pullfrog 0.1.51 → 0.1.53

package/dist/utils/payload.d.ts

@@ -7,6 +7,7 @@ export declare const JsonPayload: import("arktype/internal/variants/object.ts").
     model?: string | undefined;
     modelExplicit?: boolean | undefined;
     effort?: string | number | undefined;
+    debug?: boolean | undefined;
     triggerer?: string | undefined;
     baseInstructions?: string | undefined;
     eventInstructions?: string;
@@ -33,6 +34,7 @@ export declare const Inputs: import("arktype/internal/variants/object.ts").Objec
     prompt_file?: string | undefined;
     model?: string | undefined;
     effort?: string | undefined;
+    debug?: "disabled" | "enabled" | undefined;
     timeout?: string | undefined;
     push?: "disabled" | "enabled" | "restricted" | undefined;
     shell?: "disabled" | "enabled" | "restricted" | undefined;
@@ -50,6 +52,7 @@ export declare function resolvePayload(resolvedPromptInput: ResolvedPromptInput,
     model: string | undefined;
     modelExplicit: boolean;
     effort: number | undefined;
+    debug: true | undefined;
     prompt: string;
     triggerer: string | undefined;
     baseInstructions: string | undefined;

package/dist/utils/rangeDiff.d.ts

@@ -32,7 +32,26 @@ type ComputeIncrementalDiffParams = {
  * - patch-text diffing (interdiff / diff-of-diffs): fragile, hunk offset noise on rebase
  * - range-diff on raw commit ranges: confused by commit reorganization across force-pushes
  */
-export declare function computeIncrementalDiff(params: ComputeIncrementalDiffParams): string | null;
+export type IncrementalDiffResult = 
+/** range-diff ran and produced a delta */
+{
+    status: "ok";
+    diff: string;
+}
+/** range-diff ran and the two versions are identical */
+ | {
+    status: "empty";
+}
+/** range-diff could not run — most often `beforeSha` has no ancestry to
+ *  merge-base against on a shallow clone. distinct from "empty" on purpose:
+ *  they were the same `null` before, so `checkout_pr` could not tell the
+ *  agent whether there was nothing to see or whether we had simply failed.
+ *  see #1139. */
+ | {
+    status: "unavailable";
+    reason: string;
+};
+export declare function computeIncrementalDiff(params: ComputeIncrementalDiffParams): IncrementalDiffResult;
 /**
  * transforms git range-diff output into a clean incremental diff.
  *

package/dist/utils/runContext.d.ts

@@ -37,6 +37,7 @@ export interface RepoSettings {
     repoIntelligence: boolean;
     progressComments: boolean;
     statusChecks: boolean;
+    approvalCheck: boolean;
     modeInstructions: Record<string, string>;
     learnings: string | null;
     learningsHeadings: LearningsHeading[];

package/dist/utils/runEffort.d.ts

@@ -21,6 +21,21 @@ export interface RunEffort {
     /** the catalog alias the ladder came from, if we recognized one. */
     alias: ModelAlias | undefined;
 }
+/**
+ * the position a subsidised run is pinned to — the `high` rung on the ladder of
+ * the funded model. only reachable on the subsidy proxy, so the ladder is always
+ * the OpenRouter one.
+ *
+ * `high` by name, not position 0. position 0 was equivalent for as long as every
+ * subsidy candidate's ladder started at `high`, but DeepSeek V4 Flash 0731
+ * publishes `low, high, max` on the OpenRouter route, so the floor would have
+ * silently dropped a level the moment that became the funded default — undoing
+ * the `high`-effort result #1063 chose the tier on. a model publishing no `high`
+ * falls back to its own floor.
+ */
+export declare function ossEffortFloor(ctx: {
+    payload: ResolvedPayload;
+}): EffortPosition;
 export declare function resolveRunEffort(ctx: {
     payload: ResolvedPayload;
     resolvedModel?: string | undefined;

