pullfrog 0.1.31 → 0.1.32

package/dist/index.js

@@ -99818,15 +99818,20 @@ var providers = {
     displayName: "Anthropic",
     envVars: ["ANTHROPIC_API_KEY", "CLAUDE_CODE_OAUTH_TOKEN"],
     models: {
-      // claude-fable-5 is disabled globally — access has been revoked, so it
-      // can't run as-is anywhere (BYOK, Claude Code, or Router). the fallback
-      // redirects all resolution to opus and hides it from pickers; opus is the
-      // universally-available flagship, the AUTO_INTELLIGENT tier target, and
-      // the recommended pick. clear the fallback if fable access returns (#959).
+      // claude-fable-5 is selectable but not recommended/auto-selected — it's
+      // moving to usage-credits-only billing and isn't broadly available yet, so
+      // opus stays the universally-available flagship, the AUTO_INTELLIGENT tier
+      // target, and the recommended pick. an explicit fable pick hits the real
+      // API and is access-gated: it errors for accounts without access today and
+      // just works once usage credits are live — no silent opus fallback, the
+      // API is the source of truth (#959).
       "claude-fable": {
         displayName: "Claude Fable",
         resolve: "anthropic/claude-fable-5",
-        fallback: "anthropic/claude-opus",
+        // rolling alias: models.dev's OpenRouter mirror lags brand-new pinned
+        // versions (claude-fable-5 isn't indexed yet), so track ~…-latest to
+        // stay catalog-valid and auto-follow version bumps.
+        openRouterResolve: "openrouter/~anthropic/claude-fable-latest",
         subagentModel: "claude-sonnet"
       },
       "claude-opus": {
@@ -99838,8 +99843,8 @@ var providers = {
       },
       "claude-sonnet": {
         displayName: "Claude Sonnet",
-        resolve: "anthropic/claude-sonnet-4-6",
-        openRouterResolve: "openrouter/anthropic/claude-sonnet-4.6"
+        resolve: "anthropic/claude-sonnet-5",
+        openRouterResolve: "openrouter/anthropic/claude-sonnet-5"
       },
       "claude-haiku": {
         displayName: "Claude Haiku",
@@ -100017,8 +100022,8 @@ var providers = {
       },
       "claude-sonnet": {
         displayName: "Claude Sonnet",
-        resolve: "opencode/claude-sonnet-4-6",
-        openRouterResolve: "openrouter/anthropic/claude-sonnet-4.6"
+        resolve: "opencode/claude-sonnet-5",
+        openRouterResolve: "openrouter/anthropic/claude-sonnet-5"
       },
       "claude-haiku": {
         displayName: "Claude Haiku",
@@ -101036,7 +101041,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.31",
+  version: "0.1.32",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -102775,7 +102780,7 @@ function buildAgentsJson() {
     [REVIEWER_AGENT_NAME]: {
       description: "Read-only review subagent for lens-based code review (correctness, security, billing-subsystem, etc.). Reads only \u2014 no writes, no state-changing shell or MCP calls, no nested subagent dispatch.",
       prompt: REVIEWER_SYSTEM_PROMPT,
-      model: "claude-sonnet-4-6"
+      model: "claude-sonnet-5"
     }
   };
   return JSON.stringify(agents2);
@@ -150952,6 +150957,34 @@ function getCacheKeyString(value2) {
     );
   }
 }
+var DEFAULT_RETRY_AFTER_CAP_MS = 2e4;
+function getErrorResponseHeaders(error49) {
+  if (error49 === null || typeof error49 !== "object") return void 0;
+  const response = error49.response;
+  if (response === null || typeof response !== "object") return void 0;
+  const headers = response.headers;
+  if (headers === null || typeof headers !== "object") return void 0;
+  return headers;
+}
+function retryAfterMs(error49) {
+  const headers = getErrorResponseHeaders(error49);
+  if (!headers) return void 0;
+  const retryAfter = headers["retry-after"];
+  if (typeof retryAfter === "string" && retryAfter.trim() !== "") {
+    const seconds = Number(retryAfter);
+    if (Number.isFinite(seconds)) return Math.max(0, seconds * 1e3);
+    const dateMs = Date.parse(retryAfter);
+    if (!Number.isNaN(dateMs)) return Math.max(0, dateMs - Date.now());
+  }
+  if (headers["x-ratelimit-remaining"] === "0") {
+    const reset = headers["x-ratelimit-reset"];
+    if (typeof reset === "string" && reset.trim() !== "") {
+      const resetEpoch = Number(reset);
+      if (Number.isFinite(resetEpoch)) return Math.max(0, resetEpoch * 1e3 - Date.now());
+    }
+  }
+  return void 0;
+}
 function validateSchema(schema2, value2) {
   const result = schema2["~standard"].validate(value2);
   if (result instanceof Promise) {
@@ -151089,7 +151122,15 @@ function _op(fn2, options) {
               log2.info({ key, error: error49, attempt });
             }
           } else {
-            const delay2 = retries[attempt];
+            let delay2 = retries[attempt];
