pullfrog 0.0.205 → 0.1.1

package/dist/cli.mjs

@@ -108399,7 +108399,11 @@ function resolveCliModel(slug2) {
 var PULLFROG_DIVIDER = "<!-- PULLFROG_DIVIDER_DO_NOT_REMOVE_PLZ -->";
 var FROG_LOGO = `<a href="https://pullfrog.com"><picture><source media="(prefers-color-scheme: dark)" srcset="https://pullfrog.com/logos/frog-white-full-18px.png"><img src="https://pullfrog.com/logos/frog-green-full-18px.png" width="9px" height="9px" style="vertical-align: middle; " alt="Pullfrog"></picture></a>`;
 function formatModelLabel(slug2) {
-  const alias = resolveDisplayAlias(slug2);
+  const alias = resolveDisplayAlias(slug2) ?? // reverse-lookup: when the caller passes an effective model (proxy or
+  // resolved target like "openrouter/anthropic/claude-opus-4.7") instead of
+  // a stored alias slug, find the alias whose resolve target matches so we
+  // still render a friendly display name.
+  modelAliases.find((a) => a.resolve === slug2 || a.openRouterResolve === slug2);
   if (!alias) return `\`${slug2}\``;
   return alias.isFree ? `\`${alias.displayName}\` (free)` : `\`${alias.displayName}\``;
 }
@@ -108474,10 +108478,13 @@ var defaultShouldRetry = (error49) => {
   return error49.name === "AbortError" || error49.message.includes("fetch failed") || error49.message.includes("ECONNRESET") || error49.message.includes("ETIMEDOUT");
 };
 async function retry(fn2, options = {}) {
-  const maxAttempts = options.maxAttempts ?? 3;
-  const delayMs = options.delayMs ?? 1e3;
   const shouldRetry = options.shouldRetry ?? defaultShouldRetry;
   const label = options.label ?? "operation";
+  const delays = options.delaysMs ? Array.from(options.delaysMs) : Array.from(
+    { length: (options.maxAttempts ?? 3) - 1 },
+    (_2, i) => (options.delayMs ?? 1e3) * (i + 1)
+  );
+  const maxAttempts = delays.length + 1;
   let lastError;
   for (let attempt = 1; attempt <= maxAttempts; attempt++) {
     try {
@@ -108487,7 +108494,7 @@ async function retry(fn2, options = {}) {
       if (attempt === maxAttempts || !shouldRetry(error49)) {
         throw error49;
       }
-      const delay2 = delayMs * attempt;
+      const delay2 = delays[attempt - 1];
       log.info(`\xBB ${label} failed (attempt ${attempt}/${maxAttempts}), retrying in ${delay2}ms...`);
       await sleep(delay2);
     }
@@ -108501,7 +108508,6 @@ var STRING_KEYS = [
   "issueNodeId",
   "reviewNodeId",
   "planCommentNodeId",
-  "summaryCommentNodeId",
   "summarySnapshot"
 ];
 var NUMBER_KEYS = [
@@ -109973,6 +109979,7 @@ async function spawn(options) {
   const startTime = performance3.now();
   let stdoutBuffer = "";
   let stderrBuffer = "";
+  const killGroup = options.killGroup ?? false;
   return new Promise((resolve3, reject) => {
     const child = nodeSpawn(options.cmd, options.args, {
       env: options.env || {
@@ -109980,9 +109987,20 @@ async function spawn(options) {
         HOME: process.env.HOME || ""
       },
       stdio: options.stdio || ["pipe", "pipe", "pipe"],
-      cwd: options.cwd || process.cwd()
+      cwd: options.cwd || process.cwd(),
+      detached: killGroup
     });
-    trackChild({ child });
+    const killSelf = (signal) => {
+      if (killGroup && child.pid) {
+        try {
+          process.kill(-child.pid, signal);
+          return;
+        } catch {
+        }
+      }
+      child.kill(signal);
+    };
+    trackChild({ child, killGroup });
     let timeoutId;
     let sigkillEscalatorId;
     let activityCheckIntervalId;
@@ -109993,10 +110011,10 @@ async function spawn(options) {
     if (options.timeout) {
       timeoutId = setTimeout(() => {
         isTimedOut = true;
-        child.kill("SIGTERM");
+        killSelf("SIGTERM");
         sigkillEscalatorId = setTimeout(() => {
           if (!child.killed) {
-            child.kill("SIGKILL");
+            killSelf("SIGKILL");
           }
         }, 5e3);
       }, options.timeout);
@@ -110006,6 +110024,11 @@ async function spawn(options) {
