pullfrog 0.1.95 → 0.1.97

package/dist/index.js

@@ -1415,9 +1415,9 @@ var require_timers = __commonJS({
       }
     }
     var Timeout = class {
-      constructor(callback, delay2, opaque) {
+      constructor(callback, delay3, opaque) {
         this.callback = callback;
-        this.delay = delay2;
+        this.delay = delay3;
         this.opaque = opaque;
         this.state = -2;
         this.refresh();
@@ -1436,8 +1436,8 @@ var require_timers = __commonJS({
       }
     };
     module.exports = {
-      setTimeout(callback, delay2, opaque) {
-        return delay2 < 1e3 ? setTimeout(callback, delay2, opaque) : new Timeout(callback, delay2, opaque);
+      setTimeout(callback, delay3, opaque) {
+        return delay3 < 1e3 ? setTimeout(callback, delay3, opaque) : new Timeout(callback, delay3, opaque);
       },
       clearTimeout(timeout) {
         if (timeout instanceof Timeout) {
@@ -5717,7 +5717,7 @@ var require_request = __commonJS({
         method,
         body,
         headers,
-        query,
+        query: query2,
         idempotent,
         blocking,
         upgrade,
@@ -5794,7 +5794,7 @@ var require_request = __commonJS({
         this.completed = false;
         this.aborted = false;
         this.upgrade = upgrade || null;
-        this.path = query ? util2.buildURL(path4, query) : path4;
+        this.path = query2 ? util2.buildURL(path4, query2) : path4;
         this.origin = origin;
         this.idempotent = idempotent == null ? method === "HEAD" || method === "GET" : idempotent;
         this.blocking = blocking == null ? false : blocking;
@@ -10508,13 +10508,13 @@ var require_mock_utils = __commonJS({
       }
     }
     function buildKey(opts) {
-      const { path: path4, method, body, headers, query } = opts;
+      const { path: path4, method, body, headers, query: query2 } = opts;
       return {
         path: path4,
         method,
         body,
         headers,
-        query
+        query: query2
       };
     }
     function generateKeyValues(data) {
@@ -10541,7 +10541,7 @@ var require_mock_utils = __commonJS({
       if (mockDispatch2.data.callback) {
         mockDispatch2.data = { ...mockDispatch2.data, ...mockDispatch2.data.callback(opts) };
       }
-      const { data: { statusCode, data, headers, trailers, error: error49 }, delay: delay2, persist } = mockDispatch2;
+      const { data: { statusCode, data, headers, trailers, error: error49 }, delay: delay3, persist } = mockDispatch2;
       const { timesInvoked, times } = mockDispatch2;
       mockDispatch2.consumed = !persist && timesInvoked >= times;
       mockDispatch2.pending = timesInvoked < times;
@@ -10550,10 +10550,10 @@ var require_mock_utils = __commonJS({
         handler2.onError(error49);
         return true;
       }
-      if (typeof delay2 === "number" && delay2 > 0) {
+      if (typeof delay3 === "number" && delay3 > 0) {
         setTimeout(() => {
           handleReply(this[kDispatches]);
-        }, delay2);
+        }, delay3);
       } else {
         handleReply(this[kDispatches]);
       }
@@ -26388,8 +26388,8 @@ var require_coerce = __commonJS({
       const minor = match3[3] || "0";
       const patch = match3[4] || "0";
       const prerelease = options.includePrerelease && match3[5] ? `-${match3[5]}` : "";
-      const build3 = options.includePrerelease && match3[6] ? `+${match3[6]}` : "";
-      return parse6(`${major}.${minor}.${patch}${prerelease}${build3}`, options);
+      const build4 = options.includePrerelease && match3[6] ? `+${match3[6]}` : "";
+      return parse6(`${major}.${minor}.${patch}${prerelease}${build4}`, options);
     };
     module.exports = coerce;
   }
@@ -40308,9 +40308,9 @@ var require_timers2 = __commonJS({
        * before the specified function or code is executed.
        * @param {*} arg
        */
-      constructor(callback, delay2, arg) {
+      constructor(callback, delay3, arg) {
         this._onTimeout = callback;
-        this._idleTimeout = delay2;
+        this._idleTimeout = delay3;
         this._timerArg = arg;
         this.refresh();
       }
@@ -40355,8 +40355,8 @@ var require_timers2 = __commonJS({
        * when the timer expires.
        * @returns {NodeJS.Timeout|FastTimer}
        */
-      setTimeout(callback, delay2, arg) {
-        return delay2 <= RESOLUTION_MS ? setTimeout(callback, delay2, arg) : new FastTimer(callback, delay2, arg);
+      setTimeout(callback, delay3, arg) {
+        return delay3 <= RESOLUTION_MS ? setTimeout(callback, delay3, arg) : new FastTimer(callback, delay3, arg);
       },
       /**
        * The clearTimeout method cancels an instantiated Timer previously created
@@ -40382,8 +40382,8 @@ var require_timers2 = __commonJS({
        * when the timer expires.
        * @returns {FastTimer}
        */
-      setFastTimeout(callback, delay2, arg) {
-        return new FastTimer(callback, delay2, arg);
+      setFastTimeout(callback, delay3, arg) {
+        return new FastTimer(callback, delay3, arg);
       },
       /**
        * The clearTimeout method cancels an instantiated FastTimer previously
@@ -40409,8 +40409,8 @@ var require_timers2 = __commonJS({
        * @deprecated
        * @param {number} [delay=0] The delay in milliseconds to add to the now value.
        */
-      tick(delay2 = 0) {
-        fastNow += delay2 - RESOLUTION_MS + 1;
+      tick(delay3 = 0) {
+        fastNow += delay3 - RESOLUTION_MS + 1;
         onTick();
         onTick();
       },
@@ -42234,7 +42234,7 @@ var require_request3 = __commonJS({
         method,
         body,
         headers,
-        query,
+        query: query2,
         idempotent,
         blocking,
         upgrade,
@@ -42326,7 +42326,7 @@ var require_request3 = __commonJS({
         this.completed = false;
         this.aborted = false;
         this.upgrade = upgrade || null;
-        this.path = query ? serializePathWithQuery(path4, query) : path4;
+        this.path = query2 ? serializePathWithQuery(path4, query2) : path4;
         this.origin = origin;
         this.protocol = getProtocolFromUrlString(origin);
         this.idempotent = idempotent == null ? method === "HEAD" || method === "GET" : idempotent;
@@ -46893,21 +46893,21 @@ var require_client_h1 = __commonJS({
         this.connection = "";
         this.maxResponseSize = client2[kMaxResponseSize];
       }
-      setTimeout(delay2, type2) {
-        if (delay2 !== this.timeoutValue || type2 & USE_FAST_TIMER ^ this.timeoutType & USE_FAST_TIMER) {
+      setTimeout(delay3, type2) {
+        if (delay3 !== this.timeoutValue || type2 & USE_FAST_TIMER ^ this.timeoutType & USE_FAST_TIMER) {
           if (this.timeout) {
             timers.clearTimeout(this.timeout);
             this.timeout = null;
           }
-          if (delay2) {
+          if (delay3) {
             if (type2 & USE_FAST_TIMER) {
-              this.timeout = timers.setFastTimeout(onParserTimeout, delay2, this.timeoutWeakRef);
+              this.timeout = timers.setFastTimeout(onParserTimeout, delay3, this.timeoutWeakRef);
             } else {
-              this.timeout = setTimeout(onParserTimeout, delay2, this.timeoutWeakRef);
+              this.timeout = setTimeout(onParserTimeout, delay3, this.timeoutWeakRef);
               this.timeout?.unref();
             }
           }
-          this.timeoutValue = delay2;
+          this.timeoutValue = delay3;
         } else if (this.timeout) {
           if (this.timeout.refresh) {
             this.timeout.refresh();
@@ -52901,11 +52901,11 @@ var require_mock_utils2 = __commonJS({
       }
       return true;
     }
-    function normalizeSearchParams(query) {
-      if (typeof query !== "string") {
-        return query;
+    function normalizeSearchParams(query2) {
+      if (typeof query2 !== "string") {
+        return query2;
       }
-      const originalQp = new URLSearchParams(query);
+      const originalQp = new URLSearchParams(query2);
       const normalizedQp = new URLSearchParams();
       for (let [key, value2] of originalQp.entries()) {
         key = key.replace("[]", "");
@@ -53013,13 +53013,13 @@ var require_mock_utils2 = __commonJS({
       return path4;
     }
     function buildKey(opts) {
-      const { path: path4, method, body, headers, query } = opts;
+      const { path: path4, method, body, headers, query: query2 } = opts;
       return {
         path: path4,
         method,
         body,
         headers,
-        query
+        query: query2
       };
     }
     function generateKeyValues(data) {
@@ -53056,7 +53056,7 @@ var require_mock_utils2 = __commonJS({
       if (mockDispatch2.data.callback) {
         mockDispatch2.data = { ...mockDispatch2.data, ...mockDispatch2.data.callback(opts) };
       }
-      const { data: { statusCode, data, headers, trailers, error: error49 }, delay: delay2, persist } = mockDispatch2;
+      const { data: { statusCode, data, headers, trailers, error: error49 }, delay: delay3, persist } = mockDispatch2;
       const { timesInvoked, times } = mockDispatch2;
       mockDispatch2.consumed = !persist && timesInvoked >= times;
       mockDispatch2.pending = timesInvoked < times;
@@ -53079,11 +53079,11 @@ var require_mock_utils2 = __commonJS({
         handler2.onError(err);
       }
       handler2.onConnect?.(abort, null);
-      if (typeof delay2 === "number" && delay2 > 0) {
+      if (typeof delay3 === "number" && delay3 > 0) {
         timer = setTimeout(() => {
           timer = null;
           handleReply(this[kDispatches]);
-        }, delay2);
+        }, delay3);
       } else {
         handleReply(this[kDispatches]);
       }
@@ -53453,13 +53453,13 @@ var require_mock_call_history = __commonJS({
     function makeFilterCalls(parameterName) {
       return (parameterValue, logs) => {
         if (typeof parameterValue === "string" || parameterValue == null) {
-          return logs.filter((log3) => {
-            return log3[parameterName] === parameterValue;
+          return logs.filter((log2) => {
+            return log2[parameterName] === parameterValue;
           });
         }
         if (parameterValue instanceof RegExp) {
-          return logs.filter((log3) => {
-            return parameterValue.test(log3[parameterName]);
+          return logs.filter((log2) => {
+            return parameterValue.test(log2[parameterName]);
           });
         }
         throw new InvalidArgumentError(`${parameterName} parameter should be one of string, regexp, undefined or null`);
@@ -53554,8 +53554,8 @@ var require_mock_call_history = __commonJS({
           return this.logs.filter(criteria);
         }
         if (criteria instanceof RegExp) {
-          return this.logs.filter((log3) => {
-            return criteria.test(log3.toString());
+          return this.logs.filter((log2) => {
+            return criteria.test(log2.toString());
           });
         }
         if (typeof criteria === "object" && criteria !== null) {
@@ -53605,13 +53605,13 @@ var require_mock_call_history = __commonJS({
         this.logs = [];
       }
       [kMockCallHistoryAddLog](requestInit) {
-        const log3 = new MockCallHistoryLog(requestInit);
-        this.logs.push(log3);
-        return log3;
+        const log2 = new MockCallHistoryLog(requestInit);
+        this.logs.push(log2);
+        return log2;
       }
       *[Symbol.iterator]() {
-        for (const log3 of this.calls()) {
-          yield log3;
+        for (const log2 of this.calls()) {
+          yield log2;
         }
       }
     };
@@ -56023,18 +56023,18 @@ var require_cache2 = __commonJS({
         }
       }
     }
-    function makeDeduplicationKey(cacheKey2, excludeHeaders) {
+    function makeDeduplicationKey(cacheKey3, excludeHeaders) {
       const headers = {};
-      if (cacheKey2.headers) {
-        const sortedHeaders = Object.keys(cacheKey2.headers).sort();
+      if (cacheKey3.headers) {
+        const sortedHeaders = Object.keys(cacheKey3.headers).sort();
         for (const header of sortedHeaders) {
           if (excludeHeaders?.has(header.toLowerCase())) {
             continue;
           }
-          headers[header] = cacheKey2.headers[header];
+          headers[header] = cacheKey3.headers[header];
         }
       }
-      return JSON.stringify([cacheKey2.origin, cacheKey2.method, cacheKey2.path, headers]);
+      return JSON.stringify([cacheKey3.origin, cacheKey3.method, cacheKey3.path, headers]);
     }
     module.exports = {
       makeCacheKey,
@@ -56608,7 +56608,7 @@ var require_cache_handler = __commonJS({
         }
       }
     }
-    function getSameOriginPath(cacheKey2, location) {
+    function getSameOriginPath(cacheKey3, location) {
       if (typeof location !== "string") {
         return void 0;
       }
@@ -56616,8 +56616,8 @@ var require_cache_handler = __commonJS({
       let requestUrl;
       let locationUrl;
       try {
-        originUrl = new URL(cacheKey2.origin);
-        requestUrl = new URL(cacheKey2.path, originUrl);
+        originUrl = new URL(cacheKey3.origin);
+        requestUrl = new URL(cacheKey3.path, originUrl);
         locationUrl = new URL(location, requestUrl);
       } catch {
         return void 0;
@@ -56627,38 +56627,38 @@ var require_cache_handler = __commonJS({
       }
       return locationUrl.pathname + locationUrl.search;
     }
-    function deleteCachedUri(store, cacheKey2, path4) {
+    function deleteCachedUri(store, cacheKey3, path4) {
       deleteCachedValue(store, {
-        ...cacheKey2,
+        ...cacheKey3,
         path: path4
       });
       for (let i = 0; i < util2.safeHTTPMethods.length; i++) {
         const method = util2.safeHTTPMethods[i];
-        if (method !== cacheKey2.method) {
+        if (method !== cacheKey3.method) {
           deleteCachedValue(store, {
-            ...cacheKey2,
+            ...cacheKey3,
             method,
             path: path4
           });
         }
       }
     }
-    function deleteLocationTargets(store, cacheKey2, headerValue) {
+    function deleteLocationTargets(store, cacheKey3, headerValue) {
       if (headerValue === void 0) {
         return;
       }
       const values = Array.isArray(headerValue) ? headerValue : [headerValue];
       for (let i = 0; i < values.length; i++) {
-        const path4 = getSameOriginPath(cacheKey2, values[i]);
+        const path4 = getSameOriginPath(cacheKey3, values[i]);
         if (path4 !== void 0) {
-          deleteCachedUri(store, cacheKey2, path4);
+          deleteCachedUri(store, cacheKey3, path4);
         }
       }
     }
-    function invalidateUnsafeRequest(store, cacheKey2, resHeaders) {
-      deleteCachedUri(store, cacheKey2, cacheKey2.path);
-      deleteLocationTargets(store, cacheKey2, resHeaders.location);
-      deleteLocationTargets(store, cacheKey2, resHeaders["content-location"]);
+    function invalidateUnsafeRequest(store, cacheKey3, resHeaders) {
+      deleteCachedUri(store, cacheKey3, cacheKey3.path);
+      deleteLocationTargets(store, cacheKey3, resHeaders.location);
+      deleteLocationTargets(store, cacheKey3, resHeaders["content-location"]);
     }
     var CacheHandler = class {
       /**
@@ -56690,11 +56690,11 @@ var require_cache_handler = __commonJS({
        * @param {import('../../types/cache-interceptor.d.ts').default.CacheKey} cacheKey
        * @param {import('../../types/dispatcher.d.ts').default.DispatchHandler} handler
        */
-      constructor({ store, type: type2, cacheByDefault }, cacheKey2, handler2) {
+      constructor({ store, type: type2, cacheByDefault }, cacheKey3, handler2) {
         this.#store = store;
         this.#cacheType = type2;
         this.#cacheByDefault = cacheByDefault;
-        this.#cacheKey = cacheKey2;
+        this.#cacheKey = cacheKey3;
         this.#handler = handler2;
       }
       onRequestStart(controller, context) {
@@ -56887,15 +56887,15 @@ var require_cache_handler = __commonJS({
         this.#handler.onResponseError?.(controller, err);
       }
     };
-    function deleteCachedValue(store, cacheKey2) {
+    function deleteCachedValue(store, cacheKey3) {
       try {
-        store.delete(cacheKey2)?.catch?.(noop4);
+        store.delete(cacheKey3)?.catch?.(noop4);
       } catch {
       }
     }
-    function deleteCachedValueIfNotModified(statusCode, store, cacheKey2) {
+    function deleteCachedValueIfNotModified(statusCode, store, cacheKey3) {
       if (statusCode === 304) {
-        deleteCachedValue(store, cacheKey2);
+        deleteCachedValue(store, cacheKey3);
       }
     }
     function revalidationResponseDisallowsCachedReuse(cacheType, resHeaders, cacheControlDirectives) {
@@ -57461,9 +57461,9 @@ var require_cache3 = __commonJS({
     function revalidationResponseUpdatesCacheControl(headers) {
       return headers["cache-control"] !== void 0;
     }
-    function deleteCachedValue(store, cacheKey2) {
+    function deleteCachedValue(store, cacheKey3) {
       try {
-        store.delete(cacheKey2)?.catch?.(nop);
+        store.delete(cacheKey3)?.catch?.(nop);
       } catch {
       }
     }
@@ -57515,7 +57515,7 @@ var require_cache3 = __commonJS({
       const staleWhileRevalidateExpiry = result.staleAt + staleWhileRevalidate * 1e3;
       return now <= staleWhileRevalidateExpiry;
     }
-    function handleUncachedResponse(dispatch, globalOpts, cacheKey2, handler2, opts, reqCacheControl) {
+    function handleUncachedResponse(dispatch, globalOpts, cacheKey3, handler2, opts, reqCacheControl) {
       if (reqCacheControl?.["only-if-cached"]) {
         let aborted3 = false;
         try {
@@ -57543,7 +57543,7 @@ var require_cache3 = __commonJS({
         }
         return true;
       }
-      return dispatch(opts, new CacheHandler(globalOpts, cacheKey2, handler2));
+      return dispatch(opts, new CacheHandler(globalOpts, cacheKey3, handler2));
     }
     function sendCachedValue(handler2, opts, result, age, context, isStale2) {
       const stream = util2.isStream(result.body) ? result.body : Readable2.from(result.body ?? []);
@@ -57599,20 +57599,20 @@ var require_cache3 = __commonJS({
         });
       }
     }
-    function handleResult2(dispatch, globalOpts, cacheKey2, handler2, opts, reqCacheControl, result) {
+    function handleResult2(dispatch, globalOpts, cacheKey3, handler2, opts, reqCacheControl, result) {
       if (!result) {
-        return handleUncachedResponse(dispatch, globalOpts, cacheKey2, handler2, opts, reqCacheControl);
+        return handleUncachedResponse(dispatch, globalOpts, cacheKey3, handler2, opts, reqCacheControl);
       }
       if (globalOpts.type === "shared" && Object.hasOwn(result.headers, "set-cookie")) {
         if (util2.isStream(result.body)) {
           result.body.on("error", nop).destroy();
         }
-        deleteCachedValue(globalOpts.store, cacheKey2);
-        return handleUncachedResponse(dispatch, globalOpts, cacheKey2, handler2, opts, reqCacheControl);
+        deleteCachedValue(globalOpts.store, cacheKey3);
+        return handleUncachedResponse(dispatch, globalOpts, cacheKey3, handler2, opts, reqCacheControl);
       }
       const now = Date.now();
       if (now > result.deleteAt) {
-        return dispatch(opts, new CacheHandler(globalOpts, cacheKey2, handler2));
+        return dispatch(opts, new CacheHandler(globalOpts, cacheKey3, handler2));
       }
       const age = Math.round((now - result.cachedAt) / 1e3);
       const requestMaxAgeExpired = reqCacheControl?.["max-age"] !== void 0 && age >= reqCacheControl["max-age"];
@@ -57620,7 +57620,7 @@ var require_cache3 = __commonJS({
       const revalidate = requestMaxAgeExpired || needsRevalidation(result, reqCacheControl, opts);
       if (stale || revalidate) {
         if (util2.isStream(opts.body) && util2.bodyLength(opts.body) !== 0) {
-          return dispatch(opts, new CacheHandler(globalOpts, cacheKey2, handler2));
+          return dispatch(opts, new CacheHandler(globalOpts, cacheKey3, handler2));
         }
         if (!revalidate && withinStaleWhileRevalidateWindow(result, globalOpts.type)) {
           sendCachedValue(handler2, opts, result, age, null, true);
@@ -57631,7 +57631,7 @@ var require_cache3 = __commonJS({
                 ...opts,
                 headers: headers2
               },
-              new CacheHandler(globalOpts, cacheKey2, {
+              new CacheHandler(globalOpts, cacheKey3, {
                 // Silent handler that just updates the cache
                 onRequestStart() {
                 },
@@ -57671,11 +57671,11 @@ var require_cache3 = __commonJS({
                     if (util2.isStream(result.body)) {
                       result.body.on("error", nop).destroy();
                     }
-                    deleteCachedValue(globalOpts.store, cacheKey2);
-                    return dispatch(opts, new CacheHandler(globalOpts, cacheKey2, handler2));
+                    deleteCachedValue(globalOpts.store, cacheKey3);
+                    return dispatch(opts, new CacheHandler(globalOpts, cacheKey3, handler2));
                   }
                   if (revalidationResponseUpdatesCacheControl(headers2)) {
-                    deleteCachedValue(globalOpts.store, cacheKey2);
+                    deleteCachedValue(globalOpts.store, cacheKey3);
                   }
                 }
                 sendCachedValue(handler2, opts, result, age, context, stale);
@@ -57683,7 +57683,7 @@ var require_cache3 = __commonJS({
                 result.body.on("error", nop).destroy();
               }
             },
-            new CacheHandler(globalOpts, cacheKey2, handler2),
+            new CacheHandler(globalOpts, cacheKey3, handler2),
             withinStaleIfErrorThreshold
           )
         );
@@ -57758,16 +57758,16 @@ var require_cache3 = __commonJS({
           if (reqCacheControl?.["no-store"]) {
             return dispatch(opts2, handler2);
           }
-          const cacheKey2 = makeCacheKey(opts2);
+          const cacheKey3 = makeCacheKey(opts2);
           if (!arrayIncludes(util2.safeHTTPMethods, opts2.method)) {
-            return dispatch(opts2, new CacheHandler(globalOpts, cacheKey2, handler2));
+            return dispatch(opts2, new CacheHandler(globalOpts, cacheKey3, handler2));
           }
-          const result = store.get(cacheKey2);
+          const result = store.get(cacheKey3);
           if (result && typeof result.then === "function") {
             return result.then((result2) => handleResult2(
               dispatch,
               globalOpts,
-              cacheKey2,
+              cacheKey3,
               handler2,
               opts2,
               reqCacheControl,
@@ -57777,7 +57777,7 @@ var require_cache3 = __commonJS({
             return handleResult2(
               dispatch,
               globalOpts,
-              cacheKey2,
+              cacheKey3,
               handler2,
               opts2,
               reqCacheControl,
@@ -58670,8 +58670,8 @@ var require_deduplicate = __commonJS({
               }
             }
           }
-          const cacheKey2 = makeCacheKey(opts2);
-          const dedupeKey = makeDeduplicationKey(cacheKey2, excludeHeaderNamesSet);
+          const cacheKey3 = makeCacheKey(opts2);
+          const dedupeKey = makeDeduplicationKey(cacheKey3, excludeHeaderNamesSet);
           const pendingHandler = pendingRequests.get(dedupeKey);
           if (pendingHandler) {
             if (pendingHandler.addWaitingHandler(handler2)) {
@@ -76276,8 +76276,8 @@ var require_core2 = __commonJS({
             return this;
           }
           case "object": {
-            const cacheKey2 = schemaKeyRef;
-            this._cache.delete(cacheKey2);
+            const cacheKey3 = schemaKeyRef;
+            this._cache.delete(cacheKey3);
             let id = schemaKeyRef[this.opts.schemaId];
             if (id) {
               id = (0, resolve_1.normalizeId)(id);
@@ -76442,11 +76442,11 @@ var require_core2 = __commonJS({
     Ajv5.ValidationError = validation_error_1.default;
     Ajv5.MissingRefError = ref_error_1.default;
     exports.default = Ajv5;
-    function checkOptions(checkOpts, options, msg, log3 = "error") {
+    function checkOptions(checkOpts, options, msg, log2 = "error") {
       for (const key in checkOpts) {
         const opt = key;
         if (opt in options)
-          this.logger[log3](`${msg}: option ${key}. ${checkOpts[opt]}`);
+          this.logger[log2](`${msg}: option ${key}. ${checkOpts[opt]}`);
       }
     }
     function getSchEnv(keyRef) {
@@ -98088,14 +98088,14 @@ var require_turndown_cjs = __commonJS({
         } else if (node2.nodeType === 1) {
           replacement = replacementForNode.call(self2, node2);
         }
-        return join28(output, replacement);
+        return join29(output, replacement);
       }, "");
     }
     function postProcess(output) {
       var self2 = this;
       this.rules.forEach(function(rule) {
         if (typeof rule.append === "function") {
-          output = join28(output, rule.append(self2.options));
+          output = join29(output, rule.append(self2.options));
         }
       });
       return output.replace(/^[\t\r\n]+/, "").replace(/[\t\r\n\s]+$/, "");
@@ -98107,7 +98107,7 @@ var require_turndown_cjs = __commonJS({
       if (whitespace.leading || whitespace.trailing) content = content.trim();
       return whitespace.leading + rule.replacement(content, node2, this.options) + whitespace.trailing;
     }
-    function join28(output, replacement) {
+    function join29(output, replacement) {
       var s1 = trimTrailingNewlines(output);
       var s2 = trimLeadingNewlines(replacement);
       var nls = Math.max(output.length - s1.length, replacement.length - s2.length);
@@ -99714,7 +99714,7 @@ var require_node = __commonJS({
     var tty = __require("tty");
     var util2 = __require("util");
     exports.init = init;
-    exports.log = log3;
+    exports.log = log2;
     exports.formatArgs = formatArgs2;
     exports.save = save;
     exports.load = load;
@@ -99849,7 +99849,7 @@ var require_node = __commonJS({
       }
       return (/* @__PURE__ */ new Date()).toISOString() + " ";
     }
-    function log3(...args2) {
+    function log2(...args2) {
       return process.stderr.write(util2.formatWithOptions(exports.inspectOpts, ...args2) + "\n");
     }
     function save(namespaces) {
@@ -102898,9 +102898,9 @@ var init_file_type = __esm({
 });
 
 // main.ts
-import { existsSync as existsSync10, readdirSync as readdirSync2 } from "node:fs";
+import { existsSync as existsSync11, readdirSync as readdirSync2 } from "node:fs";
 import { readFile as readFile5 } from "node:fs/promises";
-import { join as join27 } from "node:path";
+import { join as join28 } from "node:path";
 
