pullfrog 0.1.37 → 0.1.39

package/dist/agents/opencodeShared.d.ts

@@ -16,6 +16,43 @@ export type OpenCodeConfig = {
 export declare function geminiHighThinkingOverrides(): Record<string, {
     options: object;
 }>;
+/**
+ * Build the `provider.openrouter.models[id].options` map that pins every Kimi
+ * K2 OpenRouter alias away from the Enforcer-less providers via OpenRouter's
+ * `provider: {ignore:[...]}` routing directive. Sourced from the model registry
+ * so a Kimi alias/route change in `action/models.ts` flows through automatically.
+ *
+ * Wiring: the per-model `options` object merges into the request options
+ * (opencode `session/llm/request.ts` `mergeOptions(base, model.options)`),
+ * gets wrapped under `providerOptions.openrouter` (`provider/transform.ts`
+ * `sdkKey("@openrouter/ai-sdk-provider") === "openrouter"`), and the OpenRouter
+ * AI-SDK provider spreads everything under `providerOptions.openrouter` straight
+ * into the request body (`@openrouter/ai-sdk-provider` `doStream`/`doGenerate`),
+ * so `provider` lands as the top-level routing object OpenRouter expects.
+ */
+export declare function kimiOpenRouterProviderOverrides(): Record<string, {
+    options: object;
+}>;
+/**
+ * Build the `provider.openrouter.models[id].options` map that pins the
+ * efficient-tier DeepSeek model to high reasoning effort on the OpenRouter
+ * route — the funded/OSS default path. The shape must nest under `options`
+ * (opencode builds `Model.options` only from the entry's `options` sub-object —
+ * `provider.ts` `mergeDeep(existingModel.options, model.options)`) and use a
+ * `reasoning` record (the openrouter provider forwards only `usage`/`reasoning`/
+ * `promptCacheKey`); a bare `reasoningEffort` sibling is silently dropped.
+ * Sourced from the registry so a resolve bump carries the override forward.
+ * `high` is the ceiling OpenRouter's unified `reasoning.effort` exposes
+ * (low/medium/high); DeepSeek's native `max` is only reachable via a direct
+ * DeepSeek key, not the OpenRouter route.
+ */
+export declare function deepseekHighEffortOverrides(): Record<string, {
+    options: {
+        reasoning: {
+            effort: string;
+        };
+    };
+}>;
 /**
  * Read-only `reviewfrog` subagent for lens-based review. Non-mutative +
  * non-recursive — enforced by the system prompt in reviewer.ts.

