-        openRouterResolve: "openrouter/deepseek/deepseek-v4-flash"
+        effort: ["low", "high", "max"],
+        openRouterEffort: ["low", "high", "max"],
+        openRouterResolve: "openrouter/~deepseek/deepseek-v4-flash-latest"
       },
       // legacy aliases — deepseek retires these on 2026-07-24; transparently
       // upgrade existing users to the v4 family via the fallback chain.
@@ -100097,30 +100432,30 @@ var providers = {
         resolve: "opencode/claude-haiku-4-5",
         openRouterResolve: "openrouter/anthropic/claude-haiku-4.5"
       },
-      gpt: {
+      "gpt-sol": {
         displayName: "GPT Sol",
         resolve: "opencode/gpt-5.6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
         openRouterResolve: "openrouter/openai/gpt-5.6-sol",
         subagentModel: "gpt-terra"
       },
-      // see openai/gpt-pro — Zen has no -pro id, so direct resolves to plain Sol.
-      "gpt-pro": {
+      // see openai/gpt-sol-pro — Zen has no -pro id, so direct resolves to plain Sol.
+      "gpt-sol-pro": {
         displayName: "GPT Sol Pro",
         description: "Maximum reasoning effort",
         resolve: "opencode/gpt-5.6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
         openRouterResolve: "openrouter/openai/gpt-5.6-sol-pro",
-        subagentModel: "gpt"
+        subagentModel: "gpt-sol"
       },
-      // gpt-5.6 balanced mid-tier — selectable + `gpt`'s subagent. see openai above.
+      // gpt-5.6 balanced mid-tier — selectable + Sol's subagent. see openai above.
       "gpt-terra": {
         displayName: "GPT Terra",
         resolve: "opencode/gpt-5.6-terra",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
         openRouterResolve: "openrouter/openai/gpt-5.6-terra"
       },
-      "gpt-mini": {
+      "gpt-luna": {
         displayName: "GPT Luna",
         resolve: "opencode/gpt-5.6-luna",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
@@ -100131,20 +100466,39 @@ var providers = {
         displayName: "GPT Codex",
         resolve: "opencode/gpt-5.3-codex",
         openRouterResolve: "openrouter/openai/gpt-5.3-codex",
-        fallback: "opencode/gpt"
+        fallback: "opencode/gpt-sol"
       },
       "gpt-codex-mini": {
         displayName: "GPT Codex Mini",
         resolve: "opencode/gpt-5.1-codex-mini",
         openRouterResolve: "openrouter/openai/gpt-5.1-codex-mini",
-        fallback: "opencode/gpt-mini"
+        fallback: "opencode/gpt-luna"
+      },
+      // pre-5.6 tier slugs — see openai provider above.
+      gpt: {
+        displayName: "GPT",
+        resolve: "opencode/gpt-5.6-sol",
+        openRouterResolve: "openrouter/openai/gpt-5.6-sol",
+        fallback: "opencode/gpt-sol"
+      },
+      "gpt-pro": {
+        displayName: "GPT Pro",
+        resolve: "opencode/gpt-5.6-sol",
+        openRouterResolve: "openrouter/openai/gpt-5.6-sol-pro",
+        fallback: "opencode/gpt-sol-pro"
       },
-      // dropped hidden subagent tier — folds stored pins forward to gpt (Sol).
+      "gpt-mini": {
+        displayName: "GPT Mini",
+        resolve: "opencode/gpt-5.6-luna",
+        openRouterResolve: "openrouter/openai/gpt-5.6-luna",
+        fallback: "opencode/gpt-luna"
+      },
+      // dropped hidden subagent tier — folds stored pins forward to Sol.
       "gpt-5.4": {
         displayName: "GPT 5.4",
         resolve: "opencode/gpt-5.4",
         openRouterResolve: "openrouter/openai/gpt-5.4",
-        fallback: "opencode/gpt"
+        fallback: "opencode/gpt-sol"
       },
       "gemini-pro": {
         displayName: "Gemini Pro",
@@ -100155,21 +100509,19 @@ var providers = {
       },
       "gemini-flash": {
         displayName: "Gemini Flash",
-        resolve: "opencode/gemini-3.5-flash",
+        resolve: "opencode/gemini-3.6-flash",
         effort: ["minimal", "low", "medium", "high"],
-        openRouterResolve: "openrouter/google/gemini-3.5-flash"
+        openRouterResolve: "openrouter/google/gemini-3.6-flash"
       },
       "kimi-k2": {
         displayName: "Kimi K2",
-        // opencode Zen serves only up to k2.6; the OpenRouter fallback (used for
-        // router/oss proxy runs) takes the newer k2.7-code.
-        resolve: "opencode/kimi-k2.6",
+        resolve: "opencode/kimi-k2.7-code",
         openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code"
       },
-      // Zen serves m2.5; the funded OpenRouter path tracks the current m2.7.
+      // slug pins the m2 line for DB stability; resolve tracks the current m2.7.
       "minimax-m2.5": {
         displayName: "MiniMax M2",
-        resolve: "opencode/minimax-m2.5",
+        resolve: "opencode/minimax-m2.7",
         openRouterResolve: "openrouter/minimax/minimax-m2.7"
       },
       "gpt-5-nano": {
@@ -100300,30 +100652,30 @@ var providers = {
       // alias): after the Sol/Terra/Luna rename, ~gpt-mini-latest no longer maps
       // to Luna, so rolling aliases would silently diverge `gpt`/`gpt-mini` from
       // the chosen tiers across funding paths.
-      gpt: {
+      "gpt-sol": {
         displayName: "GPT Sol",
         resolve: "openrouter/openai/gpt-5.6-sol",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
         openRouterResolve: "openrouter/openai/gpt-5.6-sol",
         subagentModel: "gpt-terra"
       },
-      // see openai/gpt-pro. openrouter serves sol-pro directly on both routes.
-      "gpt-pro": {
+      // see openai/gpt-sol-pro. openrouter serves sol-pro directly on both routes.
+      "gpt-sol-pro": {
         displayName: "GPT Sol Pro",
         description: "Maximum reasoning effort",
         resolve: "openrouter/openai/gpt-5.6-sol-pro",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
         openRouterResolve: "openrouter/openai/gpt-5.6-sol-pro",
-        subagentModel: "gpt"
+        subagentModel: "gpt-sol"
       },
-      // gpt-5.6 balanced mid-tier — selectable + `gpt`'s subagent. see openai above.
+      // gpt-5.6 balanced mid-tier — selectable + Sol's subagent. see openai above.
       "gpt-terra": {
         displayName: "GPT Terra",
         resolve: "openrouter/openai/gpt-5.6-terra",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
         openRouterResolve: "openrouter/openai/gpt-5.6-terra"
       },
-      "gpt-mini": {
+      "gpt-luna": {
         displayName: "GPT Luna",
         resolve: "openrouter/openai/gpt-5.6-luna",
         effort: ["none", "low", "medium", "high", "xhigh", "max"],
@@ -100334,20 +100686,39 @@ var providers = {
         displayName: "GPT Codex",
         resolve: "openrouter/openai/gpt-5.3-codex",
         openRouterResolve: "openrouter/openai/gpt-5.3-codex",
-        fallback: "openrouter/gpt"
+        fallback: "openrouter/gpt-sol"
       },
       "gpt-codex-mini": {
         displayName: "GPT Codex Mini",
         resolve: "openrouter/openai/gpt-5.1-codex-mini",
         openRouterResolve: "openrouter/openai/gpt-5.1-codex-mini",
-        fallback: "openrouter/gpt-mini"
+        fallback: "openrouter/gpt-luna"
+      },
+      // pre-5.6 tier slugs — see openai provider above.
+      gpt: {
+        displayName: "GPT",
+        resolve: "openrouter/openai/gpt-5.6-sol",
+        openRouterResolve: "openrouter/openai/gpt-5.6-sol",
+        fallback: "openrouter/gpt-sol"
       },
-      // dropped hidden subagent tier — folds stored pins forward to gpt (Sol).
+      "gpt-pro": {
+        displayName: "GPT Pro",
+        resolve: "openrouter/openai/gpt-5.6-sol-pro",
+        openRouterResolve: "openrouter/openai/gpt-5.6-sol-pro",
+        fallback: "openrouter/gpt-sol-pro"
+      },
+      "gpt-mini": {
+        displayName: "GPT Mini",
+        resolve: "openrouter/openai/gpt-5.6-luna",
+        openRouterResolve: "openrouter/openai/gpt-5.6-luna",
+        fallback: "openrouter/gpt-luna"
+      },
+      // dropped hidden subagent tier — folds stored pins forward to Sol.
       "gpt-5.4": {
         displayName: "GPT 5.4",
         resolve: "openrouter/openai/gpt-5.4",
         openRouterResolve: "openrouter/openai/gpt-5.4",
-        fallback: "openrouter/gpt"
+        fallback: "openrouter/gpt-sol"
       },
       "o4-mini": {
         displayName: "O4 Mini",
@@ -100370,9 +100741,9 @@ var providers = {
       },
       grok: {
         displayName: "Grok",
-        resolve: "openrouter/x-ai/grok-4.3",
-        effort: ["none", "low", "medium", "high"],
-        openRouterResolve: "openrouter/x-ai/grok-4.3"
+        resolve: "openrouter/x-ai/grok-4.5",
+        effort: ["low", "medium", "high"],
+        openRouterResolve: "openrouter/x-ai/grok-4.5"
       },
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
@@ -100380,11 +100751,13 @@ var providers = {
         effort: ["high", "xhigh"],
         openRouterResolve: "openrouter/deepseek/deepseek-v4-pro"
       },
+      // rolling pointer, not the bare id — see `deepseek/deepseek-flash` for why
+      // OpenRouter's unversioned `deepseek-v4-flash` is the stale April preview.
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
-        resolve: "openrouter/deepseek/deepseek-v4-flash",
-        effort: ["high", "xhigh"],
-        openRouterResolve: "openrouter/deepseek/deepseek-v4-flash"
+        resolve: "openrouter/~deepseek/deepseek-v4-flash-latest",
+        effort: ["low", "high", "max"],
+        openRouterResolve: "openrouter/~deepseek/deepseek-v4-flash-latest"
       },
       // legacy alias — deepseek retires this on 2026-07-24; transparently
       // upgrade existing users to the v4 family via the fallback chain.