 // node_modules/.pnpm/package-manager-detector@1.8.0/node_modules/package-manager-detector/dist/commands.mjs
 function splitRunArgs(args2, valueFlags = []) {
@@ -103909,6 +103909,15 @@ var providers = {
         openRouterEffort: [],
         openRouterResolve: "openrouter/qwen/qwen3.8-flash"
       },
+      // Zen lists Mistral Large 4 at half its list price for launch, level with
+      // the routers. hidden until a published `pullfrog` resolves it, as there.
+      "mistral-large": {
+        displayName: "Mistral Large",
+        resolve: "opencode/mistral-large-4",
+        effort: ["none", "high"],
+        openRouterResolve: "openrouter/mistralai/mistral-large-4-0",
+        hidden: true
+      },
       "gpt-5-nano": {
         displayName: "GPT Nano",
         resolve: "opencode/gpt-5.4-nano",
@@ -103957,12 +103966,12 @@ var providers = {
         fallback: "opencode/big-pickle"
       },
       // Zen's FREE stealth preview (listed 2026-09-23), the third after
-      // big-pickle and union-alpha. OpenRouter's listing: prompts and
-      // completions may be retained by the provider, not trained on. unlike the
-      // first two it publishes an effort ladder, so the gate mirrors one here.
+      // big-pickle and union-alpha. Zen's docs: zero retention, no training.
+      // unlike the first two it publishes an effort ladder, so the gate
+      // mirrors one here.
       "space-bunny": {
         displayName: "Space Bunny",
-        description: "Stealth preview; prompts may be retained",
+        description: "Stealth preview, free for a limited time",
         resolve: "opencode/space-bunny-free",
         effort: ["low", "medium", "high", "xhigh", "max"],
         // free to run, still gated on the provider's own OPENCODE_API_KEY —
@@ -103980,17 +103989,30 @@ var providers = {
         // see the big-pickle note above (#1077).
         isFree: true
       },
-      // Zen's FREE stealth preview (listed 2026-10-01), the fifth promo. Zen
-      // has not published its data terms yet, so the description claims none.
+      // Zen's FREE stealth preview (listed 2026-10-01), the fifth promo. Zen's
+      // docs: data may be used to improve the model during the free period.
       "fledge-alpha": {
         displayName: "Fledge Alpha",
-        description: "Stealth preview, free for a limited time",
+        description: "Stealth preview; data may be used to improve it",
         resolve: "opencode/fledge-alpha-free",
         effort: ["low", "high", "max"],
         // free to run, still gated on the provider's own OPENCODE_API_KEY —
         // see the big-pickle note above (#1077).
         isFree: true
       },
+      // Zen's FREE preview (listed 2026-10-06), the sixth promo, on Fledge
+      // Alpha's terms. hidden until a published `pullfrog` resolves it.
+      exo: {
+        displayName: "Exo",
+        description: "Preview; data may be used to improve it",
+        resolve: "opencode/exo-free",
+        // Zen publishes a single rung.
+        effort: ["high"],
+        // free to run, still gated on the provider's own OPENCODE_API_KEY —
+        // see the big-pickle note above (#1077).
+        isFree: true,
+        hidden: true
+      },
       // Zen's live free MiMo, and the second free row in a menu that big-pickle
       // was alone in since `mimo-v2-pro-free` lost its model.
       mimo: {
@@ -104053,7 +104075,11 @@ var providers = {
       "glm-flash": {
         displayName: "GLM Flash",
         resolve: "opencode-go/glm-5.3-flash",
-        effort: ["low", "high", "max"],
+        // the Go endpoint intermittently rejects reasoning_effort ("native reasoning
+        // control reasoning_effort is not allowed") mid-run, despite models.dev
+        // advertising a ladder — so this route sends none.
+        effort: [],
+        openRouterEffort: ["low", "high", "max"],
         openRouterResolve: "openrouter/z-ai/glm-5.3-flash"
       },
       // legacy alias — the slug pinned a version instead of a brand tier and
@@ -104442,6 +104468,17 @@ var providers = {
         resolve: "openrouter/meta/muse-spark-1.3-contributor",
         effort: ["minimal", "low", "medium", "high", "xhigh", "max"],
         openRouterResolve: "openrouter/meta/muse-spark-1.3-contributor"
+      },
+      // Mistral's flagship (public preview, 2026-10-06), on the routers only:
+      // the catalog carries no direct Mistral provider. out of the pickers
+      // until a published `pullfrog` resolves the slug; see "A new alias
+      // reaches the picker at merge".
+      "mistral-large": {
+        displayName: "Mistral Large",
+        resolve: "openrouter/mistralai/mistral-large-4-0",
+        effort: ["none", "high"],
+        openRouterResolve: "openrouter/mistralai/mistral-large-4-0",
+        hidden: true
       }
     }
   }),
@@ -104509,7 +104546,7 @@ var providers = {
       "deepseek-pro": {
         displayName: "DeepSeek Pro",
         resolve: "vercel/deepseek/deepseek-v4-pro-0813",
-        effort: ["none", "high", "max"]
+        effort: ["none", "low", "high", "max"]
       },
       // the gateway's bare `deepseek-v4-flash` is the April preview — the same
       // fork trap as OpenRouter, with `deepseek-v4-flash-0731` beside it — so
@@ -104517,7 +104554,7 @@ var providers = {
       "deepseek-flash": {
         displayName: "DeepSeek Flash",
         resolve: "vercel/deepseek/deepseek-v4.1-flash",
-        effort: ["none", "high", "max"]
+        effort: ["none", "low", "high", "max"]
       },
       glm: {
         displayName: "GLM",
@@ -104533,6 +104570,13 @@ var providers = {
         displayName: "Muse Spark",
         resolve: "vercel/meta/muse-spark-1.3",
         effort: ["minimal", "low", "medium", "high", "xhigh"]
+      },
+      // hidden until a published `pullfrog` resolves it, as on OpenRouter.
+      "mistral-large": {
+        displayName: "Mistral Large",
+        resolve: "vercel/mistral/mistral-large-4",
+        effort: ["none", "low", "medium", "high"],
+        hidden: true
       }
     }
   })
@@ -104723,13 +104767,13 @@ for (const [name, ladder] of Object.entries({ ...PROVIDER_LADDERS, router: ROUTE
   if (terminal.size < 2) throw new Error(`${name} ladder runs every tier on ${[...terminal][0]}`);
 }
 var OSS_MODEL_ALLOWLIST = [
-  "deepseek/deepseek-flash",
-  "openai/gpt-luna",
-  "openrouter/minimax-m2.5",
   // opt-in: 0.86x the old default on the measured mix, and Meta trains on the
   // traffic — fine for public code on headless runs, the human decided
   // 2026-09-11. unmeasured on a real run; not the default until it is.
-  "meta/muse-spark-contributor"
+  "meta/muse-spark-contributor",
+  "deepseek/deepseek-flash",
+  "openai/gpt-luna",
+  "openrouter/minimax-m2.5"
 ];
 var OSS_RECOMMENDED_MODEL = AUTO_TIER_TARGET[AUTO_EFFICIENT];
 function ossFundedModelNames() {
@@ -105413,7 +105457,13 @@ var PROVIDER_ERROR_PATTERNS = [
   // …/settings/credits`) matched neither this nor `requires more credits`, so
   // the one run in that episode that was a genuinely empty wallet rendered with
   // no CTA at all while runs 1-6 rendered correctly.
-  { regex: /Insufficient (?:balance|credits)/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
+  // `account funds` is Zen's (#1474).
+  {
+    regex: /Insufficient (?:balance|credits|account funds)/i,
+    label: PROVIDER_BILLING_EXHAUSTED_LABEL
+  },
+  // OpenAI's `You have no credits remaining` (#1474).
+  { regex: /no credits remaining/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
   { regex: /credit balance is too low/i, label: PROVIDER_BILLING_EXHAUSTED_LABEL },
   // "spending cap" (Gemini) and "spending limit" (xAI, #1076) are the same
   // condition in two house styles — a configured ceiling was reached.
@@ -105534,6 +105584,9 @@ function isRouterKeylimitExhaustedError(text) {
 function isProviderBillingExhausted(text) {
   return findProviderErrorMatch(text)?.label === PROVIDER_BILLING_EXHAUSTED_LABEL;
 }
+function isProviderUsageLimit(text) {
+  return findProviderErrorMatch(text)?.label === PROVIDER_USAGE_LIMIT_LABEL;
+}
 function isProviderNoRoutableEndpoints(text) {
   return findProviderErrorMatch(text)?.label === PROVIDER_NO_ENDPOINTS_LABEL;
 }
@@ -105605,7 +105658,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.95",
+  version: "0.1.97",
   cliContractVersion: "1",
   type: "module",
   bin: {
@@ -105671,7 +105724,7 @@ var package_default = {
     undici: "^7.22.0",
     vitest: "^4.0.17",
     yaml: "^2.8.2",
-    yes: "0.1.0",
+    yes: "0.2.3",
     zod: "4.3.6"
   },
   repository: {
@@ -105839,6 +105892,9 @@ function trackChild(options) {
 function untrackChild(child) {
   activeChildren.delete(child);
 }
+function isTrackedChild(child) {
+  return activeChildren.has(child);
+}
 function killTrackedChildren() {
   for (const entry of activeChildren) {
     const child = entry[0];
@@ -105852,6 +105908,7 @@ function killTrackedChildren() {
     }
     child.kill("SIGKILL");
   }
+  activeChildren.clear();
 }
 var handlersInstalled = false;
 function installSignalHandler() {
@@ -105898,6 +105955,7 @@ ${this.buffer}`;
 };
 async function spawn(options) {
   const activityTimeoutMs = options.activityTimeout ?? DEFAULT_ACTIVITY_TIMEOUT_MS;
+  options.signal?.throwIfAborted();
   installSignalHandler();
   const startTime = performance3.now();
   const retain = options.retain ?? "tail";
@@ -105933,17 +105991,18 @@ async function spawn(options) {
     let isActivityTimedOut = false;
     let lastActivityTime = performance3.now();
     let killedAtIdleMs;
+    const terminate = () => {
+      if (sigkillEscalatorId) return;
+      killSelf("SIGTERM");
+      sigkillEscalatorId = setTimeout(() => killSelf("SIGKILL"), 5e3);
+    };
     if (options.timeout) {
       timeoutId = setTimeout(() => {
         isTimedOut = true;
-        killSelf("SIGTERM");
-        sigkillEscalatorId = setTimeout(() => {
-          if (!child.killed) {
-            killSelf("SIGKILL");
-          }
-        }, 5e3);
+        terminate();
       }, options.timeout);
     }
+    options.signal?.addEventListener("abort", terminate, { once: true });
     if (activityTimeoutMs > 0) {
       log.debug(
         `spawn activity timer: pid=${child.pid} cmd=${options.cmd} timeout=${activityTimeoutMs}ms`
@@ -106008,6 +106067,11 @@ async function spawn(options) {
       if (timeoutId) clearTimeout(timeoutId);
       if (sigkillEscalatorId) clearTimeout(sigkillEscalatorId);
       if (activityCheckIntervalId) clearInterval(activityCheckIntervalId);
+      options.signal?.removeEventListener("abort", terminate);
+      if (options.signal?.aborted) {
+        reject(options.signal.reason);
+        return;
+      }
       if (isTimedOut) {
         reject(
           new SpawnTimeoutError(`process timed out after ${options.timeout}ms`, SPAWN_TIMEOUT_CODE)
@@ -106046,6 +106110,7 @@ ${killMsg}` : killMsg;
       if (timeoutId) clearTimeout(timeoutId);
       if (sigkillEscalatorId) clearTimeout(sigkillEscalatorId);
       if (activityCheckIntervalId) clearInterval(activityCheckIntervalId);
+      options.signal?.removeEventListener("abort", terminate);
       const errMsg = `[spawn] ${options.cmd}: ${error49.message}`;
       console.error(errMsg);
       const existingStderr = stderrBuffer?.toString() ?? "";
@@ -106287,17 +106352,16 @@ Report findings clearly with file:line references and quoted evidence where poss
 // modes.ts
 var PR_SUMMARY_FORMAT = `### Default format
 
-The body has at most three parts, in this order:
+The body has at most two parts, in this order:
 
 1. **Reviewed changes preamble** \u2014 a bolded \`**Reviewed changes**\` lead-in with one sentence on what was reviewed in this run (for \`IncrementalReview\`: what changed since the prior pullfrog review), then a bullet list of the substantive changes \u2014 short bolded title, one sentence each. A reviewer should understand the full reviewed scope from this list alone. Close the preamble with the metadata comment below.
 2. **Cross-cutting issue sections** (zero or more) \u2014 one \`### {emoji} {what's wrong, not what to do}\` heading per concern.
-3. **\`### \u2139\uFE0F Nitpicks\`** at the very bottom, if any \u2014 a flat bullet list, no technical-details block. Only for what has no runtime effect: a stale or wrong comment or doc, a misleading name, a typo, dead code, a missing test. Never formatting or whitespace.
 
 **Inline vs. body.** Concerns that anchor to a specific line go inline (the \`comments\` parameter), even when their implications are broad. Body \`### \` sections are reserved for concerns that have **no line to anchor to** \u2014 *absence* (something the diff should have done but didn't), *sequencing* (rollout / deletion / migration order), *design decisions only the human can make*, or *scope questions the diff raises but doesn't address*. With no non-anchorable concerns, the body is just the preamble + metadata.
 
 **Severity emoji** on every \`### \` heading, and nowhere else: \u{1F6A8} critical (blocks merge \u2014 data loss, security, broken core flow) \xB7 \u26A0\uFE0F important (must address before merging) \xB7 \u2139\uFE0F informational (mergeable as-is).
 
-**Behavior decides placement, not fix size.** A finding that changes what the code does \u2014 a wrong value or message, a crash, a race, a leak, a missed cleanup, a slow path \u2014 gets its own inline comment (or a \`### \` section if no line anchors it) at its real severity, however small the fix. Never put it in Nitpicks: before submitting, re-read each Nitpicks bullet and move any that fails this test inline.
+**Behavior decides placement, not fix size.** A finding that changes what the code does \u2014 a wrong value or message, a crash, a race, a leak, a missed cleanup, a slow path \u2014 gets its own inline comment (or a \`### \` section if no line anchors it) at its real severity, however small the fix.
 
 **Blank line between every block-level element.** GitHub's markdown parser requires one before and after HTML tags (\`<details>\`, \`<summary>\`, \`<sub>\`, \`<br/>\`) \u2014 without it GitHub treats what follows as a continuation of the HTML block and renders your markdown as literal text. This is a parser quirk, not a style preference, and it permanently breaks the posted review.
 
@@ -106446,8 +106510,6 @@ For simple, well-defined tasks, skip the plan phase and go straight to build.`
 
 3. **triage**: orient yourself on the PR \u2014 identify *what kind of thing this is* (domain it touches, seams it crosses, external contracts it depends on, user-facing surfaces it changes). pull as much context as you need to render a confident, well-grounded review: read related files, grep for callers of changed symbols, check tests that exercise the touched paths, fetch related GitHub state. **you are the synthesizer** \u2014 never delegate understanding to subagents.
 
-   when the diff adds or changes a test, check that it can actually fail: a test that would still pass with the bug present is theatre, not coverage. the usual tell is a loose assertion standing where an exact one belongs \u2014 \`>=\` or a truthiness check over an expected value, or a snapshot that absorbs whatever it is handed. read the assertion against the behavior it claims to pin, not against whether it currently passes.
-
    skip the deeper pass and submit a \`No new issues found.\` review per step 7 only when the diff has **no behavioral surface at all** \u2014 doc typos, whitespace/formatting, lockfile or generated-code regeneration, a mechanical rename whose only effect is import-path updates. line count is not the signal: a one-line change to auth, money, SQL, a comparison operator, a redirect, or a config default is not trivial.
 
 4. **specialist decision**: after reading the complete diff, name the questions you still cannot answer confidently yourself, and dispatch one \`${REVIEWER_AGENT_NAME}\` specialist per question. a question qualifies only when a specialist could return evidence that **changes your disposition** on the PR \u2014 generic requests for another look, extra confidence, or polish do not. most reviews need zero or one; some need several.
@@ -106471,8 +106533,6 @@ For simple, well-defined tasks, skip the plan phase and go straight to build.`
 
 6. **aggregate & draft**: when specialist results land, merge findings; de-dup overlaps (two specialists catching the same issue = higher-confidence signal); trace each finding yourself before accepting it. drop praise, style preferences, speculative/unverified claims, findings about pre-existing code unrelated to the PR (heuristic: if the finding's root cause lives in lines this PR added or modified, it's in scope; otherwise drop unless the PR plausibly introduced or amplified the regression), and anything not actionable. also drop **bloat-shaped findings** \u2014 proposed fixes that would add defensive checks for cases that can't happen, abstractions used once, comments restating obvious code, tests asserting tautologies, or "just-in-case" guards. subagents are fallible and bias toward recommending changes; the bar for an actionable inline comment is sound + correct + elegant. recommending a change that improves only one of the three (or worse, degrades elegance to nominally improve correctness) makes the codebase worse, not better.
 
-   **Hunt for non-anchored concerns before drafting.** After collecting your anchored findings, deliberately scan for concerns that have no specific line to point at \u2014 typically: deletion / cleanup plans for code the diff replaces or shadows; rollout sequencing (what happens to in-flight state during deploy / revert?); scope questions that only the human can answer (e.g. is the legacy path going away or is this a long-term dual track?); architectural risks the diff opens up that aren't a single-line bug.
-
    for surviving findings, draft inline comments with NEW line numbers from the diff \u2014 attach a \`<details>Technical details</details>\` block to any inline comment whose fix is non-trivial or has cross-file implications (see Inline technical details in the format below). every comment must be actionable, 2-3 sentences max in the visible part, one per root cause \u2014 name its other sites in that comment rather than repeating it. use GitHub permalink format for code references. for impact-analysis findings (stale references after rename/remove), report them in the review body ordered by severity (runtime breakage > incorrect docs > stale comments) rather than as inline comments unless they're anchored to a specific line.
 
 7. **submit**: ALWAYS submit exactly one review via \`${t("create_pull_request_review")}\`. Do NOT call \`report_progress\` \u2014 the review is the final record and the progress comment will be cleaned up automatically.
@@ -106494,7 +106554,7 @@ For simple, well-defined tasks, skip the plan phase and go straight to build.`
      \`approved: false\`. Body opens with \`> [!CAUTION]\\n> This PR introduces ...\`, followed by the PR summary. Include all inline comments via \`comments\`.
    - **must-address non-critical findings** (real consequences if shipped \u2014 incorrect behavior in non-critical paths, missing validation on user input, regressions the author should fix before merge):
      \`approved: false\`. Body opens with \`> [!IMPORTANT]\\n> ...\`, followed by the PR summary. Reserve this tier for findings with concrete fallout \u2014 do NOT use \`[!IMPORTANT]\` for nits, style preferences, or "consider also" suggestions. Include all inline comments via \`comments\`.
-   - **minor suggestions only** (low-stakes findings, or Nitpicks only):
+   - **minor suggestions only** (low-stakes findings):
      \`approved: false\`. Body opens with \`> \u2139\uFE0F No critical issues \u2014 minor suggestions inline.\\n\\n\` followed by the PR summary. Include all inline comments via \`comments\`. Vary the wording after the emoji to fit the review (e.g. "Minor suggestions only.", "Two rough edges worth a look."), but always keep the \u2139\uFE0F prefix and keep it short.
    - **informational observations** (mergeable as-is, nothing actionable \u2014 e.g. prior feedback addressed cleanly, calling out something noteworthy without recommending a change):
      \`approved: true\`. Body opens with \`> \u2705 No new issues found.\\n\\n\` followed by the PR summary. Do NOT include inline \`comments\` \u2014 the \u2705 signals "no action needed", which contradicts an actionable anchor; if a point is concrete enough to anchor to a line, downgrade the whole review to "minor suggestions only" (\`approved: false\`) instead.
@@ -106537,8 +106597,6 @@ ${PR_SUMMARY_FORMAT}`
 
 5. **triage**: orient on the *incremental* changes \u2014 domain, seams, external contracts, user-facing surfaces. pull as much context as you need to render a confident review: read related files, grep for callers of changed symbols, check tests that exercise the touched paths. **you are the synthesizer.**
 
-   a test added or changed in this delta must be able to fail \u2014 one that would still pass with the bug present is theatre, not coverage. the tell is a loose assertion where an exact one belongs (\`>=\` or a truthiness check over an expected value, a snapshot that absorbs whatever it is handed).
-
    skip the deeper pass and jump to step 10's non-substantive path (do NOT submit a review) only when the incremental changes have **no behavioral surface at all** \u2014 formatting, comment tweaks, import reordering, lockfile regen, a mechanical rename of import paths. line count is not the signal: a one-line change to auth, money, SQL, a comparison operator, a redirect, or a config default is not trivial.
 
 6. **specialist decision**: after covering the incremental and full diffs, name the questions about the new changes that you still cannot answer confidently yourself, and dispatch one \`${REVIEWER_AGENT_NAME}\` specialist per question. a question qualifies only when a specialist could return evidence that **changes your disposition** on the PR \u2014 generic requests for another look, extra confidence, or polish do not. most incremental reviews need zero or one, especially thread-reply re-reviews; some need several.
@@ -106562,11 +106620,9 @@ ${PR_SUMMARY_FORMAT}`
 
 8. **aggregate, draft, self-critique**: merge findings (yours + output from every specialist you dispatched); de-dup overlaps; trace each finding yourself. drop praise, style preferences, speculative/unverified claims, findings about pre-existing code unrelated to the new commits, anything not actionable, and anything that re-states prior review feedback (heuristic: if the finding's root cause lives in lines the *new commits* added or modified, it's in scope; otherwise drop). also drop **bloat-shaped findings** \u2014 proposed fixes that would add defensive checks for cases that can't happen, abstractions used once, comments restating obvious code, tests asserting tautologies, or "just-in-case" guards. subagents are fallible and bias toward recommending changes; the bar for an actionable inline comment is sound + correct + elegant. recommending a change that improves only one of the three (or degrades elegance to nominally improve correctness) makes the codebase worse, not better. To compute "lines the new commits added or modified": if \`incrementalDiffPath\` from step 2 is present, use it directly. Otherwise, take the prior Pullfrog review's \`commit_id\` (returned alongside each entry from \`${t("list_pull_request_reviews")}\` in step 4) and run \`git diff <prior-review-sha>..HEAD\` to isolate the lines added since that review.
 
-   **Hunt for non-anchored concerns before drafting.** After collecting your anchored findings, deliberately scan for concerns that have no specific line to point at \u2014 typically: deletion / cleanup plans for code the new commits replace or shadow; rollout sequencing (what happens to in-flight state during deploy / revert?); scope questions that only the human can answer (e.g. is the legacy path going away or is this a long-term dual track?); architectural risks the new commits open up that aren't a single-line bug.
-
    draft inline comments with NEW line numbers from the full PR diff \u2014 attach a \`<details>Technical details</details>\` block to any inline comment whose fix is non-trivial or has cross-file implications (see Inline technical details in the format below). every comment must be actionable, 2-3 sentences max in the visible part, one per root cause \u2014 name its other sites in that comment rather than repeating it.
 
-9. **build the review body**: use the same default format as Review mode (preamble + optional cross-cutting \`### \` sections + optional \`### \u2139\uFE0F Nitpicks\`) \u2014 scoped to the **incremental delta**, not the full PR. The "Reviewed changes" bullets describe what changed since the prior pullfrog review (each bullet starts with a past-tense verb, e.g. \`- Extracted shared CLI runtime into a single module\`). Do NOT include a separate "Prior review feedback" checklist \u2014 that's tracked in the rolling PR summary snapshot for the next agent run, and surfacing it in the user-facing body is noise (changes that addressed prior feedback are already covered by the Reviewed-changes bullets). In some cases you may receive a complete diff for the whole PR instead of an incremental one; when this happens, determine what changed since Pullfrog's most recent review yourself before drafting bullets.
+9. **build the review body**: use the same default format as Review mode (preamble + optional cross-cutting \`### \` sections) \u2014 scoped to the **incremental delta**, not the full PR. The "Reviewed changes" bullets describe what changed since the prior pullfrog review (each bullet starts with a past-tense verb, e.g. \`- Extracted shared CLI runtime into a single module\`). Do NOT include a separate "Prior review feedback" checklist \u2014 that's tracked in the rolling PR summary snapshot for the next agent run, and surfacing it in the user-facing body is noise (changes that addressed prior feedback are already covered by the Reviewed-changes bullets). In some cases you may receive a complete diff for the whole PR instead of an incremental one; when this happens, determine what changed since Pullfrog's most recent review yourself before drafting bullets.
 
 10. Submit \u2014 every run must end with EXACTLY ONE of \`${t("create_pull_request_review")}\` (substantive review) or \`${t("report_progress")}\` (no-review acknowledgement). do NOT call \`create_issue_comment\` for review output.
 
@@ -106574,10 +106630,10 @@ ${PR_SUMMARY_FORMAT}`
 
    Follow these rules:
    - note: the first create_pull_request_review submission may error with a one-time diff-coverage nudge listing unread TOC regions. retry the same call to proceed \u2014 optionally after reading the listed ranges. the pre-flight will not block again this session.
-   - IF NO NEW ISSUES, NON-SUBSTANTIVE CHANGES ONLY (trivial formatting, import reordering, comment tweaks): do NOT submit a review. Instead call \`${t("report_progress")}\` with a 1-2 sentence note explaining no review was warranted (e.g. "No new issues. Changes since last review are formatting-only."). this leaves a visible signal that the run completed.
+   - IF NO NEW ISSUES, NON-SUBSTANTIVE CHANGES ONLY (trivial formatting, import reordering, comment tweaks): do NOT submit a review. Instead call \`${t("report_progress")}\` with \`no_review_needed: true\` and a 1-2 sentence note explaining no review was warranted (e.g. "No new issues. Changes since last review are formatting-only."). this leaves a visible signal that the run completed.
    - ELSE IF NEW CRITICAL ISSUES (blocks merge \u2014 bugs, security, data loss, broken core flows): call \`${t("create_pull_request_review")}\` with \`approved: false\`, all comments, and the review body. body opens with \`> [!CAUTION]\\n> This PR introduces ...\`, followed by the PR summary using the default format below.
    - ELSE IF NEW MUST-ADDRESS NON-CRITICAL FINDINGS (real consequences if shipped \u2014 incorrect behavior, missing validation, regressions the author should fix before merge): call \`${t("create_pull_request_review")}\` with \`approved: false\`, all comments, and the review body. body opens with \`> [!IMPORTANT]\\n> ...\`, followed by the PR summary using the default format below. Do NOT use this tier for nits, style preferences, or "consider also" suggestions.
-   - ELSE IF NEW MINOR SUGGESTIONS ONLY (low-stakes findings, or Nitpicks only): call \`${t("create_pull_request_review")}\` with \`approved: false\`, all comments, and the review body. body opens with \`> \u2139\uFE0F No critical issues \u2014 minor suggestions inline.\\n\\n\` (vary the wording after \u2139\uFE0F to fit the review), followed by the PR summary using the default format below.
+   - ELSE IF NEW MINOR SUGGESTIONS ONLY (low-stakes findings): call \`${t("create_pull_request_review")}\` with \`approved: false\`, all comments, and the review body. body opens with \`> \u2139\uFE0F No critical issues \u2014 minor suggestions inline.\\n\\n\` (vary the wording after \u2139\uFE0F to fit the review), followed by the PR summary using the default format below.
    - ELSE IF INFORMATIONAL OBSERVATIONS (mergeable as-is, but worth surfacing \u2014 e.g. prior feedback addressed cleanly, or a noteworthy positive observation): call \`${t("create_pull_request_review")}\` with \`approved: true\`, NO inline comments, and the review body. body opens with \`> \u2705 No new issues found.\\n\\n\` (or similar friendly green opener), followed by the PR summary using the default format below. If a point is concrete enough to anchor to a line, downgrade the whole review to "minor suggestions only" (\`approved: false\`) instead \u2014 the \u2705 signals "no action needed", which contradicts an actionable anchor.
    - ELSE IF NO NEW ISSUES, SUBSTANTIVE CHANGES (new functionality, behavior changes, or fixes to prior review feedback): call \`${t("create_pull_request_review")}\` to create a PR review. If all previous reviews have been properly addressed and no new issues were discovered, set \`approved: true\`. body opens with \`> \u2705 No new issues found.\\n\\n\`, followed by the PR summary using the default format below.
 