package/dist/cli.mjs

@@ -101934,11 +101934,20 @@ var providers = {
     displayName: "Moonshot AI",
     envVars: ["MOONSHOT_API_KEY"],
     models: {
+      // Moonshot's premium 1M-context multimodal reasoning flagship — pricier
+      // than K2.7-code, so it's the preferred BYOK pick but NOT the subsidized
+      // efficient default (that stays K2 via AUTO_EFFICIENT).
+      "kimi-k3": {
+        displayName: "Kimi K3",
+        resolve: "moonshotai/kimi-k3",
+        openRouterResolve: "openrouter/moonshotai/kimi-k3",
+        preferred: true,
+        subagentModel: "kimi-k2"
+      },
       "kimi-k2": {
         displayName: "Kimi K2",
         resolve: "moonshotai/kimi-k2.7-code",
-        openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code",
-        preferred: true
+        openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code"
       }
     }
   }),
@@ -102032,10 +102041,11 @@ var providers = {
         resolve: "opencode/kimi-k2.6",
         openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code"
       },
+      // Zen serves m2.5; the funded OpenRouter path tracks the current m2.7.
       "minimax-m2.5": {
         displayName: "MiniMax M2",
         resolve: "opencode/minimax-m2.5",
-        openRouterResolve: "openrouter/minimax/minimax-m2.5"
+        openRouterResolve: "openrouter/minimax/minimax-m2.7"
       },
       "gpt-5-nano": {
         displayName: "GPT Nano",
@@ -102223,10 +102233,21 @@ var providers = {
         resolve: "openrouter/moonshotai/kimi-k2.7-code",
         openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code"
       },
+      "kimi-k3": {
+        displayName: "Kimi K3",
+        resolve: "openrouter/moonshotai/kimi-k3",
+        openRouterResolve: "openrouter/moonshotai/kimi-k3"
+      },
+      // slug pins the m2 line for DB stability; resolve tracks the current m2.7.
       "minimax-m2.5": {
         displayName: "MiniMax M2",
-        resolve: "openrouter/minimax/minimax-m2.5",
-        openRouterResolve: "openrouter/minimax/minimax-m2.5"
+        resolve: "openrouter/minimax/minimax-m2.7",
+        openRouterResolve: "openrouter/minimax/minimax-m2.7"
+      },
+      "minimax-m3": {
+        displayName: "MiniMax M3",
+        resolve: "openrouter/minimax/minimax-m3",
+        openRouterResolve: "openrouter/minimax/minimax-m3"
       }
     }
   })
@@ -102275,7 +102296,7 @@ var modelAliases = Object.entries(providers).flatMap(
 var AUTO_EFFICIENT = "auto/efficient";
 var AUTO_INTELLIGENT = "auto/intelligent";
 var AUTO_TIER_TARGET = {
-  [AUTO_EFFICIENT]: "moonshotai/kimi-k2",
+  [AUTO_EFFICIENT]: "deepseek/deepseek-pro",
   [AUTO_INTELLIGENT]: "anthropic/claude-opus"
 };
 function isAutoTier(slug2) {
@@ -103001,7 +103022,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.37",
+  version: "0.1.39",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -104375,6 +104396,7 @@ async function finalizeAgentResult(params) {
 }
 var REFLECTION_SKIP_MODES = /* @__PURE__ */ new Set(["IncrementalReview"]);
 function shouldRunReflection(mode) {
+  if (process.env.PULLFROG_DISABLE_LEARNINGS_REFLECTION === "1") return false;
   if (!mode) return true;
   return !REFLECTION_SKIP_MODES.has(mode);
 }
@@ -110226,6 +110248,19 @@ function geminiHighThinkingOverrides() {
     ])
   );
 }
+var KIMI_ENFORCERLESS_PROVIDERS = ["siliconflow", "together"];
+function kimiOpenRouterProviderOverrides() {
+  return Object.fromEntries(
+    modelAliases.map((a) => a.openRouterResolve).filter((r) => r?.includes("kimi") ?? false).map((r) => [
+      r.replace(/^openrouter\//, ""),
+      { options: { provider: { ignore: KIMI_ENFORCERLESS_PROVIDERS } } }
+    ])
+  );
+}
+function deepseekHighEffortOverrides() {
+  const orModel = modelAliases.find((a) => a.slug === "deepseek/deepseek-pro")?.openRouterResolve?.replace(/^openrouter\//, "");