@@ -100465,7 +100838,7 @@ var modelAliases = Object.entries(providers).flatMap(
 var AUTO_EFFICIENT = "auto/efficient";
 var AUTO_INTELLIGENT = "auto/intelligent";
 var AUTO_TIER_TARGET = {
-  [AUTO_EFFICIENT]: "deepseek/deepseek-pro",
+  [AUTO_EFFICIENT]: "deepseek/deepseek-flash",
   [AUTO_INTELLIGENT]: "anthropic/claude-opus"
 };
 function isAutoTier(slug2) {
@@ -100514,6 +100887,26 @@ if (!defaultProxyAlias?.openRouterResolve) {
 }
 var DEFAULT_PROXY_MODEL = defaultProxyAlias.openRouterResolve;
 var defaultProxyDisplayName = defaultProxyAlias.displayName;
+var OSS_MODEL_ALLOWLIST = [
+  "deepseek/deepseek-flash",
+  "deepseek/deepseek-pro",
+  "openai/gpt-luna",
+  "openrouter/minimax-m2.5",
+  "moonshotai/kimi-k2"
+];
+var OSS_RECOMMENDED_MODEL = AUTO_TIER_TARGET[AUTO_EFFICIENT];
+var ossAllowedTargets = new Set(
+  OSS_MODEL_ALLOWLIST.map((slug2) => {
+    const target = resolveOpenRouterModel(slug2);
+    if (!target) throw new Error(`OSS_MODEL_ALLOWLIST: ${slug2} has no openRouterResolve`);
+    return target;
+  })
+);
+function isOssAllowedModel(slug2) {
+  if (!slug2) return false;
+  const target = resolveOpenRouterModel(slug2);
+  return target !== void 0 && ossAllowedTargets.has(target);
+}
 var BEDROCK_MODEL_ID_ENV = "BEDROCK_MODEL_ID";
 var VERTEX_MODEL_ID_ENV = "VERTEX_MODEL_ID";
 var OPENAI_COMPATIBLE_PROVIDER = "openai-compatible";
@@ -101119,7 +101512,21 @@ var PROVIDER_ERROR_PATTERNS = [
   { regex: /\bFreeUsageLimitError\b/, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
   { regex: /Insufficient balance/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
   { regex: /credit balance is too low/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
-  { regex: /spending cap/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
+  // "spending cap" (Gemini) and "spending limit" (xAI, #1076) are the same
+  // condition in two house styles — a configured ceiling was reached.
+  { regex: /spending (?:cap|limit)/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
+  // xAI exhausts credits and the monthly ceiling in one 403 whose status code
+  // sits nowhere near a `status:` key, so no status pattern below fires (#1076).
+  { regex: /used all available credits/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
+  // the OpenRouter shapes `isRouterKeylimitExhaustedError` matches. on a Router
+  // run those mean the PULLFROG wallet is empty and `renderRunError` returns a
+  // `BillingError` before ever reaching this list; on a BYOK run the very same
+  // wire text means the user's OWN OpenRouter wallet is empty, and this entry is
+  // what gives them the right dashboard instead of ours. see #1135.
+  {
+    regex: /requires more credits|Key limit exceeded \(total limit\)/i,
+    label: PROVIDER_BILLING_EXHAUSTED_LABEL
+  },
   // auth patterns must come BEFORE rate-limit patterns. OpenRouter 401 error
   // payloads carry `x-ratelimit-*` response headers in the dump, and the
   // free-form rate-limit regex below would otherwise win on word-boundary
@@ -101215,6 +101622,12 @@ function resolveRunAlias(ctx) {
   if (!model) return void 0;
   return modelAliases.find((a) => !a.fallback && a.resolve === model) ?? matchHostedAnthropicAlias(model);
 }
+function ossEffortFloor(ctx) {
+  const alias = resolveRunAlias(ctx);
+  const published = alias?.openRouterEffort ?? alias?.effort;
+  if (!published) return 0;
+  return rungPosition({ rung: "high", published }) ?? 0;
+}
 function resolveRunEffort(ctx) {
   const configured = ctx.payload.effort !== void 0;
   const position = ctx.payload.effort ?? DEFAULT_EFFORT_POSITION;
@@ -101245,7 +101658,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.51",
+  version: "0.1.53",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -108902,6 +109315,41 @@ function bootstrapPullfrogDataDir() {
   }
 }
 
+// utils/worktree.ts
+async function dirtyTrackedPaths() {
+  const result = await spawn({
+    cmd: "git",
+    args: ["diff", "--name-only", "HEAD"],
+    env: process.env,
+    activityTimeout: 0
+  });
+  if (result.exitCode !== 0) {
+    throw new Error(
+      `git diff --name-only HEAD failed (exit ${result.exitCode}): ${result.stderr.trim() || "(no stderr)"}`
+    );
+  }
+  return new Set(result.stdout.split("\n").filter(Boolean));
+}
+async function restoreDirtiedSince(params) {
+  const dirtied = [...await dirtyTrackedPaths()].filter((path4) => !params.before.has(path4));
+  if (dirtied.length === 0) return;
+  const result = await spawn({
+    cmd: "git",
+    args: ["restore", "--staged", "--worktree", "--", ...dirtied],
+    env: process.env,
+    activityTimeout: 0
+  });
+  if (result.exitCode !== 0) {
+    log.warning(
+      `\xBB failed to restore ${dirtied.length} tracked file(s) modified by ${params.actor}: ${result.stderr.trim() || "(no stderr)"}`
+    );
+    return;
+  }
+  log.info(
+    `\xBB restored ${dirtied.length} tracked file(s) modified by ${params.actor}: ${dirtied.join(", ")}`
+  );
+}
+
 // agents/opencodePlugin.ts
 var PULLFROG_BUS_EVENT_TYPE = "pullfrog_bus_event";
 var PULLFROG_OPENCODE_GATE_PLUGIN_FILENAME = "pullfrog-subagent-gate.ts";
@@ -109787,6 +110235,7 @@ var opencode = agent({
     }
     log.debug(`\xBB starting Pullfrog (OpenCode, in-process SDK): ${cliPath}`);
     log.debug(`\xBB working directory: ${repoDir}`);
+    const preBootDirty = await dirtyTrackedPaths();
     const server = await bootOpencodeServer({ cliPath, env: env2, cwd: repoDir });
     const dispatcher = new import_undici.Agent({ headersTimeout: 0, bodyTimeout: 0, connectTimeout: 0 });
     const fetchWithoutTimeout = (input, init) => {
@@ -109807,6 +110256,7 @@ var opencode = agent({
         fetch: fetchWithoutTimeout
       });
       const sessionResp = await client2.session.create({ title: "Pullfrog" });
+      await restoreDirtiedSince({ before: preBootDirty, actor: "agent startup" });
       if (sessionResp.error || !sessionResp.data) {
         const msg = sessionResp.error ? formatPromptError(sessionResp.error) : "session.create returned no data";
         return {
@@ -116535,7 +116985,7 @@ var Server = class extends Protocol {
 };
 
 // node_modules/.pnpm/@modelcontextprotocol+sdk@1.27.1_zod@4.3.6/node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
-import process3 from "node:process";
+import process4 from "node:process";
 
 // node_modules/.pnpm/@modelcontextprotocol+sdk@1.27.1_zod@4.3.6/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/stdio.js
 var ReadBuffer = class {
@@ -116567,7 +117017,7 @@ function serializeMessage(message) {
 
 // node_modules/.pnpm/@modelcontextprotocol+sdk@1.27.1_zod@4.3.6/node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
 var StdioServerTransport = class {
-  constructor(_stdin = process3.stdin, _stdout = process3.stdout) {
+  constructor(_stdin = process4.stdin, _stdout = process4.stdout) {
     this._stdin = _stdin;
     this._stdout = _stdout;
     this._readBuffer = new ReadBuffer();
@@ -120002,7 +120452,7 @@ var Hono2 = class extends Hono {
 import { createRequire } from "node:module";
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { URL as URL$1 } from "node:url";
-import fs from "fs";
+import fs2 from "fs";
 import http from "http";
 import https from "https";
 var __create2 = Object.create;
@@ -134570,17 +135020,17 @@ var startHTTPServer = async ({ apiKey, authenticate, cors, createServer: createS
   if (sslCa || sslCert || sslKey) {
     const options = {};
     if (sslCa) try {
-      options.ca = fs.readFileSync(sslCa);
+      options.ca = fs2.readFileSync(sslCa);
     } catch (error$1) {
       throw new Error(`Failed to read CA file '${sslCa}': ${error$1.message}`);
     }
     if (sslCert) try {
-      options.cert = fs.readFileSync(sslCert);
+      options.cert = fs2.readFileSync(sslCert);
     } catch (error$1) {
       throw new Error(`Failed to read certificate file '${sslCert}': ${error$1.message}`);
     }
     if (sslKey) try {
-      options.key = fs.readFileSync(sslKey);
+      options.key = fs2.readFileSync(sslKey);
     } catch (error$1) {
       throw new Error(`Failed to read key file '${sslKey}': ${error$1.message}`);
     }
@@ -143007,6 +143457,24 @@ function isSafeEnvVar(key) {
   if (SAFE_ENV_NAMES.has(key)) return true;
   return SAFE_ENV_PREFIXES.some((p) => key.startsWith(p));
 }
+var WORKFLOW_COMMAND_ENV_NAMES = [
+  "GITHUB_ENV",
+  "GITHUB_PATH",
+  "GITHUB_OUTPUT",
+  "GITHUB_STATE",
+  "GITHUB_STEP_SUMMARY",
+  // dropping the five paths above but keeping RUNNER_TEMP would be theatre:
+  // the file-command files live in `$RUNNER_TEMP/_runner_file_commands/`, so the
+  // directory is one `ls` away. nothing in the install path reads it (only our
+  // own leak-surface wipe in `setup.ts`, which runs in the parent), and package
+  // managers use TMPDIR.