@@ -106735,7 +106791,7 @@ function buildUnsubmittedReviewPrompt(mode) {
     "",
     "do exactly one of:",
     "- if you have findings: call `create_pull_request_review` now with your aggregated review (body + inline comments). the first call may error once with a diff-coverage nudge \u2014 retry the same call to proceed.",
-    "- if there are genuinely no actionable findings since the last review (e.g. only formatting / comment / lockfile changes): call `report_progress` with a 1-2 sentence summary explaining that no review was warranted.",
+    "- if there are genuinely no actionable findings since the last review (e.g. only formatting / comment / lockfile changes): call `report_progress` with `no_review_needed: true` and a 1-2 sentence summary explaining that no review was warranted.",
     "",
     "do NOT stop again until one of those tools has been called successfully."
   ].join("\n");
@@ -107716,6 +107772,8 @@ var claude = agent({
         PWD: repoDir
       };
       env2.CLAUDE_CODE_AUTO_COMPACT_WINDOW ||= "500000";
+      env2.CLAUDE_CODE_ENABLE_TODO_TOOLS = "1";
+      env2.CLAUDE_CODE_ENABLE_TASKS = "0";
       if (isBedrockRoute) {
         env2.CLAUDE_CODE_USE_BEDROCK = "1";
       }
@@ -107792,7 +107850,7 @@ import { performance as performance6 } from "node:perf_hooks";
 
 // utils/codexHome.ts
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync as existsSync4, mkdirSync as mkdirSync5, readFileSync as readFileSync2, writeFileSync as writeFileSync4 } from "node:fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync5, mkdtempSync, readFileSync as readFileSync2, writeFileSync as writeFileSync4 } from "node:fs";
 import { homedir as homedir2, userInfo } from "node:os";
 import { join as join5 } from "node:path";
 
@@ -107843,205 +107901,6 @@ function stringifyCodexAuthBody(body) {
 `;
 }
 
-// utils/xaiOAuth.ts
-function parseXaiAuthBody(raw2) {
-  let parsed2;
-  try {
-    parsed2 = JSON.parse(raw2);
-  } catch {
-    return null;
-  }
-  if (!parsed2 || typeof parsed2 !== "object") return null;
-  const v = parsed2;
-  if (v.auth_mode !== "grok") return null;
-  const tokens = v.tokens;
-  if (!tokens || typeof tokens !== "object") return null;
-  const t = tokens;
-  if (typeof t.access_token !== "string" || t.access_token.length === 0) return null;
-  if (typeof t.refresh_token !== "string" || t.refresh_token.length === 0) return null;
-  return {
-    auth_mode: "grok",
-    ...typeof v.refresh_rejected_at === "string" ? { refresh_rejected_at: v.refresh_rejected_at } : {},
-    tokens: { access_token: t.access_token, refresh_token: t.refresh_token },
-    ...typeof v.last_refresh === "string" ? { last_refresh: v.last_refresh } : {}
-  };
-}
-
-// utils/codexHome.ts
-var CODEX_AUTH_ENV = "CODEX_AUTH_JSON";
-var XAI_AUTH_ENV = "GROK_AUTH_JSON";
-var installedSubscriptionPaths = /* @__PURE__ */ new Map();
-function clearInstalledSubscription(name) {
-  const path4 = installedSubscriptionPaths.get(name);
-  if (!path4 || !existsSync4(path4)) return;
-  const value2 = JSON.parse(readFileSync2(path4, "utf8"));
-  if (!value2 || typeof value2 !== "object") return;
-  if (name === "CODEX_AUTH_JSON" && "openai" in value2) delete value2.openai;
-  if (name === "GROK_AUTH_JSON" && "xai" in value2) delete value2.xai;
-  writeFileSync4(path4, `${JSON.stringify(value2)}
-`, { mode: 384 });
-  installedSubscriptionPaths.delete(name);
-}
-var PULLFROG_DATA_DIR = "/var/lib/pullfrog";
-function isRejectedChain(body) {
-  if (!body.refresh_rejected_at) return false;
-  log.warning(
-    `\xBB ${CODEX_AUTH_ENV} was rejected by OpenAI at ${body.refresh_rejected_at} and cannot be refreshed \u2014 re-run \`npx pullfrog auth codex\`. skipping it for this run.`
-  );
-  return true;
-}
-function installCodexAuth() {
-  const raw2 = process.env[CODEX_AUTH_ENV];
-  if (!raw2) return null;
-  const body = parseCodexAuthBody(raw2);
-  if (!body) {
-    log.warning(`\xBB ${CODEX_AUTH_ENV} present but malformed; ignoring`);
-    return null;
-  }
-  if (isRejectedChain(body)) return null;
-  const expiresMs = decodeJwtExpMs(body.tokens.access_token) ?? 0;
-  const xdgDataHome = resolveDataHome();
-  if (!xdgDataHome) return null;
-  const opencodeDir = join5(xdgDataHome, "opencode");
-  const authPath = join5(opencodeDir, "auth.json");
-  writeOpenCodeAuthEntry({
-    opencodeDir,
-    authPath,
-    provider: "openai",
-    entry: {
-      type: "oauth",
-      refresh: body.tokens.refresh_token,
-      access: body.tokens.access_token,
-      expires: expiresMs,
-      ...body.tokens.account_id ? { accountId: body.tokens.account_id } : {}
-    }
-  });
-  process.env.XDG_DATA_HOME = xdgDataHome;
-  log.info(`\xBB installed Codex auth at ${authPath}`);
-  installedSubscriptionPaths.set(CODEX_AUTH_ENV, authPath);
-  return {
-    authPath,
-    xdgDataHome,
-    originalRefresh: body.tokens.refresh_token,
-    originalIdToken: body.tokens.id_token
-  };
-}
-function writeOpenCodeAuthEntry(params) {
-  let existing = {};
-  if (existsSync4(params.authPath)) {
-    try {
-      const parsed2 = JSON.parse(readFileSync2(params.authPath, "utf8"));
-      if (parsed2 && typeof parsed2 === "object") existing = parsed2;
-    } catch {
-      log.warning(`\xBB ${params.authPath} was unreadable; rewriting it`);
-    }
-  }
-  const merged = { ...existing, [params.provider]: params.entry };
-  mkdirSync5(params.opencodeDir, { recursive: true });
-  writeFileSync4(params.authPath, `${JSON.stringify(merged, null, 2)}
-`, { mode: 384 });
-}
-function installXaiAuth() {
-  const raw2 = process.env[XAI_AUTH_ENV];
-  if (!raw2) return null;
-  const body = parseXaiAuthBody(raw2);
-  if (!body) {
-    log.warning(`\xBB ${XAI_AUTH_ENV} present but malformed; ignoring`);
-    return null;
-  }
-  if (isXaiRejectedChain(body)) return null;
-  const xdgDataHome = resolveDataHome();
-  if (!xdgDataHome) return null;
-  const opencodeDir = join5(xdgDataHome, "opencode");
-  const authPath = join5(opencodeDir, "auth.json");
-  writeOpenCodeAuthEntry({
-    opencodeDir,
-    authPath,
-    provider: "xai",
-    // opencode refreshes when `expires` is inside its skew window, and falls
-    // back to the JWT's own exp when the stored value is absent. Decoding it
-    // here means the first request uses the token we already hold instead of
-    // burning a rotation on startup.
-    entry: {
-      type: "oauth",
-      refresh: body.tokens.refresh_token,
-      access: body.tokens.access_token,
-      expires: decodeJwtExpMs(body.tokens.access_token) ?? 0
-    }
-  });
-  process.env.XDG_DATA_HOME = xdgDataHome;
-  log.info(`\xBB installed Grok auth at ${authPath}`);
-  installedSubscriptionPaths.set(XAI_AUTH_ENV, authPath);
-  return { authPath, xdgDataHome, originalRefresh: body.tokens.refresh_token };
-}
-function isXaiRejectedChain(body) {
-  if (!body.refresh_rejected_at) return false;
-  log.warning(
-    `\xBB ${XAI_AUTH_ENV} was rejected by xAI at ${body.refresh_rejected_at} and cannot be refreshed \u2014 re-run \`npx pullfrog auth grok\`. skipping it for this run.`
-  );
-  return true;
-}
-function installCodexHome() {
-  const raw2 = process.env[CODEX_AUTH_ENV];
-  if (!raw2) return null;
-  const body = parseCodexAuthBody(raw2);
-  if (!body) {
-    log.warning(`\xBB ${CODEX_AUTH_ENV} present but malformed; ignoring`);
-    return null;
-  }
-  if (isRejectedChain(body)) return null;
-  if (!body.tokens.id_token) {
-    log.warning(
-      `\xBB ${CODEX_AUTH_ENV} carries no id_token \u2014 the codex CLI cannot load it. re-run \`npx pullfrog auth codex\` to mint a complete credential.`
-    );
-    return null;
-  }
-  const root = resolveDataHome();
-  if (!root) return null;
-  const codexHome = join5(root, "codex");
-  const authPath = join5(codexHome, "auth.json");
-  mkdirSync5(codexHome, { recursive: true });
-  writeFileSync4(authPath, stringifyCodexAuthBody(body), { mode: 384 });
-  log.info(`\xBB installed Codex auth at ${authPath}`);
-  return { codexHome, authPath, originalRefresh: body.tokens.refresh_token };
-}
-var dataHome;
-var unhostedSubscriptions = /* @__PURE__ */ new Set();
-function canInstallSubscription(name) {
-  return name !== CODEX_AUTH_ENV && name !== XAI_AUTH_ENV || resolveDataHome() !== null;
-}
-function resolveDataHome() {
-  if (process.env.CI !== "true") return join5(homedir2(), ".local", "share");
-  if (dataHome === void 0) dataHome = bootstrapPullfrogDataDir();
-  return dataHome;
-}
-function bootstrapPullfrogDataDir() {
-  const user = userInfo().username;
-  let primaryGroup;
-  try {
-    primaryGroup = execFileSync3("id", ["-gn", user], { stdio: "pipe", encoding: "utf-8" }).trim();
-  } catch {
-    primaryGroup = user;
-  }
-  try {
-    execFileSync3("sudo", ["-n", "mkdir", "-p", PULLFROG_DATA_DIR], { stdio: "pipe" });
-    execFileSync3("sudo", ["-n", "chown", `${user}:${primaryGroup}`, PULLFROG_DATA_DIR], {
-      stdio: "pipe"
-    });
-    execFileSync3("sudo", ["-n", "chmod", "700", PULLFROG_DATA_DIR], { stdio: "pipe" });
-  } catch (err) {
-    log.warning(
-      `\xBB subscription auth skipped: could not create ${PULLFROG_DATA_DIR} (${err instanceof Error ? err.message : String(err)}). it must live outside the agent sandbox's reach, which needs passwordless sudo on this runner; runs on a model that needs the subscription will report no key.`
-    );
-    for (const name of [CODEX_AUTH_ENV, XAI_AUTH_ENV]) {
-      if (process.env[name]) unhostedSubscriptions.add(name);
-      delete process.env[name];
-    }
-    return null;
-  }
-  return PULLFROG_DATA_DIR;
-}
-
 // utils/oauthWriteback.ts
 var core2 = __toESM(require_core(), 1);
 
@@ -110271,6 +110130,7 @@ async function apiFetch(options) {
 
 // utils/oauthWriteback.ts
 var OAUTH_WRITEBACK_STATE = "oauth_writeback";
+var SUBSCRIPTION_DATA_DIR_STATE = "subscription_data_dir";
 
 // utils/secretCommands.ts
 var core3 = __toESM(require_core(), 1);
@@ -110281,6 +110141,212 @@ function saveSecretState(name, value2) {
   if (isGitHubActions) core3.saveState(name, value2);
 }
 
+// utils/xaiOAuth.ts
+function parseXaiAuthBody(raw2) {
+  let parsed2;
+  try {
+    parsed2 = JSON.parse(raw2);
+  } catch {
+    return null;
+  }
+  if (!parsed2 || typeof parsed2 !== "object") return null;
+  const v = parsed2;
+  if (v.auth_mode !== "grok") return null;
+  const tokens = v.tokens;
+  if (!tokens || typeof tokens !== "object") return null;
+  const t = tokens;
+  if (typeof t.access_token !== "string" || t.access_token.length === 0) return null;
+  if (typeof t.refresh_token !== "string" || t.refresh_token.length === 0) return null;
+  return {
+    auth_mode: "grok",
+    ...typeof v.refresh_rejected_at === "string" ? { refresh_rejected_at: v.refresh_rejected_at } : {},
+    tokens: { access_token: t.access_token, refresh_token: t.refresh_token },
+    ...typeof v.last_refresh === "string" ? { last_refresh: v.last_refresh } : {}
+  };
+}
+
+// utils/codexHome.ts
+var CODEX_AUTH_ENV = "CODEX_AUTH_JSON";
+var XAI_AUTH_ENV = "GROK_AUTH_JSON";
+var installedSubscriptionPaths = /* @__PURE__ */ new Map();
+var installedDataHome;
+function getSubscriptionDataHome() {
+  return installedDataHome;
+}
+function clearInstalledSubscription(name) {
+  const path4 = installedSubscriptionPaths.get(name);
+  if (!path4 || !existsSync4(path4)) return;
+  const value2 = JSON.parse(readFileSync2(path4, "utf8"));
+  if (!value2 || typeof value2 !== "object") return;
+  if (name === "CODEX_AUTH_JSON" && "openai" in value2) delete value2.openai;
+  if (name === "GROK_AUTH_JSON" && "xai" in value2) delete value2.xai;
+  writeFileSync4(path4, `${JSON.stringify(value2)}
+`, { mode: 384 });
+  installedSubscriptionPaths.delete(name);
+}
+var PULLFROG_DATA_DIR = "/var/lib/pullfrog";
+function isRejectedChain(body) {
+  if (!body.refresh_rejected_at) return false;
+  log.warning(
+    `\xBB ${CODEX_AUTH_ENV} was rejected by OpenAI at ${body.refresh_rejected_at} and cannot be refreshed \u2014 re-run \`npx pullfrog auth codex\`. skipping it for this run.`
+  );
+  return true;
+}
+function installCodexAuth() {
+  const raw2 = process.env[CODEX_AUTH_ENV];
+  if (!raw2) return null;
+  const body = parseCodexAuthBody(raw2);
+  if (!body) {
+    log.warning(`\xBB ${CODEX_AUTH_ENV} present but malformed; ignoring`);
+    return null;
+  }
+  if (isRejectedChain(body)) return null;
+  const expiresMs = decodeJwtExpMs(body.tokens.access_token) ?? 0;
+  const xdgDataHome = resolveDataHome();
+  if (!xdgDataHome) return null;
+  const opencodeDir = join5(xdgDataHome, "opencode");
+  const authPath = join5(opencodeDir, "auth.json");
+  writeOpenCodeAuthEntry({
+    opencodeDir,
+    authPath,
+    provider: "openai",
+    entry: {
+      type: "oauth",
+      refresh: body.tokens.refresh_token,
+      access: body.tokens.access_token,
+      expires: expiresMs,
+      ...body.tokens.account_id ? { accountId: body.tokens.account_id } : {}
+    }
+  });
+  installedDataHome = xdgDataHome;
+  log.info(`\xBB installed Codex auth at ${authPath}`);
+  installedSubscriptionPaths.set(CODEX_AUTH_ENV, authPath);
+  return {
+    authPath,
+    originalRefresh: body.tokens.refresh_token,
+    originalIdToken: body.tokens.id_token
+  };
+}
+function writeOpenCodeAuthEntry(params) {
+  let existing = {};
+  if (existsSync4(params.authPath)) {
+    try {
+      const parsed2 = JSON.parse(readFileSync2(params.authPath, "utf8"));
+      if (parsed2 && typeof parsed2 === "object") existing = parsed2;
+    } catch {
+      log.warning(`\xBB ${params.authPath} was unreadable; rewriting it`);
+    }
+  }
+  const merged = { ...existing, [params.provider]: params.entry };
+  mkdirSync5(params.opencodeDir, { recursive: true });
+  writeFileSync4(params.authPath, `${JSON.stringify(merged, null, 2)}
+`, { mode: 384 });
+}
+function installXaiAuth() {
+  const raw2 = process.env[XAI_AUTH_ENV];
+  if (!raw2) return null;
+  const body = parseXaiAuthBody(raw2);
+  if (!body) {
+    log.warning(`\xBB ${XAI_AUTH_ENV} present but malformed; ignoring`);
+    return null;
+  }
+  if (isXaiRejectedChain(body)) return null;
+  const xdgDataHome = resolveDataHome();
+  if (!xdgDataHome) return null;
+  const opencodeDir = join5(xdgDataHome, "opencode");
+  const authPath = join5(opencodeDir, "auth.json");
+  writeOpenCodeAuthEntry({
+    opencodeDir,
+    authPath,
+    provider: "xai",
+    // opencode refreshes when `expires` is inside its skew window, and falls
+    // back to the JWT's own exp when the stored value is absent. Decoding it
+    // here means the first request uses the token we already hold instead of
+    // burning a rotation on startup.
+    entry: {
+      type: "oauth",
+      refresh: body.tokens.refresh_token,
+      access: body.tokens.access_token,
+      expires: decodeJwtExpMs(body.tokens.access_token) ?? 0
+    }
+  });
+  installedDataHome = xdgDataHome;
+  log.info(`\xBB installed Grok auth at ${authPath}`);
+  installedSubscriptionPaths.set(XAI_AUTH_ENV, authPath);
+  return { authPath, originalRefresh: body.tokens.refresh_token };
+}
+function isXaiRejectedChain(body) {
+  if (!body.refresh_rejected_at) return false;
+  log.warning(
+    `\xBB ${XAI_AUTH_ENV} was rejected by xAI at ${body.refresh_rejected_at} and cannot be refreshed \u2014 re-run \`npx pullfrog auth grok\`. skipping it for this run.`
+  );
+  return true;
+}
+function installCodexHome() {
+  const raw2 = process.env[CODEX_AUTH_ENV];
+  if (!raw2) return null;
+  const body = parseCodexAuthBody(raw2);
+  if (!body) {
+    log.warning(`\xBB ${CODEX_AUTH_ENV} present but malformed; ignoring`);
+    return null;
+  }
+  if (isRejectedChain(body)) return null;
+  if (!body.tokens.id_token) {
+    log.warning(
+      `\xBB ${CODEX_AUTH_ENV} carries no id_token \u2014 the codex CLI cannot load it. re-run \`npx pullfrog auth codex\` to mint a complete credential.`
+    );
+    return null;
+  }
+  const root = resolveDataHome();
+  if (!root) return null;
+  const codexHome = join5(root, "codex");
+  const authPath = join5(codexHome, "auth.json");
+  mkdirSync5(codexHome, { recursive: true });
+  writeFileSync4(authPath, stringifyCodexAuthBody(body), { mode: 384 });
+  log.info(`\xBB installed Codex auth at ${authPath}`);
+  return { codexHome, authPath, originalRefresh: body.tokens.refresh_token };
+}
+var dataHome;
+var unhostedSubscriptions = /* @__PURE__ */ new Set();
+function canInstallSubscription(name) {
+  return name !== CODEX_AUTH_ENV && name !== XAI_AUTH_ENV || resolveDataHome() !== null;
+}
+function resolveDataHome() {
+  if (process.env.CI !== "true") return join5(homedir2(), ".local", "share");
+  if (dataHome === void 0) dataHome = bootstrapPullfrogDataDir();
+  return dataHome;
+}
+function bootstrapPullfrogDataDir() {
+  const user = userInfo().username;
+  let primaryGroup;
+  try {
+    primaryGroup = execFileSync3("id", ["-gn", user], { stdio: "pipe", encoding: "utf-8" }).trim();
+  } catch {
+    primaryGroup = user;
+  }
+  try {
+    execFileSync3("sudo", ["-n", "mkdir", "-p", PULLFROG_DATA_DIR], { stdio: "pipe" });
+    execFileSync3("sudo", ["-n", "chown", `${user}:${primaryGroup}`, PULLFROG_DATA_DIR], {
+      stdio: "pipe"
+    });
+    execFileSync3("sudo", ["-n", "chmod", "700", PULLFROG_DATA_DIR], { stdio: "pipe" });
+  } catch (err) {
+    log.warning(
+      `\xBB subscription auth skipped: could not create ${PULLFROG_DATA_DIR} (${err instanceof Error ? err.message : String(err)}). it must live outside the agent sandbox's reach, which needs passwordless sudo on this runner; runs on a model that needs the subscription will report no key.`
+    );
+    for (const name of [CODEX_AUTH_ENV, XAI_AUTH_ENV]) {
+      if (process.env[name]) unhostedSubscriptions.add(name);
+      delete process.env[name];
+    }
+    return null;
+  }
+  const runDir = mkdtempSync(join5(PULLFROG_DATA_DIR, "run-"));
+  if (process.env.RUNNER_ENVIRONMENT !== "github-hosted") {
+    saveSecretState(SUBSCRIPTION_DATA_DIR_STATE, runDir);
+  }
+  return runDir;
+}
+
 // utils/secrets.ts
 var SENSITIVE_PATTERNS = [
   /_KEY$/i,
@@ -110927,9 +110993,8 @@ var codex = agent({
       initialUsage: initial.usage,
       reflectionPrompt: buildReflectionPrompt(ctx.toolState),
       // a resume needs the thread codex recorded. without one there is nothing
-      // to continue, and `resume --last` would be worse than not resuming: it
-      // picks the newest recorded session in this cwd, which on a self-hosted
-      // runner with a shared CODEX_HOME is somebody else's run.
+      // to continue, and `resume --last` could pick another run's session off CI,
+      // where CODEX_HOME is the shared ~/.local/share/codex (in CI it is per run).
       canResume: (r) => r.threadId !== void 0,
       resume: async (c) => runCodex({
         ...runnerArgs,
@@ -110955,7 +111020,8 @@ var codex = agent({
 // agents/opencode.ts
 import { spawn as nodeSpawn2 } from "node:child_process";
 import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync6 } from "node:fs";
-import { join as join7 } from "node:path";
+import { totalmem } from "node:os";
+import { join as join8 } from "node:path";
 import { performance as performance7 } from "node:perf_hooks";
 
 // node_modules/.pnpm/@opencode-ai+sdk@1.18.29/node_modules/@opencode-ai/sdk/dist/v2/gen/core/serverSentEvents.gen.js
@@ -111232,13 +111298,13 @@ var defaultPathSerializer = ({ path: path4, url: _url3 }) => {
   }
   return url4;
 };
-var getUrl = ({ baseUrl, path: path4, query, querySerializer, url: _url3 }) => {
+var getUrl = ({ baseUrl, path: path4, query: query2, querySerializer, url: _url3 }) => {
   const pathUrl = _url3.startsWith("/") ? _url3 : `/${_url3}`;
   let url4 = (baseUrl ?? "") + pathUrl;
   if (path4) {
     url4 = defaultPathSerializer({ path: path4, url: url4 });
   }
-  let search2 = query ? querySerializer(query) : "";
+  let search2 = query2 ? querySerializer(query2) : "";
   if (search2.startsWith("?")) {
     search2 = search2.substring(1);
   }
@@ -116306,9 +116372,9 @@ function rewrite(request2, values) {
     const value2 = pick2(request2.headers.get(name), key === "directory" ? values.directory : values.workspace, key === "directory" ? encodeURIComponent : void 0);
     if (!value2)
       continue;
-    for (const query of url4.pathname.startsWith("/api/") ? [key, `location[${key}]`] : [key]) {
-      if (!url4.searchParams.has(query)) {
-        url4.searchParams.set(query, value2);
+    for (const query2 of url4.pathname.startsWith("/api/") ? [key, `location[${key}]`] : [key]) {
+      if (!url4.searchParams.has(query2)) {
+        url4.searchParams.set(query2, value2);
       }
     }
     changed = true;
@@ -116364,6 +116430,68 @@ var import_cross_spawn = __toESM(require_cross_spawn(), 1);
 // agents/opencode.ts
 var import_undici = __toESM(require_undici2(), 1);
 
+// utils/openCodeModels.ts
+import { spawnSync as spawnSync3 } from "node:child_process";
+import { join as join7 } from "node:path";
+var baseline;
+var authorized;
+var failure;
+var ANSI_PATTERN = /\[[0-9;]*m/g;
+function openCodeHomeEnv(tmpdir3) {
+  return {
+    HOME: tmpdir3,
+    XDG_CONFIG_HOME: join7(tmpdir3, ".config"),
+    XDG_DATA_HOME: getSubscriptionDataHome() ?? join7(tmpdir3, ".local", "share"),
+    XDG_CACHE_HOME: join7(tmpdir3, ".cache"),
+    XDG_STATE_HOME: join7(tmpdir3, ".local", "state")
+  };
+}
+function readModels(params) {
+  const result = spawnSync3(params.cliPath, ["models"], {
+    encoding: "utf-8",
+    timeout: 3e4,
+    env: { ...process.env, ...openCodeHomeEnv(params.tmpdir) },
+    stdio: ["ignore", "pipe", "pipe"]
+  });
+  if (result.status !== 0) {
+    const stderr = (result.stderr ?? "").replace(ANSI_PATTERN, "").trim();
+    failure = stderr || result.error?.message;
+    log.debug(`\xBB \`opencode models\` failed (${result.status}): ${failure}`);
+    return /* @__PURE__ */ new Set();
+  }
+  failure = void 0;
+  return new Set(
+    result.stdout.split("\n").map((line) => line.trim()).filter(Boolean)
+  );
+}
+function getModelsFailure() {
+  return failure;
+}
+function captureBaselineModels(params) {
+  baseline = readModels(params);
+  log.debug(`\xBB opencode baseline: ${baseline.size} models`);
+}
+function captureAuthorizedModels(params) {
+  authorized = readModels(params);
+  const base = baseline;
+  if (base) {
+    const diff = [...authorized].filter((m) => !base.has(m));
+    if (diff.length > 0) {
+      log.info(`\xBB BYOK auth enabled ${diff.length} model(s): ${diff.join(", ")}`);
+    }
+  }
+  log.debug(`\xBB opencode authorized: ${authorized.size} models`);
+}
+function authorizeModel(model) {
+  getAuthorizedModels().add(model);
+}
+function getAuthorizedModels() {
+  if (!authorized) {
+    throw new Error("getAuthorizedModels called before captureAuthorizedModels");
+  }
+  return authorized;
+}
+
 // utils/worktree.ts
 async function dirtyTrackedPaths(params = {}) {
   const result = await spawn({
@@ -116480,7 +116608,8 @@ export default async function pullfrogEventsPlugin() {
   };
 }
 `;
-function buildOpencodeSubagentGateSource(deniedTools) {
+function buildOpencodeSubagentGateSource(ctx) {
+  const bashRefusal = ctx.payload.shell === "disabled" ? "shell execution is disabled for this run and no shell tool exists \u2014 use read, grep and glob instead." : `native bash is disabled in Pullfrog runs \u2014 call ${formatMcpToolRef("opencode", "shell")} with the same command instead.`;
   return `// AUTOGENERATED by Pullfrog. do not edit; it'll be overwritten on the next run.
 // hard-blocks state-mutating MCP tool calls from opencode subagents (PR
 // following pullfrog/app#796 \u2014 see action/agents/subagentToolGates.ts). see
@@ -116491,7 +116620,7 @@ function buildOpencodeSubagentGateSource(deniedTools) {
 // embedded at template-render time so the plugin source has no imports. the
 // denied set is derived from each tool's \`mutates\` flag \u2014 see
 // action/agents/subagentToolGates.ts.
-const SUBAGENT_DENIED_TOOLS = new Set(${JSON.stringify(deniedTools)});
+const SUBAGENT_DENIED_TOOLS = new Set(${JSON.stringify(ctx.subagentDeniedTools)});
 
 // opencode presents MCP tools as \`pullfrog_<bare>\`; strip that to compare
 // against the canonical bare names in SUBAGENT_DENIED_TOOLS. native tools
@@ -116527,7 +116656,7 @@ export default async function pullfrogSubagentGatePlugin() {
       // above the sessionID check: the bash block must never depend on a
       // session id being present.
       if (tool === "bash") {
-        throw new Error("the native bash tool is disabled in Pullfrog runs.");
+        throw new Error(${JSON.stringify(bashRefusal)});
       }
       if (!sessionID || !tool) return;
       if (orchestratorSessionID === undefined) orchestratorSessionID = sessionID;
@@ -116547,58 +116676,6 @@ export default async function pullfrogSubagentGatePlugin() {
 `;
 }
 
