[leaf-agent]

Regenerates the nine tend-* workflows against tend 0.2.13 (from 0.2.11). The committed diff is only the pinned action ref and the uv setup version (0.12.13 → 0.12.17); everything below rides in the action and the plugin it loads.

What changes for this repo

A cancelled gating check no longer reads as green. poll_pr_checks.py now treats only SUCCESS, NEUTRAL, and SKIPPED as green and exits 2 — unverified — on anything else (max-sixty/tend#1323). Cancelled runs are routine here: main serializes the complete suite, so a newer commit replaces the one waiting for its turn, and running-tend already carries a rule for reading that shape. Under 0.2.11 a session polling its own push could report such a check as verified; it now has to say it could not verify.

CI sessions ignore the bot's claude.ai account. Skills, plugins, and MCP connectors enabled on the leaf-agent account no longer load into sessions that push and post as it (max-sixty/tend#1328). Sessions run with this repo's skills and tend's own, and nothing else.

/tmp is writable inside the sandbox, as scratch private to the run (max-sixty/tend#1324). A tool that hard-codes a /tmp path no longer needs an override; $TMPDIR stays the documented place to write.

The sandbox launch retries a transient bridge-socket failure, up to three attempts (max-sixty/tend#1327). SRT gives socat 600 ms to bind, and a slow runner previously lost the whole job before the agent started.

Three plugin-side fixes also land: review-runs can now cancel a run parked in GitHub's waiting state that holds its concurrency group without ever concluding (#1320); ground-claims reads a past run's code at that run's commit rather than at the current default branch (#1319); and run-tend corrects its list of instruction paths restored to the base version on a PR (#1311).

No configuration change needed

0.2.12 moved the agent into the job's own checkout through a copy-on-write view, which would have changed where dependency setup belongs. 0.2.13 reverts it (#1339): setup: and sandbox_setup: behave as they did at 0.2.11, so .config/tend.yaml is unchanged here. This repo pins no model:, so the harness default applies as before.

Full comparison: 0.2.11...0.2.13.