pullfrog 0.1.36 → 0.1.38

package/dist/cli.mjs

@@ -102064,7 +102064,7 @@ var providers = {
     envVars: ["OPENCODE_API_KEY"],
     models: {
       "glm-5.1": {
-        displayName: "GLM 5.1",
+        displayName: "GLM 5.2",
         resolve: "opencode-go/glm-5.2",
         openRouterResolve: "openrouter/z-ai/glm-5.2",
         preferred: true
@@ -103001,7 +103001,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.36",
+  version: "0.1.38",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -104375,6 +104375,7 @@ async function finalizeAgentResult(params) {
 }
 var REFLECTION_SKIP_MODES = /* @__PURE__ */ new Set(["IncrementalReview"]);
 function shouldRunReflection(mode) {
+  if (process.env.PULLFROG_DISABLE_LEARNINGS_REFLECTION === "1") return false;
   if (!mode) return true;
   return !REFLECTION_SKIP_MODES.has(mode);
 }
@@ -151595,6 +151596,7 @@ function initToolState(params) {
     progressComment: resolved,
     hadProgressComment: !!resolved,
     prepushFailureCount: 0,
+    noopReviewSubmissions: 0,
     backgroundProcesses: /* @__PURE__ */ new Map(),
     usageEntries: []
   };
@@ -158383,6 +158385,14 @@ var PushBranch = type({
     "cross-repo runs only: the writable secondary repo whose checkout to push from (bare name, from list_repos). omit for the primary repo."
   )
 });
+function assertWritableMode(ctx, toolName) {
+  const mode = ctx.toolState?.selectedMode;
+  if (mode && NON_COMMITTING_MODES.has(mode)) {
+    throw new Error(
+      `${toolName} is blocked in ${mode} mode \u2014 review and plan runs must not push or commit code. finish by submitting your review (create_pull_request_review) or plan. if this PR genuinely needs a code change, that is a separate task from reviewing it.`
+    );
+  }
+}
 function assertPushTarget(ctx, params) {
   const branch = params.branch;
   const pushDest = params.pushDest;
@@ -158507,6 +158517,7 @@ function PushBranchTool(ctx) {
       if (pushPermission === "disabled") {
         throw new Error("Push is disabled. This repository is configured for read-only access.");
       }
+      assertWritableMode(ctx, "push_branch");
       const rc = resolveRepoCtx(ctx, repo);
       if (rc.access === "read") {
         throw new Error(
@@ -158633,6 +158644,7 @@ function CommitChangesTool(ctx) {
       if (pushPermission === "disabled") {
         throw new Error("Push is disabled. This repository is configured for read-only access.");
       }
+      assertWritableMode(ctx, "commit_changes");
       const branch = $2("git", ["rev-parse", "--abbrev-ref", "HEAD"], { log: false }).trim();
       if (branch === "HEAD") {
         throw new Error(
@@ -158971,6 +158983,7 @@ function DeleteBranchTool(ctx) {
           "Branch deletion requires push: enabled permission. Current mode only allows pushing to non-protected branches."
         );
       }
+      assertWritableMode(ctx, "delete_branch");
       rejectSpecialRef(params.branchName, "branchName");
       if (params.branchName === defaultBranch) {
         throw new Error(
@@ -159004,6 +159017,7 @@ function PushTagsTool(ctx) {
           "Tag pushing requires push: enabled permission. Current mode only allows pushing branches."