+  "RUNNER_TEMP"
+];
+function filterEnvForUntrustedCode() {
+  const env2 = filterEnv();
+  for (const name of WORKFLOW_COMMAND_ENV_NAMES) delete env2[name];
+  return env2;
+}
 function filterEnv() {
   const filtered = {};
   for (const [key, value2] of Object.entries(process.env)) {
@@ -151200,6 +151668,8 @@ import { join as join8 } from "node:path";
 
 // utils/shell.ts
 import { spawnSync as spawnSync5 } from "node:child_process";
+var MAX_BUFFER_BYTES = 32 * 1024 * 1024;
+var MAX_ERROR_DETAIL_CHARS = 2e4;
 function $(cmd, args2, options) {
   const encoding = options?.encoding ?? "utf-8";
   const env2 = resolveEnv(options?.env);
@@ -151207,7 +151677,8 @@ function $(cmd, args2, options) {
     stdio: ["ignore", "pipe", "pipe"],
     encoding,
     cwd: options?.cwd,
-    env: env2
+    env: env2,
+    maxBuffer: MAX_BUFFER_BYTES
   });
   const stdout = result.stdout ?? "";
   const stderr = result.stderr ?? "";
@@ -151225,6 +151696,11 @@ function $(cmd, args2, options) {
     }
   }
   if (result.status !== 0) {
+    if (result.error && "code" in result.error && result.error.code === "ENOBUFS") {
+      throw new Error(
+        `Command produced more than ${MAX_BUFFER_BYTES / 1024 / 1024}MB of output and was terminated: ${cmd} ${args2.join(" ")}`
+      );
+    }
     const errorResult = {
       status: result.status ?? -1,
       stdout,
@@ -151234,7 +151710,7 @@ function $(cmd, args2, options) {
       options.onError(errorResult);
       return stdout.trim();
     }
-    const detail = [stderr, stdout].map((s) => s.trim()).filter(Boolean).join("\n");
+    const detail = [stderr, stdout].map((s) => s.trim()).filter(Boolean).join("\n").slice(0, MAX_ERROR_DETAIL_CHARS);
     throw new Error(
       `Command failed with exit code ${errorResult.status}: ${detail || "Unknown error"}`
     );
@@ -151243,6 +151719,10 @@ function $(cmd, args2, options) {
 }
 
 // utils/gitAuth.ts
+var TRANSIENT_AUTH_PATTERNS = [
+  /Invalid username or token/,
+  /Authentication failed for 'https:\/\/github\.com\//
+];
 var gitBinary;
 function hashFile(path4) {
   return createHash("sha256").update(readFileSync2(path4)).digest("hex");
@@ -151359,6 +151839,17 @@ async function $gitFetchWithDeepen(args2, options, label) {
     return await $git("fetch", args2, options);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
+    if (TRANSIENT_AUTH_PATTERNS.some((p) => p.test(msg)) && options.refreshGitToken) {
+      log.info(
+        `\xBB ${label ?? "git fetch"} hit an auth error, re-minting the git token and retrying`
+      );
+      const fresh = await options.refreshGitToken(options.token);
+      return await $gitFetchWithDeepen(
+        args2,
+        { ...options, token: fresh, refreshGitToken: void 0 },
+        label
+      );
+    }
     const isShallowUnreachable = SHALLOW_UNREACHABLE_PATTERNS.some((p) => p.test(msg));
     if (!isShallowUnreachable) throw err;
     const isShallow = $("git", ["rev-parse", "--is-shallow-repository"], { log: false }).trim() === "true";
@@ -151478,10 +151969,12 @@ function computeIncrementalDiff(params) {
       ],
       { log: false }
     );
-    return postProcessRangeDiff(raw2);
+    const processed = postProcessRangeDiff(raw2);
+    return processed === null ? { status: "empty" } : { status: "ok", diff: processed };
   } catch (e) {
-    log.debug(`\xBB range-diff failed: ${e instanceof Error ? e.message : String(e)}`);
-    return null;
+    const reason = e instanceof Error ? e.message : String(e);
+    log.warning(`\xBB incremental diff unavailable: range-diff failed: ${reason}`);
+    return { status: "unavailable", reason };
   }
 }
 function isDiffPrefix(ch) {
@@ -152913,7 +153406,7 @@ throttling.VERSION = VERSION;
 throttling.triggersNotification = triggersNotification;
 
 // node_modules/.pnpm/universal-user-agent@7.0.3/node_modules/universal-user-agent/index.js
-function getUserAgent() {
+function getUserAgent2() {
   if (typeof navigator === "object" && "userAgent" in navigator) {
     return navigator.userAgent;
   }
@@ -153031,7 +153524,7 @@ var before_after_hook_default = { Singular, Collection };
 
 // node_modules/.pnpm/@octokit+endpoint@11.0.1/node_modules/@octokit/endpoint/dist-bundle/index.js
 var VERSION2 = "0.0.0-development";
-var userAgent = `octokit-endpoint.js/${VERSION2} ${getUserAgent()}`;
+var userAgent = `octokit-endpoint.js/${VERSION2} ${getUserAgent2()}`;
 var DEFAULTS = {
   method: "GET",
   baseUrl: "https://api.github.com",
@@ -153388,7 +153881,7 @@ var RequestError = class extends Error {
 var VERSION3 = "10.0.5";
 var defaults_default = {
   headers: {
-    "user-agent": `octokit-request.js/${VERSION3} ${getUserAgent()}`
+    "user-agent": `octokit-request.js/${VERSION3} ${getUserAgent2()}`
   }
 };
 function isPlainObject4(value2) {
@@ -153653,7 +154146,7 @@ function withDefaults3(request2, newDefaults) {
 }
 var graphql2 = withDefaults3(request, {
   headers: {
-    "user-agent": `octokit-graphql.js/${VERSION4} ${getUserAgent()}`
+    "user-agent": `octokit-graphql.js/${VERSION4} ${getUserAgent2()}`
   },
   method: "POST",
   url: "/graphql"
@@ -153733,7 +154226,7 @@ function createLogger(logger = {}) {
   }
   return logger;
 }
-var userAgentTrail = `octokit-core.js/${VERSION5} ${getUserAgent()}`;
+var userAgentTrail = `octokit-core.js/${VERSION5} ${getUserAgent2()}`;
 var Octokit = class {
   static VERSION = VERSION5;
   static defaults(defaults) {
@@ -156701,8 +157194,13 @@ function createOctokit(token, refreshAuth) {
 var readOctokitByToken = /* @__PURE__ */ new Map();
 function resolveRepoCtx(ctx, repo) {
   const owner = ctx.repo.owner;
-  const name = repo ?? ctx.repo.name;
-  const state = requireRepoState(ctx.toolState, owner, name);
+  const name = repo?.trim() || ctx.repo.name;
+  const state = ctx.toolState.repos.get(repoKey(owner, name));
+  if (!state) {
+    throw new Error(
+      ctx.xrepo ? `repo ${repoKey(owner, name)} is not a registered checkout \u2014 use checkout_repo first` : `repo ${repoKey(owner, name)} is not a registered checkout \u2014 this run is single-repo, so omit \`repo\` to target ${owner}/${ctx.repo.name}`
+    );
+  }
   if (state.access !== "read") {
     return {
       owner,
@@ -157419,10 +157917,6 @@ var TRANSIENT_PATTERNS = [
   /HTTP 429/,
   /returned error: 429/i
 ];
-var TRANSIENT_AUTH_PATTERNS = [
-  /Invalid username or token/,
-  /Authentication failed for 'https:\/\/github\.com\//
-];
 function classifyPushError(msg) {
   if (CONCURRENT_PUSH_PATTERNS.some((p) => msg.includes(p))) return "concurrent-push";
   if (TRANSIENT_AUTH_PATTERNS.some((p) => p.test(msg))) return "transient-auth";
@@ -157921,7 +158415,11 @@ function GitFetchTool(ctx) {
       if (params.depth !== void 0) {
         fetchArgs.push(`--depth=${params.depth}`);
       }
-      await $gitFetchWithDeepen(fetchArgs, { token: rc.gitToken, cwd: rc.dir }, "git_fetch");
+      await $gitFetchWithDeepen(
+        fetchArgs,
+        { token: rc.gitToken, cwd: rc.dir, refreshGitToken: rc.refreshGitToken },
+        "git_fetch"
+      );
       return { success: true, ref: params.ref };
     })
   });
@@ -158010,7 +158508,7 @@ function formatModelLabel(params) {
     const ossBase = `\`${displayName}\` (free via [Pullfrog for OSS](https://pullfrog.com/for-oss))`;
     if (params.clamped?.reason !== "oss") return ossBase;
     const configured = isAutoTier(params.clamped.from) ? "the intelligent tier" : `\`${resolveDisplayAlias(params.clamped.from)?.displayName ?? params.clamped.from}\``;
-    return `${ossBase} (${configured} not used \u2014 the program covers this model; add its [provider key](https://docs.pullfrog.com/models) to run your pick)`;
+    return `${ossBase} (${configured} not used \u2014 pick one of the [funded models](https://docs.pullfrog.com/models#pullfrog-for-oss) or add a [provider key](https://docs.pullfrog.com/keys) to run your own)`;
   }
   const base = alias?.isFree ? `\`${displayName}\` (free)` : `\`${displayName}\``;
   if (params.fallbackFrom) {
@@ -159558,7 +160056,7 @@ async function ensureBeforeShaReachable(params) {
       }), true);
       await $gitFetchWithDeepen(
         ["--no-tags", ...params.isShallow ? ["--depth=1"] : [], "origin", tempBranch],
-        { token: params.gitToken },
+        { token: params.gitToken, refreshGitToken: params.refreshGitToken },
         `before_sha temp branch ${tempBranch}`
       );
       log.debug(`\xBB fetched before_sha via temp branch ${tempBranch}`);
@@ -159574,6 +160072,14 @@ async function ensureBeforeShaReachable(params) {
     return false;
   }
 }
+function hasLocalCommit(sha) {
+  if (!sha) return false;
+  try {
+    return $("git", ["cat-file", "-t", sha], { log: false }).trim() === "commit";
+  } catch {
+    return false;
+  }
+}
 var STALE_LOCK_AGE_MS = 3e4;
 var PULL_REF_RETRY_DELAYS_MS = [2e3, 5e3, 1e4];
 var PULL_REF_MISSING_PATTERN = /couldn't find remote ref pull\/\d+\/head/i;