         `spawn activity timer: pid=${child.pid} cmd=${options.cmd} timeout=${activityTimeoutMs}ms`
       );
       activityCheckIntervalId = setInterval(() => {
+        if (options.isPausedExternally?.()) {
+          lastActivityTime = performance3.now();
+          log.debug(`spawn activity check: pid=${child.pid} paused externally`);
+          return;
+        }
         const idleMs = performance3.now() - lastActivityTime;
         log.debug(
           `spawn activity check: pid=${child.pid} idle=${Math.round(idleMs)}ms / ${activityTimeoutMs}ms`
@@ -110015,9 +110038,9 @@ async function spawn(options) {
           killedAtIdleMs = idleMs;
           const idleSec = Math.round(idleMs / 1e3);
           log.info(
-            `no output for ${idleSec}s from pid=${child.pid} (${options.cmd}), killing process`
+            `no output for ${idleSec}s from pid=${child.pid} (${options.cmd}), killing process${killGroup ? " group" : ""}`
           );
-          child.kill("SIGKILL");
+          killSelf("SIGKILL");
           clearInterval(activityCheckIntervalId);
           try {
             options.onActivityTimeout?.();
@@ -142526,7 +142549,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.0.205",
+  version: "0.1.1",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -143654,6 +143677,12 @@ function getHttpStatus(err) {
   const status = err.status;
   return typeof status === "number" ? status : void 0;
 }
+function isTransientReviewError(err) {
+  if (getHttpStatus(err) !== 422) return false;
+  const msg = err instanceof Error ? err.message : String(err);
+  return /internal error occurred, please try again/i.test(msg);
+}
+var TRANSIENT_REVIEW_RETRY_DELAYS_MS = [1e3, 3e3];
 function commentableLinesForFile(patch) {
   const right = /* @__PURE__ */ new Set();
   const left = /* @__PURE__ */ new Set();
@@ -143921,12 +143950,26 @@ function CreatePullRequestReviewTool(ctx) {
       }
       let result;
       try {
-        result = body ? await createAndSubmitWithFooter(ctx, params, {
-          body,
-          approved: approved ?? false,
-          hasComments: (params.comments?.length ?? 0) > 0
-        }) : await createReviewWithStrandedRecovery(ctx, params);
+        result = await retry(
+          () => body ? createAndSubmitWithFooter(ctx, params, {
+            body,
+            approved: approved ?? false,
+            hasComments: (params.comments?.length ?? 0) > 0
+          }) : createReviewWithStrandedRecovery(ctx, params),
+          {
+            delaysMs: TRANSIENT_REVIEW_RETRY_DELAYS_MS,
+            shouldRetry: isTransientReviewError,
+            label: "review submission"
+          }
+        );
       } catch (err) {
+        if (isTransientReviewError(err)) {
+          const rawMsg2 = err instanceof Error ? err.message : String(err);
+          throw new Error(
+            `GitHub returned a transient 422 "internal error" on the reviews endpoint after ${TRANSIENT_REVIEW_RETRY_DELAYS_MS.length + 1} attempts. This is a GitHub-side issue, not a problem with your review content. Do NOT modify or drop inline comments \u2014 their content is not the cause. Wait ~30 seconds and call this tool once more with the SAME arguments. If it still fails, submit a body-only review (move all inline feedback into \`body\` as text) so nothing is lost. GitHub said: ${rawMsg2}`,
+            { cause: err }
+          );
+        }
         if (getHttpStatus(err) !== 422 || !params.comments?.length) throw err;
         const details = params.comments.map((c2) => {
           const line = c2.line ?? 0;
@@ -146899,6 +146942,10 @@ function detectProviderError(text) {
   }
   return null;
 }
+var ROUTER_KEYLIMIT_EXHAUSTED_PATTERN = /requires more credits.*?fewer max_tokens|requested up to \d+ tokens.*?can only afford/is;
+function isRouterKeylimitExhaustedError(text) {
+  return ROUTER_KEYLIMIT_EXHAUSTED_PATTERN.test(text);
+}
 