+            if (options.retryAfter) {
+              const extract = options.retryAfter === true ? retryAfterMs : options.retryAfter;
+              const hint = extract(error49);
+              if (hint !== void 0) {
+                const cap = options.retryAfterCap ?? DEFAULT_RETRY_AFTER_CAP_MS;
+                delay2 = Math.max(delay2, Math.min(cap, hint));
+              }
+            }
             if (namePrefix) {
               log2.info(
                 `${namePrefix}attempt ${attempt + 1}/${retries.length + 1} failed, retrying in ${delay2}ms`
@@ -156818,6 +156859,12 @@ function isTransientNetworkError(error49, extraPatterns = []) {
   const patterns = ["fetch failed", "ECONNRESET", "ETIMEDOUT", ...extraPatterns];
   return patterns.some((p) => error49.message.includes(p));
 }
+function isTransientOctokitError(error49) {
+  if (error49 !== null && typeof error49 === "object" && "status" in error49 && typeof error49.status === "number") {
+    return error49.status >= 500;
+  }
+  return isTransientNetworkError(error49);
+}
 
 // utils/patchWorkflowRunFields.ts
 var STRING_KEYS = [
@@ -156911,6 +156958,195 @@ function aggregateUsage(entries) {
   return out;
 }
 
+// utils/payload.ts
+var core4 = __toESM(require_core(), 1);
+import { readFileSync as readFileSync3 } from "node:fs";
+import { isAbsolute as isAbsolute2, resolve as resolve2 } from "node:path";
+
+// utils/versioning.ts
+var import_semver2 = __toESM(require_semver2(), 1);
+var COMPATIBILITY_POLICY = "non-breaking";
+function validateCompatibility(payloadVersion, actionVersion) {
+  const payloadSemVer = import_semver2.default.parse(payloadVersion);
+  if (!payloadSemVer)
+    throw new Error(`Payload version ${payloadVersion} is not a valid semantic version.`);
+  const major = payloadSemVer.major;
+  const minor = payloadSemVer.minor;
+  const patch = payloadSemVer.patch;
+  const compatibilityRange = COMPATIBILITY_POLICY === "same-features" ? `^${major}.${minor}.${major === 0 ? patch : 0}` : `^${major}.${major === 0 ? minor : 0}.${major === 0 ? "x" : 0}`;
+  if (!import_semver2.default.satisfies(actionVersion, compatibilityRange)) {
+    throw new Error(
+      `Payload version ${payloadVersion} is incompatible with action version ${actionVersion}. Please update your workflow to use at least ${import_semver2.default.minVersion(compatibilityRange)} version of the action.`
+    );
+  }
+}
+
+// utils/payload.ts
+var ShellPermissionInput = type.enumerated("disabled", "restricted", "enabled");
+var PushPermissionInput = type.enumerated("disabled", "restricted", "enabled");
+var StatusChecksInput = type.enumerated("disabled", "enabled");
+var JsonPayload = type({
+  "~pullfrog": "true",
+  version: "string",
+  "model?": "string | undefined",
+  "modelExplicit?": "boolean | undefined",
+  prompt: "string",
+  "triggerer?": "string | undefined",
+  "baseInstructions?": "string | undefined",
+  "eventInstructions?": "string",
+  "previousRunsNote?": "string",
+  "event?": "object",
+  "xrepo?": type({
+    mode: "'all' | 'explicit'",
+    read: "string[]",
+    write: "string[]",
+    // optional so a payload from an older server build (pre-`unavailable`)
+    // still parses against a newer action across a rolling deploy.
+    "unavailable?": "string[]"
+  }).or("undefined"),
+  "timeout?": "string | undefined",
+  "progressComment?": type({
+    id: "string",
+    type: "'issue' | 'review'"
+  }).or("undefined"),
+  "generateSummary?": "boolean | undefined"
+});
+var COLLABORATOR_PERMISSIONS = ["admin", "maintain", "write"];
+function isCollaborator(event) {
+  const perm = event.authorPermission;
+  return perm !== void 0 && COLLABORATOR_PERMISSIONS.includes(perm);
+}
+var Inputs = type({
+  "prompt?": type.string.or("undefined"),
+  "prompt_file?": type.string.or("undefined"),
+  "model?": type.string.or("undefined"),
+  "timeout?": type.string.or("undefined"),
+  "push?": PushPermissionInput.or("undefined"),
+  "shell?": ShellPermissionInput.or("undefined"),
+  "status_checks?": StatusChecksInput.or("undefined"),
+  "cwd?": type.string.or("undefined"),
+  "output_schema?": type.string.or("undefined")
+});
+function isPayloadEvent(value2) {
+  return typeof value2 === "object" && value2 !== null && "trigger" in value2;
+}
+function resolveCwd(cwd) {
+  const workspace = process.env.GITHUB_WORKSPACE;
+  if (!cwd) return workspace;
+  if (isAbsolute2(cwd)) return cwd;
+  return workspace ? resolve2(workspace, cwd) : cwd;
+}
+function resolvePromptInput() {
+  const promptInput = core4.getInput("prompt");
+  const promptFile = core4.getInput("prompt_file");
+  if (promptInput && promptFile) {
+    throw new Error("set exactly one of 'prompt' or 'prompt_file' inputs, not both.");