@@ -159624,7 +160130,7 @@ async function abortIfPullRequestMoved(args2) {
   );
 }
 async function checkoutPrBranch(pr, params) {
-  const { octokit, owner, name, gitToken, toolState, beforeSha } = params;
+  const { octokit, owner, name, gitToken, refreshGitToken, toolState, beforeSha } = params;
   rejectIfLeadingDash(pr.baseRef, "PR base ref");
   rejectIfLeadingDash(pr.headRef, "PR head ref");
   const repoState = requireRepoState(toolState, owner, name);
@@ -159638,7 +160144,7 @@ async function checkoutPrBranch(pr, params) {
   log.debug(`\xBB fetching base branch (${pr.baseRef})...`);
   await $gitFetchWithDeepen(
     ["--no-tags", "origin", pr.baseRef],
-    { token: gitToken },
+    { token: gitToken, refreshGitToken },
     `base branch ${pr.baseRef}`
   );
   if (!alreadyOnBranch) {
@@ -159649,7 +160155,7 @@ async function checkoutPrBranch(pr, params) {
         try {
           await $gitFetchWithDeepen(
             ["--no-tags", "origin", `+pull/${pr.number}/head:${localBranch}`],
-            { token: gitToken },
+            { token: gitToken, refreshGitToken },
             `PR #${pr.number}`
           );
         } catch (e) {
@@ -159676,6 +160182,7 @@ async function checkoutPrBranch(pr, params) {
     owner,
     repo: name,
     gitToken,
+    refreshGitToken,
     isShallow
   }) : false;
   if (isShallow) {
@@ -159789,6 +160296,7 @@ function CheckoutPrTool(ctx) {
       owner: ctx.repo.owner,
       name: ctx.repo.name,
       gitToken: ctx.gitToken,
+      refreshGitToken: ctx.refreshGitToken,
       toolState: ctx.toolState,
       shell: ctx.payload.shell,
       postCheckoutScript: ctx.postCheckoutScript,
@@ -159804,6 +160312,8 @@ function CheckoutPrTool(ctx) {
     if (!checkoutSha) throw new Error("checkout completed without a resolved HEAD SHA");
     const headShort = checkoutSha.slice(0, 7);
     let incrementalDiffPath;
+    let incrementalUnavailable = false;
+    let incrementalUnavailableReason;
     if (primary.beforeSha) {
       const beforeShort = primary.beforeSha.slice(0, 7);
       const incremental = computeIncrementalDiff({
@@ -159811,15 +160321,18 @@ function CheckoutPrTool(ctx) {
         beforeSha: primary.beforeSha,
         headSha: checkoutSha
       });
-      if (incremental) {
+      if (incremental.status === "ok") {
         incrementalDiffPath = join13(
           tempDir,
           `pr-${pull_number}-${beforeShort}-${headShort}-incremental.diff`
         );
-        writeFileSync8(incrementalDiffPath, incremental);
+        writeFileSync8(incrementalDiffPath, incremental.diff);
         log.info(
-          `\xBB incremental diff computed (${incremental.length} bytes) \u2192 ${incrementalDiffPath}`
+          `\xBB incremental diff computed (${incremental.diff.length} bytes) \u2192 ${incrementalDiffPath}`
         );
+      } else if (incremental.status === "unavailable") {
+        incrementalUnavailable = true;
+        incrementalUnavailableReason = incremental.reason;
       }
     }
     const formatResult = await fetchAndFormatPrDiff(ctx, pull_number);
@@ -159886,7 +160399,13 @@ ${diffPreview}`);
     primary.commentableLinesByFile = cached4;
     primary.commentableLinesPullNumber = pull_number;
     primary.commentableLinesCheckoutSha = checkoutSha;
-    const incrementalInstructions = incrementalDiffPath ? `IMPORTANT: incrementalDiffPath contains ONLY the changes since the last reviewed version (computed via range-diff). you MUST read incrementalDiffPath FIRST to understand what changed, then use diffPath for full PR context. do NOT skip the incremental diff. ` : "";
+    const incrementalInstructions = incrementalDiffPath ? `IMPORTANT: incrementalDiffPath contains ONLY the changes since the last reviewed version (computed via range-diff). you MUST read incrementalDiffPath FIRST to understand what changed, then use diffPath for full PR context. do NOT skip the incremental diff. ` : incrementalUnavailable ? (
+      // say it FAILED rather than leaving the agent to infer "nothing changed"
+      // from an absent field. only suggest diff-tree when the previous
+      // revision is actually PRESENT locally — if the fetch never landed it,
+      // diff-tree needs that object too and would fail identically. see #1139.
+      `NOTE: an incremental diff was expected for this run but could not be computed` + (incrementalUnavailableReason ? ` (${incrementalUnavailableReason})` : "") + `. review the full diffPath instead. ` + (hasLocalCommit(primary.beforeSha) ? `if you need just the delta, \`git diff-tree -p ${primary.beforeSha} ${checkoutSha}\` works without a merge base. ` : `the previous revision was never fetched into this shallow checkout, so the full diff is the only option. `)
+    ) : "";
     const impactInstructions = impactPath ? ` impactPath contains bounded, deterministic reference leads for semantic atoms changed by the PR. read the authoritative diff TOC and relevant raw diff lines FIRST; only then use impactPath as a supplemental, explicitly incomplete lead list. impactPath never establishes review coverage and an empty artifact is not evidence of no wider impact.` : "";
     const COMMIT_LOG_MAX = 200;
     const baseRange = `origin/${pr.baseRef}..HEAD`;
@@ -160206,299 +160725,6 @@ import { performance as performance8 } from "node:perf_hooks";
 import { existsSync as existsSync6 } from "node:fs";
 import { join as join17 } from "node:path";
 
-// node_modules/.pnpm/package-manager-detector@1.6.0/node_modules/package-manager-detector/dist/commands.mjs
-function dashDashArg(agent2, agentCommand) {
-  return (args2) => {
-    if (args2.length > 1) {
-      return [agent2, agentCommand, args2[0], "--", ...args2.slice(1)];
-    } else {
-      return [agent2, agentCommand, args2[0]];
-    }
-  };
-}
-function denoExecute() {
-  return (args2) => {
-    return ["deno", "run", `npm:${args2[0]}`, ...args2.slice(1)];
-  };
-}
-var npm = {
-  "agent": ["npm", 0],
-  "run": dashDashArg("npm", "run"),
-  "install": ["npm", "i", 0],
-  "frozen": ["npm", "ci", 0],
-  "global": ["npm", "i", "-g", 0],
-  "add": ["npm", "i", 0],
-  "upgrade": ["npm", "update", 0],
-  "upgrade-interactive": null,
-  "dedupe": ["npm", "dedupe", 0],
-  "execute": ["npx", 0],
-  "execute-local": ["npx", 0],
-  "uninstall": ["npm", "uninstall", 0],
-  "global_uninstall": ["npm", "uninstall", "-g", 0]
-};
-var yarn = {
-  "agent": ["yarn", 0],
-  "run": ["yarn", "run", 0],
-  "install": ["yarn", "install", 0],
-  "frozen": ["yarn", "install", "--frozen-lockfile", 0],
-  "global": ["yarn", "global", "add", 0],
-  "add": ["yarn", "add", 0],
-  "upgrade": ["yarn", "upgrade", 0],
-  "upgrade-interactive": ["yarn", "upgrade-interactive", 0],
-  "dedupe": null,
-  "execute": ["npx", 0],
-  "execute-local": dashDashArg("yarn", "exec"),
-  "uninstall": ["yarn", "remove", 0],
-  "global_uninstall": ["yarn", "global", "remove", 0]
-};
-var yarnBerry = {
-  ...yarn,
-  "frozen": ["yarn", "install", "--immutable", 0],
-  "upgrade": ["yarn", "up", 0],
-  "upgrade-interactive": ["yarn", "up", "-i", 0],
-  "dedupe": ["yarn", "dedupe", 0],
-  "execute": ["yarn", "dlx", 0],
-  "execute-local": ["yarn", "exec", 0],
-  // Yarn 2+ removed 'global', see https://github.com/yarnpkg/berry/issues/821
-  "global": ["npm", "i", "-g", 0],
-  "global_uninstall": ["npm", "uninstall", "-g", 0]
-};
-var pnpm = {
-  "agent": ["pnpm", 0],
-  "run": ["pnpm", "run", 0],
-  "install": ["pnpm", "i", 0],
-  "frozen": ["pnpm", "i", "--frozen-lockfile", 0],
-  "global": ["pnpm", "add", "-g", 0],
-  "add": ["pnpm", "add", 0],
-  "upgrade": ["pnpm", "update", 0],
-  "upgrade-interactive": ["pnpm", "update", "-i", 0],
-  "dedupe": ["pnpm", "dedupe", 0],
-  "execute": ["pnpm", "dlx", 0],
-  "execute-local": ["pnpm", "exec", 0],
-  "uninstall": ["pnpm", "remove", 0],
-  "global_uninstall": ["pnpm", "remove", "--global", 0]
-};
-var bun = {
-  "agent": ["bun", 0],
-  "run": ["bun", "run", 0],
-  "install": ["bun", "install", 0],
-  "frozen": ["bun", "install", "--frozen-lockfile", 0],
-  "global": ["bun", "add", "-g", 0],
-  "add": ["bun", "add", 0],
-  "upgrade": ["bun", "update", 0],
-  "upgrade-interactive": ["bun", "update", "-i", 0],
-  "dedupe": null,
-  "execute": ["bun", "x", 0],
-  "execute-local": ["bun", "x", 0],
-  "uninstall": ["bun", "remove", 0],
-  "global_uninstall": ["bun", "remove", "-g", 0]
-};
-var deno = {
-  "agent": ["deno", 0],
-  "run": ["deno", "task", 0],
-  "install": ["deno", "install", 0],
-  "frozen": ["deno", "install", "--frozen", 0],
-  "global": ["deno", "install", "-g", 0],
-  "add": ["deno", "add", 0],
-  "upgrade": ["deno", "outdated", "--update", 0],
-  "upgrade-interactive": ["deno", "outdated", "--update", 0],
-  "dedupe": null,
-  "execute": denoExecute(),
-  "execute-local": ["deno", "task", "--eval", 0],
-  "uninstall": ["deno", "remove", 0],
-  "global_uninstall": ["deno", "uninstall", "-g", 0]