         );
       }
+      assertWritableMode(ctx, "push_tags");
       validateTagName(params.tag);
       const pushArgs = [...params.force ? ["-f"] : [], "origin", `refs/tags/${params.tag}`];
       await pushWithRetry(pushArgs, ctx.gitToken, ctx.refreshGitToken);
@@ -159033,7 +159047,10 @@ function formatModelLabel(params) {
   modelAliases.find((a) => a.resolve === params.model || a.openRouterResolve === params.model);
   const displayName = alias?.displayName ?? params.model;
   if (params.oss) {
-    return `\`${displayName}\` (free via [Pullfrog for OSS](https://pullfrog.com/for-oss))`;
+    const ossBase = `\`${displayName}\` (free via [Pullfrog for OSS](https://pullfrog.com/for-oss))`;
+    if (params.clamped?.reason !== "oss") return ossBase;
+    const configured = isAutoTier(params.clamped.from) ? "the intelligent tier" : `\`${resolveDisplayAlias(params.clamped.from)?.displayName ?? params.clamped.from}\``;
+    return `${ossBase} (${configured} not used \u2014 the program covers this model; add its [provider key](https://docs.pullfrog.com/models) to run your pick)`;
   }
   const base = alias?.isFree ? `\`${displayName}\` (free)` : `\`${displayName}\``;
   if (params.fallbackFrom) {
@@ -159944,12 +159961,23 @@ function duplicateReviewDecision(params) {
     reason: `review ${existing.id} was already submitted in this session; ignoring duplicate call (call \`checkout_pr\` again first if new commits were pushed)`
   };
 }
+var VERDICT_MARKERS = ["> \u2705", "> \u2139\uFE0F", "> [!IMPORTANT]", "> [!CAUTION]"];
+var MIN_UNMARKED_BODY_LENGTH = 20;
+var PLACEHOLDER_PATTERN = /\b(test|testing|placeholder|temp|foo|bar|asdf|dummy|sample)\b/i;
+var PLACEHOLDER_SCAN_LENGTH = 50;
+function isDegenerateReviewBody(body) {
+  const trimmed = body.trim();
+  if (VERDICT_MARKERS.some((marker) => trimmed.startsWith(marker))) return false;
+  if (trimmed.length < MIN_UNMARKED_BODY_LENGTH) return true;
+  return trimmed.length < PLACEHOLDER_SCAN_LENGTH && PLACEHOLDER_PATTERN.test(trimmed);
+}
+var MAX_CONSECUTIVE_NOOP_SUBMISSIONS = 4;
 function reviewSkipDecision(params) {
   if (params.body || params.hasComments) return null;
   if (!params.approved) {
     return {
       kind: "no-issues",
-      reason: params.requestChanges ? "request_changes with no body or comments \u2014 nothing to block on" : "no issues found \u2014 nothing to post"
+      reason: params.requestChanges ? "request_changes with no body or comments \u2014 nothing to block on" : "this call carried neither `body` nor `comments`, so nothing was posted. if you found no issues, you are done \u2014 do not call this tool again. if you meant to submit a review, the `body` parameter was missing from your tool call: resend it with `body` set to the full review text. if a resend drops `body` again, do not keep retrying and do not probe with placeholder text \u2014 write the review into `create_issue_comment` instead, which takes the same text under a smaller schema and is editable after posting. every successful call here posts a permanent, publicly visible review."
     };
   }
   if (!params.prApproveEnabled) {
@@ -159977,9 +160005,15 @@ function formatDroppedCommentsNote(dropped) {
 }
 var CreatePullRequestReview = type({
   pull_number: type.number.describe("The pull request number to review"),
+  // REQUIRED on purpose, not because an empty review is invalid — pass "" for
+  // that. models that emit tool calls without schema-constrained decoding drop
+  // optional parameters and keep required ones; in the incident log every
+  // required parameter survived and this one, when optional, vanished ~15 times
+  // running. required-ness is the only pressure that empirically held.
+  // see wiki/review-approval.md.
   body: type.string.describe(
-    "1-2 sentence high-level summary with urgency level, critical callouts, and feedback about code outside the diff. Specific feedback on diff lines goes in 'comments' array."
