Adds an exact per-flag PR safety check before agent execution and increases bulk PR discovery depth to reduce missed historical declined/open PRs.
Fixes worktree lifecycle edge cases by canonicalizing /tmp vs /private/tmp paths, pruning stale git worktree metadata, and preventing workspace deletion when per-repo worktree cleanup fails.
Refactors agent invocation to a cleaner provider-agnostic contract and fixes same-agent parse-retry for session-based CLIs (e.g. Claude session ID reuse).
Makes runs fail closed if PR discovery fails, preventing unsafe worktree cleanup or duplicate PR creation under partial visibility.