-};
-var COMMANDS = {
-  "npm": npm,
-  "yarn": yarn,
-  "yarn@berry": yarnBerry,
-  "pnpm": pnpm,
-  // pnpm v6.x or below
-  "pnpm@6": {
-    ...pnpm,
-    run: dashDashArg("pnpm", "run")
-  },
-  "bun": bun,
-  "deno": deno
-};
-function resolveCommand(agent2, command, args2) {
-  const value2 = COMMANDS[agent2][command];
-  return constructCommand(value2, args2);
-}
-function constructCommand(value2, args2) {
-  if (value2 == null)
-    return null;
-  const list = typeof value2 === "function" ? value2(args2) : value2.flatMap((v) => {
-    if (typeof v === "number")
-      return args2;
-    return [v];
-  });
-  return {
-    command: list[0],
-    args: list.slice(1)
-  };
-}
-
-// node_modules/.pnpm/package-manager-detector@1.6.0/node_modules/package-manager-detector/dist/constants.mjs
-var AGENTS = [
-  "npm",
-  "yarn",
-  "yarn@berry",
-  "pnpm",
-  "pnpm@6",
-  "bun",
-  "deno"
-];
-var LOCKS = {
-  "bun.lock": "bun",
-  "bun.lockb": "bun",
-  "deno.lock": "deno",
-  "pnpm-lock.yaml": "pnpm",
-  "pnpm-workspace.yaml": "pnpm",
-  "yarn.lock": "yarn",
-  "package-lock.json": "npm",
-  "npm-shrinkwrap.json": "npm"
-};
-var INSTALL_METADATA = {
-  "node_modules/.deno/": "deno",
-  "node_modules/.pnpm/": "pnpm",
-  "node_modules/.yarn-state.yml": "yarn",
-  // yarn v2+ (node-modules)
-  "node_modules/.yarn_integrity": "yarn",
-  // yarn v1
-  "node_modules/.package-lock.json": "npm",
-  ".pnp.cjs": "yarn",
-  // yarn v3+ (pnp)
-  ".pnp.js": "yarn",
-  // yarn v2 (pnp)
-  "bun.lock": "bun",
-  "bun.lockb": "bun"
-};
-
-// node_modules/.pnpm/package-manager-detector@1.6.0/node_modules/package-manager-detector/dist/detect.mjs
-import fs2 from "node:fs/promises";
-import path from "node:path";
-import process4 from "node:process";
-async function pathExists(path22, type2) {
-  try {
-    const stat = await fs2.stat(path22);
-    return type2 === "file" ? stat.isFile() : stat.isDirectory();
-  } catch {
-    return false;
-  }
-}
-function* lookup(cwd = process4.cwd()) {
-  let directory = path.resolve(cwd);
-  const { root } = path.parse(directory);
-  while (directory && directory !== root) {
-    yield directory;
-    directory = path.dirname(directory);
-  }
-}
-async function parsePackageJson(filepath, options) {
-  if (!filepath || !await pathExists(filepath, "file"))
-    return null;
-  return await handlePackageManager(filepath, options);
-}
-async function detect(options = {}) {
-  const {
-    cwd,
-    strategies = ["lockfile", "packageManager-field", "devEngines-field"]
-  } = options;
-  let stopDir;
-  if (typeof options.stopDir === "string") {
-    const resolved = path.resolve(options.stopDir);
-    stopDir = (dir) => dir === resolved;
-  } else {
-    stopDir = options.stopDir;
-  }
-  for (const directory of lookup(cwd)) {
-    for (const strategy of strategies) {
-      switch (strategy) {
-        case "lockfile": {
-          for (const lock of Object.keys(LOCKS)) {
-            if (await pathExists(path.join(directory, lock), "file")) {
-              const name = LOCKS[lock];
-              const result = await parsePackageJson(path.join(directory, "package.json"), options);
-              if (result)
-                return result;
-              else
-                return { name, agent: name };
-            }
-          }
-          break;
-        }
-        case "packageManager-field":
-        case "devEngines-field": {
-          const result = await parsePackageJson(path.join(directory, "package.json"), options);
-          if (result)
-            return result;
-          break;
-        }
-        case "install-metadata": {
-          for (const metadata of Object.keys(INSTALL_METADATA)) {
-            const fileOrDir = metadata.endsWith("/") ? "dir" : "file";
-            if (await pathExists(path.join(directory, metadata), fileOrDir)) {
-              const name = INSTALL_METADATA[metadata];
-              const agent2 = name === "yarn" ? isMetadataYarnClassic(metadata) ? "yarn" : "yarn@berry" : name;
-              return { name, agent: agent2 };
-            }
-          }
-          break;
-        }
-      }
-    }
-    if (stopDir?.(directory))
-      break;
-  }
-  return null;
-}
-function getNameAndVer(pkg) {
-  const handelVer = (version3) => version3?.match(/\d+(\.\d+){0,2}/)?.[0] ?? version3;
-  if (typeof pkg.packageManager === "string") {
-    const [name, ver] = pkg.packageManager.replace(/^\^/, "").split("@");
-    return { name, ver: handelVer(ver) };
-  }
-  if (typeof pkg.devEngines?.packageManager?.name === "string") {
-    return {
-      name: pkg.devEngines.packageManager.name,
-      ver: handelVer(pkg.devEngines.packageManager.version)
-    };
-  }
-  return void 0;
-}
-async function handlePackageManager(filepath, options) {
-  try {
-    const content = await fs2.readFile(filepath, "utf8");
-    const pkg = options.packageJsonParser ? await options.packageJsonParser(content, filepath) : JSON.parse(content);
-    let agent2;
-    const nameAndVer = getNameAndVer(pkg);
-    if (nameAndVer) {
-      const name = nameAndVer.name;
-      const ver = nameAndVer.ver;
-      let version3 = ver;
-      if (name === "yarn" && ver && Number.parseInt(ver) > 1) {
-        agent2 = "yarn@berry";
-        version3 = "berry";
-        return { name, agent: agent2, version: version3 };
-      } else if (name === "pnpm" && ver && Number.parseInt(ver) < 7) {
-        agent2 = "pnpm@6";
-        return { name, agent: agent2, version: version3 };
-      } else if (AGENTS.includes(name)) {
-        agent2 = name;
-        return { name, agent: agent2, version: version3 };
-      } else {
-        return options.onUnknown?.(pkg.packageManager) ?? null;
-      }
-    }
-  } catch {
-  }
-  return null;
-}
-function isMetadataYarnClassic(metadataPath) {
-  return metadataPath.endsWith(".yarn_integrity");
-}
-
 // utils/packageManager.ts
 var import_semver2 = __toESM(require_semver2(), 1);
 import { existsSync as existsSync5 } from "node:fs";
@@ -160584,11 +160810,7 @@ async function runCorepack(args2) {
   const result = await spawn({
     cmd: "corepack",
     args: args2,
-    env: {
-      PATH: process.env.PATH || "",
-      HOME: process.env.HOME || "",
-      COREPACK_ENABLE_DOWNLOAD_PROMPT: "0"
-    },
+    env: { ...filterEnvForUntrustedCode(), COREPACK_ENABLE_DOWNLOAD_PROMPT: "0" },
     onStdout: (chunk) => process.stdout.write(chunk),
     onStderr: (chunk) => process.stderr.write(chunk)
   });
@@ -160598,7 +160820,7 @@ async function currentVersion(name) {
   const result = await spawn({
     cmd: name,
     args: ["--version"],
-    env: { PATH: process.env.PATH || "" }
+    env: filterEnvForUntrustedCode()
   });
   if (result.exitCode !== 0) return null;
   return result.stdout.trim();
@@ -160650,14 +160872,8 @@ async function ensurePackageManager(params) {
   }
   return true;
 }
-
-// prep/installNodeDependencies.ts
 async function isCommandAvailable(command) {
-  const result = await spawn({
-    cmd: "which",
-    args: [command],
-    env: { PATH: process.env.PATH || "" }
-  });
+  const result = await spawn({ cmd: "which", args: [command], env: filterEnvForUntrustedCode() });
   return result.exitCode === 0;
 }
 async function installFallback(name, installSpec) {
@@ -160668,19 +160884,41 @@ async function installFallback(name, installSpec) {
   const result = await spawn({
     cmd,
     args: args2,
-    env: { PATH: process.env.PATH || "", HOME: process.env.HOME || "" },
+    env: filterEnvForUntrustedCode(),
     onStderr: (chunk) => process.stderr.write(chunk)
   });
-  if (result.exitCode !== 0) {
-    return result.stderr || `failed to install ${name}`;
-  }
+  if (result.exitCode !== 0) return result.stderr || `failed to install ${name}`;
   if (name === "deno") {
-    const denoPath = join17(process.env.HOME || "", ".deno", "bin");
+    const denoPath = join16(process.env.HOME || "", ".deno", "bin");
     process.env.PATH = `${denoPath}:${process.env.PATH}`;
   }
   log.info(`\xBB installed ${name}`);
   return null;
 }
+async function provisionPackageManager(params) {
+  if (await isCommandAvailable(params.name)) {
+    if (params.declared) {
+      await ensurePackageManager({ spec: params.declared, binDir: params.binDir });
+    }
+    return null;
+  }
+  if (params.declared) {
+    const activated = await ensurePackageManager({ spec: params.declared, binDir: params.binDir });
+    if (activated) return null;
+  }
+  const spec = params.declared ? `${params.declared.name}@${params.declared.version}` : params.name;
+  return installFallback(params.name, spec);
+}
+
+// prep/installNodeDependencies.ts
+async function isCommandAvailable2(command) {
+  const result = await spawn({
+    cmd: "which",
+    args: [command],
+    env: filterEnvForUntrustedCode()
+  });
+  return result.exitCode === 0;
+}
 var installNodeDependencies = {
