pullfrog 0.1.49 → 0.1.50

package/dist/internal/index.d.ts

@@ -3,7 +3,7 @@
  * Re-exports shared types, values, and utilities needed by the Next.js app.
  */
 export type { AuthorPermission, AutoTier, EffortPosition, ModelAlias, ModelProvider, Payload, PayloadEvent, ProviderConfig, PushPermission, ShellPermission, ToolPermission, WriteablePayload, XrepoConfig, } from "../external.ts";
-export { AUTO_EFFICIENT, AUTO_INTELLIGENT, DEFAULT_EFFORT_POSITION, DEFAULT_PROXY_MODEL, defaultAutoTier, EFFORT_ALIASES, getAutoSelectHintModel, getModelEffortLevels, getModelEnvVars, getModelManagedCredentials, getModelProvider, getProviderDisplayName, isAutoTier, isCardGatedModel, isEffortPosition, modelAliases, offeredRungs, parseEffortPosition, parseModel, providers, pullfrogMcpName, resolveAutoTier, resolveCliModel, resolveDisplayAlias, resolveModelRung, resolveModelSlug, resolveOpenRouterModel, resolveRung, rungLabel, rungPosition, } from "../external.ts";
+export { AUTO_EFFICIENT, AUTO_INTELLIGENT, DEFAULT_EFFORT_POSITION, DEFAULT_PROXY_MODEL, defaultAutoTier, EFFORT_ALIASES, getAutoSelectHintModel, getModelEffortLevels, getModelEnvVars, getModelManagedCredentials, getModelProvider, getProviderDisplayName, isAutoTier, isCardGatedModel, isEffortPosition, modelAliases, modelHasStoredAuth, offeredRungs, parseEffortPosition, parseModel, providers, pullfrogMcpName, resolveAutoTier, resolveCliModel, resolveDisplayAlias, resolveModelRung, resolveModelSlug, resolveOpenRouterModel, resolveRung, rungLabel, rungPosition, } from "../external.ts";
 export type { Mode } from "../modes.ts";
 export { modes } from "../modes.ts";
 export { commercialPaywallBody } from "../utils/billingErrors.ts";
@@ -12,6 +12,7 @@ export { buildPullfrogFooter, PULLFROG_DIVIDER, stripExistingFooter, } from "../
 export type { CodexAuthBody } from "../utils/codexOAuth.ts";
 export { decodeJwtExpMs, OAuthInvalidGrantError, parseCodexAuthBody, refreshCodexAuthBody, stringifyCodexAuthBody, } from "../utils/codexOAuth.ts";
 export type { ResourceUsage, UsageSummary } from "../utils/github.ts";
+export { isPullfrog } from "../utils/isPullfrog.ts";
 export { isLeapingIntoActionCommentBody, LEAPING_INTO_ACTION_PREFIX, } from "../utils/leapingComment.ts";
 export { MAX_LEARNINGS_LENGTH, truncateAtLineBoundary } from "../utils/learningsTruncate.ts";
 export type { CreateProgressCommentTarget, ProgressComment, ProgressCommentType, } from "../utils/progressComment.ts";

package/dist/internal.js

@@ -659,6 +659,11 @@ function getModelManagedCredentials(slug) {
   const providerConfig = providers[parsed.provider];
   return providerConfig?.managedCredentials?.slice() ?? [];
 }
+function modelHasStoredAuth(params) {
+  const slug = resolveDisplayAlias(params.model)?.slug ?? params.model;
+  const authVars = [...getModelEnvVars(slug), ...getModelManagedCredentials(slug)];
+  return authVars.some((v) => params.secretNames.includes(v));
+}
 var modelAliases = Object.entries(providers).flatMap(
   ([providerKey, config]) => Object.entries(config.models).map(([modelId, def]) => ({
     slug: `${providerKey}/${modelId}`,
@@ -1338,6 +1343,12 @@ function stringifyCodexAuthBody(body) {
 `;
 }
 
+// utils/isPullfrog.ts
+function isPullfrog(actor) {
+  actor = actor?.toLowerCase().replace("[bot]", "");
+  return !!actor && (actor === "pullfrog" || actor === "pullfrogdev");
+}
+
 // utils/leapingComment.ts
 var LEAPING_INTO_ACTION_PREFIX = "Leaping into action";
 function isLeapingIntoActionCommentBody(body) {
@@ -1456,8 +1467,8 @@ async function createLeapingProgressComment(ctx, target, body) {
 }
 