+  }
+  if (promptFile) {
+    return resolvePromptFile(promptFile);
+  }
+  if (!promptInput) {
+    throw new Error("one of 'prompt' or 'prompt_file' inputs is required.");
+  }
+  let parsed2;
+  try {
+    parsed2 = JSON.parse(promptInput);
+  } catch {
+    return promptInput;
+  }
+  if (!parsed2 || typeof parsed2 !== "object" || !("~pullfrog" in parsed2)) {
+    return promptInput;
+  }
+  const jsonPayload = JsonPayload.assert(parsed2);
+  validateCompatibility(jsonPayload.version, package_default.version);
+  return jsonPayload;
+}
+function resolvePromptFile(input) {
+  const workspace = process.env.GITHUB_WORKSPACE;
+  const path4 = isAbsolute2(input) ? input : workspace ? resolve2(workspace, input) : resolve2(input);
+  const content = readFileSync3(path4, "utf-8");
+  if (!content.trim()) {
+    throw new Error(`prompt_file ${JSON.stringify(input)} is empty.`);
+  }
+  return content;
+}
+function resolveNonPromptInputs() {
+  return Inputs.omit("prompt", "prompt_file").assert({
+    model: core4.getInput("model") || void 0,
+    timeout: core4.getInput("timeout") || void 0,
+    cwd: core4.getInput("cwd") || void 0,
+    push: core4.getInput("push") || void 0,
+    shell: core4.getInput("shell") || void 0,
+    status_checks: core4.getInput("status_checks") || void 0
+  });
+}
+var isPullfrog = (actor) => {
+  actor = actor?.replace("[bot]", "");
+  return !!actor && (actor === "pullfrog" || actor === "pullfrogdev");
+};
+function resolvePayload(resolvedPromptInput, repoSettings) {
+  const [prompt, jsonPayload] = typeof resolvedPromptInput !== "string" ? [resolvedPromptInput.prompt, resolvedPromptInput] : [resolvedPromptInput, void 0];
+  const inputs = resolveNonPromptInputs();
+  const rawEvent = jsonPayload?.event;
+  const event = isPayloadEvent(rawEvent) ? rawEvent : { trigger: "unknown" };
+  const model = jsonPayload?.model ?? inputs.model ?? repoSettings.model ?? void 0;
+  const isNonCollaborator = !isCollaborator(event);
+  const repoShell = repoSettings.shell ?? "restricted";
+  const inputShell = inputs.shell;
+  let resolvedShell = repoShell;
+  if (inputShell === "disabled") {
+    resolvedShell = "disabled";
+  } else if (inputShell === "restricted" && resolvedShell === "enabled") {
+    resolvedShell = "restricted";
+  }
+  if (isNonCollaborator && resolvedShell === "enabled") {
+    resolvedShell = "restricted";
+  }
+  return {
+    "~pullfrog": true,
+    version: jsonPayload?.version ?? package_default.version,
+    model,
+    // explicit only when the model came from a per-run override flag (carried on
+    // the JSON payload). a GHA `model` input or the repo default is not explicit.
+    modelExplicit: jsonPayload?.modelExplicit ?? false,
+    prompt,
+    triggerer: jsonPayload?.triggerer ?? // it's not a common use case but GITHUB_ACTOR can be a user when the workflow is manually triggered by a user through GitHub Actions UI
+    (!isPullfrog(process.env.GITHUB_ACTOR) ? process.env.GITHUB_ACTOR : void 0),
+    baseInstructions: jsonPayload?.baseInstructions,
+    eventInstructions: jsonPayload?.eventInstructions,
+    previousRunsNote: jsonPayload?.previousRunsNote,
+    event,
+    xrepo: jsonPayload?.xrepo,
+    timeout: inputs.timeout ?? jsonPayload?.timeout,
+    cwd: resolveCwd(inputs.cwd),
+    progressComment: jsonPayload?.progressComment,
+    generateSummary: jsonPayload?.generateSummary,
+    // permissions: inputs > repoSettings > fallbacks
+    push: inputs.push ?? repoSettings.push ?? "restricted",
+    shell: resolvedShell,
+    // opt-in commit-status check-runs (branch protection). workflow-level
+    // static input, off unless the repo's pullfrog.yml sets status_checks: enabled.
+    statusChecks: inputs.status_checks === "enabled",
+    // set by proxy logic in main.ts when routing through OpenRouter
+    proxyModel: void 0
+  };
+}
+function resolveOutputSchema() {
+  const raw2 = core4.getInput("output_schema");
+  if (!raw2) return void 0;
+  let parsed2;
+  try {
+    parsed2 = JSON.parse(raw2);
+  } catch {
+    throw new Error(`invalid output_schema: not valid JSON`);
+  }
+  if (!parsed2 || typeof parsed2 !== "object" || Array.isArray(parsed2)) {
+    throw new Error(`invalid output_schema: must be a JSON object`);
+  }
+  log.info("\xBB structured output schema provided \u2014 output will be required");
+  return parsed2;
+}
+
 // mcp/comment.ts
 function isNotFoundError(error49) {
   return error49 instanceof Error && error49.message.includes("Not Found");
@@ -157332,6 +157568,80 @@ async function buildCommentableMap(ctx, pullNumber) {
   }
   return map2;
 }
+var OUTSTANDING_THREADS_QUERY = `
+query ($owner: String!, $name: String!, $prNumber: Int!, $cursor: String) {
+  repository(owner: $owner, name: $name) {