   name: "installNodeDependencies",
   shouldRun: () => {
@@ -160701,8 +160939,8 @@ var installNodeDependencies = {
     } else {
       log.info(`\xBB no package manager declared, defaulting to npm`);
     }
-    if (!await isCommandAvailable(packageManager)) {
-      if (options.ignoreScripts) {
+    if (options.ignoreScripts) {
+      if (!await isCommandAvailable2(packageManager)) {
         return {
           language: "node",
           packageManager,
@@ -160712,23 +160950,20 @@ var installNodeDependencies = {
           ]
         };
       }
-      let provisioned = false;
-      if (declared)
-        provisioned = await ensurePackageManager({ spec: declared, binDir: options.binDir });
-      if (!provisioned) {
-        const fallbackSpec = declared ? `${declared.name}@${declared.version}` : packageManager;
-        const installError = await installFallback(packageManager, fallbackSpec);
-        if (installError) {
-          return {
-            language: "node",
-            packageManager,
-            dependenciesInstalled: false,
-            issues: [installError]
-          };
-        }
+    } else {
+      const installError = await provisionPackageManager({
+        name: packageManager,
+        declared,
+        binDir: options.binDir
+      });
+      if (installError) {
+        return {
+          language: "node",
+          packageManager,
+          dependenciesInstalled: false,
+          issues: [installError]
+        };
       }
-    } else if (declared) {
-      await ensurePackageManager({ spec: declared, binDir: options.binDir });
     }
     if (!detected) {
       log.info(
@@ -160754,7 +160989,7 @@ var installNodeDependencies = {
     const result = await spawn({
       cmd: resolved.command,
       args: resolved.args,
-      env: { PATH: process.env.PATH || "", HOME: process.env.HOME || "" }
+      env: filterEnvForUntrustedCode()
     });
     const output = [result.stdout, result.stderr].filter(Boolean).join("\n").trim();
     if (output) {
@@ -160828,11 +161063,11 @@ var TOOL_INSTALL_COMMANDS = {
   pipenv: ["pip", "install", "pipenv"],
   poetry: ["pip", "install", "poetry"]
 };
-async function isCommandAvailable2(command) {
+async function isCommandAvailable3(command) {
   const result = await spawn({
     cmd: "which",
     args: [command],
-    env: { PATH: process.env.PATH || "" }
+    env: filterEnvForUntrustedCode()
   });
   return result.exitCode === 0;
 }
@@ -160846,7 +161081,7 @@ async function installTool(name) {
   const result = await spawn({
     cmd,
     args: args2,
-    env: { PATH: process.env.PATH || "", HOME: process.env.HOME || "" },
+    env: filterEnvForUntrustedCode(),
     onStderr: (chunk) => process.stderr.write(chunk)
   });
   if (result.exitCode !== 0) {
@@ -160858,7 +161093,7 @@ async function installTool(name) {
 var installPythonDependencies = {
   name: "installPythonDependencies",
   shouldRun: async () => {
-    const hasPython = await isCommandAvailable2("python3") || await isCommandAvailable2("python");
+    const hasPython = await isCommandAvailable3("python3") || await isCommandAvailable3("python");
     if (!hasPython) {
       return false;
     }
@@ -160892,7 +161127,7 @@ var installPythonDependencies = {
         ]
       };
     }
-    const isAvailable = await isCommandAvailable2(config3.tool);
+    const isAvailable = await isCommandAvailable3(config3.tool);
     if (!isAvailable) {
       log.info(`\xBB ${config3.tool} not found, attempting to install...`);
       const installError = await installTool(config3.tool);
@@ -160912,7 +161147,7 @@ var installPythonDependencies = {
     const result = await spawn({
       cmd,
       args: args2,
-      env: { PATH: process.env.PATH || "", HOME: process.env.HOME || "" }
+      env: filterEnvForUntrustedCode()
     });
     const output = [result.stdout, result.stderr].filter(Boolean).join("\n").trim();
     if (output) {
@@ -160941,37 +161176,6 @@ var installPythonDependencies = {
 
 // prep/index.ts
 var prepSteps = [installNodeDependencies, installPythonDependencies];
-async function dirtyTrackedPaths() {
-  const result = await spawn({
-    cmd: "git",
-    args: ["diff", "--name-only", "HEAD"],
-    env: process.env,
-    activityTimeout: 0
-  });
-  if (result.exitCode !== 0) {
-    throw new Error(
-      `git diff --name-only HEAD failed (exit ${result.exitCode}): ${result.stderr.trim() || "(no stderr)"}`
-    );
-  }
-  return new Set(result.stdout.split("\n").filter(Boolean));
-}
-async function restorePrepDirtiedFiles(preDirty) {
-  const dirtied = [...await dirtyTrackedPaths()].filter((path4) => !preDirty.has(path4));
-  if (dirtied.length === 0) return;
-  const result = await spawn({
-    cmd: "git",
-    args: ["restore", "--staged", "--worktree", "--", ...dirtied],
-    env: process.env,
-    activityTimeout: 0
-  });
-  if (result.exitCode !== 0) {
-    log.warning(
-      `\xBB failed to restore ${dirtied.length} tracked file(s) modified by prep: ${result.stderr.trim() || "(no stderr)"}`
-    );
-    return;
-  }
-  log.info(`\xBB restored ${dirtied.length} tracked file(s) modified by prep: ${dirtied.join(", ")}`);
-}
 async function runPrepPhase(options) {
   log.debug("\xBB starting prep phase...");
   const startTime = performance8.now();
@@ -160994,7 +161198,7 @@ async function runPrepPhase(options) {
       }
     }
   } finally {
-    await restorePrepDirtiedFiles(preDirty);
+    await restoreDirtiedSince({ before: preDirty, actor: "prep" });
   }
   const totalDurationMs = performance8.now() - startTime;
   log.debug(`\xBB prep phase completed (${Math.round(totalDurationMs)}ms)`);
@@ -162210,13 +162414,38 @@ function buildThreadBlocks(threads, filePatchMap, reviewId) {
   }
   return threadBlocks;
 }
+var fetchAllReviewThreads = op(
+  async (key, ctx) => {
+    const response = await ctx.octokit.graphql(REVIEW_THREADS_QUERY, {
+      owner: key.owner,
+      name: key.name,
+      prNumber: key.pullNumber
+    });
+    return response.repository?.pullRequest?.reviewThreads?.nodes ?? [];
+  },
+  { ttl: 6e4, name: "reviewThreads" }
+);
+var fetchPrFiles = op(
+  async (key, ctx) => ctx.octokit.paginate(ctx.octokit.rest.pulls.listFiles, {
+    owner: key.owner,
+    repo: key.name,
+    pull_number: key.pullNumber,
+    per_page: 100
+  }),
+  { ttl: 6e4, name: "prFiles" }
+);
+function invalidateReviewThreadCache(repo) {
+  fetchAllReviewThreads.invalidate(
+    (cached4) => cached4.owner === repo.owner && cached4.name === repo.name
+  );
+}
 async function getReviewThreads(input) {
-  const response = await input.octokit.graphql(REVIEW_THREADS_QUERY, {
-    owner: input.owner,
-    name: input.name,
-    prNumber: input.pullNumber
-  });
-  const allThreads = response.repository?.pullRequest?.reviewThreads?.nodes ?? [];
+  const allThreads = structuredClone(
+    await fetchAllReviewThreads(
+      { owner: input.owner, name: input.name, pullNumber: input.pullNumber },
+      { octokit: input.octokit }
+    )
+  );
   if (allThreads.length >= 100) {
     log.warning(
       `PR ${input.owner}/${input.name}#${input.pullNumber}: reviewThreads returned 100 results (limit reached, some threads may be missing)`
@@ -162273,12 +162502,10 @@ async function getReviewData(input) {
     }),
     getReviewThreads(input)
   ]);
-  const prFiles = threads.length > 0 ? await input.octokit.paginate(input.octokit.rest.pulls.listFiles, {
-    owner: input.owner,
-    repo: input.name,
-    pull_number: input.pullNumber,
-    per_page: 100
-  }) : [];
+  const prFiles = threads.length > 0 ? await fetchPrFiles(
+    { owner: input.owner, name: input.name, pullNumber: input.pullNumber },
+    { octokit: input.octokit }
+  ) : [];
   if (review.data.body) {
     review.data.body = await resolveBodyAssets({
       body: review.data.body,
@@ -162422,6 +162649,7 @@ function ResolveReviewThreadTool(ctx) {
         });
         const thread = response.resolveReviewThread.thread;
         log.info(`\xBB resolved review thread ${thread.id}`);
+        invalidateReviewThreadCache({ owner: ctx.repo.owner, name: ctx.repo.name });
         return {
           thread_id: thread.id,
           is_resolved: thread.isResolved,
@@ -162596,7 +162824,10 @@ import { join as join20 } from "node:path";
 import { setTimeout as sleep2 } from "node:timers/promises";
 var ShellParams = type({
   command: "string",
-  description: "string",
+  // advisory and unread — no code path consumes it. kept in the schema only
+  // because it nudges the model to state intent before running a command;
+  // REQUIRING it cost a full rejected turn every time one was omitted. #1140.
+  "description?": "string",
   "timeout?": type.number.describe(
     "Timeout in MILLISECONDS (not seconds). Default 30000 (30s), max 120000 (2m). e.g. timeout: 180000 for 3 minutes; timeout: 180 means 180ms and will kill the process almost immediately."