 // utils/runStatusCheck.ts
-var RUN_STATUS_CHECK_NAME = "Pullfrog";
-var APPROVAL_CHECK_NAME = "Pullfrog approval";
+var RUN_STATUS_CHECK_NAME = "pullfrog";
+var APPROVAL_CHECK_NAME = "pullfrog-approval";
 var IN_PROGRESS_OUTPUT = {
   title: "Pullfrog is running",
   summary: "Pullfrog is working on this pull request. This check updates when the run finishes."
@@ -1608,8 +1619,10 @@ export {
   isCardGatedModel,
   isEffortPosition,
   isLeapingIntoActionCommentBody,
+  isPullfrog,
   isValidTimeString,
   modelAliases,
+  modelHasStoredAuth,
   modes,
   offeredRungs,
   parseCodexAuthBody,

package/dist/mcp/server.d.ts

@@ -24,6 +24,7 @@ export interface ToolContext {
     prApproveEnabled: boolean;
     autoMergeEnabled: boolean;
     signedCommits: boolean;
+    repoIntelligence: boolean;
     modeInstructions: Record<string, string>;
     toolState: ToolState;
     runId: number | undefined;

package/dist/mcp/similarIssues.d.ts

@@ -0,0 +1,11 @@
+import type { ToolContext } from "./server.ts";
+export declare const SimilarIssues: import("arktype/internal/variants/object.ts").ObjectType<{
+    issue_number: number;
+}, {}>;
+export declare function SimilarIssuesTool(ctx: ToolContext): import("fastmcp").Tool<any, import("@standard-schema/spec").StandardSchemaV1<{
+    issue_number: number;
+}, {
+    issue_number: number;
+}>> & {
+    mutates?: boolean;
+};

package/dist/models.d.ts

@@ -128,6 +128,16 @@ export declare function getModelEnvVars(slug: string): string[];
  * a manual-paste option in `init` or the AgentSettings env-var button row.
  * see `provider.managedCredentials` and wiki/codex-auth.md. */
 export declare function getModelManagedCredentials(slug: string): string[];
+/**
+ * Whether one of `secretNames` can run `model` — the Router opt-out predicate,
+ * shared so every caller decides the same way. Auto-tier sentinels and
+ * deprecated aliases resolve first; `getModelEnvVars("auto/intelligent")` is
+ * `[]` otherwise.
+ */
+export declare function modelHasStoredAuth(params: {
+    model: string;
+    secretNames: string[];
+}): boolean;
 export declare const modelAliases: ModelAlias[];
 /**
  * `repo.model` sentinels for the two managed auto tiers. stored verbatim in

package/dist/utils/activity.d.ts

@@ -16,6 +16,31 @@ export declare const DEFAULT_ACTIVITY_TIMEOUT_MS = 300000;
  * genuinely hung run is only GitHub Actions minutes, not tokens.
  */
 export declare const AGENT_ACTIVITY_TIMEOUT_MS = 900000;
+/**
+ * Budget for the window before the agent's FIRST streamed event, which the flat
+ * budget above cannot justify: no tool has been called yet, so there is no
+ * in-flight tool call to protect (#1120).
+ *
+ * The window it guards is a provider that accepts the request and then never
+ * completes the stream. Reproduced against a stalling endpoint: the request goes
+ * out (81KB of prompt accepted), and opencode emits neither `part.updated` nor
+ * `session.error` — so the run looks alive while doing nothing. A per-request
+ * client timeout does NOT help; measured, opencode reacts to one by silently
+ * RETRYING (4 requests in 85s against an 8s budget vs 1 with none), so only a
+ * total-elapsed bound ends it.
+ *
+ * Sized off a direct measurement of time-to-first-model-part over 83 successful
+ * runs across 60+ repos (2026-07-30 onward): p50 5.6s, p90 8.4s, max 39.0s, and
+ * ZERO runs above 60s. 120s is ~3x the observed max and ~14x p90.
+ *
+ * Note this is NOT the "520s legitimate outlier" figure quoted in #1120 — that
+ * measured time to the first LOGGED line (`» thinking` is emitted when the
+ * reasoning block *ends*, carrying its own duration), on a runner concurrently
+ * busy with `npm ci`. The clock here starts on the first streamed part, which
+ * lands much earlier. Upstream's own proposal for this bug used a 30s
+ * first-byte budget (anomalyco/opencode#29420), so 120s stays conservative.
+ */
+export declare const AGENT_FIRST_EVENT_TIMEOUT_MS = 120000;
 export declare const DEFAULT_ACTIVITY_CHECK_INTERVAL_MS = 5000;
 export declare const ACTIVITY_NOISE_PATTERNS: readonly RegExp[];
 export declare function isActivityNoise(chunk: string | Uint8Array): boolean;

package/dist/utils/agentHangReport.d.ts

@@ -18,6 +18,19 @@ export type AgentDiagnostic = {
     lastProviderError: string | undefined;
     /** count of stdout events successfully parsed before the failure. */
     eventCount: number;
+    /**
+     * idle span the watchdog measured, in seconds. set structurally because the
+     * opencode harness's error string carries only prose — re-parsing it dropped
+     * the duration from the rendered explanation entirely.
+     */
+    idleSec: number | undefined;
+    /**
+     * whether the model produced a part of its own before the stall. `eventCount`
+     * cannot answer this: it counts every SSE event, and our own prompt echo plus
+     * session lifecycle events land before the provider is contacted, so it is
+     * never 0 on a live stream.
+     */
+    sawModelOutput: boolean;
 };
 /**
  * Build a user-facing markdown body for an agent hang or failure.