-  ).optional(),
+    `1-2 sentence high-level summary with urgency level, critical callouts, and feedback about code outside the diff. Specific feedback on diff lines goes in 'comments' array. ALWAYS pass this parameter \u2014 pass an empty string "" when approving with no commentary, never omit it.`
+  ),
   approved: type.boolean.describe(
     "Set to true to submit as an approval. Use for `> \u2705 No new issues found.` reviews where the PR is mergeable as-is and nothing in the body warrants code changes \u2014 approving also suppresses the Fix-button footer affordance so users don't dispatch a fix run on non-actionable feedback. Reserve approved: false for `> \u2139\uFE0F ...` (minor suggestions inline), `> [!IMPORTANT]` (recommended changes), and `> [!CAUTION]` (critical) reviews. Defaults to false (comment-only review). Mutually exclusive with request_changes. Approval is REJECTED while any unresolved Pullfrog review thread remains open on the PR (not just the latest commit's diff): resolve the threads the current code addresses (reply + resolve_review_thread) first, or submit a non-approving review if a real issue remains."
   ).optional(),
@@ -160024,6 +160058,11 @@ function CreatePullRequestReviewTool(ctx) {
           );
         }
         if (body) body = fixDoubleEscapedString(body);
+        if (body && isDegenerateReviewBody(body)) {
+          throw new Error(
+            `refusing to submit a review whose body looks like placeholder text: ${JSON.stringify(body)}. every submitted review is permanent and publicly visible on the contributor's PR \u2014 never probe this tool with test content. if the tool has been rejecting your submissions, the cause is your payload, not the tool: re-send with \`body\` set to the full review text, opening with a verdict marker (${VERDICT_MARKERS.join(", ")}).`
+          );
+        }
         const primary = primaryRepoState(ctx.toolState);
         primary.issueNumber = pull_number;
         const dup = duplicateReviewDecision({
@@ -160068,9 +160107,16 @@ function CreatePullRequestReviewTool(ctx) {
           prApproveEnabled: ctx.prApproveEnabled && !selfAuthored
         });
         if (skip) {
+          ctx.toolState.noopReviewSubmissions += 1;
           log.info(`skipping review submission: ${skip.reason}`);
+          if (ctx.toolState.noopReviewSubmissions >= MAX_CONSECUTIVE_NOOP_SUBMISSIONS) {
+            throw new Error(
+              `${ctx.toolState.noopReviewSubmissions} consecutive review submissions posted nothing \u2014 every one carried an empty payload. stop calling this tool: the run will report the review as unsubmitted. if you have review feedback, your tool calls are dropping the \`body\` parameter \u2014 write the review into \`create_issue_comment\` instead, which takes the same text and is recoverable if it goes wrong.`
+            );
+          }
           return { success: true, skipped: true, reason: skip.reason };
         }
+        ctx.toolState.noopReviewSubmissions = 0;
         let event = approved ? "APPROVE" : request_changes ? "REQUEST_CHANGES" : "COMMENT";
         if (event === "APPROVE" || event === "REQUEST_CHANGES") {
           if (!ctx.prApproveEnabled) {
@@ -165901,8 +165947,13 @@ async function resolveProxyModel(ctx) {
       `\xBB no model selected \u2014 using the cost-optimized default (${ctx.proxyModel}); pick a model in your Pullfrog repo settings for stronger reviews.`
     );
   }
-  if (!ctx.oss && ctx.payload.model && ctx.proxyModel === DEFAULT_PROXY_MODEL && resolveOpenRouterModel(ctx.payload.model) !== DEFAULT_PROXY_MODEL) {
-    if (isCardGatedModel(ctx.payload.model)) {
+  if (ctx.payload.model && ctx.proxyModel === DEFAULT_PROXY_MODEL && resolveOpenRouterModel(ctx.payload.model) !== DEFAULT_PROXY_MODEL) {