   ),
@@ -162604,6 +162835,7 @@ var ShellParams = type({
   "background?": "boolean"
 });
 var detectedSandboxMethod;
+var usernsProbeError;
 function detectSandboxMethod() {
   if (detectedSandboxMethod !== void 0) {
     return detectedSandboxMethod;
@@ -162637,6 +162869,35 @@ function detectSandboxMethod() {
     }
   } catch {
   }
+  try {
+    const result = spawnSync6(
+      "unshare",
+      [
+        "--user",
+        "--map-root-user",
+        "--pid",
+        "--fork",
+        "--mount",
+        "setpriv",
+        "--no-new-privs",
+        "--bounding-set",
+        "-all",
+        "--inh-caps",
+        "-all",
+        "--ambient-caps",
+        "-all",
+        "true"
+      ],
+      { timeout: 5e3, stdio: ["ignore", "ignore", "pipe"] }
+    );
+    if (result.status === 0) {
+      detectedSandboxMethod = "userns-unshare";
+      log.debug("PID namespace isolation enabled (unprivileged userns unshare)");
+      return "userns-unshare";
+    }
+    usernsProbeError = result.stderr?.toString().trim() || result.error?.message;
+  } catch {
+  }
   detectedSandboxMethod = "none";
   log.info("PID namespace isolation not available");
   return "none";
@@ -162684,7 +162945,7 @@ function spawnShell(params) {
   const ci = process.env.CI === "true";
   if (ci && sandboxMethod === "none") {
     throw new Error(
-      "pid namespace isolation is required in CI but unavailable (both unshare and sudo unshare failed)"
+      "PID-namespace isolation is required in CI but unavailable: unprivileged unshare, sudo unshare, and userns-nested unshare all failed. " + (usernsProbeError ? `userns probe said: ${usernsProbeError}. ` : "") + "on a containerized / Kubernetes self-hosted runner the cause is usually one of: the pod's seccomp profile blocks user-namespace creation (Pod Security Standards baseline/restricted); the pod runs as root without CAP_SETFCAP, which the kernel requires to map uid 0; or the node kernel disallows unprivileged user namespaces (Ubuntu >= 23.10, Bottlerocket, Talos). elsewhere, check that `unshare` and `setpriv` (util-linux >= 2.31, which is what added --ambient-caps) are on PATH. see https://docs.pullfrog.com/security#self-hosted-runners"
     );
   }
   const repoRoot = resolveRepoRoot();
@@ -162703,6 +162964,23 @@ function spawnShell(params) {
       spawnOpts
     );
   }
+  if (sandboxMethod === "userns-unshare") {
+    const escaped = params.command.replace(/'/g, "'\\''");
+    return spawn3(
+      "unshare",
+      [
+        "--user",
+        "--map-root-user",
+        "--pid",
+        "--fork",
+        "--mount",
+        "bash",
+        "-c",
+        `${PROC_CLEANUP} ${SOCKET_CLEANUP} ${fsMounts} exec setpriv --no-new-privs --bounding-set -all --inh-caps -all --ambient-caps -all bash -c '${escaped}'`
+      ],
+      spawnOpts
+    );
+  }
   if (sandboxMethod === "sudo-unshare") {
     const envArgs = [];
     for (const [k, v] of Object.entries(params.env)) {
@@ -162866,6 +163144,8 @@ Do NOT use this tool for git commands \u2014 use the dedicated git tools instead
         proc.on("exit", done);
         proc.on("error", () => done(null));
       });
+      proc.stdout?.destroy();
+      proc.stderr?.destroy();
       let output = stderr ? stdout ? `${stdout}
 ${stderr}` : stderr : stdout;
       if (timedOut)
@@ -163109,6 +163389,7 @@ function CheckoutRepoTool(ctx) {
           owner,
           name: repo,
           gitToken: rc.gitToken,
+          refreshGitToken: rc.refreshGitToken,
           octokit: rc.octokit,
           toolState: ctx.toolState,
           shell: ctx.payload.shell,
@@ -163605,14 +163886,22 @@ function validateAgentApiKey(params) {
 }
 function isApiKeyAuthError(text) {
   if (!text) return false;
-  return text.includes(MISSING_KEY_MARKER) || /Invalid API key/i.test(text) || /\bUser not found\b/i.test(text) || /\bInvalid authentication\b/i.test(text) || /authentication_error/i.test(text) || /Invalid bearer token/i.test(text) || /api_error_status\s*=\s*401/i.test(text) || /API Error:\s*401/i.test(text) || /Failed to authenticate\. API Error:/i.test(text) || /Your api key:.*is invalid/i.test(text) || isClaudeSubscriptionDisabledError(text) || isOAuthCredentialExpiredError(text);
+  return text.includes(MISSING_KEY_MARKER) || /Invalid API key/i.test(text) || /\bUser not found\b/i.test(text) || /\bInvalid authentication\b/i.test(text) || /authentication_error/i.test(text) || /Invalid bearer token/i.test(text) || /api_error_status\s*=\s*401/i.test(text) || /API Error:\s*401/i.test(text) || /Failed to authenticate\. API Error:/i.test(text) || /Your api key:.*is invalid/i.test(text) || isClaudeSubscriptionDisabledError(text) || isClaudeSessionLimitError(text) || isOAuthCredentialExpiredError(text);
 }
 function isOAuthCredentialExpiredError(text) {
-  return /authentication token has (expired|been invalidated)/i.test(text) || /OAuth access token has expired/i.test(text) || /Token refresh failed/i.test(text);
+  return /(?:authentication|OAuth access) token has (?:expired|been (?:invalidated|revoked))/i.test(
+    text
+  ) || // the provider no longer recognises the token at all (#1086) — same dead
+  // credential, phrased as a lookup miss rather than a state transition.
+  /Could not find the appropriate key in your authentication token/i.test(text) || /Token refresh failed/i.test(text);
 }
 function isClaudeSubscriptionDisabledError(text) {
   return /disabled Claude subscription access/i.test(text);
 }
+var CLAUDE_SESSION_LIMIT_PATTERN = /hit your (?:session|weekly|five-hour|Opus|Sonnet|Haiku)\s+limit(?:\s*·\s*resets\s+([^"\n]+))?/i;
+function isClaudeSessionLimitError(text) {
+  return CLAUDE_SESSION_LIMIT_PATTERN.test(text);
+}
 function formatApiKeyErrorSummary(params) {
   if (params.raw.includes(MISSING_KEY_MARKER)) {
     if (params.raw.startsWith(`**${MISSING_KEY_MARKER}**`)) return params.raw;
@@ -163620,6 +163909,15 @@ function formatApiKeyErrorSummary(params) {
   }
   const githubSecretsUrl = `https://github.com/${params.owner}/${params.name}/settings/secrets/actions`;
   const settingsUrl = `${getApiUrl()}/console/${params.owner}/${params.name}`;
+  if (isClaudeSessionLimitError(params.raw)) {
+    const reset = CLAUDE_SESSION_LIMIT_PATTERN.exec(params.raw)?.[1]?.trim();
+    const resets = reset ? ` It resets at **${reset}**.` : "";
+    return [
+      `**Your Claude subscription has hit its usage limit.**${resets} Re-trigger Pullfrog after the reset, or add an \`ANTHROPIC_API_KEY\` repo secret \u2014 Pullfrog routes around an exhausted subscription automatically when one is present.`,
+      "",
+      `[Add repo secret \u2192](${githubSecretsUrl}) \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/keys) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
+    ].join("\n");
+  }
   if (isClaudeSubscriptionDisabledError(params.raw)) {
     return [
       `**Your organization has disabled Claude subscription access for Claude Code.** Ask your Claude organization's admin to re-enable it in the Claude Console, or set an \`ANTHROPIC_API_KEY\` for this repo instead, then re-trigger the run.`,
@@ -164429,7 +164727,9 @@ function decideModelAccess(input) {
   if (input.proxyActive) {
     const target = resolveOpenRouterModel(input.model);
     if (input.oss) {
-      if (target && target === input.subsidyTarget) return { kind: "proxy", target };
+      if (target && (target === input.subsidyTarget || isOssAllowedModel(input.model))) {
+        return { kind: "proxy", target };
+      }
       if (byokAuthorized) return { kind: "byok" };
       return { kind: "error", reason: "oss" };
     }
@@ -164441,6 +164741,11 @@ function decideModelAccess(input) {
   return { kind: "error", reason: "byok_no_key" };
 }
 var MODEL_ACCESS_MARKER = "requested model is not available";
+function ossAllowedLabels() {
+  return OSS_MODEL_ALLOWLIST.map(
+    (slug2) => `\`${resolveDisplayAlias(slug2)?.displayName ?? slug2}\``
+  ).join(", ");
+}
 function buildModelAccessError(input) {
   const settingsUrl = `${getApiUrl()}/console/${input.owner}/${input.name}`;
   const secretsUrl = `https://github.com/${input.owner}/${input.name}/settings/secrets/actions`;
@@ -164448,8 +164753,8 @@ function buildModelAccessError(input) {
   const headline = `**The ${MODEL_ACCESS_MARKER}: \`${input.model}\`.**`;
   const branch = {
     oss: {
-      why: "This repo runs on Pullfrog's OSS subsidy, which only funds the default model. Switch back to the funded model, or add your own provider key to run a different one.",
-      cta: `[Add a provider key \u2192](${secretsUrl}) \xB7 [Setup docs \u2192](${docsUrl})`
+      why: `This repo runs on Pullfrog's OSS subsidy, which funds a set of pre-approved models: ${ossAllowedLabels()}. Pick one of those, or add your own provider key to run a different one.`,
+      cta: `[Configure model \u2192](${settingsUrl}) \xB7 [Add a provider key \u2192](${secretsUrl}) \xB7 [Setup docs \u2192](${docsUrl})`
     },
     byok_no_key: {
       why: `No provider key for \`${input.model}\` is present in this run's environment. Add the matching provider key as a GitHub Actions secret, or pick a model you already have a key for.`,
@@ -164605,12 +164910,14 @@ var ShellPermissionInput = type.enumerated("disabled", "restricted", "enabled");
 var PushPermissionInput = type.enumerated("disabled", "restricted", "enabled");
 var StatusChecksInput = type.enumerated("disabled", "enabled");
 var ProgressCommentsInput = type.enumerated("disabled", "enabled");
+var DebugInput = type.enumerated("disabled", "enabled");
 var JsonPayload = type({
   "~pullfrog": "true",
   version: "string",
   "model?": "string | undefined",
   "modelExplicit?": "boolean | undefined",
   "effort?": "number | string | undefined",
+  "debug?": "boolean | undefined",
   prompt: "string",
   "triggerer?": "string | undefined",
   "baseInstructions?": "string | undefined",
@@ -164645,6 +164952,7 @@ var Inputs = type({
   "prompt_file?": type.string.or("undefined"),
   "model?": type.string.or("undefined"),
   "effort?": type.string.or("undefined"),
+  "debug?": DebugInput.or("undefined"),
   "timeout?": type.string.or("undefined"),
   "push?": PushPermissionInput.or("undefined"),
   "shell?": ShellPermissionInput.or("undefined"),
@@ -164696,15 +165004,24 @@ function resolvePromptFile(input) {
   }
   return content;
 }
+function warnIfDeprecatedStatusChecks(value2) {
+  if (value2 !== void 0) {
+    core6.warning(
+      "`status_checks` is deprecated. Both checks are now repository settings \u2014 open the Pullfrog console for this repo (Automations \u2192 Review PRs) and set them there, then remove `status_checks` from your workflow. It keeps working until you do."