 // utils/skills.ts
 import { spawnSync as spawnSync5 } from "node:child_process";
@@ -147437,6 +147484,12 @@ async function runClaude(params) {
       activityTimeout: 3e5,
       onActivityTimeout: params.onActivityTimeout,
       stdio: ["ignore", "pipe", "pipe"],
+      // run claude in its own process group so SIGKILL on activity timeout /
+      // outer cancellation reaches any subprocesses it spawns (rg, file
+      // watchers, mcp transports, etc). claude itself is a node bundle so
+      // there's no shim-orphan issue like opencode-ai/bin/opencode, but
+      // detached + killGroup is the right default for any agent runtime.
+      killGroup: true,
       onStdout: async (chunk) => {
         const text = chunk.toString();
         output += text;
@@ -147703,6 +147756,7 @@ async function installOpencodeCli() {
     installDependencies: true
   });
 }
+var PULLFROG_OPENCODE_OUTPUT_LIMIT = 5e3;
 function buildSecurityConfig(ctx, model) {
   const config3 = {
     permission: {
@@ -147795,6 +147849,9 @@ async function runOpenCode(params) {
   const taskDispatchByCallID = /* @__PURE__ */ new Map();
   const pendingTaskDispatches = [];
   const knownNonTaskCallIDs = /* @__PURE__ */ new Set();
+  function isSubagentInFlight() {
+    return taskDispatchByCallID.size > 0 || pendingTaskDispatches.length > 0;
+  }
   function emitSubagentFinished(dispatch, status, output2, matchKind) {
     const subagentDuration = performance7.now() - dispatch.startedAt;
     const outputStr = typeof output2 === "string" ? output2 : "";
@@ -148047,6 +148104,20 @@ async function runOpenCode(params) {
       activityTimeout: 3e5,
       onActivityTimeout: params.onActivityTimeout,
       stdio: ["ignore", "pipe", "pipe"],
+      // node_modules/opencode-ai/bin/opencode is a Node shim that spawnSyncs
+      // the native opencode-<plat>-<arch> binary with stdio:"inherit". without
+      // a process-group kill, SIGKILL hits only the shim, the native binary
+      // is reparented to PID 1, holds our stdout pipe open, and `child.close`
+      // never fires — producing zombie runs. detached + killGroup nukes the
+      // whole tree.
+      killGroup: true,
+      // suspend the inner activity timer while a `task` subagent is in flight.
+      // opencode's task tool encapsulates subagent execution in-process — the
+      // subagent's internal events don't surface on the parent NDJSON stream,
+      // so without this the 5min timeout would falsely fire mid-subagent.
+      // suspend/resume is preferable to a heartbeat because there's no race
+      // between a periodic tick and a subagent finishing between ticks.
+      isPausedExternally: isSubagentInFlight,
       onStdout: async (chunk) => {