+    if (ctx.oss) {
+      ctx.toolState.modelClamped = { from: ctx.payload.model, reason: "oss" };
+      log.info(
+        `\xBB ${ctx.payload.model} overridden \u2014 Pullfrog for OSS covers ${ctx.proxyModel}; add a provider key in your Pullfrog settings to run your configured model.`
+      );
+    } else if (isCardGatedModel(ctx.payload.model)) {
       ctx.toolState.modelClamped = { from: ctx.payload.model, reason: "card" };
       log.warning(
         `\xBB ${ctx.payload.model} needs a card on file \u2014 using the efficient default (${ctx.proxyModel}); add a card in your Pullfrog org billing settings.`
@@ -168423,7 +168474,7 @@ async function runCli4(input) {
 }
 
 // cli.ts
-var VERSION10 = "0.1.36";
+var VERSION10 = "0.1.38";
 var bin = basename2(process.argv[1] || "");
 var PROG = bin === "pf" || bin === "pullfrog" ? bin : "pullfrog";
 var rawArgs = process.argv.slice(2);

package/dist/index.js

@@ -100135,7 +100135,7 @@ var providers = {
     envVars: ["OPENCODE_API_KEY"],
     models: {
       "glm-5.1": {
-        displayName: "GLM 5.1",
+        displayName: "GLM 5.2",
         resolve: "opencode-go/glm-5.2",
         openRouterResolve: "openrouter/z-ai/glm-5.2",
         preferred: true
@@ -101072,7 +101072,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.36",
+  version: "0.1.38",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -102446,6 +102446,7 @@ async function finalizeAgentResult(params) {
 }
 var REFLECTION_SKIP_MODES = /* @__PURE__ */ new Set(["IncrementalReview"]);
 function shouldRunReflection(mode) {
+  if (process.env.PULLFROG_DISABLE_LEARNINGS_REFLECTION === "1") return false;
   if (!mode) return true;
   return !REFLECTION_SKIP_MODES.has(mode);
 }
@@ -149708,6 +149709,7 @@ function initToolState(params) {
     progressComment: resolved,
     hadProgressComment: !!resolved,
     prepushFailureCount: 0,
+    noopReviewSubmissions: 0,
     backgroundProcesses: /* @__PURE__ */ new Map(),
     usageEntries: []
   };
@@ -156496,6 +156498,14 @@ var PushBranch = type({
     "cross-repo runs only: the writable secondary repo whose checkout to push from (bare name, from list_repos). omit for the primary repo."
   )
 });
+function assertWritableMode(ctx, toolName) {
+  const mode = ctx.toolState?.selectedMode;
+  if (mode && NON_COMMITTING_MODES.has(mode)) {
+    throw new Error(
+      `${toolName} is blocked in ${mode} mode \u2014 review and plan runs must not push or commit code. finish by submitting your review (create_pull_request_review) or plan. if this PR genuinely needs a code change, that is a separate task from reviewing it.`
+    );
+  }
+}
 function assertPushTarget(ctx, params) {
   const branch = params.branch;
   const pushDest = params.pushDest;
@@ -156620,6 +156630,7 @@ function PushBranchTool(ctx) {
       if (pushPermission === "disabled") {
         throw new Error("Push is disabled. This repository is configured for read-only access.");
       }
+      assertWritableMode(ctx, "push_branch");
       const rc = resolveRepoCtx(ctx, repo);
       if (rc.access === "read") {
         throw new Error(
@@ -156746,6 +156757,7 @@ function CommitChangesTool(ctx) {
       if (pushPermission === "disabled") {
         throw new Error("Push is disabled. This repository is configured for read-only access.");
       }
+      assertWritableMode(ctx, "commit_changes");
       const branch = $("git", ["rev-parse", "--abbrev-ref", "HEAD"], { log: false }).trim();
       if (branch === "HEAD") {
         throw new Error(
@@ -157084,6 +157096,7 @@ function DeleteBranchTool(ctx) {
           "Branch deletion requires push: enabled permission. Current mode only allows pushing to non-protected branches."