+  return orModel ? { [orModel]: { options: { reasoning: { effort: "high" } } } } : {};
+}
 function buildReviewerAgentConfig(orchestratorModel) {
   const overrides = deriveSubagentModels(orchestratorModel);
   return {
@@ -110294,9 +110329,18 @@ function buildSecurityConfig(ctx, model) {
       log.info(`\xBB subagent models: reviewfrog=${reviewerModel}`);
       return cfg;
     })(),
-    // gemini-3 thinking pinned to high for review depth; gpt and anthropic
-    // effort set elsewhere (gpt: upstream default, anthropic: --effort flag in claude.ts).
-    provider: { google: { models: geminiHighThinkingOverrides() } }
+    // gemini-3 thinking pinned to high for review depth; deepseek (funded
+    // efficient tier) pinned to high reasoning effort, and kimi pinned away
+    // from Enforcer-less openrouter providers (siliconflow / together) that
+    // drop optional tool-call params — both per-model on the openrouter route,
+    // so other models are unaffected. gpt/anthropic effort set elsewhere (gpt:
+    // upstream default, anthropic: --effort flag in claude.ts). see opencodeShared.ts.
+    provider: {
+      google: { models: geminiHighThinkingOverrides() },
+      openrouter: {
+        models: { ...deepseekHighEffortOverrides(), ...kimiOpenRouterProviderOverrides() }
+      }
+    }
   };
   if (model) {
     config3.model = model;
@@ -158384,6 +158428,14 @@ var PushBranch = type({
     "cross-repo runs only: the writable secondary repo whose checkout to push from (bare name, from list_repos). omit for the primary repo."
   )
 });
+function assertWritableMode(ctx, toolName) {
+  const mode = ctx.toolState?.selectedMode;
+  if (mode && NON_COMMITTING_MODES.has(mode)) {
+    throw new Error(
+      `${toolName} is blocked in ${mode} mode \u2014 review and plan runs must not push or commit code. finish by submitting your review (create_pull_request_review) or plan. if this PR genuinely needs a code change, that is a separate task from reviewing it.`
+    );
+  }
+}
 function assertPushTarget(ctx, params) {
   const branch = params.branch;
   const pushDest = params.pushDest;
@@ -158508,6 +158560,7 @@ function PushBranchTool(ctx) {
       if (pushPermission === "disabled") {
         throw new Error("Push is disabled. This repository is configured for read-only access.");
       }
+      assertWritableMode(ctx, "push_branch");
       const rc = resolveRepoCtx(ctx, repo);
       if (rc.access === "read") {
         throw new Error(
@@ -158634,6 +158687,7 @@ function CommitChangesTool(ctx) {
       if (pushPermission === "disabled") {
         throw new Error("Push is disabled. This repository is configured for read-only access.");
       }
+      assertWritableMode(ctx, "commit_changes");
       const branch = $2("git", ["rev-parse", "--abbrev-ref", "HEAD"], { log: false }).trim();
       if (branch === "HEAD") {
         throw new Error(
@@ -158972,6 +159026,7 @@ function DeleteBranchTool(ctx) {
           "Branch deletion requires push: enabled permission. Current mode only allows pushing to non-protected branches."
         );
       }
+      assertWritableMode(ctx, "delete_branch");
       rejectSpecialRef(params.branchName, "branchName");
       if (params.branchName === defaultBranch) {
         throw new Error(
@@ -159005,6 +159060,7 @@ function PushTagsTool(ctx) {
           "Tag pushing requires push: enabled permission. Current mode only allows pushing branches."
         );
       }
+      assertWritableMode(ctx, "push_tags");
       validateTagName(params.tag);
       const pushArgs = [...params.force ? ["-f"] : [], "origin", `refs/tags/${params.tag}`];
       await pushWithRetry(pushArgs, ctx.gitToken, ctx.refreshGitToken);
@@ -168461,7 +168517,7 @@ async function runCli4(input) {
 }
 