+    );
+  }
+  return value2;
+}
 function resolveNonPromptInputs() {
   return Inputs.omit("prompt", "prompt_file").assert({
     model: core6.getInput("model") || void 0,
     effort: core6.getInput("effort") || void 0,
+    debug: core6.getInput("debug") || void 0,
     timeout: core6.getInput("timeout") || void 0,
     cwd: core6.getInput("cwd") || void 0,
     push: core6.getInput("push") || void 0,
     shell: core6.getInput("shell") || void 0,
-    status_checks: core6.getInput("status_checks") || void 0,
+    status_checks: warnIfDeprecatedStatusChecks(core6.getInput("status_checks") || void 0),
     progress_comments: core6.getInput("progress_comments") || void 0
   });
 }
@@ -164716,6 +165033,8 @@ function resolvePayload(resolvedPromptInput, repoSettings) {
   const model = jsonPayload?.model ?? inputs.model ?? repoSettings.model ?? void 0;
   const rawEffort = jsonPayload?.effort ?? inputs.effort ?? repoSettings.effort ?? void 0;
   const effort = rawEffort === void 0 ? void 0 : parseEffortPosition(String(rawEffort));
+  const debug3 = jsonPayload?.debug ?? inputs.debug === "enabled";
+  if (debug3) process.env.LOG_LEVEL = "debug";
   const isNonCollaborator = !isCollaborator(event);
   const repoShell = repoSettings.shell ?? "restricted";
   const inputShell = inputs.shell;
@@ -164736,6 +165055,7 @@ function resolvePayload(resolvedPromptInput, repoSettings) {
     // the JSON payload). a GHA `model` input or the repo default is not explicit.
     modelExplicit: jsonPayload?.modelExplicit ?? false,
     effort,
+    debug: debug3 || void 0,
     prompt,
     triggerer: jsonPayload?.triggerer ?? // it's not a common use case but GITHUB_ACTOR can be a user when the workflow is manually triggered by a user through GitHub Actions UI
     (!isPullfrog(process.env.GITHUB_ACTOR) ? process.env.GITHUB_ACTOR : void 0),
@@ -164757,9 +165077,11 @@ function resolvePayload(resolvedPromptInput, repoSettings) {
     // input is the source of truth when set (mirrors `push`); otherwise the repo
     // setting decides.
     runStatusCheck: inputs.status_checks === void 0 ? repoSettings.statusChecks : inputs.status_checks === "enabled",
-    // the `pullfrog-approval` verdict check stays opt-in and workflow-only. it exists to
-    // be *required* by branch protection, so it must never turn itself on.
-    approvalCheck: inputs.status_checks === "enabled",
+    // the `pullfrog-approval` verdict check. `Repo.approvalCheck` is authoritative; the
+    // `status_checks` input is DEPRECATED but still honoured, for the dormant installs the
+    // backfill could not read (see `warnIfDeprecatedStatusChecks`). OR rather than override:
+    // this can only ever turn the check ON, never off, so no existing user loses it.
+    approvalCheck: repoSettings.approvalCheck || inputs.status_checks === "enabled",
     // temporary progress chrome. the workflow input is the source of truth when
     // set (mirrors `push`); otherwise the repo setting decides. defaults to true.
     progressComments: inputs.progress_comments === void 0 ? repoSettings.progressComments : inputs.progress_comments === "enabled",
@@ -165131,7 +165453,7 @@ async function resolveProxyModel(ctx) {
     if (ctx.oss) {
       ctx.toolState.modelClamped = { from: ctx.payload.model, reason: "oss" };
       log.info(
-        `\xBB ${ctx.payload.model} overridden \u2014 Pullfrog for OSS covers ${ctx.proxyModel}; add a provider key in your Pullfrog settings to run your configured model.`
+        `\xBB ${ctx.payload.model} overridden \u2014 it is not one of the models Pullfrog for OSS funds, so this run uses ${ctx.proxyModel}; pick a funded model in your Pullfrog settings, or add a provider key to run your own.`
       );
     } else if (isCardGatedModel(ctx.payload.model)) {
       ctx.toolState.modelClamped = { from: ctx.payload.model, reason: "card" };
@@ -165333,6 +165655,7 @@ var defaultSettings = {
   repoIntelligence: false,
   progressComments: true,
   statusChecks: true,
+  approvalCheck: false,
   modeInstructions: {},
   learnings: null,
   learningsHeadings: [],
@@ -165560,6 +165883,40 @@ function formatBillingExhaustedBody(diagnostic) {
 function isProviderModelNotFoundError(message) {
   return message.includes("ProviderModelNotFoundError");
 }
+function isContextOverflowError(message) {
+  return /Prompt is too long/i.test(message) || /Input exceeds context window/i.test(message) || /maximum context length is \d+ tokens/i.test(message) || /Session too large to compact/i.test(message);
+}
+function isNoProviderAvailableError(message) {
+  return /\bNo provider available\b/i.test(message);
+}
+function formatNoProviderAvailableSummary(input) {
+  const settingsUrl = `${getApiUrl()}/console/${input.owner}/${input.name}`;
+  return [
+    "**The provider refused to serve this model.** It's listed in the catalog, but the account this run used has no access to it \u2014 so the request was accepted and then declined.",
+    "",
+    "This often happens when Pullfrog auto-selects a model your account can't reach. Pin an explicit model for this repo, or add credentials for the provider that was picked.",
+    "",
+    `[Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/keys) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`,
+    "",
+    `\`\`\`
+${input.raw}
+\`\`\``
+  ].join("\n");
+}
+function formatContextOverflowSummary(input) {
+  const settingsUrl = `${getApiUrl()}/console/${input.owner}/${input.name}`;
+  return [
+    "**This run exceeded the model's context window.** Pullfrog read more than the model could hold, so it stopped before finishing.",
+    "",
+    `Pick a model with a larger context window, or split this PR into smaller ones and re-trigger.`,
+    "",
+    `[Model settings \u2192](${settingsUrl}) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`,
+    "",
+    `\`\`\`
+${input.raw}
+\`\`\``
+  ].join("\n");
+}
 function formatGenericFailure(errorMessage) {
   return [
     "Pullfrog ran into an unexpected error and couldn't finish this run. The underlying error is below \u2014 re-trigger Pullfrog to try again, and reach out to support if it keeps happening.",
@@ -165581,12 +165938,18 @@ var PROVIDER_BILLING_URLS = {
   anthropic: "https://console.anthropic.com/settings/billing",
   openai: "https://platform.openai.com/account/billing",
   google: "https://aistudio.google.com/usage",
-  opencode: "https://opencode.ai/zen"
+  opencode: "https://opencode.ai/zen",
+  xai: "https://console.x.ai/team/default/billing",
+  openrouter: "https://openrouter.ai/settings/credits"
 };
 function detectProviderId(message) {
   const harnessId = extractProviderId(message);
   if (harnessId) return harnessId;
   if (/credit balance is too low/i.test(message)) return "anthropic";
+  if (/used all available credits/i.test(message)) return "xai";
+  if (/requires more credits|Key limit exceeded \(total limit\)|openrouter\.ai/i.test(message)) {
+    return "openrouter";
+  }
   return null;
 }
 function formatProviderBillingExhausted(input) {
@@ -165614,7 +165977,7 @@ ${input.raw}
 \`\`\``;
 }
 function renderRunError(input) {
-  const billingError = isRouterKeylimitExhaustedError(input.errorMessage) ? new BillingError(input.errorMessage, { code: "router_keylimit_exhausted" }) : null;
+  const billingError = input.routerActive && isRouterKeylimitExhaustedError(input.errorMessage) ? new BillingError(input.errorMessage, { code: "router_keylimit_exhausted" }) : null;
   if (billingError) {
     const body = formatBillingErrorSummary(billingError, input.repo.owner);
     return { summary: body, comment: body };
@@ -165654,6 +166017,26 @@ ${body}`, comment: body };
     });
     return { summary: body, comment: body };
   }
+  if (isNoProviderAvailableError(input.errorMessage)) {
+    const body = formatNoProviderAvailableSummary({
+      owner: input.repo.owner,
+      name: input.repo.name,
+      raw: input.errorMessage
+    });
+    return { summary: `### \u274C Pullfrog failed
+
+${body}`, comment: body };
+  }
+  if (isContextOverflowError(input.errorMessage)) {
+    const body = formatContextOverflowSummary({
+      owner: input.repo.owner,
+      name: input.repo.name,
+      raw: input.errorMessage
+    });
+    return { summary: `### \u274C Pullfrog failed
+
+${body}`, comment: body };
+  }
   if (hangBody) {
     const isBillingExhausted = input.agentDiagnostic?.lastProviderError === "provider billing exhausted";
     return {
@@ -166034,7 +166417,8 @@ async function finalizeSuccessRun(input) {
   const rendered = !input.result.success ? renderRunError({
     errorMessage: input.result.error || "agent run failed",
     repo: input.repo,
-    agentDiagnostic: input.toolState.agentDiagnostic
+    agentDiagnostic: input.toolState.agentDiagnostic,
+    routerActive: !!input.toolContext.payload.proxyModel
   }) : null;
   if (rendered) {
     await reportErrorToComment({
@@ -166482,7 +166866,9 @@ async function main() {
         }
         if (access.kind === "proxy") payload.proxyModel = access.target;
         if (access.kind === "byok") payload.proxyModel = void 0;
-        if (runContext.oss && payload.proxyModel) payload.effort = 0;
+        if (runContext.oss && payload.proxyModel) {
+          payload.effort = ossEffortFloor({ payload });
+        }
         const resolvedModel = payload.proxyModel ? void 0 : resolveModel({ slug: payload.model });
         vertexCredentials = materializeVertexCredentials({ model: resolvedModel });
         const agent2 = resolveAgent({ model: resolvedModel });
@@ -166509,8 +166895,15 @@ async function main() {
         });
         timer.checkpoint("git");
         const pmSpec = await resolvePackageManagerSpec(process.cwd());
-        if (pmSpec) {
-          await ensurePackageManager({ spec: pmSpec, binDir: packageManagerBinDir(tmpdir3) });
+        const pmDetected = await detect({ cwd: process.cwd(), strategies: ["lockfile"] });
+        const pmName = pmSpec?.name ?? pmDetected?.name ?? "npm";
+        if (payload.shell !== "disabled") {
+          const pmError = await provisionPackageManager({
+            name: pmName,
+            declared: pmSpec,
+            binDir: packageManagerBinDir(tmpdir3)
+          });
+          if (pmError) log.warning(`\xBB could not provision ${pmName}: ${pmError}`);
         }
         timer.checkpoint("packageManager");
         const setupHook = await executeLifecycleHook({
@@ -166790,7 +167183,8 @@ ${instructions.user}` : null,
       const rendered = renderRunError({
         errorMessage,
         repo: runContext.repo,
-        agentDiagnostic: toolState.agentDiagnostic
+        agentDiagnostic: toolState.agentDiagnostic,
+        routerActive: !!payload.proxyModel
       });
       await writeRunErrorOutputs({ rendered, toolState });
       if (toolContext) {