         );
       }
+      assertWritableMode(ctx, "delete_branch");
       rejectSpecialRef(params.branchName, "branchName");
       if (params.branchName === defaultBranch) {
         throw new Error(
@@ -157117,6 +157130,7 @@ function PushTagsTool(ctx) {
           "Tag pushing requires push: enabled permission. Current mode only allows pushing branches."
         );
       }
+      assertWritableMode(ctx, "push_tags");
       validateTagName(params.tag);
       const pushArgs = [...params.force ? ["-f"] : [], "origin", `refs/tags/${params.tag}`];
       await pushWithRetry(pushArgs, ctx.gitToken, ctx.refreshGitToken);
@@ -157146,7 +157160,10 @@ function formatModelLabel(params) {
   modelAliases.find((a) => a.resolve === params.model || a.openRouterResolve === params.model);
   const displayName = alias?.displayName ?? params.model;
   if (params.oss) {
-    return `\`${displayName}\` (free via [Pullfrog for OSS](https://pullfrog.com/for-oss))`;
+    const ossBase = `\`${displayName}\` (free via [Pullfrog for OSS](https://pullfrog.com/for-oss))`;
+    if (params.clamped?.reason !== "oss") return ossBase;
+    const configured = isAutoTier(params.clamped.from) ? "the intelligent tier" : `\`${resolveDisplayAlias(params.clamped.from)?.displayName ?? params.clamped.from}\``;
+    return `${ossBase} (${configured} not used \u2014 the program covers this model; add its [provider key](https://docs.pullfrog.com/models) to run your pick)`;
   }
   const base = alias?.isFree ? `\`${displayName}\` (free)` : `\`${displayName}\``;
   if (params.fallbackFrom) {
@@ -158057,12 +158074,23 @@ function duplicateReviewDecision(params) {
     reason: `review ${existing.id} was already submitted in this session; ignoring duplicate call (call \`checkout_pr\` again first if new commits were pushed)`
   };
 }
+var VERDICT_MARKERS = ["> \u2705", "> \u2139\uFE0F", "> [!IMPORTANT]", "> [!CAUTION]"];
+var MIN_UNMARKED_BODY_LENGTH = 20;
+var PLACEHOLDER_PATTERN = /\b(test|testing|placeholder|temp|foo|bar|asdf|dummy|sample)\b/i;
+var PLACEHOLDER_SCAN_LENGTH = 50;
+function isDegenerateReviewBody(body) {
+  const trimmed = body.trim();
+  if (VERDICT_MARKERS.some((marker) => trimmed.startsWith(marker))) return false;
+  if (trimmed.length < MIN_UNMARKED_BODY_LENGTH) return true;
+  return trimmed.length < PLACEHOLDER_SCAN_LENGTH && PLACEHOLDER_PATTERN.test(trimmed);
+}
+var MAX_CONSECUTIVE_NOOP_SUBMISSIONS = 4;
 function reviewSkipDecision(params) {
   if (params.body || params.hasComments) return null;
   if (!params.approved) {
     return {
       kind: "no-issues",
-      reason: params.requestChanges ? "request_changes with no body or comments \u2014 nothing to block on" : "no issues found \u2014 nothing to post"
+      reason: params.requestChanges ? "request_changes with no body or comments \u2014 nothing to block on" : "this call carried neither `body` nor `comments`, so nothing was posted. if you found no issues, you are done \u2014 do not call this tool again. if you meant to submit a review, the `body` parameter was missing from your tool call: resend it with `body` set to the full review text. if a resend drops `body` again, do not keep retrying and do not probe with placeholder text \u2014 write the review into `create_issue_comment` instead, which takes the same text under a smaller schema and is editable after posting. every successful call here posts a permanent, publicly visible review."
     };
   }
   if (!params.prApproveEnabled) {
@@ -158090,9 +158118,15 @@ function formatDroppedCommentsNote(dropped) {
 }
 var CreatePullRequestReview = type({
   pull_number: type.number.describe("The pull request number to review"),
+  // REQUIRED on purpose, not because an empty review is invalid — pass "" for
+  // that. models that emit tool calls without schema-constrained decoding drop
+  // optional parameters and keep required ones; in the incident log every
+  // required parameter survived and this one, when optional, vanished ~15 times
+  // running. required-ness is the only pressure that empirically held.