+    pullRequest(number: $prNumber) {
+      reviewThreads(first: 100, after: $cursor) {
+        pageInfo { hasNextPage endCursor }
+        nodes {
+          isResolved
+          comments(first: 1) { nodes { author { login } } }
+        }
+      }
+    }
+  }
+}
+`;
+async function countOutstandingPullfrogThreads(ctx, pullNumber) {
+  let count = 0;
+  let cursor = null;
+  for (let page = 0; page < 50; page += 1) {
+    const response = await ctx.octokit.graphql(
+      OUTSTANDING_THREADS_QUERY,
+      { owner: ctx.repo.owner, name: ctx.repo.name, prNumber: pullNumber, cursor }
+    );
+    const conn = response.repository?.pullRequest?.reviewThreads;
+    for (const thread of conn?.nodes ?? []) {
+      if (!thread || thread.isResolved) continue;
+      const root = thread.comments?.nodes?.find((c) => c != null);
+      if (root && isPullfrog(root.author?.login)) count += 1;
+    }
+    if (!conn?.pageInfo.hasNextPage) break;
+    cursor = conn.pageInfo.endCursor;
+  }
+  return count;
+}
+async function approveAfterFix(ctx) {
+  if (ctx.payload.event.trigger !== "fix_review") return;
+  if (!ctx.prApproveEnabled) return;
+  if (ctx.toolState.approval) return;
+  const pullNumber = ctx.payload.event.issue_number;
+  if (typeof pullNumber !== "number") return;
+  const outstanding = await countOutstandingPullfrogThreads(ctx, pullNumber);
+  if (outstanding > 0) {
+    log.info(
+      `skipping fix auto-approval: ${outstanding} unresolved Pullfrog review thread(s) still open on #${pullNumber}`
+    );
+    return;
+  }
+  const pr = await ctx.octokit.rest.pulls.get({
+    owner: ctx.repo.owner,
+    repo: ctx.repo.name,
+    pull_number: pullNumber
+  });
+  if (pr.data.state !== "open") return;
+  const headSha = pr.data.head.sha;
+  const summary2 = ctx.toolState.lastProgressBody?.trim();
+  const body = "> \u2705 Pullfrog addressed all of its review feedback on this PR.\n\n" + (summary2 || "all Pullfrog-raised review threads are resolved \u2014 no outstanding findings remain.");
+  const params = {
+    owner: ctx.repo.owner,
+    repo: ctx.repo.name,
+    pull_number: pullNumber,
+    event: "APPROVE",
+    commit_id: headSha
+  };
+  const result = await createAndSubmitWithFooter(ctx, params, {
+    body,
+    approved: true,
+    hasComments: false
+  });
+  ctx.toolState.approval = { wouldApprove: true, sha: headSha };
+  log.info(`\xBB auto-approved #${pullNumber} after fix run (review ${result.data.id})`);
+  await deleteProgressComment(ctx).catch((err) => {
+    log.debug(`progress comment cleanup after fix auto-approval failed: ${err}`);
+  });
+}
 function validateInlineComments(comments, map2) {
   const valid = [];
   const dropped = [];
@@ -157422,7 +157732,7 @@ var CreatePullRequestReview = type({
     "1-2 sentence high-level summary with urgency level, critical callouts, and feedback about code outside the diff. Specific feedback on diff lines goes in 'comments' array."
   ).optional(),
   approved: type.boolean.describe(
-    "Set to true to submit as an approval. Use for `> \u2705 No new issues found.` reviews where the PR is mergeable as-is and nothing in the body warrants code changes \u2014 approving also suppresses the Fix-button footer affordance so users don't dispatch a fix run on non-actionable feedback. Reserve approved: false for `> \u2139\uFE0F ...` (minor suggestions inline), `> [!IMPORTANT]` (recommended changes), and `> [!CAUTION]` (critical) reviews. Defaults to false (comment-only review). Mutually exclusive with request_changes."
+    "Set to true to submit as an approval. Use for `> \u2705 No new issues found.` reviews where the PR is mergeable as-is and nothing in the body warrants code changes \u2014 approving also suppresses the Fix-button footer affordance so users don't dispatch a fix run on non-actionable feedback. Reserve approved: false for `> \u2139\uFE0F ...` (minor suggestions inline), `> [!IMPORTANT]` (recommended changes), and `> [!CAUTION]` (critical) reviews. Defaults to false (comment-only review). Mutually exclusive with request_changes. Approval is REJECTED while any unresolved Pullfrog review thread remains open on the PR (not just the latest commit's diff): resolve the threads the current code addresses (reply + resolve_review_thread) first, or submit a non-approving review if a real issue remains."
   ).optional(),
   request_changes: type.boolean.describe(
     "Set to true to submit a blocking REQUEST_CHANGES review \u2014 the PR cannot merge until the requested changes are made and the review is dismissed or re-reviewed. Reserve for changes you consider required, not optional suggestions. Mutually exclusive with approved; a contentless request (no body and no comments) is skipped."