 // cli.ts
-var VERSION10 = "0.1.37";
+var VERSION10 = "0.1.39";
 var bin = basename2(process.argv[1] || "");
 var PROG = bin === "pf" || bin === "pullfrog" ? bin : "pullfrog";
 var rawArgs = process.argv.slice(2);

package/dist/index.js

@@ -100005,11 +100005,20 @@ var providers = {
     displayName: "Moonshot AI",
     envVars: ["MOONSHOT_API_KEY"],
     models: {
+      // Moonshot's premium 1M-context multimodal reasoning flagship — pricier
+      // than K2.7-code, so it's the preferred BYOK pick but NOT the subsidized
+      // efficient default (that stays K2 via AUTO_EFFICIENT).
+      "kimi-k3": {
+        displayName: "Kimi K3",
+        resolve: "moonshotai/kimi-k3",
+        openRouterResolve: "openrouter/moonshotai/kimi-k3",
+        preferred: true,
+        subagentModel: "kimi-k2"
+      },
       "kimi-k2": {
         displayName: "Kimi K2",
         resolve: "moonshotai/kimi-k2.7-code",
-        openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code",
-        preferred: true
+        openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code"
       }
     }
   }),
@@ -100103,10 +100112,11 @@ var providers = {
         resolve: "opencode/kimi-k2.6",
         openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code"
       },
+      // Zen serves m2.5; the funded OpenRouter path tracks the current m2.7.
       "minimax-m2.5": {
         displayName: "MiniMax M2",
         resolve: "opencode/minimax-m2.5",
-        openRouterResolve: "openrouter/minimax/minimax-m2.5"
+        openRouterResolve: "openrouter/minimax/minimax-m2.7"
       },
       "gpt-5-nano": {
         displayName: "GPT Nano",
@@ -100294,10 +100304,21 @@ var providers = {
         resolve: "openrouter/moonshotai/kimi-k2.7-code",
         openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code"
       },
+      "kimi-k3": {
+        displayName: "Kimi K3",
+        resolve: "openrouter/moonshotai/kimi-k3",
+        openRouterResolve: "openrouter/moonshotai/kimi-k3"
+      },
+      // slug pins the m2 line for DB stability; resolve tracks the current m2.7.
       "minimax-m2.5": {
         displayName: "MiniMax M2",
-        resolve: "openrouter/minimax/minimax-m2.5",
-        openRouterResolve: "openrouter/minimax/minimax-m2.5"
+        resolve: "openrouter/minimax/minimax-m2.7",
+        openRouterResolve: "openrouter/minimax/minimax-m2.7"
+      },
+      "minimax-m3": {
+        displayName: "MiniMax M3",
+        resolve: "openrouter/minimax/minimax-m3",
+        openRouterResolve: "openrouter/minimax/minimax-m3"
       }
     }
   })
@@ -100346,7 +100367,7 @@ var modelAliases = Object.entries(providers).flatMap(
 var AUTO_EFFICIENT = "auto/efficient";
 var AUTO_INTELLIGENT = "auto/intelligent";
 var AUTO_TIER_TARGET = {
-  [AUTO_EFFICIENT]: "moonshotai/kimi-k2",
+  [AUTO_EFFICIENT]: "deepseek/deepseek-pro",
   [AUTO_INTELLIGENT]: "anthropic/claude-opus"
 };
 function isAutoTier(slug2) {
@@ -101072,7 +101093,7 @@ var import_semver = __toESM(require_semver2(), 1);
 // package.json
 var package_default = {
   name: "pullfrog",
-  version: "0.1.37",
+  version: "0.1.39",
   type: "module",
   bin: {
     pullfrog: "dist/cli.mjs",
@@ -102446,6 +102467,7 @@ async function finalizeAgentResult(params) {
 }
 var REFLECTION_SKIP_MODES = /* @__PURE__ */ new Set(["IncrementalReview"]);
 function shouldRunReflection(mode) {
+  if (process.env.PULLFROG_DISABLE_LEARNINGS_REFLECTION === "1") return false;
   if (!mode) return true;
   return !REFLECTION_SKIP_MODES.has(mode);
 }
@@ -108339,6 +108361,19 @@ function geminiHighThinkingOverrides() {
     ])
   );
 }
+var KIMI_ENFORCERLESS_PROVIDERS = ["siliconflow", "together"];
+function kimiOpenRouterProviderOverrides() {
+  return Object.fromEntries(
+    modelAliases.map((a) => a.openRouterResolve).filter((r) => r?.includes("kimi") ?? false).map((r) => [
+      r.replace(/^openrouter\//, ""),