         const text = chunk.toString();
         output += text;
@@ -148218,6 +148289,7 @@ var opencode = agent({
       ...homeEnv,
       OPENCODE_CONFIG_CONTENT: buildSecurityConfig(ctx, model),
       OPENCODE_PERMISSION: permissionOverride,
+      OPENCODE_EXPERIMENTAL_OUTPUT_TOKEN_MAX: PULLFROG_OPENCODE_OUTPUT_LIMIT.toString(),
       GOOGLE_GENERATIVE_AI_API_KEY: process.env.GOOGLE_GENERATIVE_AI_API_KEY || process.env.GEMINI_API_KEY
     };
     const repoDir = process.cwd();
@@ -153635,6 +153707,24 @@ function formatBillingErrorSummary(error49, owner) {
       `[Add a card \u2192](${billingConsoleUrl(owner, "model-access")})`
     ].join("\n");
   }
+  if (error49.code === "router_balance_exhausted") {
+    return [
+      "**Your Pullfrog Router balance is exhausted.**",
+      "",
+      "You have a card on file but auto-reload is disabled, so runs paused once your balance went past the overdraft buffer.",
+      "",
+      `[Top up balance \u2192](${billingConsoleUrl(owner, "billing")}) \xB7 [Enable auto-reload \u2192](${billingConsoleUrl(owner, "model-access")})`
+    ].join("\n");
+  }
+  if (error49.code === "router_keylimit_exhausted") {
+    return [
+      "**This run was cut short \u2014 your Pullfrog Router balance ran out mid-run.**",
+      "",
+      "OpenRouter stopped the agent because the per-run budget was exhausted. Your wallet is now negative; top up or enable auto-reload to keep runs flowing.",
+      "",
+      `[Top up balance \u2192](${billingConsoleUrl(owner, "billing")}) \xB7 [Enable auto-reload \u2192](${billingConsoleUrl(owner, "model-access")})`
+    ].join("\n");
+  }
   if (error49.needsReauthentication) {
     const code = error49.declineCode ?? "authentication_required";
     return [
@@ -153875,6 +153965,7 @@ async function main() {
         setGitAuthServer(gitAuthServer);
         const resolvedModel = payload.proxyModel ? void 0 : resolveModel({ slug: payload.model });
         const agent2 = resolveAgent({ model: resolvedModel });
+        toolState.model = payload.proxyModel ?? resolvedModel ?? payload.model;
         validateAgentApiKey({
           agent: agent2,
           model: payload.proxyModel ?? resolvedModel ?? payload.model,
@@ -154118,8 +154209,9 @@ ${instructions.user}` : null,
       todoTracker?.cancel();
       killTrackedChildren();
       log.error(errorMessage);
+      const billingError = isRouterKeylimitExhaustedError(errorMessage) ? new BillingError(errorMessage, { code: "router_keylimit_exhausted" }) : null;
       try {
-        const errorSummary = `### \u274C Pullfrog failed
+        const errorSummary = billingError ? formatBillingErrorSummary(billingError, runContext.repo.owner) : `### \u274C Pullfrog failed
 