@@ -157480,6 +157790,17 @@ function CreatePullRequestReviewTool(ctx) {
             reviewId: dup.reviewId
           };
         }
+        if (approved) {
+          const outstanding = await countOutstandingPullfrogThreads(ctx, pull_number);
+          if (outstanding > 0) {
+            const listRef = formatMcpToolRef(ctx.agentId, "get_review_comments");
+            const resolveRef2 = formatMcpToolRef(ctx.agentId, "resolve_review_thread");
+            throw new Error(
+              `cannot approve: ${outstanding} unresolved Pullfrog review thread(s) still open on this PR. approval requires every prior Pullfrog finding to be resolved, not just the latest commits to be clean. inspect them with \`${listRef}\`; for each thread the current code genuinely addresses, reply then call \`${resolveRef2}\`, and retry this approval. if any thread is a real outstanding issue, do NOT approve \u2014 submit a non-approving review (omit \`approved\`) that covers it instead.`
+            );
+          }
+        }
+        ctx.toolState.approval = { wouldApprove: approved === true, sha: primary.checkoutSha };
         const skip = reviewSkipDecision({
           approved: approved ?? false,
           requestChanges: request_changes ?? false,
@@ -157613,6 +157934,7 @@ function CreatePullRequestReviewTool(ctx) {
           nodeId: reviewNodeId,
           reviewedSha: actuallyReviewedSha
         };
+        if (ctx.toolState.approval) ctx.toolState.approval.sha = actuallyReviewedSha;
         ctx.toolState.wasUpdated = true;
         await deleteProgressComment(ctx).catch((err) => {
           log.debug(`progress comment cleanup after review failed: ${err}`);
@@ -159034,7 +159356,7 @@ function isMetadataYarnClassic(metadataPath) {
 }
 
 // utils/packageManager.ts
-var import_semver2 = __toESM(require_semver2(), 1);
+var import_semver3 = __toESM(require_semver2(), 1);
 import { existsSync as existsSync5 } from "node:fs";
 import { mkdir, readFile as readFile2 } from "node:fs/promises";
 import { delimiter, join as join15 } from "node:path";
@@ -159056,7 +159378,7 @@ function parsePackageManagerField(value2) {
   return {
     name,
     version: version3,
-    concrete: import_semver2.default.valid(version3) !== null,
+    concrete: import_semver3.default.valid(version3) !== null,
     source: "packageManager"
   };
 }
@@ -159070,7 +159392,7 @@ function parseDevEnginesField(field) {
   return {
     name: field.name,
     version: version3,
-    concrete: import_semver2.default.valid(version3) !== null,
+    concrete: import_semver3.default.valid(version3) !== null,
     source: "devEngines"
   };
 }
@@ -159104,7 +159426,7 @@ async function resolvePackageManagerSpec(cwd) {
     }
     return devSpec;
   }
-  if (pmSpec.concrete && import_semver2.default.satisfies(pmSpec.version, devSpec.version)) {
+  if (pmSpec.concrete && import_semver3.default.satisfies(pmSpec.version, devSpec.version)) {
     return pmSpec;
   }
   if (pmSpec.concrete) {
@@ -159316,8 +159638,15 @@ ${errorMessage}`]
 };
 
 // prep/installPythonDependencies.ts
-import { existsSync as existsSync7 } from "node:fs";
+import { existsSync as existsSync7, readFileSync as readFileSync4 } from "node:fs";
 import { join as join17 } from "node:path";
+function declaresBuildSystem(path4) {
+  return /^\s*\[\s*build-system\s*\]/m.test(readFileSync4(path4, "utf8"));
+}
+function configApplies(config3, cwd) {
+  const path4 = join17(cwd, config3.file);
+  return existsSync7(path4) && (config3.applies?.(path4) ?? true);
+}
 var PYTHON_CONFIGS = [
   {
     file: "requirements.txt",
@@ -159327,7 +159656,8 @@ var PYTHON_CONFIGS = [
   {
     file: "pyproject.toml",
     tool: "pip",
-    installCmd: ["pip", "install", "."]
+    installCmd: ["pip", "install", "."],
+    applies: declaresBuildSystem
   },
   {
     file: "Pipfile",
@@ -159389,11 +159719,11 @@ var installPythonDependencies = {
       return false;
     }
     const cwd = process.cwd();
-    return PYTHON_CONFIGS.some((config3) => existsSync7(join17(cwd, config3.file)));
+    return PYTHON_CONFIGS.some((config3) => configApplies(config3, cwd));
   },
   run: async (options) => {
     const cwd = process.cwd();
-    const config3 = PYTHON_CONFIGS.find((c) => existsSync7(join17(cwd, c.file)));
+    const config3 = PYTHON_CONFIGS.find((c) => configApplies(c, cwd));
     if (!config3) {
       return {
         language: "python",
@@ -161844,12 +162174,17 @@ function resolveModel(ctx) {
   if (envModel) {
     return resolveSlug(envModel) ?? envModel;
   }
-  if (ctx.slug) {
-    const resolved = resolveSlug(ctx.slug);
+  const slug2 = ctx.slug?.trim();
+  if (slug2) {
+    const resolved = resolveSlug(slug2);
     if (resolved) {
       return resolved;
     }
-    log.warning(`\xBB unknown model slug "${ctx.slug}" \u2014 agent will auto-select`);
+    if (slug2.includes("/")) {
+      log.info(`\xBB "${slug2}" is not a curated alias \u2014 passing through as a raw model specifier`);
+      return slug2;
+    }
+    log.warning(`\xBB unknown model slug "${slug2}" \u2014 agent will auto-select`);
   }
   return void 0;
 }
@@ -162412,6 +162747,8 @@ Never use \`sleep\` to wait for commands to complete. Commands run synchronously
 
 When posting comments via ${pullfrogMcpName}, write as a professional team member would. Your final comments should be polished and actionable \u2014 do not include intermediate reasoning like "I'll now look at the code" or "Let me respond to the question."
 
+Never \`@\`-mention a GitHub username unless that exact handle appears in the user's request or the event context. GitHub already notifies the author and thread participants, so write "the author" or omit it.
+
 When embedding images (e.g. uploaded screenshots) in comments or PR bodies, always use markdown image syntax: \`![description](url)\`. Never paste a naked URL \u2014 it will not render as an image.