-// utils/openCodeModels.ts
-import { spawnSync as spawnSync3 } from "node:child_process";
-var baseline;
-var authorized;
-var failure;
-var ANSI_PATTERN = /\[[0-9;]*m/g;
-function readModels(cliPath) {
-  const result = spawnSync3(cliPath, ["models"], {
-    encoding: "utf-8",
-    timeout: 3e4,
-    env: process.env,
-    stdio: ["ignore", "pipe", "pipe"]
-  });
-  if (result.status !== 0) {
-    const stderr = (result.stderr ?? "").replace(ANSI_PATTERN, "").trim();
-    failure = stderr || result.error?.message;
-    log.debug(`\xBB \`opencode models\` failed (${result.status}): ${failure}`);
-    return /* @__PURE__ */ new Set();
-  }
-  failure = void 0;
-  return new Set(
-    result.stdout.split("\n").map((line) => line.trim()).filter(Boolean)
-  );
-}
-function getModelsFailure() {
-  return failure;
-}
-function captureBaselineModels(cliPath) {
-  baseline = readModels(cliPath);
-  log.debug(`\xBB opencode baseline: ${baseline.size} models`);
-}
-function captureAuthorizedModels(cliPath) {
-  authorized = readModels(cliPath);
-  const base = baseline;
-  if (base) {
-    const diff = [...authorized].filter((m) => !base.has(m));
-    if (diff.length > 0) {
-      log.info(`\xBB BYOK auth enabled ${diff.length} model(s): ${diff.join(", ")}`);
-    }
-  }
-  log.debug(`\xBB opencode authorized: ${authorized.size} models`);
-}
-function authorizeModel(model) {
-  getAuthorizedModels().add(model);
-}
-function getAuthorizedModels() {
-  if (!authorized) {
-    throw new Error("getAuthorizedModels called before captureAuthorizedModels");
-  }
-  return authorized;
-}
-
 // agents/subagentModels.ts
 function deriveSubagentModels(orchestratorSpec) {
   if (!orchestratorSpec) return { reviewer: void 0 };
@@ -116828,11 +116905,12 @@ function bootOpencodeServer(params) {
     log.debug(`[opencode serve] ${text}`);
   });
   let closed = false;
+  let exitCause;
   const close = async () => {
     if (closed) return;
     closed = true;
     untrackChild(proc);
-    if (proc.pid && !proc.killed) {
+    if (proc.pid && proc.exitCode === null && proc.signalCode === null) {
       try {
         process.kill(-proc.pid, "SIGTERM");
       } catch {
@@ -116866,7 +116944,7 @@ function bootOpencodeServer(params) {
         if (match3?.[1]) {
           resolved = true;
           log.info(`\xBB opencode server up: ${match3[1]}`);
-          resolve3({ baseUrl: match3[1], proc, close, recentStderr });
+          resolve3({ baseUrl: match3[1], proc, close, recentStderr, exitCause: () => exitCause });
         }
       }
       const lines = text.split("\n");
@@ -116883,6 +116961,11 @@ function bootOpencodeServer(params) {
         reject(new Error(`failed to spawn opencode serve: ${err.message}`));
       }
     });
+    proc.once("exit", (code, signal) => {
+      if (!resolved || !isTrackedChild(proc)) return;
+      exitCause = describeServerExit(code, signal);
+      log.warning(withServerStderr(`\xBB ${exitCause}`, recentStderr));
+    });
     proc.once("close", (code, signal) => {
       if (!resolved) {
         const tail = recentStderr.slice(-5).join("\n");
@@ -116916,6 +116999,12 @@ function withServerStderr(message, recentStderr) {
 opencode server stderr:
 ${tail}` : message;
 }
+function describeServerExit(code, signal) {
+  if (signal !== "SIGKILL") return `opencode server exited mid-run (${signal ?? `code ${code}`})`;
+  const limit = process.constrainedMemory();
+  const memoryGb = ((limit > 0 ? Math.min(limit, totalmem()) : totalmem()) / 1024 ** 3).toFixed(1);
+  return `opencode server was killed (SIGKILL) mid-run, usually by the kernel OOM killer \u2014 this runner has ${memoryGb} GB of memory`;
+}
 function newTurn() {
   return {
     finalText: "",
@@ -116961,6 +117050,7 @@ async function dispatchEvent(ctx, event) {
     const err = event.properties.error;
     const message = err ? extractErrorMessage(err) : "(no error payload)";
     log.info(`\xBB ${ctx.label} session error: ${message}`);
+    if (err) ctx.lastSessionError = message;
     return;
   }
 }
@@ -117099,6 +117189,7 @@ async function runPromptTurn(ctx, params) {
   ctx.promptMessageID = void 0;
   ctx.diagnostic.sawModelOutput = false;
   ctx.diagnostic.idleSec = void 0;
+  ctx.lastSessionError = void 0;
   let assistant;
   let returnedParts;
   let networkError = null;
@@ -117141,12 +117232,14 @@ async function runPromptTurn(ctx, params) {
       costUsd: usage.costUsd
     });
   }
-  const diagnosis = ctx.diagnostic.lastProviderError ? ` \u2014 likely cause: ${ctx.diagnostic.lastProviderError}` : "";
+  const cause = ctx.serverExitCause() ?? ctx.diagnostic.lastProviderError;
+  const diagnosis = cause ? ` \u2014 likely cause: ${cause}` : "";
+  const promptCause = ctx.serverExitCause() ?? (ctx.diagnostic.sawModelOutput ? void 0 : ctx.lastSessionError) ?? ctx.diagnostic.lastProviderError;
   if (networkError) {
     return {
       success: false,
       output: finalText,
-      error: params.signal.aborted ? `activity timeout: the model went silent and the turn was aborted by the activity watchdog (${networkError})${diagnosis}` : `opencode prompt failed: ${networkError}${diagnosis}`,
+      error: params.signal.aborted ? `activity timeout: the model went silent and the turn was aborted by the activity watchdog (${networkError})${diagnosis}` : `opencode prompt failed: ${networkError}${promptCause ? ` \u2014 likely cause: ${promptCause}` : ""}`,
       usage
     };
   }
@@ -117338,15 +117431,14 @@ var opencode = agent({
     const isBedrockRoute = rawModel !== void 0 && bedrockModelId !== void 0 && bedrockModelId === rawModel;
     const vertexModel = resolveVertexOpenCodeModel(rawModel);
     const model = vertexModel ?? (isBedrockRoute ? `amazon-bedrock/${rawModel}` : rawModel);
-    const homeEnv = {
-      HOME: ctx.tmpdir,
-      XDG_CONFIG_HOME: join7(ctx.tmpdir, ".config")
-    };
-    const opencodePluginDir = join7(homeEnv.XDG_CONFIG_HOME, "opencode", "plugin");
+    const codexAuth = installCodexAuth();
+    const xaiAuth = installXaiAuth();
+    const homeEnv = openCodeHomeEnv(ctx.tmpdir);
+    const opencodePluginDir = join8(homeEnv.XDG_CONFIG_HOME, "opencode", "plugin");
     mkdirSync7(opencodePluginDir, { recursive: true });
     writeFileSync6(
-      join7(opencodePluginDir, PULLFROG_OPENCODE_GATE_PLUGIN_FILENAME),
-      buildOpencodeSubagentGateSource(ctx.subagentDeniedTools)
+      join8(opencodePluginDir, PULLFROG_OPENCODE_GATE_PLUGIN_FILENAME),
+      buildOpencodeSubagentGateSource(ctx)
     );
     const agentBrowserVersion = getDevDependencyVersion("agent-browser");
     addSkill({
@@ -117356,8 +117448,6 @@ var opencode = agent({
       agent: "opencode"
     });
     installBundledSkills({ home: homeEnv.HOME });
-    const codexAuth = installCodexAuth();
-    const xaiAuth = installXaiAuth();
     const permissionOverride = JSON.stringify({
       external_directory: { "*": "deny", "/tmp/*": "allow" },
       read: { "*": "allow", ...GIT_NATIVE_READ_DENY_OPENCODE },
@@ -117376,7 +117466,6 @@ var opencode = agent({
     delete env2.OPENCODE_EXPERIMENTAL_CODE_MODE;
     const writebacks = [];
     if (codexAuth) {
-      env2.XDG_DATA_HOME = codexAuth.xdgDataHome;
       delete env2.OPENAI_API_KEY;
       writebacks.push({
         secretName: "CODEX_AUTH_JSON",
@@ -117387,7 +117476,6 @@ var opencode = agent({
       });
     }
     if (xaiAuth) {
-      env2.XDG_DATA_HOME = xaiAuth.xdgDataHome;
       delete env2.XAI_API_KEY;
       writebacks.push({
         secretName: "GROK_AUTH_JSON",
@@ -117459,6 +117547,8 @@ var opencode = agent({
         loggedToolCallIDs: /* @__PURE__ */ new Set(),
         mcpToolCalls: 0,
         recentStderr: server.recentStderr,
+        serverExitCause: server.exitCause,
+        lastSessionError: void 0,
         diagnostic: {
           label: "Pullfrog",
           recentStderr: server.recentStderr,
@@ -122889,10 +122979,10 @@ function getMatch(pattern, exp) {
 }
 function parseQuery(pattern, options = {}) {
   return pattern.replace(/\\\|/g, ESCAPED_PIPE).split(OR_TOKEN).map((item) => {
-    const query = tokenize(item.replace(/\u0000/g, "|").trim()).filter((item2) => item2 && !!item2.trim());
+    const query2 = tokenize(item.replace(/\u0000/g, "|").trim()).filter((item2) => item2 && !!item2.trim());
     const results = [];
-    for (let i = 0, len = query.length; i < len; i += 1) {
-      const queryItem = query[i];
+    for (let i = 0, len = query2.length; i < len; i += 1) {
+      const queryItem = query2[i];
       let found = false;
       let idx = -1;
       while (!found && ++idx < matchersLen) {
@@ -122940,8 +123030,8 @@ var ExtendedSearch = class {
     return options.useExtendedSearch;
   }
   searchIn(text) {
-    const query = this.query;
-    if (!query) return {
+    const query2 = this.query;
+    if (!query2) return {
       isMatch: false,
       score: 1
     };
@@ -122952,8 +123042,8 @@ var ExtendedSearch = class {
     const allIndices = [];
     let totalScore = 0;
     let hasInverse = false;
-    for (let i = 0, qLen = query.length; i < qLen; i += 1) {
-      const searchers = query[i];
+    for (let i = 0, qLen = query2.length; i < qLen; i += 1) {
+      const searchers = query2[i];
       allIndices.length = 0;
       numMatches = 0;
       hasInverse = false;
@@ -123009,26 +123099,26 @@ var KeyType = {
   PATH: "$path",
   PATTERN: "$val"
 };
-var isExpression = (query) => !!(query[LogicalOperator.AND] || query[LogicalOperator.OR]);
-var isPath = (query) => !!query[KeyType.PATH];
-var isLeaf = (query) => !isArray2(query) && isObject2(query) && !isExpression(query);
-var convertToExplicit = (query) => ({ [LogicalOperator.AND]: Object.keys(query).map((key) => ({ [key]: query[key] })) });
-function parse3(query, options, { auto = true } = {}) {
-  const next2 = (query2) => {
-    if (isString(query2)) {
+var isExpression = (query2) => !!(query2[LogicalOperator.AND] || query2[LogicalOperator.OR]);
+var isPath = (query2) => !!query2[KeyType.PATH];
+var isLeaf = (query2) => !isArray2(query2) && isObject2(query2) && !isExpression(query2);
+var convertToExplicit = (query2) => ({ [LogicalOperator.AND]: Object.keys(query2).map((key) => ({ [key]: query2[key] })) });
+function parse3(query2, options, { auto = true } = {}) {
+  const next2 = (query3) => {
+    if (isString(query3)) {
       const obj = {
         keyId: null,
-        pattern: query2
+        pattern: query3
       };
-      if (auto) obj.searcher = createSearcher(query2, options);
+      if (auto) obj.searcher = createSearcher(query3, options);
       return obj;
     }
-    const keys = Object.keys(query2);
-    const isQueryPath = isPath(query2);
-    if (!isQueryPath && keys.length > 1 && !isExpression(query2)) return next2(convertToExplicit(query2));
-    if (isLeaf(query2)) {
-      const key = isQueryPath ? query2[KeyType.PATH] : keys[0];
-      const pattern = isQueryPath ? query2[KeyType.PATTERN] : query2[key];
+    const keys = Object.keys(query3);
+    const isQueryPath = isPath(query3);
+    if (!isQueryPath && keys.length > 1 && !isExpression(query3)) return next2(convertToExplicit(query3));
+    if (isLeaf(query3)) {
+      const key = isQueryPath ? query3[KeyType.PATH] : keys[0];
+      const pattern = isQueryPath ? query3[KeyType.PATTERN] : query3[key];
       if (!isString(pattern)) throw new Error(LOGICAL_SEARCH_INVALID_QUERY_FOR_KEY(key));
       const obj = {
         keyId: createKeyId(key),
@@ -123042,15 +123132,15 @@ function parse3(query, options, { auto = true } = {}) {
       operator: keys[0]
     };
     keys.forEach((key) => {
-      const value2 = query2[key];
+      const value2 = query3[key];
       if (isArray2(value2)) value2.forEach((item) => {
         node2.children.push(next2(item));
       });
     });
     return node2;
   };
-  if (!isExpression(query)) query = convertToExplicit(query);
-  return next2(query);
+  if (!isExpression(query2)) query2 = convertToExplicit(query2);
+  return next2(query2);
 }
 function computeScoreSingle(matches, { ignoreFieldNorm = Config3.ignoreFieldNorm }) {
   let totalScore = 1;
@@ -123346,13 +123436,13 @@ var Fuse = class {
     this._lastQuery = null;
     this._lastSearcher = null;
   }
-  _getSearcher(query) {
-    if (this._lastQuery === query) return this._lastSearcher;
-    const searcher = createSearcher(query, this._invertedIndex ? {
+  _getSearcher(query2) {
+    if (this._lastQuery === query2) return this._lastSearcher;
+    const searcher = createSearcher(query2, this._invertedIndex ? {
       ...this.options,
       _invertedIndex: this._invertedIndex
     } : this.options);
-    this._lastQuery = query;
+    this._lastQuery = query2;
     this._lastSearcher = searcher;
     return searcher;
   }
@@ -123421,10 +123511,10 @@ var Fuse = class {
   _normalizedKeys() {
     return this._myIndex.keys.map((key) => this._keyStore.get(key.id) || key);
   }
-  search(query, options) {
+  search(query2, options) {
     const { limit = -1 } = options || {};
     const { includeMatches, includeScore, shouldSort, sortFn, ignoreFieldNorm } = this.options;
-    if (isString(query) && !query.trim()) {
+    if (isString(query2) && !query2.trim()) {
       let docs = this._docs.map((item, idx) => ({
         item,
         refIndex: idx
@@ -123432,25 +123522,25 @@ var Fuse = class {
       if (isNumber(limit) && limit > -1) docs = docs.slice(0, limit);
       return docs;
     }
-    const useHeap = shouldSort && isNumber(limit) && limit > 0 && isString(query);
+    const useHeap = shouldSort && isNumber(limit) && limit > 0 && isString(query2);
     const comparator = sortFn;
     const stable = (a, b) => comparator(a, b) || a.idx - b.idx;
     let results;
     if (useHeap) {
       const heap = new MaxHeap(limit, stable);
-      if (isString(this._docs[0])) this._searchStringList(query, {
+      if (isString(this._docs[0])) this._searchStringList(query2, {
         heap,
         ignoreFieldNorm
       });
-      else this._searchObjectList(query, {
+      else this._searchObjectList(query2, {
         heap,
         ignoreFieldNorm
       });
       results = heap.extractSorted();
     } else {
-      results = isString(query) ? isString(this._docs[0]) ? this._searchStringList(query) : this._searchObjectList(query) : this._searchLogical(query);
+      results = isString(query2) ? isString(this._docs[0]) ? this._searchStringList(query2) : this._searchObjectList(query2) : this._searchLogical(query2);
       computeScore(results, { ignoreFieldNorm });
-      if (shouldSort) results.sort(isString(query) ? stable : comparator);
+      if (shouldSort) results.sort(isString(query2) ? stable : comparator);
       if (isNumber(limit) && limit > -1) results = results.slice(0, limit);
     }
     return format(results, this._docs, {
@@ -123458,8 +123548,8 @@ var Fuse = class {
       includeScore
     });
   }
-  _searchStringList(query, { heap, ignoreFieldNorm } = {}) {
-    const searcher = this._getSearcher(query);
+  _searchStringList(query2, { heap, ignoreFieldNorm } = {}) {
+    const searcher = this._getSearcher(query2);
     const requireAllTokens = this.options.useTokenSearch && this.options.tokenMatch === "all";
     const { records } = this._myIndex;
     const results = heap ? null : [];
@@ -123494,8 +123584,8 @@ var Fuse = class {
     });
     return results;
   }
-  _searchLogical(query) {
-    const expression = parse3(query, this.options);
+  _searchLogical(query2) {
+    const expression = parse3(query2, this.options);
     const keys = this._normalizedKeys();
     const evaluate = (node2, item, idx) => {
       if (!("children" in node2)) {
@@ -123555,8 +123645,8 @@ var Fuse = class {
     });
     return results;
   }
-  _searchObjectList(query, { heap, ignoreFieldNorm } = {}) {
-    const searcher = this._getSearcher(query);
+  _searchObjectList(query2, { heap, ignoreFieldNorm } = {}) {
+    const searcher = this._getSearcher(query2);
     const requireAllTokens = this.options.useTokenSearch && this.options.tokenMatch === "all";
     const { records } = this._myIndex;
     const keys = this._normalizedKeys();
@@ -123783,10 +123873,10 @@ var getPattern = (label, next2) => {
   if (label === "*") return "*";
   const match3 = label.match(/^\:([^\{\}]+)(?:\{(.+)\})?$/);
   if (match3) {
-    const cacheKey2 = `${label}#${next2}`;
-    if (!patternCache[cacheKey2]) {
-      if (match3[2]) patternCache[cacheKey2] = next2 && next2[0] !== ":" && next2[0] !== "*" ? [
-        cacheKey2,
+    const cacheKey3 = `${label}#${next2}`;
+    if (!patternCache[cacheKey3]) {
+      if (match3[2]) patternCache[cacheKey3] = next2 && next2[0] !== ":" && next2[0] !== "*" ? [
+        cacheKey3,
         match3[1],
         new RegExp(`^${match3[2]}(?=/${next2})`)
       ] : [
@@ -123794,13 +123884,13 @@ var getPattern = (label, next2) => {
         match3[1],
         new RegExp(`^${match3[2]}$`)
       ];
-      else patternCache[cacheKey2] = [
+      else patternCache[cacheKey3] = [
         label,
         match3[1],
         true
       ];
     }
-    return patternCache[cacheKey2];
+    return patternCache[cacheKey3];
   }
   return null;
 };
@@ -134289,9 +134379,9 @@ var require_schemes2 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
       wsComponent.secure = void 0;
     }
     if (wsComponent.resourceName) {
-      const [path4, query] = wsComponent.resourceName.split("?");
+      const [path4, query2] = wsComponent.resourceName.split("?");
       wsComponent.path = path4 && path4 !== "/" ? path4 : void 0;
-      wsComponent.query = query;
+      wsComponent.query = query2;
       wsComponent.resourceName = void 0;
     }
     wsComponent.fragment = void 0;
@@ -134906,8 +134996,8 @@ var require_core$3 = /* @__PURE__ */ __commonJSMin(((exports) => {
           return this;
         }
         case "object": {
-          const cacheKey2 = schemaKeyRef;
-          this._cache.delete(cacheKey2);
+          const cacheKey3 = schemaKeyRef;
+          this._cache.delete(cacheKey3);
           let id = schemaKeyRef[this.opts.schemaId];
           if (id) {
             id = (0, resolve_1.normalizeId)(id);
@@ -135050,10 +135140,10 @@ var require_core$3 = /* @__PURE__ */ __commonJSMin(((exports) => {
   Ajv5.ValidationError = validation_error_1.default;
   Ajv5.MissingRefError = ref_error_1.default;
   exports.default = Ajv5;
-  function checkOptions(checkOpts, options, msg, log3 = "error") {
+  function checkOptions(checkOpts, options, msg, log2 = "error") {
     for (const key in checkOpts) {
       const opt = key;
-      if (opt in options) this.logger[log3](`${msg}: option ${key}. ${checkOpts[opt]}`);
+      if (opt in options) this.logger[log2](`${msg}: option ${key}. ${checkOpts[opt]}`);
     }
   }
   function getSchEnv(keyRef) {
@@ -148574,9 +148664,9 @@ var require_schemes3 = /* @__PURE__ */ __commonJSMin2(((exports, module) => {
       wsComponent.secure = void 0;
     }
     if (wsComponent.resourceName) {
-      const [path4, query] = wsComponent.resourceName.split("?");
+      const [path4, query2] = wsComponent.resourceName.split("?");
       wsComponent.path = path4 && path4 !== "/" ? path4 : void 0;
-      wsComponent.query = query;
+      wsComponent.query = query2;
       wsComponent.resourceName = void 0;
     }
     wsComponent.fragment = void 0;
@@ -149191,8 +149281,8 @@ var require_core$32 = /* @__PURE__ */ __commonJSMin2(((exports) => {
           return this;
         }
         case "object": {
-          const cacheKey2 = schemaKeyRef;
-          this._cache.delete(cacheKey2);
+          const cacheKey3 = schemaKeyRef;
+          this._cache.delete(cacheKey3);
           let id = schemaKeyRef[this.opts.schemaId];
           if (id) {
             id = (0, resolve_1.normalizeId)(id);
@@ -149335,10 +149425,10 @@ var require_core$32 = /* @__PURE__ */ __commonJSMin2(((exports) => {
   Ajv5.ValidationError = validation_error_1.default;
   Ajv5.MissingRefError = ref_error_1.default;
   exports.default = Ajv5;
-  function checkOptions(checkOpts, options, msg, log3 = "error") {
+  function checkOptions(checkOpts, options, msg, log2 = "error") {
     for (const key in checkOpts) {
       const opt = key;
-      if (opt in options) this.logger[log3](`${msg}: option ${key}. ${checkOpts[opt]}`);
+      if (opt in options) this.logger[log2](`${msg}: option ${key}. ${checkOpts[opt]}`);
     }
   }
   function getSchEnv(keyRef) {
@@ -160031,7 +160121,7 @@ var require_depd = /* @__PURE__ */ __commonJSMin3(((exports, module) => {
     if (!namespace) throw new TypeError("argument namespace is required");
     var file2 = callSiteLocation(getStack()[1])[0];
     function deprecate$1(message) {
-      log3.call(deprecate$1, message);
+      log2.call(deprecate$1, message);
     }
     deprecate$1._file = file2;
     deprecate$1._ignored = isignored(namespace);
@@ -160053,7 +160143,7 @@ var require_depd = /* @__PURE__ */ __commonJSMin3(((exports, module) => {
     if (process.traceDeprecation) return true;
     return containsNamespace(process.env.TRACE_DEPRECATION || "", namespace);
   }
-  function log3(message, site) {
+  function log2(message, site) {
     var haslisteners = eehaslisteners(process, "deprecation");
     if (!haslisteners && this._ignored) return;
     var caller;
@@ -160159,7 +160249,7 @@ var require_depd = /* @__PURE__ */ __commonJSMin3(((exports, module) => {
     var args2 = createArgumentsString(fn2.length);
     var site = callSiteLocation(getStack()[1]);
     site.name = fn2.name;
-    return new Function("fn", "log", "deprecate", "message", "site", '"use strict"\nreturn function (' + args2 + ") {log.call(deprecate, message, site)\nreturn fn.apply(this, arguments)\n}")(fn2, log3, this, message, site);
+    return new Function("fn", "log", "deprecate", "message", "site", '"use strict"\nreturn function (' + args2 + ") {log.call(deprecate, message, site)\nreturn fn.apply(this, arguments)\n}")(fn2, log2, this, message, site);
   }
   function wrapproperty(obj, prop, message) {
     if (!obj || typeof obj !== "object" && typeof obj !== "function") throw new TypeError("argument obj must be object");
@@ -160173,11 +160263,11 @@ var require_depd = /* @__PURE__ */ __commonJSMin3(((exports, module) => {
     var get2 = descriptor.get;
     var set2 = descriptor.set;
     if (typeof get2 === "function") descriptor.get = function getter() {
-      log3.call(deprecate$1, message, site);
+      log2.call(deprecate$1, message, site);
       return get2.apply(this, arguments);
     };
     if (typeof set2 === "function") descriptor.set = function setter() {
-      log3.call(deprecate$1, message, site);
+      log2.call(deprecate$1, message, site);
       return set2.apply(this, arguments);
     };
     Object.defineProperty(obj, prop, descriptor);
@@ -171225,7 +171315,7 @@ ${error49 instanceof Error ? error49.stack : JSON.stringify(error49)}`
             );
           }
         };
-        const log3 = {
+        const log2 = {
           debug: (message, context) => {
             this.#server.sendLoggingMessage({
               data: {
@@ -171293,7 +171383,7 @@ ${error49 instanceof Error ? error49.stack : JSON.stringify(error49)}`
           client: {
             version: this.#server.getClientVersion()
           },
-          log: log3,
+          log: log2,
           reportProgress: reportProgress2,
           requestId: typeof request2.params?._meta?.requestId === "string" ? request2.params._meta.requestId : void 0,
           session: this.#auth,
@@ -172377,7 +172467,7 @@ function closeBrowserDaemon(toolState) {
 // mcp/checkout.ts
 import { createHash as createHash2 } from "node:crypto";
 import { statSync, unlinkSync as unlinkSync3, writeFileSync as writeFileSync10 } from "node:fs";
-import { join as join15 } from "node:path";
+import { join as join16 } from "node:path";
 
 // node_modules/.pnpm/@ark+schema@0.56.0/node_modules/@ark/schema/out/shared/errors.js
 var ArkError = class _ArkError extends CastableBase {
@@ -174378,8 +174468,8 @@ var defaultableMorphCache = {};
 var getDefaultableMorph = (node2) => {
   if (!node2.hasDefault())
     return;
-  const cacheKey2 = `{${node2.compiledKey}: ${node2.value.id} = ${defaultValueSerializer(node2.default)}}`;
-  return defaultableMorphCache[cacheKey2] ??= computeDefaultValueMorph(node2.key, node2.value, node2.default);
+  const cacheKey3 = `{${node2.compiledKey}: ${node2.value.id} = ${defaultValueSerializer(node2.default)}}`;
+  return defaultableMorphCache[cacheKey3] ??= computeDefaultValueMorph(node2.key, node2.value, node2.default);
 };
 var computeDefaultValueMorph = (key, value2, defaultInput) => {
   if (typeof defaultInput === "function") {
@@ -176552,15 +176642,15 @@ var getDefaultableMorphs = (node2) => {
   if (!node2.defaultables)
     return [];
   const morphs = [];
-  let cacheKey2 = "[";
+  let cacheKey3 = "[";
   const lastDefaultableIndex = node2.prefixLength + node2.defaultablesLength - 1;
   for (let i = node2.prefixLength; i <= lastDefaultableIndex; i++) {
     const [elementNode, defaultValue] = node2.defaultables[i - node2.prefixLength];
     morphs.push(computeDefaultValueMorph(i, elementNode, defaultValue));
-    cacheKey2 += `${i}: ${elementNode.id} = ${defaultValueSerializer(defaultValue)}, `;
+    cacheKey3 += `${i}: ${elementNode.id} = ${defaultValueSerializer(defaultValue)}, `;
   }
-  cacheKey2 += "]";
-  return defaultableMorphsCache[cacheKey2] ??= morphs;
+  cacheKey3 += "]";
+  return defaultableMorphsCache[cacheKey3] ??= morphs;
 };
 var Sequence = {
   implementation: implementation21,
@@ -177250,40 +177340,40 @@ var StructureNode = class extends BaseConstraint {
 };
 var defaultableMorphsCache2 = {};
 var constructStructuralMorphCacheKey = (node2) => {
-  let cacheKey2 = "";
+  let cacheKey3 = "";
   for (let i = 0; i < node2.defaultable.length; i++)
-    cacheKey2 += node2.defaultable[i].defaultValueMorphRef;
+    cacheKey3 += node2.defaultable[i].defaultValueMorphRef;
   if (node2.sequence?.defaultValueMorphsReference)
-    cacheKey2 += node2.sequence?.defaultValueMorphsReference;
+    cacheKey3 += node2.sequence?.defaultValueMorphsReference;
   if (node2.undeclared === "delete") {
-    cacheKey2 += "delete !(";
+    cacheKey3 += "delete !(";
     if (node2.required)
       for (const n of node2.required)
-        cacheKey2 += n.compiledKey + " | ";
+        cacheKey3 += n.compiledKey + " | ";
     if (node2.optional)
       for (const n of node2.optional)
-        cacheKey2 += n.compiledKey + " | ";
+        cacheKey3 += n.compiledKey + " | ";
     if (node2.index)
       for (const index of node2.index)
-        cacheKey2 += index.signature.id + " | ";
+        cacheKey3 += index.signature.id + " | ";
     if (node2.sequence) {
       if (node2.sequence.maxLength === null)
-        cacheKey2 += intrinsic.nonNegativeIntegerString.id;
+        cacheKey3 += intrinsic.nonNegativeIntegerString.id;
       else {
         for (let i = 0; i < node2.sequence.tuple.length; i++)
-          cacheKey2 += i + " | ";
+          cacheKey3 += i + " | ";
       }
     }
-    cacheKey2 += ")";
+    cacheKey3 += ")";
   }
-  return cacheKey2;
+  return cacheKey3;
 };
 var getPossibleMorph = (node2) => {
-  const cacheKey2 = constructStructuralMorphCacheKey(node2);
-  if (!cacheKey2)
+  const cacheKey3 = constructStructuralMorphCacheKey(node2);
+  if (!cacheKey3)
     return void 0;
-  if (defaultableMorphsCache2[cacheKey2])
-    return defaultableMorphsCache2[cacheKey2];
+  if (defaultableMorphsCache2[cacheKey3])
+    return defaultableMorphsCache2[cacheKey3];
   const $arkStructuralMorph = (data, ctx) => {
     for (let i = 0; i < node2.defaultable.length; i++) {
       if (!(node2.defaultable[i].key in data))
@@ -177300,7 +177390,7 @@ var getPossibleMorph = (node2) => {
     }
     return data;
   };
-  return defaultableMorphsCache2[cacheKey2] = $arkStructuralMorph;
+  return defaultableMorphsCache2[cacheKey3] = $arkStructuralMorph;
 };
 var precompileMorphs = (js, node2) => {
   const requiresContext = node2.defaultable.some((node3) => node3.defaultValueMorph.length === 2) || node2.sequence?.defaultValueMorphs.some((morph) => morph.length === 2);
@@ -179705,10 +179795,10 @@ var schema = ark.schema;
 var define2 = ark.define;
 var declare = ark.declare;
 
-// node_modules/.pnpm/yes@0.1.0/node_modules/yes/dist/index.js
+// node_modules/.pnpm/yes@0.2.3_typescript@5.9.3/node_modules/yes/dist/index.js
 import { setTimeout as sleep2 } from "node:timers/promises";
 
-// node_modules/.pnpm/yes@0.1.0/node_modules/yes/dist/cache/adapter.js
+// node_modules/.pnpm/yes@0.2.3_typescript@5.9.3/node_modules/yes/dist/cache/adapter.js
 var AdapterError = class extends Error {
   method;
   /** the full store key, or the op's prefix when the call covered many keys. never the raw input. */
@@ -180306,43 +180396,45 @@ var I = class d2 {
   }
 };
 
-// node_modules/.pnpm/yes@0.1.0/node_modules/yes/dist/cache/memory.js
-function memory(options = {}) {
-  const store = new I({ max: options.maxItems ?? 1e3 });
+// node_modules/.pnpm/yes@0.2.3_typescript@5.9.3/node_modules/yes/dist/cache/memory.js
+function memory({ maxItems = 1e3 } = {}) {
+  const store = new I({ max: maxItems });
   return {
     get: (key) => store.get(key),
     peek: (key) => store.peek(key),
-    // the TTL rides on each entry rather than the whole cache, so ops with
-    // different lifetimes can share one store
-    set: (key, entry, ttlMs) => {
-      store.set(key, entry, { ttl: ttlMs });
-    },
+    // the TTL rides on each entry, so ops with different lifetimes can share one store
+    set: (key, entry, ttlMs) => store.set(key, entry, { ttl: ttlMs }),
     delete: (keys) => {
       for (const key of keys)
         store.delete(key);
     },
-    // a snapshot, so deleting while iterating is safe. lru-cache skips expired
-    // entries itself.
+    // a snapshot, so deleting while iterating is safe
     list: (prefix) => [...store.entries()].filter(([key]) => key.startsWith(prefix))
   };
 }
 