+      { options: { provider: { ignore: KIMI_ENFORCERLESS_PROVIDERS } } }
+    ])
+  );
+}
+function deepseekHighEffortOverrides() {
+  const orModel = modelAliases.find((a) => a.slug === "deepseek/deepseek-pro")?.openRouterResolve?.replace(/^openrouter\//, "");
+  return orModel ? { [orModel]: { options: { reasoning: { effort: "high" } } } } : {};
+}
 function buildReviewerAgentConfig(orchestratorModel) {
   const overrides = deriveSubagentModels(orchestratorModel);
   return {
@@ -108407,9 +108442,18 @@ function buildSecurityConfig(ctx, model) {
       log.info(`\xBB subagent models: reviewfrog=${reviewerModel}`);
       return cfg;
     })(),
-    // gemini-3 thinking pinned to high for review depth; gpt and anthropic
-    // effort set elsewhere (gpt: upstream default, anthropic: --effort flag in claude.ts).
-    provider: { google: { models: geminiHighThinkingOverrides() } }
+    // gemini-3 thinking pinned to high for review depth; deepseek (funded
+    // efficient tier) pinned to high reasoning effort, and kimi pinned away
+    // from Enforcer-less openrouter providers (siliconflow / together) that
+    // drop optional tool-call params — both per-model on the openrouter route,
+    // so other models are unaffected. gpt/anthropic effort set elsewhere (gpt:
+    // upstream default, anthropic: --effort flag in claude.ts). see opencodeShared.ts.
+    provider: {
+      google: { models: geminiHighThinkingOverrides() },
+      openrouter: {
+        models: { ...deepseekHighEffortOverrides(), ...kimiOpenRouterProviderOverrides() }
+      }
+    }
   };
   if (model) {
     config3.model = model;
@@ -156497,6 +156541,14 @@ var PushBranch = type({
     "cross-repo runs only: the writable secondary repo whose checkout to push from (bare name, from list_repos). omit for the primary repo."
   )
 });
+function assertWritableMode(ctx, toolName) {
+  const mode = ctx.toolState?.selectedMode;
+  if (mode && NON_COMMITTING_MODES.has(mode)) {
+    throw new Error(
+      `${toolName} is blocked in ${mode} mode \u2014 review and plan runs must not push or commit code. finish by submitting your review (create_pull_request_review) or plan. if this PR genuinely needs a code change, that is a separate task from reviewing it.`
+    );
+  }
+}
 function assertPushTarget(ctx, params) {
   const branch = params.branch;
   const pushDest = params.pushDest;
@@ -156621,6 +156673,7 @@ function PushBranchTool(ctx) {
       if (pushPermission === "disabled") {
         throw new Error("Push is disabled. This repository is configured for read-only access.");
       }
+      assertWritableMode(ctx, "push_branch");
       const rc = resolveRepoCtx(ctx, repo);
       if (rc.access === "read") {
         throw new Error(
@@ -156747,6 +156800,7 @@ function CommitChangesTool(ctx) {
       if (pushPermission === "disabled") {
         throw new Error("Push is disabled. This repository is configured for read-only access.");
       }
+      assertWritableMode(ctx, "commit_changes");
       const branch = $("git", ["rev-parse", "--abbrev-ref", "HEAD"], { log: false }).trim();
       if (branch === "HEAD") {
         throw new Error(
@@ -157085,6 +157139,7 @@ function DeleteBranchTool(ctx) {
           "Branch deletion requires push: enabled permission. Current mode only allows pushing to non-protected branches."
         );
       }
+      assertWritableMode(ctx, "delete_branch");
       rejectSpecialRef(params.branchName, "branchName");
       if (params.branchName === defaultBranch) {
         throw new Error(
@@ -157118,6 +157173,7 @@ function PushTagsTool(ctx) {
           "Tag pushing requires push: enabled permission. Current mode only allows pushing branches."
         );
       }
+      assertWritableMode(ctx, "push_tags");
       validateTagName(params.tag);
       const pushArgs = [...params.force ? ["-f"] : [], "origin", `refs/tags/${params.tag}`];
       await pushWithRetry(pushArgs, ctx.gitToken, ctx.refreshGitToken);