 
 ### Progress reporting
@@ -162721,7 +163058,7 @@ function buildModelAccessError(input) {
 }
 
 // utils/normalizeEnv.ts
-var core4 = __toESM(require_core(), 1);
+var core5 = __toESM(require_core(), 1);
 function sanitizeSecret(key, value2) {
   const trimmed = value2.trim();
   if (trimmed.length === 0) {
@@ -162735,7 +163072,7 @@ function sanitizeSecret(key, value2) {
       `\xBB stripped whitespace from ${key} (whitespace in secret values breaks GitHub Actions log masking)`
     );
   }
-  core4.setSecret(trimmed);
+  core5.setSecret(trimmed);
   return trimmed;
 }
 function normalizeEnv() {
@@ -162779,7 +163116,7 @@ function normalizeEnv() {
 }
 
 // utils/overrides.ts
-var core5 = __toESM(require_core(), 1);
+var core6 = __toESM(require_core(), 1);
 var DENIED_OVERRIDE_NAMES = /* @__PURE__ */ new Set([
   "GITHUB_TOKEN",
   "GH_TOKEN",
@@ -162825,7 +163162,7 @@ function applyOverrides(params) {
       denied.push(key);
       continue;
     }
-    if (value2.length > 0) core5.setSecret(value2);
+    if (value2.length > 0) core6.setSecret(value2);
     params.env[key] = value2;
     applied.push(key);
   }
@@ -162833,168 +163170,6 @@ function applyOverrides(params) {
   return { applied, denied };
 }
 
-// utils/payload.ts
-var core6 = __toESM(require_core(), 1);
-import { isAbsolute as isAbsolute2, resolve as resolve2 } from "node:path";
-
-// utils/versioning.ts
-var import_semver3 = __toESM(require_semver2(), 1);
-var COMPATIBILITY_POLICY = "non-breaking";
-function validateCompatibility(payloadVersion, actionVersion) {
-  const payloadSemVer = import_semver3.default.parse(payloadVersion);
-  if (!payloadSemVer)
-    throw new Error(`Payload version ${payloadVersion} is not a valid semantic version.`);
-  const major = payloadSemVer.major;
-  const minor = payloadSemVer.minor;
-  const patch = payloadSemVer.patch;
-  const compatibilityRange = COMPATIBILITY_POLICY === "same-features" ? `^${major}.${minor}.${major === 0 ? patch : 0}` : `^${major}.${major === 0 ? minor : 0}.${major === 0 ? "x" : 0}`;
-  if (!import_semver3.default.satisfies(actionVersion, compatibilityRange)) {
-    throw new Error(
-      `Payload version ${payloadVersion} is incompatible with action version ${actionVersion}. Please update your workflow to use at least ${import_semver3.default.minVersion(compatibilityRange)} version of the action.`
-    );
-  }
-}
-
-// utils/payload.ts
-var ShellPermissionInput = type.enumerated("disabled", "restricted", "enabled");
-var PushPermissionInput = type.enumerated("disabled", "restricted", "enabled");
-var JsonPayload = type({
-  "~pullfrog": "true",
-  version: "string",
-  "model?": "string | undefined",
-  "modelExplicit?": "boolean | undefined",
-  prompt: "string",
-  "triggerer?": "string | undefined",
-  "baseInstructions?": "string | undefined",
-  "eventInstructions?": "string",
-  "previousRunsNote?": "string",
-  "event?": "object",
-  "xrepo?": type({
-    mode: "'all' | 'explicit'",
-    read: "string[]",
-    write: "string[]",
-    // optional so a payload from an older server build (pre-`unavailable`)
-    // still parses against a newer action across a rolling deploy.
-    "unavailable?": "string[]"
-  }).or("undefined"),
-  "timeout?": "string | undefined",
-  "progressComment?": type({
-    id: "string",
-    type: "'issue' | 'review'"
-  }).or("undefined"),
-  "generateSummary?": "boolean | undefined"
-});
-var COLLABORATOR_PERMISSIONS = ["admin", "maintain", "write"];
-function isCollaborator(event) {
-  const perm = event.authorPermission;
-  return perm !== void 0 && COLLABORATOR_PERMISSIONS.includes(perm);
-}
-var Inputs = type({
-  prompt: "string",
-  "model?": type.string.or("undefined"),
-  "timeout?": type.string.or("undefined"),
-  "push?": PushPermissionInput.or("undefined"),
-  "shell?": ShellPermissionInput.or("undefined"),
-  "cwd?": type.string.or("undefined"),
-  "output_schema?": type.string.or("undefined")
-});
-function isPayloadEvent(value2) {
-  return typeof value2 === "object" && value2 !== null && "trigger" in value2;
-}
-function resolveCwd(cwd) {
-  const workspace = process.env.GITHUB_WORKSPACE;
-  if (!cwd) return workspace;