 \`\`\`
 ${errorMessage}
@@ -154130,7 +154222,8 @@ ${errorMessage}
       } catch {
       }
       try {
-        await reportErrorToComment({ toolState, error: errorMessage });
+        const commentBody = billingError ? formatBillingErrorSummary(billingError, runContext.repo.owner) : errorMessage;
+        await reportErrorToComment({ toolState, error: commentBody });
       } catch {
       }
       if (toolContext) {
@@ -155983,7 +156076,7 @@ async function run2() {
 }
 
 // cli.ts
-var VERSION10 = "0.0.205";
+var VERSION10 = "0.1.1";
 var bin = basename2(process.argv[1] || "");
 var PROG = bin === "pf" || bin === "pullfrog" ? bin : "pullfrog";
 var rawArgs = process.argv.slice(2);

package/dist/index.js

@@ -108116,7 +108116,11 @@ function resolveCliModel(slug2) {
 var PULLFROG_DIVIDER = "<!-- PULLFROG_DIVIDER_DO_NOT_REMOVE_PLZ -->";
 var FROG_LOGO = `<a href="https://pullfrog.com"><picture><source media="(prefers-color-scheme: dark)" srcset="https://pullfrog.com/logos/frog-white-full-18px.png"><img src="https://pullfrog.com/logos/frog-green-full-18px.png" width="9px" height="9px" style="vertical-align: middle; " alt="Pullfrog"></picture></a>`;
 function formatModelLabel(slug2) {
-  const alias = resolveDisplayAlias(slug2);
+  const alias = resolveDisplayAlias(slug2) ?? // reverse-lookup: when the caller passes an effective model (proxy or
+  // resolved target like "openrouter/anthropic/claude-opus-4.7") instead of
+  // a stored alias slug, find the alias whose resolve target matches so we
+  // still render a friendly display name.
+  modelAliases.find((a) => a.resolve === slug2 || a.openRouterResolve === slug2);
   if (!alias) return `\`${slug2}\``;
   return alias.isFree ? `\`${alias.displayName}\` (free)` : `\`${alias.displayName}\``;
 }
@@ -108191,10 +108195,13 @@ var defaultShouldRetry = (error49) => {
   return error49.name === "AbortError" || error49.message.includes("fetch failed") || error49.message.includes("ECONNRESET") || error49.message.includes("ETIMEDOUT");
 };
 async function retry(fn2, options = {}) {
-  const maxAttempts = options.maxAttempts ?? 3;
-  const delayMs = options.delayMs ?? 1e3;
   const shouldRetry = options.shouldRetry ?? defaultShouldRetry;
   const label = options.label ?? "operation";
+  const delays = options.delaysMs ? Array.from(options.delaysMs) : Array.from(
+    { length: (options.maxAttempts ?? 3) - 1 },
+    (_, i) => (options.delayMs ?? 1e3) * (i + 1)
+  );
+  const maxAttempts = delays.length + 1;
   let lastError;
   for (let attempt = 1; attempt <= maxAttempts; attempt++) {
     try {
@@ -108204,7 +108211,7 @@ async function retry(fn2, options = {}) {
       if (attempt === maxAttempts || !shouldRetry(error49)) {
         throw error49;
       }
-      const delay2 = delayMs * attempt;
+      const delay2 = delays[attempt - 1];
       log.info(`\xBB ${label} failed (attempt ${attempt}/${maxAttempts}), retrying in ${delay2}ms...`);
       await sleep(delay2);
     }
@@ -108218,7 +108225,6 @@ var STRING_KEYS = [
   "issueNodeId",
   "reviewNodeId",
   "planCommentNodeId",
-  "summaryCommentNodeId",
   "summarySnapshot"
 ];
 var NUMBER_KEYS = [
@@ -109690,6 +109696,7 @@ async function spawn(options) {
   const startTime = performance3.now();
   let stdoutBuffer = "";
   let stderrBuffer = "";
+  const killGroup = options.killGroup ?? false;
   return new Promise((resolve3, reject) => {
     const child = nodeSpawn(options.cmd, options.args, {
       env: options.env || {
@@ -109697,9 +109704,20 @@ async function spawn(options) {
         HOME: process.env.HOME || ""
       },
       stdio: options.stdio || ["pipe", "pipe", "pipe"],
-      cwd: options.cwd || process.cwd()
+      cwd: options.cwd || process.cwd(),
+      detached: killGroup
     });
-    trackChild({ child });
+    const killSelf = (signal) => {
+      if (killGroup && child.pid) {
+        try {
+          process.kill(-child.pid, signal);
+          return;
+        } catch {
+        }
+      }
+      child.kill(signal);
+    };
+    trackChild({ child, killGroup });
     let timeoutId;
     let sigkillEscalatorId;
     let activityCheckIntervalId;
@@ -109710,10 +109728,10 @@ async function spawn(options) {
     if (options.timeout) {
       timeoutId = setTimeout(() => {