-// node_modules/.pnpm/yes@0.1.0/node_modules/yes/dist/key.js
+// node_modules/.pnpm/yes@0.2.3_typescript@5.9.3/node_modules/yes/dist/key.js
 import { hash as hash2 } from "node:crypto";
 function hashKey(value2) {
-  return hash2("sha1", serialize(value2, 0));
+  return hash2("sha1", canonical(value2));
+}
+function canonical(value2) {
+  return serialize(value2, 0);
+}
+function cacheKey2(value2) {
+  if (value2 === null)
+    throw new Error("null cannot be part of a cache key");
+  return value2 === void 0 ? "~void" : hashKey(value2);
 }
-var MAX_DEPTH = 64;
 function serialize(value2, depth) {
   switch (typeof value2) {
-    case "string":
-      return JSON.stringify(value2);
     case "number":
-      if (!Number.isFinite(value2))
-        throw new Error(`${value2} cannot be part of a cache key`);
-      return String(value2);
+      if (Number.isFinite(value2))
+        return String(value2);
+      throw new Error(`${value2} cannot be part of a cache key`);
+    case "string":
     case "boolean":
-      return value2 ? "true" : "false";
+      return JSON.stringify(value2);
     case "undefined":
       throw new Error("undefined cannot be part of a cache key, except as an object property");
     case "object":
@@ -180352,9 +180444,8 @@ function serialize(value2, depth) {
   }
   if (value2 === null)
     return "null";
-  if (depth === MAX_DEPTH)
-    throw new Error(`an input nested more than ${MAX_DEPTH} levels deep, or circular`);
-  depth++;
+  if (depth++ === 64)
+    throw new Error("an input nested more than 64 levels deep, or circular");
   if (Array.isArray(value2)) {
     let out2 = "[";
     for (let i = 0; i < value2.length; i++)
@@ -180366,77 +180457,26 @@ function serialize(value2, depth) {
     const name = proto.constructor?.name || "class instance";
     throw new Error(`a ${name} cannot be part of a cache key: only JSON data can`);
   }
-  const record3 = value2;
-  const keys = Object.keys(record3).sort();
   let out = "";
-  for (const key of keys) {
-    const v = record3[key];
+  for (const key of Object.keys(value2).sort()) {
+    const v = value2[key];
     if (v !== void 0)
       out += `${out ? "," : ""}${JSON.stringify(key)}:${serialize(v, depth)}`;
   }
   return `{${out}}`;
 }
 
-// node_modules/.pnpm/yes@0.1.0/node_modules/yes/dist/index.js
-var VOID_KEY = "~void";
-function getCacheKeyString(value2) {
-  if (value2 === void 0)
-    return VOID_KEY;
-  if (value2 === null) {
-    throw new Error("cache key cannot be null");
-  }
-  try {
-    return hashKey(value2);
-  } catch (error49) {
-    throw new Error(`cache key cannot be hashed: ${error49 instanceof Error ? error49.message : String(error49)}`);
-  }
-}
-function jitter(delayMs) {
-  const half = delayMs / 2;
-  return Math.round(half + Math.random() * half);
-}
-var DEFAULT_RETRY_AFTER_CAP_MS = 2e4;
-function getErrorResponseHeaders(error49) {
-  if (error49 === null || typeof error49 !== "object")
-    return void 0;
-  const source = error49;
-  const headers = source.response?.headers ?? source.headers;
-  if (headers === null || typeof headers !== "object")
-    return void 0;
-  return headers;
-}
-function retryAfterMs(error49) {
-  const headers = getErrorResponseHeaders(error49);
-  if (!headers)
-    return void 0;
-  const retryAfter = headers["retry-after"];
-  if (typeof retryAfter === "string" && retryAfter.trim() !== "") {
-    const seconds = Number(retryAfter);
-    if (Number.isFinite(seconds))
-      return Math.max(0, seconds * 1e3);
-    const dateMs = Date.parse(retryAfter);
-    if (!Number.isNaN(dateMs))
-      return Math.max(0, dateMs - Date.now());
-  }
-  if (headers["x-ratelimit-remaining"] === "0") {
-    const reset = headers["x-ratelimit-reset"];
-    if (typeof reset === "string" && reset.trim() !== "") {
-      const resetEpoch = Number(reset);
-      if (Number.isFinite(resetEpoch))
-        return Math.max(0, resetEpoch * 1e3 - Date.now());
-    }
-  }
-  return void 0;
+// node_modules/.pnpm/yes@0.2.3_typescript@5.9.3/node_modules/yes/dist/index.js
+function delay2(schedule, attempt) {
+  const d3 = schedule[attempt - 1];
+  return d3 === void 0 ? -1 : Math.round(d3 / 2 + Math.random() * d3 / 2);
 }
 var ValidationError = class extends Error {
-  result;
-  issues;
+  name = "ValidationError";
   constructor(result) {
-    const message = "message" in result && typeof result.message === "string" ? result.message : `validation failed: ${result.issues.map((i) => i.message).join(", ")}`;
-    super(message);
-    this.name = "ValidationError";
-    this.result = result;
-    this.issues = result.issues;
+    const { message } = result;
+    super(typeof message === "string" ? message : `validation failed: ${result.issues.map((i) => i.message).join(", ")}`);
+    Object.assign(this, { result, issues: result.issues });
   }
 };
 async function assertSchema(schema2, value2) {
@@ -180445,322 +180485,212 @@ async function assertSchema(schema2, value2) {
     throw new ValidationError(result);
   return result.value;
 }
-var log2 = {
-  info: (...args2) => console.log(...args2),
-  error: (...args2) => console.error(...args2),
-  prod: (...args2) => {
-    if (process.env.NODE_ENV === "production")
-      console.log(...args2);
-  }
-};
-function debugTrace(namePrefix, key) {
-  if (process.env.LOG_LEVEL !== "debug")
-    return void 0;
-  const prefix = `${namePrefix}[${(/* @__PURE__ */ new Date()).toISOString()}]`;
-  return {
-    start: performance.now(),
-    log: (message, data) => console.log(`${prefix} ${message}`, { key, ...data }),
-    since: (start) => `${Math.round(performance.now() - start)}ms`
-  };
-}
-function op(fnOrOptions, options) {
-  if (typeof fnOrOptions === "function") {
-    return _op(fnOrOptions, options ?? {});
-  }
-  const { input: inputSchema, output: outputSchema, run, ...opOptions } = fnOrOptions;
-  return _op(run, opOptions, { input: inputSchema, output: outputSchema });
-}
-var isThenable = (value2) => typeof value2?.then === "function";
-function freshEntry(value2) {
-  if (value2 === null || typeof value2 !== "object" || !("value" in value2))
-    return void 0;
-  const expires = value2.expires;
-  return typeof expires === "number" && expires > Date.now() ? value2 : void 0;
-}
-var adapterMethods = ["get", "set", "delete", "list"];
-function callAdapter(method, key, run) {
-  let result;
-  try {
-    result = run();
-  } catch (error49) {
-    throw new AdapterError(method, key, error49);
-  }
-  if (!isThenable(result))
-    return result;
-  return result.then(void 0, (error49) => {
-    throw new AdapterError(method, key, error49);
-  });
-}
-var DELETE_BATCH = 1e3;
-function sweep(store, prefix, match3) {
-  const now = Date.now();
-  const keys = [];
-  let count = 0;
-  let matchError;
-  const take = ([key, entry]) => {
-    if (!(entry.expires > now))
-      return void keys.push(key);
-    let matched;
+function op(options) {
+  return build3(options, true);
+}
+function build3(options, cacheMethods) {
+  const { name, input: inputSchema, output: outputSchema, run, dedupe, ttl, cache: adapter } = options;
+  const { retry } = options;
+  const delayFor = Array.isArray(retry) ? (_, attempt) => delay2(retry, attempt) : retry;
+  if (ttl !== void 0 && typeof ttl !== "function" && !isLifetime(ttl)) {
+    throw new TypeError(`yes.op: ttl must be a positive number of milliseconds, got ${ttl}`);
+  }
+  const lifetime = typeof ttl === "function" ? ttl : () => ttl;
+  if (adapter && (!name || name.includes(":"))) {
+    throw new TypeError(`yes.op: an op with a cache adapter needs a name without ":", got ${JSON.stringify(name)}`);
+  }
+  if (adapter && ttl === void 0)
+    throw new TypeError(`yes.op: a cache adapter does nothing without a ttl`);
+  const store = ttl === void 0 ? void 0 : adapter ?? memory({ maxItems: options.maxItems });
+  const prefix = adapter ? `yes:${name}:` : "";
+  const label = name ? `[${name}] ` : "";
+  const logCache = (event) => () => {
+    if (name && store && process.env.NODE_ENV === "production")
+      console.log(`${label}cache ${event}`);
+  };
+  const { cacheHit = logCache("hit"), cacheMiss = logCache("miss") } = options;
+  const keyOf = (input) => {
     try {
-      matched = match3(entry.input);
+      return cacheKey2(input);
     } catch (error49) {
-      matchError = { error: error49 };
-      throw error49;
-    }
-    if (matched) {
-      keys.push(key);
-      count++;
+      throw new Error(`${label}${error49.message}. dedupe and ttl key the input, and a query always dedupes; a write is yes.mutation, which never keys.`, { cause: error49 });
     }
   };
-  const fail = (error49) => {
-    throw matchError ? matchError.error : new AdapterError("list", prefix, error49);
+  const report = (attempt, message, error49, key) => {
+    console.log(`${label}attempt ${attempt} ${message}`);
+    const data = key === void 0 ? { error: error49, attempt } : { key, error: error49, attempt };
+    console.log(...label ? [label, data] : [data]);
   };
-  const deleteFrom = (from) => {
-    for (let i = from; i < keys.length; i += DELETE_BATCH) {
-      const batch = keys.slice(i, i + DELETE_BATCH);
-      const deleted = callAdapter("delete", prefix, () => store.delete(batch));
-      if (isThenable(deleted))
-        return Promise.resolve(deleted).then(() => deleteFrom(i + DELETE_BATCH));
-    }
-    return count;
-  };
-  let listed;
-  try {
-    listed = store.list(prefix);
-  } catch (error49) {
-    return fail(error49);
-  }
-  if (!isThenable(listed) && Symbol.iterator in Object(listed)) {
-    try {
-      for (const item of listed)
-        take(item);
-    } catch (error49) {
-      fail(error49);
-    }
-    return deleteFrom(0);
-  }
-  return (async () => {
-    try {
-      for await (const item of await listed)
-        take(item);
-    } catch (error49) {
-      fail(error49);
-    }
-    return deleteFrom(0);
-  })();
-}
-function _op(fn2, options, schemas = {}) {
-  const { ttl, cache: adapter } = options;
-  const shouldCache = ttl !== void 0;
-  if (shouldCache && !(ttl > 0 && Number.isFinite(ttl))) {
-    throw new Error(`ttl must be a positive number of milliseconds, got ${ttl}`);
-  }
-  if (adapter) {
-    if (!options.name)
-      throw new Error(`an op with a cache adapter needs a name: its keys are "yes:<name>:<hash>"`);
-    if (options.name.includes(":")) {
-      throw new Error(`op name "${options.name}" cannot contain ":" with a cache adapter: its keys would overlap another op's`);
-    }
-    if (!shouldCache)
-      throw new Error(`${options.name}: a cache adapter does nothing without a ttl`);
-    if (options.maxItems !== void 0) {
-      throw new Error(`${options.name}: maxItems sizes the default memory store; size the adapter instead`);
-    }
-    const missing = adapterMethods.filter((method) => typeof adapter[method] !== "function");
-    if (missing.length) {
-      throw new Error(`${options.name}: cache is missing ${missing.join(", ")}; an adapter has get, set, delete and list (a Map or a Keyv is not one)`);
-    }
-  }
-  const defaultStore = shouldCache && !adapter ? memory({ maxItems: options.maxItems }) : void 0;
-  const store = adapter ?? defaultStore;
-  const prefix = adapter ? `yes:${options.name}:` : "";
-  const inFlightPromises = /* @__PURE__ */ new Map();
-  const namePrefix = options.name ? `[${options.name}] ` : "";
-  const defaultCacheHit = options.cacheHit === null ? () => {
-  } : options.cacheHit ?? (() => {
-    if (options.name && shouldCache)
-      log2.prod(`${namePrefix}cache hit`);
-  });
-  const defaultCacheMiss = options.cacheMiss === null ? () => {
-  } : options.cacheMiss ?? (() => {
-    if (options.name && shouldCache)
-      log2.prod(`${namePrefix}cache miss`);
-  });
-  const methodKey = (value2, method) => {
-    const toKey = (input) => {
+  const attempts = async (input, ctx, key, trace) => {
+    for (let attempt = 1; ; attempt++) {
       try {
-        return prefix + getCacheKeyString(input);
-      } catch (error49) {
-        const errorMessage = error49 instanceof Error ? error49.message : String(error49);
-        throw new Error(`failed to hash cache key for ${method}()${namePrefix ? ` in ${options.name}` : ""}: ${errorMessage}`);
-      }
-    };
-    if (!schemas.input)
-      return toKey(value2);
-    const result = schemas.input["~standard"].validate(value2);
-    if (result instanceof Promise)
-      return result.then((r) => toKey(r.issues ? value2 : r.value));
-    return toKey(result.issues ? value2 : result.value);
-  };
-  const cachedFn = async (rawInput, ctx) => {
-    const input = schemas.input ? await assertSchema(schemas.input, rawInput) : rawInput;
-    let key;
-    try {
-      key = getCacheKeyString(input);
-    } catch (error49) {
-      const errorMessage = error49 instanceof Error ? error49.message : String(error49);
-      throw new Error(`failed to create cache key${namePrefix ? ` for ${options.name}` : ""}: ${errorMessage}`);
-    }
-    const trace = debugTrace(namePrefix, key);
-    trace?.log("cache lookup started");
-    const inFlight = inFlightPromises.get(key);
-    if (inFlight) {
-      trace?.log("cache hit (in-flight)");
-      defaultCacheHit(key);
-      return inFlight;
-    }
-    const fullKey = store ? prefix + key : "";
-    let pendingRead;
-    if (store) {
-      let read2;
-      try {
-        read2 = store.get(fullKey);
-      } catch (error49) {
-        throw new AdapterError("get", fullKey, error49);
-      }
-      if (isThenable(read2)) {
-        pendingRead = read2.then(void 0, (error49) => {
-          throw new AdapterError("get", fullKey, error49);
-        });
-      } else {
-        const entry = store === defaultStore ? read2 : freshEntry(read2);
-        if (entry) {
-          trace?.log("cache hit (from store)", { runtime: trace.since(trace.start) });
-          defaultCacheHit(key);
-          return entry.value;
+        const returned = await run(input, ctx);
+        const result = outputSchema ? await assertSchema(outputSchema, returned) : returned;
+        trace?.(`run resolved on attempt ${attempt}`);
+        return result;
+      } catch (thrown) {
+        let error49 = thrown;
+        let wait = -1;
+        if (delayFor && !(error49 instanceof ValidationError)) {
+          try {
+            wait = delayFor(error49, attempt);
+          } catch (stop2) {
+            error49 = stop2;
+          }
+        }
+        if (wait >= 0) {
+          report(attempt, `failed, retrying in ${wait}ms`, error49, key);
+          await sleep2(wait);
+          continue;
         }
+        if (attempt > 1)
+          report(attempt, "failed, not retrying", error49, key);
+        trace?.(`run failed on attempt ${attempt}`, { error: error49 });
+        throw error49;
       }
     }
-    const retries = options.retries ?? [];
-    const execStart = trace ? performance.now() : 0;
+  };
+  const hit = (key, trace, from, value2) => {
+    trace?.(`cache hit (${from})`);
+    cacheHit?.(key);
+    return value2;
+  };
+  const inFlight = /* @__PURE__ */ new Map();
+  const call = async (rawInput, ctx) => {
+    const input = inputSchema ? await assertSchema(inputSchema, rawInput) : rawInput;
+    if (!dedupe && !store)
+      return attempts(input, ctx, void 0, debugTrace(label));
+    const key = keyOf(input);
+    const trace = debugTrace(label, key);
+    const shared = inFlight.get(key);
+    if (shared)
+      return hit(key, trace, "in-flight", shared);
+    const fullKey = prefix + key;
+    const read2 = store && callAdapter("get", fullKey, () => store.get(fullKey));
+    const entry = freshEntry(read2);
+    if (entry)
+      return hit(key, trace, "from store", entry.value);
     const promise2 = (async () => {
-      if (pendingRead) {
-        const entry = freshEntry(await pendingRead);
-        if (entry) {
-          trace?.log("cache hit (from store)", { runtime: trace.since(trace.start) });
-          defaultCacheHit(key);
-          return entry.value;
-        }
-      }
-      trace?.log("cache miss, executing function");
-      defaultCacheMiss(key);
-      let result;
-      let lastError;
-      let attempt = 0;
-      for (; attempt <= retries.length; attempt++) {
-        try {
-          const returned = await fn2(input, ctx);
-          result = schemas.output ? await assertSchema(schemas.output, returned) : returned;
-          break;
-        } catch (error49) {
-          if (error49 instanceof ValidationError || options.rethrow?.(error49))
-            throw error49;
-          lastError = error49;
-          const isLastAttempt = attempt >= retries.length;
-          if (isLastAttempt) {
-            if (namePrefix) {
-              log2.info(`${namePrefix}attempt ${attempt + 1}/${retries.length + 1} failed, no more retries`);
-              log2.info(`${namePrefix}`, { key, error: error49, attempt });
-            } else {
-              log2.info(`attempt ${attempt + 1}/${retries.length + 1} failed, no more retries`);
-              log2.info({ key, error: error49, attempt });
-            }
-          } else {
-            let delay2 = retries[attempt];
-            if (options.retryAfter) {
-              const extract = options.retryAfter === true ? retryAfterMs : options.retryAfter;
-              const hint = extract(error49);
-              if (hint !== void 0) {
-                const cap = options.retryAfterCap ?? DEFAULT_RETRY_AFTER_CAP_MS;
-                delay2 = Math.max(delay2, Math.min(cap, hint));
-              }
-            }
-            delay2 = jitter(delay2);
-            if (namePrefix) {
-              log2.info(`${namePrefix}attempt ${attempt + 1}/${retries.length + 1} failed, retrying in ${delay2}ms`);
-              log2.info(`${namePrefix}`, { key, error: error49, attempt });
-            } else {
-              log2.info(`attempt ${attempt + 1}/${retries.length + 1} failed, retrying in ${delay2}ms`);
-              log2.info({ key, error: error49, attempt });
-            }
-            await sleep2(delay2);
-          }
-        }
-      }
-      if (attempt > retries.length) {
-        trace?.log("function failed after all retries", {
-          runtime: trace.since(execStart),
-          attempts: retries.length + 1,
-          error: lastError instanceof Error ? lastError.message : lastError
-        });
-        throw lastError;
-      }
-      const skip = options.skipCache ? options.skipCache(result) : false;
-      const storable = store !== void 0 && result !== null && result !== void 0 && !(result instanceof Error) && !skip;
-      let cached4 = false;
-      if (storable) {
+      const stored = isThenable(read2) ? freshEntry(await read2) : void 0;
+      if (stored)
+        return hit(key, trace, "from store", stored.value);
+      trace?.("cache miss, running");
+      cacheMiss?.(key);
+      const result = await attempts(input, ctx, key, trace);
+      const ms = store && !options.skipCache?.(result) && result != null && !(result instanceof Error) && lifetime(result);
+      if (store && isLifetime(ms)) {
         const created = Date.now();
-        const entry = { value: result, created, expires: created + ttl, input };
         try {
-          const written = callAdapter("set", fullKey, () => store.set(fullKey, entry, ttl));
-          if (isThenable(written))
-            await written;
-          cached4 = true;
+          await store.set(fullKey, { value: result, created, expires: created + ms, input }, ms);
         } catch (error49) {
-          log2.error(`${namePrefix}cache write failed, returning the result uncached`, error49);
+          console.error(`${label}cache write failed, returning the result uncached`, new AdapterError("set", fullKey, error49));
         }
       }
-      trace?.log("function executed successfully", { runtime: trace.since(execStart), attempt: attempt + 1, cached: cached4 });
       return result;
     })();
-    inFlightPromises.set(key, promise2);
-    try {
-      return await promise2;
-    } finally {
-      inFlightPromises.delete(key);
+    if (!dedupe)
+      return promise2;
+    inFlight.set(key, promise2);
+    return promise2.finally(() => inFlight.delete(key));
+  };
+  if (!cacheMethods)
+    return call;
+  const withKey = (input, use) => {
+    const toKey = (result2) => use(prefix + keyOf(result2 && !result2.issues ? result2.value : input));
+    const result = inputSchema?.["~standard"].validate(input);
+    return result instanceof Promise ? result.then(toKey) : toKey(result);
+  };
+  return Object.assign(call, {
+    clear: async (input) => {
+      if (!store)
+        return;
+      if (input === void 0)
+        await sweep(store, prefix, () => true);
+      else
+        await withKey(input, (key) => callAdapter("delete", key, () => store.delete([key])));
+    },
+    // the memory store peeks, so asking whether a key is cached does not change which key is evicted next
+    has: async (input) => !!store && !!freshEntry(await withKey(input, (key) => callAdapter("get", key, () => "peek" in store ? store.peek(key) : store.get(key)))),
+    // not `async`: on the memory store a predicate that throws throws here, not in a promise nobody awaits
+    invalidate: (match3) => {
+      const accepts = typeof match3 === "function" ? match3 : fieldsMatch(match3);
+      return Promise.resolve(store ? sweep(store, prefix, accepts) : 0);
     }
-  };
-  cachedFn.clear = async (key) => {
-    if (!store)
-      return;
-    if (key === void 0) {
-      await sweep(store, prefix, () => true);
-      return;
+  });
+}
+function query(options) {
+  return op({ ...options, dedupe: true });
+}
+function mutation({ dedupe: _dedupe, ttl: _ttl, cache: _cache, ...options }) {
+  return build3(options, false);
+}
+function debugTrace(label, key) {
+  if (process.env.LOG_LEVEL !== "debug")
+    return;
+  const prefix = `${label}[${(/* @__PURE__ */ new Date()).toISOString()}]`;
+  const start = performance.now();
+  return (message, data) => console.log(`${prefix} ${message} +${Math.round(performance.now() - start)}ms`, { ...key && { key }, ...data });
+}
+var isLifetime = (ms) => typeof ms === "number" && ms > 0 && Number.isFinite(ms);
+function fieldsMatch(partial3) {
+  const fields = Object.entries(partial3).map(([field, value2]) => [
+    field,
+    value2 === void 0 ? void 0 : canonical(value2)
+  ]);
+  return (input) => typeof input === "object" && input !== null && fields.every(([field, value2]) => {
+    const actual = input[field];
+    return actual === void 0 ? value2 === void 0 : value2 !== void 0 && canonical(actual) === value2;
+  });
+}
+var isThenable = (value2) => typeof value2?.then === "function";
+function freshEntry(value2) {
+  return typeof value2?.expires === "number" && value2.expires > Date.now() && "value" in value2 ? value2 : void 0;
+}
+function callAdapter(method, key, run) {
+  try {
+    const result = run();
+    if (!isThenable(result))
+      return result;
+    return result.then(void 0, (error49) => {
+      throw new AdapterError(method, key, error49);
+    });
+  } catch (error49) {
+    throw new AdapterError(method, key, error49);
+  }
+}
+function sweep(store, prefix, match3) {
+  const purge = (listed2) => {
+    const now = Date.now();
+    const keys = [];
+    let count = 0;
+    for (const [key, { input, expires }] of listed2) {
+      if (!(expires > now))
+        keys.push(key);
+      else if (match3(input)) {
+        keys.push(key);
+        count++;
+      }
     }
-    let fullKey = methodKey(key, "clear");
-    if (typeof fullKey !== "string")
-      fullKey = await fullKey;
-    const target = fullKey;
-    await callAdapter("delete", target, () => store.delete([target]));
-  };
-  cachedFn.has = async (key) => {
-    if (!store)
-      return false;
-    let fullKey = methodKey(key, "has");
-    if (typeof fullKey !== "string")
-      fullKey = await fullKey;
-    const target = fullKey;
-    const memoryStore = store;
-    const read2 = callAdapter("get", target, () => memoryStore.peek ? memoryStore.peek(target) : store.get(target));
-    return freshEntry(await read2) !== void 0;
-  };
-  cachedFn.invalidate = (predicate) => {
-    if (!store)
-      return Promise.resolve(0);
-    const count = sweep(store, prefix, predicate);
-    return typeof count === "number" ? Promise.resolve(count) : count;
+    const remove = (from) => {
+      if (from >= keys.length)
+        return count;
+      const deleted = callAdapter("delete", prefix, () => store.delete(keys.slice(from, from + 1e3)));
+      return isThenable(deleted) ? Promise.resolve(deleted).then(() => remove(from + 1e3)) : remove(from + 1e3);
+    };
+    return remove(0);
   };
-  return cachedFn;
+  const listed = callAdapter("list", prefix, () => {
+    const listed2 = store.list(prefix);
+    if (Array.isArray(listed2))
+      return listed2;
+    return (async () => {
+      const items = [];
+      for await (const item of await listed2)
+        items.push(item);
+      return items;
+    })();
+  });
+  return Array.isArray(listed) ? purge(listed) : listed.then(purge);
 }
 
 // utils/progressComment.ts
@@ -180908,13 +180838,14 @@ function ensureRepoState(toolState, init) {
 // utils/changeImpact.ts
 import { spawn as spawn2 } from "node:child_process";
 import { writeFileSync as writeFileSync7 } from "node:fs";
-import { join as join8 } from "node:path";
+import { join as join9 } from "node:path";
 var MAX_CANDIDATES = 24;
 var MAX_ATOM_LENGTH = 128;
 var MAX_ATOMS = 12;
 var MAX_REFERENCES = 6;
 var MAX_EXCERPT = 160;
 var MAX_BYTES = 16e3;
+var LOOKUP_BUDGET_MS = 6e4;
 function isSymbolShaped(atom) {
   return atom.length >= 4 && atom.length <= MAX_ATOM_LENGTH && /[A-Z_]/.test(atom);
 }
@@ -181117,7 +181048,7 @@ function consumeGrepChunk(params) {
 async function lookupReferences(params) {
   const buckets = emptyBuckets(params.candidates);
   if (params.candidates.length === 0) return { buckets, error: void 0 };
-  const patterns = params.candidates.flatMap((candidate) => ["-e", candidate.atom]);
+  const pattern = params.candidates.map((candidate) => candidate.atom).join("|");
   const child = spawn2(
     "git",
     [
@@ -181128,13 +181059,14 @@ async function lookupReferences(params) {
       "-z",
       "-I",
       "-w",
-      "-F",
-      ...patterns,
+      "-E",
+      "-e",
+      pattern,
       params.treeish,
       "--",
       ":(top)"
     ],
-    { env: resolveEnv(void 0), stdio: ["ignore", "pipe", "pipe"] }
+    { env: resolveEnv(void 0), stdio: ["ignore", "pipe", "pipe"], signal: params.signal }
   );
   const state = createGrepRecordState();
   const maxAtomLength = Math.max(...params.candidates.map((candidate) => candidate.atom.length));
@@ -181154,7 +181086,7 @@ async function lookupReferences(params) {
   child.stderr.resume();
   const status = await new Promise((resolve3) => {
     child.once("error", (error49) => {
-      spawnError = error49.message;
+      spawnError = error49.cause instanceof Error ? error49.cause.message : error49.message;
       resolve3(null);
     });
     child.once("close", resolve3);
@@ -181242,8 +181174,10 @@ async function createChangeImpactArtifact(ctx, params) {
   const lookup2 = await lookupReferences({
     candidates: candidates.selected,
     addedLines: candidates.addedLines,
-    treeish: params.headSha
+    treeish: params.headSha,
+    signal: AbortSignal.any([params.signal, AbortSignal.timeout(LOOKUP_BUDGET_MS)])
   });
+  params.signal.throwIfAborted();
   const artifact = formatArtifact({
     entries: candidates.selected.map((change) => {
       return { change, bucket: lookup2.buckets.get(change.atom) ?? { count: 0, samples: [] } };
@@ -181255,7 +181189,7 @@ async function createChangeImpactArtifact(ctx, params) {
     headSha: params.headSha,
     lookupError: lookup2.error
   });
-  const path4 = join8(ctx.tmpdir, `pr-${params.pullNumber}-${params.headSha.slice(0, 7)}-impact.md`);
+  const path4 = join9(ctx.tmpdir, `pr-${params.pullNumber}-${params.headSha.slice(0, 7)}-impact.md`);
   writeFileSync7(path4, artifact.content);
   return {
     path: path4,
@@ -181509,7 +181443,7 @@ function readNumber(params) {
 import { execSync } from "node:child_process";
 import { createHash } from "node:crypto";
 import { readFileSync as readFileSync4, realpathSync, unlinkSync } from "node:fs";
-import { join as join9 } from "node:path";
+import { join as join10 } from "node:path";
 
 // utils/shell.ts
 import { spawnSync as spawnSync5 } from "node:child_process";
@@ -181599,7 +181533,7 @@ function resolveHooksDir(cwd, gitPath) {
     cwd,
     log: false
   }).trim();
-  const hooksDir = join9(commonDir, "hooks");
+  const hooksDir = join10(commonDir, "hooks");
   hooksDirCache.set(cwd, hooksDir);
   return hooksDir;
 }
@@ -181646,7 +181580,8 @@ async function $git(subcommand, args2, options) {
         GIT_CONFIG_COUNT: "0",
         GIT_CONFIG_PARAMETERS: ""
       },
-      activityTimeout: 0
+      activityTimeout: 0,
+      signal: options.signal
     });
     if (result.stderr.includes("askpass-compromised")) {
       log.info("askpass code was replayed after revoke \u2014 token has been revoked");
@@ -181713,9 +181648,10 @@ import { spawnSync as spawnSync7 } from "node:child_process";
 // mcp/shell.ts
 import { spawn as spawn3, spawnSync as spawnSync6 } from "node:child_process";
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { closeSync, openSync, writeFileSync as writeFileSync8 } from "node:fs";
+import { once } from "node:events";
+import { closeSync, existsSync as existsSync7, openSync, writeFileSync as writeFileSync8 } from "node:fs";
 import { userInfo as userInfo2 } from "node:os";
-import { join as join10 } from "node:path";
+import { join as join11 } from "node:path";
 import { setTimeout as sleep3 } from "node:timers/promises";
 
 // node_modules/.pnpm/@toon-format+toon@1.4.0/node_modules/@toon-format/toon/dist/index.mjs
@@ -182359,7 +182295,7 @@ function buildFsMounts(repoDir) {
 function shimMount() {
   const tempDir = process.env.PULLFROG_TEMP_DIR;
   if (!tempDir) return "";
-  const dir = join10(tempDir, "pm-bin").replace(/'/g, "'\\''");
+  const dir = join11(tempDir, "pm-bin").replace(/'/g, "'\\''");
   return `[ -d '${dir}' ] && mount --bind '${dir}' '${dir}' 2>/dev/null && mount -o remount,bind,ro '${dir}' 2>/dev/null;`;
 }
 var _repoRoot;
@@ -182530,7 +182466,7 @@ ${spawnError}` : spawnError;
 }
 function capOutput(output) {
   if (output.length <= MAX_OUTPUT_CHARS) return output;
-  const fullPath = join10(getTempDir(), `shell-${randomUUID3().slice(0, 8)}.log`);
+  const fullPath = join11(getTempDir(), `shell-${randomUUID3().slice(0, 8)}.log`);
   writeFileSync8(fullPath, output);
   const elided = output.length - MAX_OUTPUT_CHARS;
   return `... [${elided} chars truncated; output saved to ${fullPath}] ...
@@ -182546,7 +182482,7 @@ function ShellTool(ctx) {
   return tool({
     name: "shell",
     timeoutMs: 12e4,
-    description: `Execute shell commands securely. Environment is filtered to remove API keys and secrets.
+    description: `Execute shell commands securely.${ctx.payload.shell === "restricted" ? " Environment is filtered to remove API keys and secrets." : ""}
 
 Example: \`shell({ command: "pnpm test", description: "run the test suite" })\`.
 