-  if (isAbsolute2(cwd)) return cwd;
-  return workspace ? resolve2(workspace, cwd) : cwd;
-}
-function resolvePromptInput() {
-  const prompt = core6.getInput("prompt", { required: true });
-  let parsed2;
-  try {
-    parsed2 = JSON.parse(prompt);
-  } catch {
-    return prompt;
-  }
-  if (!parsed2 || typeof parsed2 !== "object" || !("~pullfrog" in parsed2)) {
-    return prompt;
-  }
-  const jsonPayload = JsonPayload.assert(parsed2);
-  validateCompatibility(jsonPayload.version, package_default.version);
-  return jsonPayload;
-}
-function resolveNonPromptInputs() {
-  return Inputs.omit("prompt").assert({
-    model: core6.getInput("model") || void 0,
-    timeout: core6.getInput("timeout") || void 0,
-    cwd: core6.getInput("cwd") || void 0,
-    push: core6.getInput("push") || void 0,
-    shell: core6.getInput("shell") || void 0
-  });
-}
-var isPullfrog = (actor) => {
-  actor = actor?.replace("[bot]", "");
-  return !!actor && (actor === "pullfrog" || actor === "pullfrogdev");
-};
-function resolvePayload(resolvedPromptInput, repoSettings) {
-  const [prompt, jsonPayload] = typeof resolvedPromptInput !== "string" ? [resolvedPromptInput.prompt, resolvedPromptInput] : [resolvedPromptInput, void 0];
-  const inputs = resolveNonPromptInputs();
-  const rawEvent = jsonPayload?.event;
-  const event = isPayloadEvent(rawEvent) ? rawEvent : { trigger: "unknown" };
-  const model = jsonPayload?.model ?? inputs.model ?? repoSettings.model ?? void 0;
-  const isNonCollaborator = !isCollaborator(event);
-  const repoShell = repoSettings.shell ?? "restricted";
-  const inputShell = inputs.shell;
-  let resolvedShell = repoShell;
-  if (inputShell === "disabled") {
-    resolvedShell = "disabled";
-  } else if (inputShell === "restricted" && resolvedShell === "enabled") {
-    resolvedShell = "restricted";
-  }
-  if (isNonCollaborator && resolvedShell === "enabled") {
-    resolvedShell = "restricted";
-  }
-  return {
-    "~pullfrog": true,
-    version: jsonPayload?.version ?? package_default.version,
-    model,
-    // explicit only when the model came from a per-run override flag (carried on
-    // the JSON payload). a GHA `model` input or the repo default is not explicit.
-    modelExplicit: jsonPayload?.modelExplicit ?? false,
-    prompt,
-    triggerer: jsonPayload?.triggerer ?? // it's not a common use case but GITHUB_ACTOR can be a user when the workflow is manually triggered by a user through GitHub Actions UI
-    (!isPullfrog(process.env.GITHUB_ACTOR) ? process.env.GITHUB_ACTOR : void 0),
-    baseInstructions: jsonPayload?.baseInstructions,
-    eventInstructions: jsonPayload?.eventInstructions,
-    previousRunsNote: jsonPayload?.previousRunsNote,
-    event,
-    xrepo: jsonPayload?.xrepo,
-    timeout: inputs.timeout ?? jsonPayload?.timeout,
-    cwd: resolveCwd(inputs.cwd),
-    progressComment: jsonPayload?.progressComment,
-    generateSummary: jsonPayload?.generateSummary,
-    // permissions: inputs > repoSettings > fallbacks
-    push: inputs.push ?? repoSettings.push ?? "restricted",
-    shell: resolvedShell,
-    // set by proxy logic in main.ts when routing through OpenRouter
-    proxyModel: void 0
-  };
-}
-function resolveOutputSchema() {
-  const raw2 = core6.getInput("output_schema");
-  if (!raw2) return void 0;
-  let parsed2;
-  try {
-    parsed2 = JSON.parse(raw2);
-  } catch {
-    throw new Error(`invalid output_schema: not valid JSON`);
-  }
-  if (!parsed2 || typeof parsed2 !== "object" || Array.isArray(parsed2)) {
-    throw new Error(`invalid output_schema: must be a JSON object`);
-  }
-  log.info("\xBB structured output schema provided \u2014 output will be required");
-  return parsed2;
-}
-
 // utils/proxy.ts
 var core8 = __toESM(require_core(), 1);
 
@@ -163145,7 +163320,10 @@ async function resolveTokens(params) {
     contents: "write",
     pull_requests: "write",
     issues: "write",
-    checks: "read",
+    // write (not read) so the run can post `pullfrog` / `pullfrog-approval`
+    // commit-status check-runs for branch protection. the app already grants
+    // checks:write; this scopes the MCP token up to use it.