         isTimedOut = true;
-        child.kill("SIGTERM");
+        killSelf("SIGTERM");
         sigkillEscalatorId = setTimeout(() => {
           if (!child.killed) {
-            child.kill("SIGKILL");
+            killSelf("SIGKILL");
           }
         }, 5e3);
       }, options.timeout);
@@ -109723,6 +109741,11 @@ async function spawn(options) {
         `spawn activity timer: pid=${child.pid} cmd=${options.cmd} timeout=${activityTimeoutMs}ms`
       );
       activityCheckIntervalId = setInterval(() => {
+        if (options.isPausedExternally?.()) {
+          lastActivityTime = performance3.now();
+          log.debug(`spawn activity check: pid=${child.pid} paused externally`);
+          return;
+        }
         const idleMs = performance3.now() - lastActivityTime;
         log.debug(
           `spawn activity check: pid=${child.pid} idle=${Math.round(idleMs)}ms / ${activityTimeoutMs}ms`
@@ -109732,9 +109755,9 @@ async function spawn(options) {
           killedAtIdleMs = idleMs;
           const idleSec = Math.round(idleMs / 1e3);
           log.info(
-            `no output for ${idleSec}s from pid=${child.pid} (${options.cmd}), killing process`
+            `no output for ${idleSec}s from pid=${child.pid} (${options.cmd}), killing process${killGroup ? " group" : ""}`
           );
-          child.kill("SIGKILL");
+          killSelf("SIGKILL");
           clearInterval(activityCheckIntervalId);
           try {
             options.onActivityTimeout?.();
@@ -142243,7 +142266,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.0.205",
+  version: "0.1.1",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -143371,6 +143394,12 @@ function getHttpStatus(err) {
   const status = err.status;
   return typeof status === "number" ? status : void 0;
 }
+function isTransientReviewError(err) {
+  if (getHttpStatus(err) !== 422) return false;
+  const msg = err instanceof Error ? err.message : String(err);
+  return /internal error occurred, please try again/i.test(msg);
+}
+var TRANSIENT_REVIEW_RETRY_DELAYS_MS = [1e3, 3e3];
 function commentableLinesForFile(patch) {
   const right = /* @__PURE__ */ new Set();
   const left = /* @__PURE__ */ new Set();
@@ -143638,12 +143667,26 @@ function CreatePullRequestReviewTool(ctx) {
       }
       let result;
       try {
-        result = body ? await createAndSubmitWithFooter(ctx, params, {
-          body,
-          approved: approved ?? false,
-          hasComments: (params.comments?.length ?? 0) > 0
-        }) : await createReviewWithStrandedRecovery(ctx, params);
+        result = await retry(
+          () => body ? createAndSubmitWithFooter(ctx, params, {
+            body,
+            approved: approved ?? false,
+            hasComments: (params.comments?.length ?? 0) > 0
+          }) : createReviewWithStrandedRecovery(ctx, params),
+          {
+            delaysMs: TRANSIENT_REVIEW_RETRY_DELAYS_MS,
+            shouldRetry: isTransientReviewError,
+            label: "review submission"
+          }
+        );
       } catch (err) {
+        if (isTransientReviewError(err)) {
+          const rawMsg2 = err instanceof Error ? err.message : String(err);
+          throw new Error(
+            `GitHub returned a transient 422 "internal error" on the reviews endpoint after ${TRANSIENT_REVIEW_RETRY_DELAYS_MS.length + 1} attempts. This is a GitHub-side issue, not a problem with your review content. Do NOT modify or drop inline comments \u2014 their content is not the cause. Wait ~30 seconds and call this tool once more with the SAME arguments. If it still fails, submit a body-only review (move all inline feedback into \`body\` as text) so nothing is lost. GitHub said: ${rawMsg2}`,
+            { cause: err }
+          );
+        }
         if (getHttpStatus(err) !== 422 || !params.comments?.length) throw err;
         const details = params.comments.map((c) => {
           const line = c.line ?? 0;
@@ -146616,6 +146659,10 @@ function detectProviderError(text) {
   }
   return null;
 }
+var ROUTER_KEYLIMIT_EXHAUSTED_PATTERN = /requires more credits.*?fewer max_tokens|requested up to \d+ tokens.*?can only afford/is;
+function isRouterKeylimitExhaustedError(text) {
+  return ROUTER_KEYLIMIT_EXHAUSTED_PATTERN.test(text);
+}
 