+  // see wiki/review-approval.md.
   body: type.string.describe(
-    "1-2 sentence high-level summary with urgency level, critical callouts, and feedback about code outside the diff. Specific feedback on diff lines goes in 'comments' array."
-  ).optional(),
+    `1-2 sentence high-level summary with urgency level, critical callouts, and feedback about code outside the diff. Specific feedback on diff lines goes in 'comments' array. ALWAYS pass this parameter \u2014 pass an empty string "" when approving with no commentary, never omit it.`
+  ),
   approved: type.boolean.describe(
     "Set to true to submit as an approval. Use for `> \u2705 No new issues found.` reviews where the PR is mergeable as-is and nothing in the body warrants code changes \u2014 approving also suppresses the Fix-button footer affordance so users don't dispatch a fix run on non-actionable feedback. Reserve approved: false for `> \u2139\uFE0F ...` (minor suggestions inline), `> [!IMPORTANT]` (recommended changes), and `> [!CAUTION]` (critical) reviews. Defaults to false (comment-only review). Mutually exclusive with request_changes. Approval is REJECTED while any unresolved Pullfrog review thread remains open on the PR (not just the latest commit's diff): resolve the threads the current code addresses (reply + resolve_review_thread) first, or submit a non-approving review if a real issue remains."
   ).optional(),
@@ -158137,6 +158171,11 @@ function CreatePullRequestReviewTool(ctx) {
           );
         }
         if (body) body = fixDoubleEscapedString(body);
+        if (body && isDegenerateReviewBody(body)) {
+          throw new Error(
+            `refusing to submit a review whose body looks like placeholder text: ${JSON.stringify(body)}. every submitted review is permanent and publicly visible on the contributor's PR \u2014 never probe this tool with test content. if the tool has been rejecting your submissions, the cause is your payload, not the tool: re-send with \`body\` set to the full review text, opening with a verdict marker (${VERDICT_MARKERS.join(", ")}).`
+          );
+        }
         const primary = primaryRepoState(ctx.toolState);
         primary.issueNumber = pull_number;
         const dup = duplicateReviewDecision({
@@ -158181,9 +158220,16 @@ function CreatePullRequestReviewTool(ctx) {
           prApproveEnabled: ctx.prApproveEnabled && !selfAuthored
         });
         if (skip) {
+          ctx.toolState.noopReviewSubmissions += 1;
           log.info(`skipping review submission: ${skip.reason}`);
+          if (ctx.toolState.noopReviewSubmissions >= MAX_CONSECUTIVE_NOOP_SUBMISSIONS) {
+            throw new Error(
+              `${ctx.toolState.noopReviewSubmissions} consecutive review submissions posted nothing \u2014 every one carried an empty payload. stop calling this tool: the run will report the review as unsubmitted. if you have review feedback, your tool calls are dropping the \`body\` parameter \u2014 write the review into \`create_issue_comment\` instead, which takes the same text and is recoverable if it goes wrong.`
+            );
+          }
           return { success: true, skipped: true, reason: skip.reason };
         }
+        ctx.toolState.noopReviewSubmissions = 0;
         let event = approved ? "APPROVE" : request_changes ? "REQUEST_CHANGES" : "COMMENT";
         if (event === "APPROVE" || event === "REQUEST_CHANGES") {
           if (!ctx.prApproveEnabled) {
@@ -164014,8 +164060,13 @@ async function resolveProxyModel(ctx) {
       `\xBB no model selected \u2014 using the cost-optimized default (${ctx.proxyModel}); pick a model in your Pullfrog repo settings for stronger reviews.`
     );
   }