+    checks: "write",
     actions: "read"
   };
   const mcpToken = await acquireNewToken({ repos: writeRepos, permissions: mcpPermissions });
@@ -163254,7 +163432,9 @@ async function resolveTokens(params) {
   };
   const removeSignalHandler = onExitSignal(dispose);
   return {
-    gitToken,
+    get gitToken() {
+      return currentGitToken;
+    },
     mcpToken,
     readToken,
     refreshGitToken,
@@ -163694,7 +163874,11 @@ async function resolveRunContextData(params) {
   } catch {
   }
   const [repoResponse, runContext] = await Promise.all([
-    params.octokit.repos.get({ owner: repoContext.owner, repo: repoContext.name }),
+    op(() => params.octokit.repos.get({ owner: repoContext.owner, repo: repoContext.name }), {
+      name: "repos.get",
+      retries: [100, 500],
+      bail: (error49) => !isTransientOctokitError(error49)
+    })(),
     fetchRunContext({ token: params.token, repoContext, oidcToken })
   ]);
   return {
@@ -163979,13 +164163,20 @@ async function dispatchFollowUpReReview(ctx, reviewedSha) {
     eventInstructions: RE_REVIEW_PREAMBLE,
     event
   };
-  await ctx.octokit.rest.actions.createWorkflowDispatch({
-    owner: ctx.repo.owner,
-    repo: ctx.repo.name,
-    workflow_id: getCurrentWorkflowFilename(),
-    ref: pr.data.base.repo.default_branch,
-    inputs: { prompt: JSON.stringify(payload) }
-  });
+  await op(
+    () => ctx.octokit.rest.actions.createWorkflowDispatch({
+      owner: ctx.repo.owner,
+      repo: ctx.repo.name,
+      workflow_id: getCurrentWorkflowFilename(),
+      ref: pr.data.base.repo.default_branch,
+      inputs: { prompt: JSON.stringify(payload) }
+    }),
+    {
+      name: "reReviewDispatch",
+      retries: [500, 2e3],
+      bail: (error49) => !isTransientOctokitError(error49)
+    }
+  )();
 }
 function getCurrentWorkflowFilename() {
   const ref = process.env.GITHUB_WORKFLOW_REF ?? "";
@@ -163993,6 +164184,62 @@ function getCurrentWorkflowFilename() {
   return match3?.[1] ?? "pullfrog.yml";
 }
 
+// utils/statusChecks.ts
+var COMPLETION_CHECK = "pullfrog";
+var APPROVAL_CHECK = "pullfrog-approval";
+async function createCheckRun(ctx, params) {
+  const createParams = {
+    owner: ctx.repo.owner,
+    repo: ctx.repo.name,
+    name: params.name,
+    head_sha: params.headSha,
+    status: "completed",
+    conclusion: params.conclusion,
+    output: { title: params.title, summary: params.summary }
+  };
+  if (ctx.runId) {
+    createParams.details_url = `https://github.com/${ctx.repo.owner}/${ctx.repo.name}/actions/runs/${ctx.runId}`;
+  }
+  await ctx.octokit.rest.checks.create(createParams);
+  log.info(`\xBB posted ${params.name} check (${params.conclusion}) on ${params.headSha.slice(0, 7)}`);
+}
+async function reportStatusChecks(ctx, params) {
+  if (!ctx.payload.statusChecks) return;
+  const event = ctx.payload.event;
+  const pullNumber = event.issue_number;
+  if (event.is_pr !== true || typeof pullNumber !== "number") return;
+  let headSha;
+  try {
+    const pr = await ctx.octokit.rest.pulls.get({
+      owner: ctx.repo.owner,
+      repo: ctx.repo.name,
+      pull_number: pullNumber
+    });
+    headSha = pr.data.head.sha;
+  } catch (err) {
+    log.debug(`status checks: failed to resolve PR #${pullNumber} head sha: ${err}`);
+    return;
+  }
+  const completionSha = primaryRepoState(ctx.toolState).checkoutSha ?? headSha;
+  await createCheckRun(ctx, {
+    name: COMPLETION_CHECK,
+    headSha: completionSha,
+    conclusion: params.runSucceeded ? "success" : "failure",
+    title: params.runSucceeded ? "Pullfrog run completed" : "Pullfrog run failed",
+    summary: params.runSucceeded ? "The Pullfrog run finished successfully." : "The Pullfrog run failed or timed out. See the run logs for details."
+  }).catch((err) => log.debug(`status checks: ${COMPLETION_CHECK} post failed: ${err}`));
+  const approval = ctx.toolState.approval;
+  if (params.runSucceeded && approval) {
+    await createCheckRun(ctx, {
+      name: APPROVAL_CHECK,
+      headSha: approval.sha ?? headSha,
+      conclusion: approval.wouldApprove ? "success" : "failure",
+      title: approval.wouldApprove ? "Pullfrog would approve" : "Pullfrog would not approve",
+      summary: approval.wouldApprove ? "Pullfrog has no outstanding review feedback on this PR." : "Pullfrog has outstanding review feedback or requested changes on this PR."
+    }).catch((err) => log.debug(`status checks: ${APPROVAL_CHECK} post failed: ${err}`));
+  }
+}
+
 // utils/runLifecycle.ts
 async function persistRunArtifacts(toolContext) {
   await postReviewCleanup(toolContext).catch((error49) => {
@@ -164036,6 +164283,12 @@ async function finalizeSuccessRun(input) {
     log.info(`::pullfrog-output::${Buffer.from(input.toolState.output).toString("base64")}`);
     core10.setOutput("result", input.toolState.output);
   }
+  if (input.result.success) {
+    await approveAfterFix(input.toolContext).catch((error49) => {
+      log.debug(`fix auto-approval failed: ${error49}`);
+    });
+  }
+  await reportStatusChecks(input.toolContext, { runSucceeded: input.result.success });
 }
 async function writeRunErrorOutputs(input) {
   try {
@@ -164462,7 +164715,11 @@ async function main() {
           get githubInstallationToken() {
             return getGitHubInstallationToken();
           },
-          gitToken: tokenRef.gitToken,
+          // live getter, same reason as #891 above — reads the current git token
+          // (canonical rationale on TokenRef.gitToken). see #964.
+          get gitToken() {
+            return tokenRef.gitToken;
+          },
           refreshGitToken: tokenRef.refreshGitToken,
           readToken: tokenRef.readToken,
           xrepo: payload.xrepo,
@@ -164712,6 +164969,7 @@ ${instructions.user}` : null,
       await writeRunErrorOutputs({ rendered, toolState });
       if (toolContext) {
         await persistRunArtifacts(toolContext);
+        await reportStatusChecks(toolContext, { runSucceeded: false });
       }
       return {
         success: false,