@@ -182567,6 +182503,7 @@ Do NOT use this tool for git commands \u2014 use the dedicated git tools instead
       }
       const timeout = Math.min(params.timeout ?? 3e4, 12e4);
       const cwd = params.working_directory ?? process.cwd();
+      if (!existsSync7(cwd)) throw new Error(`working_directory does not exist: ${cwd}`);
       const env2 = resolveEnv(ctx.payload.shell === "enabled" ? "inherit" : "restricted");
       if (params.command.includes("agent-browser")) {
         const daemonError = ensureBrowserDaemon(ctx.toolState);
@@ -182585,8 +182522,8 @@ Do NOT use this tool for git commands \u2014 use the dedicated git tools instead
       if (params.background) {
         const tempDir = getTempDir();
         const handle = `bg-${randomUUID3().slice(0, 8)}`;
-        const outputPath = join10(tempDir, `${handle}.log`);
-        const pidPath = join10(tempDir, `${handle}.pid`);
+        const outputPath = join11(tempDir, `${handle}.log`);
+        const pidPath = join11(tempDir, `${handle}.pid`);
         const logFd = openSync(outputPath, "a");
         let proc;
         try {
@@ -182600,7 +182537,8 @@ Do NOT use this tool for git commands \u2014 use the dedicated git tools instead
           closeSync(logFd);
         }
         if (!proc.pid) {
-          throw new Error("failed to start background process");
+          const [error49] = await once(proc, "error");
+          throw new Error(`failed to start background process: ${error49.message}`);
         }
         proc.unref();
         writeFileSync8(pidPath, `${proc.pid}
@@ -182877,12 +182815,12 @@ function postProcessRangeDiff(raw2, contextLines = 3) {
 // mcp/git.ts
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { writeFileSync as writeFileSync9 } from "node:fs";
-import { join as join13 } from "node:path";
+import { join as join14 } from "node:path";
 
 // utils/apiCommit.ts
 import { execFileSync as execFileSync5 } from "node:child_process";
 import { lstat, readlink } from "node:fs/promises";
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 var GITHUB_API = "https://api.github.com";
 var MAX_BLOB_BYTES = 30 * 1024 * 1024;
 var BLOB_UPLOAD_CONCURRENCY = 8;
@@ -182947,7 +182885,7 @@ async function assertApiCommittable(files) {
   const root = getRepoRoot();
   const attrs = $(
     "git",
-    ["check-attr", "filter", "-z", "--", ...present.map((p) => join11(root, p))],
+    ["check-attr", "filter", "-z", "--", ...present.map((p) => join12(root, p))],
     { log: false }
   );
   const parts = attrs.split("\0");
@@ -182959,7 +182897,7 @@ async function assertApiCommittable(files) {
     }
   }
   for (const path4 of present) {
-    const stat = await lstat(join11(root, path4));
+    const stat = await lstat(join12(root, path4));
     if (stat.isDirectory()) {
       throw new Error(
         `'${path4}' is a directory (nested repository or submodule?) \u2014 signed commits only support files and symlinks.`
@@ -182968,7 +182906,7 @@ async function assertApiCommittable(files) {
   }
 }
 async function createBlobEntry(params) {
-  const absPath = join11(params.repoRoot, params.path);
+  const absPath = join12(params.repoRoot, params.path);
   const stat = await lstat(absPath);
   if (stat.size > MAX_BLOB_BYTES) {
     throw new Error(
@@ -183148,7 +183086,7 @@ this usually means your local branch has commits that were never pushed \u2014 s
 var core4 = __toESM(require_core(), 1);
 import { createSign } from "node:crypto";
 import { rename, writeFile } from "node:fs/promises";
-import { dirname as dirname3, join as join12 } from "node:path";
+import { dirname as dirname3, join as join13 } from "node:path";
 
 // node_modules/.pnpm/@octokit+plugin-throttling@11.0.5_@octokit+core@7.0.8/node_modules/@octokit/plugin-throttling/dist-bundle/index.js
 var import_light = __toESM(require_light(), 1);
@@ -184391,7 +184329,7 @@ async function fetchWrapper(requestOptions) {
       "fetch is not set. Please pass a fetch implementation as new Octokit({ request: { fetch }}). Learn more at https://github.com/octokit/octokit.js/#fetch-missing"
     );
   }
-  const log3 = requestOptions.request?.log || console;
+  const log2 = requestOptions.request?.log || console;
   const parseSuccessResponseBody = requestOptions.request?.parseSuccessResponseBody !== false;
   const body = isPlainObject8(requestOptions.body) || Array.isArray(requestOptions.body) ? JSONStringify(requestOptions.body) : requestOptions.body;
   const requestHeaders = Object.fromEntries(
@@ -184449,7 +184387,7 @@ async function fetchWrapper(requestOptions) {
   if ("deprecation" in responseHeaders) {
     const matches = responseHeaders.link && responseHeaders.link.match(/<([^<>]+)>; rel="deprecation"/);
     const deprecationLink = matches && matches.pop();
-    log3.warn(
+    log2.warn(
       `[@octokit/request] "${requestOptions.method} ${requestOptions.url}" is deprecated. It is scheduled to be removed on ${responseHeaders.sunset}${deprecationLink ? `. See ${deprecationLink}` : ""}`
     );
   }
@@ -184587,9 +184525,9 @@ var NON_VARIABLE_OPTIONS = [
 ];
 var FORBIDDEN_VARIABLE_OPTIONS = ["query", "method", "url"];
 var GHES_V3_SUFFIX_REGEX = /\/api\/v3\/?$/;
-function graphql(request2, query, options) {
+function graphql(request2, query2, options) {
   if (options) {
-    if (typeof query === "string" && "query" in options) {
+    if (typeof query2 === "string" && "query" in options) {
       return Promise.reject(
         new Error(`[@octokit/graphql] "query" cannot be used as variable name`)
       );
@@ -184603,7 +184541,7 @@ function graphql(request2, query, options) {
       );
     }
   }
-  const parsedOptions = typeof query === "string" ? Object.assign({ query }, options) : query;
+  const parsedOptions = typeof query2 === "string" ? Object.assign({ query: query2 }, options) : query2;
   const requestOptions = Object.keys(
     parsedOptions
   ).reduce((result, key) => {
@@ -184638,8 +184576,8 @@ function graphql(request2, query, options) {
 }
 function withDefaults3(request2, newDefaults) {
   const newRequest2 = request2.defaults(newDefaults);
-  const newApi = (query, options) => {
-    return graphql(newRequest2, query, options);
+  const newApi = (query2, options) => {
+    return graphql(newRequest2, query2, options);
   };
   return Object.assign(newApi, {
     defaults: withDefaults3.bind(null, newRequest2),
@@ -187483,16 +187421,17 @@ function translateIdTokenError(error49) {
   if (!status) return error49;
   return new TokenExchangeError(Number(status), error49.message);
 }
-var mintIdToken = op(
-  async () => {
+var mintIdToken = query({
+  run: async () => {
     try {
       return await core4.getIDToken(OIDC_AUDIENCE);
     } catch (error49) {
       throw translateIdTokenError(error49);
     }
   },
-  { ttl: 6e4, name: "OIDC ID token" }
-);
+  ttl: 6e4,
+  name: "OIDC ID token"
+});
 async function acquireTokenViaOIDC(opts) {
   const oidcToken = opts?.oidc ? await fetchIdTokenFromStash(opts.oidc) : await mintIdToken();
   const repos = [...opts?.repos ?? []];
@@ -187650,10 +187589,10 @@ function isTransientTokenError(error49) {
 }
 async function acquireNewToken(opts) {
   if (opts?.oidc || isOIDCAvailable()) {
-    return await op(() => acquireTokenViaOIDC(opts), {
+    return await mutation({
+      run: () => acquireTokenViaOIDC(opts),
       name: "token exchange",
-      retries: [1e3, 2e3],
-      rethrow: (error49) => !isTransientTokenError(error49)
+      retry: (error49, attempt) => isTransientTokenError(error49) ? delay2([1e3, 2e3], attempt) : -1
     })();
   }
   if (process.env.GITHUB_ACTIONS === "true") {
@@ -187696,7 +187635,7 @@ function getGitHubUsageSummary() {
 }
 async function writeGitHubUsageSummaryToFile(path4) {
   const summary2 = getGitHubUsageSummary();
-  const tmpPath = join12(dirname3(path4), `.usage-summary-${process.pid}.tmp`);
+  const tmpPath = join13(dirname3(path4), `.usage-summary-${process.pid}.tmp`);
   await writeFile(tmpPath, JSON.stringify(summary2));
   await rename(tmpPath, path4);
 }
@@ -187987,19 +187926,19 @@ async function pushWithRetry(args2, token, refreshGitToken, cwd = process.cwd())
       if ((kind === "transient" || kind === "transient-auth") && attempt < TRANSIENT_RETRY_DELAYS_MS.length) {
         if (kind === "transient-auth" && refreshGitToken) {
           currentToken = await refreshGitToken(currentToken);
-          const delay3 = Math.round(1e3 * (0.75 + Math.random() * 0.5));
+          const delay4 = Math.round(1e3 * (0.75 + Math.random() * 0.5));
           log.info(
-            `push attempt ${attempt + 1} failed (auth), re-minted token, retrying in ${delay3}ms: ${msg.slice(0, 300)}`
+            `push attempt ${attempt + 1} failed (auth), re-minted token, retrying in ${delay4}ms: ${msg.slice(0, 300)}`
           );
-          await new Promise((r) => setTimeout(r, delay3));
+          await new Promise((r) => setTimeout(r, delay4));
           continue;
         }
         const baseDelay = TRANSIENT_RETRY_DELAYS_MS[attempt] ?? 5e3;
-        const delay2 = Math.round(baseDelay * (0.75 + Math.random() * 0.5));
+        const delay3 = Math.round(baseDelay * (0.75 + Math.random() * 0.5));
         log.info(
-          `push attempt ${attempt + 1} failed (transient), retrying in ${delay2}ms: ${msg.slice(0, 300)}`
+          `push attempt ${attempt + 1} failed (transient), retrying in ${delay3}ms: ${msg.slice(0, 300)}`
         );
-        await new Promise((r) => setTimeout(r, delay2));
+        await new Promise((r) => setTimeout(r, delay3));
         continue;
       }
       throw err;
@@ -188324,7 +188263,7 @@ function countAhead(head, base, cwd) {
 function spillGitOutput(params) {
   const tempDir = process.env.PULLFROG_TEMP_DIR;
   if (!tempDir) throw new Error("PULLFROG_TEMP_DIR not set");
-  const outputPath = join13(tempDir, `git-${params.command}-${randomUUID4().slice(0, 8)}.txt`);
+  const outputPath = join14(tempDir, `git-${params.command}-${randomUUID4().slice(0, 8)}.txt`);
   writeFileSync9(outputPath, params.output);
   const previewByLines = params.output.split("\n").slice(0, OVERFLOW_PREVIEW_LINES).join("\n");
   const preview = previewByLines.length <= OVERFLOW_PREVIEW_MAX_CHARS ? previewByLines : `${previewByLines.slice(0, OVERFLOW_PREVIEW_MAX_CHARS)}\u2026`;
@@ -188724,6 +188663,112 @@ function isTransientOctokitError(error49) {
   return isTransientNetworkError(error49);
 }
 
+// utils/runContext.ts
+import { randomUUID as randomUUID5 } from "node:crypto";
+var START_KEY = randomUUID5();
+var defaultSettings = {
+  model: null,
+  effort: null,
+  modes: [],
+  setupScript: null,
+  postCheckoutScript: null,
+  prepushScript: null,
+  stopScript: null,
+  push: "restricted",
+  shell: "restricted",
+  prApproveEnabled: false,
+  reviewDrafts: false,
+  autoMergeEnabled: false,
+  codexAgent: false,
+  signedCommits: false,
+  repoIntelligence: false,
+  progressComments: true,
+  statusChecks: true,
+  approvalCheck: false,
+  modeInstructions: {},
+  learnings: null,
+  learningsHeadings: [],
+  envAllowlist: null,
+  xrepoBrief: null,
+  xrepoLearnings: null,
+  xrepoLearningsHeadings: []
+};
+var defaultRunContext = {
+  settings: defaultSettings,
+  apiToken: "",
+  oss: false,
+  plan: "none"
+};
+var unknownSecretsRunContext = {
+  ...defaultRunContext,
+  secretsUnavailable: true
+};
+async function fetchRunContext(params) {
+  const timeoutMs = 3e4;
+  const controller = new AbortController();
+  const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    const headers = {
+      Authorization: `Bearer ${params.token}`,
+      "X-Pullfrog-Credential-Pools": "1"
+    };
+    if (params.oidcToken) {
+      headers["X-GitHub-OIDC-Token"] = params.oidcToken;
+    }
+    const query2 = new URLSearchParams({ start: START_KEY });
+    if (params.runType) query2.set("type", params.runType);
+    if (params.plainPrompt) query2.set("prompt", "plain");
+    if (params.routedTier) query2.set("tier", params.routedTier);
+    const search2 = query2.toString();
+    const response = await apiFetch({
+      path: `/api/repo/${params.repoContext.owner}/${params.repoContext.name}/run-context${search2 ? `?${search2}` : ""}`,
+      headers,
+      signal: controller.signal
+    });
+    clearTimeout(timeoutId);
+    if (response.status === 402) {
+      const body = await response.json().catch(() => null);
+      const reason = typeof body === "object" && body !== null && "reason" in body ? body.reason : null;
+      const commercialRefused = reason === "subscription_unpaid" || reason === "subscription_ended" ? reason : "commercial";
+      return { ...defaultRunContext, commercialRefused };
+    }
+    if (!response.ok) {
+      return response.status >= 500 ? unknownSecretsRunContext : defaultRunContext;
+    }
+    const data = await response.json();
+    if (data === null) {
+      return defaultRunContext;
+    }
+    return {
+      settings: {
+        ...defaultSettings,
+        ...data.settings,
+        modes: data.settings?.modes ?? [],
+        setupScript: data.settings?.setupScript ?? null,
+        postCheckoutScript: data.settings?.postCheckoutScript ?? null,
+        prepushScript: data.settings?.prepushScript ?? null,
+        stopScript: data.settings?.stopScript ?? null,
+        learningsHeadings: data.settings?.learningsHeadings ?? [],
+        xrepoBrief: data.settings?.xrepoBrief ?? null,
+        xrepoLearnings: data.settings?.xrepoLearnings ?? null,
+        xrepoLearningsHeadings: data.settings?.xrepoLearningsHeadings ?? []
+      },
+      apiToken: data.apiToken,
+      oss: data.oss ?? false,
+      plan: data.plan ?? "none",
+      proxyModel: data.proxyModel,
+      dbSecrets: data.dbSecrets,
+      credentialAccess: data.credentialAccess,
+      secretsUnavailable: data.secretsUnavailable,
+      routerUnfunded: data.routerUnfunded,
+      trialFallback: data.trialFallback
+    };
+  } catch {
+    clearTimeout(timeoutId);
+    return unknownSecretsRunContext;
+  }
+}
+
 // utils/patchWorkflowRunFields.ts
 var STRING_KEYS = [
   "prNodeId",
@@ -188742,6 +188787,7 @@ var NUMBER_KEYS = [
   "cacheWriteTokens",
   "costUsd"
 ];
+var FLAG_KEYS = ["reviewSkipped"];
 async function patchWorkflowRunFields(ctx, fields) {
   if (ctx.runId === void 0 || !ctx.apiToken) return;
   if (ctx.toolState.workflowRunUnclaimed) return;
@@ -188758,10 +188804,17 @@ async function patchWorkflowRunFields(ctx, fields) {
       body[key] = value2;
     }
   }
+  for (const key of FLAG_KEYS) {
+    if (fields[key]) body[key] = true;
+  }
+  if (fields.succeeded !== void 0) body.succeeded = fields.succeeded;
   if (Object.keys(body).length === 0) return;
+  body.startKey = START_KEY;
+  const runAttempt = Number(process.env.GITHUB_RUN_ATTEMPT);
+  if (Number.isInteger(runAttempt) && runAttempt >= 1) body.runAttempt = runAttempt;
   try {
-    await op(
-      async () => {
+    await mutation({
+      run: async () => {
         const response = await apiFetch({
           path: `/api/workflow-run/${ctx.runId}`,
           method: "PATCH",
@@ -188772,17 +188825,18 @@ async function patchWorkflowRunFields(ctx, fields) {
           body: JSON.stringify(body),
           signal: AbortSignal.timeout(1e4)
         });
-        if (response.status === 404) ctx.toolState.workflowRunUnclaimed = true;
+        if (response.status === 404) {
+          ctx.toolState.workflowRunUnclaimed = true;
+          log.info(`\xBB Pullfrog has no record of run ${ctx.runId}; skipping run metadata updates`);
+          return;
+        }
         if (!response.ok) throw new Error(`PATCH workflow-run: ${response.status}`);
       },
-      {
-        retries: [2e3, 4e3],
-        name: "patchWorkflowRunFields",
-        // only retry transient network errors; explicit HTTP failures throw
-        // a status-bearing message and should fail fast.
-        rethrow: (error49) => !isTransientNetworkError(error49)
-      }
-    )();
+      // only retry transient network errors; explicit HTTP failures throw
+      // a status-bearing message and should fail fast.
+      retry: (error49, attempt) => isTransientNetworkError(error49) ? delay2([2e3, 4e3], attempt) : -1,
+      name: "patchWorkflowRunFields"
+    })();
   } catch (error49) {
     log.warning(`patchWorkflowRunFields failed: ${error49}`);
   }
@@ -188955,6 +189009,9 @@ var ReportProgress = type({
   body: type.string.describe("the progress update content to share"),
   "target_plan_comment?": type("boolean").describe(
     "for revising an existing plan comment ONLY. set to true only when the PlanEdit checklist from select_mode tells you to (i.e. a prior plan comment was found for this issue). NEVER set on the initial plan post \u2014 the initial plan reuses the run's progress comment and is posted by calling report_progress without this flag."
+  ),
+  "no_review_needed?": type("boolean").describe(
+    "IncrementalReview only: true when you judged the new commits need no review, never for a blocker."
   )
 });
 async function reportProgress(ctx, params) {
@@ -189082,6 +189139,9 @@ function ReportProgressTool(ctx) {
     description: 'Share progress on the associated GitHub issue/PR. The first call creates a comment; subsequent calls update it in place. Example: `report_progress({ body: "Implemented the auth check and added tests." })`. Call this at the end of every run with a brief final summary (1-3 sentences) unless the mode guidance instructs otherwise. The current task list is automatically appended in a collapsible section \u2014 do not restate individual steps.',
     parameters: ReportProgress,
     execute: execute(async (params) => {
+      if (params.no_review_needed) {
+        ctx.toolState.noReviewNeededSha = primaryRepoState(ctx.toolState).checkoutSha;
+      }
       if (ctx.toolState.standaloneCommentId !== void 0 && !params.target_plan_comment) {
         ctx.toolState.lastProgressBody = params.body;
         return {
@@ -189613,18 +189673,15 @@ function CreatePullRequestReviewTool(ctx) {
         }
         let result;
         try {
-          result = await op(
-            () => body ? createAndSubmitWithFooter(ctx, params, {
+          result = await mutation({
+            run: () => body ? createAndSubmitWithFooter(ctx, params, {
               body,
               approved: approved ?? false,
               hasComments: (params.comments?.length ?? 0) > 0
             }) : createReviewWithStrandedRecovery(ctx, params),
-            {
-              retries: TRANSIENT_REVIEW_RETRY_DELAYS_MS,
-              rethrow: (err) => !isTransientReviewError(err),
-              name: "review submission"
-            }
-          )();
+            retry: (error49, attempt) => isTransientReviewError(error49) ? delay2(TRANSIENT_REVIEW_RETRY_DELAYS_MS, attempt) : -1,
+            name: "review submission"
+          })();
         } catch (err) {
           if (ctx.toolState.approval) ctx.toolState.approval.wouldApprove = false;
           if (isTransientReviewError(err)) {
@@ -189861,11 +189918,11 @@ async function reportReviewNodeId(ctx, params) {
 
 // utils/setup.ts
 import { execFileSync as execFileSync6, execSync as execSync2 } from "node:child_process";
-import { mkdtempSync, readdirSync, realpathSync as realpathSync2, rmSync as rmSync2, unlinkSync as unlinkSync2 } from "node:fs";
+import { mkdtempSync as mkdtempSync2, readdirSync, realpathSync as realpathSync2, rmSync as rmSync2, unlinkSync as unlinkSync2 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join14 } from "node:path";
+import { join as join15 } from "node:path";
 function createTempDirectory() {
-  const path4 = mkdtempSync(join14(tmpdir2(), "pullfrog-"));
+  const path4 = mkdtempSync2(join15(tmpdir2(), "pullfrog-"));
   process.env.PULLFROG_TEMP_DIR = path4;
   log.info(`\xBB created temp dir at ${path4}`);
   return { path: path4, [Symbol.dispose]: () => removeTempDirectory(path4) };
@@ -189925,13 +189982,13 @@ function wipeRunnerLeakSurface() {
       return [];
     }
   };
-  const fileCommandsDir = join14(runnerTemp, "_runner_file_commands");
+  const fileCommandsDir = join15(runnerTemp, "_runner_file_commands");
   for (const entry of listDir(fileCommandsDir)) {
-    tryUnlink(join14(fileCommandsDir, entry));
+    tryUnlink(join15(fileCommandsDir, entry));
   }
   for (const entry of listDir(runnerTemp)) {
     if (entry.endsWith(".sh") || /^git-credentials-.*\.config$/.test(entry)) {
-      tryUnlink(join14(runnerTemp, entry));
+      tryUnlink(join15(runnerTemp, entry));
     }
   }
   if (wiped.length > 0) {
@@ -190203,7 +190260,7 @@ async function ensureBeforeShaReachable(params) {
           "origin",
           tempBranch
         ],
-        { token: params.gitToken, refreshGitToken: params.refreshGitToken },
+        { token: params.gitToken, refreshGitToken: params.refreshGitToken, signal: params.signal },
         `before_sha temp branch ${tempBranch}`
       );
       log.debug(`\xBB fetched before_sha via temp branch ${tempBranch}`);
@@ -190244,7 +190301,7 @@ function cleanupStaleGitLocks() {
     } catch {
       continue;
     }
-    if (now - mtimeMs < STALE_LOCK_AGE_MS) continue;
+    if (now - mtimeMs < STALE_LOCK_AGE_MS || mtimeMs >= performance.timeOrigin) continue;
     try {
       unlinkSync3(relPath);
       log.warning(`\xBB removed stale ${relPath} from prior run`);
@@ -190277,7 +190334,7 @@ async function abortIfPullRequestMoved(args2) {
   );
 }
 async function checkoutPrBranch(pr, params) {
-  const { octokit, owner, name, gitToken, refreshGitToken, toolState, beforeSha } = params;
+  const { octokit, owner, name, gitToken, refreshGitToken, toolState, beforeSha, signal } = params;
   rejectIfLeadingDash(pr.baseRef, "PR base ref");
   rejectIfLeadingDash(pr.headRef, "PR head ref");
   const repoState = requireRepoState(toolState, owner, name);
@@ -190291,18 +190348,18 @@ async function checkoutPrBranch(pr, params) {
   log.debug(`\xBB fetching base branch (${pr.baseRef})...`);
   await $gitFetchWithDeepen(
     ["--no-tags", "origin", pr.baseRef],
-    { token: gitToken, refreshGitToken },
+    { token: gitToken, refreshGitToken, signal },
     `base branch ${pr.baseRef}`
   );
   if (!alreadyOnBranch) {
     $("git", ["checkout", "-B", pr.baseRef, `origin/${pr.baseRef}`], { log: false });
     log.debug(`\xBB fetching PR #${pr.number} (${localBranch})...`);
-    await op(
-      async () => {
+    await mutation({
+      run: async () => {
         try {
           await $gitFetchWithDeepen(
             ["--no-tags", "origin", `+pull/${pr.number}/head:${localBranch}`],
-            { token: gitToken, refreshGitToken },
+            { token: gitToken, refreshGitToken, signal },
             `PR #${pr.number}`
           );
         } catch (e) {
@@ -190313,12 +190370,9 @@ async function checkoutPrBranch(pr, params) {
           throw e;
         }
       },
-      {
-        retries: PULL_REF_RETRY_DELAYS_MS,
-        name: `pull/${pr.number}/head fetch`,
-        rethrow: (e) => !PULL_REF_MISSING_PATTERN.test(e instanceof Error ? e.message : String(e))
-      }
-    )();
+      retry: (error49, attempt) => PULL_REF_MISSING_PATTERN.test(error49 instanceof Error ? error49.message : String(error49)) ? delay2(PULL_REF_RETRY_DELAYS_MS, attempt) : -1,
+      name: `pull/${pr.number}/head fetch`
+    })();
     $("git", ["checkout", localBranch], { log: false });
     log.debug(`\xBB checked out PR #${pr.number}`);
     repoState.checkoutSha = $("git", ["rev-parse", "HEAD"], { log: false }).trim();
@@ -190330,7 +190384,8 @@ async function checkoutPrBranch(pr, params) {
     repo: name,
     gitToken,
     refreshGitToken,
-    isShallow
+    isShallow,
+    signal
   }) : false;
   if (isShallow) {
     let deepenDepth = 0;
@@ -190365,7 +190420,8 @@ async function checkoutPrBranch(pr, params) {
     if (deepenDepth) {
       log.debug(`\xBB deepening by ${deepenDepth} to reach merge base...`);
       await $git("fetch", [`--deepen=${deepenDepth}`, "--no-tags", "origin"], {
-        token: gitToken
+        token: gitToken,
+        signal
       });
     }
   }
@@ -190403,6 +190459,7 @@ async function checkoutPrBranch(pr, params) {
     remoteBranch: pr.headRef,
     localBranch
   };
+  signal.throwIfAborted();
   const postCheckoutHook = await executeLifecycleHook({
     event: "post-checkout",
     script: params.postCheckoutScript,
@@ -190413,19 +190470,30 @@ async function checkoutPrBranch(pr, params) {
 }
 var inFlightCheckouts = /* @__PURE__ */ new Map();
 var CHECKOUT_DEADLINE_MS = 57e4;
-function withCheckoutDeadline(promise2, pullNumber) {
-  let timer;
-  const deadline = new Promise((_, reject) => {
-    timer = setTimeout(
+var CHECKOUT_ABORT_GRACE_MS = 15e3;
+function withCheckoutDeadline(run, pullNumber) {
+  const exceeded = `checkout_pr #${pullNumber} exceeded ${CHECKOUT_DEADLINE_MS / 1e3}s`;
+  const retry = "retry the call to start a fresh attempt.";
+  const controller = new AbortController();
+  const abortTimer = setTimeout(
+    () => controller.abort(new Error(`${exceeded} and was cancelled; ${retry}`)),
+    CHECKOUT_DEADLINE_MS
+  );
+  let backstopTimer;
+  const backstop = new Promise((_, reject) => {
+    backstopTimer = setTimeout(
       () => reject(
         new Error(
-          `checkout_pr #${pullNumber} exceeded ${CHECKOUT_DEADLINE_MS / 1e3}s. the fetch may still be running in the background; retry the call to start a fresh attempt.`
+          `${exceeded} and was asked to cancel, but a step that cannot be interrupted (the post-checkout hook or a GitHub API call) was still running ${CHECKOUT_ABORT_GRACE_MS / 1e3}s later. ${retry}`
         )
       ),
-      CHECKOUT_DEADLINE_MS
+      CHECKOUT_DEADLINE_MS + CHECKOUT_ABORT_GRACE_MS
     );
   });
-  return Promise.race([promise2, deadline]).finally(() => clearTimeout(timer));
+  return Promise.race([run(controller.signal), backstop]).finally(() => {
+    clearTimeout(abortTimer);
+    clearTimeout(backstopTimer);
+  });
 }
 function headsEqual(a, b) {
   if (a.kind === "branch" && b.kind === "branch") return a.name === b.name;
@@ -190437,7 +190505,7 @@ function describeHead(h) {
   return `detached HEAD \`${h.sha}\``;
 }
 function CheckoutPrTool(ctx) {
-  const runCheckout = async (pull_number) => {
+  const runCheckout = async (pull_number, signal) => {
     const prResponse = await ctx.octokit.rest.pulls.get({
       owner: ctx.repo.owner,
       repo: ctx.repo.name,
@@ -190466,7 +190534,8 @@ function CheckoutPrTool(ctx) {
       toolState: ctx.toolState,
       shell: ctx.payload.shell,
       postCheckoutScript: ctx.postCheckoutScript,
-      beforeSha: primary.beforeSha
+      beforeSha: primary.beforeSha,
+      signal
     });
     const tempDir = process.env.PULLFROG_TEMP_DIR;
     if (!tempDir) {
@@ -190488,7 +190557,7 @@ function CheckoutPrTool(ctx) {
         headSha: checkoutSha
       });
       if (incremental.status === "ok") {
-        incrementalDiffPath = join15(
+        incrementalDiffPath = join16(
           tempDir,
           `pr-${pull_number}-${beforeShort}-${headShort}-incremental.diff`
         );
@@ -190505,7 +190574,7 @@ function CheckoutPrTool(ctx) {
     const diffPreview = formatResult.content.split("\n").slice(0, 100).join("\n");
     log.debug(`formatted diff preview (first 100 lines):
 ${diffPreview}`);
-    const diffPath = join15(tempDir, `pr-${pull_number}-${headShort}.diff`);
+    const diffPath = join16(tempDir, `pr-${pull_number}-${headShort}.diff`);
     writeFileSync10(diffPath, formatResult.content);
     log.debug(`wrote diff to ${diffPath} (${formatResult.content.length} bytes)`);
     primary.diffCoverage = createDiffCoverageState({
@@ -190545,7 +190614,8 @@ ${diffPreview}`);
             files: formatResult.files,
             pullNumber: pull_number,
             baseSha: prResponse.data.base.sha,
-            headSha: checkoutSha
+            headSha: checkoutSha,
+            signal
           });
           impactPath = impact.path;
           log.info(
@@ -190651,7 +190721,10 @@ ${dirty}`
           );
         }
       }
-      const promise2 = withCheckoutDeadline(runCheckout(pull_number), pull_number);
+      const promise2 = withCheckoutDeadline(
+        (signal) => runCheckout(pull_number, signal),
+        pull_number
+      );
       inFlightCheckouts.set(pull_number, promise2);
       try {
         return await promise2;
@@ -190664,7 +190737,7 @@ ${dirty}`
 