package/dist/internal.js

@@ -196,11 +196,20 @@ var providers = {
     displayName: "Moonshot AI",
     envVars: ["MOONSHOT_API_KEY"],
     models: {
+      // Moonshot's premium 1M-context multimodal reasoning flagship — pricier
+      // than K2.7-code, so it's the preferred BYOK pick but NOT the subsidized
+      // efficient default (that stays K2 via AUTO_EFFICIENT).
+      "kimi-k3": {
+        displayName: "Kimi K3",
+        resolve: "moonshotai/kimi-k3",
+        openRouterResolve: "openrouter/moonshotai/kimi-k3",
+        preferred: true,
+        subagentModel: "kimi-k2"
+      },
       "kimi-k2": {
         displayName: "Kimi K2",
         resolve: "moonshotai/kimi-k2.7-code",
-        openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code",
-        preferred: true
+        openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code"
       }
     }
   }),
@@ -294,10 +303,11 @@ var providers = {
         resolve: "opencode/kimi-k2.6",
         openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code"
       },
+      // Zen serves m2.5; the funded OpenRouter path tracks the current m2.7.
       "minimax-m2.5": {
         displayName: "MiniMax M2",
         resolve: "opencode/minimax-m2.5",
-        openRouterResolve: "openrouter/minimax/minimax-m2.5"
+        openRouterResolve: "openrouter/minimax/minimax-m2.7"
       },
       "gpt-5-nano": {
         displayName: "GPT Nano",
@@ -485,10 +495,21 @@ var providers = {
         resolve: "openrouter/moonshotai/kimi-k2.7-code",
         openRouterResolve: "openrouter/moonshotai/kimi-k2.7-code"
       },
+      "kimi-k3": {
+        displayName: "Kimi K3",
+        resolve: "openrouter/moonshotai/kimi-k3",
+        openRouterResolve: "openrouter/moonshotai/kimi-k3"
+      },
+      // slug pins the m2 line for DB stability; resolve tracks the current m2.7.
       "minimax-m2.5": {
         displayName: "MiniMax M2",
-        resolve: "openrouter/minimax/minimax-m2.5",
-        openRouterResolve: "openrouter/minimax/minimax-m2.5"
+        resolve: "openrouter/minimax/minimax-m2.7",
+        openRouterResolve: "openrouter/minimax/minimax-m2.7"
+      },
+      "minimax-m3": {
+        displayName: "MiniMax M3",
+        resolve: "openrouter/minimax/minimax-m3",
+        openRouterResolve: "openrouter/minimax/minimax-m3"
       }
     }
   })
@@ -546,7 +567,7 @@ var modelAliases = Object.entries(providers).flatMap(
 var AUTO_EFFICIENT = "auto/efficient";
 var AUTO_INTELLIGENT = "auto/intelligent";
 var AUTO_TIER_TARGET = {
-  [AUTO_EFFICIENT]: "moonshotai/kimi-k2",
+  [AUTO_EFFICIENT]: "deepseek/deepseek-pro",
   [AUTO_INTELLIGENT]: "anthropic/claude-opus"
 };
 function isAutoTier(slug) {

package/dist/models.d.ts

@@ -121,9 +121,11 @@ export declare const modelAliases: ModelAlias[];
  * concrete alias by `resolveDisplayAlias` below, so every downstream consumer
  * (CLI resolve, OpenRouter resolve, footer label) handles them transparently.
  *
- * `efficient` mirrors the OSS/default subsidy model (Kimi K2 — fast + cheap);
- * `intelligent` is the frontier pick (Claude Opus). a `null` model means the
- * tier hasn't been pinned: callers default by card status via `defaultAutoTier`.
+ * `efficient` mirrors the OSS/default subsidy model (DeepSeek V4 Pro — beats
+ * Kimi K2.7 on agentic-review quality at ~4-5x lower cost, run at high
+ * reasoning effort via `deepseekHighEffortOverrides`); `intelligent` is the
+ * frontier pick (Claude Opus). a `null` model means the tier hasn't been
+ * pinned: callers default by card status via `defaultAutoTier`.
  */
 export declare const AUTO_EFFICIENT = "auto/efficient";
 export declare const AUTO_INTELLIGENT = "auto/intelligent";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pullfrog",
-  "version": "0.1.37",
+  "version": "0.1.39",
   "type": "module",
   "bin": {
     "pullfrog": "dist/cli.mjs",