-  if (!ctx.oss && ctx.payload.model && ctx.proxyModel === DEFAULT_PROXY_MODEL && resolveOpenRouterModel(ctx.payload.model) !== DEFAULT_PROXY_MODEL) {
-    if (isCardGatedModel(ctx.payload.model)) {
+  if (ctx.payload.model && ctx.proxyModel === DEFAULT_PROXY_MODEL && resolveOpenRouterModel(ctx.payload.model) !== DEFAULT_PROXY_MODEL) {
+    if (ctx.oss) {
+      ctx.toolState.modelClamped = { from: ctx.payload.model, reason: "oss" };
+      log.info(
+        `\xBB ${ctx.payload.model} overridden \u2014 Pullfrog for OSS covers ${ctx.proxyModel}; add a provider key in your Pullfrog settings to run your configured model.`
+      );
+    } else if (isCardGatedModel(ctx.payload.model)) {
       ctx.toolState.modelClamped = { from: ctx.payload.model, reason: "card" };
       log.warning(
         `\xBB ${ctx.payload.model} needs a card on file \u2014 using the efficient default (${ctx.proxyModel}); add a card in your Pullfrog org billing settings.`

package/dist/internal.js

@@ -326,7 +326,7 @@ var providers = {
     envVars: ["OPENCODE_API_KEY"],
     models: {
       "glm-5.1": {
-        displayName: "GLM 5.1",
+        displayName: "GLM 5.2",
         resolve: "opencode-go/glm-5.2",
         openRouterResolve: "openrouter/z-ai/glm-5.2",
         preferred: true
@@ -1209,7 +1209,10 @@ function formatModelLabel(params) {
   modelAliases.find((a) => a.resolve === params.model || a.openRouterResolve === params.model);
   const displayName = alias?.displayName ?? params.model;
   if (params.oss) {
-    return `\`${displayName}\` (free via [Pullfrog for OSS](https://pullfrog.com/for-oss))`;
+    const ossBase = `\`${displayName}\` (free via [Pullfrog for OSS](https://pullfrog.com/for-oss))`;
+    if (params.clamped?.reason !== "oss") return ossBase;
+    const configured = isAutoTier(params.clamped.from) ? "the intelligent tier" : `\`${resolveDisplayAlias(params.clamped.from)?.displayName ?? params.clamped.from}\``;
+    return `${ossBase} (${configured} not used \u2014 the program covers this model; add its [provider key](https://docs.pullfrog.com/models) to run your pick)`;
   }
   const base = alias?.isFree ? `\`${displayName}\` (free)` : `\`${displayName}\``;
   if (params.fallbackFrom) {

package/dist/mcp/review.d.ts

@@ -117,6 +117,31 @@ export declare function duplicateReviewDecision(params: {
     } | undefined;
     currentCheckoutSha: string | undefined;
 }): DuplicateReviewDecision | null;
+/**
+ * reject placeholder review bodies at the tool boundary.
+ *
+ * every successful create_pull_request_review call posts a permanent, publicly
+ * visible review that no Pullfrog tool can retract (`edit_issue_comment` 404s
+ * on a review id). a weak model that cannot get a real submission through
+ * eventually probes the tool with a minimal payload to test whether it works —
+ * `test`, `test body`, `placeholder`, `foo` — and that probe lands on a
+ * customer's PR. 27 such reviews reached 10 public repos between 2026-06-25 and
+ * 2026-07-18. the tool description already says "NEVER submit test or
+ * diagnostic reviews"; a prompt instruction is not a control.
+ *
+ * a body carrying a verdict marker is always accepted — `> ✅ No new issues
+ * found.` is a legitimate 24-char review. everything else must clear
+ * MIN_UNMARKED_BODY_LENGTH, which every observed placeholder fails and every
+ * observed real review passes.
+ */
+export declare function isDegenerateReviewBody(body: string): boolean;
+/**
+ * consecutive no-op submissions tolerated before the tool stops explaining and
+ * starts refusing. kimi-k2.7-code ran ~15 rounds of empty submissions against a
+ * misleading skip reason before probing with a placeholder; a bounded budget
+ * converts that unbounded loop into a run-visible failure.