package/dist/utils/runErrorRenderer.d.ts

@@ -27,6 +27,14 @@
  *   4. ProviderModelNotFoundError — configured model id no longer in the
  *      OpenCode catalog; renders a nudge to pick a different model.
  *
+ *   4a. No-provider-available (#1077) — the model IS in the catalog but the
+ *      provider declines to route it on this account's plan (OpenCode Zen's
+ *      own refusal string). Same "pick another model" CTA, different reason.
+ *
+ *   4b. Context-window overflow (#1116) — terminal `Prompt is too long` /
+ *      `maximum context length is N tokens`. Actionable, so it renders on
+ *      both surfaces rather than collapsing to the one-line comment.
+ *
  *   5. Activity-timeout hang — `errorMessage` starts with
  *      `"activity timeout"` or `"agent still pending"` AND none of the
  *      above matched. The harness keeps structured diagnostic state on
@@ -43,8 +51,9 @@
  *      banner; the PR comment collapses to the same one-line logs link as
  *      the hang case, since the raw internal string helps nobody on the PR.
  *
- * Net: the actionable classifications (billing, API-key, model-not-found)
- * render identical bodies on both surfaces; the non-actionable ones (hang,
+ * Net: the actionable classifications (billing, API-key, model-not-found,
+ * no-provider-available, context-overflow) render identical bodies on both
+ * surfaces; the non-actionable ones (hang,
  * generic) keep the forensics in the Actions job summary and show a calm
  * one-liner in the PR comment, whose footer already carries Pullfrog
  * branding + rerun links.
@@ -61,4 +70,8 @@ export declare function renderRunError(input: {
         name: string;
     };
     agentDiagnostic: AgentDiagnostic | undefined;
+    /** the run is spending Pullfrog's Router wallet (a proxy key was minted), not
+     * the user's own provider credential. `payload.proxyModel` at both call
+     * sites. */
+    routerActive: boolean;
 }): RenderedRunError;

package/dist/utils/secrets.d.ts

@@ -10,6 +10,11 @@
 export declare const SENSITIVE_PATTERNS: RegExp[];
 export declare function isSensitiveEnvName(key: string): boolean;
 export declare function setEnvAllowlist(raw: string): void;
+/**
+ * `filterEnv()` minus the workflow-command file paths. For subprocesses that
+ * execute third-party code we do not sandbox — the dependency installers.
+ */
+export declare function filterEnvForUntrustedCode(): Record<string, string>;
 /** filter env vars using default-deny allowlist: safe set + user allowlist */
 export declare function filterEnv(): Record<string, string>;
 export type EnvMode = "restricted" | "inherit" | Record<string, string>;

package/dist/utils/setup.d.ts

@@ -53,6 +53,13 @@ export declare function setupTestRepo(options: SetupOptions): void;
 export declare function removeIncludeIfEntries(repoDir: string): void;
 export interface GitContext {
     gitToken: string;
+    /**
+     * re-mint the git token when GitHub's git edge rejects the one we hold. the
+     * fetch path had no re-mint at all, so `checkout_pr` died unrecoverably on a
+     * bad token instance while `push_branch` recovered from the identical
+     * failure. see #1115.
+     */
+    refreshGitToken?: ((stale: string) => Promise<string>) | undefined;
     owner: string;
     name: string;
     octokit: OctokitWithPlugins;

package/dist/utils/statusChecks.d.ts

@@ -8,7 +8,7 @@ import type { ToolContext } from "../mcp/server.ts";
  *     see `runStatusCheck.ts` for why a second create would leave two contradictory rows.
  *     the terminal-create fallback covers a payload with no `checkRun` (older server
  *     build mid-rolling-deploy, or a workflow driven outside Pullfrog's dispatch path).
- *   - `pullfrog-approval` stays opt-in (`status_checks: enabled`) and terminal-only:
+ *   - `pullfrog-approval` stays opt-in (`Repo.approvalCheck`, default off) and terminal-only:
  *     it asserts a review verdict, which only exists once a run produces one. anchored
  *     to the exact reviewed sha so a mid-run push leaves the new head unapproved until
  *     a follow-up re-review reports.

package/dist/utils/worktree.d.ts

@@ -0,0 +1,20 @@
+/** tracked paths with staged or unstaged modifications. */
+export declare function dirtyTrackedPaths(): Promise<Set<string>>;
+/**
+ * discard tracked-file mods that appeared since the `before` snapshot, so the
+ * customer checkout is clean before agent tools run — any dirt makes
+ * `checkout_pr` refuse for the rest of the run. paths already dirty at snapshot
+ * time are left alone, and untracked files (`node_modules`, etc.) are never
+ * touched.
+ *
+ * attribution is by WINDOW, not by writer: every tracked path dirtied while the
+ * window was open gets reverted, whoever wrote it. a caller must therefore close
+ * its window before the agent can write, or it will discard the agent's own work
+ * (#1146 — background prep cannot make that guarantee).
+ *
+ * `actor` names the phase that owns the window and is what the log line blames.
+ */
+export declare function restoreDirtiedSince(params: {
+    before: Set<string>;
+    actor: string;
+}): Promise<void>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pullfrog",
-  "version": "0.1.51",
+  "version": "0.1.53",
   "type": "module",
   "bin": {
     "pullfrog": "dist/cli.mjs",