package/dist/utils/instructions.d.ts

@@ -12,6 +12,9 @@ interface InstructionsContext {
     /** commits are created via the GitHub API (commit_changes tool) so GitHub
      * signs them — flips the Git instructions to the signed-commits flow. */
     signedCommits: boolean;
+    /** the account is allowlisted for issue indexing, so `find_similar_issues`
+     * is registered on issue runs — adds the duplicate-check instruction. */
+    repoIntelligence: boolean;
     /** absolute path to the seeded learnings tmpfile, or null when the file
      * couldn't be seeded for some reason. main.ts always seeds, so in
      * practice this is always set; the null case keeps the type honest. */

package/dist/utils/isPullfrog.d.ts

@@ -0,0 +1,4 @@
+/**
+ * true when a GitHub login belongs to Pullfrog's production or development app.
+ */
+export declare function isPullfrog(actor: string | null | undefined): boolean;

package/dist/utils/payload.d.ts

@@ -44,12 +44,6 @@ export declare const Inputs: import("arktype/internal/variants/object.ts").Objec
 export type Inputs = typeof Inputs.infer;
 export type ResolvedPromptInput = string | typeof JsonPayload.infer;
 export declare function resolvePromptInput(): ResolvedPromptInput;
-/**
- * true when `actor` is Pullfrog's own GitHub identity — the bot login
- * (`pullfrog[bot]` / `pullfrogdev[bot]`) or the bare account. used to skip
- * self-triggered events and to recognize Pullfrog-originated review threads.
- */
-export declare const isPullfrog: (actor: string | null | undefined) => boolean;
 export declare function resolvePayload(resolvedPromptInput: ResolvedPromptInput, repoSettings: RepoSettings): {
     "~pullfrog": true;
     version: string;

package/dist/utils/runContext.d.ts

@@ -34,6 +34,7 @@ export interface RepoSettings {
     prApproveEnabled: boolean;
     autoMergeEnabled: boolean;
     signedCommits: boolean;
+    repoIntelligence: boolean;
     progressComments: boolean;
     statusChecks: boolean;
     modeInstructions: Record<string, string>;

package/dist/utils/runStatusCheck.d.ts

@@ -23,12 +23,17 @@
  */
 /**
  * the run-lifecycle check. verdict-agnostic — it reports that a run happened, not what it
- * found. this string IS the branch-protection identifier, so changing it silently breaks
- * any repo that required the old name.
+ * found.
+ *
+ * **DO NOT RENAME.** A check run has no separate display name, so this string is also the
+ * context branch protection matches on. Renaming it on 2026-08-02 stopped the old context
+ * reporting and blocked merges on four customer repos; it was reverted. Most installs'
+ * branch protection is unreadable to us, so the blast radius cannot even be measured.
+ * See wiki/review-approval.md.
  */
-export declare const RUN_STATUS_CHECK_NAME = "Pullfrog";
+export declare const RUN_STATUS_CHECK_NAME = "pullfrog";
 /** the review-verdict check. opt-in, terminal-only, and deliberately separate from the above. */
-export declare const APPROVAL_CHECK_NAME = "Pullfrog approval";
+export declare const APPROVAL_CHECK_NAME = "pullfrog-approval";
 /**
  * The terminal states we report. Exactly GitHub's check-run `conclusion` enum, which
  * happens to be `WorkflowRunStatus` minus `running` — so the server can map a finished

package/dist/utils/statusChecks.d.ts

@@ -1,6 +1,6 @@
 import type { ToolContext } from "../mcp/server.ts";
 /**
- * post the `Pullfrog` (run lifecycle) and `Pullfrog approval` (review verdict)
+ * post the `pullfrog` (run lifecycle) and `pullfrog-approval` (review verdict)
  * commit-status check-runs.
  *
  *   - `Pullfrog` is on by default (`Repo.statusChecks`). the server already created it
@@ -8,7 +8,7 @@ import type { ToolContext } from "../mcp/server.ts";
  *     see `runStatusCheck.ts` for why a second create would leave two contradictory rows.
  *     the terminal-create fallback covers a payload with no `checkRun` (older server
  *     build mid-rolling-deploy, or a workflow driven outside Pullfrog's dispatch path).
- *   - `Pullfrog approval` stays opt-in (`status_checks: enabled`) and terminal-only:
+ *   - `pullfrog-approval` stays opt-in (`status_checks: enabled`) and terminal-only:
  *     it asserts a review verdict, which only exists once a run produces one. anchored
  *     to the exact reviewed sha so a mid-run push leaves the new head unapproved until
  *     a follow-up re-review reports.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pullfrog",
-  "version": "0.1.49",
+  "version": "0.1.50",
   "type": "module",
   "bin": {
     "pullfrog": "dist/cli.mjs",