+ */
+export declare const MAX_CONSECUTIVE_NOOP_SUBMISSIONS = 4;
 /**
  * decide whether to skip a review submission before any network call.
  *
@@ -126,6 +151,15 @@ export declare function duplicateReviewDecision(params: {
  *   1. `!approved` + empty body/comments: agent's "no issues found" result.
  *      skipping preserves the agent's intent (nothing to post is a fine
  *      outcome for a review run) without a spurious 422.
+ *      this shape is AMBIGUOUS: it is equally the signature of a weak model
+ *      that meant to submit a real review but dropped `body` from the tool
+ *      call. the skip reason must therefore describe the empty PAYLOAD, not
+ *      assert an empty VERDICT — a reason reading "no issues found" reads as
+ *      success to the agent, so it retries blind. kimi-k2.7-code looped ~15
+ *      times against the old wording, then probed the tool with
+ *      `body: "test"` to check whether it worked at all; that probe posted
+ *      permanently to a customer PR (software-mansion/TypeGPU#2730), and
+ *      26 more like it across 10 repos. see wiki/review-approval.md.
  *   2. `approved` + `!prApproveEnabled` + empty body/comments: the runtime
  *      downgrades APPROVE to COMMENT when prApproveEnabled is off, and the
  *      resulting empty-COMMENT is exactly the shape GitHub 422s. skipping
@@ -146,7 +180,7 @@ export declare function reviewSkipDecision(params: {
 export declare function formatDroppedCommentsNote(dropped: DroppedComment[]): string;
 export declare const CreatePullRequestReview: import("arktype/internal/variants/object.ts").ObjectType<{
     pull_number: number;
-    body?: string;
+    body: string;
     approved?: boolean;
     request_changes?: boolean;
     commit_id?: string;
@@ -161,7 +195,7 @@ export declare const CreatePullRequestReview: import("arktype/internal/variants/
 }, {}>;
 export declare function CreatePullRequestReviewTool(ctx: ToolContext): import("fastmcp").Tool<any, import("@standard-schema/spec").StandardSchemaV1<{
     pull_number: number;
-    body?: string;
+    body: string;
     approved?: boolean;
     request_changes?: boolean;
     commit_id?: string;
@@ -175,7 +209,7 @@ export declare function CreatePullRequestReviewTool(ctx: ToolContext): import("f
     }[];
 }, {
     pull_number: number;
-    body?: string;
+    body: string;
     approved?: boolean;
     request_changes?: boolean;
     commit_id?: string;

package/dist/toolState.d.ts

@@ -93,6 +93,7 @@ export interface ToolState {
     primaryRepoKey: string;
     selectedMode?: string;
     prepushFailureCount: number;
+    noopReviewSubmissions: number;
     backgroundProcesses: Map<string, BackgroundProcess>;
     browserDaemon?: BrowserDaemon | undefined;
     review?: {
@@ -139,7 +140,7 @@ export interface ToolState {
     unselectedProxyDefault?: boolean | undefined;
     modelClamped?: {
         from: string;
-        reason: "card" | "noRouterPath";
+        reason: "card" | "noRouterPath" | "oss";
     } | undefined;
     shaPinned?: boolean | undefined;
     oss?: boolean | undefined;

package/dist/utils/buildPullfrogFooter.d.ts

@@ -36,7 +36,7 @@ export interface BuildPullfrogFooterParams {
      */
     clamped?: {
         from: string;
-        reason: "card" | "noRouterPath";
+        reason: "card" | "noRouterPath" | "oss";
     } | undefined;
     /**
      * true when the run used the default proxy model only because no model was

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pullfrog",
-  "version": "0.1.36",
+  "version": "0.1.38",
   "type": "module",
   "bin": {
     "pullfrog": "dist/cli.mjs",