fix: resolve all test failures and Cubic review issues

- Fix unstable-agent-babysitter: add promptAsync to test mock
- Fix claude-code-mcp-loader: isolate tests from user home configs
- Fix npm-dist-tags: encode packageName for scoped packages
- Fix agent-builder: clone source to prevent shared object mutation
- Fix add-plugin-to-opencode-config: handle JSONC with leading comments
- Fix auth-plugins/add-provider-config: error on parse failures
- Fix bun-install: clear timeout on completion
- Fix git-diff-stats: include untracked files in diff summary

src/cli/config-manager/add-plugin-to-opencode-config.ts

@@ -64,7 +64,7 @@ export async function addPluginToOpenCodeConfig(currentVersion: string): Promise
         const newContent = content.replace(pluginArrayRegex, `"plugin": [\n    ${formattedPlugins}\n  ]`)
         writeFileSync(path, newContent)
       } else {
-        const newContent = content.replace(/^(\s*\{)/, `$1\n  "plugin": ["${pluginEntry}"],`)
+        const newContent = content.replace(/(\{)/, `$1\n  "plugin": ["${pluginEntry}"],`)
         writeFileSync(path, newContent)
       }
     } else {

src/cli/config-manager/add-provider-config.ts

@@ -25,10 +25,13 @@ export function addProviderConfig(config: InstallConfig): ConfigMergeResult {
     if (format !== "none") {
       const parseResult = parseOpenCodeConfigFileWithError(path)
       if (parseResult.error && !parseResult.config) {
-        existingConfig = {}
-      } else {
-        existingConfig = parseResult.config
+        return {
+          success: false,
+          configPath: path,
+          error: `Failed to parse config file: ${parseResult.error}`,
+        }
       }
+      existingConfig = parseResult.config
     }
 
     const newConfig = { ...(existingConfig ?? {}) }

src/cli/config-manager/auth-plugins.ts

@@ -35,10 +35,13 @@ export async function addAuthPlugins(config: InstallConfig): Promise<ConfigMerge
     if (format !== "none") {
       const parseResult = parseOpenCodeConfigFileWithError(path)
       if (parseResult.error && !parseResult.config) {
-        existingConfig = {}
-      } else {
-        existingConfig = parseResult.config
+        return {
+          success: false,
+          configPath: path,
+          error: `Failed to parse config file: ${parseResult.error}`,
+        }
       }
+      existingConfig = parseResult.config
     }
 
     const plugins: string[] = existingConfig?.plugin ?? []

src/cli/config-manager/bun-install.ts

@@ -22,11 +22,13 @@ export async function runBunInstallWithDetails(): Promise<BunInstallResult> {
       stderr: "pipe",
     })
 
-    const timeoutPromise = new Promise<"timeout">((resolve) =>
-      setTimeout(() => resolve("timeout"), BUN_INSTALL_TIMEOUT_MS)
-    )
+    let timeoutId: ReturnType<typeof setTimeout>
+    const timeoutPromise = new Promise<"timeout">((resolve) => {
+      timeoutId = setTimeout(() => resolve("timeout"), BUN_INSTALL_TIMEOUT_MS)
+    })
     const exitPromise = proc.exited.then(() => "completed" as const)
     const result = await Promise.race([exitPromise, timeoutPromise])
+    clearTimeout(timeoutId!)
 
     if (result === "timeout") {
       try {

src/cli/config-manager/npm-dist-tags.ts

@@ -9,7 +9,7 @@ const NPM_FETCH_TIMEOUT_MS = 5000
 
 export async function fetchNpmDistTags(packageName: string): Promise<NpmDistTags | null> {
   try {
-    const res = await fetch(`https://registry.npmjs.org/-/package/${packageName}/dist-tags`, {
+    const res = await fetch(`https://registry.npmjs.org/-/package/${encodeURIComponent(packageName)}/dist-tags`, {
       signal: AbortSignal.timeout(NPM_FETCH_TIMEOUT_MS),
     })
     if (!res.ok) return null