 // utils/skills.ts
 import { spawnSync as spawnSync5 } from "node:child_process";
@@ -147154,6 +147201,12 @@ async function runClaude(params) {
       activityTimeout: 3e5,
       onActivityTimeout: params.onActivityTimeout,
       stdio: ["ignore", "pipe", "pipe"],
+      // run claude in its own process group so SIGKILL on activity timeout /
+      // outer cancellation reaches any subprocesses it spawns (rg, file
+      // watchers, mcp transports, etc). claude itself is a node bundle so
+      // there's no shim-orphan issue like opencode-ai/bin/opencode, but
+      // detached + killGroup is the right default for any agent runtime.
+      killGroup: true,
       onStdout: async (chunk) => {
         const text = chunk.toString();
         output += text;
@@ -147420,6 +147473,7 @@ async function installOpencodeCli() {
     installDependencies: true
   });
 }
+var PULLFROG_OPENCODE_OUTPUT_LIMIT = 5e3;
 function buildSecurityConfig(ctx, model) {
   const config3 = {
     permission: {
@@ -147512,6 +147566,9 @@ async function runOpenCode(params) {
   const taskDispatchByCallID = /* @__PURE__ */ new Map();
   const pendingTaskDispatches = [];
   const knownNonTaskCallIDs = /* @__PURE__ */ new Set();
+  function isSubagentInFlight() {
+    return taskDispatchByCallID.size > 0 || pendingTaskDispatches.length > 0;
+  }
   function emitSubagentFinished(dispatch, status, output2, matchKind) {
     const subagentDuration = performance7.now() - dispatch.startedAt;
     const outputStr = typeof output2 === "string" ? output2 : "";
@@ -147764,6 +147821,20 @@ async function runOpenCode(params) {
       activityTimeout: 3e5,
       onActivityTimeout: params.onActivityTimeout,
       stdio: ["ignore", "pipe", "pipe"],
+      // node_modules/opencode-ai/bin/opencode is a Node shim that spawnSyncs
+      // the native opencode-<plat>-<arch> binary with stdio:"inherit". without
+      // a process-group kill, SIGKILL hits only the shim, the native binary
+      // is reparented to PID 1, holds our stdout pipe open, and `child.close`
+      // never fires — producing zombie runs. detached + killGroup nukes the
+      // whole tree.
+      killGroup: true,
+      // suspend the inner activity timer while a `task` subagent is in flight.
+      // opencode's task tool encapsulates subagent execution in-process — the
+      // subagent's internal events don't surface on the parent NDJSON stream,
+      // so without this the 5min timeout would falsely fire mid-subagent.
+      // suspend/resume is preferable to a heartbeat because there's no race
+      // between a periodic tick and a subagent finishing between ticks.
+      isPausedExternally: isSubagentInFlight,
       onStdout: async (chunk) => {
         const text = chunk.toString();
         output += text;
@@ -147935,6 +148006,7 @@ var opencode = agent({
       ...homeEnv,
       OPENCODE_CONFIG_CONTENT: buildSecurityConfig(ctx, model),
       OPENCODE_PERMISSION: permissionOverride,
+      OPENCODE_EXPERIMENTAL_OUTPUT_TOKEN_MAX: PULLFROG_OPENCODE_OUTPUT_LIMIT.toString(),
       GOOGLE_GENERATIVE_AI_API_KEY: process.env.GOOGLE_GENERATIVE_AI_API_KEY || process.env.GEMINI_API_KEY
     };
     const repoDir = process.cwd();
@@ -153352,6 +153424,24 @@ function formatBillingErrorSummary(error49, owner) {
       `[Add a card \u2192](${billingConsoleUrl(owner, "model-access")})`
     ].join("\n");
   }
+  if (error49.code === "router_balance_exhausted") {
+    return [
+      "**Your Pullfrog Router balance is exhausted.**",
+      "",
+      "You have a card on file but auto-reload is disabled, so runs paused once your balance went past the overdraft buffer.",
+      "",
+      `[Top up balance \u2192](${billingConsoleUrl(owner, "billing")}) \xB7 [Enable auto-reload \u2192](${billingConsoleUrl(owner, "model-access")})`
+    ].join("\n");
+  }
+  if (error49.code === "router_keylimit_exhausted") {
+    return [
+      "**This run was cut short \u2014 your Pullfrog Router balance ran out mid-run.**",
+      "",
+      "OpenRouter stopped the agent because the per-run budget was exhausted. Your wallet is now negative; top up or enable auto-reload to keep runs flowing.",
+      "",
+      `[Top up balance \u2192](${billingConsoleUrl(owner, "billing")}) \xB7 [Enable auto-reload \u2192](${billingConsoleUrl(owner, "model-access")})`
+    ].join("\n");
+  }
   if (error49.needsReauthentication) {
     const code = error49.declineCode ?? "authentication_required";
     return [
@@ -153592,6 +153682,7 @@ async function main() {
         setGitAuthServer(gitAuthServer);
         const resolvedModel = payload.proxyModel ? void 0 : resolveModel({ slug: payload.model });
         const agent2 = resolveAgent({ model: resolvedModel });
+        toolState.model = payload.proxyModel ?? resolvedModel ?? payload.model;
         validateAgentApiKey({
           agent: agent2,
           model: payload.proxyModel ?? resolvedModel ?? payload.model,
@@ -153835,8 +153926,9 @@ ${instructions.user}` : null,
       todoTracker?.cancel();
       killTrackedChildren();
       log.error(errorMessage);
+      const billingError = isRouterKeylimitExhaustedError(errorMessage) ? new BillingError(errorMessage, { code: "router_keylimit_exhausted" }) : null;
       try {
-        const errorSummary = `### \u274C Pullfrog failed
+        const errorSummary = billingError ? formatBillingErrorSummary(billingError, runContext.repo.owner) : `### \u274C Pullfrog failed
 