 // mcp/checkSuite.ts
 import { mkdirSync as mkdirSync8, writeFileSync as writeFileSync11 } from "node:fs";
-import { join as join16 } from "node:path";
+import { join as join17 } from "node:path";
 var GetCheckSuiteLogs = type({
   check_suite_id: type.number.describe("the id from check_suite.id")
 });
@@ -190760,7 +190833,7 @@ function GetCheckSuiteLogsTool(ctx) {
       if (!tempDir) {
         throw new Error("PULLFROG_TEMP_DIR not set");
       }
-      const logsDir = join16(tempDir, "ci-logs");
+      const logsDir = join17(tempDir, "ci-logs");
       mkdirSync8(logsDir, { recursive: true });
       const jobResults = [];
       for (const run of failedRuns) {
@@ -190787,7 +190860,7 @@ function GetCheckSuiteLogsTool(ctx) {
               );
             }
             const logsText = await logsResult.text();
-            const logPath = join16(logsDir, `job-${job.id}.log`);
+            const logPath = join17(logsDir, `job-${job.id}.log`);
             writeFileSync11(logPath, logsText);
             const analysis = analyzeLog(logsText, 80);
             const failedSteps = job.steps?.filter((s) => s.conclusion === "failure").map((s) => `Step ${s.number}: ${s.name}`) ?? [];
@@ -190837,7 +190910,7 @@ function GetCheckSuiteLogsTool(ctx) {
 
 // mcp/commitInfo.ts
 import { writeFileSync as writeFileSync12 } from "node:fs";
-import { join as join17 } from "node:path";
+import { join as join18 } from "node:path";
 var CommitInfo = type({
   sha: type.string.describe("the commit SHA (full or abbreviated) to fetch")
 });
@@ -190861,7 +190934,7 @@ function CommitInfoTool(ctx) {
           "PULLFROG_TEMP_DIR not set - get_commit_info must run in pullfrog action context"
         );
       }
-      const diffFile = join17(tempDir, `commit-${sha.slice(0, 7)}.diff`);
+      const diffFile = join18(tempDir, `commit-${sha.slice(0, 7)}.diff`);
       writeFileSync12(diffFile, formatResult.content);
       log.debug(`wrote commit diff to ${diffFile} (${formatResult.content.length} bytes)`);
       return {
@@ -190998,14 +191071,14 @@ function ReopenCurrentTool(ctx) {
 import { performance as performance8 } from "node:perf_hooks";
 
 // prep/installNodeDependencies.ts
-import { existsSync as existsSync8 } from "node:fs";
-import { join as join19 } from "node:path";
+import { existsSync as existsSync9 } from "node:fs";
+import { join as join20 } from "node:path";
 
 // utils/packageManager.ts
 var import_semver2 = __toESM(require_semver2(), 1);
-import { existsSync as existsSync7 } from "node:fs";
+import { existsSync as existsSync8 } from "node:fs";
 import { mkdir, readFile as readFile2 } from "node:fs/promises";
-import { delimiter, join as join18 } from "node:path";
+import { delimiter, join as join19 } from "node:path";
 var SUPPORTED_NAMES = ["npm", "pnpm", "yarn", "bun"];
 var COREPACK_MANAGED = ["pnpm", "yarn"];
 function isSupported(name) {
@@ -191043,8 +191116,8 @@ function parseDevEnginesField(field) {
   };
 }
 async function resolvePackageManagerSpec(cwd) {
-  const pkgPath = join18(cwd, "package.json");
-  if (!existsSync7(pkgPath)) return null;
+  const pkgPath = join19(cwd, "package.json");
+  if (!existsSync8(pkgPath)) return null;
   let pkg;
   try {
     pkg = JSON.parse(await readFile2(pkgPath, "utf-8"));
@@ -191102,7 +191175,7 @@ async function currentVersion(name) {
   return result.stdout.trim();
 }
 function packageManagerBinDir(tmpdir3) {
-  return join18(tmpdir3, "pm-bin");
+  return join19(tmpdir3, "pm-bin");
 }
 async function ensurePackageManager(params) {
   const spec = params.spec;
@@ -191165,7 +191238,7 @@ async function installFallback(name, installSpec) {
   });
   if (result.exitCode !== 0) return result.stderr || `failed to install ${name}`;
   if (name === "deno") {
-    const denoPath = join18(process.env.HOME || "", ".deno", "bin");
+    const denoPath = join19(process.env.HOME || "", ".deno", "bin");
     process.env.PATH = `${denoPath}:${process.env.PATH}`;
   }
   log.info(`\xBB installed ${name}`);
@@ -191198,8 +191271,8 @@ async function isCommandAvailable2(command) {
 var installNodeDependencies = {
   name: "installNodeDependencies",
   shouldRun: () => {
-    const packageJsonPath = join19(process.cwd(), "package.json");
-    return existsSync8(packageJsonPath);
+    const packageJsonPath = join20(process.cwd(), "package.json");
+    return existsSync9(packageJsonPath);
   },
   run: async (options) => {
     const declared = await resolvePackageManagerSpec(process.cwd());
@@ -191293,14 +191366,14 @@ ${errorMessage}`]
 };
 
 // prep/installPythonDependencies.ts
-import { existsSync as existsSync9, readFileSync as readFileSync5 } from "node:fs";
-import { join as join20 } from "node:path";
+import { existsSync as existsSync10, readFileSync as readFileSync5 } from "node:fs";
+import { join as join21 } from "node:path";
 function declaresBuildSystem(path4) {
   return /^\s*\[\s*build-system\s*\]/m.test(readFileSync5(path4, "utf8"));
 }
 function configApplies(config3, cwd) {
-  const path4 = join20(cwd, config3.file);
-  return existsSync9(path4) && (config3.applies?.(path4) ?? true);
+  const path4 = join21(cwd, config3.file);
+  return existsSync10(path4) && (config3.applies?.(path4) ?? true);
 }
 var PYTHON_CONFIGS = [
   {
@@ -191622,7 +191695,7 @@ function AwaitDependencyInstallationTool(ctx) {
 
 // mcp/gh.ts
 import { mkdirSync as mkdirSync9 } from "node:fs";
-import { join as join21 } from "node:path";
+import { join as join22 } from "node:path";
 var GH_TIMEOUT_MS = 12e4;
 var GhParams = type({
   args: type.string.array().describe(
@@ -191644,7 +191717,7 @@ function GhTool(ctx) {
     description: `Run the GitHub CLI against ${ctx.repo.owner}/${ctx.repo.name}. Pass argv as an array \u2014 there is no shell, so pipes, redirects and \`&&\` do not work; use gh's own \`--json\`/\`--jq\` flags instead. \`gh api graphql\` is available. Authenticated with ${permissions ? formatPermissions(permissions) : "no permissions"} on this repo only; anything else 403s. Pushing, merging and ref writes are not available \u2014 use the git tools.`,
     parameters: GhParams,
     execute: execute(async (params) => {
-      const configDir = join21(ctx.tmpdir, "gh-config");
+      const configDir = join22(ctx.tmpdir, "gh-config");
       mkdirSync9(configDir, { recursive: true });
       const command = ["gh", ...params.args.map(shellQuote)].join(" ");
       const result = await runSandboxed({
@@ -192368,7 +192441,7 @@ function PullRequestInfoTool(ctx) {
 
 // mcp/reviewComments.ts
 import { writeFileSync as writeFileSync13 } from "node:fs";
-import { join as join22 } from "node:path";
+import { join as join23 } from "node:path";
 var COMMENTS_PER_THREAD = 50;
 var REVIEW_THREADS_QUERY = `
 query ($owner: String!, $name: String!, $prNumber: Int!, $cursor: String) {
@@ -192664,8 +192737,8 @@ function buildThreadBlocks(threads, filePatchMap, reviewId) {
   }
   return threadBlocks;
 }
-var fetchAllReviewThreads = op(
-  async (key, ctx) => {
+var fetchAllReviewThreads = query({
+  run: async (key, ctx) => {
     const threads = [];
     let cursor = null;
     for (let page = 0; page < 50; page += 1) {
@@ -192682,21 +192755,21 @@ var fetchAllReviewThreads = op(
     }
     return threads;
   },
-  { ttl: 6e4, name: "reviewThreads" }
-);
-var fetchPrFiles = op(
-  async (key, ctx) => ctx.octokit.paginate(ctx.octokit.rest.pulls.listFiles, {
+  ttl: 6e4,
+  name: "reviewThreads"
+});
+var fetchPrFiles = query({
+  run: async (key, ctx) => ctx.octokit.paginate(ctx.octokit.rest.pulls.listFiles, {
     owner: key.owner,
     repo: key.name,
     pull_number: key.pullNumber,
     per_page: 100
   }),
-  { ttl: 6e4, name: "prFiles" }
-);
+  ttl: 6e4,
+  name: "prFiles"
+});
 function invalidateReviewThreadCache(repo) {
-  fetchAllReviewThreads.invalidate(
-    (cached4) => cached4.owner === repo.owner && cached4.name === repo.name
-  );
+  fetchAllReviewThreads.invalidate({ owner: repo.owner, name: repo.name });
 }
 async function getReviewThreads(input) {
   const allThreads = structuredClone(
@@ -192862,7 +192935,7 @@ function GetReviewCommentsTool(ctx) {
         throw new Error("PULLFROG_TEMP_DIR not set");
       }
       const filename = `review-${params.review_id}-threads.md`;
-      const commentsPath = join22(tempDir, filename);
+      const commentsPath = join23(tempDir, filename);
       writeFileSync13(commentsPath, formatted.content);
       log.debug(`wrote ${threadBlocks.length} threads to ${commentsPath}`);
       return {
@@ -193232,7 +193305,7 @@ function UploadFileTool(ctx) {
 
 // mcp/xrepo.ts
 import { mkdirSync as mkdirSync10, rmSync as rmSync3 } from "node:fs";
-import { join as join23 } from "node:path";
+import { join as join24 } from "node:path";
 function assertValidRepoName(name) {
   if (!/^[A-Za-z0-9._-]+$/.test(name) || name.startsWith("-") || name.includes("..")) {
     throw new Error(
@@ -193312,7 +193385,7 @@ function CheckoutRepoTool(ctx) {
         return { path: existing.dir, access: existing.access, note: "already checked out." };
       }
       const access = accessFor(ctx, repo);
-      const dir = join23(ctx.tmpdir, "xrepo", repo);
+      const dir = join24(ctx.tmpdir, "xrepo", repo);
       mkdirSync10(dir, { recursive: true });
       const state = ensureRepoState(ctx.toolState, { owner, name: repo, dir, access });
       const rc = resolveRepoCtx(ctx, repo);
@@ -193423,7 +193496,7 @@ function buildCommonTools(ctx, outputSchema) {
   if (isStandalone || outputSchema) {
     tools.push(SetOutputTool(ctx, outputSchema));
   }
-  if (ctx.payload.shell === "restricted") {
+  if (ctx.payload.shell !== "disabled") {
     tools.push(ShellTool(ctx));
     tools.push(KillBackgroundTool(ctx));
   }
@@ -193678,6 +193751,7 @@ function isByokSetupError(text) {
 var SECRETS_UNAVAILABLE_MARKER = "couldn't load your Pullfrog secrets";
 var ROUTER_UNFUNDED_MARKER = "your Pullfrog Router balance is empty";
 var CREDENTIAL_REJECTED_MARKER = "was rejected by its provider";
+var CREDENTIAL_POOL_REFUSED_MARKER = "No configured credential can serve this run";
 var NoUsableCredentialError = class extends Error {
 };
 function throwKeyError(params) {
@@ -193944,7 +194018,8 @@ function isOAuthCredentialExpiredError(text) {
       text
     ) || // the provider no longer recognises the token at all (#1086) — same dead
     // credential, phrased as a lookup miss rather than a state transition.
-    /Could not find the appropriate key in your authentication token/i.test(text) || /Token refresh failed/i.test(text)
+    /Could not find the appropriate key in your authentication token/i.test(text) || // the reversed word order: `Encountered invalidated oauth token for user` (#1474).
+    /(?:expired|invalidated|revoked) (?:OAuth|authentication) token/i.test(text) || /Token refresh failed/i.test(text)
   );
 }
 function isMalformedKeyError(text) {
@@ -193991,7 +194066,7 @@ function buildRejectedCredentialError(params) {
     ].join("\n");
   }
   const where = params.inPullfrogStore ? `[Update it in Pullfrog \u2192](${settingsUrl})` : `[Update the GitHub Actions secret \u2192](https://github.com/${params.owner}/${params.name}/settings/secrets/actions)`;
-  const keysUrl = providerKeysUrl(params.credential);
+  const keysUrl = providerDashboard(params.credential)?.keys;
   const issue3 = keysUrl ? `[Issue a new key \u2192](${keysUrl}) \xB7 ` : "";
   return [
     `**Your \`${params.credential}\` ${CREDENTIAL_REJECTED_MARKER}**${detail}, so the agent never ran.`,
@@ -194001,12 +194076,43 @@ function buildRejectedCredentialError(params) {
     `${issue3}${where} \xB7 [Model settings \u2192](${settingsUrl}) \xB7 [Setup docs \u2192](https://docs.pullfrog.com/keys) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
   ].join("\n");
 }
-function providerKeysUrl(credential) {
+function providerDashboard(credential) {
   for (const [id, provider2] of Object.entries(providers)) {
-    if (provider2.envVars.includes(credential)) return PROVIDER_DASHBOARDS[id]?.keys;
+    if (provider2.envVars.includes(credential)) return PROVIDER_DASHBOARDS[id];
   }
   return void 0;
 }
+function buildCredentialPoolRefusedError(params) {
+  const settingsUrl = `${getApiUrl()}/console/${params.owner}/${params.name}`;
+  return [
+    `**${CREDENTIAL_POOL_REFUSED_MARKER}.** Every credential configured for \`${params.model}\` was rejected or is out of quota, so the agent never ran.`,
+    "",
+    ...params.refused.map(
+      (credential) => `- ${describeRefusal({ ...params, credential, settingsUrl })}`
+    ),
+    "",
+    `[Model settings \u2192](${settingsUrl}) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`
+  ].join("\n");
+}
+function describeRefusal(params) {
+  const credential = params.credential;
+  const verdict = credential.verdict;
+  const workflow = credential.source === "workflow";
+  const head = `\`${credential.name}\` from ${workflow ? "the workflow" : `${credential.source} scope`}: \`${verdict.detail}\` \u2014`;
+  const subscription = SUBSCRIPTION_CREDENTIALS[credential.name];
+  const dashboard = providerDashboard(credential.name);
+  if (verdict.status === "exhausted" && subscription) {
+    const wait = verdict.resetAt ? `it resets at **${verdict.resetAt.toISOString().slice(0, 16).replace("T", " ")} UTC**; re-trigger after that` : "re-trigger after the limit resets";
+    return `${head} ${wait}, or add an API key for this provider, which Pullfrog falls back to automatically.`;
+  }
+  if (verdict.status === "exhausted")
+    return `${head} add credit or raise its quota with the provider.${dashboard ? ` [Top up \u2192](${dashboard.billing})` : ""}`;
+  if (subscription)
+    return `${head} re-authenticate with \`${subscription.command}\`, or switch this repo to a model you hold an API key for. [Re-authenticate \u2192](${subscription.docs})`;
+  const where = workflow ? `[Update the GitHub Actions secret \u2192](https://github.com/${params.owner}/${params.name}/settings/secrets/actions)` : `[Update it in Pullfrog \u2192](${params.settingsUrl})`;
+  const issue3 = dashboard?.keys ? `[Issue a new key \u2192](${dashboard.keys}) \xB7 ` : "";
+  return `${head} issue a new key and update the copy Pullfrog uses. ${issue3}${where}`;
+}
 function formatApiKeyErrorSummary(params) {
   if (params.raw.includes(MISSING_KEY_MARKER)) {
     if (params.raw.startsWith(`**${MISSING_KEY_MARKER}**`)) return params.raw;
@@ -194255,11 +194361,11 @@ function formatBillingErrorSummary(error49, owner) {
   }
   if (error49.code === "router_monthly_limit") {
     return [
-      "**Pullfrog Router hit its monthly spend limit.**",
+      "**Pullfrog Router is out of credit, and the monthly spend limit blocks the next auto-reload.**",
       "",
-      "Auto-reloads are paused for the rest of this UTC month. Ask your admin to raise the cap, or wait for it to reset at 00:00 UTC on the 1st.",
+      "Top up by hand, ask your admin to raise the cap, or wait for it to reset at 00:00 UTC on the 1st.",
       "",
-      `[Adjust limit \u2192](${billingConsoleUrl(owner)})`
+      `[Top up balance \u2192](${billingConsoleUrl(owner)}) \xB7 [Adjust limit \u2192](${billingConsoleUrl(owner)})`
     ].join("\n");
   }
   if (error49.code === "commercial_plan_required") {
@@ -194546,7 +194652,13 @@ var codexUsageSchema = external_exports.object({
     limit_reached: external_exports.boolean(),
     primary_window: codexWindowSchema,
     secondary_window: codexWindowSchema
-  }).optional()
+  }).optional(),
+  credits: external_exports.object({
+    has_credits: external_exports.boolean().optional(),
+    unlimited: external_exports.boolean().optional(),
+    overage_limit_reached: external_exports.boolean().optional()
+  }).nullish(),
+  spend_control: external_exports.object({ reached: external_exports.boolean().optional() }).nullish()
 });
 var unknown4 = { status: "unknown" };
 async function readSubscriptionEndpoint(input) {
@@ -194589,9 +194701,12 @@ async function probeSubscription(input) {
   const body = await response.json().catch(() => null);
   if (!codex2) return unknown4;
   const parsed2 = codexUsageSchema.safeParse(body);
-  const limit = parsed2.success ? parsed2.data.rate_limit : void 0;
-  if (!limit) return unknown4;
+  if (!parsed2.success || !parsed2.data.rate_limit) return unknown4;
+  const limit = parsed2.data.rate_limit;
   if (limit.allowed && !limit.limit_reached) return { status: "usable" };
+  const credits = parsed2.data.credits;
+  if ((credits?.has_credits || credits?.unlimited) && !credits.overage_limit_reached && !parsed2.data.spend_control?.reached)
+    return { status: "usable" };
   const windows = [limit.primary_window, limit.secondary_window];
   const full = windows.filter((window2) => (window2?.used_percent ?? 0) >= 100);
   const resets = (full.length ? full : windows).flatMap(
@@ -194639,15 +194754,24 @@ async function probeInference(input) {
     const error49 = external_exports.object({ error: external_exports.object({ code: external_exports.string() }) }).safeParse(await response.json().catch(() => null));
     return error49.success && error49.data.error.code === "insufficient_quota" ? { status: "exhausted", detail: "refused with 429: insufficient quota", resetAt: void 0 } : unknown4;
   }
+  if (response?.status === 401 || response?.status === 403)
+    return {
+      status: "rejected",
+      detail: `rejected with ${response.status}${await providerReason(response)}`
+    };
   await response?.body?.cancel();
   if (!response) return unknown4;
   if (response.ok) return { status: "usable" };
-  if (response.status === 401 || response.status === 403)
-    return { status: "rejected", detail: `rejected with ${response.status}` };
   if (response.status === 402)
     return { status: "exhausted", detail: "refused with 402", resetAt: void 0 };
   return unknown4;
 }
+async function providerReason(response) {
+  const body = external_exports.object({ error: external_exports.union([external_exports.string(), external_exports.object({ message: external_exports.string() })]) }).safeParse(await response.json().catch(() => null));
+  if (!body.success) return "";
+  const error49 = body.data.error;
+  return `: ${(typeof error49 === "string" ? error49 : error49.message).slice(0, 300)}`;
+}
 
 // utils/credentialPool.ts
 var receipts = {};
@@ -194656,8 +194780,8 @@ function saveReceipts() {
   for (const receipt of Object.values(receipts)) maskSecret(receipt);
   saveSecretState("credential_receipts", JSON.stringify(receipts));
 }
-var select = op(
-  async (input) => {
+var select = mutation({
+  run: async (input) => {
     const response = await apiFetch({
       path: "/api/runtime/credentials",
       method: "POST",
@@ -194675,11 +194799,8 @@ var select = op(
       });
     return selectedCredentialSchema.parse(await response.json());
   },
-  {
-    retries: [250, 1e3],
-    rethrow: (error49) => error49 instanceof Error && typeof error49.cause === "number" && error49.cause >= 400 && error49.cause < 500
-  }
-);
+  retry: (error49, attempt) => error49 instanceof Error && typeof error49.cause === "number" && error49.cause >= 400 && error49.cause < 500 ? -1 : delay2([250, 1e3], attempt)
+});
 function subscriptionForModel(model) {
   if (!model.includes("/")) return null;
   const provider2 = getModelProvider(model);
@@ -194742,12 +194863,14 @@ async function selectConfiguredCredential(input) {
   const subscription = subscriptionForModel(model);
   const names = getModelEnvVars(model).filter((name) => name !== subscription);
   if (subscription) names.unshift(subscription);
+  const opencodePinned = process.env.PULLFROG_AGENT?.trim() === "opencode";
+  const presentable = (name) => canInstallSubscription(name) && !(opencodePinned && CLAUDE_CODE_ONLY_CREDENTIALS.includes(name));
   const candidates = access.candidates.filter(
-    (candidate) => names.includes(candidate.name) && canInstallSubscription(candidate.name)
+    (candidate) => names.includes(candidate.name) && presentable(candidate.name)
   );
   if (!candidates.length) return false;
   const options = [
-    ...names.filter((name) => workflowCredentials[name] && canInstallSubscription(name)).map((name) => ({ name, candidate: void 0 })),
+    ...names.filter((name) => workflowCredentials[name] && presentable(name)).map((name) => ({ name, candidate: void 0 })),
     ...candidates.map((candidate) => ({ name: candidate.name, candidate }))
   ].sort((a, b) => Number(b.name === subscription) - Number(a.name === subscription));
   const refused = [];
@@ -194762,11 +194885,16 @@ async function selectConfiguredCredential(input) {
       if (option.candidate) log.info(`\xBB selected ${option.name} from ${from}`);
       return true;
     }
-    refused.push(`${option.name} from ${from}: ${verdict.detail}`);
+    refused.push({ name: option.name, source: option.candidate?.source ?? "workflow", verdict });
     log.info(`\xBB ${option.name} from ${from} unavailable; trying the next credential`);
   }
   throw new Error(
-    `all configured credentials for ${model} were rejected or exhausted (${refused.join("; ")}); no other model or provider was selected`
+    buildCredentialPoolRefusedError({
+      model,
+      refused,
+      owner: input.ctx.repo.owner,
+      name: input.ctx.repo.name
+    })
   );
 }
 async function probe(input) {
@@ -194804,10 +194932,10 @@ function activate(input) {
 }
 
 // utils/gitAuthServer.ts
-import { randomUUID as randomUUID5 } from "node:crypto";
+import { randomUUID as randomUUID6 } from "node:crypto";
 import { writeFileSync as writeFileSync14 } from "node:fs";
 import { createServer as createServer3 } from "node:http";
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 var REVOKED_TRAP_MS = 6e4;
 function revokeGitHubToken(token) {
   fetch("https://api.github.com/installation/token", {
@@ -194862,7 +194990,7 @@ async function startGitAuthServer(tmpdir3) {
   const port = rawAddr.port;
   log.debug(`git auth server listening on 127.0.0.1:${port}`);
   function register7(token) {
-    const code = randomUUID5();
+    const code = randomUUID6();
     codes.set(code, { token, state: "active" });
     return code;
   }
@@ -194874,9 +195002,9 @@ async function startGitAuthServer(tmpdir3) {
     entry.timeout.unref();
   }
   function writeAskpassScript(code) {
-    const scriptId = randomUUID5();
+    const scriptId = randomUUID6();
     const scriptName = `askpass-${scriptId}.js`;
-    const scriptPath = join24(tmpdir3, scriptName);
+    const scriptPath = join25(tmpdir3, scriptName);
     const content = [
       `#!/usr/bin/env node`,
       `var a=process.argv[2]||"";`,
@@ -194965,13 +195093,10 @@ function getShellInstructions(shell, t) {
 
 Shell command execution is DISABLED. Do not attempt to run shell commands.`;
     case "restricted":
-      return `### Shell commands
-
-Use the \`${t("shell")}\` MCP tool for all shell command execution. This tool provides a secure environment with filtered credentials. Do NOT use any native shell tool \u2014 it is disabled for security. For long-running processes (dev servers, watchers), use \`shell({ command, background: true })\`. Use \`${t("kill_background")}\` to stop background processes.`;
     case "enabled":
       return `### Shell commands
 
-Use your native shell tool for shell command execution.`;
+Use the \`${t("shell")}\` MCP tool for all shell command execution.${shell === "restricted" ? " This tool provides a secure environment with filtered credentials. Do NOT use any native shell tool \u2014 it is disabled for security." : ""} For long-running processes (dev servers, watchers), use \`shell({ command, background: true })\`. Use \`${t("kill_background")}\` to stop background processes.`;
     default: {
       const _exhaustive = shell;
       return _exhaustive;
@@ -195328,7 +195453,7 @@ function resolveInstructions(ctx) {
 
 // utils/learnings.ts
 import { mkdir as mkdir2, readFile as readFile3, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname4, join as join25 } from "node:path";
+import { dirname as dirname4, join as join26 } from "node:path";
 
 // utils/learningsTruncate.ts
 var MAX_LEARNINGS_LENGTH = 1e5;
@@ -195346,10 +195471,10 @@ function truncateAtLineBoundary(body, cap) {
 var LEARNINGS_FILE_NAME = "pullfrog-learnings.md";
 var XREPO_LEARNINGS_FILE_NAME = "pullfrog-xrepo-learnings.md";
 function learningsFilePath(tmpdir3) {
-  return join25(tmpdir3, LEARNINGS_FILE_NAME);
+  return join26(tmpdir3, LEARNINGS_FILE_NAME);
 }
 function xrepoLearningsFilePath(tmpdir3) {
-  return join25(tmpdir3, XREPO_LEARNINGS_FILE_NAME);
+  return join26(tmpdir3, XREPO_LEARNINGS_FILE_NAME);
 }
 async function seedLearningsFile(params) {
   const path4 = learningsFilePath(params.tmpdir);
@@ -195900,7 +196025,9 @@ async function resolveTokens(params) {
     // commit-status check-runs for branch protection. the app already grants
     // checks:write; this scopes the MCP token up to use it.
     checks: "write",
-    actions: "read"
+    // write (not read) so postReviewCleanup can dispatch the follow-up re-review
+    // for commits pushed while a review was in flight; read 403s it.
+    actions: "write"
   };
   const mcpToken = await acquireNewToken({
     repos: writeRepos,
@@ -196116,8 +196243,8 @@ async function mintProxyKey(ctx) {
   try {
     const headers = await buildProxyTokenHeaders(ctx);
     if (!headers) return null;
-    const response = await op(
-      async () => {
+    const response = await mutation({
+      run: async () => {
         const r = await apiFetch({ path: "/api/proxy-token", method: "POST", headers });
         if (r.status >= 500) {
           const body = await r.json().catch(() => null);
@@ -196127,12 +196254,9 @@ async function mintProxyKey(ctx) {
         }
         return r;
       },
-      {
-        name: "proxy key mint",
-        retries: [1e3, 2e3],
-        rethrow: (error49) => !(error49 instanceof TransientError)
-      }
-    )();
+      name: "proxy key mint",
+      retry: (error49, attempt) => error49 instanceof TransientError ? delay2([1e3, 2e3], attempt) : -1
+    })();
     if (response.status === 402) {
       const body = await response.json().catch(() => null);
       throw new BillingError(body?.error ?? "insufficient balance", {
@@ -196165,10 +196289,10 @@ async function buildProxyTokenHeaders(ctx) {
   const fundingSource = ctx.fundingSource;
   if (ctx.oidcCredentials) {
     const creds = ctx.oidcCredentials;
-    const oidcToken = await op(() => fetchIdTokenFromStash(creds), {
+    const oidcToken = await query({
+      run: () => fetchIdTokenFromStash(creds),
       name: "ID token mint",
-      retries: [1e3, 2e3],
-      rethrow: (error49) => !isTransientTokenError(error49)
+      retry: (error49, attempt) => isTransientTokenError(error49) ? delay2([1e3, 2e3], attempt) : -1
     })();
     return {
       Authorization: `Bearer ${oidcToken}`,
@@ -196289,7 +196413,7 @@ async function resolveTrialFallback(ctx) {
 
 // utils/prSummary.ts
 import { mkdir as mkdir3, readFile as readFile4, writeFile as writeFile3 } from "node:fs/promises";
-import { dirname as dirname5, join as join26 } from "node:path";
+import { dirname as dirname5, join as join27 } from "node:path";
 var SUMMARY_FILE_NAME = "pullfrog-summary.md";
 var SUMMARY_SCAFFOLD = `# PR summary
 
@@ -196299,7 +196423,7 @@ var SUMMARY_SCAFFOLD = `# PR summary
 var MIN_SNAPSHOT_LENGTH = 60;
 var MAX_SNAPSHOT_LENGTH = 32768;
 function summaryFilePath(tmpdir3) {
-  return join26(tmpdir3, SUMMARY_FILE_NAME);
+  return join27(tmpdir3, SUMMARY_FILE_NAME);
 }
 async function seedSummaryFile(params) {
   const path4 = summaryFilePath(params.tmpdir);
@@ -196415,109 +196539,6 @@ ${collapsible}` : output;
   };
 }
 
-// utils/runContext.ts
-var defaultSettings = {
-  model: null,
-  effort: null,
-  modes: [],
-  setupScript: null,
-  postCheckoutScript: null,
-  prepushScript: null,
-  stopScript: null,
-  push: "restricted",
-  shell: "restricted",
-  prApproveEnabled: false,
-  reviewDrafts: false,
-  autoMergeEnabled: false,
-  codexAgent: false,
-  signedCommits: false,
-  repoIntelligence: false,
-  progressComments: true,
-  statusChecks: true,
-  approvalCheck: false,
-  modeInstructions: {},
-  learnings: null,
-  learningsHeadings: [],
-  envAllowlist: null,
-  xrepoBrief: null,
-  xrepoLearnings: null,
-  xrepoLearningsHeadings: []
-};
-var defaultRunContext = {
-  settings: defaultSettings,
-  apiToken: "",
-  oss: false,
-  plan: "none"
-};
-var unknownSecretsRunContext = {
-  ...defaultRunContext,
-  secretsUnavailable: true
-};
-async function fetchRunContext(params) {
-  const timeoutMs = 3e4;
-  const controller = new AbortController();
-  const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
-  try {
-    const headers = {
-      Authorization: `Bearer ${params.token}`,
-      "X-Pullfrog-Credential-Pools": "1"
-    };
-    if (params.oidcToken) {
-      headers["X-GitHub-OIDC-Token"] = params.oidcToken;
-    }
-    const query = new URLSearchParams();
-    if (params.runType) query.set("type", params.runType);
-    if (params.routedTier) query.set("tier", params.routedTier);
-    const search2 = query.toString();
-    const response = await apiFetch({
-      path: `/api/repo/${params.repoContext.owner}/${params.repoContext.name}/run-context${search2 ? `?${search2}` : ""}`,
-      headers,
-      signal: controller.signal
-    });
-    clearTimeout(timeoutId);
-    if (response.status === 402) {
-      const body = await response.json().catch(() => null);
-      const reason = typeof body === "object" && body !== null && "reason" in body ? body.reason : null;
-      const commercialRefused = reason === "subscription_unpaid" || reason === "subscription_ended" ? reason : "commercial";
-      return { ...defaultRunContext, commercialRefused };
-    }
-    if (!response.ok) {
-      return response.status >= 500 ? unknownSecretsRunContext : defaultRunContext;
-    }
-    const data = await response.json();
-    if (data === null) {
-      return defaultRunContext;
-    }
-    return {
-      settings: {
-        ...defaultSettings,
-        ...data.settings,
-        modes: data.settings?.modes ?? [],
-        setupScript: data.settings?.setupScript ?? null,
-        postCheckoutScript: data.settings?.postCheckoutScript ?? null,
-        prepushScript: data.settings?.prepushScript ?? null,
-        stopScript: data.settings?.stopScript ?? null,
-        learningsHeadings: data.settings?.learningsHeadings ?? [],
-        xrepoBrief: data.settings?.xrepoBrief ?? null,
-        xrepoLearnings: data.settings?.xrepoLearnings ?? null,
-        xrepoLearningsHeadings: data.settings?.xrepoLearningsHeadings ?? []
-      },
-      apiToken: data.apiToken,
-      oss: data.oss ?? false,
-      plan: data.plan ?? "none",
-      proxyModel: data.proxyModel,
-      dbSecrets: data.dbSecrets,
-      credentialAccess: data.credentialAccess,
-      secretsUnavailable: data.secretsUnavailable,
-      routerUnfunded: data.routerUnfunded,
-      trialFallback: data.trialFallback
-    };
-  } catch {
-    clearTimeout(timeoutId);
-    return unknownSecretsRunContext;
-  }
-}
-
 // utils/runContextData.ts
 async function resolveRunContextData(params) {
   const actionRef = process.env.GITHUB_ACTION_REF;
@@ -196527,23 +196548,25 @@ async function resolveRunContextData(params) {
   const repoContext = parseRepoContext();
   let oidcToken;
   try {
-    oidcToken = await op(() => mintIdToken(), {
+    oidcToken = await query({
+      run: () => mintIdToken(),
       name: "OIDC mint",
-      retries: process.env.ACTIONS_ID_TOKEN_REQUEST_URL ? [200, 1e3] : []
+      retry: process.env.ACTIONS_ID_TOKEN_REQUEST_URL ? [200, 1e3] : []
     })();
   } catch {
   }
   const [repoResponse, runContext] = await Promise.all([
-    op(() => params.octokit.repos.get({ owner: repoContext.owner, repo: repoContext.name }), {
+    query({
+      run: () => params.octokit.repos.get({ owner: repoContext.owner, repo: repoContext.name }),
       name: "repos.get",
-      retries: [100, 500],
-      rethrow: (error49) => !isTransientOctokitError(error49)
+      retry: (error49, attempt) => isTransientOctokitError(error49) ? delay2([100, 500], attempt) : -1
     })(),
     fetchRunContext({
       token: params.token,
       repoContext,
       oidcToken,
       runType: params.runType,
+      plainPrompt: params.plainPrompt,
       routedTier: params.routedTier
     })
   ]);
@@ -196669,7 +196692,7 @@ function formatBillingExhaustedBody(diagnostic) {
 
 // utils/runErrorRenderer.ts
 function isProviderModelNotFoundError(message) {
-  return message.includes("ProviderModelNotFoundError");
+  return /ProviderModelNotFoundError|\bModel not found: /.test(message);
 }
 function isContextOverflowError(message) {
   return /Prompt is too long/i.test(message) || /Input exceeds context window/i.test(message) || /maximum context length is \d+ tokens/i.test(message) || /Session too large to compact/i.test(message);
@@ -196766,6 +196789,7 @@ function detectProviderId(message) {
   if (/requires more credits|Key limit exceeded \(total limit\)|openrouter\.ai/i.test(message)) {
     return "openrouter";
   }
+  if (/platform\.openai\.com/i.test(message)) return "openai";
   return null;
 }
 var OPENROUTER_PRIVACY_URL = "https://openrouter.ai/settings/privacy";
@@ -196863,12 +196887,38 @@ function formatByokSetupSummary(input) {
   ].join("\n");
 }
 function formatProviderModelNotFoundSummary(input) {
-  return `The configured model is no longer available in OpenCode's catalog. Pick a different model in the Pullfrog console for \`${input.owner}/${input.name}\`, or contact support if this persists.
+  return `The configured model is not in OpenCode's catalog. Pick a different model for \`${input.owner}/${input.name}\` where it is set \u2014 the Pullfrog console, the workflow's \`model\` input, or the \`PULLFROG_MODEL\` variable \u2014 or contact support if this persists.
 
 \`\`\`
 ${input.raw}
 \`\`\``;
 }
+function formatProviderUsageLimit(input) {
+  return [
+    "**The provider's usage limit for this account has been reached.**",
+    "",
+    "A subscription window resets on its own, so re-trigger after it does; a limit set on a pay-as-you-go workspace has to be raised. A model on another provider can run in the meantime.",
+    "",
+    `[Model settings \u2192](${getApiUrl()}/console/${input.owner}/${input.name}) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`,
+    "",
+    `\`\`\`
+${input.raw}
+\`\`\``
+  ].join("\n");
+}
+function formatProviderErrorBody(input) {
+  return [
+    "**The model provider returned an error, so this run stopped.**",
+    "",
+    "The error is below. If it names your key, plan or balance, fix that with the provider or pick another model before re-triggering.",
+    "",
+    `[Model settings \u2192](${getApiUrl()}/console/${input.owner}/${input.name}) \xB7 [Ask in Discord \u2192](https://discord.gg/8y96raFg8e)`,
+    "",
+    `\`\`\`
+${input.raw}
+\`\`\``
+  ].join("\n");
+}
 function renderRunError(input) {
   const billingError = input.routerActive && isRouterKeylimitExhaustedError(input.errorMessage) ? new BillingError(input.errorMessage, { code: "router_keylimit_exhausted" }) : null;
   if (billingError) {
@@ -196884,7 +196934,7 @@ function renderRunError(input) {
   if (input.errorMessage.includes(ROUTER_UNFUNDED_MARKER)) {
     return { summary: input.errorMessage, comment: input.errorMessage };
   }
-  if (input.errorMessage.includes(CREDENTIAL_REJECTED_MARKER)) {
+  if (input.errorMessage.includes(CREDENTIAL_REJECTED_MARKER) || input.errorMessage.includes(CREDENTIAL_POOL_REFUSED_MARKER)) {
     return { summary: input.errorMessage, comment: input.errorMessage };
   }
   const isHang = input.errorMessage.startsWith("activity timeout") || input.errorMessage.startsWith("agent still pending");
@@ -196907,6 +196957,16 @@ ${body}`, comment: body };
     });
     return { summary: `### \u274C Pullfrog failed
 
+${body}`, comment: body };
+  }
+  if (isProviderUsageLimit(input.errorMessage)) {
+    const body = formatProviderUsageLimit({
+      owner: input.repo.owner,
+      name: input.repo.name,
+      raw: input.errorMessage
+    });
+    return { summary: `### \u274C Pullfrog failed
+
 ${body}`, comment: body };
   }
   if (isProviderMissingCredential(input.errorMessage)) {
@@ -197001,6 +197061,16 @@ ${hangBody}`,
       comment: explained ? hangBody : formatMinimalFailureComment(input.repo)
     };
   }
+  if (input.errorMessage.startsWith("provider error: ")) {
+    const body = formatProviderErrorBody({
+      owner: input.repo.owner,
+      name: input.repo.name,
+      raw: input.errorMessage
+    });
+    return { summary: `### \u274C Pullfrog failed
+
+${body}`, comment: body };
+  }
   const genericBody = formatGenericFailure(input.errorMessage);
   return {
     summary: `### \u274C Pullfrog failed
@@ -197080,17 +197150,14 @@ async function autoMergeAfterApprove(ctx) {
   });
   if (hasBlockingHumanReview(reviews)) return skip("human changes requested");
   try {
-    await op(
-      () => ctx.octokit.graphql(ENABLE_AUTO_MERGE, {
+    await mutation({
+      run: () => ctx.octokit.graphql(ENABLE_AUTO_MERGE, {
         pullRequestId: pr.data.node_id,
         headSha
       }),
-      {
-        name: "enablePullRequestAutoMerge",
-        retries: [500, 2e3],
-        rethrow: (error49) => !isTransientOctokitError(error49)
-      }
-    )();
+      name: "enablePullRequestAutoMerge",
+      retry: (error49, attempt) => isTransientOctokitError(error49) ? delay2([500, 2e3], attempt) : -1
+    })();
     log.info(`autoMerge: pr=#${pullNumber} @ ${headSha.slice(0, 7)} \u2192 native auto-merge enabled`);
     await comment(
       "> \u2705 Approved \u2014 auto-merge enabled; GitHub will merge once required checks pass."
@@ -197128,7 +197195,17 @@ async function autoMergeAfterApprove(ctx) {
 var RE_REVIEW_PREAMBLE = "Incrementally re-review the new commits on this pull request. Use the IncrementalReview mode.";
 async function postReviewCleanup(ctx) {
   const review = ctx.toolState.review;
-  if (!review) return;
+  if (!review) {
+    const checkoutSha = primaryRepoState(ctx.toolState).checkoutSha;
+    if (ctx.toolState.selectedMode === "IncrementalReview" && checkoutSha) {
+      await patchWorkflowRunFields(ctx, { reviewSkipped: true });
+      await bestEffort(
+        () => dispatchFollowUpReReview(ctx, checkoutSha),
+        "follow-up re-review dispatch"
+      );
+    }
+    return;
+  }
   delete ctx.toolState.review;
   await bestEffort(() => reportReviewNodeId(ctx, { nodeId: review.nodeId }), "reportReviewNodeId");
   if (review.reviewedSha) {
@@ -197181,20 +197258,17 @@ async function dispatchFollowUpReReview(ctx, reviewedSha) {
     eventInstructions: RE_REVIEW_PREAMBLE,
     event
   };
-  await op(
-    () => ctx.octokit.rest.actions.createWorkflowDispatch({
+  await mutation({
+    run: () => ctx.octokit.rest.actions.createWorkflowDispatch({
       owner: ctx.repo.owner,
       repo: ctx.repo.name,
       workflow_id: getCurrentWorkflowFilename(),
       ref: pr.data.base.repo.default_branch,
       inputs: { prompt: JSON.stringify(payload) }
     }),
-    {
-      name: "reReviewDispatch",
-      retries: [500, 2e3],
-      rethrow: (error49) => !isTransientOctokitError(error49)
-    }
-  )();
+    name: "reReviewDispatch",
+    retry: (error49, attempt) => isTransientOctokitError(error49) ? delay2([500, 2e3], attempt) : -1
+  })();
 }
 function getCurrentWorkflowFilename() {
   const ref = process.env.GITHUB_WORKFLOW_REF ?? "";
@@ -197204,6 +197278,7 @@ function getCurrentWorkflowFilename() {
 
 // utils/runStatusCheck.ts
 var RUN_STATUS_CHECK_NAME = "pullfrog";
+var GITHUB_ACTIONS_APP_SLUG = "github-actions";
 var APPROVAL_CHECK_NAME = "pullfrog-approval";
 function parseCheckRunId(raw2) {
   if (!raw2?.id) return void 0;
@@ -197257,7 +197332,12 @@ function terminalOutput(params) {
   const review = params.reviewUrl ? `
 
 [View the review Pullfrog posted \u2192](${params.reviewUrl})` : "";
-  if (params.conclusion === "success") return { title: base.title, summary: base.summary + review };
+  if (params.conclusion === "success") {
+    const note = params.note ? `
+
+${params.note}` : "";
+    return { title: base.title, summary: base.summary + review + note };
+  }
   return {
     title: base.title,
     summary: base.summary + logsLine(params.detailsUrl) + review + disableCheckLine(params.owner, params.repo)
@@ -197275,7 +197355,8 @@ async function finalizeRunStatusCheck(params) {
       owner: params.owner,
       repo: params.repo,
       detailsUrl: params.detailsUrl,
-      reviewUrl: params.reviewUrl
+      reviewUrl: params.reviewUrl,
+      note: params.note
     })
   };
   if (params.detailsUrl) updateParams.details_url = params.detailsUrl;
@@ -197294,7 +197375,8 @@ async function createTerminalRunStatusCheck(params) {
       owner: params.owner,
       repo: params.repo,
       detailsUrl: params.detailsUrl,
-      reviewUrl: params.reviewUrl
+      reviewUrl: params.reviewUrl,
+      note: params.note
     })
   };
   if (params.detailsUrl) createParams.details_url = params.detailsUrl;
@@ -197310,6 +197392,8 @@ async function reportStatusChecks(ctx, params) {
   if (checkRunId === void 0 && !ctx.payload.runStatusCheck && !ctx.payload.approvalCheck) return;
   const conclusion = params.runSucceeded ? "success" : "failure";
   const detailsUrl = ctx.runId ? `https://github.com/${ctx.repo.owner}/${ctx.repo.name}/actions/runs/${ctx.runId}` : void 0;
+  const approval = ctx.toolState.approval;
+  const note = event.silent && !approval?.url ? ctx.toolState.lastProgressBody : void 0;
   if (checkRunId !== void 0) {
     await finalizeRunStatusCheck({
       octokit: ctx.octokit,
@@ -197318,11 +197402,12 @@ async function reportStatusChecks(ctx, params) {
       checkRunId,
       conclusion,
       detailsUrl,
-      reviewUrl: ctx.toolState.approval?.url
+      reviewUrl: approval?.url,
+      note
     }).then(() => log.info(`\xBB finalized ${RUN_STATUS_CHECK_NAME} check (${conclusion})`)).catch((err) => log.debug(`status checks: ${RUN_STATUS_CHECK_NAME} finalize failed: ${err}`));
   }
-  const approval = ctx.toolState.approval;
-  const needsApprovalCheck = ctx.payload.approvalCheck && params.runSucceeded && approval;
+  const carriesApproval = !approval && ctx.toolState.selectedMode === "IncrementalReview";
+  const needsApprovalCheck = ctx.payload.approvalCheck && params.runSucceeded && (approval !== void 0 || carriesApproval);
   const needsFallbackRunCheck = ctx.payload.runStatusCheck && checkRunId === void 0;
   if (!needsApprovalCheck && !needsFallbackRunCheck) return;
   let headSha;
@@ -197345,25 +197430,64 @@ async function reportStatusChecks(ctx, params) {
       headSha: primaryRepoState(ctx.toolState).checkoutSha ?? headSha,
       conclusion,
       detailsUrl,
-      reviewUrl: ctx.toolState.approval?.url
+      reviewUrl: approval?.url,
+      note
     }).then(() => log.info(`\xBB posted ${RUN_STATUS_CHECK_NAME} check (${conclusion})`)).catch((err) => log.debug(`status checks: ${RUN_STATUS_CHECK_NAME} post failed: ${err}`));
   }
-  if (!needsApprovalCheck || !approval) return;
+  if (!needsApprovalCheck) return;
+  const verdict = approval ? { wouldApprove: approval.wouldApprove, sha: approval.sha ?? headSha, carriedLine: "" } : await carriedApproval(ctx, pullNumber).catch((err) => {
+    log.debug(`status checks: ${APPROVAL_CHECK_NAME} carry-forward failed: ${err}`);
+    return void 0;
+  });
+  if (!verdict) return;
   const createParams = {
     owner: ctx.repo.owner,
     repo: ctx.repo.name,
     name: APPROVAL_CHECK_NAME,
-    head_sha: approval.sha ?? headSha,
+    head_sha: verdict.sha,
     status: "completed",
-    conclusion: approval.wouldApprove ? "success" : "failure",
+    conclusion: verdict.wouldApprove ? "success" : "failure",
     output: {
-      title: approval.wouldApprove ? "Pullfrog would approve" : "Pullfrog would not approve",
-      summary: approval.wouldApprove ? "Pullfrog has no outstanding review feedback on this PR." : "Pullfrog has outstanding review feedback or requested changes on this PR."
+      title: verdict.wouldApprove ? "Pullfrog would approve" : "Pullfrog would not approve",
+      summary: (verdict.wouldApprove ? "Pullfrog has no outstanding review feedback on this PR." : "Pullfrog has outstanding review feedback or requested changes on this PR.") + verdict.carriedLine
     }
   };
   if (detailsUrl) createParams.details_url = detailsUrl;
   await ctx.octokit.rest.checks.create(createParams).then(() => log.info(`\xBB posted ${APPROVAL_CHECK_NAME} check`)).catch((err) => log.debug(`status checks: ${APPROVAL_CHECK_NAME} post failed: ${err}`));
 }
+async function carriedApproval(ctx, pullNumber) {
+  const primary = primaryRepoState(ctx.toolState);
+  if (!primary.beforeSha || !primary.checkoutSha) return void 0;
+  if (await latestApprovalConclusion(ctx, primary.checkoutSha) !== void 0) return void 0;
+  const prior = await latestApprovalConclusion(ctx, primary.beforeSha);
+  if (prior === void 0) return void 0;
+  const from = primary.beforeSha.slice(0, 7);
+  if (prior !== "success") {
+    const carriedLine = `
+
+No review covered this commit, so the verdict on ${from} carries forward.`;
+    return { wouldApprove: false, sha: primary.checkoutSha, carriedLine };
+  }
+  if (ctx.toolState.noReviewNeededSha !== primary.checkoutSha) return void 0;
+  return {
+    wouldApprove: await countOutstandingPullfrogThreads(ctx, pullNumber) === 0,
+    sha: primary.checkoutSha,
+    carriedLine: `
+
+Pullfrog found nothing to review in the commits since ${from}.`
+  };
+}
+async function latestApprovalConclusion(ctx, ref) {
+  const result = await ctx.octokit.rest.checks.listForRef({
+    owner: ctx.repo.owner,
+    repo: ctx.repo.name,
+    ref,
+    check_name: APPROVAL_CHECK_NAME,
+    status: "completed"
+  });
+  const latest = result.data.check_runs.filter((run) => run.app?.slug !== GITHUB_ACTIONS_APP_SLUG).sort((a, b) => (b.completed_at ?? "").localeCompare(a.completed_at ?? ""))[0];
+  return latest?.conclusion ?? void 0;
+}
 
 // utils/runLifecycle.ts
 async function persistRunArtifacts(toolContext) {
@@ -197702,6 +197826,7 @@ async function main() {
       octokit: initialOctokit,
       token: jobToken,
       runType: typeof resolvedPromptInput === "string" ? void 0 : resolvedPromptInput.type,
+      plainPrompt: typeof resolvedPromptInput === "string",
       routedTier: typeof resolvedPromptInput === "string" ? void 0 : resolvedPromptInput.routing?.tier
     });
     timer.checkpoint("runContextData");
@@ -197756,7 +197881,7 @@ async function main() {
     const repoDir = payload.cwd;
     const preIntrospectionDirty = repoDir ? await dirtyTrackedPaths({ cwd: repoDir }) : null;
     const opencodeCliPath = await agents.opencode.install();
-    captureBaselineModels(opencodeCliPath);
+    captureBaselineModels({ cliPath: opencodeCliPath, tmpdir: tmpdir3 });
     const injected = [];
     if (runContext.dbSecrets) {
       for (const [key, value2] of Object.entries(runContext.dbSecrets)) {
@@ -197773,7 +197898,7 @@ async function main() {
     await initializeCredentialPool({ ctx: runContext, slug: payload.model, injected });
     installCodexAuth();
     installXaiAuth();
-    captureAuthorizedModels(opencodeCliPath);
+    captureAuthorizedModels({ cliPath: opencodeCliPath, tmpdir: tmpdir3 });
     if (preIntrospectionDirty && repoDir) {
       await restoreDirtiedSince({
         before: preIntrospectionDirty,
@@ -197798,7 +197923,7 @@ async function main() {
       oidc: oidcCredentials
     }), true);
     wipeRunnerLeakSurface();
-    if (payload.shell === "restricted" && getSandboxMethod() === "none") {
+    if (payload.shell !== "disabled" && process.env.CI === "true" && getSandboxMethod() === "none") {
       payload.shell = "disabled";
       log.warning(
         "\xBB shell commands are disabled for this run: this runner provides no PID-namespace isolation (unprivileged unshare, sudo unshare and userns-nested unshare all failed). on a self-hosted Kubernetes/ARC runner, allow user-namespace creation in the pod's seccomp profile \u2014 see https://docs.pullfrog.com/security#self-hosted-runners"
@@ -197819,6 +197944,7 @@ async function main() {
     const octokit = createOctokit(tokenRef.mcpToken, getMcpTokenRefresh());
     const runInfo = await resolveRun({ octokit });
     let toolContext;
+    let succeeded = false;
     let progressCallbackDisabled = false;
     let todoTracker;
     let vertexCredentials;
@@ -198110,8 +198236,8 @@ ${instructions.user}` : null,
           log.info(instructions.full);
         });
         if (agentId === "opencode") {
-          const pluginDir = join27(process.cwd(), ".opencode", "plugin");
-          const hasPlugins = existsSync10(pluginDir) && readdirSync2(pluginDir).some((f) => /\.[jt]sx?$/.test(f));
+          const pluginDir = join28(process.cwd(), ".opencode", "plugin");
+          const hasPlugins = existsSync11(pluginDir) && readdirSync2(pluginDir).some((f) => /\.[jt]sx?$/.test(f));
           if (hasPlugins && toolState.dependencyInstallation?.promise) {
             log.info(
               "\xBB .opencode/plugin/ detected \u2014 awaiting dependency installation before agent start"
@@ -198236,11 +198362,13 @@ ${instructions.user}` : null,
           );
         }
         await finalizeSuccessRun({ toolContext, toolState, result, repo: runContext.repo });
-        return await handleAgentResult({
+        const outcome = await handleAgentResult({
           result,
           toolContext,
           silent: payload.event.silent ?? false
         });
+        succeeded = outcome.success;
+        return outcome;
       } catch (_2) {
         var _error2 = _2, _hasError2 = true;
       } finally {
@@ -198286,9 +198414,8 @@ ${instructions.user}` : null,
         if (toolState.model) patch.model = toolState.model;
         if (toolState.agent) patch.agent = toolState.agent;
         if (toolState.credential) patch.credential = toolState.credential;
-        if (Object.keys(patch).length > 0) {
-          await patchWorkflowRunFields(toolContext, patch);
-        }
+        patch.succeeded = succeeded;
+        await patchWorkflowRunFields(toolContext, patch);
       }
       cleanupVertexCredentials(vertexCredentials);
     }