 \`\`\`
 ${errorMessage}
@@ -153847,7 +153939,8 @@ ${errorMessage}
       } catch {
       }
       try {
-        await reportErrorToComment({ toolState, error: errorMessage });
+        const commentBody = billingError ? formatBillingErrorSummary(billingError, runContext.repo.owner) : errorMessage;
+        await reportErrorToComment({ toolState, error: commentBody });
       } catch {
       }
       if (toolContext) {

package/dist/internal.js

@@ -805,7 +805,11 @@ var modes = computeModes("opencode");
 var PULLFROG_DIVIDER = "<!-- PULLFROG_DIVIDER_DO_NOT_REMOVE_PLZ -->";
 var FROG_LOGO = `<a href="https://pullfrog.com"><picture><source media="(prefers-color-scheme: dark)" srcset="https://pullfrog.com/logos/frog-white-full-18px.png"><img src="https://pullfrog.com/logos/frog-green-full-18px.png" width="9px" height="9px" style="vertical-align: middle; " alt="Pullfrog"></picture></a>`;
 function formatModelLabel(slug) {
-  const alias = resolveDisplayAlias(slug);
+  const alias = resolveDisplayAlias(slug) ?? // reverse-lookup: when the caller passes an effective model (proxy or
+  // resolved target like "openrouter/anthropic/claude-opus-4.7") instead of
+  // a stored alias slug, find the alias whose resolve target matches so we
+  // still render a friendly display name.
+  modelAliases.find((a) => a.resolve === slug || a.openRouterResolve === slug);
   if (!alias) return `\`${slug}\``;
   return alias.isFree ? `\`${alias.displayName}\` (free)` : `\`${alias.displayName}\``;
 }

package/dist/mcp/review.d.ts

@@ -1,5 +1,18 @@
 import type { RestEndpointMethodTypes } from "@octokit/rest";
 import type { ToolContext } from "./server.ts";
+/**
+ * detect GitHub's generic server-side 422 ("An internal error occurred,
+ * please try again.") that sometimes fires on `POST /pulls/{n}/reviews`.
+ *
+ * the body is stable across occurrences and distinct from every other 422
+ * cause we care about (anchor validation, body length, malformed suggestion
+ * blocks) — those all cite the specific problem. treating this as a
+ * transient server error unlocks bounded in-tool retry instead of surfacing
+ * it to the agent with the generic "likely causes (1)(2)(3)" prompt, which
+ * induces whack-a-mole comment dropping on content that was never the issue.
+ */
+export declare function isTransientReviewError(err: unknown): boolean;
+export declare const TRANSIENT_REVIEW_RETRY_DELAYS_MS: number[];
 export type CommentableLines = {
     RIGHT: Set<number>;
     LEFT: Set<number>;

package/dist/utils/patchWorkflowRunFields.d.ts

@@ -5,7 +5,7 @@ import type { ToolContext } from "../mcp/server.ts";
  * are created during the run. Strings only (GraphQL node IDs).
  * Keep in sync with `STRING_FIELDS` in `app/api/workflow-run/[runId]/route.ts`.
  */
-export type WorkflowRunArtifactPatchKey = "prNodeId" | "issueNodeId" | "reviewNodeId" | "planCommentNodeId" | "summaryCommentNodeId" | "summarySnapshot";
+export type WorkflowRunArtifactPatchKey = "prNodeId" | "issueNodeId" | "reviewNodeId" | "planCommentNodeId" | "summarySnapshot";
 /**
  * Usage fields — aggregated across all agent calls and PATCHed once at
  * end-of-run. Token counts are Int4 on the DB side (ample for any realistic

package/dist/utils/providerErrors.d.ts

@@ -1 +1,2 @@
 export declare function detectProviderError(text: string): string | null;
+export declare function isRouterKeylimitExhaustedError(text: string): boolean;

package/dist/utils/retry.d.ts

@@ -1,6 +1,12 @@
 export type RetryOptions = {
     maxAttempts?: number;
     delayMs?: number;
+    /**
+     * explicit delay schedule — one entry per retry (length N ⇒ N+1 attempts).
+     * when set, overrides `maxAttempts` and `delayMs`. e.g. `[1_000, 3_000]`
+     * means up to 3 attempts, sleeping 1s before retry 2 and 3s before retry 3.
+     */
+    delaysMs?: readonly number[];
     shouldRetry?: (error: unknown) => boolean;
     label?: string;
 };

package/dist/utils/subprocess.d.ts

@@ -26,6 +26,8 @@ export interface SpawnOptions {
     stdio?: ("pipe" | "ignore" | "inherit")[];
     onStdout?: (chunk: string) => void;
     onStderr?: (chunk: string) => void;
+    killGroup?: boolean;
+    isPausedExternally?: () => boolean;
 }
 export interface SpawnResult {
     stdout: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pullfrog",
-  "version": "0.0.205",
+  "version": "0.1.1",
   "type": "module",
   "bin": {
     "pullfrog": "dist/cli.mjs",